@bitgo-beta/sdk-api 1.10.1-beta.207 → 1.10.1-beta.2070

package/dist/src/decryptV1.d.ts

@@ -0,0 +1,60 @@
+import { createDecipheriv, pbkdf2 } from 'crypto';
+import * as t from 'io-ts';
+/**
+ * Minimal shape the decrypt path needs from a crypto module. Both `node:crypto`
+ * and `crypto-browserify` satisfy this. Passing this in from tests lets the
+ * browser-shim test suite exercise the real decrypt code instead of a copy.
+ */
+export interface CryptoModule {
+    pbkdf2: typeof pbkdf2;
+    createDecipheriv: typeof createDecipheriv;
+}
+/**
+ * Upper bound on PBKDF2 iterations accepted from a v1 envelope. BitGo-produced
+ * v1 envelopes use 10,000; this cap is 10x that. Envelope validation enforces
+ * it up front before any KDF work runs.
+ */
+export declare const V1_MAX_ITER = 100000;
+/**
+ * io-ts codec for a v1 (SJCL) envelope.
+ *
+ * Enforces the shape and the `iter` cap up front, before any KDF work runs.
+ */
+declare const V1EnvelopeCodec: t.IntersectionC<[t.TypeC<{
+    v: t.LiteralC<1>;
+    iter: t.Type<number, number, unknown>;
+    ks: t.UnionC<[t.LiteralC<128>, t.LiteralC<256>]>;
+    ts: t.UnionC<[t.LiteralC<64>, t.LiteralC<96>, t.LiteralC<128>]>;
+    mode: t.LiteralC<"ccm">;
+    cipher: t.LiteralC<"aes">;
+    salt: t.Type<string, string, unknown>;
+    iv: t.Type<string, string, unknown>;
+    ct: t.Type<string, string, unknown>;
+}>, t.PartialC<{
+    adata: t.StringC;
+}>]>;
+export type V1Envelope = t.TypeOf<typeof V1EnvelopeCodec>;
+export declare function parseV1Envelope(ciphertext: string): V1Envelope;
+/**
+ * Decrypt a parsed v1 envelope given a crypto module.
+ *
+ * v1 = PBKDF2-SHA256(password, salt, iter, keyLen) then AES-CCM(key, nonce, ct||tag).
+ * Byte-for-byte compatible with `sjcl.decrypt` output for the same envelope.
+ *
+ * Exported so tests can inject `crypto-browserify` and exercise the exact
+ * runtime path the webpack browser bundle produces, without duplicating the
+ * decrypt logic.
+ */
+export declare function decryptV1WithCrypto(password: string, ciphertext: string, crypto: CryptoModule): Promise<string>;
+/**
+ * Decrypt a v1 (SJCL PBKDF2-SHA256 + AES-CCM) envelope.
+ *
+ * Runs the same `node:crypto` code on server and browser. The BitGoJS webpack
+ * config already maps `crypto` -> `crypto-browserify`, whose `aes-256-ccm` and
+ * `pbkdf2` implementations are byte-compatible with Node's native ones and
+ * with SJCL's envelope format. Parity is guarded by tests in
+ * `test/unit/decryptV1.browser.ts`.
+ */
+export declare function decryptV1(password: string, ciphertext: string): Promise<string>;
+export {};
+//# sourceMappingURL=decryptV1.d.ts.map

package/dist/src/decryptV1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptV1.d.ts","sourceRoot":"","sources":["../../src/decryptV1.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,KAAK,CAAC,MAAM,OAAO,CAAC;AAG3B;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;CAC3C;AAID;;;;GAIG;AACH,eAAO,MAAM,WAAW,SAAU,CAAC;AAEnC;;;;GAIG;AACH,QAAA,MAAM,eAAe;;;;;;;;;;;;IAenB,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;AAE1D,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAQ9D;AAeD;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBrH;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAErF"}

package/dist/src/decryptV1.js

@@ -0,0 +1,140 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.V1_MAX_ITER = void 0;
+exports.parseV1Envelope = parseV1Envelope;
+exports.decryptV1WithCrypto = decryptV1WithCrypto;
+exports.decryptV1 = decryptV1;
+const sdk_core_1 = require("@bitgo-beta/sdk-core");
+const crypto_1 = require("crypto");
+const t = __importStar(require("io-ts"));
+const util_1 = require("util");
+const defaultCrypto = { pbkdf2: crypto_1.pbkdf2, createDecipheriv: crypto_1.createDecipheriv };
+/**
+ * Upper bound on PBKDF2 iterations accepted from a v1 envelope. BitGo-produced
+ * v1 envelopes use 10,000; this cap is 10x that. Envelope validation enforces
+ * it up front before any KDF work runs.
+ */
+exports.V1_MAX_ITER = 100000;
+/**
+ * io-ts codec for a v1 (SJCL) envelope.
+ *
+ * Enforces the shape and the `iter` cap up front, before any KDF work runs.
+ */
+const V1EnvelopeCodec = t.intersection([
+    t.type({
+        v: t.literal(1),
+        iter: (0, sdk_core_1.boundedInt)(1, exports.V1_MAX_ITER, 'iter'),
+        ks: t.union([t.literal(128), t.literal(256)]),
+        ts: t.union([t.literal(64), t.literal(96), t.literal(128)]),
+        mode: t.literal('ccm'),
+        cipher: t.literal('aes'),
+        salt: sdk_core_1.base64String,
+        iv: sdk_core_1.base64String,
+        ct: sdk_core_1.base64String,
+    }),
+    t.partial({
+        adata: t.string,
+    }),
+]);
+function parseV1Envelope(ciphertext) {
+    let parsed;
+    try {
+        parsed = JSON.parse(ciphertext);
+    }
+    catch {
+        throw new Error('v1 decrypt: invalid JSON envelope');
+    }
+    return (0, sdk_core_1.decodeWithCodec)(V1EnvelopeCodec, parsed, 'v1 decrypt: invalid envelope');
+}
+/**
+ * CCM length field size L, in bytes, chosen to encode the plaintext length.
+ *
+ * SJCL picks the smallest L in [2, 4) that can represent the plaintext length,
+ * then derives the nonce length as (15 - L). We mirror that so Node's CCM
+ * uses the same nonce framing as the SJCL encoder produced.
+ */
+function ccmNonceLength(plaintextLen) {
+    let L = 2;
+    while (L < 4 && plaintextLen >= Math.pow(2, 8 * L))
+        L++;
+    return 15 - L;
+}
+/**
+ * Decrypt a parsed v1 envelope given a crypto module.
+ *
+ * v1 = PBKDF2-SHA256(password, salt, iter, keyLen) then AES-CCM(key, nonce, ct||tag).
+ * Byte-for-byte compatible with `sjcl.decrypt` output for the same envelope.
+ *
+ * Exported so tests can inject `crypto-browserify` and exercise the exact
+ * runtime path the webpack browser bundle produces, without duplicating the
+ * decrypt logic.
+ */
+async function decryptV1WithCrypto(password, ciphertext, crypto) {
+    const env = parseV1Envelope(ciphertext);
+    const salt = Buffer.from(env.salt, 'base64');
+    const ivFull = Buffer.from(env.iv, 'base64');
+    const full = Buffer.from(env.ct, 'base64');
+    const tagBytes = env.ts / 8;
+    if (full.length < tagBytes)
+        throw new Error('v1 decrypt: ciphertext shorter than tag');
+    const cipher = full.subarray(0, full.length - tagBytes);
+    const authTag = full.subarray(full.length - tagBytes);
+    const nonceLen = ccmNonceLength(cipher.length);
+    if (ivFull.length < nonceLen)
+        throw new Error('v1 decrypt: iv shorter than nonce');
+    const iv = ivFull.subarray(0, nonceLen);
+    const keyBytes = env.ks / 8;
+    const key = await (0, util_1.promisify)(crypto.pbkdf2)(password, salt, env.iter, keyBytes, 'sha256');
+    const decipher = crypto.createDecipheriv(`aes-${env.ks}-ccm`, key, iv, { authTagLength: tagBytes });
+    decipher.setAuthTag(authTag);
+    const aad = env.adata ? Buffer.from(env.adata, 'utf8') : Buffer.alloc(0);
+    decipher.setAAD(aad, { plaintextLength: cipher.length });
+    const pt = Buffer.concat([decipher.update(cipher), decipher.final()]);
+    return pt.toString('utf8');
+}
+/**
+ * Decrypt a v1 (SJCL PBKDF2-SHA256 + AES-CCM) envelope.
+ *
+ * Runs the same `node:crypto` code on server and browser. The BitGoJS webpack
+ * config already maps `crypto` -> `crypto-browserify`, whose `aes-256-ccm` and
+ * `pbkdf2` implementations are byte-compatible with Node's native ones and
+ * with SJCL's envelope format. Parity is guarded by tests in
+ * `test/unit/decryptV1.browser.ts`.
