@bsv/wallet-toolbox 1.7.14 → 1.7.15

package/mobile/node_modules/@bsv/sdk/dist/esm/src/auth/utils/validateCertificates.js

@@ -0,0 +1,41 @@
+import { VerifiableCertificate } from '../certificates/VerifiableCertificate.js';
+/**
+ * Validates and processes the certificates received from a peer.
+ *
+ * @private
+ * @param {AuthMessage} message - The message containing the certificates to validate.
+ * @returns {Promise<void>}
+ * @throws Will throw an error if certificate validation or field decryption fails.
+ */
+export const validateCertificates = async (verifierWallet, message, certificatesRequested, originator) => {
+    if ((message.certificates == null) || message.certificates.length === 0) {
+        throw new Error('No certificates were provided in the AuthMessage.');
+    }
+    await Promise.all(message.certificates.map(async (incomingCert) => {
+        if (incomingCert.subject !== message.identityKey) {
+            throw new Error(`The subject of one of your certificates ("${incomingCert.subject}") is not the same as the request sender ("${message.identityKey}").`);
+        }
+        // Verify Certificate structure and signature
+        const certToVerify = new VerifiableCertificate(incomingCert.type, incomingCert.serialNumber, incomingCert.subject, incomingCert.certifier, incomingCert.revocationOutpoint, incomingCert.fields, incomingCert.keyring, incomingCert.signature);
+        const isValidCert = await certToVerify.verify();
+        if (!isValidCert) {
+            throw new Error(`The signature for the certificate with serial number ${certToVerify.serialNumber} is invalid!`);
+        }
+        // Check if the certificate matches requested certifiers, types, and fields
+        if (certificatesRequested != null) {
+            const { certifiers, types } = certificatesRequested;
+            // Check certifier matches
+            if (!certifiers.includes(certToVerify.certifier)) {
+                throw new Error(`Certificate with serial number ${certToVerify.serialNumber} has an unrequested certifier: ${certToVerify.certifier}`);
+            }
+            // Check type and fields match requested
+            const requestedFields = types[certToVerify.type];
+            if (requestedFields == null) {
+                throw new Error(`Certificate with type ${certToVerify.type} was not requested`);
+            }
+        }
+        // Attempt to decrypt fields
+        await certToVerify.decryptFields(verifierWallet, undefined, undefined, originator);
+    }));
+};
+//# sourceMappingURL=validateCertificates.js.map

package/mobile/node_modules/@bsv/sdk/dist/esm/src/auth/utils/validateCertificates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateCertificates.js","sourceRoot":"","sources":["../../../../../src/auth/utils/validateCertificates.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAA;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACvC,cAA+B,EAC/B,OAAoB,EACpB,qBAA+C,EAC/C,UAAoD,EACrC,EAAE;IACjB,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,YAAmC,EAAE,EAAE;QACrE,IAAI,YAAY,CAAC,OAAO,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,6CAA6C,YAAY,CAAC,OAAO,8CAA8C,OAAO,CAAC,WAAW,KAAK,CACxI,CAAA;QACH,CAAC;QAED,6CAA6C;QAC7C,MAAM,YAAY,GAAG,IAAI,qBAAqB,CAC5C,YAAY,CAAC,IAAI,EACjB,YAAY,CAAC,YAAY,EACzB,YAAY,CAAC,OAAO,EACpB,YAAY,CAAC,SAAS,EACtB,YAAY,CAAC,kBAAkB,EAC/B,YAAY,CAAC,MAAM,EACnB,YAAY,CAAC,OAAO,EACpB,YAAY,CAAC,SAAS,CACvB,CAAA;QACD,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,wDAAwD,YAAY,CAAC,YAAY,cAAc,CAChG,CAAA;QACH,CAAC;QAED,2EAA2E;QAC3E,IAAI,qBAAqB,IAAI,IAAI,EAAE,CAAC;YAClC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,qBAAqB,CAAA;YAEnD,0BAA0B;YAC1B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CACb,kCAAkC,YAAY,CAAC,YAAY,kCAAkC,YAAY,CAAC,SAAS,EAAE,CACtH,CAAA;YACH,CAAC;YAED,wCAAwC;YACxC,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;YAChD,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,yBAAyB,YAAY,CAAC,IAAI,oBAAoB,CAC/D,CAAA;YACH,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,YAAY,CAAC,aAAa,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;IACpF,CAAC,CAAC,CACH,CAAA;AACH,CAAC,CAAA"}

package/mobile/node_modules/@bsv/sdk/dist/esm/src/auth/utils/verifyNonce.js

@@ -0,0 +1,25 @@
+import * as Utils from '../../primitives/utils.js';
+/**
+ * Verifies a nonce derived from a wallet
+ * @param nonce - A nonce to verify as a base64 string.
