@bitgo-beta/sdk-core 8.2.1-beta.21 → 8.2.1-beta.2100

package/dist/src/bitgo/utils/tss/ecdsa/ecdsaMPCv2KeyGenSender.d.ts

@@ -0,0 +1,16 @@
+import { MPCv2KeyGenState } from '@bitgo/public-types';
+import { GenerateMPCv2DeriveKeyRequest, GenerateMPCv2DeriveKeyRequestResponse, GenerateMPCv2KeyRequestBody, GenerateMPCv2KeyRequestResponse } from './typesMPCv2';
+import { BitGoBase } from '../../../bitgoBase';
+export type EcdsaMPCv2KeyGenSendFn<T extends GenerateMPCv2KeyRequestResponse> = (round: MPCv2KeyGenState, payload: GenerateMPCv2KeyRequestBody & {
+    walletId?: string;
+}) => Promise<T>;
+export declare function KeyGenSenderForEnterprise<T extends GenerateMPCv2KeyRequestResponse>(bitgo: BitGoBase, enterprise: string, safeId?: string): EcdsaMPCv2KeyGenSendFn<T>;
+export type EcdsaMPCv2DeriveKeySendFn<T extends GenerateMPCv2DeriveKeyRequestResponse> = (round: MPCv2KeyGenState, payload: GenerateMPCv2DeriveKeyRequest) => Promise<T>;
+/**
+ * Round sender for the user/BitGo safe-child hard-derivation ceremony. The
+ * derive rounds use the same endpoint as MPCv2 keygen (`/mpc/generatekey`),
+ * dispatched by the `MPCv2Derive-R*` round values. The R1 payload carries the
+ * BitGo root `parentKeyId` and `derivationIndex`.
+ */
+export declare function KeyGenSenderForSafeChild<T extends GenerateMPCv2DeriveKeyRequestResponse>(bitgo: BitGoBase, enterprise: string, safeId: string): EcdsaMPCv2DeriveKeySendFn<T>;
+//# sourceMappingURL=ecdsaMPCv2KeyGenSender.d.ts.map

package/dist/src/bitgo/utils/tss/ecdsa/ecdsaMPCv2KeyGenSender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecdsaMPCv2KeyGenSender.d.ts","sourceRoot":"","sources":["../../../../../../src/bitgo/utils/tss/ecdsa/ecdsaMPCv2KeyGenSender.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EACL,6BAA6B,EAC7B,qCAAqC,EACrC,2BAA2B,EAC3B,+BAA+B,EAChC,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,+BAA+B,IAAI,CAC9E,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,2BAA2B,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,KACzD,OAAO,CAAC,CAAC,CAAC,CAAC;AAEhB,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,+BAA+B,EACjF,KAAK,EAAE,SAAS,EAChB,UAAU,EAAE,MAAM,EAGlB,MAAM,CAAC,EAAE,MAAM,GACd,sBAAsB,CAAC,CAAC,CAAC,CAO3B;AAED,MAAM,MAAM,yBAAyB,CAAC,CAAC,SAAS,qCAAqC,IAAI,CACvF,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,6BAA6B,KACnC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEhB;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,qCAAqC,EACtF,KAAK,EAAE,SAAS,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb,yBAAyB,CAAC,CAAC,CAAC,CAa9B"}

package/dist/src/bitgo/utils/tss/ecdsa/ecdsaMPCv2KeyGenSender.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyGenSenderForEnterprise = KeyGenSenderForEnterprise;
+exports.KeyGenSenderForSafeChild = KeyGenSenderForSafeChild;
+const public_types_1 = require("@bitgo/public-types");
+function KeyGenSenderForEnterprise(bitgo, enterprise, 
+// @experimental: when set, tags the resulting root keys with this safe. Only read
+// on round MPCv2-R1; passing it on a sender used solely for round 1 is sufficient.
