@private.me/xbind 1.3.0 → 1.3.5

package/dist-standalone/_deps/crypto/shares.js

@@ -1,148 +1,295 @@
-/**
- * High-level share creation and reconstruction API.
- *
- * Sender pipeline:  serialize (TLV) → pad (PKCS#7) → HMAC (sign) → split (XorIDA)
- * Receiver pipeline: reconstruct (XorIDA) → verify (HMAC) → unpad (PKCS#7) → deserialize (TLV)
- */
-import { ok, err } from"../shared/index.js";
-import { serializeMessage, deserializeMessage } from './tlv.js';
-import { pkcs7Pad, pkcs7Unpad } from './padding.js';
-import { generateHMAC, verifyHMAC } from './hmac.js';
-import { splitXorIDA, reconstructXorIDA, nextOddPrime } from './xorida.js';
+(function (_0x54f50e, _0x47046d) {
+    const a17_0x14eb00 = {
+            _0x45a251: 0x6b,
+            _0x2b2a91: 0x76,
+            _0xac70e1: 0x91,
+            _0x5b77ad: 0x7b,
+            _0x228a8a: 0x8d,
+            _0x291c61: 0x96
+        }, _0x2be85f = a17_0x39d7, _0x5926bb = _0x54f50e();
+    while (!![]) {
+        try {
+            const _0x48cd75 = parseInt(_0x2be85f(0x72)) / 0x1 * (parseInt(_0x2be85f(a17_0x14eb00._0x45a251)) / 0x2) + -parseInt(_0x2be85f(a17_0x14eb00._0x2b2a91)) / 0x3 * (-parseInt(_0x2be85f(a17_0x14eb00._0xac70e1)) / 0x4) + parseInt(_0x2be85f(0x7a)) / 0x5 + -parseInt(_0x2be85f(0x8f)) / 0x6 + -parseInt(_0x2be85f(a17_0x14eb00._0x5b77ad)) / 0x7 + parseInt(_0x2be85f(a17_0x14eb00._0x228a8a)) / 0x8 * (-parseInt(_0x2be85f(0x93)) / 0x9) + parseInt(_0x2be85f(a17_0x14eb00._0x291c61)) / 0xa;
+            if (_0x48cd75 === _0x47046d)
+                break;
+            else
+                _0x5926bb['push'](_0x5926bb['shift']());
+        } catch (_0x2f9244) {
+            _0x5926bb['push'](_0x5926bb['shift']());
+        }
+    }
+}(a17_0x5768, 0x2ae90));
+import {
+    ok,
+    err
+} from"../shared/index.js";
+function a17_0x39d7(_0x4e448e, _0x1c8fc7) {
+    _0x4e448e = _0x4e448e - 0x65;
+    const _0x5768a2 = a17_0x5768();
+    let _0x39d7ef = _0x5768a2[_0x4e448e];
+    if (a17_0x39d7['qneHFf'] === undefined) {
+        var _0x49dcab = function (_0x300447) {
+            const _0x14bf49 = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';
+            let _0x3308ce = '', _0x359ee8 = '';
+            for (let _0xc6d664 = 0x0, _0x1eca43, _0x143197, _0x42dba4 = 0x0; _0x143197 = _0x300447['charAt'](_0x42dba4++); ~_0x143197 && (_0x1eca43 = _0xc6d664 % 0x4 ? _0x1eca43 * 0x40 + _0x143197 : _0x143197, _0xc6d664++ % 0x4) ? _0x3308ce += String['fromCharCode'](0xff & _0x1eca43 >> (-0x2 * _0xc6d664 & 0x6)) : 0x0) {
+                _0x143197 = _0x14bf49['indexOf'](_0x143197);
+            }
+            for (let _0x354340 = 0x0, _0x438e7e = _0x3308ce['length']; _0x354340 < _0x438e7e; _0x354340++) {
+                _0x359ee8 += '%' + ('00' + _0x3308ce['charCodeAt'](_0x354340)['toString'](0x10))['slice'](-0x2);