+ */
+async function decryptV1(password, ciphertext) {
+    return decryptV1WithCrypto(password, ciphertext, defaultCrypto);
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGVjcnlwdFYxLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL2RlY3J5cHRWMS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFnREEsMENBUUM7QUF5QkQsa0RBd0JDO0FBV0QsOEJBRUM7QUF0SEQsbURBQWlGO0FBQ2pGLG1DQUFrRDtBQUNsRCx5Q0FBMkI7QUFDM0IsK0JBQWlDO0FBWWpDLE1BQU0sYUFBYSxHQUFpQixFQUFFLE1BQU0sRUFBTixlQUFNLEVBQUUsZ0JBQWdCLEVBQWhCLHlCQUFnQixFQUFFLENBQUM7QUFFakU7Ozs7R0FJRztBQUNVLFFBQUEsV0FBVyxHQUFHLE1BQU8sQ0FBQztBQUVuQzs7OztHQUlHO0FBQ0gsTUFBTSxlQUFlLEdBQUcsQ0FBQyxDQUFDLFlBQVksQ0FBQztJQUNyQyxDQUFDLENBQUMsSUFBSSxDQUFDO1FBQ0wsQ0FBQyxFQUFFLENBQUMsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDO1FBQ2YsSUFBSSxFQUFFLElBQUEscUJBQVUsRUFBQyxDQUFDLEVBQUUsbUJBQVcsRUFBRSxNQUFNLENBQUM7UUFDeEMsRUFBRSxFQUFFLENBQUMsQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxFQUFFLENBQUMsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQztRQUM3QyxFQUFFLEVBQUUsQ0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxPQUFPLENBQUMsRUFBRSxDQUFDLEVBQUUsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUMsRUFBRSxDQUFDLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUM7UUFDM0QsSUFBSSxFQUFFLENBQUMsQ0FBQyxPQUFPLENBQUMsS0FBSyxDQUFDO1FBQ3RCLE1BQU0sRUFBRSxDQUFDLENBQUMsT0FBTyxDQUFDLEtBQUssQ0FBQztRQUN4QixJQUFJLEVBQUUsdUJBQVk7UUFDbEIsRUFBRSxFQUFFLHVCQUFZO1FBQ2hCLEVBQUUsRUFBRSx1QkFBWTtLQUNqQixDQUFDO0lBQ0YsQ0FBQyxDQUFDLE9BQU8sQ0FBQztRQUNSLEtBQUssRUFBRSxDQUFDLENBQUMsTUFBTTtLQUNoQixDQUFDO0NBQ0gsQ0FBQyxDQUFDO0FBSUgsU0FBZ0IsZUFBZSxDQUFDLFVBQWtCO0lBQ2hELElBQUksTUFBZSxDQUFDO0lBQ3BCLElBQUksQ0FBQztRQUNILE1BQU0sR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLFVBQVUsQ0FBQyxDQUFDO0lBQ2xDLENBQUM7SUFBQyxNQUFNLENBQUM7UUFDUCxNQUFNLElBQUksS0FBSyxDQUFDLG1DQUFtQyxDQUFDLENBQUM7SUFDdkQsQ0FBQztJQUNELE9BQU8sSUFBQSwwQkFBZSxFQUFDLGVBQWUsRUFBRSxNQUFNLEVBQUUsOEJBQThCLENBQUMsQ0FBQztBQUNsRixDQUFDO0FBRUQ7Ozs7OztHQU1HO0FBQ0gsU0FBUyxjQUFjLENBQUMsWUFBb0I7SUFDMUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxDQUFDO0lBQ1YsT0FBTyxDQUFDLEdBQUcsQ0FBQyxJQUFJLFlBQVksSUFBSSxJQUFJLENBQUMsR0FBRyxDQUFDLENBQUMsRUFBRSxDQUFDLEdBQUcsQ0FBQyxDQUFDO1FBQUUsQ0FBQyxFQUFFLENBQUM7SUFDeEQsT0FBTyxFQUFFLEdBQUcsQ0FBQyxDQUFDO0FBQ2hCLENBQUM7QUFFRDs7Ozs7Ozs7O0dBU0c7QUFDSSxLQUFLLFVBQVUsbUJBQW1CLENBQUMsUUFBZ0IsRUFBRSxVQUFrQixFQUFFLE1BQW9CO0lBQ2xHLE1BQU0sR0FBRyxHQUFHLGVBQWUsQ0FBQyxVQUFVLENBQUMsQ0FBQztJQUN4QyxNQUFNLElBQUksR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxJQUFJLEVBQUUsUUFBUSxDQUFDLENBQUM7SUFDN0MsTUFBTSxNQUFNLEdBQUcsTUFBTSxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsRUFBRSxFQUFFLFFBQVEsQ0FBQyxDQUFDO0lBQzdDLE1BQU0sSUFBSSxHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsR0FBRyxDQUFDLEVBQUUsRUFBRSxRQUFRLENBQUMsQ0FBQztJQUMzQyxNQUFNLFFBQVEsR0FBRyxHQUFHLENBQUMsRUFBRSxHQUFHLENBQUMsQ0FBQztJQUM1QixJQUFJLElBQUksQ0FBQyxNQUFNLEdBQUcsUUFBUTtRQUFFLE1BQU0sSUFBSSxLQUFLLENBQUMseUNBQXlDLENBQUMsQ0FBQztJQUV2RixNQUFNLE1BQU0sR0FBRyxJQUFJLENBQUMsUUFBUSxDQUFDLENBQUMsRUFBRSxJQUFJLENBQUMsTUFBTSxHQUFHLFFBQVEsQ0FBQyxDQUFDO0lBQ3hELE1BQU0sT0FBTyxHQUFHLElBQUksQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLE1BQU0sR0FBRyxRQUFRLENBQUMsQ0FBQztJQUN0RCxNQUFNLFFBQVEsR0FBRyxjQUFjLENBQUMsTUFBTSxDQUFDLE1BQU0sQ0FBQyxDQUFDO0lBQy9DLElBQUksTUFBTSxDQUFDLE1BQU0sR0FBRyxRQUFRO1FBQUUsTUFBTSxJQUFJLEtBQUssQ0FBQyxtQ0FBbUMsQ0FBQyxDQUFDO0lBQ25GLE1BQU0sRUFBRSxHQUFHLE1BQU0sQ0FBQyxRQUFRLENBQUMsQ0FBQyxFQUFFLFFBQVEsQ0FBQyxDQUFDO0lBRXhDLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxFQUFFLEdBQUcsQ0FBQyxDQUFDO0lBQzVCLE1BQU0sR0FBRyxHQUFXLE1BQU0sSUFBQSxnQkFBUyxFQUFDLE1BQU0sQ0FBQyxNQUFNLENBQUMsQ0FBQyxRQUFRLEVBQUUsSUFBSSxFQUFFLEdBQUcsQ0FBQyxJQUFJLEVBQUUsUUFBUSxFQUFFLFFBQVEsQ0FBQyxDQUFDO0lBRWpHLE1BQU0sUUFBUSxHQUFHLE1BQU0sQ0FBQyxnQkFBZ0IsQ0FBQyxPQUFPLEdBQUcsQ0FBQyxFQUFFLE1BQU0sRUFBRSxHQUFHLEVBQUUsRUFBRSxFQUFFLEVBQUUsYUFBYSxFQUFFLFFBQVEsRUFBRSxDQUFDLENBQUM7SUFDcEcsUUFBUSxDQUFDLFVBQVUsQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUM3QixNQUFNLEdBQUcsR0FBRyxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxLQUFLLEVBQUUsTUFBTSxDQUFDLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUM7SUFDekUsUUFBUSxDQUFDLE1BQU0sQ0FBQyxHQUFHLEVBQUUsRUFBRSxlQUFlLEVBQUUsTUFBTSxDQUFDLE1BQU0sRUFBRSxDQUFDLENBQUM7SUFFekQsTUFBTSxFQUFFLEdBQUcsTUFBTSxDQUFDLE1BQU0sQ0FBQyxDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsTUFBTSxDQUFDLEVBQUUsUUFBUSxDQUFDLEtBQUssRUFBRSxDQUFDLENBQUMsQ0FBQztJQUN0RSxPQUFPLEVBQUUsQ0FBQyxRQUFRLENBQUMsTUFBTSxDQUFDLENBQUM7QUFDN0IsQ0FBQztBQUVEOzs7Ozs7OztHQVFHO0FBQ0ksS0FBSyxVQUFVLFNBQVMsQ0FBQyxRQUFnQixFQUFFLFVBQWtCO0lBQ2xFLE9BQU8sbUJBQW1CLENBQUMsUUFBUSxFQUFFLFVBQVUsRUFBRSxhQUFhLENBQUMsQ0FBQztBQUNsRSxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgYmFzZTY0U3RyaW5nLCBib3VuZGVkSW50LCBkZWNvZGVXaXRoQ29kZWMgfSBmcm9tICdAYml0Z28tYmV0YS9zZGstY29yZSc7XG5pbXBvcnQgeyBjcmVhdGVEZWNpcGhlcml2LCBwYmtkZjIgfSBmcm9tICdjcnlwdG8nO1xuaW1wb3J0ICogYXMgdCBmcm9tICdpby10cyc7XG5pbXBvcnQgeyBwcm9taXNpZnkgfSBmcm9tICd1dGlsJztcblxuLyoqXG4gKiBNaW5pbWFsIHNoYXBlIHRoZSBkZWNyeXB0IHBhdGggbmVlZHMgZnJvbSBhIGNyeXB0byBtb2R1bGUuIEJvdGggYG5vZGU6Y3J5cHRvYFxuICogYW5kIGBjcnlwdG8tYnJvd3NlcmlmeWAgc2F0aXNmeSB0aGlzLiBQYXNzaW5nIHRoaXMgaW4gZnJvbSB0ZXN0cyBsZXRzIHRoZVxuICogYnJvd3Nlci1zaGltIHRlc3Qgc3VpdGUgZXhlcmNpc2UgdGhlIHJlYWwgZGVjcnlwdCBjb2RlIGluc3RlYWQgb2YgYSBjb3B5LlxuICovXG5leHBvcnQgaW50ZXJmYWNlIENyeXB0b01vZHVsZSB7XG4gIHBia2RmMjogdHlwZW9mIHBia2RmMjtcbiAgY3JlYXRlRGVjaXBoZXJpdjogdHlwZW9mIGNyZWF0ZURlY2lwaGVyaXY7XG59XG5cbmNvbnN0IGRlZmF1bHRDcnlwdG86IENyeXB0b01vZHVsZSA9IHsgcGJrZGYyLCBjcmVhdGVEZWNpcGhlcml2IH07XG5cbi8qKlxuICogVXBwZXIgYm91bmQgb24gUEJLREYyIGl0ZXJhdGlvbnMgYWNjZXB0ZWQgZnJvbSBhIHYxIGVudmVsb3BlLiBCaXRHby1wcm9kdWNlZFxuICogdjEgZW52ZWxvcGVzIHVzZSAxMCwwMDA7IHRoaXMgY2FwIGlzIDEweCB0aGF0LiBFbnZlbG