@hide-protocol/wasm 0.5.0

package/LICENSE

@@ -0,0 +1,17 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
+   The full license text is available at the URL above.

package/README.md

@@ -0,0 +1,101 @@
+# @hide-protocol/wasm
+
+HIDE in the browser, compiled to WebAssembly from the same Rust core the CLI
+and desktop application use.
+
+> **Experimental and unaudited.** Do not protect data you cannot afford to lose
+> or expose. A successful decryption proves the data was not altered; it does
+> **not** prove who sent it.
+>
+> A browser is also a weaker place to hold a key than a desktop: any script on
+> the page shares the heap, so an XSS bug is equivalent to key theft. For keys
+> that matter, prefer the CLI or the desktop application.
+
+## Install
+
+```sh
+npm install @hide-protocol/wasm
+```
+
+## Use
+
+```js
+import init, { SecretKey, encrypt, decrypt } from "@hide-protocol/wasm";
+
+await init();
+
+const secret = SecretKey.generate();
+const publicKey = secret.publicKey();
+
+const box = encrypt(new TextEncoder().encode("hello"), publicKey, "note.txt", null);
+const opened = decrypt(box, secret);
+console.log(new TextDecoder().decode(opened.data));
+```
+
+`encrypt` takes recipients as concatenated public keys, so encrypting to
+several people is one buffer:
+
+```js
+const recipients = new Uint8Array(alice.length + bob.length);
+recipients.set(alice, 0);
+recipients.set(bob, alice.length);
+const box = encrypt(payload, recipients, null, null);
+```
+
+## Storing a key
+
+```js
+const sealed = secret.protect("a long passphrase");   // Argon2id + ChaCha20-Poly1305
+const reopened = SecretKey.load(sealed, "a long passphrase");
+```
+
+A forgotten passphrase cannot be recovered: there is no escrow and no reset.
+
+## Signing
+
+```js
+import { SigningIdentity, verify } from "@hide-protocol/wasm";
+
+const keyFile = SigningIdentity.generate("a long passphrase"); // store this
+const identity = SigningIdentity.load(keyFile, "a long passphrase");
+
+const context = new TextEncoder().encode("myapp/invoice");
+const signature = identity.sign(context, payload);
+verify(identity.publicKey(), context, payload, signature); // throws if it fails
+```
+
+`context` separates uses of one identity, so a signature made for one purpose
+cannot be replayed as another. Never let a remote party choose it. `verify`
+returns nothing and throws on failure, so a forgotten check cannot read as a
+pass.
+
+A key file written before signatures existed carries no signing seed, and
+`SigningIdentity.load` throws rather than silently downgrading it.
+
+## Proving possession
+
+A detached signature proves possession at some point, to nobody in particular,
+and can be replayed. A challenge binds a nonce, an audience and an expiry:
+
+```js
+import { newChallenge, SpentNonces } from "@hide-protocol/wasm";
+
+const now = BigInt(Math.floor(Date.now() / 1000));
+const challenge = newChallenge("app.example", now, 60n);
+const answer = identity.answer(challenge);
+
+const spent = new SpentNonces();            // must outlive a single request
+spent.accept(challenge, answer, identity.publicKey(), now);
+spent.accept(challenge, answer, identity.publicKey(), now); // throws "replayed"
+```
+
+Only the verifier can catch a replay: a replayed answer is a genuine signature
+and nothing about it is invalid on its own.
+
+## What it does not do
+
+The container is verified as intact, but nothing binds it to a person. Any
+filename it carries is attacker-controlled: never use it to build a path, and
+escape it before putting it in the DOM.
+
+Full protocol limits: [SECURITY.md](https://github.com/hide-protocol/hide/blob/main/SECURITY.md).

package/hide_wasm.d.ts

@@ -0,0 +1,190 @@
+/* tslint:disable */
+/* eslint-disable */
+
+/**
+ * A verified payload. Receiving this means it authenticated.
+ */
+export class Decrypted {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    readonly data: Uint8Array;
+    readonly filename: string | undefined;
+    readonly mediaType: string | undefined;
+}
+
+/**
+ * A secret key. The bytes never cross into JavaScript.
+ */
+export class SecretKey {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Generates a key pair using the browser's CSPRNG.
