@mysten/seal 0.9.6 → 1.0.0

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # @mysten/seal
 
+## 1.0.0
+
+### Minor Changes
+
+- e00788c: remove asClientExtension static method
+- e00788c: Update to use SuiJsonRpcClient instead of SuiClient
+
+  Updated all type signatures, internal usages, examples, and documentation to use
+  `SuiJsonRpcClient` from `@mysten/sui/jsonRpc` instead of the deprecated `SuiClient` from
+  `@mysten/sui/client`.
+
+### Patch Changes
+
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+- Updated dependencies [e00788c]
+  - @mysten/sui@2.0.0
+  - @mysten/bcs@2.0.0
+
+## 0.10.0
+
+### Minor Changes
+
+- daeecd0: Handle key server v2 and aggregator for a committee of key servers
+
 ## 0.9.6
 
 ### Patch Changes

package/dist/bcs.d.mts

@@ -0,0 +1,40 @@
+import * as _mysten_bcs0 from "@mysten/bcs";
+
+//#region src/bcs.d.ts
+
+/**
+ * The encrypted object format. Should be aligned with the Rust implementation.
+ */
+declare const EncryptedObject: _mysten_bcs0.BcsStruct<{
+  version: _mysten_bcs0.BcsType<number, number, "u8">;
+  packageId: _mysten_bcs0.BcsType<string, string | Uint8Array<ArrayBufferLike>, "bytes[32]">;
+  id: _mysten_bcs0.BcsType<string, string, string>;
+  services: _mysten_bcs0.BcsType<[string, number][], Iterable<readonly [string | Uint8Array<ArrayBufferLike>, number]> & {
+    length: number;
+  }, string>;
+  threshold: _mysten_bcs0.BcsType<number, number, "u8">;
+  encryptedShares: _mysten_bcs0.BcsEnum<{
+    BonehFranklinBLS12381: _mysten_bcs0.BcsStruct<{
+      nonce: _mysten_bcs0.BcsType<Uint8Array<ArrayBufferLike>, Iterable<number>, "bytes[96]">;
+      encryptedShares: _mysten_bcs0.BcsType<Uint8Array<ArrayBufferLike>[], Iterable<Iterable<number>> & {
+        length: number;
+      }, string>;
+      encryptedRandomness: _mysten_bcs0.BcsType<Uint8Array<ArrayBufferLike>, Iterable<number>, "bytes[32]">;
+    }, string>;
+  }, "IBEEncryptions">;
+  ciphertext: _mysten_bcs0.BcsEnum<{
+    Aes256Gcm: _mysten_bcs0.BcsStruct<{
+      blob: _mysten_bcs0.BcsType<Uint8Array<ArrayBufferLike>, Iterable<number>, "vector<u8>">;
+      aad: _mysten_bcs0.BcsType<Uint8Array<ArrayBufferLike> | null, Iterable<number> | null | undefined, "Option<vector<u8>>">;
+    }, string>;
+    Hmac256Ctr: _mysten_bcs0.BcsStruct<{
+      blob: _mysten_bcs0.BcsType<Uint8Array<ArrayBufferLike>, Iterable<number>, "vector<u8>">;
+      aad: _mysten_bcs0.BcsType<Uint8Array<ArrayBufferLike> | null, Iterable<number> | null | undefined, "Option<vector<u8>>">;
+      mac: _mysten_bcs0.BcsType<Uint8Array<ArrayBufferLike>, Iterable<number>, "bytes[32]">;
+    }, string>;
+    Plain: _mysten_bcs0.BcsStruct<{}, string>;
+  }, "Ciphertext">;
+}, string>;
+//#endregion
+export { EncryptedObject };
+//# sourceMappingURL=bcs.d.mts.map

package/dist/bcs.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bcs.d.mts","names":[],"sources":["../src/bcs.ts"],"sourcesContent":[],"mappings":";;;;;;;cA8Ba,8BAAe;WAW1B,YAAA,CAAA"}

