@mtcute/core 0.1.0

package/esm/utils/crypto/index.js

@@ -0,0 +1,6 @@
+export * from './abstract.js';
+export * from './keys.js';
+export * from './password.js';
+import { _defaultCryptoProviderFactory } from '../platform/crypto.js';
+export const defaultCryptoProviderFactory = _defaultCryptoProviderFactory;
+//# sourceMappingURL=index.js.map

package/esm/utils/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/utils/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAE7B,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAA;AAGrE,MAAM,CAAC,MAAM,4BAA4B,GAA0B,6BAA6B,CAAA","sourcesContent":["export * from './abstract.js'\nexport * from './keys.js'\nexport * from './password.js'\n\nimport { _defaultCryptoProviderFactory } from '../platform/crypto.js'\nimport { CryptoProviderFactory } from './abstract.js'\n\nexport const defaultCryptoProviderFactory: CryptoProviderFactory = _defaultCryptoProviderFactory\n"]}

package/esm/utils/crypto/keys.d.ts

@@ -0,0 +1,27 @@
+import Long from 'long';
+import { TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js';
+import { ICryptoProvider } from './abstract.js';
+/**
+ * Parse PEM-encoded RSA public key information into modulus and exponent
+ * and compute its fingerprint as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param key  PEM-encoded RSA public key
+ * @param old  Whether this is an "old" key
+ */
+export declare function parsePublicKey(crypto: ICryptoProvider, key: string, old?: boolean): Promise<TlPublicKey>;
+/**
+ * Add public key to the global index.
+ *
+ * @param crypto  Crypto provider
+ * @param key  PEM-encoded RSA public key
+ * @param old  Whether this is an "old" key
+ */
+export declare function addPublicKey(crypto: ICryptoProvider, key: string, old?: boolean): Promise<void>;
+/**
+ * Get public key by its fingerprint.
+ *
+ * @param fingerprints  Fingerprints to match. The first one to match is returned.
+ * @param allowOld  Whether to allow "old" keys
+ */
+export declare function findKeyByFingerprints(fingerprints: (string | Long)[], allowOld?: boolean): TlPublicKey | null;

package/esm/utils/crypto/keys.js

@@ -0,0 +1,64 @@
+import { __publicKeyIndex as keysIndex } from '@mtcute/tl/binary/rsa-keys.js';
+import { hexEncode, TlBinaryWriter } from '@mtcute/tl-runtime';
+import { parseAsn1, parsePemContents } from '../binary/asn1-parser.js';
+/**
+ * Parse PEM-encoded RSA public key information into modulus and exponent
+ * and compute its fingerprint as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param key  PEM-encoded RSA public key
+ * @param old  Whether this is an "old" key
+ */
+export async function parsePublicKey(crypto, key, old = false) {
+    const asn1 = parseAsn1(parsePemContents(key));
+    const modulus = asn1.children?.[0].value;
+    const exponent = asn1.children?.[1].value;
+    if (!modulus || !exponent)
+        throw new Error('Invalid public key');
+    const writer = TlBinaryWriter.manual(512);
+    // they are actually smaller, about 270 bytes, but idc :D
+    writer.bytes(modulus);
+    writer.bytes(exponent);
+    const data = writer.result();
+    const sha = await crypto.sha1(data);
+    const fp = hexEncode(sha.slice(-8).reverse());
+    return {
+        modulus: hexEncode(modulus),
+        exponent: hexEncode(exponent),
+        fingerprint: fp,
+        old,
+    };
+}
+/**
+ * Add public key to the global index.
+ *
+ * @param crypto  Crypto provider
+ * @param key  PEM-encoded RSA public key
+ * @param old  Whether this is an "old" key
+ */
+export async function addPublicKey(crypto, key, old = false) {
+    const parsed = await parsePublicKey(crypto, key, old);
+    keysIndex[parsed.fingerprint] = parsed;
+}
+/**
+ * Get public key by its fingerprint.
+ *
+ * @param fingerprints  Fingerprints to match. The first one to match is returned.
+ * @param allowOld  Whether to allow "old" keys
+ */
+export function findKeyByFingerprints(fingerprints, allowOld = false) {
+    for (let fp of fingerprints) {
+        if (typeof fp !== 'string') {
+            fp = fp.toUnsigned().toString(16);
+        }
+        if (fp in keysIndex) {
+            if (keysIndex[fp].old && !allowOld)
+                continue;
+            return keysIndex[fp];
+        }
+    }
+    if (!allowOld)
+        return findKeyByFingerprints(fingerprints, true);
+    return null;
+}
+//# sourceMappingURL=keys.js.map

