@hsuite/smart-engines-cli 1.0.0

package/dist/packages/plugin-dkg/src/crypto/feldman-vss.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feldman-vss.service.d.ts","sourceRoot":"","sources":["../../../../../../plugin-dkg/src/crypto/feldman-vss.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAQ3D,MAAM,WAAW,kBAAkB;IAEjC,WAAW,EAAE,UAAU,EAAE,CAAC;IAE1B,SAAS,EAAE,UAAU,CAAC;IAEtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAElD,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAKD,MAAM,WAAW,uBAAuB;IAEtC,OAAO,EAAE,OAAO,CAAC;IAEjB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,OAAO,EAAE,MAAM,CAAC;CACjB;AAKD,MAAM,WAAW,kBAAkB;IAEjC,MAAM,EAAE,WAAW,EAAE,CAAC;IAEtB,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAqBD,qBACa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAI7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAE1B;IAGF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;;IAgBlE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,kBAAkB;IAkDjF,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,GAAG,uBAAuB;IA8DzF,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,kBAAkB,GAAG,uBAAuB,EAAE;IAc/F,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,kBAAkB,GAAG,MAAM;IA4B/E,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM;IA6CtC,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,GAAG,eAAe;IAU3F,oBAAoB,CAAC,WAAW,EAAE,kBAAkB,GAAG;QACrD,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB;IAWD,sBAAsB,CAAC,UAAU,EAAE;QACjC,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,kBAAkB;IAatB,OAAO,CAAC,kBAAkB;IAe1B,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,GAAG;IAQX,OAAO,CAAC,UAAU;IA2BlB,OAAO,CAAC,cAAc;CAiBvB"}

package/dist/packages/plugin-dkg/src/crypto/feldman-vss.service.js

@@ -0,0 +1,194 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var FeldmanVSSService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FeldmanVSSService = void 0;
+const common_1 = require("@nestjs/common");
+const bls12_381_1 = require("@noble/curves/bls12-381");
+const utils_1 = require("@noble/hashes/utils");
+let FeldmanVSSService = FeldmanVSSService_1 = class FeldmanVSSService {
+    logger = new common_1.Logger(FeldmanVSSService_1.name);
+    CURVE_ORDER = BigInt('0x73eda753299d7d483339d80809a1d80553bda402fffe5bfeffffffff00000001');
+    G1_GENERATOR = bls12_381_1.bls12_381.G1.ProjectivePoint.BASE;
+    constructor() {
+        this.logger.log('Feldman VSS Service initialized');
+    }
+    split(secret, threshold, totalShares) {
+        this.validateParams(threshold, totalShares);
+        const normalizedSecret = this.mod(secret, this.CURVE_ORDER);
+        this.logger.debug(`Feldman VSS: Splitting into ${totalShares} shares with threshold ${threshold}`);
+        const coefficients = [normalizedSecret];
+        for (let i = 1; i < threshold; i++) {
+            coefficients.push(this.randomScalar());
+        }
+        const commitmentPoints = coefficients.map((coeff) => this.G1_GENERATOR.multiply(coeff));
+        const commitments = {
+            commitments: commitmentPoints.map((p) => p.toRawBytes(true)),
+            generator: this.G1_GENERATOR.toRawBytes(true),
+            threshold,
+        };
+        const shares = [];
+        for (let x = 1; x <= totalShares; x++) {
+            const y = this.evaluatePolynomial(coefficients, BigInt(x));
+            shares.push({ id: x, value: y });
+        }
+        this.logger.debug(`Generated ${shares.length} shares with ${commitments.commitments.length} commitments`);
+        return { shares, commitments };
+    }
+    verifyShare(share, commitments) {
+        try {
+            const i = BigInt(share.id);
+            const leftSide = this.G1_GENERATOR.multiply(this.mod(share.value, this.CURVE_ORDER));
+            let rightSide = bls12_381_1.bls12_381.G1.ProjectivePoint.ZERO;
+            let iPower = BigInt(1);
+            for (let j = 0; j < commitments.commitments.length; j++) {
+                const Cj = bls12_381_1.bls12_381.G1.ProjectivePoint.fromHex(Buffer.from(commitments.commitments[j]).toString('hex'));
+                const term = Cj.multiply(this.mod(iPower, this.CURVE_ORDER));
+                rightSide = rightSide.add(term);
+                iPower = this.mod(iPower * i, this.CURVE_ORDER);
+            }
+            const isValid = leftSide.equals(rightSide);
+            if (!isValid) {
+                this.logger.warn(`🚫 Share verification FAILED for share ID ${share.id}`);
+                return {
+                    isValid: false,
