@matter/protocol 0.11.0-alpha.0-20241005-e3e4e4a7a

package/dist/cjs/session/case/CaseServer.js

@@ -0,0 +1,232 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var CaseServer_exports = {};
+__export(CaseServer_exports, {
+  CaseServer: () => CaseServer
+});
+module.exports = __toCommonJS(CaseServer_exports);
+var import_general = require("#general");
+var import_types = require("#types");
+var import_CertificateManager = require("../../certificate/CertificateManager.js");
+var import_FabricManager = require("../../fabric/FabricManager.js");
+var import_SecureChannelMessenger = require("../../securechannel/SecureChannelMessenger.js");
+var import_CaseMessages = require("./CaseMessages.js");
+var import_CaseMessenger = require("./CaseMessenger.js");
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const logger = import_general.Logger.get("CaseServer");
+class CaseServer {
+  #sessions;
+  #fabrics;
+  constructor(sessions, fabrics) {
+    this.#sessions = sessions;
+    this.#fabrics = fabrics;
+  }
+  async onNewExchange(exchange) {
+    const messenger = new import_CaseMessenger.CaseServerMessenger(exchange);
+    try {
+      await this.handleSigma1(messenger);
+    } catch (error) {
+      logger.error("An error occurred during the commissioning", error);
+      if (error instanceof import_FabricManager.FabricNotFoundError) {
+        await messenger.sendError(import_types.ProtocolStatusCode.NoSharedTrustRoots);
+      } else if (!(error instanceof import_SecureChannelMessenger.ChannelStatusResponseError)) {
+        await messenger.sendError(import_types.ProtocolStatusCode.InvalidParam);
+      }
+    } finally {
+      await exchange.session.destroy();
+    }
+  }
+  getId() {
+    return import_types.SECURE_CHANNEL_PROTOCOL_ID;
+  }
+  async handleSigma1(messenger) {
+    logger.info(`Received pairing request from ${messenger.getChannelName()}`);
+    const responderRandom = import_general.Crypto.getRandom();
+    const { sigma1Bytes, sigma1 } = await messenger.readSigma1();
+    const {
+      initiatorSessionId: peerSessionId,
+      resumptionId: peerResumptionId,
+      initiatorResumeMic: peerResumeMic,
+      destinationId,
+      initiatorRandom: peerRandom,
+      initiatorEcdhPublicKey: peerEcdhPublicKey,
+      initiatorSessionParams
+    } = sigma1;
+    const resumptionId = import_general.Crypto.getRandomData(16);
+    const resumptionRecord = peerResumptionId !== void 0 && peerResumeMic !== void 0 ? this.#sessions.findResumptionRecordById(peerResumptionId) : void 0;
+    if (peerResumptionId !== void 0 && peerResumeMic !== void 0 && resumptionRecord !== void 0) {
+      const { sharedSecret, fabric, peerNodeId, caseAuthenticatedTags } = resumptionRecord;
+      const peerResumeKey = await import_general.Crypto.hkdf(
+        sharedSecret,
+        import_general.Bytes.concat(peerRandom, peerResumptionId),
+        import_CaseMessages.KDFSR1_KEY_INFO
+      );
+      import_general.Crypto.decrypt(peerResumeKey, peerResumeMic, import_CaseMessages.RESUME1_MIC_NONCE);
+      const responderSessionId = await this.#sessions.getNextAvailableSessionId();
+      const secureSessionSalt = import_general.Bytes.concat(peerRandom, peerResumptionId);
+      const secureSession = await this.#sessions.createSecureSession({
+        sessionId: responderSessionId,
+        fabric,
+        peerNodeId,
+        peerSessionId,
+        sharedSecret,
+        salt: secureSessionSalt,
+        isInitiator: false,
+        isResumption: true,
+        peerSessionParameters: initiatorSessionParams,
+        caseAuthenticatedTags
+      });
+      const resumeSalt = import_general.Bytes.concat(peerRandom, resumptionId);
+      const resumeKey = await import_general.Crypto.hkdf(sharedSecret, resumeSalt, import_CaseMessages.KDFSR2_KEY_INFO);
+      const resumeMic = import_general.Crypto.encrypt(resumeKey, new Uint8Array(0), import_CaseMessages.RESUME2_MIC_NONCE);
+      try {
+        await messenger.sendSigma2Resume({
+          resumptionId,
+          resumeMic,
+          responderSessionId,
+          responderSessionParams: this.#sessions.sessionParameters
+          // responder session parameters
+        });
+      } catch (error) {
+        await secureSession.destroy(false);
+        throw error;
+      }
+      logger.info(
+        `session ${secureSession.id} resumed with ${messenger.getChannelName()} for Fabric ${import_types.NodeId.toHexString(
+          fabric.nodeId
+        )}(index ${fabric.fabricIndex}) and PeerNode ${import_types.NodeId.toHexString(peerNodeId)}`,
+        "with CATs",
+        caseAuthenticatedTags
+      );
+      resumptionRecord.resumptionId = resumptionId;
+      await messenger.waitForSuccess("Success after CASE Sigma2Resume");
+      await messenger.close();
+      await this.#sessions.saveResumptionRecord(resumptionRecord);