package/dist/bcs.mjs

@@ -0,0 +1,89 @@
+import { fromHex, toHex } from "@mysten/bcs";
+import { bcs as bcs$1 } from "@mysten/sui/bcs";
+
+//#region src/bcs.ts
+const IBEEncryptions = bcs$1.enum("IBEEncryptions", { BonehFranklinBLS12381: bcs$1.struct("BonehFranklinBLS12381", {
+	nonce: bcs$1.bytes(96),
+	encryptedShares: bcs$1.vector(bcs$1.bytes(32)),
+	encryptedRandomness: bcs$1.bytes(32)
+}) });
+const Ciphertext = bcs$1.enum("Ciphertext", {
+	Aes256Gcm: bcs$1.struct("Aes256Gcm", {
+		blob: bcs$1.byteVector(),
+		aad: bcs$1.option(bcs$1.byteVector())
+	}),
+	Hmac256Ctr: bcs$1.struct("Hmac256Ctr", {
+		blob: bcs$1.byteVector(),
+		aad: bcs$1.option(bcs$1.byteVector()),
+		mac: bcs$1.bytes(32)
+	}),
+	Plain: bcs$1.struct("Plain", {})
+});
+/**
+* The encrypted object format. Should be aligned with the Rust implementation.
+*/
+const EncryptedObject = bcs$1.struct("EncryptedObject", {
+	version: bcs$1.u8(),
+	packageId: bcs$1.Address,
+	id: bcs$1.byteVector().transform({
+		output: (val) => toHex(val),
+		input: (val) => fromHex(val)
+	}),
+	services: bcs$1.vector(bcs$1.tuple([bcs$1.Address, bcs$1.u8()])),
+	threshold: bcs$1.u8(),
+	encryptedShares: IBEEncryptions,
+	ciphertext: Ciphertext
+});
+/**
+* The Move struct for the KeyServerV1 object.
+*/
+const KeyServerMoveV1 = bcs$1.struct("KeyServerV1", {
+	name: bcs$1.string(),
+	url: bcs$1.string(),
+	keyType: bcs$1.u8(),
+	pk: bcs$1.byteVector()
+});
+/**
+* The Move struct for PartialKeyServer.
+*/
+const PartialKeyServer = bcs$1.struct("PartialKeyServer", {
+	name: bcs$1.string(),
+	url: bcs$1.string(),
+	partialPk: bcs$1.byteVector(),
+	partyId: bcs$1.u16()
+});
+/**
+* The Move enum for ServerType (V2).
+*/
+const ServerType = bcs$1.enum("ServerType", {
+	Independent: bcs$1.struct("Independent", { url: bcs$1.string() }),
+	Committee: bcs$1.struct("Committee", {
+		version: bcs$1.u32(),
+		threshold: bcs$1.u16(),
+		partialKeyServers: bcs$1.vector(bcs$1.struct("VecMapEntry", {
+			key: bcs$1.Address,
+			value: PartialKeyServer
+		}))
+	})
+});
+/**
+* The Move struct for the KeyServerV2 object.
+*/
+const KeyServerMoveV2 = bcs$1.struct("KeyServerV2", {
+	name: bcs$1.string(),
+	keyType: bcs$1.u8(),
+	pk: bcs$1.byteVector(),
+	serverType: ServerType
+});
+/**
+* The Move struct for the parent object.
+*/
+const KeyServerMove = bcs$1.struct("KeyServer", {
+	id: bcs$1.Address,
+	firstVersion: bcs$1.u64(),
+	lastVersion: bcs$1.u64()
+});
+
+//#endregion
+export { EncryptedObject, KeyServerMove, KeyServerMoveV1, KeyServerMoveV2 };
+//# sourceMappingURL=bcs.mjs.map

