@mtcute/core 0.1.0

package/cjs/utils/crypto/factorization.js

@@ -0,0 +1,69 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.factorizePQSync = void 0;
+const big_integer_1 = __importDefault(require("big-integer"));
+const bigint_utils_js_1 = require("../bigint-utils.js");
+/**
+ * Factorize `p*q` to `p` and `q` synchronously using Brent-Pollard rho algorithm
+ * @param pq
+ */
+function factorizePQSync(pq) {
+    const pq_ = (0, bigint_utils_js_1.bufferToBigInt)(pq);
+    const n = PollardRhoBrent(pq_);
+    const m = pq_.divide(n);
+    let p;
+    let q;
+    if (n.lt(m)) {
+        p = n;
+        q = m;
+    }
+    else {
+        p = m;
+        q = n;
+    }
+    return [(0, bigint_utils_js_1.bigIntToBuffer)(p), (0, bigint_utils_js_1.bigIntToBuffer)(q)];
+}
+exports.factorizePQSync = factorizePQSync;
+function PollardRhoBrent(n) {
+    if (n.isEven())
+        return big_integer_1.default[2];
+    let y = (0, bigint_utils_js_1.randomBigIntInRange)(n.minus(1));
+    const c = (0, bigint_utils_js_1.randomBigIntInRange)(n.minus(1));
+    const m = (0, bigint_utils_js_1.randomBigIntInRange)(n.minus(1));
+    let g = big_integer_1.default.one;
+    let r = big_integer_1.default.one;
+    let q = big_integer_1.default.one;
+    let ys;
+    let x;
+    while (g.eq(big_integer_1.default.one)) {
+        x = y;
+        for (let i = 0; r.geq(i); i++)
+            y = y.multiply(y).mod(n).plus(c).mod(n);
+        // y = ((y * y) % n + c) % n
+        let k = big_integer_1.default.zero;
+        while (k.lt(r) && g.eq(1)) {
+            ys = y;
+            for (let i = big_integer_1.default.zero; i.lt(big_integer_1.default.min(m, r.minus(k))); i = i.plus(big_integer_1.default.one)) {
+                y = y.multiply(y).mod(n).plus(c).mod(n);
+                q = q.multiply(x.minus(y).abs()).mod(n);
+                // y = (y * y % n + c) % n
+                // q = q * abs(x - y) % n
+            }
+            g = big_integer_1.default.gcd(q, n);
+            k = k.plus(m);
+        }
+        r = r.multiply(big_integer_1.default[2]);
+    }
+    if (g.eq(n)) {
+        do {
+            ys = ys.multiply(ys).mod(n).plus(c).mod(n);
+            // ys = ((ys * ys) % n + c) % n
+            g = big_integer_1.default.gcd(x.minus(ys), n);
+        } while (g.leq(big_integer_1.default.one));
+    }
+    return g;
+}
+//# sourceMappingURL=factorization.js.map

package/cjs/utils/crypto/factorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factorization.js","sourceRoot":"","sources":["../../../../src/utils/crypto/factorization.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgD;AAEhD,wDAAwF;AAExF;;;GAGG;AACH,SAAgB,eAAe,CAAC,EAAc;IAC1C,MAAM,GAAG,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAE9B,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAEvB,IAAI,CAAC,CAAA;IACL,IAAI,CAAC,CAAA;IAEL,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QACT,CAAC,GAAG,CAAC,CAAA;QACL,CAAC,GAAG,CAAC,CAAA;KACR;SAAM;QACH,CAAC,GAAG,CAAC,CAAA;QACL,CAAC,GAAG,CAAC,CAAA;KACR;IAED,OAAO,CAAC,IAAA,gCAAc,EAAC,CAAC,CAAC,EAAE,IAAA,gCAAc,EAAC,CAAC,CAAC,CAAC,CAAA;AACjD,CAAC;AAlBD,0CAkBC;AAED,SAAS,eAAe,CAAC,CAAa;IAClC,IAAI,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,qBAAM,CAAC,CAAC,CAAC,CAAA;IAEhC,IAAI,CAAC,GAAG,IAAA,qCAAmB,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACvC,MAAM,CAAC,GAAG,IAAA,qCAAmB,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACzC,MAAM,CAAC,GAAG,IAAA,qCAAmB,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACzC,IAAI,CAAC,GAAG,qBAAM,CAAC,GAAG,CAAA;IAClB,IAAI,CAAC,GAAG,qBAAM,CAAC,GAAG,CAAA;IAClB,IAAI,CAAC,GAAG,qBAAM,CAAC,GAAG,CAAA;IAElB,IAAI,EAAc,CAAA;IAClB,IAAI,CAAa,CAAA;IAEjB,OAAO,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,GAAG,CAAC,EAAE;QACrB,CAAC,GAAG,CAAC,CAAA;QACL,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACtE,4BAA4B;QAE5B,IAAI,CAAC,GAAG,qBAAM,CAAC,IAAI,CAAA;QAEnB,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YACvB,EAAE,GAAG,CAAC,CAAA;YAEN,KAAK,IAAI,CAAC,GAAG,qBAAM,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAM,CAAC,GAAG,CAAC,EAAE;gBAC/E,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACvC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;gBACvC,0BAA0B;gBAC1B,yBAAyB;aAC5B;YAED,CAAC,GAAG,qBAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACpB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;SAChB;QAED,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,qBAAM,CAAC,CAAC,CAAC,CAAC,CAAA;KAC5B;IAED,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QACT,GAAG;YACC,EAAE,GAAG,EAAG,CAAC,QAAQ,CAAC,EAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YAC5C,+BAA+B;YAE/B,CAAC,GAAG,qBAAM,CAAC,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;SAClC,QAAQ,CAAC,CAAC,GAAG,CAAC,qBAAM,CAAC,GAAG,CAAC,EAAC;KAC9B;IAED,OAAO,CAAC,CAAA;AACZ,CAAC","sourcesContent":["import bigInt, { BigInteger } from 'big-integer'\n\nimport { bigIntToBuffer, bufferToBigInt, randomBigIntInRange } from '../bigint-utils.js'\n\n/**\n * Factorize `p*q` to `p` and `q` synchronously using Brent-Pollard rho algorithm\n * @param pq\n */\nexport function factorizePQSync(pq: Uint8Array): [Uint8Array, Uint8Array] {\n    const pq_ = bufferToBigInt(pq)\n\n    const n = PollardRhoBrent(pq_)\n    const m = pq_.divide(n)\n\n    let p\n    let q\n\n    if (n.lt(m)) {\n        p = n\n        q = m\n    } else {\n        p = m\n        q = n\n    }\n\n    return [bigIntToBuffer(p), bigIntToBuffer(q)]\n}\n\nfunction PollardRhoBrent(n: BigInteger): BigInteger {\n    if (n.isEven()) return bigInt[2]\n\n    let y = randomBigIntInRange(n.minus(1))\n    const c = randomBigIntInRange(n.minus(1))\n    const m = randomBigIntInRange(n.minus(1))\n    let g = bigInt.one\n    let r = bigInt.one\n    let q = bigInt.one\n\n    let ys: BigInteger\n    let x: BigInteger\n\n    while (g.eq(bigInt.one)) {\n        x = y\n        for (let i = 0; r.geq(i); i++) y = y.multiply(y).mod(n).plus(c).mod(n)\n        // y = ((y * y) % n + c) % n\n\n        let k = bigInt.zero\n\n        while (k.lt(r) && g.eq(1)) {\n            ys = y\n\n            for (let i = bigInt.zero; i.lt(bigInt.min(m, r.minus(k))); i = i.plus(bigInt.one)) {\n                y = y.multiply(y).mod(n).plus(c).mod(n)\n                q = q.multiply(x.minus(y).abs()).mod(n)\n                // y = (y * y % n + c) % n\n                // q = q * abs(x - y) % n\n            }\n\n            g = bigInt.gcd(q, n)\n            k = k.plus(m)\n        }\n\n        r = r.multiply(bigInt[2])\n    }\n\n    if (g.eq(n)) {\n        do {\n            ys = ys!.multiply(ys!).mod(n).plus(c).mod(n)\n            // ys = ((ys * ys) % n + c) % n\n\n            g = bigInt.gcd(x!.minus(ys), n)\n        } while (g.leq(bigInt.one))\n    }\n\n    return g\n}\n"]}

