@bitgo-beta/sdk-lib-mpc 8.2.0-beta.1962 → 8.2.0-beta.1963

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,4 +1,5 @@
1
1
  export * from './ecdsa';
2
2
  export * from './ecdsa-dkls';
3
3
  export * from './eddsa-mps';
4
+ export * from './redpallas-mps';
4
5
  //# sourceMappingURL=index.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tss/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tss/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC"}
@@ -17,4 +17,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
17
17
  __exportStar(require("./ecdsa"), exports);
18
18
  __exportStar(require("./ecdsa-dkls"), exports);
19
19
  __exportStar(require("./eddsa-mps"), exports);
20
- //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvdHNzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSwwQ0FBd0I7QUFDeEIsK0NBQTZCO0FBQzdCLDhDQUE0QiIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4vZWNkc2EnO1xuZXhwb3J0ICogZnJvbSAnLi9lY2RzYS1ka2xzJztcbmV4cG9ydCAqIGZyb20gJy4vZWRkc2EtbXBzJztcbiJdfQ==
20
+ __exportStar(require("./redpallas-mps"), exports);
21
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvdHNzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSwwQ0FBd0I7QUFDeEIsK0NBQTZCO0FBQzdCLDhDQUE0QjtBQUM1QixrREFBZ0MiLCJzb3VyY2VzQ29udGVudCI6WyJleHBvcnQgKiBmcm9tICcuL2VjZHNhJztcbmV4cG9ydCAqIGZyb20gJy4vZWNkc2EtZGtscyc7XG5leHBvcnQgKiBmcm9tICcuL2VkZHNhLW1wcyc7XG5leHBvcnQgKiBmcm9tICcuL3JlZHBhbGxhcy1tcHMnO1xuIl19
@@ -0,0 +1,105 @@
1
+ import { DeserializedMessage, DeserializedMessages, RedPallasDkgState } from './types';
2
+ /**
3
+ * RedPallas (Zcash Ironwood) Distributed Key Generation (DKG) implementation using @bitgo/wasm-mps.
4
+ *
5
+ * Mirrors the structure of the EdDSA MPS `DKG` class (see `../eddsa-mps/dkg.ts`), but wraps the
6
+ * `redpallas_dkg_*` WASM bindings. Round2 additionally requires a `derivationSeed` and returns a
7
+ * `MsgDerivationInit` (msg/pk/share/state) rather than a final `Share`, because RedPallas key
8
+ * derivation (ask/nk/rivk/ivks, via `redpallas_derivation_process`) is a separate, subsequent
9
+ * process that is platform-side only and intentionally not exposed here.
10
+ *
11
+ * State is explicit: each round function returns `{ msg, state }` bytes. The state bytes are
12
+ * stored between rounds and passed to the next round function, mirroring the server-side
13
+ * persistence pattern (state would be serialised to DB, or in OVC's case, a microSD card).
14
+ *
15
+ * @example
16
+ * ```typescript
17
+ * const dkg = new RedPallasDKG(3, 2, 0);
18
+ * // X25519 keys come from GPG encryption subkeys (extracted by the orchestrator)
19
+ * await dkg.initDkg(myX25519PrivKey, [otherParty1X25519PubKey, otherParty2X25519PubKey]);
20
+ * const msg1 = dkg.getFirstMessage();
21
+ * const msg2s = dkg.handleIncomingMessages(allThreeMsg1s);
22
+ * dkg.handleIncomingMessages(allThreeMsg2s, derivationSeed); // completes DKG
23
+ * const keyShare = dkg.getKeyShare();
24
+ * ```
25
+ */
26
+ export declare class RedPallasDKG {
27
+ protected n: number;
28
+ protected t: number;
29
+ protected partyIdx: number;
30
+ /** Private X25519 key (from GPG encryption subkey) */
31
+ private decryptionKey;
32
+ /** Other parties' X25519 public keys (from their GPG encryption subkeys), sorted by party index */
33
+ private otherPubKeys;
34
+ /** Serialised round state bytes returned by the previous round function */
35
+ private dkgStateBytes;
36
+ /** Opaque bincode-serialised keyshare from round2 */
37
+ private keyShare;
38
+ /** RedPallas public key (verification key) from round2 */
39
+ private sharePk;
40
+ /** Lazily loaded WASM module */
41
+ private wasmMps;
42
+ protected dkgState: RedPallasDkgState;
43
+ constructor(n: number, t: number, partyIdx: number);
44
+ private loadWasmMps;
45
+ private getWasmMps;
46
+ getState(): RedPallasDkgState;
47
+ /**
48
+ * Initialises the DKG session with this party's X25519 private key and the other parties'
49
+ * X25519 public keys. Keys are extracted from GPG encryption subkeys by the orchestrator.
