@aztec/protocol-contracts 5.0.0-nightly.20260416 → 5.0.0-nightly.20260417

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "transpiled": true,
3
- "noir_version": "1.0.0-beta.20+04a373ed8e9cf67ac4f7efea14009f3c3a856d58",
3
+ "noir_version": "1.0.0-beta.20+b3b0faa67d750c16346c556eaf02e28c579b88d1",
4
4
  "name": "AuthRegistry",
5
5
  "functions": [
6
6
  {
@@ -2067,8 +2067,8 @@
2067
2067
  }
2068
2068
  }
2069
2069
  },
2070
- "bytecode": "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",
2071
- "debug_symbols": "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",
2070
+ "bytecode": "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",
2071
+ "debug_symbols": "tVvbbhs5DP0XP+dBvIrKrywWRdp6FwGCtMgmBRZF/32lGUkzdlf0xOO8hPRljimKpCiS+Xn4evz89venx+e/vv1zuP/j5+Hzy+PT0+Pfn56+fXl4ffz2nN/9eQjlD/DhnsKvuwNMr+hwjym/wulVOtxz5sNMYCY4E5oJz0QO9ykTPdwDZBortUrTTClUCpVipVRpRgPMVCrVSmOlVmmaKYdKoVKslCqteFzxuOJxxeOKxxVPKp5UPKl4UvGk4knFk4onFU8KnmWaZqqh0oKX9aMFr6iXinrLautiMb/H5b2ia4RZ2RPFSqlSrlQqzRIgzxqfqFWaJUCZNT5RqLTgxVnjEy14Mf+6TBtens7ylo0vdJLGqjRWpbEqjeWndHqqfFpMKP7Pqqx9A37lV83+Pr2+HI/lk5VBZjP9/vByfH493D+/PT3dHX48PL1NX/rn+8PzRF8fXvKn4e5wfP6aaQb86/HpWLhfd8vTYfyoitaHY4j9cUi8FUAsVQDFFYBtlgA4plghgA21gwieYNAYI7K0VUS5SggB4yaEIMhICBljMBJVCKYAHYHhVAwdQ1DUBkFGOISI+yHMgUBte0poawi8Up/II32CZ5tBrNlW0MW46B0IjB1BZIDgr6OrM6+DYLgOxzpJoKlTV9aZztbBY4TE0FwkMdlwR8Axz6Sh7WpSojGGY5+ioelTFHiM4RgoUgtXKGvbou36xG7hakN9ho+Jl9RM0sKyfshRZyOAWRPekg0BEJ3lawt2FFdbENIpgqNA7OESV271G8I2GYyGCI4aEjaARDpWg+5dRPjAQ0NT28rIaWWHtj26BO3BxdYQ2xeR+k5YwGUrAE41SeCIQbYcwHiVGIjQdIG4sspioSdieIe4Nr+MBsPQQl6YpB4lJVxzbCFpQ8Dy2FCbnl2CWlfFKiUyOIWI3jrC4h28iEFyJoZziKfAbUdSSGGMkRwv5yWVWGIVqp4gsKPQnAc1hVJAuQ4DQjMMAnIwnHiVz8+GwbhOdG27GMq6HON83VK0ZzSkeqVKFZZ0YuXx78JI0LIzSqvY9RtG/FiVptiXkuJYDM9jmbl77PpAPfNY8cJwtsy2LZlPy97mg2U7CPdIDCFfIUYg3l0KpXmL4Po8OF+Md7YbxR7DjFfXqfPFuCARsYPElfNvXwxHbkplgyUAyen5Kk4ozbk3tJw180zDW5ljp5BNpKfw2UZkqBDz7nbd1kGWjZFrl7LKfM+Wol7SBP1YwPUl4B1SMPejXjmGoRR4g3su7b+lKt8AQ/ZfdS8otVtHUerQStW7FWHohZScTLENQWx/3qBpf94Qw968IcL+vMHF2Jg3RNp9yLlibMwbfIxteYOPsS1vcDE25g3RPlalG/MG32vVoHtt1GGFygeJsZ8tapRGIObEU4jaL0+ZT3AdiGDPYaKMg5A5EVURAvRqLsAwdzDZff8x3R/HLO6PY2Z745il/c7vY2xzXBdjo+Om/XcoX4xtjnvBSFEXI9VhPpe8Wj3JkpsOaz8XxIjSxcCxr6Todl+s6TSH+HQdSA483WvVZJisb48fUcK4YO9dgqgXdyHb6iJIeg9G6vcoXtWYf8PA3TEIAnkVSsWeba+C8nkAyRe//S0M2h8MIej+aAgh7g2HEGx/PLwAsi0g+iAbIyIA7A6JFwTZFhMvOM3SbnOcxo8AcSlgxJjwqjTEoCfumdfhNQa8NhOiJFjKyTAORnCDKirADcqoALvrqIA3KKT6IBtvRID70wBfkK1hAG9QCL1gr5EXe03D4QPwWlG59Yi9uJP7WcMCImD0Jin6UbFuiaV3CcJdsZlXGgvimKshL03KzPM11T9bKmYmNKr+gduXyj0YWCp3cdWPCefdd9w7BHBBEukJY+ZjdCRht73U0xJeteDP0xKSG0Q1ukU6QPvTAa9JtTmquSBbo5rXitga1egWyY0Psq3UcwFkY4ZEt8iQWD5Yr1szpAsunJZgoquQ9JsLs+29OF6QRHuXOR8IkMaSeA2nSAjNUjJPw3swCNwg1l+QhajPERJZGKN4xdY+ByiyPgC3zyLmDmBHoDDsn4HIDRpoF1C4JxZognQliiztTcs3yKtloRVKvBJlf09QeGlwCo3nKzxT0152ybVSPoX4M798+PL4cjrWDVq6O3cHiMV/76ah3ommmU7j3HWol+tQr9QRY6kjxoLziPFEtaxkHjGWOmJcNFdGjKWOGEsdMZY61C1pHjGeKFea8RTmoe6JxjJJNA91TzTNtAx1xzQPdU8US8owD3WXEaQy1D1RqVTLiN881F0cogx1TzTjpTQPdU+0DCGXgu801d3HukvUn+a6S7dxHuymNtlNbbSb6mw3tuHuUviZprsnBqZ7aJ3vnhhqDDemIJcDU7UxsTEFmct4eEEuKo+hMQW5KD0W5FKbj9SYglzsK0pjtDGxMQW5HLAxVcZCY6AxE3L+daP6o8aNkcYU5NKqtdgYa0yqTGoyJ2gMNqYhp4Ks5SD58fDy+PD56Vgsthj12/OXZsD55eu/39sn7T8Xvr98+3L8+vZyLMY+2TnVP3/k3SEqviD9Hb0jLe/Es+8Un/kP",
2072
2072
  "verification_key": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANsAAAAAAAAAAAAAAAAAAAANcxRZTxUIPDfgUGZWV1ofMQAAAAAAAAAAAAAAAAAAAAAAB/O8Bp8lv8Pn2g2XUGMPQAAAAAAAAAAAAAAAAAAABxanqlMkGPcss/Pu4YY9X6mAAAAAAAAAAAAAAAAAAAAAAAcLlApryWGo6DavcdN31YAAAAAAAAAAAAAAAAAAACMILHXFnHP6kq/VlbJyRIISAAAAAAAAAAAAAAAAAAAAAAAKPENgzACMJynso5Q2izsAAAAAAAAAAAAAAAAAAAAa64yrOIhQyw0FOMnPbrveXwAAAAAAAAAAAAAAAAAAAAAAAP2pMIXwOczO6EFhtcU5AAAAAAAAAAAAAAAAAAAAAH/9LPB/JbEfbqBoJr1bO2uAAAAAAAAAAAAAAAAAAAAAAALyoKQ5nEnF4+Wpr5O+WwAAAAAAAAAAAAAAAAAAACLr/9B7EZgQZebbqu8sFdE3AAAAAAAAAAAAAAAAAAAAAAABG3a+jK3QB/zNpZpgQJyAAAAAAAAAAAAAAAAAAAA5lbvqD/st9SlUffosLw3KVkAAAAAAAAAAAAAAAAAAAAAACnuwmhtw+ajIZCL90mVjAAAAAAAAAAAAAAAAAAAAODHlL5mT5G1ObZxjAOAnJN2AAAAAAAAAAAAAAAAAAAAAAAguHf9p5Y2klBUjRuhCVcAAAAAAAAAAAAAAAAAAAAFmEhrQz8r9fN1TJHcQE8epwAAAAAAAAAAAAAAAAAAAAAAByaPUw8/T8W7QW1DsHPQAAAAAAAAAAAAAAAAAAAAVfFvT9yz6u8v5Ct6wPPgBX8AAAAAAAAAAAAAAAAAAAAAABXyq9jATGEsKlU4jNOwMQAAAAAAAAAAAAAAAAAAALj18uKYbr+bMHMGcWM43nqsAAAAAAAAAAAAAAAAAAAAAAAn/UMAP/ASLDWjc8pZE0oAAAAAAAAAAAAAAAAAAACKofwHpYS1j3YNfk+Fd0jx8gAAAAAAAAAAAAAAAAAAAAAACqH0/bav875EO9SVW+IBAAAAAAAAAAAAAAAAAAAA0keFgXt5FOJa1FRGgAxYVSUAAAAAAAAAAAAAAAAAAAAAACKRtL5tI6UPJuhJdxShmQAAAAAAAAAAAAAAAAAAAJ/tqrZEtOwjVpiZTTg72iwPAAAAAAAAAAAAAAAAAAAAAAAZxnq60zGT9tq/8MzLh3gAAAAAAAAAAAAAAAAAAAAKqkPy4/OpejCszOmQz8W59QAAAAAAAAAAAAAAAAAAAAAAA9i+k7nZPFe1a95MIf/FAAAAAAAAAAAAAAAAAAAA1HlT90lD0eflyvrX/MoNLasAAAAAAAAAAAAAAAAAAAAAAC6eWtz86hE5NuBCecKeUgAAAAAAAAAAAAAAAAAAAGjYgotZbo6O3crH5wOVQRjuAAAAAAAAAAAAAAAAAAAAAAAiABgZIb9OVOy8aICWa6gAAAAAAAAAAAAAAAAAAACkyBfKcOm3I4n2OulpELouBAAAAAAAAAAAAAAAAAAAAAAACJEZfmKcd8AmeQEmosLHAAAAAAAAAAAAAAAAAAAADpsDepDgSnBBS07ZDxDKSvsAAAAAAAAAAAAAAAAAAAAAAAUWkxuq43kQdhRFySJ63AAAAAAAAAAAAAAAAAAAACxDmTyQCFa3sJFixNpLsMzxAAAAAAAAAAAAAAAAAAAAAAAUO4Hq7MW8wSCQTK0yhGkAAAAAAAAAAAAAAAAAAAByCQkrGf2yoO0k4h2gmOdpwQAAAAAAAAAAAAAAAAAAAAAACBlgQptvteSHUIgVaMSoAAAAAAAAAAAAAAAAAAAAVJGWQjP80PfqJe0ay9le5M8AAAAAAAAAAAAAAAAAAAAAACPf/XNYqq17eQ2WcqycAAAAAAAAAAAAAAAAAAAAANnst0fVuELwl6Sec9V/FRqRAAAAAAAAAAAAAAAAAAAAAAAwENlOSTvtCDYS60zQN0UAAAAAAAAAAAAAAAAAAABcpIGWlRGTJYiZNq6FWPOTxQAAAAAAAAAAAAAAAAAAAAAAKGJMehTm4+VZTdHZc0IcAAAAAAAAAAAAAAAAAAAAWzk4ReqvyEAAFTXcX6HcIuQAAAAAAAAAAAAAAAAAAAAAAA5K+Oq+BooXpGZ1ijOykAAAAAAAAAAAAAAAAAAAAM+bCunLFTo9I0l3nKQLaUrFAAAAAAAAAAAAAAAAAAAAAAAlhxchiTS1q+VJKgS9dU0AAAAAAAAAAAAAAAAAAACspt+pNj+fABfxMPAO8p1SfAAAAAAAAAAAAAAAAAAAAAAABP+jB/gdMa7NcIZWiUuHAAAAAAAAAAAAAAAAAAAAiurcMWw8q/KBIah9orLvP9gAAAAAAAAAAAAAAAAAAAAAAANGS+cS9Le3XQEzt09MWAAAAAAAAAAAAAAAAAAAAJfLkiEt5SVEIfRzzloBZSoyAAAAAAAAAAAAAAAAAAAAAAAc1xWYMpdJzcApuRyMgxsAAAAAAAAAAAAAAAAAAACFglzmUGknSaOd9epUeiBQUQAAAAAAAAAAAAAAAAAAAAAAG00Eb1uxvsLdAbmECIPYAAAAAAAAAAAAAAAAAAAAiY0NM+3Ixfpz6mlZQnQ6ENkAAAAAAAAAAAAAAAAAAAAAACVS2A5S8CZcCUbLjzaAjgAAAAAAAAAAAAAAAAAAALEXdD4IbVAamZz5PiRnAJDXAAAAAAAAAAAAAAAAAAAAAAAEr1NalLeRIu6QIfe4txsAAAAAAAAAAAAAAAAAAAACw0HalVUOCeXc38nYB1iwDQAAAAAAAAAAAAAAAAAAAAAAD1igBwcNNIe2fdCf8SBUAAAAAAAAAAAAAAAAAAAA94WFGNeU7E7dzn1rHYUlngQAAAAAAAAAAAAAAAAAAAAAAAZO+2PEp9+eYpwT4NDMSQAAAAAAAAAAAAAAAAAAAHkOgWZHL8eLL0RV3Ug1q6IXAAAAAAAAAAAAAAAAAAAAAAAf/wvjTO9RMY93lInRM+cAAAAAAAAAAAAAAAAAAABh+w+ll00dhNKlbt8b3Sh+wgAAAAAAAAAAAAAAAAAAAAAAHkAsrqJYZo21VwYMmtfmAAAAAAAAAAAAAAAAAAAAmNhNn+BZkfTtsqwIfH82exsAAAAAAAAAAAAAAAAAAAAAABDQtHr4OSB9zyg52GN9HQAAAAAAAAAAAAAAAAAAADPDtJLPWjkF2bwO4ME6SGJjAAAAAAAAAAAAAAAAAAAAAAAg4/Sv0LI4GXBlBDOB9GQAAAAAAAAAAAAAAAAAAAA/ud9Jhp+CV7WrCcXb55MiGwAAAAAAAAAAAAAAAAAAAAAACtoPhJKjxBNWaOy/F1f1AAAAAAAAAAAAAAAAAAAAvbbTOPvL7aR/If8Pklh7nyoAAAAAAAAAAAAAAAAAAAAAACaABrh2htG+fHG7sSQXFAAAAAAAAAAAAAAAAAAAAKDpBp6ws1pkNI4bkoMoZWKzAAAAAAAAAAAAAAAAAAAAAAArN4FNL1dKGreR0YDb3DcAAAAAAAAAAAAAAAAAAAAsXa1MYiJeAnuQ9zKNJLxlpwAAAAAAAAAAAAAAAAAAAAAAHSKyIRIBjQDl+3aC6mzSAAAAAAAAAAAAAAAAAAAA4CI7LjZ4c7oFDDzVNFzuhJIAAAAAAAAAAAAAAAAAAAAAABTqHowrePp72DAqKf689AAAAAAAAAAAAAAAAAAAAD+xMGQVpHqEjTUoDv8avxLCAAAAAAAAAAAAAAAAAAAAAAArGPNHM0plJIR9PJIANMcAAAAAAAAAAAAAAAAAAABAU1+KSPbyC1Zm/OGRyreLpQAAAAAAAAAAAAAAAAAAAAAAA/chLDMOjbhS322L0X9hAAAAAAAAAAAAAAAAAAAACZ69xS0ooHLQy2zth4pRxbQAAAAAAAAAAAAAAAAAAAAAABVV8KM5AoHxJxHsxU43VgAAAAAAAAAAAAAAAAAAAJW12Le0pjsF32UrDRDvFG0mAAAAAAAAAAAAAAAAAAAAAAAJnjvVoKAKt/4YBAEFubMAAAAAAAAAAAAAAAAAAAAhKa86Y39aYioyRA+GDR4qfwAAAAAAAAAAAAAAAAAAAAAAABW40lFdduLM7Jnc0ZRZAAAAAAAAAAAAAAAAAAAAIiuIgQjcJdGqRQ4LS8ISw34AAAAAAAAAAAAAAAAAAAAAABuRdReSC609i8AclZUJKgAAAAAAAAAAAAAAAAAAAEghQcfr5CAAodWMy3Q4H20ZAAAAAAAAAAAAAAAAAAAAAAAwXomSsUju2yLm6ZIHeoQAAAAAAAAAAAAAAAAAAAB8hoR2GGgdwp2Kk2OrfEDhwwAAAAAAAAAAAAAAAAAAAAAAFkZaXMu1UM0sY71YEW/kAAAAAAAAAAAAAAAAAAAAQ5lzrBLXynltb+mMpA5sprcAAAAAAAAAAAAAAAAAAAAAAC4k1CD7+VCO0x3mkttHewAAAAAAAAAAAAAAAAAAACjt0afkbIQNnJQ/30VSHGTOAAAAAAAAAAAAAAAAAAAAAAAEPQY7Ewrfs3NCr0XQFVoAAAAAAAAAAAAAAAAAAACTMJUq50xXPRaG2ctKAHM4VAAAAAAAAAAAAAAAAAAAAAAAJhUixAiTMGRq/5ZzYZSUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACyOYGGAwugTPYMxNz2+faUJgAAAAAAAAAAAAAAAAAAAAAAByGeLUrTmDnMx2CuHHUMAAAAAAAAAAAAAAAAAAAAWKOqiLjuXodGKFG23pjuWBQAAAAAAAAAAAAAAAAAAAAAACuMjYmDGJLTvydRJXxqLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF6UyFPM7GtAJ5GGyaZJyGb4AAAAAAAAAAAAAAAAAAAAAABQQfUvkU8gEqOKRhpGbPgAAAAAAAAAAAAAAAAAAAJKHn2GoKCaTAlYbtX87FVfPAAAAAAAAAAAAAAAAAAAAAAAoRQUJTjXTtVikNALK2uI="
2073
2073
  },
2074
2074
  {
@@ -2443,10 +2443,6 @@
2443
2443
  "error_kind": "string",
2444
2444
  "string": "Attempted to delete past the length of a CapsuleArray"
2445
2445
  },
2446
- "12469291177396340830": {
2447
- "error_kind": "string",
2448
- "string": "call to assert_max_bit_size"
2449
- },
2450
2446
  "12820178569648940736": {
2451
2447
  "error_kind": "fmtstring",
2452
2448
  "length": 48,
@@ -2482,8 +2478,8 @@
2482
2478
  }
2483
2479
  }
2484
2480
  },
2485
- "bytecode": "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",
2486
- "debug_symbols": "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"
2481
+ "bytecode": "H4sIAAAAAAAA/+19eYAcVZn4TN/39N3T0z1HAstpOAKEY0EJISRgEgLh1CQ4yTRJZDIzTGZCICHJJAM5JiGZSYIHPxeVw6CCFyLuiouKxwqN6LqLLLIroisKKIu3ovwm0F39qt77vlev+tWkiqn81Zmq972vvvt973vfc4+NfuCTa27sWX7NmoHOgVLD6NCnzutf1d29asWszu7u/eP/v3fRqp4V3aV9e0fHHutowP81NnBfadi7b+9ePqDRhr17x2ckUPvx1NeG7pnV27NmYN/Qveev6i8tH3ANfeLCnoHSilL/XZefMp0PVDu+UWj85g9pxzeIzf+hobsPEXU0osA5eGmpu3Ng1dqS2+iXKBA8YhAahj59CJeuzoHOWb19Nyqf9MQHSaQI6HfN7107VvuDixjw1lcto3FyidKnXro0DN29aKC3b1SFKAFMw79Z91ywqtTdNQ72ueUn9W47UPrzwfdesnfdrpXleZ9c5Hv530/7yz0rX/i3r3yFErzzlYF74z878bmTf/Xnhx4/9cz/Hlv0r9f8fNZFmYarHv7snA/d/bEbntQOnK0MjH/mwp7l//iZM0/av3/j0Zd++wPf/dc/fX1wyWjf2DfuuPPBBX/TDryAIMSMUzmEaFz9Ue34Ocr4j19+BpeOFKXmCg33aYdfqHz2O7/kfs/Kz/2lNzxn62du+K9nFgxGi51fb99+z3u+Odr+y2tu1Q68SBn44q47NjV9ZuyjHceXf++bs+fla357ofeM/ypvyH9jy+u/fHWfduC7lYE/eM/rzz3YtO+mdbu/vP6MY1Kdn9739P/96tuPP9D02+fvv/7p07QD54lJXEA7fr7Y+JB2/II6bdrFQuMbx7TjF4rNH9eOv0REUMf/acdfKjae+v5FYuNd2vGXCSkajf/liuAN3X3wuZm7yye98Hpo5/zO4XWnjPz7la/c1PyJf/j5++8vfjqhHXiFGOHP1Y6/sjpx8/Sjz+z74FPpHx8z9dlzH/30Cfvzvzvy7B8/PPdjr/7l3/7EoPhV1YGNnCm1A68WwDj83nnztOPfo5CKoio+8XuBgRQA7cDFYjSmzOASUXekGb9UbDwlnNdwPrz6z6sd+D5iYOPWqWs+ENzdOP/rW6Y9GAl9/Zcz7zxvVvnx4Z3tTZ++UzuwszrwuLODr96zc+MtDT/5xEu3/eG4r5w7LdE2M3HCD+/4z0JP/3vzr2oHLhP7VI92/HLC45wsTukunZSiBpaE5qXMz7U656UGrhCjF8XhlWLjKRe9Smy8Xzv+/WLjw9rx14mNj2rHd4uNj2nHrxYb36Qd3yM2PqUd3ysUYXVoh/cJDZ+mHX690PCTtMP7hYafrB2+Rmj4dO3wAaHhM7XDB4WGz9IOXys0/Hzt8BuEhi/UDl8nNHyRdviNQsMv0w6/SWj4e7XD1wsNX6IdvkFoeKd2+M1Cw5dph28UGr5cO3yT0PAu7fAnNguNL1Hjh4TGX0uN3yI0fgU1fqvQ+JXU+GGh8auo8bcIjb+OGn+r0Phuavw2ofGrqfHbhcb3UON3CI3vpcbvFBrfR40fERrfT43fJTR+DTV+t9D4AWr8bULjB6nxe4TGr6XG7xUafwM1flRo/Dpq/JjQ+Bup8fuExt9Ejd8vNH49Nf6A0PibqfG3cwJ9V/UHNfIDOpNh2+69tDQw2N8z9KkLevtLq1b0HEqzHviXzpsGSsuvGRzovmZFaeDygVXdqwZuHJ9hoLRu4McNuaH755dW9/bfOLOrq7+0Zg2ZwYWeeMEnPvCJH3wSAJ8EwSch8EkYfBIBn0TBJzHwSRP4JA4+SYBPkuCTFPgkDT7JgE+y4BNYDprBJ3nwScshwRrfB1rd1116S3jt9j/V4oz7yoxThWDeffnJ08/A/8rHdO9e7RaLp7ZNRe2LeMVWm+8Y39Vb1dPZf+P4oIv7DiiA7xpn9VsUqc5EWoULe7re2iapb6upUTN5bQplevqbXVpq+EjU7hnf5ekvqZ4qKxJgMh89ma82GQxwg2yA455PNsTd0iFulg1xo2yAfdK/ebt0iCOyIa6XDbBXNsAbrC+K8tkyvpiWDXGHDb56m3SIwzZQ6i2W18HxtbHlPcwG66Mo3/LYgdNj1ldB6bHEeDLS+tZ2hw1so3z7vW8yGp5hWwiPZoHmrS0i9S42lXnApaZX0lKT8Zne2vT6B3m4g/z4TGQq7/5aKq+7d8Xevfu1CZjKsLlD980tdfbN7O/vvJHkxfHA+0vY7/sb9lNJivHc59A9b704ynp4PDuBoh3yVgqjQf15z0xRpSoXlsZ53LPiss4VK0pd83pXrLlm7fRROF2pgQ2/6dK8qUbiyyocZvetLK0u9Xd2zyv1wBDdo8yv1o9s3fmay2gIPjEIiaG7Lxpc3Tf6xHdBQT04b/wjLlvZ2UMq5RKCDEP3HgJx4bWkDJWD4SrksprSD9covby71Nmv0Hrv3lFAUM9HWWcA4GwtQI2N8g/BKbWAaG2WcEotANs5vyQ7F6Ctjx+wPg+qNGNWZ9+awe5xUw/vHzCNSqBxjGE3TgYsRON+OMcMsHQW8PcFsEHYX29G2ABxFwzdPa+3s4ukDPnz7lmdGn7XCFuZ9P63Jn3zPxf37SdeuGv+YDdzKA03QDJM9YUIBoEKBtpXPJB80srj11lJ/1utRrprhqdiVv4HJL/aYBEgSPdMmaxAOfDDKuyfajzU0SodmD8OvnNFqbKZtua8Gy9bN7dzzUrUTwV4fkqXqTPipYKiXiowqk/MQ/fOvn6ws3uNmspBnMqhJ16kpSIsfHrjsv7OQ6c3aNsZlrML6uxB2nUPsgA+KYJPWsEnbeCTdvBJh7MLOhG7oJQVCYpZkfNpCCExCIvqtmSzaDdHWM+KM/o1ZIA9RiJzT9l/dRXy/03cGggKvCuY/FbyN/puq0L+gxPb2z62v9CJ7ScqtheoLTmsyuIxT1ng2pIgiRqV8wyShDXP6BxpQ6MjSEdejU6QniyIJKOD3Jy+UYDwtoNhiLulQ9wsG+JG2QD7pH/zdukQR2RDXC8bYK/0b94vHeIB63/0TusroHzx3iQdxWEb6PSWSSiNG6xvGU3wgcPWJ+Ot1hdG+Rq4YzLGT3A1FmfprhsNjzmVBIEjwIU48/1go3glwREilQSNTnLHSe44yZ0J3bhF/v2b79lHuRu35cYV0ndufe9UgL8fy2kfKica367tXFFfTVHliy6XXZZyufTNX3/dJUpU6gY2sCHTDWwINrBBSQY2hDr1egxsgG1gQ5PIwGLEpQ1siPyptV1B2ryBBjagNrBBDG4IChgwDEKAgQ1A8gnGcsyaCpVHoO1fsNy4sW5txIoqQpaslfQLncy/QPEQQzrdj769xkC5cacCepjRmVRno68Ao1WrzqEa9jxzSo0/azu7V3V1DpRm9nS9uRyZ3XP9YGmw1LWgd6C0ZvyPs9eWegYOVdju3XsAMBMXAX9/N8xrJMYETc4BSSUM9frgi2Q79XdrACrdGthC2HTXosFl2vBHMZHAoPgDVcklzIcyCJXfeLnxtkpn3nLoca27jyPuPiFmYC4Xd/cJ2N3HJbn7BO2R4oC7f4ht9kbZbj1x2Sjgwi8bM6AfTWN6nLCBj6TdbkLFAMinJiueiny5ArKLIWbJsmueYiY/pBWzJCJmGdFGs8JiloHFLClJzDI0B5JEqkg7bVa0ySAwbZaeNkt+t4YNOfJZlVl305msXI3TwMQ5euIcN5HVDCz/ciT2tGg1lxs/LkD3eO2nj5L9jIoCmmguBwkl9SZB5BwQGmYgbmuZkqgFIponKfBJmtDuChs/A8oIQHVl3tUMmmfLrqMV0J+HQOcVX6aAIr4fGFRg+TJiGIJVodz4EOHL9MtEnuthcazyKgRZeP2zgteTMLUovNJ10yut+kgWZl/lY5YGRIT4bC8DeLrc+DUF+PeFVJRnKtL0oAyJl1av0+RPyPwYkYuMXrloZhAoU278DkF9jRJn5TnFmVKdYtY8p5hFnGJetPG5fj3LI06xwHKK/047xQLXKRboiQtcSS8CulfAFbtYbhTRuOYqHleAVEMFvRk3gPly4zM6DCDwqRnczIwD/zHfzBSMmJk8i2OkOGjMTF5lgzQevwCJMhYbFIDwIQ/GIrrDhxydmf85KDK8IOEKpnlzuRTQL4JrV22QcAX5ldCKhmN2EawS5caX+UECvmQy5AziKrKxnMGrfB2Js3SXgGsIs2bVR7Iw+x0fswQgInFce8fZ8Ue+9saMsCOhlx0xNl5/hX1zoDp5CaltTWqfhcjYXfMsTEYommcR0kFqnkVJha4om6sbIkkrqMeoN2ktuwLaiTMIUgUSKc2zIil3VYSniCLcjEvVOMJhvlS1GfEJrfSgNtUnaXxCK/kTcvKIRwbFu02vThcZBGoru5J8nW4DV+SIgR0HnVFA/7DC/sr7blJoNA1vPaIxbXWOp2nRrID0CnA+w+V8O8r5HB0StutgfQHJlICsb0VZnyMVkakbHQTr+SpIY5ioYUiFG8QnUwsagthw6qmgfaYSZW6okuebOHaI6pqGIJxEEE4hCKcV+l4ginCaF/a6TjosYW8aD3v1r67TdWZd0iprychtuE7nm7gCQP0UnmhynaXDxCXrNHFx2MRluSaugK6u9TuiAkkTysQVdbCekQxOcVmPrzdTKmvJ0o3ZDBN3gYDA6zJxeXojAw6KUkhQlGYEReMpW4Him7jp2yRx84tv4nhFbZ07kE0Ci70E+d0wk+OKbF1J60aSmxFKottCwKAUYLGSKuGldCJVdl1OLyykCdRMqQIVMU+gIvIE6lwzBarLBgK1DFwXL6fXvlAeKlz7KmptC42JkbERd9UbZ1ZVxfD4Kl529So+5FcmFkYYqIO0VmGEYB1kDCiYmER1kHUUZGgTwWQai1cHGVPXQcYxuAmSYWi2mgQDZKtjkHyCGguYpCYSJlNnNyk6+wqGRhOPVm96DuXEzgdIIFCGnWEKBOtHYuKmIAmbgoQkU5BEomNTTEEyKmIKogKmgIw9mMbgOhONQb07mgU6zVrBukH7pBWR1zaSjUx5a9DKWwOJc1W/XlWve4l3GpAApxVZFrUhy6J2JP/cgSRupiCJm6lI4uYIdhHbB2kuxuQVWsfoOMeiYUbMvDAjVrMtsBglWNExIRusQm33NCVU/Bh2mismcD4sMAQf+IyRr0GBcmPdjcwMrLyCMGMDkhgbRGkFb4wFaToqS4ebBM6VhBDGKM82yAYIN4QxDHG3dIibZUPcKBtgn/Rv3i4d4ohsiOtlA+yVBlD56ZdOxh3SId5mfeHZZF1Wm6cwOyz/0RttIN3bpEPcKR3irdZ3WSa41WEbSM926xueW21Axi3SIe6yPmOGbMCYEeuTUbq53WB9KtrB2m6wviWblFGeHRbA8hmz1wbhiXzGbLU+Y3Zb3+5ssT4V90uHKNJZlkhE6keDSEvL7KkXPFesp17IQE+9c8V66lWS5J4XqSR5liQHQDrmmXOYgzHyNYETkIJ7Z+eIJ8nz5p+AzKO0gg9V5JHjhzcJFIQWEMYUuAbKKEA4SW4Y4m7pEDfLhrhRNsA+6d+8XTrEEdkQ18sG2Csb4KB0Iu6QDnGbdIg7pUO81foqbYLZGbaB9Gy3vA6aIDzyybjF+mQcsgEZb7O+fG9yOG3JYKLX+m5wg/WpaAcvuMH6HqbX+nbMBJ22wcJNPmP22iBslM+YrdZnzG7r2x0bRI37pUM8YCyBph8Nk5K7+bPFkrsFA8nds8WSu8zC6C+YXNUOMILbcDvERldp8hiZC4KmeYx0mldf5aF5GCNBANPFUJGiJDtIvjbR89XbbdbYMZQgfQxFYQczNY8dQskqAvBu/YdQYiRe4OYF1X07BOFZ03J93bdDzEYF7u/ym5GFmHrSTdIDQq1y8vXQ6Sn6i5azMfoeLSIFedaggN3zkJO0L5gjXxNoNi14aUJQfFcpZH6zaQatiEPgGmrkSdQoOiqd9LoEPHAeYYwD0AEIm7R5tReapZq0lxSHsQFpkFnZ+Ha/ohNrAgaBN41AqOxTjp65XxWgcbMOE1/Q2waO3f/Z/TvhHkk0s8DWP0UWswoYs4pl959gZoVqzIK78iQVWv8VwisJMDJEEpx1ANSn9AB2/x1zZBFJjixCvobMl5A0X0LlDur0UMYixShyYLlF+6ydjNw1zzpg8uiIMZX2iJFN+mPMEPlFcPzZBnErCnQqUaSelslo2Xu6UrKTpHoeJAkw7CvdsCqbZjGGu8XjoWbzq2yaDVbZNLNSEgRhZWU5lJ8ZE+9Feac4aw77vSjw6fwMTUelYepNAnLQjDCmmZvEMwoQLoAyDHG3dIibZUPcKBtgn/Rv3i4d4ohsiOtlA+yVDXCtdCIOS4e4y/LCDe+1GYa4x/o2Qr6+yMdxk+U1EN6BMQrxeukoHrA+FbfbQKdt4PflG1v5rB6yAatHrE/GndYPvUdsoILD1ifjrY75niTmWz5j9tpggSCfMVutz5jd1rc7WyZh8N0/ccE3no8zlF+VWU+VOQd4fyn7/WaXeD3VOSL1VC4s357Hm0AzaE1cOoHeTAxWr8AQl2KHebMCrFUgLqYgNpM/9e9yKhCXGbpZpoBAXEFBLJA/oV1LBOJKCmKR/AlAxO5QWmXoyrA2BOI8CmIb+RPusl/dRvocNGs7sG9K3ELH6svdXvb8SgH+oMi1JiHTm9yGzL/WJIQUI9bXQDsANQmYPL30Q0KVniHyp9Z2E2WSAV5/+IC6l34QgxsiGYb20ifBAL30A5B8QgQK8nvpBxg6Gyx7HqtugUe/BgKnCyYDNepDLNNXMBlgltJ4vqOjYJK5jd6kkhAW6GcVI/W4gLg1cT84jNboNJGSQuMVLnu+R15mpZGHMC0yoNC+ibwSBX6ABAJhzuIvgTkwLKL3g1k8jpQ9/8HncYDGLMxlRESf5IXZWD1DYkVa7S/WrPby3r4bK2Z7794DBm4mCOm/s4CgImh2D+gxu/qNcFU/nkXtEk8Og5AcBtR0/VKNrl2l7tJASaHsPgOUDcJU2idAJSd6IaMX+BpjRjlxWMVpSK+NBEtrlGCJsajUEc4ww6hAo9FwBjx9w1SmF7VUdJO2snod4BAVzBDFb2DhPOPS2nYkR5AjX0PmS0iaL6FzvqCk+YI654tImi9Cvia8qKrAvYK9pPoz//rX9kNRKgB1MTRoCloyCgzqoAdNwWjdQf7Uj0g718UfYQT7qfSgI8gP0WI/lfxpAPulUrFvF8S+HWPMFB1KPoXFbF1KPmXC59OY1imIuz5CzGMmxd31EbC7niLJXR+B0kpDjSNJ1Cg6Hkl6TmC6I+npjkRYQ4BMyQcZkA8yLR9kh3yQGfkgs/JBNssHmZcPsiAfZFE+yFb5INvkg0zKBzlVPsh2+SDDAr56CrC8IVa/fYNrVs7uW1laXerv7B4FVyUdo8w1/Biw7LmIvexpT4zpWs6IrAGitbiN2n4ggxFlA4Jyzi5yk47rHo+ml1Sw3/eIud7l4n7fA/t9tyS/76GJ7gb9vpdEjZJjb3XcADSZl57MiyiGl7vbbhQgXHJmFOIG6SiOSIe4WzrEYeuT8VbrC+N26RB32EB2NkuDSBh72Ujusrz0bLSB8Gyzvv2WbyckCriNDLgJ0rPd+hb8VhuQcYvlybjJ+uK9yYkmLGnI5JNxxAb+QHp0ArfFtpBptIHwDE9CJ7jBBpZszDHfb/fFoH1WbjfbgIo2MGQ2CGzhg8IWUurbrM9q60fffdaXRfnGe6sNzI713YEJ0fzWSWl2bp18ZscEryo/lthjAxxHrM9q6Uotf+G20wYQN0+cDrqIdraVl5dXf5QYRbquQ/1i6y036KI37ytTMkoZfKKwhUsZfFp0fCRmYJkDidiMU2HEXhlsmvGD8pRuiAU+mqm+GlOBQX60NoIiYkCMiMvU/WGJ4n2/+omHpmLliZecvHro7jEaM78oZiJUJGahlEOhcZcxxlTvAyBEhdAHAGSSBkkcMQ9Bw3R3xE4yO2L78sIdsQmcKl/czQZd5JfsMw6fx7gCzjgDXySxMnQKHvhGpSHEPGb7bt9U4hshxUgooq2ohuDFC9U5ntaao2JNp4APa2URi0dhxnn7VpImlMa06SAxQ8CJ60bg3tJJpPt5kd/9HG5jj3A2VPadxJdeRnuHHJe2jBNmeRIr9BA3JGJJ80QszxWxAuuLeGRgaH5BpTJaESvqMIYM2iZAEUvQhCXoSXxK7aYE5zSk08vB6eVwCOXD2cvBTcJk9XLwLVDM2SsYGu46jm5Dd3UwTEFYTBtj4qYgDJuCkCRTEEa8tymmIBwVMQXR/TLOyFe+5zoTjQElHYmJuGYkgFwzEmLLW4NW3hpUUUpFv17Vf11IkMQMPklPtWxSnSqGz1N0IFeQUAcjiaYcU7XP4rWfR7DNy4q6V9ENyJ1xFK8CiG0R9PRecdsShG1LQJJtCdK2JVCzLfDKIEhHicRTv4DjxW4JCpHiJgskL8FgFOATt5sYpHrtEqQGuMuPMBrZHjyvu3P5def1rht6cGHvmtKqrt6e6QtL/asHB8bf7O0ZIynvIc0YmN2p44pW8/jptuGiw2gLlhYBSQgjmia5q4v4sceQ2LHHy4FuLy59xx5dAt/orgk0ZOjRZCU/rt9FJCvhLjIBpYvMCpjpVD8tPvY6+2m5mf20fGNEPy0qwoFVOiqmVZeJq3QUVumIJJWO0sISARTiIdXigdAHphhHF40CgrsIUojZoGaFx/SE8xre+eXxLi6Vd37zeOdHtpMEr1IHm+oxL/0mvhsO6KNV9ffdRZvvJm7k1URP3MQNJ+L8tpOsVrHxsu9jRnRmIRUxRFXfr0l5NEEiSb1JkLgJSONEIV5rWeKpYrsEXNAsAYMbpT2v7wFQQgCaK/OuZlA8VvafqoAGO/8mFPeggDrIXQMkUecWxbBKln1f5DeBjKLZbUNYJVQIsvD6Mn9/MMEKd+qlV1D1kSzMHuFjFuRfYRxiRxqP8nd/OE5N91I3SuKl1esg+RMyPkbkIqpXLuLMa1h934ZDsZg8lzhTqkuMmecSY4hLFMzwnSugZwnEJSZZLvEHtEtMcl0iY+eWf1FCCtxRRxU7VfY9JUD3eBWPK0CqoYIexw1gouz7kQ4DyG8UH2IDf5ZvZpJGzEyCxTFSHDRmJqGyQfAtDwk8fCA+OAmEDwkwFtEdPjTRQcLPQJHhBQlXMM2bX+lE6vsFBNqjDRKuIL9SZA1Jm+0r2GvIl/hBQoTmvKdOZ+BRSR7LGfyGryMelu4ScA1hFld9JAuz3/Ixi4AigmrvODv+wNfew8KOv+hgB7NpfAT/ZE/Z9zcF9K8oI0Ig5hcQAw+SbfOTr9VbW2ps66yF3jpTqmE1T9pJxDXPiBawAbpNJxHkaZ5NJWMMzbMjSJsIN7t0iW/weZS6zO/p3+AjUnDhivl84reQIKT5WscKD9JlfwbZBIwhQRBFohRpSCrm3n+CKMJxXGfGEW7mm4mMESefpgdlVJ+k0c80+ROK2pAQC7RXGb1GOsUgUKbsb+fbqwyYYEE85jjoWn3mD8HiuVidxXMz4eK5KLd4LsNaEPI4n0U530Tb0awO1ieRxBfI+rTeuy+SbN2YRl72wVVB1JlS8SPxyXBpAJZJTCKlASl+7Jngmzj2msN/FoKwH0E4gCAcVOi7SBThIG7ixhE+57CsY4L4OkZ/uiRYZxotqLKWjGSV/3y+iUsC1A/gmUP/HB0mzl+niYvDJi7GNXFJI0X+KZTzAdrEpXSwvgkpFVhgLIGguiCIqRuXMkzcIgGB12XiEvS+FBwUBZCgKMgIiuAcfMLIPmrS+D7quLgvgfdRk0jiMSUm8LPFE48pOPGYlJR4TOGJOOP7qKnzoX3U88cMXMSU0LWTauAj6VKZlIoBUCFvurLcVYWi1awnMzD5hqKrKyFEcwii9A2kOfKnRnDTiODmTc+Y52HBTUsSXMZJmTSSMS9IypgX0EMmefo0FfGsyv5B1lEUXsa8aOTUVSsQABRJ7GlhbS371wjQnfCiYfwKWm3qtggJJfUmQeQikAfOQ9ymV+lQHjgDPskSalhh42bR040pbGVZKPv/SQG9FbZkcIYYvuEXDTfyHKy28TPEDJlIcX02jlVKhSALrxF+/Muw+9m66ZVVfSQLsz18zLKgiBBhEw08W/aP8ddFWSOba00orVKUXjeRP/Wvi1LGYjkWgYB10YfgbWQl7i0hJwJySDIQW/ZnFO39T/AQLJ/rLGFvK/vvphPNMFJFEik4DZ1VEH5EFOEsLqbjCH9Cz+VqBsSUcY64XfVJ2M3dkJdkiT5PTNv1GolW5u1z/gf4RgK62C6DWexx0J/TsXxPm5ehLHCX7+2sIIrH+Q6U8xk6purQwfoiK+3JY30byvqMKkBj6cZXGMv3RwQEPgUu31PkJ1MrAoLYVNxD4ExFPoQo12IfKC3NWG8kTV9vJOH1RlTSeiOJZtXrTQ6cKxDCpMjvhpmcVJj1JK0bae56I42urwT3VNJ4zDS+q/IE6KuXg7XtXWDiEC7w6NKVzwY9ePJezn5UkB2UPENscpuXYjJw5N9aKSbBc75xIPVk9pH/WdY58l9HagspyorzjrHH1Uf+kxhcVciOLvJJMMAiPw7Jp+geSIK7kPglcuSfQCPBo9WbnqP2Xz8JBcpMMGyBYOIsLW4L0rAtSEmyBWkkmjHFFqRTIrYgZeTMfxKwBj0Teea/KMagVnpdCBUutSPy2kGyUbgkSOnm1fYp/SVBaRIzOIztQMJY6uw+kUifSjcrUn4egSzCj2Tm/AMMPY7LO9cf5yReZpxK4loZfwHoSqhljXo8ai9T5YBXR0KOMMYkcMKcNrOBKycwA2ebaDRdjtF8c8JJFECl0fU1WvCGBTqCAVQKg5vWHUCRYPgBVErf5qmxAGpcZ5UqxejX+PsZJDAjFWL0bn+cbZKL/P2M9L2cE0wpNugTFSPVLiBu/JNVOb0nq9IMvHLlwBFkwkkjDzlaZOA9bzCSzcE72gwGE6hDO0r1nCXLlwPH8pkcpzHLcTmR1yd6OTZW00isSLP9xZrZXt7bd2PFbu/de8BAOJrWH6gSVATt7gE9dle/Fa4qyImoYapnSQU1w+gqdZcGSgpp98mI9Gtk2idAJicBRCaA4Pg+xcpb6g5+BfNNa5Rwae9eIwENM5CKNxoNaIBQC9Cms5lHawLnKi+8EzlZkaierPg1G8qsusNqbA2TFlEHwU0qA61LPOargweVz3ppvUgooU98N7wm9ihitIDWyBx3JyFnpKdxHog6c3iwM+5k52GnyDKSTpFlVNSZ4PmoHQxo1yNFHWsNXA0iBB5GQmrFx63DVxXQiymXTmCdxVdhOuphQsx6mMD7dLRLr7eX9WXwZneWu9mdQ6oLXAIVVTnUMeZ1yFzSSDlORm85TpK5sRe4TiwrpLaKKPPHV5g9OpifNY/5cS7zscNv8C4qZ88Xsw4RAfOf5DIfP1uexG1xpBy4kVx4aqwkUXIVFTjrHEGsZJR8baLng5sNVA3kkPh5caTQZ5y8BxXQw5TtJZxQDLe9Ef6mPfu0emC7DvWLm6d+Ea76GWqoE0Mb6qRpMYiRVNfv79Nc9cNP7auiN9ap/cA+vu2NGmtVMA78dh3Mj5jHfP452JiRc7BxtEmch2Y+kbZoEjAr/JYNsXpaNsTKgY+Z1rIhcHcVdPuZAvIeBRbh4g1LI2INS2ezF+eeRfoali7St3Y2VDemX2CS2IojoiMASBoz88ly4IHDa+aTRqKsZJ1RVtpYlBUxYuZTes18hB0F62iolzJ4CDSFlMthxYcRftCTRkpvXUJulEAOWYqDrjltbO05vt/z2OFde6aNrD35RZz1rD1F4h/+2jOnd+3pYe97fY+vGDm0Owks/DnaShEkhsuyPUQmxrw27M7dT29NOInqGJy7n8y6+ynwM6l3Pyn/9ZNQqCtJYFsQNr0Q9G15+ZP5haBBKxSCCpYXWuLyp7iRQlDLXv7EtCGv2/aCJwOxhG0veIoZm25i7185n23ggo1jOmsIgG88HPevBINC96888T+wP5no61eCTRNy/crl4upn6+tXLoPaBl0Gu3yP3AtYAvK4l5DKvYB53AsgFSiCTe7jAgl50QtYgh3Wv4Al2CakNcpPnx2uYPGDxSZB8EmI2goNHg/KCEB1Zd6FzN2O0L0KaLDXJ3UFy0Ly+w11I4liWCXLwenWvIIlOMPQFSyhuukVUn0kC7Oz+JiF+AcSvAzgoXJQR09RQzvGIcErWELwaqlmRw7DFSzB850rWNTeCXaKFrqCJXix9a9gCc4XoLvpV7AEL5dyBYuXDfwq5woW8fCBvoIl2ClatOLH6qWi5dCQAhrUCv+EX8ESXGnoChZ/nc7Ar5I8ljPo5uuIn6W7BFxDmMVVH8nCrM/4FSx+XHvH2bHG0BUs5rPjBh3s4NXzsD7ZXw7eRHSnEQJNxPwswCGlYVTwZp26rMAj52CRY3MV58hcI8vcBfhiCyr0baw7EDCQTk3AwU9cUvCTQOuU4RgkwYo8YDpG5dHxaKl0jJpHx6hhOlbG3WQsgoMBbpAN8Il90iHulg5xs2yIG2UD7JP+zdulQxyRDXG9bIC9sgHeYH0iPrHD8sItX/+e2GUDiMM20OktllfBJ261vsbYgYx7bSDf8j3/VuszZrf1YzwbiPd+2RCvl47iAWMrB/1oxIFt+Ptr2/DdvSsYPS4qw+ay9+UTR4Glrsz3k437GeV2Z1B7++TDo9i781AZC7KADwikBKII3wLkaxM9n3k1JXEb1pTUW+gocklFHGGDKtVdzW79mmZlgrsBw9z54Wq80Xa2wZeRXHz1O14znHFfzc64K+eAgr/nZ9yVP/EvTwzoq9xi5Q4D5eCf+Rn3ADMtuZr8cqgirpIpPVRcTCh2BcJydhnc3+vW6QakPDRad/HpRF50HUG6zPqRi65D1rjoOqDrouuKWoQ2CVhD/h5DHNyzrIxcyKxYCsX5ex4JvAJWoIgBcalx8qdZh8qRm0cV+yty8yjfaOM3j/rRm0fjtNnGYgQCq5pRhwx/Y912wcBuRgCOJPySIokAojsu5BwB4w7YIGJfJBbZH/f2L7Ln7WaE0BNBMMANsgHCuxmGIe6WDnGzbIgbZQPsk/7N26VDHJENcb1sgL2yAa6TTsRbpEMclg5xpw0gDttAYbZYXr7lW8YnttlAeOR7mDHrs/pW6RB3TEaNGbK+XzWBMduszxj5Sj1q/Y/eLxvi9dJRPGBswaQfDX+dmzhzgCPCx4pt4oQMbOIcK7iJo+TB4NO/4erp3+9CJEzzq30TzBZOoW1IC4AYUrDXhPT4iStf9VFRhIkEmJeN8E5+qi5j5HABsx0X+UnYTTj68178210yeovD2TeJhkb5ddIZ8GhnBbkr2KD367hYOWbexcr8lpcZI5vIWZTzTbQhzOpgfRI5cit2sQ8xnlBEpm7cSV+sjKggmmCHk67YHfDYGeYk0k0sxT/zkuCbOPZZp9CnEYQDCMJBBOGQQt9viiIcwk3cOMKfOSznp0L4+Sn9OxwhrpzrPiTL3soNPcQ3cdA+cRDbCRoH/WUdJi5Qp4lLwCYuZmQDJlbnBkwQ3YABWc/oKsDfuMYPLgZV1pKlG48xTNw3BQRel4lL0DsdcFAURIKiECMoCh5PbVwomxs1MZpxKixGha+UnnrXj3/1Y3rHuyoH915aGhjs76l3oqf8L/3u8W+t2Gv6RD8LLJzt+uKudtMn+sJp7zgretVRm/kTVYxh5c++mhlgblSpjodpx7hqolx9vRx6UW1evDVM9O6EKcaHOSCoHeCuDVDNHKq9oPp7uIZaVdF+pqFKoAajakG0gwNs7EJa7EKQDasC1A4IcwZEmAUsyjRBiieRcugnkHh5RTcUqxT7JcBltyR5/r13z9OzfzTytOmKs2O6J3Hb1fPn8ieizbarHI4pFHlNpO2rS4zuQfFdZJf5bV9diJ90Ict+RgpG0WGwqM5NT+ZGcjoOwEkGELqlhSpI84JjfOATP/gkAD6hmyNFzhWoCSOa3KEHmgGIMQTiUgpijPypPypWIC6mIDaRP/UvsRSIy/ASMv1xsQLxOkPLwCQCcQUFMUn+RG57TtR927PqzmIDtz0rssknQZo5coGOkRnmyKU6RmaZIxfrGJljjlymY2Qzc+QKHSPzzJErdYxsYY5chazYCkhUUTQ9qijCUUVBUlRRpDWuAEYVrSRqlHto5fqbVnqyVsTfOAAnGUBWx6vwu7RS6CJFlepYrZha6NzPsmqAEL6Shgxre8p0bUeukHZJ0nZGAs8FanuBRI1iW4F0vsB0BdS4MEDyRMsB+LYCCCnvAlB5VxDKy9q7Ci9GNptdyGZzGJF+5fRVeFB0IzpSi4eZ6F7D36Mpoos0/btyRdUHGdiGLiCbRWCivogm6iMqsaAIVCyHrzXeo0wRp3nMDmXhVTr2aFx17tEE67mPjXl9HY/zRRaXCJpQ+ljUwXqG3whzWe9CWR8m1ZCZ7Bug92jGFZBVURC+CYkRkrSZIWaGT/4UlEn3iWp9gaP1NxsqPjGk9RnVBxnQ+ghi3Q0Wn6hMK5Ofw8aLT1KY1o+D3qZD65Pmab2Lq/UZNEbTb5szesM3kPWMy4X4l80l9V42F2bunIfHGFq/j3lnffiDsnw968bF8OdEJQ/19eOSdwdf67NGtJ4hMFnM12fIn/otCd/XZ/X6+jSbnx83z9ff87b09VlRX5/VwfrD4us/y9D6zzFvoww/ZIKvTyuTfk9U69Mcrf/yYdH6tCGtN3Ttbraea3fHtf5Rvtanjfj68TjrG1b39Wkjvj7L4hLm6/Vo/WHx9U8ytP57jFeby+EfmurrX5Ht6592fD3u6//bPF//vOPrLe3rX2Zo/SuMV/Pl8Gtm+vpIWLav/73j63Ff/7p5vv4Nx9db2ddHQrTWR1ivtpQjcTN9feRYyb4+knq7+3p3Pb7eXY608LXebcTXj4Nutbqvdxvx9RGWuGC+PmJRXx85hqH1x8IVrppLg+bVniWMCWeCIz/T+C0M3YjdBukWRrFyqcwAhVe4HDmZrzIu1DW4jWGWVn0kC7PTdCjzveyPRszoOCvOIG7PgcpLS3R5qfIzSheYKj9jyCmdJuSUThw5pZNETumkiCJUOIL10N9JIA9/TQDBOIRUgnsR6vkRCgUlFf9Hv/nwxc//qe8ofvE/IFg+xI12Q4P8eq/W9jEvX4pcrOPCKF6XUx/4Rawup0r9M6vLqa8cWVTFqP1ssNyaUcHkq6/Tr44KJh9cweSVVMHEEAEvUWxSZytEsBzbzzoCCCtrgHxWNQVLWY2qecU1ASOtMIJANBVQyRijgW5kMWh6a3X1y0DeANN6ajrKlGelqCdSQqylV9w4eHT4Q9w8eLjm4Tph80BCrFoKJuge/sIiYGRR6WfJFCmwmoWFn3YTdJTtrTPKboKjbB83ymaQwcfXEpQMHrSJqV+Ath6wrM2D+F8vy4Qsq9cFH3hs2tzfXPJKm46Dq5ojEET84aqckhConhW0wx5x3+M3v3rWL1I9q7K12A0FPmOmHwPplg/SQ8eVMLcFVX+ZOLc9MLfdkrjtQXM2cHTOMByKLbpJwHn5EMYozzbIBgh37TUMcbd0iJtlQ9woG2Cf9G/eLh3iiGyI62UD7JUNcMAGwm0DdYGbPhqGuNMGdBy2gVJvsbwOmvDRO6yP40bra7V0Tm+ygQbusj6j5Uv3Hhu4GOnRCdyJ2zqm0QaGTP5H75cN8XrpKB6wPhV32kAY7RDabp+Mgaj8NMKtThw6WTRml+NXrfjRdghE7WBsRyxvbDdan4o2iBr7J2PUOGQDIzFifTLusoEdswFj5IehW6wfP9lBGm+1gTRORp+1ZuJ8Fr4drh8NsjzJyJ1Mc9l3LHk6gfcXs9/3ucXvZOoUuZPJTZVRkbVsAkXdLoRvXvI1gXIcwRqJY8ULNNzml+O4RcpxVKWAFB2VEq0bBcTfgzBGefbEVukQh6VD3CUbYq9sgBulf/MO6RC3S4e4WzrEEdkQN1if07stL92bbCDdmyeh1TFBpXdMQvF+4jbry458+ZZPxp3WdwcmBCd7LO+yTPDTNpDGSWkbJ9INuomzgZWXl1d/lJhnaKNfq7sW/zgTTxQeJ76MxI7BeuElpk/ncZjbO5s/vXVav8FqbWAQfkyEImJAjIjHgCewNGezGIeJK0+85OSVU1fRx+o+tHOMEBWJWeB0VJcxxlQPNxGiQuhDnUeoPvi7BadtbT7iN6KnmCtP/Vppd9fYouJSoPaC6u/BGoMrx8KiT0DXDAYU2moH+9jYBbTYgYdNqwC1A4KcASHmWWllGj91oV6oHP0O5+hnjHfbDuuG3Fg5+oJCwR+AHefrP95k4CA1crwpYt7xpghipbySDlJ76WlVygnfsVwT9+doixHjWgzGFV38C2+bgJO7MVy0msrRZ8ELypaD1x50gTeVK4evYw3Y3V8e8Dvoj29CgxPitYmejxK9JjHRi9P3bVdmbkD6SnnovlKVUQvY6tugVd8GFdHe8qqRd6ttN/FOA9KiDrxQJap0yDlIxWdgL5om1gl3ZRBPkH/P75DjZZrfblKOIdRY7S+8RLTLwugvtIjExUSkgfbdpLSwXIXSuS4yF/qYMLICoK8VDJM/IVtRIvQe0YvxvSnuN59SN9VYPf1C5ZjSTzHmEVk7hMQmj4o70ZD53UhCLG8GO9GwKMH1S1qY/G7YsoQUZjXRZjjCdaIRNGiAjBbYV490gZRoRcuxqP57RmOUq0w8NnT/Wwi9uR97cd9+wsDeNX+wG9BFcFBKPShJDqJYnXxrF5jL4wQ8X/qQsScdEjF1vdeTZbT0y4BOMkdgpH3WXB11pbiTVNomtr9Lv5NMknghnFJRTmm4dy08JAMyN4WIUcV9McjYpVuOlK6r1zAbZ8ZOVFT2KIaYTQTbU+LMTSrMXamfuQlydjh8rpLjjMNEjrSVyFEiyAFKXFYtcaqbeCka5oTCiutpAM06TZ+LHU88q3zROfAXhSjNS3OdV54VbIawYDNfjs2scm7Kn0EeMKKbvJggvlM8usnD0U1IUnSTp719qObtNdRoIVGjQouW6jiwwKaFnqwFWTIqz+ACG8MQN8uG2GuDjx6WDnG7dIi7rc+Y/Q6rrclquLLVMsKzSfo377C+bYT3P62j1NttwBjr28ZNNhDGbTbg9Hbrq6AJ5ntENsQNNvhoG0Siu60f8NiA03YIREcnYUhmQqzsxDuTRAU3WJ/R8mRR+ZmTjuRt1vcHIyZ4fjD3maNyn8S1UCnmpbmxH9WdopxJJ/zg9GdBFLZw+rOgRadAYgamRgs6i/zefec1+aMenAX23Wfct16o8RUYVETzqRQRW8WIeA5YGFoEC0MLYGFoK1YYWhTFTISKxCyUfhBPm42xBgOZkA8ybQwkVcCqyq5Dl5AtB7ezuqp7Kk2LsUoMPRs+14CFUvVvg5wsdRskZd42SKrGKmcb5PDFLxulf/Ot1o815K9ItllfdDbJD1RDkzOaHpmEKzFnV87ZlXNSQIdZdiZjCsgO2XE7bDI4ntWqnJGv1UPW/+jRyRjxmLH9I1DfSeQ408zC0aarsVpWXSmAU7Wr+TyS22gRhS2c22hBkwtg3qNFZ47zc7/q3jCl4ahHjfFVf14rheQ4BTOJJ4E5zgKY42wBc5xFLMdZEMVMhIrELJiPapbv9hLyQaaNgaRynHlSb6EcZ4nOcRLfVstyso5SNC1TXliq/3huopZEhTKftfTqauSwiHIMqjrsSvIr7lrQS4pfmhh4qGAdqe0/dNZFQYSAqL3BlTjCUDmdRL2SJBCovIIcT1IdKsiRplrvSYQkiS9yYGZcjpikySLnIuDTFGGCXUxPskl5oRcURKsdaUyad6QxiRjwiKQjjcyThcR3UyfjiWdVZt1Em6loTTOAiaP0xFGul0sARxqjJPa0aCXKTevA0/+U4VFOtNSOND6q7pn75VrP3BWlgUUrO/tLXYtKy/tLA6Pabrg1ldH0qT0AvhkEnyTAJymgC+9ycITrgBofPf8jNqxO1rwB7YAx1DVhehuPBKyuGUnqmqDFN4Ooa0pSG48UK8wjvhs+PVdz0iO0uua46pqjJ85x1bUZUFfVGUdaXZvLTTtAB6MoZdMeUSsRUpkahpVoW68AH8N4qGe/tkGks43YeqnxC+IqkTO/s02O5UpglWgW++bPg0JGT9uMRLSqaLfK7X+iVSJPMl7/DnWeqxQtgHTmSfxp6WwpN/2/ugWnoV42NLTXW2wwzkhYtaElQE3p7xUlK0fpW8ptFyrA72M4Kz2Hav/+xy8eLeIBBWnuFVf3ZvM9YDPqAeEMSvNEr5OzshNoXdIzcreDkm816UlMiPTop2+iNujged2dy687r3fd0IMLe9eUVnX19kxfWOpfPTgw/mZvzxgZYXhINoDttDLIfHRnoQz507AhOQbs9VF/LtRrJBcKikKzJFFoYTlwyJCoyk0nuKgwKw0kz5AYBShmSA6r9CQmRHr009eYIWkhDUnBI2DtEEPSrHKWMNfGV+HiyxBMIARz71OMlI+bLhA4b+vdCekgpOMTl/Ve2tm1at0Bpg/IMW1IUWW/JPM2Y1XeZszjbWbCeNssxFuopWj9Ad0UqQFd1LyALoqwpkWUNYa2+ZqR8KFZWfa9hnr9lNyzKMAyVRXX0MvUYrnp1boFp0NHUu2P4uvrCoyF7NX1UQpoRv/QjM6g+FgTD0F5pVq6FvMsXQsYFBdJ1ChZLpLGUv8RqSIScBZ1BMXCIHlBsVGAdFCcsar0ZCZEevTTN2MoKC6QQXHRI2C6M3BQ3IIGTnoNyXG0Q4BFoWi6KBT1nZisRxSKqJfSUKOVRI3SqFYdhqSVnq4VUdJWHYZEGCTPkBgFKGZIsqZLT9Z8Q5KVdN7WmCHJ6jMkWSFDkiV/IuZf+gqsaHqYXzRfIIpiK7BWqSuwFuYKrMg0JwXpvG2xKm9bzONty4TxNivEW4GkVtZ01mTNT2plxZJaOVHWiFR9EN8Nr66z1WVffJa1Vtc55uo6PpO/No7PAbljZG2cLbe5FdAXUW6KoHPUWFEOoyiPeE3AcQlKU0JqdYosx5UTc1yCNjVuLD+VQzRIqU6JX2WH/FT8Cu23ZK0qUlnzRCprE5Eq2UKkluswyqtA7hgxyrly6/8qoLuxJISsQpUE+ZrApkGL6RrUYv6mQYvYpkFBkgbh/Y9akPRqiyIcN6FZ0ZSxJCaUsABEWZX3pYW5tRxfR1cEW1SkcuaJVM4mIrXNFiJ1iw6jPCJ5F6n13xTQt2FGOSPJKGdU7IHnk1VamNU530R/X1TSfFGd88lqDpCz6PdFJM0XQUxLwqoW3sSKr4RNLPwDtrDwn9Zh4T8v28L/iwL6iyZu9huQ6MO+2V9vsjkuJFbEd8ObgwWFWY+ie3opY1twwKA2QLRUu5a0cLWV41/VIdGPgdwxItGFcuv9Cuhvm71Pzz+K14qutDTUaUcUrsN0heuAFa5dksJNoanRTpCQPOv7pdpZ367S8v4b+wZmltacPP2MfeDJ2rah++aWOvtm9vd33kgQdUocHNGxj3nC9p63QIwyHp4Rp/546HP2s6cuxIHjwQvZ7xfj7L+3xvcbQIozhAOQpc7/oWjWDwz0k6ip/GuiTqyjCmMp04nFX1ZA/0gnaAUncg4W6Gf5F2G3IFLNKajRNqQoQE5OwjagvjRhBe95KgfBShL+VLkp8nWYMItWdgNpy3k6zb5CR5RRhXL8f/mMKiCMWkoxqqDyuxpGFaFQCEyLfvzifjB5XAQzkMp9p/HfgO8sB5NNS+DRqvOZ2E2sNaVl9Q6J/1F54Xd1Ifg3McW9mMRW00uGVKJD9hzshDF/sFt1OWqBJI+W4yFhjh+Crw1dCKxrX866DDzRpLzwhshSU+xUeeM+8TghYv5SMyK21BRLizeOwRLBCNaI74a7PESUliUhNCuSMralDJ2D5/d5iDKv+U0E9PvvFkpXEyeZV81pRCAPezVnnb4ZFkjmcg32Gm3ksyqzGMc123QIZBs9dRtXINsBgWzDo4n2cqIZdB41sWsT3emM1rwFK4RpvUMBPUWnitHeB0ydFlnXb+drasbCKHFU3XFeg9JojlaUVro3CvEdcMspJe2QOFbUFEUwFuTLrbcpoN9hqLdZFOl4kCMMFit2SZynvDBdZAs4ZLpFC5m/BRwS2wJOSLJoCZZnJ74b7nao9D1LnINurKQEugrwWx9AJWYZVWTCKDJL/COtbPrD4cQ8Ab4l+IECWjFj6NCngL4c1gggal4EEJWWuooA+aDyuCJBY3LiyatD4ATSVyFs+hb2mHwcSoXtN4RaXUmsmjLRGhopJ5YqLywwb4VlpO2l3VdYcNtLwRVWirXCupo2/0RnWmBiZgM/o8Y/ha+vxo3/lfrXVxna+H+l7v02ONt31/mr1oKrxQK8EKFyGUUdw1oONesFZ2sFPU8ldAZ2aJYwE4CJQYV+JZGS2Kjp6hw1vyQ2KlYSm5KkznhbzCiSMIkqzOqzflvMRI/+WC5Pq/PDsFZhytgskmVpM12K28zPsrSJZVnaJUlxO2tbgPhuDRs6yGdVHg/RUtzBleIOeuIOrhRPAffICOxpKZ5STmzCxEZPb9UFGA/0AHge29fWA+CjNIApQgCOpQFMFQLwMA3gCCEAs2kARwoBeIgG8A9CAIZoAEcJAbiKBnC0EIBjaADHCAF4kQZwrBCAuTSA44QAfJkGcLwQgFEawDuEAPyeBjBNCMA+GsAJQgAYrXFOFALAcGQn6ekowW6pe7LQ3C5ko4OqKaR8+och8zwdMM8tZNxLm+fp5eKLCvCPgBEMMzAu4qDH45fPKqA/Si+x4KCi2fSgotn864yb0ZVfvaW6YpXFWGxHPKsy61Pye1jKPiuWuK+eXf/Eg0jhA5wLKCALiyIMO4IsTbLkRDpal48H9XBBRQTZsMgiKe48kQGgrs0gJqLuaCEmoi7VICaqXauhectDTqR55iUn0jyLkRNVoT8G5j4YJiYspm4ucRMThk1MSJKJCdMqFwIz5RESNeyEgQ+jlh4P9w6GxnrKSeX2psSTVM2Ti/wC4Gtd9Ne6kDMTIfI1DS1ciGS4xZhzgbhkuGHJcEmSDDdKK1gL3TQdPdVxN0GTeejJPAhjlGcbZAN8Yp90iLulQ9wsG+JG2QD7pH/zdukQR2RDXC8bYK9sgIPSibhDOsTbpEO8VTbETZZntAnqssP6hrHX8oy2gemWbxefGJMOceckFMYntllfGuHr360DUX7MuMX6jOm1vt0ZtoGV2GoDFRyxvm004atHJ6NHGLKB8Oywvh/stYHGjFr/o/fLhni9dBQPSIOo/AxbnzHDNoh47LBgHbEBZ7ZPHK/xDLF+NIgNB1Ux+v21YvTu3hV79+4HWhLMYddtu2cD7y9gv+9p3M+qxUYLtWfrq/x+qzCgsbp7UbyLvb2xot7DK+gRqgS1ZUJYMa8ksfGSr0EgmaUAsSrUJWziDFSpl1wNAuY1SoixQffxz98zqlS9NXnSEjZK/oTqL5Xz8ckb9NdoKpvMXcRo1hGB5M3KCzfSuzUQeKWQ/hJ6p1Z5UoW7b+j+t4j1pnRf3Le/9nZG4QQD9fcwEM6Uk8MK4M366ZECEU7TCO+hTsZnSfRqmjbjVOrNDDHoLXWmXlFtWKuAgXTKHqoyZ8oN4z7YaLW+6Mj//Gf/Hz+5x/P5H73ae8Pvj9v33Tm7v/qps8fK0965edELt/96PsKXQ8XwwOcjtMngtInyaZMCCc1Xjz3IbiNWr5BCqg3ShBTX2/8/yLYqB5Upbgdlk7F57KmviqcKGNk89sCbx2lJm8cMr5EmvIZ2Wq/YtGDI7WVZaeK74RoQj8Ksj9FOLVYzusDEMXriGDcUSgCVSzGVj6FEK1FO3mnAYVyi33TS53qSv7RM8IA44qUYkh6BAxkKxMXYJQs5gbo9BeIy/O5e/adgFYgrKIh58qf+Ij8F4kq885P+6j0F4iq8RZH+g6sKxHkUxCL5Ezy2ghmILAWzlfyp/+iHguV8CmIb+VP/qQ4F4vspiO3kT/3HNYjvjlMwO8ifAs7La7rz8prvvLyo89JQYwqJGmXRpuiwP4zOglMQIzlFhwEyDrJZPsi8fJAt8kEW5IMsygfZKh9km3yQ7fJBgqeCM/Q53VhtYQ4FEQ9UIy8iE6EMIgGxAvufVNMFocfFMhHvJ0MsyPiweu8QC3YaI285+XPaEsfkJY5iyBoN7ryTQKrgk0RcyUpepGrJi5feRoW+5zuFvk6hrwhEp9DXKfR1Cn11Q3QKfZ1CX6fQ9/Ax2gZUdKpynarct7M07rS+U5XPaTtU0Tg1tE4NrVNDe3g1xqmhdWponRraw2t4nBpaW9XQzjK/hnaWvBra8Z2DzXVXVDUgWyE6alpnnFr7K1x8460B17snoDAY3BHwStoRiCD1By6qtI/o+5KqVP9BVVK8+lxwVyyBbMnT5bcJ8icAMcm7qwvEJYXgQlcgpcifUAUSE5elOnBpRnBZjFcaUWqSF+rQcxZzbzT/cFU/U2MGVeVSCm0/KYYAUD9NCD9imb2q1xgf0pxSPuSDBj9kERNw5nsK4DvA3UtCHpigL6OUkAimKmXCiMWhWO8zvZWVz3yr5UOtloYafhI1Sjz8JGERf6JHUU7AyK0HwIkMOXKV019T5Ogg4wV3Of2I8sInsT10r6Q9dC/52j3wZrWeT75Uyy43Irx+MfkZFhdePyy8bknCy7BfblB4AyRqFCMC1XHgJnyAniyAcDbAzdwZBQhvwhuGuFs6xM2yIW6UDbBP+jdvlw5xRDbE9bIB9koDSFi9ySeM8lGEV/iGIe6x/ldvsq58myY6t0mHuMsGDmaHdIjbLC878lE0we7ssj5E+SHZFuszRr407rWBz5JveLZanzHyP3pMOsSdk1FjhidfvANvzhqFeL10FA9Ynoo32yBq3G19Wdxu/TC01/oOa4P1+SLdLsIVfRYKvUcmoQeUvzqwwZJ/hw0s45ANZGeLDdzqiPUNjzxrq/wMT0ZTtmUyBjwmCPiwDei4Rb7OeCyvM+tsEETZII0gPaI3IWMkH+JOC4eOys+8fJA+K4M0bb0l3c9stIP4SDfhTvWJxYTHPFabEKRstgGv91rf9JgQ4t5iA6dghwyXCRDtID67bCA+ayCAjBpbouwTGIS1QJV7/Mc1Hp+bfv5nfA5pB4Dc5fSjWPHxIcB1HQByEdPbrKh6Pta/TA+AC+kieoVAFOiAGM21KdYqYIVcNCsCcFW2X1JVNkPfiVMlGmoESdQoTgar48Cq7CA9WRARjSA3LjYKEI6LDUPcLR3iZtkQN8oG2Cf9m7dLhzgiG+J62QB7pQEkzKblhRGOaqwDUb7d2WJ9xvTawDSOSYe4czIx5mAtOpKM41rrS+N+2RCvl47iAetTcdj61tsOH719MlrvrZPRCY5Y/6NNCMk224COe6z/1ZsmoXxvsL6xnZTh/M3Sv/k26/ssJ4CyqAbumIyyY4NYYqMNOL3FBvIt30zsm0zhjvIzPBk9gh0EfIcNrKMN1v0Sea389FheZ9bZYMFqg9zEVusHUSZAlJ/y3yVfB/PyQfqsDFJ6BGCan9loB/GRbsKdUgyLCY95rDYhSNlsA17vnZQh7i02cAq22E0YmZTis8sWYUoTBNKFVkECgxgXG5hWpLxZrEjZbaRIebPRImXqhuQKcoya2SaxstVjNLSvAlYor8xEzADWzEYl1cw20YyP1hivoUaORI0Szlx1HFgzm6MnyyHSnuMGakYBwoGaYYi7pUPcLBviRtkA+6R/83bpEEdkQ1wvG2CvbIA3WJ+IcCBgGeGWr39wZGEhiMM20OktlldBOCFnIR2Uz+o91vf8NvDTvTYwZXtsgON26wuPfFZvs4GP2UIdxmwi1536lypNyHRe8jVDqx/9n13vWnkue+nbdDTw/hL2+7kG8aXy0SIr5QbGId5kOTu3uoDOHkdffgMvoAWvkgqLL6C98AI6IGkB7aWlIQAuoCMkapTERqrjwCv5GFf9RRAVcAA6AC0GELopbLn2iadm66Bz7F30mW5lTNUg3ULdvRcl8VLZPO2bhAep3tKHXOSntmYMQxkrZ+cfAtDdPVqOzKVcIDFbWsDYeBG6p3V4VQZI5U7KZRiSXgHhUCCuoCBGyJ8AxCgCcSUFMUr+BCDGEIirKIgx8qf+UEKBOA+Ld8DgJMmCqPzMUjCT5E/9sYuC5XwKYo78CUDMIxDfT0HMkz8FQoW06aFC2vxQIS0SKrSQqFGaTTwF76ltoadrQYwFAbJZPkivfJAR+SCj8kHG5INskg8yKR9kTj5IpIBs0eAyNchMFeQC0PM9UL23t3ox8Cnsm6VpV+4tZ2+uuvLQ4+AEzIui55PxCuRCK3cVf/zykxmefjnzLvXsFtpsRuW1UoqCoVsJua03QQRirP5PuSnKC9uwDk0hgd1urENTiHxNg7YL8T+CF8fOFfc/btj/uCT5HzdKKyr+JlCj6KhE5+BeL6PtmQdhjIeb8TUKEN7rNQxxt3SIm2VD3CgbYJ/0b94uHeKIbIjrZQPslQ1wUDoRd0iHeJt0iLfKhrjJ8ow2QV12WN8w9lqe0TYw3fIZbQMqylfAndb3V/CWvmGIe6wf4NkgHOu1PoryOW0CjtsnocuCt/QtxJhd1oco3/BsmYyGZ8gGbnCH9XWw1wZucNT6H71fNsTrpaN4QBpE5WfY+owZtoG1tcOS2g5rhO0Tx2s8h60fjRAxSOLpNvcc82/gmCPzAo7ckfRmR1jerlGY2tRx134GBJjsRsQmQL6mrdAh5vNUing0Ox2hGt4UKTxipIiK7/t44H2fkKR9H1z8NdQIk6hRpCae+qHpwvR0YYR7YZJXskBWnnU5AB2AkwqgR2tqltaegeUGYaQSYqnKPVMeJFzOXahUQjwJTqCuhFD+HieBi9RCKIRg10LkaoWWG7QGTimjUIpEcxeL4u0licokyl8V4JcK8N5TCxcgarBYdZC5RGAS5gqCWVpXSZRihiuu8v63sHjzPxf37SeRnz/YTQ6tIP5euuQd9q6C5Skece8ahb1rRJJ3jaK10BpqxEjUKPWOcdWbUbcaQ+yFmQAFOiXExEjtFedzzPxOCTH0rJCGGk0kahQVm7hsETzrZAeAhGWiQk6FoXoZryucjCC2qP6JIqQcwMpQ/0TRmsOirInEaWI1l0q3OnnLHeDKc3vk64xLCxNi6peje45U0GrQPskjItWCSEEBYVyRpIfmWSspzUx6N2jp3UDSoeJ4p7xRAUy/06AjVgEzTE38WIUVwDWVc/+rAN9FLdc9JEGgOldWhObBIjRvOTdKi0pIXt4hVPdS3kqCKCxsnqqwTZ2LCBvC6zB28idCPQyhYQ2eUsDPREZVPAVtVkkg9+GtBdkIBTwYBcDMleABrQD52kTPpx9kAKaYngNhIQTiUkyWQgJLJwXiYgpimPwJrasQiMtkHVpTIK6QdWhNgbhS1qE1BeIqQ4fW4ghE+hhcnPwJQEywICo/6WNwCfInADOJYDkfP1inXTQTuATZ+eUgsjJKiTmlhPjKKAWvjIKSVkYpmppBcGWUJlHDTqyCuzmMY3RpxOYRIN3yQfrlg/TKBxmSDzIsH2REPsiofJAx+SCb5IOMyweZkA8yKR9kQD5Ij3yQYENYF2pLVVvVX6ptVfcNrlk5u29laXWpv7N7VLsFXbN/o8yt4zFgz/rdQAfX+Jh6jxnYeo6jW8/j684XiW4Ixhe1cTbwl5RE9/cFIguyLEB3yJQg8UKDJic7Uld2RD9LiDUelVIh8OQmVcLIdppXaI+GHg/s0LzB306LgFqhxLAs0M0uvk5gqxaXwOIpiumEruUT8I1hXPOj5eYA8ZUqWXKTel5Vxcoz4UKP6hxPg7lfr7GdBP1CHiOpgmXcIwLraF2aE6ZraIhPqW2rat6KIyuhrBgDThRfCWXhlVBc0kooS9MzDq6E8iRqFPvy1XHgCWtG55U8En0ozzbIBgifsDYMcbd0iJtlQ9woG2Cf9G/eLh3iiGyI62UD7JUN8AbrExEuO7aMcMvXP/iAkIUgDttAp7dYXgXho7fW8YEjNvCBw9Yn463WF8bt1jffdoifbGAlTFBq+Q5hj/WVelJK4zYbhCd0I/Zs7adXYJWbRabzkq8ZWjjr/2yTGrFnTxBrxJ430Ij9BLFG7FD1BpA2U9ohLmaWYzV/pJq1ab6Z2bq4eRORrGc1gW8eQl/IlZu3Hsbmx/X2ns/TyRso8V4gUaAS6AoXhFPkXqWm6z79BYRREi8wswg3z1wMMgPJcS9WAWJJ25jR5pnzCLTB9Kpw88xx8f4ALSJxeeWIcf3NM4kStIT2ma/2M4U03WymOysrPyOKnn9ZpIJfUF2C4tlZr/kV/F6RCn7nqgYHoLUuQuiizQH0BL4iIQA+aarFNDUTwToynl+uvPAvb6OevReL2yynZy9nxej07BWB6PTslQHR6dkrA6LTs9ea6uL07J0cptvp2SsFxZ3WD3VGrK/R8luGbbC+e3G8gWMlnM7eh1epJ6U0Ou2eLSqNTrtni9pGp92zFIhOu2cZKDrtnq1qbZ12z1alo23bPS8wv93zApntnvPX1r2334DUOXjBBlaNdbd7convz4Xg/TmvpP25kP4atAdrsraiNDCrs2/NYHdpDD6szRahUOMYQ0pOhuRhPwjfBYjuhaBIQ5CC+zXnwZn/U4uv+hUDxF2ANw7StmkhCszcvN6mbnVvUy8GN0QyTPWFCAahCgZIr3K1fMK4vkkixY5+gASA1NhFJdXYqU75Gqi6MdZPKoxAXCqr+5MCcbGh48vYGd9lhno1xRGIK2R1VlIgrpTVV0mBuArvqwRATCEQ6X5SKfKnVrsIYW1id2pqQrxVWsxhxMS9VRr2Vk2SvBWjYQnRtFVDjQyJGqX6GTKOA6bL0NNlEGtCgPTJB+mXDzIgH6RXPsiwfJAR+SBj8kHG5YNMyAeZlA8yJR9kVGCx1cQPgNcoATBjzXUQDFEP1sIu9voqajRIZYfPUX1xKoMG7lqII1JBT4wnzCurhj5/P9LJn3/pjQdxdV7TF2ZIsbfHvGJvD+jqfCRqlBr4SMLqT1R4TFMDZaXGTko0ylWCRs1btQyDee1djhaXKau1d2khUaNkqqU6DizGbaEna0FsdQt338soQLgY1zDE3dIhbpYNcaNsgH3Sv3m7dIgjsiGulw2wVzbAG6xPRHibwTLCLV//4IIAC0EctoFOb7G8CsL1VxbSQfms3mN9z28DP91rAxXc4TBGBorbbOAR7N1Ro0X/bma9HTWOEuuo0WKgo8ZRYh01kK0ov6T9Mr8OWWA3PuD2VGg5qbowb8k4J/uxk/0qJjBYVBkHZvv89GR+lOcOwEkFUMLJ/iD4BO4gQJ/fb7mY2eukZTqnlU/LqZxWPi0zbNzKp4VO1FVmbkD63afpfveKZWZaRDNb+RQhuk58K5+W2Wa28vELt/Lxl1suqvsC2gakxC0mp5VPsPYzhbSeaUZ12V1u+aXywiVvo14cc8SjDKcXBycJ4PTiEIHo9OKQAdHpxSEDotOLw5rq4vTimBym2+nFIQVF55S9RQO8SXnK3mnGYVHGOO0PLGomnPYHFnVaTvsDKRCd9gcyUHTaH1jV2jrtD6xKR9u2P7jA/PYHF8hsf9DyssntD7RbMMRBnKgAk92I2ETJ16iv8U/EZmgAufyb2ghpq/0Map+1w+SpooFso/qVXehN+rdR3eQXwTcct/K2JIHd6yXMPcnCPynbdH+jDmuR9Sjsw1qBmqzV20XDLb6zhnTRCJjXRYO4dVxDjTCJGqUeYZKwwHSMBgJhROPCiHT75bFmrlTW+M1jjd8wayrjbpLGGN5i1yhAeNPTMMTd0iFulg1xo2yAfdK/ebt0iCOyIa6XDbBXNsC10ok4LB3iLssLN7z8MQxxj/VthHx9kY/jJstrIJzJMQrxeukoHrA+FbfbQKdt4PflG1v5rB6ygSGTLzzbLM+YDdYXnZ02EJ1h68cSGyajaey1vkrbwR/IhyhfGrdMRmkcsoETHLE8Ge2wttxuA/M9YnkrsdH6VLTBYrV/4hareP5aPxrEfoTMc/ChOcD7S9nvh13iW6hzRLZQXcoW6i6RvY6A6dtQAfP3OgIiex0hEjVKMomnPgHRDCHCjp29k7hD2Pv23yGsjHO2oZxtKGcb6vDFFc42lDWNjnRR3GQDRsvX6C2WV0AnM+pkRp3dPIcxPBSdlLWTsnZ2gg+v4bH+TrAJtnHUKeSRgKINCnmcbShnG8rZhjqcnHa2oaxlapWfeWfhNjkWRTbIIsg3O1ud1KCj004y5nBqjHy7s8v6Hz05lzC3Wd9M2ODsjg08jB2SO1sno/WewBwZXjKjHw2yXE5i85BQj/mVbz1GK9+0PRoCtZ9N+F3ADKorV5EsoPqDhMif+lkSrdFKCzFM/gQgxhCIiymIMfInALEJgbiMgthE/gQgxhGIKyiIcfInADGBQFxJQUyQPwGISQTiKgpikvwJQEwhEOdREFPkT6hYU7kOpHgnNGtafUEDAUP56WX0NUmXi3crwD9ea71z76WlgcH+HgrdNPlRECo0AdKIGYySrwl/XQXuFexv+6Rys8X3YWznD3YDUMH7Nhg3c7m5dplxc3uW/HYtrTPkT/2IpGumChjUbAT7HD2omfwQLfY58qcB7JdKxT4tiH0aY0xWhxIIXgcXxZAxez6N2VHGMQqRm8VqgbVGsgpYQVaZiZgBLETOSipEbkZppaFGnkSNoiPxFJS9PD1dHmENAdIjH2RQPsiIfJAZ+SBD8kGG5YOMyQfZJB9kXD7IhHyQSfkgU/JBBuSDzMkHmZYP0ifgq7PA+vVLtfVr3+CalbP7VpZWl/o7u0e169KaZRllrifHgIXsReyFbDoxpl54AuvRhMA3+mtxG3zbZZpYCWjDhNN0hAmn0fOepi9MOA0GSQXQLaTPBIadftf5q9ZqMeEPm8Hs3Xg6OTe9EphRLr6q3Nf3UzqqOV0ssOigIZxZ39k5Bc4ZNH9OJ2fRSMaMWgAlHGidAQdaMyQFWoyvmYFI2xnkR+sHeYZekBTXzpDEtdNZ30nMouGaGika5crnXC+NBry8vHGitsnGES7cMY5ku2wk++Xj2CEf5BT5IKfKpuQN8nE8Qj7II+WD/AdbgDxKNr/Xy8fxaPkgm+SDPEY+yGOl294x+UgeJx3JnfKRPF42koNWdmLKz3fIBzlNPsgT5INM2QLkidq4cXptP0jz5JTqE6rv/KkkipW1Y+u5YCAL7LMQP5sZ66vTy63LFOCzeEu3Qzu+LPxOpLZsiaXPjMo6+/63YL/5n4v79pN0Hl+GMoeewlwRtl5Ek1f5WdA+I5amReVLl0Bfegr3S2mMTim3LqBXKDPk3WwxA8QWYDpxW0ScjfAlyvbaD9W3N7hJUlY/qvLMI/ZJUWWOp0F98IKfRivfdO5e0an0oFNIqlA6eyqpvvoTL0XuRt0pD1Q5w0p6FEnxZPJnsUK7J3UILY1hC5iSaiFpo3lWIIkN30ByWhWlxIcFbOdpJHBg2Jko2U5TGWKKbGeWW68lyAZNAegMoe85NvBVyo0nc8WBV9hxMRt0N3+3+yykOAFUiDPpQWeRWGkTkWeSP/UabELFTqIcATHdmTxH8I+HsGVy5CxQzjj2OsWg9xnl1rVa6T6dHF1VuB20VT9HUt7pbDTvdI6AEJxNqpWWn2fpIOHZisyqiHgmOZQm4tnl1lsUQt0MwT6HDZsUCgbsc8qtQ1oGnc1i0FbkrZPht84gB1Tf2oa8dSL81ukqdVIER79ZnA5aapX9oMLGmtYggePpROBI0zlfbt1LGB4oDojWFwc07oPjgDw3Diigu1TAoCI9iHBtEToOKJIWQz8mEZB3ESQijZKfUvWkxwp8i2L3F0KDWvmBYZ4hEK3l1jv5nqgNIQTIklZ6UBuJl9ZytZI/TYpQMcksciWzDYkLQTK0o2SI0pLZTtJBP22joGRGacKylERZKyXaBCQzwSVAgUU15WeIkoMCrUi0HLTUuVJJ1CMHrUbkgCE8rSQZKDloI+mgn7YhUA5CiIVqYchB/DEjhhEkQAtqomk5aCF/QnKQME8OClw5YDodA2axiMpBK0kH/bTVJQfUfZQJ8lOqcvB5ATlIHB45iDpywJMDMHQoAqGDqjKEDh2K5dan+aFDqxERKaK2soUSkSL5ExKRnHki0mLEZbSY6jKKArTVZSqKSFhBuZOcilsVMzIiILX8REeORVHEjKhq3CEZyRxOGSkYkZEix5piC5+cAG35ZqQAmJEcbkYK5dbf8c1I0YiI4JFnzljkmTVPRHJGPE3OVE9jfuSZQaKRrIpbFTOyCj5WsWhwmRqlZhIHUNipYVlutr/ASlsrg0hADIFvCygy8Dj4Mca0KVtuC/O1icG8DFeMsqilyWEnYbKmxe9TbBW3Zfm0VawsX3BbJfmLVoyLRR0hRQ6Q1Swuq7lyW1FHMrJgnogkuCKSMxK+trKsNOlAEBEpCqifLoObVQznHDj+MmQ4C/SwFq7hLOoznC3MBUfb8XzD2QIIYwEXxpZy2wmGwhBDC94iiddhWfBOsVUCTMeCV8Bwthlxf3g6u4CnswVD5hZeyNz2Lh2Gs2ieiESNLGaiRkSkQFIFE5FW+bmxiuFs+iPbXrybXx0AGSMFgW426AWG9mQyRkxRG4kVaoqorfF2ovfHyTrqnTS0bqsVPlGgO0RP+ag/uAoYOVLTAR+paZN0pKaDRe1aOaF22ili047vE53X3bn8uvN61w194rLeSzu7Vq07wGRdjvxqYjqCkVDsvAQpCopon7WSXrGiPG1L5DvqkgL8faYnxCPkp8PJ8lbFWNwrtBFoQGHbdccOECIA4Qn2sbaK28tt1+moIazT6zR+AfY67Vyv08EiF4/GU+hBHSRVKK8zRSgwISDxguMOtBiuFQ+PO8pta/nFcB3ImncBsjvcgRiCdsQQtPANQcKIk0yU2zbynWTKyEYlo3FRCnOSeloXpbSe6GodcWoOWStdTSLHXFvfQhaUamr0CI+QqtToaViYQpyzYGMRr7hzRhqLpMxrLJKqiYbRxiImHOfPSgOpnDuQDPCJ28FMttWkJzch0qOfvkT2vhbNPbiwd01pVVdvz/SFpf7VgwPjb/b2jBHkbfaQbPAIWL9czdaj3c3Ait03s+VM24cMqll4BiZXUdaJwCTBqyBOqCuTU+QEZu3yNcEhSspIRpEvOc1oRpGRO2nW4ZMSBmPkBLKFo5xbatrD8EquctujSjxwvxaMFzEaLjEOxcWNhgs2Gl5JRsNFE9yLrAfdolIJTOump3WT3w1zWmnR2fYwLWIhrj/BL1wGBoXBaJDAnhatcLntIe2XeKqTLdc+8YHrW3/tq6A7n6knweqTS6r0agebukRZzFByl1qbHCV/as1kE/lQ1XBV+ybRUrTaTlX7SpR8WwWMEg9YS2Oma2kM1tKQJC2NoVJLfXOTJC1ltHRtIr9bw4Y4+ayqpU/RWhrnaimj82ucv0YCtDROYs9ctT2p/RIXqIth8Emk9qT67f8J8hNAVZl3NQPRWLldad/U9gxs0Ks7YAooQqEgfNBFfhTHqu05/g4Yw8S4uKkHHCuXCkEWXs/zUw8u1mK8XnpFVB/JwuznfMwiPBHpYYCOlNte5GcgIoi9B7XLj1LKRbkJP/lTPyJ8qYjqlYoIg0DRcttvdEgFQPsIRvvxQPI1Pu1dRmgfYNGJwEpL+wD5U0Ty66M9R+7Haf9n8+T+dT7to0ZoH2FtGiJyHyF/6o9+Jcq9m0n7djeSe4uSSNdihxmnUm+SVhcI24Lk2ypgkCgye/K5cWVrDyrf8yswyC7R6zkigKICcMLL14JmKjQgpqHmJYDB0APaZ24SQRhjP70wqBG92nFdMDjieNFEuZ3afoohNGwiaQiHhxGFvqeIIoza4HF0W/l2IGnEDjAyE0nMBuvJwMeN2OCkXhvMarqRLLcfybfBSYD2YSwQHAd9tI69uFCdia44nOiKcRNdDM7HuJxPoZwP0+ublA7WM5ZWYS7rEyjrw6QaMnVjOt3PA1FA1EnBVjGBJG9i9HKKwBne5o4TSyrtYltZkJOuBhaj4VnfmPbTX3zhJrrTTVUOqpa0zom2ryq+9oVzT9vNn4hav/vFVIKRAQgIlcE0grkoRkIlKIbcG+IJlSCcUPFJSqgEaeH2IQkVwTzO3/EyGDfbgzM1JgAa0qD6iYccXu1V/PO6M7h/r1s6/wZGZ0vAbPu1inkCj/YEAB/lwQPhQLn9cgX4IsSMeRUzAG3zBNTbPF7yJyh2VHmyn0QdSlqjdt9DAqO/OFRufw8/QRMCyBnEyTkOfAk/4Aqj2qY/Ux8m8ULv0ULWJCHe9l1IzVfVcgYcFH5zD1IRX9KWQUOC6kZDIfI7wUFeNXIBcib92QMP6Mg9JOyaElJGwCO6Yw6pegOyqHGB+x3vY3uVBq1XaSAxrshp+7vUlpN4pwFZmflhpnjUTHGTP/Vy0qNLzOCZkEEuxFCBg9zqQS4jM+kjhDOTM5MzkzOTnWeqZDDJGZRY4K4FveoAvDZsfHFGhSpEotAFZFjJZC8vmqG+p4JXJzzErw5MfEbopgpK6ejhLawf6/B8+BeuLyx/6cVr/uH9d67+1gtdD245bfofZt38cfdFr8/ePLbrfAxJiE8eTCKgL0O8uw90n/plz0f+1BsSGJJyfd7dmcmZyZnJmckiM1Hu0wW6TzJFw3Kf5IXFgPv00h7WwPd4sFWays3464xWPIwsXtWBxldc8eH/e2PN5xtTv/nzwz/6yEXve++lD52z8s8PFG985MoTF4wlMSShL0MXrdCXeXTP5DMifR5dM/kkyLk+V+3M5MzkzOTMJH8myhf6QF/ok+oLfTxf6DPiMdygx9BPOVVxE30Oo+oLj1uz4F+mL5/5m4/d4e58JhX54fqjvjR397d+0PNy+eJ3PrzulBYMSQNLPNgXGlomeycsv6zfVRtSDmcmZyZnJmcmjlvzgG7NI9WteXhuzWMsvyd1IeRC3Frkzk99e3jJwh/ccsJx7uu/dX57emn04RO2HnV78R/+74UXjve8V3Lm0ivBYbt1yYRbQo7UUFLfkHI4MzkzOTO9jWeiPJQX9FDk0ofjodyAh3LTTszA9xjyUIYCAsxDueJ/X/6eB789/7r13+v7yhEfO/OKzd86d+pzH2r/4vzZvk9t/uZHjKxsXEaWlIZ8r6HVmv4kpCE5N5RgcGZyZnJmssdMxgpGfBxn4wOcjY/2Rwa+x5CzMeTbMWfT8syJF3zuT898ovzRJx8a+cmWzMst7d7T/umlf/nE6v++4uP58zcaSeK6MJmQ6kZ9ktfVPgkreEPK4czkzOTMNOEzGdsd8nD8hgfwGx7atRj4HkN+w5CbxvxG6ys7Nj9w/HMt503NxG754Ou7rvq994bvvmfxC5//zrpbXn/qi0cYWQWglfpSPaJ+6XN2h5yZnJnexjM5OylGd1KOSi75WCj21PKjF+78Z9/3X3B/uvPa6c++cuqdi86bdt+iU9Zd6eyk1OGhnByzM5Mzk/BMzq6D0V2Hqe/7xZHD7/7upZds2bfo9tsuzJx06VUzt14556zFrVdv6nxX9yPOroPoTE7m15nJmanyyMnQG83Q55/7ymfO2n3B1xY3rv3rF7+8dP43+7a/kfrd9x8Z/ta/3nNz+dGfOBn6OvyGkyV1ZnrbzORks41mswt/mvbSJ56+0PWNvl3f+kWs87fe5Mv3XXH5lNjRPVdd9eSeq37uZLNFZ3Jyl85MTub3bZr5bfj15x+/euiV2V0f/uojPxn68RvZ77yv9Wenbrz5+8tGPv5fn571JSfzW4c1d/J8zkwmz+RkSY1mSacV7u29euaPRxuvv/4vq14+/inXccdNm5n5aPC+U6/624KjXv6rkyUVncnJvjkzORnFCc0oTrv9ikvKz/xsqH3BJQ9Hf3zw4IP3vfP5gY5P/u/9n2z8eueGnlucjGIdNtbJVE3SmZzsm9HsW0Pvpy58eNUDyxpaf/WddZ+/dv2/F37709vOmrb2orvv2H3HI/8ed7JvojM5+aO31UxOpspopip48n/c/t8nfr+p8bmn1vztPXvvW/t/q77d677jy8U5g/0N5/3wLCdTVYflc3ItlprJyeoYzeq4bjpt+EPf9Bz/oGvT0/ectuT6h7/2jtzA/le/+1Toqj+v/fAJP3WyOqIzORmQCZjJyYAYzYD4/pb/Wl/u7o6XvvqV4z+77foXzvznGx89+IOnP5X484Hnv3LC1UknA1KHPXKyBTpmcrIFRrMFTa2vtP3hFye+941H3xF77g7f4IsnHTfz9XXTBnecteljcxqvfNLJFojO5KysyRmclbUuNfR/9pud96aHPa/e2nHRnTPe+GznjeddtmLhayd9Z1/n6MA9N611VtZ1WAlnFaq1tZNgFZr9xTl/u//k4Oj/LH7+/7149ayftD5+eddDr8278SOxOZF//khzwlmFis7krNi0+mPbFVu6OT3/vYGm73593rNrL3zk/tcuuPfxI4964civPrv/r97EHtdZzoqtDt11VjerrLK6CX5z+rdOum7fD25f1xGd8+jn7/t/zf9R2HrbS63vfGXeon/8YvIpZ3UjOpOzElhl7kpgSuAdH88+/q8Lij0Xz97/3MJdH1r91+dzC/76wc9lgt96wXdB2FkJ8DXKiZqNRs3Hn3Lz89/52sVTX77jn068/TO/mXHpsjXX/ikXCu3fff9FX3tk6eZJFjU7EabRCPOkrgX9z5/80WM9Iz35d/1opmfxr478w9/WXPfyEUlP356+GTPsG2EaMy4eznXKOqIxUeNiKBrTdwEipux3ze9dO0b+gSDdpaWBwf6eofsv7Ol6k2IV8anQr3HoExf2DJRWlPrvunzGqY91NAD/tv30jR/tWp//9dDdl/V39o2O1cZXfrgkTfTuf/zQTVu+/r+X8Se6e15vZ9cYIICfeouM41Ne3Heg9iBQkaRDkkEMrIBePnTvRYOr+y68loAaKE9l3LcZJL7mlOnw11T/0V9DgEI+xMP7kEPTM75kMftLjhm6+9CfR8tTA9isLuphgBQ87cMgia/2YYjkivZhWMeXRg7OK61Zc9nKzh71t4axb42Up8YP6XV392g59P2KflTed5PffI9aSj1ifPUoczyt1cFIFSQoi9FDVkD9TcogFzQoRg+KkjS5Z9FAb3+JwCNG2hnqqYucm3rqJgWAeuohJYB66iVFQMt3nw6+++kvVdbgC0C1eKAqLCz1UN3vzlSQDoWhT2JIG1cQL8oDXx088KM8CCqaP4e2Zn4xqQ9oZT1Q5UuD9kkI8VJh8iMp7SE+UfMsCtv5KhqK6Ch4Ed9a4fDUuWqzQLzTcFiM42EwUmGukYrQWhiuaSElcRG91iZ8eKyNC+OsG+NsPYrrZ30OTEQviYCitlDYo8uWqn1oZeolKstKmUN/eeo8Zfpl2LxuYzYcYYUfZyJk/YWmC5A/DaxyApayEoE6rYTXilbCj6pVuD4roUeyBTVqAVejrlXm3SBdo5ZOrEYtdTTq8GjUUotr1AaJGrWUq1GblXlvl65RiydWoxY7GnV4NGqxxTWKI9kIj30CYu+vZR8otFRLZw3t/bWsFrW0DIhymLmga9Qu6BpVeqHJOBKICU3eaERnQUUPogQ+eF535/LrzutdN/Tgwt41pVVdvT3TF5b6Vw8OjL/Z2zNGKqWHVEKP4byEx6y8hB+V8QCel6guawAq+mgqKvtB80DZRrNAbq5LuZ/IAgl5q/frUDyfcAraV576uSpG7Wdrtc+LaJ9PTAGC4trng7XPK0n7GCLgrSkSZYswoVXI3CXJLDoAJxlAjbh5armUqq/+DijHwEaGp2bPmLpfVkA/jmz0ecUNqUdPdIyaUg/XlH5f2JTSLvb9bNA/JDZ49DtuF9dxM4QjQGKFLgmg0NdbZ+gbhENfHzf0lRW/qIIJSkuCJB3005bIhFLKdRCMOb0qjiiqV+fms9dT+FDHZ943j7/5rOKzv8ZwpgMNaB2ouyYFwIBFg8vIAYEau6of+5uqICrcV7BRP/DVgFR5psXbp30SgGSqOlL7RX5InnR8EXNAkBlg+YnhVZtQHVCe+ssKd/4/fSpuoru8BQA=",
