@dotenvx/next-env 1.74.3 → 2.0.1

package/node_modules/@noble/hashes/README.md

@@ -1,521 +0,0 @@
-# noble-hashes
-
-Audited & minimal JS implementation of hash functions, MACs and KDFs.
-
-- 🔒 [**Audited**](#security) by an independent security firm
-- 🔻 Tree-shakeable: unused code is excluded from your builds
-- 🏎 Fast: hand-optimized for caveats of JS engines
-- 🔍 Reliable: chained / sliding window / DoS tests and fuzzing ensure correctness
-- 🔁 No unrolled loops: makes it easier to verify and reduces source code size up to 5x
-- 🦘 Includes SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF, Scrypt, Argon2 & KangarooTwelve
-- 🪶 48KB for everything, 4.8KB (2.36KB gzipped) for single-hash build
-
-Take a glance at [GitHub Discussions](https://github.com/paulmillr/noble-hashes/discussions) for questions and support.
-The library's initial development was funded by [Ethereum Foundation](https://ethereum.org/).
-
-### This library belongs to _noble_ cryptography
-
-> **noble cryptography** — high-security, easily auditable set of contained cryptographic libraries and tools.
-
-- Zero or minimal dependencies
-- Highly readable TypeScript / JS code
-- PGP-signed releases and transparent NPM builds
-- All libraries:
-  [ciphers](https://github.com/paulmillr/noble-ciphers),
-  [curves](https://github.com/paulmillr/noble-curves),
-  [hashes](https://github.com/paulmillr/noble-hashes),
-  [post-quantum](https://github.com/paulmillr/noble-post-quantum),
-  4kb [secp256k1](https://github.com/paulmillr/noble-secp256k1) /
-  [ed25519](https://github.com/paulmillr/noble-ed25519)
-- [Check out homepage](https://paulmillr.com/noble/)
-  for reading resources, documentation and apps built with noble
-
-## Usage
-
-> `npm install @noble/hashes`
-
-> `deno add jsr:@noble/hashes`
-
-> `deno doc jsr:@noble/hashes` # command-line documentation
-
-We support all major platforms and runtimes.
-For React Native, you may need a [polyfill for getRandomValues](https://github.com/LinusU/react-native-get-random-values).
-A standalone file [noble-hashes.js](https://github.com/paulmillr/noble-hashes/releases) is also available.
-
-```js
-// import * from '@noble/hashes'; // Error: use sub-imports, to ensure small app size
-import { sha256 } from '@noble/hashes/sha2.js'; // ESM & Common.js
-sha256(Uint8Array.from([0xca, 0xfe, 0x01, 0x23])); // returns Uint8Array
-
-// Available modules
-import { sha256, sha384, sha512, sha224, sha512_224, sha512_256 } from '@noble/hashes/sha2.js';
-import { sha3_256, sha3_512, keccak_256, keccak_512, shake128, shake256 } from '@noble/hashes/sha3.js';
-import { cshake256, turboshake256, kmac256, tuplehash256, k12, m14, keccakprg } from '@noble/hashes/sha3-addons.js';
-import { blake3 } from '@noble/hashes/blake3.js';
-import { blake2b, blake2s } from '@noble/hashes/blake2.js';
-import { blake256, blake512 } from '@noble/hashes/blake1.js';
-import { sha1, md5, ripemd160 } from '@noble/hashes/legacy.js';
-import { hmac } from '@noble/hashes/hmac.js';
-import { hkdf } from '@noble/hashes/hkdf.js';
-import { pbkdf2, pbkdf2Async } from '@noble/hashes/pbkdf2.js';
-import { scrypt, scryptAsync } from '@noble/hashes/scrypt.js';
-import { argon2d, argon2i, argon2id } from '@noble/hashes/argon2.js';
-import * as utils from '@noble/hashes/utils'; // bytesToHex, bytesToUtf8, concatBytes...
