@aptos-labs/ts-sdk 6.3.1 → 7.0.1

package/dist/core/crypto/ed25519.js

@@ -0,0 +1,502 @@
+// Copyright © Aptos Foundation
+// SPDX-License-Identifier: Apache-2.0
+import { ed25519 } from "@noble/curves/ed25519.js";
+import { Serializable } from "../../bcs/serializer.js";
+import { AuthenticationKey } from "../authenticationKey.js";
+import { Hex } from "../hex.js";
+import { SigningScheme as AuthenticationKeyScheme, PrivateKeyVariants } from "../../types/index.js";
+import { CKDPriv, deriveKey, HARDENED_OFFSET, isValidHardenedPath, mnemonicToSeed, splitPath } from "./hdKey.js";
+import { PrivateKey } from "./privateKey.js";
+import { AccountPublicKey } from "./publicKey.js";
+import { Signature } from "./signature.js";
+import { convertSigningMessage } from "./utils.js";
+/**
+ * L is the value that greater than or equal to will produce a non-canonical signature, and must be rejected
+ * @group Implementation
+ * @category Serialization
+ */
+const L = [
+    0xed, 0xd3, 0xf5, 0x5c, 0x1a, 0x63, 0x12, 0x58, 0xd6, 0x9c, 0xf7, 0xa2, 0xde, 0xf9, 0xde, 0x14, 0x00, 0x00, 0x00,
+    0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10,
+];
+/**
+ * Checks if an ED25519 signature is non-canonical.
+ * This function helps determine the validity of a signature by verifying its canonical form.
+ *
+ * @param signature - The signature to be checked for canonicality.
+ * @returns A boolean indicating whether the signature is non-canonical.
+ *
+ * Comes from Aptos Core
+ * https://github.com/aptos-labs/aptos-core/blob/main/crates/aptos-crypto/src/ed25519/ed25519_sigs.rs#L47-L85
+ * @group Implementation
+ * @category Serialization
+ */
+export function isCanonicalEd25519Signature(signature) {
+    const s = signature.toUint8Array().slice(32);
+    for (let i = L.length - 1; i >= 0; i -= 1) {
+        if (s[i] < L[i]) {
+            return true;
+        }
+        if (s[i] > L[i]) {
+            return false;
+        }
+    }
+    // As this stage S == L which implies a non-canonical S.
+    return false;
+}
+/**
+ * Represents the public key of an Ed25519 key pair.
+ *
+ * Since [AIP-55](https://github.com/aptos-foundation/AIPs/pull/263) Aptos supports
+ * `Legacy` and `Unified` authentication keys.
+ *
+ * Ed25519 scheme is represented in the SDK as `Legacy authentication key` and also
+ * as `AnyPublicKey` that represents any `Unified authentication key`.
+ * @group Implementation
+ * @category Serialization
+ */
+export class Ed25519PublicKey extends AccountPublicKey {
+    /**
+     * Length of an Ed25519 public key
+     * @group Implementation
+     * @category Serialization
+     */
+    static LENGTH = 32;
+    /**
+     * Bytes of the public key
+     * @private
+     * @group Implementation
+     * @category Serialization
+     */
+    key;
+    /**
+     * Creates an instance of the Ed25519Signature class from a hex input.
+     * This constructor validates the length of the signature to ensure it meets the required specifications.
+     *
+     * @param hexInput - The hex input representing the Ed25519 signature.
+     * @throws Error if the signature length is not equal to Ed25519Signature.LENGTH.
+     * @group Implementation
+     * @category Serialization
+     */
+    constructor(hexInput) {
+        super();
+        const hex = Hex.fromHexInput(hexInput);
+        if (hex.toUint8Array().length !== Ed25519PublicKey.LENGTH) {
+            throw new Error(`PublicKey length should be ${Ed25519PublicKey.LENGTH}`);
+        }
+        this.key = hex;
+    }
+    // region AccountPublicKey
+    /**
+     * Verifies a signed message using a public key.
+     *
+     * @param args - The arguments for verification.
+     * @param args.message - A signed message as a Hex string or Uint8Array.