package/cjs/utils/crypto/index.d.ts

@@ -0,0 +1,5 @@
+export * from './abstract.js';
+export * from './keys.js';
+export * from './password.js';
+import { CryptoProviderFactory } from './abstract.js';
+export declare const defaultCryptoProviderFactory: CryptoProviderFactory;

package/cjs/utils/crypto/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultCryptoProviderFactory = void 0;
+__exportStar(require("./abstract.js"), exports);
+__exportStar(require("./keys.js"), exports);
+__exportStar(require("./password.js"), exports);
+const crypto_js_1 = require("../platform/crypto.js");
+exports.defaultCryptoProviderFactory = crypto_js_1._defaultCryptoProviderFactory;
+//# sourceMappingURL=index.js.map

package/cjs/utils/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/utils/crypto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,gDAA6B;AAC7B,4CAAyB;AACzB,gDAA6B;AAE7B,qDAAqE;AAGxD,QAAA,4BAA4B,GAA0B,yCAA6B,CAAA","sourcesContent":["export * from './abstract.js'\nexport * from './keys.js'\nexport * from './password.js'\n\nimport { _defaultCryptoProviderFactory } from '../platform/crypto.js'\nimport { CryptoProviderFactory } from './abstract.js'\n\nexport const defaultCryptoProviderFactory: CryptoProviderFactory = _defaultCryptoProviderFactory\n"]}

package/cjs/utils/crypto/keys.d.ts

@@ -0,0 +1,27 @@
+import Long from 'long';
+import { TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js';
+import { ICryptoProvider } from './abstract.js';
+/**
+ * Parse PEM-encoded RSA public key information into modulus and exponent
+ * and compute its fingerprint as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param key  PEM-encoded RSA public key
+ * @param old  Whether this is an "old" key
+ */
+export declare function parsePublicKey(crypto: ICryptoProvider, key: string, old?: boolean): Promise<TlPublicKey>;
+/**
+ * Add public key to the global index.
+ *
+ * @param crypto  Crypto provider
+ * @param key  PEM-encoded RSA public key
+ * @param old  Whether this is an "old" key
+ */
+export declare function addPublicKey(crypto: ICryptoProvider, key: string, old?: boolean): Promise<void>;
+/**
+ * Get public key by its fingerprint.
+ *
+ * @param fingerprints  Fingerprints to match. The first one to match is returned.
+ * @param allowOld  Whether to allow "old" keys
+ */
+export declare function findKeyByFingerprints(fingerprints: (string | Long)[], allowOld?: boolean): TlPublicKey | null;

package/cjs/utils/crypto/keys.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findKeyByFingerprints = exports.addPublicKey = exports.parsePublicKey = void 0;
+const rsa_keys_js_1 = require("@mtcute/tl/binary/rsa-keys.js");
+const tl_runtime_1 = require("@mtcute/tl-runtime");
+const asn1_parser_js_1 = require("../binary/asn1-parser.js");
+/**
+ * Parse PEM-encoded RSA public key information into modulus and exponent
+ * and compute its fingerprint as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param key  PEM-encoded RSA public key
+ * @param old  Whether this is an "old" key
+ */
+async function parsePublicKey(crypto, key, old = false) {
+    const asn1 = (0, asn1_parser_js_1.parseAsn1)((0, asn1_parser_js_1.parsePemContents)(key));
+    const modulus = asn1.children?.[0].value;
+    const exponent = asn1.children?.[1].value;
+    if (!modulus || !exponent)
+        throw new Error('Invalid public key');
+    const writer = tl_runtime_1.TlBinaryWriter.manual(512);
+    // they are actually smaller, about 270 bytes, but idc :D
+    writer.bytes(modulus);
+    writer.bytes(exponent);
+    const data = writer.result();
+    const sha = await crypto.sha1(data);
+    const fp = (0, tl_runtime_1.hexEncode)(sha.slice(-8).reverse());
+    return {
+        modulus: (0, tl_runtime_1.hexEncode)(modulus),
+        exponent: (0, tl_runtime_1.hexEncode)(exponent),
+        fingerprint: fp,
+        old,
+    };
+}
+exports.parsePublicKey = parsePublicKey;
+/**
+ * Add public key to the global index.
+ *
+ * @param crypto  Crypto provider
+ * @param key  PEM-encoded RSA public key
+ * @param old  Whether this is an "old" key
+ */
+async function addPublicKey(crypto, key, old = false) {
+    const parsed = await parsePublicKey(crypto, key, old);
+    rsa_keys_js_1.__publicKeyIndex[parsed.fingerprint] = parsed;
+}
+exports.addPublicKey = addPublicKey;
+/**
+ * Get public key by its fingerprint.
+ *
+ * @param fingerprints  Fingerprints to match. The first one to match is returned.
+ * @param allowOld  Whether to allow "old" keys
+ */
+function findKeyByFingerprints(fingerprints, allowOld = false) {
+    for (let fp of fingerprints) {
+        if (typeof fp !== 'string') {
+            fp = fp.toUnsigned().toString(16);
+        }
+        if (fp in rsa_keys_js_1.__publicKeyIndex) {
+            if (rsa_keys_js_1.__publicKeyIndex[fp].old && !allowOld)
+                continue;
+            return rsa_keys_js_1.__publicKeyIndex[fp];
+        }
+    }
+    if (!allowOld)
+        return findKeyByFingerprints(fingerprints, true);
+    return null;
+}
+exports.findKeyByFingerprints = findKeyByFingerprints;
+//# sourceMappingURL=keys.js.map

