@mtcute/core 0.1.0 → 0.1.1

package/esm/utils/crypto/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../src/utils/crypto/keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,IAAI,SAAS,EAAe,MAAM,+BAA+B,CAAA;AAC1F,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAE9D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAGtE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAClF,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACzC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAEhE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACzC,yDAAyD;IACzD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAE7C,OAAO;QACH,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC;QAC7B,WAAW,EAAE,EAAE;QACf,GAAG;KACN,CAAA;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAChF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,CAAA;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAA+B,EAAE,QAAQ,GAAG,KAAK;IACnF,KAAK,IAAI,EAAE,IAAI,YAAY,EAAE;QACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE;YACxB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;SACpC;QACD,IAAI,EAAE,IAAI,SAAS,EAAE;YACjB,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YAE5C,OAAO,SAAS,CAAC,EAAE,CAAC,CAAA;SACvB;KACJ;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,qBAAqB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IAE/D,OAAO,IAAI,CAAA;AACf,CAAC","sourcesContent":["import Long from 'long'\n\nimport { __publicKeyIndex as keysIndex, TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js'\nimport { hexEncode, TlBinaryWriter } from '@mtcute/tl-runtime'\n\nimport { parseAsn1, parsePemContents } from '../binary/asn1-parser.js'\nimport { ICryptoProvider } from './abstract.js'\n\n/**\n * Parse PEM-encoded RSA public key information into modulus and exponent\n * and compute its fingerprint as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport async function parsePublicKey(crypto: ICryptoProvider, key: string, old = false): Promise<TlPublicKey> {\n    const asn1 = parseAsn1(parsePemContents(key))\n    const modulus = asn1.children?.[0].value\n    const exponent = asn1.children?.[1].value\n    if (!modulus || !exponent) throw new Error('Invalid public key')\n\n    const writer = TlBinaryWriter.manual(512)\n    // they are actually smaller, about 270 bytes, but idc :D\n    writer.bytes(modulus)\n    writer.bytes(exponent)\n\n    const data = writer.result()\n    const sha = await crypto.sha1(data)\n    const fp = hexEncode(sha.slice(-8).reverse())\n\n    return {\n        modulus: hexEncode(modulus),\n        exponent: hexEncode(exponent),\n        fingerprint: fp,\n        old,\n    }\n}\n\n/**\n * Add public key to the global index.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport async function addPublicKey(crypto: ICryptoProvider, key: string, old = false): Promise<void> {\n    const parsed = await parsePublicKey(crypto, key, old)\n    keysIndex[parsed.fingerprint] = parsed\n}\n\n/**\n * Get public key by its fingerprint.\n *\n * @param fingerprints  Fingerprints to match. The first one to match is returned.\n * @param allowOld  Whether to allow \"old\" keys\n */\nexport function findKeyByFingerprints(fingerprints: (string | Long)[], allowOld = false): TlPublicKey | null {\n    for (let fp of fingerprints) {\n        if (typeof fp !== 'string') {\n            fp = fp.toUnsigned().toString(16)\n        }\n        if (fp in keysIndex) {\n            if (keysIndex[fp].old && !allowOld) continue\n\n            return keysIndex[fp]\n        }\n    }\n    if (!allowOld) return findKeyByFingerprints(fingerprints, true)\n\n    return null\n}\n"]}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../src/utils/crypto/keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,IAAI,SAAS,EAAe,MAAM,+BAA+B,CAAA;AAC1F,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAE9D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAGtE;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAC5E,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACzC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAEhE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACzC,yDAAyD;IACzD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAE7C,OAAO;QACH,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC;QAC7B,WAAW,EAAE,EAAE;QACf,GAAG;KACN,CAAA;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAC/C,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,CAAA;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAA+B,EAAE,QAAQ,GAAG,KAAK;IACnF,KAAK,IAAI,EAAE,IAAI,YAAY,EAAE;QACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE;YACxB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;SACpC;QACD,IAAI,EAAE,IAAI,SAAS,EAAE;YACjB,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YAE5C,OAAO,SAAS,CAAC,EAAE,CAAC,CAAA;SACvB;KACJ;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,qBAAqB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IAE/D,OAAO,IAAI,CAAA;AACf,CAAC","sourcesContent":["import Long from 'long'\n\nimport { __publicKeyIndex as keysIndex, TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js'\nimport { hexEncode, TlBinaryWriter } from '@mtcute/tl-runtime'\n\nimport { parseAsn1, parsePemContents } from '../binary/asn1-parser.js'\nimport { ICryptoProvider } from './abstract.js'\n\n/**\n * Parse PEM-encoded RSA public key information into modulus and exponent\n * and compute its fingerprint as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport function parsePublicKey(crypto: ICryptoProvider, key: string, old = false): TlPublicKey {\n    const asn1 = parseAsn1(parsePemContents(key))\n    const modulus = asn1.children?.[0].value\n    const exponent = asn1.children?.[1].value\n    if (!modulus || !exponent) throw new Error('Invalid public key')\n\n    const writer = TlBinaryWriter.manual(512)\n    // they are actually smaller, about 270 bytes, but idc :D\n    writer.bytes(modulus)\n    writer.bytes(exponent)\n\n    const data = writer.result()\n    const sha = crypto.sha1(data)\n    const fp = hexEncode(sha.slice(-8).reverse())\n\n    return {\n        modulus: hexEncode(modulus),\n        exponent: hexEncode(exponent),\n        fingerprint: fp,\n        old,\n    }\n}\n\n/**\n * Add public key to the global index.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport function addPublicKey(crypto: ICryptoProvider, key: string, old = false): void {\n    const parsed = parsePublicKey(crypto, key, old)\n    keysIndex[parsed.fingerprint] = parsed\n}\n\n/**\n * Get public key by its fingerprint.\n *\n * @param fingerprints  Fingerprints to match. The first one to match is returned.\n * @param allowOld  Whether to allow \"old\" keys\n */\nexport function findKeyByFingerprints(fingerprints: (string | Long)[], allowOld = false): TlPublicKey | null {\n    for (let fp of fingerprints) {\n        if (typeof fp !== 'string') {\n            fp = fp.toUnsigned().toString(16)\n        }\n        if (fp in keysIndex) {\n            if (keysIndex[fp].old && !allowOld) continue\n\n            return keysIndex[fp]\n        }\n    }\n    if (!allowOld) return findKeyByFingerprints(fingerprints, true)\n\n    return null\n}\n"]}

package/esm/utils/crypto/miller-rabin.d.ts

@@ -1,2 +1,2 @@
-import { BigInteger } from 'big-integer';
-export declare function millerRabin(n: BigInteger, rounds?: number): boolean;
+import { ICryptoProvider } from './abstract.js';
+export declare function millerRabin(crypto: ICryptoProvider, n: bigint, rounds?: number): boolean;

