@mysten/seal 0.4.2 → 0.4.4

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @mysten/seal
 
+## 0.4.4
+
+### Patch Changes
+
+- ee1bfd8: Better handling of weighted/duplicate key servers.
+- 5264038: expose ZkLoginCompatibleClient, use ZkLoginCompatibleClient for SessionKey constructor
+- Updated dependencies [2456052]
+- Updated dependencies [5264038]
+- Updated dependencies [2456052]
+- Updated dependencies [2456052]
+- Updated dependencies [2456052]
+- Updated dependencies [2456052]
+  - @mysten/sui@1.30.0
+
+## 0.4.3
+
+### Patch Changes
+
+- d3f0e8d: Export SessionKeyType
+
 ## 0.4.2
 
 ### Patch Changes

package/dist/cjs/bls12381.d.ts

@@ -2,6 +2,7 @@ import type { Fp2, Fp12 } from '@noble/curves/abstract/tower';
 import type { ProjPointType } from '@noble/curves/abstract/weierstrass';
 export declare class G1Element {
     point: ProjPointType<bigint>;
+    static readonly SIZE = 48;
     constructor(point: ProjPointType<bigint>);
     static generator(): G1Element;
     static fromBytes(bytes: Uint8Array): G1Element;
@@ -14,6 +15,7 @@ export declare class G1Element {
 }
 export declare class G2Element {
     point: ProjPointType<Fp2>;
+    static readonly SIZE = 96;
     constructor(point: ProjPointType<Fp2>);
     static generator(): G2Element;
     static fromBytes(bytes: Uint8Array): G2Element;
@@ -24,11 +26,14 @@ export declare class G2Element {
 }
 export declare class GTElement {
     element: Fp12;
+    static readonly SIZE = 576;
     constructor(element: Fp12);
     toBytes(): Uint8Array;
+    equals(other: GTElement): boolean;
 }
 export declare class Scalar {
     scalar: bigint;
+    static readonly SIZE = 32;
     constructor(scalar: bigint);
     static random(): Scalar;
     toBytes(): Uint8Array;

package/dist/cjs/bls12381.js

@@ -26,85 +26,100 @@ __export(bls12381_exports, {
 module.exports = __toCommonJS(bls12381_exports);
 var import_bcs = require("@mysten/bcs");
 var import_bls12_381 = require("@noble/curves/bls12-381");
-class G1Element {
+var import_utils = require("./utils.js");
+const _G1Element = class _G1Element {
   constructor(point) {
     this.point = point;
   }
   static generator() {
-    return new G1Element(import_bls12_381.bls12_381.G1.ProjectivePoint.BASE);
+    return new _G1Element(import_bls12_381.bls12_381.G1.ProjectivePoint.BASE);
   }
   static fromBytes(bytes) {
-    return new G1Element(import_bls12_381.bls12_381.G1.ProjectivePoint.fromHex((0, import_bcs.toHex)(bytes)));
+    return new _G1Element(import_bls12_381.bls12_381.G1.ProjectivePoint.fromHex((0, import_bcs.toHex)(bytes)));
   }
   toBytes() {
     return this.point.toRawBytes();
   }
   multiply(scalar) {
-    return new G1Element(this.point.multiply(scalar.scalar));
+    return new _G1Element(this.point.multiply(scalar.scalar));
   }
   add(other) {
-    return new G1Element(this.point.add(other.point));
+    return new _G1Element(this.point.add(other.point));
   }
   subtract(other) {
-    return new G1Element(this.point.subtract(other.point));
+    return new _G1Element(this.point.subtract(other.point));
   }
   static hashToCurve(data) {
-    return new G1Element(
+    return new _G1Element(
       import_bls12_381.bls12_381.G1.ProjectivePoint.fromAffine(import_bls12_381.bls12_381.G1.hashToCurve(data).toAffine())
     );
   }
   pairing(other) {
     return new GTElement(import_bls12_381.bls12_381.pairing(this.point, other.point));
   }
-}
-class G2Element {
+};
+_G1Element.SIZE = 48;
+let G1Element = _G1Element;
+const _G2Element = class _G2Element {
   constructor(point) {
