@libp2p/noise 1.0.0-049bfa0fa

package/dist/src/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAI/C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAKlG,eAAO,MAAM,OAAO,6BAAqB,CAAA;AAEzC,UAAU,mBAAoB,SAAQ,YAAY;IAChD,CAAC,EAAE,UAAU,CAAA;CACd;AAED,qBAAa,WAAY,YAAW,YAAY;IACvC,CAAC,CAAC,EAAE,UAAU,CAAA;IACd,CAAC,EAAE,KAAK,CAAA;IACf,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEnB,MAAM,EAAE,OAAO,EAAE,CAAC,GAAE,UAAU,GAAG,SAAqB,EAAE,CAAC,SAAI;IAMnE,MAAM,IAAK,IAAI,IAAI,mBAAmB;IAItC,aAAa,CAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,GAAG,cAAc;IAYnG,aAAa,CAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,cAAc,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,cAAc;CAW9H;AAED,qBAAa,cAAe,YAAW,eAAe;IAC7C,EAAE,EAAE,WAAW,CAAA;IACf,EAAE,EAAE,UAAU,CAAA;IACd,CAAC,EAAE,UAAU,CAAA;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEnB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM;IAU3C,MAAM,CAAE,GAAG,EAAE,UAAU,GAAG,IAAI;IAM9B,OAAO,CAAE,IAAI,EAAE,UAAU,GAAG,cAAc,GAAG,IAAI;IAIjD,cAAc,CAAE,SAAS,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,GAAG,cAAc;IAMpF,cAAc,CAAE,UAAU,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,GAAG,cAAc;IAMrF,KAAK,IAAK,CAAC,WAAW,EAAE,WAAW,CAAC;CAI5C;AAKD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,OAAO,CAAA;IAClB,QAAQ,EAAE,UAAU,CAAA;IACpB,CAAC,CAAC,EAAE,OAAO,CAAA;IACX,CAAC,CAAC,EAAE,OAAO,CAAA;IACX,EAAE,CAAC,EAAE,UAAU,GAAG,cAAc,CAAA;IAChC,EAAE,CAAC,EAAE,UAAU,GAAG,cAAc,CAAA;CACjC;AAED,8BAAsB,sBAAuB,YAAW,eAAe;IAC9D,EAAE,EAAE,cAAc,CAAA;IAClB,CAAC,CAAC,EAAE,OAAO,CAAA;IACX,CAAC,CAAC,EAAE,OAAO,CAAA;IACX,EAAE,CAAC,EAAE,UAAU,GAAG,cAAc,CAAA;IAChC,EAAE,CAAC,EAAE,UAAU,GAAG,cAAc,CAAA;IAChC,SAAS,EAAE,OAAO,CAAA;IACzB,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;gBAErB,IAAI,EAAE,kBAAkB;IAYrC,SAAS,CAAC,MAAM,IAAK,UAAU;IAU/B,SAAS,CAAC,MAAM,IAAK,UAAU,GAAG,cAAc;IAOhD,SAAS,CAAC,OAAO,IAAK,IAAI;IAU1B,SAAS,CAAC,OAAO,IAAK,IAAI;IAoB1B,SAAS,CAAC,OAAO,IAAK,IAAI;IAoB1B,SAAS,CAAC,KAAK,CAAE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAI,GAAG,IAAI;IAW3D,SAAS,CAAC,KAAK,CAAE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAI,GAAG,MAAM;IAa7D,SAAS,CAAC,MAAM,IAAK,IAAI;IAIzB,SAAS,CAAC,MAAM,IAAK,IAAI;IAIzB,SAAS,CAAC,MAAM,IAAK,IAAI;CAG1B;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,sBAAsB;IAE1D,aAAa,CAAE,OAAO,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,GAAG,cAAc;IAKjF,aAAa,CAAE,OAAO,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,GAAG,cAAc;IAUjF,aAAa,CAAE,OAAO,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,GAAG,cAAc;IAQjF,YAAY,CAAE,OAAO,EAAE,cAAc,GAAG,UAAU,GAAG,cAAc;IAWnE,YAAY,CAAE,OAAO,EAAE,cAAc,GAAG,UAAU,GAAG,cAAc;IAcnE,YAAY,CAAE,OAAO,EAAE,cAAc,GAAG,UAAU,GAAG,cAAc;CAUpE"}

package/dist/src/protocol.js

@@ -0,0 +1,257 @@
+import { Uint8ArrayList } from 'uint8arraylist';
+import { fromString as uint8ArrayFromString } from 'uint8arrays';
+import { alloc as uint8ArrayAlloc } from 'uint8arrays/alloc';
+import { InvalidCryptoExchangeError } from './errors.js';
+import { Nonce } from './nonce.js';
+// Code in this file is a direct translation of a subset of the noise protocol https://noiseprotocol.org/noise.html,
+// agnostic to libp2p's usage of noise
+export const ZEROLEN = uint8ArrayAlloc(0);
+export class CipherState {
+    k;
+    n;
+    crypto;
+    constructor(crypto, k = undefined, n = 0) {
+        this.crypto = crypto;
+        this.k = k;
+        this.n = new Nonce(n);
+    }
+    hasKey() {
+        return Boolean(this.k);
+    }
+    encryptWithAd(ad, plaintext) {
+        if (!this.hasKey()) {
+            return plaintext;
+        }
+        this.n.assertValue();
+        const e = this.crypto.encrypt(plaintext, this.n.getBytes(), ad, this.k);
+        this.n.increment();
+        return e;
+    }
+    decryptWithAd(ad, ciphertext, dst) {
+        if (!this.hasKey()) {
+            return ciphertext;
+        }
+        this.n.assertValue();
+        const plaintext = this.crypto.decrypt(ciphertext, this.n.getBytes(), ad, this.k, dst);
+        this.n.increment();
+        return plaintext;
+    }
+}
+export class SymmetricState {
+    cs;
+    ck;
+    h;
+    crypto;
+    constructor(crypto, protocolName) {
+        this.crypto = crypto;
+        const protocolNameBytes = uint8ArrayFromString(protocolName, 'utf-8');
+        this.h = hashProtocolName(crypto, protocolNameBytes);
+        this.ck = this.h;
+        this.cs = new CipherState(crypto);
+    }
+    mixKey(ikm) {
+        const [ck, tempK] = this.crypto.hkdf(this.ck, ikm);
+        this.ck = ck;
+        this.cs = new CipherState(this.crypto, tempK);
+    }
+    mixHash(data) {
+        this.h = this.crypto.hash(new Uint8ArrayList(this.h, data));
+    }
+    encryptAndHash(plaintext) {
+        const ciphertext = this.cs.encryptWithAd(this.h, plaintext);
