@intlayer/backend 7.1.4 → 7.1.6

package/dist/esm/node_modules/node-forge/lib/pbe.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"pbe.mjs","names":["key","iv"],"sources":["../../../../../../../node_modules/node-forge/lib/pbe.js"],"sourcesContent":["/**\n * Password-based encryption functions.\n *\n * @author Dave Longley\n * @author Stefan Siegl <stesie@brokenpipe.de>\n *\n * Copyright (c) 2010-2013 Digital Bazaar, Inc.\n * Copyright (c) 2012 Stefan Siegl <stesie@brokenpipe.de>\n *\n * An EncryptedPrivateKeyInfo:\n *\n * EncryptedPrivateKeyInfo ::= SEQUENCE {\n *   encryptionAlgorithm  EncryptionAlgorithmIdentifier,\n *   encryptedData        EncryptedData }\n *\n * EncryptionAlgorithmIdentifier ::= AlgorithmIdentifier\n *\n * EncryptedData ::= OCTET STRING\n */\nvar forge = require('./forge');\nrequire('./aes');\nrequire('./asn1');\nrequire('./des');\nrequire('./md');\nrequire('./oids');\nrequire('./pbkdf2');\nrequire('./pem');\nrequire('./random');\nrequire('./rc2');\nrequire('./rsa');\nrequire('./util');\n\nif(typeof BigInteger === 'undefined') {\n  var BigInteger = forge.jsbn.BigInteger;\n}\n\n// shortcut for asn.1 API\nvar asn1 = forge.asn1;\n\n/* Password-based encryption implementation. */\nvar pki = forge.pki = forge.pki || {};\nmodule.exports = pki.pbe = forge.pbe = forge.pbe || {};\nvar oids = pki.oids;\n\n// validator for an EncryptedPrivateKeyInfo structure\n// Note: Currently only works w/algorithm params\nvar encryptedPrivateKeyValidator = {\n  name: 'EncryptedPrivateKeyInfo',\n  tagClass: asn1.Class.UNIVERSAL,\n  type: asn1.Type.SEQUENCE,\n  constructed: true,\n  value: [{\n    name: 'EncryptedPrivateKeyInfo.encryptionAlgorithm',\n    tagClass: asn1.Class.UNIVERSAL,\n    type: asn1.Type.SEQUENCE,\n    constructed: true,\n    value: [{\n      name: 'AlgorithmIdentifier.algorithm',\n      tagClass: asn1.Class.UNIVERSAL,\n      type: asn1.Type.OID,\n      constructed: false,\n      capture: 'encryptionOid'\n    }, {\n      name: 'AlgorithmIdentifier.parameters',\n      tagClass: asn1.Class.UNIVERSAL,\n      type: asn1.Type.SEQUENCE,\n      constructed: true,\n      captureAsn1: 'encryptionParams'\n    }]\n  }, {\n    // encryptedData\n    name: 'EncryptedPrivateKeyInfo.encryptedData',\n    tagClass: asn1.Class.UNIVERSAL,\n    type: asn1.Type.OCTETSTRING,\n    constructed: false,\n    capture: 'encryptedData'\n  }]\n};\n\n// validator for a PBES2Algorithms structure\n// Note: Currently only works w/PBKDF2 + AES encryption schemes\nvar PBES2AlgorithmsValidator = {\n  name: 'PBES2Algorithms',\n  tagClass: asn1.Class.UNIVERSAL,\n  type: asn1.Type.SEQUENCE,\n  constructed: true,\n  value: [{\n    name: 'PBES2Algorithms.keyDerivationFunc',\n    tagClass: asn1.Class.UNIVERSAL,\n    type: asn1.Type.SEQUENCE,\n    constructed: true,\n    value: [{\n      name: 'PBES2Algorithms.keyDerivationFunc.oid',\n      tagClass: asn1.Class.UNIVERSAL,\n      type: asn1.Type.OID,\n      constructed: false,\n      capture: 'kdfOid'\n    }, {\n      name: 'PBES2Algorithms.params',\n      tagClass: asn1.Class.UNIVERSAL,\n      type: asn1.Type.SEQUENCE,\n      constructed: true,\n      value: [{\n        name: 'PBES2Algorithms.params.salt',\n        tagClass: asn1.Class.UNIVERSAL,\n        type: asn1.Type.OCTETSTRING,\n        constructed: false,\n        capture: 'kdfSalt'\n      }, {\n        name: 'PBES2Algorithms.params.iterationCount',\n        tagClass: asn1.Class.UNIVERSAL,\n        type: asn1.Type.INTEGER,\n        constructed: false,\n        capture: 'kdfIterationCount'\n      }, {\n        name: 'PBES2Algorithms.params.keyLength',\n        tagClass: asn1.Class.UNIVERSAL,\n        type: asn1.Type.INTEGER,\n        constructed: false,\n        optional: true,\n        capture: 'keyLength'\n      }, {\n        // prf\n        name: 'PBES2Algorithms.params.prf',\n        tagClass: asn1.Class.UNIVERSAL,\n        type: asn1.Type.SEQUENCE,\n        constructed: true,\n        optional: true,\n        value: [{\n          name: 'PBES2Algorithms.params.prf.algorithm',\n          tagClass: asn1.Class.UNIVERSAL,\n          type: asn1.Type.OID,\n          constructed: false,\n          capture: 'prfOid'\n        }]\n      }]\n    }]\n  }, {\n    name: 'PBES2Algorithms.encryptionScheme',\n    tagClass: asn1.Class.UNIVERSAL,\n    type: asn1.Type.SEQUENCE,\n    constructed: true,\n    value: [{\n      name: 'PBES2Algorithms.encryptionScheme.oid',\n      tagClass: asn1.Class.UNIVERSAL,\n      type: asn1.Type.OID,\n      constructed: false,\n      capture: 'encOid'\n    }, {\n      name: 'PBES2Algorithms.encryptionScheme.iv',\n      tagClass: asn1.Class.UNIVERSAL,\n      type: asn1.Type.OCTETSTRING,\n      constructed: false,\n      capture: 'encIv'\n    }]\n  }]\n};\n\nvar pkcs12PbeParamsValidator = {\n  name: 'pkcs-12PbeParams',\n  tagClass: asn1.Class.UNIVERSAL,\n  type: asn1.Type.SEQUENCE,\n  constructed: true,\n  value: [{\n    name: 'pkcs-12PbeParams.salt',\n    tagClass: asn1.Class.UNIVERSAL,\n    type: asn1.Type.OCTETSTRING,\n    constructed: false,\n    capture: 'salt'\n  }, {\n    name: 'pkcs-12PbeParams.iterations',\n    tagClass: asn1.Class.UNIVERSAL,\n    type: asn1.Type.INTEGER,\n    constructed: false,\n    capture: 'iterations'\n  }]\n};\n\n/**\n * Encrypts a ASN.1 PrivateKeyInfo object, producing an EncryptedPrivateKeyInfo.\n *\n * PBES2Algorithms ALGORITHM-IDENTIFIER ::=\n *   { {PBES2-params IDENTIFIED BY id-PBES2}, ...}\n *\n * id-PBES2 OBJECT IDENTIFIER ::= {pkcs-5 13}\n *\n * PBES2-params ::= SEQUENCE {\n *   keyDerivationFunc AlgorithmIdentifier {{PBES2-KDFs}},\n *   encryptionScheme AlgorithmIdentifier {{PBES2-Encs}}\n * }\n *\n * PBES2-KDFs ALGORITHM-IDENTIFIER ::=\n *   { {PBKDF2-params IDENTIFIED BY id-PBKDF2}, ... }\n *\n * PBES2-Encs ALGORITHM-IDENTIFIER ::= { ... }\n *\n * PBKDF2-params ::= SEQUENCE {\n *   salt CHOICE {\n *     specified OCTET STRING,\n *     otherSource AlgorithmIdentifier {{PBKDF2-SaltSources}}\n *   },\n *   iterationCount INTEGER (1..MAX),\n *   keyLength INTEGER (1..MAX) OPTIONAL,\n *   prf AlgorithmIdentifier {{PBKDF2-PRFs}} DEFAULT algid-hmacWithSHA1\n * }\n *\n * @param obj the ASN.1 PrivateKeyInfo object.\n * @param password the password to encrypt with.\n * @param options:\n *          algorithm the encryption algorithm to use\n *            ('aes128', 'aes192', 'aes256', '3des'), defaults to 'aes128'.\n *          count the iteration count to use.\n *          saltSize the salt size to use.\n *          prfAlgorithm the PRF message digest algorithm to use\n *            ('sha1', 'sha224', 'sha256', 'sha384', 'sha512')\n *\n * @return the ASN.1 EncryptedPrivateKeyInfo.\n */\npki.encryptPrivateKeyInfo = function(obj, password, options) {\n  // set default options\n  options = options || {};\n  options.saltSize = options.saltSize || 8;\n  options.count = options.count || 2048;\n  options.algorithm = options.algorithm || 'aes128';\n  options.prfAlgorithm = options.prfAlgorithm || 'sha1';\n\n  // generate PBE params\n  var salt = forge.random.getBytesSync(options.saltSize);\n  var count = options.count;\n  var countBytes = asn1.integerToDer(count);\n  var dkLen;\n  var encryptionAlgorithm;\n  var encryptedData;\n  if(options.algorithm.indexOf('aes') === 0 || options.algorithm === 'des') {\n    // do PBES2\n    var ivLen, encOid, cipherFn;\n    switch(options.algorithm) {\n    case 'aes128':\n      dkLen = 16;\n      ivLen = 16;\n      encOid = oids['aes128-CBC'];\n      cipherFn = forge.aes.createEncryptionCipher;\n      break;\n    case 'aes192':\n      dkLen = 24;\n      ivLen = 16;\n      encOid = oids['aes192-CBC'];\n      cipherFn = forge.aes.createEncryptionCipher;\n      break;\n    case 'aes256':\n      dkLen = 32;\n      ivLen = 16;\n      encOid = oids['aes256-CBC'];\n      cipherFn = forge.aes.createEncryptionCipher;\n      break;\n    case 'des':\n      dkLen = 8;\n      ivLen = 8;\n      encOid = oids['desCBC'];\n      cipherFn = forge.des.createEncryptionCipher;\n      break;\n    default:\n      var error = new Error('Cannot encrypt private key. Unknown encryption algorithm.');\n      error.algorithm = options.algorithm;\n      throw error;\n    }\n\n    // get PRF message digest\n    var prfAlgorithm = 'hmacWith' + options.prfAlgorithm.toUpperCase();\n    var md = prfAlgorithmToMessageDigest(prfAlgorithm);\n\n    // encrypt private key using pbe SHA-1 and AES/DES\n    var dk = forge.pkcs5.pbkdf2(password, salt, count, dkLen, md);\n    var iv = forge.random.getBytesSync(ivLen);\n    var cipher = cipherFn(dk);\n    cipher.start(iv);\n    cipher.update(asn1.toDer(obj));\n    cipher.finish();\n    encryptedData = cipher.output.getBytes();\n\n    // get PBKDF2-params\n    var params = createPbkdf2Params(salt, countBytes, dkLen, prfAlgorithm);\n\n    encryptionAlgorithm = asn1.create(\n      asn1.Class.UNIVERSAL, asn1.Type.SEQUENCE, true, [\n      asn1.create(asn1.Class.UNIVERSAL, asn1.Type.OID, false,\n        asn1.oidToDer(oids['pkcs5PBES2']).getBytes()),\n      asn1.create(asn1.Class.UNIVERSAL, asn1.Type.SEQUENCE, true, [\n        // keyDerivationFunc\n        asn1.create(asn1.Class.UNIVERSAL, asn1.Type.SEQUENCE, true, [\n          asn1.create(asn1.Class.UNIVERSAL, asn1.Type.OID, false,\n            asn1.oidToDer(oids['pkcs5PBKDF2']).getBytes()),\n          // PBKDF2-params\n          params\n        ]),\n        // encryptionScheme\n        asn1.create(asn1.Class.UNIVERSAL, asn1.Type.SEQUENCE, true, [\n          