@libp2p/noise 1.0.0-049bfa0fa

package/dist/src/noise.d.ts

@@ -0,0 +1,58 @@
+import { serviceCapabilities } from '@libp2p/interface';
+import type { ICryptoInterface } from './crypto.js';
+import type { NoiseComponents } from './index.js';
+import type { ICrypto, INoiseConnection, INoiseExtensions } from './types.js';
+import type { SecuredConnection, SecureConnectionOptions, MessageStream } from '@libp2p/interface';
+export interface NoiseExtensions {
+    webtransportCerthashes: Uint8Array[];
+}
+export interface NoiseInit {
+    /**
+     * x25519 private key, reuse for faster handshakes
+     */
+    staticNoiseKey?: Uint8Array;
+    extensions?: Partial<NoiseExtensions>;
+    crypto?: ICryptoInterface;
+    prologueBytes?: Uint8Array;
+}
+export declare class Noise implements INoiseConnection {
+    protocol: string;
+    crypto: ICrypto;
+    private readonly prologue;
+    private readonly staticKey;
+    private readonly extensions?;
+    private readonly metrics?;
+    private readonly components;
+    private readonly log;
+    constructor(components: NoiseComponents, init?: NoiseInit);
+    readonly [Symbol.toStringTag] = "@libp2p/noise";
+    readonly [serviceCapabilities]: string[];
+    /**
+     * Encrypt outgoing data to the remote party (handshake as initiator)
+     *
+     * @param connection - streaming iterable duplex that will be encrypted
+     * @param options
+     * @param options.remotePeer - PeerId of the remote peer. Used to validate the integrity of the remote peer
+     * @param options.signal - Used to abort the operation
+     */
+    secureOutbound(connection: MessageStream, options?: SecureConnectionOptions): Promise<SecuredConnection<INoiseExtensions>>;
+    private getStreamMuxer;
+    /**
+     * Decrypt incoming data (handshake as responder).
+     *
+     * @param connection - streaming iterable duplex that will be encrypted
+     * @param options
+     * @param options.remotePeer - PeerId of the remote peer. Used to validate the integrity of the remote peer
+     * @param options.signal - Used to abort the operation
+     */
+    secureInbound(connection: MessageStream, options?: SecureConnectionOptions): Promise<SecuredConnection<INoiseExtensions>>;
+    /**
+     * Perform XX handshake as initiator.
+     */
+    private performHandshakeInitiator;
+    /**
+     * Perform XX handshake as responder.
+     */
+    private performHandshakeResponder;
+}
+//# sourceMappingURL=noise.d.ts.map

package/dist/src/noise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"noise.d.ts","sourceRoot":"","sources":["../../src/noise.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAWnF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,OAAO,KAAK,EAAmB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAW,MAAM,YAAY,CAAA;AACvG,OAAO,KAAK,EAAE,iBAAiB,EAA6C,uBAAuB,EAAU,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGrJ,MAAM,WAAW,eAAe;IAC9B,sBAAsB,EAAE,UAAU,EAAE,CAAA;CACrC;AAED,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,cAAc,CAAC,EAAE,UAAU,CAAA;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;IACrC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IACzB,aAAa,CAAC,EAAE,UAAU,CAAA;CAC3B;AAED,qBAAa,KAAM,YAAW,gBAAgB;IACrC,QAAQ,SAAW;IACnB,MAAM,EAAE,OAAO,CAAA;IAEtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAY;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;IAC5C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;gBAEf,UAAU,EAAE,eAAe,EAAE,IAAI,GAAE,SAAc;IAuB9D,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,mBAAkB;IAE/C,QAAQ,CAAC,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAGvC;IAED;;;;;;;OAOG;IACG,cAAc,CAAE,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAyBjI,OAAO,CAAC,cAAc;IAsBtB;;;;;;;OAOG;IACG,aAAa,CAAE,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAyBhI;;OAEG;YACW,yBAAyB;IAmCvC;;OAEG;YACW,yBAAyB;CAiCxC"}

