diff --git a/chacha20poly1305/docs/classes/Chacha20Poly1305.html b/chacha20poly1305/docs/classes/Chacha20Poly1305.html index 4e1031c24..020f5b436 100644 --- a/chacha20poly1305/docs/classes/Chacha20Poly1305.html +++ b/chacha20poly1305/docs/classes/Chacha20Poly1305.html @@ -37,7 +37,7 @@

Implements

+
  • Defined in src/aeads/chacha20Poly1305.ts:86
    • @@ -71,7 +71,7 @@

    constructorReturns Chacha20Poly1305

    +
  • Defined in src/algorithm.ts:16

    • Properties

    @@ -79,31 +79,31 @@

    Protected_api: SubtleCrypto = undefined

    +
  • Defined in src/algorithm.ts:4

    • Readonly id

    id: AeadId = AeadId.Chacha20Poly1305
    +
  • Defined in src/aeads/chacha20Poly1305.ts:87

    • Readonly keySize

    keySize: number = 32
    +
  • Defined in src/aeads/chacha20Poly1305.ts:88

    • Readonly nonceSize

    nonceSize: number = 12
    +
  • Defined in src/aeads/chacha20Poly1305.ts:89

    • Readonly tagSize

    tagSize: number = 16
    +
  • Defined in src/aeads/chacha20Poly1305.ts:90

    • Methods

    @@ -114,7 +114,7 @@

    ProtectedReturns void

    +
  • Defined in src/algorithm.ts:8

    • createEncryptionContext

    +
  • Defined in src/aeads/chacha20Poly1305.ts:92

    • init

      @@ -143,7 +143,7 @@

      Returns voidImplementation of AeadInterface.init

      Inherited from Algorithm.init

    +
  • Defined in src/algorithm.ts:20
    • diff --git a/chacha20poly1305/src/hpke-core.js b/chacha20poly1305/src/hpke-core.js index 7f029bb07..997fab9f0 100644 --- a/chacha20poly1305/src/hpke-core.js +++ b/chacha20poly1305/src/hpke-core.js @@ -1 +1 @@ -var x={Base:0,Psk:1,Auth:2,AuthPsk:3},ve={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},h=ve,Ae={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},g=Ae,Se={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},y=Se;var c=new Uint8Array(0);var f=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},l=class extends f{},ce=class extends f{},D=class extends f{},v=class extends f{},C=class extends f{},M=class extends f{},N=class extends f{},B=class extends f{},G=class extends f{},R=class extends f{},Y=class extends f{},m=class extends f{};var Ke=new Uint8Array([115,101,99]),A=class{constructor(e,t,r){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=r}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new l("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Ke,new Uint8Array(e),t)}catch(r){throw new N(r)}}_emitError(){return new Promise((e,t)=>{t(new m("Not available"))})}},F=class extends A{},q=class extends A{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}};var W=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},b=class extends W{constructor(){super()}init(e){this._api=e}},X=class extends W{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:c})}init(e,t){this._api=e,this._suiteId=t}};var he=["encrypt","decrypt"];var $=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.encrypt(n,this._key,t)}async open(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.decrypt(n,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,he)}},J=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}},Z=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}};var Q=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new m("createEncryptionContext() is not supported on ExportOnly")}};var le=new Uint8Array([72,80,75,69,45,118,49]),O=class extends X{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let r=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return r.set(le,0),r.set(this._suiteId,7),r.set(e,7+this._suiteId.byteLength),r.set(t,7+this._suiteId.byteLength+e.byteLength),r}buildLabeledInfo(e,t,r){let n=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(new Uint8Array([0,r]),0),n.set(le,2),n.set(this._suiteId,9),n.set(e,9+this._suiteId.byteLength),n.set(t,9+this._suiteId.byteLength+e.byteLength),n}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new l("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,t)}async expand(e,t,r){this.checkInit();let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),a=new ArrayBuffer(r),o=new Uint8Array(a),s=c,u=new Uint8Array(t),w=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let _=new Uint8Array(this.hashSize+u.length+1);for(let z=1,d=0;d=s.length?(o.set(s,d),d+=s.length):(o.set(s.slice(0,o.length-d),d),d+=o.length-d);return a}async extractAndExpand(e,t,r,n){this.checkInit();let a=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:r},a,n*8)}async labeledExtract(e,t,r){return await this.extract(e,this.buildLabeledIkm(t,r))}async labeledExpand(e,t,r,n){return await this.expand(e,this.buildLabeledInfo(t,r,n),n)}},S=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},K=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},E=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ee={},fe=Ie(globalThis,Ee);function Ie(i,e){return new Proxy(i,{get(t,r,n){return r in e?e[r]:i[r]},set(t,r,n){return r in e&&delete e[r],i[r]=n,!0},deleteProperty(t,r){let n=!1;return r in e&&(delete e[r],n=!0),r in i&&(delete i[r],n=!0),n},ownKeys(t){let r=Reflect.ownKeys(i),n=Reflect.ownKeys(e),a=new Set(n);return[...r.filter(o=>!a.has(o)),...n]},defineProperty(t,r,n){return r in e&&delete e[r],Reflect.defineProperty(i,r,n),!0},getOwnPropertyDescriptor(t,r){return r in e?Reflect.getOwnPropertyDescriptor(e,r):Reflect.getOwnPropertyDescriptor(i,r)},has(t,r){return r in e||r in i}})}var de=()=>typeof fe<"u",ye=()=>typeof caches<"u";var H=i=>typeof i=="object"&&i!==null&&typeof i.privateKey=="object"&&typeof i.publicKey=="object";function p(i,e){if(e<=0)throw new Error("i2Osp: too small size");if(i>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let r=0;r>8;return t}function be(i,e){if(i.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(i.byteLength);for(let r=0;rNumber.MAX_SAFE_INTEGER)throw new R("Message limit reached");e.seq+=1}};var V=class extends I{async open(e,t=c){let r;try{r=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(n){throw new G(n)}return this.incrementSeq(this._ctx),r}};var ee=class extends I{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}async seal(e,t=c){let r;try{r=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(n){throw new B(n)}return this.incrementSeq(this._ctx),r}};async function te(){if((de()||ye())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:i}=await import("crypto");return i.subtle}catch{throw new m("Web Cryptograph API not supported")}}var we=new Uint8Array([75,69,77,0,0]),Ue=new Uint8Array([101,97,101,95,112,114,107]),Oe=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),L=class extends b{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}init(e){super.init(e);let t=new Uint8Array(we);t.set(p(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new m(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new l("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new Y(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new D(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new v(t)}}async importKey(e,t,r=!0){await this._setup();try{return await this._prim.importKey(e,t,r)}catch(n){throw new v(n)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,r=await this._prim.serializePublicKey(t.publicKey),n=await this._prim.serializePublicKey(e.recipientPublicKey),a;if(e.senderKey===void 0)a=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let u=H(e.senderKey)?e.senderKey.privateKey:e.senderKey,w=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),_=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));a=j(w,_)}let o;if(e.senderKey===void 0)o=j(new Uint8Array(r),new Uint8Array(n));else{let u=H(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),w=await this._prim.serializePublicKey(u);o=pe(new Uint8Array(r),new Uint8Array(n),new Uint8Array(w))}let s=await this._generateSharedSecret(a,o);return{enc:r,sharedSecret:s}}catch(t){throw new C(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(r){throw new v(r)}try{let r=H(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=H(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),a=await this._prim.serializePublicKey(n),o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(r,t));else{let u=new Uint8Array(await this._prim.dh(r,t)),w=new Uint8Array(await this._prim.dh(r,e.senderPublicKey));o=j(u,w)}let s;if(e.senderPublicKey===void 0)s=j(new Uint8Array(e.enc),new Uint8Array(a));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);s=new Uint8Array(e.enc.byteLength+a.byteLength+u.byteLength),s.set(new Uint8Array(e.enc),0),s.set(new Uint8Array(a),e.enc.byteLength),s.set(new Uint8Array(u),e.enc.byteLength+a.byteLength)}return await this._generateSharedSecret(o,s)}catch(r){throw new M(r)}}async _setup(){if(this._api!==void 0)return;let e=await te(),t=new Uint8Array(we);t.set(p(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let r=this._kdf.buildLabeledIkm(Ue,e),n=this._kdf.buildLabeledInfo(Oe,t,this.secretSize);return await this._kdf.extractAndExpand(c,r,n,this.secretSize)}};var T=["deriveBits"],_e=new Uint8Array([100,107,112,95,112,114,107]),Kt=new Uint8Array([115,107]);var re=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var He=new Uint8Array([99,97,110,100,105,100,97,116,101]),je=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Te=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ze=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),De=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Ce=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Me=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),U=class extends b{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case h.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=je,this._bitmask=255,this._pkcs8AlgId=De;break;case h.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Te,this._bitmask=255,this._pkcs8AlgId=Ce;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ze,this._bitmask=1,this._pkcs8AlgId=Me;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,r){if(this.checkInit(),e==="raw")return await this._importRawKey(t,r);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,r)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let r=new Uint8Array(e),n=new Uint8Array(this._pkcs8AlgId.length+r.length);return n.set(this._pkcs8AlgId,0),n.set(r,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",n,this._alg,!0,T)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,T)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,T)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(c,_e,new Uint8Array(e)),r=new re(this._nSk);for(let o=0;r.isZero()||!r.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(t,He,p(o,1),this._nSk));s[0]=s[0]&this._bitmask,r.set(s)}let n=new Uint8Array(this._pkcs8AlgId.length+r.val().length);n.set(this._pkcs8AlgId,0),n.set(r.val(),this._pkcs8AlgId.length);let a=await this._api.importKey("pkcs8",n,this._alg,!0,T);return r.reset(),{privateKey:a,publicKey:await this.derivePublicKey(a)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var ie=class extends L{constructor(){let e=new S,t=new U(h.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},ne=class extends L{constructor(){let e=new K,t=new U(h.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},ae=class extends L{constructor(){let e=new E,t=new U(h.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ne=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Be=new Uint8Array([101,120,112]),Ge=new Uint8Array([105,110,102,111,95,104,97,115,104]),Re=new Uint8Array([107,101,121]),Ye=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Fe=new Uint8Array([115,101,99,114,101,116]),qe=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),se=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case h.DhkemP256HkdfSha256:this._kem=new ie;break;case h.DhkemP384HkdfSha384:this._kem=new ne;break;case h.DhkemP521HkdfSha512:this._kem=new ae;break;default:throw new l(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case g.HkdfSha256:this._kdf=new S;break;case g.HkdfSha384:this._kdf=new K;break;default:this._kdf=new E;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case y.Aes128Gcm:this._aead=new J;break;case y.Aes256Gcm:this._aead=new Z;break;case y.ExportOnly:this._aead=new Q;break;default:throw new l(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(qe),this._suiteId.set(p(this._kem.id,2),4),this._suiteId.set(p(this._kdf.id,2),6),this._suiteId.set(p(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,r=!0){return await this._setup(),await this._kem.importKey(e,t,r)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),r;return e.psk!==void 0?r=e.senderKey!==void 0?x.AuthPsk:x.Psk:r=e.senderKey!==void 0?x.Auth:x.Base,await this._keyScheduleS(r,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),r;return e.psk!==void 0?r=e.senderPublicKey!==void 0?x.AuthPsk:x.Psk:r=e.senderPublicKey!==void 0?x.Auth:x.Base,await this._keyScheduleR(r,t,e)}async seal(e,t,r=c){let n=await this.createSenderContext(e);return{ct:await n.seal(t,r),enc:n.enc}}async open(e,t,r=c){return await(await this.createRecipientContext(e)).open(t,r)}async _setup(){if(this._api!==void 0)return;let e=await te();this._kem.init(e),this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,r){let n=r.psk===void 0?c:new Uint8Array(r.psk.id),a=await this._kdf.labeledExtract(c,Ye,n),o=r.info===void 0?c:new Uint8Array(r.info),s=await this._kdf.labeledExtract(c,Ge,o),u=new Uint8Array(1+a.byteLength+s.byteLength);u.set(new Uint8Array([e]),0),u.set(new Uint8Array(a),1),u.set(new Uint8Array(s),1+a.byteLength);let w=r.psk===void 0?c:new Uint8Array(r.psk.key),_=this._kdf.buildLabeledIkm(Fe,w),z=this._kdf.buildLabeledInfo(Be,u,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,_,z,this._kdf.hashSize);if(this._aead.id===y.ExportOnly)return{aead:this._aead,exporterSecret:d};let xe=this._kdf.buildLabeledInfo(Re,u,this._aead.keySize),ge=await this._kdf.extractAndExpand(t,_,xe,this._aead.keySize),ke=this._kdf.buildLabeledInfo(Ne,u,this._aead.nonceSize),Pe=await this._kdf.extractAndExpand(t,_,ke,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:ge,baseNonce:new Uint8Array(Pe),seq:0}}async _keyScheduleS(e,t,r,n){let a=await this._keySchedule(e,t,n);return a.key===void 0?new q(this._api,this._kdf,a.exporterSecret,r):new ee(this._api,this._kdf,a,r)}async _keyScheduleR(e,t,r){let n=await this._keySchedule(e,t,r);return n.key===void 0?new F(this._api,this._kdf,n.exporterSecret):new V(this._api,this._kdf,n)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new l("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new l(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new l("Too long psk.key");if(e.psk.id.byteLength>8192)throw new l("Too long psk.id")}}};var ue=class extends se{};export{y as AeadId,ue as CipherSuite,M as DecapError,Y as DeriveKeyPairError,v as DeserializeError,C as EncapError,N as ExportError,f as HpkeError,l as InvalidParamError,g as KdfId,h as KemId,R as MessageLimitReachedError,m as NotSupportedError,G as OpenError,B as SealError,D as SerializeError,ce as ValidationError}; +var m={Base:0,Psk:1,Auth:2,AuthPsk:3},Pe={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},h=Pe,ve={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},g=ve,Ae={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},y=Ae;var c=new Uint8Array(0);var f=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},l=class extends f{},ce=class extends f{},D=class extends f{},v=class extends f{},C=class extends f{},M=class extends f{},N=class extends f{},B=class extends f{},G=class extends f{},R=class extends f{},Y=class extends f{},_=class extends f{};var Se=new Uint8Array([115,101,99]),A=class{constructor(e,t,r){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=r}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new l("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Se,new Uint8Array(e),t)}catch(r){throw new N(r)}}_emitError(){return new Promise((e,t)=>{t(new _("Not available"))})}},F=class extends A{},q=class extends A{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}};var W=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},b=class extends W{constructor(){super()}init(e){this._api=e}},X=class extends W{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:c})}init(e,t){this._api=e,this._suiteId=t}};var he=["encrypt","decrypt"];var $=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.encrypt(n,this._key,t)}async open(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.decrypt(n,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,he)}},J=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}},Z=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}};var Q=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new _("createEncryptionContext() is not supported on ExportOnly")}};var le=new Uint8Array([72,80,75,69,45,118,49]),O=class extends X{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let r=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return r.set(le,0),r.set(this._suiteId,7),r.set(e,7+this._suiteId.byteLength),r.set(t,7+this._suiteId.byteLength+e.byteLength),r}buildLabeledInfo(e,t,r){let n=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(new Uint8Array([0,r]),0),n.set(le,2),n.set(this._suiteId,9),n.set(e,9+this._suiteId.byteLength),n.set(t,9+this._suiteId.byteLength+e.byteLength),n}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new l("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,t)}async expand(e,t,r){this.checkInit();let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),a=new ArrayBuffer(r),o=new Uint8Array(a),s=c,u=new Uint8Array(t),p=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let w=new Uint8Array(this.hashSize+u.length+1);for(let z=1,d=0;d=s.length?(o.set(s,d),d+=s.length):(o.set(s.slice(0,o.length-d),d),d+=o.length-d);return a}async extractAndExpand(e,t,r,n){this.checkInit();let a=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:r},a,n*8)}async labeledExtract(e,t,r){return await this.extract(e,this.buildLabeledIkm(t,r))}async labeledExpand(e,t,r,n){return await this.expand(e,this.buildLabeledInfo(t,r,n),n)}},S=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},K=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},E=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ke={},fe=Ee(globalThis,Ke);function Ee(i,e){return new Proxy(i,{get(t,r,n){return r in e?e[r]:i[r]},set(t,r,n){return r in e&&delete e[r],i[r]=n,!0},deleteProperty(t,r){let n=!1;return r in e&&(delete e[r],n=!0),r in i&&(delete i[r],n=!0),n},ownKeys(t){let r=Reflect.ownKeys(i),n=Reflect.ownKeys(e),a=new Set(n);return[...r.filter(o=>!a.has(o)),...n]},defineProperty(t,r,n){return r in e&&delete e[r],Reflect.defineProperty(i,r,n),!0},getOwnPropertyDescriptor(t,r){return r in e?Reflect.getOwnPropertyDescriptor(e,r):Reflect.getOwnPropertyDescriptor(i,r)},has(t,r){return r in e||r in i}})}var de=()=>typeof fe<"u",ye=()=>typeof caches<"u";var H=i=>typeof i=="object"&&i!==null&&typeof i.privateKey=="object"&&typeof i.publicKey=="object";function x(i,e){if(e<=0)throw new Error("i2Osp: too small size");if(i>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let r=0;r>8;return t}function be(i,e){if(i.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(i.byteLength);for(let r=0;rNumber.MAX_SAFE_INTEGER)throw new R("Message limit reached");e.seq+=1}};var V=class extends I{async open(e,t=c){let r;try{r=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(n){throw new G(n)}return this.incrementSeq(this._ctx),r}};var ee=class extends I{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}async seal(e,t=c){let r;try{r=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(n){throw new B(n)}return this.incrementSeq(this._ctx),r}};async function te(){if((de()||ye())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:i}=await import("crypto");return i.subtle}catch{throw new _("Web Cryptograph API not supported")}}var Le=new Uint8Array([75,69,77,0,0]),Ue=new Uint8Array([101,97,101,95,112,114,107]),Oe=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),L=class extends b{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new _(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new l("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new Y(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new D(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new v(t)}}async importKey(e,t,r=!0){await this._setup();try{return await this._prim.importKey(e,t,r)}catch(n){throw new v(n)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,r=await this._prim.serializePublicKey(t.publicKey),n=await this._prim.serializePublicKey(e.recipientPublicKey),a;if(e.senderKey===void 0)a=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let u=H(e.senderKey)?e.senderKey.privateKey:e.senderKey,p=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),w=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));a=j(p,w)}let o;if(e.senderKey===void 0)o=j(new Uint8Array(r),new Uint8Array(n));else{let u=H(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),p=await this._prim.serializePublicKey(u);o=pe(new Uint8Array(r),new Uint8Array(n),new Uint8Array(p))}let s=await this._generateSharedSecret(a,o);return{enc:r,sharedSecret:s}}catch(t){throw new C(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(r){throw new v(r)}try{let r=H(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=H(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),a=await this._prim.serializePublicKey(n),o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(r,t));else{let u=new Uint8Array(await this._prim.dh(r,t)),p=new Uint8Array(await this._prim.dh(r,e.senderPublicKey));o=j(u,p)}let s;if(e.senderPublicKey===void 0)s=j(new Uint8Array(e.enc),new Uint8Array(a));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);s=new Uint8Array(e.enc.byteLength+a.byteLength+u.byteLength),s.set(new Uint8Array(e.enc),0),s.set(new Uint8Array(a),e.enc.byteLength),s.set(new Uint8Array(u),e.enc.byteLength+a.byteLength)}return await this._generateSharedSecret(o,s)}catch(r){throw new M(r)}}async _setup(){if(this._api!==void 0)return;let e=await te(),t=new Uint8Array(Le);t.set(x(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let r=this._kdf.buildLabeledIkm(Ue,e),n=this._kdf.buildLabeledInfo(Oe,t,this.secretSize);return await this._kdf.extractAndExpand(c,r,n,this.secretSize)}};var T=["deriveBits"],we=new Uint8Array([100,107,112,95,112,114,107]),Kt=new Uint8Array([115,107]);var re=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var He=new Uint8Array([99,97,110,100,105,100,97,116,101]),je=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Te=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ze=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),De=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Ce=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Me=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),U=class extends b{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case h.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=je,this._bitmask=255,this._pkcs8AlgId=De;break;case h.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Te,this._bitmask=255,this._pkcs8AlgId=Ce;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ze,this._bitmask=1,this._pkcs8AlgId=Me;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,r){if(this.checkInit(),e==="raw")return await this._importRawKey(t,r);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,r)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let r=new Uint8Array(e),n=new Uint8Array(this._pkcs8AlgId.length+r.length);return n.set(this._pkcs8AlgId,0),n.set(r,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",n,this._alg,!0,T)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,T)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,T)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(c,we,new Uint8Array(e)),r=new re(this._nSk);for(let o=0;r.isZero()||!r.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(t,He,x(o,1),this._nSk));s[0]=s[0]&this._bitmask,r.set(s)}let n=new Uint8Array(this._pkcs8AlgId.length+r.val().length);n.set(this._pkcs8AlgId,0),n.set(r.val(),this._pkcs8AlgId.length);let a=await this._api.importKey("pkcs8",n,this._alg,!0,T);return r.reset(),{privateKey:a,publicKey:await this.derivePublicKey(a)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var ie=class extends L{constructor(){let e=new S,t=new U(h.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},ne=class extends L{constructor(){let e=new K,t=new U(h.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},ae=class extends L{constructor(){let e=new E,t=new U(h.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ne=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Be=new Uint8Array([101,120,112]),Ge=new Uint8Array([105,110,102,111,95,104,97,115,104]),Re=new Uint8Array([107,101,121]),Ye=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Fe=new Uint8Array([115,101,99,114,101,116]),qe=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),se=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case h.DhkemP256HkdfSha256:this._kem=new ie;break;case h.DhkemP384HkdfSha384:this._kem=new ne;break;case h.DhkemP521HkdfSha512:this._kem=new ae;break;default:throw new l(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case g.HkdfSha256:this._kdf=new S;break;case g.HkdfSha384:this._kdf=new K;break;default:this._kdf=new E;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case y.Aes128Gcm:this._aead=new J;break;case y.Aes256Gcm:this._aead=new Z;break;case y.ExportOnly:this._aead=new Q;break;default:throw new l(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(qe),this._suiteId.set(x(this._kem.id,2),4),this._suiteId.set(x(this._kdf.id,2),6),this._suiteId.set(x(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,r=!0){return await this._setup(),await this._kem.importKey(e,t,r)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),r;return e.psk!==void 0?r=e.senderKey!==void 0?m.AuthPsk:m.Psk:r=e.senderKey!==void 0?m.Auth:m.Base,await this._keyScheduleS(r,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),r;return e.psk!==void 0?r=e.senderPublicKey!==void 0?m.AuthPsk:m.Psk:r=e.senderPublicKey!==void 0?m.Auth:m.Base,await this._keyScheduleR(r,t,e)}async seal(e,t,r=c){let n=await this.createSenderContext(e);return{ct:await n.seal(t,r),enc:n.enc}}async open(e,t,r=c){return await(await this.createRecipientContext(e)).open(t,r)}async _setup(){if(this._api!==void 0)return;let e=await te();this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,r){let n=r.psk===void 0?c:new Uint8Array(r.psk.id),a=await this._kdf.labeledExtract(c,Ye,n),o=r.info===void 0?c:new Uint8Array(r.info),s=await this._kdf.labeledExtract(c,Ge,o),u=new Uint8Array(1+a.byteLength+s.byteLength);u.set(new Uint8Array([e]),0),u.set(new Uint8Array(a),1),u.set(new Uint8Array(s),1+a.byteLength);let p=r.psk===void 0?c:new Uint8Array(r.psk.key),w=this._kdf.buildLabeledIkm(Fe,p),z=this._kdf.buildLabeledInfo(Be,u,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,w,z,this._kdf.hashSize);if(this._aead.id===y.ExportOnly)return{aead:this._aead,exporterSecret:d};let xe=this._kdf.buildLabeledInfo(Re,u,this._aead.keySize),me=await this._kdf.extractAndExpand(t,w,xe,this._aead.keySize),ge=this._kdf.buildLabeledInfo(Ne,u,this._aead.nonceSize),ke=await this._kdf.extractAndExpand(t,w,ge,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:me,baseNonce:new Uint8Array(ke),seq:0}}async _keyScheduleS(e,t,r,n){let a=await this._keySchedule(e,t,n);return a.key===void 0?new q(this._api,this._kdf,a.exporterSecret,r):new ee(this._api,this._kdf,a,r)}async _keyScheduleR(e,t,r){let n=await this._keySchedule(e,t,r);return n.key===void 0?new F(this._api,this._kdf,n.exporterSecret):new V(this._api,this._kdf,n)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new l("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new l(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new l("Too long psk.key");if(e.psk.id.byteLength>8192)throw new l("Too long psk.id")}}};var ue=class extends se{};export{y as AeadId,ue as CipherSuite,M as DecapError,Y as DeriveKeyPairError,v as DeserializeError,C as EncapError,N as ExportError,f as HpkeError,l as InvalidParamError,g as KdfId,h as KemId,R as MessageLimitReachedError,_ as NotSupportedError,G as OpenError,B as SealError,D as SerializeError,ce as ValidationError}; diff --git a/core/docs/assets/search.js b/core/docs/assets/search.js index 0c7ab2d0c..e5c5e4ee0 100644 --- a/core/docs/assets/search.js +++ b/core/docs/assets/search.js @@ -1 +1 @@ -window.searchData = JSON.parse("{\"rows\":[{\"kind\":256,\"name\":\"AeadEncryptionContext\",\"url\":\"interfaces/AeadEncryptionContext.html\",\"classes\":\"\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/AeadEncryptionContext.html#seal\",\"classes\":\"\",\"parent\":\"AeadEncryptionContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/AeadEncryptionContext.html#open\",\"classes\":\"\",\"parent\":\"AeadEncryptionContext\"},{\"kind\":256,\"name\":\"AeadInterface\",\"url\":\"interfaces/AeadInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/AeadInterface.html#id\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"keySize\",\"url\":\"interfaces/AeadInterface.html#keySize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"nonceSize\",\"url\":\"interfaces/AeadInterface.html#nonceSize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"tagSize\",\"url\":\"interfaces/AeadInterface.html#tagSize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"interfaces/AeadInterface.html#init\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":2048,\"name\":\"createEncryptionContext\",\"url\":\"interfaces/AeadInterface.html#createEncryptionContext\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":256,\"name\":\"CipherSuiteParams\",\"url\":\"interfaces/CipherSuiteParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"kem\",\"url\":\"interfaces/CipherSuiteParams.html#kem\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":1024,\"name\":\"kdf\",\"url\":\"interfaces/CipherSuiteParams.html#kdf\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":1024,\"name\":\"aead\",\"url\":\"interfaces/CipherSuiteParams.html#aead\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":256,\"name\":\"EncryptionContext\",\"url\":\"interfaces/EncryptionContext.html\",\"classes\":\"\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/EncryptionContext.html#seal\",\"classes\":\"\",\"parent\":\"EncryptionContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/EncryptionContext.html#open\",\"classes\":\"\",\"parent\":\"EncryptionContext\"},{\"kind\":2048,\"name\":\"export\",\"url\":\"interfaces/EncryptionContext.html#export\",\"classes\":\"tsd-is-inherited\",\"parent\":\"EncryptionContext\"},{\"kind\":4194304,\"name\":\"RecipientContext\",\"url\":\"types/RecipientContext.html\",\"classes\":\"\"},{\"kind\":256,\"name\":\"SenderContext\",\"url\":\"interfaces/SenderContext.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/SenderContext.html#enc\",\"classes\":\"\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/SenderContext.html#seal\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/SenderContext.html#open\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"export\",\"url\":\"interfaces/SenderContext.html#export\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":256,\"name\":\"KdfInterface\",\"url\":\"interfaces/KdfInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/KdfInterface.html#id\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":1024,\"name\":\"hashSize\",\"url\":\"interfaces/KdfInterface.html#hashSize\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"interfaces/KdfInterface.html#init\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"buildLabeledIkm\",\"url\":\"interfaces/KdfInterface.html#buildLabeledIkm\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"buildLabeledInfo\",\"url\":\"interfaces/KdfInterface.html#buildLabeledInfo\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"extract\",\"url\":\"interfaces/KdfInterface.html#extract\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"expand\",\"url\":\"interfaces/KdfInterface.html#expand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"extractAndExpand\",\"url\":\"interfaces/KdfInterface.html#extractAndExpand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"labeledExtract\",\"url\":\"interfaces/KdfInterface.html#labeledExtract\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"labeledExpand\",\"url\":\"interfaces/KdfInterface.html#labeledExpand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":256,\"name\":\"KemInterface\",\"url\":\"interfaces/KemInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/KemInterface.html#id\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"secretSize\",\"url\":\"interfaces/KemInterface.html#secretSize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"encSize\",\"url\":\"interfaces/KemInterface.html#encSize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"publicKeySize\",\"url\":\"interfaces/KemInterface.html#publicKeySize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"privateKeySize\",\"url\":\"interfaces/KemInterface.html#privateKeySize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"interfaces/KemInterface.html#init\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"interfaces/KemInterface.html#generateKeyPair\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"interfaces/KemInterface.html#deriveKeyPair\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"serializePublicKey\",\"url\":\"interfaces/KemInterface.html#serializePublicKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"deserializePublicKey\",\"url\":\"interfaces/KemInterface.html#deserializePublicKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"interfaces/KemInterface.html#importKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"encap\",\"url\":\"interfaces/KemInterface.html#encap\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"decap\",\"url\":\"interfaces/KemInterface.html#decap\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":256,\"name\":\"PreSharedKey\",\"url\":\"interfaces/PreSharedKey.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/PreSharedKey.html#id\",\"classes\":\"\",\"parent\":\"PreSharedKey\"},{\"kind\":1024,\"name\":\"key\",\"url\":\"interfaces/PreSharedKey.html#key\",\"classes\":\"\",\"parent\":\"PreSharedKey\"},{\"kind\":256,\"name\":\"RecipientContextParams\",\"url\":\"interfaces/RecipientContextParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"recipientKey\",\"url\":\"interfaces/RecipientContextParams.html#recipientKey\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/RecipientContextParams.html#enc\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"senderPublicKey\",\"url\":\"interfaces/RecipientContextParams.html#senderPublicKey\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"info\",\"url\":\"interfaces/RecipientContextParams.html#info\",\"classes\":\"tsd-is-inherited\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"psk\",\"url\":\"interfaces/RecipientContextParams.html#psk\",\"classes\":\"tsd-is-inherited\",\"parent\":\"RecipientContextParams\"},{\"kind\":256,\"name\":\"CipherSuiteSealResponse\",\"url\":\"interfaces/CipherSuiteSealResponse.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"ct\",\"url\":\"interfaces/CipherSuiteSealResponse.html#ct\",\"classes\":\"\",\"parent\":\"CipherSuiteSealResponse\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/CipherSuiteSealResponse.html#enc\",\"classes\":\"\",\"parent\":\"CipherSuiteSealResponse\"},{\"kind\":256,\"name\":\"SenderContextParams\",\"url\":\"interfaces/SenderContextParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"recipientPublicKey\",\"url\":\"interfaces/SenderContextParams.html#recipientPublicKey\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"senderKey\",\"url\":\"interfaces/SenderContextParams.html#senderKey\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"nonEphemeralKeyPair\",\"url\":\"interfaces/SenderContextParams.html#nonEphemeralKeyPair\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"info\",\"url\":\"interfaces/SenderContextParams.html#info\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"psk\",\"url\":\"interfaces/SenderContextParams.html#psk\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContextParams\"},{\"kind\":32,\"name\":\"AeadId\",\"url\":\"variables/AeadId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/AeadId-1.html#__type\",\"classes\":\"\",\"parent\":\"AeadId\"},{\"kind\":1024,\"name\":\"Aes128Gcm\",\"url\":\"variables/AeadId-1.html#__type.Aes128Gcm\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"Aes256Gcm\",\"url\":\"variables/AeadId-1.html#__type.Aes256Gcm\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"Chacha20Poly1305\",\"url\":\"variables/AeadId-1.html#__type.Chacha20Poly1305\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"ExportOnly\",\"url\":\"variables/AeadId-1.html#__type.ExportOnly\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":4194304,\"name\":\"AeadId\",\"url\":\"types/AeadId.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"KdfId\",\"url\":\"variables/KdfId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/KdfId-1.html#__type\",\"classes\":\"\",\"parent\":\"KdfId\"},{\"kind\":1024,\"name\":\"HkdfSha256\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha256\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":1024,\"name\":\"HkdfSha384\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha384\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":1024,\"name\":\"HkdfSha512\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha512\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":4194304,\"name\":\"KdfId\",\"url\":\"types/KdfId.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"KemId\",\"url\":\"variables/KemId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/KemId-1.html#__type\",\"classes\":\"\",\"parent\":\"KemId\"},{\"kind\":1024,\"name\":\"DhkemP256HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemP256HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemP384HkdfSha384\",\"url\":\"variables/KemId-1.html#__type.DhkemP384HkdfSha384\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemP521HkdfSha512\",\"url\":\"variables/KemId-1.html#__type.DhkemP521HkdfSha512\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemSecp256k1HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemSecp256k1HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemX25519HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemX25519HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemX448HkdfSha512\",\"url\":\"variables/KemId-1.html#__type.DhkemX448HkdfSha512\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":4194304,\"name\":\"KemId\",\"url\":\"types/KemId.html\",\"classes\":\"\"},{\"kind\":128,\"name\":\"CipherSuite\",\"url\":\"classes/CipherSuite.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/CipherSuite.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"kem\",\"url\":\"classes/CipherSuite.html#kem\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"kdf\",\"url\":\"classes/CipherSuite.html#kdf\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"aead\",\"url\":\"classes/CipherSuite.html#aead\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/CipherSuite.html#generateKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/CipherSuite.html#deriveKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/CipherSuite.html#importKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"createSenderContext\",\"url\":\"classes/CipherSuite.html#createSenderContext\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"createRecipientContext\",\"url\":\"classes/CipherSuite.html#createRecipientContext\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"classes/CipherSuite.html#seal\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"classes/CipherSuite.html#open\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":128,\"name\":\"HpkeError\",\"url\":\"classes/HpkeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/HpkeError.html#constructor\",\"classes\":\"\",\"parent\":\"HpkeError\"},{\"kind\":128,\"name\":\"InvalidParamError\",\"url\":\"classes/InvalidParamError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/InvalidParamError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"InvalidParamError\"},{\"kind\":128,\"name\":\"ValidationError\",\"url\":\"classes/ValidationError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/ValidationError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"ValidationError\"},{\"kind\":128,\"name\":\"SerializeError\",\"url\":\"classes/SerializeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/SerializeError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SerializeError\"},{\"kind\":128,\"name\":\"DeserializeError\",\"url\":\"classes/DeserializeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DeserializeError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DeserializeError\"},{\"kind\":128,\"name\":\"EncapError\",\"url\":\"classes/EncapError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/EncapError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"EncapError\"},{\"kind\":128,\"name\":\"DecapError\",\"url\":\"classes/DecapError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DecapError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DecapError\"},{\"kind\":128,\"name\":\"ExportError\",\"url\":\"classes/ExportError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/ExportError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"ExportError\"},{\"kind\":128,\"name\":\"SealError\",\"url\":\"classes/SealError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/SealError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SealError\"},{\"kind\":128,\"name\":\"OpenError\",\"url\":\"classes/OpenError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/OpenError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"OpenError\"},{\"kind\":128,\"name\":\"MessageLimitReachedError\",\"url\":\"classes/MessageLimitReachedError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/MessageLimitReachedError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"MessageLimitReachedError\"},{\"kind\":128,\"name\":\"DeriveKeyPairError\",\"url\":\"classes/DeriveKeyPairError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DeriveKeyPairError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DeriveKeyPairError\"},{\"kind\":128,\"name\":\"NotSupportedError\",\"url\":\"classes/NotSupportedError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/NotSupportedError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"NotSupportedError\"}],\"index\":{\"version\":\"2.3.9\",\"fields\":[\"name\",\"comment\"],\"fieldVectors\":[[\"name/0\",[0,44.466]],[\"comment/0\",[]],[\"name/1\",[1,33.48]],[\"comment/1\",[]],[\"name/2\",[2,33.48]],[\"comment/2\",[]],[\"name/3\",[3,44.466]],[\"comment/3\",[]],[\"name/4\",[4,33.48]],[\"comment/4\",[]],[\"name/5\",[5,44.466]],[\"comment/5\",[]],[\"name/6\",[6,44.466]],[\"comment/6\",[]],[\"name/7\",[7,44.466]],[\"comment/7\",[]],[\"name/8\",[8,35.993]],[\"comment/8\",[]],[\"name/9\",[9,44.466]],[\"comment/9\",[]],[\"name/10\",[10,44.466]],[\"comment/10\",[]],[\"name/11\",[11,39.357]],[\"comment/11\",[]],[\"name/12\",[12,39.357]],[\"comment/12\",[]],[\"name/13\",[13,39.357]],[\"comment/13\",[]],[\"name/14\",[14,44.466]],[\"comment/14\",[]],[\"name/15\",[1,33.48]],[\"comment/15\",[]],[\"name/16\",[2,33.48]],[\"comment/16\",[]],[\"name/17\",[15,39.357]],[\"comment/17\",[]],[\"name/18\",[16,44.466]],[\"comment/18\",[]],[\"name/19\",[17,44.466]],[\"comment/19\",[]],[\"name/20\",[18,35.993]],[\"comment/20\",[]],[\"name/21\",[1,33.48]],[\"comment/21\",[]],[\"name/22\",[2,33.48]],[\"comment/22\",[]],[\"name/23\",[15,39.357]],[\"comment/23\",[]],[\"name/24\",[19,44.466]],[\"comment/24\",[]],[\"name/25\",[4,33.48]],[\"comment/25\",[]],[\"name/26\",[20,44.466]],[\"comment/26\",[]],[\"name/27\",[8,35.993]],[\"comment/27\",[]],[\"name/28\",[21,44.466]],[\"comment/28\",[]],[\"name/29\",[22,44.466]],[\"comment/29\",[]],[\"name/30\",[23,44.466]],[\"comment/30\",[]],[\"name/31\",[24,44.466]],[\"comment/31\",[]],[\"name/32\",[25,44.466]],[\"comment/32\",[]],[\"name/33\",[26,44.466]],[\"comment/33\",[]],[\"name/34\",[27,44.466]],[\"comment/34\",[]],[\"name/35\",[28,44.466]],[\"comment/35\",[]],[\"name/36\",[4,33.48]],[\"comment/36\",[]],[\"name/37\",[29,44.466]],[\"comment/37\",[]],[\"name/38\",[30,44.466]],[\"comment/38\",[]],[\"name/39\",[31,44.466]],[\"comment/39\",[]],[\"name/40\",[32,44.466]],[\"comment/40\",[]],[\"name/41\",[8,35.993]],[\"comment/41\",[]],[\"name/42\",[33,39.357]],[\"comment/42\",[]],[\"name/43\",[34,39.357]],[\"comment/43\",[]],[\"name/44\",[35,44.466]],[\"comment/44\",[]],[\"name/45\",[36,44.466]],[\"comment/45\",[]],[\"name/46\",[37,39.357]],[\"comment/46\",[]],[\"name/47\",[38,44.466]],[\"comment/47\",[]],[\"name/48\",[39,44.466]],[\"comment/48\",[]],[\"name/49\",[40,44.466]],[\"comment/49\",[]],[\"name/50\",[4,33.48]],[\"comment/50\",[]],[\"name/51\",[41,44.466]],[\"comment/51\",[]],[\"name/52\",[42,44.466]],[\"comment/52\",[]],[\"name/53\",[43,44.466]],[\"comment/53\",[]],[\"name/54\",[18,35.993]],[\"comment/54\",[]],[\"name/55\",[44,44.466]],[\"comment/55\",[]],[\"name/56\",[45,39.357]],[\"comment/56\",[]],[\"name/57\",[46,39.357]],[\"comment/57\",[]],[\"name/58\",[47,44.466]],[\"comment/58\",[]],[\"name/59\",[48,44.466]],[\"comment/59\",[]],[\"name/60\",[18,35.993]],[\"comment/60\",[]],[\"name/61\",[49,44.466]],[\"comment/61\",[]],[\"name/62\",[50,44.466]],[\"comment/62\",[]],[\"name/63\",[51,44.466]],[\"comment/63\",[]],[\"name/64\",[52,44.466]],[\"comment/64\",[]],[\"name/65\",[45,39.357]],[\"comment/65\",[]],[\"name/66\",[46,39.357]],[\"comment/66\",[]],[\"name/67\",[53,39.357]],[\"comment/67\",[]],[\"name/68\",[54,35.993]],[\"comment/68\",[]],[\"name/69\",[55,44.466]],[\"comment/69\",[]],[\"name/70\",[56,44.466]],[\"comment/70\",[]],[\"name/71\",[57,44.466]],[\"comment/71\",[]],[\"name/72\",[58,44.466]],[\"comment/72\",[]],[\"name/73\",[53,39.357]],[\"comment/73\",[]],[\"name/74\",[59,39.357]],[\"comment/74\",[]],[\"name/75\",[54,35.993]],[\"comment/75\",[]],[\"name/76\",[60,44.466]],[\"comment/76\",[]],[\"name/77\",[61,44.466]],[\"comment/77\",[]],[\"name/78\",[62,44.466]],[\"comment/78\",[]],[\"name/79\",[59,39.357]],[\"comment/79\",[]],[\"name/80\",[63,39.357]],[\"comment/80\",[]],[\"name/81\",[54,35.993]],[\"comment/81\",[]],[\"name/82\",[64,44.466]],[\"comment/82\",[]],[\"name/83\",[65,44.466]],[\"comment/83\",[]],[\"name/84\",[66,44.466]],[\"comment/84\",[]],[\"name/85\",[67,44.466]],[\"comment/85\",[]],[\"name/86\",[68,44.466]],[\"comment/86\",[]],[\"name/87\",[69,44.466]],[\"comment/87\",[]],[\"name/88\",[63,39.357]],[\"comment/88\",[]],[\"name/89\",[70,44.466]],[\"comment/89\",[]],[\"name/90\",[71,21.779]],[\"comment/90\",[]],[\"name/91\",[11,39.357]],[\"comment/91\",[]],[\"name/92\",[12,39.357]],[\"comment/92\",[]],[\"name/93\",[13,39.357]],[\"comment/93\",[]],[\"name/94\",[33,39.357]],[\"comment/94\",[]],[\"name/95\",[34,39.357]],[\"comment/95\",[]],[\"name/96\",[37,39.357]],[\"comment/96\",[]],[\"name/97\",[72,44.466]],[\"comment/97\",[]],[\"name/98\",[73,44.466]],[\"comment/98\",[]],[\"name/99\",[1,33.48]],[\"comment/99\",[]],[\"name/100\",[2,33.48]],[\"comment/100\",[]],[\"name/101\",[74,44.466]],[\"comment/101\",[]],[\"name/102\",[71,21.779]],[\"comment/102\",[]],[\"name/103\",[75,44.466]],[\"comment/103\",[]],[\"name/104\",[71,21.779]],[\"comment/104\",[]],[\"name/105\",[76,44.466]],[\"comment/105\",[]],[\"name/106\",[71,21.779]],[\"comment/106\",[]],[\"name/107\",[77,44.466]],[\"comment/107\",[]],[\"name/108\",[71,21.779]],[\"comment/108\",[]],[\"name/109\",[78,44.466]],[\"comment/109\",[]],[\"name/110\",[71,21.779]],[\"comment/110\",[]],[\"name/111\",[79,44.466]],[\"comment/111\",[]],[\"name/112\",[71,21.779]],[\"comment/112\",[]],[\"name/113\",[80,44.466]],[\"comment/113\",[]],[\"name/114\",[71,21.779]],[\"comment/114\",[]],[\"name/115\",[81,44.466]],[\"comment/115\",[]],[\"name/116\",[71,21.779]],[\"comment/116\",[]],[\"name/117\",[82,44.466]],[\"comment/117\",[]],[\"name/118\",[71,21.779]],[\"comment/118\",[]],[\"name/119\",[83,44.466]],[\"comment/119\",[]],[\"name/120\",[71,21.779]],[\"comment/120\",[]],[\"name/121\",[84,44.466]],[\"comment/121\",[]],[\"name/122\",[71,21.779]],[\"comment/122\",[]],[\"name/123\",[85,44.466]],[\"comment/123\",[]],[\"name/124\",[71,21.779]],[\"comment/124\",[]],[\"name/125\",[86,44.466]],[\"comment/125\",[]],[\"name/126\",[71,21.779]],[\"comment/126\",[]]],\"invertedIndex\":[[\"__type\",{\"_index\":54,\"name\":{\"68\":{},\"75\":{},\"81\":{}},\"comment\":{}}],[\"aead\",{\"_index\":13,\"name\":{\"13\":{},\"93\":{}},\"comment\":{}}],[\"aeadencryptioncontext\",{\"_index\":0,\"name\":{\"0\":{}},\"comment\":{}}],[\"aeadid\",{\"_index\":53,\"name\":{\"67\":{},\"73\":{}},\"comment\":{}}],[\"aeadinterface\",{\"_index\":3,\"name\":{\"3\":{}},\"comment\":{}}],[\"aes128gcm\",{\"_index\":55,\"name\":{\"69\":{}},\"comment\":{}}],[\"aes256gcm\",{\"_index\":56,\"name\":{\"70\":{}},\"comment\":{}}],[\"buildlabeledikm\",{\"_index\":21,\"name\":{\"28\":{}},\"comment\":{}}],[\"buildlabeledinfo\",{\"_index\":22,\"name\":{\"29\":{}},\"comment\":{}}],[\"chacha20poly1305\",{\"_index\":57,\"name\":{\"71\":{}},\"comment\":{}}],[\"ciphersuite\",{\"_index\":70,\"name\":{\"89\":{}},\"comment\":{}}],[\"ciphersuiteparams\",{\"_index\":10,\"name\":{\"10\":{}},\"comment\":{}}],[\"ciphersuitesealresponse\",{\"_index\":47,\"name\":{\"58\":{}},\"comment\":{}}],[\"constructor\",{\"_index\":71,\"name\":{\"90\":{},\"102\":{},\"104\":{},\"106\":{},\"108\":{},\"110\":{},\"112\":{},\"114\":{},\"116\":{},\"118\":{},\"120\":{},\"122\":{},\"124\":{},\"126\":{}},\"comment\":{}}],[\"createencryptioncontext\",{\"_index\":9,\"name\":{\"9\":{}},\"comment\":{}}],[\"createrecipientcontext\",{\"_index\":73,\"name\":{\"98\":{}},\"comment\":{}}],[\"createsendercontext\",{\"_index\":72,\"name\":{\"97\":{}},\"comment\":{}}],[\"ct\",{\"_index\":48,\"name\":{\"59\":{}},\"comment\":{}}],[\"decap\",{\"_index\":39,\"name\":{\"48\":{}},\"comment\":{}}],[\"decaperror\",{\"_index\":80,\"name\":{\"113\":{}},\"comment\":{}}],[\"derivekeypair\",{\"_index\":34,\"name\":{\"43\":{},\"95\":{}},\"comment\":{}}],[\"derivekeypairerror\",{\"_index\":85,\"name\":{\"123\":{}},\"comment\":{}}],[\"deserializeerror\",{\"_index\":78,\"name\":{\"109\":{}},\"comment\":{}}],[\"deserializepublickey\",{\"_index\":36,\"name\":{\"45\":{}},\"comment\":{}}],[\"dhkemp256hkdfsha256\",{\"_index\":64,\"name\":{\"82\":{}},\"comment\":{}}],[\"dhkemp384hkdfsha384\",{\"_index\":65,\"name\":{\"83\":{}},\"comment\":{}}],[\"dhkemp521hkdfsha512\",{\"_index\":66,\"name\":{\"84\":{}},\"comment\":{}}],[\"dhkemsecp256k1hkdfsha256\",{\"_index\":67,\"name\":{\"85\":{}},\"comment\":{}}],[\"dhkemx25519hkdfsha256\",{\"_index\":68,\"name\":{\"86\":{}},\"comment\":{}}],[\"dhkemx448hkdfsha512\",{\"_index\":69,\"name\":{\"87\":{}},\"comment\":{}}],[\"enc\",{\"_index\":18,\"name\":{\"20\":{},\"54\":{},\"60\":{}},\"comment\":{}}],[\"encap\",{\"_index\":38,\"name\":{\"47\":{}},\"comment\":{}}],[\"encaperror\",{\"_index\":79,\"name\":{\"111\":{}},\"comment\":{}}],[\"encryptioncontext\",{\"_index\":14,\"name\":{\"14\":{}},\"comment\":{}}],[\"encsize\",{\"_index\":30,\"name\":{\"38\":{}},\"comment\":{}}],[\"expand\",{\"_index\":24,\"name\":{\"31\":{}},\"comment\":{}}],[\"export\",{\"_index\":15,\"name\":{\"17\":{},\"23\":{}},\"comment\":{}}],[\"exporterror\",{\"_index\":81,\"name\":{\"115\":{}},\"comment\":{}}],[\"exportonly\",{\"_index\":58,\"name\":{\"72\":{}},\"comment\":{}}],[\"extract\",{\"_index\":23,\"name\":{\"30\":{}},\"comment\":{}}],[\"extractandexpand\",{\"_index\":25,\"name\":{\"32\":{}},\"comment\":{}}],[\"generatekeypair\",{\"_index\":33,\"name\":{\"42\":{},\"94\":{}},\"comment\":{}}],[\"hashsize\",{\"_index\":20,\"name\":{\"26\":{}},\"comment\":{}}],[\"hkdfsha256\",{\"_index\":60,\"name\":{\"76\":{}},\"comment\":{}}],[\"hkdfsha384\",{\"_index\":61,\"name\":{\"77\":{}},\"comment\":{}}],[\"hkdfsha512\",{\"_index\":62,\"name\":{\"78\":{}},\"comment\":{}}],[\"hpkeerror\",{\"_index\":74,\"name\":{\"101\":{}},\"comment\":{}}],[\"id\",{\"_index\":4,\"name\":{\"4\":{},\"25\":{},\"36\":{},\"50\":{}},\"comment\":{}}],[\"importkey\",{\"_index\":37,\"name\":{\"46\":{},\"96\":{}},\"comment\":{}}],[\"info\",{\"_index\":45,\"name\":{\"56\":{},\"65\":{}},\"comment\":{}}],[\"init\",{\"_index\":8,\"name\":{\"8\":{},\"27\":{},\"41\":{}},\"comment\":{}}],[\"invalidparamerror\",{\"_index\":75,\"name\":{\"103\":{}},\"comment\":{}}],[\"kdf\",{\"_index\":12,\"name\":{\"12\":{},\"92\":{}},\"comment\":{}}],[\"kdfid\",{\"_index\":59,\"name\":{\"74\":{},\"79\":{}},\"comment\":{}}],[\"kdfinterface\",{\"_index\":19,\"name\":{\"24\":{}},\"comment\":{}}],[\"kem\",{\"_index\":11,\"name\":{\"11\":{},\"91\":{}},\"comment\":{}}],[\"kemid\",{\"_index\":63,\"name\":{\"80\":{},\"88\":{}},\"comment\":{}}],[\"keminterface\",{\"_index\":28,\"name\":{\"35\":{}},\"comment\":{}}],[\"key\",{\"_index\":41,\"name\":{\"51\":{}},\"comment\":{}}],[\"keysize\",{\"_index\":5,\"name\":{\"5\":{}},\"comment\":{}}],[\"labeledexpand\",{\"_index\":27,\"name\":{\"34\":{}},\"comment\":{}}],[\"labeledextract\",{\"_index\":26,\"name\":{\"33\":{}},\"comment\":{}}],[\"messagelimitreachederror\",{\"_index\":84,\"name\":{\"121\":{}},\"comment\":{}}],[\"noncesize\",{\"_index\":6,\"name\":{\"6\":{}},\"comment\":{}}],[\"nonephemeralkeypair\",{\"_index\":52,\"name\":{\"64\":{}},\"comment\":{}}],[\"notsupportederror\",{\"_index\":86,\"name\":{\"125\":{}},\"comment\":{}}],[\"open\",{\"_index\":2,\"name\":{\"2\":{},\"16\":{},\"22\":{},\"100\":{}},\"comment\":{}}],[\"openerror\",{\"_index\":83,\"name\":{\"119\":{}},\"comment\":{}}],[\"presharedkey\",{\"_index\":40,\"name\":{\"49\":{}},\"comment\":{}}],[\"privatekeysize\",{\"_index\":32,\"name\":{\"40\":{}},\"comment\":{}}],[\"psk\",{\"_index\":46,\"name\":{\"57\":{},\"66\":{}},\"comment\":{}}],[\"publickeysize\",{\"_index\":31,\"name\":{\"39\":{}},\"comment\":{}}],[\"recipientcontext\",{\"_index\":16,\"name\":{\"18\":{}},\"comment\":{}}],[\"recipientcontextparams\",{\"_index\":42,\"name\":{\"52\":{}},\"comment\":{}}],[\"recipientkey\",{\"_index\":43,\"name\":{\"53\":{}},\"comment\":{}}],[\"recipientpublickey\",{\"_index\":50,\"name\":{\"62\":{}},\"comment\":{}}],[\"seal\",{\"_index\":1,\"name\":{\"1\":{},\"15\":{},\"21\":{},\"99\":{}},\"comment\":{}}],[\"sealerror\",{\"_index\":82,\"name\":{\"117\":{}},\"comment\":{}}],[\"secretsize\",{\"_index\":29,\"name\":{\"37\":{}},\"comment\":{}}],[\"sendercontext\",{\"_index\":17,\"name\":{\"19\":{}},\"comment\":{}}],[\"sendercontextparams\",{\"_index\":49,\"name\":{\"61\":{}},\"comment\":{}}],[\"senderkey\",{\"_index\":51,\"name\":{\"63\":{}},\"comment\":{}}],[\"senderpublickey\",{\"_index\":44,\"name\":{\"55\":{}},\"comment\":{}}],[\"serializeerror\",{\"_index\":77,\"name\":{\"107\":{}},\"comment\":{}}],[\"serializepublickey\",{\"_index\":35,\"name\":{\"44\":{}},\"comment\":{}}],[\"tagsize\",{\"_index\":7,\"name\":{\"7\":{}},\"comment\":{}}],[\"validationerror\",{\"_index\":76,\"name\":{\"105\":{}},\"comment\":{}}]],\"pipeline\":[]}}"); \ No newline at end of file +window.searchData = JSON.parse("{\"rows\":[{\"kind\":256,\"name\":\"AeadEncryptionContext\",\"url\":\"interfaces/AeadEncryptionContext.html\",\"classes\":\"\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/AeadEncryptionContext.html#seal\",\"classes\":\"\",\"parent\":\"AeadEncryptionContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/AeadEncryptionContext.html#open\",\"classes\":\"\",\"parent\":\"AeadEncryptionContext\"},{\"kind\":256,\"name\":\"AeadInterface\",\"url\":\"interfaces/AeadInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/AeadInterface.html#id\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"keySize\",\"url\":\"interfaces/AeadInterface.html#keySize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"nonceSize\",\"url\":\"interfaces/AeadInterface.html#nonceSize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"tagSize\",\"url\":\"interfaces/AeadInterface.html#tagSize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"interfaces/AeadInterface.html#init\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":2048,\"name\":\"createEncryptionContext\",\"url\":\"interfaces/AeadInterface.html#createEncryptionContext\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":256,\"name\":\"CipherSuiteParams\",\"url\":\"interfaces/CipherSuiteParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"kem\",\"url\":\"interfaces/CipherSuiteParams.html#kem\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":1024,\"name\":\"kdf\",\"url\":\"interfaces/CipherSuiteParams.html#kdf\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":1024,\"name\":\"aead\",\"url\":\"interfaces/CipherSuiteParams.html#aead\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":256,\"name\":\"EncryptionContext\",\"url\":\"interfaces/EncryptionContext.html\",\"classes\":\"\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/EncryptionContext.html#seal\",\"classes\":\"\",\"parent\":\"EncryptionContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/EncryptionContext.html#open\",\"classes\":\"\",\"parent\":\"EncryptionContext\"},{\"kind\":2048,\"name\":\"export\",\"url\":\"interfaces/EncryptionContext.html#export\",\"classes\":\"tsd-is-inherited\",\"parent\":\"EncryptionContext\"},{\"kind\":4194304,\"name\":\"RecipientContext\",\"url\":\"types/RecipientContext.html\",\"classes\":\"\"},{\"kind\":256,\"name\":\"SenderContext\",\"url\":\"interfaces/SenderContext.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/SenderContext.html#enc\",\"classes\":\"\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/SenderContext.html#seal\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/SenderContext.html#open\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"export\",\"url\":\"interfaces/SenderContext.html#export\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":256,\"name\":\"KdfInterface\",\"url\":\"interfaces/KdfInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/KdfInterface.html#id\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":1024,\"name\":\"hashSize\",\"url\":\"interfaces/KdfInterface.html#hashSize\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"interfaces/KdfInterface.html#init\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"buildLabeledIkm\",\"url\":\"interfaces/KdfInterface.html#buildLabeledIkm\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"buildLabeledInfo\",\"url\":\"interfaces/KdfInterface.html#buildLabeledInfo\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"extract\",\"url\":\"interfaces/KdfInterface.html#extract\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"expand\",\"url\":\"interfaces/KdfInterface.html#expand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"extractAndExpand\",\"url\":\"interfaces/KdfInterface.html#extractAndExpand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"labeledExtract\",\"url\":\"interfaces/KdfInterface.html#labeledExtract\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"labeledExpand\",\"url\":\"interfaces/KdfInterface.html#labeledExpand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":256,\"name\":\"KemInterface\",\"url\":\"interfaces/KemInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/KemInterface.html#id\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"secretSize\",\"url\":\"interfaces/KemInterface.html#secretSize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"encSize\",\"url\":\"interfaces/KemInterface.html#encSize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"publicKeySize\",\"url\":\"interfaces/KemInterface.html#publicKeySize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"privateKeySize\",\"url\":\"interfaces/KemInterface.html#privateKeySize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"interfaces/KemInterface.html#generateKeyPair\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"interfaces/KemInterface.html#deriveKeyPair\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"serializePublicKey\",\"url\":\"interfaces/KemInterface.html#serializePublicKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"deserializePublicKey\",\"url\":\"interfaces/KemInterface.html#deserializePublicKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"interfaces/KemInterface.html#importKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"encap\",\"url\":\"interfaces/KemInterface.html#encap\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"decap\",\"url\":\"interfaces/KemInterface.html#decap\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":256,\"name\":\"PreSharedKey\",\"url\":\"interfaces/PreSharedKey.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/PreSharedKey.html#id\",\"classes\":\"\",\"parent\":\"PreSharedKey\"},{\"kind\":1024,\"name\":\"key\",\"url\":\"interfaces/PreSharedKey.html#key\",\"classes\":\"\",\"parent\":\"PreSharedKey\"},{\"kind\":256,\"name\":\"RecipientContextParams\",\"url\":\"interfaces/RecipientContextParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"recipientKey\",\"url\":\"interfaces/RecipientContextParams.html#recipientKey\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/RecipientContextParams.html#enc\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"senderPublicKey\",\"url\":\"interfaces/RecipientContextParams.html#senderPublicKey\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"info\",\"url\":\"interfaces/RecipientContextParams.html#info\",\"classes\":\"tsd-is-inherited\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"psk\",\"url\":\"interfaces/RecipientContextParams.html#psk\",\"classes\":\"tsd-is-inherited\",\"parent\":\"RecipientContextParams\"},{\"kind\":256,\"name\":\"CipherSuiteSealResponse\",\"url\":\"interfaces/CipherSuiteSealResponse.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"ct\",\"url\":\"interfaces/CipherSuiteSealResponse.html#ct\",\"classes\":\"\",\"parent\":\"CipherSuiteSealResponse\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/CipherSuiteSealResponse.html#enc\",\"classes\":\"\",\"parent\":\"CipherSuiteSealResponse\"},{\"kind\":256,\"name\":\"SenderContextParams\",\"url\":\"interfaces/SenderContextParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"recipientPublicKey\",\"url\":\"interfaces/SenderContextParams.html#recipientPublicKey\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"senderKey\",\"url\":\"interfaces/SenderContextParams.html#senderKey\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"nonEphemeralKeyPair\",\"url\":\"interfaces/SenderContextParams.html#nonEphemeralKeyPair\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"info\",\"url\":\"interfaces/SenderContextParams.html#info\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"psk\",\"url\":\"interfaces/SenderContextParams.html#psk\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContextParams\"},{\"kind\":32,\"name\":\"AeadId\",\"url\":\"variables/AeadId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/AeadId-1.html#__type\",\"classes\":\"\",\"parent\":\"AeadId\"},{\"kind\":1024,\"name\":\"Aes128Gcm\",\"url\":\"variables/AeadId-1.html#__type.Aes128Gcm\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"Aes256Gcm\",\"url\":\"variables/AeadId-1.html#__type.Aes256Gcm\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"Chacha20Poly1305\",\"url\":\"variables/AeadId-1.html#__type.Chacha20Poly1305\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"ExportOnly\",\"url\":\"variables/AeadId-1.html#__type.ExportOnly\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":4194304,\"name\":\"AeadId\",\"url\":\"types/AeadId.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"KdfId\",\"url\":\"variables/KdfId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/KdfId-1.html#__type\",\"classes\":\"\",\"parent\":\"KdfId\"},{\"kind\":1024,\"name\":\"HkdfSha256\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha256\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":1024,\"name\":\"HkdfSha384\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha384\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":1024,\"name\":\"HkdfSha512\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha512\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":4194304,\"name\":\"KdfId\",\"url\":\"types/KdfId.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"KemId\",\"url\":\"variables/KemId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/KemId-1.html#__type\",\"classes\":\"\",\"parent\":\"KemId\"},{\"kind\":1024,\"name\":\"DhkemP256HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemP256HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemP384HkdfSha384\",\"url\":\"variables/KemId-1.html#__type.DhkemP384HkdfSha384\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemP521HkdfSha512\",\"url\":\"variables/KemId-1.html#__type.DhkemP521HkdfSha512\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemSecp256k1HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemSecp256k1HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemX25519HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemX25519HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemX448HkdfSha512\",\"url\":\"variables/KemId-1.html#__type.DhkemX448HkdfSha512\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":4194304,\"name\":\"KemId\",\"url\":\"types/KemId.html\",\"classes\":\"\"},{\"kind\":128,\"name\":\"CipherSuite\",\"url\":\"classes/CipherSuite.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/CipherSuite.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"kem\",\"url\":\"classes/CipherSuite.html#kem\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"kdf\",\"url\":\"classes/CipherSuite.html#kdf\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"aead\",\"url\":\"classes/CipherSuite.html#aead\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/CipherSuite.html#generateKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/CipherSuite.html#deriveKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/CipherSuite.html#importKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"createSenderContext\",\"url\":\"classes/CipherSuite.html#createSenderContext\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"createRecipientContext\",\"url\":\"classes/CipherSuite.html#createRecipientContext\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"classes/CipherSuite.html#seal\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"classes/CipherSuite.html#open\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":128,\"name\":\"HpkeError\",\"url\":\"classes/HpkeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/HpkeError.html#constructor\",\"classes\":\"\",\"parent\":\"HpkeError\"},{\"kind\":128,\"name\":\"InvalidParamError\",\"url\":\"classes/InvalidParamError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/InvalidParamError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"InvalidParamError\"},{\"kind\":128,\"name\":\"ValidationError\",\"url\":\"classes/ValidationError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/ValidationError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"ValidationError\"},{\"kind\":128,\"name\":\"SerializeError\",\"url\":\"classes/SerializeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/SerializeError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SerializeError\"},{\"kind\":128,\"name\":\"DeserializeError\",\"url\":\"classes/DeserializeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DeserializeError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DeserializeError\"},{\"kind\":128,\"name\":\"EncapError\",\"url\":\"classes/EncapError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/EncapError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"EncapError\"},{\"kind\":128,\"name\":\"DecapError\",\"url\":\"classes/DecapError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DecapError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DecapError\"},{\"kind\":128,\"name\":\"ExportError\",\"url\":\"classes/ExportError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/ExportError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"ExportError\"},{\"kind\":128,\"name\":\"SealError\",\"url\":\"classes/SealError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/SealError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SealError\"},{\"kind\":128,\"name\":\"OpenError\",\"url\":\"classes/OpenError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/OpenError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"OpenError\"},{\"kind\":128,\"name\":\"MessageLimitReachedError\",\"url\":\"classes/MessageLimitReachedError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/MessageLimitReachedError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"MessageLimitReachedError\"},{\"kind\":128,\"name\":\"DeriveKeyPairError\",\"url\":\"classes/DeriveKeyPairError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DeriveKeyPairError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DeriveKeyPairError\"},{\"kind\":128,\"name\":\"NotSupportedError\",\"url\":\"classes/NotSupportedError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/NotSupportedError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"NotSupportedError\"}],\"index\":{\"version\":\"2.3.9\",\"fields\":[\"name\",\"comment\"],\"fieldVectors\":[[\"name/0\",[0,44.387]],[\"comment/0\",[]],[\"name/1\",[1,33.401]],[\"comment/1\",[]],[\"name/2\",[2,33.401]],[\"comment/2\",[]],[\"name/3\",[3,44.387]],[\"comment/3\",[]],[\"name/4\",[4,33.401]],[\"comment/4\",[]],[\"name/5\",[5,44.387]],[\"comment/5\",[]],[\"name/6\",[6,44.387]],[\"comment/6\",[]],[\"name/7\",[7,44.387]],[\"comment/7\",[]],[\"name/8\",[8,39.279]],[\"comment/8\",[]],[\"name/9\",[9,44.387]],[\"comment/9\",[]],[\"name/10\",[10,44.387]],[\"comment/10\",[]],[\"name/11\",[11,39.279]],[\"comment/11\",[]],[\"name/12\",[12,39.279]],[\"comment/12\",[]],[\"name/13\",[13,39.279]],[\"comment/13\",[]],[\"name/14\",[14,44.387]],[\"comment/14\",[]],[\"name/15\",[1,33.401]],[\"comment/15\",[]],[\"name/16\",[2,33.401]],[\"comment/16\",[]],[\"name/17\",[15,39.279]],[\"comment/17\",[]],[\"name/18\",[16,44.387]],[\"comment/18\",[]],[\"name/19\",[17,44.387]],[\"comment/19\",[]],[\"name/20\",[18,35.914]],[\"comment/20\",[]],[\"name/21\",[1,33.401]],[\"comment/21\",[]],[\"name/22\",[2,33.401]],[\"comment/22\",[]],[\"name/23\",[15,39.279]],[\"comment/23\",[]],[\"name/24\",[19,44.387]],[\"comment/24\",[]],[\"name/25\",[4,33.401]],[\"comment/25\",[]],[\"name/26\",[20,44.387]],[\"comment/26\",[]],[\"name/27\",[8,39.279]],[\"comment/27\",[]],[\"name/28\",[21,44.387]],[\"comment/28\",[]],[\"name/29\",[22,44.387]],[\"comment/29\",[]],[\"name/30\",[23,44.387]],[\"comment/30\",[]],[\"name/31\",[24,44.387]],[\"comment/31\",[]],[\"name/32\",[25,44.387]],[\"comment/32\",[]],[\"name/33\",[26,44.387]],[\"comment/33\",[]],[\"name/34\",[27,44.387]],[\"comment/34\",[]],[\"name/35\",[28,44.387]],[\"comment/35\",[]],[\"name/36\",[4,33.401]],[\"comment/36\",[]],[\"name/37\",[29,44.387]],[\"comment/37\",[]],[\"name/38\",[30,44.387]],[\"comment/38\",[]],[\"name/39\",[31,44.387]],[\"comment/39\",[]],[\"name/40\",[32,44.387]],[\"comment/40\",[]],[\"name/41\",[33,39.279]],[\"comment/41\",[]],[\"name/42\",[34,39.279]],[\"comment/42\",[]],[\"name/43\",[35,44.387]],[\"comment/43\",[]],[\"name/44\",[36,44.387]],[\"comment/44\",[]],[\"name/45\",[37,39.279]],[\"comment/45\",[]],[\"name/46\",[38,44.387]],[\"comment/46\",[]],[\"name/47\",[39,44.387]],[\"comment/47\",[]],[\"name/48\",[40,44.387]],[\"comment/48\",[]],[\"name/49\",[4,33.401]],[\"comment/49\",[]],[\"name/50\",[41,44.387]],[\"comment/50\",[]],[\"name/51\",[42,44.387]],[\"comment/51\",[]],[\"name/52\",[43,44.387]],[\"comment/52\",[]],[\"name/53\",[18,35.914]],[\"comment/53\",[]],[\"name/54\",[44,44.387]],[\"comment/54\",[]],[\"name/55\",[45,39.279]],[\"comment/55\",[]],[\"name/56\",[46,39.279]],[\"comment/56\",[]],[\"name/57\",[47,44.387]],[\"comment/57\",[]],[\"name/58\",[48,44.387]],[\"comment/58\",[]],[\"name/59\",[18,35.914]],[\"comment/59\",[]],[\"name/60\",[49,44.387]],[\"comment/60\",[]],[\"name/61\",[50,44.387]],[\"comment/61\",[]],[\"name/62\",[51,44.387]],[\"comment/62\",[]],[\"name/63\",[52,44.387]],[\"comment/63\",[]],[\"name/64\",[45,39.279]],[\"comment/64\",[]],[\"name/65\",[46,39.279]],[\"comment/65\",[]],[\"name/66\",[53,39.279]],[\"comment/66\",[]],[\"name/67\",[54,35.914]],[\"comment/67\",[]],[\"name/68\",[55,44.387]],[\"comment/68\",[]],[\"name/69\",[56,44.387]],[\"comment/69\",[]],[\"name/70\",[57,44.387]],[\"comment/70\",[]],[\"name/71\",[58,44.387]],[\"comment/71\",[]],[\"name/72\",[53,39.279]],[\"comment/72\",[]],[\"name/73\",[59,39.279]],[\"comment/73\",[]],[\"name/74\",[54,35.914]],[\"comment/74\",[]],[\"name/75\",[60,44.387]],[\"comment/75\",[]],[\"name/76\",[61,44.387]],[\"comment/76\",[]],[\"name/77\",[62,44.387]],[\"comment/77\",[]],[\"name/78\",[59,39.279]],[\"comment/78\",[]],[\"name/79\",[63,39.279]],[\"comment/79\",[]],[\"name/80\",[54,35.914]],[\"comment/80\",[]],[\"name/81\",[64,44.387]],[\"comment/81\",[]],[\"name/82\",[65,44.387]],[\"comment/82\",[]],[\"name/83\",[66,44.387]],[\"comment/83\",[]],[\"name/84\",[67,44.387]],[\"comment/84\",[]],[\"name/85\",[68,44.387]],[\"comment/85\",[]],[\"name/86\",[69,44.387]],[\"comment/86\",[]],[\"name/87\",[63,39.279]],[\"comment/87\",[]],[\"name/88\",[70,44.387]],[\"comment/88\",[]],[\"name/89\",[71,21.7]],[\"comment/89\",[]],[\"name/90\",[11,39.279]],[\"comment/90\",[]],[\"name/91\",[12,39.279]],[\"comment/91\",[]],[\"name/92\",[13,39.279]],[\"comment/92\",[]],[\"name/93\",[33,39.279]],[\"comment/93\",[]],[\"name/94\",[34,39.279]],[\"comment/94\",[]],[\"name/95\",[37,39.279]],[\"comment/95\",[]],[\"name/96\",[72,44.387]],[\"comment/96\",[]],[\"name/97\",[73,44.387]],[\"comment/97\",[]],[\"name/98\",[1,33.401]],[\"comment/98\",[]],[\"name/99\",[2,33.401]],[\"comment/99\",[]],[\"name/100\",[74,44.387]],[\"comment/100\",[]],[\"name/101\",[71,21.7]],[\"comment/101\",[]],[\"name/102\",[75,44.387]],[\"comment/102\",[]],[\"name/103\",[71,21.7]],[\"comment/103\",[]],[\"name/104\",[76,44.387]],[\"comment/104\",[]],[\"name/105\",[71,21.7]],[\"comment/105\",[]],[\"name/106\",[77,44.387]],[\"comment/106\",[]],[\"name/107\",[71,21.7]],[\"comment/107\",[]],[\"name/108\",[78,44.387]],[\"comment/108\",[]],[\"name/109\",[71,21.7]],[\"comment/109\",[]],[\"name/110\",[79,44.387]],[\"comment/110\",[]],[\"name/111\",[71,21.7]],[\"comment/111\",[]],[\"name/112\",[80,44.387]],[\"comment/112\",[]],[\"name/113\",[71,21.7]],[\"comment/113\",[]],[\"name/114\",[81,44.387]],[\"comment/114\",[]],[\"name/115\",[71,21.7]],[\"comment/115\",[]],[\"name/116\",[82,44.387]],[\"comment/116\",[]],[\"name/117\",[71,21.7]],[\"comment/117\",[]],[\"name/118\",[83,44.387]],[\"comment/118\",[]],[\"name/119\",[71,21.7]],[\"comment/119\",[]],[\"name/120\",[84,44.387]],[\"comment/120\",[]],[\"name/121\",[71,21.7]],[\"comment/121\",[]],[\"name/122\",[85,44.387]],[\"comment/122\",[]],[\"name/123\",[71,21.7]],[\"comment/123\",[]],[\"name/124\",[86,44.387]],[\"comment/124\",[]],[\"name/125\",[71,21.7]],[\"comment/125\",[]]],\"invertedIndex\":[[\"__type\",{\"_index\":54,\"name\":{\"67\":{},\"74\":{},\"80\":{}},\"comment\":{}}],[\"aead\",{\"_index\":13,\"name\":{\"13\":{},\"92\":{}},\"comment\":{}}],[\"aeadencryptioncontext\",{\"_index\":0,\"name\":{\"0\":{}},\"comment\":{}}],[\"aeadid\",{\"_index\":53,\"name\":{\"66\":{},\"72\":{}},\"comment\":{}}],[\"aeadinterface\",{\"_index\":3,\"name\":{\"3\":{}},\"comment\":{}}],[\"aes128gcm\",{\"_index\":55,\"name\":{\"68\":{}},\"comment\":{}}],[\"aes256gcm\",{\"_index\":56,\"name\":{\"69\":{}},\"comment\":{}}],[\"buildlabeledikm\",{\"_index\":21,\"name\":{\"28\":{}},\"comment\":{}}],[\"buildlabeledinfo\",{\"_index\":22,\"name\":{\"29\":{}},\"comment\":{}}],[\"chacha20poly1305\",{\"_index\":57,\"name\":{\"70\":{}},\"comment\":{}}],[\"ciphersuite\",{\"_index\":70,\"name\":{\"88\":{}},\"comment\":{}}],[\"ciphersuiteparams\",{\"_index\":10,\"name\":{\"10\":{}},\"comment\":{}}],[\"ciphersuitesealresponse\",{\"_index\":47,\"name\":{\"57\":{}},\"comment\":{}}],[\"constructor\",{\"_index\":71,\"name\":{\"89\":{},\"101\":{},\"103\":{},\"105\":{},\"107\":{},\"109\":{},\"111\":{},\"113\":{},\"115\":{},\"117\":{},\"119\":{},\"121\":{},\"123\":{},\"125\":{}},\"comment\":{}}],[\"createencryptioncontext\",{\"_index\":9,\"name\":{\"9\":{}},\"comment\":{}}],[\"createrecipientcontext\",{\"_index\":73,\"name\":{\"97\":{}},\"comment\":{}}],[\"createsendercontext\",{\"_index\":72,\"name\":{\"96\":{}},\"comment\":{}}],[\"ct\",{\"_index\":48,\"name\":{\"58\":{}},\"comment\":{}}],[\"decap\",{\"_index\":39,\"name\":{\"47\":{}},\"comment\":{}}],[\"decaperror\",{\"_index\":80,\"name\":{\"112\":{}},\"comment\":{}}],[\"derivekeypair\",{\"_index\":34,\"name\":{\"42\":{},\"94\":{}},\"comment\":{}}],[\"derivekeypairerror\",{\"_index\":85,\"name\":{\"122\":{}},\"comment\":{}}],[\"deserializeerror\",{\"_index\":78,\"name\":{\"108\":{}},\"comment\":{}}],[\"deserializepublickey\",{\"_index\":36,\"name\":{\"44\":{}},\"comment\":{}}],[\"dhkemp256hkdfsha256\",{\"_index\":64,\"name\":{\"81\":{}},\"comment\":{}}],[\"dhkemp384hkdfsha384\",{\"_index\":65,\"name\":{\"82\":{}},\"comment\":{}}],[\"dhkemp521hkdfsha512\",{\"_index\":66,\"name\":{\"83\":{}},\"comment\":{}}],[\"dhkemsecp256k1hkdfsha256\",{\"_index\":67,\"name\":{\"84\":{}},\"comment\":{}}],[\"dhkemx25519hkdfsha256\",{\"_index\":68,\"name\":{\"85\":{}},\"comment\":{}}],[\"dhkemx448hkdfsha512\",{\"_index\":69,\"name\":{\"86\":{}},\"comment\":{}}],[\"enc\",{\"_index\":18,\"name\":{\"20\":{},\"53\":{},\"59\":{}},\"comment\":{}}],[\"encap\",{\"_index\":38,\"name\":{\"46\":{}},\"comment\":{}}],[\"encaperror\",{\"_index\":79,\"name\":{\"110\":{}},\"comment\":{}}],[\"encryptioncontext\",{\"_index\":14,\"name\":{\"14\":{}},\"comment\":{}}],[\"encsize\",{\"_index\":30,\"name\":{\"38\":{}},\"comment\":{}}],[\"expand\",{\"_index\":24,\"name\":{\"31\":{}},\"comment\":{}}],[\"export\",{\"_index\":15,\"name\":{\"17\":{},\"23\":{}},\"comment\":{}}],[\"exporterror\",{\"_index\":81,\"name\":{\"114\":{}},\"comment\":{}}],[\"exportonly\",{\"_index\":58,\"name\":{\"71\":{}},\"comment\":{}}],[\"extract\",{\"_index\":23,\"name\":{\"30\":{}},\"comment\":{}}],[\"extractandexpand\",{\"_index\":25,\"name\":{\"32\":{}},\"comment\":{}}],[\"generatekeypair\",{\"_index\":33,\"name\":{\"41\":{},\"93\":{}},\"comment\":{}}],[\"hashsize\",{\"_index\":20,\"name\":{\"26\":{}},\"comment\":{}}],[\"hkdfsha256\",{\"_index\":60,\"name\":{\"75\":{}},\"comment\":{}}],[\"hkdfsha384\",{\"_index\":61,\"name\":{\"76\":{}},\"comment\":{}}],[\"hkdfsha512\",{\"_index\":62,\"name\":{\"77\":{}},\"comment\":{}}],[\"hpkeerror\",{\"_index\":74,\"name\":{\"100\":{}},\"comment\":{}}],[\"id\",{\"_index\":4,\"name\":{\"4\":{},\"25\":{},\"36\":{},\"49\":{}},\"comment\":{}}],[\"importkey\",{\"_index\":37,\"name\":{\"45\":{},\"95\":{}},\"comment\":{}}],[\"info\",{\"_index\":45,\"name\":{\"55\":{},\"64\":{}},\"comment\":{}}],[\"init\",{\"_index\":8,\"name\":{\"8\":{},\"27\":{}},\"comment\":{}}],[\"invalidparamerror\",{\"_index\":75,\"name\":{\"102\":{}},\"comment\":{}}],[\"kdf\",{\"_index\":12,\"name\":{\"12\":{},\"91\":{}},\"comment\":{}}],[\"kdfid\",{\"_index\":59,\"name\":{\"73\":{},\"78\":{}},\"comment\":{}}],[\"kdfinterface\",{\"_index\":19,\"name\":{\"24\":{}},\"comment\":{}}],[\"kem\",{\"_index\":11,\"name\":{\"11\":{},\"90\":{}},\"comment\":{}}],[\"kemid\",{\"_index\":63,\"name\":{\"79\":{},\"87\":{}},\"comment\":{}}],[\"keminterface\",{\"_index\":28,\"name\":{\"35\":{}},\"comment\":{}}],[\"key\",{\"_index\":41,\"name\":{\"50\":{}},\"comment\":{}}],[\"keysize\",{\"_index\":5,\"name\":{\"5\":{}},\"comment\":{}}],[\"labeledexpand\",{\"_index\":27,\"name\":{\"34\":{}},\"comment\":{}}],[\"labeledextract\",{\"_index\":26,\"name\":{\"33\":{}},\"comment\":{}}],[\"messagelimitreachederror\",{\"_index\":84,\"name\":{\"120\":{}},\"comment\":{}}],[\"noncesize\",{\"_index\":6,\"name\":{\"6\":{}},\"comment\":{}}],[\"nonephemeralkeypair\",{\"_index\":52,\"name\":{\"63\":{}},\"comment\":{}}],[\"notsupportederror\",{\"_index\":86,\"name\":{\"124\":{}},\"comment\":{}}],[\"open\",{\"_index\":2,\"name\":{\"2\":{},\"16\":{},\"22\":{},\"99\":{}},\"comment\":{}}],[\"openerror\",{\"_index\":83,\"name\":{\"118\":{}},\"comment\":{}}],[\"presharedkey\",{\"_index\":40,\"name\":{\"48\":{}},\"comment\":{}}],[\"privatekeysize\",{\"_index\":32,\"name\":{\"40\":{}},\"comment\":{}}],[\"psk\",{\"_index\":46,\"name\":{\"56\":{},\"65\":{}},\"comment\":{}}],[\"publickeysize\",{\"_index\":31,\"name\":{\"39\":{}},\"comment\":{}}],[\"recipientcontext\",{\"_index\":16,\"name\":{\"18\":{}},\"comment\":{}}],[\"recipientcontextparams\",{\"_index\":42,\"name\":{\"51\":{}},\"comment\":{}}],[\"recipientkey\",{\"_index\":43,\"name\":{\"52\":{}},\"comment\":{}}],[\"recipientpublickey\",{\"_index\":50,\"name\":{\"61\":{}},\"comment\":{}}],[\"seal\",{\"_index\":1,\"name\":{\"1\":{},\"15\":{},\"21\":{},\"98\":{}},\"comment\":{}}],[\"sealerror\",{\"_index\":82,\"name\":{\"116\":{}},\"comment\":{}}],[\"secretsize\",{\"_index\":29,\"name\":{\"37\":{}},\"comment\":{}}],[\"sendercontext\",{\"_index\":17,\"name\":{\"19\":{}},\"comment\":{}}],[\"sendercontextparams\",{\"_index\":49,\"name\":{\"60\":{}},\"comment\":{}}],[\"senderkey\",{\"_index\":51,\"name\":{\"62\":{}},\"comment\":{}}],[\"senderpublickey\",{\"_index\":44,\"name\":{\"54\":{}},\"comment\":{}}],[\"serializeerror\",{\"_index\":77,\"name\":{\"106\":{}},\"comment\":{}}],[\"serializepublickey\",{\"_index\":35,\"name\":{\"43\":{}},\"comment\":{}}],[\"tagsize\",{\"_index\":7,\"name\":{\"7\":{}},\"comment\":{}}],[\"validationerror\",{\"_index\":76,\"name\":{\"104\":{}},\"comment\":{}}]],\"pipeline\":[]}}"); \ No newline at end of file diff --git a/core/docs/classes/CipherSuite.html b/core/docs/classes/CipherSuite.html index e880b5e40..de6d4ec40 100644 --- a/core/docs/classes/CipherSuite.html +++ b/core/docs/classes/CipherSuite.html @@ -62,7 +62,7 @@

    Hierarchy

    • CipherSuite
    +
  • Defined in src/native.ts:57
    • @@ -110,7 +110,7 @@

    Throws

    Invali

    +
  • Defined in ../src/cipherSuiteNative.ts:169

    • Accessors

    @@ -124,7 +124,7 @@

    Returns

    +
  • Defined in ../src/cipherSuiteNative.ts:253

    • kdf

      @@ -136,7 +136,7 @@

      Returns

    +
  • Defined in ../src/cipherSuiteNative.ts:246

    • kem

    +
  • Defined in ../src/cipherSuiteNative.ts:239

    • Methods

    @@ -175,7 +175,7 @@

    Throws

    DecapError

    +
  • Defined in ../src/cipherSuiteNative.ts:355

    • createSenderContext

    +
  • Defined in ../src/cipherSuiteNative.ts:327

    • deriveKeyPair

    +
  • Defined in ../src/cipherSuiteNative.ts:284

    • generateKeyPair

    +
  • Defined in ../src/cipherSuiteNative.ts:267

    • importKey

    +
  • Defined in ../src/cipherSuiteNative.ts:309

    • open

    +
  • Defined in ../src/cipherSuiteNative.ts:407

    • seal

    +
  • Defined in ../src/cipherSuiteNative.ts:384
    • diff --git a/core/docs/classes/DecapError.html b/core/docs/classes/DecapError.html index 62bbd67aa..5245b5d15 100644 --- a/core/docs/classes/DecapError.html +++ b/core/docs/classes/DecapError.html @@ -26,7 +26,7 @@

    Hierarchy

    • DecapError
    +
  • Defined in ../src/errors.ts:49
    • @@ -58,7 +58,7 @@
    e:

    Returns DecapError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/DeriveKeyPairError.html b/core/docs/classes/DeriveKeyPairError.html index 255f95b51..ece588bf2 100644 --- a/core/docs/classes/DeriveKeyPairError.html +++ b/core/docs/classes/DeriveKeyPairError.html @@ -26,7 +26,7 @@

    Hierarchy

    • DeriveKeyPairError
    +
  • Defined in ../src/errors.ts:74
    • @@ -58,7 +58,7 @@
    e:

    Returns DeriveKeyPairError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/DeserializeError.html b/core/docs/classes/DeserializeError.html index 0c8e46657..248b04362 100644 --- a/core/docs/classes/DeserializeError.html +++ b/core/docs/classes/DeserializeError.html @@ -26,7 +26,7 @@

    Hierarchy

    • DeserializeError
    +
  • Defined in ../src/errors.ts:39
    • @@ -58,7 +58,7 @@
    e:

    Returns DeserializeError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/EncapError.html b/core/docs/classes/EncapError.html index e3afdbcd9..2400e8db4 100644 --- a/core/docs/classes/EncapError.html +++ b/core/docs/classes/EncapError.html @@ -26,7 +26,7 @@

    Hierarchy

    • EncapError
    +
  • Defined in ../src/errors.ts:44
    • @@ -58,7 +58,7 @@
    e:

    Returns EncapError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/ExportError.html b/core/docs/classes/ExportError.html index 7df0e33d8..b6116f57f 100644 --- a/core/docs/classes/ExportError.html +++ b/core/docs/classes/ExportError.html @@ -26,7 +26,7 @@

    Hierarchy

    • ExportError
    +
  • Defined in ../src/errors.ts:54
    • @@ -58,7 +58,7 @@
    e:

    Returns ExportError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/HpkeError.html b/core/docs/classes/HpkeError.html index abfb1963b..d3af249f8 100644 --- a/core/docs/classes/HpkeError.html +++ b/core/docs/classes/HpkeError.html @@ -39,7 +39,7 @@

    Hierarchy

  • DeriveKeyPairError
  • NotSupportedError
    • +
  • Defined in ../src/errors.ts:4
    • @@ -71,7 +71,7 @@
    e:

    Returns HpkeError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/InvalidParamError.html b/core/docs/classes/InvalidParamError.html index c36eac29b..9f8625cc6 100644 --- a/core/docs/classes/InvalidParamError.html +++ b/core/docs/classes/InvalidParamError.html @@ -26,7 +26,7 @@

    Hierarchy

    • InvalidParamError
    +
  • Defined in ../src/errors.ts:24
    • @@ -58,7 +58,7 @@
    e:

    Returns InvalidParamError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/MessageLimitReachedError.html b/core/docs/classes/MessageLimitReachedError.html index 7dc982ccb..b41ffc488 100644 --- a/core/docs/classes/MessageLimitReachedError.html +++ b/core/docs/classes/MessageLimitReachedError.html @@ -26,7 +26,7 @@

    Hierarchy

    • MessageLimitReachedError
    +
  • Defined in ../src/errors.ts:69
    • @@ -58,7 +58,7 @@
    e:

    Returns MessageLimitReachedError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/NotSupportedError.html b/core/docs/classes/NotSupportedError.html index 9be893f28..a41a3703a 100644 --- a/core/docs/classes/NotSupportedError.html +++ b/core/docs/classes/NotSupportedError.html @@ -26,7 +26,7 @@

    Hierarchy

    • NotSupportedError
    +
  • Defined in ../src/errors.ts:79
    • @@ -58,7 +58,7 @@
    e:

    Returns NotSupportedError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/OpenError.html b/core/docs/classes/OpenError.html index 5616d4089..703f0bd94 100644 --- a/core/docs/classes/OpenError.html +++ b/core/docs/classes/OpenError.html @@ -26,7 +26,7 @@

    Hierarchy

    • OpenError
    +
  • Defined in ../src/errors.ts:64
    • @@ -58,7 +58,7 @@
    e:

    Returns OpenError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/SealError.html b/core/docs/classes/SealError.html index 17b9f3327..3eb49c1af 100644 --- a/core/docs/classes/SealError.html +++ b/core/docs/classes/SealError.html @@ -26,7 +26,7 @@

    Hierarchy

    • SealError
    +
  • Defined in ../src/errors.ts:59
    • @@ -58,7 +58,7 @@
    e:

    Returns SealError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/SerializeError.html b/core/docs/classes/SerializeError.html index d3f88afe1..83b2bdcea 100644 --- a/core/docs/classes/SerializeError.html +++ b/core/docs/classes/SerializeError.html @@ -26,7 +26,7 @@

    Hierarchy

    • SerializeError
    +
  • Defined in ../src/errors.ts:34
    • @@ -58,7 +58,7 @@
    e:

    Returns SerializeError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/classes/ValidationError.html b/core/docs/classes/ValidationError.html index efc453ab3..8ce857cba 100644 --- a/core/docs/classes/ValidationError.html +++ b/core/docs/classes/ValidationError.html @@ -26,7 +26,7 @@

    Hierarchy

    • ValidationError
    +
  • Defined in ../src/errors.ts:29
    • @@ -58,7 +58,7 @@
    e:

    Returns ValidationError

    +
  • Defined in ../src/errors.ts:5

    • Properties

    diff --git a/core/docs/interfaces/AeadEncryptionContext.html b/core/docs/interfaces/AeadEncryptionContext.html index c4b978d0d..351b19585 100644 --- a/core/docs/interfaces/AeadEncryptionContext.html +++ b/core/docs/interfaces/AeadEncryptionContext.html @@ -24,7 +24,7 @@

    Hierarchy

    • AeadEncryptionContext
    +
  • Defined in ../src/interfaces/aeadEncryptionContext.ts:7
    • @@ -66,7 +66,7 @@

    Returns Promise<

    +
  • Defined in ../src/interfaces/aeadEncryptionContext.ts:30

    • seal

    +
  • Defined in ../src/interfaces/aeadEncryptionContext.ts:16
    • diff --git a/core/docs/interfaces/AeadInterface.html b/core/docs/interfaces/AeadInterface.html index 0857f1eff..3278e0ed1 100644 --- a/core/docs/interfaces/AeadInterface.html +++ b/core/docs/interfaces/AeadInterface.html @@ -24,7 +24,7 @@

    Hierarchy

    • AeadInterface
    +
  • Defined in ../src/interfaces/aeadInterface.ts:8
    • @@ -51,7 +51,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/aeadInterface.ts:10

    • Readonly keySize

    keySize: number
    @@ -59,7 +59,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/aeadInterface.ts:12

    • Readonly nonceSize

    nonceSize: number
    @@ -67,7 +67,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/aeadInterface.ts:14

    • Readonly tagSize

    tagSize: number
    @@ -75,7 +75,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/aeadInterface.ts:16

    • Methods

    @@ -97,7 +97,7 @@

    Returns

    +
  • Defined in ../src/interfaces/aeadInterface.ts:31

    • init

    +
  • Defined in ../src/interfaces/aeadInterface.ts:23
    • diff --git a/core/docs/interfaces/CipherSuiteParams.html b/core/docs/interfaces/CipherSuiteParams.html index 8c4bc6ccb..f6e12ea77 100644 --- a/core/docs/interfaces/CipherSuiteParams.html +++ b/core/docs/interfaces/CipherSuiteParams.html @@ -24,7 +24,7 @@

    Hierarchy

    • CipherSuiteParams
    +
  • Defined in ../src/interfaces/cipherSuiteParams.ts:9
    • @@ -45,7 +45,7 @@

    aead

    +
  • Defined in ../src/interfaces/cipherSuiteParams.ts:17

    • kdf

    kdf: KdfId | KdfInterface
    @@ -53,7 +53,7 @@

    kdf

    +
  • Defined in ../src/interfaces/cipherSuiteParams.ts:14

    • kem

    kem: KemId | KemInterface
    @@ -61,7 +61,7 @@

    kem

    +
  • Defined in ../src/interfaces/cipherSuiteParams.ts:11
    • diff --git a/core/docs/interfaces/CipherSuiteSealResponse.html b/core/docs/interfaces/CipherSuiteSealResponse.html index 0c43d2150..63577c532 100644 --- a/core/docs/interfaces/CipherSuiteSealResponse.html +++ b/core/docs/interfaces/CipherSuiteSealResponse.html @@ -24,7 +24,7 @@

    Hierarchy

    • CipherSuiteSealResponse
    +
  • Defined in ../src/interfaces/responses.ts:4
    • @@ -44,7 +44,7 @@

    ct

    +
  • Defined in ../src/interfaces/responses.ts:6

    • enc

    enc: ArrayBuffer
    @@ -52,7 +52,7 @@

    enc

    +
  • Defined in ../src/interfaces/responses.ts:8
    • diff --git a/core/docs/interfaces/EncryptionContext.html b/core/docs/interfaces/EncryptionContext.html index b055ce805..2ebe41a3d 100644 --- a/core/docs/interfaces/EncryptionContext.html +++ b/core/docs/interfaces/EncryptionContext.html @@ -28,7 +28,7 @@

    Hierarchy

    +
  • Defined in ../src/interfaces/encryptionContext.ts:6
    • @@ -70,7 +70,7 @@

    Throws

    E

    +
  • Defined in ../src/interfaces/exporter.ts:15

    • open

      @@ -98,7 +98,7 @@

      Returns Promise<

      Throws

      OpenError

    +
  • Defined in ../src/interfaces/encryptionContext.ts:29

    • seal

    +
  • Defined in ../src/interfaces/encryptionContext.ts:17
    • diff --git a/core/docs/interfaces/KdfInterface.html b/core/docs/interfaces/KdfInterface.html index cffe8315c..f484aeec9 100644 --- a/core/docs/interfaces/KdfInterface.html +++ b/core/docs/interfaces/KdfInterface.html @@ -24,7 +24,7 @@

    Hierarchy

    • KdfInterface
    +
  • Defined in ../src/interfaces/kdfInterface.ts:6
    • @@ -55,7 +55,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/kdfInterface.ts:10

    • Readonly id

    id: KdfId
    @@ -63,7 +63,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/kdfInterface.ts:8

    • Methods

    @@ -87,7 +87,7 @@

    Returns Uint8Arr

    +
  • Defined in ../src/interfaces/kdfInterface.ts:26

    • buildLabeledInfo

    +
  • Defined in ../src/interfaces/kdfInterface.ts:36

    • expand

    +
  • Defined in ../src/interfaces/kdfInterface.ts:62

    • extract

    +
  • Defined in ../src/interfaces/kdfInterface.ts:49

    • extractAndExpand

    +
  • Defined in ../src/interfaces/kdfInterface.ts:77

    • init

    +
  • Defined in ../src/interfaces/kdfInterface.ts:17

    • labeledExpand

    +
  • Defined in ../src/interfaces/kdfInterface.ts:107

    • labeledExtract

    +
  • Defined in ../src/interfaces/kdfInterface.ts:92
    • diff --git a/core/docs/interfaces/KemInterface.html b/core/docs/interfaces/KemInterface.html index a382cfbac..677c58320 100644 --- a/core/docs/interfaces/KemInterface.html +++ b/core/docs/interfaces/KemInterface.html @@ -24,7 +24,7 @@

    Hierarchy

    • KemInterface
    +
  • Defined in ../src/interfaces/kemInterface.ts:9
    • @@ -46,7 +46,6 @@

    Methods

    encap generateKeyPair importKey -init serializePublicKey
    @@ -58,7 +57,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/kemInterface.ts:15

    • Readonly id

    id: KemId
    @@ -66,7 +65,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/kemInterface.ts:11

    • Readonly privateKeySize

    privateKeySize: number
    @@ -74,7 +73,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/kemInterface.ts:19

    • Readonly publicKeySize

    publicKeySize: number
    @@ -82,7 +81,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/kemInterface.ts:17

    • Readonly secretSize

    secretSize: number
    @@ -90,7 +89,7 @@

    Readonly

    +
  • Defined in ../src/interfaces/kemInterface.ts:13

    • Methods

    @@ -115,7 +114,7 @@

    Returns Promise<

    Throws

    DecapError

    +
  • Defined in ../src/interfaces/kemInterface.ts:112

    • deriveKeyPair

    +
  • Defined in ../src/interfaces/kemInterface.ts:40

    • deserializePublicKey

    +
  • Defined in ../src/interfaces/kemInterface.ts:62

    • encap

    +
  • Defined in ../src/interfaces/kemInterface.ts:99

    • generateKeyPair

    +
  • Defined in ../src/interfaces/kemInterface.ts:29

    • importKey

    -
    -

    init

    -
      - -
    • -

      Initializes the instance by setting a SubtleCrypto API.

