@mtcute/core 0.1.0 → 0.1.2

package/cjs/utils/crypto/miller-rabin.js

@@ -1,41 +1,39 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.millerRabin = void 0;
-const big_integer_1 = __importDefault(require("big-integer"));
 const bigint_utils_js_1 = require("../bigint-utils.js");
-function millerRabin(n, rounds = 20) {
+function millerRabin(crypto, n, rounds = 20) {
     // small numbers: 0, 1 are not prime, 2, 3 are prime
-    if (n.lt(big_integer_1.default[4]))
-        return n.gt(big_integer_1.default[1]);
-    if (n.isEven() || n.isNegative())
+    if (n < 4n)
+        return n > 1n;
+    if (n % 2n === 0n || n < 0n)
         return false;
-    const nBits = n.bitLength().toJSNumber();
-    const nSub = n.minus(1);
+    const nBits = (0, bigint_utils_js_1.bigIntBitLength)(n);
+    const nSub = n - 1n;
     const r = (0, bigint_utils_js_1.twoMultiplicity)(nSub);
-    const d = nSub.shiftRight(r);
+    const d = nSub >> r;
     for (let i = 0; i < rounds; i++) {
         let base;
         do {
-            base = (0, bigint_utils_js_1.randomBigIntBits)(nBits);
-        } while (base.leq(big_integer_1.default.one) || base.geq(nSub));
-        let x = base.modPow(d, n);
-        if (x.eq(big_integer_1.default.one) || x.eq(nSub))
+            base = (0, bigint_utils_js_1.randomBigIntBits)(crypto, nBits);
+        } while (base <= 1n || base >= nSub);
+        let x = (0, bigint_utils_js_1.bigIntModPow)(base, d, n);
+        // if (x.eq(bigInt.one) || x.eq(nSub)) continue
+        if (x === 1n || x === nSub)
             continue;
-        let i = big_integer_1.default.zero;
+        let i = 0n;
         let y;
-        while (i.lt(r)) {
-            y = x.modPow(big_integer_1.default[2], n);
-            if (x.eq(big_integer_1.default.one))
+        while (i < r) {
+            // y = x.modPow(bigInt[2], n)
+            y = (0, bigint_utils_js_1.bigIntModPow)(x, 2n, n);
+            if (x === 1n)
                 return false;
-            if (x.eq(nSub))
+            if (x === nSub)
                 break;
-            i = i.plus(big_integer_1.default.one);
+            i += 1n;
             x = y;
         }
-        if (i.eq(r))
+        if (i === r)
             return false;
     }
     return true;

package/cjs/utils/crypto/miller-rabin.js.map

@@ -1 +1 @@
-{"version":3,"file":"miller-rabin.js","sourceRoot":"","sources":["../../../../src/utils/crypto/miller-rabin.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgD;AAEhD,wDAAsE;AAEtE,SAAgB,WAAW,CAAC,CAAa,EAAE,MAAM,GAAG,EAAE;IAClD,oDAAoD;IACpD,IAAI,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE;QAAE,OAAO,KAAK,CAAA;IAE9C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,CAAA;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAEvB,MAAM,CAAC,GAAG,IAAA,iCAAe,EAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAA;QAER,GAAG;YACC,IAAI,GAAG,IAAA,kCAAgB,EAAC,KAAK,CAAC,CAAA;SACjC,QAAQ,IAAI,CAAC,GAAG,CAAC,qBAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAC;QAEhD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,SAAQ;QAE5C,IAAI,CAAC,GAAG,qBAAM,CAAC,IAAI,CAAA;QACnB,IAAI,CAAa,CAAA;QAEjB,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YACZ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,qBAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAE1B,IAAI,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YAClC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,MAAK;YACrB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAM,CAAC,GAAG,CAAC,CAAA;YAEtB,CAAC,GAAG,CAAC,CAAA;SACR;QAED,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;KAC5B;IAED,OAAO,IAAI,CAAA;AACf,CAAC;AAtCD,kCAsCC","sourcesContent":["import bigInt, { BigInteger } from 'big-integer'\n\nimport { randomBigIntBits, twoMultiplicity } from '../bigint-utils.js'\n\nexport function millerRabin(n: BigInteger, rounds = 20): boolean {\n    // small numbers: 0, 1 are not prime, 2, 3 are prime\n    if (n.lt(bigInt[4])) return n.gt(bigInt[1])\n    if (n.isEven() || n.isNegative()) return false\n\n    const nBits = n.bitLength().toJSNumber()\n    const nSub = n.minus(1)\n\n    const r = twoMultiplicity(nSub)\n    const d = nSub.shiftRight(r)\n\n    for (let i = 0; i < rounds; i++) {\n        let base\n\n        do {\n            base = randomBigIntBits(nBits)\n        } while (base.leq(bigInt.one) || base.geq(nSub))\n\n        let x = base.modPow(d, n)\n        if (x.eq(bigInt.one) || x.eq(nSub)) continue\n\n        let i = bigInt.zero\n        let y: BigInteger\n\n        while (i.lt(r)) {\n            y = x.modPow(bigInt[2], n)\n\n            if (x.eq(bigInt.one)) return false\n            if (x.eq(nSub)) break\n            i = i.plus(bigInt.one)\n\n            x = y\n        }\n\n        if (i.eq(r)) return false\n    }\n\n    return true\n}\n"]}
+{"version":3,"file":"miller-rabin.js","sourceRoot":"","sources":["../../../../src/utils/crypto/miller-rabin.ts"],"names":[],"mappings":";;;AAAA,wDAAqG;AAGrG,SAAgB,WAAW,CAAC,MAAuB,EAAE,CAAS,EAAE,MAAM,GAAG,EAAE;IACvE,oDAAoD;IACpD,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,CAAC,GAAG,EAAE,CAAA;IACzB,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,KAAK,CAAA;IAEzC,MAAM,KAAK,GAAG,IAAA,iCAAe,EAAC,CAAC,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAA;IAEnB,MAAM,CAAC,GAAG,IAAA,iCAAe,EAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAA;QAER,GAAG;YACC,IAAI,GAAG,IAAA,kCAAgB,EAAC,MAAM,EAAE,KAAK,CAAC,CAAA;SACzC,QAAQ,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,IAAI,EAAC;QAEpC,IAAI,CAAC,GAAG,IAAA,8BAAY,EAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAChC,+CAA+C;QAC/C,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI;YAAE,SAAQ;QAEpC,IAAI,CAAC,GAAG,EAAE,CAAA;QACV,IAAI,CAAS,CAAA;QAEb,OAAO,CAAC,GAAG,CAAC,EAAE;YACV,6BAA6B;YAC7B,CAAC,GAAG,IAAA,8BAAY,EAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;YAE1B,IAAI,CAAC,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAA;YAC1B,IAAI,CAAC,KAAK,IAAI;gBAAE,MAAK;YACrB,CAAC,IAAI,EAAE,CAAA;YAEP,CAAC,GAAG,CAAC,CAAA;SACR;QAED,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;KAC5B;IAED,OAAO,IAAI,CAAA;AACf,CAAC;AAxCD,kCAwCC","sourcesContent":["import { bigIntBitLength, bigIntModPow, randomBigIntBits, twoMultiplicity } from '../bigint-utils.js'\nimport { ICryptoProvider } from './abstract.js'\n\nexport function millerRabin(crypto: ICryptoProvider, n: bigint, rounds = 20): boolean {\n    // small numbers: 0, 1 are not prime, 2, 3 are prime\n    if (n < 4n) return n > 1n\n    if (n % 2n === 0n || n < 0n) return false\n\n    const nBits = bigIntBitLength(n)\n    const nSub = n - 1n\n\n    const r = twoMultiplicity(nSub)\n    const d = nSub >> r\n\n    for (let i = 0; i < rounds; i++) {\n        let base\n\n        do {\n            base = randomBigIntBits(crypto, nBits)\n        } while (base <= 1n || base >= nSub)\n\n        let x = bigIntModPow(base, d, n)\n        // if (x.eq(bigInt.one) || x.eq(nSub)) continue\n        if (x === 1n || x === nSub) continue\n\n        let i = 0n\n        let y: bigint\n\n        while (i < r) {\n            // y = x.modPow(bigInt[2], n)\n            y = bigIntModPow(x, 2n, n)\n\n            if (x === 1n) return false\n            if (x === nSub) break\n            i += 1n\n\n            x = y\n        }\n\n        if (i === r) return false\n    }\n\n    return true\n}\n"]}

package/cjs/utils/crypto/miller-rabin.test.d.ts

@@ -0,0 +1 @@
+export {};

