@mtcute/core 0.1.0 → 0.1.1

package/cjs/utils/crypto/keys.js

@@ -12,7 +12,7 @@ const asn1_parser_js_1 = require("../binary/asn1-parser.js");
  * @param key  PEM-encoded RSA public key
  * @param old  Whether this is an "old" key
  */
-async function parsePublicKey(crypto, key, old = false) {
+function parsePublicKey(crypto, key, old = false) {
     const asn1 = (0, asn1_parser_js_1.parseAsn1)((0, asn1_parser_js_1.parsePemContents)(key));
     const modulus = asn1.children?.[0].value;
     const exponent = asn1.children?.[1].value;
@@ -23,7 +23,7 @@ async function parsePublicKey(crypto, key, old = false) {
     writer.bytes(modulus);
     writer.bytes(exponent);
     const data = writer.result();
-    const sha = await crypto.sha1(data);
+    const sha = crypto.sha1(data);
     const fp = (0, tl_runtime_1.hexEncode)(sha.slice(-8).reverse());
     return {
         modulus: (0, tl_runtime_1.hexEncode)(modulus),
@@ -40,8 +40,8 @@ exports.parsePublicKey = parsePublicKey;
  * @param key  PEM-encoded RSA public key
  * @param old  Whether this is an "old" key
  */
-async function addPublicKey(crypto, key, old = false) {
-    const parsed = await parsePublicKey(crypto, key, old);
+function addPublicKey(crypto, key, old = false) {
+    const parsed = parsePublicKey(crypto, key, old);
     rsa_keys_js_1.__publicKeyIndex[parsed.fingerprint] = parsed;
 }
 exports.addPublicKey = addPublicKey;

package/cjs/utils/crypto/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../src/utils/crypto/keys.ts"],"names":[],"mappings":";;;AAEA,+DAA0F;AAC1F,mDAA8D;AAE9D,6DAAsE;AAGtE;;;;;;;GAOG;AACI,KAAK,UAAU,cAAc,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAClF,MAAM,IAAI,GAAG,IAAA,0BAAS,EAAC,IAAA,iCAAgB,EAAC,GAAG,CAAC,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACzC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAEhE,MAAM,MAAM,GAAG,2BAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACzC,yDAAyD;IACzD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,EAAE,GAAG,IAAA,sBAAS,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAE7C,OAAO;QACH,OAAO,EAAE,IAAA,sBAAS,EAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,IAAA,sBAAS,EAAC,QAAQ,CAAC;QAC7B,WAAW,EAAE,EAAE;QACf,GAAG;KACN,CAAA;AACL,CAAC;AArBD,wCAqBC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,YAAY,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAChF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,8BAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,CAAA;AAC1C,CAAC;AAHD,oCAGC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,YAA+B,EAAE,QAAQ,GAAG,KAAK;IACnF,KAAK,IAAI,EAAE,IAAI,YAAY,EAAE;QACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE;YACxB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;SACpC;QACD,IAAI,EAAE,IAAI,8BAAS,EAAE;YACjB,IAAI,8BAAS,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YAE5C,OAAO,8BAAS,CAAC,EAAE,CAAC,CAAA;SACvB;KACJ;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,qBAAqB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IAE/D,OAAO,IAAI,CAAA;AACf,CAAC;AAdD,sDAcC","sourcesContent":["import Long from 'long'\n\nimport { __publicKeyIndex as keysIndex, TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js'\nimport { hexEncode, TlBinaryWriter } from '@mtcute/tl-runtime'\n\nimport { parseAsn1, parsePemContents } from '../binary/asn1-parser.js'\nimport { ICryptoProvider } from './abstract.js'\n\n/**\n * Parse PEM-encoded RSA public key information into modulus and exponent\n * and compute its fingerprint as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport async function parsePublicKey(crypto: ICryptoProvider, key: string, old = false): Promise<TlPublicKey> {\n    const asn1 = parseAsn1(parsePemContents(key))\n    const modulus = asn1.children?.[0].value\n    const exponent = asn1.children?.[1].value\n    if (!modulus || !exponent) throw new Error('Invalid public key')\n\n    const writer = TlBinaryWriter.manual(512)\n    // they are actually smaller, about 270 bytes, but idc :D\n    writer.bytes(modulus)\n    writer.bytes(exponent)\n\n    const data = writer.result()\n    const sha = await crypto.sha1(data)\n    const fp = hexEncode(sha.slice(-8).reverse())\n\n    return {\n        modulus: hexEncode(modulus),\n        exponent: hexEncode(exponent),\n        fingerprint: fp,\n        old,\n    }\n}\n\n/**\n * Add public key to the global index.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport async function addPublicKey(crypto: ICryptoProvider, key: string, old = false): Promise<void> {\n    const parsed = await parsePublicKey(crypto, key, old)\n    keysIndex[parsed.fingerprint] = parsed\n}\n\n/**\n * Get public key by its fingerprint.\n *\n * @param fingerprints  Fingerprints to match. The first one to match is returned.\n * @param allowOld  Whether to allow \"old\" keys\n */\nexport function findKeyByFingerprints(fingerprints: (string | Long)[], allowOld = false): TlPublicKey | null {\n    for (let fp of fingerprints) {\n        if (typeof fp !== 'string') {\n            fp = fp.toUnsigned().toString(16)\n        }\n        if (fp in keysIndex) {\n            if (keysIndex[fp].old && !allowOld) continue\n\n            return keysIndex[fp]\n        }\n    }\n    if (!allowOld) return findKeyByFingerprints(fingerprints, true)\n\n    return null\n}\n"]}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../src/utils/crypto/keys.ts"],"names":[],"mappings":";;;AAEA,+DAA0F;AAC1F,mDAA8D;AAE9D,6DAAsE;AAGtE;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAC5E,MAAM,IAAI,GAAG,IAAA,0BAAS,EAAC,IAAA,iCAAgB,EAAC,GAAG,CAAC,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACzC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAEhE,MAAM,MAAM,GAAG,2BAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACzC,yDAAyD;IACzD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7B,MAAM,EAAE,GAAG,IAAA,sBAAS,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAE7C,OAAO;QACH,OAAO,EAAE,IAAA,sBAAS,EAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,IAAA,sBAAS,EAAC,QAAQ,CAAC;QAC7B,WAAW,EAAE,EAAE;QACf,GAAG;KACN,CAAA;AACL,CAAC;AArBD,wCAqBC;AAED;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAC/C,8BAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,CAAA;AAC1C,CAAC;AAHD,oCAGC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,YAA+B,EAAE,QAAQ,GAAG,KAAK;IACnF,KAAK,IAAI,EAAE,IAAI,YAAY,EAAE;QACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE;YACxB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;SACpC;QACD,IAAI,EAAE,IAAI,8BAAS,EAAE;YACjB,IAAI,8BAAS,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YAE5C,OAAO,8BAAS,CAAC,EAAE,CAAC,CAAA;SACvB;KACJ;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,qBAAqB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IAE/D,OAAO,IAAI,CAAA;AACf,CAAC;AAdD,sDAcC","sourcesContent":["import Long from 'long'\n\nimport { __publicKeyIndex as keysIndex, TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js'\nimport { hexEncode, TlBinaryWriter } from '@mtcute/tl-runtime'\n\nimport { parseAsn1, parsePemContents } from '../binary/asn1-parser.js'\nimport { ICryptoProvider } from './abstract.js'\n\n/**\n * Parse PEM-encoded RSA public key information into modulus and exponent\n * and compute its fingerprint as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport function parsePublicKey(crypto: ICryptoProvider, key: string, old = false): TlPublicKey {\n    const asn1 = parseAsn1(parsePemContents(key))\n    const modulus = asn1.children?.[0].value\n    const exponent = asn1.children?.[1].value\n    if (!modulus || !exponent) throw new Error('Invalid public key')\n\n    const writer = TlBinaryWriter.manual(512)\n    // they are actually smaller, about 270 bytes, but idc :D\n    writer.bytes(modulus)\n    writer.bytes(exponent)\n\n    const data = writer.result()\n    const sha = crypto.sha1(data)\n    const fp = hexEncode(sha.slice(-8).reverse())\n\n    return {\n        modulus: hexEncode(modulus),\n        exponent: hexEncode(exponent),\n        fingerprint: fp,\n        old,\n    }\n}\n\n/**\n * Add public key to the global index.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport function addPublicKey(crypto: ICryptoProvider, key: string, old = false): void {\n    const parsed = parsePublicKey(crypto, key, old)\n    keysIndex[parsed.fingerprint] = parsed\n}\n\n/**\n * Get public key by its fingerprint.\n *\n * @param fingerprints  Fingerprints to match. The first one to match is returned.\n * @param allowOld  Whether to allow \"old\" keys\n */\nexport function findKeyByFingerprints(fingerprints: (string | Long)[], allowOld = false): TlPublicKey | null {\n    for (let fp of fingerprints) {\n        if (typeof fp !== 'string') {\n            fp = fp.toUnsigned().toString(16)\n        }\n        if (fp in keysIndex) {\n            if (keysIndex[fp].old && !allowOld) continue\n\n            return keysIndex[fp]\n        }\n    }\n    if (!allowOld) return findKeyByFingerprints(fingerprints, true)\n\n    return null\n}\n"]}