+        this.mixHash(ciphertext);
+        return ciphertext;
+    }
+    decryptAndHash(ciphertext) {
+        const plaintext = this.cs.decryptWithAd(this.h, ciphertext);
+        this.mixHash(ciphertext);
+        return plaintext;
+    }
+    split() {
+        const [tempK1, tempK2] = this.crypto.hkdf(this.ck, ZEROLEN);
+        return [new CipherState(this.crypto, tempK1), new CipherState(this.crypto, tempK2)];
+    }
+}
+export class AbstractHandshakeState {
+    ss;
+    s;
+    e;
+    rs;
+    re;
+    initiator;
+    crypto;
+    constructor(init) {
+        const { crypto, protocolName, prologue, initiator, s, e, rs, re } = init;
+        this.crypto = crypto;
+        this.ss = new SymmetricState(crypto, protocolName);
+        this.ss.mixHash(prologue);
+        this.initiator = initiator;
+        this.s = s;
+        this.e = e;
+        this.rs = rs;
+        this.re = re;
+    }
+    writeE() {
+        if (this.e) {
+            throw new Error('ephemeral keypair is already set');
+        }
+        const e = this.crypto.generateKeypair();
+        this.ss.mixHash(e.publicKey);
+        this.e = e;
+        return e.publicKey;
+    }
+    writeS() {
+        if (!this.s) {
+            throw new Error('static keypair is not set');
+        }
+        return this.ss.encryptAndHash(this.s.publicKey);
+    }
+    writeEE() {
+        if (!this.e) {
+            throw new Error('ephemeral keypair is not set');
+        }
+        if (!this.re) {
+            throw new Error('remote ephemeral public key is not set');
+        }
+        this.ss.mixKey(this.crypto.dh(this.e, this.re));
+    }
+    writeES() {
+        if (this.initiator) {
+            if (!this.e) {
+                throw new Error('ephemeral keypair is not set');
+            }
+            if (!this.rs) {
+                throw new Error('remote static public key is not set');
+            }
+            this.ss.mixKey(this.crypto.dh(this.e, this.rs));
+        }
+        else {
+            if (!this.s) {
+                throw new Error('static keypair is not set');
+            }
+            if (!this.re) {
+                throw new Error('remote ephemeral public key is not set');
+            }
+            this.ss.mixKey(this.crypto.dh(this.s, this.re));
+        }
+    }
+    writeSE() {
+        if (this.initiator) {
+            if (!this.s) {
+                throw new Error('static keypair is not set');
+            }
+            if (!this.re) {
+                throw new Error('remote ephemeral public key is not set');
+            }
+            this.ss.mixKey(this.crypto.dh(this.s, this.re));
+        }
+        else {
+            if (!this.e) {
+                throw new Error('ephemeral keypair is not set');
+            }
+            if (!this.rs) {
+                throw new Error('remote static public key is not set');
+            }
+            this.ss.mixKey(this.crypto.dh(this.e, this.rs));
+        }
+    }
+    readE(message, offset = 0) {
+        if (this.re) {
+            throw new Error('remote ephemeral public key is already set');
+        }
+        if (message.byteLength < offset + 32) {
+            throw new Error('message is not long enough');
+        }
+        this.re = message.sublist(offset, offset + 32);
+        this.ss.mixHash(this.re);
+    }
+    readS(message, offset = 0) {
+        if (this.rs) {
+            throw new Error('remote static public key is already set');
+        }
+        const cipherLength = 32 + (this.ss.cs.hasKey() ? 16 : 0);
+        if (message.byteLength < offset + cipherLength) {
+            throw new Error('message is not long enough');
+        }
+        const temp = message.sublist(offset, offset + cipherLength);
+        this.rs = this.ss.decryptAndHash(temp);
+        return cipherLength;
+    }
+    readEE() {
+        this.writeEE();
+    }
+    readES() {
+        this.writeES();
+    }
+    readSE() {
+        this.writeSE();
+    }
+}
+/**
+ * A IHandshakeState that's optimized for the XX pattern
+ */
+export class XXHandshakeState extends AbstractHandshakeState {
+    // e
+    writeMessageA(payload) {
+        return new Uint8ArrayList(this.writeE(), this.ss.encryptAndHash(payload));
+    }
+    // e, ee, s, es
+    writeMessageB(payload) {
+        const e = this.writeE();
+        this.writeEE();
+        const encS = this.writeS();
+        this.writeES();
+        return new Uint8ArrayList(e, encS, this.ss.encryptAndHash(payload));
+    }
+    // s, se
+    writeMessageC(payload) {
+        const encS = this.writeS();
+        this.writeSE();
+        return new Uint8ArrayList(encS, this.ss.encryptAndHash(payload));
+    }
+    // e
+    readMessageA(message) {
+        try {
+            this.readE(message);