      -

      Basically, you don't need to call this function directly. -This function is called byCipherSuite internally.

      -
      -
      -

      Parameters

      -
        -
      • -
        api: SubtleCrypto
        -

        A SubtleCrypto API.

        -
        -
      -

      Returns void

      -
    +
  • Defined in ../src/interfaces/kemInterface.ts:82

    • serializePublicKey

    +
  • Defined in ../src/interfaces/kemInterface.ts:51
    • @@ -314,7 +292,6 @@

    encap
  • generateKeyPair
  • importKey
    • -
  • init
  • serializePublicKey

    • +
  • Defined in ../src/interfaces/preSharedKey.ts:9
    • diff --git a/core/docs/interfaces/RecipientContextParams.html b/core/docs/interfaces/RecipientContextParams.html index f24de217b..878eb7bc8 100644 --- a/core/docs/interfaces/RecipientContextParams.html +++ b/core/docs/interfaces/RecipientContextParams.html @@ -26,7 +26,7 @@

    Hierarchy

    • RecipientContextParams
    +
  • Defined in ../src/interfaces/recipientContextParams.ts:6
    • @@ -49,7 +49,7 @@

    enc

    +
  • Defined in ../src/interfaces/recipientContextParams.ts:11

    • Optional info

    info?: ArrayBuffer
    @@ -58,7 +58,7 @@

    Optional

    +
  • Defined in ../src/interfaces/keyScheduleParams.ts:8

    • Optional psk

    psk?: PreSharedKey
    @@ -68,7 +68,7 @@

    Optional

    +
  • Defined in ../src/interfaces/keyScheduleParams.ts:14

    • recipientKey

    recipientKey: CryptoKeyPair | CryptoKey
    @@ -76,7 +76,7 @@

    recipientKey

    +
  • Defined in ../src/interfaces/recipientContextParams.ts:8

    • Optional senderPublicKey

    senderPublicKey?: CryptoKey
    @@ -84,7 +84,7 @@

    Optional

    +
  • Defined in ../src/interfaces/recipientContextParams.ts:14
    • diff --git a/core/docs/interfaces/SenderContext.html b/core/docs/interfaces/SenderContext.html index 1da47277c..62afd4c09 100644 --- a/core/docs/interfaces/SenderContext.html +++ b/core/docs/interfaces/SenderContext.html @@ -26,7 +26,7 @@

    Hierarchy

    • SenderContext
    +
  • Defined in ../src/interfaces/encryptionContext.ts:40
    • @@ -51,7 +51,7 @@

    enc

    +
  • Defined in ../src/interfaces/encryptionContext.ts:42

    • Methods

    @@ -82,7 +82,7 @@

    Throws

    E

    +
  • Defined in ../src/interfaces/exporter.ts:15

    • open

      @@ -111,7 +111,7 @@

      Throws

      Ope

    +
  • Defined in ../src/interfaces/encryptionContext.ts:29

    • seal

    +
  • Defined in ../src/interfaces/encryptionContext.ts:17
    • diff --git a/core/docs/interfaces/SenderContextParams.html b/core/docs/interfaces/SenderContextParams.html index 1694a9f08..8a4a061d1 100644 --- a/core/docs/interfaces/SenderContextParams.html +++ b/core/docs/interfaces/SenderContextParams.html @@ -26,7 +26,7 @@

    Hierarchy

    • SenderContextParams
    +
  • Defined in ../src/interfaces/senderContextParams.ts:6
    • @@ -50,7 +50,7 @@

    Optional

    +
  • Defined in ../src/interfaces/keyScheduleParams.ts:8

    • Optional nonEphemeralKeyPair

    nonEphemeralKeyPair?: CryptoKeyPair
    @@ -58,7 +58,7 @@

    Optional

    +
  • Defined in ../src/interfaces/senderContextParams.ts:14

    • Optional psk

    psk?: PreSharedKey
    @@ -68,7 +68,7 @@

    Optional

    +
  • Defined in ../src/interfaces/keyScheduleParams.ts:14

    • recipientPublicKey

    recipientPublicKey: CryptoKey
    @@ -76,7 +76,7 @@

    recipientPublicKey

    +
  • Defined in ../src/interfaces/senderContextParams.ts:8

    • Optional senderKey

    senderKey?: CryptoKeyPair | CryptoKey
    @@ -84,7 +84,7 @@

    Optional

    +
  • Defined in ../src/interfaces/senderContextParams.ts:11
    • diff --git a/core/docs/types/AeadId.html b/core/docs/types/AeadId.html index d1e583015..2a4b42dc3 100644 --- a/core/docs/types/AeadId.html +++ b/core/docs/types/AeadId.html @@ -20,8 +20,8 @@

    Type alias AeadId

    +
  • Defined in ../src/identifiers.ts:97
    • +
  • Defined in ../src/identifiers.ts:102
    • diff --git a/core/docs/types/KdfId.html b/core/docs/types/KdfId.html index 790e66a7d..e50aa748a 100644 --- a/core/docs/types/KdfId.html +++ b/core/docs/types/KdfId.html @@ -20,8 +20,8 @@

    Type alias KdfId

    +
  • Defined in ../src/identifiers.ts:68
    • +
  • Defined in ../src/identifiers.ts:73
    • diff --git a/core/docs/types/KemId.html b/core/docs/types/KemId.html index a2086918f..82a7333f1 100644 --- a/core/docs/types/KemId.html +++ b/core/docs/types/KemId.html @@ -20,8 +20,8 @@

    Type alias KemId

    +
  • Defined in ../src/identifiers.ts:40
    • +
  • Defined in ../src/identifiers.ts:45
    • diff --git a/core/docs/types/RecipientContext.html b/core/docs/types/RecipientContext.html index 3863ca542..863f18d0c 100644 --- a/core/docs/types/RecipientContext.html +++ b/core/docs/types/RecipientContext.html @@ -20,7 +20,7 @@

    Type alias RecipientContext

    +
  • Defined in ../src/interfaces/encryptionContext.ts:35
    • diff --git a/core/docs/variables/AeadId-1.html b/core/docs/variables/AeadId-1.html index 7d89c9b4a..d1f4b385a 100644 --- a/core/docs/variables/AeadId-1.html +++ b/core/docs/variables/AeadId-1.html @@ -31,8 +31,8 @@
    Readonly Readonly ExportOnly: 65535
    +
  • Defined in ../src/identifiers.ts:97
    • +
  • Defined in ../src/identifiers.ts:102
    • diff --git a/core/docs/variables/KdfId-1.html b/core/docs/variables/KdfId-1.html index 1521081a0..26d687efc 100644 --- a/core/docs/variables/KdfId-1.html +++ b/core/docs/variables/KdfId-1.html @@ -29,8 +29,8 @@
    Readonly Readonly HkdfSha512: 3
    +
  • Defined in ../src/identifiers.ts:68
    • +
  • Defined in ../src/identifiers.ts:73
    • diff --git a/core/docs/variables/KemId-1.html b/core/docs/variables/KemId-1.html index 607d96aa1..4b204fe4e 100644 --- a/core/docs/variables/KemId-1.html +++ b/core/docs/variables/KemId-1.html @@ -35,8 +35,8 @@
    Readonly Readonly DhkemX448HkdfSha512: 33
    +
  • Defined in ../src/identifiers.ts:40
    • +
  • Defined in ../src/identifiers.ts:45
    • diff --git a/core/src/hpke-core.js b/core/src/hpke-core.js index 7f029bb07..997fab9f0 100644 --- a/core/src/hpke-core.js +++ b/core/src/hpke-core.js @@ -1 +1 @@ -var x={Base:0,Psk:1,Auth:2,AuthPsk:3},ve={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},h=ve,Ae={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},g=Ae,Se={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},y=Se;var c=new Uint8Array(0);var f=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},l=class extends f{},ce=class extends f{},D=class extends f{},v=class extends f{},C=class extends f{},M=class extends f{},N=class extends f{},B=class extends f{},G=class extends f{},R=class extends f{},Y=class extends f{},m=class extends f{};var Ke=new Uint8Array([115,101,99]),A=class{constructor(e,t,r){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=r}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new l("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Ke,new Uint8Array(e),t)}catch(r){throw new N(r)}}_emitError(){return new Promise((e,t)=>{t(new m("Not available"))})}},F=class extends A{},q=class extends A{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}};var W=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},b=class extends W{constructor(){super()}init(e){this._api=e}},X=class extends W{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:c})}init(e,t){this._api=e,this._suiteId=t}};var he=["encrypt","decrypt"];var $=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.encrypt(n,this._key,t)}async open(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.decrypt(n,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,he)}},J=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}},Z=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}};var Q=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new m("createEncryptionContext() is not supported on ExportOnly")}};var le=new Uint8Array([72,80,75,69,45,118,49]),O=class extends X{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let r=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return r.set(le,0),r.set(this._suiteId,7),r.set(e,7+this._suiteId.byteLength),r.set(t,7+this._suiteId.byteLength+e.byteLength),r}buildLabeledInfo(e,t,r){let n=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(new Uint8Array([0,r]),0),n.set(le,2),n.set(this._suiteId,9),n.set(e,9+this._suiteId.byteLength),n.set(t,9+this._suiteId.byteLength+e.byteLength),n}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new l("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,t)}async expand(e,t,r){this.checkInit();let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),a=new ArrayBuffer(r),o=new Uint8Array(a),s=c,u=new Uint8Array(t),w=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let _=new Uint8Array(this.hashSize+u.length+1);for(let z=1,d=0;d=s.length?(o.set(s,d),d+=s.length):(o.set(s.slice(0,o.length-d),d),d+=o.length-d);return a}async extractAndExpand(e,t,r,n){this.checkInit();let a=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:r},a,n*8)}async labeledExtract(e,t,r){return await this.extract(e,this.buildLabeledIkm(t,r))}async labeledExpand(e,t,r,n){return await this.expand(e,this.buildLabeledInfo(t,r,n),n)}},S=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},K=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},E=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ee={},fe=Ie(globalThis,Ee);function Ie(i,e){return new Proxy(i,{get(t,r,n){return r in e?e[r]:i[r]},set(t,r,n){return r in e&&delete e[r],i[r]=n,!0},deleteProperty(t,r){let n=!1;return r in e&&(delete e[r],n=!0),r in i&&(delete i[r],n=!0),n},ownKeys(t){let r=Reflect.ownKeys(i),n=Reflect.ownKeys(e),a=new Set(n);return[...r.filter(o=>!a.has(o)),...n]},defineProperty(t,r,n){return r in e&&delete e[r],Reflect.defineProperty(i,r,n),!0},getOwnPropertyDescriptor(t,r){return r in e?Reflect.getOwnPropertyDescriptor(e,r):Reflect.getOwnPropertyDescriptor(i,r)},has(t,r){return r in e||r in i}})}var de=()=>typeof fe<"u",ye=()=>typeof caches<"u";var H=i=>typeof i=="object"&&i!==null&&typeof i.privateKey=="object"&&typeof i.publicKey=="object";function p(i,e){if(e<=0)throw new Error("i2Osp: too small size");if(i>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let r=0;r>8;return t}function be(i,e){if(i.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(i.byteLength);for(let r=0;rNumber.MAX_SAFE_INTEGER)throw new R("Message limit reached");e.seq+=1}};var V=class extends I{async open(e,t=c){let r;try{r=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(n){throw new G(n)}return this.incrementSeq(this._ctx),r}};var ee=class extends I{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}async seal(e,t=c){let r;try{r=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(n){throw new B(n)}return this.incrementSeq(this._ctx),r}};async function te(){if((de()||ye())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:i}=await import("crypto");return i.subtle}catch{throw new m("Web Cryptograph API not supported")}}var we=new Uint8Array([75,69,77,0,0]),Ue=new Uint8Array([101,97,101,95,112,114,107]),Oe=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),L=class extends b{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}init(e){super.init(e);let t=new Uint8Array(we);t.set(p(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new m(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new l("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new Y(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new D(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new v(t)}}async importKey(e,t,r=!0){await this._setup();try{return await this._prim.importKey(e,t,r)}catch(n){throw new v(n)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,r=await this._prim.serializePublicKey(t.publicKey),n=await this._prim.serializePublicKey(e.recipientPublicKey),a;if(e.senderKey===void 0)a=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let u=H(e.senderKey)?e.senderKey.privateKey:e.senderKey,w=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),_=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));a=j(w,_)}let o;if(e.senderKey===void 0)o=j(new Uint8Array(r),new Uint8Array(n));else{let u=H(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),w=await this._prim.serializePublicKey(u);o=pe(new Uint8Array(r),new Uint8Array(n),new Uint8Array(w))}let s=await this._generateSharedSecret(a,o);return{enc:r,sharedSecret:s}}catch(t){throw new C(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(r){throw new v(r)}try{let r=H(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=H(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),a=await this._prim.serializePublicKey(n),o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(r,t));else{let u=new Uint8Array(await this._prim.dh(r,t)),w=new Uint8Array(await this._prim.dh(r,e.senderPublicKey));o=j(u,w)}let s;if(e.senderPublicKey===void 0)s=j(new Uint8Array(e.enc),new Uint8Array(a));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);s=new Uint8Array(e.enc.byteLength+a.byteLength+u.byteLength),s.set(new Uint8Array(e.enc),0),s.set(new Uint8Array(a),e.enc.byteLength),s.set(new Uint8Array(u),e.enc.byteLength+a.byteLength)}return await this._generateSharedSecret(o,s)}catch(r){throw new M(r)}}async _setup(){if(this._api!==void 0)return;let e=await te(),t=new Uint8Array(we);t.set(p(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let r=this._kdf.buildLabeledIkm(Ue,e),n=this._kdf.buildLabeledInfo(Oe,t,this.secretSize);return await this._kdf.extractAndExpand(c,r,n,this.secretSize)}};var T=["deriveBits"],_e=new Uint8Array([100,107,112,95,112,114,107]),Kt=new Uint8Array([115,107]);var re=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var He=new Uint8Array([99,97,110,100,105,100,97,116,101]),je=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Te=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ze=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),De=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Ce=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Me=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),U=class extends b{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case h.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=je,this._bitmask=255,this._pkcs8AlgId=De;break;case h.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Te,this._bitmask=255,this._pkcs8AlgId=Ce;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ze,this._bitmask=1,this._pkcs8AlgId=Me;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,r){if(this.checkInit(),e==="raw")return await this._importRawKey(t,r);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,r)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let r=new Uint8Array(e),n=new Uint8Array(this._pkcs8AlgId.length+r.length);return n.set(this._pkcs8AlgId,0),n.set(r,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",n,this._alg,!0,T)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,T)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,T)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(c,_e,new Uint8Array(e)),r=new re(this._nSk);for(let o=0;r.isZero()||!r.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(t,He,p(o,1),this._nSk));s[0]=s[0]&this._bitmask,r.set(s)}let n=new Uint8Array(this._pkcs8AlgId.length+r.val().length);n.set(this._pkcs8AlgId,0),n.set(r.val(),this._pkcs8AlgId.length);let a=await this._api.importKey("pkcs8",n,this._alg,!0,T);return r.reset(),{privateKey:a,publicKey:await this.derivePublicKey(a)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var ie=class extends L{constructor(){let e=new S,t=new U(h.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},ne=class extends L{constructor(){let e=new K,t=new U(h.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},ae=class extends L{constructor(){let e=new E,t=new U(h.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ne=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Be=new Uint8Array([101,120,112]),Ge=new Uint8Array([105,110,102,111,95,104,97,115,104]),Re=new Uint8Array([107,101,121]),Ye=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Fe=new Uint8Array([115,101,99,114,101,116]),qe=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),se=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case h.DhkemP256HkdfSha256:this._kem=new ie;break;case h.DhkemP384HkdfSha384:this._kem=new ne;break;case h.DhkemP521HkdfSha512:this._kem=new ae;break;default:throw new l(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case g.HkdfSha256:this._kdf=new S;break;case g.HkdfSha384:this._kdf=new K;break;default:this._kdf=new E;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case y.Aes128Gcm:this._aead=new J;break;case y.Aes256Gcm:this._aead=new Z;break;case y.ExportOnly:this._aead=new Q;break;default:throw new l(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(qe),this._suiteId.set(p(this._kem.id,2),4),this._suiteId.set(p(this._kdf.id,2),6),this._suiteId.set(p(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,r=!0){return await this._setup(),await this._kem.importKey(e,t,r)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),r;return e.psk!==void 0?r=e.senderKey!==void 0?x.AuthPsk:x.Psk:r=e.senderKey!==void 0?x.Auth:x.Base,await this._keyScheduleS(r,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),r;return e.psk!==void 0?r=e.senderPublicKey!==void 0?x.AuthPsk:x.Psk:r=e.senderPublicKey!==void 0?x.Auth:x.Base,await this._keyScheduleR(r,t,e)}async seal(e,t,r=c){let n=await this.createSenderContext(e);return{ct:await n.seal(t,r),enc:n.enc}}async open(e,t,r=c){return await(await this.createRecipientContext(e)).open(t,r)}async _setup(){if(this._api!==void 0)return;let e=await te();this._kem.init(e),this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,r){let n=r.psk===void 0?c:new Uint8Array(r.psk.id),a=await this._kdf.labeledExtract(c,Ye,n),o=r.info===void 0?c:new Uint8Array(r.info),s=await this._kdf.labeledExtract(c,Ge,o),u=new Uint8Array(1+a.byteLength+s.byteLength);u.set(new Uint8Array([e]),0),u.set(new Uint8Array(a),1),u.set(new Uint8Array(s),1+a.byteLength);let w=r.psk===void 0?c:new Uint8Array(r.psk.key),_=this._kdf.buildLabeledIkm(Fe,w),z=this._kdf.buildLabeledInfo(Be,u,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,_,z,this._kdf.hashSize);if(this._aead.id===y.ExportOnly)return{aead:this._aead,exporterSecret:d};let xe=this._kdf.buildLabeledInfo(Re,u,this._aead.keySize),ge=await this._kdf.extractAndExpand(t,_,xe,this._aead.keySize),ke=this._kdf.buildLabeledInfo(Ne,u,this._aead.nonceSize),Pe=await this._kdf.extractAndExpand(t,_,ke,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:ge,baseNonce:new Uint8Array(Pe),seq:0}}async _keyScheduleS(e,t,r,n){let a=await this._keySchedule(e,t,n);return a.key===void 0?new q(this._api,this._kdf,a.exporterSecret,r):new ee(this._api,this._kdf,a,r)}async _keyScheduleR(e,t,r){let n=await this._keySchedule(e,t,r);return n.key===void 0?new F(this._api,this._kdf,n.exporterSecret):new V(this._api,this._kdf,n)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new l("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new l(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new l("Too long psk.key");if(e.psk.id.byteLength>8192)throw new l("Too long psk.id")}}};var ue=class extends se{};export{y as AeadId,ue as CipherSuite,M as DecapError,Y as DeriveKeyPairError,v as DeserializeError,C as EncapError,N as ExportError,f as HpkeError,l as InvalidParamError,g as KdfId,h as KemId,R as MessageLimitReachedError,m as NotSupportedError,G as OpenError,B as SealError,D as SerializeError,ce as ValidationError}; +var m={Base:0,Psk:1,Auth:2,AuthPsk:3},Pe={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},h=Pe,ve={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},g=ve,Ae={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},y=Ae;var c=new Uint8Array(0);var f=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},l=class extends f{},ce=class extends f{},D=class extends f{},v=class extends f{},C=class extends f{},M=class extends f{},N=class extends f{},B=class extends f{},G=class extends f{},R=class extends f{},Y=class extends f{},_=class extends f{};var Se=new Uint8Array([115,101,99]),A=class{constructor(e,t,r){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=r}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new l("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Se,new Uint8Array(e),t)}catch(r){throw new N(r)}}_emitError(){return new Promise((e,t)=>{t(new _("Not available"))})}},F=class extends A{},q=class extends A{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}};var W=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},b=class extends W{constructor(){super()}init(e){this._api=e}},X=class extends W{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:c})}init(e,t){this._api=e,this._suiteId=t}};var he=["encrypt","decrypt"];var $=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.encrypt(n,this._key,t)}async open(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.decrypt(n,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,he)}},J=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}},Z=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}};var Q=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new _("createEncryptionContext() is not supported on ExportOnly")}};var le=new Uint8Array([72,80,75,69,45,118,49]),O=class extends X{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let r=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return r.set(le,0),r.set(this._suiteId,7),r.set(e,7+this._suiteId.byteLength),r.set(t,7+this._suiteId.byteLength+e.byteLength),r}buildLabeledInfo(e,t,r){let n=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(new Uint8Array([0,r]),0),n.set(le,2),n.set(this._suiteId,9),n.set(e,9+this._suiteId.byteLength),n.set(t,9+this._suiteId.byteLength+e.byteLength),n}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new l("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,t)}async expand(e,t,r){this.checkInit();let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),a=new ArrayBuffer(r),o=new Uint8Array(a),s=c,u=new Uint8Array(t),p=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let w=new Uint8Array(this.hashSize+u.length+1);for(let z=1,d=0;d=s.length?(o.set(s,d),d+=s.length):(o.set(s.slice(0,o.length-d),d),d+=o.length-d);return a}async extractAndExpand(e,t,r,n){this.checkInit();let a=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:r},a,n*8)}async labeledExtract(e,t,r){return await this.extract(e,this.buildLabeledIkm(t,r))}async labeledExpand(e,t,r,n){return await this.expand(e,this.buildLabeledInfo(t,r,n),n)}},S=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},K=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},E=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ke={},fe=Ee(globalThis,Ke);function Ee(i,e){return new Proxy(i,{get(t,r,n){return r in e?e[r]:i[r]},set(t,r,n){return r in e&&delete e[r],i[r]=n,!0},deleteProperty(t,r){let n=!1;return r in e&&(delete e[r],n=!0),r in i&&(delete i[r],n=!0),n},ownKeys(t){let r=Reflect.ownKeys(i),n=Reflect.ownKeys(e),a=new Set(n);return[...r.filter(o=>!a.has(o)),...n]},defineProperty(t,r,n){return r in e&&delete e[r],Reflect.defineProperty(i,r,n),!0},getOwnPropertyDescriptor(t,r){return r in e?Reflect.getOwnPropertyDescriptor(e,r):Reflect.getOwnPropertyDescriptor(i,r)},has(t,r){return r in e||r in i}})}var de=()=>typeof fe<"u",ye=()=>typeof caches<"u";var H=i=>typeof i=="object"&&i!==null&&typeof i.privateKey=="object"&&typeof i.publicKey=="object";function x(i,e){if(e<=0)throw new Error("i2Osp: too small size");if(i>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let r=0;r>8;return t}function be(i,e){if(i.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(i.byteLength);for(let r=0;rNumber.MAX_SAFE_INTEGER)throw new R("Message limit reached");e.seq+=1}};var V=class extends I{async open(e,t=c){let r;try{r=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(n){throw new G(n)}return this.incrementSeq(this._ctx),r}};var ee=class extends I{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}async seal(e,t=c){let r;try{r=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(n){throw new B(n)}return this.incrementSeq(this._ctx),r}};async function te(){if((de()||ye())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:i}=await import("crypto");return i.subtle}catch{throw new _("Web Cryptograph API not supported")}}var Le=new Uint8Array([75,69,77,0,0]),Ue=new Uint8Array([101,97,101,95,112,114,107]),Oe=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),L=class extends b{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new _(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new l("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new Y(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new D(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new v(t)}}async importKey(e,t,r=!0){await this._setup();try{return await this._prim.importKey(e,t,r)}catch(n){throw new v(n)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,r=await this._prim.serializePublicKey(t.publicKey),n=await this._prim.serializePublicKey(e.recipientPublicKey),a;if(e.senderKey===void 0)a=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let u=H(e.senderKey)?e.senderKey.privateKey:e.senderKey,p=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),w=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));a=j(p,w)}let o;if(e.senderKey===void 0)o=j(new Uint8Array(r),new Uint8Array(n));else{let u=H(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),p=await this._prim.serializePublicKey(u);o=pe(new Uint8Array(r),new Uint8Array(n),new Uint8Array(p))}let s=await this._generateSharedSecret(a,o);return{enc:r,sharedSecret:s}}catch(t){throw new C(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(r){throw new v(r)}try{let r=H(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=H(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),a=await this._prim.serializePublicKey(n),o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(r,t));else{let u=new Uint8Array(await this._prim.dh(r,t)),p=new Uint8Array(await this._prim.dh(r,e.senderPublicKey));o=j(u,p)}let s;if(e.senderPublicKey===void 0)s=j(new Uint8Array(e.enc),new Uint8Array(a));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);s=new Uint8Array(e.enc.byteLength+a.byteLength+u.byteLength),s.set(new Uint8Array(e.enc),0),s.set(new Uint8Array(a),e.enc.byteLength),s.set(new Uint8Array(u),e.enc.byteLength+a.byteLength)}return await this._generateSharedSecret(o,s)}catch(r){throw new M(r)}}async _setup(){if(this._api!==void 0)return;let e=await te(),t=new Uint8Array(Le);t.set(x(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let r=this._kdf.buildLabeledIkm(Ue,e),n=this._kdf.buildLabeledInfo(Oe,t,this.secretSize);return await this._kdf.extractAndExpand(c,r,n,this.secretSize)}};var T=["deriveBits"],we=new Uint8Array([100,107,112,95,112,114,107]),Kt=new Uint8Array([115,107]);var re=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var He=new Uint8Array([99,97,110,100,105,100,97,116,101]),je=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Te=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ze=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),De=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Ce=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Me=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),U=class extends b{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case h.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=je,this._bitmask=255,this._pkcs8AlgId=De;break;case h.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Te,this._bitmask=255,this._pkcs8AlgId=Ce;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ze,this._bitmask=1,this._pkcs8AlgId=Me;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,r){if(this.checkInit(),e==="raw")return await this._importRawKey(t,r);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,r)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let r=new Uint8Array(e),n=new Uint8Array(this._pkcs8AlgId.length+r.length);return n.set(this._pkcs8AlgId,0),n.set(r,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",n,this._alg,!0,T)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,T)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,T)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(c,we,new Uint8Array(e)),r=new re(this._nSk);for(let o=0;r.isZero()||!r.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(t,He,x(o,1),this._nSk));s[0]=s[0]&this._bitmask,r.set(s)}let n=new Uint8Array(this._pkcs8AlgId.length+r.val().length);n.set(this._pkcs8AlgId,0),n.set(r.val(),this._pkcs8AlgId.length);let a=await this._api.importKey("pkcs8",n,this._alg,!0,T);return r.reset(),{privateKey:a,publicKey:await this.derivePublicKey(a)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var ie=class extends L{constructor(){let e=new S,t=new U(h.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},ne=class extends L{constructor(){let e=new K,t=new U(h.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},ae=class extends L{constructor(){let e=new E,t=new U(h.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ne=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Be=new Uint8Array([101,120,112]),Ge=new Uint8Array([105,110,102,111,95,104,97,115,104]),Re=new Uint8Array([107,101,121]),Ye=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Fe=new Uint8Array([115,101,99,114,101,116]),qe=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),se=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case h.DhkemP256HkdfSha256:this._kem=new ie;break;case h.DhkemP384HkdfSha384:this._kem=new ne;break;case h.DhkemP521HkdfSha512:this._kem=new ae;break;default:throw new l(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case g.HkdfSha256:this._kdf=new S;break;case g.HkdfSha384:this._kdf=new K;break;default:this._kdf=new E;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case y.Aes128Gcm:this._aead=new J;break;case y.Aes256Gcm:this._aead=new Z;break;case y.ExportOnly:this._aead=new Q;break;default:throw new l(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(qe),this._suiteId.set(x(this._kem.id,2),4),this._suiteId.set(x(this._kdf.id,2),6),this._suiteId.set(x(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,r=!0){return await this._setup(),await this._kem.importKey(e,t,r)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),r;return e.psk!==void 0?r=e.senderKey!==void 0?m.AuthPsk:m.Psk:r=e.senderKey!==void 0?m.Auth:m.Base,await this._keyScheduleS(r,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),r;return e.psk!==void 0?r=e.senderPublicKey!==void 0?m.AuthPsk:m.Psk:r=e.senderPublicKey!==void 0?m.Auth:m.Base,await this._keyScheduleR(r,t,e)}async seal(e,t,r=c){let n=await this.createSenderContext(e);return{ct:await n.seal(t,r),enc:n.enc}}async open(e,t,r=c){return await(await this.createRecipientContext(e)).open(t,r)}async _setup(){if(this._api!==void 0)return;let e=await te();this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,r){let n=r.psk===void 0?c:new Uint8Array(r.psk.id),a=await this._kdf.labeledExtract(c,Ye,n),o=r.info===void 0?c:new Uint8Array(r.info),s=await this._kdf.labeledExtract(c,Ge,o),u=new Uint8Array(1+a.byteLength+s.byteLength);u.set(new Uint8Array([e]),0),u.set(new Uint8Array(a),1),u.set(new Uint8Array(s),1+a.byteLength);let p=r.psk===void 0?c:new Uint8Array(r.psk.key),w=this._kdf.buildLabeledIkm(Fe,p),z=this._kdf.buildLabeledInfo(Be,u,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,w,z,this._kdf.hashSize);if(this._aead.id===y.ExportOnly)return{aead:this._aead,exporterSecret:d};let xe=this._kdf.buildLabeledInfo(Re,u,this._aead.keySize),me=await this._kdf.extractAndExpand(t,w,xe,this._aead.keySize),ge=this._kdf.buildLabeledInfo(Ne,u,this._aead.nonceSize),ke=await this._kdf.extractAndExpand(t,w,ge,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:me,baseNonce:new Uint8Array(ke),seq:0}}async _keyScheduleS(e,t,r,n){let a=await this._keySchedule(e,t,n);return a.key===void 0?new q(this._api,this._kdf,a.exporterSecret,r):new ee(this._api,this._kdf,a,r)}async _keyScheduleR(e,t,r){let n=await this._keySchedule(e,t,r);return n.key===void 0?new F(this._api,this._kdf,n.exporterSecret):new V(this._api,this._kdf,n)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new l("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new l(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new l("Too long psk.key");if(e.psk.id.byteLength>8192)throw new l("Too long psk.id")}}};var ue=class extends se{};export{y as AeadId,ue as CipherSuite,M as DecapError,Y as DeriveKeyPairError,v as DeserializeError,C as EncapError,N as ExportError,f as HpkeError,l as InvalidParamError,g as KdfId,h as KemId,R as MessageLimitReachedError,_ as NotSupportedError,G as OpenError,B as SealError,D as SerializeError,ce as ValidationError}; diff --git a/dhkem-secp256k1/docs/assets/search.js b/dhkem-secp256k1/docs/assets/search.js index ed320aff8..51d5142f7 100644 --- a/dhkem-secp256k1/docs/assets/search.js +++ b/dhkem-secp256k1/docs/assets/search.js @@ -1 +1 @@ -window.searchData = JSON.parse("{\"rows\":[{\"kind\":128,\"name\":\"DhkemSecp256k1HkdfSha256\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#constructor\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#id\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"secretSize\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#secretSize\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"encSize\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#encSize\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"publicKeySize\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#publicKeySize\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"privateKeySize\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#privateKeySize\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"_prim\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#_prim\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"_kdf\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#_kdf\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#init\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#generateKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#deriveKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"serializePublicKey\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#serializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"deserializePublicKey\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#deserializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#importKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"encap\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#encap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"decap\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#decap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"_api\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#_api\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"checkInit\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#checkInit\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"}],\"index\":{\"version\":\"2.3.9\",\"fields\":[\"name\",\"comment\"],\"fieldVectors\":[[\"name/0\",[0,25.903]],[\"comment/0\",[]],[\"name/1\",[1,25.903]],[\"comment/1\",[]],[\"name/2\",[2,25.903]],[\"comment/2\",[]],[\"name/3\",[3,25.903]],[\"comment/3\",[]],[\"name/4\",[4,25.903]],[\"comment/4\",[]],[\"name/5\",[5,25.903]],[\"comment/5\",[]],[\"name/6\",[6,25.903]],[\"comment/6\",[]],[\"name/7\",[7,25.903]],[\"comment/7\",[]],[\"name/8\",[8,25.903]],[\"comment/8\",[]],[\"name/9\",[9,25.903]],[\"comment/9\",[]],[\"name/10\",[10,25.903]],[\"comment/10\",[]],[\"name/11\",[11,25.903]],[\"comment/11\",[]],[\"name/12\",[12,25.903]],[\"comment/12\",[]],[\"name/13\",[13,25.903]],[\"comment/13\",[]],[\"name/14\",[14,25.903]],[\"comment/14\",[]],[\"name/15\",[15,25.903]],[\"comment/15\",[]],[\"name/16\",[16,25.903]],[\"comment/16\",[]],[\"name/17\",[17,25.903]],[\"comment/17\",[]],[\"name/18\",[18,25.903]],[\"comment/18\",[]]],\"invertedIndex\":[[\"_api\",{\"_index\":17,\"name\":{\"17\":{}},\"comment\":{}}],[\"_kdf\",{\"_index\":8,\"name\":{\"8\":{}},\"comment\":{}}],[\"_prim\",{\"_index\":7,\"name\":{\"7\":{}},\"comment\":{}}],[\"checkinit\",{\"_index\":18,\"name\":{\"18\":{}},\"comment\":{}}],[\"constructor\",{\"_index\":1,\"name\":{\"1\":{}},\"comment\":{}}],[\"decap\",{\"_index\":16,\"name\":{\"16\":{}},\"comment\":{}}],[\"derivekeypair\",{\"_index\":11,\"name\":{\"11\":{}},\"comment\":{}}],[\"deserializepublickey\",{\"_index\":13,\"name\":{\"13\":{}},\"comment\":{}}],[\"dhkemsecp256k1hkdfsha256\",{\"_index\":0,\"name\":{\"0\":{}},\"comment\":{}}],[\"encap\",{\"_index\":15,\"name\":{\"15\":{}},\"comment\":{}}],[\"encsize\",{\"_index\":4,\"name\":{\"4\":{}},\"comment\":{}}],[\"generatekeypair\",{\"_index\":10,\"name\":{\"10\":{}},\"comment\":{}}],[\"id\",{\"_index\":2,\"name\":{\"2\":{}},\"comment\":{}}],[\"importkey\",{\"_index\":14,\"name\":{\"14\":{}},\"comment\":{}}],[\"init\",{\"_index\":9,\"name\":{\"9\":{}},\"comment\":{}}],[\"privatekeysize\",{\"_index\":6,\"name\":{\"6\":{}},\"comment\":{}}],[\"publickeysize\",{\"_index\":5,\"name\":{\"5\":{}},\"comment\":{}}],[\"secretsize\",{\"_index\":3,\"name\":{\"3\":{}},\"comment\":{}}],[\"serializepublickey\",{\"_index\":12,\"name\":{\"12\":{}},\"comment\":{}}]],\"pipeline\":[]}}"); \ No newline at end of file +window.searchData = JSON.parse("{\"rows\":[{\"kind\":128,\"name\":\"DhkemSecp256k1HkdfSha256\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#constructor\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#id\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"secretSize\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#secretSize\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"encSize\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#encSize\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"publicKeySize\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#publicKeySize\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"privateKeySize\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#privateKeySize\",\"classes\":\"\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"_prim\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#_prim\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"_kdf\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#_kdf\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#generateKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#deriveKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"serializePublicKey\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#serializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"deserializePublicKey\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#deserializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#importKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"encap\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#encap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"decap\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#decap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#init\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":1024,\"name\":\"_api\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#_api\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"},{\"kind\":2048,\"name\":\"checkInit\",\"url\":\"classes/DhkemSecp256k1HkdfSha256.html#checkInit\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemSecp256k1HkdfSha256\"}],\"index\":{\"version\":\"2.3.9\",\"fields\":[\"name\",\"comment\"],\"fieldVectors\":[[\"name/0\",[0,25.903]],[\"comment/0\",[]],[\"name/1\",[1,25.903]],[\"comment/1\",[]],[\"name/2\",[2,25.903]],[\"comment/2\",[]],[\"name/3\",[3,25.903]],[\"comment/3\",[]],[\"name/4\",[4,25.903]],[\"comment/4\",[]],[\"name/5\",[5,25.903]],[\"comment/5\",[]],[\"name/6\",[6,25.903]],[\"comment/6\",[]],[\"name/7\",[7,25.903]],[\"comment/7\",[]],[\"name/8\",[8,25.903]],[\"comment/8\",[]],[\"name/9\",[9,25.903]],[\"comment/9\",[]],[\"name/10\",[10,25.903]],[\"comment/10\",[]],[\"name/11\",[11,25.903]],[\"comment/11\",[]],[\"name/12\",[12,25.903]],[\"comment/12\",[]],[\"name/13\",[13,25.903]],[\"comment/13\",[]],[\"name/14\",[14,25.903]],[\"comment/14\",[]],[\"name/15\",[15,25.903]],[\"comment/15\",[]],[\"name/16\",[16,25.903]],[\"comment/16\",[]],[\"name/17\",[17,25.903]],[\"comment/17\",[]],[\"name/18\",[18,25.903]],[\"comment/18\",[]]],\"invertedIndex\":[[\"_api\",{\"_index\":17,\"name\":{\"17\":{}},\"comment\":{}}],[\"_kdf\",{\"_index\":8,\"name\":{\"8\":{}},\"comment\":{}}],[\"_prim\",{\"_index\":7,\"name\":{\"7\":{}},\"comment\":{}}],[\"checkinit\",{\"_index\":18,\"name\":{\"18\":{}},\"comment\":{}}],[\"constructor\",{\"_index\":1,\"name\":{\"1\":{}},\"comment\":{}}],[\"decap\",{\"_index\":15,\"name\":{\"15\":{}},\"comment\":{}}],[\"derivekeypair\",{\"_index\":10,\"name\":{\"10\":{}},\"comment\":{}}],[\"deserializepublickey\",{\"_index\":12,\"name\":{\"12\":{}},\"comment\":{}}],[\"dhkemsecp256k1hkdfsha256\",{\"_index\":0,\"name\":{\"0\":{}},\"comment\":{}}],[\"encap\",{\"_index\":14,\"name\":{\"14\":{}},\"comment\":{}}],[\"encsize\",{\"_index\":4,\"name\":{\"4\":{}},\"comment\":{}}],[\"generatekeypair\",{\"_index\":9,\"name\":{\"9\":{}},\"comment\":{}}],[\"id\",{\"_index\":2,\"name\":{\"2\":{}},\"comment\":{}}],[\"importkey\",{\"_index\":13,\"name\":{\"13\":{}},\"comment\":{}}],[\"init\",{\"_index\":16,\"name\":{\"16\":{}},\"comment\":{}}],[\"privatekeysize\",{\"_index\":6,\"name\":{\"6\":{}},\"comment\":{}}],[\"publickeysize\",{\"_index\":5,\"name\":{\"5\":{}},\"comment\":{}}],[\"secretsize\",{\"_index\":3,\"name\":{\"3\":{}},\"comment\":{}}],[\"serializepublickey\",{\"_index\":11,\"name\":{\"11\":{}},\"comment\":{}}]],\"pipeline\":[]}}"); \ No newline at end of file diff --git a/dhkem-secp256k1/docs/classes/DhkemSecp256k1HkdfSha256.html b/dhkem-secp256k1/docs/classes/DhkemSecp256k1HkdfSha256.html index 23bf16f98..4961cc1d4 100644 --- a/dhkem-secp256k1/docs/classes/DhkemSecp256k1HkdfSha256.html +++ b/dhkem-secp256k1/docs/classes/DhkemSecp256k1HkdfSha256.html @@ -35,7 +35,7 @@

    Hierarchy

    • DhkemSecp256k1HkdfSha256
    +
  • Defined in src/kems/dhkemSecp256k1.ts:31
    • @@ -78,7 +78,7 @@

    constructorReturns DhkemSecp256k1HkdfSha256

    +
  • Defined in src/kems/dhkemSecp256k1.ts:38

    • Properties

    @@ -86,49 +86,49 @@

    Protected_api: SubtleCrypto = undefined

    +
  • Defined in src/algorithm.ts:4

    • Protected _kdf

    _kdf: KdfInterface
    +
  • Defined in src/kems/dhkem.ts:44

    • Protected _prim

    _prim: KemPrimitives
    +
  • Defined in src/kems/dhkem.ts:43

    • Readonly encSize

    encSize: number = 33
    +
  • Defined in src/kems/dhkemSecp256k1.ts:34

    • Readonly id

    id: KemId = KemId.DhkemSecp256k1HkdfSha256
    +
  • Defined in src/kems/dhkemSecp256k1.ts:32

    • Readonly privateKeySize

    privateKeySize: number = 32
    +
  • Defined in src/kems/dhkemSecp256k1.ts:36

    • Readonly publicKeySize

    publicKeySize: number = 33
    +
  • Defined in src/kems/dhkemSecp256k1.ts:35

    • Readonly secretSize

    secretSize: number = 32
    +
  • Defined in src/kems/dhkemSecp256k1.ts:33

    • Methods

    @@ -139,7 +139,7 @@

    ProtectedReturns void

    +
  • Defined in src/algorithm.ts:8

    • decap

      @@ -153,7 +153,7 @@
      params: Returns Promise<ArrayBuffer>
    +
  • Defined in src/kems/dhkem.ts:159

    • deriveKeyPair

      @@ -167,7 +167,7 @@
      ikm: Returns Promise<CryptoKeyPair>
    +
  • Defined in src/kems/dhkem.ts:61

    • deserializePublicKey

      @@ -181,7 +181,7 @@
      key: Returns Promise<CryptoKey>
    +
  • Defined in src/kems/dhkem.ts:82

    • encap

      @@ -195,7 +195,7 @@
      params: Returns Promise<{
          enc: ArrayBuffer;
          sharedSecret: ArrayBuffer;
      }>
    +
  • Defined in src/kems/dhkem.ts:104

    • generateKeyPair

    +
  • Defined in src/kems/dhkem.ts:52

    • importKey

      @@ -222,7 +222,7 @@
      isPublic: Returns Promise<CryptoKey>
    +
  • Defined in src/kems/dhkem.ts:91