package/cjs/utils/crypto/miller-rabin.d.ts

@@ -1,2 +1,2 @@
-import { BigInteger } from 'big-integer';
-export declare function millerRabin(n: BigInteger, rounds?: number): boolean;
+import { ICryptoProvider } from './abstract.js';
+export declare function millerRabin(crypto: ICryptoProvider, n: bigint, rounds?: number): boolean;

package/cjs/utils/crypto/miller-rabin.js

@@ -1,41 +1,39 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.millerRabin = void 0;
-const big_integer_1 = __importDefault(require("big-integer"));
 const bigint_utils_js_1 = require("../bigint-utils.js");
-function millerRabin(n, rounds = 20) {
+function millerRabin(crypto, n, rounds = 20) {
     // small numbers: 0, 1 are not prime, 2, 3 are prime
-    if (n.lt(big_integer_1.default[4]))
-        return n.gt(big_integer_1.default[1]);
-    if (n.isEven() || n.isNegative())
+    if (n < 4n)
+        return n > 1n;
+    if (n % 2n === 0n || n < 0n)
         return false;
-    const nBits = n.bitLength().toJSNumber();
-    const nSub = n.minus(1);
+    const nBits = (0, bigint_utils_js_1.bigIntBitLength)(n);
+    const nSub = n - 1n;
     const r = (0, bigint_utils_js_1.twoMultiplicity)(nSub);
-    const d = nSub.shiftRight(r);
+    const d = nSub >> r;
     for (let i = 0; i < rounds; i++) {
         let base;
         do {
-            base = (0, bigint_utils_js_1.randomBigIntBits)(nBits);
-        } while (base.leq(big_integer_1.default.one) || base.geq(nSub));
-        let x = base.modPow(d, n);
-        if (x.eq(big_integer_1.default.one) || x.eq(nSub))
+            base = (0, bigint_utils_js_1.randomBigIntBits)(crypto, nBits);
+        } while (base <= 1n || base >= nSub);
+        let x = (0, bigint_utils_js_1.bigIntModPow)(base, d, n);
+        // if (x.eq(bigInt.one) || x.eq(nSub)) continue
+        if (x === 1n || x === nSub)
             continue;
-        let i = big_integer_1.default.zero;
+        let i = 0n;
         let y;
-        while (i.lt(r)) {
-            y = x.modPow(big_integer_1.default[2], n);
-            if (x.eq(big_integer_1.default.one))
+        while (i < r) {
+            // y = x.modPow(bigInt[2], n)
+            y = (0, bigint_utils_js_1.bigIntModPow)(x, 2n, n);
+            if (x === 1n)
                 return false;
-            if (x.eq(nSub))
+            if (x === nSub)
                 break;
-            i = i.plus(big_integer_1.default.one);
+            i += 1n;
             x = y;
         }
-        if (i.eq(r))
+        if (i === r)
             return false;
     }
     return true;

package/cjs/utils/crypto/miller-rabin.js.map

@@ -1 +1 @@
-{"version":3,"file":"miller-rabin.js","sourceRoot":"","sources":["../../../../src/utils/crypto/miller-rabin.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgD;AAEhD,wDAAsE;AAEtE,SAAgB,WAAW,CAAC,CAAa,EAAE,MAAM,GAAG,EAAE;IAClD,oDAAoD;IACpD,IAAI,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE;QAAE,OAAO,KAAK,CAAA;IAE9C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,CAAA;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAEvB,MAAM,CAAC,GAAG,IAAA,iCAAe,EAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAA;QAER,GAAG;YACC,IAAI,GAAG,IAAA,kCAAgB,EAAC,KAAK,CAAC,CAAA;SACjC,QAAQ,IAAI,CAAC,GAAG,CAAC,qBAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAC;QAEhD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,SAAQ;QAE5C,IAAI,CAAC,GAAG,qBAAM,CAAC,IAAI,CAAA;QACnB,IAAI,CAAa,CAAA;QAEjB,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YACZ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,qBAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAE1B,IAAI,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YAClC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,MAAK;YACrB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAM,CAAC,GAAG,CAAC,CAAA;YAEtB,CAAC,GAAG,CAAC,CAAA;SACR;QAED,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;KAC5B;IAED,OAAO,IAAI,CAAA;AACf,CAAC;AAtCD,kCAsCC","sourcesContent":["import bigInt, { BigInteger } from 'big-integer'\n\nimport { randomBigIntBits, twoMultiplicity } from '../bigint-utils.js'\n\nexport function millerRabin(n: BigInteger, rounds = 20): boolean {\n    // small numbers: 0, 1 are not prime, 2, 3 are prime\n    if (n.lt(bigInt[4])) return n.gt(bigInt[1])\n    if (n.isEven() || n.isNegative()) return false\n\n    const nBits = n.bitLength().toJSNumber()\n    const nSub = n.minus(1)\n\n    const r = twoMultiplicity(nSub)\n    const d = nSub.shiftRight(r)\n\n    for (let i = 0; i < rounds; i++) {\n        let base\n\n        do {\n            base = randomBigIntBits(nBits)\n        } while (base.leq(bigInt.one) || base.geq(nSub))\n\n        let x = base.modPow(d, n)\n        if (x.eq(bigInt.one) || x.eq(nSub)) continue\n\n        let i = bigInt.zero\n        let y: BigInteger\n\n        while (i.lt(r)) {\n            y = x.modPow(bigInt[2], n)\n\n            if (x.eq(bigInt.one)) return false\n            if (x.eq(nSub)) break\n            i = i.plus(bigInt.one)\n\n            x = y\n        }\n\n        if (i.eq(r)) return false\n    }\n\n    return true\n}\n"]}
+{"version":3,"file":"miller-rabin.js","sourceRoot":"","sources":["../../../../src/utils/crypto/miller-rabin.ts"],"names":[],"mappings":";;;AAAA,wDAAqG;AAGrG,SAAgB,WAAW,CAAC,MAAuB,EAAE,CAAS,EAAE,MAAM,GAAG,EAAE;IACvE,oDAAoD;IACpD,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,CAAC,GAAG,EAAE,CAAA;IACzB,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,KAAK,CAAA;IAEzC,MAAM,KAAK,GAAG,IAAA,iCAAe,EAAC,CAAC,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAA;IAEnB,MAAM,CAAC,GAAG,IAAA,iCAAe,EAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAA;QAER,GAAG;YACC,IAAI,GAAG,IAAA,kCAAgB,EAAC,MAAM,EAAE,KAAK,CAAC,CAAA;SACzC,QAAQ,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,IAAI,EAAC;QAEpC,IAAI,CAAC,GAAG,IAAA,8BAAY,EAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAChC,+CAA+C;QAC/C,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI;YAAE,SAAQ;QAEpC,IAAI,CAAC,GAAG,EAAE,CAAA;QACV,IAAI,CAAS,CAAA;QAEb,OAAO,CAAC,GAAG,CAAC,EAAE;YACV,6BAA6B;YAC7B,CAAC,GAAG,IAAA,8BAAY,EAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;YAE1B,IAAI,CAAC,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAA;YAC1B,IAAI,CAAC,KAAK,IAAI;gBAAE,MAAK;YACrB,CAAC,IAAI,EAAE,CAAA;YAEP,CAAC,GAAG,CAAC,CAAA;SACR;QAED,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;KAC5B;IAED,OAAO,IAAI,CAAA;AACf,CAAC;AAxCD,kCAwCC","sourcesContent":["import { bigIntBitLength, bigIntModPow, randomBigIntBits, twoMultiplicity } from '../bigint-utils.js'\nimport { ICryptoProvider } from './abstract.js'\n\nexport function millerRabin(crypto: ICryptoProvider, n: bigint, rounds = 20): boolean {\n    // small numbers: 0, 1 are not prime, 2, 3 are prime\n    if (n < 4n) return n > 1n\n    if (n % 2n === 0n || n < 0n) return false\n\n    const nBits = bigIntBitLength(n)\n    const nSub = n - 1n\n\n    const r = twoMultiplicity(nSub)\n    const d = nSub >> r\n\n    for (let i = 0; i < rounds; i++) {\n        let base\n\n        do {\n            base = randomBigIntBits(crypto, nBits)\n        } while (base <= 1n || base >= nSub)\n\n        let x = bigIntModPow(base, d, n)\n        // if (x.eq(bigInt.one) || x.eq(nSub)) continue\n        if (x === 1n || x === nSub) continue\n\n        let i = 0n\n        let y: bigint\n\n        while (i < r) {\n            // y = x.modPow(bigInt[2], n)\n            y = bigIntModPow(x, 2n, n)\n\n            if (x === 1n) return false\n            if (x === nSub) break\n            i += 1n\n\n            x = y\n        }\n\n        if (i === r) return false\n    }\n\n    return true\n}\n"]}