2482
+ "debug_symbols": "vb3bjuzKca77LvNaF5VxyINfZWHBkL1kQ4AgGbK8gQ3D774rg2R+McbYlc3u6rluPD/bPeJjJRk/T0nyv3/7P3/6l//693/+81//7W//+ds//a///u1f/v7nv/zlz//+z3/527/+8R9//ttfn//X//7tMf/H6L/9k/7htzF++yf/w2/l8Tj/W87/yvlfPf9r53/9/G89/9vO//bzv2e9ctYrZ71y1itnvXLWK2e9ctYrZ71y1itnPTnryVlPznpy1pOznpz15KwnZz0568lZT896etbTs56e9fSsp2c9PevpWU/PenrWs7OenfXsrGdnPTvr2VnPznp21rOznp31/KznZz0/6/lZz896ftbzs56f9fys52e9etarZ7161qtnvXrWq2e9etarZ7161qtnvXbWa2e9dtZrZ7121mtnvXbWa2e9dtZrZ71+1utnvX7W62e9ftbrZ71+1utnvX7W62e98azX5n/L+V85/6vnf5/1SpngF9QLniWLTnjWLPUPv8lshtImPP9YHhOefywy4fnH4hP6BeOE2QIHlAvkgudSaJlgF/gF9YJnZZ2K2QoHjBPmRq86Yf7xLDg3c51LOLdz7RPGCXNLP6Bc8FwMm4q5EdssOLdam3Xm5mrzJ8f2OX9pbKAB/YJxQmyjAeWCudbmP4/NNMAu8Atm5bmosakGzMpzwWJjnRBba0C5QC7QC+yCZ+U67XObPaBd0C8YJ8zt9oBygVygF9gFV+V2VW5X5XZVblflflXuV+V+Ve5X5X5V7lflflXuV+V+Ve5X5XFVHlflcVUeV+VxVR5X5XFVHlflcVUeZ2V9PC4oF8gFeoFd4BfUC9oF/YKrcrkql6tyuSqXq3K5Kpercrkql6tyuSqXq7JcleWqLFdluSrLVVmuynJVlquyXJXlqqxXZb0q61VZr8p6Vdarsl6V9aqsV2W9Ks+9Q7UJ5QK5YFbuE+wCv6Be0C7oFzwrt/nPZw8eUC6QC2bU+QS7wC+Y//zZjDrbqs2Cs636XNTZVl0mPP+4zz+ebXVAu6BfME6YbXXAczFGmSAX6AV2wbPymIrZVge0C56Vh04YJ8y2OqBcMCvPhZ9NNNqEGdSPufSzZw6aTXNSmTSrz7Z5HslMmvH/mAsc+X9QXdQWReXpGOMkezwWlUWySBfFLkYm+aLYyeikWW/uVGy2ykllkSzSRbbIF9VFbVFftByyHLIcEo4xSRdNx9zD2eyck+pFsy+eR2CT4u/mL1JfVBe1RXNZZP7e2QsHzWY4qSyayzJ3jTb74SRb5IvCMZfe2qK+aFzkj0VlUTj6JF1ki3zRGlNfY+prTH2NaV1jWteY1rXe6lpvda23utZbXY66HHU5avyOuT7aY1FZJIvWemu2yBfVRW1RXzSutdofi8oiv9Z09Fasy+itoOitg8oiudbl0EW2yBfVa11Glx3UF42T/HGtQX+URbLoWoP+sEW+qF4UPaPPX+TRAfOgyaMDDpJFusgW+aJZT21SW9QXjYs0HHVSWSSLwjGXPrrnIF9UF7VFfdG4KLpnHsZ5dM9BskgXReU5ktEBMQaxPccviu35oHFRXSNU1wjVNUKxPcevjO35IF+0Rii25/i9sT0fNC6K7Tl+R2zPB8miNUJtjVBbI9TWCMX2HL8ytueDxkV9jVCXawxiK7Y5BrEVB8VWfFBZJIt0kS3yRXVRW7Qc43LUx2NRWSSLdJEt8kV1UVvUFy1HWY6yHGU5ynJEB8zD/RodcJAsir9rk2yRL6qL2qK+aC6LP7eSGh1wUFkki6bDbZIt8kXT4T6pLeqLwjFt0QHzyL9GB8wDrBodcJAuskW+qC6ajlom9UXjoth/HFQWySJdZIt8UV20HL4cvhx1OaLf6hyh6LeDdFE45ghFvx1UF7VFfdG4KPrtIF206rVVL3qr1kltUV80LoreOqgskkW6yBb5ouXoy9GXoy/HWI6xHGM5xnKM5RjLMZZjLMdYjnE52uOxqCySRbrIFvmiuqgt6ouWoyxHWY6yHGU5ynKU5SjLUZajLEdZDlkOWQ5ZDlkOWQ5ZDlkOWQ5ZDlkOXQ5dDl0OXQ5dDl0OXQ5dDl0OXQ5bDlsOWw5bDlsOWw5bDlsOWw5bDl8OXw5fDl8OXw5fDl8OXw5fDl+Ouhx1Oepy1OWoy1GXoy5HXY66HHU52nK05WjL0ZajLUdbjtXnbfV5W33eVp+31edt9Xlbfd5Wn7fV5231eVt93laft9XnbfV5W33eVp+31edt9Xlbfd5Wn7fV5231eVt93laf99XnffV5X33eV5/31ed99Xlffd5Xn/fV5/3o8+eRdD/6PKgsiso+yRb5olm5lUltUV80LoruPqgskkW6yBb5ouWQ5ZDlkOXQ5dDl0OXQ5dDl0OXQ5dDl0OXQ5bDlsOWw5bDlsOWw5bDlsOWw5bDl8OXw5fDl8OXw5fDl8OXw5fDl8OWoy1GXoy5HXY66HHU56nLU5ajLUZejLUdbjrYcbTnacrTlaMvRlqMtR1uOvhx9Ofpy9OXoy9GXoy9HX46+HH05xnKM5RjLMZZjLMdYjrEcYznGcozLMR6PRWWRLNJFtsgX1UVtUV+0HGU5ynKU5SjLUZajLMfq87H6fKw+H6vPx+rzsfp8rD4fq8/H6vOx+nysPh+rz8fq87H6fKw+H6vPx+rzsfp8rD4fq8/H6vOx+nysPh+rz8fq83H0uU+SRbooHG2SL6qLwjEm9UXjoujzPh3R5weFo0/SRbZoOvq81xl9flBbNB3dJo2Los8PKotkkS6yRb4oHPNXRp8f1BeNi6LP+/y90ecHySJdZIvCIZPqorZoOsZj0rgo+vygskgW6SJb5IvqorZoOfpyjOUYyzGWYyzHWI6xHGM5xnKM5Yg+n1eFn5dxH2ABBYyaGhgF4l50dPGB0cYnFjAq1EAFDXQwirW4Nx7rqQcqaKCDFWxgLOSBY2H06IkFFFBBAx2sYAOxRbOOEXf0593IeYX8iQoa6GAFG9jBsXB26IUFDFusLFfQQAcr2MAOjoX1ARYQW8VWsVVsFVvFVrFVbA1bw9awNWwNW8PWsDVsDVvD1rF1bB1bx9axdWwdW8fWsXVsA9vANrANbAPbwDawDWwD21i2mHByYQEFVNBAByvYwA5iK9gKtoKtYCvYCraCrWAr2Ao2wSbYBJtgE2yCTbAJNsEm2BSbYlNsik2xKTbFptgUm2IzbIbNsBk2w2bYDJthM2yGzbE5NrKkkCWFLClkSSFLCllSyJJClhSypJAlhSwpZEkhSwpZUsiSQpYUsqSQJYUsKWRJIUsKWVLIkkKWFLKkkCWFLClHlszdVzmy5MACTls5JlxN27z9VGKyzYUOVrCBHRwLI0tOLKCA2Aa2gW1gG9jGskmkRumBs8K8C1WOGTonVrCBHRwLIx8kikU+nCiggmEbgQ5WcNrmDZcSc3cuHAsjH+YknycWUEAFp01jISMJ5s2YEtN8LhwLIwlOjLrHDLmoWwOjbgxfJMGJDlYwbPGLIwlOHAsjCU6cNovfFu1vsbzR/haLE+1vx0S9qfDjbxvYwbEw2v/EAgo4bR4DFe1/Yl+bRnT3gdHdJ7LtRHefqKCBDlawgdgqtuhujx8f3X2igAoa6GAFG9jBsbBj69g6to6tYzu6+8AKNjBsFjgWRnefGLbYuKK7T1TQQAcr2MAOjgtjktKFBRRQQQMdrGADO4itYCvYCraCrWAr2Aq2gq1gK9gEm2ATbIJNsAk2wSbYBJtgi3yY99BKTHG6MPY4PdCvswM9ziQObGAH15lETG+6sIACKmggNsNm2AybYXNsjs2xOTbH5tgcm2NzbI6tYqvYKraKrWKr2Cq2iq1iq9gatoatYWvYGraGrWFr2Bq2hq1j69g6to6tY+vYOraOrWPr2Aa2gW1gG9gGtoFtYBvYBraxbMcsrRMLKKCCBjpYwQZ2EFvBVrAVbAVbwVawFWwFW8FWsAk2wSbYBJtgE2yCTbAJNsGm2BSbYlNsio0sMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wscbLEyRInS5wscbLEyRInS5wscbLEyRInS5wscbLEyRInS5wscbLEyRInS5wscbLEyRInS5wscbLEyRInS5wscbLEyRInS5wscbLEyRInS5wscbIkJso9D/ADOzgWxhnKiQUUUEEDHawgNsNm2BybY3Nsjs2xOTbHFtcq5kSlEnP1LhwL42zmxGmrEiigggY6WMGwlcAOjoVxNjNnI5WYuHehgAoa6GAF28I4WanHA0sCKmiggxWMYjWwg2NhnKycWEABFTRwFmsxvnEuEhjz+S4soIAKzmJzln2JSX0XVrCBYWuBY2Gci5wYth4ooILT1kMc5yLzxtgTp23e53piAzs4Fsa5yIkFnLZ5Z6vEFMELDXSwgg3s4FgY5yInFhCbYlNsii2uVfQYvkiCEzs4bXF/KOYMXlhAARU00MEKNrCD2BybY4skGLHokQQnGuhgBRvYwbAdT+o9wKfteZIcKKCCBjpYwQZ2cCycSaBxdbG2AoYtNpimoIEORt34FW0s7A+wgFE31mZX0EAHK9jAaYvn+mKK4YkzFC4soIAKGuhgBRuIbSxbzDa8MGwaKGDYLNBAX1iiwvHAZfxtDTTQwQrGkrXADo6F8gBjyUaggAoaOG1x5TRmEV7YwA6OhfEo4onTJvHjZ89fqKCBYTueLq1gAzs4FtoDLKCAChqIzbAZNgtbjJmNhf4ACxi2HqiggQ5WsIFhi1H3sbA+wFksrivHvEGNy8YxcfDCsTCa98S5kHFdOSYPXqiggXMhNTbEuRu/sIEdZHV3Vne09Ims7s7q7qzuaOkTwxabcrT0iR2M3xYDFS19YgHjt8VARUufaKCDFWxgB8eFMbHwwgIKqKCBs25cKI8pghpXx2OO4IUOVrCBHZyLY3PUY6bghQUUMGw10EAHw9YCG9jBsTD6+MQCChi2HmiggxUMxfGMd/xtDFS0k0tgAQVU0EAHpyIuc8esvgs7OBZGO/nxXHkBBQxbDFT024kOVrCBHRwLowvj2mvM8btQQAVDEasweshjzKKHTlTQwPnP4uwgJuxd2MAOjoXRQydOWz0eqRdw2uIAOSbpaTv+toGzbosVEN0SGBP1LiyggAoa6GAFG9hBbAVbCZsFChi2eE1AtN6JvjDaKY7MY/adtuMVAgY6WMFYsh7YwbEwGufEuWRxvB7T8C5U0EC/xjem4l3YwA6OhbEDPDFsJVBABW1htF6P4Yse6jEk0UMndnAsjB46sYBhi5GMHjrRQAfDFqMTPXRiB8M28yGmz11YQAEVNNDBaRsxOrEnO7GDY2G0Xo91HD0UB/QxHe7CsTB66MQCCqiggQ5WENvANi6bPKIv5inBExvYwfjb+Z6EmAN3YQEFVNDA55LZI4rNXdKFDezgmBivwZg9dGEBZWINVNDAsIVYwjYCp20eQUtMnbtwLJyddWEBBZy2EmM2O+tCByvYwA6OhfYACyggNsNm2CxsMWbWwA6GLcbMH2ABBQxbDN/sWDteUTI79sIOjoWzYy8s4KwrUWx27IUGOhi2eDNKbWAHwxZrsz3AAoYt1nFT0EAHp01jIWdvWrwmJSbJXVhAAWfdeF1KTJIzjfGde0jT480tFWxgB8MWv3g8wAIKGLb4bbOlzWJ5Z0tbvHMlZsaZxeLMljY7/nZcGDPjLiyggAoaGLYRWBfO7rY5K0JiituFBs5/5sdrairYwA6OhdHdJxZQQAUNxCbYBFt0d7wVJqa4nRjdfWLY4rdFd5+o4CxW47dFm84LjRJz1ayGItr0RAXnQs4jG4m5ahdWsIEdHAujTU8MWyxvtOmJCho4bXMvLTFX7cIGTluLHxTNe2A074kFFFBBA8MmgRVsYAfjt8XGFc17YgHDFuMbzXuigVE3xjfatMUvjjZtsbKiTU9UcFbo8eOjTU+sYAM7OBZGm544bT1+fLTpiQoayLoYrIvBuhisi7HWhTweYAEFVNDAtS5irtqFDexg/LZ451N5gAWM32aBCsaYxRuioqVP7GDUjRdGRUufWMCoOwIVNNDBCjawg9M2D6kk5qpdWEABw1YDZ4URYxY74QOju0+MCvGLo7tPVHAu74hfHN19YgUb2MGxMLr7xLDFkkV3n6iggWGLVRgvtXrEb4vXWp0ooIIGOlgnRt14L9uJHRwL4wVt8z00EvPPLhQwbLGO42VtJzo4bSXE8da2OI6K+WdeYpOLd7cdGK9vO7GAAio4bXGQE/PPLqxgAzs4Fo4HWEABFcQ2sA1sI2wxZqOD48KYf+bzXSgS888uFFBBAx2s4LTFm+Ni/tmF0zYveUnMP7uwgAJGXQusYAM7GHXjV8QLFE8soIAKGjhtcRwVM80ubGAHx8J4veKJBRRQQQOxKTbFFq9djGO5mH92Yrx8MQ7rYv7ZhQJGhdm8MXvM41AtZo9dKKCCsWQt0MEKNjCWbASOhdHzJxZw2uLFezF77EIDHaxgA6ctDiJj9tiJ0fMnFjBs8eOj50800MEKNrCDY2H0/IkFxNaxdWzR8xZjFj1/YgM7GLaZRjF77MICCqiggWGLUY+eP7FdGJPD/HivYTRvHBXHNLALK9jAuZDzQqPENLATo3lPLOBcyHkNT2Ia2IUGOrhWd0wDu7CDa3XHNLALCyhg2GqggQ7Gb+uBs268HTAmfF1YwFm3xjJE854YdWMko3lPrGADOzgWRvOeGLYYh2jeExU00MEKNrCDY2G0/4nYHJtjc2yOzbE5Nsfm2Cq2iq1iq9gqtoqtYqvYKraKrWFr2Bq2hq1ha9gatoatYWvYOraOrWPr2Dq2jq1j69g6to5tYBvYBraBbWAb2Aa2gW1gG8sWE74uLKCAChroYAUb2EFsBVvBVrAVbAVbwVawFWwFW8Em2ARbpEac1cWErwsNDJsGVrCB0xZnSTHh68TIkhOnLc5mYsLXhQoa6GAFG9jBsTCy5ERshs2wRWrEaWpM4vIW4xD5cGIBBYwKNdBAByvYwFjeFjgWRj6cWEABFTTQwQo2EFvF1rBFKLRYsREKcd4dM7cudLCCDezgVMTJdrx77cICCqiggQ7GniGWLHr+xAIKqKCBDs5F77G6o+dP7OC4MKZ2XVhAARU00MEKNrCD2Aq2gq1gK9gKtoKtYCvYCraCTbAJNsEm2ASbYBNsgk2wCTbFptgUm2JTbIpNsSk2xabYDJthM2yGzbAZNsNm2AybYXNsjs2xOTbH5tgcm2NzbI6tYqvYKraKrWKr2Cq2iq1iq9gatoatYWvYGraGrWFr2Bq2hq1j69g6tiMqaqCBDkaxmWcxMcvjulFMzLqwgR0cF8bErAvnMsTVpJiYdaGCBoZNAyvYwLBZ4FgYPX9iAQVU0MCweWAFG9gXRqPH5aaYmOVxESpmWPmcMy0xw+pCAx2sYAP7fJN1DNTxUuvAeK31iQWUibEM8XLrEw30iTFQ8YrrExvYwbHQH2ABwxYD5Qoa6GAo5io8XgIWb/KS4zVgF1tiT1wTt8Q98YCPlzqfXBInb0nekrwleUvyluQtyVuSV5JXkleSNybhx9tv5Hjp18XxN/34G01siT1xTdwSx7LFUdbxErCT49GeeIWKHC8Cuzi8cSh2vAzsYksc3miI45VgF7fEPfGA/ZG4JJbEh9eDLbEnrolb4p54wOcLog8uiSVx8tbkrclbk7cmb03emrwteVvytuRtyXu+Cjr64nwZ9MElsSTWxJbYE9fELXFPnLwjeUfyjuQdyTuSdyTvSN6RvCN5B97jlV/Hdni89Ovk8khcEktiTRzrLiZMHC8Au7gmbomP5XkED1geiRmH43VgF2tiS+yJa+KW+PBK8ID1kbgkTuOjaXxSL4/Uy8frvi5O42NpfCyNj6XxsTQ+lsbH0vh4Gh9P4+NpfDyNj6fx8TQ+nsbH0/h4Gh9P41PT+NQ0PjWNT03j09L4tDQ+LY1PS+PT0vi0ND4tjU9L49PS+LQ0Pj2NT+rfkfp3pP4dqX9H6t+R+nek/h09jU9P4zPS+Iw0PiONz1jjo8cbvS4uiSWxJl7jo8fLvi6uiVviNT56vAbs5PJIvMZHjzeBXayJLbEnrolb4jU++igDlkfikrjzGyWNj6bx0TQ+msZH0/hoGh9N46NpfDSNj6bx0TQ+lsbH0vhYGh9L42NpfCyNj6XxsTQ+lsbH0vh4Gh9P4+NpfDyNT03jU9P41DQ+NY1PTeNT0/jUND41jU9N41PT+LQ0Pi2NT0vj09L4tDQ+LY1PS+PT0vi0ND4tjU9P49PT+PQ0Pj2Nz0jjM9L4jDQ+I43PSOMz0viMND4jjc9I4zMYn/J4JGZ8ykMSa2JL7Ilr4paY8SkPxqeUR+KS+DjOacGW2BPXxMfxVQ/uiQd8fkzl4OP4OX7vcYx9sia2xMfYanBN3OA4EyqxOHEmdOJYGGdCJ84zoRKLEmdCJypo4DwTmg/waMw0urCBHRwL6wMsoIAKGoitYqvY4lNcEqMSH9qSWMHxqa0TG9jBuWQSKzc+uXViAQVU0MCwxVDH57dObGAHx8L4DNeJBRQwzlWfh9Qqx4e1amABBVTQQAcr2MAOjoUF2/G5rR4ooIIGOljBBnZwLDw+wHUgNsEm2ASbYBNsgk2wCTbFptgUm2JTbIpNsSk2xabYDJthM2yGzbAZNsNm2AybYXNsjs2xOTbH5tgcm2NzbI6tYqvYKraKrWKr2Cq2iq1iq9gatoatYWvYGraGrWFr2Bq2hq1j69g6to6tY+vYOraOrWPr2Aa2gW1gG9gGtoFtYBvYBraxbOdH+g4soIAKGuhgBRvYQWwFG1miZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFmiZImSJUqWKFliZImRJUaWGFliZImRJUaWGFliZImRJTEdqs7nXTSmQ10oYNhaoIEOxpGjBTawg2NhZMmJBRRQQQMdxCbYBJtgU2yKTbEpNsWm2BSbYlNsis2wGTbDZtgMm2EzbIbNsBk2x+bYHJtjc2yOzbE5Nsfm2Cq2iq1iq9gqtoqtYqvYKraKrWFr2Bq2hq1ha9gatoatYWvYOraOrWPr2Dq2jq1j69g6to5tYBvYBraBbWAb2Aa2gW1gG8sWk6QuDFsNFFBBAx2sYAM7OBYeWXIgtoKtYCvYCraCrWAr2Ao2wRYdO9/8oDHpqM4H2zQmHZ0YvXliAQVU0EAHK9hAbIbNsTlLFv12YgOjwggcC6PfTpzLO5+o05h0dKGCBjpYwQZ2cNrmjG2NSUcXFlDAsGmggQ5WsIFhi58Z/XZg9JvG6ES/nTj/1mLJolsOjG45sYACKmiggxVsILaxbDG96MIopoFRzAKjmAc2MIqNwLEwmuHEAgqooIEOTpvH4kQzzFnNGrOH6py0rDF7qHosWexCPRYndqEnGuhgBRvYF8bOcs4+1pgRdKGCBjpYwbYwWm9O9dKYz1M9flu004kN7OD8bfFh7pjPc2EBBVTQQAcr2MAOYqvYKraKrWKr2Cq2iq1iq9gqtoatYWvYGraGrWFr2Bq2hq1h69g6to6tY+vYOraOrWPr2Dq2gW1gG9gGtoFtYBvYBraBbSxbzBO6sIACKmiggxVsYAexFWwFW8FWsBVsBVvBVrAVbAWbYBNsgk2wCTbBJtgEm2ATbIpNsSk2xabYFJtiU2yKTbEZNsNm2AybYTNshs2wGTaypJEljSxpZEkjSxpZ0siSRpY0sqSRJY0saWRJI0saWdLIkkaWNLKkkSWNLGlkSSNLGlnSyJJGljSypJEljSxpZEkjSxpZ0siSRpY0sqSRJY0saWRJI0saWdLIkkaWNLKkkSWNLGlkSSNLGlnSyJJGljSypJEljSzpR1SUQAMdrGADOzgWHlFxYAEFxFawFWwFW8FWsBVsgk2wCTbBJtgEm2ATbIJNsCk2xabYFJtiU2yKTbEpNsVm2AybYTNshs2wGTbDZtgMm2NzbI7NsTk2x+bYHJtjc2wVW8VWsVVsFVvFVrFVbBVbxdawNWwNW8PWsDVsDVvD1rA1bB1bx9axdWwdW8fWsXVsHVvHNrANbAPbwDawDWwD28A2sI1lG48HWEABFTTQwQo2sIPYyJJBlgyyZJAlgywZZMkgSwZZMsiSQZYMsmSQJYMsGWTJIEsGWTLIkkGWDLJkHI3eA0M8z2bG0egjsIACKmigL4yOnVNaNaadXaiggQ5WsIEdHAujY0/EVrFVbNGQcyanxmy0GhMTYjLaidGQJxZQQAUNdLCCDcTWsHVs0XotxiyarMfyRpOd2MGxMJrsxAIKqKCBDmIb2Aa2cdksZpDVOQHaYqJYnVP8LeaJXVhAARU00MEKNrCD2ASbYBNs0QwjFjKa4UQHK9jADo6FsWOd054tppZd+LS1OXHHYmLZhQY6WMEGdnAsnP12YQGxGTbDZtgsbLGyrIEdHAv9ARZQwLDFOLiBYauBFWxgB8fC+gALKGDYRqCBDlawgR0cC9sDnLYSozP7+EIFDXSwgg3s4Fg4+/hCbB1bx9ajWGypg015sCkPNuVB4wwaZ9A4g8YZNM6gccZqnJhudmEBBVRwNU7MNLuwgg3s4GqccoTCgatxyhEKB65NOSabXehgBRvYwdU4Mc3swgIKiE2wCTbBJqtx4hVbF67GiVdsXVhAARVcjVOOUDhwNU7RBnZwNU6xB1hAARVcjVPMwQo2sIOrcYo/wAKuTTnmy11ooIMVbGAHV+PEfLkLC4itYqvY6uqhmBnXSgzq0egHChgVYpM7Gv1AByvYwA6OhUejH1hAAbF1bB1bD5sHNrCDY+F4gAUUUEEDHcQ2sI1lixl3bd68sZhbd4xZzK27sIJrdGJu3YVrdGJu3YUFFFBBAx2sILaCrWCTNToxt+5CARU00MEKNpDRkbUuYm7dhdgUW3T3MZLRx3POqcV8uROjj08soIAKGuhgBWN5e2AHx8Lo4xMLKKCCBjoYthHYwA5O25xoajFf7sICCqiggQ5WsIEdxNawNWzR3XPWqsUcuCaxWqKPTxwLo49PLKCAChroYAWxdWwdW3SsxHqL3pQYvujNExvYwXFhzGu7sIACKjj/2bzxZzEVrc27fRZT0S40cC7OvPFnMRXtwrk4872cFlPRmkbdaL0Do/VOLKCA0zbf4WkxFe1CB6fNYiGj9U6ctnmLz2IqWrNYyOgLi8WJvjgwtmqPYrFVn6iggQ5WsIEdHAtjqz4RW8VWscVG67HosdGeOBbGRntiAQVU0EAHK4itYWvYYlP2GL7YaD1WbGy0Jzawg2Nh7Fvm/UKLOU9tXiewmPN0oYEOVrCBHRwLY39xYgGxFWwFW2yT8wKFxZSmE2ObPLGAAipooIN1YaT9fOeoxYylCwVU0EAHK9jADo6Fhs2wGbYI/vlmGIsJSRd2cCyM4G8xUNEM85lgi6lHFzpYwQZ2cCyMZjixgAJiq9gqtmiGFuMbzTDf9mIxs+hCARU00MEKNrCDY2HH1rH1ZYvJNW0+1GIxjabNSzIWE2bafBTFYsLMhQY6WMEGdnAsjC31xAJiE2yCLVZ3XIeJOS4nxuo+sYACKmhgFCuBY2Gs4xOjmAUKqKCBDlawgR0cC2MjOBFbw9awNWwNW8PWsDVsDVvH1rF1bB1bx9axdWwdW8fWsQ1sA9vANrANbAPbwDawDWxj2WLCzIUFFFBBAx2sYAM7iK1gK9gKtoKtYCvYCraCrWAr2ASbYBNsgk2wCTbBJtgEm2BTbIpNsSk2xabYFJtiU2yKzbAZNsNm2AybYTNshs2wGTbH5tgcm2NzbI7NsTk2x+bYKjaypJIllSypZEklSypZUsmSSpZUsqSSJZUsqWRJJUsqWVLJkkqWVLKkkiWVLKlkSSVLKllSyZJKllSypJIllSypZEklSypZUsmSSpZUsqSSJZUsqWRJJUsqWVLJkkaWNLKkkSWNLGlHlvRABys4FfOlQRaTdk6MADlxKuZLeCwm7Vyo4FTMF/ZYTM9p8xFci+k5F46FERXzJTwW03NOnB3bH/EHs9/6I5Zs9tuFAsbfxj+b/dbjclPMcbmwTiyBDewLPTBGZzbDibMZLiyggAoa6GAFG4itYmvYWvyz+PGtgR2Mfxa/uD/AAgqooIEOVrCBHcQ2sA1sA9vANrANbAPbwDawjWWLb5BdOG3zWVqLNxtdqKCBDlawgR0cC+cGfiG2gq1gK9gKtoKtYCvYCjbBJtgEm2ATbIJNsAk2CVsJHAv1ARYwbBqooIEO1oW2Dk67Gehg/K0HNrCDY6E/wAIKqKCBDmJzbI7NsVVsFVvFVrFVbBVbxVaxVWwVW8PWsDVsDVvD1rA1bA1bw9awdWwdW8fWsXVsHVvH1rF1bB3bwDawDWwD28A2sA1sA9vANpYtJopcWEABFTTQwQo2sIPYCraCrWAr2Aq2gq1gK9gKtoJNsAk2wSbYBJtgE2yCTbAJNsWm2BSbYlNsik2xKTbFptgMm2EzbIbNsBk2smSQJYMsGWTJIEsGWTLIkkGWDLJkkCWDLBlkySBLBlkyyJJBlgyyZJAlgywZZMkgSwZZMsiSQZYMsmSQJYMsGWTJIEsGWTLIkkGWDLJkkCWDLBlkySBLBlkyyJJxZMkIrGADp2I+FmMxCebCAk7F/CirxSSYPj9vYDEJ5kIHKzgVcR08JsH0uKAdk2D6vHTt8TqmC6dtXrr2eBlTn9erPd7FdOG0zffze7yJqc8HSjym0ZwY+TCfLfGYOxPL4DF35kIF5z/zEEfPz4dPPObDdI9liJ4/UUAFDXSwgm1hdKyHODr2xArG38bPjI49cSyMjj2xgAIqaKCDFcRm2AybY3Nsjs2xOTbH5tgcm2NzbBVbxVaxVWwVW8VWsVVsFVvF1rA1bA1bw9awNWwNW8PWsDVsHVvH1rF1bB1bx9axdWwdW8c2sA1sA9vANrANbAPbwDawjWWLSTAXFlBABQ10sIIN7CC2gq1gK9gKtoKtYCvYCraCrWATbIJNsAk2wSbYBJtgE2yCTbEpNsWm2BSbYlNsZEkhSwpZUsiSQpYUsqSQJYUsKWRJIUsKWVLIkkKWFLKkkCWFLClkSSFLCllSyJJClhSypJAlhSwpZEkhSwpZUsiSQpYUsqSQJYUsKWRJIUsKWVLIkkKWFLKkkCWFLClkSSFLCllSyJJClhSypJAlhSwpZEkhSwpZUsiSQpYUsqSQJYUsKWRJIUsKWVLIkkKWFLKkkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVClghZImSJkCVKlihZomSJkiVKluiRJT2wgg2civkwncfbqi4s4Do70GKgg7Pu/ICVx7ygCzs4FkZqnFhAARU00EFsgk2wCTbFptgUm2JTbIpNsSk2xabYDJthM2yGzbAZNsNm2AybYXNsjs2xOTbH5tgcm2NzbI6tYqvYKraKrWKr2Cq2iq1iq9gatoatYWvYGraGrWFr2Bq2hq1j69g6to6tY+vYOraOrWPr2Aa2gW1gG9gGtoFtYBvYBraxbPGKqgsLKKCCBjpYwQZ2EFvBVrAVbAVbwVawkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkSVGlhhZYmSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4mSJkyVOljhZ4keW1IlHlhxYwDgcL4EGOljBBnZwLDxOYQ4soIDYBraBbWAb2Aa2sWz18QALKKCCBjpYwQZ2EFvBVrAVbAVbwVawcTulFmwFW8Em2ASbYBNsgk2wCTbBJtgEm2JTbIpNsSk2xabYFJtiU2yGzbAZNsNm2AybYTNshs2wOTbH5tgcm2NzbI7NsTk2x1axVWwVW8VWsVVs9boz6DEJ8cIOTtuceu8xCfHCAs66Lf42ouLECjawg2NhRMWJBRRQQWwdW8fWsXVsHdvANrANbAPbwDawDWwD21i2mDfY59R7j3mDF1Yw/lkP7OBcyDkZ3mMK4YUFnAs5Jw55TCG80EAHK9jADo6F0f4nFhCbYBNsgk2wCbZo//k+BY/3fp0Y7X9iAQVU0EAHK9hAbIrNsBk2w2bYDJthM2yGzbAZNsfm2BxbtH+PrSTa/0QHKxi22GCi/U8cC6P9Tyxg/LMW2MGxMPq4j8ACCqiggQ5WsIEdHAs7to6tY+vYOraOrWPr2Dq2jm1gG9gGtoFtYBvYBraBbWAby3ZMuzyxgAIqaKCDFWxgB7EVbAVbwVawFWwFW8FWsBVsBZtgE2yCTbAJNsEm2ASbYBNsik2xKTbFptgUm2JTbIpNsRk2w2bYDJthM2yGzbAZNsPm2BybY3Nsjs2xOTbH5tgcW8VWsVVsFVvFVrFVbBVbxVaxkSWdLOlkSSdLOlnSyZJOlnSypJMlnSzpZEknSzpZ0smSTpZ0sqSTJZ0s6WRJJ0s6WdLJkk6WdLKkkyWdLOlkSSdLOlnSyZJBlgyyZJAlgywZZMkgSwZZMsiSQZYMsmSQJYMsGWTJIEsGWTLIkkGWHBM358tQ/Ji4eeJYGAEyn3LwY7bmiQpOxXxxih+zNU+sYCha4FMx5ifAPGZrnjgD5MICCqiggQ5WsIHYFJthM2yGzbAZNsNm2AybYTNsjs2xOTbH5tgcm2PzsMVq8Q6OhfUBhi1WQBVQQQOjbqzNFhViZbUCCqhgVOiBsbyxRc1QGCWWd4bChR0cC2coXFhAARU00EFsPWwS2MGxcDzAAgqooIEOVhDbwDYuW43JmGM+mlNjMuaFAipooIMVbGAHx8KCrWArYdNABQ10sIIN7OBYKA+wgNgk6lpgVKiBUaFNjJ4/sYACxvL2QAMdrGADOzgWRs+fWEABsRk2w2bYDJthi56fj/HUmO954bRJDEn0/IkKTpvEQEXPn1jBaZMYvuj5E8fC6PkTCyigggY6WEFsFVvF1rA1bA1bw9awNWwNW+SDxPBFPmhstJEPB0Y+nFhAARU00MEKNhBbxzawDWwD28A2sA1sA9vANrCNZYv5nhcWUEAFDXSwgg3sILaCrWAr2Aq2gi3yYU5arzHf88JQaOBYGKEwX95SY5LnhQIqaKCDoaiBDezgWBgBcmIBBVTQQAexRVTMmfU1pnNeWEABo+4INNDBCjawg2Gbm31M57ywgNNmsQIiKk400MEKNrCDY+FxSfFAAx2sYAM7OBa2B1hAAbE1bA1bw9awNWwNW8fWsXVsHVvH1rF1bB1bx9axDWwD28A2sA1sA9vANrANbGPZztmaBxZQQAUNdLCCDewgtoKtYCvYCraCrWAr2Aq2gq1gE2yCTbAJNsEm2ASbYBNsgk2xKTbFptgUm2JTbIpNsSk2w2bYDJthM2yGzbAZNsNm2BybY3Nsjs2xOTbH5tgcm2OLSxHzNkI9ZmueKGBcaj/+1kAHI5g0MCJoRnzMy7xwBt58AqnGvMwLI/BGoIEz8OZtjxrzMi9s4Ay8+dhRjXmZJ8bxw4kFFFBBAx0MW/yKOH44sYNjYRw/ePy2OH44UUAF7cKYVTnmm61qzKq8UEEDHaxgAzs4Fsbe/0RsBVvBVrAVbAVbwVawFWyCTbDFXnpO/awxEfJCBad4Tv2sMRHywgo2sINjYey7TyyggApiM2yGzbAZNsPm2BybY3Nsjs2xOTbH5tgcW8VWsVVsFVvFVrFVbBVbxVaxNWwNW8PWsDVsDVvD1rA1bA1bx9axdWwdW8fWsXVsHVvH1rENbAPbwDawDWwD28A2sA1sY9liIuSFBRRQQQMdrGADO4itYCvYCraCrWAr2Aq2gq1gK9gEm2ATbIJNsAk2wSbYBJtgU2yKTbEpNrLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEyBIjS4wsMbLEjiyxwAo2MBTz3NSPADmwgKEYgQoa6GAFGzh/0PzgRI3ZjydGgJxYwGlrIY4AOdHAaZtTIWrMfhzzjnmN2Y8XdnDaetSNADmxgAIqaKCDFWxgB7EpNsWm2BSbYosAmbffa8x+HD2GLwLkxA6OhREgJxZQQAUNdBCbYTNshs2xOTbH5tgcm2NzbI7NsTm2iq1iq9gqtoqtYqvYIkDmO7dqzH68cNrmK/9rzH68sIACTtuIlRUBMmJlRYCcWMEGdnAsjAA5MWyxVUeAnDhPd+bbG+ox+/HECjawg2Ph8VaIAwsooILYBraBbWAb2MayHbMfTyyggAoa6GAFG9hBbAVbwVawFWwFW8FWsBVsBVvBJtgEm2ATbIJNsAk2wSbYBJtiU2yKTbEpNsWm2BSbYlNshs2wGTbDZtgMm2EzbIbNsDk2x+bYHJtjc2yOzbE5NsdWsVVsFVvFVrHF5YW4/sDsx8rsx3rMfozrD8x+rMx+rMfsx7heHa9gvFDBCJAR+Kz7vExfgnviAc+0WFwSS2JNbIk9cU2cvD15e/KO5B3JO5J3JO9I3pG8I3kH3mMeZFyuPuZBnjgHPa7pHPMgT5yDHldvjnmQB5ZjCeMvSkksiY8ltGBL7Ilr4pa4Jx6wPBIfXg+WxJrYEh/eWH6piVvinnjAevxND+6JB2yxbHFvNqY0LpbEmtgSe+KauCXuiQfsyevJ68nryevJ68nryevJ68nryVuTtyZvTd6avDV5a/LW5K3JW5O3Jm9L3pa8LXlb8rbkbcnbkrclb0velrw9eXvy9uTtyduTtydvT96evD15e/KO5B3JO5J3JO9I3pG8I3lH8o7kHXhjEuXiklgSa2JL7Ilr4pa4J07ekrwleUvyluQtyVuStyRvSd6SvCV5JXkleSV5JXkleSV5JXkleSV5JXk1eTV5NXk1eTV5NXk1eTV5NXk1eVNe9ZRXPeVVT3nVU171lFc95VVPedVTXvWUVz3lVU951VNe9ZRXPeVVT3nVU171lFc95VVPedVTXvWUVz3lVU951VNe9ZRXPeVVT3nVU171lFc95VVPedVTXvWUVz3lVU951VNe9ZRXPeVVT3nVU171lFc95VVPedVTXvUzryy4Jm6JD9e8RNDPjDq4JD5cLVgTW+LD1YNr4pa4Jx6Lx5lRB5fEklgTW2JPfHhHcNSf76Kt48ii+a7ZOo4sOlkSa2JL7Ilr4pa4Jz6889hpHFl0ckksiTWxJfbENXFL3BMnryavJq8mryavJq8mryavJq8mryavJa8lryWvJa8lryWvJa8lryWvJa8nryevJ68nryevJ68nryevJ68nb03emrw1eWvy1uStyVuTtyZvTd6avC15W/K25G3J25K3JW9L3pa8LXlb8vbk7cnbk7cnb0/enrw9eXvy9uTtyTuSdyTvSN6RvCN5R/KO5B3JO5J3LG97PB6JS2JJrIktsSeuiVvinjh5S/KW5C3JW5K3JG9J3pK8JXlL8pbkleSV5JXkleSV5JXkleSV5JXkleTV5NXk1eTV5NXk1eTV5NXk1eTV5LXkteS15LXkteS15LXkteS15LXk9eT15PXk9eT15PXk9eT15PXk9eStyVuTtyZvTd6avDV5z7xqwS1xh8+M6sElsSTWxJbYE9fELXFPHL9xTodsjyOjTi6JJbEmtsSeuCZuiXvi5B3JO5J3JO9I3pG8I3lH8o7kHck78JbHI3FJLIk1sSX2xDVxS9wTJ29J3pK8JXlL8pbkLclbkrckb0nekrySvJK8krySvJK8krySvJK8krySvJq8mryavJq8mryavJq8mryavJq8lryWvJa8lryWvJa8lryWvJa8lryevJ68nryevJ68nryevJ68nryevDV5a/LW5K3JW5O3Jm9N3pq8NXlr8rbkbcnbkrclb0velrwteVvytuRNeVVSXpWUVyXlVUl5VVJelZRXJeVVSXlVUl6VlFcl5VVJeVVSXpWUVyXlVUl5VVJelZRXJeVVSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5LySlJeScorSXklKa8k5ZWkvJKUV5rySlNeacorTXmlZ15ZsCeuicM178w1PTJqTrduemTUySWxJNbEltgT18QtcU+cvJK8krySvJK8krxHFlmdfGTLyZrYEh/L2YNr4pa4Jx7wkS0nl8SSWBNb4uS15LXkteS15D2yZX61o+mRLSdL4sM7gi2xJw6vH3/fEvfEAz6y5eSSWBJrYkvsiZO3Jm9N3pq8LXlb8rbkbcnbkrclb0velrwteVvy9uTtyduTtydvT96evD15e/L25O3JO5J3JO9I3pG8I3mPbJlPIjQ9suXkI1vmNh8TjOMLwS0mGF8o4FFcgy2xJ66JW+LjR3nwgI8wObkklsSa2BJ74pq4JU7ekrySvJK8krySvJK8krySvJK8krySvJq8mryavJq8mryavJq8mryavJq8lryWvJa8lryWvJa8lryWvJa8lryevJ68nryevJ68nryevJ68nryevDV5a/LW5K3JW5O3Jm9N3pq8NXlr8rbkbcnbkrclb0velrwteVvytuRtyduTtydvT96evGfIROOfYRI9fhxg+Agei/04wDi5JI7686P1zY98ONkSx++ab4dsfuTDyS1xTzzgIx9OLokPrwZrYkvsiQ/XPPjxo8fn/OjmR4+fbIk98bHMNbgl7omPZZ47Yj96/OSSWBJrYkt8eGNsjx5vscxHj7cYz6PHW4zD0b8tfuPRvydbYk981IzfdfTpnJjd/OiRFr8lPkrssTjxUeITD2sLHvCxxZ9cEktiTWyJPfFRM1zH1txiFI6t+WRJrIktsSeOX9tjBI9d7Mk98YCPXezJJbEk1sRHzVgrR+ecPBbXo3Pmy/BaPTrnZEmsiS2xJ66JG3x0xZwR3+rRFSdr4qOmBXvimrgl7okHfOw1Ty6Jj5oeXBO3xEfNGjzgo1tOLoklsSa2xIe3BR/eHtwS98QDPvaIJ5fEh3cEa2JL7Ilr4pa4Jx7wsYc7xsTTuHkat2MPd/xGT+PmadxqGreaxq2mcatp3I493DFWxx7u+L01jVtN41bTuNU0bi2N29Hvx+9qadxaGreWxq2lcWtp3Foat5bG7ejxOY+/nRNeR/TU0eMn18QtcdQZ0SNHjx989PjJJbEk1sSHN/roOIw+uSZuiXvisbgdOXDy4bXgw+vBmtgSe+KauCU+vDV4wMce9OSSWBJrYkvsiftaF+c02Rjnc5rsySWxJGY8z2myJ3vimrgl7onTeGoazyM3TpbEmtgSe+LKutA0nkdunDzgIzdOLonTerQ0npbG09J4Hrlxckuc1qOl9ehpPR5HzPMpknZOsT151n/ebAuuiVvinnjAkScXl+AYn8iTizWxJfbENXFL3OF21Ikxb8ffx7j1wxu/sUtiTXx4W7AnrokPb4xJ74kHPB6JS2JJrIkP7wj2xDVxS9zX7zqmrpb5drF2TF292BPXxC1xTxzLX6Jm9PXFJbEkPrw9OLwiwZ64Jm6Je+IBR79fXBJLYk2cvJK8krxyeC24Jx6wPhKXxJJYEx/eGAf1xIe3BodXY2y1p//7gKPfi8ZyRr9fLIk1sSX2xDVxg6OXS5xFHNNPL/bENXFL3BMP+Ojlk0tiSZy8NXlr8sY+vcSZxjFt9OL4+zijOKaNXlwTx3LG2cUxbfTiAcdx/sUlsSTWxJbYE9fEyduTtyfv0ctxtnNM/SxxDnJM/bx4LD6mfl58LGcPlsSa2BLHcsb5wjH18+KWuCcObxy3H1NCLy6JJbEmtsSH14Jr4pa4Jz68c0yOKaEXl8SSWBNb4sMbY3X0+MktcU98eGdmHlNCLy6JJbEmtsThjeOTY0roxS1xTxzeOD45poReXBKHN44TjimhFxt89GYcPxxTKsuI33X018mW2BPXxC3xsZyx/dQBt0fiknh6Jfbdx5TKiy2xB8fvij69uCXuiQccfXpxSXx4JVgTW2JPfPzGWF9Hf80rUP2YwnhxSSyJNbEl9sQ1cUvcEydvSd6jR+ZVsH5MKyzzukc/phWWebWrH9MKL7bEnvjI6kdwS9wTD/jY5k8uiY+sLsFHVkvwkdUafGS1BdfEDT62bYvfdWzbJ0tiTWyJPXFN3BLH77IYqzheLRbj4MfYxm/xYzzjt7gk1sSW2BPXxC1xTzzgY993cvLW5K3JW5O3Jm9N3pq8NXlr8rbkbcnbkrclb0velrwteY99qMd6P/ahBx/7RI9t4Ogpj3Xd07L1tGwjLdtIyzbSso20bCMt20jLNtKyjTQmI3kH3vJ4JC6JJbEmtsSeuCZuiXvi5C3JW5K3JO+x34zxPKb9XTzW2Jaz3y04LZukZZO0bJKWTdKySVo2Tcumadk0LZumMdHk1eTV5NXk1eTV5LXkteS15LXkteS15LXkteQ1ts9jit7JZ1/HeJ49G+OZerakni2pZ0vq2ZJ6tqSeLalnS+rZknq2pJ4tqWdL6tmSerakni2pZ0vq2ZJ6tqSeLS15W/K25O3J25P3OO49xq2n7fPs6xjDs2djDFPPltSzJfVsST1bUs+W1LMl9ayknpXUs5J6VlLPSupZST0rqWcl9ayknpXUs5J6VlLPSupZKclbkvc41o2xknM/HnzuxzXY17hJ6llJPSupZyX1rKSeldSzknpWUs9K6llJPSupZyX1rKSeldSzknpWUs9K6llJPSupZyX1rKSeFWOfIqlnxdmniLNPkbSfldSzknpWUs9K6llJPSupZyX1rKSeldSzknpWUs9K6llJPSupZyX1rKSeldSzknpWUs9K2s9KI8eOKWLn+HRyTNJ+VtJ+VtJ+VtJ+VlLPSupZST0rqWcl9ayknpXUs5p6VlPPaupZTT2rqWc19aymntXUs/pgTPTBmGhhTI5pW8eYaEnLJmnZJC2bpGWTtGxpP6tpP6upZzX1rKae1dSzmnpWU89q6llNPaupZzX1rKaeVaV3VNOYGL2jRu+opWWztGyeli0dG2s6NtZ0bKzp2FjTsbGmY2NNx8aaelZTz2rqWU09q6lnNfWspp7VSsZqJWO1kbHayFhN/aWpvzTtEzXtEzXtEzXtE7WnZetp2Xpatp7GpCdvT950bKypZzX1rKae1cG+WIcmZl9sD/bFlvrLUn9Z6i9L/WWpvyztEy3tEy3tEy3tEy3tEy3tEy3tE60kb0nekryFbdgKfW1CX5vQ15b6y1J/WeovS/1lqb8s9Zel/rLUX5b2iZb2iZb2iZb2iZb2iZb2iWasLzNLzLG9Ocf2lvrLUn9Z6i9L/WWpvyz1l6X+stRflvrLUn9Z6i9L+0RL+0SrZI7VtL4amWONzLHUX5b6y1J/WeovS/1lqb8s9Zel/rLUX5b6y1J/WeovO/srlvnsr4PrWn4/918WzLJ52n956i9P/eWpvzz1l6f+8tRfnvrLU3956i8v9L6n80Qv9L4Lve9p/+Vp/+Vp/+Vp/+Vp/+Vp/+Wpvzz1l6f+8tRfrmnZ1BKznbuxnXs6PvR0fOjp+NDTOZ2n/Zen/Zen/Zen/Zen/Zd7WjZPy+Zp2WpattQLnnrBUy94Oj70dHzo6fjQ0/Ghp+NDb2mdtrRsLa3TntZp6gVPveCpFzz1gqde8NQLnnrBUy946gVPvVBTL9TUCzX1Qk29UFMv1NQLNfVCfZAhNR3L1UKG1EKG1MLy13QsV9OxXE3HcjUdy1VhbKtYYtZ7VdZ7TfuFmvYLNe0Xatov1HTcVZV9VjX2WdXYZ9W03da03da03VZn26hpu63OtlEr20ZNGV7TdlvTMVJNx0g1HSPVdIxU0zFSTdf6ajoHqelaX03X+mrPf5PGYTAOx3ySogcf9yUt2BPXxC1xTxz157dV+jFvpMwp4/2YN3KxJfbENXFL3BMP+NjG5idS+jGf5GJJrIktsSeuiVvinnjAmryavEfezu+p9GM+ycWW2BPXxC1xTzzg8/7ywSVx8p73lEewJ66JW+KeeMDH9n9ySSyJNXHyevJ68h7HRfO7MP2cW3LygI/jopNLYkmsiS2xJ66J07ZU07ZU07Z07AtOLonTNtzSNnz043xUph+vaXteHZ18HDudfCx/9NSxvzhZEx/LH71z7C9Orolb4p54wMf+4uTkHck7kvfo/ZM9cU3cEvfEY/HxOraLZY3JOY8lxuGcr3JyS3/fE6eahd9yzlc5WRJrYkvsiWvi5C3JW5JX0m+RklgSa2JL7Ilr4s6YHBlyjMORFSenmppqaqqp6bdoS9wTsz2cc1FOTmNoaQwteS15LXkt/RZLY2hpDC2Noacx9DSGnsbQk8uTy5PLk+vMiho84DMrDi6JJbEmtsSH14Nr4pa4Jx7wkRUnl8RPV51vD+sx7eVCByvYJvbADo6FM0guLBNHoIAKGuhgBRvYwbFwPEBsA9vANrANbAPbwDawjWWLSTIXFnDWnS846zGzpc73j/WY2HJhAQWcSzYnh/WY1HKhgxVsYAfDNje1mM5yYQEFVNBAB8Om//M/f/jtL3/71z/+489/++s//+Pvf/rTb//03+v/8J+//dP/+u/f/uOPf//TX//x2z/99b/+8pc//Pb//PEv/xV/9J//8ce/xn//8ce/P/+/z/H401//z/O/z4L/9ue//GnS//yBf/14/U9nUpz/em6Rq8DzZusPJcrrEjZntkUFs7YKtB//vbz+9+rX8j+v5rEAbdz+DfFt2ajwXHvt5W+wzTLonA5xLMTzetgqMcbdCiU+kRAVnuhUaD9UqK8r1LUmak3j0MfdAm1OMzpWZamrwPNS7g8F+uY31Pmgy/EbnkfXL0uM1yUknmWJEs97bY+XJcpmfT5vrl1D+byHNl7W2KyN+WbpazCfx7uMptQfF2OzXToltLxcH7uFaGvLnu8Tfr0Quw2zzrm3x4Y5I2O1l/9Ywjdr1eZ0mmOtPq/bvSyxXQoraymsviqxqTCfEjkrzMn/r8dis3nW+KbtMZ4jZ5XrjzU22+fzxtVq9Ed9+Ut2i9Hi4cbjp5RSXi6GlN93MWRtGfMNKq8XQzebRiuyGj4lp/+4jctmxcY3lI/s7Tm96/0Kq8/Ko/jrEnWXGEZiOIth5ccSbTMUD1lD8fDyejE2q+R5xe+q8bywN9JiyI81Nhvo/Hz2tZE/UoD+XEN3AWrXlvG8B06Fx/jahjFebhj77VP72j79dZtsa/g6tpiPCL6sobYbDLsGVJ6X918G+XY5Kr+lphX7y3LU92P47mI0+dqQ1vEgiDdDOt484rPHu4d825/Rqq6fkQ+XfvoZu11SkzWaz2tlL3dJpm/vns3e3i72S/Hu7nlO/LmOHa1sxqLtjqH74Bg6H3P1H2v0t3dINt7dIW0r3NsheXl7h+Ty/g7J9f0dktv7OyT3d3dItzeM1zuk29un+Ovtc1tDjRrtZQ0fb/+UXQltzQjQ9vJks7x/rlfl/ZO9qt9wsrdbK22dOuvzau3LtVJ9d/Lc19nz41HTDuXHlq317fSq7d302la4l151vJ1e7fF+erXyfno1eT+9mr6bXrc3jNctv9s+e3zX4dw+fzicLvdr+LgWY96xflmjtVvXueTxsNfXqXbL0fpajuednNfL8f6J/C42ntvANaTP45XXO4Re3j962y7GOkGx0l4fN/X3T+T72yfy/f0T+f7+iXz/hhP5/g0n8v0bTuTH2yfy/f0T+dtt0uqXjpssHgs+asjm3GC8fyl0vH8pdPyul0LnBKEr/drj9WXhsd1A11n8c1T6ywQdu+PQso5ly3NsXyb5bjnmt9+v5bDxejnK4/2Lodvl8LIu1tdH2yyHvr8c262j1rV1pJb9VIlOiWEvrxM9tjG67og9E1W+WGNtps8D8/66xu6s7Xih3bGNzde1vEzBeM3J6zLilJF05euXMrv7Sr7yw9P18p/TNF6O8l4g312KdFvplxL78dDHSvVnF/fNeOyCaKzreM+b8HlQf7r3u7+7JKOtTNWU7b8uy25rq2uPKzVtsfUzS+KNJfHhmyXZbbPSdMXiY7ed3F6WWnbLsi3DFd/J46tlOv1jverXyzhlhny5jCplfLPF7G4bFe1rhHXo19bT3YO0sr37dC8UtiXWiZlsf8p2u+1pu9WvbrfV03Zb7auruD3WsYU9b4O/LqPlG9aOyttrZ1vi5trZDyyrx9puT6i77bW1uqYUpGWpnyjRZR2ydRtfK9HWjfjeXpbY78JsXbObc+PKZjx2d6L0Ohj/scRnDlGee1AOUaS+XhDbXwcgYdvrvcYHR36cWozXR1y7W0Fpb2wq8vJEq+xuSUlbu0Bpvby8+2v+9hWJmGr53iWJfYl71yTK7t7DzYsSZXdP6e5ViXjFzbuXJYp/R6j6+6F6ewPZTDHYb6hrVtFzQ9Wv1ei9r3R/PF7W8N3UPV83Qqqnc7bP1fBxp8b+t6wb68991ua3vH3/dF/ibtPd/imvN4/d/amxTrWGbNp2F6eq69qset3E6bbIilNzfX3xq+yumd+85Ve2tyFu3vMru/tLt2d41v7+Xb/9uPbVMf4om5Wzu1F1bxvZVbi7Zna3qW6vme19qrtrptnvvGb8YY+1ZnZt0+rv2b0u60TTn1ezNoux2VRVypo2IOqvDnb3JdbVWtVHf1WiP25ehNeXh9zb0SDL/JlIr0ej73b8dR1fSj5GrfdLPI/X1o7/2berhNj4RBFfVzifByryxSImgyK6KbI7dX+0dWb35FG/tG7qWOum62OzbvpuG1nT8jT/mJ8nGI63L8Ntl2K1vqVDw1+WYuxOph6c5s6Pb7w8z90X6ekwZKQreZ/5MWs5/LEZ0t1Z3fxWSufH+Mve/aDIzRGxbxiR7Zba6zr31zwl9zNHRNVWyzzv3Dy+WKSvCHheW7EvFmmPay9TR3m9i5DdDax74bwtcfMgQnb3r+4eRMjD3j+IkIf/zgcRdXChavhu1exmA8wv0a1BMbGXK2f74MmaOTi/s7ZZku2cvbqOI37YXH+6RSm7m0elrhPv55H+yxvYUrbP662jItNHeXnbR3YPRynzr5+/RjZFthusEkjVyuuLEbJ/OonZ5PmCtX5mSeI563NJStPNkuwOWeu6tjJqeX0p8YNNVltZm6ym62+fiOlW1xSr+dGW15vs9mGpsu6qa0kHWT8/HiSPt68Dyu5pqZvPGG1L3HzISPTt64CyvWt19zEj8fevA8rultPd64Cye2rq5pNGtzeQ19cBP9hQmZRTqn6thvt1YPPcTdUv1lhT+b5eo6U4q+OLNWxNiM5HnD/X2D03dfOa5gc1bl3T3P+WLmvaV7f2fg0vX6tR1xG49t147O4C9La29WGb7t8tiJV18GwlzXL45aHN8v7K3dd4f+VaWY/0mvjj9XLsIlV8XQqQFCCfG1RZXfc8gd0M6iZRbU2ysLZZt9snGR7rVvNz57s5CrHt5aa1ICq1b4rsrgToOg1weX1QtR2PdTri9ng9Hh8dvks6fH+8Onzf3ay6eXq2Oz78lsNdr+u3eN1MlJLto1T31sv+JKJzSpQehPrMfebq69JZrZtJweK7uwDrCCTPCTb5zCWNoVwXGda/dl1kOAdlo77cQurb1wA+Wg7R9GPG1y573f0x9v6PKe//mP0zL+u8e35V4/Up8/Z+1b3JDFLffyxV6tv3Vfclbp7EtPefTJX2DY+mSvuGZ1OlfcPDqdLefjr1/gayOYnZb6i3JjPsa9ybzCC7J6vuHhvua9w7Ntz/lluTGaTL2023LXH39SS3f8rrzaP7m7dDt2mqq0K3/Ljbz2m6e7rqeeV+TUD0dDf0efb8U5FNtwxdF92HprtMvxbZheFjvbJgPG9mvC6ye8BKjcM6BlXqT+t2t6N73jLjjmgakU8V0cGVtryv/LXIbj5ETFM4T6byQzD9Mwuyrj0+8fWCbDc0cza0Lq83tFHfv9I92jdc6d49WnT70H/3rNXdQ399PN4+9N+P6q1D//1DxOv2/Xzl+su1u39hya3HpPYlbj0mpfvbVLcek/qgxq3HpHR7lvsoygFVqePlRqa721R3n+fR7cTs28/z6PYdfrcmEnywJHef59Hdnaq7z/N8Yll2z/N8UObu8zwflLn7PM+HZe49z/NRmZvP8+j2+ZWbz/Nsl+V2C+zuSNx+BZu8/aTgvsStx062P+UT3by7a3Wzm/dLcrubd3et7j7l9EGRm5Fw/wdtI2Ff5nYk7MvcjoSPytyMhA/K3I0E1e+IhP3OlSrPdn68DgXdvzrg1gM+Hxyz3HnAR3X7rqNbE4W2NVpb57TPS2yv34770YZ781HBD8rcfVRQ7RuealF7+6mWfYnvyOy7jwqqvf2o4L7ErUcFPyhx51HBjw6a7m5o+zK3NzT/joMDf//gwN8/OPhgYO9uaNsXBN7b0LYl7m1o+xK3nkndXZWSwRW2kd8Ad//tqkPXgdLzypa+rKE+3j8t3de4d1q6fUXg7bd36O4prPtv79DdiwLvvb1Dq73ddjeXYvP2jg/G4+7bO3R3Tfn2qc7uvsXtNNu+LvDmsPZvOU9p5e3zlP2S3D5P2d3dun2KcX9ZtqcY+zK3TzH2ZW6fYnxU5uYpxgdl7p5i7G5U3T7F2DbAvX3xB+vo7kHOvsztg5zdW+Nux0J/P223Jb5lYO8e5Gzve907yNmWuHeQsy9x62h6v/e5++IN3d0nuvXijQ+OLu6+eEN3N73unpfvj9rWcc7Q5q+P2nbvFrw5z0TH+y8Q1vH2G4T3Je7d8tbx/juE7fENLxG2xze8RTgmGr4biPZ4+z3C9zeQsdlA/O15Jvsa9+aZ2O7C3M15Jh/UuDXP5IPfcmueiZXHu023L3G36W7/lNdve93NUr332P0uTX19V2P45tMc2xpVeZCq+hdrrO1r1PH6aylWdpdb7z0CZeUbPmpR3v+qRXl/9qDJ+7MHTb5h9qDJN8weNPmG2YMm73/borw/e/CDDfXWI1D7Gvcegfqgxq1HoPY17j0C9UGNW49A2e69f3f3UPsat/ZQ+99y7xGo+zVePwK1r3HvESjb3Xu6+wjUdkFuPgJlOr5h5Y7fd+XefATKbDvH5d4jUPsFufcIlO2exbr3CJTt7hjdfQTKdo8e3X0EynYPY92bb7cfj1uPQG33DQ++gfdk2xzH+Nuvudovh3P84JuzZNt+1eretE7z7TzXNfXvh48J/Hzl23b3iwpPybi+Xrnb5bg5vdT87oSWUjZLUrc7zFtzVG33NNbdOarbIvdfpGB1t7n6WJO7c7B+clnuvl7CdlfM7r1eYl8iHRONTQn7XUvczLO6fyvjVaLXzbb6DfOprX7Htrq7bH93SMf7QzreHtL6ew/pJzp390TW7c6t39O5uzcI3uzcbYl728j27X/vl7i5mW1L3Ozc7XtMCy9D3W1m23fu3d7fbY8ibj3GsN9Qb76r534R3bTM7g2Ct8Nsd2vo5lbW3z/e7e39MHt8w3q5XWS3XoZ8w3rZ3Z+6uV52JW6ul22JW+tl/znvdd7epL/+brSN95/FtvEdnwj+hm8Ef8NHgh/f8JXgx3d8JvjxHd8JfnzHh4If719NHd9wNXW8/yz2vsa9e2T+eP8i1Qc17l2kGu8/i+3l7Wex9yVu3sK4/1Nef365vPss9j5N1y9pKq/nmvrugt3Naym+WxC3NTXMbdf55RuebnV5++nWDwbk3ottditGnRXjmxuP738EsLz/EUCX959u/aDGrWnELt/ydGvcOH5V5u5813gx0ctluT3P1PXtp1s/WJK780xdv+Hp1k8sy26e6Qdl7s4z/aDM3XmmH5a5N8/0ozI355m6fsPTrdtlud0C9g0PsLi9/QDLvsStuZ3bn/KJbra3n279YElud7N9w9OtHxS5GQn3f9A2Euxbnm79oMztSPiozM1IsG95utVdvyMSvuXpVvdveLq1vP/5Ovf9HOl1vtP99bext0XaY90Nb480S/rXIrubA7c++/JBiTufffH33yq4H9KxHmtru4d9verby1G3r9C89eCy7949c/cLB163H2y594UD377R6+YXDvYbqqyp+M/La32zasb2VHJt7d7r14rc/SaPt+1M6/V8Q5o+Itbvl6jrnZFVxusS259y88tAH4zHvS8D+fa9gje/DPTBNnJz9W6HdQVirfrFNWO879W+WmJlu9XXJfb7B74+M+omzPr731rZ13g81vTCfBT9S43tM4JcztL0NOkvGdK/4Xst3r/hey0fHevdfITtgzJ3H2Hz/g1Ptnp/+8nWfYnvOM25+wib725n3XuEbV/i1iNsH5S48wjbR9cZ7m5o8i0vhPDd9eTbG9runsXNDW1b4t6GJt/yQoi6u611b0Pbl7i1oX1Q4s6GtrvI9+AeUHnkfU27XaI86irxw4ejbpcoQ1Y0l3xB+qcS9dHe3lvta9zba9btG0duHr/X7asFb+7xainv7/G2K7evEqqvt49abt7bT9kh9yuorkN3tfQFuzF+qrE9Ur3xIv7d10nH+kxiKS+P7O4VkC8VuHfu8Xj3zOPx7jH2490j7Me7x9fbzlp3zp/nK+lcQ396y/T2C1etr+f/npxeb/I8yP1EmV7K+gpaL+lu3q9ldt8gufOc+ge/Z6xzjtIfZWwWZLd7vvXh3G2Juyfp+yI3T48/WJJ7p8d1d+vq7unxB5vJYz3n9eRaXq+d3Yeq7l3t+6DEnat9Veu7V9k+7D6nbbxtxmM3Z9VX3zxviPvLxtk9HHWv9bZLYSvV1R+va+xuM5XuHOU/r9VvBmT7Xr/Cjrrkt7x7/WqR8Q1FzL5axMsqkqaO/FpkdyE1JredBy95jvbj54HdHVYOPos6etkU2Z/7rAOYYfrVIhwSjjwV5nNFjCWpj+8o4psiu7XDFBJp+e0qPxfZ3aPytq4+Pi+H2ddWsdV2RZK1ol8s8ihXFjz/3fjimPja2MTHbkx2S9If64HNXsYXB5b3Cng+iflUkecB3zrFNXt8w8+R3Sq+nSebUNo9JXVzOmyt22+0ru/ePk+t2mZBNjvR5uP6NS3PZys/ndjtblU9z8UKp2XpoPHn5ajb03bltN1e19jdIC6Pdd7+5B8eDv7EsGpjWNtup3N/V+z19a64Pd4/Nmnvvr5qvxQ3j022LwnslY+T95omEvw6ILtjPp5zKlbS+daon1qWsY7pe7448+uybD8wolzieR4evjyob7ubq7cm5HywHNaZHGvj5SH9dkxGWR8qerJtNti+u4QXLxY/7/Okua1znuuPRd5+teUHy7G+D1S0b5ZjPyayLs0+uW9Oh3e3rVzXRbxnDz82RXx3TLAuND/TdrPF7p6+Kr3zQoq0JOPnlbN7YdrND1rV7Vexbn7QqvbtM613PmhVx35y660PWm2L3P2gVR3bD7fe+qDVBwty84NW2w2tGBva2Fxj2L2c6+6Gtnv/2+0Nbft6v7sb2vazWDc3tPEdG9p4f0Nrj/ING9r4vTc07geYbK5VtN2DWC7rztfzdt/Lw9f22H49gIl4Le/42md+zDpEsjwR9dcf077hx/Tf+cfoOjl5on9xh8VhtOXD6M/tOm3d/Xa312HUdk9S2Vg3C573XvSrRdY95yd+sYjzAOMTv1xkPdT1RNkcu24PbXS9Q23y+GoZS0eNVvSrZXydmE/+8tLUQpnaXx/DNnn7/tq2xL07bNsf87xBZeuZyud20zc/ZjvzmjcIFZXHqykK7f1vYn2wHMIrkJ/3Hexlkd0hQVnnkKOku6/1M8MqXL55qDw2w/rBq6quX/MY+RHP8tVlMd0Egr5/et50d8r1MOcGlY1N62zvcz2PKHiI7rE5Y/qgTFlPnT55c0O0vX+nq71/p6u9f6frM+Oh/vVh5apj2e1PPyizThGevLm21XZT/W6unX2JW2vH5PdeO3k8av362tFUpn1tJ/hjqLhsWnB3+8B4vtjaQ16Gyvalgg/n+fNHfch3/KKqsvlF27e098Hlcn35i3avFrx1LfWDpbh14b/5djbBYFznSzFeD8j2vsy945ztXZlbxzn7H5N2pc8OKJvjnO27BUdRS9cv26tO3hfhGfDJ/e0jjCK2ORncPlF179J/q29vrtuluHlssb3X9dyBd+YClM1uZ3df5vsPucrzTG6zLP4NK+fd6Vr7pbi7cvr+biYrx3enx9s3+5V1R2UeEqTr7V8tIo8vFmmPNBdgU6TJ2+tmn/NrWOWHu8Sf+S3KulHdjOr20ax7J2/75ViXYURr++KP+WFCwlc3kbru/0ltm2Ft787W2s6GXgVEf4iQnzaQ3U0ub+tNIT7q6wmou+Uw1qz/cFLw83Lo71zk5qT7trtgePcRsda/4YHX1r/hgdf9G36UzrXNqG5f3Xbj1UvbjUxlNe48V3q9GLvvX91bjF0F596/5xcjPC8E/VRE39/bje1729ZVz/r44fqgfKIId1Ce1xvLpkh9++x3X+LW2e/uztbNs9+b67b+eJXyx9Hoj/cvYfXtQ1B8GOB5MrJbkM2Ov5V1r+CJuyKbLfXmnKr+2L4D+9acqv7Yfl7g1pyq/tidEt2dU/XBsA7eqPnD7bHPrBtRivxwoPq5ImvdSG9fLrK2Ehm+SYCbjaNFXi9JkbcvavSibx4OfbAUty5q9N1zWVXXzNnnUerYDEf9nYvcffak716ud+8Jpw9K3HnGaf9Tbj4B88F43HsCpss3PAGzP2Ye6wSxlvL6cKbvbmZ9S5GbB7xd6vsHvF3a+we8ffvA1s0D3v2xJr2n2l+fFXV999st+8XgjrSa2ddOzp53j7mYmJ5K+Hn16ruxuv8pLmnikW1GdJOrfb2pavxwdvf4qcT2wwBr81DLX8OxzxQZ61FJzc+t/Fqkv3vU/EGJO0fNfXfb6d5R83Y07LHu9dgjHzX/PBq7e1c3R2Nf4t5o2O87GmW9VPfHya2/jEZ9fzTq+6Px/hnVtu3Hg2l++TXnn0kwk/ViXtNH/WIRXslt+fsEn7vQxfMyXtoXf46PdcTtwzcXMnbf47i70/ZvuErV/RuuUnX/hqtU+3GliEvX17sY/12vU9lw3qrww1nZT4tR371Ota1wdwOp3/Cmq16/4U1XvX7Dm662RzFtXcroKQB+XY7tq8rvvQmlb+9T3R6R8Tu3jCmf5PO6OX/Yvj+wNi6aUUJ+OqPa3aPSnqal//Dw+08niO3tc//9YgwearbdYuyuVNV1sSt9jKt9YjSMZ7FM89zpXxajvX0IsV0OW28kfh41j81y7G5QeU373S8WuX0Zo7/9KsQPSty6jNG+4T2XH4zHzcsY/Rvec7lt/t75tEf3TfeX7XXZNdVZfnh78M+/pv/ORe7uNHdPLt3eaY7yDbuIId+w09ytHL7Kk99G8Muo7m4y3TuY2W5lawJCb4/NQuzOy9bXdCy9srd9YjPlRWq9bbav7TeOOm+9GWmOdPt5re56/+bs8/HYXptanyR4rp1XEyn2v2XoyqD8VYOffsvYfwWr8Z75R/7ee/1Ukcanll+/ufCDIj19pGg87CtDIsSHPFKe/jIkuyupj8LngR6l5gDxT5VJyVzG+HqZtbE9JD0U88kyoqwiqa8fXhy7VwgWbgI+kVWkP31I6oMi64G/kmf1/1Lkgx9U0w9qXx5eXZdYnqzy5TJpZWu6Yfzr8PrvXkbKOpiXH7bfX9bS/oSPeejpOu3niigvV7XH6yJ9N4PG6QCXfBTsP+7Axu4hqpvf/BqyvQx277vlY3fv6u43h4fo71zk/oeLx+5TV3e/O/rBstz9cPHY3cC69+Hi7ZLc/SbbkLc/b/3BBnvrm2wfxRIvfH7kyZa/5Im+fWvggxJ3LoYPffvWwEfjYey/1Osm7beHKiPtTIf1rx3vjDwFvb78QdrfH5P9coimH/Oluwz2WEeRJvb62v7Yv+YoveUoT2KV/lOR7RUkttWeH622cr+ItQcvXstPdf5S5O0HBvfL0df0c+vp/b6/Lkf9fZeDd0XYyDNhflmO/rsuhz/y647t9XLsHrt6XvO5Vq7/8Kz6Z4rcvR62L3LzStQHS3LvSlS8pPHdK1H71su3GvOjV78M7LsPsoz9J/Z4LtV/+IpV/0SRumZMSsvTA38u4uN3LnLzitjY3Yq6e0VsbJ+8unlFbOxfM3jvith+5ZTG1wHyRPSfx7W++yni4dvrL5yBjvby+9Bjezvr3kfZx+5u1r3vQ+9L3Ps+9Ni92O/mvM2xvRB986PsY3fX5O5H2cfuXtbdr5OM3QsG732d5P4G8vqj7NsNVZim/FxJLz/KPnZ3s25+DH2/HKXy5FfZLMf+btY6MttsH7vX+d0+jd9/C+vmGXiX37nIJ07jd29Hun0av1+W26fxuwevbp7Gb0use436QwT8XKK/fRK/3VrXfWRPrxn+ZWvdNg0zBJ6X0L7YePmQKMXqzzW27xS813jbh64e62qglrLZTsf2tIr3nkuXrxZZv+ZZr2+K1Le3j+2g3to+9lNhVdZ0h/xGwc/Np1XmXfzw4q2fijwv+r/7hoAP5m4OXuNXfbcc8v4Z3r7K3VO8D6rcPMf7aFnuneQ9q9T3z/K2U8DLo/INuR9ev/D4RBHj/RqeP+Cqv6zn8XtXuXmC9Tww/oYzrPIo33CKVR7lG86xPljNxn2xH16w/fPYlndPsp6rp3/D6nlsj4DZAf74no7HZ6o4n/tyrV+soqWzA/vhlXGfqiLrJEd/fOHpp6o8+Aaa1LKpsrulVZrxOvZm8urW/b7Kze/kPYvsXul+c3ros4p/Rx/uHsm624cfbv8Ptn//6qbb13QTfeiuAXa3te6vou/IW/2WvNVvyVvV3309C2Mr24jaxvbtVvzgmHI9XlV1t83p9sOXHKn3/NoK/zn/d7e4bt64n9Ml3j/lP/Z6756ul8f2Ntftc+RnHXn3JPmjZbl77eBZ5xsuHny08Sozg5r28nrj/aAFJLXA42WV7WeTbt1Z3Y/u92wvdycklIc/3j1Z/agVb01J2L9zydY3PZ7Xi9NZ1ade3ETIPYvIyyLzyHV78MM+MZ0MfbJK4RCqbN7N9UEVTvDU9MsvxeJ+U35X5//PovQ3j9k/WD28ei1/3+7X5di9b/De17A/qHHrc9gf1bjzPeyPNpLB9abH1ze1dSnwWdB34+rv3of/qMad6TzHpYJ3E3Y7Ilzpef6WL4+rKCPiX46TvCxvVKlUSfvjz1YZnfXz9WUZ5Ruq6JrnpFq//Iu084v662z76JWsLX+D6eWbsravqb31vep9iVsPQn1Q4s6DUB+8AN9X0pf6+l3+2xJ3nmLYf93g3ljI29/v/uA7GHxW64f3wX7uYxrr0qg/WvtikaI8vWzy1SIrW59FvvptkLJuPfv+K2G7L7cYX26x1r+hSJcvFvF13cFcyleXZPC87sO+uiTGjRL76sC6U6R+9bs6vo7Gn0uyWzvbGWjriPG5webDkp9PUMbbj8t+VOPeYcnu6a6b3xK/PSD2eD0g5bF9m8KtDziVsrtxdPsLTvu5jut6hdX68ud8UGS9OqjYKF8tMtItue3A+tsnFvsa904sPqhx58Tig691OjPRq/vLy32lvP0Kog8XpKQF6a8XZHcjoTe+tPkcktcvVC9lfwesNl6Y3TYfxyrxEZPXdZR3iKdZD0M+VYSLFc9l2RTZHWjJupT0PG59/Ujis8ruSar1aVfPz5YN/8yS3PyS4rPK7i0vNz+lWIps3/R651uKzxr778Pe+pjivsrdryk+q+xeoHHvc4ofLcq97yl+2EJ13G2hbR1eTf5k29XZPdl18zW4zyLbb2/eeg/us8j+/tWdF+E+R2W3J7v9dfEPUrdwK8HlVeq+nf3b59QefLda0h3X9okSfD4wnwR+pkTnCfTevrYUvMpTHulNC58oIZwAPrF/aSnaus5R+uNrP6TzQFfXL/2QZ8Cs4cxzFD5TQtMB3+NrJWydEjxPYuVrJTg+MhtfK7FO+UqepfdziRKvDXgz2nc7u/ReI00HI/bQ+yWYepLfa/TlEv1LJeyRJhs+vlTC107lifq1Ety38fq1H8KcePV0MfEzJfjIqFb70hopw9PrZevLEqXsX0VovL2nvjxR3C5H59rq+NJqlQef23k82tdKrKvw8tD6xRLMktT2dgn76lKs46b8KMynSjhjkadKf3Ep+pca7eZb5Z8nHdsPQL/5lZ17DyeVsn0W5+bTSc8q26+9FqVMqeP1vICyu8vax7r23kffzC4obbt3c26JWP6U0i/zC8r2yS1pvBPpkYNsfHlpatkuzQcPxVJHd7MmSnv7W8UfLUvlFUuWv1jz2d/UnWOZXvWNOlyefG5FX6+zJlXNmtsx3r5Oi/2GDv3iljM4jR+19003bF8vePOpv2eV3bTCW4/9fVCDF+d8eUw+8Wv8G36N/76/xmy9us3M++7X9G/4Nf3/4q/JS/LLr/lgX0LzPFfxY7Pdj+3zJUa0tK+nd/WU3tW+nCyNN4FY892WO/w7tv/tY143t5htjW/YYp4jypvgniO0y//dDa67tz+2NW7e/tjXeHn7438//5c//uuf//7Pf/nbv/7xH3/+21//8/nv/meW+vuf//gvf/nT+b/+23/99V/T//cf/+9/XP+ff/n7n//ylz//+z//x9//9q9/+j//9fc/zUrz//fb4/wf/0vmdy7lOQD/+w+/lef/3sdzb9aH+fN/1+f/ri72h+fJpc3/fzn+gTz/QbP//T9zCf8/"
2487
2483
  }
2488
2484
  ],
2489
2485
  "outputs": {
@@ -3267,149 +3263,149 @@
3267
3263
  "function_locations": [
3268
3264
  {
3269
3265
  "name": "encode_message",
3270
- "start": 4119
3266
+ "start": 4136
3271
3267
  },
3272
3268
  {
3273
3269
  "name": "decode_message",
3274
- "start": 5577
3270
+ "start": 5594
3275
3271
  },
3276
3272
  {
3277
3273
  "name": "to_expanded_metadata",
3278
- "start": 6600
3274
+ "start": 6617
3279
3275
  },
3280
3276
  {
3281
3277
  "name": "from_expanded_metadata",
3282
- "start": 7114
3278
+ "start": 7131
3283
3279
  },
3284
3280
  {
3285
3281
  "name": "tests::encode_decode_empty_message",
3286
- "start": 7877
3282
+ "start": 7894
3287
3283
  },
3288
3284
  {
3289
3285
  "name": "tests::encode_decode_short_message",
3290
- "start": 8427
3286
+ "start": 8444
3291
3287
  },
3292
3288
  {
3293
3289
  "name": "tests::encode_decode_full_message",
3294
- "start": 9073
3290
+ "start": 9090
3295
3291
  },
3296
3292
  {
3297
3293
  "name": "tests::to_expanded_metadata_packing",
3298
- "start": 9611
3294
+ "start": 9628
3299
3295
  },
3300
3296
  {
3301
3297
  "name": "tests::from_expanded_metadata_packing",
3302
- "start": 10696
3298
+ "start": 10713
3303
3299
  },
3304
3300
  {
3305
3301
  "name": "tests::to_from_expanded_metadata",
3306
- "start": 11753
3302
+ "start": 11770
3307
3303
  },
3308
3304
  {
3309
3305
  "name": "tests::encode_decode_max_size_message",
3310
- "start": 12134
3306
+ "start": 12151
3311
3307
  },
3312
3308
  {
3313
3309
  "name": "tests::encode_oversized_message_fails",
3314
- "start": 12917
3310
+ "start": 12934
3315
3311
  },
3316
3312
  {
3317
3313
  "name": "tests::decode_empty_message_returns_none",
3318
- "start": 13106
3314
+ "start": 13123
3319
3315
  },
3320
3316
  {
3321
3317
  "name": "tests::decode_message_with_oversized_metadata_returns_none",
3322
- "start": 13263
3318
+ "start": 13280
3323
3319
  }
3324
3320
  ],
3325
3321
  "path": "/home/aztec-dev/aztec-packages/noir-projects/aztec-nr/aztec/src/messages/encoding.nr",
3326