+     */
+    static generate(): SecretKey;
+    /**
+     * Loads a key file. Pass the passphrase for a protected key; a protected
+     * key without one fails rather than guessing.
+     */
+    static load(data: Uint8Array, passphrase?: string | null): SecretKey;
+    /**
+     * Seals this key with a passphrase, for storage. A forgotten passphrase
+     * cannot be recovered.
+     */
+    protect(passphrase: string): Uint8Array;
+    publicKey(): Uint8Array;
+}
+
+/**
+ * A signing key. The seed never crosses into JavaScript.
+ */
+export class SigningIdentity {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Answers a challenge, proving possession to whoever issued it.
+     */
+    answer(challenge: Uint8Array): Uint8Array;
+    /**
+     * Creates an identity and returns the sealed key file to store. One seed
+     * backs both encryption and signing, so there is a single thing to back
+     * up. A forgotten passphrase cannot be recovered.
+     */
+    static generate(passphrase: string): Uint8Array;
+    /**
+     * Opens a key file for signing. A file written before signatures existed
+     * carries no signing seed, and fails rather than being downgraded.
+     */
+    static load(data: Uint8Array, passphrase?: string | null): SigningIdentity;
+    /**
+     * The shareable verifying key, for others to check signatures with.
+     */
+    publicKey(): Uint8Array;
+    /**
+     * Signs `message` under `context`. The context separates uses of one
+     * identity; never let a remote party choose it.
+     */
+    sign(context: Uint8Array, message: Uint8Array): Uint8Array;
+}
+
+/**
+ * The verifier's record of answered challenges.
+ *
+ * Replay can only be caught here: a replayed answer is a genuine signature
+ * and nothing about it is invalid on its own. This must therefore outlive a
+ * single request.
+ */
+export class SpentNonces {
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Accepts an answer exactly once. Throws `"replayed"` the second time,
+     * `"expired"` after the window, and a verification failure otherwise.
+     */
+    accept(challenge: Uint8Array, signature: Uint8Array, public_key: Uint8Array, now: bigint): void;
+    constructor();
+    readonly size: number;
+}
+
+export function armorPublicKey(public_key: Uint8Array): string;
+
+export function dearmorPublicKey(text: string): Uint8Array;
+
+/**
+ * Decrypts and verifies. Nothing is returned unless the whole payload
+ * authenticates.
+ *
+ * The filename is attacker-controlled: never use it to build a path, and
+ * escape it before putting it in the DOM.
+ */
+export function decrypt(container: Uint8Array, secret: SecretKey): Decrypted;
+
+/**
+ * Encrypts for 1..64 recipients, passed as their concatenated public keys.
+ */
+export function encrypt(plaintext: Uint8Array, recipients: Uint8Array, filename?: string | null, media_type?: string | null): Uint8Array;
+
+/**
+ * Reports `"raw"` or `"protected"` without needing the passphrase.
+ */
+export function inspectKey(data: Uint8Array): string;
+
+/**
+ * Creates a challenge for a prover to answer.
+ *
+ * A detached signature proves possession at some point, to nobody in
+ * particular, and can be replayed. A challenge binds a random nonce, an
+ * audience and an expiry, so an answer is good once, here, now.
+ */
+export function newChallenge(audience: string, now: bigint, valid_for: bigint): Uint8Array;
+
+/**
+ * Throws unless both halves verify. Returns nothing on success rather than a
+ * boolean, so a caller that forgets to check cannot read failure as a pass.
