@bitgo-beta/sdk-lib-mpc 8.2.0-beta.202 → 8.2.0-beta.2021

package/dist/src/tss/eddsa-mps/types.js

@@ -0,0 +1,105 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DsgState = exports.DkgState = exports.ReducedKeyShareType = void 0;
+exports.serializeMessage = serializeMessage;
+exports.deserializeMessage = deserializeMessage;
+exports.serializeMessages = serializeMessages;
+exports.deserializeMessages = deserializeMessages;
+exports.getDecodedReducedKeyShare = getDecodedReducedKeyShare;
+const cbor_x_1 = require("cbor-x");
+const Either_1 = require("fp-ts/Either");
+const t = __importStar(require("io-ts"));
+exports.ReducedKeyShareType = t.type({
+    keyShare: t.array(t.number),
+    pub: t.array(t.number),
+    rootChainCode: t.array(t.number),
+});
+/**
+ * Represents the state of a DKG (Distributed Key Generation) session
+ */
+var DkgState;
+(function (DkgState) {
+    /** DKG session has not been initialized */
+    DkgState["Uninitialized"] = "Uninitialized";
+    /** DKG session has been initialized (Init state in WASM) */
+    DkgState["Init"] = "Init";
+    /** DKG session is waiting for first message (WaitMsg1 state in WASM) */
+    DkgState["WaitMsg1"] = "WaitMsg1";
+    /** DKG session is waiting for second message (WaitMsg2 state in WASM) */
+    DkgState["WaitMsg2"] = "WaitMsg2";
+    /** DKG session has generated key shares (Share state in WASM) */
+    DkgState["Share"] = "Share";
+    /** DKG session has completed successfully and key shares are available */
+    DkgState["Complete"] = "Complete";
+})(DkgState || (exports.DkgState = DkgState = {}));
+/**
+ * Represents the state of a DSG (Distributed Sign Generation) session.
+ */
+var DsgState;
+(function (DsgState) {
+    /** DSG session has not been initialized */
+    DsgState["Uninitialized"] = "Uninitialized";
+    /** initDsg() has been called; ready for getFirstMessage() */
+    DsgState["Init"] = "Init";
+    /** R0 broadcast emitted; waiting for counterpart's R0 broadcast (SignMsg1) */
+    DsgState["WaitMsg1"] = "WaitMsg1";
+    /** R1 broadcast emitted; waiting for counterpart's R1 broadcast (SignMsg2) */
+    DsgState["WaitMsg2"] = "WaitMsg2";
+    /** R2 broadcast emitted; waiting for counterpart's R2 broadcast (SignMsg3, the partial sig) */
+    DsgState["WaitMsg3"] = "WaitMsg3";
+    /** Final 64-byte Ed25519 signature is available via getSignature() */
+    DsgState["Complete"] = "Complete";
+})(DsgState || (exports.DsgState = DsgState = {}));
+function serializeMessage(msg) {
+    return { from: msg.from, payload: Buffer.from(msg.payload).toString('base64') };
+}
+function deserializeMessage(msg) {
+    return { from: msg.from, payload: Buffer.from(msg.payload, 'base64') };
+}
+function serializeMessages(msgs) {
+    return msgs.map(serializeMessage);
+}
+function deserializeMessages(msgs) {
+    return msgs.map(deserializeMessage);
+}
+function getDecodedReducedKeyShare(reducedKeyShare) {
+    const decoded = exports.ReducedKeyShareType.decode((0, cbor_x_1.decode)(reducedKeyShare));
+    if ((0, Either_1.isLeft)(decoded)) {
+        throw new Error(`Unable to parse reducedKeyShare: ${decoded.left}`);
+    }
+    return decoded.right;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/tss/eddsa-mps/util.d.ts