+     * @param args.signature - The signature of the message.
+     * @group Implementation
+     * @category Serialization
+     */
+    verifySignature(args) {
+        const { message, signature } = args;
+        // Verify malleability
+        if (!isCanonicalEd25519Signature(signature)) {
+            return false;
+        }
+        const messageToVerify = convertSigningMessage(message);
+        const messageBytes = Hex.fromHexInput(messageToVerify).toUint8Array();
+        const signatureBytes = signature.toUint8Array();
+        const publicKeyBytes = this.key.toUint8Array();
+        return ed25519.verify(signatureBytes, messageBytes, publicKeyBytes);
+    }
+    /**
+     * Note: Ed25519Signatures can be verified syncronously.
+     *
+     * Verifies the provided signature against the given message.
+     * This function helps ensure the integrity and authenticity of the message by confirming that the signature is valid.
+     *
+     * @param args - The arguments for signature verification.
+     * @param args.aptosConfig - The configuration object for connecting to the Aptos network
+     * @param args.message - The message that was signed.
+     * @param args.signature - The signature to verify, which must be an instance of Secp256k1Signature.
+     * @returns A boolean indicating whether the signature is valid for the given message.
+     * @group Implementation
+     * @category Serialization
+     */
+    async verifySignatureAsync(args) {
+        return this.verifySignature(args);
+    }
+    /**
+     * Generates an authentication key from the public key using the Ed25519 scheme.
+     * This function is essential for creating a secure authentication key that can be used for further cryptographic operations.
+     *
+     * @returns {AuthenticationKey} The generated authentication key.
+     * @group Implementation
+     * @category Serialization
+     */
+    authKey() {
+        return AuthenticationKey.fromSchemeAndBytes({
+            scheme: AuthenticationKeyScheme.Ed25519,
+            input: this.toUint8Array(),
+        });
+    }
+    /**
+     * Convert the internal data representation to a Uint8Array.
+     *
+     * @returns Uint8Array representation of the data.
+     * @group Implementation
+     * @category Serialization
+     */
+    toUint8Array() {
+        return this.key.toUint8Array();
+    }
+    // endregion
+    // region Serializable
+    /**
+     * Serializes the data into a byte array using the provided serializer.
+     * This allows for the conversion of data into a format suitable for transmission or storage.
+     *
+     * @param serializer - The serializer instance used to perform the serialization.
+     * @group Implementation
+     * @category Serialization
+     */
+    serialize(serializer) {
+        serializer.serializeBytes(this.key.toUint8Array());
+    }
+    /**
+     * Deserialize bytes into an Ed25519Signature object.
+     * This function is used to convert serialized byte data into a usable Ed25519Signature instance.
+     *
+     * @param deserializer - The deserializer instance used to read the byte data.
+     * @group Implementation
+     * @category Serialization
+     */
+    static deserialize(deserializer) {
+        const bytes = deserializer.deserializeBytes();
+        return new Ed25519PublicKey(bytes);
+    }
+    // endregion
+    /**
+     * Determine if the provided public key is an instance of Ed25519PublicKey.
+     *
+     * @param publicKey - The public key to check.
+     * @returns True if the public key is an instance of Ed25519PublicKey, otherwise false.
+     * @deprecated use `instanceof Ed25519PublicKey` instead.
+     * @group Implementation
+     * @category Serialization
+     */
+    static isPublicKey(publicKey) {
+        return publicKey instanceof Ed25519PublicKey;
+    }
+    /**
+     * Determines if the provided public key is a valid Ed25519 public key.
+     * This function checks for the presence of the "key" property and verifies that its data length matches the expected length
+     * for Ed25519 public keys.
+     *
+     * @param publicKey - The public key to validate.
+     * @returns A boolean indicating whether the public key is a valid Ed25519 public key.
+     * @group Implementation
+     * @category Serialization
+     */
+    static isInstance(publicKey) {
+        return ("key" in publicKey &&
+            typeof publicKey.key === "object" &&
+            publicKey.key !== null &&
+            "data" in publicKey.key &&
+            typeof publicKey.key.data === "object" &&
+            publicKey.key.data !== null &&
+            "length" in publicKey.key.data &&
+            publicKey.key?.data?.length === Ed25519PublicKey.LENGTH);
+    }
+}
+/**
+ * Represents the private key of an Ed25519 key pair.