package/esm/utils/crypto/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../src/utils/crypto/keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,IAAI,SAAS,EAAe,MAAM,+BAA+B,CAAA;AAC1F,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAE9D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAGtE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAClF,MAAM,IAAI,GAAG,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACzC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IAEhE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACzC,yDAAyD;IACzD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACrB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;IAC5B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAE7C,OAAO;QACH,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC;QAC7B,WAAW,EAAE,EAAE;QACf,GAAG;KACN,CAAA;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAuB,EAAE,GAAW,EAAE,GAAG,GAAG,KAAK;IAChF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,CAAA;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAA+B,EAAE,QAAQ,GAAG,KAAK;IACnF,KAAK,IAAI,EAAE,IAAI,YAAY,EAAE;QACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE;YACxB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;SACpC;QACD,IAAI,EAAE,IAAI,SAAS,EAAE;YACjB,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YAE5C,OAAO,SAAS,CAAC,EAAE,CAAC,CAAA;SACvB;KACJ;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,qBAAqB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;IAE/D,OAAO,IAAI,CAAA;AACf,CAAC","sourcesContent":["import Long from 'long'\n\nimport { __publicKeyIndex as keysIndex, TlPublicKey } from '@mtcute/tl/binary/rsa-keys.js'\nimport { hexEncode, TlBinaryWriter } from '@mtcute/tl-runtime'\n\nimport { parseAsn1, parsePemContents } from '../binary/asn1-parser.js'\nimport { ICryptoProvider } from './abstract.js'\n\n/**\n * Parse PEM-encoded RSA public key information into modulus and exponent\n * and compute its fingerprint as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport async function parsePublicKey(crypto: ICryptoProvider, key: string, old = false): Promise<TlPublicKey> {\n    const asn1 = parseAsn1(parsePemContents(key))\n    const modulus = asn1.children?.[0].value\n    const exponent = asn1.children?.[1].value\n    if (!modulus || !exponent) throw new Error('Invalid public key')\n\n    const writer = TlBinaryWriter.manual(512)\n    // they are actually smaller, about 270 bytes, but idc :D\n    writer.bytes(modulus)\n    writer.bytes(exponent)\n\n    const data = writer.result()\n    const sha = await crypto.sha1(data)\n    const fp = hexEncode(sha.slice(-8).reverse())\n\n    return {\n        modulus: hexEncode(modulus),\n        exponent: hexEncode(exponent),\n        fingerprint: fp,\n        old,\n    }\n}\n\n/**\n * Add public key to the global index.\n *\n * @param crypto  Crypto provider\n * @param key  PEM-encoded RSA public key\n * @param old  Whether this is an \"old\" key\n */\nexport async function addPublicKey(crypto: ICryptoProvider, key: string, old = false): Promise<void> {\n    const parsed = await parsePublicKey(crypto, key, old)\n    keysIndex[parsed.fingerprint] = parsed\n}\n\n/**\n * Get public key by its fingerprint.\n *\n * @param fingerprints  Fingerprints to match. The first one to match is returned.\n * @param allowOld  Whether to allow \"old\" keys\n */\nexport function findKeyByFingerprints(fingerprints: (string | Long)[], allowOld = false): TlPublicKey | null {\n    for (let fp of fingerprints) {\n        if (typeof fp !== 'string') {\n            fp = fp.toUnsigned().toString(16)\n        }\n        if (fp in keysIndex) {\n            if (keysIndex[fp].old && !allowOld) continue\n\n            return keysIndex[fp]\n        }\n    }\n    if (!allowOld) return findKeyByFingerprints(fingerprints, true)\n\n    return null\n}\n"]}

package/esm/utils/crypto/miller-rabin.d.ts

@@ -0,0 +1,2 @@
+import { BigInteger } from 'big-integer';
+export declare function millerRabin(n: BigInteger, rounds?: number): boolean;

package/esm/utils/crypto/miller-rabin.js

@@ -0,0 +1,37 @@
+import bigInt from 'big-integer';
+import { randomBigIntBits, twoMultiplicity } from '../bigint-utils.js';
+export function millerRabin(n, rounds = 20) {
+    // small numbers: 0, 1 are not prime, 2, 3 are prime
+    if (n.lt(bigInt[4]))
+        return n.gt(bigInt[1]);
+    if (n.isEven() || n.isNegative())
+        return false;
+    const nBits = n.bitLength().toJSNumber();
+    const nSub = n.minus(1);
+    const r = twoMultiplicity(nSub);
+    const d = nSub.shiftRight(r);
+    for (let i = 0; i < rounds; i++) {
+        let base;
+        do {
+            base = randomBigIntBits(nBits);
+        } while (base.leq(bigInt.one) || base.geq(nSub));
+        let x = base.modPow(d, n);
+        if (x.eq(bigInt.one) || x.eq(nSub))
+            continue;
+        let i = bigInt.zero;
+        let y;
+        while (i.lt(r)) {
+            y = x.modPow(bigInt[2], n);
+            if (x.eq(bigInt.one))
+                return false;
+            if (x.eq(nSub))
+                break;
+            i = i.plus(bigInt.one);
+            x = y;
+        }
+        if (i.eq(r))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=miller-rabin.js.map

package/esm/utils/crypto/miller-rabin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"miller-rabin.js","sourceRoot":"","sources":["../../../../src/utils/crypto/miller-rabin.ts"],"names":[],"mappings":"AAAA,OAAO,MAAsB,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAEtE,MAAM,UAAU,WAAW,CAAC,CAAa,EAAE,MAAM,GAAG,EAAE;IAClD,oDAAoD;IACpD,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE;QAAE,OAAO,KAAK,CAAA;IAE9C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,CAAA;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAEvB,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAA;QAER,GAAG;YACC,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;SACjC,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAC;QAEhD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,SAAQ;QAE5C,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAA;QACnB,IAAI,CAAa,CAAA;QAEjB,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YACZ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAE1B,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YAClC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,MAAK;YACrB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAEtB,CAAC,GAAG,CAAC,CAAA;SACR;QAED,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;KAC5B;IAED,OAAO,IAAI,CAAA;AACf,CAAC","sourcesContent":["import bigInt, { BigInteger } from 'big-integer'\n\nimport { randomBigIntBits, twoMultiplicity } from '../bigint-utils.js'\n\nexport function millerRabin(n: BigInteger, rounds = 20): boolean {\n    // small numbers: 0, 1 are not prime, 2, 3 are prime\n    if (n.lt(bigInt[4])) return n.gt(bigInt[1])\n    if (n.isEven() || n.isNegative()) return false\n\n    const nBits = n.bitLength().toJSNumber()\n    const nSub = n.minus(1)\n\n    const r = twoMultiplicity(nSub)\n    const d = nSub.shiftRight(r)\n\n    for (let i = 0; i < rounds; i++) {\n        let base\n\n        do {\n            base = randomBigIntBits(nBits)\n        } while (base.leq(bigInt.one) || base.geq(nSub))\n\n        let x = base.modPow(d, n)\n        if (x.eq(bigInt.one) || x.eq(nSub)) continue\n\n        let i = bigInt.zero\n        let y: BigInteger\n\n        while (i.lt(r)) {\n            y = x.modPow(bigInt[2], n)\n\n            if (x.eq(bigInt.one)) return false\n            if (x.eq(nSub)) break\n            i = i.plus(bigInt.one)\n\n            x = y\n        }\n\n        if (i.eq(r)) return false\n    }\n\n    return true\n}\n"]}

