@atomicfinance/types 4.2.8 → 4.3.0

package/.yalc/@node-dlc/noise/dist/noise-state.js

@@ -0,0 +1,304 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NoiseState = void 0;
+const crypto_1 = require("@node-dlc/crypto");
+const crypto_2 = require("@node-dlc/crypto");
+class NoiseState {
+    /**
+     * State machine for perforing noise-protocol handshake, message
+     * encryption and decryption, and key rotation.
+     */
+    constructor({ ls, es, logger }) {
+        /**
+         * The official protocol name for the Lightning variant of Noise. This
+         * value is mixed into the iniitialiization function to start the
+         * handshake.
+         */
+        this.protocolName = Buffer.from('Noise_XK_secp256k1_ChaChaPoly_SHA256');
+        /**
+         * Appended to the hash of the protocolName during initialization.
+         */
+        this.prologue = Buffer.from('lightning');
+        this.logger = logger;
+        this.ls = ls;
+        this.lpk = (0, crypto_2.getPublicKey)(ls);
+        this.es = es;
+        this.epk = (0, crypto_2.getPublicKey)(es);
+    }
+    /**
+     * Initiator Act1 is the starting point for the authenticated key exchange
+     * handshake. The initiator attempts to satisfy an implicit challenge by the
+     * responder: knowledge of the static public key of the responder. It also
+     * transmits the initiators ephemeral key.
+     * @param rpk remote public key
+     * @return Buffer that is 50 bytes
+     */
+    initiatorAct1(rpk) {
+        if (this.logger)
+            this.logger.debug('initiator act1');
+        this.rpk = rpk;
+        this._initialize(this.rpk);
+        // 2. h = SHA-256(h || epk)
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, this.epk]));
+        // 3. es = ECDH(e.priv, rs)
+        const ss = (0, crypto_1.ecdh)(this.rpk, this.es);
+        // 4. ck, temp_k1 = HKDF(ck, es)
+        const tempK1 = (0, crypto_1.hkdf)(ss, 64, this.ck);
+        this.ck = tempK1.slice(0, 32);
+        this.tempK1 = tempK1.slice(32);
+        // 5. c = encryptWithAD(temp_k1, 0, h, zero)
+        const c = (0, crypto_1.ccpEncrypt)(this.tempK1, Buffer.alloc(12), this.h, Buffer.alloc(0));
+        // 6. h = SHA-256(h || c)
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, c]));
+        // 7. m = 0 || epk || c
+        const m = Buffer.concat([Buffer.alloc(1), this.epk, c]);
+        return m;
+    }
+    /**
+     * Initiator Act2 handles the response generated by the receiver's
+     * Act1, a 50-byte message. The responder's ephemeral key is extacted
+     * from the message during this phase.
+     *
+     * @param m 50-byte message from responder's act1
+     */
+    initiatorAct2(m) {
+        if (this.logger)
+            this.logger.debug('initiator act2');
+        // 1. read exactly 50 bytes off the stream
+        if (m.length !== 50)
+            throw new Error('ACT2_READ_FAILED');
+        // 2. parse th read message m into v, re, and c
+        const v = m.slice(0, 1)[0];
+        const re = m.slice(1, 34);
+        const c = m.slice(34);
+        // 2a. convert re to public key
+        this.repk = re;
+        // 3. assert version is known version
+        if (v !== 0)