package/cjs/utils/crypto/miller-rabin.test.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const index_js_1 = require("./index.js");
+const miller_rabin_js_1 = require("./miller-rabin.js");
+(0, vitest_1.describe)('miller-rabin test', function () {
+    // miller-rabin factorization relies on RNG, so we should use a real random number generator
+    const c = (0, index_js_1.defaultCryptoProviderFactory)();
+    const testMillerRabin = (n, isPrime) => {
+        (0, vitest_1.expect)((0, miller_rabin_js_1.millerRabin)(c, BigInt(n))).eq(isPrime);
+    };
+    (0, vitest_1.it)('should correctly label small primes as probable primes', () => {
+        const smallOddPrimes = [2, 3, 5, 7, 11, 13, 17, 19, 23, 29, 31];
+        for (const prime of smallOddPrimes) {
+            testMillerRabin(prime, true);
+        }
+    });
+    (0, vitest_1.it)('should correctly label small odd composite numbers as composite', () => {
+        const smallOddPrimes = [9, 15, 21, 25, 27, 33, 35];
+        for (const prime of smallOddPrimes) {
+            testMillerRabin(prime, false);
+        }
+    });
+    // primes are generated using `openssl prime -generate -bits <bits>`
+    (0, vitest_1.it)('should work for 512-bit numbers', () => {
+        testMillerRabin('8411445470921866378538628788380866906358949375899610911537071281076627385046125382763689993349183284546479522400013151510610266158235924343045768103605519', true);
+        testMillerRabin('11167561990563990242158096122232207092938761092751537312016255867850441858086589598418467012717458858604863547175649456433632887622140170743409535470973399', true);
+        testMillerRabin('11006717791910450367418249787526506184731090161438431250022510598653874155081488487035840577645711578911087148186160668569071839053453201592321650008610329', true);
+        testMillerRabin('12224330340162812215033324917156282302617911690617664923428569636370785775561435789211091021550357876767050350997458404009005800772805534351607294516706177', true);
+        // above numbers but -2 (not prime)
+        testMillerRabin('8411445470921866378538628788380866906358949375899610911537071281076627385046125382763689993349183284546479522400013151510610266158235924343045768103605517', false);
+        testMillerRabin('11167561990563990242158096122232207092938761092751537312016255867850441858086589598418467012717458858604863547175649456433632887622140170743409535470973397', false);
+        testMillerRabin('11006717791910450367418249787526506184731090161438431250022510598653874155081488487035840577645711578911087148186160668569071839053453201592321650008610327', false);
+        testMillerRabin('12224330340162812215033324917156282302617911690617664923428569636370785775561435789211091021550357876767050350997458404009005800772805534351607294516706175', false);
+    });
+    (0, vitest_1.it)('should work for 1024-bit numbers', () => {
+        testMillerRabin('94163180970530844245052892199633535954736903357996153321496979115367320260897793334681106861766748541439161886270777106456088209508872459550450259737267142959061663564218457086654112219462515165219295402175541003899136060178102898376369981338103600856012709228116661479275753497725541132207243717937379815409', true);
+        testMillerRabin('97324962433497727515811278760066576725849776656602017497363465683978397629803148191267105308901733336070351381654371470561376353774017284623969415330564867697353080030917333974193741719718950105404732792050882127213356260415251087867407489400712288570880407613514781891914135956778687719588061176455381937003', true);
+        testMillerRabin('92511311413226091818378551616231701579277597795073142338527410334932345968554993390789667936819230228388142960299649466238701015865565141753710450319875546944139442823075990348978746055937500467483161699883905850192191164043687791185635729923497381849380102040768674652775240505782671289535260164547714030567', true);
+        testMillerRabin('98801756216479639848708157708947504990501845258427605711852570166662700681215707617225664134994147912417941920327932092748574265476658124536672887141144222716123085451749764522435906007567360583062117498919471220566974634924384147341592903939264267901029640119196259026154529723870788246284629644039137378253', true);
+        // above numbers but -2 (not prime)
+        testMillerRabin('94163180970530844245052892199633535954736903357996153321496979115367320260897793334681106861766748541439161886270777106456088209508872459550450259737267142959061663564218457086654112219462515165219295402175541003899136060178102898376369981338103600856012709228116661479275753497725541132207243717937379815407', false);
+        testMillerRabin('97324962433497727515811278760066576725849776656602017497363465683978397629803148191267105308901733336070351381654371470561376353774017284623969415330564867697353080030917333974193741719718950105404732792050882127213356260415251087867407489400712288570880407613514781891914135956778687719588061176455381937001', false);
+        testMillerRabin('92511311413226091818378551616231701579277597795073142338527410334932345968554993390789667936819230228388142960299649466238701015865565141753710450319875546944139442823075990348978746055937500467483161699883905850192191164043687791185635729923497381849380102040768674652775240505782671289535260164547714030565', false);
+        testMillerRabin('98801756216479639848708157708947504990501845258427605711852570166662700681215707617225664134994147912417941920327932092748574265476658124536672887141144222716123085451749764522435906007567360583062117498919471220566974634924384147341592903939264267901029640119196259026154529723870788246284629644039137378251', false);
+    });
+    (0, vitest_1.it)('should work for 2048-bit numbers', () => {
+        testMillerRabin('28608382334358769588283288249494859626901014972463291352091976543138105382282108662849885913053034513852843449409838151123568984617793641641937583673207501643041336002587032201383537626393235736734494131431069043382068545865505150651648610506542819001961332454611129372758714288168807328523359776577571626967649079147416191592855529888846889532625386469236278694936872628305052827422772792103722178298844645210242389265273407924858034431614414896134561928996888883994953322861399988094086562513898527391555490352156627307769278185444897960555995383228897584818577375695810423475039211516849716140051437120083274285367', true);
+        testMillerRabin('30244022694659482453371920976249272809817388822378671144866806600284132009663832003348737406289715119965835410140834733465553787513841966120831322372642881643693711233087233983267648392814127424201572290931937482043046169402667397610783447368703776842799852222745601531140231486417855517072392416789672922529566643118973930252809010605519948446055538976582290902060054788109497630796585770940656002892943575479533099350429655210881833493066716819282707441553612603960556051122162329171373373251909387401572866056121964608595895425640834764028568120995397759283490218181167000161310959711677055741632674632758727382743', true);
+        testMillerRabin('30560953105766401423987964658775999222308579908395527900931049506803845883459894704297458477118152899910620180302473409631442956208933061650967001020981432894530064472547770442696756724169958362395601360296775798187903794894866967342028337982275745956538015473621792510615113531964380246815875830970404687926061637030085629909804357717955251735074071072456074274947993921828878633638119117086342305530526661796817095624933200483138188878398983149622639425550360394901699701985050966685840649129419227936413574227792077082510807968104733387734970009620450108276446659342203263759999068046251645984039420643003580284779', true);
+        // above numbers but -2 (not prime)
+        testMillerRabin('28608382334358769588283288249494859626901014972463291352091976543138105382282108662849885913053034513852843449409838151123568984617793641641937583673207501643041336002587032201383537626393235736734494131431069043382068545865505150651648610506542819001961332454611129372758714288168807328523359776577571626967649079147416191592855529888846889532625386469236278694936872628305052827422772792103722178298844645210242389265273407924858034431614414896134561928996888883994953322861399988094086562513898527391555490352156627307769278185444897960555995383228897584818577375695810423475039211516849716140051437120083274285365', false);
+        testMillerRabin('30244022694659482453371920976249272809817388822378671144866806600284132009663832003348737406289715119965835410140834733465553787513841966120831322372642881643693711233087233983267648392814127424201572290931937482043046169402667397610783447368703776842799852222745601531140231486417855517072392416789672922529566643118973930252809010605519948446055538976582290902060054788109497630796585770940656002892943575479533099350429655210881833493066716819282707441553612603960556051122162329171373373251909387401572866056121964608595895425640834764028568120995397759283490218181167000161310959711677055741632674632758727382741', false);
+        testMillerRabin('30560953105766401423987964658775999222308579908395527900931049506803845883459894704297458477118152899910620180302473409631442956208933061650967001020981432894530064472547770442696756724169958362395601360296775798187903794894866967342028337982275745956538015473621792510615113531964380246815875830970404687926061637030085629909804357717955251735074071072456074274947993921828878633638119117086342305530526661796817095624933200483138188878398983149622639425550360394901699701985050966685840649129419227936413574227792077082510807968104733387734970009620450108276446659342203263759999068046251645984039420643003580284777', false);
+        // dh_prime used by telegram, as seen in https://core.telegram.org/mtproto/security_guidelines
+        const telegramDhPrime = 'C7 1C AE B9 C6 B1 C9 04 8E 6C 52 2F 70 F1 3F 73 98 0D 40 23 8E 3E 21 C1 49 34 D0 37 56 3D 93 0F 48 19 8A 0A A7 C1 40 58 22 94 93 D2 25 30 F4 DB FA 33 6F 6E 0A C9 25 13 95 43 AE D4 4C CE 7C 37 20 FD 51 F6 94 58 70 5A C6 8C D4 FE 6B 6B 13 AB DC 97 46 51 29 69 32 84 54 F1 8F AF 8C 59 5F 64 24 77 FE 96 BB 2A 94 1D 5B CD 1D 4A C8 CC 49 88 07 08 FA 9B 37 8E 3C 4F 3A 90 60 BE E6 7C F9 A4 A4 A6 95 81 10 51 90 7E 16 27 53 B5 6B 0F 6B 41 0D BA 74 D8 A8 4B 2A 14 B3 14 4E 0E F1 28 47 54 FD 17 ED 95 0D 59 65 B4 B9 DD 46 58 2D B1 17 8D 16 9C 6B C4 65 B0 D6 FF 9C A3 92 8F EF 5B 9A E4 E4 18 FC 15 E8 3E BE A0 F8 7F A9 FF 5E ED 70 05 0D ED 28 49 F4 7B F9 59 D9 56 85 0C E9 29 85 1F 0D 81 15 F6 35 B1 05 EE 2E 4E 15 D0 4B 24 54 BF 6F 4F AD F0 34 B1 04 03 11 9C D8 E3 B9 2F CC 5B';
+        testMillerRabin(BigInt('0x' + telegramDhPrime.replace(/ /g, '')), true);
+    });
+}, { timeout: 10000 }); // since miller-rabin factorization relies on RNG, it may take a while (or may not!)
+//# sourceMappingURL=miller-rabin.test.js.map