+ * @param wallet
+ * @param counterparty - The counterparty to the nonce creation. Defaults to 'self'.
+ * @returns The status of the validation
+ */
+export async function verifyNonce(nonce, wallet, counterparty = 'self', originator) {
+    // Convert nonce from base64 string to Uint8Array
+    const buffer = Utils.toArray(nonce, 'base64');
+    // Split the nonce buffer
+    const data = buffer.slice(0, 16);
+    const hmac = buffer.slice(16);
+    // Calculate the HMAC
+    const { valid } = await wallet.verifyHmac({
+        data,
+        hmac,
+        protocolID: [2, 'server hmac'],
+        keyID: Utils.toUTF8(data),
+        counterparty
+    }, originator);
+    return valid;
+}
+//# sourceMappingURL=verifyNonce.js.map

package/mobile/node_modules/@bsv/sdk/dist/esm/src/auth/utils/verifyNonce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyNonce.js","sourceRoot":"","sources":["../../../../../src/auth/utils/verifyNonce.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,2BAA2B,CAAA;AAGlD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAmB,EACnB,MAAuB,EACvB,eAAmC,MAAM,EACzC,UAAoD;IAEpD,iDAAiD;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAE7C,yBAAyB;IACzB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAE7B,qBAAqB;IACrB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC;QACxC,IAAI;QACJ,IAAI;QACJ,UAAU,EAAE,CAAC,CAAC,EAAE,aAAa,CAAC;QAC9B,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QACzB,YAAY;KACb,EAAE,UAAU,CAAC,CAAA;IAEd,OAAO,KAAK,CAAA;AACd,CAAC"}

package/mobile/node_modules/@bsv/sdk/dist/esm/src/compat/BSM.js

@@ -0,0 +1,52 @@
+import BigNumber from '../primitives/BigNumber.js';
+import { Writer, toArray } from '../primitives/utils.js';
+import * as ECDSA from '../primitives/ECDSA.js';
+import * as Hash from '../primitives/Hash.js';
+const prefix = 'Bitcoin Signed Message:\n';
+/**
+ * Generates a SHA256 double-hash of the prefixed message.
+ * @deprecated Replaced by BRC-77 which uses a more secure and private method for message signing.
+ * @param messageBuf The message buffer to be hashed.
+ * @returns The double-hash of the prefixed message as a number array.
+ */
+export const magicHash = (messageBuf) => {
+    const bw = new Writer();
+    bw.writeVarIntNum(prefix.length);
+    bw.write(toArray(prefix, 'utf8'));
+    bw.writeVarIntNum(messageBuf.length);
+    bw.write(messageBuf);
+    const buf = bw.toArray();
+    const hashBuf = Hash.hash256(buf);
+    return hashBuf;
+};
+/**
+ * Signs a BSM message using the given private key.
+ * @deprecated Replaced by BRC-77 which employs BRC-42 key derivation and BRC-43 invoice numbers for enhanced security and privacy.
+ * @param message The message to be signed as a number array.
+ * @param privateKey The private key used for signing the message.
+ * @param mode The mode of operation. When "base64", the BSM format signature is returned. When "raw", a Signature object is returned. Default: "base64".
+ * @returns The signature object when in raw mode, or the BSM base64 string when in base64 mode.
+ */
+export const sign = (message, privateKey, mode = 'base64') => {
+    const hashBuf = magicHash(message);
+    const sig = ECDSA.sign(new BigNumber(hashBuf), privateKey, true);
+    if (mode === 'raw') {
+        return sig;
+    }
+    const h = new BigNumber(hashBuf);
+    const r = sig.CalculateRecoveryFactor(privateKey.toPublicKey(), h);
+    return sig.toCompact(r, true, 'base64');
+};
+/**
+ * Verifies a BSM signed message using the given public key.