+            return this.ss.decryptAndHash(message.sublist(32));
+        }
+        catch (e) {
+            throw new InvalidCryptoExchangeError(`handshake stage 0 validation fail: ${e.message}`);
+        }
+    }
+    // e, ee, s, es
+    readMessageB(message) {
+        try {
+            this.readE(message);
+            this.readEE();
+            const consumed = this.readS(message, 32);
+            this.readES();
+            return this.ss.decryptAndHash(message.sublist(32 + consumed));
+        }
+        catch (e) {
+            throw new InvalidCryptoExchangeError(`handshake stage 1 validation fail: ${e.message}`);
+        }
+    }
+    // s, se
+    readMessageC(message) {
+        try {
+            const consumed = this.readS(message);
+            this.readSE();
+            return this.ss.decryptAndHash(message.sublist(consumed));
+        }
+        catch (e) {
+            throw new InvalidCryptoExchangeError(`handshake stage 2 validation fail: ${e.message}`);
+        }
+    }
+}
+function hashProtocolName(crypto, protocolName) {
+    if (protocolName.length <= 32) {
+        const h = uint8ArrayAlloc(32);
+        h.set(protocolName);
+        return h;
+    }
+    else {
+        return crypto.hash(protocolName);
+    }
+}
+//# sourceMappingURL=protocol.js.map

package/dist/src/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAGlC,oHAAoH;AACpH,sCAAsC;AAEtC,MAAM,CAAC,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;AAMzC,MAAM,OAAO,WAAW;IACf,CAAC,CAAa;IACd,CAAC,CAAO;IACE,MAAM,CAAS;IAEhC,YAAa,MAAe,EAAE,IAA4B,SAAS,EAAE,CAAC,GAAG,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACV,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IAEM,MAAM;QACX,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,CAAC;IAEM,aAAa,CAAE,EAAc,EAAE,SAAsC;QAC1E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACvE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;QAElB,OAAO,CAAC,CAAA;IACV,CAAC;IAEM,aAAa,CAAE,EAAc,EAAE,UAAuC,EAAE,GAAgB;QAC7F,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACrF,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;QAElB,OAAO,SAAS,CAAA;IAClB,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IAClB,EAAE,CAAa;IACf,EAAE,CAAY;IACd,CAAC,CAAY;IACH,MAAM,CAAS;IAEhC,YAAa,MAAe,EAAE,YAAoB;QAChD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QAEpB,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QACrE,IAAI,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;QAEpD,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;QAChB,IAAI,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;IAEM,MAAM,CAAE,GAAe;QAC5B,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAClD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC/C,CAAC;IAEM,OAAO,CAAE,IAAiC;QAC/C,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;IAC7D,CAAC;IAEM,cAAc,CAAE,SAAsC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QAC3D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACxB,OAAO,UAAU,CAAA;IACnB,CAAC;IAEM,cAAc,CAAE,UAAuC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;QAC3D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACxB,OAAO,SAAS,CAAA;IAClB,CAAC;IAEM,KAAK;QACV,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QAC3D,OAAO,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACrF,CAAC;CACF;AAgBD,MAAM,OAAgB,sBAAsB;IACnC,EAAE,CAAgB;IAClB,CAAC,CAAU;IACX,CAAC,CAAU;IACX,EAAE,CAA8B;IAChC,EAAE,CAA8B;IAChC,SAAS,CAAS;IACN,MAAM,CAAS;IAElC,YAAa,IAAwB;QACnC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,CAAA;QACxE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,EAAE,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QAClD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACzB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACV,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACV,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAES,MAAM;QACd,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAA;QACvC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC5B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACV,OAAO,CAAC,CAAC,SAAS,CAAA;IACpB,CAAC;IAES,MAAM;QACd,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACjD,CAAC;IAES,OAAO;QACf,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IACjD,CAAC;IAES,OAAO;QACf,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;YACjD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YACxD,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QACjD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;YAC9C,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YAC3D,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QACjD,CAAC;IACH,CAAC;IAES,OAAO;QACf,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;YAC9C,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YAC3D,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QACjD