@bitgo-beta/sdk-core 8.2.1-beta.2085 → 8.2.1-beta.2086

package/dist/test/unit/bitgo/utils/tss/keyVerification.js

@@ -0,0 +1,229 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert = __importStar(require("assert"));
+require("should");
+const sdk_lib_mpc_1 = require("@bitgo-beta/sdk-lib-mpc");
+const tss_1 = __importDefault(require("../../../../../src/account-lib/mpc/tss"));
+const keyVerification_1 = require("../../../../../src/bitgo/utils/tss/keyVerification");
+describe('TSS EdDSA key verification', function () {
+    let matchingPrv;
+    let commonKeychain;
+    let otherPrv;
+    let backupStylePrv;
+    before(async function () {
+        const hdTree = await sdk_lib_mpc_1.Ed25519Bip32HdTree.initialize();
+        const MPC = await tss_1.default.initialize(hdTree);
+        const userKeyShare = MPC.keyShare(1, 2, 3);
+        const backupKeyShare = MPC.keyShare(2, 2, 3);
+        const bitgoKeyShare = MPC.keyShare(3, 2, 3);
+        const combined = MPC.keyCombine(userKeyShare.uShare, [backupKeyShare.yShares[1], bitgoKeyShare.yShares[1]]);
+        commonKeychain = combined.pShare.y + combined.pShare.chaincode;
+        matchingPrv = JSON.stringify({
+            uShare: userKeyShare.uShare,
+            bitgoYShare: bitgoKeyShare.yShares[1],
+            backupYShare: backupKeyShare.yShares[1],
+        });
+        // an independent key generation for the negative case
+        const otherUserKeyShare = MPC.keyShare(1, 2, 3);
+        const otherBackupKeyShare = MPC.keyShare(2, 2, 3);
+        const otherBitgoKeyShare = MPC.keyShare(3, 2, 3);
+        otherPrv = JSON.stringify({
+            uShare: otherUserKeyShare.uShare,
+            bitgoYShare: otherBitgoKeyShare.yShares[1],
+            backupYShare: otherBackupKeyShare.yShares[1],
+        });
+        // backup-style signing material: the holder is the backup party (i=2), so it carries
+        // userYShare instead of backupYShare
+        backupStylePrv = JSON.stringify({
+            uShare: backupKeyShare.uShare,
+            bitgoYShare: bitgoKeyShare.yShares[2],
+            userYShare: userKeyShare.yShares[2],
+        });
+    });
+    describe('parseEddsaUserSigningMaterial', function () {
+        it('parses well-formed user signing material', function () {
+            const parsed = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            parsed.should.have.property('uShare');
+            parsed.should.have.property('bitgoYShare');
+            parsed.should.have.property('backupYShare');
+        });
+        it('rejects input that is not valid JSON without echoing the input', function () {
+            const prv = 'not json';
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(prv), (err) => {
+                assert.ok(err instanceof Error);
+                assert.ok(!err.message.includes(prv), 'error message must not echo the input');
+                return true;
+            });
+        });
+        it('rejects input that parses to a non-object', function () {
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)('123'), /signing material is not an object/);
+        });
+        it('rejects material missing any of the three required shares', function () {
+            const { uShare, bitgoYShare, backupYShare } = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(JSON.stringify({ bitgoYShare, backupYShare })), /missing uShare/);
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(JSON.stringify({ uShare, backupYShare })), /missing bitgoYShare/);
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(JSON.stringify({ uShare, bitgoYShare })), /missing backupYShare/);
+        });
+        it('rejects backup-style material; only user signing material is accepted', function () {
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(backupStylePrv), /missing backupYShare/);
+        });
+        it('rejects shares that are not share-shaped objects', function () {
+            const { uShare, bitgoYShare, backupYShare } = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            // array shares are malformed; null shares count as missing
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(JSON.stringify({ uShare, bitgoYShare: [], backupYShare })), /bitgoYShare is not a valid share/);
