@libp2p/noise 12.0.1

package/dist/src/@types/basic.d.ts

@@ -0,0 +1,5 @@
+export type bytes = Uint8Array;
+export type bytes32 = Uint8Array;
+export type bytes16 = Uint8Array;
+export type uint64 = number;
+//# sourceMappingURL=basic.d.ts.map

package/dist/src/@types/basic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.d.ts","sourceRoot":"","sources":["../../../src/@types/basic.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,KAAK,GAAG,UAAU,CAAA;AAC9B,MAAM,MAAM,OAAO,GAAG,UAAU,CAAA;AAChC,MAAM,MAAM,OAAO,GAAG,UAAU,CAAA;AAEhC,MAAM,MAAM,MAAM,GAAG,MAAM,CAAA"}

package/dist/src/@types/basic.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=basic.js.map

package/dist/src/@types/basic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.js","sourceRoot":"","sources":["../../../src/@types/basic.ts"],"names":[],"mappings":""}

package/dist/src/@types/handshake-interface.d.ts

@@ -0,0 +1,15 @@
+import type { bytes } from './basic.js';
+import type { NoiseSession } from './handshake.js';
+import type { NoiseExtensions } from '../proto/payload.js';
+import type { PeerId } from '@libp2p/interface/peer-id';
+export interface IHandshake {
+    session: NoiseSession;
+    remotePeer: PeerId;
+    remoteExtensions: NoiseExtensions;
+    encrypt: (plaintext: bytes, session: NoiseSession) => bytes;
+    decrypt: (ciphertext: bytes, session: NoiseSession, dst?: Uint8Array) => {
+        plaintext: bytes;
+        valid: boolean;
+    };
+}
+//# sourceMappingURL=handshake-interface.d.ts.map

package/dist/src/@types/handshake-interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake-interface.d.ts","sourceRoot":"","sources":["../../../src/@types/handshake-interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAEvD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,eAAe,CAAA;IACjC,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,KAAK,KAAK,CAAA;IAC3D,OAAO,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,UAAU,KAAK;QAAE,SAAS,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAA;CAC9G"}

package/dist/src/@types/handshake-interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=handshake-interface.js.map

package/dist/src/@types/handshake-interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake-interface.js","sourceRoot":"","sources":["../../../src/@types/handshake-interface.ts"],"names":[],"mappings":""}

package/dist/src/@types/handshake.d.ts

@@ -0,0 +1,40 @@
+import type { bytes, bytes32, uint64 } from './basic.js';
+import type { KeyPair } from './libp2p.js';
+import type { Nonce } from '../nonce.js';
+export type Hkdf = [bytes, bytes, bytes];
+export interface MessageBuffer {
+    ne: bytes32;
+    ns: bytes;
+    ciphertext: bytes;
+}
+export interface CipherState {
+    k: bytes32;
+    n: Nonce;
+}
+export interface SymmetricState {
+    cs: CipherState;
+    ck: bytes32;
+    h: bytes32;
+}
+export interface HandshakeState {
+    ss: SymmetricState;
+    s: KeyPair;
+    e?: KeyPair;
+    rs: bytes32;
+    re: bytes32;
+    psk: bytes32;
+}
+export interface NoiseSession {
+    hs: HandshakeState;
+    h?: bytes32;
+    cs1?: CipherState;
+    cs2?: CipherState;
+    mc: uint64;
+    i: boolean;
+}
+export interface INoisePayload {
+    identityKey: bytes;
+    identitySig: bytes;
+    data: bytes;
+}
+//# sourceMappingURL=handshake.d.ts.map

package/dist/src/@types/handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../../../src/@types/handshake.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAExC,MAAM,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;AAExC,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAA;IACX,EAAE,EAAE,KAAK,CAAA;IACT,UAAU,EAAE,KAAK,CAAA;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,CAAC,EAAE,OAAO,CAAA;IAGV,CAAC,EAAE,KAAK,CAAA;CACT;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,WAAW,CAAA;IACf,EAAE,EAAE,OAAO,CAAA;IACX,CAAC,EAAE,OAAO,CAAA;CACX;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,cAAc,CAAA;IAClB,CAAC,EAAE,OAAO,CAAA;IACV,CAAC,CAAC,EAAE,OAAO,CAAA;IACX,EAAE,EAAE,OAAO,CAAA;IACX,EAAE,EAAE,OAAO,CAAA;IACX,GAAG,EAAE,OAAO,CAAA;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,cAAc,CAAA;IAClB,CAAC,CAAC,EAAE,OAAO,CAAA;IACX,GAAG,CAAC,EAAE,WAAW,CAAA;IACjB,GAAG,CAAC,EAAE,WAAW,CAAA;IACjB,EAAE,EAAE,MAAM,CAAA;IACV,CAAC,EAAE,OAAO,CAAA;CACX;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,KAAK,CAAA;IAClB,WAAW,EAAE,KAAK,CAAA;IAClB,IAAI,EAAE,KAAK,CAAA;CACZ"}

package/dist/src/@types/handshake.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=handshake.js.map

package/dist/src/@types/handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../../../src/@types/handshake.ts"],"names":[],"mappings":""}

package/dist/src/@types/libp2p.d.ts

@@ -0,0 +1,10 @@
+import type { bytes32 } from './basic.js';
+import type { NoiseExtensions } from '../proto/payload.js';
+import type { ConnectionEncrypter } from '@libp2p/interface/connection-encrypter';
+export interface KeyPair {
+    publicKey: bytes32;
+    privateKey: bytes32;
+}
+export interface INoiseConnection extends ConnectionEncrypter<NoiseExtensions> {
+}
+//# sourceMappingURL=libp2p.d.ts.map