    • init

    +
  • Defined in src/algorithm.ts:20

    • serializePublicKey

      @@ -250,7 +250,7 @@
      key: Returns Promise<ArrayBuffer>
    +
  • Defined in src/kems/dhkem.ts:73
    • diff --git a/dhkem-secp256k1/src/hpke-core.js b/dhkem-secp256k1/src/hpke-core.js index 7f029bb07..997fab9f0 100644 --- a/dhkem-secp256k1/src/hpke-core.js +++ b/dhkem-secp256k1/src/hpke-core.js @@ -1 +1 @@ -var x={Base:0,Psk:1,Auth:2,AuthPsk:3},ve={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},h=ve,Ae={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},g=Ae,Se={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},y=Se;var c=new Uint8Array(0);var f=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},l=class extends f{},ce=class extends f{},D=class extends f{},v=class extends f{},C=class extends f{},M=class extends f{},N=class extends f{},B=class extends f{},G=class extends f{},R=class extends f{},Y=class extends f{},m=class extends f{};var Ke=new Uint8Array([115,101,99]),A=class{constructor(e,t,r){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=r}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new l("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Ke,new Uint8Array(e),t)}catch(r){throw new N(r)}}_emitError(){return new Promise((e,t)=>{t(new m("Not available"))})}},F=class extends A{},q=class extends A{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}};var W=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},b=class extends W{constructor(){super()}init(e){this._api=e}},X=class extends W{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:c})}init(e,t){this._api=e,this._suiteId=t}};var he=["encrypt","decrypt"];var $=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.encrypt(n,this._key,t)}async open(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.decrypt(n,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,he)}},J=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}},Z=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}};var Q=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new m("createEncryptionContext() is not supported on ExportOnly")}};var le=new Uint8Array([72,80,75,69,45,118,49]),O=class extends X{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let r=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return r.set(le,0),r.set(this._suiteId,7),r.set(e,7+this._suiteId.byteLength),r.set(t,7+this._suiteId.byteLength+e.byteLength),r}buildLabeledInfo(e,t,r){let n=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(new Uint8Array([0,r]),0),n.set(le,2),n.set(this._suiteId,9),n.set(e,9+this._suiteId.byteLength),n.set(t,9+this._suiteId.byteLength+e.byteLength),n}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new l("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,t)}async expand(e,t,r){this.checkInit();let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),a=new ArrayBuffer(r),o=new Uint8Array(a),s=c,u=new Uint8Array(t),w=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let _=new Uint8Array(this.hashSize+u.length+1);for(let z=1,d=0;d=s.length?(o.set(s,d),d+=s.length):(o.set(s.slice(0,o.length-d),d),d+=o.length-d);return a}async extractAndExpand(e,t,r,n){this.checkInit();let a=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:r},a,n*8)}async labeledExtract(e,t,r){return await this.extract(e,this.buildLabeledIkm(t,r))}async labeledExpand(e,t,r,n){return await this.expand(e,this.buildLabeledInfo(t,r,n),n)}},S=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},K=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},E=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ee={},fe=Ie(globalThis,Ee);function Ie(i,e){return new Proxy(i,{get(t,r,n){return r in e?e[r]:i[r]},set(t,r,n){return r in e&&delete e[r],i[r]=n,!0},deleteProperty(t,r){let n=!1;return r in e&&(delete e[r],n=!0),r in i&&(delete i[r],n=!0),n},ownKeys(t){let r=Reflect.ownKeys(i),n=Reflect.ownKeys(e),a=new Set(n);return[...r.filter(o=>!a.has(o)),...n]},defineProperty(t,r,n){return r in e&&delete e[r],Reflect.defineProperty(i,r,n),!0},getOwnPropertyDescriptor(t,r){return r in e?Reflect.getOwnPropertyDescriptor(e,r):Reflect.getOwnPropertyDescriptor(i,r)},has(t,r){return r in e||r in i}})}var de=()=>typeof fe<"u",ye=()=>typeof caches<"u";var H=i=>typeof i=="object"&&i!==null&&typeof i.privateKey=="object"&&typeof i.publicKey=="object";function p(i,e){if(e<=0)throw new Error("i2Osp: too small size");if(i>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let r=0;r>8;return t}function be(i,e){if(i.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(i.byteLength);for(let r=0;rNumber.MAX_SAFE_INTEGER)throw new R("Message limit reached");e.seq+=1}};var V=class extends I{async open(e,t=c){let r;try{r=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(n){throw new G(n)}return this.incrementSeq(this._ctx),r}};var ee=class extends I{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}async seal(e,t=c){let r;try{r=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(n){throw new B(n)}return this.incrementSeq(this._ctx),r}};async function te(){if((de()||ye())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:i}=await import("crypto");return i.subtle}catch{throw new m("Web Cryptograph API not supported")}}var we=new Uint8Array([75,69,77,0,0]),Ue=new Uint8Array([101,97,101,95,112,114,107]),Oe=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),L=class extends b{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}init(e){super.init(e);let t=new Uint8Array(we);t.set(p(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new m(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new l("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new Y(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new D(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new v(t)}}async importKey(e,t,r=!0){await this._setup();try{return await this._prim.importKey(e,t,r)}catch(n){throw new v(n)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,r=await this._prim.serializePublicKey(t.publicKey),n=await this._prim.serializePublicKey(e.recipientPublicKey),a;if(e.senderKey===void 0)a=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let u=H(e.senderKey)?e.senderKey.privateKey:e.senderKey,w=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),_=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));a=j(w,_)}let o;if(e.senderKey===void 0)o=j(new Uint8Array(r),new Uint8Array(n));else{let u=H(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),w=await this._prim.serializePublicKey(u);o=pe(new Uint8Array(r),new Uint8Array(n),new Uint8Array(w))}let s=await this._generateSharedSecret(a,o);return{enc:r,sharedSecret:s}}catch(t){throw new C(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(r){throw new v(r)}try{let r=H(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=H(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),a=await this._prim.serializePublicKey(n),o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(r,t));else{let u=new Uint8Array(await this._prim.dh(r,t)),w=new Uint8Array(await this._prim.dh(r,e.senderPublicKey));o=j(u,w)}let s;if(e.senderPublicKey===void 0)s=j(new Uint8Array(e.enc),new Uint8Array(a));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);s=new Uint8Array(e.enc.byteLength+a.byteLength+u.byteLength),s.set(new Uint8Array(e.enc),0),s.set(new Uint8Array(a),e.enc.byteLength),s.set(new Uint8Array(u),e.enc.byteLength+a.byteLength)}return await this._generateSharedSecret(o,s)}catch(r){throw new M(r)}}async _setup(){if(this._api!==void 0)return;let e=await te(),t=new Uint8Array(we);t.set(p(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let r=this._kdf.buildLabeledIkm(Ue,e),n=this._kdf.buildLabeledInfo(Oe,t,this.secretSize);return await this._kdf.extractAndExpand(c,r,n,this.secretSize)}};var T=["deriveBits"],_e=new Uint8Array([100,107,112,95,112,114,107]),Kt=new Uint8Array([115,107]);var re=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var He=new Uint8Array([99,97,110,100,105,100,97,116,101]),je=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Te=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ze=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),De=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Ce=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Me=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),U=class extends b{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case h.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=je,this._bitmask=255,this._pkcs8AlgId=De;break;case h.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Te,this._bitmask=255,this._pkcs8AlgId=Ce;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ze,this._bitmask=1,this._pkcs8AlgId=Me;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,r){if(this.checkInit(),e==="raw")return await this._importRawKey(t,r);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,r)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let r=new Uint8Array(e),n=new Uint8Array(this._pkcs8AlgId.length+r.length);return n.set(this._pkcs8AlgId,0),n.set(r,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",n,this._alg,!0,T)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,T)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,T)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(c,_e,new Uint8Array(e)),r=new re(this._nSk);for(let o=0;r.isZero()||!r.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(t,He,p(o,1),this._nSk));s[0]=s[0]&this._bitmask,r.set(s)}let n=new Uint8Array(this._pkcs8AlgId.length+r.val().length);n.set(this._pkcs8AlgId,0),n.set(r.val(),this._pkcs8AlgId.length);let a=await this._api.importKey("pkcs8",n,this._alg,!0,T);return r.reset(),{privateKey:a,publicKey:await this.derivePublicKey(a)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var ie=class extends L{constructor(){let e=new S,t=new U(h.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},ne=class extends L{constructor(){let e=new K,t=new U(h.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},ae=class extends L{constructor(){let e=new E,t=new U(h.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ne=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Be=new Uint8Array([101,120,112]),Ge=new Uint8Array([105,110,102,111,95,104,97,115,104]),Re=new Uint8Array([107,101,121]),Ye=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Fe=new Uint8Array([115,101,99,114,101,116]),qe=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),se=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case h.DhkemP256HkdfSha256:this._kem=new ie;break;case h.DhkemP384HkdfSha384:this._kem=new ne;break;case h.DhkemP521HkdfSha512:this._kem=new ae;break;default:throw new l(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case g.HkdfSha256:this._kdf=new S;break;case g.HkdfSha384:this._kdf=new K;break;default:this._kdf=new E;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case y.Aes128Gcm:this._aead=new J;break;case y.Aes256Gcm:this._aead=new Z;break;case y.ExportOnly:this._aead=new Q;break;default:throw new l(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(qe),this._suiteId.set(p(this._kem.id,2),4),this._suiteId.set(p(this._kdf.id,2),6),this._suiteId.set(p(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,r=!0){return await this._setup(),await this._kem.importKey(e,t,r)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),r;return e.psk!==void 0?r=e.senderKey!==void 0?x.AuthPsk:x.Psk:r=e.senderKey!==void 0?x.Auth:x.Base,await this._keyScheduleS(r,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),r;return e.psk!==void 0?r=e.senderPublicKey!==void 0?x.AuthPsk:x.Psk:r=e.senderPublicKey!==void 0?x.Auth:x.Base,await this._keyScheduleR(r,t,e)}async seal(e,t,r=c){let n=await this.createSenderContext(e);return{ct:await n.seal(t,r),enc:n.enc}}async open(e,t,r=c){return await(await this.createRecipientContext(e)).open(t,r)}async _setup(){if(this._api!==void 0)return;let e=await te();this._kem.init(e),this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,r){let n=r.psk===void 0?c:new Uint8Array(r.psk.id),a=await this._kdf.labeledExtract(c,Ye,n),o=r.info===void 0?c:new Uint8Array(r.info),s=await this._kdf.labeledExtract(c,Ge,o),u=new Uint8Array(1+a.byteLength+s.byteLength);u.set(new Uint8Array([e]),0),u.set(new Uint8Array(a),1),u.set(new Uint8Array(s),1+a.byteLength);let w=r.psk===void 0?c:new Uint8Array(r.psk.key),_=this._kdf.buildLabeledIkm(Fe,w),z=this._kdf.buildLabeledInfo(Be,u,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,_,z,this._kdf.hashSize);if(this._aead.id===y.ExportOnly)return{aead:this._aead,exporterSecret:d};let xe=this._kdf.buildLabeledInfo(Re,u,this._aead.keySize),ge=await this._kdf.extractAndExpand(t,_,xe,this._aead.keySize),ke=this._kdf.buildLabeledInfo(Ne,u,this._aead.nonceSize),Pe=await this._kdf.extractAndExpand(t,_,ke,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:ge,baseNonce:new Uint8Array(Pe),seq:0}}async _keyScheduleS(e,t,r,n){let a=await this._keySchedule(e,t,n);return a.key===void 0?new q(this._api,this._kdf,a.exporterSecret,r):new ee(this._api,this._kdf,a,r)}async _keyScheduleR(e,t,r){let n=await this._keySchedule(e,t,r);return n.key===void 0?new F(this._api,this._kdf,n.exporterSecret):new V(this._api,this._kdf,n)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new l("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new l(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new l("Too long psk.key");if(e.psk.id.byteLength>8192)throw new l("Too long psk.id")}}};var ue=class extends se{};export{y as AeadId,ue as CipherSuite,M as DecapError,Y as DeriveKeyPairError,v as DeserializeError,C as EncapError,N as ExportError,f as HpkeError,l as InvalidParamError,g as KdfId,h as KemId,R as MessageLimitReachedError,m as NotSupportedError,G as OpenError,B as SealError,D as SerializeError,ce as ValidationError}; +var m={Base:0,Psk:1,Auth:2,AuthPsk:3},Pe={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},h=Pe,ve={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},g=ve,Ae={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},y=Ae;var c=new Uint8Array(0);var f=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},l=class extends f{},ce=class extends f{},D=class extends f{},v=class extends f{},C=class extends f{},M=class extends f{},N=class extends f{},B=class extends f{},G=class extends f{},R=class extends f{},Y=class extends f{},_=class extends f{};var Se=new Uint8Array([115,101,99]),A=class{constructor(e,t,r){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=r}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new l("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Se,new Uint8Array(e),t)}catch(r){throw new N(r)}}_emitError(){return new Promise((e,t)=>{t(new _("Not available"))})}},F=class extends A{},q=class extends A{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}};var W=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},b=class extends W{constructor(){super()}init(e){this._api=e}},X=class extends W{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:c})}init(e,t){this._api=e,this._suiteId=t}};var he=["encrypt","decrypt"];var $=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.encrypt(n,this._key,t)}async open(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.decrypt(n,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,he)}},J=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}},Z=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}};var Q=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new _("createEncryptionContext() is not supported on ExportOnly")}};var le=new Uint8Array([72,80,75,69,45,118,49]),O=class extends X{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let r=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return r.set(le,0),r.set(this._suiteId,7),r.set(e,7+this._suiteId.byteLength),r.set(t,7+this._suiteId.byteLength+e.byteLength),r}buildLabeledInfo(e,t,r){let n=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(new Uint8Array([0,r]),0),n.set(le,2),n.set(this._suiteId,9),n.set(e,9+this._suiteId.byteLength),n.set(t,9+this._suiteId.byteLength+e.byteLength),n}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new l("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,t)}async expand(e,t,r){this.checkInit();let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),a=new ArrayBuffer(r),o=new Uint8Array(a),s=c,u=new Uint8Array(t),p=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let w=new Uint8Array(this.hashSize+u.length+1);for(let z=1,d=0;d=s.length?(o.set(s,d),d+=s.length):(o.set(s.slice(0,o.length-d),d),d+=o.length-d);return a}async extractAndExpand(e,t,r,n){this.checkInit();let a=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:r},a,n*8)}async labeledExtract(e,t,r){return await this.extract(e,this.buildLabeledIkm(t,r))}async labeledExpand(e,t,r,n){return await this.expand(e,this.buildLabeledInfo(t,r,n),n)}},S=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},K=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},E=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ke={},fe=Ee(globalThis,Ke);function Ee(i,e){return new Proxy(i,{get(t,r,n){return r in e?e[r]:i[r]},set(t,r,n){return r in e&&delete e[r],i[r]=n,!0},deleteProperty(t,r){let n=!1;return r in e&&(delete e[r],n=!0),r in i&&(delete i[r],n=!0),n},ownKeys(t){let r=Reflect.ownKeys(i),n=Reflect.ownKeys(e),a=new Set(n);return[...r.filter(o=>!a.has(o)),...n]},defineProperty(t,r,n){return r in e&&delete e[r],Reflect.defineProperty(i,r,n),!0},getOwnPropertyDescriptor(t,r){return r in e?Reflect.getOwnPropertyDescriptor(e,r):Reflect.getOwnPropertyDescriptor(i,r)},has(t,r){return r in e||r in i}})}var de=()=>typeof fe<"u",ye=()=>typeof caches<"u";var H=i=>typeof i=="object"&&i!==null&&typeof i.privateKey=="object"&&typeof i.publicKey=="object";function x(i,e){if(e<=0)throw new Error("i2Osp: too small size");if(i>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let r=0;r>8;return t}function be(i,e){if(i.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(i.byteLength);for(let r=0;rNumber.MAX_SAFE_INTEGER)throw new R("Message limit reached");e.seq+=1}};var V=class extends I{async open(e,t=c){let r;try{r=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(n){throw new G(n)}return this.incrementSeq(this._ctx),r}};var ee=class extends I{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}async seal(e,t=c){let r;try{r=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(n){throw new B(n)}return this.incrementSeq(this._ctx),r}};async function te(){if((de()||ye())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:i}=await import("crypto");return i.subtle}catch{throw new _("Web Cryptograph API not supported")}}var Le=new Uint8Array([75,69,77,0,0]),Ue=new Uint8Array([101,97,101,95,112,114,107]),Oe=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),L=class extends b{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new _(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new l("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new Y(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new D(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new v(t)}}async importKey(e,t,r=!0){await this._setup();try{return await this._prim.importKey(e,t,r)}catch(n){throw new v(n)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,r=await this._prim.serializePublicKey(t.publicKey),n=await this._prim.serializePublicKey(e.recipientPublicKey),a;if(e.senderKey===void 0)a=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let u=H(e.senderKey)?e.senderKey.privateKey:e.senderKey,p=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),w=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));a=j(p,w)}let o;if(e.senderKey===void 0)o=j(new Uint8Array(r),new Uint8Array(n));else{let u=H(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),p=await this._prim.serializePublicKey(u);o=pe(new Uint8Array(r),new Uint8Array(n),new Uint8Array(p))}let s=await this._generateSharedSecret(a,o);return{enc:r,sharedSecret:s}}catch(t){throw new C(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(r){throw new v(r)}try{let r=H(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=H(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),a=await this._prim.serializePublicKey(n),o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(r,t));else{let u=new Uint8Array(await this._prim.dh(r,t)),p=new Uint8Array(await this._prim.dh(r,e.senderPublicKey));o=j(u,p)}let s;if(e.senderPublicKey===void 0)s=j(new Uint8Array(e.enc),new Uint8Array(a));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);s=new Uint8Array(e.enc.byteLength+a.byteLength+u.byteLength),s.set(new Uint8Array(e.enc),0),s.set(new Uint8Array(a),e.enc.byteLength),s.set(new Uint8Array(u),e.enc.byteLength+a.byteLength)}return await this._generateSharedSecret(o,s)}catch(r){throw new M(r)}}async _setup(){if(this._api!==void 0)return;let e=await te(),t=new Uint8Array(Le);t.set(x(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let r=this._kdf.buildLabeledIkm(Ue,e),n=this._kdf.buildLabeledInfo(Oe,t,this.secretSize);return await this._kdf.extractAndExpand(c,r,n,this.secretSize)}};var T=["deriveBits"],we=new Uint8Array([100,107,112,95,112,114,107]),Kt=new Uint8Array([115,107]);var re=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var He=new Uint8Array([99,97,110,100,105,100,97,116,101]),je=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Te=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ze=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),De=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Ce=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Me=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),U=class extends b{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case h.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=je,this._bitmask=255,this._pkcs8AlgId=De;break;case h.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Te,this._bitmask=255,this._pkcs8AlgId=Ce;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ze,this._bitmask=1,this._pkcs8AlgId=Me;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,r){if(this.checkInit(),e==="raw")return await this._importRawKey(t,r);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,r)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let r=new Uint8Array(e),n=new Uint8Array(this._pkcs8AlgId.length+r.length);return n.set(this._pkcs8AlgId,0),n.set(r,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",n,this._alg,!0,T)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,T)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,T)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(c,we,new Uint8Array(e)),r=new re(this._nSk);for(let o=0;r.isZero()||!r.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(t,He,x(o,1),this._nSk));s[0]=s[0]&this._bitmask,r.set(s)}let n=new Uint8Array(this._pkcs8AlgId.length+r.val().length);n.set(this._pkcs8AlgId,0),n.set(r.val(),this._pkcs8AlgId.length);let a=await this._api.importKey("pkcs8",n,this._alg,!0,T);return r.reset(),{privateKey:a,publicKey:await this.derivePublicKey(a)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var ie=class extends L{constructor(){let e=new S,t=new U(h.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},ne=class extends L{constructor(){let e=new K,t=new U(h.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},ae=class extends L{constructor(){let e=new E,t=new U(h.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ne=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Be=new Uint8Array([101,120,112]),Ge=new Uint8Array([105,110,102,111,95,104,97,115,104]),Re=new Uint8Array([107,101,121]),Ye=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Fe=new Uint8Array([115,101,99,114,101,116]),qe=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),se=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case h.DhkemP256HkdfSha256:this._kem=new ie;break;case h.DhkemP384HkdfSha384:this._kem=new ne;break;case h.DhkemP521HkdfSha512:this._kem=new ae;break;default:throw new l(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case g.HkdfSha256:this._kdf=new S;break;case g.HkdfSha384:this._kdf=new K;break;default:this._kdf=new E;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case y.Aes128Gcm:this._aead=new J;break;case y.Aes256Gcm:this._aead=new Z;break;case y.ExportOnly:this._aead=new Q;break;default:throw new l(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(qe),this._suiteId.set(x(this._kem.id,2),4),this._suiteId.set(x(this._kdf.id,2),6),this._suiteId.set(x(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,r=!0){return await this._setup(),await this._kem.importKey(e,t,r)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),r;return e.psk!==void 0?r=e.senderKey!==void 0?m.AuthPsk:m.Psk:r=e.senderKey!==void 0?m.Auth:m.Base,await this._keyScheduleS(r,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),r;return e.psk!==void 0?r=e.senderPublicKey!==void 0?m.AuthPsk:m.Psk:r=e.senderPublicKey!==void 0?m.Auth:m.Base,await this._keyScheduleR(r,t,e)}async seal(e,t,r=c){let n=await this.createSenderContext(e);return{ct:await n.seal(t,r),enc:n.enc}}async open(e,t,r=c){return await(await this.createRecipientContext(e)).open(t,r)}async _setup(){if(this._api!==void 0)return;let e=await te();this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,r){let n=r.psk===void 0?c:new Uint8Array(r.psk.id),a=await this._kdf.labeledExtract(c,Ye,n),o=r.info===void 0?c:new Uint8Array(r.info),s=await this._kdf.labeledExtract(c,Ge,o),u=new Uint8Array(1+a.byteLength+s.byteLength);u.set(new Uint8Array([e]),0),u.set(new Uint8Array(a),1),u.set(new Uint8Array(s),1+a.byteLength);let p=r.psk===void 0?c:new Uint8Array(r.psk.key),w=this._kdf.buildLabeledIkm(Fe,p),z=this._kdf.buildLabeledInfo(Be,u,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,w,z,this._kdf.hashSize);if(this._aead.id===y.ExportOnly)return{aead:this._aead,exporterSecret:d};let xe=this._kdf.buildLabeledInfo(Re,u,this._aead.keySize),me=await this._kdf.extractAndExpand(t,w,xe,this._aead.keySize),ge=this._kdf.buildLabeledInfo(Ne,u,this._aead.nonceSize),ke=await this._kdf.extractAndExpand(t,w,ge,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:me,baseNonce:new Uint8Array(ke),seq:0}}async _keyScheduleS(e,t,r,n){let a=await this._keySchedule(e,t,n);return a.key===void 0?new q(this._api,this._kdf,a.exporterSecret,r):new ee(this._api,this._kdf,a,r)}async _keyScheduleR(e,t,r){let n=await this._keySchedule(e,t,r);return n.key===void 0?new F(this._api,this._kdf,n.exporterSecret):new V(this._api,this._kdf,n)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new l("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new l(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new l("Too long psk.key");if(e.psk.id.byteLength>8192)throw new l("Too long psk.id")}}};var ue=class extends se{};export{y as AeadId,ue as CipherSuite,M as DecapError,Y as DeriveKeyPairError,v as DeserializeError,C as EncapError,N as ExportError,f as HpkeError,l as InvalidParamError,g as KdfId,h as KemId,R as MessageLimitReachedError,_ as NotSupportedError,G as OpenError,B as SealError,D as SerializeError,ce as ValidationError}; diff --git a/dhkem-secp256k1/src/hpke-dhkem-secp256k1.js b/dhkem-secp256k1/src/hpke-dhkem-secp256k1.js index 8678b3d76..8f16c91a0 100644 --- a/dhkem-secp256k1/src/hpke-dhkem-secp256k1.js +++ b/dhkem-secp256k1/src/hpke-dhkem-secp256k1.js @@ -1,4 +1,4 @@ -var We=Object.defineProperty;var Xe=(r,t)=>{for(var e in t)We(r,e,{get:t[e],enumerable:!0})};var Qe={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},kt=Qe,Je={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},Ft=Je;function te(r){if(!Number.isSafeInteger(r)||r<0)throw new Error(`Wrong positive integer: ${r}`)}function Fe(r){if(typeof r!="boolean")throw new Error(`Expected boolean, not ${r}`)}function ve(r,...t){if(!(r instanceof Uint8Array))throw new Error("Expected Uint8Array");if(t.length>0&&!t.includes(r.length))throw new Error(`Expected Uint8Array of length ${t}, not of length=${r.length}`)}function tr(r){if(typeof r!="function"||typeof r.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");te(r.outputLen),te(r.blockLen)}function er(r,t=!0){if(r.destroyed)throw new Error("Hash instance has been destroyed");if(t&&r.finished)throw new Error("Hash#digest() has already been called")}function rr(r,t){ve(r);let e=t.outputLen;if(r.lengthr instanceof Uint8Array;var Ut=r=>new DataView(r.buffer,r.byteOffset,r.byteLength),M=(r,t)=>r<<32-t|r>>>t,ir=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!ir)throw new Error("Non little-endian hardware is not supported");var Wr=Array.from({length:256},(r,t)=>t.toString(16).padStart(2,"0"));function or(r){if(typeof r!="string")throw new Error(`utf8ToBytes expected string, got ${typeof r}`);return new Uint8Array(new TextEncoder().encode(r))}function Et(r){if(typeof r=="string"&&(r=or(r)),!Be(r))throw new Error(`expected Uint8Array, got ${typeof r}`);return r}function Ae(...r){let t=new Uint8Array(r.reduce((n,i)=>n+i.length,0)),e=0;return r.forEach(n=>{if(!Be(n))throw new Error("Uint8Array expected");t.set(n,e),e+=n.length}),t}var pt=class{clone(){return this._cloneInto()}};function ee(r){let t=n=>r().update(Et(n)).digest(),e=r();return t.outputLen=e.outputLen,t.blockLen=e.blockLen,t.create=()=>r(),t}function re(r=32){if(Kt&&typeof Kt.getRandomValues=="function")return Kt.getRandomValues(new Uint8Array(r));throw new Error("crypto.getRandomValues must be defined")}var Lt=class extends pt{constructor(t,e){super(),this.finished=!1,this.destroyed=!1,G.hash(t);let n=Et(e);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,s=new Uint8Array(i);s.set(n.length>i?t.create().update(n).digest():n);for(let a=0;anew Lt(r,t).update(e).digest();vt.create=(r,t)=>new Lt(r,t);function sr(r,t,e,n){if(typeof r.setBigUint64=="function")return r.setBigUint64(t,e,n);let i=BigInt(32),s=BigInt(4294967295),a=Number(e>>i&s),o=Number(e&s),c=n?4:0,u=n?0:4;r.setUint32(t+c,a,n),r.setUint32(t+u,o,n)}var Ot=class extends pt{constructor(t,e,n,i){super(),this.blockLen=t,this.outputLen=e,this.padOffset=n,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Ut(this.buffer)}update(t){G.exists(this);let{view:e,buffer:n,blockLen:i}=this;t=Et(t);let s=t.length;for(let a=0;ai-a&&(this.process(n,0),a=0);for(let l=a;lp.length)throw new Error("_sha2: outputLen bigger than state");for(let l=0;lr&t^~r&e,ar=(r,t,e)=>r&t^r&e^t&e,ur=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),nt=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),it=new Uint32Array(64),Tt=class extends Ot{constructor(){super(64,32,8,!1),this.A=nt[0]|0,this.B=nt[1]|0,this.C=nt[2]|0,this.D=nt[3]|0,this.E=nt[4]|0,this.F=nt[5]|0,this.G=nt[6]|0,this.H=nt[7]|0}get(){let{A:t,B:e,C:n,D:i,E:s,F:a,G:o,H:c}=this;return[t,e,n,i,s,a,o,c]}set(t,e,n,i,s,a,o,c){this.A=t|0,this.B=e|0,this.C=n|0,this.D=i|0,this.E=s|0,this.F=a|0,this.G=o|0,this.H=c|0}process(t,e){for(let l=0;l<16;l++,e+=4)it[l]=t.getUint32(e,!1);for(let l=16;l<64;l++){let m=it[l-15],_=it[l-2],g=M(m,7)^M(m,18)^m>>>3,f=M(_,17)^M(_,19)^_>>>10;it[l]=f+it[l-7]+g+it[l-16]|0}let{A:n,B:i,C:s,D:a,E:o,F:c,G:u,H:p}=this;for(let l=0;l<64;l++){let m=M(o,6)^M(o,11)^M(o,25),_=p+m+cr(o,c,u)+ur[l]+it[l]|0,f=(M(n,2)^M(n,13)^M(n,22))+ar(n,i,s)|0;p=u,u=c,c=o,o=a+_|0,a=s,s=i,i=n,n=_+f|0}n=n+this.A|0,i=i+this.B|0,s=s+this.C|0,a=a+this.D|0,o=o+this.E|0,c=c+this.F|0,u=u+this.G|0,p=p+this.H|0,this.set(n,i,s,a,o,c,u,p)}roundClean(){it.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}},ne=class extends Tt{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}},Ht=ee(()=>new Tt),sn=ee(()=>new ne);var Y=new Uint8Array(0);var Nt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},bt=class extends Nt{constructor(){super()}init(t){this._api=t}},qt=class extends Nt{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:Y})}init(t,e){this._api=t,this._suiteId=e}};var W=class extends Error{constructor(t){let e;t instanceof Error?e=t.message:typeof t=="string"?e=t:e="",super(e),this.name=this.constructor.name}},wt=class extends W{};var Ct=class extends W{},gt=class extends W{},Rt=class extends W{},zt=class extends W{};var jt=class extends W{},mt=class extends W{};var Se=new Uint8Array([72,80,75,69,45,118,49]),oe=class extends qt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Ft.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(t,e){let n=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+e.byteLength);return n.set(Se,0),n.set(this._suiteId,7),n.set(t,7+this._suiteId.byteLength),n.set(e,7+this._suiteId.byteLength+t.byteLength),n}buildLabeledInfo(t,e,n){let i=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+e.byteLength);return i.set(new Uint8Array([0,n]),0),i.set(Se,2),i.set(this._suiteId,9),i.set(t,9+this._suiteId.byteLength),i.set(e,9+this._suiteId.byteLength+t.byteLength),i}async extract(t,e){if(this.checkInit(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new wt("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,e)}async expand(t,e,n){this.checkInit();let i=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),s=new ArrayBuffer(n),a=new Uint8Array(s),o=Y,c=new Uint8Array(e),u=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let p=new Uint8Array(this.hashSize+c.length+1);for(let l=1,m=0;m=o.length?(a.set(o,m),m+=o.length):(a.set(o.slice(0,a.length-m),m),m+=a.length-m);return s}async extractAndExpand(t,e,n,i){this.checkInit();let s=await this._api.importKey("raw",e,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:n},s,i*8)}async labeledExtract(t,e,n){return await this.extract(t,this.buildLabeledIkm(e,n))}async labeledExpand(t,e,n,i){return await this.expand(t,this.buildLabeledInfo(e,n,i),i)}},Dt=class extends oe{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Ft.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}};var Vt=class extends Dt{async extract(t,e){if(this.checkInit(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return vt(Ht,new Uint8Array(t),new Uint8Array(e));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,e)}};var lr={},_e=dr(globalThis,lr);function dr(r,t){return new Proxy(r,{get(e,n,i){return n in t?t[n]:r[n]},set(e,n,i){return n in t&&delete t[n],r[n]=i,!0},deleteProperty(e,n){let i=!1;return n in t&&(delete t[n],i=!0),n in r&&(delete r[n],i=!0),i},ownKeys(e){let n=Reflect.ownKeys(r),i=Reflect.ownKeys(t),s=new Set(i);return[...n.filter(a=>!s.has(a)),...i]},defineProperty(e,n,i){return n in t&&delete t[n],Reflect.defineProperty(r,n,i),!0},getOwnPropertyDescriptor(e,n){return n in t?Reflect.getOwnPropertyDescriptor(t,n):Reflect.getOwnPropertyDescriptor(r,n)},has(e,n){return n in t||n in r}})}var Ie=()=>typeof _e<"u",Pe=()=>typeof caches<"u";var Bt=r=>typeof r=="object"&&r!==null&&typeof r.privateKey=="object"&&typeof r.publicKey=="object";function se(r,t){if(t<=0)throw new Error("i2Osp: too small size");if(r>=256**t)throw new Error("i2Osp: too large integer");let e=new Uint8Array(t);for(let n=0;n>8;return e}function At(r,t){let e=new Uint8Array(r.length+t.length);return e.set(r,0),e.set(t,r.length),e}function ke(r,t,e){let n=new Uint8Array(r.length+t.length+e.length);return n.set(r,0),n.set(t,r.length),n.set(e,r.length+t.length),n}async function Ke(){if((Ie()||Pe())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:r}=await import("crypto");return r.subtle}catch{throw new mt("Web Cryptograph API not supported")}}var Ue=new Uint8Array([75,69,77,0,0]),pr=new Uint8Array([101,97,101,95,112,114,107]),br=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),Mt=class extends bt{constructor(t,e){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:kt.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=t,this._kdf=e}init(t){super.init(t);let e=new Uint8Array(Ue);e.set(se(this.id,2),3),this._prim.init(t),this._kdf.init(t,e),super.init(t)}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(t){throw new mt(t)}}async deriveKeyPair(t){if(t.byteLength>8192)throw new wt("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(t)}catch(e){throw new jt(e)}}async serializePublicKey(t){await this._setup();try{return await this._prim.serializePublicKey(t)}catch(e){throw new Ct(e)}}async deserializePublicKey(t){await this._setup();try{return await this._prim.deserializePublicKey(t)}catch(e){throw new gt(e)}}async importKey(t,e,n=!0){await this._setup();try{return await this._prim.importKey(t,e,n)}catch(i){throw new gt(i)}}async encap(t){await this._setup();try{let e=t.nonEphemeralKeyPair===void 0?await this.generateKeyPair():t.nonEphemeralKeyPair,n=await this._prim.serializePublicKey(e.publicKey),i=await this._prim.serializePublicKey(t.recipientPublicKey),s;if(t.senderKey===void 0)s=new Uint8Array(await this._prim.dh(e.privateKey,t.recipientPublicKey));else{let c=Bt(t.senderKey)?t.senderKey.privateKey:t.senderKey,u=new Uint8Array(await this._prim.dh(e.privateKey,t.recipientPublicKey)),p=new Uint8Array(await this._prim.dh(c,t.recipientPublicKey));s=At(u,p)}let a;if(t.senderKey===void 0)a=At(new Uint8Array(n),new Uint8Array(i));else{let c=Bt(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),u=await this._prim.serializePublicKey(c);a=ke(new Uint8Array(n),new Uint8Array(i),new Uint8Array(u))}let o=await this._generateSharedSecret(s,a);return{enc:n,sharedSecret:o}}catch(e){throw new Rt(e)}}async decap(t){let e;await this._setup();try{e=await this._prim.deserializePublicKey(t.enc)}catch(n){throw new gt(n)}try{let n=Bt(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,i=Bt(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),s=await this._prim.serializePublicKey(i),a;if(t.senderPublicKey===void 0)a=new Uint8Array(await this._prim.dh(n,e));else{let c=new Uint8Array(await this._prim.dh(n,e)),u=new Uint8Array(await this._prim.dh(n,t.senderPublicKey));a=At(c,u)}let o;if(t.senderPublicKey===void 0)o=At(new Uint8Array(t.enc),new Uint8Array(s));else{let c=await this._prim.serializePublicKey(t.senderPublicKey);o=new Uint8Array(t.enc.byteLength+s.byteLength+c.byteLength),o.set(new Uint8Array(t.enc),0),o.set(new Uint8Array(s),t.enc.byteLength),o.set(new Uint8Array(c),t.enc.byteLength+s.byteLength)}return await this._generateSharedSecret(a,o)}catch(n){throw new zt(n)}}async _setup(){if(this._api!==void 0)return;let t=await Ke(),e=new Uint8Array(Ue);e.set(se(this.id,2),3),this._prim.init(t),this._kdf.init(t,e),super.init(t)}async _generateSharedSecret(t,e){let n=this._kdf.buildLabeledIkm(pr,t),i=this._kdf.buildLabeledInfo(br,e,this.secretSize);return await this._kdf.extractAndExpand(Y,n,i,this.secretSize)}};var le={};Xe(le,{bitGet:()=>vr,bitLen:()=>Er,bitMask:()=>St,bitSet:()=>Br,bytesToHex:()=>at,bytesToNumberBE:()=>$,bytesToNumberLE:()=>Gt,concatBytes:()=>ot,createHmacDrbg:()=>fe,ensureBytes:()=>N,equalBytes:()=>xr,hexToBytes:()=>ut,hexToNumber:()=>ae,numberToBytesBE:()=>X,numberToBytesLE:()=>ue,numberToHexUnpadded:()=>Te,numberToVarBytesBE:()=>mr,utf8ToBytes:()=>He,validateObject:()=>Q});var Oe=BigInt(0),$t=BigInt(1),wr=BigInt(2),Zt=r=>r instanceof Uint8Array,gr=Array.from({length:256},(r,t)=>t.toString(16).padStart(2,"0"));function at(r){if(!Zt(r))throw new Error("Uint8Array expected");let t="";for(let e=0;en+i.length,0)),e=0;return r.forEach(n=>{if(!Zt(n))throw new Error("Uint8Array expected");t.set(n,e),e+=n.length}),t}function xr(r,t){if(r.length!==t.length)return!1;for(let e=0;eOe;r>>=$t,t+=1);return t}function vr(r,t){return r>>BigInt(t)&$t}var Br=(r,t,e)=>r|(e?$t:Oe)<(wr<new Uint8Array(r),Le=r=>Uint8Array.from(r);function fe(r,t,e){if(typeof r!="number"||r<2)throw new Error("hashLen must be a number");if(typeof t!="number"||t<2)throw new Error("qByteLen must be a number");if(typeof e!="function")throw new Error("hmacFn must be a function");let n=ce(r),i=ce(r),s=0,a=()=>{n.fill(1),i.fill(0),s=0},o=(...l)=>e(i,n,...l),c=(l=ce())=>{i=o(Le([0]),l),n=o(),l.length!==0&&(i=o(Le([1]),l),n=o())},u=()=>{if(s++>=1e3)throw new Error("drbg: tried 1000 values");let l=0,m=[];for(;l{a(),c(l);let _;for(;!(_=m(u()));)c();return a(),_}}var Ar={bigint:r=>typeof r=="bigint",function:r=>typeof r=="function",boolean:r=>typeof r=="boolean",string:r=>typeof r=="string",isSafeInteger:r=>Number.isSafeInteger(r),array:r=>Array.isArray(r),field:(r,t)=>t.Fp.isValid(r),hash:r=>typeof r=="function"&&Number.isSafeInteger(r.outputLen)};function Q(r,t,e={}){let n=(i,s,a)=>{let o=Ar[s];if(typeof o!="function")throw new Error(`Invalid validator "${s}", expected function`);let c=r[i];if(!(a&&c===void 0)&&!o(c,r))throw new Error(`Invalid param ${String(i)}=${c} (${typeof c}), expected ${s}`)};for(let[i,s]of Object.entries(t))n(i,s,!1);for(let[i,s]of Object.entries(e))n(i,s,!0);return r}var O=BigInt(0),L=BigInt(1),ft=BigInt(2),Sr=BigInt(3),de=BigInt(4),Ne=BigInt(5),qe=BigInt(8),_r=BigInt(9),Ir=BigInt(16);function H(r,t){let e=r%t;return e>=O?e:t+e}function Pr(r,t,e){if(e<=O||t 0");if(e===L)return O;let n=L;for(;t>O;)t&L&&(n=n*r%e),r=r*r%e,t>>=L;return n}function j(r,t,e){let n=r;for(;t-- >O;)n*=n,n%=e;return n}function Yt(r,t){if(r===O||t<=O)throw new Error(`invert: expected positive integers, got n=${r} mod=${t}`);let e=H(r,t),n=t,i=O,s=L,a=L,o=O;for(;e!==O;){let u=n/e,p=n%e,l=i-a*u,m=s-o*u;n=e,e=p,i=a,s=o,a=l,o=m}if(n!==L)throw new Error("invert: does not exist");return H(i,t)}function kr(r){let t=(r-L)/ft,e,n,i;for(e=r-L,n=0;e%ft===O;e/=ft,n++);for(i=ft;i(n[i]="function",n),t);return Q(r,e)}function Lr(r,t,e){if(e 0");if(e===O)return r.ONE;if(e===L)return t;let n=r.ONE,i=t;for(;e>O;)e&L&&(n=r.mul(n,i)),i=r.sqr(i),e>>=L;return n}function Or(r,t){let e=new Array(t.length),n=t.reduce((s,a,o)=>r.is0(a)?s:(e[o]=s,r.mul(s,a)),r.ONE),i=r.inv(n);return t.reduceRight((s,a,o)=>r.is0(a)?s:(e[o]=r.mul(s,e[o]),r.mul(s,a)),i),e}function Wt(r,t){let e=t!==void 0?t:r.toString(2).length,n=Math.ceil(e/8);return{nBitLength:e,nByteLength:n}}function Ce(r,t,e=!1,n={}){if(r<=O)throw new Error(`Expected Fp ORDER > 0, got ${r}`);let{nBitLength:i,nByteLength:s}=Wt(r,t);if(s>2048)throw new Error("Field lengths over 2048 bytes are not supported");let a=Kr(r),o=Object.freeze({ORDER:r,BITS:i,BYTES:s,MASK:St(i),ZERO:O,ONE:L,create:c=>H(c,r),isValid:c=>{if(typeof c!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof c}`);return O<=c&&cc===O,isOdd:c=>(c&L)===L,neg:c=>H(-c,r),eql:(c,u)=>c===u,sqr:c=>H(c*c,r),add:(c,u)=>H(c+u,r),sub:(c,u)=>H(c-u,r),mul:(c,u)=>H(c*u,r),pow:(c,u)=>Lr(o,c,u),div:(c,u)=>H(c*Yt(u,r),r),sqrN:c=>c*c,addN:(c,u)=>c+u,subN:(c,u)=>c-u,mulN:(c,u)=>c*u,inv:c=>Yt(c,r),sqrt:n.sqrt||(c=>a(o,c)),invertBatch:c=>Or(o,c),cmov:(c,u,p)=>p?u:c,toBytes:c=>e?ue(c,s):X(c,s),fromBytes:c=>{if(c.length!==s)throw new Error(`Fp.fromBytes: expected ${s}, got ${c.length}`);return e?Gt(c):$(c)}});return Object.freeze(o)}function Re(r,t,e=!1){r=N("privateHash",r);let n=r.length,i=Wt(t).nByteLength+8;if(i<24||n1024)throw new Error(`hashToPrivateScalar: expected ${i}-1024 bytes of input, got ${n}`);let s=e?Gt(r):$(r);return H(s,t-L)+L}var Hr=BigInt(0),ye=BigInt(1);function ze(r,t){let e=(i,s)=>{let a=s.negate();return i?a:s},n=i=>{let s=Math.ceil(t/i)+1,a=2**(i-1);return{windows:s,windowSize:a}};return{constTimeNegate:e,unsafeLadder(i,s){let a=r.ZERO,o=i;for(;s>Hr;)s&ye&&(a=a.add(o)),o=o.double(),s>>=ye;return a},precomputeWindow(i,s){let{windows:a,windowSize:o}=n(s),c=[],u=i,p=u;for(let l=0;l>=_,h>c&&(h-=m,a+=ye);let b=f,x=f+Math.abs(h)-1,v=g%2!==0,I=h<0;h===0?p=p.add(e(v,s[b])):u=u.add(e(I,s[x]))}return{p:u,f:p}},wNAFCached(i,s,a,o){let c=i._WINDOW_SIZE||1,u=s.get(i);return u||(u=this.precomputeWindow(i,c),c!==1&&s.set(i,o(u))),this.wNAF(c,u,a)}}}function pe(r){return he(r.Fp),Q(r,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Wt(r.n,r.nBitLength),...r,p:r.Fp.ORDER})}function Nr(r){let t=pe(r);Q(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});let{endo:e,Fp:n,a:i}=t;if(e){if(!n.eql(i,n.ZERO))throw new Error("Endomorphism can only be defined for Koblitz curves that have a=0");if(typeof e!="object"||typeof e.beta!="bigint"||typeof e.splitScalar!="function")throw new Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}var{bytesToNumberBE:qr,hexToBytes:Cr}=le,lt={Err:class extends Error{constructor(t=""){super(t)}},_parseInt(r){let{Err:t}=lt;if(r.length<2||r[0]!==2)throw new t("Invalid signature integer tag");let e=r[1],n=r.subarray(2,e+2);if(!e||n.length!==e)throw new t("Invalid signature integer: wrong length");if(n[0]&128)throw new t("Invalid signature integer: negative");if(n[0]===0&&!(n[1]&128))throw new t("Invalid signature integer: unnecessary leading zero");return{d:qr(n),l:r.subarray(e+2)}},toSig(r){let{Err:t}=lt,e=typeof r=="string"?Cr(r):r;if(!(e instanceof Uint8Array))throw new Error("ui8a expected");let n=e.length;if(n<2||e[0]!=48)throw new t("Invalid signature tag");if(e[1]!==n-2)throw new t("Invalid signature: incorrect length");let{d:i,l:s}=lt._parseInt(e.subarray(2)),{d:a,l:o}=lt._parseInt(s);if(o.length)throw new t("Invalid signature: left bytes after parsing");return{r:i,s:a}},hexFromSig(r){let t=u=>Number.parseInt(u[0],16)&8?"00"+u:u,e=u=>{let p=u.toString(16);return p.length&1?`0${p}`:p},n=t(e(r.s)),i=t(e(r.r)),s=n.length/2,a=i.length/2,o=e(s),c=e(a);return`30${e(a+s+4)}02${c}${i}02${o}${n}`}},J=BigInt(0),V=BigInt(1),On=BigInt(2),je=BigInt(3),Tn=BigInt(4);function Rr(r){let t=Nr(r),{Fp:e}=t,n=t.toBytes||((g,f,h)=>{let b=f.toAffine();return ot(Uint8Array.from([4]),e.toBytes(b.x),e.toBytes(b.y))}),i=t.fromBytes||(g=>{let f=g.subarray(1),h=e.fromBytes(f.subarray(0,e.BYTES)),b=e.fromBytes(f.subarray(e.BYTES,2*e.BYTES));return{x:h,y:b}});function s(g){let{a:f,b:h}=t,b=e.sqr(g),x=e.mul(b,g);return e.add(e.add(x,e.mul(g,f)),h)}if(!e.eql(e.sqr(t.Gy),s(t.Gx)))throw new Error("bad generator point: equation left != right");function a(g){return typeof g=="bigint"&&Je.eql(v,e.ZERO);return x(h)&&x(b)?l.ZERO:new l(h,b,e.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(f){let h=e.invertBatch(f.map(b=>b.pz));return f.map((b,x)=>b.toAffine(h[x])).map(l.fromAffine)}static fromHex(f){let h=l.fromAffine(i(N("pointHex",f)));return h.assertValidity(),h}static fromPrivateKey(f){return l.BASE.multiply(c(f))}_setWindowSize(f){this._WINDOW_SIZE=f,u.delete(this)}assertValidity(){if(this.is0()){if(t.allowInfinityPoint)return;throw new Error("bad point: ZERO")}let{x:f,y:h}=this.toAffine();if(!e.isValid(f)||!e.isValid(h))throw new Error("bad point: x or y not FE");let b=e.sqr(h),x=s(f);if(!e.eql(b,x))throw new Error("bad point: equation left != right");if(!this.isTorsionFree())throw new Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:f}=this.toAffine();if(e.isOdd)return!e.isOdd(f);throw new Error("Field doesn't support isOdd")}equals(f){p(f);let{px:h,py:b,pz:x}=this,{px:v,py:I,pz:S}=f,w=e.eql(e.mul(h,S),e.mul(v,x)),E=e.eql(e.mul(b,S),e.mul(I,x));return w&&E}negate(){return new l(this.px,e.neg(this.py),this.pz)}double(){let{a:f,b:h}=t,b=e.mul(h,je),{px:x,py:v,pz:I}=this,S=e.ZERO,w=e.ZERO,E=e.ZERO,A=e.mul(x,x),D=e.mul(v,v),U=e.mul(I,I),P=e.mul(x,v);return P=e.add(P,P),E=e.mul(x,I),E=e.add(E,E),S=e.mul(f,E),w=e.mul(b,U),w=e.add(S,w),S=e.sub(D,w),w=e.add(D,w),w=e.mul(S,w),S=e.mul(P,S),E=e.mul(b,E),U=e.mul(f,U),P=e.sub(A,U),P=e.mul(f,P),P=e.add(P,E),E=e.add(A,A),A=e.add(E,A),A=e.add(A,U),A=e.mul(A,P),w=e.add(w,A),U=e.mul(v,I),U=e.add(U,U),A=e.mul(U,P),S=e.sub(S,A),E=e.mul(U,D),E=e.add(E,E),E=e.add(E,E),new l(S,w,E)}add(f){p(f);let{px:h,py:b,pz:x}=this,{px:v,py:I,pz:S}=f,w=e.ZERO,E=e.ZERO,A=e.ZERO,D=t.a,U=e.mul(t.b,je),P=e.mul(h,v),q=e.mul(b,I),C=e.mul(x,S),F=e.add(h,b),d=e.add(v,I);F=e.mul(F,d),d=e.add(P,q),F=e.sub(F,d),d=e.add(h,x);let y=e.add(v,S);return d=e.mul(d,y),y=e.add(P,C),d=e.sub(d,y),y=e.add(b,x),w=e.add(I,S),y=e.mul(y,w),w=e.add(q,C),y=e.sub(y,w),A=e.mul(D,d),w=e.mul(U,C),A=e.add(w,A),w=e.sub(q,A),A=e.add(q,A),E=e.mul(w,A),q=e.add(P,P),q=e.add(q,P),C=e.mul(D,C),d=e.mul(U,d),q=e.add(q,C),C=e.sub(P,C),C=e.mul(D,C),d=e.add(d,C),P=e.mul(q,d),E=e.add(E,P),P=e.mul(y,d),w=e.mul(F,w),w=e.sub(w,P),P=e.mul(F,q),A=e.mul(y,A),A=e.add(A,P),new l(w,E,A)}subtract(f){return this.add(f.negate())}is0(){return this.equals(l.ZERO)}wNAF(f){return _.wNAFCached(this,u,f,h=>{let b=e.invertBatch(h.map(x=>x.pz));return h.map((x,v)=>x.toAffine(b[v])).map(l.fromAffine)})}multiplyUnsafe(f){let h=l.ZERO;if(f===J)return h;if(o(f),f===V)return this;let{endo:b}=t;if(!b)return _.unsafeLadder(this,f);let{k1neg:x,k1:v,k2neg:I,k2:S}=b.splitScalar(f),w=h,E=h,A=this;for(;v>J||S>J;)v&V&&(w=w.add(A)),S&V&&(E=E.add(A)),A=A.double(),v>>=V,S>>=V;return x&&(w=w.negate()),I&&(E=E.negate()),E=new l(e.mul(E.px,b.beta),E.py,E.pz),w.add(E)}multiply(f){o(f);let h=f,b,x,{endo:v}=t;if(v){let{k1neg:I,k1:S,k2neg:w,k2:E}=v.splitScalar(h),{p:A,f:D}=this.wNAF(S),{p:U,f:P}=this.wNAF(E);A=_.constTimeNegate(I,A),U=_.constTimeNegate(w,U),U=new l(e.mul(U.px,v.beta),U.py,U.pz),b=A.add(U),x=D.add(P)}else{let{p:I,f:S}=this.wNAF(h);b=I,x=S}return l.normalizeZ([b,x])[0]}multiplyAndAddUnsafe(f,h,b){let x=l.BASE,v=(S,w)=>w===J||w===V||!S.equals(x)?S.multiplyUnsafe(w):S.multiply(w),I=v(this,h).add(v(f,b));return I.is0()?void 0:I}toAffine(f){let{px:h,py:b,pz:x}=this,v=this.is0();f==null&&(f=v?e.ONE:e.inv(x));let I=e.mul(h,f),S=e.mul(b,f),w=e.mul(x,f);if(v)return{x:e.ZERO,y:e.ZERO};if(!e.eql(w,e.ONE))throw new Error("invZ was invalid");return{x:I,y:S}}isTorsionFree(){let{h:f,isTorsionFree:h}=t;if(f===V)return!0;if(h)return h(l,this);throw new Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){let{h:f,clearCofactor:h}=t;return f===V?this:h?h(l,this):this.multiplyUnsafe(t.h)}toRawBytes(f=!0){return this.assertValidity(),n(l,this,f)}toHex(f=!0){return at(this.toRawBytes(f))}}l.BASE=new l(t.Gx,t.Gy,e.ONE),l.ZERO=new l(e.ZERO,e.ONE,e.ZERO);let m=t.nBitLength,_=ze(l,t.endo?Math.ceil(m/2):m);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function zr(r){let t=pe(r);return Q(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}function De(r){let t=zr(r),{Fp:e,n}=t,i=e.BYTES+1,s=2*e.BYTES+1;function a(d){return Jat(X(d,t.nByteLength));function g(d){let y=n>>V;return d>y}function f(d){return g(d)?o(-d):d}let h=(d,y,B)=>$(d.slice(y,B));class b{constructor(y,B,K){this.r=y,this.s=B,this.recovery=K,this.assertValidity()}static fromCompact(y){let B=t.nByteLength;return y=N("compactSignature",y,B*2),new b(h(y,0,B),h(y,B,2*B))}static fromDER(y){let{r:B,s:K}=lt.toSig(N("DER",y));return new b(B,K)}assertValidity(){if(!m(this.r))throw new Error("r must be 0 < r < CURVE.n");if(!m(this.s))throw new Error("s must be 0 < s < CURVE.n")}addRecoveryBit(y){return new b(this.r,this.s,y)}recoverPublicKey(y){let{r:B,s:K,recovery:k}=this,T=E(N("msgHash",y));if(k==null||![0,1,2,3].includes(k))throw new Error("recovery id invalid");let R=k===2||k===3?B+t.n:B;if(R>=e.ORDER)throw new Error("recovery id 2 or 3 invalid");let z=k&1?"03":"02",tt=u.fromHex(z+_(R)),et=c(R),dt=o(-T*et),xt=o(K*et),rt=u.BASE.multiplyAndAddUnsafe(tt,dt,xt);if(!rt)throw new Error("point at infinify");return rt.assertValidity(),rt}hasHighS(){return g(this.s)}normalizeS(){return this.hasHighS()?new b(this.r,o(-this.s),this.recovery):this}toDERRawBytes(){return ut(this.toDERHex())}toDERHex(){return lt.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return ut(this.toCompactHex())}toCompactHex(){return _(this.r)+_(this.s)}}let x={isValidPrivateKey(d){try{return p(d),!0}catch{return!1}},normPrivateKeyToScalar:p,randomPrivateKey:()=>{let d=t.randomBytes(e.BYTES+8),y=Re(d,n);return X(y,t.nByteLength)},precompute(d=8,y=u.BASE){return y._setWindowSize(d),y.multiply(BigInt(3)),y}};function v(d,y=!0){return u.fromPrivateKey(d).toRawBytes(y)}function I(d){let y=d instanceof Uint8Array,B=typeof d=="string",K=(y||B)&&d.length;return y?K===i||K===s:B?K===2*i||K===2*s:d instanceof u}function S(d,y,B=!0){if(I(d))throw new Error("first arg must be private key");if(!I(y))throw new Error("second arg must be public key");return u.fromHex(y).multiply(p(d)).toRawBytes(B)}let w=t.bits2int||function(d){let y=$(d),B=d.length*8-t.nBitLength;return B>0?y>>BigInt(B):y},E=t.bits2int_modN||function(d){return o(w(d))},A=St(t.nBitLength);function D(d){if(typeof d!="bigint")throw new Error("bigint expected");if(!(J<=d&&dct in B))throw new Error("sign() legacy options not supported");let{hash:K,randomBytes:k}=t,{lowS:T,prehash:R,extraEntropy:z}=B;T==null&&(T=!0),d=N("msgHash",d),R&&(d=N("prehashed msgHash",K(d)));let tt=E(d),et=p(y),dt=[D(et),D(tt)];if(z!=null){let ct=z===!0?k(e.BYTES):z;dt.push(N("extraEntropy",ct,e.BYTES))}let xt=ot(...dt),rt=tt;function Jt(ct){let ht=w(ct);if(!m(ht))return;let me=c(ht),Z=u.BASE.multiply(ht).toAffine(),yt=o(Z.x);if(yt===J)return;let Pt=o(me*o(rt+yt*et));if(Pt===J)return;let xe=(Z.x===yt?0:2)|Number(Z.y&V),Ee=Pt;return T&&g(Pt)&&(Ee=f(Pt),xe^=1),new b(yt,Ee,xe)}return{seed:xt,k2sig:Jt}}let P={lowS:t.lowS,prehash:!1},q={lowS:t.lowS,prehash:!1};function C(d,y,B=P){let{seed:K,k2sig:k}=U(d,y,B),T=t;return fe(T.hash.outputLen,T.nByteLength,T.hmac)(K,k)}u.BASE._setWindowSize(8);function F(d,y,B,K=q){let k=d;if(y=N("msgHash",y),B=N("publicKey",B),"strict"in K)throw new Error("options.strict was renamed to lowS");let{lowS:T,prehash:R}=K,z,tt;try{if(typeof k=="string"||k instanceof Uint8Array)try{z=b.fromDER(k)}catch(Z){if(!(Z instanceof lt.Err))throw Z;z=b.fromCompact(k)}else if(typeof k=="object"&&typeof k.r=="bigint"&&typeof k.s=="bigint"){let{r:Z,s:yt}=k;z=new b(Z,yt)}else throw new Error("PARSE");tt=u.fromHex(B)}catch(Z){if(Z.message==="PARSE")throw new Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(T&&z.hasHighS())return!1;R&&(y=t.hash(y));let{r:et,s:dt}=z,xt=E(y),rt=c(dt),Jt=o(xt*rt),ct=o(et*rt),ht=u.BASE.multiplyAndAddUnsafe(tt,Jt,ct)?.toAffine();return ht?o(ht.x)===et:!1}return{CURVE:t,getPublicKey:v,getSharedSecret:S,sign:C,verify:F,ProjectivePoint:u,Signature:b,utils:x}}function jr(r){return{hash:r,hmac:(t,...e)=>vt(r,t,Ae(...e)),randomBytes:re}}function Ve(r,t){let e=n=>De({...r,...jr(n)});return Object.freeze({...e(t),create:e})}var Ze=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),Me=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),Dr=BigInt(1),be=BigInt(2),$e=(r,t)=>(r+t/be)/t;function Vr(r){let t=Ze,e=BigInt(3),n=BigInt(6),i=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),u=r*r*r%t,p=u*u*r%t,l=j(p,e,t)*p%t,m=j(l,e,t)*p%t,_=j(m,be,t)*u%t,g=j(_,i,t)*_%t,f=j(g,s,t)*g%t,h=j(f,o,t)*f%t,b=j(h,c,t)*h%t,x=j(b,o,t)*f%t,v=j(x,e,t)*p%t,I=j(v,a,t)*g%t,S=j(I,n,t)*u%t,w=j(S,be,t);if(!we.eql(we.sqr(w),r))throw new Error("Cannot find square root");return w}var we=Ce(Ze,void 0,void 0,{sqrt:Vr}),_t=Ve({a:BigInt(0),b:BigInt(7),Fp:we,n:Me,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:r=>{let t=Me,e=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),n=-Dr*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),i=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=e,a=BigInt("0x100000000000000000000000000000000"),o=$e(s*r,t),c=$e(-n*r,t),u=H(r-o*e-c*i,t),p=H(-o*n-c*s,t),l=u>a,m=p>a;if(l&&(u=t-u),m&&(p=t-p),u>a||p>a)throw new Error("splitScalar: Endomorphism failed, k="+r);return{k1neg:l,k1:u,k2neg:m,k2:p}}}},Ht),Fn=BigInt(0);var ti=_t.ProjectivePoint;var Xt=["deriveBits"],Ge=new Uint8Array([100,107,112,95,112,114,107]),Ye=new Uint8Array([115,107]);var st=class{constructor(t,e,n,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=e,this.type=n,this.algorithm={name:t},this.usages=i,n==="public"&&(this.usages=[])}};var It="ECDH",Qt=class extends bt{constructor(t){super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=33,this._nSk=32}async serializePublicKey(t){return await this._serializePublicKey(t)}async deserializePublicKey(t){return await this._deserializePublicKey(t)}async importKey(t,e,n){if(t!=="raw")throw new Error("Unsupported format");return await this._importKey(e,n)}async derivePublicKey(t){return await this._derivePublicKey(t)}async generateKeyPair(){let t=_t.utils.randomPrivateKey(),e=new st(It,t,"private",Xt);return{publicKey:await this.derivePublicKey(e),privateKey:e}}async deriveKeyPair(t){let e=await this._hkdf.labeledExtract(Y,Ge,new Uint8Array(t)),n=await this._hkdf.labeledExpand(e,Ye,Y,this._nSk),i=new st(It,new Uint8Array(n),"private",Xt);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}async dh(t,e){return await this._dh(t,e)}_serializePublicKey(t){return new Promise(e=>{e(t.key.buffer)})}_deserializePublicKey(t){return new Promise((e,n)=>{t.byteLength!==this._nPk?n(new Error("Invalid public key for the ciphersuite")):e(new st(It,new Uint8Array(t),"public"))})}_importKey(t,e){return new Promise((n,i)=>{e&&t.byteLength!==this._nPk&&i(new Error("Invalid public key for the ciphersuite")),!e&&t.byteLength!==this._nSk&&i(new Error("Invalid private key for the ciphersuite")),n(new st(It,new Uint8Array(t),e?"public":"private",e?[]:Xt))})}_derivePublicKey(t){return new Promise(e=>{let n=_t.getPublicKey(t.key);e(new st(It,n,"public"))})}_dh(t,e){return new Promise((n,i)=>{try{n(_t.getSharedSecret(t.key,e.key).buffer)}catch(s){i(s)}})}};var ge=class extends Mt{constructor(){let t=new Vt,e=new Qt(t);super(e,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:kt.DhkemSecp256k1HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:33}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:33}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};export{ge as DhkemSecp256k1HkdfSha256}; +var Yt=Object.defineProperty;var Wt=(r,e)=>{for(var t in e)Yt(r,t,{get:e[t],enumerable:!0})};var Xt={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},ke=Xt,Qt={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},Fe=Qt;function et(r){if(!Number.isSafeInteger(r)||r<0)throw new Error(`Wrong positive integer: ${r}`)}function Jt(r){if(typeof r!="boolean")throw new Error(`Expected boolean, not ${r}`)}function Et(r,...e){if(!(r instanceof Uint8Array))throw new Error("Expected Uint8Array");if(e.length>0&&!e.includes(r.length))throw new Error(`Expected Uint8Array of length ${e}, not of length=${r.length}`)}function Ft(r){if(typeof r!="function"||typeof r.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");et(r.outputLen),et(r.blockLen)}function er(r,e=!0){if(r.destroyed)throw new Error("Hash instance has been destroyed");if(e&&r.finished)throw new Error("Hash#digest() has already been called")}function tr(r,e){Et(r);let t=e.outputLen;if(r.lengthr instanceof Uint8Array;var Ue=r=>new DataView(r.buffer,r.byteOffset,r.byteLength),M=(r,e)=>r<<32-e|r>>>e,nr=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!nr)throw new Error("Non little-endian hardware is not supported");var Wr=Array.from({length:256},(r,e)=>e.toString(16).padStart(2,"0"));function ir(r){if(typeof r!="string")throw new Error(`utf8ToBytes expected string, got ${typeof r}`);return new Uint8Array(new TextEncoder().encode(r))}function Ee(r){if(typeof r=="string"&&(r=ir(r)),!vt(r))throw new Error(`expected Uint8Array, got ${typeof r}`);return r}function Bt(...r){let e=new Uint8Array(r.reduce((n,i)=>n+i.length,0)),t=0;return r.forEach(n=>{if(!vt(n))throw new Error("Uint8Array expected");e.set(n,t),t+=n.length}),e}var pe=class{clone(){return this._cloneInto()}};function tt(r){let e=n=>r().update(Ee(n)).digest(),t=r();return e.outputLen=t.outputLen,e.blockLen=t.blockLen,e.create=()=>r(),e}function rt(r=32){if(Ke&&typeof Ke.getRandomValues=="function")return Ke.getRandomValues(new Uint8Array(r));throw new Error("crypto.getRandomValues must be defined")}var Le=class extends pe{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,G.hash(e);let n=Ee(t);if(this.iHash=e.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,s=new Uint8Array(i);s.set(n.length>i?e.create().update(n).digest():n);for(let a=0;anew Le(r,e).update(t).digest();ve.create=(r,e)=>new Le(r,e);function or(r,e,t,n){if(typeof r.setBigUint64=="function")return r.setBigUint64(e,t,n);let i=BigInt(32),s=BigInt(4294967295),a=Number(t>>i&s),o=Number(t&s),c=n?4:0,u=n?0:4;r.setUint32(e+c,a,n),r.setUint32(e+u,o,n)}var Oe=class extends pe{constructor(e,t,n,i){super(),this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=Ue(this.buffer)}update(e){G.exists(this);let{view:t,buffer:n,blockLen:i}=this;e=Ee(e);let s=e.length;for(let a=0;ai-a&&(this.process(n,0),a=0);for(let l=a;lp.length)throw new Error("_sha2: outputLen bigger than state");for(let l=0;lr&e^~r&t,cr=(r,e,t)=>r&e^r&t^e&t,ar=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ne=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),ie=new Uint32Array(64),Te=class extends Oe{constructor(){super(64,32,8,!1),this.A=ne[0]|0,this.B=ne[1]|0,this.C=ne[2]|0,this.D=ne[3]|0,this.E=ne[4]|0,this.F=ne[5]|0,this.G=ne[6]|0,this.H=ne[7]|0}get(){let{A:e,B:t,C:n,D:i,E:s,F:a,G:o,H:c}=this;return[e,t,n,i,s,a,o,c]}set(e,t,n,i,s,a,o,c){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=s|0,this.F=a|0,this.G=o|0,this.H=c|0}process(e,t){for(let l=0;l<16;l++,t+=4)ie[l]=e.getUint32(t,!1);for(let l=16;l<64;l++){let m=ie[l-15],_=ie[l-2],g=M(m,7)^M(m,18)^m>>>3,f=M(_,17)^M(_,19)^_>>>10;ie[l]=f+ie[l-7]+g+ie[l-16]|0}let{A:n,B:i,C:s,D:a,E:o,F:c,G:u,H:p}=this;for(let l=0;l<64;l++){let m=M(o,6)^M(o,11)^M(o,25),_=p+m+sr(o,c,u)+ar[l]+ie[l]|0,f=(M(n,2)^M(n,13)^M(n,22))+cr(n,i,s)|0;p=u,u=c,c=o,o=a+_|0,a=s,s=i,i=n,n=_+f|0}n=n+this.A|0,i=i+this.B|0,s=s+this.C|0,a=a+this.D|0,o=o+this.E|0,c=c+this.F|0,u=u+this.G|0,p=p+this.H|0,this.set(n,i,s,a,o,c,u,p)}roundClean(){ie.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}},nt=class extends Te{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}},He=tt(()=>new Te),sn=tt(()=>new nt);var Y=new Uint8Array(0);var Ne=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},be=class extends Ne{constructor(){super()}init(e){this._api=e}},qe=class extends Ne{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:Y})}init(e,t){this._api=e,this._suiteId=t}};var W=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},we=class extends W{};var Ce=class extends W{},ge=class extends W{},Re=class extends W{},ze=class extends W{};var je=class extends W{},me=class extends W{};var At=new Uint8Array([72,80,75,69,45,118,49]),ot=class extends qe{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Fe.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let n=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(At,0),n.set(this._suiteId,7),n.set(e,7+this._suiteId.byteLength),n.set(t,7+this._suiteId.byteLength+e.byteLength),n}buildLabeledInfo(e,t,n){let i=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return i.set(new Uint8Array([0,n]),0),i.set(At,2),i.set(this._suiteId,9),i.set(e,9+this._suiteId.byteLength),i.set(t,9+this._suiteId.byteLength+e.byteLength),i}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new we("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,t)}async expand(e,t,n){this.checkInit();let i=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),s=new ArrayBuffer(n),a=new Uint8Array(s),o=Y,c=new Uint8Array(t),u=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let p=new Uint8Array(this.hashSize+c.length+1);for(let l=1,m=0;m=o.length?(a.set(o,m),m+=o.length):(a.set(o.slice(0,a.length-m),m),m+=a.length-m);return s}async extractAndExpand(e,t,n,i){this.checkInit();let s=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:n},s,i*8)}async labeledExtract(e,t,n){return await this.extract(e,this.buildLabeledIkm(t,n))}async labeledExpand(e,t,n,i){return await this.expand(e,this.buildLabeledInfo(t,n,i),i)}},De=class extends ot{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Fe.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}};var Ve=class extends De{async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)return ve(He,new Uint8Array(e),new Uint8Array(t));let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,t)}};var fr={},St=lr(globalThis,fr);function lr(r,e){return new Proxy(r,{get(t,n,i){return n in e?e[n]:r[n]},set(t,n,i){return n in e&&delete e[n],r[n]=i,!0},deleteProperty(t,n){let i=!1;return n in e&&(delete e[n],i=!0),n in r&&(delete r[n],i=!0),i},ownKeys(t){let n=Reflect.ownKeys(r),i=Reflect.ownKeys(e),s=new Set(i);return[...n.filter(a=>!s.has(a)),...i]},defineProperty(t,n,i){return n in e&&delete e[n],Reflect.defineProperty(r,n,i),!0},getOwnPropertyDescriptor(t,n){return n in e?Reflect.getOwnPropertyDescriptor(e,n):Reflect.getOwnPropertyDescriptor(r,n)},has(t,n){return n in e||n in r}})}var _t=()=>typeof St<"u",It=()=>typeof caches<"u";var Be=r=>typeof r=="object"&&r!==null&&typeof r.privateKey=="object"&&typeof r.publicKey=="object";function Pt(r,e){if(e<=0)throw new Error("i2Osp: too small size");if(r>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let n=0;n>8;return t}function Ae(r,e){let t=new Uint8Array(r.length+e.length);return t.set(r,0),t.set(e,r.length),t}function kt(r,e,t){let n=new Uint8Array(r.length+e.length+t.length);return n.set(r,0),n.set(e,r.length),n.set(t,r.length+e.length),n}async function Kt(){if((_t()||It())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:r}=await import("crypto");return r.subtle}catch{throw new me("Web Cryptograph API not supported")}}var yr=new Uint8Array([75,69,77,0,0]),pr=new Uint8Array([101,97,101,95,112,114,107]),br=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),Me=class extends be{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:ke.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new me(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new we("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new je(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new Ce(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new ge(t)}}async importKey(e,t,n=!0){await this._setup();try{return await this._prim.importKey(e,t,n)}catch(i){throw new ge(i)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,n=await this._prim.serializePublicKey(t.publicKey),i=await this._prim.serializePublicKey(e.recipientPublicKey),s;if(e.senderKey===void 0)s=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let c=Be(e.senderKey)?e.senderKey.privateKey:e.senderKey,u=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),p=new Uint8Array(await this._prim.dh(c,e.recipientPublicKey));s=Ae(u,p)}let a;if(e.senderKey===void 0)a=Ae(new Uint8Array(n),new Uint8Array(i));else{let c=Be(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),u=await this._prim.serializePublicKey(c);a=kt(new Uint8Array(n),new Uint8Array(i),new Uint8Array(u))}let o=await this._generateSharedSecret(s,a);return{enc:n,sharedSecret:o}}catch(t){throw new Re(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(n){throw new ge(n)}try{let n=Be(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,i=Be(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),s=await this._prim.serializePublicKey(i),a;if(e.senderPublicKey===void 0)a=new Uint8Array(await this._prim.dh(n,t));else{let c=new Uint8Array(await this._prim.dh(n,t)),u=new Uint8Array(await this._prim.dh(n,e.senderPublicKey));a=Ae(c,u)}let o;if(e.senderPublicKey===void 0)o=Ae(new Uint8Array(e.enc),new Uint8Array(s));else{let c=await this._prim.serializePublicKey(e.senderPublicKey);o=new Uint8Array(e.enc.byteLength+s.byteLength+c.byteLength),o.set(new Uint8Array(e.enc),0),o.set(new Uint8Array(s),e.enc.byteLength),o.set(new Uint8Array(c),e.enc.byteLength+s.byteLength)}return await this._generateSharedSecret(a,o)}catch(n){throw new ze(n)}}async _setup(){if(this._api!==void 0)return;let e=await Kt(),t=new Uint8Array(yr);t.set(Pt(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let n=this._kdf.buildLabeledIkm(pr,e),i=this._kdf.buildLabeledInfo(br,t,this.secretSize);return await this._kdf.extractAndExpand(Y,n,i,this.secretSize)}};var ft={};Wt(ft,{bitGet:()=>vr,bitLen:()=>Er,bitMask:()=>Se,bitSet:()=>Br,bytesToHex:()=>ae,bytesToNumberBE:()=>$,bytesToNumberLE:()=>Ge,concatBytes:()=>oe,createHmacDrbg:()=>ut,ensureBytes:()=>N,equalBytes:()=>xr,hexToBytes:()=>ue,hexToNumber:()=>ct,numberToBytesBE:()=>X,numberToBytesLE:()=>at,numberToHexUnpadded:()=>Ot,numberToVarBytesBE:()=>mr,utf8ToBytes:()=>Tt,validateObject:()=>Q});var Lt=BigInt(0),$e=BigInt(1),wr=BigInt(2),Ze=r=>r instanceof Uint8Array,gr=Array.from({length:256},(r,e)=>e.toString(16).padStart(2,"0"));function ae(r){if(!Ze(r))throw new Error("Uint8Array expected");let e="";for(let t=0;tn+i.length,0)),t=0;return r.forEach(n=>{if(!Ze(n))throw new Error("Uint8Array expected");e.set(n,t),t+=n.length}),e}function xr(r,e){if(r.length!==e.length)return!1;for(let t=0;tLt;r>>=$e,e+=1);return e}function vr(r,e){return r>>BigInt(e)&$e}var Br=(r,e,t)=>r|(t?$e:Lt)<(wr<new Uint8Array(r),Ut=r=>Uint8Array.from(r);function ut(r,e,t){if(typeof r!="number"||r<2)throw new Error("hashLen must be a number");if(typeof e!="number"||e<2)throw new Error("qByteLen must be a number");if(typeof t!="function")throw new Error("hmacFn must be a function");let n=st(r),i=st(r),s=0,a=()=>{n.fill(1),i.fill(0),s=0},o=(...l)=>t(i,n,...l),c=(l=st())=>{i=o(Ut([0]),l),n=o(),l.length!==0&&(i=o(Ut([1]),l),n=o())},u=()=>{if(s++>=1e3)throw new Error("drbg: tried 1000 values");let l=0,m=[];for(;l{a(),c(l);let _;for(;!(_=m(u()));)c();return a(),_}}var Ar={bigint:r=>typeof r=="bigint",function:r=>typeof r=="function",boolean:r=>typeof r=="boolean",string:r=>typeof r=="string",isSafeInteger:r=>Number.isSafeInteger(r),array:r=>Array.isArray(r),field:(r,e)=>e.Fp.isValid(r),hash:r=>typeof r=="function"&&Number.isSafeInteger(r.outputLen)};function Q(r,e,t={}){let n=(i,s,a)=>{let o=Ar[s];if(typeof o!="function")throw new Error(`Invalid validator "${s}", expected function`);let c=r[i];if(!(a&&c===void 0)&&!o(c,r))throw new Error(`Invalid param ${String(i)}=${c} (${typeof c}), expected ${s}`)};for(let[i,s]of Object.entries(e))n(i,s,!1);for(let[i,s]of Object.entries(t))n(i,s,!0);return r}var O=BigInt(0),L=BigInt(1),fe=BigInt(2),Sr=BigInt(3),lt=BigInt(4),Ht=BigInt(5),Nt=BigInt(8),_r=BigInt(9),Ir=BigInt(16);function H(r,e){let t=r%e;return t>=O?t:e+t}function Pr(r,e,t){if(t<=O||e 0");if(t===L)return O;let n=L;for(;e>O;)e&L&&(n=n*r%t),r=r*r%t,e>>=L;return n}function j(r,e,t){let n=r;for(;e-- >O;)n*=n,n%=t;return n}function Ye(r,e){if(r===O||e<=O)throw new Error(`invert: expected positive integers, got n=${r} mod=${e}`);let t=H(r,e),n=e,i=O,s=L,a=L,o=O;for(;t!==O;){let u=n/t,p=n%t,l=i-a*u,m=s-o*u;n=t,t=p,i=a,s=o,a=l,o=m}if(n!==L)throw new Error("invert: does not exist");return H(i,e)}function kr(r){let e=(r-L)/fe,t,n,i;for(t=r-L,n=0;t%fe===O;t/=fe,n++);for(i=fe;i(n[i]="function",n),e);return Q(r,t)}function Lr(r,e,t){if(t 0");if(t===O)return r.ONE;if(t===L)return e;let n=r.ONE,i=e;for(;t>O;)t&L&&(n=r.mul(n,i)),i=r.sqr(i),t>>=L;return n}function Or(r,e){let t=new Array(e.length),n=e.reduce((s,a,o)=>r.is0(a)?s:(t[o]=s,r.mul(s,a)),r.ONE),i=r.inv(n);return e.reduceRight((s,a,o)=>r.is0(a)?s:(t[o]=r.mul(s,t[o]),r.mul(s,a)),i),t}function We(r,e){let t=e!==void 0?e:r.toString(2).length,n=Math.ceil(t/8);return{nBitLength:t,nByteLength:n}}function qt(r,e,t=!1,n={}){if(r<=O)throw new Error(`Expected Fp ORDER > 0, got ${r}`);let{nBitLength:i,nByteLength:s}=We(r,e);if(s>2048)throw new Error("Field lengths over 2048 bytes are not supported");let a=Kr(r),o=Object.freeze({ORDER:r,BITS:i,BYTES:s,MASK:Se(i),ZERO:O,ONE:L,create:c=>H(c,r),isValid:c=>{if(typeof c!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof c}`);return O<=c&&cc===O,isOdd:c=>(c&L)===L,neg:c=>H(-c,r),eql:(c,u)=>c===u,sqr:c=>H(c*c,r),add:(c,u)=>H(c+u,r),sub:(c,u)=>H(c-u,r),mul:(c,u)=>H(c*u,r),pow:(c,u)=>Lr(o,c,u),div:(c,u)=>H(c*Ye(u,r),r),sqrN:c=>c*c,addN:(c,u)=>c+u,subN:(c,u)=>c-u,mulN:(c,u)=>c*u,inv:c=>Ye(c,r),sqrt:n.sqrt||(c=>a(o,c)),invertBatch:c=>Or(o,c),cmov:(c,u,p)=>p?u:c,toBytes:c=>t?at(c,s):X(c,s),fromBytes:c=>{if(c.length!==s)throw new Error(`Fp.fromBytes: expected ${s}, got ${c.length}`);return t?Ge(c):$(c)}});return Object.freeze(o)}function Ct(r,e,t=!1){r=N("privateHash",r);let n=r.length,i=We(e).nByteLength+8;if(i<24||n1024)throw new Error(`hashToPrivateScalar: expected ${i}-1024 bytes of input, got ${n}`);let s=t?Ge(r):$(r);return H(s,e-L)+L}var Hr=BigInt(0),ht=BigInt(1);function Rt(r,e){let t=(i,s)=>{let a=s.negate();return i?a:s},n=i=>{let s=Math.ceil(e/i)+1,a=2**(i-1);return{windows:s,windowSize:a}};return{constTimeNegate:t,unsafeLadder(i,s){let a=r.ZERO,o=i;for(;s>Hr;)s&ht&&(a=a.add(o)),o=o.double(),s>>=ht;return a},precomputeWindow(i,s){let{windows:a,windowSize:o}=n(s),c=[],u=i,p=u;for(let l=0;l>=_,h>c&&(h-=m,a+=ht);let b=f,x=f+Math.abs(h)-1,v=g%2!==0,I=h<0;h===0?p=p.add(t(v,s[b])):u=u.add(t(I,s[x]))}return{p:u,f:p}},wNAFCached(i,s,a,o){let c=i._WINDOW_SIZE||1,u=s.get(i);return u||(u=this.precomputeWindow(i,c),c!==1&&s.set(i,o(u))),this.wNAF(c,u,a)}}}function yt(r){return dt(r.Fp),Q(r,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...We(r.n,r.nBitLength),...r,p:r.Fp.ORDER})}function Nr(r){let e=yt(r);Q(e,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});let{endo:t,Fp:n,a:i}=e;if(t){if(!n.eql(i,n.ZERO))throw new Error("Endomorphism can only be defined for Koblitz curves that have a=0");if(typeof t!="object"||typeof t.beta!="bigint"||typeof t.splitScalar!="function")throw new Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...e})}var{bytesToNumberBE:qr,hexToBytes:Cr}=ft,le={Err:class extends Error{constructor(e=""){super(e)}},_parseInt(r){let{Err:e}=le;if(r.length<2||r[0]!==2)throw new e("Invalid signature integer tag");let t=r[1],n=r.subarray(2,t+2);if(!t||n.length!==t)throw new e("Invalid signature integer: wrong length");if(n[0]&128)throw new e("Invalid signature integer: negative");if(n[0]===0&&!(n[1]&128))throw new e("Invalid signature integer: unnecessary leading zero");return{d:qr(n),l:r.subarray(t+2)}},toSig(r){let{Err:e}=le,t=typeof r=="string"?Cr(r):r;if(!(t instanceof Uint8Array))throw new Error("ui8a expected");let n=t.length;if(n<2||t[0]!=48)throw new e("Invalid signature tag");if(t[1]!==n-2)throw new e("Invalid signature: incorrect length");let{d:i,l:s}=le._parseInt(t.subarray(2)),{d:a,l:o}=le._parseInt(s);if(o.length)throw new e("Invalid signature: left bytes after parsing");return{r:i,s:a}},hexFromSig(r){let e=u=>Number.parseInt(u[0],16)&8?"00"+u:u,t=u=>{let p=u.toString(16);return p.length&1?`0${p}`:p},n=e(t(r.s)),i=e(t(r.r)),s=n.length/2,a=i.length/2,o=t(s),c=t(a);return`30${t(a+s+4)}02${c}${i}02${o}${n}`}},J=BigInt(0),V=BigInt(1),On=BigInt(2),zt=BigInt(3),Tn=BigInt(4);function Rr(r){let e=Nr(r),{Fp:t}=e,n=e.toBytes||((g,f,h)=>{let b=f.toAffine();return oe(Uint8Array.from([4]),t.toBytes(b.x),t.toBytes(b.y))}),i=e.fromBytes||(g=>{let f=g.subarray(1),h=t.fromBytes(f.subarray(0,t.BYTES)),b=t.fromBytes(f.subarray(t.BYTES,2*t.BYTES));return{x:h,y:b}});function s(g){let{a:f,b:h}=e,b=t.sqr(g),x=t.mul(b,g);return t.add(t.add(x,t.mul(g,f)),h)}if(!t.eql(t.sqr(e.Gy),s(e.Gx)))throw new Error("bad generator point: equation left != right");function a(g){return typeof g=="bigint"&&Jt.eql(v,t.ZERO);return x(h)&&x(b)?l.ZERO:new l(h,b,t.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(f){let h=t.invertBatch(f.map(b=>b.pz));return f.map((b,x)=>b.toAffine(h[x])).map(l.fromAffine)}static fromHex(f){let h=l.fromAffine(i(N("pointHex",f)));return h.assertValidity(),h}static fromPrivateKey(f){return l.BASE.multiply(c(f))}_setWindowSize(f){this._WINDOW_SIZE=f,u.delete(this)}assertValidity(){if(this.is0()){if(e.allowInfinityPoint)return;throw new Error("bad point: ZERO")}let{x:f,y:h}=this.toAffine();if(!t.isValid(f)||!t.isValid(h))throw new Error("bad point: x or y not FE");let b=t.sqr(h),x=s(f);if(!t.eql(b,x))throw new Error("bad point: equation left != right");if(!this.isTorsionFree())throw new Error("bad point: not in prime-order subgroup")}hasEvenY(){let{y:f}=this.toAffine();if(t.isOdd)return!t.isOdd(f);throw new Error("Field doesn't support isOdd")}equals(f){p(f);let{px:h,py:b,pz:x}=this,{px:v,py:I,pz:S}=f,w=t.eql(t.mul(h,S),t.mul(v,x)),E=t.eql(t.mul(b,S),t.mul(I,x));return w&&E}negate(){return new l(this.px,t.neg(this.py),this.pz)}double(){let{a:f,b:h}=e,b=t.mul(h,zt),{px:x,py:v,pz:I}=this,S=t.ZERO,w=t.ZERO,E=t.ZERO,A=t.mul(x,x),D=t.mul(v,v),U=t.mul(I,I),P=t.mul(x,v);return P=t.add(P,P),E=t.mul(x,I),E=t.add(E,E),S=t.mul(f,E),w=t.mul(b,U),w=t.add(S,w),S=t.sub(D,w),w=t.add(D,w),w=t.mul(S,w),S=t.mul(P,S),E=t.mul(b,E),U=t.mul(f,U),P=t.sub(A,U),P=t.mul(f,P),P=t.add(P,E),E=t.add(A,A),A=t.add(E,A),A=t.add(A,U),A=t.mul(A,P),w=t.add(w,A),U=t.mul(v,I),U=t.add(U,U),A=t.mul(U,P),S=t.sub(S,A),E=t.mul(U,D),E=t.add(E,E),E=t.add(E,E),new l(S,w,E)}add(f){p(f);let{px:h,py:b,pz:x}=this,{px:v,py:I,pz:S}=f,w=t.ZERO,E=t.ZERO,A=t.ZERO,D=e.a,U=t.mul(e.b,zt),P=t.mul(h,v),q=t.mul(b,I),C=t.mul(x,S),F=t.add(h,b),d=t.add(v,I);F=t.mul(F,d),d=t.add(P,q),F=t.sub(F,d),d=t.add(h,x);let y=t.add(v,S);return d=t.mul(d,y),y=t.add(P,C),d=t.sub(d,y),y=t.add(b,x),w=t.add(I,S),y=t.mul(y,w),w=t.add(q,C),y=t.sub(y,w),A=t.mul(D,d),w=t.mul(U,C),A=t.add(w,A),w=t.sub(q,A),A=t.add(q,A),E=t.mul(w,A),q=t.add(P,P),q=t.add(q,P),C=t.mul(D,C),d=t.mul(U,d),q=t.add(q,C),C=t.sub(P,C),C=t.mul(D,C),d=t.add(d,C),P=t.mul(q,d),E=t.add(E,P),P=t.mul(y,d),w=t.mul(F,w),w=t.sub(w,P),P=t.mul(F,q),A=t.mul(y,A),A=t.add(A,P),new l(w,E,A)}subtract(f){return this.add(f.negate())}is0(){return this.equals(l.ZERO)}wNAF(f){return _.wNAFCached(this,u,f,h=>{let b=t.invertBatch(h.map(x=>x.pz));return h.map((x,v)=>x.toAffine(b[v])).map(l.fromAffine)})}multiplyUnsafe(f){let h=l.ZERO;if(f===J)return h;if(o(f),f===V)return this;let{endo:b}=e;if(!b)return _.unsafeLadder(this,f);let{k1neg:x,k1:v,k2neg:I,k2:S}=b.splitScalar(f),w=h,E=h,A=this;for(;v>J||S>J;)v&V&&(w=w.add(A)),S&V&&(E=E.add(A)),A=A.double(),v>>=V,S>>=V;return x&&(w=w.negate()),I&&(E=E.negate()),E=new l(t.mul(E.px,b.beta),E.py,E.pz),w.add(E)}multiply(f){o(f);let h=f,b,x,{endo:v}=e;if(v){let{k1neg:I,k1:S,k2neg:w,k2:E}=v.splitScalar(h),{p:A,f:D}=this.wNAF(S),{p:U,f:P}=this.wNAF(E);A=_.constTimeNegate(I,A),U=_.constTimeNegate(w,U),U=new l(t.mul(U.px,v.beta),U.py,U.pz),b=A.add(U),x=D.add(P)}else{let{p:I,f:S}=this.wNAF(h);b=I,x=S}return l.normalizeZ([b,x])[0]}multiplyAndAddUnsafe(f,h,b){let x=l.BASE,v=(S,w)=>w===J||w===V||!S.equals(x)?S.multiplyUnsafe(w):S.multiply(w),I=v(this,h).add(v(f,b));return I.is0()?void 0:I}toAffine(f){let{px:h,py:b,pz:x}=this,v=this.is0();f==null&&(f=v?t.ONE:t.inv(x));let I=t.mul(h,f),S=t.mul(b,f),w=t.mul(x,f);if(v)return{x:t.ZERO,y:t.ZERO};if(!t.eql(w,t.ONE))throw new Error("invZ was invalid");return{x:I,y:S}}isTorsionFree(){let{h:f,isTorsionFree:h}=e;if(f===V)return!0;if(h)return h(l,this);throw new Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){let{h:f,clearCofactor:h}=e;return f===V?this:h?h(l,this):this.multiplyUnsafe(e.h)}toRawBytes(f=!0){return this.assertValidity(),n(l,this,f)}toHex(f=!0){return ae(this.toRawBytes(f))}}l.BASE=new l(e.Gx,e.Gy,t.ONE),l.ZERO=new l(t.ZERO,t.ONE,t.ZERO);let m=e.nBitLength,_=Rt(l,e.endo?Math.ceil(m/2):m);return{CURVE:e,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function zr(r){let e=yt(r);return Q(e,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...e})}function jt(r){let e=zr(r),{Fp:t,n}=e,i=t.BYTES+1,s=2*t.BYTES+1;function a(d){return Jae(X(d,e.nByteLength));function g(d){let y=n>>V;return d>y}function f(d){return g(d)?o(-d):d}let h=(d,y,B)=>$(d.slice(y,B));class b{constructor(y,B,K){this.r=y,this.s=B,this.recovery=K,this.assertValidity()}static fromCompact(y){let B=e.nByteLength;return y=N("compactSignature",y,B*2),new b(h(y,0,B),h(y,B,2*B))}static fromDER(y){let{r:B,s:K}=le.toSig(N("DER",y));return new b(B,K)}assertValidity(){if(!m(this.r))throw new Error("r must be 0 < r < CURVE.n");if(!m(this.s))throw new Error("s must be 0 < s < CURVE.n")}addRecoveryBit(y){return new b(this.r,this.s,y)}recoverPublicKey(y){let{r:B,s:K,recovery:k}=this,T=E(N("msgHash",y));if(k==null||![0,1,2,3].includes(k))throw new Error("recovery id invalid");let R=k===2||k===3?B+e.n:B;if(R>=t.ORDER)throw new Error("recovery id 2 or 3 invalid");let z=k&1?"03":"02",ee=u.fromHex(z+_(R)),te=c(R),de=o(-T*te),xe=o(K*te),re=u.BASE.multiplyAndAddUnsafe(ee,de,xe);if(!re)throw new Error("point at infinify");return re.assertValidity(),re}hasHighS(){return g(this.s)}normalizeS(){return this.hasHighS()?new b(this.r,o(-this.s),this.recovery):this}toDERRawBytes(){return ue(this.toDERHex())}toDERHex(){return le.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return ue(this.toCompactHex())}toCompactHex(){return _(this.r)+_(this.s)}}let x={isValidPrivateKey(d){try{return p(d),!0}catch{return!1}},normPrivateKeyToScalar:p,randomPrivateKey:()=>{let d=e.randomBytes(t.BYTES+8),y=Ct(d,n);return X(y,e.nByteLength)},precompute(d=8,y=u.BASE){return y._setWindowSize(d),y.multiply(BigInt(3)),y}};function v(d,y=!0){return u.fromPrivateKey(d).toRawBytes(y)}function I(d){let y=d instanceof Uint8Array,B=typeof d=="string",K=(y||B)&&d.length;return y?K===i||K===s:B?K===2*i||K===2*s:d instanceof u}function S(d,y,B=!0){if(I(d))throw new Error("first arg must be private key");if(!I(y))throw new Error("second arg must be public key");return u.fromHex(y).multiply(p(d)).toRawBytes(B)}let w=e.bits2int||function(d){let y=$(d),B=d.length*8-e.nBitLength;return B>0?y>>BigInt(B):y},E=e.bits2int_modN||function(d){return o(w(d))},A=Se(e.nBitLength);function D(d){if(typeof d!="bigint")throw new Error("bigint expected");if(!(J<=d&&dce in B))throw new Error("sign() legacy options not supported");let{hash:K,randomBytes:k}=e,{lowS:T,prehash:R,extraEntropy:z}=B;T==null&&(T=!0),d=N("msgHash",d),R&&(d=N("prehashed msgHash",K(d)));let ee=E(d),te=p(y),de=[D(te),D(ee)];if(z!=null){let ce=z===!0?k(t.BYTES):z;de.push(N("extraEntropy",ce,t.BYTES))}let xe=oe(...de),re=ee;function Je(ce){let he=w(ce);if(!m(he))return;let gt=c(he),Z=u.BASE.multiply(he).toAffine(),ye=o(Z.x);if(ye===J)return;let Pe=o(gt*o(re+ye*te));if(Pe===J)return;let mt=(Z.x===ye?0:2)|Number(Z.y&V),xt=Pe;return T&&g(Pe)&&(xt=f(Pe),mt^=1),new b(ye,xt,mt)}return{seed:xe,k2sig:Je}}let P={lowS:e.lowS,prehash:!1},q={lowS:e.lowS,prehash:!1};function C(d,y,B=P){let{seed:K,k2sig:k}=U(d,y,B),T=e;return ut(T.hash.outputLen,T.nByteLength,T.hmac)(K,k)}u.BASE._setWindowSize(8);function F(d,y,B,K=q){let k=d;if(y=N("msgHash",y),B=N("publicKey",B),"strict"in K)throw new Error("options.strict was renamed to lowS");let{lowS:T,prehash:R}=K,z,ee;try{if(typeof k=="string"||k instanceof Uint8Array)try{z=b.fromDER(k)}catch(Z){if(!(Z instanceof le.Err))throw Z;z=b.fromCompact(k)}else if(typeof k=="object"&&typeof k.r=="bigint"&&typeof k.s=="bigint"){let{r:Z,s:ye}=k;z=new b(Z,ye)}else throw new Error("PARSE");ee=u.fromHex(B)}catch(Z){if(Z.message==="PARSE")throw new Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(T&&z.hasHighS())return!1;R&&(y=e.hash(y));let{r:te,s:de}=z,xe=E(y),re=c(de),Je=o(xe*re),ce=o(te*re),he=u.BASE.multiplyAndAddUnsafe(ee,Je,ce)?.toAffine();return he?o(he.x)===te:!1}return{CURVE:e,getPublicKey:v,getSharedSecret:S,sign:C,verify:F,ProjectivePoint:u,Signature:b,utils:x}}function jr(r){return{hash:r,hmac:(e,...t)=>ve(r,e,Bt(...t)),randomBytes:rt}}function Dt(r,e){let t=n=>jt({...r,...jr(n)});return Object.freeze({...t(e),create:t})}var $t=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),Vt=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),Dr=BigInt(1),pt=BigInt(2),Mt=(r,e)=>(r+e/pt)/e;function Vr(r){let e=$t,t=BigInt(3),n=BigInt(6),i=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),u=r*r*r%e,p=u*u*r%e,l=j(p,t,e)*p%e,m=j(l,t,e)*p%e,_=j(m,pt,e)*u%e,g=j(_,i,e)*_%e,f=j(g,s,e)*g%e,h=j(f,o,e)*f%e,b=j(h,c,e)*h%e,x=j(b,o,e)*f%e,v=j(x,t,e)*p%e,I=j(v,a,e)*g%e,S=j(I,n,e)*u%e,w=j(S,pt,e);if(!bt.eql(bt.sqr(w),r))throw new Error("Cannot find square root");return w}var bt=qt($t,void 0,void 0,{sqrt:Vr}),_e=Dt({a:BigInt(0),b:BigInt(7),Fp:bt,n:Vt,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:r=>{let e=Vt,t=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),n=-Dr*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),i=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=t,a=BigInt("0x100000000000000000000000000000000"),o=Mt(s*r,e),c=Mt(-n*r,e),u=H(r-o*t-c*i,e),p=H(-o*n-c*s,e),l=u>a,m=p>a;if(l&&(u=e-u),m&&(p=e-p),u>a||p>a)throw new Error("splitScalar: Endomorphism failed, k="+r);return{k1neg:l,k1:u,k2neg:m,k2:p}}}},He),Fn=BigInt(0);var ei=_e.ProjectivePoint;var Xe=["deriveBits"],Zt=new Uint8Array([100,107,112,95,112,114,107]),Gt=new Uint8Array([115,107]);var se=class{constructor(e,t,n,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=t,this.type=n,this.algorithm={name:e},this.usages=i,n==="public"&&(this.usages=[])}};var Ie="ECDH",Qe=class extends be{constructor(e){super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=e,this._nPk=33,this._nSk=32}async serializePublicKey(e){return await this._serializePublicKey(e)}async deserializePublicKey(e){return await this._deserializePublicKey(e)}async importKey(e,t,n){if(e!=="raw")throw new Error("Unsupported format");return await this._importKey(t,n)}async derivePublicKey(e){return await this._derivePublicKey(e)}async generateKeyPair(){let e=_e.utils.randomPrivateKey(),t=new se(Ie,e,"private",Xe);return{publicKey:await this.derivePublicKey(t),privateKey:t}}async deriveKeyPair(e){let t=await this._hkdf.labeledExtract(Y,Zt,new Uint8Array(e)),n=await this._hkdf.labeledExpand(t,Gt,Y,this._nSk),i=new se(Ie,new Uint8Array(n),"private",Xe);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}async dh(e,t){return await this._dh(e,t)}_serializePublicKey(e){return new Promise(t=>{t(e.key.buffer)})}_deserializePublicKey(e){return new Promise((t,n)=>{e.byteLength!==this._nPk?n(new Error("Invalid public key for the ciphersuite")):t(new se(Ie,new Uint8Array(e),"public"))})}_importKey(e,t){return new Promise((n,i)=>{t&&e.byteLength!==this._nPk&&i(new Error("Invalid public key for the ciphersuite")),!t&&e.byteLength!==this._nSk&&i(new Error("Invalid private key for the ciphersuite")),n(new se(Ie,new Uint8Array(e),t?"public":"private",t?[]:Xe))})}_derivePublicKey(e){return new Promise(t=>{let n=_e.getPublicKey(e.key);t(new se(Ie,n,"public"))})}_dh(e,t){return new Promise((n,i)=>{try{n(_e.getSharedSecret(e.key,t.key).buffer)}catch(s){i(s)}})}};var wt=class extends Me{constructor(){let e=new Ve,t=new Qe(e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:ke.DhkemSecp256k1HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:33}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:33}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};export{wt as DhkemSecp256k1HkdfSha256}; /*! Bundled license information: @noble/hashes/esm/utils.js: diff --git a/dhkem-x25519/docs/assets/search.js b/dhkem-x25519/docs/assets/search.js index ec2b7a42d..7a5c21075 100644 --- a/dhkem-x25519/docs/assets/search.js +++ b/dhkem-x25519/docs/assets/search.js @@ -1 +1 @@ -window.searchData = JSON.parse("{\"rows\":[{\"kind\":128,\"name\":\"DhkemX25519HkdfSha256\",\"url\":\"classes/DhkemX25519HkdfSha256.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DhkemX25519HkdfSha256.html#constructor\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"classes/DhkemX25519HkdfSha256.html#id\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"secretSize\",\"url\":\"classes/DhkemX25519HkdfSha256.html#secretSize\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"encSize\",\"url\":\"classes/DhkemX25519HkdfSha256.html#encSize\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"publicKeySize\",\"url\":\"classes/DhkemX25519HkdfSha256.html#publicKeySize\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"privateKeySize\",\"url\":\"classes/DhkemX25519HkdfSha256.html#privateKeySize\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"_prim\",\"url\":\"classes/DhkemX25519HkdfSha256.html#_prim\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"_kdf\",\"url\":\"classes/DhkemX25519HkdfSha256.html#_kdf\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"classes/DhkemX25519HkdfSha256.html#init\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/DhkemX25519HkdfSha256.html#generateKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/DhkemX25519HkdfSha256.html#deriveKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"serializePublicKey\",\"url\":\"classes/DhkemX25519HkdfSha256.html#serializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"deserializePublicKey\",\"url\":\"classes/DhkemX25519HkdfSha256.html#deserializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/DhkemX25519HkdfSha256.html#importKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"encap\",\"url\":\"classes/DhkemX25519HkdfSha256.html#encap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"decap\",\"url\":\"classes/DhkemX25519HkdfSha256.html#decap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"_api\",\"url\":\"classes/DhkemX25519HkdfSha256.html#_api\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"checkInit\",\"url\":\"classes/DhkemX25519HkdfSha256.html#checkInit\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"}],\"index\":{\"version\":\"2.3.9\",\"fields\":[\"name\",\"comment\"],\"fieldVectors\":[[\"name/0\",[0,25.903]],[\"comment/0\",[]],[\"name/1\",[1,25.903]],[\"comment/1\",[]],[\"name/2\",[2,25.903]],[\"comment/2\",[]],[\"name/3\",[3,25.903]],[\"comment/3\",[]],[\"name/4\",[4,25.903]],[\"comment/4\",[]],[\"name/5\",[5,25.903]],[\"comment/5\",[]],[\"name/6\",[6,25.903]],[\"comment/6\",[]],[\"name/7\",[7,25.903]],[\"comment/7\",[]],[\"name/8\",[8,25.903]],[\"comment/8\",[]],[\"name/9\",[9,25.903]],[\"comment/9\",[]],[\"name/10\",[10,25.903]],[\"comment/10\",[]],[\"name/11\",[11,25.903]],[\"comment/11\",[]],[\"name/12\",[12,25.903]],[\"comment/12\",[]],[\"name/13\",[13,25.903]],[\"comment/13\",[]],[\"name/14\",[14,25.903]],[\"comment/14\",[]],[\"name/15\",[15,25.903]],[\"comment/15\",[]],[\"name/16\",[16,25.903]],[\"comment/16\",[]],[\"name/17\",[17,25.903]],[\"comment/17\",[]],[\"name/18\",[18,25.903]],[\"comment/18\",[]]],\"invertedIndex\":[[\"_api\",{\"_index\":17,\"name\":{\"17\":{}},\"comment\":{}}],[\"_kdf\",{\"_index\":8,\"name\":{\"8\":{}},\"comment\":{}}],[\"_prim\",{\"_index\":7,\"name\":{\"7\":{}},\"comment\":{}}],[\"checkinit\",{\"_index\":18,\"name\":{\"18\":{}},\"comment\":{}}],[\"constructor\",{\"_index\":1,\"name\":{\"1\":{}},\"comment\":{}}],[\"decap\",{\"_index\":16,\"name\":{\"16\":{}},\"comment\":{}}],[\"derivekeypair\",{\"_index\":11,\"name\":{\"11\":{}},\"comment\":{}}],[\"deserializepublickey\",{\"_index\":13,\"name\":{\"13\":{}},\"comment\":{}}],[\"dhkemx25519hkdfsha256\",{\"_index\":0,\"name\":{\"0\":{}},\"comment\":{}}],[\"encap\",{\"_index\":15,\"name\":{\"15\":{}},\"comment\":{}}],[\"encsize\",{\"_index\":4,\"name\":{\"4\":{}},\"comment\":{}}],[\"generatekeypair\",{\"_index\":10,\"name\":{\"10\":{}},\"comment\":{}}],[\"id\",{\"_index\":2,\"name\":{\"2\":{}},\"comment\":{}}],[\"importkey\",{\"_index\":14,\"name\":{\"14\":{}},\"comment\":{}}],[\"init\",{\"_index\":9,\"name\":{\"9\":{}},\"comment\":{}}],[\"privatekeysize\",{\"_index\":6,\"name\":{\"6\":{}},\"comment\":{}}],[\"publickeysize\",{\"_index\":5,\"name\":{\"5\":{}},\"comment\":{}}],[\"secretsize\",{\"_index\":3,\"name\":{\"3\":{}},\"comment\":{}}],[\"serializepublickey\",{\"_index\":12,\"name\":{\"12\":{}},\"comment\":{}}]],\"pipeline\":[]}}"); \ No newline at end of file +window.searchData = JSON.parse("{\"rows\":[{\"kind\":128,\"name\":\"DhkemX25519HkdfSha256\",\"url\":\"classes/DhkemX25519HkdfSha256.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DhkemX25519HkdfSha256.html#constructor\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"classes/DhkemX25519HkdfSha256.html#id\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"secretSize\",\"url\":\"classes/DhkemX25519HkdfSha256.html#secretSize\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"encSize\",\"url\":\"classes/DhkemX25519HkdfSha256.html#encSize\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"publicKeySize\",\"url\":\"classes/DhkemX25519HkdfSha256.html#publicKeySize\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"privateKeySize\",\"url\":\"classes/DhkemX25519HkdfSha256.html#privateKeySize\",\"classes\":\"\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"_prim\",\"url\":\"classes/DhkemX25519HkdfSha256.html#_prim\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"_kdf\",\"url\":\"classes/DhkemX25519HkdfSha256.html#_kdf\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/DhkemX25519HkdfSha256.html#generateKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/DhkemX25519HkdfSha256.html#deriveKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"serializePublicKey\",\"url\":\"classes/DhkemX25519HkdfSha256.html#serializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"deserializePublicKey\",\"url\":\"classes/DhkemX25519HkdfSha256.html#deserializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/DhkemX25519HkdfSha256.html#importKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"encap\",\"url\":\"classes/DhkemX25519HkdfSha256.html#encap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"decap\",\"url\":\"classes/DhkemX25519HkdfSha256.html#decap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"classes/DhkemX25519HkdfSha256.html#init\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":1024,\"name\":\"_api\",\"url\":\"classes/DhkemX25519HkdfSha256.html#_api\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"},{\"kind\":2048,\"name\":\"checkInit\",\"url\":\"classes/DhkemX25519HkdfSha256.html#checkInit\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX25519HkdfSha256\"}],\"index\":{\"version\":\"2.3.9\",\"fields\":[\"name\",\"comment\"],\"fieldVectors\":[[\"name/0\",[0,25.903]],[\"comment/0\",[]],[\"name/1\",[1,25.903]],[\"comment/1\",[]],[\"name/2\",[2,25.903]],[\"comment/2\",[]],[\"name/3\",[3,25.903]],[\"comment/3\",[]],[\"name/4\",[4,25.903]],[\"comment/4\",[]],[\"name/5\",[5,25.903]],[\"comment/5\",[]],[\"name/6\",[6,25.903]],[\"comment/6\",[]],[\"name/7\",[7,25.903]],[\"comment/7\",[]],[\"name/8\",[8,25.903]],[\"comment/8\",[]],[\"name/9\",[9,25.903]],[\"comment/9\",[]],[\"name/10\",[10,25.903]],[\"comment/10\",[]],[\"name/11\",[11,25.903]],[\"comment/11\",[]],[\"name/12\",[12,25.903]],[\"comment/12\",[]],[\"name/13\",[13,25.903]],[\"comment/13\",[]],[\"name/14\",[14,25.903]],[\"comment/14\",[]],[\"name/15\",[15,25.903]],[\"comment/15\",[]],[\"name/16\",[16,25.903]],[\"comment/16\",[]],[\"name/17\",[17,25.903]],[\"comment/17\",[]],[\"name/18\",[18,25.903]],[\"comment/18\",[]]],\"invertedIndex\":[[\"_api\",{\"_index\":17,\"name\":{\"17\":{}},\"comment\":{}}],[\"_kdf\",{\"_index\":8,\"name\":{\"8\":{}},\"comment\":{}}],[\"_prim\",{\"_index\":7,\"name\":{\"7\":{}},\"comment\":{}}],[\"checkinit\",{\"_index\":18,\"name\":{\"18\":{}},\"comment\":{}}],[\"constructor\",{\"_index\":1,\"name\":{\"1\":{}},\"comment\":{}}],[\"decap\",{\"_index\":15,\"name\":{\"15\":{}},\"comment\":{}}],[\"derivekeypair\",{\"_index\":10,\"name\":{\"10\":{}},\"comment\":{}}],[\"deserializepublickey\",{\"_index\":12,\"name\":{\"12\":{}},\"comment\":{}}],[\"dhkemx25519hkdfsha256\",{\"_index\":0,\"name\":{\"0\":{}},\"comment\":{}}],[\"encap\",{\"_index\":14,\"name\":{\"14\":{}},\"comment\":{}}],[\"encsize\",{\"_index\":4,\"name\":{\"4\":{}},\"comment\":{}}],[\"generatekeypair\",{\"_index\":9,\"name\":{\"9\":{}},\"comment\":{}}],[\"id\",{\"_index\":2,\"name\":{\"2\":{}},\"comment\":{}}],[\"importkey\",{\"_index\":13,\"name\":{\"13\":{}},\"comment\":{}}],[\"init\",{\"_index\":16,\"name\":{\"16\":{}},\"comment\":{}}],[\"privatekeysize\",{\"_index\":6,\"name\":{\"6\":{}},\"comment\":{}}],[\"publickeysize\",{\"_index\":5,\"name\":{\"5\":{}},\"comment\":{}}],[\"secretsize\",{\"_index\":3,\"name\":{\"3\":{}},\"comment\":{}}],[\"serializepublickey\",{\"_index\":11,\"name\":{\"11\":{}},\"comment\":{}}]],\"pipeline\":[]}}"); \ No newline at end of file diff --git a/dhkem-x25519/docs/classes/DhkemX25519HkdfSha256.html b/dhkem-x25519/docs/classes/DhkemX25519HkdfSha256.html index ab2944688..968ce5d48 100644 --- a/dhkem-x25519/docs/classes/DhkemX25519HkdfSha256.html +++ b/dhkem-x25519/docs/classes/DhkemX25519HkdfSha256.html @@ -33,7 +33,7 @@

    Hierarchy

    • DhkemX25519HkdfSha256
    +
  • Defined in src/kems/dhkemX25519.ts:26
    • @@ -76,7 +76,7 @@

    constructorReturns DhkemX25519HkdfSha256

    +
  • Defined in src/kems/dhkemX25519.ts:33

    • Properties

    @@ -84,49 +84,49 @@

    Protected_api: SubtleCrypto = undefined

    +
  • Defined in src/algorithm.ts:4

    • Protected _kdf

    _kdf: KdfInterface
    +
  • Defined in src/kems/dhkem.ts:44

    • Protected _prim

    _prim: KemPrimitives
    +
  • Defined in src/kems/dhkem.ts:43

    • Readonly encSize

    encSize: number = 32
    +
  • Defined in src/kems/dhkemX25519.ts:29

    • Readonly id

    id: KemId = KemId.DhkemX25519HkdfSha256
    +
  • Defined in src/kems/dhkemX25519.ts:27

    • Readonly privateKeySize

    privateKeySize: number = 32
    +
  • Defined in src/kems/dhkemX25519.ts:31

    • Readonly publicKeySize

    publicKeySize: number = 32
    +
  • Defined in src/kems/dhkemX25519.ts:30

    • Readonly secretSize

    secretSize: number = 32
    +
  • Defined in src/kems/dhkemX25519.ts:28

    • Methods

    @@ -137,7 +137,7 @@

    ProtectedReturns void

    +
  • Defined in src/algorithm.ts:8

    • decap

      @@ -151,7 +151,7 @@
      params: Returns Promise<ArrayBuffer>
    +
  • Defined in src/kems/dhkem.ts:159

    • deriveKeyPair

      @@ -165,7 +165,7 @@
      ikm: Returns Promise<CryptoKeyPair>
    +
  • Defined in src/kems/dhkem.ts:61

    • deserializePublicKey

      @@ -179,7 +179,7 @@
      key: Returns Promise<CryptoKey>
    +
  • Defined in src/kems/dhkem.ts:82

    • encap

      @@ -193,7 +193,7 @@
      params: Returns Promise<{
          enc: ArrayBuffer;
          sharedSecret: ArrayBuffer;
      }>
    +
  • Defined in src/kems/dhkem.ts:104

    • generateKeyPair

    +
  • Defined in src/kems/dhkem.ts:52

    • importKey

      @@ -220,7 +220,7 @@
      isPublic: Returns Promise<CryptoKey>
    +
  • Defined in src/kems/dhkem.ts:91