+            throw new Error('ACT2_BAD_VERSION');
+        // 4. sha256(h || re.serializedCompressed');
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, this.repk]));
+        // 5. ss = ECDH(re, e.priv);
+        const ss = (0, crypto_1.ecdh)(this.repk, this.es);
+        // 6. ck, temp_k2 = HKDF(cd, ss)
+        const tempK2 = (0, crypto_1.hkdf)(ss, 64, this.ck);
+        this.ck = tempK2.slice(0, 32);
+        this.tempK2 = tempK2.slice(32);
+        // 7. p = decryptWithAD()
+        (0, crypto_1.ccpDecrypt)(this.tempK2, Buffer.alloc(12), this.h, c);
+        // 8. h = sha256(h || c)
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, c]));
+    }
+    /**
+     * Initiator Act3 is the final phase in the authenticated
+     * key agreement. This act is executed only if act 2
+     * was successful. The initiator transports its static public key
+     * to the responder.
+     */
+    initiatorAct3() {
+        if (this.logger)
+            this.logger.debug('initiator act3');
+        // 1. c = encryptWithAD(temp_k2, 1, h, lpk)
+        const c = (0, crypto_1.ccpEncrypt)(this.tempK2, Buffer.from([0, 0, 0, 0, 1, 0, 0, 0, 0, 0, 0, 0]), this.h, this.lpk);
+        // 2. h = sha256(h || c)
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, c]));
+        // 3. ss = ECDH(re, s.priv)
+        const ss = (0, crypto_1.ecdh)(this.repk, this.ls);
+        // 4. ck, temp_k3 = HKDF(ck, ss)
+        const tempK3 = (0, crypto_1.hkdf)(ss, 64, this.ck);
+        this.ck = tempK3.slice(0, 32);
+        this.tempK3 = tempK3.slice(32);
+        // 5. t = encryptWithAD(temp_k3, 0, h, zero)
+        const t = (0, crypto_1.ccpEncrypt)(this.tempK3, Buffer.alloc(12), this.h, Buffer.alloc(0));
+        // 6. sk, rk = hkdf(ck, zero)
+        const sk = (0, crypto_1.hkdf)(Buffer.alloc(0), 64, this.ck);
+        this.rk = sk.slice(32);
+        this.sk = sk.slice(0, 32);
+        // 7. rn = 0, sn = 0
+        this.sn = Buffer.alloc(12);
+        this.rn = Buffer.alloc(12);
+        // 8. send m = 0 || c || t
+        const m = Buffer.concat([Buffer.alloc(1), c, t]);
+        return m;
+    }
+    /**
+     * Receiver Act1 extracts the initiators ephemeral key. It also
+     * validates that the initiator knows the receivers public key.
+     * @param m 50-byte message sent by the initiator
+     */
+    receiveAct1(m) {
+        this._initialize(this.lpk);
+        if (this.logger)
+            this.logger.debug('receive act1');
+        // 1. read exactly 50 bytes off the stream
+        if (m.length !== 50)
+            throw new Error('ACT1_READ_FAILED');
+        // 2. parse th read message m into v,re, and c
+        const v = m.slice(0, 1)[0];
+        const re = m.slice(1, 34);
+        const c = m.slice(34);
+        this.repk = re;
+        // 3. assert version is known version
+        if (v !== 0)
+            throw new Error('ACT1_BAD_VERSION');
+        // 4. sha256(h || re.serializedCompressed');
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, re]));
+        // 5. ss = ECDH(re, ls.priv);
+        const ss = (0, crypto_1.ecdh)(re, this.ls);
+        // 6. ck, temp_k1 = HKDF(cd, ss)
+        const tempK1 = (0, crypto_1.hkdf)(ss, 64, this.ck);
