@noble/curves 1.4.1 → 1.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (120) hide show
  1. package/README.md +135 -123
  2. package/_shortw_utils.d.ts.map +1 -1
  3. package/abstract/bls.d.ts +37 -34
  4. package/abstract/bls.d.ts.map +1 -1
  5. package/abstract/bls.js +167 -115
  6. package/abstract/bls.js.map +1 -1
  7. package/abstract/curve.d.ts +2 -1
  8. package/abstract/curve.d.ts.map +1 -1
  9. package/abstract/curve.js +22 -7
  10. package/abstract/curve.js.map +1 -1
  11. package/abstract/edwards.d.ts +11 -0
  12. package/abstract/edwards.d.ts.map +1 -1
  13. package/abstract/edwards.js +81 -85
  14. package/abstract/edwards.js.map +1 -1
  15. package/abstract/modular.d.ts +4 -0
  16. package/abstract/modular.d.ts.map +1 -1
  17. package/abstract/modular.js +13 -2
  18. package/abstract/modular.js.map +1 -1
  19. package/abstract/montgomery.d.ts.map +1 -1
  20. package/abstract/montgomery.js +4 -9
  21. package/abstract/montgomery.js.map +1 -1
  22. package/abstract/tower.d.ts +106 -0
  23. package/abstract/tower.d.ts.map +1 -0
  24. package/abstract/tower.js +497 -0
  25. package/abstract/tower.js.map +1 -0
  26. package/abstract/utils.d.ts +17 -0
  27. package/abstract/utils.d.ts.map +1 -1
  28. package/abstract/utils.js +50 -1
  29. package/abstract/utils.js.map +1 -1
  30. package/abstract/weierstrass.d.ts +7 -1
  31. package/abstract/weierstrass.d.ts.map +1 -1
  32. package/abstract/weierstrass.js +90 -84
  33. package/abstract/weierstrass.js.map +1 -1
  34. package/bls12-381.d.ts +1 -65
  35. package/bls12-381.d.ts.map +1 -1
  36. package/bls12-381.js +55 -582
  37. package/bls12-381.js.map +1 -1
  38. package/bn254.d.ts +10 -6
  39. package/bn254.d.ts.map +1 -1
  40. package/bn254.js +207 -10
  41. package/bn254.js.map +1 -1
  42. package/ed25519.d.ts +7 -4
  43. package/ed25519.d.ts.map +1 -1
  44. package/ed25519.js +3 -3
  45. package/ed25519.js.map +1 -1
  46. package/ed448.js +0 -3
  47. package/ed448.js.map +1 -1
  48. package/esm/_shortw_utils.d.ts.map +1 -1
  49. package/esm/abstract/bls.d.ts +37 -34
  50. package/esm/abstract/bls.d.ts.map +1 -1
  51. package/esm/abstract/bls.js +168 -116
  52. package/esm/abstract/bls.js.map +1 -1
  53. package/esm/abstract/curve.d.ts +2 -1
  54. package/esm/abstract/curve.d.ts.map +1 -1
  55. package/esm/abstract/curve.js +22 -7
  56. package/esm/abstract/curve.js.map +1 -1
  57. package/esm/abstract/edwards.d.ts +11 -0
  58. package/esm/abstract/edwards.d.ts.map +1 -1
  59. package/esm/abstract/edwards.js +82 -86
  60. package/esm/abstract/edwards.js.map +1 -1
  61. package/esm/abstract/modular.d.ts +4 -0
  62. package/esm/abstract/modular.d.ts.map +1 -1
  63. package/esm/abstract/modular.js +12 -2
  64. package/esm/abstract/modular.js.map +1 -1
  65. package/esm/abstract/montgomery.d.ts.map +1 -1
  66. package/esm/abstract/montgomery.js +5 -10
  67. package/esm/abstract/montgomery.js.map +1 -1
  68. package/esm/abstract/tower.d.ts +106 -0
  69. package/esm/abstract/tower.d.ts.map +1 -0
  70. package/esm/abstract/tower.js +493 -0
  71. package/esm/abstract/tower.js.map +1 -0
  72. package/esm/abstract/utils.d.ts +17 -0
  73. package/esm/abstract/utils.d.ts.map +1 -1
  74. package/esm/abstract/utils.js +44 -0
  75. package/esm/abstract/utils.js.map +1 -1
  76. package/esm/abstract/weierstrass.d.ts +7 -1
  77. package/esm/abstract/weierstrass.d.ts.map +1 -1
  78. package/esm/abstract/weierstrass.js +91 -85
  79. package/esm/abstract/weierstrass.js.map +1 -1
  80. package/esm/bls12-381.d.ts +1 -65
  81. package/esm/bls12-381.d.ts.map +1 -1
  82. package/esm/bls12-381.js +57 -584
  83. package/esm/bls12-381.js.map +1 -1
  84. package/esm/bn254.d.ts +10 -6
  85. package/esm/bn254.d.ts.map +1 -1
  86. package/esm/bn254.js +206 -9
  87. package/esm/bn254.js.map +1 -1
  88. package/esm/ed25519.d.ts +7 -4
  89. package/esm/ed25519.d.ts.map +1 -1
  90. package/esm/ed25519.js +3 -3
  91. package/esm/ed25519.js.map +1 -1
  92. package/esm/ed448.js +0 -3
  93. package/esm/ed448.js.map +1 -1
  94. package/esm/p256.d.ts.map +1 -1
  95. package/esm/p384.d.ts.map +1 -1
  96. package/esm/p521.d.ts.map +1 -1
  97. package/esm/secp256k1.d.ts +6 -0
  98. package/esm/secp256k1.d.ts.map +1 -1
  99. package/esm/secp256k1.js +17 -13
  100. package/esm/secp256k1.js.map +1 -1
  101. package/p256.d.ts.map +1 -1
  102. package/p384.d.ts.map +1 -1
  103. package/p521.d.ts.map +1 -1
  104. package/package.json +8 -8
  105. package/secp256k1.d.ts +6 -0
  106. package/secp256k1.d.ts.map +1 -1
  107. package/secp256k1.js +16 -12
  108. package/secp256k1.js.map +1 -1
  109. package/src/abstract/bls.ts +222 -168
  110. package/src/abstract/curve.ts +23 -7
  111. package/src/abstract/edwards.ts +81 -68
  112. package/src/abstract/modular.ts +13 -3
  113. package/src/abstract/montgomery.ts +11 -10
  114. package/src/abstract/tower.ts +604 -0
  115. package/src/abstract/utils.ts +49 -0
  116. package/src/abstract/weierstrass.ts +85 -68
  117. package/src/bls12-381.ts +53 -707
  118. package/src/bn254.ts +224 -9
  119. package/src/ed25519.ts +5 -2
  120. package/src/secp256k1.ts +24 -12
@@ -0,0 +1,106 @@
1
+ import * as mod from './modular.js';
2
+ import type { ProjConstructor, ProjPointType } from './weierstrass.js';
3
+ export type BigintTuple = [bigint, bigint];
4
+ export type Fp = bigint;
5
+ export type Fp2 = {
6
+ c0: bigint;
7
+ c1: bigint;
8
+ };
9
+ export type BigintSix = [bigint, bigint, bigint, bigint, bigint, bigint];
10
+ export type Fp6 = {
11
+ c0: Fp2;
12
+ c1: Fp2;
13
+ c2: Fp2;
14
+ };
15
+ export type Fp12 = {
16
+ c0: Fp6;
17
+ c1: Fp6;
18
+ };
19
+ export type BigintTwelve = [
20
+ bigint,
21
+ bigint,
22
+ bigint,
23
+ bigint,
24
+ bigint,
25
+ bigint,
26
+ bigint,
27
+ bigint,
28
+ bigint,
29
+ bigint,
30
+ bigint,
31
+ bigint
32
+ ];
33
+ export type Fp2Bls = mod.IField<Fp2> & {
34
+ reim: (num: Fp2) => {
35
+ re: Fp;
36
+ im: Fp;
37
+ };
38
+ mulByB: (num: Fp2) => Fp2;
39
+ frobeniusMap(num: Fp2, power: number): Fp2;