package/dist/bcs.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bcs.mjs","names":["bcs"],"sources":["../src/bcs.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { fromHex, toHex } from '@mysten/bcs';\nimport { bcs } from '@mysten/sui/bcs';\n\nexport const IBEEncryptions = bcs.enum('IBEEncryptions', {\n\tBonehFranklinBLS12381: bcs.struct('BonehFranklinBLS12381', {\n\t\tnonce: bcs.bytes(96),\n\t\tencryptedShares: bcs.vector(bcs.bytes(32)),\n\t\tencryptedRandomness: bcs.bytes(32),\n\t}),\n});\n\nexport const Ciphertext = bcs.enum('Ciphertext', {\n\tAes256Gcm: bcs.struct('Aes256Gcm', {\n\t\tblob: bcs.byteVector(),\n\t\taad: bcs.option(bcs.byteVector()),\n\t}),\n\tHmac256Ctr: bcs.struct('Hmac256Ctr', {\n\t\tblob: bcs.byteVector(),\n\t\taad: bcs.option(bcs.byteVector()),\n\t\tmac: bcs.bytes(32),\n\t}),\n\tPlain: bcs.struct('Plain', {}),\n});\n\n/**\n * The encrypted object format. Should be aligned with the Rust implementation.\n */\nexport const EncryptedObject = bcs.struct('EncryptedObject', {\n\tversion: bcs.u8(),\n\tpackageId: bcs.Address,\n\tid: bcs.byteVector().transform({\n\t\toutput: (val) => toHex(val),\n\t\tinput: (val: string) => fromHex(val),\n\t}),\n\tservices: bcs.vector(bcs.tuple([bcs.Address, bcs.u8()])),\n\tthreshold: bcs.u8(),\n\tencryptedShares: IBEEncryptions,\n\tciphertext: Ciphertext,\n});\n\n/**\n * The Move struct for the KeyServerV1 object.\n */\nexport const KeyServerMoveV1 = bcs.struct('KeyServerV1', {\n\tname: bcs.string(),\n\turl: bcs.string(),\n\tkeyType: bcs.u8(),\n\tpk: bcs.byteVector(),\n});\n\n/**\n * The Move struct for PartialKeyServer.\n */\nexport const PartialKeyServer = bcs.struct('PartialKeyServer', {\n\tname: bcs.string(),\n\turl: bcs.string(),\n\tpartialPk: bcs.byteVector(),\n\tpartyId: bcs.u16(),\n});\n\n/**\n * The Move enum for ServerType (V2).\n */\nexport const ServerType = bcs.enum('ServerType', {\n\tIndependent: bcs.struct('Independent', {\n\t\turl: bcs.string(),\n\t}),\n\tCommittee: bcs.struct('Committee', {\n\t\tversion: bcs.u32(),\n\t\tthreshold: bcs.u16(),\n\t\tpartialKeyServers: bcs.vector(\n\t\t\tbcs.struct('VecMapEntry', {\n\t\t\t\tkey: bcs.Address,\n\t\t\t\tvalue: PartialKeyServer,\n\t\t\t}),\n\t\t),\n\t}),\n});\n\n/**\n * The Move struct for the KeyServerV2 object.