+ * @deprecated Replaced by BRC-77 which provides privately-verifiable signatures and avoids key reuse.
+ * @param message The message to be verified as a number array.
+ * @param sig The signature object.
+ * @param pubKey The public key for verification.
+ * @returns True if the signature is valid, false otherwise.
+ */
+export const verify = (message, sig, pubKey) => {
+    const hashBuf = magicHash(message);
+    return ECDSA.verify(new BigNumber(hashBuf), sig, pubKey);
+};
+//# sourceMappingURL=BSM.js.map

package/mobile/node_modules/@bsv/sdk/dist/esm/src/compat/BSM.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BSM.js","sourceRoot":"","sources":["../../../../src/compat/BSM.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAA;AAC/C,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAA;AAK7C,MAAM,MAAM,GAAG,2BAA2B,CAAA;AAE1C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,UAAoB,EAAY,EAAE;IAC1D,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,CAAA;IACvB,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAChC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjC,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACpC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACpB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,OAAiB,EACjB,UAAsB,EACtB,OAAyB,QAAQ,EACb,EAAE;IACtB,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;IAChE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,uBAAuB,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAA;IAClE,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAW,CAAA;AACnD,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,OAAiB,EACjB,GAAc,EACd,MAAiB,EACR,EAAE;IACX,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;IAClC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;AAC1D,CAAC,CAAA"}

package/mobile/node_modules/@bsv/sdk/dist/esm/src/compat/ECIES.js

@@ -0,0 +1,551 @@
+// import { AESWrappercbc } from './aescbc'
+import Random from '../primitives/Random.js';
+import PrivateKey from '../primitives/PrivateKey.js';
+import PublicKey from '../primitives/PublicKey.js';
+import Point from '../primitives/Point.js';
+import * as Hash from '../primitives/Hash.js';
+import { toArray, toHex, encode } from '../primitives/utils.js';
+function AES(key) {
+    if (this._tables[0][0][0] === 0)
+        this._precompute();
+    let tmp, encKey, decKey;
+    const sbox = this._tables[0][4];
+    const decTable = this._tables[1];
+    const keyLen = key.length;
+    let rcon = 1;
+    if (keyLen !== 4 && keyLen !== 6 && keyLen !== 8) {
+        throw new Error('invalid aes key size');
+    }
+    this._key = [(encKey = key.slice(0)), (decKey = [])];
+    // schedule encryption keys
+    let i;
+    for (i = keyLen; i < 4 * keyLen + 28; i++) {
+        tmp = encKey[i - 1];
+        // apply sbox
+        if (i % keyLen === 0 || (keyLen === 8 && i % keyLen === 4)) {
+            tmp =
+                (sbox[tmp >>> 24] << 24) ^
+                    (sbox[(tmp >> 16) & 255] << 16) ^
+                    (sbox[(tmp >> 8) & 255] << 8) ^
+                    sbox[tmp & 255];
+            // shift rows and add rcon
+            if (i % keyLen === 0) {
+                tmp = (tmp << 8) ^ (tmp >>> 24) ^ (rcon << 24);
+                rcon = (rcon << 1) ^ ((rcon >> 7) * 283);
+            }
+        }
+        encKey[i] = encKey[i - keyLen] ^ tmp;
+    }
+    // schedule decryption keys
+    for (let j = 0; i > 0; j++, i--) {
+        tmp = encKey[(j & 3) !== 0 ? i : i - 4];
+        if (i <= 4 || j < 4) {
+            decKey[j] = tmp;
+        }
+        else {
+            decKey[j] =
+                decTable[0][sbox[tmp >>> 24]] ^
+                    decTable[1][sbox[(tmp >> 16) & 255]] ^
+                    decTable[2][sbox[(tmp >> 8) & 255]] ^
+                    decTable[3][sbox[tmp & 255]];
+        }
+    }
+}
+AES.prototype = {
+    /**
+     * Encrypt an array of 4 big-endian words.
+     * @param {Array} data The plaintext.
+     * @return {Array} The ciphertext.
+     */
+    encrypt: function (data) {
+        return this._crypt(data, 0);
+    },
+    /**
+     * Decrypt an array of 4 big-endian words.