40
+ fromBigTuple(num: [bigint, bigint]): Fp2;
41
+ };
42
+ export type Fp12Bls = mod.IField<Fp12> & {
43
+ frobeniusMap(num: Fp12, power: number): Fp12;
44
+ mul014(num: Fp12, o0: Fp2, o1: Fp2, o4: Fp2): Fp12;
45
+ mul034(num: Fp12, o0: Fp2, o3: Fp2, o4: Fp2): Fp12;
46
+ conjugate(num: Fp12): Fp12;
47
+ finalExponentiate(num: Fp12): Fp12;
48
+ };
49
+ export declare function psiFrobenius(Fp: mod.IField<Fp>, Fp2: Fp2Bls, base: Fp2): {
50
+ psi: (x: Fp2, y: Fp2) => [Fp2, Fp2];
51
+ psi2: (x: Fp2, y: Fp2) => [Fp2, Fp2];
52
+ G2psi: (c: ProjConstructor<Fp2>, P: ProjPointType<Fp2>) => ProjPointType<Fp2>;
53
+ G2psi2: (c: ProjConstructor<Fp2>, P: ProjPointType<Fp2>) => ProjPointType<Fp2>;
54
+ PSI_X: Fp2;
55
+ PSI_Y: Fp2;
56
+ PSI2_X: Fp2;
57
+ PSI2_Y: Fp2;
58
+ };
59
+ export type Tower12Opts = {
60
+ ORDER: bigint;
61
+ NONRESIDUE?: Fp;
62
+ FP2_NONRESIDUE: BigintTuple;
63
+ Fp2sqrt?: (num: Fp2) => Fp2;
64
+ Fp2mulByB: (num: Fp2) => Fp2;
65
+ Fp12cyclotomicSquare: (num: Fp12) => Fp12;
66
+ Fp12cyclotomicExp: (num: Fp12, n: bigint) => Fp12;
67
+ Fp12finalExponentiate: (num: Fp12) => Fp12;
68
+ };
69
+ export declare function tower12(opts: Tower12Opts): {
70
+ Fp: Readonly<mod.IField<bigint> & Required<Pick<mod.IField<bigint>, "isOdd">>>;
71
+ Fp2: mod.IField<Fp2> & {
72
+ NONRESIDUE: Fp2;
73
+ fromBigTuple: (tuple: BigintTuple | bigint[]) => Fp2;
74
+ reim: (num: Fp2) => {
75
+ re: bigint;
76
+ im: bigint;
77
+ };
78
+ mulByNonresidue: (num: Fp2) => Fp2;
79
+ mulByB: (num: Fp2) => Fp2;
80
+ frobeniusMap(num: Fp2, power: number): Fp2;
81
+ };
82
+ Fp6: mod.IField<Fp6> & {
83
+ fromBigSix: (tuple: BigintSix) => Fp6;
84
+ mulByNonresidue: (num: Fp6) => Fp6;
85
+ frobeniusMap(num: Fp6, power: number): Fp6;
86
+ mul1(num: Fp6, b1: Fp2): Fp6;
87
+ mul01(num: Fp6, b0: Fp2, b1: Fp2): Fp6;
88
+ mulByFp2(lhs: Fp6, rhs: Fp2): Fp6;
89
+ };
90
+ Fp4Square: (a: Fp2, b: Fp2) => {
91
+ first: Fp2;
92
+ second: Fp2;
93
+ };
94
+ Fp12: mod.IField<Fp12> & {
95
+ fromBigTwelve: (t: BigintTwelve) => Fp12;
96
+ frobeniusMap(num: Fp12, power: number): Fp12;
97
+ mul014(num: Fp12, o0: Fp2, o1: Fp2, o4: Fp2): Fp12;
98
+ mul034(num: Fp12, o0: Fp2, o3: Fp2, o4: Fp2): Fp12;
99
+ mulByFp2(lhs: Fp12, rhs: Fp2): Fp12;
100
+ conjugate(num: Fp12): Fp12;
101
+ finalExponentiate(num: Fp12): Fp12;
102
+ _cyclotomicSquare(num: Fp12): Fp12;
103
+ _cyclotomicExp(num: Fp12, n: bigint): Fp12;
104
+ };
105
+ };
106
+ //# sourceMappingURL=tower.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"tower.d.ts","sourceRoot":"","sources":["../src/abstract/tower.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AAEpC,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAmBvE,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC3C,MAAM,MAAM,EAAE,GAAG,MAAM,CAAC;AAGxB,MAAM,MAAM,GAAG,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7C,MAAM,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACzE,MAAM,MAAM,GAAG,GAAG;IAAE,EAAE,EAAE,GAAG,CAAC;IAAC,EAAE,EAAE,GAAG,CAAC;IAAC,EAAE,EAAE,GAAG,CAAA;CAAE,CAAC;AAChD,MAAM,MAAM,IAAI,GAAG;IAAE,EAAE,EAAE,GAAG,CAAC;IAAC,EAAE,EAAE,GAAG,CAAA;CAAE,CAAC;AAExC,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM;IAAE,MAAM;IAAE,MAAM;IAAE,MAAM;IAAE,MAAM;IAAE,MAAM;IAC9C,MAAM;IAAE,MAAM;IAAE,MAAM;IAAE,MAAM;IAAE,MAAM;IAAE,MAAM;CAC/C,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;IACrC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK;QAAE,EAAE,EAAE,EAAE,CAAC;QAAC,EAAE,EAAE,EAAE,CAAA;KAAE,CAAC;IACvC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,CAAC;IAC1B,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC;IAC3C,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;IACvC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC;IACnD,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC;IACnD,SAAS,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC;IAC3B,iBAAiB,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC;CACpC,CAAC;AA2BF,wBAAgB,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG;aAIrD,GAAG,KAAK,GAAG,KAAG,CAAC,GAAG,EAAE,GAAG,CAAC;cAYvB,GAAG,KAAK,GAAG,KAAG,CAAC,GAAG,EAAE,GAAG,CAAC;;;;;;;EAc1C;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,EAAE,CAAC;IAEhB,cAAc,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,CAAC;IAC5B,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,CAAC;IAE7B,oBAAoB,EAAE,CAAC,GAAG,EAAE,IAAI,KAAK,IAAI,CAAC;IAC1C,iBAAiB,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAClD,qBAAqB,EAAE,CAAC,GAAG,EAAE,IAAI,KAAK,IAAI,CAAC;CAC5C,CAAC;AAEF,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW;;;oBAoCzB,GAAG;sBACD,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,EAAE,KAAK,GAAG;cAC9C,CAAC,GAAG,EAAE,GAAG,KAAK;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE;yBAC7B,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG;gBAC1B,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG;0BACP,GAAG,SAAS,MAAM,GAAG,GAAG;;;oBA+J9B,CAAC,KAAK,EAAE,SAAS,KAAK,GAAG;yBACpB,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG;0BAChB,GAAG,SAAS,MAAM,GAAG,GAAG;kBAChC,GAAG,MAAM,GAAG,GAAG,GAAG;mBACjB,GAAG,MAAM,GAAG,MAAM,GAAG,GAAG,GAAG;sBACxB,GAAG,OAAO,GAAG,GAAG,GAAG;;mBAoJb,GAAG,KAAK,GAAG,KAAG;QAAE,KAAK,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,GAAG,CAAA;KAAE;;uBAS9C,CAAC,CAAC,EAAE,YAAY,KAAK,IAAI;0BACtB,IAAI,SAAS,MAAM,GAAG,IAAI;oBAChC,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,GAAG,IAAI;oBACtC,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,GAAG,IAAI;sBACpC,IAAI,OAAO,GAAG,GAAG,IAAI;uBACpB,IAAI,GAAG,IAAI;+BACH,IAAI,GAAG,IAAI;+BACX,IAAI,GAAG,IAAI;4BACd,IAAI,KAAK,MAAM,GAAG,IAAI;;EAiH7C"}
@@ -0,0 +1,497 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.psiFrobenius = psiFrobenius;
4
+ exports.tower12 = tower12;
5
+ const mod = require("./modular.js");
6
+ const utils_js_1 = require("./utils.js");
7
+ /*
8
+ Towered extension fields
9
+
10
+ Rather than implementing a massive 12th-degree extension directly, it is more efficient
11
+ to build it up from smaller extensions: a tower of extensions.