@@ -0,0 +1,33 @@
+import { DKG } from './dkg';
+import { DSG } from './dsg';
+import { DeserializedMessages, EddsaRetrofitData } from './types';
+/**
+ * Concatenates multiple Uint8Array instances into a single Uint8Array
+ * @param chunks - Array of Uint8Array instances to concatenate
+ * @returns Concatenated Uint8Array
+ */
+export declare function concatBytes(chunks: Uint8Array[]): Uint8Array;
+/**
+ * Per-party deterministic seed material. To use the same seed for both, pass it as both fields.
+ * `encKey` seeds the X25519 encryption key; `dkgSeed` seeds DKG round 0.
+ */
+export interface EdDsaDKGPartySeed {
+    encKey?: Buffer;
+    dkgSeed?: Buffer;
+}
+/** See `EdDsaDKGPartySeed`. Mirrors `DklsUtils.generateDKGKeyShares` for ECDSA DKLS. */
+export declare function generateEdDsaDKGKeyShares(seedUser?: EdDsaDKGPartySeed, seedBackup?: EdDsaDKGPartySeed, seedBitgo?: EdDsaDKGPartySeed, retrofitUser?: EddsaRetrofitData, retrofitBackup?: EddsaRetrofitData, retrofitBitgo?: EddsaRetrofitData): Promise<[DKG, DKG, DKG]>;
+/**
+ * Initializes two DSG parties and drives them through the protocol until the specified round.
+ *
+ * @param round - Round to execute until (1–3). Returns intermediate message arrays for 1–2,
+ *   or the 64-byte Ed25519 signature Buffer for 3.
+ * @param party1Dsg - First DSG party (`new DSG(partyIdx)`), not yet initialized.
+ * @param party2Dsg - Second DSG party (`new DSG(partyIdx)`), not yet initialized.
+ * @param keyShare1 - Key share for the first party.
+ * @param keyShare2 - Key share for the second party.
+ * @param message - Raw message bytes to sign.
+ * @param derivationPath - BIP-32-style derivation path, e.g. `"m"` or `"m/0/0"`.
+ */
+export declare function executeTillRound(round: number, party1Dsg: DSG, party2Dsg: DSG, keyShare1: Buffer, keyShare2: Buffer, message: Buffer, derivationPath: string): Promise<DeserializedMessages[] | Buffer>;
+//# sourceMappingURL=util.d.ts.map

package/dist/src/tss/eddsa-mps/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../src/tss/eddsa-mps/util.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAC5B,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAElE;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAG5D;AAQD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAQD,wFAAwF;AACxF,wBAAsB,yBAAyB,CAC7C,QAAQ,CAAC,EAAE,iBAAiB,EAC5B,UAAU,CAAC,EAAE,iBAAiB,EAC9B,SAAS,CAAC,EAAE,iBAAiB,EAC7B,YAAY,CAAC,EAAE,iBAAiB,EAChC,cAAc,CAAC,EAAE,iBAAiB,EAClC,aAAa,CAAC,EAAE,iBAAiB,GAChC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAkC1B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,GAAG,EACd,SAAS,EAAE,GAAG,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,oBAAoB,EAAE,GAAG,MAAM,CAAC,CAsB1C"}

