@aztec-labs/foundation 6.0.0-nightly.20260829

package/dest/crypto/secp256k1-signer/secp256k1_signer.js

@@ -0,0 +1,30 @@
+import { Buffer32 } from '@aztec-labs/foundation/buffer';
+import { addressFromPrivateKey, makeEthSignDigest, signMessage } from './utils.js';
+/**
+ * Secp256k1Signer
+ *
+ * A class for signing messages using a secp256k1 private key.
+ * - This is a slim drop in replacement for an Ethereum signer, so it can be used in the same way.
+ * - See `utils.ts` for functions that enable recovering addresses and public keys from signatures.
+ */ export class Secp256k1Signer {
+    privateKey;
+    address;
+    constructor(privateKey){
+        this.privateKey = privateKey;
+        this.address = addressFromPrivateKey(privateKey.buffer);
+    }
+    sign(message) {
+        return signMessage(message, this.privateKey.buffer);
+    }
+    /**
+   * Sign a message using the same method as eth_sign
+   * @param message - The message to sign.
+   * @returns The signature.
+   */ signMessage(message) {
+        const digest = makeEthSignDigest(message);
+        return this.sign(digest);
+    }
+    static random() {
+        return new Secp256k1Signer(Buffer32.random());
+    }
+}

package/dest/crypto/secp256k1-signer/utils.d.ts

@@ -0,0 +1,102 @@
+import { Buffer32 } from '../../buffer/buffer32.js';
+import { EthAddress } from '../../eth-address/index.js';
+import { Signature } from '../../eth-signature/eth_signature.js';
+/** Signature recovery options */
+type RecoveryOpts = {
+    /**
+     * Whether to allow s-values in the high half of the curve (s >= CURVE.n/2).
+     * These are discouraged by EIP2 to prevent signature malleability, and outright
+     * rejected in OpenZeppelin's ECDSA recover, which we use in our Rollup contract.
+     */
+    allowMalleable?: boolean;
+    /**
+     * Whether to allow an y-parity 0-1 bit instead of the standard v value 27-28.
+     */
+    allowYParityAsV?: boolean;
+};
+export declare class Secp256k1Error extends Error {
+    constructor(message: string, opts?: {
+        cause: unknown;
+    });
+}
+export declare function makeEthSignDigest(message: Buffer32): Buffer32;
+/**
+ * Converts a private key to a public key.
+ * @param privateKey - The private key to convert.
+ * @returns The public key.
+ */
+export declare function publicKeyFromPrivateKey(privateKey: Buffer): Buffer;
+/**
+ * Converts a private key to an address.
+ * @param privateKey - The private key to convert.
+ * @returns The address.
+ */
+export declare function addressFromPrivateKey(privateKey: Buffer): EthAddress;
+/**
+ * Recovers an address from a hash and a signature.
+ * @param hash - The hash to recover the address from.
+ * @param signature - The signature to recover the address from.
+ * @param opts - Recovery options.
+ * @returns The address.
+ * @throws Error if signature recovery fails or if signature is malleable and allowMalleable is false.
+ */
+export declare function recoverAddress(hash: Buffer32, signature: Signature, opts?: RecoveryOpts): EthAddress;
+/**
+ * Safely attempts to recover an address from a hash and a signature.
+ * @param hash - The hash to recover the address from.
+ * @param signature - The signature to recover the address from.
+ * @param opts - Recovery options.
+ * @returns The address if recovery succeeds, undefined otherwise.
+ */
+export declare function tryRecoverAddress(hash: Buffer32, signature: Signature, opts?: RecoveryOpts): EthAddress | undefined;
+/**
+ * @attribution - viem
+ * Converts a yParityOrV value to a recovery bit.
+ * @param yParityOrV - The yParityOrV value to convert.
+ * @returns The recovery bit.
+ */
+export declare function toRecoveryBit(yParityOrV: number): 0 | 1;
+/**
+ * Signs a message using ecdsa over the secp256k1 curve.
+ * @param message - The message to sign.
+ * @param privateKey - The private key to sign the message with.
+ * @returns The signature.
+ */