package/cjs/utils/crypto/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../src/utils/crypto/keys.ts"],"names":[],"mappings":";;;AAEA,+DAA0F;AAC1F,mDAA8D;AAE9D,6DAAsE;AAGtE;;;;;;;GAOG;AACI,KAAK,UAAU,cAAc,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAClF,MAAM,IAAI,GAAG,IAAA,0BAAS,EAAC,IAAA,iCAAgB,EAAC,GAAG,CAAC,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACzC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAEhE,MAAM,MAAM,GAAG,2BAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACzC,yDAAyD;IACzD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,EAAE,GAAG,IAAA,sBAAS,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAE7C,OAAO;QACH,OAAO,EAAE,IAAA,sBAAS,EAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,IAAA,sBAAS,EAAC,QAAQ,CAAC;QAC7B,WAAW,EAAE,EAAE;QACf,GAAG;KACN,CAAA;AACL,CAAC;AArBD,wCAqBC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,YAAY,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAChF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,8BAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,CAAA;AAC1C,CAAC;AAHD,oCAGC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,YAA+B,EAAE,QAAQ,GAAG,KAAK;IACnF,KAAK,IAAI,EAAE,IAAI,YAAY,EAAE;QACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE;YACxB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;SACpC;QACD,IAAI,EAAE,IAAI,8BAAS,EAAE;YACjB,IAAI,8BAAS,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YAE5C,OAAO,8BAAS,CAAC,EAAE,CAAC,CAAA;SACvB;KACJ;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,qBAAqB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IAE/D,OAAO,IAAI,CAAA;AACf,CAAC;AAdD,sDAcC","sourcesContent":["import Long from 'long'\n\nimport { __publicKeyIndex as keysIndex, TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js'\nimport { hexEncode, TlBinaryWriter } from '@mtcute/tl-runtime'\n\nimport { parseAsn1, parsePemContents } from '../binary/asn1-parser.js'\nimport { ICryptoProvider } from './abstract.js'\n\n/**\n * Parse PEM-encoded RSA public key information into modulus and exponent\n * and compute its fingerprint as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport async function parsePublicKey(crypto: ICryptoProvider, key: string, old = false): Promise<TlPublicKey> {\n    const asn1 = parseAsn1(parsePemContents(key))\n    const modulus = asn1.children?.[0].value\n    const exponent = asn1.children?.[1].value\n    if (!modulus || !exponent) throw new Error('Invalid public key')\n\n    const writer = TlBinaryWriter.manual(512)\n    // they are actually smaller, about 270 bytes, but idc :D\n    writer.bytes(modulus)\n    writer.bytes(exponent)\n\n    const data = writer.result()\n    const sha = await crypto.sha1(data)\n    const fp = hexEncode(sha.slice(-8).reverse())\n\n    return {\n        modulus: hexEncode(modulus),\n        exponent: hexEncode(exponent),\n        fingerprint: fp,\n        old,\n    }\n}\n\n/**\n * Add public key to the global index.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport async function addPublicKey(crypto: ICryptoProvider, key: string, old = false): Promise<void> {\n    const parsed = await parsePublicKey(crypto, key, old)\n    keysIndex[parsed.fingerprint] = parsed\n}\n\n/**\n * Get public key by its fingerprint.\n *\n * @param fingerprints  Fingerprints to match. The first one to match is returned.\n * @param allowOld  Whether to allow \"old\" keys\n */\nexport function findKeyByFingerprints(fingerprints: (string | Long)[], allowOld = false): TlPublicKey | null {\n    for (let fp of fingerprints) {\n        if (typeof fp !== 'string') {\n            fp = fp.toUnsigned().toString(16)\n        }\n        if (fp in keysIndex) {\n            if (keysIndex[fp].old && !allowOld) continue\n\n            return keysIndex[fp]\n        }\n    }\n    if (!allowOld) return findKeyByFingerprints(fingerprints, true)\n\n    return null\n}\n"]}

package/cjs/utils/crypto/miller-rabin.d.ts

@@ -0,0 +1,2 @@
+import { BigInteger } from 'big-integer';
+export declare function millerRabin(n: BigInteger, rounds?: number): boolean;

package/cjs/utils/crypto/miller-rabin.js

@@ -0,0 +1,44 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.millerRabin = void 0;
+const big_integer_1 = __importDefault(require("big-integer"));
+const bigint_utils_js_1 = require("../bigint-utils.js");
+function millerRabin(n, rounds = 20) {
+    // small numbers: 0, 1 are not prime, 2, 3 are prime
+    if (n.lt(big_integer_1.default[4]))
+        return n.gt(big_integer_1.default[1]);
+    if (n.isEven() || n.isNegative())
+        return false;
+    const nBits = n.bitLength().toJSNumber();
+    const nSub = n.minus(1);
+    const r = (0, bigint_utils_js_1.twoMultiplicity)(nSub);
+    const d = nSub.shiftRight(r);
+    for (let i = 0; i < rounds; i++) {
+        let base;
+        do {
+            base = (0, bigint_utils_js_1.randomBigIntBits)(nBits);
+        } while (base.leq(big_integer_1.default.one) || base.geq(nSub));
+        let x = base.modPow(d, n);
+        if (x.eq(big_integer_1.default.one) || x.eq(nSub))
+            continue;
+        let i = big_integer_1.default.zero;
+        let y;
+        while (i.lt(r)) {
+            y = x.modPow(big_integer_1.default[2], n);
+            if (x.eq(big_integer_1.default.one))
+                return false;
+            if (x.eq(nSub))
+                break;
+            i = i.plus(big_integer_1.default.one);
+            x = y;
+        }
+        if (i.eq(r))
+            return false;
+    }
+    return true;
+}
+exports.millerRabin = millerRabin;
+//# sourceMappingURL=miller-rabin.js.map