+ * @group Implementation
+ * @category Serialization
+ */
+export class Ed25519PrivateKey extends Serializable {
+    /**
+     * Length of an Ed25519 private key
+     * @group Implementation
+     * @category Serialization
+     */
+    static LENGTH = 32;
+    /**
+     * The Ed25519 key seed to use for BIP-32 compatibility
+     * See more {@link https://github.com/satoshilabs/slips/blob/master/slip-0010.md}
+     * @group Implementation
+     * @category Serialization
+     */
+    static SLIP_0010_SEED = "ed25519 seed";
+    /**
+     * The Ed25519 signing key
+     * @private
+     * @group Implementation
+     * @category Serialization
+     */
+    signingKey;
+    /**
+     * Whether the key has been cleared from memory
+     * @private
+     */
+    cleared = false;
+    // region Constructors
+    /**
+     * Create a new PrivateKey instance from a Uint8Array or String.
+     *
+     * [Read about AIP-80](https://github.com/aptos-foundation/AIPs/blob/main/aips/aip-80.md)
+     *
+     * @param hexInput HexInput (string or Uint8Array)
+     * @param strict If true, private key must AIP-80 compliant.
+     * @group Implementation
+     * @category Serialization
+     */
+    constructor(hexInput, strict) {
+        super();
+        const privateKeyHex = PrivateKey.parseHexInput(hexInput, PrivateKeyVariants.Ed25519, strict);
+        if (privateKeyHex.toUint8Array().length !== Ed25519PrivateKey.LENGTH) {
+            throw new Error(`PrivateKey length should be ${Ed25519PrivateKey.LENGTH}`);
+        }
+        // Create keyPair from Private key in Uint8Array format
+        this.signingKey = privateKeyHex;
+    }
+    /**
+     * Generate a new random private key.
+     *
+     * @returns Ed25519PrivateKey A newly generated Ed25519 private key.
+     * @group Implementation
+     * @category Serialization
+     */
+    static generate() {
+        const keyPair = ed25519.utils.randomSecretKey();
+        return new Ed25519PrivateKey(keyPair, false);
+    }
+    /**
+     * Derives a private key from a mnemonic seed phrase using a specified BIP44 path.
+     * To derive multiple keys from the same phrase, change the path
+     *
+     * IMPORTANT: Ed25519 supports hardened derivation only, as it lacks a key homomorphism, making non-hardened derivation impossible.
+     *
+     * @param path - The BIP44 path used for key derivation.
+     * @param mnemonics - The mnemonic seed phrase from which the key will be derived.
+     * @throws Error if the provided path is not a valid hardened path.
+     * @group Implementation
+     * @category Serialization
+     */
+    static fromDerivationPath(path, mnemonics) {
+        if (!isValidHardenedPath(path)) {
+            throw new Error(`Invalid derivation path ${path}`);
+        }
+        return Ed25519PrivateKey.fromDerivationPathInner(path, mnemonicToSeed(mnemonics));
+    }
+    /**
+     * Derives a child private key from a given BIP44 path and seed.
+     * A private inner function so we can separate from the main fromDerivationPath() method
+     * to add tests to verify we create the keys correctly.
+     *
+     * @param path - The BIP44 path used for key derivation.
+     * @param seed - The seed phrase created by the mnemonics, represented as a Uint8Array.
+     * @param offset - The offset used for key derivation, defaults to HARDENED_OFFSET.
+     * @returns An instance of Ed25519PrivateKey derived from the specified path and seed.
+     * @group Implementation
+     * @category Serialization
+     */
+    static fromDerivationPathInner(path, seed, offset = HARDENED_OFFSET) {
+        const { key, chainCode } = deriveKey(Ed25519PrivateKey.SLIP_0010_SEED, seed);
+        const segments = splitPath(path).map((el) => parseInt(el, 10));
+        // Derive the child key based on the path
+        const { key: privateKey } = segments.reduce((parentKeys, segment) => CKDPriv(parentKeys, segment + offset), {
+            key,
+            chainCode,
+        });
+        return new Ed25519PrivateKey(privateKey, false);
+    }
+    // endregion
+    // region PrivateKey
+    /**
+     * Checks if the key has been cleared and throws an error if so.
