@honeybbq/teamspeak 0.0.1 → 1.0.0-beta.11

package/dist/client/crypto/crypt.js

@@ -0,0 +1,203 @@
+import { createHash, createECDH, randomBytes } from "node:crypto";
+import { HandshakeError, FakeSignatureMismatchError } from "../errors.js";
+import { identityPrivateKey, importPublicKey } from "./identity.js";
+import { EAX } from "./eax.js";
+const FAKE_SIGNATURE_SIZE = 8;
+const IV_ALPHA_SIZE = 10;
+const INIT1_PACKET_TYPE = 8;
+const PACKET_TYPE_MASK = 0x0f;
+const INIT1_MAC = Buffer.from("TS3INIT1");
+/**
+ * The most squarings the Init1 puzzle may ask for. TS3 3.13 and TS6 6.0 both
+ * ask for 10000; a level far beyond that is a server trying to pin the event
+ * loop, since the squarings run synchronously.
+ */
+export const MAX_RSA_CHALLENGE_LEVEL = 100_000;
+/** Precomputed dummy key/nonce matching the TS3 client pre-crypto placeholder. */
+const DUMMY_KEY = Buffer.from("c:\\windows\\syste");
+const DUMMY_NONCE = Buffer.from("m\\firewall32.cpl");
+/**
+ * A connection's encryption state. The session material — the IV the keys
+ * derive from — lives in private fields, so it shows in no `util.inspect()`
+ * or `JSON.stringify()` of anything holding a Crypt.
+ */
+export class Crypt {
+    identity;
+    #ivStruct = new Uint8Array(0);
+    #fakeSignature = new Uint8Array(FAKE_SIGNATURE_SIZE);
+    #alpha = new Uint8Array(0);
+    #cryptoInitComplete = false;
+    #cachedKeys = new Map();
+    constructor(identity) {
+        this.identity = identity;
+    }
+    /** Whether the session keys are set up; until then packets use the dummy key. */
+    get cryptoInitComplete() {
+        return this.#cryptoInitComplete;
+    }
+    /** The signature unencrypted packets carry: zeros until crypto init completes. */
+    get fakeSignature() {
+        return this.#fakeSignature;
+    }
+    /** The client's random contribution to the IV, sent in clientinitiv; empty before. */
+    get alpha() {
+        return this.#alpha;
+    }
+    /** Choose the client's random contribution to the IV, and return it. */
+    newAlpha() {
+        this.#alpha = new Uint8Array(randomBytes(IV_ALPHA_SIZE));
+        return this.#alpha;
+    }
+    solveRsaChallenge(data, offset, level) {
+        if (!Number.isInteger(level) || level < 0 || level > MAX_RSA_CHALLENGE_LEVEL) {
+            throw new HandshakeError(`RSA challenge level ${level} out of range`);
+        }
+        const xBytes = data.slice(offset, offset + 64);
+        const nBytes = data.slice(offset + 64, offset + 128);
+        let y = bytesToBigInt(xBytes);
+        const n = bytesToBigInt(nBytes);
+        if (n === 0n)
+            throw new HandshakeError("RSA challenge modulus is zero");
+        for (let i = 0; i < level; i++) {
+            y = (y * y) % n;
+        }
+        return bigIntToBytes(y, 64);
+    }
+    initCrypto(alpha, beta, omega) {
+        const alphaBytes = Buffer.from(alpha, "base64");
+        const betaBytes = Buffer.from(beta, "base64");
+        const omegaBytes = Buffer.from(omega, "base64");
+        let sharedSecret;
+        try {
+            sharedSecret = this.#getSharedSecret(importPublicKey(omegaBytes));
+        }
+        catch (error) {
+            throw new HandshakeError("the server's public key is invalid", { cause: error });
+        }
+        this.setSharedSecret(alphaBytes, betaBytes, sharedSecret);
+    }
+    setSharedSecret(alpha, beta, sharedKey) {
+        this.#ivStruct = new Uint8Array(IV_ALPHA_SIZE + beta.length);
+        for (let i = 0; i < IV_ALPHA_SIZE; i++) {
+            const a = sharedKey[i];
+            const b = alpha[i];
+            this.#ivStruct[i] = ((a !== undefined ? a : 0) ^ (b !== undefined ? b : 0)) & 0xff;
+        }
+        for (let i = 0; i < beta.length; i++) {
+            const a = sharedKey[IV_ALPHA_SIZE + i];
+            const b = beta[i];
+            this.#ivStruct[IV_ALPHA_SIZE + i] =
+                ((a !== undefined ? a : 0) ^ (b !== undefined ? b : 0)) & 0xff;
+        }
+        // Keys derive from the IV: any cached before it changed belong to another
+        // IV, the empty one before crypto init in particular, which is public.