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;YACjD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YACxD,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;QACjD,CAAC;IACH,CAAC;IAES,KAAK,CAAE,OAAuB,EAAE,MAAM,GAAG,CAAC;QAClD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC/D,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,GAAG,MAAM,GAAG,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAA;QAC9C,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;IAES,KAAK,CAAE,OAAuB,EAAE,MAAM,GAAG,CAAC;QAClD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC5D,CAAC;QACD,MAAM,YAAY,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACxD,IAAI,OAAO,CAAC,UAAU,GAAG,MAAM,GAAG,YAAY,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC/C,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAAC,CAAA;QAC3D,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACtC,OAAO,YAAY,CAAA;IACrB,CAAC;IAES,MAAM;QACd,IAAI,CAAC,OAAO,EAAE,CAAA;IAChB,CAAC;IAES,MAAM;QACd,IAAI,CAAC,OAAO,EAAE,CAAA;IAChB,CAAC;IAES,MAAM;QACd,IAAI,CAAC,OAAO,EAAE,CAAA;IAChB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,sBAAsB;IAC1D,IAAI;IACJ,aAAa,CAAE,OAAoC;QACjD,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;IAC3E,CAAC;IAED,eAAe;IACf,aAAa,CAAE,OAAoC;QACjD,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QACvB,IAAI,CAAC,OAAO,EAAE,CAAA;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QAC1B,IAAI,CAAC,OAAO,EAAE,CAAA;QAEd,OAAO,IAAI,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;IACrE,CAAC;IAED,QAAQ;IACR,aAAa,CAAE,OAAoC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QAC1B,IAAI,CAAC,OAAO,EAAE,CAAA;QAEd,OAAO,IAAI,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;IAClE,CAAC;IAED,IAAI;IACJ,YAAY,CAAE,OAAuB;QACnC,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAEnB,OAAO,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;QACpD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,0BAA0B,CAAC,sCAAuC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QACpG,CAAC;IACH,CAAC;IAED,eAAe;IACf,YAAY,CAAE,OAAuB;QACnC,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACnB,IAAI,CAAC,MAAM,EAAE,CAAA;YACb,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YACxC,IAAI,CAAC,MAAM,EAAE,CAAA;YAEb,OAAO,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAA;QAC/D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,0BAA0B,CAAC,sCAAuC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QACpG,CAAC;IACH,CAAC;IAED,QAAQ;IACR,YAAY,CAAE,OAAuB;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACpC,IAAI,CAAC,MAAM,EAAE,CAAA;YAEb,OAAO,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC1D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,0BAA0B,CAAC,sCAAuC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QACpG,CAAC;IACH,CAAC;CACF;AAED,SAAS,gBAAgB,CAAE,MAAe,EAAE,YAAwB;IAClE,IAAI,YAAY,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,eAAe,CAAC,EAAE,CAAC,CAAA;QAC7B,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QACnB,OAAO,CAAC,CAAA;IACV,CAAC;SAAM,CAAC;QACN,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAClC,CAAC;AACH,CAAC"}

package/dist/src/types.d.ts

@@ -0,0 +1,98 @@
+import type { Nonce } from './nonce.js';
+import type { NoiseExtensions, NoiseHandshakePayload } from './proto/payload.js';
+import type { ConnectionEncrypter, Logger, PrivateKey, PublicKey } from '@libp2p/interface';
+import type { LengthPrefixedStream } from '@libp2p/utils';
+import type { Uint8ArrayList } from 'uint8arraylist';
+/**
+ * Crypto functions defined by the noise protocol, abstracted from the
+ * underlying implementations
+ */
+export interface ICrypto {
+    generateKeypair(): KeyPair;
+    dh(keypair: KeyPair, publicKey: Uint8Array | Uint8ArrayList): Uint8Array;
+    encrypt(plaintext: Uint8Array | Uint8ArrayList, nonce: Uint8Array, ad: Uint8Array, k: Uint8Array): Uint8ArrayList | Uint8Array;
+    decrypt(ciphertext: Uint8Array | Uint8ArrayList, nonce: Uint8Array, ad: Uint8Array, k: Uint8Array, dst?: Uint8Array): Uint8ArrayList | Uint8Array;
+    hash(data: Uint8Array | Uint8ArrayList): Uint8Array;
+    hkdf(ck: Uint8Array, ikm: Uint8Array): [Uint8Array, Uint8Array, Uint8Array];
+}
+export interface HandshakeParams {
+    log: Logger;
+    connection: LengthPrefixedStream;
+    crypto: ICrypto;
+    privateKey: PrivateKey;
+    prologue: Uint8Array;
+    /** static keypair */
+    s: KeyPair;
+    remoteIdentityKey?: PublicKey;
+    extensions?: NoiseExtensions;
+}
+export interface HandshakeResult {
+    payload: NoiseHandshakePayload;
+    encrypt(plaintext: Uint8Array | Uint8ArrayList): Uint8Array | Uint8ArrayList;
+    decrypt(ciphertext: Uint8Array | Uint8ArrayList, dst?: Uint8Array): Uint8Array | Uint8ArrayList;
+}
+/**
+ * A CipherState object contains k and n variables, which it uses to encrypt and
+ * decrypt ciphertext.