package/cjs/utils/crypto/mtproto.d.ts

@@ -8,7 +8,7 @@ import { ICryptoProvider, IEncryptionScheme } from './abstract.js';
  * @param newNonce  New nonce
  * @returns  Tuple: `[key, iv]`
  */
-export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serverNonce: Uint8Array, newNonce: Uint8Array): Promise<[Uint8Array, Uint8Array]>;
+export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serverNonce: Uint8Array, newNonce: Uint8Array): [Uint8Array, Uint8Array];
 /**
  * Create AES IGE instance for message (given auth key and message key)
  * as defined by MTProto v2.
@@ -18,7 +18,7 @@ export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serve
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): Promise<IEncryptionScheme>;
+export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): IEncryptionScheme;
 /**
  * Create AES IGE instance for file (given auth key and message key)
  * as defined by MTProto v1.
@@ -28,4 +28,4 @@ export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey:
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-export declare function createAesIgeForMessageOld(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): Promise<IEncryptionScheme>;
+export declare function createAesIgeForMessageOld(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): IEncryptionScheme;

package/cjs/utils/crypto/mtproto.js

@@ -11,10 +11,10 @@ const buffer_utils_js_1 = require("../buffer-utils.js");
  * @param newNonce  New nonce
  * @returns  Tuple: `[key, iv]`
  */
-async function generateKeyAndIvFromNonce(crypto, serverNonce, newNonce) {
-    const hash1 = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, serverNonce]));
-    const hash2 = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([serverNonce, newNonce]));
-    const hash3 = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, newNonce]));
+function generateKeyAndIvFromNonce(crypto, serverNonce, newNonce) {
+    const hash1 = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, serverNonce]));
+    const hash2 = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([serverNonce, newNonce]));
+    const hash3 = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, newNonce]));
     const key = (0, buffer_utils_js_1.concatBuffers)([hash1, hash2.subarray(0, 12)]);
     const iv = (0, buffer_utils_js_1.concatBuffers)([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)]);
     return [key, iv];
@@ -29,10 +29,10 @@ exports.generateKeyAndIvFromNonce = generateKeyAndIvFromNonce;
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-async function createAesIgeForMessage(crypto, authKey, messageKey, client) {
+function createAesIgeForMessage(crypto, authKey, messageKey, client) {
     const x = client ? 0 : 8;
-    const sha256a = await crypto.sha256((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(x, 36 + x)]));
-    const sha256b = await crypto.sha256((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(40 + x, 76 + x), messageKey]));
+    const sha256a = crypto.sha256((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(x, 36 + x)]));
+    const sha256b = crypto.sha256((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(40 + x, 76 + x), messageKey]));
     const key = (0, buffer_utils_js_1.concatBuffers)([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)]);
     const iv = (0, buffer_utils_js_1.concatBuffers)([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)]);
     return crypto.createAesIge(key, iv);
@@ -47,12 +47,12 @@ exports.createAesIgeForMessage = createAesIgeForMessage;
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-async function createAesIgeForMessageOld(crypto, authKey, messageKey, client) {
+function createAesIgeForMessageOld(crypto, authKey, messageKey, client) {
     const x = client ? 0 : 8;
-    const sha1a = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(x, 32 + x)]));
-    const sha1b = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]));
-    const sha1c = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(64 + x, 96 + x), messageKey]));
-    const sha1d = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(96 + x, 128 + x)]));
+    const sha1a = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(x, 32 + x)]));
+    const sha1b = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]));
+    const sha1c = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(64 + x, 96 + x), messageKey]));
+    const sha1d = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(96 + x, 128 + x)]));
     const key = (0, buffer_utils_js_1.concatBuffers)([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)]);
     const iv = (0, buffer_utils_js_1.concatBuffers)([
         sha1a.subarray(8, 20),

package/cjs/utils/crypto/mtproto.js.map

@@ -1 +1 @@
-{"version":3,"file":"mtproto.js","sourceRoot":"","sources":["../../../../src/utils/crypto/mtproto.ts"],"names":[],"mappings":";;;AAAA,wDAAkD;AAGlD;;;;;;;;GAQG;AACI,KAAK,UAAU,yBAAyB,CAC3C,MAAuB,EACvB,WAAuB,EACvB,QAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAEpE,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAElF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACpB,CAAC;AAbD,8DAaC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7F,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAElG,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACtG,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAErG,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAdD,wDAcC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,yBAAyB,CAC3C,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACzF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAC9F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/F,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/F,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;KACvB,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAvBD,8DAuBC","sourcesContent":["import { concatBuffers } from '../buffer-utils.js'\nimport { ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\n/**\n * Generate AES key and IV from nonces as defined by MTProto.\n * Used in authorization flow.\n *\n * @param crypto  Crypto provider\n * @param serverNonce  Server nonce\n * @param newNonce  New nonce\n * @returns  Tuple: `[key, iv]`\n */\nexport async function generateKeyAndIvFromNonce(\n    crypto: ICryptoProvider,\n    serverNonce: Uint8Array,\n    newNonce: Uint8Array,\n): Promise<[Uint8Array, Uint8Array]> {\n    const hash1 = await crypto.sha1(concatBuffers([newNonce, serverNonce]))\n    const hash2 = await crypto.sha1(concatBuffers([serverNonce, newNonce]))\n    const hash3 = await crypto.sha1(concatBuffers([newNonce, newNonce]))\n\n    const key = concatBuffers([hash1, hash2.subarray(0, 12)])\n    const iv = concatBuffers([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)])\n\n    return [key, iv]\n}\n\n/**\n * Create AES IGE instance for message (given auth key and message key)\n * as defined by MTProto v2.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport async function createAesIgeForMessage(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): Promise<IEncryptionScheme> {\n    const x = client ? 0 : 8\n    const sha256a = await crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]))\n    const sha256b = await crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]))\n\n    const key = concatBuffers([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)])\n    const iv = concatBuffers([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)])\n\n    return crypto.createAesIge(key, iv)\n}\n\n/**\n * Create AES IGE instance for file (given auth key and message key)\n * as defined by MTProto v1.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport async function createAesIgeForMessageOld(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): Promise<IEncryptionScheme> {\n    const x = client ? 0 : 8\n    const sha1a = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]))\n    const sha1b = await crypto.sha1(\n        concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]),\n    )\n    const sha1c = await crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]))\n    const sha1d = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]))\n\n    const key = concatBuffers([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)])\n    const iv = concatBuffers([\n        sha1a.subarray(8, 20),\n        sha1b.subarray(0, 8),\n        sha1c.subarray(16, 20),\n        sha1d.subarray(0, 8),\n    ])\n\n    return crypto.createAesIge(key, iv)\n}\n"]}
+{"version":3,"file":"mtproto.js","sourceRoot":"","sources":["../../../../src/utils/crypto/mtproto.ts"],"names":[],"mappings":";;;AAAA,wDAAkD;AAGlD;;;;;;;;GAQG;AACH,SAAgB,yBAAyB,CACrC,MAAuB,EACvB,WAAuB,EACvB,QAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAE9D,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAElF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACpB,CAAC;AAbD,8DAaC;AAED;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAClC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAE5F,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACtG,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAErG,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAdD,wDAcC;AAED;;;;;;;;GAQG;AACH,SAAgB,yBAAyB,CACrC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACrB,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IACxF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAEzF,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/F,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;KACvB,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAvBD,8DAuBC","sourcesContent":["import { concatBuffers } from '../buffer-utils.js'\nimport { ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\n/**\n * Generate AES key and IV from nonces as defined by MTProto.\n * Used in authorization flow.\n *\n * @param crypto  Crypto provider\n * @param serverNonce  Server nonce\n * @param newNonce  New nonce\n * @returns  Tuple: `[key, iv]`\n */\nexport function generateKeyAndIvFromNonce(\n    crypto: ICryptoProvider,\n    serverNonce: Uint8Array,\n    newNonce: Uint8Array,\n): [Uint8Array, Uint8Array] {\n    const hash1 = crypto.sha1(concatBuffers([newNonce, serverNonce]))\n    const hash2 = crypto.sha1(concatBuffers([serverNonce, newNonce]))\n    const hash3 = crypto.sha1(concatBuffers([newNonce, newNonce]))\n\n    const key = concatBuffers([hash1, hash2.subarray(0, 12)])\n    const iv = concatBuffers([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)])\n\n    return [key, iv]\n}\n\n/**\n * Create AES IGE instance for message (given auth key and message key)\n * as defined by MTProto v2.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport function createAesIgeForMessage(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): IEncryptionScheme {\n    const x = client ? 0 : 8\n    const sha256a = crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]))\n    const sha256b = crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]))\n\n    const key = concatBuffers([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)])\n    const iv = concatBuffers([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)])\n\n    return crypto.createAesIge(key, iv)\n}\n\n/**\n * Create AES IGE instance for file (given auth key and message key)\n * as defined by MTProto v1.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport function createAesIgeForMessageOld(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): IEncryptionScheme {\n    const x = client ? 0 : 8\n    const sha1a = crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]))\n    const sha1b = crypto.sha1(\n        concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]),\n    )\n    const sha1c = crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]))\n    const sha1d = crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]))\n\n    const key = concatBuffers([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)])\n    const iv = concatBuffers([\n        sha1a.subarray(8, 20),\n        sha1b.subarray(0, 8),\n        sha1c.subarray(16, 20),\n        sha1d.subarray(0, 8),\n    ])\n\n    return crypto.createAesIge(key, iv)\n}\n"]}