    • init

    +
  • Defined in src/algorithm.ts:20

    • serializePublicKey

      @@ -248,7 +248,7 @@
      key: Returns Promise<ArrayBuffer>
    +
  • Defined in src/kems/dhkem.ts:73
    • diff --git a/dhkem-x25519/src/hpke-core.js b/dhkem-x25519/src/hpke-core.js index 7f029bb07..997fab9f0 100644 --- a/dhkem-x25519/src/hpke-core.js +++ b/dhkem-x25519/src/hpke-core.js @@ -1 +1 @@ -var x={Base:0,Psk:1,Auth:2,AuthPsk:3},ve={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},h=ve,Ae={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},g=Ae,Se={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},y=Se;var c=new Uint8Array(0);var f=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},l=class extends f{},ce=class extends f{},D=class extends f{},v=class extends f{},C=class extends f{},M=class extends f{},N=class extends f{},B=class extends f{},G=class extends f{},R=class extends f{},Y=class extends f{},m=class extends f{};var Ke=new Uint8Array([115,101,99]),A=class{constructor(e,t,r){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=r}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new l("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Ke,new Uint8Array(e),t)}catch(r){throw new N(r)}}_emitError(){return new Promise((e,t)=>{t(new m("Not available"))})}},F=class extends A{},q=class extends A{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}};var W=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},b=class extends W{constructor(){super()}init(e){this._api=e}},X=class extends W{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:c})}init(e,t){this._api=e,this._suiteId=t}};var he=["encrypt","decrypt"];var $=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.encrypt(n,this._key,t)}async open(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.decrypt(n,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,he)}},J=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}},Z=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}};var Q=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new m("createEncryptionContext() is not supported on ExportOnly")}};var le=new Uint8Array([72,80,75,69,45,118,49]),O=class extends X{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let r=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return r.set(le,0),r.set(this._suiteId,7),r.set(e,7+this._suiteId.byteLength),r.set(t,7+this._suiteId.byteLength+e.byteLength),r}buildLabeledInfo(e,t,r){let n=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(new Uint8Array([0,r]),0),n.set(le,2),n.set(this._suiteId,9),n.set(e,9+this._suiteId.byteLength),n.set(t,9+this._suiteId.byteLength+e.byteLength),n}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new l("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,t)}async expand(e,t,r){this.checkInit();let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),a=new ArrayBuffer(r),o=new Uint8Array(a),s=c,u=new Uint8Array(t),w=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let _=new Uint8Array(this.hashSize+u.length+1);for(let z=1,d=0;d=s.length?(o.set(s,d),d+=s.length):(o.set(s.slice(0,o.length-d),d),d+=o.length-d);return a}async extractAndExpand(e,t,r,n){this.checkInit();let a=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:r},a,n*8)}async labeledExtract(e,t,r){return await this.extract(e,this.buildLabeledIkm(t,r))}async labeledExpand(e,t,r,n){return await this.expand(e,this.buildLabeledInfo(t,r,n),n)}},S=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},K=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},E=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ee={},fe=Ie(globalThis,Ee);function Ie(i,e){return new Proxy(i,{get(t,r,n){return r in e?e[r]:i[r]},set(t,r,n){return r in e&&delete e[r],i[r]=n,!0},deleteProperty(t,r){let n=!1;return r in e&&(delete e[r],n=!0),r in i&&(delete i[r],n=!0),n},ownKeys(t){let r=Reflect.ownKeys(i),n=Reflect.ownKeys(e),a=new Set(n);return[...r.filter(o=>!a.has(o)),...n]},defineProperty(t,r,n){return r in e&&delete e[r],Reflect.defineProperty(i,r,n),!0},getOwnPropertyDescriptor(t,r){return r in e?Reflect.getOwnPropertyDescriptor(e,r):Reflect.getOwnPropertyDescriptor(i,r)},has(t,r){return r in e||r in i}})}var de=()=>typeof fe<"u",ye=()=>typeof caches<"u";var H=i=>typeof i=="object"&&i!==null&&typeof i.privateKey=="object"&&typeof i.publicKey=="object";function p(i,e){if(e<=0)throw new Error("i2Osp: too small size");if(i>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let r=0;r>8;return t}function be(i,e){if(i.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(i.byteLength);for(let r=0;rNumber.MAX_SAFE_INTEGER)throw new R("Message limit reached");e.seq+=1}};var V=class extends I{async open(e,t=c){let r;try{r=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(n){throw new G(n)}return this.incrementSeq(this._ctx),r}};var ee=class extends I{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}async seal(e,t=c){let r;try{r=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(n){throw new B(n)}return this.incrementSeq(this._ctx),r}};async function te(){if((de()||ye())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:i}=await import("crypto");return i.subtle}catch{throw new m("Web Cryptograph API not supported")}}var we=new Uint8Array([75,69,77,0,0]),Ue=new Uint8Array([101,97,101,95,112,114,107]),Oe=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),L=class extends b{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}init(e){super.init(e);let t=new Uint8Array(we);t.set(p(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new m(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new l("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new Y(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new D(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new v(t)}}async importKey(e,t,r=!0){await this._setup();try{return await this._prim.importKey(e,t,r)}catch(n){throw new v(n)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,r=await this._prim.serializePublicKey(t.publicKey),n=await this._prim.serializePublicKey(e.recipientPublicKey),a;if(e.senderKey===void 0)a=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let u=H(e.senderKey)?e.senderKey.privateKey:e.senderKey,w=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),_=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));a=j(w,_)}let o;if(e.senderKey===void 0)o=j(new Uint8Array(r),new Uint8Array(n));else{let u=H(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),w=await this._prim.serializePublicKey(u);o=pe(new Uint8Array(r),new Uint8Array(n),new Uint8Array(w))}let s=await this._generateSharedSecret(a,o);return{enc:r,sharedSecret:s}}catch(t){throw new C(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(r){throw new v(r)}try{let r=H(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=H(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),a=await this._prim.serializePublicKey(n),o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(r,t));else{let u=new Uint8Array(await this._prim.dh(r,t)),w=new Uint8Array(await this._prim.dh(r,e.senderPublicKey));o=j(u,w)}let s;if(e.senderPublicKey===void 0)s=j(new Uint8Array(e.enc),new Uint8Array(a));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);s=new Uint8Array(e.enc.byteLength+a.byteLength+u.byteLength),s.set(new Uint8Array(e.enc),0),s.set(new Uint8Array(a),e.enc.byteLength),s.set(new Uint8Array(u),e.enc.byteLength+a.byteLength)}return await this._generateSharedSecret(o,s)}catch(r){throw new M(r)}}async _setup(){if(this._api!==void 0)return;let e=await te(),t=new Uint8Array(we);t.set(p(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let r=this._kdf.buildLabeledIkm(Ue,e),n=this._kdf.buildLabeledInfo(Oe,t,this.secretSize);return await this._kdf.extractAndExpand(c,r,n,this.secretSize)}};var T=["deriveBits"],_e=new Uint8Array([100,107,112,95,112,114,107]),Kt=new Uint8Array([115,107]);var re=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var He=new Uint8Array([99,97,110,100,105,100,97,116,101]),je=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Te=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ze=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),De=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Ce=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Me=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),U=class extends b{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case h.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=je,this._bitmask=255,this._pkcs8AlgId=De;break;case h.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Te,this._bitmask=255,this._pkcs8AlgId=Ce;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ze,this._bitmask=1,this._pkcs8AlgId=Me;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,r){if(this.checkInit(),e==="raw")return await this._importRawKey(t,r);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,r)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let r=new Uint8Array(e),n=new Uint8Array(this._pkcs8AlgId.length+r.length);return n.set(this._pkcs8AlgId,0),n.set(r,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",n,this._alg,!0,T)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,T)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,T)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(c,_e,new Uint8Array(e)),r=new re(this._nSk);for(let o=0;r.isZero()||!r.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(t,He,p(o,1),this._nSk));s[0]=s[0]&this._bitmask,r.set(s)}let n=new Uint8Array(this._pkcs8AlgId.length+r.val().length);n.set(this._pkcs8AlgId,0),n.set(r.val(),this._pkcs8AlgId.length);let a=await this._api.importKey("pkcs8",n,this._alg,!0,T);return r.reset(),{privateKey:a,publicKey:await this.derivePublicKey(a)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var ie=class extends L{constructor(){let e=new S,t=new U(h.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},ne=class extends L{constructor(){let e=new K,t=new U(h.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},ae=class extends L{constructor(){let e=new E,t=new U(h.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ne=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Be=new Uint8Array([101,120,112]),Ge=new Uint8Array([105,110,102,111,95,104,97,115,104]),Re=new Uint8Array([107,101,121]),Ye=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Fe=new Uint8Array([115,101,99,114,101,116]),qe=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),se=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case h.DhkemP256HkdfSha256:this._kem=new ie;break;case h.DhkemP384HkdfSha384:this._kem=new ne;break;case h.DhkemP521HkdfSha512:this._kem=new ae;break;default:throw new l(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case g.HkdfSha256:this._kdf=new S;break;case g.HkdfSha384:this._kdf=new K;break;default:this._kdf=new E;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case y.Aes128Gcm:this._aead=new J;break;case y.Aes256Gcm:this._aead=new Z;break;case y.ExportOnly:this._aead=new Q;break;default:throw new l(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(qe),this._suiteId.set(p(this._kem.id,2),4),this._suiteId.set(p(this._kdf.id,2),6),this._suiteId.set(p(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,r=!0){return await this._setup(),await this._kem.importKey(e,t,r)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),r;return e.psk!==void 0?r=e.senderKey!==void 0?x.AuthPsk:x.Psk:r=e.senderKey!==void 0?x.Auth:x.Base,await this._keyScheduleS(r,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),r;return e.psk!==void 0?r=e.senderPublicKey!==void 0?x.AuthPsk:x.Psk:r=e.senderPublicKey!==void 0?x.Auth:x.Base,await this._keyScheduleR(r,t,e)}async seal(e,t,r=c){let n=await this.createSenderContext(e);return{ct:await n.seal(t,r),enc:n.enc}}async open(e,t,r=c){return await(await this.createRecipientContext(e)).open(t,r)}async _setup(){if(this._api!==void 0)return;let e=await te();this._kem.init(e),this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,r){let n=r.psk===void 0?c:new Uint8Array(r.psk.id),a=await this._kdf.labeledExtract(c,Ye,n),o=r.info===void 0?c:new Uint8Array(r.info),s=await this._kdf.labeledExtract(c,Ge,o),u=new Uint8Array(1+a.byteLength+s.byteLength);u.set(new Uint8Array([e]),0),u.set(new Uint8Array(a),1),u.set(new Uint8Array(s),1+a.byteLength);let w=r.psk===void 0?c:new Uint8Array(r.psk.key),_=this._kdf.buildLabeledIkm(Fe,w),z=this._kdf.buildLabeledInfo(Be,u,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,_,z,this._kdf.hashSize);if(this._aead.id===y.ExportOnly)return{aead:this._aead,exporterSecret:d};let xe=this._kdf.buildLabeledInfo(Re,u,this._aead.keySize),ge=await this._kdf.extractAndExpand(t,_,xe,this._aead.keySize),ke=this._kdf.buildLabeledInfo(Ne,u,this._aead.nonceSize),Pe=await this._kdf.extractAndExpand(t,_,ke,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:ge,baseNonce:new Uint8Array(Pe),seq:0}}async _keyScheduleS(e,t,r,n){let a=await this._keySchedule(e,t,n);return a.key===void 0?new q(this._api,this._kdf,a.exporterSecret,r):new ee(this._api,this._kdf,a,r)}async _keyScheduleR(e,t,r){let n=await this._keySchedule(e,t,r);return n.key===void 0?new F(this._api,this._kdf,n.exporterSecret):new V(this._api,this._kdf,n)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new l("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new l(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new l("Too long psk.key");if(e.psk.id.byteLength>8192)throw new l("Too long psk.id")}}};var ue=class extends se{};export{y as AeadId,ue as CipherSuite,M as DecapError,Y as DeriveKeyPairError,v as DeserializeError,C as EncapError,N as ExportError,f as HpkeError,l as InvalidParamError,g as KdfId,h as KemId,R as MessageLimitReachedError,m as NotSupportedError,G as OpenError,B as SealError,D as SerializeError,ce as ValidationError}; +var m={Base:0,Psk:1,Auth:2,AuthPsk:3},Pe={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},h=Pe,ve={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},g=ve,Ae={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},y=Ae;var c=new Uint8Array(0);var f=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},l=class extends f{},ce=class extends f{},D=class extends f{},v=class extends f{},C=class extends f{},M=class extends f{},N=class extends f{},B=class extends f{},G=class extends f{},R=class extends f{},Y=class extends f{},_=class extends f{};var Se=new Uint8Array([115,101,99]),A=class{constructor(e,t,r){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=r}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new l("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Se,new Uint8Array(e),t)}catch(r){throw new N(r)}}_emitError(){return new Promise((e,t)=>{t(new _("Not available"))})}},F=class extends A{},q=class extends A{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}};var W=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},b=class extends W{constructor(){super()}init(e){this._api=e}},X=class extends W{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:c})}init(e,t){this._api=e,this._suiteId=t}};var he=["encrypt","decrypt"];var $=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.encrypt(n,this._key,t)}async open(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.decrypt(n,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,he)}},J=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}},Z=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}};var Q=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new _("createEncryptionContext() is not supported on ExportOnly")}};var le=new Uint8Array([72,80,75,69,45,118,49]),O=class extends X{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let r=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return r.set(le,0),r.set(this._suiteId,7),r.set(e,7+this._suiteId.byteLength),r.set(t,7+this._suiteId.byteLength+e.byteLength),r}buildLabeledInfo(e,t,r){let n=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(new Uint8Array([0,r]),0),n.set(le,2),n.set(this._suiteId,9),n.set(e,9+this._suiteId.byteLength),n.set(t,9+this._suiteId.byteLength+e.byteLength),n}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new l("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,t)}async expand(e,t,r){this.checkInit();let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),a=new ArrayBuffer(r),o=new Uint8Array(a),s=c,u=new Uint8Array(t),p=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let w=new Uint8Array(this.hashSize+u.length+1);for(let z=1,d=0;d=s.length?(o.set(s,d),d+=s.length):(o.set(s.slice(0,o.length-d),d),d+=o.length-d);return a}async extractAndExpand(e,t,r,n){this.checkInit();let a=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:r},a,n*8)}async labeledExtract(e,t,r){return await this.extract(e,this.buildLabeledIkm(t,r))}async labeledExpand(e,t,r,n){return await this.expand(e,this.buildLabeledInfo(t,r,n),n)}},S=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},K=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},E=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ke={},fe=Ee(globalThis,Ke);function Ee(i,e){return new Proxy(i,{get(t,r,n){return r in e?e[r]:i[r]},set(t,r,n){return r in e&&delete e[r],i[r]=n,!0},deleteProperty(t,r){let n=!1;return r in e&&(delete e[r],n=!0),r in i&&(delete i[r],n=!0),n},ownKeys(t){let r=Reflect.ownKeys(i),n=Reflect.ownKeys(e),a=new Set(n);return[...r.filter(o=>!a.has(o)),...n]},defineProperty(t,r,n){return r in e&&delete e[r],Reflect.defineProperty(i,r,n),!0},getOwnPropertyDescriptor(t,r){return r in e?Reflect.getOwnPropertyDescriptor(e,r):Reflect.getOwnPropertyDescriptor(i,r)},has(t,r){return r in e||r in i}})}var de=()=>typeof fe<"u",ye=()=>typeof caches<"u";var H=i=>typeof i=="object"&&i!==null&&typeof i.privateKey=="object"&&typeof i.publicKey=="object";function x(i,e){if(e<=0)throw new Error("i2Osp: too small size");if(i>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let r=0;r>8;return t}function be(i,e){if(i.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(i.byteLength);for(let r=0;rNumber.MAX_SAFE_INTEGER)throw new R("Message limit reached");e.seq+=1}};var V=class extends I{async open(e,t=c){let r;try{r=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(n){throw new G(n)}return this.incrementSeq(this._ctx),r}};var ee=class extends I{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}async seal(e,t=c){let r;try{r=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(n){throw new B(n)}return this.incrementSeq(this._ctx),r}};async function te(){if((de()||ye())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:i}=await import("crypto");return i.subtle}catch{throw new _("Web Cryptograph API not supported")}}var Le=new Uint8Array([75,69,77,0,0]),Ue=new Uint8Array([101,97,101,95,112,114,107]),Oe=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),L=class extends b{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new _(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new l("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new Y(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new D(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new v(t)}}async importKey(e,t,r=!0){await this._setup();try{return await this._prim.importKey(e,t,r)}catch(n){throw new v(n)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,r=await this._prim.serializePublicKey(t.publicKey),n=await this._prim.serializePublicKey(e.recipientPublicKey),a;if(e.senderKey===void 0)a=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let u=H(e.senderKey)?e.senderKey.privateKey:e.senderKey,p=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),w=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));a=j(p,w)}let o;if(e.senderKey===void 0)o=j(new Uint8Array(r),new Uint8Array(n));else{let u=H(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),p=await this._prim.serializePublicKey(u);o=pe(new Uint8Array(r),new Uint8Array(n),new Uint8Array(p))}let s=await this._generateSharedSecret(a,o);return{enc:r,sharedSecret:s}}catch(t){throw new C(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(r){throw new v(r)}try{let r=H(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=H(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),a=await this._prim.serializePublicKey(n),o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(r,t));else{let u=new Uint8Array(await this._prim.dh(r,t)),p=new Uint8Array(await this._prim.dh(r,e.senderPublicKey));o=j(u,p)}let s;if(e.senderPublicKey===void 0)s=j(new Uint8Array(e.enc),new Uint8Array(a));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);s=new Uint8Array(e.enc.byteLength+a.byteLength+u.byteLength),s.set(new Uint8Array(e.enc),0),s.set(new Uint8Array(a),e.enc.byteLength),s.set(new Uint8Array(u),e.enc.byteLength+a.byteLength)}return await this._generateSharedSecret(o,s)}catch(r){throw new M(r)}}async _setup(){if(this._api!==void 0)return;let e=await te(),t=new Uint8Array(Le);t.set(x(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let r=this._kdf.buildLabeledIkm(Ue,e),n=this._kdf.buildLabeledInfo(Oe,t,this.secretSize);return await this._kdf.extractAndExpand(c,r,n,this.secretSize)}};var T=["deriveBits"],we=new Uint8Array([100,107,112,95,112,114,107]),Kt=new Uint8Array([115,107]);var re=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var He=new Uint8Array([99,97,110,100,105,100,97,116,101]),je=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Te=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ze=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),De=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Ce=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Me=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),U=class extends b{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case h.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=je,this._bitmask=255,this._pkcs8AlgId=De;break;case h.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Te,this._bitmask=255,this._pkcs8AlgId=Ce;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ze,this._bitmask=1,this._pkcs8AlgId=Me;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,r){if(this.checkInit(),e==="raw")return await this._importRawKey(t,r);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,r)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let r=new Uint8Array(e),n=new Uint8Array(this._pkcs8AlgId.length+r.length);return n.set(this._pkcs8AlgId,0),n.set(r,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",n,this._alg,!0,T)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,T)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,T)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(c,we,new Uint8Array(e)),r=new re(this._nSk);for(let o=0;r.isZero()||!r.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(t,He,x(o,1),this._nSk));s[0]=s[0]&this._bitmask,r.set(s)}let n=new Uint8Array(this._pkcs8AlgId.length+r.val().length);n.set(this._pkcs8AlgId,0),n.set(r.val(),this._pkcs8AlgId.length);let a=await this._api.importKey("pkcs8",n,this._alg,!0,T);return r.reset(),{privateKey:a,publicKey:await this.derivePublicKey(a)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var ie=class extends L{constructor(){let e=new S,t=new U(h.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},ne=class extends L{constructor(){let e=new K,t=new U(h.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},ae=class extends L{constructor(){let e=new E,t=new U(h.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ne=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Be=new Uint8Array([101,120,112]),Ge=new Uint8Array([105,110,102,111,95,104,97,115,104]),Re=new Uint8Array([107,101,121]),Ye=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Fe=new Uint8Array([115,101,99,114,101,116]),qe=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),se=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case h.DhkemP256HkdfSha256:this._kem=new ie;break;case h.DhkemP384HkdfSha384:this._kem=new ne;break;case h.DhkemP521HkdfSha512:this._kem=new ae;break;default:throw new l(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case g.HkdfSha256:this._kdf=new S;break;case g.HkdfSha384:this._kdf=new K;break;default:this._kdf=new E;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case y.Aes128Gcm:this._aead=new J;break;case y.Aes256Gcm:this._aead=new Z;break;case y.ExportOnly:this._aead=new Q;break;default:throw new l(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(qe),this._suiteId.set(x(this._kem.id,2),4),this._suiteId.set(x(this._kdf.id,2),6),this._suiteId.set(x(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,r=!0){return await this._setup(),await this._kem.importKey(e,t,r)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),r;return e.psk!==void 0?r=e.senderKey!==void 0?m.AuthPsk:m.Psk:r=e.senderKey!==void 0?m.Auth:m.Base,await this._keyScheduleS(r,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),r;return e.psk!==void 0?r=e.senderPublicKey!==void 0?m.AuthPsk:m.Psk:r=e.senderPublicKey!==void 0?m.Auth:m.Base,await this._keyScheduleR(r,t,e)}async seal(e,t,r=c){let n=await this.createSenderContext(e);return{ct:await n.seal(t,r),enc:n.enc}}async open(e,t,r=c){return await(await this.createRecipientContext(e)).open(t,r)}async _setup(){if(this._api!==void 0)return;let e=await te();this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,r){let n=r.psk===void 0?c:new Uint8Array(r.psk.id),a=await this._kdf.labeledExtract(c,Ye,n),o=r.info===void 0?c:new Uint8Array(r.info),s=await this._kdf.labeledExtract(c,Ge,o),u=new Uint8Array(1+a.byteLength+s.byteLength);u.set(new Uint8Array([e]),0),u.set(new Uint8Array(a),1),u.set(new Uint8Array(s),1+a.byteLength);let p=r.psk===void 0?c:new Uint8Array(r.psk.key),w=this._kdf.buildLabeledIkm(Fe,p),z=this._kdf.buildLabeledInfo(Be,u,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,w,z,this._kdf.hashSize);if(this._aead.id===y.ExportOnly)return{aead:this._aead,exporterSecret:d};let xe=this._kdf.buildLabeledInfo(Re,u,this._aead.keySize),me=await this._kdf.extractAndExpand(t,w,xe,this._aead.keySize),ge=this._kdf.buildLabeledInfo(Ne,u,this._aead.nonceSize),ke=await this._kdf.extractAndExpand(t,w,ge,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:me,baseNonce:new Uint8Array(ke),seq:0}}async _keyScheduleS(e,t,r,n){let a=await this._keySchedule(e,t,n);return a.key===void 0?new q(this._api,this._kdf,a.exporterSecret,r):new ee(this._api,this._kdf,a,r)}async _keyScheduleR(e,t,r){let n=await this._keySchedule(e,t,r);return n.key===void 0?new F(this._api,this._kdf,n.exporterSecret):new V(this._api,this._kdf,n)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new l("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new l(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new l("Too long psk.key");if(e.psk.id.byteLength>8192)throw new l("Too long psk.id")}}};var ue=class extends se{};export{y as AeadId,ue as CipherSuite,M as DecapError,Y as DeriveKeyPairError,v as DeserializeError,C as EncapError,N as ExportError,f as HpkeError,l as InvalidParamError,g as KdfId,h as KemId,R as MessageLimitReachedError,_ as NotSupportedError,G as OpenError,B as SealError,D as SerializeError,ce as ValidationError}; diff --git a/dhkem-x25519/src/hpke-dhkem-x25519.js b/dhkem-x25519/src/hpke-dhkem-x25519.js index 91dd04499..a70c247f1 100644 --- a/dhkem-x25519/src/hpke-dhkem-x25519.js +++ b/dhkem-x25519/src/hpke-dhkem-x25519.js @@ -1,4 +1,4 @@ -var Ir={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},Ct=Ir,Lr={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},ne=Lr;function oe(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`Wrong positive integer: ${e}`)}function Pr(e){if(typeof e!="boolean")throw new Error(`Expected boolean, not ${e}`)}function De(e,...t){if(!(e instanceof Uint8Array))throw new Error("Expected Uint8Array");if(t.length>0&&!t.includes(e.length))throw new Error(`Expected Uint8Array of length ${t}, not of length=${e.length}`)}function Ur(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");oe(e.outputLen),oe(e.blockLen)}function Hr(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Kr(e,t){De(e);let r=t.outputLen;if(e.lengthe instanceof Uint8Array;var Dt=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),Y=(e,t)=>e<<32-t|e>>>t,Tr=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!Tr)throw new Error("Non little-endian hardware is not supported");var jn=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function ie(e){if(typeof e!="string")throw new Error(`utf8ToBytes expected string, got ${typeof e}`);return new Uint8Array(new TextEncoder().encode(e))}function St(e){if(typeof e=="string"&&(e=ie(e)),!Re(e))throw new Error(`expected Uint8Array, got ${typeof e}`);return e}function qe(...e){let t=new Uint8Array(e.reduce((n,o)=>n+o.length,0)),r=0;return e.forEach(n=>{if(!Re(n))throw new Error("Uint8Array expected");t.set(n,r),r+=n.length}),t}var xt=class{clone(){return this._cloneInto()}};function ft(e){let t=n=>e().update(St(n)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function se(e=32){if(Nt&&typeof Nt.getRandomValues=="function")return Nt.getRandomValues(new Uint8Array(e));throw new Error("crypto.getRandomValues must be defined")}var Rt=class extends xt{constructor(t,r){super(),this.finished=!1,this.destroyed=!1,rt.hash(t);let n=St(r);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let o=this.blockLen,i=new Uint8Array(o);i.set(n.length>o?t.create().update(n).digest():n);for(let c=0;cnew Rt(e,t).update(r).digest();ce.create=(e,t)=>new Rt(e,t);function Or(e,t,r,n){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,r,n);let o=BigInt(32),i=BigInt(4294967295),c=Number(r>>o&i),a=Number(r&i),s=n?4:0,u=n?0:4;e.setUint32(t+s,c,n),e.setUint32(t+u,a,n)}var wt=class extends xt{constructor(t,r,n,o){super(),this.blockLen=t,this.outputLen=r,this.padOffset=n,this.isLE=o,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Dt(this.buffer)}update(t){rt.exists(this);let{view:r,buffer:n,blockLen:o}=this;t=St(t);let i=t.length;for(let c=0;co-c&&(this.process(n,0),c=0);for(let h=c;hf.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;he&t^~e&r,Nr=(e,t,r)=>e&t^e&r^t&r,Dr=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ut=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),lt=new Uint32Array(64),qt=class extends wt{constructor(){super(64,32,8,!1),this.A=ut[0]|0,this.B=ut[1]|0,this.C=ut[2]|0,this.D=ut[3]|0,this.E=ut[4]|0,this.F=ut[5]|0,this.G=ut[6]|0,this.H=ut[7]|0}get(){let{A:t,B:r,C:n,D:o,E:i,F:c,G:a,H:s}=this;return[t,r,n,o,i,c,a,s]}set(t,r,n,o,i,c,a,s){this.A=t|0,this.B=r|0,this.C=n|0,this.D=o|0,this.E=i|0,this.F=c|0,this.G=a|0,this.H=s|0}process(t,r){for(let h=0;h<16;h++,r+=4)lt[h]=t.getUint32(r,!1);for(let h=16;h<64;h++){let b=lt[h-15],A=lt[h-2],I=Y(b,7)^Y(b,18)^b>>>3,L=Y(A,17)^Y(A,19)^A>>>10;lt[h]=L+lt[h-7]+I+lt[h-16]|0}let{A:n,B:o,C:i,D:c,E:a,F:s,G:u,H:f}=this;for(let h=0;h<64;h++){let b=Y(a,6)^Y(a,11)^Y(a,25),A=f+b+Cr(a,s,u)+Dr[h]+lt[h]|0,L=(Y(n,2)^Y(n,13)^Y(n,22))+Nr(n,o,i)|0;f=u,u=s,s=a,a=c+A|0,c=i,i=o,o=n,n=A+L|0}n=n+this.A|0,o=o+this.B|0,i=i+this.C|0,c=c+this.D|0,a=a+this.E|0,s=s+this.F|0,u=u+this.G|0,f=f+this.H|0,this.set(n,o,i,c,a,s,u,f)}roundClean(){lt.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}},ae=class extends qt{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}},ze=ft(()=>new qt),to=ft(()=>new ae);var nt=new Uint8Array(0);var zt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},gt=class extends zt{constructor(){super()}init(t){this._api=t}},Mt=class extends zt{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:nt})}init(t,r){this._api=t,this._suiteId=r}};var ot=class extends Error{constructor(t){let r;t instanceof Error?r=t.message:typeof t=="string"?r=t:r="",super(r),this.name=this.constructor.name}},mt=class extends ot{};var Gt=class extends ot{},Et=class extends ot{},jt=class extends ot{},Ft=class extends ot{};var Zt=class extends ot{},_t=class extends ot{};var Ge=new Uint8Array([72,80,75,69,45,118,49]),ue=class extends Mt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:ne.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(t,r){let n=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+r.byteLength);return n.set(Ge,0),n.set(this._suiteId,7),n.set(t,7+this._suiteId.byteLength),n.set(r,7+this._suiteId.byteLength+t.byteLength),n}buildLabeledInfo(t,r,n){let o=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+r.byteLength);return o.set(new Uint8Array([0,n]),0),o.set(Ge,2),o.set(this._suiteId,9),o.set(t,9+this._suiteId.byteLength),o.set(r,9+this._suiteId.byteLength+t.byteLength),o}async extract(t,r){if(this.checkInit(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new mt("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}async expand(t,r,n){this.checkInit();let o=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),i=new ArrayBuffer(n),c=new Uint8Array(i),a=nt,s=new Uint8Array(r),u=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let f=new Uint8Array(this.hashSize+s.length+1);for(let h=1,b=0;b=a.length?(c.set(a,b),b+=a.length):(c.set(a.slice(0,c.length-b),b),b+=c.length-b);return i}async extractAndExpand(t,r,n,o){this.checkInit();let i=await this._api.importKey("raw",r,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:n},i,o*8)}async labeledExtract(t,r,n){return await this.extract(t,this.buildLabeledIkm(r,n))}async labeledExpand(t,r,n,o){return await this.expand(t,this.buildLabeledInfo(r,n,o),o)}},Vt=class extends ue{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:ne.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}};var $t=class extends Vt{async extract(t,r){if(this.checkInit(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return ce(ze,new Uint8Array(t),new Uint8Array(r));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var Rr={},je=qr(globalThis,Rr);function qr(e,t){return new Proxy(e,{get(r,n,o){return n in t?t[n]:e[n]},set(r,n,o){return n in t&&delete t[n],e[n]=o,!0},deleteProperty(r,n){let o=!1;return n in t&&(delete t[n],o=!0),n in e&&(delete e[n],o=!0),o},ownKeys(r){let n=Reflect.ownKeys(e),o=Reflect.ownKeys(t),i=new Set(o);return[...n.filter(c=>!i.has(c)),...o]},defineProperty(r,n,o){return n in t&&delete t[n],Reflect.defineProperty(e,n,o),!0},getOwnPropertyDescriptor(r,n){return n in t?Reflect.getOwnPropertyDescriptor(t,n):Reflect.getOwnPropertyDescriptor(e,n)},has(r,n){return n in t||n in e}})}var Fe=()=>typeof je<"u",Ze=()=>typeof caches<"u";var vt=e=>typeof e=="object"&&e!==null&&typeof e.privateKey=="object"&&typeof e.publicKey=="object";function le(e,t){if(t<=0)throw new Error("i2Osp: too small size");if(e>=256**t)throw new Error("i2Osp: too large integer");let r=new Uint8Array(t);for(let n=0;n>8;return r}function It(e,t){let r=new Uint8Array(e.length+t.length);return r.set(e,0),r.set(t,e.length),r}function Ve(e,t,r){let n=new Uint8Array(e.length+t.length+r.length);return n.set(e,0),n.set(t,e.length),n.set(r,e.length+t.length),n}function he(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),r=atob(t),n=new Uint8Array(r.length);for(let o=0;o8192)throw new mt("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(t)}catch(r){throw new Zt(r)}}async serializePublicKey(t){await this._setup();try{return await this._prim.serializePublicKey(t)}catch(r){throw new Gt(r)}}async deserializePublicKey(t){await this._setup();try{return await this._prim.deserializePublicKey(t)}catch(r){throw new Et(r)}}async importKey(t,r,n=!0){await this._setup();try{return await this._prim.importKey(t,r,n)}catch(o){throw new Et(o)}}async encap(t){await this._setup();try{let r=t.nonEphemeralKeyPair===void 0?await this.generateKeyPair():t.nonEphemeralKeyPair,n=await this._prim.serializePublicKey(r.publicKey),o=await this._prim.serializePublicKey(t.recipientPublicKey),i;if(t.senderKey===void 0)i=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey));else{let s=vt(t.senderKey)?t.senderKey.privateKey:t.senderKey,u=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey)),f=new Uint8Array(await this._prim.dh(s,t.recipientPublicKey));i=It(u,f)}let c;if(t.senderKey===void 0)c=It(new Uint8Array(n),new Uint8Array(o));else{let s=vt(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),u=await this._prim.serializePublicKey(s);c=Ve(new Uint8Array(n),new Uint8Array(o),new Uint8Array(u))}let a=await this._generateSharedSecret(i,c);return{enc:n,sharedSecret:a}}catch(r){throw new jt(r)}}async decap(t){let r;await this._setup();try{r=await this._prim.deserializePublicKey(t.enc)}catch(n){throw new Et(n)}try{let n=vt(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,o=vt(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),i=await this._prim.serializePublicKey(o),c;if(t.senderPublicKey===void 0)c=new Uint8Array(await this._prim.dh(n,r));else{let s=new Uint8Array(await this._prim.dh(n,r)),u=new Uint8Array(await this._prim.dh(n,t.senderPublicKey));c=It(s,u)}let a;if(t.senderPublicKey===void 0)a=It(new Uint8Array(t.enc),new Uint8Array(i));else{let s=await this._prim.serializePublicKey(t.senderPublicKey);a=new Uint8Array(t.enc.byteLength+i.byteLength+s.byteLength),a.set(new Uint8Array(t.enc),0),a.set(new Uint8Array(i),t.enc.byteLength),a.set(new Uint8Array(s),t.enc.byteLength+i.byteLength)}return await this._generateSharedSecret(c,a)}catch(n){throw new Ft(n)}}async _setup(){if(this._api!==void 0)return;let t=await $e(),r=new Uint8Array(We);r.set(le(this.id,2),3),this._prim.init(t),this._kdf.init(t,r),super.init(t)}async _generateSharedSecret(t,r){let n=this._kdf.buildLabeledIkm(Gr,t),o=this._kdf.buildLabeledInfo(jr,r,this.secretSize);return await this._kdf.extractAndExpand(nt,n,o,this.secretSize)}};var Yt=BigInt(4294967295),de=BigInt(32);function Ye(e,t=!1){return t?{h:Number(e&Yt),l:Number(e>>de&Yt)}:{h:Number(e>>de&Yt)|0,l:Number(e&Yt)|0}}function Fr(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let o=0;oBigInt(e>>>0)<>>0),Vr=(e,t,r)=>e>>>r,$r=(e,t,r)=>e<<32-r|t>>>r,Wr=(e,t,r)=>e>>>r|t<<32-r,Yr=(e,t,r)=>e<<32-r|t>>>r,Xr=(e,t,r)=>e<<64-r|t>>>r-32,Qr=(e,t,r)=>e>>>r-32|t<<64-r,Jr=(e,t)=>t,tn=(e,t)=>e,en=(e,t,r)=>e<>>32-r,rn=(e,t,r)=>t<>>32-r,nn=(e,t,r)=>t<>>64-r,on=(e,t,r)=>e<>>64-r;function sn(e,t,r,n){let o=(t>>>0)+(n>>>0);return{h:e+r+(o/2**32|0)|0,l:o|0}}var cn=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),an=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,fn=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),un=(e,t,r,n,o)=>t+r+n+o+(e/2**32|0)|0,ln=(e,t,r,n,o)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(o>>>0),hn=(e,t,r,n,o,i)=>t+r+n+o+i+(e/2**32|0)|0,dn={fromBig:Ye,split:Fr,toBig:Zr,shrSH:Vr,shrSL:$r,rotrSH:Wr,rotrSL:Yr,rotrBH:Xr,rotrBL:Qr,rotr32H:Jr,rotr32L:tn,rotlSH:en,rotlSL:rn,rotlBH:nn,rotlBL:on,add:sn,add3L:cn,add3H:an,add4L:fn,add4H:un,add5H:hn,add5L:ln},g=dn;var[pn,bn]=g.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),ht=new Uint32Array(80),dt=new Uint32Array(80),Bt=class extends wt{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:t,Al:r,Bh:n,Bl:o,Ch:i,Cl:c,Dh:a,Dl:s,Eh:u,El:f,Fh:h,Fl:b,Gh:A,Gl:I,Hh:L,Hl:v}=this;return[t,r,n,o,i,c,a,s,u,f,h,b,A,I,L,v]}set(t,r,n,o,i,c,a,s,u,f,h,b,A,I,L,v){this.Ah=t|0,this.Al=r|0,this.Bh=n|0,this.Bl=o|0,this.Ch=i|0,this.Cl=c|0,this.Dh=a|0,this.Dl=s|0,this.Eh=u|0,this.El=f|0,this.Fh=h|0,this.Fl=b|0,this.Gh=A|0,this.Gl=I|0,this.Hh=L|0,this.Hl=v|0}process(t,r){for(let d=0;d<16;d++,r+=4)ht[d]=t.getUint32(r),dt[d]=t.getUint32(r+=4);for(let d=16;d<80;d++){let m=ht[d-15]|0,x=dt[d-15]|0,N=g.rotrSH(m,x,1)^g.rotrSH(m,x,8)^g.shrSH(m,x,7),W=g.rotrSL(m,x,1)^g.rotrSL(m,x,8)^g.shrSL(m,x,7),K=ht[d-2]|0,T=dt[d-2]|0,z=g.rotrSH(K,T,19)^g.rotrBH(K,T,61)^g.shrSH(K,T,6),D=g.rotrSL(K,T,19)^g.rotrBL(K,T,61)^g.shrSL(K,T,6),Z=g.add4L(W,D,dt[d-7],dt[d-16]),O=g.add4H(Z,N,z,ht[d-7],ht[d-16]);ht[d]=O|0,dt[d]=Z|0}let{Ah:n,Al:o,Bh:i,Bl:c,Ch:a,Cl:s,Dh:u,Dl:f,Eh:h,El:b,Fh:A,Fl:I,Gh:L,Gl:v,Hh:q,Hl:F}=this;for(let d=0;d<80;d++){let m=g.rotrSH(h,b,14)^g.rotrSH(h,b,18)^g.rotrBH(h,b,41),x=g.rotrSL(h,b,14)^g.rotrSL(h,b,18)^g.rotrBL(h,b,41),N=h&A^~h&L,W=b&I^~b&v,K=g.add5L(F,x,W,bn[d],dt[d]),T=g.add5H(K,q,m,N,pn[d],ht[d]),z=K|0,D=g.rotrSH(n,o,28)^g.rotrBH(n,o,34)^g.rotrBH(n,o,39),Z=g.rotrSL(n,o,28)^g.rotrBL(n,o,34)^g.rotrBL(n,o,39),O=n&i^n&a^i&a,At=o&c^o&s^c&s;q=L|0,F=v|0,L=A|0,v=I|0,A=h|0,I=b|0,{h,l:b}=g.add(u|0,f|0,T|0,z|0),u=a|0,f=s|0,a=i|0,s=c|0,i=n|0,c=o|0;let ct=g.add3L(z,Z,At);n=g.add3H(ct,T,D,O),o=ct|0}({h:n,l:o}=g.add(this.Ah|0,this.Al|0,n|0,o|0)),{h:i,l:c}=g.add(this.Bh|0,this.Bl|0,i|0,c|0),{h:a,l:s}=g.add(this.Ch|0,this.Cl|0,a|0,s|0),{h:u,l:f}=g.add(this.Dh|0,this.Dl|0,u|0,f|0),{h,l:b}=g.add(this.Eh|0,this.El|0,h|0,b|0),{h:A,l:I}=g.add(this.Fh|0,this.Fl|0,A|0,I|0),{h:L,l:v}=g.add(this.Gh|0,this.Gl|0,L|0,v|0),{h:q,l:F}=g.add(this.Hh|0,this.Hl|0,q|0,F|0),this.set(n,o,i,c,a,s,u,f,h,b,A,I,L,v,q,F)}roundClean(){ht.fill(0),dt.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}},pe=class extends Bt{constructor(){super(),this.Ah=-1942145080,this.Al=424955298,this.Bh=1944164710,this.Bl=-1982016298,this.Ch=502970286,this.Cl=855612546,this.Dh=1738396948,this.Dl=1479516111,this.Eh=258812777,this.El=2077511080,this.Fh=2011393907,this.Fl=79989058,this.Gh=1067287976,this.Gl=1780299464,this.Hh=286451373,this.Hl=-1848208735,this.outputLen=28}},be=class extends Bt{constructor(){super(),this.Ah=573645204,this.Al=-64227540,this.Bh=-1621794909,this.Bl=-934517566,this.Ch=596883563,this.Cl=1867755857,this.Dh=-1774684391,this.Dl=1497426621,this.Eh=-1775747358,this.El=-1467023389,this.Fh=-1101128155,this.Fl=1401305490,this.Gh=721525244,this.Gl=746961066,this.Hh=246885852,this.Hl=-2117784414,this.outputLen=32}},ye=class extends Bt{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}},xe=ft(()=>new Bt),So=ft(()=>new pe),vo=ft(()=>new be),Io=ft(()=>new ye);var Po=BigInt(0),yn=BigInt(1),xn=BigInt(2),Xt=e=>e instanceof Uint8Array,wn=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Lt(e){if(!Xt(e))throw new Error("Uint8Array expected");let t="";for(let r=0;rn+o.length,0)),r=0;return e.forEach(n=>{if(!Xt(n))throw new Error("Uint8Array expected");t.set(n,r),r+=n.length}),t}var Je=e=>(xn<typeof e=="bigint",function:e=>typeof e=="function",boolean:e=>typeof e=="boolean",string:e=>typeof e=="string",isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>typeof e=="function"&&Number.isSafeInteger(e.outputLen)};function it(e,t,r={}){let n=(o,i,c)=>{let a=gn[i];if(typeof a!="function")throw new Error(`Invalid validator "${i}", expected function`);let s=e[o];if(!(c&&s===void 0)&&!a(s,e))throw new Error(`Invalid param ${String(o)}=${s} (${typeof s}), expected ${i}`)};for(let[o,i]of Object.entries(t))n(o,i,!1);for(let[o,i]of Object.entries(r))n(o,i,!0);return e}var C=BigInt(0),k=BigInt(1),bt=BigInt(2),En=BigInt(3),me=BigInt(4),tr=BigInt(5),er=BigInt(8),_n=BigInt(9),Bn=BigInt(16);function H(e,t){let r=e%t;return r>=C?r:t+r}function Ee(e,t,r){if(r<=C||t 0");if(r===k)return C;let n=k;for(;t>C;)t&k&&(n=n*e%r),e=e*e%r,t>>=k;return n}function $(e,t,r){let n=e;for(;t-- >C;)n*=n,n%=r;return n}function rr(e,t){if(e===C||t<=C)throw new Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=H(e,t),n=t,o=C,i=k,c=k,a=C;for(;r!==C;){let u=n/r,f=n%r,h=o-c*u,b=i-a*u;n=r,r=f,o=c,i=a,c=h,a=b}if(n!==k)throw new Error("invert: does not exist");return H(o,t)}function An(e){let t=(e-k)/bt,r,n,o;for(r=e-k,n=0;r%bt===C;r/=bt,n++);for(o=bt;o(H(e,t)&k)===k,vn=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function or(e){let t={ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"},r=vn.reduce((n,o)=>(n[o]="function",n),t);return it(e,r)}function In(e,t,r){if(r 0");if(r===C)return e.ONE;if(r===k)return t;let n=e.ONE,o=t;for(;r>C;)r&k&&(n=e.mul(n,o)),o=e.sqr(o),r>>=k;return n}function Ln(e,t){let r=new Array(t.length),n=t.reduce((i,c,a)=>e.is0(c)?i:(r[a]=i,e.mul(i,c)),e.ONE),o=e.inv(n);return t.reduceRight((i,c,a)=>e.is0(c)?i:(r[a]=e.mul(i,r[a]),e.mul(i,c)),o),r}function _e(e,t){let r=t!==void 0?t:e.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function ir(e,t,r=!1,n={}){if(e<=C)throw new Error(`Expected Fp ORDER > 0, got ${e}`);let{nBitLength:o,nByteLength:i}=_e(e,t);if(i>2048)throw new Error("Field lengths over 2048 bytes are not supported");let c=Sn(e),a=Object.freeze({ORDER:e,BITS:o,BYTES:i,MASK:Je(o),ZERO:C,ONE:k,create:s=>H(s,e),isValid:s=>{if(typeof s!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof s}`);return C<=s&&ss===C,isOdd:s=>(s&k)===k,neg:s=>H(-s,e),eql:(s,u)=>s===u,sqr:s=>H(s*s,e),add:(s,u)=>H(s+u,e),sub:(s,u)=>H(s-u,e),mul:(s,u)=>H(s*u,e),pow:(s,u)=>In(a,s,u),div:(s,u)=>H(s*rr(u,e),e),sqrN:s=>s*s,addN:(s,u)=>s+u,subN:(s,u)=>s-u,mulN:(s,u)=>s*u,inv:s=>rr(s,e),sqrt:n.sqrt||(s=>c(a,s)),invertBatch:s=>Ln(a,s),cmov:(s,u,f)=>f?u:s,toBytes:s=>r?pt(s,i):ge(s,i),fromBytes:s=>{if(s.length!==i)throw new Error(`Fp.fromBytes: expected ${i}, got ${s.length}`);return r?J(s):we(s)}});return Object.freeze(a)}function sr(e,t){if(!e.isOdd)throw new Error("Field doesn't have isOdd");let r=e.sqrt(t);return e.isOdd(r)?e.neg(r):r}var Pn=BigInt(0),Be=BigInt(1);function cr(e,t){let r=(o,i)=>{let c=i.negate();return o?c:i},n=o=>{let i=Math.ceil(t/o)+1,c=2**(o-1);return{windows:i,windowSize:c}};return{constTimeNegate:r,unsafeLadder(o,i){let c=e.ZERO,a=o;for(;i>Pn;)i&Be&&(c=c.add(a)),a=a.double(),i>>=Be;return c},precomputeWindow(o,i){let{windows:c,windowSize:a}=n(i),s=[],u=o,f=u;for(let h=0;h>=A,v>s&&(v-=b,c+=Be);let q=L,F=L+Math.abs(v)-1,d=I%2!==0,m=v<0;v===0?f=f.add(r(d,i[q])):u=u.add(r(m,i[F]))}return{p:u,f}},wNAFCached(o,i,c,a){let s=o._WINDOW_SIZE||1,u=i.get(o);return u||(u=this.precomputeWindow(o,s),s!==1&&i.set(o,a(u))),this.wNAF(s,u,c)}}}function ar(e){return or(e.Fp),it(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({..._e(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}var X=BigInt(0),V=BigInt(1),Jt=BigInt(2),Un=BigInt(8),Hn={zip215:!0};function Kn(e){let t=ar(e);return it(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}function te(e){let t=Kn(e),{Fp:r,n,prehash:o,hash:i,randomBytes:c,nByteLength:a,h:s}=t,u=Jt<{try{return{isValid:!0,value:r.sqrt(p*r.inv(l))}}catch{return{isValid:!1,value:X}}}),b=t.adjustScalarBytes||(p=>p),A=t.domain||((p,l,y)=>{if(l.length||y)throw new Error("Contexts/pre-hash are not supported");return p}),I=p=>typeof p=="bigint"&&XI(p)&&I(l)&&pp===X||L(p,u);function q(p,l){if(L(p,l))return p;throw new Error(`Expected valid scalar < ${l}, got ${typeof p} ${p}`)}function F(p){return p===X?p:q(p,n)}let d=new Map;function m(p){if(!(p instanceof x))throw new Error("ExtendedPoint expected")}class x{constructor(l,y,w,E){if(this.ex=l,this.ey=y,this.ez=w,this.et=E,!v(l))throw new Error("x required");if(!v(y))throw new Error("y required");if(!v(w))throw new Error("z required");if(!v(E))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof x)throw new Error("extended point not allowed");let{x:y,y:w}=l||{};if(!v(y)||!v(w))throw new Error("invalid affine point");return new x(y,w,V,f(y*w))}static normalizeZ(l){let y=r.invertBatch(l.map(w=>w.ez));return l.map((w,E)=>w.toAffine(y[E])).map(x.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,d.delete(this)}assertValidity(){let{a:l,d:y}=t;if(this.is0())throw new Error("bad point: ZERO");let{ex:w,ey:E,ez:_,et:S}=this,U=f(w*w),B=f(E*E),P=f(_*_),R=f(P*P),M=f(U*l),Q=f(P*f(M+B)),G=f(R+f(y*f(U*B)));if(Q!==G)throw new Error("bad point: equation left != right (1)");let at=f(w*E),et=f(_*S);if(at!==et)throw new Error("bad point: equation left != right (2)")}equals(l){m(l);let{ex:y,ey:w,ez:E}=this,{ex:_,ey:S,ez:U}=l,B=f(y*U),P=f(_*E),R=f(w*U),M=f(S*E);return B===P&&R===M}is0(){return this.equals(x.ZERO)}negate(){return new x(f(-this.ex),this.ey,this.ez,f(-this.et))}double(){let{a:l}=t,{ex:y,ey:w,ez:E}=this,_=f(y*y),S=f(w*w),U=f(Jt*f(E*E)),B=f(l*_),P=y+w,R=f(f(P*P)-_-S),M=B+S,Q=M-U,G=B-S,at=f(R*Q),et=f(M*G),Tt=f(R*G),Ot=f(Q*M);return new x(at,et,Ot,Tt)}add(l){m(l);let{a:y,d:w}=t,{ex:E,ey:_,ez:S,et:U}=this,{ex:B,ey:P,ez:R,et:M}=l;if(y===BigInt(-1)){let He=f((_-E)*(P+B)),Ke=f((_+E)*(P-B)),re=f(Ke-He);if(re===X)return this.double();let ke=f(S*Jt*M),Te=f(U*Jt*R),Oe=Te+ke,Ce=Ke+He,Ne=Te-ke,Br=f(Oe*re),Ar=f(Ce*Ne),Sr=f(Oe*Ne),vr=f(re*Ce);return new x(Br,Ar,vr,Sr)}let Q=f(E*B),G=f(_*P),at=f(U*w*M),et=f(S*R),Tt=f((E+_)*(B+P)-Q-G),Ot=et-at,Pe=et+at,Ue=f(G-y*Q),gr=f(Tt*Ot),mr=f(Pe*Ue),Er=f(Tt*Ue),_r=f(Ot*Pe);return new x(gr,mr,_r,Er)}subtract(l){return this.add(l.negate())}wNAF(l){return K.wNAFCached(this,d,l,x.normalizeZ)}multiply(l){let{p:y,f:w}=this.wNAF(q(l,n));return x.normalizeZ([y,w])[0]}multiplyUnsafe(l){let y=F(l);return y===X?W:this.equals(W)||y===V?this:this.equals(N)?this.wNAF(y).p:K.unsafeLadder(this,y)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}isTorsionFree(){return K.unsafeLadder(this,n).is0()}toAffine(l){let{ex:y,ey:w,ez:E}=this,_=this.is0();l==null&&(l=_?Un:r.inv(E));let S=f(y*l),U=f(w*l),B=f(E*l);if(_)return{x:X,y:V};if(B!==V)throw new Error("invZ was invalid");return{x:S,y:U}}clearCofactor(){let{h:l}=t;return l===V?this:this.multiplyUnsafe(l)}static fromHex(l,y=!1){let{d:w,a:E}=t,_=r.BYTES;l=j("pointHex",l,_);let S=l.slice(),U=l[_-1];S[_-1]=U&-129;let B=J(S);B===X||(y?q(B,u):q(B,r.ORDER));let P=f(B*B),R=f(P-V),M=f(w*P-E),{isValid:Q,value:G}=h(R,M);if(!Q)throw new Error("Point.fromHex: invalid y coordinate");let at=(G&V)===V,et=(U&128)!==0;if(!y&&G===X&&et)throw new Error("Point.fromHex: x=0 and x_0=1");return et!==at&&(G=f(-G)),x.fromAffine({x:G,y:B})}static fromPrivateKey(l){return D(l).point}toRawBytes(){let{x:l,y}=this.toAffine(),w=pt(y,r.BYTES);return w[w.length-1]|=l&V?128:0,w}toHex(){return Lt(this.toRawBytes())}}x.BASE=new x(t.Gx,t.Gy,V,f(t.Gx*t.Gy)),x.ZERO=new x(X,V,V,X);let{BASE:N,ZERO:W}=x,K=cr(x,a*8);function T(p){return H(p,n)}function z(p){return T(J(p))}function D(p){let l=a;p=j("private key",p,l);let y=j("hashed private key",i(p),2*l),w=b(y.slice(0,l)),E=y.slice(l,2*l),_=z(w),S=N.multiply(_),U=S.toRawBytes();return{head:w,prefix:E,scalar:_,point:S,pointBytes:U}}function Z(p){return D(p).pointBytes}function O(p=new Uint8Array,...l){let y=Qt(...l);return z(i(A(y,j("context",p),!!o)))}function At(p,l,y={}){p=j("message",p),o&&(p=o(p));let{prefix:w,scalar:E,pointBytes:_}=D(l),S=O(y.context,w,p),U=N.multiply(S).toRawBytes(),B=O(y.context,U,_,p),P=T(S+B*E);F(P);let R=Qt(U,pt(P,r.BYTES));return j("result",R,a*2)}let ct=Hn;function Kt(p,l,y,w=ct){let{context:E,zip215:_}=w,S=r.BYTES;p=j("signature",p,2*S),l=j("message",l),o&&(l=o(l));let U=J(p.slice(S,2*S)),B,P,R;try{B=x.fromHex(y,_),P=x.fromHex(p.slice(0,S),_),R=N.multiplyUnsafe(U)}catch{return!1}if(!_&&B.isSmallOrder())return!1;let M=O(E,P.toRawBytes(),B.toRawBytes(),l);return P.add(B.multiplyUnsafe(M)).subtract(R).clearCofactor().equals(x.ZERO)}return N._setWindowSize(8),{CURVE:t,getPublicKey:Z,sign:At,verify:Kt,ExtendedPoint:x,utils:{getExtendedPublicKey:D,randomPrivateKey:()=>c(r.BYTES),precompute(p=8,l=x.BASE){return l._setWindowSize(p),l.multiply(BigInt(3)),l}}}}var Pt=BigInt(0),Ae=BigInt(1);function kn(e){return it(e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...e})}function fr(e){let t=kn(e),{P:r}=t,n=d=>H(d,r),o=t.montgomeryBits,i=Math.ceil(o/8),c=t.nByteLength,a=t.adjustScalarBytes||(d=>d),s=t.powPminus2||(d=>Ee(d,r-BigInt(2),r));function u(d,m,x){let N=n(d*(m-x));return m=n(m-N),x=n(x+N),[m,x]}function f(d){if(typeof d=="bigint"&&Pt<=d&&d=Pt;ct--){let Kt=N>>ct&Ae;Z^=Kt,O=u(Z,K,z),K=O[0],z=O[1],O=u(Z,T,D),T=O[0],D=O[1],Z=Kt;let kt=K+T,p=n(kt*kt),l=K-T,y=n(l*l),w=p-y,E=z+D,_=z-D,S=n(_*kt),U=n(E*l),B=S+U,P=S-U;z=n(B*B),D=n(W*n(P*P)),K=n(p*y),T=n(w*(p+n(h*w)))}O=u(Z,K,z),K=O[0],z=O[1],O=u(Z,T,D),T=O[0],D=O[1];let At=s(T);return n(K*At)}function A(d){return pt(n(d),i)}function I(d){let m=j("u coordinate",d,i);return c===i&&(m[c-1]&=127),J(m)}function L(d){let m=j("scalar",d);if(m.length!==i&&m.length!==c)throw new Error(`Expected ${i} or ${c} bytes, got ${m.length}`);return J(a(m))}function v(d,m){let x=I(m),N=L(d),W=b(x,N);if(W===Pt)throw new Error("Invalid private or public key received");return A(W)}let q=A(t.Gu);function F(d){return v(d,q)}return{scalarMult:v,scalarMultBase:F,getSharedSecret:(d,m)=>v(d,m),getPublicKey:d=>F(d),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:q}}var Ut=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),ur=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752"),ri=BigInt(0),Tn=BigInt(1),Se=BigInt(2),On=BigInt(5),lr=BigInt(10),Cn=BigInt(20),Nn=BigInt(40),hr=BigInt(80);function dr(e){let t=Ut,n=e*e%t*e%t,o=$(n,Se,t)*n%t,i=$(o,Tn,t)*e%t,c=$(i,On,t)*i%t,a=$(c,lr,t)*c%t,s=$(a,Cn,t)*a%t,u=$(s,Nn,t)*s%t,f=$(u,hr,t)*u%t,h=$(f,hr,t)*u%t,b=$(h,lr,t)*c%t;return{pow_p_5_8:$(b,Se,t)*e%t,b2:n}}function pr(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}function Dn(e,t){let r=Ut,n=H(t*t*t,r),o=H(n*n*t,r),i=dr(e*o).pow_p_5_8,c=H(e*n*i,r),a=H(t*c*c,r),s=c,u=H(c*ur,r),f=a===e,h=a===H(-e,r),b=a===H(-e*ur,r);return f&&(c=s),(h||b)&&(c=u),nr(c,r)&&(c=H(-c,r)),{isValid:f||h,value:c}}var st=ir(Ut,void 0,!0),ve={a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),Fp:st,n:BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960"),hash:xe,randomBytes:se,adjustScalarBytes:pr,uvRatio:Dn},br=te(ve);function yr(e,t,r){if(t.length>255)throw new Error("Context is too big");return qe(ie("SigEd25519 no Ed25519 collisions"),new Uint8Array([r?1:0,t.length]),t,e)}var ni=te({...ve,domain:yr}),oi=te({...ve,domain:yr,prehash:xe}),Ie=(()=>fr({P:Ut,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:e=>{let t=Ut,{pow_p_5_8:r,b2:n}=dr(e);return H($(r,BigInt(3),t)*n,t)},adjustScalarBytes:pr,randomBytes:se}))();var Rn=(st.ORDER+BigInt(3))/BigInt(8),ii=st.pow(Se,Rn),si=st.sqrt(st.neg(st.ONE)),ci=(st.ORDER-BigInt(5))/BigInt(8),ai=BigInt(486662);var fi=sr(st,st.neg(BigInt(486664)));var ui=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),li=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),hi=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),di=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");var pi=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var Ht=["deriveBits"],xr=new Uint8Array([100,107,112,95,112,114,107]),wr=new Uint8Array([115,107]);var tt=class{constructor(t,r,n,o=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=r,this.type=n,this.algorithm={name:t},this.usages=o,n==="public"&&(this.usages=[])}};var yt="X25519",ee=class extends gt{constructor(t){super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=32,this._nSk=32}async serializePublicKey(t){return await this._serializePublicKey(t)}async deserializePublicKey(t){return await this._deserializePublicKey(t)}async importKey(t,r,n){if(t==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}async derivePublicKey(t){return await this._derivePublicKey(t)}async generateKeyPair(){let t=br.utils.randomPrivateKey(),r=new tt(yt,t,"private",Ht);return{publicKey:await this.derivePublicKey(r),privateKey:r}}async deriveKeyPair(t){let r=await this._hkdf.labeledExtract(nt,xr,new Uint8Array(t)),n=await this._hkdf.labeledExpand(r,wr,nt,this._nSk),o=new tt(yt,new Uint8Array(n),"private",Ht);return{privateKey:o,publicKey:await this.derivePublicKey(o)}}async dh(t,r){return await this._dh(t,r)}_serializePublicKey(t){return new Promise(r=>{r(t.key.buffer)})}_deserializePublicKey(t){return new Promise((r,n)=>{t.byteLength!==this._nPk?n(new Error("Invalid public key for the ciphersuite")):r(new tt(yt,new Uint8Array(t),"public"))})}_importRawKey(t,r){return new Promise((n,o)=>{r&&t.byteLength!==this._nPk&&o(new Error("Invalid public key for the ciphersuite")),!r&&t.byteLength!==this._nSk&&o(new Error("Invalid private key for the ciphersuite")),n(new tt(yt,new Uint8Array(t),r?"public":"private",r?[]:Ht))})}_importJWK(t,r){return new Promise((n,o)=>{(typeof t.kty>"u"||t.kty!=="OKP")&&o(new Error(`Invalid kty: ${t.kty}`)),(typeof t.crv>"u"||t.crv!=="X25519")&&o(new Error(`Invalid crv: ${t.crv}`)),r?(typeof t.d<"u"&&o(new Error("Invalid key: `d` should not be set")),typeof t.x>"u"&&o(new Error("Invalid key: `x` not found")),n(new tt(yt,he(t.x),"public"))):(typeof t.d!="string"&&o(new Error("Invalid key: `d` not found")),n(new tt(yt,he(t.d),"private",Ht)))})}_derivePublicKey(t){return new Promise(r=>{let n=Ie.getPublicKey(t.key);r(new tt(yt,n,"public"))})}_dh(t,r){return new Promise((n,o)=>{try{n(Ie.getSharedSecret(t.key,r.key).buffer)}catch(i){o(i)}})}};var Le=class extends Wt{constructor(){let t=new $t,r=new ee(t);super(r,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Ct.DhkemX25519HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};export{Le as DhkemX25519HkdfSha256}; +var vr={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},Ct=vr,Ir={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},ne=Ir;function oe(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`Wrong positive integer: ${e}`)}function Lr(e){if(typeof e!="boolean")throw new Error(`Expected boolean, not ${e}`)}function Ne(e,...t){if(!(e instanceof Uint8Array))throw new Error("Expected Uint8Array");if(t.length>0&&!t.includes(e.length))throw new Error(`Expected Uint8Array of length ${t}, not of length=${e.length}`)}function Pr(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");oe(e.outputLen),oe(e.blockLen)}function Ur(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Hr(e,t){Ne(e);let r=t.outputLen;if(e.lengthe instanceof Uint8Array;var Dt=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),Y=(e,t)=>e<<32-t|e>>>t,kr=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!kr)throw new Error("Non little-endian hardware is not supported");var jn=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function ie(e){if(typeof e!="string")throw new Error(`utf8ToBytes expected string, got ${typeof e}`);return new Uint8Array(new TextEncoder().encode(e))}function St(e){if(typeof e=="string"&&(e=ie(e)),!De(e))throw new Error(`expected Uint8Array, got ${typeof e}`);return e}function Re(...e){let t=new Uint8Array(e.reduce((n,o)=>n+o.length,0)),r=0;return e.forEach(n=>{if(!De(n))throw new Error("Uint8Array expected");t.set(n,r),r+=n.length}),t}var xt=class{clone(){return this._cloneInto()}};function ft(e){let t=n=>e().update(St(n)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function se(e=32){if(Nt&&typeof Nt.getRandomValues=="function")return Nt.getRandomValues(new Uint8Array(e));throw new Error("crypto.getRandomValues must be defined")}var Rt=class extends xt{constructor(t,r){super(),this.finished=!1,this.destroyed=!1,rt.hash(t);let n=St(r);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let o=this.blockLen,i=new Uint8Array(o);i.set(n.length>o?t.create().update(n).digest():n);for(let c=0;cnew Rt(e,t).update(r).digest();ce.create=(e,t)=>new Rt(e,t);function Tr(e,t,r,n){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,r,n);let o=BigInt(32),i=BigInt(4294967295),c=Number(r>>o&i),a=Number(r&i),s=n?4:0,u=n?0:4;e.setUint32(t+s,c,n),e.setUint32(t+u,a,n)}var wt=class extends xt{constructor(t,r,n,o){super(),this.blockLen=t,this.outputLen=r,this.padOffset=n,this.isLE=o,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Dt(this.buffer)}update(t){rt.exists(this);let{view:r,buffer:n,blockLen:o}=this;t=St(t);let i=t.length;for(let c=0;co-c&&(this.process(n,0),c=0);for(let h=c;hf.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;he&t^~e&r,Cr=(e,t,r)=>e&t^e&r^t&r,Nr=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ut=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),lt=new Uint32Array(64),qt=class extends wt{constructor(){super(64,32,8,!1),this.A=ut[0]|0,this.B=ut[1]|0,this.C=ut[2]|0,this.D=ut[3]|0,this.E=ut[4]|0,this.F=ut[5]|0,this.G=ut[6]|0,this.H=ut[7]|0}get(){let{A:t,B:r,C:n,D:o,E:i,F:c,G:a,H:s}=this;return[t,r,n,o,i,c,a,s]}set(t,r,n,o,i,c,a,s){this.A=t|0,this.B=r|0,this.C=n|0,this.D=o|0,this.E=i|0,this.F=c|0,this.G=a|0,this.H=s|0}process(t,r){for(let h=0;h<16;h++,r+=4)lt[h]=t.getUint32(r,!1);for(let h=16;h<64;h++){let b=lt[h-15],A=lt[h-2],I=Y(b,7)^Y(b,18)^b>>>3,L=Y(A,17)^Y(A,19)^A>>>10;lt[h]=L+lt[h-7]+I+lt[h-16]|0}let{A:n,B:o,C:i,D:c,E:a,F:s,G:u,H:f}=this;for(let h=0;h<64;h++){let b=Y(a,6)^Y(a,11)^Y(a,25),A=f+b+Or(a,s,u)+Nr[h]+lt[h]|0,L=(Y(n,2)^Y(n,13)^Y(n,22))+Cr(n,o,i)|0;f=u,u=s,s=a,a=c+A|0,c=i,i=o,o=n,n=A+L|0}n=n+this.A|0,o=o+this.B|0,i=i+this.C|0,c=c+this.D|0,a=a+this.E|0,s=s+this.F|0,u=u+this.G|0,f=f+this.H|0,this.set(n,o,i,c,a,s,u,f)}roundClean(){lt.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}},ae=class extends qt{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}},qe=ft(()=>new qt),to=ft(()=>new ae);var nt=new Uint8Array(0);var zt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},gt=class extends zt{constructor(){super()}init(t){this._api=t}},Mt=class extends zt{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:nt})}init(t,r){this._api=t,this._suiteId=r}};var ot=class extends Error{constructor(t){let r;t instanceof Error?r=t.message:typeof t=="string"?r=t:r="",super(r),this.name=this.constructor.name}},mt=class extends ot{};var Gt=class extends ot{},Et=class extends ot{},jt=class extends ot{},Ft=class extends ot{};var Zt=class extends ot{},_t=class extends ot{};var Me=new Uint8Array([72,80,75,69,45,118,49]),ue=class extends Mt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:ne.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(t,r){let n=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+r.byteLength);return n.set(Me,0),n.set(this._suiteId,7),n.set(t,7+this._suiteId.byteLength),n.set(r,7+this._suiteId.byteLength+t.byteLength),n}buildLabeledInfo(t,r,n){let o=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+r.byteLength);return o.set(new Uint8Array([0,n]),0),o.set(Me,2),o.set(this._suiteId,9),o.set(t,9+this._suiteId.byteLength),o.set(r,9+this._suiteId.byteLength+t.byteLength),o}async extract(t,r){if(this.checkInit(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new mt("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}async expand(t,r,n){this.checkInit();let o=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),i=new ArrayBuffer(n),c=new Uint8Array(i),a=nt,s=new Uint8Array(r),u=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let f=new Uint8Array(this.hashSize+s.length+1);for(let h=1,b=0;b=a.length?(c.set(a,b),b+=a.length):(c.set(a.slice(0,c.length-b),b),b+=c.length-b);return i}async extractAndExpand(t,r,n,o){this.checkInit();let i=await this._api.importKey("raw",r,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:n},i,o*8)}async labeledExtract(t,r,n){return await this.extract(t,this.buildLabeledIkm(r,n))}async labeledExpand(t,r,n,o){return await this.expand(t,this.buildLabeledInfo(r,n,o),o)}},Vt=class extends ue{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:ne.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}};var $t=class extends Vt{async extract(t,r){if(this.checkInit(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return ce(qe,new Uint8Array(t),new Uint8Array(r));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var Dr={},Ge=Rr(globalThis,Dr);function Rr(e,t){return new Proxy(e,{get(r,n,o){return n in t?t[n]:e[n]},set(r,n,o){return n in t&&delete t[n],e[n]=o,!0},deleteProperty(r,n){let o=!1;return n in t&&(delete t[n],o=!0),n in e&&(delete e[n],o=!0),o},ownKeys(r){let n=Reflect.ownKeys(e),o=Reflect.ownKeys(t),i=new Set(o);return[...n.filter(c=>!i.has(c)),...o]},defineProperty(r,n,o){return n in t&&delete t[n],Reflect.defineProperty(e,n,o),!0},getOwnPropertyDescriptor(r,n){return n in t?Reflect.getOwnPropertyDescriptor(t,n):Reflect.getOwnPropertyDescriptor(e,n)},has(r,n){return n in t||n in e}})}var je=()=>typeof Ge<"u",Fe=()=>typeof caches<"u";var vt=e=>typeof e=="object"&&e!==null&&typeof e.privateKey=="object"&&typeof e.publicKey=="object";function Ze(e,t){if(t<=0)throw new Error("i2Osp: too small size");if(e>=256**t)throw new Error("i2Osp: too large integer");let r=new Uint8Array(t);for(let n=0;n>8;return r}function It(e,t){let r=new Uint8Array(e.length+t.length);return r.set(e,0),r.set(t,e.length),r}function Ve(e,t,r){let n=new Uint8Array(e.length+t.length+r.length);return n.set(e,0),n.set(t,e.length),n.set(r,e.length+t.length),n}function le(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),r=atob(t),n=new Uint8Array(r.length);for(let o=0;o8192)throw new mt("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(t)}catch(r){throw new Zt(r)}}async serializePublicKey(t){await this._setup();try{return await this._prim.serializePublicKey(t)}catch(r){throw new Gt(r)}}async deserializePublicKey(t){await this._setup();try{return await this._prim.deserializePublicKey(t)}catch(r){throw new Et(r)}}async importKey(t,r,n=!0){await this._setup();try{return await this._prim.importKey(t,r,n)}catch(o){throw new Et(o)}}async encap(t){await this._setup();try{let r=t.nonEphemeralKeyPair===void 0?await this.generateKeyPair():t.nonEphemeralKeyPair,n=await this._prim.serializePublicKey(r.publicKey),o=await this._prim.serializePublicKey(t.recipientPublicKey),i;if(t.senderKey===void 0)i=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey));else{let s=vt(t.senderKey)?t.senderKey.privateKey:t.senderKey,u=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey)),f=new Uint8Array(await this._prim.dh(s,t.recipientPublicKey));i=It(u,f)}let c;if(t.senderKey===void 0)c=It(new Uint8Array(n),new Uint8Array(o));else{let s=vt(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),u=await this._prim.serializePublicKey(s);c=Ve(new Uint8Array(n),new Uint8Array(o),new Uint8Array(u))}let a=await this._generateSharedSecret(i,c);return{enc:n,sharedSecret:a}}catch(r){throw new jt(r)}}async decap(t){let r;await this._setup();try{r=await this._prim.deserializePublicKey(t.enc)}catch(n){throw new Et(n)}try{let n=vt(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,o=vt(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),i=await this._prim.serializePublicKey(o),c;if(t.senderPublicKey===void 0)c=new Uint8Array(await this._prim.dh(n,r));else{let s=new Uint8Array(await this._prim.dh(n,r)),u=new Uint8Array(await this._prim.dh(n,t.senderPublicKey));c=It(s,u)}let a;if(t.senderPublicKey===void 0)a=It(new Uint8Array(t.enc),new Uint8Array(i));else{let s=await this._prim.serializePublicKey(t.senderPublicKey);a=new Uint8Array(t.enc.byteLength+i.byteLength+s.byteLength),a.set(new Uint8Array(t.enc),0),a.set(new Uint8Array(i),t.enc.byteLength),a.set(new Uint8Array(s),t.enc.byteLength+i.byteLength)}return await this._generateSharedSecret(c,a)}catch(n){throw new Ft(n)}}async _setup(){if(this._api!==void 0)return;let t=await $e(),r=new Uint8Array(Mr);r.set(Ze(this.id,2),3),this._prim.init(t),this._kdf.init(t,r),super.init(t)}async _generateSharedSecret(t,r){let n=this._kdf.buildLabeledIkm(Gr,t),o=this._kdf.buildLabeledInfo(jr,r,this.secretSize);return await this._kdf.extractAndExpand(nt,n,o,this.secretSize)}};var Yt=BigInt(4294967295),he=BigInt(32);function We(e,t=!1){return t?{h:Number(e&Yt),l:Number(e>>he&Yt)}:{h:Number(e>>he&Yt)|0,l:Number(e&Yt)|0}}function Fr(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let o=0;oBigInt(e>>>0)<>>0),Vr=(e,t,r)=>e>>>r,$r=(e,t,r)=>e<<32-r|t>>>r,Wr=(e,t,r)=>e>>>r|t<<32-r,Yr=(e,t,r)=>e<<32-r|t>>>r,Xr=(e,t,r)=>e<<64-r|t>>>r-32,Qr=(e,t,r)=>e>>>r-32|t<<64-r,Jr=(e,t)=>t,tn=(e,t)=>e,en=(e,t,r)=>e<>>32-r,rn=(e,t,r)=>t<>>32-r,nn=(e,t,r)=>t<>>64-r,on=(e,t,r)=>e<>>64-r;function sn(e,t,r,n){let o=(t>>>0)+(n>>>0);return{h:e+r+(o/2**32|0)|0,l:o|0}}var cn=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),an=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,fn=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),un=(e,t,r,n,o)=>t+r+n+o+(e/2**32|0)|0,ln=(e,t,r,n,o)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(o>>>0),hn=(e,t,r,n,o,i)=>t+r+n+o+i+(e/2**32|0)|0,dn={fromBig:We,split:Fr,toBig:Zr,shrSH:Vr,shrSL:$r,rotrSH:Wr,rotrSL:Yr,rotrBH:Xr,rotrBL:Qr,rotr32H:Jr,rotr32L:tn,rotlSH:en,rotlSL:rn,rotlBH:nn,rotlBL:on,add:sn,add3L:cn,add3H:an,add4L:fn,add4H:un,add5H:hn,add5L:ln},g=dn;var[pn,bn]=g.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),ht=new Uint32Array(80),dt=new Uint32Array(80),Bt=class extends wt{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:t,Al:r,Bh:n,Bl:o,Ch:i,Cl:c,Dh:a,Dl:s,Eh:u,El:f,Fh:h,Fl:b,Gh:A,Gl:I,Hh:L,Hl:v}=this;return[t,r,n,o,i,c,a,s,u,f,h,b,A,I,L,v]}set(t,r,n,o,i,c,a,s,u,f,h,b,A,I,L,v){this.Ah=t|0,this.Al=r|0,this.Bh=n|0,this.Bl=o|0,this.Ch=i|0,this.Cl=c|0,this.Dh=a|0,this.Dl=s|0,this.Eh=u|0,this.El=f|0,this.Fh=h|0,this.Fl=b|0,this.Gh=A|0,this.Gl=I|0,this.Hh=L|0,this.Hl=v|0}process(t,r){for(let d=0;d<16;d++,r+=4)ht[d]=t.getUint32(r),dt[d]=t.getUint32(r+=4);for(let d=16;d<80;d++){let m=ht[d-15]|0,x=dt[d-15]|0,N=g.rotrSH(m,x,1)^g.rotrSH(m,x,8)^g.shrSH(m,x,7),W=g.rotrSL(m,x,1)^g.rotrSL(m,x,8)^g.shrSL(m,x,7),K=ht[d-2]|0,T=dt[d-2]|0,z=g.rotrSH(K,T,19)^g.rotrBH(K,T,61)^g.shrSH(K,T,6),D=g.rotrSL(K,T,19)^g.rotrBL(K,T,61)^g.shrSL(K,T,6),Z=g.add4L(W,D,dt[d-7],dt[d-16]),O=g.add4H(Z,N,z,ht[d-7],ht[d-16]);ht[d]=O|0,dt[d]=Z|0}let{Ah:n,Al:o,Bh:i,Bl:c,Ch:a,Cl:s,Dh:u,Dl:f,Eh:h,El:b,Fh:A,Fl:I,Gh:L,Gl:v,Hh:q,Hl:F}=this;for(let d=0;d<80;d++){let m=g.rotrSH(h,b,14)^g.rotrSH(h,b,18)^g.rotrBH(h,b,41),x=g.rotrSL(h,b,14)^g.rotrSL(h,b,18)^g.rotrBL(h,b,41),N=h&A^~h&L,W=b&I^~b&v,K=g.add5L(F,x,W,bn[d],dt[d]),T=g.add5H(K,q,m,N,pn[d],ht[d]),z=K|0,D=g.rotrSH(n,o,28)^g.rotrBH(n,o,34)^g.rotrBH(n,o,39),Z=g.rotrSL(n,o,28)^g.rotrBL(n,o,34)^g.rotrBL(n,o,39),O=n&i^n&a^i&a,At=o&c^o&s^c&s;q=L|0,F=v|0,L=A|0,v=I|0,A=h|0,I=b|0,{h,l:b}=g.add(u|0,f|0,T|0,z|0),u=a|0,f=s|0,a=i|0,s=c|0,i=n|0,c=o|0;let ct=g.add3L(z,Z,At);n=g.add3H(ct,T,D,O),o=ct|0}({h:n,l:o}=g.add(this.Ah|0,this.Al|0,n|0,o|0)),{h:i,l:c}=g.add(this.Bh|0,this.Bl|0,i|0,c|0),{h:a,l:s}=g.add(this.Ch|0,this.Cl|0,a|0,s|0),{h:u,l:f}=g.add(this.Dh|0,this.Dl|0,u|0,f|0),{h,l:b}=g.add(this.Eh|0,this.El|0,h|0,b|0),{h:A,l:I}=g.add(this.Fh|0,this.Fl|0,A|0,I|0),{h:L,l:v}=g.add(this.Gh|0,this.Gl|0,L|0,v|0),{h:q,l:F}=g.add(this.Hh|0,this.Hl|0,q|0,F|0),this.set(n,o,i,c,a,s,u,f,h,b,A,I,L,v,q,F)}roundClean(){ht.fill(0),dt.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}},de=class extends Bt{constructor(){super(),this.Ah=-1942145080,this.Al=424955298,this.Bh=1944164710,this.Bl=-1982016298,this.Ch=502970286,this.Cl=855612546,this.Dh=1738396948,this.Dl=1479516111,this.Eh=258812777,this.El=2077511080,this.Fh=2011393907,this.Fl=79989058,this.Gh=1067287976,this.Gl=1780299464,this.Hh=286451373,this.Hl=-1848208735,this.outputLen=28}},pe=class extends Bt{constructor(){super(),this.Ah=573645204,this.Al=-64227540,this.Bh=-1621794909,this.Bl=-934517566,this.Ch=596883563,this.Cl=1867755857,this.Dh=-1774684391,this.Dl=1497426621,this.Eh=-1775747358,this.El=-1467023389,this.Fh=-1101128155,this.Fl=1401305490,this.Gh=721525244,this.Gl=746961066,this.Hh=246885852,this.Hl=-2117784414,this.outputLen=32}},be=class extends Bt{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}},ye=ft(()=>new Bt),So=ft(()=>new de),vo=ft(()=>new pe),Io=ft(()=>new be);var Po=BigInt(0),yn=BigInt(1),xn=BigInt(2),Xt=e=>e instanceof Uint8Array,wn=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Lt(e){if(!Xt(e))throw new Error("Uint8Array expected");let t="";for(let r=0;rn+o.length,0)),r=0;return e.forEach(n=>{if(!Xt(n))throw new Error("Uint8Array expected");t.set(n,r),r+=n.length}),t}var Qe=e=>(xn<typeof e=="bigint",function:e=>typeof e=="function",boolean:e=>typeof e=="boolean",string:e=>typeof e=="string",isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>typeof e=="function"&&Number.isSafeInteger(e.outputLen)};function it(e,t,r={}){let n=(o,i,c)=>{let a=gn[i];if(typeof a!="function")throw new Error(`Invalid validator "${i}", expected function`);let s=e[o];if(!(c&&s===void 0)&&!a(s,e))throw new Error(`Invalid param ${String(o)}=${s} (${typeof s}), expected ${i}`)};for(let[o,i]of Object.entries(t))n(o,i,!1);for(let[o,i]of Object.entries(r))n(o,i,!0);return e}var C=BigInt(0),k=BigInt(1),bt=BigInt(2),En=BigInt(3),ge=BigInt(4),Je=BigInt(5),tr=BigInt(8),_n=BigInt(9),Bn=BigInt(16);function H(e,t){let r=e%t;return r>=C?r:t+r}function me(e,t,r){if(r<=C||t 0");if(r===k)return C;let n=k;for(;t>C;)t&k&&(n=n*e%r),e=e*e%r,t>>=k;return n}function $(e,t,r){let n=e;for(;t-- >C;)n*=n,n%=r;return n}function er(e,t){if(e===C||t<=C)throw new Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=H(e,t),n=t,o=C,i=k,c=k,a=C;for(;r!==C;){let u=n/r,f=n%r,h=o-c*u,b=i-a*u;n=r,r=f,o=c,i=a,c=h,a=b}if(n!==k)throw new Error("invert: does not exist");return H(o,t)}function An(e){let t=(e-k)/bt,r,n,o;for(r=e-k,n=0;r%bt===C;r/=bt,n++);for(o=bt;o(H(e,t)&k)===k,vn=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function nr(e){let t={ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"},r=vn.reduce((n,o)=>(n[o]="function",n),t);return it(e,r)}function In(e,t,r){if(r 0");if(r===C)return e.ONE;if(r===k)return t;let n=e.ONE,o=t;for(;r>C;)r&k&&(n=e.mul(n,o)),o=e.sqr(o),r>>=k;return n}function Ln(e,t){let r=new Array(t.length),n=t.reduce((i,c,a)=>e.is0(c)?i:(r[a]=i,e.mul(i,c)),e.ONE),o=e.inv(n);return t.reduceRight((i,c,a)=>e.is0(c)?i:(r[a]=e.mul(i,r[a]),e.mul(i,c)),o),r}function Ee(e,t){let r=t!==void 0?t:e.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function or(e,t,r=!1,n={}){if(e<=C)throw new Error(`Expected Fp ORDER > 0, got ${e}`);let{nBitLength:o,nByteLength:i}=Ee(e,t);if(i>2048)throw new Error("Field lengths over 2048 bytes are not supported");let c=Sn(e),a=Object.freeze({ORDER:e,BITS:o,BYTES:i,MASK:Qe(o),ZERO:C,ONE:k,create:s=>H(s,e),isValid:s=>{if(typeof s!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof s}`);return C<=s&&ss===C,isOdd:s=>(s&k)===k,neg:s=>H(-s,e),eql:(s,u)=>s===u,sqr:s=>H(s*s,e),add:(s,u)=>H(s+u,e),sub:(s,u)=>H(s-u,e),mul:(s,u)=>H(s*u,e),pow:(s,u)=>In(a,s,u),div:(s,u)=>H(s*er(u,e),e),sqrN:s=>s*s,addN:(s,u)=>s+u,subN:(s,u)=>s-u,mulN:(s,u)=>s*u,inv:s=>er(s,e),sqrt:n.sqrt||(s=>c(a,s)),invertBatch:s=>Ln(a,s),cmov:(s,u,f)=>f?u:s,toBytes:s=>r?pt(s,i):we(s,i),fromBytes:s=>{if(s.length!==i)throw new Error(`Fp.fromBytes: expected ${i}, got ${s.length}`);return r?J(s):xe(s)}});return Object.freeze(a)}function ir(e,t){if(!e.isOdd)throw new Error("Field doesn't have isOdd");let r=e.sqrt(t);return e.isOdd(r)?e.neg(r):r}var Pn=BigInt(0),_e=BigInt(1);function sr(e,t){let r=(o,i)=>{let c=i.negate();return o?c:i},n=o=>{let i=Math.ceil(t/o)+1,c=2**(o-1);return{windows:i,windowSize:c}};return{constTimeNegate:r,unsafeLadder(o,i){let c=e.ZERO,a=o;for(;i>Pn;)i&_e&&(c=c.add(a)),a=a.double(),i>>=_e;return c},precomputeWindow(o,i){let{windows:c,windowSize:a}=n(i),s=[],u=o,f=u;for(let h=0;h>=A,v>s&&(v-=b,c+=_e);let q=L,F=L+Math.abs(v)-1,d=I%2!==0,m=v<0;v===0?f=f.add(r(d,i[q])):u=u.add(r(m,i[F]))}return{p:u,f}},wNAFCached(o,i,c,a){let s=o._WINDOW_SIZE||1,u=i.get(o);return u||(u=this.precomputeWindow(o,s),s!==1&&i.set(o,a(u))),this.wNAF(s,u,c)}}}function cr(e){return nr(e.Fp),it(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Ee(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}var X=BigInt(0),V=BigInt(1),Jt=BigInt(2),Un=BigInt(8),Hn={zip215:!0};function Kn(e){let t=cr(e);return it(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}function te(e){let t=Kn(e),{Fp:r,n,prehash:o,hash:i,randomBytes:c,nByteLength:a,h:s}=t,u=Jt<{try{return{isValid:!0,value:r.sqrt(p*r.inv(l))}}catch{return{isValid:!1,value:X}}}),b=t.adjustScalarBytes||(p=>p),A=t.domain||((p,l,y)=>{if(l.length||y)throw new Error("Contexts/pre-hash are not supported");return p}),I=p=>typeof p=="bigint"&&XI(p)&&I(l)&&pp===X||L(p,u);function q(p,l){if(L(p,l))return p;throw new Error(`Expected valid scalar < ${l}, got ${typeof p} ${p}`)}function F(p){return p===X?p:q(p,n)}let d=new Map;function m(p){if(!(p instanceof x))throw new Error("ExtendedPoint expected")}class x{constructor(l,y,w,E){if(this.ex=l,this.ey=y,this.ez=w,this.et=E,!v(l))throw new Error("x required");if(!v(y))throw new Error("y required");if(!v(w))throw new Error("z required");if(!v(E))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof x)throw new Error("extended point not allowed");let{x:y,y:w}=l||{};if(!v(y)||!v(w))throw new Error("invalid affine point");return new x(y,w,V,f(y*w))}static normalizeZ(l){let y=r.invertBatch(l.map(w=>w.ez));return l.map((w,E)=>w.toAffine(y[E])).map(x.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,d.delete(this)}assertValidity(){let{a:l,d:y}=t;if(this.is0())throw new Error("bad point: ZERO");let{ex:w,ey:E,ez:_,et:S}=this,U=f(w*w),B=f(E*E),P=f(_*_),R=f(P*P),M=f(U*l),Q=f(P*f(M+B)),G=f(R+f(y*f(U*B)));if(Q!==G)throw new Error("bad point: equation left != right (1)");let at=f(w*E),et=f(_*S);if(at!==et)throw new Error("bad point: equation left != right (2)")}equals(l){m(l);let{ex:y,ey:w,ez:E}=this,{ex:_,ey:S,ez:U}=l,B=f(y*U),P=f(_*E),R=f(w*U),M=f(S*E);return B===P&&R===M}is0(){return this.equals(x.ZERO)}negate(){return new x(f(-this.ex),this.ey,this.ez,f(-this.et))}double(){let{a:l}=t,{ex:y,ey:w,ez:E}=this,_=f(y*y),S=f(w*w),U=f(Jt*f(E*E)),B=f(l*_),P=y+w,R=f(f(P*P)-_-S),M=B+S,Q=M-U,G=B-S,at=f(R*Q),et=f(M*G),Tt=f(R*G),Ot=f(Q*M);return new x(at,et,Ot,Tt)}add(l){m(l);let{a:y,d:w}=t,{ex:E,ey:_,ez:S,et:U}=this,{ex:B,ey:P,ez:R,et:M}=l;if(y===BigInt(-1)){let Ue=f((_-E)*(P+B)),He=f((_+E)*(P-B)),re=f(He-Ue);if(re===X)return this.double();let Ke=f(S*Jt*M),ke=f(U*Jt*R),Te=ke+Ke,Oe=He+Ue,Ce=ke-Ke,_r=f(Te*re),Br=f(Oe*Ce),Ar=f(Te*Ce),Sr=f(re*Oe);return new x(_r,Br,Sr,Ar)}let Q=f(E*B),G=f(_*P),at=f(U*w*M),et=f(S*R),Tt=f((E+_)*(B+P)-Q-G),Ot=et-at,Le=et+at,Pe=f(G-y*Q),wr=f(Tt*Ot),gr=f(Le*Pe),mr=f(Tt*Pe),Er=f(Ot*Le);return new x(wr,gr,Er,mr)}subtract(l){return this.add(l.negate())}wNAF(l){return K.wNAFCached(this,d,l,x.normalizeZ)}multiply(l){let{p:y,f:w}=this.wNAF(q(l,n));return x.normalizeZ([y,w])[0]}multiplyUnsafe(l){let y=F(l);return y===X?W:this.equals(W)||y===V?this:this.equals(N)?this.wNAF(y).p:K.unsafeLadder(this,y)}isSmallOrder(){return this.multiplyUnsafe(s).is0()}isTorsionFree(){return K.unsafeLadder(this,n).is0()}toAffine(l){let{ex:y,ey:w,ez:E}=this,_=this.is0();l==null&&(l=_?Un:r.inv(E));let S=f(y*l),U=f(w*l),B=f(E*l);if(_)return{x:X,y:V};if(B!==V)throw new Error("invZ was invalid");return{x:S,y:U}}clearCofactor(){let{h:l}=t;return l===V?this:this.multiplyUnsafe(l)}static fromHex(l,y=!1){let{d:w,a:E}=t,_=r.BYTES;l=j("pointHex",l,_);let S=l.slice(),U=l[_-1];S[_-1]=U&-129;let B=J(S);B===X||(y?q(B,u):q(B,r.ORDER));let P=f(B*B),R=f(P-V),M=f(w*P-E),{isValid:Q,value:G}=h(R,M);if(!Q)throw new Error("Point.fromHex: invalid y coordinate");let at=(G&V)===V,et=(U&128)!==0;if(!y&&G===X&&et)throw new Error("Point.fromHex: x=0 and x_0=1");return et!==at&&(G=f(-G)),x.fromAffine({x:G,y:B})}static fromPrivateKey(l){return D(l).point}toRawBytes(){let{x:l,y}=this.toAffine(),w=pt(y,r.BYTES);return w[w.length-1]|=l&V?128:0,w}toHex(){return Lt(this.toRawBytes())}}x.BASE=new x(t.Gx,t.Gy,V,f(t.Gx*t.Gy)),x.ZERO=new x(X,V,V,X);let{BASE:N,ZERO:W}=x,K=sr(x,a*8);function T(p){return H(p,n)}function z(p){return T(J(p))}function D(p){let l=a;p=j("private key",p,l);let y=j("hashed private key",i(p),2*l),w=b(y.slice(0,l)),E=y.slice(l,2*l),_=z(w),S=N.multiply(_),U=S.toRawBytes();return{head:w,prefix:E,scalar:_,point:S,pointBytes:U}}function Z(p){return D(p).pointBytes}function O(p=new Uint8Array,...l){let y=Qt(...l);return z(i(A(y,j("context",p),!!o)))}function At(p,l,y={}){p=j("message",p),o&&(p=o(p));let{prefix:w,scalar:E,pointBytes:_}=D(l),S=O(y.context,w,p),U=N.multiply(S).toRawBytes(),B=O(y.context,U,_,p),P=T(S+B*E);F(P);let R=Qt(U,pt(P,r.BYTES));return j("result",R,a*2)}let ct=Hn;function Kt(p,l,y,w=ct){let{context:E,zip215:_}=w,S=r.BYTES;p=j("signature",p,2*S),l=j("message",l),o&&(l=o(l));let U=J(p.slice(S,2*S)),B,P,R;try{B=x.fromHex(y,_),P=x.fromHex(p.slice(0,S),_),R=N.multiplyUnsafe(U)}catch{return!1}if(!_&&B.isSmallOrder())return!1;let M=O(E,P.toRawBytes(),B.toRawBytes(),l);return P.add(B.multiplyUnsafe(M)).subtract(R).clearCofactor().equals(x.ZERO)}return N._setWindowSize(8),{CURVE:t,getPublicKey:Z,sign:At,verify:Kt,ExtendedPoint:x,utils:{getExtendedPublicKey:D,randomPrivateKey:()=>c(r.BYTES),precompute(p=8,l=x.BASE){return l._setWindowSize(p),l.multiply(BigInt(3)),l}}}}var Pt=BigInt(0),Be=BigInt(1);function kn(e){return it(e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...e})}function ar(e){let t=kn(e),{P:r}=t,n=d=>H(d,r),o=t.montgomeryBits,i=Math.ceil(o/8),c=t.nByteLength,a=t.adjustScalarBytes||(d=>d),s=t.powPminus2||(d=>me(d,r-BigInt(2),r));function u(d,m,x){let N=n(d*(m-x));return m=n(m-N),x=n(x+N),[m,x]}function f(d){if(typeof d=="bigint"&&Pt<=d&&d=Pt;ct--){let Kt=N>>ct&Be;Z^=Kt,O=u(Z,K,z),K=O[0],z=O[1],O=u(Z,T,D),T=O[0],D=O[1],Z=Kt;let kt=K+T,p=n(kt*kt),l=K-T,y=n(l*l),w=p-y,E=z+D,_=z-D,S=n(_*kt),U=n(E*l),B=S+U,P=S-U;z=n(B*B),D=n(W*n(P*P)),K=n(p*y),T=n(w*(p+n(h*w)))}O=u(Z,K,z),K=O[0],z=O[1],O=u(Z,T,D),T=O[0],D=O[1];let At=s(T);return n(K*At)}function A(d){return pt(n(d),i)}function I(d){let m=j("u coordinate",d,i);return c===i&&(m[c-1]&=127),J(m)}function L(d){let m=j("scalar",d);if(m.length!==i&&m.length!==c)throw new Error(`Expected ${i} or ${c} bytes, got ${m.length}`);return J(a(m))}function v(d,m){let x=I(m),N=L(d),W=b(x,N);if(W===Pt)throw new Error("Invalid private or public key received");return A(W)}let q=A(t.Gu);function F(d){return v(d,q)}return{scalarMult:v,scalarMultBase:F,getSharedSecret:(d,m)=>v(d,m),getPublicKey:d=>F(d),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:q}}var Ut=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),fr=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752"),ri=BigInt(0),Tn=BigInt(1),Ae=BigInt(2),On=BigInt(5),ur=BigInt(10),Cn=BigInt(20),Nn=BigInt(40),lr=BigInt(80);function hr(e){let t=Ut,n=e*e%t*e%t,o=$(n,Ae,t)*n%t,i=$(o,Tn,t)*e%t,c=$(i,On,t)*i%t,a=$(c,ur,t)*c%t,s=$(a,Cn,t)*a%t,u=$(s,Nn,t)*s%t,f=$(u,lr,t)*u%t,h=$(f,lr,t)*u%t,b=$(h,ur,t)*c%t;return{pow_p_5_8:$(b,Ae,t)*e%t,b2:n}}function dr(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}function Dn(e,t){let r=Ut,n=H(t*t*t,r),o=H(n*n*t,r),i=hr(e*o).pow_p_5_8,c=H(e*n*i,r),a=H(t*c*c,r),s=c,u=H(c*fr,r),f=a===e,h=a===H(-e,r),b=a===H(-e*fr,r);return f&&(c=s),(h||b)&&(c=u),rr(c,r)&&(c=H(-c,r)),{isValid:f||h,value:c}}var st=or(Ut,void 0,!0),Se={a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),Fp:st,n:BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960"),hash:ye,randomBytes:se,adjustScalarBytes:dr,uvRatio:Dn},pr=te(Se);function br(e,t,r){if(t.length>255)throw new Error("Context is too big");return Re(ie("SigEd25519 no Ed25519 collisions"),new Uint8Array([r?1:0,t.length]),t,e)}var ni=te({...Se,domain:br}),oi=te({...Se,domain:br,prehash:ye}),ve=(()=>ar({P:Ut,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:e=>{let t=Ut,{pow_p_5_8:r,b2:n}=hr(e);return H($(r,BigInt(3),t)*n,t)},adjustScalarBytes:dr,randomBytes:se}))();var Rn=(st.ORDER+BigInt(3))/BigInt(8),ii=st.pow(Ae,Rn),si=st.sqrt(st.neg(st.ONE)),ci=(st.ORDER-BigInt(5))/BigInt(8),ai=BigInt(486662);var fi=ir(st,st.neg(BigInt(486664)));var ui=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),li=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),hi=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),di=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");var pi=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var Ht=["deriveBits"],yr=new Uint8Array([100,107,112,95,112,114,107]),xr=new Uint8Array([115,107]);var tt=class{constructor(t,r,n,o=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=r,this.type=n,this.algorithm={name:t},this.usages=o,n==="public"&&(this.usages=[])}};var yt="X25519",ee=class extends gt{constructor(t){super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=32,this._nSk=32}async serializePublicKey(t){return await this._serializePublicKey(t)}async deserializePublicKey(t){return await this._deserializePublicKey(t)}async importKey(t,r,n){if(t==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}async derivePublicKey(t){return await this._derivePublicKey(t)}async generateKeyPair(){let t=pr.utils.randomPrivateKey(),r=new tt(yt,t,"private",Ht);return{publicKey:await this.derivePublicKey(r),privateKey:r}}async deriveKeyPair(t){let r=await this._hkdf.labeledExtract(nt,yr,new Uint8Array(t)),n=await this._hkdf.labeledExpand(r,xr,nt,this._nSk),o=new tt(yt,new Uint8Array(n),"private",Ht);return{privateKey:o,publicKey:await this.derivePublicKey(o)}}async dh(t,r){return await this._dh(t,r)}_serializePublicKey(t){return new Promise(r=>{r(t.key.buffer)})}_deserializePublicKey(t){return new Promise((r,n)=>{t.byteLength!==this._nPk?n(new Error("Invalid public key for the ciphersuite")):r(new tt(yt,new Uint8Array(t),"public"))})}_importRawKey(t,r){return new Promise((n,o)=>{r&&t.byteLength!==this._nPk&&o(new Error("Invalid public key for the ciphersuite")),!r&&t.byteLength!==this._nSk&&o(new Error("Invalid private key for the ciphersuite")),n(new tt(yt,new Uint8Array(t),r?"public":"private",r?[]:Ht))})}_importJWK(t,r){return new Promise((n,o)=>{(typeof t.kty>"u"||t.kty!=="OKP")&&o(new Error(`Invalid kty: ${t.kty}`)),(typeof t.crv>"u"||t.crv!=="X25519")&&o(new Error(`Invalid crv: ${t.crv}`)),r?(typeof t.d<"u"&&o(new Error("Invalid key: `d` should not be set")),typeof t.x>"u"&&o(new Error("Invalid key: `x` not found")),n(new tt(yt,le(t.x),"public"))):(typeof t.d!="string"&&o(new Error("Invalid key: `d` not found")),n(new tt(yt,le(t.d),"private",Ht)))})}_derivePublicKey(t){return new Promise(r=>{let n=ve.getPublicKey(t.key);r(new tt(yt,n,"public"))})}_dh(t,r){return new Promise((n,o)=>{try{n(ve.getSharedSecret(t.key,r.key).buffer)}catch(i){o(i)}})}};var Ie=class extends Wt{constructor(){let t=new $t,r=new ee(t);super(r,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Ct.DhkemX25519HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};export{Ie as DhkemX25519HkdfSha256}; /*! Bundled license information: @noble/hashes/esm/utils.js: diff --git a/dhkem-x448/docs/assets/search.js b/dhkem-x448/docs/assets/search.js index bb7d0b06d..79f341865 100644 --- a/dhkem-x448/docs/assets/search.js +++ b/dhkem-x448/docs/assets/search.js @@ -1 +1 @@ -window.searchData = JSON.parse("{\"rows\":[{\"kind\":128,\"name\":\"DhkemX448HkdfSha512\",\"url\":\"classes/DhkemX448HkdfSha512.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DhkemX448HkdfSha512.html#constructor\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"classes/DhkemX448HkdfSha512.html#id\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"secretSize\",\"url\":\"classes/DhkemX448HkdfSha512.html#secretSize\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"encSize\",\"url\":\"classes/DhkemX448HkdfSha512.html#encSize\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"publicKeySize\",\"url\":\"classes/DhkemX448HkdfSha512.html#publicKeySize\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"privateKeySize\",\"url\":\"classes/DhkemX448HkdfSha512.html#privateKeySize\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"_prim\",\"url\":\"classes/DhkemX448HkdfSha512.html#_prim\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"_kdf\",\"url\":\"classes/DhkemX448HkdfSha512.html#_kdf\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"classes/DhkemX448HkdfSha512.html#init\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/DhkemX448HkdfSha512.html#generateKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/DhkemX448HkdfSha512.html#deriveKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"serializePublicKey\",\"url\":\"classes/DhkemX448HkdfSha512.html#serializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"deserializePublicKey\",\"url\":\"classes/DhkemX448HkdfSha512.html#deserializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/DhkemX448HkdfSha512.html#importKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"encap\",\"url\":\"classes/DhkemX448HkdfSha512.html#encap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"decap\",\"url\":\"classes/DhkemX448HkdfSha512.html#decap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"_api\",\"url\":\"classes/DhkemX448HkdfSha512.html#_api\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"checkInit\",\"url\":\"classes/DhkemX448HkdfSha512.html#checkInit\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"}],\"index\":{\"version\":\"2.3.9\",\"fields\":[\"name\",\"comment\"],\"fieldVectors\":[[\"name/0\",[0,25.903]],[\"comment/0\",[]],[\"name/1\",[1,25.903]],[\"comment/1\",[]],[\"name/2\",[2,25.903]],[\"comment/2\",[]],[\"name/3\",[3,25.903]],[\"comment/3\",[]],[\"name/4\",[4,25.903]],[\"comment/4\",[]],[\"name/5\",[5,25.903]],[\"comment/5\",[]],[\"name/6\",[6,25.903]],[\"comment/6\",[]],[\"name/7\",[7,25.903]],[\"comment/7\",[]],[\"name/8\",[8,25.903]],[\"comment/8\",[]],[\"name/9\",[9,25.903]],[\"comment/9\",[]],[\"name/10\",[10,25.903]],[\"comment/10\",[]],[\"name/11\",[11,25.903]],[\"comment/11\",[]],[\"name/12\",[12,25.903]],[\"comment/12\",[]],[\"name/13\",[13,25.903]],[\"comment/13\",[]],[\"name/14\",[14,25.903]],[\"comment/14\",[]],[\"name/15\",[15,25.903]],[\"comment/15\",[]],[\"name/16\",[16,25.903]],[\"comment/16\",[]],[\"name/17\",[17,25.903]],[\"comment/17\",[]],[\"name/18\",[18,25.903]],[\"comment/18\",[]]],\"invertedIndex\":[[\"_api\",{\"_index\":17,\"name\":{\"17\":{}},\"comment\":{}}],[\"_kdf\",{\"_index\":8,\"name\":{\"8\":{}},\"comment\":{}}],[\"_prim\",{\"_index\":7,\"name\":{\"7\":{}},\"comment\":{}}],[\"checkinit\",{\"_index\":18,\"name\":{\"18\":{}},\"comment\":{}}],[\"constructor\",{\"_index\":1,\"name\":{\"1\":{}},\"comment\":{}}],[\"decap\",{\"_index\":16,\"name\":{\"16\":{}},\"comment\":{}}],[\"derivekeypair\",{\"_index\":11,\"name\":{\"11\":{}},\"comment\":{}}],[\"deserializepublickey\",{\"_index\":13,\"name\":{\"13\":{}},\"comment\":{}}],[\"dhkemx448hkdfsha512\",{\"_index\":0,\"name\":{\"0\":{}},\"comment\":{}}],[\"encap\",{\"_index\":15,\"name\":{\"15\":{}},\"comment\":{}}],[\"encsize\",{\"_index\":4,\"name\":{\"4\":{}},\"comment\":{}}],[\"generatekeypair\",{\"_index\":10,\"name\":{\"10\":{}},\"comment\":{}}],[\"id\",{\"_index\":2,\"name\":{\"2\":{}},\"comment\":{}}],[\"importkey\",{\"_index\":14,\"name\":{\"14\":{}},\"comment\":{}}],[\"init\",{\"_index\":9,\"name\":{\"9\":{}},\"comment\":{}}],[\"privatekeysize\",{\"_index\":6,\"name\":{\"6\":{}},\"comment\":{}}],[\"publickeysize\",{\"_index\":5,\"name\":{\"5\":{}},\"comment\":{}}],[\"secretsize\",{\"_index\":3,\"name\":{\"3\":{}},\"comment\":{}}],[\"serializepublickey\",{\"_index\":12,\"name\":{\"12\":{}},\"comment\":{}}]],\"pipeline\":[]}}"); \ No newline at end of file +window.searchData = JSON.parse("{\"rows\":[{\"kind\":128,\"name\":\"DhkemX448HkdfSha512\",\"url\":\"classes/DhkemX448HkdfSha512.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DhkemX448HkdfSha512.html#constructor\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"classes/DhkemX448HkdfSha512.html#id\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"secretSize\",\"url\":\"classes/DhkemX448HkdfSha512.html#secretSize\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"encSize\",\"url\":\"classes/DhkemX448HkdfSha512.html#encSize\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"publicKeySize\",\"url\":\"classes/DhkemX448HkdfSha512.html#publicKeySize\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"privateKeySize\",\"url\":\"classes/DhkemX448HkdfSha512.html#privateKeySize\",\"classes\":\"\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"_prim\",\"url\":\"classes/DhkemX448HkdfSha512.html#_prim\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"_kdf\",\"url\":\"classes/DhkemX448HkdfSha512.html#_kdf\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/DhkemX448HkdfSha512.html#generateKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/DhkemX448HkdfSha512.html#deriveKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"serializePublicKey\",\"url\":\"classes/DhkemX448HkdfSha512.html#serializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"deserializePublicKey\",\"url\":\"classes/DhkemX448HkdfSha512.html#deserializePublicKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/DhkemX448HkdfSha512.html#importKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"encap\",\"url\":\"classes/DhkemX448HkdfSha512.html#encap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"decap\",\"url\":\"classes/DhkemX448HkdfSha512.html#decap\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"classes/DhkemX448HkdfSha512.html#init\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":1024,\"name\":\"_api\",\"url\":\"classes/DhkemX448HkdfSha512.html#_api\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"},{\"kind\":2048,\"name\":\"checkInit\",\"url\":\"classes/DhkemX448HkdfSha512.html#checkInit\",\"classes\":\"tsd-is-protected tsd-is-inherited\",\"parent\":\"DhkemX448HkdfSha512\"}],\"index\":{\"version\":\"2.3.9\",\"fields\":[\"name\",\"comment\"],\"fieldVectors\":[[\"name/0\",[0,25.903]],[\"comment/0\",[]],[\"name/1\",[1,25.903]],[\"comment/1\",[]],[\"name/2\",[2,25.903]],[\"comment/2\",[]],[\"name/3\",[3,25.903]],[\"comment/3\",[]],[\"name/4\",[4,25.903]],[\"comment/4\",[]],[\"name/5\",[5,25.903]],[\"comment/5\",[]],[\"name/6\",[6,25.903]],[\"comment/6\",[]],[\"name/7\",[7,25.903]],[\"comment/7\",[]],[\"name/8\",[8,25.903]],[\"comment/8\",[]],[\"name/9\",[9,25.903]],[\"comment/9\",[]],[\"name/10\",[10,25.903]],[\"comment/10\",[]],[\"name/11\",[11,25.903]],[\"comment/11\",[]],[\"name/12\",[12,25.903]],[\"comment/12\",[]],[\"name/13\",[13,25.903]],[\"comment/13\",[]],[\"name/14\",[14,25.903]],[\"comment/14\",[]],[\"name/15\",[15,25.903]],[\"comment/15\",[]],[\"name/16\",[16,25.903]],[\"comment/16\",[]],[\"name/17\",[17,25.903]],[\"comment/17\",[]],[\"name/18\",[18,25.903]],[\"comment/18\",[]]],\"invertedIndex\":[[\"_api\",{\"_index\":17,\"name\":{\"17\":{}},\"comment\":{}}],[\"_kdf\",{\"_index\":8,\"name\":{\"8\":{}},\"comment\":{}}],[\"_prim\",{\"_index\":7,\"name\":{\"7\":{}},\"comment\":{}}],[\"checkinit\",{\"_index\":18,\"name\":{\"18\":{}},\"comment\":{}}],[\"constructor\",{\"_index\":1,\"name\":{\"1\":{}},\"comment\":{}}],[\"decap\",{\"_index\":15,\"name\":{\"15\":{}},\"comment\":{}}],[\"derivekeypair\",{\"_index\":10,\"name\":{\"10\":{}},\"comment\":{}}],[\"deserializepublickey\",{\"_index\":12,\"name\":{\"12\":{}},\"comment\":{}}],[\"dhkemx448hkdfsha512\",{\"_index\":0,\"name\":{\"0\":{}},\"comment\":{}}],[\"encap\",{\"_index\":14,\"name\":{\"14\":{}},\"comment\":{}}],[\"encsize\",{\"_index\":4,\"name\":{\"4\":{}},\"comment\":{}}],[\"generatekeypair\",{\"_index\":9,\"name\":{\"9\":{}},\"comment\":{}}],[\"id\",{\"_index\":2,\"name\":{\"2\":{}},\"comment\":{}}],[\"importkey\",{\"_index\":13,\"name\":{\"13\":{}},\"comment\":{}}],[\"init\",{\"_index\":16,\"name\":{\"16\":{}},\"comment\":{}}],[\"privatekeysize\",{\"_index\":6,\"name\":{\"6\":{}},\"comment\":{}}],[\"publickeysize\",{\"_index\":5,\"name\":{\"5\":{}},\"comment\":{}}],[\"secretsize\",{\"_index\":3,\"name\":{\"3\":{}},\"comment\":{}}],[\"serializepublickey\",{\"_index\":11,\"name\":{\"11\":{}},\"comment\":{}}]],\"pipeline\":[]}}"); \ No newline at end of file diff --git a/dhkem-x448/docs/classes/DhkemX448HkdfSha512.html b/dhkem-x448/docs/classes/DhkemX448HkdfSha512.html index 8173625cf..15b5a8b98 100644 --- a/dhkem-x448/docs/classes/DhkemX448HkdfSha512.html +++ b/dhkem-x448/docs/classes/DhkemX448HkdfSha512.html @@ -33,7 +33,7 @@

