@icure/api 8.0.24 → 8.0.26

package/icc-x-api/crypto/NativeCryptoPrimitivesBridge.js

@@ -0,0 +1,477 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NativeCryptoPrimitivesBridge = void 0;
+const shamir_1 = require("./shamir");
+const utils_1 = require("../utils");
+const crypto_1 = require("crypto");
+/**
+ * Allows to use the expo-kryptom module as crypto primitives. This is necessary when building expo (react native) apps.
+ */
+class NativeCryptoPrimitivesBridge {
+    constructor(expoKryptomModule) {
+        this.strongRandom = expoKryptomModule.StrongRandom;
+        this.digest = expoKryptomModule.Digest;
+        this.shamir = new StrongRandomShamir(this.strongRandom);
+        this.AES = new NativeAesBridge(expoKryptomModule.Aes, this.strongRandom);
+        this.HMAC = new NativeHmacBridge(expoKryptomModule.Hmac);
+        this.RSA = new NativeRsaBridge(expoKryptomModule.Rsa);
+    }
+    randomBytes(n) {
+        return this.strongRandom.randomBytes(n);
+    }
+    randomUuid() {
+        return this.strongRandom.randomUUID();
+    }
+    sha256(data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.digest.sha256(data instanceof ArrayBuffer ? new Uint8Array(data) : data);
+        });
+    }
+}
+exports.NativeCryptoPrimitivesBridge = NativeCryptoPrimitivesBridge;
+class StrongRandomShamir extends shamir_1.ShamirClass {
+    constructor(strongRandom) {
+        super();
+        this.strongRandom = strongRandom;
+    }
+    fillRandom(arr) {
+        const random = this.strongRandom.randomBytes(arr.byteLength);
+        // Note that the new Uint32Array does not copy the random array
+        arr.set(new Uint32Array(random.buffer));
+    }
+}
+class NativeAesBridge {
+    constructor(aes, random) {
+        this.aes = aes;
+        this.random = random;
+    }
+    decrypt(cryptoKey, encryptedData) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.aes.decrypt(new Uint8Array(encryptedData), getKryptomKey(cryptoKey));
+        });
+    }
+    decryptSome(cryptoKeys, uint8Array) {
+        try {
+            return this.decrypt(cryptoKeys[0], uint8Array);
+        }
+        catch (e) {
+            if (cryptoKeys.length > 1) {
+                return this.decryptSome(cryptoKeys.slice(1), uint8Array);
+            }
+            else {
+                throw e;
+            }
+        }
+    }
+    decryptWithRawKey(rawKey, plainData) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const imported = yield this.importKey('raw', (0, utils_1.hex2ua)(rawKey));
+            return this.decrypt(imported, plainData);
+        });
+    }
+    encrypt(cryptoKey, plainData) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.aes.encrypt(new Uint8Array(plainData), getKryptomKey(cryptoKey), null);
+        });
+    }
+    encryptWithRawKey(rawKey, plainData) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const imported = yield this.importKey('raw', (0, utils_1.hex2ua)(rawKey));
+            return this.encrypt(imported, plainData);
+        });
+    }
+    exportKey(cryptoKey, format) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const rawKey = yield this.aes.exportRawKey(getKryptomKey(cryptoKey));
+            if (format == 'raw')
+                return rawKey;
+            return {
+                kty: 'oct',
+                alg: rawKey.byteLength == 32 ? 'A256CBC' : 'A128CBC',
+                ext: true,
+                key_ops: ['encrypt', 'decrypt'],
+                k: (0, utils_1.ua2b64)(rawKey).replace(/=/g, '').replace(/\+/g, '-').replace(/\//g, '_'),
+            };
+        });
+    }
+    generateCryptoKey(toHex) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (toHex) {
+                return Promise.resolve((0, utils_1.ua2hex)(this.random.randomBytes(32)));
+            }
+            else {
+                const aesKey = yield this.aes.generateKey(AesAlgorithm.AesCbcPkcs7, 256);
+                return new AesCryptoKey(aesKey, 256);
+            }
+        });
+    }
+    generateIV(ivByteLength) {
+        return (0, crypto_1.randomBytes)(ivByteLength);
+    }
+    importKey(format, aesKey) {
+        var _a, _b;
+        return __awaiter(this, void 0, void 0, function* () {
+            let keyBytes;
+            if (format === 'jwk') {
+                if (aesKey.kty !== 'oct' ||
+                    (aesKey.alg !== 'A256CBC' && aesKey.alg !== 'A128CBC') ||
+                    !aesKey.ext ||
+                    !((_a = aesKey.key_ops) === null || _a === void 0 ? void 0 : _a.includes('encrypt')) ||
+                    !((_b = aesKey.key_ops) === null || _b === void 0 ? void 0 : _b.includes('decrypt')) ||
+                    !aesKey.k) {
+                    throw new Error('Invalid JWK - must have kty=oct, alg=(A256CBC||A128CBC), ext=true, key_ops=[encrypt, decrypt], and must have non-empty k field');
+                }
+                // b64_2ua works also with url-safe base64
+                keyBytes = new Uint8Array((0, utils_1.b64_2ua)(aesKey.k));
+            }
+            else if (format === 'raw') {
+                if (aesKey instanceof ArrayBuffer && !ArrayBuffer.isView(aesKey))
+                    throw new Error("aesKey must be an ArrayBuffer or an ArrayBufferView when format is 'raw'");
+                keyBytes = new Uint8Array(aesKey);
+            }
+            else
+                throw new Error(`Invalid format ${format}`);
+            const imported = yield this.aes.importRawKey(keyBytes, AesAlgorithm.AesCbcPkcs7);
+            return new AesCryptoKey(imported, keyBytes.length);
+        });
+    }
+}
+function getKryptomKey(cryptoKey) {
+    if ('kryptomKey' in cryptoKey) {
+        return cryptoKey.kryptomKey;
+    }
+    else
+        throw new Error('Invalid crypto key: only crypto keys generated or loaded with this implementation of crypto primitives are supported');
+}
+class AesCryptoKey {
+    constructor(kryptomKey, size) {
+        this.kryptomKey = kryptomKey;
+        this.size = size;
+    }
+    get algorithm() {
+        return { name: 'AES-CBC', length: this.size };
+    }
+    get extractable() {
+        return true;
+    }
+    get type() {
+        return 'secret';
+    }
+    get usages() {
+        return ['encrypt', 'decrypt'];
+    }
+    toJSON() {
+        return {};
+    }
+}
+class NativeHmacBridge {
+    constructor(hmac) {
+        this.hmac = hmac;
+    }