+     * @private
+     */
+    ensureNotCleared() {
+        if (this.cleared) {
+            throw new Error("Private key has been cleared from memory and can no longer be used");
+        }
+    }
+    /**
+     * Clears the private key from memory by overwriting it with random bytes.
+     * After calling this method, the private key can no longer be used for signing or deriving public keys.
+     *
+     * Note: Due to JavaScript's memory management, this cannot guarantee complete removal of
+     * sensitive data from memory, but it significantly reduces the window of exposure.
+     *
+     * @group Implementation
+     * @category Serialization
+     */
+    clear() {
+        if (!this.cleared) {
+            const keyBytes = this.signingKey.toUint8Array();
+            // Multiple overwrite passes for better security
+            // Pass 1: Random data
+            crypto.getRandomValues(keyBytes);
+            // Pass 2: Ones pattern (0xFF)
+            keyBytes.fill(0xff);
+            // Pass 3: Random data again
+            crypto.getRandomValues(keyBytes);
+            // Pass 4: Zeros pattern (final state)
+            keyBytes.fill(0);
+            this.cleared = true;
+        }
+    }
+    /**
+     * Returns whether the private key has been cleared from memory.
+     *
+     * @returns true if the key has been cleared, false otherwise
+     * @group Implementation
+     * @category Serialization
+     */
+    isCleared() {
+        return this.cleared;
+    }
+    /**
+     * Derive the Ed25519PublicKey for this private key.
+     *
+     * @returns Ed25519PublicKey - The derived public key corresponding to the private key.
+     * @throws Error if the private key has been cleared from memory.
+     * @group Implementation
+     * @category Serialization
+     */
+    publicKey() {
+        this.ensureNotCleared();
+        const bytes = ed25519.getPublicKey(this.signingKey.toUint8Array());
+        return new Ed25519PublicKey(bytes);
+    }
+    /**
+     * Sign the given message with the private key.
+     * This function generates a digital signature for the specified message, ensuring its authenticity and integrity.
+     *
+     * @param message - A message as a string or Uint8Array in HexInput format.
+     * @returns A digital signature for the provided message.
+     * @throws Error if the private key has been cleared from memory.
+     * @group Implementation
+     * @category Serialization
+     */
+    sign(message) {
+        this.ensureNotCleared();
+        const messageToSign = convertSigningMessage(message);
+        const messageBytes = Hex.fromHexInput(messageToSign).toUint8Array();
+        const signatureBytes = ed25519.sign(messageBytes, this.signingKey.toUint8Array());
+        return new Ed25519Signature(signatureBytes);
+    }
+    /**
+     * Get the private key in bytes (Uint8Array).
+     *
+     * @returns Uint8Array representation of the private key
+     * @throws Error if the private key has been cleared from memory.
+     * @group Implementation
+     * @category Serialization
+     */
+    toUint8Array() {
+        this.ensureNotCleared();
+        return this.signingKey.toUint8Array();
+    }
+    /**
+     * Get the private key as a hex string with the 0x prefix.
+     *
+     * @returns string representation of the private key.
+     * @throws Error if the private key has been cleared from memory.
+     * @group Implementation
+     * @category Serialization
+     */
+    toString() {
+        this.ensureNotCleared();
+        return this.toAIP80String();
+    }
+    /**
+     * Get the private key as a hex string with the 0x prefix.
+     *
+     * @returns string representation of the private key.
+     * @throws Error if the private key has been cleared from memory.
+     */
+    toHexString() {
+        this.ensureNotCleared();
+        return this.signingKey.toString();
+    }
+    /**
+     * Get the private key as a AIP-80 compliant hex string.
+     *
+     * [Read about AIP-80](https://github.com/aptos-foundation/AIPs/blob/main/aips/aip-80.md)
+     *
+     * @returns AIP-80 compliant string representation of the private key.