+        this.ck = tempK1.slice(0, 32);
+        this.tempK1 = tempK1.slice(32);
+        // 7. p = decryptWithAD(temp_k1, 0, h, c)
+        (0, crypto_1.ccpDecrypt)(this.tempK1, Buffer.alloc(12), this.h, c);
+        // 8. h = sha256(h || c)
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, c]));
+    }
+    /**
+     * Receiver Act2 takes place only if Act1 was successful.
+     * This act sends responder's ephermeral key to the initiator.
+     */
+    recieveAct2() {
+        // 1. e = generateKey() => done in initialization
+        // 2. h = sha256(h || e.pub.compressed())
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, this.epk]));
+        // 3. ss = ecdh(re, e.priv)
+        const ss = (0, crypto_1.ecdh)(this.repk, this.es);
+        // 4. ck, temp_k2 = hkdf(ck, ss)
+        const tempK2 = (0, crypto_1.hkdf)(ss, 64, this.ck);
+        this.ck = tempK2.slice(0, 32);
+        this.tempK2 = tempK2.slice(32);
+        // 5. c = encryptWithAd(temp_k2, 0, h, zero)
+        const c = (0, crypto_1.ccpEncrypt)(this.tempK2, Buffer.alloc(12), this.h, Buffer.alloc(0));
+        // 6. h = sha256(h || c)
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, c]));
+        // 7. m = 0 || e.pub.compressed() Z|| c
+        const m = Buffer.concat([Buffer.alloc(1), this.epk, c]);
+        return m;
+    }
+    /**
+     * Receiver Act3 is the final phase in the authenticated key
+     * agreement. This act is executed only if act 2 was successful.
+     * The receiver extracts the public key of the initiator.
+     * @param m 66-byte message
+     */
+    receiveAct3(m) {
+        // 1. read exactly 66 bytes from the network buffer
+        if (m.length !== 66)
+            throw new Error('ACT3_READ_FAILED');
+        // 2. parse m into v, c, t
+        const v = m.slice(0, 1)[0];
+        const c = m.slice(1, 50);
+        const t = m.slice(50);
+        // 3. validate v is recognized
+        if (v !== 0)
+            throw new Error('ACT3_BAD_VERSION');
+        // 4. rs = decryptWithAD(temp_k2, 1, h, c)
+        const rs = (0, crypto_1.ccpDecrypt)(this.tempK2, Buffer.from('000000000100000000000000', 'hex'), this.h, c);
+        this.rpk = rs;
+        // 5. h = sha256(h || c)
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, c]));
+        // 6. ss = ECDH(rs, e.priv)
+        const ss = (0, crypto_1.ecdh)(this.rpk, this.es);
+        // 7. ck, temp_k3 = hkdf(cs, ss)
+        const tempK3 = (0, crypto_1.hkdf)(ss, 64, this.ck);
+        this.ck = tempK3.slice(0, 32);
+        this.tempK3 = tempK3.slice(32);
+        // 8. p = decryptWithAD(temp_k3, 0, h, t)
+        (0, crypto_1.ccpDecrypt)(this.tempK3, Buffer.alloc(12), this.h, t);
+        // 9. rk, sk = hkdf(ck, zero)
+        const sk = (0, crypto_1.hkdf)(Buffer.alloc(0), 64, this.ck);
+        this.rk = sk.slice(0, 32);
+        this.sk = sk.slice(32);
+        // 10. rn = 0, sn = 0
+        this.rn = Buffer.alloc(12);
+        this.sn = Buffer.alloc(12);
+    }
+    /**
+     * Sends an encrypted message using the shared sending key and nonce.
+     * The nonce is rotated once the message is sent. The sending key is
+     * rotated every 1000 messages.