12
+
13
+ For BLS12-381, the Fp12 field is implemented as a quadratic (degree two) extension,
14
+ on top of a cubic (degree three) extension, on top of a quadratic extension of Fp.
15
+
16
+ For more info: "Pairings for beginners" by Costello, section 7.3.
17
+ */
18
+ // Be friendly to bad ECMAScript parsers by not using bigint literals
19
+ // prettier-ignore
20
+ const _0n = BigInt(0), _1n = BigInt(1), _2n = BigInt(2), _3n = BigInt(3);
21
+ function calcFrobeniusCoefficients(Fp, nonResidue, modulus, degree, num = 1, divisor) {
22
+ const _divisor = BigInt(divisor === undefined ? degree : divisor);
23
+ const towerModulus = modulus ** BigInt(degree);
24
+ const res = [];
25
+ for (let i = 0; i < num; i++) {
26
+ const a = BigInt(i + 1);
27
+ const powers = [];
28
+ for (let j = 0, qPower = _1n; j < degree; j++) {
29
+ const power = ((a * qPower - a) / _divisor) % towerModulus;
30
+ powers.push(Fp.pow(nonResidue, power));
31
+ qPower *= modulus;
32
+ }
33
+ res.push(powers);
34
+ }
35
+ return res;
36
+ }
37
+ // This works same at least for bls12-381, bn254 and bls12-377
38
+ function psiFrobenius(Fp, Fp2, base) {
39
+ // Ψ endomorphism
40
+ const PSI_X = Fp2.pow(base, (Fp.ORDER - _1n) / _3n); // u^((p-1)/3)
41
+ const PSI_Y = Fp2.pow(base, (Fp.ORDER - _1n) / _2n); // u^((p-1)/2)
42
+ function psi(x, y) {
43
+ // This x10 faster than previous version in bls12-381
44
+ const x2 = Fp2.mul(Fp2.frobeniusMap(x, 1), PSI_X);
45
+ const y2 = Fp2.mul(Fp2.frobeniusMap(y, 1), PSI_Y);
46
+ return [x2, y2];
47
+ }
48
+ // Ψ²(P) endomorphism (psi2(x) = psi(psi(x)))
49
+ const PSI2_X = Fp2.pow(base, (Fp.ORDER ** _2n - _1n) / _3n); // u^((p^2 - 1)/3)
50
+ // This equals -1, which causes y to be Fp2.neg(y).
51
+ // But not sure if there are case when this is not true?
52
+ const PSI2_Y = Fp2.pow(base, (Fp.ORDER ** _2n - _1n) / _2n); // u^((p^2 - 1)/3)
53
+ if (!Fp2.eql(PSI2_Y, Fp2.neg(Fp2.ONE)))
54
+ throw new Error('psiFrobenius: PSI2_Y!==-1');
55
+ function psi2(x, y) {
56
+ return [Fp2.mul(x, PSI2_X), Fp2.neg(y)];
57
+ }
58
+ // Map points
59
+ const mapAffine = (fn) => (c, P) => {
60
+ const affine = P.toAffine();
61
+ const p = fn(affine.x, affine.y);
62
+ return c.fromAffine({ x: p[0], y: p[1] });
63
+ };
64
+ const G2psi = mapAffine(psi);
65
+ const G2psi2 = mapAffine(psi2);
66
+ return { psi, psi2, G2psi, G2psi2, PSI_X, PSI_Y, PSI2_X, PSI2_Y };
67
+ }
68
+ function tower12(opts) {
69
+ const { ORDER } = opts;
70
+ // Fp
71
+ const Fp = mod.Field(ORDER);
72
+ const FpNONRESIDUE = Fp.create(opts.NONRESIDUE || BigInt(-1));
73
+ const FpLegendre = mod.FpLegendre(ORDER);
74
+ const Fpdiv2 = Fp.div(Fp.ONE, _2n); // 1/2
75
+ // Fp2
76
+ const FP2_FROBENIUS_COEFFICIENTS = calcFrobeniusCoefficients(Fp, FpNONRESIDUE, Fp.ORDER, 2)[0];
77
+ const Fp2Add = ({ c0, c1 }, { c0: r0, c1: r1 }) => ({
78
+ c0: Fp.add(c0, r0),
79
+ c1: Fp.add(c1, r1),
80
+ });
81
+ const Fp2Subtract = ({ c0, c1 }, { c0: r0, c1: r1 }) => ({
82
+ c0: Fp.sub(c0, r0),
83
+ c1: Fp.sub(c1, r1),
84
+ });
85
+ const Fp2Multiply = ({ c0, c1 }, rhs) => {
86
+ if (typeof rhs === 'bigint')
87
+ return { c0: Fp.mul(c0, rhs), c1: Fp.mul(c1, rhs) };
88
+ // (a+bi)(c+di) = (ac−bd) + (ad+bc)i
89
+ const { c0: r0, c1: r1 } = rhs;
90
+ let t1 = Fp.mul(c0, r0); // c0 * o0
91
+ let t2 = Fp.mul(c1, r1); // c1 * o1
92
+ // (T1 - T2) + ((c0 + c1) * (r0 + r1) - (T1 + T2))*i
93
+ const o0 = Fp.sub(t1, t2);
94
+ const o1 = Fp.sub(Fp.mul(Fp.add(c0, c1), Fp.add(r0, r1)), Fp.add(t1, t2));
95
+ return { c0: o0, c1: o1 };
96
+ };
97
+ const Fp2Square = ({ c0, c1 }) => {
98
+ const a = Fp.add(c0, c1);
99
+ const b = Fp.sub(c0, c1);
100
+ const c = Fp.add(c0, c0);
101
+ return { c0: Fp.mul(a, b), c1: Fp.mul(c, c1) };
102
+ };
103
+ const Fp2fromBigTuple = (tuple) => {
104
+ if (tuple.length !== 2)
105
+ throw new Error('Invalid tuple');
106
+ const fps = tuple.map((n) => Fp.create(n));
107
+ return { c0: fps[0], c1: fps[1] };
108
+ };
109
+ const FP2_ORDER = ORDER * ORDER;
110
+ const Fp2Nonresidue = Fp2fromBigTuple(opts.FP2_NONRESIDUE);
111
+ const Fp2 = {
112
+ ORDER: FP2_ORDER,
113
+ NONRESIDUE: Fp2Nonresidue,
114
+ BITS: (0, utils_js_1.bitLen)(FP2_ORDER),
115
+ BYTES: Math.ceil((0, utils_js_1.bitLen)(FP2_ORDER) / 8),
116
+ MASK: (0, utils_js_1.bitMask)((0, utils_js_1.bitLen)(FP2_ORDER)),
117
+ ZERO: { c0: Fp.ZERO, c1: Fp.ZERO },
118
+ ONE: { c0: Fp.ONE, c1: Fp.ZERO },
119
+ create: (num) => num,
120
+ isValid: ({ c0, c1 }) => typeof c0 === 'bigint' && typeof c1 === 'bigint',
121
+ is0: ({ c0, c1 }) => Fp.is0(c0) && Fp.is0(c1),
122
+ eql: ({ c0, c1 }, { c0: r0, c1: r1 }) => Fp.eql(c0, r0) && Fp.eql(c1, r1),
123
+ neg: ({ c0, c1 }) => ({ c0: Fp.neg(c0), c1: Fp.neg(c1) }),
124
+ pow: (num, power) => mod.FpPow(Fp2, num, power),
125
+ invertBatch: (nums) => mod.FpInvertBatch(Fp2, nums),
126
+ // Normalized
127
+ add: Fp2Add,
128
+ sub: Fp2Subtract,
129
+ mul: Fp2Multiply,
130
+ sqr: Fp2Square,
131
+ // NonNormalized stuff
132
+ addN: Fp2Add,
133
+ subN: Fp2Subtract,
134
+ mulN: Fp2Multiply,
135
+ sqrN: Fp2Square,
136
+ // Why inversion for bigint inside Fp instead of Fp2? it is even used in that context?