package/esm/utils/crypto/mtproto.d.ts

@@ -0,0 +1,31 @@
+import { ICryptoProvider, IEncryptionScheme } from './abstract.js';
+/**
+ * Generate AES key and IV from nonces as defined by MTProto.
+ * Used in authorization flow.
+ *
+ * @param crypto  Crypto provider
+ * @param serverNonce  Server nonce
+ * @param newNonce  New nonce
+ * @returns  Tuple: `[key, iv]`
+ */
+export declare function generateKeyAndIvFromNonce(crypto: ICryptoProvider, serverNonce: Uint8Array, newNonce: Uint8Array): Promise<[Uint8Array, Uint8Array]>;
+/**
+ * Create AES IGE instance for message (given auth key and message key)
+ * as defined by MTProto v2.
+ *
+ * @param crypto  Crypto provider
+ * @param authKey  Authorization key
+ * @param messageKey  Message key
+ * @param client  Whether this is a client to server message
+ */
+export declare function createAesIgeForMessage(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): Promise<IEncryptionScheme>;
+/**
+ * Create AES IGE instance for file (given auth key and message key)
+ * as defined by MTProto v1.
+ *
+ * @param crypto  Crypto provider
+ * @param authKey  Authorization key
+ * @param messageKey  Message key
+ * @param client  Whether this is a client to server message
+ */
+export declare function createAesIgeForMessageOld(crypto: ICryptoProvider, authKey: Uint8Array, messageKey: Uint8Array, client: boolean): Promise<IEncryptionScheme>;

package/esm/utils/crypto/mtproto.js

@@ -0,0 +1,60 @@
+import { concatBuffers } from '../buffer-utils.js';
+/**
+ * Generate AES key and IV from nonces as defined by MTProto.
+ * Used in authorization flow.
+ *
+ * @param crypto  Crypto provider
+ * @param serverNonce  Server nonce
+ * @param newNonce  New nonce
+ * @returns  Tuple: `[key, iv]`
+ */
+export async function generateKeyAndIvFromNonce(crypto, serverNonce, newNonce) {
+    const hash1 = await crypto.sha1(concatBuffers([newNonce, serverNonce]));
+    const hash2 = await crypto.sha1(concatBuffers([serverNonce, newNonce]));
+    const hash3 = await crypto.sha1(concatBuffers([newNonce, newNonce]));
+    const key = concatBuffers([hash1, hash2.subarray(0, 12)]);
+    const iv = concatBuffers([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)]);
+    return [key, iv];
+}
+/**
+ * Create AES IGE instance for message (given auth key and message key)
+ * as defined by MTProto v2.
+ *
+ * @param crypto  Crypto provider
+ * @param authKey  Authorization key
+ * @param messageKey  Message key
+ * @param client  Whether this is a client to server message
+ */
+export async function createAesIgeForMessage(crypto, authKey, messageKey, client) {
+    const x = client ? 0 : 8;
+    const sha256a = await crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]));
+    const sha256b = await crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]));
+    const key = concatBuffers([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)]);
+    const iv = concatBuffers([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)]);
+    return crypto.createAesIge(key, iv);
+}
+/**
+ * Create AES IGE instance for file (given auth key and message key)
+ * as defined by MTProto v1.
+ *
+ * @param crypto  Crypto provider
+ * @param authKey  Authorization key
+ * @param messageKey  Message key
+ * @param client  Whether this is a client to server message
+ */
+export async function createAesIgeForMessageOld(crypto, authKey, messageKey, client) {
+    const x = client ? 0 : 8;
+    const sha1a = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]));
+    const sha1b = await crypto.sha1(concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]));
+    const sha1c = await crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]));
+    const sha1d = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]));
+    const key = concatBuffers([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)]);
+    const iv = concatBuffers([
+        sha1a.subarray(8, 20),
+        sha1b.subarray(0, 8),
+        sha1c.subarray(16, 20),
+        sha1d.subarray(0, 8),
+    ]);
+    return crypto.createAesIge(key, iv);
+}
+//# sourceMappingURL=mtproto.js.map

package/esm/utils/crypto/mtproto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mtproto.js","sourceRoot":"","sources":["../../../../src/utils/crypto/mtproto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAGlD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,MAAuB,EACvB,WAAuB,EACvB,QAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;IAEpE,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACzD,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAElF,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7F,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAElG,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACtG,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAErG,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,MAAuB,EACvB,OAAmB,EACnB,UAAsB,EACtB,MAAe;IAEf,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACzF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAClG,CAAA;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;IAC9F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/F,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/F,MAAM,EAAE,GAAG,aAAa,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;KACvB,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACvC,CAAC","sourcesContent":["import { concatBuffers } from '../buffer-utils.js'\nimport { ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\n/**\n * Generate AES key and IV from nonces as defined by MTProto.\n * Used in authorization flow.\n *\n * @param crypto  Crypto provider\n * @param serverNonce  Server nonce\n * @param newNonce  New nonce\n * @returns  Tuple: `[key, iv]`\n */\nexport async function generateKeyAndIvFromNonce(\n    crypto: ICryptoProvider,\n    serverNonce: Uint8Array,\n    newNonce: Uint8Array,\n): Promise<[Uint8Array, Uint8Array]> {\n    const hash1 = await crypto.sha1(concatBuffers([newNonce, serverNonce]))\n    const hash2 = await crypto.sha1(concatBuffers([serverNonce, newNonce]))\n    const hash3 = await crypto.sha1(concatBuffers([newNonce, newNonce]))\n\n    const key = concatBuffers([hash1, hash2.subarray(0, 12)])\n    const iv = concatBuffers([hash2.subarray(12, 20), hash3, newNonce.subarray(0, 4)])\n\n    return [key, iv]\n}\n\n/**\n * Create AES IGE instance for message (given auth key and message key)\n * as defined by MTProto v2.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport async function createAesIgeForMessage(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): Promise<IEncryptionScheme> {\n    const x = client ? 0 : 8\n    const sha256a = await crypto.sha256(concatBuffers([messageKey, authKey.subarray(x, 36 + x)]))\n    const sha256b = await crypto.sha256(concatBuffers([authKey.subarray(40 + x, 76 + x), messageKey]))\n\n    const key = concatBuffers([sha256a.subarray(0, 8), sha256b.subarray(8, 24), sha256a.subarray(24, 32)])\n    const iv = concatBuffers([sha256b.subarray(0, 8), sha256a.subarray(8, 24), sha256b.subarray(24, 32)])\n\n    return crypto.createAesIge(key, iv)\n}\n\n/**\n * Create AES IGE instance for file (given auth key and message key)\n * as defined by MTProto v1.\n *\n * @param crypto  Crypto provider\n * @param authKey  Authorization key\n * @param messageKey  Message key\n * @param client  Whether this is a client to server message\n */\nexport async function createAesIgeForMessageOld(\n    crypto: ICryptoProvider,\n    authKey: Uint8Array,\n    messageKey: Uint8Array,\n    client: boolean,\n): Promise<IEncryptionScheme> {\n    const x = client ? 0 : 8\n    const sha1a = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(x, 32 + x)]))\n    const sha1b = await crypto.sha1(\n        concatBuffers([authKey.subarray(32 + x, 48 + x), messageKey, authKey.subarray(48 + x, 64 + x)]),\n    )\n    const sha1c = await crypto.sha1(concatBuffers([authKey.subarray(64 + x, 96 + x), messageKey]))\n    const sha1d = await crypto.sha1(concatBuffers([messageKey, authKey.subarray(96 + x, 128 + x)]))\n\n    const key = concatBuffers([sha1a.subarray(0, 8), sha1b.subarray(8, 20), sha1c.subarray(4, 16)])\n    const iv = concatBuffers([\n        sha1a.subarray(8, 20),\n        sha1b.subarray(0, 8),\n        sha1c.subarray(16, 20),\n        sha1d.subarray(0, 8),\n    ])\n\n    return crypto.createAesIge(key, iv)\n}\n"]}

