@bitgo/sdk-lib-mpc 10.14.1 → 10.16.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitgo/sdk-lib-mpc",
-  "version": "10.14.1",
+  "version": "10.16.0",
   "description": "library functions for BitGo's MPC solution",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
@@ -36,7 +36,7 @@
     ]
   },
   "dependencies": {
-    "@bitgo/wasm-mps": "1.8.1",
+    "@bitgo/wasm-mps": "1.11.0",
     "@noble/curves": "1.8.1",
     "@silencelaboratories/dkls-wasm-ll-node": "1.2.0-pre.4",
     "@silencelaboratories/dkls-wasm-ll-web": "1.2.0-pre.4",
@@ -71,5 +71,5 @@
   "files": [
     "dist"
   ],
-  "gitHead": "00d77c86fadd23c8888884adf1dbc76b7b865561"
+  "gitHead": "4d3cd7f13af24b4bbb8665da53f45c24c8ce96c6"
 }

package/dist/src/tss/eddsa-mps/derive.d.ts

@@ -1,18 +0,0 @@
-/**
- * Derives a child public key from a common keychain using the Silence Labs
- * BIP32-Ed25519 non-hardened derivation formula:
- *
- *   HMAC = HMAC-SHA512(key=chaincode, data=pk_bytes || index_BE_4)
- *   child_pk = parent_pk + 8 * LE(trunc28(HMAC_left)) * G
- *   child_chaincode = HMAC_right (right 32 bytes)
- *
- * This differs from the Cardano BIP32-Ed25519 formula used by
- * `Eddsa.deriveUnhardened` in three ways: no 0x02 prefix byte, big-endian
- * index, and a single HMAC instead of two. The formulas produce completely
- * different child keys at every derived level.
- *
- * Returns the same on-the-wire format as `Eddsa.deriveUnhardened`:
- *   128-char hex = 64-char derived pk + 64-char derived chaincode
- */
-export declare function deriveUnhardenedMps(commonKeychainHex: string, path: string): string;
-//# sourceMappingURL=derive.d.ts.map

package/dist/src/tss/eddsa-mps/derive.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"derive.d.ts","sourceRoot":"","sources":["../../../../src/tss/eddsa-mps/derive.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAoCnF"}

package/dist/src/tss/eddsa-mps/derive.js

@@ -1,51 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.deriveUnhardenedMps = deriveUnhardenedMps;
-const crypto_1 = require("crypto");
-const ed25519_1 = require("@noble/curves/ed25519");
-const util_1 = require("../../curves/util");
-/**
- * Derives a child public key from a common keychain using the Silence Labs
- * BIP32-Ed25519 non-hardened derivation formula:
- *
- *   HMAC = HMAC-SHA512(key=chaincode, data=pk_bytes || index_BE_4)
- *   child_pk = parent_pk + 8 * LE(trunc28(HMAC_left)) * G
- *   child_chaincode = HMAC_right (right 32 bytes)
- *
- * This differs from the Cardano BIP32-Ed25519 formula used by
- * `Eddsa.deriveUnhardened` in three ways: no 0x02 prefix byte, big-endian
- * index, and a single HMAC instead of two. The formulas produce completely
- * different child keys at every derived level.
- *
- * Returns the same on-the-wire format as `Eddsa.deriveUnhardened`:
- *   128-char hex = 64-char derived pk + 64-char derived chaincode
- */
-function deriveUnhardenedMps(commonKeychainHex, path) {
-    if (commonKeychainHex.length !== 128) {
-        throw new Error(`Invalid commonKeychain: expected 128 hex chars (32-byte pk + 32-byte chaincode), got ${commonKeychainHex.length}`);
-    }
-    const buf = Buffer.from(commonKeychainHex, 'hex');
-    let pkBytes = Buffer.from(buf.subarray(0, 32));
-    let ccBytes = Buffer.from(buf.subarray(32, 64));
-    const indices = path === '' || path === 'm' ? [] : (0, util_1.pathToIndices)(path);
-    for (const index of indices) {
-        const indexBuf = Buffer.alloc(4);
-        indexBuf.writeUInt32BE(index, 0);
-        const hmac = (0, crypto_1.createHmac)('sha512', ccBytes)
-            .update(Buffer.concat([pkBytes, indexBuf]))
-            .digest();
-        const zl = hmac.subarray(0, 32);
-        const zr = hmac.subarray(32);
-        // parse_offset: 8 * LE(zl[0..28] || zeroes)
-        // Mirrors Rust: U256::from_le_slice(&z_l).shl(3), where z_l[28..32] = 0.
-        const truncZl = Buffer.alloc(32);
-        zl.copy(truncZl, 0, 0, 28);
-        const offset = BigInt('0x' + Buffer.from(truncZl).reverse().toString('hex')) * 8n;
-        // child_pk = offset * G + parent_pk
-        const childPoint = ed25519_1.ed25519.ExtendedPoint.BASE.multiply(offset).add(ed25519_1.ed25519.ExtendedPoint.fromHex(pkBytes));
-        pkBytes = Buffer.from(childPoint.toRawBytes());
-        ccBytes = Buffer.from(zr);
-    }
-    return pkBytes.toString('hex') + ccBytes.toString('hex');
-}
-//# sourceMappingURL=data:application/json;base64,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