- "source": "// TODO(#12750): don't make these values assume we're using AES.\nuse crate::protocol::constants::PRIVATE_LOG_CIPHERTEXT_LEN;\nuse crate::utils::array;\n\n// We reassign to the constant here to communicate the distinction between a log and a message. In Aztec.nr, unlike in\n// protocol circuits, we have a concept of a message that can be emitted either as a private log or as an offchain\n// message. Message is a piece of data that is to be eventually delivered to a contract via the `process_message(...)`\n// utility function function that is injected by the #[aztec] macro. Note: PRIVATE_LOG_CIPHERTEXT_LEN is an amount of\n// fields, so MESSAGE_CIPHERTEXT_LEN is the size of the message in fields.\npub global MESSAGE_CIPHERTEXT_LEN: u32 = PRIVATE_LOG_CIPHERTEXT_LEN;\n\n// TODO(#12750): The global variables below should not be here as they are AES128 specific.\n// The header plaintext is 2 bytes (ciphertext length), padded to the 16-byte AES block size by PKCS#7.\npub(crate) global HEADER_CIPHERTEXT_SIZE_IN_BYTES: u32 = 16;\n// AES PKCS#7 always adds at least one byte of padding. Since each plaintext field is 32 bytes (a multiple of the\n// 16-byte AES block size), a full 16-byte padding block is always appended.\npub(crate) global AES128_PKCS7_EXPANSION_IN_BYTES: u32 = 16;\n\npub global EPH_PK_X_SIZE_IN_FIELDS: u32 = 1;\n\n// (15 - 1) * 31 - 16 - 16 = 402. Note: We multiply by 31 because ciphertext bytes are stored in fields using\n// bytes_to_fields, which packs 31 bytes per field (since a Field is ~254 bits and can safely store 31 whole bytes).\npub(crate) global MESSAGE_PLAINTEXT_SIZE_IN_BYTES: u32 = (MESSAGE_CIPHERTEXT_LEN - EPH_PK_X_SIZE_IN_FIELDS) * 31\n - HEADER_CIPHERTEXT_SIZE_IN_BYTES\n - AES128_PKCS7_EXPANSION_IN_BYTES;\n// The plaintext bytes represent Field values that were originally serialized using fields_to_bytes, which converts\n// each Field to 32 bytes. To convert the plaintext bytes back to fields, we divide by 32. 402 / 32 = 12\npub global MESSAGE_PLAINTEXT_LEN: u32 = MESSAGE_PLAINTEXT_SIZE_IN_BYTES / 32;\n\npub global MESSAGE_EXPANDED_METADATA_LEN: u32 = 1;\n\n// The standard message layout is composed of:\n// - an initial field called the 'expanded metadata'\n// - an arbitrary number of fields following that called the 'message content'\n//\n// ```\n// message: [ msg_expanded_metadata, ...msg_content ]\n// ```\n//\n// The expanded metadata itself is interpreted as a u128, of which:\n// - the upper 64 bits are the message type id\n// - the lower 64 bits are called the 'message metadata'\n//\n// ```\n// msg_expanded_metadata: [ msg_type_id | msg_metadata ]\n// <--- 64 bits --->|<--- 64 bits --->\n// ```\n//\n// The meaning of the message metadata and message content depend on the value of the message type id. Note that there\n// is nothing special about the message metadata, it _can_ be considered part of the content. It just has a different\n// name to make it distinct from the message content given that it is not a full field.\n\n/// The maximum length of a message's content, i.e. not including the expanded message metadata.\npub global MAX_MESSAGE_CONTENT_LEN: u32 = MESSAGE_PLAINTEXT_LEN - MESSAGE_EXPANDED_METADATA_LEN;\n\n/// Encodes a message following aztec-nr's standard message encoding. This message can later be decoded with\n/// `decode_message` to retrieve the original values.\n///\n/// - The `msg_type` is an identifier that groups types of messages that are all processed the same way, e.g. private\n/// notes or events. Possible values are defined in `aztec::messages::msg_type`.\n/// - The `msg_metadata` and `msg_content` are the values stored in the message, whose meaning depends on the\n/// `msg_type`. The only special thing about `msg_metadata` that separates it from `msg_content` is that it is a u64\n/// instead of a full Field (due to details of how messages are encoded), allowing applications that can fit values\n/// into this smaller variable to achieve higher data efficiency.\npub fn encode_message<let N: u32>(\n msg_type: u64,\n msg_metadata: u64,\n msg_content: [Field; N],\n) -> [Field; (N + MESSAGE_EXPANDED_METADATA_LEN)] {\n std::static_assert(\n msg_content.len() <= MAX_MESSAGE_CONTENT_LEN,\n \"Invalid message content: it must have a length of at most MAX_MESSAGE_CONTENT_LEN\",\n );\n\n // If MESSAGE_EXPANDED_METADATA_LEN is changed, causing the assertion below to fail, then the destructuring of the\n // message encoding below must be updated as well.\n std::static_assert(\n MESSAGE_EXPANDED_METADATA_LEN == 1,\n \"unexpected value for MESSAGE_EXPANDED_METADATA_LEN\",\n );\n let mut message: [Field; (N + MESSAGE_EXPANDED_METADATA_LEN)] = std::mem::zeroed();\n\n message[0] = to_expanded_metadata(msg_type, msg_metadata);\n for i in 0..msg_content.len() {\n message[MESSAGE_EXPANDED_METADATA_LEN + i] = msg_content[i];\n }\n\n message\n}\n\n/// Decodes a standard aztec-nr message, i.e. one created via `encode_message`, returning the original encoded values.\n///\n/// Returns `None` if the message is empty or has invalid (>128 bit) expanded metadata.\n///\n/// Note that `encode_message` returns a fixed size array while this function takes a `BoundedVec`: this is because\n/// prior to decoding the message type is unknown, and consequentially not known at compile time. If working with\n/// fixed-size messages, consider using `BoundedVec::from_array` to convert them.\npub unconstrained fn decode_message(\n message: BoundedVec<Field, MESSAGE_PLAINTEXT_LEN>,\n) -> Option<(u64, u64, BoundedVec<Field, MAX_MESSAGE_CONTENT_LEN>)> {\n Option::some(message)\n .and_then(|message| {\n // If MESSAGE_EXPANDED_METADATA_LEN is changed, causing the assertion below to fail, then the destructuring\n // of the\n // message encoding below must be updated as well.\n std::static_assert(\n MESSAGE_EXPANDED_METADATA_LEN == 1,\n \"unexpected value for MESSAGE_EXPANDED_METADATA_LEN\",\n );\n if message.len() < MESSAGE_EXPANDED_METADATA_LEN {\n Option::none()\n } else {\n Option::some(message.get(0))\n }\n })\n .and_then(|msg_expanded_metadata| from_expanded_metadata(msg_expanded_metadata))\n .map(|(msg_type_id, msg_metadata)| {\n let msg_content = array::subbvec(message, MESSAGE_EXPANDED_METADATA_LEN);\n (msg_type_id, msg_metadata, msg_content)\n })\n}\n\nglobal U64_SHIFT_MULTIPLIER: Field = 2.pow_32(64);\n\nfn to_expanded_metadata(msg_type: u64, msg_metadata: u64) -> Field {\n // We use multiplication instead of bit shifting operations to shift the type bits as bit shift operations are\n // expensive in circuits.\n let type_field: Field = (msg_type as Field) * U64_SHIFT_MULTIPLIER;\n let msg_metadata_field = msg_metadata as Field;\n\n type_field + msg_metadata_field\n}\n\nglobal TWO_POW_128: Field = 2.pow_32(128);\n\n/// Unpacks expanded metadata into (msg_type, msg_metadata). Returns `None` if `input >= 2^128`.\nfn from_expanded_metadata(input: Field) -> Option<(u64, u64)> {\n if input.lt(TWO_POW_128) {\n let msg_metadata = (input as u64);\n let msg_type = ((input - (msg_metadata as Field)) / U64_SHIFT_MULTIPLIER) as u64;\n // Use division instead of bit shift since bit shifts are expensive in circuits\n Option::some((msg_type, msg_metadata))\n } else {\n Option::none()\n }\n}\n\nmod tests {\n use crate::utils::array::subarray::subarray;\n use super::{\n decode_message, encode_message, from_expanded_metadata, MAX_MESSAGE_CONTENT_LEN, to_expanded_metadata,\n TWO_POW_128,\n };\n\n global U64_MAX: u64 = (2.pow_32(64) - 1) as u64;\n global U128_MAX: Field = (2.pow_32(128) - 1);\n\n #[test]\n unconstrained fn encode_decode_empty_message(msg_type: u64, msg_metadata: u64) {\n let encoded = encode_message(msg_type, msg_metadata, []);\n let (decoded_msg_type, decoded_msg_metadata, decoded_msg_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_msg_type, msg_type);\n assert_eq(decoded_msg_metadata, msg_metadata);\n assert_eq(decoded_msg_content.len(), 0);\n }\n\n #[test]\n unconstrained fn encode_decode_short_message(\n msg_type: u64,\n msg_metadata: u64,\n msg_content: [Field; MAX_MESSAGE_CONTENT_LEN / 2],\n ) {\n let encoded = encode_message(msg_type, msg_metadata, msg_content);\n let (decoded_msg_type, decoded_msg_metadata, decoded_msg_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_msg_type, msg_type);\n assert_eq(decoded_msg_metadata, msg_metadata);\n assert_eq(decoded_msg_content.len(), msg_content.len());\n assert_eq(subarray(decoded_msg_content.storage(), 0), msg_content);\n }\n\n #[test]\n unconstrained fn encode_decode_full_message(\n msg_type: u64,\n msg_metadata: u64,\n msg_content: [Field; MAX_MESSAGE_CONTENT_LEN],\n ) {\n let encoded = encode_message(msg_type, msg_metadata, msg_content);\n let (decoded_msg_type, decoded_msg_metadata, decoded_msg_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_msg_type, msg_type);\n assert_eq(decoded_msg_metadata, msg_metadata);\n assert_eq(decoded_msg_content.len(), msg_content.len());\n assert_eq(subarray(decoded_msg_content.storage(), 0), msg_content);\n }\n\n #[test]\n unconstrained fn to_expanded_metadata_packing() {\n // Test case 1: All bits set\n let packed = to_expanded_metadata(U64_MAX, U64_MAX);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 2: Only log type bits set\n let packed = to_expanded_metadata(U64_MAX, 0);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, 0);\n\n // Test case 3: Only msg_metadata bits set\n let packed = to_expanded_metadata(0, U64_MAX);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 4: No bits set\n let packed = to_expanded_metadata(0, 0);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, 0);\n }\n\n #[test]\n unconstrained fn from_expanded_metadata_packing() {\n // Test case 1: All bits set\n let input = U128_MAX as Field;\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 2: Only log type bits set\n let input = (U128_MAX - U64_MAX as Field);\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, 0);\n\n // Test case 3: Only msg_metadata bits set\n let input = U64_MAX as Field;\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 4: No bits set\n let input = 0;\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, 0);\n }\n\n #[test]\n unconstrained fn to_from_expanded_metadata(original_msg_type: u64, original_msg_metadata: u64) {\n let packed = to_expanded_metadata(original_msg_type, original_msg_metadata);\n let (unpacked_msg_type, unpacked_msg_metadata) = from_expanded_metadata(packed).unwrap();\n\n assert_eq(original_msg_type, unpacked_msg_type);\n assert_eq(original_msg_metadata, unpacked_msg_metadata);\n }\n\n #[test]\n unconstrained fn encode_decode_max_size_message() {\n let msg_type_id: u64 = 42;\n let msg_metadata: u64 = 99;\n let mut msg_content = [0; MAX_MESSAGE_CONTENT_LEN];\n for i in 0..MAX_MESSAGE_CONTENT_LEN {\n msg_content[i] = i as Field;\n }\n\n let encoded = encode_message(msg_type_id, msg_metadata, msg_content);\n let (decoded_type_id, decoded_metadata, decoded_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_type_id, msg_type_id);\n assert_eq(decoded_metadata, msg_metadata);\n assert_eq(decoded_content, BoundedVec::from_array(msg_content));\n }\n\n #[test(should_fail_with = \"Invalid message content: it must have a length of at most MAX_MESSAGE_CONTENT_LEN\")]\n fn encode_oversized_message_fails() {\n let msg_content = [0; MAX_MESSAGE_CONTENT_LEN + 1];\n let _ = encode_message(0, 0, msg_content);\n }\n\n #[test]\n unconstrained fn decode_empty_message_returns_none() {\n assert(decode_message(BoundedVec::new()).is_none());\n }\n\n #[test]\n unconstrained fn decode_message_with_oversized_metadata_returns_none() {\n let message = BoundedVec::from_array([TWO_POW_128]);\n assert(decode_message(message).is_none());\n }\n}\n"
3322
+ "source": "// TODO(#12750): don't make these values assume we're using AES.\nuse crate::protocol::constants::PRIVATE_LOG_CIPHERTEXT_LEN;\nuse crate::utils::array;\n\n// We reassign to the constant here to communicate the distinction between a log and a message. In Aztec.nr, unlike in\n// protocol circuits, we have a concept of a message that can be emitted either as a private log or as an offchain\n// message. Message is a piece of data that is to be eventually delivered to a contract via the `process_message(...)`\n// utility function function that is injected by the #[aztec] macro. Note: PRIVATE_LOG_CIPHERTEXT_LEN is an amount of\n// fields, so MESSAGE_CIPHERTEXT_LEN is the size of the message in fields.\npub global MESSAGE_CIPHERTEXT_LEN: u32 = PRIVATE_LOG_CIPHERTEXT_LEN;\n\n// TODO(#12750): The global variables below should not be here as they are AES128 specific.\n// The header plaintext is 2 bytes (ciphertext length), padded to the 16-byte AES block size by PKCS#7.\npub(crate) global HEADER_CIPHERTEXT_SIZE_IN_BYTES: u32 = 16;\n// AES PKCS#7 always adds at least one byte of padding. Since each plaintext field is 32 bytes (a multiple of the\n// 16-byte AES block size), a full 16-byte padding block is always appended.\npub(crate) global AES128_PKCS7_EXPANSION_IN_BYTES: u32 = 16;\n\npub global EPH_PK_X_SIZE_IN_FIELDS: u32 = 1;\n\n// (15 - 1) * 31 - 16 - 16 = 402. Note: We multiply by 31 because ciphertext bytes are stored in fields using\n// encode_bytes_as_fields, which packs 31 bytes per field (since a Field is ~254 bits and can safely store 31 whole\n// bytes).\npub(crate) global MESSAGE_PLAINTEXT_SIZE_IN_BYTES: u32 = (MESSAGE_CIPHERTEXT_LEN - EPH_PK_X_SIZE_IN_FIELDS) * 31\n - HEADER_CIPHERTEXT_SIZE_IN_BYTES\n - AES128_PKCS7_EXPANSION_IN_BYTES;\n// The plaintext bytes represent Field values that were originally serialized using encode_fields_as_bytes, which\n// converts each Field to 32 bytes. To convert the plaintext bytes back to fields, we divide by 32. 402 / 32 = 12\npub global MESSAGE_PLAINTEXT_LEN: u32 = MESSAGE_PLAINTEXT_SIZE_IN_BYTES / 32;\n\npub global MESSAGE_EXPANDED_METADATA_LEN: u32 = 1;\n\n// The standard message layout is composed of:\n// - an initial field called the 'expanded metadata'\n// - an arbitrary number of fields following that called the 'message content'\n//\n// ```\n// message: [ msg_expanded_metadata, ...msg_content ]\n// ```\n//\n// The expanded metadata itself is interpreted as a u128, of which:\n// - the upper 64 bits are the message type id\n// - the lower 64 bits are called the 'message metadata'\n//\n// ```\n// msg_expanded_metadata: [ msg_type_id | msg_metadata ]\n// <--- 64 bits --->|<--- 64 bits --->\n// ```\n//\n// The meaning of the message metadata and message content depend on the value of the message type id. Note that there\n// is nothing special about the message metadata, it _can_ be considered part of the content. It just has a different\n// name to make it distinct from the message content given that it is not a full field.\n\n/// The maximum length of a message's content, i.e. not including the expanded message metadata.\npub global MAX_MESSAGE_CONTENT_LEN: u32 = MESSAGE_PLAINTEXT_LEN - MESSAGE_EXPANDED_METADATA_LEN;\n\n/// Encodes a message following aztec-nr's standard message encoding. This message can later be decoded with\n/// `decode_message` to retrieve the original values.\n///\n/// - The `msg_type` is an identifier that groups types of messages that are all processed the same way, e.g. private\n/// notes or events. Possible values are defined in `aztec::messages::msg_type`.\n/// - The `msg_metadata` and `msg_content` are the values stored in the message, whose meaning depends on the\n/// `msg_type`. The only special thing about `msg_metadata` that separates it from `msg_content` is that it is a u64\n/// instead of a full Field (due to details of how messages are encoded), allowing applications that can fit values\n/// into this smaller variable to achieve higher data efficiency.\npub fn encode_message<let N: u32>(\n msg_type: u64,\n msg_metadata: u64,\n msg_content: [Field; N],\n) -> [Field; (N + MESSAGE_EXPANDED_METADATA_LEN)] {\n std::static_assert(\n msg_content.len() <= MAX_MESSAGE_CONTENT_LEN,\n \"Invalid message content: it must have a length of at most MAX_MESSAGE_CONTENT_LEN\",\n );\n\n // If MESSAGE_EXPANDED_METADATA_LEN is changed, causing the assertion below to fail, then the destructuring of the\n // message encoding below must be updated as well.\n std::static_assert(\n MESSAGE_EXPANDED_METADATA_LEN == 1,\n \"unexpected value for MESSAGE_EXPANDED_METADATA_LEN\",\n );\n let mut message: [Field; (N + MESSAGE_EXPANDED_METADATA_LEN)] = std::mem::zeroed();\n\n message[0] = to_expanded_metadata(msg_type, msg_metadata);\n for i in 0..msg_content.len() {\n message[MESSAGE_EXPANDED_METADATA_LEN + i] = msg_content[i];\n }\n\n message\n}\n\n/// Decodes a standard aztec-nr message, i.e. one created via `encode_message`, returning the original encoded values.\n///\n/// Returns `None` if the message is empty or has invalid (>128 bit) expanded metadata.\n///\n/// Note that `encode_message` returns a fixed size array while this function takes a `BoundedVec`: this is because\n/// prior to decoding the message type is unknown, and consequentially not known at compile time. If working with\n/// fixed-size messages, consider using `BoundedVec::from_array` to convert them.\npub unconstrained fn decode_message(\n message: BoundedVec<Field, MESSAGE_PLAINTEXT_LEN>,\n) -> Option<(u64, u64, BoundedVec<Field, MAX_MESSAGE_CONTENT_LEN>)> {\n Option::some(message)\n .and_then(|message| {\n // If MESSAGE_EXPANDED_METADATA_LEN is changed, causing the assertion below to fail, then the destructuring\n // of the\n // message encoding below must be updated as well.\n std::static_assert(\n MESSAGE_EXPANDED_METADATA_LEN == 1,\n \"unexpected value for MESSAGE_EXPANDED_METADATA_LEN\",\n );\n if message.len() < MESSAGE_EXPANDED_METADATA_LEN {\n Option::none()\n } else {\n Option::some(message.get(0))\n }\n })\n .and_then(|msg_expanded_metadata| from_expanded_metadata(msg_expanded_metadata))\n .map(|(msg_type_id, msg_metadata)| {\n let msg_content = array::subbvec(message, MESSAGE_EXPANDED_METADATA_LEN);\n (msg_type_id, msg_metadata, msg_content)\n })\n}\n\nglobal U64_SHIFT_MULTIPLIER: Field = 2.pow_32(64);\n\nfn to_expanded_metadata(msg_type: u64, msg_metadata: u64) -> Field {\n // We use multiplication instead of bit shifting operations to shift the type bits as bit shift operations are\n // expensive in circuits.\n let type_field: Field = (msg_type as Field) * U64_SHIFT_MULTIPLIER;\n let msg_metadata_field = msg_metadata as Field;\n\n type_field + msg_metadata_field\n}\n\nglobal TWO_POW_128: Field = 2.pow_32(128);\n\n/// Unpacks expanded metadata into (msg_type, msg_metadata). Returns `None` if `input >= 2^128`.\nfn from_expanded_metadata(input: Field) -> Option<(u64, u64)> {\n if input.lt(TWO_POW_128) {\n let msg_metadata = (input as u64);\n let msg_type = ((input - (msg_metadata as Field)) / U64_SHIFT_MULTIPLIER) as u64;\n // Use division instead of bit shift since bit shifts are expensive in circuits\n Option::some((msg_type, msg_metadata))\n } else {\n Option::none()\n }\n}\n\nmod tests {\n use crate::utils::array::subarray::subarray;\n use super::{\n decode_message, encode_message, from_expanded_metadata, MAX_MESSAGE_CONTENT_LEN, to_expanded_metadata,\n TWO_POW_128,\n };\n\n global U64_MAX: u64 = (2.pow_32(64) - 1) as u64;\n global U128_MAX: Field = (2.pow_32(128) - 1);\n\n #[test]\n unconstrained fn encode_decode_empty_message(msg_type: u64, msg_metadata: u64) {\n let encoded = encode_message(msg_type, msg_metadata, []);\n let (decoded_msg_type, decoded_msg_metadata, decoded_msg_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_msg_type, msg_type);\n assert_eq(decoded_msg_metadata, msg_metadata);\n assert_eq(decoded_msg_content.len(), 0);\n }\n\n #[test]\n unconstrained fn encode_decode_short_message(\n msg_type: u64,\n msg_metadata: u64,\n msg_content: [Field; MAX_MESSAGE_CONTENT_LEN / 2],\n ) {\n let encoded = encode_message(msg_type, msg_metadata, msg_content);\n let (decoded_msg_type, decoded_msg_metadata, decoded_msg_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_msg_type, msg_type);\n assert_eq(decoded_msg_metadata, msg_metadata);\n assert_eq(decoded_msg_content.len(), msg_content.len());\n assert_eq(subarray(decoded_msg_content.storage(), 0), msg_content);\n }\n\n #[test]\n unconstrained fn encode_decode_full_message(\n msg_type: u64,\n msg_metadata: u64,\n msg_content: [Field; MAX_MESSAGE_CONTENT_LEN],\n ) {\n let encoded = encode_message(msg_type, msg_metadata, msg_content);\n let (decoded_msg_type, decoded_msg_metadata, decoded_msg_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_msg_type, msg_type);\n assert_eq(decoded_msg_metadata, msg_metadata);\n assert_eq(decoded_msg_content.len(), msg_content.len());\n assert_eq(subarray(decoded_msg_content.storage(), 0), msg_content);\n }\n\n #[test]\n unconstrained fn to_expanded_metadata_packing() {\n // Test case 1: All bits set\n let packed = to_expanded_metadata(U64_MAX, U64_MAX);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 2: Only log type bits set\n let packed = to_expanded_metadata(U64_MAX, 0);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, 0);\n\n // Test case 3: Only msg_metadata bits set\n let packed = to_expanded_metadata(0, U64_MAX);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 4: No bits set\n let packed = to_expanded_metadata(0, 0);\n let (msg_type, msg_metadata) = from_expanded_metadata(packed).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, 0);\n }\n\n #[test]\n unconstrained fn from_expanded_metadata_packing() {\n // Test case 1: All bits set\n let input = U128_MAX as Field;\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 2: Only log type bits set\n let input = (U128_MAX - U64_MAX as Field);\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, U64_MAX);\n assert_eq(msg_metadata, 0);\n\n // Test case 3: Only msg_metadata bits set\n let input = U64_MAX as Field;\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, U64_MAX);\n\n // Test case 4: No bits set\n let input = 0;\n let (msg_type, msg_metadata) = from_expanded_metadata(input).unwrap();\n assert_eq(msg_type, 0);\n assert_eq(msg_metadata, 0);\n }\n\n #[test]\n unconstrained fn to_from_expanded_metadata(original_msg_type: u64, original_msg_metadata: u64) {\n let packed = to_expanded_metadata(original_msg_type, original_msg_metadata);\n let (unpacked_msg_type, unpacked_msg_metadata) = from_expanded_metadata(packed).unwrap();\n\n assert_eq(original_msg_type, unpacked_msg_type);\n assert_eq(original_msg_metadata, unpacked_msg_metadata);\n }\n\n #[test]\n unconstrained fn encode_decode_max_size_message() {\n let msg_type_id: u64 = 42;\n let msg_metadata: u64 = 99;\n let mut msg_content = [0; MAX_MESSAGE_CONTENT_LEN];\n for i in 0..MAX_MESSAGE_CONTENT_LEN {\n msg_content[i] = i as Field;\n }\n\n let encoded = encode_message(msg_type_id, msg_metadata, msg_content);\n let (decoded_type_id, decoded_metadata, decoded_content) =\n decode_message(BoundedVec::from_array(encoded)).unwrap();\n\n assert_eq(decoded_type_id, msg_type_id);\n assert_eq(decoded_metadata, msg_metadata);\n assert_eq(decoded_content, BoundedVec::from_array(msg_content));\n }\n\n #[test(should_fail_with = \"Invalid message content: it must have a length of at most MAX_MESSAGE_CONTENT_LEN\")]\n fn encode_oversized_message_fails() {\n let msg_content = [0; MAX_MESSAGE_CONTENT_LEN + 1];\n let _ = encode_message(0, 0, msg_content);\n }\n\n #[test]\n unconstrained fn decode_empty_message_returns_none() {\n assert(decode_message(BoundedVec::new()).is_none());\n }\n\n #[test]\n unconstrained fn decode_message_with_oversized_metadata_returns_none() {\n let message = BoundedVec::from_array([TWO_POW_128]);\n assert(decode_message(message).is_none());\n }\n}\n"
3327
3323
  },
3328
3324
  "133": {
3329
3325
  "function_locations": [
3330
3326
  {
3331
3327
  "name": "extract_many_close_to_uniformly_random_256_bits_using_poseidon2",
3332
- "start": 1736
3328
+ "start": 1764
3333
3329
  },
3334
3330
  {
3335
3331
  "name": "derive_aes_symmetric_key_and_iv_from_uniformly_random_256_bits",
3336
- "start": 4755
3332
+ "start": 4783
3337
3333
  },
3338
3334
  {
3339
3335
  "name": "derive_aes_symmetric_key_and_iv_from_shared_secret",
3340
- "start": 5304
3336
+ "start": 5332
3341
3337
  },
3342
3338
  {
3343
3339
  "name": "<impl MessageEncryption for AES128>::encrypt",
3344
- "start": 10337
3340
+ "start": 10365
3345
3341
  },
3346
3342
  {
3347
3343
  "name": "<impl MessageEncryption for AES128>::decrypt",
3348
- "start": 17660
3344
+ "start": 17702
3349
3345
  },
3350
3346
  {
3351
3347
  "name": "encode_header",
3352
- "start": 21676
3348
+ "start": 21732
3353
3349
  },
3354
3350
  {
3355
3351
  "name": "extract_ciphertext_length",
3356
- "start": 22007
3352
+ "start": 22063
3357
3353
  },
3358
3354
  {
3359
3355
  "name": "unmask_field",
3360
- "start": 22592
3356
+ "start": 22648
3361
3357
  },
3362
3358
  {
3363
3359
  "name": "random_address_point",
3364
- "start": 23005
3360
+ "start": 23061
3365
3361
  },
3366
3362
  {
3367
3363
  "name": "test::encrypt_decrypt_deterministic",
3368
- "start": 24172
3364
+ "start": 24228
3369
3365
  },
3370
3366
  {
3371
3367
  "name": "test::encrypt_decrypt_random",
3372
- "start": 26650
3368
+ "start": 26706
3373
3369
  },
3374
3370
  {
3375
3371
  "name": "test::encrypt_to_invalid_address",
3376
- "start": 27496
3372
+ "start": 27552
3377
3373
  },
3378
3374
  {
3379
3375
  "name": "test::pkcs7_padding_always_adds_at_least_one_byte",
3380
- "start": 27946
3376
+ "start": 28002
3381
3377
  },
3382
3378
  {
3383
3379
  "name": "test::encrypt_decrypt_max_size_plaintext",
3384
- "start": 28510
3380
+ "start": 28566
3385
3381
  },
3386
3382
  {
3387
3383
  "name": "test::encrypt_oversized_plaintext",
3388
- "start": 29409
3384
+ "start": 29465
3389
3385
  },
3390
3386
  {
3391
3387
  "name": "test::random_address_point_produces_valid_points",
3392
- "start": 29767
3388
+ "start": 29823
3393
3389
  },
3394
3390
  {
3395
3391
  "name": "test::decrypt_invalid_ephemeral_public_key",
3396
- "start": 30218
3392
+ "start": 30274
3397
3393
  },
3398
3394
  {
3399
3395
  "name": "test::decrypt_returns_none_on_empty_ciphertext",
3400
- "start": 31063
3396
+ "start": 31119
3401
3397
  },
3402
3398
  {
3403
3399
  "name": "test::decrypt_returns_none_on_empty_header",
3404
- "start": 31617
3400
+ "start": 31673
3405
3401
  },
3406
3402
  {
3407
3403
  "name": "test::decrypt_returns_none_on_oversized_ciphertext_length",
3408
- "start": 32543
3404
+ "start": 32599
3409
3405
  }
3410
3406
  ],
3411
3407
  "path": "/home/aztec-dev/aztec-packages/noir-projects/aztec-nr/aztec/src/messages/encryption/aes128.nr",
3412
- "source": "use crate::protocol::{address::AztecAddress, public_keys::AddressPoint, traits::ToField};\n\nuse crate::{\n keys::{\n ecdh_shared_secret::{\n compute_app_siloed_shared_secret, derive_ecdh_shared_secret, derive_shared_secret_field_mask,\n derive_shared_secret_subkey,\n },\n ephemeral::generate_positive_ephemeral_key_pair,\n },\n logging::aztecnr_warn_log_format,\n messages::{\n encoding::{\n EPH_PK_X_SIZE_IN_FIELDS, HEADER_CIPHERTEXT_SIZE_IN_BYTES, MESSAGE_CIPHERTEXT_LEN, MESSAGE_PLAINTEXT_LEN,\n MESSAGE_PLAINTEXT_SIZE_IN_BYTES,\n },\n encryption::message_encryption::MessageEncryption,\n logs::arithmetic_generics_utils::{\n get_arr_of_size__message_bytes__from_PT, get_arr_of_size__message_bytes_padding__from_PT,\n },\n },\n oracle::{aes128_decrypt::try_aes128_decrypt, random::random, shared_secret::get_shared_secret},\n utils::{\n array,\n conversion::{\n bytes_to_fields::{bytes_from_fields, bytes_to_fields},\n fields_to_bytes::{fields_to_bytes, try_fields_from_bytes},\n },\n point::point_from_x_coord_and_sign,\n },\n};\n\nuse std::aes128::aes128_encrypt;\n\n/// Computes N close-to-uniformly-random 256 bits from a given app-siloed shared secret.\n///\n/// NEVER re-use the same iv and sym_key. DO NOT call this function more than once with the same s_app.\n///\n/// This function is only known to be safe if s_app is derived from combining a random ephemeral key with an\n/// address point and a contract address. See big comment within the body of the function.\nfn extract_many_close_to_uniformly_random_256_bits_using_poseidon2<let N: u32>(s_app: Field) -> [[u8; 32]; N] {\n /*\n * Unsafe because of https://eprint.iacr.org/2010/264.pdf Page 13, Lemma 2 (and the two paragraphs below it).\n *\n * If you call this function, you need to be careful and aware of how the arg `s_app` has been derived.\n *\n * The paper says that the way you derive aes keys and IVs should be fine with poseidon2 (modelled as a RO),\n * as long as you _don't_ use Poseidon2 as a PRG to generate the two exponents x & y which multiply to the\n * shared secret S:\n *\n * S = [x*y]*G.\n *\n * (Otherwise, you would have to \"key\" poseidon2, i.e. generate a uniformly string K which can be public and\n * compute Hash(x) as poseidon(K,x)).\n * In that lemma, k would be 2*254=508, and m would be the number of points on the grumpkin curve (which is\n * close to r according to the Hasse bound).\n *\n * Our shared secret S is [esk * address_sk] * G, and the question is: Can we compute hash(S) using poseidon2\n * instead of sha256?\n *\n * Well, esk is random and not generated with poseidon2, so that's good.\n * What about address_sk?\n * Well, address_sk = poseidon2(stuff) + ivsk, so there was some discussion about whether address_sk is\n * independent of poseidon2. Given that ivsk is random and independent of poseidon2, the address_sk is also\n * independent of poseidon2.\n *\n * Tl;dr: we believe it's safe to hash S = [esk * address_sk] * G using poseidon2, in order to derive a\n * symmetric key.\n *\n * If you're calling this function for a differently-derived `s_app`, be careful.\n */\n \n\n /* The output of this function needs to be 32 random bytes.\n * A single field won't give us 32 bytes of entropy. So we compute two \"random\" fields, by poseidon-hashing\n * with two different indices. We then extract the last 16 (big endian) bytes of each \"random\" field.\n * Note: we use to_be_bytes because it's slightly more efficient. But we have to be careful not to take bytes\n * from the \"big end\", because the \"big\" byte is not uniformly random over the byte: it only has < 6 bits of\n * randomness, because it's the big end of a 254-bit field element.\n */\n\n let mut all_bytes: [[u8; 32]; N] = std::mem::zeroed();\n std::static_assert(N < 256, \"N too large\");\n for k in 0..N {\n let rand1: Field = derive_shared_secret_subkey(s_app, 2 * k);\n let rand2: Field = derive_shared_secret_subkey(s_app, 2 * k + 1);\n\n let rand1_bytes: [u8; 32] = rand1.to_be_bytes();\n let rand2_bytes: [u8; 32] = rand2.to_be_bytes();\n\n let mut bytes: [u8; 32] = [0; 32];\n for i in 0..16 {\n // We take bytes from the \"little end\" of the be-bytes arrays:\n let j = 32 - i - 1;\n bytes[i] = rand1_bytes[j];\n bytes[16 + i] = rand2_bytes[j];\n }\n\n all_bytes[k] = bytes;\n }\n\n all_bytes\n}\n\nfn derive_aes_symmetric_key_and_iv_from_uniformly_random_256_bits<let N: u32>(\n many_random_256_bits: [[u8; 32]; N],\n) -> [([u8; 16], [u8; 16]); N] {\n // Many (sym_key, iv) pairs:\n let mut many_pairs: [([u8; 16], [u8; 16]); N] = std::mem::zeroed();\n for k in 0..N {\n let random_256_bits = many_random_256_bits[k];\n let mut sym_key = [0; 16];\n let mut iv = [0; 16];\n for i in 0..16 {\n sym_key[i] = random_256_bits[i];\n iv[i] = random_256_bits[i + 16];\n }\n many_pairs[k] = (sym_key, iv);\n }\n\n many_pairs\n}\n\npub fn derive_aes_symmetric_key_and_iv_from_shared_secret<let N: u32>(s_app: Field) -> [([u8; 16], [u8; 16]); N] {\n let many_random_256_bits: [[u8; 32]; N] = extract_many_close_to_uniformly_random_256_bits_using_poseidon2(s_app);\n\n derive_aes_symmetric_key_and_iv_from_uniformly_random_256_bits(many_random_256_bits)\n}\n\npub struct AES128 {}\n\nimpl MessageEncryption for AES128 {\n\n /// AES128-CBC encryption for Aztec protocol messages.\n ///\n /// ## Overview\n ///\n /// The plaintext is an array of up to `MESSAGE_PLAINTEXT_LEN` (12) fields. The output is always exactly\n /// `MESSAGE_CIPHERTEXT_LEN` (15) fields, regardless of plaintext size. All output fields except the\n /// ephemeral public key are uniformly random `Field` values to any observer without knowledge of the\n /// shared secret, making all encrypted messages indistinguishable by size or content.\n ///\n /// ## PKCS#7 Padding\n ///\n /// AES operates on 16-byte blocks, so the plaintext must be padded to a multiple of 16. PKCS#7 padding always\n /// adds at least 1 byte (so the receiver can always detect and strip it), which means:\n /// - 1 B plaintext -> 15 B padding -> 16 B total\n /// - 15 B plaintext -> 1 B padding -> 16 B total\n /// - 16 B plaintext -> 16 B padding -> 32 B total (full extra block)\n ///\n /// In general: if the plaintext is already a multiple of 16, a full 16-byte padding block is appended.\n ///\n /// ## Encryption Steps\n ///\n /// **1. Body encryption.** The plaintext fields are serialized to bytes (32 bytes per field) and AES-128-CBC\n /// encrypted. Since 32 is a multiple of 16, PKCS#7 always adds a full 16-byte padding block (see above):\n ///\n /// ```text\n /// +---------------------------------------------+\n /// | body ct |\n /// | PlaintextLen*32 + 16 B |\n /// +-------------------------------+--------------+\n /// | encrypted plaintext fields | PKCS#7 (16B) |\n /// | (serialized at 32 B each) | |\n /// +-------------------------------+--------------+\n /// ```\n ///\n /// **2. Header encryption.** The byte length of `body_ct` is stored as a 2-byte big-endian integer. This 2-byte\n /// header plaintext is then AES-encrypted; PKCS#7 pads the remaining 14 bytes to fill one 16-byte AES block,\n /// producing a 16-byte header ciphertext:\n ///\n /// ```text\n /// +---------------------------+\n /// | header ct |\n /// | 16 B |\n /// +--------+------------------+\n /// | body ct| PKCS#7 (14B) |\n /// | length | |\n /// | (2 B) | |\n /// +--------+------------------+\n /// ```\n ///\n /// ## Wire Format\n ///\n /// Messages are transmitted as fields, not bytes. A field is ~254 bits and can safely store 31 whole bytes, so\n /// we need to pack our byte data into 31-byte chunks. This packing drives the wire format.\n ///\n /// **Step 1 -- Assemble bytes.** The ciphertexts are laid out in a byte array, padded with zero bytes to a\n /// multiple of 31 so it divides evenly into fields:\n ///\n /// ```text\n /// +------------+-------------------------+---------+\n /// | header ct | body ct | byte pad|\n /// | 16 B | PlaintextLen*32 + 16 B | (zeros) |\n /// +------------+-------------------------+---------+\n /// |<-------- padded to a multiple of 31 B -------->|\n /// ```\n ///\n /// **Step 2 -- Pack and mask.** The byte array is split into 31-byte chunks, each stored in one field. A\n /// Poseidon2-derived mask (see `derive_shared_secret_field_mask`) is added to each so that the resulting\n /// fields appear as uniformly random `Field` values to any observer without knowledge of the shared secret,\n /// hiding the fact that the underlying ciphertext consists of 128-bit AES blocks.\n ///\n /// **Step 3 -- Assemble ciphertext.** The ephemeral public key x-coordinate is prepended and random field padding\n /// is appended to fill to 15 fields:\n ///\n /// ```text\n /// +----------+-------------------------+-------------------+\n /// | eph_pk.x | masked message fields | random field pad |\n /// | | (packed 31 B per field) | (fills to 15) |\n /// +----------+-------------------------+-------------------+\n /// |<---------- MESSAGE_CIPHERTEXT_LEN = 15 fields -------->|\n /// ```\n ///\n /// ## Key Derivation\n ///\n /// The raw ECDH shared secret point is first app-siloed into a scalar `s_app` by hashing with the contract\n /// address (see\n /// [`compute_app_siloed_shared_secret`](crate::keys::ecdh_shared_secret::compute_app_siloed_shared_secret)).\n /// Two (key, IV) pairs are then derived from `s_app` via indexed Poseidon2 hashing: one pair for the body\n /// ciphertext and one for the header ciphertext.\n fn encrypt<let PlaintextLen: u32>(\n plaintext: [Field; PlaintextLen],\n recipient: AztecAddress,\n contract_address: AztecAddress,\n ) -> [Field; MESSAGE_CIPHERTEXT_LEN] {\n std::static_assert(\n PlaintextLen <= MESSAGE_PLAINTEXT_LEN,\n \"Plaintext length exceeds MESSAGE_PLAINTEXT_LEN\",\n );\n\n // AES 128 operates on bytes, not fields, so we need to convert the fields to bytes. (This process is then\n // reversed when processing the message in `process_message_ciphertext`)\n let plaintext_bytes = fields_to_bytes(plaintext);\n\n // Derive ECDH shared secret with recipient using a fresh ephemeral keypair.\n let (eph_sk, eph_pk) = generate_positive_ephemeral_key_pair();\n\n let raw_shared_secret = derive_ecdh_shared_secret(\n eph_sk,\n recipient\n .to_address_point()\n .unwrap_or_else(|| {\n aztecnr_warn_log_format!(\n \"Attempted to encrypt message for an invalid recipient ({0})\",\n )(\n [recipient.to_field()],\n );\n\n // Safety: if the recipient is an invalid address, then it is not possible to encrypt a message for\n // them because we cannot establish a shared secret. This is never expected to occur during normal\n // operation. However, it is technically possible for us to receive an invalid address, and we must\n // therefore handle it. We could simply fail, but that'd introduce a potential security issue in\n // which an attacker forces a contract to encrypt a message for an invalid address, resulting in an\n // impossible transaction - this is sometimes called a 'king of the hill' attack. We choose instead\n // to not fail and encrypt the plaintext regardless using the shared secret that results from a\n // random valid address. The sender is free to choose this address and hence shared secret, but\n // this has no security implications as they already know not only the full plaintext but also the\n // ephemeral private key anyway.\n unsafe {\n random_address_point()\n }\n })\n .inner,\n );\n\n let s_app = compute_app_siloed_shared_secret(raw_shared_secret, contract_address);\n\n // It is safe to derive AES keys from `s_app` using Poseidon2 because `s_app` was derived from an ECDH shared\n // secret using an AztecAddress (the recipient). See the block comment in\n // `extract_many_close_to_uniformly_random_256_bits_using_poseidon2` for more info.\n let pairs = derive_aes_symmetric_key_and_iv_from_shared_secret::<2>(s_app);\n let (body_sym_key, body_iv) = pairs[0];\n let (header_sym_key, header_iv) = pairs[1];\n\n let ciphertext_bytes = aes128_encrypt(plaintext_bytes, body_iv, body_sym_key);\n\n // Each plaintext field is 32 bytes (a multiple of the 16-byte AES block\n // size), so PKCS#7 always appends a full 16-byte padding block:\n // |ciphertext| = PlaintextLen*32 + 16 = 16 * (1 + PlaintextLen*32 / 16)\n std::static_assert(\n ciphertext_bytes.len() == 16 * (1 + (PlaintextLen * 32) / 16),\n \"unexpected ciphertext length\",\n );\n\n // Encrypt a 2-byte header containing the body ciphertext length.\n let header_plaintext = encode_header(ciphertext_bytes.len());\n\n // Note: the aes128_encrypt builtin fn automatically appends bytes to the input, according to pkcs#7; hence why\n // the output `header_ciphertext_bytes` is 16 bytes larger than the input in this case.\n let header_ciphertext_bytes = aes128_encrypt(header_plaintext, header_iv, header_sym_key);\n // Verify expected header ciphertext size at compile time.\n std::static_assert(\n header_ciphertext_bytes.len() == HEADER_CIPHERTEXT_SIZE_IN_BYTES,\n \"unexpected ciphertext header length\",\n );\n\n // Assemble the message byte array:\n // [header_ct (16B)] [body_ct] [padding to mult of 31]\n let message_bytes_padding_to_mult_31 = get_arr_of_size__message_bytes_padding__from_PT::<PlaintextLen * 32>();\n\n let mut message_bytes = get_arr_of_size__message_bytes__from_PT::<PlaintextLen * 32>();\n\n std::static_assert(\n message_bytes.len() % 31 == 0,\n \"Unexpected error: message_bytes.len() should be divisible by 31, by construction.\",\n );\n\n let mut offset = 0;\n for i in 0..header_ciphertext_bytes.len() {\n message_bytes[offset + i] = header_ciphertext_bytes[i];\n }\n offset += header_ciphertext_bytes.len();\n\n for i in 0..ciphertext_bytes.len() {\n message_bytes[offset + i] = ciphertext_bytes[i];\n }\n offset += ciphertext_bytes.len();\n\n for i in 0..message_bytes_padding_to_mult_31.len() {\n message_bytes[offset + i] = message_bytes_padding_to_mult_31[i];\n }\n offset += message_bytes_padding_to_mult_31.len();\n\n // Ideally we would be able to have a static assert where we check that the offset would be such that we've\n // written to the entire log_bytes array, but we cannot since Noir does not treat the offset as a comptime\n // value (despite the values that it goes through being known at each stage). We instead check that the\n // computation used to obtain the offset computes the expected value (which we _can_ do in a static check), and\n // then add a cheap runtime check to also validate that the offset matches this.\n std::static_assert(\n header_ciphertext_bytes.len() + ciphertext_bytes.len() + message_bytes_padding_to_mult_31.len()\n == message_bytes.len(),\n \"unexpected message length\",\n );\n assert(offset == message_bytes.len(), \"unexpected encrypted message length\");\n\n // Pack message bytes into fields (31 bytes per field) and prepend eph_pk.x.\n let message_bytes_as_fields = bytes_to_fields(message_bytes);\n\n let mut ciphertext: [Field; MESSAGE_CIPHERTEXT_LEN] = [0; MESSAGE_CIPHERTEXT_LEN];\n\n ciphertext[0] = eph_pk.x;\n\n // Mask each content field with a Poseidon2-derived value, so that they appear as uniformly random `Field`\n // values\n let mut offset = 1;\n for i in 0..message_bytes_as_fields.len() {\n let mask = derive_shared_secret_field_mask(s_app, i as u32);\n ciphertext[offset + i] = message_bytes_as_fields[i] + mask;\n }\n offset += message_bytes_as_fields.len();\n\n // Pad with random fields so that padding is indistinguishable from masked data fields.\n for i in offset..MESSAGE_CIPHERTEXT_LEN {\n // Safety: we assume that the sender wants for the message to be private - a malicious one could simply\n // reveal its contents publicly. It is therefore fine to trust the sender to provide random padding.\n ciphertext[i] = unsafe { random() };\n }\n\n ciphertext\n }\n\n unconstrained fn decrypt(\n ciphertext: BoundedVec<Field, MESSAGE_CIPHERTEXT_LEN>,\n recipient: AztecAddress,\n contract_address: AztecAddress,\n ) -> Option<BoundedVec<Field, MESSAGE_PLAINTEXT_LEN>> {\n // Extract the ephemeral public key x-coordinate and masked fields, returning None for empty ciphertext.\n if ciphertext.len() > 0 {\n let masked_fields: BoundedVec<Field, MESSAGE_CIPHERTEXT_LEN - EPH_PK_X_SIZE_IN_FIELDS> =\n array::subbvec(ciphertext, EPH_PK_X_SIZE_IN_FIELDS);\n Option::some((ciphertext.get(0), masked_fields))\n } else {\n Option::none()\n }\n .and_then(|(eph_pk_x, masked_fields)| {\n // With the x-coordinate of the ephemeral public key we can reconstruct the point as we know that the\n // y-coordinate must be positive. This may fail however, as not all x-coordinates are on the curve. In\n // that case, we simply return `Option::none`.\n point_from_x_coord_and_sign(eph_pk_x, true).and_then(|eph_pk| {\n let s_app = get_shared_secret(recipient, eph_pk, contract_address);\n\n let unmasked_fields = masked_fields.mapi(|i, field| {\n let unmasked = unmask_field(s_app, i, field);\n // If we failed to unmask the field, we are dealing with the random padding. We'll ignore it\n // later, so we can simply set it to 0\n unmasked.unwrap_or(0)\n });\n let ciphertext_without_eph_pk_x = bytes_from_fields(unmasked_fields);\n\n // Derive symmetric keys:\n let pairs = derive_aes_symmetric_key_and_iv_from_shared_secret::<2>(s_app);\n let (body_sym_key, body_iv) = pairs[0];\n let (header_sym_key, header_iv) = pairs[1];\n\n // Extract the header ciphertext\n let header_start = 0;\n let header_ciphertext: [u8; HEADER_CIPHERTEXT_SIZE_IN_BYTES] =\n array::subarray(ciphertext_without_eph_pk_x.storage(), header_start);\n // We need to convert the array to a BoundedVec because the oracle expects a BoundedVec as it's\n // designed to work with messages with unknown length at compile time. This would not be necessary\n // here as the header ciphertext length is fixed. But we do it anyway to not have to have duplicate\n // oracles.\n let header_ciphertext_bvec =\n BoundedVec::<u8, HEADER_CIPHERTEXT_SIZE_IN_BYTES>::from_array(header_ciphertext);\n\n try_aes128_decrypt(header_ciphertext_bvec, header_iv, header_sym_key)\n // Extract ciphertext length from header (2 bytes, big-endian)\n .and_then(|header_plaintext| extract_ciphertext_length(header_plaintext))\n .filter(|ciphertext_length| ciphertext_length <= MESSAGE_PLAINTEXT_SIZE_IN_BYTES)\n .map(|ciphertext_length| {\n // Extract and decrypt main ciphertext\n let ciphertext_start = header_start + HEADER_CIPHERTEXT_SIZE_IN_BYTES;\n let ciphertext_with_padding: [u8; MESSAGE_PLAINTEXT_SIZE_IN_BYTES] =\n array::subarray(ciphertext_without_eph_pk_x.storage(), ciphertext_start);\n BoundedVec::from_parts(ciphertext_with_padding, ciphertext_length)\n })\n // Decrypt main ciphertext and return it\n .and_then(|ciphertext| try_aes128_decrypt(ciphertext, body_iv, body_sym_key))\n // Convert bytes back to fields (32 bytes per field). Returns None if the actual bytes are\n // not valid.\n .and_then(|plaintext_bytes| try_fields_from_bytes(plaintext_bytes))\n })\n })\n }\n}\n\n/// Encodes the body ciphertext length into a 2-byte big-endian header.\nfn encode_header(ciphertext_length: u32) -> [u8; 2] {\n [(ciphertext_length >> 8) as u8, ciphertext_length as u8]\n}\n\n/// Extracts the body ciphertext length from a decrypted header as a 2-byte big-endian integer.\n///\n/// Returns `Option::none()` if the header has fewer than 2 bytes.\nunconstrained fn extract_ciphertext_length<let N: u32>(header: BoundedVec<u8, N>) -> Option<u32> {\n if header.len() >= 2 {\n Option::some(((header.get(0) as u32) << 8) | (header.get(1) as u32))\n } else {\n Option::none()\n }\n}\n\n/// 2^248: upper bound for values that fit in 31 bytes\nglobal TWO_POW_248: Field = 2.pow_32(248);\n\n/// Removes the Poseidon2-derived mask from a ciphertext field. Returns the unmasked value if it fits in 31 bytes\n/// (a content field), or `None` if it doesn't (random padding). Unconstrained to prevent accidental use in\n/// constrained context.