+export declare function signMessage(message: Buffer32, privateKey: Buffer): Signature;
+/**
+ * Flips an ECDSA signature.
+ * If the signature has a low s-value (s < CURVE.n/2), it flips it to high s-value (CURVE.n - s) and vice versa.
+ * Also flips the v value accordingly (27 <-> 28, or 0 <-> 1).
+ * This is useful for testing signature malleability handling.
+ * @param signature - The signature to flip.
+ * @returns A new signature with flipped s-value and v-value.
+ */
+export declare function flipSignature(signature: Signature): Signature;
+/**
+ * Normalizes an ECDSA signature.
+ * If the signature has a high s-value (s >= CURVE.n/2), it flips it to low s-value (CURVE.n - s), and flips v accordingly.
+ * If the signature uses a recovery bit of 0/1, it is converted to a v-value 27/28 for ecrecover.
+ * @remarks This does not handle post EIP155 tx signatures which embed the chain id in v. Use it only for feeding into ECRECOVER precompiles.
+ * @param signature - The signature to normalize.
+ */
+export declare function normalizeSignature(signature: Signature): Signature;
+/**
+ * Recovers a public key from a hash and a signature.
+ * @param hash - The hash to recover the public key from.
+ * @param signature - The signature to recover the public key from.
+ * @returns The public key.
+ */
+export declare function recoverPublicKey(hash: Buffer32, signature: Signature, opts?: RecoveryOpts): Buffer;
+/**
+ * Generates a random valid ECDSA signature that is recoverable to some address.
+ * Since Signature.random() produces real signatures via secp256k1 signing, the result is always
+ * recoverable, but we verify defensively by checking tryRecoverAddress.
+ */
+export declare function generateRecoverableSignature(): Signature;
+/**
+ * Generates a random signature where ECDSA address recovery fails.
+ * Uses random r/s values (not from real signing) so that r is unlikely to be a valid secp256k1 x-coordinate.
+ */
+export declare function generateUnrecoverableSignature(): Signature;
+export {};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidXRpbHMuZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9jcnlwdG8vc2VjcDI1NmsxLXNpZ25lci91dGlscy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFFQSxPQUFPLEVBQUUsUUFBUSxFQUFFLE1BQU0sMEJBQTBCLENBQUM7QUFDcEQsT0FBTyxFQUFFLFVBQVUsRUFBRSxNQUFNLDRCQUE0QixDQUFDO0FBQ3hELE9BQU8sRUFBRSxTQUFTLEVBQUUsTUFBTSxzQ0FBc0MsQ0FBQztBQUtqRSxpQ0FBaUM7QUFDakMsS0FBSyxZQUFZLEdBQUc7SUFDbEI7Ozs7T0FJRztJQUNILGNBQWMsQ0FBQyxFQUFFLE9BQU8sQ0FBQztJQUN6Qjs7T0FFRztJQUNILGVBQWUsQ0FBQyxFQUFFLE9BQU8sQ0FBQztDQUMzQixDQUFDO0FBRUYscUJBQWEsY0FBZSxTQUFRLEtBQUs7SUFDdkMsWUFBWSxPQUFPLEVBQUUsTUFBTSxFQUFFLElBQUksQ0FBQyxFQUFFO1FBQUUsS0FBSyxFQUFFLE9BQU8sQ0FBQTtLQUFFLEVBR3JEO0NBQ0Y7QUFHRCx3QkFBZ0IsaUJBQWlCLENBQUMsT0FBTyxFQUFFLFFBQVEsR0FBRyxRQUFRLENBRzdEO0FBWUQ7Ozs7R0FJRztBQUNILHdCQUFnQix1QkFBdUIsQ0FBQyxVQUFVLEVBQUUsTUFBTSxHQUFHLE1BQU0sQ0FFbEU7QUFFRDs7OztHQUlHO0FBQ0gsd0JBQWdCLHFCQUFxQixDQUFDLFVBQVUsRUFBRSxNQUFNLEdBQUcsVUFBVSxDQUdwRTtBQUVEOzs7Ozs7O0dBT0c7QUFDSCx3QkFBZ0IsY0FBYyxDQUFDLElBQUksRUFBRSxRQUFRLEVBQUUsU0FBUyxFQUFFLFNBQVMsRUFBRSxJQUFJLENBQUMsRUFBRSxZQUFZLEdBQUcsVUFBVSxDQVVwRztBQUVEOzs7Ozs7R0FNRztBQUNILHdCQUFnQixpQkFBaUIsQ0FBQyxJQUFJLEVBQUUsUUFBUSxFQUFFLFNBQVMsRUFBRSxTQUFTLEVBQUUsSUFBSSxDQUFDLEVBQUUsWUFBWSxHQUFHLFVBQVUsR0FBRyxTQUFTLENBT25IO0FBRUQ7Ozs7O0dBS0c7QUFDSCx3QkFBZ0IsYUFBYSxDQUFDLFVBQVUsRUFBRSxNQUFNLFNBVy9DO0FBRUQ7Ozs7O0dBS0c7QUFDSCx3QkFBZ0IsV0FBVyxDQUFDLE9BQU8sRUFBRSxRQUFRLEVBQUUsVUFBVSxFQUFFLE1BQU0sYUFHaEU7QUFFRDs7Ozs7OztHQU9HO0FBQ0gsd0JBQWdCLGFBQWEsQ0FBQyxTQUFTLEVBQUUsU0FBUyxHQUFHLFNBQVMsQ0FNN0Q7QUFFRDs7Ozs7O0dBTUc7QUFDSCx3QkFBZ0Isa0JBQWtCLENBQUMsU0FBUyxFQUFFLFNBQVMsR0FBRyxTQUFTLENBVWxFO0FBNkJEOzs7OztHQUtHO0FBQ0gsd0JBQWdCLGdCQUFnQixDQUFDLElBQUksRUFBRSxRQUFRLEVBQUUsU0FBUyxFQUFFLFNBQVMsRUFBRSxJQUFJLEdBQUUsWUFBaUIsR0FBRyxNQUFNLENBWXRHO0FBS0Q7Ozs7R0FJRztBQUNILHdCQUFnQiw0QkFBNEIsSUFBSSxTQUFTLENBUXhEO0FBRUQ7OztHQUdHO0FBQ0gsd0JBQWdCLDhCQUE4QixJQUFJLFNBQVMsQ0FRMUQifQ==