asn1.create(asn1.Class.UNIVERSAL, asn1.Type.OID, false,\n            asn1.oidToDer(encOid).getBytes()),\n          // iv\n          asn1.create(\n            asn1.Class.UNIVERSAL, asn1.Type.OCTETSTRING, false, iv)\n        ])\n      ])\n    ]);\n  } else if(options.algorithm === '3des') {\n    // Do PKCS12 PBE\n    dkLen = 24;\n\n    var saltBytes = new forge.util.ByteBuffer(salt);\n    var dk = pki.pbe.generatePkcs12Key(password, saltBytes, 1, count, dkLen);\n    var iv = pki.pbe.generatePkcs12Key(password, saltBytes, 2, count, dkLen);\n    var cipher = forge.des.createEncryptionCipher(dk);\n    cipher.start(iv);\n    cipher.update(asn1.toDer(obj));\n    cipher.finish();\n    encryptedData = cipher.output.getBytes();\n\n    encryptionAlgorithm = asn1.create(\n      asn1.Class.UNIVERSAL, asn1.Type.SEQUENCE, true, [\n      asn1.create(asn1.Class.UNIVERSAL, asn1.Type.OID, false,\n        asn1.oidToDer(oids['pbeWithSHAAnd3-KeyTripleDES-CBC']).getBytes()),\n      // pkcs-12PbeParams\n      asn1.create(asn1.Class.UNIVERSAL, asn1.Type.SEQUENCE, true, [\n        // salt\n        asn1.create(asn1.Class.UNIVERSAL, asn1.Type.OCTETSTRING, false, salt),\n        // iteration count\n        asn1.create(asn1.Class.UNIVERSAL, asn1.Type.INTEGER, false,\n          countBytes.getBytes())\n      ])\n    ]);\n  } else {\n    var error = new Error('Cannot encrypt private key. Unknown encryption algorithm.');\n    error.algorithm = options.algorithm;\n    throw error;\n  }\n\n  // EncryptedPrivateKeyInfo\n  var rval = asn1.create(asn1.Class.UNIVERSAL, asn1.Type.SEQUENCE, true, [\n    // encryptionAlgorithm\n    encryptionAlgorithm,\n    // encryptedData\n    asn1.create(\n      asn1.Class.UNIVERSAL, asn1.Type.OCTETSTRING, false, encryptedData)\n  ]);\n  return rval;\n};\n\n/**\n * Decrypts a ASN.1 PrivateKeyInfo object.\n *\n * @param obj the ASN.1 EncryptedPrivateKeyInfo object.\n * @param password the password to decrypt with.\n *\n * @return the ASN.1 PrivateKeyInfo on success, null on failure.\n */\npki.decryptPrivateKeyInfo = function(obj, password) {\n  var rval = null;\n\n  // get PBE params\n  var capture = {};\n  var errors = [];\n  if(!asn1.validate(obj, encryptedPrivateKeyValidator, capture, errors)) {\n    var error = new Error('Cannot read encrypted private key. ' +\n      'ASN.1 object is not a supported EncryptedPrivateKeyInfo.');\n    error.errors = errors;\n    throw error;\n  }\n\n  // get cipher\n  var oid = asn1.derToOid(capture.encryptionOid);\n  var cipher = pki.pbe.getCipher(oid, capture.encryptionParams, password);\n\n  // get encrypted data\n  var encrypted = forge.util.createBuffer(capture.encryptedData);\n\n  cipher.update(encrypted);\n  if(cipher.finish()) {\n    rval = asn1.fromDer(cipher.output);\n  }\n\n  return rval;\n};\n\n/**\n * Converts a EncryptedPrivateKeyInfo to PEM format.\n *\n * @param epki the EncryptedPrivateKeyInfo.\n * @param maxline the maximum characters per line, defaults to 64.\n *\n * @return the PEM-formatted encrypted private key.\n */\npki.encryptedPrivateKeyToPem = function(epki, maxline) {\n  // convert to DER, then PEM-encode\n  var msg = {\n    type: 'ENCRYPTED PRIVATE KEY',\n    body: asn1.toDer(epki).getBytes()\n  };\n  return forge.pem.encode(msg, {maxline: maxline});\n};\n\n/**\n * Converts a PEM-encoded EncryptedPrivateKeyInfo to ASN.1 format. Decryption\n * is not performed.\n *\n * @param pem the EncryptedPrivateKeyInfo in PEM-format.\n *\n * @return the ASN.1 EncryptedPrivateKeyInfo.\n */\npki.encryptedPrivateKeyFromPem = function(pem) {\n  var msg = forge.pem.decode(pem)[0];\n\n  if(msg.type !== 'ENCRYPTED PRIVATE KEY') {\n    var error = new Error('Could not convert encrypted private key from PEM; ' +\n      'PEM header type is \"ENCRYPTED PRIVATE KEY\".');\n    error.headerType = msg.type;\n    throw error;\n  }\n  if(msg.procType && msg.procType.type === 'ENCRYPTED') {\n    throw new Error('Could not convert encrypted private key from PEM; ' +\n      'PEM is encrypted.');\n  }\n\n  // convert DER to ASN.1 object\n  return asn1.fromDer(msg.body);\n};\n\n/**\n * Encrypts an RSA private key. By default, the key will be wrapped in\n * a PrivateKeyInfo and encrypted to produce a PKCS#8 EncryptedPrivateKeyInfo.\n * This is the standard, preferred way to encrypt a private key.\n *\n * To produce a non-standard PEM-encrypted private key that uses encapsulated\n * headers to indicate the encryption algorithm (old-style non-PKCS#8 OpenSSL\n * private key encryption), set the 'legacy' option to true. Note: Using this\n * option will cause the iteration count to be forced to 1.\n *\n * Note: The 'des' algorithm is supported, but it is not considered to be\n * secure because it only uses a single 56-bit key. If possible, it is highly\n * recommended that a different algorithm be used.\n *\n * @param rsaKey the RSA key to encrypt.\n * @param password the password to use.\n * @param options:\n *          algorithm: the encryption algorithm to use\n *            ('aes128', 'aes192', 'aes256', '3des', 'des').\n *          count: the iteration count to use.\n *          saltSize: the salt size to use.\n *          legacy: output an old non-PKCS#8 PEM-encrypted+encapsulated\n *            headers (DEK-Info) private key.\n *\n * @return the PEM-encoded ASN.1 EncryptedPrivateKeyInfo.\n */\npki.encryptRsaPrivateKey = function(rsaKey, password, options) {\n  // standard PKCS#8\n  options = options || {};\n  if(!options.legacy) {\n    // encrypt PrivateKeyInfo\n    var rval = pki.wrapRsaPrivateKey(pki.privateKeyToAsn1(rsaKey));\n    rval = pki.encryptPrivateKeyInfo(rval, password, options);\n    return pki.encryptedPrivateKeyToPem(rval);\n  }\n\n  // legacy non-PKCS#8\n  var algorithm;\n  var iv;\n  var dkLen;\n  var cipherFn;\n  switch(options.algorithm) {\n  case 'aes128':\n    algorithm = 'AES-128-CBC';\n    dkLen = 16;\n    iv = forge.random.getBytesSync(16);\n    cipherFn = forge.aes.createEncryptionCipher;\n    break;\n  case 'aes192':\n    algorithm = 'AES-192-CBC';\n    dkLen = 24;\n    iv = forge.random.getBytesSync(16);\n    cipherFn = forge.aes.createEncryptionCipher;\n    break;\n  case 'aes256':\n    algorithm = 'AES-256-CBC';\n    dkLen = 32;\n    iv = forge.random.getBytesSync(16);\n    cipherFn = forge.aes.createEncryptionCipher;\n    break;\n  case '3des':\n    algorithm = 'DES-EDE3-CBC';\n    dkLen = 24;\n    iv = forge.random.getBytesSync(8);\n    cipherFn = forge.des.createEncryptionCipher;\n    break;\n  case 'des':\n    algorithm = 'DES-CBC';\n    dkLen = 8;\n    iv = forge.random.getBytesSync(8);\n    cipherFn = forge.des.createEncryptionCipher;\n    break;\n  default:\n    var error = new Error('Could not encrypt RSA private key; unsupported ' +\n      'encryption algorithm \"' + options.algorithm + '\".');\n    error.algorithm = options.algorithm;\n    throw error;\n  }\n\n  // encrypt private key using OpenSSL legacy key derivation\n  var dk = forge.pbe.opensslDeriveBytes(password, iv.substr(0, 8), dkLen);\n  var cipher = cipherFn(dk);\n  cipher.start(iv);\n  cipher.update(asn1.toDer(pki.privateKeyToAsn1(rsaKey)));\n  cipher.finish();\n\n  var msg = {\n    type: 'RSA PRIVATE KEY',\n    procType: {\n      version: '4',\n      type: 'ENCRYPTED'\n    },\n    dekInfo: {\n      algorithm: algorithm,\n      parameters: forge.util.bytesToHex(iv).toUpperCase()\n    },\n    body: cipher.output.getBytes()\n  };\n  return forge.pem.encode(msg);\n};\n\n/**\n * Decrypts an RSA private key.\n *\n * @param pem the PEM-formatted EncryptedPrivateKeyInfo to decrypt.\n * @param password the password to use.\n *\n * @return the RSA key on success, null on failure.\n */\npki.decryptRsaPrivateKey = function(pem, password) {\n  var rval = null;\n\n  var msg = forge.pem.decode(pem)[0];\n\n  if(msg.type !== 'ENCRYPTED PRIVATE KEY' &&\n    msg.type !== 'PRIVATE KEY' &&\n    msg.type !== 'RSA PRIVATE KEY') {\n    var error = new Error('Could not convert private key from PEM; PEM header type ' +\n      'is not \"ENCRYPTED PRIVATE KEY\", \"PRIVATE KEY\", or \"RSA PRIVATE KEY\".');\n    error.headerType = error;\n    throw error;\n  }\n\n  if(msg.procType && msg.procType.type === 'ENCRYPTED') {\n    var dkLen;\n    var cipherFn;\n    switch(msg.dekInfo.algorithm) {\n    case 'DES-CBC':\n      dkLen = 8;\n      cipherFn = forge.des.createDecryptionCipher;\n      break;\n    case 'DES-EDE3-CBC':\n      dkLen = 24;\n      cipherFn = forge.des.createDecryptionCipher;\n      break;\n    case 'AES-128-CBC':\n      dkLen = 16;\n      cipherFn = forge.aes.createDecryptionCipher;\n      break;\n    case 'AES-192-CBC':\n      dkLen = 24;\n      cipherFn = forge.aes.createDecryptionCipher;\n      break;\n    case 'AES-256-CBC':\n      dkLen = 32;\n      cipherFn = forge.aes.createDecryptionCipher;\n      break;\n    case 'RC2-40-CBC':\n      dkLen = 5;\n      cipherFn = function(key) {\n        return forge.rc2.createDecryptionCipher(key, 40);\n      };\n      break;\n    case 'RC2-64-CBC':\n      dkLen = 8;\n      cipherFn = function(key) {\n        return forge.rc2.createDecryptionCipher(key, 64);\n      };\n      break;\n    case 'RC2-128-CBC':\n      dkLen = 16;\n      cipherFn = function(key) {\n        return forge.rc2.createDecryptionCipher(key, 128);\n      };\n      break;\n    default:\n      var error = new Error('Could not decrypt private key; unsupported ' +\n        'encryption algorithm \"' + msg.dekInfo.algorithm + '\".');\n      error.algorithm = msg.dekInfo.algorithm;\n      throw error;\n    }\n\n    // use OpenSSL legacy key derivation\n    var iv = forge.util.hexToBytes(msg.dekInfo.parameters);\n    var dk = forge.pbe.opensslDeriveBytes(password, iv.substr(0, 8), dkLen);\n    var cipher = cipherFn(dk);\n    cipher.start(iv);\n    cipher.update(forge.util.createBuffer(msg.body));\n    if(cipher.finish()) {\n      rval = cipher.output.getBytes();\n    } else {\n      return rval;\n    }\n  } else {\n    rval = msg.body;\n  }\n\n  if(msg.type === 'ENCRYPTED PRIVATE KEY') {\n    rval = pki.decryptPrivateKeyInfo(asn1.fromDer(rval), password);\n  } else {\n    // decryption already performed above\n    rval = asn1.fromDer(rval);\n  }\n\n  if(rval !