@matter/thread-br-client 0.0.1 → 0.17.5-alpha.0-20260706-fd4c49e2e

package/dist/esm/dtls/ecjpake/EcJpakeRound.js

@@ -3,7 +3,7 @@
  * Copyright 2022-2026 Matter.js Authors
  * SPDX-License-Identifier: Apache-2.0
  */
-import { InternalError } from "@matter/general";
+import { Bytes, InternalError } from "@matter/general";
 import { p256 } from "@noble/curves/nist.js";
 import { DtlsError } from "../channel/DtlsChannel.js";
 import { SchnorrZkp } from "./SchnorrZkp.js";
@@ -27,33 +27,39 @@ function readSlice(bytes, offset, length) {
   return bytes.slice(offset, offset + length);
 }
 function validateKeyKP(keyKP) {
-  if (keyKP.X.length !== POINT_LEN || keyKP.X[0] !== 4) {
+  const X = Bytes.of(keyKP.X);
+  const V = Bytes.of(keyKP.zkp.V);
+  const r = Bytes.of(keyKP.zkp.r);
+  if (X.length !== POINT_LEN || X[0] !== 4) {
     throw new InternalError("X must be SEC1-uncompressed P-256 (65 bytes, 0x04 prefix)");
   }
-  if (keyKP.zkp.V.length !== POINT_LEN || keyKP.zkp.V[0] !== 4) {
+  if (V.length !== POINT_LEN || V[0] !== 4) {
     throw new InternalError("ZKP.V must be SEC1-uncompressed P-256 (65 bytes, 0x04 prefix)");
   }
-  if (keyKP.zkp.r.length === 0 || keyKP.zkp.r.length > 255) {
-    throw new InternalError(`ZKP.r length must be 1..255, got ${keyKP.zkp.r.length}`);
+  if (r.length === 0 || r.length > 255) {
+    throw new InternalError(`ZKP.r length must be 1..255, got ${r.length}`);
   }
-  if (keyKP.zkp.r[0] === 0) {
+  if (r[0] === 0) {
     throw new InternalError("ZKP.r must be minimal big-endian (no leading zero)");
   }
 }
 function keyKpEncodedLength(keyKP) {
-  return 1 + POINT_LEN + 1 + POINT_LEN + 1 + keyKP.zkp.r.length;
+  return 1 + POINT_LEN + 1 + POINT_LEN + 1 + keyKP.zkp.r.byteLength;
 }
 function writeKeyKP(keyKP, out, offset) {
+  const X = Bytes.of(keyKP.X);
+  const V = Bytes.of(keyKP.zkp.V);
+  const r = Bytes.of(keyKP.zkp.r);
   let p = offset;
   out[p++] = POINT_LEN;
-  out.set(keyKP.X, p);
+  out.set(X, p);
   p += POINT_LEN;
   out[p++] = POINT_LEN;
-  out.set(keyKP.zkp.V, p);
+  out.set(V, p);
   p += POINT_LEN;
-  out[p++] = keyKP.zkp.r.length;
-  out.set(keyKP.zkp.r, p);
-  p += keyKP.zkp.r.length;
+  out[p++] = r.length;
+  out.set(r, p);
+  p += r.length;
   return p;
 }
 function readKeyKP(bytes, offset) {
@@ -92,12 +98,12 @@ const EcJpakeRound = {
    *
    * `id` is `ECJPAKE_ID_CLIENT` for the joiner and `ECJPAKE_ID_SERVER` for the commissioner.
    */
-  buildRound1(args) {
+  async buildRound1(crypto, args) {
     const { x1, x2, v1, v2, id } = args;
     const X1 = Point.BASE.multiply(x1).toBytes(false);
     const X2 = Point.BASE.multiply(x2).toBytes(false);
-    const zkp1 = SchnorrZkp.generate({ privateKey: x1, publicKey: X1, ephemeral: v1, id });
-    const zkp2 = SchnorrZkp.generate({ privateKey: x2, publicKey: X2, ephemeral: v2, id });
+    const zkp1 = await SchnorrZkp.generate(crypto, { privateKey: x1, publicKey: X1, ephemeral: v1, id });
+    const zkp2 = await SchnorrZkp.generate(crypto, { privateKey: x2, publicKey: X2, ephemeral: v2, id });
     return {
       kp1: { X: X1, zkp: zkp1 },
       kp2: { X: X2, zkp: zkp2 }
@@ -112,10 +118,11 @@ const EcJpakeRound = {
     return out;
   },
   parseRound1(bytes) {
-    const first = readKeyKP(bytes, 0);
-    const second = readKeyKP(bytes, first.nextOffset);
-    if (second.nextOffset !== bytes.length) {
-      throw new DtlsError(`trailing bytes after round-1 pair: ${bytes.length - second.nextOffset} extra`);
+    const buf = Bytes.of(bytes);
+    const first = readKeyKP(buf, 0);
+    const second = readKeyKP(buf, first.nextOffset);
+    if (second.nextOffset !== buf.length) {
+      throw new DtlsError(`trailing bytes after round-1 pair: ${buf.length - second.nextOffset} extra`);
     }
     return { kp1: first.kp, kp2: second.kp };
   },
@@ -126,7 +133,10 @@ const EcJpakeRound = {
    * `Xp2 = X4`, `Xm1 = X1`; for the server `Xp1 = X1`, `Xp2 = X2`, `Xm1 = X3`.
    */
   composeRound2Generator(args) {
-    const point = Point.fromBytes(args.Xp1).add(Point.fromBytes(args.Xp2)).add(Point.fromBytes(args.Xm1));
+    const Xp1 = Bytes.of(args.Xp1);
+    const Xp2 = Bytes.of(args.Xp2);
+    const Xm1 = Bytes.of(args.Xm1);
+    const point = Point.fromBytes(Xp1).add(Point.fromBytes(Xp2)).add(Point.fromBytes(Xm1));
     if (point.is0()) {
       throw new DtlsError("round-2 generator G' must not be the point at infinity");
     }
@@ -141,7 +151,7 @@ const EcJpakeRound = {
    * Caller-supplied `v` makes output deterministic for testing; production
    * callers must source `v` from a CSPRNG.
    */
-  buildRound2(args) {
+  async buildRound2(crypto, args) {
     const { xm2, s, v, id, generator } = args;
     if (xm2 <= 0n || xm2 >= N) {
       throw new InternalError("xm2 must be in [1, n-1]");
@@ -155,7 +165,7 @@ const EcJpakeRound = {
     }
     const Xm = generator.point.multiply(xm);
     const XmBytes = Xm.toBytes(false);
-    const zkp = SchnorrZkp.generate({
+    const zkp = await SchnorrZkp.generate(crypto, {
       privateKey: xm,
       publicKey: XmBytes,
       ephemeral: v,
@@ -191,21 +201,22 @@ const EcJpakeRound = {
    * server reading ClientKeyExchange.
    */
   parseRound2(bytes, options) {
+    const buf = Bytes.of(bytes);
     let p = 0;
     if (options.expectEcParameters) {
-      if (bytes.length < 3) {
+      if (buf.length < 3) {
         throw new DtlsError("round-2 message too short for ECParameters header");
       }
-      if (bytes[0] !== 3 || bytes[1] !== 0 || bytes[2] !== 23) {
+      if (buf[0] !== 3 || buf[1] !== 0 || buf[2] !== 23) {
         throw new DtlsError(
-          `expected ECParameters{named_curve, secp256r1} (03 00 17), got ${Array.from(bytes.subarray(0, 3)).map((b) => b.toString(16).padStart(2, "0")).join(" ")}`
+          `expected ECParameters{named_curve, secp256r1} (03 00 17), got ${Array.from(buf.subarray(0, 3)).map((b) => b.toString(16).padStart(2, "0")).join(" ")}`
         );
       }
       p = 3;
     }
-    const { kp, nextOffset } = readKeyKP(bytes, p);
-    if (nextOffset !== bytes.length) {
-      throw new DtlsError(`trailing bytes after round-2 message: ${bytes.length - nextOffset} extra`);
+    const { kp, nextOffset } = readKeyKP(buf, p);
+    if (nextOffset !== buf.length) {
+      throw new DtlsError(`trailing bytes after round-2 message: ${buf.length - nextOffset} extra`);
     }
     return kp;
   },
@@ -215,9 +226,9 @@ const EcJpakeRound = {
    * on any verification failure — including malformed bytes — to mirror the
    * round-1 `SchnorrZkp.verify` contract.
    */
-  verifyRound2Zkp(args) {
+  async verifyRound2Zkp(crypto, args) {
     const { kp, generator, peerId } = args;
-    return SchnorrZkp.verify({ zkp: kp.zkp, publicKey: kp.X, id: peerId, generator });
+    return await SchnorrZkp.verify(crypto, { zkp: kp.zkp, publicKey: kp.X, id: peerId, generator });
   }
 };
 export {