137
+ div: (lhs, rhs) => Fp2.mul(lhs, typeof rhs === 'bigint' ? Fp.inv(Fp.create(rhs)) : Fp2.inv(rhs)),
138
+ inv: ({ c0: a, c1: b }) => {
139
+ // We wish to find the multiplicative inverse of a nonzero
140
+ // element a + bu in Fp2. We leverage an identity
141
+ //
142
+ // (a + bu)(a - bu) = a² + b²
143
+ //
144
+ // which holds because u² = -1. This can be rewritten as
145
+ //
146
+ // (a + bu)(a - bu)/(a² + b²) = 1
147
+ //
148
+ // because a² + b² = 0 has no nonzero solutions for (a, b).
149
+ // This gives that (a - bu)/(a² + b²) is the inverse
150
+ // of (a + bu). Importantly, this can be computing using
151
+ // only a single inversion in Fp.
152
+ const factor = Fp.inv(Fp.create(a * a + b * b));
153
+ return { c0: Fp.mul(factor, Fp.create(a)), c1: Fp.mul(factor, Fp.create(-b)) };
154
+ },
155
+ sqrt: (num) => {
156
+ if (opts.Fp2sqrt)
157
+ return opts.Fp2sqrt(num);
158
+ // This is generic for all quadratic extensions (Fp2)
159
+ const { c0, c1 } = num;
160
+ if (Fp.is0(c1)) {
161
+ // if c0 is quadratic residue
162
+ if (Fp.eql(FpLegendre(Fp, c0), Fp.ONE))
163
+ return Fp2.create({ c0: Fp.sqrt(c0), c1: Fp.ZERO });
164
+ else
165
+ return Fp2.create({ c0: Fp.ZERO, c1: Fp.sqrt(Fp.div(c0, FpNONRESIDUE)) });
166
+ }
167
+ const a = Fp.sqrt(Fp.sub(Fp.sqr(c0), Fp.mul(Fp.sqr(c1), FpNONRESIDUE)));
168
+ let d = Fp.mul(Fp.add(a, c0), Fpdiv2);
169
+ const legendre = FpLegendre(Fp, d);
170
+ // -1, Quadratic non residue
171
+ if (!Fp.is0(legendre) && !Fp.eql(legendre, Fp.ONE))
172
+ d = Fp.sub(d, a);
173
+ const a0 = Fp.sqrt(d);
174
+ const candidateSqrt = Fp2.create({ c0: a0, c1: Fp.div(Fp.mul(c1, Fpdiv2), a0) });
175
+ if (!Fp2.eql(Fp2.sqr(candidateSqrt), num))
176
+ throw new Error('Cannot find square root');
177
+ // Normalize root: at this point candidateSqrt ** 2 = num, but also -candidateSqrt ** 2 = num
178
+ const x1 = candidateSqrt;
179
+ const x2 = Fp2.neg(x1);
180
+ const { re: re1, im: im1 } = Fp2.reim(x1);
181
+ const { re: re2, im: im2 } = Fp2.reim(x2);
182
+ if (im1 > im2 || (im1 === im2 && re1 > re2))
183
+ return x1;
184
+ return x2;
185
+ },
186
+ // Same as sgn0_m_eq_2 in RFC 9380
187
+ isOdd: (x) => {
188
+ const { re: x0, im: x1 } = Fp2.reim(x);
189
+ const sign_0 = x0 % _2n;
190
+ const zero_0 = x0 === _0n;
191
+ const sign_1 = x1 % _2n;
192
+ return BigInt(sign_0 || (zero_0 && sign_1)) == _1n;
193
+ },
194
+ // Bytes util
195
+ fromBytes(b) {
196
+ if (b.length !== Fp2.BYTES)
197
+ throw new Error(`fromBytes wrong length=${b.length}`);
198
+ return { c0: Fp.fromBytes(b.subarray(0, Fp.BYTES)), c1: Fp.fromBytes(b.subarray(Fp.BYTES)) };
199
+ },
200
+ toBytes: ({ c0, c1 }) => (0, utils_js_1.concatBytes)(Fp.toBytes(c0), Fp.toBytes(c1)),
201
+ cmov: ({ c0, c1 }, { c0: r0, c1: r1 }, c) => ({
202
+ c0: Fp.cmov(c0, r0, c),
203
+ c1: Fp.cmov(c1, r1, c),
204
+ }),
205
+ reim: ({ c0, c1 }) => ({ re: c0, im: c1 }),
206
+ // multiply by u + 1
207
+ mulByNonresidue: ({ c0, c1 }) => Fp2.mul({ c0, c1 }, Fp2Nonresidue),
208
+ mulByB: opts.Fp2mulByB,
209
+ fromBigTuple: Fp2fromBigTuple,
210
+ frobeniusMap: ({ c0, c1 }, power) => ({
211
+ c0,
212
+ c1: Fp.mul(c1, FP2_FROBENIUS_COEFFICIENTS[power % 2]),
213
+ }),
214
+ };
215
+ // Fp6
216
+ const Fp6Add = ({ c0, c1, c2 }, { c0: r0, c1: r1, c2: r2 }) => ({
217
+ c0: Fp2.add(c0, r0),
218
+ c1: Fp2.add(c1, r1),
219
+ c2: Fp2.add(c2, r2),
220
+ });
221
+ const Fp6Subtract = ({ c0, c1, c2 }, { c0: r0, c1: r1, c2: r2 }) => ({
222
+ c0: Fp2.sub(c0, r0),
223
+ c1: Fp2.sub(c1, r1),
224
+ c2: Fp2.sub(c2, r2),
225
+ });
226
+ const Fp6Multiply = ({ c0, c1, c2 }, rhs) => {
227
+ if (typeof rhs === 'bigint') {
228
+ return {
229
+ c0: Fp2.mul(c0, rhs),
230
+ c1: Fp2.mul(c1, rhs),
231
+ c2: Fp2.mul(c2, rhs),
232
+ };
233
+ }
234
+ const { c0: r0, c1: r1, c2: r2 } = rhs;
235
+ const t0 = Fp2.mul(c0, r0); // c0 * o0
236
+ const t1 = Fp2.mul(c1, r1); // c1 * o1
237
+ const t2 = Fp2.mul(c2, r2); // c2 * o2
238
+ return {
239
+ // t0 + (c1 + c2) * (r1 * r2) - (T1 + T2) * (u + 1)
240
+ c0: Fp2.add(t0, Fp2.mulByNonresidue(Fp2.sub(Fp2.mul(Fp2.add(c1, c2), Fp2.add(r1, r2)), Fp2.add(t1, t2)))),
241
+ // (c0 + c1) * (r0 + r1) - (T0 + T1) + T2 * (u + 1)
242
+ c1: Fp2.add(Fp2.sub(Fp2.mul(Fp2.add(c0, c1), Fp2.add(r0, r1)), Fp2.add(t0, t1)), Fp2.mulByNonresidue(t2)),
243
+ // T1 + (c0 + c2) * (r0 + r2) - T0 + T2
244
+ c2: Fp2.sub(Fp2.add(t1, Fp2.mul(Fp2.add(c0, c2), Fp2.add(r0, r2))), Fp2.add(t0, t2)),
245
+ };
246
+ };
247
+ const Fp6Square = ({ c0, c1, c2 }) => {
248
+ let t0 = Fp2.sqr(c0); // c0²
249
+ let t1 = Fp2.mul(Fp2.mul(c0, c1), _2n); // 2 * c0 * c1
250
+ let t3 = Fp2.mul(Fp2.mul(c1, c2), _2n); // 2 * c1 * c2
251
+ let t4 = Fp2.sqr(c2); // c2²
252
+ return {
253
+ c0: Fp2.add(Fp2.mulByNonresidue(t3), t0), // T3 * (u + 1) + T0
254
+ c1: Fp2.add(Fp2.mulByNonresidue(t4), t1), // T4 * (u + 1) + T1
255
+ // T1 + (c0 - c1 + c2)² + T3 - T0 - T4
256
+ c2: Fp2.sub(Fp2.sub(Fp2.add(Fp2.add(t1, Fp2.sqr(Fp2.add(Fp2.sub(c0, c1), c2))), t3), t0), t4),
257
+ };
258
+ };
259
+ const [FP6_FROBENIUS_COEFFICIENTS_1, FP6_FROBENIUS_COEFFICIENTS_2] = calcFrobeniusCoefficients(Fp2, Fp2Nonresidue, Fp.ORDER, 6, 2, 3);
260
+ const Fp6 = {
261
+ ORDER: Fp2.ORDER, // TODO: unused, but need to verify
262
+ BITS: 3 * Fp2.BITS,
263
+ BYTES: 3 * Fp2.BYTES,
264
+ MASK: (0, utils_js_1.bitMask)(3 * Fp2.BITS),
265
+ ZERO: { c0: Fp2.ZERO, c1: Fp2.ZERO, c2: Fp2.ZERO },
266
+ ONE: { c0: Fp2.ONE, c1: Fp2.ZERO, c2: Fp2.ZERO },
267
+ create: (num) => num,
268
+ isValid: ({ c0, c1, c2 }) => Fp2.isValid(c0) && Fp2.isValid(c1) && Fp2.isValid(c2),
269
+ is0: ({ c0, c1, c2 }) => Fp2.is0(c0) && Fp2.is0(c1) && Fp2.is0(c2),
270
+ neg: ({ c0, c1, c2 }) => ({ c0: Fp2.neg(c0), c1: Fp2.neg(c1), c2: Fp2.neg(c2) }),
271
+ eql: ({ c0, c1, c2 }, { c0: r0, c1: r1, c2: r2 }) => Fp2.eql(c0, r0) && Fp2.eql(c1, r1) && Fp2.eql(c2, r2),
272
+ sqrt: utils_js_1.notImplemented,
273
+ // Do we need division by bigint at all? Should be done via order:
274
+ div: (lhs, rhs) => Fp6.mul(lhs, typeof rhs === 'bigint' ? Fp.inv(Fp.create(rhs)) : Fp6.inv(rhs)),
275
+ pow: (num, power) => mod.FpPow(Fp6, num, power),
276
+ invertBatch: (nums) => mod.FpInvertBatch(Fp6, nums),
277
+ // Normalized
278
+ add: Fp6Add,
279
+ sub: Fp6Subtract,
280
+ mul: Fp6Multiply,