package/esm/utils/crypto/node-crypto.d.ts

@@ -0,0 +1,10 @@
+import { MaybeAsync } from '../../types/index.js';
+import { BaseCryptoProvider, ICryptoProvider, IEncryptionScheme } from './abstract.js';
+export declare class NodeCryptoProvider extends BaseCryptoProvider implements ICryptoProvider {
+    createAesCtr(key: Uint8Array, iv: Uint8Array, encrypt: boolean): IEncryptionScheme;
+    createAesEcb(key: Uint8Array): IEncryptionScheme;
+    pbkdf2(password: Uint8Array, salt: Uint8Array, iterations: number, keylen?: number, algo?: string): MaybeAsync<Uint8Array>;
+    sha1(data: Uint8Array): Uint8Array;
+    sha256(data: Uint8Array): Uint8Array;
+    hmacSha256(data: Uint8Array, key: Uint8Array): MaybeAsync<Uint8Array>;
+}

package/esm/utils/crypto/node-crypto.js

@@ -0,0 +1,42 @@
+// eslint-disable-next-line no-restricted-imports
+import { createCipheriv, createDecipheriv, createHash, createHmac, pbkdf2 } from 'crypto';
+import { concatBuffers } from '../buffer-utils.js';
+import { BaseCryptoProvider } from './abstract.js';
+export class NodeCryptoProvider extends BaseCryptoProvider {
+    createAesCtr(key, iv, encrypt) {
+        const cipher = (encrypt ? createCipheriv : createDecipheriv)(`aes-${key.length * 8}-ctr`, key, iv);
+        const update = (data) => cipher.update(data);
+        return {
+            encrypt: update,
+            decrypt: update,
+        };
+    }
+    createAesEcb(key) {
+        const methodName = `aes-${key.length * 8}-ecb`;
+        return {
+            encrypt(data) {
+                const cipher = createCipheriv(methodName, key, null);
+                cipher.setAutoPadding(false);
+                return concatBuffers([cipher.update(data), cipher.final()]);
+            },
+            decrypt(data) {
+                const cipher = createDecipheriv(methodName, key, null);
+                cipher.setAutoPadding(false);
+                return concatBuffers([cipher.update(data), cipher.final()]);
+            },
+        };
+    }
+    pbkdf2(password, salt, iterations, keylen = 64, algo = 'sha512') {
+        return new Promise((resolve, reject) => pbkdf2(password, salt, iterations, keylen, algo, (err, buf) => err !== null ? reject(err) : resolve(buf)));
+    }
+    sha1(data) {
+        return createHash('sha1').update(data).digest();
+    }
+    sha256(data) {
+        return createHash('sha256').update(data).digest();
+    }
+    hmacSha256(data, key) {
+        return createHmac('sha256', key).update(data).digest();
+    }
+}
+//# sourceMappingURL=node-crypto.js.map

package/esm/utils/crypto/node-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-crypto.js","sourceRoot":"","sources":["../../../../src/utils/crypto/node-crypto.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAGzF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,kBAAkB,EAAsC,MAAM,eAAe,CAAA;AAEtF,MAAM,OAAO,kBAAmB,SAAQ,kBAAkB;IACtD,YAAY,CAAC,GAAe,EAAE,EAAc,EAAE,OAAgB;QAC1D,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QAElG,MAAM,MAAM,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAExD,OAAO;YACH,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,MAAM;SAClB,CAAA;IACL,CAAC;IAED,YAAY,CAAC,GAAe;QACxB,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAA;QAE9C,OAAO;YACH,OAAO,CAAC,IAAgB;gBACpB,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;gBACpD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;gBAE5B,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YAC/D,CAAC;YACD,OAAO,CAAC,IAAgB;gBACpB,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;gBACtD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;gBAE5B,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YAC/D,CAAC;SACJ,CAAA;IACL,CAAC;IAED,MAAM,CACF,QAAoB,EACpB,IAAgB,EAChB,UAAkB,EAClB,MAAM,GAAG,EAAE,EACX,IAAI,GAAG,QAAQ;QAEf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACnC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAiB,EAAE,GAAe,EAAE,EAAE,CACpF,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAC5C,CACJ,CAAA;IACL,CAAC;IAED,IAAI,CAAC,IAAgB;QACjB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACnD,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACrD,CAAC;IAED,UAAU,CAAC,IAAgB,EAAE,GAAe;QACxC,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IAC1D,CAAC;CACJ","sourcesContent":["// eslint-disable-next-line no-restricted-imports\nimport { createCipheriv, createDecipheriv, createHash, createHmac, pbkdf2 } from 'crypto'\n\nimport { MaybeAsync } from '../../types/index.js'\nimport { concatBuffers } from '../buffer-utils.js'\nimport { BaseCryptoProvider, ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\nexport class NodeCryptoProvider extends BaseCryptoProvider implements ICryptoProvider {\n    createAesCtr(key: Uint8Array, iv: Uint8Array, encrypt: boolean): IEncryptionScheme {\n        const cipher = (encrypt ? createCipheriv : createDecipheriv)(`aes-${key.length * 8}-ctr`, key, iv)\n\n        const update = (data: Uint8Array) => cipher.update(data)\n\n        return {\n            encrypt: update,\n            decrypt: update,\n        }\n    }\n\n    createAesEcb(key: Uint8Array): IEncryptionScheme {\n        const methodName = `aes-${key.length * 8}-ecb`\n\n        return {\n            encrypt(data: Uint8Array) {\n                const cipher = createCipheriv(methodName, key, null)\n                cipher.setAutoPadding(false)\n\n                return concatBuffers([cipher.update(data), cipher.final()])\n            },\n            decrypt(data: Uint8Array) {\n                const cipher = createDecipheriv(methodName, key, null)\n                cipher.setAutoPadding(false)\n\n                return concatBuffers([cipher.update(data), cipher.final()])\n            },\n        }\n    }\n\n    pbkdf2(\n        password: Uint8Array,\n        salt: Uint8Array,\n        iterations: number,\n        keylen = 64,\n        algo = 'sha512',\n    ): MaybeAsync<Uint8Array> {\n        return new Promise((resolve, reject) =>\n            pbkdf2(password, salt, iterations, keylen, algo, (err: Error | null, buf: Uint8Array) =>\n                err !== null ? reject(err) : resolve(buf),\n            ),\n        )\n    }\n\n    sha1(data: Uint8Array): Uint8Array {\n        return createHash('sha1').update(data).digest()\n    }\n\n    sha256(data: Uint8Array): Uint8Array {\n        return createHash('sha256').update(data).digest()\n    }\n\n    hmacSha256(data: Uint8Array, key: Uint8Array): MaybeAsync<Uint8Array> {\n        return createHmac('sha256', key).update(data).digest()\n    }\n}\n"]}