\nunconstrained fn unmask_field(s_app: Field, index: u32, masked: Field) -> Option<Field> {\n let unmasked = masked - derive_shared_secret_field_mask(s_app, index);\n if unmasked.lt(TWO_POW_248) {\n Option::some(unmasked)\n } else {\n Option::none()\n }\n}\n\n/// Produces a random valid address point, i.e. one that is on the curve. This is equivalent to calling\n/// [`AztecAddress::to_address_point`] on a random valid address.\nunconstrained fn random_address_point() -> AddressPoint {\n let mut result = std::mem::zeroed();\n\n loop {\n // We simply produce random x coordinates until we find one that is on the curve. About half of the x\n // coordinates fulfill this condition, so this should only take a few iterations at most.\n let x_coord = random();\n let point = point_from_x_coord_and_sign(x_coord, true);\n if point.is_some() {\n result = AddressPoint { inner: point.unwrap() };\n break;\n }\n }\n\n result\n}\n\nmod test {\n use crate::{\n keys::ecdh_shared_secret::{compute_app_siloed_shared_secret, derive_ecdh_shared_secret},\n messages::{\n encoding::{HEADER_CIPHERTEXT_SIZE_IN_BYTES, MESSAGE_PLAINTEXT_LEN, MESSAGE_PLAINTEXT_SIZE_IN_BYTES},\n encryption::message_encryption::MessageEncryption,\n },\n test::helpers::test_environment::TestEnvironment,\n };\n use crate::protocol::{address::AztecAddress, traits::FromField};\n use super::{AES128, encode_header, random_address_point};\n use std::{embedded_curve_ops::EmbeddedCurveScalar, test::OracleMock};\n\n #[test]\n unconstrained fn encrypt_decrypt_deterministic() {\n let env = TestEnvironment::new();\n\n // Message decryption requires oracles that are only available during private execution\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n\n let recipient = AztecAddress::from_field(\n 0x25afb798ea6d0b8c1618e50fdeafa463059415013d3b7c75d46abf5e242be70c,\n );\n\n // Mock random values for deterministic test\n let eph_sk = 0x1358d15019d4639393d62b97e1588c095957ce74a1c32d6ec7d62fe6705d9538;\n let _ = OracleMock::mock(\"aztec_utl_getRandomField\").returns(eph_sk).times(1);\n\n let randomness = 0x0101010101010101010101010101010101010101010101010101010101010101;\n let _ = OracleMock::mock(\"aztec_utl_getRandomField\").returns(randomness).times(1000000);\n\n let _ = OracleMock::mock(\"aztec_prv_getNextAppTagAsSender\").returns(42);\n\n // Encrypt the message\n let encrypted_message = BoundedVec::from_array(AES128::encrypt(plaintext, recipient, contract_address));\n\n // Compute the same app-siloed shared secret that the oracle would return\n let raw_shared_secret = derive_ecdh_shared_secret(\n EmbeddedCurveScalar::from_field(eph_sk),\n recipient.to_address_point().unwrap().inner,\n );\n let s_app = compute_app_siloed_shared_secret(raw_shared_secret, contract_address);\n\n let _ = OracleMock::mock(\"aztec_utl_getSharedSecret\").returns(s_app);\n\n // Decrypt the message\n let decrypted = AES128::decrypt(encrypted_message, recipient, contract_address).unwrap();\n\n // The decryption function spits out a BoundedVec because it's designed to work with messages with unknown\n // length at compile time. For this reason we need to convert the original input to a BoundedVec.\n let plaintext_bvec = BoundedVec::<Field, MESSAGE_PLAINTEXT_LEN>::from_array(plaintext);\n\n // Verify decryption matches original plaintext\n assert_eq(decrypted, plaintext_bvec, \"Decrypted bytes should match original plaintext\");\n\n // The following is a workaround of \"struct is never constructed\" Noir compilation error (we only ever use\n // static methods of the struct).\n let _ = AES128 {};\n });\n }\n\n #[test]\n unconstrained fn encrypt_decrypt_random() {\n // Same as `encrypt_decrypt_deterministic`, except we don't mock any of the oracles and rely on\n // `TestEnvironment` instead.\n let mut env = TestEnvironment::new();\n\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n let ciphertext = AES128::encrypt(plaintext, recipient, contract_address);\n\n assert_eq(\n AES128::decrypt(\n BoundedVec::from_array(ciphertext),\n recipient,\n contract_address,\n )\n .unwrap(),\n BoundedVec::from_array(plaintext),\n );\n });\n }\n\n #[test]\n unconstrained fn encrypt_to_invalid_address() {\n // x = 3 is a non-residue for this curve, resulting in an invalid address\n let invalid_address = AztecAddress { inner: 3 };\n let contract_address = AztecAddress { inner: 42 };\n\n let _ = AES128::encrypt([1, 2, 3, 4], invalid_address, contract_address);\n }\n\n // Documents the PKCS#7 padding behavior that `encrypt` relies on (see its static_assert).\n #[test]\n fn pkcs7_padding_always_adds_at_least_one_byte() {\n let key = [0 as u8; 16];\n let iv = [0 as u8; 16];\n\n // 1 byte input + 15 bytes padding = 16 bytes\n assert_eq(std::aes128::aes128_encrypt([0; 1], iv, key).len(), 16);\n\n // 15 bytes input + 1 byte padding = 16 bytes\n assert_eq(std::aes128::aes128_encrypt([0; 15], iv, key).len(), 16);\n\n // 16 bytes input (block-aligned) + full 16-byte padding block = 32 bytes\n assert_eq(std::aes128::aes128_encrypt([0; 16], iv, key).len(), 32);\n }\n\n #[test]\n unconstrained fn encrypt_decrypt_max_size_plaintext() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let mut plaintext = [0; MESSAGE_PLAINTEXT_LEN];\n for i in 0..MESSAGE_PLAINTEXT_LEN {\n plaintext[i] = i as Field;\n }\n let ciphertext = AES128::encrypt(plaintext, recipient, contract_address);\n\n assert_eq(\n AES128::decrypt(\n BoundedVec::from_array(ciphertext),\n recipient,\n contract_address,\n )\n .unwrap(),\n BoundedVec::from_array(plaintext),\n );\n });\n }\n\n #[test(should_fail_with = \"Plaintext length exceeds MESSAGE_PLAINTEXT_LEN\")]\n unconstrained fn encrypt_oversized_plaintext() {\n let address = AztecAddress { inner: 3 };\n let contract_address = AztecAddress { inner: 42 };\n let plaintext: [Field; MESSAGE_PLAINTEXT_LEN + 1] = [0; MESSAGE_PLAINTEXT_LEN + 1];\n let _ = AES128::encrypt(plaintext, address, contract_address);\n }\n\n #[test]\n unconstrained fn random_address_point_produces_valid_points() {\n // About half of random addresses are invalid, so testing just a couple gives us high confidence that\n // `random_address_point` is indeed producing valid addresses.\n for _ in 0..10 {\n let random_address = AztecAddress { inner: random_address_point().inner.x };\n assert(random_address.to_address_point().is_some());\n }\n }\n\n #[test]\n unconstrained fn decrypt_invalid_ephemeral_public_key() {\n let mut env = TestEnvironment::new();\n\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3, 4];\n let ciphertext = AES128::encrypt(plaintext, recipient, contract_address);\n\n // The first field of the ciphertext is the x-coordinate of the ephemeral public key. We set it to a known\n // non-residue (3), causing `decrypt` to fail to produce a decryption shared secret.\n let mut bad_ciphertext = BoundedVec::from_array(ciphertext);\n bad_ciphertext.set(0, 3);\n\n assert(AES128::decrypt(bad_ciphertext, recipient, contract_address).is_none());\n });\n }\n\n #[test]\n unconstrained fn decrypt_returns_none_on_empty_ciphertext() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n assert(AES128::decrypt(BoundedVec::new(), recipient, contract_address).is_none());\n });\n }\n\n // Mocks the header AES decrypt oracle to return an empty result. The TS oracle never throws on invalid\n // input: it decrypts to garbage bytes or returns empty\n #[test]\n unconstrained fn decrypt_returns_none_on_empty_header() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n let ciphertext = BoundedVec::from_array(AES128::encrypt(plaintext, recipient, contract_address));\n\n let empty_header = BoundedVec::<u8, HEADER_CIPHERTEXT_SIZE_IN_BYTES>::new();\n let _ = OracleMock::mock(\"aztec_utl_decryptAes128\").returns(Option::some(empty_header)).times(1);\n\n assert(AES128::decrypt(ciphertext, recipient, contract_address).is_none());\n });\n }\n\n // Mocks the header oracle to return a 2-byte header that decodes to a ciphertext_length one past the maximum\n // allowed value, verifying the edge case is handled correctly.\n #[test]\n unconstrained fn decrypt_returns_none_on_oversized_ciphertext_length() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n let ciphertext = BoundedVec::from_array(AES128::encrypt(plaintext, recipient, contract_address));\n\n let bad_header = BoundedVec::<u8, HEADER_CIPHERTEXT_SIZE_IN_BYTES>::from_array(encode_header(\n MESSAGE_PLAINTEXT_SIZE_IN_BYTES + 1,\n ));\n let _ = OracleMock::mock(\"aztec_utl_decryptAes128\").returns(Option::some(bad_header)).times(1);\n\n assert(AES128::decrypt(ciphertext, recipient, contract_address).is_none());\n });\n }\n\n}\n"
3408
+ "source": "use crate::protocol::{address::AztecAddress, public_keys::AddressPoint, traits::ToField};\n\nuse crate::{\n keys::{\n ecdh_shared_secret::{\n compute_app_siloed_shared_secret, derive_ecdh_shared_secret, derive_shared_secret_field_mask,\n derive_shared_secret_subkey,\n },\n ephemeral::generate_positive_ephemeral_key_pair,\n },\n logging::aztecnr_warn_log_format,\n messages::{\n encoding::{\n EPH_PK_X_SIZE_IN_FIELDS, HEADER_CIPHERTEXT_SIZE_IN_BYTES, MESSAGE_CIPHERTEXT_LEN, MESSAGE_PLAINTEXT_LEN,\n MESSAGE_PLAINTEXT_SIZE_IN_BYTES,\n },\n encryption::message_encryption::MessageEncryption,\n logs::arithmetic_generics_utils::{\n get_arr_of_size__message_bytes__from_PT, get_arr_of_size__message_bytes_padding__from_PT,\n },\n },\n oracle::{aes128_decrypt::try_aes128_decrypt, random::random, shared_secret::get_shared_secret},\n utils::{\n array,\n conversion::{\n bytes_as_fields::{decode_bytes_from_fields, encode_bytes_as_fields},\n fields_as_bytes::{encode_fields_as_bytes, try_decode_fields_from_bytes},\n },\n point::point_from_x_coord_and_sign,\n },\n};\n\nuse std::aes128::aes128_encrypt;\n\n/// Computes N close-to-uniformly-random 256 bits from a given app-siloed shared secret.\n///\n/// NEVER re-use the same iv and sym_key. DO NOT call this function more than once with the same s_app.\n///\n/// This function is only known to be safe if s_app is derived from combining a random ephemeral key with an\n/// address point and a contract address. See big comment within the body of the function.\nfn extract_many_close_to_uniformly_random_256_bits_using_poseidon2<let N: u32>(s_app: Field) -> [[u8; 32]; N] {\n /*\n * Unsafe because of https://eprint.iacr.org/2010/264.pdf Page 13, Lemma 2 (and the two paragraphs below it).\n *\n * If you call this function, you need to be careful and aware of how the arg `s_app` has been derived.\n *\n * The paper says that the way you derive aes keys and IVs should be fine with poseidon2 (modelled as a RO),\n * as long as you _don't_ use Poseidon2 as a PRG to generate the two exponents x & y which multiply to the\n * shared secret S:\n *\n * S = [x*y]*G.\n *\n * (Otherwise, you would have to \"key\" poseidon2, i.e. generate a uniformly string K which can be public and\n * compute Hash(x) as poseidon(K,x)).\n * In that lemma, k would be 2*254=508, and m would be the number of points on the grumpkin curve (which is\n * close to r according to the Hasse bound).\n *\n * Our shared secret S is [esk * address_sk] * G, and the question is: Can we compute hash(S) using poseidon2\n * instead of sha256?\n *\n * Well, esk is random and not generated with poseidon2, so that's good.\n * What about address_sk?\n * Well, address_sk = poseidon2(stuff) + ivsk, so there was some discussion about whether address_sk is\n * independent of poseidon2. Given that ivsk is random and independent of poseidon2, the address_sk is also\n * independent of poseidon2.\n *\n * Tl;dr: we believe it's safe to hash S = [esk * address_sk] * G using poseidon2, in order to derive a\n * symmetric key.\n *\n * If you're calling this function for a differently-derived `s_app`, be careful.\n */\n \n\n /* The output of this function needs to be 32 random bytes.\n * A single field won't give us 32 bytes of entropy. So we compute two \"random\" fields, by poseidon-hashing\n * with two different indices. We then extract the last 16 (big endian) bytes of each \"random\" field.\n * Note: we use to_be_bytes because it's slightly more efficient. But we have to be careful not to take bytes\n * from the \"big end\", because the \"big\" byte is not uniformly random over the byte: it only has < 6 bits of\n * randomness, because it's the big end of a 254-bit field element.\n */\n\n let mut all_bytes: [[u8; 32]; N] = std::mem::zeroed();\n std::static_assert(N < 256, \"N too large\");\n for k in 0..N {\n let rand1: Field = derive_shared_secret_subkey(s_app, 2 * k);\n let rand2: Field = derive_shared_secret_subkey(s_app, 2 * k + 1);\n\n let rand1_bytes: [u8; 32] = rand1.to_be_bytes();\n let rand2_bytes: [u8; 32] = rand2.to_be_bytes();\n\n let mut bytes: [u8; 32] = [0; 32];\n for i in 0..16 {\n // We take bytes from the \"little end\" of the be-bytes arrays:\n let j = 32 - i - 1;\n bytes[i] = rand1_bytes[j];\n bytes[16 + i] = rand2_bytes[j];\n }\n\n all_bytes[k] = bytes;\n }\n\n all_bytes\n}\n\nfn derive_aes_symmetric_key_and_iv_from_uniformly_random_256_bits<let N: u32>(\n many_random_256_bits: [[u8; 32]; N],\n) -> [([u8; 16], [u8; 16]); N] {\n // Many (sym_key, iv) pairs:\n let mut many_pairs: [([u8; 16], [u8; 16]); N] = std::mem::zeroed();\n for k in 0..N {\n let random_256_bits = many_random_256_bits[k];\n let mut sym_key = [0; 16];\n let mut iv = [0; 16];\n for i in 0..16 {\n sym_key[i] = random_256_bits[i];\n iv[i] = random_256_bits[i + 16];\n }\n many_pairs[k] = (sym_key, iv);\n }\n\n many_pairs\n}\n\npub fn derive_aes_symmetric_key_and_iv_from_shared_secret<let N: u32>(s_app: Field) -> [([u8; 16], [u8; 16]); N] {\n let many_random_256_bits: [[u8; 32]; N] = extract_many_close_to_uniformly_random_256_bits_using_poseidon2(s_app);\n\n derive_aes_symmetric_key_and_iv_from_uniformly_random_256_bits(many_random_256_bits)\n}\n\npub struct AES128 {}\n\nimpl MessageEncryption for AES128 {\n\n /// AES128-CBC encryption for Aztec protocol messages.\n ///\n /// ## Overview\n ///\n /// The plaintext is an array of up to `MESSAGE_PLAINTEXT_LEN` (12) fields. The output is always exactly\n /// `MESSAGE_CIPHERTEXT_LEN` (15) fields, regardless of plaintext size. All output fields except the\n /// ephemeral public key are uniformly random `Field` values to any observer without knowledge of the\n /// shared secret, making all encrypted messages indistinguishable by size or content.\n ///\n /// ## PKCS#7 Padding\n ///\n /// AES operates on 16-byte blocks, so the plaintext must be padded to a multiple of 16. PKCS#7 padding always\n /// adds at least 1 byte (so the receiver can always detect and strip it), which means:\n /// - 1 B plaintext -> 15 B padding -> 16 B total\n /// - 15 B plaintext -> 1 B padding -> 16 B total\n /// - 16 B plaintext -> 16 B padding -> 32 B total (full extra block)\n ///\n /// In general: if the plaintext is already a multiple of 16, a full 16-byte padding block is appended.\n ///\n /// ## Encryption Steps\n ///\n /// **1. Body encryption.** The plaintext fields are serialized to bytes (32 bytes per field) and AES-128-CBC\n /// encrypted. Since 32 is a multiple of 16, PKCS#7 always adds a full 16-byte padding block (see above):\n ///\n /// ```text\n /// +---------------------------------------------+\n /// | body ct |\n /// | PlaintextLen*32 + 16 B |\n /// +-------------------------------+--------------+\n /// | encrypted plaintext fields | PKCS#7 (16B) |\n /// | (serialized at 32 B each) | |\n /// +-------------------------------+--------------+\n /// ```\n ///\n /// **2. Header encryption.** The byte length of `body_ct` is stored as a 2-byte big-endian integer. This 2-byte\n /// header plaintext is then AES-encrypted; PKCS#7 pads the remaining 14 bytes to fill one 16-byte AES block,\n /// producing a 16-byte header ciphertext:\n ///\n /// ```text\n /// +---------------------------+\n /// | header ct |\n /// | 16 B |\n /// +--------+------------------+\n /// | body ct| PKCS#7 (14B) |\n /// | length | |\n /// | (2 B) | |\n /// +--------+------------------+\n /// ```\n ///\n /// ## Wire Format\n ///\n /// Messages are transmitted as fields, not bytes. A field is ~254 bits and can safely store 31 whole bytes, so\n /// we need to pack our byte data into 31-byte chunks. This packing drives the wire format.\n ///\n /// **Step 1 -- Assemble bytes.** The ciphertexts are laid out in a byte array, padded with zero bytes to a\n /// multiple of 31 so it divides evenly into fields:\n ///\n /// ```text\n /// +------------+-------------------------+---------+\n /// | header ct | body ct | byte pad|\n /// | 16 B | PlaintextLen*32 + 16 B | (zeros) |\n /// +------------+-------------------------+---------+\n /// |<-------- padded to a multiple of 31 B -------->|\n /// ```\n ///\n /// **Step 2 -- Pack and mask.** The byte array is split into 31-byte chunks, each stored in one field. A\n /// Poseidon2-derived mask (see `derive_shared_secret_field_mask`) is added to each so that the resulting\n /// fields appear as uniformly random `Field` values to any observer without knowledge of the shared secret,\n /// hiding the fact that the underlying ciphertext consists of 128-bit AES blocks.\n ///\n /// **Step 3 -- Assemble ciphertext.** The ephemeral public key x-coordinate is prepended and random field padding\n /// is appended to fill to 15 fields:\n ///\n /// ```text\n /// +----------+-------------------------+-------------------+\n /// | eph_pk.x | masked message fields | random field pad |\n /// | | (packed 31 B per field) | (fills to 15) |\n /// +----------+-------------------------+-------------------+\n /// |<---------- MESSAGE_CIPHERTEXT_LEN = 15 fields -------->|\n /// ```\n ///\n /// ## Key Derivation\n ///\n /// The raw ECDH shared secret point is first app-siloed into a scalar `s_app` by hashing with the contract\n /// address (see\n /// [`compute_app_siloed_shared_secret`](crate::keys::ecdh_shared_secret::compute_app_siloed_shared_secret)).\n /// Two (key, IV) pairs are then derived from `s_app` via indexed Poseidon2 hashing: one pair for the body\n /// ciphertext and one for the header ciphertext.\n fn encrypt<let PlaintextLen: u32>(\n plaintext: [Field; PlaintextLen],\n recipient: AztecAddress,\n contract_address: AztecAddress,\n ) -> [Field; MESSAGE_CIPHERTEXT_LEN] {\n std::static_assert(\n PlaintextLen <= MESSAGE_PLAINTEXT_LEN,\n \"Plaintext length exceeds MESSAGE_PLAINTEXT_LEN\",\n );\n\n // AES 128 operates on bytes, not fields, so we need to convert the fields to bytes. (This process is then\n // reversed when processing the message in `process_message_ciphertext`)\n let plaintext_bytes = encode_fields_as_bytes(plaintext);\n\n // Derive ECDH shared secret with recipient using a fresh ephemeral keypair.\n let (eph_sk, eph_pk) = generate_positive_ephemeral_key_pair();\n\n let raw_shared_secret = derive_ecdh_shared_secret(\n eph_sk,\n recipient\n .to_address_point()\n .unwrap_or_else(|| {\n aztecnr_warn_log_format!(\n \"Attempted to encrypt message for an invalid recipient ({0})\",\n )(\n [recipient.to_field()],\n );\n\n // Safety: if the recipient is an invalid address, then it is not possible to encrypt a message for\n // them because we cannot establish a shared secret. This is never expected to occur during normal\n // operation. However, it is technically possible for us to receive an invalid address, and we must\n // therefore handle it. We could simply fail, but that'd introduce a potential security issue in\n // which an attacker forces a contract to encrypt a message for an invalid address, resulting in an\n // impossible transaction - this is sometimes called a 'king of the hill' attack. We choose instead\n // to not fail and encrypt the plaintext regardless using the shared secret that results from a\n // random valid address. The sender is free to choose this address and hence shared secret, but\n // this has no security implications as they already know not only the full plaintext but also the\n // ephemeral private key anyway.\n unsafe {\n random_address_point()\n }\n })\n .inner,\n );\n\n let s_app = compute_app_siloed_shared_secret(raw_shared_secret, contract_address);\n\n // It is safe to derive AES keys from `s_app` using Poseidon2 because `s_app` was derived from an ECDH shared\n // secret using an AztecAddress (the recipient). See the block comment in\n // `extract_many_close_to_uniformly_random_256_bits_using_poseidon2` for more info.\n let pairs = derive_aes_symmetric_key_and_iv_from_shared_secret::<2>(s_app);\n let (body_sym_key, body_iv) = pairs[0];\n let (header_sym_key, header_iv) = pairs[1];\n\n let ciphertext_bytes = aes128_encrypt(plaintext_bytes, body_iv, body_sym_key);\n\n // Each plaintext field is 32 bytes (a multiple of the 16-byte AES block\n // size), so PKCS#7 always appends a full 16-byte padding block:\n // |ciphertext| = PlaintextLen*32 + 16 = 16 * (1 + PlaintextLen*32 / 16)\n std::static_assert(\n ciphertext_bytes.len() == 16 * (1 + (PlaintextLen * 32) / 16),\n \"unexpected ciphertext length\",\n );\n\n // Encrypt a 2-byte header containing the body ciphertext length.\n let header_plaintext = encode_header(ciphertext_bytes.len());\n\n // Note: the aes128_encrypt builtin fn automatically appends bytes to the input, according to pkcs#7; hence why\n // the output `header_ciphertext_bytes` is 16 bytes larger than the input in this case.\n let header_ciphertext_bytes = aes128_encrypt(header_plaintext, header_iv, header_sym_key);\n // Verify expected header ciphertext size at compile time.\n std::static_assert(\n header_ciphertext_bytes.len() == HEADER_CIPHERTEXT_SIZE_IN_BYTES,\n \"unexpected ciphertext header length\",\n );\n\n // Assemble the message byte array:\n // [header_ct (16B)] [body_ct] [padding to mult of 31]\n let message_bytes_padding_to_mult_31 = get_arr_of_size__message_bytes_padding__from_PT::<PlaintextLen * 32>();\n\n let mut message_bytes = get_arr_of_size__message_bytes__from_PT::<PlaintextLen * 32>();\n\n std::static_assert(\n message_bytes.len() % 31 == 0,\n \"Unexpected error: message_bytes.len() should be divisible by 31, by construction.\",\n );\n\n let mut offset = 0;\n for i in 0..header_ciphertext_bytes.len() {\n message_bytes[offset + i] = header_ciphertext_bytes[i];\n }\n offset += header_ciphertext_bytes.len();\n\n for i in 0..ciphertext_bytes.len() {\n message_bytes[offset + i] = ciphertext_bytes[i];\n }\n offset += ciphertext_bytes.len();\n\n for i in 0..message_bytes_padding_to_mult_31.len() {\n message_bytes[offset + i] = message_bytes_padding_to_mult_31[i];\n }\n offset += message_bytes_padding_to_mult_31.len();\n\n // Ideally we would be able to have a static assert where we check that the offset would be such that we've\n // written to the entire log_bytes array, but we cannot since Noir does not treat the offset as a comptime\n // value (despite the values that it goes through being known at each stage). We instead check that the\n // computation used to obtain the offset computes the expected value (which we _can_ do in a static check), and\n // then add a cheap runtime check to also validate that the offset matches this.\n std::static_assert(\n header_ciphertext_bytes.len() + ciphertext_bytes.len() + message_bytes_padding_to_mult_31.len()\n == message_bytes.len(),\n \"unexpected message length\",\n );\n assert(offset == message_bytes.len(), \"unexpected encrypted message length\");\n\n // Pack message bytes into fields (31 bytes per field) and prepend eph_pk.x.\n let message_bytes_as_fields = encode_bytes_as_fields(message_bytes);\n\n let mut ciphertext: [Field; MESSAGE_CIPHERTEXT_LEN] = [0; MESSAGE_CIPHERTEXT_LEN];\n\n ciphertext[0] = eph_pk.x;\n\n // Mask each content field with a Poseidon2-derived value, so that they appear as uniformly random `Field`\n // values\n let mut offset = 1;\n for i in 0..message_bytes_as_fields.len() {\n let mask = derive_shared_secret_field_mask(s_app, i as u32);\n ciphertext[offset + i] = message_bytes_as_fields[i] + mask;\n }\n offset += message_bytes_as_fields.len();\n\n // Pad with random fields so that padding is indistinguishable from masked data fields.\n for i in offset..MESSAGE_CIPHERTEXT_LEN {\n // Safety: we assume that the sender wants for the message to be private - a malicious one could simply\n // reveal its contents publicly. It is therefore fine to trust the sender to provide random padding.\n ciphertext[i] = unsafe { random() };\n }\n\n ciphertext\n }\n\n unconstrained fn decrypt(\n ciphertext: BoundedVec<Field, MESSAGE_CIPHERTEXT_LEN>,\n recipient: AztecAddress,\n contract_address: AztecAddress,\n ) -> Option<BoundedVec<Field, MESSAGE_PLAINTEXT_LEN>> {\n // Extract the ephemeral public key x-coordinate and masked fields, returning None for empty ciphertext.\n if ciphertext.len() > 0 {\n let masked_fields: BoundedVec<Field, MESSAGE_CIPHERTEXT_LEN - EPH_PK_X_SIZE_IN_FIELDS> =\n array::subbvec(ciphertext, EPH_PK_X_SIZE_IN_FIELDS);\n Option::some((ciphertext.get(0), masked_fields))\n } else {\n Option::none()\n }\n .and_then(|(eph_pk_x, masked_fields)| {\n // With the x-coordinate of the ephemeral public key we can reconstruct the point as we know that the\n // y-coordinate must be positive. This may fail however, as not all x-coordinates are on the curve. In\n // that case, we simply return `Option::none`.\n point_from_x_coord_and_sign(eph_pk_x, true).and_then(|eph_pk| {\n let s_app = get_shared_secret(recipient, eph_pk, contract_address);\n\n let unmasked_fields = masked_fields.mapi(|i, field| {\n let unmasked = unmask_field(s_app, i, field);\n // If we failed to unmask the field, we are dealing with the random padding. We'll ignore it\n // later, so we can simply set it to 0\n unmasked.unwrap_or(0)\n });\n let ciphertext_without_eph_pk_x = decode_bytes_from_fields(unmasked_fields);\n\n // Derive symmetric keys:\n let pairs = derive_aes_symmetric_key_and_iv_from_shared_secret::<2>(s_app);\n let (body_sym_key, body_iv) = pairs[0];\n let (header_sym_key, header_iv) = pairs[1];\n\n // Extract the header ciphertext\n let header_start = 0;\n let header_ciphertext: [u8; HEADER_CIPHERTEXT_SIZE_IN_BYTES] =\n array::subarray(ciphertext_without_eph_pk_x.storage(), header_start);\n // We need to convert the array to a BoundedVec because the oracle expects a BoundedVec as it's\n // designed to work with messages with unknown length at compile time. This would not be necessary\n // here as the header ciphertext length is fixed. But we do it anyway to not have to have duplicate\n // oracles.\n let header_ciphertext_bvec =\n BoundedVec::<u8, HEADER_CIPHERTEXT_SIZE_IN_BYTES>::from_array(header_ciphertext);\n\n try_aes128_decrypt(header_ciphertext_bvec, header_iv, header_sym_key)\n // Extract ciphertext length from header (2 bytes, big-endian)\n .and_then(|header_plaintext| extract_ciphertext_length(header_plaintext))\n .filter(|ciphertext_length| ciphertext_length <= MESSAGE_PLAINTEXT_SIZE_IN_BYTES)\n .map(|ciphertext_length| {\n // Extract and decrypt main ciphertext\n let ciphertext_start = header_start + HEADER_CIPHERTEXT_SIZE_IN_BYTES;\n let ciphertext_with_padding: [u8; MESSAGE_PLAINTEXT_SIZE_IN_BYTES] =\n array::subarray(ciphertext_without_eph_pk_x.storage(), ciphertext_start);\n BoundedVec::from_parts(ciphertext_with_padding, ciphertext_length)\n })\n // Decrypt main ciphertext and return it\n .and_then(|ciphertext| try_aes128_decrypt(ciphertext, body_iv, body_sym_key))\n // Convert bytes back to fields (32 bytes per field). Returns None if the actual bytes are\n // not valid.\n .and_then(|plaintext_bytes| try_decode_fields_from_bytes(plaintext_bytes))\n })\n })\n }\n}\n\n/// Encodes the body ciphertext length into a 2-byte big-endian header.\nfn encode_header(ciphertext_length: u32) -> [u8; 2] {\n [(ciphertext_length >> 8) as u8, ciphertext_length as u8]\n}\n\n/// Extracts the body ciphertext length from a decrypted header as a 2-byte big-endian integer.\n///\n/// Returns `Option::none()` if the header has fewer than 2 bytes.\nunconstrained fn extract_ciphertext_length<let N: u32>(header: BoundedVec<u8, N>) -> Option<u32> {\n if header.len() >= 2 {\n Option::some(((header.get(0) as u32) << 8) | (header.get(1) as u32))\n } else {\n Option::none()\n }\n}\n\n/// 2^248: upper bound for values that fit in 31 bytes\nglobal TWO_POW_248: Field = 2.pow_32(248);\n\n/// Removes the Poseidon2-derived mask from a ciphertext field. Returns the unmasked value if it fits in 31 bytes\n/// (a content field), or `None` if it doesn't (random padding). Unconstrained to prevent accidental use in\n/// constrained context.\nunconstrained fn unmask_field(s_app: Field, index: u32, masked: Field) -> Option<Field> {\n let unmasked = masked - derive_shared_secret_field_mask(s_app, index);\n if unmasked.lt(TWO_POW_248) {\n Option::some(unmasked)\n } else {\n Option::none()\n }\n}\n\n/// Produces a random valid address point, i.e. one that is on the curve. This is equivalent to calling\n/// [`AztecAddress::to_address_point`] on a random valid address.\nunconstrained fn random_address_point() -> AddressPoint {\n let mut result = std::mem::zeroed();\n\n loop {\n // We simply produce random x coordinates until we find one that is on the curve. About half of the x\n // coordinates fulfill this condition, so this should only take a few iterations at most.\n let x_coord = random();\n let point = point_from_x_coord_and_sign(x_coord, true);\n if point.is_some() {\n result = AddressPoint { inner: point.unwrap() };\n break;\n }\n }\n\n result\n}\n\nmod test {\n use crate::{\n keys::ecdh_shared_secret::{compute_app_siloed_shared_secret, derive_ecdh_shared_secret},\n messages::{\n encoding::{HEADER_CIPHERTEXT_SIZE_IN_BYTES, MESSAGE_PLAINTEXT_LEN, MESSAGE_PLAINTEXT_SIZE_IN_BYTES},\n encryption::message_encryption::MessageEncryption,\n },\n test::helpers::test_environment::TestEnvironment,\n };\n use crate::protocol::{address::AztecAddress, traits::FromField};\n use super::{AES128, encode_header, random_address_point};\n use std::{embedded_curve_ops::EmbeddedCurveScalar, test::OracleMock};\n\n #[test]\n unconstrained fn encrypt_decrypt_deterministic() {\n let env = TestEnvironment::new();\n\n // Message decryption requires oracles that are only available during private execution\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n\n let recipient = AztecAddress::from_field(\n 0x25afb798ea6d0b8c1618e50fdeafa463059415013d3b7c75d46abf5e242be70c,\n );\n\n // Mock random values for deterministic test\n let eph_sk = 0x1358d15019d4639393d62b97e1588c095957ce74a1c32d6ec7d62fe6705d9538;\n let _ = OracleMock::mock(\"aztec_utl_getRandomField\").returns(eph_sk).times(1);\n\n let randomness = 0x0101010101010101010101010101010101010101010101010101010101010101;\n let _ = OracleMock::mock(\"aztec_utl_getRandomField\").returns(randomness).times(1000000);\n\n let _ = OracleMock::mock(\"aztec_prv_getNextAppTagAsSender\").returns(42);\n\n // Encrypt the message\n let encrypted_message = BoundedVec::from_array(AES128::encrypt(plaintext, recipient, contract_address));\n\n // Compute the same app-siloed shared secret that the oracle would return\n let raw_shared_secret = derive_ecdh_shared_secret(\n EmbeddedCurveScalar::from_field(eph_sk),\n recipient.to_address_point().unwrap().inner,\n );\n let s_app = compute_app_siloed_shared_secret(raw_shared_secret, contract_address);\n\n let _ = OracleMock::mock(\"aztec_utl_getSharedSecret\").returns(s_app);\n\n // Decrypt the message\n let decrypted = AES128::decrypt(encrypted_message, recipient, contract_address).unwrap();\n\n // The decryption function spits out a BoundedVec because it's designed to work with messages with unknown\n // length at compile time. For this reason we need to convert the original input to a BoundedVec.\n let plaintext_bvec = BoundedVec::<Field, MESSAGE_PLAINTEXT_LEN>::from_array(plaintext);\n\n // Verify decryption matches original plaintext\n assert_eq(decrypted, plaintext_bvec, \"Decrypted bytes should match original plaintext\");\n\n // The following is a workaround of \"struct is never constructed\" Noir compilation error (we only ever use\n // static methods of the struct).\n let _ = AES128 {};\n });\n }\n\n #[test]\n unconstrained fn encrypt_decrypt_random() {\n // Same as `encrypt_decrypt_deterministic`, except we don't mock any of the oracles and rely on\n // `TestEnvironment` instead.\n let mut env = TestEnvironment::new();\n\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n let ciphertext = AES128::encrypt(plaintext, recipient, contract_address);\n\n assert_eq(\n AES128::decrypt(\n BoundedVec::from_array(ciphertext),\n recipient,\n contract_address,\n )\n .unwrap(),\n BoundedVec::from_array(plaintext),\n );\n });\n }\n\n #[test]\n unconstrained fn encrypt_to_invalid_address() {\n // x = 3 is a non-residue for this curve, resulting in an invalid address\n let invalid_address = AztecAddress { inner: 3 };\n let contract_address = AztecAddress { inner: 42 };\n\n let _ = AES128::encrypt([1, 2, 3, 4], invalid_address, contract_address);\n }\n\n // Documents the PKCS#7 padding behavior that `encrypt` relies on (see its static_assert).\n #[test]\n fn pkcs7_padding_always_adds_at_least_one_byte() {\n let key = [0 as u8; 16];\n let iv = [0 as u8; 16];\n\n // 1 byte input + 15 bytes padding = 16 bytes\n assert_eq(std::aes128::aes128_encrypt([0; 1], iv, key).len(), 16);\n\n // 15 bytes input + 1 byte padding = 16 bytes\n assert_eq(std::aes128::aes128_encrypt([0; 15], iv, key).len(), 16);\n\n // 16 bytes input (block-aligned) + full 16-byte padding block = 32 bytes\n assert_eq(std::aes128::aes128_encrypt([0; 16], iv, key).len(), 32);\n }\n\n #[test]\n unconstrained fn encrypt_decrypt_max_size_plaintext() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let mut plaintext = [0; MESSAGE_PLAINTEXT_LEN];\n for i in 0..MESSAGE_PLAINTEXT_LEN {\n plaintext[i] = i as Field;\n }\n let ciphertext = AES128::encrypt(plaintext, recipient, contract_address);\n\n assert_eq(\n AES128::decrypt(\n BoundedVec::from_array(ciphertext),\n recipient,\n contract_address,\n )\n .unwrap(),\n BoundedVec::from_array(plaintext),\n );\n });\n }\n\n #[test(should_fail_with = \"Plaintext length exceeds MESSAGE_PLAINTEXT_LEN\")]\n unconstrained fn encrypt_oversized_plaintext() {\n let address = AztecAddress { inner: 3 };\n let contract_address = AztecAddress { inner: 42 };\n let plaintext: [Field; MESSAGE_PLAINTEXT_LEN + 1] = [0; MESSAGE_PLAINTEXT_LEN + 1];\n let _ = AES128::encrypt(plaintext, address, contract_address);\n }\n\n #[test]\n unconstrained fn random_address_point_produces_valid_points() {\n // About half of random addresses are invalid, so testing just a couple gives us high confidence that\n // `random_address_point` is indeed producing valid addresses.\n for _ in 0..10 {\n let random_address = AztecAddress { inner: random_address_point().inner.x };\n assert(random_address.to_address_point().is_some());\n }\n }\n\n #[test]\n unconstrained fn decrypt_invalid_ephemeral_public_key() {\n let mut env = TestEnvironment::new();\n\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3, 4];\n let ciphertext = AES128::encrypt(plaintext, recipient, contract_address);\n\n // The first field of the ciphertext is the x-coordinate of the ephemeral public key. We set it to a known\n // non-residue (3), causing `decrypt` to fail to produce a decryption shared secret.\n let mut bad_ciphertext = BoundedVec::from_array(ciphertext);\n bad_ciphertext.set(0, 3);\n\n assert(AES128::decrypt(bad_ciphertext, recipient, contract_address).is_none());\n });\n }\n\n #[test]\n unconstrained fn decrypt_returns_none_on_empty_ciphertext() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n assert(AES128::decrypt(BoundedVec::new(), recipient, contract_address).is_none());\n });\n }\n\n // Mocks the header AES decrypt oracle to return an empty result. The TS oracle never throws on invalid\n // input: it decrypts to garbage bytes or returns empty\n #[test]\n unconstrained fn decrypt_returns_none_on_empty_header() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n let ciphertext = BoundedVec::from_array(AES128::encrypt(plaintext, recipient, contract_address));\n\n let empty_header = BoundedVec::<u8, HEADER_CIPHERTEXT_SIZE_IN_BYTES>::new();\n let _ = OracleMock::mock(\"aztec_utl_decryptAes128\").returns(Option::some(empty_header)).times(1);\n\n assert(AES128::decrypt(ciphertext, recipient, contract_address).is_none());\n });\n }\n\n // Mocks the header oracle to return a 2-byte header that decodes to a ciphertext_length one past the maximum\n // allowed value, verifying the edge case is handled correctly.\n #[test]\n unconstrained fn decrypt_returns_none_on_oversized_ciphertext_length() {\n let mut env = TestEnvironment::new();\n let recipient = env.create_light_account();\n\n env.private_context(|context| {\n let contract_address = context.this_address();\n let plaintext = [1, 2, 3];\n let ciphertext = BoundedVec::from_array(AES128::encrypt(plaintext, recipient, contract_address));\n\n let bad_header = BoundedVec::<u8, HEADER_CIPHERTEXT_SIZE_IN_BYTES>::from_array(encode_header(\n MESSAGE_PLAINTEXT_SIZE_IN_BYTES + 1,\n ));\n let _ = OracleMock::mock(\"aztec_utl_decryptAes128\").returns(Option::some(bad_header)).times(1);\n\n assert(AES128::decrypt(ciphertext, recipient, contract_address).is_none());\n });\n }\n\n}\n"
3413
3409
  },
3414
3410
  "138": {
3415
3411
  "function_locations": [
@@ -4770,74 +4766,78 @@
4770
4766
  "252": {
4771
4767
  "function_locations": [
4772
4768
  {
4773
- "name": "bytes_to_fields",
4774
- "start": 1015
4769
+ "name": "encode_bytes_as_fields",
4770
+ "start": 662
4775
4771
  },
4776
4772
  {
4777
- "name": "bytes_from_fields",
4778
- "start": 2146
4773
+ "name": "decode_bytes_from_fields",
4774
+ "start": 1313
4779
4775
  },
4780
4776
  {
4781
- "name": "tests::random_bytes_to_fields_and_back",
4782
- "start": 2784
4777
+ "name": "tests::round_trips_bytes",
4778
+ "start": 1719
4783
4779
  },
4784
4780
  {
4785
- "name": "tests::bytes_to_fields_input_length_not_multiple_of_31",
4786
- "start": 3545
4781
+ "name": "tests::encode_rejects_length_not_multiple_of_31",
4782
+ "start": 2252
4783
+ },
4784
+ {
4785
+ "name": "tests::decode_rejects_oversized_field",
4786
+ "start": 2454
4787
4787
  }
4788
4788
  ],
4789
- "path": "/home/aztec-dev/aztec-packages/noir-projects/aztec-nr/aztec/src/utils/conversion/bytes_to_fields.nr",
4790
- "source": "use std::static_assert;\n\n// These functions are used to facilitate the conversion of log ciphertext between byte and field representations.\n//\n// `bytes_to_fields` uses fixed-size arrays since encryption contexts have compile-time size information.\n// `bytes_from_fields` uses BoundedVec for flexibility in unconstrained contexts where sizes are dynamic.\n//\n// Together they provide bidirectional conversion between bytes and fields when processing encrypted logs.\n\n/// Converts the input bytes into an array of fields. A Field is ~254 bits meaning that each field can store 31 whole\n/// bytes. Use `bytes_from_fields` to obtain the original bytes array.\n///\n/// The input bytes are chunked into chunks of 31 bytes. Each 31-byte chunk is viewed as big-endian, and is converted\n/// into a Field. For example, [1, 10, 3, ..., 0] (31 bytes) is encoded as [1 * 256^30 + 10 * 256^29 + 3 * 256^28 + ...\n/// + 0] Note: N must be a multiple of 31 bytes\npub fn bytes_to_fields<let N: u32>(bytes: [u8; N]) -> [Field; N / 31] {\n // Assert that N is a multiple of 31\n static_assert(N % 31 == 0, \"N must be a multiple of 31\");\n\n let mut fields = [0; N / 31];\n\n // Since N is a multiple of 31, we can simply process all chunks fully\n for i in 0..N / 31 {\n let mut field = 0;\n for j in 0..31 {\n // Shift the existing value left by 8 bits and add the new byte\n field = field * 256 + bytes[i * 31 + j] as Field;\n }\n fields[i] = field;\n }\n\n fields\n}\n\n/// Converts an input BoundedVec of fields into a BoundedVec of bytes in big-endian order. Arbitrary Field arrays are\n/// not allowed: this is assumed to be an array obtained via `bytes_to_fields`, i.e. one that actually represents\n/// bytes. To convert a Field array into bytes, use `fields_to_bytes`.\n///\n/// Each input field must contain at most 31 bytes (this is constrained to be so). Each field is converted into 31\n/// big-endian bytes, and the resulting 31-byte chunks are concatenated back together in the order of the original\n/// fields.\npub fn bytes_from_fields<let N: u32>(fields: BoundedVec<Field, N>) -> BoundedVec<u8, N * 31> {\n let mut bytes = BoundedVec::new();\n\n for i in 0..fields.len() {\n let field = fields.get(i);\n\n // We expect that the field contains at most 31 bytes of information.\n field.assert_max_bit_size::<248>();\n\n // Now we can safely convert the field to 31 bytes.\n let field_as_bytes: [u8; 31] = field.to_be_bytes();\n\n for j in 0..31 {\n bytes.push(field_as_bytes[j]);\n }\n }\n\n bytes\n}\n\nmod tests {\n use crate::utils::array::subarray;\n use super::{bytes_from_fields, bytes_to_fields};\n\n #[test]\n unconstrained fn random_bytes_to_fields_and_back(input: [u8; 93]) {\n let fields = bytes_to_fields(input);\n\n // At this point in production, the log flies through the system and we get a BoundedVec on the other end. So\n // we need to convert the field array to a BoundedVec to be able to feed it to the `bytes_from_fields`\n // function.\n let fields_as_bounded_vec = BoundedVec::<_, 6>::from_array(fields);\n\n let bytes_back = bytes_from_fields(fields_as_bounded_vec);\n\n // Compare the original input with the round-tripped result\n assert_eq(bytes_back.len(), input.len());\n assert_eq(subarray(bytes_back.storage(), 0), input);\n }\n\n #[test(should_fail_with = \"N must be a multiple of 31\")]\n unconstrained fn bytes_to_fields_input_length_not_multiple_of_31() {\n // Try to convert 32 bytes (not a multiple of 31) to fields\n let _fields = bytes_to_fields([0; 32]);\n }\n\n}\n"
4789
+ "path": "/home/aztec-dev/aztec-packages/noir-projects/aztec-nr/aztec/src/utils/conversion/bytes_as_fields.nr",
4790