-```
-
-- [sha2: sha256, sha384, sha512](#sha2-sha256-sha384-sha512-and-others)
-- [sha3: FIPS, SHAKE, Keccak](#sha3-fips-shake-keccak)
-- [sha3-addons: cSHAKE, KMAC, K12, M14, TurboSHAKE](#sha3-addons-cshake-kmac-k12-m14-turboshake)
-- [blake, blake2, blake3](#blake-blake2-blake3) | [legacy: sha1, md5, ripemd160](#legacy-sha1-md5-ripemd160)
-- MACs: [hmac](#hmac) | [sha3-addons kmac](#sha3-addons-cshake-kmac-k12-m14-turboshake) | [blake3 key mode](#blake2b-blake2s-blake3)
-- KDFs: [hkdf](#hkdf) | [pbkdf2](#pbkdf2) | [scrypt](#scrypt) | [argon2](#argon2)
-- [utils](#utils)
-- [Security](#security) | [Speed](#speed) | [Contributing & testing](#contributing--testing) | [License](#license)
-
-### Implementations
-
-Hash functions:
-
-- `sha256()`: receive & return `Uint8Array`
-- `sha256.create().update(a).update(b).digest()`: support partial updates
-- `blake3.create({ context: 'e', dkLen: 32 })`: sometimes have options
-- support little-endian architecture; also experimentally big-endian
-- can hash up to 4GB per chunk, with any amount of chunks
-
-#### sha2: sha256, sha384, sha512 and others
-
-```typescript
-import { sha224, sha256, sha384, sha512, sha512_224, sha512_256 } from '@noble/hashes/sha2.js';
-const res = sha256(Uint8Array.from([0xbc])); // basic
-for (let hash of [sha256, sha384, sha512, sha224, sha512_224, sha512_256]) {
-  const arr = Uint8Array.from([0x10, 0x20, 0x30]);
-  const a = hash(arr);
-  const b = hash.create().update(arr).digest();
-}
-```
-
-See [RFC 4634](https://datatracker.ietf.org/doc/html/rfc4634) and
-[the paper on truncated SHA512/256](https://eprint.iacr.org/2010/548.pdf).
-
-#### sha3: FIPS, SHAKE, Keccak
-
-```typescript
-import {
-  keccak_224, keccak_256, keccak_384, keccak_512,
-  sha3_224, sha3_256, sha3_384, sha3_512,
-  shake128, shake256,
-} from '@noble/hashes/sha3.js';
-for (let hash of [
-  sha3_224, sha3_256, sha3_384, sha3_512,
-  keccak_224, keccak_256, keccak_384, keccak_512,
-]) {
-  const arr = Uint8Array.from([0x10, 0x20, 0x30]);
-  const a = hash(arr);
-  const b = hash.create().update(arr).digest();
-}
-const shka = shake128(Uint8Array.from([0x10]), { dkLen: 512 });
-const shkb = shake256(Uint8Array.from([0x30]), { dkLen: 512 });
-```
-
-See [FIPS-202](https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf),
-[Website](https://keccak.team/keccak.html).
-
-Check out [the differences between SHA-3 and Keccak](https://crypto.stackexchange.com/questions/15727/what-are-the-key-differences-between-the-draft-sha-3-standard-and-the-keccak-sub)
-
-#### sha3-addons: cSHAKE, KMAC, K12, M14, TurboSHAKE
-
-```typescript
-import {
-  cshake128, cshake256,
-  k12,
-  keccakprg,
-  kmac128, kmac256,
-  m14,
-  parallelhash256,
-  tuplehash256,
-  turboshake128, turboshake256
-} from '@noble/hashes/sha3-addons.js';
-const data = Uint8Array.from([0x10, 0x20, 0x30]);
-const ec1 = cshake128(data, { personalization: 'def' });
-const ec2 = cshake256(data, { personalization: 'def' });
-const et1 = turboshake128(data);
-const et2 = turboshake256(data, { D: 0x05 });
- // tuplehash(['ab', 'c']) !== tuplehash(['a', 'bc']) !== tuplehash([data])
-const et3 = tuplehash256([utf8ToBytes('ab'), utf8ToBytes('c')]);
-// Not parallel in JS (similar to blake3 / k12), added for compat
-const ep1 = parallelhash256(data, { blockLen: 8 });
-const kk = Uint8Array.from([0xca]);
-const ek10 = kmac128(kk, data);
-const ek11 = kmac256(kk, data);
-const ek12 = k12(data);
-const ek13 = m14(data);
-// pseudo-random generator, first argument is capacity. XKCP recommends 254 bits capacity for 128-bit security strength.