+ */
+export function verify(public_key: Uint8Array, context: Uint8Array, message: Uint8Array, signature: Uint8Array): void;
+
+export function version(): string;
+
+export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
+
+export interface InitOutput {
+    readonly memory: WebAssembly.Memory;
+    readonly __wbg_decrypted_free: (a: number, b: number) => void;
+    readonly __wbg_secretkey_free: (a: number, b: number) => void;
+    readonly __wbg_signingidentity_free: (a: number, b: number) => void;
+    readonly __wbg_spentnonces_free: (a: number, b: number) => void;
+    readonly armorPublicKey: (a: number, b: number, c: number) => void;
+    readonly dearmorPublicKey: (a: number, b: number, c: number) => void;
+    readonly decrypt: (a: number, b: number, c: number, d: number) => void;
+    readonly decrypted_data: (a: number, b: number) => void;
+    readonly decrypted_filename: (a: number, b: number) => void;
+    readonly decrypted_mediaType: (a: number, b: number) => void;
+    readonly encrypt: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
+    readonly inspectKey: (a: number, b: number, c: number) => void;
+    readonly newChallenge: (a: number, b: number, c: number, d: bigint, e: bigint) => void;
+    readonly secretkey_generate: (a: number) => void;
+    readonly secretkey_load: (a: number, b: number, c: number, d: number, e: number) => void;
+    readonly secretkey_protect: (a: number, b: number, c: number, d: number) => void;
+    readonly secretkey_publicKey: (a: number, b: number) => void;
+    readonly signingidentity_answer: (a: number, b: number, c: number, d: number) => void;
+    readonly signingidentity_generate: (a: number, b: number, c: number) => void;
+    readonly signingidentity_load: (a: number, b: number, c: number, d: number, e: number) => void;
+    readonly signingidentity_publicKey: (a: number, b: number) => void;
+    readonly signingidentity_sign: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+    readonly spentnonces_accept: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: bigint) => void;
+    readonly spentnonces_new: () => number;
+    readonly spentnonces_size: (a: number) => number;
+    readonly verify: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
+    readonly version: (a: number) => void;
+    readonly __wbindgen_export: (a: number) => void;
+    readonly __wbindgen_add_to_stack_pointer: (a: number) => number;
+    readonly __wbindgen_export2: (a: number, b: number) => number;
+    readonly __wbindgen_export3: (a: number, b: number, c: number) => void;
+    readonly __wbindgen_export4: (a: number, b: number, c: number, d: number) => number;
+}
+
+export type SyncInitInput = BufferSource | WebAssembly.Module;
+
+/**
+ * Instantiates the given `module`, which can either be bytes or
+ * a precompiled `WebAssembly.Module`.
+ *
+ * @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
+ *
+ * @returns {InitOutput}
+ */
+export function initSync(module: { module: SyncInitInput } | SyncInitInput): InitOutput;
+
+/**
+ * If `module_or_path` is {RequestInfo} or {URL}, makes a request and
+ * for everything else, calls `WebAssembly.instantiate` directly.
+ *
+ * @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
+ *
+ * @returns {Promise<InitOutput>}
+ */
+export default function __wbg_init (module_or_path?: { module_or_path: InitInput | Promise<InitInput> } | InitInput | Promise<InitInput>): Promise<InitOutput>;

package/hide_wasm.js

@@ -0,0 +1,904 @@
+/* @ts-self-types="./hide_wasm.d.ts" */
+
+/**
+ * A verified payload. Receiving this means it authenticated.
+ */
+export class Decrypted {
+    static __wrap(ptr) {
+        const obj = Object.create(Decrypted.prototype);
+        obj.__wbg_ptr = ptr;
+        DecryptedFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        DecryptedFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_decrypted_free(ptr, 0);
+    }
+    /**
+     * @returns {Uint8Array}
+     */
+    get data() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.decrypted_data(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var v1 = getArrayU8FromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export3(r0, r1 * 1, 1);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * @returns {string | undefined}
+     */
+    get filename() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.decrypted_filename(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            let v1;
+            if (r0 !== 0) {
+                v1 = getStringFromWasm0(r0, r1);
+                wasm.__wbindgen_export3(r0, r1 * 1, 1);
+            }
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * @returns {string | undefined}
+     */
+    get mediaType() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.decrypted_mediaType(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            let v1;
+            if (r0 !== 0) {
+                v1 = getStringFromWasm0(r0, r1);
+                wasm.__wbindgen_export3(r0, r1 * 1, 1);
+            }
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) Decrypted.prototype[Symbol.dispose] = Decrypted.prototype.free;
+
+/**
+ * A secret key. The bytes never cross into JavaScript.
+ */
+export class SecretKey {
+    static __wrap(ptr) {
+        const obj = Object.create(SecretKey.prototype);
+        obj.__wbg_ptr = ptr;
+        SecretKeyFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        SecretKeyFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_secretkey_free(ptr, 0);
+    }
+    /**
+     * Generates a key pair using the browser's CSPRNG.