== null) {\n    rval = pki.privateKeyFromAsn1(rval);\n  }\n\n  return rval;\n};\n\n/**\n * Derives a PKCS#12 key.\n *\n * @param password the password to derive the key material from, null or\n *          undefined for none.\n * @param salt the salt, as a ByteBuffer, to use.\n * @param id the PKCS#12 ID byte (1 = key material, 2 = IV, 3 = MAC).\n * @param iter the iteration count.\n * @param n the number of bytes to derive from the password.\n * @param md the message digest to use, defaults to SHA-1.\n *\n * @return a ByteBuffer with the bytes derived from the password.\n */\npki.pbe.generatePkcs12Key = function(password, salt, id, iter, n, md) {\n  var j, l;\n\n  if(typeof md === 'undefined' || md === null) {\n    if(!('sha1' in forge.md)) {\n      throw new Error('\"sha1\" hash algorithm unavailable.');\n    }\n    md = forge.md.sha1.create();\n  }\n\n  var u = md.digestLength;\n  var v = md.blockLength;\n  var result = new forge.util.ByteBuffer();\n\n  /* Convert password to Unicode byte buffer + trailing 0-byte. */\n  var passBuf = new forge.util.ByteBuffer();\n  if(password !== null && password !== undefined) {\n    for(l = 0; l < password.length; l++) {\n      passBuf.putInt16(password.charCodeAt(l));\n    }\n    passBuf.putInt16(0);\n  }\n\n  /* Length of salt and password in BYTES. */\n  var p = passBuf.length();\n  var s = salt.length();\n\n  /* 1. Construct a string, D (the \"diversifier\"), by concatenating\n        v copies of ID. */\n  var D = new forge.util.ByteBuffer();\n  D.fillWithByte(id, v);\n\n  /* 2. Concatenate copies of the salt together to create a string S of length\n        v * ceil(s / v) bytes (the final copy of the salt may be trunacted\n        to create S).\n        Note that if the salt is the empty string, then so is S. */\n  var Slen = v * Math.ceil(s / v);\n  var S = new forge.util.ByteBuffer();\n  for(l = 0; l < Slen; l++) {\n    S.putByte(salt.at(l % s));\n  }\n\n  /* 3. Concatenate copies of the password together to create a string P of\n        length v * ceil(p / v) bytes (the final copy of the password may be\n        truncated to create P).\n        Note that if the password is the empty string, then so is P. */\n  var Plen = v * Math.ceil(p / v);\n  var P = new forge.util.ByteBuffer();\n  for(l = 0; l < Plen; l++) {\n    P.putByte(passBuf.at(l % p));\n  }\n\n  /* 4. Set I=S||P to be the concatenation of S and P. */\n  var I = S;\n  I.putBuffer(P);\n\n  /* 5. Set c=ceil(n / u). */\n  var c = Math.ceil(n / u);\n\n  /* 6. For i=1, 2, ..., c, do the following: */\n  for(var i = 1; i <= c; i++) {\n    /* a) Set Ai=H^r(D||I). (l.e. the rth hash of D||I, H(H(H(...H(D||I)))) */\n    var buf = new forge.util.ByteBuffer();\n    buf.putBytes(D.bytes());\n    buf.putBytes(I.bytes());\n    for(var round = 0; round < iter; round++) {\n      md.start();\n      md.update(buf.getBytes());\n      buf = md.digest();\n    }\n\n    /* b) Concatenate copies of Ai to create a string B of length v bytes (the\n          final copy of Ai may be truncated to create B). */\n    var B = new forge.util.ByteBuffer();\n    for(l = 0; l < v; l++) {\n      B.putByte(buf.at(l % u));\n    }\n\n    /* c) Treating I as a concatenation I0, I1, ..., Ik-1 of v-byte blocks,\n          where k=ceil(s / v) + ceil(p / v), modify I by setting\n          Ij=(Ij+B+1) mod 2v for each j.  */\n    var k = Math.ceil(s / v) + Math.ceil(p / v);\n    var Inew = new forge.util.ByteBuffer();\n    for(j = 0; j < k; j++) {\n      var chunk = new forge.util.ByteBuffer(I.getBytes(v));\n      var x = 0x1ff;\n      for(l = B.length() - 1; l >= 0; l--) {\n        x = x >> 8;\n        x += B.at(l) + chunk.at(l);\n        chunk.setAt(l, x & 0xff);\n      }\n      Inew.putBuffer(chunk);\n    }\n    I = Inew;\n\n    /* Add Ai to A. */\n    result.putBuffer(buf);\n  }\n\n  result.truncate(result.length() - n);\n  return result;\n};\n\n/**\n * Get new Forge cipher object instance.\n *\n * @param oid the OID (in string notation).\n * @param params the ASN.1 params object.\n * @param password the password to decrypt with.\n *\n * @return new cipher object instance.\n */\npki.pbe.getCipher = function(oid, params, password) {\n  switch(oid) {\n  case pki.oids['pkcs5PBES2']:\n    return pki.pbe.getCipherForPBES2(oid, params, password);\n\n  case pki.oids['pbeWithSHAAnd3-KeyTripleDES-CBC']:\n  case pki.oids['pbewithSHAAnd40BitRC2-CBC']:\n    return pki.pbe.getCipherForPKCS12PBE(oid, params, password);\n\n  default:\n    var error = new Error('Cannot read encrypted PBE data block. Unsupported OID.');\n    error.oid = oid;\n    error.supportedOids = [\n      'pkcs5PBES2',\n      'pbeWithSHAAnd3-KeyTripleDES-CBC',\n      'pbewithSHAAnd40BitRC2-CBC'\n    ];\n    throw error;\n  }\n};\n\n/**\n * Get new Forge cipher object instance according to PBES2 params block.\n *\n * The returned cipher instance is already started using the IV\n * from PBES2 parameter block.\n *\n * @param oid the PKCS#5 PBKDF2 OID (in string notation).\n * @param params the ASN.1 PBES2-params object.\n * @param password the password to decrypt with.\n *\n * @return new cipher object instance.\n */\npki.pbe.getCipherForPBES2 = function(oid, params, password) {\n  // get PBE params\n  var capture = {};\n  var errors = [];\n  if(!asn1.validate(params, PBES2AlgorithmsValidator, capture, errors)) {\n    var error = new Error('Cannot read password-based-encryption algorithm ' +\n      'parameters. ASN.1 object is not a supported EncryptedPrivateKeyInfo.');\n    error.errors = errors;\n    throw error;\n  }\n\n  // check oids\n  oid = asn1.derToOid(capture.kdfOid);\n  if(oid !== pki.oids['pkcs5PBKDF2']) {\n    var error = new Error('Cannot read encrypted private key. ' +\n      'Unsupported key derivation function OID.');\n    error.oid = oid;\n    error.supportedOids = ['pkcs5PBKDF2'];\n    throw error;\n  }\n  oid = asn1.derToOid(capture.encOid);\n  if(oid !== pki.oids['aes128-CBC'] &&\n    oid !== pki.oids['aes192-CBC'] &&\n    oid !== pki.oids['aes256-CBC'] &&\n    oid !== pki.oids['des-EDE3-CBC'] &&\n    oid !== pki.oids['desCBC']) {\n    var error = new Error('Cannot read encrypted private key. ' +\n      'Unsupported encryption scheme OID.');\n    error.oid = oid;\n    error.supportedOids = [\n      'aes128-CBC', 'aes192-CBC', 'aes256-CBC', 'des-EDE3-CBC', 'desCBC'];\n    throw error;\n  }\n\n  // set PBE params\n  var salt = capture.kdfSalt;\n  var count = forge.util.createBuffer(capture.kdfIterationCount);\n  count = count.getInt(count.length() << 3);\n  var dkLen;\n  var cipherFn;\n  switch(pki.oids[oid]) {\n  case 'aes128-CBC':\n    dkLen = 16;\n    cipherFn = forge.aes.createDecryptionCipher;\n    break;\n  case 'aes192-CBC':\n    dkLen = 24;\n    cipherFn = forge.aes.createDecryptionCipher;\n    break;\n  case 'aes256-CBC':\n    dkLen = 32;\n    cipherFn = forge.aes.createDecryptionCipher;\n    break;\n  case 'des-EDE3-CBC':\n    dkLen = 24;\n    cipherFn = forge.des.createDecryptionCipher;\n    break;\n  case 'desCBC':\n    dkLen = 8;\n    cipherFn = forge.des.createDecryptionCipher;\n    break;\n  }\n\n  // get PRF message digest\n  var md = prfOidToMessageDigest(capture.prfOid);\n\n  // decrypt private key using pbe with chosen PRF and AES/DES\n  var dk = forge.pkcs5.pbkdf2(password, salt, count, dkLen, md);\n  var iv = capture.encIv;\n  var cipher = cipherFn(dk);\n  cipher.start(iv);\n\n  return cipher;\n};\n\n/**\n * Get new Forge cipher object instance for PKCS#12 PBE.\n *\n * The returned cipher instance is already started using the key & IV\n * derived from the provided password and PKCS#12 PBE salt.\n *\n * @param oid The PKCS#12 PBE OID (in string notation).\n * @param params The ASN.1 PKCS#12 PBE-params object.\n * @param password The password to decrypt with.\n *\n * @return the new cipher object instance.\n */\npki.pbe.getCipherForPKCS12PBE = function(oid, params, password) {\n  // get PBE params\n  var capture = {};\n  var errors = [];\n  if(!asn1.validate(params, pkcs12PbeParamsValidator, capture, errors)) {\n    var error = new Error('Cannot read password-based-encryption algorithm ' +\n      'parameters. ASN.1 object is not a supported EncryptedPrivateKeyInfo.');\n    error.errors = errors;\n    throw error;\n  }\n\n  var salt = forge.util.createBuffer(capture.salt);\n  var count = forge.util.createBuffer(capture.iterations);\n  count = count.getInt(count.length() << 3);\n\n  var dkLen, dIvLen, cipherFn;\n  switch(oid) {\n    case pki.oids['pbeWithSHAAnd3-KeyTripleDES-CBC']:\n      dkLen = 24;\n      dIvLen = 8;\n      cipherFn = forge.des.startDecrypting;\n      break;\n\n    case pki.oids['pbewithSHAAnd40BitRC2-CBC']:\n      dkLen = 5;\n      dIvLen = 8;\n      cipherFn = function(key, iv) {\n        var cipher = forge.rc2.createDecryptionCipher(key, 40);\n        cipher.start(iv, null);\n        return cipher;\n      };\n      break;\n\n    default:\n      var error = new Error('Cannot read PKCS #12 PBE data block. Unsupported OID.');\n      error.oid = oid;\n      throw error;\n  }\n\n  // get PRF message digest\n  var md = prfOidToMessageDigest(capture.prfOid);\n  var key = pki.pbe.generatePkcs12Key(password, salt, 1, count, dkLen, md);\n  md.start();\n  var iv = pki.pbe.generatePkcs12Key(password, salt, 2, count, dIvLen, md);\n\n  return cipherFn(key, iv);\n};\n\n/**\n * OpenSSL's legacy key derivation function.