\n */\nexport const KeyServerMoveV2 = bcs.struct('KeyServerV2', {\n\tname: bcs.string(),\n\tkeyType: bcs.u8(),\n\tpk: bcs.byteVector(),\n\tserverType: ServerType,\n});\n\n/**\n * The Move struct for the parent object.\n */\nexport const KeyServerMove = bcs.struct('KeyServer', {\n\tid: bcs.Address,\n\tfirstVersion: bcs.u64(), // latest version\n\tlastVersion: bcs.u64(), // oldest version\n});\n"],"mappings":";;;;AAMA,MAAa,iBAAiBA,MAAI,KAAK,kBAAkB,EACxD,uBAAuBA,MAAI,OAAO,yBAAyB;CAC1D,OAAOA,MAAI,MAAM,GAAG;CACpB,iBAAiBA,MAAI,OAAOA,MAAI,MAAM,GAAG,CAAC;CAC1C,qBAAqBA,MAAI,MAAM,GAAG;CAClC,CAAC,EACF,CAAC;AAEF,MAAa,aAAaA,MAAI,KAAK,cAAc;CAChD,WAAWA,MAAI,OAAO,aAAa;EAClC,MAAMA,MAAI,YAAY;EACtB,KAAKA,MAAI,OAAOA,MAAI,YAAY,CAAC;EACjC,CAAC;CACF,YAAYA,MAAI,OAAO,cAAc;EACpC,MAAMA,MAAI,YAAY;EACtB,KAAKA,MAAI,OAAOA,MAAI,YAAY,CAAC;EACjC,KAAKA,MAAI,MAAM,GAAG;EAClB,CAAC;CACF,OAAOA,MAAI,OAAO,SAAS,EAAE,CAAC;CAC9B,CAAC;;;;AAKF,MAAa,kBAAkBA,MAAI,OAAO,mBAAmB;CAC5D,SAASA,MAAI,IAAI;CACjB,WAAWA,MAAI;CACf,IAAIA,MAAI,YAAY,CAAC,UAAU;EAC9B,SAAS,QAAQ,MAAM,IAAI;EAC3B,QAAQ,QAAgB,QAAQ,IAAI;EACpC,CAAC;CACF,UAAUA,MAAI,OAAOA,MAAI,MAAM,CAACA,MAAI,SAASA,MAAI,IAAI,CAAC,CAAC,CAAC;CACxD,WAAWA,MAAI,IAAI;CACnB,iBAAiB;CACjB,YAAY;CACZ,CAAC;;;;AAKF,MAAa,kBAAkBA,MAAI,OAAO,eAAe;CACxD,MAAMA,MAAI,QAAQ;CAClB,KAAKA,MAAI,QAAQ;CACjB,SAASA,MAAI,IAAI;CACjB,IAAIA,MAAI,YAAY;CACpB,CAAC;;;;AAKF,MAAa,mBAAmBA,MAAI,OAAO,oBAAoB;CAC9D,MAAMA,MAAI,QAAQ;CAClB,KAAKA,MAAI,QAAQ;CACjB,WAAWA,MAAI,YAAY;CAC3B,SAASA,MAAI,KAAK;CAClB,CAAC;;;;AAKF,MAAa,aAAaA,MAAI,KAAK,cAAc;CAChD,aAAaA,MAAI,OAAO,eAAe,EACtC,KAAKA,MAAI,QAAQ,EACjB,CAAC;CACF,WAAWA,MAAI,OAAO,aAAa;EAClC,SAASA,MAAI,KAAK;EAClB,WAAWA,MAAI,KAAK;EACpB,mBAAmBA,MAAI,OACtBA,MAAI,OAAO,eAAe;GACzB,KAAKA,MAAI;GACT,OAAO;GACP,CAAC,CACF;EACD,CAAC;CACF,CAAC;;;;AAKF,MAAa,kBAAkBA,MAAI,OAAO,eAAe;CACxD,MAAMA,MAAI,QAAQ;CAClB,SAASA,MAAI,IAAI;CACjB,IAAIA,MAAI,YAAY;CACpB,YAAY;CACZ,CAAC;;;;AAKF,MAAa,gBAAgBA,MAAI,OAAO,aAAa;CACpD,IAAIA,MAAI;CACR,cAAcA,MAAI,KAAK;CACvB,aAAaA,MAAI,KAAK;CACtB,CAAC"}

