@neykoor/libsignal-node 1.0.4 → 1.0.7

package/README.md

@@ -6,7 +6,7 @@
 
 **Port 100% TypeScript de `libsignal-node`, compatible con [BaileysX](https://github.com/Neykoor/BaileysX)**
 
-[![npm](https://img.shields.io/badge/npm-libsignal--node--ts-CB3837?logo=npm&logoColor=white)](https://www.npmjs.com/package/libsignal-node-ts)
+[![npm](https://img.shields.io/badge/npm-%40neykoor%2Flibsignal--node-CB3837?logo=npm&logoColor=white)](https://www.npmjs.com/package/@neykoor/libsignal-node)
 [![TypeScript](https://img.shields.io/badge/TypeScript-5.6-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
 [![ESM](https://img.shields.io/badge/Module-ESM-yellow)](https://nodejs.org/api/esm.html)
 [![Node](https://img.shields.io/badge/Node-%3E%3D20-339933?logo=node.js&logoColor=white)](https://nodejs.org/)
@@ -40,8 +40,8 @@ Mismo API, misma criptografía, cero `@ts-ignore`, tipado de punta a punta — y
 
 - Implementación completa del **Double Ratchet** (X3DH, sesiones, ratcheting)
 - Misma API pública: `ProtocolAddress`, `SessionBuilder`, `SessionCipher`, `SessionRecord`, `keyhelper`, `curve`, `crypto`
-- Mismas dependencias en runtime: `curve25519-js` y `protobufjs`
-- Soporte nativo de `x25519` vía `node:crypto` con fallback a `curve25519-js`
+- Misma base criptográfica que `libsignal-node` (curve25519 y `protobufjs`), aquí vía `@neykoor/curve25519-ts`
+- Soporte nativo de `x25519` vía `node:crypto` con fallback a `@neykoor/curve25519-ts`
 
 ### Pendiente por traer desde `libsignal-node` (roadmap)
 
@@ -53,10 +53,10 @@ Mismo API, misma criptografía, cero `@ts-ignore`, tipado de punta a punta — y
 ## 📦 Instalación
 
 ```bash
-npm install libsignal-node-ts
+npm install @neykoor/libsignal-node
 ```
 
-Dependencias en tiempo de ejecución: `curve25519-js` y `protobufjs` (se instalan solas junto con el paquete).
+Dependencias en tiempo de ejecución: `@neykoor/curve25519-ts`, `pino` y `protobufjs` (se instalan solas junto con el paquete).
 
 ## 🔧 Uso en BaileysX
 
@@ -72,21 +72,21 @@ import { PreKeyWhisperMessage } from 'libsignal/lib/protobufs.js'
 por:
 
 ```ts
-import * as libsignal from 'libsignal-node-ts'
-import { protobufs } from 'libsignal-node-ts'
+import * as libsignal from '@neykoor/libsignal-node'
+import { protobufs } from '@neykoor/libsignal-node'
 const { PreKeyWhisperMessage } = protobufs
 ```
 
 Y en el `package.json` de tu proyecto, quita la dependencia `libsignal` y agrega:
 
 ```json
-"libsignal-node-ts": "^1.0.0"
+"@neykoor/libsignal-node": "^1.0.5"
 ```
 
 ## 📖 Uso básico
 
 ```ts
-import { ProtocolAddress, SessionBuilder, SessionCipher, MemorySignalStorage, keyhelper } from 'libsignal-node-ts'
+import { ProtocolAddress, SessionBuilder, SessionCipher, MemorySignalStorage, keyhelper } from '@neykoor/libsignal-node'
 
 const identityKeyPair = keyhelper.generateIdentityKeyPair()
 const registrationId = keyhelper.generateRegistrationId()

package/lib/base-key-type.d.ts

@@ -0,0 +1,5 @@
+export declare enum BaseKeyType {
+    OURS = 1,
+    THEIRS = 2
+}
+//# sourceMappingURL=base-key-type.d.ts.map

package/lib/base-key-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-key-type.d.ts","sourceRoot":"","sources":["../src/base-key-type.ts"],"names":[],"mappings":"AAAA,oBAAY,WAAW;IACrB,IAAI,IAAI;IACR,MAAM,IAAI;CACX"}

package/lib/base-key-type.js

@@ -0,0 +1,6 @@
+export var BaseKeyType;
+(function (BaseKeyType) {
+    BaseKeyType[BaseKeyType["OURS"] = 1] = "OURS";
+    BaseKeyType[BaseKeyType["THEIRS"] = 2] = "THEIRS";
+})(BaseKeyType || (BaseKeyType = {}));
+//# sourceMappingURL=base-key-type.js.map

package/lib/base-key-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-key-type.js","sourceRoot":"","sources":["../src/base-key-type.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,WAGX;AAHD,WAAY,WAAW;IACrB,6CAAQ,CAAA;IACR,iDAAU,CAAA;AACZ,CAAC,EAHW,WAAW,KAAX,WAAW,QAGtB"}

package/lib/chain-type.d.ts

@@ -0,0 +1,5 @@
+export declare enum ChainType {
+    SENDING = 1,
+    RECEIVING = 2
+}
+//# sourceMappingURL=chain-type.d.ts.map

package/lib/chain-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-type.d.ts","sourceRoot":"","sources":["../src/chain-type.ts"],"names":[],"mappings":"AAAA,oBAAY,SAAS;IACnB,OAAO,IAAI;IACX,SAAS,IAAI;CACd"}

package/lib/chain-type.js

@@ -0,0 +1,6 @@
+export var ChainType;
+(function (ChainType) {
+    ChainType[ChainType["SENDING"] = 1] = "SENDING";
+    ChainType[ChainType["RECEIVING"] = 2] = "RECEIVING";
+})(ChainType || (ChainType = {}));
+//# sourceMappingURL=chain-type.js.map

package/lib/chain-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-type.js","sourceRoot":"","sources":["../src/chain-type.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,SAGX;AAHD,WAAY,SAAS;IACnB,+CAAW,CAAA;IACX,mDAAa,CAAA;AACf,CAAC,EAHW,SAAS,KAAT,SAAS,QAGpB"}