     this.point = point;
   }
   static generator() {
-    return new G2Element(import_bls12_381.bls12_381.G2.ProjectivePoint.BASE);
+    return new _G2Element(import_bls12_381.bls12_381.G2.ProjectivePoint.BASE);
   }
   static fromBytes(bytes) {
-    return new G2Element(import_bls12_381.bls12_381.G2.ProjectivePoint.fromHex((0, import_bcs.toHex)(bytes)));
+    return new _G2Element(import_bls12_381.bls12_381.G2.ProjectivePoint.fromHex((0, import_bcs.toHex)(bytes)));
   }
   toBytes() {
     return this.point.toRawBytes();
   }
   multiply(scalar) {
-    return new G2Element(this.point.multiply(scalar.scalar));
+    return new _G2Element(this.point.multiply(scalar.scalar));
   }
   add(other) {
-    return new G2Element(this.point.add(other.point));
+    return new _G2Element(this.point.add(other.point));
   }
   hashToCurve(data) {
-    return new G2Element(
+    return new _G2Element(
       import_bls12_381.bls12_381.G2.ProjectivePoint.fromAffine(import_bls12_381.bls12_381.G2.hashToCurve(data).toAffine())
     );
   }
-}
-class GTElement {
+};
+_G2Element.SIZE = 96;
+let G2Element = _G2Element;
+const _GTElement = class _GTElement {
   constructor(element) {
     this.element = element;
   }
   toBytes() {
-    return import_bls12_381.bls12_381.fields.Fp12.toBytes(this.element);
+    const P = [0, 3, 1, 4, 2, 5];
+    const PAIR_SIZE = _GTElement.SIZE / P.length;
+    const bytes = import_bls12_381.bls12_381.fields.Fp12.toBytes(this.element);
+    return (0, import_utils.flatten)(P.map((p) => bytes.subarray(p * PAIR_SIZE, (p + 1) * PAIR_SIZE)));
+  }
+  equals(other) {
+    return import_bls12_381.bls12_381.fields.Fp12.eql(this.element, other.element);
   }
-}
-class Scalar {
+};
+_GTElement.SIZE = 576;
+let GTElement = _GTElement;
+const _Scalar = class _Scalar {
   constructor(scalar) {
     this.scalar = scalar;
   }
   static random() {
-    return Scalar.fromBytes(import_bls12_381.bls12_381.utils.randomPrivateKey());
+    return _Scalar.fromBytes(import_bls12_381.bls12_381.utils.randomPrivateKey());
   }
   toBytes() {
     return new Uint8Array(import_bls12_381.bls12_381.fields.Fr.toBytes(this.scalar));
   }
   static fromBytes(bytes) {
-    return new Scalar(import_bls12_381.bls12_381.fields.Fr.fromBytes(bytes));
+    return new _Scalar(import_bls12_381.bls12_381.fields.Fr.fromBytes(bytes));
   }
   static fromNumber(num) {
-    return new Scalar(BigInt(num));
+    return new _Scalar(BigInt(num));
   }
-}
+};
+_Scalar.SIZE = 32;
+let Scalar = _Scalar;
 //# sourceMappingURL=bls12381.js.map

package/dist/cjs/bls12381.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/bls12381.ts"],
-  "sourcesContent": ["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { toHex } from '@mysten/bcs';\nimport type { Fp2, Fp12 } from '@noble/curves/abstract/tower';\nimport type { ProjPointType } from '@noble/curves/abstract/weierstrass';\nimport { bls12_381 } from '@noble/curves/bls12-381';\n\nexport class G1Element {\n\tpoint: ProjPointType<bigint>;\n\n\tconstructor(point: ProjPointType<bigint>) {\n\t\tthis.point = point;\n\t}\n\n\tstatic generator(): G1Element {\n\t\treturn new G1Element(bls12_381.G1.ProjectivePoint.BASE);\n\t}\n\n\tstatic fromBytes(bytes: Uint8Array): G1Element {\n\t\treturn new G1Element(bls12_381.G1.ProjectivePoint.fromHex(toHex(bytes)));\n\t}\n\n\ttoBytes(): Uint8Array {\n\t\treturn this.point.toRawBytes();\n\t}\n\n\tmultiply(scalar: Scalar): G1Element {\n\t\treturn new G1Element(this.point.multiply(scalar.scalar));\n\t}\n\n\tadd(other: G1Element): G1Element {\n\t\treturn new