package/dest/crypto/secp256k1-signer/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/crypto/secp256k1-signer/utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AAKjE,iCAAiC;AACjC,KAAK,YAAY,GAAG;IAClB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,qBAAa,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,EAGrD;CACF;AAGD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAG7D;AAYD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAGpE;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,UAAU,CAUpG;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,UAAU,GAAG,SAAS,CAOnH;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,SAW/C;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,aAGhE;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAM7D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAUlE;AA6BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,GAAE,YAAiB,GAAG,MAAM,CAYtG;AAKD;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,SAAS,CAQxD;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,IAAI,SAAS,CAQ1D"}

package/dest/crypto/secp256k1-signer/utils.js

@@ -0,0 +1,196 @@
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { Buffer32 } from '../../buffer/buffer32.js';
+import { EthAddress } from '../../eth-address/index.js';
+import { Signature } from '../../eth-signature/eth_signature.js';
+import { keccak256 } from '../keccak/index.js';
+const ETH_SIGN_PREFIX = '\x19Ethereum Signed Message:\n32';
+export class Secp256k1Error extends Error {
+    constructor(message, opts){
+        super(message, opts);
+        this.name = 'Secp256k1Error';
+    }
+}
+// We just hash the message to make it easier to work with in the smart contract.
+export function makeEthSignDigest(message) {
+    const prefix = Buffer.from(ETH_SIGN_PREFIX);
+    return Buffer32.fromBuffer(keccak256(Buffer.concat([
+        prefix,
+        message.buffer
+    ])));
+}
+/**
+ * Converts a public key to an address.
+ * @param publicKey - The public key to convert.
+ * @returns The address.
+ */ function publicKeyToAddress(publicKey) {
+    const hash = keccak256(publicKey.subarray(1));
+    return new EthAddress(hash.subarray(12));
+}
+/**
+ * Converts a private key to a public key.
+ * @param privateKey - The private key to convert.
+ * @returns The public key.
+ */ export function publicKeyFromPrivateKey(privateKey) {
+    return Buffer.from(secp256k1.getPublicKey(privateKey, false));
+}
+/**
+ * Converts a private key to an address.
+ * @param privateKey - The private key to convert.
+ * @returns The address.
+ */ export function addressFromPrivateKey(privateKey) {
+    const publicKey = publicKeyFromPrivateKey(privateKey);
+    return publicKeyToAddress(publicKey);
+}
+/**
+ * Recovers an address from a hash and a signature.
+ * @param hash - The hash to recover the address from.
+ * @param signature - The signature to recover the address from.
+ * @param opts - Recovery options.
+ * @returns The address.
+ * @throws Error if signature recovery fails or if signature is malleable and allowMalleable is false.
+ */ export function recoverAddress(hash, signature, opts) {
+    try {
+        const publicKey = recoverPublicKey(hash, signature, opts);
+        return publicKeyToAddress(publicKey);
+    } catch (err) {
+        throw new Secp256k1Error(`Error recovering Ethereum address from hash ${hash.toString()} and signature ${signature.toString()}`, {
+            cause: err
+        });
+    }
+}
+/**
+ * Safely attempts to recover an address from a hash and a signature.
+ * @param hash - The hash to recover the address from.
+ * @param signature - The signature to recover the address from.
+ * @param opts - Recovery options.
+ * @returns The address if recovery succeeds, undefined otherwise.
+ */ export function tryRecoverAddress(hash, signature, opts) {
+    try {
+        const publicKey = recoverPublicKey(hash, signature, opts);
+        return publicKeyToAddress(publicKey);
+    } catch  {
+        return undefined;
+    }
+}
+/**
+ * @attribution - viem
+ * Converts a yParityOrV value to a recovery bit.
+ * @param yParityOrV - The yParityOrV value to convert.
+ * @returns The recovery bit.
+ */ export function toRecoveryBit(yParityOrV) {
+    if (yParityOrV === 0 || yParityOrV === 1) {
+        return yParityOrV;
+    }
+    if (yParityOrV === 27) {
+        return 0;
+    }
+    if (yParityOrV === 28) {
+        return 1;
+    }
+    throw new Secp256k1Error(`Invalid yParityOrV value ${yParityOrV}`);
+}
+/**
+ * Signs a message using ecdsa over the secp256k1 curve.
+ * @param message - The message to sign.
+ * @param privateKey - The private key to sign the message with.