package/dist/src/@types/libp2p.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"libp2p.d.ts","sourceRoot":"","sources":["../../../src/@types/libp2p.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAA;AAEjF,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB,CAAC,eAAe,CAAC;CAAG"}

package/dist/src/@types/libp2p.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=libp2p.js.map

package/dist/src/@types/libp2p.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"libp2p.js","sourceRoot":"","sources":["../../../src/@types/libp2p.ts"],"names":[],"mappings":""}

package/dist/src/constants.d.ts

@@ -0,0 +1,4 @@
+export declare const NOISE_MSG_MAX_LENGTH_BYTES = 65535;
+export declare const NOISE_MSG_MAX_LENGTH_BYTES_WITHOUT_TAG: number;
+export declare const DUMP_SESSION_KEYS: boolean;
+//# sourceMappingURL=constants.d.ts.map

package/dist/src/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,0BAA0B,QAAQ,CAAA;AAC/C,eAAO,MAAM,sCAAsC,QAAkC,CAAA;AAErF,eAAO,MAAM,iBAAiB,SAAsD,CAAA"}

package/dist/src/constants.js

@@ -0,0 +1,4 @@
+export const NOISE_MSG_MAX_LENGTH_BYTES = 65535;
+export const NOISE_MSG_MAX_LENGTH_BYTES_WITHOUT_TAG = NOISE_MSG_MAX_LENGTH_BYTES - 16;
+export const DUMP_SESSION_KEYS = Boolean(globalThis.process?.env?.DUMP_SESSION_KEYS);
+//# sourceMappingURL=constants.js.map

package/dist/src/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAA;AAC/C,MAAM,CAAC,MAAM,sCAAsC,GAAG,0BAA0B,GAAG,EAAE,CAAA;AAErF,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAA"}

package/dist/src/crypto/js.d.ts

@@ -0,0 +1,3 @@
+import type { ICryptoInterface } from '../crypto.js';
+export declare const pureJsCrypto: ICryptoInterface;
+//# sourceMappingURL=js.d.ts.map

package/dist/src/crypto/js.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"js.d.ts","sourceRoot":"","sources":["../../../src/crypto/js.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAEpD,eAAO,MAAM,YAAY,EAAE,gBAgD1B,CAAA"}

package/dist/src/crypto/js.js

@@ -0,0 +1,42 @@
+import { hkdf } from '@noble/hashes/hkdf';
+import { sha256 } from '@noble/hashes/sha256';
+import { ChaCha20Poly1305 } from '@stablelib/chacha20poly1305';
+import * as x25519 from '@stablelib/x25519';
+export const pureJsCrypto = {
+    hashSHA256(data) {
+        return sha256(data);
+    },
+    getHKDF(ck, ikm) {
+        const okm = hkdf(sha256, ikm, ck, undefined, 96);
+        const k1 = okm.subarray(0, 32);
+        const k2 = okm.subarray(32, 64);
+        const k3 = okm.subarray(64, 96);
+        return [k1, k2, k3];
+    },
+    generateX25519KeyPair() {
+        const keypair = x25519.generateKeyPair();
+        return {
+            publicKey: keypair.publicKey,
+            privateKey: keypair.secretKey
+        };
+    },
+    generateX25519KeyPairFromSeed(seed) {
+        const keypair = x25519.generateKeyPairFromSeed(seed);
+        return {
+            publicKey: keypair.publicKey,
+            privateKey: keypair.secretKey
+        };
+    },
+    generateX25519SharedKey(privateKey, publicKey) {
+        return x25519.sharedKey(privateKey, publicKey);
+    },
+    chaCha20Poly1305Encrypt(plaintext, nonce, ad, k) {
+        const ctx = new ChaCha20Poly1305(k);
+        return ctx.seal(nonce, plaintext, ad);
+    },
+    chaCha20Poly1305Decrypt(ciphertext, nonce, ad, k, dst) {
+        const ctx = new ChaCha20Poly1305(k);
+        return ctx.open(nonce, ciphertext, ad, dst);
+    }
+};
+//# sourceMappingURL=js.js.map

package/dist/src/crypto/js.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"js.js","sourceRoot":"","sources":["../../../src/crypto/js.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAM3C,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,UAAU,CAAE,IAAgB;QAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC;IAED,OAAO,CAAE,EAAW,EAAE,GAAe;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;QAEhD,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9B,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAE/B,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IACrB,CAAC;IAED,qBAAqB;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,EAAE,CAAA;QAExC,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,SAAS;SAC9B,CAAA;IACH,CAAC;IAED,6BAA6B,CAAE,IAAgB;QAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAEpD,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,SAAS;SAC9B,CAAA;IACH,CAAC;IAED,uBAAuB,CAAE,UAAsB,EAAE,SAAqB;QACpE,OAAO,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IAChD,CAAC;IAED,uBAAuB,CAAE,SAAqB,EAAE,KAAiB,EAAE,EAAc,EAAE,CAAU;QAC3F,MAAM,GAAG,GAAG,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAA;QAEnC,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,uBAAuB,CAAE,UAAsB,EAAE,KAAiB,EAAE,EAAc,EAAE,CAAU,EAAE,GAAgB;QAC9G,MAAM,GAAG,GAAG,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAA;QAEnC,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;IAC7C,CAAC;CACF,CAAA"}