G1Element(this.point.add(other.point));\n\t}\n\n\tsubtract(other: G1Element): G1Element {\n\t\treturn new G1Element(this.point.subtract(other.point));\n\t}\n\n\tstatic hashToCurve(data: Uint8Array): G1Element {\n\t\treturn new G1Element(\n\t\t\tbls12_381.G1.ProjectivePoint.fromAffine(bls12_381.G1.hashToCurve(data).toAffine()),\n\t\t);\n\t}\n\n\tpairing(other: G2Element): GTElement {\n\t\treturn new GTElement(bls12_381.pairing(this.point, other.point));\n\t}\n}\n\nexport class G2Element {\n\tpoint: ProjPointType<Fp2>;\n\n\tconstructor(point: ProjPointType<Fp2>) {\n\t\tthis.point = point;\n\t}\n\n\tstatic generator(): G2Element {\n\t\treturn new G2Element(bls12_381.G2.ProjectivePoint.BASE);\n\t}\n\n\tstatic fromBytes(bytes: Uint8Array): G2Element {\n\t\treturn new G2Element(bls12_381.G2.ProjectivePoint.fromHex(toHex(bytes)));\n\t}\n\n\ttoBytes(): Uint8Array {\n\t\treturn this.point.toRawBytes();\n\t}\n\n\tmultiply(scalar: Scalar): G2Element {\n\t\treturn new G2Element(this.point.multiply(scalar.scalar));\n\t}\n\n\tadd(other: G2Element): G2Element {\n\t\treturn new G2Element(this.point.add(other.point));\n\t}\n\n\thashToCurve(data: Uint8Array): G2Element {\n\t\treturn new G2Element(\n\t\t\tbls12_381.G2.ProjectivePoint.fromAffine(bls12_381.G2.hashToCurve(data).toAffine()),\n\t\t);\n\t}\n}\n\nexport class GTElement {\n\telement: Fp12;\n\n\tconstructor(element: Fp12) {\n\t\tthis.element = element;\n\t}\n\n\ttoBytes(): Uint8Array {\n\t\treturn bls12_381.fields.Fp12.toBytes(this.element);\n\t}\n}\n\nexport class Scalar {\n\tscalar: bigint;\n\n\tconstructor(scalar: bigint) {\n\t\tthis.scalar = scalar;\n\t}\n\n\tstatic random(): Scalar {\n\t\treturn Scalar.fromBytes(bls12_381.utils.randomPrivateKey());\n\t}\n\n\ttoBytes(): Uint8Array {\n\t\treturn new Uint8Array(bls12_381.fields.Fr.toBytes(this.scalar));\n\t}\n\n\tstatic fromBytes(bytes: Uint8Array): Scalar {\n\t\treturn new Scalar(bls12_381.fields.Fr.fromBytes(bytes));\n\t}\n\n\tstatic fromNumber(num: number): Scalar {\n\t\treturn new Scalar(BigInt(num));\n\t}\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,iBAAsB;AAGtB,uBAA0B;AAEnB,MAAM,UAAU;AAAA,EAGtB,YAAY,OAA8B;AACzC,SAAK,QAAQ;AAAA,EACd;AAAA,EAEA,OAAO,YAAuB;AAC7B,WAAO,IAAI,UAAU,2BAAU,GAAG,gBAAgB,IAAI;AAAA,EACvD;AAAA,EAEA,OAAO,UAAU,OAA8B;AAC9C,WAAO,IAAI,UAAU,2BAAU,GAAG,gBAAgB,YAAQ,kBAAM,KAAK,CAAC,CAAC;AAAA,EACxE;AAAA,EAEA,UAAsB;AACrB,WAAO,KAAK,MAAM,WAAW;AAAA,EAC9B;AAAA,EAEA,SAAS,QAA2B;AACnC,WAAO,IAAI,UAAU,KAAK,MAAM,SAAS,OAAO,MAAM,CAAC;AAAA,EACxD;AAAA,EAEA,IAAI,OAA6B;AAChC,WAAO,IAAI,UAAU,KAAK,MAAM,IAAI,MAAM,KAAK,CAAC;AAAA,EACjD;AAAA,EAEA,SAAS,OAA6B;AACrC,WAAO,IAAI,UAAU,KAAK,MAAM,SAAS,MAAM,KAAK,CAAC;AAAA,EACtD;AAAA,EAEA,OAAO,YAAY,MAA6B;AAC/C,WAAO,IAAI;AAAA,MACV,2BAAU,GAAG,gBAAgB,WAAW,2BAAU,GAAG,YAAY,IAAI,EAAE,SAAS,CAAC;AAAA,IAClF;AAAA,EACD;AAAA,EAEA,QAAQ,OAA6B;AACpC,WAAO,IAAI,UAAU,2BAAU,QAAQ,KAAK,OAAO,MAAM,KAAK,CAAC;AAAA,EAChE;AACD;AAEO,MAAM,UAAU;AAAA,EAGtB,YAAY,OAA2B;AACtC,SAAK,QAAQ;AAAA,EACd;AAAA,EAEA,OAAO,YAAuB;AAC7B,WAAO,IAAI,UAAU,2BAAU,GAAG,gBAAgB,IAAI;AAAA,EACvD;AAAA,EAEA,OAAO,UAAU,OAA8B;AAC9C,WAAO,IAAI,UAAU,2BAAU,GAAG,gBAAgB,YAAQ,kBAAM,KAAK,CAAC,CAAC;AAAA,EACxE;AAAA,EAEA,UAAsB;AACrB,WAAO,KAAK,MAAM,WAAW;AAAA,EAC9B;AAAA,EAEA,SAAS,QAA2B;AACnC,WAAO,IAAI,UAAU,KAAK,MAAM,SAAS,OAAO,MAAM,CAAC;AAAA,EACxD;AAAA,EAEA,IAAI,OAA6B;AAChC,WAAO,IAAI,UAAU,KAAK,MAAM,IAAI,MAAM,KAAK,CAAC;AAAA,EACjD;AAAA,EAEA,YAAY,MAA6B;AACxC,WAAO,IAAI;AAAA,MACV,2BAAU,GAAG,gBAAgB,WAAW,2BAAU,GAAG,YAAY,IAAI,EAAE,SAAS,CAAC;AAAA,IAClF;AAAA,EACD;AACD;AAEO,MAAM,UAAU;AAAA,EAGtB,YAAY,SAAe;AAC1B,SAAK,UAAU;AAAA,EAChB;AAAA,EAEA,UAAsB;AACrB,WAAO,2BAAU,OAAO,KAAK,QAAQ,KAAK,OAAO;AAAA,EAClD;AACD;AAEO,MAAM,OAAO;AAAA,EAGnB,YAAY,QAAgB;AAC3B,SAAK,SAAS;AAAA,EACf;AAAA,EAEA,OAAO,SAAiB;AACvB,WAAO,OAAO,UAAU,2BAAU,MAAM,iBAAiB,CAAC;AAAA,EAC3D;AAAA,EAEA,UAAsB;AACrB,WAAO,IAAI,WAAW,2BAAU,OAAO,GAAG,QAAQ,KAAK,MAAM,CAAC;AAAA,EAC/D;AAAA,EAEA,OAAO,UAAU,OAA2B;AAC3C,WAAO,IAAI,OAAO,2BAAU,OAAO,GAAG,UAAU,KAAK,CAAC;AAAA,EACvD;AAAA,EAEA,OAAO,WAAW,KAAqB;AACtC,WAAO,IAAI,OAAO,OAAO,GAAG,CAAC;AAAA,EAC9B;AACD;",