+    exportKey(key) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.hmac.exportRawKey(getKryptomKey(key));
+        });
+    }
+    generateKey() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const kryptomKey = yield this.hmac.generateKey(HmacAlgorithm.HmacSha512);
+            return new HmacCryptoKey(kryptomKey);
+        });
+    }
+    importKey(key) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const kryptomKey = yield this.hmac.importRawKey(new Uint8Array(key), HmacAlgorithm.HmacSha512);
+            return new HmacCryptoKey(kryptomKey);
+        });
+    }
+    sign(key, data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.hmac.sign(new Uint8Array(data), getKryptomKey(key));
+        });
+    }
+    verify(key, data, signature) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.hmac.verify(new Uint8Array(signature), new Uint8Array(data), getKryptomKey(key));
+        });
+    }
+}
+class HmacCryptoKey {
+    constructor(kryptomKey) {
+        this.kryptomKey = kryptomKey;
+    }
+    get algorithm() {
+        return { name: 'HMAC', hash: { name: 'SHA-512' }, length: 1024 };
+    }
+    get extractable() {
+        return true;
+    }
+    get type() {
+        return 'secret';
+    }
+    get usages() {
+        return ['sign', 'verify'];
+    }
+    toJSON() {
+        return {};
+    }
+}
+class NativeRsaBridge {
+    constructor(rsa) {
+        this.rsa = rsa;
+    }
+    checkKeyPairValidity(keyPair) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const text = 'shibboleth';
+                const encryptedText = yield this.encrypt(keyPair.publicKey, (0, utils_1.utf8_2ua)(text));
+                const decryptedText = (0, utils_1.ua2utf8)(yield this.decrypt(keyPair.privateKey, new Uint8Array(encryptedText)));
+                return decryptedText === text;
+            }
+            catch (e) {
+                return false;
+            }
+        });
+    }
+    decrypt(privateKey, encryptedData) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.rsa.decrypt(encryptedData, getKryptomKey(privateKey));
+        });
+    }
+    encrypt(publicKey, plainData) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.rsa.encrypt(plainData, getKryptomKey(publicKey));
+        });
+    }
+    exportKey(cryptoKey, format) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (format === 'jwk') {
+                if (cryptoKey.type === 'private') {
+                    return yield this.rsa.exportPrivateKeyJwk(getKryptomKey(cryptoKey));
+                }
+                else {
+                    return yield this.rsa.exportPublicKeyJwk(getKryptomKey(cryptoKey));
+                }
+            }
+            else if (format === 'spki') {
+                return yield this.rsa.exportPrivateKeyPkcs8(getKryptomKey(cryptoKey));
+            }
+            else if (format === 'pkcs8') {
+                return yield this.rsa.exportPublicKeySpki(getKryptomKey(cryptoKey));
+            }
+            else
+                throw new Error(`Invalid format ${format}`);
+        });
+    }
+    exportKeys(keyPair, privKeyFormat, pubKeyFormat) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let privateKey;
+            if (privKeyFormat === 'jwk') {
+                privateKey = yield this.rsa.exportPrivateKeyJwk(getKryptomKey(keyPair.privateKey));
+            }
+            else {
+                privateKey = yield this.rsa.exportPrivateKeyPkcs8(getKryptomKey(keyPair.privateKey));
+            }
+            let publicKey;
+            if (pubKeyFormat === 'jwk') {
+                publicKey = yield this.rsa.exportPublicKeyJwk(getKryptomKey(keyPair.publicKey));
+            }
+            else {
+                publicKey = yield this.rsa.exportPublicKeySpki(getKryptomKey(keyPair.publicKey));
+            }
+            return { privateKey, publicKey };
+        });
+    }
+    generateKeyPair(shaVersion) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const generated = yield this.rsa.generateKey(this.kryptomAlgorithm(shaVersion), 2048);
+            // In expo-kryptom a private keys and public keys are supertypes of keypair.
+            return {
+                privateKey: new PrivateRsaCryptoKey(generated, this.encryptionKeysAlgorithm(shaVersion)),
+                publicKey: new PublicRsaCryptoKey(generated, this.encryptionKeysAlgorithm(shaVersion)),
+            };
+        });
+    }
+    generateSignatureKeyPair() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const generated = yield this.rsa.generateKey(RsaSignatureAlgorithm.PssWithSha256, 2048);
+            return {
+                privateKey: new PrivateRsaCryptoKey(generated, this.signatureKeysAlgorithm()),
+                publicKey: new PublicRsaCryptoKey(generated, this.signatureKeysAlgorithm()),
+            };
+        });
+    }
+    importKey(format, keydata, keyUsages, hashAlgorithm) {
+        if (keyUsages[0] == 'encrypt' && (format == 'jwk' || format == 'spki')) {
+            return this.importPublicKey(format, keydata, hashAlgorithm);
+        }
+        else if (keyUsages[0] == 'decrypt' && (format == 'jwk' || format == 'pkcs8')) {
+            return this.importPrivateKey(format, keydata, hashAlgorithm);
+        }
+        else
+            throw new Error(`Combination of key usages and key format not supported: ${keyUsages} ${format}`);
+    }
+    importKeyPair(privateKeyFormat, privateKeydata, publicKeyFormat, publicKeyData, hashAlgorithm) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let importedPrivate;
+            let importedPublic;
+            const algorithm = this.kryptomAlgorithm(hashAlgorithm);
+            if (privateKeyFormat == 'jwk') {
+                importedPrivate = yield this.rsa.importPrivateKeyJwk(privateKeydata, algorithm);
+            }
+            else {
+                importedPrivate = yield this.rsa.importPrivateKeyPkcs8(new Uint8Array(privateKeydata), algorithm);
+            }
+            if (publicKeyFormat == 'jwk') {
+                importedPublic = yield this.rsa.importPublicKeyJwk(publicKeyData, algorithm);
+            }
+            else {
+                importedPublic = yield this.rsa.importPublicKeySpki(new Uint8Array(publicKeyData), algorithm);
+            }
+            return {
+                privateKey: new PrivateRsaCryptoKey(importedPrivate, this.encryptionKeysAlgorithm(hashAlgorithm)),
+                publicKey: new PublicRsaCryptoKey(importedPublic, this.encryptionKeysAlgorithm(hashAlgorithm)),