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(JSON.stringify({ uShare, bitgoYShare: null, backupYShare })), /missing bitgoYShare/);
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(JSON.stringify({ uShare: {}, bitgoYShare, backupYShare })), /uShare is not a valid share/);
+        });
+        it('rejects shares with malformed fields', function () {
+            const malformed = JSON.stringify({
+                uShare: { i: 1, t: 2, n: 3, y: 'not-hex', seed: 'ab', chaincode: 'cd' },
+                bitgoYShare: { i: 1, j: 3, y: 'ab', u: 'cd', chaincode: 'ef', v: '01' },
+                backupYShare: { i: 1, j: 2, y: 'ab', u: 'cd', chaincode: 'ef' },
+            });
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(malformed), /uShare is not a valid share/);
+        });
+        it('rejects hex fields of the wrong length', function () {
+            const { uShare, bitgoYShare, backupYShare } = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            const truncatedChaincode = JSON.stringify({
+                uShare: { ...uShare, chaincode: uShare.chaincode.slice(0, 62) },
+                bitgoYShare,
+                backupYShare,
+            });
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(truncatedChaincode), /uShare is not a valid share/);
+        });
+        it('rejects a non-hex v field on a Y share when present', function () {
+            const { uShare, bitgoYShare, backupYShare } = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            const tampered = JSON.stringify({
+                uShare,
+                backupYShare,
+                bitgoYShare: { ...bitgoYShare, v: 'zz' },
+            });
+            assert.throws(() => (0, keyVerification_1.parseEddsaUserSigningMaterial)(tampered), /bitgoYShare is not a valid share/);
+        });
+        it('accepts a Y share without the optional v field', function () {
+            // v is optional on the YShare type, so parsing must allow it; verification separately
+            // rejects material without it with a distinct unable-to-verify error (see below)
+            const { uShare, bitgoYShare, backupYShare } = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            const withoutV = { ...bitgoYShare };
+            delete withoutV.v;
+            const vlessPrv = JSON.stringify({ uShare, bitgoYShare: withoutV, backupYShare });
+            const parsed = (0, keyVerification_1.parseEddsaUserSigningMaterial)(vlessPrv);
+            parsed.bitgoYShare.should.not.have.property('v');
+        });
+    });
+    describe('eddsaUserSigningMaterialMatchesCommonKeychain', function () {
+        it('returns true when the combined key equals the commonKeychain', async function () {
+            const match = await (0, keyVerification_1.eddsaUserSigningMaterialMatchesCommonKeychain)({ prv: matchingPrv, commonKeychain });
+            match.should.equal(true);
+        });
+        it('returns false for material from a different key generation', async function () {
+            const match = await (0, keyVerification_1.eddsaUserSigningMaterialMatchesCommonKeychain)({ prv: otherPrv, commonKeychain });
+            match.should.equal(false);
+        });
+        it('rejects malformed material without echoing the input', async function () {
+            await assert.rejects((0, keyVerification_1.eddsaUserSigningMaterialMatchesCommonKeychain)({ prv: 'not json', commonKeychain }), {
+                message: 'Invalid user key - could not parse signing material',
+            });
+        });
+        it('rejects inconsistent shares with a constant error instead of the raw combine failure', async function () {
+            const { uShare, bitgoYShare, backupYShare } = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            const tampered = JSON.stringify({
+                uShare,
+                bitgoYShare,
+                backupYShare: { ...backupYShare, v: '00'.repeat(32) },
+            });
+            await assert.rejects((0, keyVerification_1.eddsaUserSigningMaterialMatchesCommonKeychain)({ prv: tampered, commonKeychain }), {
+                message: 'Invalid user key - could not combine signing material',
+            });
+        });
+        it('returns false for a wrong seed behind otherwise genuine public fields', async function () {
