@basmilius/apple-encryption 0.9.16 → 0.9.18

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { i as __toESM, n as __exportAll, r as __require, t as __commonJSMin } from "./chunk-CB5R7In7.mjs";
+import { t as __exportAll } from "./chunk-DQk6qfdC.mjs";
 import { hkdfSync } from "node:crypto";
 
 //#region ../../node_modules/.bun/@stablelib+int@2.0.1/node_modules/@stablelib/int/lib/int.js
@@ -19,6 +19,28 @@ const isSafeInteger = Number.isSafeInteger;
 //#endregion
 //#region ../../node_modules/.bun/@stablelib+binary@2.0.1/node_modules/@stablelib/binary/lib/binary.js
 /**
+* Reads 4 bytes from array starting at offset as big-endian
+* unsigned 32-bit integer and returns it.
+*/
+function readUint32BE(array, offset = 0) {
+	return (array[offset] << 24 | array[offset + 1] << 16 | array[offset + 2] << 8 | array[offset + 3]) >>> 0;
+}
+/**
+* Writes 4-byte big-endian representation of 32-bit unsigned
+* value to byte array starting at offset.
+*
+* If byte array is not given, creates a new 4-byte one.
+*
+* Returns the output byte array.
+*/
+function writeUint32BE(value, out = new Uint8Array(4), offset = 0) {
+	out[offset + 0] = value >>> 24;
+	out[offset + 1] = value >>> 16;
+	out[offset + 2] = value >>> 8;
+	out[offset + 3] = value >>> 0;
+	return out;
+}
+/**
 * Writes 4-byte little-endian representation of 32-bit unsigned
 * value to array starting at offset.
 *
@@ -326,7 +348,7 @@ function equal(a, b) {
 
 //#endregion
 //#region ../../node_modules/.bun/@stablelib+poly1305@2.0.1/node_modules/@stablelib/poly1305/lib/poly1305.js
-const DIGEST_LENGTH = 16;
+const DIGEST_LENGTH$1 = 16;
 /**
 * Poly1305 computes 16-byte authenticator of message using
 * a one-time 32-byte key.
@@ -834,1821 +856,1092 @@ function padNonce(nonce) {
 }
 
 //#endregion
-//#region ../../node_modules/.bun/tweetnacl@1.0.3/node_modules/tweetnacl/nacl-fast.js
-var require_nacl_fast = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	(function(nacl) {
-		"use strict";
-		var gf = function(init) {
-			var i, r = new Float64Array(16);
-			if (init) for (i = 0; i < init.length; i++) r[i] = init[i];
-			return r;
-		};
-		var randombytes = function() {
-			throw new Error("no PRNG");
-		};
-		var _0 = new Uint8Array(16);
-		var _9 = new Uint8Array(32);
-		_9[0] = 9;
-		var gf0 = gf(), gf1 = gf([1]), _121665 = gf([56129, 1]), D = gf([
-			30883,
-			4953,
-			19914,
-			30187,
-			55467,
-			16705,
-			2637,
-			112,
-			59544,
-			30585,
-			16505,
-			36039,
-			65139,
-			11119,
-			27886,
-			20995
-		]), D2 = gf([
-			61785,
-			9906,
-			39828,
-			60374,
-			45398,
-			33411,
-			5274,
-			224,
-			53552,
-			61171,
-			33010,
-			6542,
-			64743,
-			22239,
-			55772,
-			9222
-		]), X = gf([
-			54554,
-			36645,
-			11616,
-			51542,
-			42930,
-			38181,
-			51040,
-			26924,
-			56412,
-			64982,
-			57905,
-			49316,
-			21502,
-			52590,
-			14035,
-			8553
-		]), Y = gf([
-			26200,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214,
-			26214
-		]), I = gf([
-			41136,
-			18958,
-			6951,
-			50414,
-			58488,
-			44335,
-			6150,
-			12099,
-			55207,
-			15867,
-			153,
-			11085,
-			57099,
-			20417,
-			9344,
-			11139
-		]);
-		function ts64(x, i, h, l) {
-			x[i] = h >> 24 & 255;
-			x[i + 1] = h >> 16 & 255;
-			x[i + 2] = h >> 8 & 255;
-			x[i + 3] = h & 255;
-			x[i + 4] = l >> 24 & 255;
-			x[i + 5] = l >> 16 & 255;
-			x[i + 6] = l >> 8 & 255;
-			x[i + 7] = l & 255;
-		}
-		function vn(x, xi, y, yi, n) {
-			var i, d = 0;
-			for (i = 0; i < n; i++) d |= x[xi + i] ^ y[yi + i];
-			return (1 & d - 1 >>> 8) - 1;
+//#region ../../node_modules/.bun/@stablelib+random@2.0.1/node_modules/@stablelib/random/lib/source/system.js
+const QUOTA = 65536;
+var SystemRandomSource = class {
+	isAvailable = false;
+	isInstantiated = false;
+	constructor() {
+		if (typeof crypto !== "undefined" && "getRandomValues" in crypto) {
+			this.isAvailable = true;
+			this.isInstantiated = true;
 		}
-		function crypto_verify_16(x, xi, y, yi) {
-			return vn(x, xi, y, yi, 16);
-		}
-		function crypto_verify_32(x, xi, y, yi) {
-			return vn(x, xi, y, yi, 32);
+	}
+	randomBytes(length) {
+		if (!this.isAvailable) throw new Error("System random byte generator is not available.");
+		const out = new Uint8Array(length);
+		for (let i = 0; i < out.length; i += QUOTA) crypto.getRandomValues(out.subarray(i, i + Math.min(out.length - i, QUOTA)));
+		return out;
+	}
+};
+
+//#endregion
+//#region ../../node_modules/.bun/@stablelib+random@2.0.1/node_modules/@stablelib/random/lib/random.js
+const defaultRandomSource = new SystemRandomSource();
+function randomBytes(length, prng = defaultRandomSource) {
+	return prng.randomBytes(length);
+}
+
+//#endregion
+//#region ../../node_modules/.bun/@stablelib+x25519@2.0.1/node_modules/@stablelib/x25519/lib/x25519.js
+const PUBLIC_KEY_LENGTH = 32;
+const SECRET_KEY_LENGTH$1 = 32;
+function gf$1(init) {
+	const r = new Float64Array(16);
+	if (init) for (let i = 0; i < init.length; i++) r[i] = init[i];
+	return r;
+}
+const _9$1 = new Uint8Array(32);
+_9$1[0] = 9;
+const _121665 = gf$1([56129, 1]);
+function car25519$1(o) {
+	let c = 1;
+	for (let i = 0; i < 16; i++) {
+		let v = o[i] + c + 65535;
+		c = Math.floor(v / 65536);
+		o[i] = v - c * 65536;
+	}
+	o[0] += c - 1 + 37 * (c - 1);
+}
+function sel25519$1(p, q, b) {
+	const c = ~(b - 1);
+	for (let i = 0; i < 16; i++) {
+		const t = c & (p[i] ^ q[i]);
+		p[i] ^= t;
+		q[i] ^= t;
+	}
+}
+function pack25519$1(o, n) {
+	const m = gf$1();
+	const t = gf$1();
+	for (let i = 0; i < 16; i++) t[i] = n[i];
+	car25519$1(t);
+	car25519$1(t);
+	car25519$1(t);
+	for (let j = 0; j < 2; j++) {
+		m[0] = t[0] - 65517;
+		for (let i = 1; i < 15; i++) {
+			m[i] = t[i] - 65535 - (m[i - 1] >> 16 & 1);
+			m[i - 1] &= 65535;
 		}
-		function core_salsa20(o, p, k, c) {
-			var j0 = c[0] & 255 | (c[1] & 255) << 8 | (c[2] & 255) << 16 | (c[3] & 255) << 24, j1 = k[0] & 255 | (k[1] & 255) << 8 | (k[2] & 255) << 16 | (k[3] & 255) << 24, j2 = k[4] & 255 | (k[5] & 255) << 8 | (k[6] & 255) << 16 | (k[7] & 255) << 24, j3 = k[8] & 255 | (k[9] & 255) << 8 | (k[10] & 255) << 16 | (k[11] & 255) << 24, j4 = k[12] & 255 | (k[13] & 255) << 8 | (k[14] & 255) << 16 | (k[15] & 255) << 24, j5 = c[4] & 255 | (c[5] & 255) << 8 | (c[6] & 255) << 16 | (c[7] & 255) << 24, j6 = p[0] & 255 | (p[1] & 255) << 8 | (p[2] & 255) << 16 | (p[3] & 255) << 24, j7 = p[4] & 255 | (p[5] & 255) << 8 | (p[6] & 255) << 16 | (p[7] & 255) << 24, j8 = p[8] & 255 | (p[9] & 255) << 8 | (p[10] & 255) << 16 | (p[11] & 255) << 24, j9 = p[12] & 255 | (p[13] & 255) << 8 | (p[14] & 255) << 16 | (p[15] & 255) << 24, j10 = c[8] & 255 | (c[9] & 255) << 8 | (c[10] & 255) << 16 | (c[11] & 255) << 24, j11 = k[16] & 255 | (k[17] & 255) << 8 | (k[18] & 255) << 16 | (k[19] & 255) << 24, j12 = k[20] & 255 | (k[21] & 255) << 8 | (k[22] & 255) << 16 | (k[23] & 255) << 24, j13 = k[24] & 255 | (k[25] & 255) << 8 | (k[26] & 255) << 16 | (k[27] & 255) << 24, j14 = k[28] & 255 | (k[29] & 255) << 8 | (k[30] & 255) << 16 | (k[31] & 255) << 24, j15 = c[12] & 255 | (c[13] & 255) << 8 | (c[14] & 255) << 16 | (c[15] & 255) << 24;
-			var x0 = j0, x1 = j1, x2 = j2, x3 = j3, x4 = j4, x5 = j5, x6 = j6, x7 = j7, x8 = j8, x9 = j9, x10 = j10, x11 = j11, x12 = j12, x13 = j13, x14 = j14, x15 = j15, u;
-			for (var i = 0; i < 20; i += 2) {
-				u = x0 + x12 | 0;
-				x4 ^= u << 7 | u >>> 25;
-				u = x4 + x0 | 0;
-				x8 ^= u << 9 | u >>> 23;
-				u = x8 + x4 | 0;
-				x12 ^= u << 13 | u >>> 19;
-				u = x12 + x8 | 0;
-				x0 ^= u << 18 | u >>> 14;
-				u = x5 + x1 | 0;
-				x9 ^= u << 7 | u >>> 25;
-				u = x9 + x5 | 0;
-				x13 ^= u << 9 | u >>> 23;
-				u = x13 + x9 | 0;
-				x1 ^= u << 13 | u >>> 19;
-				u = x1 + x13 | 0;
-				x5 ^= u << 18 | u >>> 14;
-				u = x10 + x6 | 0;
-				x14 ^= u << 7 | u >>> 25;
-				u = x14 + x10 | 0;
-				x2 ^= u << 9 | u >>> 23;
-				u = x2 + x14 | 0;
-				x6 ^= u << 13 | u >>> 19;
-				u = x6 + x2 | 0;
-				x10 ^= u << 18 | u >>> 14;
-				u = x15 + x11 | 0;
-				x3 ^= u << 7 | u >>> 25;
-				u = x3 + x15 | 0;
-				x7 ^= u << 9 | u >>> 23;
-				u = x7 + x3 | 0;
-				x11 ^= u << 13 | u >>> 19;
-				u = x11 + x7 | 0;
-				x15 ^= u << 18 | u >>> 14;
-				u = x0 + x3 | 0;
-				x1 ^= u << 7 | u >>> 25;
-				u = x1 + x0 | 0;
-				x2 ^= u << 9 | u >>> 23;
-				u = x2 + x1 | 0;
-				x3 ^= u << 13 | u >>> 19;
-				u = x3 + x2 | 0;
-				x0 ^= u << 18 | u >>> 14;
-				u = x5 + x4 | 0;
-				x6 ^= u << 7 | u >>> 25;
-				u = x6 + x5 | 0;
-				x7 ^= u << 9 | u >>> 23;
-				u = x7 + x6 | 0;
-				x4 ^= u << 13 | u >>> 19;
-				u = x4 + x7 | 0;
-				x5 ^= u << 18 | u >>> 14;
-				u = x10 + x9 | 0;
-				x11 ^= u << 7 | u >>> 25;
-				u = x11 + x10 | 0;
-				x8 ^= u << 9 | u >>> 23;
-				u = x8 + x11 | 0;
-				x9 ^= u << 13 | u >>> 19;
-				u = x9 + x8 | 0;
-				x10 ^= u << 18 | u >>> 14;
-				u = x15 + x14 | 0;
-				x12 ^= u << 7 | u >>> 25;
-				u = x12 + x15 | 0;
-				x13 ^= u << 9 | u >>> 23;
-				u = x13 + x12 | 0;
-				x14 ^= u << 13 | u >>> 19;
-				u = x14 + x13 | 0;
-				x15 ^= u << 18 | u >>> 14;
+		m[15] = t[15] - 32767 - (m[14] >> 16 & 1);
+		const b = m[15] >> 16 & 1;
+		m[14] &= 65535;
+		sel25519$1(t, m, 1 - b);
+	}
+	for (let i = 0; i < 16; i++) {
+		o[2 * i] = t[i] & 255;
+		o[2 * i + 1] = t[i] >> 8;
+	}
+}
+function unpack25519$1(o, n) {
+	for (let i = 0; i < 16; i++) o[i] = n[2 * i] + (n[2 * i + 1] << 8);
+	o[15] &= 32767;
+}
+function add$1(o, a, b) {
+	for (let i = 0; i < 16; i++) o[i] = a[i] + b[i];
+}
+function sub$1(o, a, b) {
+	for (let i = 0; i < 16; i++) o[i] = a[i] - b[i];
+}
+function mul$1(o, a, b) {
+	let v, c, t0 = 0, t1 = 0, t2 = 0, t3 = 0, t4 = 0, t5 = 0, t6 = 0, t7 = 0, t8 = 0, t9 = 0, t10 = 0, t11 = 0, t12 = 0, t13 = 0, t14 = 0, t15 = 0, t16 = 0, t17 = 0, t18 = 0, t19 = 0, t20 = 0, t21 = 0, t22 = 0, t23 = 0, t24 = 0, t25 = 0, t26 = 0, t27 = 0, t28 = 0, t29 = 0, t30 = 0, b0 = b[0], b1 = b[1], b2 = b[2], b3 = b[3], b4 = b[4], b5 = b[5], b6 = b[6], b7 = b[7], b8 = b[8], b9 = b[9], b10 = b[10], b11 = b[11], b12 = b[12], b13 = b[13], b14 = b[14], b15 = b[15];
+	v = a[0];
+	t0 += v * b0;
+	t1 += v * b1;
+	t2 += v * b2;
+	t3 += v * b3;
+	t4 += v * b4;
+	t5 += v * b5;
+	t6 += v * b6;
+	t7 += v * b7;
+	t8 += v * b8;
+	t9 += v * b9;
+	t10 += v * b10;
+	t11 += v * b11;
+	t12 += v * b12;
+	t13 += v * b13;
+	t14 += v * b14;
+	t15 += v * b15;
+	v = a[1];
+	t1 += v * b0;
+	t2 += v * b1;
+	t3 += v * b2;
+	t4 += v * b3;
+	t5 += v * b4;
+	t6 += v * b5;
+	t7 += v * b6;
+	t8 += v * b7;
+	t9 += v * b8;
+	t10 += v * b9;
+	t11 += v * b10;
+	t12 += v * b11;
+	t13 += v * b12;
+	t14 += v * b13;
+	t15 += v * b14;
+	t16 += v * b15;
+	v = a[2];
+	t2 += v * b0;
+	t3 += v * b1;
+	t4 += v * b2;
+	t5 += v * b3;
+	t6 += v * b4;
+	t7 += v * b5;
+	t8 += v * b6;
+	t9 += v * b7;
+	t10 += v * b8;
+	t11 += v * b9;
+	t12 += v * b10;
+	t13 += v * b11;
+	t14 += v * b12;
+	t15 += v * b13;
+	t16 += v * b14;
+	t17 += v * b15;
+	v = a[3];
+	t3 += v * b0;
+	t4 += v * b1;
+	t5 += v * b2;
+	t6 += v * b3;
+	t7 += v * b4;
+	t8 += v * b5;
+	t9 += v * b6;
+	t10 += v * b7;
+	t11 += v * b8;
+	t12 += v * b9;
+	t13 += v * b10;
+	t14 += v * b11;
+	t15 += v * b12;
+	t16 += v * b13;
+	t17 += v * b14;
+	t18 += v * b15;
+	v = a[4];
+	t4 += v * b0;
+	t5 += v * b1;
+	t6 += v * b2;
+	t7 += v * b3;
+	t8 += v * b4;
+	t9 += v * b5;
+	t10 += v * b6;
+	t11 += v * b7;
+	t12 += v * b8;
+	t13 += v * b9;
+	t14 += v * b10;
+	t15 += v * b11;
+	t16 += v * b12;
+	t17 += v * b13;
+	t18 += v * b14;
+	t19 += v * b15;
+	v = a[5];
+	t5 += v * b0;
+	t6 += v * b1;
+	t7 += v * b2;
+	t8 += v * b3;
+	t9 += v * b4;
+	t10 += v * b5;
+	t11 += v * b6;
+	t12 += v * b7;
+	t13 += v * b8;
+	t14 += v * b9;
+	t15 += v * b10;
+	t16 += v * b11;
+	t17 += v * b12;
+	t18 += v * b13;
+	t19 += v * b14;
+	t20 += v * b15;
+	v = a[6];
+	t6 += v * b0;
+	t7 += v * b1;
+	t8 += v * b2;
+	t9 += v * b3;
+	t10 += v * b4;
+	t11 += v * b5;
+	t12 += v * b6;
+	t13 += v * b7;
+	t14 += v * b8;
+	t15 += v * b9;
+	t16 += v * b10;
+	t17 += v * b11;
+	t18 += v * b12;
+	t19 += v * b13;
+	t20 += v * b14;
+	t21 += v * b15;
+	v = a[7];
+	t7 += v * b0;
+	t8 += v * b1;
+	t9 += v * b2;
+	t10 += v * b3;
+	t11 += v * b4;
+	t12 += v * b5;
+	t13 += v * b6;
+	t14 += v * b7;
+	t15 += v * b8;
+	t16 += v * b9;
+	t17 += v * b10;
+	t18 += v * b11;
+	t19 += v * b12;
+	t20 += v * b13;
+	t21 += v * b14;
+	t22 += v * b15;
+	v = a[8];
+	t8 += v * b0;
+	t9 += v * b1;
+	t10 += v * b2;
+	t11 += v * b3;
+	t12 += v * b4;
+	t13 += v * b5;
+	t14 += v * b6;
+	t15 += v * b7;
+	t16 += v * b8;
+	t17 += v * b9;
+	t18 += v * b10;
+	t19 += v * b11;
+	t20 += v * b12;
+	t21 += v * b13;
+	t22 += v * b14;
+	t23 += v * b15;
+	v = a[9];
+	t9 += v * b0;
+	t10 += v * b1;
+	t11 += v * b2;
+	t12 += v * b3;
+	t13 += v * b4;
+	t14 += v * b5;
+	t15 += v * b6;
+	t16 += v * b7;
+	t17 += v * b8;
+	t18 += v * b9;
+	t19 += v * b10;
+	t20 += v * b11;
+	t21 += v * b12;
+	t22 += v * b13;
+	t23 += v * b14;
+	t24 += v * b15;
+	v = a[10];
+	t10 += v * b0;
+	t11 += v * b1;
+	t12 += v * b2;
+	t13 += v * b3;
+	t14 += v * b4;
+	t15 += v * b5;
+	t16 += v * b6;
+	t17 += v * b7;
+	t18 += v * b8;
+	t19 += v * b9;
+	t20 += v * b10;
+	t21 += v * b11;
+	t22 += v * b12;
+	t23 += v * b13;
+	t24 += v * b14;
+	t25 += v * b15;
+	v = a[11];
+	t11 += v * b0;
+	t12 += v * b1;
+	t13 += v * b2;
+	t14 += v * b3;
+	t15 += v * b4;
+	t16 += v * b5;
+	t17 += v * b6;
+	t18 += v * b7;
+	t19 += v * b8;
+	t20 += v * b9;
+	t21 += v * b10;
+	t22 += v * b11;
+	t23 += v * b12;
+	t24 += v * b13;
+	t25 += v * b14;
+	t26 += v * b15;
+	v = a[12];
+	t12 += v * b0;
+	t13 += v * b1;
+	t14 += v * b2;
+	t15 += v * b3;
+	t16 += v * b4;
+	t17 += v * b5;
+	t18 += v * b6;
+	t19 += v * b7;
+	t20 += v * b8;
+	t21 += v * b9;
+	t22 += v * b10;
+	t23 += v * b11;
+	t24 += v * b12;
+	t25 += v * b13;
+	t26 += v * b14;
+	t27 += v * b15;
+	v = a[13];
+	t13 += v * b0;
+	t14 += v * b1;
+	t15 += v * b2;
+	t16 += v * b3;
+	t17 += v * b4;
+	t18 += v * b5;
+	t19 += v * b6;
+	t20 += v * b7;
+	t21 += v * b8;
+	t22 += v * b9;
+	t23 += v * b10;
+	t24 += v * b11;
+	t25 += v * b12;
+	t26 += v * b13;
+	t27 += v * b14;
+	t28 += v * b15;
+	v = a[14];
+	t14 += v * b0;
+	t15 += v * b1;
+	t16 += v * b2;
+	t17 += v * b3;
+	t18 += v * b4;
+	t19 += v * b5;
+	t20 += v * b6;
+	t21 += v * b7;
+	t22 += v * b8;
+	t23 += v * b9;
+	t24 += v * b10;
+	t25 += v * b11;
+	t26 += v * b12;
+	t27 += v * b13;
+	t28 += v * b14;
+	t29 += v * b15;