    Hierarchy

    • DhkemX448HkdfSha512
    +
  • Defined in src/kems/dhkemX448.ts:26
    • @@ -76,7 +76,7 @@

    constructorReturns DhkemX448HkdfSha512

    +
  • Defined in src/kems/dhkemX448.ts:33

    • Properties

    @@ -84,49 +84,49 @@

    Protected_api: SubtleCrypto = undefined

    +
  • Defined in src/algorithm.ts:4

    • Protected _kdf

    _kdf: KdfInterface
    +
  • Defined in src/kems/dhkem.ts:44

    • Protected _prim

    _prim: KemPrimitives
    +
  • Defined in src/kems/dhkem.ts:43

    • Readonly encSize

    encSize: number = 56
    +
  • Defined in src/kems/dhkemX448.ts:29

    • Readonly id

    id: KemId = KemId.DhkemX448HkdfSha512
    +
  • Defined in src/kems/dhkemX448.ts:27

    • Readonly privateKeySize

    privateKeySize: number = 56
    +
  • Defined in src/kems/dhkemX448.ts:31

    • Readonly publicKeySize

    publicKeySize: number = 56
    +
  • Defined in src/kems/dhkemX448.ts:30

    • Readonly secretSize

    secretSize: number = 64
    +
  • Defined in src/kems/dhkemX448.ts:28

    • Methods

    @@ -137,7 +137,7 @@

    ProtectedReturns void

    +
  • Defined in src/algorithm.ts:8

    • decap

      @@ -151,7 +151,7 @@
      params: Returns Promise<ArrayBuffer>
    +
  • Defined in src/kems/dhkem.ts:159

    • deriveKeyPair

      @@ -165,7 +165,7 @@
      ikm: Returns Promise<CryptoKeyPair>
    +
  • Defined in src/kems/dhkem.ts:61

    • deserializePublicKey

      @@ -179,7 +179,7 @@
      key: Returns Promise<CryptoKey>
    +
  • Defined in src/kems/dhkem.ts:82

    • encap

      @@ -193,7 +193,7 @@
      params: Returns Promise<{
          enc: ArrayBuffer;
          sharedSecret: ArrayBuffer;
      }>
    +
  • Defined in src/kems/dhkem.ts:104

    • generateKeyPair

    +
  • Defined in src/kems/dhkem.ts:52

    • importKey

      @@ -220,7 +220,7 @@
      isPublic: Returns Promise<CryptoKey>
    +
  • Defined in src/kems/dhkem.ts:91