+ * @returns The signature.
+ */ export function signMessage(message, privateKey) {
+    const { r, s, recovery } = secp256k1.sign(message.buffer, privateKey);
+    return new Signature(Buffer32.fromBigInt(r), Buffer32.fromBigInt(s), recovery ? 28 : 27);
+}
+/**
+ * Flips an ECDSA signature.
+ * If the signature has a low s-value (s < CURVE.n/2), it flips it to high s-value (CURVE.n - s) and vice versa.
+ * Also flips the v value accordingly (27 <-> 28, or 0 <-> 1).
+ * This is useful for testing signature malleability handling.
+ * @param signature - The signature to flip.
+ * @returns A new signature with flipped s-value and v-value.
+ */ export function flipSignature(signature) {
+    const { r, s, v } = signature;
+    const sig = new secp256k1.Signature(r.toBigInt(), s.toBigInt());
+    const flippedS = secp256k1.CURVE.n - sig.s;
+    return new Signature(r, Buffer32.fromBigInt(flippedS), flipV(v));
+}
+/**
+ * Normalizes an ECDSA signature.
+ * If the signature has a high s-value (s >= CURVE.n/2), it flips it to low s-value (CURVE.n - s), and flips v accordingly.
+ * If the signature uses a recovery bit of 0/1, it is converted to a v-value 27/28 for ecrecover.
+ * @remarks This does not handle post EIP155 tx signatures which embed the chain id in v. Use it only for feeding into ECRECOVER precompiles.
+ * @param signature - The signature to normalize.
+ */ export function normalizeSignature(signature) {
+    const { r, s, v } = signature;
+    const sig = new secp256k1.Signature(r.toBigInt(), s.toBigInt());
+    if (sig.hasHighS()) {
+        const newV = flipV(v);
+        const newS = sig.normalizeS().s;
+        return new Signature(r, Buffer32.fromBigInt(newS), toVFromYParityOrV(newV));
+    }
+    return new Signature(r, s, toVFromYParityOrV(v));
+}
+/** Converts a yParityOrV value to a pre-EIP155 v-value 27-28. */ function toVFromYParityOrV(yParityOrV) {
+    if (yParityOrV === 0 || yParityOrV === 1) {
+        return yParityOrV + 27;
+    } else if (yParityOrV === 27 || yParityOrV === 28) {
+        return yParityOrV;
+    } else {
+        throw new Secp256k1Error(`Invalid yParityOrV value ${yParityOrV}`);
+    }
+}
+/** Flips the recovery bit or v-value */ function flipV(v) {
+    switch(v){
+        case 27:
+            return 28;
+        case 28:
+            return 27;
+        case 0:
+            return 1;
+        case 1:
+            return 0;
+        default:
+            throw new Secp256k1Error(`Invalid v value ${v}`);
+    }
+}
+/**
+ * Recovers a public key from a hash and a signature.
+ * @param hash - The hash to recover the public key from.
+ * @param signature - The signature to recover the public key from.
+ * @returns The public key.
+ */ export function recoverPublicKey(hash, signature, opts = {}) {
+    const { r, s, v } = signature;
+    if (!opts.allowYParityAsV && v !== 27 && v !== 28) {
+        throw new Secp256k1Error(`Invalid v value ${v} (expected 27 or 28)`);
+    }
+    const recoveryBit = toRecoveryBit(v);
+    const sig = new secp256k1.Signature(r.toBigInt(), s.toBigInt()).addRecoveryBit(recoveryBit);
+    if (!opts.allowMalleable && sig.hasHighS()) {
+        throw new Secp256k1Error('Signature has high s-value (malleable signature)');
+    }
+    const publicKey = sig.recoverPublicKey(hash.buffer).toHex(false);
+    return Buffer.from(publicKey, 'hex');
+}
+/** Arbitrary hash used for testing signature recoverability. */ const PROBE_HASH = Buffer32.fromBuffer(keccak256(Buffer.from('signature-recoverability-probe')));
+/**
+ * Generates a random valid ECDSA signature that is recoverable to some address.
+ * Since Signature.random() produces real signatures via secp256k1 signing, the result is always
+ * recoverable, but we verify defensively by checking tryRecoverAddress.
+ */ export function generateRecoverableSignature() {
+    for(let i = 0; i < 100; i++){
+        const sig = Signature.random();
+        if (tryRecoverAddress(PROBE_HASH, sig) !== undefined) {
+            return sig;
+        }
+    }
+    throw new Secp256k1Error('Failed to generate a recoverable signature after 100 attempts');
+}
+/**
+ * Generates a random signature where ECDSA address recovery fails.
+ * Uses random r/s values (not from real signing) so that r is unlikely to be a valid secp256k1 x-coordinate.
+ */ export function generateUnrecoverableSignature() {
+    for(let i = 0; i < 100; i++){
+        const sig = new Signature(Buffer32.random(), Buffer32.random(), 27);
+        if (tryRecoverAddress(PROBE_HASH, sig) === undefined) {
+            return sig;
+        }
+    }
+    throw new Secp256k1Error('Failed to generate an unrecoverable signature after 100 attempts');
+}