9wZSB2YWxpZGF0aW9uIGVuZm9yY2VzXG4gKiBpdCB1cCBmcm9udCBiZWZvcmUgYW55IEtERiB3b3JrIHJ1bnMuXG4gKi9cbmV4cG9ydCBjb25zdCBWMV9NQVhfSVRFUiA9IDEwMF8wMDA7XG5cbi8qKlxuICogaW8tdHMgY29kZWMgZm9yIGEgdjEgKFNKQ0wpIGVudmVsb3BlLlxuICpcbiAqIEVuZm9yY2VzIHRoZSBzaGFwZSBhbmQgdGhlIGBpdGVyYCBjYXAgdXAgZnJvbnQsIGJlZm9yZSBhbnkgS0RGIHdvcmsgcnVucy5cbiAqL1xuY29uc3QgVjFFbnZlbG9wZUNvZGVjID0gdC5pbnRlcnNlY3Rpb24oW1xuICB0LnR5cGUoe1xuICAgIHY6IHQubGl0ZXJhbCgxKSxcbiAgICBpdGVyOiBib3VuZGVkSW50KDEsIFYxX01BWF9JVEVSLCAnaXRlcicpLFxuICAgIGtzOiB0LnVuaW9uKFt0LmxpdGVyYWwoMTI4KSwgdC5saXRlcmFsKDI1NildKSxcbiAgICB0czogdC51bmlvbihbdC5saXRlcmFsKDY0KSwgdC5saXRlcmFsKDk2KSwgdC5saXRlcmFsKDEyOCldKSxcbiAgICBtb2RlOiB0LmxpdGVyYWwoJ2NjbScpLFxuICAgIGNpcGhlcjogdC5saXRlcmFsKCdhZXMnKSxcbiAgICBzYWx0OiBiYXNlNjRTdHJpbmcsXG4gICAgaXY6IGJhc2U2NFN0cmluZyxcbiAgICBjdDogYmFzZTY0U3RyaW5nLFxuICB9KSxcbiAgdC5wYXJ0aWFsKHtcbiAgICBhZGF0YTogdC5zdHJpbmcsXG4gIH0pLFxuXSk7XG5cbmV4cG9ydCB0eXBlIFYxRW52ZWxvcGUgPSB0LlR5cGVPZjx0eXBlb2YgVjFFbnZlbG9wZUNvZGVjPjtcblxuZXhwb3J0IGZ1bmN0aW9uIHBhcnNlVjFFbnZlbG9wZShjaXBoZXJ0ZXh0OiBzdHJpbmcpOiBWMUVudmVsb3BlIHtcbiAgbGV0IHBhcnNlZDogdW5rbm93bjtcbiAgdHJ5IHtcbiAgICBwYXJzZWQgPSBKU09OLnBhcnNlKGNpcGhlcnRleHQpO1xuICB9IGNhdGNoIHtcbiAgICB0aHJvdyBuZXcgRXJyb3IoJ3YxIGRlY3J5cHQ6IGludmFsaWQgSlNPTiBlbnZlbG9wZScpO1xuICB9XG4gIHJldHVybiBkZWNvZGVXaXRoQ29kZWMoVjFFbnZlbG9wZUNvZGVjLCBwYXJzZWQsICd2MSBkZWNyeXB0OiBpbnZhbGlkIGVudmVsb3BlJyk7XG59XG5cbi8qKlxuICogQ0NNIGxlbmd0aCBmaWVsZCBzaXplIEwsIGluIGJ5dGVzLCBjaG9zZW4gdG8gZW5jb2RlIHRoZSBwbGFpbnRleHQgbGVuZ3RoLlxuICpcbiAqIFNKQ0wgcGlja3MgdGhlIHNtYWxsZXN0IEwgaW4gWzIsIDQpIHRoYXQgY2FuIHJlcHJlc2VudCB0aGUgcGxhaW50ZXh0IGxlbmd0aCxcbiAqIHRoZW4gZGVyaXZlcyB0aGUgbm9uY2UgbGVuZ3RoIGFzICgxNSAtIEwpLiBXZSBtaXJyb3IgdGhhdCBzbyBOb2RlJ3MgQ0NNXG4gKiB1c2VzIHRoZSBzYW1lIG5vbmNlIGZyYW1pbmcgYXMgdGhlIFNKQ0wgZW5jb2RlciBwcm9kdWNlZC5cbiAqL1xuZnVuY3Rpb24gY2NtTm9uY2VMZW5ndGgocGxhaW50ZXh0TGVuOiBudW1iZXIpOiBudW1iZXIge1xuICBsZXQgTCA9IDI7XG4gIHdoaWxlIChMIDwgNCAmJiBwbGFpbnRleHRMZW4gPj0gTWF0aC5wb3coMiwgOCAqIEwpKSBMKys7XG4gIHJldHVybiAxNSAtIEw7XG59XG5cbi8qKlxuICogRGVjcnlwdCBhIHBhcnNlZCB2MSBlbnZlbG9wZSBnaXZlbiBhIGNyeXB0byBtb2R1bGUuXG4gKlxuICogdjEgPSBQQktERjItU0hBMjU2KHBhc3N3b3JkLCBzYWx0LCBpdGVyLCBrZXlMZW4pIHRoZW4gQUVTLUNDTShrZXksIG5vbmNlLCBjdHx8dGFnKS5cbiAqIEJ5dGUtZm9yLWJ5dGUgY29tcGF0aWJsZSB3aXRoIGBzamNsLmRlY3J5cHRgIG91dHB1dCBmb3IgdGhlIHNhbWUgZW52ZWxvcGUuXG4gKlxuICogRXhwb3J0ZWQgc28gdGVzdHMgY2FuIGluamVjdCBgY3J5cHRvLWJyb3dzZXJpZnlgIGFuZCBleGVyY2lzZSB0aGUgZXhhY3RcbiAqIHJ1bnRpbWUgcGF0aCB0aGUgd2VicGFjayBicm93c2VyIGJ1bmRsZSBwcm9kdWNlcywgd2l0aG91dCBkdXBsaWNhdGluZyB0aGVcbiAqIGRlY3J5cHQgbG9naWMuXG4gKi9cbmV4cG9ydCBhc3luYyBmdW5jdGlvbiBkZWNyeXB0VjFXaXRoQ3J5cHRvKHBhc3N3b3JkOiBzdHJpbmcsIGNpcGhlcnRleHQ6IHN0cmluZywgY3J5cHRvOiBDcnlwdG9Nb2R1bGUpOiBQcm9taXNlPHN0cmluZz4ge1xuICBjb25zdCBlbnYgPSBwYXJzZVYxRW52ZWxvcGUoY2lwaGVydGV4dCk7XG4gIGNvbnN0IHNhbHQgPSBCdWZmZXIuZnJvbShlbnYuc2FsdCwgJ2Jhc2U2NCcpO1xuICBjb25zdCBpdkZ1bGwgPSBCdWZmZXIuZnJvbShlbnYuaXYsICdiYXNlNjQnKTtcbiAgY29uc3QgZnVsbCA9IEJ1ZmZlci5mcm9tKGVudi5jdCwgJ2Jhc2U2NCcpO1xuICBjb25zdCB0YWdCeXRlcyA9IGVudi50cyAvIDg7XG4gIGlmIChmdWxsLmxlbmd0aCA8IHRhZ0J5dGVzKSB0aHJvdyBuZXcgRXJyb3IoJ3YxIGRlY3J5cHQ6IGNpcGhlcnRleHQgc2hvcnRlciB0aGFuIHRhZycpO1xuXG4gIGNvbnN0IGNpcGhlciA9IGZ1bGwuc3ViYXJyYXkoMCwgZnVsbC5sZW5ndGggLSB0YWdCeXRlcyk7XG4gIGNvbnN0IGF1dGhUYWcgPSBmdWxsLnN1YmFycmF5KGZ1bGwubGVuZ3RoIC0gdGFnQnl0ZXMpO1xuICBjb25zdCBub25jZUxlbiA9IGNjbU5vbmNlTGVuZ3RoKGNpcGhlci5sZW5ndGgpO1xuICBpZiAoaXZGdWxsLmxlbmd0aCA8IG5vbmNlTGVuKSB0aHJvdyBuZXcgRXJyb3IoJ3YxIGRlY3J5cHQ6IGl2IHNob3J0ZXIgdGhhbiBub25jZScpO1xuICBjb25zdCBpdiA9IGl2RnVsbC5zdWJhcnJheSgwLCBub25jZUxlbik7XG5cbiAgY29uc3Qga2V5Qnl0ZXMgPSBlbnYua3MgLyA4O1xuICBjb25zdCBrZXk6IEJ1ZmZlciA9IGF3YWl0IHByb21pc2lmeShjcnlwdG8ucGJrZGYyKShwYXNzd29yZCwgc2FsdCwgZW52Lml0ZXIsIGtleUJ5dGVzLCAnc2hhMjU2Jyk7XG5cbiAgY29uc3QgZGVjaXBoZXIgPSBjcnlwdG8uY3JlYXRlRGVjaXBoZXJpdihgYWVzLSR7ZW52LmtzfS1jY21gLCBrZXksIGl2LCB7IGF1dGhUYWdMZW5ndGg6IHRhZ0J5dGVzIH0pO1xuICBkZWNpcGhlci5zZXRBdXRoVGFnKGF1dGhUYWcpO1xuICBjb25zdCBhYWQgPSBlbnYuYWRhdGEgPyBCdWZmZXIuZnJvbShlbnYuYWRhdGEsICd1dGY4JykgOiBCdWZmZXIuYWxsb2MoMCk7XG4gIGRlY2lwaGVyLnNldEFBRChhYWQsIHsgcGxhaW50ZXh0TGVuZ3RoOiBjaXBoZXIubGVuZ3RoIH0pO1xuXG4gIGNvbnN0IHB0ID0gQnVmZmVyLmNvbmNhdChbZGVjaXBoZXIudXBkYXRlKGNpcGhlciksIGRlY2lwaGVyLmZpbmFsKCldKTtcbiAgcmV0dXJuIHB0LnRvU3RyaW5nKCd1dGY4Jyk7XG59XG5cbi8qKlxuICogRGVjcnlwdCBhIHYxIChTSkNMIFBCS0RGMi1TSEEyNTYgKyBBRVMtQ0NNKSBlbnZlbG9wZS5cbiAqXG4gKiBSdW5zIHRoZSBzYW1lIGBub2RlOmNyeXB0b2AgY29kZSBvbiBzZXJ2ZXIgYW5kIGJyb3dzZXIuIFRoZSBCaXRHb0pTIHdlYnBhY2tcbiAqIGNvbmZpZyBhbHJlYWR5IG1hcHMgYGNyeXB0b2AgLT4gYGNyeXB0by1icm93c2VyaWZ5YCwgd2hvc2UgYGFlcy0yNTYtY2NtYCBhbmRcbiAqIGBwYmtkZjJgIGltcGxlbWVudGF0aW9ucyBhcmUgYnl0ZS1jb21wYXRpYmxlIHdpdGggTm9kZSdzIG5hdGl2ZSBvbmVzIGFuZFxuICogd2l0aCBTSkNMJ3MgZW52ZWxvcGUgZm9ybWF0LiBQYXJpdHkgaXMgZ3VhcmRlZCBieSB0ZXN0cyBpblxuICogYHRlc3QvdW5pdC9kZWNyeXB0VjEuYnJvd3Nlci50c2AuXG4gKi9cbmV4cG9ydCBhc3luYyBmdW5jdGlvbiBkZWNyeXB0VjEocGFzc3dvcmQ6IHN0cmluZywgY2lwaGVydGV4dDogc3RyaW5nKTogUHJvbWlzZTxzdHJpbmc+IHtcbiAgcmV0dXJuIGRlY3J5cHRWMVdpdGhDcnlwdG8ocGFzc3dvcmQsIGNpcGhlcnRleHQsIGRlZmF1bHRDcnlwdG8pO1xufVxuIl19

package/dist/src/encrypt.d.ts

@@ -1,4 +1,3 @@
-/// <reference types="node" />
 /**
  * convert a 4 element Uint8Array to a 4 byte Number
  *
@@ -6,9 +5,41 @@
  * @return 4 byte number
  */
 export declare function bytesToWord(bytes?: Uint8Array | number[]): number;
-export declare function encrypt(password: string, plaintext: string, { salt, iv }?: {
-    salt?: Buffer | undefined;
-    iv?: Buffer | undefined;
-}): string;
-export declare function decrypt(password: string, ciphertext: string): string;
+/**
+ * Encrypt `plaintext` with `password`. Defaults to v2 (Argon2id + AES-256-GCM).
+ *
+ * Pass `encryptionVersion: 1` to produce a legacy v1 (SJCL) envelope; this is the
+ * only supported way to request v1 encryption.