+  "sourcesContent": ["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { toHex } from '@mysten/bcs';\nimport type { Fp2, Fp12 } from '@noble/curves/abstract/tower';\nimport type { ProjPointType } from '@noble/curves/abstract/weierstrass';\nimport { bls12_381 } from '@noble/curves/bls12-381';\nimport { flatten } from './utils.js';\n\nexport class G1Element {\n\tpoint: ProjPointType<bigint>;\n\n\tpublic static readonly SIZE = 48;\n\n\tconstructor(point: ProjPointType<bigint>) {\n\t\tthis.point = point;\n\t}\n\n\tstatic generator(): G1Element {\n\t\treturn new G1Element(bls12_381.G1.ProjectivePoint.BASE);\n\t}\n\n\tstatic fromBytes(bytes: Uint8Array): G1Element {\n\t\treturn new G1Element(bls12_381.G1.ProjectivePoint.fromHex(toHex(bytes)));\n\t}\n\n\ttoBytes(): Uint8Array {\n\t\treturn this.point.toRawBytes();\n\t}\n\n\tmultiply(scalar: Scalar): G1Element {\n\t\treturn new G1Element(this.point.multiply(scalar.scalar));\n\t}\n\n\tadd(other: G1Element): G1Element {\n\t\treturn new G1Element(this.point.add(other.point));\n\t}\n\n\tsubtract(other: G1Element): G1Element {\n\t\treturn new G1Element(this.point.subtract(other.point));\n\t}\n\n\tstatic hashToCurve(data: Uint8Array): G1Element {\n\t\treturn new G1Element(\n\t\t\tbls12_381.G1.ProjectivePoint.fromAffine(bls12_381.G1.hashToCurve(data).toAffine()),\n\t\t);\n\t}\n\n\tpairing(other: G2Element): GTElement {\n\t\treturn new GTElement(bls12_381.pairing(this.point, other.point));\n\t}\n}\n\nexport class G2Element {\n\tpoint: ProjPointType<Fp2>;\n\n\tpublic static readonly SIZE = 96;\n\n\tconstructor(point: ProjPointType<Fp2>) {\n\t\tthis.point = point;\n\t}\n\n\tstatic generator(): G2Element {\n\t\treturn new G2Element(bls12_381.G2.ProjectivePoint.BASE);\n\t}\n\n\tstatic fromBytes(bytes: Uint8Array): G2Element {\n\t\treturn new G2Element(bls12_381.G2.ProjectivePoint.fromHex(toHex(bytes)));\n\t}\n\n\ttoBytes(): Uint8Array {\n\t\treturn this.point.toRawBytes();\n\t}\n\n\tmultiply(scalar: Scalar): G2Element {\n\t\treturn new G2Element(this.point.multiply(scalar.scalar));\n\t}\n\n\tadd(other: G2Element): G2Element {\n\t\treturn new G2Element(this.point.add(other.point));\n\t}\n\n\thashToCurve(data: Uint8Array): G2Element {\n\t\treturn new G2Element(\n\t\t\tbls12_381.G2.ProjectivePoint.fromAffine(bls12_381.G2.hashToCurve(data).toAffine()),\n\t\t);\n\t}\n}\n\nexport class GTElement {\n\telement: Fp12;\n\n\tpublic static readonly SIZE = 576;\n\n\tconstructor(element: Fp12) {\n\t\tthis.element = element;\n\t}\n\n\ttoBytes(): Uint8Array {\n\t\t// This permutation reorders the 6 pairs of coefficients of the GT element for compatability with the Rust and Move implementations.