package/cjs/utils/crypto/miller-rabin.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"miller-rabin.test.js","sourceRoot":"","sources":["../../../../src/utils/crypto/miller-rabin.test.ts"],"names":[],"mappings":";;AAAA,mCAA6C;AAE7C,yCAAyD;AACzD,uDAA+C;AAE/C,IAAA,iBAAQ,EACJ,mBAAmB,EACnB;IACI,4FAA4F;IAC5F,MAAM,CAAC,GAAG,IAAA,uCAA4B,GAAE,CAAA;IAExC,MAAM,eAAe,GAAG,CAAC,CAA2B,EAAE,OAAgB,EAAE,EAAE;QACtE,IAAA,eAAM,EAAC,IAAA,6BAAW,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;IACjD,CAAC,CAAA;IAED,IAAA,WAAE,EAAC,wDAAwD,EAAE,GAAG,EAAE;QAC9D,MAAM,cAAc,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAE/D,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE;YAChC,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;SAC/B;IACL,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,iEAAiE,EAAE,GAAG,EAAE;QACvE,MAAM,cAAc,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAElD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE;YAChC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;SAChC;IACL,CAAC,CAAC,CAAA;IAEF,oEAAoE;IAEpE,IAAA,WAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE;QACvC,eAAe,CACX,4JAA4J,EAC5J,IAAI,CACP,CAAA;QACD,eAAe,CACX,6JAA6J,EAC7J,IAAI,CACP,CAAA;QACD,eAAe,CACX,6JAA6J,EAC7J,IAAI,CACP,CAAA;QACD,eAAe,CACX,6JAA6J,EAC7J,IAAI,CACP,CAAA;QAED,mCAAmC;QACnC,eAAe,CACX,4JAA4J,EAC5J,KAAK,CACR,CAAA;QACD,eAAe,CACX,6JAA6J,EAC7J,KAAK,CACR,CAAA;QACD,eAAe,CACX,6JAA6J,EAC7J,KAAK,CACR,CAAA;QACD,eAAe,CACX,6JAA6J,EAC7J,KAAK,CACR,CAAA;IACL,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,kCAAkC,EAAE,GAAG,EAAE;QACxC,eAAe,CACX,sTAAsT,EACtT,IAAI,CACP,CAAA;QACD,eAAe,CACX,sTAAsT,EACtT,IAAI,CACP,CAAA;QACD,eAAe,CACX,sTAAsT,EACtT,IAAI,CACP,CAAA;QACD,eAAe,CACX,sTAAsT,EACtT,IAAI,CACP,CAAA;QAED,mCAAmC;QACnC,eAAe,CACX,sTAAsT,EACtT,KAAK,CACR,CAAA;QACD,eAAe,CACX,sTAAsT,EACtT,KAAK,CACR,CAAA;QACD,eAAe,CACX,sTAAsT,EACtT,KAAK,CACR,CAAA;QACD,eAAe,CACX,sTAAsT,EACtT,KAAK,CACR,CAAA;IACL,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,kCAAkC,EAAE,GAAG,EAAE;QACxC,eAAe,CACX,2mBAA2mB,EAC3mB,IAAI,CACP,CAAA;QACD,eAAe,CACX,2mBAA2mB,EAC3mB,IAAI,CACP,CAAA;QACD,eAAe,CACX,2mBAA2mB,EAC3mB,IAAI,CACP,CAAA;QAED,mCAAmC;QACnC,eAAe,CACX,2mBAA2mB,EAC3mB,KAAK,CACR,CAAA;QACD,eAAe,CACX,2mBAA2mB,EAC3mB,KAAK,CACR,CAAA;QACD,eAAe,CACX,2mBAA2mB,EAC3mB,KAAK,CACR,CAAA;QAED,8FAA8F;QAC9F,MAAM,eAAe,GACjB,iwBAAiwB,CAAA;QACrwB,eAAe,CAAC,MAAM,CAAC,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;AACN,CAAC,EACD,EAAE,OAAO,EAAE,KAAK,EAAE,CACrB,CAAA,CAAC,oFAAoF","sourcesContent":["import { describe, expect, it } from 'vitest'\n\nimport { defaultCryptoProviderFactory } from './index.js'\nimport { millerRabin } from './miller-rabin.js'\n\ndescribe(\n    'miller-rabin test',\n    function () {\n        // miller-rabin factorization relies on RNG, so we should use a real random number generator\n        const c = defaultCryptoProviderFactory()\n\n        const testMillerRabin = (n: number | string | bigint, isPrime: boolean) => {\n            expect(millerRabin(c, BigInt(n))).eq(isPrime)\n        }\n\n        it('should correctly label small primes as probable primes', () => {\n            const smallOddPrimes = [2, 3, 5, 7, 11, 13, 17, 19, 23, 29, 31]\n\n            for (const prime of smallOddPrimes) {\n                testMillerRabin(prime, true)\n            }\n        })\n\n        it('should correctly label small odd composite numbers as composite', () => {\n            const smallOddPrimes = [9, 15, 21, 25, 27, 33, 35]\n\n            for (const prime of smallOddPrimes) {\n                testMillerRabin(prime, false)\n            }\n        })\n\n        // primes are generated using `openssl prime -generate -bits <bits>`\n\n        it('should work for 512-bit numbers', () => {\n            testMillerRabin(\n                '8411445470921866378538628788380866906358949375899610911537071281076627385046125382763689993349183284546479522400013151510610266158235924343045768103605519',\n                true,\n            )\n            testMillerRabin(\n                '11167561990563990242158096122232207092938761092751537312016255867850441858086589598418467012717458858604863547175649456433632887622140170743409535470973399',\n                true,\n            )\n            testMillerRabin(\n                '11006717791910450367418249787526506184731090161438431250022510598653874155081488487035840577645711578911087148186160668569071839053453201592321650008610329',\n                true,\n            )\n            testMillerRabin(\n                '12224330340162812215033324917156282302617911690617664923428569636370785775561435789211091021550357876767050350997458404009005800772805534351607294516706177',\n                true,\n            )\n\n            // above numbers but -2 (not prime)\n            testMillerRabin(\n                '8411445470921866378538628788380866906358949375899610911537071281076627385046125382763689993349183284546479522400013151510610266158235924343045768103605517',\n                false,\n            )\n            testMillerRabin(\n                '11167561990563990242158096122232207092938761092751537312016255867850441858086589598418467012717458858604863547175649456433632887622140170743409535470973397',\n                false,\n            )\n            testMillerRabin(\n                '11006717791910450367418249787526506184731090161438431250022510598653874155081488487035840577645711578911087148186160668569071839053453201592321650008610327',\n                false,\n            )\n            testMillerRabin(\n                '12224330340162812215033324917156282302617911690617664923428569636370785775561435789211091021550357876767050350997458404009005800772805534351607294516706175',\n                false,\n            )\n        })\n\n        it('should work for 1024-bit numbers', () => {\n            testMillerRabin(\n                '94163180970530844245052892199633535954736903357996153321496979115367320260897793334681106861766748541439161886270777106456088209508872459550450259737267142959061663564218457086654112219462515165219295402175541003899136060178102898376369981338103600856012709228116661479275753497725541132207243717937379815409',\n                true,\n            )\n            testMillerRabin(\n                '97324962433497727515811278760066576725849776656602017497363465683978397629803148191267105308901733336070351381654371470561376353774017284623969415330564867697353080030917333974193741719718950105404732792050882127213356260415251087867407489400712288570880407613514781891914135956778687719588061176455381937003',\n                true,\n            )\n            testMillerRabin(\n                '92511311413226091818378551616231701579277597795073142338527410334932345968554993390789667936819230228388142960299649466238701015865565141753710450319875546944139442823075990348978746055937500467483161699883905850192191164043687791185635729923497381849380102040768674652775240505782671289535260164547714030567',\n                true,\n            )\n            testMillerRabin(\n                '98801756216479639848708157708947504990501845258427605711852570166662700681215707617225664134994147912417941920327932092748574265476658124536672887141144222716123085451749764522435906007567360583062117498919471220566974634924384147341592903939264267901029640119196259026154529723870788246284629644039137378253',\n                true,\n            )\n\n            // above numbers but -2 (not prime)\n            testMillerRabin(\n                '94163180970530844245052892199633535954736903357996153321496979115367320260897793334681106861766748541439161886270777106456088209508872459550450259737267142959061663564218457086654112219462515165219295402175541003899136060178102898376369981338103600856012709228116661479275753497725541132207243717937379815407',\n                false,\n            )\n            testMillerRabin(\n                '97324962433497727515811278760066576725849776656602017497363465683978397629803148191267105308901733336070351381654371470561376353774017284623969415330564867697353080030917333974193741719718950105404732792050882127213356260415251087867407489400712288570880407613514781891914135956778687719588061176455381937001',\n                false,\n            )\n            testMillerRabin(\n                '92511311413226091818378551616231701579277597795073142338527410334932345968554993390789667936819230228388142960299649466238701015865565141753710450319875546944139442823075990348978746055937500467483161699883905850192191164043687791185635729923497381849380102040768674652775240505782671289535260164547714030565',\n                false,\n            )\n            testMillerRabin(\n                '98801756216479639848708157708947504990501845258427605711852570166662700681215707617225664134994147912417941920327932092748574265476658124536672887141144222716123085451749764522435906007567360583062117498919471220566974634924384147341592903939264267901029640119196259026154529723870788246284629644039137378251',\n                false,\n            )\n        })\n\n        it('should work for 2048-bit numbers', () => {\n            testMillerRabin(\n                '28608382334358769588283288249494859626901014972463291352091976543138105382282108662849885913053034513852843449409838151123568984617793641641937583673207501643041336002587032201383537626393235736734494131431069043382068545865505150651648610506542819001961332454611129372758714288168807328523359776577571626967649079147416191592855529888846889532625386469236278694936872628305052827422772792103722178298844645210242389265273407924858034431614414896134561928996888883994953322861399988094086562513898527391555490352156627307769278185444897960555995383228897584818577375695810423475039211516849716140051437120083274285367',\n                true,\n            )\n            testMillerRabin(\n                '30244022694659482453371920976249272809817388822378671144866806600284132009663832003348737406289715119965835410140834733465553787513841966120831322372642881643693711233087233983267648392814127424201572290931937482043046169402667397610783447368703776842799852222745601531140231486417855517072392416789672922529566643118973930252809010605519948446055538976582290902060054788109497630796585770940656002892943575479533099350429655210881833493066716819282707441553612603960556051122162329171373373251909387401572866056121964608595895425640834764028568120995397759283490218181167000161310959711677055741632674632758727382743',\n                true,\n            )\n            testMillerRabin(\n                '30560953105766401423987964658775999222308579908395527900931049506803845883459894704297458477118152899910620180302473409631442956208933061650967001020981432894530064472547770442696756724169958362395601360296775798187903794894866967342028337982275745956538015473621792510615113531964380246815875830970404687926061637030085629909804357717955251735074071072456074274947993921828878633638119117086342305530526661796817095624933200483138188878398983149622639425550360394901699701985050966685840649129419227936413574227792077082510807968104733387734970009620450108276446659342203263759999068046251645984039420643003580284779',\n                true,\n            )\n\n            // above numbers but -2 (not prime)\n            testMillerRabin(\n                '28608382334358769588283288249494859626901014972463291352091976543138105382282108662849885913053034513852843449409838151123568984617793641641937583673207501643041336002587032201383537626393235736734494131431069043382068545865505150651648610506542819001961332454611129372758714288168807328523359776577571626967649079147416191592855529888846889532625386469236278694936872628305052827422772792103722178298844645210242389265273407924858034431614414896134561928996888883994953322861399988094086562513898527391555490352156627307769278185444897960555995383228897584818577375695810423475039211516849716140051437120083274285365',\n                false,\n            )\n            testMillerRabin(\n                '30244022694659482453371920976249272809817388822378671144866806600284132009663832003348737406289715119965835410140834733465553787513841966120831322372642881643693711233087233983267648392814127424201572290931937482043046169402667397610783447368703776842799852222745601531140231486417855517072392416789672922529566643118973930252809010605519948446055538976582290902060054788109497630796585770940656002892943575479533099350429655210881833493066716819282707441553612603960556051122162329171373373251909387401572866056121964608595895425640834764028568120995397759283490218181167000161310959711677055741632674632758727382741',\n                false,\n            )\n            testMillerRabin(\n                '30560953105766401423987964658775999222308579908395527900931049506803845883459894704297458477118152899910620180302473409631442956208933061650967001020981432894530064472547770442696756724169958362395601360296775798187903794894866967342028337982275745956538015473621792510615113531964380246815875830970404687926061637030085629909804357717955251735074071072456074274947993921828878633638119117086342305530526661796817095624933200483138188878398983149622639425550360394901699701985050966685840649129419227936413574227792077082510807968104733387734970009620450108276446659342203263759999068046251645984039420643003580284777',\n                false,\n            )\n\n            // dh_prime used by telegram, as seen in https://core.telegram.org/mtproto/security_guidelines\n            const telegramDhPrime =\n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n            testMillerRabin(BigInt('0x' + telegramDhPrime.replace(/ /g, '')), true)\n        })\n    },\n    { timeout: 10000 },\n) // since miller-rabin factorization relies on RNG, it may take a while (or may not!)\n"]}