+            };
+        });
+    }
+    importPrivateKey(format, keydata, hashAlgorithm) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let imported;
+            if (format == 'jwk') {
+                imported = yield this.rsa.importPrivateKeyJwk(keydata, this.kryptomAlgorithm(hashAlgorithm));
+            }
+            else {
+                imported = yield this.rsa.importPrivateKeyPkcs8(new Uint8Array(keydata), this.kryptomAlgorithm(hashAlgorithm));
+            }
+            return new PrivateRsaCryptoKey(imported, this.encryptionKeysAlgorithm(hashAlgorithm));
+        });
+    }
+    importPublicKey(format, keydata, hashAlgorithm) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let imported;
+            if (format == 'jwk') {
+                imported = yield this.rsa.importPublicKeyJwk(keydata, this.kryptomAlgorithm(hashAlgorithm));
+            }
+            else {
+                imported = yield this.rsa.importPublicKeySpki(new Uint8Array(keydata), this.kryptomAlgorithm(hashAlgorithm));
+            }
+            return new PublicRsaCryptoKey(imported, this.encryptionKeysAlgorithm(hashAlgorithm));
+        });
+    }
+    importSignatureKey(format, keydata) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let importedKey;
+            if (format == 'jwk') {
+                importedKey = yield this.rsa.importPrivateKeyJwk(keydata, RsaSignatureAlgorithm.PssWithSha256);
+            }
+            else {
+                importedKey = yield this.rsa.importPrivateKeyPkcs8(new Uint8Array(keydata), RsaSignatureAlgorithm.PssWithSha256);
+            }
+            return new PrivateRsaCryptoKey(importedKey, this.signatureKeysAlgorithm());
+        });
+    }
+    importVerificationKey(format, keydata) {
+        return __awaiter(this, void 0, void 0, function* () {
+            let importedKey;
+            if (format == 'jwk') {
+                importedKey = yield this.rsa.importPublicKeyJwk(keydata, RsaSignatureAlgorithm.PssWithSha256);
+            }
+            else {
+                importedKey = yield this.rsa.importPublicKeySpki(new Uint8Array(keydata), RsaSignatureAlgorithm.PssWithSha256);
+            }
+            return new PublicRsaCryptoKey(importedKey, this.signatureKeysAlgorithm());
+        });
+    }
+    sign(privateKey, data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.rsa.signature(new Uint8Array(data), getKryptomKey(privateKey));
+        });
+    }
+    verifySignature(publicKey, signature, data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this.rsa.verify(new Uint8Array(signature), new Uint8Array(data), getKryptomKey(publicKey));
+        });
+    }
+    kryptomAlgorithm(shaVersion) {
+        return shaVersion == 'sha-256' ? RsaEncryptionAlgorithm.OaepWithSha256 : RsaEncryptionAlgorithm.OaepWithSha1;
+    }
+    encryptionKeysAlgorithm(shaVersion) {
+        return {
+            name: 'RSA-OAEP',
+            modulusLength: 2048,
+            publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
+            hash: { name: shaVersion == 'sha-256' ? 'SHA-256' : 'SHA-1' },
+        };
+    }
+    signatureKeysAlgorithm() {
+        return {
+            name: 'RSA-PSS',
+            modulusLength: 2048,
+            publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
+            hash: { name: 'SHA-256' },
+        };
+    }
+}
+class PrivateRsaCryptoKey {
+    constructor(kryptomKey, algorithm) {
+        this.kryptomKey = kryptomKey;
+        this.algorithm = algorithm;
+    }
+    get extractable() {
+        return true;
+    }
+    get type() {
+        return 'private';
+    }
+    get usages() {
+        return this.algorithm.name != 'RSA-PSS' ? ['decrypt'] : ['sign'];
+    }
+    toJSON() {
+        return {};
+    }
+}
+class PublicRsaCryptoKey {
+    constructor(kryptomKey, algorithm) {
+        this.kryptomKey = kryptomKey;
+        this.algorithm = algorithm;
+    }
+    get extractable() {
+        return true;
+    }
+    get type() {
+        return 'public';
+    }
+    get usages() {
+        return this.algorithm.name != 'RSA-PSS' ? ['encrypt'] : ['verify'];
+    }
+    toJSON() {
+        return {};
+    }
+}
+var AesAlgorithm;
+(function (AesAlgorithm) {
+    AesAlgorithm["AesCbcPkcs7"] = "AesCbcPkcs7";
+})(AesAlgorithm || (AesAlgorithm = {}));
+var RsaEncryptionAlgorithm;
+(function (RsaEncryptionAlgorithm) {
+    RsaEncryptionAlgorithm["OaepWithSha1"] = "OaepWithSha1";
+    RsaEncryptionAlgorithm["OaepWithSha256"] = "OaepWithSha256";
+})(RsaEncryptionAlgorithm || (RsaEncryptionAlgorithm = {}));
+var RsaSignatureAlgorithm;
+(function (RsaSignatureAlgorithm) {
+    RsaSignatureAlgorithm["PssWithSha256"] = "PssWithSha256";
+})(RsaSignatureAlgorithm || (RsaSignatureAlgorithm = {}));
+var HmacAlgorithm;
+(function (HmacAlgorithm) {
+    HmacAlgorithm["HmacSha512"] = "HmacSha512";
+})(HmacAlgorithm || (HmacAlgorithm = {}));
+//# sourceMappingURL=NativeCryptoPrimitivesBridge.js.map

package/icc-x-api/crypto/NativeCryptoPrimitivesBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NativeCryptoPrimitivesBridge.js","sourceRoot":"","sources":["../../../icc-x-api/crypto/NativeCryptoPrimitivesBridge.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,qCAAsC;AAGtC,oCAA6E;AAC7E,mCAAoC;AAEpC;;GAEG;AACH,MAAa,4BAA4B;IACvC,YAAY,iBAAoI;QAC9I,IAAI,CAAC,YAAY,GAAG,iBAAiB,CAAC,YAAY,CAAA;QAClD,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAA;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACvD,IAAI,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QACxE,IAAI,CAAC,IAAI,GAAG,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACxD,IAAI,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;IACvD,CAAC;IASD,WAAW,CAAC,CAAS;QACnB,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;IACzC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAA;IACvC,CAAC;IAEK,MAAM,CAAC,IAA8B;;YACzC,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC5F,CAAC;KAAA;CACF;AA5BD,oEA4BC;AAED,MAAM,kBAAmB,SAAQ,oBAAW;IAC1C,YAA6B,YAAiC;QAC5D,KAAK,EAAE,CAAA;QADoB,iBAAY,GAAZ,YAAY,CAAqB;IAE9D,CAAC;IAES,UAAU,CAAC,GAAgB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC5D,+DAA+D;QAC/D,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IACzC,CAAC;CACF;AAED,MAAM,eAAe;IACnB,YAA6B,GAAe,EAAmB,MAA2B;QAA7D,QAAG,GAAH,GAAG,CAAY;QAAmB,WAAM,GAAN,MAAM,CAAqB;IAAG,CAAC;IAExF,OAAO,CAAC,SAAoB,EAAE,aAAuC;;YACzE,