+     * @param {Array} data The ciphertext.
+     * @return {Array} The plaintext.
+     */
+    decrypt: function (data) {
+        return this._crypt(data, 1);
+    },
+    /**
+     * The expanded S-box and inverse S-box tables.  These will be computed
+     * on the client so that we don't have to send them down the wire.
+     *
+     * There are two tables, _tables[0] is for encryption and
+     * _tables[1] is for decryption.
+     *
+     * The first 4 sub-tables are the expanded S-box with MixColumns.  The
+     * last (_tables[01][4]) is the S-box itself.
+     *
+     * @private
+     */
+    _tables: [
+        [
+            new Uint32Array(256),
+            new Uint32Array(256),
+            new Uint32Array(256),
+            new Uint32Array(256),
+            new Uint32Array(256)
+        ],
+        [
+            new Uint32Array(256),
+            new Uint32Array(256),
+            new Uint32Array(256),
+            new Uint32Array(256),
+            new Uint32Array(256)
+        ]
+    ],
+    // Expand the S-box tables.
+    _precompute: function () {
+        const encTable = this._tables[0];
+        const decTable = this._tables[1];
+        const sbox = encTable[4];
+        const sboxInv = decTable[4];
+        let i;
+        let x;
+        let xInv;
+        const d = new Uint8Array(256);
+        const th = new Uint8Array(256);
+        let x2;
+        let x4;
+        let x8;
+        let s;
+        let tEnc;
+        let tDec;
+        // Compute double and third tables
+        for (i = 0; i < 256; i++) {
+            th[(d[i] = (i << 1) ^ ((i >> 7) * 283)) ^ i] = i;
+        }
+        for (x = xInv = 0; sbox[x] === 0; x ^= (x2 !== 0 ? x2 : 1), xInv = th[xInv] !== 0 ? th[xInv] : 1) {
+            // Compute sbox
+            s = xInv ^ (xInv << 1) ^ (xInv << 2) ^ (xInv << 3) ^ (xInv << 4);
+            s = (s >> 8) ^ (s & 255) ^ 99;
+            sbox[x] = s;
+            sboxInv[s] = x;
+            // Compute MixColumns
+            x8 = d[(x4 = d[(x2 = d[x])])];
+            tDec = (x8 * 0x1010101) ^ (x4 * 0x10001) ^ (x2 * 0x101) ^ (x * 0x1010100);
+            tEnc = (d[s] * 0x101) ^ (s * 0x1010100);
+            for (i = 0; i < 4; i++) {
+                encTable[i][x] = tEnc = (tEnc << 24) ^ (tEnc >>> 8);
+                decTable[i][s] = tDec = (tDec << 24) ^ (tDec >>> 8);
+            }
+        }
+    },
+    /**
+     * Encryption and decryption core.
+     * @param {Array} input Four words to be encrypted or decrypted.
+     * @param dir The direction, 0 for encrypt and 1 for decrypt.
+     * @return {Array} The four encrypted or decrypted words.
+     * @private
+     */
+    _crypt: function (input, dir) {
+        if (input.length !== 4) {
+            throw new Error('invalid aes block size');
+        }
+        const key = this._key[dir];
+        // state variables a,b,c,d are loaded with pre-whitened data
+        let a = input[0] ^ key[0];
+        let b = input[dir === 1 ? 3 : 1] ^ key[1];
+        let c = input[2] ^ key[2];
+        let d = input[dir === 1 ? 1 : 3] ^ key[3];
+        let a2;
+        let b2;
+        let c2;
+        const nInnerRounds = key.length / 4 - 2;
+        let i;
+        let kIndex = 4;
+        const out = new Uint32Array(4);
+        const // <--- this is slower in Node, about the same in Chrome */
+        table = this._tables[dir];
+        // load up the tables
+        const t0 = table[0];
+        const t1 = table[1];
+        const t2 = table[2];
+        const t3 = table[3];
+        const sbox = table[4];
+        // Inner rounds.  Cribbed from OpenSSL.