package/dist/src/noise.js

@@ -0,0 +1,174 @@
+import { publicKeyFromProtobuf } from '@libp2p/crypto/keys';
+import { InvalidCryptoExchangeError, serviceCapabilities } from '@libp2p/interface';
+import { peerIdFromPublicKey } from '@libp2p/peer-id';
+import { lpStream } from '@libp2p/utils';
+import { alloc as uint8ArrayAlloc } from 'uint8arrays/alloc';
+import { NOISE_MSG_MAX_LENGTH_BYTES } from './constants.js';
+import { defaultCrypto } from './crypto/index.js';
+import { wrapCrypto } from './crypto.js';
+import { uint16BEDecode, uint16BEEncode } from './encoder.js';
+import { registerMetrics } from './metrics.js';
+import { performHandshakeInitiator, performHandshakeResponder } from './performHandshake.js';
+import { toMessageStream } from "./utils.js";
+export class Noise {
+    protocol = '/noise';
+    crypto;
+    prologue;
+    staticKey;
+    extensions;
+    metrics;
+    components;
+    log;
+    constructor(components, init = {}) {
+        const { staticNoiseKey, extensions, crypto, prologueBytes } = init;
+        const { metrics } = components;
+        this.components = components;
+        this.log = components.logger.forComponent('libp2p:noise');
+        const _crypto = crypto ?? defaultCrypto;
+        this.crypto = wrapCrypto(_crypto);
+        this.extensions = {
+            webtransportCerthashes: [],
+            ...extensions
+        };
+        this.metrics = metrics ? registerMetrics(metrics) : undefined;
+        if (staticNoiseKey) {
+            // accepts x25519 private key of length 32
+            this.staticKey = _crypto.generateX25519KeyPairFromSeed(staticNoiseKey);
+        }
+        else {
+            this.staticKey = _crypto.generateX25519KeyPair();
+        }
+        this.prologue = prologueBytes ?? uint8ArrayAlloc(0);
+    }
+    [Symbol.toStringTag] = '@libp2p/noise';
+    [serviceCapabilities] = [
+        '@libp2p/connection-encryption',
+        '@libp2p/noise'
+    ];
+    /**
+     * Encrypt outgoing data to the remote party (handshake as initiator)
+     *
+     * @param connection - streaming iterable duplex that will be encrypted
+     * @param options
+     * @param options.remotePeer - PeerId of the remote peer. Used to validate the integrity of the remote peer
+     * @param options.signal - Used to abort the operation
+     */
+    async secureOutbound(connection, options) {
+        const log = connection.log?.newScope('noise') ?? this.log;
+        const wrappedConnection = lpStream(connection, {
+            lengthEncoder: uint16BEEncode,
+            lengthDecoder: uint16BEDecode,
+            maxDataLength: NOISE_MSG_MAX_LENGTH_BYTES
+        });
+        const handshake = await this.performHandshakeInitiator(wrappedConnection, this.components.privateKey, log, options?.remotePeer?.publicKey, options);
+        const publicKey = publicKeyFromProtobuf(handshake.payload.identityKey);
+        return {
+            connection: toMessageStream(wrappedConnection.unwrap(), handshake, this.metrics),
+            remoteExtensions: handshake.payload.extensions,
+            remotePeer: peerIdFromPublicKey(publicKey),
+            streamMuxer: options?.skipStreamMuxerNegotiation === true ? undefined : this.getStreamMuxer(handshake.payload.extensions?.streamMuxers)
+        };
+    }
+    getStreamMuxer(protocols) {
+        if (protocols == null || protocols.length === 0) {
+            return;
+        }
+        const streamMuxers = this.components.upgrader.getStreamMuxers();
+        if (streamMuxers != null) {
+            for (const protocol of protocols) {
+                const streamMuxer = streamMuxers.get(protocol);
+                if (streamMuxer != null) {
+                    return streamMuxer;
+                }
+            }
+        }
+        if (protocols.length) {
+            throw new InvalidCryptoExchangeError('Early muxer negotiation was requested but the initiator and responder had no common muxers');
+        }
+    }
+    /**
+     * Decrypt incoming data (handshake as responder).
+     *
+     * @param connection - streaming iterable duplex that will be encrypted
+     * @param options
+     * @param options.remotePeer - PeerId of the remote peer. Used to validate the integrity of the remote peer
+     * @param options.signal - Used to abort the operation
+     */
+    async secureInbound(connection, options) {
+        const log = connection.log?.newScope('noise') ?? this.log;
+        const wrappedConnection = lpStream(connection, {
+            lengthEncoder: uint16BEEncode,
+            lengthDecoder: uint16BEDecode,
+            maxDataLength: NOISE_MSG_MAX_LENGTH_BYTES
+        });
+        const handshake = await this.performHandshakeResponder(wrappedConnection, this.components.privateKey, log, options?.remotePeer?.publicKey, options);
+        const publicKey = publicKeyFromProtobuf(handshake.payload.identityKey);
+        return {
+            connection: toMessageStream(wrappedConnection.unwrap(), handshake, this.metrics),
+            remoteExtensions: handshake.payload.extensions,
+            remotePeer: peerIdFromPublicKey(publicKey),
+            streamMuxer: options?.skipStreamMuxerNegotiation === true ? undefined : this.getStreamMuxer(handshake.payload.extensions?.streamMuxers)
+        };
+    }
+    /**
+     * Perform XX handshake as initiator.
+     */
+    async performHandshakeInitiator(connection, 
+    // TODO: pass private key in noise constructor via Components
+    privateKey, log, remoteIdentityKey, options) {
+        let result;
+        const streamMuxers = options?.skipStreamMuxerNegotiation === true ? [] : [...this.components.upgrader.getStreamMuxers().keys()];
+        try {
+            result = await performHandshakeInitiator({
+                connection,
+                privateKey,
+                remoteIdentityKey,
+                log: log.newScope('xxhandshake'),
+                crypto: this.crypto,
+                prologue: this.prologue,
+                s: this.staticKey,
+                extensions: {
+                    streamMuxers,
+                    webtransportCerthashes: [],
+                    ...this.extensions
+                }
+            }, options);
+            this.metrics?.xxHandshakeSuccesses.increment();
+        }
+        catch (e) {
+            this.metrics?.xxHandshakeErrors.increment();
+            throw e;
+        }
+        return result;
+    }
+    /**
+     * Perform XX handshake as responder.
+     */
+    async performHandshakeResponder(connection, privateKey, log, remoteIdentityKey, options) {
+        let result;
+        const streamMuxers = options?.skipStreamMuxerNegotiation === true ? [] : [...this.components.upgrader.getStreamMuxers().keys()];
+        try {
+            result = await performHandshakeResponder({
+                connection,
+                privateKey,
+                remoteIdentityKey,
+                log: log.newScope('xxhandshake'),
+                crypto: this.crypto,
+                prologue: this.prologue,
+                s: this.staticKey,
+                extensions: {
+                    streamMuxers,
+                    webtransportCerthashes: [],
+                    ...this.extensions
+                }
+            }, options);
+            this.metrics?.xxHandshakeSuccesses.increment();
+        }
+        catch (e) {
+            this.metrics?.xxHandshakeErrors.increment();
+            throw e;
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=noise.js.map