+                    error: 'Share does not match commitments - possible tampering or Byzantine dealer',
+                    shareId: share.id,
+                };
+            }
+            this.logger.debug(`✓ Share ${share.id} verified successfully`);
+            return {
+                isValid: true,
+                shareId: share.id,
+            };
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            this.logger.error(`Share verification error: ${errorMessage}`);
+            return {
+                isValid: false,
+                error: `Verification error: ${errorMessage}`,
+                shareId: share.id,
+            };
+        }
+    }
+    verifyShares(shares, commitments) {
+        return shares.map((share) => this.verifyShare(share, commitments));
+    }
+    combineVerified(shares, commitments) {
+        if (shares.length < commitments.threshold) {
+            throw new Error(`Need at least ${commitments.threshold} shares, got ${shares.length}`);
+        }
+        const verificationResults = this.verifyShares(shares, commitments);
+        const invalidShares = verificationResults.filter((r) => !r.isValid);
+        if (invalidShares.length > 0) {
+            const invalidIds = invalidShares.map((r) => r.shareId).join(', ');
+            throw new Error(`Cannot combine: ${invalidShares.length} invalid shares (IDs: ${invalidIds})`);
+        }
+        return this.combine(shares);
+    }
+    combine(shares) {
+        if (shares.length < 2) {
+            throw new Error('Need at least 2 shares to reconstruct secret');
+        }
+        let secret = BigInt(0);
+        for (let i = 0; i < shares.length; i++) {
+            let numerator = BigInt(1);
+            let denominator = BigInt(1);
+            for (let j = 0; j < shares.length; j++) {
+                if (i !== j) {
+                    const xi = BigInt(shares[i].id);
+                    const xj = BigInt(shares[j].id);
+                    numerator = this.mod(numerator * -xj, this.CURVE_ORDER);
+                    denominator = this.mod(denominator * (xi - xj), this.CURVE_ORDER);
+                }
+            }
+            const basis = this.mod(numerator * this.modInverse(denominator), this.CURVE_ORDER);
+            secret = this.mod(secret + this.mod(shares[i].value, this.CURVE_ORDER) * basis, this.CURVE_ORDER);
+        }
+        return secret;
+    }
+    createVerifiableShare(share, commitments) {
+        return {
+            ...share,
+            commitments,
+        };
+    }
+    serializeCommitments(commitments) {
+        return {
+            commitments: commitments.commitments.map((c) => Buffer.from(c).toString('hex')),
+            generator: Buffer.from(commitments.generator).toString('hex'),
+            threshold: commitments.threshold,
+        };
+    }
+    deserializeCommitments(serialized) {
+        return {
+            commitments: serialized.commitments.map((c) => Buffer.from(c, 'hex')),
+            generator: Buffer.from(serialized.generator, 'hex'),
+            threshold: serialized.threshold,
+        };
+    }
+    evaluatePolynomial(coefficients, x) {
+        let result = BigInt(0);
+        let xPower = BigInt(1);
+        for (const coeff of coefficients) {
+            result = this.mod(result + coeff * xPower, this.CURVE_ORDER);
+            xPower = this.mod(xPower * x, this.CURVE_ORDER);
+        }
+        return result;
+    }
+    randomScalar() {
+        const bytes = (0, utils_1.randomBytes)(32);
+        const value = BigInt('0x' + Buffer.from(bytes).toString('hex'));
+        return this.mod(value, this.CURVE_ORDER);
+    }
+    mod(n, m) {
+        const result = n % m;
+        return result < 0 ? result + m : result;
+    }
+    modInverse(a) {
+        const normalized = this.mod(a, this.CURVE_ORDER);
+        if (normalized === BigInt(0)) {
+            throw new Error('Modular inverse does not exist');
+        }
+        let [oldR, r] = [normalized, this.CURVE_ORDER];
+        let [oldS, s] = [BigInt(1), BigInt(0)];
+        while (r !== BigInt(0)) {
+            const quotient = oldR / r;
+            [oldR, r] = [r, oldR - quotient * r];
+            [oldS, s] = [s, oldS - quotient * s];
+        }
+        if (oldR !== BigInt(1)) {
+            throw new Error('Modular inverse does not exist');
+        }
+        return this.mod(oldS, this.CURVE_ORDER);
+    }
+    validateParams(threshold, totalShares) {
+        if (threshold < 2) {
+            throw new Error('Threshold must be at least 2');