+        this.#cachedKeys.clear();
+        const digest = createHash("sha1").update(this.#ivStruct).digest();
+        this.#fakeSignature = new Uint8Array(digest.buffer, digest.byteOffset, FAKE_SIGNATURE_SIZE);
+        this.#cryptoInitComplete = true;
+    }
+    getKeyNonce(fromServer, packetID, generationID, packetType, dummy) {
+        if (dummy) {
+            return [Uint8Array.from(DUMMY_KEY), Uint8Array.from(DUMMY_NONCE)];
+        }
+        // Before crypto init there is no IV, and a key derived from the empty one
+        // is a key anyone can compute.
+        if (!this.#cryptoInitComplete) {
+            throw new HandshakeError("no session key before crypto init completes");
+        }
+        const cacheKey = makeCacheKey(fromServer, packetType, generationID);
+        let kn = this.#cachedKeys.get(cacheKey);
+        if (kn === undefined) {
+            const tmpToHash = new Uint8Array(6 + this.#ivStruct.length);
+            tmpToHash[0] = fromServer ? 0x30 : 0x31;
+            tmpToHash[1] = packetType & PACKET_TYPE_MASK;
+            new DataView(tmpToHash.buffer).setUint32(2, generationID, false);
+            tmpToHash.set(this.#ivStruct, 6);
+            const hash = createHash("sha256").update(tmpToHash).digest();
+            kn = {
+                key: Uint8Array.from(hash.subarray(0, 16)),
+                nonce: Uint8Array.from(hash.subarray(16, 32)),
+                gen: generationID,
+            };
+            this.#cachedKeys.set(cacheKey, kn);
+        }
+        const key = Uint8Array.from(kn.key);
+        key[0] = (key[0] !== undefined ? key[0] : 0) ^ ((packetID >> 8) & 0xff);
+        key[1] = (key[1] !== undefined ? key[1] : 0) ^ (packetID & 0xff);
+        return [key, kn.nonce];
+    }
+    encrypt(packetType, packetID, generationID, header, plaintext, dummy, unencrypted) {
+        if (packetType === INIT1_PACKET_TYPE) {
+            return [plaintext, INIT1_MAC];
+        }
+        if (unencrypted) {
+            return [plaintext, this.#fakeSignature];
+        }
+        const [key, nonce] = this.getKeyNonce(false, packetID, generationID, packetType, dummy);
+        const eax = new EAX(key);
+        return eax.encrypt(nonce, header, plaintext);
+    }
+    decrypt(packetType, packetID, generationID, header, ciphertext, tag, dummy, unencrypted) {
+        if (packetType === INIT1_PACKET_TYPE) {
+            return ciphertext;
+        }
+        if (unencrypted) {
+            const fsSub = tag.slice(0, FAKE_SIGNATURE_SIZE);
+            if (!Buffer.from(fsSub).equals(Buffer.from(this.#fakeSignature))) {
+                throw new FakeSignatureMismatchError();
+            }
+            return ciphertext;
+        }
+        const [key, nonce] = this.getKeyNonce(true, packetID, generationID, packetType, dummy);
+        const eax = new EAX(key);
+        return eax.decrypt(nonce, header, ciphertext, tag);
+    }
+    #getSharedSecret(serverPubKey) {
+        const privJwk = identityPrivateKey(this.identity).export({ format: "jwk" });
+        const pubJwk = serverPubKey.export({ format: "jwk" });
+        const ecdh = createECDH("prime256v1");
+        const dBytes = Buffer.from(privJwk.d, "base64url");
+        ecdh.setPrivateKey(dBytes);
+        const xBytes = base64UrlToBytes(pubJwk.x, 32);
+        const yBytes = base64UrlToBytes(pubJwk.y, 32);
+        const uncompressed = Buffer.alloc(65);
+        uncompressed[0] = 0x04;
+        xBytes.copy(uncompressed, 1);
+        yBytes.copy(uncompressed, 33);