    • init

    +
  • Defined in src/algorithm.ts:20

    • serializePublicKey

      @@ -248,7 +248,7 @@
      key: Returns Promise<ArrayBuffer>
    +
  • Defined in src/kems/dhkem.ts:73
    • diff --git a/dhkem-x448/src/hpke-core.js b/dhkem-x448/src/hpke-core.js index 7f029bb07..997fab9f0 100644 --- a/dhkem-x448/src/hpke-core.js +++ b/dhkem-x448/src/hpke-core.js @@ -1 +1 @@ -var x={Base:0,Psk:1,Auth:2,AuthPsk:3},ve={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},h=ve,Ae={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},g=Ae,Se={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},y=Se;var c=new Uint8Array(0);var f=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},l=class extends f{},ce=class extends f{},D=class extends f{},v=class extends f{},C=class extends f{},M=class extends f{},N=class extends f{},B=class extends f{},G=class extends f{},R=class extends f{},Y=class extends f{},m=class extends f{};var Ke=new Uint8Array([115,101,99]),A=class{constructor(e,t,r){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=r}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new l("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Ke,new Uint8Array(e),t)}catch(r){throw new N(r)}}_emitError(){return new Promise((e,t)=>{t(new m("Not available"))})}},F=class extends A{},q=class extends A{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}};var W=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},b=class extends W{constructor(){super()}init(e){this._api=e}},X=class extends W{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:c})}init(e,t){this._api=e,this._suiteId=t}};var he=["encrypt","decrypt"];var $=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.encrypt(n,this._key,t)}async open(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.decrypt(n,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,he)}},J=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}},Z=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}};var Q=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new m("createEncryptionContext() is not supported on ExportOnly")}};var le=new Uint8Array([72,80,75,69,45,118,49]),O=class extends X{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let r=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return r.set(le,0),r.set(this._suiteId,7),r.set(e,7+this._suiteId.byteLength),r.set(t,7+this._suiteId.byteLength+e.byteLength),r}buildLabeledInfo(e,t,r){let n=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(new Uint8Array([0,r]),0),n.set(le,2),n.set(this._suiteId,9),n.set(e,9+this._suiteId.byteLength),n.set(t,9+this._suiteId.byteLength+e.byteLength),n}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new l("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,t)}async expand(e,t,r){this.checkInit();let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),a=new ArrayBuffer(r),o=new Uint8Array(a),s=c,u=new Uint8Array(t),w=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let _=new Uint8Array(this.hashSize+u.length+1);for(let z=1,d=0;d=s.length?(o.set(s,d),d+=s.length):(o.set(s.slice(0,o.length-d),d),d+=o.length-d);return a}async extractAndExpand(e,t,r,n){this.checkInit();let a=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:r},a,n*8)}async labeledExtract(e,t,r){return await this.extract(e,this.buildLabeledIkm(t,r))}async labeledExpand(e,t,r,n){return await this.expand(e,this.buildLabeledInfo(t,r,n),n)}},S=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},K=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},E=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ee={},fe=Ie(globalThis,Ee);function Ie(i,e){return new Proxy(i,{get(t,r,n){return r in e?e[r]:i[r]},set(t,r,n){return r in e&&delete e[r],i[r]=n,!0},deleteProperty(t,r){let n=!1;return r in e&&(delete e[r],n=!0),r in i&&(delete i[r],n=!0),n},ownKeys(t){let r=Reflect.ownKeys(i),n=Reflect.ownKeys(e),a=new Set(n);return[...r.filter(o=>!a.has(o)),...n]},defineProperty(t,r,n){return r in e&&delete e[r],Reflect.defineProperty(i,r,n),!0},getOwnPropertyDescriptor(t,r){return r in e?Reflect.getOwnPropertyDescriptor(e,r):Reflect.getOwnPropertyDescriptor(i,r)},has(t,r){return r in e||r in i}})}var de=()=>typeof fe<"u",ye=()=>typeof caches<"u";var H=i=>typeof i=="object"&&i!==null&&typeof i.privateKey=="object"&&typeof i.publicKey=="object";function p(i,e){if(e<=0)throw new Error("i2Osp: too small size");if(i>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let r=0;r>8;return t}function be(i,e){if(i.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(i.byteLength);for(let r=0;rNumber.MAX_SAFE_INTEGER)throw new R("Message limit reached");e.seq+=1}};var V=class extends I{async open(e,t=c){let r;try{r=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(n){throw new G(n)}return this.incrementSeq(this._ctx),r}};var ee=class extends I{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}async seal(e,t=c){let r;try{r=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(n){throw new B(n)}return this.incrementSeq(this._ctx),r}};async function te(){if((de()||ye())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:i}=await import("crypto");return i.subtle}catch{throw new m("Web Cryptograph API not supported")}}var we=new Uint8Array([75,69,77,0,0]),Ue=new Uint8Array([101,97,101,95,112,114,107]),Oe=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),L=class extends b{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}init(e){super.init(e);let t=new Uint8Array(we);t.set(p(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new m(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new l("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new Y(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new D(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new v(t)}}async importKey(e,t,r=!0){await this._setup();try{return await this._prim.importKey(e,t,r)}catch(n){throw new v(n)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,r=await this._prim.serializePublicKey(t.publicKey),n=await this._prim.serializePublicKey(e.recipientPublicKey),a;if(e.senderKey===void 0)a=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let u=H(e.senderKey)?e.senderKey.privateKey:e.senderKey,w=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),_=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));a=j(w,_)}let o;if(e.senderKey===void 0)o=j(new Uint8Array(r),new Uint8Array(n));else{let u=H(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),w=await this._prim.serializePublicKey(u);o=pe(new Uint8Array(r),new Uint8Array(n),new Uint8Array(w))}let s=await this._generateSharedSecret(a,o);return{enc:r,sharedSecret:s}}catch(t){throw new C(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(r){throw new v(r)}try{let r=H(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=H(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),a=await this._prim.serializePublicKey(n),o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(r,t));else{let u=new Uint8Array(await this._prim.dh(r,t)),w=new Uint8Array(await this._prim.dh(r,e.senderPublicKey));o=j(u,w)}let s;if(e.senderPublicKey===void 0)s=j(new Uint8Array(e.enc),new Uint8Array(a));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);s=new Uint8Array(e.enc.byteLength+a.byteLength+u.byteLength),s.set(new Uint8Array(e.enc),0),s.set(new Uint8Array(a),e.enc.byteLength),s.set(new Uint8Array(u),e.enc.byteLength+a.byteLength)}return await this._generateSharedSecret(o,s)}catch(r){throw new M(r)}}async _setup(){if(this._api!==void 0)return;let e=await te(),t=new Uint8Array(we);t.set(p(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let r=this._kdf.buildLabeledIkm(Ue,e),n=this._kdf.buildLabeledInfo(Oe,t,this.secretSize);return await this._kdf.extractAndExpand(c,r,n,this.secretSize)}};var T=["deriveBits"],_e=new Uint8Array([100,107,112,95,112,114,107]),Kt=new Uint8Array([115,107]);var re=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var He=new Uint8Array([99,97,110,100,105,100,97,116,101]),je=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Te=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ze=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),De=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Ce=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Me=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),U=class extends b{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case h.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=je,this._bitmask=255,this._pkcs8AlgId=De;break;case h.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Te,this._bitmask=255,this._pkcs8AlgId=Ce;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ze,this._bitmask=1,this._pkcs8AlgId=Me;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,r){if(this.checkInit(),e==="raw")return await this._importRawKey(t,r);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,r)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let r=new Uint8Array(e),n=new Uint8Array(this._pkcs8AlgId.length+r.length);return n.set(this._pkcs8AlgId,0),n.set(r,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",n,this._alg,!0,T)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,T)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,T)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(c,_e,new Uint8Array(e)),r=new re(this._nSk);for(let o=0;r.isZero()||!r.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(t,He,p(o,1),this._nSk));s[0]=s[0]&this._bitmask,r.set(s)}let n=new Uint8Array(this._pkcs8AlgId.length+r.val().length);n.set(this._pkcs8AlgId,0),n.set(r.val(),this._pkcs8AlgId.length);let a=await this._api.importKey("pkcs8",n,this._alg,!0,T);return r.reset(),{privateKey:a,publicKey:await this.derivePublicKey(a)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var ie=class extends L{constructor(){let e=new S,t=new U(h.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},ne=class extends L{constructor(){let e=new K,t=new U(h.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},ae=class extends L{constructor(){let e=new E,t=new U(h.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ne=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Be=new Uint8Array([101,120,112]),Ge=new Uint8Array([105,110,102,111,95,104,97,115,104]),Re=new Uint8Array([107,101,121]),Ye=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Fe=new Uint8Array([115,101,99,114,101,116]),qe=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),se=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case h.DhkemP256HkdfSha256:this._kem=new ie;break;case h.DhkemP384HkdfSha384:this._kem=new ne;break;case h.DhkemP521HkdfSha512:this._kem=new ae;break;default:throw new l(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case g.HkdfSha256:this._kdf=new S;break;case g.HkdfSha384:this._kdf=new K;break;default:this._kdf=new E;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case y.Aes128Gcm:this._aead=new J;break;case y.Aes256Gcm:this._aead=new Z;break;case y.ExportOnly:this._aead=new Q;break;default:throw new l(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(qe),this._suiteId.set(p(this._kem.id,2),4),this._suiteId.set(p(this._kdf.id,2),6),this._suiteId.set(p(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,r=!0){return await this._setup(),await this._kem.importKey(e,t,r)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),r;return e.psk!==void 0?r=e.senderKey!==void 0?x.AuthPsk:x.Psk:r=e.senderKey!==void 0?x.Auth:x.Base,await this._keyScheduleS(r,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),r;return e.psk!==void 0?r=e.senderPublicKey!==void 0?x.AuthPsk:x.Psk:r=e.senderPublicKey!==void 0?x.Auth:x.Base,await this._keyScheduleR(r,t,e)}async seal(e,t,r=c){let n=await this.createSenderContext(e);return{ct:await n.seal(t,r),enc:n.enc}}async open(e,t,r=c){return await(await this.createRecipientContext(e)).open(t,r)}async _setup(){if(this._api!==void 0)return;let e=await te();this._kem.init(e),this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,r){let n=r.psk===void 0?c:new Uint8Array(r.psk.id),a=await this._kdf.labeledExtract(c,Ye,n),o=r.info===void 0?c:new Uint8Array(r.info),s=await this._kdf.labeledExtract(c,Ge,o),u=new Uint8Array(1+a.byteLength+s.byteLength);u.set(new Uint8Array([e]),0),u.set(new Uint8Array(a),1),u.set(new Uint8Array(s),1+a.byteLength);let w=r.psk===void 0?c:new Uint8Array(r.psk.key),_=this._kdf.buildLabeledIkm(Fe,w),z=this._kdf.buildLabeledInfo(Be,u,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,_,z,this._kdf.hashSize);if(this._aead.id===y.ExportOnly)return{aead:this._aead,exporterSecret:d};let xe=this._kdf.buildLabeledInfo(Re,u,this._aead.keySize),ge=await this._kdf.extractAndExpand(t,_,xe,this._aead.keySize),ke=this._kdf.buildLabeledInfo(Ne,u,this._aead.nonceSize),Pe=await this._kdf.extractAndExpand(t,_,ke,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:ge,baseNonce:new Uint8Array(Pe),seq:0}}async _keyScheduleS(e,t,r,n){let a=await this._keySchedule(e,t,n);return a.key===void 0?new q(this._api,this._kdf,a.exporterSecret,r):new ee(this._api,this._kdf,a,r)}async _keyScheduleR(e,t,r){let n=await this._keySchedule(e,t,r);return n.key===void 0?new F(this._api,this._kdf,n.exporterSecret):new V(this._api,this._kdf,n)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new l("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new l(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new l("Too long psk.key");if(e.psk.id.byteLength>8192)throw new l("Too long psk.id")}}};var ue=class extends se{};export{y as AeadId,ue as CipherSuite,M as DecapError,Y as DeriveKeyPairError,v as DeserializeError,C as EncapError,N as ExportError,f as HpkeError,l as InvalidParamError,g as KdfId,h as KemId,R as MessageLimitReachedError,m as NotSupportedError,G as OpenError,B as SealError,D as SerializeError,ce as ValidationError}; +var m={Base:0,Psk:1,Auth:2,AuthPsk:3},Pe={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},h=Pe,ve={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},g=ve,Ae={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},y=Ae;var c=new Uint8Array(0);var f=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},l=class extends f{},ce=class extends f{},D=class extends f{},v=class extends f{},C=class extends f{},M=class extends f{},N=class extends f{},B=class extends f{},G=class extends f{},R=class extends f{},Y=class extends f{},_=class extends f{};var Se=new Uint8Array([115,101,99]),A=class{constructor(e,t,r){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=r}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new l("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Se,new Uint8Array(e),t)}catch(r){throw new N(r)}}_emitError(){return new Promise((e,t)=>{t(new _("Not available"))})}},F=class extends A{},q=class extends A{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}};var W=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},b=class extends W{constructor(){super()}init(e){this._api=e}},X=class extends W{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:c})}init(e,t){this._api=e,this._suiteId=t}};var he=["encrypt","decrypt"];var $=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.encrypt(n,this._key,t)}async open(e,t,r){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let n={name:"AES-GCM",iv:e,additionalData:r};return await this._api.decrypt(n,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,he)}},J=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}},Z=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new $(this._api,e)}};var Q=class extends b{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:y.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new _("createEncryptionContext() is not supported on ExportOnly")}};var le=new Uint8Array([72,80,75,69,45,118,49]),O=class extends X{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let r=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return r.set(le,0),r.set(this._suiteId,7),r.set(e,7+this._suiteId.byteLength),r.set(t,7+this._suiteId.byteLength+e.byteLength),r}buildLabeledInfo(e,t,r){let n=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(new Uint8Array([0,r]),0),n.set(le,2),n.set(this._suiteId,9),n.set(e,9+this._suiteId.byteLength),n.set(t,9+this._suiteId.byteLength+e.byteLength),n}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new l("The salt length must be the same as the hashSize");let r=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",r,t)}async expand(e,t,r){this.checkInit();let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),a=new ArrayBuffer(r),o=new Uint8Array(a),s=c,u=new Uint8Array(t),p=new Uint8Array(1);if(r>255*this.hashSize)throw new Error("Entropy limit reached");let w=new Uint8Array(this.hashSize+u.length+1);for(let z=1,d=0;d=s.length?(o.set(s,d),d+=s.length):(o.set(s.slice(0,o.length-d),d),d+=o.length-d);return a}async extractAndExpand(e,t,r,n){this.checkInit();let a=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:r},a,n*8)}async labeledExtract(e,t,r){return await this.extract(e,this.buildLabeledIkm(t,r))}async labeledExpand(e,t,r,n){return await this.expand(e,this.buildLabeledInfo(t,r,n),n)}},S=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},K=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},E=class extends O{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:g.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ke={},fe=Ee(globalThis,Ke);function Ee(i,e){return new Proxy(i,{get(t,r,n){return r in e?e[r]:i[r]},set(t,r,n){return r in e&&delete e[r],i[r]=n,!0},deleteProperty(t,r){let n=!1;return r in e&&(delete e[r],n=!0),r in i&&(delete i[r],n=!0),n},ownKeys(t){let r=Reflect.ownKeys(i),n=Reflect.ownKeys(e),a=new Set(n);return[...r.filter(o=>!a.has(o)),...n]},defineProperty(t,r,n){return r in e&&delete e[r],Reflect.defineProperty(i,r,n),!0},getOwnPropertyDescriptor(t,r){return r in e?Reflect.getOwnPropertyDescriptor(e,r):Reflect.getOwnPropertyDescriptor(i,r)},has(t,r){return r in e||r in i}})}var de=()=>typeof fe<"u",ye=()=>typeof caches<"u";var H=i=>typeof i=="object"&&i!==null&&typeof i.privateKey=="object"&&typeof i.publicKey=="object";function x(i,e){if(e<=0)throw new Error("i2Osp: too small size");if(i>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let r=0;r>8;return t}function be(i,e){if(i.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(i.byteLength);for(let r=0;rNumber.MAX_SAFE_INTEGER)throw new R("Message limit reached");e.seq+=1}};var V=class extends I{async open(e,t=c){let r;try{r=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(n){throw new G(n)}return this.incrementSeq(this._ctx),r}};var ee=class extends I{constructor(e,t,r,n){super(e,t,r),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=n}async seal(e,t=c){let r;try{r=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(n){throw new B(n)}return this.incrementSeq(this._ctx),r}};async function te(){if((de()||ye())&&globalThis.crypto!==void 0)return globalThis.crypto.subtle;try{let{webcrypto:i}=await import("crypto");return i.subtle}catch{throw new _("Web Cryptograph API not supported")}}var Le=new Uint8Array([75,69,77,0,0]),Ue=new Uint8Array([101,97,101,95,112,114,107]),Oe=new Uint8Array([115,104,97,114,101,100,95,115,101,99,114,101,116]),L=class extends b{constructor(e,t){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"_prim",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._prim=e,this._kdf=t}async generateKeyPair(){await this._setup();try{return await this._prim.generateKeyPair()}catch(e){throw new _(e)}}async deriveKeyPair(e){if(e.byteLength>8192)throw new l("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new Y(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new D(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new v(t)}}async importKey(e,t,r=!0){await this._setup();try{return await this._prim.importKey(e,t,r)}catch(n){throw new v(n)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,r=await this._prim.serializePublicKey(t.publicKey),n=await this._prim.serializePublicKey(e.recipientPublicKey),a;if(e.senderKey===void 0)a=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let u=H(e.senderKey)?e.senderKey.privateKey:e.senderKey,p=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),w=new Uint8Array(await this._prim.dh(u,e.recipientPublicKey));a=j(p,w)}let o;if(e.senderKey===void 0)o=j(new Uint8Array(r),new Uint8Array(n));else{let u=H(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),p=await this._prim.serializePublicKey(u);o=pe(new Uint8Array(r),new Uint8Array(n),new Uint8Array(p))}let s=await this._generateSharedSecret(a,o);return{enc:r,sharedSecret:s}}catch(t){throw new C(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(r){throw new v(r)}try{let r=H(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,n=H(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),a=await this._prim.serializePublicKey(n),o;if(e.senderPublicKey===void 0)o=new Uint8Array(await this._prim.dh(r,t));else{let u=new Uint8Array(await this._prim.dh(r,t)),p=new Uint8Array(await this._prim.dh(r,e.senderPublicKey));o=j(u,p)}let s;if(e.senderPublicKey===void 0)s=j(new Uint8Array(e.enc),new Uint8Array(a));else{let u=await this._prim.serializePublicKey(e.senderPublicKey);s=new Uint8Array(e.enc.byteLength+a.byteLength+u.byteLength),s.set(new Uint8Array(e.enc),0),s.set(new Uint8Array(a),e.enc.byteLength),s.set(new Uint8Array(u),e.enc.byteLength+a.byteLength)}return await this._generateSharedSecret(o,s)}catch(r){throw new M(r)}}async _setup(){if(this._api!==void 0)return;let e=await te(),t=new Uint8Array(Le);t.set(x(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let r=this._kdf.buildLabeledIkm(Ue,e),n=this._kdf.buildLabeledInfo(Oe,t,this.secretSize);return await this._kdf.extractAndExpand(c,r,n,this.secretSize)}};var T=["deriveBits"],we=new Uint8Array([100,107,112,95,112,114,107]),Kt=new Uint8Array([115,107]);var re=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var He=new Uint8Array([99,97,110,100,105,100,97,116,101]),je=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),Te=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),ze=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),De=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),Ce=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),Me=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),U=class extends b{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case h.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=je,this._bitmask=255,this._pkcs8AlgId=De;break;case h.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=Te,this._bitmask=255,this._pkcs8AlgId=Ce;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=ze,this._bitmask=1,this._pkcs8AlgId=Me;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,r){if(this.checkInit(),e==="raw")return await this._importRawKey(t,r);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,r)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let r=new Uint8Array(e),n=new Uint8Array(this._pkcs8AlgId.length+r.length);return n.set(this._pkcs8AlgId,0),n.set(r,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",n,this._alg,!0,T)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,T)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,T)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(c,we,new Uint8Array(e)),r=new re(this._nSk);for(let o=0;r.isZero()||!r.lessThan(this._order);o++){if(o>255)throw new Error("Faild to derive a key pair");let s=new Uint8Array(await this._hkdf.labeledExpand(t,He,x(o,1),this._nSk));s[0]=s[0]&this._bitmask,r.set(s)}let n=new Uint8Array(this._pkcs8AlgId.length+r.val().length);n.set(this._pkcs8AlgId,0),n.set(r.val(),this._pkcs8AlgId.length);let a=await this._api.importKey("pkcs8",n,this._alg,!0,T);return r.reset(),{privateKey:a,publicKey:await this.derivePublicKey(a)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var ie=class extends L{constructor(){let e=new S,t=new U(h.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},ne=class extends L{constructor(){let e=new K,t=new U(h.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},ae=class extends L{constructor(){let e=new E,t=new U(h.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:h.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Ne=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Be=new Uint8Array([101,120,112]),Ge=new Uint8Array([105,110,102,111,95,104,97,115,104]),Re=new Uint8Array([107,101,121]),Ye=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),Fe=new Uint8Array([115,101,99,114,101,116]),qe=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),se=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case h.DhkemP256HkdfSha256:this._kem=new ie;break;case h.DhkemP384HkdfSha384:this._kem=new ne;break;case h.DhkemP521HkdfSha512:this._kem=new ae;break;default:throw new l(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case g.HkdfSha256:this._kdf=new S;break;case g.HkdfSha384:this._kdf=new K;break;default:this._kdf=new E;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case y.Aes128Gcm:this._aead=new J;break;case y.Aes256Gcm:this._aead=new Z;break;case y.ExportOnly:this._aead=new Q;break;default:throw new l(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(qe),this._suiteId.set(x(this._kem.id,2),4),this._suiteId.set(x(this._kdf.id,2),6),this._suiteId.set(x(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,r=!0){return await this._setup(),await this._kem.importKey(e,t,r)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),r;return e.psk!==void 0?r=e.senderKey!==void 0?m.AuthPsk:m.Psk:r=e.senderKey!==void 0?m.Auth:m.Base,await this._keyScheduleS(r,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),r;return e.psk!==void 0?r=e.senderPublicKey!==void 0?m.AuthPsk:m.Psk:r=e.senderPublicKey!==void 0?m.Auth:m.Base,await this._keyScheduleR(r,t,e)}async seal(e,t,r=c){let n=await this.createSenderContext(e);return{ct:await n.seal(t,r),enc:n.enc}}async open(e,t,r=c){return await(await this.createRecipientContext(e)).open(t,r)}async _setup(){if(this._api!==void 0)return;let e=await te();this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,r){let n=r.psk===void 0?c:new Uint8Array(r.psk.id),a=await this._kdf.labeledExtract(c,Ye,n),o=r.info===void 0?c:new Uint8Array(r.info),s=await this._kdf.labeledExtract(c,Ge,o),u=new Uint8Array(1+a.byteLength+s.byteLength);u.set(new Uint8Array([e]),0),u.set(new Uint8Array(a),1),u.set(new Uint8Array(s),1+a.byteLength);let p=r.psk===void 0?c:new Uint8Array(r.psk.key),w=this._kdf.buildLabeledIkm(Fe,p),z=this._kdf.buildLabeledInfo(Be,u,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,w,z,this._kdf.hashSize);if(this._aead.id===y.ExportOnly)return{aead:this._aead,exporterSecret:d};let xe=this._kdf.buildLabeledInfo(Re,u,this._aead.keySize),me=await this._kdf.extractAndExpand(t,w,xe,this._aead.keySize),ge=this._kdf.buildLabeledInfo(Ne,u,this._aead.nonceSize),ke=await this._kdf.extractAndExpand(t,w,ge,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:me,baseNonce:new Uint8Array(ke),seq:0}}async _keyScheduleS(e,t,r,n){let a=await this._keySchedule(e,t,n);return a.key===void 0?new q(this._api,this._kdf,a.exporterSecret,r):new ee(this._api,this._kdf,a,r)}async _keyScheduleR(e,t,r){let n=await this._keySchedule(e,t,r);return n.key===void 0?new F(this._api,this._kdf,n.exporterSecret):new V(this._api,this._kdf,n)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new l("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new l(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new l("Too long psk.key");if(e.psk.id.byteLength>8192)throw new l("Too long psk.id")}}};var ue=class extends se{};export{y as AeadId,ue as CipherSuite,M as DecapError,Y as DeriveKeyPairError,v as DeserializeError,C as EncapError,N as ExportError,f as HpkeError,l as InvalidParamError,g as KdfId,h as KemId,R as MessageLimitReachedError,_ as NotSupportedError,G as OpenError,B as SealError,D as SerializeError,ce as ValidationError}; diff --git a/dhkem-x448/src/hpke-dhkem-x448.js b/dhkem-x448/src/hpke-dhkem-x448.js index 3c17ee05f..182d96461 100644 --- a/dhkem-x448/src/hpke-dhkem-x448.js +++ b/dhkem-x448/src/hpke-dhkem-x448.js @@ -1,4 +1,4 @@ -var vr={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},Ut=vr,Ir={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},te=Ir;function ee(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`Wrong positive integer: ${e}`)}function Lr(e){if(typeof e!="boolean")throw new Error(`Expected boolean, not ${e}`)}function Ke(e,...t){if(!(e instanceof Uint8Array))throw new Error("Expected Uint8Array");if(t.length>0&&!t.includes(e.length))throw new Error(`Expected Uint8Array of length ${t}, not of length=${e.length}`)}function kr(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");ee(e.outputLen),ee(e.blockLen)}function Pr(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Hr(e,t){Ke(e);let r=t.outputLen;if(e.lengthe instanceof Uint8Array;var Te=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),Ot=e=>new DataView(e.buffer,e.byteOffset,e.byteLength);var Kr=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!Kr)throw new Error("Non little-endian hardware is not supported");var Gn=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function re(e){if(typeof e!="string")throw new Error(`utf8ToBytes expected string, got ${typeof e}`);return new Uint8Array(new TextEncoder().encode(e))}function ut(e){if(typeof e=="string"&&(e=re(e)),!Oe(e))throw new Error(`expected Uint8Array, got ${typeof e}`);return e}function Ne(...e){let t=new Uint8Array(e.reduce((n,o)=>n+o.length,0)),r=0;return e.forEach(n=>{if(!Oe(n))throw new Error("Uint8Array expected");t.set(n,r),r+=n.length}),t}var at=class{clone(){return this._cloneInto()}};function Q(e){let t=n=>e().update(ut(n)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function Ce(e){let t=(n,o)=>e(o).update(ut(n)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=n=>e(n),t}function ne(e=32){if(Kt&&typeof Kt.getRandomValues=="function")return Kt.getRandomValues(new Uint8Array(e));throw new Error("crypto.getRandomValues must be defined")}var Tt=class extends at{constructor(t,r){super(),this.finished=!1,this.destroyed=!1,M.hash(t);let n=ut(r);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let o=this.blockLen,s=new Uint8Array(o);s.set(n.length>o?t.create().update(n).digest():n);for(let i=0;inew Tt(e,t).update(r).digest();oe.create=(e,t)=>new Tt(e,t);function Or(e,t,r,n){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,r,n);let o=BigInt(32),s=BigInt(4294967295),i=Number(r>>o&s),c=Number(r&s),a=n?4:0,h=n?0:4;e.setUint32(t+a,i,n),e.setUint32(t+h,c,n)}var Nt=class extends at{constructor(t,r,n,o){super(),this.blockLen=t,this.outputLen=r,this.padOffset=n,this.isLE=o,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Ot(this.buffer)}update(t){M.exists(this);let{view:r,buffer:n,blockLen:o}=this;t=ut(t);let s=t.length;for(let i=0;io-i&&(this.process(n,0),i=0);for(let p=i;pu.length)throw new Error("_sha2: outputLen bigger than state");for(let p=0;p>ie&Ct)}:{h:Number(e>>ie&Ct)|0,l:Number(e&Ct)|0}}function Tr(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let o=0;oBigInt(e>>>0)<>>0),Cr=(e,t,r)=>e>>>r,zr=(e,t,r)=>e<<32-r|t>>>r,qr=(e,t,r)=>e>>>r|t<<32-r,Dr=(e,t,r)=>e<<32-r|t>>>r,Mr=(e,t,r)=>e<<64-r|t>>>r-32,Rr=(e,t,r)=>e>>>r-32|t<<64-r,jr=(e,t)=>t,Gr=(e,t)=>e,Zr=(e,t,r)=>e<>>32-r,$r=(e,t,r)=>t<>>32-r,Fr=(e,t,r)=>t<>>64-r,Xr=(e,t,r)=>e<>>64-r;function Yr(e,t,r,n){let o=(t>>>0)+(n>>>0);return{h:e+r+(o/2**32|0)|0,l:o|0}}var Vr=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),Wr=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,Jr=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Qr=(e,t,r,n,o)=>t+r+n+o+(e/2**32|0)|0,tn=(e,t,r,n,o)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(o>>>0),en=(e,t,r,n,o,s)=>t+r+n+o+s+(e/2**32|0)|0,rn={fromBig:ze,split:Tr,toBig:Nr,shrSH:Cr,shrSL:zr,rotrSH:qr,rotrSL:Dr,rotrBH:Mr,rotrBL:Rr,rotr32H:jr,rotr32L:Gr,rotlSH:Zr,rotlSL:$r,rotlBH:Fr,rotlBL:Xr,add:Yr,add3L:Vr,add3H:Wr,add4L:Jr,add4H:Qr,add5H:en,add5L:tn},w=rn;var[nn,on]=w.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),ht=new Uint32Array(80),lt=new Uint32Array(80),bt=class extends Nt{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:t,Al:r,Bh:n,Bl:o,Ch:s,Cl:i,Dh:c,Dl:a,Eh:h,El:u,Fh:p,Fl:b,Gh:S,Gl:I,Hh:k,Hl:_}=this;return[t,r,n,o,s,i,c,a,h,u,p,b,S,I,k,_]}set(t,r,n,o,s,i,c,a,h,u,p,b,S,I,k,_){this.Ah=t|0,this.Al=r|0,this.Bh=n|0,this.Bl=o|0,this.Ch=s|0,this.Cl=i|0,this.Dh=c|0,this.Dl=a|0,this.Eh=h|0,this.El=u|0,this.Fh=p|0,this.Fl=b|0,this.Gh=S|0,this.Gl=I|0,this.Hh=k|0,this.Hl=_|0}process(t,r){for(let f=0;f<16;f++,r+=4)ht[f]=t.getUint32(r),lt[f]=t.getUint32(r+=4);for(let f=16;f<80;f++){let m=ht[f-15]|0,x=lt[f-15]|0,z=w.rotrSH(m,x,1)^w.rotrSH(m,x,8)^w.shrSH(m,x,7),V=w.rotrSL(m,x,1)^w.rotrSL(m,x,8)^w.shrSL(m,x,7),H=ht[f-2]|0,K=lt[f-2]|0,j=w.rotrSH(H,K,19)^w.rotrBH(H,K,61)^w.shrSH(H,K,6),q=w.rotrSL(H,K,19)^w.rotrBL(H,K,61)^w.shrSL(H,K,6),$=w.add4L(V,q,lt[f-7],lt[f-16]),O=w.add4H($,z,j,ht[f-7],ht[f-16]);ht[f]=O|0,lt[f]=$|0}let{Ah:n,Al:o,Bh:s,Bl:i,Ch:c,Cl:a,Dh:h,Dl:u,Eh:p,El:b,Fh:S,Fl:I,Gh:k,Gl:_,Hh:C,Hl:R}=this;for(let f=0;f<80;f++){let m=w.rotrSH(p,b,14)^w.rotrSH(p,b,18)^w.rotrBH(p,b,41),x=w.rotrSL(p,b,14)^w.rotrSL(p,b,18)^w.rotrBL(p,b,41),z=p&S^~p&k,V=b&I^~b&_,H=w.add5L(R,x,V,on[f],lt[f]),K=w.add5H(H,C,m,z,nn[f],ht[f]),j=H|0,q=w.rotrSH(n,o,28)^w.rotrBH(n,o,34)^w.rotrBH(n,o,39),$=w.rotrSL(n,o,28)^w.rotrBL(n,o,34)^w.rotrBL(n,o,39),O=n&s^n&c^s&c,Et=o&i^o&a^i&a;C=k|0,R=_|0,k=S|0,_=I|0,S=p|0,I=b|0,{h:p,l:b}=w.add(h|0,u|0,K|0,j|0),h=c|0,u=a|0,c=s|0,a=i|0,s=n|0,i=o|0;let st=w.add3L(j,$,Et);n=w.add3H(st,K,q,O),o=st|0}({h:n,l:o}=w.add(this.Ah|0,this.Al|0,n|0,o|0)),{h:s,l:i}=w.add(this.Bh|0,this.Bl|0,s|0,i|0),{h:c,l:a}=w.add(this.Ch|0,this.Cl|0,c|0,a|0),{h,l:u}=w.add(this.Dh|0,this.Dl|0,h|0,u|0),{h:p,l:b}=w.add(this.Eh|0,this.El|0,p|0,b|0),{h:S,l:I}=w.add(this.Fh|0,this.Fl|0,S|0,I|0),{h:k,l:_}=w.add(this.Gh|0,this.Gl|0,k|0,_|0),{h:C,l:R}=w.add(this.Hh|0,this.Hl|0,C|0,R|0),this.set(n,o,s,i,c,a,h,u,p,b,S,I,k,_,C,R)}roundClean(){ht.fill(0),lt.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}},se=class extends bt{constructor(){super(),this.Ah=-1942145080,this.Al=424955298,this.Bh=1944164710,this.Bl=-1982016298,this.Ch=502970286,this.Cl=855612546,this.Dh=1738396948,this.Dl=1479516111,this.Eh=258812777,this.El=2077511080,this.Fh=2011393907,this.Fl=79989058,this.Gh=1067287976,this.Gl=1780299464,this.Hh=286451373,this.Hl=-1848208735,this.outputLen=28}},ce=class extends bt{constructor(){super(),this.Ah=573645204,this.Al=-64227540,this.Bh=-1621794909,this.Bl=-934517566,this.Ch=596883563,this.Cl=1867755857,this.Dh=-1774684391,this.Dl=1497426621,this.Eh=-1775747358,this.El=-1467023389,this.Fh=-1101128155,this.Fl=1401305490,this.Gh=721525244,this.Gl=746961066,this.Hh=246885852,this.Hl=-2117784414,this.outputLen=32}},ae=class extends bt{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}},qe=Q(()=>new bt),ro=Q(()=>new se),no=Q(()=>new ce),oo=Q(()=>new ae);var rt=new Uint8Array(0);var zt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},wt=class extends zt{constructor(){super()}init(t){this._api=t}},qt=class extends zt{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:rt})}init(t,r){this._api=t,this._suiteId=r}};var nt=class extends Error{constructor(t){let r;t instanceof Error?r=t.message:typeof t=="string"?r=t:r="",super(r),this.name=this.constructor.name}},xt=class extends nt{};var Dt=class extends nt{},gt=class extends nt{},Mt=class extends nt{},Rt=class extends nt{};var jt=class extends nt{},mt=class extends nt{};var Me=new Uint8Array([72,80,75,69,45,118,49]),he=class extends qt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:te.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(t,r){let n=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+r.byteLength);return n.set(Me,0),n.set(this._suiteId,7),n.set(t,7+this._suiteId.byteLength),n.set(r,7+this._suiteId.byteLength+t.byteLength),n}buildLabeledInfo(t,r,n){let o=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+r.byteLength);return o.set(new Uint8Array([0,n]),0),o.set(Me,2),o.set(this._suiteId,9),o.set(t,9+this._suiteId.byteLength),o.set(r,9+this._suiteId.byteLength+t.byteLength),o}async extract(t,r){if(this.checkInit(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new xt("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}async expand(t,r,n){this.checkInit();let o=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),s=new ArrayBuffer(n),i=new Uint8Array(s),c=rt,a=new Uint8Array(r),h=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let u=new Uint8Array(this.hashSize+a.length+1);for(let p=1,b=0;b=c.length?(i.set(c,b),b+=c.length):(i.set(c.slice(0,i.length-b),b),b+=i.length-b);return s}async extractAndExpand(t,r,n,o){this.checkInit();let s=await this._api.importKey("raw",r,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:n},s,o*8)}async labeledExtract(t,r,n){return await this.extract(t,this.buildLabeledIkm(r,n))}async labeledExpand(t,r,n,o){return await this.expand(t,this.buildLabeledInfo(r,n,o),o)}};var Gt=class extends he{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:te.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Zt=class extends Gt{async extract(t,r){if(this.checkInit(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return oe(qe,new Uint8Array(t),new Uint8Array(r));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var sn={},Re=cn(globalThis,sn);function cn(e,t){return new Proxy(e,{get(r,n,o){return n in t?t[n]:e[n]},set(r,n,o){return n in t&&delete t[n],e[n]=o,!0},deleteProperty(r,n){let o=!1;return n in t&&(delete t[n],o=!0),n in e&&(delete e[n],o=!0),o},ownKeys(r){let n=Reflect.ownKeys(e),o=Reflect.ownKeys(t),s=new Set(o);return[...n.filter(i=>!s.has(i)),...o]},defineProperty(r,n,o){return n in t&&delete t[n],Reflect.defineProperty(e,n,o),!0},getOwnPropertyDescriptor(r,n){return n in t?Reflect.getOwnPropertyDescriptor(t,n):Reflect.getOwnPropertyDescriptor(e,n)},has(r,n){return n in t||n in e}})}var je=()=>typeof Re<"u",Ge=()=>typeof caches<"u";var _t=e=>typeof e=="object"&&e!==null&&typeof e.privateKey=="object"&&typeof e.publicKey=="object";function le(e,t){if(t<=0)throw new Error("i2Osp: too small size");if(e>=256**t)throw new Error("i2Osp: too large integer");let r=new Uint8Array(t);for(let n=0;n>8;return r}function Bt(e,t){let r=new Uint8Array(e.length+t.length);return r.set(e,0),r.set(t,e.length),r}function Ze(e,t,r){let n=new Uint8Array(e.length+t.length+r.length);return n.set(e,0),n.set(t,e.length),n.set(r,e.length+t.length),n}function fe(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),r=atob(t),n=new Uint8Array(r.length);for(let o=0;o8192)throw new xt("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(t)}catch(r){throw new jt(r)}}async serializePublicKey(t){await this._setup();try{return await this._prim.serializePublicKey(t)}catch(r){throw new Dt(r)}}async deserializePublicKey(t){await this._setup();try{return await this._prim.deserializePublicKey(t)}catch(r){throw new gt(r)}}async importKey(t,r,n=!0){await this._setup();try{return await this._prim.importKey(t,r,n)}catch(o){throw new gt(o)}}async encap(t){await this._setup();try{let r=t.nonEphemeralKeyPair===void 0?await this.generateKeyPair():t.nonEphemeralKeyPair,n=await this._prim.serializePublicKey(r.publicKey),o=await this._prim.serializePublicKey(t.recipientPublicKey),s;if(t.senderKey===void 0)s=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey));else{let a=_t(t.senderKey)?t.senderKey.privateKey:t.senderKey,h=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey)),u=new Uint8Array(await this._prim.dh(a,t.recipientPublicKey));s=Bt(h,u)}let i;if(t.senderKey===void 0)i=Bt(new Uint8Array(n),new Uint8Array(o));else{let a=_t(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),h=await this._prim.serializePublicKey(a);i=Ze(new Uint8Array(n),new Uint8Array(o),new Uint8Array(h))}let c=await this._generateSharedSecret(s,i);return{enc:n,sharedSecret:c}}catch(r){throw new Mt(r)}}async decap(t){let r;await this._setup();try{r=await this._prim.deserializePublicKey(t.enc)}catch(n){throw new gt(n)}try{let n=_t(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,o=_t(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),s=await this._prim.serializePublicKey(o),i;if(t.senderPublicKey===void 0)i=new Uint8Array(await this._prim.dh(n,r));else{let a=new Uint8Array(await this._prim.dh(n,r)),h=new Uint8Array(await this._prim.dh(n,t.senderPublicKey));i=Bt(a,h)}let c;if(t.senderPublicKey===void 0)c=Bt(new Uint8Array(t.enc),new Uint8Array(s));else{let a=await this._prim.serializePublicKey(t.senderPublicKey);c=new Uint8Array(t.enc.byteLength+s.byteLength+a.byteLength),c.set(new Uint8Array(t.enc),0),c.set(new Uint8Array(s),t.enc.byteLength),c.set(new Uint8Array(a),t.enc.byteLength+s.byteLength)}return await this._generateSharedSecret(i,c)}catch(n){throw new Rt(n)}}async _setup(){if(this._api!==void 0)return;let t=await $e(),r=new Uint8Array(Fe);r.set(le(this.id,2),3),this._prim.init(t),this._kdf.init(t,r),super.init(t)}async _generateSharedSecret(t,r){let n=this._kdf.buildLabeledIkm(hn,t),o=this._kdf.buildLabeledInfo(ln,r,this.secretSize);return await this._kdf.extractAndExpand(rt,n,o,this.secretSize)}};var[Ve,We,Je]=[[],[],[]],fn=BigInt(0),At=BigInt(1),dn=BigInt(2),pn=BigInt(7),yn=BigInt(256),bn=BigInt(113);for(let e=0,t=At,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],Ve.push(2*(5*n+r)),We.push((e+1)*(e+2)/2%64);let o=fn;for(let s=0;s<7;s++)t=(t<>pn)*bn)%yn,t&dn&&(o^=At<<(At<r>32?w.rotlBH(e,t,r):w.rotlSH(e,t,r),Ye=(e,t,r)=>r>32?w.rotlBL(e,t,r):w.rotlSL(e,t,r);function gn(e,t=24){let r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let i=0;i<10;i++)r[i]=e[i]^e[i+10]^e[i+20]^e[i+30]^e[i+40];for(let i=0;i<10;i+=2){let c=(i+8)%10,a=(i+2)%10,h=r[a],u=r[a+1],p=Xe(h,u,1)^r[c],b=Ye(h,u,1)^r[c+1];for(let S=0;S<50;S+=10)e[i+S]^=p,e[i+S+1]^=b}let o=e[2],s=e[3];for(let i=0;i<24;i++){let c=We[i],a=Xe(o,s,c),h=Ye(o,s,c),u=Ve[i];o=e[u],s=e[u+1],e[u]=a,e[u+1]=h}for(let i=0;i<50;i+=10){for(let c=0;c<10;c++)r[c]=e[i+c];for(let c=0;c<10;c++)e[i+c]^=~r[(c+2)%10]&r[(c+4)%10]}e[0]^=wn[n],e[1]^=xn[n]}r.fill(0)}var Ft=class e extends at{constructor(t,r,n,o=!1,s=24){if(super(),this.blockLen=t,this.suffix=r,this.outputLen=n,this.enableXOF=o,this.rounds=s,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,M.number(n),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=Te(this.state)}keccak(){gn(this.state32,this.rounds),this.posOut=0,this.pos=0}update(t){M.exists(this);let{blockLen:r,state:n}=this;t=ut(t);let o=t.length;for(let s=0;s=n&&this.keccak();let i=Math.min(n-this.posOut,s-o);t.set(r.subarray(this.posOut,this.posOut+i),o),this.posOut+=i,o+=i}return t}xofInto(t){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(t)}xof(t){return M.number(t),this.xofInto(new Uint8Array(t))}digestInto(t){if(M.output(t,this),this.finished)throw new Error("digest() was already called");return this.writeInto(t),this.destroy(),t}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(t){let{blockLen:r,suffix:n,outputLen:o,rounds:s,enableXOF:i}=this;return t||(t=new e(r,n,o,i,s)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=s,t.suffix=n,t.outputLen=o,t.enableXOF=i,t.destroyed=this.destroyed,t}},ft=(e,t,r)=>Q(()=>new Ft(t,e,r)),Lo=ft(6,144,224/8),ko=ft(6,136,256/8),Po=ft(6,104,384/8),Ho=ft(6,72,512/8),Uo=ft(1,144,224/8),Ko=ft(1,136,256/8),Oo=ft(1,104,384/8),To=ft(1,72,512/8),Qe=(e,t,r)=>Ce((n={})=>new Ft(t,e,n.dkLen===void 0?r:n.dkLen,!0)),No=Qe(31,168,128/8),de=Qe(31,136,256/8);var zo=BigInt(0),mn=BigInt(1),En=BigInt(2),Xt=e=>e instanceof Uint8Array,_n=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Yt(e){if(!Xt(e))throw new Error("Uint8Array expected");let t="";for(let r=0;rn+o.length,0)),r=0;return e.forEach(n=>{if(!Xt(n))throw new Error("Uint8Array expected");t.set(n,r),r+=n.length}),t}var rr=e=>(En<typeof e=="bigint",function:e=>typeof e=="function",boolean:e=>typeof e=="boolean",string:e=>typeof e=="string",isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>typeof e=="function"&&Number.isSafeInteger(e.outputLen)};function it(e,t,r={}){let n=(o,s,i)=>{let c=Bn[s];if(typeof c!="function")throw new Error(`Invalid validator "${s}", expected function`);let a=e[o];if(!(i&&a===void 0)&&!c(a,e))throw new Error(`Invalid param ${String(o)}=${a} (${typeof a}), expected ${s}`)};for(let[o,s]of Object.entries(t))n(o,s,!1);for(let[o,s]of Object.entries(r))n(o,s,!0);return e}var N=BigInt(0),T=BigInt(1),pt=BigInt(2),Sn=BigInt(3),be=BigInt(4),nr=BigInt(5),or=BigInt(8),vn=BigInt(9),In=BigInt(16);function U(e,t){let r=e%t;return r>=N?r:t+r}function we(e,t,r){if(r<=N||t 0");if(r===T)return N;let n=T;for(;t>N;)t&T&&(n=n*e%r),e=e*e%r,t>>=T;return n}function X(e,t,r){let n=e;for(;t-- >N;)n*=n,n%=r;return n}function ir(e,t){if(e===N||t<=N)throw new Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=U(e,t),n=t,o=N,s=T,i=T,c=N;for(;r!==N;){let h=n/r,u=n%r,p=o-i*h,b=s-c*h;n=r,r=u,o=i,s=c,i=p,c=b}if(n!==T)throw new Error("invert: does not exist");return U(o,t)}function Ln(e){let t=(e-T)/pt,r,n,o;for(r=e-T,n=0;r%pt===N;r/=pt,n++);for(o=pt;o(n[o]="function",n),t);return it(e,r)}function Hn(e,t,r){if(r 0");if(r===N)return e.ONE;if(r===T)return t;let n=e.ONE,o=t;for(;r>N;)r&T&&(n=e.mul(n,o)),o=e.sqr(o),r>>=T;return n}function Un(e,t){let r=new Array(t.length),n=t.reduce((s,i,c)=>e.is0(i)?s:(r[c]=s,e.mul(s,i)),e.ONE),o=e.inv(n);return t.reduceRight((s,i,c)=>e.is0(i)?s:(r[c]=e.mul(s,r[c]),e.mul(s,i)),o),r}function xe(e,t){let r=t!==void 0?t:e.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function cr(e,t,r=!1,n={}){if(e<=N)throw new Error(`Expected Fp ORDER > 0, got ${e}`);let{nBitLength:o,nByteLength:s}=xe(e,t);if(s>2048)throw new Error("Field lengths over 2048 bytes are not supported");let i=kn(e),c=Object.freeze({ORDER:e,BITS:o,BYTES:s,MASK:rr(o),ZERO:N,ONE:T,create:a=>U(a,e),isValid:a=>{if(typeof a!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof a}`);return N<=a&&aa===N,isOdd:a=>(a&T)===T,neg:a=>U(-a,e),eql:(a,h)=>a===h,sqr:a=>U(a*a,e),add:(a,h)=>U(a+h,e),sub:(a,h)=>U(a-h,e),mul:(a,h)=>U(a*h,e),pow:(a,h)=>Hn(c,a,h),div:(a,h)=>U(a*ir(h,e),e),sqrN:a=>a*a,addN:(a,h)=>a+h,subN:(a,h)=>a-h,mulN:(a,h)=>a*h,inv:a=>ir(a,e),sqrt:n.sqrt||(a=>i(c,a)),invertBatch:a=>Un(c,a),cmov:(a,h,u)=>u?h:a,toBytes:a=>r?dt(a,s):ye(a,s),fromBytes:a=>{if(a.length!==s)throw new Error(`Fp.fromBytes: expected ${s}, got ${a.length}`);return r?ot(a):pe(a)}});return Object.freeze(c)}var Kn=BigInt(0),ge=BigInt(1);function ar(e,t){let r=(o,s)=>{let i=s.negate();return o?i:s},n=o=>{let s=Math.ceil(t/o)+1,i=2**(o-1);return{windows:s,windowSize:i}};return{constTimeNegate:r,unsafeLadder(o,s){let i=e.ZERO,c=o;for(;s>Kn;)s&ge&&(i=i.add(c)),c=c.double(),s>>=ge;return i},precomputeWindow(o,s){let{windows:i,windowSize:c}=n(s),a=[],h=o,u=h;for(let p=0;p>=S,_>a&&(_-=b,i+=ge);let C=k,R=k+Math.abs(_)-1,f=I%2!==0,m=_<0;_===0?u=u.add(r(f,s[C])):h=h.add(r(m,s[R]))}return{p:h,f:u}},wNAFCached(o,s,i,c){let a=o._WINDOW_SIZE||1,h=s.get(o);return h||(h=this.precomputeWindow(o,a),a!==1&&s.set(o,c(h))),this.wNAF(a,h,i)}}}function ur(e){return sr(e.Fp),it(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...xe(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}var W=BigInt(0),Y=BigInt(1),Wt=BigInt(2),On=BigInt(8),Tn={zip215:!0};function Nn(e){let t=ur(e);return it(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}function me(e){let t=Nn(e),{Fp:r,n,prehash:o,hash:s,randomBytes:i,nByteLength:c,h:a}=t,h=Wt<{try{return{isValid:!0,value:r.sqrt(d*r.inv(l))}}catch{return{isValid:!1,value:W}}}),b=t.adjustScalarBytes||(d=>d),S=t.domain||((d,l,y)=>{if(l.length||y)throw new Error("Contexts/pre-hash are not supported");return d}),I=d=>typeof d=="bigint"&&WI(d)&&I(l)&&dd===W||k(d,h);function C(d,l){if(k(d,l))return d;throw new Error(`Expected valid scalar < ${l}, got ${typeof d} ${d}`)}function R(d){return d===W?d:C(d,n)}let f=new Map;function m(d){if(!(d instanceof x))throw new Error("ExtendedPoint expected")}class x{constructor(l,y,g,E){if(this.ex=l,this.ey=y,this.ez=g,this.et=E,!_(l))throw new Error("x required");if(!_(y))throw new Error("y required");if(!_(g))throw new Error("z required");if(!_(E))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof x)throw new Error("extended point not allowed");let{x:y,y:g}=l||{};if(!_(y)||!_(g))throw new Error("invalid affine point");return new x(y,g,Y,u(y*g))}static normalizeZ(l){let y=r.invertBatch(l.map(g=>g.ez));return l.map((g,E)=>g.toAffine(y[E])).map(x.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,f.delete(this)}assertValidity(){let{a:l,d:y}=t;if(this.is0())throw new Error("bad point: ZERO");let{ex:g,ey:E,ez:B,et:v}=this,P=u(g*g),A=u(E*E),L=u(B*B),D=u(L*L),G=u(P*l),J=u(L*u(G+A)),Z=u(D+u(y*u(P*A)));if(J!==Z)throw new Error("bad point: equation left != right (1)");let ct=u(g*E),et=u(B*v);if(ct!==et)throw new Error("bad point: equation left != right (2)")}equals(l){m(l);let{ex:y,ey:g,ez:E}=this,{ex:B,ey:v,ez:P}=l,A=u(y*P),L=u(B*E),D=u(g*P),G=u(v*E);return A===L&&D===G}is0(){return this.equals(x.ZERO)}negate(){return new x(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){let{a:l}=t,{ex:y,ey:g,ez:E}=this,B=u(y*y),v=u(g*g),P=u(Wt*u(E*E)),A=u(l*B),L=y+g,D=u(u(L*L)-B-v),G=A+v,J=G-P,Z=A-v,ct=u(D*J),et=u(G*Z),Pt=u(D*Z),Ht=u(J*G);return new x(ct,et,Ht,Pt)}add(l){m(l);let{a:y,d:g}=t,{ex:E,ey:B,ez:v,et:P}=this,{ex:A,ey:L,ez:D,et:G}=l;if(y===BigInt(-1)){let ve=u((B-E)*(L+A)),Ie=u((B+E)*(L-A)),Qt=u(Ie-ve);if(Qt===W)return this.double();let Le=u(v*Wt*G),ke=u(P*Wt*D),Pe=ke+Le,He=Ie+ve,Ue=ke-Le,_r=u(Pe*Qt),Br=u(He*Ue),Ar=u(Pe*Ue),Sr=u(Qt*He);return new x(_r,Br,Sr,Ar)}let J=u(E*A),Z=u(B*L),ct=u(P*g*G),et=u(v*D),Pt=u((E+B)*(A+L)-J-Z),Ht=et-ct,Ae=et+ct,Se=u(Z-y*J),xr=u(Pt*Ht),gr=u(Ae*Se),mr=u(Pt*Se),Er=u(Ht*Ae);return new x(xr,gr,Er,mr)}subtract(l){return this.add(l.negate())}wNAF(l){return H.wNAFCached(this,f,l,x.normalizeZ)}multiply(l){let{p:y,f:g}=this.wNAF(C(l,n));return x.normalizeZ([y,g])[0]}multiplyUnsafe(l){let y=R(l);return y===W?V:this.equals(V)||y===Y?this:this.equals(z)?this.wNAF(y).p:H.unsafeLadder(this,y)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}isTorsionFree(){return H.unsafeLadder(this,n).is0()}toAffine(l){let{ex:y,ey:g,ez:E}=this,B=this.is0();l==null&&(l=B?On:r.inv(E));let v=u(y*l),P=u(g*l),A=u(E*l);if(B)return{x:W,y:Y};if(A!==Y)throw new Error("invZ was invalid");return{x:v,y:P}}clearCofactor(){let{h:l}=t;return l===Y?this:this.multiplyUnsafe(l)}static fromHex(l,y=!1){let{d:g,a:E}=t,B=r.BYTES;l=F("pointHex",l,B);let v=l.slice(),P=l[B-1];v[B-1]=P&-129;let A=ot(v);A===W||(y?C(A,h):C(A,r.ORDER));let L=u(A*A),D=u(L-Y),G=u(g*L-E),{isValid:J,value:Z}=p(D,G);if(!J)throw new Error("Point.fromHex: invalid y coordinate");let ct=(Z&Y)===Y,et=(P&128)!==0;if(!y&&Z===W&&et)throw new Error("Point.fromHex: x=0 and x_0=1");return et!==ct&&(Z=u(-Z)),x.fromAffine({x:Z,y:A})}static fromPrivateKey(l){return q(l).point}toRawBytes(){let{x:l,y}=this.toAffine(),g=dt(y,r.BYTES);return g[g.length-1]|=l&Y?128:0,g}toHex(){return Yt(this.toRawBytes())}}x.BASE=new x(t.Gx,t.Gy,Y,u(t.Gx*t.Gy)),x.ZERO=new x(W,Y,Y,W);let{BASE:z,ZERO:V}=x,H=ar(x,c*8);function K(d){return U(d,n)}function j(d){return K(ot(d))}function q(d){let l=c;d=F("private key",d,l);let y=F("hashed private key",s(d),2*l),g=b(y.slice(0,l)),E=y.slice(l,2*l),B=j(g),v=z.multiply(B),P=v.toRawBytes();return{head:g,prefix:E,scalar:B,point:v,pointBytes:P}}function $(d){return q(d).pointBytes}function O(d=new Uint8Array,...l){let y=Vt(...l);return j(s(S(y,F("context",d),!!o)))}function Et(d,l,y={}){d=F("message",d),o&&(d=o(d));let{prefix:g,scalar:E,pointBytes:B}=q(l),v=O(y.context,g,d),P=z.multiply(v).toRawBytes(),A=O(y.context,P,B,d),L=K(v+A*E);R(L);let D=Vt(P,dt(L,r.BYTES));return F("result",D,c*2)}let st=Tn;function Lt(d,l,y,g=st){let{context:E,zip215:B}=g,v=r.BYTES;d=F("signature",d,2*v),l=F("message",l),o&&(l=o(l));let P=ot(d.slice(v,2*v)),A,L,D;try{A=x.fromHex(y,B),L=x.fromHex(d.slice(0,v),B),D=z.multiplyUnsafe(P)}catch{return!1}if(!B&&A.isSmallOrder())return!1;let G=O(E,L.toRawBytes(),A.toRawBytes(),l);return L.add(A.multiplyUnsafe(G)).subtract(D).clearCofactor().equals(x.ZERO)}return z._setWindowSize(8),{CURVE:t,getPublicKey:$,sign:Et,verify:Lt,ExtendedPoint:x,utils:{getExtendedPublicKey:q,randomPrivateKey:()=>i(r.BYTES),precompute(d=8,l=x.BASE){return l._setWindowSize(d),l.multiply(BigInt(3)),l}}}}var St=BigInt(0),Ee=BigInt(1);function Cn(e){return it(e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...e})}function hr(e){let t=Cn(e),{P:r}=t,n=f=>U(f,r),o=t.montgomeryBits,s=Math.ceil(o/8),i=t.nByteLength,c=t.adjustScalarBytes||(f=>f),a=t.powPminus2||(f=>we(f,r-BigInt(2),r));function h(f,m,x){let z=n(f*(m-x));return m=n(m-z),x=n(x+z),[m,x]}function u(f){if(typeof f=="bigint"&&St<=f&&f=St;st--){let Lt=z>>st&Ee;$^=Lt,O=h($,H,j),H=O[0],j=O[1],O=h($,K,q),K=O[0],q=O[1],$=Lt;let kt=H+K,d=n(kt*kt),l=H-K,y=n(l*l),g=d-y,E=j+q,B=j-q,v=n(B*kt),P=n(E*l),A=v+P,L=v-P;j=n(A*A),q=n(V*n(L*L)),H=n(d*y),K=n(g*(d+n(p*g)))}O=h($,H,j),H=O[0],j=O[1],O=h($,K,q),K=O[0],q=O[1];let Et=a(K);return n(H*Et)}function S(f){return dt(n(f),s)}function I(f){let m=F("u coordinate",f,s);return i===s&&(m[i-1]&=127),ot(m)}function k(f){let m=F("scalar",f);if(m.length!==s&&m.length!==i)throw new Error(`Expected ${s} or ${i} bytes, got ${m.length}`);return ot(c(m))}function _(f,m){let x=I(m),z=k(f),V=b(x,z);if(V===St)throw new Error("Invalid private or public key received");return S(V)}let C=S(t.Gu);function R(f){return _(f,C)}return{scalarMult:_,scalarMultBase:R,getSharedSecret:(f,m)=>_(f,m),getPublicKey:f=>R(f),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:C}}var zn=Q(()=>de.create({dkLen:114})),qn=Q(()=>de.create({dkLen:64})),vt=BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439");function lr(e){let t=vt,r=BigInt(1),n=BigInt(2),o=BigInt(3),s=BigInt(11),i=BigInt(22),c=BigInt(44),a=BigInt(88),h=BigInt(223),u=e*e*e%t,p=u*u*e%t,b=X(p,o,t)*p%t,S=X(b,o,t)*p%t,I=X(S,n,t)*u%t,k=X(I,s,t)*I%t,_=X(k,i,t)*k%t,C=X(_,c,t)*_%t,R=X(C,a,t)*C%t,f=X(R,c,t)*_%t,m=X(f,n,t)*u%t,x=X(m,r,t)*e%t;return X(x,h,t)*m%t}function fr(e){return e[0]&=252,e[55]|=128,e[56]=0,e}var dr=cr(vt,456,!0),ai=BigInt(4),pr={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:dr,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:zn,randomBytes:ne,adjustScalarBytes:fr,domain:(e,t,r)=>{if(t.length>255)throw new Error(`Context is too big: ${t.length}`);return Ne(re("SigEd448"),new Uint8Array([r?1:0,t.length]),t,e)},uvRatio:(e,t)=>{let r=vt,n=U(e*e*t,r),o=U(n*e,r),s=U(o*n*t,r),i=lr(s),c=U(o*i,r),a=U(c*c,r);return{isValid:U(a*t,r)===e,value:c}}},yr=me(pr),ui=me({...pr,prehash:qn}),_e=(()=>hr({a:BigInt(156326),montgomeryBits:448,nByteLength:57,P:vt,Gu:BigInt(5),powPminus2:e=>{let t=vt,r=lr(e),n=X(r,BigInt(2),t);return U(n*e,t)},adjustScalarBytes:fr,randomBytes:ne}))();var hi=(dr.ORDER-BigInt(3))/BigInt(4),li=BigInt(156326);var It=["deriveBits"],br=new Uint8Array([100,107,112,95,112,114,107]),wr=new Uint8Array([115,107]);var tt=class{constructor(t,r,n,o=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=r,this.type=n,this.algorithm={name:t},this.usages=o,n==="public"&&(this.usages=[])}};var yt="X448",Jt=class extends wt{constructor(t){super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=56,this._nSk=56}async serializePublicKey(t){return await this._serializePublicKey(t)}async deserializePublicKey(t){return await this._deserializePublicKey(t)}async importKey(t,r,n){if(t==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}async derivePublicKey(t){return await this._derivePublicKey(t)}async generateKeyPair(){let t=yr.utils.randomPrivateKey(),r=new tt(yt,t,"private",It);return{publicKey:await this.derivePublicKey(r),privateKey:r}}async deriveKeyPair(t){let r=await this._hkdf.labeledExtract(rt,br,new Uint8Array(t)),n=await this._hkdf.labeledExpand(r,wr,rt,this._nSk),o=new tt(yt,new Uint8Array(n),"private",It);return{privateKey:o,publicKey:await this.derivePublicKey(o)}}async dh(t,r){return await this._dh(t,r)}_serializePublicKey(t){return new Promise(r=>{r(t.key.buffer)})}_deserializePublicKey(t){return new Promise((r,n)=>{t.byteLength!==this._nPk?n(new Error("Invalid public key for the ciphersuite")):r(new tt(yt,new Uint8Array(t),"public"))})}_importRawKey(t,r){return new Promise((n,o)=>{r&&t.byteLength!==this._nPk&&o(new Error("Invalid public key for the ciphersuite")),!r&&t.byteLength!==this._nSk&&o(new Error("Invalid private key for the ciphersuite")),n(new tt(yt,new Uint8Array(t),r?"public":"private",r?[]:It))})}_importJWK(t,r){return new Promise((n,o)=>{t.kty!=="OKP"&&o(new Error(`Invalid kty: ${t.kty}`)),t.crv!=="X448"&&o(new Error(`Invalid crv: ${t.crv}`)),r?(typeof t.d<"u"&&o(new Error("Invalid key: `d` should not be set")),typeof t.x!="string"&&o(new Error("Invalid key: `x` not found")),n(new tt(yt,fe(t.x),"public"))):(typeof t.d!="string"&&o(new Error("Invalid key: `d` not found")),n(new tt(yt,fe(t.d),"private",It)))})}_derivePublicKey(t){return new Promise(r=>{let n=_e.getPublicKey(t.key);r(new tt(yt,n,"public"))})}_dh(t,r){return new Promise((n,o)=>{try{n(_e.getSharedSecret(t.key,r.key).buffer)}catch(s){o(s)}})}};var Be=class extends $t{constructor(){let t=new Zt,r=new Jt(t);super(r,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Ut.DhkemX448HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56})}};export{Be as DhkemX448HkdfSha512}; +var Sr={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},Kt=Sr,vr={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},te=vr;function ee(e){if(!Number.isSafeInteger(e)||e<0)throw new Error(`Wrong positive integer: ${e}`)}function Lr(e){if(typeof e!="boolean")throw new Error(`Expected boolean, not ${e}`)}function Ke(e,...t){if(!(e instanceof Uint8Array))throw new Error("Expected Uint8Array");if(t.length>0&&!t.includes(e.length))throw new Error(`Expected Uint8Array of length ${t}, not of length=${e.length}`)}function Ir(e){if(typeof e!="function"||typeof e.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");ee(e.outputLen),ee(e.blockLen)}function kr(e,t=!0){if(e.destroyed)throw new Error("Hash instance has been destroyed");if(t&&e.finished)throw new Error("Hash#digest() has already been called")}function Pr(e,t){Ke(e);let r=t.outputLen;if(e.lengthe instanceof Uint8Array;var Oe=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),Ot=e=>new DataView(e.buffer,e.byteOffset,e.byteLength);var Kr=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!Kr)throw new Error("Non little-endian hardware is not supported");var Gn=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function re(e){if(typeof e!="string")throw new Error(`utf8ToBytes expected string, got ${typeof e}`);return new Uint8Array(new TextEncoder().encode(e))}function ut(e){if(typeof e=="string"&&(e=re(e)),!Ue(e))throw new Error(`expected Uint8Array, got ${typeof e}`);return e}function Te(...e){let t=new Uint8Array(e.reduce((n,o)=>n+o.length,0)),r=0;return e.forEach(n=>{if(!Ue(n))throw new Error("Uint8Array expected");t.set(n,r),r+=n.length}),t}var at=class{clone(){return this._cloneInto()}};function Q(e){let t=n=>e().update(ut(n)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function Ne(e){let t=(n,o)=>e(o).update(ut(n)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=n=>e(n),t}function ne(e=32){if(Ut&&typeof Ut.getRandomValues=="function")return Ut.getRandomValues(new Uint8Array(e));throw new Error("crypto.getRandomValues must be defined")}var Tt=class extends at{constructor(t,r){super(),this.finished=!1,this.destroyed=!1,M.hash(t);let n=ut(r);if(this.iHash=t.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let o=this.blockLen,s=new Uint8Array(o);s.set(n.length>o?t.create().update(n).digest():n);for(let i=0;inew Tt(e,t).update(r).digest();oe.create=(e,t)=>new Tt(e,t);function Ur(e,t,r,n){if(typeof e.setBigUint64=="function")return e.setBigUint64(t,r,n);let o=BigInt(32),s=BigInt(4294967295),i=Number(r>>o&s),c=Number(r&s),a=n?4:0,h=n?0:4;e.setUint32(t+a,i,n),e.setUint32(t+h,c,n)}var Nt=class extends at{constructor(t,r,n,o){super(),this.blockLen=t,this.outputLen=r,this.padOffset=n,this.isLE=o,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=Ot(this.buffer)}update(t){M.exists(this);let{view:r,buffer:n,blockLen:o}=this;t=ut(t);let s=t.length;for(let i=0;io-i&&(this.process(n,0),i=0);for(let p=i;pu.length)throw new Error("_sha2: outputLen bigger than state");for(let p=0;p>ie&Ct)}:{h:Number(e>>ie&Ct)|0,l:Number(e&Ct)|0}}function Or(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let o=0;oBigInt(e>>>0)<>>0),Nr=(e,t,r)=>e>>>r,Cr=(e,t,r)=>e<<32-r|t>>>r,zr=(e,t,r)=>e>>>r|t<<32-r,qr=(e,t,r)=>e<<32-r|t>>>r,Dr=(e,t,r)=>e<<64-r|t>>>r-32,Mr=(e,t,r)=>e>>>r-32|t<<64-r,Rr=(e,t)=>t,jr=(e,t)=>e,Gr=(e,t,r)=>e<>>32-r,Zr=(e,t,r)=>t<>>32-r,$r=(e,t,r)=>t<>>64-r,Fr=(e,t,r)=>e<>>64-r;function Xr(e,t,r,n){let o=(t>>>0)+(n>>>0);return{h:e+r+(o/2**32|0)|0,l:o|0}}var Yr=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),Vr=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,Wr=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Jr=(e,t,r,n,o)=>t+r+n+o+(e/2**32|0)|0,Qr=(e,t,r,n,o)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(o>>>0),tn=(e,t,r,n,o,s)=>t+r+n+o+s+(e/2**32|0)|0,en={fromBig:Ce,split:Or,toBig:Tr,shrSH:Nr,shrSL:Cr,rotrSH:zr,rotrSL:qr,rotrBH:Dr,rotrBL:Mr,rotr32H:Rr,rotr32L:jr,rotlSH:Gr,rotlSL:Zr,rotlBH:$r,rotlBL:Fr,add:Xr,add3L:Yr,add3H:Vr,add4L:Wr,add4H:Jr,add5H:tn,add5L:Qr},w=en;var[rn,nn]=w.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(e=>BigInt(e))),ht=new Uint32Array(80),lt=new Uint32Array(80),bt=class extends Nt{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:t,Al:r,Bh:n,Bl:o,Ch:s,Cl:i,Dh:c,Dl:a,Eh:h,El:u,Fh:p,Fl:b,Gh:S,Gl:L,Hh:k,Hl:_}=this;return[t,r,n,o,s,i,c,a,h,u,p,b,S,L,k,_]}set(t,r,n,o,s,i,c,a,h,u,p,b,S,L,k,_){this.Ah=t|0,this.Al=r|0,this.Bh=n|0,this.Bl=o|0,this.Ch=s|0,this.Cl=i|0,this.Dh=c|0,this.Dl=a|0,this.Eh=h|0,this.El=u|0,this.Fh=p|0,this.Fl=b|0,this.Gh=S|0,this.Gl=L|0,this.Hh=k|0,this.Hl=_|0}process(t,r){for(let f=0;f<16;f++,r+=4)ht[f]=t.getUint32(r),lt[f]=t.getUint32(r+=4);for(let f=16;f<80;f++){let m=ht[f-15]|0,x=lt[f-15]|0,z=w.rotrSH(m,x,1)^w.rotrSH(m,x,8)^w.shrSH(m,x,7),V=w.rotrSL(m,x,1)^w.rotrSL(m,x,8)^w.shrSL(m,x,7),H=ht[f-2]|0,U=lt[f-2]|0,j=w.rotrSH(H,U,19)^w.rotrBH(H,U,61)^w.shrSH(H,U,6),q=w.rotrSL(H,U,19)^w.rotrBL(H,U,61)^w.shrSL(H,U,6),$=w.add4L(V,q,lt[f-7],lt[f-16]),O=w.add4H($,z,j,ht[f-7],ht[f-16]);ht[f]=O|0,lt[f]=$|0}let{Ah:n,Al:o,Bh:s,Bl:i,Ch:c,Cl:a,Dh:h,Dl:u,Eh:p,El:b,Fh:S,Fl:L,Gh:k,Gl:_,Hh:C,Hl:R}=this;for(let f=0;f<80;f++){let m=w.rotrSH(p,b,14)^w.rotrSH(p,b,18)^w.rotrBH(p,b,41),x=w.rotrSL(p,b,14)^w.rotrSL(p,b,18)^w.rotrBL(p,b,41),z=p&S^~p&k,V=b&L^~b&_,H=w.add5L(R,x,V,nn[f],lt[f]),U=w.add5H(H,C,m,z,rn[f],ht[f]),j=H|0,q=w.rotrSH(n,o,28)^w.rotrBH(n,o,34)^w.rotrBH(n,o,39),$=w.rotrSL(n,o,28)^w.rotrBL(n,o,34)^w.rotrBL(n,o,39),O=n&s^n&c^s&c,Et=o&i^o&a^i&a;C=k|0,R=_|0,k=S|0,_=L|0,S=p|0,L=b|0,{h:p,l:b}=w.add(h|0,u|0,U|0,j|0),h=c|0,u=a|0,c=s|0,a=i|0,s=n|0,i=o|0;let st=w.add3L(j,$,Et);n=w.add3H(st,U,q,O),o=st|0}({h:n,l:o}=w.add(this.Ah|0,this.Al|0,n|0,o|0)),{h:s,l:i}=w.add(this.Bh|0,this.Bl|0,s|0,i|0),{h:c,l:a}=w.add(this.Ch|0,this.Cl|0,c|0,a|0),{h,l:u}=w.add(this.Dh|0,this.Dl|0,h|0,u|0),{h:p,l:b}=w.add(this.Eh|0,this.El|0,p|0,b|0),{h:S,l:L}=w.add(this.Fh|0,this.Fl|0,S|0,L|0),{h:k,l:_}=w.add(this.Gh|0,this.Gl|0,k|0,_|0),{h:C,l:R}=w.add(this.Hh|0,this.Hl|0,C|0,R|0),this.set(n,o,s,i,c,a,h,u,p,b,S,L,k,_,C,R)}roundClean(){ht.fill(0),lt.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}},se=class extends bt{constructor(){super(),this.Ah=-1942145080,this.Al=424955298,this.Bh=1944164710,this.Bl=-1982016298,this.Ch=502970286,this.Cl=855612546,this.Dh=1738396948,this.Dl=1479516111,this.Eh=258812777,this.El=2077511080,this.Fh=2011393907,this.Fl=79989058,this.Gh=1067287976,this.Gl=1780299464,this.Hh=286451373,this.Hl=-1848208735,this.outputLen=28}},ce=class extends bt{constructor(){super(),this.Ah=573645204,this.Al=-64227540,this.Bh=-1621794909,this.Bl=-934517566,this.Ch=596883563,this.Cl=1867755857,this.Dh=-1774684391,this.Dl=1497426621,this.Eh=-1775747358,this.El=-1467023389,this.Fh=-1101128155,this.Fl=1401305490,this.Gh=721525244,this.Gl=746961066,this.Hh=246885852,this.Hl=-2117784414,this.outputLen=32}},ae=class extends bt{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}},ze=Q(()=>new bt),ro=Q(()=>new se),no=Q(()=>new ce),oo=Q(()=>new ae);var rt=new Uint8Array(0);var zt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},wt=class extends zt{constructor(){super()}init(t){this._api=t}},qt=class extends zt{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:rt})}init(t,r){this._api=t,this._suiteId=r}};var nt=class extends Error{constructor(t){let r;t instanceof Error?r=t.message:typeof t=="string"?r=t:r="",super(r),this.name=this.constructor.name}},xt=class extends nt{};var Dt=class extends nt{},gt=class extends nt{},Mt=class extends nt{},Rt=class extends nt{};var jt=class extends nt{},mt=class extends nt{};var De=new Uint8Array([72,80,75,69,45,118,49]),he=class extends qt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:te.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(t,r){let n=new Uint8Array(7+this._suiteId.byteLength+t.byteLength+r.byteLength);return n.set(De,0),n.set(this._suiteId,7),n.set(t,7+this._suiteId.byteLength),n.set(r,7+this._suiteId.byteLength+t.byteLength),n}buildLabeledInfo(t,r,n){let o=new Uint8Array(9+this._suiteId.byteLength+t.byteLength+r.byteLength);return o.set(new Uint8Array([0,n]),0),o.set(De,2),o.set(this._suiteId,9),o.set(t,9+this._suiteId.byteLength),o.set(r,9+this._suiteId.byteLength+t.byteLength),o}async extract(t,r){if(this.checkInit(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)throw new xt("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}async expand(t,r,n){this.checkInit();let o=await this._api.importKey("raw",t,this.algHash,!1,["sign"]),s=new ArrayBuffer(n),i=new Uint8Array(s),c=rt,a=new Uint8Array(r),h=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let u=new Uint8Array(this.hashSize+a.length+1);for(let p=1,b=0;b=c.length?(i.set(c,b),b+=c.length):(i.set(c.slice(0,i.length-b),b),b+=i.length-b);return s}async extractAndExpand(t,r,n,o){this.checkInit();let s=await this._api.importKey("raw",r,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:t,info:n},s,o*8)}async labeledExtract(t,r,n){return await this.extract(t,this.buildLabeledIkm(r,n))}async labeledExpand(t,r,n,o){return await this.expand(t,this.buildLabeledInfo(r,n,o),o)}};var Gt=class extends he{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:te.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Zt=class extends Gt{async extract(t,r){if(this.checkInit(),t.byteLength===0&&(t=new ArrayBuffer(this.hashSize)),t.byteLength!==this.hashSize)return oe(ze,new Uint8Array(t),new Uint8Array(r));let n=await this._api.importKey("raw",t,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,r)}};var on={},Me=sn(globalThis,on);function sn(e,t){return new Proxy(e,{get(r,n,o){return n in t?t[n]:e[n]},set(r,n,o){return n in t&&delete t[n],e[n]=o,!0},deleteProperty(r,n){let o=!1;return n in t&&(delete t[n],o=!0),n in e&&(delete e[n],o=!0),o},ownKeys(r){let n=Reflect.ownKeys(e),o=Reflect.ownKeys(t),s=new Set(o);return[...n.filter(i=>!s.has(i)),...o]},defineProperty(r,n,o){return n in t&&delete t[n],Reflect.defineProperty(e,n,o),!0},getOwnPropertyDescriptor(r,n){return n in t?Reflect.getOwnPropertyDescriptor(t,n):Reflect.getOwnPropertyDescriptor(e,n)},has(r,n){return n in t||n in e}})}var Re=()=>typeof Me<"u",je=()=>typeof caches<"u";var _t=e=>typeof e=="object"&&e!==null&&typeof e.privateKey=="object"&&typeof e.publicKey=="object";function Ge(e,t){if(t<=0)throw new Error("i2Osp: too small size");if(e>=256**t)throw new Error("i2Osp: too large integer");let r=new Uint8Array(t);for(let n=0;n>8;return r}function Bt(e,t){let r=new Uint8Array(e.length+t.length);return r.set(e,0),r.set(t,e.length),r}function Ze(e,t,r){let n=new Uint8Array(e.length+t.length+r.length);return n.set(e,0),n.set(t,e.length),n.set(r,e.length+t.length),n}function le(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),r=atob(t),n=new Uint8Array(r.length);for(let o=0;o8192)throw new xt("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(t)}catch(r){throw new jt(r)}}async serializePublicKey(t){await this._setup();try{return await this._prim.serializePublicKey(t)}catch(r){throw new Dt(r)}}async deserializePublicKey(t){await this._setup();try{return await this._prim.deserializePublicKey(t)}catch(r){throw new gt(r)}}async importKey(t,r,n=!0){await this._setup();try{return await this._prim.importKey(t,r,n)}catch(o){throw new gt(o)}}async encap(t){await this._setup();try{let r=t.nonEphemeralKeyPair===void 0?await this.generateKeyPair():t.nonEphemeralKeyPair,n=await this._prim.serializePublicKey(r.publicKey),o=await this._prim.serializePublicKey(t.recipientPublicKey),s;if(t.senderKey===void 0)s=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey));else{let a=_t(t.senderKey)?t.senderKey.privateKey:t.senderKey,h=new Uint8Array(await this._prim.dh(r.privateKey,t.recipientPublicKey)),u=new Uint8Array(await this._prim.dh(a,t.recipientPublicKey));s=Bt(h,u)}let i;if(t.senderKey===void 0)i=Bt(new Uint8Array(n),new Uint8Array(o));else{let a=_t(t.senderKey)?t.senderKey.publicKey:await this._prim.derivePublicKey(t.senderKey),h=await this._prim.serializePublicKey(a);i=Ze(new Uint8Array(n),new Uint8Array(o),new Uint8Array(h))}let c=await this._generateSharedSecret(s,i);return{enc:n,sharedSecret:c}}catch(r){throw new Mt(r)}}async decap(t){let r;await this._setup();try{r=await this._prim.deserializePublicKey(t.enc)}catch(n){throw new gt(n)}try{let n=_t(t.recipientKey)?t.recipientKey.privateKey:t.recipientKey,o=_t(t.recipientKey)?t.recipientKey.publicKey:await this._prim.derivePublicKey(t.recipientKey),s=await this._prim.serializePublicKey(o),i;if(t.senderPublicKey===void 0)i=new Uint8Array(await this._prim.dh(n,r));else{let a=new Uint8Array(await this._prim.dh(n,r)),h=new Uint8Array(await this._prim.dh(n,t.senderPublicKey));i=Bt(a,h)}let c;if(t.senderPublicKey===void 0)c=Bt(new Uint8Array(t.enc),new Uint8Array(s));else{let a=await this._prim.serializePublicKey(t.senderPublicKey);c=new Uint8Array(t.enc.byteLength+s.byteLength+a.byteLength),c.set(new Uint8Array(t.enc),0),c.set(new Uint8Array(s),t.enc.byteLength),c.set(new Uint8Array(a),t.enc.byteLength+s.byteLength)}return await this._generateSharedSecret(i,c)}catch(n){throw new Rt(n)}}async _setup(){if(this._api!==void 0)return;let t=await $e(),r=new Uint8Array(un);r.set(Ge(this.id,2),3),this._prim.init(t),this._kdf.init(t,r),super.init(t)}async _generateSharedSecret(t,r){let n=this._kdf.buildLabeledIkm(hn,t),o=this._kdf.buildLabeledInfo(ln,r,this.secretSize);return await this._kdf.extractAndExpand(rt,n,o,this.secretSize)}};var[Ye,Ve,We]=[[],[],[]],fn=BigInt(0),At=BigInt(1),dn=BigInt(2),pn=BigInt(7),yn=BigInt(256),bn=BigInt(113);for(let e=0,t=At,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],Ye.push(2*(5*n+r)),Ve.push((e+1)*(e+2)/2%64);let o=fn;for(let s=0;s<7;s++)t=(t<>pn)*bn)%yn,t&dn&&(o^=At<<(At<r>32?w.rotlBH(e,t,r):w.rotlSH(e,t,r),Xe=(e,t,r)=>r>32?w.rotlBL(e,t,r):w.rotlSL(e,t,r);function gn(e,t=24){let r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let i=0;i<10;i++)r[i]=e[i]^e[i+10]^e[i+20]^e[i+30]^e[i+40];for(let i=0;i<10;i+=2){let c=(i+8)%10,a=(i+2)%10,h=r[a],u=r[a+1],p=Fe(h,u,1)^r[c],b=Xe(h,u,1)^r[c+1];for(let S=0;S<50;S+=10)e[i+S]^=p,e[i+S+1]^=b}let o=e[2],s=e[3];for(let i=0;i<24;i++){let c=Ve[i],a=Fe(o,s,c),h=Xe(o,s,c),u=Ye[i];o=e[u],s=e[u+1],e[u]=a,e[u+1]=h}for(let i=0;i<50;i+=10){for(let c=0;c<10;c++)r[c]=e[i+c];for(let c=0;c<10;c++)e[i+c]^=~r[(c+2)%10]&r[(c+4)%10]}e[0]^=wn[n],e[1]^=xn[n]}r.fill(0)}var Ft=class e extends at{constructor(t,r,n,o=!1,s=24){if(super(),this.blockLen=t,this.suffix=r,this.outputLen=n,this.enableXOF=o,this.rounds=s,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,M.number(n),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=Oe(this.state)}keccak(){gn(this.state32,this.rounds),this.posOut=0,this.pos=0}update(t){M.exists(this);let{blockLen:r,state:n}=this;t=ut(t);let o=t.length;for(let s=0;s=n&&this.keccak();let i=Math.min(n-this.posOut,s-o);t.set(r.subarray(this.posOut,this.posOut+i),o),this.posOut+=i,o+=i}return t}xofInto(t){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(t)}xof(t){return M.number(t),this.xofInto(new Uint8Array(t))}digestInto(t){if(M.output(t,this),this.finished)throw new Error("digest() was already called");return this.writeInto(t),this.destroy(),t}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(t){let{blockLen:r,suffix:n,outputLen:o,rounds:s,enableXOF:i}=this;return t||(t=new e(r,n,o,i,s)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=s,t.suffix=n,t.outputLen=o,t.enableXOF=i,t.destroyed=this.destroyed,t}},ft=(e,t,r)=>Q(()=>new Ft(t,e,r)),Io=ft(6,144,224/8),ko=ft(6,136,256/8),Po=ft(6,104,384/8),Ho=ft(6,72,512/8),Ko=ft(1,144,224/8),Uo=ft(1,136,256/8),Oo=ft(1,104,384/8),To=ft(1,72,512/8),Je=(e,t,r)=>Ne((n={})=>new Ft(t,e,n.dkLen===void 0?r:n.dkLen,!0)),No=Je(31,168,128/8),fe=Je(31,136,256/8);var zo=BigInt(0),mn=BigInt(1),En=BigInt(2),Xt=e=>e instanceof Uint8Array,_n=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function Yt(e){if(!Xt(e))throw new Error("Uint8Array expected");let t="";for(let r=0;rn+o.length,0)),r=0;return e.forEach(n=>{if(!Xt(n))throw new Error("Uint8Array expected");t.set(n,r),r+=n.length}),t}var er=e=>(En<typeof e=="bigint",function:e=>typeof e=="function",boolean:e=>typeof e=="boolean",string:e=>typeof e=="string",isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>typeof e=="function"&&Number.isSafeInteger(e.outputLen)};function it(e,t,r={}){let n=(o,s,i)=>{let c=Bn[s];if(typeof c!="function")throw new Error(`Invalid validator "${s}", expected function`);let a=e[o];if(!(i&&a===void 0)&&!c(a,e))throw new Error(`Invalid param ${String(o)}=${a} (${typeof a}), expected ${s}`)};for(let[o,s]of Object.entries(t))n(o,s,!1);for(let[o,s]of Object.entries(r))n(o,s,!0);return e}var N=BigInt(0),T=BigInt(1),pt=BigInt(2),Sn=BigInt(3),ye=BigInt(4),rr=BigInt(5),nr=BigInt(8),vn=BigInt(9),Ln=BigInt(16);function K(e,t){let r=e%t;return r>=N?r:t+r}function be(e,t,r){if(r<=N||t 0");if(r===T)return N;let n=T;for(;t>N;)t&T&&(n=n*e%r),e=e*e%r,t>>=T;return n}function X(e,t,r){let n=e;for(;t-- >N;)n*=n,n%=r;return n}function or(e,t){if(e===N||t<=N)throw new Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=K(e,t),n=t,o=N,s=T,i=T,c=N;for(;r!==N;){let h=n/r,u=n%r,p=o-i*h,b=s-c*h;n=r,r=u,o=i,s=c,i=p,c=b}if(n!==T)throw new Error("invert: does not exist");return K(o,t)}function In(e){let t=(e-T)/pt,r,n,o;for(r=e-T,n=0;r%pt===N;r/=pt,n++);for(o=pt;o(n[o]="function",n),t);return it(e,r)}function Hn(e,t,r){if(r 0");if(r===N)return e.ONE;if(r===T)return t;let n=e.ONE,o=t;for(;r>N;)r&T&&(n=e.mul(n,o)),o=e.sqr(o),r>>=T;return n}function Kn(e,t){let r=new Array(t.length),n=t.reduce((s,i,c)=>e.is0(i)?s:(r[c]=s,e.mul(s,i)),e.ONE),o=e.inv(n);return t.reduceRight((s,i,c)=>e.is0(i)?s:(r[c]=e.mul(s,r[c]),e.mul(s,i)),o),r}function we(e,t){let r=t!==void 0?t:e.toString(2).length,n=Math.ceil(r/8);return{nBitLength:r,nByteLength:n}}function sr(e,t,r=!1,n={}){if(e<=N)throw new Error(`Expected Fp ORDER > 0, got ${e}`);let{nBitLength:o,nByteLength:s}=we(e,t);if(s>2048)throw new Error("Field lengths over 2048 bytes are not supported");let i=kn(e),c=Object.freeze({ORDER:e,BITS:o,BYTES:s,MASK:er(o),ZERO:N,ONE:T,create:a=>K(a,e),isValid:a=>{if(typeof a!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof a}`);return N<=a&&aa===N,isOdd:a=>(a&T)===T,neg:a=>K(-a,e),eql:(a,h)=>a===h,sqr:a=>K(a*a,e),add:(a,h)=>K(a+h,e),sub:(a,h)=>K(a-h,e),mul:(a,h)=>K(a*h,e),pow:(a,h)=>Hn(c,a,h),div:(a,h)=>K(a*or(h,e),e),sqrN:a=>a*a,addN:(a,h)=>a+h,subN:(a,h)=>a-h,mulN:(a,h)=>a*h,inv:a=>or(a,e),sqrt:n.sqrt||(a=>i(c,a)),invertBatch:a=>Kn(c,a),cmov:(a,h,u)=>u?h:a,toBytes:a=>r?dt(a,s):pe(a,s),fromBytes:a=>{if(a.length!==s)throw new Error(`Fp.fromBytes: expected ${s}, got ${a.length}`);return r?ot(a):de(a)}});return Object.freeze(c)}var Un=BigInt(0),xe=BigInt(1);function cr(e,t){let r=(o,s)=>{let i=s.negate();return o?i:s},n=o=>{let s=Math.ceil(t/o)+1,i=2**(o-1);return{windows:s,windowSize:i}};return{constTimeNegate:r,unsafeLadder(o,s){let i=e.ZERO,c=o;for(;s>Un;)s&xe&&(i=i.add(c)),c=c.double(),s>>=xe;return i},precomputeWindow(o,s){let{windows:i,windowSize:c}=n(s),a=[],h=o,u=h;for(let p=0;p>=S,_>a&&(_-=b,i+=xe);let C=k,R=k+Math.abs(_)-1,f=L%2!==0,m=_<0;_===0?u=u.add(r(f,s[C])):h=h.add(r(m,s[R]))}return{p:h,f:u}},wNAFCached(o,s,i,c){let a=o._WINDOW_SIZE||1,h=s.get(o);return h||(h=this.precomputeWindow(o,a),a!==1&&s.set(o,c(h))),this.wNAF(a,h,i)}}}function ar(e){return ir(e.Fp),it(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...we(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}var W=BigInt(0),Y=BigInt(1),Wt=BigInt(2),On=BigInt(8),Tn={zip215:!0};function Nn(e){let t=ar(e);return it(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}function ge(e){let t=Nn(e),{Fp:r,n,prehash:o,hash:s,randomBytes:i,nByteLength:c,h:a}=t,h=Wt<{try{return{isValid:!0,value:r.sqrt(d*r.inv(l))}}catch{return{isValid:!1,value:W}}}),b=t.adjustScalarBytes||(d=>d),S=t.domain||((d,l,y)=>{if(l.length||y)throw new Error("Contexts/pre-hash are not supported");return d}),L=d=>typeof d=="bigint"&&WL(d)&&L(l)&&dd===W||k(d,h);function C(d,l){if(k(d,l))return d;throw new Error(`Expected valid scalar < ${l}, got ${typeof d} ${d}`)}function R(d){return d===W?d:C(d,n)}let f=new Map;function m(d){if(!(d instanceof x))throw new Error("ExtendedPoint expected")}class x{constructor(l,y,g,E){if(this.ex=l,this.ey=y,this.ez=g,this.et=E,!_(l))throw new Error("x required");if(!_(y))throw new Error("y required");if(!_(g))throw new Error("z required");if(!_(E))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof x)throw new Error("extended point not allowed");let{x:y,y:g}=l||{};if(!_(y)||!_(g))throw new Error("invalid affine point");return new x(y,g,Y,u(y*g))}static normalizeZ(l){let y=r.invertBatch(l.map(g=>g.ez));return l.map((g,E)=>g.toAffine(y[E])).map(x.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,f.delete(this)}assertValidity(){let{a:l,d:y}=t;if(this.is0())throw new Error("bad point: ZERO");let{ex:g,ey:E,ez:B,et:v}=this,P=u(g*g),A=u(E*E),I=u(B*B),D=u(I*I),G=u(P*l),J=u(I*u(G+A)),Z=u(D+u(y*u(P*A)));if(J!==Z)throw new Error("bad point: equation left != right (1)");let ct=u(g*E),et=u(B*v);if(ct!==et)throw new Error("bad point: equation left != right (2)")}equals(l){m(l);let{ex:y,ey:g,ez:E}=this,{ex:B,ey:v,ez:P}=l,A=u(y*P),I=u(B*E),D=u(g*P),G=u(v*E);return A===I&&D===G}is0(){return this.equals(x.ZERO)}negate(){return new x(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){let{a:l}=t,{ex:y,ey:g,ez:E}=this,B=u(y*y),v=u(g*g),P=u(Wt*u(E*E)),A=u(l*B),I=y+g,D=u(u(I*I)-B-v),G=A+v,J=G-P,Z=A-v,ct=u(D*J),et=u(G*Z),Pt=u(D*Z),Ht=u(J*G);return new x(ct,et,Ht,Pt)}add(l){m(l);let{a:y,d:g}=t,{ex:E,ey:B,ez:v,et:P}=this,{ex:A,ey:I,ez:D,et:G}=l;if(y===BigInt(-1)){let Se=u((B-E)*(I+A)),ve=u((B+E)*(I-A)),Qt=u(ve-Se);if(Qt===W)return this.double();let Le=u(v*Wt*G),Ie=u(P*Wt*D),ke=Ie+Le,Pe=ve+Se,He=Ie-Le,Er=u(ke*Qt),_r=u(Pe*He),Br=u(ke*He),Ar=u(Qt*Pe);return new x(Er,_r,Ar,Br)}let J=u(E*A),Z=u(B*I),ct=u(P*g*G),et=u(v*D),Pt=u((E+B)*(A+I)-J-Z),Ht=et-ct,Be=et+ct,Ae=u(Z-y*J),wr=u(Pt*Ht),xr=u(Be*Ae),gr=u(Pt*Ae),mr=u(Ht*Be);return new x(wr,xr,mr,gr)}subtract(l){return this.add(l.negate())}wNAF(l){return H.wNAFCached(this,f,l,x.normalizeZ)}multiply(l){let{p:y,f:g}=this.wNAF(C(l,n));return x.normalizeZ([y,g])[0]}multiplyUnsafe(l){let y=R(l);return y===W?V:this.equals(V)||y===Y?this:this.equals(z)?this.wNAF(y).p:H.unsafeLadder(this,y)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}isTorsionFree(){return H.unsafeLadder(this,n).is0()}toAffine(l){let{ex:y,ey:g,ez:E}=this,B=this.is0();l==null&&(l=B?On:r.inv(E));let v=u(y*l),P=u(g*l),A=u(E*l);if(B)return{x:W,y:Y};if(A!==Y)throw new Error("invZ was invalid");return{x:v,y:P}}clearCofactor(){let{h:l}=t;return l===Y?this:this.multiplyUnsafe(l)}static fromHex(l,y=!1){let{d:g,a:E}=t,B=r.BYTES;l=F("pointHex",l,B);let v=l.slice(),P=l[B-1];v[B-1]=P&-129;let A=ot(v);A===W||(y?C(A,h):C(A,r.ORDER));let I=u(A*A),D=u(I-Y),G=u(g*I-E),{isValid:J,value:Z}=p(D,G);if(!J)throw new Error("Point.fromHex: invalid y coordinate");let ct=(Z&Y)===Y,et=(P&128)!==0;if(!y&&Z===W&&et)throw new Error("Point.fromHex: x=0 and x_0=1");return et!==ct&&(Z=u(-Z)),x.fromAffine({x:Z,y:A})}static fromPrivateKey(l){return q(l).point}toRawBytes(){let{x:l,y}=this.toAffine(),g=dt(y,r.BYTES);return g[g.length-1]|=l&Y?128:0,g}toHex(){return Yt(this.toRawBytes())}}x.BASE=new x(t.Gx,t.Gy,Y,u(t.Gx*t.Gy)),x.ZERO=new x(W,Y,Y,W);let{BASE:z,ZERO:V}=x,H=cr(x,c*8);function U(d){return K(d,n)}function j(d){return U(ot(d))}function q(d){let l=c;d=F("private key",d,l);let y=F("hashed private key",s(d),2*l),g=b(y.slice(0,l)),E=y.slice(l,2*l),B=j(g),v=z.multiply(B),P=v.toRawBytes();return{head:g,prefix:E,scalar:B,point:v,pointBytes:P}}function $(d){return q(d).pointBytes}function O(d=new Uint8Array,...l){let y=Vt(...l);return j(s(S(y,F("context",d),!!o)))}function Et(d,l,y={}){d=F("message",d),o&&(d=o(d));let{prefix:g,scalar:E,pointBytes:B}=q(l),v=O(y.context,g,d),P=z.multiply(v).toRawBytes(),A=O(y.context,P,B,d),I=U(v+A*E);R(I);let D=Vt(P,dt(I,r.BYTES));return F("result",D,c*2)}let st=Tn;function It(d,l,y,g=st){let{context:E,zip215:B}=g,v=r.BYTES;d=F("signature",d,2*v),l=F("message",l),o&&(l=o(l));let P=ot(d.slice(v,2*v)),A,I,D;try{A=x.fromHex(y,B),I=x.fromHex(d.slice(0,v),B),D=z.multiplyUnsafe(P)}catch{return!1}if(!B&&A.isSmallOrder())return!1;let G=O(E,I.toRawBytes(),A.toRawBytes(),l);return I.add(A.multiplyUnsafe(G)).subtract(D).clearCofactor().equals(x.ZERO)}return z._setWindowSize(8),{CURVE:t,getPublicKey:$,sign:Et,verify:It,ExtendedPoint:x,utils:{getExtendedPublicKey:q,randomPrivateKey:()=>i(r.BYTES),precompute(d=8,l=x.BASE){return l._setWindowSize(d),l.multiply(BigInt(3)),l}}}}var St=BigInt(0),me=BigInt(1);function Cn(e){return it(e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...e})}function ur(e){let t=Cn(e),{P:r}=t,n=f=>K(f,r),o=t.montgomeryBits,s=Math.ceil(o/8),i=t.nByteLength,c=t.adjustScalarBytes||(f=>f),a=t.powPminus2||(f=>be(f,r-BigInt(2),r));function h(f,m,x){let z=n(f*(m-x));return m=n(m-z),x=n(x+z),[m,x]}function u(f){if(typeof f=="bigint"&&St<=f&&f=St;st--){let It=z>>st&me;$^=It,O=h($,H,j),H=O[0],j=O[1],O=h($,U,q),U=O[0],q=O[1],$=It;let kt=H+U,d=n(kt*kt),l=H-U,y=n(l*l),g=d-y,E=j+q,B=j-q,v=n(B*kt),P=n(E*l),A=v+P,I=v-P;j=n(A*A),q=n(V*n(I*I)),H=n(d*y),U=n(g*(d+n(p*g)))}O=h($,H,j),H=O[0],j=O[1],O=h($,U,q),U=O[0],q=O[1];let Et=a(U);return n(H*Et)}function S(f){return dt(n(f),s)}function L(f){let m=F("u coordinate",f,s);return i===s&&(m[i-1]&=127),ot(m)}function k(f){let m=F("scalar",f);if(m.length!==s&&m.length!==i)throw new Error(`Expected ${s} or ${i} bytes, got ${m.length}`);return ot(c(m))}function _(f,m){let x=L(m),z=k(f),V=b(x,z);if(V===St)throw new Error("Invalid private or public key received");return S(V)}let C=S(t.Gu);function R(f){return _(f,C)}return{scalarMult:_,scalarMultBase:R,getSharedSecret:(f,m)=>_(f,m),getPublicKey:f=>R(f),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:C}}var zn=Q(()=>fe.create({dkLen:114})),qn=Q(()=>fe.create({dkLen:64})),vt=BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439");function hr(e){let t=vt,r=BigInt(1),n=BigInt(2),o=BigInt(3),s=BigInt(11),i=BigInt(22),c=BigInt(44),a=BigInt(88),h=BigInt(223),u=e*e*e%t,p=u*u*e%t,b=X(p,o,t)*p%t,S=X(b,o,t)*p%t,L=X(S,n,t)*u%t,k=X(L,s,t)*L%t,_=X(k,i,t)*k%t,C=X(_,c,t)*_%t,R=X(C,a,t)*C%t,f=X(R,c,t)*_%t,m=X(f,n,t)*u%t,x=X(m,r,t)*e%t;return X(x,h,t)*m%t}function lr(e){return e[0]&=252,e[55]|=128,e[56]=0,e}var fr=sr(vt,456,!0),ai=BigInt(4),dr={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:fr,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:zn,randomBytes:ne,adjustScalarBytes:lr,domain:(e,t,r)=>{if(t.length>255)throw new Error(`Context is too big: ${t.length}`);return Te(re("SigEd448"),new Uint8Array([r?1:0,t.length]),t,e)},uvRatio:(e,t)=>{let r=vt,n=K(e*e*t,r),o=K(n*e,r),s=K(o*n*t,r),i=hr(s),c=K(o*i,r),a=K(c*c,r);return{isValid:K(a*t,r)===e,value:c}}},pr=ge(dr),ui=ge({...dr,prehash:qn}),Ee=(()=>ur({a:BigInt(156326),montgomeryBits:448,nByteLength:57,P:vt,Gu:BigInt(5),powPminus2:e=>{let t=vt,r=hr(e),n=X(r,BigInt(2),t);return K(n*e,t)},adjustScalarBytes:lr,randomBytes:ne}))();var hi=(fr.ORDER-BigInt(3))/BigInt(4),li=BigInt(156326);var Lt=["deriveBits"],yr=new Uint8Array([100,107,112,95,112,114,107]),br=new Uint8Array([115,107]);var tt=class{constructor(t,r,n,o=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=r,this.type=n,this.algorithm={name:t},this.usages=o,n==="public"&&(this.usages=[])}};var yt="X448",Jt=class extends wt{constructor(t){super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,this._nPk=56,this._nSk=56}async serializePublicKey(t){return await this._serializePublicKey(t)}async deserializePublicKey(t){return await this._deserializePublicKey(t)}async importKey(t,r,n){if(t==="raw")return await this._importRawKey(r,n);if(r instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(r,n)}async derivePublicKey(t){return await this._derivePublicKey(t)}async generateKeyPair(){let t=pr.utils.randomPrivateKey(),r=new tt(yt,t,"private",Lt);return{publicKey:await this.derivePublicKey(r),privateKey:r}}async deriveKeyPair(t){let r=await this._hkdf.labeledExtract(rt,yr,new Uint8Array(t)),n=await this._hkdf.labeledExpand(r,br,rt,this._nSk),o=new tt(yt,new Uint8Array(n),"private",Lt);return{privateKey:o,publicKey:await this.derivePublicKey(o)}}async dh(t,r){return await this._dh(t,r)}_serializePublicKey(t){return new Promise(r=>{r(t.key.buffer)})}_deserializePublicKey(t){return new Promise((r,n)=>{t.byteLength!==this._nPk?n(new Error("Invalid public key for the ciphersuite")):r(new tt(yt,new Uint8Array(t),"public"))})}_importRawKey(t,r){return new Promise((n,o)=>{r&&t.byteLength!==this._nPk&&o(new Error("Invalid public key for the ciphersuite")),!r&&t.byteLength!==this._nSk&&o(new Error("Invalid private key for the ciphersuite")),n(new tt(yt,new Uint8Array(t),r?"public":"private",r?[]:Lt))})}_importJWK(t,r){return new Promise((n,o)=>{t.kty!=="OKP"&&o(new Error(`Invalid kty: ${t.kty}`)),t.crv!=="X448"&&o(new Error(`Invalid crv: ${t.crv}`)),r?(typeof t.d<"u"&&o(new Error("Invalid key: `d` should not be set")),typeof t.x!="string"&&o(new Error("Invalid key: `x` not found")),n(new tt(yt,le(t.x),"public"))):(typeof t.d!="string"&&o(new Error("Invalid key: `d` not found")),n(new tt(yt,le(t.d),"private",Lt)))})}_derivePublicKey(t){return new Promise(r=>{let n=Ee.getPublicKey(t.key);r(new tt(yt,n,"public"))})}_dh(t,r){return new Promise((n,o)=>{try{n(Ee.getSharedSecret(t.key,r.key).buffer)}catch(s){o(s)}})}};var _e=class extends $t{constructor(){let t=new Zt,r=new Jt(t);super(r,t),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:Kt.DhkemX448HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56})}};export{_e as DhkemX448HkdfSha512}; /*! Bundled license information: @noble/hashes/esm/utils.js: diff --git a/docs/assets/search.js b/docs/assets/search.js index 59f1b1826..7c7cea869 100644 --- a/docs/assets/search.js +++ b/docs/assets/search.js @@ -1 +1 @@ -window.searchData = JSON.parse("{\"rows\":[{\"kind\":256,\"name\":\"AeadEncryptionContext\",\"url\":\"interfaces/AeadEncryptionContext.html\",\"classes\":\"\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/AeadEncryptionContext.html#seal\",\"classes\":\"\",\"parent\":\"AeadEncryptionContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/AeadEncryptionContext.html#open\",\"classes\":\"\",\"parent\":\"AeadEncryptionContext\"},{\"kind\":256,\"name\":\"AeadInterface\",\"url\":\"interfaces/AeadInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/AeadInterface.html#id\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"keySize\",\"url\":\"interfaces/AeadInterface.html#keySize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"nonceSize\",\"url\":\"interfaces/AeadInterface.html#nonceSize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"tagSize\",\"url\":\"interfaces/AeadInterface.html#tagSize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"interfaces/AeadInterface.html#init\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":2048,\"name\":\"createEncryptionContext\",\"url\":\"interfaces/AeadInterface.html#createEncryptionContext\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":256,\"name\":\"CipherSuiteParams\",\"url\":\"interfaces/CipherSuiteParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"kem\",\"url\":\"interfaces/CipherSuiteParams.html#kem\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":1024,\"name\":\"kdf\",\"url\":\"interfaces/CipherSuiteParams.html#kdf\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":1024,\"name\":\"aead\",\"url\":\"interfaces/CipherSuiteParams.html#aead\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":256,\"name\":\"KdfInterface\",\"url\":\"interfaces/KdfInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/KdfInterface.html#id\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":1024,\"name\":\"hashSize\",\"url\":\"interfaces/KdfInterface.html#hashSize\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"interfaces/KdfInterface.html#init\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"buildLabeledIkm\",\"url\":\"interfaces/KdfInterface.html#buildLabeledIkm\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"buildLabeledInfo\",\"url\":\"interfaces/KdfInterface.html#buildLabeledInfo\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"extract\",\"url\":\"interfaces/KdfInterface.html#extract\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"expand\",\"url\":\"interfaces/KdfInterface.html#expand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"extractAndExpand\",\"url\":\"interfaces/KdfInterface.html#extractAndExpand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"labeledExtract\",\"url\":\"interfaces/KdfInterface.html#labeledExtract\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"labeledExpand\",\"url\":\"interfaces/KdfInterface.html#labeledExpand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":256,\"name\":\"KemInterface\",\"url\":\"interfaces/KemInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/KemInterface.html#id\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"secretSize\",\"url\":\"interfaces/KemInterface.html#secretSize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"encSize\",\"url\":\"interfaces/KemInterface.html#encSize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"publicKeySize\",\"url\":\"interfaces/KemInterface.html#publicKeySize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"privateKeySize\",\"url\":\"interfaces/KemInterface.html#privateKeySize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"interfaces/KemInterface.html#init\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"interfaces/KemInterface.html#generateKeyPair\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"interfaces/KemInterface.html#deriveKeyPair\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"serializePublicKey\",\"url\":\"interfaces/KemInterface.html#serializePublicKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"deserializePublicKey\",\"url\":\"interfaces/KemInterface.html#deserializePublicKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"interfaces/KemInterface.html#importKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"encap\",\"url\":\"interfaces/KemInterface.html#encap\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"decap\",\"url\":\"interfaces/KemInterface.html#decap\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":256,\"name\":\"EncryptionContext\",\"url\":\"interfaces/EncryptionContext.html\",\"classes\":\"\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/EncryptionContext.html#seal\",\"classes\":\"\",\"parent\":\"EncryptionContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/EncryptionContext.html#open\",\"classes\":\"\",\"parent\":\"EncryptionContext\"},{\"kind\":2048,\"name\":\"export\",\"url\":\"interfaces/EncryptionContext.html#export\",\"classes\":\"tsd-is-inherited\",\"parent\":\"EncryptionContext\"},{\"kind\":4194304,\"name\":\"RecipientContext\",\"url\":\"types/RecipientContext.html\",\"classes\":\"\"},{\"kind\":256,\"name\":\"SenderContext\",\"url\":\"interfaces/SenderContext.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/SenderContext.html#enc\",\"classes\":\"\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/SenderContext.html#seal\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/SenderContext.html#open\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"export\",\"url\":\"interfaces/SenderContext.html#export\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":256,\"name\":\"PreSharedKey\",\"url\":\"interfaces/PreSharedKey.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/PreSharedKey.html#id\",\"classes\":\"\",\"parent\":\"PreSharedKey\"},{\"kind\":1024,\"name\":\"key\",\"url\":\"interfaces/PreSharedKey.html#key\",\"classes\":\"\",\"parent\":\"PreSharedKey\"},{\"kind\":256,\"name\":\"RecipientContextParams\",\"url\":\"interfaces/RecipientContextParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"recipientKey\",\"url\":\"interfaces/RecipientContextParams.html#recipientKey\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/RecipientContextParams.html#enc\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"senderPublicKey\",\"url\":\"interfaces/RecipientContextParams.html#senderPublicKey\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"info\",\"url\":\"interfaces/RecipientContextParams.html#info\",\"classes\":\"tsd-is-inherited\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"psk\",\"url\":\"interfaces/RecipientContextParams.html#psk\",\"classes\":\"tsd-is-inherited\",\"parent\":\"RecipientContextParams\"},{\"kind\":256,\"name\":\"CipherSuiteSealResponse\",\"url\":\"interfaces/CipherSuiteSealResponse.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"ct\",\"url\":\"interfaces/CipherSuiteSealResponse.html#ct\",\"classes\":\"\",\"parent\":\"CipherSuiteSealResponse\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/CipherSuiteSealResponse.html#enc\",\"classes\":\"\",\"parent\":\"CipherSuiteSealResponse\"},{\"kind\":256,\"name\":\"SenderContextParams\",\"url\":\"interfaces/SenderContextParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"recipientPublicKey\",\"url\":\"interfaces/SenderContextParams.html#recipientPublicKey\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"senderKey\",\"url\":\"interfaces/SenderContextParams.html#senderKey\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"nonEphemeralKeyPair\",\"url\":\"interfaces/SenderContextParams.html#nonEphemeralKeyPair\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"info\",\"url\":\"interfaces/SenderContextParams.html#info\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"psk\",\"url\":\"interfaces/SenderContextParams.html#psk\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContextParams\"},{\"kind\":32,\"name\":\"Aead\",\"url\":\"variables/Aead-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/Aead-1.html#__type\",\"classes\":\"\",\"parent\":\"Aead\"},{\"kind\":1024,\"name\":\"Aes128Gcm\",\"url\":\"variables/Aead-1.html#__type.Aes128Gcm\",\"classes\":\"\",\"parent\":\"Aead.__type\"},{\"kind\":1024,\"name\":\"Aes256Gcm\",\"url\":\"variables/Aead-1.html#__type.Aes256Gcm\",\"classes\":\"\",\"parent\":\"Aead.__type\"},{\"kind\":1024,\"name\":\"Chacha20Poly1305\",\"url\":\"variables/Aead-1.html#__type.Chacha20Poly1305\",\"classes\":\"\",\"parent\":\"Aead.__type\"},{\"kind\":1024,\"name\":\"ExportOnly\",\"url\":\"variables/Aead-1.html#__type.ExportOnly\",\"classes\":\"\",\"parent\":\"Aead.__type\"},{\"kind\":4194304,\"name\":\"Aead\",\"url\":\"types/Aead.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"AeadId\",\"url\":\"variables/AeadId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/AeadId-1.html#__type\",\"classes\":\"\",\"parent\":\"AeadId\"},{\"kind\":1024,\"name\":\"Aes128Gcm\",\"url\":\"variables/AeadId-1.html#__type.Aes128Gcm\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"Aes256Gcm\",\"url\":\"variables/AeadId-1.html#__type.Aes256Gcm\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"Chacha20Poly1305\",\"url\":\"variables/AeadId-1.html#__type.Chacha20Poly1305\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"ExportOnly\",\"url\":\"variables/AeadId-1.html#__type.ExportOnly\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":4194304,\"name\":\"AeadId\",\"url\":\"types/AeadId.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"Kdf\",\"url\":\"variables/Kdf-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/Kdf-1.html#__type\",\"classes\":\"\",\"parent\":\"Kdf\"},{\"kind\":1024,\"name\":\"HkdfSha256\",\"url\":\"variables/Kdf-1.html#__type.HkdfSha256\",\"classes\":\"\",\"parent\":\"Kdf.__type\"},{\"kind\":1024,\"name\":\"HkdfSha384\",\"url\":\"variables/Kdf-1.html#__type.HkdfSha384\",\"classes\":\"\",\"parent\":\"Kdf.__type\"},{\"kind\":1024,\"name\":\"HkdfSha512\",\"url\":\"variables/Kdf-1.html#__type.HkdfSha512\",\"classes\":\"\",\"parent\":\"Kdf.__type\"},{\"kind\":4194304,\"name\":\"Kdf\",\"url\":\"types/Kdf.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"KdfId\",\"url\":\"variables/KdfId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/KdfId-1.html#__type\",\"classes\":\"\",\"parent\":\"KdfId\"},{\"kind\":1024,\"name\":\"HkdfSha256\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha256\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":1024,\"name\":\"HkdfSha384\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha384\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":1024,\"name\":\"HkdfSha512\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha512\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":4194304,\"name\":\"KdfId\",\"url\":\"types/KdfId.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"Kem\",\"url\":\"variables/Kem-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/Kem-1.html#__type\",\"classes\":\"\",\"parent\":\"Kem\"},{\"kind\":1024,\"name\":\"DhkemP256HkdfSha256\",\"url\":\"variables/Kem-1.html#__type.DhkemP256HkdfSha256\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":1024,\"name\":\"DhkemP384HkdfSha384\",\"url\":\"variables/Kem-1.html#__type.DhkemP384HkdfSha384\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":1024,\"name\":\"DhkemP521HkdfSha512\",\"url\":\"variables/Kem-1.html#__type.DhkemP521HkdfSha512\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":1024,\"name\":\"DhkemSecp256k1HkdfSha256\",\"url\":\"variables/Kem-1.html#__type.DhkemSecp256k1HkdfSha256\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":1024,\"name\":\"DhkemX25519HkdfSha256\",\"url\":\"variables/Kem-1.html#__type.DhkemX25519HkdfSha256\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":1024,\"name\":\"DhkemX448HkdfSha512\",\"url\":\"variables/Kem-1.html#__type.DhkemX448HkdfSha512\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":4194304,\"name\":\"Kem\",\"url\":\"types/Kem.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"KemId\",\"url\":\"variables/KemId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/KemId-1.html#__type\",\"classes\":\"\",\"parent\":\"KemId\"},{\"kind\":1024,\"name\":\"DhkemP256HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemP256HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemP384HkdfSha384\",\"url\":\"variables/KemId-1.html#__type.DhkemP384HkdfSha384\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemP521HkdfSha512\",\"url\":\"variables/KemId-1.html#__type.DhkemP521HkdfSha512\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemSecp256k1HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemSecp256k1HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemX25519HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemX25519HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemX448HkdfSha512\",\"url\":\"variables/KemId-1.html#__type.DhkemX448HkdfSha512\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":4194304,\"name\":\"KemId\",\"url\":\"types/KemId.html\",\"classes\":\"\"},{\"kind\":128,\"name\":\"CipherSuite\",\"url\":\"classes/CipherSuite.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/CipherSuite.html#constructor\",\"classes\":\"\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"kem\",\"url\":\"classes/CipherSuite.html#kem\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"kdf\",\"url\":\"classes/CipherSuite.html#kdf\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"aead\",\"url\":\"classes/CipherSuite.html#aead\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/CipherSuite.html#generateKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/CipherSuite.html#deriveKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/CipherSuite.html#importKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"createSenderContext\",\"url\":\"classes/CipherSuite.html#createSenderContext\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"createRecipientContext\",\"url\":\"classes/CipherSuite.html#createRecipientContext\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"classes/CipherSuite.html#seal\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"classes/CipherSuite.html#open\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":128,\"name\":\"CipherSuiteNative\",\"url\":\"classes/CipherSuiteNative.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/CipherSuiteNative.html#constructor\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":1024,\"name\":\"_api\",\"url\":\"classes/CipherSuiteNative.html#_api\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":1024,\"name\":\"_kem\",\"url\":\"classes/CipherSuiteNative.html#_kem\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":1024,\"name\":\"_kdf\",\"url\":\"classes/CipherSuiteNative.html#_kdf\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":1024,\"name\":\"_aead\",\"url\":\"classes/CipherSuiteNative.html#_aead\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":1024,\"name\":\"_suiteId\",\"url\":\"classes/CipherSuiteNative.html#_suiteId\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":262144,\"name\":\"kem\",\"url\":\"classes/CipherSuiteNative.html#kem\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":262144,\"name\":\"kdf\",\"url\":\"classes/CipherSuiteNative.html#kdf\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":262144,\"name\":\"aead\",\"url\":\"classes/CipherSuiteNative.html#aead\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/CipherSuiteNative.html#generateKeyPair\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/CipherSuiteNative.html#deriveKeyPair\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/CipherSuiteNative.html#importKey\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"createSenderContext\",\"url\":\"classes/CipherSuiteNative.html#createSenderContext\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"createRecipientContext\",\"url\":\"classes/CipherSuiteNative.html#createRecipientContext\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"classes/CipherSuiteNative.html#seal\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"classes/CipherSuiteNative.html#open\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"_setup\",\"url\":\"classes/CipherSuiteNative.html#_setup\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"_keySchedule\",\"url\":\"classes/CipherSuiteNative.html#_keySchedule\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"_keyScheduleS\",\"url\":\"classes/CipherSuiteNative.html#_keyScheduleS\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"_keyScheduleR\",\"url\":\"classes/CipherSuiteNative.html#_keyScheduleR\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"_validateInputLength\",\"url\":\"classes/CipherSuiteNative.html#_validateInputLength\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":128,\"name\":\"HpkeError\",\"url\":\"classes/HpkeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/HpkeError.html#constructor\",\"classes\":\"\",\"parent\":\"HpkeError\"},{\"kind\":128,\"name\":\"InvalidParamError\",\"url\":\"classes/InvalidParamError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/InvalidParamError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"InvalidParamError\"},{\"kind\":128,\"name\":\"ValidationError\",\"url\":\"classes/ValidationError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/ValidationError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"ValidationError\"},{\"kind\":128,\"name\":\"SerializeError\",\"url\":\"classes/SerializeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/SerializeError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SerializeError\"},{\"kind\":128,\"name\":\"DeserializeError\",\"url\":\"classes/DeserializeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DeserializeError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DeserializeError\"},{\"kind\":128,\"name\":\"EncapError\",\"url\":\"classes/EncapError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/EncapError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"EncapError\"},{\"kind\":128,\"name\":\"DecapError\",\"url\":\"classes/DecapError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DecapError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DecapError\"},{\"kind\":128,\"name\":\"ExportError\",\"url\":\"classes/ExportError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/ExportError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"ExportError\"},{\"kind\":128,\"name\":\"SealError\",\"url\":\"classes/SealError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/SealError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SealError\"},{\"kind\":128,\"name\":\"OpenError\",\"url\":\"classes/OpenError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/OpenError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"OpenError\"},{\"kind\":128,\"name\":\"MessageLimitReachedError\",\"url\":\"classes/MessageLimitReachedError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/MessageLimitReachedError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"MessageLimitReachedError\"},{\"kind\":128,\"name\":\"DeriveKeyPairError\",\"url\":\"classes/DeriveKeyPairError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DeriveKeyPairError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DeriveKeyPairError\"},{\"kind\":128,\"name\":\"NotSupportedError\",\"url\":\"classes/NotSupportedError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/NotSupportedError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"NotSupportedError\"}],\"index\":{\"version\":\"2.3.9\",\"fields\":[\"name\",\"comment\"],\"fieldVectors\":[[\"name/0\",[0,47.42]],[\"comment/0\",[]],[\"name/1\",[1,34.427]],[\"comment/1\",[]],[\"name/2\",[2,34.427]],[\"comment/2\",[]],[\"name/3\",[3,47.42]],[\"comment/3\",[]],[\"name/4\",[4,36.434]],[\"comment/4\",[]],[\"name/5\",[5,47.42]],[\"comment/5\",[]],[\"name/6\",[6,47.42]],[\"comment/6\",[]],[\"name/7\",[7,47.42]],[\"comment/7\",[]],[\"name/8\",[8,38.947]],[\"comment/8\",[]],[\"name/9\",[9,47.42]],[\"comment/9\",[]],[\"name/10\",[10,47.42]],[\"comment/10\",[]],[\"name/11\",[11,34.427]],[\"comment/11\",[]],[\"name/12\",[12,34.427]],[\"comment/12\",[]],[\"name/13\",[13,34.427]],[\"comment/13\",[]],[\"name/14\",[14,47.42]],[\"comment/14\",[]],[\"name/15\",[4,36.434]],[\"comment/15\",[]],[\"name/16\",[15,47.42]],[\"comment/16\",[]],[\"name/17\",[8,38.947]],[\"comment/17\",[]],[\"name/18\",[16,47.42]],[\"comment/18\",[]],[\"name/19\",[17,47.42]],[\"comment/19\",[]],[\"name/20\",[18,47.42]],[\"comment/20\",[]],[\"name/21\",[19,47.42]],[\"comment/21\",[]],[\"name/22\",[20,47.42]],[\"comment/22\",[]],[\"name/23\",[21,47.42]],[\"comment/23\",[]],[\"name/24\",[22,47.42]],[\"comment/24\",[]],[\"name/25\",[23,47.42]],[\"comment/25\",[]],[\"name/26\",[4,36.434]],[\"comment/26\",[]],[\"name/27\",[24,47.42]],[\"comment/27\",[]],[\"name/28\",[25,47.42]],[\"comment/28\",[]],[\"name/29\",[26,47.42]],[\"comment/29\",[]],[\"name/30\",[27,47.42]],[\"comment/30\",[]],[\"name/31\",[8,38.947]],[\"comment/31\",[]],[\"name/32\",[28,38.947]],[\"comment/32\",[]],[\"name/33\",[29,38.947]],[\"comment/33\",[]],[\"name/34\",[30,47.42]],[\"comment/34\",[]],[\"name/35\",[31,47.42]],[\"comment/35\",[]],[\"name/36\",[32,38.947]],[\"comment/36\",[]],[\"name/37\",[33,47.42]],[\"comment/37\",[]],[\"name/38\",[34,47.42]],[\"comment/38\",[]],[\"name/39\",[35,47.42]],[\"comment/39\",[]],[\"name/40\",[1,34.427]],[\"comment/40\",[]],[\"name/41\",[2,34.427]],[\"comment/41\",[]],[\"name/42\",[36,42.312]],[\"comment/42\",[]],[\"name/43\",[37,47.42]],[\"comment/43\",[]],[\"name/44\",[38,47.42]],[\"comment/44\",[]],[\"name/45\",[39,38.947]],[\"comment/45\",[]],[\"name/46\",[1,34.427]],[\"comment/46\",[]],[\"name/47\",[2,34.427]],[\"comment/47\",[]],[\"name/48\",[36,42.312]],[\"comment/48\",[]],[\"name/49\",[40,47.42]],[\"comment/49\",[]],[\"name/50\",[4,36.434]],[\"comment/50\",[]],[\"name/51\",[41,47.42]],[\"comment/51\",[]],[\"name/52\",[42,47.42]],[\"comment/52\",[]],[\"name/53\",[43,47.42]],[\"comment/53\",[]],[\"name/54\",[39,38.947]],[\"comment/54\",[]],[\"name/55\",[44,47.42]],[\"comment/55\",[]],[\"name/56\",[45,42.312]],[\"comment/56\",[]],[\"name/57\",[46,42.312]],[\"comment/57\",[]],[\"name/58\",[47,47.42]],[\"comment/58\",[]],[\"name/59\",[48,47.42]],[\"comment/59\",[]],[\"name/60\",[39,38.947]],[\"comment/60\",[]],[\"name/61\",[49,47.42]],[\"comment/61\",[]],[\"name/62\",[50,47.42]],[\"comment/62\",[]],[\"name/63\",[51,47.42]],[\"comment/63\",[]],[\"name/64\",[52,47.42]],[\"comment/64\",[]],[\"name/65\",[45,42.312]],[\"comment/65\",[]],[\"name/66\",[46,42.312]],[\"comment/66\",[]],[\"name/67\",[13,34.427]],[\"comment/67\",[]],[\"name/68\",[53,32.757]],[\"comment/68\",[]],[\"name/69\",[54,42.312]],[\"comment/69\",[]],[\"name/70\",[55,42.312]],[\"comment/70\",[]],[\"name/71\",[56,42.312]],[\"comment/71\",[]],[\"name/72\",[57,42.312]],[\"comment/72\",[]],[\"name/73\",[13,34.427]],[\"comment/73\",[]],[\"name/74\",[58,42.312]],[\"comment/74\",[]],[\"name/75\",[53,32.757]],[\"comment/75\",[]],[\"name/76\",[54,42.312]],[\"comment/76\",[]],[\"name/77\",[55,42.312]],[\"comment/77\",[]],[\"name/78\",[56,42.312]],[\"comment/78\",[]],[\"name/79\",[57,42.312]],[\"comment/79\",[]],[\"name/80\",[58,42.312]],[\"comment/80\",[]],[\"name/81\",[12,34.427]],[\"comment/81\",[]],[\"name/82\",[53,32.757]],[\"comment/82\",[]],[\"name/83\",[59,42.312]],[\"comment/83\",[]],[\"name/84\",[60,42.312]],[\"comment/84\",[]],[\"name/85\",[61,42.312]],[\"comment/85\",[]],[\"name/86\",[12,34.427]],[\"comment/86\",[]],[\"name/87\",[62,42.312]],[\"comment/87\",[]],[\"name/88\",[53,32.757]],[\"comment/88\",[]],[\"name/89\",[59,42.312]],[\"comment/89\",[]],[\"name/90\",[60,42.312]],[\"comment/90\",[]],[\"name/91\",[61,42.312]],[\"comment/91\",[]],[\"name/92\",[62,42.312]],[\"comment/92\",[]],[\"name/93\",[11,34.427]],[\"comment/93\",[]],[\"name/94\",[53,32.757]],[\"comment/94\",[]],[\"name/95\",[63,42.312]],[\"comment/95\",[]],[\"name/96\",[64,42.312]],[\"comment/96\",[]],[\"name/97\",[65,42.312]],[\"comment/97\",[]],[\"name/98\",[66,42.312]],[\"comment/98\",[]],[\"name/99\",[67,42.312]],[\"comment/99\",[]],[\"name/100\",[68,42.312]],[\"comment/100\",[]],[\"name/101\",[11,34.427]],[\"comment/101\",[]],[\"name/102\",[69,42.312]],[\"comment/102\",[]],[\"name/103\",[53,32.757]],[\"comment/103\",[]],[\"name/104\",[63,42.312]],[\"comment/104\",[]],[\"name/105\",[64,42.312]],[\"comment/105\",[]],[\"name/106\",[65,42.312]],[\"comment/106\",[]],[\"name/107\",[66,42.312]],[\"comment/107\",[]],[\"name/108\",[67,42.312]],[\"comment/108\",[]],[\"name/109\",[68,42.312]],[\"comment/109\",[]],[\"name/110\",[69,42.312]],[\"comment/110\",[]],[\"name/111\",[70,47.42]],[\"comment/111\",[]],[\"name/112\",[71,24.067]],[\"comment/112\",[]],[\"name/113\",[11,34.427]],[\"comment/113\",[]],[\"name/114\",[12,34.427]],[\"comment/114\",[]],[\"name/115\",[13,34.427]],[\"comment/115\",[]],[\"name/116\",[28,38.947]],[\"comment/116\",[]],[\"name/117\",[29,38.947]],[\"comment/117\",[]],[\"name/118\",[32,38.947]],[\"comment/118\",[]],[\"name/119\",[72,42.312]],[\"comment/119\",[]],[\"name/120\",[73,42.312]],[\"comment/120\",[]],[\"name/121\",[1,34.427]],[\"comment/121\",[]],[\"name/122\",[2,34.427]],[\"comment/122\",[]],[\"name/123\",[74,47.42]],[\"comment/123\",[]],[\"name/124\",[71,24.067]],[\"comment/124\",[]],[\"name/125\",[75,47.42]],[\"comment/125\",[]],[\"name/126\",[76,47.42]],[\"comment/126\",[]],[\"name/127\",[77,47.42]],[\"comment/127\",[]],[\"name/128\",[78,47.42]],[\"comment/128\",[]],[\"name/129\",[79,47.42]],[\"comment/129\",[]],[\"name/130\",[11,34.427]],[\"comment/130\",[]],[\"name/131\",[12,34.427]],[\"comment/131\",[]],[\"name/132\",[13,34.427]],[\"comment/132\",[]],[\"name/133\",[28,38.947]],[\"comment/133\",[]],[\"name/134\",[29,38.947]],[\"comment/134\",[]],[\"name/135\",[32,38.947]],[\"comment/135\",[]],[\"name/136\",[72,42.312]],[\"comment/136\",[]],[\"name/137\",[73,42.312]],[\"comment/137\",[]],[\"name/138\",[1,34.427]],[\"comment/138\",[]],[\"name/139\",[2,34.427]],[\"comment/139\",[]],[\"name/140\",[80,47.42]],[\"comment/140\",[]],[\"name/141\",[81,47.42]],[\"comment/141\",[]],[\"name/142\",[82,47.42]],[\"comment/142\",[]],[\"name/143\",[83,47.42]],[\"comment/143\",[]],[\"name/144\",[84,47.42]],[\"comment/144\",[]],[\"name/145\",[85,47.42]],[\"comment/145\",[]],[\"name/146\",[71,24.067]],[\"comment/146\",[]],[\"name/147\",[86,47.42]],[\"comment/147\",[]],[\"name/148\",[71,24.067]],[\"comment/148\",[]],[\"name/149\",[87,47.42]],[\"comment/149\",[]],[\"name/150\",[71,24.067]],[\"comment/150\",[]],[\"name/151\",[88,47.42]],[\"comment/151\",[]],[\"name/152\",[71,24.067]],[\"comment/152\",[]],[\"name/153\",[89,47.42]],[\"comment/153\",[]],[\"name/154\",[71,24.067]],[\"comment/154\",[]],[\"name/155\",[90,47.42]],[\"comment/155\",[]],[\"name/156\",[71,24.067]],[\"comment/156\",[]],[\"name/157\",[91,47.42]],[\"comment/157\",[]],[\"name/158\",[71,24.067]],[\"comment/158\",[]],[\"name/159\",[92,47.42]],[\"comment/159\",[]],[\"name/160\",[71,24.067]],[\"comment/160\",[]],[\"name/161\",[93,47.42]],[\"comment/161\",[]],[\"name/162\",[71,24.067]],[\"comment/162\",[]],[\"name/163\",[94,47.42]],[\"comment/163\",[]],[\"name/164\",[71,24.067]],[\"comment/164\",[]],[\"name/165\",[95,47.42]],[\"comment/165\",[]],[\"name/166\",[71,24.067]],[\"comment/166\",[]],[\"name/167\",[96,47.42]],[\"comment/167\",[]],[\"name/168\",[71,24.067]],[\"comment/168\",[]],[\"name/169\",[97,47.42]],[\"comment/169\",[]],[\"name/170\",[71,24.067]],[\"comment/170\",[]]],\"invertedIndex\":[[\"__type\",{\"_index\":53,\"name\":{\"68\":{},\"75\":{},\"82\":{},\"88\":{},\"94\":{},\"103\":{}},\"comment\":{}}],[\"_aead\",{\"_index\":78,\"name\":{\"128\":{}},\"comment\":{}}],[\"_api\",{\"_index\":75,\"name\":{\"125\":{}},\"comment\":{}}],[\"_kdf\",{\"_index\":77,\"name\":{\"127\":{}},\"comment\":{}}],[\"_kem\",{\"_index\":76,\"name\":{\"126\":{}},\"comment\":{}}],[\"_keyschedule\",{\"_index\":81,\"name\":{\"141\":{}},\"comment\":{}}],[\"_keyscheduler\",{\"_index\":83,\"name\":{\"143\":{}},\"comment\":{}}],[\"_keyschedules\",{\"_index\":82,\"name\":{\"142\":{}},\"comment\":{}}],[\"_setup\",{\"_index\":80,\"name\":{\"140\":{}},\"comment\":{}}],[\"_suiteid\",{\"_index\":79,\"name\":{\"129\":{}},\"comment\":{}}],[\"_validateinputlength\",{\"_index\":84,\"name\":{\"144\":{}},\"comment\":{}}],[\"aead\",{\"_index\":13,\"name\":{\"13\":{},\"67\":{},\"73\":{},\"115\":{},\"132\":{}},\"comment\":{}}],[\"aeadencryptioncontext\",{\"_index\":0,\"name\":{\"0\":{}},\"comment\":{}}],[\"aeadid\",{\"_index\":58,\"name\":{\"74\":{},\"80\":{}},\"comment\":{}}],[\"aeadinterface\",{\"_index\":3,\"name\":{\"3\":{}},\"comment\":{}}],[\"aes128gcm\",{\"_index\":54,\"name\":{\"69\":{},\"76\":{}},\"comment\":{}}],[\"aes256gcm\",{\"_index\":55,\"name\":{\"70\":{},\"77\":{}},\"comment\":{}}],[\"buildlabeledikm\",{\"_index\":16,\"name\":{\"18\":{}},\"comment\":{}}],[\"buildlabeledinfo\",{\"_index\":17,\"name\":{\"19\":{}},\"comment\":{}}],[\"chacha20poly1305\",{\"_index\":56,\"name\":{\"71\":{},\"78\":{}},\"comment\":{}}],[\"ciphersuite\",{\"_index\":70,\"name\":{\"111\":{}},\"comment\":{}}],[\"ciphersuitenative\",{\"_index\":74,\"name\":{\"123\":{}},\"comment\":{}}],[\"ciphersuiteparams\",{\"_index\":10,\"name\":{\"10\":{}},\"comment\":{}}],[\"ciphersuitesealresponse\",{\"_index\":47,\"name\":{\"58\":{}},\"comment\":{}}],[\"constructor\",{\"_index\":71,\"name\":{\"112\":{},\"124\":{},\"146\":{},\"148\":{},\"150\":{},\"152\":{},\"154\":{},\"156\":{},\"158\":{},\"160\":{},\"162\":{},\"164\":{},\"166\":{},\"168\":{},\"170\":{}},\"comment\":{}}],[\"createencryptioncontext\",{\"_index\":9,\"name\":{\"9\":{}},\"comment\":{}}],[\"createrecipientcontext\",{\"_index\":73,\"name\":{\"120\":{},\"137\":{}},\"comment\":{}}],[\"createsendercontext\",{\"_index\":72,\"name\":{\"119\":{},\"136\":{}},\"comment\":{}}],[\"ct\",{\"_index\":48,\"name\":{\"59\":{}},\"comment\":{}}],[\"decap\",{\"_index\":34,\"name\":{\"38\":{}},\"comment\":{}}],[\"decaperror\",{\"_index\":91,\"name\":{\"157\":{}},\"comment\":{}}],[\"derivekeypair\",{\"_index\":29,\"name\":{\"33\":{},\"117\":{},\"134\":{}},\"comment\":{}}],[\"derivekeypairerror\",{\"_index\":96,\"name\":{\"167\":{}},\"comment\":{}}],[\"deserializeerror\",{\"_index\":89,\"name\":{\"153\":{}},\"comment\":{}}],[\"deserializepublickey\",{\"_index\":31,\"name\":{\"35\":{}},\"comment\":{}}],[\"dhkemp256hkdfsha256\",{\"_index\":63,\"name\":{\"95\":{},\"104\":{}},\"comment\":{}}],[\"dhkemp384hkdfsha384\",{\"_index\":64,\"name\":{\"96\":{},\"105\":{}},\"comment\":{}}],[\"dhkemp521hkdfsha512\",{\"_index\":65,\"name\":{\"97\":{},\"106\":{}},\"comment\":{}}],[\"dhkemsecp256k1hkdfsha256\",{\"_index\":66,\"name\":{\"98\":{},\"107\":{}},\"comment\":{}}],[\"dhkemx25519hkdfsha256\",{\"_index\":67,\"name\":{\"99\":{},\"108\":{}},\"comment\":{}}],[\"dhkemx448hkdfsha512\",{\"_index\":68,\"name\":{\"100\":{},\"109\":{}},\"comment\":{}}],[\"enc\",{\"_index\":39,\"name\":{\"45\":{},\"54\":{},\"60\":{}},\"comment\":{}}],[\"encap\",{\"_index\":33,\"name\":{\"37\":{}},\"comment\":{}}],[\"encaperror\",{\"_index\":90,\"name\":{\"155\":{}},\"comment\":{}}],[\"encryptioncontext\",{\"_index\":35,\"name\":{\"39\":{}},\"comment\":{}}],[\"encsize\",{\"_index\":25,\"name\":{\"28\":{}},\"comment\":{}}],[\"expand\",{\"_index\":19,\"name\":{\"21\":{}},\"comment\":{}}],[\"export\",{\"_index\":36,\"name\":{\"42\":{},\"48\":{}},\"comment\":{}}],[\"exporterror\",{\"_index\":92,\"name\":{\"159\":{}},\"comment\":{}}],[\"exportonly\",{\"_index\":57,\"name\":{\"72\":{},\"79\":{}},\"comment\":{}}],[\"extract\",{\"_index\":18,\"name\":{\"20\":{}},\"comment\":{}}],[\"extractandexpand\",{\"_index\":20,\"name\":{\"22\":{}},\"comment\":{}}],[\"generatekeypair\",{\"_index\":28,\"name\":{\"32\":{},\"116\":{},\"133\":{}},\"comment\":{}}],[\"hashsize\",{\"_index\":15,\"name\":{\"16\":{}},\"comment\":{}}],[\"hkdfsha256\",{\"_index\":59,\"name\":{\"83\":{},\"89\":{}},\"comment\":{}}],[\"hkdfsha384\",{\"_index\":60,\"name\":{\"84\":{},\"90\":{}},\"comment\":{}}],[\"hkdfsha512\",{\"_index\":61,\"name\":{\"85\":{},\"91\":{}},\"comment\":{}}],[\"hpkeerror\",{\"_index\":85,\"name\":{\"145\":{}},\"comment\":{}}],[\"id\",{\"_index\":4,\"name\":{\"4\":{},\"15\":{},\"26\":{},\"50\":{}},\"comment\":{}}],[\"importkey\",{\"_index\":32,\"name\":{\"36\":{},\"118\":{},\"135\":{}},\"comment\":{}}],[\"info\",{\"_index\":45,\"name\":{\"56\":{},\"65\":{}},\"comment\":{}}],[\"init\",{\"_index\":8,\"name\":{\"8\":{},\"17\":{},\"31\":{}},\"comment\":{}}],[\"invalidparamerror\",{\"_index\":86,\"name\":{\"147\":{}},\"comment\":{}}],[\"kdf\",{\"_index\":12,\"name\":{\"12\":{},\"81\":{},\"86\":{},\"114\":{},\"131\":{}},\"comment\":{}}],[\"kdfid\",{\"_index\":62,\"name\":{\"87\":{},\"92\":{}},\"comment\":{}}],[\"kdfinterface\",{\"_index\":14,\"name\":{\"14\":{}},\"comment\":{}}],[\"kem\",{\"_index\":11,\"name\":{\"11\":{},\"93\":{},\"101\":{},\"113\":{},\"130\":{}},\"comment\":{}}],[\"kemid\",{\"_index\":69,\"name\":{\"102\":{},\"110\":{}},\"comment\":{}}],[\"keminterface\",{\"_index\":23,\"name\":{\"25\":{}},\"comment\":{}}],[\"key\",{\"_index\":41,\"name\":{\"51\":{}},\"comment\":{}}],[\"keysize\",{\"_index\":5,\"name\":{\"5\":{}},\"comment\":{}}],[\"labeledexpand\",{\"_index\":22,\"name\":{\"24\":{}},\"comment\":{}}],[\"labeledextract\",{\"_index\":21,\"name\":{\"23\":{}},\"comment\":{}}],[\"messagelimitreachederror\",{\"_index\":95,\"name\":{\"165\":{}},\"comment\":{}}],[\"noncesize\",{\"_index\":6,\"name\":{\"6\":{}},\"comment\":{}}],[\"nonephemeralkeypair\",{\"_index\":52,\"name\":{\"64\":{}},\"comment\":{}}],[\"notsupportederror\",{\"_index\":97,\"name\":{\"169\":{}},\"comment\":{}}],[\"open\",{\"_index\":2,\"name\":{\"2\":{},\"41\":{},\"47\":{},\"122\":{},\"139\":{}},\"comment\":{}}],[\"openerror\",{\"_index\":94,\"name\":{\"163\":{}},\"comment\":{}}],[\"presharedkey\",{\"_index\":40,\"name\":{\"49\":{}},\"comment\":{}}],[\"privatekeysize\",{\"_index\":27,\"name\":{\"30\":{}},\"comment\":{}}],[\"psk\",{\"_index\":46,\"name\":{\"57\":{},\"66\":{}},\"comment\":{}}],[\"publickeysize\",{\"_index\":26,\"name\":{\"29\":{}},\"comment\":{}}],[\"recipientcontext\",{\"_index\":37,\"name\":{\"43\":{}},\"comment\":{}}],[\"recipientcontextparams\",{\"_index\":42,\"name\":{\"52\":{}},\"comment\":{}}],[\"recipientkey\",{\"_index\":43,\"name\":{\"53\":{}},\"comment\":{}}],[\"recipientpublickey\",{\"_index\":50,\"name\":{\"62\":{}},\"comment\":{}}],[\"seal\",{\"_index\":1,\"name\":{\"1\":{},\"40\":{},\"46\":{},\"121\":{},\"138\":{}},\"comment\":{}}],[\"sealerror\",{\"_index\":93,\"name\":{\"161\":{}},\"comment\":{}}],[\"secretsize\",{\"_index\":24,\"name\":{\"27\":{}},\"comment\":{}}],[\"sendercontext\",{\"_index\":38,\"name\":{\"44\":{}},\"comment\":{}}],[\"sendercontextparams\",{\"_index\":49,\"name\":{\"61\":{}},\"comment\":{}}],[\"senderkey\",{\"_index\":51,\"name\":{\"63\":{}},\"comment\":{}}],[\"senderpublickey\",{\"_index\":44,\"name\":{\"55\":{}},\"comment\":{}}],[\"serializeerror\",{\"_index\":88,\"name\":{\"151\":{}},\"comment\":{}}],[\"serializepublickey\",{\"_index\":30,\"name\":{\"34\":{}},\"comment\":{}}],[\"tagsize\",{\"_index\":7,\"name\":{\"7\":{}},\"comment\":{}}],[\"validationerror\",{\"_index\":87,\"name\":{\"149\":{}},\"comment\":{}}]],\"pipeline\":[]}}"); \ No newline at end of file +window.searchData = JSON.parse("{\"rows\":[{\"kind\":256,\"name\":\"AeadEncryptionContext\",\"url\":\"interfaces/AeadEncryptionContext.html\",\"classes\":\"\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/AeadEncryptionContext.html#seal\",\"classes\":\"\",\"parent\":\"AeadEncryptionContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/AeadEncryptionContext.html#open\",\"classes\":\"\",\"parent\":\"AeadEncryptionContext\"},{\"kind\":256,\"name\":\"AeadInterface\",\"url\":\"interfaces/AeadInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/AeadInterface.html#id\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"keySize\",\"url\":\"interfaces/AeadInterface.html#keySize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"nonceSize\",\"url\":\"interfaces/AeadInterface.html#nonceSize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":1024,\"name\":\"tagSize\",\"url\":\"interfaces/AeadInterface.html#tagSize\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"interfaces/AeadInterface.html#init\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":2048,\"name\":\"createEncryptionContext\",\"url\":\"interfaces/AeadInterface.html#createEncryptionContext\",\"classes\":\"\",\"parent\":\"AeadInterface\"},{\"kind\":256,\"name\":\"CipherSuiteParams\",\"url\":\"interfaces/CipherSuiteParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"kem\",\"url\":\"interfaces/CipherSuiteParams.html#kem\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":1024,\"name\":\"kdf\",\"url\":\"interfaces/CipherSuiteParams.html#kdf\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":1024,\"name\":\"aead\",\"url\":\"interfaces/CipherSuiteParams.html#aead\",\"classes\":\"\",\"parent\":\"CipherSuiteParams\"},{\"kind\":256,\"name\":\"KdfInterface\",\"url\":\"interfaces/KdfInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/KdfInterface.html#id\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":1024,\"name\":\"hashSize\",\"url\":\"interfaces/KdfInterface.html#hashSize\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"init\",\"url\":\"interfaces/KdfInterface.html#init\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"buildLabeledIkm\",\"url\":\"interfaces/KdfInterface.html#buildLabeledIkm\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"buildLabeledInfo\",\"url\":\"interfaces/KdfInterface.html#buildLabeledInfo\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"extract\",\"url\":\"interfaces/KdfInterface.html#extract\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"expand\",\"url\":\"interfaces/KdfInterface.html#expand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"extractAndExpand\",\"url\":\"interfaces/KdfInterface.html#extractAndExpand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"labeledExtract\",\"url\":\"interfaces/KdfInterface.html#labeledExtract\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":2048,\"name\":\"labeledExpand\",\"url\":\"interfaces/KdfInterface.html#labeledExpand\",\"classes\":\"\",\"parent\":\"KdfInterface\"},{\"kind\":256,\"name\":\"KemInterface\",\"url\":\"interfaces/KemInterface.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/KemInterface.html#id\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"secretSize\",\"url\":\"interfaces/KemInterface.html#secretSize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"encSize\",\"url\":\"interfaces/KemInterface.html#encSize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"publicKeySize\",\"url\":\"interfaces/KemInterface.html#publicKeySize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":1024,\"name\":\"privateKeySize\",\"url\":\"interfaces/KemInterface.html#privateKeySize\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"interfaces/KemInterface.html#generateKeyPair\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"interfaces/KemInterface.html#deriveKeyPair\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"serializePublicKey\",\"url\":\"interfaces/KemInterface.html#serializePublicKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"deserializePublicKey\",\"url\":\"interfaces/KemInterface.html#deserializePublicKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"interfaces/KemInterface.html#importKey\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"encap\",\"url\":\"interfaces/KemInterface.html#encap\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":2048,\"name\":\"decap\",\"url\":\"interfaces/KemInterface.html#decap\",\"classes\":\"\",\"parent\":\"KemInterface\"},{\"kind\":256,\"name\":\"EncryptionContext\",\"url\":\"interfaces/EncryptionContext.html\",\"classes\":\"\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/EncryptionContext.html#seal\",\"classes\":\"\",\"parent\":\"EncryptionContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/EncryptionContext.html#open\",\"classes\":\"\",\"parent\":\"EncryptionContext\"},{\"kind\":2048,\"name\":\"export\",\"url\":\"interfaces/EncryptionContext.html#export\",\"classes\":\"tsd-is-inherited\",\"parent\":\"EncryptionContext\"},{\"kind\":4194304,\"name\":\"RecipientContext\",\"url\":\"types/RecipientContext.html\",\"classes\":\"\"},{\"kind\":256,\"name\":\"SenderContext\",\"url\":\"interfaces/SenderContext.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/SenderContext.html#enc\",\"classes\":\"\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"interfaces/SenderContext.html#seal\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"interfaces/SenderContext.html#open\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":2048,\"name\":\"export\",\"url\":\"interfaces/SenderContext.html#export\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContext\"},{\"kind\":256,\"name\":\"PreSharedKey\",\"url\":\"interfaces/PreSharedKey.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"id\",\"url\":\"interfaces/PreSharedKey.html#id\",\"classes\":\"\",\"parent\":\"PreSharedKey\"},{\"kind\":1024,\"name\":\"key\",\"url\":\"interfaces/PreSharedKey.html#key\",\"classes\":\"\",\"parent\":\"PreSharedKey\"},{\"kind\":256,\"name\":\"RecipientContextParams\",\"url\":\"interfaces/RecipientContextParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"recipientKey\",\"url\":\"interfaces/RecipientContextParams.html#recipientKey\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/RecipientContextParams.html#enc\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"senderPublicKey\",\"url\":\"interfaces/RecipientContextParams.html#senderPublicKey\",\"classes\":\"\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"info\",\"url\":\"interfaces/RecipientContextParams.html#info\",\"classes\":\"tsd-is-inherited\",\"parent\":\"RecipientContextParams\"},{\"kind\":1024,\"name\":\"psk\",\"url\":\"interfaces/RecipientContextParams.html#psk\",\"classes\":\"tsd-is-inherited\",\"parent\":\"RecipientContextParams\"},{\"kind\":256,\"name\":\"CipherSuiteSealResponse\",\"url\":\"interfaces/CipherSuiteSealResponse.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"ct\",\"url\":\"interfaces/CipherSuiteSealResponse.html#ct\",\"classes\":\"\",\"parent\":\"CipherSuiteSealResponse\"},{\"kind\":1024,\"name\":\"enc\",\"url\":\"interfaces/CipherSuiteSealResponse.html#enc\",\"classes\":\"\",\"parent\":\"CipherSuiteSealResponse\"},{\"kind\":256,\"name\":\"SenderContextParams\",\"url\":\"interfaces/SenderContextParams.html\",\"classes\":\"\"},{\"kind\":1024,\"name\":\"recipientPublicKey\",\"url\":\"interfaces/SenderContextParams.html#recipientPublicKey\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"senderKey\",\"url\":\"interfaces/SenderContextParams.html#senderKey\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"nonEphemeralKeyPair\",\"url\":\"interfaces/SenderContextParams.html#nonEphemeralKeyPair\",\"classes\":\"\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"info\",\"url\":\"interfaces/SenderContextParams.html#info\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContextParams\"},{\"kind\":1024,\"name\":\"psk\",\"url\":\"interfaces/SenderContextParams.html#psk\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SenderContextParams\"},{\"kind\":32,\"name\":\"Aead\",\"url\":\"variables/Aead-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/Aead-1.html#__type\",\"classes\":\"\",\"parent\":\"Aead\"},{\"kind\":1024,\"name\":\"Aes128Gcm\",\"url\":\"variables/Aead-1.html#__type.Aes128Gcm\",\"classes\":\"\",\"parent\":\"Aead.__type\"},{\"kind\":1024,\"name\":\"Aes256Gcm\",\"url\":\"variables/Aead-1.html#__type.Aes256Gcm\",\"classes\":\"\",\"parent\":\"Aead.__type\"},{\"kind\":1024,\"name\":\"Chacha20Poly1305\",\"url\":\"variables/Aead-1.html#__type.Chacha20Poly1305\",\"classes\":\"\",\"parent\":\"Aead.__type\"},{\"kind\":1024,\"name\":\"ExportOnly\",\"url\":\"variables/Aead-1.html#__type.ExportOnly\",\"classes\":\"\",\"parent\":\"Aead.__type\"},{\"kind\":4194304,\"name\":\"Aead\",\"url\":\"types/Aead.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"AeadId\",\"url\":\"variables/AeadId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/AeadId-1.html#__type\",\"classes\":\"\",\"parent\":\"AeadId\"},{\"kind\":1024,\"name\":\"Aes128Gcm\",\"url\":\"variables/AeadId-1.html#__type.Aes128Gcm\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"Aes256Gcm\",\"url\":\"variables/AeadId-1.html#__type.Aes256Gcm\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"Chacha20Poly1305\",\"url\":\"variables/AeadId-1.html#__type.Chacha20Poly1305\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":1024,\"name\":\"ExportOnly\",\"url\":\"variables/AeadId-1.html#__type.ExportOnly\",\"classes\":\"\",\"parent\":\"AeadId.__type\"},{\"kind\":4194304,\"name\":\"AeadId\",\"url\":\"types/AeadId.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"Kdf\",\"url\":\"variables/Kdf-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/Kdf-1.html#__type\",\"classes\":\"\",\"parent\":\"Kdf\"},{\"kind\":1024,\"name\":\"HkdfSha256\",\"url\":\"variables/Kdf-1.html#__type.HkdfSha256\",\"classes\":\"\",\"parent\":\"Kdf.__type\"},{\"kind\":1024,\"name\":\"HkdfSha384\",\"url\":\"variables/Kdf-1.html#__type.HkdfSha384\",\"classes\":\"\",\"parent\":\"Kdf.__type\"},{\"kind\":1024,\"name\":\"HkdfSha512\",\"url\":\"variables/Kdf-1.html#__type.HkdfSha512\",\"classes\":\"\",\"parent\":\"Kdf.__type\"},{\"kind\":4194304,\"name\":\"Kdf\",\"url\":\"types/Kdf.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"KdfId\",\"url\":\"variables/KdfId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/KdfId-1.html#__type\",\"classes\":\"\",\"parent\":\"KdfId\"},{\"kind\":1024,\"name\":\"HkdfSha256\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha256\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":1024,\"name\":\"HkdfSha384\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha384\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":1024,\"name\":\"HkdfSha512\",\"url\":\"variables/KdfId-1.html#__type.HkdfSha512\",\"classes\":\"\",\"parent\":\"KdfId.__type\"},{\"kind\":4194304,\"name\":\"KdfId\",\"url\":\"types/KdfId.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"Kem\",\"url\":\"variables/Kem-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/Kem-1.html#__type\",\"classes\":\"\",\"parent\":\"Kem\"},{\"kind\":1024,\"name\":\"DhkemP256HkdfSha256\",\"url\":\"variables/Kem-1.html#__type.DhkemP256HkdfSha256\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":1024,\"name\":\"DhkemP384HkdfSha384\",\"url\":\"variables/Kem-1.html#__type.DhkemP384HkdfSha384\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":1024,\"name\":\"DhkemP521HkdfSha512\",\"url\":\"variables/Kem-1.html#__type.DhkemP521HkdfSha512\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":1024,\"name\":\"DhkemSecp256k1HkdfSha256\",\"url\":\"variables/Kem-1.html#__type.DhkemSecp256k1HkdfSha256\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":1024,\"name\":\"DhkemX25519HkdfSha256\",\"url\":\"variables/Kem-1.html#__type.DhkemX25519HkdfSha256\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":1024,\"name\":\"DhkemX448HkdfSha512\",\"url\":\"variables/Kem-1.html#__type.DhkemX448HkdfSha512\",\"classes\":\"\",\"parent\":\"Kem.__type\"},{\"kind\":4194304,\"name\":\"Kem\",\"url\":\"types/Kem.html\",\"classes\":\"\"},{\"kind\":32,\"name\":\"KemId\",\"url\":\"variables/KemId-1.html\",\"classes\":\"\"},{\"kind\":65536,\"name\":\"__type\",\"url\":\"variables/KemId-1.html#__type\",\"classes\":\"\",\"parent\":\"KemId\"},{\"kind\":1024,\"name\":\"DhkemP256HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemP256HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemP384HkdfSha384\",\"url\":\"variables/KemId-1.html#__type.DhkemP384HkdfSha384\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemP521HkdfSha512\",\"url\":\"variables/KemId-1.html#__type.DhkemP521HkdfSha512\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemSecp256k1HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemSecp256k1HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemX25519HkdfSha256\",\"url\":\"variables/KemId-1.html#__type.DhkemX25519HkdfSha256\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":1024,\"name\":\"DhkemX448HkdfSha512\",\"url\":\"variables/KemId-1.html#__type.DhkemX448HkdfSha512\",\"classes\":\"\",\"parent\":\"KemId.__type\"},{\"kind\":4194304,\"name\":\"KemId\",\"url\":\"types/KemId.html\",\"classes\":\"\"},{\"kind\":128,\"name\":\"CipherSuite\",\"url\":\"classes/CipherSuite.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/CipherSuite.html#constructor\",\"classes\":\"\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"kem\",\"url\":\"classes/CipherSuite.html#kem\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"kdf\",\"url\":\"classes/CipherSuite.html#kdf\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":262144,\"name\":\"aead\",\"url\":\"classes/CipherSuite.html#aead\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/CipherSuite.html#generateKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/CipherSuite.html#deriveKeyPair\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/CipherSuite.html#importKey\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"createSenderContext\",\"url\":\"classes/CipherSuite.html#createSenderContext\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"createRecipientContext\",\"url\":\"classes/CipherSuite.html#createRecipientContext\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"classes/CipherSuite.html#seal\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"classes/CipherSuite.html#open\",\"classes\":\"tsd-is-inherited\",\"parent\":\"CipherSuite\"},{\"kind\":128,\"name\":\"CipherSuiteNative\",\"url\":\"classes/CipherSuiteNative.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/CipherSuiteNative.html#constructor\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":1024,\"name\":\"_api\",\"url\":\"classes/CipherSuiteNative.html#_api\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":1024,\"name\":\"_kem\",\"url\":\"classes/CipherSuiteNative.html#_kem\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":1024,\"name\":\"_kdf\",\"url\":\"classes/CipherSuiteNative.html#_kdf\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":1024,\"name\":\"_aead\",\"url\":\"classes/CipherSuiteNative.html#_aead\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":1024,\"name\":\"_suiteId\",\"url\":\"classes/CipherSuiteNative.html#_suiteId\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":262144,\"name\":\"kem\",\"url\":\"classes/CipherSuiteNative.html#kem\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":262144,\"name\":\"kdf\",\"url\":\"classes/CipherSuiteNative.html#kdf\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":262144,\"name\":\"aead\",\"url\":\"classes/CipherSuiteNative.html#aead\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"generateKeyPair\",\"url\":\"classes/CipherSuiteNative.html#generateKeyPair\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"deriveKeyPair\",\"url\":\"classes/CipherSuiteNative.html#deriveKeyPair\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"importKey\",\"url\":\"classes/CipherSuiteNative.html#importKey\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"createSenderContext\",\"url\":\"classes/CipherSuiteNative.html#createSenderContext\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"createRecipientContext\",\"url\":\"classes/CipherSuiteNative.html#createRecipientContext\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"seal\",\"url\":\"classes/CipherSuiteNative.html#seal\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"open\",\"url\":\"classes/CipherSuiteNative.html#open\",\"classes\":\"\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"_setup\",\"url\":\"classes/CipherSuiteNative.html#_setup\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"_keySchedule\",\"url\":\"classes/CipherSuiteNative.html#_keySchedule\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"_keyScheduleS\",\"url\":\"classes/CipherSuiteNative.html#_keyScheduleS\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"_keyScheduleR\",\"url\":\"classes/CipherSuiteNative.html#_keyScheduleR\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":2048,\"name\":\"_validateInputLength\",\"url\":\"classes/CipherSuiteNative.html#_validateInputLength\",\"classes\":\"tsd-is-private\",\"parent\":\"CipherSuiteNative\"},{\"kind\":128,\"name\":\"HpkeError\",\"url\":\"classes/HpkeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/HpkeError.html#constructor\",\"classes\":\"\",\"parent\":\"HpkeError\"},{\"kind\":128,\"name\":\"InvalidParamError\",\"url\":\"classes/InvalidParamError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/InvalidParamError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"InvalidParamError\"},{\"kind\":128,\"name\":\"ValidationError\",\"url\":\"classes/ValidationError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/ValidationError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"ValidationError\"},{\"kind\":128,\"name\":\"SerializeError\",\"url\":\"classes/SerializeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/SerializeError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SerializeError\"},{\"kind\":128,\"name\":\"DeserializeError\",\"url\":\"classes/DeserializeError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DeserializeError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DeserializeError\"},{\"kind\":128,\"name\":\"EncapError\",\"url\":\"classes/EncapError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/EncapError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"EncapError\"},{\"kind\":128,\"name\":\"DecapError\",\"url\":\"classes/DecapError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DecapError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DecapError\"},{\"kind\":128,\"name\":\"ExportError\",\"url\":\"classes/ExportError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/ExportError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"ExportError\"},{\"kind\":128,\"name\":\"SealError\",\"url\":\"classes/SealError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/SealError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"SealError\"},{\"kind\":128,\"name\":\"OpenError\",\"url\":\"classes/OpenError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/OpenError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"OpenError\"},{\"kind\":128,\"name\":\"MessageLimitReachedError\",\"url\":\"classes/MessageLimitReachedError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/MessageLimitReachedError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"MessageLimitReachedError\"},{\"kind\":128,\"name\":\"DeriveKeyPairError\",\"url\":\"classes/DeriveKeyPairError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/DeriveKeyPairError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"DeriveKeyPairError\"},{\"kind\":128,\"name\":\"NotSupportedError\",\"url\":\"classes/NotSupportedError.html\",\"classes\":\"\"},{\"kind\":512,\"name\":\"constructor\",\"url\":\"classes/NotSupportedError.html#constructor\",\"classes\":\"tsd-is-inherited\",\"parent\":\"NotSupportedError\"}],\"index\":{\"version\":\"2.3.9\",\"fields\":[\"name\",\"comment\"],\"fieldVectors\":[[\"name/0\",[0,47.362]],[\"comment/0\",[]],[\"name/1\",[1,34.369]],[\"comment/1\",[]],[\"name/2\",[2,34.369]],[\"comment/2\",[]],[\"name/3\",[3,47.362]],[\"comment/3\",[]],[\"name/4\",[4,36.376]],[\"comment/4\",[]],[\"name/5\",[5,47.362]],[\"comment/5\",[]],[\"name/6\",[6,47.362]],[\"comment/6\",[]],[\"name/7\",[7,47.362]],[\"comment/7\",[]],[\"name/8\",[8,42.254]],[\"comment/8\",[]],[\"name/9\",[9,47.362]],[\"comment/9\",[]],[\"name/10\",[10,47.362]],[\"comment/10\",[]],[\"name/11\",[11,34.369]],[\"comment/11\",[]],[\"name/12\",[12,34.369]],[\"comment/12\",[]],[\"name/13\",[13,34.369]],[\"comment/13\",[]],[\"name/14\",[14,47.362]],[\"comment/14\",[]],[\"name/15\",[4,36.376]],[\"comment/15\",[]],[\"name/16\",[15,47.362]],[\"comment/16\",[]],[\"name/17\",[8,42.254]],[\"comment/17\",[]],[\"name/18\",[16,47.362]],[\"comment/18\",[]],[\"name/19\",[17,47.362]],[\"comment/19\",[]],[\"name/20\",[18,47.362]],[\"comment/20\",[]],[\"name/21\",[19,47.362]],[\"comment/21\",[]],[\"name/22\",[20,47.362]],[\"comment/22\",[]],[\"name/23\",[21,47.362]],[\"comment/23\",[]],[\"name/24\",[22,47.362]],[\"comment/24\",[]],[\"name/25\",[23,47.362]],[\"comment/25\",[]],[\"name/26\",[4,36.376]],[\"comment/26\",[]],[\"name/27\",[24,47.362]],[\"comment/27\",[]],[\"name/28\",[25,47.362]],[\"comment/28\",[]],[\"name/29\",[26,47.362]],[\"comment/29\",[]],[\"name/30\",[27,47.362]],[\"comment/30\",[]],[\"name/31\",[28,38.889]],[\"comment/31\",[]],[\"name/32\",[29,38.889]],[\"comment/32\",[]],[\"name/33\",[30,47.362]],[\"comment/33\",[]],[\"name/34\",[31,47.362]],[\"comment/34\",[]],[\"name/35\",[32,38.889]],[\"comment/35\",[]],[\"name/36\",[33,47.362]],[\"comment/36\",[]],[\"name/37\",[34,47.362]],[\"comment/37\",[]],[\"name/38\",[35,47.362]],[\"comment/38\",[]],[\"name/39\",[1,34.369]],[\"comment/39\",[]],[\"name/40\",[2,34.369]],[\"comment/40\",[]],[\"name/41\",[36,42.254]],[\"comment/41\",[]],[\"name/42\",[37,47.362]],[\"comment/42\",[]],[\"name/43\",[38,47.362]],[\"comment/43\",[]],[\"name/44\",[39,38.889]],[\"comment/44\",[]],[\"name/45\",[1,34.369]],[\"comment/45\",[]],[\"name/46\",[2,34.369]],[\"comment/46\",[]],[\"name/47\",[36,42.254]],[\"comment/47\",[]],[\"name/48\",[40,47.362]],[\"comment/48\",[]],[\"name/49\",[4,36.376]],[\"comment/49\",[]],[\"name/50\",[41,47.362]],[\"comment/50\",[]],[\"name/51\",[42,47.362]],[\"comment/51\",[]],[\"name/52\",[43,47.362]],[\"comment/52\",[]],[\"name/53\",[39,38.889]],[\"comment/53\",[]],[\"name/54\",[44,47.362]],[\"comment/54\",[]],[\"name/55\",[45,42.254]],[\"comment/55\",[]],[\"name/56\",[46,42.254]],[\"comment/56\",[]],[\"name/57\",[47,47.362]],[\"comment/57\",[]],[\"name/58\",[48,47.362]],[\"comment/58\",[]],[\"name/59\",[39,38.889]],[\"comment/59\",[]],[\"name/60\",[49,47.362]],[\"comment/60\",[]],[\"name/61\",[50,47.362]],[\"comment/61\",[]],[\"name/62\",[51,47.362]],[\"comment/62\",[]],[\"name/63\",[52,47.362]],[\"comment/63\",[]],[\"name/64\",[45,42.254]],[\"comment/64\",[]],[\"name/65\",[46,42.254]],[\"comment/65\",[]],[\"name/66\",[13,34.369]],[\"comment/66\",[]],[\"name/67\",[53,32.699]],[\"comment/67\",[]],[\"name/68\",[54,42.254]],[\"comment/68\",[]],[\"name/69\",[55,42.254]],[\"comment/69\",[]],[\"name/70\",[56,42.254]],[\"comment/70\",[]],[\"name/71\",[57,42.254]],[\"comment/71\",[]],[\"name/72\",[13,34.369]],[\"comment/72\",[]],[\"name/73\",[58,42.254]],[\"comment/73\",[]],[\"name/74\",[53,32.699]],[\"comment/74\",[]],[\"name/75\",[54,42.254]],[\"comment/75\",[]],[\"name/76\",[55,42.254]],[\"comment/76\",[]],[\"name/77\",[56,42.254]],[\"comment/77\",[]],[\"name/78\",[57,42.254]],[\"comment/78\",[]],[\"name/79\",[58,42.254]],[\"comment/79\",[]],[\"name/80\",[12,34.369]],[\"comment/80\",[]],[\"name/81\",[53,32.699]],[\"comment/81\",[]],[\"name/82\",[59,42.254]],[\"comment/82\",[]],[\"name/83\",[60,42.254]],[\"comment/83\",[]],[\"name/84\",[61,42.254]],[\"comment/84\",[]],[\"name/85\",[12,34.369]],[\"comment/85\",[]],[\"name/86\",[62,42.254]],[\"comment/86\",[]],[\"name/87\",[53,32.699]],[\"comment/87\",[]],[\"name/88\",[59,42.254]],[\"comment/88\",[]],[\"name/89\",[60,42.254]],[\"comment/89\",[]],[\"name/90\",[61,42.254]],[\"comment/90\",[]],[\"name/91\",[62,42.254]],[\"comment/91\",[]],[\"name/92\",[11,34.369]],[\"comment/92\",[]],[\"name/93\",[53,32.699]],[\"comment/93\",[]],[\"name/94\",[63,42.254]],[\"comment/94\",[]],[\"name/95\",[64,42.254]],[\"comment/95\",[]],[\"name/96\",[65,42.254]],[\"comment/96\",[]],[\"name/97\",[66,42.254]],[\"comment/97\",[]],[\"name/98\",[67,42.254]],[\"comment/98\",[]],[\"name/99\",[68,42.254]],[\"comment/99\",[]],[\"name/100\",[11,34.369]],[\"comment/100\",[]],[\"name/101\",[69,42.254]],[\"comment/101\",[]],[\"name/102\",[53,32.699]],[\"comment/102\",[]],[\"name/103\",[63,42.254]],[\"comment/103\",[]],[\"name/104\",[64,42.254]],[\"comment/104\",[]],[\"name/105\",[65,42.254]],[\"comment/105\",[]],[\"name/106\",[66,42.254]],[\"comment/106\",[]],[\"name/107\",[67,42.254]],[\"comment/107\",[]],[\"name/108\",[68,42.254]],[\"comment/108\",[]],[\"name/109\",[69,42.254]],[\"comment/109\",[]],[\"name/110\",[70,47.362]],[\"comment/110\",[]],[\"name/111\",[71,24.008]],[\"comment/111\",[]],[\"name/112\",[11,34.369]],[\"comment/112\",[]],[\"name/113\",[12,34.369]],[\"comment/113\",[]],[\"name/114\",[13,34.369]],[\"comment/114\",[]],[\"name/115\",[28,38.889]],[\"comment/115\",[]],[\"name/116\",[29,38.889]],[\"comment/116\",[]],[\"name/117\",[32,38.889]],[\"comment/117\",[]],[\"name/118\",[72,42.254]],[\"comment/118\",[]],[\"name/119\",[73,42.254]],[\"comment/119\",[]],[\"name/120\",[1,34.369]],[\"comment/120\",[]],[\"name/121\",[2,34.369]],[\"comment/121\",[]],[\"name/122\",[74,47.362]],[\"comment/122\",[]],[\"name/123\",[71,24.008]],[\"comment/123\",[]],[\"name/124\",[75,47.362]],[\"comment/124\",[]],[\"name/125\",[76,47.362]],[\"comment/125\",[]],[\"name/126\",[77,47.362]],[\"comment/126\",[]],[\"name/127\",[78,47.362]],[\"comment/127\",[]],[\"name/128\",[79,47.362]],[\"comment/128\",[]],[\"name/129\",[11,34.369]],[\"comment/129\",[]],[\"name/130\",[12,34.369]],[\"comment/130\",[]],[\"name/131\",[13,34.369]],[\"comment/131\",[]],[\"name/132\",[28,38.889]],[\"comment/132\",[]],[\"name/133\",[29,38.889]],[\"comment/133\",[]],[\"name/134\",[32,38.889]],[\"comment/134\",[]],[\"name/135\",[72,42.254]],[\"comment/135\",[]],[\"name/136\",[73,42.254]],[\"comment/136\",[]],[\"name/137\",[1,34.369]],[\"comment/137\",[]],[\"name/138\",[2,34.369]],[\"comment/138\",[]],[\"name/139\",[80,47.362]],[\"comment/139\",[]],[\"name/140\",[81,47.362]],[\"comment/140\",[]],[\"name/141\",[82,47.362]],[\"comment/141\",[]],[\"name/142\",[83,47.362]],[\"comment/142\",[]],[\"name/143\",[84,47.362]],[\"comment/143\",[]],[\"name/144\",[85,47.362]],[\"comment/144\",[]],[\"name/145\",[71,24.008]],[\"comment/145\",[]],[\"name/146\",[86,47.362]],[\"comment/146\",[]],[\"name/147\",[71,24.008]],[\"comment/147\",[]],[\"name/148\",[87,47.362]],[\"comment/148\",[]],[\"name/149\",[71,24.008]],[\"comment/149\",[]],[\"name/150\",[88,47.362]],[\"comment/150\",[]],[\"name/151\",[71,24.008]],[\"comment/151\",[]],[\"name/152\",[89,47.362]],[\"comment/152\",[]],[\"name/153\",[71,24.008]],[\"comment/153\",[]],[\"name/154\",[90,47.362]],[\"comment/154\",[]],[\"name/155\",[71,24.008]],[\"comment/155\",[]],[\"name/156\",[91,47.362]],[\"comment/156\",[]],[\"name/157\",[71,24.008]],[\"comment/157\",[]],[\"name/158\",[92,47.362]],[\"comment/158\",[]],[\"name/159\",[71,24.008]],[\"comment/159\",[]],[\"name/160\",[93,47.362]],[\"comment/160\",[]],[\"name/161\",[71,24.008]],[\"comment/161\",[]],[\"name/162\",[94,47.362]],[\"comment/162\",[]],[\"name/163\",[71,24.008]],[\"comment/163\",[]],[\"name/164\",[95,47.362]],[\"comment/164\",[]],[\"name/165\",[71,24.008]],[\"comment/165\",[]],[\"name/166\",[96,47.362]],[\"comment/166\",[]],[\"name/167\",[71,24.008]],[\"comment/167\",[]],[\"name/168\",[97,47.362]],[\"comment/168\",[]],[\"name/169\",[71,24.008]],[\"comment/169\",[]]],\"invertedIndex\":[[\"__type\",{\"_index\":53,\"name\":{\"67\":{},\"74\":{},\"81\":{},\"87\":{},\"93\":{},\"102\":{}},\"comment\":{}}],[\"_aead\",{\"_index\":78,\"name\":{\"127\":{}},\"comment\":{}}],[\"_api\",{\"_index\":75,\"name\":{\"124\":{}},\"comment\":{}}],[\"_kdf\",{\"_index\":77,\"name\":{\"126\":{}},\"comment\":{}}],[\"_kem\",{\"_index\":76,\"name\":{\"125\":{}},\"comment\":{}}],[\"_keyschedule\",{\"_index\":81,\"name\":{\"140\":{}},\"comment\":{}}],[\"_keyscheduler\",{\"_index\":83,\"name\":{\"142\":{}},\"comment\":{}}],[\"_keyschedules\",{\"_index\":82,\"name\":{\"141\":{}},\"comment\":{}}],[\"_setup\",{\"_index\":80,\"name\":{\"139\":{}},\"comment\":{}}],[\"_suiteid\",{\"_index\":79,\"name\":{\"128\":{}},\"comment\":{}}],[\"_validateinputlength\",{\"_index\":84,\"name\":{\"143\":{}},\"comment\":{}}],[\"aead\",{\"_index\":13,\"name\":{\"13\":{},\"66\":{},\"72\":{},\"114\":{},\"131\":{}},\"comment\":{}}],[\"aeadencryptioncontext\",{\"_index\":0,\"name\":{\"0\":{}},\"comment\":{}}],[\"aeadid\",{\"_index\":58,\"name\":{\"73\":{},\"79\":{}},\"comment\":{}}],[\"aeadinterface\",{\"_index\":3,\"name\":{\"3\":{}},\"comment\":{}}],[\"aes128gcm\",{\"_index\":54,\"name\":{\"68\":{},\"75\":{}},\"comment\":{}}],[\"aes256gcm\",{\"_index\":55,\"name\":{\"69\":{},\"76\":{}},\"comment\":{}}],[\"buildlabeledikm\",{\"_index\":16,\"name\":{\"18\":{}},\"comment\":{}}],[\"buildlabeledinfo\",{\"_index\":17,\"name\":{\"19\":{}},\"comment\":{}}],[\"chacha20poly1305\",{\"_index\":56,\"name\":{\"70\":{},\"77\":{}},\"comment\":{}}],[\"ciphersuite\",{\"_index\":70,\"name\":{\"110\":{}},\"comment\":{}}],[\"ciphersuitenative\",{\"_index\":74,\"name\":{\"122\":{}},\"comment\":{}}],[\"ciphersuiteparams\",{\"_index\":10,\"name\":{\"10\":{}},\"comment\":{}}],[\"ciphersuitesealresponse\",{\"_index\":47,\"name\":{\"57\":{}},\"comment\":{}}],[\"constructor\",{\"_index\":71,\"name\":{\"111\":{},\"123\":{},\"145\":{},\"147\":{},\"149\":{},\"151\":{},\"153\":{},\"155\":{},\"157\":{},\"159\":{},\"161\":{},\"163\":{},\"165\":{},\"167\":{},\"169\":{}},\"comment\":{}}],[\"createencryptioncontext\",{\"_index\":9,\"name\":{\"9\":{}},\"comment\":{}}],[\"createrecipientcontext\",{\"_index\":73,\"name\":{\"119\":{},\"136\":{}},\"comment\":{}}],[\"createsendercontext\",{\"_index\":72,\"name\":{\"118\":{},\"135\":{}},\"comment\":{}}],[\"ct\",{\"_index\":48,\"name\":{\"58\":{}},\"comment\":{}}],[\"decap\",{\"_index\":34,\"name\":{\"37\":{}},\"comment\":{}}],[\"decaperror\",{\"_index\":91,\"name\":{\"156\":{}},\"comment\":{}}],[\"derivekeypair\",{\"_index\":29,\"name\":{\"32\":{},\"116\":{},\"133\":{}},\"comment\":{}}],[\"derivekeypairerror\",{\"_index\":96,\"name\":{\"166\":{}},\"comment\":{}}],[\"deserializeerror\",{\"_index\":89,\"name\":{\"152\":{}},\"comment\":{}}],[\"deserializepublickey\",{\"_index\":31,\"name\":{\"34\":{}},\"comment\":{}}],[\"dhkemp256hkdfsha256\",{\"_index\":63,\"name\":{\"94\":{},\"103\":{}},\"comment\":{}}],[\"dhkemp384hkdfsha384\",{\"_index\":64,\"name\":{\"95\":{},\"104\":{}},\"comment\":{}}],[\"dhkemp521hkdfsha512\",{\"_index\":65,\"name\":{\"96\":{},\"105\":{}},\"comment\":{}}],[\"dhkemsecp256k1hkdfsha256\",{\"_index\":66,\"name\":{\"97\":{},\"106\":{}},\"comment\":{}}],[\"dhkemx25519hkdfsha256\",{\"_index\":67,\"name\":{\"98\":{},\"107\":{}},\"comment\":{}}],[\"dhkemx448hkdfsha512\",{\"_index\":68,\"name\":{\"99\":{},\"108\":{}},\"comment\":{}}],[\"enc\",{\"_index\":39,\"name\":{\"44\":{},\"53\":{},\"59\":{}},\"comment\":{}}],[\"encap\",{\"_index\":33,\"name\":{\"36\":{}},\"comment\":{}}],[\"encaperror\",{\"_index\":90,\"name\":{\"154\":{}},\"comment\":{}}],[\"encryptioncontext\",{\"_index\":35,\"name\":{\"38\":{}},\"comment\":{}}],[\"encsize\",{\"_index\":25,\"name\":{\"28\":{}},\"comment\":{}}],[\"expand\",{\"_index\":19,\"name\":{\"21\":{}},\"comment\":{}}],[\"export\",{\"_index\":36,\"name\":{\"41\":{},\"47\":{}},\"comment\":{}}],[\"exporterror\",{\"_index\":92,\"name\":{\"158\":{}},\"comment\":{}}],[\"exportonly\",{\"_index\":57,\"name\":{\"71\":{},\"78\":{}},\"comment\":{}}],[\"extract\",{\"_index\":18,\"name\":{\"20\":{}},\"comment\":{}}],[\"extractandexpand\",{\"_index\":20,\"name\":{\"22\":{}},\"comment\":{}}],[\"generatekeypair\",{\"_index\":28,\"name\":{\"31\":{},\"115\":{},\"132\":{}},\"comment\":{}}],[\"hashsize\",{\"_index\":15,\"name\":{\"16\":{}},\"comment\":{}}],[\"hkdfsha256\",{\"_index\":59,\"name\":{\"82\":{},\"88\":{}},\"comment\":{}}],[\"hkdfsha384\",{\"_index\":60,\"name\":{\"83\":{},\"89\":{}},\"comment\":{}}],[\"hkdfsha512\",{\"_index\":61,\"name\":{\"84\":{},\"90\":{}},\"comment\":{}}],[\"hpkeerror\",{\"_index\":85,\"name\":{\"144\":{}},\"comment\":{}}],[\"id\",{\"_index\":4,\"name\":{\"4\":{},\"15\":{},\"26\":{},\"49\":{}},\"comment\":{}}],[\"importkey\",{\"_index\":32,\"name\":{\"35\":{},\"117\":{},\"134\":{}},\"comment\":{}}],[\"info\",{\"_index\":45,\"name\":{\"55\":{},\"64\":{}},\"comment\":{}}],[\"init\",{\"_index\":8,\"name\":{\"8\":{},\"17\":{}},\"comment\":{}}],[\"invalidparamerror\",{\"_index\":86,\"name\":{\"146\":{}},\"comment\":{}}],[\"kdf\",{\"_index\":12,\"name\":{\"12\":{},\"80\":{},\"85\":{},\"113\":{},\"130\":{}},\"comment\":{}}],[\"kdfid\",{\"_index\":62,\"name\":{\"86\":{},\"91\":{}},\"comment\":{}}],[\"kdfinterface\",{\"_index\":14,\"name\":{\"14\":{}},\"comment\":{}}],[\"kem\",{\"_index\":11,\"name\":{\"11\":{},\"92\":{},\"100\":{},\"112\":{},\"129\":{}},\"comment\":{}}],[\"kemid\",{\"_index\":69,\"name\":{\"101\":{},\"109\":{}},\"comment\":{}}],[\"keminterface\",{\"_index\":23,\"name\":{\"25\":{}},\"comment\":{}}],[\"key\",{\"_index\":41,\"name\":{\"50\":{}},\"comment\":{}}],[\"keysize\",{\"_index\":5,\"name\":{\"5\":{}},\"comment\":{}}],[\"labeledexpand\",{\"_index\":22,\"name\":{\"24\":{}},\"comment\":{}}],[\"labeledextract\",{\"_index\":21,\"name\":{\"23\":{}},\"comment\":{}}],[\"messagelimitreachederror\",{\"_index\":95,\"name\":{\"164\":{}},\"comment\":{}}],[\"noncesize\",{\"_index\":6,\"name\":{\"6\":{}},\"comment\":{}}],[\"nonephemeralkeypair\",{\"_index\":52,\"name\":{\"63\":{}},\"comment\":{}}],[\"notsupportederror\",{\"_index\":97,\"name\":{\"168\":{}},\"comment\":{}}],[\"open\",{\"_index\":2,\"name\":{\"2\":{},\"40\":{},\"46\":{},\"121\":{},\"138\":{}},\"comment\":{}}],[\"openerror\",{\"_index\":94,\"name\":{\"162\":{}},\"comment\":{}}],[\"presharedkey\",{\"_index\":40,\"name\":{\"48\":{}},\"comment\":{}}],[\"privatekeysize\",{\"_index\":27,\"name\":{\"30\":{}},\"comment\":{}}],[\"psk\",{\"_index\":46,\"name\":{\"56\":{},\"65\":{}},\"comment\":{}}],[\"publickeysize\",{\"_index\":26,\"name\":{\"29\":{}},\"comment\":{}}],[\"recipientcontext\",{\"_index\":37,\"name\":{\"42\":{}},\"comment\":{}}],[\"recipientcontextparams\",{\"_index\":42,\"name\":{\"51\":{}},\"comment\":{}}],[\"recipientkey\",{\"_index\":43,\"name\":{\"52\":{}},\"comment\":{}}],[\"recipientpublickey\",{\"_index\":50,\"name\":{\"61\":{}},\"comment\":{}}],[\"seal\",{\"_index\":1,\"name\":{\"1\":{},\"39\":{},\"45\":{},\"120\":{},\"137\":{}},\"comment\":{}}],[\"sealerror\",{\"_index\":93,\"name\":{\"160\":{}},\"comment\":{}}],[\"secretsize\",{\"_index\":24,\"name\":{\"27\":{}},\"comment\":{}}],[\"sendercontext\",{\"_index\":38,\"name\":{\"43\":{}},\"comment\":{}}],[\"sendercontextparams\",{\"_index\":49,\"name\":{\"60\":{}},\"comment\":{}}],[\"senderkey\",{\"_index\":51,\"name\":{\"62\":{}},\"comment\":{}}],[\"senderpublickey\",{\"_index\":44,\"name\":{\"54\":{}},\"comment\":{}}],[\"serializeerror\",{\"_index\":88,\"name\":{\"150\":{}},\"comment\":{}}],[\"serializepublickey\",{\"_index\":30,\"name\":{\"33\":{}},\"comment\":{}}],[\"tagsize\",{\"_index\":7,\"name\":{\"7\":{}},\"comment\":{}}],[\"validationerror\",{\"_index\":87,\"name\":{\"148\":{}},\"comment\":{}}]],\"pipeline\":[]}}"); \ No newline at end of file diff --git a/docs/classes/CipherSuite.html b/docs/classes/CipherSuite.html index 8aa8d9ef6..aa80ff3be 100644 --- a/docs/classes/CipherSuite.html +++ b/docs/classes/CipherSuite.html @@ -44,7 +44,7 @@