50
+ *
51
+ * @param decryptionKey - This party's 32-byte X25519 private key (GPG enc subkey private part).
52
+ * @param otherEncPublicKeys - Other parties' 32-byte X25519 public keys, sorted by ascending
53
+ * party index (excluding own). For a 3-party setup, this is [party_A_pub, party_B_pub].
54
+ */
55
+ initDkg(decryptionKey: Buffer, otherEncPublicKeys: Buffer[]): Promise<void>;
56
+ /**
57
+ * Runs round0 of the DKG protocol. Returns this party's broadcast message.
58
+ * Stores the round state bytes internally for the next round.
59
+ *
60
+ * @param dkgSeed - Optional 32-byte seed for deterministic DKG output (testing only).
61
+ */
62
+ getFirstMessage(dkgSeed?: Buffer): DeserializedMessage;
63
+ /**
64
+ * Handles incoming messages from all parties and advances the protocol.
65
+ *
66
+ * - In WaitMsg1: runs round1, returns this party's round1 broadcast message.
67
+ * - In WaitMsg2: runs round2, completes DKG, returns [].
68
+ *
69
+ * The caller passes all n messages (including own); own message is filtered
70
+ * out internally. Other parties' messages are sorted by ascending party index,
71
+ * matching the ordering expected by @bitgo/wasm-mps.
72
+ *
73
+ * @param messagesForIthRound - All n messages for this round (including own).
74
+ * @param derivationSeed - Required only when advancing WaitMsg2 -> Complete (round2): a
75
+ * 32-byte seed consumed by the subsequent, platform-side-only derivation process.
76
+ */
77
+ handleIncomingMessages(messagesForIthRound: DeserializedMessages, derivationSeed?: Buffer): DeserializedMessages;
78
+ /**
79
+ * Returns the opaque bincode-serialised keyshare produced by round2.
80
+ * This is used as input to the (platform-side) signing and derivation protocols.
81
+ */
82
+ getKeyShare(): Buffer;
83
+ /**
84
+ * Returns the RedPallas public key (verification key) agreed by all parties during DKG.
85
+ */
86
+ getSharePublicKey(): Buffer;
87
+ /**
88
+ * Returns a CBOR-encoded ReducedKeyShare buffer containing the party's opaque
89
+ * signing key share in the `keyShare` field. This buffer is private key material.
90
+ * The caller encrypts it and stores it as `reducedEncryptedPrv` on the key card QR code.
91
+ */
92
+ getReducedKeyShare(): Buffer;
93
+ /**
94
+ * Exports the current session state as a JSON string for persistence.
95
+ * Includes: round state bytes, current DKG round, decryption key, other parties' pub keys.
96
+ * This mirrors what a server would store in a database between API rounds.
97
+ */
98
+ getSession(): string;
99
+ /**
100
+ * Restores a previously exported session. Allows the protocol to continue
101
+ * from where it left off, as if the round state was loaded from a database.