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;QACxF,CAAC;KAAA;IAED,WAAW,CAAC,UAAuB,EAAE,UAAsB;QACzD,IAAI;YACF,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;SAC/C;QAAC,OAAO,CAAC,EAAE;YACV,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE;gBACzB,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;aACzD;iBAAM;gBACL,MAAM,CAAC,CAAA;aACR;SACF;IACH,CAAC;IAEK,iBAAiB,CAAC,MAAc,EAAE,SAAmC;;YACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,cAAM,EAAC,MAAM,CAAC,CAAC,CAAA;YAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QAC1C,CAAC;KAAA;IAEK,OAAO,CAAC,SAAoB,EAAE,SAAmC;;YACrE,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QAC1F,CAAC;KAAA;IAEK,iBAAiB,CAAC,MAAc,EAAE,SAAmC;;YACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAA,cAAM,EAAC,MAAM,CAAC,CAAC,CAAA;YAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;QAC1C,CAAC;KAAA;IAIK,SAAS,CAAC,SAAoB,EAAE,MAAqB;;YACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;YACpE,IAAI,MAAM,IAAI,KAAK;gBAAE,OAAO,MAAM,CAAA;YAClC,OAAO;gBACL,GAAG,EAAE,KAAK;gBACV,GAAG,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACpD,GAAG,EAAE,IAAI;gBACT,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;gBAC/B,CAAC,EAAE,IAAA,cAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aAC5E,CAAA;QACH,CAAC;KAAA;IAIK,iBAAiB,CAAC,KAAc;;YACpC,IAAI,KAAK,EAAE;gBACT,OAAO,OAAO,CAAC,OAAO,CAAC,IAAA,cAAM,EAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;aAC5D;iBAAM;gBACL,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;gBACxE,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;aACrC;QACH,CAAC;KAAA;IAED,UAAU,CAAC,YAAoB;QAC7B,OAAO,IAAA,oBAAW,EAAC,YAAY,CAAC,CAAA;IAClC,CAAC;IAEK,SAAS,CAAC,MAAqB,EAAE,MAA6C;;;YAClF,IAAI,QAAoB,CAAA;YACxB,IAAI,MAAM,KAAK,KAAK,EAAE;gBACpB,IACG,MAAqB,CAAC,GAAG,KAAK,KAAK;oBACpC,CAAE,MAAqB,CAAC,GAAG,KAAK,SAAS,IAAK,MAAqB,CAAC,GAAG,KAAK,SAAS,CAAC;oBACtF,CAAE,MAAqB,CAAC,GAAG;oBAC3B,CAAC,CAAA,MAAC,MAAqB,CAAC,OAAO,0CAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;oBACpD,CAAC,CAAA,MAAC,MAAqB,CAAC,OAAO,0CAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;oBACpD,CAAE,MAAqB,CAAC,CAAC,EACzB;oBACA,MAAM,IAAI,KAAK,CACb,gIAAgI,CACjI,CAAA;iBACF;gBACD,0CAA0C;gBAC1C,QAAQ,GAAG,IAAI,UAAU,CAAC,IAAA,eAAO,EAAE,MAAqB,CAAC,CAAE,CAAC,CAAC,CAAA;aAC9D;iBAAM,IAAI,MAAM,KAAK,KAAK,EAAE;gBAC3B,IAAI,MAAO,YAAY,WAAW,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;oBAC/D,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;gBAC7F,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAyB,CAAC,CAAA;aACrD;;gBAAM,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAA;YAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;YAChF,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;;KACnD;CACF;AAED,SAAS,aAAa,CAAI,SAAoB;IAC5C,IAAI,YAAY,IAAI,SAAS,EAAE;QAC7B,OAAO,SAAS,CAAC,UAAe,CAAA;KACjC;;QAAM,MAAM,IAAI,KAAK,CAAC,sHAAsH,CAAC,CAAA;AAChJ,CAAC;AAED,MAAM,YAAY;IAChB,YAAqB,UAAkB,EAAW,IAAY;QAAzC,eAAU,GAAV,UAAU,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAElE,IAAI,SAAS;QACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;IAC/C,CAAC;IACD,IAAI,WAAW;QACb,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,IAAI;QACN,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,IAAI,MAAM;QACR,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAC/B,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,CAAA;IACX,CAAC;CACF;AAED,MAAM,gBAAgB;IACpB,YAA6B,IAAiB;QAAjB,SAAI,GAAJ,IAAI,CAAa;IAAG,CAAC;IAE5C,SAAS,CAAC,GAAc;;YAC5B,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;QACzD,CAAC;KAAA;IAEK,WAAW;;YACf,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;YACxE,OAAO,IAAI,aAAa,CAAC,UAAU,CAAC,CAAA;QACtC,CAAC;KAAA;IAEK,SAAS,CAAC,GAAgB;;YAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;YAC9F,OAAO,IAAI,aAAa,CAAC,UAAU,CAAC,CAAA;QACtC,CAAC;KAAA;IAEK,IAAI,CAAC,GAAc,EAAE,IAAiB;;YAC1C,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;QACvE,CAAC;KAAA;IAEK,MAAM,CAAC,GAAc,EAAE,IAAiB,EAAE,SAAsB;;YACpE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;QACpG,CAAC;KAAA;CACF;AAED,MAAM,aAAa;IACjB,YAAqB,UAAmB;QAAnB,eAAU,GAAV,UAAU,CAAS;IAAG,CAAC;IAE5C,IAAI,SAAS;QACX,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAClE,CAAC;IACD,IAAI,WAAW;QACb,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,IAAI;QACN,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,IAAI,MAAM;QACR,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC3B,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,CAAA;IACX,CAAC;CACF;AAED,MAAM,eAAe;IACnB,YAA6B,GAAe;QAAf,QAAG,GAAH,GAAG,CAAY;IAAG,CAAC;IAE1C,oBAAoB,CAAC,OAA2B;;YACpD,IAAI;gBACF,MAAM,IAAI,GAAG,YAAY,CAAA;gBACzB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,IAAA,gBAAQ,EAAC,IAAI,CAAC,CAAC,CAAA;gBAC3E,MAAM,aAAa,GAAG,IAAA,eAAO,EAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;gBACpG,OAAO,aAAa,KAAK,IAAI,CAAA;aAC9B;YAAC,OAAO,CAAC,EAAE;gBACV,OAAO,KAAK,CAAA;aACb;QACH,CAAC;KAAA;IAEK,OAAO,CAAC,UAAqB,EAAE,aAAyB;;YAC5D,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAA;QACzE,CAAC;KAAA;IAEK,OAAO,CAAC,SAAoB,EAAE,SAAqB;;YACvD,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;QACpE,CAAC;KAAA;IAKK,SAAS,CAAC,SAAoB,EAAE,MAAgC;;YACpE,IAAI,MAAM,KAAK,KAAK,EAAE;gBACpB,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE;oBAChC,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;iBACpE;qBAAM;oBACL,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;iBACnE;aACF;iBAAM,IAAI,MAAM,KAAK,MAAM,EAAE;gBAC5B,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;aACtE;iBAAM,IAAI,MAAM,KAAK,OAAO,EAAE;gBAC7B,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;aACpE;;gBAAM,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAA;QACpD,CAAC;KAAA;IAIK,UAAU,CACd,OAA2B,EAC3B,aAA8B,EAC9B,YAA4B;;YAE5B,IAAI,UAAoC,CAAA;YACxC,IAAI,aAAa,KAAK,KAAK,EAAE;gBAC3B,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;aACnF;iBAAM;gBACL,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;aACrF;YACD,IAAI,SAAmC,CAAA;YACvC,IAAI,YAAY,KAAK,KAAK,EAAE;gBAC1B,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;aAChF;iBAAM;gBACL,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;aACjF;YACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;QAClC,CAAC;KAAA;IAEK,eAAe,CAAC,UAAsB;;YAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;YACrF,4EAA4E;YAC5E,OAAO;gBACL,UAAU,EAAE,IAAI,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;gBACxF,SAAS,EAAE,IAAI,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;aACvF,CAAA;QACH,CAAC;KAAA;IAEK,wBAAwB;;YAC5