package/cjs/utils/crypto/node.d.ts

@@ -0,0 +1,21 @@
+import { InitInput } from '@mtcute/wasm';
+import { MaybeAsync } from '../../types/index.js';
+import { BaseCryptoProvider, IAesCtr, ICryptoProvider, IEncryptionScheme } from './abstract.js';
+export declare abstract class BaseNodeCryptoProvider extends BaseCryptoProvider {
+    createAesCtr(key: Uint8Array, iv: Uint8Array): IAesCtr;
+    pbkdf2(password: Uint8Array, salt: Uint8Array, iterations: number, keylen?: number, algo?: string): MaybeAsync<Uint8Array>;
+    sha1(data: Uint8Array): Uint8Array;
+    sha256(data: Uint8Array): Uint8Array;
+    hmacSha256(data: Uint8Array, key: Uint8Array): Uint8Array;
+    gzip(data: Uint8Array, maxSize: number): Uint8Array | null;
+    gunzip(data: Uint8Array): Uint8Array;
+    randomFill(buf: Uint8Array): void;
+}
+export declare class NodeCryptoProvider extends BaseNodeCryptoProvider implements ICryptoProvider {
+    private wasmInput?;
+    constructor(params?: {
+        wasmInput?: InitInput;
+    });
+    initialize(): Promise<void>;
+    createAesIge(key: Uint8Array, iv: Uint8Array): IEncryptionScheme;
+}

package/cjs/utils/crypto/node.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NodeCryptoProvider = exports.BaseNodeCryptoProvider = void 0;
+// eslint-disable-next-line no-restricted-imports
+const crypto_1 = require("crypto");
+const zlib_1 = require("zlib");
+const wasm_1 = require("@mtcute/wasm");
+const abstract_js_1 = require("./abstract.js");
+class BaseNodeCryptoProvider extends abstract_js_1.BaseCryptoProvider {
+    createAesCtr(key, iv) {
+        const cipher = (0, crypto_1.createCipheriv)(`aes-${key.length * 8}-ctr`, key, iv);
+        const update = (data) => cipher.update(data);
+        return {
+            process: update,
+        };
+    }
+    pbkdf2(password, salt, iterations, keylen = 64, algo = 'sha512') {
+        return new Promise((resolve, reject) => (0, crypto_1.pbkdf2)(password, salt, iterations, keylen, algo, (err, buf) => err !== null ? reject(err) : resolve(buf)));
+    }
+    sha1(data) {
+        return (0, crypto_1.createHash)('sha1').update(data).digest();
+    }
+    sha256(data) {
+        return (0, crypto_1.createHash)('sha256').update(data).digest();
+    }
+    hmacSha256(data, key) {
+        return (0, crypto_1.createHmac)('sha256', key).update(data).digest();
+    }
+    gzip(data, maxSize) {
+        // todo: test if wasm impl is better fit here
+        try {
+            // telegram accepts both zlib and gzip, but zlib is faster and has less overhead, so we use it here
+            return (0, zlib_1.deflateSync)(data, {
+                maxOutputLength: maxSize,
+            });
+            // hot path, avoid additional runtime checks
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        }
+        catch (e) {
+            if (e.code === 'ERR_BUFFER_TOO_LARGE') {
+                return null;
+            }
+            throw e;
+        }
+    }
+    gunzip(data) {
+        return (0, zlib_1.gunzipSync)(data);
+    }
+    randomFill(buf) {
+        (0, crypto_1.randomFillSync)(buf);
+    }
+}
+exports.BaseNodeCryptoProvider = BaseNodeCryptoProvider;
+class NodeCryptoProvider extends BaseNodeCryptoProvider {
+    constructor(params) {
+        super();
+        this.wasmInput = params?.wasmInput;
+    }
+    initialize() {
+        return (0, wasm_1.initAsync)(this.wasmInput);
+    }
+    createAesIge(key, iv) {
+        return {
+            encrypt(data) {
+                return (0, wasm_1.ige256Encrypt)(data, key, iv);
+            },
+            decrypt(data) {
+                return (0, wasm_1.ige256Decrypt)(data, key, iv);
+            },
+        };
+    }
+}
+exports.NodeCryptoProvider = NodeCryptoProvider;
+//# sourceMappingURL=node.js.map