102
+ */
103
+ restoreSession(session: string): void;
104
+ }
105
+ //# sourceMappingURL=dkg.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"dkg.d.ts","sourceRoot":"","sources":["../../../../src/tss/redpallas-mps/dkg.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,iBAAiB,EAA4B,MAAM,SAAS,CAAC;AAMjH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,YAAY;IACvB,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE3B,sDAAsD;IACtD,OAAO,CAAC,aAAa,CAAuB;IAC5C,mGAAmG;IACnG,OAAO,CAAC,YAAY,CAAyB;IAC7C,2EAA2E;IAC3E,OAAO,CAAC,aAAa,CAAuB;IAC5C,qDAAqD;IACrD,OAAO,CAAC,QAAQ,CAAuB;IACvC,0DAA0D;IAC1D,OAAO,CAAC,OAAO,CAAuB;IACtC,gCAAgC;IAChC,OAAO,CAAC,OAAO,CAAwB;IAEvC,SAAS,CAAC,QAAQ,EAAE,iBAAiB,CAAmC;gBAE5D,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;YAMpC,WAAW;IAoBzB,OAAO,CAAC,UAAU;IAOlB,QAAQ,IAAI,iBAAiB;IAI7B;;;;;;;OAOG;IACG,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjF;;;;;OAKG;IACH,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAmBtD;;;;;;;;;;;;;OAaG;IACH,sBAAsB,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,oBAAoB;IAyDhH;;;OAGG;IACH,WAAW,IAAI,MAAM;IAOrB;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAO3B;;;;OAIG;IACH,kBAAkB,IAAI,MAAM;IAW5B;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAepB;;;OAGG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAOtC"}
@@ -0,0 +1,290 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
15
+ }) : function(o, v) {
16
+ o["default"] = v;
17
+ });
18
+ var __importStar = (this && this.__importStar) || (function () {
19
+ var ownKeys = function(o) {
20
+ ownKeys = Object.getOwnPropertyNames || function (o) {
21
+ var ar = [];
22
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
+ return ar;
24
+ };
25
+ return ownKeys(o);
26
+ };
27
+ return function (mod) {
28
+ if (mod && mod.__esModule) return mod;
29
+ var result = {};
30
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
+ __setModuleDefault(result, mod);
32
+ return result;
33
+ };
34
+ })();
35
+ var __importDefault = (this && this.__importDefault) || function (mod) {
36
+ return (mod && mod.__esModule) ? mod : { "default": mod };
37
+ };
38
+ Object.defineProperty(exports, "__esModule", { value: true });
39
+ exports.RedPallasDKG = void 0;
40
+ const cbor_x_1 = require("cbor-x");
41
+ const crypto_1 = __importDefault(require("crypto"));
42
+ const types_1 = require("./types");
43
+ /**
44
+ * RedPallas (Zcash Ironwood) Distributed Key Generation (DKG) implementation using @bitgo/wasm-mps.
45
+ *
46
+ * Mirrors the structure of the EdDSA MPS `DKG` class (see `../eddsa-mps/dkg.ts`), but wraps the
47
+ * `redpallas_dkg_*` WASM bindings. Round2 additionally requires a `derivationSeed` and returns a
48
+ * `MsgDerivationInit` (msg/pk/share/state) rather than a final `Share`, because RedPallas key
49
+ * derivation (ask/nk/rivk/ivks, via `redpallas_derivation_process`) is a separate, subsequent
50
+ * process that is platform-side only and intentionally not exposed here.
51
+ *
52
+ * State is explicit: each round function returns `{ msg, state }` bytes. The state bytes are
53
+ * stored between rounds and passed to the next round function, mirroring the server-side
54
+ * persistence pattern (state would be serialised to DB, or in OVC's case, a microSD card).
55
+ *
56
+ * @example
57
+ * ```typescript
58
+ * const dkg = new RedPallasDKG(3, 2, 0);
59
+ * // X25519 keys come from GPG encryption subkeys (extracted by the orchestrator)
60
+ * await dkg.initDkg(myX25519PrivKey, [otherParty1X25519PubKey, otherParty2X25519PubKey]);
61
+ * const msg1 = dkg.getFirstMessage();
62
+ * const msg2s = dkg.handleIncomingMessages(allThreeMsg1s);
63
+ * dkg.handleIncomingMessages(allThreeMsg2s, derivationSeed); // completes DKG
64
+ * const keyShare = dkg.getKeyShare();
65
+ * ```
66
+ */
67
+ class RedPallasDKG {
68
+ constructor(n, t, partyIdx) {
69
+ /** Private X25519 key (from GPG encryption subkey) */
70
+ this.decryptionKey = null;
71
+ /** Other parties' X25519 public keys (from their GPG encryption subkeys), sorted by party index */
72
+ this.otherPubKeys = null;
73
+ /** Serialised round state bytes returned by the previous round function */
74
+ this.dkgStateBytes = null;
75
+ /** Opaque bincode-serialised keyshare from round2 */
76
+ this.keyShare = null;
77
+ /** RedPallas public key (verification key) from round2 */
78
+ this.sharePk = null;
79
+ /** Lazily loaded WASM module */
80
+ this.wasmMps = null;
81
+ this.dkgState = types_1.RedPallasDkgState.Uninitialized;
82
+ this.n = n;
83
+ this.t = t;
84
+ this.partyIdx = partyIdx;
85
+ }
86
+ async loadWasmMps() {
87
+ if (!this.wasmMps) {
88
+ if (typeof window !== 'undefined' &&
89
+ /* checks for electron processes */
90
+ !window.process &&
91
+ !window.process?.['type']) {
92
+ // Browser: web build has explicit init() — guaranteed ready after await
93
+ // eslint-disable-next-line import/no-internal-modules -- @bitgo/wasm-mps exposes environment-specific subpath exports.