+     * @param m
+     */
+    encryptMessage(m) {
+        // step 1/2. serialize m length into int16
+        const l = Buffer.alloc(2);
+        l.writeUInt16BE(m.length, 0);
+        // step 3. encrypt l, using chachapoly1305, sn, sk)
+        const lc = (0, crypto_1.ccpEncrypt)(this.sk, this.sn, Buffer.alloc(0), l);
+        // step 3a: increment sn
+        if (this._incrementSendingNonce() >= 1000)
+            this._rotateSendingKeys();
+        // step 4 encrypt m using chachapoly1305, sn, sk
+        const c = (0, crypto_1.ccpEncrypt)(this.sk, this.sn, Buffer.alloc(0), m);
+        // step 4a: increment sn
+        if (this._incrementSendingNonce() >= 1000)
+            this._rotateSendingKeys();
+        // step 5 return m to be sent
+        return Buffer.concat([lc, c]);
+    }
+    /**
+     * Decrypts the length of the message using the receiving key and nonce.
+     * The receiving key is rotated every 1000 messages.
+     */
+    decryptLength(lc) {
+        const l = (0, crypto_1.ccpDecrypt)(this.rk, this.rn, Buffer.alloc(0), lc);
+        if (this._incrementRecievingNonce() >= 1000)
+            this._rotateRecievingKeys();
+        return l.readUInt16BE(0);
+    }
+    /**
+     * Decrypts the message using the receiving key and nonce. The receiving
+     * key is rotated every 1000 messages.
+     */
+    decryptMessage(c) {
+        const m = (0, crypto_1.ccpDecrypt)(this.rk, this.rn, Buffer.alloc(0), c);
+        if (this._incrementRecievingNonce() >= 1000)
+            this._rotateRecievingKeys();
+        return m;
+    }
+    /////////////////////////////////////
+    /**
+     * Initializes the noise state prior to Act1.
+     */
+    _initialize(pubkey) {
+        if (this.logger)
+            this.logger.debug('initialize noise state');
+        // 1. h = SHA-256(protocolName)
+        this.h = (0, crypto_1.sha256)(Buffer.from(this.protocolName));
+        // 2. ck = h
+        this.ck = this.h;
+        // 3. h = SHA-256(h || prologue)
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, this.prologue]));
+        // 4. h = SHA-256(h || pubkey)
+        this.h = (0, crypto_1.sha256)(Buffer.concat([this.h, pubkey]));
+    }
+    _incrementSendingNonce() {
+        const newValue = this.sn.readUInt16LE(4) + 1;
+        this.sn.writeUInt16LE(newValue, 4);
+        return newValue;
+    }
+    _incrementRecievingNonce() {
+        const newValue = this.rn.readUInt16LE(4) + 1;
+        this.rn.writeUInt16LE(newValue, 4);
+        return newValue;
+    }
+    _rotateSendingKeys() {
+        if (this.logger)
+            this.logger.debug('rotating sending key');
+        const result = (0, crypto_1.hkdf)(this.sk, 64, this.ck);
+        this.sk = result.slice(32);
+        this.ck = result.slice(0, 32);
+        this.sn = Buffer.alloc(12);
+    }
+    _rotateRecievingKeys() {
+        if (this.logger)
+            this.logger.debug('rotating receiving key');
+        const result = (0, crypto_1.hkdf)(this.rk, 64, this.ck);
+        this.rk = result.slice(32);
+        this.ck = result.slice(0, 32);
+        this.rn = Buffer.alloc(12);
+    }
+}
+exports.NoiseState = NoiseState;
+//# sourceMappingURL=noise-state.js.map