package/esm/utils/crypto/password.d.ts

@@ -0,0 +1,29 @@
+import { tl } from '@mtcute/tl';
+import { ICryptoProvider } from './abstract.js';
+/**
+ * Compute password hash as defined by MTProto.
+ *
+ * See https://core.telegram.org/api/srp#checking-the-password-with-srp
+ *
+ * @param crypto  Crypto provider
+ * @param password  Password
+ * @param salt1  Salt 1
+ * @param salt2  Salt 2
+ */
+export declare function computePasswordHash(crypto: ICryptoProvider, password: Uint8Array, salt1: Uint8Array, salt2: Uint8Array): Promise<Uint8Array>;
+/**
+ * Compute new password SRP hash as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param algo  KDF algorithm
+ * @param password  Password
+ */
+export declare function computeNewPasswordHash(crypto: ICryptoProvider, algo: tl.RawPasswordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow, password: string): Promise<Uint8Array>;
+/**
+ * Compute SRP check parameters for 2fa password as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param request  SRP request
+ * @param password  2fa password
+ */
+export declare function computeSrpParams(crypto: ICryptoProvider, request: tl.account.RawPassword, password: string): Promise<tl.RawInputCheckPasswordSRP>;

package/esm/utils/crypto/password.js

@@ -0,0 +1,97 @@
+import bigInt from 'big-integer';
+import { utf8EncodeToBuffer } from '@mtcute/tl-runtime';
+import { MtSecurityError, MtUnsupportedError } from '../../types/errors.js';
+import { bigIntToBuffer, bufferToBigInt } from '../bigint-utils.js';
+import { concatBuffers, randomBytes } from '../buffer-utils.js';
+import { xorBuffer } from './utils.js';
+/**
+ * Compute password hash as defined by MTProto.
+ *
+ * See https://core.telegram.org/api/srp#checking-the-password-with-srp
+ *
+ * @param crypto  Crypto provider
+ * @param password  Password
+ * @param salt1  Salt 1
+ * @param salt2  Salt 2
+ */
+export async function computePasswordHash(crypto, password, salt1, salt2) {
+    const SH = (data, salt) => crypto.sha256(concatBuffers([salt, data, salt]));
+    const PH1 = async (pwd, salt1, salt2) => SH(await SH(pwd, salt1), salt2);
+    return SH(await crypto.pbkdf2(await PH1(password, salt1, salt2), salt1, 100000), salt2);
+}
+/**
+ * Compute new password SRP hash as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param algo  KDF algorithm
+ * @param password  Password
+ */
+export async function computeNewPasswordHash(crypto, algo, password) {
+    algo.salt1 = concatBuffers([algo.salt1, randomBytes(32)]);
+    const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2);
+    const g = bigInt(algo.g);
+    const p = bufferToBigInt(algo.p);
+    const x = bufferToBigInt(_x);
+    return bigIntToBuffer(g.modPow(x, p), 256);
+}
+/**
+ * Compute SRP check parameters for 2fa password as defined by MTProto.
+ *
+ * @param crypto  Crypto provider
+ * @param request  SRP request
+ * @param password  2fa password
+ */
+export async function computeSrpParams(crypto, request, password) {
+    // nice naming thx durov
+    if (!request.currentAlgo ||
+        request.currentAlgo._ !== 'passwordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow') {
+        throw new MtUnsupportedError(`Unknown algo ${request.currentAlgo?._}`);
+    }
+    const algo = request.currentAlgo;
+    // here and after: underscored variables are buffers, non-underscored are bigInts
+    if (!request.srpB) {
+        throw new MtSecurityError('SRP_B is not present in the request');
+    }
+    if (!request.srpId) {
+        throw new MtSecurityError('SRP_ID is not present in the request');
+    }
+    const g = bigInt(algo.g);
+    const _g = bigIntToBuffer(g, 256);
+    const p = bufferToBigInt(algo.p);
+    const gB = bufferToBigInt(request.srpB);
+    const a = bufferToBigInt(randomBytes(256));
+    const gA = g.modPow(a, p);
+    const _gA = bigIntToBuffer(gA, 256);
+    const H = (data) => crypto.sha256(data);
+    const [_k, _u, _x] = await Promise.all([
+        // maybe, just maybe this will be a bit faster with some crypto providers
+        /* k = */ crypto.sha256(concatBuffers([algo.p, _g])),
+        /* u = */ crypto.sha256(concatBuffers([_gA, request.srpB])),
+        /* x = */ computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2),
+    ]);
+    const k = bufferToBigInt(_k);
+    const u = bufferToBigInt(_u);
+    const x = bufferToBigInt(_x);
+    const v = g.modPow(x, p);
+    const kV = k.multiply(v).mod(p);
+    let t = gB.minus(kV).mod(p);
+    if (t.isNegative())
+        t = t.plus(p);
+    const sA = t.modPow(a.plus(u.multiply(x)), p);
+    const _kA = await H(bigIntToBuffer(sA, 256));
+    const _M1 = await H(concatBuffers([
+        xorBuffer(await H(algo.p), await H(_g)),
+        await H(algo.salt1),
+        await H(algo.salt2),
+        _gA,
+        request.srpB,
+        _kA,
+    ]));
+    return {
+        _: 'inputCheckPasswordSRP',
+        srpId: request.srpId,
+        A: _gA,
+        M1: _M1,
+    };
+}
+//# sourceMappingURL=password.js.map