+ "source": "use std::static_assert;\n\n/// Encodes an array of bytes as fields.\n///\n/// Use\n/// [`decode_bytes_from_fields`](crate::utils::conversion::bytes_as_fields::decode_bytes_from_fields) to recover\n/// the original bytes.\n///\n/// The `bytes` array length must be a multiple of 31. If padding is added, it will need to be manually removed\n/// after decoding.\n///\n/// ## Encoding\n///\n/// Each 31-byte chunk is interpreted as a big-endian integer and stored in a `Field`. For input `[1, 10, 3, ..., 0]`\n/// (31 bytes), the resulting `Field` is `1 * 256^30 + 10 * 256^29 + 3 * 256^28 + ... + 0`.\npub fn encode_bytes_as_fields<let N: u32>(bytes: [u8; N]) -> [Field; N / 31] {\n static_assert(N % 31 == 0, \"N must be a multiple of 31\");\n\n let mut fields = [0; N / 31];\n for i in 0..N / 31 {\n let mut field = 0;\n for j in 0..31 {\n field = field * 256 + bytes[i * 31 + j] as Field;\n }\n fields[i] = field;\n }\n\n fields\n}\n\n/// Decodes fields back into bytes.\n///\n/// Inverse of\n/// [`encode_bytes_as_fields`](crate::utils::conversion::bytes_as_fields::encode_bytes_as_fields).\n/// Each input `Field` must fit in 248 bits; `Field::to_be_bytes::<31>()` fails the proof otherwise.\npub fn decode_bytes_from_fields<let N: u32>(fields: BoundedVec<Field, N>) -> BoundedVec<u8, N * 31> {\n let mut bytes = BoundedVec::new();\n for i in 0..fields.len() {\n let chunk: [u8; 31] = fields.get(i).to_be_bytes();\n for j in 0..31 {\n bytes.push(chunk[j]);\n }\n }\n bytes\n}\n\nmod tests {\n use crate::utils::array::subarray;\n use super::{decode_bytes_from_fields, encode_bytes_as_fields};\n\n #[test]\n unconstrained fn round_trips_bytes(input: [u8; 93]) {\n let fields = encode_bytes_as_fields(input);\n\n // In production the fields fly through the system and arrive as a BoundedVec on the other end.\n let fields_bvec = BoundedVec::<_, 6>::from_array(fields);\n let bytes_back = decode_bytes_from_fields(fields_bvec);\n\n assert_eq(bytes_back.len(), input.len());\n assert_eq(subarray(bytes_back.storage(), 0), input);\n }\n\n #[test(should_fail_with = \"N must be a multiple of 31\")]\n unconstrained fn encode_rejects_length_not_multiple_of_31() {\n let _fields = encode_bytes_as_fields([0; 32]);\n }\n\n #[test(should_fail_with = \"Field failed to decompose into specified 31 limbs\")]\n unconstrained fn decode_rejects_oversized_field() {\n // `Field::to_be_bytes::<31>()` fails the proof when a field has any bit above position 247 set.\n let oversized: Field = (1 as Field) * 2.pow_32(249);\n let input = BoundedVec::<_, 1>::from_array([oversized]);\n let _bytes = decode_bytes_from_fields(input);\n }\n}\n"
4791
4791
  },
4792
4792
  "253": {
4793
4793
  "function_locations": [
4794
4794
  {
4795
- "name": "fields_to_bytes",
4796
- "start": 1237
4795
+ "name": "encode_fields_as_bytes",
4796
+ "start": 1007
4797
4797
  },
4798
4798
  {
4799
- "name": "fields_from_bytes",
4800
- "start": 2217
4799
+ "name": "decode_fields_from_bytes",
4800
+ "start": 1603
4801
4801
  },
4802
4802
  {
4803
- "name": "try_field_from_be_bytes",
4804
- "start": 2679
4803
+ "name": "try_decode_fields_from_bytes",
4804
+ "start": 2190
4805
4805
  },
4806
4806
  {
4807
- "name": "try_fields_from_bytes",
4808
- "start": 3812
4807
+ "name": "try_decode_field_from_bytes",
4808
+ "start": 2829
4809
4809
  },
4810
4810
  {
4811
- "name": "tests::random_fields_to_bytes_and_back",
4812
- "start": 4522
4811
+ "name": "tests::round_trips_fields",
4812
+ "start": 3733
4813
4813
  },
4814
4814
  {
4815
- "name": "tests::to_fields_assert",
4816
- "start": 5401
4815
+ "name": "tests::try_decode_returns_none_on_length_not_multiple_of_32",
4816
+ "start": 4320
4817
4817
  },
4818
4818
  {
4819
- "name": "tests::fields_from_bytes_max_value",
4820
- "start": 5862
4819
+ "name": "tests::try_decode_accepts_max_field",
4820
+ "start": 4528
4821
4821
  },
4822
4822
  {
4823
- "name": "tests::fields_from_bytes_overflow",
4824
- "start": 6490
4823
+ "name": "tests::try_decode_returns_none_on_chunk_above_modulus",
4824
+ "start": 5063
4825
4825
  },
4826
4826
  {
4827
- "name": "tests::try_fields_from_bytes_returns_none_on_unaligned_length",
4828
- "start": 7485
4827
+ "name": "tests::try_decode_returns_none_on_chunk_equal_to_modulus",
4828
+ "start": 5718
4829
4829
  },
4830
4830
  {
4831
- "name": "tests::try_fields_from_bytes_returns_none_on_field_modulus",
4832
- "start": 7709
4831
+ "name": "tests::decode_asserts_length_multiple_of_32",
4832
+ "start": 6128
4833
4833
  },
4834
4834
  {
4835
- "name": "tests::try_fields_from_bytes_round_trips",
4836
- "start": 8066
4835
+ "name": "tests::decode_panics_on_chunk_above_modulus",
4836
+ "start": 6544
4837
4837
  }
4838
4838
  ],
4839
- "path": "/home/aztec-dev/aztec-packages/noir-projects/aztec-nr/aztec/src/utils/conversion/fields_to_bytes.nr",
4840
- "source": "// These functions are used to facilitate the conversion of log plaintext represented as fields into bytes and back.\n//\n// `fields_to_bytes` uses fixed-size arrays since encryption contexts have compile-time size information.\n// `fields_from_bytes` uses BoundedVec for flexibility in unconstrained contexts where sizes are dynamic.\n//\n// Together they provide bidirectional conversion between fields and bytes.\n\n/// Converts an input array of fields into a single array of bytes. Use `fields_from_bytes` to obtain the original\n/// field array. Each field is converted to a 32-byte big-endian array.\n///\n/// For example, if you have a field array [123, 456], it will be converted to a 64-byte array:\n/// [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,123, // First field (32 bytes)\n/// 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,200] // Second field (32 bytes)\n///\n/// Since a field is ~254 bits, you'll end up with a subtle 2-bit \"gap\" at the big end, every 32 bytes. Be careful that\n/// such a gap doesn't leak information! This could happen if you for example expected the output to be\n/// indistinguishable from random bytes.\npub fn fields_to_bytes<let N: u32>(fields: [Field; N]) -> [u8; 32 * N] {\n let mut bytes = [0; 32 * N];\n\n for i in 0..N {\n let field_as_bytes: [u8; 32] = fields[i].to_be_bytes();\n\n for j in 0..32 {\n bytes[i * 32 + j] = field_as_bytes[j];\n }\n }\n\n bytes\n}\n\n/// Converts an input BoundedVec of bytes into a BoundedVec of fields. Arbitrary byte arrays are not allowed: this is\n/// assumed to be an array obtained via `fields_to_bytes`, i.e. one that actually represents fields. To convert a byte\n/// array into Fields, use `bytes_to_fields`.\n///\n/// The input bytes are chunked into chunks of 32 bytes. Each 32-byte chunk is viewed as big-endian, and is converted\n/// into a Field. For example, [1, 10, 3, ..., 0] (32 bytes) is encoded as [1 * 256^31 + 10 * 256^30 + 3 * 256^29 + ...\n/// + 0] Note 1: N must be a multiple of 32 bytes Note 2: The max value check code was taken from\n/// std::field::to_be_bytes function.\npub fn fields_from_bytes<let N: u32>(bytes: BoundedVec<u8, N>) -> BoundedVec<Field, N / 32> {\n // Assert that input length is a multiple of 32\n assert(bytes.len() % 32 == 0, \"Input length must be a multiple of 32\");\n\n try_fields_from_bytes(bytes).expect(f\"Value does not fit in field\")\n}\n\n/// Converts a single 32-byte big-endian chunk (starting at `offset`) into a Field, returning\n/// `Option::none()` if the chunk's value is >= the field modulus.\nfn try_field_from_be_bytes<let N: u32>(bytes: BoundedVec<u8, N>, offset: u32) -> Option<Field> {\n let p = std::field::modulus_be_bytes();\n let mut field = 0;\n // Field arithmetic silently wraps values >= the modulus, so we compare each 32-byte chunk against\n // the modulus byte-by-byte (big-endian, most significant first). The first byte that differs\n // determines the result: if our byte is smaller we're valid, if larger we've overflowed.\n // cmp tracks the result: 0 = equal so far, 1 = less than modulus, 2 = exceeds modulus.\n let mut cmp: u8 = 0;\n for j in 0..32 {\n let byte = bytes.get(offset + j);\n field = field * 256 + byte as Field;\n\n if cmp == 0 {\n if byte < p[j] {\n cmp = 1;\n } else if byte > p[j] {\n cmp = 2;\n }\n }\n }\n if cmp == 1 {\n Option::some(field)\n } else {\n Option::none()\n }\n}\n\n/// Non-panicking version of `fields_from_bytes`. Returns `Option::none()` if the input\n/// length is not a multiple of 32 or if any 32-byte chunk exceeds the field modulus.\npub(crate) fn try_fields_from_bytes<let N: u32>(bytes: BoundedVec<u8, N>) -> Option<BoundedVec<Field, N / 32>> {\n if bytes.len() % 32 == 0 {\n let mut fields = BoundedVec::new();\n let num_chunks = bytes.len() / 32;\n for i in 0..num_chunks {\n let field = try_field_from_be_bytes(bytes, i * 32);\n if field.is_some() {\n fields.push(field.unwrap());\n }\n }\n if fields.len() as u32 == num_chunks {\n Option::some(fields)\n } else {\n Option::none()\n }\n } else {\n Option::none()\n }\n}\n\nmod tests {\n use crate::utils::array::subarray;\n use super::{fields_from_bytes, fields_to_bytes, try_fields_from_bytes};\n\n #[test]\n unconstrained fn random_fields_to_bytes_and_back(input: [Field; 3]) {\n // Convert to bytes\n let bytes = fields_to_bytes(input);\n\n // At this point in production, the log flies through the system and we get a BoundedVec on the other end. So\n // we need to convert the field array to a BoundedVec to be able to feed it to the `fields_from_bytes`\n // function. 113 is an arbitrary max length that is larger than the input length of 96.\n let bytes_as_bounded_vec = BoundedVec::<_, 113>::from_array(bytes);\n\n // Convert back to fields\n let fields_back = fields_from_bytes(bytes_as_bounded_vec);\n\n // Compare the original input with the round-tripped result\n assert_eq(fields_back.len(), input.len());\n assert_eq(subarray(fields_back.storage(), 0), input);\n }\n\n #[test(should_fail_with = \"Input length must be a multiple of 32\")]\n unconstrained fn to_fields_assert() {\n // 143 is an arbitrary max length that is larger than 33\n let input = BoundedVec::<_, 143>::from_array([\n 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29,\n 30, 31, 32, 33,\n ]);\n\n // This should fail since 33 is not a multiple of 32\n let _fields = fields_from_bytes(input);\n }\n\n #[test]\n unconstrained fn fields_from_bytes_max_value() {\n let max_field_as_bytes: [u8; 32] = (-1).to_be_bytes();\n let input = BoundedVec::<_, 32>::from_array(max_field_as_bytes);\n\n let fields = fields_from_bytes(input);\n\n // The result should be a largest value storable in a field (-1 since we are modulo-ing)\n assert_eq(fields.get(0), -1);\n }\n\n // In this test we verify that overflow check works by taking the max allowed value, bumping a random byte and then\n // feeding it to `fields_from_bytes` as input.\n #[test(should_fail_with = \"Value does not fit in field\")]\n unconstrained fn fields_from_bytes_overflow(random_value: u8) {\n let index_of_byte_to_bump = random_value % 32;\n\n // Obtain the byte representation of the maximum field value\n let max_field_value_as_bytes: [u8; 32] = (-1).to_be_bytes();\n\n let byte_to_bump = max_field_value_as_bytes[index_of_byte_to_bump as u32];\n\n // Skip test execution if the selected byte is already at maximum value (255). This is acceptable since we are\n // using fuzz testing to generate many test cases.\n if byte_to_bump != 255 {\n let mut input = BoundedVec::<_, 32>::from_array(max_field_value_as_bytes);\n\n // Increment the selected byte to exceed the field's maximum value\n input.set(index_of_byte_to_bump as u32, byte_to_bump + 1);\n\n // Attempt the conversion, which should fail due to the value exceeding the field's capacity\n let _fields = fields_from_bytes(input);\n }\n }\n\n #[test]\n unconstrained fn try_fields_from_bytes_returns_none_on_unaligned_length() {\n let input = BoundedVec::<_, 64>::from_parts([0 as u8; 64], 33);\n assert(try_fields_from_bytes(input).is_none());\n }\n\n #[test]\n unconstrained fn try_fields_from_bytes_returns_none_on_field_modulus() {\n // The field modulus itself is not a valid field value (it wraps to 0).\n let p: [u8; 32] = std::field::modulus_be_bytes().as_array();\n let input = BoundedVec::<u8, 32>::from_array(p);\n assert(try_fields_from_bytes(input).is_none());\n }\n\n #[test]\n unconstrained fn try_fields_from_bytes_round_trips(input: [Field; 3]) {\n let bytes = BoundedVec::<_, 113>::from_array(fields_to_bytes(input));\n let fields = try_fields_from_bytes(bytes).unwrap();\n\n assert_eq(fields.len(), input.len());\n assert_eq(subarray(fields.storage(), 0), input);\n }\n}\n"
4839
+ "path": "/home/aztec-dev/aztec-packages/noir-projects/aztec-nr/aztec/src/utils/conversion/fields_as_bytes.nr",
4840
+ "source": "/// Encodes an array of fields as bytes.\n///\n/// Losslessly preserves any field value; use\n/// [`try_decode_fields_from_bytes`](crate::utils::conversion::fields_as_bytes::try_decode_fields_from_bytes) to\n/// recover the original fields.\n///\n/// ## Encoding\n///\n/// Each field is written as 32 big-endian bytes and the chunks are concatenated. The field array `[5, 42]` becomes:\n///\n/// ```text\n/// [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5, // First field (32 bytes)\n/// 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,42] // Second field (32 bytes)\n/// ```\n///\n/// ## Privacy\n///\n/// The BN254 modulus is `< 2^254`, so every 32-byte chunk has its top bit at zero and the next bit biased. The output\n/// is therefore distinguishable from uniform random bytes; take this into account when feeding it into anything that\n/// assumes uniform randomness (e.g. ciphertexts meant to look random).\npub fn encode_fields_as_bytes<let N: u32>(fields: [Field; N]) -> [u8; 32 * N] {\n let mut bytes = [0; 32 * N];\n for i in 0..N {\n let chunk: [u8; 32] = fields[i].to_be_bytes();\n for j in 0..32 {\n bytes[i * 32 + j] = chunk[j];\n }\n }\n bytes\n}\n\n/// Decodes bytes back into fields.\n///\n/// Panics if the input length is not a multiple of 32 or if any chunk exceeds the BN254 field modulus. See\n/// [`try_decode_fields_from_bytes`](crate::utils::conversion::fields_as_bytes::try_decode_fields_from_bytes)\n/// for a non-panicking variant.\npub fn decode_fields_from_bytes<let N: u32>(bytes: BoundedVec<u8, N>) -> BoundedVec<Field, N / 32> {\n assert(bytes.len() % 32 == 0, \"Input length must be a multiple of 32\");\n try_decode_fields_from_bytes(bytes).expect(f\"Value does not fit in field\")\n}\n\n/// Decodes bytes back into fields, returning None on failure.\n///\n/// Inverse of\n/// [`encode_fields_as_bytes`](crate::utils::conversion::fields_as_bytes::encode_fields_as_bytes).\n/// Returns `Option::none()` if the input length is not a multiple of 32, or if any 32-byte chunk is `>=` the BN254\n/// field modulus.\npub fn try_decode_fields_from_bytes<let N: u32>(bytes: BoundedVec<u8, N>) -> Option<BoundedVec<Field, N / 32>> {\n if bytes.len() % 32 == 0 {\n let num_chunks = bytes.len() / 32;\n let mut fields: BoundedVec<Field, N / 32> = BoundedVec::new();\n for i in 0..num_chunks {\n let maybe_field = try_decode_field_from_bytes(bytes, i * 32);\n if maybe_field.is_some() {\n fields.push(maybe_field.unwrap());\n }\n }\n if fields.len() == num_chunks {\n Option::some(fields)\n } else {\n Option::none()\n }\n } else {\n Option::none()\n }\n}\n\nfn try_decode_field_from_bytes<let N: u32>(bytes: BoundedVec<u8, N>, offset: u32) -> Option<Field> {\n // Field arithmetic silently wraps values >= the modulus, so we compare each chunk against the modulus\n // byte-by-byte (big-endian) while building `field`. cmp: 0 = equal so far, 1 = less than modulus, 2 = exceeds.\n let p = std::field::modulus_be_bytes();\n let mut field = 0;\n let mut cmp: u8 = 0;\n for j in 0..32 {\n let byte = bytes.get(offset + j);\n field = field * 256 + byte as Field;\n if cmp == 0 {\n if byte < p[j] {\n cmp = 1;\n } else if byte > p[j] {\n cmp = 2;\n }\n }\n }\n\n if cmp == 1 {\n Option::some(field)\n } else {\n Option::none()\n }\n}\n\nmod tests {\n use crate::utils::array::subarray;\n use super::{decode_fields_from_bytes, encode_fields_as_bytes, try_decode_fields_from_bytes};\n\n #[test]\n unconstrained fn round_trips_fields(input: [Field; 3]) {\n let bytes = encode_fields_as_bytes(input);\n\n // In production the bytes fly through the system and arrive as a BoundedVec on the other end. 113 is an\n // arbitrary max length larger than the input length of 96.\n let bytes_bvec = BoundedVec::<_, 113>::from_array(bytes);\n let fields_back = try_decode_fields_from_bytes(bytes_bvec).unwrap();\n\n assert_eq(fields_back.len(), input.len());\n assert_eq(subarray(fields_back.storage(), 0), input);\n }\n\n #[test]\n unconstrained fn try_decode_returns_none_on_length_not_multiple_of_32() {\n let input = BoundedVec::<_, 64>::from_parts([0 as u8; 64], 33);\n assert(try_decode_fields_from_bytes(input).is_none());\n }\n\n #[test]\n unconstrained fn try_decode_accepts_max_field() {\n // -1 in field arithmetic wraps to `modulus - 1`, the largest valid field value.\n let max_field_as_bytes: [u8; 32] = (-1).to_be_bytes();\n let input = BoundedVec::<_, 32>::from_array(max_field_as_bytes);\n\n let fields = try_decode_fields_from_bytes(input).unwrap();\n\n assert_eq(fields.get(0), -1);\n }\n\n // Verifies the overflow check: take the max allowed value, bump a random byte, feed it in.\n #[test]\n unconstrained fn try_decode_returns_none_on_chunk_above_modulus(random_value: u8) {\n let index_of_byte_to_bump = random_value % 32;\n let max_field_value_as_bytes: [u8; 32] = (-1).to_be_bytes();\n let byte_to_bump = max_field_value_as_bytes[index_of_byte_to_bump as u32];\n\n // Skip if the selected byte is already 255. Acceptable under fuzz testing.\n if byte_to_bump != 255 {\n let mut input = BoundedVec::<_, 32>::from_array(max_field_value_as_bytes);\n input.set(index_of_byte_to_bump as u32, byte_to_bump + 1);\n\n assert(try_decode_fields_from_bytes(input).is_none());\n }\n }\n\n #[test]\n unconstrained fn try_decode_returns_none_on_chunk_equal_to_modulus() {\n // The field modulus itself is not a valid field value (it wraps to 0).\n let p: [u8; 32] = std::field::modulus_be_bytes().as_array();\n let input = BoundedVec::<u8, 32>::from_array(p);\n assert(try_decode_fields_from_bytes(input).is_none());\n }\n\n #[test(should_fail_with = \"Input length must be a multiple of 32\")]\n unconstrained fn decode_asserts_length_multiple_of_32() {\n let input = BoundedVec::<_, 143>::from_array([\n 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29,\n 30, 31, 32, 33,\n ]);\n let _fields = decode_fields_from_bytes(input);\n }\n\n #[test(should_fail_with = \"Value does not fit in field\")]\n unconstrained fn decode_panics_on_chunk_above_modulus(random_value: u8) {\n let index_of_byte_to_bump = random_value % 32;\n let max_field_value_as_bytes: [u8; 32] = (-1).to_be_bytes();\n let byte_to_bump = max_field_value_as_bytes[index_of_byte_to_bump as u32];\n\n if byte_to_bump != 255 {\n let mut input = BoundedVec::<_, 32>::from_array(max_field_value_as_bytes);\n input.set(index_of_byte_to_bump as u32, byte_to_bump + 1);\n let _fields = decode_fields_from_bytes(input);\n }\n }\n}\n"
4841
4841
  },
4842
4842
  "256": {
4843
4843
  "function_locations": [
@@ -7063,107 +7063,115 @@
7063
7063
  },
7064
7064
  {
7065
7065
  "name": "PrivateContext::set_expiration_timestamp",
7066
- "start": 33219
7066
+ "start": 33755
7067
7067
  },
7068
7068
  {
7069
7069
  "name": "PrivateContext::assert_note_exists",
7070
- "start": 34614
7070
+ "start": 35150
7071
7071
  },
7072
7072
  {
7073
7073
  "name": "PrivateContext::assert_nullifier_exists",
7074
- "start": 37250
7074
+ "start": 37786
7075
7075
  },
7076
7076
  {
7077
7077
  "name": "PrivateContext::request_nhk_app",
7078
- "start": 39347
7078
+ "start": 39883
7079
7079
  },
7080
7080
  {
7081
7081
  "name": "PrivateContext::request_ovsk_app",
7082
- "start": 40993
7082
+ "start": 41529
7083
7083
  },
7084
7084
  {
7085
7085
  "name": "PrivateContext::request_sk_app",
7086
- "start": 42407
7086
+ "start": 42943
7087
7087
  },
7088
7088
  {
7089
7089
  "name": "PrivateContext::message_portal",
7090
- "start": 45625
7090
+ "start": 46161
7091
7091
  },
7092
7092
  {
7093
7093
  "name": "PrivateContext::consume_l1_to_l2_message",
7094
- "start": 47507
7094
+ "start": 48043
7095
7095
  },
7096
7096
  {
7097
7097
  "name": "PrivateContext::emit_private_log_unsafe",
7098
- "start": 51919
7098
+ "start": 52601
7099
+ },
7100
+ {
7101
+ "name": "PrivateContext::emit_private_log_vec_unsafe",
7102
+ "start": 53321
7099
7103
  },
7100
7104
  {
7101
7105
  "name": "PrivateContext::emit_raw_note_log_unsafe",
7102
- "start": 53508
7106
+ "start": 54884
7107
+ },
7108
+ {
7109
+ "name": "PrivateContext::emit_raw_note_log_vec_unsafe",
7110
+ "start": 55706
7103
7111
  },
7104
7112
  {
7105
7113
  "name": "PrivateContext::emit_contract_class_log",
7106
- "start": 54103
7114
+ "start": 56314
7107
7115
  },
7108
7116
  {
7109
7117
  "name": "PrivateContext::call_private_function",
7110
- "start": 58662
7118
+ "start": 60873
7111
7119
  },
7112
7120
  {
7113
7121
  "name": "PrivateContext::static_call_private_function",
7114
- "start": 59864
7122
+ "start": 62075
7115
7123
  },
7116
7124
  {
7117
7125
  "name": "PrivateContext::call_private_function_no_args",
7118
- "start": 60879
7126
+ "start": 63090
7119
7127
  },
7120
7128
  {
7121
7129
  "name": "PrivateContext::static_call_private_function_no_args",
7122
- "start": 61732
7130
+ "start": 63943
7123
7131
  },
7124
7132
  {
7125
7133
  "name": "PrivateContext::call_private_function_with_args_hash",
7126
- "start": 62710
7134
+ "start": 64921
7127
7135
  },
7128
7136
  {
7129
7137
  "name": "PrivateContext::call_public_function",
7130
- "start": 66870
7138
+ "start": 68820
7131
7139
  },
7132
7140
  {
7133
7141
  "name": "PrivateContext::static_call_public_function",
7134
- "start": 68137
7142
+ "start": 70087
7135
7143
  },
7136
7144
  {
7137
7145
  "name": "PrivateContext::call_public_function_no_args",
7138
- "start": 69156
7146
+ "start": 71106
7139
7147
  },
7140
7148
  {
7141
7149
  "name": "PrivateContext::static_call_public_function_no_args",
7142
- "start": 70055
7150
+ "start": 72005
7143
7151
  },
7144
7152
  {
7145
7153
  "name": "PrivateContext::call_public_function_with_calldata_hash",
7146
- "start": 71244
7154
+ "start": 73194
7147
7155
  },
7148
7156
  {
7149
7157
  "name": "PrivateContext::set_public_teardown_function",
7150
- "start": 73772
7158
+ "start": 75722
7151
7159
  },
7152
7160
  {
7153
7161
  "name": "PrivateContext::set_public_teardown_function_with_calldata_hash",
7154
- "start": 75043
7162
+ "start": 76993
7155
7163
  },
7156
7164
  {
7157
7165
  "name": "PrivateContext::next_counter",
7158
- "start": 80447
7166
+ "start": 82397
7159
7167
  },
7160
7168
  {
7161
7169
  "name": "<impl Empty for PrivateContext>::empty",
7162
- "start": 80616
7170
+ "start": 82566
7163
7171
  }
7164
7172
  ],
7165
7173
  "path": "/home/aztec-dev/aztec-packages/noir-projects/aztec-nr/aztec/src/context/private_context.nr",
7166
- "source": "use crate::{\n context::{inputs::PrivateContextInputs, NoteExistenceRequest, NullifierExistenceRequest, ReturnsHash},\n hash::{hash_args, hash_calldata_array},\n keys::constants::{NULLIFIER_INDEX, NUM_KEY_TYPES, OUTGOING_INDEX, public_key_domain_separators},\n messaging::process_l1_to_l2_message,\n oracle::{\n block_header::get_block_header_at,\n call_private_function::call_private_function_internal,\n execution_cache,\n key_validation_request::get_key_validation_request,\n logs::notify_created_contract_class_log,\n notes::notify_nullified_note,\n nullifiers::notify_created_nullifier,\n public_call::assert_valid_public_call_data,\n tx_phase::{is_execution_in_revertible_phase, notify_revertible_phase_start},\n },\n};\nuse crate::logging::aztecnr_trace_log_format;\nuse crate::protocol::{\n abis::{\n block_header::BlockHeader,\n call_context::CallContext,\n function_selector::FunctionSelector,\n gas_settings::GasSettings,\n log_hash::LogHash,\n note_hash::NoteHash,\n nullifier::Nullifier,\n private_call_request::PrivateCallRequest,\n private_circuit_public_inputs::PrivateCircuitPublicInputs,\n private_log::{PrivateLog, PrivateLogData},\n public_call_request::PublicCallRequest,\n validation_requests::{KeyValidationRequest, KeyValidationRequestAndSeparator},\n },\n address::{AztecAddress, EthAddress},\n constants::{\n CONTRACT_CLASS_LOG_SIZE_IN_FIELDS, MAX_CONTRACT_CLASS_LOGS_PER_CALL, MAX_ENQUEUED_CALLS_PER_CALL,\n MAX_KEY_VALIDATION_REQUESTS_PER_CALL, MAX_L2_TO_L1_MSGS_PER_CALL, MAX_NOTE_HASH_READ_REQUESTS_PER_CALL,\n MAX_NOTE_HASHES_PER_CALL, MAX_NULLIFIER_READ_REQUESTS_PER_CALL, MAX_NULLIFIERS_PER_CALL,\n MAX_PRIVATE_CALL_STACK_LENGTH_PER_CALL, MAX_PRIVATE_LOGS_PER_CALL, MAX_TX_LIFETIME,\n NULL_MSG_SENDER_CONTRACT_ADDRESS, PRIVATE_LOG_CIPHERTEXT_LEN,\n },\n hash::compute_contract_class_log_hash,\n messaging::l2_to_l1_message::L2ToL1Message,\n side_effect::{Counted, scoped::Scoped},\n traits::{Empty, Hash, ToField},\n utils::arrays::{ClaimedLengthArray, trimmed_array_length_hint},\n};\n\n/// # PrivateContext\n///\n/// The **main interface** between an #[external(\"private\")] function and the Aztec blockchain.\n///\n/// An instance of the PrivateContext is initialized automatically at the outset of every private function, within the\n/// #[external(\"private\")] macro, so you'll never need to consciously instantiate this yourself.\n///\n/// The instance is always named `context`, and it is always be available within the body of every\n/// #[external(\"private\")] function in your smart contract.\n///\n/// > For those used to \"vanilla\" Noir, it might be jarring to have access to > `context` without seeing a declaration\n/// `let context = PrivateContext::new(...)` > within the body of your function. This is just a consequence of using >\n/// macros to tidy-up verbose boilerplate. You can use `nargo expand` to > expand all macros, if you dare.\n///\n/// Typical usage for a smart contract developer will be to call getter methods of the PrivateContext.\n///\n/// _Pushing_ data and requests to the context is mostly handled within aztec-nr's own functions, so typically a smart\n/// contract developer won't need to call any setter methods directly.\n///\n/// > Advanced users might occasionally wish to push data to the context > directly for lower-level control. If you\n/// find yourself doing this, please > open an issue on GitHub to describe your use case: it might be that > new\n/// functionality should be added to aztec-nr.\n///\n/// ## Responsibilities\n/// - Exposes contextual data to a private function:\n/// - Data relating to how this private function was called.\n/// - msg_sender\n/// - this_address - (the contract address of the private function being executed)\n/// - See `CallContext` for more data.\n/// - Data relating to the transaction in which this private function is being executed.\n/// - chain_id\n/// - version\n/// - gas_settings\n/// - Provides state access:\n/// - Access to the \"Anchor block\" header. Recall, a private function cannot read from the \"current\" block header, but\n/// must read from some historical block header, because as soon as private function execution begins (asynchronously,\n/// on a user's device), the public state of the chain (the \"current state\") will have progressed forward. We call this\n/// reference the \"Anchor block\". See `BlockHeader`.\n/// - Enables consumption of L1->L2 messages.\n/// - Enables calls to functions of other smart contracts:\n/// - Private function calls\n/// - Enqueueing of public function call requests (Since public functions are executed at a later time, by a block\n/// proposer, we say they are \"enqueued\").\n/// - Writes data to the blockchain:\n/// - New notes\n/// - New nullifiers\n/// - Private logs (for sending encrypted note contents or encrypted events)\n/// - New L2->L1 messages.\n/// - Provides args to the private function (handled by the #[external(\"private\")] macro).\n/// - Returns the return values of this private function (handled by the\n/// #[external(\"private\")] macro).\n/// - Makes Key Validation Requests.\n/// - Private functions are not allowed to see master secret keys, because we do not trust them. They are instead given\n/// \"app-siloed\" secret keys with a claim that they relate to a master public key. They can then request validation of\n/// this claim, by making a \"key validation request\" to the protocol's kernel circuits (which _are_ allowed to see\n/// certain master secret keys).\n///\n/// ## Advanced Responsibilities\n///\n/// - Ultimately, the PrivateContext is responsible for constructing the PrivateCircuitPublicInputs of the private\n/// function being executed. All private functions on Aztec must have public inputs which adhere to the rigid layout of\n/// the PrivateCircuitPublicInputs, in order to be compatible with the protocol's kernel circuits. A well-known\n/// misnomer:\n/// - \"public inputs\" contain both inputs and outputs of this function.\n/// - By \"outputs\" we mean a lot more side-effects than just the \"return values\" of the function.\n/// - Most of the so-called \"public inputs\" are kept _private_, and never leak to the outside world, because they are\n/// 'swallowed' by the protocol's kernel circuits before the tx is sent to the network. Only the following are exposed\n/// to the outside world:\n/// - New note_hashes\n/// - New nullifiers\n/// - New private logs\n/// - New L2->L1 messages\n/// - New enqueued public function call requests All the above-listed arrays of side-effects can be padded by the\n/// user's wallet (through instructions to the kernel circuits, via the PXE) to obscure their true lengths.\n///\n/// ## Syntax Justification\n///\n/// Both user-defined functions _and_ most functions in aztec-nr need access to the PrivateContext instance to\n/// read/write data. This is why you'll see the arguably-ugly pervasiveness of the \"context\" throughout your smart\n/// contract and the aztec-nr library. For example, `&mut context` is prevalent. In some languages, you can access and\n/// mutate a global variable (such as a PrivateContext instance) from a function without polluting the function's\n/// parameters. With Noir, a function must explicitly pass control of a mutable variable to another function, by\n/// reference. Since many functions in aztec-nr need to be able to push new data to the PrivateContext, they need to be\n/// handed a mutable reference _to_ the context as a parameter. For example, `Context` is prevalent as a generic\n/// parameter, to give better type safety at compile time. Many `aztec-nr` functions don't make sense if they're called\n/// in a particular runtime (private, public or utility), and so are intentionally only implemented over certain\n/// [Private|Public|Utility]Context structs. This gives smart contract developers a much faster feedback loop if\n/// they're making a mistake, as an error will be thrown by the LSP or when they compile their contract.\n///\n#[derive(Eq)]\npub struct PrivateContext {\n // docs:start:private-context\n pub inputs: PrivateContextInputs,\n pub side_effect_counter: u32,\n\n pub min_revertible_side_effect_counter: u32,\n pub is_fee_payer: bool,\n\n pub args_hash: Field,\n pub return_hash: Field,\n\n pub expiration_timestamp: u64,\n\n pub(crate) note_hash_read_requests: BoundedVec<Scoped<Counted<Field>>, MAX_NOTE_HASH_READ_REQUESTS_PER_CALL>,\n pub(crate) nullifier_read_requests: BoundedVec<Scoped<Counted<Field>>, MAX_NULLIFIER_READ_REQUESTS_PER_CALL>,\n key_validation_requests_and_separators: BoundedVec<KeyValidationRequestAndSeparator, MAX_KEY_VALIDATION_REQUESTS_PER_CALL>,\n\n pub note_hashes: BoundedVec<Counted<NoteHash>, MAX_NOTE_HASHES_PER_CALL>,\n pub nullifiers: BoundedVec<Counted<Nullifier>, MAX_NULLIFIERS_PER_CALL>,\n\n pub private_call_requests: BoundedVec<PrivateCallRequest, MAX_PRIVATE_CALL_STACK_LENGTH_PER_CALL>,\n pub public_call_requests: BoundedVec<Counted<PublicCallRequest>, MAX_ENQUEUED_CALLS_PER_CALL>,\n pub public_teardown_call_request: PublicCallRequest,\n pub l2_to_l1_msgs: BoundedVec<Counted<L2ToL1Message>, MAX_L2_TO_L1_MSGS_PER_CALL>,\n // docs:end:private-context\n\n // Header of a block whose state is used during private execution (not the block the transaction is included in).\n pub anchor_block_header: BlockHeader,\n\n pub private_logs: BoundedVec<Counted<PrivateLogData>, MAX_PRIVATE_LOGS_PER_CALL>,\n pub contract_class_logs_hashes: BoundedVec<Counted<LogHash>, MAX_CONTRACT_CLASS_LOGS_PER_CALL>,\n\n // Contains the last key validation request for each key type. This is used to cache the last request and avoid\n // fetching the same request multiple times. The index of the array corresponds to the key type (0 nullifier, 1\n // incoming, 2 outgoing, 3 tagging).\n pub last_key_validation_requests: [Option<KeyValidationRequest>; NUM_KEY_TYPES],\n\n pub expected_non_revertible_side_effect_counter: u32,\n pub expected_revertible_side_effect_counter: u32,\n}\n\nimpl PrivateContext {\n pub fn new(inputs: PrivateContextInputs, args_hash: Field) -> PrivateContext {\n PrivateContext {\n inputs,\n side_effect_counter: inputs.start_side_effect_counter + 1,\n min_revertible_side_effect_counter: 0,\n is_fee_payer: false,\n args_hash,\n return_hash: 0,\n expiration_timestamp: inputs.anchor_block_header.timestamp() + MAX_TX_LIFETIME,\n note_hash_read_requests: BoundedVec::new(),\n nullifier_read_requests: BoundedVec::new(),\n key_validation_requests_and_separators: BoundedVec::new(),\n note_hashes: BoundedVec::new(),\n nullifiers: BoundedVec::new(),\n anchor_block_header: inputs.anchor_block_header,\n private_call_requests: BoundedVec::new(),\n public_call_requests: BoundedVec::new(),\n public_teardown_call_request: PublicCallRequest::empty(),\n l2_to_l1_msgs: BoundedVec::new(),\n private_logs: BoundedVec::new(),\n contract_class_logs_hashes: BoundedVec::new(),\n last_key_validation_requests: [Option::none(); NUM_KEY_TYPES],\n expected_non_revertible_side_effect_counter: 0,\n expected_revertible_side_effect_counter: 0,\n }\n }\n\n /// Returns the contract address that initiated this function call.\n ///\n /// This is similar to `msg.sender` in Solidity (hence the name).\n ///\n /// Important Note: Since Aztec doesn't have a concept of an EoA (Externally-owned Account), the msg_sender is\n /// \"none\" for the first function call of every transaction. The first function call of a tx is likely to be a call\n /// to the user's account contract, so this quirk will most often be handled by account contract developers.\n ///\n /// # Returns\n /// * `Option<AztecAddress>` - The address of the smart contract that called this function (be it an app contract\n /// or a user's account contract). Returns `Option<AztecAddress>::none` for the first function call of the tx. No\n /// other _private_ function calls in the tx will have a `none` msg_sender, but _public_ function calls might (see\n /// the PublicContext).\n pub fn maybe_msg_sender(self) -> Option<AztecAddress> {\n let maybe_msg_sender = self.inputs.call_context.msg_sender;\n if maybe_msg_sender == NULL_MSG_SENDER_CONTRACT_ADDRESS {\n Option::none()\n } else {\n Option::some(maybe_msg_sender)\n }\n }\n\n /// Returns the contract address of the current function being executed.\n ///\n /// This is equivalent to `address(this)` in Solidity (hence the name). Use this to identify the current contract's\n /// address, commonly needed for access control or when interacting with other contracts.\n ///\n /// # Returns\n /// * `AztecAddress` - The contract address of the current function being executed.\n ///\n pub fn this_address(self) -> AztecAddress {\n self.inputs.call_context.contract_address\n }\n\n /// Returns the chain ID of the current network.\n ///\n /// This is similar to `block.chainid` in Solidity. Returns the unique identifier for the blockchain network this\n /// transaction is executing on.\n ///\n /// Helps prevent cross-chain replay attacks. Useful if implementing multi-chain contract logic.\n ///\n /// # Returns\n /// * `Field` - The chain ID as a field element\n ///\n pub fn chain_id(self) -> Field {\n self.inputs.tx_context.chain_id\n }\n\n /// Returns the Aztec protocol version that this transaction is executing under. Different versions may have\n /// different rules, opcodes, or cryptographic primitives.\n ///\n /// This is similar to how Ethereum has different EVM versions.\n ///\n /// Useful for forward/backward compatibility checks\n ///\n /// Not to be confused with contract versions; this is the protocol version.\n ///\n /// # Returns\n /// * `Field` - The protocol version as a field element\n ///\n pub fn version(self) -> Field {\n self.inputs.tx_context.version\n }\n\n /// Returns the gas settings for the current transaction.\n ///\n /// This provides information about gas limits and pricing for the transaction, similar to `tx.gasprice` and gas\n /// limits in Ethereum. However, Aztec has a more sophisticated gas model with separate accounting for L2\n /// computation and data availability (DA) costs.\n ///\n /// # Returns\n /// * `GasSettings` - Struct containing gas limits and fee information\n ///\n pub fn gas_settings(self) -> GasSettings {\n self.inputs.tx_context.gas_settings\n }\n\n /// Returns the function selector of the currently executing function.\n ///\n /// Low-level function: Ordinarily, smart contract developers will not need to access this.\n ///\n /// This is similar to `msg.sig` in Solidity, which returns the first 4 bytes of the function signature. In Aztec,\n /// the selector uniquely identifies which function within the contract is being called.\n ///\n /// # Returns\n /// * `FunctionSelector` - The 4-byte function identifier\n ///\n /// # Advanced\n /// Only #[external(\"private\")] functions have a function selector as a protocol- enshrined concept. The function\n /// selectors of private functions are baked into the preimage of the contract address, and are used by the\n /// protocol's kernel circuits to identify each private function and ensure the correct one is being executed.\n ///\n /// Used internally for function dispatch and call verification.\n ///\n pub fn selector(self) -> FunctionSelector {\n self.inputs.call_context.function_selector\n }\n\n /// Returns the hash of the arguments passed to the current function.\n ///\n /// Very low-level function: You shouldn't need to call this. The #[external(\"private\")] macro calls this, and it\n /// makes the arguments neatly available to the body of your private function.\n ///\n /// # Returns\n /// * `Field` - Hash of the function arguments\n ///\n /// # Advanced\n /// * Arguments are hashed to reduce proof size and verification time\n /// * Enables efficient argument passing in recursive function calls\n /// * The hash can be used to retrieve the original arguments from the PXE.\n ///\n pub fn get_args_hash(self) -> Field {\n self.args_hash\n }\n\n /// Pushes a new note_hash to the Aztec blockchain's global Note Hash Tree (a state tree).\n ///\n /// A note_hash is a commitment to a piece of private state.\n ///\n /// Low-level function: Ordinarily, smart contract developers will not need to manually call this. Aztec-nr's state\n /// variables (see `../state_vars/`) are designed to understand when to create and push new note hashes.\n ///\n /// # Arguments\n /// * `note_hash` - The new note_hash.\n ///\n /// # Advanced\n /// From here, the protocol's kernel circuits will take over and insert the note_hash into the protocol's \"note\n /// hash tree\" (in the Base Rollup circuit). Before insertion, the protocol will:\n /// - \"Silo\" the `note_hash` with the contract address of this function, to yield a `siloed_note_hash`. This\n /// prevents state collisions between different smart contracts.\n /// - Ensure uniqueness of the `siloed_note_hash`, to prevent Faerie-Gold attacks, by hashing the\n /// `siloed_note_hash` with a unique value, to yield a `unique_siloed_note_hash` (see the protocol spec for more).\n ///\n /// In addition to calling this function, aztec-nr provides the contents of the newly-created note to the PXE, via\n /// the `notify_created_note` oracle.\n ///\n /// > Advanced users might occasionally wish to push data to the context > directly for lower-level control. If you\n /// find yourself doing this, > please open an issue on GitHub to describe your use case: it might be > that new\n /// functionality should be added to aztec-nr.\n ///\n pub fn push_note_hash(&mut self, note_hash: Field) {\n self.note_hashes.push(Counted::new(note_hash, self.next_counter()));\n }\n\n /// Creates a new [nullifier](crate::nullifier).\n ///\n /// ## Safety\n ///\n /// This is a low-level function that must be used with great care to avoid subtle corruption of contract state.\n /// Instead of calling this function, consider using the higher-level [`crate::state_vars::SingleUseClaim`].\n ///\n /// In particular, callers must ensure all nullifiers created by a contract are properly domain-separated, so that\n /// unrelated components don't interfere with one another (e.g. a transaction nullifier accidentally marking a\n /// variable as initialized). Only [`PrivateContext::push_nullifier_for_note_hash`] should be used for note\n /// nullifiers, never this one.\n ///\n /// ## Advanced\n ///\n /// The raw `nullifier` is not what is inserted into the Aztec state tree: it will be first siloed by contract\n /// address via [`crate::protocol::hash::compute_siloed_nullifier`] in order to prevent accidental or malicious\n /// interference of nullifiers from different contracts.\n pub fn push_nullifier(&mut self, nullifier: Field) {\n notify_created_nullifier(nullifier);\n self.nullifiers.push(Nullifier { value: nullifier, note_hash: 0 }.count(self.next_counter()));\n }\n\n /// Creates a new [nullifier](crate::nullifier) associated with a note.\n ///\n /// This is a variant of [`PrivateContext::push_nullifier`] that is used for note nullifiers, i.e. nullifiers that\n /// correspond to a note. If a note and its nullifier are created in the same transaction, then the private kernels\n /// will 'squash' these values, deleting them both as if they never existed and reducing transaction fees.\n ///\n /// The `nullification_note_hash` must be the result of calling\n /// [`crate::note::utils::compute_confirmed_note_hash_for_nullification`] for pending notes, and `0` for settled\n /// notes (which cannot be squashed).\n ///\n /// ## Safety\n ///\n /// This is a low-level function that must be used with great care to avoid subtle corruption of contract state.\n /// Instead of calling this function, consider using the higher-level [`crate::note::lifecycle::destroy_note`].\n ///\n /// The precautions listed for [`PrivateContext::push_nullifier`] apply here as well, and callers should\n /// additionally ensure `nullification_note_hash` corresponds to a note emitted by this contract, with its hash\n /// computed in the same transaction execution phase as the call to this function. Finally, only this function\n /// should be used for note nullifiers, never [`PrivateContext::push_nullifier`].