package/dist/src/noise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noise.js","sourceRoot":"","sources":["../../src/noise.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAsB5C,MAAM,OAAO,KAAK;IACT,QAAQ,GAAG,QAAQ,CAAA;IACnB,MAAM,CAAS;IAEL,QAAQ,CAAY;IACpB,SAAS,CAAS;IAClB,UAAU,CAAkB;IAC5B,OAAO,CAAkB;IACzB,UAAU,CAAiB;IAC3B,GAAG,CAAQ;IAE5B,YAAa,UAA2B,EAAE,OAAkB,EAAE;QAC5D,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAA;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAA;QAE9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,aAAa,CAAA;QACvC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QACjC,IAAI,CAAC,UAAU,GAAG;YAChB,sBAAsB,EAAE,EAAE;YAC1B,GAAG,UAAU;SACd,CAAA;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAE7D,IAAI,cAAc,EAAE,CAAC;YACnB,0CAA0C;YAC1C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,6BAA6B,CAAC,cAAc,CAAC,CAAA;QACxE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAA;QAClD,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,aAAa,IAAI,eAAe,CAAC,CAAC,CAAC,CAAA;IACrD,CAAC;IAEQ,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,eAAe,CAAA;IAEtC,CAAC,mBAAmB,CAAC,GAAa;QACzC,+BAA+B;QAC/B,eAAe;KAChB,CAAA;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAAE,UAAyB,EAAE,OAAiC;QAChF,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAA;QACzD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,UAAU,EAAE;YAC7C,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,0BAA0B;SAC1C,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACpD,iBAAiB,EACjB,IAAI,CAAC,UAAU,CAAC,UAAU,EAC1B,GAAG,EACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAC9B,OAAO,CACR,CAAA;QACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAEtE,OAAO;YACL,UAAU,EAAE,eAAe,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC;YAChF,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,UAAU;YAC9C,UAAU,EAAE,mBAAmB,CAAC,SAAS,CAAC;YAC1C,WAAW,EAAE,OAAO,EAAE,0BAA0B,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;SACxI,CAAA;IACH,CAAC;IAEO,cAAc,CAAE,SAAoB;QAC1C,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,OAAM;QACR,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAA;QAE/D,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;YACzB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAE9C,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;oBACxB,OAAO,WAAW,CAAA;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,0BAA0B,CAAC,4FAA4F,CAAC,CAAA;QACpI,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAE,UAAyB,EAAE,OAAiC;QAC/E,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAA;QACzD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,UAAU,EAAE;YAC7C,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,0BAA0B;SAC1C,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACpD,iBAAiB,EACjB,IAAI,CAAC,UAAU,CAAC,UAAU,EAC1B,GAAG,EACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAC9B,OAAO,CACR,CAAA;QACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAEtE,OAAO;YACL,UAAU,EAAE,eAAe,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC;YAChF,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,UAAU;YAC9C,UAAU,EAAE,mBAAmB,CAAC,SAAS,CAAC;YAC1C,WAAW,EAAE,OAAO,EAAE,0BAA0B,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;SACxI,CAAA;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,yBAAyB,CACrC,UAAgC;IAChC,6DAA6D;IAC7D,UAAsB,EACtB,GAAW,EACX,iBAA6B,EAC7B,OAAiC;QAEjC,IAAI,MAAuB,CAAA;QAC3B,MAAM,YAAY,GAAG,OAAO,EAAE,0BAA0B,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,CAAC,CAAA;QAE/H,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,yBAAyB,CAAC;gBACvC,UAAU;gBACV,UAAU;gBACV,iBAAiB;gBACjB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAChC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,CAAC,EAAE,IAAI,CAAC,SAAS;gBACjB,UAAU,EAAE;oBACV,YAAY;oBACZ,sBAAsB,EAAE,EAAE;oBAC1B,GAAG,IAAI,CAAC,UAAU;iBACnB;aACF,EAAE,OAAO,CAAC,CAAA;YACX,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,SAAS,EAAE,CAAA;QAChD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,SAAS,EAAE,CAAA;YAC3C,MAAM,CAAC,CAAA;QACT,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,yBAAyB,CACrC,UAAgC,EAChC,UAAsB,EACtB,GAAW,EACX,iBAA6B,EAC7B,OAAiC;QAEjC,IAAI,MAAuB,CAAA;QAC3B,MAAM,YAAY,GAAG,OAAO,EAAE,0BAA0B,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,CAAC,CAAA;QAE/H,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,yBAAyB,CAAC;gBACvC,UAAU;gBACV,UAAU;gBACV,iBAAiB;gBACjB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAChC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,CAAC,EAAE,IAAI,CAAC,SAAS;gBACjB,UAAU,EAAE;oBACV,YAAY;oBACZ,sBAAsB,EAAE,EAAE;oBAC1B,GAAG,IAAI,CAAC,UAAU;iBACnB;aACF,EAAE,OAAO,CAAC,CAAA;YACX,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,SAAS,EAAE,CAAA;QAChD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,SAAS,EAAE,CAAA;YAC3C,MAAM,CAAC,CAAA;QACT,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;CACF"}