package/.yalc/@node-dlc/noise/dist/noise-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noise-state.js","sourceRoot":"","sources":["../lib/noise-state.ts"],"names":[],"mappings":";;;AAAA,6CAA8E;AAC9E,6CAAgD;AAKhD,MAAa,UAAU;IA0GrB;;;OAGG;IACH,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAqB;QA3GjD;;;;WAIG;QACI,iBAAY,GAAG,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAE1E;;WAEG;QACI,aAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAkGzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,GAAG,IAAA,qBAAY,EAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,GAAG,IAAA,qBAAY,EAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACI,aAAa,CAAC,GAAW;QAC9B,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE3B,2BAA2B;QAC3B,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEnD,2BAA2B;QAC3B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnC,gCAAgC;QAChC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE/B,4CAA4C;QAC5C,MAAM,CAAC,GAAG,IAAA,mBAAU,EAClB,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAChB,IAAI,CAAC,CAAC,EACN,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAChB,CAAC;QAEF,yBAAyB;QACzB,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5C,uBAAuB;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;;;;;OAMG;IACI,aAAa,CAAC,CAAS;QAC5B,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAErD,0CAA0C;QAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAEzD,+CAA+C;QAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEtB,+BAA+B;QAC/B,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QAEf,qCAAqC;QACrC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAEjD,4CAA4C;QAC5C,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpD,4BAA4B;QAC5B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpC,gCAAgC;QAChC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE/B,yBAAyB;QACzB,IAAA,mBAAU,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAErD,wBAAwB;QACxB,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;OAKG;IACI,aAAa;QAClB,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAErD,2CAA2C;QAC3C,MAAM,CAAC,GAAG,IAAA,mBAAU,EAClB,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EACjD,IAAI,CAAC,CAAC,EACN,IAAI,CAAC,GAAG,CACT,CAAC;QAEF,wBAAwB;QACxB,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5C,2BAA2B;QAC3B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpC,gCAAgC;QAChC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE/B,4CAA4C;QAC5C,MAAM,CAAC,GAAG,IAAA,mBAAU,EAClB,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAChB,IAAI,CAAC,CAAC,EACN,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAChB,CAAC;QAEF,6BAA6B;QAC7B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE1B,oBAAoB;QACpB,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE3B,0BAA0B;QAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;;;OAIG;IACI,WAAW,CAAC,CAAS;QAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE3B,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAEnD,0CAA0C;QAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAEzD,8CAA8C;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QAEf,qCAAqC;QACrC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAEjD,4CAA4C;QAC5C,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAE7C,6BAA6B;QAC7B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAE7B,gCAAgC;QAChC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE/B,yCAAyC;QACzC,IAAA,mBAAU,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAErD,wBAAwB;QACxB,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACI,WAAW;QAChB,iDAAiD;QAEjD,yCAAyC;QACzC,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEnD,2BAA2B;QAC3B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpC,gCAAgC;QAChC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE/B,4CAA4C;QAC5C,MAAM,CAAC,GAAG,IAAA,mBAAU,EAClB,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAChB,IAAI,CAAC,CAAC,EACN,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAChB,CAAC;QAEF,wBAAwB;QACxB,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5C,uCAAuC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;;;;OAKG;IACI,WAAW,CAAC,CAAS;QAC1B,mDAAmD;QACnD,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAEzD,0BAA0B;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEtB,8BAA8B;QAC9B,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAEjD,0CAA0C;QAC1C,MAAM,EAAE,GAAG,IAAA,mBAAU,EACnB,IAAI,CAAC,MAAM,EACX,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,EAC9C,IAAI,CAAC,CAAC,EACN,CAAC,CACF,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QAEd,wBAAwB;QACxB,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5C,2BAA2B;QAC3B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnC,gCAAgC;QAChC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE/B,yCAAyC;QACzC,IAAA,mBAAU,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAErD,6BAA6B;QAC7B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEvB,qBAAqB;QACrB,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACI,cAAc,CAAC,CAAS;QAC7B,0CAA0C;QAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAE7B,mDAAmD;QACnD,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAE5D,wBAAwB;QACxB,IAAI,IAAI,CAAC,sBAAsB,EAAE,IAAI,IAAI;YAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAErE,gDAAgD;QAChD,MAAM,CAAC,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAE3D,wBAAwB;QACxB,IAAI,IAAI,CAAC,sBAAsB,EAAE,IAAI,IAAI;YAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAErE,6BAA6B;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAED;;;OAGG;IACI,aAAa,CAAC,EAAU;QAC7B,MAAM,CAAC,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE5D,IAAI,IAAI,CAAC,wBAAwB,EAAE,IAAI,IAAI;YAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAEzE,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACI,cAAc,CAAC,CAAS;QAC7B,MAAM,CAAC,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAE3D,IAAI,IAAI,CAAC,wBAAwB,EAAE,IAAI,IAAI;YAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAEzE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,qCAAqC;IAErC;;OAEG;IACK,WAAW,CAAC,MAAc;QAChC,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAE7D,+BAA+B;QAC/B,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhD,YAAY;QACZ,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAEjB,gCAAgC;QAChC,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAExD,8BAA8B;QAC9B,IAAI,CAAC,CAAC,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAEO,sBAAsB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACnC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,wBAAwB;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACnC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,kBAAkB;QACxB,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAEO,oBAAoB;QAC1B,IAAI,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;CACF;AA1dD,gCA0dC"}