+	v = a[15];
+	t15 += v * b0;
+	t16 += v * b1;
+	t17 += v * b2;
+	t18 += v * b3;
+	t19 += v * b4;
+	t20 += v * b5;
+	t21 += v * b6;
+	t22 += v * b7;
+	t23 += v * b8;
+	t24 += v * b9;
+	t25 += v * b10;
+	t26 += v * b11;
+	t27 += v * b12;
+	t28 += v * b13;
+	t29 += v * b14;
+	t30 += v * b15;
+	t0 += 38 * t16;
+	t1 += 38 * t17;
+	t2 += 38 * t18;
+	t3 += 38 * t19;
+	t4 += 38 * t20;
+	t5 += 38 * t21;
+	t6 += 38 * t22;
+	t7 += 38 * t23;
+	t8 += 38 * t24;
+	t9 += 38 * t25;
+	t10 += 38 * t26;
+	t11 += 38 * t27;
+	t12 += 38 * t28;
+	t13 += 38 * t29;
+	t14 += 38 * t30;
+	c = 1;
+	v = t0 + c + 65535;
+	c = Math.floor(v / 65536);
+	t0 = v - c * 65536;
+	v = t1 + c + 65535;
+	c = Math.floor(v / 65536);
+	t1 = v - c * 65536;
+	v = t2 + c + 65535;
+	c = Math.floor(v / 65536);
+	t2 = v - c * 65536;
+	v = t3 + c + 65535;
+	c = Math.floor(v / 65536);
+	t3 = v - c * 65536;
+	v = t4 + c + 65535;
+	c = Math.floor(v / 65536);
+	t4 = v - c * 65536;
+	v = t5 + c + 65535;
+	c = Math.floor(v / 65536);
+	t5 = v - c * 65536;
+	v = t6 + c + 65535;
+	c = Math.floor(v / 65536);
+	t6 = v - c * 65536;
+	v = t7 + c + 65535;
+	c = Math.floor(v / 65536);
+	t7 = v - c * 65536;
+	v = t8 + c + 65535;
+	c = Math.floor(v / 65536);
+	t8 = v - c * 65536;
+	v = t9 + c + 65535;
+	c = Math.floor(v / 65536);
+	t9 = v - c * 65536;
+	v = t10 + c + 65535;
+	c = Math.floor(v / 65536);
+	t10 = v - c * 65536;
+	v = t11 + c + 65535;
+	c = Math.floor(v / 65536);
+	t11 = v - c * 65536;
+	v = t12 + c + 65535;
+	c = Math.floor(v / 65536);
+	t12 = v - c * 65536;
+	v = t13 + c + 65535;
+	c = Math.floor(v / 65536);
+	t13 = v - c * 65536;
+	v = t14 + c + 65535;
+	c = Math.floor(v / 65536);
+	t14 = v - c * 65536;
+	v = t15 + c + 65535;
+	c = Math.floor(v / 65536);
+	t15 = v - c * 65536;
+	t0 += c - 1 + 37 * (c - 1);
+	c = 1;
+	v = t0 + c + 65535;
+	c = Math.floor(v / 65536);
+	t0 = v - c * 65536;
+	v = t1 + c + 65535;
+	c = Math.floor(v / 65536);
+	t1 = v - c * 65536;
+	v = t2 + c + 65535;
+	c = Math.floor(v / 65536);
+	t2 = v - c * 65536;
+	v = t3 + c + 65535;
+	c = Math.floor(v / 65536);
+	t3 = v - c * 65536;
+	v = t4 + c + 65535;
+	c = Math.floor(v / 65536);
+	t4 = v - c * 65536;
+	v = t5 + c + 65535;
+	c = Math.floor(v / 65536);
+	t5 = v - c * 65536;
+	v = t6 + c + 65535;
+	c = Math.floor(v / 65536);
+	t6 = v - c * 65536;
+	v = t7 + c + 65535;
+	c = Math.floor(v / 65536);
+	t7 = v - c * 65536;
+	v = t8 + c + 65535;
+	c = Math.floor(v / 65536);
+	t8 = v - c * 65536;
+	v = t9 + c + 65535;
+	c = Math.floor(v / 65536);
+	t9 = v - c * 65536;
+	v = t10 + c + 65535;
+	c = Math.floor(v / 65536);
+	t10 = v - c * 65536;
+	v = t11 + c + 65535;
+	c = Math.floor(v / 65536);
+	t11 = v - c * 65536;
+	v = t12 + c + 65535;
+	c = Math.floor(v / 65536);
+	t12 = v - c * 65536;
+	v = t13 + c + 65535;
+	c = Math.floor(v / 65536);
+	t13 = v - c * 65536;
+	v = t14 + c + 65535;
+	c = Math.floor(v / 65536);
+	t14 = v - c * 65536;
+	v = t15 + c + 65535;
+	c = Math.floor(v / 65536);
+	t15 = v - c * 65536;
+	t0 += c - 1 + 37 * (c - 1);
+	o[0] = t0;
+	o[1] = t1;
+	o[2] = t2;
+	o[3] = t3;
+	o[4] = t4;
+	o[5] = t5;
+	o[6] = t6;
+	o[7] = t7;
+	o[8] = t8;
+	o[9] = t9;
+	o[10] = t10;
+	o[11] = t11;
+	o[12] = t12;
+	o[13] = t13;
+	o[14] = t14;
+	o[15] = t15;
+}
+function square$1(o, a) {
+	mul$1(o, a, a);
+}
+function inv25519$1(o, inp) {
+	const c = gf$1();
+	for (let i = 0; i < 16; i++) c[i] = inp[i];
+	for (let i = 253; i >= 0; i--) {
+		square$1(c, c);
+		if (i !== 2 && i !== 4) mul$1(c, c, inp);
+	}
+	for (let i = 0; i < 16; i++) o[i] = c[i];
+}
+function scalarMult(n, p) {
+	const z = new Uint8Array(32);
+	const x = new Float64Array(80);
+	const a = gf$1(), b = gf$1(), c = gf$1(), d = gf$1(), e = gf$1(), f = gf$1();
+	for (let i = 0; i < 31; i++) z[i] = n[i];
+	z[31] = n[31] & 127 | 64;
+	z[0] &= 248;
+	unpack25519$1(x, p);
+	for (let i = 0; i < 16; i++) b[i] = x[i];
+	a[0] = d[0] = 1;
+	for (let i = 254; i >= 0; --i) {
+		const r = z[i >>> 3] >>> (i & 7) & 1;
+		sel25519$1(a, b, r);
+		sel25519$1(c, d, r);
+		add$1(e, a, c);
+		sub$1(a, a, c);
+		add$1(c, b, d);
+		sub$1(b, b, d);
+		square$1(d, e);
+		square$1(f, a);
+		mul$1(a, c, a);
+		mul$1(c, b, e);
+		add$1(e, a, c);
+		sub$1(a, a, c);
+		square$1(b, a);
+		sub$1(c, d, f);
+		mul$1(a, c, _121665);
+		add$1(a, a, d);
+		mul$1(c, c, a);
+		mul$1(a, d, f);
+		mul$1(d, b, x);
+		square$1(b, e);
+		sel25519$1(a, b, r);
+		sel25519$1(c, d, r);
+	}
+	for (let i = 0; i < 16; i++) {
+		x[i + 16] = a[i];
+		x[i + 32] = c[i];
+		x[i + 48] = b[i];
+		x[i + 64] = d[i];
+	}
+	const x32 = x.subarray(32);
+	const x16 = x.subarray(16);
+	inv25519$1(x32, x32);
+	mul$1(x16, x16, x32);
+	const q = new Uint8Array(32);
+	pack25519$1(q, x16);
+	return q;
+}
+function scalarMultBase(n) {
+	return scalarMult(n, _9$1);
+}
+function generateKeyPairFromSeed$1(seed) {
+	if (seed.length !== 32) throw new Error(`x25519: seed must be ${32} bytes`);
+	const secretKey = new Uint8Array(seed);
+	return {
+		publicKey: scalarMultBase(secretKey),
+		secretKey
+	};
+}
+function generateKeyPair$3(prng) {
+	const seed = randomBytes(32, prng);
+	const result = generateKeyPairFromSeed$1(seed);
+	wipe(seed);
+	return result;
+}
+/**
+* Returns a shared key between our secret key and a peer's public key.
+*
+* Throws an error if the given keys are of wrong length.
+*
+* If rejectZero is true throws if the calculated shared key is all-zero.
+* From RFC 7748:
+*
+* > Protocol designers using Diffie-Hellman over the curves defined in
+* > this document must not assume "contributory behavior".  Specially,
+* > contributory behavior means that both parties' private keys
+* > contribute to the resulting shared key.  Since curve25519 and
+* > curve448 have cofactors of 8 and 4 (respectively), an input point of
+* > small order will eliminate any contribution from the other party's
+* > private key.  This situation can be detected by checking for the all-
+* > zero output, which implementations MAY do, as specified in Section 6.
+* > However, a large number of existing implementations do not do this.
+*
+* IMPORTANT: the returned key is a raw result of scalar multiplication.
+* To use it as a key material, hash it with a cryptographic hash function.
+*/
+function sharedKey(mySecretKey, theirPublicKey, rejectZero = false) {
+	if (mySecretKey.length !== 32) throw new Error("X25519: incorrect secret key length");
+	if (theirPublicKey.length !== 32) throw new Error("X25519: incorrect public key length");
+	const result = scalarMult(mySecretKey, theirPublicKey);
+	if (rejectZero) {
+		let zeros = 0;
+		for (let i = 0; i < result.length; i++) zeros |= result[i];
+		if (zeros === 0) throw new Error("X25519: invalid shared key");
+	}
+	return result;
+}
+
+//#endregion
+//#region src/curve25519.ts
+var curve25519_exports = /* @__PURE__ */ __exportAll({
+	generateKeyPair: () => generateKeyPair$2,
+	generateSharedSecKey: () => generateSharedSecKey
+});
+function generateKeyPair$2() {
+	return generateKeyPair$3();
+}
+function generateSharedSecKey(priKey, pubKey) {
+	return sharedKey(priKey, pubKey);
+}
+
+//#endregion
+//#region ../../node_modules/.bun/@stablelib+sha512@2.0.1/node_modules/@stablelib/sha512/lib/sha512.js
+const DIGEST_LENGTH = 64;
+const BLOCK_SIZE = 128;
+/**
+* SHA-2-512 cryptographic hash algorithm.
+*/
+var SHA512 = class {
+	/** Length of hash output */
+	digestLength = 64;
+	/** Block size */
+	blockSize = 128;
+	_stateHi = new Int32Array(8);
+	_stateLo = new Int32Array(8);
+	_tempHi = new Int32Array(16);
+	_tempLo = new Int32Array(16);
+	_buffer = new Uint8Array(256);
+	_bufferLength = 0;
+	_bytesHashed = 0;
+	_finished = false;
+	constructor() {
+		this.reset();
+	}
+	_initState() {
+		this._stateHi[0] = 1779033703;
+		this._stateHi[1] = 3144134277;
+		this._stateHi[2] = 1013904242;
+		this._stateHi[3] = 2773480762;
+		this._stateHi[4] = 1359893119;
+		this._stateHi[5] = 2600822924;
+		this._stateHi[6] = 528734635;
+		this._stateHi[7] = 1541459225;
+		this._stateLo[0] = 4089235720;
+		this._stateLo[1] = 2227873595;
+		this._stateLo[2] = 4271175723;
+		this._stateLo[3] = 1595750129;
+		this._stateLo[4] = 2917565137;
+		this._stateLo[5] = 725511199;
+		this._stateLo[6] = 4215389547;
+		this._stateLo[7] = 327033209;
+	}
+	/**
+	* Resets hash state making it possible
+	* to re-use this instance to hash other data.
+	*/
+	reset() {
+		this._initState();
+		this._bufferLength = 0;
+		this._bytesHashed = 0;
+		this._finished = false;
+		return this;
+	}
+	/**
+	* Cleans internal buffers and resets hash state.
+	*/
+	clean() {
+		wipe(this._buffer);
+		wipe(this._tempHi);
+		wipe(this._tempLo);
+		this.reset();
+	}
+	/**
+	* Updates hash state with the given data.
+	*
+	* Throws error when trying to update already finalized hash:
+	* instance must be reset to update it again.
+	*/
+	update(data, dataLength = data.length) {
+		if (this._finished) throw new Error("SHA512: can't update because hash was finished.");
+		let dataPos = 0;
+		this._bytesHashed += dataLength;
+		if (this._bufferLength > 0) {
+			while (this._bufferLength < 128 && dataLength > 0) {
+				this._buffer[this._bufferLength++] = data[dataPos++];
+				dataLength--;
 			}
-			x0 = x0 + j0 | 0;
-			x1 = x1 + j1 | 0;
-			x2 = x2 + j2 | 0;
-			x3 = x3 + j3 | 0;
-			x4 = x4 + j4 | 0;
-			x5 = x5 + j5 | 0;
-			x6 = x6 + j6 | 0;
-			x7 = x7 + j7 | 0;
-			x8 = x8 + j8 | 0;
-			x9 = x9 + j9 | 0;
-			x10 = x10 + j10 | 0;
-			x11 = x11 + j11 | 0;
-			x12 = x12 + j12 | 0;
-			x13 = x13 + j13 | 0;
-			x14 = x14 + j14 | 0;
-			x15 = x15 + j15 | 0;
-			o[0] = x0 >>> 0 & 255;
-			o[1] = x0 >>> 8 & 255;
-			o[2] = x0 >>> 16 & 255;
-			o[3] = x0 >>> 24 & 255;
-			o[4] = x1 >>> 0 & 255;
-			o[5] = x1 >>> 8 & 255;
-			o[6] = x1 >>> 16 & 255;
-			o[7] = x1 >>> 24 & 255;
-			o[8] = x2 >>> 0 & 255;
-			o[9] = x2 >>> 8 & 255;
-			o[10] = x2 >>> 16 & 255;
-			o[11] = x2 >>> 24 & 255;
-			o[12] = x3 >>> 0 & 255;
-			o[13] = x3 >>> 8 & 255;
-			o[14] = x3 >>> 16 & 255;
-			o[15] = x3 >>> 24 & 255;
-			o[16] = x4 >>> 0 & 255;
-			o[17] = x4 >>> 8 & 255;
-			o[18] = x4 >>> 16 & 255;
-			o[19] = x4 >>> 24 & 255;
-			o[20] = x5 >>> 0 & 255;
-			o[21] = x5 >>> 8 & 255;
-			o[22] = x5 >>> 16 & 255;
-			o[23] = x5 >>> 24 & 255;
-			o[24] = x6 >>> 0 & 255;
-			o[25] = x6 >>> 8 & 255;
-			o[26] = x6 >>> 16 & 255;
-			o[27] = x6 >>> 24 & 255;
-			o[28] = x7 >>> 0 & 255;
-			o[29] = x7 >>> 8 & 255;
-			o[30] = x7 >>> 16 & 255;
-			o[31] = x7 >>> 24 & 255;
-			o[32] = x8 >>> 0 & 255;
-			o[33] = x8 >>> 8 & 255;
-			o[34] = x8 >>> 16 & 255;
-			o[35] = x8 >>> 24 & 255;
-			o[36] = x9 >>> 0 & 255;
-			o[37] = x9 >>> 8 & 255;
-			o[38] = x9 >>> 16 & 255;
-			o[39] = x9 >>> 24 & 255;
-			o[40] = x10 >>> 0 & 255;
-			o[41] = x10 >>> 8 & 255;
-			o[42] = x10 >>> 16 & 255;
-			o[43] = x10 >>> 24 & 255;
-			o[44] = x11 >>> 0 & 255;
-			o[45] = x11 >>> 8 & 255;
-			o[46] = x11 >>> 16 & 255;
-			o[47] = x11 >>> 24 & 255;
-			o[48] = x12 >>> 0 & 255;
-			o[49] = x12 >>> 8 & 255;
-			o[50] = x12 >>> 16 & 255;
-			o[51] = x12 >>> 24 & 255;
-			o[52] = x13 >>> 0 & 255;
-			o[53] = x13 >>> 8 & 255;
-			o[54] = x13 >>> 16 & 255;
-			o[55] = x13 >>> 24 & 255;
-			o[56] = x14 >>> 0 & 255;
-			o[57] = x14 >>> 8 & 255;
-			o[58] = x14 >>> 16 & 255;
-			o[59] = x14 >>> 24 & 255;
-			o[60] = x15 >>> 0 & 255;
-			o[61] = x15 >>> 8 & 255;
-			o[62] = x15 >>> 16 & 255;
-			o[63] = x15 >>> 24 & 255;
-		}
-		function core_hsalsa20(o, p, k, c) {
-			var j0 = c[0] & 255 | (c[1] & 255) << 8 | (c[2] & 255) << 16 | (c[3] & 255) << 24, j1 = k[0] & 255 | (k[1] & 255) << 8 | (k[2] & 255) << 16 | (k[3] & 255) << 24, j2 = k[4] & 255 | (k[5] & 255) << 8 | (k[6] & 255) << 16 | (k[7] & 255) << 24, j3 = k[8] & 255 | (k[9] & 255) << 8 | (k[10] & 255) << 16 | (k[11] & 255) << 24, j4 = k[12] & 255 | (k[13] & 255) << 8 | (k[14] & 255) << 16 | (k[15] & 255) << 24, j5 = c[4] & 255 | (c[5] & 255) << 8 | (c[6] & 255) << 16 | (c[7] & 255) << 24, j6 = p[0] & 255 | (p[1] & 255) << 8 | (p[2] & 255) << 16 | (p[3] & 255) << 24, j7 = p[4] & 255 | (p[5] & 255) << 8 | (p[6] & 255) << 16 | (p[7] & 255) << 24, j8 = p[8] & 255 | (p[9] & 255) << 8 | (p[10] & 255) << 16 | (p[11] & 255) << 24, j9 = p[12] & 255 | (p[13] & 255) << 8 | (p[14] & 255) << 16 | (p[15] & 255) << 24, j10 = c[8] & 255 | (c[9] & 255) << 8 | (c[10] & 255) << 16 | (c[11] & 255) << 24, j11 = k[16] & 255 | (k[17] & 255) << 8 | (k[18] & 255) << 16 | (k[19] & 255) << 24, j12 = k[20] & 255 | (k[21] & 255) << 8 | (k[22] & 255) << 16 | (k[23] & 255) << 24, j13 = k[24] & 255 | (k[25] & 255) << 8 | (k[26] & 255) << 16 | (k[27] & 255) << 24, j14 = k[28] & 255 | (k[29] & 255) << 8 | (k[30] & 255) << 16 | (k[31] & 255) << 24, j15 = c[12] & 255 | (c[13] & 255) << 8 | (c[14] & 255) << 16 | (c[15] & 255) << 24;
-			var x0 = j0, x1 = j1, x2 = j2, x3 = j3, x4 = j4, x5 = j5, x6 = j6, x7 = j7, x8 = j8, x9 = j9, x10 = j10, x11 = j11, x12 = j12, x13 = j13, x14 = j14, x15 = j15, u;
-			for (var i = 0; i < 20; i += 2) {
-				u = x0 + x12 | 0;
-				x4 ^= u << 7 | u >>> 25;
-				u = x4 + x0 | 0;
-				x8 ^= u << 9 | u >>> 23;
-				u = x8 + x4 | 0;
-				x12 ^= u << 13 | u >>> 19;
-				u = x12 + x8 | 0;
-				x0 ^= u << 18 | u >>> 14;
-				u = x5 + x1 | 0;
-				x9 ^= u << 7 | u >>> 25;
-				u = x9 + x5 | 0;
-				x13 ^= u << 9 | u >>> 23;
-				u = x13 + x9 | 0;
-				x1 ^= u << 13 | u >>> 19;
-				u = x1 + x13 | 0;
-				x5 ^= u << 18 | u >>> 14;
-				u = x10 + x6 | 0;
-				x14 ^= u << 7 | u >>> 25;
-				u = x14 + x10 | 0;
-				x2 ^= u << 9 | u >>> 23;
-				u = x2 + x14 | 0;
-				x6 ^= u << 13 | u >>> 19;
-				u = x6 + x2 | 0;
-				x10 ^= u << 18 | u >>> 14;
-				u = x15 + x11 | 0;
-				x3 ^= u << 7 | u >>> 25;
-				u = x3 + x15 | 0;
-				x7 ^= u << 9 | u >>> 23;
-				u = x7 + x3 | 0;
-				x11 ^= u << 13 | u >>> 19;
-				u = x11 + x7 | 0;
-				x15 ^= u << 18 | u >>> 14;
-				u = x0 + x3 | 0;
-				x1 ^= u << 7 | u >>> 25;
-				u = x1 + x0 | 0;
-				x2 ^= u << 9 | u >>> 23;
-				u = x2 + x1 | 0;
-				x3 ^= u << 13 | u >>> 19;
-				u = x3 + x2 | 0;
-				x0 ^= u << 18 | u >>> 14;
-				u = x5 + x4 | 0;
-				x6 ^= u << 7 | u >>> 25;
-				u = x6 + x5 | 0;
-				x7 ^= u << 9 | u >>> 23;
-				u = x7 + x6 | 0;
-				x4 ^= u << 13 | u >>> 19;
-				u = x4 + x7 | 0;
-				x5 ^= u << 18 | u >>> 14;
-				u = x10 + x9 | 0;
-				x11 ^= u << 7 | u >>> 25;
-				u = x11 + x10 | 0;
-				x8 ^= u << 9 | u >>> 23;
-				u = x8 + x11 | 0;
-				x9 ^= u << 13 | u >>> 19;