package/esm/utils/crypto/miller-rabin.js

@@ -1,35 +1,36 @@
-import bigInt from 'big-integer';
-import { randomBigIntBits, twoMultiplicity } from '../bigint-utils.js';
-export function millerRabin(n, rounds = 20) {
+import { bigIntBitLength, bigIntModPow, randomBigIntBits, twoMultiplicity } from '../bigint-utils.js';
+export function millerRabin(crypto, n, rounds = 20) {
     // small numbers: 0, 1 are not prime, 2, 3 are prime
-    if (n.lt(bigInt[4]))
-        return n.gt(bigInt[1]);
-    if (n.isEven() || n.isNegative())
+    if (n < 4n)
+        return n > 1n;
+    if (n % 2n === 0n || n < 0n)
         return false;
-    const nBits = n.bitLength().toJSNumber();
-    const nSub = n.minus(1);
+    const nBits = bigIntBitLength(n);
+    const nSub = n - 1n;
     const r = twoMultiplicity(nSub);
-    const d = nSub.shiftRight(r);
+    const d = nSub >> r;
     for (let i = 0; i < rounds; i++) {
         let base;
         do {
-            base = randomBigIntBits(nBits);
-        } while (base.leq(bigInt.one) || base.geq(nSub));
-        let x = base.modPow(d, n);
-        if (x.eq(bigInt.one) || x.eq(nSub))
+            base = randomBigIntBits(crypto, nBits);
+        } while (base <= 1n || base >= nSub);
+        let x = bigIntModPow(base, d, n);
+        // if (x.eq(bigInt.one) || x.eq(nSub)) continue
+        if (x === 1n || x === nSub)
             continue;
-        let i = bigInt.zero;
+        let i = 0n;
         let y;
-        while (i.lt(r)) {
-            y = x.modPow(bigInt[2], n);
-            if (x.eq(bigInt.one))
+        while (i < r) {
+            // y = x.modPow(bigInt[2], n)
+            y = bigIntModPow(x, 2n, n);
+            if (x === 1n)
                 return false;
-            if (x.eq(nSub))
+            if (x === nSub)
                 break;
-            i = i.plus(bigInt.one);
+            i += 1n;
             x = y;
         }
-        if (i.eq(r))
+        if (i === r)
             return false;
     }
     return true;

package/esm/utils/crypto/miller-rabin.js.map

@@ -1 +1 @@
-{"version":3,"file":"miller-rabin.js","sourceRoot":"","sources":["../../../../src/utils/crypto/miller-rabin.ts"],"names":[],"mappings":"AAAA,OAAO,MAAsB,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEtE,MAAM,UAAU,WAAW,CAAC,CAAa,EAAE,MAAM,GAAG,EAAE;IAClD,oDAAoD;IACpD,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE;QAAE,OAAO,KAAK,CAAA;IAE9C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,CAAA;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAEvB,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAA;QAER,GAAG;YACC,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;SACjC,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAC;QAEhD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,SAAQ;QAE5C,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAA;QACnB,IAAI,CAAa,CAAA;QAEjB,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YACZ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAE1B,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YAClC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,MAAK;YACrB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAEtB,CAAC,GAAG,CAAC,CAAA;SACR;QAED,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;KAC5B;IAED,OAAO,IAAI,CAAA;AACf,CAAC","sourcesContent":["import bigInt, { BigInteger } from 'big-integer'\n\nimport { randomBigIntBits, twoMultiplicity } from '../bigint-utils.js'\n\nexport function millerRabin(n: BigInteger, rounds = 20): boolean {\n    // small numbers: 0, 1 are not prime, 2, 3 are prime\n    if (n.lt(bigInt[4])) return n.gt(bigInt[1])\n    if (n.isEven() || n.isNegative()) return false\n\n    const nBits = n.bitLength().toJSNumber()\n    const nSub = n.minus(1)\n\n    const r = twoMultiplicity(nSub)\n    const d = nSub.shiftRight(r)\n\n    for (let i = 0; i < rounds; i++) {\n        let base\n\n        do {\n            base = randomBigIntBits(nBits)\n        } while (base.leq(bigInt.one) || base.geq(nSub))\n\n        let x = base.modPow(d, n)\n        if (x.eq(bigInt.one) || x.eq(nSub)) continue\n\n        let i = bigInt.zero\n        let y: BigInteger\n\n        while (i.lt(r)) {\n            y = x.modPow(bigInt[2], n)\n\n            if (x.eq(bigInt.one)) return false\n            if (x.eq(nSub)) break\n            i = i.plus(bigInt.one)\n\n            x = y\n        }\n\n        if (i.eq(r)) return false\n    }\n\n    return true\n}\n"]}
+{"version":3,"file":"miller-rabin.js","sourceRoot":"","sources":["../../../../src/utils/crypto/miller-rabin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAGrG,MAAM,UAAU,WAAW,CAAC,MAAuB,EAAE,CAAS,EAAE,MAAM,GAAG,EAAE;IACvE,oDAAoD;IACpD,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,CAAC,GAAG,EAAE,CAAA;IACzB,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,KAAK,CAAA;IAEzC,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAA;IAEnB,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAA;QAER,GAAG;YACC,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;SACzC,QAAQ,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,IAAI,EAAC;QAEpC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAChC,+CAA+C;QAC/C,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI;YAAE,SAAQ;QAEpC,IAAI,CAAC,GAAG,EAAE,CAAA;QACV,IAAI,CAAS,CAAA;QAEb,OAAO,CAAC,GAAG,CAAC,EAAE;YACV,6BAA6B;YAC7B,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;YAE1B,IAAI,CAAC,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAA;YAC1B,IAAI,CAAC,KAAK,IAAI;gBAAE,MAAK;YACrB,CAAC,IAAI,EAAE,CAAA;YAEP,CAAC,GAAG,CAAC,CAAA;SACR;QAED,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;KAC5B;IAED,OAAO,IAAI,CAAA;AACf,CAAC","sourcesContent":["import { bigIntBitLength, bigIntModPow, randomBigIntBits, twoMultiplicity } from '../bigint-utils.js'\nimport { ICryptoProvider } from './abstract.js'\n\nexport function millerRabin(crypto: ICryptoProvider, n: bigint, rounds = 20): boolean {\n    // small numbers: 0, 1 are not prime, 2, 3 are prime\n    if (n < 4n) return n > 1n\n    if (n % 2n === 0n || n < 0n) return false\n\n    const nBits = bigIntBitLength(n)\n    const nSub = n - 1n\n\n    const r = twoMultiplicity(nSub)\n    const d = nSub >> r\n\n    for (let i = 0; i < rounds; i++) {\n        let base\n\n        do {\n            base = randomBigIntBits(crypto, nBits)\n        } while (base <= 1n || base >= nSub)\n\n        let x = bigIntModPow(base, d, n)\n        // if (x.eq(bigInt.one) || x.eq(nSub)) continue\n        if (x === 1n || x === nSub) continue\n\n        let i = 0n\n        let y: bigint\n\n        while (i < r) {\n            // y = x.modPow(bigInt[2], n)\n            y = bigIntModPow(x, 2n, n)\n\n            if (x === 1n) return false\n            if (x === nSub) break\n            i += 1n\n\n            x = y\n        }\n\n        if (i === r) return false\n    }\n\n    return true\n}\n"]}

package/esm/utils/crypto/mtproto.d.ts

@@ -8,7 +8,7 @@ import { ICryptoProvider, IEncryptionScheme } from './abstract.js';
  * @param newNonce  New nonce
  * @returns  Tuple: `[key, iv]`
  */
-export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serverNonce: Uint8Array, newNonce: Uint8Array): Promise<[Uint8Array, Uint8Array]>;
+export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serverNonce: Uint8Array, newNonce: Uint8Array): [Uint8Array, Uint8Array];
 /**
  * Create AES IGE instance for message (given auth key and message key)
  * as defined by MTProto v2.
@@ -18,7 +18,7 @@ export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serve
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): Promise<IEncryptionScheme>;
+export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): IEncryptionScheme;
 /**
  * Create AES IGE instance for file (given auth key and message key)
  * as defined by MTProto v1.
@@ -28,4 +28,4 @@ export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey:
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-export declare function createAesIgeForMessageOld(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): Promise<IEncryptionScheme>;
+export declare function createAesIgeForMessageOld(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): IEncryptionScheme;