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;YACvF,OAAO;gBACL,UAAU,EAAE,IAAI,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC7E,SAAS,EAAE,IAAI,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC;aAC5E,CAAA;QACH,CAAC;KAAA;IAED,SAAS,CACP,MAAgC,EAChC,OAAiC,EACjC,SAAqB,EACrB,aAAyB;QAEzB,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,MAAM,IAAI,MAAM,CAAC,EAAE;YACtE,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;SAC5D;aAAM,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,MAAM,IAAI,OAAO,CAAC,EAAE;YAC9E,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;SAC7D;;YAAM,MAAM,IAAI,KAAK,CAAC,2DAA2D,SAAS,IAAI,MAAM,EAAE,CAAC,CAAA;IAC1G,CAAC;IAEK,aAAa,CACjB,gBAAwB,EACxB,cAAwC,EACxC,eAAuB,EACvB,aAAuC,EACvC,aAAyB;;YAEzB,IAAI,eAA8B,CAAA;YAClC,IAAI,cAA4B,CAAA;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAA;YACtD,IAAI,gBAAgB,IAAI,KAAK,EAAE;gBAC7B,eAAe,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,cAAkC,EAAE,SAAS,CAAC,CAAA;aACpG;iBAAM;gBACL,eAAe,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,UAAU,CAAC,cAA6B,CAAC,EAAE,SAAS,CAAC,CAAA;aACjH;YACD,IAAI,eAAe,IAAI,KAAK,EAAE;gBAC5B,cAAc,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,aAAgC,EAAE,SAAS,CAAC,CAAA;aAChG;iBAAM;gBACL,cAAc,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,UAAU,CAAC,aAA4B,CAAC,EAAE,SAAS,CAAC,CAAA;aAC7G;YACD,OAAO;gBACL,UAAU,EAAE,IAAI,mBAAmB,CAAC,eAAe,EAAE,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;gBACjG,SAAS,EAAE,IAAI,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;aAC/F,CAAA;QACH,CAAC;KAAA;IAEK,gBAAgB,CAAC,MAAuB,EAAE,OAAiC,EAAE,aAAyB;;YAC1G,IAAI,QAAuB,CAAA;YAC3B,IAAI,MAAM,IAAI,KAAK,EAAE;gBACnB,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,OAA2B,EAAE,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAA;aACjH;iBAAM;gBACL,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,UAAU,CAAC,OAAsB,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAA;aAC9H;YACD,OAAO,IAAI,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAA;QACvF,CAAC;KAAA;IAEK,eAAe,CAAC,MAAsB,EAAE,OAAiC,EAAE,aAAyB;;YACxG,IAAI,QAAsB,CAAA;YAC1B,IAAI,MAAM,IAAI,KAAK,EAAE;gBACnB,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAA0B,EAAE,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAA;aAC/G;iBAAM;gBACL,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,UAAU,CAAC,OAAsB,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAA;aAC5H;YACD,OAAO,IAAI,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAA;QACtF,CAAC;KAAA;IAEK,kBAAkB,CAAC,MAAuB,EAAE,OAAiC;;YACjF,IAAI,WAA0B,CAAA;YAC9B,IAAI,MAAM,IAAI,KAAK,EAAE;gBACnB,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,OAA2B,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAA;aACnH;iBAAM;gBACL,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,UAAU,CAAC,OAAsB,CAAC,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAA;aAChI;YACD,OAAO,IAAI,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAA;QAC5E,CAAC;KAAA;IAEK,qBAAqB,CAAC,MAAsB,EAAE,OAAiC;;YACnF,IAAI,WAAyB,CAAA;YAC7B,IAAI,MAAM,IAAI,KAAK,EAAE;gBACnB,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAA0B,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAA;aACjH;iBAAM;gBACL,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,UAAU,CAAC,OAAsB,CAAC,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAA;aAC9H;YACD,OAAO,IAAI,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAA;QAC3E,CAAC;KAAA;IAEK,IAAI,CAAC,UAAqB,EAAE,IAAiB;;YACjD,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CAAA;QAClF,CAAC;KAAA;IAEK,eAAe,CAAC,SAAoB,EAAE,SAAsB,EAAE,IAAiB;;YACnF,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;QACzG,CAAC;KAAA;IAEO,gBAAgB,CAAC,UAAsB;QAC7C,OAAO,UAAU,IAAI,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC,YAAY,CAAA;IAC9G,CAAC;IAEO,uBAAuB,CAAC,UAAsB;QACpD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE;SAC9D,CAAA;IACH,CAAC;IAEO,sBAAsB;QAC5B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC1B,CAAA;IACH,CAAC;CACF;AAED,MAAM,mBAAmB;IACvB,YAAqB,UAAyB,EAAW,SAA0B;QAA9D,eAAU,GAAV,UAAU,CAAe;QAAW,cAAS,GAAT,SAAS,CAAiB;IAAG,CAAC;IAEvF,IAAI,WAAW;QACb,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,IAAI;QACN,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAClE,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,CAAA;IACX,CAAC;CACF;AAED,MAAM,kBAAkB;IACtB,YAAqB,UAAwB,EAAW,SAA0B;QAA7D,eAAU,GAAV,UAAU,CAAc;QAAW,cAAS,GAAT,SAAS,CAAiB;IAAG,CAAC;IAEtF,IAAI,WAAW;QACb,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,IAAI;QACN,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IACpE,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,CAAA;IACX,CAAC;CACF;AAED,IAAK,YAEJ;AAFD,WAAK,YAAY;IACf,2CAA2B,CAAA;AAC7B,CAAC,EAFI,YAAY,KAAZ,YAAY,QAEhB;AACD,IAAK,sBAGJ;AAHD,WAAK,sBAAsB;IACzB,uDAA6B,CAAA;IAC7B,2DAAiC,CAAA;AACnC,CAAC,EAHI,sBAAsB,KAAtB,sBAAsB,QAG1B;AACD,IAAK,qBAEJ;AAFD,WAAK,qBAAqB;IACxB,wDAA+B,CAAA;AACjC,CAAC,EAFI,qBAAqB,KAArB,qBAAqB,QAEzB;AAED,IAAK,aAEJ;AAFD,WAAK,aAAa;IAChB,0CAAyB,CAAA;AAC3B,CAAC,EAFI,aAAa,KAAb,aAAa,QAEjB","sourcesContent":["import { CryptoPrimitives } from './CryptoPrimitives'\nimport { HMACUtils } from './HMACUtils'\nimport { ShamirClass } from './shamir'\nimport { AESUtils } from './AES'\nimport { KeyPair, RSAUtils, ShaVersion } from './RSA'\nimport { b64_2ua, hex2ua, ua2b64, ua2hex, ua2utf8, utf8_2ua } from '../utils'\nimport { randomBytes } from 'crypto'\n\n/**\n * Allows to use the expo-kryptom module as crypto primitives. This is necessary when building expo (react native) apps.\n */\nexport class NativeCryptoPrimitivesBridge implements CryptoPrimitives {\n  constructor(expoKryptomModule: { Aes: AesService; Rsa: RsaService; Hmac: HmacService; StrongRandom: StrongRandomService; Digest: DigestService }) {\n    this.strongRandom = expoKryptomModule.StrongRandom\n    this.digest = expoKryptomModule.Digest\n    this.shamir = new StrongRandomShamir(this.strongRandom)\n    this.AES = new NativeAesBridge(expoKryptomModule.Aes, this.strongRandom)\n    this.HMAC = new NativeHmacBridge(expoKryptomModule.Hmac)\n    this.RSA = new NativeRsaBridge(expoKryptomModule.Rsa)\n  }\n\n  readonly AES: AESUtils\n  readonly HMAC: HMACUtils\n  readonly RSA: RSAUtils\n  readonly shamir: ShamirClass\n  private readonly strongRandom: StrongRandomService\n  private readonly digest: DigestService\n\n  randomBytes(n: number): Uint8Array {\n    return this.strongRandom.randomBytes(n)\n  }\n\n  randomUuid(): string {\n    return this.strongRandom.randomUUID()\n  }\n\n  async