package/dist/esm/dtls/ecjpake/EcJpakeRound.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../../../src/dtls/ecjpake/EcJpakeRound.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,kBAA4C;AAoBrD,MAAM,QAAQ,KAAK;AACnB,MAAM,IAAI,MAAM,GAAG;AACnB,MAAM,YAAY;AAOX,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAEjC,SAAS,OAAO,OAAmB,QAAwB;AACvD,MAAI,UAAU,MAAM,QAAQ;AACxB,UAAM,IAAI,UAAU,sCAAsC,MAAM,EAAE;AAAA,EACtE;AACA,SAAO,MAAM,MAAM;AACvB;AAEA,SAAS,UAAU,OAAmB,QAAgB,QAA4B;AAC9E,MAAI,SAAS,SAAS,MAAM,QAAQ;AAChC,UAAM,IAAI;AAAA,MACN,0BAA0B,MAAM,oBAAoB,MAAM,UAAU,MAAM,SAAS,MAAM;AAAA,IAC7F;AAAA,EACJ;AAEA,SAAO,MAAM,MAAM,QAAQ,SAAS,MAAM;AAC9C;AAEA,SAAS,cAAc,OAA2B;AAC9C,MAAI,MAAM,EAAE,WAAW,aAAa,MAAM,EAAE,CAAC,MAAM,GAAM;AACrD,UAAM,IAAI,cAAc,2DAA2D;AAAA,EACvF;AACA,MAAI,MAAM,IAAI,EAAE,WAAW,aAAa,MAAM,IAAI,EAAE,CAAC,MAAM,GAAM;AAC7D,UAAM,IAAI,cAAc,+DAA+D;AAAA,EAC3F;AACA,MAAI,MAAM,IAAI,EAAE,WAAW,KAAK,MAAM,IAAI,EAAE,SAAS,KAAK;AACtD,UAAM,IAAI,cAAc,oCAAoC,MAAM,IAAI,EAAE,MAAM,EAAE;AAAA,EACpF;AAIA,MAAI,MAAM,IAAI,EAAE,CAAC,MAAM,GAAM;AACzB,UAAM,IAAI,cAAc,oDAAoD;AAAA,EAChF;AACJ;AAEA,SAAS,mBAAmB,OAA6B;AACrD,SAAO,IAAI,YAAY,IAAI,YAAY,IAAI,MAAM,IAAI,EAAE;AAC3D;AAEA,SAAS,WAAW,OAAqB,KAAiB,QAAwB;AAC9E,MAAI,IAAI;AACR,MAAI,GAAG,IAAI;AACX,MAAI,IAAI,MAAM,GAAG,CAAC;AAClB,OAAK;AACL,MAAI,GAAG,IAAI;AACX,MAAI,IAAI,MAAM,IAAI,GAAG,CAAC;AACtB,OAAK;AACL,MAAI,GAAG,IAAI,MAAM,IAAI,EAAE;AACvB,MAAI,IAAI,MAAM,IAAI,GAAG,CAAC;AACtB,OAAK,MAAM,IAAI,EAAE;AACjB,SAAO;AACX;AAEA,SAAS,UAAU,OAAmB,QAA0D;AAC5F,MAAI,IAAI;AACR,QAAM,OAAO,OAAO,OAAO,CAAC;AAC5B,OAAK;AACL,MAAI,SAAS,WAAW;AACpB,UAAM,IAAI,UAAU,+BAA+B,SAAS,SAAS,IAAI,EAAE;AAAA,EAC/E;AACA,QAAM,IAAI,UAAU,OAAO,GAAG,IAAI;AAClC,OAAK;AACL,QAAM,OAAO,OAAO,OAAO,CAAC;AAC5B,OAAK;AACL,MAAI,SAAS,WAAW;AACpB,UAAM,IAAI,UAAU,+BAA+B,SAAS,SAAS,IAAI,EAAE;AAAA,EAC/E;AACA,QAAM,IAAI,UAAU,OAAO,GAAG,IAAI;AAClC,OAAK;AACL,QAAM,OAAO,OAAO,OAAO,CAAC;AAC5B,OAAK;AACL,MAAI,SAAS,GAAG;AACZ,UAAM,IAAI,UAAU,0BAA0B;AAAA,EAClD;AACA,QAAM,IAAI,UAAU,OAAO,GAAG,IAAI;AAClC,OAAK;AAEL,SAAO;AAAA,IACH,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE;AAAA,IACvB,YAAY;AAAA,EAChB;AACJ;AASO,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQxB,YAAY,MAGV;AACE,UAAM,EAAE,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI;AAC/B,UAAM,KAAK,MAAM,KAAK,SAAS,EAAE,EAAE,QAAQ,KAAK;AAChD,UAAM,KAAK,MAAM,KAAK,SAAS,EAAE,EAAE,QAAQ,KAAK;AAChD,UAAM,OAAO,WAAW,SAAS,EAAE,YAAY,IAAI,WAAW,IAAI,WAAW,IAAI,GAAG,CAAC;AACrF,UAAM,OAAO,WAAW,SAAS,EAAE,YAAY,IAAI,WAAW,IAAI,WAAW,IAAI,GAAG,CAAC;AACrF,WAAO;AAAA,MACH,KAAK,EAAE,GAAG,IAAI,KAAK,KAAK;AAAA,MACxB,KAAK,EAAE,GAAG,IAAI,KAAK,KAAK;AAAA,IAC5B;AAAA,EACJ;AAAA,EAEA,gBAAgB,KAAmB,KAA+B;AAC9D,kBAAc,GAAG;AACjB,kBAAc,GAAG;AACjB,UAAM,MAAM,IAAI,WAAW,mBAAmB,GAAG,IAAI,mBAAmB,GAAG,CAAC;AAC5E,UAAM,SAAS,WAAW,KAAK,KAAK,CAAC;AACrC,eAAW,KAAK,KAAK,MAAM;AAC3B,WAAO;AAAA,EACX;AAAA,EAEA,YAAY,OAA6D;AACrE,UAAM,QAAQ,UAAU,OAAO,CAAC;AAChC,UAAM,SAAS,UAAU,OAAO,MAAM,UAAU;AAChD,QAAI,OAAO,eAAe,MAAM,QAAQ;AACpC,YAAM,IAAI,UAAU,sCAAsC,MAAM,SAAS,OAAO,UAAU,QAAQ;AAAA,IACtG;AACA,WAAO,EAAE,KAAK,MAAM,IAAI,KAAK,OAAO,GAAG;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,uBAAuB,MAAkF;AACrG,UAAM,QAAQ,MAAM,UAAU,KAAK,GAAG,EAAE,IAAI,MAAM,UAAU,KAAK,GAAG,CAAC,EAAE,IAAI,MAAM,UAAU,KAAK,GAAG,CAAC;AACpG,QAAI,MAAM,IAAI,GAAG;AACb,YAAM,IAAI,UAAU,wDAAwD;AAAA,IAChF;AACA,WAAO,EAAE,OAAO,OAAO,MAAM,QAAQ,KAAK,EAAE;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,YAAY,MAAuG;AAC/G,UAAM,EAAE,KAAK,GAAG,GAAG,IAAI,UAAU,IAAI;AACrC,QAAI,OAAO,MAAM,OAAO,GAAG;AACvB,YAAM,IAAI,cAAc,yBAAyB;AAAA,IACrD;AACA,QAAI,KAAK,IAAI;AACT,YAAM,IAAI,cAAc,0CAA0C;AAAA,IACtE;AACA,UAAM,KAAM,MAAM,IAAK;AACvB,QAAI,OAAO,IAAI;AACX,YAAM,IAAI,cAAc,mCAAmC;AAAA,IAC/D;AACA,UAAM,KAAK,UAAU,MAAM,SAAS,EAAE;AACtC,UAAM,UAAU,GAAG,QAAQ,KAAK;AAChC,UAAM,MAAM,WAAW,SAAS;AAAA,MAC5B,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,MACX;AAAA,MACA;AAAA,IACJ,CAAC;AACD,WAAO,EAAE,GAAG,SAAS,IAAI;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,gBAAgB,IAAkB,SAAuD;AACrF,kBAAc,EAAE;AAChB,UAAM,YAAY,QAAQ,sBAAsB,IAAI;AACpD,UAAM,MAAM,IAAI,WAAW,YAAY,mBAAmB,EAAE,CAAC;AAC7D,QAAI,IAAI;AACR,QAAI,QAAQ,qBAAqB;AAC7B,UAAI,GAAG,IAAI;AACX,UAAI,GAAG,IAAI;AACX,UAAI,GAAG,IAAI;AAAA,IACf;AACA,eAAW,IAAI,KAAK,CAAC;AACrB,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAY,OAAmB,SAAwD;AACnF,QAAI,IAAI;AACR,QAAI,QAAQ,oBAAoB;AAC5B,UAAI,MAAM,SAAS,GAAG;AAClB,cAAM,IAAI,UAAU,mDAAmD;AAAA,MAC3E;AACA,UAAI,MAAM,CAAC,MAAM,KAAQ,MAAM,CAAC,MAAM,KAAQ,MAAM,CAAC,MAAM,IAAM;AAC7D,cAAM,IAAI;AAAA,UACN,iEAAiE,MAAM,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,EAC3F,IAAI,OAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EACxC,KAAK,GAAG,CAAC;AAAA,QAClB;AAAA,MACJ;AACA,UAAI;AAAA,IACR;AACA,UAAM,EAAE,IAAI,WAAW,IAAI,UAAU,OAAO,CAAC;AAC7C,QAAI,eAAe,MAAM,QAAQ;AAC7B,YAAM,IAAI,UAAU,yCAAyC,MAAM,SAAS,UAAU,QAAQ;AAAA,IAClG;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAgB,MAAqF;AACjG,UAAM,EAAE,IAAI,WAAW,OAAO,IAAI;AAClC,WAAO,WAAW,OAAO,EAAE,KAAK,GAAG,KAAK,WAAW,GAAG,GAAG,IAAI,QAAQ,UAAU,CAAC;AAAA,EACpF;AACJ;",