-// * with a capacity of 254 bits.
-const p = keccakprg(254);
-p.feed('test');
-const rand1b = p.fetch(1);
-```
-
-- Full [NIST SP 800-185](https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-185.pdf):
-  cSHAKE, KMAC, TupleHash, ParallelHash + XOF variants
-- [Reduced-round Keccak](https://datatracker.ietf.org/doc/draft-irtf-cfrg-kangarootwelve/):
-  - 🦘 K12 aka KangarooTwelve
-  - M14 aka MarsupilamiFourteen
-  - TurboSHAKE
-- [KeccakPRG](https://keccak.team/files/CSF-0.1.pdf): Pseudo-random generator based on Keccak
-
-#### blake, blake2, blake3
-
-```typescript
-import { blake224, blake256, blake384, blake512 } from '@noble/hashes/blake1.js';
-import { blake2b, blake2s } from '@noble/hashes/blake2.js';
-import { blake3 } from '@noble/hashes/blake3.js';
-
-for (let hash of [
-  blake224, blake256, blake384, blake512,
-  blake2b, blake2s, blake3
-]) {
-  const arr = Uint8Array.from([0x10, 0x20, 0x30]);
-  const a = hash(arr);
-  const b = hash.create().update(arr).digest();
-}
-
-// blake2 advanced usage
-const ab = Uint8Array.from([0x01]);
-blake2s(ab);
-blake2s(ab, { key: new Uint8Array(32) });
-blake2s(ab, { personalization: 'pers1234' });
-blake2s(ab, { salt: 'salt1234' });
-blake2b(ab);
-blake2b(ab, { key: new Uint8Array(64) });
-blake2b(ab, { personalization: 'pers1234pers1234' });
-blake2b(ab, { salt: 'salt1234salt1234' });
-
-// blake3 advanced usage
-blake3(ab);
-blake3(ab, { dkLen: 256 });
-blake3(ab, { key: new Uint8Array(32) });
-blake3(ab, { context: 'application-name' });
-```
-
-- Blake1 is legacy hash, one of SHA3 proposals. It is rarely used anywhere. See [pdf](https://www.aumasson.jp/blake/blake.pdf).
-- Blake2 is popular fast hash. blake2b focuses on 64-bit platforms while blake2s is for 8-bit to 32-bit ones. See [RFC 7693](https://datatracker.ietf.org/doc/html/rfc7693), [Website](https://www.blake2.net)
-- Blake3 is faster, reduced-round blake2. See [Website & specs](https://blake3.io)
-
-#### legacy: sha1, md5, ripemd160
-
-SHA1 (RFC 3174), MD5 (RFC 1321) and RIPEMD160 (RFC 2286) legacy, weak hash functions.
-Don't use them in a new protocol. What "weak" means:
-
-- Collisions can be made with 2^18 effort in MD5, 2^60 in SHA1, 2^80 in RIPEMD160.
-- No practical pre-image attacks (only theoretical, 2^123.4)
-- HMAC seems kinda ok: https://datatracker.ietf.org/doc/html/rfc6151
-
-```typescript
-import { md5, ripemd160, sha1 } from '@noble/hashes/legacy.js';
-for (let hash of [md5, ripemd160, sha1]) {
-  const arr = Uint8Array.from([0x10, 0x20, 0x30]);
-  const a = hash(arr);
-  const b = hash.create().update(arr).digest();
-}
-```
-
-#### hmac
-
-```typescript
-import { hmac } from '@noble/hashes/hmac.js';
-import { sha256 } from '@noble/hashes/sha2.js';
-const key = new Uint8Array(32).fill(1);
-const msg = new Uint8Array(32).fill(2);
-const mac1 = hmac(sha256, key, msg);
-const mac2 = hmac.create(sha256, key).update(msg).digest();
-```
-
-Matches [RFC 2104](https://datatracker.ietf.org/doc/html/rfc2104).