+        for (i = 0; i < nInnerRounds; i++) {
+            a2 =
+                t0[a >>> 24] ^
+                    t1[(b >> 16) & 255] ^
+                    t2[(c >> 8) & 255] ^
+                    t3[d & 255] ^
+                    key[kIndex];
+            b2 =
+                t0[b >>> 24] ^
+                    t1[(c >> 16) & 255] ^
+                    t2[(d >> 8) & 255] ^
+                    t3[a & 255] ^
+                    key[kIndex + 1];
+            c2 =
+                t0[c >>> 24] ^
+                    t1[(d >> 16) & 255] ^
+                    t2[(a >> 8) & 255] ^
+                    t3[b & 255] ^
+                    key[kIndex + 2];
+            d =
+                t0[d >>> 24] ^
+                    t1[(a >> 16) & 255] ^
+                    t2[(b >> 8) & 255] ^
+                    t3[c & 255] ^
+                    key[kIndex + 3];
+            kIndex += 4;
+            a = a2;
+            b = b2;
+            c = c2;
+        }
+        // Last round.
+        for (i = 0; i < 4; i++) {
+            out[dir === 1 ? 3 & -i : i] =
+                (sbox[a >>> 24] << 24) ^
+                    (sbox[(b >> 16) & 255] << 16) ^
+                    (sbox[(c >> 8) & 255] << 8) ^
+                    sbox[d & 255] ^
+                    key[kIndex++];
+            a2 = a;
+            a = b;
+            b = c;
+            c = d;
+            d = a2;
+        }
+        return out;
+    }
+};
+// eslint-disable-next-line @typescript-eslint/no-extraneous-class
+class AESWrapper {
+    static encrypt(messageBuf, keyBuf) {
+        const key = AESWrapper.buf2Words(keyBuf);
+        const message = AESWrapper.buf2Words(messageBuf);
+        const a = new AES(key);
+        const enc = a.encrypt(message);
+        const encBuf = AESWrapper.words2Buf(enc);
+        return encBuf;
+    }
+    static decrypt(encBuf, keyBuf) {
+        const enc = AESWrapper.buf2Words(encBuf);
+        const key = AESWrapper.buf2Words(keyBuf);
+        const a = new AES(key);
+        const message = a.decrypt(enc);
+        const messageBuf = AESWrapper.words2Buf(message);
+        return messageBuf;
+    }
+    static buf2Words(buf) {
+        if (buf.length % 4 !== 0) {
+            throw new Error('buf length must be a multiple of 4');
+        }
+        const words = [];
+        for (let i = 0; i < buf.length / 4; i++) {
+            const val = buf[i * 4] * 0x1000000 + // Shift the first byte by 24 bits
+                ((buf[i * 4 + 1] << 16) | // Shift the second byte by 16 bits
+                    (buf[i * 4 + 2] << 8) | // Shift the third byte by 8 bits
+                    buf[i * 4 + 3]); // The fourth byte
+            words.push(val);
+        }
+        return words;
+    }
+    static words2Buf(words) {
+        const buf = new Array(words.length * 4);
+        for (let i = 0; i < words.length; i++) {
+            const word = words[i];
+            buf[i * 4] = (word >>> 24) & 0xff;
+            buf[i * 4 + 1] = (word >>> 16) & 0xff;
+            buf[i * 4 + 2] = (word >>> 8) & 0xff;
+            buf[i * 4 + 3] = word & 0xff;
+        }
+        return buf;
+    }
+}
+// eslint-disable-next-line @typescript-eslint/no-extraneous-class
+class CBC {
+    static buf2BlocksBuf(buf, blockSize) {
+        const bytesize = blockSize / 8;
+        const blockBufs = [];
+        for (let i = 0; i <= buf.length / bytesize; i++) {
+            let blockBuf = buf.slice(i * bytesize, i * bytesize + bytesize);
+            if (blockBuf.length < blockSize) {
+                blockBuf = CBC.pkcs7Pad(blockBuf, blockSize);
+            }
+            blockBufs.push(blockBuf);
+        }
+        return blockBufs;
+    }
+    static blockBufs2Buf(blockBufs) {
+        let last = blockBufs[blockBufs.length - 1];
+        last = CBC.pkcs7Unpad(last);
+        blockBufs[blockBufs.length - 1] = last;
+        const buf = blockBufs.flat();
+        return buf;
+    }
+    static encrypt(messageBuf, ivBuf, blockCipher /* TODO: type */, cipherKeyBuf) {
