@private.me/xbind 1.2.17 → 1.3.5

package/dist-standalone/_deps/crypto/errors.js

@@ -1,109 +1,199 @@
-/**
- * @module errors
- * Named error class hierarchy for @private.me/crypto.
- *
- * Provides structured error types for XorIDA threshold sharing,
- * HMAC integrity verification, PKCS#7 padding, and TLV serialization.
- */
-const DOC_BASE = 'https://private.me/docs/packages/crypto';
-/** Base error class for all crypto operations. */
+const a12_0x39904e = a12_0x1a13;
+(function (_0x310496, _0x3a68c1) {
+    const a12_0x41e666 = {
+            _0x1de7a9: 0x123,
+            _0x3bd48a: 0x129,
+            _0x14cf25: 0x13f,
+            _0x2d1da8: 0x133
+        }, _0x1b258c = a12_0x1a13, _0x3253f1 = _0x310496();
+    while (!![]) {
+        try {
+            const _0x3c19aa = parseInt(_0x1b258c(a12_0x41e666._0x1de7a9)) / 0x1 * (parseInt(_0x1b258c(a12_0x41e666._0x3bd48a)) / 0x2) + -parseInt(_0x1b258c(a12_0x41e666._0x14cf25)) / 0x3 + parseInt(_0x1b258c(0x137)) / 0x4 + -parseInt(_0x1b258c(0x128)) / 0x5 + parseInt(_0x1b258c(0x124)) / 0x6 + -parseInt(_0x1b258c(0x13a)) / 0x7 * (-parseInt(_0x1b258c(0x140)) / 0x8) + -parseInt(_0x1b258c(a12_0x41e666._0x2d1da8)) / 0x9;
+            if (_0x3c19aa === _0x3a68c1)
+                break;
+            else
+                _0x3253f1['push'](_0x3253f1['shift']());
+        } catch (_0x588b3a) {
+            _0x3253f1['push'](_0x3253f1['shift']());
+        }
+    }
+}(a12_0x5190, 0x37b78));
+const DOC_BASE = a12_0x39904e(0x132);
 export class CryptoError extends Error {
-    code;
-    subCode;
-    docUrl;
-    constructor(code, message, docUrl) {
-        super(message);
-        this.name = 'CryptoError';
-        const parts = code.split(':');
-        this.code = parts[0] ?? code;
-        this.subCode = parts.length > 1 ? parts.slice(1).join(':') : undefined;
-        this.docUrl = docUrl;
+    [a12_0x39904e(0x13c)];
+    [a12_0x39904e(0x14c)];
+    [a12_0x39904e(0x141)];
+    constructor(_0x124995, _0x586476, _0x292f4d) {
+        const a12_0x2e48ae = {
+                _0x166a51: 0x146,
+                _0x21f589: 0x122,
+                _0x147cfe: 0x141
+            }, _0x5639d0 = a12_0x1a13, _0x573c24 = { 'PRqpB': _0x5639d0(a12_0x2e48ae._0x166a51) };
+        super(_0x586476), this['name'] = _0x573c24['PRqpB'];
+        const _0x2f9d6a = _0x124995['split'](':');
+        this[_0x5639d0(0x13c)] = _0x2f9d6a[0x0] ?? _0x124995, this[_0x5639d0(0x14c)] = _0x2f9d6a[_0x5639d0(0x12f)] > 0x1 ? _0x2f9d6a[_0x5639d0(a12_0x2e48ae._0x21f589)](0x1)['join'](':') : undefined, this[_0x5639d0(a12_0x2e48ae._0x147cfe)] = _0x292f4d;
     }
 }