-
-#### hkdf
-
-```typescript
-import { hkdf } from '@noble/hashes/hkdf.js';
-import { randomBytes } from '@noble/hashes/utils.js';
-import { sha256 } from '@noble/hashes/sha2.js';
-const inputKey = randomBytes(32);
-const salt = randomBytes(32);
-const info = 'application-key';
-const hk1 = hkdf(sha256, inputKey, salt, info, 32);
-
-// == same as
-import { extract, expand } from '@noble/hashes/hkdf.js';
-import { sha256 } from '@noble/hashes/sha2.js';
-const prk = extract(sha256, inputKey, salt);
-const hk2 = expand(sha256, prk, info, 32);
-```
-
-Matches [RFC 5869](https://datatracker.ietf.org/doc/html/rfc5869).
-
-#### pbkdf2
-
-```typescript
-import { pbkdf2, pbkdf2Async } from '@noble/hashes/pbkdf2.js';
-import { sha256 } from '@noble/hashes/sha2.js';
-const pbkey1 = pbkdf2(sha256, 'password', 'salt', { c: 32, dkLen: 32 });
-const pbkey2 = await pbkdf2Async(sha256, 'password', 'salt', { c: 32, dkLen: 32 });
-const pbkey3 = await pbkdf2Async(sha256, Uint8Array.from([1, 2, 3]), Uint8Array.from([4, 5, 6]), {
-  c: 32,
-  dkLen: 32,
-});
-```
-
-Matches [RFC 2898](https://datatracker.ietf.org/doc/html/rfc2898).
-
-#### scrypt
-
-```typescript
-import { scrypt, scryptAsync } from '@noble/hashes/scrypt.js';
-const scr1 = scrypt('password', 'salt', { N: 2 ** 16, r: 8, p: 1, dkLen: 32 });
-const scr2 = await scryptAsync('password', 'salt', { N: 2 ** 16, r: 8, p: 1, dkLen: 32 });
-const scr3 = await scryptAsync(Uint8Array.from([1, 2, 3]), Uint8Array.from([4, 5, 6]), {
-  N: 2 ** 17,
-  r: 8,
-  p: 1,
-  dkLen: 32,
-  onProgress(percentage) {
-    console.log('progress', percentage);
-  },
-  maxmem: 2 ** 32 + 128 * 8 * 1, // N * r * p * 128 + (128*r*p)
-});
-```
-
-Conforms to [RFC 7914](https://datatracker.ietf.org/doc/html/rfc7914),
-[Website](https://www.tarsnap.com/scrypt.html)
-
-- `N, r, p` are work factors. To understand them, see [the blog post](https://blog.filippo.io/the-scrypt-parameters/).
-  `r: 8, p: 1` are common. JS doesn't support parallelization, making increasing p meaningless.
-- `dkLen` is the length of output bytes e.g. `32` or `64`
-- `onProgress` can be used with async version of the function to report progress to a user.
-- `maxmem` prevents DoS and is limited to `1GB + 1KB` (`2**30 + 2**10`), but can be adjusted using formula: `N * r * p * 128 + (128 * r * p)`
-
-Time it takes to derive Scrypt key under different values of N (2\*\*N) on Apple M4 (mobile phones can be 1x-4x slower):
-
-| N pow | Time | RAM   |
-| ----- | ---- | ----- |
-| 16    | 0.1s | 64MB  |
-| 17    | 0.2s | 128MB |
-| 18    | 0.4s | 256MB |
-| 19    | 0.8s | 512MB |
-| 20    | 1.5s | 1GB   |
-| 21    | 3.1s | 2GB   |
-| 22    | 6.2s | 4GB   |
-| 23    | 13s  | 8GB   |
-| 24    | 27s  | 16GB  |
-
-> [!NOTE]
-> We support N larger than `2**20` where available, however,
-> not all JS engines support >= 2GB ArrayBuffer-s.
-> When using such N, you'll need to manually adjust `maxmem`, using formula above.
-> Other JS implementations don't support large N-s.
-
-#### argon2
-
-```ts
-import { argon2d, argon2i, argon2id } from '@noble/hashes/argon2.js';
-const arg1 = argon2id('password', 'saltsalt', { t: 2, m: 65536, p: 1, maxmem: 2 ** 32 - 1 });
-```
-
-Argon2 [RFC 9106](https://datatracker.ietf.org/doc/html/rfc9106) implementation.
-
-> [!WARNING]
-> Argon2 can't be fast in JS, because there is no fast Uint64Array.
-> It is suggested to use [Scrypt](#scrypt) instead.