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,OAAe,qBAAqB;AAC7C,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,kBAA4C;AAoBrD,MAAM,QAAQ,KAAK;AACnB,MAAM,IAAI,MAAM,GAAG;AACnB,MAAM,YAAY;AAOX,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAEjC,SAAS,OAAO,OAAmB,QAAwB;AACvD,MAAI,UAAU,MAAM,QAAQ;AACxB,UAAM,IAAI,UAAU,sCAAsC,MAAM,EAAE;AAAA,EACtE;AACA,SAAO,MAAM,MAAM;AACvB;AAEA,SAAS,UAAU,OAAmB,QAAgB,QAA4B;AAC9E,MAAI,SAAS,SAAS,MAAM,QAAQ;AAChC,UAAM,IAAI;AAAA,MACN,0BAA0B,MAAM,oBAAoB,MAAM,UAAU,MAAM,SAAS,MAAM;AAAA,IAC7F;AAAA,EACJ;AAEA,SAAO,MAAM,MAAM,QAAQ,SAAS,MAAM;AAC9C;AAEA,SAAS,cAAc,OAA2B;AAC9C,QAAM,IAAI,MAAM,GAAG,MAAM,CAAC;AAC1B,QAAM,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC;AAC9B,QAAM,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC;AAC9B,MAAI,EAAE,WAAW,aAAa,EAAE,CAAC,MAAM,GAAM;AACzC,UAAM,IAAI,cAAc,2DAA2D;AAAA,EACvF;AACA,MAAI,EAAE,WAAW,aAAa,EAAE,CAAC,MAAM,GAAM;AACzC,UAAM,IAAI,cAAc,+DAA+D;AAAA,EAC3F;AACA,MAAI,EAAE,WAAW,KAAK,EAAE,SAAS,KAAK;AAClC,UAAM,IAAI,cAAc,oCAAoC,EAAE,MAAM,EAAE;AAAA,EAC1E;AAIA,MAAI,EAAE,CAAC,MAAM,GAAM;AACf,UAAM,IAAI,cAAc,oDAAoD;AAAA,EAChF;AACJ;AAEA,SAAS,mBAAmB,OAA6B;AACrD,SAAO,IAAI,YAAY,IAAI,YAAY,IAAI,MAAM,IAAI,EAAE;AAC3D;AAEA,SAAS,WAAW,OAAqB,KAAiB,QAAwB;AAC9E,QAAM,IAAI,MAAM,GAAG,MAAM,CAAC;AAC1B,QAAM,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC;AAC9B,QAAM,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC;AAC9B,MAAI,IAAI;AACR,MAAI,GAAG,IAAI;AACX,MAAI,IAAI,GAAG,CAAC;AACZ,OAAK;AACL,MAAI,GAAG,IAAI;AACX,MAAI,IAAI,GAAG,CAAC;AACZ,OAAK;AACL,MAAI,GAAG,IAAI,EAAE;AACb,MAAI,IAAI,GAAG,CAAC;AACZ,OAAK,EAAE;AACP,SAAO;AACX;AAEA,SAAS,UAAU,OAAmB,QAA0D;AAC5F,MAAI,IAAI;AACR,QAAM,OAAO,OAAO,OAAO,CAAC;AAC5B,OAAK;AACL,MAAI,SAAS,WAAW;AACpB,UAAM,IAAI,UAAU,+BAA+B,SAAS,SAAS,IAAI,EAAE;AAAA,EAC/E;AACA,QAAM,IAAI,UAAU,OAAO,GAAG,IAAI;AAClC,OAAK;AACL,QAAM,OAAO,OAAO,OAAO,CAAC;AAC5B,OAAK;AACL,MAAI,SAAS,WAAW;AACpB,UAAM,IAAI,UAAU,+BAA+B,SAAS,SAAS,IAAI,EAAE;AAAA,EAC/E;AACA,QAAM,IAAI,UAAU,OAAO,GAAG,IAAI;AAClC,OAAK;AACL,QAAM,OAAO,OAAO,OAAO,CAAC;AAC5B,OAAK;AACL,MAAI,SAAS,GAAG;AACZ,UAAM,IAAI,UAAU,0BAA0B;AAAA,EAClD;AACA,QAAM,IAAI,UAAU,OAAO,GAAG,IAAI;AAClC,OAAK;AAEL,SAAO;AAAA,IACH,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE;AAAA,IACvB,YAAY;AAAA,EAChB;AACJ;AASO,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQxB,MAAM,YACF,QACA,MAID;AACC,UAAM,EAAE,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI;AAC/B,UAAM,KAAK,MAAM,KAAK,SAAS,EAAE,EAAE,QAAQ,KAAK;AAChD,UAAM,KAAK,MAAM,KAAK,SAAS,EAAE,EAAE,QAAQ,KAAK;AAChD,UAAM,OAAO,MAAM,WAAW,SAAS,QAAQ,EAAE,YAAY,IAAI,WAAW,IAAI,WAAW,IAAI,GAAG,CAAC;AACnG,UAAM,OAAO,MAAM,WAAW,SAAS,QAAQ,EAAE,YAAY,IAAI,WAAW,IAAI,WAAW,IAAI,GAAG,CAAC;AACnG,WAAO;AAAA,MACH,KAAK,EAAE,GAAG,IAAI,KAAK,KAAK;AAAA,MACxB,KAAK,EAAE,GAAG,IAAI,KAAK,KAAK;AAAA,IAC5B;AAAA,EACJ;AAAA,EAEA,gBAAgB,KAAmB,KAA0B;AACzD,kBAAc,GAAG;AACjB,kBAAc,GAAG;AACjB,UAAM,MAAM,IAAI,WAAW,mBAAmB,GAAG,IAAI,mBAAmB,GAAG,CAAC;AAC5E,UAAM,SAAS,WAAW,KAAK,KAAK,CAAC;AACrC,eAAW,KAAK,KAAK,MAAM;AAC3B,WAAO;AAAA,EACX;AAAA,EAEA,YAAY,OAAwD;AAChE,UAAM,MAAM,MAAM,GAAG,KAAK;AAC1B,UAAM,QAAQ,UAAU,KAAK,CAAC;AAC9B,UAAM,SAAS,UAAU,KAAK,MAAM,UAAU;AAC9C,QAAI,OAAO,eAAe,IAAI,QAAQ;AAClC,YAAM,IAAI,UAAU,sCAAsC,IAAI,SAAS,OAAO,UAAU,QAAQ;AAAA,IACpG;AACA,WAAO,EAAE,KAAK,MAAM,IAAI,KAAK,OAAO,GAAG;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,uBAAuB,MAAmE;AACtF,UAAM,MAAM,MAAM,GAAG,KAAK,GAAG;AAC7B,UAAM,MAAM,MAAM,GAAG,KAAK,GAAG;AAC7B,UAAM,MAAM,MAAM,GAAG,KAAK,GAAG;AAC7B,UAAM,QAAQ,MAAM,UAAU,GAAG,EAAE,IAAI,MAAM,UAAU,GAAG,CAAC,EAAE,IAAI,MAAM,UAAU,GAAG,CAAC;AACrF,QAAI,MAAM,IAAI,GAAG;AACb,YAAM,IAAI,UAAU,wDAAwD;AAAA,IAChF;AACA,WAAO,EAAE,OAAO,OAAO,MAAM,QAAQ,KAAK,EAAE;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,YACF,QACA,MACqB;AACrB,UAAM,EAAE,KAAK,GAAG,GAAG,IAAI,UAAU,IAAI;AACrC,QAAI,OAAO,MAAM,OAAO,GAAG;AACvB,YAAM,IAAI,cAAc,yBAAyB;AAAA,IACrD;AACA,QAAI,KAAK,IAAI;AACT,YAAM,IAAI,cAAc,0CAA0C;AAAA,IACtE;AACA,UAAM,KAAM,MAAM,IAAK;AACvB,QAAI,OAAO,IAAI;AACX,YAAM,IAAI,cAAc,mCAAmC;AAAA,IAC/D;AACA,UAAM,KAAK,UAAU,MAAM,SAAS,EAAE;AACtC,UAAM,UAAU,GAAG,QAAQ,KAAK;AAChC,UAAM,MAAM,MAAM,WAAW,SAAS,QAAQ;AAAA,MAC1C,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,MACX;AAAA,MACA;AAAA,IACJ,CAAC;AACD,WAAO,EAAE,GAAG,SAAS,IAAI;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,gBAAgB,IAAkB,SAAkD;AAChF,kBAAc,EAAE;AAChB,UAAM,YAAY,QAAQ,sBAAsB,IAAI;AACpD,UAAM,MAAM,IAAI,WAAW,YAAY,mBAAmB,EAAE,CAAC;AAC7D,QAAI,IAAI;AACR,QAAI,QAAQ,qBAAqB;AAC7B,UAAI,GAAG,IAAI;AACX,UAAI,GAAG,IAAI;AACX,UAAI,GAAG,IAAI;AAAA,IACf;AACA,eAAW,IAAI,KAAK,CAAC;AACrB,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAY,OAAc,SAAwD;AAC9E,UAAM,MAAM,MAAM,GAAG,KAAK;AAC1B,QAAI,IAAI;AACR,QAAI,QAAQ,oBAAoB;AAC5B,UAAI,IAAI,SAAS,GAAG;AAChB,cAAM,IAAI,UAAU,mDAAmD;AAAA,MAC3E;AACA,UAAI,IAAI,CAAC,MAAM,KAAQ,IAAI,CAAC,MAAM,KAAQ,IAAI,CAAC,MAAM,IAAM;AACvD,cAAM,IAAI;AAAA,UACN,iEAAiE,MAAM,KAAK,IAAI,SAAS,GAAG,CAAC,CAAC,EACzF,IAAI,OAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EACxC,KAAK,GAAG,CAAC;AAAA,QAClB;AAAA,MACJ;AACA,UAAI;AAAA,IACR;AACA,UAAM,EAAE,IAAI,WAAW,IAAI,UAAU,KAAK,CAAC;AAC3C,QAAI,eAAe,IAAI,QAAQ;AAC3B,YAAM,IAAI,UAAU,yCAAyC,IAAI,SAAS,UAAU,QAAQ;AAAA,IAChG;AACA,WAAO;AAAA,EACX;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,gBACF,QACA,MACgB;AAChB,UAAM,EAAE,IAAI,WAAW,OAAO,IAAI;AAClC,WAAO,MAAM,WAAW,OAAO,QAAQ,EAAE,KAAK,GAAG,KAAK,WAAW,GAAG,GAAG,IAAI,QAAQ,UAAU,CAAC;AAAA,EAClG;AACJ;",
   "names": []
 }