-/** Error thrown during XorIDA split or reconstruction operations. */
 export class CryptoSplitError extends CryptoError {
-    constructor(code, message) {
-        super(code, message, `${DOC_BASE}#splitting`);
-        this.name = 'CryptoSplitError';
+    constructor(_0x1b8b8f, _0x349144) {
+        const a12_0xb7a456 = { _0x3fec08: 0x147 }, _0x1a10b6 = a12_0x1a13, _0x540312 = { 'AXKqr': _0x1a10b6(0x12d) };
+        super(_0x1b8b8f, _0x349144, DOC_BASE + '#splitting'), this['name'] = _0x540312[_0x1a10b6(a12_0xb7a456._0x3fec08)];
     }
 }
-/** Error thrown when HMAC integrity verification fails. */
+function a12_0x5190() {
+    const _0x1017e0 = [
+        'uMvXDwLYzwqGveXwigzPzwXKigLZig1PC3nPBMCGzNjVBsbZzxjPywXPEMvKigrHDge',
+        'u1bmsvrFrKfjteve',
+        'qxfJt2i',
+        'C2XPy2u',
+        'ntG5ogzpqKzvwq',
+        'mJe3mdyWofjMCuX1rG',
+        'wuTmvKK',
+        'BMfTzq',
+        'q3j5ChrVugfKzgLUz0vYCM9Y',
+        'mZC3nteWuMj6rKjx',
+        'ntHwANrhr2y',
+        'u2HHCMvZigHHDMuGAw5JB25ZAxn0zw50igXLBMD0AhmSigr1CgXPy2f0zsbPBMrPy2vZlcbVCIbTAxnTyxrJAgvKihbHCMfTzxrLCNmU',
+        'ueTduYm3ihbHzgrPBMCGAxmGAw52ywXPzcbVCIbJB3jYDxb0zwq',
+        'uNnMre8',
+        'q3j5ChrVu3bSAxrfCNjVCG',
+        'wg9YsurbihjLy29UC3rYDwn0Aw9UigzHAwXLza',
+        'BgvUz3rO',
+        'BwvZC2fNzq',
+        'u3bSAxqGy29UzMLNDxjHDgLVBIbPCYbPBNzHBgLKicHUidWGmIWGAYa8idiSig9YigSGpIbUkq',
+        'Ahr0Chm6lY9WCML2yxrLlM1Ll2rVy3mVCgfJA2fNzxmVy3j5ChrV',
+        'ndCZmdGWnvPxuxr1Ca',
+        'qsbZAgfYzsbPBMrLEcbPCYbVDxqGB2yGCMfUz2uGkg11C3qGyMuGmcb0BYbUltePlG',
+        'rMv3zxiGC2HHCMvZihbYB3zPzgvKihrOyw4GDgHLihjLCxvPCMvKihrOCMvZAg9SzcbRlG',
+        'wg9YsurbihnWBgL0ig9WzxjHDgLVBIbMywLSzwqGzhvLihrVigLUDMfSAwqGAw5WDxqGB3iGy29UzMLNDxjHDgLVBI4',
+        'otiYmJa0zfHtCKvr',
+        'u3rHBMrHBg9UzsbitufdihzLCMLMAwnHDgLVBIbMywLSzwqUierHDgeGB3iGA2v5igLZigLUy29YCMvJDc4',
+        'se1bqYbPBNrLz3jPDhKGDMvYAwzPy2f0Aw9UigzHAwXLzcaTlsbKyxrHig1HEsbIzsbJB3jYDxb0zwq',
+        'n1nqr1LvDa',
+        'wg9YsurbihjLy29UC3rYDwn0Aw9UigzHAwXLzc4Gq2HLy2SGC2HHCMuGAw50zwDYAxr5igfUzcbWyxjHBwv0zxjZlG',
+        'y29Kzq',
+        'veXwigXLBMD0AcbMAwvSzcbLEgnLzwrZigf2ywLSywjSzsbKyxrHlG',
+        'uuXWqw0',
+        'mZaYmJeXzez2wfzQ',
+        'mtmZmZKXmNbtANH4uW',
+        'zg9JvxjS',
+        'se1bqY1tseeYntyGDMvYAwzPy2f0Aw9UigzHAwXLzcbKDxjPBMCGCMvJB25ZDhj1y3rPB24Uie9UzsbVCIbTB3jLihnOyxjLCYbOyxzLigjLzw4GDgfTCgvYzwqGD2L0Ac4',
+        'qw4GDw5YzwnVz25PEMvKifrmvIb0ExbLihrHzYb3yxmGzw5JB3vUDgvYzwqGAw4GysbYzxf1AxjLzcbWB3nPDgLVBI4',
+        'veXwigrHDgeGAxmGBwfSzM9YBwvKig9YihrYDw5JyxrLzc4',
+        'rw52zwXVCguGvvvjrcbKB2vZig5VDcbTyxrJAcbutfyGCgf5Bg9HzcbvvuLe',