+        const rawSecret = ecdh.computeSecret(uncompressed);
+        return createHash("sha1").update(rawSecret).digest();
+    }
+}
+// ---- Helpers ----------------------------------------------------------------
+function makeCacheKey(fromServer, packetType, generationID) {
+    let key = 0n;
+    if (fromServer)
+        key |= 1n << 40n;
+    key |= BigInt(packetType & PACKET_TYPE_MASK) << 32n;
+    key |= BigInt(generationID);
+    return key;
+}
+function bytesToBigInt(bytes) {
+    let result = 0n;
+    for (const b of bytes)
+        result = (result << 8n) | BigInt(b);
+    return result;
+}
+function bigIntToBytes(value, size) {
+    const result = new Uint8Array(size);
+    let v = value;
+    for (let i = size - 1; i >= 0; i--) {
+        result[i] = Number(v & 0xffn);
+        v >>= 8n;
+    }
+    return result;
+}
+function base64UrlToBytes(b64url, size) {
+    const buf = Buffer.from(b64url, "base64url");
+    if (buf.length === size)
+        return buf;
+    const padded = Buffer.alloc(size);
+    buf.copy(padded, size - buf.length);
+    return padded;
+}
+//# sourceMappingURL=crypt.js.map

package/dist/client/crypto/crypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypt.js","sourceRoot":"","sources":["../../../src/client/crypto/crypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAW,OAAO,CAAC;AAQvD,kFAAkF;AAClF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AACpD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,OAAO,KAAK;IACP,QAAQ,CAAW;IAE5B,SAAS,GAAe,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC1C,cAAc,GAAe,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;IACjE,MAAM,GAAe,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACvC,mBAAmB,GAAG,KAAK,CAAC;IAEnB,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEnD,YAAY,QAAkB;QAC5B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,iFAAiF;IACjF,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,kFAAkF;IAClF,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,sFAAsF;IACtF,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,wEAAwE;IACxE,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,iBAAiB,CAAC,IAAgB,EAAE,MAAc,EAAE,KAAa;QAC/D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,uBAAuB,EAAE,CAAC;YAC7E,MAAM,IAAI,cAAc,CAAC,uBAAuB,KAAK,eAAe,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;QAErD,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE;YAAE,MAAM,IAAI,cAAc,CAAC,+BAA+B,CAAC,CAAC;QAExE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEhD,IAAI,YAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,cAAc,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED,eAAe,CAAC,KAAiB,EAAE,IAAgB,EAAE,SAAqB;QACxE,IAAI,CAAC,SAAS,GAAG,IAAI,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACrF,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,SAAS,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG,CAAC,CAAC;gBAC/B,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACnE,CAAC;QAED,0EAA0E;QAC1E,uEAAuE;QACvE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAEzB,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QAClE,IAAI,CAAC,cAAc,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAC5F,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAClC,CAAC;IAED,WAAW,CACT,UAAmB,EACnB,QAAgB,EAChB,YAAoB,EACpB,UAAkB,EAClB,KAAc;QAEd,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,0EAA0E;QAC1E,+BAA+B;QAC/B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,IAAI,cAAc,CAAC,6CAA6C,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACpE,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC5D,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACxC,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,gBAAgB,CAAC;YAC7C,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;YACjE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAEjC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;YAC7D,EAAE,GAAG;gBACH,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1C,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC7C,GAAG,EAAE,YAAY;aAClB,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACxE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;QAEjE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,CACL,UAAkB,EAClB,QAAgB,EAChB,YAAoB,EACpB,MAAkB,EAClB,SAAqB,EACrB,KAAc,EACd,WAAoB;QAEpB,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;YACrC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,CACL,UAAkB,EAClB,QAAgB,EAChB,YAAoB,EACpB,MAAkB,EAClB,UAAsB,EACtB,GAAe,EACf,KAAc,EACd,WAAoB;QAEpB,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;YACrC,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,0BAA0B,EAAE,CAAC;YACzC,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,gBAAgB,CAAC,YAAuB;QACtC,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAEzE,CAAC;QACF,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAGnD,CAAC;QAEF,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAE3B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtC,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;CACF;AAED,gFAAgF;AAEhF,SAAS,YAAY,CAAC,UAAmB,EAAE,UAAkB,EAAE,YAAoB;IACjF,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,UAAU;QAAE,GAAG,IAAI,EAAE,IAAI,GAAG,CAAC;IACjC,GAAG,IAAI,MAAM,CAAC,UAAU,GAAG,gBAAgB,CAAC,IAAI,GAAG,CAAC;IACpD,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,IAAY;IAChD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAC9B,CAAC,KAAK,EAAE,CAAC;IACX,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,IAAY;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/client/crypto/eax.d.ts

@@ -0,0 +1,12 @@
+/**
+ * AES-EAX AEAD implementation for TS3 (64-bit tag, AES-128).
+ * Uses AES-CMAC for authentication and AES-CTR for encryption.
+ */
+export declare class EAX {
+    #private;
+    constructor(key: Uint8Array);
+    encrypt(nonce: Uint8Array, header: Uint8Array, plaintext: Uint8Array): [ciphertext: Uint8Array, tag: Uint8Array];
+    decrypt(nonce: Uint8Array, header: Uint8Array, ciphertext: Uint8Array, tag: Uint8Array): Uint8Array;
+}
+export declare function aesCmac(key: Uint8Array, message: Uint8Array): Uint8Array;
+//# sourceMappingURL=eax.d.ts.map

package/dist/client/crypto/eax.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eax.d.ts","sourceRoot":"","sources":["../../../src/client/crypto/eax.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,qBAAa,GAAG;;IAGd,YAAY,GAAG,EAAE,UAAU,EAG1B;IAED,OAAO,CACL,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,UAAU,GACpB,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,CAAC,CAc3C;IAED,OAAO,CACL,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,UAAU,EAClB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,UAAU,GACd,UAAU,CAeZ;CAcF;AAoDD,wBAAgB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,CA2BxE"}

package/dist/client/crypto/eax.js

@@ -0,0 +1,118 @@
+import { createCipheriv, timingSafeEqual } from "node:crypto";
+import { EAXTagMismatchError } from "../errors.js";
+const EAX_TAG_SIZE = 8;
+const EAX_BLOCK_SIZE = 16;
+/**
+ * AES-EAX AEAD implementation for TS3 (64-bit tag, AES-128).
+ * Uses AES-CMAC for authentication and AES-CTR for encryption.