\n ///\n /// Failure to do these things can result in unprovable contexts, accidental deletion of notes, or double-spend\n /// attacks.\n pub fn push_nullifier_for_note_hash(&mut self, nullifier: Field, nullification_note_hash: Field) {\n let nullifier_counter = self.next_counter();\n notify_nullified_note(nullifier, nullification_note_hash, nullifier_counter);\n self.nullifiers.push(Nullifier { value: nullifier, note_hash: nullification_note_hash }.count(\n nullifier_counter,\n ));\n }\n\n /// Returns the anchor block header - the historical block header that this private function is reading from.\n ///\n /// A private function CANNOT read from the \"current\" block header, but must read from some older block header,\n /// because as soon as private function execution begins (asynchronously, on a user's device), the public state of\n /// the chain (the \"current state\") will have progressed forward.\n ///\n /// # Returns\n /// * `BlockHeader` - The anchor block header.\n ///\n /// # Advanced\n /// * All private functions of a tx read from the same anchor block header.\n /// * The protocol asserts that the `expiration_timestamp` of every tx is at most 24 hours beyond the timestamp of\n /// the tx's chosen anchor block header. This enables the network's nodes to safely prune old txs from the mempool.\n /// Therefore, the chosen block header _must_ be one from within the last 24 hours.\n ///\n pub fn get_anchor_block_header(self) -> BlockHeader {\n self.anchor_block_header\n }\n\n /// Returns the header of any historical block at or before the anchor block.\n ///\n /// This enables private contracts to access information from even older blocks than the anchor block header.\n ///\n /// Useful for time-based contract logic that needs to compare against multiple historical points.\n ///\n /// # Arguments\n /// * `block_number` - The block number to retrieve (must be <= anchor block number)\n ///\n /// # Returns\n /// * `BlockHeader` - The header of the requested historical block\n ///\n /// # Advanced\n /// This function uses an oracle to fetch block header data from the user's PXE. Depending on how much blockchain\n /// data the user's PXE has been set up to store, this might require a query from the PXE to another Aztec node to\n /// get the data. > This is generally true of all oracle getters (see `../oracle`).\n ///\n /// Each block header gets hashed and stored as a leaf in the protocol's Archive Tree. In fact, the i-th block\n /// header gets stored at the i-th leaf index of the Archive Tree. Behind the scenes, this `get_block_header_at`\n /// function will add Archive Tree merkle-membership constraints (~3k) to your smart contract function's circuit,\n /// to prove existence of the block header in the Archive Tree.\n ///\n /// Note: we don't do any caching, so avoid making duplicate calls for the same block header, because each call\n /// will add duplicate constraints.\n ///\n /// Calling this function is more expensive (constraint-wise) than getting the anchor block header (via\n /// `get_block_header`). This is because the anchor block's merkle membership proof is handled by Aztec's protocol\n /// circuits, and is only performed once for the entire tx because all private functions of a tx share a common\n /// anchor block header. Therefore, the cost (constraint-wise) of calling `get_block_header` is effectively free.\n ///\n pub fn get_block_header_at(self, block_number: u32) -> BlockHeader {\n get_block_header_at(block_number, self)\n }\n\n /// Sets the hash of the return values for this private function.\n ///\n /// Very low-level function: this is called by the #[external(\"private\")] macro.\n ///\n /// # Arguments\n /// * `serialized_return_values` - The serialized return values as a field array\n ///\n pub fn set_return_hash<let N: u32>(&mut self, serialized_return_values: [Field; N]) {\n let return_hash = hash_args(serialized_return_values);\n self.return_hash = return_hash;\n execution_cache::store(serialized_return_values, return_hash);\n }\n\n /// Builds the PrivateCircuitPublicInputs for this private function, to ensure compatibility with the protocol's\n /// kernel circuits.\n ///\n /// Very low-level function: This function is automatically called by the #[external(\"private\")] macro.\n pub fn finish(self) -> PrivateCircuitPublicInputs {\n PrivateCircuitPublicInputs {\n call_context: self.inputs.call_context,\n args_hash: self.args_hash,\n returns_hash: self.return_hash,\n min_revertible_side_effect_counter: self.min_revertible_side_effect_counter,\n is_fee_payer: self.is_fee_payer,\n expiration_timestamp: self.expiration_timestamp,\n note_hash_read_requests: ClaimedLengthArray::from_bounded_vec(self.note_hash_read_requests),\n nullifier_read_requests: ClaimedLengthArray::from_bounded_vec(self.nullifier_read_requests),\n key_validation_requests_and_separators: ClaimedLengthArray::from_bounded_vec(\n self.key_validation_requests_and_separators,\n ),\n note_hashes: ClaimedLengthArray::from_bounded_vec(self.note_hashes),\n nullifiers: ClaimedLengthArray::from_bounded_vec(self.nullifiers),\n private_call_requests: ClaimedLengthArray::from_bounded_vec(self.private_call_requests),\n public_call_requests: ClaimedLengthArray::from_bounded_vec(self.public_call_requests),\n public_teardown_call_request: self.public_teardown_call_request,\n l2_to_l1_msgs: ClaimedLengthArray::from_bounded_vec(self.l2_to_l1_msgs),\n start_side_effect_counter: self.inputs.start_side_effect_counter,\n end_side_effect_counter: self.side_effect_counter,\n private_logs: ClaimedLengthArray::from_bounded_vec(self.private_logs),\n contract_class_logs_hashes: ClaimedLengthArray::from_bounded_vec(self.contract_class_logs_hashes),\n anchor_block_header: self.anchor_block_header,\n tx_context: self.inputs.tx_context,\n expected_non_revertible_side_effect_counter: self.expected_non_revertible_side_effect_counter,\n expected_revertible_side_effect_counter: self.expected_revertible_side_effect_counter,\n }\n }\n\n /// Designates this contract as the fee payer for the transaction.\n ///\n /// Unlike Ethereum, where the transaction sender always pays fees, Aztec allows any contract to voluntarily pay\n /// transaction fees. This enables patterns like sponsored transactions or fee abstraction where users don't need\n /// to hold fee-juice themselves. (Fee juice is a fee-paying asset for Aztec).\n ///\n /// Only one contract per transaction can declare itself as the fee payer, and it must have sufficient fee-juice\n /// balance (>= the gas limits specified in the TxContext) by the time we reach the public setup phase of the tx.\n ///\n pub fn set_as_fee_payer(&mut self) {\n aztecnr_trace_log_format!(\"Setting {0} as fee payer\")([self.this_address().to_field()]);\n self.is_fee_payer = true;\n }\n\n pub fn in_revertible_phase(&mut self) -> bool {\n let current_counter = self.side_effect_counter;\n\n // Safety: Kernel will validate that the claim is correct by validating the expected counters.\n let is_revertible = unsafe { is_execution_in_revertible_phase(current_counter) };\n\n if is_revertible {\n if (self.expected_revertible_side_effect_counter == 0)\n | (current_counter < self.expected_revertible_side_effect_counter) {\n self.expected_revertible_side_effect_counter = current_counter;\n }\n } else if current_counter > self.expected_non_revertible_side_effect_counter {\n self.expected_non_revertible_side_effect_counter = current_counter;\n }\n\n is_revertible\n }\n\n /// Declares the end of the \"setup phase\" of this tx.\n ///\n /// Only one function per tx can declare the end of the setup phase.\n ///\n /// Niche function: Only wallet developers and paymaster contract developers (aka Fee-payment contracts) will need\n /// to make use of this function.\n ///\n /// Aztec supports a three-phase execution model: setup, app logic, teardown. The phases exist to enable a fee\n /// payer to take on the risk of paying a transaction fee, safe in the knowledge that their payment (in whatever\n /// token or method the user chooses) will succeed, regardless of whether the app logic will succeed. The \"setup\"\n /// phase enables such a payment to be made, because the setup phase _cannot revert_: a reverting function within\n /// the setup phase would result in an invalid block which cannot be proven. Any side-effects generated during that\n /// phase are guaranteed to be inserted into Aztec's state trees (except for squashed notes & nullifiers, of\n /// course).\n ///\n /// Even though the end of the setup phase is declared within a private function, you might have noticed that\n /// _public_ functions can also execute within the setup phase. This is because any public function calls which\n /// were enqueued _within the setup phase_ by a private function are considered part of the setup phase.\n ///\n /// # Advanced\n /// * Sets the minimum revertible side effect counter of this tx to be the PrivateContext's _current_ side effect\n /// counter.\n ///\n pub fn end_setup(&mut self) {\n // Incrementing the side effect counter when ending setup ensures non ambiguity for the counter where we change\n // phases.\n self.side_effect_counter += 1;\n aztecnr_trace_log_format!(\"Ending setup at counter {0}\")([self.side_effect_counter as Field]);\n self.min_revertible_side_effect_counter = self.next_counter();\n notify_revertible_phase_start(self.min_revertible_side_effect_counter);\n }\n\n /// Sets a deadline (an \"include-by timestamp\") for when this transaction must be included in a block.\n ///\n /// Other functions in this tx might call this setter with differing values for the include-by timestamp. To ensure\n /// that all functions' deadlines are met, the _minimum_ of all these include-by timestamps will be exposed when\n /// this tx is submitted to the network.\n ///\n /// If the transaction is not included in a block by its include-by timestamp, it becomes invalid and it will never\n /// be included.\n ///\n /// This expiry timestamp is publicly visible. See the \"Advanced\" section for privacy concerns.\n ///\n /// # Arguments\n /// * `expiration_timestamp` - Unix timestamp (seconds) deadline for inclusion. The include-by timestamp of this tx\n /// will be _at most_ the timestamp specified.\n ///\n /// # Advanced\n /// * If multiple functions set differing `expiration_timestamp`s, the kernel circuits will set it to be the\n /// _minimum_ of the two. This ensures the tx expiry requirements of all functions in the tx are met.\n /// * Rollup circuits will reject expired txs.\n /// * The protocol enforces that all transactions must be included within 24 hours of their chosen anchor block's\n /// timestamp, to enable safe mempool pruning.\n /// * The DelayedPublicMutable design makes heavy use of this functionality, to enable private functions to read\n /// public state.\n /// * A sophisticated Wallet should cleverly set an include-by timestamp to improve the privacy of the user and the\n /// network as a whole. For example, if a contract interaction sets include-by to some publicly-known value (e.g.\n /// the time when a contract upgrades), then the wallet might wish to set an even lower one to avoid revealing that\n /// this tx is interacting with said contract. Ideally, all wallets should standardize on an approach in order to\n /// provide users with a large privacy set -- although the exact approach\n /// will need to be discussed. Wallets that deviate from a standard might accidentally reveal which wallet each\n /// transaction originates from.\n ///\n // docs:start:expiration-timestamp\n pub fn set_expiration_timestamp(&mut self, expiration_timestamp: u64) {\n // docs:end:expiration-timestamp\n self.expiration_timestamp = std::cmp::min(self.expiration_timestamp, expiration_timestamp);\n }\n\n /// Asserts that a note has been created.\n ///\n /// This function will cause the transaction to fail unless the requested note exists. This is the preferred\n /// mechanism for performing this check, and the only one that works for pending notes.\n ///\n /// ## Pending Notes\n ///\n /// Both settled notes (created in prior transactions) and pending notes (created in the current transaction) will\n /// be considered by this function. Pending notes must have been created **before** this call is made for the check\n /// to pass.\n ///\n /// ## Historical Notes\n ///\n /// If you need to assert that a note existed _by some specific block in the past_, instead of simply proving that\n /// it exists by the current anchor block, use [`crate::history::note::assert_note_existed_by`] instead.\n ///\n /// ## Cost\n ///\n /// This uses up one of the call's kernel note hash read requests, which are limited. Like all kernel requests,\n /// proving time costs are only incurred when the total number of requests exceeds the kernel's capacity, requiring\n /// an additional invocation of the kernel reset circuit.\n pub fn assert_note_exists(&mut self, note_existence_request: NoteExistenceRequest) {\n // Note that the `note_hash_read_requests` array does not hold `NoteExistenceRequest` objects, but rather a\n // custom kernel type. We convert from the aztec-nr type into it.\n\n let note_hash = note_existence_request.note_hash();\n let contract_address = note_existence_request.maybe_contract_address().unwrap_or(AztecAddress::zero());\n\n let side_effect = Scoped::new(\n Counted::new(note_hash, self.next_counter()),\n contract_address,\n );\n\n self.note_hash_read_requests.push(side_effect);\n }\n\n /// Asserts that a nullifier has been emitted.\n ///\n /// This function will cause the transaction to fail unless the requested nullifier exists. This is the preferred\n /// mechanism for performing this check, and the only one that works for pending nullifiers.\n ///\n /// ## Pending Nullifiers\n ///\n /// Both settled nullifiers (emitted in prior transactions) and pending nullifiers (emitted in the current\n /// transaction) will be considered by this function. Pending nullifiers must have been emitted **before** this\n /// call is made for the check to pass.\n ///\n /// ## Historical Nullifiers\n ///\n /// If you need to assert that a nullifier existed _by some specific block in the past_, instead of simply proving\n /// that it exists by the current anchor block, use [`crate::history::nullifier::assert_nullifier_existed_by`]\n /// instead.\n ///\n /// ## Public vs Private\n ///\n /// In general, it is unsafe to check for nullifier non-existence in private, as that will not consider the\n /// possibility of the nullifier having been emitted in any transaction between the anchor block and the inclusion\n /// block. Private functions instead prove existence via this function and 'prove' non-existence by _emitting_ the\n /// nullifer, which would cause the transaction to fail if the nullifier existed.\n ///\n /// This is not the case in public functions, which do have access to the tip of the blockchain and so can reliably\n /// prove whether a nullifier exists or not via\n /// [`crate::context::public_context::PublicContext::nullifier_exists_unsafe`].\n ///\n /// ## Cost\n ///\n /// This uses up one of the call's kernel nullifier read requests, which are limited. Like all kernel requests,\n /// proving time costs are only incurred when the total number of requests exceeds the kernel's capacity, requiring\n /// an additional invocation of the kernel reset circuit.\n pub fn assert_nullifier_exists(&mut self, nullifier_existence_request: NullifierExistenceRequest) {\n let nullifier = nullifier_existence_request.nullifier();\n let contract_address = nullifier_existence_request.maybe_contract_address().unwrap_or(AztecAddress::zero());\n\n let request = Scoped::new(\n Counted::new(nullifier, self.next_counter()),\n contract_address,\n );\n\n self.nullifier_read_requests.push(request);\n }\n\n /// Requests the app-siloed nullifier hiding key (nhk_app) for the given (hashed) master nullifier public key\n /// (npk_m), from the user's PXE.\n ///\n /// Advanced function: Only needed if you're designing your own notes and/or nullifiers.\n ///\n /// Contracts are not allowed to compute nullifiers for other contracts, as that would let them read parts of their\n /// private state. Because of this, a contract is only given an \"app-siloed key\", which is constructed by\n /// hashing the user's master nullifier hiding key with the contract's address. However, because contracts cannot\n /// be trusted with a user's master nullifier hiding key (because we don't know which contracts are honest or\n /// malicious), the PXE refuses to provide any master secret keys to any app smart contract function. This means\n /// app functions are unable to prove that the derivation of an app-siloed nullifier hiding key has been computed\n /// correctly. Instead, an app function can request to the kernel (via `request_nhk_app`) that it validates the\n /// siloed derivation, since the kernel has been vetted to not leak any master secret keys.\n ///\n /// A common nullification scheme is to inject a nullifier hiding key into the preimage of a nullifier, to make the\n /// nullifier deterministic but random-looking. This function enables that flow.\n ///\n /// # Arguments\n /// * `npk_m_hash` - A hash of the master nullifier public key of the user whose PXE is executing this function.\n ///\n /// # Returns\n /// * The app-siloed nullifier hiding key that corresponds to the given `npk_m_hash`.\n ///\n pub fn request_nhk_app(&mut self, npk_m_hash: Field) -> Field {\n self.request_sk_app(npk_m_hash, NULLIFIER_INDEX)\n }\n\n /// Requests the app-siloed outgoing viewing secret key (ovsk_app) for the given (hashed) master outgoing\n /// viewing public key (ovpk_m), from the user's PXE.\n ///\n /// See `request_nhk_app` and `request_sk_app` for more info.\n ///\n /// The intention of the \"outgoing\" keypair is to provide a second secret key for all of a user's outgoing activity\n /// (i.e. for notes that a user creates, as opposed to notes that a user receives from others). The separation of\n /// incoming and outgoing data was a distinction made by zcash, with the intention of enabling a user to optionally\n /// share with a 3rd party a controlled view of only incoming or outgoing notes. Similar functionality of sharing\n /// select data can be achieved with offchain zero-knowledge proofs. It is up to an app developer whether they\n /// choose to make use of a user's outgoing keypair within their application logic, or instead simply use the same\n /// keypair (the address keypair (which is effectively the same as the \"incoming\" keypair)) for all incoming &\n /// outgoing messages to a user.\n ///\n /// Currently, all of the exposed encryption functions in aztec-nr ignore the outgoing viewing keys, and instead\n /// encrypt all note logs and event logs to a user's address public key.\n ///\n /// # Arguments\n /// * `ovpk_m_hash` - Hash of the outgoing viewing public key master\n ///\n /// # Returns\n /// * The application-specific outgoing viewing secret key\n ///\n pub fn request_ovsk_app(&mut self, ovpk_m_hash: Field) -> Field {\n self.request_sk_app(ovpk_m_hash, OUTGOING_INDEX)\n }\n\n /// Pushes a Key Validation Request to the kernel.\n ///\n /// Private functions are not allowed to see a user's master secret keys, because we do not trust them. They are\n /// instead given \"app-siloed\" secret keys with a claim that they relate to a master public key. They can then\n /// request validation of this claim, by making a \"key validation request\" to the protocol's kernel circuits (which\n /// _are_ allowed to see certain master secret keys).\n ///\n /// When a Key Validation Request tuple of (sk_app, Pk_m, app_address) is submitted to the kernel, it will perform\n /// the following derivations to validate the relationship between the claimed sk_app and the user's Pk_m:\n ///\n /// (sk_m) ----> * G ----> Pk_m\n /// | |\n /// v We use the kernel to prove this\n /// h(sk_m, app_address) | sk_app-Pk_m relationship, because app\n /// | circuits must not be trusted to see sk_m.\n /// v |\n /// sk_app - - - - - - - - -\n ///\n /// The function is named \"request_\" instead of \"get_\" to remind the user that a Key Validation Request will be\n /// emitted to the kernel.\n ///\n fn request_sk_app(&mut self, pk_m_hash: Field, key_index: Field) -> Field {\n let cached_request =\n self.last_key_validation_requests[key_index as u32].unwrap_or(KeyValidationRequest::empty());\n\n if cached_request.pk_m.hash() == pk_m_hash {\n // We get a match so the cached request is the latest one\n cached_request.sk_app\n } else {\n // We didn't get a match meaning the cached result is stale Typically we'd validate keys by showing that\n // they are the preimage of `pk_m_hash`, but that'd require the oracle returning the master secret keys,\n // which could cause malicious contracts to leak it or learn about secrets from other contracts. We\n // therefore silo secret keys, and rely on the private kernel to validate that we siloed secret key\n // corresponds to correct siloing of the master secret key that hashes to `pk_m_hash`.\n\n // Safety: Kernels verify that the key validation request is valid and below we verify that a request for\n // the correct public key has been received.\n let request = unsafe { get_key_validation_request(pk_m_hash, key_index) };\n assert(!request.pk_m.is_infinite, \"Infinite public key points are not allowed\");\n assert_eq(request.pk_m.hash(), pk_m_hash, \"Obtained invalid key validation request\");\n\n self.key_validation_requests_and_separators.push(\n KeyValidationRequestAndSeparator {\n request,\n key_type_domain_separator: public_key_domain_separators[key_index as u32],\n },\n );\n self.last_key_validation_requests[key_index as u32] = Option::some(request);\n request.sk_app\n }\n }\n\n /// Sends an \"L2 -> L1 message\" from this function (Aztec, L2) to a smart contract on Ethereum (L1). L1 contracts\n /// which are designed to send/receive messages to/from Aztec are called \"Portal Contracts\".\n ///\n /// Common use cases include withdrawals, cross-chain asset transfers, and triggering L1 actions based on L2 state\n /// changes.\n ///\n /// The message will be inserted into an Aztec \"Outbox\" contract on L1, when this transaction's block is proposed\n /// to L1. Sending the message will not result in any immediate state changes in the target portal contract. The\n /// message will need to be manually consumed from the Outbox through a separate Ethereum transaction: a user will\n /// need to call a function of the portal contract -- a function specifically designed to make a call to the Outbox\n /// to consume the message. The message will only be available for consumption once the _epoch_ proof has been\n /// submitted. Given that there are multiple Aztec blocks within an epoch, it might take some time for this epoch\n /// proof to be submitted -- especially if the block was near the start of an epoch.\n ///\n /// # Arguments\n /// * `recipient` - Ethereum address that will receive the message\n /// * `content` - Message content (32 bytes as a Field element). This content has a very\n /// specific layout. docs:start:context_message_portal\n pub fn message_portal(&mut self, recipient: EthAddress, content: Field) {\n let message = L2ToL1Message { recipient, content };\n self.l2_to_l1_msgs.push(message.count(self.next_counter()));\n }\n\n /// Consumes a message sent from Ethereum (L1) to Aztec (L2).\n ///\n /// Common use cases include token bridging, cross-chain governance, and triggering L2 actions based on L1 events.\n ///\n /// Use this function if you only want the message to ever be \"referred to\" once. Once consumed using this method,\n /// the message cannot be consumed again, because a nullifier is emitted. If your use case wants for the message to\n /// be read unlimited times, then you can always read any historic message from the L1-to-L2 messages tree;\n /// messages never technically get deleted from that tree.\n ///\n /// The message will first be inserted into an Aztec \"Inbox\" smart contract on L1. Sending the message will not\n /// result in any immediate state changes in the target L2 contract. The message will need to be manually consumed\n /// by the target contract through a separate Aztec transaction. The message will not be available for consumption\n /// immediately. Messages get copied over from the L1 Inbox to L2 by the next Proposer in batches. So you will need\n /// to wait until the messages are copied before you can consume them.\n ///\n /// # Arguments\n /// * `content` - The message content that was sent from L1\n /// * `secret` - Secret value used for message privacy (if needed)\n /// * `sender` - Ethereum address that sent the message\n /// * `leaf_index` - Index of the message in the L1-to-L2 message tree\n ///\n /// # Advanced\n /// Validates message existence in the L1-to-L2 message tree and nullifies the message to prevent\n /// double-consumption.\n pub fn consume_l1_to_l2_message(&mut self, content: Field, secret: Field, sender: EthAddress, leaf_index: Field) {\n let nullifier = process_l1_to_l2_message(\n self.anchor_block_header.state.l1_to_l2_message_tree.root,\n self.this_address(),\n sender,\n self.chain_id(),\n self.version(),\n content,\n secret,\n leaf_index,\n );\n\n // Push nullifier (and the \"commitment\" corresponding to this can be \"empty\")\n self.push_nullifier(nullifier)\n }\n\n /// Emits a private log (an array of Fields) that will be published to an Ethereum blob.\n ///\n /// Private logs are intended for the broadcasting of ciphertexts: that is, encrypted events or encrypted note\n /// contents. Since the data in the logs is meant to be _encrypted_, private_logs are broadcast to publicly-visible\n /// Ethereum blobs. The intended recipients of such encrypted messages can then discover and decrypt these\n /// encrypted logs using their viewing secret key. (See `../messages/discovery` for more details).\n ///\n /// Important note: This function DOES NOT _do_ any encryption of the input `log` fields. This function blindly\n /// publishes whatever input `log` data is fed into it, so the caller of this function should have already\n /// performed the encryption, and the `log` should be the result of that encryption.\n ///\n /// The protocol does not dictate what encryption scheme should be used: a smart contract developer can choose\n /// whatever encryption scheme they like. Aztec-nr includes some off-the-shelf encryption libraries that developers\n /// might wish to use, for convenience. These libraries not only encrypt a plaintext (to produce a ciphertext);\n /// they also prepend the ciphertext with a `tag` and `ephemeral public key` for easier message discovery. This is\n /// a very dense topic, and we will be writing more libraries and docs soon.\n ///\n /// > Currently, AES128 CBC encryption is the main scheme included in > aztec.nr. > We are currently making\n /// significant changes to the interfaces of the > encryption library.\n ///\n /// In some niche use cases, an app might be tempted to publish _un-encrypted_ data via a private log, because\n /// _public logs_ are not available to private functions. Be warned that emitting public data via private logs is\n /// strongly discouraged, and is considered a \"privacy anti-pattern\", because it reveals identifiable information\n /// about _which_ function has been executed. A tx which leaks such information does not contribute to the privacy\n /// set of the network.\n ///\n /// * Unlike `emit_raw_note_log_unsafe`, this log is not tied to any specific note\n ///\n /// # Arguments\n /// * `tag` - A tag placed at `fields[0]` of the emitted log. Used by recipients and nodes to identify and\n /// filter for relevant logs without scanning all of them.\n /// * `log` - The log data that will be publicly broadcast (so make sure it's already been encrypted before you\n /// call this function). Private logs are bounded in size (`PRIVATE_LOG_CIPHERTEXT_LEN`), to encourage all logs\n /// from all smart contracts look identical.\n /// * `length` - The actual length of `log` (measured in number of Fields). Although the input log has a max\n /// size of `PRIVATE_LOG_CIPHERTEXT_LEN`, the latter values of the array might all be 0's for small logs. This\n /// `length` should reflect the trimmed length of the array. The protocol's kernel circuits can then append\n /// random fields as \"padding\" after the `length`, so that the logs of this smart contract look\n /// indistinguishable from (the same length as) the logs of all other applications. It's up to wallets how much\n /// padding to apply, so ideally all wallets should agree on standards for this.\n ///\n /// ## Safety\n ///\n /// The `tag` should be domain-separated (e.g. via [`crate::protocol::hash::compute_log_tag`]) to prevent\n /// collisions between logs from different sources. Without domain separation, two unrelated log types that\n /// happen to share a raw tag value become indistinguishable. Prefer the higher-level APIs\n /// ([`crate::messages::message_delivery::MessageDelivery`] for messages, `self.emit(event)` for events) which\n /// handle tagging automatically.\n pub fn emit_private_log_unsafe(&mut self, tag: Field, log: [Field; PRIVATE_LOG_CIPHERTEXT_LEN], length: u32) {\n let counter = self.next_counter();\n let full_log = [tag].concat(log);\n self.private_logs.push(PrivateLogData { log: PrivateLog::new(full_log, length + 1), note_hash_counter: 0 }\n .count(counter));\n }\n\n // TODO: rename.\n /// Emits a private log that is explicitly tied to a newly-emitted note_hash, to convey to the kernel: \"this log\n /// relates to this note\".\n ///\n /// This linkage is important in case the note gets squashed (due to being read later in this same tx), since we\n /// can then squash the log as well.\n ///\n /// See `emit_private_log_unsafe` for more info about private log emission.\n ///\n /// # Arguments\n /// * `tag` - A tag placed at `fields[0]`. See `emit_private_log_unsafe`.\n /// * `log` - The log data as an array of Field elements\n /// * `length` - The actual length of the `log` (measured in number of Fields).\n /// * `note_hash_counter` - The side-effect counter that was assigned to the new note_hash when it was pushed to\n /// this `PrivateContext`.\n ///\n /// Important: If your application logic requires the log to always be emitted regardless of note squashing,\n /// consider using `emit_private_log_unsafe` instead, or emitting additional events.\n ///\n /// ## Safety\n ///\n /// Same as [`PrivateContext::emit_private_log_unsafe`]: the `tag` should be domain-separated.\n pub fn emit_raw_note_log_unsafe(\n &mut self,\n tag: Field,\n log: [Field; PRIVATE_LOG_CIPHERTEXT_LEN],\n length: u32,\n note_hash_counter: u32,\n ) {\n let counter = self.next_counter();\n let full_log = [tag].concat(log);\n let private_log = PrivateLogData { log: PrivateLog::new(full_log, length + 1), note_hash_counter };\n self.private_logs.push(private_log.count(counter));\n }\n\n /// Emits large data blobs.\n ///\n /// This reuses the Contract Class Log channel to emit blobs of up to [`CONTRACT_CLASS_LOG_SIZE_IN_FIELDS`].\n ///\n /// ## Privacy\n ///\n /// The address of the contract emitting these blobs is revelead.\n pub fn emit_contract_class_log<let N: u32>(&mut self, log: [Field; N]) {\n let contract_address = self.this_address();\n let counter = self.next_counter();\n\n let log_to_emit: [Field; CONTRACT_CLASS_LOG_SIZE_IN_FIELDS] =\n log.concat([0; CONTRACT_CLASS_LOG_SIZE_IN_FIELDS - N]);\n // Note: the length is not always N, it is the number of fields we want to broadcast, omitting trailing zeros\n // to save blob space.\n // Safety: The below length is constrained in the base rollup, which will make sure that all the fields beyond\n // length are zero. However, it won't be able to check that we didn't add extra padding (trailing zeroes) or\n // that we cut trailing zeroes from the end.\n let length = unsafe { trimmed_array_length_hint(log) };\n // We hash the entire padded log to ensure a user cannot pass a shorter length and so emit incorrect shorter\n // bytecode.\n let log_hash = compute_contract_class_log_hash(log_to_emit);\n // Safety: the below only exists to broadcast the raw log, so we can provide it to the base rollup later to be\n // constrained.\n unsafe {\n notify_created_contract_class_log(contract_address, log_to_emit, length, counter);\n }\n\n self.contract_class_logs_hashes.push(LogHash { value: log_hash, length: length }.count(counter));\n }\n\n /// Calls a private function on another contract (or the same contract).\n ///\n /// Very low-level function.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the called function\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n /// This enables contracts to interact with each other while maintaining privacy. This \"composability\" of private\n /// contract functions is a key feature of the Aztec network.\n ///\n /// If a user's transaction includes multiple private function calls, then by the design of Aztec, the following\n /// information will remain private[1]:\n /// - The function selectors and contract addresses of all private function calls will remain private, so an\n /// observer of the public mempool will not be able to look at a tx and deduce which private functions have been\n /// executed.\n /// - The arguments and return values of all private function calls will remain private.\n /// - The person who initiated the tx will remain private.\n /// - The notes and nullifiers and private logs that are emitted by all private function calls will (if designed\n /// well) not leak any user secrets, nor leak which functions have been executed.\n ///\n /// [1] Caveats: Some of these privacy guarantees depend on how app developers design their smart contracts. Some\n /// actions _can_ leak information, such as:\n /// - Calling an internal public function.\n /// - Calling a public function and not setting msg_sender to Option::none (feature not built yet - see github).\n /// - Calling any public function will always leak details about the nature of the transaction, so devs should be\n /// careful in their contract designs. If it can be done in a private function, then that will give the best\n /// privacy.\n /// - Not padding the side-effects of a tx to some standardized, uniform size. The kernel circuits can take hints\n /// to pad side-effects, so a wallet should be able to request for a particular amount of padding. Wallets should\n /// ideally agree on some standard.\n /// - Padding should include:\n /// - Padding the lengths of note & nullifier arrays\n /// - Padding private logs with random fields, up to some standardized size. See also:\n /// https://docs.aztec.network/developers/resources/considerations/privacy_considerations\n ///\n /// # Advanced\n /// * The call is added to the private call stack and executed by kernel circuits after this function completes\n /// * The called function can modify its own contract's private state\n /// * Side effects from the called function are included in this transaction\n /// * The call inherits the current transaction's context and gas limits\n ///\n pub fn call_private_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n ) -> ReturnsHash {\n let args_hash = hash_args(args);\n execution_cache::store(args, args_hash);\n self.call_private_function_with_args_hash(contract_address, function_selector, args_hash, false)\n }\n\n /// Makes a read-only call to a private function on another contract.\n ///\n /// This is similar to Solidity's `staticcall`. The called function cannot modify state, emit L2->L2 messages, nor\n /// emit events. Any nested calls are constrained to also be staticcalls.\n ///\n /// See `call_private_function` for more general info on private function calls.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract to call\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the called function\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn static_call_private_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n ) -> ReturnsHash {\n let args_hash = hash_args(args);\n execution_cache::store(args, args_hash);\n self.call_private_function_with_args_hash(contract_address, function_selector, args_hash, true)\n }\n\n /// Calls a private function that takes no arguments.\n ///\n /// This is a convenience function for calling private functions that don't require any input parameters. It's\n /// equivalent to `call_private_function` but slightly more efficient to use when no arguments are needed.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn call_private_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n ) -> ReturnsHash {\n self.call_private_function_with_args_hash(contract_address, function_selector, 0, false)\n }\n\n /// Makes a read-only call to a private function which takes no arguments.\n ///\n /// This combines the optimisation of `call_private_function_no_args` with the safety of\n /// `static_call_private_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn static_call_private_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n ) -> ReturnsHash {\n self.call_private_function_with_args_hash(contract_address, function_selector, 0, true)\n }\n\n /// Low-level private function call.\n ///\n /// This is the underlying implementation used by all other private function call methods. Instead of taking raw\n /// arguments, it accepts a hash of the arguments.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args_hash` - Pre-computed hash of the function arguments\n /// * `is_static_call` - Whether this should be a read-only call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values\n ///\n pub fn call_private_function_with_args_hash(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args_hash: Field,\n is_static_call: bool,\n ) -> ReturnsHash {\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n let start_side_effect_counter = self.side_effect_counter;\n\n // Safety: The oracle simulates the private call and returns the value of the side effects counter after\n // execution of the call (which means that end_side_effect_counter - start_side_effect_counter is the number of\n // side effects that took place), along with the hash of the return values. We validate these by requesting a\n // private kernel iteration in which the return values are constrained to hash to `returns_hash` and the side\n // effects counter to increment from start to end.\n let (end_side_effect_counter, returns_hash) = unsafe {\n call_private_function_internal(\n contract_address,\n function_selector,\n args_hash,\n start_side_effect_counter,\n is_static_call,\n )\n };\n\n self.private_call_requests.push(\n PrivateCallRequest {\n call_context: CallContext {\n msg_sender: self.this_address(),\n contract_address,\n function_selector,\n is_static_call,\n },\n args_hash,\n returns_hash,\n start_side_effect_counter,\n end_side_effect_counter,\n },\n );\n\n // TODO (fees) figure out why this crashes the prover and enable it we need this in order to pay fees inside\n // child call contexts assert(\n // (item.public_inputs.min_revertible_side_effect_counter == 0 as u32)\n // | (item.public_inputs.min_revertible_side_effect_counter\n // > self.min_revertible_side_effect_counter)\n // ); if item.public_inputs.min_revertible_side_effect_counter\n // > self.min_revertible_side_effect_counter { self.min_revertible_side_effect_counter =\n // item.public_inputs.min_revertible_side_effect_counter; }\n self.side_effect_counter = end_side_effect_counter + 1; // TODO: call `next_counter`\n // instead, for consistency\n ReturnsHash::new(returns_hash)\n }\n\n /// Enqueues a call to a public function to be executed later.\n ///\n /// Unlike private functions which execute immediately on the user's device, public function calls are \"enqueued\"\n /// and executed some time later by a block proposer.\n ///\n /// This means a public function cannot return any values back to a private function, because by the time the\n /// public function is being executed, the private function which called it has already completed execution. (In\n /// fact, the private function has been executed and proven, along with all other private function calls of the\n /// user's tx. A single proof of the tx has been submitted to the Aztec network, and some time later a proposer has\n /// picked the tx up from the mempool and begun executing all of the enqueued public functions).\n ///\n /// # Privacy warning Enqueueing a public function call is an inherently leaky action. Many interesting applications will require some interaction with public state, but smart contract developers should try to use public function calls sparingly, and carefully. _Internal_ public function calls are especially leaky, because they completely leak which private contract made the call. See also: https://docs.aztec.network/developers/resources/considerations/privacy_considerations\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the public function\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Enqueues a read-only call to a public function.\n ///\n /// This is similar to Solidity's `staticcall`. The called function cannot modify state or emit events. Any nested\n /// calls are constrained to also be staticcalls.\n ///\n /// See also `call_public_function` for more important information about making private -> public function calls.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the public function\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn static_call_public_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, true, hide_msg_sender)\n }\n\n /// Enqueues a call to a public function that takes no arguments.\n ///\n /// This is an optimisation for calling public functions that don't take any input parameters. It's otherwise\n /// equivalent to `call_public_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n hide_msg_sender: bool,\n ) {\n let calldata_hash = hash_calldata_array([function_selector.to_field()]);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Enqueues a read-only call to a public function with no arguments.\n ///\n /// This combines the optimisation of `call_public_function_no_args` with the safety of\n /// `static_call_public_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn static_call_public_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n hide_msg_sender: bool,\n ) {\n let calldata_hash = hash_calldata_array([function_selector.to_field()]);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, true, hide_msg_sender)\n }\n\n /// Low-level public function call.