@dynamic-labs-sdk/solana 1.17.0 → 1.18.0

package/dist/index.esm.js

@@ -1,8 +1,8 @@
-import { a as NotSolanaProviderError, c as isSolanaWalletAccount, d as registerSolanaNetworkProviderBuilder, f as name, i as isSolanaGasSponsorshipEnabled, l as isVersionedTransaction, n as solanaExecuteSwapTransaction, o as isSolanaWalletProvider, p as version, r as signAndSendTransaction, s as solanaConfirmTransaction, t as solanaTransferAmount, u as getSolanaConnection } from "./solanaTransferAmount-BUwYKL-l.esm.js";
+import { a as NotSolanaProviderError, c as isSolanaWalletAccount, d as registerSolanaNetworkProviderBuilder, f as name, i as isSolanaGasSponsorshipEnabled, l as isVersionedTransaction, n as solanaExecuteSwapTransaction, o as isSolanaWalletProvider, p as version, r as signAndSendTransaction, s as solanaConfirmTransaction, t as solanaTransferAmount, u as getSolanaConnection } from "./solanaTransferAmount-DX35Wg5S.esm.js";
 import { t as assertBufferAvailable } from "./assertBufferAvailable-b4xOlERy.esm.js";
-import { n as SponsorTransactionError, t as addWaasSolanaExtension } from "./addWaasSolanaExtension-CA2poieU.esm.js";
-import "./createWalletProviderFromSolanaStandardWallet-DmmM6Suh.esm.js";
-import { t as addSolanaWalletStandardExtension } from "./addSolanaWalletStandardExtension-jxPULYI0.esm.js";
+import { n as SponsorTransactionError, t as addWaasSolanaExtension } from "./addWaasSolanaExtension-CzXKrlYb.esm.js";
+import "./createWalletProviderFromSolanaStandardWallet-CKgaSEl8.esm.js";
+import { t as addSolanaWalletStandardExtension } from "./addSolanaWalletStandardExtension-BGeu9CyF.esm.js";
 import { assertPackageVersion } from "@dynamic-labs-sdk/assert-package-version";
 import { MethodNotImplementedError, WalletProviderPriority, assertDefined, createApiClient, createDeferredPromise, createRuntimeServiceAccessKey, createStorageKeySchema, emitEvent, formatWalletProviderGroupKey, formatWalletProviderKey, getActiveNetworkIdFromLastKnownRegistry, getBuffer, getCore, getDefaultClient, getNetworkProviders, getWalletProviderFromWalletAccount, getWalletProviderRegistry, hasExtension, randomString, registerExtension } from "@dynamic-labs-sdk/client/core";
 import { BaseError, FeeEstimationFailedError, InvalidParamError, SimulationFailedError, getActiveNetworkData, getDefaultClient as getDefaultClient$1, onEvent, onceEvent } from "@dynamic-labs-sdk/client";
@@ -331,18 +331,368 @@ const broadcastPhantomEvent = ({ args, event }, client) => {
 	});
 };
 