-				u = x9 + x8 | 0;
-				x10 ^= u << 18 | u >>> 14;
-				u = x15 + x14 | 0;
-				x12 ^= u << 7 | u >>> 25;
-				u = x12 + x15 | 0;
-				x13 ^= u << 9 | u >>> 23;
-				u = x13 + x12 | 0;
-				x14 ^= u << 13 | u >>> 19;
-				u = x14 + x13 | 0;
-				x15 ^= u << 18 | u >>> 14;
+			if (this._bufferLength === this.blockSize) {
+				hashBlocks(this._tempHi, this._tempLo, this._stateHi, this._stateLo, this._buffer, 0, this.blockSize);
+				this._bufferLength = 0;
 			}
-			o[0] = x0 >>> 0 & 255;
-			o[1] = x0 >>> 8 & 255;
-			o[2] = x0 >>> 16 & 255;
-			o[3] = x0 >>> 24 & 255;
-			o[4] = x5 >>> 0 & 255;
-			o[5] = x5 >>> 8 & 255;
-			o[6] = x5 >>> 16 & 255;
-			o[7] = x5 >>> 24 & 255;
-			o[8] = x10 >>> 0 & 255;
-			o[9] = x10 >>> 8 & 255;
-			o[10] = x10 >>> 16 & 255;
-			o[11] = x10 >>> 24 & 255;
-			o[12] = x15 >>> 0 & 255;
-			o[13] = x15 >>> 8 & 255;
-			o[14] = x15 >>> 16 & 255;
-			o[15] = x15 >>> 24 & 255;
-			o[16] = x6 >>> 0 & 255;
-			o[17] = x6 >>> 8 & 255;
-			o[18] = x6 >>> 16 & 255;
-			o[19] = x6 >>> 24 & 255;
-			o[20] = x7 >>> 0 & 255;
-			o[21] = x7 >>> 8 & 255;
-			o[22] = x7 >>> 16 & 255;
-			o[23] = x7 >>> 24 & 255;
-			o[24] = x8 >>> 0 & 255;
-			o[25] = x8 >>> 8 & 255;
-			o[26] = x8 >>> 16 & 255;
-			o[27] = x8 >>> 24 & 255;
-			o[28] = x9 >>> 0 & 255;
-			o[29] = x9 >>> 8 & 255;
-			o[30] = x9 >>> 16 & 255;
-			o[31] = x9 >>> 24 & 255;
-		}
-		function crypto_core_salsa20(out, inp, k, c) {
-			core_salsa20(out, inp, k, c);
-		}
-		function crypto_core_hsalsa20(out, inp, k, c) {
-			core_hsalsa20(out, inp, k, c);
 		}
-		var sigma = new Uint8Array([
-			101,
-			120,
-			112,
-			97,
-			110,
-			100,
-			32,
-			51,
-			50,
-			45,
-			98,
-			121,
-			116,
-			101,
-			32,
-			107
-		]);
-		function crypto_stream_salsa20_xor(c, cpos, m, mpos, b, n, k) {
-			var z = new Uint8Array(16), x = new Uint8Array(64);
-			var u, i;
-			for (i = 0; i < 16; i++) z[i] = 0;
-			for (i = 0; i < 8; i++) z[i] = n[i];
-			while (b >= 64) {
-				crypto_core_salsa20(x, z, k, sigma);
-				for (i = 0; i < 64; i++) c[cpos + i] = m[mpos + i] ^ x[i];
-				u = 1;
-				for (i = 8; i < 16; i++) {
-					u = u + (z[i] & 255) | 0;
-					z[i] = u & 255;
-					u >>>= 8;
-				}
-				b -= 64;
-				cpos += 64;
-				mpos += 64;
-			}
-			if (b > 0) {
-				crypto_core_salsa20(x, z, k, sigma);
-				for (i = 0; i < b; i++) c[cpos + i] = m[mpos + i] ^ x[i];
-			}
-			return 0;
+		if (dataLength >= this.blockSize) {
+			dataPos = hashBlocks(this._tempHi, this._tempLo, this._stateHi, this._stateLo, data, dataPos, dataLength);
+			dataLength %= this.blockSize;
 		}
-		function crypto_stream_salsa20(c, cpos, b, n, k) {
-			var z = new Uint8Array(16), x = new Uint8Array(64);
-			var u, i;
-			for (i = 0; i < 16; i++) z[i] = 0;
-			for (i = 0; i < 8; i++) z[i] = n[i];
-			while (b >= 64) {
-				crypto_core_salsa20(x, z, k, sigma);
-				for (i = 0; i < 64; i++) c[cpos + i] = x[i];
-				u = 1;
-				for (i = 8; i < 16; i++) {
-					u = u + (z[i] & 255) | 0;
-					z[i] = u & 255;
-					u >>>= 8;
-				}
-				b -= 64;
-				cpos += 64;
-			}
-			if (b > 0) {
-				crypto_core_salsa20(x, z, k, sigma);
-				for (i = 0; i < b; i++) c[cpos + i] = x[i];
-			}
-			return 0;
+		while (dataLength > 0) {
+			this._buffer[this._bufferLength++] = data[dataPos++];
+			dataLength--;
 		}
-		function crypto_stream(c, cpos, d, n, k) {
-			var s = new Uint8Array(32);
-			crypto_core_hsalsa20(s, n, k, sigma);
-			var sn = new Uint8Array(8);
-			for (var i = 0; i < 8; i++) sn[i] = n[i + 16];
-			return crypto_stream_salsa20(c, cpos, d, sn, s);
+		return this;
+	}
+	/**
+	* Finalizes hash state and puts hash into out.
+	* If hash was already finalized, puts the same value.
+	*/
+	finish(out) {
+		if (!this._finished) {
+			const bytesHashed = this._bytesHashed;
+			const left = this._bufferLength;
+			const bitLenHi = bytesHashed / 536870912 | 0;
+			const bitLenLo = bytesHashed << 3;
+			const padLength = bytesHashed % 128 < 112 ? 128 : 256;
+			this._buffer[left] = 128;
+			for (let i = left + 1; i < padLength - 8; i++) this._buffer[i] = 0;
+			writeUint32BE(bitLenHi, this._buffer, padLength - 8);
+			writeUint32BE(bitLenLo, this._buffer, padLength - 4);
+			hashBlocks(this._tempHi, this._tempLo, this._stateHi, this._stateLo, this._buffer, 0, padLength);
+			this._finished = true;
 		}
-		function crypto_stream_xor(c, cpos, m, mpos, d, n, k) {
-			var s = new Uint8Array(32);
-			crypto_core_hsalsa20(s, n, k, sigma);
-			var sn = new Uint8Array(8);
-			for (var i = 0; i < 8; i++) sn[i] = n[i + 16];
-			return crypto_stream_salsa20_xor(c, cpos, m, mpos, d, sn, s);
+		for (let i = 0; i < this.digestLength / 8; i++) {
+			writeUint32BE(this._stateHi[i], out, i * 8);
+			writeUint32BE(this._stateLo[i], out, i * 8 + 4);
 		}
-		var poly1305 = function(key) {
-			this.buffer = new Uint8Array(16);
-			this.r = new Uint16Array(10);
-			this.h = new Uint16Array(10);
-			this.pad = new Uint16Array(8);
-			this.leftover = 0;
-			this.fin = 0;
-			var t0 = key[0] & 255 | (key[1] & 255) << 8, t1, t2, t3, t4, t5, t6, t7;
-			this.r[0] = t0 & 8191;
-			t1 = key[2] & 255 | (key[3] & 255) << 8;
-			this.r[1] = (t0 >>> 13 | t1 << 3) & 8191;
-			t2 = key[4] & 255 | (key[5] & 255) << 8;
-			this.r[2] = (t1 >>> 10 | t2 << 6) & 7939;
-			t3 = key[6] & 255 | (key[7] & 255) << 8;
-			this.r[3] = (t2 >>> 7 | t3 << 9) & 8191;
-			t4 = key[8] & 255 | (key[9] & 255) << 8;
-			this.r[4] = (t3 >>> 4 | t4 << 12) & 255;
-			this.r[5] = t4 >>> 1 & 8190;
-			t5 = key[10] & 255 | (key[11] & 255) << 8;
-			this.r[6] = (t4 >>> 14 | t5 << 2) & 8191;
-			t6 = key[12] & 255 | (key[13] & 255) << 8;
-			this.r[7] = (t5 >>> 11 | t6 << 5) & 8065;
-			t7 = key[14] & 255 | (key[15] & 255) << 8;
-			this.r[8] = (t6 >>> 8 | t7 << 8) & 8191;
-			this.r[9] = t7 >>> 5 & 127;
-			this.pad[0] = key[16] & 255 | (key[17] & 255) << 8;
-			this.pad[1] = key[18] & 255 | (key[19] & 255) << 8;
-			this.pad[2] = key[20] & 255 | (key[21] & 255) << 8;
-			this.pad[3] = key[22] & 255 | (key[23] & 255) << 8;
-			this.pad[4] = key[24] & 255 | (key[25] & 255) << 8;
-			this.pad[5] = key[26] & 255 | (key[27] & 255) << 8;
-			this.pad[6] = key[28] & 255 | (key[29] & 255) << 8;
-			this.pad[7] = key[30] & 255 | (key[31] & 255) << 8;
-		};
-		poly1305.prototype.blocks = function(m, mpos, bytes) {
-			var hibit = this.fin ? 0 : 2048;
-			var t0, t1, t2, t3, t4, t5, t6, t7, c;
-			var d0, d1, d2, d3, d4, d5, d6, d7, d8, d9;
-			var h0 = this.h[0], h1 = this.h[1], h2 = this.h[2], h3 = this.h[3], h4 = this.h[4], h5 = this.h[5], h6 = this.h[6], h7 = this.h[7], h8 = this.h[8], h9 = this.h[9];
-			var r0 = this.r[0], r1 = this.r[1], r2 = this.r[2], r3 = this.r[3], r4 = this.r[4], r5 = this.r[5], r6 = this.r[6], r7 = this.r[7], r8 = this.r[8], r9 = this.r[9];
-			while (bytes >= 16) {
-				t0 = m[mpos + 0] & 255 | (m[mpos + 1] & 255) << 8;
-				h0 += t0 & 8191;
-				t1 = m[mpos + 2] & 255 | (m[mpos + 3] & 255) << 8;
-				h1 += (t0 >>> 13 | t1 << 3) & 8191;
-				t2 = m[mpos + 4] & 255 | (m[mpos + 5] & 255) << 8;
-				h2 += (t1 >>> 10 | t2 << 6) & 8191;
-				t3 = m[mpos + 6] & 255 | (m[mpos + 7] & 255) << 8;
-				h3 += (t2 >>> 7 | t3 << 9) & 8191;
-				t4 = m[mpos + 8] & 255 | (m[mpos + 9] & 255) << 8;
-				h4 += (t3 >>> 4 | t4 << 12) & 8191;
-				h5 += t4 >>> 1 & 8191;
-				t5 = m[mpos + 10] & 255 | (m[mpos + 11] & 255) << 8;
-				h6 += (t4 >>> 14 | t5 << 2) & 8191;
-				t6 = m[mpos + 12] & 255 | (m[mpos + 13] & 255) << 8;
-				h7 += (t5 >>> 11 | t6 << 5) & 8191;
-				t7 = m[mpos + 14] & 255 | (m[mpos + 15] & 255) << 8;
-				h8 += (t6 >>> 8 | t7 << 8) & 8191;
-				h9 += t7 >>> 5 | hibit;
-				c = 0;
-				d0 = c;
-				d0 += h0 * r0;
-				d0 += h1 * (5 * r9);
-				d0 += h2 * (5 * r8);
-				d0 += h3 * (5 * r7);
-				d0 += h4 * (5 * r6);
-				c = d0 >>> 13;
-				d0 &= 8191;
-				d0 += h5 * (5 * r5);
-				d0 += h6 * (5 * r4);
-				d0 += h7 * (5 * r3);
-				d0 += h8 * (5 * r2);
-				d0 += h9 * (5 * r1);
-				c += d0 >>> 13;
-				d0 &= 8191;
-				d1 = c;
-				d1 += h0 * r1;
-				d1 += h1 * r0;
-				d1 += h2 * (5 * r9);
-				d1 += h3 * (5 * r8);
-				d1 += h4 * (5 * r7);
-				c = d1 >>> 13;
-				d1 &= 8191;
-				d1 += h5 * (5 * r6);
-				d1 += h6 * (5 * r5);
-				d1 += h7 * (5 * r4);
-				d1 += h8 * (5 * r3);
-				d1 += h9 * (5 * r2);
-				c += d1 >>> 13;
-				d1 &= 8191;
-				d2 = c;
-				d2 += h0 * r2;
-				d2 += h1 * r1;
-				d2 += h2 * r0;
-				d2 += h3 * (5 * r9);
-				d2 += h4 * (5 * r8);
-				c = d2 >>> 13;
-				d2 &= 8191;
-				d2 += h5 * (5 * r7);
-				d2 += h6 * (5 * r6);
-				d2 += h7 * (5 * r5);
-				d2 += h8 * (5 * r4);
-				d2 += h9 * (5 * r3);
-				c += d2 >>> 13;
-				d2 &= 8191;
-				d3 = c;
-				d3 += h0 * r3;
-				d3 += h1 * r2;
-				d3 += h2 * r1;
-				d3 += h3 * r0;
-				d3 += h4 * (5 * r9);
-				c = d3 >>> 13;
-				d3 &= 8191;
-				d3 += h5 * (5 * r8);
-				d3 += h6 * (5 * r7);
-				d3 += h7 * (5 * r6);
-				d3 += h8 * (5 * r5);
-				d3 += h9 * (5 * r4);
-				c += d3 >>> 13;
-				d3 &= 8191;
-				d4 = c;
-				d4 += h0 * r4;
-				d4 += h1 * r3;
-				d4 += h2 * r2;
-				d4 += h3 * r1;
-				d4 += h4 * r0;
-				c = d4 >>> 13;
-				d4 &= 8191;
-				d4 += h5 * (5 * r9);
-				d4 += h6 * (5 * r8);
-				d4 += h7 * (5 * r7);
-				d4 += h8 * (5 * r6);
-				d4 += h9 * (5 * r5);
-				c += d4 >>> 13;
-				d4 &= 8191;
-				d5 = c;
-				d5 += h0 * r5;
-				d5 += h1 * r4;
-				d5 += h2 * r3;
-				d5 += h3 * r2;
-				d5 += h4 * r1;
-				c = d5 >>> 13;
-				d5 &= 8191;
-				d5 += h5 * r0;
-				d5 += h6 * (5 * r9);
-				d5 += h7 * (5 * r8);
-				d5 += h8 * (5 * r7);
-				d5 += h9 * (5 * r6);
-				c += d5 >>> 13;
-				d5 &= 8191;
-				d6 = c;
-				d6 += h0 * r6;
-				d6 += h1 * r5;
-				d6 += h2 * r4;
-				d6 += h3 * r3;
-				d6 += h4 * r2;
-				c = d6 >>> 13;
-				d6 &= 8191;
-				d6 += h5 * r1;
-				d6 += h6 * r0;
-				d6 += h7 * (5 * r9);
-				d6 += h8 * (5 * r8);
-				d6 += h9 * (5 * r7);
-				c += d6 >>> 13;
-				d6 &= 8191;
-				d7 = c;
-				d7 += h0 * r7;
-				d7 += h1 * r6;
-				d7 += h2 * r5;
-				d7 += h3 * r4;
-				d7 += h4 * r3;
-				c = d7 >>> 13;
-				d7 &= 8191;
-				d7 += h5 * r2;
-				d7 += h6 * r1;
-				d7 += h7 * r0;
-				d7 += h8 * (5 * r9);
-				d7 += h9 * (5 * r8);
-				c += d7 >>> 13;
-				d7 &= 8191;
-				d8 = c;
-				d8 += h0 * r8;
-				d8 += h1 * r7;
-				d8 += h2 * r6;
-				d8 += h3 * r5;
-				d8 += h4 * r4;
-				c = d8 >>> 13;
-				d8 &= 8191;
-				d8 += h5 * r3;
-				d8 += h6 * r2;
-				d8 += h7 * r1;
-				d8 += h8 * r0;
-				d8 += h9 * (5 * r9);
-				c += d8 >>> 13;
-				d8 &= 8191;
-				d9 = c;
-				d9 += h0 * r9;
-				d9 += h1 * r8;
-				d9 += h2 * r7;
-				d9 += h3 * r6;
-				d9 += h4 * r5;
-				c = d9 >>> 13;
-				d9 &= 8191;
-				d9 += h5 * r4;
-				d9 += h6 * r3;
-				d9 += h7 * r2;
-				d9 += h8 * r1;
-				d9 += h9 * r0;
-				c += d9 >>> 13;
-				d9 &= 8191;
-				c = (c << 2) + c | 0;
-				c = c + d0 | 0;
-				d0 = c & 8191;
-				c = c >>> 13;
-				d1 += c;
-				h0 = d0;
-				h1 = d1;
-				h2 = d2;
-				h3 = d3;
-				h4 = d4;
-				h5 = d5;
-				h6 = d6;
-				h7 = d7;
-				h8 = d8;
-				h9 = d9;
-				mpos += 16;
-				bytes -= 16;
-			}
-			this.h[0] = h0;
-			this.h[1] = h1;
-			this.h[2] = h2;
-			this.h[3] = h3;
-			this.h[4] = h4;
-			this.h[5] = h5;
-			this.h[6] = h6;
-			this.h[7] = h7;
-			this.h[8] = h8;
-			this.h[9] = h9;
-		};
-		poly1305.prototype.finish = function(mac, macpos) {
-			var g = new Uint16Array(10);
-			var c, mask, f, i;
-			if (this.leftover) {
-				i = this.leftover;
-				this.buffer[i++] = 1;
-				for (; i < 16; i++) this.buffer[i] = 0;
-				this.fin = 1;
-				this.blocks(this.buffer, 0, 16);
-			}
-			c = this.h[1] >>> 13;
-			this.h[1] &= 8191;
-			for (i = 2; i < 10; i++) {
-				this.h[i] += c;
-				c = this.h[i] >>> 13;
-				this.h[i] &= 8191;
-			}
-			this.h[0] += c * 5;
-			c = this.h[0] >>> 13;
-			this.h[0] &= 8191;
-			this.h[1] += c;
-			c = this.h[1] >>> 13;
-			this.h[1] &= 8191;
-			this.h[2] += c;
-			g[0] = this.h[0] + 5;
-			c = g[0] >>> 13;
-			g[0] &= 8191;
-			for (i = 1; i < 10; i++) {
-				g[i] = this.h[i] + c;
-				c = g[i] >>> 13;
-				g[i] &= 8191;
-			}
-			g[9] -= 8192;
-			mask = (c ^ 1) - 1;
-			for (i = 0; i < 10; i++) g[i] &= mask;
-			mask = ~mask;
-			for (i = 0; i < 10; i++) this.h[i] = this.h[i] & mask | g[i];
-			this.h[0] = (this.h[0] | this.h[1] << 13) & 65535;
-			this.h[1] = (this.h[1] >>> 3 | this.h[2] << 10) & 65535;
-			this.h[2] = (this.h[2] >>> 6 | this.h[3] << 7) & 65535;
-			this.h[3] = (this.h[3] >>> 9 | this.h[4] << 4) & 65535;
-			this.h[4] = (this.h[4] >>> 12 | this.h[5] << 1 | this.h[6] << 14) & 65535;
-			this.h[5] = (this.h[6] >>> 2 | this.h[7] << 11) & 65535;
-			this.h[6] = (this.h[7] >>> 5 | this.h[8] << 8) & 65535;
-			this.h[7] = (this.h[8] >>> 8 | this.h[9] << 5) & 65535;
-			f = this.h[0] + this.pad[0];
-			this.h[0] = f & 65535;
-			for (i = 1; i < 8; i++) {
-				f = (this.h[i] + this.pad[i] | 0) + (f >>> 16) | 0;
-				this.h[i] = f & 65535;
-			}
-			mac[macpos + 0] = this.h[0] >>> 0 & 255;
-			mac[macpos + 1] = this.h[0] >>> 8 & 255;
-			mac[macpos + 2] = this.h[1] >>> 0 & 255;
-			mac[macpos + 3] = this.h[1] >>> 8 & 255;
-			mac[macpos + 4] = this.h[2] >>> 0 & 255;
-			mac[macpos + 5] = this.h[2] >>> 8 & 255;
-			mac[macpos + 6] = this.h[3] >>> 0 & 255;
-			mac[macpos + 7] = this.h[3] >>> 8 & 255;
-			mac[macpos + 8] = this.h[4] >>> 0 & 255;
-			mac[macpos + 9] = this.h[4] >>> 8 & 255;
-			mac[macpos + 10] = this.h[5] >>> 0 & 255;
-			mac[macpos + 11] = this.h[5] >>> 8 & 255;
-			mac[macpos + 12] = this.h[6] >>> 0 & 255;
-			mac[macpos + 13] = this.h[6] >>> 8 & 255;
-			mac[macpos + 14] = this.h[7] >>> 0 & 255;
-			mac[macpos + 15] = this.h[7] >>> 8 & 255;
-		};
-		poly1305.prototype.update = function(m, mpos, bytes) {
-			var i, want;
-			if (this.leftover) {
-				want = 16 - this.leftover;
-				if (want > bytes) want = bytes;
-				for (i = 0; i < want; i++) this.buffer[this.leftover + i] = m[mpos + i];
-				bytes -= want;
-				mpos += want;
-				this.leftover += want;
-				if (this.leftover < 16) return;
-				this.blocks(this.buffer, 0, 16);
-				this.leftover = 0;
-			}
-			if (bytes >= 16) {
-				want = bytes - bytes % 16;
-				this.blocks(m, mpos, want);
-				mpos += want;
-				bytes -= want;
-			}
-			if (bytes) {
-				for (i = 0; i < bytes; i++) this.buffer[this.leftover + i] = m[mpos + i];
-				this.leftover += bytes;
-			}
+		return this;
+	}
+	/**
+	* Returns the final hash digest.