package/dist/src/crypto/streaming.d.ts

@@ -0,0 +1,7 @@
+import type { IHandshake } from '../@types/handshake-interface.js';
+import type { MetricsRegistry } from '../metrics.js';
+import type { Transform } from 'it-stream-types';
+import type { Uint8ArrayList } from 'uint8arraylist';
+export declare function encryptStream(handshake: IHandshake, metrics?: MetricsRegistry): Transform<AsyncIterable<Uint8Array>>;
+export declare function decryptStream(handshake: IHandshake, metrics?: MetricsRegistry): Transform<AsyncIterable<Uint8ArrayList>, AsyncIterable<Uint8Array>>;
+//# sourceMappingURL=streaming.d.ts.map

package/dist/src/crypto/streaming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.d.ts","sourceRoot":"","sources":["../../../src/crypto/streaming.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAA;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAGpD,wBAAgB,aAAa,CAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAiBrH;AAGD,wBAAgB,aAAa,CAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC,CA4BpJ"}

package/dist/src/crypto/streaming.js

@@ -0,0 +1,50 @@
+import { TAG_LENGTH } from '@stablelib/chacha20poly1305';
+import { NOISE_MSG_MAX_LENGTH_BYTES, NOISE_MSG_MAX_LENGTH_BYTES_WITHOUT_TAG } from '../constants.js';
+import { uint16BEEncode } from '../encoder.js';
+// Returns generator that encrypts payload from the user
+export function encryptStream(handshake, metrics) {
+    return async function* (source) {
+        for await (const chunk of source) {
+            for (let i = 0; i < chunk.length; i += NOISE_MSG_MAX_LENGTH_BYTES_WITHOUT_TAG) {
+                let end = i + NOISE_MSG_MAX_LENGTH_BYTES_WITHOUT_TAG;
+                if (end > chunk.length) {
+                    end = chunk.length;
+                }
+                const data = handshake.encrypt(chunk.subarray(i, end), handshake.session);
+                metrics?.encryptedPackets.increment();
+                yield uint16BEEncode(data.byteLength);
+                yield data;
+            }
+        }
+    };
+}
+// Decrypt received payload to the user
+export function decryptStream(handshake, metrics) {
+    return async function* (source) {
+        for await (const chunk of source) {
+            for (let i = 0; i < chunk.length; i += NOISE_MSG_MAX_LENGTH_BYTES) {
+                let end = i + NOISE_MSG_MAX_LENGTH_BYTES;
+                if (end > chunk.length) {
+                    end = chunk.length;
+                }
+                if (end - TAG_LENGTH < i) {
+                    throw new Error('Invalid chunk');
+                }
+                const encrypted = chunk.subarray(i, end);
+                // memory allocation is not cheap so reuse the encrypted Uint8Array
+                // see https://github.com/ChainSafe/js-libp2p-noise/pull/242#issue-1422126164
+                // this is ok because chacha20 reads bytes one by one and don't reread after that
+                // it's also tested in https://github.com/ChainSafe/as-chacha20poly1305/pull/1/files#diff-25252846b58979dcaf4e41d47b3eadd7e4f335e7fb98da6c049b1f9cd011f381R48
+                const dst = chunk.subarray(i, end - TAG_LENGTH);
+                const { plaintext: decrypted, valid } = handshake.decrypt(encrypted, handshake.session, dst);
+                if (!valid) {
+                    metrics?.decryptErrors.increment();
+                    throw new Error('Failed to validate decrypted chunk');
+                }
+                metrics?.decryptedPackets.increment();
+                yield decrypted;
+            }
+        }
+    };
+}
+//# sourceMappingURL=streaming.js.map

package/dist/src/crypto/streaming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.js","sourceRoot":"","sources":["../../../src/crypto/streaming.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,0BAA0B,EAAE,sCAAsC,EAAE,MAAM,iBAAiB,CAAA;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAM9C,wDAAwD;AACxD,MAAM,UAAU,aAAa,CAAE,SAAqB,EAAE,OAAyB;IAC7E,OAAO,KAAK,SAAU,CAAC,EAAE,MAAM;QAC7B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE;YAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,sCAAsC,EAAE;gBAC7E,IAAI,GAAG,GAAG,CAAC,GAAG,sCAAsC,CAAA;gBACpD,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE;oBACtB,GAAG,GAAG,KAAK,CAAC,MAAM,CAAA;iBACnB;gBAED,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;gBACzE,OAAO,EAAE,gBAAgB,CAAC,SAAS,EAAE,CAAA;gBAErC,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;gBACrC,MAAM,IAAI,CAAA;aACX;SACF;IACH,CAAC,CAAA;AACH,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,aAAa,CAAE,SAAqB,EAAE,OAAyB;IAC7E,OAAO,KAAK,SAAU,CAAC,EAAE,MAAM;QAC7B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE;YAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,0BAA0B,EAAE;gBACjE,IAAI,GAAG,GAAG,CAAC,GAAG,0BAA0B,CAAA;gBACxC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE;oBACtB,GAAG,GAAG,KAAK,CAAC,MAAM,CAAA;iBACnB;gBAED,IAAI,GAAG,GAAG,UAAU,GAAG,CAAC,EAAE;oBACxB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;iBACjC;gBACD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;gBACxC,mEAAmE;gBACnE,6EAA6E;gBAC7E,iFAAiF;gBACjF,6JAA6J;gBAC7J,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,CAAA;gBAC/C,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;gBAC5F,IAAI,CAAC,KAAK,EAAE;oBACV,OAAO,EAAE,aAAa,CAAC,SAAS,EAAE,CAAA;oBAClC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;iBACtD;gBACD,OAAO,EAAE,gBAAgB,CAAC,SAAS,EAAE,CAAA;gBACrC,MAAM,SAAS,CAAA;aAChB;SACF;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/src/crypto.d.ts