\n *\n * See: http://www.openssl.org/docs/crypto/EVP_BytesToKey.html\n *\n * @param password the password to derive the key from.\n * @param salt the salt to use, null for none.\n * @param dkLen the number of bytes needed for the derived key.\n * @param [options] the options to use:\n *          [md] an optional message digest object to use.\n */\npki.pbe.opensslDeriveBytes = function(password, salt, dkLen, md) {\n  if(typeof md === 'undefined' || md === null) {\n    if(!('md5' in forge.md)) {\n      throw new Error('\"md5\" hash algorithm unavailable.');\n    }\n    md = forge.md.md5.create();\n  }\n  if(salt === null) {\n    salt = '';\n  }\n  var digests = [hash(md, password + salt)];\n  for(var length = 16, i = 1; length < dkLen; ++i, length += 16) {\n    digests.push(hash(md, digests[i - 1] + password + salt));\n  }\n  return digests.join('').substr(0, dkLen);\n};\n\nfunction hash(md, bytes) {\n  return md.start().update(bytes).digest().getBytes();\n}\n\nfunction prfOidToMessageDigest(prfOid) {\n  // get PRF algorithm, default to SHA-1\n  var prfAlgorithm;\n  if(!prfOid) {\n    prfAlgorithm = 'hmacWithSHA1';\n  } else {\n    prfAlgorithm = pki.oids[asn1.derToOid(prfOid)];\n    if(!prfAlgorithm) {\n      var error = new Error('Unsupported PRF OID.');\n      error.oid = prfOid;\n      error.supported = [\n        'hmacWithSHA1', 'hmacWithSHA224', 'hmacWithSHA256', 'hmacWithSHA384',\n        'hmacWithSHA512'];\n      throw error;\n    }\n  }\n  return prfAlgorithmToMessageDigest(prfAlgorithm);\n}\n\nfunction prfAlgorithmToMessageDigest(prfAlgorithm) {\n  var factory = forge.md;\n  switch(prfAlgorithm) {\n  case 'hmacWithSHA224':\n    factory = forge.md.sha512;\n  case 'hmacWithSHA1':\n  case 'hmacWithSHA256':\n  case 'hmacWithSHA384':\n  case 'hmacWithSHA512':\n    prfAlgorithm = prfAlgorithm.substr(8).toLowerCase();\n    break;\n  default:\n    var error = new Error('Unsupported PRF algorithm.');\n    error.algorithm = prfAlgorithm;\n    error.supported = [\n      'hmacWithSHA1', 'hmacWithSHA224', 'hmacWithSHA256', 'hmacWithSHA384',\n      'hmacWithSHA512'];\n    throw error;\n  }\n  if(!factory || !(prfAlgorithm in factory)) {\n    throw new Error('Unknown hash algorithm: ' + prfAlgorithm);\n  }\n  return factory[prfAlgorithm].create();\n}\n\nfunction createPbkdf2Params(salt, countBytes, dkLen, prfAlgorithm) {\n  var params = asn1.create(asn1.Class.UNIVERSAL, asn1.Type.SEQUENCE, true, [\n    // salt\n    asn1.create(\n      asn1.Class.UNIVERSAL, asn1.Type.OCTETSTRING, false, salt),\n    // iteration count\n    asn1.create(asn1.Class.UNIVERSAL, asn1.Type.INTEGER, false,\n      countBytes.getBytes())\n  ]);\n  // when PRF algorithm is not SHA-1 default, add key length and PRF algorithm\n  if(prfAlgorithm !== 'hmacWithSHA1') {\n    params.value.push(\n      // key length\n      asn1.create(asn1.Class.UNIVERSAL, asn1.Type.INTEGER, false,\n        forge.util.hexToBytes(dkLen.toString(16))),\n      // AlgorithmIdentifier\n      asn1.create(asn1.Class.UNIVERSAL, asn1.Type.SEQUENCE, true, [\n        // algorithm\n        asn1.create(asn1.Class.UNIVERSAL, asn1.Type.OID, false,\n          asn1.oidToDer(pki.oids[prfAlgorithm]).getBytes()),\n        // parameters (null)\n        asn1.create(asn1.Class.UNIVERSAL, asn1.Type.NULL, false, '')\n      ]));\n  }\n  return params;\n}\n"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmBA,IAAI;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA,KAAG,OAAO,eAAe,aACvB,IAAI,aAAa,MAAM,KAAK;CAI9B,IAAI,OAAO,MAAM;CAGjB,IAAI,MAAM,MAAM,MAAM,MAAM,OAAO,EAAE;AACrC,QAAO,UAAU,IAAI,MAAM,MAAM,MAAM,MAAM,OAAO,EAAE;CACtD,IAAI,OAAO,IAAI;CAIf,IAAI,+BAA+B;EACjC,MAAM;EACN,UAAU,KAAK,MAAM;EACrB,MAAM,KAAK,KAAK;EAChB,aAAa;EACb,OAAO,CAAC;GACN,MAAM;GACN,UAAU,KAAK,MAAM;GACrB,MAAM,KAAK,KAAK;GAChB,aAAa;GACb,OAAO,CAAC;IACN,MAAM;IACN,UAAU,KAAK,MAAM;IACrB,MAAM,KAAK,KAAK;IAChB,aAAa;IACb,SAAS;IACV,EAAE;IACD,MAAM;IACN,UAAU,KAAK,MAAM;IACrB,MAAM,KAAK,KAAK;IAChB,aAAa;IACb,aAAa;IACd,CAAC;GACH,EAAE;GAED,MAAM;GACN,UAAU,KAAK,MAAM;GACrB,MAAM,KAAK,KAAK;GAChB,aAAa;GACb,SAAS;GACV,CAAC;EACH;CAID,IAAI,2BAA2B;EAC7B,MAAM;EACN,UAAU,KAAK,MAAM;EACrB,MAAM,KAAK,KAAK;EAChB,aAAa;EACb,OAAO,CAAC;GACN,MAAM;GACN,UAAU,KAAK,MAAM;GACrB,MAAM,KAAK,KAAK;GAChB,aAAa;GACb,OAAO,CAAC;IACN,MAAM;IACN,UAAU,KAAK,MAAM;IACrB,MAAM,KAAK,KAAK;IAChB,aAAa;IACb,SAAS;IACV,EAAE;IACD,MAAM;IACN,UAAU,KAAK,MAAM;IACrB,MAAM,KAAK,KAAK;IAChB,aAAa;IACb,OAAO;KAAC;MACN,MAAM;MACN,UAAU,KAAK,MAAM;MACrB,MAAM,KAAK,KAAK;MAChB,aAAa;MACb,SAAS;MACV;KAAE;MACD,MAAM;MACN,UAAU,KAAK,MAAM;MACrB,MAAM,KAAK,KAAK;MAChB,aAAa;MACb,SAAS;MACV;KAAE;MACD,MAAM;MACN,UAAU,KAAK,MAAM;MACrB,MAAM,KAAK,KAAK;MAChB,aAAa;MACb,UAAU;MACV,SAAS;MACV;KAAE;MAED,MAAM;MACN,UAAU,KAAK,MAAM;MACrB,MAAM,KAAK,KAAK;MAChB,aAAa;MACb,UAAU;MACV,OAAO,CAAC;OACN,MAAM;OACN,UAAU,KAAK,MAAM;OACrB,MAAM,KAAK,KAAK;OAChB,aAAa;OACb,SAAS;OACV,CAAC;MACH;KAAC;IACH,CAAC;GACH,EAAE;GACD,MAAM;GACN,UAAU,KAAK,MAAM;GACrB,MAAM,KAAK,KAAK;GAChB,aAAa;GACb,OAAO,CAAC;IACN,MAAM;IACN,UAAU,KAAK,MAAM;IACrB,MAAM,KAAK,KAAK;IAChB,aAAa;IACb,SAAS;IACV,EAAE;IACD,MAAM;IACN,UAAU,KAAK,MAAM;IACrB,MAAM,KAAK,KAAK;IAChB,aAAa;IACb,SAAS;IACV,CAAC;GACH,CAAC;EACH;CAED,IAAI,2BAA2B;EAC7B,MAAM;EACN,UAAU,KAAK,MAAM;EACrB,MAAM,KAAK,KAAK;EAChB,aAAa;EACb,OAAO,CAAC;GACN,MAAM;GACN,UAAU,KAAK,MAAM;GACrB,MAAM,KAAK,KAAK;GAChB,aAAa;GACb,SAAS;GACV,EAAE;GACD,MAAM;GACN,UAAU,KAAK,MAAM;GACrB,MAAM,KAAK,KAAK;GAChB,aAAa;GACb,SAAS;GACV,CAAC;EACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CD,KAAI,wBAAwB,SAAS,KAAK,UAAU,SAAS;AAE3D,YAAU,WAAW,EAAE;AACvB,UAAQ,WAAW,QAAQ,YAAY;AACvC,UAAQ,QAAQ,QAAQ,SAAS;AACjC,UAAQ,YAAY,QAAQ,aAAa;AACzC,UAAQ,eAAe,QAAQ,gBAAgB;EAG/C,IAAI,OAAO,MAAM,OAAO,aAAa,QAAQ,SAAS;EACtD,IAAI,QAAQ,QAAQ;EACpB,IAAI,aAAa,KAAK,aAAa,MAAM;EACzC,IAAI;EACJ,IAAI;EACJ,IAAI;AACJ,MAAG,QAAQ,UAAU,QAAQ,MAAM,KAAK,KAAK,QAAQ,cAAc,OAAO;GAExE,IAAI,OAAO,QAAQ;AACnB,WAAO,QAAQ,WAAf;IACA,KAAK;AACH,aAAQ;AACR,aAAQ;AACR,cAAS,KAAK;AACd,gBAAW,MAAM,IAAI;AACrB;IACF,KAAK;AACH,aAAQ;AACR,aAAQ;AACR,cAAS,KAAK;AACd,gBAAW,MAAM,IAAI;AACrB;IACF,KAAK;AACH,aAAQ;AACR,aAAQ;AACR,cAAS,KAAK;AACd,gBAAW,MAAM,IAAI;AACrB;IACF,KAAK;AACH,aAAQ;AACR,aAAQ;AACR,cAAS,KAAK;AACd,gBAAW,MAAM,IAAI;AACrB;IACF;KACE,IAAI,wBAAQ,IAAI,MAAM,4DAA4D;AAClF,WAAM,YAAY,QAAQ;AAC1B,WAAM;;GAIR,IAAI,eAAe,aAAa,QAAQ,aAAa,aAAa;GAClE,IAAI,KAAK,4BAA4B,aAAa;GAGlD,IAAI,KAAK,MAAM,MAAM,OAAO,UAAU,MAAM,OAAO,OAAO,GAAG;GAC7D,IAAI,KAAK,MAAM,OAAO,aAAa,MAAM;GACzC,IAAI,SAAS,SAAS,GAAG;AACzB,UAAO,MAAM,GAAG;AAChB,UAAO,OAAO,KAAK,MAAM,IAAI,CAAC;AAC9B,UAAO,QAAQ;AACf,mBAAgB,OAAO,OAAO,UAAU;GAGxC,IAAI,SAAS,mBAAmB,MAAM,YAAY,OAAO,aAAa;AAEtE,yBAAsB,KAAK,OACzB,KAAK,MAAM,WAAW,KAAK,KAAK,UAAU,MAAM,CAChD,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,KAAK,OAC/C,KAAK,SAAS,KAAK,cAAc,CAAC,UAAU,CAAC,EAC/C,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,UAAU,MAAM,CAE1D,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,UAAU,MAAM,CAC1D,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,KAAK,OAC/C,KAAK,SAAS,KAAK,eAAe,CAAC,UAAU,CAAC,EAEhD,OACD,CAAC,EAEF,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,UAAU,MAAM,CAC1D,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,KAAK,OAC/C,KAAK,SAAS,OAAO,CAAC,UAAU,CAAC,EAEnC,KAAK,OACH,KAAK,MAAM,WAAW,KAAK,KAAK,aAAa,OAAO,GAAG,CAC1D,CAAC,CACH,CAAC,CACH,CAAC;aACM,QAAQ,cAAc,QAAQ;AAEtC,WAAQ;GAER,IAAI,YAAY,IAAI,MAAM,KAAK,WAAW,KAAK;GAC/C,IAAI,KAAK,IAAI,IAAI,kBAAkB,UAAU,WAAW,GAAG,OAAO,MAAM;GACxE,IAAI,KAAK,IAAI,IAAI,kBAAkB,UAAU,WAAW,GAAG,OAAO,MAAM;GACxE,IAAI,SAAS,MAAM,IAAI,uBAAuB,GAAG;AACjD,UAAO,MAAM,GAAG;AAChB,UAAO,OAAO,KAAK,MAAM,IAAI,CAAC;AAC9B,UAAO,QAAQ;AACf,mBAAgB,OAAO,OAAO,UAAU;AAExC,yBAAsB,KAAK,OACzB,KAAK,MAAM,WAAW,KAAK,KAAK,UAAU,MAAM,CAChD,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,KAAK,OAC/C,KAAK,SAAS,KAAK,mCAAmC,CAAC,UAAU,CAAC,EAEpE,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,UAAU,MAAM,CAE1D,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,aAAa,OAAO,KAAK,EAErE,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,SAAS,OACnD,WAAW,UAAU,CAAC,CACzB,CAAC,CACH,CAAC;SACG;GACL,IAAI,wBAAQ,IAAI,MAAM,4DAA4D;AAClF,SAAM,YAAY,QAAQ;AAC1B,SAAM;;AAWR,SAPW,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,UAAU,MAAM,CAErE,qBAEA,KAAK,OACH,KAAK,MAAM,WAAW,KAAK,KAAK,aAAa,OAAO,cAAc,CACrE,CAAC;;;;;;;;;;AAYJ,KAAI,wBAAwB,SAAS,KAAK,UAAU;EAClD,IAAI,OAAO;EAGX,IAAI,UAAU,EAAE;EAChB,IAAI,SAAS,EAAE;AACf,MAAG,CAAC,KAAK,SAAS,KAAK,8BAA8B,SAAS,OAAO,EAAE;GACrE,IAAI,wBAAQ,IAAI,MAAM,8FACuC;AAC7D,SAAM,SAAS;AACf,SAAM;;EAIR,IAAI,MAAM,KAAK,SAAS,QAAQ,cAAc;EAC9C,IAAI,SAAS,IAAI,IAAI,UAAU,KAAK,QAAQ,kBAAkB,SAAS;EAGvE,IAAI,YAAY,MAAM,KAAK,aAAa,QAAQ,cAAc;AAE9D,SAAO,OAAO,UAAU;AACxB,MAAG,OAAO,QAAQ,CAChB,QAAO,KAAK,QAAQ,OAAO,OAAO;AAGpC,SAAO;;;;;;;;;;AAWT,KAAI,2BAA2B,SAAS,MAAM,SAAS;EAErD,IAAI,MAAM;GACR,MAAM;GACN,MAAM,KAAK,MAAM,KAAK,CAAC,UAAU;GAClC;AACD,SAAO,MAAM,IAAI,OAAO,KAAK,EAAU,SAAQ,CAAC;;;