+            // keyCombine derives the private scalar from the seed but rebuilds the common keychain from
+            // the declared y fields, so without an explicit seed/y binding a caller who knows only the
+            // public commonKeychain could verify against a seed they do not hold
+            const { uShare, bitgoYShare, backupYShare } = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            const forged = JSON.stringify({
+                uShare: { ...uShare, seed: 'ab'.repeat(32) },
+                bitgoYShare,
+                backupYShare,
+            });
+            const match = await (0, keyVerification_1.eddsaUserSigningMaterialMatchesCommonKeychain)({ prv: forged, commonKeychain });
+            match.should.equal(false);
+        });
+        it('rejects material that omits a VSS commitment instead of judging it a non-match', async function () {
+            // keyCombine only verifies a Y share's secret u when v is present, so material that drops
+            // v would otherwise pass combine with an arbitrary u; it cannot be verified at all and
+            // must not be reported as a clean non-match
+            const { uShare, bitgoYShare, backupYShare } = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            const bitgoWithoutV = { ...bitgoYShare, u: 'cd'.repeat(32) };
+            delete bitgoWithoutV.v;
+            const forged = JSON.stringify({
+                uShare,
+                bitgoYShare: bitgoWithoutV,
+                backupYShare,
+            });
+            await assert.rejects((0, keyVerification_1.eddsaUserSigningMaterialMatchesCommonKeychain)({ prv: forged, commonKeychain }), {
+                message: 'Unable to verify key - signing material has no VSS commitment',
+            });
+        });
+        it('rejects otherwise-genuine material without a VSS commitment as unverifiable', async function () {
+            // shares without v may be genuine (the server did not always return vssProof), so the
+            // answer must be "cannot verify", never "not this wallet's key"
+            const { uShare, bitgoYShare, backupYShare } = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            const bitgoWithoutV = { ...bitgoYShare };
+            delete bitgoWithoutV.v;
+            const vless = JSON.stringify({ uShare, bitgoYShare: bitgoWithoutV, backupYShare });
+            await assert.rejects((0, keyVerification_1.eddsaUserSigningMaterialMatchesCommonKeychain)({ prv: vless, commonKeychain }), {
+                message: 'Unable to verify key - signing material has no VSS commitment',
+            });
+        });
+        it('returns false when a Y share carries a mismatched secret with its commitment present', async function () {
+            const { uShare, bitgoYShare, backupYShare } = (0, keyVerification_1.parseEddsaUserSigningMaterial)(matchingPrv);
+            const forged = JSON.stringify({
+                uShare,
+                bitgoYShare: { ...bitgoYShare, u: 'cd'.repeat(32) },
+                backupYShare,
+            });
+            // a present-but-failing commitment is a combine failure, surfaced as the constant error
+            await assert.rejects((0, keyVerification_1.eddsaUserSigningMaterialMatchesCommonKeychain)({ prv: forged, commonKeychain }), {
+                message: 'Invalid user key - could not combine signing material',
+            });
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/bitgo/wallet/walletVerifyKey.d.ts

@@ -0,0 +1,2 @@
+import 'should';
+//# sourceMappingURL=walletVerifyKey.d.ts.map

package/dist/test/unit/bitgo/wallet/walletVerifyKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletVerifyKey.d.ts","sourceRoot":"","sources":["../../../../../test/unit/bitgo/wallet/walletVerifyKey.ts"],"names":[],"mappings":"AAEA,OAAO,QAAQ,CAAC"}

package/dist/test/unit/bitgo/wallet/walletVerifyKey.js

@@ -0,0 +1,160 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert = __importStar(require("assert"));
+const sinon = __importStar(require("sinon"));
+require("should");
+const wallet_1 = require("../../../../src/bitgo/wallet/wallet");
+const sdk_lib_mpc_1 = require("@bitgo-beta/sdk-lib-mpc");
+const tss_1 = __importDefault(require("../../../../src/account-lib/mpc/tss"));