+     * @returns {SecretKey}
+     */
+    static generate() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.secretkey_generate(retptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return SecretKey.__wrap(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * Loads a key file. Pass the passphrase for a protected key; a protected
+     * key without one fails rather than guessing.
+     * @param {Uint8Array} data
+     * @param {string | null} [passphrase]
+     * @returns {SecretKey}
+     */
+    static load(data, passphrase) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            const ptr0 = passArray8ToWasm0(data, wasm.__wbindgen_export2);
+            const len0 = WASM_VECTOR_LEN;
+            var ptr1 = isLikeNone(passphrase) ? 0 : passStringToWasm0(passphrase, wasm.__wbindgen_export2, wasm.__wbindgen_export4);
+            var len1 = WASM_VECTOR_LEN;
+            wasm.secretkey_load(retptr, ptr0, len0, ptr1, len1);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return SecretKey.__wrap(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * Seals this key with a passphrase, for storage. A forgotten passphrase
+     * cannot be recovered.
+     * @param {string} passphrase
+     * @returns {Uint8Array}
+     */
+    protect(passphrase) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            const ptr0 = passStringToWasm0(passphrase, wasm.__wbindgen_export2, wasm.__wbindgen_export4);
+            const len0 = WASM_VECTOR_LEN;
+            wasm.secretkey_protect(retptr, this.__wbg_ptr, ptr0, len0);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            if (r3) {
+                throw takeObject(r2);
+            }
+            var v2 = getArrayU8FromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export3(r0, r1 * 1, 1);
+            return v2;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * @returns {Uint8Array}
+     */
+    publicKey() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.secretkey_publicKey(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            if (r3) {
+                throw takeObject(r2);
+            }
+            var v1 = getArrayU8FromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export3(r0, r1 * 1, 1);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) SecretKey.prototype[Symbol.dispose] = SecretKey.prototype.free;
+
+/**
+ * A signing key. The seed never crosses into JavaScript.
+ */
+export class SigningIdentity {
+    static __wrap(ptr) {
+        const obj = Object.create(SigningIdentity.prototype);
+        obj.__wbg_ptr = ptr;
+        SigningIdentityFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        SigningIdentityFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_signingidentity_free(ptr, 0);
+    }
+    /**
+     * Answers a challenge, proving possession to whoever issued it.
+     * @param {Uint8Array} challenge
+     * @returns {Uint8Array}
+     */
+    answer(challenge) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            const ptr0 = passArray8ToWasm0(challenge, wasm.__wbindgen_export2);
+            const len0 = WASM_VECTOR_LEN;
+            wasm.signingidentity_answer(retptr, this.__wbg_ptr, ptr0, len0);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            if (r3) {
+                throw takeObject(r2);
+            }
+            var v2 = getArrayU8FromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export3(r0, r1 * 1, 1);
+            return v2;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * Creates an identity and returns the sealed key file to store. One seed
+     * backs both encryption and signing, so there is a single thing to back
+     * up. A forgotten passphrase cannot be recovered.
+     * @param {string} passphrase
+     * @returns {Uint8Array}
+     */
+    static generate(passphrase) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            const ptr0 = passStringToWasm0(passphrase, wasm.__wbindgen_export2, wasm.__wbindgen_export4);
+            const len0 = WASM_VECTOR_LEN;
+            wasm.signingidentity_generate(retptr, ptr0, len0);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            if (r3) {
+                throw takeObject(r2);
+            }
+            var v2 = getArrayU8FromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export3(r0, r1 * 1, 1);
+            return v2;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * Opens a key file for signing. A file written before signatures existed
+     * carries no signing seed, and fails rather than being downgraded.
+     * @param {Uint8Array} data
+     * @param {string | null} [passphrase]
+     * @returns {SigningIdentity}
+     */
+    static load(data, passphrase) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            const ptr0 = passArray8ToWasm0(data, wasm.__wbindgen_export2);
+            const len0 = WASM_VECTOR_LEN;
+            var ptr1 = isLikeNone(passphrase) ? 0 : passStringToWasm0(passphrase, wasm.__wbindgen_export2, wasm.__wbindgen_export4);
+            var len1 = WASM_VECTOR_LEN;
+            wasm.signingidentity_load(retptr, ptr0, len0, ptr1, len1);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return SigningIdentity.__wrap(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * The shareable verifying key, for others to check signatures with.