package/cjs/utils/crypto/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../../../src/utils/crypto/node.ts"],"names":[],"mappings":";;;AAAA,iDAAiD;AACjD,mCAAuF;AACvF,+BAA8C;AAE9C,uCAAiF;AAGjF,+CAA+F;AAE/F,MAAsB,sBAAuB,SAAQ,gCAAkB;IACnE,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QAEnE,MAAM,MAAM,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAExD,OAAO;YACH,OAAO,EAAE,MAAM;SAClB,CAAA;IACL,CAAC;IAED,MAAM,CACF,QAAoB,EACpB,IAAgB,EAChB,UAAkB,EAClB,MAAM,GAAG,EAAE,EACX,IAAI,GAAG,QAAQ;QAEf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACnC,IAAA,eAAM,EAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAiB,EAAE,GAAe,EAAE,EAAE,CACpF,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAC5C,CACJ,CAAA;IACL,CAAC;IAED,IAAI,CAAC,IAAgB;QACjB,OAAO,IAAA,mBAAU,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACnD,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACrD,CAAC;IAED,UAAU,CAAC,IAAgB,EAAE,GAAe;QACxC,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IAC1D,CAAC;IAED,IAAI,CAAC,IAAgB,EAAE,OAAe;QAClC,6CAA6C;QAC7C,IAAI;YACA,mGAAmG;YACnG,OAAO,IAAA,kBAAW,EAAC,IAAI,EAAE;gBACrB,eAAe,EAAE,OAAO;aAC3B,CAAC,CAAA;YACF,4CAA4C;YAC5C,8DAA8D;SACjE;QAAC,OAAO,CAAM,EAAE;YACb,IAAI,CAAC,CAAC,IAAI,KAAK,sBAAsB,EAAE;gBACnC,OAAO,IAAI,CAAA;aACd;YAED,MAAM,CAAC,CAAA;SACV;IACL,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,IAAA,iBAAU,EAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,UAAU,CAAC,GAAe;QACtB,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAA;IACvB,CAAC;CACJ;AA9DD,wDA8DC;AAED,MAAa,kBAAmB,SAAQ,sBAAsB;IAG1D,YAAY,MAAkC;QAC1C,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,CAAA;IACtC,CAAC;IAED,UAAU;QACN,OAAO,IAAA,gBAAS,EAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACpC,CAAC;IAED,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,OAAO;YACH,OAAO,CAAC,IAAgB;gBACpB,OAAO,IAAA,oBAAa,EAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YACvC,CAAC;YACD,OAAO,CAAC,IAAgB;gBACpB,OAAO,IAAA,oBAAa,EAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YACvC,CAAC;SACJ,CAAA;IACL,CAAC;CACJ;AAtBD,gDAsBC","sourcesContent":["// eslint-disable-next-line no-restricted-imports\nimport { createCipheriv, createHash, createHmac, pbkdf2, randomFillSync } from 'crypto'\nimport { deflateSync, gunzipSync } from 'zlib'\n\nimport { ige256Decrypt, ige256Encrypt, initAsync, InitInput } from '@mtcute/wasm'\n\nimport { MaybeAsync } from '../../types/index.js'\nimport { BaseCryptoProvider, IAesCtr, ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\nexport abstract class BaseNodeCryptoProvider extends BaseCryptoProvider {\n    createAesCtr(key: Uint8Array, iv: Uint8Array): IAesCtr {\n        const cipher = createCipheriv(`aes-${key.length * 8}-ctr`, key, iv)\n\n        const update = (data: Uint8Array) => cipher.update(data)\n\n        return {\n            process: update,\n        }\n    }\n\n    pbkdf2(\n        password: Uint8Array,\n        salt: Uint8Array,\n        iterations: number,\n        keylen = 64,\n        algo = 'sha512',\n    ): MaybeAsync<Uint8Array> {\n        return new Promise((resolve, reject) =>\n            pbkdf2(password, salt, iterations, keylen, algo, (err: Error | null, buf: Uint8Array) =>\n                err !== null ? reject(err) : resolve(buf),\n            ),\n        )\n    }\n\n    sha1(data: Uint8Array): Uint8Array {\n        return createHash('sha1').update(data).digest()\n    }\n\n    sha256(data: Uint8Array): Uint8Array {\n        return createHash('sha256').update(data).digest()\n    }\n\n    hmacSha256(data: Uint8Array, key: Uint8Array): Uint8Array {\n        return createHmac('sha256', key).update(data).digest()\n    }\n\n    gzip(data: Uint8Array, maxSize: number): Uint8Array | null {\n        // todo: test if wasm impl is better fit here\n        try {\n            // telegram accepts both zlib and gzip, but zlib is faster and has less overhead, so we use it here\n            return deflateSync(data, {\n                maxOutputLength: maxSize,\n            })\n            // hot path, avoid additional runtime checks\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } catch (e: any) {\n            if (e.code === 'ERR_BUFFER_TOO_LARGE') {\n                return null\n            }\n\n            throw e\n        }\n    }\n\n    gunzip(data: Uint8Array): Uint8Array {\n        return gunzipSync(data)\n    }\n\n    randomFill(buf: Uint8Array) {\n        randomFillSync(buf)\n    }\n}\n\nexport class NodeCryptoProvider extends BaseNodeCryptoProvider implements ICryptoProvider {\n    private wasmInput?: InitInput\n\n    constructor(params?: { wasmInput?: InitInput }) {\n        super()\n        this.wasmInput = params?.wasmInput\n    }\n\n    initialize(): Promise<void> {\n        return initAsync(this.wasmInput)\n    }\n\n    createAesIge(key: Uint8Array, iv: Uint8Array): IEncryptionScheme {\n        return {\n            encrypt(data: Uint8Array): Uint8Array {\n                return ige256Encrypt(data, key, iv)\n            },\n            decrypt(data: Uint8Array): Uint8Array {\n                return ige256Decrypt(data, key, iv)\n            },\n        }\n    }\n}\n"]}

package/cjs/utils/crypto/password.js

@@ -1,10 +1,6 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.computeSrpParams = exports.computeNewPasswordHash = exports.computePasswordHash = void 0;
-const big_integer_1 = __importDefault(require("big-integer"));
 const tl_runtime_1 = require("@mtcute/tl-runtime");
 const errors_js_1 = require("../../types/errors.js");
 const bigint_utils_js_1 = require("../bigint-utils.js");
@@ -22,8 +18,8 @@ const utils_js_1 = require("./utils.js");
  */
 async function computePasswordHash(crypto, password, salt1, salt2) {
     const SH = (data, salt) => crypto.sha256((0, buffer_utils_js_1.concatBuffers)([salt, data, salt]));
-    const PH1 = async (pwd, salt1, salt2) => SH(await SH(pwd, salt1), salt2);
-    return SH(await crypto.pbkdf2(await PH1(password, salt1, salt2), salt1, 100000), salt2);
+    const PH1 = (pwd, salt1, salt2) => SH(SH(pwd, salt1), salt2);
+    return SH(await crypto.pbkdf2(PH1(password, salt1, salt2), salt1, 100000), salt2);
 }
 exports.computePasswordHash = computePasswordHash;
 /**
@@ -34,12 +30,15 @@ exports.computePasswordHash = computePasswordHash;
  * @param password  Password
  */
 async function computeNewPasswordHash(crypto, algo, password) {
-    algo.salt1 = (0, buffer_utils_js_1.concatBuffers)([algo.salt1, (0, buffer_utils_js_1.randomBytes)(32)]);
+    const salt1 = new Uint8Array(algo.salt1.length + 32);
+    salt1.set(algo.salt1);
+    crypto.randomFill(salt1.subarray(algo.salt1.length));
+    algo.salt1 = salt1;
     const _x = await computePasswordHash(crypto, (0, tl_runtime_1.utf8EncodeToBuffer)(password), algo.salt1, algo.salt2);
-    const g = (0, big_integer_1.default)(algo.g);
+    const g = BigInt(algo.g);
     const p = (0, bigint_utils_js_1.bufferToBigInt)(algo.p);
     const x = (0, bigint_utils_js_1.bufferToBigInt)(_x);
-    return (0, bigint_utils_js_1.bigIntToBuffer)(g.modPow(x, p), 256);
+    return (0, bigint_utils_js_1.bigIntToBuffer)((0, bigint_utils_js_1.bigIntModPow)(g, x, p), 256);
 }
 exports.computeNewPasswordHash = computeNewPasswordHash;
 /**
@@ -63,38 +62,28 @@ async function computeSrpParams(crypto, request, password) {
     if (!request.srpId) {
         throw new errors_js_1.MtSecurityError('SRP_ID is not present in the request');
     }
-    const g = (0, big_integer_1.default)(algo.g);
+    const g = BigInt(algo.g);
     const _g = (0, bigint_utils_js_1.bigIntToBuffer)(g, 256);
     const p = (0, bigint_utils_js_1.bufferToBigInt)(algo.p);
     const gB = (0, bigint_utils_js_1.bufferToBigInt)(request.srpB);
-    const a = (0, bigint_utils_js_1.bufferToBigInt)((0, buffer_utils_js_1.randomBytes)(256));
-    const gA = g.modPow(a, p);
+    const a = (0, bigint_utils_js_1.bufferToBigInt)(crypto.randomBytes(256));
+    const gA = (0, bigint_utils_js_1.bigIntModPow)(g, a, p);
     const _gA = (0, bigint_utils_js_1.bigIntToBuffer)(gA, 256);
     const H = (data) => crypto.sha256(data);
-    const [_k, _u, _x] = await Promise.all([
-        // maybe, just maybe this will be a bit faster with some crypto providers
-        /* k = */ crypto.sha256((0, buffer_utils_js_1.concatBuffers)([algo.p, _g])),
-        /* u = */ crypto.sha256((0, buffer_utils_js_1.concatBuffers)([_gA, request.srpB])),
-        /* x = */ computePasswordHash(crypto, (0, tl_runtime_1.utf8EncodeToBuffer)(password), algo.salt1, algo.salt2),
-    ]);
+    const _k = crypto.sha256((0, buffer_utils_js_1.concatBuffers)([algo.p, _g]));
+    const _u = crypto.sha256((0, buffer_utils_js_1.concatBuffers)([_gA, request.srpB]));
+    const _x = await computePasswordHash(crypto, (0, tl_runtime_1.utf8EncodeToBuffer)(password), algo.salt1, algo.salt2);
     const k = (0, bigint_utils_js_1.bufferToBigInt)(_k);
     const u = (0, bigint_utils_js_1.bufferToBigInt)(_u);
     const x = (0, bigint_utils_js_1.bufferToBigInt)(_x);
-    const v = g.modPow(x, p);
-    const kV = k.multiply(v).mod(p);
-    let t = gB.minus(kV).mod(p);
-    if (t.isNegative())
-        t = t.plus(p);
-    const sA = t.modPow(a.plus(u.multiply(x)), p);
-    const _kA = await H((0, bigint_utils_js_1.bigIntToBuffer)(sA, 256));
-    const _M1 = await H((0, buffer_utils_js_1.concatBuffers)([
-        (0, utils_js_1.xorBuffer)(await H(algo.p), await H(_g)),
-        await H(algo.salt1),
-        await H(algo.salt2),
-        _gA,
-        request.srpB,
-        _kA,
-    ]));
+    const v = (0, bigint_utils_js_1.bigIntModPow)(g, x, p);
+    const kV = (k * v) % p;
+    let t = gB - kV;
+    if (t < 0n)
+        t += p;
+    const sA = (0, bigint_utils_js_1.bigIntModPow)(t, a + u * x, p);
+    const _kA = H((0, bigint_utils_js_1.bigIntToBuffer)(sA, 256));
+    const _M1 = H((0, buffer_utils_js_1.concatBuffers)([(0, utils_js_1.xorBuffer)(H(algo.p), H(_g)), H(algo.salt1), H(algo.salt2), _gA, request.srpB, _kA]));
     return {
         _: 'inputCheckPasswordSRP',
         srpId: request.srpId,