+     * @throws Error if the private key has been cleared from memory.
+     */
+    toAIP80String() {
+        this.ensureNotCleared();
+        return PrivateKey.formatPrivateKey(this.signingKey.toString(), PrivateKeyVariants.Ed25519);
+    }
+    // endregion
+    // region Serializable
+    serialize(serializer) {
+        serializer.serializeBytes(this.toUint8Array());
+    }
+    static deserialize(deserializer) {
+        const bytes = deserializer.deserializeBytes();
+        return new Ed25519PrivateKey(bytes, false);
+    }
+    // endregion
+    /**
+     * Determines if the provided private key is an instance of Ed25519PrivateKey.
+     *
+     * @param privateKey - The private key to check.
+     * @returns A boolean indicating whether the private key is an Ed25519PrivateKey.
+     *
+     * @deprecated Use `instanceof Ed25519PrivateKey` instead.
+     * @group Implementation
+     * @category Serialization
+     */
+    static isPrivateKey(privateKey) {
+        return privateKey instanceof Ed25519PrivateKey;
+    }
+}
+/**
+ * Represents a signature of a message signed using an Ed25519 private key.
+ * @group Implementation
+ * @category Serialization
+ */
+export class Ed25519Signature extends Signature {
+    /**
+     * Length of an Ed25519 signature, which is 64 bytes.
+     * @group Implementation
+     * @category Serialization
+     */
+    static LENGTH = 64;
+    /**
+     * The signature bytes
+     * @private
+     * @group Implementation
+     * @category Serialization
+     */
+    data;
+    // region Constructors
+    constructor(hexInput) {
+        super();
+        const data = Hex.fromHexInput(hexInput);
+        if (data.toUint8Array().length !== Ed25519Signature.LENGTH) {
+            throw new Error(`Signature length should be ${Ed25519Signature.LENGTH}`);
+        }
+        this.data = data;
+    }
+    // endregion
+    // region Signature
+    toUint8Array() {
+        return this.data.toUint8Array();
+    }
+    // endregion
+    // region Serializable
+    serialize(serializer) {
+        serializer.serializeBytes(this.data.toUint8Array());
+    }
+    static deserialize(deserializer) {
+        const bytes = deserializer.deserializeBytes();
+        return new Ed25519Signature(bytes);
+    }
+}
+//# sourceMappingURL=ed25519.js.map

package/dist/core/crypto/ed25519.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519.js","sourceRoot":"","sources":["../../../src/core/crypto/ed25519.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,sCAAsC;AAEtC,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAc,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChC,OAAO,EAAY,aAAa,IAAI,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC9G,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACjH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAA4D,MAAM,gBAAgB,CAAC;AAC5G,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;GAIG;AACH,MAAM,CAAC,GAAa;IAClB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAChH,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CAC7E,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CAAC,SAAoB;IAC9D,MAAM,CAAC,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,wDAAwD;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,gBAAiB,SAAQ,gBAAgB;IACpD;;;;OAIG;IACH,MAAM,CAAU,MAAM,GAAW,EAAE,CAAC;IAEpC;;;;;OAKG;IACc,GAAG,CAAM;IAE1B;;;;;;;;OAQG;IACH,YAAY,QAAkB;QAC5B,KAAK,EAAE,CAAC;QAER,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,8BAA8B,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,0BAA0B;IAE1B;;;;;;;;OAQG;IACH,eAAe,CAAC,IAAyB;QACvC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QACpC,sBAAsB;QACtB,IAAI,CAAC,2BAA2B,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,eAAe,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,YAAY,EAAE,CAAC;QACtE,MAAM,cAAc,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,oBAAoB,CAAC,IAA8B;QACvD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,OAAO;QACL,OAAO,iBAAiB,CAAC,kBAAkB,CAAC;YAC1C,MAAM,EAAE,uBAAuB,CAAC,OAAO;YACvC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;IACjC,CAAC;IAED,YAAY;IAEZ,sBAAsB;IAEtB;;;;;;;OAOG;IACH,SAAS,CAAC,UAAsB;QAC9B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,WAAW,CAAC,YAA0B;QAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