package/dist/src/nonce.d.ts

@@ -0,0 +1,17 @@
+export declare const MIN_NONCE = 0;
+export declare const MAX_NONCE = 4294967295;
+/**
+ * The nonce is an uint that's increased over time.
+ * Maintaining different representations help improve performance.
+ */
+export declare class Nonce {
+    private n;
+    private readonly bytes;
+    private readonly view;
+    constructor(n?: number);
+    increment(): void;
+    getBytes(): Uint8Array;
+    getUint64(): number;
+    assertValue(): void;
+}
+//# sourceMappingURL=nonce.d.ts.map

package/dist/src/nonce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.d.ts","sourceRoot":"","sources":["../../src/nonce.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS,IAAI,CAAA;AAO1B,eAAO,MAAM,SAAS,aAAa,CAAA;AAInC;;;GAGG;AACH,qBAAa,KAAK;IAChB,OAAO,CAAC,CAAC,CAAQ;IACjB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAU;gBAElB,CAAC,SAAY;IAO1B,SAAS,IAAK,IAAI;IAMlB,QAAQ,IAAK,UAAU;IAIvB,SAAS,IAAK,MAAM;IAIpB,WAAW,IAAK,IAAI;CAKrB"}

package/dist/src/nonce.js

@@ -0,0 +1,42 @@
+import { alloc as uint8ArrayAlloc } from 'uint8arrays/alloc';
+export const MIN_NONCE = 0;
+// For performance reasons, the nonce is represented as a JS `number`
+// Although JS `number` can safely represent integers up to 2 ** 53 - 1, we choose to only use
+// 4 bytes to store the data for performance reason.
+// This is a slight deviation from the noise spec, which describes the max nonce as 2 ** 64 - 2
+// The effect is that this implementation will need a new handshake to be performed after fewer messages are exchanged than other implementations with full uint64 nonces.
+// this MAX_NONCE is still a large number of messages, so the practical effect of this is negligible.
+export const MAX_NONCE = 0xffffffff;
+const ERR_MAX_NONCE = 'Cipher state has reached maximum n, a new handshake must be performed';
+/**
+ * The nonce is an uint that's increased over time.
+ * Maintaining different representations help improve performance.
+ */
+export class Nonce {
+    n;
+    bytes;
+    view;
+    constructor(n = MIN_NONCE) {
+        this.n = n;
+        this.bytes = uint8ArrayAlloc(12);
+        this.view = new DataView(this.bytes.buffer, this.bytes.byteOffset, this.bytes.byteLength);
+        this.view.setUint32(4, n, true);
+    }
+    increment() {
+        this.n++;
+        // Even though we're treating the nonce as 8 bytes, RFC7539 specifies 12 bytes for a nonce.
+        this.view.setUint32(4, this.n, true);
+    }
+    getBytes() {
+        return this.bytes;
+    }
+    getUint64() {
+        return this.n;
+    }
+    assertValue() {
+        if (this.n > MAX_NONCE) {
+            throw new Error(ERR_MAX_NONCE);
+        }
+    }
+}
+//# sourceMappingURL=nonce.js.map

package/dist/src/nonce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.js","sourceRoot":"","sources":["../../src/nonce.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAE5D,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAA;AAC1B,qEAAqE;AACrE,8FAA8F;AAC9F,oDAAoD;AACpD,+FAA+F;AAC/F,0KAA0K;AAC1K,qGAAqG;AACrG,MAAM,CAAC,MAAM,SAAS,GAAG,UAAU,CAAA;AAEnC,MAAM,aAAa,GAAG,uEAAuE,CAAA;AAE7F;;;GAGG;AACH,MAAM,OAAO,KAAK;IACR,CAAC,CAAQ;IACA,KAAK,CAAY;IACjB,IAAI,CAAU;IAE/B,YAAa,CAAC,GAAG,SAAS;QACxB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACV,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,EAAE,CAAC,CAAA;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACzF,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IACjC,CAAC;IAED,SAAS;QACP,IAAI,CAAC,CAAC,EAAE,CAAA;QACR,2FAA2F;QAC3F,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACtC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,CAAC,CAAA;IACf,CAAC;IAED,WAAW;QACT,IAAI,IAAI,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;CACF"}

package/dist/src/performHandshake.d.ts

@@ -0,0 +1,5 @@
+import type { HandshakeResult, HandshakeParams } from './types.js';
+import type { AbortOptions } from '@libp2p/interface';
+export declare function performHandshakeInitiator(init: HandshakeParams, options?: AbortOptions): Promise<HandshakeResult>;
+export declare function performHandshakeResponder(init: HandshakeParams, options?: AbortOptions): Promise<HandshakeResult>;
+//# sourceMappingURL=performHandshake.d.ts.map

package/dist/src/performHandshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"performHandshake.d.ts","sourceRoot":"","sources":["../../src/performHandshake.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAErD,wBAAsB,yBAAyB,CAAE,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAwCxH;AAED,wBAAsB,yBAAyB,CAAE,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAoCxH"}