\n ///\n /// This is the underlying implementation used by all other public function call methods. Instead of taking raw\n /// arguments, it accepts a hash of the arguments.\n ///\n /// Advanced function: Most developers should use `call_public_function` or `static_call_public_function` instead.\n /// This function is exposed for performance optimization and advanced use cases.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `calldata_hash` - Hash of the function calldata\n /// * `is_static_call` - Whether this should be a read-only call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function_with_calldata_hash(\n &mut self,\n contract_address: AztecAddress,\n calldata_hash: Field,\n is_static_call: bool,\n hide_msg_sender: bool,\n ) {\n let counter = self.next_counter();\n\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n\n assert_valid_public_call_data(calldata_hash);\n\n let msg_sender = if hide_msg_sender {\n NULL_MSG_SENDER_CONTRACT_ADDRESS\n } else {\n self.this_address()\n };\n\n let call_request = PublicCallRequest { msg_sender, contract_address, is_static_call, calldata_hash };\n\n self.public_call_requests.push(Counted::new(call_request, counter));\n }\n\n /// Enqueues a public function call, and designates it to be the teardown function for this tx. Only one teardown\n /// function call can be made by a tx.\n ///\n /// Niche function: Only wallet developers and paymaster contract developers (aka Fee-payment contracts) will need\n /// to make use of this function.\n ///\n /// Aztec supports a three-phase execution model: setup, app logic, teardown. The phases exist to enable a fee\n /// payer to take on the risk of paying a transaction fee, safe in the knowledge that their payment (in whatever\n /// token or method the user chooses) will succeed, regardless of whether the app logic will succeed. The \"setup\"\n /// phase ensures the fee payer has sufficient balance to pay the proposer their fees. The teardown phase is\n /// primarily intended to: calculate exactly how much the user owes, based on gas consumption, and refund the user\n /// any change.\n ///\n /// Note: in some cases, the cost of refunding the user (i.e. DA costs of tx side-effects) might exceed the refund\n /// amount. For app logic with fairly stable and predictable gas consumption, a material refund amount is unlikely.\n /// For app logic with unpredictable gas consumption, a refund might be important to the user (e.g. if a hefty\n /// function reverts very early). Wallet/FPC/Paymaster developers should be mindful of this.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the teardown function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - An array of fields to pass to the function.\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n pub fn set_public_teardown_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.set_public_teardown_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Low-level function to set the public teardown function.\n ///\n /// This is the underlying implementation for setting the teardown function call that will execute at the end of\n /// the transaction. Instead of taking raw arguments, it accepts a hash of the arguments.\n ///\n /// Advanced function: Most developers should use `set_public_teardown_function` instead.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the teardown function\n /// * `calldata_hash` - Hash of the function calldata\n /// * `is_static_call` - Whether this should be a read-only call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn set_public_teardown_function_with_calldata_hash(\n &mut self,\n contract_address: AztecAddress,\n calldata_hash: Field,\n is_static_call: bool,\n hide_msg_sender: bool,\n ) {\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n\n assert_valid_public_call_data(calldata_hash);\n\n let msg_sender = if hide_msg_sender {\n NULL_MSG_SENDER_CONTRACT_ADDRESS\n } else {\n self.this_address()\n };\n\n self.public_teardown_call_request =\n PublicCallRequest { msg_sender, contract_address, is_static_call, calldata_hash };\n }\n\n /// Increments the side-effect counter.\n ///\n /// Very low-level function.\n ///\n /// # Advanced\n ///\n /// Every side-effect of a private function is given a \"side-effect counter\", based on when it is created. This\n /// PrivateContext is in charge of assigning the counters.\n ///\n /// The reason we have side-effect counters is complicated. Consider this illustrative pseudocode of inter-contract\n /// function calls:\n /// ```\n /// contract A {\n /// let x = 5; // pseudocode for storage var x.\n /// fn a1 {\n /// read x; // value: 5, counter: 1.\n /// x = x + 1;\n /// write x; // value: 6, counter: 2.\n ///\n /// B.b(); // start_counter: 2, end_counter: 4\n ///\n /// read x; // value: 36, counter: 5.\n /// x = x + 1;\n /// write x; // value: 37, counter: 6.\n /// }\n ///\n /// fn a2 {\n /// read x; // value: 6, counter: 3.\n /// x = x * x;\n /// write x; // value: 36, counter: 4.\n /// }\n /// }\n ///\n /// contract B {\n /// fn b() {\n /// A.a2();\n /// }\n /// }\n /// ```\n ///\n /// Suppose a1 is the first function called. The comments show the execution counter of each side-effect, and what\n /// the new value of `x` is.\n ///\n /// These (private) functions are processed by Aztec's kernel circuits in an order that is different from execution\n /// order: All of A.a1 is proven before B.b is proven, before A.a2 is proven. So when we're in the 2nd execution\n /// frame of A.a1 (after the call to B.b), the circuit needs to justify why x went from being `6` to `36`. But the\n /// circuit doesn't know why, and given the order of proving, the kernel hasn't _seen_ a value of 36 get written\n /// yet. The kernel needs to track big arrays of all side-effects of all private functions in a tx. Then, as it\n /// recurses and processes B.b(), it will eventually see a value of 36 get written.\n ///\n /// Suppose side-effect counters weren't exposed: The kernel would only see this ordering (in order of proof\n /// verification): [ A.a1.read, A.a1.write, A.a1.read, A.a1.write, A.a2.read, A.a2.write ]\n /// [ 5, 6, 36, 37, 6, 36 ]\n /// The kernel wouldn't know _when_ B.b() was called within A.a1(), because it can't see what's going on within an\n /// app circuit. So the kernel wouldn't know that the ordering of reads and writes should actually be: [ A.a1.read,\n /// A.a1.write, A.a2.read, A.a2.write, A.a1.read, A.a1.write ]\n /// [ 5, 6, 6, 36, 36, 37 ]\n ///\n /// And so, we introduced side-effect counters: every private function must assign side-effect counters alongside\n /// every side-effect that it emits, and also expose to the kernel the counters that it started and ended with.\n /// This gives the kernel enough information to arrange all side-effects in the correct order. It can then catch\n /// (for example) if a function tries to read state before it has been written (e.g. if A.a2() maliciously tried to\n /// read a value of x=37) (e.g. if A.a1() maliciously tried to read x=6).\n ///\n /// If a malicious app contract _lies_ and does not count correctly:\n /// - It cannot lie about its start and end counters because the kernel will catch this.\n /// - It _could_ lie about its intermediate counters:\n /// - 1. It could not increment its side-effects correctly\n /// - 2. It could label its side-effects with counters outside of its start and end counters' range. The kernel\n /// will catch 2. The kernel will not catch 1., but this would only cause corruption to the private state of the\n /// malicious contract, and not any other contracts (because a contract can only modify its own state). If a \"good\"\n /// contract is given _read access_ to a maliciously-counting contract (via an external getter function, or by\n /// reading historic state from the archive tree directly), and they then make state changes to their _own_ state\n /// accordingly, that could be dangerous. Developers should be mindful not to trust the claimed innards of external\n /// contracts unless they have audited/vetted the contracts including vetting the side-effect counter\n /// incrementation. This is a similar paradigm to Ethereum smart contract development: you must vet external\n /// contracts that your contract relies upon, and you must not make any presumptions about their claimed behaviour.\n /// (Hopefully if a contract imports a version of aztec-nr, we will get contract verification tooling that can\n /// validate the authenticity of the imported aztec-nr package, and hence infer that the side- effect counting will\n /// be correct, without having to re-audit such logic for every contract).\n ///\n fn next_counter(&mut self) -> u32 {\n let counter = self.side_effect_counter;\n self.side_effect_counter += 1;\n counter\n }\n}\n\nimpl Empty for PrivateContext {\n fn empty() -> Self {\n PrivateContext {\n inputs: PrivateContextInputs::empty(),\n side_effect_counter: 0 as u32,\n min_revertible_side_effect_counter: 0 as u32,\n is_fee_payer: false,\n args_hash: 0,\n return_hash: 0,\n expiration_timestamp: 0,\n note_hash_read_requests: BoundedVec::new(),\n nullifier_read_requests: BoundedVec::new(),\n key_validation_requests_and_separators: BoundedVec::new(),\n note_hashes: BoundedVec::new(),\n nullifiers: BoundedVec::new(),\n private_call_requests: BoundedVec::new(),\n public_call_requests: BoundedVec::new(),\n public_teardown_call_request: PublicCallRequest::empty(),\n l2_to_l1_msgs: BoundedVec::new(),\n anchor_block_header: BlockHeader::empty(),\n private_logs: BoundedVec::new(),\n contract_class_logs_hashes: BoundedVec::new(),\n last_key_validation_requests: [Option::none(); NUM_KEY_TYPES],\n expected_non_revertible_side_effect_counter: 0,\n expected_revertible_side_effect_counter: 0,\n }\n }\n}\n"
7174
+ "source": "use crate::{\n context::{inputs::PrivateContextInputs, NoteExistenceRequest, NullifierExistenceRequest, ReturnsHash},\n hash::{hash_args, hash_calldata_array},\n keys::constants::{NULLIFIER_INDEX, NUM_KEY_TYPES, OUTGOING_INDEX, public_key_domain_separators},\n messaging::process_l1_to_l2_message,\n oracle::{\n block_header::get_block_header_at,\n call_private_function::call_private_function_internal,\n execution_cache,\n key_validation_request::get_key_validation_request,\n logs::notify_created_contract_class_log,\n notes::notify_nullified_note,\n nullifiers::notify_created_nullifier,\n public_call::assert_valid_public_call_data,\n tx_phase::{is_execution_in_revertible_phase, notify_revertible_phase_start},\n },\n};\nuse crate::logging::aztecnr_trace_log_format;\nuse crate::protocol::{\n abis::{\n block_header::BlockHeader,\n call_context::CallContext,\n function_selector::FunctionSelector,\n gas_settings::GasSettings,\n log_hash::LogHash,\n note_hash::NoteHash,\n nullifier::Nullifier,\n private_call_request::PrivateCallRequest,\n private_circuit_public_inputs::PrivateCircuitPublicInputs,\n private_log::{PrivateLog, PrivateLogData},\n public_call_request::PublicCallRequest,\n validation_requests::{KeyValidationRequest, KeyValidationRequestAndSeparator},\n },\n address::{AztecAddress, EthAddress},\n constants::{\n CONTRACT_CLASS_LOG_SIZE_IN_FIELDS, MAX_CONTRACT_CLASS_LOGS_PER_CALL, MAX_ENQUEUED_CALLS_PER_CALL,\n MAX_KEY_VALIDATION_REQUESTS_PER_CALL, MAX_L2_TO_L1_MSGS_PER_CALL, MAX_NOTE_HASH_READ_REQUESTS_PER_CALL,\n MAX_NOTE_HASHES_PER_CALL, MAX_NULLIFIER_READ_REQUESTS_PER_CALL, MAX_NULLIFIERS_PER_CALL,\n MAX_PRIVATE_CALL_STACK_LENGTH_PER_CALL, MAX_PRIVATE_LOGS_PER_CALL, MAX_TX_LIFETIME,\n NULL_MSG_SENDER_CONTRACT_ADDRESS, PRIVATE_LOG_CIPHERTEXT_LEN,\n },\n hash::compute_contract_class_log_hash,\n messaging::l2_to_l1_message::L2ToL1Message,\n side_effect::{Counted, scoped::Scoped},\n traits::{Empty, Hash, ToField},\n utils::arrays::{ClaimedLengthArray, trimmed_array_length_hint},\n};\n\n/// # PrivateContext\n///\n/// The **main interface** between an #[external(\"private\")] function and the Aztec blockchain.\n///\n/// An instance of the PrivateContext is initialized automatically at the outset of every private function, within the\n/// #[external(\"private\")] macro, so you'll never need to consciously instantiate this yourself.\n///\n/// The instance is always named `context`, and it is always be available within the body of every\n/// #[external(\"private\")] function in your smart contract.\n///\n/// > For those used to \"vanilla\" Noir, it might be jarring to have access to > `context` without seeing a declaration\n/// `let context = PrivateContext::new(...)` > within the body of your function. This is just a consequence of using >\n/// macros to tidy-up verbose boilerplate. You can use `nargo expand` to > expand all macros, if you dare.\n///\n/// Typical usage for a smart contract developer will be to call getter methods of the PrivateContext.\n///\n/// _Pushing_ data and requests to the context is mostly handled within aztec-nr's own functions, so typically a smart\n/// contract developer won't need to call any setter methods directly.\n///\n/// > Advanced users might occasionally wish to push data to the context > directly for lower-level control. If you\n/// find yourself doing this, please > open an issue on GitHub to describe your use case: it might be that > new\n/// functionality should be added to aztec-nr.\n///\n/// ## Responsibilities\n/// - Exposes contextual data to a private function:\n/// - Data relating to how this private function was called.\n/// - msg_sender\n/// - this_address - (the contract address of the private function being executed)\n/// - See `CallContext` for more data.\n/// - Data relating to the transaction in which this private function is being executed.\n/// - chain_id\n/// - version\n/// - gas_settings\n/// - Provides state access:\n/// - Access to the \"Anchor block\" header. Recall, a private function cannot read from the \"current\" block header, but\n/// must read from some historical block header, because as soon as private function execution begins (asynchronously,\n/// on a user's device), the public state of the chain (the \"current state\") will have progressed forward. We call this\n/// reference the \"Anchor block\". See `BlockHeader`.\n/// - Enables consumption of L1->L2 messages.\n/// - Enables calls to functions of other smart contracts:\n/// - Private function calls\n/// - Enqueueing of public function call requests (Since public functions are executed at a later time, by a block\n/// proposer, we say they are \"enqueued\").\n/// - Writes data to the blockchain:\n/// - New notes\n/// - New nullifiers\n/// - Private logs (for sending encrypted note contents or encrypted events)\n/// - New L2->L1 messages.\n/// - Provides args to the private function (handled by the #[external(\"private\")] macro).\n/// - Returns the return values of this private function (handled by the\n/// #[external(\"private\")] macro).\n/// - Makes Key Validation Requests.\n/// - Private functions are not allowed to see master secret keys, because we do not trust them. They are instead given\n/// \"app-siloed\" secret keys with a claim that they relate to a master public key. They can then request validation of\n/// this claim, by making a \"key validation request\" to the protocol's kernel circuits (which _are_ allowed to see\n/// certain master secret keys).\n///\n/// ## Advanced Responsibilities\n///\n/// - Ultimately, the PrivateContext is responsible for constructing the PrivateCircuitPublicInputs of the private\n/// function being executed. All private functions on Aztec must have public inputs which adhere to the rigid layout of\n/// the PrivateCircuitPublicInputs, in order to be compatible with the protocol's kernel circuits. A well-known\n/// misnomer:\n/// - \"public inputs\" contain both inputs and outputs of this function.\n/// - By \"outputs\" we mean a lot more side-effects than just the \"return values\" of the function.\n/// - Most of the so-called \"public inputs\" are kept _private_, and never leak to the outside world, because they are\n/// 'swallowed' by the protocol's kernel circuits before the tx is sent to the network. Only the following are exposed\n/// to the outside world:\n/// - New note_hashes\n/// - New nullifiers\n/// - New private logs\n/// - New L2->L1 messages\n/// - New enqueued public function call requests All the above-listed arrays of side-effects can be padded by the\n/// user's wallet (through instructions to the kernel circuits, via the PXE) to obscure their true lengths.\n///\n/// ## Syntax Justification\n///\n/// Both user-defined functions _and_ most functions in aztec-nr need access to the PrivateContext instance to\n/// read/write data. This is why you'll see the arguably-ugly pervasiveness of the \"context\" throughout your smart\n/// contract and the aztec-nr library. For example, `&mut context` is prevalent. In some languages, you can access and\n/// mutate a global variable (such as a PrivateContext instance) from a function without polluting the function's\n/// parameters. With Noir, a function must explicitly pass control of a mutable variable to another function, by\n/// reference. Since many functions in aztec-nr need to be able to push new data to the PrivateContext, they need to be\n/// handed a mutable reference _to_ the context as a parameter. For example, `Context` is prevalent as a generic\n/// parameter, to give better type safety at compile time. Many `aztec-nr` functions don't make sense if they're called\n/// in a particular runtime (private, public or utility), and so are intentionally only implemented over certain\n/// [Private|Public|Utility]Context structs. This gives smart contract developers a much faster feedback loop if\n/// they're making a mistake, as an error will be thrown by the LSP or when they compile their contract.\n///\n#[derive(Eq)]\npub struct PrivateContext {\n // docs:start:private-context\n pub inputs: PrivateContextInputs,\n pub side_effect_counter: u32,\n\n pub min_revertible_side_effect_counter: u32,\n pub is_fee_payer: bool,\n\n pub args_hash: Field,\n pub return_hash: Field,\n\n pub expiration_timestamp: u64,\n\n pub(crate) note_hash_read_requests: BoundedVec<Scoped<Counted<Field>>, MAX_NOTE_HASH_READ_REQUESTS_PER_CALL>,\n pub(crate) nullifier_read_requests: BoundedVec<Scoped<Counted<Field>>, MAX_NULLIFIER_READ_REQUESTS_PER_CALL>,\n key_validation_requests_and_separators: BoundedVec<KeyValidationRequestAndSeparator, MAX_KEY_VALIDATION_REQUESTS_PER_CALL>,\n\n pub note_hashes: BoundedVec<Counted<NoteHash>, MAX_NOTE_HASHES_PER_CALL>,\n pub nullifiers: BoundedVec<Counted<Nullifier>, MAX_NULLIFIERS_PER_CALL>,\n\n pub private_call_requests: BoundedVec<PrivateCallRequest, MAX_PRIVATE_CALL_STACK_LENGTH_PER_CALL>,\n pub public_call_requests: BoundedVec<Counted<PublicCallRequest>, MAX_ENQUEUED_CALLS_PER_CALL>,\n pub public_teardown_call_request: PublicCallRequest,\n pub l2_to_l1_msgs: BoundedVec<Counted<L2ToL1Message>, MAX_L2_TO_L1_MSGS_PER_CALL>,\n // docs:end:private-context\n\n // Header of a block whose state is used during private execution (not the block the transaction is included in).\n pub anchor_block_header: BlockHeader,\n\n pub private_logs: BoundedVec<Counted<PrivateLogData>, MAX_PRIVATE_LOGS_PER_CALL>,\n pub contract_class_logs_hashes: BoundedVec<Counted<LogHash>, MAX_CONTRACT_CLASS_LOGS_PER_CALL>,\n\n // Contains the last key validation request for each key type. This is used to cache the last request and avoid\n // fetching the same request multiple times. The index of the array corresponds to the key type (0 nullifier, 1\n // incoming, 2 outgoing, 3 tagging).\n pub last_key_validation_requests: [Option<KeyValidationRequest>; NUM_KEY_TYPES],\n\n pub expected_non_revertible_side_effect_counter: u32,\n pub expected_revertible_side_effect_counter: u32,\n}\n\nimpl PrivateContext {\n pub fn new(inputs: PrivateContextInputs, args_hash: Field) -> PrivateContext {\n PrivateContext {\n inputs,\n side_effect_counter: inputs.start_side_effect_counter + 1,\n min_revertible_side_effect_counter: 0,\n is_fee_payer: false,\n args_hash,\n return_hash: 0,\n expiration_timestamp: inputs.anchor_block_header.timestamp() + MAX_TX_LIFETIME,\n note_hash_read_requests: BoundedVec::new(),\n nullifier_read_requests: BoundedVec::new(),\n key_validation_requests_and_separators: BoundedVec::new(),\n note_hashes: BoundedVec::new(),\n nullifiers: BoundedVec::new(),\n anchor_block_header: inputs.anchor_block_header,\n private_call_requests: BoundedVec::new(),\n public_call_requests: BoundedVec::new(),\n public_teardown_call_request: PublicCallRequest::empty(),\n l2_to_l1_msgs: BoundedVec::new(),\n private_logs: BoundedVec::new(),\n contract_class_logs_hashes: BoundedVec::new(),\n last_key_validation_requests: [Option::none(); NUM_KEY_TYPES],\n expected_non_revertible_side_effect_counter: 0,\n expected_revertible_side_effect_counter: 0,\n }\n }\n\n /// Returns the contract address that initiated this function call.\n ///\n /// This is similar to `msg.sender` in Solidity (hence the name).\n ///\n /// Important Note: Since Aztec doesn't have a concept of an EoA (Externally-owned Account), the msg_sender is\n /// \"none\" for the first function call of every transaction. The first function call of a tx is likely to be a call\n /// to the user's account contract, so this quirk will most often be handled by account contract developers.\n ///\n /// # Returns\n /// * `Option<AztecAddress>` - The address of the smart contract that called this function (be it an app contract\n /// or a user's account contract). Returns `Option<AztecAddress>::none` for the first function call of the tx. No\n /// other _private_ function calls in the tx will have a `none` msg_sender, but _public_ function calls might (see\n /// the PublicContext).\n pub fn maybe_msg_sender(self) -> Option<AztecAddress> {\n let maybe_msg_sender = self.inputs.call_context.msg_sender;\n if maybe_msg_sender == NULL_MSG_SENDER_CONTRACT_ADDRESS {\n Option::none()\n } else {\n Option::some(maybe_msg_sender)\n }\n }\n\n /// Returns the contract address of the current function being executed.\n ///\n /// This is equivalent to `address(this)` in Solidity (hence the name). Use this to identify the current contract's\n /// address, commonly needed for access control or when interacting with other contracts.\n ///\n /// # Returns\n /// * `AztecAddress` - The contract address of the current function being executed.\n ///\n pub fn this_address(self) -> AztecAddress {\n self.inputs.call_context.contract_address\n }\n\n /// Returns the chain ID of the current network.\n ///\n /// This is similar to `block.chainid` in Solidity. Returns the unique identifier for the blockchain network this\n /// transaction is executing on.\n ///\n /// Helps prevent cross-chain replay attacks. Useful if implementing multi-chain contract logic.\n ///\n /// # Returns\n /// * `Field` - The chain ID as a field element\n ///\n pub fn chain_id(self) -> Field {\n self.inputs.tx_context.chain_id\n }\n\n /// Returns the Aztec protocol version that this transaction is executing under. Different versions may have\n /// different rules, opcodes, or cryptographic primitives.\n ///\n /// This is similar to how Ethereum has different EVM versions.\n ///\n /// Useful for forward/backward compatibility checks\n ///\n /// Not to be confused with contract versions; this is the protocol version.\n ///\n /// # Returns\n /// * `Field` - The protocol version as a field element\n ///\n pub fn version(self) -> Field {\n self.inputs.tx_context.version\n }\n\n /// Returns the gas settings for the current transaction.\n ///\n /// This provides information about gas limits and pricing for the transaction, similar to `tx.gasprice` and gas\n /// limits in Ethereum. However, Aztec has a more sophisticated gas model with separate accounting for L2\n /// computation and data availability (DA) costs.\n ///\n /// # Returns\n /// * `GasSettings` - Struct containing gas limits and fee information\n ///\n pub fn gas_settings(self) -> GasSettings {\n self.inputs.tx_context.gas_settings\n }\n\n /// Returns the function selector of the currently executing function.\n ///\n /// Low-level function: Ordinarily, smart contract developers will not need to access this.\n ///\n /// This is similar to `msg.sig` in Solidity, which returns the first 4 bytes of the function signature. In Aztec,\n /// the selector uniquely identifies which function within the contract is being called.\n ///\n /// # Returns\n /// * `FunctionSelector` - The 4-byte function identifier\n ///\n /// # Advanced\n /// Only #[external(\"private\")] functions have a function selector as a protocol- enshrined concept. The function\n /// selectors of private functions are baked into the preimage of the contract address, and are used by the\n /// protocol's kernel circuits to identify each private function and ensure the correct one is being executed.\n ///\n /// Used internally for function dispatch and call verification.\n ///\n pub fn selector(self) -> FunctionSelector {\n self.inputs.call_context.function_selector\n }\n\n /// Returns the hash of the arguments passed to the current function.\n ///\n /// Very low-level function: You shouldn't need to call this. The #[external(\"private\")] macro calls this, and it\n /// makes the arguments neatly available to the body of your private function.\n ///\n /// # Returns\n /// * `Field` - Hash of the function arguments\n ///\n /// # Advanced\n /// * Arguments are hashed to reduce proof size and verification time\n /// * Enables efficient argument passing in recursive function calls\n /// * The hash can be used to retrieve the original arguments from the PXE.\n ///\n pub fn get_args_hash(self) -> Field {\n self.args_hash\n }\n\n /// Pushes a new note_hash to the Aztec blockchain's global Note Hash Tree (a state tree).\n ///\n /// A note_hash is a commitment to a piece of private state.\n ///\n /// Low-level function: Ordinarily, smart contract developers will not need to manually call this. Aztec-nr's state\n /// variables (see `../state_vars/`) are designed to understand when to create and push new note hashes.\n ///\n /// # Arguments\n /// * `note_hash` - The new note_hash.\n ///\n /// # Advanced\n /// From here, the protocol's kernel circuits will take over and insert the note_hash into the protocol's \"note\n /// hash tree\" (in the Base Rollup circuit). Before insertion, the protocol will:\n /// - \"Silo\" the `note_hash` with the contract address of this function, to yield a `siloed_note_hash`. This\n /// prevents state collisions between different smart contracts.\n /// - Ensure uniqueness of the `siloed_note_hash`, to prevent Faerie-Gold attacks, by hashing the\n /// `siloed_note_hash` with a unique value, to yield a `unique_siloed_note_hash` (see the protocol spec for more).\n ///\n /// In addition to calling this function, aztec-nr provides the contents of the newly-created note to the PXE, via\n /// the `notify_created_note` oracle.\n ///\n /// > Advanced users might occasionally wish to push data to the context > directly for lower-level control. If you\n /// find yourself doing this, > please open an issue on GitHub to describe your use case: it might be > that new\n /// functionality should be added to aztec-nr.\n ///\n pub fn push_note_hash(&mut self, note_hash: Field) {\n self.note_hashes.push(Counted::new(note_hash, self.next_counter()));\n }\n\n /// Creates a new [nullifier](crate::nullifier).\n ///\n /// ## Safety\n ///\n /// This is a low-level function that must be used with great care to avoid subtle corruption of contract state.\n /// Instead of calling this function, consider using the higher-level [`crate::state_vars::SingleUseClaim`].\n ///\n /// In particular, callers must ensure all nullifiers created by a contract are properly domain-separated, so that\n /// unrelated components don't interfere with one another (e.g. a transaction nullifier accidentally marking a\n /// variable as initialized). Only [`PrivateContext::push_nullifier_for_note_hash`] should be used for note\n /// nullifiers, never this one.\n ///\n /// ## Advanced\n ///\n /// The raw `nullifier` is not what is inserted into the Aztec state tree: it will be first siloed by contract\n /// address via [`crate::protocol::hash::compute_siloed_nullifier`] in order to prevent accidental or malicious\n /// interference of nullifiers from different contracts.\n pub fn push_nullifier(&mut self, nullifier: Field) {\n notify_created_nullifier(nullifier);\n self.nullifiers.push(Nullifier { value: nullifier, note_hash: 0 }.count(self.next_counter()));\n }\n\n /// Creates a new [nullifier](crate::nullifier) associated with a note.\n ///\n /// This is a variant of [`PrivateContext::push_nullifier`] that is used for note nullifiers, i.e. nullifiers that\n /// correspond to a note. If a note and its nullifier are created in the same transaction, then the private kernels\n /// will 'squash' these values, deleting them both as if they never existed and reducing transaction fees.\n ///\n /// The `nullification_note_hash` must be the result of calling\n /// [`crate::note::utils::compute_confirmed_note_hash_for_nullification`] for pending notes, and `0` for settled\n /// notes (which cannot be squashed).\n ///\n /// ## Safety\n ///\n /// This is a low-level function that must be used with great care to avoid subtle corruption of contract state.\n /// Instead of calling this function, consider using the higher-level [`crate::note::lifecycle::destroy_note`].\n ///\n /// The precautions listed for [`PrivateContext::push_nullifier`] apply here as well, and callers should\n /// additionally ensure `nullification_note_hash` corresponds to a note emitted by this contract, with its hash\n /// computed in the same transaction execution phase as the call to this function. Finally, only this function\n /// should be used for note nullifiers, never [`PrivateContext::push_nullifier`].\n ///\n /// Failure to do these things can result in unprovable contexts, accidental deletion of notes, or double-spend\n /// attacks.\n pub fn push_nullifier_for_note_hash(&mut self, nullifier: Field, nullification_note_hash: Field) {\n let nullifier_counter = self.next_counter();\n notify_nullified_note(nullifier, nullification_note_hash, nullifier_counter);\n self.nullifiers.push(Nullifier { value: nullifier, note_hash: nullification_note_hash }.count(\n nullifier_counter,\n ));\n }\n\n /// Returns the anchor block header - the historical block header that this private function is reading from.\n ///\n /// A private function CANNOT read from the \"current\" block header, but must read from some older block header,\n /// because as soon as private function execution begins (asynchronously, on a user's device), the public state of\n /// the chain (the \"current state\") will have progressed forward.\n ///\n /// # Returns\n /// * `BlockHeader` - The anchor block header.\n ///\n /// # Advanced\n /// * All private functions of a tx read from the same anchor block header.\n /// * The protocol asserts that the `expiration_timestamp` of every tx is at most 24 hours beyond the timestamp of\n /// the tx's chosen anchor block header. This enables the network's nodes to safely prune old txs from the mempool.\n /// Therefore, the chosen block header _must_ be one from within the last 24 hours.\n ///\n pub fn get_anchor_block_header(self) -> BlockHeader {\n self.anchor_block_header\n }\n\n /// Returns the header of any historical block at or before the anchor block.\n ///\n /// This enables private contracts to access information from even older blocks than the anchor block header.\n ///\n /// Useful for time-based contract logic that needs to compare against multiple historical points.\n ///\n /// # Arguments\n /// * `block_number` - The block number to retrieve (must be <= anchor block number)\n ///\n /// # Returns\n /// * `BlockHeader` - The header of the requested historical block\n ///\n /// # Advanced\n /// This function uses an oracle to fetch block header data from the user's PXE. Depending on how much blockchain\n /// data the user's PXE has been set up to store, this might require a query from the PXE to another Aztec node to\n /// get the data. > This is generally true of all oracle getters (see `../oracle`).\n ///\n /// Each block header gets hashed and stored as a leaf in the protocol's Archive Tree. In fact, the i-th block\n /// header gets stored at the i-th leaf index of the Archive Tree. Behind the scenes, this `get_block_header_at`\n /// function will add Archive Tree merkle-membership constraints (~3k) to your smart contract function's circuit,\n /// to prove existence of the block header in the Archive Tree.\n ///\n /// Note: we don't do any caching, so avoid making duplicate calls for the same block header, because each call\n /// will add duplicate constraints.\n ///\n /// Calling this function is more expensive (constraint-wise) than getting the anchor block header (via\n /// `get_block_header`). This is because the anchor block's merkle membership proof is handled by Aztec's protocol\n /// circuits, and is only performed once for the entire tx because all private functions of a tx share a common\n /// anchor block header. Therefore, the cost (constraint-wise) of calling `get_block_header` is effectively free.\n ///\n pub fn get_block_header_at(self, block_number: u32) -> BlockHeader {\n get_block_header_at(block_number, self)\n }\n\n /// Sets the hash of the return values for this private function.\n ///\n /// Very low-level function: this is called by the #[external(\"private\")] macro.\n ///\n /// # Arguments\n /// * `serialized_return_values` - The serialized return values as a field array\n ///\n pub fn set_return_hash<let N: u32>(&mut self, serialized_return_values: [Field; N]) {\n let return_hash = hash_args(serialized_return_values);\n self.return_hash = return_hash;\n execution_cache::store(serialized_return_values, return_hash);\n }\n\n /// Builds the PrivateCircuitPublicInputs for this private function, to ensure compatibility with the protocol's\n /// kernel circuits.\n ///\n /// Very low-level function: This function is automatically called by the #[external(\"private\")] macro.\n pub fn finish(self) -> PrivateCircuitPublicInputs {\n PrivateCircuitPublicInputs {\n call_context: self.inputs.call_context,\n args_hash: self.args_hash,\n returns_hash: self.return_hash,\n min_revertible_side_effect_counter: self.min_revertible_side_effect_counter,\n is_fee_payer: self.is_fee_payer,\n expiration_timestamp: self.expiration_timestamp,\n note_hash_read_requests: ClaimedLengthArray::from_bounded_vec(self.note_hash_read_requests),\n nullifier_read_requests: ClaimedLengthArray::from_bounded_vec(self.nullifier_read_requests),\n key_validation_requests_and_separators: ClaimedLengthArray::from_bounded_vec(\n self.key_validation_requests_and_separators,\n ),\n note_hashes: ClaimedLengthArray::from_bounded_vec(self.note_hashes),\n nullifiers: ClaimedLengthArray::from_bounded_vec(self.nullifiers),\n private_call_requests: ClaimedLengthArray::from_bounded_vec(self.private_call_requests),\n public_call_requests: ClaimedLengthArray::from_bounded_vec(self.public_call_requests),\n public_teardown_call_request: self.public_teardown_call_request,\n l2_to_l1_msgs: ClaimedLengthArray::from_bounded_vec(self.l2_to_l1_msgs),\n start_side_effect_counter: self.inputs.start_side_effect_counter,\n end_side_effect_counter: self.side_effect_counter,\n private_logs: ClaimedLengthArray::from_bounded_vec(self.private_logs),\n contract_class_logs_hashes: ClaimedLengthArray::from_bounded_vec(self.contract_class_logs_hashes),\n anchor_block_header: self.anchor_block_header,\n tx_context: self.inputs.tx_context,\n expected_non_revertible_side_effect_counter: self.expected_non_revertible_side_effect_counter,\n expected_revertible_side_effect_counter: self.expected_revertible_side_effect_counter,\n }\n }\n\n /// Designates this contract as the fee payer for the transaction.\n ///\n /// Unlike Ethereum, where the transaction sender always pays fees, Aztec allows any contract to voluntarily pay\n /// transaction fees. This enables patterns like sponsored transactions or fee abstraction where users don't need\n /// to hold fee-juice themselves. (Fee juice is a fee-paying asset for Aztec).\n ///\n /// Only one contract per transaction can declare itself as the fee payer, and it must have sufficient fee-juice\n /// balance (>= the gas limits specified in the TxContext) by the time we reach the public setup phase of the tx.\n ///\n pub fn set_as_fee_payer(&mut self) {\n aztecnr_trace_log_format!(\"Setting {0} as fee payer\")([self.this_address().to_field()]);\n self.is_fee_payer = true;\n }\n\n pub fn in_revertible_phase(&mut self) -> bool {\n let current_counter = self.side_effect_counter;\n\n // Safety: Kernel will validate that the claim is correct by validating the expected counters.\n let is_revertible = unsafe { is_execution_in_revertible_phase(current_counter) };\n\n if is_revertible {\n if (self.expected_revertible_side_effect_counter == 0)\n | (current_counter < self.expected_revertible_side_effect_counter) {\n self.expected_revertible_side_effect_counter = current_counter;\n }\n } else if current_counter > self.expected_non_revertible_side_effect_counter {\n self.expected_non_revertible_side_effect_counter = current_counter;\n }\n\n is_revertible\n }\n\n /// Declares the end of the \"setup phase\" of this tx.\n ///\n /// Only one function per tx can declare the end of the setup phase.\n ///\n /// Niche function: Only wallet developers and paymaster contract developers (aka Fee-payment contracts) will need\n /// to make use of this function.\n ///\n /// Aztec supports a three-phase execution model: setup, app logic, teardown. The phases exist to enable a fee\n /// payer to take on the risk of paying a transaction fee, safe in the knowledge that their payment (in whatever\n /// token or method the user chooses) will succeed, regardless of whether the app logic will succeed. The \"setup\"\n /// phase enables such a payment to be made, because the setup phase _cannot revert_: a reverting function within\n /// the setup phase would result in an invalid block which cannot be proven. Any side-effects generated during that\n /// phase are guaranteed to be inserted into Aztec's state trees (except for squashed notes & nullifiers, of\n /// course).\n ///\n /// Even though the end of the setup phase is declared within a private function, you might have noticed that\n /// _public_ functions can also execute within the setup phase. This is because any public function calls which\n /// were enqueued _within the setup phase_ by a private function are considered part of the setup phase.\n ///\n /// # Advanced\n /// * Sets the minimum revertible side effect counter of this tx to be the PrivateContext's _current_ side effect\n /// counter.\n ///\n pub fn end_setup(&mut self) {\n // We bump the counter twice: once so that `min_revertible_side_effect_counter` sits strictly above any\n // non-revertible side effect counter (including queries made via `in_revertible_phase` before this call), and\n // once more so that the next revertible side effect counter is strictly greater than\n // `min_revertible_side_effect_counter`. This ensures `min_revertible_side_effect_counter` occupies a gap that\n // no side effect takes, which the kernel relies on when validating the phase split.\n self.side_effect_counter += 1;\n self.min_revertible_side_effect_counter = self.side_effect_counter;\n self.side_effect_counter += 1;\n\n aztecnr_trace_log_format!(\n \"Ending setup, minimum revertible side effect counter is {0}\",\n )(\n [self.min_revertible_side_effect_counter as Field],\n );\n notify_revertible_phase_start(self.min_revertible_side_effect_counter);\n }\n\n /// Sets a deadline (an \"include-by timestamp\") for when this transaction must be included in a block.\n ///\n /// Other functions in this tx might call this setter with differing values for the include-by timestamp. To ensure\n /// that all functions' deadlines are met, the _minimum_ of all these include-by timestamps will be exposed when\n /// this tx is submitted to the network.\n ///\n /// If the transaction is not included in a block by its include-by timestamp, it becomes invalid and it will never\n /// be included.\n ///\n /// This expiry timestamp is publicly visible. See the \"Advanced\" section for privacy concerns.\n ///\n /// # Arguments\n /// * `expiration_timestamp` - Unix timestamp (seconds) deadline for inclusion. The include-by timestamp of this tx\n /// will be _at most_ the timestamp specified.\n ///\n /// # Advanced\n /// * If multiple functions set differing `expiration_timestamp`s, the kernel circuits will set it to be the\n /// _minimum_ of the two. This ensures the tx expiry requirements of all functions in the tx are met.\n /// * Rollup circuits will reject expired txs.\n /// * The protocol enforces that all transactions must be included within 24 hours of their chosen anchor block's\n /// timestamp, to enable safe mempool pruning.\n /// * The DelayedPublicMutable design makes heavy use of this functionality, to enable private functions to read\n /// public state.\n /// * A sophisticated Wallet should cleverly set an include-by timestamp to improve the privacy of the user and the\n /// network as a whole. For example, if a contract interaction sets include-by to some publicly-known value (e.g.\n /// the time when a contract upgrades), then the wallet might wish to set an even lower one to avoid revealing that\n /// this tx is interacting with said contract. Ideally, all wallets should standardize on an approach in order to\n /// provide users with a large privacy set -- although the exact approach\n /// will need to be discussed. Wallets that deviate from a standard might accidentally reveal which wallet each\n /// transaction originates from.\n ///\n // docs:start:expiration-timestamp\n pub fn set_expiration_timestamp(&mut self, expiration_timestamp: u64) {\n // docs:end:expiration-timestamp\n self.expiration_timestamp = std::cmp::min(self.expiration_timestamp, expiration_timestamp);\n }\n\n /// Asserts that a note has been created.\n ///\n /// This function will cause the transaction to fail unless the requested note exists. This is the preferred\n /// mechanism for performing this check, and the only one that works for pending notes.