+     * @returns {Uint8Array}
+     */
+    publicKey() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.signingidentity_publicKey(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var v1 = getArrayU8FromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export3(r0, r1 * 1, 1);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * Signs `message` under `context`. The context separates uses of one
+     * identity; never let a remote party choose it.
+     * @param {Uint8Array} context
+     * @param {Uint8Array} message
+     * @returns {Uint8Array}
+     */
+    sign(context, message) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            const ptr0 = passArray8ToWasm0(context, wasm.__wbindgen_export2);
+            const len0 = WASM_VECTOR_LEN;
+            const ptr1 = passArray8ToWasm0(message, wasm.__wbindgen_export2);
+            const len1 = WASM_VECTOR_LEN;
+            wasm.signingidentity_sign(retptr, this.__wbg_ptr, ptr0, len0, ptr1, len1);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            if (r3) {
+                throw takeObject(r2);
+            }
+            var v3 = getArrayU8FromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export3(r0, r1 * 1, 1);
+            return v3;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) SigningIdentity.prototype[Symbol.dispose] = SigningIdentity.prototype.free;
+
+/**
+ * The verifier's record of answered challenges.
+ *
+ * Replay can only be caught here: a replayed answer is a genuine signature
+ * and nothing about it is invalid on its own. This must therefore outlive a
+ * single request.
+ */
+export class SpentNonces {
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        SpentNoncesFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_spentnonces_free(ptr, 0);
+    }
+    /**
+     * Accepts an answer exactly once. Throws `"replayed"` the second time,
+     * `"expired"` after the window, and a verification failure otherwise.
+     * @param {Uint8Array} challenge
+     * @param {Uint8Array} signature
+     * @param {Uint8Array} public_key
+     * @param {bigint} now
+     */
+    accept(challenge, signature, public_key, now) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            const ptr0 = passArray8ToWasm0(challenge, wasm.__wbindgen_export2);
+            const len0 = WASM_VECTOR_LEN;
+            const ptr1 = passArray8ToWasm0(signature, wasm.__wbindgen_export2);
+            const len1 = WASM_VECTOR_LEN;
+            const ptr2 = passArray8ToWasm0(public_key, wasm.__wbindgen_export2);
+            const len2 = WASM_VECTOR_LEN;
+            wasm.spentnonces_accept(retptr, this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2, now);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            if (r1) {
+                throw takeObject(r0);
+            }
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    constructor() {
+        const ret = wasm.spentnonces_new();
+        this.__wbg_ptr = ret;
+        SpentNoncesFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+    /**
+     * @returns {number}
+     */
+    get size() {
+        const ret = wasm.spentnonces_size(this.__wbg_ptr);
+        return ret >>> 0;
+    }
+}
+if (Symbol.dispose) SpentNonces.prototype[Symbol.dispose] = SpentNonces.prototype.free;
+
+/**
+ * @param {Uint8Array} public_key
+ * @returns {string}
+ */
+export function armorPublicKey(public_key) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passArray8ToWasm0(public_key, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.armorPublicKey(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+        var ptr2 = r0;
+        var len2 = r1;
+        if (r3) {
+            ptr2 = 0; len2 = 0;
+            throw takeObject(r2);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred3_0, deferred3_1, 1);
+    }
+}
+
+/**
+ * @param {string} text
+ * @returns {Uint8Array}
+ */
+export function dearmorPublicKey(text) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(text, wasm.__wbindgen_export2, wasm.__wbindgen_export4);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.dearmorPublicKey(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+        if (r3) {
+            throw takeObject(r2);
+        }
+        var v2 = getArrayU8FromWasm0(r0, r1).slice();
+        wasm.__wbindgen_export3(r0, r1 * 1, 1);
+        return v2;
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+
+/**
+ * Decrypts and verifies. Nothing is returned unless the whole payload
+ * authenticates.
+ *
+ * The filename is attacker-controlled: never use it to build a path, and
+ * escape it before putting it in the DOM.