+ *
+ * During the handshake phase each party has a single CipherState, but during
+ * the transport phase each party has two CipherState objects: one for sending,
+ * and one for receiving.
+ */
+export interface ICipherState {
+    /**
+     * A cipher key of 32 bytes (which may be empty). Empty is a special value
+     * which indicates k has not yet been initialized.
+     */
+    k?: Uint8Array;
+    /**
+     * An 8-byte (64-bit) unsigned integer nonce.
+     *
+     * For performance reasons, the nonce is represented as a Nonce object
+     * The nonce is treated as a uint64, even though the underlying `number` only
+     * has 52 safely-available bits.
+     */
+    n: Nonce;
+}
+/**
+ * A SymmetricState object contains a CipherState plus ck and h variables. It is
+ * so-named because it encapsulates all the "symmetric crypto" used by Noise.
+ *
+ * During the handshake phase each party has a single SymmetricState, which can
+ * be deleted once the handshake is finished.
+ */
+export interface ISymmetricState {
+    cs: ICipherState;
+    /** A chaining key of 32 bytes. */
+    ck: Uint8Array;
+    /** A hash output of 32 bytes. */
+    h: Uint8Array;
+}
+/**
+ * A HandshakeState object contains a SymmetricState plus DH variables (s, e,
+ * rs, re) and a variable representing the handshake pattern.
+ *
+ * During the handshake phase each party has a single HandshakeState, which can
+ * be deleted once the handshake is finished.
+ */
+export interface IHandshakeState {
+    ss: ISymmetricState;
+    /** The local static key pair */
+    s?: KeyPair;
+    /** The local ephemeral key pair */
+    e?: KeyPair;
+    /** The remote party's static public key */
+    rs?: Uint8Array | Uint8ArrayList;
+    /** The remote party's ephemeral public key */
+    re?: Uint8Array | Uint8ArrayList;
+}
+export interface KeyPair {
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+}
+export interface INoiseExtensions {
+    webtransportCerthashes: Uint8Array[];
+}
+export interface INoiseConnection extends ConnectionEncrypter<INoiseExtensions> {
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpD;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,eAAe,IAAI,OAAO,CAAA;IAC1B,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,CAAA;IACxE,OAAO,CAAC,SAAS,EAAE,UAAU,GAAG,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,CAAA;IAC9H,OAAO,CAAC,UAAU,EAAE,UAAU,GAAG,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,CAAA;IACjJ,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,CAAA;IACnD,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;CAC5E;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,oBAAoB,CAAA;IAChC,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,EAAE,UAAU,CAAA;IACpB,qBAAqB;IACrB,CAAC,EAAE,OAAO,CAAA;IACV,iBAAiB,CAAC,EAAE,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,eAAe,CAAA;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,qBAAqB,CAAA;IAC9B,OAAO,CAAE,SAAS,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,GAAG,cAAc,CAAA;IAC7E,OAAO,CAAE,UAAU,EAAE,UAAU,GAAG,cAAc,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,cAAc,CAAA;CACjG;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,CAAC,CAAC,EAAE,UAAU,CAAA;IACd;;;;;;OAMG;IACH,CAAC,EAAE,KAAK,CAAA;CACT;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,YAAY,CAAA;IAChB,kCAAkC;IAClC,EAAE,EAAE,UAAU,CAAA;IACd,iCAAiC;IACjC,CAAC,EAAE,UAAU,CAAA;CACd;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,eAAe,CAAA;IACnB,gCAAgC;IAChC,CAAC,CAAC,EAAE,OAAO,CAAA;IACX,mCAAmC;IACnC,CAAC,CAAC,EAAE,OAAO,CAAA;IACX,2CAA2C;IAC3C,EAAE,CAAC,EAAE,UAAU,GAAG,cAAc,CAAA;IAChC,8CAA8C;IAC9C,EAAE,CAAC,EAAE,UAAU,GAAG,cAAc,CAAA;CACjC;AAED,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,UAAU,CAAA;IACrB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB,EAAE,UAAU,EAAE,CAAA;CACrC;AAED,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB,CAAC,gBAAgB,CAAC;CAAI"}

package/dist/src/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":""}

package/dist/src/utils.d.ts

@@ -0,0 +1,11 @@
+import { Uint8ArrayList } from 'uint8arraylist';
+import { NoiseHandshakePayload } from './proto/payload.js';
+import type { MetricsRegistry } from './metrics.ts';
+import type { NoiseExtensions } from './proto/payload.js';
+import type { HandshakeResult } from './types.ts';
+import type { MessageStream, PrivateKey, PublicKey } from '@libp2p/interface';
+export declare function createHandshakePayload(privateKey: PrivateKey, staticPublicKey: Uint8Array | Uint8ArrayList, extensions?: NoiseExtensions): Promise<Uint8Array | Uint8ArrayList>;