;;;;;;;AAWlD,KAAI,6BAA6B,SAAS,KAAK;EAC7C,IAAI,MAAM,MAAM,IAAI,OAAO,IAAI,CAAC;AAEhC,MAAG,IAAI,SAAS,yBAAyB;GACvC,IAAI,wBAAQ,IAAI,MAAM,kGAC0B;AAChD,SAAM,aAAa,IAAI;AACvB,SAAM;;AAER,MAAG,IAAI,YAAY,IAAI,SAAS,SAAS,YACvC,OAAM,IAAI,MAAM,sEACM;AAIxB,SAAO,KAAK,QAAQ,IAAI,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6B/B,KAAI,uBAAuB,SAAS,QAAQ,UAAU,SAAS;AAE7D,YAAU,WAAW,EAAE;AACvB,MAAG,CAAC,QAAQ,QAAQ;GAElB,IAAI,OAAO,IAAI,kBAAkB,IAAI,iBAAiB,OAAO,CAAC;AAC9D,UAAO,IAAI,sBAAsB,MAAM,UAAU,QAAQ;AACzD,UAAO,IAAI,yBAAyB,KAAK;;EAI3C,IAAI;EACJ,IAAI;EACJ,IAAI;EACJ,IAAI;AACJ,UAAO,QAAQ,WAAf;GACA,KAAK;AACH,gBAAY;AACZ,YAAQ;AACR,SAAK,MAAM,OAAO,aAAa,GAAG;AAClC,eAAW,MAAM,IAAI;AACrB;GACF,KAAK;AACH,gBAAY;AACZ,YAAQ;AACR,SAAK,MAAM,OAAO,aAAa,GAAG;AAClC,eAAW,MAAM,IAAI;AACrB;GACF,KAAK;AACH,gBAAY;AACZ,YAAQ;AACR,SAAK,MAAM,OAAO,aAAa,GAAG;AAClC,eAAW,MAAM,IAAI;AACrB;GACF,KAAK;AACH,gBAAY;AACZ,YAAQ;AACR,SAAK,MAAM,OAAO,aAAa,EAAE;AACjC,eAAW,MAAM,IAAI;AACrB;GACF,KAAK;AACH,gBAAY;AACZ,YAAQ;AACR,SAAK,MAAM,OAAO,aAAa,EAAE;AACjC,eAAW,MAAM,IAAI;AACrB;GACF;IACE,IAAI,wBAAQ,IAAI,MAAM,2EACO,QAAQ,YAAY,MAAK;AACtD,UAAM,YAAY,QAAQ;AAC1B,UAAM;;EAIR,IAAI,KAAK,MAAM,IAAI,mBAAmB,UAAU,GAAG,OAAO,GAAG,EAAE,EAAE,MAAM;EACvE,IAAI,SAAS,SAAS,GAAG;AACzB,SAAO,MAAM,GAAG;AAChB,SAAO,OAAO,KAAK,MAAM,IAAI,iBAAiB,OAAO,CAAC,CAAC;AACvD,SAAO,QAAQ;EAEf,IAAI,MAAM;GACR,MAAM;GACN,UAAU;IACR,SAAS;IACT,MAAM;IACP;GACD,SAAS;IACI;IACX,YAAY,MAAM,KAAK,WAAW,GAAG,CAAC,aAAa;IACpD;GACD,MAAM,OAAO,OAAO,UAAU;GAC/B;AACD,SAAO,MAAM,IAAI,OAAO,IAAI;;;;;;;;;;AAW9B,KAAI,uBAAuB,SAAS,KAAK,UAAU;EACjD,IAAI,OAAO;EAEX,IAAI,MAAM,MAAM,IAAI,OAAO,IAAI,CAAC;AAEhC,MAAG,IAAI,SAAS,2BACd,IAAI,SAAS,iBACb,IAAI,SAAS,mBAAmB;GAChC,IAAI,wBAAQ,IAAI,MAAM,qIACmD;AACzE,SAAM,aAAa;AACnB,SAAM;;AAGR,MAAG,IAAI,YAAY,IAAI,SAAS,SAAS,aAAa;GACpD,IAAI;GACJ,IAAI;AACJ,WAAO,IAAI,QAAQ,WAAnB;IACA,KAAK;AACH,aAAQ;AACR,gBAAW,MAAM,IAAI;AACrB;IACF,KAAK;AACH,aAAQ;AACR,gBAAW,MAAM,IAAI;AACrB;IACF,KAAK;AACH,aAAQ;AACR,gBAAW,MAAM,IAAI;AACrB;IACF,KAAK;AACH,aAAQ;AACR,gBAAW,MAAM,IAAI;AACrB;IACF,KAAK;AACH,aAAQ;AACR,gBAAW,MAAM,IAAI;AACrB;IACF,KAAK;AACH,aAAQ;AACR,gBAAW,SAAS,KAAK;AACvB,aAAO,MAAM,IAAI,uBAAuB,KAAK,GAAG;;AAElD;IACF,KAAK;AACH,aAAQ;AACR,gBAAW,SAAS,KAAK;AACvB,aAAO,MAAM,IAAI,uBAAuB,KAAK,GAAG;;AAElD;IACF,KAAK;AACH,aAAQ;AACR,gBAAW,SAAS,KAAK;AACvB,aAAO,MAAM,IAAI,uBAAuB,KAAK,IAAI;;AAEnD;IACF;KACE,IAAI,wBAAQ,IAAI,MAAM,uEACO,IAAI,QAAQ,YAAY,MAAK;AAC1D,WAAM,YAAY,IAAI,QAAQ;AAC9B,WAAM;;GAIR,IAAI,KAAK,MAAM,KAAK,WAAW,IAAI,QAAQ,WAAW;GACtD,IAAI,KAAK,MAAM,IAAI,mBAAmB,UAAU,GAAG,OAAO,GAAG,EAAE,EAAE,MAAM;GACvE,IAAI,SAAS,SAAS,GAAG;AACzB,UAAO,MAAM,GAAG;AAChB,UAAO,OAAO,MAAM,KAAK,aAAa,IAAI,KAAK,CAAC;AAChD,OAAG,OAAO,QAAQ,CAChB,QAAO,OAAO,OAAO,UAAU;OAE/B,QAAO;QAGT,QAAO,IAAI;AAGb,MAAG,IAAI,SAAS,wBACd,QAAO,IAAI,sBAAsB,KAAK,QAAQ,KAAK,EAAE,SAAS;MAG9D,QAAO,KAAK,QAAQ,KAAK;AAG3B,MAAG,SAAS,KACV,QAAO,IAAI,mBAAmB,KAAK;AAGrC,SAAO;;;;;;;;;;;;;;;AAgBT,KAAI,IAAI,oBAAoB,SAAS,UAAU,MAAM,IAAI,MAAM,GAAG,IAAI;EACpE,IAAI,GAAG;AAEP,MAAG,OAAO,OAAO,eAAe,OAAO,MAAM;AAC3C,OAAG,EAAE,UAAU,MAAM,IACnB,OAAM,IAAI,MAAM,uCAAqC;AAEvD,QAAK,MAAM,GAAG,KAAK,QAAQ;;EAG7B,IAAI,IAAI,GAAG;EACX,IAAI,IAAI,GAAG;EACX,IAAI,SAAS,IAAI,MAAM,KAAK,YAAY;EAGxC,IAAI,UAAU,IAAI,MAAM,KAAK,YAAY;AACzC,MAAG,aAAa,QAAQ,aAAa,QAAW;AAC9C,QAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,IAC9B,SAAQ,SAAS,SAAS,WAAW,EAAE,CAAC;AAE1C,WAAQ,SAAS,EAAE;;EAIrB,IAAI,IAAI,QAAQ,QAAQ;EACxB,IAAI,IAAI,KAAK,QAAQ;EAIrB,IAAI,IAAI,IAAI,MAAM,KAAK,YAAY;AACnC,IAAE,aAAa,IAAI,EAAE;EAMrB,IAAI,OAAO,IAAI,KAAK,KAAK,IAAI,EAAE;EAC/B,IAAI,IAAI,IAAI,MAAM,KAAK,YAAY;AACnC,OAAI,IAAI,GAAG,IAAI,MAAM,IACnB,GAAE,QAAQ,KAAK,GAAG,IAAI,EAAE,CAAC;EAO3B,IAAI,OAAO,IAAI,KAAK,KAAK,IAAI,EAAE;EAC/B,IAAI,IAAI,IAAI,MAAM,KAAK,YAAY;AACnC,OAAI,IAAI,GAAG,IAAI,MAAM,IACnB,GAAE,QAAQ,QAAQ,GAAG,IAAI,EAAE,CAAC;EAI9B,IAAI,IAAI;AACR,IAAE,UAAU,EAAE;EAGd,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE;AAGxB,OAAI,IAAI,IAAI,GAAG,KAAK,GAAG,KAAK;GAE1B,IAAI,MAAM,IAAI,MAAM,KAAK,YAAY;AACrC,OAAI,SAAS,EAAE,OAAO,CAAC;AACvB,OAAI,SAAS,EAAE,OAAO,CAAC;AACvB,QAAI,IAAI,QAAQ,GAAG,QAAQ,MAAM,SAAS;AACxC,OAAG,OAAO;AACV,OAAG,OAAO,IAAI,UAAU,CAAC;AACzB,UAAM,GAAG,QAAQ;;GAKnB,IAAI,IAAI,IAAI,MAAM,KAAK,YAAY;AACnC,QAAI,IAAI,GAAG,IAAI,GAAG,IAChB,GAAE,QAAQ,IAAI,GAAG,IAAI,EAAE,CAAC;GAM1B,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,GAAG,KAAK,KAAK,IAAI,EAAE;GAC3C,IAAI,OAAO,IAAI,MAAM,KAAK,YAAY;AACtC,QAAI,IAAI,GAAG,IAAI,GAAG,KAAK;IACrB,IAAI,QAAQ,IAAI,MAAM,KAAK,WAAW,EAAE,SAAS,EAAE,CAAC;IACpD,IAAI,IAAI;AACR,SAAI,IAAI,EAAE,QAAQ,GAAG,GAAG,KAAK,GAAG,KAAK;AACnC,SAAI,KAAK;AACT,UAAK,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,EAAE;AAC1B,WAAM,MAAM,GAAG,IAAI,IAAK;;AAE1B,SAAK,UAAU,MAAM;;AAEvB,OAAI;AAGJ,UAAO,UAAU,IAAI;;AAGvB,SAAO,SAAS,OAAO,QAAQ,GAAG,EAAE;AACpC,SAAO;;;;;;;;;;;AAYT,KAAI,IAAI,YAAY,SAAS,KAAK,QAAQ,UAAU;AAClD,UAAO,KAAP;GACA,KAAK,IAAI,KAAK,cACZ,QAAO,IAAI,IAAI,kBAAkB,KAAK,QAAQ,SAAS;GAEzD,KAAK,IAAI,KAAK;GACd,KAAK,IAAI,KAAK,6BACZ,QAAO,IAAI,IAAI,sBAAsB,KAAK,QAAQ,SAAS;GAE7D;IACE,IAAI,wBAAQ,IAAI,MAAM,yDAAyD;AAC/E,UAAM,MAAM;AACZ,UAAM,gBAAgB;KACpB;KACA;KACA;KACD;AACD,UAAM;;;;;;;;;;;;;;;AAgBV,KAAI,IAAI,oBAAoB,SAAS,KAAK,QAAQ,UAAU;EAE1D,IAAI,UAAU,EAAE;EAChB,IAAI,SAAS,EAAE;AACf,MAAG,CAAC,KAAK,SAAS,QAAQ,0BAA0B,SAAS,OAAO,EAAE;GACpE,IAAI,wBAAQ,IAAI,MAAM,uHACmD;AACzE,SAAM,SAAS;AACf,SAAM;;AAIR,QAAM,KAAK,SAAS,QAAQ,OAAO;AACnC,MAAG,QAAQ,IAAI,KAAK,gBAAgB;GAClC,IAAI,wBAAQ,IAAI,MAAM,8EACuB;AAC7C,SAAM,MAAM;AACZ,SAAM,gBAAgB,CAAC,cAAc;AACrC,SAAM;;AAER,QAAM,KAAK,SAAS,QAAQ,OAAO;AACnC,MAAG,QAAQ,IAAI,KAAK,iBAClB,QAAQ,IAAI,KAAK,iBACjB,QAAQ,IAAI,KAAK,iBACjB,QAAQ,IAAI,KAAK,mBACjB,QAAQ,IAAI,KAAK,WAAW;GAC5B,IAAI,wBAAQ,IAAI,MAAM,wEACiB;AACvC,SAAM,MAAM;AACZ,SAAM,gBAAgB;IACpB;IAAc;IAAc;IAAc;IAAgB;IAAS;AACrE,SAAM;;EAIR,IAAI,OAAO,QAAQ;EACnB,IAAI,QAAQ,MAAM,KAAK,aAAa,QAAQ,kBAAkB;AAC9D,UAAQ,MAAM,OAAO,MAAM,QAAQ,IAAI,EAAE;EACzC,IAAI;EACJ,IAAI;AACJ,UAAO,IAAI,KAAK,MAAhB;GACA,KAAK;AACH,YAAQ;AACR,eAAW,MAAM,IAAI;AACrB;GACF,KAAK;AACH,YAAQ;AACR,eAAW,MAAM,IAAI;AACrB;GACF,KAAK;AACH,YAAQ;AACR,eAAW,MAAM,IAAI;AACrB;GACF,KAAK;AACH,YAAQ;AACR,eAAW,MAAM,IAAI;AACrB;GACF,KAAK;AACH,YAAQ;AACR,eAAW,MAAM,IAAI;AACrB;;EAIF,IAAI,KAAK,sBAAsB,QAAQ,OAAO;EAG9C,IAAI,KAAK,MAAM,MAAM,OAAO,UAAU,MAAM,OAAO,OAAO,GAAG;EAC7D,IAAI,KAAK,QAAQ;EACjB,IAAI,SAAS,SAAS,GAAG;AACzB,SAAO,MAAM,GAAG;AAEhB,SAAO;;;;;;;;;;;;;;AAeT,KAAI,IAAI,wBAAwB,SAAS,KAAK,QAAQ,UAAU;EAE9D,IAAI,UAAU,EAAE;EAChB,IAAI,SAAS,EAAE;AACf,MAAG,CAAC,KAAK,SAAS,QAAQ,0BAA0B,SAAS,OAAO,EAAE;GACpE,IAAI,wBAAQ,IAAI,MAAM,uHACmD;AACzE,SAAM,SAAS;AACf,SAAM;;EAGR,IAAI,OAAO,MAAM,KAAK,aAAa,QAAQ,KAAK;EAChD,IAAI,QAAQ,MAAM,KAAK,aAAa,QAAQ,WAAW;AACvD,UAAQ,MAAM,OAAO,MAAM,QAAQ,IAAI,EAAE;EAEzC,IAAI,OAAO,QAAQ;AACnB,UAAO,KAAP;GACE,KAAK,IAAI,KAAK;AACZ,YAAQ;AACR,aAAS;AACT,eAAW,MAAM,IAAI;AACrB;GAEF,KAAK,IAAI,KAAK;AACZ,YAAQ;AACR,aAAS;AACT,eAAW,SAAS,OAAK,MAAI;KAC3B,IAAI,SAAS,MAAM,IAAI,uBAAuBA,OAAK,GAAG;AACtD,YAAO,MAAMC,MAAI,KAAK;AACtB,YAAO;;AAET;GAEF;IACE,IAAI,wBAAQ,IAAI,MAAM,wDAAwD;AAC9E,UAAM,MAAM;AACZ,UAAM;;EAIV,IAAI,KAAK,sBAAsB,QAAQ,OAAO;EAC9C,IAAI,MAAM,IAAI,IAAI,kBAAkB,UAAU,MAAM,GAAG,OAAO,OAAO,GAAG;AACxE,KAAG,OAAO;EACV,IAAI,KAAK,IAAI,IAAI,kBAAkB,UAAU,MAAM,GAAG,OAAO,QAAQ,GAAG;AAExE,SAAO,SAAS,KAAK,GAAG;;;;;;;;;;;;;AAc1B,KAAI,IAAI,qBAAqB,SAAS,UAAU,MAAM,OAAO,IAAI;AAC/D,MAAG,OAAO,OAAO,eAAe,OAAO,MAAM;AAC3C,OAAG,EAAE,SAAS,MAAM,IAClB,OAAM,IAAI,MAAM,sCAAoC;AAEtD,QAAK,MAAM,GAAG,IAAI,QAAQ;;AAE5B,MAAG,SAAS,KACV,QAAO;EAET,IAAI,UAAU,CAAC,KAAK,IAAI,WAAW,KAAK,CAAC;AACzC,OAAI,IAAI,SAAS,IAAI,IAAI,GAAG,SAAS,OAAO,EAAE,GAAG,UAAU,GACzD,SAAQ,KAAK,KAAK,IAAI,QAAQ,IAAI,KAAK,WAAW,KAAK,CAAC;AAE1D,SAAO,QAAQ,KAAK,GAAG,CAAC,OAAO,GAAG,MAAM;;CAG1C,SAAS,KAAK,IAAI,OAAO;AACvB,SAAO,GAAG,OAAO,CAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,UAAU;;CAGrD,SAAS,sBAAsB,QAAQ;EAErC,IAAI;AACJ,MAAG,CAAC,OACF,gBAAe;OACV;AACL,kBAAe,IAAI,KAAK,KAAK,SAAS,OAAO;AAC7C,OAAG,CAAC,cAAc;IAChB,IAAI,wBAAQ,IAAI,MAAM,uBAAuB;AAC7C,UAAM,MAAM;AACZ,UAAM,YAAY;KAChB;KAAgB;KAAkB;KAAkB;KACpD;KAAiB;AACnB,UAAM;;;AAGV,SAAO,4BAA4B,aAAa;;CAGlD,SAAS,4BAA4B,cAAc;EACjD,IAAI,UAAU,MAAM;AACpB,UAAO,cAAP;GACA,KAAK,iBACH,WAAU,MAAM,GAAG;GACrB,KAAK;GACL,KAAK;GACL,KAAK;GACL,KAAK;AACH,mBAAe,aAAa,OAAO,EAAE,CAAC,aAAa;AACnD;GACF;IACE,IAAI,wBAAQ,IAAI,MAAM,6BAA6B;AACnD,UAAM,YAAY;AAClB,UAAM,YAAY;KAChB;KAAgB;KAAkB;KAAkB;KACpD;KAAiB;AACnB,UAAM;;AAER,MAAG,CAAC,WAAW,EAAE,gBAAgB,SAC/B,OAAM,IAAI,MAAM,6BAA6B,aAAa;AAE5D,SAAO,QAAQ,cAAc,QAAQ;;CAGvC,SAAS,mBAAmB,MAAM,YAAY,OAAO,cAAc;EACjE,IAAI,SAAS,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,UAAU,MAAM,CAEvE,KAAK,OACH,KAAK,MAAM,WAAW,KAAK,KAAK,aAAa,OAAO,KAAK,EAE3D,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,SAAS,OACnD,WAAW,UAAU,CAAC,CACzB,CAAC;AAEF,MAAG,iBAAiB,eAClB,QAAO,MAAM,KAEX,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,SAAS,OACnD,MAAM,KAAK,WAAW,MAAM,SAAS,GAAG,CAAC,CAAC,EAE5C,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,UAAU,MAAM,CAE1D,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,KAAK,OAC/C,KAAK,SAAS,IAAI,KAAK,cAAc,CAAC,UAAU,CAAC,EAEnD,KAAK,OAAO,KAAK,MAAM,WAAW,KAAK,KAAK,MAAM,OAAO,GAAG,CAC7D,CAAC,CAAC;AAEP,SAAO"}

package/dist/esm/node_modules/node-forge/lib/pbkdf2.mjs

@@ -1,130 +0,0 @@
-import { __commonJS } from "../../../_virtual/rolldown_runtime.mjs";
-import { require_forge } from "./forge.mjs";
-import { require_util } from "./util.mjs";
-import { require_md } from "./md.mjs";
-import { require_hmac } from "./hmac.mjs";
-import { require_lib } from "../lib.mjs";
-
-//#region ../../node_modules/node-forge/lib/pbkdf2.js
-var require_pbkdf2 = /* @__PURE__ */ __commonJS({ "../../node_modules/node-forge/lib/pbkdf2.js": ((exports, module) => {
-	/**
-	* Password-Based Key-Derivation Function #2 implementation.