+safeId) {
+    return (round, payload) => {
+        return bitgo
+            .post(bitgo.url('/mpc/generatekey', 2))
+            .send({ enterprise, safeId, type: public_types_1.KeyGenTypeEnum.MPCv2, round, payload })
+            .result();
+    };
+}
+/**
+ * Round sender for the user/BitGo safe-child hard-derivation ceremony. The
+ * derive rounds use the same endpoint as MPCv2 keygen (`/mpc/generatekey`),
+ * dispatched by the `MPCv2Derive-R*` round values. The R1 payload carries the
+ * BitGo root `parentKeyId` and `derivationIndex`.
+ */
+function KeyGenSenderForSafeChild(bitgo, enterprise, safeId) {
+    return (round, payload) => {
+        return bitgo
+            .post(bitgo.url('/mpc/generatekey', 2))
+            .send({
+            enterprise,
+            safeId,
+            type: public_types_1.KeyGenTypeEnum.MPCv2,
+            round,
+            payload,
+        })
+            .result();
+    };
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZWNkc2FNUEN2MktleUdlblNlbmRlci5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uLy4uL3NyYy9iaXRnby91dGlscy90c3MvZWNkc2EvZWNkc2FNUEN2MktleUdlblNlbmRlci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQWNBLDhEQWFDO0FBYUQsNERBaUJDO0FBekRELHNEQUF1RTtBQWN2RSxTQUFnQix5QkFBeUIsQ0FDdkMsS0FBZ0IsRUFDaEIsVUFBa0I7QUFDbEIsa0ZBQWtGO0FBQ2xGLG1GQUFtRjtBQUNuRixNQUFlO0lBRWYsT0FBTyxDQUFDLEtBQUssRUFBRSxPQUFPLEVBQUUsRUFBRTtRQUN4QixPQUFPLEtBQUs7YUFDVCxJQUFJLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxrQkFBa0IsRUFBRSxDQUFDLENBQUMsQ0FBQzthQUN0QyxJQUFJLENBQUMsRUFBRSxVQUFVLEVBQUUsTUFBTSxFQUFFLElBQUksRUFBRSw2QkFBYyxDQUFDLEtBQUssRUFBRSxLQUFLLEVBQUUsT0FBTyxFQUFFLENBQUM7YUFDeEUsTUFBTSxFQUFFLENBQUM7SUFDZCxDQUFDLENBQUM7QUFDSixDQUFDO0FBT0Q7Ozs7O0dBS0c7QUFDSCxTQUFnQix3QkFBd0IsQ0FDdEMsS0FBZ0IsRUFDaEIsVUFBa0IsRUFDbEIsTUFBYztJQUVkLE9BQU8sQ0FBQyxLQUFLLEVBQUUsT0FBTyxFQUFFLEVBQUU7UUFDeEIsT0FBTyxLQUFLO2FBQ1QsSUFBSSxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsa0JBQWtCLEVBQUUsQ0FBQyxDQUFDLENBQUM7YUFDdEMsSUFBSSxDQUFDO1lBQ0osVUFBVTtZQUNWLE1BQU07WUFDTixJQUFJLEVBQUUsNkJBQWMsQ0FBQyxLQUFLO1lBQzFCLEtBQUs7WUFDTCxPQUFPO1NBQ1IsQ0FBQzthQUNELE1BQU0sRUFBRSxDQUFDO0lBQ2QsQ0FBQyxDQUFDO0FBQ0osQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCB7IEtleUdlblR5cGVFbnVtLCBNUEN2MktleUdlblN0YXRlIH0gZnJvbSAnQGJpdGdvL3B1YmxpYy10eXBlcyc7XG5pbXBvcnQge1xuICBHZW5lcmF0ZU1QQ3YyRGVyaXZlS2V5UmVxdWVzdCxcbiAgR2VuZXJhdGVNUEN2MkRlcml2ZUtleVJlcXVlc3RSZXNwb25zZSxcbiAgR2VuZXJhdGVNUEN2MktleVJlcXVlc3RCb2R5LFxuICBHZW5lcmF0ZU1QQ3YyS2V5UmVxdWVzdFJlc3BvbnNlLFxufSBmcm9tICcuL3R5cGVzTVBDdjInO1xuaW1wb3J0IHsgQml0R29CYXNlIH0gZnJvbSAnLi4vLi4vLi4vYml0Z29CYXNlJztcblxuZXhwb3J0IHR5cGUgRWNkc2FNUEN2MktleUdlblNlbmRGbjxUIGV4dGVuZHMgR2VuZXJhdGVNUEN2MktleVJlcXVlc3RSZXNwb25zZT4gPSAoXG4gIHJvdW5kOiBNUEN2MktleUdlblN0YXRlLFxuICBwYXlsb2FkOiBHZW5lcmF0ZU1QQ3YyS2V5UmVxdWVzdEJvZHkgJiB7IHdhbGxldElkPzogc3RyaW5nIH1cbikgPT4gUHJvbWlzZTxUPjtcblxuZXhwb3J0IGZ1bmN0aW9uIEtleUdlblNlbmRlckZvckVudGVycHJpc2U8VCBleHRlbmRzIEdlbmVyYXRlTVBDdjJLZXlSZXF1ZXN0UmVzcG9uc2U+KFxuICBiaXRnbzogQml0R29CYXNlLFxuICBlbnRlcnByaXNlOiBzdHJpbmcsXG4gIC8vIEBleHBlcmltZW50YWw6IHdoZW4gc2V0LCB0YWdzIHRoZSByZXN1bHRpbmcgcm9vdCBrZXlzIHdpdGggdGhpcyBzYWZlLiBPbmx5IHJlYWRcbiAgLy8gb24gcm91bmQgTVBDdjItUjE7IHBhc3NpbmcgaXQgb24gYSBzZW5kZXIgdXNlZCBzb2xlbHkgZm9yIHJvdW5kIDEgaXMgc3VmZmljaWVudC5cbiAgc2FmZUlkPzogc3RyaW5nXG4pOiBFY2RzYU1QQ3YyS2V5R2VuU2VuZEZuPFQ+IHtcbiAgcmV0dXJuIChyb3VuZCwgcGF5bG9hZCkgPT4ge1xuICAgIHJldHVybiBiaXRnb1xuICAgICAgLnBvc3QoYml0Z28udXJsKCcvbXBjL2dlbmVyYXRla2V5JywgMikpXG4gICAgICAuc2VuZCh7IGVudGVycHJpc2UsIHNhZmVJZCwgdHlwZTogS2V5R2VuVHlwZUVudW0uTVBDdjIsIHJvdW5kLCBwYXlsb2FkIH0pXG4gICAgICAucmVzdWx0KCk7XG4gIH07XG59XG5cbmV4cG9ydCB0eXBlIEVjZHNhTVBDdjJEZXJpdmVLZXlTZW5kRm48VCBleHRlbmRzIEdlbmVyYXRlTVBDdjJEZXJpdmVLZXlSZXF1ZXN0UmVzcG9uc2U+ID0gKFxuICByb3VuZDogTVBDdjJLZXlHZW5TdGF0ZSxcbiAgcGF5bG9hZDogR2VuZXJhdGVNUEN2MkRlcml2ZUtleVJlcXVlc3RcbikgPT4gUHJvbWlzZTxUPjtcblxuLyoqXG4gKiBSb3VuZCBzZW5kZXIgZm9yIHRoZSB1c2VyL0JpdEdvIHNhZmUtY2hpbGQgaGFyZC1kZXJpdmF0aW9uIGNlcmVtb255LiBUaGVcbiAqIGRlcml2ZSByb3VuZHMgdXNlIHRoZSBzYW1lIGVuZHBvaW50IGFzIE1QQ3YyIGtleWdlbiAoYC9tcGMvZ2VuZXJhdGVrZXlgKSxcbiAqIGRpc3BhdGNoZWQgYnkgdGhlIGBNUEN2MkRlcml2ZS1SKmAgcm91bmQgdmFsdWVzLiBUaGUgUjEgcGF5bG9hZCBjYXJyaWVzIHRoZVxuICogQml0R28gcm9vdCBgcGFyZW50S2V5SWRgIGFuZCBgZGVyaXZhdGlvbkluZGV4YC5cbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIEtleUdlblNlbmRlckZvclNhZmVDaGlsZDxUIGV4dGVuZHMgR2VuZXJhdGVNUEN2MkRlcml2ZUtleVJlcXVlc3RSZXNwb25zZT4oXG4gIGJpdGdvOiBCaXRHb0Jhc2UsXG4gIGVudGVycHJpc2U6IHN0cmluZyxcbiAgc2FmZUlkOiBzdHJpbmdcbik6IEVjZHNhTVBDdjJEZXJpdmVLZXlTZW5kRm48VD4ge1xuICByZXR1cm4gKHJvdW5kLCBwYXlsb2FkKSA9PiB7XG4gICAgcmV0dXJuIGJpdGdvXG4gICAgICAucG9zdChiaXRnby51cmwoJy9tcGMvZ2VuZXJhdGVrZXknLCAyKSlcbiAgICAgIC5zZW5kKHtcbiAgICAgICAgZW50ZXJwcmlzZSxcbiAgICAgICAgc2FmZUlkLFxuICAgICAgICB0eXBlOiBLZXlHZW5UeXBlRW51bS5NUEN2MixcbiAgICAgICAgcm91bmQsXG4gICAgICAgIHBheWxvYWQsXG4gICAgICB9KVxuICAgICAgLnJlc3VsdCgpO1xuICB9O1xufVxuIl19