281
+ sqr: Fp6Square,
282
+ // NonNormalized stuff
283
+ addN: Fp6Add,
284
+ subN: Fp6Subtract,
285
+ mulN: Fp6Multiply,
286
+ sqrN: Fp6Square,
287
+ inv: ({ c0, c1, c2 }) => {
288
+ let t0 = Fp2.sub(Fp2.sqr(c0), Fp2.mulByNonresidue(Fp2.mul(c2, c1))); // c0² - c2 * c1 * (u + 1)
289
+ let t1 = Fp2.sub(Fp2.mulByNonresidue(Fp2.sqr(c2)), Fp2.mul(c0, c1)); // c2² * (u + 1) - c0 * c1
290
+ let t2 = Fp2.sub(Fp2.sqr(c1), Fp2.mul(c0, c2)); // c1² - c0 * c2
291
+ // 1/(((c2 * T1 + c1 * T2) * v) + c0 * T0)
292
+ let t4 = Fp2.inv(Fp2.add(Fp2.mulByNonresidue(Fp2.add(Fp2.mul(c2, t1), Fp2.mul(c1, t2))), Fp2.mul(c0, t0)));
293
+ return { c0: Fp2.mul(t4, t0), c1: Fp2.mul(t4, t1), c2: Fp2.mul(t4, t2) };
294
+ },
295
+ // Bytes utils
296
+ fromBytes: (b) => {
297
+ if (b.length !== Fp6.BYTES)
298
+ throw new Error(`fromBytes wrong length=${b.length}`);
299
+ return {
300
+ c0: Fp2.fromBytes(b.subarray(0, Fp2.BYTES)),
301
+ c1: Fp2.fromBytes(b.subarray(Fp2.BYTES, 2 * Fp2.BYTES)),
302
+ c2: Fp2.fromBytes(b.subarray(2 * Fp2.BYTES)),
303
+ };
304
+ },
305
+ toBytes: ({ c0, c1, c2 }) => (0, utils_js_1.concatBytes)(Fp2.toBytes(c0), Fp2.toBytes(c1), Fp2.toBytes(c2)),
306
+ cmov: ({ c0, c1, c2 }, { c0: r0, c1: r1, c2: r2 }, c) => ({
307
+ c0: Fp2.cmov(c0, r0, c),
308
+ c1: Fp2.cmov(c1, r1, c),
309
+ c2: Fp2.cmov(c2, r2, c),
310
+ }),
311
+ fromBigSix: (t) => {
312
+ if (!Array.isArray(t) || t.length !== 6)
313
+ throw new Error('Invalid Fp6 usage');
314
+ return {
315
+ c0: Fp2.fromBigTuple(t.slice(0, 2)),
316
+ c1: Fp2.fromBigTuple(t.slice(2, 4)),
317
+ c2: Fp2.fromBigTuple(t.slice(4, 6)),
318
+ };
319
+ },
320
+ frobeniusMap: ({ c0, c1, c2 }, power) => ({
321
+ c0: Fp2.frobeniusMap(c0, power),
322
+ c1: Fp2.mul(Fp2.frobeniusMap(c1, power), FP6_FROBENIUS_COEFFICIENTS_1[power % 6]),
323
+ c2: Fp2.mul(Fp2.frobeniusMap(c2, power), FP6_FROBENIUS_COEFFICIENTS_2[power % 6]),
324
+ }),
325
+ mulByFp2: ({ c0, c1, c2 }, rhs) => ({
326
+ c0: Fp2.mul(c0, rhs),
327
+ c1: Fp2.mul(c1, rhs),
328
+ c2: Fp2.mul(c2, rhs),
329
+ }),
330
+ mulByNonresidue: ({ c0, c1, c2 }) => ({ c0: Fp2.mulByNonresidue(c2), c1: c0, c2: c1 }),
331
+ // Sparse multiplication
332
+ mul1: ({ c0, c1, c2 }, b1) => ({
333
+ c0: Fp2.mulByNonresidue(Fp2.mul(c2, b1)),
334
+ c1: Fp2.mul(c0, b1),
335
+ c2: Fp2.mul(c1, b1),
336
+ }),
337
+ // Sparse multiplication
338
+ mul01({ c0, c1, c2 }, b0, b1) {
339
+ let t0 = Fp2.mul(c0, b0); // c0 * b0
340
+ let t1 = Fp2.mul(c1, b1); // c1 * b1
341
+ return {
342
+ // ((c1 + c2) * b1 - T1) * (u + 1) + T0
343
+ c0: Fp2.add(Fp2.mulByNonresidue(Fp2.sub(Fp2.mul(Fp2.add(c1, c2), b1), t1)), t0),
344
+ // (b0 + b1) * (c0 + c1) - T0 - T1
345
+ c1: Fp2.sub(Fp2.sub(Fp2.mul(Fp2.add(b0, b1), Fp2.add(c0, c1)), t0), t1),
346
+ // (c0 + c2) * b0 - T0 + T1
347
+ c2: Fp2.add(Fp2.sub(Fp2.mul(Fp2.add(c0, c2), b0), t0), t1),
348
+ };
349
+ },
350
+ };
351
+ // Fp12
352
+ const FP12_FROBENIUS_COEFFICIENTS = calcFrobeniusCoefficients(Fp2, Fp2Nonresidue, Fp.ORDER, 12, 1, 6)[0];
353
+ const Fp12Add = ({ c0, c1 }, { c0: r0, c1: r1 }) => ({
354
+ c0: Fp6.add(c0, r0),
355
+ c1: Fp6.add(c1, r1),
356
+ });
357
+ const Fp12Subtract = ({ c0, c1 }, { c0: r0, c1: r1 }) => ({
358
+ c0: Fp6.sub(c0, r0),
359
+ c1: Fp6.sub(c1, r1),
360
+ });
361
+ const Fp12Multiply = ({ c0, c1 }, rhs) => {
362
+ if (typeof rhs === 'bigint')
363
+ return { c0: Fp6.mul(c0, rhs), c1: Fp6.mul(c1, rhs) };
364
+ let { c0: r0, c1: r1 } = rhs;
365
+ let t1 = Fp6.mul(c0, r0); // c0 * r0
366
+ let t2 = Fp6.mul(c1, r1); // c1 * r1
367
+ return {
368
+ c0: Fp6.add(t1, Fp6.mulByNonresidue(t2)), // T1 + T2 * v
369
+ // (c0 + c1) * (r0 + r1) - (T1 + T2)
370
+ c1: Fp6.sub(Fp6.mul(Fp6.add(c0, c1), Fp6.add(r0, r1)), Fp6.add(t1, t2)),
371
+ };
372
+ };
373
+ const Fp12Square = ({ c0, c1 }) => {
374
+ let ab = Fp6.mul(c0, c1); // c0 * c1
375
+ return {
376
+ // (c1 * v + c0) * (c0 + c1) - AB - AB * v
377
+ c0: Fp6.sub(Fp6.sub(Fp6.mul(Fp6.add(Fp6.mulByNonresidue(c1), c0), Fp6.add(c0, c1)), ab), Fp6.mulByNonresidue(ab)),
378
+ c1: Fp6.add(ab, ab),
379
+ }; // AB + AB
380
+ };
381
+ function Fp4Square(a, b) {
382
+ const a2 = Fp2.sqr(a);
383
+ const b2 = Fp2.sqr(b);
384
+ return {
385
+ first: Fp2.add(Fp2.mulByNonresidue(b2), a2), // b² * Nonresidue + a²
386
+ second: Fp2.sub(Fp2.sub(Fp2.sqr(Fp2.add(a, b)), a2), b2), // (a + b)² - a² - b²
387
+ };
388
+ }
389
+ const Fp12 = {
390
+ ORDER: Fp2.ORDER, // TODO: unused, but need to verify
391
+ BITS: 2 * Fp2.BITS,
392
+ BYTES: 2 * Fp2.BYTES,
393
+ MASK: (0, utils_js_1.bitMask)(2 * Fp2.BITS),
394
+ ZERO: { c0: Fp6.ZERO, c1: Fp6.ZERO },
395
+ ONE: { c0: Fp6.ONE, c1: Fp6.ZERO },
396
+ create: (num) => num,
397
+ isValid: ({ c0, c1 }) => Fp6.isValid(c0) && Fp6.isValid(c1),
398
+ is0: ({ c0, c1 }) => Fp6.is0(c0) && Fp6.is0(c1),
399
+ neg: ({ c0, c1 }) => ({ c0: Fp6.neg(c0), c1: Fp6.neg(c1) }),
400
+ eql: ({ c0, c1 }, { c0: r0, c1: r1 }) => Fp6.eql(c0, r0) && Fp6.eql(c1, r1),
401
+ sqrt: utils_js_1.notImplemented,
402
+ inv: ({ c0, c1 }) => {
403
+ let t = Fp6.inv(Fp6.sub(Fp6.sqr(c0), Fp6.mulByNonresidue(Fp6.sqr(c1)))); // 1 / (c0² - c1² * v)
404
+ return { c0: Fp6.mul(c0, t), c1: Fp6.neg(Fp6.mul(c1, t)) }; // ((C0 * T) * T) + (-C1 * T) * w
405
+ },
406
+ div: (lhs, rhs) => Fp12.mul(lhs, typeof rhs === 'bigint' ? Fp.inv(Fp.create(rhs)) : Fp12.inv(rhs)),
407
+ pow: (num, power) => mod.FpPow(Fp12, num, power),
408
+ invertBatch: (nums) => mod.FpInvertBatch(Fp12, nums),
409
+ // Normalized
410
+ add: Fp12Add,
411
+ sub: Fp12Subtract,
412
+ mul: Fp12Multiply,
413
+ sqr: Fp12Square,
414
+ // NonNormalized stuff
415
+ addN: Fp12Add,
416
+ subN: Fp12Subtract,
417
+ mulN: Fp12Multiply,
418
+ sqrN: Fp12Square,
419
+ // Bytes utils
420
+ fromBytes: (b) => {
421
+ if (b.length !== Fp12.BYTES)
422
+ throw new Error(`fromBytes wrong length=${b.length}`);
423
+ return {
424
+ c0: Fp6.fromBytes(b.subarray(0, Fp6.BYTES)),
425
+ c1: Fp6.fromBytes(b.subarray(Fp6.BYTES)),
426
+ };
427
+ },
428
+ toBytes: ({ c0, c1 }) => (0, utils_js_1.concatBytes)(Fp6.toBytes(c0), Fp6.toBytes(c1)),
429
+ cmov: ({ c0, c1 }, { c0: r0, c1: r1 }, c) => ({
430
+ c0: Fp6.cmov(c0, r0, c),
431
+ c1: Fp6.cmov(c1, r1, c),
432
+ }),
433
+ // Utils
434
+ // toString() {
435
+ // return `Fp12(${this.c0} + ${this.c1} * w)`;