+const bitgoPubKeys_1 = require("../../../../src/bitgo/tss/bitgoPubKeys");
+const util_1 = require("../../../../src/bitgo/utils/util");
+const UNSUPPORTED_WALLET_MESSAGE = 'Key verification is not supported for this wallet type';
+describe('Wallet.verifyKey', function () {
+    let commonKeychain;
+    let matchingPrv;
+    let otherPrv;
+    before(async function () {
+        const hdTree = await sdk_lib_mpc_1.Ed25519Bip32HdTree.initialize();
+        const MPC = await tss_1.default.initialize(hdTree);
+        const userKeyShare = MPC.keyShare(1, 2, 3);
+        const backupKeyShare = MPC.keyShare(2, 2, 3);
+        const bitgoKeyShare = MPC.keyShare(3, 2, 3);
+        const combined = MPC.keyCombine(userKeyShare.uShare, [backupKeyShare.yShares[1], bitgoKeyShare.yShares[1]]);
+        commonKeychain = combined.pShare.y + combined.pShare.chaincode;
+        matchingPrv = JSON.stringify({
+            uShare: userKeyShare.uShare,
+            bitgoYShare: bitgoKeyShare.yShares[1],
+            backupYShare: backupKeyShare.yShares[1],
+        });
+        // an independent key generation for the negative case
+        const otherUserKeyShare = MPC.keyShare(1, 2, 3);
+        const otherBackupKeyShare = MPC.keyShare(2, 2, 3);
+        const otherBitgoKeyShare = MPC.keyShare(3, 2, 3);
+        otherPrv = JSON.stringify({
+            uShare: otherUserKeyShare.uShare,
+            bitgoYShare: otherBitgoKeyShare.yShares[1],
+            backupYShare: otherBackupKeyShare.yShares[1],
+        });
+    });
+    let mockBitGo;
+    let mockBaseCoin;
+    let walletData;
+    let getKeychainStub;
+    beforeEach(function () {
+        mockBitGo = {
+            post: sinon.stub(),
+            setRequestTracer: sinon.stub(),
+            // the MPCv2/ECDSA utils constructors call setBitgoGpgPubKey, which fetches constants;
+            // stubbing it avoids a swallowed unhandled rejection in those tests
+            fetchConstants: sinon.stub().resolves({
+                mpc: { bitgoPublicKey: (0, bitgoPubKeys_1.getBitgoMpcGpgPubKey)('test', 'nitro', 'mpcv1') },
+            }),
+        };
+        getKeychainStub = sinon.stub().resolves({ id: 'user-key-id', type: 'tss', commonKeychain });
+        mockBaseCoin = {
+            supportsTss: sinon.stub().returns(true),
+            getFamily: sinon.stub().returns('sol'),
+            getMPCAlgorithm: sinon.stub().returns('eddsa'),
+            keychains: sinon.stub().returns({ get: getKeychainStub }),
+            url: sinon.stub().returns('/api/v2/sol/wallet/test-wallet-id'),
+        };
+        walletData = {
+            id: 'test-wallet-id',
+            keys: ['user-key-id', 'backup-key-id', 'bitgo-key-id'],
+            multisigType: 'tss',
+        };
+    });
+    afterEach(function () {
+        sinon.restore();
+    });
+    /**
+     * Builds the wallet under test from the sinon stand-ins. The casts are safe because the
+     * Wallet constructor and verifyKey only touch the members stubbed above.
+     */
+    function buildWallet() {
+        return new wallet_1.Wallet(mockBitGo, mockBaseCoin, walletData);
+    }
+    it('returns match true for user signing material that belongs to the wallet', async function () {
+        const wallet = buildWallet();
+        const result = await wallet.verifyKey({ prv: matchingPrv });
+        assert.deepStrictEqual(result, { match: true });
+        sinon.assert.calledOnce(getKeychainStub);
+        assert.strictEqual(getKeychainStub.firstCall.args[0].id, walletData.keys[0]);
+    });
+    it('forwards the request tracer to the keychain fetch', async function () {
+        const wallet = buildWallet();
+        const reqId = new util_1.RequestTracer();
+        const result = await wallet.verifyKey({ prv: matchingPrv, reqId });
+        assert.deepStrictEqual(result, { match: true });
+        sinon.assert.calledOnce(getKeychainStub);
+        assert.strictEqual(getKeychainStub.firstCall.args[0].reqId, reqId);
+    });
+    it('returns match false for user signing material from a different key generation', async function () {
+        const wallet = buildWallet();
+        const result = await wallet.verifyKey({ prv: otherPrv });
+        assert.deepStrictEqual(result, { match: false });