-> Being 5x slower than native code means brute-forcing attackers have bigger advantage.
-
-#### utils
-
-```typescript
-import { bytesToHex as toHex, randomBytes } from '@noble/hashes/utils';
-console.log(toHex(randomBytes(32)));
-```
-
-- `bytesToHex` will convert `Uint8Array` to a hex string
-- `randomBytes(bytes)` will produce cryptographically secure random `Uint8Array` of length `bytes`
-
-## Security
-
-The library has been independently audited:
-
-- at version 1.0.0, in Jan 2022, by [Cure53](https://cure53.de)
-  - PDFs: [website](https://cure53.de/pentest-report_hashing-libs.pdf), [in-repo](./audit/2022-01-05-cure53-audit-nbl2.pdf)
-  - [Changes since audit](https://github.com/paulmillr/noble-hashes/compare/1.0.0..main).
-  - Scope: everything, besides `blake3`, `sha3-addons`, `sha1` and `argon2`, which have not been audited
-  - The audit has been funded by [Ethereum Foundation](https://ethereum.org/en/) with help of [Nomic Labs](https://nomiclabs.io)
-
-It is tested against property-based, cross-library and Wycheproof vectors,
-and is being fuzzed in [the separate repo](https://github.com/paulmillr/fuzzing).
-
-If you see anything unusual: investigate and report.
-
-### Constant-timeness
-
-We're targetting algorithmic constant time. _JIT-compiler_ and _Garbage Collector_ make "constant time"
-extremely hard to achieve [timing attack](https://en.wikipedia.org/wiki/Timing_attack) resistance
-in a scripting language. Which means _any other JS library can't have
-constant-timeness_. Even statically typed Rust, a language without GC,
-[makes it harder to achieve constant-time](https://www.chosenplaintext.ca/open-source/rust-timing-shield/security)
-for some cases. If your goal is absolute security, don't use any JS lib — including bindings to native ones.
-Use low-level libraries & languages.
-
-### Memory dumping
-
-The library shares state buffers between hash
-function calls. The buffers are zeroed-out after each call. However, if an attacker
-can read application memory, you are doomed in any case:
-
-- At some point, input will be a string and strings are immutable in JS:
-  there is no way to overwrite them with zeros. For example: deriving
-  key from `scrypt(password, salt)` where password and salt are strings
-- Input from a file will stay in file buffers
-- Input / output will be re-used multiple times in application which means it could stay in memory
-- `await anything()` will always write all internal variables (including numbers)
-  to memory. With async functions / Promises there are no guarantees when the code
-  chunk would be executed. Which means attacker can have plenty of time to read data from memory
-- There is no way to guarantee anything about zeroing sensitive data without
-  complex tests-suite which will dump process memory and verify that there is
-  no sensitive data left. For JS it means testing all browsers (incl. mobile),
-  which is complex. And of course it will be useless without using the same
-  test-suite in the actual application that consumes the library
-
-### Supply chain security
-
-- **Commits** are signed with PGP keys, to prevent forgery. Make sure to verify commit signatures
-- **Releases** are transparent and built on GitHub CI. Make sure to verify [provenance](https://docs.npmjs.com/generating-provenance-statements) logs
-  - Use GitHub CLI to verify single-file builds:
-    `gh attestation verify --owner paulmillr noble-hashes.js`
-- **Rare releasing** is followed to ensure less re-audit need for end-users
-- **Dependencies** are minimized and locked-down: any dependency could get hacked and users will be downloading malware with every install.
-  - We make sure to use as few dependencies as possible
-  - Automatic dep updates are prevented by locking-down version ranges; diffs are checked with `npm-diff`
-- **Dev Dependencies** are disabled for end-users; they are only used to develop / build the source code
-
-For this package, there are 0 dependencies; and a few dev dependencies:
-
-- micro-bmark, micro-should and jsbt are used for benchmarking / testing / build tooling and developed by the same author
-- prettier, fast-check and typescript are used for code quality / test generation / ts compilation. It's hard to audit their source code thoroughly and fully because of their size
-
-### Randomness
-
-We're deferring to built-in
-[crypto.getRandomValues](https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues)
-which is considered cryptographically secure (CSPRNG).
-
-In the past, browsers had bugs that made it weak: it may happen again.