package/dist/src/tss/eddsa-mps/util.js

@@ -0,0 +1,94 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.concatBytes = concatBytes;
+exports.generateEdDsaDKGKeyShares = generateEdDsaDKGKeyShares;
+exports.executeTillRound = executeTillRound;
+const crypto_1 = __importDefault(require("crypto"));
+const assert_1 = __importDefault(require("assert"));
+const ed25519_1 = require("@noble/curves/ed25519");
+const dkg_1 = require("./dkg");
+/**
+ * Concatenates multiple Uint8Array instances into a single Uint8Array
+ * @param chunks - Array of Uint8Array instances to concatenate
+ * @returns Concatenated Uint8Array
+ */
+function concatBytes(chunks) {
+    const buffers = chunks.map((chunk) => Buffer.from(chunk));
+    return new Uint8Array(Buffer.concat(buffers));
+}
+function generateX25519Keypair(seed) {
+    const privKey = seed ? seed.subarray(0, 32) : crypto_1.default.randomBytes(32);
+    const pubKey = Buffer.from(ed25519_1.x25519.getPublicKey(privKey));
+    return { privKey: Buffer.from(privKey), pubKey };
+}
+function validateSeed(seed) {
+    (0, assert_1.default)(!seed?.encKey || seed.encKey.length >= 32, 'encKey must be at least 32 bytes');
+    (0, assert_1.default)(!seed?.dkgSeed || seed.dkgSeed.length >= 32, 'dkgSeed must be at least 32 bytes');
+    return seed ?? {};
+}
+/** See `EdDsaDKGPartySeed`. Mirrors `DklsUtils.generateDKGKeyShares` for ECDSA DKLS. */
+async function generateEdDsaDKGKeyShares(seedUser, seedBackup, seedBitgo, retrofitUser, retrofitBackup, retrofitBitgo) {
+    const { encKey: userEncKey, dkgSeed: userDkgSeed } = validateSeed(seedUser);
+    const { encKey: backupEncKey, dkgSeed: backupDkgSeed } = validateSeed(seedBackup);
+    const { encKey: bitgoEncKey, dkgSeed: bitgoDkgSeed } = validateSeed(seedBitgo);
+    const user = new dkg_1.DKG(3, 2, 0, retrofitUser);
+    const backup = new dkg_1.DKG(3, 2, 1, retrofitBackup);
+    const bitgo = new dkg_1.DKG(3, 2, 2, retrofitBitgo);
+    const userKP = generateX25519Keypair(userEncKey);
+    const backupKP = generateX25519Keypair(backupEncKey);
+    const bitgoKP = generateX25519Keypair(bitgoEncKey);
+    await user.initDkg(userKP.privKey, [backupKP.pubKey, bitgoKP.pubKey]);
+    await backup.initDkg(backupKP.privKey, [userKP.pubKey, bitgoKP.pubKey]);
+    await bitgo.initDkg(bitgoKP.privKey, [userKP.pubKey, backupKP.pubKey]);
+    const r1Messages = [
+        user.getFirstMessage(userDkgSeed),
+        backup.getFirstMessage(backupDkgSeed),
+        bitgo.getFirstMessage(bitgoDkgSeed),
+    ];
+    const r2Messages = [
+        ...user.handleIncomingMessages(r1Messages),
+        ...backup.handleIncomingMessages(r1Messages),
+        ...bitgo.handleIncomingMessages(r1Messages),
+    ];
+    user.handleIncomingMessages(r2Messages);
+    backup.handleIncomingMessages(r2Messages);
+    bitgo.handleIncomingMessages(r2Messages);
+    return [user, backup, bitgo];
+}
+/**
+ * Initializes two DSG parties and drives them through the protocol until the specified round.
+ *
+ * @param round - Round to execute until (1–3). Returns intermediate message arrays for 1–2,
+ *   or the 64-byte Ed25519 signature Buffer for 3.
+ * @param party1Dsg - First DSG party (`new DSG(partyIdx)`), not yet initialized.
+ * @param party2Dsg - Second DSG party (`new DSG(partyIdx)`), not yet initialized.
+ * @param keyShare1 - Key share for the first party.
+ * @param keyShare2 - Key share for the second party.
+ * @param message - Raw message bytes to sign.
+ * @param derivationPath - BIP-32-style derivation path, e.g. `"m"` or `"m/0/0"`.
+ */
+async function executeTillRound(round, party1Dsg, party2Dsg, keyShare1, keyShare2, message, derivationPath) {
+    if (round < 1 || round > 3) {
+        throw Error('Invalid round number');
+    }
+    await party1Dsg.initDsg(keyShare1, message, derivationPath, party2Dsg.getPartyIdx());
+    await party2Dsg.initDsg(keyShare2, message, derivationPath, party1Dsg.getPartyIdx());
+    const party1Round0Message = party1Dsg.getFirstMessage();
+    const party2Round0Message = party2Dsg.getFirstMessage();
+    const [party2Round1Messages] = party2Dsg.handleIncomingMessages([party1Round0Message, party2Round0Message]);
+    const [party1Round1Messages] = party1Dsg.handleIncomingMessages([party1Round0Message, party2Round0Message]);
+    if (round === 1)
+        return [[party1Round1Messages], [party2Round1Messages]];
+    const [party1Round2Messages] = party1Dsg.handleIncomingMessages([party1Round1Messages, party2Round1Messages]);
+    const [party2Round2Messages] = party2Dsg.handleIncomingMessages([party1Round1Messages, party2Round1Messages]);
+    if (round === 2)
+        return [[party1Round2Messages], [party2Round2Messages]];
+    party1Dsg.handleIncomingMessages([party1Round2Messages, party2Round2Messages]);
+    party2Dsg.handleIncomingMessages([party1Round2Messages, party2Round2Messages]);
+    (0, assert_1.default)(party1Dsg.getSignature().toString('hex') === party2Dsg.getSignature().toString('hex'));
+    return party1Dsg.getSignature();
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/tss/index.d.ts