@@ -0,0 +1,13 @@
+import type { bytes32, bytes } from './@types/basic.js';
+import type { Hkdf } from './@types/handshake.js';
+import type { KeyPair } from './@types/libp2p.js';
+export interface ICryptoInterface {
+    hashSHA256: (data: Uint8Array) => Uint8Array;
+    getHKDF: (ck: bytes32, ikm: Uint8Array) => Hkdf;
+    generateX25519KeyPair: () => KeyPair;
+    generateX25519KeyPairFromSeed: (seed: Uint8Array) => KeyPair;
+    generateX25519SharedKey: (privateKey: Uint8Array, publicKey: Uint8Array) => Uint8Array;
+    chaCha20Poly1305Encrypt: (plaintext: Uint8Array, nonce: Uint8Array, ad: Uint8Array, k: bytes32) => bytes;
+    chaCha20Poly1305Decrypt: (ciphertext: Uint8Array, nonce: Uint8Array, ad: Uint8Array, k: bytes32, dst?: Uint8Array) => bytes | null;
+}
+//# sourceMappingURL=crypto.d.ts.map

package/dist/src/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAEjD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,UAAU,CAAA;IAE5C,OAAO,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,KAAK,IAAI,CAAA;IAE/C,qBAAqB,EAAE,MAAM,OAAO,CAAA;IACpC,6BAA6B,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAA;IAC5D,uBAAuB,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,KAAK,UAAU,CAAA;IAEtF,uBAAuB,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,CAAA;IACxG,uBAAuB,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,UAAU,KAAK,KAAK,GAAG,IAAI,CAAA;CACnI"}

package/dist/src/crypto.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=crypto.js.map

package/dist/src/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/crypto.ts"],"names":[],"mappings":""}

package/dist/src/encoder.d.ts

@@ -0,0 +1,15 @@
+import type { bytes } from './@types/basic.js';
+import type { MessageBuffer } from './@types/handshake.js';
+import type { LengthDecoderFunction } from 'it-length-prefixed';
+export declare const uint16BEEncode: {
+    (value: number): Uint8Array;
+    bytes: number;
+};
+export declare const uint16BEDecode: LengthDecoderFunction;
+export declare function encode0(message: MessageBuffer): bytes;
+export declare function encode1(message: MessageBuffer): bytes;
+export declare function encode2(message: MessageBuffer): bytes;
+export declare function decode0(input: bytes): MessageBuffer;
+export declare function decode1(input: bytes): MessageBuffer;
+export declare function decode2(input: bytes): MessageBuffer;
+//# sourceMappingURL=encoder.d.ts.map

package/dist/src/encoder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoder.d.ts","sourceRoot":"","sources":["../../src/encoder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAW/D,eAAO,MAAM,cAAc;YAAW,MAAM,GAAG,UAAU;;CAIxD,CAAA;AAGD,eAAO,MAAM,cAAc,EAAE,qBAQ5B,CAAA;AAKD,wBAAgB,OAAO,CAAE,OAAO,EAAE,aAAa,GAAG,KAAK,CAEtD;AAED,wBAAgB,OAAO,CAAE,OAAO,EAAE,aAAa,GAAG,KAAK,CAEtD;AAED,wBAAgB,OAAO,CAAE,OAAO,EAAE,aAAa,GAAG,KAAK,CAEtD;AAED,wBAAgB,OAAO,CAAE,KAAK,EAAE,KAAK,GAAG,aAAa,CAUpD;AAED,wBAAgB,OAAO,CAAE,KAAK,EAAE,KAAK,GAAG,aAAa,CAUpD;AAED,wBAAgB,OAAO,CAAE,KAAK,EAAE,KAAK,GAAG,aAAa,CAUpD"}

package/dist/src/encoder.js

@@ -0,0 +1,63 @@
+import { concat as uint8ArrayConcat } from 'uint8arrays/concat';
+const allocUnsafe = (len) => {
+    if (globalThis.Buffer) {
+        return globalThis.Buffer.allocUnsafe(len);
+    }
+    return new Uint8Array(len);
+};
+export const uint16BEEncode = (value) => {
+    const target = allocUnsafe(2);
+    new DataView(target.buffer, target.byteOffset, target.byteLength).setUint16(0, value, false);
+    return target;
+};
+uint16BEEncode.bytes = 2;
+export const uint16BEDecode = (data) => {
+    if (data.length < 2)
+        throw RangeError('Could not decode int16BE');
+    if (data instanceof Uint8Array) {
+        return new DataView(data.buffer, data.byteOffset, data.byteLength).getUint16(0, false);
+    }
+    return data.getUint16(0);
+};
+uint16BEDecode.bytes = 2;
+// Note: IK and XX encoder usage is opposite (XX uses in stages encode0 where IK uses encode1)
+export function encode0(message) {
+    return uint8ArrayConcat([message.ne, message.ciphertext], message.ne.length + message.ciphertext.length);
+}
+export function encode1(message) {
+    return uint8ArrayConcat([message.ne, message.ns, message.ciphertext], message.ne.length + message.ns.length + message.ciphertext.length);
+}
+export function encode2(message) {
+    return uint8ArrayConcat([message.ns, message.ciphertext], message.ns.length + message.ciphertext.length);
+}
+export function decode0(input) {
+    if (input.length < 32) {
+        throw new Error('Cannot decode stage 0 MessageBuffer: length less than 32 bytes.');
+    }
+    return {
+        ne: input.subarray(0, 32),
+        ciphertext: input.subarray(32, input.length),
+        ns: new Uint8Array(0)
+    };
+}
+export function decode1(input) {
+    if (input.length < 80) {
+        throw new Error('Cannot decode stage 1 MessageBuffer: length less than 80 bytes.');
+    }
+    return {
+        ne: input.subarray(0, 32),
+        ns: input.subarray(32, 80),
+        ciphertext: input.subarray(80, input.length)
+    };
+}
+export function decode2(input) {
+    if (input.length < 48) {
+        throw new Error('Cannot decode stage 2 MessageBuffer: length less than 48 bytes.');
+    }
+    return {
+        ne: new Uint8Array(0),
+        ns: input.subarray(0, 48),
+        ciphertext: input.subarray(48, input.length)
+    };
+}
+//# sourceMappingURL=encoder.js.map