package/dist/bls12381.d.mts

@@ -0,0 +1,30 @@
+import { Fp2 } from "@noble/curves/abstract/tower.js";
+import { WeierstrassPoint } from "@noble/curves/abstract/weierstrass.js";
+
+//#region src/bls12381.d.ts
+
+declare class G2Element {
+  point: WeierstrassPoint<Fp2>;
+  static readonly SIZE = 96;
+  constructor(point: WeierstrassPoint<Fp2>);
+  static generator(): G2Element;
+  static fromBytes(bytes: Uint8Array): G2Element;
+  toBytes(): Uint8Array<ArrayBuffer>;
+  multiply(scalar: Scalar): G2Element;
+  add(other: G2Element): G2Element;
+  static hashToCurve(data: Uint8Array): G2Element;
+  equals(other: G2Element): boolean;
+}
+declare class Scalar {
+  scalar: bigint;
+  static readonly SIZE = 32;
+  constructor(scalar: bigint);
+  static fromBigint(scalar: bigint): Scalar;
+  static random(): Scalar;
+  toBytes(): Uint8Array;
+  static fromBytes(bytes: Uint8Array): Scalar;
+  static fromBytesLE(bytes: Uint8Array): Scalar;
+}
+//#endregion
+export { G2Element };
+//# sourceMappingURL=bls12381.d.mts.map

package/dist/bls12381.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bls12381.d.mts","names":[],"sources":["../src/bls12381.ts"],"sourcesContent":[],"mappings":";;;;;AA+E2B,cAzBd,SAAA,CAyBc;EAIf,KAAA,EA5BJ,gBA4BI,CA5Ba,GA4Bb,CAAA;EAAY,gBAAA,IAAA,GAAA,EAAA;EAIE,WAAA,CAAA,KAAA,EA5BN,gBA4BM,CA5BW,GA4BX,CAAA;EAAa,OAAA,SAAA,CAAA,CAAA,EAxBlB,SAwBkB;EAIxB,OAAA,SAAA,CAAA,KAAA,EAxBU,UAwBV,CAAA,EAxBuB,SAwBvB;EAAS,OAAA,CAAA,CAAA,EAhBZ,UAgBY,CAhBD,WAgBC,CAAA;EA4CX,QAAA,CAAM,MAAA,EAxDD,MAwDC,CAAA,EAxDQ,SAwDR;EASiB,GAAA,CAAA,KAAA,EA7DxB,SA6DwB,CAAA,EA7DZ,SA6DY;EAOlB,OAAA,WAAA,CAAA,IAAA,EAhEQ,UAgER,CAAA,EAhEqB,SAgErB;EAKN,MAAA,CAAA,KAAA,EAjEG,SAiEH,CAAA,EAAA,OAAA;;cArBC,MAAA;;;;qCASuB;mBAOlB;aAKN;0BAIa,aAAa;4BAOX,aAAa"}

package/dist/bls12381.mjs

@@ -0,0 +1,135 @@
+import { bls12_381 } from "@noble/curves/bls12-381.js";
+import { bytesToNumberBE, bytesToNumberLE, numberToBytesBE } from "@noble/curves/utils.js";
+
+//#region src/bls12381.ts
+var G1Element = class G1Element {
+	static {
+		this.SIZE = 48;
+	}
+	constructor(point) {
+		this.point = point;
+	}
+	static generator() {
+		return new G1Element(bls12_381.G1.Point.BASE);
+	}
+	static fromBytes(bytes) {
+		try {
+			return new G1Element(bls12_381.G1.Point.fromBytes(bytes));
+		} catch {
+			throw new Error("Invalid G1 point");
+		}
+	}
+	toBytes() {
+		return this.point.toBytes();
+	}
+	multiply(scalar) {
+		return new G1Element(this.point.multiply(scalar.scalar));
+	}
+	add(other) {
+		return new G1Element(this.point.add(other.point));
+	}
+	subtract(other) {
+		return new G1Element(this.point.subtract(other.point));
+	}
+	static hashToCurve(data) {
+		return new G1Element(bls12_381.G1.Point.fromAffine(bls12_381.G1.hashToCurve(data).toAffine()));
+	}
+	pairing(other) {
+		return new GTElement(bls12_381.pairing(this.point, other.point));
+	}
+};
+var G2Element = class G2Element {
+	static {
+		this.SIZE = 96;
+	}
+	constructor(point) {
+		this.point = point;
+	}
+	static generator() {
+		return new G2Element(bls12_381.G2.Point.BASE);
+	}
+	static fromBytes(bytes) {
+		try {
+			return new G2Element(bls12_381.G2.Point.fromBytes(bytes));
+		} catch {
+			throw new Error("Invalid G2 point");
+		}
+	}
+	toBytes() {
+		return this.point.toBytes();
+	}
+	multiply(scalar) {
+		return new G2Element(this.point.multiply(scalar.scalar));
+	}
+	add(other) {
+		return new G2Element(this.point.add(other.point));
+	}
+	static hashToCurve(data) {
+		return new G2Element(bls12_381.G2.Point.fromAffine(bls12_381.G2.hashToCurve(data).toAffine()));
+	}
+	equals(other) {
+		return this.point.equals(other.point);
+	}
+};
+var GTElement = class GTElement {
+	static {
+		this.SIZE = 576;
+	}
+	constructor(element) {
+		this.element = element;
+	}
+	toBytes() {
+		const P = [
+			0,
+			3,
+			1,
+			4,
+			2,
+			5
+		];
+		const PAIR_SIZE = GTElement.SIZE / P.length;
+		const bytes = bls12_381.fields.Fp12.toBytes(this.element);
+		const result = new Uint8Array(GTElement.SIZE);
+		for (let i = 0; i < P.length; i++) {
+			const sourceStart = P[i] * PAIR_SIZE;
+			const sourceEnd = sourceStart + PAIR_SIZE;
+			const targetStart = i * PAIR_SIZE;
+			result.set(bytes.subarray(sourceStart, sourceEnd), targetStart);
+		}
+		return result;
+	}
+	equals(other) {
+		return bls12_381.fields.Fp12.eql(this.element, other.element);
+	}
+};
+var Scalar = class Scalar {
+	static {
+		this.SIZE = 32;
+	}
+	constructor(scalar) {
+		this.scalar = scalar;
+	}
+	static fromBigint(scalar) {
+		if (scalar < 0n || scalar >= bls12_381.fields.Fr.ORDER) throw new Error("Scalar out of range");
+		return new Scalar(scalar);
+	}
+	static random() {
+		const randomSecretKey = bls12_381.utils.randomSecretKey();
+		return Scalar.fromBytes(randomSecretKey);
+	}
+	toBytes() {
+		return numberToBytesBE(this.scalar, Scalar.SIZE);
+	}
+	static fromBytes(bytes) {
+		if (bytes.length !== Scalar.SIZE) throw new Error("Invalid scalar length");
+		return this.fromBigint(bytesToNumberBE(bytes));
+	}
+	static fromBytesLE(bytes) {
+		if (bytes.length !== Scalar.SIZE) throw new Error("Invalid scalar length");
+		return this.fromBigint(bytesToNumberLE(bytes));
+	}
+};
+
+//#endregion
+export { G1Element, G2Element, Scalar };
+//# sourceMappingURL=bls12381.mjs.map