+        const blockSize = ivBuf.length * 8;
+        const blockBufs = CBC.buf2BlocksBuf(messageBuf, blockSize);
+        const encBufs = CBC.encryptBlocks(blockBufs, ivBuf, blockCipher, cipherKeyBuf);
+        const encBuf = encBufs.flat();
+        return encBuf;
+    }
+    static decrypt(encBuf, ivBuf, blockCipher /* TODO: type */, cipherKeyBuf) {
+        const bytesize = ivBuf.length;
+        const encBufs = [];
+        for (let i = 0; i < encBuf.length / bytesize; i++) {
+            encBufs.push(encBuf.slice(i * bytesize, i * bytesize + bytesize));
+        }
+        const blockBufs = CBC.decryptBlocks(encBufs, ivBuf, blockCipher, cipherKeyBuf);
+        const buf = CBC.blockBufs2Buf(blockBufs);
+        return buf;
+    }
+    static encryptBlock(blockBuf, ivBuf, blockCipher /* TODO: type */, cipherKeyBuf) {
+        const xorbuf = CBC.xorBufs(blockBuf, ivBuf);
+        const encBuf = blockCipher.encrypt(xorbuf, cipherKeyBuf);
+        return encBuf;
+    }
+    static decryptBlock(encBuf, ivBuf, blockCipher /* TODO: type */, cipherKeyBuf) {
+        const xorbuf = blockCipher.decrypt(encBuf, cipherKeyBuf);
+        const blockBuf = CBC.xorBufs(xorbuf, ivBuf);
+        return blockBuf;
+    }
+    static encryptBlocks(blockBufs, ivBuf, blockCipher /* TODO: type */, cipherKeyBuf) {
+        const encBufs = [];
+        for (let i = 0; i < blockBufs.length; i++) {
+            const blockBuf = blockBufs[i];
+            const encBuf = CBC.encryptBlock(blockBuf, ivBuf, blockCipher, cipherKeyBuf);
+            encBufs.push(encBuf);
+            ivBuf = encBuf;
+        }
+        return encBufs;
+    }
+    static decryptBlocks(encBufs, ivBuf, blockCipher /* TODO: type */, cipherKeyBuf) {
+        const blockBufs = [];
+        for (let i = 0; i < encBufs.length; i++) {
+            const encBuf = encBufs[i];
+            const blockBuf = CBC.decryptBlock(encBuf, ivBuf, blockCipher, cipherKeyBuf);
+            blockBufs.push(blockBuf);
+            ivBuf = encBuf;
+        }
+        return blockBufs;
+    }
+    static pkcs7Pad(buf, blockSize) {
+        const bytesize = blockSize / 8;
+        const padbytesize = bytesize - buf.length;
+        const pad = new Array(padbytesize);
+        pad.fill(padbytesize);
+        const paddedbuf = [...buf, ...pad];
+        return paddedbuf;
+    }
+    static pkcs7Unpad(paddedbuf) {
+        const padlength = paddedbuf[paddedbuf.length - 1];
+        const padbuf = paddedbuf.slice(paddedbuf.length - padlength, paddedbuf.length);
+        const padbuf2 = new Array(padlength);
+        padbuf2.fill(padlength);
+        if (toHex(padbuf) !== toHex(padbuf2)) {
+            throw new Error('invalid padding');
+        }
+        return paddedbuf.slice(0, paddedbuf.length - padlength);
+    }
+    static xorBufs(buf1, buf2) {
+        if (buf1.length !== buf2.length) {
+            throw new Error('bufs must have the same length');
+        }
+        const buf = new Array(buf1.length);
+        for (let i = 0; i < buf1.length; i++) {
+            buf[i] = buf1[i] ^ buf2[i];
+        }
+        return buf;
+    }
+}
+// eslint-disable-next-line @typescript-eslint/no-extraneous-class
+class AESCBC {
+    static encrypt(messageBuf, cipherKeyBuf, ivBuf, concatIvBuf = true) {
+        ivBuf = ivBuf ?? Random(128 / 8);
+        const ctBuf = CBC.encrypt(messageBuf, ivBuf, AESWrapper, cipherKeyBuf);
+        if (concatIvBuf) {
+            return [...ivBuf, ...ctBuf];
+        }
+        else {
+            return [...ctBuf];
+        }
+    }
+    static decrypt(encBuf, cipherKeyBuf, ivBuf) {
+        if (ivBuf == null) {
+            ivBuf = encBuf.slice(0, 128 / 8);
+            const ctBuf = encBuf.slice(128 / 8);
+            return CBC.decrypt(ctBuf, ivBuf, AESWrapper, cipherKeyBuf);
+        }
+        else {
+            const ctBuf = encBuf;
+            return CBC.decrypt(ctBuf, ivBuf, AESWrapper, cipherKeyBuf);
+        }
+    }
+}
+/**
+ * @class ECIES
+ * Implements the Electrum ECIES protocol for encrypted communication.