+    } else if (peerResumptionId === void 0 && peerResumeMic === void 0 || peerResumptionId !== void 0 && peerResumeMic !== void 0 && resumptionRecord === void 0) {
+      const fabric = this.#fabrics.findFabricFromDestinationId(destinationId, peerRandom);
+      const { operationalCert: nodeOpCert, intermediateCACert, operationalIdentityProtectionKey } = fabric;
+      const { publicKey: responderEcdhPublicKey, sharedSecret } = import_general.Crypto.ecdhGeneratePublicKeyAndSecret(peerEcdhPublicKey);
+      const sigma2Salt = import_general.Bytes.concat(
+        operationalIdentityProtectionKey,
+        responderRandom,
+        responderEcdhPublicKey,
+        import_general.Crypto.hash(sigma1Bytes)
+      );
+      const sigma2Key = await import_general.Crypto.hkdf(sharedSecret, sigma2Salt, import_CaseMessages.KDFSR2_INFO);
+      const signatureData = import_CaseMessages.TlvSignedData.encode({
+        nodeOpCert,
+        intermediateCACert,
+        ecdhPublicKey: responderEcdhPublicKey,
+        peerEcdhPublicKey
+      });
+      const signature = fabric.sign(signatureData);
+      const encryptedData = import_CaseMessages.TlvEncryptedDataSigma2.encode({
+        nodeOpCert,
+        intermediateCACert,
+        signature,
+        resumptionId
+      });
+      const encrypted = import_general.Crypto.encrypt(sigma2Key, encryptedData, import_CaseMessages.TBE_DATA2_NONCE);
+      const responderSessionId = await this.#sessions.getNextAvailableSessionId();
+      const sigma2Bytes = await messenger.sendSigma2({
+        responderRandom,
+        responderSessionId,
+        responderEcdhPublicKey,
+        encrypted,
+        responderSessionParams: this.#sessions.sessionParameters
+        // responder session parameters
+      });
+      const {
+        sigma3Bytes,
+        sigma3: { encrypted: peerEncrypted }
+      } = await messenger.readSigma3();
+      const sigma3Salt = import_general.Bytes.concat(operationalIdentityProtectionKey, import_general.Crypto.hash([sigma1Bytes, sigma2Bytes]));
+      const sigma3Key = await import_general.Crypto.hkdf(sharedSecret, sigma3Salt, import_CaseMessages.KDFSR3_INFO);
+      const peerDecryptedData = import_general.Crypto.decrypt(sigma3Key, peerEncrypted, import_CaseMessages.TBE_DATA3_NONCE);
+      const {
+        nodeOpCert: peerNewOpCert,
+        intermediateCACert: peerIntermediateCACert,
+        signature: peerSignature
+      } = import_CaseMessages.TlvEncryptedDataSigma3.decode(peerDecryptedData);
+      fabric.verifyCredentials(peerNewOpCert, peerIntermediateCACert);
+      const peerSignatureData = import_CaseMessages.TlvSignedData.encode({
+        nodeOpCert: peerNewOpCert,
+        intermediateCACert: peerIntermediateCACert,
+        ecdhPublicKey: peerEcdhPublicKey,
+        peerEcdhPublicKey: responderEcdhPublicKey
+      });
+      const {
+        ellipticCurvePublicKey: peerPublicKey,
+        subject: { fabricId: peerFabricId, nodeId: peerNodeId, caseAuthenticatedTags }
+      } = import_CertificateManager.TlvOperationalCertificate.decode(peerNewOpCert);
+      if (fabric.fabricId !== peerFabricId) {
+        throw new import_general.UnexpectedDataError(`Fabric ID mismatch: ${fabric.fabricId} !== ${peerFabricId}`);
+      }
+      import_general.Crypto.verify((0, import_general.PublicKey)(peerPublicKey), peerSignatureData, peerSignature);
+      const secureSessionSalt = import_general.Bytes.concat(
+        operationalIdentityProtectionKey,
+        import_general.Crypto.hash([sigma1Bytes, sigma2Bytes, sigma3Bytes])
+      );
+      const secureSession = await this.#sessions.createSecureSession({
+        sessionId: responderSessionId,
+        fabric,
+        peerNodeId,
+        peerSessionId,
+        sharedSecret,
+        salt: secureSessionSalt,
+        isInitiator: false,
+        isResumption: false,
+        peerSessionParameters: initiatorSessionParams,
+        caseAuthenticatedTags
+      });
+      logger.info(
+        `session ${secureSession.id} created with ${messenger.getChannelName()} for Fabric ${import_types.NodeId.toHexString(
+          fabric.nodeId
+        )}(index ${fabric.fabricIndex}) and PeerNode ${import_types.NodeId.toHexString(peerNodeId)}`,
+        "with CATs",
+        caseAuthenticatedTags
+      );
+      await messenger.sendSuccess();
+      const resumptionRecord2 = {
+        peerNodeId,
+        fabric,
+        sharedSecret,
+        resumptionId,
+        sessionParameters: secureSession.parameters,
+        caseAuthenticatedTags
+      };
+      await messenger.close();
+      await this.#sessions.saveResumptionRecord(resumptionRecord2);
+    } else {
+      logger.info(
+        `Invalid resumption ID or resume MIC received from ${messenger.getChannelName()}`,
+        peerResumptionId,
+        peerResumeMic
+      );
+      throw new import_general.UnexpectedDataError("Invalid resumption ID or resume MIC.");
+    }
+  }
+  async close() {
+  }
+}
+//# sourceMappingURL=CaseServer.js.map