+export declare function decodeHandshakePayload(payloadBytes: Uint8Array | Uint8ArrayList, remoteStaticKey?: Uint8Array | Uint8ArrayList, remoteIdentityKey?: PublicKey): Promise<NoiseHandshakePayload>;
+export declare function getSignaturePayload(publicKey: Uint8Array | Uint8ArrayList): Uint8Array | Uint8ArrayList;
+export declare function toMessageStream(connection: MessageStream, handshake: HandshakeResult, metrics?: MetricsRegistry): MessageStream;
+//# sourceMappingURL=utils.d.ts.map

package/dist/src/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAK/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAgB,aAAa,EAAE,UAAU,EAAE,SAAS,EAAoB,MAAM,mBAAmB,CAAA;AAG7G,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,UAAU,EACtB,eAAe,EAAE,UAAU,GAAG,cAAc,EAC5C,UAAU,CAAC,EAAE,eAAe,GAC3B,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC,CAQtC;AAED,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,UAAU,GAAG,cAAc,EACzC,eAAe,CAAC,EAAE,UAAU,GAAG,cAAc,EAC7C,iBAAiB,CAAC,EAAE,SAAS,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CAuBhC;AAED,wBAAgB,mBAAmB,CAAE,SAAS,EAAE,UAAU,GAAG,cAAc,GAAG,UAAU,GAAG,cAAc,CAUxG;AAsJD,wBAAgB,eAAe,CAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,aAAa,CAEhI"}

package/dist/src/utils.js

@@ -0,0 +1,176 @@
+import { publicKeyFromProtobuf, publicKeyToProtobuf } from '@libp2p/crypto/keys';
+import { StreamMessageEvent, UnexpectedPeerError } from '@libp2p/interface';
+import { AbstractMessageStream, LengthPrefixedDecoder } from '@libp2p/utils';
+import { Uint8ArrayList } from 'uint8arraylist';
+import { concat as uint8ArrayConcat } from 'uint8arrays/concat';
+import { fromString as uint8ArrayFromString } from 'uint8arrays/from-string';
+import { CHACHA_TAG_LENGTH, NOISE_MSG_MAX_LENGTH_BYTES, NOISE_MSG_MAX_LENGTH_BYTES_WITHOUT_TAG } from "./constants.js";
+import { uint16BEEncode, uint16BEDecode } from "./encoder.js";
+import { NoiseHandshakePayload } from './proto/payload.js';
+export async function createHandshakePayload(privateKey, staticPublicKey, extensions) {
+    const identitySig = await privateKey.sign(getSignaturePayload(staticPublicKey));
+    return NoiseHandshakePayload.encode({
+        identityKey: publicKeyToProtobuf(privateKey.publicKey),
+        identitySig,
+        extensions
+    });
+}
+export async function decodeHandshakePayload(payloadBytes, remoteStaticKey, remoteIdentityKey) {
+    try {
+        const payload = NoiseHandshakePayload.decode(payloadBytes);
+        const publicKey = publicKeyFromProtobuf(payload.identityKey);
+        if (remoteIdentityKey?.equals(publicKey) === false) {
+            throw new Error(`Payload identity key ${publicKey} does not match expected remote identity key ${remoteIdentityKey}`);
+        }
+        if (!remoteStaticKey) {
+            throw new Error('Remote static does not exist');
+        }
+        const signaturePayload = getSignaturePayload(remoteStaticKey);
+        if (!(await publicKey.verify(signaturePayload, payload.identitySig))) {
+            throw new Error('Invalid payload signature');
+        }
+        return payload;
+    }
+    catch (e) {
+        throw new UnexpectedPeerError(e.message);
+    }
+}
+export function getSignaturePayload(publicKey) {
+    const prefix = uint8ArrayFromString('noise-libp2p-static-key:');
+    if (publicKey instanceof Uint8Array) {
+        return uint8ArrayConcat([prefix, publicKey], prefix.length + publicKey.length);
+    }
+    publicKey.prepend(prefix);
+    return publicKey;
+}
+class EncryptedMessageStream extends AbstractMessageStream {
+    stream;
+    handshake;
+    metrics;
+    decoder;
+    constructor(stream, handshake, metrics) {
+        super({
+            log: stream.log,
+            inactivityTimeout: stream.inactivityTimeout,
+            maxReadBufferLength: stream.maxReadBufferLength,
+            direction: stream.direction
+        });
+        this.stream = stream;
+        this.handshake = handshake;
+        this.metrics = metrics;
+        this.decoder = new LengthPrefixedDecoder({
+            lengthDecoder: uint16BEDecode,
+            maxBufferSize: 16 * 1024 * 1024,
+            encodingLength: () => 2
+        });
+        const noiseOnMessageDecrypt = (evt) => {
+            try {
+                for (const buf of this.decoder.decode(evt.data)) {
+                    this.onData(this.decrypt(buf));
+                }
+            }