package/.yalc/@node-dlc/noise/dist/read-state.d.ts

@@ -0,0 +1,5 @@
+export declare enum READ_STATE {
+    READY_FOR_LEN = 2,
+    READY_FOR_BODY = 3,
+    BLOCKED = 4
+}

package/.yalc/@node-dlc/noise/dist/read-state.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.READ_STATE = void 0;
+var READ_STATE;
+(function (READ_STATE) {
+    READ_STATE[READ_STATE["READY_FOR_LEN"] = 2] = "READY_FOR_LEN";
+    READ_STATE[READ_STATE["READY_FOR_BODY"] = 3] = "READY_FOR_BODY";
+    READ_STATE[READ_STATE["BLOCKED"] = 4] = "BLOCKED";
+})(READ_STATE = exports.READ_STATE || (exports.READ_STATE = {}));
+//# sourceMappingURL=read-state.js.map

package/.yalc/@node-dlc/noise/dist/read-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-state.js","sourceRoot":"","sources":["../lib/read-state.ts"],"names":[],"mappings":";;;AAAA,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,6DAAiB,CAAA;IACjB,+DAAkB,CAAA;IAClB,iDAAW,CAAA;AACb,CAAC,EAJW,UAAU,GAAV,kBAAU,KAAV,kBAAU,QAIrB"}

package/.yalc/@node-dlc/noise/lib/handshake-state.ts

@@ -0,0 +1,50 @@
+/**
+ * States that the handshake process can be in. States depend on
+ * whether the socket is the connection Initiator or Responder.
+ *
+ * Initiator:
+ *   1.  create and send Iniatitor act1 and transition to
+ *       AWAITING_RESPONDER_REPLY
+ *   2.  process the Responder's reply as act2
+ *   3.  create Initiator act3 reply to complete the handshake
+ *       and transitions to READY
+ *
+ * Responder:
+ *   1.  begins in AWAITING_INITIATOR waiting to receive act1
+ *   2.  processes act1 and creates a reply as act2 and transitions
+ *       to AWAITING_INITIATOR_REPLY
+ *   3.  processes the Initiator's reply to complete the handshake
+ *       and transition to READY
+ */
+export enum HANDSHAKE_STATE {
+  /**
+   * Initial state for the Initiator. Initiator will transition to
+   * AWAITING_RESPONDER_REPLY once act1 is completed and sent.
+   */
+  INITIATOR_INITIATING = 0,
+
+  /**
+   * Responders begin in this state and wait for the Intiator to begin
+   * the handshake. Sockets originating from the NoiseServer will
+   * begin in this state.
+   */
+  AWAITING_INITIATOR = 1,
+
+  /**
+   * Initiator has sent act1 and is awaiting the reply from the responder.
+   * Once received, the intiator will create the reply
+   */
+  AWAITING_RESPONDER_REPLY = 2,
+
+  /**
+   * Responder has  sent a reply to the inititator, the Responder will be
+   * waiting for the final stage of the handshake sent by the Initiator.
+   */
+  AWAITING_INITIATOR_REPLY = 3,
+
+  /**
+   * Responder/Initiator have completed the handshake and we're ready to
+   * start sending and receiving over the socket.
+   */
+  READY = 100,
+}