,YAAY;IAEZ;;;;;;;;OAQG;IACH,MAAM,CAAC,WAAW,CAAC,SAA2B;QAC5C,OAAO,SAAS,YAAY,gBAAgB,CAAC;IAC/C,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,UAAU,CAAC,SAAoB;QACpC,OAAO,CACL,KAAK,IAAI,SAAS;YAClB,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ;YACjC,SAAS,CAAC,GAAG,KAAK,IAAI;YACtB,MAAM,IAAI,SAAS,CAAC,GAAG;YACvB,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ;YACtC,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI;YAC3B,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI;YAC9B,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,gBAAgB,CAAC,MAAM,CACxD,CAAC;IACJ,CAAC;;AAGH;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACjD;;;;OAIG;IACH,MAAM,CAAU,MAAM,GAAW,EAAE,CAAC;IAEpC;;;;;OAKG;IACH,MAAM,CAAU,cAAc,GAAG,cAAc,CAAC;IAEhD;;;;;OAKG;IACK,UAAU,CAAM;IAExB;;;OAGG;IACK,OAAO,GAAY,KAAK,CAAC;IAEjC,sBAAsB;IAEtB;;;;;;;;;OASG;IACH,YAAY,QAAkB,EAAE,MAAgB;QAC9C,KAAK,EAAE,CAAC;QAER,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC,QAAQ,EAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7F,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,+BAA+B,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC;IAClC,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ;QACb,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAChD,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,kBAAkB,CAAC,IAAY,EAAE,SAAiB;QACvD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,iBAAiB,CAAC,uBAAuB,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IACpF,CAAC;IAED;;;;;;;;;;;OAWG;IACK,MAAM,CAAC,uBAAuB,CAAC,IAAY,EAAE,IAAgB,EAAE,MAAM,GAAG,eAAe;QAC7F,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,iBAAiB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAE7E,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAE/D,yCAAyC;QACzC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,CAAC,EAAE;YAC1G,GAAG;YACH,SAAS;SACV,CAAC,CAAC;QACH,OAAO,IAAI,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,YAAY;IAEZ,oBAAoB;IAEpB;;;OAGG;IACK,gBAAgB;QACtB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;YAChD,gDAAgD;YAChD,sBAAsB;YACtB,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACjC,8BAA8B;YAC9B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,4BAA4B;YAC5B,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACjC,sCAAsC;YACtC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;;OAOG;IACH,SAAS;QACP,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,CAAC,OAAiB;QACpB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,YAAY,EAAE,CAAC;QACpE,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC;QAClF,OAAO,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;OAOG;IACH,YAAY;QACV,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ;QACN,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,WAAW;QACT,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,aAAa;QACX,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7F,CAAC;IAED,YAAY;IAEZ,sBAAsB;IAEtB,SAAS,CAAC,UAAsB;QAC9B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,YAA0B;QAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,IAAI,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,YAAY;IAEZ;;;;;;;;;OASG;IACH,MAAM,CAAC,YAAY,CAAC,UAAsB;QACxC,OAAO,UAAU,YAAY,iBAAiB,CAAC;IACjD,CAAC;;AAGH;;;;GAIG;AACH,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAC7C;;;;OAIG;IACH,MAAM,CAAU,MAAM,GAAG,EAAE,CAAC;IAE5B;;;;;OAKG;IACc,IAAI,CAAM;IAE3B,sBAAsB;IAEtB,YAAY,QAAkB;QAC5B,KAAK,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,8BAA8B,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,YAAY;IAEZ,mBAAmB;IAEnB,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,YAAY;IAEZ,sBAAsB;IAEtB,SAAS,CAAC,UAAsB;QAC9B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,YAA0B;QAC3C,MAAM,KAAK,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC"}

package/dist/core/crypto/encryption/ciphertext.d.ts

@@ -0,0 +1,49 @@
+import type { Fp2 } from "@noble/curves/abstract/tower.js";
+import type { WeierstrassPoint } from "@noble/curves/abstract/weierstrass.js";
+import { Serializable, Serializer } from "../../../bcs/serializer.js";
+import { Deserializer } from "../../../bcs/deserializer.js";
+import { SymmetricCiphertext, SymmetricKey } from "./symmetric.js";
+/**
+ * Corresponds to the Rust type `aptos_batch_encryption::shared::ciphertext::BIBECiphertext`.