package/dist/src/encoder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoder.js","sourceRoot":"","sources":["../../src/encoder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAM/D,MAAM,WAAW,GAAG,CAAC,GAAW,EAAc,EAAE;IAC9C,IAAI,UAAU,CAAC,MAAM,EAAE;QACrB,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;KAC1C;IAED,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;AAC5B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAa,EAAc,EAAE;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;IAC7B,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;IAC5F,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AACD,cAAc,CAAC,KAAK,GAAG,CAAC,CAAA;AAExB,MAAM,CAAC,MAAM,cAAc,GAA0B,CAAC,IAAiC,EAAU,EAAE;IACjG,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,UAAU,CAAC,0BAA0B,CAAC,CAAA;IAEjE,IAAI,IAAI,YAAY,UAAU,EAAE;QAC9B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;KACvF;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AAC1B,CAAC,CAAA;AACD,cAAc,CAAC,KAAK,GAAG,CAAC,CAAA;AAExB,8FAA8F;AAE9F,MAAM,UAAU,OAAO,CAAE,OAAsB;IAC7C,OAAO,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1G,CAAC;AAED,MAAM,UAAU,OAAO,CAAE,OAAsB;IAC7C,OAAO,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1I,CAAC;AAED,MAAM,UAAU,OAAO,CAAE,OAAsB;IAC7C,OAAO,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1G,CAAC;AAED,MAAM,UAAU,OAAO,CAAE,KAAY;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE;QACrB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;KACnF;IAED,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACzB,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;QAC5C,EAAE,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;KACtB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAE,KAAY;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE;QACrB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;KACnF;IAED,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACzB,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;KAC7C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAE,KAAY;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE;QACrB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;KACnF;IAED,OAAO;QACL,EAAE,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;QACrB,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACzB,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;KAC7C,CAAA;AACH,CAAC"}

package/dist/src/handshake-xx.d.ts

@@ -0,0 +1,33 @@
+import { XX } from './handshakes/xx.js';
+import type { bytes, bytes32 } from './@types/basic.js';
+import type { IHandshake } from './@types/handshake-interface.js';
+import type { NoiseSession } from './@types/handshake.js';
+import type { KeyPair } from './@types/libp2p.js';
+import type { ICryptoInterface } from './crypto.js';
+import type { NoiseExtensions } from './proto/payload.js';
+import type { PeerId } from '@libp2p/interface/peer-id';
+import type { LengthPrefixedStream } from 'it-length-prefixed-stream';
+export declare class XXHandshake implements IHandshake {
+    isInitiator: boolean;
+    session: NoiseSession;
+    remotePeer: PeerId;
+    remoteExtensions: NoiseExtensions;
+    protected payload: bytes;
+    protected connection: LengthPrefixedStream;
+    protected xx: XX;
+    protected staticKeypair: KeyPair;
+    private readonly prologue;
+    constructor(isInitiator: boolean, payload: bytes, prologue: bytes32, crypto: ICryptoInterface, staticKeypair: KeyPair, connection: LengthPrefixedStream, remotePeer?: PeerId, handshake?: XX);
+    propose(): Promise<void>;
+    exchange(): Promise<void>;
+    finish(): Promise<void>;
+    encrypt(plaintext: Uint8Array, session: NoiseSession): bytes;
+    decrypt(ciphertext: Uint8Array, session: NoiseSession, dst?: Uint8Array): {
+        plaintext: bytes;
+        valid: boolean;
+    };
+    getRemoteStaticKey(): bytes;
+    private getCS;
+    protected setRemoteNoiseExtension(e: NoiseExtensions | null | undefined): void;
+}
+//# sourceMappingURL=handshake-xx.d.ts.map

package/dist/src/handshake-xx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake-xx.d.ts","sourceRoot":"","sources":["../../src/handshake-xx.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AAcvC,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAErE,qBAAa,WAAY,YAAW,UAAU;IACrC,WAAW,EAAE,OAAO,CAAA;IACpB,OAAO,EAAE,YAAY,CAAA;IACrB,UAAU,EAAG,MAAM,CAAA;IACnB,gBAAgB,EAAE,eAAe,CAAiC;IAEzE,SAAS,CAAC,OAAO,EAAE,KAAK,CAAA;IACxB,SAAS,CAAC,UAAU,EAAE,oBAAoB,CAAA;IAC1C,SAAS,CAAC,EAAE,EAAE,EAAE,CAAA;IAChB,SAAS,CAAC,aAAa,EAAE,OAAO,CAAA;IAEhC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAGhC,WAAW,EAAE,OAAO,EACpB,OAAO,EAAE,KAAK,EACd,QAAQ,EAAE,OAAO,EACjB,MAAM,EAAE,gBAAgB,EACxB,aAAa,EAAE,OAAO,EACtB,UAAU,EAAE,oBAAoB,EAChC,UAAU,CAAC,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,EAAE;IAeH,OAAO,IAAK,OAAO,CAAC,IAAI,CAAC;IAqBzB,QAAQ,IAAK,OAAO,CAAC,IAAI,CAAC;IAiC1B,MAAM,IAAK,OAAO,CAAC,IAAI,CAAC;IA4B9B,OAAO,CAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,GAAG,KAAK;IAM7D,OAAO,CAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG;QAAE,SAAS,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE;IAM/G,kBAAkB,IAAK,KAAK;IAInC,OAAO,CAAC,KAAK;IAYb,SAAS,CAAC,uBAAuB,CAAE,CAAC,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;CAKhF"}