package/dest/crypto/sha256/index.d.ts

@@ -0,0 +1,37 @@
+import { Fr } from '../../curves/bn254/field.js';
+import { type Bufferable } from '../../serialize/serialize.js';
+import type { Hasher } from '../../trees/hasher.js';
+export declare function sha256(data: Buffer): Buffer<ArrayBuffer>;
+export declare function sha256Trunc(data: Buffer): Buffer<ArrayBufferLike>;
+export declare function sha256ToField(data: Bufferable[]): Fr;
+/**
+ * The "SHA256 Compression" operation (component operation of SHA256 "Hash").
+ * WARNING: modifies `state` in place (and also returns it)
+ *
+ * This algorithm is extracted from the hash.js package
+ * and modified to take in an initial state to operate on.
+ *
+ * @param state - The initial state to operate on (modified in-place). 8 u32s.
+ * @param inputs - The inputs to compress into the state. 16 u32s.
+ * @returns The modified state. 8 u32s.
+ */
+export declare function sha256Compression(state: Uint32Array, inputs: Uint32Array): Uint32Array;
+/**
+ * A helper class encapsulating SHA256 hash functionality.
+ * @deprecated Don't call SHA256 directly in production code. Instead, create suitably-named functions for specific
+ * purposes.
+ */
+export declare class SHA256 implements Hasher {
+    hash(lhs: Uint8Array, rhs: Uint8Array): Buffer<ArrayBuffer>;
+    hashInputs(inputs: Buffer[]): Buffer<ArrayBuffer>;
+}
+/**
+ * A helper class encapsulating truncated SHA256 hash functionality.
+ * @deprecated Don't call SHA256 directly in production code. Instead, create suitably-named functions for specific
+ * purposes.
+ */
+export declare class SHA256Trunc implements Hasher {
+    hash(lhs: Uint8Array, rhs: Uint8Array): Buffer<ArrayBuffer>;
+    hashInputs(inputs: Buffer[]): Buffer<ArrayBuffer>;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dest/crypto/sha256/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/crypto/sha256/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAEjD,OAAO,EAAE,KAAK,UAAU,EAAqB,MAAM,8BAA8B,CAAC;AAClF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAEpD,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,uBAElC;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,2BAEvC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,MAG/C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,GAAG,WAAW,CAyEtF;AA4CD;;;;GAIG;AACH,qBAAa,MAAO,YAAW,MAAM;IAK5B,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,uBAE3C;IAMM,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,uBAEjC;CACF;AAED;;;;GAIG;AACH,qBAAa,WAAY,YAAW,MAAM;IAKjC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,uBAE3C;IAMM,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,uBAEjC;CACF"}