package/cjs/utils/crypto/mtproto.d.ts

@@ -8,7 +8,7 @@ import { ICryptoProvider, IEncryptionScheme } from './abstract.js';
  * @param newNonce  New nonce
  * @returns  Tuple: `[key, iv]`
  */
-export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serverNonce: Uint8Array, newNonce: Uint8Array): Promise<[Uint8Array, Uint8Array]>;
+export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serverNonce: Uint8Array, newNonce: Uint8Array): [Uint8Array, Uint8Array];
 /**
  * Create AES IGE instance for message (given auth key and message key)
  * as defined by MTProto v2.
@@ -18,7 +18,7 @@ export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serve
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): Promise<IEncryptionScheme>;
+export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): IEncryptionScheme;
 /**
  * Create AES IGE instance for file (given auth key and message key)
  * as defined by MTProto v1.
@@ -28,4 +28,4 @@ export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey:
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-export declare function createAesIgeForMessageOld(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): Promise<IEncryptionScheme>;
+export declare function createAesIgeForMessageOld(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): IEncryptionScheme;

package/cjs/utils/crypto/mtproto.js

@@ -11,10 +11,10 @@ const buffer_utils_js_1 = require("../buffer-utils.js");
  * @param newNonce  New nonce
  * @returns  Tuple: `[key, iv]`
  */
-async function generateKeyAndIvFromNonce(crypto, serverNonce, newNonce) {
-    const hash1 = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, serverNonce]));
-    const hash2 = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([serverNonce, newNonce]));
-    const hash3 = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, newNonce]));
+function generateKeyAndIvFromNonce(crypto, serverNonce, newNonce) {
+    const hash1 = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, serverNonce]));
+    const hash2 = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([serverNonce, newNonce]));
+    const hash3 = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, newNonce]));
     const key = (0, buffer_utils_js_1.concatBuffers)([hash1, hash2.subarray(0, 12)]);
     const iv = (0, buffer_utils_js_1.concatBuffers)([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)]);
     return [key, iv];
@@ -29,10 +29,10 @@ exports.generateKeyAndIvFromNonce = generateKeyAndIvFromNonce;
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-async function createAesIgeForMessage(crypto, authKey, messageKey, client) {
+function createAesIgeForMessage(crypto, authKey, messageKey, client) {
     const x = client ? 0 : 8;
-    const sha256a = await crypto.sha256((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(x, 36 + x)]));
-    const sha256b = await crypto.sha256((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(40 + x, 76 + x), messageKey]));
+    const sha256a = crypto.sha256((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(x, 36 + x)]));
+    const sha256b = crypto.sha256((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(40 + x, 76 + x), messageKey]));
     const key = (0, buffer_utils_js_1.concatBuffers)([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)]);
     const iv = (0, buffer_utils_js_1.concatBuffers)([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)]);
     return crypto.createAesIge(key, iv);
@@ -47,12 +47,12 @@ exports.createAesIgeForMessage = createAesIgeForMessage;
  * @param messageKey  Message key
  * @param client  Whether this is a client to server message
  */
-async function createAesIgeForMessageOld(crypto, authKey, messageKey, client) {
+function createAesIgeForMessageOld(crypto, authKey, messageKey, client) {
     const x = client ? 0 : 8;
-    const sha1a = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(x, 32 + x)]));
-    const sha1b = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]));
-    const sha1c = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(64 + x, 96 + x), messageKey]));
-    const sha1d = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(96 + x, 128 + x)]));
+    const sha1a = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(x, 32 + x)]));
+    const sha1b = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]));
+    const sha1c = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(64 + x, 96 + x), messageKey]));
+    const sha1d = crypto.sha1((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(96 + x, 128 + x)]));
     const key = (0, buffer_utils_js_1.concatBuffers)([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)]);
     const iv = (0, buffer_utils_js_1.concatBuffers)([
         sha1a.subarray(8, 20),