package/dist/src/handshake-xx.js

@@ -0,0 +1,139 @@
+import { InvalidCryptoExchangeError, UnexpectedPeerError } from '@libp2p/interface/errors';
+import { decode0, decode1, decode2, encode0, encode1, encode2 } from './encoder.js';
+import { XX } from './handshakes/xx.js';
+import { logger, logLocalStaticKeys, logLocalEphemeralKeys, logRemoteEphemeralKey, logRemoteStaticKey, logCipherState } from './logger.js';
+import { decodePayload, getPeerIdFromPayload, verifySignedPayload } from './utils.js';
+export class XXHandshake {
+    isInitiator;
+    session;
+    remotePeer;
+    remoteExtensions = { webtransportCerthashes: [] };
+    payload;
+    connection;
+    xx;
+    staticKeypair;
+    prologue;
+    constructor(isInitiator, payload, prologue, crypto, staticKeypair, connection, remotePeer, handshake) {
+        this.isInitiator = isInitiator;
+        this.payload = payload;
+        this.prologue = prologue;
+        this.staticKeypair = staticKeypair;
+        this.connection = connection;
+        if (remotePeer) {
+            this.remotePeer = remotePeer;
+        }
+        this.xx = handshake ?? new XX(crypto);
+        this.session = this.xx.initSession(this.isInitiator, this.prologue, this.staticKeypair);
+    }
+    // stage 0
+    async propose() {
+        logLocalStaticKeys(this.session.hs.s);
+        if (this.isInitiator) {
+            logger.trace('Stage 0 - Initiator starting to send first message.');
+            const messageBuffer = this.xx.sendMessage(this.session, new Uint8Array(0));
+            await this.connection.write(encode0(messageBuffer));
+            logger.trace('Stage 0 - Initiator finished sending first message.');
+            logLocalEphemeralKeys(this.session.hs.e);
+        }
+        else {
+            logger.trace('Stage 0 - Responder waiting to receive first message...');
+            const receivedMessageBuffer = decode0((await this.connection.read()).subarray());
+            const { valid } = this.xx.recvMessage(this.session, receivedMessageBuffer);
+            if (!valid) {
+                throw new InvalidCryptoExchangeError('xx handshake stage 0 validation fail');
+            }
+            logger.trace('Stage 0 - Responder received first message.');
+            logRemoteEphemeralKey(this.session.hs.re);
+        }
+    }
+    // stage 1
+    async exchange() {
+        if (this.isInitiator) {
+            logger.trace('Stage 1 - Initiator waiting to receive first message from responder...');
+            const receivedMessageBuffer = decode1((await this.connection.read()).subarray());
+            const { plaintext, valid } = this.xx.recvMessage(this.session, receivedMessageBuffer);
+            if (!valid) {
+                throw new InvalidCryptoExchangeError('xx handshake stage 1 validation fail');
+            }
+            logger.trace('Stage 1 - Initiator received the message.');
+            logRemoteEphemeralKey(this.session.hs.re);
+            logRemoteStaticKey(this.session.hs.rs);
+            logger.trace("Initiator going to check remote's signature...");
+            try {
+                const decodedPayload = decodePayload(plaintext);
+                this.remotePeer = this.remotePeer || await getPeerIdFromPayload(decodedPayload);
+                await verifySignedPayload(this.session.hs.rs, decodedPayload, this.remotePeer);
+                this.setRemoteNoiseExtension(decodedPayload.extensions);
+            }
+            catch (e) {
+                const err = e;
+                throw new UnexpectedPeerError(`Error occurred while verifying signed payload: ${err.message}`);
+            }
+            logger.trace('All good with the signature!');
+        }
+        else {
+            logger.trace('Stage 1 - Responder sending out first message with signed payload and static key.');
+            const messageBuffer = this.xx.sendMessage(this.session, this.payload);
+            await this.connection.write(encode1(messageBuffer));
+            logger.trace('Stage 1 - Responder sent the second handshake message with signed payload.');
+            logLocalEphemeralKeys(this.session.hs.e);
+        }
+    }
+    // stage 2
+    async finish() {
+        if (this.isInitiator) {
+            logger.trace('Stage 2 - Initiator sending third handshake message.');
+            const messageBuffer = this.xx.sendMessage(this.session, this.payload);
+            await this.connection.write(encode2(messageBuffer));
+            logger.trace('Stage 2 - Initiator sent message with signed payload.');
+        }
+        else {
+            logger.trace('Stage 2 - Responder waiting for third handshake message...');
+            const receivedMessageBuffer = decode2((await this.connection.read()).subarray());
+            const { plaintext, valid } = this.xx.recvMessage(this.session, receivedMessageBuffer);
+            if (!valid) {
+                throw new InvalidCryptoExchangeError('xx handshake stage 2 validation fail');
+            }
+            logger.trace('Stage 2 - Responder received the message, finished handshake.');
+            try {
+                const decodedPayload = decodePayload(plaintext);
+                this.remotePeer = this.remotePeer || await getPeerIdFromPayload(decodedPayload);
+                await verifySignedPayload(this.session.hs.rs, decodedPayload, this.remotePeer);
+                this.setRemoteNoiseExtension(decodedPayload.extensions);
+            }
+            catch (e) {
+                const err = e;
+                throw new UnexpectedPeerError(`Error occurred while verifying signed payload: ${err.message}`);
+            }
+        }
+        logCipherState(this.session);
+    }
+    encrypt(plaintext, session) {
+        const cs = this.getCS(session);
+        return this.xx.encryptWithAd(cs, new Uint8Array(0), plaintext);
+    }
+    decrypt(ciphertext, session, dst) {
+        const cs = this.getCS(session, false);
+        return this.xx.decryptWithAd(cs, new Uint8Array(0), ciphertext, dst);
+    }
+    getRemoteStaticKey() {
+        return this.session.hs.rs;
+    }
+    getCS(session, encryption = true) {
+        if (!session.cs1 || !session.cs2) {
+            throw new InvalidCryptoExchangeError('Handshake not completed properly, cipher state does not exist.');
+        }
+        if (this.isInitiator) {
+            return encryption ? session.cs1 : session.cs2;
+        }
+        else {
+            return encryption ? session.cs2 : session.cs1;
+        }
+    }
+    setRemoteNoiseExtension(e) {
+        if (e) {
+            this.remoteExtensions = e;
+        }
+    }
+}
+//# sourceMappingURL=handshake-xx.js.map