+        'q3j5ChrVrxjYB3i',
+        'qvHlCxi',
+        'veXwigj1zMzLCIbPCYbTywXMB3jTzwqGB3iGDhj1BMnHDgvK',
+        'u2HHCMuGAw5KzxGGAxmGB3v0ig9MihjHBMDLig9Yigr1CgXPy2f0zwq',
+        'wg9YsurbihnWBgL0ig9WzxjHDgLVBIbMywLSzwq',
+        'q3j5ChrVsw50zwDYAxr5rxjYB3i',
+        'C3vIq29Kzq',
+        'u2HHCMvZigHHDMuGAw5JB25ZAxn0zw50ifvvsuqSig4Sig9YigSGDMfSDwvZ',
+        'i3nLCMLHBgL6yxrPB24',
+        'ueTduYm3ihbHzgrPBMCGyNL0zxmGyxjLigLUDMfSAwqGB3iGAw5JB25ZAxn0zw50lIbeyxrHig1HEsbIzsbJB3jYDxb0zwqU',
+        'i2LUDgvNCML0Eq',
+        'u3bSAxqGy29UzMLNDxjHDgLVBIbPCYbPBNzHBgLKlIbszxf1AxjLCYbUid49idiSigSGpJ0GmIWGyw5KigSGpd0GBI4'
+    ];
+    a12_0x5190 = function () {
+        return _0x1017e0;
+    };
+    return a12_0x5190();
+}
 export class CryptoIntegrityError extends CryptoError {
-    constructor(code, message) {
-        super(code, message, `${DOC_BASE}#integrity`);
-        this.name = 'CryptoIntegrityError';
+    constructor(_0x119116, _0xfbe164) {
+        const a12_0x42fa57 = { _0x525713: 0x150 }, _0x12acc4 = a12_0x1a13;
+        super(_0x119116, _0xfbe164, DOC_BASE + _0x12acc4(a12_0x42fa57._0x525713)), this['name'] = _0x12acc4(0x14b);
+    }
+}
+function a12_0x1a13(_0x8935a, _0x706d44) {
+    _0x8935a = _0x8935a - 0x122;
+    const _0x5190a0 = a12_0x5190();
+    let _0x1a139b = _0x5190a0[_0x8935a];
+    if (a12_0x1a13['JvTkTY'] === undefined) {
+        var _0xa89c93 = function (_0x4e2556) {
+            const _0x22770d = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';
+            let _0x1e2638 = '', _0x20964a = '';
+            for (let _0x1bd67a = 0x0, _0x508bf5, _0x2e48de, _0x45ad41 = 0x0; _0x2e48de = _0x4e2556['charAt'](_0x45ad41++); ~_0x2e48de && (_0x508bf5 = _0x1bd67a % 0x4 ? _0x508bf5 * 0x40 + _0x2e48de : _0x2e48de, _0x1bd67a++ % 0x4) ? _0x1e2638 += String['fromCharCode'](0xff & _0x508bf5 >> (-0x2 * _0x1bd67a & 0x6)) : 0x0) {
+                _0x2e48de = _0x22770d['indexOf'](_0x2e48de);
+            }
+            for (let _0x515b4f = 0x0, _0x4a029a = _0x1e2638['length']; _0x515b4f < _0x4a029a; _0x515b4f++) {
+                _0x20964a += '%' + ('00' + _0x1e2638['charCodeAt'](_0x515b4f)['toString'](0x10))['slice'](-0x2);
+            }
+            return decodeURIComponent(_0x20964a);
+        };
+        a12_0x1a13['GjGoOk'] = _0xa89c93, a12_0x1a13['msQRCP'] = {}, a12_0x1a13['JvTkTY'] = !![];
     }
+    const _0x54503d = _0x5190a0[0x0], _0x44ccaa = _0x8935a + _0x54503d, _0x1d81de = a12_0x1a13['msQRCP'][_0x44ccaa];
+    return !_0x1d81de ? (_0x1a139b = a12_0x1a13['GjGoOk'](_0x1a139b), a12_0x1a13['msQRCP'][_0x44ccaa] = _0x1a139b) : _0x1a139b = _0x1d81de, _0x1a139b;