+ */
+export declare function encrypt(password: string, plaintext: string, options?: {
+    salt?: Buffer;
+    iv?: Buffer;
+    adata?: string;
+    encryptionVersion?: 1 | 2;
+}): Promise<string>;
+/**
+ * v1 decrypt with an SJCL safety net.
+ *
+ * Design intent during rollout: zero false negatives. Any native failure
+ * (envelope shape our stricter codec rejects, framing bug, unsupported
+ * algorithm, auth-tag mismatch, etc.) falls through to `sjcl.decrypt` so the
+ * caller is never blocked. The only exception is an iter-cap violation,
+ * which is rethrown to preserve DoS protection.
+ *
+ * The console.warn only fires when native fails AND SJCL succeeds -- i.e.
+ * when the two engines disagree, which is the only signal worth
+ * investigating. Wrong password fails both engines silently and surfaces
+ * SJCL's auth error (mapped upstream to "incorrect password").
+ *
+ * `native` defaults to the module's `decryptV1` but is exposed as a parameter
+ * so tests can inject a throwing version to exercise the fallback path.
+ * `isBrowser` defaults to a real runtime check but is exposed so tests can
+ * exercise the browser-only branch under Node.
+ */
+export declare function decryptV1WithFallback(password: string, ciphertext: string, native?: (pw: string, ct: string) => Promise<string>, isBrowser?: boolean): Promise<string>;
+/**
+ * Auto-detect v1 (PBKDF2-SHA256 + AES-CCM) or v2 (Argon2id + AES-256-GCM)
+ * from the envelope `v` field and decrypt.
+ */
+export declare function decrypt(password: string, ciphertext: string): Promise<string>;
 //# sourceMappingURL=encrypt.d.ts.map

package/dist/src/encrypt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../src/encrypt.ts"],"names":[],"mappings":";AAGA;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,MAAM,CAMjE;AAED,wBAAgB,OAAO,CACrB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,EAAE,IAAqB,EAAE,EAAoB,EAAE;;;CAAK,GACnD,MAAM,CAoBR;AAED,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpE"}
+{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../src/encrypt.ts"],"names":[],"mappings":"AAiCA;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,MAAM,CAKjE;AAiCD;;;;;GAKG;AACH,wBAAsB,OAAO,CAC3B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;CAAE,GAClF,OAAO,CAAC,MAAM,CAAC,CAKjB;AAaD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAa,EAC/D,SAAS,GAAE,OAA0B,GACpC,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBnF"}

package/dist/src/encrypt.js

@@ -1,8 +1,72 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.decrypt = exports.encrypt = exports.bytesToWord = void 0;
-const sjcl = require("@bitgo-beta/sjcl");
+exports.bytesToWord = bytesToWord;
+exports.encrypt = encrypt;
+exports.decryptV1WithFallback = decryptV1WithFallback;
+exports.decrypt = decrypt;
+const sjcl = __importStar(require("@bitgo-beta/sjcl"));
 const crypto_1 = require("crypto");
+const decryptV1_1 = require("./decryptV1");
+const encryptV2_1 = require("./encryptV2");
+/**
+ * True when running in a bundled browser build. `browserify-aes` -- the AES
+ * polyfill webpack substitutes for `node:crypto` in browser bundles -- has no
+ * AES-CCM mode at all, so native v1 decrypt fails on literally every call
+ * there. There's no point paying for the doomed native attempt (a full
+ * PBKDF2 run) before falling back; go straight to SJCL.
+ */
+const isBrowserRuntime = typeof window !== 'undefined';
+/**
+ * SJCL has no upper bound on `iter`, so a hostile v1 envelope could burn CPU
+ * running an inflated PBKDF2. Native decrypt's codec normally catches this
+ * before any KDF work runs; the browser path skips native entirely, so it
+ * needs this narrow check to preserve the same DoS protection.
+ */
+function assertIterWithinCap(ciphertext) {
+    let iter;
+    try {
+        iter = JSON.parse(ciphertext)?.iter;
+    }
+    catch {
+        return; // malformed JSON -- let sjcl.decrypt raise its own error
+    }
+    if (typeof iter === 'number' && iter > decryptV1_1.V1_MAX_ITER) {
+        throw new Error(`v1 decrypt: iter ${iter} exceeds cap of ${decryptV1_1.V1_MAX_ITER}`);
+    }
+}
 /**
  * convert a 4 element Uint8Array to a 4 byte Number
  *
@@ -15,14 +79,19 @@ function bytesToWord(bytes) {
     }
     return bytes.reduce((num, byte) => num * 0x100 + byte, 0);
 }
-exports.bytesToWord = bytesToWord;
-function encrypt(password, plaintext, { salt = crypto_1.randomBytes(8), iv = crypto_1.randomBytes(16) } = {}) {
-    if (salt.length !== 8) {
-        throw new Error(`salt must be 8 bytes`);
-    }
-    if (iv.length !== 16) {
-        throw new Error(`iv must be 16 bytes`);
-    }
+/**
+ * Internal v1 (SJCL PBKDF2-SHA256 + AES-256-CCM) encrypt helper.
+ *
+ * Not exported as part of the public encrypt/decrypt surface: callers must not use
+ * this directly. v1 output is requested via `encrypt(..., { encryptionVersion: 1 })`.
+ */
+function encryptV1(password, plaintext, options) {
+    const salt = options?.salt || (0, crypto_1.randomBytes)(8);
+    if (salt.length !== 8)
+        throw new Error('salt must be 8 bytes');
+    const iv = options?.iv || (0, crypto_1.randomBytes)(16);
+    if (iv.length !== 16)
+        throw new Error('iv must be 16 bytes');
     const encryptOptions = {
         iter: 10000,
         ks: 256,
@@ -34,11 +103,98 @@ function encrypt(password, plaintext, { salt = crypto_1.randomBytes(8), iv = cry
             bytesToWord(iv.slice(12, 16)),
         ],
     };
+    if (options?.adata)
+        encryptOptions.adata = options.adata;
     return sjcl.encrypt(password, plaintext, encryptOptions);
 }
-exports.encrypt = encrypt;
-function decrypt(password, ciphertext) {
-    return sjcl.decrypt(password, ciphertext);
+/**
+ * Encrypt `plaintext` with `password`. Defaults to v2 (Argon2id + AES-256-GCM).
+ *
+ * Pass `encryptionVersion: 1` to produce a legacy v1 (SJCL) envelope; this is the
+ * only supported way to request v1 encryption.
+ */
+async function encrypt(password, plaintext, options) {
+    if (options?.encryptionVersion === 1) {
+        return encryptV1(password, plaintext, options);
+    }
+    return (0, encryptV2_1.encryptV2)(password, plaintext, { adata: options?.adata });
 }