package/dist/src/handshake-xx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake-xx.js","sourceRoot":"","sources":["../../src/handshake-xx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC1F,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACnF,OAAO,EAAE,EAAE,EAAE,MAAM,oBAAoB,CAAA;AACvC,OAAO,EACL,MAAM,EACN,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACf,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,YAAY,CAAA;AAUnB,MAAM,OAAO,WAAW;IACf,WAAW,CAAS;IACpB,OAAO,CAAc;IACrB,UAAU,CAAS;IACnB,gBAAgB,GAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAA;IAE/D,OAAO,CAAO;IACd,UAAU,CAAsB;IAChC,EAAE,CAAI;IACN,aAAa,CAAS;IAEf,QAAQ,CAAS;IAElC,YACE,WAAoB,EACpB,OAAc,EACd,QAAiB,EACjB,MAAwB,EACxB,aAAsB,EACtB,UAAgC,EAChC,UAAmB,EACnB,SAAc;QAEd,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;QAClC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,UAAU,EAAE;YACd,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;SAC7B;QACD,IAAI,CAAC,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;IACzF,CAAC;IAED,UAAU;IACH,KAAK,CAAC,OAAO;QAClB,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACrC,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACnE,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1E,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAA;YACnD,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;YACnE,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;SACzC;aAAM;YACL,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAA;YACvE,MAAM,qBAAqB,GAAG,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;YAChF,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAA;YAC1E,IAAI,CAAC,KAAK,EAAE;gBACV,MAAM,IAAI,0BAA0B,CAAC,sCAAsC,CAAC,CAAA;aAC7E;YACD,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAA;YAC3D,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;SAC1C;IACH,CAAC;IAED,UAAU;IACH,KAAK,CAAC,QAAQ;QACnB,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAA;YACtF,MAAM,qBAAqB,GAAG,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;YAChF,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAA;YACrF,IAAI,CAAC,KAAK,EAAE;gBACV,MAAM,IAAI,0BAA0B,CAAC,sCAAsC,CAAC,CAAA;aAC7E;YACD,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAA;YACzD,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YACzC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAEtC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAA;YAC9D,IAAI;gBACF,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;gBAC/C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,oBAAoB,CAAC,cAAc,CAAC,CAAA;gBAC/E,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;gBAC9E,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;aACxD;YAAC,OAAO,CAAC,EAAE;gBACV,MAAM,GAAG,GAAG,CAAU,CAAA;gBACtB,MAAM,IAAI,mBAAmB,CAAC,kDAAkD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;aAC/F;YACD,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;SAC7C;aAAM;YACL,MAAM,CAAC,KAAK,CAAC,mFAAmF,CAAC,CAAA;YACjG,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YACrE,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAA;YACnD,MAAM,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAA;YAC1F,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;SACzC;IACH,CAAC;IAED,UAAU;IACH,KAAK,CAAC,MAAM;QACjB,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAA;YACpE,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YACrE,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAA;YACnD,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAA;SACtE;aAAM;YACL,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAA;YAC1E,MAAM,qBAAqB,GAAG,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;YAChF,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAA;YACrF,IAAI,CAAC,KAAK,EAAE;gBACV,MAAM,IAAI,0BAA0B,CAAC,sCAAsC,CAAC,CAAA;aAC7E;YACD,MAAM,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAA;YAE7E,IAAI;gBACF,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;gBAC/C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,oBAAoB,CAAC,cAAc,CAAC,CAAA;gBAC/E,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;gBAC9E,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;aACxD;YAAC,OAAO,CAAC,EAAE;gBACV,MAAM,GAAG,GAAG,CAAU,CAAA;gBACtB,MAAM,IAAI,mBAAmB,CAAC,kDAAkD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;aAC/F;SACF;QACD,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAEM,OAAO,CAAE,SAAqB,EAAE,OAAqB;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAE9B,OAAO,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IAChE,CAAC;IAEM,OAAO,CAAE,UAAsB,EAAE,OAAqB,EAAE,GAAgB;QAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAErC,OAAO,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;IACtE,CAAC;IAEM,kBAAkB;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAA;IAC3B,CAAC;IAEO,KAAK,CAAE,OAAqB,EAAE,UAAU,GAAG,IAAI;QACrD,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YAChC,MAAM,IAAI,0BAA0B,CAAC,gEAAgE,CAAC,CAAA;SACvG;QAED,IAAI,IAAI,CAAC,WAAW,EAAE;YACpB,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAA;SAC9C;aAAM;YACL,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAA;SAC9C;IACH,CAAC;IAES,uBAAuB,CAAE,CAAqC;QACtE,IAAI,CAAC,EAAE;YACL,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAA;SAC1B;IACH,CAAC;CACF"}