+ *
+ * @prprecated This class is deprecated in favor of the BRC-78 standard for portable encrypted messages,
+ * which provides a more comprehensive and secure solution by integrating with BRC-42 and BRC-43 standards.
+ */
+// eslint-disable-next-line @typescript-eslint/no-extraneous-class
+export default class ECIES {
+    /**
+     * Generates the initialization vector (iv), encryption key (kE), and MAC key (kM)
+     * using the sender's private key and receiver's public key.
+     *
+     * @param {PrivateKey} privKey - The sender's private key.
+     * @param {PublicKey} pubKey - The receiver's public key.
+     * @returns {Object} An object containing the iv, kE, and kM as number arrays.
+     */
+    static ivkEkM(privKey, pubKey) {
+        const r = privKey;
+        const KB = pubKey;
+        const P = KB.mul(r);
+        const S = new PublicKey(P.x, P.y);
+        const Sbuf = S.encode(true);
+        const hash = Hash.sha512(Sbuf);
+        return {
+            iv: hash.slice(0, 16),
+            kE: hash.slice(16, 32),
+            kM: hash.slice(32, 64)
+        };
+    }
+    /**
+     * Encrypts a given message using the Electrum ECIES method.
+     *
+     * @param {number[]} messageBuf - The message to be encrypted, in number array format.
+     * @param {PublicKey} toPublicKey - The public key of the recipient.
+     * @param {PrivateKey} [fromPrivateKey] - The private key of the sender. If not provided, a random private key is used.
+     * @param {boolean} [noKey=false] - If true, does not include the sender's public key in the encrypted message.
+     * @returns {number[]} The encrypted message as a number array.
+     */
+    static electrumEncrypt(messageBuf, toPublicKey, fromPrivateKey, noKey = false) {
+        let Rbuf = null;
+        if (fromPrivateKey == null) {
+            fromPrivateKey = PrivateKey.fromRandom();
+        }
+        if (!noKey) {
+            Rbuf = fromPrivateKey.toPublicKey().encode(true);
+        }
+        const { iv, kE, kM } = ECIES.ivkEkM(fromPrivateKey, toPublicKey);
+        const ciphertext = AESCBC.encrypt(messageBuf, kE, iv, false);
+        const BIE1 = toArray('BIE1', 'utf8');
+        let encBuf;
+        if (Rbuf !== undefined && Rbuf !== null && Rbuf.length > 0) {
+            encBuf = [...BIE1, ...Rbuf, ...ciphertext];
+        }
+        else {
+            encBuf = [...BIE1, ...ciphertext];
+        }
+        const hmac = Hash.sha256hmac(kM, encBuf);
+        return [...encBuf, ...hmac];
+    }
+    /**
+     * Decrypts a message encrypted using the Electrum ECIES method.
+     *
+     * @param {number[]} encBuf - The encrypted message buffer.
+     * @param {PrivateKey} toPrivateKey - The private key of the recipient.
+     * @param {PublicKey} [fromPublicKey=null] - The public key of the sender. If not provided, it is extracted from the message.
+     * @returns {number[]} The decrypted message as a number array.