@@ -1,2 +1,5 @@
 export * from './ecdsa';
+export * from './ecdsa-dkls';
+export * from './eddsa-mps';
+export * from './redpallas-mps';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/tss/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tss/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tss/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC"}

package/dist/src/tss/index.js

@@ -1,7 +1,11 @@
 "use strict";
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
-    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
 }) : (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     o[k2] = m[k];
@@ -11,4 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./ecdsa"), exports);
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvdHNzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7OztBQUFBLDBDQUF3QiIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCAqIGZyb20gJy4vZWNkc2EnO1xuIl19
+__exportStar(require("./ecdsa-dkls"), exports);
+__exportStar(require("./eddsa-mps"), exports);
+__exportStar(require("./redpallas-mps"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvdHNzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSwwQ0FBd0I7QUFDeEIsK0NBQTZCO0FBQzdCLDhDQUE0QjtBQUM1QixrREFBZ0MiLCJzb3VyY2VzQ29udGVudCI6WyJleHBvcnQgKiBmcm9tICcuL2VjZHNhJztcbmV4cG9ydCAqIGZyb20gJy4vZWNkc2EtZGtscyc7XG5leHBvcnQgKiBmcm9tICcuL2VkZHNhLW1wcyc7XG5leHBvcnQgKiBmcm9tICcuL3JlZHBhbGxhcy1tcHMnO1xuIl19

package/dist/src/tss/redpallas-mps/commsLayer.d.ts

@@ -0,0 +1,34 @@
+import * as pgp from 'openpgp';
+import { MPSSignedMessage } from './types';
+/**
+ * PGP detached-signs raw WASM bytes with the given private key.
+ * Returns an MPSSignedMessage with the base64-encoded payload and armored signature.
+ *
+ * Mirrors `detachSignMpsMessage` in `../eddsa-mps/commsLayer.ts`. Kept as an independent
+ * copy (rather than a shared import) so RedPallas MPS never depends on the EdDSA MPS
+ * module, and vice versa.
+ */
+export declare function detachSignMpsMessage(rawBytes: Buffer | Uint8Array, signingKey: pgp.PrivateKey): Promise<MPSSignedMessage>;
+/**
+ * Verifies a PGP detached signature on an MPSSignedMessage and returns the decoded raw bytes.
+ * Throws if the signature is invalid or not present.
+ */
+export declare function verifyMpsMessage(msg: MPSSignedMessage, verificationKey: pgp.Key): Promise<Buffer>;
+/**
+ * Extracts the X25519 public key bytes from a GPG key's encryption subkey.
+ * Works for both public-only and private keys — use this for third-party keys (e.g. BitGo's).
+ *
+ * @param key - A GPG key with an X25519 encryption subkey.
+ * @returns 32-byte X25519 public key.
+ */
+export declare function extractEd25519PublicKey(key: pgp.Key): Promise<Buffer>;
+/**
+ * Extracts the X25519 public and private key bytes from a GPG ed25519 private key's
+ * encryption subkey. Encapsulates the keyPacket internals and the little-endian scalar
+ * reversal in one place so sdk-core only deals with plain Buffers.
+ *
+ * @param privateKey - An ed25519 GPG private key with an X25519 encryption subkey.
+ * @returns  [pk, sk] — 32-byte X25519 public key and private scalar.
+ */
+export declare function extractEd25519KeyPair(privateKey: pgp.PrivateKey): Promise<[Buffer, Buffer]>;
+//# sourceMappingURL=commsLayer.d.ts.map