+        }
+        if (threshold > totalShares) {
+            throw new Error('Threshold cannot exceed total shares');
+        }
+        if (totalShares < 2) {
+            throw new Error('Must generate at least 2 shares');
+        }
+        if (totalShares > 255) {
+            throw new Error('Cannot generate more than 255 shares');
+        }
+    }
+};
+exports.FeldmanVSSService = FeldmanVSSService;
+exports.FeldmanVSSService = FeldmanVSSService = FeldmanVSSService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], FeldmanVSSService);
+//# sourceMappingURL=feldman-vss.service.js.map

package/dist/packages/plugin-dkg/src/crypto/feldman-vss.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feldman-vss.service.js","sourceRoot":"","sources":["../../../../../../plugin-dkg/src/crypto/feldman-vss.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,uDAAoD;AACpD,+CAAkD;AAsE3C,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IACX,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IAI5C,WAAW,GAAG,MAAM,CACnC,oEAAoE,CACrE,CAAC;IAGe,YAAY,GAAG,qBAAS,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;IAElE;QACE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAYD,KAAK,CAAC,MAAc,EAAE,SAAiB,EAAE,WAAmB;QAC1D,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAG5C,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAE5D,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,+BAA+B,WAAW,0BAA0B,SAAS,EAAE,CAChF,CAAC;QAKF,MAAM,YAAY,GAAa,CAAC,gBAAgB,CAAC,CAAC;QAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACzC,CAAC;QAGD,MAAM,gBAAgB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAExF,MAAM,WAAW,GAAuB;YACtC,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC5D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC;YAC7C,SAAS;SACV,CAAC;QAGF,MAAM,MAAM,GAAkB,EAAE,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,aAAa,MAAM,CAAC,MAAM,gBAAgB,WAAW,CAAC,WAAW,CAAC,MAAM,cAAc,CACvF,CAAC;QAEF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IAWD,WAAW,CAAC,KAAkB,EAAE,WAA+B;QAC7D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAG3B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAGrF,IAAI,SAAS,GAAG,qBAAS,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;YAClD,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAExD,MAAM,EAAE,GAAG,qBAAS,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAC7C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACxD,CAAC;gBAGF,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC7D,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAGhC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAClD,CAAC;YAGD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1E,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,2EAA2E;oBAClF,OAAO,EAAE,KAAK,CAAC,EAAE;iBAClB,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC;YAE/D,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,KAAK,CAAC,EAAE;aAClB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,YAAY,EAAE,CAAC,CAAC;YAE/D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,uBAAuB,YAAY,EAAE;gBAC5C,OAAO,EAAE,KAAK,CAAC,EAAE;aAClB,CAAC;QACJ,CAAC;IACH,CAAC;IASD,YAAY,CAAC,MAAqB,EAAE,WAA+B;QACjE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACrE,CAAC;IAYD,eAAe,CAAC,MAAqB,EAAE,WAA+B;QACpE,IAAI,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,iBAAiB,WAAW,CAAC,SAAS,gBAAgB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC;QAGD,MAAM,mBAAmB,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACnE,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAEpE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,mBAAmB,aAAa,CAAC,MAAM,yBAAyB,UAAU,GAAG,CAC9E,CAAC;QACJ,CAAC;QAGD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAUD,OAAO,CAAC,MAAqB;QAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAGD,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACZ,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAChC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAGhC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;oBAGxD,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;YAGD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAGnF,MAAM,GAAG,IAAI,CAAC,GAAG,CACf,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,KAAK,EAC5D,IAAI,CAAC,WAAW,CACjB,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IASD,qBAAqB,CAAC,KAAkB,EAAE,WAA+B;QACvE,OAAO;YACL,GAAG,KAAK;YACR,WAAW;SACZ,CAAC;IACJ,CAAC;IAKD,oBAAoB,CAAC,WAA+B;QAKlD,OAAO;YACL,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/E,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC7D,SAAS,EAAE,WAAW,CAAC,SAAS;SACjC,CAAC;IACJ,CAAC;IAKD,sBAAsB,CAAC,UAItB;QACC,OAAO;YACL,WAAW,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACrE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC;YACnD,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC;IACJ,CAAC;IAOO,kBAAkB,CAAC,YAAsB,EAAE,CAAS;QAC1D,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAEvB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7D,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAKO,YAAY;QAClB,MAAM,KAAK,GAAG,IAAA,mBAAW,EAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAKO,GAAG,CAAC,CAAS,EAAE,CAAS;QAC9B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1C,CAAC;IAKO,UAAU,CAAC,CAAS;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAEjD,IAAI,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAGD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC;YAC1B,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC;YACrC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAKO,cAAc,CAAC,SAAiB,EAAE,WAAmB;QAC3D,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,SAAS,GAAG,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;CACF,CAAA;AAvVY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;;GACA,iBAAiB,CAuV7B"}

package/dist/packages/plugin-dkg/src/crypto/frost-threshold-signing.service.d.ts

@@ -0,0 +1,86 @@
+export interface NonceCommitment {
+    participantId: string;
+    shareId: number;
+    commitmentD: Uint8Array;
+    commitmentE: Uint8Array;
+}
+export interface FROSTSigningShare {
+    participantId: string;
+    shareId: number;
+    signatureShare: bigint;
+}
+export interface FROSTSigningSession {
+    sessionId: string;
+    message: Buffer;
+    threshold: number;
+    commitments: NonceCommitment[];
+    signatureShares: FROSTSigningShare[];
+    participantIds: string[];
+    bindingValues: Map<string, bigint>;
+    challenge?: bigint;
+    groupCommitment?: Uint8Array;
+    phase: 'collecting_commitments' | 'collecting_shares' | 'complete';
+    createdAt: Date;
+}
+export interface FROSTParticipantState {
+    sessionId: string;
+    shareId: number;
+    nonceD: bigint;
+    nonceE: bigint;
+    secretShare: bigint;
+}
+export interface FROSTSignatureResult {
+    signature: Uint8Array;
+    publicKey: Uint8Array;
+    participantCount: number;
+    signedAt: Date;
+}
+export interface SerializedFROSTSigningShare {
+    participantId: string;
+    shareId: number;
+    signatureShare: string;
+}
+export interface SerializedNonceCommitment {
+    participantId: string;
+    shareId: number;
+    commitmentD: string;
+    commitmentE: string;
+}
+export declare class FROSTThresholdSigningService {
+    private readonly logger;
+    private readonly CURVE_ORDER;
+    private readonly G1_GENERATOR;
+    private sessions;
+    private participantStates;
+    constructor();
+    createSession(sessionId: string, message: Buffer, threshold: number, participantIds: string[]): FROSTSigningSession;
+    generateNonceCommitment(sessionId: string, participantId: string, shareId: number, secretShare: bigint): NonceCommitment;
+    addCommitment(sessionId: string, commitment: NonceCommitment): boolean;
+    private computeBindingValues;
+    generateSignatureShare(sessionId: string, participantId: string, groupPublicKey: Uint8Array): FROSTSigningShare;
+    addSignatureShare(sessionId: string, share: FROSTSigningShare): boolean;
+    aggregateSignature(sessionId: string, groupPublicKey: Uint8Array): FROSTSignatureResult;
+    verifySignature(signature: Uint8Array, message: Buffer, publicKey: Uint8Array): boolean;
+    getSessionStatus(sessionId: string): {
+        phase: string;
+        commitments: number;
+        shares: number;
+        threshold: number;
+    } | null;
+    clearExpiredSessions(maxAgeMs?: number): number;
+    private secureCleanupSession;
+    serializeCommitment(commitment: NonceCommitment): SerializedNonceCommitment;
+    deserializeCommitment(serialized: SerializedNonceCommitment): NonceCommitment;
+    serializeSignatureShare(share: FROSTSigningShare): SerializedFROSTSigningShare;
+    deserializeSignatureShare(serialized: SerializedFROSTSigningShare): FROSTSigningShare;
+    getActiveSessionCount(): number;
+    getStats(): {
+        activeSessions: number;
+        pendingStates: number;
+    };
+    private lagrangeCoefficient;
+    private randomScalar;
+    private mod;
+    private modInverse;
+}
+//# sourceMappingURL=frost-threshold-signing.service.d.ts.map