package/esm/utils/crypto/mtproto.js

@@ -8,10 +8,10 @@ import { concatBuffers } from '../buffer-utils.js';
  * @param newNonce  New nonce
  * @returns  Tuple: `[key, iv]`
  */
-export async function generateKeyAndIvFromNonce(crypto, serverNonce, newNonce) {
-    const hash1 = await crypto.sha1(concatBuffers([newNonce, serverNonce]));
-    const hash2 = await crypto.sha1(concatBuffers([serverNonce, newNonce]));
-    const hash3 = await crypto.sha1(concatBuffers([newNonce, newNonce]));
+export function generateKeyAndIvFromNonce(crypto, serverNonce, newNonce) {
+    const hash1 = crypto.sha1(concatBuffers([newNonce, serverNonce]));
+    const hash2 = crypto.sha1(concatBuffers([serverNonce, newNonce]));
+    const hash3 = crypto.sha1(concatBuffers([newNonce, newNonce]));
     const key = concatBuffers([hash1, hash2.subarray(0, 12)]);
     const iv = concatBuffers([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)]);
     return [key, iv];
@@ -25,10 +25,10 @@ export async function generateKeyAndIvFromNonce(crypto, serverNonce, newNonce) {
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-export async function createAesIgeForMessage(crypto, authKey, messageKey, client) {
+export function createAesIgeForMessage(crypto, authKey, messageKey, client) {
     const x = client ? 0 : 8;
-    const sha256a = await crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]));
-    const sha256b = await crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]));
+    const sha256a = crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]));
+    const sha256b = crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]));
     const key = concatBuffers([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)]);
     const iv = concatBuffers([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)]);
     return crypto.createAesIge(key, iv);
@@ -42,12 +42,12 @@ export async function createAesIgeForMessage(crypto, authKey, messageKey, client
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-export async function createAesIgeForMessageOld(crypto, authKey, messageKey, client) {
+export function createAesIgeForMessageOld(crypto, authKey, messageKey, client) {
     const x = client ? 0 : 8;
-    const sha1a = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]));
-    const sha1b = await crypto.sha1(concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]));
-    const sha1c = await crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]));
-    const sha1d = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]));
+    const sha1a = crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]));
+    const sha1b = crypto.sha1(concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]));
+    const sha1c = crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]));
+    const sha1d = crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]));
     const key = concatBuffers([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)]);
     const iv = concatBuffers([
         sha1a.subarray(8, 20),

package/esm/utils/crypto/mtproto.js.map

@@ -1 +1 @@
-{"version":3,"file":"mtproto.js","sourceRoot":"","sources":["../../../../src/utils/crypto/mtproto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAGlD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,MAAuB,EACvB,WAAuB,EACvB,QAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAEpE,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAElF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7F,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAElG,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACtG,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAErG,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACzF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAC9F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/F,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/F,MAAM,EAAE,GAAG,aAAa,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;KACvB,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC","sourcesContent":["import { concatBuffers } from '../buffer-utils.js'\nimport { ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\n/**\n * Generate AES key and IV from nonces as defined by MTProto.\n * Used in authorization flow.\n *\n * @param crypto  Crypto provider\n * @param serverNonce  Server nonce\n * @param newNonce  New nonce\n * @returns  Tuple: `[key, iv]`\n */\nexport async function generateKeyAndIvFromNonce(\n    crypto: ICryptoProvider,\n    serverNonce: Uint8Array,\n    newNonce: Uint8Array,\n): Promise<[Uint8Array, Uint8Array]> {\n    const hash1 = await crypto.sha1(concatBuffers([newNonce, serverNonce]))\n    const hash2 = await crypto.sha1(concatBuffers([serverNonce, newNonce]))\n    const hash3 = await crypto.sha1(concatBuffers([newNonce, newNonce]))\n\n    const key = concatBuffers([hash1, hash2.subarray(0, 12)])\n    const iv = concatBuffers([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)])\n\n    return [key, iv]\n}\n\n/**\n * Create AES IGE instance for message (given auth key and message key)\n * as defined by MTProto v2.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport async function createAesIgeForMessage(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): Promise<IEncryptionScheme> {\n    const x = client ? 0 : 8\n    const sha256a = await crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]))\n    const sha256b = await crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]))\n\n    const key = concatBuffers([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)])\n    const iv = concatBuffers([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)])\n\n    return crypto.createAesIge(key, iv)\n}\n\n/**\n * Create AES IGE instance for file (given auth key and message key)\n * as defined by MTProto v1.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport async function createAesIgeForMessageOld(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): Promise<IEncryptionScheme> {\n    const x = client ? 0 : 8\n    const sha1a = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]))\n    const sha1b = await crypto.sha1(\n        concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]),\n    )\n    const sha1c = await crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]))\n    const sha1d = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]))\n\n    const key = concatBuffers([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)])\n    const iv = concatBuffers([\n        sha1a.subarray(8, 20),\n        sha1b.subarray(0, 8),\n        sha1c.subarray(16, 20),\n        sha1d.subarray(0, 8),\n    ])\n\n    return crypto.createAesIge(key, iv)\n}\n"]}
+{"version":3,"file":"mtproto.js","sourceRoot":"","sources":["../../../../src/utils/crypto/mtproto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAGlD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACrC,MAAuB,EACvB,WAAuB,EACvB,QAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAE9D,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAElF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAClC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAE5F,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACtG,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAErG,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACrC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACrB,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IACxF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAEzF,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/F,MAAM,EAAE,GAAG,aAAa,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;KACvB,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC","sourcesContent":["import { concatBuffers } from '../buffer-utils.js'\nimport { ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\n/**\n * Generate AES key and IV from nonces as defined by MTProto.\n * Used in authorization flow.\n *\n * @param crypto  Crypto provider\n * @param serverNonce  Server nonce\n * @param newNonce  New nonce\n * @returns  Tuple: `[key, iv]`\n */\nexport function generateKeyAndIvFromNonce(\n    crypto: ICryptoProvider,\n    serverNonce: Uint8Array,\n    newNonce: Uint8Array,\n): [Uint8Array, Uint8Array] {\n    const hash1 = crypto.sha1(concatBuffers([newNonce, serverNonce]))\n    const hash2 = crypto.sha1(concatBuffers([serverNonce, newNonce]))\n    const hash3 = crypto.sha1(concatBuffers([newNonce, newNonce]))\n\n    const key = concatBuffers([hash1, hash2.subarray(0, 12)])\n    const iv = concatBuffers([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)])\n\n    return [key, iv]\n}\n\n/**\n * Create AES IGE instance for message (given auth key and message key)\n * as defined by MTProto v2.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport function createAesIgeForMessage(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): IEncryptionScheme {\n    const x = client ? 0 : 8\n    const sha256a = crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]))\n    const sha256b = crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]))\n\n    const key = concatBuffers([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)])\n    const iv = concatBuffers([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)])\n\n    return crypto.createAesIge(key, iv)\n}\n\n/**\n * Create AES IGE instance for file (given auth key and message key)\n * as defined by MTProto v1.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport function createAesIgeForMessageOld(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): IEncryptionScheme {\n    const x = client ? 0 : 8\n    const sha1a = crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]))\n    const sha1b = crypto.sha1(\n        concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]),\n    )\n    const sha1c = crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]))\n    const sha1d = crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]))\n\n    const key = concatBuffers([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)])\n    const iv = concatBuffers([\n        sha1a.subarray(8, 20),\n        sha1b.subarray(0, 8),\n        sha1c.subarray(16, 20),\n        sha1d.subarray(0, 8),\n    ])\n\n    return crypto.createAesIge(key, iv)\n}\n"]}