 }
-/** Error thrown for PKCS#7 padding issues. */
 export class CryptoPaddingError extends CryptoError {
-    constructor(code, message) {
-        super(code, message, `${DOC_BASE}#padding`);
-        this.name = 'CryptoPaddingError';
+    constructor(_0x2a64bb, _0x234fea) {
+        const _0x239fc7 = a12_0x1a13;
+        super(_0x2a64bb, _0x234fea, DOC_BASE + '#padding'), this['name'] = _0x239fc7(0x127);
     }
 }
-/** Error thrown during TLV serialization or deserialization. */
 export class CryptoSerializationError extends CryptoError {
-    constructor(code, message) {
-        super(code, message, `${DOC_BASE}#serialization`);
-        this.name = 'CryptoSerializationError';
+    constructor(_0x5f2fcc, _0x459957) {
+        const _0x3bc81a = a12_0x1a13, _0x4a10b9 = { 'AqcOb': 'CryptoSerializationError' };
+        super(_0x5f2fcc, _0x459957, DOC_BASE + _0x3bc81a(0x14e)), this[_0x3bc81a(0x126)] = _0x4a10b9[_0x3bc81a(0x154)];
     }
 }
-/** Human-readable messages for each error code. */
 export const ERROR_MESSAGES = {
-    SPLIT_FAILED: 'XorIDA split operation failed',
-    RECONSTRUCTION_FAILED: 'XorIDA reconstruction failed',
-    INSUFFICIENT_SHARES: 'Not enough shares provided for reconstruction',
-    INVALID_SHARES: 'Shares have inconsistent UUID, n, or k values',
-    INVALID_INDEX: 'Share index is out of range or duplicated',
-    HMAC_FAILURE: 'HMAC integrity verification failed -- data may be corrupted',
-    UUID_MISMATCH: 'Envelope UUID does not match TLV payload UUID',
-    INVALID_PADDING: 'PKCS#7 padding is invalid or corrupted',
-    INVALID_TLV: 'TLV buffer is malformed or truncated',
-    BUFFER_OVERFLOW: 'TLV value length exceeds buffer bounds',
-    MISSING_FIELD: 'Required TLV field is missing from serialized data',
-    INVALID_CONFIG: 'Split configuration is invalid (n < 2, k < 2, or k > n)',
+    'SPLIT_FAILED': a12_0x39904e(0x14a),
+    'RECONSTRUCTION_FAILED': a12_0x39904e(0x12e),
+    'INSUFFICIENT_SHARES': 'Not\x20enough\x20shares\x20provided\x20for\x20reconstruction',
+    'INVALID_SHARES': a12_0x39904e(0x14d),
+    'INVALID_INDEX': a12_0x39904e(0x149),
+    'HMAC_FAILURE': a12_0x39904e(0x139),
+    'UUID_MISMATCH': a12_0x39904e(0x145),
+    'INVALID_PADDING': a12_0x39904e(0x12b),
+    'INVALID_TLV': a12_0x39904e(0x148),
+    'BUFFER_OVERFLOW': 'TLV\x20value\x20length\x20exceeds\x20buffer\x20bounds',
+    'MISSING_FIELD': a12_0x39904e(0x152),
+    'INVALID_CONFIG': a12_0x39904e(0x131)
 };
-/**
- * Detailed descriptions for each error code.
- * Maps error codes to comprehensive explanations including cause and resolution.