436
+ // },
437
+ // fromTuple(c: [Fp6, Fp6]) {
438
+ // return new Fp12(...c);
439
+ // }
440
+ fromBigTwelve: (t) => ({
441
+ c0: Fp6.fromBigSix(t.slice(0, 6)),
442
+ c1: Fp6.fromBigSix(t.slice(6, 12)),
443
+ }),
444
+ // Raises to q**i -th power
445
+ frobeniusMap(lhs, power) {
446
+ const { c0, c1, c2 } = Fp6.frobeniusMap(lhs.c1, power);
447
+ const coeff = FP12_FROBENIUS_COEFFICIENTS[power % 12];
448
+ return {
449
+ c0: Fp6.frobeniusMap(lhs.c0, power),
450
+ c1: Fp6.create({
451
+ c0: Fp2.mul(c0, coeff),
452
+ c1: Fp2.mul(c1, coeff),
453
+ c2: Fp2.mul(c2, coeff),
454
+ }),
455
+ };
456
+ },
457
+ mulByFp2: ({ c0, c1 }, rhs) => ({
458
+ c0: Fp6.mulByFp2(c0, rhs),
459
+ c1: Fp6.mulByFp2(c1, rhs),
460
+ }),
461
+ conjugate: ({ c0, c1 }) => ({ c0, c1: Fp6.neg(c1) }),
462
+ // Sparse multiplication
463
+ mul014: ({ c0, c1 }, o0, o1, o4) => {
464
+ let t0 = Fp6.mul01(c0, o0, o1);
465
+ let t1 = Fp6.mul1(c1, o4);
466
+ return {
467
+ c0: Fp6.add(Fp6.mulByNonresidue(t1), t0), // T1 * v + T0
468
+ // (c1 + c0) * [o0, o1+o4] - T0 - T1
469
+ c1: Fp6.sub(Fp6.sub(Fp6.mul01(Fp6.add(c1, c0), o0, Fp2.add(o1, o4)), t0), t1),
470
+ };
471
+ },
472
+ mul034: ({ c0, c1 }, o0, o3, o4) => {
473
+ const a = Fp6.create({
474
+ c0: Fp2.mul(c0.c0, o0),
475
+ c1: Fp2.mul(c0.c1, o0),
476
+ c2: Fp2.mul(c0.c2, o0),
477
+ });
478
+ const b = Fp6.mul01(c1, o3, o4);
479
+ const e = Fp6.mul01(Fp6.add(c0, c1), Fp2.add(o0, o3), o4);
480
+ return {
481
+ c0: Fp6.add(Fp6.mulByNonresidue(b), a),
482
+ c1: Fp6.sub(e, Fp6.add(a, b)),
483
+ };
484
+ },
485
+ // A cyclotomic group is a subgroup of Fp^n defined by
486
+ // GΦₙ(p) = {α ∈ Fpⁿ : α^Φₙ(p) = 1}
487
+ // The result of any pairing is in a cyclotomic subgroup
488
+ // https://eprint.iacr.org/2009/565.pdf
489
+ _cyclotomicSquare: opts.Fp12cyclotomicSquare,
490
+ _cyclotomicExp: opts.Fp12cyclotomicExp,
491
+ // https://eprint.iacr.org/2010/354.pdf
492
+ // https://eprint.iacr.org/2009/565.pdf
493
+ finalExponentiate: opts.Fp12finalExponentiate,
494
+ };
495
+ return { Fp, Fp2, Fp6, Fp4Square, Fp12 };
496
+ }
497
+ //# sourceMappingURL=tower.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"tower.js","sourceRoot":"","sources":["../src/abstract/tower.ts"],"names":[],"mappings":";;AA2EA,oCA8BC;AAeD,0BAmeC;AA3lBD,oCAAoC;AACpC,yCAA0E;AAG1E;;;;;;;;;;EAUE;AAEF,qEAAqE;AACrE,kBAAkB;AAClB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AAgCzE,SAAS,yBAAyB,CAChC,EAAiB,EACjB,UAAa,EACb,OAAe,EACf,MAAc,EACd,MAAc,CAAC,EACf,OAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,YAAY,GAAQ,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,MAAM,GAAQ,EAAE,CAAC;QACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,YAAY,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YACvC,MAAM,IAAI,OAAO,CAAC;QACpB,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8DAA8D;AAC9D,SAAgB,YAAY,CAAC,EAAkB,EAAE,GAAW,EAAE,IAAS;IACrE,iBAAiB;IACjB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc;IACnE,SAAS,GAAG,CAAC,CAAM,EAAE,CAAM;QACzB,qDAAqD;QACrD,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAClD,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,6CAA6C;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,kBAAkB;IAC/E,mDAAmD;IACnD,wDAAwD;IACxD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,kBAAkB;IAC/E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACrF,SAAS,IAAI,CAAC,CAAM,EAAE,CAAM;QAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,aAAa;IACb,MAAM,SAAS,GACb,CAAI,EAA0B,EAAE,EAAE,CAClC,CAAC,CAAqB,EAAE,CAAmB,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpE,CAAC;AAeD,SAAgB,OAAO,CAAC,IAAiB;IACvC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,KAAK;IACL,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM;IAE1C,MAAM;IACN,MAAM,0BAA0B,GAAG,yBAAyB,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,CAAC,CAAC;QAC5D,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QAClB,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;KACnB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,CAAC,CAAC;QACjE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QAClB,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;KACnB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,GAAQ,EAAE,EAAE;QAChD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QACjF,oCAAoC;QACpC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;QAC/B,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACnC,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACnC,oDAAoD;QACpD,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE;QACpC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACjD,CAAC,CAAC;IASF,MAAM,eAAe,GAAG,CAAC,KAA6B,EAAE,EAAE;QACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAa,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,CAAC;IAChC,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,GAAG,GAA+B;QACtC,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,aAAa;QACzB,IAAI,EAAE,IAAA,iBAAM,EAAC,SAAS,CAAC;QACvB,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAA,iBAAM,EAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,EAAE,IAAA,kBAAO,EAAC,IAAA,iBAAM,EAAC,SAAS,CAAC,CAAC;QAChC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE;QAClC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE;QAChC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;QACpB,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ;QACzE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QACnF,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACzD,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC;QAC/C,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC;QACnD,aAAa;QACb,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,SAAS;QACd,sBAAsB;QACtB,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,SAAS;QACf,sFAAsF;QACtF,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAChB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/E,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;YACxB,0DAA0D;YAC1D,iDAAiD;YACjD,EAAE;YACF,6BAA6B;YAC7B,EAAE;YACF,wDAAwD;YACxD,EAAE;YACF,iCAAiC;YACjC,EAAE;YACF,2DAA2D;YAC3D,oDAAoD;YACpD,wDAAwD;YACxD,iCAAiC;YACjC,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChD,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;YACZ,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