+     */
+    static electrumDecrypt(encBuf, toPrivateKey, fromPublicKey) {
+        const tagLength = 32;
+        const magic = encBuf.slice(0, 4);
+        if (encode(magic, 'utf8') !== 'BIE1') {
+            throw new Error('Invalid Magic');
+        }
+        let offset = 4;
+        // Determine if the sender's public key is included in encBuf
+        let Rbuf = null;
+        if (encBuf.length - offset - tagLength >= 33) {
+            const firstByte = encBuf[offset];
+            if (firstByte === 0x02 || firstByte === 0x03) {
+                // Compressed public key
+                Rbuf = encBuf.slice(offset, offset + 33);
+                offset += 33;
+            }
+            else if (firstByte === 0x04) {
+                // Uncompressed public key
+                Rbuf = encBuf.slice(offset, offset + 65);
+                offset += 65;
+            }
+        }
+        if (Rbuf !== null) {
+            if (fromPublicKey == null) {
+                fromPublicKey = PublicKey.fromString(toHex(Rbuf));
+            }
+        }
+        else {
+            if (fromPublicKey == null) {
+                throw new Error('Sender public key is required');
+            }
+        }
+        const { iv, kE, kM } = ECIES.ivkEkM(toPrivateKey, fromPublicKey);
+        const ciphertext = encBuf.slice(offset, encBuf.length - tagLength);
+        const hmac = encBuf.slice(encBuf.length - tagLength, encBuf.length);
+        const hmac2 = Hash.sha256hmac(kM, encBuf.slice(0, encBuf.length - tagLength));
+        if (toHex(hmac) !== toHex(hmac2)) {
+            throw new Error('Invalid checksum');
+        }
+        return AESCBC.decrypt(ciphertext, kE, iv);
+    }
+    /**
+     * Encrypts a given message using the Bitcore variant of ECIES.
+     *
+     * @param {number[]} messageBuf - The message to be encrypted, in number array format.
+     * @param {PublicKey} toPublicKey - The public key of the recipient.
+     * @param {PrivateKey} [fromPrivateKey] - The private key of the sender. If not provided, a random private key is used.
+     * @param {number[]} [ivBuf] - The initialization vector for encryption. If not provided, a random IV is used.
+     * @returns {number[]} The encrypted message as a number array.
+     */
+    static bitcoreEncrypt(messageBuf, toPublicKey, fromPrivateKey, ivBuf) {
+        if (fromPrivateKey == null) {
+            fromPrivateKey = PrivateKey.fromRandom();
+        }
+        if (ivBuf == null) {
+            ivBuf = Random(16);
+        }
+        const r = fromPrivateKey;
+        const RPublicKey = fromPrivateKey.toPublicKey();
+        const RBuf = RPublicKey.encode(true);
+        const KB = toPublicKey;
+        const P = KB.mul(r);
+        const S = P.getX();
+        const Sbuf = S.toArray('be', 32);
+        const kEkM = Hash.sha512(Sbuf);
+        const kE = kEkM.slice(0, 32);
+        const kM = kEkM.slice(32, 64);
+        const c = AESCBC.encrypt(messageBuf, kE, ivBuf);
+        const d = Hash.sha256hmac(kM, [...c]);
+        const encBuf = [...RBuf, ...c, ...d];
+        return encBuf;
+    }
+    /**
+     * Decrypts a message encrypted using the Bitcore variant of ECIES.
+     *
+     * @param {number[]} encBuf - The encrypted message buffer.
+     * @param {PrivateKey} toPrivateKey - The private key of the recipient.
+     * @returns {number[]} The decrypted message as a number array.
+     */
+    static bitcoreDecrypt(encBuf, toPrivateKey) {
+        const kB = toPrivateKey;
+        const fromPublicKey = PublicKey.fromString(toHex(encBuf.slice(0, 33)));
+        const R = fromPublicKey;
+        const P = R.mul(kB);
+        if (P.eq(new Point(0, 0))) {
+            throw new Error('P equals 0');
+        }
+        const S = P.getX();
+        const Sbuf = S.toArray('be', 32);
+        const kEkM = Hash.sha512(Sbuf);
+        const kE = kEkM.slice(0, 32);
+        const kM = kEkM.slice(32, 64);
+        const c = encBuf.slice(33, encBuf.length - 32);
+        const d = encBuf.slice(encBuf.length - 32, encBuf.length);
+        const d2 = Hash.sha256hmac(kM, c);
+        if (toHex(d) !== toHex(d2)) {
+            throw new Error('Invalid checksum');
+        }
+        const messageBuf = AESCBC.decrypt(c, kE);
+        return [...messageBuf];
+    }
+}
+//# sourceMappingURL=ECIES.js.map