94
+ const webWasm = await Promise.resolve().then(() => __importStar(require('@bitgo/wasm-mps/web')));
95
+ await webWasm.default();
96
+ this.wasmMps = webWasm;
97
+ }
98
+ else {
99
+ // Node.js: dynamic import() rewritten to require() by tsc → CJS build → readFileSync
100
+ this.wasmMps = await Promise.resolve().then(() => __importStar(require('@bitgo/wasm-mps')));
101
+ }
102
+ }
103
+ }
104
+ getWasmMps() {
105
+ if (!this.wasmMps) {
106
+ throw Error('WASM module not loaded');
107
+ }
108
+ return this.wasmMps;
109
+ }
110
+ getState() {
111
+ return this.dkgState;
112
+ }
113
+ /**
114
+ * Initialises the DKG session with this party's X25519 private key and the other parties'
115
+ * X25519 public keys. Keys are extracted from GPG encryption subkeys by the orchestrator.
116
+ *
117
+ * @param decryptionKey - This party's 32-byte X25519 private key (GPG enc subkey private part).
118
+ * @param otherEncPublicKeys - Other parties' 32-byte X25519 public keys, sorted by ascending
119
+ * party index (excluding own). For a 3-party setup, this is [party_A_pub, party_B_pub].
120
+ */
121
+ async initDkg(decryptionKey, otherEncPublicKeys) {
122
+ await this.loadWasmMps();
123
+ if (!decryptionKey || decryptionKey.length !== 32) {
124
+ throw Error('Missing or invalid decryption key: must be 32 bytes');
125
+ }
126
+ if (!otherEncPublicKeys || otherEncPublicKeys.length !== this.n - 1) {
127
+ throw Error(`Expected ${this.n - 1} other parties' public keys`);
128
+ }
129
+ if (this.t > this.n || this.partyIdx >= this.n) {
130
+ throw Error('Invalid parameters for DKG');
131
+ }
132
+ this.decryptionKey = decryptionKey;
133
+ this.otherPubKeys = otherEncPublicKeys;
134
+ this.dkgState = types_1.RedPallasDkgState.Init;
135
+ }
136
+ /**
137
+ * Runs round0 of the DKG protocol. Returns this party's broadcast message.
138
+ * Stores the round state bytes internally for the next round.
139
+ *
140
+ * @param dkgSeed - Optional 32-byte seed for deterministic DKG output (testing only).
141
+ */
142
+ getFirstMessage(dkgSeed) {
143
+ if (this.dkgState !== types_1.RedPallasDkgState.Init) {
144
+ throw Error('DKG session not initialized');
145
+ }
146
+ const seed = dkgSeed ?? crypto_1.default.randomBytes(32);
147
+ const wasm = this.getWasmMps();
148
+ let result;
149
+ try {
150
+ result = wasm.redpallas_dkg_round0_process(this.partyIdx, this.decryptionKey, this.otherPubKeys, seed);
151
+ }
152
+ catch (err) {
153
+ throw new Error(`Error while creating the first message from party ${this.partyIdx}: ${err}`);
154
+ }
155
+ this.dkgStateBytes = Buffer.from(result.state);
156
+ this.dkgState = types_1.RedPallasDkgState.WaitMsg1;
157
+ return { payload: new Uint8Array(result.msg), from: this.partyIdx };
158
+ }
159
+ /**
160
+ * Handles incoming messages from all parties and advances the protocol.