sha256(data: ArrayBuffer | Uint8Array): Promise<ArrayBuffer> {\n    return await this.digest.sha256(data instanceof ArrayBuffer ? new Uint8Array(data) : data)\n  }\n}\n\nclass StrongRandomShamir extends ShamirClass {\n  constructor(private readonly strongRandom: StrongRandomService) {\n    super()\n  }\n\n  protected fillRandom(arr: Uint32Array): void {\n    const random = this.strongRandom.randomBytes(arr.byteLength)\n    // Note that the new Uint32Array does not copy the random array\n    arr.set(new Uint32Array(random.buffer))\n  }\n}\n\nclass NativeAesBridge implements AESUtils {\n  constructor(private readonly aes: AesService, private readonly random: StrongRandomService) {}\n\n  async decrypt(cryptoKey: CryptoKey, encryptedData: ArrayBuffer | Uint8Array): Promise<ArrayBuffer> {\n    return await this.aes.decrypt(new Uint8Array(encryptedData), getKryptomKey(cryptoKey))\n  }\n\n  decryptSome(cryptoKeys: CryptoKey[], uint8Array: Uint8Array): Promise<ArrayBuffer> {\n    try {\n      return this.decrypt(cryptoKeys[0], uint8Array)\n    } catch (e) {\n      if (cryptoKeys.length > 1) {\n        return this.decryptSome(cryptoKeys.slice(1), uint8Array)\n      } else {\n        throw e\n      }\n    }\n  }\n\n  async decryptWithRawKey(rawKey: string, plainData: ArrayBuffer | Uint8Array): Promise<ArrayBuffer> {\n    const imported = await this.importKey('raw', hex2ua(rawKey))\n    return this.decrypt(imported, plainData)\n  }\n\n  async encrypt(cryptoKey: CryptoKey, plainData: ArrayBuffer | Uint8Array): Promise<ArrayBuffer> {\n    return await this.aes.encrypt(new Uint8Array(plainData), getKryptomKey(cryptoKey), null)\n  }\n\n  async encryptWithRawKey(rawKey: string, plainData: ArrayBuffer | Uint8Array): Promise<ArrayBuffer> {\n    const imported = await this.importKey('raw', hex2ua(rawKey))\n    return this.encrypt(imported, plainData)\n  }\n\n  exportKey(cryptoKey: CryptoKey, format: 'raw'): Promise<ArrayBuffer>\n  exportKey(cryptoKey: CryptoKey, format: 'jwk'): Promise<JsonWebKey>\n  async exportKey(cryptoKey: CryptoKey, format: 'jwk' | 'raw'): Promise<ArrayBuffer | JsonWebKey> {\n    const rawKey = await this.aes.exportRawKey(getKryptomKey(cryptoKey))\n    if (format == 'raw') return rawKey\n    return {\n      kty: 'oct',\n      alg: rawKey.byteLength == 32 ? 'A256CBC' : 'A128CBC',\n      ext: true,\n      key_ops: ['encrypt', 'decrypt'],\n      k: ua2b64(rawKey).replace(/=/g, '').replace(/\\+/g, '-').replace(/\\//g, '_'),\n    }\n  }\n\n  generateCryptoKey(toHex: false): Promise<CryptoKey>\n  generateCryptoKey(toHex: true): Promise<string>\n  async generateCryptoKey(toHex: boolean): Promise<string | CryptoKey> {\n    if (toHex) {\n      return Promise.resolve(ua2hex(this.random.randomBytes(32)))\n    } else {\n      const aesKey = await this.aes.generateKey(AesAlgorithm.AesCbcPkcs7, 256)\n      return new AesCryptoKey(aesKey, 256)\n    }\n  }\n\n  generateIV(ivByteLength: number): Uint8Array {\n    return randomBytes(ivByteLength)\n  }\n\n  async importKey(format: 'jwk' | 'raw', aesKey: JsonWebKey | ArrayBuffer | Uint8Array): Promise<CryptoKey> {\n    let keyBytes: Uint8Array\n    if (format === 'jwk') {\n      if (\n        (aesKey as JsonWebKey).kty !== 'oct' ||\n        ((aesKey as JsonWebKey).alg !== 'A256CBC' && (aesKey as JsonWebKey).alg !== 'A128CBC') ||\n        !(aesKey as JsonWebKey).ext ||\n        !(aesKey as JsonWebKey).key_ops?.includes('encrypt') ||\n        !(aesKey as JsonWebKey).key_ops?.includes('decrypt') ||\n        !(aesKey as JsonWebKey).k\n      ) {\n        throw new Error(\n          'Invalid JWK - must have kty=oct, alg=(A256CBC||A128CBC), ext=true, key_ops=[encrypt, decrypt], and must have non-empty k field'\n        )\n      }\n      // b64_2ua works also with url-safe base64\n      keyBytes = new Uint8Array(b64_2ua((aesKey as JsonWebKey).k!))\n    } else if (format === 'raw') {\n      if (aesKey! instanceof ArrayBuffer && !ArrayBuffer.isView(aesKey))\n        throw new Error(\"aesKey must be an ArrayBuffer or an ArrayBufferView when format is 'raw'\")\n      keyBytes = new Uint8Array(aesKey as ArrayBufferLike)\n    } else throw new Error(`Invalid format ${format}`)\n    const imported = await this.aes.importRawKey(keyBytes, AesAlgorithm.AesCbcPkcs7)\n    return new AesCryptoKey(imported, keyBytes.length)\n  }\n}\n\nfunction getKryptomKey<T>(cryptoKey: CryptoKey) {\n  if ('kryptomKey' in cryptoKey) {\n    return cryptoKey.kryptomKey as T\n  } else throw new Error('Invalid crypto key: only crypto keys generated or loaded with this implementation of crypto primitives are supported')\n}\n\nclass AesCryptoKey implements CryptoKey {\n  constructor(readonly kryptomKey: AesKey, readonly size: number) {}\n\n  get algorithm(): AesKeyAlgorithm {\n    return { name: 'AES-CBC', length: this.size }\n  }\n  get extractable(): boolean {\n    return true\n  }\n  get type(): KeyType {\n    return 'secret'\n  }\n  get usages(): KeyUsage[] {\n    return ['encrypt', 'decrypt']\n  }\n\n  toJSON() {\n    return {}\n  }\n}\n\nclass NativeHmacBridge implements HMACUtils {\n  constructor(private readonly hmac: HmacService) {}\n\n  async exportKey(key: CryptoKey): Promise<ArrayBuffer> {\n    return await this.hmac.exportRawKey(getKryptomKey(key))\n  }\n\n  async generateKey(): Promise<CryptoKey> {\n    const kryptomKey = await this.hmac.generateKey(HmacAlgorithm.HmacSha512)\n    return new HmacCryptoKey(kryptomKey)\n  }\n\n  async importKey(key: ArrayBuffer): Promise<CryptoKey> {\n    const kryptomKey = await this.hmac.importRawKey(new Uint8Array(key), HmacAlgorithm.HmacSha512)\n    return new HmacCryptoKey(kryptomKey)\n  }\n\n  async sign(key: CryptoKey, data: ArrayBuffer): Promise<ArrayBuffer> {\n    return await this.hmac.sign(new Uint8Array(data), getKryptomKey(key))\n  }\n\n  async verify(key: CryptoKey, data: ArrayBuffer, signature: ArrayBuffer): Promise<boolean> {\n    return await this.hmac.verify(new Uint8Array(signature), new Uint8Array(data), getKryptomKey(key))\n  }\n}\n\nclass HmacCryptoKey implements CryptoKey {\n  constructor(readonly kryptomKey: HmacKey) {}\n\n  get algorithm(): HmacKeyAlgorithm {\n    return { name: 'HMAC', hash: { name: 'SHA-512' }, length: 1024 }\n  }\n  get extractable(): boolean {\n    return true\n  }\n  get type(): KeyType {\n    return 'secret'\n  }\n  get usages(): KeyUsage[] {\n    return ['sign', 'verify']\n  }\n\n  toJSON() {\n    return {}\n  }\n}\n\nclass NativeRsaBridge implements RSAUtils {\n  constructor(private readonly rsa: RsaService) {}\n\n  async checkKeyPairValidity(keyPair: KeyPair<CryptoKey>): Promise<boolean> {\n    try {\n      const text = 'shibboleth'\n      const encryptedText = await this.encrypt(keyPair.publicKey, utf8_2ua(text))\n      const decryptedText = ua2utf8(await this.decrypt(keyPair.privateKey, new Uint8Array(encryptedText)))\n      return decryptedText === text\n    } catch (e) {\n      return false\n    }\n  }\n\n  async decrypt(privateKey: CryptoKey, encryptedData: Uint8Array): Promise<ArrayBuffer> {\n    return await this.rsa.decrypt(encryptedData, getKryptomKey(privateKey))\n  }\n\n  async encrypt(publicKey: CryptoKey, plainData: Uint8Array): Promise<ArrayBuffer> {\n    return await this.rsa.encrypt(plainData, getKryptomKey(publicKey))\n  }\n\n  exportKey(cryptoKey: CryptoKey, format: 'jwk'): Promise<JsonWebKey>\n  exportKey(cryptoKey: CryptoKey, format: 'spki'): Promise<ArrayBuffer>\n  exportKey(cryptoKey: CryptoKey, format: 'pkcs8'): Promise<ArrayBuffer>\n  async exportKey(cryptoKey: CryptoKey, format: 'jwk' | 'spki' | 'pkcs8'): Promise<JsonWebKey | ArrayBuffer> {\n    if (format === 'jwk') {\n      if (cryptoKey.type === 'private') {\n        return await this.rsa.exportPrivateKeyJwk(getKryptomKey(cryptoKey))\n      } else {\n        return await this.rsa.exportPublicKeyJwk(getKryptomKey(cryptoKey))\n      }\n    } else if (format === 'spki') {\n      return await this.rsa.exportPrivateKeyPkcs8(getKryptomKey(cryptoKey))\n    } else if (format === 'pkcs8') {\n      return await this.rsa.exportPublicKeySpki(getKryptomKey(cryptoKey))\n    } else throw new Error(`Invalid format ${format}`)\n  }\n\n  exportKeys(keyPair: KeyPair<CryptoKey>, privKeyFormat: 'jwk', pubKeyFormat: 'jwk'): Promise<KeyPair<JsonWebKey>>\n  exportKeys(keyPair: KeyPair<CryptoKey>, privKeyFormat: 'pkcs8', pubKeyFormat: 'spki'): Promise<KeyPair<ArrayBuffer>>\n  async exportKeys(\n    keyPair: KeyPair<CryptoKey>,\n    privKeyFormat: 'jwk' | 'pkcs8',\n    pubKeyFormat: 'jwk' | 'spki'\n  ): Promise<KeyPair<JsonWebKey | ArrayBuffer>> {\n    let privateKey: JsonWebKey | ArrayBuffer\n    if (privKeyFormat === 'jwk') {\n      privateKey = await this.rsa.exportPrivateKeyJwk(getKryptomKey(keyPair.privateKey))\n    } else {\n      privateKey = await this.rsa.exportPrivateKeyPkcs8(getKryptomKey(keyPair.privateKey))\n    }\n    let publicKey: JsonWebKey | ArrayBuffer\n    if (pubKeyFormat === 'jwk') {\n      publicKey = await this.rsa.exportPublicKeyJwk(getKryptomKey(keyPair.publicKey))\n    } else {\n      publicKey = await this.rsa.exportPublicKeySpki(getKryptomKey(keyPair.publicKey))\n    }\n    return { privateKey, publicKey }\n  }\n\n  async generateKeyPair(shaVersion: ShaVersion): Promise<KeyPair<CryptoKey>> {\n    const generated = await this.rsa.generateKey(this.kryptomAlgorithm(shaVersion), 2048)\n    // In expo-kryptom a private keys and public keys are supertypes of keypair.\n    return {\n      privateKey: new PrivateRsaCryptoKey(generated, this.encryptionKeysAlgorithm(shaVersion)),\n      publicKey: new PublicRsaCryptoKey(generated, this.encryptionKeysAlgorithm(shaVersion)),\n    }\n  }\n\n  async generateSignatureKeyPair(): Promise<KeyPair<CryptoKey>> {\n    const generated = await this.rsa.generateKey(RsaSignatureAlgorithm.PssWithSha256, 2048)\n    return {\n      privateKey: new PrivateRsaCryptoKey(generated, this.signatureKeysAlgorithm()),\n      publicKey: new PublicRsaCryptoKey(generated, this.signatureKeysAlgorithm()),\n    }\n  }\n\n  importKey(\n    format: 'jwk' | 'spki' | 'pkcs8',\n    keydata: JsonWebKey | ArrayBuffer,\n    keyUsages: KeyUsage[],\n    hashAlgorithm: ShaVersion\n  ): Promise<CryptoKey> {\n    if (keyUsages[0] == 'encrypt' && (format == 'jwk' || format == 'spki')) {\n      return this.importPublicKey(format, keydata, hashAlgorithm)\n    } else if (keyUsages[0] == 'decrypt' && (format == 'jwk' || format == 'pkcs8')) {\n      return this.importPrivateKey(format, keydata, hashAlgorithm)\n    } else throw new Error(`Combination of key usages and key format not supported: ${keyUsages} ${format}`)\n  }\n\n  async importKeyPair(\n    privateKeyFormat: string,\n    privateKeydata: JsonWebKey | ArrayBuffer,\n    publicKeyFormat: string,\n    publicKeyData: JsonWebKey | ArrayBuffer,\n    hashAlgorithm: ShaVersion\n  ): Promise<KeyPair<CryptoKey>> {\n    let importedPrivate: RsaPrivateKey\n    let importedPublic: RsaPublicKey\n    const algorithm = this.kryptomAlgorithm(hashAlgorithm)\n    if (privateKeyFormat == 'jwk') {\n      importedPrivate = await this.rsa.importPrivateKeyJwk(privateKeydata as PrivateRsaKeyJwk, algorithm)\n    } else {\n      importedPrivate = await this.rsa.importPrivateKeyPkcs8(new Uint8Array(privateKeydata as ArrayBuffer), algorithm)\n    }\n    if (publicKeyFormat == 'jwk') {\n      importedPublic = await this.rsa.importPublicKeyJwk(publicKeyData as PublicRsaKeyJwk, algorithm)\n    } else {\n      importedPublic = await this.rsa.importPublicKeySpki(new Uint8Array(publicKeyData as ArrayBuffer), algorithm)\n    }\n    return {\n      privateKey: new PrivateRsaCryptoKey(importedPrivate, this.encryptionKeysAlgorithm(hashAlgorithm)),\n      publicKey: new PublicRsaCryptoKey(importedPublic, this.encryptionKeysAlgorithm(hashAlgorithm)),\n    }\n  }\n\n  async importPrivateKey(format: 'jwk' | 'pkcs8', keydata: JsonWebKey | ArrayBuffer, hashAlgorithm: ShaVersion): Promise<CryptoKey> {\n    let imported: RsaPrivateKey\n    if (format == 'jwk') {\n      imported = await this.rsa.importPrivateKeyJwk(keydata as PrivateRsaKeyJwk, this.kryptomAlgorithm(hashAlgorithm))\n    } else {\n      imported = await this.rsa.importPrivateKeyPkcs8(new Uint8Array(keydata as ArrayBuffer), this.kryptomAlgorithm(hashAlgorithm))\n    }\n    return new PrivateRsaCryptoKey(imported, this.encryptionKeysAlgorithm(hashAlgorithm))\n  }\n\n  async importPublicKey(format: 'jwk' | 'spki', keydata: JsonWebKey | ArrayBuffer, hashAlgorithm: ShaVersion): Promise<CryptoKey> {\n    let imported: RsaPublicKey\n    if (format == 'jwk') {\n      imported = await this.rsa.importPublicKeyJwk(keydata as PublicRsaKeyJwk, this.kryptomAlgorithm(hashAlgorithm))\n    } else {\n      imported = await this.rsa.importPublicKeySpki(new Uint8Array(keydata as ArrayBuffer), this.kryptomAlgorithm(hashAlgorithm))\n    }\n    return new