+	*/
+	digest() {
+		const out = new Uint8Array(this.digestLength);
+		this.finish(out);
+		return out;
+	}
+	/**
+	* Function useful for HMAC/PBKDF2 optimization. Returns hash state to be
+	* used with restoreState(). Only chain value is saved, not buffers or
+	* other state variables.
+	*/
+	saveState() {
+		if (this._finished) throw new Error("SHA256: cannot save finished state");
+		return {
+			stateHi: new Int32Array(this._stateHi),
+			stateLo: new Int32Array(this._stateLo),
+			buffer: this._bufferLength > 0 ? new Uint8Array(this._buffer) : void 0,
+			bufferLength: this._bufferLength,
+			bytesHashed: this._bytesHashed
 		};
-		function crypto_onetimeauth(out, outpos, m, mpos, n, k) {
-			var s = new poly1305(k);
-			s.update(m, mpos, n);
-			s.finish(out, outpos);
-			return 0;
-		}
-		function crypto_onetimeauth_verify(h, hpos, m, mpos, n, k) {
-			var x = new Uint8Array(16);
-			crypto_onetimeauth(x, 0, m, mpos, n, k);
-			return crypto_verify_16(h, hpos, x, 0);
-		}
-		function crypto_secretbox(c, m, d, n, k) {
-			var i;
-			if (d < 32) return -1;
-			crypto_stream_xor(c, 0, m, 0, d, n, k);
-			crypto_onetimeauth(c, 16, c, 32, d - 32, c);
-			for (i = 0; i < 16; i++) c[i] = 0;
-			return 0;
-		}
-		function crypto_secretbox_open(m, c, d, n, k) {
-			var i;
-			var x = new Uint8Array(32);
-			if (d < 32) return -1;
-			crypto_stream(x, 0, 32, n, k);
-			if (crypto_onetimeauth_verify(c, 16, c, 32, d - 32, x) !== 0) return -1;
-			crypto_stream_xor(m, 0, c, 0, d, n, k);
-			for (i = 0; i < 32; i++) m[i] = 0;
-			return 0;
-		}
-		function set25519(r, a) {
-			var i;
-			for (i = 0; i < 16; i++) r[i] = a[i] | 0;
-		}
-		function car25519(o) {
-			var i, v, c = 1;
-			for (i = 0; i < 16; i++) {
-				v = o[i] + c + 65535;
-				c = Math.floor(v / 65536);
-				o[i] = v - c * 65536;
-			}
-			o[0] += c - 1 + 37 * (c - 1);
-		}
-		function sel25519(p, q, b) {
-			var t, c = ~(b - 1);
-			for (var i = 0; i < 16; i++) {
-				t = c & (p[i] ^ q[i]);
-				p[i] ^= t;
-				q[i] ^= t;
-			}
-		}
-		function pack25519(o, n) {
-			var i, j, b;
-			var m = gf(), t = gf();
-			for (i = 0; i < 16; i++) t[i] = n[i];
-			car25519(t);
-			car25519(t);
-			car25519(t);
-			for (j = 0; j < 2; j++) {
-				m[0] = t[0] - 65517;
-				for (i = 1; i < 15; i++) {
-					m[i] = t[i] - 65535 - (m[i - 1] >> 16 & 1);
-					m[i - 1] &= 65535;
-				}
-				m[15] = t[15] - 32767 - (m[14] >> 16 & 1);
-				b = m[15] >> 16 & 1;
-				m[14] &= 65535;
-				sel25519(t, m, 1 - b);
-			}
-			for (i = 0; i < 16; i++) {
-				o[2 * i] = t[i] & 255;
-				o[2 * i + 1] = t[i] >> 8;
-			}
-		}
-		function neq25519(a, b) {
-			var c = new Uint8Array(32), d = new Uint8Array(32);
-			pack25519(c, a);
-			pack25519(d, b);
-			return crypto_verify_32(c, 0, d, 0);
-		}
-		function par25519(a) {
-			var d = new Uint8Array(32);
-			pack25519(d, a);
-			return d[0] & 1;
-		}
-		function unpack25519(o, n) {
-			var i;
-			for (i = 0; i < 16; i++) o[i] = n[2 * i] + (n[2 * i + 1] << 8);
-			o[15] &= 32767;
-		}
-		function A(o, a, b) {
-			for (var i = 0; i < 16; i++) o[i] = a[i] + b[i];
-		}
-		function Z(o, a, b) {
-			for (var i = 0; i < 16; i++) o[i] = a[i] - b[i];
-		}
-		function M(o, a, b) {
-			var v, c, t0 = 0, t1 = 0, t2 = 0, t3 = 0, t4 = 0, t5 = 0, t6 = 0, t7 = 0, t8 = 0, t9 = 0, t10 = 0, t11 = 0, t12 = 0, t13 = 0, t14 = 0, t15 = 0, t16 = 0, t17 = 0, t18 = 0, t19 = 0, t20 = 0, t21 = 0, t22 = 0, t23 = 0, t24 = 0, t25 = 0, t26 = 0, t27 = 0, t28 = 0, t29 = 0, t30 = 0, b0 = b[0], b1 = b[1], b2 = b[2], b3 = b[3], b4 = b[4], b5 = b[5], b6 = b[6], b7 = b[7], b8 = b[8], b9 = b[9], b10 = b[10], b11 = b[11], b12 = b[12], b13 = b[13], b14 = b[14], b15 = b[15];
-			v = a[0];
-			t0 += v * b0;
-			t1 += v * b1;
-			t2 += v * b2;
-			t3 += v * b3;
-			t4 += v * b4;
-			t5 += v * b5;
-			t6 += v * b6;
-			t7 += v * b7;
-			t8 += v * b8;
-			t9 += v * b9;
-			t10 += v * b10;
-			t11 += v * b11;
-			t12 += v * b12;
-			t13 += v * b13;
-			t14 += v * b14;
-			t15 += v * b15;
-			v = a[1];
-			t1 += v * b0;
-			t2 += v * b1;
-			t3 += v * b2;
-			t4 += v * b3;
-			t5 += v * b4;
-			t6 += v * b5;
-			t7 += v * b6;
-			t8 += v * b7;
-			t9 += v * b8;
-			t10 += v * b9;
-			t11 += v * b10;
-			t12 += v * b11;
-			t13 += v * b12;
-			t14 += v * b13;
-			t15 += v * b14;
-			t16 += v * b15;
-			v = a[2];
-			t2 += v * b0;
-			t3 += v * b1;
-			t4 += v * b2;
-			t5 += v * b3;
-			t6 += v * b4;
-			t7 += v * b5;
-			t8 += v * b6;
-			t9 += v * b7;
-			t10 += v * b8;
-			t11 += v * b9;
-			t12 += v * b10;
-			t13 += v * b11;
-			t14 += v * b12;
-			t15 += v * b13;
-			t16 += v * b14;
-			t17 += v * b15;
-			v = a[3];
-			t3 += v * b0;
-			t4 += v * b1;
-			t5 += v * b2;
-			t6 += v * b3;
-			t7 += v * b4;
-			t8 += v * b5;
-			t9 += v * b6;
-			t10 += v * b7;
-			t11 += v * b8;
-			t12 += v * b9;
-			t13 += v * b10;
-			t14 += v * b11;
-			t15 += v * b12;
-			t16 += v * b13;
-			t17 += v * b14;
-			t18 += v * b15;
-			v = a[4];
-			t4 += v * b0;
-			t5 += v * b1;
-			t6 += v * b2;
-			t7 += v * b3;
-			t8 += v * b4;
-			t9 += v * b5;
-			t10 += v * b6;
-			t11 += v * b7;
-			t12 += v * b8;
-			t13 += v * b9;
-			t14 += v * b10;
-			t15 += v * b11;
-			t16 += v * b12;
-			t17 += v * b13;
-			t18 += v * b14;
-			t19 += v * b15;
-			v = a[5];
-			t5 += v * b0;
-			t6 += v * b1;
-			t7 += v * b2;
-			t8 += v * b3;
-			t9 += v * b4;
-			t10 += v * b5;
-			t11 += v * b6;
-			t12 += v * b7;
-			t13 += v * b8;
-			t14 += v * b9;
-			t15 += v * b10;
-			t16 += v * b11;
-			t17 += v * b12;
-			t18 += v * b13;
-			t19 += v * b14;
-			t20 += v * b15;
-			v = a[6];
-			t6 += v * b0;
-			t7 += v * b1;
-			t8 += v * b2;
-			t9 += v * b3;
-			t10 += v * b4;
-			t11 += v * b5;
-			t12 += v * b6;
-			t13 += v * b7;
-			t14 += v * b8;
-			t15 += v * b9;
-			t16 += v * b10;
-			t17 += v * b11;
-			t18 += v * b12;
-			t19 += v * b13;
-			t20 += v * b14;
-			t21 += v * b15;
-			v = a[7];
-			t7 += v * b0;
-			t8 += v * b1;
-			t9 += v * b2;
-			t10 += v * b3;
-			t11 += v * b4;
-			t12 += v * b5;
-			t13 += v * b6;
-			t14 += v * b7;
-			t15 += v * b8;
-			t16 += v * b9;
-			t17 += v * b10;
-			t18 += v * b11;
-			t19 += v * b12;
-			t20 += v * b13;
-			t21 += v * b14;
-			t22 += v * b15;
-			v = a[8];
-			t8 += v * b0;
-			t9 += v * b1;
-			t10 += v * b2;
-			t11 += v * b3;
-			t12 += v * b4;
-			t13 += v * b5;
-			t14 += v * b6;
-			t15 += v * b7;
-			t16 += v * b8;
-			t17 += v * b9;
-			t18 += v * b10;
-			t19 += v * b11;
-			t20 += v * b12;
-			t21 += v * b13;
-			t22 += v * b14;
-			t23 += v * b15;
-			v = a[9];
-			t9 += v * b0;
-			t10 += v * b1;
-			t11 += v * b2;
-			t12 += v * b3;
-			t13 += v * b4;
-			t14 += v * b5;
-			t15 += v * b6;
-			t16 += v * b7;
-			t17 += v * b8;
-			t18 += v * b9;
-			t19 += v * b10;
-			t20 += v * b11;
-			t21 += v * b12;
-			t22 += v * b13;
-			t23 += v * b14;
-			t24 += v * b15;
-			v = a[10];
-			t10 += v * b0;
-			t11 += v * b1;
-			t12 += v * b2;
-			t13 += v * b3;
-			t14 += v * b4;
-			t15 += v * b5;
-			t16 += v * b6;
-			t17 += v * b7;
-			t18 += v * b8;
-			t19 += v * b9;
-			t20 += v * b10;
-			t21 += v * b11;
-			t22 += v * b12;
-			t23 += v * b13;
-			t24 += v * b14;
-			t25 += v * b15;
-			v = a[11];
-			t11 += v * b0;
-			t12 += v * b1;
-			t13 += v * b2;
-			t14 += v * b3;
-			t15 += v * b4;
-			t16 += v * b5;
-			t17 += v * b6;
-			t18 += v * b7;
-			t19 += v * b8;
-			t20 += v * b9;
-			t21 += v * b10;
-			t22 += v * b11;
-			t23 += v * b12;
-			t24 += v * b13;
-			t25 += v * b14;
-			t26 += v * b15;
-			v = a[12];
-			t12 += v * b0;
-			t13 += v * b1;
-			t14 += v * b2;
-			t15 += v * b3;
-			t16 += v * b4;
-			t17 += v * b5;
-			t18 += v * b6;
-			t19 += v * b7;
-			t20 += v * b8;
-			t21 += v * b9;
-			t22 += v * b10;
-			t23 += v * b11;
-			t24 += v * b12;
-			t25 += v * b13;
-			t26 += v * b14;
-			t27 += v * b15;
-			v = a[13];
-			t13 += v * b0;
-			t14 += v * b1;
-			t15 += v * b2;
-			t16 += v * b3;
-			t17 += v * b4;
-			t18 += v * b5;
-			t19 += v * b6;
-			t20 += v * b7;
-			t21 += v * b8;
-			t22 += v * b9;
-			t23 += v * b10;
-			t24 += v * b11;
-			t25 += v * b12;
-			t26 += v * b13;
-			t27 += v * b14;
-			t28 += v * b15;
-			v = a[14];
-			t14 += v * b0;
-			t15 += v * b1;
-			t16 += v * b2;
-			t17 += v * b3;
-			t18 += v * b4;
-			t19 += v * b5;
-			t20 += v * b6;
-			t21 += v * b7;
-			t22 += v * b8;
-			t23 += v * b9;
-			t24 += v * b10;
-			t25 += v * b11;
-			t26 += v * b12;
-			t27 += v * b13;
-			t28 += v * b14;
-			t29 += v * b15;
-			v = a[15];
-			t15 += v * b0;
-			t16 += v * b1;
-			t17 += v * b2;
-			t18 += v * b3;
-			t19 += v * b4;
-			t20 += v * b5;
-			t21 += v * b6;
-			t22 += v * b7;
-			t23 += v * b8;
-			t24 += v * b9;
-			t25 += v * b10;
-			t26 += v * b11;
-			t27 += v * b12;
-			t28 += v * b13;
-			t29 += v * b14;
-			t30 += v * b15;
-			t0 += 38 * t16;
-			t1 += 38 * t17;
-			t2 += 38 * t18;
-			t3 += 38 * t19;
-			t4 += 38 * t20;
-			t5 += 38 * t21;
-			t6 += 38 * t22;
-			t7 += 38 * t23;
-			t8 += 38 * t24;
-			t9 += 38 * t25;
-			t10 += 38 * t26;
-			t11 += 38 * t27;
-			t12 += 38 * t28;
-			t13 += 38 * t29;
-			t14 += 38 * t30;
-			c = 1;
-			v = t0 + c + 65535;
-			c = Math.floor(v / 65536);
-			t0 = v - c * 65536;
-			v = t1 + c + 65535;
-			c = Math.floor(v / 65536);
-			t1 = v - c * 65536;
-			v = t2 + c + 65535;
-			c = Math.floor(v / 65536);
-			t2 = v - c * 65536;
-			v = t3 + c + 65535;
-			c = Math.floor(v / 65536);
-			t3 = v - c * 65536;
-			v = t4 + c + 65535;
-			c = Math.floor(v / 65536);
-			t4 = v - c * 65536;
-			v = t5 + c + 65535;
-			c = Math.floor(v / 65536);
-			t5 = v - c * 65536;
-			v = t6 + c + 65535;
-			c = Math.floor(v / 65536);
-			t6 = v - c * 65536;
-			v = t7 + c + 65535;
-			c = Math.floor(v / 65536);
-			t7 = v - c * 65536;
-			v = t8 + c + 65535;
-			c = Math.floor(v / 65536);
-			t8 = v - c * 65536;
-			v = t9 + c + 65535;
-			c = Math.floor(v / 65536);
-			t9 = v - c * 65536;
-			v = t10 + c + 65535;
-			c = Math.floor(v / 65536);
-			t10 = v - c * 65536;
-			v = t11 + c + 65535;
-			c = Math.floor(v / 65536);
-			t11 = v - c * 65536;
-			v = t12 + c + 65535;
-			c = Math.floor(v / 65536);
-			t12 = v - c * 65536;
-			v = t13 + c + 65535;
-			c = Math.floor(v / 65536);
-			t13 = v - c * 65536;
-			v = t14 + c + 65535;
-			c = Math.floor(v / 65536);
-			t14 = v - c * 65536;
-			v = t15 + c + 65535;
-			c = Math.floor(v / 65536);
-			t15 = v - c * 65536;
-			t0 += c - 1 + 37 * (c - 1);
-			c = 1;
-			v = t0 + c + 65535;
-			c = Math.floor(v / 65536);
-			t0 = v - c * 65536;
-			v = t1 + c + 65535;
-			c = Math.floor(v / 65536);
-			t1 = v - c * 65536;
-			v = t2 + c + 65535;
-			c = Math.floor(v / 65536);
-			t2 = v - c * 65536;
-			v = t3 + c + 65535;
-			c = Math.floor(v / 65536);
-			t3 = v - c * 65536;
-			v = t4 + c + 65535;
-			c = Math.floor(v / 65536);
-			t4 = v - c * 65536;
-			v = t5 + c + 65535;
-			c = Math.floor(v / 65536);
-			t5 = v - c * 65536;
-			v = t6 + c + 65535;
-			c = Math.floor(v / 65536);
-			t6 = v - c * 65536;
-			v = t7 + c + 65535;
-			c = Math.floor(v / 65536);
-			t7 = v - c * 65536;
-			v = t8 + c + 65535;
-			c = Math.floor(v / 65536);
-			t8 = v - c * 65536;
-			v = t9 + c + 65535;
-			c = Math.floor(v / 65536);
-			t9 = v - c * 65536;
-			v = t10 + c + 65535;
-			c = Math.floor(v / 65536);
-			t10 = v - c * 65536;
-			v = t11 + c + 65535;
-			c = Math.floor(v / 65536);
-			t11 = v - c * 65536;
-			v = t12 + c + 65535;
-			c = Math.floor(v / 65536);
-			t12 = v - c * 65536;
-			v = t13 + c + 65535;
-			c = Math.floor(v / 65536);
-			t13 = v - c * 65536;
-			v = t14 + c + 65535;
-			c = Math.floor(v / 65536);
-			t14 = v - c * 65536;
-			v = t15 + c + 65535;
-			c = Math.floor(v / 65536);
-			t15 = v - c * 65536;
-			t0 += c - 1 + 37 * (c - 1);
-			o[0] = t0;
-			o[1] = t1;
-			o[2] = t2;
-			o[3] = t3;
-			o[4] = t4;
-			o[5] = t5;
-			o[6] = t6;
-			o[7] = t7;
-			o[8] = t8;
-			o[9] = t9;
-			o[10] = t10;
-			o[11] = t11;
-			o[12] = t12;
-			o[13] = t13;
-			o[14] = t14;
-			o[15] = t15;
-		}
-		function S(o, a) {
-			M(o, a, a);
-		}
-		function inv25519(o, i) {
-			var c = gf();
-			var a;
-			for (a = 0; a < 16; a++) c[a] = i[a];
-			for (a = 253; a >= 0; a--) {
-				S(c, c);
-				if (a !== 2 && a !== 4) M(c, c, i);
-			}
-			for (a = 0; a < 16; a++) o[a] = c[a];
-		}
-		function pow2523(o, i) {
-			var c = gf();
-			var a;
-			for (a = 0; a < 16; a++) c[a] = i[a];
-			for (a = 250; a >= 0; a--) {
-				S(c, c);
-				if (a !== 1) M(c, c, i);
-			}
-			for (a = 0; a < 16; a++) o[a] = c[a];
-		}
-		function crypto_scalarmult(q, n, p) {
-			var z = new Uint8Array(32);
-			var x = new Float64Array(80), r, i;
-			var a = gf(), b = gf(), c = gf(), d = gf(), e = gf(), f = gf();
-			for (i = 0; i < 31; i++) z[i] = n[i];
-			z[31] = n[31] & 127 | 64;
-			z[0] &= 248;
-			unpack25519(x, p);
-			for (i = 0; i < 16; i++) {
-				b[i] = x[i];
-				d[i] = a[i] = c[i] = 0;
-			}
-			a[0] = d[0] = 1;
-			for (i = 254; i >= 0; --i) {
-				r = z[i >>> 3] >>> (i & 7) & 1;
-				sel25519(a, b, r);
-				sel25519(c, d, r);
-				A(e, a, c);
-				Z(a, a, c);
-				A(c, b, d);
-				Z(b, b, d);
-				S(d, e);
-				S(f, a);
-				M(a, c, a);
-				M(c, b, e);
-				A(e, a, c);
-				Z(a, a, c);
-				S(b, a);
-				Z(c, d, f);
-				M(a, c, _121665);
-				A(a, a, d);
-				M(c, c, a);
-				M(a, d, f);
-				M(d, b, x);
-				S(b, e);
-				sel25519(a, b, r);
-				sel25519(c, d, r);
-			}
-			for (i = 0; i < 16; i++) {
-				x[i + 16] = a[i];
-				x[i + 32] = c[i];
-				x[i + 48] = b[i];
-				x[i + 64] = d[i];
-			}
-			var x32 = x.subarray(32);
-			var x16 = x.subarray(16);
-			inv25519(x32, x32);
-			M(x16, x16, x32);
-			pack25519(q, x16);
-			return 0;
-		}
-		function crypto_scalarmult_base(q, n) {
-			return crypto_scalarmult(q, n, _9);
-		}
-		function crypto_box_keypair(y, x) {
-			randombytes(x, 32);
-			return crypto_scalarmult_base(y, x);
-		}
-		function crypto_box_beforenm(k, y, x) {
-			var s = new Uint8Array(32);
-			crypto_scalarmult(s, x, y);
-			return crypto_core_hsalsa20(k, _0, s, sigma);
-		}
-		var crypto_box_afternm = crypto_secretbox;
-		var crypto_box_open_afternm = crypto_secretbox_open;
-		function crypto_box(c, m, d, n, y, x) {
-			var k = new Uint8Array(32);
-			crypto_box_beforenm(k, y, x);
-			return crypto_box_afternm(c, m, d, n, k);
-		}
-		function crypto_box_open(m, c, d, n, y, x) {
-			var k = new Uint8Array(32);
-			crypto_box_beforenm(k, y, x);
-			return crypto_box_open_afternm(m, c, d, n, k);
+	}
+	/**
+	* Function useful for HMAC/PBKDF2 optimization. Restores state saved by
+	* saveState() and sets bytesHashed to the given value.