\n\t\t//\n\t\t// The permutation P may be computed as:\n\t\t// for i in 0..3 {\n\t\t//   for j in 0..2 {\n\t\t//     P[2 * i + j] = i + 3 * j;\n\t\t//   }\n\t\t// }\n\t\tconst P = [0, 3, 1, 4, 2, 5];\n\t\tconst PAIR_SIZE = GTElement.SIZE / P.length;\n\n\t\tconst bytes = bls12_381.fields.Fp12.toBytes(this.element);\n\t\treturn flatten(P.map((p) => bytes.subarray(p * PAIR_SIZE, (p + 1) * PAIR_SIZE)));\n\t}\n\n\tequals(other: GTElement): boolean {\n\t\treturn bls12_381.fields.Fp12.eql(this.element, other.element);\n\t}\n}\n\nexport class Scalar {\n\tscalar: bigint;\n\n\tpublic static readonly SIZE = 32;\n\n\tconstructor(scalar: bigint) {\n\t\tthis.scalar = scalar;\n\t}\n\n\tstatic random(): Scalar {\n\t\treturn Scalar.fromBytes(bls12_381.utils.randomPrivateKey());\n\t}\n\n\ttoBytes(): Uint8Array {\n\t\treturn new Uint8Array(bls12_381.fields.Fr.toBytes(this.scalar));\n\t}\n\n\tstatic fromBytes(bytes: Uint8Array): Scalar {\n\t\treturn new Scalar(bls12_381.fields.Fr.fromBytes(bytes));\n\t}\n\n\tstatic fromNumber(num: number): Scalar {\n\t\treturn new Scalar(BigInt(num));\n\t}\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,iBAAsB;AAGtB,uBAA0B;AAC1B,mBAAwB;AAEjB,MAAM,aAAN,MAAM,WAAU;AAAA,EAKtB,YAAY,OAA8B;AACzC,SAAK,QAAQ;AAAA,EACd;AAAA,EAEA,OAAO,YAAuB;AAC7B,WAAO,IAAI,WAAU,2BAAU,GAAG,gBAAgB,IAAI;AAAA,EACvD;AAAA,EAEA,OAAO,UAAU,OAA8B;AAC9C,WAAO,IAAI,WAAU,2BAAU,GAAG,gBAAgB,YAAQ,kBAAM,KAAK,CAAC,CAAC;AAAA,EACxE;AAAA,EAEA,UAAsB;AACrB,WAAO,KAAK,MAAM,WAAW;AAAA,EAC9B;AAAA,EAEA,SAAS,QAA2B;AACnC,WAAO,IAAI,WAAU,KAAK,MAAM,SAAS,OAAO,MAAM,CAAC;AAAA,EACxD;AAAA,EAEA,IAAI,OAA6B;AAChC,WAAO,IAAI,WAAU,KAAK,MAAM,IAAI,MAAM,KAAK,CAAC;AAAA,EACjD;AAAA,EAEA,SAAS,OAA6B;AACrC,WAAO,IAAI,WAAU,KAAK,MAAM,SAAS,MAAM,KAAK,CAAC;AAAA,EACtD;AAAA,EAEA,OAAO,YAAY,MAA6B;AAC/C,WAAO,IAAI;AAAA,MACV,2BAAU,GAAG,gBAAgB,WAAW,2BAAU,GAAG,YAAY,IAAI,EAAE,SAAS,CAAC;AAAA,IAClF;AAAA,EACD;AAAA,EAEA,QAAQ,OAA6B;AACpC,WAAO,IAAI,UAAU,2BAAU,QAAQ,KAAK,OAAO,MAAM,KAAK,CAAC;AAAA,EAChE;AACD;AA1Ca,WAGW,OAAO;AAHxB,IAAM,YAAN;AA4CA,MAAM,aAAN,MAAM,WAAU;AAAA,EAKtB,YAAY,OAA2B;AACtC,SAAK,QAAQ;AAAA,EACd;AAAA,EAEA,OAAO,YAAuB;AAC7B,WAAO,IAAI,WAAU,2BAAU,GAAG,gBAAgB,IAAI;AAAA,EACvD;AAAA,EAEA,OAAO,UAAU,OAA8B;AAC9C,WAAO,IAAI,WAAU,2BAAU,GAAG,gBAAgB,YAAQ,kBAAM,KAAK,CAAC,CAAC;AAAA,EACxE;AAAA,EAEA,UAAsB;AACrB,WAAO,KAAK,MAAM,WAAW;AAAA,EAC9B;AAAA,EAEA,SAAS,QAA2B;AACnC,WAAO,IAAI,WAAU,KAAK,MAAM,SAAS,OAAO,MAAM,CAAC;AAAA,EACxD;AAAA,EAEA,IAAI,OAA6B;AAChC,WAAO,IAAI,WAAU,KAAK,MAAM,IAAI,MAAM,KAAK,CAAC;AAAA,EACjD;AAAA,EAEA,YAAY,MAA6B;AACxC,WAAO,IAAI;AAAA,MACV,2BAAU,GAAG,gBAAgB,WAAW,2BAAU,GAAG,YAAY,IAAI,EAAE,SAAS,CAAC;AAAA,IAClF;AAAA,EACD;AACD;AAlCa,WAGW,OAAO;AAHxB,IAAM,YAAN;AAoCA,MAAM,aAAN,MAAM,WAAU;AAAA,EAKtB,YAAY,SAAe;AAC1B,SAAK,UAAU;AAAA,EAChB;AAAA,EAEA,UAAsB;AASrB,UAAM,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AAC3B,UAAM,YAAY,WAAU,OAAO,EAAE;AAErC,UAAM,QAAQ,2BAAU,OAAO,KAAK,QAAQ,KAAK,OAAO;AACxD,eAAO,sBAAQ,EAAE,IAAI,CAAC,MAAM,MAAM,SAAS,IAAI,YAAY,IAAI,KAAK,SAAS,CAAC,CAAC;AAAA,EAChF;AAAA,EAEA,OAAO,OAA2B;AACjC,WAAO,2BAAU,OAAO,KAAK,IAAI,KAAK,SAAS,MAAM,OAAO;AAAA,EAC7D;AACD;AA5Ba,WAGW,OAAO;AAHxB,IAAM,YAAN;AA8BA,MAAM,UAAN,MAAM,QAAO;AAAA,EAKnB,YAAY,QAAgB;AAC3B,SAAK,SAAS;AAAA,EACf;AAAA,EAEA,OAAO,SAAiB;AACvB,WAAO,QAAO,UAAU,2BAAU,MAAM,iBAAiB,CAAC;AAAA,EAC3D;AAAA,EAEA,UAAsB;AACrB,WAAO,IAAI,WAAW,2BAAU,OAAO,GAAG,QAAQ,KAAK,MAAM,CAAC;AAAA,EAC/D;AAAA,EAEA,OAAO,UAAU,OAA2B;AAC3C,WAAO,IAAI,QAAO,2BAAU,OAAO,GAAG,UAAU,KAAK,CAAC;AAAA,EACvD;AAAA,EAEA,OAAO,WAAW,KAAqB;AACtC,WAAO,IAAI,QAAO,OAAO,GAAG,CAAC;AAAA,EAC9B;AACD;AAxBa,QAGW,OAAO;AAHxB,IAAM,SAAN;",
   "names": []
 }

package/dist/cjs/client.d.ts

@@ -1,5 +1,5 @@
 import { DemType, KemType } from './encrypt.js';
-import type { KeyServer } from './key-server.js';
+import type { DerivedKey, KeyServer } from './key-server.js';
 import type { SessionKey } from './session-key.js';
 import type { SealCompatibleClient } from './types.js';
 /**
@@ -11,7 +11,7 @@ import type { SealCompatibleClient } from './types.js';
  * @property timeout: Timeout in milliseconds for network requests. Defaults to 10 seconds.