+ * @param {Uint8Array} container
+ * @param {SecretKey} secret
+ * @returns {Decrypted}
+ */
+export function decrypt(container, secret) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passArray8ToWasm0(container, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        _assertClass(secret, SecretKey);
+        wasm.decrypt(retptr, ptr0, len0, secret.__wbg_ptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        if (r2) {
+            throw takeObject(r1);
+        }
+        return Decrypted.__wrap(r0);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+
+/**
+ * Encrypts for 1..64 recipients, passed as their concatenated public keys.
+ * @param {Uint8Array} plaintext
+ * @param {Uint8Array} recipients
+ * @param {string | null} [filename]
+ * @param {string | null} [media_type]
+ * @returns {Uint8Array}
+ */
+export function encrypt(plaintext, recipients, filename, media_type) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passArray8ToWasm0(plaintext, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passArray8ToWasm0(recipients, wasm.__wbindgen_export2);
+        const len1 = WASM_VECTOR_LEN;
+        var ptr2 = isLikeNone(filename) ? 0 : passStringToWasm0(filename, wasm.__wbindgen_export2, wasm.__wbindgen_export4);
+        var len2 = WASM_VECTOR_LEN;
+        var ptr3 = isLikeNone(media_type) ? 0 : passStringToWasm0(media_type, wasm.__wbindgen_export2, wasm.__wbindgen_export4);
+        var len3 = WASM_VECTOR_LEN;
+        wasm.encrypt(retptr, ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+        if (r3) {
+            throw takeObject(r2);
+        }
+        var v5 = getArrayU8FromWasm0(r0, r1).slice();
+        wasm.__wbindgen_export3(r0, r1 * 1, 1);
+        return v5;
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+
+/**
+ * Reports `"raw"` or `"protected"` without needing the passphrase.
+ * @param {Uint8Array} data
+ * @returns {string}
+ */
+export function inspectKey(data) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passArray8ToWasm0(data, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.inspectKey(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred2_0 = r0;
+        deferred2_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred2_0, deferred2_1, 1);
+    }
+}
+
+/**
+ * Creates a challenge for a prover to answer.
+ *
+ * A detached signature proves possession at some point, to nobody in
+ * particular, and can be replayed. A challenge binds a random nonce, an
+ * audience and an expiry, so an answer is good once, here, now.
+ * @param {string} audience
+ * @param {bigint} now
+ * @param {bigint} valid_for
+ * @returns {Uint8Array}
+ */
+export function newChallenge(audience, now, valid_for) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(audience, wasm.__wbindgen_export2, wasm.__wbindgen_export4);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.newChallenge(retptr, ptr0, len0, now, valid_for);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+        if (r3) {
+            throw takeObject(r2);
+        }
+        var v2 = getArrayU8FromWasm0(r0, r1).slice();
+        wasm.__wbindgen_export3(r0, r1 * 1, 1);
+        return v2;
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+
+/**
+ * Throws unless both halves verify. Returns nothing on success rather than a
+ * boolean, so a caller that forgets to check cannot read failure as a pass.
+ * @param {Uint8Array} public_key
+ * @param {Uint8Array} context
+ * @param {Uint8Array} message
+ * @param {Uint8Array} signature
+ */
+export function verify(public_key, context, message, signature) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passArray8ToWasm0(public_key, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passArray8ToWasm0(context, wasm.__wbindgen_export2);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passArray8ToWasm0(message, wasm.__wbindgen_export2);
+        const len2 = WASM_VECTOR_LEN;
+        const ptr3 = passArray8ToWasm0(signature, wasm.__wbindgen_export2);
+        const len3 = WASM_VECTOR_LEN;
+        wasm.verify(retptr, ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        if (r1) {
+            throw takeObject(r0);
+        }
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+
+/**
+ * @returns {string}
+ */
+export function version() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.version(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred1_0 = r0;
+        deferred1_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred1_0, deferred1_1, 1);
+    }
+}
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg___wbindgen_throw_5d9e815e6fdf150f: function(arg0, arg1) {
+            throw new Error(getStringFromWasm0(arg0, arg1));