-exports.decrypt = decrypt;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZW5jcnlwdC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9lbmNyeXB0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLHlDQUF5QztBQUN6QyxtQ0FBcUM7QUFFckM7Ozs7O0dBS0c7QUFDSCxTQUFnQixXQUFXLENBQUMsS0FBNkI7SUFDdkQsSUFBSSxDQUFDLENBQUMsS0FBSyxZQUFZLFVBQVUsQ0FBQyxJQUFJLEtBQUssQ0FBQyxNQUFNLEtBQUssQ0FBQyxFQUFFO1FBQ3hELE1BQU0sSUFBSSxLQUFLLENBQUMsMENBQTBDLENBQUMsQ0FBQztLQUM3RDtJQUVELE9BQU8sS0FBSyxDQUFDLE1BQU0sQ0FBQyxDQUFDLEdBQUcsRUFBRSxJQUFJLEVBQUUsRUFBRSxDQUFDLEdBQUcsR0FBRyxLQUFLLEdBQUcsSUFBSSxFQUFFLENBQUMsQ0FBQyxDQUFDO0FBQzVELENBQUM7QUFORCxrQ0FNQztBQUVELFNBQWdCLE9BQU8sQ0FDckIsUUFBZ0IsRUFDaEIsU0FBaUIsRUFDakIsRUFBRSxJQUFJLEdBQUcsb0JBQVcsQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLEdBQUcsb0JBQVcsQ0FBQyxFQUFFLENBQUMsRUFBRSxHQUFHLEVBQUU7SUFFcEQsSUFBSSxJQUFJLENBQUMsTUFBTSxLQUFLLENBQUMsRUFBRTtRQUNyQixNQUFNLElBQUksS0FBSyxDQUFDLHNCQUFzQixDQUFDLENBQUM7S0FDekM7SUFDRCxJQUFJLEVBQUUsQ0FBQyxNQUFNLEtBQUssRUFBRSxFQUFFO1FBQ3BCLE1BQU0sSUFBSSxLQUFLLENBQUMscUJBQXFCLENBQUMsQ0FBQztLQUN4QztJQUNELE1BQU0sY0FBYyxHQUFHO1FBQ3JCLElBQUksRUFBRSxLQUFLO1FBQ1gsRUFBRSxFQUFFLEdBQUc7UUFDUCxJQUFJLEVBQUUsQ0FBQyxXQUFXLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxXQUFXLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDO1FBQ2pFLEVBQUUsRUFBRTtZQUNGLFdBQVcsQ0FBQyxFQUFFLENBQUMsS0FBSyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQztZQUMzQixXQUFXLENBQUMsRUFBRSxDQUFDLEtBQUssQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUM7WUFDM0IsV0FBVyxDQUFDLEVBQUUsQ0FBQyxLQUFLLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDO1lBQzVCLFdBQVcsQ0FBQyxFQUFFLENBQUMsS0FBSyxDQUFDLEVBQUUsRUFBRSxFQUFFLENBQUMsQ0FBQztTQUM5QjtLQUNGLENBQUM7SUFFRixPQUFPLElBQUksQ0FBQyxPQUFPLENBQUMsUUFBUSxFQUFFLFNBQVMsRUFBRSxjQUFjLENBQUMsQ0FBQztBQUMzRCxDQUFDO0FBeEJELDBCQXdCQztBQUVELFNBQWdCLE9BQU8sQ0FBQyxRQUFnQixFQUFFLFVBQWtCO0lBQzFELE9BQU8sSUFBSSxDQUFDLE9BQU8sQ0FBQyxRQUFRLEVBQUUsVUFBVSxDQUFDLENBQUM7QUFDNUMsQ0FBQztBQUZELDBCQUVDIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0ICogYXMgc2pjbCBmcm9tICdAYml0Z28tYmV0YS9zamNsJztcbmltcG9ydCB7IHJhbmRvbUJ5dGVzIH0gZnJvbSAnY3J5cHRvJztcblxuLyoqXG4gKiBjb252ZXJ0IGEgNCBlbGVtZW50IFVpbnQ4QXJyYXkgdG8gYSA0IGJ5dGUgTnVtYmVyXG4gKlxuICogQHBhcmFtIGJ5dGVzXG4gKiBAcmV0dXJuIDQgYnl0ZSBudW1iZXJcbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIGJ5dGVzVG9Xb3JkKGJ5dGVzPzogVWludDhBcnJheSB8IG51bWJlcltdKTogbnVtYmVyIHtcbiAgaWYgKCEoYnl0ZXMgaW5zdGFuY2VvZiBVaW50OEFycmF5KSB8fCBieXRlcy5sZW5ndGggIT09IDQpIHtcbiAgICB0aHJvdyBuZXcgRXJyb3IoJ2J5dGVzIG11c3QgYmUgYSBVaW50OEFycmF5IHdpdGggbGVuZ3RoIDQnKTtcbiAgfVxuXG4gIHJldHVybiBieXRlcy5yZWR1Y2UoKG51bSwgYnl0ZSkgPT4gbnVtICogMHgxMDAgKyBieXRlLCAwKTtcbn1cblxuZXhwb3J0IGZ1bmN0aW9uIGVuY3J5cHQoXG4gIHBhc3N3b3JkOiBzdHJpbmcsXG4gIHBsYWludGV4dDogc3RyaW5nLFxuICB7IHNhbHQgPSByYW5kb21CeXRlcyg4KSwgaXYgPSByYW5kb21CeXRlcygxNikgfSA9IHt9XG4pOiBzdHJpbmcge1xuICBpZiAoc2FsdC5sZW5ndGggIT09IDgpIHtcbiAgICB0aHJvdyBuZXcgRXJyb3IoYHNhbHQgbXVzdCBiZSA4IGJ5dGVzYCk7XG4gIH1cbiAgaWYgKGl2Lmxlbmd0aCAhPT0gMTYpIHtcbiAgICB0aHJvdyBuZXcgRXJyb3IoYGl2IG11c3QgYmUgMTYgYnl0ZXNgKTtcbiAgfVxuICBjb25zdCBlbmNyeXB0T3B0aW9ucyA9IHtcbiAgICBpdGVyOiAxMDAwMCxcbiAgICBrczogMjU2LFxuICAgIHNhbHQ6IFtieXRlc1RvV29yZChzYWx0LnNsaWNlKDAsIDQpKSwgYnl0ZXNUb1dvcmQoc2FsdC5zbGljZSg0KSldLFxuICAgIGl2OiBbXG4gICAgICBieXRlc1RvV29yZChpdi5zbGljZSgwLCA0KSksXG4gICAgICBieXRlc1RvV29yZChpdi5zbGljZSg0LCA4KSksXG4gICAgICBieXRlc1RvV29yZChpdi5zbGljZSg4LCAxMikpLFxuICAgICAgYnl0ZXNUb1dvcmQoaXYuc2xpY2UoMTIsIDE2KSksXG4gICAgXSxcbiAgfTtcblxuICByZXR1cm4gc2pjbC5lbmNyeXB0KHBhc3N3b3JkLCBwbGFpbnRleHQsIGVuY3J5cHRPcHRpb25zKTtcbn1cblxuZXhwb3J0IGZ1bmN0aW9uIGRlY3J5cHQocGFzc3dvcmQ6IHN0cmluZywgY2lwaGVydGV4dDogc3RyaW5nKTogc3RyaW5nIHtcbiAgcmV0dXJuIHNqY2wuZGVjcnlwdChwYXNzd29yZCwgY2lwaGVydGV4dCk7XG59XG4iXX0=
+/**
+ * Iter-cap violations are the only error we refuse to fall back on: SJCL has
+ * no upper bound on `iter`, so falling through to it would let a hostile
+ * envelope burn CPU running an inflated PBKDF2. Everything else -- codec
+ * rejection of a shape SJCL would accept, native crypto bug, auth-tag
+ * mismatch -- is safe to fall through to SJCL.
+ */
+function isIterCapViolation(err) {
+    return err instanceof Error && /iter:\s*expected integer|iter out of range/i.test(err.message);
+}
+/**
+ * v1 decrypt with an SJCL safety net.
+ *
+ * Design intent during rollout: zero false negatives. Any native failure
+ * (envelope shape our stricter codec rejects, framing bug, unsupported
+ * algorithm, auth-tag mismatch, etc.) falls through to `sjcl.decrypt` so the
+ * caller is never blocked. The only exception is an iter-cap violation,
+ * which is rethrown to preserve DoS protection.
+ *
+ * The console.warn only fires when native fails AND SJCL succeeds -- i.e.
+ * when the two engines disagree, which is the only signal worth
+ * investigating. Wrong password fails both engines silently and surfaces
+ * SJCL's auth error (mapped upstream to "incorrect password").
+ *
+ * `native` defaults to the module's `decryptV1` but is exposed as a parameter
+ * so tests can inject a throwing version to exercise the fallback path.
+ * `isBrowser` defaults to a real runtime check but is exposed so tests can
+ * exercise the browser-only branch under Node.
+ */
+async function decryptV1WithFallback(password, ciphertext, native = decryptV1_1.decryptV1, isBrowser = isBrowserRuntime) {
+    if (isBrowser) {
+        assertIterWithinCap(ciphertext);
+        return sjcl.decrypt(password, ciphertext);
+    }
+    try {
+        return await native(password, ciphertext);
+    }
+    catch (nativeErr) {
+        if (isIterCapViolation(nativeErr))
+            throw nativeErr;
+        let result;
+        try {
+            result = sjcl.decrypt(password, ciphertext);
+        }
+        catch (sjclErr) {
+            // Both engines rejected -- almost certainly a real auth failure.
+            // Rethrow SJCL's error so BitGoAPI.decrypt maps it to "incorrect password".
+            throw sjclErr;
+        }
+        // Native failed but SJCL succeeded -- real signal, log for the operator.
+        const message = nativeErr instanceof Error ? nativeErr.message : String(nativeErr);
+        // eslint-disable-next-line no-console
+        console.warn('[bitgo-sdk] v1 native decrypt failed; SJCL fallback succeeded:', message);
+        return result;
+    }
+}
+/**
+ * Auto-detect v1 (PBKDF2-SHA256 + AES-CCM) or v2 (Argon2id + AES-256-GCM)
+ * from the envelope `v` field and decrypt.
+ */
+async function decrypt(password, ciphertext) {
+    let envelopeVersion;
+    try {