+ */
+export class EAX {
+    #key;
+    constructor(key) {
+        if (key.length !== 16)
+            throw new Error("EAX requires a 16-byte key");
+        this.#key = key;
+    }
+    encrypt(nonce, header, plaintext) {
+        const nStar = this.#cmac(0, nonce);
+        const hStar = this.#cmac(1, header);
+        const ciphertext = aesCtr(this.#key, nStar, plaintext);
+        const cStar = this.#cmac(2, ciphertext);
+        const tag = new Uint8Array(EAX_TAG_SIZE);
+        for (let i = 0; i < EAX_TAG_SIZE; i++) {
+            tag[i] = nStar[i] ^ hStar[i] ^ cStar[i];
+        }
+        return [ciphertext, tag];
+    }
+    decrypt(nonce, header, ciphertext, tag) {
+        const nStar = this.#cmac(0, nonce);
+        const hStar = this.#cmac(1, header);
+        const cStar = this.#cmac(2, ciphertext);
+        const expected = new Uint8Array(EAX_TAG_SIZE);
+        for (let i = 0; i < EAX_TAG_SIZE; i++) {
+            expected[i] = nStar[i] ^ hStar[i] ^ cStar[i];
+        }
+        if (!timingSafeEqual(Buffer.from(expected), Buffer.from(tag.slice(0, EAX_TAG_SIZE)))) {
+            throw new EAXTagMismatchError();
+        }
+        return aesCtr(this.#key, nStar, ciphertext);
+    }
+    /**
+     * AES-CMAC per RFC 4493:
+     *   input = [0…0 tag] ++ data   (one block prefix)
+     */
+    #cmac(tagByte, data) {
+        const input = new Uint8Array(EAX_BLOCK_SIZE + data.length);
+        // first block: zeros then tag byte at the last position
+        input[EAX_BLOCK_SIZE - 1] = tagByte;
+        input.set(data, EAX_BLOCK_SIZE);
+        return aesCmac(this.#key, input);
+    }
+}
+// ---- AES-CTR ----------------------------------------------------------------
+function aesCtr(key, iv, data) {
+    const cipher = createCipheriv("aes-128-ctr", Buffer.from(key), Buffer.from(iv));
+    return Buffer.concat([cipher.update(Buffer.from(data)), cipher.final()]);
+}
+// ---- AES-CMAC (RFC 4493) ----------------------------------------------------
+function aesEcb(key, block) {
+    // Node.js does not expose ECB directly; simulate via CTR with zero IV and
+    // a zero-input (CTR of 0-block XOR with input = ECB)
+    const cipher = createCipheriv("aes-128-ecb", Buffer.from(key), null);
+    cipher.setAutoPadding(false);
+    return Buffer.concat([cipher.update(Buffer.from(block)), cipher.final()]);
+}
+function xorBlock(a, b) {
+    const out = new Uint8Array(EAX_BLOCK_SIZE);
+    for (let i = 0; i < EAX_BLOCK_SIZE; i++)
+        out[i] = a[i] ^ b[i];
+    return out;
+}
+function shiftLeft1(b) {
+    const out = new Uint8Array(EAX_BLOCK_SIZE);
+    let carry = 0;
+    for (let i = EAX_BLOCK_SIZE - 1; i >= 0; i--) {
+        const shifted = ((b[i] << 1) | carry) & 0xff;
+        carry = b[i] >> 7;
+        out[i] = shifted;
+    }
+    return out;
+}
+const RB = new Uint8Array(EAX_BLOCK_SIZE);
+RB[EAX_BLOCK_SIZE - 1] = 0x87;
+function generateSubkeys(key) {
+    const zero = new Uint8Array(EAX_BLOCK_SIZE);
+    const L = aesEcb(key, zero);
+    let K1 = shiftLeft1(L);
+    if ((L[0] & 0x80) !== 0)
+        K1 = xorBlock(K1, RB);
+    let K2 = shiftLeft1(K1);
+    if ((K1[0] & 0x80) !== 0)
+        K2 = xorBlock(K2, RB);
+    return [K1, K2];
+}
+export function aesCmac(key, message) {
+    const [K1, K2] = generateSubkeys(key);
+    const n = Math.max(1, Math.ceil(message.length / EAX_BLOCK_SIZE));
+    const lastBlockComplete = message.length > 0 && message.length % EAX_BLOCK_SIZE === 0;
+    let X = new Uint8Array(EAX_BLOCK_SIZE);
+    for (let i = 0; i < n - 1; i++) {
+        const block = message.slice(i * EAX_BLOCK_SIZE, (i + 1) * EAX_BLOCK_SIZE);
+        X = Uint8Array.from(aesEcb(key, xorBlock(X, block)));
+    }
+    const lastBlock = new Uint8Array(EAX_BLOCK_SIZE);
+    const lastStart = (n - 1) * EAX_BLOCK_SIZE;
+    const lastSlice = message.slice(lastStart);
+    lastBlock.set(lastSlice);
+    let Mn;
+    if (lastBlockComplete) {
+        Mn = xorBlock(lastBlock, K1);
+    }
+    else {
+        if (lastSlice.length < EAX_BLOCK_SIZE)
+            lastBlock[lastSlice.length] = 0x80;
+        Mn = xorBlock(lastBlock, K2);
+    }
+    return Uint8Array.from(aesEcb(key, xorBlock(X, Mn)));
+}
+//# sourceMappingURL=eax.js.map