package/dist/src/performHandshake.js

@@ -0,0 +1,69 @@
+import { logLocalStaticKeys, logLocalEphemeralKeys, logRemoteEphemeralKey, logRemoteStaticKey, logCipherState } from './logger.js';
+import { ZEROLEN, XXHandshakeState } from './protocol.js';
+import { createHandshakePayload, decodeHandshakePayload } from './utils.js';
+export async function performHandshakeInitiator(init, options) {
+    const { log, connection, crypto, privateKey, prologue, s, remoteIdentityKey, extensions } = init;
+    const payload = await createHandshakePayload(privateKey, s.publicKey, extensions);
+    const xx = new XXHandshakeState({
+        crypto,
+        protocolName: 'Noise_XX_25519_ChaChaPoly_SHA256',
+        initiator: true,
+        prologue,
+        s
+    });
+    logLocalStaticKeys(xx.s, log);
+    log.trace('Stage 0 - Initiator starting to send first message.');
+    await connection.write(xx.writeMessageA(ZEROLEN), options);
+    log.trace('Stage 0 - Initiator finished sending first message.');
+    logLocalEphemeralKeys(xx.e, log);
+    log.trace('Stage 1 - Initiator waiting to receive first message from responder...');
+    const plaintext = xx.readMessageB(await connection.read(options));
+    log.trace('Stage 1 - Initiator received the message.');
+    logRemoteEphemeralKey(xx.re, log);
+    logRemoteStaticKey(xx.rs, log);
+    log.trace("Initiator going to check remote's signature...");
+    const receivedPayload = await decodeHandshakePayload(plaintext, xx.rs, remoteIdentityKey);
+    log.trace('All good with the signature!');
+    log.trace('Stage 2 - Initiator sending third handshake message.');
+    await connection.write(xx.writeMessageC(payload), options);
+    log.trace('Stage 2 - Initiator sent message with signed payload.');
+    const [cs1, cs2] = xx.ss.split();
+    logCipherState(cs1, cs2, log);
+    return {
+        payload: receivedPayload,
+        encrypt: (plaintext) => cs1.encryptWithAd(ZEROLEN, plaintext),
+        decrypt: (ciphertext, dst) => cs2.decryptWithAd(ZEROLEN, ciphertext, dst)
+    };
+}
+export async function performHandshakeResponder(init, options) {
+    const { log, connection, crypto, privateKey, prologue, s, remoteIdentityKey, extensions } = init;
+    const payload = await createHandshakePayload(privateKey, s.publicKey, extensions);
+    const xx = new XXHandshakeState({
+        crypto,
+        protocolName: 'Noise_XX_25519_ChaChaPoly_SHA256',
+        initiator: false,
+        prologue,
+        s
+    });
+    logLocalStaticKeys(xx.s, log);
+    log.trace('Stage 0 - Responder waiting to receive first message.');
+    xx.readMessageA(await connection.read(options));
+    log.trace('Stage 0 - Responder received first message.');
+    logRemoteEphemeralKey(xx.re, log);
+    log.trace('Stage 1 - Responder sending out first message with signed payload and static key.');
+    await connection.write(xx.writeMessageB(payload), options);
+    log.trace('Stage 1 - Responder sent the second handshake message with signed payload.');
+    logLocalEphemeralKeys(xx.e, log);
+    log.trace('Stage 2 - Responder waiting for third handshake message...');
+    const plaintext = xx.readMessageC(await connection.read(options));
+    log.trace('Stage 2 - Responder received the message, finished handshake.');
+    const receivedPayload = await decodeHandshakePayload(plaintext, xx.rs, remoteIdentityKey);
+    const [cs1, cs2] = xx.ss.split();
+    logCipherState(cs1, cs2, log);
+    return {
+        payload: receivedPayload,
+        encrypt: (plaintext) => cs2.encryptWithAd(ZEROLEN, plaintext),
+        decrypt: (ciphertext, dst) => cs1.decryptWithAd(ZEROLEN, ciphertext, dst)
+    };
+}
+//# sourceMappingURL=performHandshake.js.map

package/dist/src/performHandshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"performHandshake.js","sourceRoot":"","sources":["../../src/performHandshake.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACf,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACzD,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAI3E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAE,IAAqB,EAAE,OAAsB;IAC5F,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAEhG,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IACjF,MAAM,EAAE,GAAG,IAAI,gBAAgB,CAAC;QAC9B,MAAM;QACN,YAAY,EAAE,kCAAkC;QAChD,SAAS,EAAE,IAAI;QACf,QAAQ;QACR,CAAC;KACF,CAAC,CAAA;IAEF,kBAAkB,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC7B,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;IAChE,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;IAC1D,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;IAChE,qBAAqB,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAEhC,GAAG,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAA;IACnF,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACjE,GAAG,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAA;IACtD,qBAAqB,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IACjC,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAE9B,GAAG,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAA;IAC3D,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAA;IACzF,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;IAEzC,GAAG,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACjE,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;IAC1D,GAAG,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAElE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAA;IAChC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAE7B,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC;QAC7D,OAAO,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC;KAC1E,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAE,IAAqB,EAAE,OAAsB;IAC5F,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,IAAI,CAAA;IAEhG,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IACjF,MAAM,EAAE,GAAG,IAAI,gBAAgB,CAAC;QAC9B,MAAM;QACN,YAAY,EAAE,kCAAkC;QAChD,SAAS,EAAE,KAAK;QAChB,QAAQ;QACR,CAAC;KACF,CAAC,CAAA;IAEF,kBAAkB,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC7B,GAAG,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAClE,EAAE,CAAC,YAAY,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAC/C,GAAG,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAA;IACxD,qBAAqB,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAEjC,GAAG,CAAC,KAAK,CAAC,mFAAmF,CAAC,CAAA;IAC9F,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;IAC1D,GAAG,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAA;IACvF,qBAAqB,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAEhC,GAAG,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAA;IACvE,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACjE,GAAG,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAA;IAC1E,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAA;IAEzF,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAA;IAChC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAE7B,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC;QAC7D,OAAO,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC;KAC1E,CAAA;AACH,CAAC"}