package/cjs/utils/crypto/mtproto.js.map

@@ -1 +1 @@
-{"version":3,"file":"mtproto.js","sourceRoot":"","sources":["../../../../src/utils/crypto/mtproto.ts"],"names":[],"mappings":";;;AAAA,wDAAkD;AAGlD;;;;;;;;GAQG;AACI,KAAK,UAAU,yBAAyB,CAC3C,MAAuB,EACvB,WAAuB,EACvB,QAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAEpE,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAElF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACpB,CAAC;AAbD,8DAaC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7F,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAElG,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACtG,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAErG,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAdD,wDAcC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,yBAAyB,CAC3C,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACzF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAC9F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/F,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/F,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;KACvB,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAvBD,8DAuBC","sourcesContent":["import { concatBuffers } from '../buffer-utils.js'\nimport { ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\n/**\n * Generate AES key and IV from nonces as defined by MTProto.\n * Used in authorization flow.\n *\n * @param crypto  Crypto provider\n * @param serverNonce  Server nonce\n * @param newNonce  New nonce\n * @returns  Tuple: `[key, iv]`\n */\nexport async function generateKeyAndIvFromNonce(\n    crypto: ICryptoProvider,\n    serverNonce: Uint8Array,\n    newNonce: Uint8Array,\n): Promise<[Uint8Array, Uint8Array]> {\n    const hash1 = await crypto.sha1(concatBuffers([newNonce, serverNonce]))\n    const hash2 = await crypto.sha1(concatBuffers([serverNonce, newNonce]))\n    const hash3 = await crypto.sha1(concatBuffers([newNonce, newNonce]))\n\n    const key = concatBuffers([hash1, hash2.subarray(0, 12)])\n    const iv = concatBuffers([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)])\n\n    return [key, iv]\n}\n\n/**\n * Create AES IGE instance for message (given auth key and message key)\n * as defined by MTProto v2.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport async function createAesIgeForMessage(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): Promise<IEncryptionScheme> {\n    const x = client ? 0 : 8\n    const sha256a = await crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]))\n    const sha256b = await crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]))\n\n    const key = concatBuffers([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)])\n    const iv = concatBuffers([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)])\n\n    return crypto.createAesIge(key, iv)\n}\n\n/**\n * Create AES IGE instance for file (given auth key and message key)\n * as defined by MTProto v1.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport async function createAesIgeForMessageOld(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): Promise<IEncryptionScheme> {\n    const x = client ? 0 : 8\n    const sha1a = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]))\n    const sha1b = await crypto.sha1(\n        concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]),\n    )\n    const sha1c = await crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]))\n    const sha1d = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]))\n\n    const key = concatBuffers([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)])\n    const iv = concatBuffers([\n        sha1a.subarray(8, 20),\n        sha1b.subarray(0, 8),\n        sha1c.subarray(16, 20),\n        sha1d.subarray(0, 8),\n    ])\n\n    return crypto.createAesIge(key, iv)\n}\n"]}
+{"version":3,"file":"mtproto.js","sourceRoot":"","sources":["../../../../src/utils/crypto/mtproto.ts"],"names":[],"mappings":";;;AAAA,wDAAkD;AAGlD;;;;;;;;GAQG;AACH,SAAgB,yBAAyB,CACrC,MAAuB,EACvB,WAAuB,EACvB,QAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAE9D,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAElF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACpB,CAAC;AAbD,8DAaC;AAED;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAClC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAE5F,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACtG,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAErG,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAdD,wDAcC;AAED;;;;;;;;GAQG;AACH,SAAgB,yBAAyB,CACrC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACrB,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IACxF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAEzF,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/F,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;KACvB,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAvBD,8DAuBC","sourcesContent":["import { concatBuffers } from '../buffer-utils.js'\nimport { ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\n/**\n * Generate AES key and IV from nonces as defined by MTProto.\n * Used in authorization flow.\n *\n * @param crypto  Crypto provider\n * @param serverNonce  Server nonce\n * @param newNonce  New nonce\n * @returns  Tuple: `[key, iv]`\n */\nexport function generateKeyAndIvFromNonce(\n    crypto: ICryptoProvider,\n    serverNonce: Uint8Array,\n    newNonce: Uint8Array,\n): [Uint8Array, Uint8Array] {\n    const hash1 = crypto.sha1(concatBuffers([newNonce, serverNonce]))\n    const hash2 = crypto.sha1(concatBuffers([serverNonce, newNonce]))\n    const hash3 = crypto.sha1(concatBuffers([newNonce, newNonce]))\n\n    const key = concatBuffers([hash1, hash2.subarray(0, 12)])\n    const iv = concatBuffers([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)])\n\n    return [key, iv]\n}\n\n/**\n * Create AES IGE instance for message (given auth key and message key)\n * as defined by MTProto v2.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport function createAesIgeForMessage(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): IEncryptionScheme {\n    const x = client ? 0 : 8\n    const sha256a = crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]))\n    const sha256b = crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]))\n\n    const key = concatBuffers([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)])\n    const iv = concatBuffers([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)])\n\n    return crypto.createAesIge(key, iv)\n}\n\n/**\n * Create AES IGE instance for file (given auth key and message key)\n * as defined by MTProto v1.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport function createAesIgeForMessageOld(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): IEncryptionScheme {\n    const x = client ? 0 : 8\n    const sha1a = crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]))\n    const sha1b = crypto.sha1(\n        concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]),\n    )\n    const sha1c = crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]))\n    const sha1d = crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]))\n\n    const key = concatBuffers([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)])\n    const iv = concatBuffers([\n        sha1a.subarray(8, 20),\n        sha1b.subarray(0, 8),\n        sha1c.subarray(16, 20),\n        sha1d.subarray(0, 8),\n    ])\n\n    return crypto.createAesIge(key, iv)\n}\n"]}

package/cjs/utils/crypto/mtproto.test.d.ts

@@ -0,0 +1 @@
+export {};

package/cjs/utils/crypto/mtproto.test.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/* eslint-disable no-restricted-globals */
+const vitest_1 = require("vitest");
+const mtproto_js_1 = require("./mtproto.js");
+const node_js_1 = require("./node.js");
+const authKey = Buffer.alloc(2048 / 8, Buffer.from('98cb29c6ffa89e79da695a54f572e6cb101e81c688b63a4bf73c3622dec230e0', 'hex'));
+const messageKey = Buffer.from('25d701f2a29205526757825a99eb2d32');
+(0, vitest_1.describe)('mtproto 2.0', () => {
+    (0, vitest_1.it)('should correctly derive message key and iv for client', () => {
+        const crypto = new node_js_1.NodeCryptoProvider();
+        const spy = vitest_1.vi.spyOn(crypto, 'createAesIge');
+        (0, mtproto_js_1.createAesIgeForMessage)(crypto, authKey, messageKey, true);
+        (0, vitest_1.expect)(spy).toHaveBeenCalledWith(Buffer.from('7acac59ab48cd370e478daf6c64545ab9f32d5c9197f25febe052110f61875ca', 'hex'), Buffer.from('2746ccc19fc260c08f3d2696389f415392103dbcc3a8bf69da9394c3c3d95bd3', 'hex'));
+    });
+    (0, vitest_1.it)('should correctly derive message key and iv for server', () => {
+        const crypto = new node_js_1.NodeCryptoProvider();
+        const spy = vitest_1.vi.spyOn(crypto, 'createAesIge');
+        (0, mtproto_js_1.createAesIgeForMessage)(crypto, authKey, messageKey, false);
+        (0, vitest_1.expect)(spy).toHaveBeenCalledWith(Buffer.from('c7cf179e7ebab144ba87de05415db4157d2fc66df4790b2fd405a6c8cbe4c0b3', 'hex'), Buffer.from('0916a7bd9880eacd4eeb868577a4c6a50e76fca4ac5c1bcfbafe3b9f76ccd806', 'hex'));
+    });
+});
+(0, vitest_1.describe)('mtproto 1.0', () => {
+    (0, vitest_1.it)('should correctly derive message key and iv for client', () => {
+        const crypto = new node_js_1.NodeCryptoProvider();
+        const spy = vitest_1.vi.spyOn(crypto, 'createAesIge');
+        (0, mtproto_js_1.createAesIgeForMessageOld)(crypto, authKey, messageKey, true);
+        (0, vitest_1.expect)(spy).toHaveBeenCalledWith(Buffer.from('aad61cb5b7be5e8435174d74665f8a978e85806d0970ad4958642ca49e3c8834', 'hex'), Buffer.from('4065736fe6586e94aad9f024062f1b9988e8a44e2aff4e11aad61cb5b7be5e84', 'hex'));
+    });
+    (0, vitest_1.it)('should correctly derive message key and iv for server', () => {
+        const crypto = new node_js_1.NodeCryptoProvider();
+        const spy = vitest_1.vi.spyOn(crypto, 'createAesIge');
+        (0, mtproto_js_1.createAesIgeForMessageOld)(crypto, authKey, messageKey, false);
+        (0, vitest_1.expect)(spy).toHaveBeenCalledWith(Buffer.from('d57682a17105e43b92bc5025ea80e88ef708240fc19450dfe072a8760f9534da', 'hex'), Buffer.from('07addff7beeb7705ef3a9d5090bd73c992d57291bb8a7079d57682a17105e43b', 'hex'));
+    });
+});
+(0, vitest_1.describe)('mtproto key/iv from nonce', () => {
+    (0, vitest_1.it)('should correctly derive message key and iv for given nonces', () => {
+        const crypto = new node_js_1.NodeCryptoProvider();
+        const res = (0, mtproto_js_1.generateKeyAndIvFromNonce)(crypto, Buffer.from('8af24c551836e5ed7002f5857e6e71b2', 'hex'), Buffer.from('3bf48b2d3152f383d82d1f2b32ac7fb5', 'hex'));
+        (0, vitest_1.expect)(res).to.eql([
+            Buffer.from('b0b5ffeadff0249fa6292f5ae0351556fd6619ba5dd4809601669292456d3e5a', 'hex'),
+            Buffer.from('13fef5bfd8c46b12dfd1753013b86cc012e1ce8ed6f8ecdd7bf36f3a3bf48b2d', 'hex'),
+        ]);
+    });
+});
+//# sourceMappingURL=mtproto.test.js.map