package/dist/packages/plugin-dkg/src/crypto/frost-threshold-signing.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frost-threshold-signing.service.d.ts","sourceRoot":"","sources":["../../../../../../plugin-dkg/src/crypto/frost-threshold-signing.service.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAEhB,WAAW,EAAE,UAAU,CAAC;IAExB,WAAW,EAAE,UAAU,CAAC;CACzB;AAOD,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAEhB,cAAc,EAAE,MAAM,CAAC;CACxB;AAOD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAElB,WAAW,EAAE,eAAe,EAAE,CAAC;IAE/B,eAAe,EAAE,iBAAiB,EAAE,CAAC;IAErC,cAAc,EAAE,MAAM,EAAE,CAAC;IAEzB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEnC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,eAAe,CAAC,EAAE,UAAU,CAAC;IAE7B,KAAK,EAAE,wBAAwB,GAAG,mBAAmB,GAAG,UAAU,CAAC;IAEnE,SAAS,EAAE,IAAI,CAAC;CACjB;AAKD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAEhB,MAAM,EAAE,MAAM,CAAC;IAEf,MAAM,EAAE,MAAM,CAAC;IAEf,WAAW,EAAE,MAAM,CAAC;CACrB;AAKD,MAAM,WAAW,oBAAoB;IAEnC,SAAS,EAAE,UAAU,CAAC;IAEtB,SAAS,EAAE,UAAU,CAAC;IAEtB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,QAAQ,EAAE,IAAI,CAAC;CAChB;AAwBD,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAEhB,cAAc,EAAE,MAAM,CAAC;CACxB;AAKD,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAEhB,WAAW,EAAE,MAAM,CAAC;IAEpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBACa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;IAGxE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAE1B;IAGF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAGlE,OAAO,CAAC,QAAQ,CAA+C;IAG/D,OAAO,CAAC,iBAAiB,CAAiD;;IAiB1E,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EAAE,GACvB,mBAAmB;IAsCtB,uBAAuB,CACrB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,eAAe;IAsClB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,OAAO;IAgDtE,OAAO,CAAC,oBAAoB;IAiE5B,sBAAsB,CACpB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,UAAU,GACzB,iBAAiB;IAqEpB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO;IA0CvE,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,GAAG,oBAAoB;IAmDvF,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO;IAgDvF,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG;QACnC,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,IAAI;IAkBR,oBAAoB,CAAC,QAAQ,GAAE,MAAc,GAAG,MAAM;IAuBtD,OAAO,CAAC,oBAAoB;IA6B5B,mBAAmB,CAAC,UAAU,EAAE,eAAe,GAAG,yBAAyB;IAY3E,qBAAqB,CAAC,UAAU,EAAE,yBAAyB,GAAG,eAAe;IAY7E,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,GAAG,2BAA2B;IAW9E,yBAAyB,CAAC,UAAU,EAAE,2BAA2B,GAAG,iBAAiB;IAWrF,qBAAqB,IAAI,MAAM;IAO/B,QAAQ,IAAI;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;KACvB;IAcD,OAAO,CAAC,mBAAmB;IAmB3B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,GAAG;IAQX,OAAO,CAAC,UAAU;CAkBnB"}

package/dist/packages/plugin-dkg/src/crypto/frost-threshold-signing.service.js

@@ -0,0 +1,358 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var FROSTThresholdSigningService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FROSTThresholdSigningService = void 0;
+const common_1 = require("@nestjs/common");
+const bls12_381_1 = require("@noble/curves/bls12-381");
+const sha256_1 = require("@noble/hashes/sha256");
+const utils_1 = require("@noble/hashes/utils");
+let FROSTThresholdSigningService = FROSTThresholdSigningService_1 = class FROSTThresholdSigningService {
+    logger = new common_1.Logger(FROSTThresholdSigningService_1.name);
+    CURVE_ORDER = BigInt('0x73eda753299d7d483339d80809a1d80553bda402fffe5bfeffffffff00000001');
+    G1_GENERATOR = bls12_381_1.bls12_381.G1.ProjectivePoint.BASE;
+    sessions = new Map();
+    participantStates = new Map();
+    constructor() {
+        this.logger.log('FROST Threshold Signing Service initialized');
+        this.logger.log('  🔒 No key reconstruction during signing');
+        this.logger.log('  🔒 Secure nonce memory cleanup enabled');
+    }
+    createSession(sessionId, message, threshold, participantIds) {
+        if (participantIds.length < threshold) {
+            throw new Error(`Not enough participants: ${participantIds.length} < ${threshold}`);
+        }
+        const session = {
+            sessionId,
+            message,
+            threshold,
+            commitments: [],
+            signatureShares: [],
+            participantIds,
+            bindingValues: new Map(),
+            phase: 'collecting_commitments',
+            createdAt: new Date(),
+        };
+        this.sessions.set(sessionId, session);
+        this.logger.debug(`Created FROST session ${sessionId.substring(0, 8)}... ` +