package/cjs/utils/crypto/miller-rabin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"miller-rabin.js","sourceRoot":"","sources":["../../../../src/utils/crypto/miller-rabin.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgD;AAEhD,wDAAsE;AAEtE,SAAgB,WAAW,CAAC,CAAa,EAAE,MAAM,GAAG,EAAE;IAClD,oDAAoD;IACpD,IAAI,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE;QAAE,OAAO,KAAK,CAAA;IAE9C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,CAAA;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAEvB,MAAM,CAAC,GAAG,IAAA,iCAAe,EAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAA;QAER,GAAG;YACC,IAAI,GAAG,IAAA,kCAAgB,EAAC,KAAK,CAAC,CAAA;SACjC,QAAQ,IAAI,CAAC,GAAG,CAAC,qBAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAC;QAEhD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,SAAQ;QAE5C,IAAI,CAAC,GAAG,qBAAM,CAAC,IAAI,CAAA;QACnB,IAAI,CAAa,CAAA;QAEjB,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YACZ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,qBAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAE1B,IAAI,CAAC,CAAC,EAAE,CAAC,qBAAM,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YAClC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,MAAK;YACrB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAM,CAAC,GAAG,CAAC,CAAA;YAEtB,CAAC,GAAG,CAAC,CAAA;SACR;QAED,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;KAC5B;IAED,OAAO,IAAI,CAAA;AACf,CAAC;AAtCD,kCAsCC","sourcesContent":["import bigInt, { BigInteger } from 'big-integer'\n\nimport { randomBigIntBits, twoMultiplicity } from '../bigint-utils.js'\n\nexport function millerRabin(n: BigInteger, rounds = 20): boolean {\n    // small numbers: 0, 1 are not prime, 2, 3 are prime\n    if (n.lt(bigInt[4])) return n.gt(bigInt[1])\n    if (n.isEven() || n.isNegative()) return false\n\n    const nBits = n.bitLength().toJSNumber()\n    const nSub = n.minus(1)\n\n    const r = twoMultiplicity(nSub)\n    const d = nSub.shiftRight(r)\n\n    for (let i = 0; i < rounds; i++) {\n        let base\n\n        do {\n            base = randomBigIntBits(nBits)\n        } while (base.leq(bigInt.one) || base.geq(nSub))\n\n        let x = base.modPow(d, n)\n        if (x.eq(bigInt.one) || x.eq(nSub)) continue\n\n        let i = bigInt.zero\n        let y: BigInteger\n\n        while (i.lt(r)) {\n            y = x.modPow(bigInt[2], n)\n\n            if (x.eq(bigInt.one)) return false\n            if (x.eq(nSub)) break\n            i = i.plus(bigInt.one)\n\n            x = y\n        }\n\n        if (i.eq(r)) return false\n    }\n\n    return true\n}\n"]}

package/cjs/utils/crypto/mtproto.d.ts

@@ -0,0 +1,31 @@
+import { ICryptoProvider, IEncryptionScheme } from './abstract.js';
+/**
+ * Generate AES key and IV from nonces as defined by MTProto.
+ * Used in authorization flow.
+ *
+ * @param crypto  Crypto provider
+ * @param serverNonce  Server nonce
+ * @param newNonce  New nonce
+ * @returns  Tuple: `[key, iv]`
+ */
+export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serverNonce: Uint8Array, newNonce: Uint8Array): Promise<[Uint8Array, Uint8Array]>;
+/**
+ * Create AES IGE instance for message (given auth key and message key)
+ * as defined by MTProto v2.
+ *
+ * @param crypto  Crypto provider
+ * @param authKey  Authorization key
+ * @param messageKey  Message key
+ * @param client  Whether this is a client to server message
+ */
+export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): Promise<IEncryptionScheme>;
+/**
+ * Create AES IGE instance for file (given auth key and message key)
+ * as defined by MTProto v1.
+ *
+ * @param crypto  Crypto provider
+ * @param authKey  Authorization key
+ * @param messageKey  Message key
+ * @param client  Whether this is a client to server message
+ */
+export declare function createAesIgeForMessageOld(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): Promise<IEncryptionScheme>;

package/cjs/utils/crypto/mtproto.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAesIgeForMessageOld = exports.createAesIgeForMessage = exports.generateKeyAndIvFromNonce = void 0;
+const buffer_utils_js_1 = require("../buffer-utils.js");
+/**
+ * Generate AES key and IV from nonces as defined by MTProto.
+ * Used in authorization flow.
+ *
+ * @param crypto  Crypto provider
+ * @param serverNonce  Server nonce
+ * @param newNonce  New nonce
+ * @returns  Tuple: `[key, iv]`
+ */
+async function generateKeyAndIvFromNonce(crypto, serverNonce, newNonce) {
+    const hash1 = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, serverNonce]));
+    const hash2 = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([serverNonce, newNonce]));
+    const hash3 = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([newNonce, newNonce]));
+    const key = (0, buffer_utils_js_1.concatBuffers)([hash1, hash2.subarray(0, 12)]);
+    const iv = (0, buffer_utils_js_1.concatBuffers)([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)]);
+    return [key, iv];
+}
+exports.generateKeyAndIvFromNonce = generateKeyAndIvFromNonce;
+/**
+ * Create AES IGE instance for message (given auth key and message key)
+ * as defined by MTProto v2.
+ *
+ * @param crypto  Crypto provider
+ * @param authKey  Authorization key
+ * @param messageKey  Message key
+ * @param client  Whether this is a client to server message
+ */
+async function createAesIgeForMessage(crypto, authKey, messageKey, client) {
+    const x = client ? 0 : 8;
+    const sha256a = await crypto.sha256((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(x, 36 + x)]));
+    const sha256b = await crypto.sha256((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(40 + x, 76 + x), messageKey]));
+    const key = (0, buffer_utils_js_1.concatBuffers)([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)]);
+    const iv = (0, buffer_utils_js_1.concatBuffers)([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)]);
+    return crypto.createAesIge(key, iv);
+}
+exports.createAesIgeForMessage = createAesIgeForMessage;
+/**
+ * Create AES IGE instance for file (given auth key and message key)
+ * as defined by MTProto v1.
+ *
+ * @param crypto  Crypto provider
+ * @param authKey  Authorization key
+ * @param messageKey  Message key
+ * @param client  Whether this is a client to server message
+ */
+async function createAesIgeForMessageOld(crypto, authKey, messageKey, client) {
+    const x = client ? 0 : 8;
+    const sha1a = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(x, 32 + x)]));
+    const sha1b = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]));
+    const sha1c = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([authKey.subarray(64 + x, 96 + x), messageKey]));
+    const sha1d = await crypto.sha1((0, buffer_utils_js_1.concatBuffers)([messageKey, authKey.subarray(96 + x, 128 + x)]));
+    const key = (0, buffer_utils_js_1.concatBuffers)([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)]);
+    const iv = (0, buffer_utils_js_1.concatBuffers)([
+        sha1a.subarray(8, 20),
+        sha1b.subarray(0, 8),
+        sha1c.subarray(16, 20),
+        sha1d.subarray(0, 8),
+    ]);
+    return crypto.createAesIge(key, iv);
+}
+exports.createAesIgeForMessageOld = createAesIgeForMessageOld;
+//# sourceMappingURL=mtproto.js.map