+            }
+            return decodeURIComponent(_0x359ee8);
+        };
+        a17_0x39d7['VKDRWr'] = _0x49dcab, a17_0x39d7['IryBnf'] = {}, a17_0x39d7['qneHFf'] = !![];
+    }
+    const _0xf34aa8 = _0x5768a2[0x0], _0x1868b4 = _0x4e448e + _0xf34aa8, _0xa1bbf = a17_0x39d7['IryBnf'][_0x1868b4];
+    return !_0xa1bbf ? (_0x39d7ef = a17_0x39d7['VKDRWr'](_0x39d7ef), a17_0x39d7['IryBnf'][_0x1868b4] = _0x39d7ef) : _0x39d7ef = _0xa1bbf, _0x39d7ef;
+}
+function a17_0x5768() {
+    const _0x51e45b = [
+        'BgvUz3rO',
+        'qK5NyKy',
+        'Dg1Ss0G',
+        'zgf0yq',
+        'se1bq19gquLmvvjf',
+        'mZqXndjkqNb6s1q',
+        'qxL4uee',
+        'rLDfD1u',
+        'rgvZzxjPywXPEMf0Aw9UigzHAwXLzdOG',
+        'rxnIsMy',
+        'ig91DcbVzIbYyw5NzsbBmcWG',
+        'Dg9mB3DLCKnHC2u',
+        'mtfNBwDhtNO',
+        'Aw5KzxG',
+        'B1LHuvK',
+        'ihnOyxjLCYWGz290ia',
+        'm3PLCNvbCa',
+        'DgHYzxnOB2XK',
+        'B1bXtuW',
+        'C2XPy2u',
+        'nZG4odmWDhjgB0ry',
+        'mtu4nZi2nfjPDgPWvG',
+        'BwvZC2fNzq',
+        'AgfZ',
+        'vvvjrf9nsvnnqvrdsa',
+        'Ag1Hy0TLEq',
+        'DMfSDwu',
+        'DNDcuhi',
+        'su5tvuzgsunjru5ux1niqvjfuW',
+        'u2HHCMuGAw5KzxGG',
+        'uhHYyK0',
+        'DhjPBq',
+        'tMvLzca',
+        'rhvWBgLJyxrLihnOyxjLigLUzgv4ia',
+        'ywrK',
+        'v1PyquW',
+        'qwXJu2C',
+        'Cw5gufy',
+        'sgTJCLK',
+        'mtyWq1vtyKD2',
+        'DxvPza',
+        'mte3mte1og1mAfbesa',
+        'tM8GC2HHCMvZihbYB3zPzgvK',
+        'mte2mtCWnerywe9hBW',
+        'zevoC2S',
+        'oda3otnxyvvnwNC',
+        'ENrVuvy',
+        'rLbRufO',
+        'mtqXmJCYmgLmAKHxvq',
+        'zxjYB3i',
+        'su5wquXjrf9jtKrfwa',
+        'Dg90ywXtAgfYzxm',
+        'u2HHCMvZigHHDMuGAw5JB25ZAxn0zw50ig4VAYb2ywX1zxm',
+        'su5wquXjrf9tsefsrvm'
+    ];
+    a17_0x5768 = function () {
+        return _0x51e45b;
+    };
+    return a17_0x5768();
+}
+import {
+    serializeMessage,
+    deserializeMessage
+} from './tlv.js';
+import {
+    pkcs7Pad,
+    pkcs7Unpad
+} from './padding.js';
+import {
+    generateHMAC,
+    verifyHMAC
+} from './hmac.js';
+import {
+    splitXorIDA,
+    reconstructXorIDA,
+    nextOddPrime
+} from './xorida.js';
 import { generateUUID } from './uuid.js';
-/**
- * Create shares from a XailMessage.
- *
- * Pipeline: serialize → pad → HMAC → split → package as XailShare[]
- *
- * @param message - The message to split into shares
- * @param n - Total number of shares to produce
- * @param k - Threshold: minimum shares needed for reconstruction
- * @returns Array of n XailShare objects ready for transport
- */
-export async function createShares(message, n, k) {
-    // Ensure UUID is set before serialization so TLV and share headers match.