package/lib/ciphertext-message.d.ts

@@ -0,0 +1,10 @@
+export declare class CiphertextMessage {
+    readonly UNSUPPORTED_VERSION: number;
+    readonly CURRENT_VERSION: number;
+    readonly WHISPER_TYPE: number;
+    readonly PREKEY_TYPE: number;
+    readonly SENDERKEY_TYPE: number;
+    readonly SENDERKEY_DISTRIBUTION_TYPE: number;
+    readonly ENCRYPTED_MESSAGE_OVERHEAD: number;
+}
+//# sourceMappingURL=ciphertext-message.d.ts.map

package/lib/ciphertext-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ciphertext-message.d.ts","sourceRoot":"","sources":["../src/ciphertext-message.ts"],"names":[],"mappings":"AAAA,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAI;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAI;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAI;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAI;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAI;IACnC,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAI;IAChD,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAK;CACjD"}

package/lib/ciphertext-message.js

@@ -0,0 +1,12 @@
+export class CiphertextMessage {
+    constructor() {
+        this.UNSUPPORTED_VERSION = 1;
+        this.CURRENT_VERSION = 3;
+        this.WHISPER_TYPE = 2;
+        this.PREKEY_TYPE = 3;
+        this.SENDERKEY_TYPE = 4;
+        this.SENDERKEY_DISTRIBUTION_TYPE = 5;
+        this.ENCRYPTED_MESSAGE_OVERHEAD = 53;
+    }
+}
+//# sourceMappingURL=ciphertext-message.js.map

package/lib/ciphertext-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ciphertext-message.js","sourceRoot":"","sources":["../src/ciphertext-message.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,iBAAiB;IAA9B;QACW,wBAAmB,GAAW,CAAC,CAAA;QAC/B,oBAAe,GAAW,CAAC,CAAA;QAC3B,iBAAY,GAAW,CAAC,CAAA;QACxB,gBAAW,GAAW,CAAC,CAAA;QACvB,mBAAc,GAAW,CAAC,CAAA;QAC1B,gCAA2B,GAAW,CAAC,CAAA;QACvC,+BAA0B,GAAW,EAAE,CAAA;IAClD,CAAC;CAAA"}

package/lib/crypto.d.ts

@@ -0,0 +1,7 @@
+export declare function encrypt(key: Uint8Array, data: Uint8Array, iv: Uint8Array): Buffer;
+export declare function decrypt(key: Uint8Array, data: Uint8Array, iv: Uint8Array): Buffer;
+export declare function calculateMAC(key: Uint8Array, data: Uint8Array): Buffer;
+export declare function hash(data: Uint8Array): Buffer;
+export declare function deriveSecrets(input: Uint8Array, salt: Uint8Array, info: Uint8Array, chunks?: number): Buffer[];
+export declare function verifyMAC(data: Uint8Array, key: Uint8Array, mac: Uint8Array, length: number): void;
+//# sourceMappingURL=crypto.d.ts.map

package/lib/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAUA,wBAAgB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,GAAG,MAAM,CAOjF;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,GAAG,MAAM,CAOjF;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,CAOtE;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAM7C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAqC9G;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAUlG"}

package/lib/crypto.js

@@ -0,0 +1,74 @@
+import * as nodeCrypto from "crypto";
+function assertBuffer(value) {
+    if (!(value instanceof Uint8Array)) {
+        throw TypeError(`Expected Uint8Array instead of: ${value?.constructor?.name}`);
+    }
+    return value;
+}
+export function encrypt(key, data, iv) {
+    assertBuffer(key);
+    assertBuffer(data);
+    assertBuffer(iv);
+    const cipher = nodeCrypto.createCipheriv("aes-256-cbc", key, iv);
+    return Buffer.concat([cipher.update(data), cipher.final()]);
+}
+export function decrypt(key, data, iv) {
+    assertBuffer(key);
+    assertBuffer(data);
+    assertBuffer(iv);
+    const decipher = nodeCrypto.createDecipheriv("aes-256-cbc", key, iv);
+    return Buffer.concat([decipher.update(data), decipher.final()]);
+}
+export function calculateMAC(key, data) {
+    assertBuffer(key);
+    assertBuffer(data);
+    const hmac = nodeCrypto.createHmac("sha256", key);
+    hmac.update(data);
+    return Buffer.from(hmac.digest());
+}
+export function hash(data) {
+    assertBuffer(data);
+    const sha512 = nodeCrypto.createHash("sha512");
+    sha512.update(data);
+    return sha512.digest();
+}
+export function deriveSecrets(input, salt, info, chunks) {
+    assertBuffer(input);
+    assertBuffer(salt);
+    assertBuffer(info);
+    if (salt.byteLength !== 32) {
+        throw new Error("Got salt of incorrect length");
+    }
+    const count = chunks || 3;
+    if (count < 1 || count > 3) {
+        throw new Error("chunks must be between 1 and 3");
+    }
+    const PRK = calculateMAC(salt, input);
+    const infoArray = new Uint8Array(info.byteLength + 1 + 32);
+    infoArray.set(info, 32);