+	*/
+	restoreState(savedState) {
+		this._stateHi.set(savedState.stateHi);
+		this._stateLo.set(savedState.stateLo);
+		this._bufferLength = savedState.bufferLength;
+		if (savedState.buffer) this._buffer.set(savedState.buffer);
+		this._bytesHashed = savedState.bytesHashed;
+		this._finished = false;
+		return this;
+	}
+	/**
+	* Cleans state returned by saveState().
+	*/
+	cleanSavedState(savedState) {
+		wipe(savedState.stateHi);
+		wipe(savedState.stateLo);
+		if (savedState.buffer) wipe(savedState.buffer);
+		savedState.bufferLength = 0;
+		savedState.bytesHashed = 0;
+	}
+};
+const K = new Int32Array([
+	1116352408,
+	3609767458,
+	1899447441,
+	602891725,
+	3049323471,
+	3964484399,
+	3921009573,
+	2173295548,
+	961987163,
+	4081628472,
+	1508970993,
+	3053834265,
+	2453635748,
+	2937671579,
+	2870763221,
+	3664609560,
+	3624381080,
+	2734883394,
+	310598401,
+	1164996542,
+	607225278,
+	1323610764,
+	1426881987,
+	3590304994,
+	1925078388,
+	4068182383,
+	2162078206,
+	991336113,
+	2614888103,
+	633803317,
+	3248222580,
+	3479774868,
+	3835390401,
+	2666613458,
+	4022224774,
+	944711139,
+	264347078,
+	2341262773,
+	604807628,
+	2007800933,
+	770255983,
+	1495990901,
+	1249150122,
+	1856431235,
+	1555081692,
+	3175218132,
+	1996064986,
+	2198950837,
+	2554220882,
+	3999719339,
+	2821834349,
+	766784016,
+	2952996808,
+	2566594879,
+	3210313671,
+	3203337956,
+	3336571891,
+	1034457026,
+	3584528711,
+	2466948901,
+	113926993,
+	3758326383,
+	338241895,
+	168717936,
+	666307205,
+	1188179964,
+	773529912,
+	1546045734,
+	1294757372,
+	1522805485,
+	1396182291,
+	2643833823,
+	1695183700,
+	2343527390,
+	1986661051,
+	1014477480,
+	2177026350,
+	1206759142,
+	2456956037,
+	344077627,
+	2730485921,
+	1290863460,
+	2820302411,
+	3158454273,
+	3259730800,
+	3505952657,
+	3345764771,
+	106217008,
+	3516065817,
+	3606008344,
+	3600352804,
+	1432725776,
+	4094571909,
+	1467031594,
+	275423344,
+	851169720,
+	430227734,
+	3100823752,
+	506948616,
+	1363258195,
+	659060556,
+	3750685593,
+	883997877,
+	3785050280,
+	958139571,
+	3318307427,
+	1322822218,
+	3812723403,
+	1537002063,
+	2003034995,
+	1747873779,
+	3602036899,
+	1955562222,
+	1575990012,
+	2024104815,
+	1125592928,
+	2227730452,
+	2716904306,
+	2361852424,
+	442776044,
+	2428436474,
+	593698344,
+	2756734187,
+	3733110249,
+	3204031479,
+	2999351573,
+	3329325298,
+	3815920427,
+	3391569614,
+	3928383900,
+	3515267271,
+	566280711,
+	3940187606,
+	3454069534,
+	4118630271,
+	4000239992,
+	116418474,
+	1914138554,
+	174292421,
+	2731055270,
+	289380356,
+	3203993006,
+	460393269,
+	320620315,
+	685471733,
+	587496836,
+	852142971,
+	1086792851,
+	1017036298,
+	365543100,
+	1126000580,
+	2618297676,
+	1288033470,
+	3409855158,
+	1501505948,
+	4234509866,
+	1607167915,
+	987167468,
+	1816402316,
+	1246189591
+]);
+function hashBlocks(wh, wl, hh, hl, m, pos, len) {
+	let ah0 = hh[0], ah1 = hh[1], ah2 = hh[2], ah3 = hh[3], ah4 = hh[4], ah5 = hh[5], ah6 = hh[6], ah7 = hh[7], al0 = hl[0], al1 = hl[1], al2 = hl[2], al3 = hl[3], al4 = hl[4], al5 = hl[5], al6 = hl[6], al7 = hl[7];
+	let h, l;
+	let th, tl;
+	let a, b, c, d;
+	while (len >= 128) {
+		for (let i = 0; i < 16; i++) {
+			const j = 8 * i + pos;
+			wh[i] = readUint32BE(m, j);
+			wl[i] = readUint32BE(m, j + 4);
 		}
-		var K = [
-			1116352408,
-			3609767458,
-			1899447441,
-			602891725,
-			3049323471,
-			3964484399,
-			3921009573,
-			2173295548,
-			961987163,
-			4081628472,
-			1508970993,
-			3053834265,
-			2453635748,
-			2937671579,
-			2870763221,
-			3664609560,
-			3624381080,
-			2734883394,
-			310598401,
-			1164996542,
-			607225278,
-			1323610764,
-			1426881987,
-			3590304994,
-			1925078388,
-			4068182383,
-			2162078206,
-			991336113,
-			2614888103,
-			633803317,
-			3248222580,
-			3479774868,
-			3835390401,
-			2666613458,
-			4022224774,
-			944711139,
-			264347078,
-			2341262773,
-			604807628,
-			2007800933,
-			770255983,
-			1495990901,
-			1249150122,
-			1856431235,
-			1555081692,
-			3175218132,
-			1996064986,
-			2198950837,
-			2554220882,
-			3999719339,
-			2821834349,
-			766784016,
-			2952996808,
-			2566594879,
-			3210313671,
-			3203337956,
-			3336571891,
-			1034457026,
-			3584528711,
-			2466948901,
-			113926993,
-			3758326383,
-			338241895,
-			168717936,
-			666307205,
-			1188179964,
-			773529912,
-			1546045734,
-			1294757372,
-			1522805485,
-			1396182291,
-			2643833823,
-			1695183700,
-			2343527390,
-			1986661051,
-			1014477480,
-			2177026350,
-			1206759142,
-			2456956037,
-			344077627,
-			2730485921,
-			1290863460,
-			2820302411,
-			3158454273,
-			3259730800,
-			3505952657,
-			3345764771,
-			106217008,
-			3516065817,
-			3606008344,
-			3600352804,
-			1432725776,
-			4094571909,
-			1467031594,
-			275423344,
-			851169720,
-			430227734,
-			3100823752,
-			506948616,
-			1363258195,
-			659060556,
-			3750685593,
-			883997877,
-			3785050280,
-			958139571,
-			3318307427,
-			1322822218,
-			3812723403,
-			1537002063,
-			2003034995,
-			1747873779,
-			3602036899,
-			1955562222,
-			1575990012,
-			2024104815,
-			1125592928,
-			2227730452,
-			2716904306,
-			2361852424,
-			442776044,
-			2428436474,
-			593698344,
-			2756734187,
-			3733110249,
-			3204031479,
-			2999351573,
-			3329325298,
-			3815920427,
-			3391569614,
-			3928383900,
-			3515267271,
-			566280711,
-			3940187606,
-			3454069534,
-			4118630271,
-			4000239992,
-			116418474,
-			1914138554,
-			174292421,
-			2731055270,
-			289380356,
-			3203993006,
-			460393269,
-			320620315,
-			685471733,
-			587496836,
-			852142971,
-			1086792851,
-			1017036298,
-			365543100,
-			1126000580,
-			2618297676,
-			1288033470,
-			3409855158,
-			1501505948,
-			4234509866,
-			1607167915,
-			987167468,
-			1816402316,
-			1246189591
-		];
-		function crypto_hashblocks_hl(hh, hl, m, n) {
-			var wh = new Int32Array(16), wl = new Int32Array(16), bh0, bh1, bh2, bh3, bh4, bh5, bh6, bh7, bl0, bl1, bl2, bl3, bl4, bl5, bl6, bl7, th, tl, i, j, h, l, a, b, c, d;
-			var ah0 = hh[0], ah1 = hh[1], ah2 = hh[2], ah3 = hh[3], ah4 = hh[4], ah5 = hh[5], ah6 = hh[6], ah7 = hh[7], al0 = hl[0], al1 = hl[1], al2 = hl[2], al3 = hl[3], al4 = hl[4], al5 = hl[5], al6 = hl[6], al7 = hl[7];
-			var pos = 0;
-			while (n >= 128) {
-				for (i = 0; i < 16; i++) {
-					j = 8 * i + pos;
-					wh[i] = m[j + 0] << 24 | m[j + 1] << 16 | m[j + 2] << 8 | m[j + 3];
-					wl[i] = m[j + 4] << 24 | m[j + 5] << 16 | m[j + 6] << 8 | m[j + 7];
-				}
-				for (i = 0; i < 80; i++) {
-					bh0 = ah0;
-					bh1 = ah1;
-					bh2 = ah2;
-					bh3 = ah3;
-					bh4 = ah4;
-					bh5 = ah5;
-					bh6 = ah6;
-					bh7 = ah7;
-					bl0 = al0;
-					bl1 = al1;
-					bl2 = al2;
-					bl3 = al3;
-					bl4 = al4;
-					bl5 = al5;
-					bl6 = al6;
-					bl7 = al7;
-					h = ah7;
-					l = al7;
-					a = l & 65535;
-					b = l >>> 16;
-					c = h & 65535;
-					d = h >>> 16;
-					h = (ah4 >>> 14 | al4 << 18) ^ (ah4 >>> 18 | al4 << 14) ^ (al4 >>> 9 | ah4 << 23);
-					l = (al4 >>> 14 | ah4 << 18) ^ (al4 >>> 18 | ah4 << 14) ^ (ah4 >>> 9 | al4 << 23);
-					a += l & 65535;
-					b += l >>> 16;
-					c += h & 65535;
-					d += h >>> 16;
-					h = ah4 & ah5 ^ ~ah4 & ah6;
-					l = al4 & al5 ^ ~al4 & al6;
-					a += l & 65535;
-					b += l >>> 16;
-					c += h & 65535;
-					d += h >>> 16;
-					h = K[i * 2];
-					l = K[i * 2 + 1];
-					a += l & 65535;
-					b += l >>> 16;
-					c += h & 65535;
-					d += h >>> 16;
-					h = wh[i % 16];
-					l = wl[i % 16];
-					a += l & 65535;
-					b += l >>> 16;
-					c += h & 65535;
-					d += h >>> 16;
-					b += a >>> 16;
-					c += b >>> 16;
-					d += c >>> 16;
-					th = c & 65535 | d << 16;
-					tl = a & 65535 | b << 16;
-					h = th;
-					l = tl;
-					a = l & 65535;
-					b = l >>> 16;
-					c = h & 65535;
-					d = h >>> 16;
-					h = (ah0 >>> 28 | al0 << 4) ^ (al0 >>> 2 | ah0 << 30) ^ (al0 >>> 7 | ah0 << 25);
-					l = (al0 >>> 28 | ah0 << 4) ^ (ah0 >>> 2 | al0 << 30) ^ (ah0 >>> 7 | al0 << 25);
-					a += l & 65535;
-					b += l >>> 16;
-					c += h & 65535;
-					d += h >>> 16;
-					h = ah0 & ah1 ^ ah0 & ah2 ^ ah1 & ah2;
-					l = al0 & al1 ^ al0 & al2 ^ al1 & al2;
-					a += l & 65535;
-					b += l >>> 16;
-					c += h & 65535;
-					d += h >>> 16;
-					b += a >>> 16;
-					c += b >>> 16;
-					d += c >>> 16;
-					bh7 = c & 65535 | d << 16;
-					bl7 = a & 65535 | b << 16;
-					h = bh3;
-					l = bl3;
-					a = l & 65535;
-					b = l >>> 16;
-					c = h & 65535;
-					d = h >>> 16;
-					h = th;
-					l = tl;
-					a += l & 65535;
-					b += l >>> 16;
-					c += h & 65535;
-					d += h >>> 16;
-					b += a >>> 16;
-					c += b >>> 16;
-					d += c >>> 16;
-					bh3 = c & 65535 | d << 16;
-					bl3 = a & 65535 | b << 16;
-					ah1 = bh0;
-					ah2 = bh1;
-					ah3 = bh2;
-					ah4 = bh3;
-					ah5 = bh4;
-					ah6 = bh5;
-					ah7 = bh6;
-					ah0 = bh7;
-					al1 = bl0;
-					al2 = bl1;
-					al3 = bl2;
-					al4 = bl3;
-					al5 = bl4;
-					al6 = bl5;
-					al7 = bl6;
-					al0 = bl7;
-					if (i % 16 === 15) for (j = 0; j < 16; j++) {
-						h = wh[j];
-						l = wl[j];
-						a = l & 65535;
-						b = l >>> 16;
-						c = h & 65535;
-						d = h >>> 16;
-						h = wh[(j + 9) % 16];
-						l = wl[(j + 9) % 16];
-						a += l & 65535;
-						b += l >>> 16;
-						c += h & 65535;
-						d += h >>> 16;
-						th = wh[(j + 1) % 16];
-						tl = wl[(j + 1) % 16];
-						h = (th >>> 1 | tl << 31) ^ (th >>> 8 | tl << 24) ^ th >>> 7;
-						l = (tl >>> 1 | th << 31) ^ (tl >>> 8 | th << 24) ^ (tl >>> 7 | th << 25);
-						a += l & 65535;
-						b += l >>> 16;
-						c += h & 65535;
-						d += h >>> 16;
-						th = wh[(j + 14) % 16];
-						tl = wl[(j + 14) % 16];
-						h = (th >>> 19 | tl << 13) ^ (tl >>> 29 | th << 3) ^ th >>> 6;
-						l = (tl >>> 19 | th << 13) ^ (th >>> 29 | tl << 3) ^ (tl >>> 6 | th << 26);
-						a += l & 65535;
-						b += l >>> 16;
-						c += h & 65535;
-						d += h >>> 16;
-						b += a >>> 16;
-						c += b >>> 16;
-						d += c >>> 16;
-						wh[j] = c & 65535 | d << 16;
-						wl[j] = a & 65535 | b << 16;
-					}
-				}
-				h = ah0;
-				l = al0;
-				a = l & 65535;
-				b = l >>> 16;
-				c = h & 65535;
-				d = h >>> 16;
-				h = hh[0];
-				l = hl[0];
-				a += l & 65535;
-				b += l >>> 16;
-				c += h & 65535;
-				d += h >>> 16;
-				b += a >>> 16;
-				c += b >>> 16;
-				d += c >>> 16;
-				hh[0] = ah0 = c & 65535 | d << 16;
-				hl[0] = al0 = a & 65535 | b << 16;
-				h = ah1;
-				l = al1;
-				a = l & 65535;
-				b = l >>> 16;
-				c = h & 65535;
-				d = h >>> 16;
-				h = hh[1];
-				l = hl[1];
-				a += l & 65535;
-				b += l >>> 16;
-				c += h & 65535;
-				d += h >>> 16;
-				b += a >>> 16;
-				c += b >>> 16;
-				d += c >>> 16;
-				hh[1] = ah1 = c & 65535 | d << 16;
-				hl[1] = al1 = a & 65535 | b << 16;
-				h = ah2;
-				l = al2;
-				a = l & 65535;
-				b = l >>> 16;
-				c = h & 65535;
-				d = h >>> 16;
-				h = hh[2];
-				l = hl[2];
-				a += l & 65535;
-				b += l >>> 16;
-				c += h & 65535;
-				d += h >>> 16;
-				b += a >>> 16;
-				c += b >>> 16;
-				d += c >>> 16;
-				hh[2] = ah2 = c & 65535 | d << 16;
-				hl[2] = al2 = a & 65535 | b << 16;
-				h = ah3;
-				l = al3;
-				a = l & 65535;
-				b = l >>> 16;
-				c = h & 65535;
-				d = h >>> 16;
-				h = hh[3];
-				l = hl[3];
-				a += l & 65535;
-				b += l >>> 16;
-				c += h & 65535;
-				d += h >>> 16;
-				b += a >>> 16;
-				c += b >>> 16;
-				d += c >>> 16;
-				hh[3] = ah3 = c & 65535 | d << 16;
-				hl[3] = al3 = a & 65535 | b << 16;
-				h = ah4;
-				l = al4;
+		for (let i = 0; i < 80; i++) {
+			let bh0 = ah0;
+			let bh1 = ah1;
+			let bh2 = ah2;
+			let bh3 = ah3;
+			let bh4 = ah4;
+			let bh5 = ah5;
+			let bh6 = ah6;
+			let bh7 = ah7;
+			let bl0 = al0;
+			let bl1 = al1;
+			let bl2 = al2;
+			let bl3 = al3;
+			let bl4 = al4;
+			let bl5 = al5;
+			let bl6 = al6;
+			let bl7 = al7;
+			h = ah7;
+			l = al7;
+			a = l & 65535;
+			b = l >>> 16;
+			c = h & 65535;
+			d = h >>> 16;
+			h = (ah4 >>> 14 | al4 << 18) ^ (ah4 >>> 18 | al4 << 14) ^ (al4 >>> 9 | ah4 << 23);
+			l = (al4 >>> 14 | ah4 << 18) ^ (al4 >>> 18 | ah4 << 14) ^ (ah4 >>> 9 | al4 << 23);
+			a += l & 65535;
+			b += l >>> 16;
+			c += h & 65535;
+			d += h >>> 16;
+			h = ah4 & ah5 ^ ~ah4 & ah6;
+			l = al4 & al5 ^ ~al4 & al6;
+			a += l & 65535;
+			b += l >>> 16;
+			c += h & 65535;
+			d += h >>> 16;
+			h = K[i * 2];
+			l = K[i * 2 + 1];
+			a += l & 65535;
+			b += l >>> 16;
+			c += h & 65535;
+			d += h >>> 16;
+			h = wh[i % 16];
+			l = wl[i % 16];
+			a += l & 65535;
+			b += l >>> 16;
+			c += h & 65535;
+			d += h >>> 16;
+			b += a >>> 16;
+			c += b >>> 16;
+			d += c >>> 16;
+			th = c & 65535 | d << 16;
+			tl = a & 65535 | b << 16;
+			h = th;
+			l = tl;
+			a = l & 65535;
+			b = l >>> 16;
+			c = h & 65535;
+			d = h >>> 16;
+			h = (ah0 >>> 28 | al0 << 4) ^ (al0 >>> 2 | ah0 << 30) ^ (al0 >>> 7 | ah0 << 25);
+			l = (al0 >>> 28 | ah0 << 4) ^ (ah0 >>> 2 | al0 << 30) ^ (ah0 >>> 7 | al0 << 25);
+			a += l & 65535;
+			b += l >>> 16;
+			c += h & 65535;
+			d += h >>> 16;