package/dist/cjs/session/case/CaseServer.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/session/case/CaseServer.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,qBAAsE;AAEtE,mBAAuE;AACvE,gCAA0C;AAC1C,2BAAmD;AAGnD,oCAA2C;AAC3C,0BAYO;AACP,2BAAoC;AA3BpC;AAAA;AAAA;AAAA;AAAA;AA6BA,MAAM,SAAS,sBAAO,IAAI,YAAY;AAE/B,MAAM,WAAsC;AAAA,EAC/C;AAAA,EACA;AAAA,EAEA,YAAY,UAA0B,SAAwB;AAC1D,SAAK,YAAY;AACjB,SAAK,WAAW;AAAA,EACpB;AAAA,EAEA,MAAM,cAAc,UAA2B;AAC3C,UAAM,YAAY,IAAI,yCAAoB,QAAQ;AAClD,QAAI;AACA,YAAM,KAAK,aAAa,SAAS;AAAA,IACrC,SAAS,OAAO;AACZ,aAAO,MAAM,8CAA8C,KAAK;AAEhE,UAAI,iBAAiB,0CAAqB;AACtC,cAAM,UAAU,UAAU,gCAAmB,kBAAkB;AAAA,MACnE,WAES,EAAE,iBAAiB,2DAA6B;AACrD,cAAM,UAAU,UAAU,gCAAmB,YAAY;AAAA,MAC7D;AAAA,IACJ,UAAE;AAEE,YAAM,SAAS,QAAQ,QAAQ;AAAA,IACnC;AAAA,EACJ;AAAA,EAEA,QAAgB;AACZ,WAAO;AAAA,EACX;AAAA,EAEA,MAAc,aAAa,WAAgC;AACvD,WAAO,KAAK,iCAAiC,UAAU,eAAe,CAAC,EAAE;AAEzE,UAAM,kBAAkB,sBAAO,UAAU;AAGzC,UAAM,EAAE,aAAa,OAAO,IAAI,MAAM,UAAU,WAAW;AAC3D,UAAM;AAAA,MACF,oBAAoB;AAAA,MACpB,cAAc;AAAA,MACd,oBAAoB;AAAA,MACpB;AAAA,MACA,iBAAiB;AAAA,MACjB,wBAAwB;AAAA,MACxB;AAAA,IACJ,IAAI;AAGJ,UAAM,eAAe,sBAAO,cAAc,EAAE;AAE5C,UAAM,mBACF,qBAAqB,UAAa,kBAAkB,SAC9C,KAAK,UAAU,yBAAyB,gBAAgB,IACxD;AAEV,QAAI,qBAAqB,UAAa,kBAAkB,UAAa,qBAAqB,QAAW;AACjG,YAAM,EAAE,cAAc,QAAQ,YAAY,sBAAsB,IAAI;AACpE,YAAM,gBAAgB,MAAM,sBAAO;AAAA,QAC/B;AAAA,QACA,qBAAM,OAAO,YAAY,gBAAgB;AAAA,QACzC;AAAA,MACJ;AACA,4BAAO,QAAQ,eAAe,eAAe,qCAAiB;AAG9D,YAAM,qBAAqB,MAAM,KAAK,UAAU,0BAA0B;AAC1E,YAAM,oBAAoB,qBAAM,OAAO,YAAY,gBAAgB;AACnE,YAAM,gBAAgB,MAAM,KAAK,UAAU,oBAAoB;AAAA,QAC3D,WAAW;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN,aAAa;AAAA,QACb,cAAc;AAAA,QACd,uBAAuB;AAAA,QACvB;AAAA,MACJ,CAAC;AAGD,YAAM,aAAa,qBAAM,OAAO,YAAY,YAAY;AACxD,YAAM,YAAY,MAAM,sBAAO,KAAK,cAAc,YAAY,mCAAe;AAC7E,YAAM,YAAY,sBAAO,QAAQ,WAAW,IAAI,WAAW,CAAC,GAAG,qCAAiB;AAChF,UAAI;AACA,cAAM,UAAU,iBAAiB;AAAA,UAC7B;AAAA,UACA;AAAA,UACA;AAAA,UACA,wBAAwB,KAAK,UAAU;AAAA;AAAA,QAC3C,CAAC;AAAA,MACL,SAAS,OAAO;AAEZ,cAAM,cAAc,QAAQ,KAAK;AACjC,cAAM;AAAA,MACV;AAEA,aAAO;AAAA,QACH,WAAW,cAAc,EAAE,iBAAiB,UAAU,eAAe,CAAC,eAAe,oBAAO;AAAA,UACxF,OAAO;AAAA,QACX,CAAC,UAAU,OAAO,WAAW,kBAAkB,oBAAO,YAAY,UAAU,CAAC;AAAA,QAC7E;AAAA,QACA;AAAA,MACJ;AACA,uBAAiB,eAAe;AAGhC,YAAM,UAAU,eAAe,iCAAiC;AAEhE,YAAM,UAAU,MAAM;AACtB,YAAM,KAAK,UAAU,qBAAqB,gBAAgB;AAAA,IAC9D,WACK,qBAAqB,UAAa,kBAAkB,UACpD,qBAAqB,UAAa,kBAAkB,UAAa,qBAAqB,QACzF;AAGE,YAAM,SAAS,KAAK,SAAS,4BAA4B,eAAe,UAAU;AAClF,YAAM,EAAE,iBAAiB,YAAY,oBAAoB,iCAAiC,IAAI;AAC9F,YAAM,EAAE,WAAW,wBAAwB,aAAa,IACpD,sBAAO,+BAA+B,iBAAiB;AAC3D,YAAM,aAAa,qBAAM;AAAA,QACrB;AAAA,QACA;AAAA,QACA;AAAA,QACA,sBAAO,KAAK,WAAW;AAAA,MAC3B;AACA,YAAM,YAAY,MAAM,sBAAO,KAAK,cAAc,YAAY,+BAAW;AACzE,YAAM,gBAAgB,kCAAc,OAAO;AAAA,QACvC;AAAA,QACA;AAAA,QACA,eAAe;AAAA,QACf;AAAA,MACJ,CAAC;AACD,YAAM,YAAY,OAAO,KAAK,aAAa;AAC3C,YAAM,gBAAgB,2CAAuB,OAAO;AAAA,QAChD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACJ,CAAC;AACD,YAAM,YAAY,sBAAO,QAAQ,WAAW,eAAe,mCAAe;AAC1E,YAAM,qBAAqB,MAAM,KAAK,UAAU,0BAA0B;AAC1E,YAAM,cAAc,MAAM,UAAU,WAAW;AAAA,QAC3C;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,wBAAwB,KAAK,UAAU;AAAA;AAAA,MAC3C,CAAC;AAGD,YAAM;AAAA,QACF;AAAA,QACA,QAAQ,EAAE,WAAW,cAAc;AAAA,MACvC,IAAI,MAAM,UAAU,WAAW;AAC/B,YAAM,aAAa,qBAAM,OAAO,kCAAkC,sBAAO,KAAK,CAAC,aAAa,WAAW,CAAC,CAAC;AACzG,YAAM,YAAY,MAAM,sBAAO,KAAK,cAAc,YAAY,+BAAW;AACzE,YAAM,oBAAoB,sBAAO,QAAQ,WAAW,eAAe,mCAAe;AAClF,YAAM;AAAA,QACF,YAAY;AAAA,QACZ,oBAAoB;AAAA,QACpB,WAAW;AAAA,MACf,IAAI,2CAAuB,OAAO,iBAAiB;AAEnD,aAAO,kBAAkB,eAAe,sBAAsB;AAE9D,YAAM,oBAAoB,kCAAc,OAAO;AAAA,QAC3C,YAAY;AAAA,QACZ,oBAAoB;AAAA,QACpB,eAAe;AAAA,QACf,mBAAmB;AAAA,MACvB,CAAC;AACD,YAAM;AAAA,QACF,wBAAwB;AAAA,QACxB,SAAS,EAAE,UAAU,cAAc,QAAQ,YAAY,sBAAsB;AAAA,MACjF,IAAI,oDAA0B,OAAO,aAAa;AAElD,UAAI,OAAO,aAAa,cAAc;AAClC,cAAM,IAAI,mCAAoB,uBAAuB,OAAO,QAAQ,QAAQ,YAAY,EAAE;AAAA,MAC9F;AAEA,4BAAO,WAAO,0BAAU,aAAa,GAAG,mBAAmB,aAAa;AAGxE,YAAM,oBAAoB,qBAAM;AAAA,QAC5B;AAAA,QACA,sBAAO,KAAK,CAAC,aAAa,aAAa,WAAW,CAAC;AAAA,MACvD;AACA,YAAM,gBAAgB,MAAM,KAAK,UAAU,oBAAoB;AAAA,QAC3D,WAAW;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN,aAAa;AAAA,QACb,cAAc;AAAA,QACd,uBAAuB;AAAA,QACvB;AAAA,MACJ,CAAC;AACD,aAAO;AAAA,QACH,WAAW,cAAc,EAAE,iBAAiB,UAAU,eAAe,CAAC,eAAe,oBAAO;AAAA,UACxF,OAAO;AAAA,QACX,CAAC,UAAU,OAAO,WAAW,kBAAkB,oBAAO,YAAY,UAAU,CAAC;AAAA,QAC7E;AAAA,QACA;AAAA,MACJ;AACA,YAAM,UAAU,YAAY;AAE5B,YAAMA,oBAAmB;AAAA,QACrB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,mBAAmB,cAAc;AAAA,QACjC;AAAA,MACJ;AAEA,YAAM,UAAU,MAAM;AACtB,YAAM,KAAK,UAAU,qBAAqBA,iBAAgB;AAAA,IAC9D,OAAO;AACH,aAAO;AAAA,QACH,qDAAqD,UAAU,eAAe,CAAC;AAAA,QAC/E;AAAA,QACA;AAAA,MACJ;AACA,YAAM,IAAI,mCAAoB,sCAAsC;AAAA,IACxE;AAAA,EACJ;AAAA,EAEA,MAAM,QAAQ;AAAA,EAEd;AACJ;",
+  "names": ["resumptionRecord"]
+}