package/dist/bls12381.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bls12381.mjs","names":[],"sources":["../src/bls12381.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { Fp2, Fp12 } from '@noble/curves/abstract/tower.js';\nimport type { WeierstrassPoint } from '@noble/curves/abstract/weierstrass.js';\nimport { bls12_381 } from '@noble/curves/bls12-381.js';\nimport { bytesToNumberBE, bytesToNumberLE, numberToBytesBE } from '@noble/curves/utils.js';\n\nexport class G1Element {\n\tpoint: WeierstrassPoint<bigint>;\n\n\tpublic static readonly SIZE = 48;\n\n\tconstructor(point: WeierstrassPoint<bigint>) {\n\t\tthis.point = point;\n\t}\n\n\tstatic generator(): G1Element {\n\t\treturn new G1Element(bls12_381.G1.Point.BASE);\n\t}\n\n\tstatic fromBytes(bytes: Uint8Array): G1Element {\n\t\ttry {\n\t\t\treturn new G1Element(bls12_381.G1.Point.fromBytes(bytes));\n\t\t} catch {\n\t\t\tthrow new Error('Invalid G1 point');\n\t\t}\n\t}\n\n\ttoBytes(): Uint8Array<ArrayBuffer> {\n\t\treturn this.point.toBytes() as Uint8Array<ArrayBuffer>;\n\t}\n\n\tmultiply(scalar: Scalar): G1Element {\n\t\treturn new G1Element(this.point.multiply(scalar.scalar));\n\t}\n\n\tadd(other: G1Element): G1Element {\n\t\treturn new G1Element(this.point.add(other.point));\n\t}\n\n\tsubtract(other: G1Element): G1Element {\n\t\treturn new G1Element(this.point.subtract(other.point));\n\t}\n\n\tstatic hashToCurve(data: Uint8Array): G1Element {\n\t\treturn new G1Element(bls12_381.G1.Point.fromAffine(bls12_381.G1.hashToCurve(data).toAffine()));\n\t}\n\n\tpairing(other: G2Element): GTElement {\n\t\treturn new GTElement(bls12_381.pairing(this.point, other.point));\n\t}\n}\n\nexport class G2Element {\n\tpoint: WeierstrassPoint<Fp2>;\n\n\tpublic static readonly SIZE = 96;\n\n\tconstructor(point: WeierstrassPoint<Fp2>) {\n\t\tthis.point = point;\n\t}\n\n\tstatic generator(): G2Element {\n\t\treturn new G2Element(bls12_381.G2.Point.BASE);\n\t}\n\n\tstatic fromBytes(bytes: Uint8Array): G2Element {\n\t\ttry {\n\t\t\treturn new G2Element(bls12_381.G2.Point.fromBytes(bytes));\n\t\t} catch {\n\t\t\tthrow new Error('Invalid G2 point');\n\t\t}\n\t}\n\n\ttoBytes(): Uint8Array<ArrayBuffer> {\n\t\treturn this.point.toBytes() as Uint8Array<ArrayBuffer>;\n\t}\n\n\tmultiply(scalar: Scalar): G2Element {\n\t\treturn new G2Element(this.point.multiply(scalar.scalar));\n\t}\n\n\tadd(other: G2Element): G2Element {\n\t\treturn new G2Element(this.point.add(other.point));\n\t}\n\n\tstatic hashToCurve(data: Uint8Array): G2Element {\n\t\treturn new G2Element(bls12_381.G2.Point.fromAffine(bls12_381.G2.hashToCurve(data).toAffine()));\n\t}\n\n\tequals(other: G2Element): boolean {\n\t\treturn this.point.equals(other.point);\n\t}\n}\n\nexport class GTElement {\n\telement: Fp12;\n\n\tpublic static readonly SIZE = 576;\n\n\tconstructor(element: Fp12) {\n\t\tthis.element = element;\n\t}\n\n\ttoBytes(): Uint8Array<ArrayBuffer> {\n\t\t// This permutation reorders the 6 pairs of coefficients of the GT element for compatability with the Rust and Move implementations.