package/.yalc/@node-dlc/noise/lib/index.ts

@@ -0,0 +1,88 @@
+import * as crypto from '@node-dlc/crypto';
+import { ILogger } from '@node-dlc/logger';
+import { Socket } from 'net';
+
+import { NoiseServer } from './noise-server';
+import { NoiseServerOptions } from './noise-server-options';
+import { NoiseSocket } from './noise-socket';
+import { NoiseState } from './noise-state';
+
+export { NoiseError } from './noise-error';
+export { NoiseServer } from './noise-server';
+export { NoiseServerListenOptions } from './noise-server-listen-options';
+export { NoiseServerOptions } from './noise-server-options';
+export { NoiseSocket } from './noise-socket';
+export { NoiseSocketOptions } from './noise-socket-options';
+export { NoiseState } from './noise-state';
+
+export type NoiseConnectOptions = {
+  /**
+   * Local secret as a 32-byte secp256k1 private key
+   */
+  ls: Buffer;
+
+  /**
+   * Optional ephemeral 32-byte secp256k1 private key. If not provided, one is generated.
+   */
+  es?: Buffer;
+
+  /**
+   * remote compressed public key, 33-bytes.
+   */
+  rpk: Buffer;
+
+  /**
+   * Optional host. Defaults to localhost.
+   */
+  host?: string;
+
+  /**
+   * Optional port. Defaults to 9735.
+   */
+  port?: number;
+
+  /**
+   * Optional logger
+   */
+  logger?: ILogger;
+};
+
+/**
+ * Connect to a remote noise socket server.
+ */
+export function connect({
+  ls,
+  es,
+  rpk,
+  host,
+  port = 9735,
+  logger,
+}: NoiseConnectOptions): NoiseSocket {
+  if (!es) {
+    es = crypto.createPrivateKey();
+  }
+
+  const noiseLogger = logger
+    ? logger.sub('noise', rpk.slice(0, 8).toString('hex'))
+    : undefined;
+  const noiseState = new NoiseState({ ls, es, logger: noiseLogger });
+  const socket = new Socket();
+  const instance = new NoiseSocket({
+    socket,
+    noiseState,
+    rpk,
+    logger: noiseLogger,
+  });
+  socket.connect({ host, port });
+  return instance;
+}
+
+/**
+ * Factory function to create a new server
+ */
+export function createServer(
+  { ls, esFactory }: NoiseServerOptions,
+  connListener: (socket: NoiseSocket) => void,
+): NoiseServer {
+  return new NoiseServer({ ls, esFactory }, connListener);
+}

package/.yalc/@node-dlc/noise/lib/noise-error.ts

@@ -0,0 +1,3 @@
+export class NoiseError extends Error {
+  public module = 'noise';
+}

package/.yalc/@node-dlc/noise/lib/noise-server-listen-options.ts

@@ -0,0 +1,25 @@
+export type NoiseServerListenOptions = {
+  /**
+   * Optional port to listen on.  If port is omitted or is 0,
+   * the operating system will assign an arbitrary unused port, which can be retrieved
+   * by using server.address().port after the 'listening' event has been emitted.
+   */
+  port?: number;
+
+  /**
+   * Optional host to listen on. If host is omitted, the server
+   * will accept connections on the unspecified IPv6 address (::) when IPv6 is available,
+   * or the unspecified IPv4 address (0.0.0.0) otherwise. In most operating systems,
+   * listening to the unspecified IPv6 address (::) may cause NoiseSocket to also
+   * listen on the unspecified IPv4 address (0.0.0.0).
+   */
+  host?: string;
+
+  /**
+   * Optional value to specify the maximum length of the
+   * queue of pending connections. The actual length will be determined by the OS through
+   * sysctl settings such as tcp_max_syn_backlog and somaxconn on Linux. The default value
+   * of this parameter is 511 (not 512).
+   */
+  backlog?: number;
+};

package/.yalc/@node-dlc/noise/lib/noise-server-options.ts

@@ -0,0 +1,13 @@
+export type NoiseServerOptions = {
+  /**
+   * Local private key as a 32-byte private key for elliptic curve
+   * secp256k1 used by the server
+   */
+  ls: Buffer;
+
+  /**
+   * Function for creating the ephemeral private key used by each
+   * connection
+   */
+  esFactory?: () => Buffer;
+};