161
+ *
162
+ * - In WaitMsg1: runs round1, returns this party's round1 broadcast message.
163
+ * - In WaitMsg2: runs round2, completes DKG, returns [].
164
+ *
165
+ * The caller passes all n messages (including own); own message is filtered
166
+ * out internally. Other parties' messages are sorted by ascending party index,
167
+ * matching the ordering expected by @bitgo/wasm-mps.
168
+ *
169
+ * @param messagesForIthRound - All n messages for this round (including own).
170
+ * @param derivationSeed - Required only when advancing WaitMsg2 -> Complete (round2): a
171
+ * 32-byte seed consumed by the subsequent, platform-side-only derivation process.
172
+ */
173
+ handleIncomingMessages(messagesForIthRound, derivationSeed) {
174
+ if (this.dkgState === types_1.RedPallasDkgState.Complete) {
175
+ throw Error('DKG session already completed');
176
+ }
177
+ if (this.dkgState === types_1.RedPallasDkgState.Uninitialized) {
178
+ throw Error('DKG session not initialized');
179
+ }
180
+ if (this.dkgState === types_1.RedPallasDkgState.Init) {
181
+ throw Error('DKG session must call getFirstMessage() before handling incoming messages. Call getFirstMessage() first.');
182
+ }
183
+ if (messagesForIthRound.length !== this.n) {
184
+ throw Error('Invalid number of messages for the round. Number of messages should be equal to N');
185
+ }
186
+ // Extract other parties' messages, sorted by party index (ascending)
187
+ const otherMsgs = messagesForIthRound
188
+ .filter((m) => m.from !== this.partyIdx)
189
+ .sort((a, b) => a.from - b.from)
190
+ .map((m) => m.payload);
191
+ const wasm = this.getWasmMps();
192
+ if (this.dkgState === types_1.RedPallasDkgState.WaitMsg1) {
193
+ let result;
194
+ try {
195
+ result = wasm.redpallas_dkg_round1_process(otherMsgs, this.dkgStateBytes);
196
+ }
197
+ catch (err) {
198
+ throw new Error(`Error while creating messages from party ${this.partyIdx}, round ${this.dkgState}: ${err}`);
199
+ }
200
+ // Store new state; this is what would be persisted between API rounds / microSD exchanges
201
+ this.dkgStateBytes = Buffer.from(result.state);
202
+ this.dkgState = types_1.RedPallasDkgState.WaitMsg2;
203
+ return [{ payload: new Uint8Array(result.msg), from: this.partyIdx }];
204
+ }
205
+ if (this.dkgState === types_1.RedPallasDkgState.WaitMsg2) {
206
+ if (!derivationSeed || derivationSeed.length !== 32) {
207
+ throw Error('Missing or invalid derivationSeed: must be 32 bytes (required for round2)');
208
+ }
209
+ let result;
210
+ try {
211
+ result = wasm.redpallas_dkg_round2_process(otherMsgs, this.dkgStateBytes, derivationSeed);
212
+ }
213
+ catch (err) {
214
+ throw new Error(`Error while creating messages from party ${this.partyIdx}, round ${this.dkgState}: ${err}`);
215
+ }
216
+ this.keyShare = Buffer.from(result.share);
217
+ this.sharePk = Buffer.from(result.pk);
218
+ this.dkgStateBytes = null;
219
+ this.dkgState = types_1.RedPallasDkgState.Complete;
220
+ return [];
221
+ }
222
+ throw Error('Unexpected DKG state');
223
+ }
224
+ /**
225
+ * Returns the opaque bincode-serialised keyshare produced by round2.
226
+ * This is used as input to the (platform-side) signing and derivation protocols.
227
+ */
228
+ getKeyShare() {
229
+ if (!this.keyShare) {
230
+ throw Error('DKG session not initialized');
231
+ }
232
+ return this.keyShare;
233
+ }
234
+ /**
235
+ * Returns the RedPallas public key (verification key) agreed by all parties during DKG.
