@dynamic-labs-sdk/solana 1.17.1 → 1.18.0

package/dist/index.cjs

@@ -1,9 +1,9 @@
 const require_chunk = require('./chunk-CbDLau6x.cjs');
-const require_solanaTransferAmount = require('./solanaTransferAmount-CgovN61n.cjs');
+const require_solanaTransferAmount = require('./solanaTransferAmount-vxHlmm9z.cjs');
 const require_assertBufferAvailable = require('./assertBufferAvailable-BPIt9Mmr.cjs');
-const require_addWaasSolanaExtension = require('./addWaasSolanaExtension-av0ucGCH.cjs');
-require('./createWalletProviderFromSolanaStandardWallet-CN-opURQ.cjs');
-const require_addSolanaWalletStandardExtension = require('./addSolanaWalletStandardExtension-Dtf-b3fq.cjs');
+const require_addWaasSolanaExtension = require('./addWaasSolanaExtension-DIOlU-AN.cjs');
+require('./createWalletProviderFromSolanaStandardWallet-Dd2TVV2b.cjs');
+const require_addSolanaWalletStandardExtension = require('./addSolanaWalletStandardExtension-DjnLEEh4.cjs');
 let _dynamic_labs_sdk_assert_package_version = require("@dynamic-labs-sdk/assert-package-version");
 let _dynamic_labs_sdk_client_core = require("@dynamic-labs-sdk/client/core");
 let _dynamic_labs_sdk_client = require("@dynamic-labs-sdk/client");
@@ -335,18 +335,368 @@ const broadcastPhantomEvent = ({ args, event }, client) => {
 	});
 };
 