package/cjs/utils/crypto/mtproto.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mtproto.test.js","sourceRoot":"","sources":["../../../../src/utils/crypto/mtproto.test.ts"],"names":[],"mappings":";;AAAA,0CAA0C;AAC1C,mCAAiD;AAEjD,6CAA2G;AAC3G,uCAA8C;AAE9C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CACxB,IAAI,GAAG,CAAC,EACR,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC,CACzF,CAAA;AACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;AAElE,IAAA,iBAAQ,EAAC,aAAa,EAAE,GAAG,EAAE;IACzB,IAAA,WAAE,EAAC,uDAAuD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAI,4BAAkB,EAAE,CAAA;QACvC,MAAM,GAAG,GAAG,WAAE,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;QAE5C,IAAA,mCAAsB,EAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;QAEzD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,oBAAoB,CAC5B,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC,EACtF,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC,CACzF,CAAA;IACL,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,uDAAuD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAI,4BAAkB,EAAE,CAAA;QACvC,MAAM,GAAG,GAAG,WAAE,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;QAE5C,IAAA,mCAAsB,EAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;QAE1D,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,oBAAoB,CAC5B,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC,EACtF,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC,CACzF,CAAA;IACL,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA;AAEF,IAAA,iBAAQ,EAAC,aAAa,EAAE,GAAG,EAAE;IACzB,IAAA,WAAE,EAAC,uDAAuD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAI,4BAAkB,EAAE,CAAA;QACvC,MAAM,GAAG,GAAG,WAAE,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;QAE5C,IAAA,sCAAyB,EAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;QAE5D,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,oBAAoB,CAC5B,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC,EACtF,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC,CACzF,CAAA;IACL,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,uDAAuD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAI,4BAAkB,EAAE,CAAA;QACvC,MAAM,GAAG,GAAG,WAAE,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;QAE5C,IAAA,sCAAyB,EAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;QAE7D,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,oBAAoB,CAC5B,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC,EACtF,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC,CACzF,CAAA;IACL,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA;AAEF,IAAA,iBAAQ,EAAC,2BAA2B,EAAE,GAAG,EAAE;IACvC,IAAA,WAAE,EAAC,6DAA6D,EAAE,GAAG,EAAE;QACnE,MAAM,MAAM,GAAG,IAAI,4BAAkB,EAAE,CAAA;QAEvC,MAAM,GAAG,GAAG,IAAA,sCAAyB,EACjC,MAAM,EACN,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,EACtD,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CACzD,CAAA;QAED,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,kEAAkE,EAAE,KAAK,CAAC;SACzF,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA","sourcesContent":["/* eslint-disable no-restricted-globals */\nimport { describe, expect, it, vi } from 'vitest'\n\nimport { createAesIgeForMessage, createAesIgeForMessageOld, generateKeyAndIvFromNonce } from './mtproto.js'\nimport { NodeCryptoProvider } from './node.js'\n\nconst authKey = Buffer.alloc(\n    2048 / 8,\n    Buffer.from('98cb29c6ffa89e79da695a54f572e6cb101e81c688b63a4bf73c3622dec230e0', 'hex'),\n)\nconst messageKey = Buffer.from('25d701f2a29205526757825a99eb2d32')\n\ndescribe('mtproto 2.0', () => {\n    it('should correctly derive message key and iv for client', () => {\n        const crypto = new NodeCryptoProvider()\n        const spy = vi.spyOn(crypto, 'createAesIge')\n\n        createAesIgeForMessage(crypto, authKey, messageKey, true)\n\n        expect(spy).toHaveBeenCalledWith(\n            Buffer.from('7acac59ab48cd370e478daf6c64545ab9f32d5c9197f25febe052110f61875ca', 'hex'),\n            Buffer.from('2746ccc19fc260c08f3d2696389f415392103dbcc3a8bf69da9394c3c3d95bd3', 'hex'),\n        )\n    })\n\n    it('should correctly derive message key and iv for server', () => {\n        const crypto = new NodeCryptoProvider()\n        const spy = vi.spyOn(crypto, 'createAesIge')\n\n        createAesIgeForMessage(crypto, authKey, messageKey, false)\n\n        expect(spy).toHaveBeenCalledWith(\n            Buffer.from('c7cf179e7ebab144ba87de05415db4157d2fc66df4790b2fd405a6c8cbe4c0b3', 'hex'),\n            Buffer.from('0916a7bd9880eacd4eeb868577a4c6a50e76fca4ac5c1bcfbafe3b9f76ccd806', 'hex'),\n        )\n    })\n})\n\ndescribe('mtproto 1.0', () => {\n    it('should correctly derive message key and iv for client', () => {\n        const crypto = new NodeCryptoProvider()\n        const spy = vi.spyOn(crypto, 'createAesIge')\n\n        createAesIgeForMessageOld(crypto, authKey, messageKey, true)\n\n        expect(spy).toHaveBeenCalledWith(\n            Buffer.from('aad61cb5b7be5e8435174d74665f8a978e85806d0970ad4958642ca49e3c8834', 'hex'),\n            Buffer.from('4065736fe6586e94aad9f024062f1b9988e8a44e2aff4e11aad61cb5b7be5e84', 'hex'),\n        )\n    })\n\n    it('should correctly derive message key and iv for server', () => {\n        const crypto = new NodeCryptoProvider()\n        const spy = vi.spyOn(crypto, 'createAesIge')\n\n        createAesIgeForMessageOld(crypto, authKey, messageKey, false)\n\n        expect(spy).toHaveBeenCalledWith(\n            Buffer.from('d57682a17105e43b92bc5025ea80e88ef708240fc19450dfe072a8760f9534da', 'hex'),\n            Buffer.from('07addff7beeb7705ef3a9d5090bd73c992d57291bb8a7079d57682a17105e43b', 'hex'),\n        )\n    })\n})\n\ndescribe('mtproto key/iv from nonce', () => {\n    it('should correctly derive message key and iv for given nonces', () => {\n        const crypto = new NodeCryptoProvider()\n\n        const res = generateKeyAndIvFromNonce(\n            crypto,\n            Buffer.from('8af24c551836e5ed7002f5857e6e71b2', 'hex'),\n            Buffer.from('3bf48b2d3152f383d82d1f2b32ac7fb5', 'hex'),\n        )\n\n        expect(res).to.eql([\n            Buffer.from('b0b5ffeadff0249fa6292f5ae0351556fd6619ba5dd4809601669292456d3e5a', 'hex'),\n            Buffer.from('13fef5bfd8c46b12dfd1753013b86cc012e1ce8ed6f8ecdd7bf36f3a3bf48b2d', 'hex'),\n        ])\n    })\n})\n"]}