package/dist/cjs/session/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from "./case/CaseClient.js";
+export * from "./case/CaseMessages.js";
+export * from "./case/CaseMessenger.js";
+export * from "./case/CaseServer.js";
+export * from "./InsecureSession.js";
+export * from "./pase/PaseClient.js";
+export * from "./pase/PaseMessages.js";
+export * from "./pase/PaseMessenger.js";
+export * from "./pase/PaseServer.js";
+export * from "./SecureSession.js";
+export * from "./Session.js";
+export * from "./SessionManager.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AAErC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC"}

package/dist/cjs/session/index.js

@@ -0,0 +1,35 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var session_exports = {};
+module.exports = __toCommonJS(session_exports);
+__reExport(session_exports, require("./case/CaseClient.js"), module.exports);
+__reExport(session_exports, require("./case/CaseMessages.js"), module.exports);
+__reExport(session_exports, require("./case/CaseMessenger.js"), module.exports);
+__reExport(session_exports, require("./case/CaseServer.js"), module.exports);
+__reExport(session_exports, require("./InsecureSession.js"), module.exports);
+__reExport(session_exports, require("./pase/PaseClient.js"), module.exports);
+__reExport(session_exports, require("./pase/PaseMessages.js"), module.exports);
+__reExport(session_exports, require("./pase/PaseMessenger.js"), module.exports);
+__reExport(session_exports, require("./pase/PaseServer.js"), module.exports);
+__reExport(session_exports, require("./SecureSession.js"), module.exports);
+__reExport(session_exports, require("./Session.js"), module.exports);
+__reExport(session_exports, require("./SessionManager.js"), module.exports);
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+//# sourceMappingURL=index.js.map

package/dist/cjs/session/index.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../src/session/index.ts"],
+  "mappings": ";;;;;;;;;;;;;;;AAAA;AAAA;AAQA,4BAAc,iCARd;AASA,4BAAc,mCATd;AAUA,4BAAc,oCAVd;AAWA,4BAAc,iCAXd;AAaA,4BAAc,iCAbd;AAcA,4BAAc,iCAdd;AAeA,4BAAc,mCAfd;AAgBA,4BAAc,oCAhBd;AAiBA,4BAAc,iCAjBd;AAkBA,4BAAc,+BAlBd;AAmBA,4BAAc,yBAnBd;AAoBA,4BAAc,gCApBd;AAAA;AAAA;AAAA;AAAA;AAAA;",
+  "names": []
+}