236
+ */
237
+ getSharePublicKey() {
238
+ if (!this.sharePk) {
239
+ throw Error('DKG session not initialized');
240
+ }
241
+ return this.sharePk;
242
+ }
243
+ /**
244
+ * Returns a CBOR-encoded ReducedKeyShare buffer containing the party's opaque
245
+ * signing key share in the `keyShare` field. This buffer is private key material.
246
+ * The caller encrypts it and stores it as `reducedEncryptedPrv` on the key card QR code.
247
+ */
248
+ getReducedKeyShare() {
249
+ if (!this.keyShare || !this.sharePk) {
250
+ throw Error('DKG session not initialized');
251
+ }
252
+ const reducedKeyShare = {
253
+ keyShare: Array.from(this.keyShare),
254
+ pub: Array.from(this.sharePk),
255
+ };
256
+ return Buffer.from((0, cbor_x_1.encode)(reducedKeyShare));
257
+ }
258
+ /**
259
+ * Exports the current session state as a JSON string for persistence.
260
+ * Includes: round state bytes, current DKG round, decryption key, other parties' pub keys.
261
+ * This mirrors what a server would store in a database between API rounds.
262
+ */
263
+ getSession() {
264
+ if (this.dkgState === types_1.RedPallasDkgState.Complete) {
265
+ throw Error('DKG session is complete. Exporting the session is not allowed.');
266
+ }
267
+ if (this.dkgState === types_1.RedPallasDkgState.Uninitialized) {
268
+ throw Error('DKG session not initialized');
269
+ }
270
+ return JSON.stringify({
271
+ dkgStateBytes: this.dkgStateBytes?.toString('base64') ?? null,
272
+ dkgRound: this.dkgState,
273
+ decryptionKey: this.decryptionKey?.toString('base64') ?? null,
274
+ otherPubKeys: this.otherPubKeys?.map((k) => k.toString('base64')) ?? null,
275
+ });
276
+ }
277
+ /**
278
+ * Restores a previously exported session. Allows the protocol to continue
279
+ * from where it left off, as if the round state was loaded from a database.
280
+ */
281
+ restoreSession(session) {
282
+ const data = JSON.parse(session);
283
+ this.dkgStateBytes = data.dkgStateBytes ? Buffer.from(data.dkgStateBytes, 'base64') : null;
284
+ this.dkgState = data.dkgRound;
285
+ this.decryptionKey = data.decryptionKey ? Buffer.from(data.decryptionKey, 'base64') : null;
286
+ this.otherPubKeys = data.otherPubKeys ? data.otherPubKeys.map((k) => Buffer.from(k, 'base64')) : null;
287
+ }
288
+ }
289
+ exports.RedPallasDKG = RedPallasDKG;
290
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1,4 @@
1
+ export * as RedPallasMPSDkg from './dkg';
2
+ export * as RedPallasMPSUtil from './util';
3
+ export * as RedPallasMPSTypes from './types';
4
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/tss/redpallas-mps/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,eAAe,MAAM,OAAO,CAAC;AACzC,OAAO,KAAK,gBAAgB,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,iBAAiB,MAAM,SAAS,CAAC"}
@@ -0,0 +1,40 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
15
+ }) : function(o, v) {
16
+ o["default"] = v;
17
+ });
18
+ var __importStar = (this && this.__importStar) || (function () {
19
+ var ownKeys = function(o) {
20
+ ownKeys = Object.getOwnPropertyNames || function (o) {
21
+ var ar = [];
22
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
+ return ar;
24
+ };
25
+ return ownKeys(o);
26
+ };
27
+ return function (mod) {
28
+ if (mod && mod.__esModule) return mod;
29
+ var result = {};
30
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
+ __setModuleDefault(result, mod);
32
+ return result;
33
+ };
34
+ })();
35
+ Object.defineProperty(exports, "__esModule", { value: true });
36
+ exports.RedPallasMPSTypes = exports.RedPallasMPSUtil = exports.RedPallasMPSDkg = void 0;
37
+ exports.RedPallasMPSDkg = __importStar(require("./dkg"));
38
+ exports.RedPallasMPSUtil = __importStar(require("./util"));
39
+ exports.RedPallasMPSTypes = __importStar(require("./types"));
40
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvdHNzL3JlZHBhbGxhcy1tcHMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7O0FBQUEseURBQXlDO0FBQ3pDLDJEQUEyQztBQUMzQyw2REFBNkMiLCJzb3VyY2VzQ29udGVudCI6WyJleHBvcnQgKiBhcyBSZWRQYWxsYXNNUFNEa2cgZnJvbSAnLi9ka2cnO1xuZXhwb3J0ICogYXMgUmVkUGFsbGFzTVBTVXRpbCBmcm9tICcuL3V0aWwnO1xuZXhwb3J0ICogYXMgUmVkUGFsbGFzTVBTVHlwZXMgZnJvbSAnLi90eXBlcyc7XG4iXX0=
@@ -0,0 +1,40 @@
1
+ import * as t from 'io-ts';
2
+ export declare const RedPallasReducedKeyShareType: t.TypeC<{
3
+ keyShare: t.ArrayC<t.NumberC>;
4
+ pub: t.ArrayC<t.NumberC>;
5
+ }>;
6
+ export type RedPallasReducedKeyShare = t.TypeOf<typeof RedPallasReducedKeyShareType>;
7
+ /**
8
+ * Represents the state of a RedPallas DKG (Distributed Key Generation) session.