+    infoArray[infoArray.length - 1] = 1;
+    const signed = [calculateMAC(PRK, Buffer.from(infoArray.slice(32)))];
+    if (count > 1) {
+        infoArray.set(signed[signed.length - 1]);
+        infoArray[infoArray.length - 1] = 2;
+        signed.push(calculateMAC(PRK, Buffer.from(infoArray)));
+    }
+    if (count > 2) {
+        infoArray.set(signed[signed.length - 1]);
+        infoArray[infoArray.length - 1] = 3;
+        signed.push(calculateMAC(PRK, Buffer.from(infoArray)));
+    }
+    PRK.fill(0);
+    infoArray.fill(0);
+    return signed;
+}
+export function verifyMAC(data, key, mac, length) {
+    const calculatedMac = calculateMAC(key, data).slice(0, length);
+    if (mac.length !== length || calculatedMac.length !== length) {
+        throw new Error("Bad MAC length");
+    }
+    if (!nodeCrypto.timingSafeEqual(mac, calculatedMac)) {
+        throw new Error("Bad MAC");
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/lib/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,QAAQ,CAAA;AAEpC,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,SAAS,CAAC,mCAAoC,KAA2B,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IACvG,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAe,EAAE,IAAgB,EAAE,EAAc;IACvE,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,YAAY,CAAC,IAAI,CAAC,CAAA;IAClB,YAAY,CAAC,EAAE,CAAC,CAAA;IAEhB,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAChE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAe,EAAE,IAAgB,EAAE,EAAc;IACvE,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,YAAY,CAAC,IAAI,CAAC,CAAA;IAClB,YAAY,CAAC,EAAE,CAAC,CAAA;IAEhB,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAe,EAAE,IAAgB;IAC5D,YAAY,CAAC,GAAG,CAAC,CAAA;IACjB,YAAY,CAAC,IAAI,CAAC,CAAA;IAElB,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACjB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAgB;IACnC,YAAY,CAAC,IAAI,CAAC,CAAA;IAElB,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACnB,OAAO,MAAM,CAAC,MAAM,EAAE,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,IAAgB,EAAE,IAAgB,EAAE,MAAe;IAClG,YAAY,CAAC,KAAK,CAAC,CAAA;IACnB,YAAY,CAAC,IAAI,CAAC,CAAA;IAClB,YAAY,CAAC,IAAI,CAAC,CAAA;IAElB,IAAI,IAAI,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,CAAA;IACzB,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACrC,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1D,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACvB,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IAEnC,MAAM,MAAM,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAEpE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAA;QACzC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACxD,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAA;QACzC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACxD,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACX,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAEjB,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAgB,EAAE,GAAe,EAAE,GAAe,EAAE,MAAc;IAC1F,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IAE9D,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,aAAa,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACnC,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA;IAC5B,CAAC;AACH,CAAC"}

package/lib/curve.d.ts

@@ -0,0 +1,10 @@
+export interface KeyPair {
+    pubKey: Buffer;
+    privKey: Buffer;
+}
+export declare function getPublicFromPrivateKey(privKey: Uint8Array): Buffer;
+export declare function generateKeyPair(): KeyPair;
+export declare function calculateAgreement(pubKeyInput: Uint8Array, privKey: Uint8Array): Buffer;
+export declare function calculateSignature(privKey: Uint8Array, message: Uint8Array): Buffer;
+export declare function verifySignature(pubKeyInput: Uint8Array, msg: Uint8Array, sig: Uint8Array): boolean;
+//# sourceMappingURL=curve.d.ts.map

package/lib/curve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"curve.d.ts","sourceRoot":"","sources":["../src/curve.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;CAChB;AA+CD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAInE;AAED,wBAAgB,eAAe,IAAI,OAAO,CAsBzC;AAED,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,MAAM,CA4BvF;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,MAAM,CAQnF;AAED,wBAAgB,eAAe,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAgBlG"}

package/lib/curve.js

@@ -0,0 +1,113 @@
+import * as curveJs from "@neykoor/curve25519-ts";
+import * as nodeCrypto from "crypto";
+import { getLogger } from "./logger.js";
+const PUBLIC_KEY_DER_PREFIX = Buffer.from([48, 42, 48, 5, 6, 3, 43, 101, 110, 3, 33, 0]);
+const PRIVATE_KEY_DER_PREFIX = Buffer.from([48, 46, 2, 1, 0, 48, 5, 6, 3, 43, 101, 110, 4, 34, 4, 32]);
+const KEY_BUNDLE_TYPE = Buffer.from([5]);