package/dist/esm/dtls/ecjpake/SchnorrZkp.d.ts

@@ -3,6 +3,7 @@
  * Copyright 2022-2026 Matter.js Authors
  * SPDX-License-Identifier: Apache-2.0
  */
+import { Bytes, Crypto } from "@matter/general";
 /**
  * Schnorr zero-knowledge proof of knowledge of `x` such that `X = x*G`,
  * matching the EC-JPAKE wire shape used by mbedTLS v3.6.6 / draft-cragie-tls-ecjpake-01.
@@ -16,9 +17,9 @@
  */
 export interface SchnorrZkp {
     /** SEC1-uncompressed encoding of `V = v*G`. */
-    V: Uint8Array;
+    V: Bytes;
     /** Minimal big-endian encoding of `r = v - h*x mod n`. */
-    r: Uint8Array;
+    r: Bytes;
 }
 declare const Point: import("@noble/curves/abstract/weierstrass.js").WeierstrassPointCons<bigint>;
 /**
@@ -29,7 +30,7 @@ declare const Point: import("@noble/curves/abstract/weierstrass.js").Weierstrass
  */
 export interface SchnorrZkpGenerator {
     point: InstanceType<typeof Point>;
-    bytes: Uint8Array;
+    bytes: Bytes;
 }
 export declare const SchnorrZkp: {
     /**
@@ -42,19 +43,19 @@ export declare const SchnorrZkp: {
      * `ephemeral` is the per-proof scalar `v`; in production it must be sampled
      * uniformly from `[1, n-1]`. Tests pass a fixed value so the proof is deterministic.
      */
-    generate(args: {
+    generate(crypto: Crypto, args: {
         privateKey: bigint;
-        publicKey: Uint8Array;
+        publicKey: Bytes;
         ephemeral: bigint;
         id: string;
         generator?: SchnorrZkpGenerator;
-    }): SchnorrZkp;
-    verify(args: {
+    }): Promise<SchnorrZkp>;
+    verify(crypto: Crypto, args: {
         zkp: SchnorrZkp;
-        publicKey: Uint8Array;
+        publicKey: Bytes;
         id: string;
         generator?: SchnorrZkpGenerator;
-    }): boolean;
+    }): Promise<boolean>;
 };
 export {};
 //# sourceMappingURL=SchnorrZkp.d.ts.map

package/dist/esm/dtls/ecjpake/SchnorrZkp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SchnorrZkp.d.ts","sourceRoot":"","sources":["../../../../src/dtls/ecjpake/SchnorrZkp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACvB,+CAA+C;IAC/C,CAAC,EAAE,UAAU,CAAC;IACd,0DAA0D;IAC1D,CAAC,EAAE,UAAU,CAAC;CACjB;AAED,QAAA,MAAM,KAAK,8EAAa,CAAC;AAiFzB;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAChC,KAAK,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IAClC,KAAK,EAAE,UAAU,CAAC;CACrB;AAYD,eAAO,MAAM,UAAU;IACnB;;;;;;;;;OASG;IACH,QAAQ,OAAO;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,UAAU,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,CAAC,EAAE,mBAAmB,CAAC;KACnC,GAAG,UAAU;IAkBd,MAAM,OAAO;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO;CA0BxG,CAAC"}
+{"version":3,"file":"SchnorrZkp.d.ts","sourceRoot":"","sources":["../../../../src/dtls/ecjpake/SchnorrZkp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAiB,MAAM,iBAAiB,CAAC;AAI/D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACvB,+CAA+C;IAC/C,CAAC,EAAE,KAAK,CAAC;IACT,0DAA0D;IAC1D,CAAC,EAAE,KAAK,CAAC;CACZ;AAED,QAAA,MAAM,KAAK,8EAAa,CAAC;AAwFzB;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAChC,KAAK,EAAE,YAAY,CAAC,OAAO,KAAK,CAAC,CAAC;IAClC,KAAK,EAAE,KAAK,CAAC;CAChB;AAaD,eAAO,MAAM,UAAU;IACnB;;;;;;;;;OASG;IACG,QAAQ,SACF,MAAM,QACR;QACF,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,KAAK,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,CAAC,EAAE,mBAAmB,CAAC;KACnC,GACF,OAAO,CAAC,UAAU,CAAC;IAkBhB,MAAM,SACA,MAAM,QACR;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,KAAK,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;KAAE,GACzF,OAAO,CAAC,OAAO,CAAC;CA0Bb,CAAC"}

package/dist/esm/dtls/ecjpake/SchnorrZkp.js

@@ -3,9 +3,8 @@
  * Copyright 2022-2026 Matter.js Authors
  * SPDX-License-Identifier: Apache-2.0
  */
-import { InternalError } from "@matter/general";
+import { Bytes, InternalError } from "@matter/general";
 import { p256 } from "@noble/curves/nist.js";
-import { sha256 } from "@noble/hashes/sha2.js";
 import { DtlsError } from "../channel/DtlsChannel.js";
 const Point = p256.Point;
 const N = Point.Fn.ORDER;
@@ -15,8 +14,11 @@ function be32(value) {
   new DataView(out.buffer).setUint32(0, value, false);
   return out;
 }
-function hashChallenge(args) {
-  const { gBytes, vBytes, xBytes, idBytes } = args;
+async function hashChallenge(crypto, args) {
+  const gBytes = Bytes.of(args.gBytes);
+  const vBytes = Bytes.of(args.vBytes);
+  const xBytes = Bytes.of(args.xBytes);
+  const idBytes = Bytes.of(args.idBytes);
   const total = 4 + gBytes.length + 4 + vBytes.length + 4 + xBytes.length + 4 + idBytes.length;
   const buf = new Uint8Array(total);
   let p = 0;
@@ -35,7 +37,7 @@ function hashChallenge(args) {
   buf.set(be32(idBytes.length), p);
   p += 4;
   buf.set(idBytes, p);
-  const digest = sha256(buf);
+  const digest = Bytes.of(await crypto.computeHash(buf));
   let h = 0n;
   for (const byte of digest) {
     h = h << 8n | BigInt(byte);
@@ -59,7 +61,7 @@ function bigintToMinimalBE(value) {
 }
 function bigintFromBE(bytes) {
   let v = 0n;
-  for (const byte of bytes) {
+  for (const byte of Bytes.of(bytes)) {
     v = v << 8n | BigInt(byte);
   }
   return v;
@@ -68,16 +70,18 @@ function getBaseGBytes() {
   return Point.BASE.toBytes(false);
 }
 function pointFromBytes(bytes) {
-  if (bytes.length !== POINT_LEN || bytes[0] !== 4) {
+  const buf = Bytes.of(bytes);
+  if (buf.length !== POINT_LEN || buf[0] !== 4) {
     throw new DtlsError(
-      `expected SEC1-uncompressed P-256 point (65 bytes, 0x04 prefix), got len=${bytes.length} head=${bytes[0]}`
+      `expected SEC1-uncompressed P-256 point (65 bytes, 0x04 prefix), got len=${buf.length} head=${buf[0]}`
     );
   }
-  return Point.fromBytes(bytes);
+  return Point.fromBytes(buf);
 }
 function generatorOrBase(g) {
   if (g) {
-    if (g.bytes.length !== POINT_LEN || g.bytes[0] !== 4) {
+    const bytes = Bytes.of(g.bytes);
+    if (bytes.length !== POINT_LEN || bytes[0] !== 4) {
       throw new InternalError("generator bytes must be SEC1-uncompressed P-256 (65 bytes, 0x04 prefix)");
     }
     return g;
@@ -95,7 +99,7 @@ const SchnorrZkp = {
    * `ephemeral` is the per-proof scalar `v`; in production it must be sampled
    * uniformly from `[1, n-1]`. Tests pass a fixed value so the proof is deterministic.
    */
-  generate(args) {
+  async generate(crypto, args) {
     const { privateKey, publicKey, ephemeral, id } = args;
     if (ephemeral <= 0n || ephemeral >= N) {
       throw new InternalError("ephemeral scalar must be in [1, n-1]");
@@ -107,11 +111,11 @@ const SchnorrZkp = {
     const V = g.point.multiply(ephemeral);
     const vBytes = V.toBytes(false);
     const idBytes = new TextEncoder().encode(id);
-    const h = hashChallenge({ gBytes: g.bytes, vBytes, xBytes: publicKey, idBytes });
+    const h = await hashChallenge(crypto, { gBytes: g.bytes, vBytes, xBytes: publicKey, idBytes });
     const rBig = ((ephemeral - h * privateKey % N) % N + N) % N;
     return { V: vBytes, r: bigintToMinimalBE(rBig) };
   },
-  verify(args) {
+  async verify(crypto, args) {
     const { zkp, publicKey, id } = args;
     const idBytes = new TextEncoder().encode(id);
     let g;
@@ -131,7 +135,7 @@ const SchnorrZkp = {
     if (r >= N) {
       return false;
     }
-    const h = hashChallenge({ gBytes: g.bytes, vBytes: zkp.V, xBytes: publicKey, idBytes });
+    const h = await hashChallenge(crypto, { gBytes: g.bytes, vBytes: zkp.V, xBytes: publicKey, idBytes });
     const lhs = g.point.multiplyUnsafe(r).add(X.multiplyUnsafe(h));
     return lhs.equals(V);
   }