package/cjs/utils/crypto/mtproto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mtproto.js","sourceRoot":"","sources":["../../../../src/utils/crypto/mtproto.ts"],"names":[],"mappings":";;;AAAA,wDAAkD;AAGlD;;;;;;;;GAQG;AACI,KAAK,UAAU,yBAAyB,CAC3C,MAAuB,EACvB,WAAuB,EACvB,QAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAEpE,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAElF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACpB,CAAC;AAbD,8DAaC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7F,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAElG,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACtG,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAErG,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAdD,wDAcC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,yBAAyB,CAC3C,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACzF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAC9F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAA,+BAAa,EAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/F,MAAM,GAAG,GAAG,IAAA,+BAAa,EAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/F,MAAM,EAAE,GAAG,IAAA,+BAAa,EAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;KACvB,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAvBD,8DAuBC","sourcesContent":["import { concatBuffers } from '../buffer-utils.js'\nimport { ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\n/**\n * Generate AES key and IV from nonces as defined by MTProto.\n * Used in authorization flow.\n *\n * @param crypto  Crypto provider\n * @param serverNonce  Server nonce\n * @param newNonce  New nonce\n * @returns  Tuple: `[key, iv]`\n */\nexport async function generateKeyAndIvFromNonce(\n    crypto: ICryptoProvider,\n    serverNonce: Uint8Array,\n    newNonce: Uint8Array,\n): Promise<[Uint8Array, Uint8Array]> {\n    const hash1 = await crypto.sha1(concatBuffers([newNonce, serverNonce]))\n    const hash2 = await crypto.sha1(concatBuffers([serverNonce, newNonce]))\n    const hash3 = await crypto.sha1(concatBuffers([newNonce, newNonce]))\n\n    const key = concatBuffers([hash1, hash2.subarray(0, 12)])\n    const iv = concatBuffers([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)])\n\n    return [key, iv]\n}\n\n/**\n * Create AES IGE instance for message (given auth key and message key)\n * as defined by MTProto v2.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport async function createAesIgeForMessage(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): Promise<IEncryptionScheme> {\n    const x = client ? 0 : 8\n    const sha256a = await crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]))\n    const sha256b = await crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]))\n\n    const key = concatBuffers([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)])\n    const iv = concatBuffers([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)])\n\n    return crypto.createAesIge(key, iv)\n}\n\n/**\n * Create AES IGE instance for file (given auth key and message key)\n * as defined by MTProto v1.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport async function createAesIgeForMessageOld(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): Promise<IEncryptionScheme> {\n    const x = client ? 0 : 8\n    const sha1a = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]))\n    const sha1b = await crypto.sha1(\n        concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]),\n    )\n    const sha1c = await crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]))\n    const sha1d = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]))\n\n    const key = concatBuffers([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)])\n    const iv = concatBuffers([\n        sha1a.subarray(8, 20),\n        sha1b.subarray(0, 8),\n        sha1c.subarray(16, 20),\n        sha1d.subarray(0, 8),\n    ])\n\n    return crypto.createAesIge(key, iv)\n}\n"]}

package/cjs/utils/crypto/node-crypto.d.ts

@@ -0,0 +1,10 @@
+import { MaybeAsync } from '../../types/index.js';
+import { BaseCryptoProvider, ICryptoProvider, IEncryptionScheme } from './abstract.js';
+export declare class NodeCryptoProvider extends BaseCryptoProvider implements ICryptoProvider {
+    createAesCtr(key: Uint8Array, iv: Uint8Array, encrypt: boolean): IEncryptionScheme;
+    createAesEcb(key: Uint8Array): IEncryptionScheme;
+    pbkdf2(password: Uint8Array, salt: Uint8Array, iterations: number, keylen?: number, algo?: string): MaybeAsync<Uint8Array>;
+    sha1(data: Uint8Array): Uint8Array;
+    sha256(data: Uint8Array): Uint8Array;
+    hmacSha256(data: Uint8Array, key: Uint8Array): MaybeAsync<Uint8Array>;
+}

package/cjs/utils/crypto/node-crypto.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NodeCryptoProvider = void 0;
+// eslint-disable-next-line no-restricted-imports
+const crypto_1 = require("crypto");
+const buffer_utils_js_1 = require("../buffer-utils.js");
+const abstract_js_1 = require("./abstract.js");
+class NodeCryptoProvider extends abstract_js_1.BaseCryptoProvider {
+    createAesCtr(key, iv, encrypt) {
+        const cipher = (encrypt ? crypto_1.createCipheriv : crypto_1.createDecipheriv)(`aes-${key.length * 8}-ctr`, key, iv);
+        const update = (data) => cipher.update(data);
+        return {
+            encrypt: update,
+            decrypt: update,
+        };
+    }
+    createAesEcb(key) {
+        const methodName = `aes-${key.length * 8}-ecb`;
+        return {
+            encrypt(data) {
+                const cipher = (0, crypto_1.createCipheriv)(methodName, key, null);
+                cipher.setAutoPadding(false);
+                return (0, buffer_utils_js_1.concatBuffers)([cipher.update(data), cipher.final()]);
+            },
+            decrypt(data) {
+                const cipher = (0, crypto_1.createDecipheriv)(methodName, key, null);
+                cipher.setAutoPadding(false);
+                return (0, buffer_utils_js_1.concatBuffers)([cipher.update(data), cipher.final()]);
+            },
+        };
+    }
+    pbkdf2(password, salt, iterations, keylen = 64, algo = 'sha512') {
+        return new Promise((resolve, reject) => (0, crypto_1.pbkdf2)(password, salt, iterations, keylen, algo, (err, buf) => err !== null ? reject(err) : resolve(buf)));
+    }
+    sha1(data) {
+        return (0, crypto_1.createHash)('sha1').update(data).digest();
+    }
+    sha256(data) {
+        return (0, crypto_1.createHash)('sha256').update(data).digest();
+    }
+    hmacSha256(data, key) {
+        return (0, crypto_1.createHmac)('sha256', key).update(data).digest();
+    }
+}
+exports.NodeCryptoProvider = NodeCryptoProvider;
+//# sourceMappingURL=node-crypto.js.map