-    const uuid = message.uuid || generateUUID();
-    const messageWithUuid = uuid !== message.uuid ? { ...message, uuid } : message;
-    // Step 1: Serialize to TLV
-    const tlvPayload = serializeMessage(messageWithUuid);
-    // Step 2: Pad to XorIDA block boundary
-    const p = nextOddPrime(n);
-    const blockSize = p - 1;
-    const padded = pkcs7Pad(tlvPayload, blockSize);
-    // Step 3: HMAC the padded payload
-    const { key: hmacKey, signature: hmacSignature } = await generateHMAC(padded);
-    // Step 4: Split via XorIDA
-    const shareDataArrays = splitXorIDA(padded, n, k);
-    const shares = shareDataArrays.map((data, index) => ({
-        uuid,
-        index,
-        totalShares: n,
-        threshold: k,
-        data,
-        hmacKey: hmacKey.slice(), // each share carries a copy
-        hmacSignature: hmacSignature.slice(),
-    }));
-    return shares;
+export async function createShares(_0x12f083, _0x2aa019, _0x16003c) {
+    const a17_0x336b5f = {
+            _0x35a8c1: 0x8e,
+            _0x5c8da3: 0x8a
+        }, _0x16af96 = a17_0x39d7, _0x341560 = {
+            'dENsk': function (_0x9cb74) {
+                return _0x9cb74();
+            },
+            'AlcSg': function (_0x460755, _0x247125) {
+                return _0x460755 !== _0x247125;
+            },
+            'VJYBA': function (_0xc5e449, _0x2792e7) {
+                return _0xc5e449 - _0x2792e7;
+            }
+        }, _0x1dd90b = _0x12f083[_0x16af96(a17_0x336b5f._0x35a8c1)] || _0x341560[_0x16af96(0x92)](generateUUID), _0x328987 = _0x341560[_0x16af96(a17_0x336b5f._0x5c8da3)](_0x1dd90b, _0x12f083[_0x16af96(0x8e)]) ? {
+            ..._0x12f083,
+            'uuid': _0x1dd90b
+        } : _0x12f083, _0x167138 = serializeMessage(_0x328987), _0x44d756 = nextOddPrime(_0x2aa019), _0x3d07f1 = _0x341560['VJYBA'](_0x44d756, 0x1), _0x16417c = pkcs7Pad(_0x167138, _0x3d07f1), {
+            key: _0x51425b,
+            signature: _0x3d16e8
+        } = await generateHMAC(_0x16417c), _0x3ada4e = splitXorIDA(_0x16417c, _0x2aa019, _0x16003c), _0x5de678 = _0x3ada4e['map']((_0x23d7ab, _0x2e3b15) => ({
+            'uuid': _0x1dd90b,
+            'index': _0x2e3b15,
+            'totalShares': _0x2aa019,
+            'threshold': _0x16003c,
+            'data': _0x23d7ab,
+            'hmacKey': _0x51425b['slice'](),
+            'hmacSignature': _0x3d16e8[_0x16af96(0x79)]()
+        }));
+    return _0x5de678;
 }
-/**
- * Reconstruct a XailMessage from k shares.