-	*
-	* See RFC 2898 for details.
-	*
-	* @author Dave Longley
-	*
-	* Copyright (c) 2010-2013 Digital Bazaar, Inc.
-	*/
-	var forge = require_forge();
-	require_hmac();
-	require_md();
-	require_util();
-	var pkcs5 = forge.pkcs5 = forge.pkcs5 || {};
-	var crypto;
-	if (forge.util.isNodejs && !forge.options.usePureJavaScript) crypto = require_lib();
-	/**
-	* Derives a key from a password.
-	*
-	* @param p the password as a binary-encoded string of bytes.
-	* @param s the salt as a binary-encoded string of bytes.
-	* @param c the iteration count, a positive integer.
-	* @param dkLen the intended length, in bytes, of the derived key,
-	*          (max: 2^32 - 1) * hash length of the PRF.
-	* @param [md] the message digest (or algorithm identifier as a string) to use
-	*          in the PRF, defaults to SHA-1.
-	* @param [callback(err, key)] presence triggers asynchronous version, called
-	*          once the operation completes.
-	*
-	* @return the derived key, as a binary-encoded string of bytes, for the
-	*           synchronous version (if no callback is specified).
-	*/
-	module.exports = forge.pbkdf2 = pkcs5.pbkdf2 = function(p, s, c, dkLen, md, callback) {
-		if (typeof md === "function") {
-			callback = md;
-			md = null;
-		}
-		if (forge.util.isNodejs && !forge.options.usePureJavaScript && crypto.pbkdf2 && (md === null || typeof md !== "object") && (crypto.pbkdf2Sync.length > 4 || !md || md === "sha1")) {
-			if (typeof md !== "string") md = "sha1";
-			p = Buffer.from(p, "binary");
-			s = Buffer.from(s, "binary");
-			if (!callback) {
-				if (crypto.pbkdf2Sync.length === 4) return crypto.pbkdf2Sync(p, s, c, dkLen).toString("binary");
-				return crypto.pbkdf2Sync(p, s, c, dkLen, md).toString("binary");
-			}
-			if (crypto.pbkdf2Sync.length === 4) return crypto.pbkdf2(p, s, c, dkLen, function(err$1, key) {
-				if (err$1) return callback(err$1);
-				callback(null, key.toString("binary"));
-			});
-			return crypto.pbkdf2(p, s, c, dkLen, md, function(err$1, key) {
-				if (err$1) return callback(err$1);
-				callback(null, key.toString("binary"));
-			});
-		}
-		if (typeof md === "undefined" || md === null) md = "sha1";
-		if (typeof md === "string") {
-			if (!(md in forge.md.algorithms)) throw new Error("Unknown hash algorithm: " + md);
-			md = forge.md[md].create();
-		}
-		var hLen = md.digestLength;
-		if (dkLen > 4294967295 * hLen) {
-			var err = /* @__PURE__ */ new Error("Derived key is too long.");
-			if (callback) return callback(err);
-			throw err;
-		}
-		var len = Math.ceil(dkLen / hLen);
-		var r = dkLen - (len - 1) * hLen;
-		var prf = forge.hmac.create();
-		prf.start(md, p);
-		var dk = "";
-		var xor, u_c, u_c1;
-		if (!callback) {
-			for (var i = 1; i <= len; ++i) {
-				prf.start(null, null);
-				prf.update(s);
-				prf.update(forge.util.int32ToBytes(i));
-				xor = u_c1 = prf.digest().getBytes();
-				for (var j = 2; j <= c; ++j) {
-					prf.start(null, null);
-					prf.update(u_c1);
-					u_c = prf.digest().getBytes();
-					xor = forge.util.xorBytes(xor, u_c, hLen);
-					u_c1 = u_c;
-				}
-				dk += i < len ? xor : xor.substr(0, r);
-			}
-			return dk;
-		}
-		var i = 1, j;
-		function outer() {
-			if (i > len) return callback(null, dk);
-			prf.start(null, null);
-			prf.update(s);
-			prf.update(forge.util.int32ToBytes(i));
-			xor = u_c1 = prf.digest().getBytes();
-			j = 2;
-			inner();
-		}
-		function inner() {
-			if (j <= c) {
-				prf.start(null, null);
-				prf.update(u_c1);
-				u_c = prf.digest().getBytes();
-				xor = forge.util.xorBytes(xor, u_c, hLen);
-				u_c1 = u_c;
-				++j;
-				return forge.util.setImmediate(inner);
-			}
-			dk += i < len ? xor : xor.substr(0, r);
-			++i;
-			outer();
-		}
-		outer();
-	};
-}) });
-
-//#endregion
-export default require_pbkdf2();
-
-export { require_pbkdf2 };
-//# sourceMappingURL=pbkdf2.mjs.map

package/dist/esm/node_modules/node-forge/lib/pbkdf2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"pbkdf2.mjs","names":["err"],"sources":["../../../../../../../node_modules/node-forge/lib/pbkdf2.js"],"sourcesContent":["/**\n * Password-Based Key-Derivation Function #2 implementation.\n *\n * See RFC 2898 for details.\n *\n * @author Dave Longley\n *\n * Copyright (c) 2010-2013 Digital Bazaar, Inc.\n */\nvar forge = require('./forge');\nrequire('./hmac');\nrequire('./md');\nrequire('./util');\n\nvar pkcs5 = forge.pkcs5 = forge.pkcs5 || {};\n\nvar crypto;\nif(forge.util.isNodejs && !forge.options.usePureJavaScript) {\n  crypto = require('crypto');\n}\n\n/**\n * Derives a key from a password.\n *\n * @param p the password as a binary-encoded string of bytes.\n * @param s the salt as a binary-encoded string of bytes.\n * @param c the iteration count, a positive integer.\n * @param dkLen the intended length, in bytes, of the derived key,\n *          (max: 2^32 - 1) * hash length of the PRF.\n * @param [md] the message digest (or algorithm identifier as a string) to use\n *          in the PRF, defaults to SHA-1.\n * @param [callback(err, key)] presence triggers asynchronous version, called\n *          once the operation completes.\n *\n * @return the derived key, as a binary-encoded string of bytes, for the\n *           synchronous version (if no callback is specified).\n */\nmodule.exports = forge.pbkdf2 = pkcs5.pbkdf2 = function(\n  p, s, c, dkLen, md, callback) {\n  if(typeof md === 'function') {\n    callback = md;\n    md = null;\n  }\n\n  // use native implementation if possible and not disabled, note that\n  // some node versions only support SHA-1, others allow digest to be changed\n  if(forge.util.isNodejs && !forge.options.usePureJavaScript &&\n    crypto.pbkdf2 && (md === null || typeof md !== 'object') &&\n    (crypto.pbkdf2Sync.length > 4 || (!md || md === 'sha1'))) {\n    if(typeof md !== 'string') {\n      // default prf to SHA-1\n      md = 'sha1';\n    }\n    p = Buffer.from(p, 'binary');\n    s = Buffer.from(s, 'binary');\n    if(!callback) {\n      if(crypto.pbkdf2Sync.length === 4) {\n        return crypto.pbkdf2Sync(p, s, c, dkLen).toString('binary');\n      }\n      return crypto.pbkdf2Sync(p, s, c, dkLen, md).toString('binary');\n    }\n    if(crypto.pbkdf2Sync.length === 4) {\n      return crypto.pbkdf2(p, s, c, dkLen, function(err, key) {\n        if(err) {\n          return callback(err);\n        }\n        callback(null, key.toString('binary'));\n      });\n    }\n    return crypto.pbkdf2(p, s, c, dkLen, md, function(err, key) {\n      if(err) {\n        return callback(err);\n      }\n      callback(null, key.toString('binary'));\n    });\n  }\n\n  if(typeof md === 'undefined' || md === null) {\n    // default prf to SHA-1\n    md = 'sha1';\n  }\n  if(typeof md === 'string') {\n    if(!(md in forge.md.algorithms)) {\n      throw new Error('Unknown hash algorithm: ' + md);\n    }\n    md = forge.md[md].create();\n  }\n\n  var hLen = md.digestLength;\n\n  /* 1. If dkLen > (2^32 - 1) * hLen, output \"derived key too long\" and\n    stop. */\n  if(dkLen > (0xFFFFFFFF * hLen)) {\n    var err = new Error('Derived key is too long.');\n    if(callback) {\n      return callback(err);\n    }\n    throw err;\n  }\n\n  /* 2. Let len be the number of hLen-octet blocks in the derived key,\n    rounding up, and let r be the number of octets in the last\n    block:\n\n    len = CEIL(dkLen / hLen),\n    r = dkLen - (len - 1) * hLen. */\n  var len = Math.ceil(dkLen / hLen);\n  var r = dkLen - (len - 1) * hLen;\n\n  /* 3. For each block of the derived key apply the function F defined\n    below to the password P, the salt S, the iteration count c, and\n    the block index to compute the block:\n\n    T_1 = F(P, S, c, 1),\n    T_2 = F(P, S, c, 2),\n    ...\n    T_len = F(P, S, c, len),\n\n    where the function F is defined as the exclusive-or sum of the\n    first c iterates of the underlying pseudorandom function PRF\n    applied to the password P and the concatenation of the salt S\n    and the block index i:\n\n    F(P, S, c, i) = u_1 XOR u_2 XOR ... XOR u_c\n\n    where\n\n    u_1 = PRF(P, S || INT(i)),\n    u_2 = PRF(P, u_1),\n    ...\n    u_c = PRF(P, u_{c-1}).\n\n    Here, INT(i) is a four-octet encoding of the integer i, most\n    significant octet first. */\n  var prf = forge.hmac.create();\n  prf.start(md, p);\n  var dk = '';\n  var xor, u_c, u_c1;\n\n  // sync version\n  if(!callback) {\n    for(var i = 1; i <= len; ++i) {\n      // PRF(P, S || INT(i)) (first iteration)\n      prf.start(null, null);\n      prf.update(s);\n      prf.update(forge.util.int32ToBytes(i));\n      xor = u_c1 = prf.digest().getBytes();\n\n      // PRF(P, u_{c-1}) (other iterations)\n      for(var j = 2; j <= c; ++j) {\n        prf.start(null, null);\n        prf.update(u_c1);\n        u_c = prf.digest().getBytes();\n        // F(p, s, c, i)\n        xor = forge.util.xorBytes(xor, u_c, hLen);\n        u_c1 = u_c;\n      }\n\n      /* 4. Concatenate the blocks and extract the first dkLen octets to\n        produce a derived key DK:\n\n        DK = T_1 || T_2 ||  ...  || T_len<0..r-1> */\n      dk += (i < len) ? xor : xor.substr(0, r);\n    }\n    /* 5. Output the derived key DK. */\n    return dk;\n  }\n\n  // async version\n  var i = 1, j;\n  function outer() {\n    if(i > len) {\n      // done\n      return callback(null, dk);\n    }\n\n    // PRF(P, S || INT(i)) (first iteration)\n    prf.start(null, null);\n    prf.update(s);\n    prf.update(forge.util.int32ToBytes(i));\n    xor = u_c1 = prf.digest().getBytes();\n\n    // PRF(P, u_{c-1}) (other iterations)\n    j = 2;\n    inner();\n  }\n\n  function inner() {\n    if(j <= c) {\n      prf.start(null, null);\n      prf.update(u_c1);\n      u_c = prf.digest().getBytes();\n      // F(p, s, c, i)\n      xor = forge.util.xorBytes(xor, u_c, hLen);\n      u_c1 = u_c;\n      ++j;\n      return forge.util.setImmediate(inner);\n    }\n\n    /* 4. Concatenate the blocks and extract the first dkLen octets to\n      produce a derived key DK:\n\n      DK = T_1 || T_2 ||  ...  || T_len<0..r-1> */\n    dk += (i < len) ? xor : xor.substr(0, r);\n\n    ++i;\n    outer();\n  }\n\n  outer();\n};\n"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;;;;;;;CASA,IAAI;AACJ;AACA;AACA;CAEA,IAAI,QAAQ,MAAM,QAAQ,MAAM,SAAS,EAAE;CAE3C,IAAI;AACJ,KAAG,MAAM,KAAK,YAAY,CAAC,MAAM,QAAQ,kBACvC;;;;;;;;;;;;;;;;;AAmBF,QAAO,UAAU,MAAM,SAAS,MAAM,SAAS,SAC7C,GAAG,GAAG,GAAG,OAAO,IAAI,UAAU;AAC9B,MAAG,OAAO,OAAO,YAAY;AAC3B,cAAW;AACX,QAAK;;AAKP,MAAG,MAAM,KAAK,YAAY,CAAC,MAAM,QAAQ,qBACvC,OAAO,WAAW,OAAO,QAAQ,OAAO,OAAO,cAC9C,OAAO,WAAW,SAAS,KAAM,CAAC,MAAM,OAAO,SAAU;AAC1D,OAAG,OAAO,OAAO,SAEf,MAAK;AAEP,OAAI,OAAO,KAAK,GAAG,SAAS;AAC5B,OAAI,OAAO,KAAK,GAAG,SAAS;AAC5B,OAAG,CAAC,UAAU;AACZ,QAAG,OAAO,WAAW,WAAW,EAC9B,QAAO,OAAO,WAAW,GAAG,GAAG,GAAG,MAAM,CAAC,SAAS,SAAS;AAE7D,WAAO,OAAO,WAAW,GAAG,GAAG,GAAG,OAAO,GAAG,CAAC,SAAS,SAAS;;AAEjE,OAAG,OAAO,WAAW,WAAW,EAC9B,QAAO,OAAO,OAAO,GAAG,GAAG,GAAG,OAAO,SAAS,OAAK,KAAK;AACtD,QAAGA,MACD,QAAO,SAASA,MAAI;AAEtB,aAAS,MAAM,IAAI,SAAS,SAAS,CAAC;KACtC;AAEJ,UAAO,OAAO,OAAO,GAAG,GAAG,GAAG,OAAO,IAAI,SAAS,OAAK,KAAK;AAC1D,QAAGA,MACD,QAAO,SAASA,MAAI;AAEtB,aAAS,MAAM,IAAI,SAAS,SAAS,CAAC;KACtC;;AAGJ,MAAG,OAAO,OAAO,eAAe,OAAO,KAErC,MAAK;AAEP,MAAG,OAAO,OAAO,UAAU;AACzB,OAAG,EAAE,MAAM,MAAM,GAAG,YAClB,OAAM,IAAI,MAAM,6BAA6B,GAAG;AAElD,QAAK,MAAM,GAAG,IAAI,QAAQ;;EAG5B,IAAI,OAAO,GAAG;AAId,MAAG,QAAS,aAAa,MAAO;GAC9B,IAAI,sBAAM,IAAI,MAAM,2BAA2B;AAC/C,OAAG,SACD,QAAO,SAAS,IAAI;AAEtB,SAAM;;EASR,IAAI,MAAM,KAAK,KAAK,QAAQ,KAAK;EACjC,IAAI,IAAI,SAAS,MAAM,KAAK;EA2B5B,IAAI,MAAM,MAAM,KAAK,QAAQ;AAC7B,MAAI,MAAM,IAAI,EAAE;EAChB,IAAI,KAAK;EACT,IAAI,KAAK,KAAK;AAGd,MAAG,CAAC,UAAU;AACZ,QAAI,IAAI,IAAI,GAAG,KAAK,KAAK,EAAE,GAAG;AAE5B,QAAI,MAAM,MAAM,KAAK;AACrB,QAAI,OAAO,EAAE;AACb,QAAI,OAAO,MAAM,KAAK,aAAa,EAAE,CAAC;AACtC,UAAM,OAAO,IAAI,QAAQ,CAAC,UAAU;AAGpC,SAAI,IAAI,IAAI,GAAG,KAAK,GAAG,EAAE,GAAG;AAC1B,SAAI,MAAM,MAAM,KAAK;AACrB,SAAI,OAAO,KAAK;AAChB,WAAM,IAAI,QAAQ,CAAC,UAAU;AAE7B,WAAM,MAAM,KAAK,SAAS,KAAK,KAAK,KAAK;AACzC,YAAO;;AAOT,UAAO,IAAI,MAAO,MAAM,IAAI,OAAO,GAAG,EAAE;;AAG1C,UAAO;;EAIT,IAAI,IAAI,GAAG;EACX,SAAS,QAAQ;AACf,OAAG,IAAI,IAEL,QAAO,SAAS,MAAM,GAAG;AAI3B,OAAI,MAAM,MAAM,KAAK;AACrB,OAAI,OAAO,EAAE;AACb,OAAI,OAAO,MAAM,KAAK,aAAa,EAAE,CAAC;AACtC,SAAM,OAAO,IAAI,QAAQ,CAAC,UAAU;AAGpC,OAAI;AACJ,UAAO;;EAGT,SAAS,QAAQ;AACf,OAAG,KAAK,GAAG;AACT,QAAI,MAAM,MAAM,KAAK;AACrB,QAAI,OAAO,KAAK;AAChB,UAAM,IAAI,QAAQ,CAAC,UAAU;AAE7B,UAAM,MAAM,KAAK,SAAS,KAAK,KAAK,KAAK;AACzC,WAAO;AACP,MAAE;AACF,WAAO,MAAM,KAAK,aAAa,MAAM;;AAOvC,SAAO,IAAI,MAAO,MAAM,IAAI,OAAO,GAAG,EAAE;AAExC,KAAE;AACF,UAAO;;AAGT,SAAO"}

package/dist/esm/node_modules/node-forge/lib/pem.mjs

@@ -1,179 +0,0 @@
-import { __commonJS } from "../../../_virtual/rolldown_runtime.mjs";
-import { require_forge } from "./forge.mjs";
-import { require_util } from "./util.mjs";
-
-//#region ../../node_modules/node-forge/lib/pem.js
-var require_pem = /* @__PURE__ */ __commonJS({ "../../node_modules/node-forge/lib/pem.js": ((exports, module) => {
-	/**
-	* Javascript implementation of basic PEM (Privacy Enhanced Mail) algorithms.
-	*
-	* See: RFC 1421.
-	*
-	* @author Dave Longley
-	*
-	* Copyright (c) 2013-2014 Digital Bazaar, Inc.
-	*
-	* A Forge PEM object has the following fields:
-	*
-	* type: identifies the type of message (eg: "RSA PRIVATE KEY").
-	*
-	* procType: identifies the type of processing performed on the message,
-	*   it has two subfields: version and type, eg: 4,ENCRYPTED.
-	*
-	* contentDomain: identifies the type of content in the message, typically
-	*   only uses the value: "RFC822".
-	*
-	* dekInfo: identifies the message encryption algorithm and mode and includes
-	*   any parameters for the algorithm, it has two subfields: algorithm and
-	*   parameters, eg: DES-CBC,F8143EDE5960C597.
-	*
-	* headers: contains all other PEM encapsulated headers -- where order is
-	*   significant (for pairing data like recipient ID + key info).
-	*
-	* body: the binary-encoded body.
-	*/
-	var forge = require_forge();
-	require_util();
-	var pem = module.exports = forge.pem = forge.pem || {};
-	/**
-	* Encodes (serializes) the given PEM object.
-	*
-	* @param msg the PEM message object to encode.
-	* @param options the options to use:
-	*          maxline the maximum characters per line for the body, (default: 64).
-	*
-	* @return the PEM-formatted string.
-	*/
-	pem.encode = function(msg, options) {
-		options = options || {};
-		var rval = "-----BEGIN " + msg.type + "-----\r\n";
-		var header;
-		if (msg.procType) {
-			header = {
-				name: "Proc-Type",
-				values: [String(msg.procType.version), msg.procType.type]
-			};
-			rval += foldHeader(header);
-		}
-		if (msg.contentDomain) {
-			header = {
-				name: "Content-Domain",
-				values: [msg.contentDomain]
-			};
-			rval += foldHeader(header);
-		}
-		if (msg.dekInfo) {
-			header = {
-				name: "DEK-Info",
-				values: [msg.dekInfo.algorithm]
-			};
-			if (msg.dekInfo.parameters) header.values.push(msg.dekInfo.parameters);
-			rval += foldHeader(header);
-		}
-		if (msg.headers) for (var i = 0; i < msg.headers.length; ++i) rval += foldHeader(msg.headers[i]);
-		if (msg.procType) rval += "\r\n";
-		rval += forge.util.encode64(msg.body, options.maxline || 64) + "\r\n";
-		rval += "-----END " + msg.type + "-----\r\n";
-		return rval;
-	};
-	/**
-	* Decodes (deserializes) all PEM messages found in the given string.
-	*
-	* @param str the PEM-formatted string to decode.
-	*
-	* @return the PEM message objects in an array.
-	*/
-	pem.decode = function(str) {
-		var rval = [];
-		var rMessage = /\s*-----BEGIN ([A-Z0-9- ]+)-----\r?\n?([\x21-\x7e\s]+?(?:\r?\n\r?\n))?([:A-Za-z0-9+\/=\s]+?)-----END \1-----/g;
-		var rHeader = /([\x21-\x7e]+):\s*([\x21-\x7e\s^:]+)/;
-		var rCRLF = /\r?\n/;
-		var match;
-		while (true) {
-			match = rMessage.exec(str);
-			if (!match) break;
-			var type = match[1];
-			if (type === "NEW CERTIFICATE REQUEST") type = "CERTIFICATE REQUEST";
-			var msg = {
-				type,
-				procType: null,
-				contentDomain: null,
-				dekInfo: null,
-				headers: [],
-				body: forge.util.decode64(match[3])
-			};
-			rval.push(msg);
-			if (!match[2]) continue;
-			var lines = match[2].split(rCRLF);
-			var li = 0;
-			while (match && li < lines.length) {
-				var line = lines[li].replace(/\s+$/, "");
-				for (var nl = li + 1; nl < lines.length; ++nl) {
-					var next = lines[nl];
-					if (!/\s/.test(next[0])) break;
-					line += next;
-					li = nl;
-				}
-				match = line.match(rHeader);
-				if (match) {
-					var header = {
-						name: match[1],
-						values: []
-					};
-					var values = match[2].split(",");
-					for (var vi = 0; vi < values.length; ++vi) header.values.push(ltrim(values[vi]));
-					if (!msg.procType) {
-						if (header.name !== "Proc-Type") throw new Error("Invalid PEM formatted message. The first encapsulated header must be \"Proc-Type\".");
-						else if (header.values.length !== 2) throw new Error("Invalid PEM formatted message. The \"Proc-Type\" header must have two subfields.");
-						msg.procType = {
-							version: values[0],
-							type: values[1]
-						};
-					} else if (!msg.contentDomain && header.name === "Content-Domain") msg.contentDomain = values[0] || "";
-					else if (!msg.dekInfo && header.name === "DEK-Info") {
-						if (header.values.length === 0) throw new Error("Invalid PEM formatted message. The \"DEK-Info\" header must have at least one subfield.");
-						msg.dekInfo = {
-							algorithm: values[0],
-							parameters: values[1] || null
-						};
-					} else msg.headers.push(header);
-				}
-				++li;
-			}
-			if (msg.procType === "ENCRYPTED" && !msg.dekInfo) throw new Error("Invalid PEM formatted message. The \"DEK-Info\" header must be present if \"Proc-Type\" is \"ENCRYPTED\".");
-		}
-		if (rval.length === 0) throw new Error("Invalid PEM formatted message.");
-		return rval;
-	};
-	function foldHeader(header) {
-		var rval = header.name + ": ";
-		var values = [];
-		var insertSpace = function(match, $1) {
-			return " " + $1;
-		};
-		for (var i = 0; i < header.values.length; ++i) values.push(header.values[i].replace(/^(\S+\r\n)/, insertSpace));
-		rval += values.join(",") + "\r\n";
-		var length = 0;
-		var candidate = -1;
-		for (var i = 0; i < rval.length; ++i, ++length) if (length > 65 && candidate !== -1) {
-			var insert = rval[candidate];
-			if (insert === ",") {
-				++candidate;
-				rval = rval.substr(0, candidate) + "\r\n " + rval.substr(candidate);
-			} else rval = rval.substr(0, candidate) + "\r\n" + insert + rval.substr(candidate + 1);
-			length = i - candidate - 1;
-			candidate = -1;
-			++i;
-		} else if (rval[i] === " " || rval[i] === "	" || rval[i] === ",") candidate = i;
-		return rval;
-	}
-	function ltrim(str) {
-		return str.replace(/^\s+/, "");
-	}
-}) });
-
-//#endregion
-export default require_pem();
-
-export { require_pem };
-//# sourceMappingURL=pem.mjs.map