+            `with ${participantIds.length} participants, threshold ${threshold}`);
+        return session;
+    }
+    generateNonceCommitment(sessionId, participantId, shareId, secretShare) {
+        const nonceD = this.randomScalar();
+        const nonceE = this.randomScalar();
+        const commitmentD = this.G1_GENERATOR.multiply(nonceD).toRawBytes(true);
+        const commitmentE = this.G1_GENERATOR.multiply(nonceE).toRawBytes(true);
+        const stateKey = `${sessionId}:${participantId}`;
+        this.participantStates.set(stateKey, {
+            sessionId,
+            shareId,
+            nonceD,
+            nonceE,
+            secretShare,
+        });
+        this.logger.debug(`Generated nonce commitment for participant ${participantId} in session ${sessionId.substring(0, 8)}...`);
+        return {
+            participantId,
+            shareId,
+            commitmentD,
+            commitmentE,
+        };
+    }
+    addCommitment(sessionId, commitment) {
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            throw new Error(`Session not found: ${sessionId}`);
+        }
+        if (session.phase !== 'collecting_commitments') {
+            throw new Error(`Session ${sessionId} not in commitment phase`);
+        }
+        if (session.commitments.some((c) => c.participantId === commitment.participantId)) {
+            this.logger.warn(`Duplicate commitment from ${commitment.participantId}`);
+            return false;
+        }
+        if (!session.participantIds.includes(commitment.participantId)) {
+            throw new Error(`Unknown participant: ${commitment.participantId}`);
+        }
+        session.commitments.push(commitment);
+        this.logger.debug(`Commitment ${session.commitments.length}/${session.threshold} ` +
+            `for session ${sessionId.substring(0, 8)}...`);
+        if (session.commitments.length >= session.threshold) {
+            this.computeBindingValues(session);
+            session.phase = 'collecting_shares';
+            this.logger.debug(`Session ${sessionId.substring(0, 8)}... moved to share collection phase`);
+            return true;
+        }
+        return false;
+    }
+    computeBindingValues(session) {
+        const sortedCommitments = [...session.commitments].sort((a, b) => a.participantId.localeCompare(b.participantId));
+        const commitmentList = sortedCommitments.map((c) => ({
+            id: c.participantId,
+            D: Buffer.from(c.commitmentD).toString('hex'),
+            E: Buffer.from(c.commitmentE).toString('hex'),
+        }));
+        const commitmentListStr = JSON.stringify(commitmentList);
+        for (const commitment of sortedCommitments) {
+            const bindingInput = Buffer.concat([
+                Buffer.from(commitment.participantId, 'utf-8'),
+                session.message,
+                Buffer.from(commitmentListStr, 'utf-8'),
+            ]);
+            const bindingHash = (0, sha256_1.sha256)(bindingInput);
+            const rho = this.mod(BigInt('0x' + Buffer.from(bindingHash).toString('hex')), this.CURVE_ORDER);
+            session.bindingValues.set(commitment.participantId, rho);
+        }
+        let groupCommitment = bls12_381_1.bls12_381.G1.ProjectivePoint.ZERO;
+        for (const commitment of sortedCommitments) {
+            const D = bls12_381_1.bls12_381.G1.ProjectivePoint.fromHex(Buffer.from(commitment.commitmentD).toString('hex'));
+            const E = bls12_381_1.bls12_381.G1.ProjectivePoint.fromHex(Buffer.from(commitment.commitmentE).toString('hex'));
+            const rho = session.bindingValues.get(commitment.participantId);
+            const term = D.add(E.multiply(rho));
+            groupCommitment = groupCommitment.add(term);
+        }
+        session.groupCommitment = groupCommitment.toRawBytes(true);
+        this.logger.debug(`Computed binding values for ${sortedCommitments.length} participants`);
+    }
+    generateSignatureShare(sessionId, participantId, groupPublicKey) {
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            throw new Error(`Session not found: ${sessionId}`);
+        }
+        if (session.phase !== 'collecting_shares') {
+            throw new Error(`Session ${sessionId} not in share collection phase`);
+        }
+        const stateKey = `${sessionId}:${participantId}`;
+        const state = this.participantStates.get(stateKey);
+        if (!state) {
+            throw new Error(`No participant state for ${participantId}`);
+        }