package/dist/client/crypto/eax.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eax.js","sourceRoot":"","sources":["../../../src/client/crypto/eax.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B;;;GAGG;AACH,MAAM,OAAO,GAAG;IACL,IAAI,CAAa;IAE1B,YAAY,GAAe;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,OAAO,CACL,KAAiB,EACjB,MAAkB,EAClB,SAAqB;QAErB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEpC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAEvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAExC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC7C,CAAC;QAED,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,CACL,KAAiB,EACjB,MAAkB,EAClB,UAAsB,EACtB,GAAe;QAEf,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAExC,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAe,EAAE,IAAgB;QACrC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,wDAAwD;QACxD,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;QACpC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAEhC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;CACF;AAED,gFAAgF;AAEhF,SAAS,MAAM,CAAC,GAAe,EAAE,EAAc,EAAE,IAAgB;IAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,gFAAgF;AAEhF,SAAS,MAAM,CAAC,GAAe,EAAE,KAAiB;IAChD,0EAA0E;IAC1E,qDAAqD;IACrD,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,CAAa,EAAE,CAAa;IAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAa;IAC/B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,cAAc,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;QAC9C,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC;QACnB,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;AAC1C,EAAE,CAAC,cAAc,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;AAE9B,SAAS,eAAe,CAAC,GAAe;IACtC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAE5B,IAAI,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAEhD,IAAI,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IACxB,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAEjD,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAe,EAAE,OAAmB;IAC1D,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEtC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC;IAClE,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,cAAc,KAAK,CAAC,CAAC;IAEtF,IAAI,CAAC,GAAe,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC;QAC1E,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,cAAc,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3C,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEzB,IAAI,EAAc,CAAC;IACnB,IAAI,iBAAiB,EAAE,CAAC;QACtB,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,IAAI,SAAS,CAAC,MAAM,GAAG,cAAc;YAAE,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC1E,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/client/crypto/identity.d.ts

@@ -0,0 +1,97 @@
+import { type KeyObject } from "node:crypto";
+import { type UID } from "@honeybbq/teamspeak";
+/**
+ * A TeamSpeak client identity: a P-256 key pair plus a counter, the offset,
+ * whose hash with the public key sets the identity's security level.
+ *
+ * Immutable: raising the level returns a new identity. Opaque: the private
+ * key is never exposed, and `toString()`, `toJSON()` and `util.inspect()`
+ * describe the identity without it, so an identity that reaches a log or an
+ * error message does not leak; `export()` is the one way to get the secret
+ * form, for storing it. Make one with `generateIdentity()` or
+ * `parseIdentity()`.
+ */
+export declare class Identity {
+    #private;
+    private constructor();
+    /** The counter whose hash with the public key sets the security level. */
+    get offset(): bigint;
+    /** The public key in TeamSpeak's encoding: base64 of its DER form. */
+    publicKey(): string;
+    /**
+     * The identity's unique identifier, hashed with `algorithm`: SHA-1 for a
+     * TeamSpeak 3 server, SHA-256 for TeamSpeak 6. A connected client's `uid`
+     * already uses the one its server does.
+     */
+    uid(algorithm: UIDAlgorithm): UID;
+    /**
+     * The identity in the form `parseIdentity()` reads, private key included.
+     * Store it as you would a password.
+     */
+    export(): string;
+    /** Describes the identity, by its SHA-1 unique identifier, without its private key. */
+    toString(): string;
+    /** The same as `toString()`, so serialising an identity cannot leak its key. */
+    toJSON(): string;
+    /** The security level: trailing zero bits in SHA-1 of the public key and offset. */
+    securityLevel(): number;
+    /**
+     * The same key at an offset whose security level reaches `targetLevel`, as
+     * a new identity; this one is unchanged, and returned as it is when it
+     * already reaches the level.