PublicRsaCryptoKey(imported, this.encryptionKeysAlgorithm(hashAlgorithm))\n  }\n\n  async importSignatureKey(format: 'jwk' | 'pkcs8', keydata: JsonWebKey | ArrayBuffer): Promise<CryptoKey> {\n    let importedKey: RsaPrivateKey\n    if (format == 'jwk') {\n      importedKey = await this.rsa.importPrivateKeyJwk(keydata as PrivateRsaKeyJwk, RsaSignatureAlgorithm.PssWithSha256)\n    } else {\n      importedKey = await this.rsa.importPrivateKeyPkcs8(new Uint8Array(keydata as ArrayBuffer), RsaSignatureAlgorithm.PssWithSha256)\n    }\n    return new PrivateRsaCryptoKey(importedKey, this.signatureKeysAlgorithm())\n  }\n\n  async importVerificationKey(format: 'jwk' | 'spki', keydata: JsonWebKey | ArrayBuffer): Promise<CryptoKey> {\n    let importedKey: RsaPublicKey\n    if (format == 'jwk') {\n      importedKey = await this.rsa.importPublicKeyJwk(keydata as PublicRsaKeyJwk, RsaSignatureAlgorithm.PssWithSha256)\n    } else {\n      importedKey = await this.rsa.importPublicKeySpki(new Uint8Array(keydata as ArrayBuffer), RsaSignatureAlgorithm.PssWithSha256)\n    }\n    return new PublicRsaCryptoKey(importedKey, this.signatureKeysAlgorithm())\n  }\n\n  async sign(privateKey: CryptoKey, data: ArrayBuffer): Promise<ArrayBuffer> {\n    return await this.rsa.signature(new Uint8Array(data), getKryptomKey(privateKey))\n  }\n\n  async verifySignature(publicKey: CryptoKey, signature: ArrayBuffer, data: ArrayBuffer): Promise<boolean> {\n    return await this.rsa.verify(new Uint8Array(signature), new Uint8Array(data), getKryptomKey(publicKey))\n  }\n\n  private kryptomAlgorithm(shaVersion: ShaVersion): RsaEncryptionAlgorithm {\n    return shaVersion == 'sha-256' ? RsaEncryptionAlgorithm.OaepWithSha256 : RsaEncryptionAlgorithm.OaepWithSha1\n  }\n\n  private encryptionKeysAlgorithm(shaVersion: ShaVersion): RsaHashedKeyAlgorithm {\n    return {\n      name: 'RSA-OAEP',\n      modulusLength: 2048,\n      publicExponent: new Uint8Array([0x01, 0x00, 0x01]), // Equivalent to 65537 (Fermat F4), read http://en.wikipedia.org/wiki/65537_(number)\n      hash: { name: shaVersion == 'sha-256' ? 'SHA-256' : 'SHA-1' },\n    }\n  }\n\n  private signatureKeysAlgorithm(): RsaHashedKeyAlgorithm {\n    return {\n      name: 'RSA-PSS',\n      modulusLength: 2048,\n      publicExponent: new Uint8Array([0x01, 0x00, 0x01]), // Equivalent to 65537 (Fermat F4), read http://en.wikipedia.org/wiki/65537_(number)\n      hash: { name: 'SHA-256' },\n    }\n  }\n}\n\nclass PrivateRsaCryptoKey implements CryptoKey {\n  constructor(readonly kryptomKey: RsaPrivateKey, readonly algorithm: RsaKeyAlgorithm) {}\n\n  get extractable(): boolean {\n    return true\n  }\n\n  get type(): KeyType {\n    return 'private'\n  }\n\n  get usages(): KeyUsage[] {\n    return this.algorithm.name != 'RSA-PSS' ? ['decrypt'] : ['sign']\n  }\n\n  toJSON() {\n    return {}\n  }\n}\n\nclass PublicRsaCryptoKey implements CryptoKey {\n  constructor(readonly kryptomKey: RsaPublicKey, readonly algorithm: RsaKeyAlgorithm) {}\n\n  get extractable(): boolean {\n    return true\n  }\n\n  get type(): KeyType {\n    return 'public'\n  }\n\n  get usages(): KeyUsage[] {\n    return this.algorithm.name != 'RSA-PSS' ? ['encrypt'] : ['verify']\n  }\n\n  toJSON() {\n    return {}\n  }\n}\n\nenum AesAlgorithm {\n  AesCbcPkcs7 = 'AesCbcPkcs7',\n}\nenum RsaEncryptionAlgorithm {\n  OaepWithSha1 = 'OaepWithSha1',\n  OaepWithSha256 = 'OaepWithSha256',\n}\nenum RsaSignatureAlgorithm {\n  PssWithSha256 = 'PssWithSha256',\n}\ntype RsaAlgorithm = RsaEncryptionAlgorithm | RsaSignatureAlgorithm\nenum HmacAlgorithm {\n  HmacSha512 = 'HmacSha512',\n}\n\ninterface HmacKey {\n  algorithmIdentifier: HmacAlgorithm\n}\n\ninterface AesKey {\n  algorithmIdentifier: AesAlgorithm\n}\n\ninterface RsaKeyPair {\n  algorithmIdentifier: RsaAlgorithm\n}\n\ninterface RsaPrivateKey {\n  algorithmIdentifier: RsaAlgorithm\n}\n\ninterface RsaPublicKey {\n  algorithmIdentifier: RsaAlgorithm\n}\n\ntype PrivateRsaKeyJwk = {\n  alg: string\n  d: string\n  dp: string\n  dq: string\n  e: string\n  ext: boolean\n  key_ops: string[]\n  n: string\n  p: string\n  q: string\n  qi: string\n}\n\ntype PublicRsaKeyJwk = {\n  alg: string\n  e: string\n  ext: boolean\n  key_ops: string[]\n  n: string\n}\n\ninterface AesService {\n  generateKey(algorithmIdentifier: AesAlgorithm, size: number): Promise<AesKey>\n  encrypt(data: Uint8Array, key: AesKey, iv: Uint8Array | null): Promise<Uint8Array>\n  decrypt(ivAndEncryptedData: Uint8Array, key: AesKey): Promise<Uint8Array>\n  exportRawKey(key: AesKey): Promise<Uint8Array>\n  importRawKey(rawKey: Uint8Array, algorithmIdentifier: AesAlgorithm): Promise<AesKey>\n}\n\ninterface RsaService {\n  generateKey(algorithmIdentifier: RsaAlgorithm, size: number): Promise<RsaKeyPair>\n  encrypt(data: Uint8Array, key: RsaPublicKey): Promise<Uint8Array>\n  decrypt(data: Uint8Array, key: RsaPrivateKey): Promise<Uint8Array>\n  signature(data: Uint8Array, key: RsaPrivateKey): Promise<Uint8Array>\n  verify(signature: Uint8Array, data: Uint8Array, key: RsaPublicKey): Promise<boolean>\n  exportPrivateKeyPkcs8(key: RsaPrivateKey): Promise<Uint8Array>\n  exportPrivateKeyJwk(key: RsaPrivateKey): Promise<PrivateRsaKeyJwk>\n  exportPublicKeySpki(key: RsaPublicKey): Promise<Uint8Array>\n  exportPublicKeyJwk(key: RsaPublicKey): Promise<PublicRsaKeyJwk>\n  importPrivateKeyPkcs8(privateKeyPkcs8: Uint8Array, algorithmIdentifier: RsaAlgorithm): Promise<RsaPrivateKey>\n  importPrivateKeyJwk(privateKey: PrivateRsaKeyJwk, algorithmIdentifier: RsaAlgorithm): Promise<RsaPrivateKey>\n  importPublicKeySpki(publicKeySpki: Uint8Array, algorithmIdentifier: RsaAlgorithm): Promise<RsaPublicKey>\n  importPublicKeyJwk(publicKey: PublicRsaKeyJwk, algorithmIdentifier: RsaAlgorithm): Promise<RsaPublicKey>\n  importKeyPair(privateKeyPkcs8: Uint8Array, algorithmIdentifier: RsaAlgorithm): Promise<RsaKeyPair>\n}\n\ninterface HmacService {\n  generateKey(algorithmIdentifier: HmacAlgorithm): Promise<HmacKey>\n  sign(data: Uint8Array, key: HmacKey): Promise<Uint8Array>\n  verify(signature: Uint8Array, data: Uint8Array, key: HmacKey): Promise<boolean>\n  exportRawKey(key: HmacKey): Promise<Uint8Array>\n  importRawKey(rawKey: Uint8Array, algorithmIdentifier: HmacAlgorithm): Promise<HmacKey>\n}\n\ninterface StrongRandomService {\n  randomBytes(length: number): Uint8Array\n  randomUUID(): string\n}\n\ninterface DigestService {\n  sha256(data: Uint8Array): Promise<Uint8Array>\n}\n"]}