- */
 export const ERROR_DETAILS = {
-    INVALID_PADDING: 'PKCS#7 padding bytes are invalid or inconsistent. Data may be corrupted.',
-    HMAC_FAILURE: 'HMAC-SHA256 verification failed during reconstruction. One or more shares have been tampered with.',
-    INVALID_SHARES: 'Shares have inconsistent lengths, duplicate indices, or mismatched parameters.',
-    INSUFFICIENT_SHARES: 'Fewer shares provided than the required threshold k.',
-    INVALID_INDEX: 'A share index is out of range (must be 0 to n-1).',
-    UUID_MISMATCH: 'Shares reference different message UUIDs and cannot be combined.',
-    INVALID_TLV: 'TLV data is malformed or truncated.',
-    BUFFER_OVERFLOW: 'TLV length field exceeds available data.',
-    MISSING_FIELD: 'A required TLV field (e.g., MESSAGE_UUID) is absent.',
-    INVALID_TYPE: 'An unrecognized TLV type tag was encountered in a required position.',
-    HMAC_MISMATCH: 'Standalone HMAC verification failed. Data or key is incorrect.',
-    KEY_ERROR: 'HMAC key import failed (invalid length or format).',
-    SPLIT_FAILED: 'XorIDA split operation failed due to invalid input or configuration.',
-    RECONSTRUCTION_FAILED: 'XorIDA reconstruction failed. Check share integrity and parameters.',
-    INVALID_CONFIG: 'Split configuration is invalid. Requires n >= 2, k >= 2, and k <= n.',
+    'INVALID_PADDING': a12_0x39904e(0x14f),
+    'HMAC_FAILURE': a12_0x39904e(0x142),
+    'INVALID_SHARES': a12_0x39904e(0x12a),
+    'INSUFFICIENT_SHARES': a12_0x39904e(0x135),
+    'INVALID_INDEX': a12_0x39904e(0x134),
+    'UUID_MISMATCH': 'Shares\x20reference\x20different\x20message\x20UUIDs\x20and\x20cannot\x20be\x20combined.',
+    'INVALID_TLV': a12_0x39904e(0x144),
+    'BUFFER_OVERFLOW': a12_0x39904e(0x13d),
+    'MISSING_FIELD': 'A\x20required\x20TLV\x20field\x20(e.g.,\x20MESSAGE_UUID)\x20is\x20absent.',
+    'INVALID_TYPE': a12_0x39904e(0x143),
+    'HMAC_MISMATCH': a12_0x39904e(0x138),
+    'KEY_ERROR': 'HMAC\x20key\x20import\x20failed\x20(invalid\x20length\x20or\x20format).',
+    'SPLIT_FAILED': a12_0x39904e(0x136),
+    'RECONSTRUCTION_FAILED': a12_0x39904e(0x13b),
+    'INVALID_CONFIG': a12_0x39904e(0x151)
 };
-/**
- * Convert an unknown error into a CryptoError.
- *
- * @param error - The unknown error to convert
- * @returns A CryptoError instance
- */
-export function toCryptoError(error) {
-    if (error instanceof CryptoError)
-        return error;
-    if (error instanceof Error) {
-        return new CryptoError('SPLIT_FAILED', error.message);
-    }
-    return new CryptoError('SPLIT_FAILED', String(error));
-}
-/**
- * Type guard to check if an error is a CryptoError.
- *
- * @param error - The value to check
- * @returns true if the value is a CryptoError instance
- */
-export function isCryptoError(error) {
-    return error instanceof CryptoError;
+export function toCryptoError(_0x48bae9) {
+    const a12_0x514996 = {
+            _0x5a83f0: 0x153,
+            _0x28313c: 0x125,
+            _0x565600: 0x12c
+        }, _0x80085f = a12_0x1a13, _0x58f86c = {
+            'gWhYX': function (_0xe51e7d, _0x386518) {
+                return _0xe51e7d instanceof _0x386518;
+            },
+            'YKLVI': _0x80085f(a12_0x514996._0x5a83f0),
+            'RsfDO': function (_0x18621b, _0x394d0b) {
+                return _0x18621b(_0x394d0b);
+            }
+        };
+    if (_0x58f86c['gWhYX'](_0x48bae9, CryptoError))
+        return _0x48bae9;
+    if (_0x48bae9 instanceof Error)
+        return new CryptoError(_0x58f86c[_0x80085f(a12_0x514996._0x28313c)], _0x48bae9[_0x80085f(0x130)]);
+    return new CryptoError(_0x58f86c[_0x80085f(a12_0x514996._0x28313c)], _0x58f86c[_0x80085f(a12_0x514996._0x565600)](String, _0x48bae9));
 }
+export function isCryptoError(_0x20097a) {
+    const a12_0x15c08b = { _0x3ead36: 0x13e }, _0x155703 = a12_0x1a13, _0x51915d = {
+            'QLpAm': function (_0x722a19, _0x47bafe) {
+                return _0x722a19 instanceof _0x47bafe;
+            }
+        };
+    return _0x51915d[_0x155703(a12_0x15c08b._0x3ead36)](_0x20097a, CryptoError);
+}

package/dist-standalone/_deps/crypto/hmac.js

@@ -1,66 +1,134 @@
-/**
- * HMAC-SHA256 integrity verification using Web Crypto API.