package/dist/src/tss/redpallas-mps/commsLayer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commsLayer.d.ts","sourceRoot":"","sources":["../../../../src/tss/redpallas-mps/commsLayer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3C;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAC7B,UAAU,EAAE,GAAG,CAAC,UAAU,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAU3B;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,EAAE,eAAe,EAAE,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAUvG;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAG3E;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAOjG"}

package/dist/src/tss/redpallas-mps/commsLayer.js

@@ -0,0 +1,100 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detachSignMpsMessage = detachSignMpsMessage;
+exports.verifyMpsMessage = verifyMpsMessage;
+exports.extractEd25519PublicKey = extractEd25519PublicKey;
+exports.extractEd25519KeyPair = extractEd25519KeyPair;
+const pgp = __importStar(require("openpgp"));
+/**
+ * PGP detached-signs raw WASM bytes with the given private key.
+ * Returns an MPSSignedMessage with the base64-encoded payload and armored signature.
+ *
+ * Mirrors `detachSignMpsMessage` in `../eddsa-mps/commsLayer.ts`. Kept as an independent
+ * copy (rather than a shared import) so RedPallas MPS never depends on the EdDSA MPS
+ * module, and vice versa.
+ */
+async function detachSignMpsMessage(rawBytes, signingKey) {
+    const signature = await pgp.sign({
+        message: await pgp.createMessage({ binary: rawBytes }),
+        signingKeys: signingKey,
+        detached: true,
+    });
+    return {
+        message: Buffer.from(rawBytes).toString('base64'),
+        signature: signature,
+    };
+}
+/**
+ * Verifies a PGP detached signature on an MPSSignedMessage and returns the decoded raw bytes.
+ * Throws if the signature is invalid or not present.
+ */
+async function verifyMpsMessage(msg, verificationKey) {
+    const rawBytes = Buffer.from(msg.message, 'base64');
+    const result = await pgp.verify({
+        message: await pgp.createMessage({ binary: rawBytes }),
+        signature: await pgp.readSignature({ armoredSignature: msg.signature }),
+        verificationKeys: verificationKey,
+        expectSigned: true,
+    });
+    await result.signatures[0].verified;
+    return rawBytes;
+}
+/**
+ * Extracts the X25519 public key bytes from a GPG key's encryption subkey.
+ * Works for both public-only and private keys — use this for third-party keys (e.g. BitGo's).
+ *
+ * @param key - A GPG key with an X25519 encryption subkey.
+ * @returns 32-byte X25519 public key.
+ */
+async function extractEd25519PublicKey(key) {
+    const { keyPacket } = await key.getEncryptionKey();
+    return Buffer.from(keyPacket.publicParams.Q).subarray(1);
+}
+/**
+ * Extracts the X25519 public and private key bytes from a GPG ed25519 private key's
+ * encryption subkey. Encapsulates the keyPacket internals and the little-endian scalar
+ * reversal in one place so sdk-core only deals with plain Buffers.
+ *
+ * @param privateKey - An ed25519 GPG private key with an X25519 encryption subkey.
+ * @returns  [pk, sk] — 32-byte X25519 public key and private scalar.
+ */
+async function extractEd25519KeyPair(privateKey) {
+    const encKey = await privateKey.getEncryptionKey();
+    const pk = Buffer.from(encKey.keyPacket.publicParams.Q).subarray(1);
+    const sk = Buffer.from(encKey.keyPacket.privateParams.d).reverse();
+    return [pk, sk];
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/tss/redpallas-mps/dkg.d.ts