- *
- * Pipeline: validate → reconstruct → verify HMAC → unpad → deserialize
- *
- * @param shares - Array of k XailShare objects (must share the same UUID)
- * @returns Reconstructed message, or ReconstructionError
- */
-export async function reconstructMessage(shares) {
-    // Validation: need at least k shares
-    if (shares.length === 0) {
-        return err({ code: 'INSUFFICIENT_SHARES', message: 'No shares provided' });
-    }
-    const first = shares[0];
-    const k = first.threshold;
-    const n = first.totalShares;
-    if (shares.length < k) {
-        return err({
-            code: 'INSUFFICIENT_SHARES',
-            message: `Need ${k} shares, got ${shares.length}`,
+export async function reconstructMessage(_0x50700b) {
+    const a17_0x307403 = {
+            _0x227fa2: 0x82,
+            _0x53a92f: 0x90,
+            _0x48dd5b: 0x81,
+            _0x5655f0: 0x89,
+            _0x72ed61: 0x77,
+            _0x42d942: 0x86,
+            _0x3ca728: 0x66,
+            _0x19b9cb: 0x6c,
+            _0x436e85: 0x99,
+            _0x5da107: 0x8b,
+            _0xe8fd36: 0x94,
+            _0x4e1518: 0x73,
+            _0x39343e: 0x74,
+            _0x4d2c8e: 0x83,
+            _0x42088e: 0x7d,
+            _0xc61bdc: 0x87,
+            _0x3ba152: 0x73,
+            _0xb7c748: 0x8c,
+            _0x22cdd6: 0x7f,
+            _0x438bb8: 0x67,
+            _0x14fa95: 0x6d,
+            _0x541ca9: 0x97,
+            _0x115255: 0x84,
+            _0x2d7bcb: 0x6e,
+            _0x42c26c: 0x7c,
+            _0x13db04: 0x80,
+            _0x1430ea: 0x8e,
+            _0x5e493d: 0x85,
+            _0x18a6a3: 0x95,
+            _0x36f426: 0x80,
+            _0x2a98c5: 0x8e
+        }, _0x304ca6 = a17_0x39d7, _0x1ca59f = {
+            'pngKV': function (_0x40fd03, _0x350e4b) {
+                return _0x40fd03 === _0x350e4b;
+            },
+            'vwBPr': function (_0xffccb1, _0x5e5f8a) {
+                return _0xffccb1(_0x5e5f8a);
+            },
+            'WZXAL': _0x304ca6(a17_0x307403._0x227fa2),
+            'DOcWp': _0x304ca6(a17_0x307403._0x53a92f),
+            'EsbJf': function (_0x55d4b8, _0x1a5cc0) {
+                return _0x55d4b8(_0x1a5cc0);
+            },
+            'AyxPA': function (_0x2ca239, _0x5701df) {
+                return _0x2ca239 !== _0x5701df;
+            },
+            'qnFPV': function (_0x2211ec, _0x311599) {
+                return _0x2211ec(_0x311599);
+            },
+            'tmlKH': 'Shares\x20have\x20different\x20UUIDs',
+            'ztoQV': _0x304ca6(0x65),
+            'oYaQY': function (_0x295f15, _0x131f63) {
+                return _0x295f15(_0x131f63);
+            },
+            'mQWqQ': 'INVALID_INDEX',
+            'HkcrY': function (_0xbb16dc, _0x54b9c0, _0x1d9934, _0xa609a8, _0xbb1982) {
+                return _0xbb16dc(_0x54b9c0, _0x1d9934, _0xa609a8, _0xbb1982);
+            },
+            'LooGs': function (_0x3fbb78, _0x116cbe, _0x2f3511, _0x5bb9b1) {
+                return _0x3fbb78(_0x116cbe, _0x2f3511, _0x5bb9b1);
+            },
+            'BNgbF': _0x304ca6(0x6a),
+            'FWEwU': 'HMAC\x20verification\x20failed\x20—\x20data\x20may\x20be\x20corrupted\x20or\x20tampered',
+            'PxrbM': function (_0x9a4067, _0x3cb2b0) {
+                return _0x9a4067(_0x3cb2b0);
+            },
+            'oPqML': function (_0x4123d0, _0x43c673) {
+                return _0x4123d0 !== _0x43c673;
+            },
+            'FPkPZ': _0x304ca6(0x7e),