package/esm/utils/crypto/node.d.ts

@@ -0,0 +1,21 @@
+import { InitInput } from '@mtcute/wasm';
+import { MaybeAsync } from '../../types/index.js';
+import { BaseCryptoProvider, IAesCtr, ICryptoProvider, IEncryptionScheme } from './abstract.js';
+export declare abstract class BaseNodeCryptoProvider extends BaseCryptoProvider {
+    createAesCtr(key: Uint8Array, iv: Uint8Array): IAesCtr;
+    pbkdf2(password: Uint8Array, salt: Uint8Array, iterations: number, keylen?: number, algo?: string): MaybeAsync<Uint8Array>;
+    sha1(data: Uint8Array): Uint8Array;
+    sha256(data: Uint8Array): Uint8Array;
+    hmacSha256(data: Uint8Array, key: Uint8Array): Uint8Array;
+    gzip(data: Uint8Array, maxSize: number): Uint8Array | null;
+    gunzip(data: Uint8Array): Uint8Array;
+    randomFill(buf: Uint8Array): void;
+}
+export declare class NodeCryptoProvider extends BaseNodeCryptoProvider implements ICryptoProvider {
+    private wasmInput?;
+    constructor(params?: {
+        wasmInput?: InitInput;
+    });
+    initialize(): Promise<void>;
+    createAesIge(key: Uint8Array, iv: Uint8Array): IEncryptionScheme;
+}

package/esm/utils/crypto/node.js

@@ -0,0 +1,69 @@
+// eslint-disable-next-line no-restricted-imports
+import { createCipheriv, createHash, createHmac, pbkdf2, randomFillSync } from 'crypto';
+import { deflateSync, gunzipSync } from 'zlib';
+import { ige256Decrypt, ige256Encrypt, initAsync } from '@mtcute/wasm';
+import { BaseCryptoProvider } from './abstract.js';
+export class BaseNodeCryptoProvider extends BaseCryptoProvider {
+    createAesCtr(key, iv) {
+        const cipher = createCipheriv(`aes-${key.length * 8}-ctr`, key, iv);
+        const update = (data) => cipher.update(data);
+        return {
+            process: update,
+        };
+    }
+    pbkdf2(password, salt, iterations, keylen = 64, algo = 'sha512') {
+        return new Promise((resolve, reject) => pbkdf2(password, salt, iterations, keylen, algo, (err, buf) => err !== null ? reject(err) : resolve(buf)));
+    }
+    sha1(data) {
+        return createHash('sha1').update(data).digest();
+    }
+    sha256(data) {
+        return createHash('sha256').update(data).digest();
+    }
+    hmacSha256(data, key) {
+        return createHmac('sha256', key).update(data).digest();
+    }
+    gzip(data, maxSize) {
+        // todo: test if wasm impl is better fit here
+        try {
+            // telegram accepts both zlib and gzip, but zlib is faster and has less overhead, so we use it here
+            return deflateSync(data, {
+                maxOutputLength: maxSize,
+            });
+            // hot path, avoid additional runtime checks
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        }
+        catch (e) {
+            if (e.code === 'ERR_BUFFER_TOO_LARGE') {
+                return null;
+            }
+            throw e;
+        }
+    }
+    gunzip(data) {
+        return gunzipSync(data);
+    }
+    randomFill(buf) {
+        randomFillSync(buf);
+    }
+}
+export class NodeCryptoProvider extends BaseNodeCryptoProvider {
+    constructor(params) {
+        super();
+        this.wasmInput = params?.wasmInput;
+    }
+    initialize() {
+        return initAsync(this.wasmInput);
+    }
+    createAesIge(key, iv) {
+        return {
+            encrypt(data) {
+                return ige256Encrypt(data, key, iv);
+            },
+            decrypt(data) {
+                return ige256Decrypt(data, key, iv);
+            },
+        };
+    }
+}
+//# sourceMappingURL=node.js.map

package/esm/utils/crypto/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../../../src/utils/crypto/node.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAA;AACvF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,MAAM,CAAA;AAE9C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAa,MAAM,cAAc,CAAA;AAGjF,OAAO,EAAE,kBAAkB,EAA+C,MAAM,eAAe,CAAA;AAE/F,MAAM,OAAgB,sBAAuB,SAAQ,kBAAkB;IACnE,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QAEnE,MAAM,MAAM,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAExD,OAAO;YACH,OAAO,EAAE,MAAM;SAClB,CAAA;IACL,CAAC;IAED,MAAM,CACF,QAAoB,EACpB,IAAgB,EAChB,UAAkB,EAClB,MAAM,GAAG,EAAE,EACX,IAAI,GAAG,QAAQ;QAEf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACnC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAiB,EAAE,GAAe,EAAE,EAAE,CACpF,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAC5C,CACJ,CAAA;IACL,CAAC;IAED,IAAI,CAAC,IAAgB;QACjB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACnD,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACrD,CAAC;IAED,UAAU,CAAC,IAAgB,EAAE,GAAe;QACxC,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IAC1D,CAAC;IAED,IAAI,CAAC,IAAgB,EAAE,OAAe;QAClC,6CAA6C;QAC7C,IAAI;YACA,mGAAmG;YACnG,OAAO,WAAW,CAAC,IAAI,EAAE;gBACrB,eAAe,EAAE,OAAO;aAC3B,CAAC,CAAA;YACF,4CAA4C;YAC5C,8DAA8D;SACjE;QAAC,OAAO,CAAM,EAAE;YACb,IAAI,CAAC,CAAC,IAAI,KAAK,sBAAsB,EAAE;gBACnC,OAAO,IAAI,CAAA;aACd;YAED,MAAM,CAAC,CAAA;SACV;IACL,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,UAAU,CAAC,GAAe;QACtB,cAAc,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;CACJ;AAED,MAAM,OAAO,kBAAmB,SAAQ,sBAAsB;IAG1D,YAAY,MAAkC;QAC1C,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,CAAA;IACtC,CAAC;IAED,UAAU;QACN,OAAO,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACpC,CAAC;IAED,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,OAAO;YACH,OAAO,CAAC,IAAgB;gBACpB,OAAO,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YACvC,CAAC;YACD,OAAO,CAAC,IAAgB;gBACpB,OAAO,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YACvC,CAAC;SACJ,CAAA;IACL,CAAC;CACJ","sourcesContent":["// eslint-disable-next-line no-restricted-imports\nimport { createCipheriv, createHash, createHmac, pbkdf2, randomFillSync } from 'crypto'\nimport { deflateSync, gunzipSync } from 'zlib'\n\nimport { ige256Decrypt, ige256Encrypt, initAsync, InitInput } from '@mtcute/wasm'\n\nimport { MaybeAsync } from '../../types/index.js'\nimport { BaseCryptoProvider, IAesCtr, ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\nexport abstract class BaseNodeCryptoProvider extends BaseCryptoProvider {\n    createAesCtr(key: Uint8Array, iv: Uint8Array): IAesCtr {\n        const cipher = createCipheriv(`aes-${key.length * 8}-ctr`, key, iv)\n\n        const update = (data: Uint8Array) => cipher.update(data)\n\n        return {\n            process: update,\n        }\n    }\n\n    pbkdf2(\n        password: Uint8Array,\n        salt: Uint8Array,\n        iterations: number,\n        keylen = 64,\n        algo = 'sha512',\n    ): MaybeAsync<Uint8Array> {\n        return new Promise((resolve, reject) =>\n            pbkdf2(password, salt, iterations, keylen, algo, (err: Error | null, buf: Uint8Array) =>\n                err !== null ? reject(err) : resolve(buf),\n            ),\n        )\n    }\n\n    sha1(data: Uint8Array): Uint8Array {\n        return createHash('sha1').update(data).digest()\n    }\n\n    sha256(data: Uint8Array): Uint8Array {\n        return createHash('sha256').update(data).digest()\n    }\n\n    hmacSha256(data: Uint8Array, key: Uint8Array): Uint8Array {\n        return createHmac('sha256', key).update(data).digest()\n    }\n\n    gzip(data: Uint8Array, maxSize: number): Uint8Array | null {\n        // todo: test if wasm impl is better fit here\n        try {\n            // telegram accepts both zlib and gzip, but zlib is faster and has less overhead, so we use it here\n            return deflateSync(data, {\n                maxOutputLength: maxSize,\n            })\n            // hot path, avoid additional runtime checks\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } catch (e: any) {\n            if (e.code === 'ERR_BUFFER_TOO_LARGE') {\n                return null\n            }\n\n            throw e\n        }\n    }\n\n    gunzip(data: Uint8Array): Uint8Array {\n        return gunzipSync(data)\n    }\n\n    randomFill(buf: Uint8Array) {\n        randomFillSync(buf)\n    }\n}\n\nexport class NodeCryptoProvider extends BaseNodeCryptoProvider implements ICryptoProvider {\n    private wasmInput?: InitInput\n\n    constructor(params?: { wasmInput?: InitInput }) {\n        super()\n        this.wasmInput = params?.wasmInput\n    }\n\n    initialize(): Promise<void> {\n        return initAsync(this.wasmInput)\n    }\n\n    createAesIge(key: Uint8Array, iv: Uint8Array): IEncryptionScheme {\n        return {\n            encrypt(data: Uint8Array): Uint8Array {\n                return ige256Encrypt(data, key, iv)\n            },\n            decrypt(data: Uint8Array): Uint8Array {\n                return ige256Decrypt(data, key, iv)\n            },\n        }\n    }\n}\n"]}