package/cjs/utils/crypto/password.js.map

@@ -1 +1 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/utils/crypto/password.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgC;AAGhC,mDAAuD;AAEvD,qDAA2E;AAC3E,wDAAmE;AACnE,wDAA+D;AAE/D,yCAAsC;AAEtC;;;;;;;;;GASG;AACI,KAAK,UAAU,mBAAmB,CACrC,MAAuB,EACvB,QAAoB,EACpB,KAAiB,EACjB,KAAiB;IAEjB,MAAM,EAAE,GAAG,CAAC,IAAgB,EAAE,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACnG,MAAM,GAAG,GAAG,KAAK,EAAE,GAAe,EAAE,KAAiB,EAAE,KAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAE5G,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAC3F,CAAC;AAVD,kDAUC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,IAA6E,EAC7E,QAAgB;IAEf,IAAgC,CAAC,KAAK,GAAG,IAAA,+BAAa,EAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAA,6BAAW,EAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAEtF,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAA,+BAAkB,EAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAElG,MAAM,CAAC,GAAG,IAAA,qBAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAE5B,OAAO,IAAA,gCAAc,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC9C,CAAC;AAdD,wDAcC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,gBAAgB,CAClC,MAAuB,EACvB,OAA+B,EAC/B,QAAgB;IAEhB,wBAAwB;IACxB,IACI,CAAC,OAAO,CAAC,WAAW;QACpB,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,mEAAmE,EAC/F;QACE,MAAM,IAAI,8BAAkB,CAAC,gBAAgB,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;KACzE;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAA;IAEhC,iFAAiF;IAEjF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QACf,MAAM,IAAI,2BAAe,CAAC,qCAAqC,CAAC,CAAA;KACnE;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;QAChB,MAAM,IAAI,2BAAe,CAAC,sCAAsC,CAAC,CAAA;KACpE;IAED,MAAM,CAAC,GAAG,IAAA,qBAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvC,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,IAAA,6BAAW,EAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzB,MAAM,GAAG,GAAG,IAAA,gCAAc,EAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAEnC,MAAM,CAAC,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEnD,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnC,yEAAyE;QACzE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACpD,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAA,+BAAkB,EAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;KAC9F,CAAC,CAAA;IACF,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAE5B,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAE/B,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC,UAAU,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,IAAA,gCAAc,EAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;IAE5C,MAAM,GAAG,GAAG,MAAM,CAAC,CACf,IAAA,+BAAa,EAAC;QACV,IAAA,oBAAS,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,GAAG;QACH,OAAO,CAAC,IAAI;QACZ,GAAG;KACN,CAAC,CACL,CAAA;IAED,OAAO;QACH,CAAC,EAAE,uBAAuB;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,CAAC,EAAE,GAAG;QACN,EAAE,EAAE,GAAG;KACV,CAAA;AACL,CAAC;AAvED,4CAuEC","sourcesContent":["import bigInt from 'big-integer'\n\nimport { tl } from '@mtcute/tl'\nimport { utf8EncodeToBuffer } from '@mtcute/tl-runtime'\n\nimport { MtSecurityError, MtUnsupportedError } from '../../types/errors.js'\nimport { bigIntToBuffer, bufferToBigInt } from '../bigint-utils.js'\nimport { concatBuffers, randomBytes } from '../buffer-utils.js'\nimport { ICryptoProvider } from './abstract.js'\nimport { xorBuffer } from './utils.js'\n\n/**\n * Compute password hash as defined by MTProto.\n *\n * See https://core.telegram.org/api/srp#checking-the-password-with-srp\n *\n * @param crypto  Crypto provider\n * @param password  Password\n * @param salt1  Salt 1\n * @param salt2  Salt 2\n */\nexport async function computePasswordHash(\n    crypto: ICryptoProvider,\n    password: Uint8Array,\n    salt1: Uint8Array,\n    salt2: Uint8Array,\n): Promise<Uint8Array> {\n    const SH = (data: Uint8Array, salt: Uint8Array) => crypto.sha256(concatBuffers([salt, data, salt]))\n    const PH1 = async (pwd: Uint8Array, salt1: Uint8Array, salt2: Uint8Array) => SH(await SH(pwd, salt1), salt2)\n\n    return SH(await crypto.pbkdf2(await PH1(password, salt1, salt2), salt1, 100000), salt2)\n}\n\n/**\n * Compute new password SRP hash as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param algo  KDF algorithm\n * @param password  Password\n */\nexport async function computeNewPasswordHash(\n    crypto: ICryptoProvider,\n    algo: tl.RawPasswordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow,\n    password: string,\n): Promise<Uint8Array> {\n    (algo as tl.Mutable<typeof algo>).salt1 = concatBuffers([algo.salt1, randomBytes(32)])\n\n    const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2)\n\n    const g = bigInt(algo.g)\n    const p = bufferToBigInt(algo.p)\n    const x = bufferToBigInt(_x)\n\n    return bigIntToBuffer(g.modPow(x, p), 256)\n}\n\n/**\n * Compute SRP check parameters for 2fa password as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param request  SRP request\n * @param password  2fa password\n */\nexport async function computeSrpParams(\n    crypto: ICryptoProvider,\n    request: tl.account.RawPassword,\n    password: string,\n): Promise<tl.RawInputCheckPasswordSRP> {\n    // nice naming thx durov\n    if (\n        !request.currentAlgo ||\n        request.currentAlgo._ !== 'passwordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow'\n    ) {\n        throw new MtUnsupportedError(`Unknown algo ${request.currentAlgo?._}`)\n    }\n\n    const algo = request.currentAlgo\n\n    // here and after: underscored variables are buffers, non-underscored are bigInts\n\n    if (!request.srpB) {\n        throw new MtSecurityError('SRP_B is not present in the request')\n    }\n\n    if (!request.srpId) {\n        throw new MtSecurityError('SRP_ID is not present in the request')\n    }\n\n    const g = bigInt(algo.g)\n    const _g = bigIntToBuffer(g, 256)\n    const p = bufferToBigInt(algo.p)\n    const gB = bufferToBigInt(request.srpB)\n\n    const a = bufferToBigInt(randomBytes(256))\n    const gA = g.modPow(a, p)\n    const _gA = bigIntToBuffer(gA, 256)\n\n    const H = (data: Uint8Array) => crypto.sha256(data)\n\n    const [_k, _u, _x] = await Promise.all([\n        // maybe, just maybe this will be a bit faster with some crypto providers\n        /* k = */ crypto.sha256(concatBuffers([algo.p, _g])),\n        /* u = */ crypto.sha256(concatBuffers([_gA, request.srpB])),\n        /* x = */ computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2),\n    ])\n    const k = bufferToBigInt(_k)\n    const u = bufferToBigInt(_u)\n    const x = bufferToBigInt(_x)\n\n    const v = g.modPow(x, p)\n    const kV = k.multiply(v).mod(p)\n\n    let t = gB.minus(kV).mod(p)\n    if (t.isNegative()) t = t.plus(p)\n    const sA = t.modPow(a.plus(u.multiply(x)), p)\n    const _kA = await H(bigIntToBuffer(sA, 256))\n\n    const _M1 = await H(\n        concatBuffers([\n            xorBuffer(await H(algo.p), await H(_g)),\n            await H(algo.salt1),\n            await H(algo.salt2),\n            _gA,\n            request.srpB,\n            _kA,\n        ]),\n    )\n\n    return {\n        _: 'inputCheckPasswordSRP',\n        srpId: request.srpId,\n        A: _gA,\n        M1: _M1,\n    }\n}\n"]}