package/esm/utils/crypto/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../../src/utils/crypto/password.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAGhC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAEvD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC3E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEtC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,MAAuB,EACvB,QAAoB,EACpB,KAAiB,EACjB,KAAiB;IAEjB,MAAM,EAAE,GAAG,CAAC,IAAgB,EAAE,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACnG,MAAM,GAAG,GAAG,KAAK,EAAE,GAAe,EAAE,KAAiB,EAAE,KAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAE5G,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAC3F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,MAAuB,EACvB,IAA6E,EAC7E,QAAgB;IAEf,IAAgC,CAAC,KAAK,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAEtF,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAElG,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAE5B,OAAO,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,MAAuB,EACvB,OAA+B,EAC/B,QAAgB;IAEhB,wBAAwB;IACxB,IACI,CAAC,OAAO,CAAC,WAAW;QACpB,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,mEAAmE,EAC/F;QACE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;KACzE;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAA;IAEhC,iFAAiF;IAEjF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QACf,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAA;KACnE;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE;QAChB,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAA;KACpE;IAED,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvC,MAAM,CAAC,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzB,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;IAEnC,MAAM,CAAC,GAAG,CAAC,IAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEnD,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnC,yEAAyE;QACzE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACpD,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,SAAS,CAAC,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;KAC9F,CAAC,CAAA;IACF,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;IAE5B,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAE/B,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC,UAAU,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAA;IAE5C,MAAM,GAAG,GAAG,MAAM,CAAC,CACf,aAAa,CAAC;QACV,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,GAAG;QACH,OAAO,CAAC,IAAI;QACZ,GAAG;KACN,CAAC,CACL,CAAA;IAED,OAAO;QACH,CAAC,EAAE,uBAAuB;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,CAAC,EAAE,GAAG;QACN,EAAE,EAAE,GAAG;KACV,CAAA;AACL,CAAC","sourcesContent":["import bigInt from 'big-integer'\n\nimport { tl } from '@mtcute/tl'\nimport { utf8EncodeToBuffer } from '@mtcute/tl-runtime'\n\nimport { MtSecurityError, MtUnsupportedError } from '../../types/errors.js'\nimport { bigIntToBuffer, bufferToBigInt } from '../bigint-utils.js'\nimport { concatBuffers, randomBytes } from '../buffer-utils.js'\nimport { ICryptoProvider } from './abstract.js'\nimport { xorBuffer } from './utils.js'\n\n/**\n * Compute password hash as defined by MTProto.\n *\n * See https://core.telegram.org/api/srp#checking-the-password-with-srp\n *\n * @param crypto  Crypto provider\n * @param password  Password\n * @param salt1  Salt 1\n * @param salt2  Salt 2\n */\nexport async function computePasswordHash(\n    crypto: ICryptoProvider,\n    password: Uint8Array,\n    salt1: Uint8Array,\n    salt2: Uint8Array,\n): Promise<Uint8Array> {\n    const SH = (data: Uint8Array, salt: Uint8Array) => crypto.sha256(concatBuffers([salt, data, salt]))\n    const PH1 = async (pwd: Uint8Array, salt1: Uint8Array, salt2: Uint8Array) => SH(await SH(pwd, salt1), salt2)\n\n    return SH(await crypto.pbkdf2(await PH1(password, salt1, salt2), salt1, 100000), salt2)\n}\n\n/**\n * Compute new password SRP hash as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param algo  KDF algorithm\n * @param password  Password\n */\nexport async function computeNewPasswordHash(\n    crypto: ICryptoProvider,\n    algo: tl.RawPasswordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow,\n    password: string,\n): Promise<Uint8Array> {\n    (algo as tl.Mutable<typeof algo>).salt1 = concatBuffers([algo.salt1, randomBytes(32)])\n\n    const _x = await computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2)\n\n    const g = bigInt(algo.g)\n    const p = bufferToBigInt(algo.p)\n    const x = bufferToBigInt(_x)\n\n    return bigIntToBuffer(g.modPow(x, p), 256)\n}\n\n/**\n * Compute SRP check parameters for 2fa password as defined by MTProto.\n *\n * @param crypto  Crypto provider\n * @param request  SRP request\n * @param password  2fa password\n */\nexport async function computeSrpParams(\n    crypto: ICryptoProvider,\n    request: tl.account.RawPassword,\n    password: string,\n): Promise<tl.RawInputCheckPasswordSRP> {\n    // nice naming thx durov\n    if (\n        !request.currentAlgo ||\n        request.currentAlgo._ !== 'passwordKdfAlgoSHA256SHA256PBKDF2HMACSHA512iter100000SHA256ModPow'\n    ) {\n        throw new MtUnsupportedError(`Unknown algo ${request.currentAlgo?._}`)\n    }\n\n    const algo = request.currentAlgo\n\n    // here and after: underscored variables are buffers, non-underscored are bigInts\n\n    if (!request.srpB) {\n        throw new MtSecurityError('SRP_B is not present in the request')\n    }\n\n    if (!request.srpId) {\n        throw new MtSecurityError('SRP_ID is not present in the request')\n    }\n\n    const g = bigInt(algo.g)\n    const _g = bigIntToBuffer(g, 256)\n    const p = bufferToBigInt(algo.p)\n    const gB = bufferToBigInt(request.srpB)\n\n    const a = bufferToBigInt(randomBytes(256))\n    const gA = g.modPow(a, p)\n    const _gA = bigIntToBuffer(gA, 256)\n\n    const H = (data: Uint8Array) => crypto.sha256(data)\n\n    const [_k, _u, _x] = await Promise.all([\n        // maybe, just maybe this will be a bit faster with some crypto providers\n        /* k = */ crypto.sha256(concatBuffers([algo.p, _g])),\n        /* u = */ crypto.sha256(concatBuffers([_gA, request.srpB])),\n        /* x = */ computePasswordHash(crypto, utf8EncodeToBuffer(password), algo.salt1, algo.salt2),\n    ])\n    const k = bufferToBigInt(_k)\n    const u = bufferToBigInt(_u)\n    const x = bufferToBigInt(_x)\n\n    const v = g.modPow(x, p)\n    const kV = k.multiply(v).mod(p)\n\n    let t = gB.minus(kV).mod(p)\n    if (t.isNegative()) t = t.plus(p)\n    const sA = t.modPow(a.plus(u.multiply(x)), p)\n    const _kA = await H(bigIntToBuffer(sA, 256))\n\n    const _M1 = await H(\n        concatBuffers([\n            xorBuffer(await H(algo.p), await H(_g)),\n            await H(algo.salt1),\n            await H(algo.salt2),\n            _gA,\n            request.srpB,\n            _kA,\n        ]),\n    )\n\n    return {\n        _: 'inputCheckPasswordSRP',\n        srpId: request.srpId,\n        A: _gA,\n        M1: _M1,\n    }\n}\n"]}