package/dist/src/proto/payload.d.ts

@@ -0,0 +1,22 @@
+import type { Codec, DecodeOptions } from 'protons-runtime';
+import type { Uint8ArrayList } from 'uint8arraylist';
+export interface NoiseExtensions {
+    webtransportCerthashes: Uint8Array[];
+    streamMuxers: string[];
+}
+export declare namespace NoiseExtensions {
+    const codec: () => Codec<NoiseExtensions>;
+    const encode: (obj: Partial<NoiseExtensions>) => Uint8Array;
+    const decode: (buf: Uint8Array | Uint8ArrayList, opts?: DecodeOptions<NoiseExtensions>) => NoiseExtensions;
+}
+export interface NoiseHandshakePayload {
+    identityKey: Uint8Array;
+    identitySig: Uint8Array;
+    extensions?: NoiseExtensions;
+}
+export declare namespace NoiseHandshakePayload {
+    const codec: () => Codec<NoiseHandshakePayload>;
+    const encode: (obj: Partial<NoiseHandshakePayload>) => Uint8Array;
+    const decode: (buf: Uint8Array | Uint8ArrayList, opts?: DecodeOptions<NoiseHandshakePayload>) => NoiseHandshakePayload;
+}
+//# sourceMappingURL=payload.d.ts.map

package/dist/src/proto/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../src/proto/payload.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpD,MAAM,WAAW,eAAe;IAC9B,sBAAsB,EAAE,UAAU,EAAE,CAAA;IACpC,YAAY,EAAE,MAAM,EAAE,CAAA;CACvB;AAED,yBAAiB,eAAe,CAAC;IAGxB,MAAM,KAAK,QAAO,KAAK,CAAC,eAAe,CAgE7C,CAAA;IAEM,MAAM,MAAM,GAAI,KAAK,OAAO,CAAC,eAAe,CAAC,KAAG,UAEtD,CAAA;IAEM,MAAM,MAAM,GAAI,KAAK,UAAU,GAAG,cAAc,EAAE,OAAO,aAAa,CAAC,eAAe,CAAC,KAAG,eAEhG,CAAA;CACF;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,UAAU,CAAA;IACvB,WAAW,EAAE,UAAU,CAAA;IACvB,UAAU,CAAC,EAAE,eAAe,CAAA;CAC7B;AAED,yBAAiB,qBAAqB,CAAC;IAG9B,MAAM,KAAK,QAAO,KAAK,CAAC,qBAAqB,CA+DnD,CAAA;IAEM,MAAM,MAAM,GAAI,KAAK,OAAO,CAAC,qBAAqB,CAAC,KAAG,UAE5D,CAAA;IAEM,MAAM,MAAM,GAAI,KAAK,UAAU,GAAG,cAAc,EAAE,OAAO,aAAa,CAAC,qBAAqB,CAAC,KAAG,qBAEtG,CAAA;CACF"}

package/dist/src/proto/payload.js

@@ -0,0 +1,133 @@
+import { decodeMessage, encodeMessage, MaxLengthError, message } from 'protons-runtime';
+import { alloc as uint8ArrayAlloc } from 'uint8arrays/alloc';
+export var NoiseExtensions;
+(function (NoiseExtensions) {
+    let _codec;
+    NoiseExtensions.codec = () => {
+        if (_codec == null) {
+            _codec = message((obj, w, opts = {}) => {
+                if (opts.lengthDelimited !== false) {
+                    w.fork();
+                }
+                if (obj.webtransportCerthashes != null) {
+                    for (const value of obj.webtransportCerthashes) {
+                        w.uint32(10);
+                        w.bytes(value);
+                    }
+                }
+                if (obj.streamMuxers != null) {
+                    for (const value of obj.streamMuxers) {
+                        w.uint32(18);
+                        w.string(value);
+                    }
+                }
+                if (opts.lengthDelimited !== false) {
+                    w.ldelim();
+                }
+            }, (reader, length, opts = {}) => {
+                const obj = {
+                    webtransportCerthashes: [],
+                    streamMuxers: []
+                };
+                const end = length == null ? reader.len : reader.pos + length;
+                while (reader.pos < end) {
+                    const tag = reader.uint32();
+                    switch (tag >>> 3) {
+                        case 1: {
+                            if (opts.limits?.webtransportCerthashes != null && obj.webtransportCerthashes.length === opts.limits.webtransportCerthashes) {
+                                throw new MaxLengthError('Decode error - map field "webtransportCerthashes" had too many elements');
+                            }
+                            obj.webtransportCerthashes.push(reader.bytes());
+                            break;
+                        }
+                        case 2: {
+                            if (opts.limits?.streamMuxers != null && obj.streamMuxers.length === opts.limits.streamMuxers) {
+                                throw new MaxLengthError('Decode error - map field "streamMuxers" had too many elements');
+                            }
+                            obj.streamMuxers.push(reader.string());
+                            break;
+                        }
+                        default: {
+                            reader.skipType(tag & 7);
+                            break;
+                        }
+                    }
+                }
+                return obj;
+            });
+        }
+        return _codec;
+    };
+    NoiseExtensions.encode = (obj) => {
+        return encodeMessage(obj, NoiseExtensions.codec());
+    };
+    NoiseExtensions.decode = (buf, opts) => {
+        return decodeMessage(buf, NoiseExtensions.codec(), opts);
+    };
+})(NoiseExtensions || (NoiseExtensions = {}));
+export var NoiseHandshakePayload;
+(function (NoiseHandshakePayload) {
+    let _codec;
+    NoiseHandshakePayload.codec = () => {
+        if (_codec == null) {
+            _codec = message((obj, w, opts = {}) => {
+                if (opts.lengthDelimited !== false) {
+                    w.fork();
+                }
+                if ((obj.identityKey != null && obj.identityKey.byteLength > 0)) {
+                    w.uint32(10);
+                    w.bytes(obj.identityKey);
+                }
+                if ((obj.identitySig != null && obj.identitySig.byteLength > 0)) {
+                    w.uint32(18);
+                    w.bytes(obj.identitySig);
+                }
+                if (obj.extensions != null) {
+                    w.uint32(34);
+                    NoiseExtensions.codec().encode(obj.extensions, w);
+                }
+                if (opts.lengthDelimited !== false) {
+                    w.ldelim();
+                }
+            }, (reader, length, opts = {}) => {
+                const obj = {
+                    identityKey: uint8ArrayAlloc(0),
+                    identitySig: uint8ArrayAlloc(0)
+                };
+                const end = length == null ? reader.len : reader.pos + length;
+                while (reader.pos < end) {
+                    const tag = reader.uint32();
+                    switch (tag >>> 3) {
+                        case 1: {
+                            obj.identityKey = reader.bytes();
+                            break;
+                        }
+                        case 2: {
+                            obj.identitySig = reader.bytes();
+                            break;
+                        }
+                        case 4: {
+                            obj.extensions = NoiseExtensions.codec().decode(reader, reader.uint32(), {
+                                limits: opts.limits?.extensions
+                            });
+                            break;
+                        }
+                        default: {
+                            reader.skipType(tag & 7);
+                            break;
+                        }
+                    }
+                }
+                return obj;
+            });
+        }
+        return _codec;
+    };
+    NoiseHandshakePayload.encode = (obj) => {
+        return encodeMessage(obj, NoiseHandshakePayload.codec());
+    };
+    NoiseHandshakePayload.decode = (buf, opts) => {
+        return decodeMessage(buf, NoiseHandshakePayload.codec(), opts);
+    };
+})(NoiseHandshakePayload || (NoiseHandshakePayload = {}));
+//# sourceMappingURL=payload.js.map