+function prefixKeyInPublicKey(pubKey) {
+    return Buffer.concat([KEY_BUNDLE_TYPE, pubKey]);
+}
+function validatePrivKey(privKey) {
+    if (privKey === undefined) {
+        throw new Error("Undefined private key");
+    }
+    if (!(privKey instanceof Uint8Array)) {
+        throw new Error(`Invalid private key type: ${privKey.constructor.name}`);
+    }
+    if (privKey.byteLength !== 32) {
+        throw new Error(`Incorrect private key length: ${privKey.byteLength}`);
+    }
+}
+function scrubPubKeyFormat(pubKey) {
+    if (!(pubKey instanceof Uint8Array)) {
+        throw new Error(`Invalid public key type: ${pubKey.constructor.name}`);
+    }
+    if (pubKey === undefined || ((pubKey.byteLength !== 33 || pubKey[0] !== 5) && pubKey.byteLength !== 32)) {
+        throw new Error("Invalid public key");
+    }
+    if (pubKey.byteLength === 33) {
+        return Buffer.from(pubKey.slice(1));
+    }
+    getLogger().warn("Expected pubkey of length 33, please report the ST and client that generated the pubkey");
+    return Buffer.from(pubKey);
+}
+function unclampEd25519PrivateKey(clampedSk) {
+    const unclampedSk = new Uint8Array(clampedSk);
+    unclampedSk[0] = unclampedSk[0] | 6;
+    unclampedSk[31] = unclampedSk[31] | 128;
+    unclampedSk[31] = unclampedSk[31] & ~64;
+    return unclampedSk;
+}
+export function getPublicFromPrivateKey(privKey) {
+    const unclampedPK = unclampEd25519PrivateKey(privKey);
+    const keyPair = curveJs.generateKeyPair(unclampedPK);
+    return prefixKeyInPublicKey(Buffer.from(keyPair.public));
+}
+export function generateKeyPair() {
+    try {
+        const { publicKey: publicDerBytes, privateKey: privateDerBytes } = nodeCrypto.generateKeyPairSync("x25519", {
+            publicKeyEncoding: { format: "der", type: "spki" },
+            privateKeyEncoding: { format: "der", type: "pkcs8" }
+        });
+        const pubKey = publicDerBytes.slice(PUBLIC_KEY_DER_PREFIX.length, PUBLIC_KEY_DER_PREFIX.length + 32);
+        const privKey = privateDerBytes.slice(PRIVATE_KEY_DER_PREFIX.length, PRIVATE_KEY_DER_PREFIX.length + 32);
+        return {
+            pubKey: prefixKeyInPublicKey(pubKey),
+            privKey
+        };
+    }
+    catch (e) {
+        getLogger().debug(`x25519 native keygen failed, falling back to curve25519-js: ${e?.message}`);
+        const keyPair = curveJs.generateKeyPair(nodeCrypto.randomBytes(32));
+        return {
+            privKey: Buffer.from(keyPair.private),
+            pubKey: prefixKeyInPublicKey(Buffer.from(keyPair.public))
+        };
+    }
+}
+export function calculateAgreement(pubKeyInput, privKey) {
+    const pubKey = scrubPubKeyFormat(pubKeyInput);
+    validatePrivKey(privKey);
+    if (!pubKey || pubKey.byteLength !== 32) {
+        throw new Error("Invalid public key");
+    }
+    if (typeof nodeCrypto.diffieHellman === "function") {
+        const nodePrivateKey = nodeCrypto.createPrivateKey({
+            key: Buffer.concat([PRIVATE_KEY_DER_PREFIX, privKey]),
+            format: "der",
+            type: "pkcs8"
+        });
+        const nodePublicKey = nodeCrypto.createPublicKey({
+            key: Buffer.concat([PUBLIC_KEY_DER_PREFIX, pubKey]),
+            format: "der",
+            type: "spki"
+        });
+        return nodeCrypto.diffieHellman({
+            privateKey: nodePrivateKey,
+            publicKey: nodePublicKey
+        });
+    }
+    const secret = curveJs.sharedKey(privKey, pubKey);
+    return Buffer.from(secret);
+}
+export function calculateSignature(privKey, message) {
+    validatePrivKey(privKey);
+    if (!message) {
+        throw new Error("Invalid message");
+    }
+    return Buffer.from(curveJs.sign(privKey, message));
+}
+export function verifySignature(pubKeyInput, msg, sig) {
+    const pubKey = scrubPubKeyFormat(pubKeyInput);
+    if (!pubKey || pubKey.byteLength !== 32) {
+        throw new Error("Invalid public key");
+    }
+    if (!msg) {
+        throw new Error("Invalid message");
+    }
+    if (!sig || sig.byteLength !== 64) {
+        throw new Error("Invalid signature");
+    }
+    return curveJs.verify(pubKey, msg, sig);
+}
+//# sourceMappingURL=curve.js.map