package/dist/esm/dtls/ecjpake/SchnorrZkp.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../../../src/dtls/ecjpake/SchnorrZkp.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,iBAAiB;AAoB1B,MAAM,QAAQ,KAAK;AACnB,MAAM,IAAI,MAAM,GAAG;AACnB,MAAM,YAAY;AAElB,SAAS,KAAK,OAA2B;AACrC,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,MAAI,SAAS,IAAI,MAAM,EAAE,UAAU,GAAG,OAAO,KAAK;AAClD,SAAO;AACX;AAEA,SAAS,cAAc,MAKZ;AACP,QAAM,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,IAAI;AAC5C,QAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,OAAO,SAAS,IAAI,OAAO,SAAS,IAAI,QAAQ;AACtF,QAAM,MAAM,IAAI,WAAW,KAAK;AAChC,MAAI,IAAI;AACR,MAAI,IAAI,KAAK,OAAO,MAAM,GAAG,CAAC;AAC9B,OAAK;AACL,MAAI,IAAI,QAAQ,CAAC;AACjB,OAAK,OAAO;AACZ,MAAI,IAAI,KAAK,OAAO,MAAM,GAAG,CAAC;AAC9B,OAAK;AACL,MAAI,IAAI,QAAQ,CAAC;AACjB,OAAK,OAAO;AACZ,MAAI,IAAI,KAAK,OAAO,MAAM,GAAG,CAAC;AAC9B,OAAK;AACL,MAAI,IAAI,QAAQ,CAAC;AACjB,OAAK,OAAO;AACZ,MAAI,IAAI,KAAK,QAAQ,MAAM,GAAG,CAAC;AAC/B,OAAK;AACL,MAAI,IAAI,SAAS,CAAC;AAElB,QAAM,SAAS,OAAO,GAAG;AACzB,MAAI,IAAI;AACR,aAAW,QAAQ,QAAQ;AACvB,QAAK,KAAK,KAAM,OAAO,IAAI;AAAA,EAC/B;AACA,SAAO,IAAI;AACf;AAEA,SAAS,kBAAkB,OAA2B;AAClD,MAAI,QAAQ,IAAI;AACZ,UAAM,IAAI,cAAc,8CAA8C;AAAA,EAC1E;AACA,MAAI,UAAU,IAAI;AACd,WAAO,IAAI,WAAW,CAAC;AAAA,EAC3B;AACA,QAAM,MAAM,IAAI,MAAc;AAC9B,MAAI,IAAI;AACR,SAAO,IAAI,IAAI;AACX,QAAI,KAAK,OAAO,IAAI,KAAK,CAAC;AAC1B,UAAM;AAAA,EACV;AACA,SAAO,WAAW,KAAK,IAAI,QAAQ,CAAC;AACxC;AAEA,SAAS,aAAa,OAA2B;AAC7C,MAAI,IAAI;AACR,aAAW,QAAQ,OAAO;AACtB,QAAK,KAAK,KAAM,OAAO,IAAI;AAAA,EAC/B;AACA,SAAO;AACX;AAEA,SAAS,gBAA4B;AACjC,SAAO,MAAM,KAAK,QAAQ,KAAK;AACnC;AAEA,SAAS,eAAe,OAA+C;AACnE,MAAI,MAAM,WAAW,aAAa,MAAM,CAAC,MAAM,GAAM;AACjD,UAAM,IAAI;AAAA,MACN,2EAA2E,MAAM,MAAM,SAAS,MAAM,CAAC,CAAC;AAAA,IAC5G;AAAA,EACJ;AACA,SAAO,MAAM,UAAU,KAAK;AAChC;AAaA,SAAS,gBAAgB,GAA8C;AACnE,MAAI,GAAG;AACH,QAAI,EAAE,MAAM,WAAW,aAAa,EAAE,MAAM,CAAC,MAAM,GAAM;AACrD,YAAM,IAAI,cAAc,yEAAyE;AAAA,IACrG;AACA,WAAO;AAAA,EACX;AACA,SAAO,EAAE,OAAO,MAAM,MAAM,OAAO,cAAc,EAAE;AACvD;AAEO,MAAM,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWtB,SAAS,MAMM;AACX,UAAM,EAAE,YAAY,WAAW,WAAW,GAAG,IAAI;AACjD,QAAI,aAAa,MAAM,aAAa,GAAG;AACnC,YAAM,IAAI,cAAc,sCAAsC;AAAA,IAClE;AACA,QAAI,cAAc,MAAM,cAAc,GAAG;AACrC,YAAM,IAAI,cAAc,wCAAwC;AAAA,IACpE;AACA,UAAM,IAAI,gBAAgB,KAAK,SAAS;AACxC,UAAM,IAAI,EAAE,MAAM,SAAS,SAAS;AACpC,UAAM,SAAS,EAAE,QAAQ,KAAK;AAC9B,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,EAAE;AAC3C,UAAM,IAAI,cAAc,EAAE,QAAQ,EAAE,OAAO,QAAQ,QAAQ,WAAW,QAAQ,CAAC;AAE/E,UAAM,SAAU,YAAc,IAAI,aAAc,KAAM,IAAK,KAAK;AAChE,WAAO,EAAE,GAAG,QAAQ,GAAG,kBAAkB,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,OAAO,MAAwG;AAC3G,UAAM,EAAE,KAAK,WAAW,GAAG,IAAI;AAC/B,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,EAAE;AAC3C,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI;AACA,UAAI,gBAAgB,KAAK,SAAS;AAClC,UAAI,eAAe,IAAI,CAAC;AACxB,UAAI,eAAe,SAAS;AAAA,IAChC,QAAQ;AACJ,aAAO;AAAA,IACX;AACA,QAAI,EAAE,IAAI,KAAK,EAAE,IAAI,GAAG;AACpB,aAAO;AAAA,IACX;AACA,UAAM,IAAI,aAAa,IAAI,CAAC;AAC5B,QAAI,KAAK,GAAG;AACR,aAAO;AAAA,IACX;AACA,UAAM,IAAI,cAAc,EAAE,QAAQ,EAAE,OAAO,QAAQ,IAAI,GAAG,QAAQ,WAAW,QAAQ,CAAC;AAGtF,UAAM,MAAM,EAAE,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;AAC7D,WAAO,IAAI,OAAO,CAAC;AAAA,EACvB;AACJ;",
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,OAAe,qBAAqB;AAC7C,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAoB1B,MAAM,QAAQ,KAAK;AACnB,MAAM,IAAI,MAAM,GAAG;AACnB,MAAM,YAAY;AAElB,SAAS,KAAK,OAA2B;AACrC,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,MAAI,SAAS,IAAI,MAAM,EAAE,UAAU,GAAG,OAAO,KAAK;AAClD,SAAO;AACX;AAEA,eAAe,cACX,QACA,MAMe;AACf,QAAM,SAAS,MAAM,GAAG,KAAK,MAAM;AACnC,QAAM,SAAS,MAAM,GAAG,KAAK,MAAM;AACnC,QAAM,SAAS,MAAM,GAAG,KAAK,MAAM;AACnC,QAAM,UAAU,MAAM,GAAG,KAAK,OAAO;AACrC,QAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,OAAO,SAAS,IAAI,OAAO,SAAS,IAAI,QAAQ;AACtF,QAAM,MAAM,IAAI,WAAW,KAAK;AAChC,MAAI,IAAI;AACR,MAAI,IAAI,KAAK,OAAO,MAAM,GAAG,CAAC;AAC9B,OAAK;AACL,MAAI,IAAI,QAAQ,CAAC;AACjB,OAAK,OAAO;AACZ,MAAI,IAAI,KAAK,OAAO,MAAM,GAAG,CAAC;AAC9B,OAAK;AACL,MAAI,IAAI,QAAQ,CAAC;AACjB,OAAK,OAAO;AACZ,MAAI,IAAI,KAAK,OAAO,MAAM,GAAG,CAAC;AAC9B,OAAK;AACL,MAAI,IAAI,QAAQ,CAAC;AACjB,OAAK,OAAO;AACZ,MAAI,IAAI,KAAK,QAAQ,MAAM,GAAG,CAAC;AAC/B,OAAK;AACL,MAAI,IAAI,SAAS,CAAC;AAElB,QAAM,SAAS,MAAM,GAAG,MAAM,OAAO,YAAY,GAAG,CAAC;AACrD,MAAI,IAAI;AACR,aAAW,QAAQ,QAAQ;AACvB,QAAK,KAAK,KAAM,OAAO,IAAI;AAAA,EAC/B;AACA,SAAO,IAAI;AACf;AAEA,SAAS,kBAAkB,OAA2B;AAClD,MAAI,QAAQ,IAAI;AACZ,UAAM,IAAI,cAAc,8CAA8C;AAAA,EAC1E;AACA,MAAI,UAAU,IAAI;AACd,WAAO,IAAI,WAAW,CAAC;AAAA,EAC3B;AACA,QAAM,MAAM,IAAI,MAAc;AAC9B,MAAI,IAAI;AACR,SAAO,IAAI,IAAI;AACX,QAAI,KAAK,OAAO,IAAI,KAAK,CAAC;AAC1B,UAAM;AAAA,EACV;AACA,SAAO,WAAW,KAAK,IAAI,QAAQ,CAAC;AACxC;AAEA,SAAS,aAAa,OAAsB;AACxC,MAAI,IAAI;AACR,aAAW,QAAQ,MAAM,GAAG,KAAK,GAAG;AAChC,QAAK,KAAK,KAAM,OAAO,IAAI;AAAA,EAC/B;AACA,SAAO;AACX;AAEA,SAAS,gBAA4B;AACjC,SAAO,MAAM,KAAK,QAAQ,KAAK;AACnC;AAEA,SAAS,eAAe,OAA0C;AAC9D,QAAM,MAAM,MAAM,GAAG,KAAK;AAC1B,MAAI,IAAI,WAAW,aAAa,IAAI,CAAC,MAAM,GAAM;AAC7C,UAAM,IAAI;AAAA,MACN,2EAA2E,IAAI,MAAM,SAAS,IAAI,CAAC,CAAC;AAAA,IACxG;AAAA,EACJ;AACA,SAAO,MAAM,UAAU,GAAG;AAC9B;AAaA,SAAS,gBAAgB,GAA8C;AACnE,MAAI,GAAG;AACH,UAAM,QAAQ,MAAM,GAAG,EAAE,KAAK;AAC9B,QAAI,MAAM,WAAW,aAAa,MAAM,CAAC,MAAM,GAAM;AACjD,YAAM,IAAI,cAAc,yEAAyE;AAAA,IACrG;AACA,WAAO;AAAA,EACX;AACA,SAAO,EAAE,OAAO,MAAM,MAAM,OAAO,cAAc,EAAE;AACvD;AAEO,MAAM,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWtB,MAAM,SACF,QACA,MAOmB;AACnB,UAAM,EAAE,YAAY,WAAW,WAAW,GAAG,IAAI;AACjD,QAAI,aAAa,MAAM,aAAa,GAAG;AACnC,YAAM,IAAI,cAAc,sCAAsC;AAAA,IAClE;AACA,QAAI,cAAc,MAAM,cAAc,GAAG;AACrC,YAAM,IAAI,cAAc,wCAAwC;AAAA,IACpE;AACA,UAAM,IAAI,gBAAgB,KAAK,SAAS;AACxC,UAAM,IAAI,EAAE,MAAM,SAAS,SAAS;AACpC,UAAM,SAAS,EAAE,QAAQ,KAAK;AAC9B,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,EAAE;AAC3C,UAAM,IAAI,MAAM,cAAc,QAAQ,EAAE,QAAQ,EAAE,OAAO,QAAQ,QAAQ,WAAW,QAAQ,CAAC;AAE7F,UAAM,SAAU,YAAc,IAAI,aAAc,KAAM,IAAK,KAAK;AAChE,WAAO,EAAE,GAAG,QAAQ,GAAG,kBAAkB,IAAI,EAAE;AAAA,EACnD;AAAA,EAEA,MAAM,OACF,QACA,MACgB;AAChB,UAAM,EAAE,KAAK,WAAW,GAAG,IAAI;AAC/B,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,EAAE;AAC3C,QAAI;AACJ,QAAI;AACJ,QAAI;AACJ,QAAI;AACA,UAAI,gBAAgB,KAAK,SAAS;AAClC,UAAI,eAAe,IAAI,CAAC;AACxB,UAAI,eAAe,SAAS;AAAA,IAChC,QAAQ;AACJ,aAAO;AAAA,IACX;AACA,QAAI,EAAE,IAAI,KAAK,EAAE,IAAI,GAAG;AACpB,aAAO;AAAA,IACX;AACA,UAAM,IAAI,aAAa,IAAI,CAAC;AAC5B,QAAI,KAAK,GAAG;AACR,aAAO;AAAA,IACX;AACA,UAAM,IAAI,MAAM,cAAc,QAAQ,EAAE,QAAQ,EAAE,OAAO,QAAQ,IAAI,GAAG,QAAQ,WAAW,QAAQ,CAAC;AAGpG,UAAM,MAAM,EAAE,MAAM,eAAe,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;AAC7D,WAAO,IAAI,OAAO,CAAC;AAAA,EACvB;AACJ;",
   "names": []
 }