package/esm/utils/crypto/subtle.d.ts

@@ -0,0 +1,12 @@
+import { MaybeAsync } from '../../index.js';
+import { BaseCryptoProvider, ICryptoProvider, IEncryptionScheme } from './abstract.js';
+export declare class SubtleCryptoProvider extends BaseCryptoProvider implements ICryptoProvider {
+    readonly subtle: SubtleCrypto;
+    constructor(subtle: SubtleCrypto);
+    sha1(data: Uint8Array): MaybeAsync<Uint8Array>;
+    sha256(data: Uint8Array): MaybeAsync<Uint8Array>;
+    pbkdf2(password: Uint8Array, salt: Uint8Array, iterations: number, keylen?: number | undefined, algo?: string | undefined): Promise<Uint8Array>;
+    hmacSha256(data: Uint8Array, key: Uint8Array): Promise<Uint8Array>;
+    createAesCtr(key: Uint8Array, iv: Uint8Array): IEncryptionScheme;
+    createAesEcb(key: Uint8Array): IEncryptionScheme;
+}

package/esm/utils/crypto/subtle.js

@@ -0,0 +1,59 @@
+import { BaseCryptoProvider } from './abstract.js';
+import AES_, { CTR } from '@cryptography/aes';
+const AES = 'default' in AES_ ? AES_.default : AES_;
+const ALGO_TO_SUBTLE = {
+    sha256: 'SHA-256',
+    sha1: 'SHA-1',
+    sha512: 'SHA-512',
+};
+function wordsToBytes(words) {
+    const o = new Uint8Array(words.byteLength);
+    const len = words.length * 4;
+    for (let i = 0; i < len; ++i) {
+        o[i] = ((words[i >>> 2] >>> (24 - (i % 4) * 8)) & 0xff);
+    }
+    return o;
+}
+export class SubtleCryptoProvider extends BaseCryptoProvider {
+    constructor(subtle) {
+        super();
+        this.subtle = subtle;
+    }
+    sha1(data) {
+        return this.subtle.digest('SHA-1', data).then((result) => new Uint8Array(result));
+    }
+    sha256(data) {
+        return this.subtle.digest('SHA-256', data).then((result) => new Uint8Array(result));
+    }
+    async pbkdf2(password, salt, iterations, keylen, algo) {
+        const keyMaterial = await this.subtle.importKey('raw', password, 'PBKDF2', false, ['deriveBits']);
+        return this.subtle
+            .deriveBits({
+            name: 'PBKDF2',
+            salt,
+            iterations,
+            hash: algo ? ALGO_TO_SUBTLE[algo] : 'SHA-512',
+        }, keyMaterial, (keylen || 64) * 8)
+            .then((result) => new Uint8Array(result));
+    }
+    async hmacSha256(data, key) {
+        const keyMaterial = await this.subtle.importKey('raw', key, { name: 'HMAC', hash: { name: 'SHA-256' } }, false, ['sign']);
+        const res = await this.subtle.sign({ name: 'HMAC' }, keyMaterial, data);
+        return new Uint8Array(res);
+    }
+    createAesCtr(key, iv) {
+        const aes = new CTR(key, iv);
+        return {
+            encrypt: (data) => wordsToBytes(aes.encrypt(data)),
+            decrypt: (data) => wordsToBytes(aes.decrypt(data)),
+        };
+    }
+    createAesEcb(key) {
+        const aes = new AES(key);
+        return {
+            encrypt: (data) => wordsToBytes(aes.encrypt(data)),
+            decrypt: (data) => wordsToBytes(aes.decrypt(data)),
+        };
+    }
+}
+//# sourceMappingURL=subtle.js.map