package/dist/esm/node_modules/node-forge/lib/pem.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"pem.mjs","names":[],"sources":["../../../../../../../node_modules/node-forge/lib/pem.js"],"sourcesContent":["/**\n * Javascript implementation of basic PEM (Privacy Enhanced Mail) algorithms.\n *\n * See: RFC 1421.\n *\n * @author Dave Longley\n *\n * Copyright (c) 2013-2014 Digital Bazaar, Inc.\n *\n * A Forge PEM object has the following fields:\n *\n * type: identifies the type of message (eg: \"RSA PRIVATE KEY\").\n *\n * procType: identifies the type of processing performed on the message,\n *   it has two subfields: version and type, eg: 4,ENCRYPTED.\n *\n * contentDomain: identifies the type of content in the message, typically\n *   only uses the value: \"RFC822\".\n *\n * dekInfo: identifies the message encryption algorithm and mode and includes\n *   any parameters for the algorithm, it has two subfields: algorithm and\n *   parameters, eg: DES-CBC,F8143EDE5960C597.\n *\n * headers: contains all other PEM encapsulated headers -- where order is\n *   significant (for pairing data like recipient ID + key info).\n *\n * body: the binary-encoded body.\n */\nvar forge = require('./forge');\nrequire('./util');\n\n// shortcut for pem API\nvar pem = module.exports = forge.pem = forge.pem || {};\n\n/**\n * Encodes (serializes) the given PEM object.\n *\n * @param msg the PEM message object to encode.\n * @param options the options to use:\n *          maxline the maximum characters per line for the body, (default: 64).\n *\n * @return the PEM-formatted string.\n */\npem.encode = function(msg, options) {\n  options = options || {};\n  var rval = '-----BEGIN ' + msg.type + '-----\\r\\n';\n\n  // encode special headers\n  var header;\n  if(msg.procType) {\n    header = {\n      name: 'Proc-Type',\n      values: [String(msg.procType.version), msg.procType.type]\n    };\n    rval += foldHeader(header);\n  }\n  if(msg.contentDomain) {\n    header = {name: 'Content-Domain', values: [msg.contentDomain]};\n    rval += foldHeader(header);\n  }\n  if(msg.dekInfo) {\n    header = {name: 'DEK-Info', values: [msg.dekInfo.algorithm]};\n    if(msg.dekInfo.parameters) {\n      header.values.push(msg.dekInfo.parameters);\n    }\n    rval += foldHeader(header);\n  }\n\n  if(msg.headers) {\n    // encode all other headers\n    for(var i = 0; i < msg.headers.length; ++i) {\n      rval += foldHeader(msg.headers[i]);\n    }\n  }\n\n  // terminate header\n  if(msg.procType) {\n    rval += '\\r\\n';\n  }\n\n  // add body\n  rval += forge.util.encode64(msg.body, options.maxline || 64) + '\\r\\n';\n\n  rval += '-----END ' + msg.type + '-----\\r\\n';\n  return rval;\n};\n\n/**\n * Decodes (deserializes) all PEM messages found in the given string.\n *\n * @param str the PEM-formatted string to decode.\n *\n * @return the PEM message objects in an array.\n */\npem.decode = function(str) {\n  var rval = [];\n\n  // split string into PEM messages (be lenient w/EOF on BEGIN line)\n  var rMessage = /\\s*-----BEGIN ([A-Z0-9- ]+)-----\\r?\\n?([\\x21-\\x7e\\s]+?(?:\\r?\\n\\r?\\n))?([:A-Za-z0-9+\\/=\\s]+?)-----END \\1-----/g;\n  var rHeader = /([\\x21-\\x7e]+):\\s*([\\x21-\\x7e\\s^:]+)/;\n  var rCRLF = /\\r?\\n/;\n  var match;\n  while(true) {\n    match = rMessage.exec(str);\n    if(!match) {\n      break;\n    }\n\n    // accept \"NEW CERTIFICATE REQUEST\" as \"CERTIFICATE REQUEST\"\n    // https://datatracker.ietf.org/doc/html/rfc7468#section-7\n    var type = match[1];\n    if(type === 'NEW CERTIFICATE REQUEST') {\n      type = 'CERTIFICATE REQUEST';\n    }\n\n    var msg = {\n      type: type,\n      procType: null,\n      contentDomain: null,\n      dekInfo: null,\n      headers: [],\n      body: forge.util.decode64(match[3])\n    };\n    rval.push(msg);\n\n    // no headers\n    if(!match[2]) {\n      continue;\n    }\n\n    // parse headers\n    var lines = match[2].split(rCRLF);\n    var li = 0;\n    while(match && li < lines.length) {\n      // get line, trim any rhs whitespace\n      var line = lines[li].replace(/\\s+$/, '');\n\n      // RFC2822 unfold any following folded lines\n      for(var nl = li + 1; nl < lines.length; ++nl) {\n        var next = lines[nl];\n        if(!/\\s/.test(next[0])) {\n          break;\n        }\n        line += next;\n        li = nl;\n      }\n\n      // parse header\n      match = line.match(rHeader);\n      if(match) {\n        var header = {name: match[1], values: []};\n        var values = match[2].split(',');\n        for(var vi = 0; vi < values.length; ++vi) {\n          header.values.push(ltrim(values[vi]));\n        }\n\n        // Proc-Type must be the first header\n        if(!msg.procType) {\n          if(header.name !== 'Proc-Type') {\n            throw new Error('Invalid PEM formatted message. The first ' +\n              'encapsulated header must be \"Proc-Type\".');\n          } else if(header.values.length !== 2) {\n            throw new Error('Invalid PEM formatted message. The \"Proc-Type\" ' +\n              'header must have two subfields.');\n          }\n          msg.procType = {version: values[0], type: values[1]};\n        } else if(!msg.contentDomain && header.name === 'Content-Domain') {\n          // special-case Content-Domain\n          msg.contentDomain = values[0] || '';\n        } else if(!msg.dekInfo && header.name === 'DEK-Info') {\n          // special-case DEK-Info\n          if(header.values.length === 0) {\n            throw new Error('Invalid PEM formatted message. The \"DEK-Info\" ' +\n              'header must have at least one subfield.');\n          }\n          msg.dekInfo = {algorithm: values[0], parameters: values[1] || null};\n        } else {\n          msg.headers.push(header);\n        }\n      }\n\n      ++li;\n    }\n\n    if(msg.procType === 'ENCRYPTED' && !msg.dekInfo) {\n      throw new Error('Invalid PEM formatted message. The \"DEK-Info\" ' +\n        'header must be present if \"Proc-Type\" is \"ENCRYPTED\".');\n    }\n  }\n\n  if(rval.length === 0) {\n    throw new Error('Invalid PEM formatted message.');\n  }\n\n  return rval;\n};\n\nfunction foldHeader(header) {\n  var rval = header.name + ': ';\n\n  // ensure values with CRLF are folded\n  var values = [];\n  var insertSpace = function(match, $1) {\n    return ' ' + $1;\n  };\n  for(var i = 0; i < header.values.length; ++i) {\n    values.push(header.values[i].replace(/^(\\S+\\r\\n)/, insertSpace));\n  }\n  rval += values.join(',') + '\\r\\n';\n\n  // do folding\n  var length = 0;\n  var candidate = -1;\n  for(var i = 0; i < rval.length; ++i, ++length) {\n    if(length > 65 && candidate !== -1) {\n      var insert = rval[candidate];\n      if(insert === ',') {\n        ++candidate;\n        rval = rval.substr(0, candidate) + '\\r\\n ' + rval.substr(candidate);\n      } else {\n        rval = rval.substr(0, candidate) +\n          '\\r\\n' + insert + rval.substr(candidate + 1);\n      }\n      length = (i - candidate - 1);\n      candidate = -1;\n      ++i;\n    } else if(rval[i] === ' ' || rval[i] === '\\t' || rval[i] === ',') {\n      candidate = i;\n    }\n  }\n\n  return rval;\n}\n\nfunction ltrim(str) {\n  return str.replace(/^\\s+/, '');\n}\n"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BA,IAAI;AACJ;CAGA,IAAI,MAAM,OAAO,UAAU,MAAM,MAAM,MAAM,OAAO,EAAE;;;;;;;;;;AAWtD,KAAI,SAAS,SAAS,KAAK,SAAS;AAClC,YAAU,WAAW,EAAE;EACvB,IAAI,OAAO,gBAAgB,IAAI,OAAO;EAGtC,IAAI;AACJ,MAAG,IAAI,UAAU;AACf,YAAS;IACP,MAAM;IACN,QAAQ,CAAC,OAAO,IAAI,SAAS,QAAQ,EAAE,IAAI,SAAS,KAAK;IAC1D;AACD,WAAQ,WAAW,OAAO;;AAE5B,MAAG,IAAI,eAAe;AACpB,YAAS;IAAC,MAAM;IAAkB,QAAQ,CAAC,IAAI,cAAc;IAAC;AAC9D,WAAQ,WAAW,OAAO;;AAE5B,MAAG,IAAI,SAAS;AACd,YAAS;IAAC,MAAM;IAAY,QAAQ,CAAC,IAAI,QAAQ,UAAU;IAAC;AAC5D,OAAG,IAAI,QAAQ,WACb,QAAO,OAAO,KAAK,IAAI,QAAQ,WAAW;AAE5C,WAAQ,WAAW,OAAO;;AAG5B,MAAG,IAAI,QAEL,MAAI,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,QAAQ,EAAE,EACvC,SAAQ,WAAW,IAAI,QAAQ,GAAG;AAKtC,MAAG,IAAI,SACL,SAAQ;AAIV,UAAQ,MAAM,KAAK,SAAS,IAAI,MAAM,QAAQ,WAAW,GAAG,GAAG;AAE/D,UAAQ,cAAc,IAAI,OAAO;AACjC,SAAO;;;;;;;;;AAUT,KAAI,SAAS,SAAS,KAAK;EACzB,IAAI,OAAO,EAAE;EAGb,IAAI,WAAW;EACf,IAAI,UAAU;EACd,IAAI,QAAQ;EACZ,IAAI;AACJ,SAAM,MAAM;AACV,WAAQ,SAAS,KAAK,IAAI;AAC1B,OAAG,CAAC,MACF;GAKF,IAAI,OAAO,MAAM;AACjB,OAAG,SAAS,0BACV,QAAO;GAGT,IAAI,MAAM;IACF;IACN,UAAU;IACV,eAAe;IACf,SAAS;IACT,SAAS,EAAE;IACX,MAAM,MAAM,KAAK,SAAS,MAAM,GAAG;IACpC;AACD,QAAK,KAAK,IAAI;AAGd,OAAG,CAAC,MAAM,GACR;GAIF,IAAI,QAAQ,MAAM,GAAG,MAAM,MAAM;GACjC,IAAI,KAAK;AACT,UAAM,SAAS,KAAK,MAAM,QAAQ;IAEhC,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,GAAG;AAGxC,SAAI,IAAI,KAAK,KAAK,GAAG,KAAK,MAAM,QAAQ,EAAE,IAAI;KAC5C,IAAI,OAAO,MAAM;AACjB,SAAG,CAAC,KAAK,KAAK,KAAK,GAAG,CACpB;AAEF,aAAQ;AACR,UAAK;;AAIP,YAAQ,KAAK,MAAM,QAAQ;AAC3B,QAAG,OAAO;KACR,IAAI,SAAS;MAAC,MAAM,MAAM;MAAI,QAAQ,EAAE;MAAC;KACzC,IAAI,SAAS,MAAM,GAAG,MAAM,IAAI;AAChC,UAAI,IAAI,KAAK,GAAG,KAAK,OAAO,QAAQ,EAAE,GACpC,QAAO,OAAO,KAAK,MAAM,OAAO,IAAI,CAAC;AAIvC,SAAG,CAAC,IAAI,UAAU;AAChB,UAAG,OAAO,SAAS,YACjB,OAAM,IAAI,MAAM,sFAC6B;eACrC,OAAO,OAAO,WAAW,EACjC,OAAM,IAAI,MAAM,mFACoB;AAEtC,UAAI,WAAW;OAAC,SAAS,OAAO;OAAI,MAAM,OAAO;OAAG;gBAC5C,CAAC,IAAI,iBAAiB,OAAO,SAAS,iBAE9C,KAAI,gBAAgB,OAAO,MAAM;cACzB,CAAC,IAAI,WAAW,OAAO,SAAS,YAAY;AAEpD,UAAG,OAAO,OAAO,WAAW,EAC1B,OAAM,IAAI,MAAM,0FAC4B;AAE9C,UAAI,UAAU;OAAC,WAAW,OAAO;OAAI,YAAY,OAAO,MAAM;OAAK;WAEnE,KAAI,QAAQ,KAAK,OAAO;;AAI5B,MAAE;;AAGJ,OAAG,IAAI,aAAa,eAAe,CAAC,IAAI,QACtC,OAAM,IAAI,MAAM,4GAC0C;;AAI9D,MAAG,KAAK,WAAW,EACjB,OAAM,IAAI,MAAM,iCAAiC;AAGnD,SAAO;;CAGT,SAAS,WAAW,QAAQ;EAC1B,IAAI,OAAO,OAAO,OAAO;EAGzB,IAAI,SAAS,EAAE;EACf,IAAI,cAAc,SAAS,OAAO,IAAI;AACpC,UAAO,MAAM;;AAEf,OAAI,IAAI,IAAI,GAAG,IAAI,OAAO,OAAO,QAAQ,EAAE,EACzC,QAAO,KAAK,OAAO,OAAO,GAAG,QAAQ,cAAc,YAAY,CAAC;AAElE,UAAQ,OAAO,KAAK,IAAI,GAAG;EAG3B,IAAI,SAAS;EACb,IAAI,YAAY;AAChB,OAAI,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,EAAE,GAAG,EAAE,OACrC,KAAG,SAAS,MAAM,cAAc,IAAI;GAClC,IAAI,SAAS,KAAK;AAClB,OAAG,WAAW,KAAK;AACjB,MAAE;AACF,WAAO,KAAK,OAAO,GAAG,UAAU,GAAG,UAAU,KAAK,OAAO,UAAU;SAEnE,QAAO,KAAK,OAAO,GAAG,UAAU,GAC9B,SAAS,SAAS,KAAK,OAAO,YAAY,EAAE;AAEhD,YAAU,IAAI,YAAY;AAC1B,eAAY;AACZ,KAAE;aACM,KAAK,OAAO,OAAO,KAAK,OAAO,OAAQ,KAAK,OAAO,IAC3D,aAAY;AAIhB,SAAO;;CAGT,SAAS,MAAM,KAAK;AAClB,SAAO,IAAI,QAAQ,QAAQ,GAAG"}