package/dist/src/proto/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../src/proto/payload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAA;AACvF,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAS5D,MAAM,KAAW,eAAe,CA4E/B;AA5ED,WAAiB,eAAe;IAC9B,IAAI,MAA8B,CAAA;IAErB,qBAAK,GAAG,GAA2B,EAAE;QAChD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,MAAM,GAAG,OAAO,CAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE;gBACtD,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;oBACnC,CAAC,CAAC,IAAI,EAAE,CAAA;gBACV,CAAC;gBAED,IAAI,GAAG,CAAC,sBAAsB,IAAI,IAAI,EAAE,CAAC;oBACvC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,sBAAsB,EAAE,CAAC;wBAC/C,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;wBACZ,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;oBAChB,CAAC;gBACH,CAAC;gBAED,IAAI,GAAG,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;oBAC7B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;wBACrC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;wBACZ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;oBACjB,CAAC;gBACH,CAAC;gBAED,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;oBACnC,CAAC,CAAC,MAAM,EAAE,CAAA;gBACZ,CAAC;YACH,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE;gBAC/B,MAAM,GAAG,GAAQ;oBACf,sBAAsB,EAAE,EAAE;oBAC1B,YAAY,EAAE,EAAE;iBACjB,CAAA;gBAED,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,CAAA;gBAE7D,OAAO,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;oBACxB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;oBAE3B,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;wBAClB,KAAK,CAAC,CAAC,CAAC,CAAC;4BACP,IAAI,IAAI,CAAC,MAAM,EAAE,sBAAsB,IAAI,IAAI,IAAI,GAAG,CAAC,sBAAsB,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gCAC5H,MAAM,IAAI,cAAc,CAAC,yEAAyE,CAAC,CAAA;4BACrG,CAAC;4BAED,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;4BAC/C,MAAK;wBACP,CAAC;wBACD,KAAK,CAAC,CAAC,CAAC,CAAC;4BACP,IAAI,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gCAC9F,MAAM,IAAI,cAAc,CAAC,+DAA+D,CAAC,CAAA;4BAC3F,CAAC;4BAED,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;4BACtC,MAAK;wBACP,CAAC;wBACD,OAAO,CAAC,CAAC,CAAC;4BACR,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;4BACxB,MAAK;wBACP,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,GAAG,CAAA;YACZ,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAEY,sBAAM,GAAG,CAAC,GAA6B,EAAc,EAAE;QAClE,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC,CAAA;IACpD,CAAC,CAAA;IAEY,sBAAM,GAAG,CAAC,GAAgC,EAAE,IAAqC,EAAmB,EAAE;QACjH,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAA;IAC1D,CAAC,CAAA;AACH,CAAC,EA5EgB,eAAe,KAAf,eAAe,QA4E/B;AAQD,MAAM,KAAW,qBAAqB,CA2ErC;AA3ED,WAAiB,qBAAqB;IACpC,IAAI,MAAoC,CAAA;IAE3B,2BAAK,GAAG,GAAiC,EAAE;QACtD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,MAAM,GAAG,OAAO,CAAwB,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE;gBAC5D,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;oBACnC,CAAC,CAAC,IAAI,EAAE,CAAA;gBACV,CAAC;gBAED,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;oBAChE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBACZ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;gBAC1B,CAAC;gBAED,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;oBAChE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBACZ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;gBAC1B,CAAC;gBAED,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;oBAC3B,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;oBACZ,eAAe,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;gBACnD,CAAC;gBAED,IAAI,IAAI,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;oBACnC,CAAC,CAAC,MAAM,EAAE,CAAA;gBACZ,CAAC;YACH,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE;gBAC/B,MAAM,GAAG,GAAQ;oBACf,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;oBAC/B,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;iBAChC,CAAA;gBAED,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,MAAM,CAAA;gBAE7D,OAAO,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;oBACxB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;oBAE3B,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;wBAClB,KAAK,CAAC,CAAC,CAAC,CAAC;4BACP,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,CAAA;4BAChC,MAAK;wBACP,CAAC;wBACD,KAAK,CAAC,CAAC,CAAC,CAAC;4BACP,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,CAAA;4BAChC,MAAK;wBACP,CAAC;wBACD,KAAK,CAAC,CAAC,CAAC,CAAC;4BACP,GAAG,CAAC,UAAU,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE;gCACvE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU;6BAChC,CAAC,CAAA;4BACF,MAAK;wBACP,CAAC;wBACD,OAAO,CAAC,CAAC,CAAC;4BACR,MAAM,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;4BACxB,MAAK;wBACP,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,GAAG,CAAA;YACZ,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAEY,4BAAM,GAAG,CAAC,GAAmC,EAAc,EAAE;QACxE,OAAO,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,KAAK,EAAE,CAAC,CAAA;IAC1D,CAAC,CAAA;IAEY,4BAAM,GAAG,CAAC,GAAgC,EAAE,IAA2C,EAAyB,EAAE;QAC7H,OAAO,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAA;IAChE,CAAC,CAAA;AACH,CAAC,EA3EgB,qBAAqB,KAArB,qBAAqB,QA2ErC"}