-Implementing a userspace CSPRNG to get resilient to the weakness
-is even worse: there is no reliable userspace source of quality entropy.
-
-### Quantum computers
-
-Cryptographically relevant quantum computer, if built, will allow to
-utilize Grover's algorithm to break hashes in 2^n/2 operations, instead of 2^n.
-
-This means SHA256 should be replaced with SHA512, SHA3-256 with SHA3-512, SHAKE128 with SHAKE256 etc.
-
-Australian ASD prohibits SHA256 and similar hashes [after 2030](https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/ism/cyber-security-guidelines/guidelines-cryptography).
-
-## Speed
-
-```sh
-npm run bench:install && npm run bench
-```
-
-Benchmarks measured on Apple M4.
-
-```
-# 32B
-sha256 x 1,968,503 ops/sec @ 508ns/op
-sha512 x 740,740 ops/sec @ 1μs/op
-sha3_256 x 287,686 ops/sec @ 3μs/op
-sha3_512 x 288,267 ops/sec @ 3μs/op
-k12 x 476,190 ops/sec @ 2μs/op
-m14 x 423,190 ops/sec @ 2μs/op
-blake2b x 464,252 ops/sec @ 2μs/op
-blake2s x 766,871 ops/sec @ 1μs/op
-blake3 x 879,507 ops/sec @ 1μs/op
-
-# 1MB
-sha256 x 331 ops/sec @ 3ms/op
-sha512 x 129 ops/sec @ 7ms/op
-sha3_256 x 38 ops/sec @ 25ms/op
-sha3_512 x 20 ops/sec @ 47ms/op
-k12 x 88 ops/sec @ 11ms/op
-m14 x 62 ops/sec @ 15ms/op
-blake2b x 69 ops/sec @ 14ms/op
-blake2s x 57 ops/sec @ 17ms/op
-blake3 x 72 ops/sec @ 13ms/op
-
-# MAC
-hmac(sha256) x 599,880 ops/sec @ 1μs/op
-hmac(sha512) x 197,122 ops/sec @ 5μs/op
-kmac256 x 87,981 ops/sec @ 11μs/op
-blake3(key) x 796,812 ops/sec @ 1μs/op
-
-# KDF
-hkdf(sha256) x 259,942 ops/sec @ 3μs/op
-blake3(context) x 424,808 ops/sec @ 2μs/op
-pbkdf2(sha256, c: 2 ** 18) x 5 ops/sec @ 197ms/op
-pbkdf2(sha512, c: 2 ** 18) x 1 ops/sec @ 630ms/op
-scrypt(n: 2 ** 18, r: 8, p: 1) x 2 ops/sec @ 400ms/op
-argon2id(t: 1, m: 256MB) 2881ms
-```
-
-Compare to native node.js implementation that uses C bindings instead of pure-js code:
-
-```
-# native (node) 32B
-sha256 x 2,267,573 ops/sec
-sha512 x 983,284 ops/sec
-sha3_256 x 1,522,070 ops/sec
-blake2b x 1,512,859 ops/sec
-blake2s x 1,821,493 ops/sec
-hmac(sha256) x 1,085,776 ops/sec
-hkdf(sha256) x 312,109 ops/sec
-# native (node) KDF
-pbkdf2(sha256, c: 2 ** 18) x 5 ops/sec @ 197ms/op
-pbkdf2(sha512, c: 2 ** 18) x 1 ops/sec @ 630ms/op
-scrypt(n: 2 ** 18, r: 8, p: 1) x 2 ops/sec @ 378ms/op
-```
-
-It is possible to [make this library 4x+ faster](./benchmark/README.md) by
-_doing code generation of full loop unrolls_. We've decided against it. Reasons:
-
-- the library must be auditable, with minimum amount of code, and zero dependencies
-- most method invocations with the lib are going to be something like hashing 32b to 64kb of data
-- hashing big inputs is 10x faster with low-level languages, which means you should probably pick 'em instead
-
-The current performance is good enough when compared to other projects; SHA256 takes only 900 nanoseconds to run.
-
-## Contributing & testing
-
-`test/misc` directory contains implementations of loop unrolling and md5.
-
-- `npm install && npm run build && npm test` will build the code and run tests.