+        const envelope = JSON.parse(ciphertext);
+        envelopeVersion = envelope.v;
+    }
+    catch {
+        throw new Error('decrypt: ciphertext is not valid JSON');
+    }
+    if (envelopeVersion === 2) {
+        // Do not catch: wrong password on v2 must not silently fall through to v1.
+        return (0, encryptV2_1.decryptV2)(password, ciphertext);
+    }
+    if (envelopeVersion !== undefined && envelopeVersion !== 1) {
+        throw new Error(`decrypt: unknown envelope version ${envelopeVersion}`);
+    }
+    return decryptV1WithFallback(password, ciphertext);
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZW5jcnlwdC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9lbmNyeXB0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0FBdUNBLGtDQUtDO0FBdUNELDBCQVNDO0FBZ0NELHNEQTRCQztBQU1ELDBCQWdCQztBQTlLRCx1REFBeUM7QUFDekMsbUNBQXFDO0FBRXJDLDJDQUFxRDtBQUNyRCwyQ0FBbUQ7QUFFbkQ7Ozs7OztHQU1HO0FBQ0gsTUFBTSxnQkFBZ0IsR0FBRyxPQUFPLE1BQU0sS0FBSyxXQUFXLENBQUM7QUFFdkQ7Ozs7O0dBS0c7QUFDSCxTQUFTLG1CQUFtQixDQUFDLFVBQWtCO0lBQzdDLElBQUksSUFBYSxDQUFDO0lBQ2xCLElBQUksQ0FBQztRQUNILElBQUksR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLFVBQVUsQ0FBQyxFQUFFLElBQUksQ0FBQztJQUN0QyxDQUFDO0lBQUMsTUFBTSxDQUFDO1FBQ1AsT0FBTyxDQUFDLHlEQUF5RDtJQUNuRSxDQUFDO0lBQ0QsSUFBSSxPQUFPLElBQUksS0FBSyxRQUFRLElBQUksSUFBSSxHQUFHLHVCQUFXLEVBQUUsQ0FBQztRQUNuRCxNQUFNLElBQUksS0FBSyxDQUFDLG9CQUFvQixJQUFJLG1CQUFtQix1QkFBVyxFQUFFLENBQUMsQ0FBQztJQUM1RSxDQUFDO0FBQ0gsQ0FBQztBQUVEOzs7OztHQUtHO0FBQ0gsU0FBZ0IsV0FBVyxDQUFDLEtBQTZCO0lBQ3ZELElBQUksQ0FBQyxDQUFDLEtBQUssWUFBWSxVQUFVLENBQUMsSUFBSSxLQUFLLENBQUMsTUFBTSxLQUFLLENBQUMsRUFBRSxDQUFDO1FBQ3pELE1BQU0sSUFBSSxLQUFLLENBQUMsMENBQTBDLENBQUMsQ0FBQztJQUM5RCxDQUFDO0lBQ0QsT0FBTyxLQUFLLENBQUMsTUFBTSxDQUFDLENBQUMsR0FBRyxFQUFFLElBQUksRUFBRSxFQUFFLENBQUMsR0FBRyxHQUFHLEtBQUssR0FBRyxJQUFJLEVBQUUsQ0FBQyxDQUFDLENBQUM7QUFDNUQsQ0FBQztBQUVEOzs7OztHQUtHO0FBQ0gsU0FBUyxTQUFTLENBQ2hCLFFBQWdCLEVBQ2hCLFNBQWlCLEVBQ2pCLE9BQXdEO0lBRXhELE1BQU0sSUFBSSxHQUFHLE9BQU8sRUFBRSxJQUFJLElBQUksSUFBQSxvQkFBVyxFQUFDLENBQUMsQ0FBQyxDQUFDO0lBQzdDLElBQUksSUFBSSxDQUFDLE1BQU0sS0FBSyxDQUFDO1FBQUUsTUFBTSxJQUFJLEtBQUssQ0FBQyxzQkFBc0IsQ0FBQyxDQUFDO0lBQy9ELE1BQU0sRUFBRSxHQUFHLE9BQU8sRUFBRSxFQUFFLElBQUksSUFBQSxvQkFBVyxFQUFDLEVBQUUsQ0FBQyxDQUFDO0lBQzFDLElBQUksRUFBRSxDQUFDLE1BQU0sS0FBSyxFQUFFO1FBQUUsTUFBTSxJQUFJLEtBQUssQ0FBQyxxQkFBcUIsQ0FBQyxDQUFDO0lBRTdELE1BQU0sY0FBYyxHQUErRTtRQUNqRyxJQUFJLEVBQUUsS0FBSztRQUNYLEVBQUUsRUFBRSxHQUFHO1FBQ1AsSUFBSSxFQUFFLENBQUMsV0FBVyxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsV0FBVyxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUNqRSxFQUFFLEVBQUU7WUFDRixXQUFXLENBQUMsRUFBRSxDQUFDLEtBQUssQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUM7WUFDM0IsV0FBVyxDQUFDLEVBQUUsQ0FBQyxLQUFLLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDO1lBQzNCLFdBQVcsQ0FBQyxFQUFFLENBQUMsS0FBSyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQztZQUM1QixXQUFXLENBQUMsRUFBRSxDQUFDLEtBQUssQ0FBQyxFQUFFLEVBQUUsRUFBRSxDQUFDLENBQUM7U0FDOUI7S0FDRixDQUFDO0lBQ0YsSUFBSSxPQUFPLEVBQUUsS0FBSztRQUFFLGNBQWMsQ0FBQyxLQUFLLEdBQUcsT0FBTyxDQUFDLEtBQUssQ0FBQztJQUN6RCxPQUFPLElBQUksQ0FBQyxPQUFPLENBQUMsUUFBUSxFQUFFLFNBQVMsRUFBRSxjQUFjLENBQUMsQ0FBQztBQUMzRCxDQUFDO0FBRUQ7Ozs7O0dBS0c7QUFDSSxLQUFLLFVBQVUsT0FBTyxDQUMzQixRQUFnQixFQUNoQixTQUFpQixFQUNqQixPQUFtRjtJQUVuRixJQUFJLE9BQU8sRUFBRSxpQkFBaUIsS0FBSyxDQUFDLEVBQUUsQ0FBQztRQUNyQyxPQUFPLFNBQVMsQ0FBQyxRQUFRLEVBQUUsU0FBUyxFQUFFLE9BQU8sQ0FBQyxDQUFDO0lBQ2pELENBQUM7SUFDRCxPQUFPLElBQUEscUJBQVMsRUFBQyxRQUFRLEVBQUUsU0FBUyxFQUFFLEVBQUUsS0FBSyxFQUFFLE9BQU8sRUFBRSxLQUFLLEVBQUUsQ0FBQyxDQUFDO0FBQ25FLENBQUM7QUFFRDs7Ozs7O0dBTUc7QUFDSCxTQUFTLGtCQUFrQixDQUFDLEdBQVk7SUFDdEMsT0FBTyxHQUFHLFlBQVksS0FBSyxJQUFJLDZDQUE2QyxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsT0FBTyxDQUFDLENBQUM7QUFDakcsQ0FBQztBQUVEOzs7Ozs7Ozs7Ozs7Ozs7Ozs7R0FrQkc7QUFDSSxLQUFLLFVBQVUscUJBQXFCLENBQ3pDLFFBQWdCLEVBQ2hCLFVBQWtCLEVBQ2xCLFNBQXNELHFCQUFTLEVBQy9ELFlBQXFCLGdCQUFnQjtJQUVyQyxJQUFJLFNBQVMsRUFBRSxDQUFDO1FBQ2QsbUJBQW1CLENBQUMsVUFBVSxDQUFDLENBQUM7UUFDaEMsT0FBTyxJQUFJLENBQUMsT0FBTyxDQUFDLFFBQVEsRUFBRSxVQUFVLENBQUMsQ0FBQztJQUM1QyxDQUFDO0lBQ0QsSUFBSSxDQUFDO1FBQ0gsT0FBTyxNQUFNLE1BQU0sQ0FBQyxRQUFRLEVBQUUsVUFBVSxDQUFDLENBQUM7SUFDNUMsQ0FBQztJQUFDLE9BQU8sU0FBUyxFQUFFLENBQUM7UUFDbkIsSUFBSSxrQkFBa0IsQ0FBQyxTQUFTLENBQUM7WUFBRSxNQUFNLFNBQVMsQ0FBQztRQUNuRCxJQUFJLE1BQWMsQ0FBQztRQUNuQixJQUFJLENBQUM7WUFDSCxNQUFNLEdBQUcsSUFBSSxDQUFDLE9BQU8sQ0FBQyxRQUFRLEVBQUUsVUFBVSxDQUFDLENBQUM7UUFDOUMsQ0FBQztRQUFDLE9BQU8sT0FBTyxFQUFFLENBQUM7WUFDakIsaUVBQWlFO1lBQ2pFLDRFQUE0RTtZQUM1RSxNQUFNLE9BQU8sQ0FBQztRQUNoQixDQUFDO1FBQ0QseUVBQXlFO1FBQ3pFLE1BQU0sT0FBTyxHQUFHLFNBQVMsWUFBWSxLQUFLLENBQUMsQ0FBQyxDQUFDLFNBQVMsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxTQUFTLENBQUMsQ0FBQztRQUNuRixzQ0FBc0M7UUFDdEMsT0FBTyxDQUFDLElBQUksQ0FBQyxnRUFBZ0UsRUFBRSxPQUFPLENBQUMsQ0FBQztRQUN4RixPQUFPLE1BQU0sQ0FBQztJQUNoQixDQUFDO0FBQ0gsQ0FBQztBQUVEOzs7R0FHRztBQUNJLEtBQUssVUFBVSxPQUFPLENBQUMsUUFBZ0IsRUFBRSxVQUFrQjtJQUNoRSxJQUFJLGVBQW1DLENBQUM7SUFDeEMsSUFBSSxDQUFDO1FBQ0gsTUFBTSxRQUFRLEdBQUcsSUFBSSxDQUFDLEtBQUssQ0FBQyxVQUFVLENBQUMsQ0FBQztRQUN4QyxlQUFlLEdBQUcsUUFBUSxDQUFDLENBQUMsQ0FBQztJQUMvQixDQUFDO0lBQUMsTUFBTSxDQUFDO1FBQ1AsTUFBTSxJQUFJLEtBQUssQ0FBQyx1Q0FBdUMsQ0FBQyxDQUFDO0lBQzNELENBQUM7SUFDRCxJQUFJLGVBQWUsS0FBSyxDQUFDLEVBQUUsQ0FBQztRQUMxQiwyRUFBMkU7UUFDM0UsT0FBTyxJQUFBLHFCQUFTLEVBQUMsUUFBUSxFQUFFLFVBQVUsQ0FBQyxDQUFDO0lBQ3pDLENBQUM7SUFDRCxJQUFJLGVBQWUsS0FBSyxTQUFTLElBQUksZUFBZSxLQUFLLENBQUMsRUFBRSxDQUFDO1FBQzNELE1BQU0sSUFBSSxLQUFLLENBQUMscUNBQXFDLGVBQWUsRUFBRSxDQUFDLENBQUM7SUFDMUUsQ0FBQztJQUNELE9BQU8scUJBQXFCLENBQUMsUUFBUSxFQUFFLFVBQVUsQ0FBQyxDQUFDO0FBQ3JELENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyJpbXBvcnQgKiBhcyBzamNsIGZyb20gJ0BiaXRnby1iZXRhL3NqY2wnO1xuaW1wb3J0IHsgcmFuZG9tQnl0ZXMgfSBmcm9tICdjcnlwdG8nO1xuXG5pbXBvcnQgeyBkZWNyeXB0VjEsIFYxX01BWF9JVEVSIH0gZnJvbSAnLi9kZWNyeXB0VjEnO1xuaW1wb3J0IHsgZGVjcnlwdFYyLCBlbmNyeXB0VjIgfSBmcm9tICcuL2VuY3J5cHRWMic7XG5cbi8qKlxuICogVHJ1ZSB3aGVuIHJ1bm5pbmcgaW4gYSBidW5kbGVkIGJyb3dzZXIgYnVpbGQuIGBicm93c2VyaWZ5LWFlc2AgLS0gdGhlIEFFU1xuICogcG9seWZpbGwgd2VicGFjayBzdWJzdGl0dXRlcyBmb3IgYG5vZGU6Y3J5cHRvYCBpbiBicm93c2VyIGJ1bmRsZXMgLS0gaGFzIG5vXG4gKiBBRVMtQ0NNIG1vZGUgYXQgYWxsLCBzbyBuYXRpdmUgdjEgZGVjcnlwdCBmYWlscyBvbiBsaXRlcmFsbHkgZXZlcnkgY2FsbFxuICogdGhlcmUuIFRoZXJlJ3Mgbm8gcG9pbnQgcGF5aW5nIGZvciB0aGUgZG9vbWVkIG5hdGl2ZSBhdHRlbXB0IChhIGZ1bGxcbiAqIFBCS0RGMiBydW4pIGJlZm9yZSBmYWxsaW5nIGJhY2s7IGdvIHN0cmFpZ2h0IHRvIFNKQ0wuXG4gKi9cbmNvbnN0IGlzQnJvd3NlclJ1bnRpbWUgPSB0eXBlb2Ygd2luZG93ICE9PSAndW5kZWZpbmVkJztcblxuLyoqXG4gKiBTSkNMIGhhcyBubyB1cHBlciBib3VuZCBvbiBgaXRlcmAsIHNvIGEgaG9zdGlsZSB2MSBlbnZlbG9wZSBjb3VsZCBidXJuIENQVVxuICogcnVubmluZyBhbiBpbmZsYXRlZCBQQktERjIuIE5hdGl2ZSBkZWNyeXB0J3MgY29kZWMgbm9ybWFsbHkgY2F0Y2hlcyB0aGlzXG4gKiBiZWZvcmUgYW55IEtERiB3b3JrIHJ1bnM7IHRoZSBicm93c2VyIHBhdGggc2tpcHMgbmF0aXZlIGVudGlyZWx5LCBzbyBpdFxuICogbmVlZHMgdGhpcyBuYXJyb3cgY2hlY2sgdG8gcHJlc2VydmUgdGhlIHNhbWUgRG9TIHByb3RlY3Rpb24uXG4gKi9cbmZ1bmN0aW9uIGFzc2VydEl0ZXJXaXRoaW5DYXAoY2lwaGVydGV4dDogc3RyaW5nKTogdm9pZCB7XG4gIGxldCBpdGVyOiB1bmtub3duO1xuICB0cnkge1xuICAgIGl0ZXIgPSBKU09OLnBhcnNlKGNpcGhlcnRleHQpPy5pdGVyO1xuICB9IGNhdGNoIHtcbiAgICByZXR1cm47IC8vIG1hbGZvcm1lZCBKU09OIC0tIGxldCBzamNsLmRlY3J5cHQgcmFpc2UgaXRzIG93biBlcnJvclxuICB9XG4gIGlmICh0eXBlb2YgaXRlciA9PT0gJ251bWJlcicgJiYgaXRlciA+IFYxX01BWF9JVEVSKSB7XG4gICAgdGhyb3cgbmV3IEVycm9yKGB2MSBkZWNyeXB0OiBpdGVyICR7aXRlcn0gZXhjZWVkcyBjYXAgb2YgJHtWMV9NQVhfSVRFUn1gKTtcbiAgfVxufVxuXG4vKipcbiAqIGNvbnZlcnQgYSA0IGVsZW1lbnQgVWludDhBcnJheSB0byBhIDQgYnl0ZSBOdW1iZXJcbiAqXG4gKiBAcGFyYW0gYnl0ZXNcbiAqIEByZXR1cm4gNCBieXRlIG51bWJlclxuICovXG5leHBvcnQgZnVuY3Rpb24gYnl0ZXNUb1dvcmQoYnl0ZXM/OiBVaW50OEFycmF5IHwgbnVtYmVyW10pOiBudW1iZXIge1xuICBpZiAoIShieXRlcyBpbnN0YW5jZW9mIFVpbnQ4QXJyYXkpIHx8IGJ5dGVzLmxlbmd0aCAhPT0gNCkge1xuICAgIHRocm93IG5ldyBFcnJvcignYnl0ZXMgbXVzdCBiZSBhIFVpbnQ4QXJyYXkgd2l0aCBsZW5ndGggNCcpO1xuICB9XG4gIHJldHVybiBieXRlcy5yZWR1Y2UoKG51bSwgYnl0ZSkgPT4gbnVtICogMHgxMDAgKyBieXRlLCAwKTtcbn1cblxuLyoqXG4gKiBJbnRlcm5hbCB2MSAoU0pDTCBQQktERjItU0hBMjU2ICsgQUVTLTI1Ni1DQ00pIGVuY3J5cHQgaGVscGVyLlxuICpcbiAqIE5vdCBleHBvcnRlZCBhcyBwYXJ0IG9mIHRoZSBwdWJsaWMgZW5jcnlwdC9kZWNyeXB0IHN1cmZhY2U6IGNhbGxlcnMgbXVzdCBub3QgdXNlXG4gKiB0aGlzIGRpcmVjdGx5LiB2MSBvdXRwdXQgaXMgcmVxdWVzdGVkIHZpYSBgZW5jcnlwdCguLi4sIHsgZW5jcnlwdGlvblZlcnNpb246IDEgfSlgLlxuICovXG5mdW5jdGlvbiBlbmNyeXB0VjEoXG4gIHBhc3N3b3JkOiBzdHJpbmcsXG4gIHBsYWludGV4dDogc3RyaW5nLFxuICBvcHRpb25zPzogeyBzYWx0PzogQnVmZmVyOyBpdj86IEJ1ZmZlcjsgYWRhdGE/OiBzdHJpbmcgfVxuKTogc3RyaW5nIHtcbiAgY29uc3Qgc2FsdCA9IG9wdGlvbnM/LnNhbHQgfHwgcmFuZG9tQnl0ZXMoOCk7XG4gIGlmIChzYWx0Lmxlbmd0aCAhPT0gOCkgdGhyb3cgbmV3IEVycm9yKCdzYWx0IG11c3QgYmUgOCBieXRlcycpO1xuICBjb25zdCBpdiA9IG9wdGlvbnM/Lml2IHx8IHJhbmRvbUJ5dGVzKDE2KTtcbiAgaWYgKGl2Lmxlbmd0aCAhPT0gMTYpIHRocm93IG5ldyBFcnJvcignaXYgbXVzdCBiZSAxNiBieXRlcycpO1xuXG4gIGNvbnN0IGVuY3J5cHRPcHRpb25zOiB7IGl0ZXI6IG51bWJlcjsga3M6IG51bWJlcjsgc2FsdDogbnVtYmVyW107IGl2OiBudW1iZXJbXTsgYWRhdGE/OiBzdHJpbmcgfSA9IHtcbiAgICBpdGVyOiAxMDAwMCxcbiAgICBrczogMjU2LFxuICAgIHNhbHQ6IFtieXRlc1RvV29yZChzYWx0LnNsaWNlKDAsIDQpKSwgYnl0ZXNUb1dvcmQoc2FsdC5zbGljZSg0KSldLFxuICAgIGl2OiBbXG4gICAgICBieXRlc1RvV29yZChpdi5zbGljZSgwLCA0KSksXG4gICAgICBieXRlc1RvV29yZChpdi5zbGljZSg0LCA4KSksXG4gICAgICBieXRlc1RvV29yZChpdi5zbGljZSg4LCAxMikpLFxuICAgICAgYnl0ZXNUb1dvcmQoaXYuc2xpY2UoMTIsIDE2KSksXG4gICAgXSxcbiAgfTtcbiAgaWYgKG9wdGlvbnM/LmFkYXRhKSBlbmNyeXB0T3B0aW9ucy5hZGF0YSA9IG9wdGlvbnMuYWRhdGE7XG4gIHJldHVybiBzamNsLmVuY3J5cHQocGFzc3dvcmQsIHBsYWludGV4dCwgZW5jcnlwdE9wdGlvbnMpO1xufVxuXG4vKipcbiAqIEVuY3J5cHQgYHBsYWludGV4dGAgd2l0aCBgcGFzc3dvcmRgLiBEZWZhdWx0cyB0byB2MiAoQXJnb24yaWQgKyBBRVMtMjU2LUdDTSkuXG4gKlxuICogUGFzcyBgZW5jcnlwdGlvblZlcnNpb246IDFgIHRvIHByb2R1Y2UgYSBsZWdhY3kgdjEgKFNKQ0wpIGVudmVsb3BlOyB0aGlzIGlzIHRoZVxuICogb25seSBzdXBwb3J0ZWQgd2F5IHRvIHJlcXVlc3QgdjEgZW5jcnlwdGlvbi5cbiAqL1xuZXhwb3J0IGFzeW5jIGZ1bmN0aW9uIGVuY3J5cHQoXG4gIHBhc3N3b3JkOiBzdHJpbmcsXG4gIHBsYWludGV4dDogc3RyaW5nLFxuICBvcHRpb25zPzogeyBzYWx0PzogQnVmZmVyOyBpdj86IEJ1ZmZlcjsgYWRhdGE/OiBzdHJpbmc7IGVuY3J5cHRpb25WZXJzaW9uPzogMSB8IDIgfVxuKTogUHJvbWlzZTxzdHJpbmc+IHtcbiAgaWYgKG9wdGlvbnM/LmVuY3J5cHRpb25WZXJzaW9uID09PSAxKSB7XG4gICAgcmV0dXJuIGVuY3J5cHRWMShwYXNzd29yZCwgcGxhaW50ZXh0LCBvcHRpb25zKTtcbiAgfVxuICByZXR1cm4gZW5jcnlwdFYyKHBhc3N3b3JkLCBwbGFpbnRleHQsIHsgYWRhdGE6IG9wdGlvbnM/LmFkYXRhIH0pO1xufVxuXG4vKipcbiAqIEl0ZXItY2FwIHZpb2xhdGlvbnMgYXJlIHRoZSBvbmx5IGVycm9yIHdlIHJlZnVzZSB0byBmYWxsIGJhY2sgb246IFNKQ0wgaGFzXG4gKiBubyB1cHBlciBib3VuZCBvbiBgaXRlcmAsIHNvIGZhbGxpbmcgdGhyb3VnaCB0byBpdCB3b3VsZCBsZXQgYSBob3N0aWxlXG4gKiBlbnZlbG9wZSBidXJuIENQVSBydW5uaW5nIGFuIGluZmxhdGVkIFBCS0RGMi4gRXZlcnl0aGluZyBlbHNlIC0tIGNvZGVjXG4gKiByZWplY3Rpb24gb2YgYSBzaGFwZSBTSkNMIHdvdWxkIGFjY2VwdCwgbmF0aXZlIGNyeXB0byBidWcsIGF1dGgtdGFnXG4gKiBtaXNtYXRjaCAtLSBpcyBzYWZlIHRvIGZhbGwgdGhyb3VnaCB0byBTSkNMLlxuICovXG5mdW5jdGlvbiBpc0l0ZXJDYXBWaW9sYXRpb24oZXJyOiB1bmtub3duKTogYm9vbGVhbiB7XG4gIHJldHVybiBlcnIgaW5zdGFuY2VvZiBFcnJvciAmJiAvaXRlcjpcXHMqZXhwZWN0ZWQgaW50ZWdlcnxpdGVyIG91dCBvZiByYW5nZS9pLnRlc3QoZXJyLm1lc3NhZ2UpO1xufVxuXG4vKipcbiAqIHYxIGRlY3J5cHQgd2l0aCBhbiBTSkNMIHNhZmV0eSBuZXQuXG4gKlxuICogRGVzaWduIGludGVudCBkdXJpbmcgcm9sbG91dDogemVybyBmYWxzZSBuZWdhdGl2ZXMuIEFueSBuYXRpdmUgZmFpbHVyZVxuICogKGVudmVsb3BlIHNoYXBlIG91ciBzdHJpY3RlciBjb2RlYyByZWplY3RzLCBmcmFtaW5nIGJ1ZywgdW5zdXBwb3J0ZWRcbiAqIGFsZ29yaXRobSwgYXV0aC10YWcgbWlzbWF0Y2gsIGV0Yy4pIGZhbGxzIHRocm91Z2ggdG8gYHNqY2wuZGVjcnlwdGAgc28gdGhlXG4gKiBjYWxsZXIgaXMgbmV2ZXIgYmxvY2tlZC4gVGhlIG9ubHkgZXhjZXB0aW9uIGlzIGFuIGl0ZXItY2FwIHZpb2xhdGlvbixcbiAqIHdoaWNoIGlzIHJldGhyb3duIHRvIHByZXNlcnZlIERvUyBwcm90ZWN0aW9uLlxuICpcbiAqIFRoZSBjb25zb2xlLndhcm4gb25seSBmaXJlcyB3aGVuIG5hdGl2ZSBmYWlscyBBTkQgU0pDTCBzdWNjZWVkcyAtLSBpLmUuXG4gKiB3aGVuIHRoZSB0d28gZW5naW5lcyBkaXNhZ3JlZSwgd2hpY2ggaXMgdGhlIG9ubHkgc2lnbmFsIHdvcnRoXG4gKiBpbnZlc3RpZ2F0aW5nLiBXcm9uZyBwYXNzd29yZCBmYWlscyBib3RoIGVuZ2luZXMgc2lsZW50bHkgYW5kIHN1cmZhY2VzXG4gKiBTSkNMJ3MgYXV0aCBlcnJvciAobWFwcGVkIHVwc3RyZWFtIHRvIFwiaW5jb3JyZWN0IHBhc3N3b3JkXCIpLlxuICpcbiAqIGBuYXRpdmVgIGRlZmF1bHRzIHRvIHRoZSBtb2R1bGUncyBgZGVjcnlwdFYxYCBidXQgaXMgZXhwb3NlZCBhcyBhIHBhcmFtZXRlclxuICogc28gdGVzdHMgY2FuIGluamVjdCBhIHRocm93aW5nIHZlcnNpb24gdG8gZXhlcmNpc2UgdGhlIGZhbGxiYWNrIHBhdGguXG4gKiBgaXNCcm93c2VyYCBkZWZhdWx0cyB0byBhIHJlYWwgcnVudGltZSBjaGVjayBidXQgaXMgZXhwb3NlZCBzbyB0ZXN0cyBjYW5cbiAqIGV4ZXJjaXNlIHRoZSBicm93c2VyLW9ubHkgYnJhbmNoIHVuZGVyIE5vZGUuXG4gKi9cbmV4cG9ydCBhc3luYyBmdW5jdGlvbiBkZWNyeXB0VjFXaXRoRmFsbGJhY2soXG4gIHBhc3N3b3JkOiBzdHJpbmcsXG4gIGNpcGhlcnRleHQ6IHN0cmluZyxcbiAgbmF0aXZlOiAocHc6IHN0cmluZywgY3Q6IHN0cmluZykgPT4gUHJvbWlzZTxzdHJpbmc+ID0gZGVjcnlwdFYxLFxuICBpc0Jyb3dzZXI6IGJvb2xlYW4gPSBpc0Jyb3dzZXJSdW50aW1lXG4pOiBQcm9taXNlPHN0cmluZz4ge1xuICBpZiAoaXNCcm93c2VyKSB7XG4gICAgYXNzZXJ0SXRlcldpdGhpbkNhcChjaXBoZXJ0ZXh0KTtcbiAgICByZXR1cm4gc2pjbC5kZWNyeXB0KHBhc3N3b3JkLCBjaXBoZXJ0ZXh0KTtcbiAgfVxuICB0cnkge1xuICAgIHJldHVybiBhd2FpdCBuYXRpdmUocGFzc3dvcmQsIGNpcGhlcnRleHQpO1xuICB9IGNhdGNoIChuYXRpdmVFcnIpIHtcbiAgICBpZiAoaXNJdGVyQ2FwVmlvbGF0aW9uKG5hdGl2ZUVycikpIHRocm93IG5hdGl2ZUVycjtcbiAgICBsZXQgcmVzdWx0OiBzdHJpbmc7XG4gICAgdHJ5IHtcbiAgICAgIHJlc3VsdCA9IHNqY2wuZGVjcnlwdChwYXNzd29yZCwgY2lwaGVydGV4dCk7XG4gICAgfSBjYXRjaCAoc2pjbEVycikge1xuICAgICAgLy8gQm90aCBlbmdpbmVzIHJlamVjdGVkIC0tIGFsbW9zdCBjZXJ0YWlubHkgYSByZWFsIGF1dGggZmFpbHVyZS5cbiAgICAgIC8vIFJldGhyb3cgU0pDTCdzIGVycm9yIHNvIEJpdEdvQVBJLmRlY3J5cHQgbWFwcyBpdCB0byBcImluY29ycmVjdCBwYXNzd29yZFwiLlxuICAgICAgdGhyb3cgc2pjbEVycjtcbiAgICB9XG4gICAgLy8gTmF0aXZlIGZhaWxlZCBidXQgU0pDTCBzdWNjZWVkZWQgLS0gcmVhbCBzaWduYWwsIGxvZyBmb3IgdGhlIG9wZXJhdG9yLlxuICAgIGNvbnN0IG1lc3NhZ2UgPSBuYXRpdmVFcnIgaW5zdGFuY2VvZiBFcnJvciA/IG5hdGl2ZUVyci5tZXNzYWdlIDogU3RyaW5nKG5hdGl2ZUVycik7XG4gICAgLy8gZXNsaW50LWRpc2FibGUtbmV4dC1saW5lIG5vLWNvbnNvbGVcbiAgICBjb25zb2xlLndhcm4oJ1tiaXRnby1zZGtdIHYxIG5hdGl2ZSBkZWNyeXB0IGZhaWxlZDsgU0pDTCBmYWxsYmFjayBzdWNjZWVkZWQ6JywgbWVzc2FnZSk7XG4gICAgcmV0dXJuIHJlc3VsdDtcbiAgfVxufVxuXG4vKipcbiAqIEF1dG8tZGV0ZWN0IHYxIChQQktERjItU0hBMjU2ICsgQUVTLUNDTSkgb3IgdjIgKEFyZ29uMmlkICsgQUVTLTI1Ni1HQ00pXG4gKiBmcm9tIHRoZSBlbnZlbG9wZSBgdmAgZmllbGQgYW5kIGRlY3J5cHQuXG4gKi9cbmV4cG9ydCBhc3luYyBmdW5jdGlvbiBkZWNyeXB0KHBhc3N3b3JkOiBzdHJpbmcsIGNpcGhlcnRleHQ6IHN0cmluZyk6IFByb21pc2U8c3RyaW5nPiB7XG4gIGxldCBlbnZlbG9wZVZlcnNpb246IG51bWJlciB8IHVuZGVmaW5lZDtcbiAgdHJ5IHtcbiAgICBjb25zdCBlbnZlbG9wZSA9IEpTT04ucGFyc2UoY2lwaGVydGV4dCk7XG4gICAgZW52ZWxvcGVWZXJzaW9uID0gZW52ZWxvcGUudjtcbiAgfSBjYXRjaCB7XG4gICAgdGhyb3cgbmV3IEVycm9yKCdkZWNyeXB0OiBjaXBoZXJ0ZXh0IGlzIG5vdCB2YWxpZCBKU09OJyk7XG4gIH1cbiAgaWYgKGVudmVsb3BlVmVyc2lvbiA9PT0gMikge1xuICAgIC8vIERvIG5vdCBjYXRjaDogd3JvbmcgcGFzc3dvcmQgb24gdjIgbXVzdCBub3Qgc2lsZW50bHkgZmFsbCB0aHJvdWdoIHRvIHYxLlxuICAgIHJldHVybiBkZWNyeXB0VjIocGFzc3dvcmQsIGNpcGhlcnRleHQpO1xuICB9XG4gIGlmIChlbnZlbG9wZVZlcnNpb24gIT09IHVuZGVmaW5lZCAmJiBlbnZlbG9wZVZlcnNpb24gIT09IDEpIHtcbiAgICB0aHJvdyBuZXcgRXJyb3IoYGRlY3J5cHQ6IHVua25vd24gZW52ZWxvcGUgdmVyc2lvbiAke2VudmVsb3BlVmVyc2lvbn1gKTtcbiAgfVxuICByZXR1cm4gZGVjcnlwdFYxV2l0aEZhbGxiYWNrKHBhc3N3b3JkLCBjaXBoZXJ0ZXh0KTtcbn1cbiJdfQ==

package/dist/src/encryptV2.d.ts

@@ -0,0 +1,67 @@
+import * as t from 'io-ts';
+/** Default Argon2id parameters per RFC 9106 second recommendation
+ * @see https://www.rfc-editor.org/rfc/rfc9106#section-4
+ */
+export declare const ARGON2_DEFAULTS: {
+    readonly memorySize: 65536;
+    readonly iterations: 3;
+    readonly parallelism: 4;
+    readonly hashLength: 32;
+    readonly saltLength: 16;
+};
+/** AES-256-GCM IV length in bytes */
+export declare const GCM_IV_LENGTH = 12;
+/** HKDF per-call salt length in bytes */
+export declare const HKDF_SALT_LENGTH = 32;
+declare const V2EnvelopeCodec: t.IntersectionC<[t.TypeC<{
+    v: t.LiteralC<2>;
+    iv: t.Type<string, string, unknown>;
+    ct: t.Type<string, string, unknown>;
+}>, t.PartialC<{
+    m: t.Type<number, number, unknown>;
+    t: t.Type<number, number, unknown>;
+    p: t.Type<number, number, unknown>;
+    salt: t.Type<string, string, unknown>;
+    /** Base64-encoded HKDF salt -- session envelopes and HKDF-only envelopes */
+    hkdfSalt: t.Type<string, string, unknown>;
+    /** Additional authenticated data for context binding (e.g. transaction hash + derivation path) */
+    adata: t.StringC;
+}>]>;
+export type V2Envelope = t.TypeOf<typeof V2EnvelopeCodec>;
+export declare function argon2ToHkdfKey(password: string, salt: Uint8Array, params: {
+    memorySize: number;
+    iterations: number;
+    parallelism: number;
+}): Promise<CryptoKey>;
+export declare function hkdfDeriveAesKey(hkdfKey: CryptoKey, hkdfSalt: Uint8Array, usage: KeyUsage, info?: Uint8Array): Promise<CryptoKey>;
+export declare function aesGcmEncrypt(key: CryptoKey, iv: Uint8Array, plaintext: string, additionalData?: Uint8Array): Promise<Uint8Array>;
+export declare function aesGcmDecrypt(key: CryptoKey, iv: Uint8Array, ct: Uint8Array, additionalData?: Uint8Array): Promise<string>;
+export declare function parseV2Envelope(ciphertext: string): V2Envelope;
+/**
+ * Encrypt plaintext using Argon2id KDF + AES-256-GCM.
+ *
+ * Returns a self-describing JSON v2 envelope containing all Argon2id parameters,
+ * salt, IV, and ciphertext -- fully standalone for decryption.
+ *
+ * For multi-call operations (MPC signing, wallet creation), prefer
+ * createEncryptionSession to run Argon2id once and derive per-call keys via HKDF.
+ */
+export declare function encryptV2(password: string, plaintext: string, options?: {
+    salt?: Uint8Array;
+    iv?: Uint8Array;
+    memorySize?: number;
+    iterations?: number;
+    parallelism?: number;
+    adata?: string;
+}): Promise<string>;
+/**
+ * Decrypt a v2 envelope. Auto-detects shape:
+ *   - Standard  (Argon2 params, no hkdfSalt): Argon2id -> AES-GCM
+ *   - Session   (Argon2 params + hkdfSalt): Argon2id -> HKDF -> AES-GCM
+ *   - HKDF-only (hkdfSalt, no Argon2 params): HKDF(password) -> AES-GCM
+ *
+ * All parameters are stored in the envelope -- no session context required.
+ */
+export declare function decryptV2(password: string, ciphertext: string): Promise<string>;
+export {};
+//# sourceMappingURL=encryptV2.d.ts.map

package/dist/src/encryptV2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryptV2.d.ts","sourceRoot":"","sources":["../../src/encryptV2.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,CAAC,MAAM,OAAO,CAAC;AAK3B;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAC;AAaX,qCAAqC;AACrC,eAAO,MAAM,aAAa,KAAK,CAAC;AAEhC,yCAAyC;AACzC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAcnC,QAAA,MAAM,eAAe;;;;;;;;;IAWjB,4EAA4E;;IAE5E,kGAAkG;;IAGpG,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;AAgD1D,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACtE,OAAO,CAAC,SAAS,CAAC,CAGpB;AAOD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,SAAS,EAClB,QAAQ,EAAE,UAAU,EACpB,KAAK,EAAE,QAAQ,EACf,IAAI,GAAE,UAA8B,GACnC,OAAO,CAAC,SAAS,CAAC,CAQpB;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,SAAS,EACd,EAAE,EAAE,UAAU,EACd,SAAS,EAAE,MAAM,EACjB,cAAc,CAAC,EAAE,UAAU,GAC1B,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,SAAS,EACd,EAAE,EAAE,UAAU,EACd,EAAE,EAAE,UAAU,EACd,cAAc,CAAC,EAAE,UAAU,GAC1B,OAAO,CAAC,MAAM,CAAC,CAKjB;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAY9D;AAID;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,EAAE,CAAC,EAAE,UAAU,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC,MAAM,CAAC,CA0BjB;AAED;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BrF"}