+			h = ah0 & ah1 ^ ah0 & ah2 ^ ah1 & ah2;
+			l = al0 & al1 ^ al0 & al2 ^ al1 & al2;
+			a += l & 65535;
+			b += l >>> 16;
+			c += h & 65535;
+			d += h >>> 16;
+			b += a >>> 16;
+			c += b >>> 16;
+			d += c >>> 16;
+			bh7 = c & 65535 | d << 16;
+			bl7 = a & 65535 | b << 16;
+			h = bh3;
+			l = bl3;
+			a = l & 65535;
+			b = l >>> 16;
+			c = h & 65535;
+			d = h >>> 16;
+			h = th;
+			l = tl;
+			a += l & 65535;
+			b += l >>> 16;
+			c += h & 65535;
+			d += h >>> 16;
+			b += a >>> 16;
+			c += b >>> 16;
+			d += c >>> 16;
+			bh3 = c & 65535 | d << 16;
+			bl3 = a & 65535 | b << 16;
+			ah1 = bh0;
+			ah2 = bh1;
+			ah3 = bh2;
+			ah4 = bh3;
+			ah5 = bh4;
+			ah6 = bh5;
+			ah7 = bh6;
+			ah0 = bh7;
+			al1 = bl0;
+			al2 = bl1;
+			al3 = bl2;
+			al4 = bl3;
+			al5 = bl4;
+			al6 = bl5;
+			al7 = bl6;
+			al0 = bl7;
+			if (i % 16 === 15) for (let j = 0; j < 16; j++) {
+				h = wh[j];
+				l = wl[j];
 				a = l & 65535;
 				b = l >>> 16;
 				c = h & 65535;
 				d = h >>> 16;
-				h = hh[4];
-				l = hl[4];
+				h = wh[(j + 9) % 16];
+				l = wl[(j + 9) % 16];
 				a += l & 65535;
 				b += l >>> 16;
 				c += h & 65535;
 				d += h >>> 16;
-				b += a >>> 16;
-				c += b >>> 16;
-				d += c >>> 16;
-				hh[4] = ah4 = c & 65535 | d << 16;
-				hl[4] = al4 = a & 65535 | b << 16;
-				h = ah5;
-				l = al5;
-				a = l & 65535;
-				b = l >>> 16;
-				c = h & 65535;
-				d = h >>> 16;
-				h = hh[5];
-				l = hl[5];
+				th = wh[(j + 1) % 16];
+				tl = wl[(j + 1) % 16];
+				h = (th >>> 1 | tl << 31) ^ (th >>> 8 | tl << 24) ^ th >>> 7;
+				l = (tl >>> 1 | th << 31) ^ (tl >>> 8 | th << 24) ^ (tl >>> 7 | th << 25);
 				a += l & 65535;
 				b += l >>> 16;
 				c += h & 65535;
 				d += h >>> 16;
-				b += a >>> 16;
-				c += b >>> 16;
-				d += c >>> 16;
-				hh[5] = ah5 = c & 65535 | d << 16;
-				hl[5] = al5 = a & 65535 | b << 16;
-				h = ah6;
-				l = al6;
-				a = l & 65535;
-				b = l >>> 16;
-				c = h & 65535;
-				d = h >>> 16;
-				h = hh[6];
-				l = hl[6];
+				th = wh[(j + 14) % 16];
+				tl = wl[(j + 14) % 16];
+				h = (th >>> 19 | tl << 13) ^ (tl >>> 29 | th << 3) ^ th >>> 6;
+				l = (tl >>> 19 | th << 13) ^ (th >>> 29 | tl << 3) ^ (tl >>> 6 | th << 26);
 				a += l & 65535;
 				b += l >>> 16;
 				c += h & 65535;
@@ -2656,570 +1949,1006 @@ var require_nacl_fast = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				b += a >>> 16;
 				c += b >>> 16;
 				d += c >>> 16;
-				hh[6] = ah6 = c & 65535 | d << 16;
-				hl[6] = al6 = a & 65535 | b << 16;
-				h = ah7;
-				l = al7;
-				a = l & 65535;
-				b = l >>> 16;
-				c = h & 65535;
-				d = h >>> 16;
-				h = hh[7];
-				l = hl[7];
-				a += l & 65535;
-				b += l >>> 16;
-				c += h & 65535;
-				d += h >>> 16;
-				b += a >>> 16;
-				c += b >>> 16;
-				d += c >>> 16;
-				hh[7] = ah7 = c & 65535 | d << 16;
-				hl[7] = al7 = a & 65535 | b << 16;
-				pos += 128;
-				n -= 128;
-			}
-			return n;
-		}
-		function crypto_hash(out, m, n) {
-			var hh = new Int32Array(8), hl = new Int32Array(8), x = new Uint8Array(256), i, b = n;
-			hh[0] = 1779033703;
-			hh[1] = 3144134277;
-			hh[2] = 1013904242;
-			hh[3] = 2773480762;
-			hh[4] = 1359893119;
-			hh[5] = 2600822924;
-			hh[6] = 528734635;
-			hh[7] = 1541459225;
-			hl[0] = 4089235720;
-			hl[1] = 2227873595;
-			hl[2] = 4271175723;
-			hl[3] = 1595750129;
-			hl[4] = 2917565137;
-			hl[5] = 725511199;
-			hl[6] = 4215389547;
-			hl[7] = 327033209;
-			crypto_hashblocks_hl(hh, hl, m, n);
-			n %= 128;
-			for (i = 0; i < n; i++) x[i] = m[b - n + i];
-			x[n] = 128;
-			n = 256 - 128 * (n < 112 ? 1 : 0);
-			x[n - 9] = 0;
-			ts64(x, n - 8, b / 536870912 | 0, b << 3);
-			crypto_hashblocks_hl(hh, hl, x, n);
-			for (i = 0; i < 8; i++) ts64(out, 8 * i, hh[i], hl[i]);
-			return 0;
-		}
-		function add(p, q) {
-			var a = gf(), b = gf(), c = gf(), d = gf(), e = gf(), f = gf(), g = gf(), h = gf(), t = gf();
-			Z(a, p[1], p[0]);
-			Z(t, q[1], q[0]);
-			M(a, a, t);
-			A(b, p[0], p[1]);
-			A(t, q[0], q[1]);
-			M(b, b, t);
-			M(c, p[3], q[3]);
-			M(c, c, D2);
-			M(d, p[2], q[2]);
-			A(d, d, d);
-			Z(e, b, a);
-			Z(f, d, c);
-			A(g, d, c);
-			A(h, b, a);
-			M(p[0], e, f);
-			M(p[1], h, g);
-			M(p[2], g, f);
-			M(p[3], e, h);
-		}
-		function cswap(p, q, b) {
-			var i;
-			for (i = 0; i < 4; i++) sel25519(p[i], q[i], b);
-		}
-		function pack(r, p) {
-			var tx = gf(), ty = gf(), zi = gf();
-			inv25519(zi, p[2]);
-			M(tx, p[0], zi);
-			M(ty, p[1], zi);
-			pack25519(r, ty);
-			r[31] ^= par25519(tx) << 7;
-		}
-		function scalarmult(p, q, s) {
-			var b, i;
-			set25519(p[0], gf0);
-			set25519(p[1], gf1);
-			set25519(p[2], gf1);
-			set25519(p[3], gf0);
-			for (i = 255; i >= 0; --i) {
-				b = s[i / 8 | 0] >> (i & 7) & 1;
-				cswap(p, q, b);
-				add(q, p);
-				add(p, p);
-				cswap(p, q, b);
-			}
-		}
-		function scalarbase(p, s) {
-			var q = [
-				gf(),
-				gf(),
-				gf(),
-				gf()
-			];
-			set25519(q[0], X);
-			set25519(q[1], Y);
-			set25519(q[2], gf1);
-			M(q[3], X, Y);
-			scalarmult(p, q, s);
-		}
-		function crypto_sign_keypair(pk, sk, seeded) {
-			var d = new Uint8Array(64);
-			var p = [
-				gf(),
-				gf(),
-				gf(),
-				gf()
-			];
-			var i;
-			if (!seeded) randombytes(sk, 32);
-			crypto_hash(d, sk, 32);
-			d[0] &= 248;
-			d[31] &= 127;
-			d[31] |= 64;
-			scalarbase(p, d);
-			pack(pk, p);
-			for (i = 0; i < 32; i++) sk[i + 32] = pk[i];
-			return 0;
-		}
-		var L = new Float64Array([
-			237,
-			211,
-			245,
-			92,
-			26,
-			99,
-			18,
-			88,
-			214,
-			156,
-			247,
-			162,
-			222,
-			249,
-			222,
-			20,
-			0,
-			0,
-			0,
-			0,
-			0,
-			0,
-			0,
-			0,
-			0,
-			0,
-			0,
-			0,
-			0,
-			0,
-			0,
-			16
-		]);
-		function modL(r, x) {
-			var carry, i, j, k;
-			for (i = 63; i >= 32; --i) {
-				carry = 0;
-				for (j = i - 32, k = i - 12; j < k; ++j) {
-					x[j] += carry - 16 * x[i] * L[j - (i - 32)];
-					carry = Math.floor((x[j] + 128) / 256);
-					x[j] -= carry * 256;
-				}
-				x[j] += carry;
-				x[i] = 0;
-			}
-			carry = 0;
-			for (j = 0; j < 32; j++) {
-				x[j] += carry - (x[31] >> 4) * L[j];
-				carry = x[j] >> 8;
-				x[j] &= 255;
-			}
-			for (j = 0; j < 32; j++) x[j] -= carry * L[j];
-			for (i = 0; i < 32; i++) {
-				x[i + 1] += x[i] >> 8;
-				r[i] = x[i] & 255;
+				wh[j] = c & 65535 | d << 16;
+				wl[j] = a & 65535 | b << 16;
 			}
 		}
-		function reduce(r) {
-			var x = new Float64Array(64), i;
-			for (i = 0; i < 64; i++) x[i] = r[i];
-			for (i = 0; i < 64; i++) r[i] = 0;
-			modL(r, x);
-		}
-		function crypto_sign(sm, m, n, sk) {
-			var d = new Uint8Array(64), h = new Uint8Array(64), r = new Uint8Array(64);
-			var i, j, x = new Float64Array(64);
-			var p = [
-				gf(),
-				gf(),
-				gf(),
-				gf()
-			];
-			crypto_hash(d, sk, 32);
-			d[0] &= 248;
-			d[31] &= 127;
-			d[31] |= 64;
-			var smlen = n + 64;
-			for (i = 0; i < n; i++) sm[64 + i] = m[i];
-			for (i = 0; i < 32; i++) sm[32 + i] = d[32 + i];
-			crypto_hash(r, sm.subarray(32), n + 32);
-			reduce(r);
-			scalarbase(p, r);
-			pack(sm, p);
-			for (i = 32; i < 64; i++) sm[i] = sk[i];
-			crypto_hash(h, sm, n + 64);
-			reduce(h);
-			for (i = 0; i < 64; i++) x[i] = 0;
-			for (i = 0; i < 32; i++) x[i] = r[i];
-			for (i = 0; i < 32; i++) for (j = 0; j < 32; j++) x[i + j] += h[i] * d[j];
-			modL(sm.subarray(32), x);
-			return smlen;
-		}
-		function unpackneg(r, p) {
-			var t = gf(), chk = gf(), num = gf(), den = gf(), den2 = gf(), den4 = gf(), den6 = gf();
-			set25519(r[2], gf1);
-			unpack25519(r[1], p);
-			S(num, r[1]);
-			M(den, num, D);
-			Z(num, num, r[2]);
-			A(den, r[2], den);
-			S(den2, den);
-			S(den4, den2);
-			M(den6, den4, den2);
-			M(t, den6, num);
-			M(t, t, den);
-			pow2523(t, t);
-			M(t, t, num);
-			M(t, t, den);
-			M(t, t, den);
-			M(r[0], t, den);
-			S(chk, r[0]);
-			M(chk, chk, den);
-			if (neq25519(chk, num)) M(r[0], r[0], I);
-			S(chk, r[0]);
-			M(chk, chk, den);
-			if (neq25519(chk, num)) return -1;
-			if (par25519(r[0]) === p[31] >> 7) Z(r[0], gf0, r[0]);
-			M(r[3], r[0], r[1]);
-			return 0;
-		}
-		function crypto_sign_open(m, sm, n, pk) {
-			var i;
-			var t = new Uint8Array(32), h = new Uint8Array(64);
-			var p = [
-				gf(),
-				gf(),
-				gf(),
-				gf()
-			], q = [
-				gf(),
-				gf(),
-				gf(),
-				gf()
-			];
-			if (n < 64) return -1;
-			if (unpackneg(q, pk)) return -1;
-			for (i = 0; i < n; i++) m[i] = sm[i];
-			for (i = 0; i < 32; i++) m[i + 32] = pk[i];
-			crypto_hash(h, m, n);
-			reduce(h);
-			scalarmult(p, q, h);
-			scalarbase(q, sm.subarray(32));
-			add(p, q);
-			pack(t, p);
-			n -= 64;
-			if (crypto_verify_32(sm, 0, t, 0)) {
-				for (i = 0; i < n; i++) m[i] = 0;
-				return -1;
-			}
-			for (i = 0; i < n; i++) m[i] = sm[i + 64];
-			return n;
-		}
-		var crypto_secretbox_KEYBYTES = 32, crypto_secretbox_NONCEBYTES = 24, crypto_secretbox_ZEROBYTES = 32, crypto_secretbox_BOXZEROBYTES = 16, crypto_scalarmult_BYTES = 32, crypto_scalarmult_SCALARBYTES = 32, crypto_box_PUBLICKEYBYTES = 32, crypto_box_SECRETKEYBYTES = 32, crypto_box_BEFORENMBYTES = 32, crypto_box_NONCEBYTES = crypto_secretbox_NONCEBYTES, crypto_box_ZEROBYTES = crypto_secretbox_ZEROBYTES, crypto_box_BOXZEROBYTES = crypto_secretbox_BOXZEROBYTES, crypto_sign_BYTES = 64, crypto_sign_PUBLICKEYBYTES = 32, crypto_sign_SECRETKEYBYTES = 64, crypto_sign_SEEDBYTES = 32, crypto_hash_BYTES = 64;
-		nacl.lowlevel = {
-			crypto_core_hsalsa20,
-			crypto_stream_xor,
-			crypto_stream,
-			crypto_stream_salsa20_xor,
-			crypto_stream_salsa20,
-			crypto_onetimeauth,
-			crypto_onetimeauth_verify,
-			crypto_verify_16,
-			crypto_verify_32,
-			crypto_secretbox,
-			crypto_secretbox_open,
-			crypto_scalarmult,
-			crypto_scalarmult_base,
-			crypto_box_beforenm,
-			crypto_box_afternm,
-			crypto_box,
-			crypto_box_open,
-			crypto_box_keypair,
-			crypto_hash,
-			crypto_sign,
-			crypto_sign_keypair,
-			crypto_sign_open,
-			crypto_secretbox_KEYBYTES,
-			crypto_secretbox_NONCEBYTES,
-			crypto_secretbox_ZEROBYTES,
-			crypto_secretbox_BOXZEROBYTES,
-			crypto_scalarmult_BYTES,
-			crypto_scalarmult_SCALARBYTES,
-			crypto_box_PUBLICKEYBYTES,
-			crypto_box_SECRETKEYBYTES,
-			crypto_box_BEFORENMBYTES,
-			crypto_box_NONCEBYTES,
-			crypto_box_ZEROBYTES,
-			crypto_box_BOXZEROBYTES,
-			crypto_sign_BYTES,
-			crypto_sign_PUBLICKEYBYTES,
-			crypto_sign_SECRETKEYBYTES,
-			crypto_sign_SEEDBYTES,
-			crypto_hash_BYTES,
-			gf,
-			D,
-			L,
-			pack25519,
-			unpack25519,
-			M,
-			A,
-			S,
-			Z,
-			pow2523,
-			add,
-			set25519,
-			modL,
-			scalarmult,
-			scalarbase
-		};
-		function checkLengths(k, n) {
-			if (k.length !== crypto_secretbox_KEYBYTES) throw new Error("bad key size");
-			if (n.length !== crypto_secretbox_NONCEBYTES) throw new Error("bad nonce size");
-		}
-		function checkBoxLengths(pk, sk) {
-			if (pk.length !== crypto_box_PUBLICKEYBYTES) throw new Error("bad public key size");
-			if (sk.length !== crypto_box_SECRETKEYBYTES) throw new Error("bad secret key size");
-		}
-		function checkArrayTypes() {
-			for (var i = 0; i < arguments.length; i++) if (!(arguments[i] instanceof Uint8Array)) throw new TypeError("unexpected type, use Uint8Array");
-		}
-		function cleanup(arr) {
-			for (var i = 0; i < arr.length; i++) arr[i] = 0;
-		}
-		nacl.randomBytes = function(n) {
-			var b = new Uint8Array(n);
-			randombytes(b, n);
-			return b;
-		};
-		nacl.secretbox = function(msg, nonce, key) {
-			checkArrayTypes(msg, nonce, key);
-			checkLengths(key, nonce);
-			var m = new Uint8Array(crypto_secretbox_ZEROBYTES + msg.length);
-			var c = new Uint8Array(m.length);
-			for (var i = 0; i < msg.length; i++) m[i + crypto_secretbox_ZEROBYTES] = msg[i];
-			crypto_secretbox(c, m, m.length, nonce, key);
-			return c.subarray(crypto_secretbox_BOXZEROBYTES);
-		};
-		nacl.secretbox.open = function(box, nonce, key) {
-			checkArrayTypes(box, nonce, key);
-			checkLengths(key, nonce);
-			var c = new Uint8Array(crypto_secretbox_BOXZEROBYTES + box.length);
-			var m = new Uint8Array(c.length);
-			for (var i = 0; i < box.length; i++) c[i + crypto_secretbox_BOXZEROBYTES] = box[i];
-			if (c.length < 32) return null;
-			if (crypto_secretbox_open(m, c, c.length, nonce, key) !== 0) return null;
-			return m.subarray(crypto_secretbox_ZEROBYTES);
-		};
-		nacl.secretbox.keyLength = crypto_secretbox_KEYBYTES;
-		nacl.secretbox.nonceLength = crypto_secretbox_NONCEBYTES;
-		nacl.secretbox.overheadLength = crypto_secretbox_BOXZEROBYTES;
-		nacl.scalarMult = function(n, p) {
-			checkArrayTypes(n, p);
-			if (n.length !== crypto_scalarmult_SCALARBYTES) throw new Error("bad n size");
-			if (p.length !== crypto_scalarmult_BYTES) throw new Error("bad p size");
-			var q = new Uint8Array(crypto_scalarmult_BYTES);
-			crypto_scalarmult(q, n, p);
-			return q;
-		};
-		nacl.scalarMult.base = function(n) {
-			checkArrayTypes(n);
-			if (n.length !== crypto_scalarmult_SCALARBYTES) throw new Error("bad n size");
-			var q = new Uint8Array(crypto_scalarmult_BYTES);
-			crypto_scalarmult_base(q, n);
-			return q;
-		};