+//#endregion
+//#region src/phantomRedirect/errors/PhantomInvalidEncryptionPublicKeyError.ts
+var PhantomInvalidEncryptionPublicKeyError = class extends _dynamic_labs_sdk_client.BaseError {
+	constructor() {
+		super({
+			cause: null,
+			code: "phantom_invalid_encryption_public_key_error",
+			docsUrl: null,
+			name: "PhantomInvalidEncryptionPublicKeyError",
+			shortMessage: "Invalid Phantom encryption public key (low-order point rejected)."
+		});
+	}
+};
+
 //#endregion
 //#region src/phantomRedirect/utils/crypto/createNaClSharedSecret/createNaClSharedSecret.ts
 /**
+* The length, in bytes, of a Curve25519 public key.
+*/
+const CURVE25519_PUBLIC_KEY_LENGTH = 32;
+/**
+* The complete set of known Curve25519 low-order point encodings.
+*
+* A malicious Phantom redirect can supply one of these as
+* `phantom_encryption_public_key`. X25519 with a low-order base point produces
+* a small, universally-known shared secret (independent of our secret key),
+* letting an attacker decrypt/forge the connect response and overwrite the
+* connected wallet address. We reject them before deriving the box secret.
+*
+* Source: RFC 7748 / the canonical list of the 8 Curve25519 low-order points.
+*/
+const CURVE25519_LOW_ORDER_POINTS = [
+	new Uint8Array([
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0
+	]),
+	new Uint8Array([
+		1,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0,
+		0
+	]),
+	new Uint8Array([
+		224,
+		235,
+		122,
+		124,
+		59,
+		65,
+		184,
+		174,
+		22,
+		86,
+		227,
+		250,
+		241,
+		159,
+		196,
+		106,
+		218,
+		9,
+		141,
+		235,
+		156,
+		50,
+		177,
+		253,
+		134,
+		98,
+		5,
+		22,
+		95,
+		73,
+		184,
+		0
+	]),
+	new Uint8Array([
+		95,
+		156,
+		149,
+		188,
+		163,
+		80,
+		140,
+		36,
+		177,
+		208,
+		177,
+		85,
+		156,
+		131,
+		239,
+		91,
+		4,
+		68,
+		92,
+		196,
+		88,
+		28,
+		142,
+		134,
+		216,
+		34,
+		78,
+		221,
+		208,
+		159,
+		17,
+		87
+	]),
+	new Uint8Array([
+		236,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		127
+	]),
+	new Uint8Array([
+		237,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		127
+	]),
+	new Uint8Array([
+		238,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		255,
+		127
+	]),
+	new Uint8Array([
+		205,
+		235,
+		122,
+		124,
+		59,
+		65,
+		184,
+		174,
+		22,
+		86,
+		227,
+		250,
+		241,
+		159,
+		196,
+		106,
+		218,
+		9,
+		141,
+		235,
+		156,
+		50,
+		177,
+		253,
+		134,
+		98,
+		5,
+		22,
+		95,
+		73,
+		184,
+		128
+	])
+];
+/**
+* Constant-time equality check for two byte arrays. No early-exit branches so
+* comparison duration does not leak the content being compared.
+*/
+const bytesEqual = ({ a, b }) => {
+	let diff = a.length ^ b.length;
+	const length = Math.min(a.length, b.length);
+	for (let i = 0; i < length; i += 1) diff |= a[i] ^ b[i];
+	return diff === 0;
+};
+/**
+* Validates that a decoded Curve25519 public key is safe to use for X25519 key
+* agreement, rejecting low-order / contributory points.
+*
+* Defense in depth:
+*   1. Enforce the canonical 32-byte length.
+*   2. Reject the known small set of low-order point encodings (blocklist).
+*   3. Reject any input whose raw X25519 output (`nacl.scalarMult`) is all-zero,
+*      which catches low-order inputs regardless of encoding.
+*
+* @param params.theirPublicKey - The decoded (32-byte) peer public key
+* @param params.ourSecretKey - The decoded (32-byte) local secret key
+* @throws {PhantomInvalidEncryptionPublicKeyError} If the key is invalid or low-order
+*/
+const assertValidCurve25519PublicKey = ({ theirPublicKey, ourSecretKey }) => {
+	if (theirPublicKey.length !== CURVE25519_PUBLIC_KEY_LENGTH) throw new PhantomInvalidEncryptionPublicKeyError();
+	for (const lowOrderPoint of CURVE25519_LOW_ORDER_POINTS) if (bytesEqual({
+		a: theirPublicKey,
+		b: lowOrderPoint
+	})) throw new PhantomInvalidEncryptionPublicKeyError();
+	const scalarMultOutput = tweetnacl.default.scalarMult(ourSecretKey, theirPublicKey);
+	if (bytesEqual({
+		a: scalarMultOutput,
+		b: new Uint8Array(scalarMultOutput.length)
+	})) throw new PhantomInvalidEncryptionPublicKeyError();
+};
+/**
 * Creates a shared secret for NaCl box encryption using our secret key and their public key.
 *
+* Rejects low-order / invalid Curve25519 public keys before deriving the shared
+* secret, preventing an attacker from forcing the X25519 output to a known
+* constant via a malicious `phantom_encryption_public_key`.
+*
 * @param params.ourSecretKey - Our base58-encoded secret key
 * @param params.theirPublicKey - Their base58-encoded public key
 * @returns The base58-encoded shared secret
+* @throws {PhantomInvalidEncryptionPublicKeyError} If their public key is invalid or a low-order point
 * @notInstrumented
 */
 const createNaClSharedSecret = ({ ourSecretKey, theirPublicKey }) => {
-	const sharedSecret = tweetnacl.default.box.before(bs58.default.decode(theirPublicKey), bs58.default.decode(ourSecretKey));
+	const theirPublicKeyBytes = bs58.default.decode(theirPublicKey);
+	const ourSecretKeyBytes = bs58.default.decode(ourSecretKey);
+	assertValidCurve25519PublicKey({
+		ourSecretKey: ourSecretKeyBytes,
+		theirPublicKey: theirPublicKeyBytes
+	});
+	const sharedSecret = tweetnacl.default.box.before(theirPublicKeyBytes, ourSecretKeyBytes);
 	return bs58.default.encode(sharedSecret);
 };