package/cjs/utils/crypto/node-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-crypto.js","sourceRoot":"","sources":["../../../../src/utils/crypto/node-crypto.ts"],"names":[],"mappings":";;;AAAA,iDAAiD;AACjD,mCAAyF;AAGzF,wDAAkD;AAClD,+CAAsF;AAEtF,MAAa,kBAAmB,SAAQ,gCAAkB;IACtD,YAAY,CAAC,GAAe,EAAE,EAAc,EAAE,OAAgB;QAC1D,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAc,CAAC,CAAC,CAAC,yBAAgB,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QAElG,MAAM,MAAM,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAExD,OAAO;YACH,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,MAAM;SAClB,CAAA;IACL,CAAC;IAED,YAAY,CAAC,GAAe;QACxB,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAA;QAE9C,OAAO;YACH,OAAO,CAAC,IAAgB;gBACpB,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;gBACpD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;gBAE5B,OAAO,IAAA,+BAAa,EAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YAC/D,CAAC;YACD,OAAO,CAAC,IAAgB;gBACpB,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;gBACtD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;gBAE5B,OAAO,IAAA,+BAAa,EAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YAC/D,CAAC;SACJ,CAAA;IACL,CAAC;IAED,MAAM,CACF,QAAoB,EACpB,IAAgB,EAChB,UAAkB,EAClB,MAAM,GAAG,EAAE,EACX,IAAI,GAAG,QAAQ;QAEf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACnC,IAAA,eAAM,EAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAiB,EAAE,GAAe,EAAE,EAAE,CACpF,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAC5C,CACJ,CAAA;IACL,CAAC;IAED,IAAI,CAAC,IAAgB;QACjB,OAAO,IAAA,mBAAU,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACnD,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACrD,CAAC;IAED,UAAU,CAAC,IAAgB,EAAE,GAAe;QACxC,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IAC1D,CAAC;CACJ;AAxDD,gDAwDC","sourcesContent":["// eslint-disable-next-line no-restricted-imports\nimport { createCipheriv, createDecipheriv, createHash, createHmac, pbkdf2 } from 'crypto'\n\nimport { MaybeAsync } from '../../types/index.js'\nimport { concatBuffers } from '../buffer-utils.js'\nimport { BaseCryptoProvider, ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\nexport class NodeCryptoProvider extends BaseCryptoProvider implements ICryptoProvider {\n    createAesCtr(key: Uint8Array, iv: Uint8Array, encrypt: boolean): IEncryptionScheme {\n        const cipher = (encrypt ? createCipheriv : createDecipheriv)(`aes-${key.length * 8}-ctr`, key, iv)\n\n        const update = (data: Uint8Array) => cipher.update(data)\n\n        return {\n            encrypt: update,\n            decrypt: update,\n        }\n    }\n\n    createAesEcb(key: Uint8Array): IEncryptionScheme {\n        const methodName = `aes-${key.length * 8}-ecb`\n\n        return {\n            encrypt(data: Uint8Array) {\n                const cipher = createCipheriv(methodName, key, null)\n                cipher.setAutoPadding(false)\n\n                return concatBuffers([cipher.update(data), cipher.final()])\n            },\n            decrypt(data: Uint8Array) {\n                const cipher = createDecipheriv(methodName, key, null)\n                cipher.setAutoPadding(false)\n\n                return concatBuffers([cipher.update(data), cipher.final()])\n            },\n        }\n    }\n\n    pbkdf2(\n        password: Uint8Array,\n        salt: Uint8Array,\n        iterations: number,\n        keylen = 64,\n        algo = 'sha512',\n    ): MaybeAsync<Uint8Array> {\n        return new Promise((resolve, reject) =>\n            pbkdf2(password, salt, iterations, keylen, algo, (err: Error | null, buf: Uint8Array) =>\n                err !== null ? reject(err) : resolve(buf),\n            ),\n        )\n    }\n\n    sha1(data: Uint8Array): Uint8Array {\n        return createHash('sha1').update(data).digest()\n    }\n\n    sha256(data: Uint8Array): Uint8Array {\n        return createHash('sha256').update(data).digest()\n    }\n\n    hmacSha256(data: Uint8Array, key: Uint8Array): MaybeAsync<Uint8Array> {\n        return createHmac('sha256', key).update(data).digest()\n    }\n}\n"]}

package/cjs/utils/crypto/password.d.ts

@@ -0,0 +1,29 @@
+import { tl } from '@mtcute/tl';
+import { ICryptoProvider } from './abstract.js';
+/**
+ * Compute password hash as defined by MTProto.
+ *
+ * See https://core.telegram.org/api/srp#checking-the-password-with-srp
+ *
+ * @param crypto  Crypto provider
+ * @param password  Password
+ * @param salt1  Salt 1
+ * @param salt2  Salt 2
+ */
+export declare function computePasswordHash(crypto: ICryptoProvider, password: Uint8Array, salt1: Uint8Array, salt2: Uint8Array): Promise<Uint8Array>;
+/**
+ * Compute new password SRP hash as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param algo  KDF algorithm
+ * @param password  Password
+ */
+export declare function computeNewPasswordHash(crypto: ICryptoProvider, algo: tl.RawPasswordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow, password: string): Promise<Uint8Array>;
+/**
+ * Compute SRP check parameters for 2fa password as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param request  SRP request
+ * @param password  2fa password
+ */
+export declare function computeSrpParams(crypto: ICryptoProvider, request: tl.account.RawPassword, password: string): Promise<tl.RawInputCheckPasswordSRP>;