@@ -0,0 +1,105 @@
+import { DeserializedMessage, DeserializedMessages, RedPallasDkgState } from './types';
+/**
+ * RedPallas (Zcash Ironwood) Distributed Key Generation (DKG) implementation using @bitgo/wasm-mps.
+ *
+ * Mirrors the structure of the EdDSA MPS `DKG` class (see `../eddsa-mps/dkg.ts`), but wraps the
+ * `redpallas_dkg_*` WASM bindings. Round2 additionally requires a `derivationSeed` and returns a
+ * `MsgDerivationInit` (msg/pk/share/state) rather than a final `Share`, because RedPallas key
+ * derivation (ask/nk/rivk/ivks, via `redpallas_derivation_process`) is a separate, subsequent
+ * process that is platform-side only and intentionally not exposed here.
+ *
+ * State is explicit: each round function returns `{ msg, state }` bytes. The state bytes are
+ * stored between rounds and passed to the next round function, mirroring the server-side
+ * persistence pattern (state would be serialised to DB, or in OVC's case, a microSD card).
+ *
+ * @example
+ * ```typescript
+ * const dkg = new RedPallasDKG(3, 2, 0);
+ * // X25519 keys come from GPG encryption subkeys (extracted by the orchestrator)
+ * await dkg.initDkg(myX25519PrivKey, [otherParty1X25519PubKey, otherParty2X25519PubKey]);
+ * const msg1 = dkg.getFirstMessage();
+ * const msg2s = dkg.handleIncomingMessages(allThreeMsg1s);
+ * dkg.handleIncomingMessages(allThreeMsg2s, derivationSeed);  // completes DKG
+ * const keyShare = dkg.getKeyShare();
+ * ```
+ */
+export declare class RedPallasDKG {
+    protected n: number;
+    protected t: number;
+    protected partyIdx: number;
+    /** Private X25519 key (from GPG encryption subkey) */
+    private decryptionKey;
+    /** Other parties' X25519 public keys (from their GPG encryption subkeys), sorted by party index */
+    private otherPubKeys;
+    /** Serialised round state bytes returned by the previous round function */
+    private dkgStateBytes;
+    /** Opaque bincode-serialised keyshare from round2 */
+    private keyShare;
+    /** RedPallas public key (verification key) from round2 */
+    private sharePk;
+    /** Lazily loaded WASM module */
+    private wasmMps;
+    protected dkgState: RedPallasDkgState;
+    constructor(n: number, t: number, partyIdx: number);
+    private loadWasmMps;
+    private getWasmMps;
+    getState(): RedPallasDkgState;
+    /**
+     * Initialises the DKG session with this party's X25519 private key and the other parties'
+     * X25519 public keys. Keys are extracted from GPG encryption subkeys by the orchestrator.
+     *
+     * @param decryptionKey - This party's 32-byte X25519 private key (GPG enc subkey private part).
+     * @param otherEncPublicKeys - Other parties' 32-byte X25519 public keys, sorted by ascending
+     *   party index (excluding own). For a 3-party setup, this is [party_A_pub, party_B_pub].
+     */
+    initDkg(decryptionKey: Buffer, otherEncPublicKeys: Buffer[]): Promise<void>;
+    /**
+     * Runs round0 of the DKG protocol. Returns this party's broadcast message.
+     * Stores the round state bytes internally for the next round.
+     *
+     * @param dkgSeed - Optional 32-byte seed for deterministic DKG output (testing only).
+     */
+    getFirstMessage(dkgSeed?: Buffer): DeserializedMessage;
+    /**
+     * Handles incoming messages from all parties and advances the protocol.
+     *
+     * - In WaitMsg1: runs round1, returns this party's round1 broadcast message.
+     * - In WaitMsg2: runs round2, completes DKG, returns [].
+     *
+     * The caller passes all n messages (including own); own message is filtered
+     * out internally. Other parties' messages are sorted by ascending party index,
+     * matching the ordering expected by @bitgo/wasm-mps.
+     *
+     * @param messagesForIthRound - All n messages for this round (including own).
+     * @param derivationSeed - Required only when advancing WaitMsg2 -> Complete (round2): a
+     *   32-byte seed consumed by the subsequent, platform-side-only derivation process.
+     */
+    handleIncomingMessages(messagesForIthRound: DeserializedMessages, derivationSeed?: Buffer): DeserializedMessages;
+    /**
+     * Returns the opaque bincode-serialised keyshare produced by round2.
+     * This is used as input to the (platform-side) signing and derivation protocols.
+     */
+    getKeyShare(): Buffer;
+    /**
+     * Returns the RedPallas public key (verification key) agreed by all parties during DKG.
+     */
+    getSharePublicKey(): Buffer;
+    /**
+     * Returns a CBOR-encoded ReducedKeyShare buffer containing the party's opaque
+     * signing key share in the `keyShare` field. This buffer is private key material.
+     * The caller encrypts it and stores it as `reducedEncryptedPrv` on the key card QR code.
+     */
+    getReducedKeyShare(): Buffer;
+    /**
+     * Exports the current session state as a JSON string for persistence.
+     * Includes: round state bytes, current DKG round, decryption key, other parties' pub keys.
+     * This mirrors what a server would store in a database between API rounds.
+     */
+    getSession(): string;
+    /**
+     * Restores a previously exported session. Allows the protocol to continue
+     * from where it left off, as if the round state was loaded from a database.
+     */
+    restoreSession(session: string): void;
+}
+//# sourceMappingURL=dkg.d.ts.map