    Hierarchy

    • CipherSuite
    +
  • Defined in src/cipherSuite.ts:42
    • @@ -91,7 +91,7 @@

    Throws

    Invali

    +
  • Defined in src/cipherSuite.ts:47

    • Accessors

    @@ -105,7 +105,7 @@

    Returns

    +
  • Defined in src/cipherSuiteNative.ts:253

    • kdf

      @@ -117,7 +117,7 @@

      Returns

    +
  • Defined in src/cipherSuiteNative.ts:246

    • kem

    +
  • Defined in src/cipherSuiteNative.ts:239

    • Methods

    @@ -156,7 +156,7 @@

    Throws

    DecapError

    +
  • Defined in src/cipherSuiteNative.ts:355

    • createSenderContext

    +
  • Defined in src/cipherSuiteNative.ts:327

    • deriveKeyPair

    +
  • Defined in src/cipherSuiteNative.ts:284

    • generateKeyPair

    +
  • Defined in src/cipherSuiteNative.ts:267

    • importKey

    +
  • Defined in src/cipherSuiteNative.ts:309

    • open

    +
  • Defined in src/cipherSuiteNative.ts:407

    • seal

    +
  • Defined in src/cipherSuiteNative.ts:384
    • diff --git a/docs/classes/CipherSuiteNative.html b/docs/classes/CipherSuiteNative.html index f717cc521..10665f9c9 100644 --- a/docs/classes/CipherSuiteNative.html +++ b/docs/classes/CipherSuiteNative.html @@ -62,7 +62,7 @@

    Hierarchy

    +
  • Defined in src/cipherSuiteNative.ts:155
    • @@ -122,34 +122,34 @@

    Returns InvalidParamError

    +
  • Defined in src/cipherSuiteNative.ts:169

    • Properties

    Private _aead

    _aead: AeadInterface
    +
  • Defined in src/cipherSuiteNative.ts:159

    • Private _api

    _api: SubtleCrypto = undefined
    +
  • Defined in src/cipherSuiteNative.ts:156

    • Private _kdf

    _kdf: KdfInterface
    +
  • Defined in src/cipherSuiteNative.ts:158

    • Private _kem

    _kem: KemInterface
    +
  • Defined in src/cipherSuiteNative.ts:157

    • Private _suiteId

    _suiteId: Uint8Array
    +
  • Defined in src/cipherSuiteNative.ts:160

    • Accessors

    @@ -162,7 +162,7 @@

    aeadReturns AeadInterface

    +
  • Defined in src/cipherSuiteNative.ts:253

    • kdf

    +
  • Defined in src/cipherSuiteNative.ts:246

    • kem

    +
  • Defined in src/cipherSuiteNative.ts:239

    • Methods

    @@ -203,7 +203,7 @@
    sharedSecret: params: KeyScheduleParams

    Returns Promise<AeadParams>

    +
  • Defined in src/cipherSuiteNative.ts:442

    • Private _keyScheduleR

      @@ -220,7 +220,7 @@
      sharedSecret: params: KeyScheduleParams

    Returns Promise<EncryptionContext>

    +
  • Defined in src/cipherSuiteNative.ts:554

    • Private _keyScheduleS

      @@ -239,7 +239,7 @@
      enc: params: KeyScheduleParams

    Returns Promise<SenderContext>

    +
  • Defined in src/cipherSuiteNative.ts:531

    • Private _setup

    +
  • Defined in src/cipherSuiteNative.ts:416

    • Private _validateInputLength

      @@ -260,7 +260,7 @@

      Parameters

      params: KeyScheduleParams

    Returns void

    +
  • Defined in src/cipherSuiteNative.ts:570

    • createRecipientContext

    +
  • Defined in src/cipherSuiteNative.ts:355

    • createSenderContext

    +
  • Defined in src/cipherSuiteNative.ts:327

    • deriveKeyPair

    +
  • Defined in src/cipherSuiteNative.ts:284

    • generateKeyPair

    +
  • Defined in src/cipherSuiteNative.ts:267

    • importKey

    +
  • Defined in src/cipherSuiteNative.ts:309

    • open

    +
  • Defined in src/cipherSuiteNative.ts:407

    • seal

    +
  • Defined in src/cipherSuiteNative.ts:384
    • diff --git a/docs/classes/DecapError.html b/docs/classes/DecapError.html index 9b61a69c4..a67c78952 100644 --- a/docs/classes/DecapError.html +++ b/docs/classes/DecapError.html @@ -26,7 +26,7 @@

    Hierarchy

    • DecapError
    +
  • Defined in src/errors.ts:49
    • @@ -58,7 +58,7 @@
    e:

    Returns DecapError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/DeriveKeyPairError.html b/docs/classes/DeriveKeyPairError.html index b5c442c3b..1ee7a646d 100644 --- a/docs/classes/DeriveKeyPairError.html +++ b/docs/classes/DeriveKeyPairError.html @@ -26,7 +26,7 @@

    Hierarchy

    • DeriveKeyPairError
    +
  • Defined in src/errors.ts:74
    • @@ -58,7 +58,7 @@
    e:

    Returns DeriveKeyPairError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/DeserializeError.html b/docs/classes/DeserializeError.html index 92f39838c..d736e04f9 100644 --- a/docs/classes/DeserializeError.html +++ b/docs/classes/DeserializeError.html @@ -26,7 +26,7 @@

    Hierarchy

    • DeserializeError
    +
  • Defined in src/errors.ts:39
    • @@ -58,7 +58,7 @@
    e:

    Returns DeserializeError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/EncapError.html b/docs/classes/EncapError.html index 754c6b292..b39cc5f46 100644 --- a/docs/classes/EncapError.html +++ b/docs/classes/EncapError.html @@ -26,7 +26,7 @@

    Hierarchy

    • EncapError
    +
  • Defined in src/errors.ts:44
    • @@ -58,7 +58,7 @@
    e:

    Returns EncapError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/ExportError.html b/docs/classes/ExportError.html index 4ce8f5df1..75d9b8ea5 100644 --- a/docs/classes/ExportError.html +++ b/docs/classes/ExportError.html @@ -26,7 +26,7 @@

    Hierarchy

    • ExportError
    +
  • Defined in src/errors.ts:54
    • @@ -58,7 +58,7 @@
    e:

    Returns ExportError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/HpkeError.html b/docs/classes/HpkeError.html index 45dd6f49d..38c25708c 100644 --- a/docs/classes/HpkeError.html +++ b/docs/classes/HpkeError.html @@ -39,7 +39,7 @@

    Hierarchy

  • DeriveKeyPairError
  • NotSupportedError
    • +
  • Defined in src/errors.ts:4
    • @@ -71,7 +71,7 @@
    e:

    Returns HpkeError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/InvalidParamError.html b/docs/classes/InvalidParamError.html index 25030c00d..03387f115 100644 --- a/docs/classes/InvalidParamError.html +++ b/docs/classes/InvalidParamError.html @@ -26,7 +26,7 @@

    Hierarchy

    • InvalidParamError
    +
  • Defined in src/errors.ts:24
    • @@ -58,7 +58,7 @@
    e:

    Returns InvalidParamError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/MessageLimitReachedError.html b/docs/classes/MessageLimitReachedError.html index fa73358d0..588381511 100644 --- a/docs/classes/MessageLimitReachedError.html +++ b/docs/classes/MessageLimitReachedError.html @@ -26,7 +26,7 @@

    Hierarchy

    • MessageLimitReachedError
    +
  • Defined in src/errors.ts:69
    • @@ -58,7 +58,7 @@
    e:

    Returns MessageLimitReachedError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/NotSupportedError.html b/docs/classes/NotSupportedError.html index 9f66bc567..bdce8d097 100644 --- a/docs/classes/NotSupportedError.html +++ b/docs/classes/NotSupportedError.html @@ -26,7 +26,7 @@

    Hierarchy

    • NotSupportedError
    +
  • Defined in src/errors.ts:79
    • @@ -58,7 +58,7 @@
    e:

    Returns NotSupportedError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/OpenError.html b/docs/classes/OpenError.html index 55d2576e3..465136b68 100644 --- a/docs/classes/OpenError.html +++ b/docs/classes/OpenError.html @@ -26,7 +26,7 @@

    Hierarchy

    • OpenError
    +
  • Defined in src/errors.ts:64
    • @@ -58,7 +58,7 @@
    e:

    Returns OpenError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/SealError.html b/docs/classes/SealError.html index 638e3f87c..2dd02f39f 100644 --- a/docs/classes/SealError.html +++ b/docs/classes/SealError.html @@ -26,7 +26,7 @@

    Hierarchy

    • SealError
    +
  • Defined in src/errors.ts:59
    • @@ -58,7 +58,7 @@
    e:

    Returns SealError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/SerializeError.html b/docs/classes/SerializeError.html index 3fe6ddadc..53236a15b 100644 --- a/docs/classes/SerializeError.html +++ b/docs/classes/SerializeError.html @@ -26,7 +26,7 @@

    Hierarchy

    • SerializeError
    +
  • Defined in src/errors.ts:34
    • @@ -58,7 +58,7 @@
    e:

    Returns SerializeError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/classes/ValidationError.html b/docs/classes/ValidationError.html index 10dacac68..cd9ec0cb1 100644 --- a/docs/classes/ValidationError.html +++ b/docs/classes/ValidationError.html @@ -26,7 +26,7 @@

    Hierarchy

    • ValidationError
    +
  • Defined in src/errors.ts:29
    • @@ -58,7 +58,7 @@
    e:

    Returns ValidationError

    +
  • Defined in src/errors.ts:5

    • Properties

    diff --git a/docs/interfaces/AeadEncryptionContext.html b/docs/interfaces/AeadEncryptionContext.html index fec376d83..4173deb34 100644 --- a/docs/interfaces/AeadEncryptionContext.html +++ b/docs/interfaces/AeadEncryptionContext.html @@ -24,7 +24,7 @@

    Hierarchy

    • AeadEncryptionContext
    +
  • Defined in src/interfaces/aeadEncryptionContext.ts:7
    • @@ -66,7 +66,7 @@

    Returns Promise<

    +
  • Defined in src/interfaces/aeadEncryptionContext.ts:30

    • seal

    +
  • Defined in src/interfaces/aeadEncryptionContext.ts:16
    • diff --git a/docs/interfaces/AeadInterface.html b/docs/interfaces/AeadInterface.html index 4a0eb43df..f25779b67 100644 --- a/docs/interfaces/AeadInterface.html +++ b/docs/interfaces/AeadInterface.html @@ -24,7 +24,7 @@

    Hierarchy

    • AeadInterface
    +
  • Defined in src/interfaces/aeadInterface.ts:8
    • @@ -51,7 +51,7 @@

    Readonly

    +
  • Defined in src/interfaces/aeadInterface.ts:10

    • Readonly keySize

    keySize: number
    @@ -59,7 +59,7 @@

    Readonly

    +
  • Defined in src/interfaces/aeadInterface.ts:12

    • Readonly nonceSize

    nonceSize: number
    @@ -67,7 +67,7 @@

    Readonly

    +
  • Defined in src/interfaces/aeadInterface.ts:14

    • Readonly tagSize

    tagSize: number
    @@ -75,7 +75,7 @@

    Readonly

    +
  • Defined in src/interfaces/aeadInterface.ts:16

    • Methods

    @@ -97,7 +97,7 @@

    Returns

    +
  • Defined in src/interfaces/aeadInterface.ts:31

    • init

    +
  • Defined in src/interfaces/aeadInterface.ts:23
    • diff --git a/docs/interfaces/CipherSuiteParams.html b/docs/interfaces/CipherSuiteParams.html index 3ae484104..82fe55fda 100644 --- a/docs/interfaces/CipherSuiteParams.html +++ b/docs/interfaces/CipherSuiteParams.html @@ -24,7 +24,7 @@

    Hierarchy

    • CipherSuiteParams
    +
  • Defined in src/interfaces/cipherSuiteParams.ts:9
    • @@ -45,7 +45,7 @@

    aead

    +
  • Defined in src/interfaces/cipherSuiteParams.ts:17

    • kdf

    kdf: KdfId | KdfInterface
    @@ -53,7 +53,7 @@

    kdf

    +
  • Defined in src/interfaces/cipherSuiteParams.ts:14

    • kem

    kem: KemId | KemInterface
    @@ -61,7 +61,7 @@

    kem

    +
  • Defined in src/interfaces/cipherSuiteParams.ts:11
    • diff --git a/docs/interfaces/CipherSuiteSealResponse.html b/docs/interfaces/CipherSuiteSealResponse.html index f525025c7..8d9703047 100644 --- a/docs/interfaces/CipherSuiteSealResponse.html +++ b/docs/interfaces/CipherSuiteSealResponse.html @@ -24,7 +24,7 @@

    Hierarchy

    • CipherSuiteSealResponse
    +
  • Defined in src/interfaces/responses.ts:4
    • @@ -44,7 +44,7 @@

    ct

    +
  • Defined in src/interfaces/responses.ts:6

    • enc

    enc: ArrayBuffer
    @@ -52,7 +52,7 @@

    enc

    +
  • Defined in src/interfaces/responses.ts:8
    • diff --git a/docs/interfaces/EncryptionContext.html b/docs/interfaces/EncryptionContext.html index f042c1835..d10e2cfd4 100644 --- a/docs/interfaces/EncryptionContext.html +++ b/docs/interfaces/EncryptionContext.html @@ -28,7 +28,7 @@

    Hierarchy

    +
  • Defined in src/interfaces/encryptionContext.ts:6
    • @@ -70,7 +70,7 @@

    Throws

    E

    +
  • Defined in src/interfaces/exporter.ts:15

    • open

      @@ -98,7 +98,7 @@

      Returns Promise<

      Throws

      OpenError

    +
  • Defined in src/interfaces/encryptionContext.ts:29

    • seal

    +
  • Defined in src/interfaces/encryptionContext.ts:17
    • diff --git a/docs/interfaces/KdfInterface.html b/docs/interfaces/KdfInterface.html index 238a1001c..c9cc6e354 100644 --- a/docs/interfaces/KdfInterface.html +++ b/docs/interfaces/KdfInterface.html @@ -24,7 +24,7 @@

    Hierarchy

    • KdfInterface
    +
  • Defined in src/interfaces/kdfInterface.ts:6
    • @@ -55,7 +55,7 @@

    Readonly

    +
  • Defined in src/interfaces/kdfInterface.ts:10

    • Readonly id

    id: KdfId
    @@ -63,7 +63,7 @@

    Readonly

    +
  • Defined in src/interfaces/kdfInterface.ts:8

    • Methods

    @@ -87,7 +87,7 @@

    Returns Uint8Arr

    +
  • Defined in src/interfaces/kdfInterface.ts:26

    • buildLabeledInfo

    +
  • Defined in src/interfaces/kdfInterface.ts:36

    • expand

    +
  • Defined in src/interfaces/kdfInterface.ts:62

    • extract

    +
  • Defined in src/interfaces/kdfInterface.ts:49

    • extractAndExpand

    +
  • Defined in src/interfaces/kdfInterface.ts:77

    • init

    +
  • Defined in src/interfaces/kdfInterface.ts:17

    • labeledExpand

    +
  • Defined in src/interfaces/kdfInterface.ts:107

    • labeledExtract

    +
  • Defined in src/interfaces/kdfInterface.ts:92
    • diff --git a/docs/interfaces/KemInterface.html b/docs/interfaces/KemInterface.html index c00350196..58c7bf975 100644 --- a/docs/interfaces/KemInterface.html +++ b/docs/interfaces/KemInterface.html @@ -24,7 +24,7 @@

    Hierarchy

    • KemInterface
    +
  • Defined in src/interfaces/kemInterface.ts:9
    • @@ -46,7 +46,6 @@

    Methods

    encap generateKeyPair importKey -init serializePublicKey
    @@ -58,7 +57,7 @@

    Readonly

    +
  • Defined in src/interfaces/kemInterface.ts:15

    • Readonly id

    id: KemId
    @@ -66,7 +65,7 @@

    Readonly

    +
  • Defined in src/interfaces/kemInterface.ts:11

    • Readonly privateKeySize

    privateKeySize: number
    @@ -74,7 +73,7 @@

    Readonly

    +
  • Defined in src/interfaces/kemInterface.ts:19

    • Readonly publicKeySize

    publicKeySize: number
    @@ -82,7 +81,7 @@

    Readonly

    +
  • Defined in src/interfaces/kemInterface.ts:17

    • Readonly secretSize

    secretSize: number
    @@ -90,7 +89,7 @@

    Readonly

    +
  • Defined in src/interfaces/kemInterface.ts:13

    • Methods

    @@ -115,7 +114,7 @@

    Returns Promise<

    Throws

    DecapError

    +
  • Defined in src/interfaces/kemInterface.ts:112

    • deriveKeyPair

    +
  • Defined in src/interfaces/kemInterface.ts:40

    • deserializePublicKey

    +
  • Defined in src/interfaces/kemInterface.ts:62

    • encap

    +
  • Defined in src/interfaces/kemInterface.ts:99

    • generateKeyPair

    +
  • Defined in src/interfaces/kemInterface.ts:29

    • importKey

    -
    -

    init

    -
      - -
    • -

      Initializes the instance by setting a SubtleCrypto API.

      -

      Basically, you don't need to call this function directly. -This function is called byCipherSuite internally.

      -
      -
      -

      Parameters

      -
        -
      • -
        api: SubtleCrypto
        -

        A SubtleCrypto API.

        -
        -
      -

      Returns void

      -
    +
  • Defined in src/interfaces/kemInterface.ts:82

    • serializePublicKey

    +
  • Defined in src/interfaces/kemInterface.ts:51
    • @@ -314,7 +292,6 @@

    encap
  • generateKeyPair
  • importKey
    • -
  • init
  • serializePublicKey

    • +
  • Defined in src/interfaces/preSharedKey.ts:9
    • diff --git a/docs/interfaces/RecipientContextParams.html b/docs/interfaces/RecipientContextParams.html index 1bc27f4b1..7f972c3c7 100644 --- a/docs/interfaces/RecipientContextParams.html +++ b/docs/interfaces/RecipientContextParams.html @@ -26,7 +26,7 @@

    Hierarchy

    • RecipientContextParams
    +
  • Defined in src/interfaces/recipientContextParams.ts:6
    • @@ -49,7 +49,7 @@

    enc

    +
  • Defined in src/interfaces/recipientContextParams.ts:11

    • Optional info

    info?: ArrayBuffer
    @@ -58,7 +58,7 @@

    Optional

    +
  • Defined in src/interfaces/keyScheduleParams.ts:8

    • Optional psk

    psk?: PreSharedKey
    @@ -68,7 +68,7 @@

    Optional

    +
  • Defined in src/interfaces/keyScheduleParams.ts:14

    • recipientKey

    recipientKey: CryptoKeyPair | CryptoKey
    @@ -76,7 +76,7 @@

    recipientKey

    +
  • Defined in src/interfaces/recipientContextParams.ts:8

    • Optional senderPublicKey

    senderPublicKey?: CryptoKey
    @@ -84,7 +84,7 @@

    Optional

    +
  • Defined in src/interfaces/recipientContextParams.ts:14
    • diff --git a/docs/interfaces/SenderContext.html b/docs/interfaces/SenderContext.html index 1e8e27254..aa9bf335e 100644 --- a/docs/interfaces/SenderContext.html +++ b/docs/interfaces/SenderContext.html @@ -26,7 +26,7 @@

    Hierarchy

    • SenderContext
    +
  • Defined in src/interfaces/encryptionContext.ts:40
    • @@ -51,7 +51,7 @@

    enc

    +
  • Defined in src/interfaces/encryptionContext.ts:42

    • Methods

    @@ -82,7 +82,7 @@

    Throws

    E

    +
  • Defined in src/interfaces/exporter.ts:15

    • open

      @@ -111,7 +111,7 @@

      Throws

      Ope

    +
  • Defined in src/interfaces/encryptionContext.ts:29

    • seal

    +
  • Defined in src/interfaces/encryptionContext.ts:17
    • diff --git a/docs/interfaces/SenderContextParams.html b/docs/interfaces/SenderContextParams.html index 24b33b71a..ff9e3781d 100644 --- a/docs/interfaces/SenderContextParams.html +++ b/docs/interfaces/SenderContextParams.html @@ -26,7 +26,7 @@

    Hierarchy

    • SenderContextParams
    +
  • Defined in src/interfaces/senderContextParams.ts:6
    • @@ -50,7 +50,7 @@

    Optional

    +
  • Defined in src/interfaces/keyScheduleParams.ts:8

    • Optional nonEphemeralKeyPair

    nonEphemeralKeyPair?: CryptoKeyPair
    @@ -58,7 +58,7 @@

    Optional

    +
  • Defined in src/interfaces/senderContextParams.ts:14

    • Optional psk

    psk?: PreSharedKey
    @@ -68,7 +68,7 @@

    Optional

    +
  • Defined in src/interfaces/keyScheduleParams.ts:14

    • recipientPublicKey

    recipientPublicKey: CryptoKey
    @@ -76,7 +76,7 @@

    recipientPublicKey

    +
  • Defined in src/interfaces/senderContextParams.ts:8

    • Optional senderKey

    senderKey?: CryptoKeyPair | CryptoKey
    @@ -84,7 +84,7 @@

    Optional

    +
  • Defined in src/interfaces/senderContextParams.ts:11
    • diff --git a/docs/types/Aead.html b/docs/types/Aead.html index 60392bc86..2b48f5891 100644 --- a/docs/types/Aead.html +++ b/docs/types/Aead.html @@ -22,8 +22,8 @@

    Type alias Aead

    Deprecated

    Use AeadId instead.

    +
  • Defined in src/identifiers.ts:80
    • +
  • Defined in src/identifiers.ts:92
    • diff --git a/docs/types/AeadId.html b/docs/types/AeadId.html index 163faf86c..42adcadbc 100644 --- a/docs/types/AeadId.html +++ b/docs/types/AeadId.html @@ -20,8 +20,8 @@

    Type alias AeadId

    +
  • Defined in src/identifiers.ts:97
    • +
  • Defined in src/identifiers.ts:102
    • diff --git a/docs/types/Kdf.html b/docs/types/Kdf.html index ab745b618..c7d6ab799 100644 --- a/docs/types/Kdf.html +++ b/docs/types/Kdf.html @@ -22,8 +22,8 @@

    Type alias Kdf

    Deprecated

    Use KdfId instead.

    +
  • Defined in src/identifiers.ts:52
    • +
  • Defined in src/identifiers.ts:63
    • diff --git a/docs/types/KdfId.html b/docs/types/KdfId.html index d21d63811..6fdb1375c 100644 --- a/docs/types/KdfId.html +++ b/docs/types/KdfId.html @@ -20,8 +20,8 @@

    Type alias KdfId

    +
  • Defined in src/identifiers.ts:68
    • +
  • Defined in src/identifiers.ts:73
    • diff --git a/docs/types/Kem.html b/docs/types/Kem.html index 4f77a548a..9ca41a339 100644 --- a/docs/types/Kem.html +++ b/docs/types/Kem.html @@ -22,8 +22,8 @@

    Type alias Kem

    Deprecated

    Use KdfId instead.

    +
  • Defined in src/identifiers.ts:21
    • +
  • Defined in src/identifiers.ts:35
    • diff --git a/docs/types/KemId.html b/docs/types/KemId.html index e13f3d603..ea5e2f7ee 100644 --- a/docs/types/KemId.html +++ b/docs/types/KemId.html @@ -20,8 +20,8 @@

    Type alias KemId

    +
  • Defined in src/identifiers.ts:40
    • +
  • Defined in src/identifiers.ts:45
    • diff --git a/docs/types/RecipientContext.html b/docs/types/RecipientContext.html index 17912a588..109708e9a 100644 --- a/docs/types/RecipientContext.html +++ b/docs/types/RecipientContext.html @@ -20,7 +20,7 @@

    Type alias RecipientContext

    +
  • Defined in src/interfaces/encryptionContext.ts:35
    • diff --git a/docs/variables/Aead-1.html b/docs/variables/Aead-1.html index 7fc29e3f9..ec836413c 100644 --- a/docs/variables/Aead-1.html +++ b/docs/variables/Aead-1.html @@ -33,8 +33,8 @@
    Readonly AeadId instead.

    +
  • Defined in src/identifiers.ts:80
    • +
  • Defined in src/identifiers.ts:92
    • diff --git a/docs/variables/AeadId-1.html b/docs/variables/AeadId-1.html index e385c0b0a..3e47ee0fd 100644 --- a/docs/variables/AeadId-1.html +++ b/docs/variables/AeadId-1.html @@ -31,8 +31,8 @@
    Readonly Readonly ExportOnly: 65535
    +
  • Defined in src/identifiers.ts:97
    • +
  • Defined in src/identifiers.ts:102
    • diff --git a/docs/variables/Kdf-1.html b/docs/variables/Kdf-1.html index 56b67f0fa..334849790 100644 --- a/docs/variables/Kdf-1.html +++ b/docs/variables/Kdf-1.html @@ -31,8 +31,8 @@
    Readonly KdfId instead.

    +
  • Defined in src/identifiers.ts:52
    • +
  • Defined in src/identifiers.ts:63
    • diff --git a/docs/variables/KdfId-1.html b/docs/variables/KdfId-1.html index 7d00efe86..4ddeb1dfc 100644 --- a/docs/variables/KdfId-1.html +++ b/docs/variables/KdfId-1.html @@ -29,8 +29,8 @@
    Readonly Readonly HkdfSha512: 3
    +
  • Defined in src/identifiers.ts:68
    • +
  • Defined in src/identifiers.ts:73
    • diff --git a/docs/variables/Kem-1.html b/docs/variables/Kem-1.html index 5de831815..ad1f83108 100644 --- a/docs/variables/Kem-1.html +++ b/docs/variables/Kem-1.html @@ -37,8 +37,8 @@
    Readonly KdfId instead.