package/dest/crypto/sha256/index.js

@@ -0,0 +1,208 @@
+/* eslint-disable camelcase */ import { default as hash } from 'hash.js';
+import { Fr } from '../../curves/bn254/field.js';
+import { truncateAndPad } from '../../serialize/free_funcs.js';
+import { serializeToBuffer } from '../../serialize/serialize.js';
+export function sha256(data) {
+    return Buffer.from(hash.sha256().update(data).digest());
+}
+export function sha256Trunc(data) {
+    return truncateAndPad(sha256(data));
+}
+export function sha256ToField(data) {
+    const buffer = serializeToBuffer(data);
+    return Fr.fromBuffer(sha256Trunc(buffer));
+}
+/**
+ * The "SHA256 Compression" operation (component operation of SHA256 "Hash").
+ * WARNING: modifies `state` in place (and also returns it)
+ *
+ * This algorithm is extracted from the hash.js package
+ * and modified to take in an initial state to operate on.
+ *
+ * @param state - The initial state to operate on (modified in-place). 8 u32s.
+ * @param inputs - The inputs to compress into the state. 16 u32s.
+ * @returns The modified state. 8 u32s.
+ */ export function sha256Compression(state, inputs) {
+    if (state.length !== 8) {
+        throw new Error('`state` argument to SHA256 compression must be of length 8');
+    }
+    if (inputs.length !== 16) {
+        throw new Error('`inputs` argument to SHA256 compression must be of length 16');
+    }
+    const W = new Array(64);
+    const k = [
+        0x428a2f98,
+        0x71374491,
+        0xb5c0fbcf,
+        0xe9b5dba5,
+        0x3956c25b,
+        0x59f111f1,
+        0x923f82a4,
+        0xab1c5ed5,
+        0xd807aa98,
+        0x12835b01,
+        0x243185be,
+        0x550c7dc3,
+        0x72be5d74,
+        0x80deb1fe,
+        0x9bdc06a7,
+        0xc19bf174,
+        0xe49b69c1,
+        0xefbe4786,
+        0x0fc19dc6,
+        0x240ca1cc,
+        0x2de92c6f,
+        0x4a7484aa,
+        0x5cb0a9dc,
+        0x76f988da,
+        0x983e5152,
+        0xa831c66d,
+        0xb00327c8,
+        0xbf597fc7,
+        0xc6e00bf3,
+        0xd5a79147,
+        0x06ca6351,
+        0x14292967,
+        0x27b70a85,
+        0x2e1b2138,
+        0x4d2c6dfc,
+        0x53380d13,
+        0x650a7354,
+        0x766a0abb,
+        0x81c2c92e,
+        0x92722c85,
+        0xa2bfe8a1,
+        0xa81a664b,
+        0xc24b8b70,
+        0xc76c51a3,
+        0xd192e819,
+        0xd6990624,
+        0xf40e3585,
+        0x106aa070,
+        0x19a4c116,
+        0x1e376c08,
+        0x2748774c,
+        0x34b0bcb5,
+        0x391c0cb3,
+        0x4ed8aa4a,
+        0x5b9cca4f,
+        0x682e6ff3,
+        0x748f82ee,
+        0x78a5636f,
+        0x84c87814,
+        0x8cc70208,
+        0x90befffa,
+        0xa4506ceb,
+        0xbef9a3f7,
+        0xc67178f2
+    ];
+    let i = 0;
+    for(i = 0; i < 16; i++){
+        W[i] = inputs[i];
+    }
+    for(i = 16; i < W.length; i++){
+        W[i] = sum32_4(W[i - 16], W[i - 7], g0_256(W[i - 15]), g1_256(W[i - 2]));
+    }
+    let a = state[0];
+    let b = state[1];