package/dist/src/tss/redpallas-mps/dkg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkg.d.ts","sourceRoot":"","sources":["../../../../src/tss/redpallas-mps/dkg.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,iBAAiB,EAA4B,MAAM,SAAS,CAAC;AAMjH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,YAAY;IACvB,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE3B,sDAAsD;IACtD,OAAO,CAAC,aAAa,CAAuB;IAC5C,mGAAmG;IACnG,OAAO,CAAC,YAAY,CAAyB;IAC7C,2EAA2E;IAC3E,OAAO,CAAC,aAAa,CAAuB;IAC5C,qDAAqD;IACrD,OAAO,CAAC,QAAQ,CAAuB;IACvC,0DAA0D;IAC1D,OAAO,CAAC,OAAO,CAAuB;IACtC,gCAAgC;IAChC,OAAO,CAAC,OAAO,CAAwB;IAEvC,SAAS,CAAC,QAAQ,EAAE,iBAAiB,CAAmC;gBAE5D,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;YAMpC,WAAW;IAoBzB,OAAO,CAAC,UAAU;IAOlB,QAAQ,IAAI,iBAAiB;IAI7B;;;;;;;OAOG;IACG,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjF;;;;;OAKG;IACH,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAmBtD;;;;;;;;;;;;;OAaG;IACH,sBAAsB,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,oBAAoB;IAyDhH;;;OAGG;IACH,WAAW,IAAI,MAAM;IAOrB;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAO3B;;;;OAIG;IACH,kBAAkB,IAAI,MAAM;IAW5B;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAepB;;;OAGG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAOtC"}