3C,qDAAqD;YACrD,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;YACvB,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACf,6BAA6B;gBAC7B,IAAI,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;;oBACvF,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACnC,4BAA4B;YAC5B,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC;gBAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YACjF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACtF,6FAA6F;YAC7F,MAAM,EAAE,GAAG,aAAa,CAAC;YACzB,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,GAAG,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;YACvD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,kCAAkC;QAClC,KAAK,EAAE,CAAC,CAAM,EAAE,EAAE;YAChB,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC;YACxB,MAAM,MAAM,GAAG,EAAE,KAAK,GAAG,CAAC;YAC1B,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC;YACxB,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC;QACrD,CAAC;QACD,aAAa;QACb,SAAS,CAAC,CAAa;YACrB,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAClF,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/F,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,IAAA,sBAAW,EAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACtB,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;SACvB,CAAC;QACF,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QAC1C,oBAAoB;QACpB,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,CAAC;QACnE,MAAM,EAAE,IAAI,CAAC,SAAS;QACtB,YAAY,EAAE,eAAe;QAC7B,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAa,EAAO,EAAE,CAAC,CAAC;YACjD,EAAE;YACF,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,0BAA0B,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;SACtD,CAAC;KACH,CAAC;IACF,MAAM;IACN,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,CAAC,CAAC;QACxE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QACnB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QACnB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,CAAC,CAAC;QAC7E,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QACnB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QACnB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,GAAiB,EAAE,EAAE;QAC7D,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC;gBACpB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC;gBACpB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC;aACrB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;QACvC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACtC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACtC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACtC,OAAO;YACL,mDAAmD;YACnD,EAAE,EAAE,GAAG,CAAC,GAAG,CACT,EAAE,EACF,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CACzF;YACD,mDAAmD;YACnD,EAAE,EAAE,GAAG,CAAC,GAAG,CACT,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EACnE,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CACxB;YACD,uCAAuC;YACvC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;SACrF,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE;QACxC,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM;QAC5B,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,cAAc;QACtD,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,cAAc;QACtD,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM;QAC5B,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,oBAAoB;YAC9D,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,oBAAoB;YAC9D,sCAAsC;YACtC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;SAC9F,CAAC;IACJ,CAAC,CAAC;IAUF,MAAM,CAAC,4BAA4B,EAAE,4BAA4B,CAAC,GAAG,yBAAyB,CAC5F,GAAG,EACH,aAAa,EACb,EAAE,CAAC,KAAK,EACR,CAAC,EACD,CAAC,EACD,CAAC,CACF,CAAC;IAEF,MAAM,GAAG,GAA+B;QACtC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,mCAAmC;QACrD,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI;QAClB,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK;QACpB,IAAI,EAAE,IAAA,kBAAO,EAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;QAC3B,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE;QAClD,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE;QAChD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;QACpB,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAClF,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAClD,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QACvD,IAAI,EAAE,yBAAc;QACpB,kEAAkE;QAClE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAChB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/E,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC;QAC/C,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC;QACnD,aAAa;QACb,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,SAAS;QACd,sBAAsB;QACtB,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,SAAS;QAEf,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YACtB,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B;YAC/F,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,0BAA0B;YAC/F,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB;YAChE,0CAA0C;YAC1C,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CACd,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CACzF,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3E,CAAC;QACD,cAAc;QACd,SAAS,EAAE,CAAC,CAAa,EAAO,EAAE;YAChC,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAClF,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC3C,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;gBACvD,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;aAC7C,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAc,EAAE,CACtC,IAAA,sBAAW,EAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACvB,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACvB,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;SACxB,CAAC;QACF,UAAU,EAAE,CAAC,CAAY,EAAO,EAAE;YAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC9E,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aACpC,CAAC;QACJ,CAAC;QACD,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC;YAChD,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC;YAC/B,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,4BAA4B,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACjF,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,4BAA4B,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