  */
 export interface SealClientExtensionOptions {
-    serverObjectIds: string[];
+    serverObjectIds: [string, number][];
     verifyKeyServers?: boolean;
     timeout?: number;
 }
@@ -54,8 +54,7 @@ export declare class SealClient {
      * Decrypt the given encrypted bytes using cached keys.
      * Calls fetchKeys in case one or more of the required keys is not cached yet.
      * The function throws an error if the client's key servers are not a subset of
-     * the encrypted object's key servers (including the same weights) or if the
-     * threshold cannot be met.
+     * the encrypted object's key servers or if the threshold cannot be met.
      *
      * @param data - The encrypted bytes to decrypt.
      * @param sessionKey - The session key to use.
@@ -67,11 +66,11 @@ export declare class SealClient {
         sessionKey: SessionKey;
         txBytes: Uint8Array;
     }): Promise<Uint8Array<ArrayBufferLike>>;
-    getKeyServers(): Promise<KeyServer[]>;
+    getKeyServers(): Promise<Map<string, KeyServer>>;
     /**
      * Fetch keys from the key servers and update the cache.
      *
-     * It is recommended to call this function once for all ids of all encrypted obejcts if
+     * It is recommended to call this function once for all ids of all encrypted objects if
      * there are multiple, then call decrypt for each object. This avoids calling fetchKey
      * individually for each decrypt.
      *
@@ -86,4 +85,20 @@ export declare class SealClient {
         sessionKey: SessionKey;
         threshold: number;
     }): Promise<void>;
+    /**
+     * Get derived keys from the given services.
+     *
+     * @param id - The id of the encrypted object.
+     * @param txBytes - The transaction bytes to use (that calls seal_approve* functions).
+     * @param sessionKey - The session key to use.
+     * @param threshold - The threshold.
+     * @returns - Derived keys for the given services that are in the cache as a "service object ID" -> derived key map. If the call is succesful, exactly threshold keys will be returned.
+     */
+    getDerivedKeys({ kemType, id, txBytes, sessionKey, threshold, }: {
+        kemType?: KemType;
+        id: string;
+        txBytes: Uint8Array;
+        sessionKey: SessionKey;
+        threshold: number;
+    }): Promise<Map<string, DerivedKey>>;
 }

package/dist/cjs/client.js

@@ -39,19 +39,24 @@ var import_ibe = require("./ibe.js");
 var import_key_server = require("./key-server.js");
 var import_keys = require("./keys.js");
 var import_utils = require("./utils.js");
-var _suiClient, _serverObjectIds, _verifyKeyServers, _keyServers, _cachedKeys, _timeout, _SealClient_instances, createEncryptionInput_fn, validateEncryptionServices_fn, loadKeyServers_fn;
+var _suiClient, _weights, _keyServers, _verifyKeyServers, _cachedKeys, _timeout, _totalWeight, _SealClient_instances, createEncryptionInput_fn, weight_fn, validateEncryptionServices_fn, getWeightedKeyServers_fn, loadKeyServers_fn;
 const _SealClient = class _SealClient {
   constructor(options) {
     __privateAdd(this, _SealClient_instances);
     __privateAdd(this, _suiClient);
-    __privateAdd(this, _serverObjectIds);
-    __privateAdd(this, _verifyKeyServers);
+    __privateAdd(this, _weights);
     __privateAdd(this, _keyServers, null);
+    __privateAdd(this, _verifyKeyServers);
     // A caching map for: fullId:object_id -> partial key.
     __privateAdd(this, _cachedKeys, /* @__PURE__ */ new Map());
     __privateAdd(this, _timeout);
+    __privateAdd(this, _totalWeight);
     __privateSet(this, _suiClient, options.suiClient);
-    __privateSet(this, _serverObjectIds, options.serverObjectIds);
+    if (new Set(options.serverObjectIds.map(([objectId, _]) => objectId)).size !== options.serverObjectIds.length) {
+      throw new import_error.InvalidClientOptionsError("Duplicate object IDs");
+    }
+    __privateSet(this, _weights, new Map(options.serverObjectIds));
+    __privateSet(this, _totalWeight, options.serverObjectIds.map(([_, weight]) => weight).reduce((sum, term) => sum + term, 0));
     __privateSet(this, _verifyKeyServers, options.verifyKeyServers ?? true);
     __privateSet(this, _timeout, options.timeout ?? 1e4);
   }
@@ -89,7 +94,7 @@ const _SealClient = class _SealClient {
     aad = new Uint8Array()
   }) {
     return (0, import_encrypt.encrypt)({
-      keyServers: await this.getKeyServers(),
+      keyServers: await __privateMethod(this, _SealClient_instances, getWeightedKeyServers_fn).call(this),
       kemType,
       threshold,
       packageId,
@@ -101,8 +106,7 @@ const _SealClient = class _SealClient {
    * Decrypt the given encrypted bytes using cached keys.