+            'ltVLV': 'TLV\x20UUID\x20does\x20not\x20match\x20envelope\x20UUID'
+        };
+    if (_0x1ca59f['pngKV'](_0x50700b['length'], 0x0))
+        return _0x1ca59f[_0x304ca6(a17_0x307403._0x48dd5b)](err, {
+            'code': _0x1ca59f[_0x304ca6(a17_0x307403._0x5655f0)],
+            'message': _0x1ca59f['DOcWp']
         });
-    }
-    // Validate consistency
-    const indices = [];
-    const indexSet = new Set();
-    for (const share of shares) {
-        if (share.uuid !== first.uuid) {
-            return err({
-                code: 'INVALID_SHARES',
-                message: 'Shares have different UUIDs',
+    const _0x50731d = _0x50700b[0x0], _0x31ef9c = _0x50731d[_0x304ca6(a17_0x307403._0x72ed61)], _0x22b30b = _0x50731d[_0x304ca6(0x99)];
+    if (_0x50700b[_0x304ca6(0x66)] < _0x31ef9c)
+        return _0x1ca59f[_0x304ca6(0x6f)](err, {
+            'code': _0x1ca59f['WZXAL'],
+            'message': _0x304ca6(a17_0x307403._0x42d942) + _0x31ef9c + _0x304ca6(0x75) + _0x50700b[_0x304ca6(a17_0x307403._0x3ca728)]
+        });
+    const _0x5265d9 = [], _0x11c353 = new Set();
+    for (const _0xd4d496 of _0x50700b) {
+        if (_0x1ca59f[_0x304ca6(a17_0x307403._0x19b9cb)](_0xd4d496['uuid'], _0x50731d[_0x304ca6(0x8e)]))
+            return _0x1ca59f[_0x304ca6(0x8b)](err, {
+                'code': _0x304ca6(0x65),
+                'message': _0x1ca59f[_0x304ca6(0x68)]
             });
-        }
-        if (share.totalShares !== n || share.threshold !== k) {
-            return err({
-                code: 'INVALID_SHARES',
-                message: 'Shares have inconsistent n/k values',
+        if (_0xd4d496[_0x304ca6(a17_0x307403._0x436e85)] !== _0x22b30b || _0xd4d496['threshold'] !== _0x31ef9c)
+            return _0x1ca59f[_0x304ca6(a17_0x307403._0x5da107)](err, {
+                'code': _0x1ca59f[_0x304ca6(a17_0x307403._0xe8fd36)],
+                'message': _0x304ca6(0x9a)
             });
-        }
-        if (share.index < 0 || share.index >= n) {
-            return err({
-                code: 'INVALID_INDEX',
-                message: `Share index ${share.index} out of range [0, ${n})`,
+        if (_0xd4d496[_0x304ca6(a17_0x307403._0x4e1518)] < 0x0 || _0xd4d496['index'] >= _0x22b30b)
+            return _0x1ca59f[_0x304ca6(a17_0x307403._0x39343e)](err, {
+                'code': _0x1ca59f['mQWqQ'],
+                'message': _0x304ca6(a17_0x307403._0x4d2c8e) + _0xd4d496[_0x304ca6(0x73)] + _0x304ca6(0x70) + _0x22b30b + ')'
             });
-        }
-        if (indexSet.has(share.index)) {
+        if (_0x11c353[_0x304ca6(a17_0x307403._0x42088e)](_0xd4d496['index']))
             return err({
-                code: 'INVALID_INDEX',
-                message: `Duplicate share index ${share.index}`,
+                'code': _0x304ca6(0x98),
+                'message': _0x304ca6(a17_0x307403._0xc61bdc) + _0xd4d496[_0x304ca6(0x73)]
             });
-        }
-        indexSet.add(share.index);
-        indices.push(share.index);
+        _0x11c353[_0x304ca6(0x88)](_0xd4d496[_0x304ca6(a17_0x307403._0x3ba152)]), _0x5265d9['push'](_0xd4d496[_0x304ca6(0x73)]);
     }
-    // Take first k shares
-    const usedShares = shares.slice(0, k);
-    const usedIndices = indices.slice(0, k);
-    const shareData = usedShares.map((s) => s.data);
-    // Step 1: Reconstruct padded payload
-    const padded = reconstructXorIDA(shareData, usedIndices, n, k);
-    // Step 2: Verify HMAC (before unpadding — fail closed)
-    const hmacValid = await verifyHMAC(first.hmacKey, padded, first.hmacSignature);