+        },
+        __wbg_getRandomValues_436a51d0629d84e1: function() { return handleError(function (arg0, arg1) {
+            globalThis.crypto.getRandomValues(getArrayU8FromWasm0(arg0, arg1));
+        }, arguments); },
+        __wbindgen_generic_0000000000000001: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return addHeapObject(ret);
+        },
+        __wbindgen_object_drop_ref: function(arg0) {
+            takeObject(arg0);
+        },
+    };
+    return {
+        __proto__: null,
+        "./hide_wasm_bg.js": import0,
+    };
+}
+
+const DecryptedFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_decrypted_free(ptr, 1));
+const SecretKeyFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_secretkey_free(ptr, 1));
+const SigningIdentityFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_signingidentity_free(ptr, 1));
+const SpentNoncesFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_spentnonces_free(ptr, 1));
+
+function addHeapObject(obj) {
+    if (heap_next === heap.length) heap.push(heap.length + 1);
+    const idx = heap_next;
+    heap_next = heap[idx];
+
+    heap[idx] = obj;
+    return idx;
+}
+
+function _assertClass(instance, klass) {
+    if (!(instance instanceof klass)) {
+        throw new Error(`expected instance of ${klass.name}`);
+    }
+}
+
+function dropObject(idx) {
+    if (idx < 1028) return;
+    heap[idx] = heap_next;
+    heap_next = idx;
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    return decodeText(ptr >>> 0, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function getObject(idx) { return heap[idx]; }
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        wasm.__wbindgen_export(addHeapObject(e));
+    }
+}
+
+let heap = new Array(1024).fill(undefined);
+heap.push(undefined, null, true, false);
+
+let heap_next = heap.length;
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function passArray8ToWasm0(arg, malloc) {
+    const ptr = malloc(arg.length * 1, 1) >>> 0;
+    getUint8ArrayMemory0().set(arg, ptr / 1);
+    WASM_VECTOR_LEN = arg.length;
+    return ptr;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeObject(idx) {
+    const ret = getObject(idx);
+    dropObject(idx);
+    return ret;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+const MAX_SAFARI_DECODE_BYTES = 2146435072;
+let numBytesDecoded = 0;
+function decodeText(ptr, len) {
+    numBytesDecoded += len;
+    if (numBytesDecoded >= MAX_SAFARI_DECODE_BYTES) {
+        cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+        cachedTextDecoder.decode();
+        numBytesDecoded = len;
+    }
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+let wasmModule, wasmInstance, wasm;
+function __wbg_finalize_init(instance, module) {
+    wasmInstance = instance;
+    wasm = instance.exports;
+    wasmModule = module;
+    cachedDataViewMemory0 = null;
+    cachedUint8ArrayMemory0 = null;
+    return wasm;
+}
+
+async function __wbg_load(module, imports) {
+    if (typeof Response === 'function' && module instanceof Response) {
+        if (!module.ok) {
+            throw new Error(`failed to fetch Wasm: ${module.status} ${module.statusText} fetching '${module.url}'`);
+        }
+
+        if (typeof WebAssembly.instantiateStreaming === 'function') {
+            try {
+                return await WebAssembly.instantiateStreaming(module, imports);
+            } catch (e) {
+                const validResponse = expectedResponseType(module.type);
+
+                if (validResponse && module.headers.get('Content-Type') !== 'application/wasm') {
+                    console.warn("`WebAssembly.instantiateStreaming` failed because your server does not serve Wasm with `application/wasm` MIME type. Falling back to `WebAssembly.instantiate` which is slower. Original error:\n", e);
+
+                } else { throw e; }
+            }
+        }
+
+        const bytes = await module.arrayBuffer();
+        return await WebAssembly.instantiate(bytes, imports);
+    } else {
+        const instance = await WebAssembly.instantiate(module, imports);
+
+        if (instance instanceof WebAssembly.Instance) {
+            return { instance, module };
+        } else {
+            return instance;
+        }
+    }
+
+    function expectedResponseType(type) {
+        switch (type) {
+            case 'basic': case 'cors': case 'default': return true;
+        }
+        return false;
+    }
+}
+
+function initSync(module) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module !== undefined) {
+        if (Object.getPrototypeOf(module) === Object.prototype) {
+            ({module} = module)
+        } else {