package/cjs/utils/crypto/node.d.ts

@@ -0,0 +1,21 @@
+import { InitInput } from '@mtcute/wasm';
+import { MaybeAsync } from '../../types/index.js';
+import { BaseCryptoProvider, IAesCtr, ICryptoProvider, IEncryptionScheme } from './abstract.js';
+export declare abstract class BaseNodeCryptoProvider extends BaseCryptoProvider {
+    createAesCtr(key: Uint8Array, iv: Uint8Array): IAesCtr;
+    pbkdf2(password: Uint8Array, salt: Uint8Array, iterations: number, keylen?: number, algo?: string): MaybeAsync<Uint8Array>;
+    sha1(data: Uint8Array): Uint8Array;
+    sha256(data: Uint8Array): Uint8Array;
+    hmacSha256(data: Uint8Array, key: Uint8Array): Uint8Array;
+    gzip(data: Uint8Array, maxSize: number): Uint8Array | null;
+    gunzip(data: Uint8Array): Uint8Array;
+    randomFill(buf: Uint8Array): void;
+}
+export declare class NodeCryptoProvider extends BaseNodeCryptoProvider implements ICryptoProvider {
+    private wasmInput?;
+    constructor(params?: {
+        wasmInput?: InitInput;
+    });
+    initialize(): Promise<void>;
+    createAesIge(key: Uint8Array, iv: Uint8Array): IEncryptionScheme;
+}

package/cjs/utils/crypto/node.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NodeCryptoProvider = exports.BaseNodeCryptoProvider = void 0;
+// eslint-disable-next-line no-restricted-imports
+const crypto_1 = require("crypto");
+const zlib_1 = require("zlib");
+const wasm_1 = require("@mtcute/wasm");
+const abstract_js_1 = require("./abstract.js");
+class BaseNodeCryptoProvider extends abstract_js_1.BaseCryptoProvider {
+    createAesCtr(key, iv) {
+        const cipher = (0, crypto_1.createCipheriv)(`aes-${key.length * 8}-ctr`, key, iv);
+        const update = (data) => cipher.update(data);
+        return {
+            process: update,
+        };
+    }
+    pbkdf2(password, salt, iterations, keylen = 64, algo = 'sha512') {
+        return new Promise((resolve, reject) => (0, crypto_1.pbkdf2)(password, salt, iterations, keylen, algo, (err, buf) => err !== null ? reject(err) : resolve(buf)));
+    }
+    sha1(data) {
+        return (0, crypto_1.createHash)('sha1').update(data).digest();
+    }
+    sha256(data) {
+        return (0, crypto_1.createHash)('sha256').update(data).digest();
+    }
+    hmacSha256(data, key) {
+        return (0, crypto_1.createHmac)('sha256', key).update(data).digest();
+    }
+    gzip(data, maxSize) {
+        // todo: test if wasm impl is better fit here
+        try {
+            // telegram accepts both zlib and gzip, but zlib is faster and has less overhead, so we use it here
+            return (0, zlib_1.deflateSync)(data, {
+                maxOutputLength: maxSize,
+            });
+            // hot path, avoid additional runtime checks
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        }
+        catch (e) {
+            if (e.code === 'ERR_BUFFER_TOO_LARGE') {
+                return null;
+            }
+            throw e;
+        }
+    }
+    gunzip(data) {
+        return (0, zlib_1.gunzipSync)(data);
+    }
+    randomFill(buf) {
+        (0, crypto_1.randomFillSync)(buf);
+    }
+}
+exports.BaseNodeCryptoProvider = BaseNodeCryptoProvider;
+class NodeCryptoProvider extends BaseNodeCryptoProvider {
+    constructor(params) {
+        super();
+        this.wasmInput = params?.wasmInput;
+    }
+    initialize() {
+        return (0, wasm_1.initAsync)(this.wasmInput);
+    }
+    createAesIge(key, iv) {
+        return {
+            encrypt(data) {
+                return (0, wasm_1.ige256Encrypt)(data, key, iv);
+            },
+            decrypt(data) {
+                return (0, wasm_1.ige256Decrypt)(data, key, iv);
+            },
+        };
+    }
+}
+exports.NodeCryptoProvider = NodeCryptoProvider;
+//# sourceMappingURL=node.js.map

package/cjs/utils/crypto/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../../../src/utils/crypto/node.ts"],"names":[],"mappings":";;;AAAA,iDAAiD;AACjD,mCAAuF;AACvF,+BAA8C;AAE9C,uCAAiF;AAGjF,+CAA+F;AAE/F,MAAsB,sBAAuB,SAAQ,gCAAkB;IACnE,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QAEnE,MAAM,MAAM,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAExD,OAAO;YACH,OAAO,EAAE,MAAM;SAClB,CAAA;IACL,CAAC;IAED,MAAM,CACF,QAAoB,EACpB,IAAgB,EAChB,UAAkB,EAClB,MAAM,GAAG,EAAE,EACX,IAAI,GAAG,QAAQ;QAEf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACnC,IAAA,eAAM,EAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAiB,EAAE,GAAe,EAAE,EAAE,CACpF,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAC5C,CACJ,CAAA;IACL,CAAC;IAED,IAAI,CAAC,IAAgB;QACjB,OAAO,IAAA,mBAAU,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACnD,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACrD,CAAC;IAED,UAAU,CAAC,IAAgB,EAAE,GAAe;QACxC,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IAC1D,CAAC;IAED,IAAI,CAAC,IAAgB,EAAE,OAAe;QAClC,6CAA6C;QAC7C,IAAI;YACA,mGAAmG;YACnG,OAAO,IAAA,kBAAW,EAAC,IAAI,EAAE;gBACrB,eAAe,EAAE,OAAO;aAC3B,CAAC,CAAA;YACF,4CAA4C;YAC5C,8DAA8D;SACjE;QAAC,OAAO,CAAM,EAAE;YACb,IAAI,CAAC,CAAC,IAAI,KAAK,sBAAsB,EAAE;gBACnC,OAAO,IAAI,CAAA;aACd;YAED,MAAM,CAAC,CAAA;SACV;IACL,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,IAAA,iBAAU,EAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAED,UAAU,CAAC,GAAe;QACtB,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAA;IACvB,CAAC;CACJ;AA9DD,wDA8DC;AAED,MAAa,kBAAmB,SAAQ,sBAAsB;IAG1D,YAAY,MAAkC;QAC1C,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,CAAA;IACtC,CAAC;IAED,UAAU;QACN,OAAO,IAAA,gBAAS,EAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACpC,CAAC;IAED,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,OAAO;YACH,OAAO,CAAC,IAAgB;gBACpB,OAAO,IAAA,oBAAa,EAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YACvC,CAAC;YACD,OAAO,CAAC,IAAgB;gBACpB,OAAO,IAAA,oBAAa,EAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YACvC,CAAC;SACJ,CAAA;IACL,CAAC;CACJ;AAtBD,gDAsBC","sourcesContent":["// eslint-disable-next-line no-restricted-imports\nimport { createCipheriv, createHash, createHmac, pbkdf2, randomFillSync } from 'crypto'\nimport { deflateSync, gunzipSync } from 'zlib'\n\nimport { ige256Decrypt, ige256Encrypt, initAsync, InitInput } from '@mtcute/wasm'\n\nimport { MaybeAsync } from '../../types/index.js'\nimport { BaseCryptoProvider, IAesCtr, ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\nexport abstract class BaseNodeCryptoProvider extends BaseCryptoProvider {\n    createAesCtr(key: Uint8Array, iv: Uint8Array): IAesCtr {\n        const cipher = createCipheriv(`aes-${key.length * 8}-ctr`, key, iv)\n\n        const update = (data: Uint8Array) => cipher.update(data)\n\n        return {\n            process: update,\n        }\n    }\n\n    pbkdf2(\n        password: Uint8Array,\n        salt: Uint8Array,\n        iterations: number,\n        keylen = 64,\n        algo = 'sha512',\n    ): MaybeAsync<Uint8Array> {\n        return new Promise((resolve, reject) =>\n            pbkdf2(password, salt, iterations, keylen, algo, (err: Error | null, buf: Uint8Array) =>\n                err !== null ? reject(err) : resolve(buf),\n            ),\n        )\n    }\n\n    sha1(data: Uint8Array): Uint8Array {\n        return createHash('sha1').update(data).digest()\n    }\n\n    sha256(data: Uint8Array): Uint8Array {\n        return createHash('sha256').update(data).digest()\n    }\n\n    hmacSha256(data: Uint8Array, key: Uint8Array): Uint8Array {\n        return createHmac('sha256', key).update(data).digest()\n    }\n\n    gzip(data: Uint8Array, maxSize: number): Uint8Array | null {\n        // todo: test if wasm impl is better fit here\n        try {\n            // telegram accepts both zlib and gzip, but zlib is faster and has less overhead, so we use it here\n            return deflateSync(data, {\n                maxOutputLength: maxSize,\n            })\n            // hot path, avoid additional runtime checks\n            // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        } catch (e: any) {\n            if (e.code === 'ERR_BUFFER_TOO_LARGE') {\n                return null\n            }\n\n            throw e\n        }\n    }\n\n    gunzip(data: Uint8Array): Uint8Array {\n        return gunzipSync(data)\n    }\n\n    randomFill(buf: Uint8Array) {\n        randomFillSync(buf)\n    }\n}\n\nexport class NodeCryptoProvider extends BaseNodeCryptoProvider implements ICryptoProvider {\n    private wasmInput?: InitInput\n\n    constructor(params?: { wasmInput?: InitInput }) {\n        super()\n        this.wasmInput = params?.wasmInput\n    }\n\n    initialize(): Promise<void> {\n        return initAsync(this.wasmInput)\n    }\n\n    createAesIge(key: Uint8Array, iv: Uint8Array): IEncryptionScheme {\n        return {\n            encrypt(data: Uint8Array): Uint8Array {\n                return ige256Encrypt(data, key, iv)\n            },\n            decrypt(data: Uint8Array): Uint8Array {\n                return ige256Decrypt(data, key, iv)\n            },\n        }\n    }\n}\n"]}