\n ///\n /// ## Pending Notes\n ///\n /// Both settled notes (created in prior transactions) and pending notes (created in the current transaction) will\n /// be considered by this function. Pending notes must have been created **before** this call is made for the check\n /// to pass.\n ///\n /// ## Historical Notes\n ///\n /// If you need to assert that a note existed _by some specific block in the past_, instead of simply proving that\n /// it exists by the current anchor block, use [`crate::history::note::assert_note_existed_by`] instead.\n ///\n /// ## Cost\n ///\n /// This uses up one of the call's kernel note hash read requests, which are limited. Like all kernel requests,\n /// proving time costs are only incurred when the total number of requests exceeds the kernel's capacity, requiring\n /// an additional invocation of the kernel reset circuit.\n pub fn assert_note_exists(&mut self, note_existence_request: NoteExistenceRequest) {\n // Note that the `note_hash_read_requests` array does not hold `NoteExistenceRequest` objects, but rather a\n // custom kernel type. We convert from the aztec-nr type into it.\n\n let note_hash = note_existence_request.note_hash();\n let contract_address = note_existence_request.maybe_contract_address().unwrap_or(AztecAddress::zero());\n\n let side_effect = Scoped::new(\n Counted::new(note_hash, self.next_counter()),\n contract_address,\n );\n\n self.note_hash_read_requests.push(side_effect);\n }\n\n /// Asserts that a nullifier has been emitted.\n ///\n /// This function will cause the transaction to fail unless the requested nullifier exists. This is the preferred\n /// mechanism for performing this check, and the only one that works for pending nullifiers.\n ///\n /// ## Pending Nullifiers\n ///\n /// Both settled nullifiers (emitted in prior transactions) and pending nullifiers (emitted in the current\n /// transaction) will be considered by this function. Pending nullifiers must have been emitted **before** this\n /// call is made for the check to pass.\n ///\n /// ## Historical Nullifiers\n ///\n /// If you need to assert that a nullifier existed _by some specific block in the past_, instead of simply proving\n /// that it exists by the current anchor block, use [`crate::history::nullifier::assert_nullifier_existed_by`]\n /// instead.\n ///\n /// ## Public vs Private\n ///\n /// In general, it is unsafe to check for nullifier non-existence in private, as that will not consider the\n /// possibility of the nullifier having been emitted in any transaction between the anchor block and the inclusion\n /// block. Private functions instead prove existence via this function and 'prove' non-existence by _emitting_ the\n /// nullifer, which would cause the transaction to fail if the nullifier existed.\n ///\n /// This is not the case in public functions, which do have access to the tip of the blockchain and so can reliably\n /// prove whether a nullifier exists or not via\n /// [`crate::context::public_context::PublicContext::nullifier_exists_unsafe`].\n ///\n /// ## Cost\n ///\n /// This uses up one of the call's kernel nullifier read requests, which are limited. Like all kernel requests,\n /// proving time costs are only incurred when the total number of requests exceeds the kernel's capacity, requiring\n /// an additional invocation of the kernel reset circuit.\n pub fn assert_nullifier_exists(&mut self, nullifier_existence_request: NullifierExistenceRequest) {\n let nullifier = nullifier_existence_request.nullifier();\n let contract_address = nullifier_existence_request.maybe_contract_address().unwrap_or(AztecAddress::zero());\n\n let request = Scoped::new(\n Counted::new(nullifier, self.next_counter()),\n contract_address,\n );\n\n self.nullifier_read_requests.push(request);\n }\n\n /// Requests the app-siloed nullifier hiding key (nhk_app) for the given (hashed) master nullifier public key\n /// (npk_m), from the user's PXE.\n ///\n /// Advanced function: Only needed if you're designing your own notes and/or nullifiers.\n ///\n /// Contracts are not allowed to compute nullifiers for other contracts, as that would let them read parts of their\n /// private state. Because of this, a contract is only given an \"app-siloed key\", which is constructed by\n /// hashing the user's master nullifier hiding key with the contract's address. However, because contracts cannot\n /// be trusted with a user's master nullifier hiding key (because we don't know which contracts are honest or\n /// malicious), the PXE refuses to provide any master secret keys to any app smart contract function. This means\n /// app functions are unable to prove that the derivation of an app-siloed nullifier hiding key has been computed\n /// correctly. Instead, an app function can request to the kernel (via `request_nhk_app`) that it validates the\n /// siloed derivation, since the kernel has been vetted to not leak any master secret keys.\n ///\n /// A common nullification scheme is to inject a nullifier hiding key into the preimage of a nullifier, to make the\n /// nullifier deterministic but random-looking. This function enables that flow.\n ///\n /// # Arguments\n /// * `npk_m_hash` - A hash of the master nullifier public key of the user whose PXE is executing this function.\n ///\n /// # Returns\n /// * The app-siloed nullifier hiding key that corresponds to the given `npk_m_hash`.\n ///\n pub fn request_nhk_app(&mut self, npk_m_hash: Field) -> Field {\n self.request_sk_app(npk_m_hash, NULLIFIER_INDEX)\n }\n\n /// Requests the app-siloed outgoing viewing secret key (ovsk_app) for the given (hashed) master outgoing\n /// viewing public key (ovpk_m), from the user's PXE.\n ///\n /// See `request_nhk_app` and `request_sk_app` for more info.\n ///\n /// The intention of the \"outgoing\" keypair is to provide a second secret key for all of a user's outgoing activity\n /// (i.e. for notes that a user creates, as opposed to notes that a user receives from others). The separation of\n /// incoming and outgoing data was a distinction made by zcash, with the intention of enabling a user to optionally\n /// share with a 3rd party a controlled view of only incoming or outgoing notes. Similar functionality of sharing\n /// select data can be achieved with offchain zero-knowledge proofs. It is up to an app developer whether they\n /// choose to make use of a user's outgoing keypair within their application logic, or instead simply use the same\n /// keypair (the address keypair (which is effectively the same as the \"incoming\" keypair)) for all incoming &\n /// outgoing messages to a user.\n ///\n /// Currently, all of the exposed encryption functions in aztec-nr ignore the outgoing viewing keys, and instead\n /// encrypt all note logs and event logs to a user's address public key.\n ///\n /// # Arguments\n /// * `ovpk_m_hash` - Hash of the outgoing viewing public key master\n ///\n /// # Returns\n /// * The application-specific outgoing viewing secret key\n ///\n pub fn request_ovsk_app(&mut self, ovpk_m_hash: Field) -> Field {\n self.request_sk_app(ovpk_m_hash, OUTGOING_INDEX)\n }\n\n /// Pushes a Key Validation Request to the kernel.\n ///\n /// Private functions are not allowed to see a user's master secret keys, because we do not trust them. They are\n /// instead given \"app-siloed\" secret keys with a claim that they relate to a master public key. They can then\n /// request validation of this claim, by making a \"key validation request\" to the protocol's kernel circuits (which\n /// _are_ allowed to see certain master secret keys).\n ///\n /// When a Key Validation Request tuple of (sk_app, Pk_m, app_address) is submitted to the kernel, it will perform\n /// the following derivations to validate the relationship between the claimed sk_app and the user's Pk_m:\n ///\n /// (sk_m) ----> * G ----> Pk_m\n /// | |\n /// v We use the kernel to prove this\n /// h(sk_m, app_address) | sk_app-Pk_m relationship, because app\n /// | circuits must not be trusted to see sk_m.\n /// v |\n /// sk_app - - - - - - - - -\n ///\n /// The function is named \"request_\" instead of \"get_\" to remind the user that a Key Validation Request will be\n /// emitted to the kernel.\n ///\n fn request_sk_app(&mut self, pk_m_hash: Field, key_index: Field) -> Field {\n let cached_request =\n self.last_key_validation_requests[key_index as u32].unwrap_or(KeyValidationRequest::empty());\n\n if cached_request.pk_m.hash() == pk_m_hash {\n // We get a match so the cached request is the latest one\n cached_request.sk_app\n } else {\n // We didn't get a match meaning the cached result is stale Typically we'd validate keys by showing that\n // they are the preimage of `pk_m_hash`, but that'd require the oracle returning the master secret keys,\n // which could cause malicious contracts to leak it or learn about secrets from other contracts. We\n // therefore silo secret keys, and rely on the private kernel to validate that we siloed secret key\n // corresponds to correct siloing of the master secret key that hashes to `pk_m_hash`.\n\n // Safety: Kernels verify that the key validation request is valid and below we verify that a request for\n // the correct public key has been received.\n let request = unsafe { get_key_validation_request(pk_m_hash, key_index) };\n assert(!request.pk_m.is_infinite, \"Infinite public key points are not allowed\");\n assert_eq(request.pk_m.hash(), pk_m_hash, \"Obtained invalid key validation request\");\n\n self.key_validation_requests_and_separators.push(\n KeyValidationRequestAndSeparator {\n request,\n key_type_domain_separator: public_key_domain_separators[key_index as u32],\n },\n );\n self.last_key_validation_requests[key_index as u32] = Option::some(request);\n request.sk_app\n }\n }\n\n /// Sends an \"L2 -> L1 message\" from this function (Aztec, L2) to a smart contract on Ethereum (L1). L1 contracts\n /// which are designed to send/receive messages to/from Aztec are called \"Portal Contracts\".\n ///\n /// Common use cases include withdrawals, cross-chain asset transfers, and triggering L1 actions based on L2 state\n /// changes.\n ///\n /// The message will be inserted into an Aztec \"Outbox\" contract on L1, when this transaction's block is proposed\n /// to L1. Sending the message will not result in any immediate state changes in the target portal contract. The\n /// message will need to be manually consumed from the Outbox through a separate Ethereum transaction: a user will\n /// need to call a function of the portal contract -- a function specifically designed to make a call to the Outbox\n /// to consume the message. The message will only be available for consumption once the _epoch_ proof has been\n /// submitted. Given that there are multiple Aztec blocks within an epoch, it might take some time for this epoch\n /// proof to be submitted -- especially if the block was near the start of an epoch.\n ///\n /// # Arguments\n /// * `recipient` - Ethereum address that will receive the message\n /// * `content` - Message content (32 bytes as a Field element). This content has a very\n /// specific layout. docs:start:context_message_portal\n pub fn message_portal(&mut self, recipient: EthAddress, content: Field) {\n let message = L2ToL1Message { recipient, content };\n self.l2_to_l1_msgs.push(message.count(self.next_counter()));\n }\n\n /// Consumes a message sent from Ethereum (L1) to Aztec (L2).\n ///\n /// Common use cases include token bridging, cross-chain governance, and triggering L2 actions based on L1 events.\n ///\n /// Use this function if you only want the message to ever be \"referred to\" once. Once consumed using this method,\n /// the message cannot be consumed again, because a nullifier is emitted. If your use case wants for the message to\n /// be read unlimited times, then you can always read any historic message from the L1-to-L2 messages tree;\n /// messages never technically get deleted from that tree.\n ///\n /// The message will first be inserted into an Aztec \"Inbox\" smart contract on L1. Sending the message will not\n /// result in any immediate state changes in the target L2 contract. The message will need to be manually consumed\n /// by the target contract through a separate Aztec transaction. The message will not be available for consumption\n /// immediately. Messages get copied over from the L1 Inbox to L2 by the next Proposer in batches. So you will need\n /// to wait until the messages are copied before you can consume them.\n ///\n /// # Arguments\n /// * `content` - The message content that was sent from L1\n /// * `secret` - Secret value used for message privacy (if needed)\n /// * `sender` - Ethereum address that sent the message\n /// * `leaf_index` - Index of the message in the L1-to-L2 message tree\n ///\n /// # Advanced\n /// Validates message existence in the L1-to-L2 message tree and nullifies the message to prevent\n /// double-consumption.\n pub fn consume_l1_to_l2_message(&mut self, content: Field, secret: Field, sender: EthAddress, leaf_index: Field) {\n let nullifier = process_l1_to_l2_message(\n self.anchor_block_header.state.l1_to_l2_message_tree.root,\n self.this_address(),\n sender,\n self.chain_id(),\n self.version(),\n content,\n secret,\n leaf_index,\n );\n\n // Push nullifier (and the \"commitment\" corresponding to this can be \"empty\")\n self.push_nullifier(nullifier)\n }\n\n /// Emits a private log (an array of Fields) that will be published to an Ethereum blob.\n ///\n /// Private logs are intended for the broadcasting of ciphertexts: that is, encrypted events or encrypted note\n /// contents. Since the data in the logs is meant to be _encrypted_, private_logs are broadcast to publicly-visible\n /// Ethereum blobs. The intended recipients of such encrypted messages can then discover and decrypt these\n /// encrypted logs using their viewing secret key. (See `../messages/discovery` for more details).\n ///\n /// Important note: This function DOES NOT _do_ any encryption of the input `log` fields. This function blindly\n /// publishes whatever input `log` data is fed into it, so the caller of this function should have already\n /// performed the encryption, and the `log` should be the result of that encryption.\n ///\n /// The protocol does not dictate what encryption scheme should be used: a smart contract developer can choose\n /// whatever encryption scheme they like. Aztec-nr includes some off-the-shelf encryption libraries that developers\n /// might wish to use, for convenience. These libraries not only encrypt a plaintext (to produce a ciphertext);\n /// they also prepend the ciphertext with a `tag` and `ephemeral public key` for easier message discovery. This is\n /// a very dense topic, and we will be writing more libraries and docs soon.\n ///\n /// > Currently, AES128 CBC encryption is the main scheme included in > aztec.nr. > We are currently making\n /// significant changes to the interfaces of the > encryption library.\n ///\n /// In some niche use cases, an app might be tempted to publish _un-encrypted_ data via a private log, because\n /// _public logs_ are not available to private functions. Be warned that emitting public data via private logs is\n /// strongly discouraged, and is considered a \"privacy anti-pattern\", because it reveals identifiable information\n /// about _which_ function has been executed. A tx which leaks such information does not contribute to the privacy\n /// set of the network.\n ///\n /// * Unlike `emit_raw_note_log_unsafe`, this log is not tied to any specific note\n ///\n /// # Arguments\n /// * `tag` - A tag placed at `fields[0]` of the emitted log. Used by recipients and nodes to identify and\n /// filter for relevant logs without scanning all of them.\n /// * `log` - The log data that will be publicly broadcast (so make sure it's already been encrypted before you\n /// call this function). Private logs are bounded in size (`PRIVATE_LOG_CIPHERTEXT_LEN`), to encourage all logs\n /// from all smart contracts look identical.\n /// * `length` - The actual length of `log` (measured in number of Fields). Although the input log has a max\n /// size of `PRIVATE_LOG_CIPHERTEXT_LEN`, the latter values of the array might all be 0's for small logs. This\n /// `length` should reflect the trimmed length of the array. The protocol's kernel circuits can then append\n /// random fields as \"padding\" after the `length`, so that the logs of this smart contract look\n /// indistinguishable from (the same length as) the logs of all other applications. It's up to wallets how much\n /// padding to apply, so ideally all wallets should agree on standards for this.\n ///\n /// ## Safety\n ///\n /// The `tag` should be domain-separated (e.g. via [`crate::protocol::hash::compute_log_tag`]) to prevent\n /// collisions between logs from different sources. Without domain separation, two unrelated log types that\n /// happen to share a raw tag value become indistinguishable. Prefer the higher-level APIs\n /// ([`crate::messages::message_delivery::MessageDelivery`] for messages, `self.emit(event)` for events) which\n /// handle tagging automatically.\n // TODO(F-555): remove this function in favor of `emit_private_log_vec_unsafe`\n #[deprecated(\"use `emit_private_log_vec_unsafe` instead\")]\n pub fn emit_private_log_unsafe(&mut self, tag: Field, log: [Field; PRIVATE_LOG_CIPHERTEXT_LEN], length: u32) {\n let counter = self.next_counter();\n let full_log = [tag].concat(log);\n self.private_logs.push(PrivateLogData { log: PrivateLog::new(full_log, length + 1), note_hash_counter: 0 }\n .count(counter));\n }\n\n /// `BoundedVec`-based variant of [`emit_private_log_unsafe`](PrivateContext::emit_private_log_unsafe).\n ///\n /// See [`emit_private_log_unsafe`](PrivateContext::emit_private_log_unsafe) for the full description of private\n /// log semantics.\n // TODO(F-555): once `emit_private_log_unsafe` is removed, rename this function to drop the `_vec` suffix.\n pub fn emit_private_log_vec_unsafe(&mut self, tag: Field, log: BoundedVec<Field, PRIVATE_LOG_CIPHERTEXT_LEN>) {\n self.emit_raw_note_log_vec_unsafe(tag, log, 0);\n }\n\n // TODO: rename.\n /// Emits a private log that is explicitly tied to a newly-emitted note_hash, to convey to the kernel: \"this log\n /// relates to this note\".\n ///\n /// This linkage is important in case the note gets squashed (due to being read later in this same tx), since we\n /// can then squash the log as well.\n ///\n /// See `emit_private_log_unsafe` for more info about private log emission.\n ///\n /// # Arguments\n /// * `tag` - A tag placed at `fields[0]`. See `emit_private_log_unsafe`.\n /// * `log` - The log data as an array of Field elements\n /// * `length` - The actual length of the `log` (measured in number of Fields).\n /// * `note_hash_counter` - The side-effect counter that was assigned to the new note_hash when it was pushed to\n /// this `PrivateContext`.\n ///\n /// Important: If your application logic requires the log to always be emitted regardless of note squashing,\n /// consider using `emit_private_log_unsafe` instead, or emitting additional events.\n ///\n /// ## Safety\n ///\n /// Same as [`PrivateContext::emit_private_log_unsafe`]: the `tag` should be domain-separated.\n // TODO(F-555): remove this function in favor of `emit_raw_note_log_vec_unsafe`\n #[deprecated(\"use `emit_raw_note_log_vec_unsafe` instead\")]\n pub fn emit_raw_note_log_unsafe(\n &mut self,\n tag: Field,\n log: [Field; PRIVATE_LOG_CIPHERTEXT_LEN],\n length: u32,\n note_hash_counter: u32,\n ) {\n let counter = self.next_counter();\n let full_log = [tag].concat(log);\n let private_log = PrivateLogData { log: PrivateLog::new(full_log, length + 1), note_hash_counter };\n self.private_logs.push(private_log.count(counter));\n }\n\n /// `BoundedVec`-based variant of [`emit_raw_note_log_unsafe`](PrivateContext::emit_raw_note_log_unsafe).\n ///\n /// See [`emit_raw_note_log_unsafe`](PrivateContext::emit_raw_note_log_unsafe) for the full description of\n /// note-tied private log semantics.\n // TODO(F-555): once `emit_raw_note_log_unsafe` is removed, rename this function to drop the `_vec` suffix.\n pub fn emit_raw_note_log_vec_unsafe(\n &mut self,\n tag: Field,\n log: BoundedVec<Field, PRIVATE_LOG_CIPHERTEXT_LEN>,\n note_hash_counter: u32,\n ) {\n let counter = self.next_counter();\n let full_log = [tag].concat(log.storage());\n let private_log = PrivateLogData { log: PrivateLog::new(full_log, log.len() + 1), note_hash_counter };\n self.private_logs.push(private_log.count(counter));\n }\n\n /// Emits large data blobs.\n ///\n /// This reuses the Contract Class Log channel to emit blobs of up to [`CONTRACT_CLASS_LOG_SIZE_IN_FIELDS`].\n ///\n /// ## Privacy\n ///\n /// The address of the contract emitting these blobs is revelead.\n pub fn emit_contract_class_log<let N: u32>(&mut self, log: [Field; N]) {\n let contract_address = self.this_address();\n let counter = self.next_counter();\n\n let log_to_emit: [Field; CONTRACT_CLASS_LOG_SIZE_IN_FIELDS] =\n log.concat([0; CONTRACT_CLASS_LOG_SIZE_IN_FIELDS - N]);\n // Note: the length is not always N, it is the number of fields we want to broadcast, omitting trailing zeros\n // to save blob space.\n // Safety: The below length is constrained in the base rollup, which will make sure that all the fields beyond\n // length are zero. However, it won't be able to check that we didn't add extra padding (trailing zeroes) or\n // that we cut trailing zeroes from the end.\n let length = unsafe { trimmed_array_length_hint(log) };\n // We hash the entire padded log to ensure a user cannot pass a shorter length and so emit incorrect shorter\n // bytecode.\n let log_hash = compute_contract_class_log_hash(log_to_emit);\n // Safety: the below only exists to broadcast the raw log, so we can provide it to the base rollup later to be\n // constrained.\n unsafe {\n notify_created_contract_class_log(contract_address, log_to_emit, length, counter);\n }\n\n self.contract_class_logs_hashes.push(LogHash { value: log_hash, length: length }.count(counter));\n }\n\n /// Calls a private function on another contract (or the same contract).\n ///\n /// Very low-level function.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the called function\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n /// This enables contracts to interact with each other while maintaining privacy. This \"composability\" of private\n /// contract functions is a key feature of the Aztec network.\n ///\n /// If a user's transaction includes multiple private function calls, then by the design of Aztec, the following\n /// information will remain private[1]:\n /// - The function selectors and contract addresses of all private function calls will remain private, so an\n /// observer of the public mempool will not be able to look at a tx and deduce which private functions have been\n /// executed.\n /// - The arguments and return values of all private function calls will remain private.\n /// - The person who initiated the tx will remain private.\n /// - The notes and nullifiers and private logs that are emitted by all private function calls will (if designed\n /// well) not leak any user secrets, nor leak which functions have been executed.\n ///\n /// [1] Caveats: Some of these privacy guarantees depend on how app developers design their smart contracts. Some\n /// actions _can_ leak information, such as:\n /// - Calling an internal public function.\n /// - Calling a public function and not setting msg_sender to Option::none (feature not built yet - see github).\n /// - Calling any public function will always leak details about the nature of the transaction, so devs should be\n /// careful in their contract designs. If it can be done in a private function, then that will give the best\n /// privacy.\n /// - Not padding the side-effects of a tx to some standardized, uniform size. The kernel circuits can take hints\n /// to pad side-effects, so a wallet should be able to request for a particular amount of padding. Wallets should\n /// ideally agree on some standard.\n /// - Padding should include:\n /// - Padding the lengths of note & nullifier arrays\n /// - Padding private logs with random fields, up to some standardized size. See also:\n /// https://docs.aztec.network/developers/resources/considerations/privacy_considerations\n ///\n /// # Advanced\n /// * The call is added to the private call stack and executed by kernel circuits after this function completes\n /// * The called function can modify its own contract's private state\n /// * Side effects from the called function are included in this transaction\n /// * The call inherits the current transaction's context and gas limits\n ///\n pub fn call_private_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n ) -> ReturnsHash {\n let args_hash = hash_args(args);\n execution_cache::store(args, args_hash);\n self.call_private_function_with_args_hash(contract_address, function_selector, args_hash, false)\n }\n\n /// Makes a read-only call to a private function on another contract.\n ///\n /// This is similar to Solidity's `staticcall`. The called function cannot modify state, emit L2->L2 messages, nor\n /// emit events. Any nested calls are constrained to also be staticcalls.\n ///\n /// See `call_private_function` for more general info on private function calls.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract to call\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the called function\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn static_call_private_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n ) -> ReturnsHash {\n let args_hash = hash_args(args);\n execution_cache::store(args, args_hash);\n self.call_private_function_with_args_hash(contract_address, function_selector, args_hash, true)\n }\n\n /// Calls a private function that takes no arguments.\n ///\n /// This is a convenience function for calling private functions that don't require any input parameters. It's\n /// equivalent to `call_private_function` but slightly more efficient to use when no arguments are needed.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn call_private_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n ) -> ReturnsHash {\n self.call_private_function_with_args_hash(contract_address, function_selector, 0, false)\n }\n\n /// Makes a read-only call to a private function which takes no arguments.\n ///\n /// This combines the optimisation of `call_private_function_no_args` with the safety of\n /// `static_call_private_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values. Use `.get_preimage()` to extract the actual\n /// return values.\n ///\n pub fn static_call_private_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n ) -> ReturnsHash {\n self.call_private_function_with_args_hash(contract_address, function_selector, 0, true)\n }\n\n /// Low-level private function call.\n ///\n /// This is the underlying implementation used by all other private function call methods. Instead of taking raw\n /// arguments, it accepts a hash of the arguments.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args_hash` - Pre-computed hash of the function arguments\n /// * `is_static_call` - Whether this should be a read-only call\n ///\n /// # Returns\n /// * `ReturnsHash` - Hash of the called function's return values\n ///\n pub fn call_private_function_with_args_hash(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args_hash: Field,\n is_static_call: bool,\n ) -> ReturnsHash {\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n let start_side_effect_counter = self.side_effect_counter;\n\n // Safety: The oracle simulates the private call and returns the value of the side effects counter after\n // execution of the call (which means that end_side_effect_counter - start_side_effect_counter is the number of\n // side effects that took place), along with the hash of the return values. We validate these by requesting a\n // private kernel iteration in which the return values are constrained to hash to `returns_hash` and the side\n // effects counter to increment from start to end.\n let (end_side_effect_counter, returns_hash) = unsafe {\n call_private_function_internal(\n contract_address,\n function_selector,\n args_hash,\n start_side_effect_counter,\n is_static_call,\n )\n };\n\n self.private_call_requests.push(\n PrivateCallRequest {\n call_context: CallContext {\n msg_sender: self.this_address(),\n contract_address,\n function_selector,\n is_static_call,\n },\n args_hash,\n returns_hash,\n start_side_effect_counter,\n end_side_effect_counter,\n },\n );\n\n // The kernel circuits ensure that end_side_effect_counter is greater than start_side_effect_counter, and that\n // all side effects emitted in the child call have counters within the range [start_side_effect_counter,\n // end_side_effect_counter]. Therefore, we only need to ensure that the next side effect from the current call\n // starts after the end side effect from the child call.\n self.side_effect_counter = end_side_effect_counter + 1;\n\n ReturnsHash::new(returns_hash)\n }\n\n /// Enqueues a call to a public function to be executed later.\n ///\n /// Unlike private functions which execute immediately on the user's device, public function calls are \"enqueued\"\n /// and executed some time later by a block proposer.\n ///\n /// This means a public function cannot return any values back to a private function, because by the time the\n /// public function is being executed, the private function which called it has already completed execution. (In\n /// fact, the private function has been executed and proven, along with all other private function calls of the\n /// user's tx. A single proof of the tx has been submitted to the Aztec network, and some time later a proposer has\n /// picked the tx up from the mempool and begun executing all of the enqueued public functions).\n ///\n /// # Privacy warning Enqueueing a public function call is an inherently leaky action. Many interesting applications will require some interaction with public state, but smart contract developers should try to use public function calls sparingly, and carefully. _Internal_ public function calls are especially leaky, because they completely leak which private contract made the call. See also: https://docs.aztec.network/developers/resources/considerations/privacy_considerations\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the public function\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Enqueues a read-only call to a public function.\n ///\n /// This is similar to Solidity's `staticcall`. The called function cannot modify state or emit events. Any nested\n /// calls are constrained to also be staticcalls.\n ///\n /// See also `call_public_function` for more important information about making private -> public function calls.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - Array of arguments to pass to the public function\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn static_call_public_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, true, hide_msg_sender)\n }\n\n /// Enqueues a call to a public function that takes no arguments.\n ///\n /// This is an optimisation for calling public functions that don't take any input parameters. It's otherwise\n /// equivalent to `call_public_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n hide_msg_sender: bool,\n ) {\n let calldata_hash = hash_calldata_array([function_selector.to_field()]);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Enqueues a read-only call to a public function with no arguments.\n ///\n /// This combines the optimisation of `call_public_function_no_args` with the safety of\n /// `static_call_public_function`.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn static_call_public_function_no_args(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n hide_msg_sender: bool,\n ) {\n let calldata_hash = hash_calldata_array([function_selector.to_field()]);\n self.call_public_function_with_calldata_hash(contract_address, calldata_hash, true, hide_msg_sender)\n }\n\n /// Low-level public function call.\n ///\n /// This is the underlying implementation used by all other public function call methods. Instead of taking raw\n /// arguments, it accepts a hash of the arguments.\n ///\n /// Advanced function: Most developers should use `call_public_function` or `static_call_public_function` instead.\n /// This function is exposed for performance optimization and advanced use cases.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the function\n /// * `calldata_hash` - Hash of the function calldata\n /// * `is_static_call` - Whether this should be a read-only call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn call_public_function_with_calldata_hash(\n &mut self,\n contract_address: AztecAddress,\n calldata_hash: Field,\n is_static_call: bool,\n hide_msg_sender: bool,\n ) {\n let counter = self.next_counter();\n\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n\n assert_valid_public_call_data(calldata_hash);\n\n let msg_sender = if hide_msg_sender {\n NULL_MSG_SENDER_CONTRACT_ADDRESS\n } else {\n self.this_address()\n };\n\n let call_request = PublicCallRequest { msg_sender, contract_address, is_static_call, calldata_hash };\n\n self.public_call_requests.push(Counted::new(call_request, counter));\n }\n\n /// Enqueues a public function call, and designates it to be the teardown function for this tx. Only one teardown\n /// function call can be made by a tx.\n ///\n /// Niche function: Only wallet developers and paymaster contract developers (aka Fee-payment contracts) will need\n /// to make use of this function.\n ///\n /// Aztec supports a three-phase execution model: setup, app logic, teardown. The phases exist to enable a fee\n /// payer to take on the risk of paying a transaction fee, safe in the knowledge that their payment (in whatever\n /// token or method the user chooses) will succeed, regardless of whether the app logic will succeed. The \"setup\"\n /// phase ensures the fee payer has sufficient balance to pay the proposer their fees. The teardown phase is\n /// primarily intended to: calculate exactly how much the user owes, based on gas consumption, and refund the user\n /// any change.\n ///\n /// Note: in some cases, the cost of refunding the user (i.e. DA costs of tx side-effects) might exceed the refund\n /// amount. For app logic with fairly stable and predictable gas consumption, a material refund amount is unlikely.\n /// For app logic with unpredictable gas consumption, a refund might be important to the user (e.g. if a hefty\n /// function reverts very early). Wallet/FPC/Paymaster developers should be mindful of this.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the teardown function\n /// * `function_selector` - 4-byte identifier of the function to call\n /// * `args` - An array of fields to pass to the function.\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n pub fn set_public_teardown_function<let ArgsCount: u32>(\n &mut self,\n contract_address: AztecAddress,\n function_selector: FunctionSelector,\n args: [Field; ArgsCount],\n hide_msg_sender: bool,\n ) {\n let calldata = [function_selector.to_field()].concat(args);\n let calldata_hash = hash_calldata_array(calldata);\n execution_cache::store(calldata, calldata_hash);\n self.set_public_teardown_function_with_calldata_hash(contract_address, calldata_hash, false, hide_msg_sender)\n }\n\n /// Low-level function to set the public teardown function.\n ///\n /// This is the underlying implementation for setting the teardown function call that will execute at the end of\n /// the transaction. Instead of taking raw arguments, it accepts a hash of the arguments.\n ///\n /// Advanced function: Most developers should use `set_public_teardown_function` instead.\n ///\n /// # Arguments\n /// * `contract_address` - Address of the contract containing the teardown function\n /// * `calldata_hash` - Hash of the function calldata\n /// * `is_static_call` - Whether this should be a read-only call\n /// * `hide_msg_sender` - the called function will see a \"null\" value for `msg_sender` if set to `true`\n ///\n pub fn set_public_teardown_function_with_calldata_hash(\n &mut self,\n contract_address: AztecAddress,\n calldata_hash: Field,\n is_static_call: bool,\n hide_msg_sender: bool,\n ) {\n let is_static_call = is_static_call | self.inputs.call_context.is_static_call;\n\n assert_valid_public_call_data(calldata_hash);\n\n let msg_sender = if hide_msg_sender {\n NULL_MSG_SENDER_CONTRACT_ADDRESS\n } else {\n self.this_address()\n };\n\n self.public_teardown_call_request =\n PublicCallRequest { msg_sender, contract_address, is_static_call, calldata_hash };\n }\n\n /// Increments the side-effect counter.\n ///\n /// Very low-level function.\n ///\n /// # Advanced\n ///\n /// Every side-effect of a private function is given a \"side-effect counter\", based on when it is created. This\n /// PrivateContext is in charge of assigning the counters.\n ///\n /// The reason we have side-effect counters is complicated. Consider this illustrative pseudocode of inter-contract\n /// function calls:\n /// ```\n /// contract A {\n /// let x = 5; // pseudocode for storage var x.\n /// fn a1 {\n /// read x; // value: 5, counter: 1.\n /// x = x + 1;\n /// write x; // value: 6, counter: 2.\n ///\n /// B.b(); // start_counter: 2, end_counter: 4\n ///\n /// read x; // value: 36, counter: 5.\n /// x = x + 1;\n /// write x; // value: 37, counter: 6.\n /// }\n ///\n /// fn a2 {\n /// read x; // value: 6, counter: 3.\n /// x = x * x;\n /// write x; // value: 36, counter: 4.\n /// }\n /// }\n ///\n /// contract B {\n /// fn b() {\n /// A.a2();\n /// }\n /// }\n /// ```\n ///\n /// Suppose a1 is the first function called. The comments show the execution counter of each side-effect, and what\n /// the new value of `x` is.\n ///\n /// These (private) functions are processed by Aztec's kernel circuits in an order that is different from execution\n /// order: All of A.a1 is proven before B.b is proven, before A.a2 is proven. So when we're in the 2nd execution\n /// frame of A.a1 (after the call to B.b), the circuit needs to justify why x went from being `6` to `36`. But the\n /// circuit doesn't know why, and given the order of proving, the kernel hasn't _seen_ a value of 36 get written\n /// yet. The kernel needs to track big arrays of all side-effects of all private functions in a tx. Then, as it\n /// recurses and processes B.b(), it will eventually see a value of 36 get written.\n ///\n /// Suppose side-effect counters weren't exposed: The kernel would only see this ordering (in order of proof\n /// verification): [ A.a1.read, A.a1.write, A.a1.read, A.a1.write, A.a2.read, A.a2.write ]\n /// [ 5, 6, 36, 37, 6, 36 ]\n /// The kernel wouldn't know _when_ B.b() was called within A.a1(), because it can't see what's going on within an\n /// app circuit. So the kernel wouldn't know that the ordering of reads and writes should actually be: [ A.a1.read,\n /// A.a1.write, A.a2.read, A.a2.write, A.a1.read, A.a1.write ]\n /// [ 5, 6, 6, 36, 36, 37 ]\n ///\n /// And so, we introduced side-effect counters: every private function must assign side-effect counters alongside\n /// every side-effect that it emits, and also expose to the kernel the counters that it started and ended with.\n /// This gives the kernel enough information to arrange all side-effects in the correct order. It can then catch\n /// (for example) if a function tries to read state before it has been written (e.g. if A.a2() maliciously tried to\n /// read a value of x=37) (e.g. if A.a1() maliciously tried to read x=6).\n ///\n /// If a malicious app contract _lies_ and does not count correctly:\n /// - It cannot lie about its start and end counters because the kernel will catch this.\n /// - It _could_ lie about its intermediate counters:\n /// - 1. It could not increment its side-effects correctly\n /// - 2. It could label its side-effects with counters outside of its start and end counters' range. The kernel\n /// will catch 2. The kernel will not catch 1., but this would only cause corruption to the private state of the\n /// malicious contract, and not any other contracts (because a contract can only modify its own state). If a \"good\"\n /// contract is given _read access_ to a maliciously-counting contract (via an external getter function, or by\n /// reading historic state from the archive tree directly), and they then make state changes to their _own_ state\n /// accordingly, that could be dangerous. Developers should be mindful not to trust the claimed innards of external\n /// contracts unless they have audited/vetted the contracts including vetting the side-effect counter\n /// incrementation. This is a similar paradigm to Ethereum smart contract development: you must vet external\n /// contracts that your contract relies upon, and you must not make any presumptions about their claimed behaviour.\n /// (Hopefully if a contract imports a version of aztec-nr, we will get contract verification tooling that can\n /// validate the authenticity of the imported aztec-nr package, and hence infer that the side- effect counting will\n /// be correct, without having to re-audit such logic for every contract).\n ///\n fn next_counter(&mut self) -> u32 {\n let counter = self.side_effect_counter;\n self.side_effect_counter += 1;\n counter\n }\n}\n\nimpl Empty for PrivateContext {\n fn empty() -> Self {\n PrivateContext {\n inputs: PrivateContextInputs::empty(),\n side_effect_counter: 0 as u32,\n min_revertible_side_effect_counter: 0 as u32,\n is_fee_payer: false,\n args_hash: 0,\n return_hash: 0,\n expiration_timestamp: 0,\n note_hash_read_requests: BoundedVec::new(),\n nullifier_read_requests: BoundedVec::new(),\n key_validation_requests_and_separators: BoundedVec::new(),\n note_hashes: BoundedVec::new(),\n nullifiers: BoundedVec::new(),\n private_call_requests: BoundedVec::new(),\n public_call_requests: BoundedVec::new(),\n public_teardown_call_request: PublicCallRequest::empty(),\n l2_to_l1_msgs: BoundedVec::new(),\n anchor_block_header: BlockHeader::empty(),\n private_logs: BoundedVec::new(),\n contract_class_logs_hashes: BoundedVec::new(),\n last_key_validation_requests: [Option::none(); NUM_KEY_TYPES],\n expected_non_revertible_side_effect_counter: 0,\n expected_revertible_side_effect_counter: 0,\n }\n }\n}\n"
7167
7175
  },
7168
7176
  "68": {
7169
7177
  "function_locations": [