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/utils/crypto/password.ts"],"names":[],"mappings":";;;AACA,mDAAuD;AAEvD,qDAA2E;AAC3E,wDAAiF;AACjF,wDAAkD;AAElD,yCAAsC;AAEtC;;;;;;;;;GASG;AACI,KAAK,UAAU,mBAAmB,CACrC,MAAuB,EACvB,QAAoB,EACpB,KAAiB,EACjB,KAAiB;IAEjB,MAAM,EAAE,GAAG,CAAC,IAAgB,EAAE,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACnG,MAAM,GAAG,GAAG,CAAC,GAAe,EAAE,KAAiB,EAAE,KAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAEhG,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AACrF,CAAC;AAVD,kDAUC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,IAA6E,EAC7E,QAAgB;IAEhB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;IACpD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrB,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CACnD;IAAC,IAAgC,CAAC,KAAK,GAAG,KAAK,CAAA;IAEhD,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAA,+BAAkB,EAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAElG,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAE5B,OAAO,IAAA,gCAAc,EAAC,IAAA,8BAAY,EAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACrD,CAAC;AAjBD,wDAiBC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,gBAAgB,CAClC,MAAuB,EACvB,OAA+B,EAC/B,QAAgB;IAEhB,wBAAwB;IACxB,IACI,CAAC,OAAO,CAAC,WAAW;QACpB,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,mEAAmE,EAC/F;QACE,MAAM,IAAI,8BAAkB,CAAC,gBAAgB,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;KACzE;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAA;IAEhC,iFAAiF;IAEjF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QACf,MAAM,IAAI,2BAAe,CAAC,qCAAqC,CAAC,CAAA;KACnE;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;QAChB,MAAM,IAAI,2BAAe,CAAC,sCAAsC,CAAC,CAAA;KACpE;IAED,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvC,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IACjD,MAAM,EAAE,GAAG,IAAA,8BAAY,EAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAChC,MAAM,GAAG,GAAG,IAAA,gCAAc,EAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAEnC,MAAM,CAAC,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEnD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACrD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5D,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAA,+BAAkB,EAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAClG,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAE5B,MAAM,CAAC,GAAG,IAAA,8BAAY,EAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/B,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IAEtB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;IACf,IAAI,CAAC,GAAG,EAAE;QAAE,CAAC,IAAI,CAAC,CAAA;IAClB,MAAM,EAAE,GAAG,IAAA,8BAAY,EAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IACxC,MAAM,GAAG,GAAG,CAAC,CAAC,IAAA,gCAAc,EAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;IAEtC,MAAM,GAAG,GAAG,CAAC,CAAC,IAAA,+BAAa,EAAC,CAAC,IAAA,oBAAS,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;IAEjH,OAAO;QACH,CAAC,EAAE,uBAAuB;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,CAAC,EAAE,GAAG;QACN,EAAE,EAAE,GAAG;KACV,CAAA;AACL,CAAC;AA3DD,4CA2DC","sourcesContent":["import { tl } from '@mtcute/tl'\nimport { utf8EncodeToBuffer } from '@mtcute/tl-runtime'\n\nimport { MtSecurityError, MtUnsupportedError } from '../../types/errors.js'\nimport { bigIntModPow, bigIntToBuffer, bufferToBigInt } from '../bigint-utils.js'\nimport { concatBuffers } from '../buffer-utils.js'\nimport { ICryptoProvider } from './abstract.js'\nimport { xorBuffer } from './utils.js'\n\n/**\n * Compute password hash as defined by MTProto.\n *\n * See https://core.telegram.org/api/srp#checking-the-password-with-srp\n *\n * @param crypto  Crypto provider\n * @param password  Password\n * @param salt1  Salt 1\n * @param salt2  Salt 2\n */\nexport async function computePasswordHash(\n    crypto: ICryptoProvider,\n    password: Uint8Array,\n    salt1: Uint8Array,\n    salt2: Uint8Array,\n): Promise<Uint8Array> {\n    const SH = (data: Uint8Array, salt: Uint8Array) => crypto.sha256(concatBuffers([salt, data, salt]))\n    const PH1 = (pwd: Uint8Array, salt1: Uint8Array, salt2: Uint8Array) => SH(SH(pwd, salt1), salt2)\n\n    return SH(await crypto.pbkdf2(PH1(password, salt1, salt2), salt1, 100000), salt2)\n}\n\n/**\n * Compute new password SRP hash as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param algo  KDF algorithm\n * @param password  Password\n */\nexport async function computeNewPasswordHash(\n    crypto: ICryptoProvider,\n    algo: tl.RawPasswordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow,\n    password: string,\n): Promise<Uint8Array> {\n    const salt1 = new Uint8Array(algo.salt1.length + 32)\n    salt1.set(algo.salt1)\n    crypto.randomFill(salt1.subarray(algo.salt1.length))\n    ;(algo as tl.Mutable<typeof algo>).salt1 = salt1\n\n    const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2)\n\n    const g = BigInt(algo.g)\n    const p = bufferToBigInt(algo.p)\n    const x = bufferToBigInt(_x)\n\n    return bigIntToBuffer(bigIntModPow(g, x, p), 256)\n}\n\n/**\n * Compute SRP check parameters for 2fa password as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param request  SRP request\n * @param password  2fa password\n */\nexport async function computeSrpParams(\n    crypto: ICryptoProvider,\n    request: tl.account.RawPassword,\n    password: string,\n): Promise<tl.RawInputCheckPasswordSRP> {\n    // nice naming thx durov\n    if (\n        !request.currentAlgo ||\n        request.currentAlgo._ !== 'passwordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow'\n    ) {\n        throw new MtUnsupportedError(`Unknown algo ${request.currentAlgo?._}`)\n    }\n\n    const algo = request.currentAlgo\n\n    // here and after: underscored variables are buffers, non-underscored are bigInts\n\n    if (!request.srpB) {\n        throw new MtSecurityError('SRP_B is not present in the request')\n    }\n\n    if (!request.srpId) {\n        throw new MtSecurityError('SRP_ID is not present in the request')\n    }\n\n    const g = BigInt(algo.g)\n    const _g = bigIntToBuffer(g, 256)\n    const p = bufferToBigInt(algo.p)\n    const gB = bufferToBigInt(request.srpB)\n\n    const a = bufferToBigInt(crypto.randomBytes(256))\n    const gA = bigIntModPow(g, a, p)\n    const _gA = bigIntToBuffer(gA, 256)\n\n    const H = (data: Uint8Array) => crypto.sha256(data)\n\n    const _k = crypto.sha256(concatBuffers([algo.p, _g]))\n    const _u = crypto.sha256(concatBuffers([_gA, request.srpB]))\n    const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2)\n    const k = bufferToBigInt(_k)\n    const u = bufferToBigInt(_u)\n    const x = bufferToBigInt(_x)\n\n    const v = bigIntModPow(g, x, p)\n    const kV = (k * v) % p\n\n    let t = gB - kV\n    if (t < 0n) t += p\n    const sA = bigIntModPow(t, a + u * x, p)\n    const _kA = H(bigIntToBuffer(sA, 256))\n\n    const _M1 = H(concatBuffers([xorBuffer(H(algo.p), H(_g)), H(algo.salt1), H(algo.salt2), _gA, request.srpB, _kA]))\n\n    return {\n        _: 'inputCheckPasswordSRP',\n        srpId: request.srpId,\n        A: _gA,\n        M1: _M1,\n    }\n}\n"]}