9
+ *
10
+ * Unlike the EdDSA MPS `DkgState`, there is no `Share` state: `redpallas_dkg_round2_process`
11
+ * returns a `MsgDerivationInit` (msg/pk/share/state) directly, completing the DKG session in
12
+ * one step. Key derivation (ask/nk/rivk/ivks) is a separate, subsequent, platform-side-only
13
+ * process (`redpallas_derivation_process`) not modelled here.
14
+ */
15
+ export declare enum RedPallasDkgState {
16
+ /** DKG session has not been initialized */
17
+ Uninitialized = "Uninitialized",
18
+ /** DKG session has been initialized (Init state in WASM) */
19
+ Init = "Init",
20
+ /** DKG session is waiting for first message (WaitMsg1 state in WASM) */
21
+ WaitMsg1 = "WaitMsg1",
22
+ /** DKG session is waiting for second message (WaitMsg2 state in WASM) */
23
+ WaitMsg2 = "WaitMsg2",
24
+ /** DKG session has completed successfully and key shares are available */
25
+ Complete = "Complete"
26
+ }
27
+ export interface Message<T> {
28
+ payload: T;
29
+ from: number;
30
+ }
31
+ export type SerializedMessage = Message<string>;
32
+ export type SerializedMessages = Message<string>[];
33
+ export type DeserializedMessage = Message<Uint8Array>;
34
+ export type DeserializedMessages = Message<Uint8Array>[];
35
+ export declare function serializeMessage(msg: DeserializedMessage): SerializedMessage;
36
+ export declare function deserializeMessage(msg: SerializedMessage): DeserializedMessage;
37
+ export declare function serializeMessages(msgs: DeserializedMessages): SerializedMessages;
38
+ export declare function deserializeMessages(msgs: SerializedMessages): DeserializedMessages;
39
+ export declare function getDecodedReducedKeyShare(reducedKeyShare: Buffer | Uint8Array): RedPallasReducedKeyShare;
40
+ //# sourceMappingURL=types.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/tss/redpallas-mps/types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,CAAC,MAAM,OAAO,CAAC;AAE3B,eAAO,MAAM,4BAA4B;;;EAGvC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAErF;;;;;;;GAOG;AACH,oBAAY,iBAAiB;IAC3B,2CAA2C;IAC3C,aAAa,kBAAkB;IAC/B,4DAA4D;IAC5D,IAAI,SAAS;IACb,wEAAwE;IACxE,QAAQ,aAAa;IACrB,yEAAyE;IACzE,QAAQ,aAAa;IACrB,0EAA0E;IAC1E,QAAQ,aAAa;CACtB;AAED,MAAM,WAAW,OAAO,CAAC,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAEhD,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AAEnD,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtD,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;AAEzD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,GAAG,iBAAiB,CAE5E;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,GAAG,mBAAmB,CAE9E;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,GAAG,kBAAkB,CAEhF;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,GAAG,oBAAoB,CAElF;AAED,wBAAgB,yBAAyB,CAAC,eAAe,EAAE,MAAM,GAAG,UAAU,GAAG,wBAAwB,CAMxG"}