-- `npm run lint` / `npm run format` will run linter / fix linter issues.
-- `npm run bench` will run benchmarks, which may need their deps first (`npm run bench:install`)
-- `npm run build:release` will build single file
-- There is **additional** 20-min DoS test `npm run test:dos` and 2-hour "big" multicore test `npm run test:big`.
-  See [our approach to testing](./test/README.md)
-
-Additional resources:
-
-- NTT hashes are outside of scope of the library. You can view some of them in different repos:
-    - [Pedersen in micro-zk-proofs](https://github.com/paulmillr/micro-zk-proofs/blob/1ed5ce1253583b2e540eef7f3477fb52bf5344ff/src/pedersen.ts)
-    - [Poseidon in noble-curves](https://github.com/paulmillr/noble-curves/blob/3d124dd3ecec8b6634cc0b2ba1c183aded5304f9/src/abstract/poseidon.ts)
-- Check out [guidelines](https://github.com/paulmillr/guidelines) for coding practices
-- See [paulmillr.com/noble](https://paulmillr.com/noble/) for useful resources, articles, documentation and demos
-related to the library.
-
-## License
-
-The MIT License (MIT)
-
-Copyright (c) 2022 Paul Miller [(https://paulmillr.com)](https://paulmillr.com)
-
-See LICENSE file.

package/node_modules/@noble/hashes/_assert.d.ts

@@ -1,17 +0,0 @@
-/**
- * Internal assertion helpers.
- * @module
- * @deprecated
- */
-import { abytes as ab, aexists as ae, anumber as an, aoutput as ao, type IHash as H } from './utils.ts';
-/** @deprecated Use import from `noble/hashes/utils` module */
-export declare const abytes: typeof ab;
-/** @deprecated Use import from `noble/hashes/utils` module */
-export declare const aexists: typeof ae;
-/** @deprecated Use import from `noble/hashes/utils` module */
-export declare const anumber: typeof an;
-/** @deprecated Use import from `noble/hashes/utils` module */
-export declare const aoutput: typeof ao;
-/** @deprecated Use import from `noble/hashes/utils` module */
-export type Hash = H;
-//# sourceMappingURL=_assert.d.ts.map

package/node_modules/@noble/hashes/_assert.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"_assert.d.ts","sourceRoot":"","sources":["src/_assert.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,MAAM,IAAI,EAAE,EACZ,OAAO,IAAI,EAAE,EACb,OAAO,IAAI,EAAE,EACb,OAAO,IAAI,EAAE,EACb,KAAK,KAAK,IAAI,CAAC,EAChB,MAAM,YAAY,CAAC;AACpB,8DAA8D;AAC9D,eAAO,MAAM,MAAM,EAAE,OAAO,EAAO,CAAC;AACpC,8DAA8D;AAC9D,eAAO,MAAM,OAAO,EAAE,OAAO,EAAO,CAAC;AACrC,8DAA8D;AAC9D,eAAO,MAAM,OAAO,EAAE,OAAO,EAAO,CAAC;AACrC,8DAA8D;AAC9D,eAAO,MAAM,OAAO,EAAE,OAAO,EAAO,CAAC;AACrC,8DAA8D;AAC9D,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC"}

package/node_modules/@noble/hashes/_assert.js

@@ -1,18 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.aoutput = exports.anumber = exports.aexists = exports.abytes = void 0;
-/**
- * Internal assertion helpers.
- * @module
- * @deprecated
- */
-const utils_ts_1 = require("./utils.js");
-/** @deprecated Use import from `noble/hashes/utils` module */
-exports.abytes = utils_ts_1.abytes;
-/** @deprecated Use import from `noble/hashes/utils` module */
-exports.aexists = utils_ts_1.aexists;
-/** @deprecated Use import from `noble/hashes/utils` module */
-exports.anumber = utils_ts_1.anumber;
-/** @deprecated Use import from `noble/hashes/utils` module */
-exports.aoutput = utils_ts_1.aoutput;
-//# sourceMappingURL=_assert.js.map

package/node_modules/@noble/hashes/_assert.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_assert.js","sourceRoot":"","sources":["src/_assert.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH,yCAMoB;AACpB,8DAA8D;AACjD,QAAA,MAAM,GAAc,iBAAE,CAAC;AACpC,8DAA8D;AACjD,QAAA,OAAO,GAAc,kBAAE,CAAC;AACrC,8DAA8D;AACjD,QAAA,OAAO,GAAc,kBAAE,CAAC;AACrC,8DAA8D;AACjD,QAAA,OAAO,GAAc,kBAAE,CAAC"}

package/node_modules/@noble/hashes/_blake.d.ts

@@ -1,14 +0,0 @@
-/**
- * Internal blake variable.