package/esm/utils/crypto/subtle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subtle.js","sourceRoot":"","sources":["../../../../src/utils/crypto/subtle.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAsC,MAAM,eAAe,CAAA;AAEtF,OAAO,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAK7C,MAAM,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAY,CAAA;AAE3D,MAAM,cAAc,GAA2B;IAC3C,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,SAAS;CACpB,CAAA;AAED,SAAS,YAAY,CAAC,KAAkB;IACpC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAE1C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,EAAE,CAAC,EAAE;QAC1B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;KAC1D;IAED,OAAO,CAAC,CAAA;AACZ,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,kBAAkB;IACxD,YACa,MAAoB;QAE7B,KAAK,EAAE,CAAA;QAFE,WAAM,GAAN,MAAM,CAAc;IAGjC,CAAC;IAED,IAAI,CAAC,IAAgB;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,CAAC,IAAgB;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IACvF,CAAC;IAED,KAAK,CAAC,MAAM,CACR,QAAoB,EACpB,IAAgB,EAChB,UAAkB,EAClB,MAA2B,EAC3B,IAAyB;QAEzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;QAEjG,OAAO,IAAI,CAAC,MAAM;aACb,UAAU,CACP;YACI,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,UAAU;YACV,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAChD,EACD,WAAW,EACX,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CACrB;aACA,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAgB,EAAE,GAAe;QAC9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAC3C,KAAK,EACL,GAAG,EACH,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAC3C,KAAK,EACL,CAAC,MAAM,CAAC,CACX,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;QAEvE,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,YAAY,CAAC,GAAe,EAAE,EAAc;QACxC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAE5B,OAAO;YACH,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SACrD,CAAA;IACL,CAAC;IAED,YAAY,CAAC,GAAe;QACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAExB,OAAO;YACH,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SACrD,CAAA;IACL,CAAC;CACJ","sourcesContent":["import { MaybeAsync } from '../../index.js'\nimport { BaseCryptoProvider, ICryptoProvider, IEncryptionScheme } from './abstract.js'\n\nimport AES_, { CTR } from '@cryptography/aes'\n\n// fucking weird flex with es modules.\n// i hate default imports please for the love of god never use them\ntype AES_ = typeof AES_.default\nconst AES = 'default' in AES_ ? AES_.default : AES_ as AES_\n\nconst ALGO_TO_SUBTLE: Record<string, string> = {\n    sha256: 'SHA-256',\n    sha1: 'SHA-1',\n    sha512: 'SHA-512',\n}\n\nfunction wordsToBytes(words: Uint32Array): Uint8Array {\n    const o = new Uint8Array(words.byteLength)\n\n    const len = words.length * 4\n\n    for (let i = 0; i < len; ++i) {\n        o[i] = ((words[i >>> 2] >>> (24 - (i % 4) * 8)) & 0xff)\n    }\n\n    return o\n}\n\nexport class SubtleCryptoProvider extends BaseCryptoProvider implements ICryptoProvider {\n    constructor(\n        readonly subtle: SubtleCrypto,\n    ) {\n        super()\n    }\n\n    sha1(data: Uint8Array): MaybeAsync<Uint8Array> {\n        return this.subtle.digest('SHA-1', data).then((result) => new Uint8Array(result))\n    }\n\n    sha256(data: Uint8Array): MaybeAsync<Uint8Array> {\n        return this.subtle.digest('SHA-256', data).then((result) => new Uint8Array(result))\n    }\n\n    async pbkdf2(\n        password: Uint8Array,\n        salt: Uint8Array,\n        iterations: number,\n        keylen?: number | undefined,\n        algo?: string | undefined,\n    ): Promise<Uint8Array> {\n        const keyMaterial = await this.subtle.importKey('raw', password, 'PBKDF2', false, ['deriveBits'])\n\n        return this.subtle\n            .deriveBits(\n                {\n                    name: 'PBKDF2',\n                    salt,\n                    iterations,\n                    hash: algo ? ALGO_TO_SUBTLE[algo] : 'SHA-512',\n                },\n                keyMaterial,\n                (keylen || 64) * 8,\n            )\n            .then((result) => new Uint8Array(result))\n    }\n\n    async hmacSha256(data: Uint8Array, key: Uint8Array): Promise<Uint8Array> {\n        const keyMaterial = await this.subtle.importKey(\n            'raw',\n            key,\n            { name: 'HMAC', hash: { name: 'SHA-256' } },\n            false,\n            ['sign'],\n        )\n\n        const res = await this.subtle.sign({ name: 'HMAC' }, keyMaterial, data)\n\n        return new Uint8Array(res)\n    }\n\n    createAesCtr(key: Uint8Array, iv: Uint8Array): IEncryptionScheme {\n        const aes = new CTR(key, iv)\n\n        return {\n            encrypt: (data) => wordsToBytes(aes.encrypt(data)),\n            decrypt: (data) => wordsToBytes(aes.decrypt(data)),\n        }\n    }\n\n    createAesEcb(key: Uint8Array): IEncryptionScheme {\n        const aes = new AES(key)\n\n        return {\n            encrypt: (data) => wordsToBytes(aes.encrypt(data)),\n            decrypt: (data) => wordsToBytes(aes.decrypt(data)),\n        }\n    }\n}\n"]}

package/esm/utils/crypto/utils.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Perform XOR operation on two buffers and return the new buffer
+ *
+ * @param data  Buffer to XOR
+ * @param key  Key to XOR with
+ */
+export declare function xorBuffer(data: Uint8Array, key: Uint8Array): Uint8Array;
+/**
+ * Perform XOR operation on two buffers in-place
+ *
+ * @param data  Buffer to XOR
+ * @param key  Key to XOR with
+ */
+export declare function xorBufferInPlace(data: Uint8Array, key: Uint8Array): void;

package/esm/utils/crypto/utils.js

@@ -0,0 +1,25 @@
+/**
+ * Perform XOR operation on two buffers and return the new buffer
+ *
+ * @param data  Buffer to XOR
+ * @param key  Key to XOR with
+ */
+export function xorBuffer(data, key) {
+    const ret = new Uint8Array(data.length);
+    for (let i = 0; i < data.length; i++) {
+        ret[i] = data[i] ^ key[i];
+    }
+    return ret;
+}
+/**
+ * Perform XOR operation on two buffers in-place
+ *
+ * @param data  Buffer to XOR
+ * @param key  Key to XOR with
+ */
+export function xorBufferInPlace(data, key) {
+    for (let i = 0; i < data.length; i++) {
+        data[i] ^= key[i];
+    }
+}
+//# sourceMappingURL=utils.js.map

package/esm/utils/crypto/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../src/utils/crypto/utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,IAAgB,EAAE,GAAe;IACvD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAEvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAClC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;KAC5B;IAED,OAAO,GAAG,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgB,EAAE,GAAe;IAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAA;KACpB;AACL,CAAC","sourcesContent":["/**\n * Perform XOR operation on two buffers and return the new buffer\n *\n * @param data  Buffer to XOR\n * @param key  Key to XOR with\n */\nexport function xorBuffer(data: Uint8Array, key: Uint8Array): Uint8Array {\n    const ret = new Uint8Array(data.length)\n\n    for (let i = 0; i < data.length; i++) {\n        ret[i] = data[i] ^ key[i]\n    }\n\n    return ret\n}\n\n/**\n * Perform XOR operation on two buffers in-place\n *\n * @param data  Buffer to XOR\n * @param key  Key to XOR with\n */\nexport function xorBufferInPlace(data: Uint8Array, key: Uint8Array): void {\n    for (let i = 0; i < data.length; i++) {\n        data[i] ^= key[i]\n    }\n}\n"]}

package/esm/utils/default-dcs.d.ts

@@ -0,0 +1,7 @@
+import { ITelegramStorage } from '../storage/abstract.js';
+export declare const defaultDcs: {
+    readonly defaultTestDc: ITelegramStorage.DcOptions;
+    readonly defaultTestIpv6Dc: ITelegramStorage.DcOptions;
+    readonly defaultProductionDc: ITelegramStorage.DcOptions;
+    readonly defaultProductionIpv6Dc: ITelegramStorage.DcOptions;
+};