package/esm/utils/crypto/password.js

@@ -1,8 +1,7 @@
-import bigInt from 'big-integer';
 import { utf8EncodeToBuffer } from '@mtcute/tl-runtime';
 import { MtSecurityError, MtUnsupportedError } from '../../types/errors.js';
-import { bigIntToBuffer, bufferToBigInt } from '../bigint-utils.js';
-import { concatBuffers, randomBytes } from '../buffer-utils.js';
+import { bigIntModPow, bigIntToBuffer, bufferToBigInt } from '../bigint-utils.js';
+import { concatBuffers } from '../buffer-utils.js';
 import { xorBuffer } from './utils.js';
 /**
  * Compute password hash as defined by MTProto.
@@ -16,8 +15,8 @@ import { xorBuffer } from './utils.js';
  */
 export async function computePasswordHash(crypto, password, salt1, salt2) {
     const SH = (data, salt) => crypto.sha256(concatBuffers([salt, data, salt]));
-    const PH1 = async (pwd, salt1, salt2) => SH(await SH(pwd, salt1), salt2);
-    return SH(await crypto.pbkdf2(await PH1(password, salt1, salt2), salt1, 100000), salt2);
+    const PH1 = (pwd, salt1, salt2) => SH(SH(pwd, salt1), salt2);
+    return SH(await crypto.pbkdf2(PH1(password, salt1, salt2), salt1, 100000), salt2);
 }
 /**
  * Compute new password SRP hash as defined by MTProto.
@@ -27,12 +26,15 @@ export async function computePasswordHash(crypto, password, salt1, salt2) {
  * @param password  Password
  */
 export async function computeNewPasswordHash(crypto, algo, password) {
-    algo.salt1 = concatBuffers([algo.salt1, randomBytes(32)]);
+    const salt1 = new Uint8Array(algo.salt1.length + 32);
+    salt1.set(algo.salt1);
+    crypto.randomFill(salt1.subarray(algo.salt1.length));
+    algo.salt1 = salt1;
     const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2);
-    const g = bigInt(algo.g);
+    const g = BigInt(algo.g);
     const p = bufferToBigInt(algo.p);
     const x = bufferToBigInt(_x);
-    return bigIntToBuffer(g.modPow(x, p), 256);
+    return bigIntToBuffer(bigIntModPow(g, x, p), 256);
 }
 /**
  * Compute SRP check parameters for 2fa password as defined by MTProto.
@@ -55,38 +57,28 @@ export async function computeSrpParams(crypto, request, password) {
     if (!request.srpId) {
         throw new MtSecurityError('SRP_ID is not present in the request');
     }
-    const g = bigInt(algo.g);
+    const g = BigInt(algo.g);
     const _g = bigIntToBuffer(g, 256);
     const p = bufferToBigInt(algo.p);
     const gB = bufferToBigInt(request.srpB);
-    const a = bufferToBigInt(randomBytes(256));
-    const gA = g.modPow(a, p);
+    const a = bufferToBigInt(crypto.randomBytes(256));
+    const gA = bigIntModPow(g, a, p);
     const _gA = bigIntToBuffer(gA, 256);
     const H = (data) => crypto.sha256(data);
-    const [_k, _u, _x] = await Promise.all([
-        // maybe, just maybe this will be a bit faster with some crypto providers
-        /* k = */ crypto.sha256(concatBuffers([algo.p, _g])),
-        /* u = */ crypto.sha256(concatBuffers([_gA, request.srpB])),
-        /* x = */ computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2),
-    ]);
+    const _k = crypto.sha256(concatBuffers([algo.p, _g]));
+    const _u = crypto.sha256(concatBuffers([_gA, request.srpB]));
+    const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2);
     const k = bufferToBigInt(_k);
     const u = bufferToBigInt(_u);
     const x = bufferToBigInt(_x);
-    const v = g.modPow(x, p);
-    const kV = k.multiply(v).mod(p);
-    let t = gB.minus(kV).mod(p);
-    if (t.isNegative())
-        t = t.plus(p);
-    const sA = t.modPow(a.plus(u.multiply(x)), p);
-    const _kA = await H(bigIntToBuffer(sA, 256));
-    const _M1 = await H(concatBuffers([
-        xorBuffer(await H(algo.p), await H(_g)),
-        await H(algo.salt1),
-        await H(algo.salt2),
-        _gA,
-        request.srpB,
-        _kA,
-    ]));
+    const v = bigIntModPow(g, x, p);
+    const kV = (k * v) % p;
+    let t = gB - kV;
+    if (t < 0n)
+        t += p;
+    const sA = bigIntModPow(t, a + u * x, p);
+    const _kA = H(bigIntToBuffer(sA, 256));
+    const _M1 = H(concatBuffers([xorBuffer(H(algo.p), H(_g)), H(algo.salt1), H(algo.salt2), _gA, request.srpB, _kA]));
     return {
         _: 'inputCheckPasswordSRP',
         srpId: request.srpId,