package/lib/curve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"curve.js","sourceRoot":"","sources":["../src/curve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAA;AACjD,OAAO,KAAK,UAAU,MAAM,QAAQ,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEpC,MAAM,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;AACxF,MAAM,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AACtG,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAOxC,SAAS,oBAAoB,CAAC,MAAkB;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,eAAe,CAAC,OAAmB;IAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC1C,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,YAAY,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,6BAA8B,OAA6B,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;IACjG,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACxE,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,IAAI,CAAC,CAAC,MAAM,YAAY,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,4BAA6B,MAA4B,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;IAC/F,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC,EAAE,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACvC,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACrC,CAAC;IAED,SAAS,EAAE,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAA;IAC3G,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,wBAAwB,CAAC,SAAqB;IACrD,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAA;IAE7C,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAE,GAAG,CAAC,CAAA;IACpC,WAAW,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAE,GAAG,GAAG,CAAA;IACxC,WAAW,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAE,GAAG,CAAC,EAAE,CAAA;IAExC,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAmB;IACzD,MAAM,WAAW,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IACpD,OAAO,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC,mBAAmB,CAAC,QAAQ,EAAE;YAC1G,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;YAClD,kBAAkB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE;SACrD,CAAC,CAAA;QAEF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;QACpG,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;QAExG,OAAO;YACL,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC;YACpC,OAAO;SACR,CAAA;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,SAAS,EAAE,CAAC,KAAK,CAAC,+DAAgE,CAAW,EAAE,OAAO,EAAE,CAAC,CAAA;QACzG,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;QACnE,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACrC,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SAC1D,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAuB,EAAE,OAAmB;IAC7E,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAA;IAC7C,eAAe,CAAC,OAAO,CAAC,CAAA;IAExB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACvC,CAAC;IAED,IAAI,OAAO,UAAU,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,UAAU,CAAC,gBAAgB,CAAC;YACjD,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SACd,CAAC,CAAA;QACF,MAAM,aAAa,GAAG,UAAU,CAAC,eAAe,CAAC;YAC/C,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;SACb,CAAC,CAAA;QAEF,OAAO,UAAU,CAAC,aAAa,CAAC;YAC9B,UAAU,EAAE,cAAc;YAC1B,SAAS,EAAE,aAAa;SACzB,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAmB,EAAE,OAAmB;IACzE,eAAe,CAAC,OAAO,CAAC,CAAA;IAExB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AACpD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,WAAuB,EAAE,GAAe,EAAE,GAAe;IACvF,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAA;IAE7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACvC,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACtC,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AACzC,CAAC"}

package/lib/direction.d.ts

@@ -0,0 +1,5 @@
+export declare enum Direction {
+    SENDING = 1,
+    RECEIVING = 2
+}
+//# sourceMappingURL=direction.d.ts.map

package/lib/direction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"direction.d.ts","sourceRoot":"","sources":["../src/direction.ts"],"names":[],"mappings":"AAAA,oBAAY,SAAS;IACnB,OAAO,IAAI;IACX,SAAS,IAAI;CACd"}

package/lib/direction.js

@@ -0,0 +1,6 @@
+export var Direction;
+(function (Direction) {
+    Direction[Direction["SENDING"] = 1] = "SENDING";
+    Direction[Direction["RECEIVING"] = 2] = "RECEIVING";
+})(Direction || (Direction = {}));
+//# sourceMappingURL=direction.js.map

package/lib/direction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direction.js","sourceRoot":"","sources":["../src/direction.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,SAGX;AAHD,WAAY,SAAS;IACnB,+CAAW,CAAA;IACX,mDAAa,CAAA;AACf,CAAC,EAHW,SAAS,KAAT,SAAS,QAGpB"}

package/lib/errors.d.ts

@@ -0,0 +1,20 @@
+export declare class SignalError extends Error {
+}
+export declare class UntrustedIdentityKeyError extends SignalError {
+    addr: string;
+    identityKey?: Buffer;
+    constructor(addr: string, identityKey?: Buffer);
+}
+export declare class SessionError extends SignalError {
+    constructor(message?: string);
+}
+export declare class MessageCounterError extends SessionError {
+    constructor(message?: string);
+}
+export declare class PreKeyError extends SessionError {
+    constructor(message?: string);
+}