;SAClF,CAAC;QACF,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAQ,EAAO,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC;YACpB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC;YACpB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC;SACrB,CAAC;QACF,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QACtF,wBAAwB;QACxB,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAO,EAAE,CAAC,CAAC;YACvC,EAAE,EAAE,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACxC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;YACnB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;SACpB,CAAC;QACF,wBAAwB;QACxB,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAO;YACpC,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;YACpC,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;YACpC,OAAO;gBACL,uCAAuC;gBACvC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC/E,kCAAkC;gBAClC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvE,2BAA2B;gBAC3B,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;aAC3D,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,OAAO;IACP,MAAM,2BAA2B,GAAG,yBAAyB,CAC3D,GAAG,EACH,aAAa,EACb,EAAE,CAAC,KAAK,EACR,EAAE,EACF,CAAC,EACD,CAAC,CACF,CAAC,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAQ,EAAE,EAAE,CAAC,CAAC;QAC/D,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QACnB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAQ,EAAE,EAAE,CAAC,CAAC;QACpE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QACnB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAQ,EAAE,GAAkB,EAAE,EAAE;QAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QACnF,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;QAC7B,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACpC,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACpC,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,EAAE,cAAc;YACxD,oCAAoC;YACpC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;SACxE,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAQ,EAAE,EAAE;QACtC,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACpC,OAAO;YACL,0CAA0C;YAC1C,EAAE,EAAE,GAAG,CAAC,GAAG,CACT,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAC3E,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CACxB;YACD,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;SACpB,CAAC,CAAC,UAAU;IACf,CAAC,CAAC;IACF,SAAS,SAAS,CAAC,CAAM,EAAE,CAAM;QAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,uBAAuB;YACpE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,qBAAqB;SAChF,CAAC;IACJ,CAAC;IAaD,MAAM,IAAI,GAAiC;QACzC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,mCAAmC;QACrD,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI;QAClB,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK;QACpB,IAAI,EAAE,IAAA,kBAAO,EAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;QAC3B,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE;QACpC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE;QAClC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;QACpB,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3D,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QAC3E,IAAI,EAAE,yBAAc;QACpB,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;YAClB,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;YAC/F,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,iCAAiC;QAC/F,CAAC;QACD,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAChB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjF,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC;QAChD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC;QACpD,aAAa;QACb,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,YAAY;QACjB,GAAG,EAAE,YAAY;QACjB,GAAG,EAAE,UAAU;QACf,sBAAsB;QACtB,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,UAAU;QAEhB,cAAc;QACd,SAAS,EAAE,CAAC,CAAa,EAAQ,EAAE;YACjC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC3C,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;aACzC,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAc,EAAE,CAAC,IAAA,sBAAW,EAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClF,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACvB,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;SACxB,CAAC;QACF,QAAQ;QACR,eAAe;QACf,gDAAgD;QAChD,KAAK;QACL,6BAA6B;QAC7B,2BAA2B;QAC3B,IAAI;QACJ,aAAa,EAAE,CAAC,CAAe,EAAQ,EAAE,CAAC,CAAC;YACzC,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAc,CAAC;YAC9C,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAc,CAAC;SAChD,CAAC;QACF,2BAA2B;QAC3B,YAAY,CAAC,GAAG,EAAE,KAAa;YAC7B,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,2BAA2B,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YACtD,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC;gBACnC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC;oBACb,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC;oBACtB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC;oBACtB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC;iBACvB,CAAC;aACH,CAAC;QACJ,CAAC;QACD,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAQ,EAAQ,EAAE,CAAC,CAAC;YACzC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC;YACzB,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC;SAC1B,CAAC;QACF,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1D,wBAAwB;QACxB,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAO,EAAE,EAAO,EAAE,EAAE;YAChD,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/B,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1B,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,cAAc;gBACxD,oCAAoC;gBACpC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;aAC9E,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAO,EAAE,EAAO,EAAE,EAAO,EAAE,EAAE;YAChD,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;gBACnB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;gBACtB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;gBACtB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;aACvB,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aAC9B,CAAC;QACJ,CAAC;QAED,sDAAsD;QACtD,qCAAqC;QACrC,wDAAwD;QACxD,uCAAuC;QACvC,iBAAiB,EAAE,IAAI,CAAC,oBAAoB;QAC5C,cAAc,EAAE,IAAI,CAAC,iBAAiB;QACtC,uCAAuC;QACvC,uCAAuC;QACvC,iBAAiB,EAAE,IAAI,CAAC,qBAAqB;KAC9C,CAAC;IAEF,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC"}