package/esm/utils/crypto/password.js.map

@@ -1 +1 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/utils/crypto/password.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAGhC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEvD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC3E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEtC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,MAAuB,EACvB,QAAoB,EACpB,KAAiB,EACjB,KAAiB;IAEjB,MAAM,EAAE,GAAG,CAAC,IAAgB,EAAE,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACnG,MAAM,GAAG,GAAG,KAAK,EAAE,GAAe,EAAE,KAAiB,EAAE,KAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAE5G,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAC3F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,IAA6E,EAC7E,QAAgB;IAEf,IAAgC,CAAC,KAAK,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAEtF,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAElG,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAE5B,OAAO,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,MAAuB,EACvB,OAA+B,EAC/B,QAAgB;IAEhB,wBAAwB;IACxB,IACI,CAAC,OAAO,CAAC,WAAW;QACpB,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,mEAAmE,EAC/F;QACE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;KACzE;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAA;IAEhC,iFAAiF;IAEjF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QACf,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;KACnE;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;QAChB,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAA;KACpE;IAED,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvC,MAAM,CAAC,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzB,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAEnC,MAAM,CAAC,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEnD,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnC,yEAAyE;QACzE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACpD,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;KAC9F,CAAC,CAAA;IACF,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAE5B,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAE/B,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC,UAAU,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;IAE5C,MAAM,GAAG,GAAG,MAAM,CAAC,CACf,aAAa,CAAC;QACV,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,GAAG;QACH,OAAO,CAAC,IAAI;QACZ,GAAG;KACN,CAAC,CACL,CAAA;IAED,OAAO;QACH,CAAC,EAAE,uBAAuB;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,CAAC,EAAE,GAAG;QACN,EAAE,EAAE,GAAG;KACV,CAAA;AACL,CAAC","sourcesContent":["import bigInt from 'big-integer'\n\nimport { tl } from '@mtcute/tl'\nimport { utf8EncodeToBuffer } from '@mtcute/tl-runtime'\n\nimport { MtSecurityError, MtUnsupportedError } from '../../types/errors.js'\nimport { bigIntToBuffer, bufferToBigInt } from '../bigint-utils.js'\nimport { concatBuffers, randomBytes } from '../buffer-utils.js'\nimport { ICryptoProvider } from './abstract.js'\nimport { xorBuffer } from './utils.js'\n\n/**\n * Compute password hash as defined by MTProto.\n *\n * See https://core.telegram.org/api/srp#checking-the-password-with-srp\n *\n * @param crypto  Crypto provider\n * @param password  Password\n * @param salt1  Salt 1\n * @param salt2  Salt 2\n */\nexport async function computePasswordHash(\n    crypto: ICryptoProvider,\n    password: Uint8Array,\n    salt1: Uint8Array,\n    salt2: Uint8Array,\n): Promise<Uint8Array> {\n    const SH = (data: Uint8Array, salt: Uint8Array) => crypto.sha256(concatBuffers([salt, data, salt]))\n    const PH1 = async (pwd: Uint8Array, salt1: Uint8Array, salt2: Uint8Array) => SH(await SH(pwd, salt1), salt2)\n\n    return SH(await crypto.pbkdf2(await PH1(password, salt1, salt2), salt1, 100000), salt2)\n}\n\n/**\n * Compute new password SRP hash as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param algo  KDF algorithm\n * @param password  Password\n */\nexport async function computeNewPasswordHash(\n    crypto: ICryptoProvider,\n    algo: tl.RawPasswordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow,\n    password: string,\n): Promise<Uint8Array> {\n    (algo as tl.Mutable<typeof algo>).salt1 = concatBuffers([algo.salt1, randomBytes(32)])\n\n    const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2)\n\n    const g = bigInt(algo.g)\n    const p = bufferToBigInt(algo.p)\n    const x = bufferToBigInt(_x)\n\n    return bigIntToBuffer(g.modPow(x, p), 256)\n}\n\n/**\n * Compute SRP check parameters for 2fa password as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param request  SRP request\n * @param password  2fa password\n */\nexport async function computeSrpParams(\n    crypto: ICryptoProvider,\n    request: tl.account.RawPassword,\n    password: string,\n): Promise<tl.RawInputCheckPasswordSRP> {\n    // nice naming thx durov\n    if (\n        !request.currentAlgo ||\n        request.currentAlgo._ !== 'passwordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow'\n    ) {\n        throw new MtUnsupportedError(`Unknown algo ${request.currentAlgo?._}`)\n    }\n\n    const algo = request.currentAlgo\n\n    // here and after: underscored variables are buffers, non-underscored are bigInts\n\n    if (!request.srpB) {\n        throw new MtSecurityError('SRP_B is not present in the request')\n    }\n\n    if (!request.srpId) {\n        throw new MtSecurityError('SRP_ID is not present in the request')\n    }\n\n    const g = bigInt(algo.g)\n    const _g = bigIntToBuffer(g, 256)\n    const p = bufferToBigInt(algo.p)\n    const gB = bufferToBigInt(request.srpB)\n\n    const a = bufferToBigInt(randomBytes(256))\n    const gA = g.modPow(a, p)\n    const _gA = bigIntToBuffer(gA, 256)\n\n    const H = (data: Uint8Array) => crypto.sha256(data)\n\n    const [_k, _u, _x] = await Promise.all([\n        // maybe, just maybe this will be a bit faster with some crypto providers\n        /* k = */ crypto.sha256(concatBuffers([algo.p, _g])),\n        /* u = */ crypto.sha256(concatBuffers([_gA, request.srpB])),\n        /* x = */ computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2),\n    ])\n    const k = bufferToBigInt(_k)\n    const u = bufferToBigInt(_u)\n    const x = bufferToBigInt(_x)\n\n    const v = g.modPow(x, p)\n    const kV = k.multiply(v).mod(p)\n\n    let t = gB.minus(kV).mod(p)\n    if (t.isNegative()) t = t.plus(p)\n    const sA = t.modPow(a.plus(u.multiply(x)), p)\n    const _kA = await H(bigIntToBuffer(sA, 256))\n\n    const _M1 = await H(\n        concatBuffers([\n            xorBuffer(await H(algo.p), await H(_g)),\n            await H(algo.salt1),\n            await H(algo.salt2),\n            _gA,\n            request.srpB,\n            _kA,\n        ]),\n    )\n\n    return {\n        _: 'inputCheckPasswordSRP',\n        srpId: request.srpId,\n        A: _gA,\n        M1: _M1,\n    }\n}\n"]}
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/utils/crypto/password.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEvD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC3E,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEtC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,MAAuB,EACvB,QAAoB,EACpB,KAAiB,EACjB,KAAiB;IAEjB,MAAM,EAAE,GAAG,CAAC,IAAgB,EAAE,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACnG,MAAM,GAAG,GAAG,CAAC,GAAe,EAAE,KAAiB,EAAE,KAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAEhG,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AACrF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,IAA6E,EAC7E,QAAgB;IAEhB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;IACpD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrB,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CACnD;IAAC,IAAgC,CAAC,KAAK,GAAG,KAAK,CAAA;IAEhD,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAElG,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAE5B,OAAO,cAAc,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,MAAuB,EACvB,OAA+B,EAC/B,QAAgB;IAEhB,wBAAwB;IACxB,IACI,CAAC,OAAO,CAAC,WAAW;QACpB,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,mEAAmE,EAC/F;QACE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;KACzE;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAA;IAEhC,iFAAiF;IAEjF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QACf,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;KACnE;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;QAChB,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAA;KACpE;IAED,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvC,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IACjD,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAChC,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAEnC,MAAM,CAAC,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEnD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACrD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5D,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAClG,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAE5B,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IAEtB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;IACf,IAAI,CAAC,GAAG,EAAE;QAAE,CAAC,IAAI,CAAC,CAAA;IAClB,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IACxC,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;IAEtC,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;IAEjH,OAAO;QACH,CAAC,EAAE,uBAAuB;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,CAAC,EAAE,GAAG;QACN,EAAE,EAAE,GAAG;KACV,CAAA;AACL,CAAC","sourcesContent":["import { tl } from '@mtcute/tl'\nimport { utf8EncodeToBuffer } from '@mtcute/tl-runtime'\n\nimport { MtSecurityError, MtUnsupportedError } from '../../types/errors.js'\nimport { bigIntModPow, bigIntToBuffer, bufferToBigInt } from '../bigint-utils.js'\nimport { concatBuffers } from '../buffer-utils.js'\nimport { ICryptoProvider } from './abstract.js'\nimport { xorBuffer } from './utils.js'\n\n/**\n * Compute password hash as defined by MTProto.\n *\n * See https://core.telegram.org/api/srp#checking-the-password-with-srp\n *\n * @param crypto  Crypto provider\n * @param password  Password\n * @param salt1  Salt 1\n * @param salt2  Salt 2\n */\nexport async function computePasswordHash(\n    crypto: ICryptoProvider,\n    password: Uint8Array,\n    salt1: Uint8Array,\n    salt2: Uint8Array,\n): Promise<Uint8Array> {\n    const SH = (data: Uint8Array, salt: Uint8Array) => crypto.sha256(concatBuffers([salt, data, salt]))\n    const PH1 = (pwd: Uint8Array, salt1: Uint8Array, salt2: Uint8Array) => SH(SH(pwd, salt1), salt2)\n\n    return SH(await crypto.pbkdf2(PH1(password, salt1, salt2), salt1, 100000), salt2)\n}\n\n/**\n * Compute new password SRP hash as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param algo  KDF algorithm\n * @param password  Password\n */\nexport async function computeNewPasswordHash(\n    crypto: ICryptoProvider,\n    algo: tl.RawPasswordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow,\n    password: string,\n): Promise<Uint8Array> {\n    const salt1 = new Uint8Array(algo.salt1.length + 32)\n    salt1.set(algo.salt1)\n    crypto.randomFill(salt1.subarray(algo.salt1.length))\n    ;(algo as tl.Mutable<typeof algo>).salt1 = salt1\n\n    const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2)\n\n    const g = BigInt(algo.g)\n    const p = bufferToBigInt(algo.p)\n    const x = bufferToBigInt(_x)\n\n    return bigIntToBuffer(bigIntModPow(g, x, p), 256)\n}\n\n/**\n * Compute SRP check parameters for 2fa password as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param request  SRP request\n * @param password  2fa password\n */\nexport async function computeSrpParams(\n    crypto: ICryptoProvider,\n    request: tl.account.RawPassword,\n    password: string,\n): Promise<tl.RawInputCheckPasswordSRP> {\n    // nice naming thx durov\n    if (\n        !request.currentAlgo ||\n        request.currentAlgo._ !== 'passwordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow'\n    ) {\n        throw new MtUnsupportedError(`Unknown algo ${request.currentAlgo?._}`)\n    }\n\n    const algo = request.currentAlgo\n\n    // here and after: underscored variables are buffers, non-underscored are bigInts\n\n    if (!request.srpB) {\n        throw new MtSecurityError('SRP_B is not present in the request')\n    }\n\n    if (!request.srpId) {\n        throw new MtSecurityError('SRP_ID is not present in the request')\n    }\n\n    const g = BigInt(algo.g)\n    const _g = bigIntToBuffer(g, 256)\n    const p = bufferToBigInt(algo.p)\n    const gB = bufferToBigInt(request.srpB)\n\n    const a = bufferToBigInt(crypto.randomBytes(256))\n    const gA = bigIntModPow(g, a, p)\n    const _gA = bigIntToBuffer(gA, 256)\n\n    const H = (data: Uint8Array) => crypto.sha256(data)\n\n    const _k = crypto.sha256(concatBuffers([algo.p, _g]))\n    const _u = crypto.sha256(concatBuffers([_gA, request.srpB]))\n    const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2)\n    const k = bufferToBigInt(_k)\n    const u = bufferToBigInt(_u)\n    const x = bufferToBigInt(_x)\n\n    const v = bigIntModPow(g, x, p)\n    const kV = (k * v) % p\n\n    let t = gB - kV\n    if (t < 0n) t += p\n    const sA = bigIntModPow(t, a + u * x, p)\n    const _kA = H(bigIntToBuffer(sA, 256))\n\n    const _M1 = H(concatBuffers([xorBuffer(H(algo.p), H(_g)), H(algo.salt1), H(algo.salt2), _gA, request.srpB, _kA]))\n\n    return {\n        _: 'inputCheckPasswordSRP',\n        srpId: request.srpId,\n        A: _gA,\n        M1: _M1,\n    }\n}\n"]}