+        const challengeInput = Buffer.concat([
+            session.groupCommitment,
+            groupPublicKey,
+            session.message,
+        ]);
+        const challengeHash = (0, sha256_1.sha256)(challengeInput);
+        session.challenge = this.mod(BigInt('0x' + Buffer.from(challengeHash).toString('hex')), this.CURVE_ORDER);
+        const rho = session.bindingValues.get(participantId);
+        const participantShareIds = session.commitments.map((c) => c.shareId);
+        const lambda = this.lagrangeCoefficient(state.shareId, participantShareIds);
+        const z = this.mod(state.nonceD +
+            this.mod(state.nonceE * rho, this.CURVE_ORDER) +
+            this.mod(this.mod(lambda * state.secretShare, this.CURVE_ORDER) * session.challenge, this.CURVE_ORDER), this.CURVE_ORDER);
+        this.participantStates.delete(stateKey);
+        this.logger.debug(`Generated signature share for ${participantId} in session ${sessionId.substring(0, 8)}...`);
+        return {
+            participantId,
+            shareId: state.shareId,
+            signatureShare: z,
+        };
+    }
+    addSignatureShare(sessionId, share) {
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            throw new Error(`Session not found: ${sessionId}`);
+        }
+        if (session.phase !== 'collecting_shares') {
+            throw new Error(`Session ${sessionId} not in share collection phase`);
+        }
+        if (session.signatureShares.some((s) => s.participantId === share.participantId)) {
+            this.logger.warn(`Duplicate signature share from ${share.participantId}`);
+            return false;
+        }
+        session.signatureShares.push(share);
+        this.logger.debug(`Signature share ${session.signatureShares.length}/${session.threshold} ` +
+            `for session ${sessionId.substring(0, 8)}...`);
+        if (session.signatureShares.length >= session.threshold) {
+            session.phase = 'complete';
+            return true;
+        }
+        return false;
+    }
+    aggregateSignature(sessionId, groupPublicKey) {
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            throw new Error(`Session not found: ${sessionId}`);
+        }
+        if (session.phase !== 'complete') {
+            throw new Error(`Session ${sessionId} not complete`);
+        }
+        let z = BigInt(0);
+        for (const share of session.signatureShares) {
+            z = this.mod(z + share.signatureShare, this.CURVE_ORDER);
+        }
+        const zBytes = Buffer.alloc(32);
+        const zHex = z.toString(16).padStart(64, '0');
+        Buffer.from(zHex, 'hex').copy(zBytes);
+        const signature = Buffer.concat([Buffer.from(session.groupCommitment), zBytes]);
+        this.logger.log(`✅ FROST signature aggregated from ${session.signatureShares.length} shares ` +
+            `(NO key reconstruction)`);
+        this.sessions.delete(sessionId);
+        return {
+            signature,
+            publicKey: groupPublicKey,
+            participantCount: session.signatureShares.length,
+            signedAt: new Date(),
+        };
+    }
+    verifySignature(signature, message, publicKey) {
+        try {
+            if (signature.length !== 80) {
+                this.logger.warn(`Invalid signature length: ${signature.length}`);
+                return false;
+            }
+            const R = bls12_381_1.bls12_381.G1.ProjectivePoint.fromHex(Buffer.from(signature.slice(0, 48)).toString('hex'));
+            const z = BigInt('0x' + Buffer.from(signature.slice(48, 80)).toString('hex'));
+            const challengeInput = Buffer.concat([
+                Buffer.from(signature.slice(0, 48)),
+                Buffer.from(publicKey),
+                message,
+            ]);
+            const challengeHash = (0, sha256_1.sha256)(challengeInput);
+            const c = this.mod(BigInt('0x' + Buffer.from(challengeHash).toString('hex')), this.CURVE_ORDER);
+            const Y = bls12_381_1.bls12_381.G1.ProjectivePoint.fromHex(Buffer.from(publicKey).toString('hex'));
+            const lhs = this.G1_GENERATOR.multiply(z);
+            const rhs = R.add(Y.multiply(c));
+            const isValid = lhs.equals(rhs);
+            if (!isValid) {
+                this.logger.warn('FROST signature verification failed');
+            }
+            return isValid;
+        }
+        catch (error) {
+            this.logger.error(`Signature verification error: ${error}`);
+            return false;
+        }
+    }