+    let c = state[2];
+    let d = state[3];
+    let e = state[4];
+    let f = state[5];
+    let g = state[6];
+    let h = state[7];
+    for(let i = 0; i < 64; i++){
+        const T1 = sum32_5(h, s1_256(e), ch32(e, f, g), k[i], W[i]);
+        const T2 = sum32(s0_256(a), maj32(a, b, c));
+        h = g;
+        g = f;
+        f = e;
+        e = sum32(d, T1);
+        d = c;
+        c = b;
+        b = a;
+        a = sum32(T1, T2);
+    }
+    state[0] = sum32(state[0], a);
+    state[1] = sum32(state[1], b);
+    state[2] = sum32(state[2], c);
+    state[3] = sum32(state[3], d);
+    state[4] = sum32(state[4], e);
+    state[5] = sum32(state[5], f);
+    state[6] = sum32(state[6], g);
+    state[7] = sum32(state[7], h);
+    return state;
+}
+// SHA256  HELPER FUNCTIONS (from hash.js package)
+function rotr32(w, b) {
+    return w >>> b | w << 32 - b;
+}
+function sum32(a, b) {
+    return a + b >>> 0;
+}
+function sum32_4(a, b, c, d) {
+    return a + b + c + d >>> 0;
+}
+function sum32_5(a, b, c, d, e) {
+    return a + b + c + d + e >>> 0;
+}
+function ch32(x, y, z) {
+    return x & y ^ ~x & z;
+}
+function maj32(x, y, z) {
+    return x & y ^ x & z ^ y & z;
+}
+function s0_256(x) {
+    return rotr32(x, 2) ^ rotr32(x, 13) ^ rotr32(x, 22);
+}
+function s1_256(x) {
+    return rotr32(x, 6) ^ rotr32(x, 11) ^ rotr32(x, 25);
+}
+function g0_256(x) {
+    return rotr32(x, 7) ^ rotr32(x, 18) ^ x >>> 3;
+}
+function g1_256(x) {
+    return rotr32(x, 17) ^ rotr32(x, 19) ^ x >>> 10;
+}
+/**
+ * A helper class encapsulating SHA256 hash functionality.
+ * @deprecated Don't call SHA256 directly in production code. Instead, create suitably-named functions for specific
+ * purposes.
+ */ export class SHA256 {
+    /*
+   * @deprecated Don't call SHA256 directly in production code. Instead, create suitably-named functions for specific
+   * purposes.
+   */ hash(lhs, rhs) {
+        return sha256(Buffer.concat([
+            Buffer.from(lhs),
+            Buffer.from(rhs)
+        ]));
+    }
+    /*
+   * @deprecated Don't call SHA256 directly in production code. Instead, create suitably-named functions for specific
+   * purposes.
+   */ hashInputs(inputs) {
+        return sha256(Buffer.concat(inputs));
+    }
+}
+/**
+ * A helper class encapsulating truncated SHA256 hash functionality.
+ * @deprecated Don't call SHA256 directly in production code. Instead, create suitably-named functions for specific
+ * purposes.
+ */ export class SHA256Trunc {
+    /*
+   * @deprecated Don't call SHA256 directly in production code. Instead, create suitably-named functions for specific
+   * purposes.
+   */ hash(lhs, rhs) {
+        return truncateAndPad(sha256(Buffer.concat([
+            Buffer.from(lhs),
+            Buffer.from(rhs)
+        ])));
+    }
+    /*
+   * @deprecated Don't call SHA256 directly in production code. Instead, create suitably-named functions for specific
+   * purposes.
+   */ hashInputs(inputs) {
+        return truncateAndPad(sha256(Buffer.concat(inputs)));
+    }
+}