package/dist/src/protocol.d.ts

@@ -0,0 +1,71 @@
+import { Uint8ArrayList } from 'uint8arraylist';
+import { Nonce } from './nonce.js';
+import type { ICipherState, ISymmetricState, IHandshakeState, KeyPair, ICrypto } from './types.js';
+export declare const ZEROLEN: Uint8Array<ArrayBufferLike>;
+interface ICipherStateWithKey extends ICipherState {
+    k: Uint8Array;
+}
+export declare class CipherState implements ICipherState {
+    k?: Uint8Array;
+    n: Nonce;
+    private readonly crypto;
+    constructor(crypto: ICrypto, k?: Uint8Array | undefined, n?: number);
+    hasKey(): this is ICipherStateWithKey;
+    encryptWithAd(ad: Uint8Array, plaintext: Uint8Array | Uint8ArrayList): Uint8Array | Uint8ArrayList;
+    decryptWithAd(ad: Uint8Array, ciphertext: Uint8Array | Uint8ArrayList, dst?: Uint8Array): Uint8Array | Uint8ArrayList;
+}
+export declare class SymmetricState implements ISymmetricState {
+    cs: CipherState;
+    ck: Uint8Array;
+    h: Uint8Array;
+    private readonly crypto;
+    constructor(crypto: ICrypto, protocolName: string);
+    mixKey(ikm: Uint8Array): void;
+    mixHash(data: Uint8Array | Uint8ArrayList): void;
+    encryptAndHash(plaintext: Uint8Array | Uint8ArrayList): Uint8Array | Uint8ArrayList;
+    decryptAndHash(ciphertext: Uint8Array | Uint8ArrayList): Uint8Array | Uint8ArrayList;
+    split(): [CipherState, CipherState];
+}
+export interface HandshakeStateInit {
+    crypto: ICrypto;
+    protocolName: string;
+    initiator: boolean;
+    prologue: Uint8Array;
+    s?: KeyPair;
+    e?: KeyPair;
+    rs?: Uint8Array | Uint8ArrayList;
+    re?: Uint8Array | Uint8ArrayList;
+}
+export declare abstract class AbstractHandshakeState implements IHandshakeState {
+    ss: SymmetricState;
+    s?: KeyPair;
+    e?: KeyPair;
+    rs?: Uint8Array | Uint8ArrayList;
+    re?: Uint8Array | Uint8ArrayList;
+    initiator: boolean;
+    protected readonly crypto: ICrypto;
+    constructor(init: HandshakeStateInit);
+    protected writeE(): Uint8Array;
+    protected writeS(): Uint8Array | Uint8ArrayList;
+    protected writeEE(): void;
+    protected writeES(): void;
+    protected writeSE(): void;
+    protected readE(message: Uint8ArrayList, offset?: number): void;
+    protected readS(message: Uint8ArrayList, offset?: number): number;
+    protected readEE(): void;
+    protected readES(): void;
+    protected readSE(): void;
+}
+/**
+ * A IHandshakeState that's optimized for the XX pattern
+ */
+export declare class XXHandshakeState extends AbstractHandshakeState {
+    writeMessageA(payload: Uint8Array | Uint8ArrayList): Uint8Array | Uint8ArrayList;
+    writeMessageB(payload: Uint8Array | Uint8ArrayList): Uint8Array | Uint8ArrayList;
+    writeMessageC(payload: Uint8Array | Uint8ArrayList): Uint8Array | Uint8ArrayList;
+    readMessageA(message: Uint8ArrayList): Uint8Array | Uint8ArrayList;
+    readMessageB(message: Uint8ArrayList): Uint8Array | Uint8ArrayList;
+    readMessageC(message: Uint8ArrayList): Uint8Array | Uint8ArrayList;
+}
+export {};
+//# sourceMappingURL=protocol.d.ts.map