package/cjs/utils/crypto/node.test.d.ts

@@ -0,0 +1 @@
+export {};

package/cjs/utils/crypto/node.test.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const test_1 = require("@mtcute/test");
+const node_js_1 = require("./node.js");
+(0, vitest_1.describe)('NodeCryptoProvider', () => {
+    if (typeof process === 'undefined') {
+        console.warn('Skipping NodeCryptoProvider tests');
+        return;
+    }
+    (0, test_1.testCryptoProvider)(new node_js_1.NodeCryptoProvider());
+});
+//# sourceMappingURL=node.test.js.map

package/cjs/utils/crypto/node.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.test.js","sourceRoot":"","sources":["../../../../src/utils/crypto/node.test.ts"],"names":[],"mappings":";;AAAA,mCAAiC;AAEjC,uCAAiD;AAEjD,uCAA8C;AAE9C,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAChC,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE;QAChC,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAA;QAEjD,OAAM;KACT;IAED,IAAA,yBAAkB,EAAC,IAAI,4BAAkB,EAAE,CAAC,CAAA;AAChD,CAAC,CAAC,CAAA","sourcesContent":["import { describe } from 'vitest'\n\nimport { testCryptoProvider } from '@mtcute/test'\n\nimport { NodeCryptoProvider } from './node.js'\n\ndescribe('NodeCryptoProvider', () => {\n    if (typeof process === 'undefined') {\n        console.warn('Skipping NodeCryptoProvider tests')\n\n        return\n    }\n\n    testCryptoProvider(new NodeCryptoProvider())\n})\n"]}

package/cjs/utils/crypto/password.js

@@ -1,10 +1,6 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.computeSrpParams = exports.computeNewPasswordHash = exports.computePasswordHash = void 0;
-const big_integer_1 = __importDefault(require("big-integer"));
 const tl_runtime_1 = require("@mtcute/tl-runtime");
 const errors_js_1 = require("../../types/errors.js");
 const bigint_utils_js_1 = require("../bigint-utils.js");
@@ -22,8 +18,8 @@ const utils_js_1 = require("./utils.js");
  */
 async function computePasswordHash(crypto, password, salt1, salt2) {
     const SH = (data, salt) => crypto.sha256((0, buffer_utils_js_1.concatBuffers)([salt, data, salt]));
-    const PH1 = async (pwd, salt1, salt2) => SH(await SH(pwd, salt1), salt2);
-    return SH(await crypto.pbkdf2(await PH1(password, salt1, salt2), salt1, 100000), salt2);
+    const PH1 = (pwd, salt1, salt2) => SH(SH(pwd, salt1), salt2);
+    return SH(await crypto.pbkdf2(PH1(password, salt1, salt2), salt1, 100000), salt2);
 }
 exports.computePasswordHash = computePasswordHash;
 /**
@@ -34,12 +30,15 @@ exports.computePasswordHash = computePasswordHash;
  * @param password  Password
  */
 async function computeNewPasswordHash(crypto, algo, password) {
-    algo.salt1 = (0, buffer_utils_js_1.concatBuffers)([algo.salt1, (0, buffer_utils_js_1.randomBytes)(32)]);
+    const salt1 = new Uint8Array(algo.salt1.length + 32);
+    salt1.set(algo.salt1);
+    crypto.randomFill(salt1.subarray(algo.salt1.length));
+    algo.salt1 = salt1;
     const _x = await computePasswordHash(crypto, (0, tl_runtime_1.utf8EncodeToBuffer)(password), algo.salt1, algo.salt2);
-    const g = (0, big_integer_1.default)(algo.g);
+    const g = BigInt(algo.g);
     const p = (0, bigint_utils_js_1.bufferToBigInt)(algo.p);
     const x = (0, bigint_utils_js_1.bufferToBigInt)(_x);
-    return (0, bigint_utils_js_1.bigIntToBuffer)(g.modPow(x, p), 256);
+    return (0, bigint_utils_js_1.bigIntToBuffer)((0, bigint_utils_js_1.bigIntModPow)(g, x, p), 256);
 }
 exports.computeNewPasswordHash = computeNewPasswordHash;
 /**
@@ -63,38 +62,28 @@ async function computeSrpParams(crypto, request, password) {
     if (!request.srpId) {
         throw new errors_js_1.MtSecurityError('SRP_ID is not present in the request');
     }
-    const g = (0, big_integer_1.default)(algo.g);
+    const g = BigInt(algo.g);
     const _g = (0, bigint_utils_js_1.bigIntToBuffer)(g, 256);
     const p = (0, bigint_utils_js_1.bufferToBigInt)(algo.p);
     const gB = (0, bigint_utils_js_1.bufferToBigInt)(request.srpB);
-    const a = (0, bigint_utils_js_1.bufferToBigInt)((0, buffer_utils_js_1.randomBytes)(256));
-    const gA = g.modPow(a, p);
+    const a = (0, bigint_utils_js_1.bufferToBigInt)(crypto.randomBytes(256));
+    const gA = (0, bigint_utils_js_1.bigIntModPow)(g, a, p);
     const _gA = (0, bigint_utils_js_1.bigIntToBuffer)(gA, 256);
     const H = (data) => crypto.sha256(data);
-    const [_k, _u, _x] = await Promise.all([
-        // maybe, just maybe this will be a bit faster with some crypto providers
-        /* k = */ crypto.sha256((0, buffer_utils_js_1.concatBuffers)([algo.p, _g])),
-        /* u = */ crypto.sha256((0, buffer_utils_js_1.concatBuffers)([_gA, request.srpB])),
-        /* x = */ computePasswordHash(crypto, (0, tl_runtime_1.utf8EncodeToBuffer)(password), algo.salt1, algo.salt2),
-    ]);
+    const _k = crypto.sha256((0, buffer_utils_js_1.concatBuffers)([algo.p, _g]));
+    const _u = crypto.sha256((0, buffer_utils_js_1.concatBuffers)([_gA, request.srpB]));
+    const _x = await computePasswordHash(crypto, (0, tl_runtime_1.utf8EncodeToBuffer)(password), algo.salt1, algo.salt2);
     const k = (0, bigint_utils_js_1.bufferToBigInt)(_k);
     const u = (0, bigint_utils_js_1.bufferToBigInt)(_u);
     const x = (0, bigint_utils_js_1.bufferToBigInt)(_x);
-    const v = g.modPow(x, p);
-    const kV = k.multiply(v).mod(p);
-    let t = gB.minus(kV).mod(p);
-    if (t.isNegative())
-        t = t.plus(p);
-    const sA = t.modPow(a.plus(u.multiply(x)), p);
-    const _kA = await H((0, bigint_utils_js_1.bigIntToBuffer)(sA, 256));
-    const _M1 = await H((0, buffer_utils_js_1.concatBuffers)([
-        (0, utils_js_1.xorBuffer)(await H(algo.p), await H(_g)),
-        await H(algo.salt1),
-        await H(algo.salt2),
-        _gA,
-        request.srpB,
-        _kA,
-    ]));
+    const v = (0, bigint_utils_js_1.bigIntModPow)(g, x, p);
+    const kV = (k * v) % p;
+    let t = gB - kV;
+    if (t < 0n)
+        t += p;
+    const sA = (0, bigint_utils_js_1.bigIntModPow)(t, a + u * x, p);
+    const _kA = H((0, bigint_utils_js_1.bigIntToBuffer)(sA, 256));
+    const _M1 = H((0, buffer_utils_js_1.concatBuffers)([(0, utils_js_1.xorBuffer)(H(algo.p), H(_g)), H(algo.salt1), H(algo.salt2), _gA, request.srpB, _kA]));
     return {
         _: 'inputCheckPasswordSRP',
         srpId: request.srpId,