package/dist/cjs/session/pase/PaseClient.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { PbkdfParameters } from "#general";
+import { SessionManager } from "#session/SessionManager.js";
+import { MessageExchange } from "../../protocol/MessageExchange.js";
+import { SessionParameters } from "../Session.js";
+export declare class PaseClient {
+    #private;
+    constructor(sessions: SessionManager);
+    static generatePakePasscodeVerifier(setupPinCode: number, pbkdfParameters: PbkdfParameters): Promise<Uint8Array>;
+    static generateRandomPasscode(): number;
+    static generateRandomDiscriminator(): number;
+    pair(sessionParameters: SessionParameters, exchange: MessageExchange, setupPin: number): Promise<import("../SecureSession.js").SecureSession>;
+}
+//# sourceMappingURL=PaseClient.d.ts.map

package/dist/cjs/session/pase/PaseClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseClient.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAA6B,eAAe,EAAgC,MAAM,UAAU,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAOlD,qBAAa,UAAU;;gBAGP,QAAQ,EAAE,cAAc;WAIvB,4BAA4B,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe;IAKhG,MAAM,CAAC,sBAAsB;IAS7B,MAAM,CAAC,2BAA2B;IAI5B,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM;CAyD/F"}

package/dist/cjs/session/pase/PaseClient.js

@@ -0,0 +1,101 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var PaseClient_exports = {};
+__export(PaseClient_exports, {
+  PaseClient: () => PaseClient
+});
+module.exports = __toCommonJS(PaseClient_exports);
+var import_general = require("#general");
+var import_types = require("#types");
+var import_PaseMessenger = require("./PaseMessenger.js");
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const { numberToBytesBE } = import_general.ec;
+const logger = import_general.Logger.get("PaseClient");
+class PaseClient {
+  #sessions;
+  constructor(sessions) {
+    this.#sessions = sessions;
+  }
+  static async generatePakePasscodeVerifier(setupPinCode, pbkdfParameters) {
+    const { w0, L } = await import_general.Spake2p.computeW0L(pbkdfParameters, setupPinCode);
+    return import_general.Bytes.concat(numberToBytesBE(w0, 32), L);
+  }
+  static generateRandomPasscode() {
+    let passcode;
+    passcode = import_general.Crypto.getRandomUInt32() % 99999998 + 1;
+    if (import_types.CommissioningOptions.FORBIDDEN_PASSCODES.includes(passcode)) {
+      passcode += 1;
+    }
+    return passcode;
+  }
+  static generateRandomDiscriminator() {
+    return import_general.Crypto.getRandomUInt16() % 4096;
+  }
+  async pair(sessionParameters, exchange, setupPin) {
+    const messenger = new import_PaseMessenger.PaseClientMessenger(exchange);
+    const initiatorRandom = import_general.Crypto.getRandom();
+    const initiatorSessionId = await this.#sessions.getNextAvailableSessionId();
+    const requestPayload = await messenger.sendPbkdfParamRequest({
+      initiatorRandom,
+      initiatorSessionId,
+      passcodeId: import_PaseMessenger.DEFAULT_PASSCODE_ID,
+      hasPbkdfParameters: false,
+      initiatorSessionParams: sessionParameters
+    });
+    const {
+      responsePayload,
+      response: { pbkdfParameters, responderSessionId, responderSessionParams }
+    } = await messenger.readPbkdfParamResponse();
+    if (pbkdfParameters === void 0)
+      throw new import_general.UnexpectedDataError("Missing requested PbkdfParameters in the response.");
+    sessionParameters = {
+      ...exchange.session.parameters,
+      ...responderSessionParams ?? {}
+    };
+    const { w0, w1 } = await import_general.Spake2p.computeW0W1(pbkdfParameters, setupPin);
+    const spake2p = import_general.Spake2p.create(import_general.Crypto.hash([import_PaseMessenger.SPAKE_CONTEXT, requestPayload, responsePayload]), w0);
+    const X = spake2p.computeX();
+    await messenger.sendPasePake1({ x: X });
+    const { y: Y, verifier } = await messenger.readPasePake2();
+    const { Ke, hAY, hBX } = await spake2p.computeSecretAndVerifiersFromY(w1, X, Y);
+    if (!import_general.Bytes.areEqual(verifier, hBX))
+      throw new import_general.UnexpectedDataError("Received incorrect key confirmation from the receiver.");
+    await messenger.sendPasePake3({ verifier: hAY });
+    await messenger.waitForSuccess("Success after PASE Pake3");
+    const secureSession = await this.#sessions.createSecureSession({
+      sessionId: initiatorSessionId,
+      fabric: void 0,
+      peerNodeId: import_types.NodeId.UNSPECIFIED_NODE_ID,
+      peerSessionId: responderSessionId,
+      sharedSecret: Ke,
+      salt: new Uint8Array(0),
+      isInitiator: true,
+      isResumption: false,
+      peerSessionParameters: sessionParameters
+    });
+    await messenger.close();
+    logger.info(`Pase client: Paired successfully with ${messenger.getChannelName()}.`);
+    return secureSession;
+  }
+}
+//# sourceMappingURL=PaseClient.js.map