+            catch (err) {
+                this.abort(err);
+            }
+        };
+        this.stream.addEventListener('message', noiseOnMessageDecrypt);
+        const noiseOnClose = (evt) => {
+            if (evt.error != null) {
+                if (evt.local === true) {
+                    this.abort(evt.error);
+                }
+                else {
+                    this.onRemoteReset();
+                }
+            }
+            else {
+                this.onTransportClosed();
+            }
+        };
+        this.stream.addEventListener('close', noiseOnClose);
+        const noiseOnDrain = () => {
+            this.safeDispatchEvent('drain');
+        };
+        this.stream.addEventListener('drain', noiseOnDrain);
+        const noiseOnRemoteCloseWrite = () => {
+            this.onRemoteCloseWrite();
+        };
+        this.stream.addEventListener('remoteCloseWrite', noiseOnRemoteCloseWrite);
+    }
+    encrypt(chunk) {
+        const output = new Uint8ArrayList();
+        for (let i = 0; i < chunk.byteLength; i += NOISE_MSG_MAX_LENGTH_BYTES_WITHOUT_TAG) {
+            let end = i + NOISE_MSG_MAX_LENGTH_BYTES_WITHOUT_TAG;
+            if (end > chunk.byteLength) {
+                end = chunk.byteLength;
+            }
+            let data;
+            if (chunk instanceof Uint8Array) {
+                data = this.handshake.encrypt(chunk.subarray(i, end));
+            }
+            else {
+                data = this.handshake.encrypt(chunk.sublist(i, end));
+            }
+            this.metrics?.encryptedPackets.increment();
+            output.append(uint16BEEncode(data.byteLength));
+            output.append(data);
+        }
+        return output;
+    }
+    decrypt(chunk) {
+        const output = new Uint8ArrayList();
+        for (let i = 0; i < chunk.byteLength; i += NOISE_MSG_MAX_LENGTH_BYTES) {
+            let end = i + NOISE_MSG_MAX_LENGTH_BYTES;
+            if (end > chunk.byteLength) {
+                end = chunk.byteLength;
+            }
+            if (end - CHACHA_TAG_LENGTH < i) {
+                throw new Error('Invalid chunk');
+            }
+            let encrypted;
+            if (chunk instanceof Uint8Array) {
+                encrypted = chunk.subarray(i, end);
+            }
+            else {
+                encrypted = chunk.sublist(i, end);
+            }
+            // memory allocation is not cheap so reuse the encrypted Uint8Array
+            // see https://github.com/ChainSafe/js-libp2p-noise/pull/242#issue-1422126164
+            // this is ok because chacha20 reads bytes one by one and don't reread after that
+            // it's also tested in https://github.com/ChainSafe/as-chacha20poly1305/pull/1/files#diff-25252846b58979dcaf4e41d47b3eadd7e4f335e7fb98da6c049b1f9cd011f381R48
+            const dst = chunk.subarray(i, end - CHACHA_TAG_LENGTH);
+            try {
+                const plaintext = this.handshake.decrypt(encrypted, dst);
+                this.metrics?.decryptedPackets.increment();
+                output.append(plaintext);
+            }
+            catch (e) {
+                this.metrics?.decryptErrors.increment();
+                throw e;
+            }
+        }
+        return output;
+    }
+    close(options) {
+        return this.stream.close(options);
+    }
+    sendPause() {
+        this.stream.pause();
+    }
+    sendResume() {
+        this.stream.resume();
+    }
+    sendReset(err) {
+        this.stream.abort(err);
+    }
+    sendData(data) {
+        return {
+            sentBytes: data.byteLength,
+            canSendMore: this.stream.send(this.encrypt(data))
+        };
+    }
+}
+export function toMessageStream(connection, handshake, metrics) {
+    return new EncryptedMessageStream(connection, handshake, metrics);
+}
+//# sourceMappingURL=utils.js.map