+//#endregion
+//#region src/phantomRedirect/errors/PhantomInvalidEncryptionPublicKeyError.ts
+var PhantomInvalidEncryptionPublicKeyError = class extends BaseError {
+	constructor() {
+		super({
+			cause: null,
+			code: "phantom_invalid_encryption_public_key_error",
+			docsUrl: null,
+			name: "PhantomInvalidEncryptionPublicKeyError",
+			shortMessage: "Invalid Phantom encryption public key (low-order point rejected)."
+		});
+	}
+};
+
 //#endregion
 //#region src/phantomRedirect/utils/crypto/createNaClSharedSecret/createNaClSharedSecret.ts
 /**
+* The length, in bytes, of a Curve25519 public key.
+*/
+const CURVE25519_PUBLIC_KEY_LENGTH = 32;
+/**
+* The complete set of known Curve25519 low-order point encodings.
+*
+* A malicious Phantom redirect can supply one of these as
+* `phantom_encryption_public_key`. X25519 with a low-order base point produces
+* a small, universally-known shared secret (independent of our secret key),
+* letting an attacker decrypt/forge the connect response and overwrite the
+* connected wallet address. We reject them before deriving the box secret.
+*
+* Source: RFC 7748 / the canonical list of the 8 Curve25519 low-order points.
+*/
+const CURVE25519_LOW_ORDER_POINTS = [
+	new Uint8Array([
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0
+	]),
+	new Uint8Array([
+		1,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0
+	]),
+	new Uint8Array([
+		224,
+		235,
+		122,
+		124,
+		59,
+		65,
+		184,
+		174,
+		22,
+		86,
+		227,
+		250,
+		241,
+		159,
+		196,
+		106,
+		218,
+		9,
+		141,
+		235,
+		156,
+		50,
+		177,
+		253,
+		134,
+		98,
+		5,
+		22,
+		95,
+		73,
+		184,
+		0
+	]),
+	new Uint8Array([
+		95,
+		156,
+		149,
+		188,
+		163,
+		80,
+		140,
+		36,
+		177,
+		208,
+		177,
+		85,
+		156,
+		131,
+		239,
+		91,
+		4,
+		68,
+		92,
+		196,
+		88,
+		28,
+		142,
+		134,
+		216,
+		34,
+		78,
+		221,
+		208,
+		159,
+		17,
+		87
+	]),
+	new Uint8Array([
+		236,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		127
+	]),
+	new Uint8Array([
+		237,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		127
+	]),
+	new Uint8Array([
+		238,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		127
+	]),
+	new Uint8Array([
+		205,
+		235,
+		122,
+		124,
+		59,
+		65,
+		184,
+		174,
+		22,
+		86,
+		227,
+		250,
+		241,
+		159,
+		196,
+		106,
+		218,
+		9,
+		141,
+		235,
+		156,
+		50,
+		177,
+		253,
+		134,
+		98,
+		5,
+		22,
+		95,
+		73,
+		184,
+		128
+	])
+];
+/**
+* Constant-time equality check for two byte arrays. No early-exit branches so
+* comparison duration does not leak the content being compared.
+*/
+const bytesEqual = ({ a, b }) => {
+	let diff = a.length ^ b.length;
+	const length = Math.min(a.length, b.length);
+	for (let i = 0; i < length; i += 1) diff |= a[i] ^ b[i];
+	return diff === 0;
+};
+/**
+* Validates that a decoded Curve25519 public key is safe to use for X25519 key
+* agreement, rejecting low-order / contributory points.
+*
+* Defense in depth:
+*   1. Enforce the canonical 32-byte length.
+*   2. Reject the known small set of low-order point encodings (blocklist).
+*   3. Reject any input whose raw X25519 output (`nacl.scalarMult`) is all-zero,
+*      which catches low-order inputs regardless of encoding.
+*
+* @param params.theirPublicKey - The decoded (32-byte) peer public key
+* @param params.ourSecretKey - The decoded (32-byte) local secret key
+* @throws {PhantomInvalidEncryptionPublicKeyError} If the key is invalid or low-order
+*/
+const assertValidCurve25519PublicKey = ({ theirPublicKey, ourSecretKey }) => {
+	if (theirPublicKey.length !== CURVE25519_PUBLIC_KEY_LENGTH) throw new PhantomInvalidEncryptionPublicKeyError();
+	for (const lowOrderPoint of CURVE25519_LOW_ORDER_POINTS) if (bytesEqual({
+		a: theirPublicKey,
+		b: lowOrderPoint
+	})) throw new PhantomInvalidEncryptionPublicKeyError();
+	const scalarMultOutput = nacl.scalarMult(ourSecretKey, theirPublicKey);
+	if (bytesEqual({
+		a: scalarMultOutput,
+		b: new Uint8Array(scalarMultOutput.length)
+	})) throw new PhantomInvalidEncryptionPublicKeyError();
+};
+/**
 * Creates a shared secret for NaCl box encryption using our secret key and their public key.
 *
+* Rejects low-order / invalid Curve25519 public keys before deriving the shared
+* secret, preventing an attacker from forcing the X25519 output to a known
+* constant via a malicious `phantom_encryption_public_key`.
+*
 * @param params.ourSecretKey - Our base58-encoded secret key
 * @param params.theirPublicKey - Their base58-encoded public key
 * @returns The base58-encoded shared secret
+* @throws {PhantomInvalidEncryptionPublicKeyError} If their public key is invalid or a low-order point
 * @notInstrumented
 */
 const createNaClSharedSecret = ({ ourSecretKey, theirPublicKey }) => {
-	const sharedSecret = nacl.box.before(bs58.decode(theirPublicKey), bs58.decode(ourSecretKey));
+	const theirPublicKeyBytes = bs58.decode(theirPublicKey);
+	const ourSecretKeyBytes = bs58.decode(ourSecretKey);
+	assertValidCurve25519PublicKey({
+		ourSecretKey: ourSecretKeyBytes,
+		theirPublicKey: theirPublicKeyBytes
+	});
+	const sharedSecret = nacl.box.before(theirPublicKeyBytes, ourSecretKeyBytes);
 	return bs58.encode(sharedSecret);
 };