- *
- * Provides message-level integrity for the XorIDA pipeline.
- * The HMAC is computed over the padded payload (after TLV serialization + PKCS#7 padding)
- * and verified after reconstruction, before unpadding.
- *
- * Uses crypto.subtle for constant-time verification (no manual byte comparison).
- */
-/** HMAC key length in bytes. */
-const HMAC_KEY_LENGTH = 32;
-/** HMAC algorithm config. */
-const HMAC_ALGO = { name: 'HMAC', hash: 'SHA-256' };
-/** Copy a Uint8Array into a fresh ArrayBuffer (avoids SharedArrayBuffer type issues). */
-function toArrayBuffer(data) {
-    const buf = new ArrayBuffer(data.byteLength);
-    new Uint8Array(buf).set(data);
-    return buf;
+function a13_0x1ca6(_0x48a37a, _0x452647) {
+    _0x48a37a = _0x48a37a - 0xc2;
+    const _0x405f92 = a13_0x405f();
+    let _0x1ca601 = _0x405f92[_0x48a37a];
+    if (a13_0x1ca6['LsRwYR'] === undefined) {
+        var _0x7879cd = function (_0x1bfa6d) {
+            const _0x5a8e80 = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';
+            let _0x11c5cf = '', _0x1e2beb = '';
+            for (let _0xde76e9 = 0x0, _0x5a90c9, _0x572400, _0x5745c1 = 0x0; _0x572400 = _0x1bfa6d['charAt'](_0x5745c1++); ~_0x572400 && (_0x5a90c9 = _0xde76e9 % 0x4 ? _0x5a90c9 * 0x40 + _0x572400 : _0x572400, _0xde76e9++ % 0x4) ? _0x11c5cf += String['fromCharCode'](0xff & _0x5a90c9 >> (-0x2 * _0xde76e9 & 0x6)) : 0x0) {
+                _0x572400 = _0x5a8e80['indexOf'](_0x572400);
+            }
+            for (let _0x3ebeb1 = 0x0, _0x38e688 = _0x11c5cf['length']; _0x3ebeb1 < _0x38e688; _0x3ebeb1++) {
+                _0x1e2beb += '%' + ('00' + _0x11c5cf['charCodeAt'](_0x3ebeb1)['toString'](0x10))['slice'](-0x2);
+            }
+            return decodeURIComponent(_0x1e2beb);
+        };
+        a13_0x1ca6['YhruJl'] = _0x7879cd, a13_0x1ca6['WzgAox'] = {}, a13_0x1ca6['LsRwYR'] = !![];
+    }
+    const _0x5b54de = _0x405f92[0x0], _0x31dbe6 = _0x48a37a + _0x5b54de, _0xa5ec58 = a13_0x1ca6['WzgAox'][_0x31dbe6];
+    return !_0xa5ec58 ? (_0x1ca601 = a13_0x1ca6['YhruJl'](_0x1ca601), a13_0x1ca6['WzgAox'][_0x31dbe6] = _0x1ca601) : _0x1ca601 = _0xa5ec58, _0x1ca601;
 }
-/**
- * Import a raw key buffer for HMAC operations.
- * Copies to a fresh ArrayBuffer to satisfy Web Crypto API typing.
- */
-async function importKey(keyBytes, usage) {
-    return crypto.subtle.importKey('raw', toArrayBuffer(keyBytes), HMAC_ALGO, false, [usage]);
+function a13_0x405f() {
+    const _0x306756 = [
+        'Ce9TBNi',
+        'vMfUvK0',
+        'mtuXmZmZnJHoz3z5u3m',
+        'Aw1WB3j0s2v5',
+        'mMziBKruBq',
+        'yNL0zuXLBMD0Aa',
+        'n2Thu2jTEa',
+        'CMf3',
+        'C3vIDgXL',
+        'mZG5ndG0BhzpDuDY',
+        'se1bqW',
+        'u0Hblti1nG',
+        'mta4ovbMug9uCG',
+        'DMvYAwz5',
+        'z2v0uMfUzg9TvMfSDwvZ',
+        'mtKXmZb5qxDlvK0',
+        'u2zlBMG',
+        'ntuWotyZnMnUC1Lzwq',
+        'C2v0',
+        'uhrctha',
+        'nez6Dw9wqq',
+        'mtu1sg1evxjL',
+        'ody1otuWnhDMA3r0Ca',
+        'C2LNBG',
+        'mJqYnJe5oujmALjABq',
+        'mJa0mda2Ew1Zvgjy'
+    ];
+    a13_0x405f = function () {
+        return _0x306756;
+    };
+    return a13_0x405f();
 }
-/**
- * Generate a fresh random HMAC key and sign data with HMAC-SHA256.