+        sinon.assert.calledOnce(getKeychainStub);
+    });
+    it('rejects on-chain multisig wallets without fetching the keychain', async function () {
+        walletData.multisigType = 'onchain';
+        const wallet = buildWallet();
+        await assert.rejects(wallet.verifyKey({ prv: matchingPrv }), { message: UNSUPPORTED_WALLET_MESSAGE });
+        sinon.assert.notCalled(getKeychainStub);
+    });
+    it('rejects TSS EdDSA MPCv2 wallets without fetching the keychain', async function () {
+        walletData.multisigTypeVersion = 'MPCv2';
+        const wallet = buildWallet();
+        await assert.rejects(wallet.verifyKey({ prv: matchingPrv }), { message: UNSUPPORTED_WALLET_MESSAGE });
+        sinon.assert.notCalled(getKeychainStub);
+    });
+    it('rejects TSS ECDSA wallets without fetching the keychain', async function () {
+        mockBaseCoin.getMPCAlgorithm.returns('ecdsa');
+        const wallet = buildWallet();
+        await assert.rejects(wallet.verifyKey({ prv: matchingPrv }), { message: UNSUPPORTED_WALLET_MESSAGE });
+        sinon.assert.notCalled(getKeychainStub);
+    });
+    it('rejects when the user keychain has no commonKeychain', async function () {
+        getKeychainStub.resolves({ id: 'user-key-id', type: 'tss' });
+        const wallet = buildWallet();
+        await assert.rejects(wallet.verifyKey({ prv: matchingPrv }), {
+            message: 'wallet keychain is missing commonKeychain',
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoid2FsbGV0VmVyaWZ5S2V5LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vLi4vLi4vdGVzdC91bml0L2JpdGdvL3dhbGxldC93YWxsZXRWZXJpZnlLZXkudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSwrQ0FBaUM7QUFDakMsNkNBQStCO0FBQy9CLGtCQUFnQjtBQUNoQixnRUFBNkQ7QUFDN0QseURBQTZEO0FBQzdELDhFQUF3RDtBQUd4RCx5RUFBOEU7QUFDOUUsMkRBQWlFO0FBRWpFLE1BQU0sMEJBQTBCLEdBQUcsd0RBQXdELENBQUM7QUFFNUYsUUFBUSxDQUFDLGtCQUFrQixFQUFFO0lBQzNCLElBQUksY0FBc0IsQ0FBQztJQUMzQixJQUFJLFdBQW1CLENBQUM7SUFDeEIsSUFBSSxRQUFnQixDQUFDO0lBRXJCLE1BQU0sQ0FBQyxLQUFLO1FBQ1YsTUFBTSxNQUFNLEdBQUcsTUFBTSxnQ0FBa0IsQ0FBQyxVQUFVLEVBQUUsQ0FBQztRQUNyRCxNQUFNLEdBQUcsR0FBRyxNQUFNLGFBQUssQ0FBQyxVQUFVLENBQUMsTUFBTSxDQUFDLENBQUM7UUFFM0MsTUFBTSxZQUFZLEdBQUcsR0FBRyxDQUFDLFFBQVEsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDO1FBQzNDLE1BQU0sY0FBYyxHQUFHLEdBQUcsQ0FBQyxRQUFRLENBQUMsQ0FBQyxFQUFFLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQztRQUM3QyxNQUFNLGFBQWEsR0FBRyxHQUFHLENBQUMsUUFBUSxDQUFDLENBQUMsRUFBRSxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUM7UUFDNUMsTUFBTSxRQUFRLEdBQUcsR0FBRyxDQUFDLFVBQVUsQ0FBQyxZQUFZLENBQUMsTUFBTSxFQUFFLENBQUMsY0FBYyxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsRUFBRSxhQUFhLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUM1RyxjQUFjLEdBQUcsUUFBUSxDQUFDLE1BQU0sQ0FBQyxDQUFDLEdBQUcsUUFBUSxDQUFDLE1BQU0sQ0FBQyxTQUFTLENBQUM7UUFDL0QsV0FBVyxHQUFHLElBQUksQ0FBQyxTQUFTLENBQUM7WUFDM0IsTUFBTSxFQUFFLFlBQVksQ0FBQyxNQUFNO1lBQzNCLFdBQVcsRUFBRSxhQUFhLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQztZQUNyQyxZQUFZLEVBQUUsY0FBYyxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUM7U0FDeEMsQ0FBQyxDQUFDO1FBRUgsc0RBQXNEO1FBQ3RELE1BQU0saUJBQWlCLEdBQUcsR0FBRyxDQUFDLFFBQVEsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDO1FBQ2hELE1BQU0sbUJBQW1CLEdBQUcsR0FBRyxDQUFDLFFBQVEsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDO1FBQ2xELE1BQU0sa0JBQWtCLEdBQUcsR0FBRyxDQUFDLFFBQVEsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDO1FBQ2pELFFBQVEsR0FBRyxJQUFJLENBQUMsU0FBUyxDQUFDO1lBQ3hCLE1BQU0sRUFBRSxpQkFBaUIsQ0FBQyxNQUFNO1lBQ2hDLFdBQVcsRUFBRSxrQkFBa0IsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDO1lBQzFDLFlBQVksRUFBRSxtQkFBbUIsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDO1NBQzdDLENBQUMsQ0FBQztJQUNMLENBQUMsQ0FBQyxDQUFDO0lBRUgsSUFBSSxTQUF3RyxDQUFDO0lBQzdHLElBQUksWUFNSCxDQUFDO0lBQ0YsSUFBSSxVQUE4RixDQUFDO0lBQ25HLElBQUksZUFBZ0MsQ0FBQztJQUVyQyxVQUFVLENBQUM7UUFDVCxTQUFTLEdBQUc7WUFDVixJQUFJLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRTtZQUNsQixnQkFBZ0IsRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFO1lBQzlCLHNGQUFzRjtZQUN0RixvRUFBb0U7WUFDcEUsY0FBYyxFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxRQUFRLENBQUM7Z0JBQ3BDLEdBQUcsRUFBRSxFQUFFLGNBQWMsRUFBRSxJQUFBLG1DQUFvQixFQUFDLE1BQU0sRUFBRSxPQUFPLEVBQUUsT0FBTyxDQUFDLEVBQUU7YUFDeEUsQ0FBQztTQUNILENBQUM7UUFFRixlQUFlLEdBQUcsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLFFBQVEsQ0FBQyxFQUFFLEVBQUUsRUFBRSxhQUFhLEVBQUUsSUFBSSxFQUFFLEtBQUssRUFBRSxjQUFjLEVBQUUsQ0FBQyxDQUFDO1FBRTVGLFlBQVksR0FBRztZQUNiLFdBQVcsRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQztZQUN2QyxTQUFTLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUM7WUFDdEMsZUFBZSxFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDO1lBQzlDLFNBQVMsRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsT0FBTyxDQUFDLEVBQUUsR0FBRyxFQUFFLGVBQWUsRUFBRSxDQUFDO1lBQ3pELEdBQUcsRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsT0FBTyxDQUFDLG1DQUFtQyxDQUFDO1NBQy9ELENBQUM7UUFFRixVQUFVLEdBQUc7WUFDWCxFQUFFLEVBQUUsZ0JBQWdCO1lBQ3BCLElBQUksRUFBRSxDQUFDLGFBQWEsRUFBRSxlQUFlLEVBQUUsY0FBYyxDQUFDO1lBQ3RELFlBQVksRUFBRSxLQUFLO1NBQ3BCLENBQUM7SUFDSixDQUFDLENBQUMsQ0FBQztJQUVILFNBQVMsQ0FBQztRQUNSLEtBQUssQ0FBQyxPQUFPLEVBQUUsQ0FBQztJQUNsQixDQUFDLENBQUMsQ0FBQztJQUVIOzs7T0FHRztJQUNILFNBQVMsV0FBVztRQUNsQixPQUFPLElBQUksZUFBTSxDQUFDLFNBQWlDLEVBQUUsWUFBb0MsRUFBRSxVQUFVLENBQUMsQ0FBQztJQUN6RyxDQUFDO0lBRUQsRUFBRSxDQUFDLHlFQUF5RSxFQUFFLEtBQUs7UUFDakYsTUFBTSxNQUFNLEdBQUcsV0FBVyxFQUFFLENBQUM7UUFFN0IsTUFBTSxNQUFNLEdBQUcsTUFBTSxNQUFNLENBQUMsU0FBUyxDQUFDLEVBQUUsR0FBRyxFQUFFLFdBQVcsRUFBRSxDQUFDLENBQUM7UUFFNUQsTUFBTSxDQUFDLGVBQWUsQ0FBQyxNQUFNLEVBQUUsRUFBRSxLQUFLLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQztRQUNoRCxLQUFLLENBQUMsTUFBTSxDQUFDLFVBQVUsQ0FBQyxlQUFlLENBQUMsQ0FBQztRQUN6QyxNQUFNLENBQUMsV0FBVyxDQUFDLGVBQWUsQ0FBQyxTQUFTLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxVQUFVLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUM7SUFDL0UsQ0FBQyxDQUFDLENBQUM7SUFFSCxFQUFFLENBQUMsbURBQW1ELEVBQUUsS0FBSztRQUMzRCxNQUFNLE1BQU0sR0FBRyxXQUFXLEVBQUUsQ0FBQztRQUM3QixNQUFNLEtBQUssR0FBRyxJQUFJLG9CQUFhLEVBQUUsQ0FBQztRQUVsQyxNQUFNLE1BQU0sR0FBRyxNQUFNLE1BQU0sQ0FBQyxTQUFTLENBQUMsRUFBRSxHQUFHLEVBQUUsV0FBVyxFQUFFLEtBQUssRUFBRSxDQUFDLENBQUM7UUFFbkUsTUFBTSxDQUFDLGVBQWUsQ0FBQyxNQUFNLEVBQUUsRUFBRSxLQUFLLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQztRQUNoRCxLQUFLLENBQUMsTUFBTSxDQUFDLFVBQVUsQ0FBQyxlQUFlLENBQUMsQ0FBQztRQUN6QyxNQUFNLENBQUMsV0FBVyxDQUFDLGVBQWUsQ0FBQyxTQUFTLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxDQUFDLEtBQUssRUFBRSxLQUFLLENBQUMsQ0FBQztJQUNyRSxDQUFDLENBQUMsQ0FBQztJQUVILEVBQUUsQ0FBQywrRUFBK0UsRUFBRSxLQUFLO1FBQ3ZGLE1BQU0sTUFBTSxHQUFHLFdBQVcsRUFBRSxDQUFDO1FBRTdCLE1BQU0sTUFBTSxHQUFHLE1BQU0sTUFBTSxDQUFDLFNBQVMsQ0FBQyxFQUFFLEdBQUcsRUFBRSxRQUFRLEVBQUUsQ0FBQyxDQUFDO1FBRXpELE1BQU0sQ0FBQyxlQUFlLENBQUMsTUFBTSxFQUFFLEVBQUUsS0FBSyxFQUFFLEtBQUssRUFBRSxDQUFDLENBQUM7UUFDakQsS0FBSyxDQUFDLE1BQU0sQ0FBQyxVQUFVLENBQUMsZUFBZSxDQUFDLENBQUM7SUFDM0MsQ0FBQyxDQUFDLENBQUM7SUFFSCxFQUFFLENBQUMsaUVBQWlFLEVBQUUsS0FBSztRQUN6RSxVQUFVLENBQUMsWUFBWSxHQUFHLFNBQVMsQ0FBQztRQUNwQyxNQUFNLE1BQU0sR0FBRyxXQUFXLEVBQUUsQ0FBQztRQUU3QixNQUFNLE1BQU0sQ0FBQyxPQUFPLENBQUMsTUFBTSxDQUFDLFNBQVMsQ0FBQyxFQUFFLEdBQUcsRUFBRSxXQUFXLEVBQUUsQ0FBQyxFQUFFLEVBQUUsT0FBTyxFQUFFLDBCQUEwQixFQUFFLENBQUMsQ0FBQztRQUN0RyxLQUFLLENBQUMsTUFBTSxDQUFDLFNBQVMsQ0FBQyxlQUFlLENBQUMsQ0FBQztJQUMxQyxDQUFDLENBQUMsQ0FBQztJQUVILEVBQUUsQ0FBQywrREFBK0QsRUFBRSxLQUFLO1FBQ3ZFLFVBQVUsQ0FBQyxtQkFBbUIsR0FBRyxPQUFPLENBQUM7UUFDekMsTUFBTSxNQUFNLEdBQUcsV0FBVyxFQUFFLENBQUM7UUFFN0IsTUFBTSxNQUFNLENBQUMsT0FBTyxDQUFDLE1BQU0sQ0FBQyxTQUFTLENBQUMsRUFBRSxHQUFHLEVBQUUsV0FBVyxFQUFFLENBQUMsRUFBRSxFQUFFLE9BQU8sRUFBRSwwQkFBMEIsRUFBRSxDQUFDLENBQUM7UUFDdEcsS0FBSyxDQUFDLE1BQU0sQ0FBQyxTQUFTLENBQUMsZUFBZSxDQUFDLENBQUM7SUFDMUMsQ0FBQyxDQUFDLENBQUM7SUFFSCxFQUFFLENBQUMseURBQXlELEVBQUUsS0FBSztRQUNqRSxZQUFZLENBQUMsZUFBZSxDQUFDLE9BQU8sQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUM5QyxNQUFNLE1BQU0sR0FBRyxXQUFXLEVBQUUsQ0FBQztRQUU3QixNQUFNLE1BQU0sQ0FBQyxPQUFPLENBQUMsTUFBTSxDQUFDLFNBQVMsQ0FBQyxFQUFFLEdBQUcsRUFBRSxXQUFXLEVBQUUsQ0FBQyxFQUFFLEVBQUUsT0FBTyxFQUFFLDBCQUEwQixFQUFFLENBQUMsQ0FBQztRQUN0RyxLQUFLLENBQUMsTUFBTSxDQUFDLFNBQVMsQ0FBQyxlQUFlLENBQUMsQ0FBQztJQUMxQyxDQUFDLENBQUMsQ0FBQztJQUVILEVBQUUsQ0FBQyxzREFBc0QsRUFBRSxLQUFLO1FBQzlELGVBQWUsQ0FBQyxRQUFRLENBQUMsRUFBRSxFQUFFLEVBQUUsYUFBYSxFQUFFLElBQUksRUFBRSxLQUFLLEVBQUUsQ0FBQyxDQUFDO1FBQzdELE1BQU0sTUFBTSxHQUFHLFdBQVcsRUFBRSxDQUFDO1FBRTdCLE1BQU0sTUFBTSxDQUFDLE9BQU8sQ0FBQyxNQUFNLENBQUMsU0FBUyxDQUFDLEVBQUUsR0FBRyxFQUFFLFdBQVcsRUFBRSxDQUFDLEVBQUU7WUFDM0QsT0FBTyxFQUFFLDJDQUEyQztTQUNyRCxDQUFDLENBQUM7SUFDTCxDQUFDLENBQUMsQ0FBQztBQUNMLENBQUMsQ0FBQyxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0ICogYXMgYXNzZXJ0IGZyb20gJ2Fzc2VydCc7XG5pbXBvcnQgKiBhcyBzaW5vbiBmcm9tICdzaW5vbic7XG5pbXBvcnQgJ3Nob3VsZCc7XG5pbXBvcnQgeyBXYWxsZXQgfSBmcm9tICcuLi8uLi8uLi8uLi9zcmMvYml0Z28vd2FsbGV0L3dhbGxldCc7XG5pbXBvcnQgeyBFZDI1NTE5QmlwMzJIZFRyZWUgfSBmcm9tICdAYml0Z28tYmV0YS9zZGstbGliLW1wYyc7XG5pbXBvcnQgRWRkc2EgZnJvbSAnLi4vLi4vLi4vLi4vc3JjL2FjY291bnQtbGliL21wYy90c3MnO1xuaW1wb3J0IHsgQml0R29CYXNlIH0gZnJvbSAnLi4vLi4vLi4vLi4vc3JjL2JpdGdvL2JpdGdvQmFzZSc7XG5pbXBvcnQgeyBJQmFzZUNvaW4gfSBmcm9tICcuLi8uLi8uLi8uLi9zcmMvYml0Z28vYmFzZUNvaW4nO1xuaW1wb3J0IHsgZ2V0Qml0Z29NcGNHcGdQdWJLZXkgfSBmcm9tICcuLi8uLi8uLi8uLi9zcmMvYml0Z28vdHNzL2JpdGdvUHViS2V5cyc7XG5pbXBvcnQgeyBSZXF1ZXN0VHJhY2VyIH0gZnJvbSAnLi4vLi4vLi4vLi4vc3JjL2JpdGdvL3V0aWxzL3V0aWwnO1xuXG5jb25zdCBVTlNVUFBPUlRFRF9XQUxMRVRfTUVTU0FHRSA9ICdLZXkgdmVyaWZpY2F0aW9uIGlzIG5vdCBzdXBwb3J0ZWQgZm9yIHRoaXMgd2FsbGV0IHR5cGUnO1xuXG5kZXNjcmliZSgnV2FsbGV0LnZlcmlmeUtleScsIGZ1bmN0aW9uICgpIHtcbiAgbGV0IGNvbW1vbktleWNoYWluOiBzdHJpbmc7XG4gIGxldCBtYXRjaGluZ1Bydjogc3RyaW5nO1xuICBsZXQgb3RoZXJQcnY6IHN0cmluZztcblxuICBiZWZvcmUoYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgIGNvbnN0IGhkVHJlZSA9IGF3YWl0IEVkMjU1MTlCaXAzMkhkVHJlZS5pbml0aWFsaXplKCk7XG4gICAgY29uc3QgTVBDID0gYXdhaXQgRWRkc2EuaW5pdGlhbGl6ZShoZFRyZWUpO1xuXG4gICAgY29uc3QgdXNlcktleVNoYXJlID0gTVBDLmtleVNoYXJlKDEsIDIsIDMpO1xuICAgIGNvbnN0IGJhY2t1cEtleVNoYXJlID0gTVBDLmtleVNoYXJlKDIsIDIsIDMpO1xuICAgIGNvbnN0IGJpdGdvS2V5U2hhcmUgPSBNUEMua2V5U2hhcmUoMywgMiwgMyk7XG4gICAgY29uc3QgY29tYmluZWQgPSBNUEMua2V5Q29tYmluZSh1c2VyS2V5U2hhcmUudVNoYXJlLCBbYmFja3VwS2V5U2hhcmUueVNoYXJlc1sxXSwgYml0Z29LZXlTaGFyZS55U2hhcmVzWzFdXSk7XG4gICAgY29tbW9uS2V5Y2hhaW4gPSBjb21iaW5lZC5wU2hhcmUueSArIGNvbWJpbmVkLnBTaGFyZS5jaGFpbmNvZGU7XG4gICAgbWF0Y2hpbmdQcnYgPSBKU09OLnN0cmluZ2lmeSh7XG4gICAgICB1U2hhcmU6IHVzZXJLZXlTaGFyZS51U2hhcmUsXG4gICAgICBiaXRnb1lTaGFyZTogYml0Z29LZXlTaGFyZS55U2hhcmVzWzFdLFxuICAgICAgYmFja3VwWVNoYXJlOiBiYWNrdXBLZXlTaGFyZS55U2hhcmVzWzFdLFxuICAgIH0pO1xuXG4gICAgLy8gYW4gaW5kZXBlbmRlbnQga2V5IGdlbmVyYXRpb24gZm9yIHRoZSBuZWdhdGl2ZSBjYXNlXG4gICAgY29uc3Qgb3RoZXJVc2VyS2V5U2hhcmUgPSBNUEMua2V5U2hhcmUoMSwgMiwgMyk7XG4gICAgY29uc3Qgb3RoZXJCYWNrdXBLZXlTaGFyZSA9IE1QQy5rZXlTaGFyZSgyLCAyLCAzKTtcbiAgICBjb25zdCBvdGhlckJpdGdvS2V5U2hhcmUgPSBNUEMua2V5U2hhcmUoMywgMiwgMyk7XG4gICAgb3RoZXJQcnYgPSBKU09OLnN0cmluZ2lmeSh7XG4gICAgICB1U2hhcmU6IG90aGVyVXNlcktleVNoYXJlLnVTaGFyZSxcbiAgICAgIGJpdGdvWVNoYXJlOiBvdGhlckJpdGdvS2V5U2hhcmUueVNoYXJlc1sxXSxcbiAgICAgIGJhY2t1cFlTaGFyZTogb3RoZXJCYWNrdXBLZXlTaGFyZS55U2hhcmVzWzFdLFxuICAgIH0pO1xuICB9KTtcblxuICBsZXQgbW9ja0JpdEdvOiB7IHBvc3Q6IHNpbm9uLlNpbm9uU3R1Yjsgc2V0UmVxdWVzdFRyYWNlcjogc2lub24uU2lub25TdHViOyBmZXRjaENvbnN0YW50czogc2lub24uU2lub25TdHViIH07XG4gIGxldCBtb2NrQmFzZUNvaW46IHtcbiAgICBzdXBwb3J0c1Rzczogc2lub24uU2lub25TdHViO1xuICAgIGdldEZhbWlseTogc2lub24uU2lub25TdHViO1xuICAgIGdldE1QQ0FsZ29yaXRobTogc2lub24uU2lub25TdHViO1xuICAgIGtleWNoYWluczogc2lub24uU2lub25TdHViO1xuICAgIHVybDogc2lub24uU2lub25TdHViO1xuICB9O1xuICBsZXQgd2FsbGV0RGF0YTogeyBpZDogc3RyaW5nOyBrZXlzOiBzdHJpbmdbXTsgbXVsdGlzaWdUeXBlOiBzdHJpbmc7IG11bHRpc2lnVHlwZVZlcnNpb24/OiBzdHJpbmcgfTtcbiAgbGV0IGdldEtleWNoYWluU3R1Yjogc2lub24uU2lub25TdHViO1xuXG4gIGJlZm9yZUVhY2goZnVuY3Rpb24gKCkge1xuICAgIG1vY2tCaXRHbyA9IHtcbiAgICAgIHBvc3Q6IHNpbm9uLnN0dWIoKSxcbiAgICAgIHNldFJlcXVlc3RUcmFjZXI6IHNpbm9uLnN0dWIoKSxcbiAgICAgIC8vIHRoZSBNUEN2Mi9FQ0RTQSB1dGlscyBjb25zdHJ1Y3RvcnMgY2FsbCBzZXRCaXRnb0dwZ1B1YktleSwgd2hpY2ggZmV0Y2hlcyBjb25zdGFudHM7XG4gICAgICAvLyBzdHViYmluZyBpdCBhdm9pZHMgYSBzd2FsbG93ZWQgdW5oYW5kbGVkIHJlamVjdGlvbiBpbiB0aG9zZSB0ZXN0c1xuICAgICAgZmV0Y2hDb25zdGFudHM6IHNpbm9uLnN0dWIoKS5yZXNvbHZlcyh7XG4gICAgICAgIG1wYzogeyBiaXRnb1B1YmxpY0tleTogZ2V0Qml0Z29NcGNHcGdQdWJLZXkoJ3Rlc3QnLCAnbml0cm8nLCAnbXBjdjEnKSB9LFxuICAgICAgfSksXG4gICAgfTtcblxuICAgIGdldEtleWNoYWluU3R1YiA9IHNpbm9uLnN0dWIoKS5yZXNvbHZlcyh7IGlkOiAndXNlci1rZXktaWQnLCB0eXBlOiAndHNzJywgY29tbW9uS2V5Y2hhaW4gfSk7XG5cbiAgICBtb2NrQmFzZUNvaW4gPSB7XG4gICAgICBzdXBwb3J0c1Rzczogc2lub24uc3R1YigpLnJldHVybnModHJ1ZSksXG4gICAgICBnZXRGYW1pbHk6IHNpbm9uLnN0dWIoKS5yZXR1cm5zKCdzb2wnKSxcbiAgICAgIGdldE1QQ0FsZ29yaXRobTogc2lub24uc3R1YigpLnJldHVybnMoJ2VkZHNhJyksXG4gICAgICBrZXljaGFpbnM6IHNpbm9uLnN0dWIoKS5yZXR1cm5zKHsgZ2V0OiBnZXRLZXljaGFpblN0dWIgfSksXG4gICAgICB1cmw6IHNpbm9uLnN0dWIoKS5yZXR1cm5zKCcvYXBpL3YyL3NvbC93YWxsZXQvdGVzdC13YWxsZXQtaWQnKSxcbiAgICB9O1xuXG4gICAgd2FsbGV0RGF0YSA9IHtcbiAgICAgIGlkOiAndGVzdC13YWxsZXQtaWQnLFxuICAgICAga2V5czogWyd1c2VyLWtleS1pZCcsICdiYWNrdXAta2V5LWlkJywgJ2JpdGdvLWtleS1pZCddLFxuICAgICAgbXVsdGlzaWdUeXBlOiAndHNzJyxcbiAgICB9O1xuICB9KTtcblxuICBhZnRlckVhY2goZnVuY3Rpb24gKCkge1xuICAgIHNpbm9uLnJlc3RvcmUoKTtcbiAgfSk7XG5cbiAgLyoqXG4gICAqIEJ1aWxkcyB0aGUgd2FsbGV0IHVuZGVyIHRlc3QgZnJvbSB0aGUgc2lub24gc3RhbmQtaW5zLiBUaGUgY2FzdHMgYXJlIHNhZmUgYmVjYXVzZSB0aGVcbiAgICogV2FsbGV0IGNvbnN0cnVjdG9yIGFuZCB2ZXJpZnlLZXkgb25seSB0b3VjaCB0aGUgbWVtYmVycyBzdHViYmVkIGFib3ZlLlxuICAgKi9cbiAgZnVuY3Rpb24gYnVpbGRXYWxsZXQoKTogV2FsbGV0IHtcbiAgICByZXR1cm4gbmV3IFdhbGxldChtb2NrQml0R28gYXMgdW5rbm93biBhcyBCaXRHb0Jhc2UsIG1vY2tCYXNlQ29pbiBhcyB1bmtub3duIGFzIElCYXNlQ29pbiwgd2FsbGV0RGF0YSk7XG4gIH1cblxuICBpdCgncmV0dXJucyBtYXRjaCB0cnVlIGZvciB1c2VyIHNpZ25pbmcgbWF0ZXJpYWwgdGhhdCBiZWxvbmdzIHRvIHRoZSB3YWxsZXQnLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgY29uc3Qgd2FsbGV0ID0gYnVpbGRXYWxsZXQoKTtcblxuICAgIGNvbnN0IHJlc3VsdCA9IGF3YWl0IHdhbGxldC52ZXJpZnlLZXkoeyBwcnY6IG1hdGNoaW5nUHJ2IH0pO1xuXG4gICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChyZXN1bHQsIHsgbWF0Y2g6IHRydWUgfSk7XG4gICAgc2lub24uYXNzZXJ0LmNhbGxlZE9uY2UoZ2V0S2V5Y2hhaW5TdHViKTtcbiAgICBhc3NlcnQuc3RyaWN0RXF1YWwoZ2V0S2V5Y2hhaW5TdHViLmZpcnN0Q2FsbC5hcmdzWzBdLmlkLCB3YWxsZXREYXRhLmtleXNbMF0pO1xuICB9KTtcblxuICBpdCgnZm9yd2FyZHMgdGhlIHJlcXVlc3QgdHJhY2VyIHRvIHRoZSBrZXljaGFpbiBmZXRjaCcsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICBjb25zdCB3YWxsZXQgPSBidWlsZFdhbGxldCgpO1xuICAgIGNvbnN0IHJlcUlkID0gbmV3IFJlcXVlc3RUcmFjZXIoKTtcblxuICAgIGNvbnN0IHJlc3VsdCA9IGF3YWl0IHdhbGxldC52ZXJpZnlLZXkoeyBwcnY6IG1hdGNoaW5nUHJ2LCByZXFJZCB9KTtcblxuICAgIGFzc2VydC5kZWVwU3RyaWN0RXF1YWwocmVzdWx0LCB7IG1hdGNoOiB0cnVlIH0pO1xuICAgIHNpbm9uLmFzc2VydC5jYWxsZWRPbmNlKGdldEtleWNoYWluU3R1Yik7XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKGdldEtleWNoYWluU3R1Yi5maXJzdENhbGwuYXJnc1swXS5yZXFJZCwgcmVxSWQpO1xuICB9KTtcblxuICBpdCgncmV0dXJucyBtYXRjaCBmYWxzZSBmb3IgdXNlciBzaWduaW5nIG1hdGVyaWFsIGZyb20gYSBkaWZmZXJlbnQga2V5IGdlbmVyYXRpb24nLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgY29uc3Qgd2FsbGV0ID0gYnVpbGRXYWxsZXQoKTtcblxuICAgIGNvbnN0IHJlc3VsdCA9IGF3YWl0IHdhbGxldC52ZXJpZnlLZXkoeyBwcnY6IG90aGVyUHJ2IH0pO1xuXG4gICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChyZXN1bHQsIHsgbWF0Y2g6IGZhbHNlIH0pO1xuICAgIHNpbm9uLmFzc2VydC5jYWxsZWRPbmNlKGdldEtleWNoYWluU3R1Yik7XG4gIH0pO1xuXG4gIGl0KCdyZWplY3RzIG9uLWNoYWluIG11bHRpc2lnIHdhbGxldHMgd2l0aG91dCBmZXRjaGluZyB0aGUga2V5Y2hhaW4nLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgd2FsbGV0RGF0YS5tdWx0aXNpZ1R5cGUgPSAnb25jaGFpbic7XG4gICAgY29uc3Qgd2FsbGV0ID0gYnVpbGRXYWxsZXQoKTtcblxuICAgIGF3YWl0IGFzc2VydC5yZWplY3RzKHdhbGxldC52ZXJpZnlLZXkoeyBwcnY6IG1hdGNoaW5nUHJ2IH0pLCB7IG1lc3NhZ2U6IFVOU1VQUE9SVEVEX1dBTExFVF9NRVNTQUdFIH0pO1xuICAgIHNpbm9uLmFzc2VydC5ub3RDYWxsZWQoZ2V0S2V5Y2hhaW5TdHViKTtcbiAgfSk7XG5cbiAgaXQoJ3JlamVjdHMgVFNTIEVkRFNBIE1QQ3YyIHdhbGxldHMgd2l0aG91dCBmZXRjaGluZyB0aGUga2V5Y2hhaW4nLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgd2FsbGV0RGF0YS5tdWx0aXNpZ1R5cGVWZXJzaW9uID0gJ01QQ3YyJztcbiAgICBjb25zdCB3YWxsZXQgPSBidWlsZFdhbGxldCgpO1xuXG4gICAgYXdhaXQgYXNzZXJ0LnJlamVjdHMod2FsbGV0LnZlcmlmeUtleSh7IHBydjogbWF0Y2hpbmdQcnYgfSksIHsgbWVzc2FnZTogVU5TVVBQT1JURURfV0FMTEVUX01FU1NBR0UgfSk7XG4gICAgc2lub24uYXNzZXJ0Lm5vdENhbGxlZChnZXRLZXljaGFpblN0dWIpO1xuICB9KTtcblxuICBpdCgncmVqZWN0cyBUU1MgRUNEU0Egd2FsbGV0cyB3aXRob3V0IGZldGNoaW5nIHRoZSBrZXljaGFpbicsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICBtb2NrQmFzZUNvaW4uZ2V0TVBDQWxnb3JpdGhtLnJldHVybnMoJ2VjZHNhJyk7XG4gICAgY29uc3Qgd2FsbGV0ID0gYnVpbGRXYWxsZXQoKTtcblxuICAgIGF3YWl0IGFzc2VydC5yZWplY3RzKHdhbGxldC52ZXJpZnlLZXkoeyBwcnY6IG1hdGNoaW5nUHJ2IH0pLCB7IG1lc3NhZ2U6IFVOU1VQUE9SVEVEX1dBTExFVF9NRVNTQUdFIH0pO1xuICAgIHNpbm9uLmFzc2VydC5ub3RDYWxsZWQoZ2V0S2V5Y2hhaW5TdHViKTtcbiAgfSk7XG5cbiAgaXQoJ3JlamVjdHMgd2hlbiB0aGUgdXNlciBrZXljaGFpbiBoYXMgbm8gY29tbW9uS2V5Y2hhaW4nLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgZ2V0S2V5Y2hhaW5TdHViLnJlc29sdmVzKHsgaWQ6ICd1c2VyLWtleS1pZCcsIHR5cGU6ICd0c3MnIH0pO1xuICAgIGNvbnN0IHdhbGxldCA9IGJ1aWxkV2FsbGV0KCk7XG5cbiAgICBhd2FpdCBhc3NlcnQucmVqZWN0cyh3YWxsZXQudmVyaWZ5S2V5KHsgcHJ2OiBtYXRjaGluZ1BydiB9KSwge1xuICAgICAgbWVzc2FnZTogJ3dhbGxldCBrZXljaGFpbiBpcyBtaXNzaW5nIGNvbW1vbktleWNoYWluJyxcbiAgICB9KTtcbiAgfSk7XG59KTtcbiJdfQ==