package/.yalc/@node-dlc/noise/lib/noise-server.ts

@@ -0,0 +1,135 @@
+import * as crypto from '@node-dlc/crypto';
+import assert from 'assert';
+import { EventEmitter } from 'events';
+import { AddressInfo, Server, Socket } from 'net';
+
+import { NoiseError } from './noise-error';
+import { NoiseServerListenOptions } from './noise-server-listen-options';
+import { NoiseServerOptions } from './noise-server-options';
+import { NoiseSocket } from './noise-socket';
+import { NoiseState } from './noise-state';
+
+export class NoiseServer extends EventEmitter {
+  /**
+   * Local private key as a 32-byte private key for elliptic curve
+   * secp256k1 used by the server
+   */
+  public ls: Buffer;
+
+  /**
+   * Function for creating the ephemeral private key used by each
+   * connection
+   */
+  public esFactory: () => Buffer;
+
+  /**
+   * Socket server that is created
+   */
+  private _server: Server;
+
+  /**
+   * NoiseServer is a TCP server that wraps socket instances
+   * with the NoiseSocket class. This class is an event emitter
+   * with the same interface as net.Server.
+   *
+   * The constructor take arguments that will be used by the
+   * NoiseState.
+   */
+  constructor(
+    opts: NoiseServerOptions,
+    connListener?: (socket: NoiseSocket) => void,
+  ) {
+    super();
+
+    // localSecret assertions
+    assert.ok(Buffer.isBuffer(opts.ls), new NoiseError('ls must be a buffer'));
+    assert.ok(
+      crypto.validPrivateKey(opts.ls),
+      new NoiseError('ls must be valid public key'),
+    );
+    this.ls = opts.ls;
+
+    // ephemeral secret factory
+    assert.ok(
+      !opts.esFactory || typeof opts.esFactory === 'function',
+      new NoiseError('esFactory must be a function'),
+    );
+    this.esFactory = opts.esFactory || crypto.createPrivateKey;
+
+    // construct and bind the server
+    this._server = new Server();
+    this._server.on('connection', this._onConnection.bind(this));
+    this._server.on('error', (err) => this.emit('error', err));
+    this._server.on('close', () => this.emit('close'));
+    this._server.on('listening', () => this.emit('listening'));
+
+    if (connListener) this.on('connection', connListener);
+  }
+
+  /**
+   * Called when the socket receives a new socket connection.
+   * Emits the `connection` event.
+   */
+  public _onConnection(socket: Socket): void {
+    const ls = this.ls;
+    const es = this.esFactory();
+    const noiseState = new NoiseState({ ls, es });
+    const noiseSocket = new NoiseSocket({ socket, noiseState });
+    this.emit('connection', noiseSocket);
+  }
+
+  /**
+   * Returns the address the server is listeening on. If the server is
+   * not listening, it will return undefined.
+   */
+  public address(): string | AddressInfo {
+    return this._server.address();
+  }
+
+  /**
+   * Stops the server from accepting new connections and keeps existing connections open.
+   * This function is asynchronous, the server is fully closed when all connections are
+   * ended and the server emits a `close` event. The optional `cb` event will be called
+   * once the `close` event occurs.
+   */
+  public close(cb?: (err?: Error) => void): void {
+    this._server.close(cb);
+  }
+
+  /**
+   * Asynchronously get the number of concurrent connections on the server. Works when sockets were sent to forks.
+   */
+  public getConnections(cb: (error: Error, count: number) => void): void {
+    this._server.getConnections(cb);
+  }
+
+  /**
+   * Start a server listening for connections. This method is asyncrhonous,
+   * once the server has started listening, the `listening` event will be
+   * emitted.
+   * @param callback Called when the server is listening. Automatically binds
+   * the function to the `listening` event.
+   */
+  public listen(opts: NoiseServerListenOptions, callback?: () => void): this {
+    this._server.listen(opts, callback);
+    return this;
+  }
+
+  /**
+   * Indicates whether or not the server is listening for connections.
+   */
+  public get listening(): boolean {
+    return this._server.listening;
+  }
+
+  /**
+   * Set this property to reject connections when the server's connection count gets high.
+   */
+  public get maxConnections(): number {
+    return this._server.maxConnections;
+  }
+
+  public set maxConnections(val: number) {
+    this._server.maxConnections = val;
+  }
+}