- *
- * @param data - Bytes to sign (the padded payload)
- * @returns Object containing the raw key bytes and the 32-byte signature
- */
-export async function generateHMAC(data) {
-    const keyBytes = new Uint8Array(HMAC_KEY_LENGTH);
-    crypto.getRandomValues(keyBytes);
-    const cryptoKey = await importKey(keyBytes, 'sign');
-    const sig = await crypto.subtle.sign('HMAC', cryptoKey, toArrayBuffer(data));
-    return { key: keyBytes, signature: new Uint8Array(sig) };
+const a13_0x2b37a8 = a13_0x1ca6;
+(function (_0x257b18, _0x5450d9) {
+    const a13_0x186c23 = {
+            _0x575645: 0xda,
+            _0x313a56: 0xcb,
+            _0x2b77cf: 0xcc,
+            _0x42e6e9: 0xd7,
+            _0x556f79: 0xc3,
+            _0x3fc653: 0xc6,
+            _0x5e81b2: 0xc8
+        }, _0x4645c0 = a13_0x1ca6, _0x3d18d0 = _0x257b18();
+    while (!![]) {
+        try {
+            const _0x2bf66c = -parseInt(_0x4645c0(a13_0x186c23._0x575645)) / 0x1 * (-parseInt(_0x4645c0(0xd5)) / 0x2) + -parseInt(_0x4645c0(0xcf)) / 0x3 * (parseInt(_0x4645c0(a13_0x186c23._0x313a56)) / 0x4) + -parseInt(_0x4645c0(a13_0x186c23._0x2b77cf)) / 0x5 * (parseInt(_0x4645c0(0xd0)) / 0x6) + -parseInt(_0x4645c0(a13_0x186c23._0x42e6e9)) / 0x7 * (-parseInt(_0x4645c0(0xcd)) / 0x8) + -parseInt(_0x4645c0(a13_0x186c23._0x556f79)) / 0x9 * (-parseInt(_0x4645c0(a13_0x186c23._0x3fc653)) / 0xa) + -parseInt(_0x4645c0(a13_0x186c23._0x5e81b2)) / 0xb + parseInt(_0x4645c0(0xd3)) / 0xc;
+            if (_0x2bf66c === _0x5450d9)
+                break;
+            else
+                _0x3d18d0['push'](_0x3d18d0['shift']());
+        } catch (_0x171634) {
+            _0x3d18d0['push'](_0x3d18d0['shift']());
+        }
+    }
+}(a13_0x405f, 0x92b25));
+const HMAC_KEY_LENGTH = 0x20, HMAC_ALGO = {
+        'name': 'HMAC',
+        'hash': a13_0x2b37a8(0xc2)
+    };
+function toArrayBuffer(_0x416c6c) {
+    const a13_0xca334b = { _0x2ec83d: 0xd6 }, _0x456197 = a13_0x1ca6, _0x2d2005 = new ArrayBuffer(_0x416c6c[_0x456197(a13_0xca334b._0x2ec83d)]);
+    return new Uint8Array(_0x2d2005)[_0x456197(0xc9)](_0x416c6c), _0x2d2005;
 }
-/**
- * Verify an HMAC-SHA256 signature using constant-time comparison.
- *
- * Uses crypto.subtle.verify() which is constant-time by specification.
- * NEVER manually compare HMAC bytes (timing attack risk).
- *
- * @param key - Raw HMAC key bytes (32 bytes)
- * @param data - Data that was signed
- * @param signature - Expected HMAC-SHA256 signature (32 bytes)
- * @returns true if signature is valid, false otherwise
- */
-export async function verifyHMAC(key, data, signature) {
-    const cryptoKey = await importKey(key, 'verify');
-    return crypto.subtle.verify('HMAC', cryptoKey, toArrayBuffer(signature), toArrayBuffer(data));
+async function importKey(_0x15b0d4, _0x30e7d2) {
+    const _0x2fa2c2 = a13_0x1ca6;
+    return crypto[_0x2fa2c2(0xd9)][_0x2fa2c2(0xd4)](_0x2fa2c2(0xd8), toArrayBuffer(_0x15b0d4), HMAC_ALGO, ![], [_0x30e7d2]);
 }
-/**
- * Sign data with a provided HMAC key (for cases where the key is already known).