package/dist/src/bitgo/utils/tss/ecdsa/ecdsaVrfMPCv2.d.ts

@@ -0,0 +1,69 @@
+import { DklsTypes } from '@bitgo-beta/sdk-lib-mpc';
+import { MPCv2DeriveRound1Response, MPCv2DeriveRound2Response, MPCv2DeriveRound3Response } from '@bitgo/public-types';
+import { KeychainsTriplet } from '../../../baseCoin';
+import { DecryptedRetrofitPayload } from '../../../keychain/iKeychains';
+import { EncryptionVersion } from '../../../../api';
+import { WebauthnKeyEncryptionInfo } from '../../../keychain';
+import { EcdsaMPCv2Utils } from './ecdsaMPCv2';
+import { EcdsaMPCv2DeriveKeySendFn } from './ecdsaMPCv2KeyGenSender';
+/**
+ * Encodes a hardened derivation index as the byte path the DKLS hard-derive wasm
+ * expects: one big-endian u32 with the hardened bit (0x80000000) set — i.e. the
+ * child path `m/<index>'`. The server derives the same hardened path from the
+ * `derivationIndex` it receives on round 1.
+ */
+export declare function hardenedDerivationPath(index: number): Uint8Array;
+/**
+ * EcdsaMPCv2Utils variant that runs the Ristretto VRF DKG alongside the signing DKLS
+ * DKG inside the same MPCv2 keygen rounds, for safe MPC root creation.
+ *
+ * The round enum is unchanged: the VRF commitment rides MPCv2-R1, the opening rides
+ * MPCv2-R2, and the VRF DKG finalizes locally before MPCv2-R3. VRF messages travel as
+ * opaque base64 fields on the round payloads, never through the DKLS broadcast/p2p slots.
+ * At the end, the signing and VRF keyshares are combined into a single CBOR envelope
+ * before encryption.
+ */
+export declare class EcdsaVrfMPCv2Utils extends EcdsaMPCv2Utils {
+    /** @inheritdoc */
+    createKeychains(params: {
+        passphrase: string;
+        enterprise: string;
+        originalPasscodeEncryptionCode?: string;
+        retrofit?: DecryptedRetrofitPayload;
+        webauthnInfo?: WebauthnKeyEncryptionInfo;
+        encryptionVersion?: EncryptionVersion;
+        safeId: string;
+    }): Promise<KeychainsTriplet>;
+    /**
+     * Sends round 1 for the user/BitGo hard-derive ceremony.