package/dist/esm/dtls/handshake/ChangeCipherSpec.d.ts

@@ -3,6 +3,7 @@
  * Copyright 2022-2026 Matter.js Authors
  * SPDX-License-Identifier: Apache-2.0
  */
+import { Bytes } from "@matter/general";
 /**
  * ChangeCipherSpec is *not* a handshake message — it sits at the record layer
  * under its own ContentType (20) and consists of a single byte 0x01
@@ -18,6 +19,6 @@
  */
 export declare const CHANGE_CIPHER_SPEC_BODY: Readonly<Uint8Array>;
 export declare const ChangeCipherSpec: {
-    parse(body: Uint8Array): void;
+    parse(rawBody: Bytes): void;
 };
 //# sourceMappingURL=ChangeCipherSpec.d.ts.map

package/dist/esm/dtls/handshake/ChangeCipherSpec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ChangeCipherSpec.d.ts","sourceRoot":"","sources":["../../../../src/dtls/handshake/ChangeCipherSpec.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,UAAU,CAA0B,CAAC;AAEpF,eAAO,MAAM,gBAAgB;IACzB,KAAK,OAAO,UAAU,GAAG,IAAI;CAOvB,CAAC"}
+{"version":3,"file":"ChangeCipherSpec.d.ts","sourceRoot":"","sources":["../../../../src/dtls/handshake/ChangeCipherSpec.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAGxC;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,UAAU,CAA0B,CAAC;AAEpF,eAAO,MAAM,gBAAgB;IACzB,KAAK,UAAU,KAAK,GAAG,IAAI;CAQrB,CAAC"}

package/dist/esm/dtls/handshake/ChangeCipherSpec.js

@@ -3,10 +3,12 @@
  * Copyright 2022-2026 Matter.js Authors
  * SPDX-License-Identifier: Apache-2.0
  */
+import { Bytes } from "@matter/general";
 import { DtlsError } from "../channel/DtlsChannel.js";
 const CHANGE_CIPHER_SPEC_BODY = new Uint8Array([1]);
 const ChangeCipherSpec = {
-  parse(body) {
+  parse(rawBody) {
+    const body = Bytes.of(rawBody);
     if (body.length !== 1 || body[0] !== 1) {
       throw new DtlsError(
         `ChangeCipherSpec must be a single 0x01 byte, got len=${body.length} first=${body[0] ?? "undefined"}`

package/dist/esm/dtls/handshake/ChangeCipherSpec.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../../../src/dtls/handshake/ChangeCipherSpec.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,iBAAiB;AAenB,MAAM,0BAAgD,IAAI,WAAW,CAAC,CAAI,CAAC;AAE3E,MAAM,mBAAmB;AAAA,EAC5B,MAAM,MAAwB;AAC1B,QAAI,KAAK,WAAW,KAAK,KAAK,CAAC,MAAM,GAAM;AACvC,YAAM,IAAI;AAAA,QACN,wDAAwD,KAAK,MAAM,UAAU,KAAK,CAAC,KAAK,WAAW;AAAA,MACvG;AAAA,IACJ;AAAA,EACJ;AACJ;",
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAAS,aAAa;AACtB,SAAS,iBAAiB;AAenB,MAAM,0BAAgD,IAAI,WAAW,CAAC,CAAI,CAAC;AAE3E,MAAM,mBAAmB;AAAA,EAC5B,MAAM,SAAsB;AACxB,UAAM,OAAO,MAAM,GAAG,OAAO;AAC7B,QAAI,KAAK,WAAW,KAAK,KAAK,CAAC,MAAM,GAAM;AACvC,YAAM,IAAI;AAAA,QACN,wDAAwD,KAAK,MAAM,UAAU,KAAK,CAAC,KAAK,WAAW;AAAA,MACvG;AAAA,IACJ;AAAA,EACJ;AACJ;",
   "names": []
 }

package/dist/esm/dtls/handshake/ClientHelloMessage.d.ts

@@ -3,6 +3,29 @@
  * Copyright 2022-2026 Matter.js Authors
  * SPDX-License-Identifier: Apache-2.0
  */
+/**
+ * DTLS 1.2 ClientHello body builder for `TLS_ECJPAKE_WITH_AES_128_CCM_8`
+ * (RFC 6347 §4.2.1, RFC 5246 §7.4.1.2). The shape is fixed:
+ *
+ * ```
+ * ProtocolVersion client_version    // 2 bytes = 0xfe 0xfd (DTLS 1.2)
+ * Random random                     // 32 bytes (caller-supplied)
+ * opaque session_id<0..32>          // length(1) || body — always empty for us
+ * opaque cookie<0..2^8-1>           // length(1) || body (DTLS-only, RFC 6347 §4.2.2)
+ * CipherSuite cipher_suites<2..>    // length(2) || N×2 bytes — exactly [0xC0, 0xFF]
+ * opaque compression<1..>           // length(1) || N bytes — exactly [0x00]
+ * Extension extensions<0..2^16-1>   // length(2) || extension entries
+ * ```
+ *
+ * Each Extension is `uint16 extension_type || opaque extension_data<0..2^16-1>`.
+ * Required extensions:
+ * - `ecjpake_kkpp` (0x0100, draft-cragie-tls-ecjpake-01) — round-1 ECJPAKEKeyKPPairList payload
+ * - `supported_groups` (0x000a, RFC 8422 §5.1.1) — peer requires this even though the cipher
+ *   suite hardcodes P-256, otherwise mbedtls rejects with "no common elliptic curve"
+ * - `ec_point_formats` (0x000b, RFC 8422 §5.1.2) — uncompressed-only; mbedtls is lenient if
+ *   omitted but real BRs may not be
+ */
+import { Bytes } from "@matter/general";
 /** TLS extension type for `ecjpake_kkpp` (draft-cragie-tls-ecjpake-01 §3). */
 export declare const EXTENSION_TYPE_ECJPAKE_KKPP = 256;
 /** TLS extension type for `supported_groups` (RFC 8422 §5.1.1, formerly `elliptic_curves`). */
@@ -15,20 +38,20 @@ export declare const NAMED_CURVE_SECP256R1 = 23;
 export declare const CIPHER_SUITE_ECJPAKE_WITH_AES_128_CCM_8 = 49407;
 export interface ClientHelloFields {
     /** 32 random bytes that will become `ClientHello.random`. */
-    random: Uint8Array;
+    random: Bytes;
     /**
      * DTLS cookie returned by `HelloVerifyRequest`, or empty on the first ClientHello
      * (RFC 6347 §4.2.1).
      */
-    cookie: Uint8Array;
+    cookie: Bytes;
     /** `ecjpake_kkpp` extension payload — the round-1 ECJPAKEKeyKPPairList bytes. */
-    ecjpakeKkpp: Uint8Array;
+    ecjpakeKkpp: Bytes;
 }
 export declare const ClientHelloMessage: {
     /**
      * Serialise a ClientHello body. Caller wraps the result in a
      * {@link HandshakeMessage} and a `DtlsRecord` of `ContentType.HANDSHAKE`.
      */
-    build(fields: ClientHelloFields): Uint8Array;
+    build(fields: ClientHelloFields): Bytes;
 };
 //# sourceMappingURL=ClientHelloMessage.d.ts.map