package/dest/crypto/sha512/index.d.ts

@@ -0,0 +1,9 @@
+import { type Bufferable } from '../../serialize/serialize.js';
+export declare const sha512: (data: Buffer<ArrayBufferLike>) => Buffer<ArrayBuffer>;
+/**
+ * @dev We don't truncate in this function (unlike in sha256ToField) because this function is used in situations where
+ * we don't care only about collision resistance but we need the output to be uniformly distributed as well. This is
+ * because we use it as a pseudo-random function.
+ */
+export declare const sha512ToGrumpkinScalar: (data: Bufferable[]) => import("../../schemas/schemas.js").Fq;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9jcnlwdG8vc2hhNTEyL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUdBLE9BQU8sRUFBRSxLQUFLLFVBQVUsRUFBcUIsTUFBTSw4QkFBOEIsQ0FBQztBQUVsRixlQUFPLE1BQU0sTUFBTSx3REFBcUUsQ0FBQztBQUV6Rjs7OztHQUlHO0FBQ0gsZUFBTyxNQUFNLHNCQUFzQiwrREFHbEMsQ0FBQyJ9

package/dest/crypto/sha512/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/crypto/sha512/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,UAAU,EAAqB,MAAM,8BAA8B,CAAC;AAElF,eAAO,MAAM,MAAM,wDAAqE,CAAC;AAEzF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,+DAGlC,CAAC"}

package/dest/crypto/sha512/index.js

@@ -0,0 +1,12 @@
+import { default as hash } from 'hash.js';
+import { GrumpkinScalar } from '../../curves/grumpkin/index.js';
+import { serializeToBuffer } from '../../serialize/serialize.js';
+export const sha512 = (data)=>Buffer.from(hash.sha512().update(data).digest());
+/**
+ * @dev We don't truncate in this function (unlike in sha256ToField) because this function is used in situations where
+ * we don't care only about collision resistance but we need the output to be uniformly distributed as well. This is
+ * because we use it as a pseudo-random function.
+ */ export const sha512ToGrumpkinScalar = (data)=>{
+    const buffer = serializeToBuffer(data);
+    return GrumpkinScalar.fromBufferReduce(sha512(buffer));
+};

package/dest/crypto/signature/index.d.ts

@@ -0,0 +1,17 @@
+import type { Fr } from '@aztec-labs/foundation/curves/bn254';
+/**
+ * Interface to represent a signature.
+ */
+export interface Signature {
+    /**
+     * Serializes to a buffer.
+     * @returns A buffer.
+     */
+    toBuffer(): Buffer;
+    /**
+     * Serializes to an array of fields.
+     * @returns Fields.
+     */
+    toFields(): Fr[];
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9jcnlwdG8vc2lnbmF0dXJlL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxFQUFFLEVBQUUsRUFBRSxNQUFNLHFDQUFxQyxDQUFDO0FBRTlEOztHQUVHO0FBQ0gsTUFBTSxXQUFXLFNBQVM7SUFDeEI7OztPQUdHO0lBQ0gsUUFBUSxJQUFJLE1BQU0sQ0FBQztJQUNuQjs7O09BR0c7SUFDSCxRQUFRLElBQUksRUFBRSxFQUFFLENBQUM7Q0FDbEIifQ==

package/dest/crypto/signature/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/crypto/signature/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,qCAAqC,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB;;;OAGG;IACH,QAAQ,IAAI,MAAM,CAAC;IACnB;;;OAGG;IACH,QAAQ,IAAI,EAAE,EAAE,CAAC;CAClB"}

package/dest/crypto/signature/index.js

@@ -0,0 +1,3 @@
+/**
+ * Interface to represent a signature.
+ */ export { };

package/dest/crypto/sync/index.d.ts

@@ -0,0 +1,3 @@
+export * from './poseidon/index.js';
+export * from './pedersen/index.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9jcnlwdG8vc3luYy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFFQSxjQUFjLHFCQUFxQixDQUFDO0FBQ3BDLGNBQWMscUJBQXFCLENBQUMifQ==

package/dest/crypto/sync/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/crypto/sync/index.ts"],"names":[],"mappings":"AAEA,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC"}

package/dest/crypto/sync/index.js

@@ -0,0 +1,4 @@
+import { BarretenbergSync } from '@aztec/bb.js';
+export * from './poseidon/index.js';
+export * from './pedersen/index.js';
+await BarretenbergSync.initSingleton();