-		nacl.scalarMult.scalarLength = crypto_scalarmult_SCALARBYTES;
-		nacl.scalarMult.groupElementLength = crypto_scalarmult_BYTES;
-		nacl.box = function(msg, nonce, publicKey, secretKey) {
-			var k = nacl.box.before(publicKey, secretKey);
-			return nacl.secretbox(msg, nonce, k);
-		};
-		nacl.box.before = function(publicKey, secretKey) {
-			checkArrayTypes(publicKey, secretKey);
-			checkBoxLengths(publicKey, secretKey);
-			var k = new Uint8Array(crypto_box_BEFORENMBYTES);
-			crypto_box_beforenm(k, publicKey, secretKey);
-			return k;
-		};
-		nacl.box.after = nacl.secretbox;
-		nacl.box.open = function(msg, nonce, publicKey, secretKey) {
-			var k = nacl.box.before(publicKey, secretKey);
-			return nacl.secretbox.open(msg, nonce, k);
-		};
-		nacl.box.open.after = nacl.secretbox.open;
-		nacl.box.keyPair = function() {
-			var pk = new Uint8Array(crypto_box_PUBLICKEYBYTES);
-			var sk = new Uint8Array(crypto_box_SECRETKEYBYTES);
-			crypto_box_keypair(pk, sk);
-			return {
-				publicKey: pk,
-				secretKey: sk
-			};
-		};
-		nacl.box.keyPair.fromSecretKey = function(secretKey) {
-			checkArrayTypes(secretKey);
-			if (secretKey.length !== crypto_box_SECRETKEYBYTES) throw new Error("bad secret key size");
-			var pk = new Uint8Array(crypto_box_PUBLICKEYBYTES);
-			crypto_scalarmult_base(pk, secretKey);
-			return {
-				publicKey: pk,
-				secretKey: new Uint8Array(secretKey)
-			};
-		};
-		nacl.box.publicKeyLength = crypto_box_PUBLICKEYBYTES;
-		nacl.box.secretKeyLength = crypto_box_SECRETKEYBYTES;
-		nacl.box.sharedKeyLength = crypto_box_BEFORENMBYTES;
-		nacl.box.nonceLength = crypto_box_NONCEBYTES;
-		nacl.box.overheadLength = nacl.secretbox.overheadLength;
-		nacl.sign = function(msg, secretKey) {
-			checkArrayTypes(msg, secretKey);
-			if (secretKey.length !== crypto_sign_SECRETKEYBYTES) throw new Error("bad secret key size");
-			var signedMsg = new Uint8Array(crypto_sign_BYTES + msg.length);
-			crypto_sign(signedMsg, msg, msg.length, secretKey);
-			return signedMsg;
-		};
-		nacl.sign.open = function(signedMsg, publicKey) {
-			checkArrayTypes(signedMsg, publicKey);
-			if (publicKey.length !== crypto_sign_PUBLICKEYBYTES) throw new Error("bad public key size");
-			var tmp = new Uint8Array(signedMsg.length);
-			var mlen = crypto_sign_open(tmp, signedMsg, signedMsg.length, publicKey);
-			if (mlen < 0) return null;
-			var m = new Uint8Array(mlen);
-			for (var i = 0; i < m.length; i++) m[i] = tmp[i];
-			return m;
-		};
-		nacl.sign.detached = function(msg, secretKey) {
-			var signedMsg = nacl.sign(msg, secretKey);
-			var sig = new Uint8Array(crypto_sign_BYTES);
-			for (var i = 0; i < sig.length; i++) sig[i] = signedMsg[i];
-			return sig;
-		};
-		nacl.sign.detached.verify = function(msg, sig, publicKey) {
-			checkArrayTypes(msg, sig, publicKey);
-			if (sig.length !== crypto_sign_BYTES) throw new Error("bad signature size");
-			if (publicKey.length !== crypto_sign_PUBLICKEYBYTES) throw new Error("bad public key size");
-			var sm = new Uint8Array(crypto_sign_BYTES + msg.length);
-			var m = new Uint8Array(crypto_sign_BYTES + msg.length);
-			var i;
-			for (i = 0; i < crypto_sign_BYTES; i++) sm[i] = sig[i];
-			for (i = 0; i < msg.length; i++) sm[i + crypto_sign_BYTES] = msg[i];
-			return crypto_sign_open(m, sm, sm.length, publicKey) >= 0;
-		};
-		nacl.sign.keyPair = function() {
-			var pk = new Uint8Array(crypto_sign_PUBLICKEYBYTES);
-			var sk = new Uint8Array(crypto_sign_SECRETKEYBYTES);
-			crypto_sign_keypair(pk, sk);
-			return {
-				publicKey: pk,
-				secretKey: sk
-			};
-		};
-		nacl.sign.keyPair.fromSecretKey = function(secretKey) {
-			checkArrayTypes(secretKey);
-			if (secretKey.length !== crypto_sign_SECRETKEYBYTES) throw new Error("bad secret key size");
-			var pk = new Uint8Array(crypto_sign_PUBLICKEYBYTES);
-			for (var i = 0; i < pk.length; i++) pk[i] = secretKey[32 + i];
-			return {
-				publicKey: pk,
-				secretKey: new Uint8Array(secretKey)
-			};
-		};
-		nacl.sign.keyPair.fromSeed = function(seed) {
-			checkArrayTypes(seed);
-			if (seed.length !== crypto_sign_SEEDBYTES) throw new Error("bad seed size");
-			var pk = new Uint8Array(crypto_sign_PUBLICKEYBYTES);
-			var sk = new Uint8Array(crypto_sign_SECRETKEYBYTES);
-			for (var i = 0; i < 32; i++) sk[i] = seed[i];
-			crypto_sign_keypair(pk, sk, true);
-			return {
-				publicKey: pk,
-				secretKey: sk
-			};
-		};
-		nacl.sign.publicKeyLength = crypto_sign_PUBLICKEYBYTES;
-		nacl.sign.secretKeyLength = crypto_sign_SECRETKEYBYTES;
-		nacl.sign.seedLength = crypto_sign_SEEDBYTES;
-		nacl.sign.signatureLength = crypto_sign_BYTES;
-		nacl.hash = function(msg) {
-			checkArrayTypes(msg);
-			var h = new Uint8Array(crypto_hash_BYTES);
-			crypto_hash(h, msg, msg.length);
-			return h;
-		};
-		nacl.hash.hashLength = crypto_hash_BYTES;
-		nacl.verify = function(x, y) {
-			checkArrayTypes(x, y);
-			if (x.length === 0 || y.length === 0) return false;
-			if (x.length !== y.length) return false;
-			return vn(x, 0, y, 0, x.length) === 0 ? true : false;
-		};
-		nacl.setPRNG = function(fn) {
-			randombytes = fn;
-		};
-		(function() {
-			var crypto = typeof self !== "undefined" ? self.crypto || self.msCrypto : null;
-			if (crypto && crypto.getRandomValues) {
-				var QUOTA = 65536;
-				nacl.setPRNG(function(x, n) {
-					var i, v = new Uint8Array(n);
-					for (i = 0; i < n; i += QUOTA) crypto.getRandomValues(v.subarray(i, i + Math.min(n - i, QUOTA)));
-					for (i = 0; i < n; i++) x[i] = v[i];
-					cleanup(v);
-				});
-			} else if (typeof __require !== "undefined") {
-				crypto = __require("crypto");
-				if (crypto && crypto.randomBytes) nacl.setPRNG(function(x, n) {
-					var i, v = crypto.randomBytes(n);
-					for (i = 0; i < n; i++) x[i] = v[i];
-					cleanup(v);
-				});
-			}
-		})();
-	})(typeof module !== "undefined" && module.exports ? module.exports : self.nacl = self.nacl || {});
-}));
+		h = ah0;
+		l = al0;
+		a = l & 65535;
+		b = l >>> 16;
+		c = h & 65535;
+		d = h >>> 16;
+		h = hh[0];
+		l = hl[0];
+		a += l & 65535;
+		b += l >>> 16;
+		c += h & 65535;
+		d += h >>> 16;
+		b += a >>> 16;
+		c += b >>> 16;
+		d += c >>> 16;
+		hh[0] = ah0 = c & 65535 | d << 16;
+		hl[0] = al0 = a & 65535 | b << 16;
+		h = ah1;
+		l = al1;
+		a = l & 65535;
+		b = l >>> 16;
+		c = h & 65535;
+		d = h >>> 16;
+		h = hh[1];
+		l = hl[1];
+		a += l & 65535;
+		b += l >>> 16;
+		c += h & 65535;
+		d += h >>> 16;
+		b += a >>> 16;
+		c += b >>> 16;
+		d += c >>> 16;
+		hh[1] = ah1 = c & 65535 | d << 16;
+		hl[1] = al1 = a & 65535 | b << 16;
+		h = ah2;
+		l = al2;
+		a = l & 65535;
+		b = l >>> 16;
+		c = h & 65535;
+		d = h >>> 16;
+		h = hh[2];
+		l = hl[2];
+		a += l & 65535;
+		b += l >>> 16;
+		c += h & 65535;
+		d += h >>> 16;
+		b += a >>> 16;
+		c += b >>> 16;
+		d += c >>> 16;
+		hh[2] = ah2 = c & 65535 | d << 16;
+		hl[2] = al2 = a & 65535 | b << 16;
+		h = ah3;
+		l = al3;
+		a = l & 65535;
+		b = l >>> 16;
+		c = h & 65535;
+		d = h >>> 16;
+		h = hh[3];
+		l = hl[3];
+		a += l & 65535;
+		b += l >>> 16;
+		c += h & 65535;
+		d += h >>> 16;
+		b += a >>> 16;
+		c += b >>> 16;
+		d += c >>> 16;
+		hh[3] = ah3 = c & 65535 | d << 16;
+		hl[3] = al3 = a & 65535 | b << 16;
+		h = ah4;
+		l = al4;
+		a = l & 65535;
+		b = l >>> 16;
+		c = h & 65535;
+		d = h >>> 16;
+		h = hh[4];
+		l = hl[4];
+		a += l & 65535;
+		b += l >>> 16;
+		c += h & 65535;
+		d += h >>> 16;
+		b += a >>> 16;
+		c += b >>> 16;
+		d += c >>> 16;
+		hh[4] = ah4 = c & 65535 | d << 16;
+		hl[4] = al4 = a & 65535 | b << 16;
+		h = ah5;
+		l = al5;
+		a = l & 65535;
+		b = l >>> 16;
+		c = h & 65535;
+		d = h >>> 16;
+		h = hh[5];
+		l = hl[5];
+		a += l & 65535;
+		b += l >>> 16;
+		c += h & 65535;
+		d += h >>> 16;
+		b += a >>> 16;
+		c += b >>> 16;
+		d += c >>> 16;
+		hh[5] = ah5 = c & 65535 | d << 16;
+		hl[5] = al5 = a & 65535 | b << 16;
+		h = ah6;
+		l = al6;
+		a = l & 65535;
+		b = l >>> 16;
+		c = h & 65535;
+		d = h >>> 16;
+		h = hh[6];
+		l = hl[6];
+		a += l & 65535;
+		b += l >>> 16;
+		c += h & 65535;
+		d += h >>> 16;
+		b += a >>> 16;
+		c += b >>> 16;
+		d += c >>> 16;
+		hh[6] = ah6 = c & 65535 | d << 16;
+		hl[6] = al6 = a & 65535 | b << 16;
+		h = ah7;
+		l = al7;
+		a = l & 65535;
+		b = l >>> 16;
+		c = h & 65535;
+		d = h >>> 16;
+		h = hh[7];
+		l = hl[7];
+		a += l & 65535;
+		b += l >>> 16;
+		c += h & 65535;
+		d += h >>> 16;
+		b += a >>> 16;
+		c += b >>> 16;
+		d += c >>> 16;
+		hh[7] = ah7 = c & 65535 | d << 16;
+		hl[7] = al7 = a & 65535 | b << 16;
+		pos += 128;
+		len -= 128;
+	}
+	return pos;
+}
+function hash(data) {
+	const h = new SHA512();
+	h.update(data);
+	const digest = h.digest();
+	h.clean();
+	return digest;
+}
 
 //#endregion
-//#region src/curve25519.ts
-var curve25519_exports = /* @__PURE__ */ __exportAll({
-	generateKeyPair: () => generateKeyPair$1,
-	generateSharedSecKey: () => generateSharedSecKey
-});
-var import_nacl_fast = /* @__PURE__ */ __toESM(require_nacl_fast(), 1);
-function generateKeyPair$1() {
-	const keyPair = import_nacl_fast.default.box.keyPair();
+//#region ../../node_modules/.bun/@stablelib+ed25519@2.0.2/node_modules/@stablelib/ed25519/lib/ed25519.js
+const SIGNATURE_LENGTH = 64;
+const SECRET_KEY_LENGTH = 64;
+const SEED_LENGTH = 32;
+function gf(init) {
+	const r = new Float64Array(16);
+	if (init) for (let i = 0; i < init.length; i++) r[i] = init[i];
+	return r;
+}
+const _9 = new Uint8Array(32);
+_9[0] = 9;
+const gf0 = gf();
+const gf1 = gf([1]);
+const D = gf([
+	30883,
+	4953,
+	19914,
+	30187,
+	55467,
+	16705,
+	2637,
+	112,
+	59544,
+	30585,
+	16505,
+	36039,
+	65139,
+	11119,
+	27886,
+	20995
+]);
+const D2 = gf([
+	61785,
+	9906,
+	39828,
+	60374,
+	45398,
+	33411,
+	5274,
+	224,
+	53552,
+	61171,
+	33010,
+	6542,
+	64743,
+	22239,
+	55772,
+	9222
+]);
+const X = gf([
+	54554,
+	36645,
+	11616,
+	51542,
+	42930,
+	38181,
+	51040,
+	26924,
+	56412,
+	64982,
+	57905,
+	49316,
+	21502,
+	52590,
+	14035,
+	8553
+]);
+const Y = gf([
+	26200,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214,
+	26214
+]);
+const I = gf([
+	41136,
+	18958,
+	6951,
+	50414,
+	58488,
+	44335,
+	6150,
+	12099,
+	55207,
+	15867,
+	153,
+	11085,
+	57099,
+	20417,
+	9344,
+	11139
+]);
+function set25519(r, a) {
+	for (let i = 0; i < 16; i++) r[i] = a[i] | 0;
+}
+function car25519(o) {
+	let c = 1;
+	for (let i = 0; i < 16; i++) {
+		let v = o[i] + c + 65535;
+		c = Math.floor(v / 65536);
+		o[i] = v - c * 65536;
+	}
+	o[0] += c - 1 + 37 * (c - 1);
+}
+function sel25519(p, q, b) {
+	const c = ~(b - 1);
+	for (let i = 0; i < 16; i++) {
+		const t = c & (p[i] ^ q[i]);
+		p[i] ^= t;
+		q[i] ^= t;
+	}
+}
+function pack25519(o, n) {
+	const m = gf();
+	const t = gf();
+	for (let i = 0; i < 16; i++) t[i] = n[i];
+	car25519(t);
+	car25519(t);
+	car25519(t);
+	for (let j = 0; j < 2; j++) {
+		m[0] = t[0] - 65517;
+		for (let i = 1; i < 15; i++) {
+			m[i] = t[i] - 65535 - (m[i - 1] >> 16 & 1);
+			m[i - 1] &= 65535;
+		}
+		m[15] = t[15] - 32767 - (m[14] >> 16 & 1);
+		const b = m[15] >> 16 & 1;
+		m[14] &= 65535;
+		sel25519(t, m, 1 - b);
+	}
+	for (let i = 0; i < 16; i++) {
+		o[2 * i] = t[i] & 255;
+		o[2 * i + 1] = t[i] >> 8;
+	}
+}
+function verify32(x, y) {
+	let d = 0;
+	for (let i = 0; i < 32; i++) d |= x[i] ^ y[i];
+	return (1 & d - 1 >>> 8) - 1;
+}
+function neq25519(a, b) {
+	const c = new Uint8Array(32);
+	const d = new Uint8Array(32);
+	pack25519(c, a);
+	pack25519(d, b);
+	return verify32(c, d);
+}
+function par25519(a) {
+	const d = new Uint8Array(32);
+	pack25519(d, a);
+	return d[0] & 1;
+}
+function unpack25519(o, n) {
+	for (let i = 0; i < 16; i++) o[i] = n[2 * i] + (n[2 * i + 1] << 8);
+	o[15] &= 32767;
+}
+function add(o, a, b) {
+	for (let i = 0; i < 16; i++) o[i] = a[i] + b[i];
+}
+function sub(o, a, b) {
+	for (let i = 0; i < 16; i++) o[i] = a[i] - b[i];
+}
+function mul(o, a, b) {
+	let v, c, t0 = 0, t1 = 0, t2 = 0, t3 = 0, t4 = 0, t5 = 0, t6 = 0, t7 = 0, t8 = 0, t9 = 0, t10 = 0, t11 = 0, t12 = 0, t13 = 0, t14 = 0, t15 = 0, t16 = 0, t17 = 0, t18 = 0, t19 = 0, t20 = 0, t21 = 0, t22 = 0, t23 = 0, t24 = 0, t25 = 0, t26 = 0, t27 = 0, t28 = 0, t29 = 0, t30 = 0, b0 = b[0], b1 = b[1], b2 = b[2], b3 = b[3], b4 = b[4], b5 = b[5], b6 = b[6], b7 = b[7], b8 = b[8], b9 = b[9], b10 = b[10], b11 = b[11], b12 = b[12], b13 = b[13], b14 = b[14], b15 = b[15];
+	v = a[0];
+	t0 += v * b0;
+	t1 += v * b1;
+	t2 += v * b2;
+	t3 += v * b3;
+	t4 += v * b4;
+	t5 += v * b5;
+	t6 += v * b6;
+	t7 += v * b7;
+	t8 += v * b8;
+	t9 += v * b9;
+	t10 += v * b10;
+	t11 += v * b11;
+	t12 += v * b12;
+	t13 += v * b13;
+	t14 += v * b14;
+	t15 += v * b15;
+	v = a[1];
+	t1 += v * b0;
+	t2 += v * b1;
+	t3 += v * b2;
+	t4 += v * b3;
+	t5 += v * b4;
+	t6 += v * b5;
+	t7 += v * b6;
+	t8 += v * b7;
+	t9 += v * b8;
+	t10 += v * b9;
+	t11 += v * b10;
+	t12 += v * b11;
+	t13 += v * b12;
+	t14 += v * b13;
+	t15 += v * b14;
+	t16 += v * b15;
+	v = a[2];
+	t2 += v * b0;
+	t3 += v * b1;
+	t4 += v * b2;
+	t5 += v * b3;
+	t6 += v * b4;
+	t7 += v * b5;
+	t8 += v * b6;
+	t9 += v * b7;
+	t10 += v * b8;
+	t11 += v * b9;
+	t12 += v * b10;
+	t13 += v * b11;
+	t14 += v * b12;