package/cjs/utils/crypto/wasm.d.ts

@@ -0,0 +1,22 @@
+import { InitInput } from '@mtcute/wasm';
+import { BaseCryptoProvider, IAesCtr, ICryptoProvider, IEncryptionScheme } from './abstract.js';
+export interface WasmCryptoProviderOptions {
+    /**
+     * WASM blob to use for crypto operations.
+     *
+     * Must conform to `@mtcute/wasm` interface.
+     */
+    wasmInput?: InitInput;
+}
+export declare abstract class WasmCryptoProvider extends BaseCryptoProvider implements Partial<ICryptoProvider> {
+    readonly wasmInput?: InitInput;
+    abstract randomFill(buf: Uint8Array): void;
+    constructor(params?: WasmCryptoProviderOptions);
+    initialize(): Promise<void>;
+    sha1(data: Uint8Array): Uint8Array;
+    sha256(data: Uint8Array): Uint8Array;
+    createAesCtr(key: Uint8Array, iv: Uint8Array): IAesCtr;
+    createAesIge(key: Uint8Array, iv: Uint8Array): IEncryptionScheme;
+    gzip(data: Uint8Array, maxSize: number): Uint8Array | null;
+    gunzip(data: Uint8Array): Uint8Array;
+}

package/cjs/utils/crypto/wasm.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WasmCryptoProvider = void 0;
+const wasm_1 = require("@mtcute/wasm");
+const abstract_js_1 = require("./abstract.js");
+class WasmCryptoProvider extends abstract_js_1.BaseCryptoProvider {
+    constructor(params) {
+        super();
+        this.wasmInput = params?.wasmInput;
+    }
+    initialize() {
+        return (0, wasm_1.initAsync)(this.wasmInput);
+    }
+    sha1(data) {
+        return (0, wasm_1.sha1)(data);
+    }
+    sha256(data) {
+        return (0, wasm_1.sha256)(data);
+    }
+    createAesCtr(key, iv) {
+        const ctx = (0, wasm_1.createCtr256)(key, iv);
+        return {
+            process: (data) => (0, wasm_1.ctr256)(ctx, data),
+            close: () => (0, wasm_1.freeCtr256)(ctx),
+        };
+    }
+    createAesIge(key, iv) {
+        return {
+            encrypt: (data) => (0, wasm_1.ige256Encrypt)(data, key, iv),
+            decrypt: (data) => (0, wasm_1.ige256Decrypt)(data, key, iv),
+        };
+    }
+    gzip(data, maxSize) {
+        return (0, wasm_1.deflateMaxSize)(data, maxSize);
+    }
+    gunzip(data) {
+        return (0, wasm_1.gunzip)(data);
+    }
+}
+exports.WasmCryptoProvider = WasmCryptoProvider;
+//# sourceMappingURL=wasm.js.map

package/cjs/utils/crypto/wasm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm.js","sourceRoot":"","sources":["../../../../src/utils/crypto/wasm.ts"],"names":[],"mappings":";;;AAAA,uCAYqB;AAErB,+CAA+F;AAW/F,MAAsB,kBAAmB,SAAQ,gCAAkB;IAK/D,YAAY,MAAkC;QAC1C,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,CAAA;IACtC,CAAC;IAED,UAAU;QACN,OAAO,IAAA,gBAAS,EAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACpC,CAAC;IAED,IAAI,CAAC,IAAgB;QACjB,OAAO,IAAA,WAAI,EAAC,IAAI,CAAC,CAAA;IACrB,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,IAAA,aAAM,EAAC,IAAI,CAAC,CAAA;IACvB,CAAC;IAED,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,MAAM,GAAG,GAAG,IAAA,mBAAY,EAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAEjC,OAAO;YACH,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,aAAM,EAAC,GAAG,EAAE,IAAI,CAAC;YACpC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC;SAC/B,CAAA;IACL,CAAC;IAED,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,OAAO;YACH,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,oBAAa,EAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;YAC/C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,oBAAa,EAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SAClD,CAAA;IACL,CAAC;IAED,IAAI,CAAC,IAAgB,EAAE,OAAe;QAClC,OAAO,IAAA,qBAAc,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACxC,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,IAAA,aAAM,EAAC,IAAI,CAAC,CAAA;IACvB,CAAC;CACJ;AA7CD,gDA6CC","sourcesContent":["import {\n    createCtr256,\n    ctr256,\n    deflateMaxSize,\n    freeCtr256,\n    gunzip,\n    ige256Decrypt,\n    ige256Encrypt,\n    initAsync,\n    InitInput,\n    sha1,\n    sha256,\n} from '@mtcute/wasm'\n\nimport { BaseCryptoProvider, IAesCtr, ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\nexport interface WasmCryptoProviderOptions {\n    /**\n     * WASM blob to use for crypto operations.\n     *\n     * Must conform to `@mtcute/wasm` interface.\n     */\n    wasmInput?: InitInput\n}\n\nexport abstract class WasmCryptoProvider extends BaseCryptoProvider implements Partial<ICryptoProvider> {\n    readonly wasmInput?: InitInput\n\n    abstract randomFill(buf: Uint8Array): void\n\n    constructor(params?: WasmCryptoProviderOptions) {\n        super()\n        this.wasmInput = params?.wasmInput\n    }\n\n    initialize(): Promise<void> {\n        return initAsync(this.wasmInput)\n    }\n\n    sha1(data: Uint8Array): Uint8Array {\n        return sha1(data)\n    }\n\n    sha256(data: Uint8Array): Uint8Array {\n        return sha256(data)\n    }\n\n    createAesCtr(key: Uint8Array, iv: Uint8Array): IAesCtr {\n        const ctx = createCtr256(key, iv)\n\n        return {\n            process: (data) => ctr256(ctx, data),\n            close: () => freeCtr256(ctx),\n        }\n    }\n\n    createAesIge(key: Uint8Array, iv: Uint8Array): IEncryptionScheme {\n        return {\n            encrypt: (data) => ige256Encrypt(data, key, iv),\n            decrypt: (data) => ige256Decrypt(data, key, iv),\n        }\n    }\n\n    gzip(data: Uint8Array, maxSize: number): Uint8Array | null {\n        return deflateMaxSize(data, maxSize)\n    }\n\n    gunzip(data: Uint8Array): Uint8Array {\n        return gunzip(data)\n    }\n}\n"]}

package/cjs/utils/crypto/web.d.ts

@@ -0,0 +1,11 @@
+import { ICryptoProvider } from './abstract.js';
+import { WasmCryptoProvider, WasmCryptoProviderOptions } from './wasm.js';
+export declare class WebCryptoProvider extends WasmCryptoProvider implements ICryptoProvider {
+    readonly crypto: Crypto;
+    constructor(params?: WasmCryptoProviderOptions & {
+        crypto?: Crypto;
+    });
+    pbkdf2(password: Uint8Array, salt: Uint8Array, iterations: number, keylen?: number | undefined, algo?: string | undefined): Promise<Uint8Array>;
+    hmacSha256(data: Uint8Array, key: Uint8Array): Promise<Uint8Array>;
+    randomFill(buf: Uint8Array): void;
+}