package/dist/esm/dtls/handshake/ClientHelloMessage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ClientHelloMessage.d.ts","sourceRoot":"","sources":["../../../../src/dtls/handshake/ClientHelloMessage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA2BH,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B,MAAS,CAAC;AAElD,+FAA+F;AAC/F,eAAO,MAAM,+BAA+B,KAAS,CAAC;AAEtD,mEAAmE;AACnE,eAAO,MAAM,+BAA+B,KAAS,CAAC;AAEtD,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,KAAS,CAAC;AAE5C,gGAAgG;AAChG,eAAO,MAAM,uCAAuC,QAAS,CAAC;AAQ9D,MAAM,WAAW,iBAAiB;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,UAAU,CAAC;IACnB;;;OAGG;IACH,MAAM,EAAE,UAAU,CAAC;IACnB,iFAAiF;IACjF,WAAW,EAAE,UAAU,CAAC;CAC3B;AAOD,eAAO,MAAM,kBAAkB;IAC3B;;;OAGG;IACH,KAAK,SAAS,iBAAiB,GAAG,UAAU;CA2EtC,CAAC"}
+{"version":3,"file":"ClientHelloMessage.d.ts","sourceRoot":"","sources":["../../../../src/dtls/handshake/ClientHelloMessage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,KAAK,EAAiB,MAAM,iBAAiB,CAAC;AAEvD,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B,MAAS,CAAC;AAElD,+FAA+F;AAC/F,eAAO,MAAM,+BAA+B,KAAS,CAAC;AAEtD,mEAAmE;AACnE,eAAO,MAAM,+BAA+B,KAAS,CAAC;AAEtD,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,KAAS,CAAC;AAE5C,gGAAgG;AAChG,eAAO,MAAM,uCAAuC,QAAS,CAAC;AAQ9D,MAAM,WAAW,iBAAiB;IAC9B,6DAA6D;IAC7D,MAAM,EAAE,KAAK,CAAC;IACd;;;OAGG;IACH,MAAM,EAAE,KAAK,CAAC;IACd,iFAAiF;IACjF,WAAW,EAAE,KAAK,CAAC;CACtB;AAOD,eAAO,MAAM,kBAAkB;IAC3B;;;OAGG;IACH,KAAK,SAAS,iBAAiB,GAAG,KAAK;CA6EjC,CAAC"}

package/dist/esm/dtls/handshake/ClientHelloMessage.js

@@ -3,7 +3,7 @@
  * Copyright 2022-2026 Matter.js Authors
  * SPDX-License-Identifier: Apache-2.0
  */
-import { InternalError } from "@matter/general";
+import { Bytes, InternalError } from "@matter/general";
 const EXTENSION_TYPE_ECJPAKE_KKPP = 256;
 const EXTENSION_TYPE_SUPPORTED_GROUPS = 10;
 const EXTENSION_TYPE_EC_POINT_FORMATS = 11;
@@ -24,7 +24,9 @@ const ClientHelloMessage = {
    * {@link HandshakeMessage} and a `DtlsRecord` of `ContentType.HANDSHAKE`.
    */
   build(fields) {
-    const { random, cookie, ecjpakeKkpp } = fields;
+    const random = Bytes.of(fields.random);
+    const cookie = Bytes.of(fields.cookie);
+    const ecjpakeKkpp = Bytes.of(fields.ecjpakeKkpp);
     if (random.length !== RANDOM_LEN) {
       throw new InternalError(`ClientHello random must be ${RANDOM_LEN} bytes, got ${random.length}`);
     }

package/dist/esm/dtls/handshake/ClientHelloMessage.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../../../src/dtls/handshake/ClientHelloMessage.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AA6BA,SAAS,qBAAqB;AAGvB,MAAM,8BAA8B;AAGpC,MAAM,kCAAkC;AAGxC,MAAM,kCAAkC;AAGxC,MAAM,wBAAwB;AAG9B,MAAM,0CAA0C;AAEvD,MAAM,iBAAiB;AACvB,MAAM,iBAAiB;AACvB,MAAM,aAAa;AACnB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB;AAcvB,SAAS,cAAc,KAAiB,QAAgB,OAAqB;AACzE,MAAI,MAAM,IAAK,UAAU,IAAK;AAC9B,MAAI,SAAS,CAAC,IAAI,QAAQ;AAC9B;AAEO,MAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,MAAM,QAAuC;AACzC,UAAM,EAAE,QAAQ,QAAQ,YAAY,IAAI;AACxC,QAAI,OAAO,WAAW,YAAY;AAC9B,YAAM,IAAI,cAAc,8BAA8B,UAAU,eAAe,OAAO,MAAM,EAAE;AAAA,IAClG;AACA,QAAI,OAAO,SAAS,gBAAgB;AAChC,YAAM,IAAI,cAAc,iCAAiC,cAAc,eAAe,OAAO,MAAM,EAAE;AAAA,IACzG;AACA,UAAM,gBAAgB,IAAI,IAAI,YAAY;AAC1C,UAAM,wBAAwB,IAAI,IAAI,IAAI;AAC1C,UAAM,uBAAuB,IAAI,IAAI,IAAI;AACzC,UAAM,cAAc,gBAAgB,wBAAwB;AAC5D,UAAM,qBAAqB,IAAI;AAE/B,UAAM,WACF;AAAA,IACA,aACA;AAAA,IACA,IACA,OAAO;AAAA,IACP,IACA;AAAA,IACA,IACA;AAAA,IACA;AAEJ,UAAM,MAAM,IAAI,WAAW,QAAQ;AACnC,QAAI,IAAI;AACR,QAAI,GAAG,IAAI;AACX,QAAI,GAAG,IAAI;AACX,QAAI,IAAI,QAAQ,CAAC;AACjB,SAAK;AACL,QAAI,GAAG,IAAI;AACX,QAAI,GAAG,IAAI,OAAO;AAClB,QAAI,IAAI,QAAQ,CAAC;AACjB,SAAK,OAAO;AAEZ,kBAAc,KAAK,GAAG,CAAC;AACvB,SAAK;AACL,QAAI,GAAG,IAAK,4CAA4C,IAAK;AAC7D,QAAI,GAAG,IAAI,0CAA0C;AAErD,QAAI,GAAG,IAAI;AACX,QAAI,GAAG,IAAI;AAEX,kBAAc,KAAK,GAAG,WAAW;AACjC,SAAK;AAEL,kBAAc,KAAK,GAAG,2BAA2B;AACjD,SAAK;AACL,kBAAc,KAAK,GAAG,YAAY,MAAM;AACxC,SAAK;AACL,QAAI,IAAI,aAAa,CAAC;AACtB,SAAK,YAAY;AAEjB,kBAAc,KAAK,GAAG,+BAA+B;AACrD,SAAK;AACL,kBAAc,KAAK,GAAG,CAAC;AACvB,SAAK;AACL,kBAAc,KAAK,GAAG,CAAC;AACvB,SAAK;AACL,kBAAc,KAAK,GAAG,qBAAqB;AAC3C,SAAK;AAEL,kBAAc,KAAK,GAAG,+BAA+B;AACrD,SAAK;AACL,kBAAc,KAAK,GAAG,CAAC;AACvB,SAAK;AACL,QAAI,GAAG,IAAI;AACX,QAAI,GAAG,IAAI;AACX,QAAI,MAAM,UAAU;AAChB,YAAM,IAAI,cAAc,+CAA+C,CAAC,cAAc,QAAQ,EAAE;AAAA,IACpG;AACA,WAAO;AAAA,EACX;AACJ;",
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AA6BA,SAAS,OAAO,qBAAqB;AAG9B,MAAM,8BAA8B;AAGpC,MAAM,kCAAkC;AAGxC,MAAM,kCAAkC;AAGxC,MAAM,wBAAwB;AAG9B,MAAM,0CAA0C;AAEvD,MAAM,iBAAiB;AACvB,MAAM,iBAAiB;AACvB,MAAM,aAAa;AACnB,MAAM,mBAAmB;AACzB,MAAM,iBAAiB;AAcvB,SAAS,cAAc,KAAiB,QAAgB,OAAqB;AACzE,MAAI,MAAM,IAAK,UAAU,IAAK;AAC9B,MAAI,SAAS,CAAC,IAAI,QAAQ;AAC9B;AAEO,MAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,MAAM,QAAkC;AACpC,UAAM,SAAS,MAAM,GAAG,OAAO,MAAM;AACrC,UAAM,SAAS,MAAM,GAAG,OAAO,MAAM;AACrC,UAAM,cAAc,MAAM,GAAG,OAAO,WAAW;AAC/C,QAAI,OAAO,WAAW,YAAY;AAC9B,YAAM,IAAI,cAAc,8BAA8B,UAAU,eAAe,OAAO,MAAM,EAAE;AAAA,IAClG;AACA,QAAI,OAAO,SAAS,gBAAgB;AAChC,YAAM,IAAI,cAAc,iCAAiC,cAAc,eAAe,OAAO,MAAM,EAAE;AAAA,IACzG;AACA,UAAM,gBAAgB,IAAI,IAAI,YAAY;AAC1C,UAAM,wBAAwB,IAAI,IAAI,IAAI;AAC1C,UAAM,uBAAuB,IAAI,IAAI,IAAI;AACzC,UAAM,cAAc,gBAAgB,wBAAwB;AAC5D,UAAM,qBAAqB,IAAI;AAE/B,UAAM,WACF;AAAA,IACA,aACA;AAAA,IACA,IACA,OAAO;AAAA,IACP,IACA;AAAA,IACA,IACA;AAAA,IACA;AAEJ,UAAM,MAAM,IAAI,WAAW,QAAQ;AACnC,QAAI,IAAI;AACR,QAAI,GAAG,IAAI;AACX,QAAI,GAAG,IAAI;AACX,QAAI,IAAI,QAAQ,CAAC;AACjB,SAAK;AACL,QAAI,GAAG,IAAI;AACX,QAAI,GAAG,IAAI,OAAO;AAClB,QAAI,IAAI,QAAQ,CAAC;AACjB,SAAK,OAAO;AAEZ,kBAAc,KAAK,GAAG,CAAC;AACvB,SAAK;AACL,QAAI,GAAG,IAAK,4CAA4C,IAAK;AAC7D,QAAI,GAAG,IAAI,0CAA0C;AAErD,QAAI,GAAG,IAAI;AACX,QAAI,GAAG,IAAI;AAEX,kBAAc,KAAK,GAAG,WAAW;AACjC,SAAK;AAEL,kBAAc,KAAK,GAAG,2BAA2B;AACjD,SAAK;AACL,kBAAc,KAAK,GAAG,YAAY,MAAM;AACxC,SAAK;AACL,QAAI,IAAI,aAAa,CAAC;AACtB,SAAK,YAAY;AAEjB,kBAAc,KAAK,GAAG,+BAA+B;AACrD,SAAK;AACL,kBAAc,KAAK,GAAG,CAAC;AACvB,SAAK;AACL,kBAAc,KAAK,GAAG,CAAC;AACvB,SAAK;AACL,kBAAc,KAAK,GAAG,qBAAqB;AAC3C,SAAK;AAEL,kBAAc,KAAK,GAAG,+BAA+B;AACrD,SAAK;AACL,kBAAc,KAAK,GAAG,CAAC;AACvB,SAAK;AACL,QAAI,GAAG,IAAI;AACX,QAAI,GAAG,IAAI;AACX,QAAI,MAAM,UAAU;AAChB,YAAM,IAAI,cAAc,+CAA+C,CAAC,cAAc,QAAQ,EAAE;AAAA,IACpG;AACA,WAAO;AAAA,EACX;AACJ;",
   "names": []
 }