+    getSessionStatus(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session) {
+            return null;
+        }
+        return {
+            phase: session.phase,
+            commitments: session.commitments.length,
+            shares: session.signatureShares.length,
+            threshold: session.threshold,
+        };
+    }
+    clearExpiredSessions(maxAgeMs = 60000) {
+        const now = Date.now();
+        let cleared = 0;
+        for (const [sessionId, session] of this.sessions.entries()) {
+            if (now - session.createdAt.getTime() > maxAgeMs) {
+                this.secureCleanupSession(sessionId);
+                cleared++;
+            }
+        }
+        if (cleared > 0) {
+            this.logger.debug(`Cleared ${cleared} expired FROST sessions`);
+        }
+        return cleared;
+    }
+    secureCleanupSession(sessionId) {
+        for (const [key, state] of this.participantStates.entries()) {
+            if (state.sessionId === sessionId) {
+                state.nonceD = BigInt(0);
+                state.nonceE = BigInt(0);
+                state.secretShare = BigInt(0);
+                this.participantStates.delete(key);
+            }
+        }
+        const session = this.sessions.get(sessionId);
+        if (session) {
+            for (const share of session.signatureShares) {
+                share.signatureShare = BigInt(0);
+            }
+            session.bindingValues.clear();
+            session.challenge = BigInt(0);
+        }
+        this.sessions.delete(sessionId);
+    }
+    serializeCommitment(commitment) {
+        return {
+            participantId: commitment.participantId,
+            shareId: commitment.shareId,
+            commitmentD: Buffer.from(commitment.commitmentD).toString('hex'),
+            commitmentE: Buffer.from(commitment.commitmentE).toString('hex'),
+        };
+    }
+    deserializeCommitment(serialized) {
+        return {
+            participantId: serialized.participantId,
+            shareId: serialized.shareId,
+            commitmentD: Buffer.from(serialized.commitmentD, 'hex'),
+            commitmentE: Buffer.from(serialized.commitmentE, 'hex'),
+        };
+    }
+    serializeSignatureShare(share) {
+        return {
+            participantId: share.participantId,
+            shareId: share.shareId,
+            signatureShare: share.signatureShare.toString(16).padStart(64, '0'),
+        };
+    }
+    deserializeSignatureShare(serialized) {
+        return {
+            participantId: serialized.participantId,
+            shareId: serialized.shareId,
+            signatureShare: BigInt('0x' + serialized.signatureShare),
+        };
+    }
+    getActiveSessionCount() {
+        return this.sessions.size;
+    }
+    getStats() {
+        return {
+            activeSessions: this.sessions.size,
+            pendingStates: this.participantStates.size,
+        };
+    }
+    lagrangeCoefficient(i, participants) {
+        let numerator = BigInt(1);
+        let denominator = BigInt(1);
+        for (const j of participants) {
+            if (i !== j) {
+                numerator = this.mod(numerator * BigInt(-j), this.CURVE_ORDER);
+                denominator = this.mod(denominator * BigInt(i - j), this.CURVE_ORDER);
+            }
+        }
+        return this.mod(numerator * this.modInverse(denominator), this.CURVE_ORDER);
+    }
+    randomScalar() {
+        const bytes = (0, utils_1.randomBytes)(32);
+        return this.mod(BigInt('0x' + Buffer.from(bytes).toString('hex')), this.CURVE_ORDER);
+    }
+    mod(n, m) {
+        const result = n % m;
+        return result < 0 ? result + m : result;
+    }
+    modInverse(a) {
+        const normalized = this.mod(a, this.CURVE_ORDER);
+        if (normalized === BigInt(0)) {
+            throw new Error('Modular inverse does not exist');
+        }
+        let [oldR, r] = [normalized, this.CURVE_ORDER];
+        let [oldS, s] = [BigInt(1), BigInt(0)];
+        while (r !== BigInt(0)) {
+            const quotient = oldR / r;
+            [oldR, r] = [r, oldR - quotient * r];
+            [oldS, s] = [s, oldS - quotient * s];
+        }
+        return this.mod(oldS, this.CURVE_ORDER);
+    }
+};
+exports.FROSTThresholdSigningService = FROSTThresholdSigningService;
+exports.FROSTThresholdSigningService = FROSTThresholdSigningService = FROSTThresholdSigningService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], FROSTThresholdSigningService);
+//# sourceMappingURL=frost-threshold-signing.service.js.map