+     */
+    sendDerivationRound1BySender(senderFn: EcdsaMPCv2DeriveKeySendFn<MPCv2DeriveRound1Response>, userGpgPublicKey: string, payload: DklsTypes.AuthEncMessages, parentKeyId: string, derivationIndex: number): Promise<MPCv2DeriveRound1Response>;
+    /**
+     * Sends round 2 for the user/BitGo hard-derive ceremony.
+     */
+    sendDerivationRound2BySender(senderFn: EcdsaMPCv2DeriveKeySendFn<MPCv2DeriveRound2Response>, sessionId: string, payload: DklsTypes.AuthEncMessages): Promise<MPCv2DeriveRound2Response>;
+    /**
+     * Completes round 3 and returns the child common keychain.
+     */
+    sendDerivationRound3BySender(senderFn: EcdsaMPCv2DeriveKeySendFn<MPCv2DeriveRound3Response>, sessionId: string): Promise<MPCv2DeriveRound3Response>;
+    /**
+     * Runs the safe child hard-derive ceremony and registers child key documents.
+     */
+    createSafeChildKeychains(params: {
+        passphrase: string;
+        enterprise: string;
+        safeId: string;
+        /** Root key ID used for the derive. */
+        parentKeyId: string;
+        derivationIndex: number;
+        userRootKeyId: string;
+        backupRootKeyId: string;
+        userRootKeyShare: Buffer;
+        userRootVrfKeyShare: Buffer;
+        originalPasscodeEncryptionCode?: string;
+        webauthnInfo?: WebauthnKeyEncryptionInfo;
+        encryptionVersion?: EncryptionVersion;
+    }): Promise<KeychainsTriplet>;
+    private createSigningDkgSessions;
+}
+//# sourceMappingURL=ecdsaVrfMPCv2.d.ts.map

package/dist/src/bitgo/utils/tss/ecdsa/ecdsaVrfMPCv2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecdsaVrfMPCv2.d.ts","sourceRoot":"","sources":["../../../../../../src/bitgo/utils/tss/ecdsa/ecdsaVrfMPCv2.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,SAAS,EAAW,MAAM,yBAAyB,CAAC;AAG1F,OAAO,EAEL,yBAAyB,EAEzB,yBAAyB,EACzB,yBAAyB,EAI1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAG9D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACL,yBAAyB,EAG1B,MAAM,0BAA0B,CAAC;AAwClC;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAKhE;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,SAAQ,eAAe;IACrD,kBAAkB;IACZ,eAAe,CAAC,MAAM,EAAE;QAC5B,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;QACpC,YAAY,CAAC,EAAE,yBAAyB,CAAC;QACzC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;QAEtC,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAua7B;;OAEG;IACG,4BAA4B,CAChC,QAAQ,EAAE,yBAAyB,CAAC,yBAAyB,CAAC,EAC9D,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,SAAS,CAAC,eAAe,EAClC,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,yBAAyB,CAAC;IAmBrC;;OAEG;IACG,4BAA4B,CAChC,QAAQ,EAAE,yBAAyB,CAAC,yBAAyB,CAAC,EAC9D,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,CAAC,eAAe,GACjC,OAAO,CAAC,yBAAyB,CAAC;IAYrC;;OAEG;IACG,4BAA4B,CAChC,QAAQ,EAAE,yBAAyB,CAAC,yBAAyB,CAAC,EAC9D,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,yBAAyB,CAAC;IAKrC;;OAEG;IACG,wBAAwB,CAAC,MAAM,EAAE;QACrC,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,uCAAuC;QACvC,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,YAAY,CAAC,EAAE,yBAAyB,CAAC;QACzC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;KACvC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA6I7B,OAAO,CAAC,wBAAwB;CAgBjC"}