package/dist/cjs/session/pase/PaseClient.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/session/pase/PaseClient.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,qBAAyF;AAEzF,mBAA6C;AAG7C,2BAAwE;AAXxE;AAAA;AAAA;AAAA;AAAA;AAaA,MAAM,EAAE,gBAAgB,IAAI;AAE5B,MAAM,SAAS,sBAAO,IAAI,YAAY;AAE/B,MAAM,WAAW;AAAA,EACpB;AAAA,EAEA,YAAY,UAA0B;AAClC,SAAK,YAAY;AAAA,EACrB;AAAA,EAEA,aAAa,6BAA6B,cAAsB,iBAAkC;AAC9F,UAAM,EAAE,IAAI,EAAE,IAAI,MAAM,uBAAQ,WAAW,iBAAiB,YAAY;AACxE,WAAO,qBAAM,OAAO,gBAAgB,IAAI,EAAE,GAAG,CAAC;AAAA,EAClD;AAAA,EAEA,OAAO,yBAAyB;AAC5B,QAAI;AACJ,eAAY,sBAAO,gBAAgB,IAAI,WAAY;AACnD,QAAI,kCAAqB,oBAAoB,SAAS,QAAQ,GAAG;AAC7D,kBAAY;AAAA,IAChB;AACA,WAAO;AAAA,EACX;AAAA,EAEA,OAAO,8BAA8B;AACjC,WAAO,sBAAO,gBAAgB,IAAI;AAAA,EACtC;AAAA,EAEA,MAAM,KAAK,mBAAsC,UAA2B,UAAkB;AAC1F,UAAM,YAAY,IAAI,yCAAoB,QAAQ;AAClD,UAAM,kBAAkB,sBAAO,UAAU;AACzC,UAAM,qBAAqB,MAAM,KAAK,UAAU,0BAA0B;AAG1E,UAAM,iBAAiB,MAAM,UAAU,sBAAsB;AAAA,MACzD;AAAA,MACA;AAAA,MACA,YAAY;AAAA,MACZ,oBAAoB;AAAA,MACpB,wBAAwB;AAAA,IAC5B,CAAC;AACD,UAAM;AAAA,MACF;AAAA,MACA,UAAU,EAAE,iBAAiB,oBAAoB,uBAAuB;AAAA,IAC5E,IAAI,MAAM,UAAU,uBAAuB;AAC3C,QAAI,oBAAoB;AACpB,YAAM,IAAI,mCAAoB,oDAAoD;AAGtF,wBAAoB;AAAA,MAChB,GAAG,SAAS,QAAQ;AAAA,MACpB,GAAI,0BAA0B,CAAC;AAAA,IACnC;AAGA,UAAM,EAAE,IAAI,GAAG,IAAI,MAAM,uBAAQ,YAAY,iBAAiB,QAAQ;AACtE,UAAM,UAAU,uBAAQ,OAAO,sBAAO,KAAK,CAAC,oCAAe,gBAAgB,eAAe,CAAC,GAAG,EAAE;AAChG,UAAM,IAAI,QAAQ,SAAS;AAC3B,UAAM,UAAU,cAAc,EAAE,GAAG,EAAE,CAAC;AAGtC,UAAM,EAAE,GAAG,GAAG,SAAS,IAAI,MAAM,UAAU,cAAc;AACzD,UAAM,EAAE,IAAI,KAAK,IAAI,IAAI,MAAM,QAAQ,+BAA+B,IAAI,GAAG,CAAC;AAC9E,QAAI,CAAC,qBAAM,SAAS,UAAU,GAAG;AAC7B,YAAM,IAAI,mCAAoB,wDAAwD;AAC1F,UAAM,UAAU,cAAc,EAAE,UAAU,IAAI,CAAC;AAG/C,UAAM,UAAU,eAAe,0BAA0B;AACzD,UAAM,gBAAgB,MAAM,KAAK,UAAU,oBAAoB;AAAA,MAC3D,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,YAAY,oBAAO;AAAA,MACnB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,MAAM,IAAI,WAAW,CAAC;AAAA,MACtB,aAAa;AAAA,MACb,cAAc;AAAA,MACd,uBAAuB;AAAA,IAC3B,CAAC;AACD,UAAM,UAAU,MAAM;AACtB,WAAO,KAAK,yCAAyC,UAAU,eAAe,CAAC,GAAG;AAElF,WAAO;AAAA,EACX;AACJ;",
+  "names": []
+}