package/dist/src/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAChF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,MAAM,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,sCAAsC,EAAE,MAAM,gBAAgB,CAAA;AACtH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAO1D,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAsB,EACtB,eAA4C,EAC5C,UAA4B;IAE5B,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAA;IAE/E,OAAO,qBAAqB,CAAC,MAAM,CAAC;QAClC,WAAW,EAAE,mBAAmB,CAAC,UAAU,CAAC,SAAS,CAAC;QACtD,WAAW;QACX,UAAU;KACX,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAyC,EACzC,eAA6C,EAC7C,iBAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAC1D,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAE5D,IAAI,iBAAiB,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,wBAAwB,SAAS,gDAAgD,iBAAiB,EAAE,CAAC,CAAA;QACvH,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACjD,CAAC;QAED,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,eAAe,CAAC,CAAA;QAE7D,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAC9C,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,mBAAmB,CAAE,CAAW,CAAC,OAAO,CAAC,CAAA;IACrD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAE,SAAsC;IACzE,MAAM,MAAM,GAAG,oBAAoB,CAAC,0BAA0B,CAAC,CAAA;IAE/D,IAAI,SAAS,YAAY,UAAU,EAAE,CAAC;QACpC,OAAO,gBAAgB,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IAChF,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAEzB,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,sBAAuB,SAAQ,qBAAqB;IAChD,MAAM,CAAe;IACrB,SAAS,CAAiB;IAC1B,OAAO,CAAkB;IACzB,OAAO,CAAuB;IAEtC,YAAa,MAAqB,EAAE,SAA0B,EAAE,OAAyB;QACvF,KAAK,CAAC;YACJ,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAA;QAEF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,OAAO,GAAG,IAAI,qBAAqB,CAAC;YACvC,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;YAC/B,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;SACxB,CAAC,CAAA;QAEF,MAAM,qBAAqB,GAAG,CAAC,GAAuB,EAAQ,EAAE;YAC9D,IAAI,CAAC;gBACH,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;gBAChC,CAAC;YACH,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACjB,CAAC;QACH,CAAC,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAA;QAE9D,MAAM,YAAY,GAAG,CAAC,GAAqB,EAAQ,EAAE;YACnD,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;gBACtB,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBACvB,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,aAAa,EAAE,CAAA;gBACtB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,iBAAiB,EAAE,CAAA;YAC1B,CAAC;QACH,CAAC,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAEnD,MAAM,YAAY,GAAG,GAAS,EAAE;YAC9B,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAEnD,MAAM,uBAAuB,GAAG,GAAS,EAAE;YACzC,IAAI,CAAC,kBAAkB,EAAE,CAAA;QAC3B,CAAC,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAA;IAC3E,CAAC;IAED,OAAO,CAAE,KAAkC;QACzC,MAAM,MAAM,GAAG,IAAI,cAAc,EAAE,CAAA;QAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,sCAAsC,EAAE,CAAC;YAClF,IAAI,GAAG,GAAG,CAAC,GAAG,sCAAsC,CAAA;YACpD,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC3B,GAAG,GAAG,KAAK,CAAC,UAAU,CAAA;YACxB,CAAC;YAED,IAAI,IAAiC,CAAA;YAErC,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;gBAChC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;YACvD,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;YACtD,CAAC;YAED,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,SAAS,EAAE,CAAA;YAE1C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;YAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACrB,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,CAAE,KAAkC;QACzC,MAAM,MAAM,GAAG,IAAI,cAAc,EAAE,CAAA;QAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,0BAA0B,EAAE,CAAC;YACtE,IAAI,GAAG,GAAG,CAAC,GAAG,0BAA0B,CAAA;YACxC,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC3B,GAAG,GAAG,KAAK,CAAC,UAAU,CAAA;YACxB,CAAC;YAED,IAAI,GAAG,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;YAClC,CAAC;YAED,IAAI,SAAsC,CAAA;YAE1C,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;gBAChC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YACpC,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YACnC,CAAC;YAED,mEAAmE;YACnE,6EAA6E;YAC7E,iFAAiF;YACjF,6JAA6J;YAC7J,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,GAAG,iBAAiB,CAAC,CAAA;YACtD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;gBACxD,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,SAAS,EAAE,CAAA;gBAE1C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC1B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,SAAS,EAAE,CAAA;gBACvC,MAAM,CAAC,CAAA;YACT,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAE,OAAsB;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC;IAED,SAAS;QACP,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACrB,CAAC;IAED,UAAU;QACR,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;IACtB,CAAC;IAED,SAAS,CAAE,GAAU;QACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAED,QAAQ,CAAE,IAAoB;QAC5B,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SAClD,CAAA;IACH,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAE,UAAyB,EAAE,SAA0B,EAAE,OAAyB;IAC/G,OAAO,IAAI,sBAAsB,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;AACnE,CAAC"}