+	t15 += v * b13;
+	t16 += v * b14;
+	t17 += v * b15;
+	v = a[3];
+	t3 += v * b0;
+	t4 += v * b1;
+	t5 += v * b2;
+	t6 += v * b3;
+	t7 += v * b4;
+	t8 += v * b5;
+	t9 += v * b6;
+	t10 += v * b7;
+	t11 += v * b8;
+	t12 += v * b9;
+	t13 += v * b10;
+	t14 += v * b11;
+	t15 += v * b12;
+	t16 += v * b13;
+	t17 += v * b14;
+	t18 += v * b15;
+	v = a[4];
+	t4 += v * b0;
+	t5 += v * b1;
+	t6 += v * b2;
+	t7 += v * b3;
+	t8 += v * b4;
+	t9 += v * b5;
+	t10 += v * b6;
+	t11 += v * b7;
+	t12 += v * b8;
+	t13 += v * b9;
+	t14 += v * b10;
+	t15 += v * b11;
+	t16 += v * b12;
+	t17 += v * b13;
+	t18 += v * b14;
+	t19 += v * b15;
+	v = a[5];
+	t5 += v * b0;
+	t6 += v * b1;
+	t7 += v * b2;
+	t8 += v * b3;
+	t9 += v * b4;
+	t10 += v * b5;
+	t11 += v * b6;
+	t12 += v * b7;
+	t13 += v * b8;
+	t14 += v * b9;
+	t15 += v * b10;
+	t16 += v * b11;
+	t17 += v * b12;
+	t18 += v * b13;
+	t19 += v * b14;
+	t20 += v * b15;
+	v = a[6];
+	t6 += v * b0;
+	t7 += v * b1;
+	t8 += v * b2;
+	t9 += v * b3;
+	t10 += v * b4;
+	t11 += v * b5;
+	t12 += v * b6;
+	t13 += v * b7;
+	t14 += v * b8;
+	t15 += v * b9;
+	t16 += v * b10;
+	t17 += v * b11;
+	t18 += v * b12;
+	t19 += v * b13;
+	t20 += v * b14;
+	t21 += v * b15;
+	v = a[7];
+	t7 += v * b0;
+	t8 += v * b1;
+	t9 += v * b2;
+	t10 += v * b3;
+	t11 += v * b4;
+	t12 += v * b5;
+	t13 += v * b6;
+	t14 += v * b7;
+	t15 += v * b8;
+	t16 += v * b9;
+	t17 += v * b10;
+	t18 += v * b11;
+	t19 += v * b12;
+	t20 += v * b13;
+	t21 += v * b14;
+	t22 += v * b15;
+	v = a[8];
+	t8 += v * b0;
+	t9 += v * b1;
+	t10 += v * b2;
+	t11 += v * b3;
+	t12 += v * b4;
+	t13 += v * b5;
+	t14 += v * b6;
+	t15 += v * b7;
+	t16 += v * b8;
+	t17 += v * b9;
+	t18 += v * b10;
+	t19 += v * b11;
+	t20 += v * b12;
+	t21 += v * b13;
+	t22 += v * b14;
+	t23 += v * b15;
+	v = a[9];
+	t9 += v * b0;
+	t10 += v * b1;
+	t11 += v * b2;
+	t12 += v * b3;
+	t13 += v * b4;
+	t14 += v * b5;
+	t15 += v * b6;
+	t16 += v * b7;
+	t17 += v * b8;
+	t18 += v * b9;
+	t19 += v * b10;
+	t20 += v * b11;
+	t21 += v * b12;
+	t22 += v * b13;
+	t23 += v * b14;
+	t24 += v * b15;
+	v = a[10];
+	t10 += v * b0;
+	t11 += v * b1;
+	t12 += v * b2;
+	t13 += v * b3;
+	t14 += v * b4;
+	t15 += v * b5;
+	t16 += v * b6;
+	t17 += v * b7;
+	t18 += v * b8;
+	t19 += v * b9;
+	t20 += v * b10;
+	t21 += v * b11;
+	t22 += v * b12;
+	t23 += v * b13;
+	t24 += v * b14;
+	t25 += v * b15;
+	v = a[11];
+	t11 += v * b0;
+	t12 += v * b1;
+	t13 += v * b2;
+	t14 += v * b3;
+	t15 += v * b4;
+	t16 += v * b5;
+	t17 += v * b6;
+	t18 += v * b7;
+	t19 += v * b8;
+	t20 += v * b9;
+	t21 += v * b10;
+	t22 += v * b11;
+	t23 += v * b12;
+	t24 += v * b13;
+	t25 += v * b14;
+	t26 += v * b15;
+	v = a[12];
+	t12 += v * b0;
+	t13 += v * b1;
+	t14 += v * b2;
+	t15 += v * b3;
+	t16 += v * b4;
+	t17 += v * b5;
+	t18 += v * b6;
+	t19 += v * b7;
+	t20 += v * b8;
+	t21 += v * b9;
+	t22 += v * b10;
+	t23 += v * b11;
+	t24 += v * b12;
+	t25 += v * b13;
+	t26 += v * b14;
+	t27 += v * b15;
+	v = a[13];
+	t13 += v * b0;
+	t14 += v * b1;
+	t15 += v * b2;
+	t16 += v * b3;
+	t17 += v * b4;
+	t18 += v * b5;
+	t19 += v * b6;
+	t20 += v * b7;
+	t21 += v * b8;
+	t22 += v * b9;
+	t23 += v * b10;
+	t24 += v * b11;
+	t25 += v * b12;
+	t26 += v * b13;
+	t27 += v * b14;
+	t28 += v * b15;
+	v = a[14];
+	t14 += v * b0;
+	t15 += v * b1;
+	t16 += v * b2;
+	t17 += v * b3;
+	t18 += v * b4;
+	t19 += v * b5;
+	t20 += v * b6;
+	t21 += v * b7;
+	t22 += v * b8;
+	t23 += v * b9;
+	t24 += v * b10;
+	t25 += v * b11;
+	t26 += v * b12;
+	t27 += v * b13;
+	t28 += v * b14;
+	t29 += v * b15;
+	v = a[15];
+	t15 += v * b0;
+	t16 += v * b1;
+	t17 += v * b2;
+	t18 += v * b3;
+	t19 += v * b4;
+	t20 += v * b5;
+	t21 += v * b6;
+	t22 += v * b7;
+	t23 += v * b8;
+	t24 += v * b9;
+	t25 += v * b10;
+	t26 += v * b11;
+	t27 += v * b12;
+	t28 += v * b13;
+	t29 += v * b14;
+	t30 += v * b15;
+	t0 += 38 * t16;
+	t1 += 38 * t17;
+	t2 += 38 * t18;
+	t3 += 38 * t19;
+	t4 += 38 * t20;
+	t5 += 38 * t21;
+	t6 += 38 * t22;
+	t7 += 38 * t23;
+	t8 += 38 * t24;
+	t9 += 38 * t25;
+	t10 += 38 * t26;
+	t11 += 38 * t27;
+	t12 += 38 * t28;
+	t13 += 38 * t29;
+	t14 += 38 * t30;
+	c = 1;
+	v = t0 + c + 65535;
+	c = Math.floor(v / 65536);
+	t0 = v - c * 65536;
+	v = t1 + c + 65535;
+	c = Math.floor(v / 65536);
+	t1 = v - c * 65536;
+	v = t2 + c + 65535;
+	c = Math.floor(v / 65536);
+	t2 = v - c * 65536;
+	v = t3 + c + 65535;
+	c = Math.floor(v / 65536);
+	t3 = v - c * 65536;
+	v = t4 + c + 65535;
+	c = Math.floor(v / 65536);
+	t4 = v - c * 65536;
+	v = t5 + c + 65535;
+	c = Math.floor(v / 65536);
+	t5 = v - c * 65536;
+	v = t6 + c + 65535;
+	c = Math.floor(v / 65536);
+	t6 = v - c * 65536;
+	v = t7 + c + 65535;
+	c = Math.floor(v / 65536);
+	t7 = v - c * 65536;
+	v = t8 + c + 65535;
+	c = Math.floor(v / 65536);
+	t8 = v - c * 65536;
+	v = t9 + c + 65535;
+	c = Math.floor(v / 65536);
+	t9 = v - c * 65536;
+	v = t10 + c + 65535;
+	c = Math.floor(v / 65536);
+	t10 = v - c * 65536;
+	v = t11 + c + 65535;
+	c = Math.floor(v / 65536);
+	t11 = v - c * 65536;
+	v = t12 + c + 65535;
+	c = Math.floor(v / 65536);
+	t12 = v - c * 65536;
+	v = t13 + c + 65535;
+	c = Math.floor(v / 65536);
+	t13 = v - c * 65536;
+	v = t14 + c + 65535;
+	c = Math.floor(v / 65536);
+	t14 = v - c * 65536;
+	v = t15 + c + 65535;
+	c = Math.floor(v / 65536);
+	t15 = v - c * 65536;
+	t0 += c - 1 + 37 * (c - 1);
+	c = 1;
+	v = t0 + c + 65535;
+	c = Math.floor(v / 65536);
+	t0 = v - c * 65536;
+	v = t1 + c + 65535;
+	c = Math.floor(v / 65536);
+	t1 = v - c * 65536;
+	v = t2 + c + 65535;
+	c = Math.floor(v / 65536);
+	t2 = v - c * 65536;
+	v = t3 + c + 65535;
+	c = Math.floor(v / 65536);
+	t3 = v - c * 65536;
+	v = t4 + c + 65535;
+	c = Math.floor(v / 65536);
+	t4 = v - c * 65536;
+	v = t5 + c + 65535;
+	c = Math.floor(v / 65536);
+	t5 = v - c * 65536;
+	v = t6 + c + 65535;
+	c = Math.floor(v / 65536);
+	t6 = v - c * 65536;
+	v = t7 + c + 65535;
+	c = Math.floor(v / 65536);
+	t7 = v - c * 65536;
+	v = t8 + c + 65535;
+	c = Math.floor(v / 65536);
+	t8 = v - c * 65536;
+	v = t9 + c + 65535;
+	c = Math.floor(v / 65536);
+	t9 = v - c * 65536;
+	v = t10 + c + 65535;
+	c = Math.floor(v / 65536);
+	t10 = v - c * 65536;
+	v = t11 + c + 65535;
+	c = Math.floor(v / 65536);
+	t11 = v - c * 65536;
+	v = t12 + c + 65535;
+	c = Math.floor(v / 65536);
+	t12 = v - c * 65536;
+	v = t13 + c + 65535;
+	c = Math.floor(v / 65536);
+	t13 = v - c * 65536;
+	v = t14 + c + 65535;
+	c = Math.floor(v / 65536);
+	t14 = v - c * 65536;
+	v = t15 + c + 65535;
+	c = Math.floor(v / 65536);
+	t15 = v - c * 65536;
+	t0 += c - 1 + 37 * (c - 1);
+	o[0] = t0;
+	o[1] = t1;
+	o[2] = t2;
+	o[3] = t3;
+	o[4] = t4;
+	o[5] = t5;
+	o[6] = t6;
+	o[7] = t7;
+	o[8] = t8;
+	o[9] = t9;
+	o[10] = t10;
+	o[11] = t11;
+	o[12] = t12;
+	o[13] = t13;
+	o[14] = t14;
+	o[15] = t15;
+}
+function square(o, a) {
+	mul(o, a, a);
+}
+function inv25519(o, i) {
+	const c = gf();
+	let a;
+	for (a = 0; a < 16; a++) c[a] = i[a];
+	for (a = 253; a >= 0; a--) {
+		square(c, c);
+		if (a !== 2 && a !== 4) mul(c, c, i);
+	}
+	for (a = 0; a < 16; a++) o[a] = c[a];
+}
+function pow2523(o, i) {
+	const c = gf();
+	let a;
+	for (a = 0; a < 16; a++) c[a] = i[a];
+	for (a = 250; a >= 0; a--) {
+		square(c, c);
+		if (a !== 1) mul(c, c, i);
+	}
+	for (a = 0; a < 16; a++) o[a] = c[a];
+}
+function edadd(p, q) {
+	const a = gf(), b = gf(), c = gf(), d = gf(), e = gf(), f = gf(), g = gf(), h = gf(), t = gf();
+	sub(a, p[1], p[0]);
+	sub(t, q[1], q[0]);
+	mul(a, a, t);
+	add(b, p[0], p[1]);
+	add(t, q[0], q[1]);
+	mul(b, b, t);
+	mul(c, p[3], q[3]);
+	mul(c, c, D2);
+	mul(d, p[2], q[2]);
+	add(d, d, d);
+	sub(e, b, a);
+	sub(f, d, c);
+	add(g, d, c);
+	add(h, b, a);
+	mul(p[0], e, f);
+	mul(p[1], h, g);
+	mul(p[2], g, f);
+	mul(p[3], e, h);
+}
+function cswap(p, q, b) {
+	for (let i = 0; i < 4; i++) sel25519(p[i], q[i], b);
+}
+function pack(r, p) {
+	const tx = gf(), ty = gf(), zi = gf();
+	inv25519(zi, p[2]);
+	mul(tx, p[0], zi);
+	mul(ty, p[1], zi);
+	pack25519(r, ty);
+	r[31] ^= par25519(tx) << 7;
+}
+function scalarmult(p, q, s) {
+	set25519(p[0], gf0);
+	set25519(p[1], gf1);
+	set25519(p[2], gf1);
+	set25519(p[3], gf0);
+	for (let i = 255; i >= 0; --i) {
+		const b = s[i / 8 | 0] >> (i & 7) & 1;
+		cswap(p, q, b);
+		edadd(q, p);
+		edadd(p, p);
+		cswap(p, q, b);
+	}
+}
+function scalarbase(p, s) {
+	const q = [
+		gf(),
+		gf(),
+		gf(),
+		gf()
+	];
+	set25519(q[0], X);
+	set25519(q[1], Y);
+	set25519(q[2], gf1);
+	mul(q[3], X, Y);
+	scalarmult(p, q, s);
+}
+function generateKeyPairFromSeed(seed) {
+	if (seed.length !== 32) throw new Error(`ed25519: seed must be ${32} bytes`);
+	const d = hash(seed);
+	d[0] &= 248;
+	d[31] &= 127;
+	d[31] |= 64;
+	const publicKey = new Uint8Array(32);
+	const p = [
+		gf(),
+		gf(),
+		gf(),
+		gf()
+	];
+	scalarbase(p, d);
+	pack(publicKey, p);
+	const secretKey = new Uint8Array(64);
+	secretKey.set(seed);
+	secretKey.set(publicKey, 32);
 	return {
-		publicKey: keyPair.publicKey,
-		secretKey: keyPair.secretKey
+		publicKey,
+		secretKey
 	};
 }
-function generateSharedSecKey(priKey, pubKey) {
-	return import_nacl_fast.default.scalarMult(priKey, pubKey);
+function generateKeyPair$1(prng) {
+	const seed = randomBytes(32, prng);
+	const result = generateKeyPairFromSeed(seed);
+	wipe(seed);
+	return result;
+}
+const L = new Float64Array([
+	237,
+	211,
+	245,
+	92,
+	26,
+	99,
+	18,
+	88,
+	214,
+	156,
+	247,
+	162,
+	222,
+	249,
+	222,
+	20,
+	0,
+	0,
+	0,
+	0,
+	0,
+	0,
+	0,
+	0,
+	0,
+	0,
+	0,
+	0,
+	0,
+	0,
+	0,
+	16
+]);
+function modL(r, x) {
+	let carry;
+	let i;
+	let j;
+	let k;
+	for (i = 63; i >= 32; --i) {
+		carry = 0;
+		for (j = i - 32, k = i - 12; j < k; ++j) {
+			x[j] += carry - 16 * x[i] * L[j - (i - 32)];
+			carry = Math.floor((x[j] + 128) / 256);
+			x[j] -= carry * 256;
+		}
+		x[j] += carry;
+		x[i] = 0;
+	}
+	carry = 0;
+	for (j = 0; j < 32; j++) {
+		x[j] += carry - (x[31] >> 4) * L[j];
+		carry = x[j] >> 8;
+		x[j] &= 255;
+	}
+	for (j = 0; j < 32; j++) x[j] -= carry * L[j];
+	for (i = 0; i < 32; i++) {
+		x[i + 1] += x[i] >> 8;
+		r[i] = x[i] & 255;
+	}
+}
+function reduce(r) {
+	const x = new Float64Array(64);
+	for (let i = 0; i < 64; i++) x[i] = r[i];
+	for (let i = 0; i < 64; i++) r[i] = 0;
+	modL(r, x);
+}
+function sign$1(secretKey, message) {
+	if (secretKey.length !== 64) throw new Error(`ed25519: secret key must be ${64} bytes`);
+	const x = new Float64Array(64);
+	const p = [
+		gf(),
+		gf(),
+		gf(),
+		gf()
+	];
+	const d = hash(secretKey.subarray(0, 32));
+	d[0] &= 248;
+	d[31] &= 127;
+	d[31] |= 64;
+	const signature = new Uint8Array(64);
+	signature.set(d.subarray(32), 32);
+	const hs = new SHA512();
+	hs.update(signature.subarray(32));
+	hs.update(message);
+	const r = hs.digest();
+	hs.clean();
+	reduce(r);
+	scalarbase(p, r);
+	pack(signature, p);
+	hs.reset();
+	hs.update(signature.subarray(0, 32));
+	hs.update(secretKey.subarray(32));
+	hs.update(message);
+	const h = hs.digest();
+	reduce(h);
+	for (let i = 0; i < 32; i++) x[i] = r[i];
+	for (let i = 0; i < 32; i++) for (let j = 0; j < 32; j++) x[i + j] += h[i] * d[j];
+	modL(signature.subarray(32), x);
+	return signature;
+}
+function unpackneg(r, p) {
+	const t = gf(), chk = gf(), num = gf(), den = gf(), den2 = gf(), den4 = gf(), den6 = gf();
+	set25519(r[2], gf1);
+	unpack25519(r[1], p);
+	square(num, r[1]);
+	mul(den, num, D);
+	sub(num, num, r[2]);
+	add(den, r[2], den);
+	square(den2, den);
+	square(den4, den2);
+	mul(den6, den4, den2);
+	mul(t, den6, num);
+	mul(t, t, den);
+	pow2523(t, t);
+	mul(t, t, num);
+	mul(t, t, den);
+	mul(t, t, den);
+	mul(r[0], t, den);
+	square(chk, r[0]);
+	mul(chk, chk, den);
+	if (neq25519(chk, num)) mul(r[0], r[0], I);
+	square(chk, r[0]);
+	mul(chk, chk, den);
+	if (neq25519(chk, num)) return -1;
+	if (par25519(r[0]) === p[31] >> 7) sub(r[0], gf0, r[0]);
+	mul(r[3], r[0], r[1]);
+	return 0;
+}
+function verify$1(publicKey, message, signature) {
+	const t = new Uint8Array(32);
+	const p = [
+		gf(),
+		gf(),
+		gf(),
+		gf()
+	];
+	const q = [
+		gf(),
+		gf(),
+		gf(),
+		gf()
+	];
+	if (signature.length !== 64) throw new Error(`ed25519: signature must be ${64} bytes`);
+	if (unpackneg(q, publicKey)) return false;
+	const hs = new SHA512();
+	hs.update(signature.subarray(0, 32));
+	hs.update(publicKey);
+	hs.update(message);
+	const h = hs.digest();
+	reduce(h);
+	scalarmult(p, q, h);
+	scalarbase(q, signature.subarray(32));
+	edadd(p, q);
+	pack(t, p);
+	if (verify32(signature, t)) return false;
+	return true;
 }
 
 //#endregion
@@ -3230,17 +2959,13 @@ var ed25519_exports = /* @__PURE__ */ __exportAll({
 	verify: () => verify
 });
 function generateKeyPair() {
-	const keyPair = import_nacl_fast.default.sign.keyPair();
-	return {
-		publicKey: keyPair.publicKey,
-		secretKey: keyPair.secretKey
-	};
+	return generateKeyPair$1();
 }
 function sign(message, secretKey) {
-	return import_nacl_fast.default.sign.detached(message, secretKey);
+	return sign$1(secretKey, message);
 }
 function verify(message, signature, publicKey) {
-	return import_nacl_fast.default.sign.detached.verify(message, signature, publicKey);
+	return verify$1(publicKey, message, signature);
 }
 
 //#endregion