package/cjs/utils/crypto/password.js

@@ -0,0 +1,106 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeSrpParams = exports.computeNewPasswordHash = exports.computePasswordHash = void 0;
+const big_integer_1 = __importDefault(require("big-integer"));
+const tl_runtime_1 = require("@mtcute/tl-runtime");
+const errors_js_1 = require("../../types/errors.js");
+const bigint_utils_js_1 = require("../bigint-utils.js");
+const buffer_utils_js_1 = require("../buffer-utils.js");
+const utils_js_1 = require("./utils.js");
+/**
+ * Compute password hash as defined by MTProto.
+ *
+ * See https://core.telegram.org/api/srp#checking-the-password-with-srp
+ *
+ * @param crypto  Crypto provider
+ * @param password  Password
+ * @param salt1  Salt 1
+ * @param salt2  Salt 2
+ */
+async function computePasswordHash(crypto, password, salt1, salt2) {
+    const SH = (data, salt) => crypto.sha256((0, buffer_utils_js_1.concatBuffers)([salt, data, salt]));
+    const PH1 = async (pwd, salt1, salt2) => SH(await SH(pwd, salt1), salt2);
+    return SH(await crypto.pbkdf2(await PH1(password, salt1, salt2), salt1, 100000), salt2);
+}
+exports.computePasswordHash = computePasswordHash;
+/**
+ * Compute new password SRP hash as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param algo  KDF algorithm
+ * @param password  Password
+ */
+async function computeNewPasswordHash(crypto, algo, password) {
+    algo.salt1 = (0, buffer_utils_js_1.concatBuffers)([algo.salt1, (0, buffer_utils_js_1.randomBytes)(32)]);
+    const _x = await computePasswordHash(crypto, (0, tl_runtime_1.utf8EncodeToBuffer)(password), algo.salt1, algo.salt2);
+    const g = (0, big_integer_1.default)(algo.g);
+    const p = (0, bigint_utils_js_1.bufferToBigInt)(algo.p);
+    const x = (0, bigint_utils_js_1.bufferToBigInt)(_x);
+    return (0, bigint_utils_js_1.bigIntToBuffer)(g.modPow(x, p), 256);
+}
+exports.computeNewPasswordHash = computeNewPasswordHash;
+/**
+ * Compute SRP check parameters for 2fa password as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param request  SRP request
+ * @param password  2fa password
+ */
+async function computeSrpParams(crypto, request, password) {
+    // nice naming thx durov
+    if (!request.currentAlgo ||
+        request.currentAlgo._ !== 'passwordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow') {
+        throw new errors_js_1.MtUnsupportedError(`Unknown algo ${request.currentAlgo?._}`);
+    }
+    const algo = request.currentAlgo;
+    // here and after: underscored variables are buffers, non-underscored are bigInts
+    if (!request.srpB) {
+        throw new errors_js_1.MtSecurityError('SRP_B is not present in the request');
+    }
+    if (!request.srpId) {
+        throw new errors_js_1.MtSecurityError('SRP_ID is not present in the request');
+    }
+    const g = (0, big_integer_1.default)(algo.g);
+    const _g = (0, bigint_utils_js_1.bigIntToBuffer)(g, 256);
+    const p = (0, bigint_utils_js_1.bufferToBigInt)(algo.p);
+    const gB = (0, bigint_utils_js_1.bufferToBigInt)(request.srpB);
+    const a = (0, bigint_utils_js_1.bufferToBigInt)((0, buffer_utils_js_1.randomBytes)(256));
+    const gA = g.modPow(a, p);
+    const _gA = (0, bigint_utils_js_1.bigIntToBuffer)(gA, 256);
+    const H = (data) => crypto.sha256(data);
+    const [_k, _u, _x] = await Promise.all([
+        // maybe, just maybe this will be a bit faster with some crypto providers
+        /* k = */ crypto.sha256((0, buffer_utils_js_1.concatBuffers)([algo.p, _g])),
+        /* u = */ crypto.sha256((0, buffer_utils_js_1.concatBuffers)([_gA, request.srpB])),
+        /* x = */ computePasswordHash(crypto, (0, tl_runtime_1.utf8EncodeToBuffer)(password), algo.salt1, algo.salt2),
+    ]);
+    const k = (0, bigint_utils_js_1.bufferToBigInt)(_k);
+    const u = (0, bigint_utils_js_1.bufferToBigInt)(_u);
+    const x = (0, bigint_utils_js_1.bufferToBigInt)(_x);
+    const v = g.modPow(x, p);
+    const kV = k.multiply(v).mod(p);
+    let t = gB.minus(kV).mod(p);
+    if (t.isNegative())
+        t = t.plus(p);
+    const sA = t.modPow(a.plus(u.multiply(x)), p);
+    const _kA = await H((0, bigint_utils_js_1.bigIntToBuffer)(sA, 256));
+    const _M1 = await H((0, buffer_utils_js_1.concatBuffers)([
+        (0, utils_js_1.xorBuffer)(await H(algo.p), await H(_g)),
+        await H(algo.salt1),
+        await H(algo.salt2),
+        _gA,
+        request.srpB,
+        _kA,
+    ]));
+    return {
+        _: 'inputCheckPasswordSRP',
+        srpId: request.srpId,
+        A: _gA,
+        M1: _M1,
+    };
+}
+exports.computeSrpParams = computeSrpParams;
+//# sourceMappingURL=password.js.map