+export declare class SenderKeyError extends SignalError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/lib/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,WAAY,SAAQ,KAAK;CAAG;AAEzC,qBAAa,yBAA0B,SAAQ,WAAW;IACjD,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;gBAEf,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM;CAM/C;AAED,qBAAa,YAAa,SAAQ,WAAW;gBAC/B,OAAO,CAAC,EAAE,MAAM;CAI7B;AAED,qBAAa,mBAAoB,SAAQ,YAAY;gBACvC,OAAO,CAAC,EAAE,MAAM;CAI7B;AAED,qBAAa,WAAY,SAAQ,YAAY;gBAC/B,OAAO,CAAC,EAAE,MAAM;CAI7B;AAED,qBAAa,cAAe,SAAQ,WAAW;gBACjC,OAAO,CAAC,EAAE,MAAM;CAI7B"}

package/lib/errors.js

@@ -0,0 +1,35 @@
+export class SignalError extends Error {
+}
+export class UntrustedIdentityKeyError extends SignalError {
+    constructor(addr, identityKey) {
+        super(`Untrusted identity key for address: ${addr}`);
+        this.name = "UntrustedIdentityKeyError";
+        this.addr = addr;
+        this.identityKey = identityKey;
+    }
+}
+export class SessionError extends SignalError {
+    constructor(message) {
+        super(message);
+        this.name = "SessionError";
+    }
+}
+export class MessageCounterError extends SessionError {
+    constructor(message) {
+        super(message);
+        this.name = "MessageCounterError";
+    }
+}
+export class PreKeyError extends SessionError {
+    constructor(message) {
+        super(message);
+        this.name = "PreKeyError";
+    }
+}
+export class SenderKeyError extends SignalError {
+    constructor(message) {
+        super(message);
+        this.name = "SenderKeyError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,WAAY,SAAQ,KAAK;CAAG;AAEzC,MAAM,OAAO,yBAA0B,SAAQ,WAAW;IAIxD,YAAY,IAAY,EAAE,WAAoB;QAC5C,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAA;QACpD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAA;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;IAChC,CAAC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,WAAW;IAC3C,YAAY,OAAgB;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IACnD,YAAY,OAAgB;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AAED,MAAM,OAAO,WAAY,SAAQ,YAAY;IAC3C,YAAY,OAAgB;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,aAAa,CAAA;IAC3B,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,WAAW;IAC7C,YAAY,OAAgB;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;IAC9B,CAAC;CACF"}

package/lib/group-cipher.d.ts

@@ -0,0 +1,12 @@
+import type { SenderKeyName } from "./sender-key-name.js";
+import type { SenderKeyStore } from "./types.js";
+export declare class GroupCipher {
+    private readonly senderKeyStore;
+    private readonly senderKeyName;
+    constructor(senderKeyStore: SenderKeyStore, senderKeyName: SenderKeyName);
+    private queueJob;
+    encrypt(paddedPlaintext: Uint8Array): Promise<Buffer>;
+    decrypt(senderKeyMessageBytes: Uint8Array): Promise<Buffer>;
+    private getSenderKey;
+}
+//# sourceMappingURL=group-cipher.d.ts.map

package/lib/group-cipher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-cipher.d.ts","sourceRoot":"","sources":["../src/group-cipher.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAItD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAK7C,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAe;gBAEjC,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa;YAK1D,QAAQ;IAIhB,OAAO,CAAC,eAAe,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAqCrD,OAAO,CAAC,qBAAqB,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IA6BjE,OAAO,CAAC,YAAY;CAuBrB"}

package/lib/group-cipher.js

@@ -0,0 +1,78 @@
+import * as crypto from "./crypto.js";
+import { SenderKeyError } from "./errors.js";
+import { queueJob } from "./queue-job.js";
+import { SenderKeyMessage } from "./sender-key-message.js";
+import { wipeBuffer } from "./util.js";
+const MAX_JUMP = 2000;
+export class GroupCipher {
+    constructor(senderKeyStore, senderKeyName) {
+        this.senderKeyStore = senderKeyStore;
+        this.senderKeyName = senderKeyName;
+    }
+    async queueJob(awaitable) {
+        return await queueJob(this.senderKeyName.toString(), awaitable);
+    }
+    async encrypt(paddedPlaintext) {
+        return await this.queueJob(async () => {
+            const record = await this.senderKeyStore.loadSenderKey(this.senderKeyName);
+            if (!record) {
+                throw new SenderKeyError("No SenderKeyRecord found for encryption");
+            }
+            const senderKeyState = record.getSenderKeyState();
+            if (!senderKeyState) {
+                throw new SenderKeyError("No session to encrypt message");
+            }
+            const signingKeyPrivate = senderKeyState.getSigningKeyPrivate();
+            if (!signingKeyPrivate) {
+                throw new SenderKeyError("Signing key is not available for encryption");
+            }
+            const iteration = senderKeyState.getSenderChainKey().getIteration();