package/dist/src/handshakes/abstract-handshake.d.ts

@@ -0,0 +1,36 @@
+import { Nonce } from '../nonce.js';
+import type { bytes, bytes32 } from '../@types/basic.js';
+import type { CipherState, MessageBuffer, SymmetricState } from '../@types/handshake.js';
+import type { ICryptoInterface } from '../crypto.js';
+export interface DecryptedResult {
+    plaintext: bytes;
+    valid: boolean;
+}
+export interface SplitState {
+    cs1: CipherState;
+    cs2: CipherState;
+}
+export declare abstract class AbstractHandshake {
+    crypto: ICryptoInterface;
+    constructor(crypto: ICryptoInterface);
+    encryptWithAd(cs: CipherState, ad: Uint8Array, plaintext: Uint8Array): bytes;
+    decryptWithAd(cs: CipherState, ad: Uint8Array, ciphertext: Uint8Array, dst?: Uint8Array): DecryptedResult;
+    protected hasKey(cs: CipherState): boolean;
+    protected createEmptyKey(): bytes32;
+    protected isEmptyKey(k: bytes32): boolean;
+    protected encrypt(k: bytes32, n: Nonce, ad: Uint8Array, plaintext: Uint8Array): bytes;
+    protected encryptAndHash(ss: SymmetricState, plaintext: bytes): bytes;
+    protected decrypt(k: bytes32, n: Nonce, ad: bytes, ciphertext: bytes, dst?: Uint8Array): DecryptedResult;
+    protected decryptAndHash(ss: SymmetricState, ciphertext: bytes): DecryptedResult;
+    protected dh(privateKey: bytes32, publicKey: bytes32): bytes32;
+    protected mixHash(ss: SymmetricState, data: bytes): void;
+    protected getHash(a: Uint8Array, b: Uint8Array): bytes32;
+    protected mixKey(ss: SymmetricState, ikm: bytes32): void;
+    protected initializeKey(k: bytes32): CipherState;
+    protected initializeSymmetric(protocolName: string): SymmetricState;
+    protected hashProtocolName(protocolName: Uint8Array): bytes32;
+    protected split(ss: SymmetricState): SplitState;
+    protected writeMessageRegular(cs: CipherState, payload: bytes): MessageBuffer;
+    protected readMessageRegular(cs: CipherState, message: MessageBuffer): DecryptedResult;
+}
+//# sourceMappingURL=abstract-handshake.d.ts.map

package/dist/src/handshakes/abstract-handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abstract-handshake.d.ts","sourceRoot":"","sources":["../../../src/handshakes/abstract-handshake.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACxF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAEpD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,KAAK,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;CACf;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,WAAW,CAAA;IAChB,GAAG,EAAE,WAAW,CAAA;CACjB;AAED,8BAAsB,iBAAiB;IAC9B,MAAM,EAAE,gBAAgB,CAAA;gBAElB,MAAM,EAAE,gBAAgB;IAI9B,aAAa,CAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,KAAK;IAO7E,aAAa,CAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,eAAe;IAQjH,SAAS,CAAC,MAAM,CAAE,EAAE,EAAE,WAAW,GAAG,OAAO;IAI3C,SAAS,CAAC,cAAc,IAAK,OAAO;IAIpC,SAAS,CAAC,UAAU,CAAE,CAAC,EAAE,OAAO,GAAG,OAAO;IAK1C,SAAS,CAAC,OAAO,CAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,KAAK;IAMtF,SAAS,CAAC,cAAc,CAAE,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,GAAG,KAAK;IAYtE,SAAS,CAAC,OAAO,CAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,eAAe;IAkBzG,SAAS,CAAC,cAAc,CAAE,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,GAAG,eAAe;IAYjF,SAAS,CAAC,EAAE,CAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO;IAgB/D,SAAS,CAAC,OAAO,CAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,GAAG,IAAI;IAIzD,SAAS,CAAC,OAAO,CAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO;IAKzD,SAAS,CAAC,MAAM,CAAE,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI;IAMzD,SAAS,CAAC,aAAa,CAAE,CAAC,EAAE,OAAO,GAAG,WAAW;IAMjD,SAAS,CAAC,mBAAmB,CAAE,YAAY,EAAE,MAAM,GAAG,cAAc;IAWpE,SAAS,CAAC,gBAAgB,CAAE,YAAY,EAAE,UAAU,GAAG,OAAO;IAU9D,SAAS,CAAC,KAAK,CAAE,EAAE,EAAE,cAAc,GAAG,UAAU;IAQhD,SAAS,CAAC,mBAAmB,CAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,GAAG,aAAa;IAQ9E,SAAS,CAAC,kBAAkB,CAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,GAAG,eAAe;CAGxF"}