    * Calls fetchKeys in case one or more of the required keys is not cached yet.
    * The function throws an error if the client's key servers are not a subset of
-   * the encrypted object's key servers (including the same weights) or if the
-   * threshold cannot be met.
+   * the encrypted object's key servers or if the threshold cannot be met.
    *
    * @param data - The encrypted bytes to decrypt.
    * @param sessionKey - The session key to use.
@@ -136,7 +140,7 @@ const _SealClient = class _SealClient {
   /**
    * Fetch keys from the key servers and update the cache.
    *
-   * It is recommended to call this function once for all ids of all encrypted obejcts if
+   * It is recommended to call this function once for all ids of all encrypted objects if
    * there are multiple, then call decrypt for each object. This avoids calling fetchKey
    * individually for each decrypt.
    *
@@ -151,32 +155,29 @@ const _SealClient = class _SealClient {
     sessionKey,
     threshold
   }) {
-    const keyServers = await this.getKeyServers();
-    if (threshold > keyServers.length || threshold < 1 || keyServers.length < 1) {
+    if (threshold > __privateGet(this, _totalWeight) || threshold < 1) {
       throw new import_error.InvalidThresholdError(
-        `Invalid threshold ${threshold} for ${keyServers.length} servers`
+        `Invalid threshold ${threshold} servers with weights ${__privateGet(this, _weights)}`
       );
     }
-    let completedServerCount = 0;
-    const remainingKeyServers = /* @__PURE__ */ new Set();
+    const keyServers = await this.getKeyServers();
     const fullIds = ids.map((id) => (0, import_utils.createFullId)(import_ibe.DST, sessionKey.getPackageId(), id));
-    for (const server of keyServers) {
-      let hasAllKeys = true;
-      for (const fullId of fullIds) {
-        if (!__privateGet(this, _cachedKeys).has(`${fullId}:${server.objectId}`)) {
-          hasAllKeys = false;
-          remainingKeyServers.add(server);
-          break;
-        }
-      }
-      if (hasAllKeys) {
-        completedServerCount++;
+    let completedWeight = 0;
+    const remainingKeyServers = [];
+    let remainingKeyServersWeight = 0;
+    for (const objectId of keyServers.keys()) {
+      if (fullIds.every((fullId) => __privateGet(this, _cachedKeys).has(`${fullId}:${objectId}`))) {
+        completedWeight += __privateMethod(this, _SealClient_instances, weight_fn).call(this, objectId);
+      } else {
+        remainingKeyServers.push(objectId);
+        remainingKeyServersWeight += __privateMethod(this, _SealClient_instances, weight_fn).call(this, objectId);
       }
     }
-    if (completedServerCount >= threshold) {
+    if (completedWeight >= threshold) {
       return;
     }
-    for (const server of remainingKeyServers) {
+    for (const objectId of remainingKeyServers) {
+      const server = keyServers.get(objectId);
       if (server.keyType !== import_key_server.KeyServerType.BonehFranklinBLS12381) {
         throw new import_error.InvalidKeyServerError(
           `Server ${server.objectId} has invalid key type: ${server.keyType}`
@@ -187,7 +188,8 @@ const _SealClient = class _SealClient {
     const signedRequest = await sessionKey.createRequestParams(txBytes);
     const controller = new AbortController();
     const errors = [];
-    const keyFetches = [...remainingKeyServers].map(async (server) => {
+    const keyFetches = remainingKeyServers.map(async (objectId) => {
+      const server = keyServers.get(objectId);
       try {
         const allKeys = await (0, import_keys.fetchKeysForAllIds)(
           server.url,
@@ -212,11 +214,9 @@ const _SealClient = class _SealClient {
           __privateGet(this, _cachedKeys).set(`${fullId}:${server.objectId}`, keyElement);
           receivedIds.add(fullId);
         }
-        const expectedIds = new Set(fullIds);
-        const hasAllKeys = receivedIds.size === expectedIds.size && [...receivedIds].every((id) => expectedIds.has(id));
-        if (hasAllKeys) {
-          completedServerCount++;
-          if (completedServerCount >= threshold) {
+        if (fullIds.every((fullId) => receivedIds.has(fullId))) {
+          completedWeight += __privateMethod(this, _SealClient_instances, weight_fn).call(this, objectId);
+          if (completedWeight >= threshold) {
             controller.abort();
           }
         }
@@ -224,23 +224,72 @@ const _SealClient = class _SealClient {
         if (!controller.signal.aborted) {
           errors.push(error);
         }
-        if (remainingKeyServers.size - errors.length < threshold - completedServerCount) {
-          controller.abort(error);
+      } finally {
+        remainingKeyServersWeight -= __privateMethod(this, _SealClient_instances, weight_fn).call(this, objectId);
+        if (remainingKeyServersWeight < threshold - completedWeight) {
+          controller.abort(new import_error.TooManyFailedFetchKeyRequestsError());
         }
       }
     });
     await Promise.allSettled(keyFetches);
-    if (completedServerCount < threshold) {
+    if (completedWeight < threshold) {
       throw (0, import_error.toMajorityError)(errors);
     }
   }
+  /**
+   * Get derived keys from the given services.