+     *
+     * Each level doubles the expected work, so a high level can take a long
+     * time; `signal` bounds it, and the event loop keeps running meanwhile. A
+     * level above 160, the width of SHA-1, can never be reached and is refused
+     * with a RangeError.
+     */
+    upgradeToLevel(targetLevel: number, options?: {
+        readonly signal?: AbortSignal | undefined;
+    }): Promise<Identity>;
+}
+/**
+ * Read an identity from the form `Identity.export()` writes: the private key
+ * as canonical base64 of at most 32 bytes, a colon, and the offset as a
+ * decimal unsigned 64-bit integer. Anything else throws an
+ * InvalidIdentityError, with the underlying failure as its cause.
+ */
+export declare function parseIdentity(s: string): Identity;
+/**
+ * Create an identity at the given security level, at most 160. Each level
+ * doubles the expected work; `signal` bounds it, and the event loop keeps
+ * running meanwhile.
+ */
+export declare function generateIdentity(targetLevel: number, options?: {
+    readonly signal?: AbortSignal | undefined;
+}): Promise<Identity>;
+/**
+ * Create an identity at the given security level, at most 160, blocking until
+ * done. Fine for a low level; a high one can block the event loop for minutes,
+ * so prefer `generateIdentity()` there.
+ */
+export declare function generateIdentitySync(targetLevel: number): Identity;
+/**
+ * The hash a server uses for `client_unique_identifier`, keyed by the server's
+ * major version.
+ *
+ * TeamSpeak 3 hashes the canonical public key with SHA-1 (20 bytes); TeamSpeak
+ * 6 switched to SHA-256 (32 bytes). The algorithm is not negotiable on the
+ * wire, so a client that guesses wrong computes a UID that matches nothing the
+ * server ever sends — self-identification by UID silently fails.
+ *
+ * May gain members in a minor release, should a server generation change the
+ * hash again: a `switch` over it needs a default case.
+ */
+export type UIDAlgorithm = "sha1" | "sha256";
+/** Pick the UID hash from a `virtualserver_version` string, e.g. "6.0.0-beta13.1". */
+export declare function uidAlgorithmForVersion(version: string): UIDAlgorithm;
+/**
+ * The unique identifier of a public key in TeamSpeak's encoding, hashed with
+ * `algorithm`: SHA-1 for a TeamSpeak 3 server, SHA-256 for TeamSpeak 6.
+ */
+export declare function uidFromPublicKey(publicKey: string, algorithm: UIDAlgorithm): UID;
+export declare function hash512(data: Uint8Array): Uint8Array;
+/** Import a TS3 public key (canonical or legacy ASN.1 DER) and return the
+ *  uncompressed 65-byte point [0x04 || x || y]. */
+export declare function importPublicKey(data: Uint8Array): KeyObject;
+//# sourceMappingURL=identity.d.ts.map

package/dist/client/crypto/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/client/crypto/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAS,KAAK,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAYtD;;;;;;;;;;GAUG;AACH,qBAAa,QAAQ;;IAUnB,OAAO,eAGN;IAED,0EAA0E;IAC1E,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,sEAAsE;IACtE,SAAS,IAAI,MAAM,CAUlB;IAED;;;;OAIG;IACH,GAAG,CAAC,SAAS,EAAE,YAAY,GAAG,GAAG,CAEhC;IAED;;;OAGG;IACH,MAAM,IAAI,MAAM,CAKf;IAED,uFAAuF;IACvF,QAAQ,IAAI,MAAM,CAEjB;IAED,gFAAgF;IAChF,MAAM,IAAI,MAAM,CAEf;IAED,oFAAoF;IACpF,aAAa,IAAI,MAAM,CAEtB;IAED;;;;;;;;;OASG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAO,GAC1D,OAAO,CAAC,QAAQ,CAAC,CAgBnB;CACF;AAqCD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,CA0CjD;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CAAO,GAC1D,OAAO,CAAC,QAAQ,CAAC,CAGnB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,QAAQ,CAOlE;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE7C,sFAAsF;AACtF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAGpE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,GAAG,GAAG,CAEhF;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAEpD;AA+BD;mDACmD;AACnD,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAS3D"}