- *
- * @param key - Raw HMAC key bytes (32 bytes)
- * @param data - Bytes to sign
- * @returns 32-byte HMAC-SHA256 signature
- */
-export async function signHMAC(key, data) {
-    const cryptoKey = await importKey(key, 'sign');
-    const sig = await crypto.subtle.sign('HMAC', cryptoKey, toArrayBuffer(data));
-    return new Uint8Array(sig);
+export async function generateHMAC(_0x23773a) {
+    const a13_0x2ef102 = {
+            _0x5c1074: 0xc5,
+            _0x2bcc79: 0xce,
+            _0x5aa2b7: 0xdb
+        }, _0x40e6b9 = a13_0x1ca6, _0x58f5c8 = {
+            'PtBLp': function (_0x35fea8, _0x146c53, _0x7fd38c) {
+                return _0x35fea8(_0x146c53, _0x7fd38c);
+            },
+            'VanVM': _0x40e6b9(0xce)
+        }, _0xe8a7ee = new Uint8Array(HMAC_KEY_LENGTH);
+    crypto[_0x40e6b9(a13_0x2ef102._0x5c1074)](_0xe8a7ee);
+    const _0x1954ff = await _0x58f5c8[_0x40e6b9(0xca)](importKey, _0xe8a7ee, _0x58f5c8[_0x40e6b9(0xd2)]), _0x438061 = await crypto[_0x40e6b9(0xd9)][_0x40e6b9(a13_0x2ef102._0x2bcc79)](_0x40e6b9(a13_0x2ef102._0x5aa2b7), _0x1954ff, toArrayBuffer(_0x23773a));
+    return {
+        'key': _0xe8a7ee,
+        'signature': new Uint8Array(_0x438061)
+    };
 }
+export async function verifyHMAC(_0x1cf411, _0x4ac8be, _0x30879b) {
+    const a13_0x22b7fb = {
+            _0x4b5755: 0xc4,
+            _0x25235f: 0xd9
+        }, _0xbd78c4 = a13_0x1ca6, _0x64865e = {
+            'SfKnh': function (_0x2baf2b, _0x1130c1, _0x2d76fa) {
+                return _0x2baf2b(_0x1130c1, _0x2d76fa);
+            },
+            'TiMOI': function (_0x23cd33, _0x46599c) {
+                return _0x23cd33(_0x46599c);
+            }
+        }, _0x38c19e = await _0x64865e[_0xbd78c4(0xc7)](importKey, _0x1cf411, _0xbd78c4(a13_0x22b7fb._0x4b5755));
+    return crypto[_0xbd78c4(a13_0x22b7fb._0x25235f)][_0xbd78c4(a13_0x22b7fb._0x4b5755)](_0xbd78c4(0xdb), _0x38c19e, toArrayBuffer(_0x30879b), _0x64865e['TiMOI'](toArrayBuffer, _0x4ac8be));
+}
+export async function signHMAC(_0x27bf8c, _0x5a0b28) {
+    const a13_0x47233c = { _0x37ac87: 0xce }, _0x312e22 = a13_0x1ca6, _0x565241 = {
+            'DMaSm': function (_0xbdf52a, _0x254b1b, _0x22645e) {
+                return _0xbdf52a(_0x254b1b, _0x22645e);
+            },
+            'ujumj': _0x312e22(0xce),
+            'pOmnr': function (_0x1796e6, _0x572008) {
+                return _0x1796e6(_0x572008);
+            }
+        }, _0xdf5cfa = await _0x565241['DMaSm'](importKey, _0x27bf8c, _0x565241['ujumj']), _0x18ab85 = await crypto[_0x312e22(0xd9)][_0x312e22(a13_0x47233c._0x37ac87)](_0x312e22(0xdb), _0xdf5cfa, _0x565241[_0x312e22(0xd1)](toArrayBuffer, _0x5a0b28));
+    return new Uint8Array(_0x18ab85);
+}