\n\t\t//\n\t\t// The permutation P may be computed as:\n\t\t// for i in 0..3 {\n\t\t//   for j in 0..2 {\n\t\t//     P[2 * i + j] = i + 3 * j;\n\t\t//   }\n\t\t// }\n\t\tconst P = [0, 3, 1, 4, 2, 5];\n\t\tconst PAIR_SIZE = GTElement.SIZE / P.length;\n\n\t\tconst bytes = bls12_381.fields.Fp12.toBytes(this.element);\n\t\tconst result = new Uint8Array(GTElement.SIZE);\n\n\t\tfor (let i = 0; i < P.length; i++) {\n\t\t\tconst sourceStart = P[i] * PAIR_SIZE;\n\t\t\tconst sourceEnd = sourceStart + PAIR_SIZE;\n\t\t\tconst targetStart = i * PAIR_SIZE;\n\t\t\tresult.set(bytes.subarray(sourceStart, sourceEnd), targetStart);\n\t\t}\n\n\t\treturn result;\n\t}\n\n\tequals(other: GTElement): boolean {\n\t\treturn bls12_381.fields.Fp12.eql(this.element, other.element);\n\t}\n}\n\nexport class Scalar {\n\tscalar: bigint;\n\n\tpublic static readonly SIZE = 32;\n\n\tconstructor(scalar: bigint) {\n\t\tthis.scalar = scalar;\n\t}\n\n\tstatic fromBigint(scalar: bigint): Scalar {\n\t\tif (scalar < 0n || scalar >= bls12_381.fields.Fr.ORDER) {\n\t\t\tthrow new Error('Scalar out of range');\n\t\t}\n\t\treturn new Scalar(scalar);\n\t}\n\n\tstatic random(): Scalar {\n\t\tconst randomSecretKey = bls12_381.utils.randomSecretKey();\n\t\treturn Scalar.fromBytes(randomSecretKey)!;\n\t}\n\n\ttoBytes(): Uint8Array {\n\t\treturn numberToBytesBE(this.scalar, Scalar.SIZE);\n\t}\n\n\tstatic fromBytes(bytes: Uint8Array): Scalar {\n\t\tif (bytes.length !== Scalar.SIZE) {\n\t\t\tthrow new Error('Invalid scalar length');\n\t\t}\n\t\treturn this.fromBigint(bytesToNumberBE(bytes));\n\t}\n\n\tstatic fromBytesLE(bytes: Uint8Array): Scalar {\n\t\tif (bytes.length !== Scalar.SIZE) {\n\t\t\tthrow new Error('Invalid scalar length');\n\t\t}\n\t\treturn this.fromBigint(bytesToNumberLE(bytes));\n\t}\n}\n"],"mappings":";;;;AAQA,IAAa,YAAb,MAAa,UAAU;;cAGQ;;CAE9B,YAAY,OAAiC;AAC5C,OAAK,QAAQ;;CAGd,OAAO,YAAuB;AAC7B,SAAO,IAAI,UAAU,UAAU,GAAG,MAAM,KAAK;;CAG9C,OAAO,UAAU,OAA8B;AAC9C,MAAI;AACH,UAAO,IAAI,UAAU,UAAU,GAAG,MAAM,UAAU,MAAM,CAAC;UAClD;AACP,SAAM,IAAI,MAAM,mBAAmB;;;CAIrC,UAAmC;AAClC,SAAO,KAAK,MAAM,SAAS;;CAG5B,SAAS,QAA2B;AACnC,SAAO,IAAI,UAAU,KAAK,MAAM,SAAS,OAAO,OAAO,CAAC;;CAGzD,IAAI,OAA6B;AAChC,SAAO,IAAI,UAAU,KAAK,MAAM,IAAI,MAAM,MAAM,CAAC;;CAGlD,SAAS,OAA6B;AACrC,SAAO,IAAI,UAAU,KAAK,MAAM,SAAS,MAAM,MAAM,CAAC;;CAGvD,OAAO,YAAY,MAA6B;AAC/C,SAAO,IAAI,UAAU,UAAU,GAAG,MAAM,WAAW,UAAU,GAAG,YAAY,KAAK,CAAC,UAAU,CAAC,CAAC;;CAG/F,QAAQ,OAA6B;AACpC,SAAO,IAAI,UAAU,UAAU,QAAQ,KAAK,OAAO,MAAM,MAAM,CAAC;;;AAIlE,IAAa,YAAb,MAAa,UAAU;;cAGQ;;CAE9B,YAAY,OAA8B;AACzC,OAAK,QAAQ;;CAGd,OAAO,YAAuB;AAC7B,SAAO,IAAI,UAAU,UAAU,GAAG,MAAM,KAAK;;CAG9C,OAAO,UAAU,OAA8B;AAC9C,MAAI;AACH,UAAO,IAAI,UAAU,UAAU,GAAG,MAAM,UAAU,MAAM,CAAC;UAClD;AACP,SAAM,IAAI,MAAM,mBAAmB;;;CAIrC,UAAmC;AAClC,SAAO,KAAK,MAAM,SAAS;;CAG5B,SAAS,QAA2B;AACnC,SAAO,IAAI,UAAU,KAAK,MAAM,SAAS,OAAO,OAAO,CAAC;;CAGzD,IAAI,OAA6B;AAChC,SAAO,IAAI,UAAU,KAAK,MAAM,IAAI,MAAM,MAAM,CAAC;;CAGlD,OAAO,YAAY,MAA6B;AAC/C,SAAO,IAAI,UAAU,UAAU,GAAG,MAAM,WAAW,UAAU,GAAG,YAAY,KAAK,CAAC,UAAU,CAAC,CAAC;;CAG/F,OAAO,OAA2B;AACjC,SAAO,KAAK,MAAM,OAAO,MAAM,MAAM;;;AAIvC,IAAa,YAAb,MAAa,UAAU;;cAGQ;;CAE9B,YAAY,SAAe;AAC1B,OAAK,UAAU;;CAGhB,UAAmC;EASlC,MAAM,IAAI;GAAC;GAAG;GAAG;GAAG;GAAG;GAAG;GAAE;EAC5B,MAAM,YAAY,UAAU,OAAO,EAAE;EAErC,MAAM,QAAQ,UAAU,OAAO,KAAK,QAAQ,KAAK,QAAQ;EACzD,MAAM,SAAS,IAAI,WAAW,UAAU,KAAK;AAE7C,OAAK,IAAI,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;GAClC,MAAM,cAAc,EAAE,KAAK;GAC3B,MAAM,YAAY,cAAc;GAChC,MAAM,cAAc,IAAI;AACxB,UAAO,IAAI,MAAM,SAAS,aAAa,UAAU,EAAE,YAAY;;AAGhE,SAAO;;CAGR,OAAO,OAA2B;AACjC,SAAO,UAAU,OAAO,KAAK,IAAI,KAAK,SAAS,MAAM,QAAQ;;;AAI/D,IAAa,SAAb,MAAa,OAAO;;cAGW;;CAE9B,YAAY,QAAgB;AAC3B,OAAK,SAAS;;CAGf,OAAO,WAAW,QAAwB;AACzC,MAAI,SAAS,MAAM,UAAU,UAAU,OAAO,GAAG,MAChD,OAAM,IAAI,MAAM,sBAAsB;AAEvC,SAAO,IAAI,OAAO,OAAO;;CAG1B,OAAO,SAAiB;EACvB,MAAM,kBAAkB,UAAU,MAAM,iBAAiB;AACzD,SAAO,OAAO,UAAU,gBAAgB;;CAGzC,UAAsB;AACrB,SAAO,gBAAgB,KAAK,QAAQ,OAAO,KAAK;;CAGjD,OAAO,UAAU,OAA2B;AAC3C,MAAI,MAAM,WAAW,OAAO,KAC3B,OAAM,IAAI,MAAM,wBAAwB;AAEzC,SAAO,KAAK,WAAW,gBAAgB,MAAM,CAAC;;CAG/C,OAAO,YAAY,OAA2B;AAC7C,MAAI,MAAM,WAAW,OAAO,KAC3B,OAAM,IAAI,MAAM,wBAAwB;AAEzC,SAAO,KAAK,WAAW,gBAAgB,MAAM,CAAC"}