- * For BLAKE2b, the two extra permutations for rounds 10 and 11 are SIGMA[10..11] = SIGMA[0..1].
- */
-export declare const BSIGMA: Uint8Array;
-export type Num4 = {
-    a: number;
-    b: number;
-    c: number;
-    d: number;
-};
-export declare function G1s(a: number, b: number, c: number, d: number, x: number): Num4;
-export declare function G2s(a: number, b: number, c: number, d: number, x: number): Num4;
-//# sourceMappingURL=_blake.d.ts.map

package/node_modules/@noble/hashes/_blake.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"_blake.d.ts","sourceRoot":"","sources":["src/_blake.ts"],"names":[],"mappings":"AAMA;;;GAGG;AAEH,eAAO,MAAM,MAAM,EAAE,UAkBnB,CAAC;AAGH,MAAM,MAAM,IAAI,GAAG;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAC;CAAE,CAAC;AAGnE,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAM/E;AAED,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAM/E"}

package/node_modules/@noble/hashes/_blake.js

@@ -1,50 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BSIGMA = void 0;
-exports.G1s = G1s;
-exports.G2s = G2s;
-/**
- * Internal helpers for blake hash.
- * @module
- */
-const utils_ts_1 = require("./utils.js");
-/**
- * Internal blake variable.
- * For BLAKE2b, the two extra permutations for rounds 10 and 11 are SIGMA[10..11] = SIGMA[0..1].
- */
-// prettier-ignore
-exports.BSIGMA = Uint8Array.from([
-    0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,
-    14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3,
-    11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4,
-    7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8,
-    9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13,
-    2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9,
-    12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11,
-    13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10,
-    6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5,
-    10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13, 0,
-    0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,
-    14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3,
-    // Blake1, unused in others
-    11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4,
-    7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8,
-    9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13,
-    2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9,
-]);
-// Mixing function G splitted in two halfs
-function G1s(a, b, c, d, x) {
-    a = (a + b + x) | 0;
-    d = (0, utils_ts_1.rotr)(d ^ a, 16);
-    c = (c + d) | 0;
-    b = (0, utils_ts_1.rotr)(b ^ c, 12);
-    return { a, b, c, d };
-}
-function G2s(a, b, c, d, x) {
-    a = (a + b + x) | 0;
-    d = (0, utils_ts_1.rotr)(d ^ a, 8);
-    c = (c + d) | 0;
-    b = (0, utils_ts_1.rotr)(b ^ c, 7);
-    return { a, b, c, d };
-}
-//# sourceMappingURL=_blake.js.map

package/node_modules/@noble/hashes/_blake.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_blake.js","sourceRoot":"","sources":["src/_blake.ts"],"names":[],"mappings":";;;AAmCA,kBAMC;AAED,kBAMC;AAjDD;;;GAGG;AACH,yCAAkC;AAElC;;;GAGG;AACH,kBAAkB;AACL,QAAA,MAAM,GAA+B,UAAU,CAAC,IAAI,CAAC;IAChE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;IACpD,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACpD,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACpD,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;IACpD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IACpD,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;IACpD,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;IACpD,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IACpD,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;IACpD,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACpD,2BAA2B;IAC3B,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACpD,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;IACpD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;CACrD,CAAC,CAAC;AAKH,0CAA0C;AAC1C,SAAgB,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,CAAS;IACvE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,GAAG,IAAA,eAAI,EAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACpB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,GAAG,IAAA,eAAI,EAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACpB,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AACxB,CAAC;AAED,SAAgB,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,CAAS,EAAE,CAAS;IACvE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,GAAG,IAAA,eAAI,EAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,GAAG,IAAA,eAAI,EAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnB,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AACxB,CAAC"}