+            console.warn('using deprecated parameters for `initSync()`; pass a single object instead')
+        }
+    }
+
+    const imports = __wbg_get_imports();
+    if (!(module instanceof WebAssembly.Module)) {
+        module = new WebAssembly.Module(module);
+    }
+    const instance = new WebAssembly.Instance(module, imports);
+    return __wbg_finalize_init(instance, module);
+}
+
+async function __wbg_init(module_or_path) {
+    if (wasm !== undefined) return wasm;
+
+
+    if (module_or_path !== undefined) {
+        if (Object.getPrototypeOf(module_or_path) === Object.prototype) {
+            ({module_or_path} = module_or_path)
+        } else {
+            console.warn('using deprecated parameters for the initialization function; pass a single object instead')
+        }
+    }
+
+    if (module_or_path === undefined) {
+        module_or_path = new URL('hide_wasm_bg.wasm', import.meta.url);
+    }
+    const imports = __wbg_get_imports();
+
+    if (typeof module_or_path === 'string' || (typeof Request === 'function' && module_or_path instanceof Request) || (typeof URL === 'function' && module_or_path instanceof URL)) {
+        module_or_path = fetch(module_or_path);
+    }
+
+    const { instance, module } = await __wbg_load(await module_or_path, imports);
+
+    return __wbg_finalize_init(instance, module);
+}
+
+export { initSync, __wbg_init as default };

package/hide_wasm_bg.wasm.d.ts

@@ -0,0 +1,35 @@
+/* tslint:disable */
+/* eslint-disable */
+export const memory: WebAssembly.Memory;
+export const __wbg_decrypted_free: (a: number, b: number) => void;
+export const __wbg_secretkey_free: (a: number, b: number) => void;
+export const __wbg_signingidentity_free: (a: number, b: number) => void;
+export const __wbg_spentnonces_free: (a: number, b: number) => void;
+export const armorPublicKey: (a: number, b: number, c: number) => void;
+export const dearmorPublicKey: (a: number, b: number, c: number) => void;
+export const decrypt: (a: number, b: number, c: number, d: number) => void;
+export const decrypted_data: (a: number, b: number) => void;
+export const decrypted_filename: (a: number, b: number) => void;
+export const decrypted_mediaType: (a: number, b: number) => void;
+export const encrypt: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
+export const inspectKey: (a: number, b: number, c: number) => void;
+export const newChallenge: (a: number, b: number, c: number, d: bigint, e: bigint) => void;
+export const secretkey_generate: (a: number) => void;
+export const secretkey_load: (a: number, b: number, c: number, d: number, e: number) => void;
+export const secretkey_protect: (a: number, b: number, c: number, d: number) => void;
+export const secretkey_publicKey: (a: number, b: number) => void;
+export const signingidentity_answer: (a: number, b: number, c: number, d: number) => void;
+export const signingidentity_generate: (a: number, b: number, c: number) => void;
+export const signingidentity_load: (a: number, b: number, c: number, d: number, e: number) => void;
+export const signingidentity_publicKey: (a: number, b: number) => void;
+export const signingidentity_sign: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const spentnonces_accept: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: bigint) => void;
+export const spentnonces_new: () => number;
+export const spentnonces_size: (a: number) => number;
+export const verify: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
+export const version: (a: number) => void;
+export const __wbindgen_export: (a: number) => void;
+export const __wbindgen_add_to_stack_pointer: (a: number) => number;
+export const __wbindgen_export2: (a: number, b: number) => number;
+export const __wbindgen_export3: (a: number, b: number, c: number) => void;
+export const __wbindgen_export4: (a: number, b: number, c: number, d: number) => number;

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@hide-protocol/wasm",
+  "version": "0.5.0",
+  "description": "HIDE for the browser via WebAssembly. Experimental and unaudited.",
+  "type": "module",
+  "license": "Apache-2.0",
+  "main": "./hide_wasm.js",
+  "types": "./hide_wasm.d.ts",
+  "files": [
+    "hide_wasm.js",
+    "hide_wasm.d.ts",
+    "hide_wasm_bg.wasm",
+    "hide_wasm_bg.wasm.d.ts",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": [
+    "./hide_wasm.js"
+  ],
+  "keywords": [
+    "encryption",
+    "post-quantum",
+    "cryptography",
+    "webassembly",
+    "ml-kem"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hide-protocol/hide.git",
+    "directory": "sdk/wasm"
+  },
+  "homepage": "https://github.com/hide-protocol/hide"
+}