+            const senderKey = this.getSenderKey(senderKeyState, iteration === 0 ? 0 : iteration + 1);
+            const ciphertext = crypto.encrypt(senderKey.getCipherKey(), Buffer.from(paddedPlaintext), senderKey.getIv());
+            const senderKeyMessage = new SenderKeyMessage(senderKeyState.getKeyId(), senderKey.getIteration(), ciphertext, signingKeyPrivate);
+            wipeBuffer(senderKey.getCipherKey());
+            wipeBuffer(senderKey.getIv());
+            await this.senderKeyStore.storeSenderKey(this.senderKeyName, record);
+            return senderKeyMessage.serialize();
+        });
+    }
+    async decrypt(senderKeyMessageBytes) {
+        return await this.queueJob(async () => {
+            const record = await this.senderKeyStore.loadSenderKey(this.senderKeyName);
+            if (!record) {
+                throw new SenderKeyError("No sender key record found for decryption");
+            }
+            const senderKeyMessage = new SenderKeyMessage(undefined, undefined, undefined, undefined, senderKeyMessageBytes);
+            const senderKeyState = record.getSenderKeyState(senderKeyMessage.getKeyId());
+            if (!senderKeyState) {
+                throw new SenderKeyError(`No session found to decrypt message from ${this.senderKeyName.getSender().toString()} with keyId: ${senderKeyMessage.getKeyId()}`);
+            }
+            senderKeyMessage.verifySignature(senderKeyState.getSigningKeyPublic());
+            const senderKey = this.getSenderKey(senderKeyState, senderKeyMessage.getIteration());
+            const plaintext = crypto.decrypt(senderKey.getCipherKey(), senderKeyMessage.getCipherText(), senderKey.getIv());
+            wipeBuffer(senderKey.getCipherKey());
+            wipeBuffer(senderKey.getIv());
+            await this.senderKeyStore.storeSenderKey(this.senderKeyName, record);
+            return plaintext;
+        });
+    }
+    getSenderKey(senderKeyState, iteration) {
+        let senderChainKey = senderKeyState.getSenderChainKey();
+        if (senderChainKey.getIteration() > iteration) {
+            if (senderKeyState.hasSenderMessageKey(iteration)) {
+                return senderKeyState.removeSenderMessageKey(iteration);
+            }
+            throw new SenderKeyError(`Received message with old counter: ${senderChainKey.getIteration()} , ${iteration}`);
+        }
+        if (iteration - senderChainKey.getIteration() > MAX_JUMP) {
+            throw new SenderKeyError("Over 2000 messages into the future!");
+        }
+        while (senderChainKey.getIteration() < iteration) {
+            senderKeyState.addSenderMessageKey(senderChainKey.getSenderMessageKey());
+            senderChainKey = senderChainKey.getNext();
+        }
+        senderKeyState.setSenderChainKey(senderChainKey);
+        return senderChainKey.getSenderMessageKey();
+    }
+}
+//# sourceMappingURL=group-cipher.js.map

package/lib/group-cipher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-cipher.js","sourceRoot":"","sources":["../src/group-cipher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAIvD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAEnC,MAAM,QAAQ,GAAG,IAAI,CAAA;AAErB,MAAM,OAAO,WAAW;IAItB,YAAY,cAA8B,EAAE,aAA4B;QACtE,IAAI,CAAC,cAAc,GAAG,cAAc,CAAA;QACpC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAI,SAA2B;QACnD,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAA;IACjE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,eAA2B;QACvC,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,cAAc,CAAC,yCAAyC,CAAC,CAAA;YACrE,CAAC;YAED,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAA;YACjD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,cAAc,CAAC,+BAA+B,CAAC,CAAA;YAC3D,CAAC;YAED,MAAM,iBAAiB,GAAG,cAAc,CAAC,oBAAoB,EAAE,CAAA;YAC/D,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,MAAM,IAAI,cAAc,CAAC,6CAA6C,CAAC,CAAA;YACzE,CAAC;YAED,MAAM,SAAS,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAC,YAAY,EAAE,CAAA;YACnE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;YAExF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAA;YAE5G,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAC3C,cAAc,CAAC,QAAQ,EAAE,EACzB,SAAS,CAAC,YAAY,EAAE,EACxB,UAAU,EACV,iBAAiB,CAClB,CAAA;YAED,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAA;YACpC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAA;YAE7B,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;YACpE,OAAO,gBAAgB,CAAC,SAAS,EAAE,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,qBAAiC;QAC7C,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;YAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,cAAc,CAAC,2CAA2C,CAAC,CAAA;YACvE,CAAC;YAED,