package/dist/esm/dtls/handshake/ClientKeyExchangeMessage.d.ts

@@ -3,6 +3,7 @@
  * Copyright 2022-2026 Matter.js Authors
  * SPDX-License-Identifier: Apache-2.0
  */
+import type { Bytes } from "@matter/general";
 import { type EcJpakeKeyKP } from "../ecjpake/EcJpakeRound.js";
 /**
  * ClientKeyExchange body builder for `TLS_ECJPAKE_WITH_AES_128_CCM_8`
@@ -17,6 +18,6 @@ import { type EcJpakeKeyKP } from "../ecjpake/EcJpakeRound.js";
  * ```
  */
 export declare const ClientKeyExchangeMessage: {
-    build(kp: EcJpakeKeyKP): Uint8Array;
+    build(kp: EcJpakeKeyKP): Bytes;
 };
 //# sourceMappingURL=ClientKeyExchangeMessage.d.ts.map

package/dist/esm/dtls/handshake/ClientKeyExchangeMessage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ClientKeyExchangeMessage.d.ts","sourceRoot":"","sources":["../../../../src/dtls/handshake/ClientKeyExchangeMessage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAgB,MAAM,4BAA4B,CAAC;AAE7E;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB;IACjC,KAAK,KAAK,YAAY,GAAG,UAAU;CAG7B,CAAC"}
+{"version":3,"file":"ClientKeyExchangeMessage.d.ts","sourceRoot":"","sources":["../../../../src/dtls/handshake/ClientKeyExchangeMessage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,KAAK,YAAY,EAAgB,MAAM,4BAA4B,CAAC;AAE7E;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB;IACjC,KAAK,KAAK,YAAY,GAAG,KAAK;CAGxB,CAAC"}

package/dist/esm/dtls/handshake/ClientKeyExchangeMessage.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../../../src/dtls/handshake/ClientKeyExchangeMessage.ts"],
-  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,SAA4B,oBAAoB;AAczC,MAAM,2BAA2B;AAAA,EACpC,MAAM,IAA8B;AAChC,WAAO,aAAa,gBAAgB,IAAI,EAAE,qBAAqB,MAAM,CAAC;AAAA,EAC1E;AACJ;",
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,SAA4B,oBAAoB;AAczC,MAAM,2BAA2B;AAAA,EACpC,MAAM,IAAyB;AAC3B,WAAO,aAAa,gBAAgB,IAAI,EAAE,qBAAqB,MAAM,CAAC;AAAA,EAC1E;AACJ;",
   "names": []
 }

package/dist/esm/dtls/handshake/DtlsClient.d.ts

@@ -3,6 +3,7 @@
  * Copyright 2022-2026 Matter.js Authors
  * SPDX-License-Identifier: Apache-2.0
  */
+import { Bytes, Crypto } from "@matter/general";
 import { DtlsCipherState } from "../record/DtlsCipherState.js";
 /**
  * DTLS 1.2 client-side handshake state machine for
@@ -22,10 +23,12 @@ import { DtlsCipherState } from "../record/DtlsCipherState.js";
 /** Discriminated states the client traverses during the handshake. */
 export type DtlsClientState = "initial" | "sent_first_clienthello" | "sent_clienthello_with_cookie" | "received_serverhello_flight" | "sent_clientkeyexchange_flight" | "established" | "failed";
 export interface DtlsClientConfig {
+    /** Crypto backend threaded through record codec, EC-JPAKE, PRF and transcript. */
+    crypto: Crypto;
     /** EC-JPAKE password (PSKc bytes for Thread). Hashed by mbedTLS as the integer of these bytes. */
-    password: Uint8Array;
+    password: Bytes;
     /** Returns 32 bytes for `ClientHello.random`. Production: CSPRNG. */
-    random: () => Uint8Array;
+    random: () => Bytes;
     /**
      * Returns a fresh scalar in [1, n-1]. Called five times per attempt:
      * x1, x2 (round-1 private keys), v1, v2 (round-1 ZKP ephemerals), v3 (round-2 ZKP ephemeral).
@@ -40,7 +43,7 @@ export interface DtlsClientConfig {
 }
 export interface DtlsClientStep {
     /** Records to emit on the wire (already framed as DTLS records). */
-    records: Uint8Array[];
+    records: Bytes[];
 }
 export declare class DtlsClient {
     #private;
@@ -49,9 +52,9 @@ export declare class DtlsClient {
     isEstablished(): boolean;
     cipherState(): DtlsCipherState;
     /** Initial flight: ClientHello with empty cookie. */
-    start(): DtlsClientStep;
+    start(): Promise<DtlsClientStep>;
     /** Re-emit the last flight bytes-identically (RFC 6347 §4.2.4). */
-    onRetransmit(): DtlsClientStep;
-    onDatagram(bytes: Uint8Array): DtlsClientStep;
+    onRetransmit(): Promise<DtlsClientStep>;
+    onDatagram(bytes: Bytes): Promise<DtlsClientStep>;
 }
 //# sourceMappingURL=DtlsClient.d.ts.map

package/dist/esm/dtls/handshake/DtlsClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DtlsClient.d.ts","sourceRoot":"","sources":["../../../../src/dtls/handshake/DtlsClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAa/D;;;;;;;;;;;;;;GAcG;AAEH,sEAAsE;AACtE,MAAM,MAAM,eAAe,GACrB,SAAS,GACT,wBAAwB,GACxB,8BAA8B,GAC9B,6BAA6B,GAC7B,+BAA+B,GAC/B,aAAa,GACb,QAAQ,CAAC;AAEf,MAAM,WAAW,gBAAgB;IAC7B,kGAAkG;IAClG,QAAQ,EAAE,UAAU,CAAC;IACrB,qEAAqE;IACrE,MAAM,EAAE,MAAM,UAAU,CAAC;IACzB;;;OAGG;IACH,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,4FAA4F;IAC5F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC3B,oEAAoE;IACpE,OAAO,EAAE,UAAU,EAAE,CAAC;CACzB;AA0BD,qBAAa,UAAU;;IAyBnB,YAAY,MAAM,EAAE,gBAAgB,EAEnC;IAED,KAAK,IAAI,eAAe,CAEvB;IAED,aAAa,IAAI,OAAO,CAEvB;IAED,WAAW,IAAI,eAAe,CAO7B;IAED,qDAAqD;IACrD,KAAK,IAAI,cAAc,CAwBtB;IAED,mEAAmE;IACnE,YAAY,IAAI,cAAc,CAK7B;IAED,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,CAuB5C;CA0YJ"}
+{"version":3,"file":"DtlsClient.d.ts","sourceRoot":"","sources":["../../../../src/dtls/handshake/DtlsClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAsC,MAAM,iBAAiB,CAAC;AAQpF,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAa/D;;;;;;;;;;;;;;GAcG;AAEH,sEAAsE;AACtE,MAAM,MAAM,eAAe,GACrB,SAAS,GACT,wBAAwB,GACxB,8BAA8B,GAC9B,6BAA6B,GAC7B,+BAA+B,GAC/B,aAAa,GACb,QAAQ,CAAC;AAEf,MAAM,WAAW,gBAAgB;IAC7B,kFAAkF;IAClF,MAAM,EAAE,MAAM,CAAC;IACf,kGAAkG;IAClG,QAAQ,EAAE,KAAK,CAAC;IAChB,qEAAqE;IACrE,MAAM,EAAE,MAAM,KAAK,CAAC;IACpB;;;OAGG;IACH,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,wEAAwE;IACxE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,4FAA4F;IAC5F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC3B,oEAAoE;IACpE,OAAO,EAAE,KAAK,EAAE,CAAC;CACpB;AA0BD,qBAAa,UAAU;;IA0BnB,YAAY,MAAM,EAAE,gBAAgB,EAInC;IAED,KAAK,IAAI,eAAe,CAEvB;IAED,aAAa,IAAI,OAAO,CAEvB;IAED,WAAW,IAAI,eAAe,CAO7B;IAED,qDAAqD;IAC/C,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,CAwBrC;IAED,mEAAmE;IAC7D,YAAY,IAAI,OAAO,CAAC,cAAc,CAAC,CAK5C;IAEK,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,CAwBtD;CA0ZJ"}