package/esm/utils/crypto/wasm.d.ts

@@ -0,0 +1,22 @@
+import { InitInput } from '@mtcute/wasm';
+import { BaseCryptoProvider, IAesCtr, ICryptoProvider, IEncryptionScheme } from './abstract.js';
+export interface WasmCryptoProviderOptions {
+    /**
+     * WASM blob to use for crypto operations.
+     *
+     * Must conform to `@mtcute/wasm` interface.
+     */
+    wasmInput?: InitInput;
+}
+export declare abstract class WasmCryptoProvider extends BaseCryptoProvider implements Partial<ICryptoProvider> {
+    readonly wasmInput?: InitInput;
+    abstract randomFill(buf: Uint8Array): void;
+    constructor(params?: WasmCryptoProviderOptions);
+    initialize(): Promise<void>;
+    sha1(data: Uint8Array): Uint8Array;
+    sha256(data: Uint8Array): Uint8Array;
+    createAesCtr(key: Uint8Array, iv: Uint8Array): IAesCtr;
+    createAesIge(key: Uint8Array, iv: Uint8Array): IEncryptionScheme;
+    gzip(data: Uint8Array, maxSize: number): Uint8Array | null;
+    gunzip(data: Uint8Array): Uint8Array;
+}

package/esm/utils/crypto/wasm.js

@@ -0,0 +1,37 @@
+import { createCtr256, ctr256, deflateMaxSize, freeCtr256, gunzip, ige256Decrypt, ige256Encrypt, initAsync, sha1, sha256, } from '@mtcute/wasm';
+import { BaseCryptoProvider } from './abstract.js';
+export class WasmCryptoProvider extends BaseCryptoProvider {
+    constructor(params) {
+        super();
+        this.wasmInput = params?.wasmInput;
+    }
+    initialize() {
+        return initAsync(this.wasmInput);
+    }
+    sha1(data) {
+        return sha1(data);
+    }
+    sha256(data) {
+        return sha256(data);
+    }
+    createAesCtr(key, iv) {
+        const ctx = createCtr256(key, iv);
+        return {
+            process: (data) => ctr256(ctx, data),
+            close: () => freeCtr256(ctx),
+        };
+    }
+    createAesIge(key, iv) {
+        return {
+            encrypt: (data) => ige256Encrypt(data, key, iv),
+            decrypt: (data) => ige256Decrypt(data, key, iv),
+        };
+    }
+    gzip(data, maxSize) {
+        return deflateMaxSize(data, maxSize);
+    }
+    gunzip(data) {
+        return gunzip(data);
+    }
+}
+//# sourceMappingURL=wasm.js.map

package/esm/utils/crypto/wasm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm.js","sourceRoot":"","sources":["../../../../src/utils/crypto/wasm.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,YAAY,EACZ,MAAM,EACN,cAAc,EACd,UAAU,EACV,MAAM,EACN,aAAa,EACb,aAAa,EACb,SAAS,EAET,IAAI,EACJ,MAAM,GACT,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,kBAAkB,EAA+C,MAAM,eAAe,CAAA;AAW/F,MAAM,OAAgB,kBAAmB,SAAQ,kBAAkB;IAK/D,YAAY,MAAkC;QAC1C,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,CAAA;IACtC,CAAC;IAED,UAAU;QACN,OAAO,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACpC,CAAC;IAED,IAAI,CAAC,IAAgB;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;IAED,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAEjC,OAAO;YACH,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC;YACpC,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;SAC/B,CAAA;IACL,CAAC;IAED,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,OAAO;YACH,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;YAC/C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SAClD,CAAA;IACL,CAAC;IAED,IAAI,CAAC,IAAgB,EAAE,OAAe;QAClC,OAAO,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACxC,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;CACJ","sourcesContent":["import {\n    createCtr256,\n    ctr256,\n    deflateMaxSize,\n    freeCtr256,\n    gunzip,\n    ige256Decrypt,\n    ige256Encrypt,\n    initAsync,\n    InitInput,\n    sha1,\n    sha256,\n} from '@mtcute/wasm'\n\nimport { BaseCryptoProvider, IAesCtr, ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\nexport interface WasmCryptoProviderOptions {\n    /**\n     * WASM blob to use for crypto operations.\n     *\n     * Must conform to `@mtcute/wasm` interface.\n     */\n    wasmInput?: InitInput\n}\n\nexport abstract class WasmCryptoProvider extends BaseCryptoProvider implements Partial<ICryptoProvider> {\n    readonly wasmInput?: InitInput\n\n    abstract randomFill(buf: Uint8Array): void\n\n    constructor(params?: WasmCryptoProviderOptions) {\n        super()\n        this.wasmInput = params?.wasmInput\n    }\n\n    initialize(): Promise<void> {\n        return initAsync(this.wasmInput)\n    }\n\n    sha1(data: Uint8Array): Uint8Array {\n        return sha1(data)\n    }\n\n    sha256(data: Uint8Array): Uint8Array {\n        return sha256(data)\n    }\n\n    createAesCtr(key: Uint8Array, iv: Uint8Array): IAesCtr {\n        const ctx = createCtr256(key, iv)\n\n        return {\n            process: (data) => ctr256(ctx, data),\n            close: () => freeCtr256(ctx),\n        }\n    }\n\n    createAesIge(key: Uint8Array, iv: Uint8Array): IEncryptionScheme {\n        return {\n            encrypt: (data) => ige256Encrypt(data, key, iv),\n            decrypt: (data) => ige256Decrypt(data, key, iv),\n        }\n    }\n\n    gzip(data: Uint8Array, maxSize: number): Uint8Array | null {\n        return deflateMaxSize(data, maxSize)\n    }\n\n    gunzip(data: Uint8Array): Uint8Array {\n        return gunzip(data)\n    }\n}\n"]}

package/esm/utils/crypto/web.d.ts

@@ -0,0 +1,11 @@
+import { ICryptoProvider } from './abstract.js';
+import { WasmCryptoProvider, WasmCryptoProviderOptions } from './wasm.js';
+export declare class WebCryptoProvider extends WasmCryptoProvider implements ICryptoProvider {
+    readonly crypto: Crypto;
+    constructor(params?: WasmCryptoProviderOptions & {
+        crypto?: Crypto;
+    });
+    pbkdf2(password: Uint8Array, salt: Uint8Array, iterations: number, keylen?: number | undefined, algo?: string | undefined): Promise<Uint8Array>;
+    hmacSha256(data: Uint8Array, key: Uint8Array): Promise<Uint8Array>;
+    randomFill(buf: Uint8Array): void;
+}

package/esm/utils/crypto/web.js

@@ -0,0 +1,36 @@
+import { WasmCryptoProvider } from './wasm.js';
+const ALGO_TO_SUBTLE = {
+    sha256: 'SHA-256',
+    sha1: 'SHA-1',
+    sha512: 'SHA-512',
+};
+export class WebCryptoProvider extends WasmCryptoProvider {
+    constructor(params) {
+        super(params);
+        const crypto = params?.crypto ?? globalThis.crypto;
+        if (!crypto || !crypto.subtle) {
+            throw new Error('WebCrypto is not available');
+        }
+        this.crypto = crypto;
+    }
+    async pbkdf2(password, salt, iterations, keylen, algo) {
+        const keyMaterial = await this.crypto.subtle.importKey('raw', password, 'PBKDF2', false, ['deriveBits']);
+        return this.crypto.subtle
+            .deriveBits({
+            name: 'PBKDF2',
+            salt,
+            iterations,
+            hash: algo ? ALGO_TO_SUBTLE[algo] : 'SHA-512',
+        }, keyMaterial, (keylen || 64) * 8)
+            .then((result) => new Uint8Array(result));
+    }
+    async hmacSha256(data, key) {
+        const keyMaterial = await this.crypto.subtle.importKey('raw', key, { name: 'HMAC', hash: { name: 'SHA-256' } }, false, ['sign']);
+        const res = await this.crypto.subtle.sign({ name: 'HMAC' }, keyMaterial, data);
+        return new Uint8Array(res);
+    }
+    randomFill(buf) {
+        this.crypto.getRandomValues(buf);
+    }
+}
+//# sourceMappingURL=web.js.map

package/esm/utils/crypto/web.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.js","sourceRoot":"","sources":["../../../../src/utils/crypto/web.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAA6B,MAAM,WAAW,CAAA;AAEzE,MAAM,cAAc,GAA2B;IAC3C,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,SAAS;CACpB,CAAA;AAED,MAAM,OAAO,iBAAkB,SAAQ,kBAAkB;IAGrD,YAAY,MAAwD;QAChE,KAAK,CAAC,MAAM,CAAC,CAAA;QACb,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,CAAA;QAElD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;SAChD;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,MAAM,CACR,QAAoB,EACpB,IAAgB,EAChB,UAAkB,EAClB,MAA2B,EAC3B,IAAyB;QAEzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;QAExG,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM;aACpB,UAAU,CACP;YACI,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,UAAU;YACV,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAChD,EACD,WAAW,EACX,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CACrB;aACA,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAgB,EAAE,GAAe;QAC9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAClD,KAAK,EACL,GAAG,EACH,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAC3C,KAAK,EACL,CAAC,MAAM,CAAC,CACX,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;QAE9E,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,UAAU,CAAC,GAAe;QACtB,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;IACpC,CAAC;CACJ","sourcesContent":["import { ICryptoProvider } from './abstract.js'\nimport { WasmCryptoProvider, WasmCryptoProviderOptions } from './wasm.js'\n\nconst ALGO_TO_SUBTLE: Record<string, string> = {\n    sha256: 'SHA-256',\n    sha1: 'SHA-1',\n    sha512: 'SHA-512',\n}\n\nexport class WebCryptoProvider extends WasmCryptoProvider implements ICryptoProvider {\n    readonly crypto: Crypto\n\n    constructor(params?: WasmCryptoProviderOptions & { crypto?: Crypto }) {\n        super(params)\n        const crypto = params?.crypto ?? globalThis.crypto\n\n        if (!crypto || !crypto.subtle) {\n            throw new Error('WebCrypto is not available')\n        }\n        this.crypto = crypto\n    }\n\n    async pbkdf2(\n        password: Uint8Array,\n        salt: Uint8Array,\n        iterations: number,\n        keylen?: number | undefined,\n        algo?: string | undefined,\n    ): Promise<Uint8Array> {\n        const keyMaterial = await this.crypto.subtle.importKey('raw', password, 'PBKDF2', false, ['deriveBits'])\n\n        return this.crypto.subtle\n            .deriveBits(\n                {\n                    name: 'PBKDF2',\n                    salt,\n                    iterations,\n                    hash: algo ? ALGO_TO_SUBTLE[algo] : 'SHA-512',\n                },\n                keyMaterial,\n                (keylen || 64) * 8,\n            )\n            .then((result) => new Uint8Array(result))\n    }\n\n    async hmacSha256(data: Uint8Array, key: Uint8Array): Promise<Uint8Array> {\n        const keyMaterial = await this.crypto.subtle.importKey(\n            'raw',\n            key,\n            { name: 'HMAC', hash: { name: 'SHA-256' } },\n            false,\n            ['sign'],\n        )\n\n        const res = await this.crypto.subtle.sign({ name: 'HMAC' }, keyMaterial, data)\n\n        return new Uint8Array(res)\n    }\n\n    randomFill(buf: Uint8Array): void {\n        this.crypto.getRandomValues(buf)\n    }\n}\n"]}

package/esm/utils/deque.d.ts

@@ -10,7 +10,7 @@ export declare class Deque<T> {
     protected _head: number;
     protected _tail: number;
     protected _capacity: number;
-    constructor(minCapacity?: number, maxLength?: number);
+    constructor(maxLength?: number, minCapacity?: number);
     protected _resize(): void;
     pushBack(item: T): void;
     pushFront(item: T): void;