package/dist/cjs/session/pase/PaseMessages.d.ts

@@ -0,0 +1,85 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/** @see {@link MatterSpecification.v13.Core} § 4.12.8 */
+export declare const TlvSessionParameters: import("#types").ObjectSchema<{
+    /** Maximum sleep interval of node when in idle mode. */
+    idleIntervalMs: import("#types").OptionalFieldType<number>;
+    /** Maximum sleep interval of node when in active mode. */
+    activeIntervalMs: import("#types").OptionalFieldType<number>;
+    /** Minimum amount of time the node SHOULD stay active after network activity. */
+    activeThresholdMs: import("#types").OptionalFieldType<number>;
+    /** Data model revision. */
+    dataModelRevision: import("#types").OptionalFieldType<number>;
+    /** Interaction model revision. */
+    interactionModelRevision: import("#types").OptionalFieldType<number>;
+    /** Specification version. */
+    specificationVersion: import("#types").OptionalFieldType<number>;
+    /** Maximum Paths pert Invoke */
+    maxPathsPerInvoke: import("#types").OptionalFieldType<number>;
+}>;
+/** @see {@link MatterSpecification.v13.Core} § 4.14.1.2 */
+export declare const TlvPbkdfParamRequest: import("#types").ObjectSchema<{
+    initiatorRandom: import("#types").FieldType<Uint8Array>;
+    initiatorSessionId: import("#types").FieldType<number>;
+    passcodeId: import("#types").FieldType<number>;
+    hasPbkdfParameters: import("#types").FieldType<boolean>;
+    initiatorSessionParams: import("#types").OptionalFieldType<import("#types").TypeFromFields<{
+        /** Maximum sleep interval of node when in idle mode. */
+        idleIntervalMs: import("#types").OptionalFieldType<number>;
+        /** Maximum sleep interval of node when in active mode. */
+        activeIntervalMs: import("#types").OptionalFieldType<number>;
+        /** Minimum amount of time the node SHOULD stay active after network activity. */
+        activeThresholdMs: import("#types").OptionalFieldType<number>;
+        /** Data model revision. */
+        dataModelRevision: import("#types").OptionalFieldType<number>;
+        /** Interaction model revision. */
+        interactionModelRevision: import("#types").OptionalFieldType<number>;
+        /** Specification version. */
+        specificationVersion: import("#types").OptionalFieldType<number>;
+        /** Maximum Paths pert Invoke */
+        maxPathsPerInvoke: import("#types").OptionalFieldType<number>;
+    }>>;
+}>;
+/** @see {@link MatterSpecification.v13.Core} § 4.14.1.2 */
+export declare const TlvPbkdfParamResponse: import("#types").ObjectSchema<{
+    initiatorRandom: import("#types").FieldType<Uint8Array>;
+    responderRandom: import("#types").FieldType<Uint8Array>;
+    responderSessionId: import("#types").FieldType<number>;
+    pbkdfParameters: import("#types").OptionalFieldType<import("#types").TypeFromFields<{
+        iterations: import("#types").FieldType<number>;
+        salt: import("#types").FieldType<Uint8Array>;
+    }>>;
+    responderSessionParams: import("#types").OptionalFieldType<import("#types").TypeFromFields<{
+        /** Maximum sleep interval of node when in idle mode. */
+        idleIntervalMs: import("#types").OptionalFieldType<number>;
+        /** Maximum sleep interval of node when in active mode. */
+        activeIntervalMs: import("#types").OptionalFieldType<number>;
+        /** Minimum amount of time the node SHOULD stay active after network activity. */
+        activeThresholdMs: import("#types").OptionalFieldType<number>;
+        /** Data model revision. */
+        dataModelRevision: import("#types").OptionalFieldType<number>;
+        /** Interaction model revision. */
+        interactionModelRevision: import("#types").OptionalFieldType<number>;
+        /** Specification version. */
+        specificationVersion: import("#types").OptionalFieldType<number>;
+        /** Maximum Paths pert Invoke */
+        maxPathsPerInvoke: import("#types").OptionalFieldType<number>;
+    }>>;
+}>;
+/** @see {@link MatterSpecification.v13.Core} § 4.14.1.2 */
+export declare const TlvPasePake1: import("#types").ObjectSchema<{
+    x: import("#types").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterSpecification.v13.Core} § 4.14.1.2 */
+export declare const TlvPasePake2: import("#types").ObjectSchema<{
+    y: import("#types").FieldType<Uint8Array>;
+    verifier: import("#types").FieldType<Uint8Array>;
+}>;
+/** @see {@link MatterSpecification.v13.Core} § 4.14.1.2 */
+export declare const TlvPasePake3: import("#types").ObjectSchema<{
+    verifier: import("#types").FieldType<Uint8Array>;
+}>;
+//# sourceMappingURL=PaseMessages.d.ts.map

package/dist/cjs/session/pase/PaseMessages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PaseMessages.d.ts","sourceRoot":"","sources":["../../../../src/session/pase/PaseMessages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,yDAAyD;AACzD,eAAO,MAAM,oBAAoB;IAC7B,wDAAwD;;IAGxD,0DAA0D;;IAG1D,iFAAiF;;IAGjF,2BAA2B;;IAG3B,kCAAkC;;IAGlC,6BAA6B;;IAG7B,gCAAgC;;EAElC,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB;;;;;;QAvB7B,wDAAwD;;QAGxD,0DAA0D;;QAG1D,iFAAiF;;QAGjF,2BAA2B;;QAG3B,kCAAkC;;QAGlC,6BAA6B;;QAG7B,gCAAgC;;;EAWlC,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB;;;;;;;;;QAhC9B,wDAAwD;;QAGxD,0DAA0D;;QAG1D,iFAAiF;;QAGjF,2BAA2B;;QAG3B,kCAAkC;;QAGlC,6BAA6B;;QAG7B,gCAAgC;;;EA0BlC,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,YAAY;;EAEvB,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,YAAY;;;EAGvB,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,YAAY;;EAEvB,CAAC"}