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAA;YAChH,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAA;YAE5E,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,cAAc,CACtB,4CAA4C,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,gBAAgB,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CACnI,CAAA;YACH,CAAC;YAED,gBAAgB,CAAC,eAAe,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC,CAAA;YAEtE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,gBAAgB,CAAC,YAAY,EAAE,CAAC,CAAA;YACpF,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,aAAa,EAAE,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAA;YAE/G,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAA;YACpC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAA;YAE7B,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;YACpE,OAAO,SAAS,CAAA;QAClB,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,YAAY,CAAC,cAA8B,EAAE,SAAiB;QACpE,IAAI,cAAc,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAA;QAEvD,IAAI,cAAc,CAAC,YAAY,EAAE,GAAG,SAAS,EAAE,CAAC;YAC9C,IAAI,cAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClD,OAAO,cAAc,CAAC,sBAAsB,CAAC,SAAS,CAAE,CAAA;YAC1D,CAAC;YAED,MAAM,IAAI,cAAc,CAAC,sCAAsC,cAAc,CAAC,YAAY,EAAE,MAAM,SAAS,EAAE,CAAC,CAAA;QAChH,CAAC;QAED,IAAI,SAAS,GAAG,cAAc,CAAC,YAAY,EAAE,GAAG,QAAQ,EAAE,CAAC;YACzD,MAAM,IAAI,cAAc,CAAC,qCAAqC,CAAC,CAAA;QACjE,CAAC;QAED,OAAO,cAAc,CAAC,YAAY,EAAE,GAAG,SAAS,EAAE,CAAC;YACjD,cAAc,CAAC,mBAAmB,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC,CAAA;YACxE,cAAc,GAAG,cAAc,CAAC,OAAO,EAAE,CAAA;QAC3C,CAAC;QAED,cAAc,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAA;QAChD,OAAO,cAAc,CAAC,mBAAmB,EAAE,CAAA;IAC7C,CAAC;CACF"}

package/lib/group-keyhelper.d.ts

@@ -0,0 +1,5 @@
+import type { KeyPair } from "./curve.js";
+export declare function generateSenderKey(): Buffer;
+export declare function generateSenderKeyId(): number;
+export declare function generateSenderSigningKey(keyPair?: KeyPair): KeyPair;
+//# sourceMappingURL=group-keyhelper.d.ts.map

package/lib/group-keyhelper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-keyhelper.d.ts","sourceRoot":"","sources":["../src/group-keyhelper.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAEtC,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,wBAAwB,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAEnE"}

package/lib/group-keyhelper.js

@@ -0,0 +1,12 @@
+import * as nodeCrypto from "crypto";
+import * as curve from "./curve.js";
+export function generateSenderKey() {
+    return nodeCrypto.randomBytes(32);
+}
+export function generateSenderKeyId() {
+    return nodeCrypto.randomBytes(4).readUInt32BE(0);
+}
+export function generateSenderSigningKey(keyPair) {
+    return keyPair ?? curve.generateKeyPair();
+}
+//# sourceMappingURL=group-keyhelper.js.map

package/lib/group-keyhelper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-keyhelper.js","sourceRoot":"","sources":["../src/group-keyhelper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,QAAQ,CAAA;AACpC,OAAO,KAAK,KAAK,MAAM,SAAS,CAAA;AAGhC,MAAM,UAAU,iBAAiB;IAC/B,OAAO,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;AAClD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAiB;IACxD,OAAO,OAAO,IAAI,KAAK,CAAC,eAAe,EAAE,CAAA;AAC3C,CAAC"}

package/lib/group-proto.d.ts

@@ -0,0 +1,22 @@
+export interface ISenderKeyMessageProto {
+    id: number;
+    iteration: number;
+    ciphertext: Uint8Array;
+}
+export declare const SenderKeyMessageProto: {
+    create(props: Partial<ISenderKeyMessageProto>): ISenderKeyMessageProto;
+    encode(message: ISenderKeyMessageProto): Uint8Array;
+    decode(data: Uint8Array): ISenderKeyMessageProto;
+};
+export interface ISenderKeyDistributionMessageProto {
+    id: number;
+    iteration: number;
+    chainKey: Uint8Array;
+    signingKey: Uint8Array;
+}
+export declare const SenderKeyDistributionMessageProto: {
+    create(props: Partial<ISenderKeyDistributionMessageProto>): ISenderKeyDistributionMessageProto;
+    encode(message: ISenderKeyDistributionMessageProto): Uint8Array;
+    decode(data: Uint8Array): ISenderKeyDistributionMessageProto;
+};
+//# sourceMappingURL=group-proto.d.ts.map

package/lib/group-proto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-proto.d.ts","sourceRoot":"","sources":["../src/group-proto.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED,eAAO,MAAM,qBAAqB;kBAClB,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB;oBAQtD,sBAAsB,GAAG,UAAU;iBAQtC,UAAU,GAAG,sBAAsB;CAuBjD,CAAA;AAID,MAAM,WAAW,kCAAkC;IACjD,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,UAAU,CAAA;IACpB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED,eAAO,MAAM,iCAAiC;kBAC9B,OAAO,CAAC,kCAAkC,CAAC,GAAG,kCAAkC;oBAS9E,kCAAkC,GAAG,UAAU;iBASlD,UAAU,GAAG,kCAAkC;CA+B7D,CAAA"}