package/cjs/utils/crypto/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/utils/crypto/password.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgC;AAGhC,mDAAuD;AAEvD,qDAA2E;AAC3E,wDAAmE;AACnE,wDAA+D;AAE/D,yCAAsC;AAEtC;;;;;;;;;GASG;AACI,KAAK,UAAU,mBAAmB,CACrC,MAAuB,EACvB,QAAoB,EACpB,KAAiB,EACjB,KAAiB;IAEjB,MAAM,EAAE,GAAG,CAAC,IAAgB,EAAE,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACnG,MAAM,GAAG,GAAG,KAAK,EAAE,GAAe,EAAE,KAAiB,EAAE,KAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAE5G,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAC3F,CAAC;AAVD,kDAUC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,IAA6E,EAC7E,QAAgB;IAEf,IAAgC,CAAC,KAAK,GAAG,IAAA,+BAAa,EAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAA,6BAAW,EAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAEtF,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,IAAA,+BAAkB,EAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAElG,MAAM,CAAC,GAAG,IAAA,qBAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAE5B,OAAO,IAAA,gCAAc,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC9C,CAAC;AAdD,wDAcC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,gBAAgB,CAClC,MAAuB,EACvB,OAA+B,EAC/B,QAAgB;IAEhB,wBAAwB;IACxB,IACI,CAAC,OAAO,CAAC,WAAW;QACpB,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,mEAAmE,EAC/F;QACE,MAAM,IAAI,8BAAkB,CAAC,gBAAgB,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;KACzE;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAA;IAEhC,iFAAiF;IAEjF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QACf,MAAM,IAAI,2BAAe,CAAC,qCAAqC,CAAC,CAAA;KACnE;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;QAChB,MAAM,IAAI,2BAAe,CAAC,sCAAsC,CAAC,CAAA;KACpE;IAED,MAAM,CAAC,GAAG,IAAA,qBAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,EAAE,GAAG,IAAA,gCAAc,EAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvC,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,IAAA,6BAAW,EAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzB,MAAM,GAAG,GAAG,IAAA,gCAAc,EAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAEnC,MAAM,CAAC,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEnD,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnC,yEAAyE;QACzE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACpD,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAA,+BAAa,EAAC,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAA,+BAAkB,EAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;KAC9F,CAAC,CAAA;IACF,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,IAAA,gCAAc,EAAC,EAAE,CAAC,CAAA;IAE5B,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAE/B,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC,UAAU,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,IAAA,gCAAc,EAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;IAE5C,MAAM,GAAG,GAAG,MAAM,CAAC,CACf,IAAA,+BAAa,EAAC;QACV,IAAA,oBAAS,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,GAAG;QACH,OAAO,CAAC,IAAI;QACZ,GAAG;KACN,CAAC,CACL,CAAA;IAED,OAAO;QACH,CAAC,EAAE,uBAAuB;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,CAAC,EAAE,GAAG;QACN,EAAE,EAAE,GAAG;KACV,CAAA;AACL,CAAC;AAvED,4CAuEC","sourcesContent":["import bigInt from 'big-integer'\n\nimport { tl } from '@mtcute/tl'\nimport { utf8EncodeToBuffer } from '@mtcute/tl-runtime'\n\nimport { MtSecurityError, MtUnsupportedError } from '../../types/errors.js'\nimport { bigIntToBuffer, bufferToBigInt } from '../bigint-utils.js'\nimport { concatBuffers, randomBytes } from '../buffer-utils.js'\nimport { ICryptoProvider } from './abstract.js'\nimport { xorBuffer } from './utils.js'\n\n/**\n * Compute password hash as defined by MTProto.\n *\n * See https://core.telegram.org/api/srp#checking-the-password-with-srp\n *\n * @param crypto  Crypto provider\n * @param password  Password\n * @param salt1  Salt 1\n * @param salt2  Salt 2\n */\nexport async function computePasswordHash(\n    crypto: ICryptoProvider,\n    password: Uint8Array,\n    salt1: Uint8Array,\n    salt2: Uint8Array,\n): Promise<Uint8Array> {\n    const SH = (data: Uint8Array, salt: Uint8Array) => crypto.sha256(concatBuffers([salt, data, salt]))\n    const PH1 = async (pwd: Uint8Array, salt1: Uint8Array, salt2: Uint8Array) => SH(await SH(pwd, salt1), salt2)\n\n    return SH(await crypto.pbkdf2(await PH1(password, salt1, salt2), salt1, 100000), salt2)\n}\n\n/**\n * Compute new password SRP hash as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param algo  KDF algorithm\n * @param password  Password\n */\nexport async function computeNewPasswordHash(\n    crypto: ICryptoProvider,\n    algo: tl.RawPasswordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow,\n    password: string,\n): Promise<Uint8Array> {\n    (algo as tl.Mutable<typeof algo>).salt1 = concatBuffers([algo.salt1, randomBytes(32)])\n\n    const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2)\n\n    const g = bigInt(algo.g)\n    const p = bufferToBigInt(algo.p)\n    const x = bufferToBigInt(_x)\n\n    return bigIntToBuffer(g.modPow(x, p), 256)\n}\n\n/**\n * Compute SRP check parameters for 2fa password as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param request  SRP request\n * @param password  2fa password\n */\nexport async function computeSrpParams(\n    crypto: ICryptoProvider,\n    request: tl.account.RawPassword,\n    password: string,\n): Promise<tl.RawInputCheckPasswordSRP> {\n    // nice naming thx durov\n    if (\n        !request.currentAlgo ||\n        request.currentAlgo._ !== 'passwordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow'\n    ) {\n        throw new MtUnsupportedError(`Unknown algo ${request.currentAlgo?._}`)\n    }\n\n    const algo = request.currentAlgo\n\n    // here and after: underscored variables are buffers, non-underscored are bigInts\n\n    if (!request.srpB) {\n        throw new MtSecurityError('SRP_B is not present in the request')\n    }\n\n    if (!request.srpId) {\n        throw new MtSecurityError('SRP_ID is not present in the request')\n    }\n\n    const g = bigInt(algo.g)\n    const _g = bigIntToBuffer(g, 256)\n    const p = bufferToBigInt(algo.p)\n    const gB = bufferToBigInt(request.srpB)\n\n    const a = bufferToBigInt(randomBytes(256))\n    const gA = g.modPow(a, p)\n    const _gA = bigIntToBuffer(gA, 256)\n\n    const H = (data: Uint8Array) => crypto.sha256(data)\n\n    const [_k, _u, _x] = await Promise.all([\n        // maybe, just maybe this will be a bit faster with some crypto providers\n        /* k = */ crypto.sha256(concatBuffers([algo.p, _g])),\n        /* u = */ crypto.sha256(concatBuffers([_gA, request.srpB])),\n        /* x = */ computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2),\n    ])\n    const k = bufferToBigInt(_k)\n    const u = bufferToBigInt(_u)\n    const x = bufferToBigInt(_x)\n\n    const v = g.modPow(x, p)\n    const kV = k.multiply(v).mod(p)\n\n    let t = gB.minus(kV).mod(p)\n    if (t.isNegative()) t = t.plus(p)\n    const sA = t.modPow(a.plus(u.multiply(x)), p)\n    const _kA = await H(bigIntToBuffer(sA, 256))\n\n    const _M1 = await H(\n        concatBuffers([\n            xorBuffer(await H(algo.p), await H(_g)),\n            await H(algo.salt1),\n            await H(algo.salt2),\n            _gA,\n            request.srpB,\n            _kA,\n        ]),\n    )\n\n    return {\n        _: 'inputCheckPasswordSRP',\n        srpId: request.srpId,\n        A: _gA,\n        M1: _M1,\n    }\n}\n"]}

package/cjs/utils/crypto/subtle.d.ts

@@ -0,0 +1,12 @@
+import { MaybeAsync } from '../../index.js';
+import { BaseCryptoProvider, ICryptoProvider, IEncryptionScheme } from './abstract.js';
+export declare class SubtleCryptoProvider extends BaseCryptoProvider implements ICryptoProvider {
+    readonly subtle: SubtleCrypto;
+    constructor(subtle: SubtleCrypto);
+    sha1(data: Uint8Array): MaybeAsync<Uint8Array>;
+    sha256(data: Uint8Array): MaybeAsync<Uint8Array>;
+    pbkdf2(password: Uint8Array, salt: Uint8Array, iterations: number, keylen?: number | undefined, algo?: string | undefined): Promise<Uint8Array>;
+    hmacSha256(data: Uint8Array, key: Uint8Array): Promise<Uint8Array>;
+    createAesCtr(key: Uint8Array, iv: Uint8Array): IEncryptionScheme;
+    createAesEcb(key: Uint8Array): IEncryptionScheme;
+}