package/dist/cjs/session/pase/PaseMessages.js

@@ -0,0 +1,88 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var PaseMessages_exports = {};
+__export(PaseMessages_exports, {
+  TlvPasePake1: () => TlvPasePake1,
+  TlvPasePake2: () => TlvPasePake2,
+  TlvPasePake3: () => TlvPasePake3,
+  TlvPbkdfParamRequest: () => TlvPbkdfParamRequest,
+  TlvPbkdfParamResponse: () => TlvPbkdfParamResponse,
+  TlvSessionParameters: () => TlvSessionParameters
+});
+module.exports = __toCommonJS(PaseMessages_exports);
+var import_general = require("#general");
+var import_types = require("#types");
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const TlvSessionParameters = (0, import_types.TlvObject)({
+  /** Maximum sleep interval of node when in idle mode. */
+  idleIntervalMs: (0, import_types.TlvOptionalField)(1, import_types.TlvUInt32),
+  /** Maximum sleep interval of node when in active mode. */
+  activeIntervalMs: (0, import_types.TlvOptionalField)(2, import_types.TlvUInt32),
+  /** Minimum amount of time the node SHOULD stay active after network activity. */
+  activeThresholdMs: (0, import_types.TlvOptionalField)(3, import_types.TlvUInt16),
+  /** Data model revision. */
+  dataModelRevision: (0, import_types.TlvOptionalField)(4, import_types.TlvUInt16),
+  /** Interaction model revision. */
+  interactionModelRevision: (0, import_types.TlvOptionalField)(5, import_types.TlvUInt16),
+  /** Specification version. */
+  specificationVersion: (0, import_types.TlvOptionalField)(6, import_types.TlvUInt32),
+  /** Maximum Paths pert Invoke */
+  maxPathsPerInvoke: (0, import_types.TlvOptionalField)(7, import_types.TlvUInt16)
+});
+const TlvPbkdfParamRequest = (0, import_types.TlvObject)({
+  initiatorRandom: (0, import_types.TlvField)(1, import_types.TlvByteString.bound({ length: 32 })),
+  initiatorSessionId: (0, import_types.TlvField)(2, import_types.TlvUInt16),
+  // Specs: range: 16bits
+  passcodeId: (0, import_types.TlvField)(3, import_types.TlvUInt16),
+  // Specs: length: 16bits so min is 0x8000?
+  hasPbkdfParameters: (0, import_types.TlvField)(4, import_types.TlvBoolean),
+  initiatorSessionParams: (0, import_types.TlvOptionalField)(5, TlvSessionParameters)
+});
+const TlvPbkdfParamResponse = (0, import_types.TlvObject)({
+  initiatorRandom: (0, import_types.TlvField)(1, import_types.TlvByteString.bound({ length: 32 })),
+  responderRandom: (0, import_types.TlvField)(2, import_types.TlvByteString.bound({ length: 32 })),
+  responderSessionId: (0, import_types.TlvField)(3, import_types.TlvUInt16),
+  pbkdfParameters: (0, import_types.TlvOptionalField)(
+    4,
+    (0, import_types.TlvObject)({
+      iterations: (0, import_types.TlvField)(1, import_types.TlvUInt32),
+      salt: (0, import_types.TlvField)(2, import_types.TlvByteString.bound({ minLength: 16, maxLength: 32 }))
+    })
+  ),
+  responderSessionParams: (0, import_types.TlvOptionalField)(5, TlvSessionParameters)
+});
+const TlvPasePake1 = (0, import_types.TlvObject)({
+  x: (0, import_types.TlvField)(1, import_types.TlvByteString.bound({ length: import_general.CRYPTO_PUBLIC_KEY_SIZE_BYTES }))
+  // pA
+});
+const TlvPasePake2 = (0, import_types.TlvObject)({
+  y: (0, import_types.TlvField)(1, import_types.TlvByteString.bound({ length: import_general.CRYPTO_PUBLIC_KEY_SIZE_BYTES })),
+  // pB
+  verifier: (0, import_types.TlvField)(2, import_types.TlvByteString.bound({ length: import_general.CRYPTO_HASH_LEN_BYTES }))
+  // cB
+});
+const TlvPasePake3 = (0, import_types.TlvObject)({
+  verifier: (0, import_types.TlvField)(1, import_types.TlvByteString.bound({ length: import_general.CRYPTO_HASH_LEN_BYTES }))
+  // cA
+});
+//# sourceMappingURL=PaseMessages.js.map

package/dist/cjs/session/pase/PaseMessages.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/session/pase/PaseMessages.ts"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,qBAAoE;AACpE,mBAAuG;AAPvG;AAAA;AAAA;AAAA;AAAA;AAUO,MAAM,2BAAuB,wBAAU;AAAA;AAAA,EAE1C,oBAAgB,+BAAiB,GAAG,sBAAS;AAAA;AAAA,EAG7C,sBAAkB,+BAAiB,GAAG,sBAAS;AAAA;AAAA,EAG/C,uBAAmB,+BAAiB,GAAG,sBAAS;AAAA;AAAA,EAGhD,uBAAmB,+BAAiB,GAAG,sBAAS;AAAA;AAAA,EAGhD,8BAA0B,+BAAiB,GAAG,sBAAS;AAAA;AAAA,EAGvD,0BAAsB,+BAAiB,GAAG,sBAAS;AAAA;AAAA,EAGnD,uBAAmB,+BAAiB,GAAG,sBAAS;AACpD,CAAC;AAGM,MAAM,2BAAuB,wBAAU;AAAA,EAC1C,qBAAiB,uBAAS,GAAG,2BAAc,MAAM,EAAE,QAAQ,GAAG,CAAC,CAAC;AAAA,EAChE,wBAAoB,uBAAS,GAAG,sBAAS;AAAA;AAAA,EACzC,gBAAY,uBAAS,GAAG,sBAAS;AAAA;AAAA,EACjC,wBAAoB,uBAAS,GAAG,uBAAU;AAAA,EAC1C,4BAAwB,+BAAiB,GAAG,oBAAoB;AACpE,CAAC;AAGM,MAAM,4BAAwB,wBAAU;AAAA,EAC3C,qBAAiB,uBAAS,GAAG,2BAAc,MAAM,EAAE,QAAQ,GAAG,CAAC,CAAC;AAAA,EAChE,qBAAiB,uBAAS,GAAG,2BAAc,MAAM,EAAE,QAAQ,GAAG,CAAC,CAAC;AAAA,EAChE,wBAAoB,uBAAS,GAAG,sBAAS;AAAA,EACzC,qBAAiB;AAAA,IACb;AAAA,QACA,wBAAU;AAAA,MACN,gBAAY,uBAAS,GAAG,sBAAS;AAAA,MACjC,UAAM,uBAAS,GAAG,2BAAc,MAAM,EAAE,WAAW,IAAI,WAAW,GAAG,CAAC,CAAC;AAAA,IAC3E,CAAC;AAAA,EACL;AAAA,EACA,4BAAwB,+BAAiB,GAAG,oBAAoB;AACpE,CAAC;AAGM,MAAM,mBAAe,wBAAU;AAAA,EAClC,OAAG,uBAAS,GAAG,2BAAc,MAAM,EAAE,QAAQ,4CAA6B,CAAC,CAAC;AAAA;AAChF,CAAC;AAGM,MAAM,mBAAe,wBAAU;AAAA,EAClC,OAAG,uBAAS,GAAG,2BAAc,MAAM,EAAE,QAAQ,4CAA6B,CAAC,CAAC;AAAA;AAAA,EAC5E,cAAU,uBAAS,GAAG,2BAAc,MAAM,EAAE,QAAQ,qCAAsB,CAAC,CAAC;AAAA;AAChF,CAAC;AAGM,MAAM,mBAAe,wBAAU;AAAA,EAClC,cAAU,uBAAS,GAAG,2BAAc,MAAM,EAAE,QAAQ,qCAAsB,CAAC,CAAC;AAAA;AAChF,CAAC;",
+  "names": []
+}