package/dist/client.d.mts

@@ -0,0 +1,106 @@
+import { G2Element } from "./bls12381.mjs";
+import { DecryptOptions, EncryptOptions, FetchKeysOptions, GetDerivedKeysOptions, SealClientOptions } from "./types.mjs";
+import { DerivedKey, KeyServer } from "./key-server.mjs";
+
+//#region src/client.d.ts
+
+declare class SealClient {
+  #private;
+  constructor(options: SealClientOptions);
+  /**
+   * Return an encrypted message under the identity.
+   *
+   * @param kemType - The type of KEM to use.
+   * @param demType - The type of DEM to use.
+   * @param threshold - The threshold for the TSS encryption.
+   * @param packageId - the packageId namespace.
+   * @param id - the identity to use.
+   * @param data - the data to encrypt.
+   * @param aad - optional additional authenticated data.
+   * @returns The bcs bytes of the encrypted object containing all metadata and the 256-bit symmetric key that was used to encrypt the object.
+   * 	Since the symmetric key can be used to decrypt, it should not be shared but can be used e.g. for backup.
+   */
+  encrypt({
+    kemType,
+    demType,
+    threshold,
+    packageId,
+    id,
+    data,
+    aad
+  }: EncryptOptions): Promise<{
+    encryptedObject: Uint8Array<ArrayBuffer>;
+    key: Uint8Array<ArrayBuffer>;
+  }>;
+  /**
+   * Decrypt the given encrypted bytes using cached keys.
+   * Calls fetchKeys in case one or more of the required keys is not cached yet.
+   * The function throws an error if the client's key servers are not a subset of
+   * the encrypted object's key servers or if the threshold cannot be met.
+   *
+   * If checkShareConsistency is true, the decrypted shares are checked for consistency, meaning that
+   * any combination of at least threshold shares should either succesfully combine to the plaintext or fail.
+   * This is useful in case the encryptor is not trusted and the decryptor wants to ensure all decryptors
+   * receive the same output (e.g., for onchain encrypted voting).
+   *
+   * @param data - The encrypted bytes to decrypt.
+   * @param sessionKey - The session key to use.
+   * @param txBytes - The transaction bytes to use (that calls seal_approve* functions).
+   * @param checkShareConsistency - If true, the shares are checked for consistency.
+   * @param checkLEEncoding - If true, the encryption is also checked using an LE encoded nonce.
+   * @returns - The decrypted plaintext corresponding to ciphertext.
+   */
+  decrypt({
+    data,
+    sessionKey,
+    txBytes,
+    checkShareConsistency,
+    checkLEEncoding
+  }: DecryptOptions): Promise<Uint8Array<ArrayBufferLike>>;
+  getKeyServers(): Promise<Map<string, KeyServer>>;
+  /**
+   * Get the public keys for the given services.
+   * If all public keys are not in the cache, they are retrieved.
+   *
+   * @param services - The services to get the public keys for.
+   * @returns The public keys for the given services in the same order as the given services.
+   */
+  getPublicKeys(services: string[]): Promise<G2Element[]>;
+  /**
+   * Fetch keys from the key servers and update the cache.
+   *
+   * It is recommended to call this function once for all ids of all encrypted objects if
+   * there are multiple, then call decrypt for each object. This avoids calling fetchKey
+   * individually for each decrypt.
+   *
+   * @param ids - The ids of the encrypted objects.
+   * @param txBytes - The transaction bytes to use (that calls seal_approve* functions).
+   * @param sessionKey - The session key to use.
+   * @param threshold - The threshold for the TSS encryptions. The function returns when a threshold of key servers had returned keys for all ids.
+   */
+  fetchKeys({
+    ids,
+    txBytes,
+    sessionKey,
+    threshold
+  }: FetchKeysOptions): Promise<void>;
+  /**
+   * Get derived keys from the given services.
+   *
+   * @param id - The id of the encrypted object.
+   * @param txBytes - The transaction bytes to use (that calls seal_approve* functions).
+   * @param sessionKey - The session key to use.
+   * @param threshold - The threshold.
+   * @returns - Derived keys for the given services that are in the cache as a "service object ID" -> derived key map. If the call is succesful, exactly threshold keys will be returned.
+   */
+  getDerivedKeys({
+    kemType,
+    id,
+    txBytes,
+    sessionKey,
+    threshold
+  }: GetDerivedKeysOptions): Promise<Map<string, DerivedKey>>;
+}
+//#endregion
+export { SealClient };
+//# sourceMappingURL=client.d.mts.map

package/dist/client.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.mts","names":[],"sources":["../src/client.ts"],"sourcesContent":[],"mappings":";;;;;;AAsGE,cAnDW,UAAA,CAmDX;EACA,CAAA,OAAA;EACA,WAAA,CAAA,OAAA,EA1CoB,iBA0CpB;EACA;;;;;;;;;;;;;EA2DA,OAAA,CAAA;IAAA,OAAA;IAAA,OAAA;IAAA,SAAA;IAAA,SAAA;IAAA,EAAA;IAAA,IAAA;IAAA;EAAA,CAAA,EAvDE,cAuDF,CAAA,EAvDgB,OAuDhB,CAAA;IACA,eAAA,YAAA,YAAA,CAAA;IACE,GAAA,YAAA,YAAA,CAAA;EAAc,CAAA,CAAA;EAAA;;;;;;;;;;;;;;;;;;EA4Qd,OAAA,CAAA;IAAA,IAAA;IAAA,UAAA;IAAA,OAAA;IAAA,qBAAA;IAAA;EAAA,CAAA,EA5QA,cA4QA,CAAA,EA5Qc,OA4Qd,CA5Qc,UA4Qd,CA5Qc,eA4Qd,CAAA,CAAA;EAA4C,aAAA,CAAA,CAAA,EAvNxB,OAuNwB,CAvNhB,GAuNgB,CAAA,MAAA,EAvNJ,SAuNI,CAAA,CAAA;EAAZ;;;;;;;qCAtMM,QAAQ;;;;;;;;;;;;;;;;;;KAsFQ,mBAAgB;;;;;;;;;;;;;;;;KAgHtE,wBAAwB,QAAQ,YAAY"}