+   *
+   * @param id - The id of the encrypted object.
+   * @param txBytes - The transaction bytes to use (that calls seal_approve* functions).
+   * @param sessionKey - The session key to use.
+   * @param threshold - The threshold.
+   * @returns - Derived keys for the given services that are in the cache as a "service object ID" -> derived key map. If the call is succesful, exactly threshold keys will be returned.
+   */
+  async getDerivedKeys({
+    kemType = import_encrypt.KemType.BonehFranklinBLS12381DemCCA,
+    id,
+    txBytes,
+    sessionKey,
+    threshold
+  }) {
+    switch (kemType) {
+      case import_encrypt.KemType.BonehFranklinBLS12381DemCCA:
+        const keyServers = await this.getKeyServers();
+        if (threshold > __privateGet(this, _totalWeight)) {
+          throw new import_error.InvalidThresholdError(
+            `Invalid threshold ${threshold} for ${__privateGet(this, _totalWeight)} servers`
+          );
+        }
+        await this.fetchKeys({
+          ids: [id],
+          txBytes,
+          sessionKey,
+          threshold
+        });
+        const fullId = (0, import_utils.createFullId)(import_ibe.DST, sessionKey.getPackageId(), id);
+        const derivedKeys = /* @__PURE__ */ new Map();
+        let weight = 0;
+        for (const objectId of keyServers.keys()) {
+          const cachedKey = __privateGet(this, _cachedKeys).get(`${fullId}:${objectId}`);
+          if (cachedKey) {
+            derivedKeys.set(objectId, new import_key_server.BonehFranklinBLS12381DerivedKey(cachedKey));
+            weight += __privateMethod(this, _SealClient_instances, weight_fn).call(this, objectId);
+            if (weight >= threshold) {
+              break;
+            }
+          }
+        }
+        return derivedKeys;
+    }
+  }
 };
 _suiClient = new WeakMap();
-_serverObjectIds = new WeakMap();
-_verifyKeyServers = new WeakMap();
+_weights = new WeakMap();
 _keyServers = new WeakMap();
+_verifyKeyServers = new WeakMap();
 _cachedKeys = new WeakMap();
 _timeout = new WeakMap();
+_totalWeight = new WeakMap();
 _SealClient_instances = new WeakSet();
 createEncryptionInput_fn = function(type, data, aad) {
   switch (type) {
@@ -250,31 +299,38 @@ createEncryptionInput_fn = function(type, data, aad) {
       return new import_dem.Hmac256Ctr(data, aad);
   }
 };
+weight_fn = function(objectId) {
+  return __privateGet(this, _weights).get(objectId) ?? 0;
+};
 validateEncryptionServices_fn = function(services, threshold) {
-  const serverObjectIdsMap = /* @__PURE__ */ new Map();
-  for (const objectId of __privateGet(this, _serverObjectIds)) {
-    serverObjectIdsMap.set(objectId, (serverObjectIdsMap.get(objectId) ?? 0) + 1);
-  }
-  const servicesMap = /* @__PURE__ */ new Map();
-  for (const service of services) {
-    servicesMap.set(service, (servicesMap.get(service) ?? 0) + 1);
-  }
-  for (const [objectId, count] of serverObjectIdsMap) {
-    if (servicesMap.get(objectId) !== count) {
-      throw new import_error.InconsistentKeyServersError(
-        `Client's key servers must be a subset of the encrypted object's key servers`
-      );
-    }
+  if (services.some((objectId) => {
+    const countInClient = __privateMethod(this, _SealClient_instances, weight_fn).call(this, objectId);
+    return countInClient > 0 && countInClient !== (0, import_utils.count)(services, objectId);
+  })) {
+    throw new import_error.InconsistentKeyServersError(
+      `Client's key servers must be a subset of the encrypted object's key servers`
+    );
   }
-  if (threshold > __privateGet(this, _serverObjectIds).length) {
+  if (threshold > __privateGet(this, _totalWeight)) {
     throw new import_error.InvalidThresholdError(
-      `Invalid threshold ${threshold} for ${__privateGet(this, _serverObjectIds).length} servers`
+      `Invalid threshold ${threshold} for ${__privateGet(this, _totalWeight)} servers`
     );
   }
 };
+getWeightedKeyServers_fn = async function() {
+  const keyServers = await this.getKeyServers();
+  const keyServersWithMultiplicity = [];
+  for (const [objectId, weight] of __privateGet(this, _weights)) {
+    const keyServer = keyServers.get(objectId);
+    for (let i = 0; i < weight; i++) {
+      keyServersWithMultiplicity.push(keyServer);
+    }
+  }
+  return keyServersWithMultiplicity;
+};
 loadKeyServers_fn = async function() {
   const keyServers = await (0, import_key_server.retrieveKeyServers)({
-    objectIds: __privateGet(this, _serverObjectIds),
+    objectIds: [...__privateGet(this, _weights)].map(([objectId]) => objectId),
     client: __privateGet(this, _suiClient)
   });
   if (keyServers.length === 0) {
@@ -289,7 +345,7 @@ loadKeyServers_fn = async function() {
       })
     );
   }
-  return keyServers;
+  return new Map(keyServers.map((server) => [server.objectId, server]));
 };
 let SealClient = _SealClient;
 //# sourceMappingURL=client.js.map