+ */
+export declare class BIBECiphertext extends Serializable {
+    id: bigint;
+    ctG2: WeierstrassPoint<Fp2>[];
+    paddedKey: SymmetricKey;
+    symmetricCiphertext: SymmetricCiphertext;
+    constructor(id: bigint, ctG2: WeierstrassPoint<Fp2>[], paddedKey: SymmetricKey, symmetricCiphertext: SymmetricCiphertext);
+    serialize(serializer: Serializer): void;
+    static deserialize(deserializer: Deserializer): BIBECiphertext;
+}
+/**
+ * Corresponds to the Rust type `aptos_batch_encryption::shared::ciphertext::Ciphertext`.
+ */
+export declare class Ciphertext extends Serializable {
+    vk: Uint8Array;
+    bibeCt: BIBECiphertext;
+    associatedDataBytes: Uint8Array;
+    signature: Uint8Array;
+    constructor(vk: Uint8Array, bibeCt: BIBECiphertext, associatedDataBytes: Uint8Array, signature: Uint8Array);
+    serialize(serializer: Serializer): void;
+    static deserialize(deserializer: Deserializer): Ciphertext;
+}
+/**
+ * Corresponds to the Rust type `aptos_batch_encryption::shared::encryption_key::EncryptionKey`.
+ *
+ * Deserialize from hex (API) -> bytes -> BCS -> EncryptionKey.
+ */
+export declare class EncryptionKey extends Serializable {
+    sigMpkG2: WeierstrassPoint<Fp2>;
+    tauG2: WeierstrassPoint<Fp2>;
+    constructor(sigMpkG2: WeierstrassPoint<Fp2>, tauG2: WeierstrassPoint<Fp2>);
+    serialize(serializer: Serializer): void;
+    static deserialize(deserializer: Deserializer): EncryptionKey;
+    private bibeEncrypt;
+    /**
+     * Encrypts a plaintext with associated data, producing a `Ciphertext`.
+     * Matches Rust: Id::from_verifying_key_and_ad(vk, associated_data) then CTEncrypt.
+     * The ciphertext Id must equal hash(vk || BCS(associated_data)) with ID_HASH_DST so the node can verify.
+     */
+    encrypt(plaintext: Serializable, associatedData: Serializable): Ciphertext;
+}
+//# sourceMappingURL=ciphertext.d.ts.map

package/dist/core/crypto/encryption/ciphertext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ciphertext.d.ts","sourceRoot":"","sources":["../../../../src/core/crypto/encryption/ciphertext.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAG5D,OAAO,EAML,mBAAmB,EACnB,YAAY,EACb,MAAM,gBAAgB,CAAC;AAExB;;GAEG;AACH,qBAAa,cAAe,SAAQ,YAAY;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9B,SAAS,EAAE,YAAY,CAAC;IACxB,mBAAmB,EAAE,mBAAmB,CAAC;gBAGvC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAC7B,SAAS,EAAE,YAAY,EACvB,mBAAmB,EAAE,mBAAmB;IAY1C,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAYvC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,YAAY,GAAG,cAAc;CAe/D;AAED;;GAEG;AACH,qBAAa,UAAW,SAAQ,YAAY;IAC1C,EAAE,EAAE,UAAU,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,mBAAmB,EAAE,UAAU,CAAC;IAChC,SAAS,EAAE,UAAU,CAAC;gBAEV,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU;IAc1G,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IASvC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,YAAY,GAAG,UAAU;CAO3D;AAED;;;;GAIG;AACH,qBAAa,aAAc,SAAQ,YAAY;IAC7C,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAChC,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAEjB,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC;IAMzE,SAAS,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAKvC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,YAAY,GAAG,aAAa;IAM7D,OAAO,CAAC,WAAW;IA8BnB;;;;OAIG;IACH,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,GAAG,UAAU;CA2B3E"}