-    if (!hmacValid) {
+    const _0xa43798 = _0x50700b['slice'](0x0, _0x31ef9c), _0x481908 = _0x5265d9['slice'](0x0, _0x31ef9c), _0x365b2a = _0xa43798['map'](_0x32b357 => _0x32b357[_0x304ca6(0x69)]), _0x30f118 = _0x1ca59f[_0x304ca6(a17_0x307403._0xb7c748)](reconstructXorIDA, _0x365b2a, _0x481908, _0x22b30b, _0x31ef9c), _0x3355de = await _0x1ca59f['LooGs'](verifyHMAC, _0x50731d[_0x304ca6(a17_0x307403._0x22cdd6)], _0x30f118, _0x50731d['hmacSignature']);
+    if (!_0x3355de)
         return err({
-            code: 'HMAC_FAILURE',
-            message: 'HMAC verification failed — data may be corrupted or tampered',
+            'code': _0x1ca59f[_0x304ca6(a17_0x307403._0x438bb8)],
+            'message': _0x1ca59f[_0x304ca6(a17_0x307403._0x14fa95)]
         });
-    }
-    // Step 3: Unpad
-    const p = nextOddPrime(n);
-    const blockSize = p - 1;
-    const unpadResult = pkcs7Unpad(padded, blockSize);
-    if (!unpadResult.ok) {
-        return err({
-            code: 'HMAC_FAILURE',
-            message: `Unpadding failed: ${unpadResult.error.message}`,
+    const _0x5abd70 = nextOddPrime(_0x22b30b), _0x3889ee = _0x5abd70 - 0x1, _0xde0ec0 = pkcs7Unpad(_0x30f118, _0x3889ee);
+    if (!_0xde0ec0['ok'])
+        return _0x1ca59f[_0x304ca6(a17_0x307403._0x39343e)](err, {
+            'code': _0x1ca59f['BNgbF'],
+            'message': 'Unpadding\x20failed:\x20' + _0xde0ec0[_0x304ca6(a17_0x307403._0x541ca9)]['message']
         });
-    }
-    // Step 4: Deserialize TLV
-    const msgResult = deserializeMessage(unpadResult.value);
-    if (!msgResult.ok) {
+    const _0x226190 = _0x1ca59f[_0x304ca6(a17_0x307403._0x115255)](deserializeMessage, _0xde0ec0['value']);
+    if (!_0x226190['ok'])
         return err({
-            code: 'INVALID_SHARES',
-            message: `Deserialization failed: ${msgResult.error.message}`,
+            'code': _0x1ca59f[_0x304ca6(0x94)],
+            'message': _0x304ca6(a17_0x307403._0x2d7bcb) + _0x226190['error'][_0x304ca6(a17_0x307403._0x42c26c)]
         });
-    }
-    // UUID cross-check: if the TLV payload contains a UUID, it must match the envelope UUID.
-    // Normalize both to lowercase+trimmed — bytesToUuid() always returns lowercase,
-    // but envelope UUIDs from email headers may differ in casing or have whitespace.
-    const tlvUuid = msgResult.value.uuid;
-    if (tlvUuid && tlvUuid.toLowerCase().trim() !== first.uuid.toLowerCase().trim()) {
-        return err({
-            code: 'UUID_MISMATCH',
-            message: 'TLV UUID does not match envelope UUID',
+    const _0x11b980 = _0x226190[_0x304ca6(a17_0x307403._0x13db04)][_0x304ca6(a17_0x307403._0x1430ea)];
+    if (_0x11b980 && _0x1ca59f[_0x304ca6(0x78)](_0x11b980[_0x304ca6(0x71)]()[_0x304ca6(a17_0x307403._0x5e493d)](), _0x50731d['uuid'][_0x304ca6(0x71)]()[_0x304ca6(0x85)]()))
+        return _0x1ca59f['PxrbM'](err, {
+            'code': _0x1ca59f[_0x304ca6(a17_0x307403._0x18a6a3)],
+            'message': _0x1ca59f['ltVLV']
         });
-    }
-    // The share headers carry the authoritative UUID (X-Xail-UUID).
-    // The TLV payload may have a stale or empty UUID if the sender didn't
-    // pre-populate message.uuid before calling createShares(). Stamp the
-    // share-header UUID onto the reconstructed message.
-    return ok({ ...msgResult.value, uuid: first.uuid });
-}
+    return _0x1ca59f[_0x304ca6(0x6f)](ok, {
+        ..._0x226190[_0x304ca6(a17_0x307403._0x36f426)],
+        'uuid': _0x50731d[_0x304ca6(a17_0x307403._0x2a98c5)]
+    });
+}