    +
  • Defined in src/identifiers.ts:21
    • +
  • Defined in src/identifiers.ts:35
    • diff --git a/docs/variables/KemId-1.html b/docs/variables/KemId-1.html index 9c46834c5..059cdd220 100644 --- a/docs/variables/KemId-1.html +++ b/docs/variables/KemId-1.html @@ -35,8 +35,8 @@
    Readonly Readonly DhkemX448HkdfSha512: 33
    +
  • Defined in src/identifiers.ts:40
    • +
  • Defined in src/identifiers.ts:45
    • diff --git a/src/hpke.js b/src/hpke.js index b703bab10..da90c0995 100644 --- a/src/hpke.js +++ b/src/hpke.js @@ -1,4 +1,4 @@ -var ue=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},te=class extends ue{},Gr=class extends ue{},_t=class extends ue{},Xe=class extends ue{},Et=class extends ue{},kt=class extends ue{},vt=class extends ue{},St=class extends ue{},At=class extends ue{},Pt=class extends ue{},It=class extends ue{},ge=class extends ue{};var ve={Base:0,Psk:1,Auth:2,AuthPsk:3},Fr={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},C=Fr,$r={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},pe=$r,Zr={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},re=Zr;var Z=new Uint8Array(0);var Bt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},ne=class extends Bt{constructor(){super()}init(e){this._api=e}},Lt=class extends Bt{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:Z})}init(e,t){this._api=e,this._suiteId=t}};var Vr=["encrypt","decrypt"];var Kt=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,n){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let i={name:"AES-GCM",iv:e,additionalData:n};return await this._api.encrypt(i,this._key,t)}async open(e,t,n){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let i={name:"AES-GCM",iv:e,additionalData:n};return await this._api.decrypt(i,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,Vr)}},Ye=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:re.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new Kt(this._api,e)}},We=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:re.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new Kt(this._api,e)}};var Je=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:re.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new ge("createEncryptionContext() is not supported on ExportOnly")}};var ni=r=>r instanceof Uint8Array;var Se=r=>new Uint32Array(r.buffer,r.byteOffset,Math.floor(r.byteLength/4)),Xr=r=>new DataView(r.buffer,r.byteOffset,r.byteLength),ii=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!ii)throw new Error("Non little-endian hardware is not supported");function Ut(r){if(typeof r!="string")throw new Error(`utf8ToBytes expected string, got ${typeof r}`);return new Uint8Array(new TextEncoder().encode(r))}function Ot(r){if(typeof r=="string"&&(r=Ut(r)),!ni(r))throw new Error(`expected Uint8Array, got ${typeof r}`);return r}var oi=r=>Object.prototype.toString.call(r)==="[object Object]"&&r.constructor===Object;function Yr(r,e){if(e!==void 0&&(typeof e!="object"||!oi(e)))throw new Error("options must be object or undefined");return Object.assign(r,e)}function Me(r,e){if(!(r instanceof Uint8Array))throw new Error("Uint8Array expected");if(typeof e=="number"&&r.length!==e)throw new Error(`Uint8Array length ${e} expected`)}function Wr(r,e){if(r.length!==e.length)throw new Error("equalBytes: Different size of Uint8Arrays");let t=!0;for(let n=0;n>i&o),a=Number(t&o),c=n?4:0,u=n?0:4;r.setUint32(e+c,s,n),r.setUint32(e+u,a,n)}function hr(r){if(!Number.isSafeInteger(r)||r<0)throw new Error(`Wrong positive integer: ${r}`)}function si(r){if(typeof r!="boolean")throw new Error(`Expected boolean, not ${r}`)}function Jr(r,...e){if(!(r instanceof Uint8Array))throw new Error("Expected Uint8Array");if(e.length>0&&!e.includes(r.length))throw new Error(`Expected Uint8Array of length ${e}, not of length=${r.length}`)}function ai(r){if(typeof r!="function"||typeof r.create!="function")throw new Error("hash must be wrapped by utils.wrapConstructor");hr(r.outputLen),hr(r.blockLen)}function ci(r,e=!0){if(r.destroyed)throw new Error("Hash instance has been destroyed");if(e&&r.finished)throw new Error("Hash#digest() has already been called")}function fi(r,e){Jr(r);let t=e.outputLen;if(r.lengthr[e++]&255|(r[e++]&255)<<8,dr=class{constructor(e){this.blockLen=16,this.outputLen=16,this.buffer=new Uint8Array(16),this.r=new Uint16Array(10),this.h=new Uint16Array(10),this.pad=new Uint16Array(8),this.pos=0,this.finished=!1,e=Ot(e),Me(e,32);let t=ie(e,0),n=ie(e,2),i=ie(e,4),o=ie(e,6),s=ie(e,8),a=ie(e,10),c=ie(e,12),u=ie(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|n<<3)&8191,this.r[2]=(n>>>10|i<<6)&7939,this.r[3]=(i>>>7|o<<9)&8191,this.r[4]=(o>>>4|s<<12)&255,this.r[5]=s>>>1&8190,this.r[6]=(s>>>14|a<<2)&8191,this.r[7]=(a>>>11|c<<5)&8065,this.r[8]=(c>>>8|u<<8)&8191,this.r[9]=u>>>5&127;for(let f=0;f<8;f++)this.pad[f]=ie(e,16+2*f)}process(e,t,n=!1){let i=n?0:2048,{h:o,r:s}=this,a=s[0],c=s[1],u=s[2],f=s[3],h=s[4],d=s[5],m=s[6],k=s[7],_=s[8],v=s[9],$=ie(e,t+0),X=ie(e,t+2),y=ie(e,t+4),L=ie(e,t+6),E=ie(e,t+8),H=ie(e,t+10),M=ie(e,t+12),K=ie(e,t+14),w=o[0]+($&8191),B=o[1]+(($>>>13|X<<3)&8191),I=o[2]+((X>>>10|y<<6)&8191),A=o[3]+((y>>>7|L<<9)&8191),S=o[4]+((L>>>4|E<<12)&8191),q=o[5]+(E>>>1&8191),N=o[6]+((E>>>14|H<<2)&8191),G=o[7]+((H>>>11|M<<5)&8191),F=o[8]+((M>>>8|K<<8)&8191),p=o[9]+(K>>>5|i),l=0,b=l+w*a+B*(5*v)+I*(5*_)+A*(5*k)+S*(5*m);l=b>>>13,b&=8191,b+=q*(5*d)+N*(5*h)+G*(5*f)+F*(5*u)+p*(5*c),l+=b>>>13,b&=8191;let x=l+w*c+B*a+I*(5*v)+A*(5*_)+S*(5*k);l=x>>>13,x&=8191,x+=q*(5*m)+N*(5*d)+G*(5*h)+F*(5*f)+p*(5*u),l+=x>>>13,x&=8191;let g=l+w*u+B*c+I*a+A*(5*v)+S*(5*_);l=g>>>13,g&=8191,g+=q*(5*k)+N*(5*m)+G*(5*d)+F*(5*h)+p*(5*f),l+=g>>>13,g&=8191;let U=l+w*f+B*u+I*c+A*a+S*(5*v);l=U>>>13,U&=8191,U+=q*(5*_)+N*(5*k)+G*(5*m)+F*(5*d)+p*(5*h),l+=U>>>13,U&=8191;let T=l+w*h+B*f+I*u+A*c+S*a;l=T>>>13,T&=8191,T+=q*(5*v)+N*(5*_)+G*(5*k)+F*(5*m)+p*(5*d),l+=T>>>13,T&=8191;let z=l+w*d+B*h+I*f+A*u+S*c;l=z>>>13,z&=8191,z+=q*a+N*(5*v)+G*(5*_)+F*(5*k)+p*(5*m),l+=z>>>13,z&=8191;let O=l+w*m+B*d+I*h+A*f+S*u;l=O>>>13,O&=8191,O+=q*c+N*a+G*(5*v)+F*(5*_)+p*(5*k),l+=O>>>13,O&=8191;let D=l+w*k+B*m+I*d+A*h+S*f;l=D>>>13,D&=8191,D+=q*u+N*c+G*a+F*(5*v)+p*(5*_),l+=D>>>13,D&=8191;let Y=l+w*_+B*k+I*m+A*d+S*h;l=Y>>>13,Y&=8191,Y+=q*f+N*u+G*c+F*a+p*(5*v),l+=Y>>>13,Y&=8191;let J=l+w*v+B*_+I*k+A*m+S*d;l=J>>>13,J&=8191,J+=q*h+N*f+G*u+F*c+p*a,l+=J>>>13,J&=8191,l=(l<<2)+l|0,l=l+b|0,b=l&8191,l=l>>>13,x+=l,o[0]=b,o[1]=x,o[2]=g,o[3]=U,o[4]=T,o[5]=z,o[6]=O,o[7]=D,o[8]=Y,o[9]=J}finalize(){let{h:e,pad:t}=this,n=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let a=2;a<10;a++)e[a]+=i,i=e[a]>>>13,e[a]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,n[0]=e[0]+5,i=n[0]>>>13,n[0]&=8191;for(let a=1;a<10;a++)n[a]=e[a]+i,i=n[a]>>>13,n[a]&=8191;n[9]-=8192;let o=(i^1)-1;for(let a=0;a<10;a++)n[a]&=o;o=~o;for(let a=0;a<10;a++)e[a]=e[a]&o|n[a];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let s=e[0]+t[0];e[0]=s&65535;for(let a=1;a<8;a++)s=(e[a]+t[a]|0)+(s>>>16)|0,e[a]=s&65535}update(e){ae.exists(this);let{buffer:t,blockLen:n}=this;e=Ot(e);let i=e.length;for(let o=0;o>>0,e[o++]=n[s]>>>8;return e}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}};function li(r){let e=(n,i)=>r(i).update(Ot(n)).digest(),t=r(new Uint8Array(32));return e.outputLen=t.outputLen,e.blockLen=t.blockLen,e.create=n=>r(n),e}var Qr=li(r=>new dr(r));var hi=Ut("expand 16-byte k"),di=Ut("expand 32-byte k"),pi=Se(hi),bi=Se(di),en=r=>!(r.byteOffset%4),tn=r=>{let{core:e,rounds:t,counterRight:n,counterLen:i,allow128bitKeys:o,extendNonceFn:s,blockLen:a}=Yr({rounds:20,counterRight:!1,counterLen:8,allow128bitKeys:!0,blockLen:64},r);ae.number(i),ae.number(t),ae.number(a),ae.bool(n),ae.bool(o);let c=a/4;if(a%4!==0)throw new Error("Salsa/ChaCha: blockLen must be aligned to 4 bytes");return(u,f,h,d,m=0)=>{if(ae.bytes(u),ae.bytes(f),ae.bytes(h),d||(d=new Uint8Array(h.length)),ae.bytes(d),ae.number(m),m<0||m>=2**32-1)throw new Error("Salsa/ChaCha: counter overflow");if(d.length=2**32-1)throw new Error("Salsa/ChaCha: counter overflow");let I=Math.min(a,K-w);if(I===a&&M&&H){let A=w/4;if(w%4!==0)throw new Error("Salsa/ChaCha: invalid block position");for(let S=0;Sr<>>32-e;function yi(r,e,t,n,i,o=20){let s=r[0],a=r[1],c=r[2],u=r[3],f=e[0],h=e[1],d=e[2],m=e[3],k=e[4],_=e[5],v=e[6],$=e[7],X=i,y=t[0],L=t[1],E=t[2],H=s,M=a,K=c,w=u,B=f,I=h,A=d,S=m,q=k,N=_,G=v,F=$,p=X,l=y,b=L,x=E;for(let U=0;U{r.update(e);let t=e.length%16;t&&r.update(wi.subarray(t))},nn=(r,e,t,n,i)=>{let o=r(e,t,new Uint8Array(32)),s=Qr.create(o);i&&rn(s,i),rn(s,n);let a=new Uint8Array(16),c=Xr(a);lr(c,0,BigInt(i?i.length:0),!0),lr(c,8,BigInt(n.length),!0),s.update(a);let u=s.digest();return o.fill(0),u},mi=r=>(e,t,n)=>(Me(e,32),Me(t),{tagLength:16,encrypt:(o,s)=>{let a=o.length,c=a+16;s?Me(s,c):s=new Uint8Array(c),r(e,t,o,s,1);let u=nn(r,e,t,s.subarray(0,-16),n);return s.set(u,a),s},decrypt:(o,s)=>{let a=o.length,c=a-16;if(a<16)throw new Error("encrypted data must be at least 16 bytes");s?Me(s,c):s=new Uint8Array(c);let u=o.subarray(0,-16),f=o.subarray(-16),h=nn(r,e,t,u,n);if(!Wr(f,h))throw new Error("invalid tag");return r(e,t,u,s,1),s}}),pr=mi(xi);var br=class{constructor(e,t){Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._key=new Uint8Array(t)}async seal(e,t,n){return await this._seal(e,t,n)}async open(e,t,n){return await this._open(e,t,n)}_seal(e,t,n){return new Promise(i=>{let o=pr(this._key,new Uint8Array(e),new Uint8Array(n)).encrypt(new Uint8Array(t));i(o.buffer)})}_open(e,t,n){return new Promise(i=>{let o=pr(this._key,new Uint8Array(e),new Uint8Array(n)).decrypt(new Uint8Array(t));i(o.buffer)})}},Ht=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:re.Chacha20Poly1305}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return new br(this._api,e)}};function yr(r){if(!Number.isSafeInteger(r)||r<0)throw new Error(`Wrong positive integer: ${r}`)}function gi(r){if(typeof r!="boolean")throw new Error(`Expected boolean, not ${r}`)}function on(r,...e){if(!(r instanceof Uint8Array))throw new Error("Expected Uint8Array");if(e.length>0&&!e.includes(r.length))throw new Error(`Expected Uint8Array of length ${e}, not of length=${r.length}`)}function _i(r){if(typeof r!="function"||typeof r.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");yr(r.outputLen),yr(r.blockLen)}function Ei(r,e=!0){if(r.destroyed)throw new Error("Hash instance has been destroyed");if(e&&r.finished)throw new Error("Hash#digest() has already been called")}function ki(r,e){on(r);let t=e.outputLen;if(r.lengthr instanceof Uint8Array;var an=r=>new Uint32Array(r.buffer,r.byteOffset,Math.floor(r.byteLength/4)),Ct=r=>new DataView(r.buffer,r.byteOffset,r.byteLength),ye=(r,e)=>r<<32-e|r>>>e,Si=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!Si)throw new Error("Non little-endian hardware is not supported");var Os=Array.from({length:256},(r,e)=>e.toString(16).padStart(2,"0"));function ct(r){if(typeof r!="string")throw new Error(`utf8ToBytes expected string, got ${typeof r}`);return new Uint8Array(new TextEncoder().encode(r))}function Le(r){if(typeof r=="string"&&(r=ct(r)),!sn(r))throw new Error(`expected Uint8Array, got ${typeof r}`);return r}function Nt(...r){let e=new Uint8Array(r.reduce((n,i)=>n+i.length,0)),t=0;return r.forEach(n=>{if(!sn(n))throw new Error("Uint8Array expected");e.set(n,t),t+=n.length}),e}var Be=class{clone(){return this._cloneInto()}};function he(r){let e=n=>r().update(Le(n)).digest(),t=r();return e.outputLen=t.outputLen,e.blockLen=t.blockLen,e.create=()=>r(),e}function cn(r){let e=(n,i)=>r(i).update(Le(n)).digest(),t=r({});return e.outputLen=t.outputLen,e.blockLen=t.blockLen,e.create=n=>r(n),e}function Qe(r=32){if(Tt&&typeof Tt.getRandomValues=="function")return Tt.getRandomValues(new Uint8Array(r));throw new Error("crypto.getRandomValues must be defined")}var Dt=class extends Be{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,oe.hash(e);let n=Le(t);if(this.iHash=e.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(n.length>i?e.create().update(n).digest():n);for(let s=0;snew Dt(r,e).update(t).digest();qe.create=(r,e)=>new Dt(r,e);function Ai(r,e,t,n){if(typeof r.setBigUint64=="function")return r.setBigUint64(e,t,n);let i=BigInt(32),o=BigInt(4294967295),s=Number(t>>i&o),a=Number(t&o),c=n?4:0,u=n?0:4;r.setUint32(e+c,s,n),r.setUint32(e+u,a,n)}var et=class extends Be{constructor(e,t,n,i){super(),this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=Ct(this.buffer)}update(e){oe.exists(this);let{view:t,buffer:n,blockLen:i}=this;e=Le(e);let o=e.length;for(let s=0;si-s&&(this.process(n,0),s=0);for(let h=s;hf.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;hr&e^~r&t,Ii=(r,e,t)=>r&e^r&t^e&t,Bi=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ke=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Ue=new Uint32Array(64),jt=class extends et{constructor(){super(64,32,8,!1),this.A=Ke[0]|0,this.B=Ke[1]|0,this.C=Ke[2]|0,this.D=Ke[3]|0,this.E=Ke[4]|0,this.F=Ke[5]|0,this.G=Ke[6]|0,this.H=Ke[7]|0}get(){let{A:e,B:t,C:n,D:i,E:o,F:s,G:a,H:c}=this;return[e,t,n,i,o,s,a,c]}set(e,t,n,i,o,s,a,c){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=o|0,this.F=s|0,this.G=a|0,this.H=c|0}process(e,t){for(let h=0;h<16;h++,t+=4)Ue[h]=e.getUint32(t,!1);for(let h=16;h<64;h++){let d=Ue[h-15],m=Ue[h-2],k=ye(d,7)^ye(d,18)^d>>>3,_=ye(m,17)^ye(m,19)^m>>>10;Ue[h]=_+Ue[h-7]+k+Ue[h-16]|0}let{A:n,B:i,C:o,D:s,E:a,F:c,G:u,H:f}=this;for(let h=0;h<64;h++){let d=ye(a,6)^ye(a,11)^ye(a,25),m=f+d+Pi(a,c,u)+Bi[h]+Ue[h]|0,_=(ye(n,2)^ye(n,13)^ye(n,22))+Ii(n,i,o)|0;f=u,u=c,c=a,a=s+m|0,s=o,o=i,i=n,n=m+_|0}n=n+this.A|0,i=i+this.B|0,o=o+this.C|0,s=s+this.D|0,a=a+this.E|0,c=c+this.F|0,u=u+this.G|0,f=f+this.H|0,this.set(n,i,o,s,a,c,u,f)}roundClean(){Ue.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}},xr=class extends jt{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}},fn=he(()=>new jt),qs=he(()=>new xr);var un=new Uint8Array([72,80,75,69,45,118,49]),ft=class extends Lt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:pe.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let n=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(un,0),n.set(this._suiteId,7),n.set(e,7+this._suiteId.byteLength),n.set(t,7+this._suiteId.byteLength+e.byteLength),n}buildLabeledInfo(e,t,n){let i=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return i.set(new Uint8Array([0,n]),0),i.set(un,2),i.set(this._suiteId,9),i.set(e,9+this._suiteId.byteLength),i.set(t,9+this._suiteId.byteLength+e.byteLength),i}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new te("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,t)}async expand(e,t,n){this.checkInit();let i=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),o=new ArrayBuffer(n),s=new Uint8Array(o),a=Z,c=new Uint8Array(t),u=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let f=new Uint8Array(this.hashSize+c.length+1);for(let h=1,d=0;d=a.length?(s.set(a,d),d+=a.length):(s.set(a.slice(0,s.length-d),d),d+=s.length-d);return o}async extractAndExpand(e,t,n,i){this.checkInit();let o=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:n},o,i*8)}async labeledExtract(e,t,n){return await this.extract(e,this.buildLabeledIkm(t,n))}async labeledExpand(e,t,n,i){return await this.expand(e,this.buildLabeledInfo(t,n,i),i)}},Oe=class extends ft{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:pe.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},He=class extends ft{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:pe.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},Te=class extends ft{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:pe.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ce=class extends Oe{async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)return qe(fn,new Uint8Array(e),new Uint8Array(t));let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,t)}};var zt=BigInt(4294967295),wr=BigInt(32);function ln(r,e=!1){return e?{h:Number(r&zt),l:Number(r>>wr&zt)}:{h:Number(r>>wr&zt)|0,l:Number(r&zt)|0}}function Li(r,e=!1){let t=new Uint32Array(r.length),n=new Uint32Array(r.length);for(let i=0;iBigInt(r>>>0)<>>0),Ui=(r,e,t)=>r>>>t,Oi=(r,e,t)=>r<<32-t|e>>>t,Hi=(r,e,t)=>r>>>t|e<<32-t,Ti=(r,e,t)=>r<<32-t|e>>>t,Ci=(r,e,t)=>r<<64-t|e>>>t-32,Ni=(r,e,t)=>r>>>t-32|e<<64-t,Di=(r,e)=>e,ji=(r,e)=>r,zi=(r,e,t)=>r<>>32-t,Ri=(r,e,t)=>e<>>32-t,Mi=(r,e,t)=>e<>>64-t,qi=(r,e,t)=>r<>>64-t;function Gi(r,e,t,n){let i=(e>>>0)+(n>>>0);return{h:r+t+(i/2**32|0)|0,l:i|0}}var Fi=(r,e,t)=>(r>>>0)+(e>>>0)+(t>>>0),$i=(r,e,t,n)=>e+t+n+(r/2**32|0)|0,Zi=(r,e,t,n)=>(r>>>0)+(e>>>0)+(t>>>0)+(n>>>0),Vi=(r,e,t,n,i)=>e+t+n+i+(r/2**32|0)|0,Xi=(r,e,t,n,i)=>(r>>>0)+(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0),Yi=(r,e,t,n,i,o)=>e+t+n+i+o+(r/2**32|0)|0,Wi={fromBig:ln,split:Li,toBig:Ki,shrSH:Ui,shrSL:Oi,rotrSH:Hi,rotrSL:Ti,rotrBH:Ci,rotrBL:Ni,rotr32H:Di,rotr32L:ji,rotlSH:zi,rotlSL:Ri,rotlBH:Mi,rotlBL:qi,add:Gi,add3L:Fi,add3H:$i,add4L:Zi,add4H:Vi,add5H:Yi,add5L:Xi},P=Wi;var[Ji,Qi]=P.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(r=>BigInt(r))),Ne=new Uint32Array(80),De=new Uint32Array(80),tt=class extends et{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:e,Al:t,Bh:n,Bl:i,Ch:o,Cl:s,Dh:a,Dl:c,Eh:u,El:f,Fh:h,Fl:d,Gh:m,Gl:k,Hh:_,Hl:v}=this;return[e,t,n,i,o,s,a,c,u,f,h,d,m,k,_,v]}set(e,t,n,i,o,s,a,c,u,f,h,d,m,k,_,v){this.Ah=e|0,this.Al=t|0,this.Bh=n|0,this.Bl=i|0,this.Ch=o|0,this.Cl=s|0,this.Dh=a|0,this.Dl=c|0,this.Eh=u|0,this.El=f|0,this.Fh=h|0,this.Fl=d|0,this.Gh=m|0,this.Gl=k|0,this.Hh=_|0,this.Hl=v|0}process(e,t){for(let y=0;y<16;y++,t+=4)Ne[y]=e.getUint32(t),De[y]=e.getUint32(t+=4);for(let y=16;y<80;y++){let L=Ne[y-15]|0,E=De[y-15]|0,H=P.rotrSH(L,E,1)^P.rotrSH(L,E,8)^P.shrSH(L,E,7),M=P.rotrSL(L,E,1)^P.rotrSL(L,E,8)^P.shrSL(L,E,7),K=Ne[y-2]|0,w=De[y-2]|0,B=P.rotrSH(K,w,19)^P.rotrBH(K,w,61)^P.shrSH(K,w,6),I=P.rotrSL(K,w,19)^P.rotrBL(K,w,61)^P.shrSL(K,w,6),A=P.add4L(M,I,De[y-7],De[y-16]),S=P.add4H(A,H,B,Ne[y-7],Ne[y-16]);Ne[y]=S|0,De[y]=A|0}let{Ah:n,Al:i,Bh:o,Bl:s,Ch:a,Cl:c,Dh:u,Dl:f,Eh:h,El:d,Fh:m,Fl:k,Gh:_,Gl:v,Hh:$,Hl:X}=this;for(let y=0;y<80;y++){let L=P.rotrSH(h,d,14)^P.rotrSH(h,d,18)^P.rotrBH(h,d,41),E=P.rotrSL(h,d,14)^P.rotrSL(h,d,18)^P.rotrBL(h,d,41),H=h&m^~h&_,M=d&k^~d&v,K=P.add5L(X,E,M,Qi[y],De[y]),w=P.add5H(K,$,L,H,Ji[y],Ne[y]),B=K|0,I=P.rotrSH(n,i,28)^P.rotrBH(n,i,34)^P.rotrBH(n,i,39),A=P.rotrSL(n,i,28)^P.rotrBL(n,i,34)^P.rotrBL(n,i,39),S=n&o^n&a^o&a,q=i&s^i&c^s&c;$=_|0,X=v|0,_=m|0,v=k|0,m=h|0,k=d|0,{h,l:d}=P.add(u|0,f|0,w|0,B|0),u=a|0,f=c|0,a=o|0,c=s|0,o=n|0,s=i|0;let N=P.add3L(B,A,q);n=P.add3H(N,w,I,S),i=N|0}({h:n,l:i}=P.add(this.Ah|0,this.Al|0,n|0,i|0)),{h:o,l:s}=P.add(this.Bh|0,this.Bl|0,o|0,s|0),{h:a,l:c}=P.add(this.Ch|0,this.Cl|0,a|0,c|0),{h:u,l:f}=P.add(this.Dh|0,this.Dl|0,u|0,f|0),{h,l:d}=P.add(this.Eh|0,this.El|0,h|0,d|0),{h:m,l:k}=P.add(this.Fh|0,this.Fl|0,m|0,k|0),{h:_,l:v}=P.add(this.Gh|0,this.Gl|0,_|0,v|0),{h:$,l:X}=P.add(this.Hh|0,this.Hl|0,$|0,X|0),this.set(n,i,o,s,a,c,u,f,h,d,m,k,_,v,$,X)}roundClean(){Ne.fill(0),De.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}},mr=class extends tt{constructor(){super(),this.Ah=-1942145080,this.Al=424955298,this.Bh=1944164710,this.Bl=-1982016298,this.Ch=502970286,this.Cl=855612546,this.Dh=1738396948,this.Dl=1479516111,this.Eh=258812777,this.El=2077511080,this.Fh=2011393907,this.Fl=79989058,this.Gh=1067287976,this.Gl=1780299464,this.Hh=286451373,this.Hl=-1848208735,this.outputLen=28}},gr=class extends tt{constructor(){super(),this.Ah=573645204,this.Al=-64227540,this.Bh=-1621794909,this.Bl=-934517566,this.Ch=596883563,this.Cl=1867755857,this.Dh=-1774684391,this.Dl=1497426621,this.Eh=-1775747358,this.El=-1467023389,this.Fh=-1101128155,this.Fl=1401305490,this.Gh=721525244,this.Gl=746961066,this.Hh=246885852,this.Hl=-2117784414,this.outputLen=32}},_r=class extends tt{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}},ut=he(()=>new tt),ra=he(()=>new mr),na=he(()=>new gr),hn=he(()=>new _r);var rt=class extends He{async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)return qe(hn,new Uint8Array(e),new Uint8Array(t));let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,t)}};var je=class extends Te{async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)return qe(ut,new Uint8Array(e),new Uint8Array(t));let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,t)}};var eo={},dn=to(globalThis,eo);function to(r,e){return new Proxy(r,{get(t,n,i){return n in e?e[n]:r[n]},set(t,n,i){return n in e&&delete e[n],r[n]=i,!0},deleteProperty(t,n){let i=!1;return n in e&&(delete e[n],i=!0),n in r&&(delete r[n],i=!0),i},ownKeys(t){let n=Reflect.ownKeys(r),i=Reflect.ownKeys(e),o=new Set(i);return[...n.filter(s=>!o.has(s)),...i]},defineProperty(t,n,i){return n in e&&delete e[n],Reflect.defineProperty(r,n,i),!0},getOwnPropertyDescriptor(t,n){return n in e?Reflect.getOwnPropertyDescriptor(e,n):Reflect.getOwnPropertyDescriptor(r,n)},has(t,n){return n in e||n in r}})}var pn=()=>typeof dn<"u",bn=()=>typeof caches<"u";var lt=r=>typeof r=="object"&&r!==null&&typeof r.privateKey=="object"&&typeof r.publicKey=="object";function xe(r,e){if(e<=0)throw new Error("i2Osp: too small size");if(r>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let n=0;n>8;return t}function yn(r,e){if(r.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(r.byteLength);for(let n=0;n8192)throw new te("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new It(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new _t(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new Xe(t)}}async importKey(e,t,n=!0){await this._setup();try{return await this._prim.importKey(e,t,n)}catch(i){throw new Xe(i)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,n=await this._prim.serializePublicKey(t.publicKey),i=await this._prim.serializePublicKey(e.recipientPublicKey),o;if(e.senderKey===void 0)o=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let c=lt(e.senderKey)?e.senderKey.privateKey:e.senderKey,u=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),f=new Uint8Array(await this._prim.dh(c,e.recipientPublicKey));o=ht(u,f)}let s;if(e.senderKey===void 0)s=ht(new Uint8Array(n),new Uint8Array(i));else{let c=lt(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),u=await this._prim.serializePublicKey(c);s=xn(new Uint8Array(n),new Uint8Array(i),new Uint8Array(u))}let a=await this._generateSharedSecret(o,s);return{enc:n,sharedSecret:a}}catch(t){throw new Et(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(n){throw new Xe(n)}try{let n=lt(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,i=lt(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),o=await this._prim.serializePublicKey(i),s;if(e.senderPublicKey===void 0)s=new Uint8Array(await this._prim.dh(n,t));else{let c=new Uint8Array(await this._prim.dh(n,t)),u=new Uint8Array(await this._prim.dh(n,e.senderPublicKey));s=ht(c,u)}let a;if(e.senderPublicKey===void 0)a=ht(new Uint8Array(e.enc),new Uint8Array(o));else{let c=await this._prim.serializePublicKey(e.senderPublicKey);a=new Uint8Array(e.enc.byteLength+o.byteLength+c.byteLength),a.set(new Uint8Array(e.enc),0),a.set(new Uint8Array(o),e.enc.byteLength),a.set(new Uint8Array(c),e.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(s,a)}catch(n){throw new kt(n)}}async _setup(){if(this._api!==void 0)return;let e=await Rt(),t=new Uint8Array(wn);t.set(xe(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let n=this._kdf.buildLabeledIkm(no,e),i=this._kdf.buildLabeledInfo(io,t,this.secretSize);return await this._kdf.extractAndExpand(Z,n,i,this.secretSize)}};var ce=["deriveBits"],it=new Uint8Array([100,107,112,95,112,114,107]),Mt=new Uint8Array([115,107]);var qt=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var oo=new Uint8Array([99,97,110,100,105,100,97,116,101]),so=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),ao=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),co=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),fo=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),uo=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),lo=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),be=class extends ne{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case C.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=so,this._bitmask=255,this._pkcs8AlgId=fo;break;case C.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=ao,this._bitmask=255,this._pkcs8AlgId=uo;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=co,this._bitmask=1,this._pkcs8AlgId=lo;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,n){if(this.checkInit(),e==="raw")return await this._importRawKey(t,n);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,n)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let n=new Uint8Array(e),i=new Uint8Array(this._pkcs8AlgId.length+n.length);return i.set(this._pkcs8AlgId,0),i.set(n,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",i,this._alg,!0,ce)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,ce)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,ce)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(Z,it,new Uint8Array(e)),n=new qt(this._nSk);for(let s=0;n.isZero()||!n.lessThan(this._order);s++){if(s>255)throw new Error("Faild to derive a key pair");let a=new Uint8Array(await this._hkdf.labeledExpand(t,oo,xe(s,1),this._nSk));a[0]=a[0]&this._bitmask,n.set(a)}let i=new Uint8Array(this._pkcs8AlgId.length+n.val().length);i.set(this._pkcs8AlgId,0),i.set(n.val(),this._pkcs8AlgId.length);let o=await this._api.importKey("pkcs8",i,this._alg,!0,ce);return n.reset(),{privateKey:o,publicKey:await this.derivePublicKey(o)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var Gt=class extends se{constructor(){let e=new Ce,t=new be(C.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};var Ft=class extends se{constructor(){let e=new rt,t=new be(C.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}};var $t=class extends se{constructor(){let e=new je,t=new be(C.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var $a=BigInt(0),ho=BigInt(1),po=BigInt(2),Zt=r=>r instanceof Uint8Array,bo=Array.from({length:256},(r,e)=>e.toString(16).padStart(2,"0"));function dt(r){if(!Zt(r))throw new Error("Uint8Array expected");let e="";for(let t=0;tn+i.length,0)),t=0;return r.forEach(n=>{if(!Zt(n))throw new Error("Uint8Array expected");e.set(n,t),t+=n.length}),e}var _n=r=>(po<typeof r=="bigint",function:r=>typeof r=="function",boolean:r=>typeof r=="boolean",string:r=>typeof r=="string",isSafeInteger:r=>Number.isSafeInteger(r),array:r=>Array.isArray(r),field:(r,e)=>e.Fp.isValid(r),hash:r=>typeof r=="function"&&Number.isSafeInteger(r.outputLen)};function Ae(r,e,t={}){let n=(i,o,s)=>{let a=yo[o];if(typeof a!="function")throw new Error(`Invalid validator "${o}", expected function`);let c=r[i];if(!(s&&c===void 0)&&!a(c,r))throw new Error(`Invalid param ${String(i)}=${c} (${typeof c}), expected ${o}`)};for(let[i,o]of Object.entries(e))n(i,o,!1);for(let[i,o]of Object.entries(t))n(i,o,!0);return r}var Q=BigInt(0),W=BigInt(1),Fe=BigInt(2),wo=BigInt(3),vr=BigInt(4),En=BigInt(5),kn=BigInt(8),mo=BigInt(9),go=BigInt(16);function j(r,e){let t=r%e;return t>=Q?t:e+t}function Sr(r,e,t){if(t<=Q||e 0");if(t===W)return Q;let n=W;for(;e>Q;)e&W&&(n=n*r%t),r=r*r%t,e>>=W;return n}function V(r,e,t){let n=r;for(;e-- >Q;)n*=n,n%=t;return n}function vn(r,e){if(r===Q||e<=Q)throw new Error(`invert: expected positive integers, got n=${r} mod=${e}`);let t=j(r,e),n=e,i=Q,o=W,s=W,a=Q;for(;t!==Q;){let u=n/t,f=n%t,h=i-s*u,d=o-a*u;n=t,t=f,i=s,o=a,s=h,a=d}if(n!==W)throw new Error("invert: does not exist");return j(i,e)}function _o(r){let e=(r-W)/Fe,t,n,i;for(t=r-W,n=0;t%Fe===Q;t/=Fe,n++);for(i=Fe;i(j(r,e)&W)===W,ko=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function An(r){let e={ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"},t=ko.reduce((n,i)=>(n[i]="function",n),e);return Ae(r,t)}function vo(r,e,t){if(t 0");if(t===Q)return r.ONE;if(t===W)return e;let n=r.ONE,i=e;for(;t>Q;)t&W&&(n=r.mul(n,i)),i=r.sqr(i),t>>=W;return n}function So(r,e){let t=new Array(e.length),n=e.reduce((o,s,a)=>r.is0(s)?o:(t[a]=o,r.mul(o,s)),r.ONE),i=r.inv(n);return e.reduceRight((o,s,a)=>r.is0(s)?o:(t[a]=r.mul(o,t[a]),r.mul(o,s)),i),t}function Ar(r,e){let t=e!==void 0?e:r.toString(2).length,n=Math.ceil(t/8);return{nBitLength:t,nByteLength:n}}function Xt(r,e,t=!1,n={}){if(r<=Q)throw new Error(`Expected Fp ORDER > 0, got ${r}`);let{nBitLength:i,nByteLength:o}=Ar(r,e);if(o>2048)throw new Error("Field lengths over 2048 bytes are not supported");let s=Eo(r),a=Object.freeze({ORDER:r,BITS:i,BYTES:o,MASK:_n(i),ZERO:Q,ONE:W,create:c=>j(c,r),isValid:c=>{if(typeof c!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof c}`);return Q<=c&&cc===Q,isOdd:c=>(c&W)===W,neg:c=>j(-c,r),eql:(c,u)=>c===u,sqr:c=>j(c*c,r),add:(c,u)=>j(c+u,r),sub:(c,u)=>j(c-u,r),mul:(c,u)=>j(c*u,r),pow:(c,u)=>vo(a,c,u),div:(c,u)=>j(c*vn(u,r),r),sqrN:c=>c*c,addN:(c,u)=>c+u,subN:(c,u)=>c-u,mulN:(c,u)=>c*u,inv:c=>vn(c,r),sqrt:n.sqrt||(c=>s(a,c)),invertBatch:c=>So(a,c),cmov:(c,u,f)=>f?u:c,toBytes:c=>t?ze(c,o):kr(c,o),fromBytes:c=>{if(c.length!==o)throw new Error(`Fp.fromBytes: expected ${o}, got ${c.length}`);return t?_e(c):Er(c)}});return Object.freeze(a)}function Pn(r,e){if(!r.isOdd)throw new Error("Field doesn't have isOdd");let t=r.sqrt(e);return r.isOdd(t)?r.neg(t):t}var Ao=BigInt(0),Pr=BigInt(1);function In(r,e){let t=(i,o)=>{let s=o.negate();return i?s:o},n=i=>{let o=Math.ceil(e/i)+1,s=2**(i-1);return{windows:o,windowSize:s}};return{constTimeNegate:t,unsafeLadder(i,o){let s=r.ZERO,a=i;for(;o>Ao;)o&Pr&&(s=s.add(a)),a=a.double(),o>>=Pr;return s},precomputeWindow(i,o){let{windows:s,windowSize:a}=n(o),c=[],u=i,f=u;for(let h=0;h>=m,v>c&&(v-=d,s+=Pr);let $=_,X=_+Math.abs(v)-1,y=k%2!==0,L=v<0;v===0?f=f.add(t(y,o[$])):u=u.add(t(L,o[X]))}return{p:u,f}},wNAFCached(i,o,s,a){let c=i._WINDOW_SIZE||1,u=o.get(i);return u||(u=this.precomputeWindow(i,c),c!==1&&o.set(i,a(u))),this.wNAF(c,u,s)}}}function Bn(r){return An(r.Fp),Ae(r,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Ar(r.n,r.nBitLength),...r,p:r.Fp.ORDER})}var we=BigInt(0),de=BigInt(1),Yt=BigInt(2),Po=BigInt(8),Io={zip215:!0};function Bo(r){let e=Bn(r);return Ae(r,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...e})}function $e(r){let e=Bo(r),{Fp:t,n,prehash:i,hash:o,randomBytes:s,nByteLength:a,h:c}=e,u=Yt<{try{return{isValid:!0,value:t.sqrt(p*t.inv(l))}}catch{return{isValid:!1,value:we}}}),d=e.adjustScalarBytes||(p=>p),m=e.domain||((p,l,b)=>{if(l.length||b)throw new Error("Contexts/pre-hash are not supported");return p}),k=p=>typeof p=="bigint"&&wek(p)&&k(l)&&pp===we||_(p,u);function $(p,l){if(_(p,l))return p;throw new Error(`Expected valid scalar < ${l}, got ${typeof p} ${p}`)}function X(p){return p===we?p:$(p,n)}let y=new Map;function L(p){if(!(p instanceof E))throw new Error("ExtendedPoint expected")}class E{constructor(l,b,x,g){if(this.ex=l,this.ey=b,this.ez=x,this.et=g,!v(l))throw new Error("x required");if(!v(b))throw new Error("y required");if(!v(x))throw new Error("z required");if(!v(g))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof E)throw new Error("extended point not allowed");let{x:b,y:x}=l||{};if(!v(b)||!v(x))throw new Error("invalid affine point");return new E(b,x,de,f(b*x))}static normalizeZ(l){let b=t.invertBatch(l.map(x=>x.ez));return l.map((x,g)=>x.toAffine(b[g])).map(E.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,y.delete(this)}assertValidity(){let{a:l,d:b}=e;if(this.is0())throw new Error("bad point: ZERO");let{ex:x,ey:g,ez:U,et:T}=this,z=f(x*x),O=f(g*g),D=f(U*U),Y=f(D*D),J=f(z*l),me=f(D*f(J+O)),fe=f(Y+f(b*f(z*O)));if(me!==fe)throw new Error("bad point: equation left != right (1)");let Ie=f(x*g),Ee=f(U*T);if(Ie!==Ee)throw new Error("bad point: equation left != right (2)")}equals(l){L(l);let{ex:b,ey:x,ez:g}=this,{ex:U,ey:T,ez:z}=l,O=f(b*z),D=f(U*g),Y=f(x*z),J=f(T*g);return O===D&&Y===J}is0(){return this.equals(E.ZERO)}negate(){return new E(f(-this.ex),this.ey,this.ez,f(-this.et))}double(){let{a:l}=e,{ex:b,ey:x,ez:g}=this,U=f(b*b),T=f(x*x),z=f(Yt*f(g*g)),O=f(l*U),D=b+x,Y=f(f(D*D)-U-T),J=O+T,me=J-z,fe=O-T,Ie=f(Y*me),Ee=f(J*fe),mt=f(Y*fe),gt=f(me*J);return new E(Ie,Ee,gt,mt)}add(l){L(l);let{a:b,d:x}=e,{ex:g,ey:U,ez:T,et:z}=this,{ex:O,ey:D,ez:Y,et:J}=l;if(b===BigInt(-1)){let Nr=f((U-g)*(D+O)),Dr=f((U+g)*(D-O)),ur=f(Dr-Nr);if(ur===we)return this.double();let jr=f(T*Yt*J),zr=f(z*Yt*Y),Rr=zr+jr,Mr=Dr+Nr,qr=zr-jr,Qn=f(Rr*ur),ei=f(Mr*qr),ti=f(Rr*qr),ri=f(ur*Mr);return new E(Qn,ei,ri,ti)}let me=f(g*O),fe=f(U*D),Ie=f(z*x*J),Ee=f(T*Y),mt=f((g+U)*(O+D)-me-fe),gt=Ee-Ie,Tr=Ee+Ie,Cr=f(fe-b*me),Xn=f(mt*gt),Yn=f(Tr*Cr),Wn=f(mt*Cr),Jn=f(gt*Tr);return new E(Xn,Yn,Jn,Wn)}subtract(l){return this.add(l.negate())}wNAF(l){return K.wNAFCached(this,y,l,E.normalizeZ)}multiply(l){let{p:b,f:x}=this.wNAF($(l,n));return E.normalizeZ([b,x])[0]}multiplyUnsafe(l){let b=X(l);return b===we?M:this.equals(M)||b===de?this:this.equals(H)?this.wNAF(b).p:K.unsafeLadder(this,b)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return K.unsafeLadder(this,n).is0()}toAffine(l){let{ex:b,ey:x,ez:g}=this,U=this.is0();l==null&&(l=U?Po:t.inv(g));let T=f(b*l),z=f(x*l),O=f(g*l);if(U)return{x:we,y:de};if(O!==de)throw new Error("invZ was invalid");return{x:T,y:z}}clearCofactor(){let{h:l}=e;return l===de?this:this.multiplyUnsafe(l)}static fromHex(l,b=!1){let{d:x,a:g}=e,U=t.BYTES;l=le("pointHex",l,U);let T=l.slice(),z=l[U-1];T[U-1]=z&-129;let O=_e(T);O===we||(b?$(O,u):$(O,t.ORDER));let D=f(O*O),Y=f(D-de),J=f(x*D-g),{isValid:me,value:fe}=h(Y,J);if(!me)throw new Error("Point.fromHex: invalid y coordinate");let Ie=(fe&de)===de,Ee=(z&128)!==0;if(!b&&fe===we&&Ee)throw new Error("Point.fromHex: x=0 and x_0=1");return Ee!==Ie&&(fe=f(-fe)),E.fromAffine({x:fe,y:O})}static fromPrivateKey(l){return I(l).point}toRawBytes(){let{x:l,y:b}=this.toAffine(),x=ze(b,t.BYTES);return x[x.length-1]|=l&de?128:0,x}toHex(){return dt(this.toRawBytes())}}E.BASE=new E(e.Gx,e.Gy,de,f(e.Gx*e.Gy)),E.ZERO=new E(we,de,de,we);let{BASE:H,ZERO:M}=E,K=In(E,a*8);function w(p){return j(p,n)}function B(p){return w(_e(p))}function I(p){let l=a;p=le("private key",p,l);let b=le("hashed private key",o(p),2*l),x=d(b.slice(0,l)),g=b.slice(l,2*l),U=B(x),T=H.multiply(U),z=T.toRawBytes();return{head:x,prefix:g,scalar:U,point:T,pointBytes:z}}function A(p){return I(p).pointBytes}function S(p=new Uint8Array,...l){let b=Vt(...l);return B(o(m(b,le("context",p),!!i)))}function q(p,l,b={}){p=le("message",p),i&&(p=i(p));let{prefix:x,scalar:g,pointBytes:U}=I(l),T=S(b.context,x,p),z=H.multiply(T).toRawBytes(),O=S(b.context,z,U,p),D=w(T+O*g);X(D);let Y=Vt(z,ze(D,t.BYTES));return le("result",Y,a*2)}let N=Io;function G(p,l,b,x=N){let{context:g,zip215:U}=x,T=t.BYTES;p=le("signature",p,2*T),l=le("message",l),i&&(l=i(l));let z=_e(p.slice(T,2*T)),O,D,Y;try{O=E.fromHex(b,U),D=E.fromHex(p.slice(0,T),U),Y=H.multiplyUnsafe(z)}catch{return!1}if(!U&&O.isSmallOrder())return!1;let J=S(g,D.toRawBytes(),O.toRawBytes(),l);return D.add(O.multiplyUnsafe(J)).subtract(Y).clearCofactor().equals(E.ZERO)}return H._setWindowSize(8),{CURVE:e,getPublicKey:A,sign:q,verify:G,ExtendedPoint:E,utils:{getExtendedPublicKey:I,randomPrivateKey:()=>s(t.BYTES),precompute(p=8,l=E.BASE){return l._setWindowSize(p),l.multiply(BigInt(3)),l}}}}var pt=BigInt(0),Ir=BigInt(1);function Lo(r){return Ae(r,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...r})}function Wt(r){let e=Lo(r),{P:t}=e,n=y=>j(y,t),i=e.montgomeryBits,o=Math.ceil(i/8),s=e.nByteLength,a=e.adjustScalarBytes||(y=>y),c=e.powPminus2||(y=>Sr(y,t-BigInt(2),t));function u(y,L,E){let H=n(y*(L-E));return L=n(L-H),E=n(E+H),[L,E]}function f(y){if(typeof y=="bigint"&&pt<=y&&y=pt;N--){let G=H>>N&Ir;A^=G,S=u(A,K,B),K=S[0],B=S[1],S=u(A,w,I),w=S[0],I=S[1],A=G;let F=K+w,p=n(F*F),l=K-w,b=n(l*l),x=p-b,g=B+I,U=B-I,T=n(U*F),z=n(g*l),O=T+z,D=T-z;B=n(O*O),I=n(M*n(D*D)),K=n(p*b),w=n(x*(p+n(h*x)))}S=u(A,K,B),K=S[0],B=S[1],S=u(A,w,I),w=S[0],I=S[1];let q=c(w);return n(K*q)}function m(y){return ze(n(y),o)}function k(y){let L=le("u coordinate",y,o);return s===o&&(L[s-1]&=127),_e(L)}function _(y){let L=le("scalar",y);if(L.length!==o&&L.length!==s)throw new Error(`Expected ${o} or ${s} bytes, got ${L.length}`);return _e(a(L))}function v(y,L){let E=k(L),H=_(y),M=d(E,H);if(M===pt)throw new Error("Invalid private or public key received");return m(M)}let $=m(e.Gu);function X(y){return v(y,$)}return{scalarMult:v,scalarMultBase:X,getSharedSecret:(y,L)=>v(y,L),getPublicKey:y=>X(y),utils:{randomPrivateKey:()=>e.randomBytes(e.nByteLength)},GuBytes:$}}var bt=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),Ln=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752"),wc=BigInt(0),Uo=BigInt(1),Br=BigInt(2),Oo=BigInt(5),Kn=BigInt(10),Ho=BigInt(20),To=BigInt(40),Un=BigInt(80);function On(r){let e=bt,n=r*r%e*r%e,i=V(n,Br,e)*n%e,o=V(i,Uo,e)*r%e,s=V(o,Oo,e)*o%e,a=V(s,Kn,e)*s%e,c=V(a,Ho,e)*a%e,u=V(c,To,e)*c%e,f=V(u,Un,e)*u%e,h=V(f,Un,e)*u%e,d=V(h,Kn,e)*s%e;return{pow_p_5_8:V(d,Br,e)*r%e,b2:n}}function Hn(r){return r[0]&=248,r[31]&=127,r[31]|=64,r}function Co(r,e){let t=bt,n=j(e*e*e,t),i=j(n*n*e,t),o=On(r*i).pow_p_5_8,s=j(r*n*o,t),a=j(e*s*s,t),c=s,u=j(s*Ln,t),f=a===r,h=a===j(-r,t),d=a===j(-r*Ln,t);return f&&(s=c),(h||d)&&(s=u),Sn(s,t)&&(s=j(-s,t)),{isValid:f||h,value:s}}var Pe=Xt(bt,void 0,!0),Lr={a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),Fp:Pe,n:BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960"),hash:ut,randomBytes:Qe,adjustScalarBytes:Hn,uvRatio:Co},Tn=$e(Lr);function Cn(r,e,t){if(e.length>255)throw new Error("Context is too big");return Nt(ct("SigEd25519 no Ed25519 collisions"),new Uint8Array([t?1:0,e.length]),e,r)}var mc=$e({...Lr,domain:Cn}),gc=$e({...Lr,domain:Cn,prehash:ut}),Kr=(()=>Wt({P:bt,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:r=>{let e=bt,{pow_p_5_8:t,b2:n}=On(r);return j(V(t,BigInt(3),e)*n,e)},adjustScalarBytes:Hn,randomBytes:Qe}))();var No=(Pe.ORDER+BigInt(3))/BigInt(8),_c=Pe.pow(Br,No),Ec=Pe.sqrt(Pe.neg(Pe.ONE)),kc=(Pe.ORDER-BigInt(5))/BigInt(8),vc=BigInt(486662);var Sc=Pn(Pe,Pe.neg(BigInt(486664)));var Ac=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),Pc=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),Ic=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),Bc=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");var Lc=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var ee=class{constructor(e,t,n,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=t,this.type=n,this.algorithm={name:e},this.usages=i,n==="public"&&(this.usages=[])}};var Ze="X25519",Jt=class extends ne{constructor(e){super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=e,this._nPk=32,this._nSk=32}async serializePublicKey(e){return await this._serializePublicKey(e)}async deserializePublicKey(e){return await this._deserializePublicKey(e)}async importKey(e,t,n){if(e==="raw")return await this._importRawKey(t,n);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,n)}async derivePublicKey(e){return await this._derivePublicKey(e)}async generateKeyPair(){let e=Tn.utils.randomPrivateKey(),t=new ee(Ze,e,"private",ce);return{publicKey:await this.derivePublicKey(t),privateKey:t}}async deriveKeyPair(e){let t=await this._hkdf.labeledExtract(Z,it,new Uint8Array(e)),n=await this._hkdf.labeledExpand(t,Mt,Z,this._nSk),i=new ee(Ze,new Uint8Array(n),"private",ce);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}async dh(e,t){return await this._dh(e,t)}_serializePublicKey(e){return new Promise(t=>{t(e.key.buffer)})}_deserializePublicKey(e){return new Promise((t,n)=>{e.byteLength!==this._nPk?n(new Error("Invalid public key for the ciphersuite")):t(new ee(Ze,new Uint8Array(e),"public"))})}_importRawKey(e,t){return new Promise((n,i)=>{t&&e.byteLength!==this._nPk&&i(new Error("Invalid public key for the ciphersuite")),!t&&e.byteLength!==this._nSk&&i(new Error("Invalid private key for the ciphersuite")),n(new ee(Ze,new Uint8Array(e),t?"public":"private",t?[]:ce))})}_importJWK(e,t){return new Promise((n,i)=>{(typeof e.kty>"u"||e.kty!=="OKP")&&i(new Error(`Invalid kty: ${e.kty}`)),(typeof e.crv>"u"||e.crv!=="X25519")&&i(new Error(`Invalid crv: ${e.crv}`)),t?(typeof e.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof e.x>"u"&&i(new Error("Invalid key: `x` not found")),n(new ee(Ze,nt(e.x),"public"))):(typeof e.d!="string"&&i(new Error("Invalid key: `d` not found")),n(new ee(Ze,nt(e.d),"private",ce)))})}_derivePublicKey(e){return new Promise(t=>{let n=Kr.getPublicKey(e.key);t(new ee(Ze,n,"public"))})}_dh(e,t){return new Promise((n,i)=>{try{n(Kr.getSharedSecret(e.key,t.key).buffer)}catch(o){i(o)}})}};var Qt=class extends se{constructor(){let e=new Ce,t=new Jt(e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemX25519HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};var[jn,zn,Rn]=[[],[],[]],Do=BigInt(0),yt=BigInt(1),jo=BigInt(2),zo=BigInt(7),Ro=BigInt(256),Mo=BigInt(113);for(let r=0,e=yt,t=1,n=0;r<24;r++){[t,n]=[n,(2*t+3*n)%5],jn.push(2*(5*n+t)),zn.push((r+1)*(r+2)/2%64);let i=Do;for(let o=0;o<7;o++)e=(e<>zo)*Mo)%Ro,e&jo&&(i^=yt<<(yt<t>32?P.rotlBH(r,e,t):P.rotlSH(r,e,t),Dn=(r,e,t)=>t>32?P.rotlBL(r,e,t):P.rotlSL(r,e,t);function Fo(r,e=24){let t=new Uint32Array(10);for(let n=24-e;n<24;n++){for(let s=0;s<10;s++)t[s]=r[s]^r[s+10]^r[s+20]^r[s+30]^r[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,u=t[c],f=t[c+1],h=Nn(u,f,1)^t[a],d=Dn(u,f,1)^t[a+1];for(let m=0;m<50;m+=10)r[s+m]^=h,r[s+m+1]^=d}let i=r[2],o=r[3];for(let s=0;s<24;s++){let a=zn[s],c=Nn(i,o,a),u=Dn(i,o,a),f=jn[s];i=r[f],o=r[f+1],r[f]=c,r[f+1]=u}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)t[a]=r[s+a];for(let a=0;a<10;a++)r[s+a]^=~t[(a+2)%10]&t[(a+4)%10]}r[0]^=qo[n],r[1]^=Go[n]}t.fill(0)}var er=class r extends Be{constructor(e,t,n,i=!1,o=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=n,this.enableXOF=i,this.rounds=o,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,oe.number(n),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=an(this.state)}keccak(){Fo(this.state32,this.rounds),this.posOut=0,this.pos=0}update(e){oe.exists(this);let{blockLen:t,state:n}=this;e=Le(e);let i=e.length;for(let o=0;o=n&&this.keccak();let s=Math.min(n-this.posOut,o-i);e.set(t.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return e}xofInto(e){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return oe.number(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(oe.output(e,this),this.finished)throw new Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){let{blockLen:t,suffix:n,outputLen:i,rounds:o,enableXOF:s}=this;return e||(e=new r(t,n,i,s,o)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=o,e.suffix=n,e.outputLen=i,e.enableXOF=s,e.destroyed=this.destroyed,e}},Re=(r,e,t)=>he(()=>new er(e,r,t)),Zc=Re(6,144,224/8),Vc=Re(6,136,256/8),Xc=Re(6,104,384/8),Yc=Re(6,72,512/8),Wc=Re(1,144,224/8),Jc=Re(1,136,256/8),Qc=Re(1,104,384/8),ef=Re(1,72,512/8),Mn=(r,e,t)=>cn((n={})=>new er(e,r,n.dkLen===void 0?t:n.dkLen,!0)),tf=Mn(31,168,128/8),Ur=Mn(31,136,256/8);var $o=he(()=>Ur.create({dkLen:114})),Zo=he(()=>Ur.create({dkLen:64})),xt=BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439");function qn(r){let e=xt,t=BigInt(1),n=BigInt(2),i=BigInt(3),o=BigInt(11),s=BigInt(22),a=BigInt(44),c=BigInt(88),u=BigInt(223),f=r*r*r%e,h=f*f*r%e,d=V(h,i,e)*h%e,m=V(d,i,e)*h%e,k=V(m,n,e)*f%e,_=V(k,o,e)*k%e,v=V(_,s,e)*_%e,$=V(v,a,e)*v%e,X=V($,c,e)*$%e,y=V(X,a,e)*v%e,L=V(y,n,e)*f%e,E=V(L,t,e)*r%e;return V(E,u,e)*L%e}function Gn(r){return r[0]&=252,r[55]|=128,r[56]=0,r}var Fn=Xt(xt,456,!0),uf=BigInt(4),$n={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:Fn,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:$o,randomBytes:Qe,adjustScalarBytes:Gn,domain:(r,e,t)=>{if(e.length>255)throw new Error(`Context is too big: ${e.length}`);return Nt(ct("SigEd448"),new Uint8Array([t?1:0,e.length]),e,r)},uvRatio:(r,e)=>{let t=xt,n=j(r*r*e,t),i=j(n*r,t),o=j(i*n*e,t),s=qn(o),a=j(i*s,t),c=j(a*a,t);return{isValid:j(c*e,t)===r,value:a}}},Zn=$e($n),lf=$e({...$n,prehash:Zo}),Or=(()=>Wt({a:BigInt(156326),montgomeryBits:448,nByteLength:57,P:xt,Gu:BigInt(5),powPminus2:r=>{let e=xt,t=qn(r),n=V(t,BigInt(2),e);return j(n*r,e)},adjustScalarBytes:Gn,randomBytes:Qe}))();var hf=(Fn.ORDER-BigInt(3))/BigInt(4),df=BigInt(156326);var Ve="X448",tr=class extends ne{constructor(e){super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=e,this._nPk=56,this._nSk=56}async serializePublicKey(e){return await this._serializePublicKey(e)}async deserializePublicKey(e){return await this._deserializePublicKey(e)}async importKey(e,t,n){if(e==="raw")return await this._importRawKey(t,n);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,n)}async derivePublicKey(e){return await this._derivePublicKey(e)}async generateKeyPair(){let e=Zn.utils.randomPrivateKey(),t=new ee(Ve,e,"private",ce);return{publicKey:await this.derivePublicKey(t),privateKey:t}}async deriveKeyPair(e){let t=await this._hkdf.labeledExtract(Z,it,new Uint8Array(e)),n=await this._hkdf.labeledExpand(t,Mt,Z,this._nSk),i=new ee(Ve,new Uint8Array(n),"private",ce);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}async dh(e,t){return await this._dh(e,t)}_serializePublicKey(e){return new Promise(t=>{t(e.key.buffer)})}_deserializePublicKey(e){return new Promise((t,n)=>{e.byteLength!==this._nPk?n(new Error("Invalid public key for the ciphersuite")):t(new ee(Ve,new Uint8Array(e),"public"))})}_importRawKey(e,t){return new Promise((n,i)=>{t&&e.byteLength!==this._nPk&&i(new Error("Invalid public key for the ciphersuite")),!t&&e.byteLength!==this._nSk&&i(new Error("Invalid private key for the ciphersuite")),n(new ee(Ve,new Uint8Array(e),t?"public":"private",t?[]:ce))})}_importJWK(e,t){return new Promise((n,i)=>{e.kty!=="OKP"&&i(new Error(`Invalid kty: ${e.kty}`)),e.crv!=="X448"&&i(new Error(`Invalid crv: ${e.crv}`)),t?(typeof e.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof e.x!="string"&&i(new Error("Invalid key: `x` not found")),n(new ee(Ve,nt(e.x),"public"))):(typeof e.d!="string"&&i(new Error("Invalid key: `d` not found")),n(new ee(Ve,nt(e.d),"private",ce)))})}_derivePublicKey(e){return new Promise(t=>{let n=Or.getPublicKey(e.key);t(new ee(Ve,n,"public"))})}_dh(e,t){return new Promise((n,i)=>{try{n(Or.getSharedSecret(e.key,t.key).buffer)}catch(o){i(o)}})}};var rr=class extends se{constructor(){let e=new je,t=new tr(e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemX448HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56})}};var Vo=new Uint8Array([115,101,99]),ot=class{constructor(e,t,n){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=n}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new te("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Vo,new Uint8Array(e),t)}catch(n){throw new vt(n)}}_emitError(){return new Promise((e,t)=>{t(new ge("Not available"))})}},nr=class extends ot{},ir=class extends ot{constructor(e,t,n,i){super(e,t,n),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=i}};var st=class extends ot{constructor(e,t,n){if(super(e,t,n.exporterSecret),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nK",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nN",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nT",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_ctx",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),n.key===void 0||n.baseNonce===void 0||n.seq===void 0)throw new Error("Required parameters are missing");this._aead=n.aead,this._nK=this._aead.keySize,this._nN=this._aead.nonceSize,this._nT=this._aead.tagSize;let i=this._aead.createEncryptionContext(n.key);this._ctx={key:i,baseNonce:n.baseNonce,seq:n.seq}}computeNonce(e){let t=xe(e.seq,e.baseNonce.byteLength);return yn(e.baseNonce,t)}incrementSeq(e){if(e.seq>Number.MAX_SAFE_INTEGER)throw new Pt("Message limit reached");e.seq+=1}};var or=class extends st{async open(e,t=Z){let n;try{n=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(i){throw new At(i)}return this.incrementSeq(this._ctx),n}};var sr=class extends st{constructor(e,t,n,i){super(e,t,n),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=i}async seal(e,t=Z){let n;try{n=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(i){throw new St(i)}return this.incrementSeq(this._ctx),n}};var ar=class extends se{constructor(){let e=new Oe,t=new be(C.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},cr=class extends se{constructor(){let e=new He,t=new be(C.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},fr=class extends se{constructor(){let e=new Te,t=new be(C.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Xo=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Yo=new Uint8Array([101,120,112]),Wo=new Uint8Array([105,110,102,111,95,104,97,115,104]),Jo=new Uint8Array([107,101,121]),Qo=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),es=new Uint8Array([115,101,99,114,101,116]),ts=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),wt=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case C.DhkemP256HkdfSha256:this._kem=new ar;break;case C.DhkemP384HkdfSha384:this._kem=new cr;break;case C.DhkemP521HkdfSha512:this._kem=new fr;break;default:throw new te(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case pe.HkdfSha256:this._kdf=new Oe;break;case pe.HkdfSha384:this._kdf=new He;break;default:this._kdf=new Te;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case re.Aes128Gcm:this._aead=new Ye;break;case re.Aes256Gcm:this._aead=new We;break;case re.ExportOnly:this._aead=new Je;break;default:throw new te(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(ts),this._suiteId.set(xe(this._kem.id,2),4),this._suiteId.set(xe(this._kdf.id,2),6),this._suiteId.set(xe(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,n=!0){return await this._setup(),await this._kem.importKey(e,t,n)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),n;return e.psk!==void 0?n=e.senderKey!==void 0?ve.AuthPsk:ve.Psk:n=e.senderKey!==void 0?ve.Auth:ve.Base,await this._keyScheduleS(n,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),n;return e.psk!==void 0?n=e.senderPublicKey!==void 0?ve.AuthPsk:ve.Psk:n=e.senderPublicKey!==void 0?ve.Auth:ve.Base,await this._keyScheduleR(n,t,e)}async seal(e,t,n=Z){let i=await this.createSenderContext(e);return{ct:await i.seal(t,n),enc:i.enc}}async open(e,t,n=Z){return await(await this.createRecipientContext(e)).open(t,n)}async _setup(){if(this._api!==void 0)return;let e=await Rt();this._kem.init(e),this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,n){let i=n.psk===void 0?Z:new Uint8Array(n.psk.id),o=await this._kdf.labeledExtract(Z,Qo,i),s=n.info===void 0?Z:new Uint8Array(n.info),a=await this._kdf.labeledExtract(Z,Wo,s),c=new Uint8Array(1+o.byteLength+a.byteLength);c.set(new Uint8Array([e]),0),c.set(new Uint8Array(o),1),c.set(new Uint8Array(a),1+o.byteLength);let u=n.psk===void 0?Z:new Uint8Array(n.psk.key),f=this._kdf.buildLabeledIkm(es,u),h=this._kdf.buildLabeledInfo(Yo,c,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,f,h,this._kdf.hashSize);if(this._aead.id===re.ExportOnly)return{aead:this._aead,exporterSecret:d};let m=this._kdf.buildLabeledInfo(Jo,c,this._aead.keySize),k=await this._kdf.extractAndExpand(t,f,m,this._aead.keySize),_=this._kdf.buildLabeledInfo(Xo,c,this._aead.nonceSize),v=await this._kdf.extractAndExpand(t,f,_,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:k,baseNonce:new Uint8Array(v),seq:0}}async _keyScheduleS(e,t,n,i){let o=await this._keySchedule(e,t,i);return o.key===void 0?new ir(this._api,this._kdf,o.exporterSecret,n):new sr(this._api,this._kdf,o,n)}async _keyScheduleR(e,t,n){let i=await this._keySchedule(e,t,n);return i.key===void 0?new nr(this._api,this._kdf,i.exporterSecret):new or(this._api,this._kdf,i)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new te("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new te(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new te("Too long psk.key");if(e.psk.id.byteLength>8192)throw new te("Too long psk.id")}}};var Hr=class extends wt{constructor(e){if(typeof e.kem=="number")switch(e.kem){case C.DhkemP256HkdfSha256:e.kem=new Gt;break;case C.DhkemP384HkdfSha384:e.kem=new Ft;break;case C.DhkemP521HkdfSha512:e.kem=new $t;break;case C.DhkemX25519HkdfSha256:e.kem=new Qt;break;case C.DhkemX448HkdfSha512:e.kem=new rr;break;default:throw new te(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf=="number")switch(e.kdf){case pe.HkdfSha256:e.kdf=new Ce;break;case pe.HkdfSha384:e.kdf=new rt;break;default:e.kdf=new je;break}if(typeof e.aead=="number")switch(e.aead){case re.Aes128Gcm:e.aead=new Ye;break;case re.Aes256Gcm:e.aead=new We;break;case re.Chacha20Poly1305:e.aead=new Ht;break;default:e.aead=new Je;break}super(e)}};export{Zr as Aead,re as AeadId,Hr as CipherSuite,wt as CipherSuiteNative,kt as DecapError,It as DeriveKeyPairError,Xe as DeserializeError,Et as EncapError,vt as ExportError,ue as HpkeError,te as InvalidParamError,$r as Kdf,pe as KdfId,Fr as Kem,C as KemId,Pt as MessageLimitReachedError,ge as NotSupportedError,At as OpenError,St as SealError,_t as SerializeError,Gr as ValidationError}; +var ue=class extends Error{constructor(e){let t;e instanceof Error?t=e.message:typeof e=="string"?t=e:t="",super(t),this.name=this.constructor.name}},te=class extends ue{},Gr=class extends ue{},_t=class extends ue{},Xe=class extends ue{},Et=class extends ue{},kt=class extends ue{},vt=class extends ue{},St=class extends ue{},At=class extends ue{},Pt=class extends ue{},It=class extends ue{},me=class extends ue{};var ve={Base:0,Psk:1,Auth:2,AuthPsk:3},Fr={DhkemP256HkdfSha256:16,DhkemP384HkdfSha384:17,DhkemP521HkdfSha512:18,DhkemSecp256k1HkdfSha256:19,DhkemX25519HkdfSha256:32,DhkemX448HkdfSha512:33},C=Fr,$r={HkdfSha256:1,HkdfSha384:2,HkdfSha512:3},pe=$r,Zr={Aes128Gcm:1,Aes256Gcm:2,Chacha20Poly1305:3,ExportOnly:65535},re=Zr;var Z=new Uint8Array(0);var Bt=class{constructor(){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0})}checkInit(){if(this._api===void 0)throw new Error("Not initialized. Call init()")}},ne=class extends Bt{constructor(){super()}init(e){this._api=e}},Lt=class extends Bt{constructor(){super(),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:Z})}init(e,t){this._api=e,this._suiteId=t}};var Vr=["encrypt","decrypt"];var Kt=class{constructor(e,t){Object.defineProperty(this,"_rawKey",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._rawKey=t}async seal(e,t,n){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let i={name:"AES-GCM",iv:e,additionalData:n};return await this._api.encrypt(i,this._key,t)}async open(e,t,n){this._key===void 0&&(this._key=await this._importKey(this._rawKey),new Uint8Array(this._rawKey).fill(0));let i={name:"AES-GCM",iv:e,additionalData:n};return await this._api.decrypt(i,this._key,t)}async _importKey(e){return await this._api.importKey("raw",e,{name:"AES-GCM"},!0,Vr)}},Ye=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:re.Aes128Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:16}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new Kt(this._api,e)}},We=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:re.Aes256Gcm}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return this.checkInit(),new Kt(this._api,e)}};var Je=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:re.ExportOnly}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:0})}createEncryptionContext(e){throw new me("createEncryptionContext() is not supported on ExportOnly")}};var ri=r=>r instanceof Uint8Array;var Se=r=>new Uint32Array(r.buffer,r.byteOffset,Math.floor(r.byteLength/4)),Xr=r=>new DataView(r.buffer,r.byteOffset,r.byteLength),ni=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!ni)throw new Error("Non little-endian hardware is not supported");function Ot(r){if(typeof r!="string")throw new Error(`utf8ToBytes expected string, got ${typeof r}`);return new Uint8Array(new TextEncoder().encode(r))}function Ut(r){if(typeof r=="string"&&(r=Ot(r)),!ri(r))throw new Error(`expected Uint8Array, got ${typeof r}`);return r}var ii=r=>Object.prototype.toString.call(r)==="[object Object]"&&r.constructor===Object;function Yr(r,e){if(e!==void 0&&(typeof e!="object"||!ii(e)))throw new Error("options must be object or undefined");return Object.assign(r,e)}function Me(r,e){if(!(r instanceof Uint8Array))throw new Error("Uint8Array expected");if(typeof e=="number"&&r.length!==e)throw new Error(`Uint8Array length ${e} expected`)}function Wr(r,e){if(r.length!==e.length)throw new Error("equalBytes: Different size of Uint8Arrays");let t=!0;for(let n=0;n>i&o),a=Number(t&o),c=n?4:0,u=n?0:4;r.setUint32(e+c,s,n),r.setUint32(e+u,a,n)}function hr(r){if(!Number.isSafeInteger(r)||r<0)throw new Error(`Wrong positive integer: ${r}`)}function oi(r){if(typeof r!="boolean")throw new Error(`Expected boolean, not ${r}`)}function Jr(r,...e){if(!(r instanceof Uint8Array))throw new Error("Expected Uint8Array");if(e.length>0&&!e.includes(r.length))throw new Error(`Expected Uint8Array of length ${e}, not of length=${r.length}`)}function si(r){if(typeof r!="function"||typeof r.create!="function")throw new Error("hash must be wrapped by utils.wrapConstructor");hr(r.outputLen),hr(r.blockLen)}function ai(r,e=!0){if(r.destroyed)throw new Error("Hash instance has been destroyed");if(e&&r.finished)throw new Error("Hash#digest() has already been called")}function ci(r,e){Jr(r);let t=e.outputLen;if(r.lengthr[e++]&255|(r[e++]&255)<<8,dr=class{constructor(e){this.blockLen=16,this.outputLen=16,this.buffer=new Uint8Array(16),this.r=new Uint16Array(10),this.h=new Uint16Array(10),this.pad=new Uint16Array(8),this.pos=0,this.finished=!1,e=Ut(e),Me(e,32);let t=ie(e,0),n=ie(e,2),i=ie(e,4),o=ie(e,6),s=ie(e,8),a=ie(e,10),c=ie(e,12),u=ie(e,14);this.r[0]=t&8191,this.r[1]=(t>>>13|n<<3)&8191,this.r[2]=(n>>>10|i<<6)&7939,this.r[3]=(i>>>7|o<<9)&8191,this.r[4]=(o>>>4|s<<12)&255,this.r[5]=s>>>1&8190,this.r[6]=(s>>>14|a<<2)&8191,this.r[7]=(a>>>11|c<<5)&8065,this.r[8]=(c>>>8|u<<8)&8191,this.r[9]=u>>>5&127;for(let f=0;f<8;f++)this.pad[f]=ie(e,16+2*f)}process(e,t,n=!1){let i=n?0:2048,{h:o,r:s}=this,a=s[0],c=s[1],u=s[2],f=s[3],h=s[4],d=s[5],m=s[6],k=s[7],_=s[8],v=s[9],$=ie(e,t+0),X=ie(e,t+2),y=ie(e,t+4),L=ie(e,t+6),E=ie(e,t+8),H=ie(e,t+10),M=ie(e,t+12),K=ie(e,t+14),w=o[0]+($&8191),B=o[1]+(($>>>13|X<<3)&8191),I=o[2]+((X>>>10|y<<6)&8191),A=o[3]+((y>>>7|L<<9)&8191),S=o[4]+((L>>>4|E<<12)&8191),q=o[5]+(E>>>1&8191),N=o[6]+((E>>>14|H<<2)&8191),G=o[7]+((H>>>11|M<<5)&8191),F=o[8]+((M>>>8|K<<8)&8191),p=o[9]+(K>>>5|i),l=0,b=l+w*a+B*(5*v)+I*(5*_)+A*(5*k)+S*(5*m);l=b>>>13,b&=8191,b+=q*(5*d)+N*(5*h)+G*(5*f)+F*(5*u)+p*(5*c),l+=b>>>13,b&=8191;let x=l+w*c+B*a+I*(5*v)+A*(5*_)+S*(5*k);l=x>>>13,x&=8191,x+=q*(5*m)+N*(5*d)+G*(5*h)+F*(5*f)+p*(5*u),l+=x>>>13,x&=8191;let g=l+w*u+B*c+I*a+A*(5*v)+S*(5*_);l=g>>>13,g&=8191,g+=q*(5*k)+N*(5*m)+G*(5*d)+F*(5*h)+p*(5*f),l+=g>>>13,g&=8191;let O=l+w*f+B*u+I*c+A*a+S*(5*v);l=O>>>13,O&=8191,O+=q*(5*_)+N*(5*k)+G*(5*m)+F*(5*d)+p*(5*h),l+=O>>>13,O&=8191;let T=l+w*h+B*f+I*u+A*c+S*a;l=T>>>13,T&=8191,T+=q*(5*v)+N*(5*_)+G*(5*k)+F*(5*m)+p*(5*d),l+=T>>>13,T&=8191;let z=l+w*d+B*h+I*f+A*u+S*c;l=z>>>13,z&=8191,z+=q*a+N*(5*v)+G*(5*_)+F*(5*k)+p*(5*m),l+=z>>>13,z&=8191;let U=l+w*m+B*d+I*h+A*f+S*u;l=U>>>13,U&=8191,U+=q*c+N*a+G*(5*v)+F*(5*_)+p*(5*k),l+=U>>>13,U&=8191;let D=l+w*k+B*m+I*d+A*h+S*f;l=D>>>13,D&=8191,D+=q*u+N*c+G*a+F*(5*v)+p*(5*_),l+=D>>>13,D&=8191;let Y=l+w*_+B*k+I*m+A*d+S*h;l=Y>>>13,Y&=8191,Y+=q*f+N*u+G*c+F*a+p*(5*v),l+=Y>>>13,Y&=8191;let J=l+w*v+B*_+I*k+A*m+S*d;l=J>>>13,J&=8191,J+=q*h+N*f+G*u+F*c+p*a,l+=J>>>13,J&=8191,l=(l<<2)+l|0,l=l+b|0,b=l&8191,l=l>>>13,x+=l,o[0]=b,o[1]=x,o[2]=g,o[3]=O,o[4]=T,o[5]=z,o[6]=U,o[7]=D,o[8]=Y,o[9]=J}finalize(){let{h:e,pad:t}=this,n=new Uint16Array(10),i=e[1]>>>13;e[1]&=8191;for(let a=2;a<10;a++)e[a]+=i,i=e[a]>>>13,e[a]&=8191;e[0]+=i*5,i=e[0]>>>13,e[0]&=8191,e[1]+=i,i=e[1]>>>13,e[1]&=8191,e[2]+=i,n[0]=e[0]+5,i=n[0]>>>13,n[0]&=8191;for(let a=1;a<10;a++)n[a]=e[a]+i,i=n[a]>>>13,n[a]&=8191;n[9]-=8192;let o=(i^1)-1;for(let a=0;a<10;a++)n[a]&=o;o=~o;for(let a=0;a<10;a++)e[a]=e[a]&o|n[a];e[0]=(e[0]|e[1]<<13)&65535,e[1]=(e[1]>>>3|e[2]<<10)&65535,e[2]=(e[2]>>>6|e[3]<<7)&65535,e[3]=(e[3]>>>9|e[4]<<4)&65535,e[4]=(e[4]>>>12|e[5]<<1|e[6]<<14)&65535,e[5]=(e[6]>>>2|e[7]<<11)&65535,e[6]=(e[7]>>>5|e[8]<<8)&65535,e[7]=(e[8]>>>8|e[9]<<5)&65535;let s=e[0]+t[0];e[0]=s&65535;for(let a=1;a<8;a++)s=(e[a]+t[a]|0)+(s>>>16)|0,e[a]=s&65535}update(e){ae.exists(this);let{buffer:t,blockLen:n}=this;e=Ut(e);let i=e.length;for(let o=0;o>>0,e[o++]=n[s]>>>8;return e}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}};function ui(r){let e=(n,i)=>r(i).update(Ut(n)).digest(),t=r(new Uint8Array(32));return e.outputLen=t.outputLen,e.blockLen=t.blockLen,e.create=n=>r(n),e}var Qr=ui(r=>new dr(r));var li=Ot("expand 16-byte k"),hi=Ot("expand 32-byte k"),di=Se(li),pi=Se(hi),en=r=>!(r.byteOffset%4),tn=r=>{let{core:e,rounds:t,counterRight:n,counterLen:i,allow128bitKeys:o,extendNonceFn:s,blockLen:a}=Yr({rounds:20,counterRight:!1,counterLen:8,allow128bitKeys:!0,blockLen:64},r);ae.number(i),ae.number(t),ae.number(a),ae.bool(n),ae.bool(o);let c=a/4;if(a%4!==0)throw new Error("Salsa/ChaCha: blockLen must be aligned to 4 bytes");return(u,f,h,d,m=0)=>{if(ae.bytes(u),ae.bytes(f),ae.bytes(h),d||(d=new Uint8Array(h.length)),ae.bytes(d),ae.number(m),m<0||m>=2**32-1)throw new Error("Salsa/ChaCha: counter overflow");if(d.length=2**32-1)throw new Error("Salsa/ChaCha: counter overflow");let I=Math.min(a,K-w);if(I===a&&M&&H){let A=w/4;if(w%4!==0)throw new Error("Salsa/ChaCha: invalid block position");for(let S=0;Sr<>>32-e;function bi(r,e,t,n,i,o=20){let s=r[0],a=r[1],c=r[2],u=r[3],f=e[0],h=e[1],d=e[2],m=e[3],k=e[4],_=e[5],v=e[6],$=e[7],X=i,y=t[0],L=t[1],E=t[2],H=s,M=a,K=c,w=u,B=f,I=h,A=d,S=m,q=k,N=_,G=v,F=$,p=X,l=y,b=L,x=E;for(let O=0;O{r.update(e);let t=e.length%16;t&&r.update(xi.subarray(t))},nn=(r,e,t,n,i)=>{let o=r(e,t,new Uint8Array(32)),s=Qr.create(o);i&&rn(s,i),rn(s,n);let a=new Uint8Array(16),c=Xr(a);lr(c,0,BigInt(i?i.length:0),!0),lr(c,8,BigInt(n.length),!0),s.update(a);let u=s.digest();return o.fill(0),u},wi=r=>(e,t,n)=>(Me(e,32),Me(t),{tagLength:16,encrypt:(o,s)=>{let a=o.length,c=a+16;s?Me(s,c):s=new Uint8Array(c),r(e,t,o,s,1);let u=nn(r,e,t,s.subarray(0,-16),n);return s.set(u,a),s},decrypt:(o,s)=>{let a=o.length,c=a-16;if(a<16)throw new Error("encrypted data must be at least 16 bytes");s?Me(s,c):s=new Uint8Array(c);let u=o.subarray(0,-16),f=o.subarray(-16),h=nn(r,e,t,u,n);if(!Wr(f,h))throw new Error("invalid tag");return r(e,t,u,s,1),s}}),pr=wi(yi);var br=class{constructor(e,t){Object.defineProperty(this,"_key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._key=new Uint8Array(t)}async seal(e,t,n){return await this._seal(e,t,n)}async open(e,t,n){return await this._open(e,t,n)}_seal(e,t,n){return new Promise(i=>{let o=pr(this._key,new Uint8Array(e),new Uint8Array(n)).encrypt(new Uint8Array(t));i(o.buffer)})}_open(e,t,n){return new Promise(i=>{let o=pr(this._key,new Uint8Array(e),new Uint8Array(n)).decrypt(new Uint8Array(t));i(o.buffer)})}},Ht=class extends ne{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:re.Chacha20Poly1305}),Object.defineProperty(this,"keySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"nonceSize",{enumerable:!0,configurable:!0,writable:!0,value:12}),Object.defineProperty(this,"tagSize",{enumerable:!0,configurable:!0,writable:!0,value:16})}createEncryptionContext(e){return new br(this._api,e)}};function yr(r){if(!Number.isSafeInteger(r)||r<0)throw new Error(`Wrong positive integer: ${r}`)}function mi(r){if(typeof r!="boolean")throw new Error(`Expected boolean, not ${r}`)}function on(r,...e){if(!(r instanceof Uint8Array))throw new Error("Expected Uint8Array");if(e.length>0&&!e.includes(r.length))throw new Error(`Expected Uint8Array of length ${e}, not of length=${r.length}`)}function gi(r){if(typeof r!="function"||typeof r.create!="function")throw new Error("Hash should be wrapped by utils.wrapConstructor");yr(r.outputLen),yr(r.blockLen)}function _i(r,e=!0){if(r.destroyed)throw new Error("Hash instance has been destroyed");if(e&&r.finished)throw new Error("Hash#digest() has already been called")}function Ei(r,e){on(r);let t=e.outputLen;if(r.lengthr instanceof Uint8Array;var an=r=>new Uint32Array(r.buffer,r.byteOffset,Math.floor(r.byteLength/4)),Ct=r=>new DataView(r.buffer,r.byteOffset,r.byteLength),ye=(r,e)=>r<<32-e|r>>>e,vi=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!vi)throw new Error("Non little-endian hardware is not supported");var Us=Array.from({length:256},(r,e)=>e.toString(16).padStart(2,"0"));function ct(r){if(typeof r!="string")throw new Error(`utf8ToBytes expected string, got ${typeof r}`);return new Uint8Array(new TextEncoder().encode(r))}function Le(r){if(typeof r=="string"&&(r=ct(r)),!sn(r))throw new Error(`expected Uint8Array, got ${typeof r}`);return r}function Nt(...r){let e=new Uint8Array(r.reduce((n,i)=>n+i.length,0)),t=0;return r.forEach(n=>{if(!sn(n))throw new Error("Uint8Array expected");e.set(n,t),t+=n.length}),e}var Be=class{clone(){return this._cloneInto()}};function he(r){let e=n=>r().update(Le(n)).digest(),t=r();return e.outputLen=t.outputLen,e.blockLen=t.blockLen,e.create=()=>r(),e}function cn(r){let e=(n,i)=>r(i).update(Le(n)).digest(),t=r({});return e.outputLen=t.outputLen,e.blockLen=t.blockLen,e.create=n=>r(n),e}function Qe(r=32){if(Tt&&typeof Tt.getRandomValues=="function")return Tt.getRandomValues(new Uint8Array(r));throw new Error("crypto.getRandomValues must be defined")}var Dt=class extends Be{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,oe.hash(e);let n=Le(t);if(this.iHash=e.create(),typeof this.iHash.update!="function")throw new Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let i=this.blockLen,o=new Uint8Array(i);o.set(n.length>i?e.create().update(n).digest():n);for(let s=0;snew Dt(r,e).update(t).digest();qe.create=(r,e)=>new Dt(r,e);function Si(r,e,t,n){if(typeof r.setBigUint64=="function")return r.setBigUint64(e,t,n);let i=BigInt(32),o=BigInt(4294967295),s=Number(t>>i&o),a=Number(t&o),c=n?4:0,u=n?0:4;r.setUint32(e+c,s,n),r.setUint32(e+u,a,n)}var et=class extends Be{constructor(e,t,n,i){super(),this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=Ct(this.buffer)}update(e){oe.exists(this);let{view:t,buffer:n,blockLen:i}=this;e=Le(e);let o=e.length;for(let s=0;si-s&&(this.process(n,0),s=0);for(let h=s;hf.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;hr&e^~r&t,Pi=(r,e,t)=>r&e^r&t^e&t,Ii=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ke=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Oe=new Uint32Array(64),jt=class extends et{constructor(){super(64,32,8,!1),this.A=Ke[0]|0,this.B=Ke[1]|0,this.C=Ke[2]|0,this.D=Ke[3]|0,this.E=Ke[4]|0,this.F=Ke[5]|0,this.G=Ke[6]|0,this.H=Ke[7]|0}get(){let{A:e,B:t,C:n,D:i,E:o,F:s,G:a,H:c}=this;return[e,t,n,i,o,s,a,c]}set(e,t,n,i,o,s,a,c){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=o|0,this.F=s|0,this.G=a|0,this.H=c|0}process(e,t){for(let h=0;h<16;h++,t+=4)Oe[h]=e.getUint32(t,!1);for(let h=16;h<64;h++){let d=Oe[h-15],m=Oe[h-2],k=ye(d,7)^ye(d,18)^d>>>3,_=ye(m,17)^ye(m,19)^m>>>10;Oe[h]=_+Oe[h-7]+k+Oe[h-16]|0}let{A:n,B:i,C:o,D:s,E:a,F:c,G:u,H:f}=this;for(let h=0;h<64;h++){let d=ye(a,6)^ye(a,11)^ye(a,25),m=f+d+Ai(a,c,u)+Ii[h]+Oe[h]|0,_=(ye(n,2)^ye(n,13)^ye(n,22))+Pi(n,i,o)|0;f=u,u=c,c=a,a=s+m|0,s=o,o=i,i=n,n=m+_|0}n=n+this.A|0,i=i+this.B|0,o=o+this.C|0,s=s+this.D|0,a=a+this.E|0,c=c+this.F|0,u=u+this.G|0,f=f+this.H|0,this.set(n,i,o,s,a,c,u,f)}roundClean(){Oe.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}},xr=class extends jt{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}},fn=he(()=>new jt),qs=he(()=>new xr);var un=new Uint8Array([72,80,75,69,45,118,49]),ft=class extends Lt{constructor(){super(),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:pe.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:0}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}buildLabeledIkm(e,t){let n=new Uint8Array(7+this._suiteId.byteLength+e.byteLength+t.byteLength);return n.set(un,0),n.set(this._suiteId,7),n.set(e,7+this._suiteId.byteLength),n.set(t,7+this._suiteId.byteLength+e.byteLength),n}buildLabeledInfo(e,t,n){let i=new Uint8Array(9+this._suiteId.byteLength+e.byteLength+t.byteLength);return i.set(new Uint8Array([0,n]),0),i.set(un,2),i.set(this._suiteId,9),i.set(e,9+this._suiteId.byteLength),i.set(t,9+this._suiteId.byteLength+e.byteLength),i}async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)throw new te("The salt length must be the same as the hashSize");let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,t)}async expand(e,t,n){this.checkInit();let i=await this._api.importKey("raw",e,this.algHash,!1,["sign"]),o=new ArrayBuffer(n),s=new Uint8Array(o),a=Z,c=new Uint8Array(t),u=new Uint8Array(1);if(n>255*this.hashSize)throw new Error("Entropy limit reached");let f=new Uint8Array(this.hashSize+c.length+1);for(let h=1,d=0;d=a.length?(s.set(a,d),d+=a.length):(s.set(a.slice(0,s.length-d),d),d+=s.length-d);return o}async extractAndExpand(e,t,n,i){this.checkInit();let o=await this._api.importKey("raw",t,"HKDF",!1,["deriveBits"]);return await this._api.deriveBits({name:"HKDF",hash:this.algHash.hash,salt:e,info:n},o,i*8)}async labeledExtract(e,t,n){return await this.extract(e,this.buildLabeledIkm(t,n))}async labeledExpand(e,t,n,i){return await this.expand(e,this.buildLabeledInfo(t,n,i),i)}},Ue=class extends ft{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:pe.HkdfSha256}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-256",length:256}})}},He=class extends ft{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:pe.HkdfSha384}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-384",length:384}})}},Te=class extends ft{constructor(){super(...arguments),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:pe.HkdfSha512}),Object.defineProperty(this,"hashSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"algHash",{enumerable:!0,configurable:!0,writable:!0,value:{name:"HMAC",hash:"SHA-512",length:512}})}};var Ce=class extends Ue{async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)return qe(fn,new Uint8Array(e),new Uint8Array(t));let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,t)}};var zt=BigInt(4294967295),wr=BigInt(32);function ln(r,e=!1){return e?{h:Number(r&zt),l:Number(r>>wr&zt)}:{h:Number(r>>wr&zt)|0,l:Number(r&zt)|0}}function Bi(r,e=!1){let t=new Uint32Array(r.length),n=new Uint32Array(r.length);for(let i=0;iBigInt(r>>>0)<>>0),Ki=(r,e,t)=>r>>>t,Oi=(r,e,t)=>r<<32-t|e>>>t,Ui=(r,e,t)=>r>>>t|e<<32-t,Hi=(r,e,t)=>r<<32-t|e>>>t,Ti=(r,e,t)=>r<<64-t|e>>>t-32,Ci=(r,e,t)=>r>>>t-32|e<<64-t,Ni=(r,e)=>e,Di=(r,e)=>r,ji=(r,e,t)=>r<>>32-t,zi=(r,e,t)=>e<>>32-t,Ri=(r,e,t)=>e<>>64-t,Mi=(r,e,t)=>r<>>64-t;function qi(r,e,t,n){let i=(e>>>0)+(n>>>0);return{h:r+t+(i/2**32|0)|0,l:i|0}}var Gi=(r,e,t)=>(r>>>0)+(e>>>0)+(t>>>0),Fi=(r,e,t,n)=>e+t+n+(r/2**32|0)|0,$i=(r,e,t,n)=>(r>>>0)+(e>>>0)+(t>>>0)+(n>>>0),Zi=(r,e,t,n,i)=>e+t+n+i+(r/2**32|0)|0,Vi=(r,e,t,n,i)=>(r>>>0)+(e>>>0)+(t>>>0)+(n>>>0)+(i>>>0),Xi=(r,e,t,n,i,o)=>e+t+n+i+o+(r/2**32|0)|0,Yi={fromBig:ln,split:Bi,toBig:Li,shrSH:Ki,shrSL:Oi,rotrSH:Ui,rotrSL:Hi,rotrBH:Ti,rotrBL:Ci,rotr32H:Ni,rotr32L:Di,rotlSH:ji,rotlSL:zi,rotlBH:Ri,rotlBL:Mi,add:qi,add3L:Gi,add3H:Fi,add4L:$i,add4H:Zi,add5H:Xi,add5L:Vi},P=Yi;var[Wi,Ji]=P.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map(r=>BigInt(r))),Ne=new Uint32Array(80),De=new Uint32Array(80),tt=class extends et{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){let{Ah:e,Al:t,Bh:n,Bl:i,Ch:o,Cl:s,Dh:a,Dl:c,Eh:u,El:f,Fh:h,Fl:d,Gh:m,Gl:k,Hh:_,Hl:v}=this;return[e,t,n,i,o,s,a,c,u,f,h,d,m,k,_,v]}set(e,t,n,i,o,s,a,c,u,f,h,d,m,k,_,v){this.Ah=e|0,this.Al=t|0,this.Bh=n|0,this.Bl=i|0,this.Ch=o|0,this.Cl=s|0,this.Dh=a|0,this.Dl=c|0,this.Eh=u|0,this.El=f|0,this.Fh=h|0,this.Fl=d|0,this.Gh=m|0,this.Gl=k|0,this.Hh=_|0,this.Hl=v|0}process(e,t){for(let y=0;y<16;y++,t+=4)Ne[y]=e.getUint32(t),De[y]=e.getUint32(t+=4);for(let y=16;y<80;y++){let L=Ne[y-15]|0,E=De[y-15]|0,H=P.rotrSH(L,E,1)^P.rotrSH(L,E,8)^P.shrSH(L,E,7),M=P.rotrSL(L,E,1)^P.rotrSL(L,E,8)^P.shrSL(L,E,7),K=Ne[y-2]|0,w=De[y-2]|0,B=P.rotrSH(K,w,19)^P.rotrBH(K,w,61)^P.shrSH(K,w,6),I=P.rotrSL(K,w,19)^P.rotrBL(K,w,61)^P.shrSL(K,w,6),A=P.add4L(M,I,De[y-7],De[y-16]),S=P.add4H(A,H,B,Ne[y-7],Ne[y-16]);Ne[y]=S|0,De[y]=A|0}let{Ah:n,Al:i,Bh:o,Bl:s,Ch:a,Cl:c,Dh:u,Dl:f,Eh:h,El:d,Fh:m,Fl:k,Gh:_,Gl:v,Hh:$,Hl:X}=this;for(let y=0;y<80;y++){let L=P.rotrSH(h,d,14)^P.rotrSH(h,d,18)^P.rotrBH(h,d,41),E=P.rotrSL(h,d,14)^P.rotrSL(h,d,18)^P.rotrBL(h,d,41),H=h&m^~h&_,M=d&k^~d&v,K=P.add5L(X,E,M,Ji[y],De[y]),w=P.add5H(K,$,L,H,Wi[y],Ne[y]),B=K|0,I=P.rotrSH(n,i,28)^P.rotrBH(n,i,34)^P.rotrBH(n,i,39),A=P.rotrSL(n,i,28)^P.rotrBL(n,i,34)^P.rotrBL(n,i,39),S=n&o^n&a^o&a,q=i&s^i&c^s&c;$=_|0,X=v|0,_=m|0,v=k|0,m=h|0,k=d|0,{h,l:d}=P.add(u|0,f|0,w|0,B|0),u=a|0,f=c|0,a=o|0,c=s|0,o=n|0,s=i|0;let N=P.add3L(B,A,q);n=P.add3H(N,w,I,S),i=N|0}({h:n,l:i}=P.add(this.Ah|0,this.Al|0,n|0,i|0)),{h:o,l:s}=P.add(this.Bh|0,this.Bl|0,o|0,s|0),{h:a,l:c}=P.add(this.Ch|0,this.Cl|0,a|0,c|0),{h:u,l:f}=P.add(this.Dh|0,this.Dl|0,u|0,f|0),{h,l:d}=P.add(this.Eh|0,this.El|0,h|0,d|0),{h:m,l:k}=P.add(this.Fh|0,this.Fl|0,m|0,k|0),{h:_,l:v}=P.add(this.Gh|0,this.Gl|0,_|0,v|0),{h:$,l:X}=P.add(this.Hh|0,this.Hl|0,$|0,X|0),this.set(n,i,o,s,a,c,u,f,h,d,m,k,_,v,$,X)}roundClean(){Ne.fill(0),De.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}},mr=class extends tt{constructor(){super(),this.Ah=-1942145080,this.Al=424955298,this.Bh=1944164710,this.Bl=-1982016298,this.Ch=502970286,this.Cl=855612546,this.Dh=1738396948,this.Dl=1479516111,this.Eh=258812777,this.El=2077511080,this.Fh=2011393907,this.Fl=79989058,this.Gh=1067287976,this.Gl=1780299464,this.Hh=286451373,this.Hl=-1848208735,this.outputLen=28}},gr=class extends tt{constructor(){super(),this.Ah=573645204,this.Al=-64227540,this.Bh=-1621794909,this.Bl=-934517566,this.Ch=596883563,this.Cl=1867755857,this.Dh=-1774684391,this.Dl=1497426621,this.Eh=-1775747358,this.El=-1467023389,this.Fh=-1101128155,this.Fl=1401305490,this.Gh=721525244,this.Gl=746961066,this.Hh=246885852,this.Hl=-2117784414,this.outputLen=32}},_r=class extends tt{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}},ut=he(()=>new tt),ra=he(()=>new mr),na=he(()=>new gr),hn=he(()=>new _r);var rt=class extends He{async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)return qe(hn,new Uint8Array(e),new Uint8Array(t));let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,t)}};var je=class extends Te{async extract(e,t){if(this.checkInit(),e.byteLength===0&&(e=new ArrayBuffer(this.hashSize)),e.byteLength!==this.hashSize)return qe(ut,new Uint8Array(e),new Uint8Array(t));let n=await this._api.importKey("raw",e,this.algHash,!1,["sign"]);return await this._api.sign("HMAC",n,t)}};var Qi={},dn=eo(globalThis,Qi);function eo(r,e){return new Proxy(r,{get(t,n,i){return n in e?e[n]:r[n]},set(t,n,i){return n in e&&delete e[n],r[n]=i,!0},deleteProperty(t,n){let i=!1;return n in e&&(delete e[n],i=!0),n in r&&(delete r[n],i=!0),i},ownKeys(t){let n=Reflect.ownKeys(r),i=Reflect.ownKeys(e),o=new Set(i);return[...n.filter(s=>!o.has(s)),...i]},defineProperty(t,n,i){return n in e&&delete e[n],Reflect.defineProperty(r,n,i),!0},getOwnPropertyDescriptor(t,n){return n in e?Reflect.getOwnPropertyDescriptor(e,n):Reflect.getOwnPropertyDescriptor(r,n)},has(t,n){return n in e||n in r}})}var pn=()=>typeof dn<"u",bn=()=>typeof caches<"u";var lt=r=>typeof r=="object"&&r!==null&&typeof r.privateKey=="object"&&typeof r.publicKey=="object";function ge(r,e){if(e<=0)throw new Error("i2Osp: too small size");if(r>=256**e)throw new Error("i2Osp: too large integer");let t=new Uint8Array(e);for(let n=0;n>8;return t}function yn(r,e){if(r.byteLength!==e.byteLength)throw new Error("xor: different length inputs");let t=new Uint8Array(r.byteLength);for(let n=0;n8192)throw new te("Too long ikm");await this._setup();try{return await this._prim.deriveKeyPair(e)}catch(t){throw new It(t)}}async serializePublicKey(e){await this._setup();try{return await this._prim.serializePublicKey(e)}catch(t){throw new _t(t)}}async deserializePublicKey(e){await this._setup();try{return await this._prim.deserializePublicKey(e)}catch(t){throw new Xe(t)}}async importKey(e,t,n=!0){await this._setup();try{return await this._prim.importKey(e,t,n)}catch(i){throw new Xe(i)}}async encap(e){await this._setup();try{let t=e.nonEphemeralKeyPair===void 0?await this.generateKeyPair():e.nonEphemeralKeyPair,n=await this._prim.serializePublicKey(t.publicKey),i=await this._prim.serializePublicKey(e.recipientPublicKey),o;if(e.senderKey===void 0)o=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey));else{let c=lt(e.senderKey)?e.senderKey.privateKey:e.senderKey,u=new Uint8Array(await this._prim.dh(t.privateKey,e.recipientPublicKey)),f=new Uint8Array(await this._prim.dh(c,e.recipientPublicKey));o=ht(u,f)}let s;if(e.senderKey===void 0)s=ht(new Uint8Array(n),new Uint8Array(i));else{let c=lt(e.senderKey)?e.senderKey.publicKey:await this._prim.derivePublicKey(e.senderKey),u=await this._prim.serializePublicKey(c);s=xn(new Uint8Array(n),new Uint8Array(i),new Uint8Array(u))}let a=await this._generateSharedSecret(o,s);return{enc:n,sharedSecret:a}}catch(t){throw new Et(t)}}async decap(e){let t;await this._setup();try{t=await this._prim.deserializePublicKey(e.enc)}catch(n){throw new Xe(n)}try{let n=lt(e.recipientKey)?e.recipientKey.privateKey:e.recipientKey,i=lt(e.recipientKey)?e.recipientKey.publicKey:await this._prim.derivePublicKey(e.recipientKey),o=await this._prim.serializePublicKey(i),s;if(e.senderPublicKey===void 0)s=new Uint8Array(await this._prim.dh(n,t));else{let c=new Uint8Array(await this._prim.dh(n,t)),u=new Uint8Array(await this._prim.dh(n,e.senderPublicKey));s=ht(c,u)}let a;if(e.senderPublicKey===void 0)a=ht(new Uint8Array(e.enc),new Uint8Array(o));else{let c=await this._prim.serializePublicKey(e.senderPublicKey);a=new Uint8Array(e.enc.byteLength+o.byteLength+c.byteLength),a.set(new Uint8Array(e.enc),0),a.set(new Uint8Array(o),e.enc.byteLength),a.set(new Uint8Array(c),e.enc.byteLength+o.byteLength)}return await this._generateSharedSecret(s,a)}catch(n){throw new kt(n)}}async _setup(){if(this._api!==void 0)return;let e=await Rt(),t=new Uint8Array(ro);t.set(ge(this.id,2),3),this._prim.init(e),this._kdf.init(e,t),super.init(e)}async _generateSharedSecret(e,t){let n=this._kdf.buildLabeledIkm(no,e),i=this._kdf.buildLabeledInfo(io,t,this.secretSize);return await this._kdf.extractAndExpand(Z,n,i,this.secretSize)}};var ce=["deriveBits"],it=new Uint8Array([100,107,112,95,112,114,107]),Mt=new Uint8Array([115,107]);var qt=class{constructor(e){Object.defineProperty(this,"_num",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._num=new Uint8Array(e)}val(){return this._num}reset(){this._num.fill(0)}set(e){if(e.length!==this._num.length)throw new Error("Bignum.set: invalid argument");this._num.set(e)}isZero(){for(let e=0;ee[t])return!1}return!1}};var oo=new Uint8Array([99,97,110,100,105,100,97,116,101]),so=new Uint8Array([255,255,255,255,0,0,0,0,255,255,255,255,255,255,255,255,188,230,250,173,167,23,158,132,243,185,202,194,252,99,37,81]),ao=new Uint8Array([255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,199,99,77,129,244,55,45,223,88,26,13,178,72,176,167,122,236,236,25,106,204,197,41,115]),co=new Uint8Array([1,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,250,81,134,135,131,191,47,150,107,127,204,1,72,247,9,165,208,59,181,201,184,137,156,71,174,187,111,183,30,145,56,100,9]),fo=new Uint8Array([48,65,2,1,0,48,19,6,7,42,134,72,206,61,2,1,6,8,42,134,72,206,61,3,1,7,4,39,48,37,2,1,1,4,32]),uo=new Uint8Array([48,78,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,34,4,55,48,53,2,1,1,4,48]),lo=new Uint8Array([48,96,2,1,0,48,16,6,7,42,134,72,206,61,2,1,6,5,43,129,4,0,35,4,73,48,71,2,1,1,4,66]),be=class extends ne{constructor(e,t){switch(super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_alg",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nDh",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_order",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_bitmask",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_pkcs8AlgId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=t,e){case C.DhkemP256HkdfSha256:this._alg={name:"ECDH",namedCurve:"P-256"},this._nPk=65,this._nSk=32,this._nDh=32,this._order=so,this._bitmask=255,this._pkcs8AlgId=fo;break;case C.DhkemP384HkdfSha384:this._alg={name:"ECDH",namedCurve:"P-384"},this._nPk=97,this._nSk=48,this._nDh=48,this._order=ao,this._bitmask=255,this._pkcs8AlgId=uo;break;default:this._alg={name:"ECDH",namedCurve:"P-521"},this._nPk=133,this._nSk=66,this._nDh=66,this._order=co,this._bitmask=1,this._pkcs8AlgId=lo;break}}async serializePublicKey(e){this.checkInit();let t=await this._api.exportKey("raw",e);if(t.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");return t}async deserializePublicKey(e){if(this.checkInit(),e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");try{return await this._api.importKey("raw",e,this._alg,!0,[])}catch{throw new Error("Invalid public key for the ciphersuite")}}async importKey(e,t,n){if(this.checkInit(),e==="raw")return await this._importRawKey(t,n);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,n)}async _importRawKey(e,t){if(t&&e.byteLength!==this._nPk)throw new Error("Invalid public key for the ciphersuite");if(!t&&e.byteLength!==this._nSk)throw new Error("Invalid private key for the ciphersuite");try{if(t)return await this._api.importKey("raw",e,this._alg,!0,[]);let n=new Uint8Array(e),i=new Uint8Array(this._pkcs8AlgId.length+n.length);return i.set(this._pkcs8AlgId,0),i.set(n,this._pkcs8AlgId.length),await this._api.importKey("pkcs8",i,this._alg,!0,ce)}catch{throw new Error("Invalid key for the ciphersuite")}}async _importJWK(e,t){if(typeof e.crv>"u"||e.crv!==this._alg.namedCurve)throw new Error(`Invalid crv: ${e.crv}`);if(t){if(typeof e.d<"u")throw new Error("Invalid key: `d` should not be set");return await this._api.importKey("jwk",e,this._alg,!0,[])}if(typeof e.d>"u")throw new Error("Invalid key: `d` not found");return await this._api.importKey("jwk",e,this._alg,!0,ce)}async derivePublicKey(e){this.checkInit();let t=await this._api.exportKey("jwk",e);return delete t.d,delete t.key_ops,await this._api.importKey("jwk",t,this._alg,!0,[])}async generateKeyPair(){return this.checkInit(),await this._api.generateKey(this._alg,!0,ce)}async deriveKeyPair(e){this.checkInit();let t=await this._hkdf.labeledExtract(Z,it,new Uint8Array(e)),n=new qt(this._nSk);for(let s=0;n.isZero()||!n.lessThan(this._order);s++){if(s>255)throw new Error("Faild to derive a key pair");let a=new Uint8Array(await this._hkdf.labeledExpand(t,oo,ge(s,1),this._nSk));a[0]=a[0]&this._bitmask,n.set(a)}let i=new Uint8Array(this._pkcs8AlgId.length+n.val().length);i.set(this._pkcs8AlgId,0),i.set(n.val(),this._pkcs8AlgId.length);let o=await this._api.importKey("pkcs8",i,this._alg,!0,ce);return n.reset(),{privateKey:o,publicKey:await this.derivePublicKey(o)}}async dh(e,t){return this.checkInit(),await this._api.deriveBits({name:"ECDH",public:t},e,this._nDh*8)}};var Gt=class extends se{constructor(){let e=new Ce,t=new be(C.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};var Ft=class extends se{constructor(){let e=new rt,t=new be(C.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}};var $t=class extends se{constructor(){let e=new je,t=new be(C.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var $a=BigInt(0),ho=BigInt(1),po=BigInt(2),Zt=r=>r instanceof Uint8Array,bo=Array.from({length:256},(r,e)=>e.toString(16).padStart(2,"0"));function dt(r){if(!Zt(r))throw new Error("Uint8Array expected");let e="";for(let t=0;tn+i.length,0)),t=0;return r.forEach(n=>{if(!Zt(n))throw new Error("Uint8Array expected");e.set(n,t),t+=n.length}),e}var gn=r=>(po<typeof r=="bigint",function:r=>typeof r=="function",boolean:r=>typeof r=="boolean",string:r=>typeof r=="string",isSafeInteger:r=>Number.isSafeInteger(r),array:r=>Array.isArray(r),field:(r,e)=>e.Fp.isValid(r),hash:r=>typeof r=="function"&&Number.isSafeInteger(r.outputLen)};function Ae(r,e,t={}){let n=(i,o,s)=>{let a=yo[o];if(typeof a!="function")throw new Error(`Invalid validator "${o}", expected function`);let c=r[i];if(!(s&&c===void 0)&&!a(c,r))throw new Error(`Invalid param ${String(i)}=${c} (${typeof c}), expected ${o}`)};for(let[i,o]of Object.entries(e))n(i,o,!1);for(let[i,o]of Object.entries(t))n(i,o,!0);return r}var Q=BigInt(0),W=BigInt(1),Fe=BigInt(2),wo=BigInt(3),vr=BigInt(4),_n=BigInt(5),En=BigInt(8),mo=BigInt(9),go=BigInt(16);function j(r,e){let t=r%e;return t>=Q?t:e+t}function Sr(r,e,t){if(t<=Q||e 0");if(t===W)return Q;let n=W;for(;e>Q;)e&W&&(n=n*r%t),r=r*r%t,e>>=W;return n}function V(r,e,t){let n=r;for(;e-- >Q;)n*=n,n%=t;return n}function kn(r,e){if(r===Q||e<=Q)throw new Error(`invert: expected positive integers, got n=${r} mod=${e}`);let t=j(r,e),n=e,i=Q,o=W,s=W,a=Q;for(;t!==Q;){let u=n/t,f=n%t,h=i-s*u,d=o-a*u;n=t,t=f,i=s,o=a,s=h,a=d}if(n!==W)throw new Error("invert: does not exist");return j(i,e)}function _o(r){let e=(r-W)/Fe,t,n,i;for(t=r-W,n=0;t%Fe===Q;t/=Fe,n++);for(i=Fe;i(j(r,e)&W)===W,ko=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Sn(r){let e={ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"},t=ko.reduce((n,i)=>(n[i]="function",n),e);return Ae(r,t)}function vo(r,e,t){if(t 0");if(t===Q)return r.ONE;if(t===W)return e;let n=r.ONE,i=e;for(;t>Q;)t&W&&(n=r.mul(n,i)),i=r.sqr(i),t>>=W;return n}function So(r,e){let t=new Array(e.length),n=e.reduce((o,s,a)=>r.is0(s)?o:(t[a]=o,r.mul(o,s)),r.ONE),i=r.inv(n);return e.reduceRight((o,s,a)=>r.is0(s)?o:(t[a]=r.mul(o,t[a]),r.mul(o,s)),i),t}function Ar(r,e){let t=e!==void 0?e:r.toString(2).length,n=Math.ceil(t/8);return{nBitLength:t,nByteLength:n}}function Xt(r,e,t=!1,n={}){if(r<=Q)throw new Error(`Expected Fp ORDER > 0, got ${r}`);let{nBitLength:i,nByteLength:o}=Ar(r,e);if(o>2048)throw new Error("Field lengths over 2048 bytes are not supported");let s=Eo(r),a=Object.freeze({ORDER:r,BITS:i,BYTES:o,MASK:gn(i),ZERO:Q,ONE:W,create:c=>j(c,r),isValid:c=>{if(typeof c!="bigint")throw new Error(`Invalid field element: expected bigint, got ${typeof c}`);return Q<=c&&cc===Q,isOdd:c=>(c&W)===W,neg:c=>j(-c,r),eql:(c,u)=>c===u,sqr:c=>j(c*c,r),add:(c,u)=>j(c+u,r),sub:(c,u)=>j(c-u,r),mul:(c,u)=>j(c*u,r),pow:(c,u)=>vo(a,c,u),div:(c,u)=>j(c*kn(u,r),r),sqrN:c=>c*c,addN:(c,u)=>c+u,subN:(c,u)=>c-u,mulN:(c,u)=>c*u,inv:c=>kn(c,r),sqrt:n.sqrt||(c=>s(a,c)),invertBatch:c=>So(a,c),cmov:(c,u,f)=>f?u:c,toBytes:c=>t?ze(c,o):kr(c,o),fromBytes:c=>{if(c.length!==o)throw new Error(`Fp.fromBytes: expected ${o}, got ${c.length}`);return t?_e(c):Er(c)}});return Object.freeze(a)}function An(r,e){if(!r.isOdd)throw new Error("Field doesn't have isOdd");let t=r.sqrt(e);return r.isOdd(t)?r.neg(t):t}var Ao=BigInt(0),Pr=BigInt(1);function Pn(r,e){let t=(i,o)=>{let s=o.negate();return i?s:o},n=i=>{let o=Math.ceil(e/i)+1,s=2**(i-1);return{windows:o,windowSize:s}};return{constTimeNegate:t,unsafeLadder(i,o){let s=r.ZERO,a=i;for(;o>Ao;)o&Pr&&(s=s.add(a)),a=a.double(),o>>=Pr;return s},precomputeWindow(i,o){let{windows:s,windowSize:a}=n(o),c=[],u=i,f=u;for(let h=0;h>=m,v>c&&(v-=d,s+=Pr);let $=_,X=_+Math.abs(v)-1,y=k%2!==0,L=v<0;v===0?f=f.add(t(y,o[$])):u=u.add(t(L,o[X]))}return{p:u,f}},wNAFCached(i,o,s,a){let c=i._WINDOW_SIZE||1,u=o.get(i);return u||(u=this.precomputeWindow(i,c),c!==1&&o.set(i,a(u))),this.wNAF(c,u,s)}}}function In(r){return Sn(r.Fp),Ae(r,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Ar(r.n,r.nBitLength),...r,p:r.Fp.ORDER})}var xe=BigInt(0),de=BigInt(1),Yt=BigInt(2),Po=BigInt(8),Io={zip215:!0};function Bo(r){let e=In(r);return Ae(r,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...e})}function $e(r){let e=Bo(r),{Fp:t,n,prehash:i,hash:o,randomBytes:s,nByteLength:a,h:c}=e,u=Yt<{try{return{isValid:!0,value:t.sqrt(p*t.inv(l))}}catch{return{isValid:!1,value:xe}}}),d=e.adjustScalarBytes||(p=>p),m=e.domain||((p,l,b)=>{if(l.length||b)throw new Error("Contexts/pre-hash are not supported");return p}),k=p=>typeof p=="bigint"&&xek(p)&&k(l)&&pp===xe||_(p,u);function $(p,l){if(_(p,l))return p;throw new Error(`Expected valid scalar < ${l}, got ${typeof p} ${p}`)}function X(p){return p===xe?p:$(p,n)}let y=new Map;function L(p){if(!(p instanceof E))throw new Error("ExtendedPoint expected")}class E{constructor(l,b,x,g){if(this.ex=l,this.ey=b,this.ez=x,this.et=g,!v(l))throw new Error("x required");if(!v(b))throw new Error("y required");if(!v(x))throw new Error("z required");if(!v(g))throw new Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(l){if(l instanceof E)throw new Error("extended point not allowed");let{x:b,y:x}=l||{};if(!v(b)||!v(x))throw new Error("invalid affine point");return new E(b,x,de,f(b*x))}static normalizeZ(l){let b=t.invertBatch(l.map(x=>x.ez));return l.map((x,g)=>x.toAffine(b[g])).map(E.fromAffine)}_setWindowSize(l){this._WINDOW_SIZE=l,y.delete(this)}assertValidity(){let{a:l,d:b}=e;if(this.is0())throw new Error("bad point: ZERO");let{ex:x,ey:g,ez:O,et:T}=this,z=f(x*x),U=f(g*g),D=f(O*O),Y=f(D*D),J=f(z*l),we=f(D*f(J+U)),fe=f(Y+f(b*f(z*U)));if(we!==fe)throw new Error("bad point: equation left != right (1)");let Ie=f(x*g),Ee=f(O*T);if(Ie!==Ee)throw new Error("bad point: equation left != right (2)")}equals(l){L(l);let{ex:b,ey:x,ez:g}=this,{ex:O,ey:T,ez:z}=l,U=f(b*z),D=f(O*g),Y=f(x*z),J=f(T*g);return U===D&&Y===J}is0(){return this.equals(E.ZERO)}negate(){return new E(f(-this.ex),this.ey,this.ez,f(-this.et))}double(){let{a:l}=e,{ex:b,ey:x,ez:g}=this,O=f(b*b),T=f(x*x),z=f(Yt*f(g*g)),U=f(l*O),D=b+x,Y=f(f(D*D)-O-T),J=U+T,we=J-z,fe=U-T,Ie=f(Y*we),Ee=f(J*fe),mt=f(Y*fe),gt=f(we*J);return new E(Ie,Ee,gt,mt)}add(l){L(l);let{a:b,d:x}=e,{ex:g,ey:O,ez:T,et:z}=this,{ex:U,ey:D,ez:Y,et:J}=l;if(b===BigInt(-1)){let Nr=f((O-g)*(D+U)),Dr=f((O+g)*(D-U)),ur=f(Dr-Nr);if(ur===xe)return this.double();let jr=f(T*Yt*J),zr=f(z*Yt*Y),Rr=zr+jr,Mr=Dr+Nr,qr=zr-jr,Jn=f(Rr*ur),Qn=f(Mr*qr),ei=f(Rr*qr),ti=f(ur*Mr);return new E(Jn,Qn,ti,ei)}let we=f(g*U),fe=f(O*D),Ie=f(z*x*J),Ee=f(T*Y),mt=f((g+O)*(U+D)-we-fe),gt=Ee-Ie,Tr=Ee+Ie,Cr=f(fe-b*we),Vn=f(mt*gt),Xn=f(Tr*Cr),Yn=f(mt*Cr),Wn=f(gt*Tr);return new E(Vn,Xn,Wn,Yn)}subtract(l){return this.add(l.negate())}wNAF(l){return K.wNAFCached(this,y,l,E.normalizeZ)}multiply(l){let{p:b,f:x}=this.wNAF($(l,n));return E.normalizeZ([b,x])[0]}multiplyUnsafe(l){let b=X(l);return b===xe?M:this.equals(M)||b===de?this:this.equals(H)?this.wNAF(b).p:K.unsafeLadder(this,b)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return K.unsafeLadder(this,n).is0()}toAffine(l){let{ex:b,ey:x,ez:g}=this,O=this.is0();l==null&&(l=O?Po:t.inv(g));let T=f(b*l),z=f(x*l),U=f(g*l);if(O)return{x:xe,y:de};if(U!==de)throw new Error("invZ was invalid");return{x:T,y:z}}clearCofactor(){let{h:l}=e;return l===de?this:this.multiplyUnsafe(l)}static fromHex(l,b=!1){let{d:x,a:g}=e,O=t.BYTES;l=le("pointHex",l,O);let T=l.slice(),z=l[O-1];T[O-1]=z&-129;let U=_e(T);U===xe||(b?$(U,u):$(U,t.ORDER));let D=f(U*U),Y=f(D-de),J=f(x*D-g),{isValid:we,value:fe}=h(Y,J);if(!we)throw new Error("Point.fromHex: invalid y coordinate");let Ie=(fe&de)===de,Ee=(z&128)!==0;if(!b&&fe===xe&&Ee)throw new Error("Point.fromHex: x=0 and x_0=1");return Ee!==Ie&&(fe=f(-fe)),E.fromAffine({x:fe,y:U})}static fromPrivateKey(l){return I(l).point}toRawBytes(){let{x:l,y:b}=this.toAffine(),x=ze(b,t.BYTES);return x[x.length-1]|=l&de?128:0,x}toHex(){return dt(this.toRawBytes())}}E.BASE=new E(e.Gx,e.Gy,de,f(e.Gx*e.Gy)),E.ZERO=new E(xe,de,de,xe);let{BASE:H,ZERO:M}=E,K=Pn(E,a*8);function w(p){return j(p,n)}function B(p){return w(_e(p))}function I(p){let l=a;p=le("private key",p,l);let b=le("hashed private key",o(p),2*l),x=d(b.slice(0,l)),g=b.slice(l,2*l),O=B(x),T=H.multiply(O),z=T.toRawBytes();return{head:x,prefix:g,scalar:O,point:T,pointBytes:z}}function A(p){return I(p).pointBytes}function S(p=new Uint8Array,...l){let b=Vt(...l);return B(o(m(b,le("context",p),!!i)))}function q(p,l,b={}){p=le("message",p),i&&(p=i(p));let{prefix:x,scalar:g,pointBytes:O}=I(l),T=S(b.context,x,p),z=H.multiply(T).toRawBytes(),U=S(b.context,z,O,p),D=w(T+U*g);X(D);let Y=Vt(z,ze(D,t.BYTES));return le("result",Y,a*2)}let N=Io;function G(p,l,b,x=N){let{context:g,zip215:O}=x,T=t.BYTES;p=le("signature",p,2*T),l=le("message",l),i&&(l=i(l));let z=_e(p.slice(T,2*T)),U,D,Y;try{U=E.fromHex(b,O),D=E.fromHex(p.slice(0,T),O),Y=H.multiplyUnsafe(z)}catch{return!1}if(!O&&U.isSmallOrder())return!1;let J=S(g,D.toRawBytes(),U.toRawBytes(),l);return D.add(U.multiplyUnsafe(J)).subtract(Y).clearCofactor().equals(E.ZERO)}return H._setWindowSize(8),{CURVE:e,getPublicKey:A,sign:q,verify:G,ExtendedPoint:E,utils:{getExtendedPublicKey:I,randomPrivateKey:()=>s(t.BYTES),precompute(p=8,l=E.BASE){return l._setWindowSize(p),l.multiply(BigInt(3)),l}}}}var pt=BigInt(0),Ir=BigInt(1);function Lo(r){return Ae(r,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...r})}function Wt(r){let e=Lo(r),{P:t}=e,n=y=>j(y,t),i=e.montgomeryBits,o=Math.ceil(i/8),s=e.nByteLength,a=e.adjustScalarBytes||(y=>y),c=e.powPminus2||(y=>Sr(y,t-BigInt(2),t));function u(y,L,E){let H=n(y*(L-E));return L=n(L-H),E=n(E+H),[L,E]}function f(y){if(typeof y=="bigint"&&pt<=y&&y=pt;N--){let G=H>>N&Ir;A^=G,S=u(A,K,B),K=S[0],B=S[1],S=u(A,w,I),w=S[0],I=S[1],A=G;let F=K+w,p=n(F*F),l=K-w,b=n(l*l),x=p-b,g=B+I,O=B-I,T=n(O*F),z=n(g*l),U=T+z,D=T-z;B=n(U*U),I=n(M*n(D*D)),K=n(p*b),w=n(x*(p+n(h*x)))}S=u(A,K,B),K=S[0],B=S[1],S=u(A,w,I),w=S[0],I=S[1];let q=c(w);return n(K*q)}function m(y){return ze(n(y),o)}function k(y){let L=le("u coordinate",y,o);return s===o&&(L[s-1]&=127),_e(L)}function _(y){let L=le("scalar",y);if(L.length!==o&&L.length!==s)throw new Error(`Expected ${o} or ${s} bytes, got ${L.length}`);return _e(a(L))}function v(y,L){let E=k(L),H=_(y),M=d(E,H);if(M===pt)throw new Error("Invalid private or public key received");return m(M)}let $=m(e.Gu);function X(y){return v(y,$)}return{scalarMult:v,scalarMultBase:X,getSharedSecret:(y,L)=>v(y,L),getPublicKey:y=>X(y),utils:{randomPrivateKey:()=>e.randomBytes(e.nByteLength)},GuBytes:$}}var bt=BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),Bn=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752"),wc=BigInt(0),Oo=BigInt(1),Br=BigInt(2),Uo=BigInt(5),Ln=BigInt(10),Ho=BigInt(20),To=BigInt(40),Kn=BigInt(80);function On(r){let e=bt,n=r*r%e*r%e,i=V(n,Br,e)*n%e,o=V(i,Oo,e)*r%e,s=V(o,Uo,e)*o%e,a=V(s,Ln,e)*s%e,c=V(a,Ho,e)*a%e,u=V(c,To,e)*c%e,f=V(u,Kn,e)*u%e,h=V(f,Kn,e)*u%e,d=V(h,Ln,e)*s%e;return{pow_p_5_8:V(d,Br,e)*r%e,b2:n}}function Un(r){return r[0]&=248,r[31]&=127,r[31]|=64,r}function Co(r,e){let t=bt,n=j(e*e*e,t),i=j(n*n*e,t),o=On(r*i).pow_p_5_8,s=j(r*n*o,t),a=j(e*s*s,t),c=s,u=j(s*Bn,t),f=a===r,h=a===j(-r,t),d=a===j(-r*Bn,t);return f&&(s=c),(h||d)&&(s=u),vn(s,t)&&(s=j(-s,t)),{isValid:f||h,value:s}}var Pe=Xt(bt,void 0,!0),Lr={a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),Fp:Pe,n:BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960"),hash:ut,randomBytes:Qe,adjustScalarBytes:Un,uvRatio:Co},Hn=$e(Lr);function Tn(r,e,t){if(e.length>255)throw new Error("Context is too big");return Nt(ct("SigEd25519 no Ed25519 collisions"),new Uint8Array([t?1:0,e.length]),e,r)}var mc=$e({...Lr,domain:Tn}),gc=$e({...Lr,domain:Tn,prehash:ut}),Kr=(()=>Wt({P:bt,a:BigInt(486662),montgomeryBits:255,nByteLength:32,Gu:BigInt(9),powPminus2:r=>{let e=bt,{pow_p_5_8:t,b2:n}=On(r);return j(V(t,BigInt(3),e)*n,e)},adjustScalarBytes:Un,randomBytes:Qe}))();var No=(Pe.ORDER+BigInt(3))/BigInt(8),_c=Pe.pow(Br,No),Ec=Pe.sqrt(Pe.neg(Pe.ONE)),kc=(Pe.ORDER-BigInt(5))/BigInt(8),vc=BigInt(486662);var Sc=An(Pe,Pe.neg(BigInt(486664)));var Ac=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),Pc=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),Ic=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),Bc=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");var Lc=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");var ee=class{constructor(e,t,n,i=[]){Object.defineProperty(this,"key",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"type",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"extractable",{enumerable:!0,configurable:!0,writable:!0,value:!0}),Object.defineProperty(this,"algorithm",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"usages",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.key=t,this.type=n,this.algorithm={name:e},this.usages=i,n==="public"&&(this.usages=[])}};var Ze="X25519",Jt=class extends ne{constructor(e){super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=e,this._nPk=32,this._nSk=32}async serializePublicKey(e){return await this._serializePublicKey(e)}async deserializePublicKey(e){return await this._deserializePublicKey(e)}async importKey(e,t,n){if(e==="raw")return await this._importRawKey(t,n);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,n)}async derivePublicKey(e){return await this._derivePublicKey(e)}async generateKeyPair(){let e=Hn.utils.randomPrivateKey(),t=new ee(Ze,e,"private",ce);return{publicKey:await this.derivePublicKey(t),privateKey:t}}async deriveKeyPair(e){let t=await this._hkdf.labeledExtract(Z,it,new Uint8Array(e)),n=await this._hkdf.labeledExpand(t,Mt,Z,this._nSk),i=new ee(Ze,new Uint8Array(n),"private",ce);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}async dh(e,t){return await this._dh(e,t)}_serializePublicKey(e){return new Promise(t=>{t(e.key.buffer)})}_deserializePublicKey(e){return new Promise((t,n)=>{e.byteLength!==this._nPk?n(new Error("Invalid public key for the ciphersuite")):t(new ee(Ze,new Uint8Array(e),"public"))})}_importRawKey(e,t){return new Promise((n,i)=>{t&&e.byteLength!==this._nPk&&i(new Error("Invalid public key for the ciphersuite")),!t&&e.byteLength!==this._nSk&&i(new Error("Invalid private key for the ciphersuite")),n(new ee(Ze,new Uint8Array(e),t?"public":"private",t?[]:ce))})}_importJWK(e,t){return new Promise((n,i)=>{(typeof e.kty>"u"||e.kty!=="OKP")&&i(new Error(`Invalid kty: ${e.kty}`)),(typeof e.crv>"u"||e.crv!=="X25519")&&i(new Error(`Invalid crv: ${e.crv}`)),t?(typeof e.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof e.x>"u"&&i(new Error("Invalid key: `x` not found")),n(new ee(Ze,nt(e.x),"public"))):(typeof e.d!="string"&&i(new Error("Invalid key: `d` not found")),n(new ee(Ze,nt(e.d),"private",ce)))})}_derivePublicKey(e){return new Promise(t=>{let n=Kr.getPublicKey(e.key);t(new ee(Ze,n,"public"))})}_dh(e,t){return new Promise((n,i)=>{try{n(Kr.getSharedSecret(e.key,t.key).buffer)}catch(o){i(o)}})}};var Qt=class extends se{constructor(){let e=new Ce,t=new Jt(e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemX25519HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}};var[Dn,jn,zn]=[[],[],[]],Do=BigInt(0),yt=BigInt(1),jo=BigInt(2),zo=BigInt(7),Ro=BigInt(256),Mo=BigInt(113);for(let r=0,e=yt,t=1,n=0;r<24;r++){[t,n]=[n,(2*t+3*n)%5],Dn.push(2*(5*n+t)),jn.push((r+1)*(r+2)/2%64);let i=Do;for(let o=0;o<7;o++)e=(e<>zo)*Mo)%Ro,e&jo&&(i^=yt<<(yt<t>32?P.rotlBH(r,e,t):P.rotlSH(r,e,t),Nn=(r,e,t)=>t>32?P.rotlBL(r,e,t):P.rotlSL(r,e,t);function Fo(r,e=24){let t=new Uint32Array(10);for(let n=24-e;n<24;n++){for(let s=0;s<10;s++)t[s]=r[s]^r[s+10]^r[s+20]^r[s+30]^r[s+40];for(let s=0;s<10;s+=2){let a=(s+8)%10,c=(s+2)%10,u=t[c],f=t[c+1],h=Cn(u,f,1)^t[a],d=Nn(u,f,1)^t[a+1];for(let m=0;m<50;m+=10)r[s+m]^=h,r[s+m+1]^=d}let i=r[2],o=r[3];for(let s=0;s<24;s++){let a=jn[s],c=Cn(i,o,a),u=Nn(i,o,a),f=Dn[s];i=r[f],o=r[f+1],r[f]=c,r[f+1]=u}for(let s=0;s<50;s+=10){for(let a=0;a<10;a++)t[a]=r[s+a];for(let a=0;a<10;a++)r[s+a]^=~t[(a+2)%10]&t[(a+4)%10]}r[0]^=qo[n],r[1]^=Go[n]}t.fill(0)}var er=class r extends Be{constructor(e,t,n,i=!1,o=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=n,this.enableXOF=i,this.rounds=o,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,oe.number(n),0>=this.blockLen||this.blockLen>=200)throw new Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=an(this.state)}keccak(){Fo(this.state32,this.rounds),this.posOut=0,this.pos=0}update(e){oe.exists(this);let{blockLen:t,state:n}=this;e=Le(e);let i=e.length;for(let o=0;o=n&&this.keccak();let s=Math.min(n-this.posOut,o-i);e.set(t.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return e}xofInto(e){if(!this.enableXOF)throw new Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return oe.number(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(oe.output(e,this),this.finished)throw new Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){let{blockLen:t,suffix:n,outputLen:i,rounds:o,enableXOF:s}=this;return e||(e=new r(t,n,i,s,o)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=o,e.suffix=n,e.outputLen=i,e.enableXOF=s,e.destroyed=this.destroyed,e}},Re=(r,e,t)=>he(()=>new er(e,r,t)),Zc=Re(6,144,224/8),Vc=Re(6,136,256/8),Xc=Re(6,104,384/8),Yc=Re(6,72,512/8),Wc=Re(1,144,224/8),Jc=Re(1,136,256/8),Qc=Re(1,104,384/8),ef=Re(1,72,512/8),Rn=(r,e,t)=>cn((n={})=>new er(e,r,n.dkLen===void 0?t:n.dkLen,!0)),tf=Rn(31,168,128/8),Or=Rn(31,136,256/8);var $o=he(()=>Or.create({dkLen:114})),Zo=he(()=>Or.create({dkLen:64})),xt=BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439");function Mn(r){let e=xt,t=BigInt(1),n=BigInt(2),i=BigInt(3),o=BigInt(11),s=BigInt(22),a=BigInt(44),c=BigInt(88),u=BigInt(223),f=r*r*r%e,h=f*f*r%e,d=V(h,i,e)*h%e,m=V(d,i,e)*h%e,k=V(m,n,e)*f%e,_=V(k,o,e)*k%e,v=V(_,s,e)*_%e,$=V(v,a,e)*v%e,X=V($,c,e)*$%e,y=V(X,a,e)*v%e,L=V(y,n,e)*f%e,E=V(L,t,e)*r%e;return V(E,u,e)*L%e}function qn(r){return r[0]&=252,r[55]|=128,r[56]=0,r}var Gn=Xt(xt,456,!0),uf=BigInt(4),Fn={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:Gn,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:$o,randomBytes:Qe,adjustScalarBytes:qn,domain:(r,e,t)=>{if(e.length>255)throw new Error(`Context is too big: ${e.length}`);return Nt(ct("SigEd448"),new Uint8Array([t?1:0,e.length]),e,r)},uvRatio:(r,e)=>{let t=xt,n=j(r*r*e,t),i=j(n*r,t),o=j(i*n*e,t),s=Mn(o),a=j(i*s,t),c=j(a*a,t);return{isValid:j(c*e,t)===r,value:a}}},$n=$e(Fn),lf=$e({...Fn,prehash:Zo}),Ur=(()=>Wt({a:BigInt(156326),montgomeryBits:448,nByteLength:57,P:xt,Gu:BigInt(5),powPminus2:r=>{let e=xt,t=Mn(r),n=V(t,BigInt(2),e);return j(n*r,e)},adjustScalarBytes:qn,randomBytes:Qe}))();var hf=(Gn.ORDER-BigInt(3))/BigInt(4),df=BigInt(156326);var Ve="X448",tr=class extends ne{constructor(e){super(),Object.defineProperty(this,"_hkdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nPk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nSk",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._hkdf=e,this._nPk=56,this._nSk=56}async serializePublicKey(e){return await this._serializePublicKey(e)}async deserializePublicKey(e){return await this._deserializePublicKey(e)}async importKey(e,t,n){if(e==="raw")return await this._importRawKey(t,n);if(t instanceof ArrayBuffer)throw new Error("Invalid jwk key format");return await this._importJWK(t,n)}async derivePublicKey(e){return await this._derivePublicKey(e)}async generateKeyPair(){let e=$n.utils.randomPrivateKey(),t=new ee(Ve,e,"private",ce);return{publicKey:await this.derivePublicKey(t),privateKey:t}}async deriveKeyPair(e){let t=await this._hkdf.labeledExtract(Z,it,new Uint8Array(e)),n=await this._hkdf.labeledExpand(t,Mt,Z,this._nSk),i=new ee(Ve,new Uint8Array(n),"private",ce);return{privateKey:i,publicKey:await this.derivePublicKey(i)}}async dh(e,t){return await this._dh(e,t)}_serializePublicKey(e){return new Promise(t=>{t(e.key.buffer)})}_deserializePublicKey(e){return new Promise((t,n)=>{e.byteLength!==this._nPk?n(new Error("Invalid public key for the ciphersuite")):t(new ee(Ve,new Uint8Array(e),"public"))})}_importRawKey(e,t){return new Promise((n,i)=>{t&&e.byteLength!==this._nPk&&i(new Error("Invalid public key for the ciphersuite")),!t&&e.byteLength!==this._nSk&&i(new Error("Invalid private key for the ciphersuite")),n(new ee(Ve,new Uint8Array(e),t?"public":"private",t?[]:ce))})}_importJWK(e,t){return new Promise((n,i)=>{e.kty!=="OKP"&&i(new Error(`Invalid kty: ${e.kty}`)),e.crv!=="X448"&&i(new Error(`Invalid crv: ${e.crv}`)),t?(typeof e.d<"u"&&i(new Error("Invalid key: `d` should not be set")),typeof e.x!="string"&&i(new Error("Invalid key: `x` not found")),n(new ee(Ve,nt(e.x),"public"))):(typeof e.d!="string"&&i(new Error("Invalid key: `d` not found")),n(new ee(Ve,nt(e.d),"private",ce)))})}_derivePublicKey(e){return new Promise(t=>{let n=Ur.getPublicKey(e.key);t(new ee(Ve,n,"public"))})}_dh(e,t){return new Promise((n,i)=>{try{n(Ur.getSharedSecret(e.key,t.key).buffer)}catch(o){i(o)}})}};var rr=class extends se{constructor(){let e=new je,t=new tr(e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemX448HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:56})}};var Vo=new Uint8Array([115,101,99]),ot=class{constructor(e,t,n){Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"exporterSecret",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this._api=e,this._kdf=t,this.exporterSecret=n}async seal(e,t){return await this._emitError()}async open(e,t){return await this._emitError()}async export(e,t){if(e.byteLength>8192)throw new te("Too long exporter context");try{return await this._kdf.labeledExpand(this.exporterSecret,Vo,new Uint8Array(e),t)}catch(n){throw new vt(n)}}_emitError(){return new Promise((e,t)=>{t(new me("Not available"))})}},nr=class extends ot{},ir=class extends ot{constructor(e,t,n,i){super(e,t,n),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=i}};var st=class extends ot{constructor(e,t,n){if(super(e,t,n.exporterSecret),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nK",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nN",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_nT",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_ctx",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),n.key===void 0||n.baseNonce===void 0||n.seq===void 0)throw new Error("Required parameters are missing");this._aead=n.aead,this._nK=this._aead.keySize,this._nN=this._aead.nonceSize,this._nT=this._aead.tagSize;let i=this._aead.createEncryptionContext(n.key);this._ctx={key:i,baseNonce:n.baseNonce,seq:n.seq}}computeNonce(e){let t=ge(e.seq,e.baseNonce.byteLength);return yn(e.baseNonce,t)}incrementSeq(e){if(e.seq>Number.MAX_SAFE_INTEGER)throw new Pt("Message limit reached");e.seq+=1}};var or=class extends st{async open(e,t=Z){let n;try{n=await this._ctx.key.open(this.computeNonce(this._ctx),e,t)}catch(i){throw new At(i)}return this.incrementSeq(this._ctx),n}};var sr=class extends st{constructor(e,t,n,i){super(e,t,n),Object.defineProperty(this,"enc",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),this.enc=i}async seal(e,t=Z){let n;try{n=await this._ctx.key.seal(this.computeNonce(this._ctx),e,t)}catch(i){throw new St(i)}return this.incrementSeq(this._ctx),n}};var ar=class extends se{constructor(){let e=new Ue,t=new be(C.DhkemP256HkdfSha256,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP256HkdfSha256}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:32}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:65}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:32})}},cr=class extends se{constructor(){let e=new He,t=new be(C.DhkemP384HkdfSha384,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP384HkdfSha384}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:48}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:97}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:48})}},fr=class extends se{constructor(){let e=new Te,t=new be(C.DhkemP521HkdfSha512,e);super(t,e),Object.defineProperty(this,"id",{enumerable:!0,configurable:!0,writable:!0,value:C.DhkemP521HkdfSha512}),Object.defineProperty(this,"secretSize",{enumerable:!0,configurable:!0,writable:!0,value:64}),Object.defineProperty(this,"encSize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"publicKeySize",{enumerable:!0,configurable:!0,writable:!0,value:133}),Object.defineProperty(this,"privateKeySize",{enumerable:!0,configurable:!0,writable:!0,value:64})}};var Xo=new Uint8Array([98,97,115,101,95,110,111,110,99,101]),Yo=new Uint8Array([101,120,112]),Wo=new Uint8Array([105,110,102,111,95,104,97,115,104]),Jo=new Uint8Array([107,101,121]),Qo=new Uint8Array([112,115,107,95,105,100,95,104,97,115,104]),es=new Uint8Array([115,101,99,114,101,116]),ts=new Uint8Array([72,80,75,69,0,0,0,0,0,0]),wt=class{constructor(e){if(Object.defineProperty(this,"_api",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kem",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_kdf",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_aead",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defineProperty(this,"_suiteId",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),typeof e.kem!="number")this._kem=e.kem;else switch(e.kem){case C.DhkemP256HkdfSha256:this._kem=new ar;break;case C.DhkemP384HkdfSha384:this._kem=new cr;break;case C.DhkemP521HkdfSha512:this._kem=new fr;break;default:throw new te(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf!="number")this._kdf=e.kdf;else switch(e.kdf){case pe.HkdfSha256:this._kdf=new Ue;break;case pe.HkdfSha384:this._kdf=new He;break;default:this._kdf=new Te;break}if(typeof e.aead!="number")this._aead=e.aead;else switch(e.aead){case re.Aes128Gcm:this._aead=new Ye;break;case re.Aes256Gcm:this._aead=new We;break;case re.ExportOnly:this._aead=new Je;break;default:throw new te(`The AEAD (${e.aead}) cannot be specified by AeadId. Use submodule for the AEAD`)}this._suiteId=new Uint8Array(ts),this._suiteId.set(ge(this._kem.id,2),4),this._suiteId.set(ge(this._kdf.id,2),6),this._suiteId.set(ge(this._aead.id,2),8)}get kem(){return this._kem}get kdf(){return this._kdf}get aead(){return this._aead}async generateKeyPair(){return await this._setup(),await this._kem.generateKeyPair()}async deriveKeyPair(e){return await this._setup(),await this._kem.deriveKeyPair(e)}async importKey(e,t,n=!0){return await this._setup(),await this._kem.importKey(e,t,n)}async createSenderContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.encap(e),n;return e.psk!==void 0?n=e.senderKey!==void 0?ve.AuthPsk:ve.Psk:n=e.senderKey!==void 0?ve.Auth:ve.Base,await this._keyScheduleS(n,t.sharedSecret,t.enc,e)}async createRecipientContext(e){this._validateInputLength(e),await this._setup();let t=await this._kem.decap(e),n;return e.psk!==void 0?n=e.senderPublicKey!==void 0?ve.AuthPsk:ve.Psk:n=e.senderPublicKey!==void 0?ve.Auth:ve.Base,await this._keyScheduleR(n,t,e)}async seal(e,t,n=Z){let i=await this.createSenderContext(e);return{ct:await i.seal(t,n),enc:i.enc}}async open(e,t,n=Z){return await(await this.createRecipientContext(e)).open(t,n)}async _setup(){if(this._api!==void 0)return;let e=await Rt();this._kdf.init(e,this._suiteId),this._aead.init(e),this._api=e}async _keySchedule(e,t,n){let i=n.psk===void 0?Z:new Uint8Array(n.psk.id),o=await this._kdf.labeledExtract(Z,Qo,i),s=n.info===void 0?Z:new Uint8Array(n.info),a=await this._kdf.labeledExtract(Z,Wo,s),c=new Uint8Array(1+o.byteLength+a.byteLength);c.set(new Uint8Array([e]),0),c.set(new Uint8Array(o),1),c.set(new Uint8Array(a),1+o.byteLength);let u=n.psk===void 0?Z:new Uint8Array(n.psk.key),f=this._kdf.buildLabeledIkm(es,u),h=this._kdf.buildLabeledInfo(Yo,c,this._kdf.hashSize),d=await this._kdf.extractAndExpand(t,f,h,this._kdf.hashSize);if(this._aead.id===re.ExportOnly)return{aead:this._aead,exporterSecret:d};let m=this._kdf.buildLabeledInfo(Jo,c,this._aead.keySize),k=await this._kdf.extractAndExpand(t,f,m,this._aead.keySize),_=this._kdf.buildLabeledInfo(Xo,c,this._aead.nonceSize),v=await this._kdf.extractAndExpand(t,f,_,this._aead.nonceSize);return{aead:this._aead,exporterSecret:d,key:k,baseNonce:new Uint8Array(v),seq:0}}async _keyScheduleS(e,t,n,i){let o=await this._keySchedule(e,t,i);return o.key===void 0?new ir(this._api,this._kdf,o.exporterSecret,n):new sr(this._api,this._kdf,o,n)}async _keyScheduleR(e,t,n){let i=await this._keySchedule(e,t,n);return i.key===void 0?new nr(this._api,this._kdf,i.exporterSecret):new or(this._api,this._kdf,i)}_validateInputLength(e){if(e.info!==void 0&&e.info.byteLength>8192)throw new te("Too long info");if(e.psk!==void 0){if(e.psk.key.byteLength<32)throw new te(`PSK must have at least ${32} bytes`);if(e.psk.key.byteLength>8192)throw new te("Too long psk.key");if(e.psk.id.byteLength>8192)throw new te("Too long psk.id")}}};var Hr=class extends wt{constructor(e){if(typeof e.kem=="number")switch(e.kem){case C.DhkemP256HkdfSha256:e.kem=new Gt;break;case C.DhkemP384HkdfSha384:e.kem=new Ft;break;case C.DhkemP521HkdfSha512:e.kem=new $t;break;case C.DhkemX25519HkdfSha256:e.kem=new Qt;break;case C.DhkemX448HkdfSha512:e.kem=new rr;break;default:throw new te(`The KEM (${e.kem}) cannot be specified by KemId. Use submodule for the KEM`)}if(typeof e.kdf=="number")switch(e.kdf){case pe.HkdfSha256:e.kdf=new Ce;break;case pe.HkdfSha384:e.kdf=new rt;break;default:e.kdf=new je;break}if(typeof e.aead=="number")switch(e.aead){case re.Aes128Gcm:e.aead=new Ye;break;case re.Aes256Gcm:e.aead=new We;break;case re.Chacha20Poly1305:e.aead=new Ht;break;default:e.aead=new Je;break}super(e)}};export{Zr as Aead,re as AeadId,Hr as CipherSuite,wt as CipherSuiteNative,kt as DecapError,It as DeriveKeyPairError,Xe as DeserializeError,Et as EncapError,vt as ExportError,ue as HpkeError,te as InvalidParamError,$r as Kdf,pe as KdfId,Fr as Kem,C as KemId,Pt as MessageLimitReachedError,me as NotSupportedError,At as OpenError,St as SealError,_t as SerializeError,Gr as ValidationError}; /*! Bundled license information: @noble/ciphers/esm/utils.js: