@protontech/openpgp 6.0.0-alpha.0 → 6.0.0-alpha.1.patch.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -6
- package/dist/lightweight/argon2id.min.mjs +1 -1
- package/dist/lightweight/argon2id.min.mjs.map +1 -1
- package/dist/lightweight/argon2id.mjs +1 -1
- package/dist/lightweight/bn.interface.min.mjs +2 -2
- package/dist/lightweight/bn.interface.min.mjs.map +1 -1
- package/dist/lightweight/bn.interface.mjs +3460 -2
- package/dist/lightweight/interface.min.mjs +1 -1
- package/dist/lightweight/interface.min.mjs.map +1 -1
- package/dist/lightweight/interface.mjs +1 -1
- package/dist/lightweight/legacy_ciphers.min.mjs +3 -0
- package/dist/lightweight/legacy_ciphers.min.mjs.map +1 -0
- package/dist/lightweight/legacy_ciphers.mjs +1829 -0
- package/dist/lightweight/native.interface.min.mjs +1 -1
- package/dist/lightweight/native.interface.min.mjs.map +1 -1
- package/dist/lightweight/native.interface.mjs +1 -1
- package/dist/lightweight/noble_curves.min.mjs +11 -11
- package/dist/lightweight/noble_curves.min.mjs.map +1 -1
- package/dist/lightweight/noble_curves.mjs +84 -55
- package/dist/lightweight/noble_hashes.min.mjs +2 -2
- package/dist/lightweight/noble_hashes.min.mjs.map +1 -1
- package/dist/lightweight/noble_hashes.mjs +1 -2
- package/dist/lightweight/openpgp.min.mjs +2 -2
- package/dist/lightweight/openpgp.min.mjs.map +1 -1
- package/dist/lightweight/openpgp.mjs +1373 -3341
- package/dist/lightweight/sha3.min.mjs +3 -3
- package/dist/lightweight/sha3.min.mjs.map +1 -1
- package/dist/lightweight/sha3.mjs +51 -37
- package/dist/node/openpgp.cjs +7887 -8057
- package/dist/node/openpgp.min.cjs +11 -11
- package/dist/node/openpgp.min.cjs.map +1 -1
- package/dist/node/openpgp.min.mjs +11 -11
- package/dist/node/openpgp.min.mjs.map +1 -1
- package/dist/node/openpgp.mjs +7886 -8058
- package/dist/openpgp.js +7940 -8020
- package/dist/openpgp.min.js +11 -11
- package/dist/openpgp.min.js.map +1 -1
- package/dist/openpgp.min.mjs +11 -11
- package/dist/openpgp.min.mjs.map +1 -1
- package/dist/openpgp.mjs +7939 -8021
- package/openpgp.d.ts +58 -43
- package/package.json +32 -34
- package/dist/lightweight/bn.min.mjs +0 -3
- package/dist/lightweight/bn.min.mjs.map +0 -1
- package/dist/lightweight/bn.mjs +0 -3449
|
@@ -1,15 +1,15 @@
|
|
|
1
|
-
/*! OpenPGP.js v6.0.0-alpha.0 -
|
|
2
|
-
"use strict";const e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var t=require("buffer"),r=require("stream"),i=require("module"),n=require("node:crypto"),s="undefined"!=typeof document?document.currentScript:null;function a(e){var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var i=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,i.get?i:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var o=/*#__PURE__*/a(n);const c=Symbol("doneWritingPromise"),h=Symbol("doneWritingResolve"),u=Symbol("doneWritingReject"),l=Symbol("readingIndex");class f extends Array{constructor(){super(),Object.setPrototypeOf(this,f.prototype),this[c]=new Promise(((e,t)=>{this[h]=e,this[u]=t})),this[c].catch((()=>{}))}}function y(e){return e&&e.getReader&&Array.isArray(e)}function d(e){if(!y(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function p(e){let r=!1;return new ReadableStream({start(i){e.pause(),e.on("data",(n=>{r||(t.Buffer.isBuffer(n)&&(n=new Uint8Array(n.buffer,n.byteOffset,n.byteLength)),i.enqueue(n),e.pause())})),e.on("end",(()=>{r||i.close()})),e.on("error",(e=>i.error(e)))},pull(){e.resume()},cancel(t){r=!0,e.destroy(t)}})}f.prototype.getReader=function(){return void 0===this[l]&&(this[l]=0),{read:async()=>(await this[c],this[l]===this.length?{value:void 0,done:!0}:{value:this[this[l]++],done:!1})}},f.prototype.readToEnd=async function(e){await this[c];const t=e(this.slice(this[l]));return this.length=0,t},f.prototype.clone=function(){const e=new f;return e[c]=this[c].then((()=>{e.push(...this)})),e},d.prototype.write=async function(e){this.stream.push(e)},d.prototype.close=async function(){this.stream[h]()},d.prototype.abort=async function(e){return this.stream[u](e),e},d.prototype.releaseLock=function(){};class g extends r.Readable{constructor(e,t){super(t),this._reader=O(e)}async _read(e){try{for(;;){const{done:e,value:t}=await this._reader.read();if(e){this.push(null);break}if(!this.push(t)||this._cancelling){this._reading=!1;break}}}catch(e){this.emit("error",e)}}_destroy(e){this._reader.cancel(e)}}function m(e,t){return new g(e,t)}function w(t){return y(t)?"array":e.ReadableStream&&e.ReadableStream.prototype.isPrototypeOf(t)?"web":r.Readable&&r.Readable.prototype.isPrototypeOf(t)?"node":!(!t||!t.getReader)&&"web-like"}function A(e){return Uint8Array.prototype.isPrototypeOf(e)}function b(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!A(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((function(e){r.set(e,i),i+=e.length})),r}"object"==typeof e.process&&e.process.versions;const v=new WeakSet,E=Symbol("externalBuffer");function k(e){if(this.stream=e,e[E]&&(this[E]=e[E].slice()),y(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}let t=w(e);if("node"===t&&(e=p(e)),t){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let r=!1;this._read=async()=>r||v.has(e)?{value:void 0,done:!0}:(r=!0,{value:e,done:!1}),this._releaseLock=()=>{if(r)try{v.add(e)}catch(e){}}}function S(e){let t=w(e);return"node"===t?p(e):t?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function I(e){if(w(e))return e;const t=new f;return(async()=>{const r=F(t);await r.write(e),await r.close()})(),t}function B(e){return e.some((e=>w(e)&&!y(e)))?function(e){e=e.map(S);const t=U((async function(e){await Promise.all(i.map((t=>L(t,e))))}));let r=Promise.resolve();const i=e.map(((i,n)=>D(i,((i,s)=>(r=r.then((()=>C(i,t.writable,{preventClose:n!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>y(e)))?function(e){const t=new f;let r=Promise.resolve();return e.forEach(((i,n)=>(r=r.then((()=>C(i,t,{preventClose:n!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):t.Buffer&&t.Buffer.isBuffer(e[0])?t.Buffer.concat(e):b(e)}async function C(e,t,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(w(e)&&!y(e)){e=S(e);try{if(e[E]){const r=F(t);for(let t=0;t<e[E].length;t++)await r.ready,await r.write(e[E][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:i,preventCancel:n})}catch(e){}return}const s=O(e=I(e)),a=F(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){i||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function K(e,t){const r=new TransformStream(t);return C(e,r.writable),r.readable}function U(e){let t,r,i=!1;return{readable:new ReadableStream({start(e){r=e},pull(){t?t():i=!0},cancel:e},{highWaterMark:0}),writable:new WritableStream({write:async function(e){r.enqueue(e),i?i=!1:(await new Promise((e=>{t=e})),t=null)},close:r.close.bind(r),abort:r.error.bind(r)})}}function P(e,t=(()=>{}),r=(()=>{})){if(y(e)){const i=new f;return(async()=>{const n=F(i);try{const i=await T(e),s=t(i),a=r();let o;o=void 0!==s&&void 0!==a?B([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(e){await n.abort(e)}})(),i}if(w(e))return K(e,{async transform(e,r){try{const i=await t(e);void 0!==i&&r.enqueue(i)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const i=t(e),n=r();return void 0!==i&&void 0!==n?B([i,n]):void 0!==i?i:n}function D(e,t){if(w(e)&&!y(e)){let r;const i=new TransformStream({start(e){r=e}}),n=C(e,i.writable),s=U((async function(e){r.error(e),await n,await new Promise(setTimeout)}));return t(i.readable,s.writable),s.readable}e=I(e);const r=new f;return t(e,r),r}function M(e,t){let r;const i=D(e,((e,n)=>{const s=O(e);s.remainder=()=>(s.releaseLock(),C(e,n),i),r=t(s)}));return r}function x(e){if(y(e))return e.clone();if(w(e)){const t=function(e){if(y(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(w(e)){const t=S(e).tee();return t[0][E]=t[1][E]=e[E],t}return[_(e),_(e)]}(e);return R(e,t[0]),t[1]}return _(e)}function Q(e){return y(e)?x(e):w(e)?new ReadableStream({start(t){const r=D(e,(async(e,r)=>{const i=O(e),n=F(r);try{for(;;){await n.ready;const{done:e,value:r}=await i.read();if(e){try{t.close()}catch(e){}return void await n.close()}try{t.enqueue(r)}catch(e){}await n.write(r)}}catch(e){t.error(e),await n.abort(e)}}));R(e,r)}}):_(e)}function R(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(t):i.get=i.get.bind(t),Object.defineProperty(e,r,i))}))}function _(e,r=0,i=1/0){if(y(e))throw Error("Not implemented");if(w(e)){if(r>=0&&i>=0){let t=0;return K(e,{transform(e,n){t<i?(t+e.length>=r&&n.enqueue(_(e,Math.max(r-t,0),i-t)),t+=e.length):n.terminate()}})}if(r<0&&(i<0||i===1/0)){let t=[];return P(e,(e=>{e.length>=-r?t=[e]:t.push(e)}),(()=>_(B(t),r,i)))}if(0===r&&i<0){let t;return P(e,(e=>{const n=t?B([t,e]):e;if(n.length>=-i)return t=_(n,i),_(n,r,i);t=n}))}return console.warn(`stream.slice(input, ${r}, ${i}) not implemented efficiently.`),N((async()=>_(await T(e),r,i)))}return e[E]&&(e=B(e[E].concat([e]))),!A(e)||t.Buffer&&t.Buffer.isBuffer(e)?e.slice(r,i):(i===1/0&&(i=e.length),e.subarray(r,i))}async function T(e,t=B){return y(e)?e.readToEnd(t):w(e)?O(e).readToEnd(t):e}async function L(e,t){if(w(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function N(e){const t=new f;return(async()=>{const r=F(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function O(e){return new k(e)}function F(e){return new d(e)}k.prototype.read=async function(){if(this[E]&&this[E].length){return{done:!1,value:this[E].shift()}}return this._read()},k.prototype.releaseLock=function(){this[E]&&(this.stream[E]=this[E]),this._releaseLock()},k.prototype.cancel=function(e){return this._cancel(e)},k.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:i}=await this.read();if(i+="",r)return t.length?B(t):void 0;const n=i.indexOf("\n")+1;n&&(e=B(t.concat(i.substr(0,n))),t=[]),n!==i.length&&t.push(i.substr(n))}return this.unshift(...t),e},k.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(_(t,1)),r},k.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return t.length?B(t):void 0;if(t.push(n),r+=n.length,r>=e){const r=B(t);return this.unshift(_(r,e)),_(r,0,e)}}},k.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},k.prototype.unshift=function(...e){this[E]||(this[E]=[]),1===e.length&&A(e[0])&&this[E].length&&e[0].length&&this[E][0].byteOffset>=e[0].length?this[E][0]=new Uint8Array(this[E][0].buffer,this[E][0].byteOffset-e[0].length,this[E][0].byteLength+e[0].length):this[E].unshift(...e.filter((e=>e&&e.length)))},k.prototype.readToEnd=async function(e=B){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const H=Symbol("byValue");var z={curve:{p256:"p256","P-256":"p256",secp256r1:"p256",prime256v1:"p256","1.2.840.10045.3.1.7":"p256","2a8648ce3d030107":"p256","2A8648CE3D030107":"p256",p384:"p384","P-384":"p384",secp384r1:"p384","1.3.132.0.34":"p384","2b81040022":"p384","2B81040022":"p384",p521:"p521","P-521":"p521",secp521r1:"p521","1.3.132.0.35":"p521","2b81040023":"p521","2B81040023":"p521",secp256k1:"secp256k1","1.3.132.0.10":"secp256k1","2b8104000a":"secp256k1","2B8104000A":"secp256k1",ed25519Legacy:"ed25519Legacy",ED25519:"ed25519Legacy",ed25519:"ed25519Legacy",Ed25519:"ed25519Legacy","1.3.6.1.4.1.11591.15.1":"ed25519Legacy","2b06010401da470f01":"ed25519Legacy","2B06010401DA470F01":"ed25519Legacy",curve25519Legacy:"curve25519Legacy",X25519:"curve25519Legacy",cv25519:"curve25519Legacy",curve25519:"curve25519Legacy",Curve25519:"curve25519Legacy","1.3.6.1.4.1.3029.1.5.1":"curve25519Legacy","2b060104019755010501":"curve25519Legacy","2B060104019755010501":"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1","1.3.36.3.3.2.8.1.1.7":"brainpoolP256r1","2b2403030208010107":"brainpoolP256r1","2B2403030208010107":"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1","1.3.36.3.3.2.8.1.1.11":"brainpoolP384r1","2b240303020801010b":"brainpoolP384r1","2B240303020801010B":"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1","1.3.36.3.3.2.8.1.1.13":"brainpoolP512r1","2b240303020801010d":"brainpoolP512r1","2B240303020801010D":"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[H]||(e[H]=[],Object.entries(e).forEach((([t,r])=>{e[H][r]=t}))),void 0!==e[H][t])return e[H][t];throw Error("Invalid enum value.")}},G={preferredHashAlgorithm:z.hash.sha256,preferredSymmetricAlgorithm:z.symmetric.aes256,preferredCompressionAlgorithm:z.compression.uncompressed,deflateLevel:6,aeadProtect:!1,preferredAEADAlgorithm:z.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,s2kType:z.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,revocationsExpire:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([z.symmetric.aes128,z.symmetric.aes192,z.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-alpha.0",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],useEllipticFallback:!0,rejectHashAlgorithms:new Set([z.hash.md5,z.hash.ripemd]),rejectMessageHashAlgorithms:new Set([z.hash.md5,z.hash.ripemd,z.hash.sha1]),rejectPublicKeyAlgorithms:new Set([z.publicKey.elgamal,z.publicKey.dsa]),rejectCurves:new Set([z.curve.secp256k1]),checkEdDSAFaultySignatures:!0};const q=()=>"undefined"!=typeof BigInt;const j=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),V={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:i.createRequire("undefined"==typeof document?require("url").pathToFileURL(__filename).href:s&&s.src||new URL("openpgp.min.cjs",document.baseURI).href),isArray:function(e){return e instanceof Array},isUint8Array:A,isStream:w,getBigInteger:async function(){if(q()){const{default:e}=await Promise.resolve().then((function(){return Io}));return e}{const{default:e}=await Promise.resolve().then((function(){return Po}));return e}},getNobleCurve:async(e,t)=>{if(!G.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return Uu}));switch(e){case z.publicKey.ecdh:case z.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case z.publicKey.x448:return r.get("x448");case z.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let i=0;i<t;i++)r[i]=e>>8*(t-i-1)&255;return r},readDate:function(e){const t=V.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return V.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return V.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){const r=new Uint8Array(t),i=t-e.length;return r.set(e,i),r},uint8ArrayToMPI:function(e){const t=V.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),i=new Uint8Array([(65280&t)>>8,255&t]);return V.concatUint8Array([i,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+V.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return P(e,(e=>{if(!V.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,i=(e=new Uint8Array(e)).length;for(let n=0;n<i;n+=r)t.push(String.fromCharCode.apply(String,e.subarray(n,n+r<i?n+r:i)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return P(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return P(e,r,(()=>r(new Uint8Array,!0)))},concat:B,concatUint8Array:b,equalsUint8Array:function(e,t){if(!V.isUint8Array(e)||!V.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return V.writeNumber(t,2)},printDebug:function(e){j&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){j&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let i=0;i<r;i++)t[i]=e[i]<<1^e[i+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){return void 0!==e&&e.crypto&&e.crypto.subtle},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!V.isString(e))return!1;return/^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+([a-zA-Z]{2,}[0-9]*|xn--[a-zA-Z\-0-9]+)))$/.test(e)},canonicalizeEOL:function(e){let t=!1;return P(e,(e=>{let r;t&&(e=V.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const i=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&i.push(r);if(!i.length)return e;const n=new Uint8Array(e.length+i.length);let s=0;for(let t=0;t<i.length;t++){const r=e.subarray(i[t-1]||0,i[t]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(e.subarray(i[i.length-1]||0),s),n}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return P(e,(e=>{let r;13===(e=t&&10!==e[0]?V.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let i=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const n=r-(10===e[r]?1:0);t&&e.copyWithin(i,t,n),i+=n-t}return e.subarray(0,i)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return Error(e);try{t.message=e+": "+t.message}catch(e){}return t},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let i;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){i=e}}))),r(i)}))},selectUint8Array:function(e,t,r){const i=Math.max(t.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=t[i]&256-e|r[i]&255+e,s+=e&i<t.length|1-e&i<r.length;return n.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===z.symmetric.aes128||e===z.symmetric.aes192||e===z.symmetric.aes256}},Z=V.getNodeBuffer();let Y,J;function W(e){let t=new Uint8Array;return P(e,(e=>{t=V.concatUint8Array([t,e]);const r=[],i=Math.floor(t.length/45),n=45*i,s=Y(t.subarray(0,n));for(let e=0;e<i;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(n),r.join("")}),(()=>t.length?Y(t)+"\n":""))}function $(e){let t="";return P(e,(e=>{t+=e;let r=0;const i=[" ","\t","\r","\n"];for(let e=0;e<i.length;e++){const n=i[e];for(let e=t.indexOf(n);-1!==e;e=t.indexOf(n,e+1))r++}let n=t.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(t[n])&&r--;const s=J(t.substr(0,n));return t=t.substr(n),s}),(()=>J(t)))}function X(e){return $(e.replace(/-/g,"+").replace(/_/g,"/"))}function ee(e,t){let r=W(e).replace(/[\r\n]/g,"");return t&&(r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,"")),r}function te(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?z.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?z.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?z.armor.signed:/MESSAGE/.test(t[1])?z.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?z.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?z.armor.privateKey:/SIGNATURE/.test(t[1])?z.armor.signature:void 0}function re(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function ie(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||V.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||V.printDebugError(Error("Unknown header: "+e[t]))}function ne(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function se(e){return new Promise((async(t,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=$(D(e,(async(e,f)=>{const y=O(e);try{for(;;){let e=await y.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=V.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==z.armor.signed||(i.test(e)?(u=u.join("\r\n"),c=!0,ie(h),h=[],o=!1):u.push(e.replace(/^- /,"")));else if(i.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(e)){if(ie(h),o=!0,c||s!==z.armor.signed){t({text:u,data:l,headers:a,type:s});break}}else h.push(e);else i.test(e)&&(s=te(e))}}catch(e){return void r(e)}const d=F(f);try{for(;;){await d.ready;const{done:e,value:t}=await y.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await y.readToEnd();e.length||(e=""),e=r+e,e=V.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(i);if(1===t.length)throw Error("Misformed armored text");const n=ne(t[0].slice(0,-1));await d.write(n);break}await d.write(r)}await d.ready,await d.close()}catch(e){await d.abort(e)}})))}catch(e){r(e)}})).then((async e=>(y(e.data)&&(e.data=await T(e.data)),e)))}function ae(e,t,r,i,n,s=G){let a,o;e===z.armor.signed&&(a=t.text,o=t.hash,t=t.data);const c=[];switch(e){case z.armor.multipartSection:c.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),c.push(re(n,s)),c.push(W(t)),c.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case z.armor.multipartLast:c.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),c.push(re(n,s)),c.push(W(t)),c.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case z.armor.signed:c.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),c.push(o?`Hash: ${o}\n\n`:"\n"),c.push(a.replace(/^-/gm,"- -")),c.push("\n-----BEGIN PGP SIGNATURE-----\n"),c.push(re(n,s)),c.push(W(t)),c.push("-----END PGP SIGNATURE-----\n");break;case z.armor.message:c.push("-----BEGIN PGP MESSAGE-----\n"),c.push(re(n,s)),c.push(W(t)),c.push("-----END PGP MESSAGE-----\n");break;case z.armor.publicKey:c.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),c.push(re(n,s)),c.push(W(t)),c.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case z.armor.privateKey:c.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),c.push(re(n,s)),c.push(W(t)),c.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case z.armor.signature:c.push("-----BEGIN PGP SIGNATURE-----\n"),c.push(re(n,s)),c.push(W(t)),c.push("-----END PGP SIGNATURE-----\n")}return V.concat(c)}Z?(Y=e=>Z.from(e).toString("base64"),J=e=>{const t=Z.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(Y=e=>btoa(V.uint8ArrayToString(e)),J=e=>V.stringToUint8Array(atob(e)));var oe=function(){var e,t,r=!1;function i(r,i){var n=e[(t[r]+t[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=e[255-t[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){e=[],t=[];var i,n,s=1;for(i=0;i<255;i++)e[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=e[i],t[e[i]]=i;e[255]=e[0],t[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var f=1;f<4;f++)a[f][u]=a[f-1][u]>>>8|a[f-1][u]<<24,o[f][l]=o[f-1][l]>>>8|o[f-1][l]<<24}c=!0}var u=function(e,t){c||h();var r=new Uint32Array(t);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(e,t,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0,b=0,v=0,E=0,k=0;var S=new e.Uint32Array(r),I=new e.Uint8Array(r);function B(e,t,r,o,c,h,u,l){e=e|0;t=t|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0;f=r|0x400,y=r|0x800,d=r|0xc00;c=c^S[(e|0)>>2],h=h^S[(e|4)>>2],u=u^S[(e|8)>>2],l=l^S[(e|12)>>2];for(A=16;(A|0)<=o<<4;A=A+16|0){p=S[(r|c>>22&1020)>>2]^S[(f|h>>14&1020)>>2]^S[(y|u>>6&1020)>>2]^S[(d|l<<2&1020)>>2]^S[(e|A|0)>>2],g=S[(r|h>>22&1020)>>2]^S[(f|u>>14&1020)>>2]^S[(y|l>>6&1020)>>2]^S[(d|c<<2&1020)>>2]^S[(e|A|4)>>2],m=S[(r|u>>22&1020)>>2]^S[(f|l>>14&1020)>>2]^S[(y|c>>6&1020)>>2]^S[(d|h<<2&1020)>>2]^S[(e|A|8)>>2],w=S[(r|l>>22&1020)>>2]^S[(f|c>>14&1020)>>2]^S[(y|h>>6&1020)>>2]^S[(d|u<<2&1020)>>2]^S[(e|A|12)>>2];c=p,h=g,u=m,l=w}i=S[(t|c>>22&1020)>>2]<<24^S[(t|h>>14&1020)>>2]<<16^S[(t|u>>6&1020)>>2]<<8^S[(t|l<<2&1020)>>2]^S[(e|A|0)>>2],n=S[(t|h>>22&1020)>>2]<<24^S[(t|u>>14&1020)>>2]<<16^S[(t|l>>6&1020)>>2]<<8^S[(t|c<<2&1020)>>2]^S[(e|A|4)>>2],s=S[(t|u>>22&1020)>>2]<<24^S[(t|l>>14&1020)>>2]<<16^S[(t|c>>6&1020)>>2]<<8^S[(t|h<<2&1020)>>2]^S[(e|A|8)>>2],a=S[(t|l>>22&1020)>>2]<<24^S[(t|c>>14&1020)>>2]<<16^S[(t|h>>6&1020)>>2]<<8^S[(t|u<<2&1020)>>2]^S[(e|A|12)>>2]}function C(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;B(0x0000,0x0800,0x1000,k,e,t,r,i)}function K(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var s=0;B(0x0400,0x0c00,0x2000,k,e,i,r,t);s=n,n=a,a=s}function U(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;B(0x0000,0x0800,0x1000,k,o^e,c^t,h^r,u^l);o=i,c=n,h=s,u=a}function P(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;var f=0;B(0x0400,0x0c00,0x2000,k,e,l,r,t);f=n,n=a,a=f;i=i^o,n=n^c,s=s^h,a=a^u;o=e,c=t,h=r,u=l}function D(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;B(0x0000,0x0800,0x1000,k,o,c,h,u);o=i=i^e,c=n=n^t,h=s=s^r,u=a=a^l}function M(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;B(0x0000,0x0800,0x1000,k,o,c,h,u);i=i^e,n=n^t,s=s^r,a=a^l;o=e,c=t,h=r,u=l}function x(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;B(0x0000,0x0800,0x1000,k,o,c,h,u);o=i,c=n,h=s,u=a;i=i^e,n=n^t,s=s^r,a=a^l}function Q(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;B(0x0000,0x0800,0x1000,k,l,f,y,d);d=~w&d|w&d+1;y=~m&y|m&y+((d|0)==0);f=~g&f|g&f+((y|0)==0);l=~p&l|p&l+((f|0)==0);i=i^e;n=n^t;s=s^r;a=a^o}function R(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0;e=e^o,t=t^c,r=r^h,i=i^u;n=A|0,s=b|0,a=v|0,l=E|0;for(;(g|0)<128;g=g+1|0){if(n>>>31){f=f^e,y=y^t,d=d^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;m=i&1;i=i>>>1|r<<31,r=r>>>1|t<<31,t=t>>>1|e<<31,e=e>>>1;if(m)e=e^0xe1000000}o=f,c=y,h=d,u=p}function _(e){e=e|0;k=e}function T(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;i=e,n=t,s=r,a=o}function L(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;o=e,c=t,h=r,u=i}function N(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;l=e,f=t,y=r,d=i}function O(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;p=e,g=t,m=r,w=i}function F(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;d=~w&d|w&i,y=~m&y|m&r,f=~g&f|g&t,l=~p&l|p&e}function H(e){e=e|0;if(e&15)return-1;I[e|0]=i>>>24,I[e|1]=i>>>16&255,I[e|2]=i>>>8&255,I[e|3]=i&255,I[e|4]=n>>>24,I[e|5]=n>>>16&255,I[e|6]=n>>>8&255,I[e|7]=n&255,I[e|8]=s>>>24,I[e|9]=s>>>16&255,I[e|10]=s>>>8&255,I[e|11]=s&255,I[e|12]=a>>>24,I[e|13]=a>>>16&255,I[e|14]=a>>>8&255,I[e|15]=a&255;return 16}function z(e){e=e|0;if(e&15)return-1;I[e|0]=o>>>24,I[e|1]=o>>>16&255,I[e|2]=o>>>8&255,I[e|3]=o&255,I[e|4]=c>>>24,I[e|5]=c>>>16&255,I[e|6]=c>>>8&255,I[e|7]=c&255,I[e|8]=h>>>24,I[e|9]=h>>>16&255,I[e|10]=h>>>8&255,I[e|11]=h&255,I[e|12]=u>>>24,I[e|13]=u>>>16&255,I[e|14]=u>>>8&255,I[e|15]=u&255;return 16}function G(){C(0,0,0,0);A=i,b=n,v=s,E=a}function q(e,t,r){e=e|0;t=t|0;r=r|0;var o=0;if(t&15)return-1;while((r|0)>=16){V[e&7](I[t|0]<<24|I[t|1]<<16|I[t|2]<<8|I[t|3],I[t|4]<<24|I[t|5]<<16|I[t|6]<<8|I[t|7],I[t|8]<<24|I[t|9]<<16|I[t|10]<<8|I[t|11],I[t|12]<<24|I[t|13]<<16|I[t|14]<<8|I[t|15]);I[t|0]=i>>>24,I[t|1]=i>>>16&255,I[t|2]=i>>>8&255,I[t|3]=i&255,I[t|4]=n>>>24,I[t|5]=n>>>16&255,I[t|6]=n>>>8&255,I[t|7]=n&255,I[t|8]=s>>>24,I[t|9]=s>>>16&255,I[t|10]=s>>>8&255,I[t|11]=s&255,I[t|12]=a>>>24,I[t|13]=a>>>16&255,I[t|14]=a>>>8&255,I[t|15]=a&255;o=o+16|0,t=t+16|0,r=r-16|0}return o|0}function j(e,t,r){e=e|0;t=t|0;r=r|0;var i=0;if(t&15)return-1;while((r|0)>=16){Z[e&1](I[t|0]<<24|I[t|1]<<16|I[t|2]<<8|I[t|3],I[t|4]<<24|I[t|5]<<16|I[t|6]<<8|I[t|7],I[t|8]<<24|I[t|9]<<16|I[t|10]<<8|I[t|11],I[t|12]<<24|I[t|13]<<16|I[t|14]<<8|I[t|15]);i=i+16|0,t=t+16|0,r=r-16|0}return i|0}var V=[C,K,U,P,D,M,x,Q];var Z=[U,R];return{set_rounds:_,set_state:T,set_iv:L,set_nonce:N,set_mask:O,set_counter:F,get_state:H,get_iv:z,gcm_init:G,cipher:q,mac:j}}({Uint8Array,Uint32Array},e,t);return u.set_key=function(e,t,i,s,a,c,h,l,f){var y=r.subarray(0,60),d=r.subarray(256,316);y.set([t,i,s,a,c,h,l,f]);for(var p=e,g=1;p<4*e+28;p++){var m=y[p-1];(p%e==0||8===e&&p%e==4)&&(m=n[m>>>24]<<24^n[m>>>16&255]<<16^n[m>>>8&255]<<8^n[255&m]),p%e==0&&(m=m<<8^m>>>24^g<<24,g=g<<1^(128&g?27:0)),y[p]=y[p-e]^m}for(var w=0;w<p;w+=4)for(var A=0;A<4;A++){m=y[p-(4+w)+(4-A)%4];d[w+A]=w<4||w>=p-4?m:o[0][n[m>>>24]]^o[1][n[m>>>16&255]]^o[2][n[m>>>8&255]]^o[3][n[255&m]]}u.set_rounds(e+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function ce(e){return e instanceof Uint8Array}function he(e,t,r,i,n){const s=e.length-t,a=s<n?s:n;return e.set(r.subarray(i,i+a),t),a}function ue(...e){const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);let i=0;for(let t=0;t<e.length;t++)r.set(e[t],i),i+=e[t].length;return r}class le extends Error{constructor(...e){super(...e)}}class fe extends Error{constructor(...e){super(...e)}}class ye extends Error{constructor(...e){super(...e)}}const de=[],pe=[];class ge{constructor(e,t,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=e,this.iv=t,this.padding=r,this.acquire_asm(n,s)}acquire_asm(e,t){return void 0!==this.heap&&void 0!==this.asm||(this.heap=e||de.pop()||function(e,t){const r=e?e.byteLength:t||65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return e||new Uint8Array(new ArrayBuffer(r))}().subarray(oe.HEAP_DATA),this.asm=t||pe.pop()||new oe(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(de.push(this.heap),pe.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(e,t){const{asm:r}=this.acquire_asm(),i=e.length;if(16!==i&&24!==i&&32!==i)throw new fe("illegal key size");const n=new DataView(e.buffer,e.byteOffset,e.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==t){if(16!==t.length)throw new fe("illegal iv size");let e=new DataView(t.buffer,t.byteOffset,t.byteLength);r.set_iv(e.getUint32(0),e.getUint32(4),e.getUint32(8),e.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(e){if(!ce(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=oe.ENC[this.mode],n=oe.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=he(t,s+a,e,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(t.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=oe.ENC[this.mode],i=oe.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let t=0;t<a;++t)e[n+s+t]=a;s+=a,o=s}else if(s%16)throw new fe("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&t.cipher(r,i+n,s),o&&c.set(e.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(e){if(!ce(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=oe.DEC[this.mode],n=oe.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=a+c&-16,l=0,f=0;this.padding&&(l=a+c-u||16,u-=l);const y=new Uint8Array(u);for(;c>0;)f=he(t,s+a,e,o,c),a+=f,o+=f,c-=f,f=r.cipher(i,n+s,a-(c?0:l)),f&&y.set(t.subarray(s,s+f),h),h+=f,f<a?(s+=f,a-=f):(s=0,a=0);return this.pos=s,this.len=a,y}AES_Decrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=oe.DEC[this.mode],i=oe.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new fe("data length must be a multiple of the block size");s+=16-s%16}if(t.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let t=e[n+a-1];if(t<1||t>16||t>a)throw new ye("bad padding");let r=0;for(let i=t;i>1;i--)r|=t^e[n+a-i];if(r)throw new ye("bad padding");a-=t}}const o=new Uint8Array(a);return a>0&&o.set(e.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class me{static encrypt(e,t,r=!1){return new me(t,r).encrypt(e)}static decrypt(e,t,r=!1){return new me(t,r).decrypt(e)}constructor(e,t=!1,r){this.aes=r||new ge(e,void 0,t,"ECB")}encrypt(e){return ue(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return ue(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}function we(e){const t=function(e){const t=new me(e);this.encrypt=function(e){return t.encrypt(e)},this.decrypt=function(e){return t.decrypt(e)}};return t.blockSize=t.prototype.blockSize=16,t.keySize=t.prototype.keySize=e/8,t}function Ae(e,t,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],f=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],y=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let d,p,g,m,w,A,b,v,E,k,S,I,B,C,K=0,U=t.length;const P=32===e.length?3:9;v=3===P?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e,t){const r=8-e.length%8;let i;if(2===t&&r<8)i=32;else if(1===t)i=r;else{if(t||!(r<8)){if(8===r)return e;throw Error("des: invalid padding")}i=0}const n=new Uint8Array(e.length+r);for(let t=0;t<e.length;t++)n[t]=e[t];for(let t=0;t<r;t++)n[e.length+t]=i;return n}(t,s),U=t.length);let D=new Uint8Array(U),M=0;for(1===i&&(E=n[K++]<<24|n[K++]<<16|n[K++]<<8|n[K++],S=n[K++]<<24|n[K++]<<16|n[K++]<<8|n[K++],K=0);K<U;){for(A=t[K++]<<24|t[K++]<<16|t[K++]<<8|t[K++],b=t[K++]<<24|t[K++]<<16|t[K++]<<8|t[K++],1===i&&(r?(A^=E,b^=S):(k=E,I=S,E=A,S=b)),g=252645135&(A>>>4^b),b^=g,A^=g<<4,g=65535&(A>>>16^b),b^=g,A^=g<<16,g=858993459&(b>>>2^A),A^=g,b^=g<<2,g=16711935&(b>>>8^A),A^=g,b^=g<<8,g=1431655765&(A>>>1^b),b^=g,A^=g<<1,A=A<<1|A>>>31,b=b<<1|b>>>31,p=0;p<P;p+=3){for(B=v[p+1],C=v[p+2],d=v[p];d!==B;d+=C)m=b^e[d],w=(b>>>4|b<<28)^e[d+1],g=A,A=b,b=g^(o[m>>>24&63]|h[m>>>16&63]|l[m>>>8&63]|y[63&m]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|f[63&w]);g=A,A=b,b=g}A=A>>>1|A<<31,b=b>>>1|b<<31,g=1431655765&(A>>>1^b),b^=g,A^=g<<1,g=16711935&(b>>>8^A),A^=g,b^=g<<8,g=858993459&(b>>>2^A),A^=g,b^=g<<2,g=65535&(A>>>16^b),b^=g,A^=g<<16,g=252645135&(A>>>4^b),b^=g,A^=g<<4,1===i&&(r?(E=A,S=b):(A^=k,b^=I)),D[M++]=A>>>24,D[M++]=A>>>16&255,D[M++]=A>>>8&255,D[M++]=255&A,D[M++]=b>>>24,D[M++]=b>>>16&255,D[M++]=b>>>8&255,D[M++]=255&b}return r||(D=function(e,t){let r,i=null;if(2===t)r=32;else if(1===t)i=e[e.length-1];else{if(t)throw Error("des: invalid padding");r=0}if(!i){for(i=1;e[e.length-i]===r;)i++;i--}return e.subarray(0,e.length-i)}(D,s)),D}function be(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],f=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],y=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],d=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,g=Array(32*p),m=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,A,b,v=0,E=0;for(let k=0;k<p;k++){let p=e[v++]<<24|e[v++]<<16|e[v++]<<8|e[v++],k=e[v++]<<24|e[v++]<<16|e[v++]<<8|e[v++];b=252645135&(p>>>4^k),k^=b,p^=b<<4,b=65535&(k>>>-16^p),p^=b,k^=b<<-16,b=858993459&(p>>>2^k),k^=b,p^=b<<2,b=65535&(k>>>-16^p),p^=b,k^=b<<-16,b=1431655765&(p>>>1^k),k^=b,p^=b<<1,b=16711935&(k>>>8^p),p^=b,k^=b<<8,b=1431655765&(p>>>1^k),k^=b,p^=b<<1,b=p<<8|k>>>20&240,p=k<<24|k<<8&16711680|k>>>8&65280|k>>>24&240,k=b;for(let e=0;e<16;e++)m[e]?(p=p<<2|p>>>26,k=k<<2|k>>>26):(p=p<<1|p>>>27,k=k<<1|k>>>27),p&=-15,k&=-15,w=t[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],A=c[k>>>28]|h[k>>>24&15]|u[k>>>20&15]|l[k>>>16&15]|f[k>>>12&15]|y[k>>>8&15]|d[k>>>4&15],b=65535&(A>>>16^w),g[E++]=w^b,g[E++]=A^b<<16}return g}function ve(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return Ae(be(this.key[2]),Ae(be(this.key[1]),Ae(be(this.key[0]),e,!0,0,null,null),!1,0,null,null),!0,0,null,null)}}function Ee(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const i=t+e,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(e,t,r){const i=t^e,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(e,t,r){const i=t-e,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let e=0;e<4;e++)a=4*e,i[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=i[t[1]],c^=s[4][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][i[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][i[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][i[t[6]>>>2]>>>24-8*(3&t[6])&255],i[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][i[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][i[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][i[e[4]>>>2]>>>24-8*(3&e[4])&255],n[h]=c,h++}}for(let e=0;e<16;e++)this.masking[e]=n[e],this.rotate[e]=31&n[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function ke(e){this.cast5=new Ee,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}ve.keySize=ve.prototype.keySize=24,ve.blockSize=ve.prototype.blockSize=8,ke.blockSize=ke.prototype.blockSize=8,ke.keySize=ke.prototype.keySize=16;const Se=4294967295;function Ie(e,t){return(e<<t|e>>>32-t)&Se}function Be(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Ce(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function Ke(e,t){return e>>>8*t&255}function Ue(e){this.tf=function(){let e=null,t=null,r=-1,i=[],n=[[],[],[],[]];function s(e){return n[0][Ke(e,0)]^n[1][Ke(e,1)]^n[2][Ke(e,2)]^n[3][Ke(e,3)]}function a(e){return n[0][Ke(e,3)]^n[1][Ke(e,0)]^n[2][Ke(e,1)]^n[3][Ke(e,2)]}function o(e,t){let r=s(t[0]),n=a(t[1]);t[2]=Ie(t[2]^r+n+i[4*e+8]&Se,31),t[3]=Ie(t[3],1)^r+2*n+i[4*e+9]&Se,r=s(t[2]),n=a(t[3]),t[0]=Ie(t[0]^r+n+i[4*e+10]&Se,31),t[1]=Ie(t[1],1)^r+2*n+i[4*e+11]&Se}function c(e,t){let r=s(t[0]),n=a(t[1]);t[2]=Ie(t[2],1)^r+n+i[4*e+10]&Se,t[3]=Ie(t[3]^r+2*n+i[4*e+11]&Se,31),r=s(t[2]),n=a(t[3]),t[0]=Ie(t[0],1)^r+n+i[4*e+8]&Se,t[1]=Ie(t[1]^r+2*n+i[4*e+9]&Se,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const h=[],u=[],l=[];let f;const y=[];let d,p,g;const m=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],A=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],v=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],E=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],k=[[],[]],S=[[],[],[],[]];function I(e){return e^e>>2^[0,90,180,238][3&e]}function B(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function C(e,t){let r,i,n;for(r=0;r<8;r++)i=t>>>24,t=t<<8&Se|e>>>24,e=e<<8&Se,n=i<<1,128&i&&(n^=333),t^=i^n<<16,n^=i>>>1,1&i&&(n^=166),t^=n<<24|n<<8;return t}function K(e,t){const r=t>>4,i=15&t,n=m[e][r^i],s=w[e][v[i]^E[r]];return b[e][v[s]^E[n]]<<4|A[e][n^s]}function U(e,t){let r=Ke(e,0),i=Ke(e,1),n=Ke(e,2),s=Ke(e,3);switch(f){case 4:r=k[1][r]^Ke(t[3],0),i=k[0][i]^Ke(t[3],1),n=k[0][n]^Ke(t[3],2),s=k[1][s]^Ke(t[3],3);case 3:r=k[1][r]^Ke(t[2],0),i=k[1][i]^Ke(t[2],1),n=k[0][n]^Ke(t[2],2),s=k[0][s]^Ke(t[2],3);case 2:r=k[0][k[0][r]^Ke(t[1],0)]^Ke(t[0],0),i=k[0][k[1][i]^Ke(t[1],1)]^Ke(t[0],1),n=k[1][k[0][n]^Ke(t[1],2)]^Ke(t[0],2),s=k[1][k[1][s]^Ke(t[1],3)]^Ke(t[0],3)}return S[0][r]^S[1][i]^S[2][n]^S[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=Be(e,r);for(r=0;r<256;r++)k[0][r]=K(0,r),k[1][r]=K(1,r);for(r=0;r<256;r++)d=k[1][r],p=I(d),g=B(d),S[0][r]=d+(p<<8)+(g<<16)+(g<<24),S[2][r]=p+(g<<8)+(d<<16)+(g<<24),d=k[0][r],p=I(d),g=B(d),S[1][r]=g+(g<<8)+(p<<16)+(d<<24),S[3][r]=p+(d<<8)+(g<<16)+(p<<24);for(f=l.length/2,r=0;r<f;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,y[f-r-1]=C(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=U(s,h),a=Ie(U(a,u),8),i[r]=s+a&Se,i[r+1]=Ie(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,f){case 4:s=k[1][s]^Ke(y[3],0),a=k[0][a]^Ke(y[3],1),o=k[0][o]^Ke(y[3],2),c=k[1][c]^Ke(y[3],3);case 3:s=k[1][s]^Ke(y[2],0),a=k[1][a]^Ke(y[2],1),o=k[0][o]^Ke(y[2],2),c=k[0][c]^Ke(y[2],3);case 2:n[0][r]=S[0][k[0][k[0][s]^Ke(y[1],0)]^Ke(y[0],0)],n[1][r]=S[1][k[0][k[1][a]^Ke(y[1],1)]^Ke(y[0],1)],n[2][r]=S[2][k[1][k[0][o]^Ke(y[1],2)]^Ke(y[0],2)],n[3][r]=S[3][k[1][k[1][c]^Ke(y[1],3)]^Ke(y[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(e,n){t=e,r=n;const s=[Be(t,r)^i[0],Be(t,r+4)^i[1],Be(t,r+8)^i[2],Be(t,r+12)^i[3]];for(let e=0;e<8;e++)o(e,s);return Ce(t,r,s[2]^i[4]),Ce(t,r+4,s[3]^i[5]),Ce(t,r+8,s[0]^i[6]),Ce(t,r+12,s[1]^i[7]),r+=16,t},decrypt:function(e,n){t=e,r=n;const s=[Be(t,r)^i[4],Be(t,r+4)^i[5],Be(t,r+8)^i[6],Be(t,r+12)^i[7]];for(let e=7;e>=0;e--)c(e,s);Ce(t,r,s[2]^i[0]),Ce(t,r+4,s[3]^i[1]),Ce(t,r+8,s[0]^i[2]),Ce(t,r+12,s[1]^i[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function Pe(){}function De(e){this.bf=new Pe,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}Ue.keySize=Ue.prototype.keySize=32,Ue.blockSize=Ue.prototype.blockSize=16,Pe.prototype.BLOCKSIZE=8,Pe.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],Pe.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],Pe.prototype.NN=16,Pe.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},Pe.prototype._F=function(e){let t;const r=255&e,i=255&(e>>>=8),n=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][n],t^=this.sboxes[2][i],t+=this.sboxes[3][r],t},Pe.prototype._encryptBlock=function(e){let t,r=e[0],i=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],e[0]=this._clean(i),e[1]=this._clean(r)},Pe.prototype.encryptBlock=function(e){let t;const r=[0,0],i=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+i];this._encryptBlock(r);const n=[];for(t=0;t<this.BLOCKSIZE/2;++t)n[t+0]=r[0]>>>24-8*t&255,n[t+i]=r[1]>>>24-8*t&255;return n},Pe.prototype._decryptBlock=function(e){let t,r=e[0],i=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[1],i^=this.parray[0],e[0]=this._clean(i),e[1]=this._clean(r)},Pe.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let i=0;for(let t=0;t<4;++t)i=i<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^i}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const i=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(i),this.parray[t+0]=i[0],this.parray[t+1]=i[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[t][r+0]=i[0],this.sboxes[t][r+1]=i[1]},De.keySize=De.prototype.keySize=16,De.blockSize=De.prototype.blockSize=8;const Me=we(128),xe=we(192),Qe=we(256);var Re=/*#__PURE__*/Object.freeze({__proto__:null,aes128:Me,aes192:xe,aes256:Qe,blowfish:De,cast5:ke,des:function(e){this.key=e,this.encrypt=function(e,t){return Ae(be(this.key),e,!0,0,null,t)},this.decrypt=function(e,t){return Ae(be(this.key),e,!1,0,null,t)}},idea:function(){throw Error("IDEA symmetric-key algorithm not implemented")},tripledes:ve,twofish:Ue});function _e(e,t){let r=e[0],i=e[1],n=e[2],s=e[3];r=Le(r,i,n,s,t[0],7,-680876936),s=Le(s,r,i,n,t[1],12,-389564586),n=Le(n,s,r,i,t[2],17,606105819),i=Le(i,n,s,r,t[3],22,-1044525330),r=Le(r,i,n,s,t[4],7,-176418897),s=Le(s,r,i,n,t[5],12,1200080426),n=Le(n,s,r,i,t[6],17,-1473231341),i=Le(i,n,s,r,t[7],22,-45705983),r=Le(r,i,n,s,t[8],7,1770035416),s=Le(s,r,i,n,t[9],12,-1958414417),n=Le(n,s,r,i,t[10],17,-42063),i=Le(i,n,s,r,t[11],22,-1990404162),r=Le(r,i,n,s,t[12],7,1804603682),s=Le(s,r,i,n,t[13],12,-40341101),n=Le(n,s,r,i,t[14],17,-1502002290),i=Le(i,n,s,r,t[15],22,1236535329),r=Ne(r,i,n,s,t[1],5,-165796510),s=Ne(s,r,i,n,t[6],9,-1069501632),n=Ne(n,s,r,i,t[11],14,643717713),i=Ne(i,n,s,r,t[0],20,-373897302),r=Ne(r,i,n,s,t[5],5,-701558691),s=Ne(s,r,i,n,t[10],9,38016083),n=Ne(n,s,r,i,t[15],14,-660478335),i=Ne(i,n,s,r,t[4],20,-405537848),r=Ne(r,i,n,s,t[9],5,568446438),s=Ne(s,r,i,n,t[14],9,-1019803690),n=Ne(n,s,r,i,t[3],14,-187363961),i=Ne(i,n,s,r,t[8],20,1163531501),r=Ne(r,i,n,s,t[13],5,-1444681467),s=Ne(s,r,i,n,t[2],9,-51403784),n=Ne(n,s,r,i,t[7],14,1735328473),i=Ne(i,n,s,r,t[12],20,-1926607734),r=Oe(r,i,n,s,t[5],4,-378558),s=Oe(s,r,i,n,t[8],11,-2022574463),n=Oe(n,s,r,i,t[11],16,1839030562),i=Oe(i,n,s,r,t[14],23,-35309556),r=Oe(r,i,n,s,t[1],4,-1530992060),s=Oe(s,r,i,n,t[4],11,1272893353),n=Oe(n,s,r,i,t[7],16,-155497632),i=Oe(i,n,s,r,t[10],23,-1094730640),r=Oe(r,i,n,s,t[13],4,681279174),s=Oe(s,r,i,n,t[0],11,-358537222),n=Oe(n,s,r,i,t[3],16,-722521979),i=Oe(i,n,s,r,t[6],23,76029189),r=Oe(r,i,n,s,t[9],4,-640364487),s=Oe(s,r,i,n,t[12],11,-421815835),n=Oe(n,s,r,i,t[15],16,530742520),i=Oe(i,n,s,r,t[2],23,-995338651),r=Fe(r,i,n,s,t[0],6,-198630844),s=Fe(s,r,i,n,t[7],10,1126891415),n=Fe(n,s,r,i,t[14],15,-1416354905),i=Fe(i,n,s,r,t[5],21,-57434055),r=Fe(r,i,n,s,t[12],6,1700485571),s=Fe(s,r,i,n,t[3],10,-1894986606),n=Fe(n,s,r,i,t[10],15,-1051523),i=Fe(i,n,s,r,t[1],21,-2054922799),r=Fe(r,i,n,s,t[8],6,1873313359),s=Fe(s,r,i,n,t[15],10,-30611744),n=Fe(n,s,r,i,t[6],15,-1560198380),i=Fe(i,n,s,r,t[13],21,1309151649),r=Fe(r,i,n,s,t[4],6,-145523070),s=Fe(s,r,i,n,t[11],10,-1120210379),n=Fe(n,s,r,i,t[2],15,718787259),i=Fe(i,n,s,r,t[9],21,-343485551),e[0]=qe(r,e[0]),e[1]=qe(i,e[1]),e[2]=qe(n,e[2]),e[3]=qe(s,e[3])}function Te(e,t,r,i,n,s){return t=qe(qe(t,e),qe(i,s)),qe(t<<n|t>>>32-n,r)}function Le(e,t,r,i,n,s,a){return Te(t&r|~t&i,e,t,n,s,a)}function Ne(e,t,r,i,n,s,a){return Te(t&i|r&~i,e,t,n,s,a)}function Oe(e,t,r,i,n,s,a){return Te(t^r^i,e,t,n,s,a)}function Fe(e,t,r,i,n,s,a){return Te(r^(t|~i),e,t,n,s,a)}function He(e){const t=[];let r;for(r=0;r<64;r+=4)t[r>>2]=e.charCodeAt(r)+(e.charCodeAt(r+1)<<8)+(e.charCodeAt(r+2)<<16)+(e.charCodeAt(r+3)<<24);return t}const ze="0123456789abcdef".split("");function Ge(e){let t="",r=0;for(;r<4;r++)t+=ze[e>>8*r+4&15]+ze[e>>8*r&15];return t}function qe(e,t){return e+t&4294967295}const je=V.getWebCrypto(),Ve=V.getNodeCrypto(),Ze=Ve&&Ve.getHashes();function Ye(e){if(Ve&&Ze.includes(e))return async function(t){const r=Ve.createHash(e);return P(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function Je(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return Wu})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(y(e)&&(e=await T(e)),V.isStream(e)){const t=(await r()).create();return P(e,(e=>{t.update(e)}),(()=>t.digest()))}if(je&&t)return new Uint8Array(await je.digest(t,e));return(await r())(e)}}var We={md5:Ye("md5")||async function(e){const t=function(e){const t=e.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=e.length;i+=64)_e(r,He(e.substring(i-64,i)));e=e.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<e.length;i++)n[i>>2]|=e.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(_e(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*t,_e(r,n),r}(V.uint8ArrayToString(e));return V.hexToUint8Array(function(e){for(let t=0;t<e.length;t++)e[t]=Ge(e[t]);return e.join("")}(t))},sha1:Ye("sha1")||Je("sha1","SHA-1"),sha224:Ye("sha224")||Je("sha224"),sha256:Ye("sha256")||Je("sha256","SHA-256"),sha384:Ye("sha384")||Je("sha384","SHA-384"),sha512:Ye("sha512")||Je("sha512","SHA-512"),ripemd:Ye("ripemd160")||Je("ripemd160"),sha3_256:Ye("sha3-256")||Je("sha3_256"),sha3_512:Ye("sha3-512")||Je("sha3_512"),digest:function(e,t){switch(e){case z.hash.md5:return this.md5(t);case z.hash.sha1:return this.sha1(t);case z.hash.ripemd:return this.ripemd(t);case z.hash.sha256:return this.sha256(t);case z.hash.sha384:return this.sha384(t);case z.hash.sha512:return this.sha512(t);case z.hash.sha224:return this.sha224(t);case z.hash.sha3_256:return this.sha3_256(t);case z.hash.sha3_512:return this.sha3_512(t);default:throw Error("Unsupported hash function")}},getHashByteLength:function(e){switch(e){case z.hash.md5:return 16;case z.hash.sha1:case z.hash.ripemd:return 20;case z.hash.sha256:return 32;case z.hash.sha384:return 48;case z.hash.sha512:return 64;case z.hash.sha224:return 28;case z.hash.sha3_256:return 32;case z.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(e){switch(e){case z.hash.md5:case z.hash.sha1:case z.hash.ripemd:case z.hash.sha224:case z.hash.sha256:return 64;case z.hash.sha384:case z.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}};class $e{static encrypt(e,t,r){return new $e(t,r).encrypt(e)}static decrypt(e,t,r){return new $e(t,r).decrypt(e)}constructor(e,t,r){this.aes=r||new ge(e,t,!0,"CFB"),delete this.aes.padding}encrypt(e){return ue(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return ue(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}function Xe(e){const t=z.read(z.symmetric,e);return Re[t]}const et=V.getWebCrypto(),tt=V.getNodeCrypto(),rt=tt?tt.getCiphers():[],it={idea:rt.includes("idea-cfb")?"idea-cfb":void 0,tripledes:rt.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:rt.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:rt.includes("bf-cfb")?"bf-cfb":void 0,aes128:rt.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:rt.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:rt.includes("aes-256-cfb")?"aes-256-cfb":void 0};class nt{constructor(e,t,r){const{blockSize:i}=Xe(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=Xe(e);return et.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await et.importKey("raw",this.key,r,!1,["encrypt"]);const i=await et.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(i).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,i=V.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),n=V.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return st(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(e.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const t=this.nextBlock;i=await this._runCBC(this.prevBlock),st(i,t),this.prevBlock=i.slice(),this.i=0;const n=e.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);st(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(V.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return st(t,e),this.clearSensitiveData(),t}}function st(e,t){const r=Math.min(e.length,t.length);for(let i=0;i<r;i++)e[i]=e[i]^t[i]}var at=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i){const n=z.read(z.symmetric,e);if(tt&&it[n])return function(e,t,r,i){const n=z.read(z.symmetric,e),s=new tt.createDecipheriv(it[n],t,i);return P(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(V.isAES(e))return function(e,t,r,i){if(V.isStream(r)){const e=new $e(t,i);return P(r,(t=>e.aes.AES_Decrypt_process(t)),(()=>e.aes.AES_Decrypt_finish()))}return $e.decrypt(r,t,i)}(0,t,r,i);const s=new(Xe(e))(t),a=s.blockSize;let o=i,c=new Uint8Array;const h=e=>{e&&(c=V.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,i=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[i++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,i)};return P(r,h,h)},encrypt:async function(e,t,r,i,n){const s=z.read(z.symmetric,e);if(V.getNodeCrypto()&&it[s])return function(e,t,r,i){const n=z.read(z.symmetric,e),s=new tt.createCipheriv(it[n],t,i);return P(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(V.isAES(e))return async function(e,t,r,i){if(et&&await nt.isSupported(e)){const n=new nt(e,t,i);return V.isStream(r)?P(r,(e=>n.encryptChunk(e)),(()=>n.finish())):n.encrypt(r)}{const e=new $e(t,i);return P(r,(t=>e.aes.AES_Encrypt_process(t)),(()=>e.aes.AES_Encrypt_finish()))}}(e,t,r,i);const a=new(Xe(e))(t),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=e=>{e&&(h=V.concatUint8Array([h,e]));const t=new Uint8Array(h.length);let r,i=0;for(;e?h.length>=o:h.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^e[r],t[i++]=c[r];h=h.subarray(o)}return t.subarray(0,i)};return P(r,u,u)}});class ot{static encrypt(e,t,r){return new ot(t,r).encrypt(e)}static decrypt(e,t,r){return new ot(t,r).encrypt(e)}constructor(e,t,r){this.aes=r||new ge(e,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(t)}encrypt(e){return ue(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return ue(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(e,t,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new fe("illegal counter size");let e=Math.pow(2,r)-1;i.set_mask(0,0,e/4294967296|0,0|e)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===e)throw Error("nonce is required");{let t=e.length;if(!t||t>16)throw new fe("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(e),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==t){if(t<0||t>=Math.pow(2,r))throw new fe("illegal counter value");i.set_counter(0,0,t/4294967296|0,0|t)}}}class ct{static encrypt(e,t,r=!0,i){return new ct(t,i,r).encrypt(e)}static decrypt(e,t,r=!0,i){return new ct(t,i,r).decrypt(e)}constructor(e,t,r=!0,i){this.aes=i||new ge(e,t,r,"CBC")}encrypt(e){return ue(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return ue(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const ht=V.getWebCrypto(),ut=V.getNodeCrypto(),lt=16;function ft(e,t){const r=e.length-lt;for(let i=0;i<lt;i++)e[i+r]^=t[i];return e}const yt=new Uint8Array(lt);async function dt(e){const t=await async function(e){if(V.getNodeCrypto())return async function(t){const r=new ut.createCipheriv("aes-"+8*e.length+"-cbc",e,yt).update(t);return new Uint8Array(r)};if(V.getWebCrypto())try{return e=await ht.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await ht.encrypt({name:"AES-CBC",iv:yt,length:8*lt},e,t);return new Uint8Array(r).subarray(0,r.byteLength-lt)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;V.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return ct.encrypt(t,e,!1,yt)}}(e),r=V.double(await t(yt)),i=V.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%lt==0)return ft(e,t);const i=new Uint8Array(e.length+(lt-e.length%lt));return i.set(e),i[e.length]=128,ft(i,r)}(e,r,i))).subarray(-lt)}}const pt=V.getWebCrypto(),gt=V.getNodeCrypto(),mt=V.getNodeBuffer(),wt=16,At=wt,bt=wt,vt=new Uint8Array(wt),Et=new Uint8Array(wt);Et[wt-1]=1;const kt=new Uint8Array(wt);async function St(e){const t=await dt(e);return function(e,r){return t(V.concatUint8Array([e,r]))}}async function It(e){if(V.getNodeCrypto())return async function(t,r){const i=new gt.createCipheriv("aes-"+8*e.length+"-ctr",e,r),n=mt.concat([i.update(t),i.final()]);return new Uint8Array(n)};if(V.getWebCrypto())try{const t=await pt.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const i=await pt.encrypt({name:"AES-CTR",counter:r,length:8*wt},t,e);return new Uint8Array(i)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;V.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return ot.encrypt(t,e,r)}}async function Bt(e,t){if(e!==z.symmetric.aes128&&e!==z.symmetric.aes192&&e!==z.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([St(t),It(t)]);return{encrypt:async function(e,t,n){const[s,a]=await Promise.all([r(vt,t),r(Et,n)]),o=await i(e,s),c=await r(kt,o);for(let e=0;e<bt;e++)c[e]^=a[e]^s[e];return V.concatUint8Array([o,c])},decrypt:async function(e,t,n){if(e.length<bt)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-bt),a=e.subarray(-bt),[o,c,h]=await Promise.all([r(vt,t),r(Et,n),r(kt,s)]),u=h;for(let e=0;e<bt;e++)u[e]^=c[e]^o[e];if(!V.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}kt[wt-1]=2,Bt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},Bt.blockLength=wt,Bt.ivLength=At,Bt.tagLength=bt;const Ct=16,Kt=15,Ut=16;function Pt(e){let t=0;for(let r=1;0==(e&r);r<<=1)t++;return t}function Dt(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function Mt(e,t){return Dt(e.slice(),t)}const xt=new Uint8Array(Ct),Qt=new Uint8Array([1]);async function Rt(e,t){let r,i,n,s=0;function a(e,t,i,a){const o=t.length/Ct|0;!function(e,t){const r=V.nbits(Math.max(e.length,t.length)/Ct|0)-1;for(let e=s+1;e<=r;e++)n[e]=V.double(n[e-1]);s=r}(t,a);const c=V.concatUint8Array([xt.subarray(0,Kt-i.length),Qt,i]),h=63&c[Ct-1];c[Ct-1]&=192;const u=r(c),l=V.concatUint8Array([u,Mt(u.subarray(0,8),u.subarray(1,9))]),f=V.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),y=new Uint8Array(Ct),d=new Uint8Array(t.length+Ut);let p,g=0;for(p=0;p<o;p++)Dt(f,n[Pt(p+1)]),d.set(Dt(e(Mt(f,t)),f),g),Dt(y,e===r?t:d.subarray(g)),t=t.subarray(Ct),g+=Ct;if(t.length){Dt(f,n.x);const i=r(f);d.set(Mt(t,i),g);const s=new Uint8Array(Ct);s.set(e===r?t:d.subarray(g,-Ut),0),s[t.length]=128,Dt(y,s),g+=t.length}const m=Dt(r(Dt(Dt(y,f),n.$)),function(e){if(!e.length)return xt;const t=e.length/Ct|0,i=new Uint8Array(Ct),s=new Uint8Array(Ct);for(let a=0;a<t;a++)Dt(i,n[Pt(a+1)]),Dt(s,r(Mt(i,e))),e=e.subarray(Ct);if(e.length){Dt(i,n.x);const t=new Uint8Array(Ct);t.set(e,0),t[e.length]=128,Dt(t,i),Dt(s,r(t))}return s}(a));return d.set(m,g),d}return function(e,t){const s=z.read(z.symmetric,e),a=new Re[s](t);r=a.encrypt.bind(a),i=a.decrypt.bind(a);const o=r(xt),c=V.double(o);n=[],n[0]=V.double(c),n.x=o,n.$=c}(e,t),{encrypt:async function(e,t,i){return a(r,e,t,i)},decrypt:async function(e,t,r){if(e.length<Ut)throw Error("Invalid OCB ciphertext");const n=e.subarray(-Ut);e=e.subarray(0,-Ut);const s=a(i,e,t,r);if(V.equalsUint8Array(n,s.subarray(-Ut)))return s.subarray(0,-Ut);throw Error("Authentication tag mismatch")}}}Rt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},Rt.blockLength=Ct,Rt.ivLength=Kt,Rt.tagLength=Ut;const _t=68719476704;class Tt{static encrypt(e,t,r,i,n){return new Tt(t,r,i,n).encrypt(e)}static decrypt(e,t,r,i,n){return new Tt(t,r,i,n).decrypt(e)}constructor(e,t,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new ge(e,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new fe("illegal tagSize value");const o=t.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(t),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(oe.MAC.GCM,oe.HEAP_DATA,16),s.get_iv(oe.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(t),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>_t)throw new fe("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(e){return this.AES_GCM_encrypt(e)}decrypt(e){return this.AES_GCM_decrypt(e)}AES_GCM_Encrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>_t)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=he(n,a+o,e,t,r),o+=u,t+=u,r-=u,u=i.cipher(oe.ENC.CTR,oe.HEAP_DATA+a,o),u=i.mac(oe.MAC.GCM,oe.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);e.cipher(oe.ENC.CTR,oe.HEAP_DATA+s,a+15&-16),a&&o.set(t.subarray(s,s+a));let c=a;for(;15&c;c++)t[s+c]=0;e.mac(oe.MAC.GCM,oe.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return t[0]=0,t[1]=0,t[2]=0,t[3]=h>>>29,t[4]=h>>>21,t[5]=h>>>13&255,t[6]=h>>>5&255,t[7]=h<<3&255,t[8]=t[9]=t[10]=0,t[11]=u>>>29,t[12]=u>>>21&255,t[13]=u>>>13&255,t[14]=u>>>5&255,t[15]=u<<3&255,e.mac(oe.MAC.GCM,oe.HEAP_DATA,16),e.get_iv(oe.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(oe.ENC.CTR,oe.HEAP_DATA,16),o.set(t.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,f=0;if((s-1<<4)+c+r>_t)throw new RangeError("counter overflow");const y=new Uint8Array(u);for(;r>l;)f=he(n,o+c,e,t,r-l),c+=f,t+=f,r-=f,f=i.mac(oe.MAC.GCM,oe.HEAP_DATA+o,f),f=i.cipher(oe.DEC.CTR,oe.HEAP_DATA+o,f),f&&y.set(n.subarray(o,o+f),h),s+=f>>>4,h+=f,o=0,c=0;return r>0&&(c+=he(n,0,e,t,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,y}AES_GCM_Decrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new le("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(t.subarray(s+o,s+a));let u=o;for(;15&u;u++)t[s+u]=0;e.mac(oe.MAC.GCM,oe.HEAP_DATA+s,u),e.cipher(oe.DEC.CTR,oe.HEAP_DATA+s,u),o&&c.set(t.subarray(s,s+o));const l=void 0!==i?i.length:0,f=(n-1<<4)+a-r;t[0]=0,t[1]=0,t[2]=0,t[3]=l>>>29,t[4]=l>>>21,t[5]=l>>>13&255,t[6]=l>>>5&255,t[7]=l<<3&255,t[8]=t[9]=t[10]=0,t[11]=f>>>29,t[12]=f>>>21&255,t[13]=f>>>13&255,t[14]=f>>>5&255,t[15]=f<<3&255,e.mac(oe.MAC.GCM,oe.HEAP_DATA,16),e.get_iv(oe.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(oe.ENC.CTR,oe.HEAP_DATA,16);let y=0;for(let e=0;e<r;++e)y|=h[e]^t[e];if(y)throw new ye("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(e){const t=this.AES_GCM_Decrypt_process(e),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}AES_GCM_encrypt(e){const t=this.AES_GCM_Encrypt_process(e),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}_gcm_mac_process(e){let{asm:t,heap:r}=this.aes.acquire_asm(),i=0,n=e.length||0,s=0;for(;n>0;){for(s=he(r,0,e,i,n),i+=s,n-=s;15&s;)r[s++]=0;t.mac(oe.MAC.GCM,oe.HEAP_DATA,s)}}}const Lt=V.getWebCrypto(),Nt=V.getNodeCrypto(),Ot=V.getNodeBuffer(),Ft=16,Ht="AES-GCM";async function zt(e,t){if(e!==z.symmetric.aes128&&e!==z.symmetric.aes192&&e!==z.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(V.getNodeCrypto())return{encrypt:async function(e,r,i=new Uint8Array){const n=new Nt.createCipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i);const s=Ot.concat([n.update(e),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,i=new Uint8Array){const n=new Nt.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i),n.setAuthTag(e.slice(e.length-Ft,e.length));const s=Ot.concat([n.update(e.slice(0,e.length-Ft)),n.final()]);return new Uint8Array(s)}};if(V.getWebCrypto())try{const e=await Lt.importKey("raw",t,{name:Ht},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return Tt.encrypt(i,t,n,s);const a=await Lt.encrypt({name:Ht,iv:n,additionalData:s,tagLength:8*Ft},e,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===Ft)return Tt.decrypt(i,t,n,s);try{const t=await Lt.decrypt({name:Ht,iv:n,additionalData:s,tagLength:8*Ft},e,i);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;V.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,i){return Tt.encrypt(e,t,r,i)},decrypt:async function(e,r,i){return Tt.decrypt(e,t,r,i)}}}zt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},zt.blockLength=16,zt.ivLength=12,zt.tagLength=Ft;var Gt={cfb:at,gcm:zt,experimentalGCM:zt,eax:Bt,ocb:Rt};const qt=V.getNodeCrypto();function jt(e){const t=new Uint8Array(e);if(qt){const e=qt.randomBytes(t.length);t.set(e)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(t)}return t}async function Vt(e,t){const r=await V.getBigInteger();if(t.lt(e))throw Error("Illegal parameter value: max <= min");const i=t.sub(e);return new r(jt(i.byteLength()+8)).mod(i).add(e)}var Zt=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Vt,getRandomBytes:jt});async function Yt(e,t,r){const i=await V.getBigInteger(),n=new i(1),s=n.leftShift(new i(e-1)),a=new i(30),o=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2],c=await Vt(s,s.leftShift(n));let h=c.mod(a).toNumber();do{c.iadd(new i(o[h])),h=(h+o[h])%o.length,c.bitLength()>e&&(c.imod(s.leftShift(n)).iadd(s),h=c.mod(a).toNumber())}while(!await Jt(c,t,r));return c}async function Jt(e,t,r){return!(t&&!e.dec().gcd(t).isOne())&&(!!await async function(e){const t=await V.getBigInteger();return Wt.every((r=>0!==e.mod(new t(r))))}(e)&&(!!await async function(e,t){const r=await V.getBigInteger();return t=t||new r(2),t.modExp(e.dec(),e).isOne()}(e)&&!!await async function(e,t,r){const i=await V.getBigInteger(),n=e.bitLength();t||(t=Math.max(1,n/48|0));const s=e.dec();let a=0;for(;!s.getBit(a);)a++;const o=e.rightShift(new i(a));for(;t>0;t--){let t,n=(r?r():await Vt(new i(2),s)).modExp(o,e);if(!n.isOne()&&!n.equal(s)){for(t=1;t<a;t++){if(n=n.mul(n).mod(e),n.isOne())return!1;if(n.equal(s))break}if(t===a)return!1}}return!0}(e,r)))}const Wt=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999];const $t=[];function Xt(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const i=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const i=jt(e-r);for(let e=0;e<i.length;e++)0!==i[e]&&(t[r++]=i[e])}return t}(t-r-3),n=new Uint8Array(t);return n[1]=2,n.set(i,2),n.set(e,t-r),n}function er(e,t){let r=2,i=1;for(let t=r;t<e.length;t++)i&=0!==e[t],r+=i;const n=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&n>=8&!i;if(t)return V.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}async function tr(e,t,r){let i;if(t.length!==We.getHashByteLength(e))throw Error("Invalid hash length");const n=new Uint8Array($t[e].length);for(i=0;i<$t[e].length;i++)n[i]=$t[e][i];const s=n.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(t,r-t.length),o}$t[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],$t[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],$t[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],$t[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],$t[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],$t[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],$t[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var rr=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:er,emeEncode:Xt,emsaEncode:tr});const ir=V.getWebCrypto(),nr=V.getNodeCrypto(),sr=nr?V.nodeRequire("asn1.js"):void 0,ar=nr?sr.define("RSAPrivateKey",(function(){this.seq().obj(this.key("version").int(),this.key("modulus").int(),this.key("publicExponent").int(),this.key("privateExponent").int(),this.key("prime1").int(),this.key("prime2").int(),this.key("exponent1").int(),this.key("exponent2").int(),this.key("coefficient").int())})):void 0,or=nr?sr.define("RSAPubliceKey",(function(){this.seq().obj(this.key("modulus").int(),this.key("publicExponent").int())})):void 0;var cr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a,o){return V.getNodeCrypto()?async function(e,t,r,i,n,s,a,o){const{default:c}=await Promise.resolve().then((function(){return Ko})),h=new c(n),u=new c(s),l=new c(i),f=l.mod(u.subn(1)),y=l.mod(h.subn(1)),d={version:0,modulus:new c(t),publicExponent:new c(r),privateExponent:new c(i),prime1:new c(s),prime2:new c(n),exponent1:f,exponent2:y,coefficient:new c(a)};let p;if(void 0!==nr.createPrivateKey){p={key:ar.encode(d,"der"),format:"der",type:"pkcs1",padding:nr.constants.RSA_PKCS1_PADDING}}else{p={key:ar.encode(d,"pem",{label:"RSA PRIVATE KEY"}),padding:nr.constants.RSA_PKCS1_PADDING}}try{return new Uint8Array(nr.privateDecrypt(p,e))}catch(e){if(o)return o;throw Error("Decryption error")}}(e,t,r,i,n,s,a,o):async function(e,t,r,i,n,s,a,o){const c=await V.getBigInteger();if(e=new c(e),t=new c(t),r=new c(r),i=new c(i),n=new c(n),s=new c(s),a=new c(a),e.gte(t))throw Error("Data too large.");const h=i.mod(s.dec()),u=i.mod(n.dec()),l=(await Vt(new c(2),t)).mod(t),f=l.modInv(t).modExp(r,t);e=e.mul(f).mod(t);const y=e.modExp(u,n),d=e.modExp(h,s),p=a.mul(d.sub(y)).mod(s);let g=p.mul(n).add(y);return g=g.mul(l).mod(t),er(g.toUint8Array("be",t.byteLength()),o)}(e,t,r,i,n,s,a,o)},encrypt:async function(e,t,r){return V.getNodeCrypto()?async function(e,t,r){const{default:i}=await Promise.resolve().then((function(){return Ko})),n={modulus:new i(t),publicExponent:new i(r)};let s;if(void 0!==nr.createPrivateKey){s={key:or.encode(n,"der"),format:"der",type:"pkcs1",padding:nr.constants.RSA_PKCS1_PADDING}}else{s={key:or.encode(n,"pem",{label:"RSA PUBLIC KEY"}),padding:nr.constants.RSA_PKCS1_PADDING}}return new Uint8Array(nr.publicEncrypt(s,e))}(e,t,r):async function(e,t,r){const i=await V.getBigInteger();if(t=new i(t),e=new i(Xt(e,t.byteLength())),r=new i(r),e.gte(t))throw Error("Message size cannot exceed modulus size");return e.modExp(r,t).toUint8Array("be",t.byteLength())}(e,t,r)},generate:async function(e,t){if(t=new(await V.getBigInteger())(t),V.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:t.toUint8Array(),hash:{name:"SHA-1"}},i=await ir.generateKey(r,!0,["sign","verify"]),n=await ir.exportKey("jwk",i.privateKey);return{n:X(n.n),e:t.toUint8Array(),d:X(n.d),p:X(n.q),q:X(n.p),u:X(n.qi)}}if(V.getNodeCrypto()&&nr.generateKeyPair&&ar){const r={modulusLength:e,publicExponent:t.toNumber(),publicKeyEncoding:{type:"pkcs1",format:"der"},privateKeyEncoding:{type:"pkcs1",format:"der"}},i=await new Promise(((e,t)=>{nr.generateKeyPair("rsa",r,((r,i,n)=>{r?t(r):e(ar.decode(n,"der"))}))}));return{n:i.modulus.toArrayLike(Uint8Array),e:i.publicExponent.toArrayLike(Uint8Array),d:i.privateExponent.toArrayLike(Uint8Array),p:i.prime2.toArrayLike(Uint8Array),q:i.prime1.toArrayLike(Uint8Array),u:i.coefficient.toArrayLike(Uint8Array)}}let r,i,n;do{i=await Yt(e-(e>>1),t,40),r=await Yt(e>>1,t,40),n=r.mul(i)}while(n.bitLength()!==e);const s=r.dec().imul(i.dec());return i.lt(r)&&([r,i]=[i,r]),{n:n.toUint8Array(),e:t.toUint8Array(),d:t.modInv(s).toUint8Array(),p:r.toUint8Array(),q:i.toUint8Array(),u:r.modInv(i).toUint8Array()}},sign:async function(e,t,r,i,n,s,a,o,c){if(t&&!V.isStream(t))if(V.getWebCrypto())try{return await async function(e,t,r,i,n,s,a,o){const c=await async function(e,t,r,i,n,s){const a=await V.getBigInteger(),o=new a(i),c=new a(n),h=new a(r);let u=h.mod(c.dec()),l=h.mod(o.dec());return l=l.toUint8Array(),u=u.toUint8Array(),{kty:"RSA",n:ee(e,!0),e:ee(t,!0),d:ee(r,!0),p:ee(n,!0),q:ee(i,!0),dp:ee(u,!0),dq:ee(l,!0),qi:ee(s,!0),ext:!0}}(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},u=await ir.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await ir.sign("RSASSA-PKCS1-v1_5",u,t))}(z.read(z.webHash,e),t,r,i,n,s,a,o)}catch(e){V.printDebugError(e)}else if(V.getNodeCrypto())return async function(e,t,r,i,n,s,a,o){const{default:c}=await Promise.resolve().then((function(){return Ko})),h=new c(s),u=new c(a),l=new c(n),f=l.mod(u.subn(1)),y=l.mod(h.subn(1)),d=nr.createSign(z.read(z.hash,e));d.write(t),d.end();const p={version:0,modulus:new c(r),publicExponent:new c(i),privateExponent:new c(n),prime1:new c(a),prime2:new c(s),exponent1:f,exponent2:y,coefficient:new c(o)};if(void 0!==nr.createPrivateKey){const e=ar.encode(p,"der");return new Uint8Array(d.sign({key:e,format:"der",type:"pkcs1"}))}const g=ar.encode(p,"pem",{label:"RSA PRIVATE KEY"});return new Uint8Array(d.sign(g))}(e,t,r,i,n,s,a,o);return async function(e,t,r,i){const n=await V.getBigInteger();t=new n(t);const s=new n(await tr(e,i,t.byteLength()));if(r=new n(r),s.gte(t))throw Error("Message size cannot exceed modulus size");return s.modExp(r,t).toUint8Array("be",t.byteLength())}(e,r,n,c)},validateParams:async function(e,t,r,i,n,s){const a=await V.getBigInteger();if(e=new a(e),i=new a(i),n=new a(n),!i.mul(n).equal(e))return!1;const o=new a(2);if(s=new a(s),!i.mul(s).mod(n).isOne())return!1;t=new a(t),r=new a(r);const c=new a(Math.floor(e.bitLength()/3)),h=await Vt(o,o.leftShift(c)),u=h.mul(r).mul(t);return!(!u.mod(i.dec()).equal(h)||!u.mod(n.dec()).equal(h))},verify:async function(e,t,r,i,n,s){if(t&&!V.isStream(t))if(V.getWebCrypto())try{return await async function(e,t,r,i,n){const s=function(e,t){return{kty:"RSA",n:ee(e,!0),e:ee(t,!0),ext:!0}}(i,n),a=await ir.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return ir.verify("RSASSA-PKCS1-v1_5",a,r,t)}(z.read(z.webHash,e),t,r,i,n)}catch(e){V.printDebugError(e)}else if(V.getNodeCrypto())return async function(e,t,r,i,n){const{default:s}=await Promise.resolve().then((function(){return Ko})),a=nr.createVerify(z.read(z.hash,e));a.write(t),a.end();const o={modulus:new s(i),publicExponent:new s(n)};let c;if(void 0!==nr.createPrivateKey){c={key:or.encode(o,"der"),format:"der",type:"pkcs1"}}else c=or.encode(o,"pem",{label:"RSA PUBLIC KEY"});try{return await a.verify(c,r)}catch(e){return!1}}(e,t,r,i,n);return async function(e,t,r,i,n){const s=await V.getBigInteger();if(r=new s(r),t=new s(t),i=new s(i),t.gte(r))throw Error("Signature size cannot exceed modulus size");const a=t.modExp(i,r).toUint8Array("be",r.byteLength()),o=await tr(e,n,r.byteLength());return V.equalsUint8Array(a,o)}(e,r,i,n,s)}});var hr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){const s=await V.getBigInteger();return e=new s(e),t=new s(t),r=new s(r),i=new s(i),er(e.modExp(i,r).modInv(r).imul(t).imod(r).toUint8Array("be",r.byteLength()),n)},encrypt:async function(e,t,r,i){const n=await V.getBigInteger();t=new n(t),r=new n(r),i=new n(i);const s=new n(Xt(e,t.byteLength())),a=await Vt(new n(1),t.dec());return{c1:r.modExp(a,t).toUint8Array(),c2:i.modExp(a,t).imul(s).imod(t).toUint8Array()}},validateParams:async function(e,t,r,i){const n=await V.getBigInteger();e=new n(e),t=new n(t),r=new n(r);const s=new n(1);if(t.lte(s)||t.gte(e))return!1;const a=new n(e.bitLength()),o=new n(1023);if(a.lt(o))return!1;if(!t.modExp(e.dec(),e).isOne())return!1;let c=t;const h=new n(1),u=new n(2).leftShift(new n(17));for(;h.lt(u);){if(c=c.mul(t).imod(e),c.isOne())return!1;h.iinc()}i=new n(i);const l=new n(2),f=await Vt(l.leftShift(a.dec()),l.leftShift(a)),y=e.dec().imul(f).iadd(i);return!!r.equal(t.modExp(y,e))}});const ur=o&&"object"==typeof o&&"webcrypto"in o?o.webcrypto:void 0,lr={};var fr=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},yr=function(){throw Error("no PRNG")},dr=new Uint8Array(32);dr[0]=9;var pr=fr(),gr=fr([1]),mr=fr([56129,1]),wr=fr([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),Ar=fr([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),br=fr([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),vr=fr([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),Er=fr([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function kr(e,t,r,i){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=i>>24&255,e[t+5]=i>>16&255,e[t+6]=i>>8&255,e[t+7]=255&i}function Sr(e,t,r,i){return function(e,t,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=e[t+s]^r[i+s];return(1&a-1>>>8)-1}(e,t,r,i,32)}function Ir(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function Br(e){var t,r,i=1;for(t=0;t<16;t++)r=e[t]+i+65535,i=Math.floor(r/65536),e[t]=r-65536*i;e[0]+=i-1+37*(i-1)}function Cr(e,t,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(e[s]^t[s]),e[s]^=i,t[s]^=i}function Kr(e,t){var r,i,n,s=fr(),a=fr();for(r=0;r<16;r++)a[r]=t[r];for(Br(a),Br(a),Br(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,Cr(a,s,1-n)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function Ur(e,t){var r=new Uint8Array(32),i=new Uint8Array(32);return Kr(r,e),Kr(i,t),Sr(r,0,i,0)}function Pr(e){var t=new Uint8Array(32);return Kr(t,e),1&t[0]}function Dr(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function Mr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]+r[i]}function xr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]-r[i]}function Qr(e,t,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0,b=0,v=0,E=0,k=0,S=0,I=0,B=0,C=0,K=0,U=0,P=0,D=0,M=0,x=0,Q=0,R=0,_=r[0],T=r[1],L=r[2],N=r[3],O=r[4],F=r[5],H=r[6],z=r[7],G=r[8],q=r[9],j=r[10],V=r[11],Z=r[12],Y=r[13],J=r[14],W=r[15];s+=(i=t[0])*_,a+=i*T,o+=i*L,c+=i*N,h+=i*O,u+=i*F,l+=i*H,f+=i*z,y+=i*G,d+=i*q,p+=i*j,g+=i*V,m+=i*Z,w+=i*Y,A+=i*J,b+=i*W,a+=(i=t[1])*_,o+=i*T,c+=i*L,h+=i*N,u+=i*O,l+=i*F,f+=i*H,y+=i*z,d+=i*G,p+=i*q,g+=i*j,m+=i*V,w+=i*Z,A+=i*Y,b+=i*J,v+=i*W,o+=(i=t[2])*_,c+=i*T,h+=i*L,u+=i*N,l+=i*O,f+=i*F,y+=i*H,d+=i*z,p+=i*G,g+=i*q,m+=i*j,w+=i*V,A+=i*Z,b+=i*Y,v+=i*J,E+=i*W,c+=(i=t[3])*_,h+=i*T,u+=i*L,l+=i*N,f+=i*O,y+=i*F,d+=i*H,p+=i*z,g+=i*G,m+=i*q,w+=i*j,A+=i*V,b+=i*Z,v+=i*Y,E+=i*J,k+=i*W,h+=(i=t[4])*_,u+=i*T,l+=i*L,f+=i*N,y+=i*O,d+=i*F,p+=i*H,g+=i*z,m+=i*G,w+=i*q,A+=i*j,b+=i*V,v+=i*Z,E+=i*Y,k+=i*J,S+=i*W,u+=(i=t[5])*_,l+=i*T,f+=i*L,y+=i*N,d+=i*O,p+=i*F,g+=i*H,m+=i*z,w+=i*G,A+=i*q,b+=i*j,v+=i*V,E+=i*Z,k+=i*Y,S+=i*J,I+=i*W,l+=(i=t[6])*_,f+=i*T,y+=i*L,d+=i*N,p+=i*O,g+=i*F,m+=i*H,w+=i*z,A+=i*G,b+=i*q,v+=i*j,E+=i*V,k+=i*Z,S+=i*Y,I+=i*J,B+=i*W,f+=(i=t[7])*_,y+=i*T,d+=i*L,p+=i*N,g+=i*O,m+=i*F,w+=i*H,A+=i*z,b+=i*G,v+=i*q,E+=i*j,k+=i*V,S+=i*Z,I+=i*Y,B+=i*J,C+=i*W,y+=(i=t[8])*_,d+=i*T,p+=i*L,g+=i*N,m+=i*O,w+=i*F,A+=i*H,b+=i*z,v+=i*G,E+=i*q,k+=i*j,S+=i*V,I+=i*Z,B+=i*Y,C+=i*J,K+=i*W,d+=(i=t[9])*_,p+=i*T,g+=i*L,m+=i*N,w+=i*O,A+=i*F,b+=i*H,v+=i*z,E+=i*G,k+=i*q,S+=i*j,I+=i*V,B+=i*Z,C+=i*Y,K+=i*J,U+=i*W,p+=(i=t[10])*_,g+=i*T,m+=i*L,w+=i*N,A+=i*O,b+=i*F,v+=i*H,E+=i*z,k+=i*G,S+=i*q,I+=i*j,B+=i*V,C+=i*Z,K+=i*Y,U+=i*J,P+=i*W,g+=(i=t[11])*_,m+=i*T,w+=i*L,A+=i*N,b+=i*O,v+=i*F,E+=i*H,k+=i*z,S+=i*G,I+=i*q,B+=i*j,C+=i*V,K+=i*Z,U+=i*Y,P+=i*J,D+=i*W,m+=(i=t[12])*_,w+=i*T,A+=i*L,b+=i*N,v+=i*O,E+=i*F,k+=i*H,S+=i*z,I+=i*G,B+=i*q,C+=i*j,K+=i*V,U+=i*Z,P+=i*Y,D+=i*J,M+=i*W,w+=(i=t[13])*_,A+=i*T,b+=i*L,v+=i*N,E+=i*O,k+=i*F,S+=i*H,I+=i*z,B+=i*G,C+=i*q,K+=i*j,U+=i*V,P+=i*Z,D+=i*Y,M+=i*J,x+=i*W,A+=(i=t[14])*_,b+=i*T,v+=i*L,E+=i*N,k+=i*O,S+=i*F,I+=i*H,B+=i*z,C+=i*G,K+=i*q,U+=i*j,P+=i*V,D+=i*Z,M+=i*Y,x+=i*J,Q+=i*W,b+=(i=t[15])*_,a+=38*(E+=i*L),o+=38*(k+=i*N),c+=38*(S+=i*O),h+=38*(I+=i*F),u+=38*(B+=i*H),l+=38*(C+=i*z),f+=38*(K+=i*G),y+=38*(U+=i*q),d+=38*(P+=i*j),p+=38*(D+=i*V),g+=38*(M+=i*Z),m+=38*(x+=i*Y),w+=38*(Q+=i*J),A+=38*(R+=i*W),s=(i=(s+=38*(v+=i*T))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=h,e[5]=u,e[6]=l,e[7]=f,e[8]=y,e[9]=d,e[10]=p,e[11]=g,e[12]=m,e[13]=w,e[14]=A,e[15]=b}function Rr(e,t){Qr(e,t,t)}function _r(e,t){var r,i=fr();for(r=0;r<16;r++)i[r]=t[r];for(r=253;r>=0;r--)Rr(i,i),2!==r&&4!==r&&Qr(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}function Tr(e,t,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=fr(),c=fr(),h=fr(),u=fr(),l=fr(),f=fr();for(n=0;n<31;n++)s[n]=t[n];for(s[31]=127&t[31]|64,s[0]&=248,Dr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)Cr(o,c,i=s[n>>>3]>>>(7&n)&1),Cr(h,u,i),Mr(l,o,h),xr(o,o,h),Mr(h,c,u),xr(c,c,u),Rr(u,l),Rr(f,o),Qr(o,h,o),Qr(h,c,l),Mr(l,o,h),xr(o,o,h),Rr(c,o),xr(h,u,f),Qr(o,h,mr),Mr(o,o,u),Qr(h,h,o),Qr(o,u,f),Qr(u,c,a),Rr(c,l),Cr(o,c,i),Cr(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var y=a.subarray(32),d=a.subarray(16);return _r(y,y),Qr(d,d,y),Kr(e,d),0}function Lr(e,t){return Tr(e,t,dr)}var Nr=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function Or(e,t,r,i){for(var n,s,a,o,c,h,u,l,f,y,d,p,g,m,w,A,b,v,E,k,S,I,B,C,K,U,P=new Int32Array(16),D=new Int32Array(16),M=e[0],x=e[1],Q=e[2],R=e[3],_=e[4],T=e[5],L=e[6],N=e[7],O=t[0],F=t[1],H=t[2],z=t[3],G=t[4],q=t[5],j=t[6],V=t[7],Z=0;i>=128;){for(E=0;E<16;E++)k=8*E+Z,P[E]=r[k+0]<<24|r[k+1]<<16|r[k+2]<<8|r[k+3],D[E]=r[k+4]<<24|r[k+5]<<16|r[k+6]<<8|r[k+7];for(E=0;E<80;E++)if(n=M,s=x,a=Q,o=R,c=_,h=T,u=L,N,f=O,y=F,d=H,p=z,g=G,m=q,w=j,V,B=65535&(I=V),C=I>>>16,K=65535&(S=N),U=S>>>16,B+=65535&(I=(G>>>14|_<<18)^(G>>>18|_<<14)^(_>>>9|G<<23)),C+=I>>>16,K+=65535&(S=(_>>>14|G<<18)^(_>>>18|G<<14)^(G>>>9|_<<23)),U+=S>>>16,B+=65535&(I=G&q^~G&j),C+=I>>>16,K+=65535&(S=_&T^~_&L),U+=S>>>16,S=Nr[2*E],B+=65535&(I=Nr[2*E+1]),C+=I>>>16,K+=65535&S,U+=S>>>16,S=P[E%16],C+=(I=D[E%16])>>>16,K+=65535&S,U+=S>>>16,K+=(C+=(B+=65535&I)>>>16)>>>16,B=65535&(I=v=65535&B|C<<16),C=I>>>16,K=65535&(S=b=65535&K|(U+=K>>>16)<<16),U=S>>>16,B+=65535&(I=(O>>>28|M<<4)^(M>>>2|O<<30)^(M>>>7|O<<25)),C+=I>>>16,K+=65535&(S=(M>>>28|O<<4)^(O>>>2|M<<30)^(O>>>7|M<<25)),U+=S>>>16,C+=(I=O&F^O&H^F&H)>>>16,K+=65535&(S=M&x^M&Q^x&Q),U+=S>>>16,l=65535&(K+=(C+=(B+=65535&I)>>>16)>>>16)|(U+=K>>>16)<<16,A=65535&B|C<<16,B=65535&(I=p),C=I>>>16,K=65535&(S=o),U=S>>>16,C+=(I=v)>>>16,K+=65535&(S=b),U+=S>>>16,x=n,Q=s,R=a,_=o=65535&(K+=(C+=(B+=65535&I)>>>16)>>>16)|(U+=K>>>16)<<16,T=c,L=h,N=u,M=l,F=f,H=y,z=d,G=p=65535&B|C<<16,q=g,j=m,V=w,O=A,E%16==15)for(k=0;k<16;k++)S=P[k],B=65535&(I=D[k]),C=I>>>16,K=65535&S,U=S>>>16,S=P[(k+9)%16],B+=65535&(I=D[(k+9)%16]),C+=I>>>16,K+=65535&S,U+=S>>>16,b=P[(k+1)%16],B+=65535&(I=((v=D[(k+1)%16])>>>1|b<<31)^(v>>>8|b<<24)^(v>>>7|b<<25)),C+=I>>>16,K+=65535&(S=(b>>>1|v<<31)^(b>>>8|v<<24)^b>>>7),U+=S>>>16,b=P[(k+14)%16],C+=(I=((v=D[(k+14)%16])>>>19|b<<13)^(b>>>29|v<<3)^(v>>>6|b<<26))>>>16,K+=65535&(S=(b>>>19|v<<13)^(v>>>29|b<<3)^b>>>6),U+=S>>>16,U+=(K+=(C+=(B+=65535&I)>>>16)>>>16)>>>16,P[k]=65535&K|U<<16,D[k]=65535&B|C<<16;B=65535&(I=O),C=I>>>16,K=65535&(S=M),U=S>>>16,S=e[0],C+=(I=t[0])>>>16,K+=65535&S,U+=S>>>16,U+=(K+=(C+=(B+=65535&I)>>>16)>>>16)>>>16,e[0]=M=65535&K|U<<16,t[0]=O=65535&B|C<<16,B=65535&(I=F),C=I>>>16,K=65535&(S=x),U=S>>>16,S=e[1],C+=(I=t[1])>>>16,K+=65535&S,U+=S>>>16,U+=(K+=(C+=(B+=65535&I)>>>16)>>>16)>>>16,e[1]=x=65535&K|U<<16,t[1]=F=65535&B|C<<16,B=65535&(I=H),C=I>>>16,K=65535&(S=Q),U=S>>>16,S=e[2],C+=(I=t[2])>>>16,K+=65535&S,U+=S>>>16,U+=(K+=(C+=(B+=65535&I)>>>16)>>>16)>>>16,e[2]=Q=65535&K|U<<16,t[2]=H=65535&B|C<<16,B=65535&(I=z),C=I>>>16,K=65535&(S=R),U=S>>>16,S=e[3],C+=(I=t[3])>>>16,K+=65535&S,U+=S>>>16,U+=(K+=(C+=(B+=65535&I)>>>16)>>>16)>>>16,e[3]=R=65535&K|U<<16,t[3]=z=65535&B|C<<16,B=65535&(I=G),C=I>>>16,K=65535&(S=_),U=S>>>16,S=e[4],C+=(I=t[4])>>>16,K+=65535&S,U+=S>>>16,U+=(K+=(C+=(B+=65535&I)>>>16)>>>16)>>>16,e[4]=_=65535&K|U<<16,t[4]=G=65535&B|C<<16,B=65535&(I=q),C=I>>>16,K=65535&(S=T),U=S>>>16,S=e[5],C+=(I=t[5])>>>16,K+=65535&S,U+=S>>>16,U+=(K+=(C+=(B+=65535&I)>>>16)>>>16)>>>16,e[5]=T=65535&K|U<<16,t[5]=q=65535&B|C<<16,B=65535&(I=j),C=I>>>16,K=65535&(S=L),U=S>>>16,S=e[6],C+=(I=t[6])>>>16,K+=65535&S,U+=S>>>16,U+=(K+=(C+=(B+=65535&I)>>>16)>>>16)>>>16,e[6]=L=65535&K|U<<16,t[6]=j=65535&B|C<<16,B=65535&(I=V),C=I>>>16,K=65535&(S=N),U=S>>>16,S=e[7],C+=(I=t[7])>>>16,K+=65535&S,U+=S>>>16,U+=(K+=(C+=(B+=65535&I)>>>16)>>>16)>>>16,e[7]=N=65535&K|U<<16,t[7]=V=65535&B|C<<16,Z+=128,i-=128}return i}function Fr(e,t,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,Or(n,s,t,r),r%=128,i=0;i<r;i++)a[i]=t[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,kr(a,r-8,o/536870912|0,o<<3),Or(n,s,a,r),i=0;i<8;i++)kr(e,8*i,n[i],s[i]);return 0}function Hr(e,t){var r=fr(),i=fr(),n=fr(),s=fr(),a=fr(),o=fr(),c=fr(),h=fr(),u=fr();xr(r,e[1],e[0]),xr(u,t[1],t[0]),Qr(r,r,u),Mr(i,e[0],e[1]),Mr(u,t[0],t[1]),Qr(i,i,u),Qr(n,e[3],t[3]),Qr(n,n,Ar),Qr(s,e[2],t[2]),Mr(s,s,s),xr(a,i,r),xr(o,s,n),Mr(c,s,n),Mr(h,i,r),Qr(e[0],a,o),Qr(e[1],h,c),Qr(e[2],c,o),Qr(e[3],a,h)}function zr(e,t,r){var i;for(i=0;i<4;i++)Cr(e[i],t[i],r)}function Gr(e,t){var r=fr(),i=fr(),n=fr();_r(n,t[2]),Qr(r,t[0],n),Qr(i,t[1],n),Kr(e,i),e[31]^=Pr(r)<<7}function qr(e,t,r){var i,n;for(Ir(e[0],pr),Ir(e[1],gr),Ir(e[2],gr),Ir(e[3],pr),n=255;n>=0;--n)zr(e,t,i=r[n/8|0]>>(7&n)&1),Hr(t,e),Hr(e,e),zr(e,t,i)}function jr(e,t){var r=[fr(),fr(),fr(),fr()];Ir(r[0],br),Ir(r[1],vr),Ir(r[2],gr),Qr(r[3],br,vr),qr(e,r,t)}function Vr(e,t,r){var i,n=new Uint8Array(64),s=[fr(),fr(),fr(),fr()];for(r||yr(t,32),Fr(n,t,32),n[0]&=248,n[31]&=127,n[31]|=64,jr(s,n),Gr(e,s),i=0;i<32;i++)t[i+32]=e[i];return 0}var Zr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function Yr(e,t){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)t[n]+=r-16*t[i]*Zr[n-(i-32)],r=Math.floor((t[n]+128)/256),t[n]-=256*r;t[n]+=r,t[i]=0}for(r=0,n=0;n<32;n++)t[n]+=r-(t[31]>>4)*Zr[n],r=t[n]>>8,t[n]&=255;for(n=0;n<32;n++)t[n]-=r*Zr[n];for(i=0;i<32;i++)t[i+1]+=t[i]>>8,e[i]=255&t[i]}function Jr(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;Yr(e,r)}function Wr(e,t){var r=fr(),i=fr(),n=fr(),s=fr(),a=fr(),o=fr(),c=fr();return Ir(e[2],gr),Dr(e[1],t),Rr(n,e[1]),Qr(s,n,wr),xr(n,n,e[2]),Mr(s,e[2],s),Rr(a,s),Rr(o,a),Qr(c,o,a),Qr(r,c,n),Qr(r,r,s),function(e,t){var r,i=fr();for(r=0;r<16;r++)i[r]=t[r];for(r=250;r>=0;r--)Rr(i,i),1!==r&&Qr(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}(r,r),Qr(r,r,n),Qr(r,r,s),Qr(r,r,s),Qr(e[0],r,s),Rr(i,e[0]),Qr(i,i,s),Ur(i,n)&&Qr(e[0],e[0],Er),Rr(i,e[0]),Qr(i,i,s),Ur(i,n)?-1:(Pr(e[0])===t[31]>>7&&xr(e[0],pr,e[0]),Qr(e[3],e[0],e[1]),0)}var $r=64;function Xr(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}lr.scalarMult=function(e,t){if(Xr(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return Tr(r,e,t),r},lr.box={},lr.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){yr(t,32),Lr(e,t)}(e,t),{publicKey:e,secretKey:t}},lr.box.keyPair.fromSecretKey=function(e){if(Xr(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return Lr(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},lr.sign=function(e,t){if(Xr(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array($r+e.length);return function(e,t,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[fr(),fr(),fr(),fr()];Fr(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)e[64+n]=t[n];for(n=0;n<32;n++)e[32+n]=a[32+n];for(Fr(c,e.subarray(32),r+32),Jr(c),jr(u,c),Gr(e,u),n=32;n<64;n++)e[n]=i[n];for(Fr(o,e,r+64),Jr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];Yr(e.subarray(32),h)}(r,e,e.length,t),r},lr.sign.detached=function(e,t){for(var r=lr.sign(e,t),i=new Uint8Array($r),n=0;n<i.length;n++)i[n]=r[n];return i},lr.sign.detached.verify=function(e,t,r){if(Xr(e,t,r),t.length!==$r)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array($r+e.length),s=new Uint8Array($r+e.length);for(i=0;i<$r;i++)n[i]=t[i];for(i=0;i<e.length;i++)n[i+$r]=e[i];return function(e,t,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[fr(),fr(),fr(),fr()],c=[fr(),fr(),fr(),fr()];if(r<64)return-1;if(Wr(c,i))return-1;for(n=0;n<r;n++)e[n]=t[n];for(n=0;n<32;n++)e[n+32]=i[n];if(Fr(a,e,r),Jr(a),qr(o,c,a),jr(c,t.subarray(32)),Hr(o,c),Gr(s,o),r-=64,Sr(t,0,s,0)){for(n=0;n<r;n++)e[n]=0;return-1}for(n=0;n<r;n++)e[n]=t[n+64];return r}(s,n,n.length,r)>=0},lr.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return Vr(e,t),{publicKey:e,secretKey:t}},lr.sign.keyPair.fromSecretKey=function(e){if(Xr(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},lr.sign.keyPair.fromSeed=function(e){if(Xr(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=e[i];return Vr(t,r,!0),{publicKey:t,secretKey:r}},lr.setPRNG=function(e){yr=e},function(){if(ur&&ur.getRandomValues){lr.setPRNG((function(e,t){var r,i=new Uint8Array(t);for(r=0;r<t;r+=65536)ur.getRandomValues(i.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=i[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(i)}))}}();class ei{constructor(e){if(e instanceof ei)this.oid=e.oid;else if(V.isArray(e)||V.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return V.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return V.uint8ArrayToHex(this.oid)}getName(){const e=this.toHex();if(z.curve[e])return z.write(z.curve,e);throw Error("Unknown curve object identifier.")}}function ti(e){let t,r=0;const i=e[0];return i<192?([r]=e,t=1):i<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===i&&(r=V.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function ri(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):V.concatUint8Array([new Uint8Array([255]),V.writeNumber(e,4)])}function ii(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function ni(e){return new Uint8Array([192|e])}function si(e,t){return V.concatUint8Array([ni(e),ri(t)])}function ai(e){return[z.packet.literalData,z.packet.compressedData,z.packet.symmetricallyEncryptedData,z.packet.symEncryptedIntegrityProtectedData,z.packet.aeadEncryptedData].includes(e)}async function oi(e,t){const r=O(e);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||0==(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,u=-1;u=0,0!=(64&a)&&(u=1),u?h=63&a:(h=(63&a)>>2,c=3&a);const l=ai(h);let y,d=null;if(l){if("array"===V.isStream(e)){const e=new f;i=F(e),d=e}else{const e=new TransformStream;i=F(e.writable),d=e.readable}n=t({tag:h,packet:d})}else d=[];do{if(u){const e=await r.readByte();if(y=!1,e<192)o=e;else if(e>=192&&e<224)o=(e-192<<8)+await r.readByte()+192;else if(e>223&&e<255){if(o=1<<(31&e),y=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let e=0;for(;;){i&&await i.ready;const{done:t,value:n}=await r.read();if(t){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-e);if(i?await i.write(s):d.push(s),e+=n.length,e>=o){r.unshift(n.subarray(o-e+n.length));break}}}}while(y);const p=await r.peekBytes(l?1/0:2);return i?(await i.ready,await i.close()):(d=V.concatUint8Array(d),await t({tag:h,packet:d})),!p||!p.length}catch(e){if(i)return await i.abort(e),!0;throw e}finally{i&&await n,r.releaseLock()}}class ci extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ci),this.name="UnsupportedError"}}class hi extends ci{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ci),this.name="UnknownPacketError"}}class ui{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}const li=V.getWebCrypto(),fi=V.getNodeCrypto(),yi={[z.curve.p256]:"P-256",[z.curve.p384]:"P-384",[z.curve.p521]:"P-521"},di=fi?fi.getCurves():[],pi=fi?{[z.curve.secp256k1]:di.includes("secp256k1")?"secp256k1":void 0,[z.curve.p256]:di.includes("prime256v1")?"prime256v1":void 0,[z.curve.p384]:di.includes("secp384r1")?"secp384r1":void 0,[z.curve.p521]:di.includes("secp521r1")?"secp521r1":void 0,[z.curve.ed25519Legacy]:di.includes("ED25519")?"ED25519":void 0,[z.curve.curve25519Legacy]:di.includes("X25519")?"X25519":void 0,[z.curve.brainpoolP256r1]:di.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[z.curve.brainpoolP384r1]:di.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[z.curve.brainpoolP512r1]:di.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},gi={p256:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:z.publicKey.ecdsa,hash:z.hash.sha256,cipher:z.symmetric.aes128,node:pi.p256,web:yi.p256,payloadSize:32,sharedSize:256},p384:{oid:[6,5,43,129,4,0,34],keyType:z.publicKey.ecdsa,hash:z.hash.sha384,cipher:z.symmetric.aes192,node:pi.p384,web:yi.p384,payloadSize:48,sharedSize:384},p521:{oid:[6,5,43,129,4,0,35],keyType:z.publicKey.ecdsa,hash:z.hash.sha512,cipher:z.symmetric.aes256,node:pi.p521,web:yi.p521,payloadSize:66,sharedSize:528},secp256k1:{oid:[6,5,43,129,4,0,10],keyType:z.publicKey.ecdsa,hash:z.hash.sha256,cipher:z.symmetric.aes128,node:pi.secp256k1,payloadSize:32},ed25519Legacy:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:z.publicKey.eddsaLegacy,hash:z.hash.sha512,node:!1,payloadSize:32},curve25519Legacy:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:z.publicKey.ecdh,hash:z.hash.sha256,cipher:z.symmetric.aes128,node:!1,payloadSize:32},brainpoolP256r1:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:z.publicKey.ecdsa,hash:z.hash.sha256,cipher:z.symmetric.aes128,node:pi.brainpoolP256r1,payloadSize:32},brainpoolP384r1:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:z.publicKey.ecdsa,hash:z.hash.sha384,cipher:z.symmetric.aes192,node:pi.brainpoolP384r1,payloadSize:48},brainpoolP512r1:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:z.publicKey.ecdsa,hash:z.hash.sha512,cipher:z.symmetric.aes256,node:pi.brainpoolP512r1,payloadSize:64}};class mi{constructor(e,t){try{(V.isArray(e)||V.isUint8Array(e))&&(e=new ei(e)),e instanceof ei&&(e=e.getName()),this.name=z.write(z.curve,e)}catch(e){throw new ci("Unknown curve")}t=t||gi[this.name],this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node&&gi[this.name],this.web=t.web&&gi[this.name],this.payloadSize=t.payloadSize,this.web&&V.getWebCrypto()?this.type="web":this.node&&V.getNodeCrypto()?this.type="node":this.name===z.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===z.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e){const t=await li.generateKey({name:"ECDSA",namedCurve:yi[e]},!0,["sign","verify"]),r=await li.exportKey("jwk",t.privateKey),i=await li.exportKey("jwk",t.publicKey);return{publicKey:bi(i),privateKey:X(r.d)}}(this.name)}catch(e){return V.printDebugError("Browser did not support generating ec key "+e.message),Ai(this.name)}case"node":return async function(e){const t=fi.createECDH(pi[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const e=jt(32);e[0]=127&e[0]|64,e[31]&=248;const t=e.slice().reverse(),{publicKey:r}=lr.box.keyPair.fromSecretKey(t);return{publicKey:V.concatUint8Array([new Uint8Array([64]),r]),privateKey:e}}case"ed25519Legacy":{const e=jt(32),t=lr.sign.keyPair.fromSeed(e);return{publicKey:V.concatUint8Array([new Uint8Array([64]),t.publicKey]),privateKey:e}}default:return Ai(this.name)}}}async function wi(e,t,r,i){const n={p256:!0,p384:!0,p521:!0,secp256k1:!0,curve25519Legacy:e===z.publicKey.ecdh,brainpoolP256r1:!0,brainpoolP384r1:!0,brainpoolP512r1:!0},s=t.getName();if(!n[s])return!1;if(s===z.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:e}=lr.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const t=new Uint8Array([64,...e]);return!!V.equalsUint8Array(t,r)}const a=(await V.getNobleCurve(z.publicKey.ecdsa,z.write(z.curve,t.toHex()))).getPublicKey(i,!1);return!!V.equalsUint8Array(a,r)}async function Ai(e){const t=await V.getNobleCurve(z.publicKey.ecdsa,e),r=t.utils.randomPrivateKey();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function bi(e){const t=X(e.x),r=X(e.y),i=new Uint8Array(t.length+r.length+1);return i[0]=4,i.set(t,1),i.set(r,t.length+1),i}function vi(e,t,r){const i=e,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:t,x:ee(n,!0),y:ee(s,!0),ext:!0}}function Ei(e,t,r,i){const n=vi(e,t,r);return n.d=ee(i,!0),n}const ki=V.getWebCrypto(),Si=V.getNodeCrypto();async function Ii(e,t,r,i,n,s){const a=new mi(e);if(r&&!V.isStream(r)){const e={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(e,t,r,i){const n=e.payloadSize,s=Ei(e.payloadSize,yi[e.name],i.publicKey,i.privateKey),a=await ki.importKey("jwk",s,{name:"ECDSA",namedCurve:yi[e.name],hash:{name:z.read(z.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await ki.sign({name:"ECDSA",namedCurve:yi[e.name],hash:{name:z.read(z.webHash,t)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,t,r,e)}catch(e){if("p521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;V.printDebugError("Browser did not support signing: "+e.message)}break;case"node":{const i=await async function(e,t,r,i){const n=Si.createSign(z.read(z.hash,t));n.write(r),n.end();const s=Pi.encode({version:1,parameters:e.oid,privateKey:Array.from(i.privateKey),publicKey:{unused:0,data:Array.from(i.publicKey)}},"pem",{label:"EC PRIVATE KEY"});return Ui.decode(n.sign(s),"der")}(a,t,r,e);return{r:i.r.toArrayLike(Uint8Array),s:i.s.toArrayLike(Uint8Array)}}}}const o=(await V.getNobleCurve(z.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:o.r.toUint8Array("be",a.payloadSize),s:o.s.toUint8Array("be",a.payloadSize)}}async function Bi(e,t,r,i,n,s){const a=new mi(e),o=async()=>0===s[0]&&Ci(a,r,s.subarray(1),n);if(i&&!V.isStream(i))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:i},n,s){const a=vi(e.payloadSize,yi[e.name],s),o=await ki.importKey("jwk",a,{name:"ECDSA",namedCurve:yi[e.name],hash:{name:z.read(z.webHash,e.hash)}},!1,["verify"]),c=V.concatUint8Array([r,i]).buffer;return ki.verify({name:"ECDSA",namedCurve:yi[e.name],hash:{name:z.read(z.webHash,t)}},o,c,n)}(a,t,r,i,n);return e||o()}catch(e){if("p521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;V.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:i},n,s){const{default:a}=await Promise.resolve().then((function(){return Ko})),o=Si.createVerify(z.read(z.hash,t));o.write(n),o.end();const c=Mi.encode({algorithm:{algorithm:[1,2,840,10045,2,1],parameters:e.oid},subjectPublicKey:{unused:0,data:Array.from(s)}},"pem",{label:"PUBLIC KEY"}),h=Ui.encode({r:new a(r),s:new a(i)},"der");try{return o.verify(c,h)}catch(e){return!1}}(a,t,r,i,n);return e||o()}}return await Ci(a,r,s,n)||o()}async function Ci(e,t,r,i){return(await V.getNobleCurve(z.publicKey.ecdsa,e.name)).verify(V.concatUint8Array([t.r,t.s]),r,i,{lowS:!1})}const Ki=Si?V.nodeRequire("asn1.js"):void 0,Ui=Si?Ki.define("ECDSASignature",(function(){this.seq().obj(this.key("r").int(),this.key("s").int())})):void 0,Pi=Si?Ki.define("ECPrivateKey",(function(){this.seq().obj(this.key("version").int(),this.key("privateKey").octstr(),this.key("parameters").explicit(0).optional().any(),this.key("publicKey").explicit(1).optional().bitstr())})):void 0,Di=Si?Ki.define("AlgorithmIdentifier",(function(){this.seq().obj(this.key("algorithm").objid(),this.key("parameters").optional().any())})):void 0,Mi=Si?Ki.define("SubjectPublicKeyInfo",(function(){this.seq().obj(this.key("algorithm").use(Di),this.key("subjectPublicKey").bitstr())})):void 0;var xi=/*#__PURE__*/Object.freeze({__proto__:null,sign:Ii,validateParams:async function(e,t,r){const i=new mi(e);if(i.keyType!==z.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=jt(8),n=z.hash.sha256,s=await We.digest(n,i);try{const a=await Ii(e,n,i,t,r,s);return await Bi(e,n,a,i,t,s)}catch(e){return!1}}default:return wi(z.publicKey.ecdsa,e,t,r)}},verify:Bi});var Qi=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){if(We.getHashByteLength(t)<We.getHashByteLength(z.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=V.concatUint8Array([n,i.subarray(1)]),o=lr.sign.detached(s,a);if(G.checkEdDSAFaultySignatures&&!lr.sign.detached.verify(s,o,i.subarray(1)))throw Error("Transient signing failure");return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(e,t,r){if(e.getName()!==z.curve.ed25519Legacy)return!1;const{publicKey:i}=lr.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return V.equalsUint8Array(t,n)},verify:async function(e,t,{r,s:i},n,s,a){if(We.getHashByteLength(t)<We.getHashByteLength(z.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=V.concatUint8Array([r,i]);return lr.sign.detached.verify(a,o,s.subarray(1))}});function Ri(e){switch(e){case z.publicKey.ed25519:return 32;case z.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function _i(e){switch(e){case z.publicKey.ed25519:return z.hash.sha256;case z.publicKey.ed448:return z.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var Ti=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){switch(e){case z.publicKey.ed25519:{const t=jt(Ri(e)),{publicKey:r}=lr.sign.keyPair.fromSeed(t);return{A:r,seed:t}}case z.publicKey.ed448:{const e=await V.getNobleCurve(z.publicKey.ed448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),seed:t}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:Ri,getPreferredHashAlgo:_i,sign:async function(e,t,r,i,n,s){if(We.getHashByteLength(t)<We.getHashByteLength(_i(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case z.publicKey.ed25519:{const e=V.concatUint8Array([n,i]),t=lr.sign.detached(s,e);if(G.checkEdDSAFaultySignatures&&!lr.sign.detached.verify(s,t,i))throw Error("Transient signing failure");return{RS:t}}case z.publicKey.ed448:return{RS:(await V.getNobleCurve(z.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(e,t,r){switch(e){case z.publicKey.ed25519:{const{publicKey:e}=lr.sign.keyPair.fromSeed(r);return V.equalsUint8Array(t,e)}case z.publicKey.ed448:{const e=(await V.getNobleCurve(z.publicKey.ed448)).getPublicKey(r);return V.equalsUint8Array(t,e)}default:return!1}},verify:async function(e,t,{RS:r},i,n,s){if(We.getHashByteLength(t)<We.getHashByteLength(_i(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case z.publicKey.ed25519:return lr.sign.detached.verify(s,r,n);case z.publicKey.ed448:return(await V.getNobleCurve(z.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});function Li(e,t){const r=new Re["aes"+8*e.length](e),i=new Uint32Array([2795939494,2795939494]),n=Oi(t);let s=i;const a=n,o=n.length/2,c=new Uint32Array([0,0]);let h=new Uint32Array(4);for(let e=0;e<=5;++e)for(let t=0;t<o;++t)c[1]=o*e+(1+t),h[0]=s[0],h[1]=s[1],h[2]=a[2*t],h[3]=a[2*t+1],h=Oi(r.encrypt(Fi(h))),s=h.subarray(0,2),s[0]^=c[0],s[1]^=c[1],a[2*t]=h[2],a[2*t+1]=h[3];return Fi(s,a)}function Ni(e,t){const r=new Re["aes"+8*e.length](e),i=new Uint32Array([2795939494,2795939494]),n=Oi(t);let s=n.subarray(0,2);const a=n.subarray(2),o=n.length/2-1,c=new Uint32Array([0,0]);let h=new Uint32Array(4);for(let e=5;e>=0;--e)for(let t=o-1;t>=0;--t)c[1]=o*e+(t+1),h[0]=s[0]^c[0],h[1]=s[1]^c[1],h[2]=a[2*t],h[3]=a[2*t+1],h=Oi(r.decrypt(Fi(h))),s=h.subarray(0,2),a[2*t]=h[2],a[2*t+1]=h[3];if(s[0]===i[0]&&s[1]===i[1])return Fi(a);throw Error("Key Data Integrity failed")}function Oi(e){const{length:t}=e,r=function(e){if(V.isString(e)){const{length:t}=e,r=new ArrayBuffer(t),i=new Uint8Array(r);for(let r=0;r<t;++r)i[r]=e.charCodeAt(r);return r}return new Uint8Array(e).buffer}(e),i=new DataView(r),n=new Uint32Array(t/4);for(let e=0;e<t/4;++e)n[e]=i.getUint32(4*e);return n}function Fi(){let e=0;for(let t=0;t<arguments.length;++t)e+=4*arguments[t].length;const t=new ArrayBuffer(e),r=new DataView(t);let i=0;for(let e=0;e<arguments.length;++e){for(let t=0;t<arguments[e].length;++t)r.setUint32(i+4*t,arguments[e][t]);i+=4*arguments[e].length}return new Uint8Array(t)}var Hi=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:Ni,wrap:Li});function zi(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}function Gi(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const i=e.subarray(t-r),n=new Uint8Array(r).fill(r);if(V.equalsUint8Array(i,n))return e.subarray(0,t-r)}}throw Error("Invalid padding")}var qi=/*#__PURE__*/Object.freeze({__proto__:null,decode:Gi,encode:zi});const ji=V.getWebCrypto(),Vi=V.getNodeCrypto();function Zi(e,t,r,i){return V.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),V.stringToUint8Array("Anonymous Sender "),r.replacementFingerprint||i.subarray(0,20)])}async function Yi(e,t,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await We.digest(e,V.concatUint8Array([new Uint8Array([0,0,0,1]),t,i]))).subarray(0,r)}async function Ji(e,t){switch(e.type){case"curve25519Legacy":{const r=jt(32),{secretKey:i,sharedKey:n}=await Wi(e,t,null,r);let{publicKey:s}=lr.box.keyPair.fromSecretKey(i);return s=V.concatUint8Array([new Uint8Array([64]),s]),{publicKey:s,sharedKey:n}}case"web":if(e.web&&V.getWebCrypto())try{return await async function(e,t){const r=vi(e.payloadSize,e.web.web,t);let i=ji.generateKey({name:"ECDH",namedCurve:e.web.web},!0,["deriveKey","deriveBits"]),n=ji.importKey("jwk",r,{name:"ECDH",namedCurve:e.web.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=ji.deriveBits({name:"ECDH",namedCurve:e.web.web,public:n},i.privateKey,e.web.sharedSize),a=ji.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(bi(a));return{publicKey:c,sharedKey:o}}(e,t)}catch(r){return V.printDebugError(r),Xi(e,t)}break;case"node":return async function(e,t){const r=Vi.createECDH(e.node.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(t)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(e,t);default:return Xi(e,t)}}async function Wi(e,t,r,i){if(i.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(i,e.payloadSize-i.length),i=t}switch(e.type){case"curve25519Legacy":{const e=i.slice().reverse();return{secretKey:e,sharedKey:lr.scalarMult(e,t.subarray(1))}}case"web":if(e.web&&V.getWebCrypto())try{return await async function(e,t,r,i){const n=Ei(e.payloadSize,e.web.web,r,i);let s=ji.importKey("jwk",n,{name:"ECDH",namedCurve:e.web.web},!0,["deriveKey","deriveBits"]);const a=vi(e.payloadSize,e.web.web,t);let o=ji.importKey("jwk",a,{name:"ECDH",namedCurve:e.web.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=ji.deriveBits({name:"ECDH",namedCurve:e.web.web,public:o},s,e.web.sharedSize),h=ji.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:X(h.d),sharedKey:u}}(e,t,r,i)}catch(r){return V.printDebugError(r),$i(e,t,i)}break;case"node":return async function(e,t,r){const i=Vi.createECDH(e.node.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(t));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(e,t,i);default:return $i(e,t,i)}}async function $i(e,t,r){return{secretKey:r,sharedKey:(await V.getNobleCurve(z.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function Xi(e,t){const r=await V.getNobleCurve(z.publicKey.ecdh,e.name),{publicKey:i,privateKey:n}=await e.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,t).subarray(1)}}var en=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a){const o=new mi(e),{sharedKey:c}=await Wi(o,r,n,s),h=Zi(z.publicKey.ecdh,e,t,a),{keySize:u}=Xe(t.cipher);let l;for(let e=0;e<3;e++)try{return Gi(Ni(await Yi(t.hash,c,u,h,1===e,2===e),i))}catch(e){l=e}throw l},encrypt:async function(e,t,r,i,n){const s=zi(r),a=new mi(e),{publicKey:o,sharedKey:c}=await Ji(a,i),h=Zi(z.publicKey.ecdh,e,t,n),{keySize:u}=Xe(t.cipher);return{publicKey:o,wrappedKey:Li(await Yi(t.hash,c,u,h),s)}},validateParams:async function(e,t,r){return wi(z.publicKey.ecdh,e,t,r)}});const tn=V.getWebCrypto(),rn=V.getNodeCrypto();async function nn(e,t,r,i,n){const s=z.read(z.webHash,e);if(!s)throw Error("Hash algo not supported with HKDF");const a=tn||rn.webcrypto.subtle,o=await a.importKey("raw",t,"HKDF",!1,["deriveBits"]),c=await a.deriveBits({name:"HKDF",hash:s,salt:r,info:i},o,8*n);return new Uint8Array(c)}const sn={x25519:V.encodeUTF8("OpenPGP X25519"),x448:V.encodeUTF8("OpenPGP X448")};var an=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){switch(e){case z.publicKey.x25519:{const e=lr.scalarMult(n,t),s=V.concatUint8Array([t,i,e]),{keySize:a}=Xe(z.symmetric.aes128);return Ni(await nn(z.hash.sha256,s,new Uint8Array,sn.x25519,a),r)}case z.publicKey.x448:{const e=(await V.getNobleCurve(z.publicKey.x448)).getSharedSecret(n,t),s=V.concatUint8Array([t,i,e]),{keySize:a}=Xe(z.symmetric.aes256);return Ni(await nn(z.hash.sha512,s,new Uint8Array,sn.x448,a),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(e,t,r){switch(e){case z.publicKey.x25519:{const e=jt(32),i=lr.scalarMult(e,r),{publicKey:n}=lr.box.keyPair.fromSecretKey(e),s=V.concatUint8Array([n,r,i]),{keySize:a}=Xe(z.symmetric.aes128);return{ephemeralPublicKey:n,wrappedKey:Li(await nn(z.hash.sha256,s,new Uint8Array,sn.x25519,a),t)}}case z.publicKey.x448:{const e=await V.getNobleCurve(z.publicKey.x448),i=e.utils.randomPrivateKey(),n=e.getSharedSecret(i,r),s=e.getPublicKey(i),a=V.concatUint8Array([s,r,n]),{keySize:o}=Xe(z.symmetric.aes256);return{ephemeralPublicKey:s,wrappedKey:Li(await nn(z.hash.sha512,a,new Uint8Array,sn.x448,o),t)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(e){switch(e){case z.publicKey.x25519:{const e=jt(32),{publicKey:t}=lr.box.keyPair.fromSecretKey(e);return{A:t,k:e}}case z.publicKey.x448:{const e=await V.getNobleCurve(z.publicKey.x448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),k:t}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(e){switch(e){case z.publicKey.x25519:return 32;case z.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(e,t,r){switch(e){case z.publicKey.x25519:{const{publicKey:e}=lr.box.keyPair.fromSecretKey(r);return V.equalsUint8Array(t,e)}case z.publicKey.x448:{const e=(await V.getNobleCurve(z.publicKey.x448)).getPublicKey(r);return V.equalsUint8Array(t,e)}default:return!1}}}),on=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:mi,ecdh:en,ecdhX:an,ecdsa:xi,eddsa:Ti,eddsaLegacy:Qi,generate:async function(e){const t=new mi(e),{oid:r,hash:i,cipher:n}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:V.leftPad(s.privateKey,t.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(e){return gi[z.write(z.curve,e.toHex())].hash}});var cn=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){const a=await V.getBigInteger(),o=new a(1);let c,h,u,l;i=new a(i),n=new a(n),r=new a(r),s=new a(s),r=r.mod(i),s=s.mod(n);const f=new a(t.subarray(0,n.byteLength())).mod(n);for(;;){if(c=await Vt(o,n),h=r.modExp(c,i).imod(n),h.isZero())continue;const e=s.mul(h).imod(n);if(l=f.add(e).imod(n),u=c.modInv(n).imul(l).imod(n),!u.isZero())break}return{r:h.toUint8Array("be",n.byteLength()),s:u.toUint8Array("be",n.byteLength())}},validateParams:async function(e,t,r,i,n){const s=await V.getBigInteger();e=new s(e),t=new s(t),r=new s(r),i=new s(i);const a=new s(1);if(r.lte(a)||r.gte(e))return!1;if(!e.dec().mod(t).isZero())return!1;if(!r.modExp(t,e).isOne())return!1;const o=new s(t.bitLength()),c=new s(150);if(o.lt(c)||!await Jt(t,null,32))return!1;n=new s(n);const h=new s(2),u=await Vt(h.leftShift(o.dec()),h.leftShift(o)),l=t.mul(u).add(n);return!!i.equal(r.modExp(l,e))},verify:async function(e,t,r,i,n,s,a,o){const c=await V.getBigInteger(),h=new c(0);if(t=new c(t),r=new c(r),s=new c(s),a=new c(a),n=new c(n),o=new c(o),t.lte(h)||t.gte(a)||r.lte(h)||r.gte(a))return V.printDebug("invalid DSA Signature"),!1;const u=new c(i.subarray(0,a.byteLength())).imod(a),l=r.modInv(a);if(l.isZero())return V.printDebug("invalid DSA Signature"),!1;n=n.mod(s),o=o.mod(s);const f=u.mul(l).imod(a),y=t.mul(l).imod(a),d=n.modExp(f,s),p=o.modExp(y,s);return d.mul(p).imod(s).imod(a).equal(t)}});const hn=new Set([z.hash.sha1,z.hash.sha256,z.hash.sha512]),un=V.getWebCrypto(),ln=V.getNodeCrypto();var fn={rsa:cr,elgamal:hr,elliptic:on,dsa:cn,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){if(!hn.has(e))throw Error("Unsupported hash algorithm.");const t=z.read(z.webHash,e),r=un||ln.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(e,t,r){if(!hn.has(e))throw Error("Unsupported hash algorithm.");const i=z.read(z.webHash,e),n=un||ln.webcrypto.subtle,s=await n.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(e,t,r,i){if(!hn.has(e))throw Error("Unsupported hash algorithm.");const n=z.read(z.webHash,e),s=un||ln.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class yn{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!V.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return V.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}var dn=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(e,t){let r=0;switch(e){case z.publicKey.rsaEncryptSign:case z.publicKey.rsaEncrypt:case z.publicKey.rsaSign:{const e=V.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case z.publicKey.dsa:case z.publicKey.ecdsa:{const e=V.readMPI(t.subarray(r));r+=e.length+2;const i=V.readMPI(t.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:e,s:i}}}case z.publicKey.eddsaLegacy:{let e=V.readMPI(t.subarray(r));r+=e.length+2,e=V.leftPad(e,32);let i=V.readMPI(t.subarray(r));return r+=i.length+2,i=V.leftPad(i,32),{read:r,signatureParams:{r:e,s:i}}}case z.publicKey.ed25519:case z.publicKey.ed448:{const i=2*fn.elliptic.eddsa.getPayloadSize(e),n=V.readExactSubarray(t,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case z.publicKey.hmac:{const e=new yn;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}default:throw new ci("Unknown signature algorithm.")}},sign:async function(e,t,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(e){case z.publicKey.rsaEncryptSign:case z.publicKey.rsaEncrypt:case z.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await fn.rsa.sign(t,n,e,a,o,c,h,u,s)}}case z.publicKey.dsa:{const{g:e,p:n,q:a}=r,{x:o}=i;return fn.dsa.sign(t,s,e,n,a,o)}case z.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case z.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=i;return fn.elliptic.ecdsa.sign(e,t,n,a,o,s)}case z.publicKey.eddsaLegacy:{const{oid:e,Q:a}=r,{seed:o}=i;return fn.elliptic.eddsaLegacy.sign(e,t,n,a,o,s)}case z.publicKey.ed25519:case z.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return fn.elliptic.eddsa.sign(e,t,n,a,o,s)}case z.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=i,n=await fn.hmac.sign(e.getValue(),t,s);return{mac:new yn(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(e,t,r,i,n,s,a){switch(e){case z.publicKey.rsaEncryptSign:case z.publicKey.rsaEncrypt:case z.publicKey.rsaSign:{const{n:e,e:n}=i,o=V.leftPad(r.s,e.length);return fn.rsa.verify(t,s,o,e,n,a)}case z.publicKey.dsa:{const{g:e,p:n,q:s,y:o}=i,{r:c,s:h}=r;return fn.dsa.verify(t,c,h,a,e,n,s,o)}case z.publicKey.ecdsa:{const{oid:e,Q:n}=i,o=new fn.elliptic.CurveWithOID(e).payloadSize,c=V.leftPad(r.r,o),h=V.leftPad(r.s,o);return fn.elliptic.ecdsa.verify(e,t,{r:c,s:h},s,n,a)}case z.publicKey.eddsaLegacy:{const{oid:e,Q:n}=i;return fn.elliptic.eddsaLegacy.verify(e,t,r,s,n,a)}case z.publicKey.ed25519:case z.publicKey.ed448:{const{A:n}=i;return fn.elliptic.eddsa.verify(e,t,r,s,n,a)}case z.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=i,{keyMaterial:t}=n;return fn.hmac.verify(e.getValue(),t,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class pn{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return V.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class gn{constructor(e){if(e){const{version:t,hash:r,cipher:i,replacementFingerprint:n}=e;this.version=t||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new ci("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const i=t-r+1;this.replacementFingerprint=e.slice(r,r+i),r+=i}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return V.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const mn=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=z.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return z.read(e,this.data)}getValue(){return this.data}},wn=mn(z.aead),An=mn(z.symmetric),bn=mn(z.hash);class vn{static fromObject({wrappedKey:e,algorithm:t}){const r=new vn;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=V.readExactSubarray(e,t,t+r),t+=r}write(){return V.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function En(e,t){const r=jt(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await We.sha256(r)}}}function kn(e){const{keySize:t}=Xe(e);return jt(t)}function Sn(e){const t=z.read(z.aead,e);return Gt[t]}function In(e){try{e.getName()}catch(e){throw new ci("Unknown curve OID")}}function Bn(e,t){switch(e){case z.publicKey.ecdsa:case z.publicKey.ecdh:case z.publicKey.eddsaLegacy:return new fn.elliptic.CurveWithOID(t).payloadSize;case z.publicKey.ed25519:case z.publicKey.ed448:return fn.elliptic.eddsa.getPayloadSize(e);case z.publicKey.x25519:case z.publicKey.x448:return fn.elliptic.ecdhX.getPayloadSize(e);default:throw Error("Unknown elliptic algo")}}var Cn=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(e,t,r,i){switch(e){case z.publicKey.rsaEncrypt:case z.publicKey.rsaEncryptSign:case z.publicKey.rsaSign:return fn.rsa.generate(t,65537).then((({n:e,e:t,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:e,e:t}})));case z.publicKey.ecdsa:return fn.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new ei(e),Q:t}})));case z.publicKey.eddsaLegacy:return fn.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new ei(e),Q:t}})));case z.publicKey.ecdh:return fn.elliptic.generate(r).then((({oid:e,Q:t,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new ei(e),Q:t,kdfParams:new gn({hash:i,cipher:n})}})));case z.publicKey.ed25519:case z.publicKey.ed448:return fn.elliptic.eddsa.generate(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case z.publicKey.x25519:case z.publicKey.x448:return fn.elliptic.ecdhX.generate(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case z.publicKey.hmac:return En(await fn.hmac.generate(i),new bn(i));case z.publicKey.aead:return En(kn(i),new An(i));case z.publicKey.dsa:case z.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:kn,getAEADMode:Sn,getCipher:Xe,getCurvePayloadSize:Bn,getPreferredCurveHashAlgo:function(e,t){switch(e){case z.publicKey.ecdsa:case z.publicKey.eddsaLegacy:return fn.elliptic.getPreferredHashAlgo(t);case z.publicKey.ed25519:case z.publicKey.ed448:return fn.elliptic.eddsa.getPreferredHashAlgo(e);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(e){const{blockSize:t}=Xe(e),r=await jt(t),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return V.concat([r,i])},parseEncSessionKeyParams:function(e,t){let r=0;switch(e){case z.publicKey.rsaEncrypt:case z.publicKey.rsaEncryptSign:return{c:V.readMPI(t.subarray(r))};case z.publicKey.elgamal:{const e=V.readMPI(t.subarray(r));r+=e.length+2;return{c1:e,c2:V.readMPI(t.subarray(r))}}case z.publicKey.ecdh:{const e=V.readMPI(t.subarray(r));r+=e.length+2;const i=new pn;return i.read(t.subarray(r)),{V:e,C:i}}case z.publicKey.x25519:case z.publicKey.x448:{const i=Bn(e),n=V.readExactSubarray(t,r,r+i);r+=n.length;const s=new vn;return s.read(t.subarray(r)),{ephemeralPublicKey:n,C:s}}case z.publicKey.aead:{const e=new wn;r+=e.read(t.subarray(r));const{ivLength:i}=Sn(e.getValue()),n=t.subarray(r,r+i);r+=i;const s=new yn;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:n,c:s}}default:throw new ci("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(e,t,r){let i=0;switch(e){case z.publicKey.rsaEncrypt:case z.publicKey.rsaEncryptSign:case z.publicKey.rsaSign:{const e=V.readMPI(t.subarray(i));i+=e.length+2;const r=V.readMPI(t.subarray(i));i+=r.length+2;const n=V.readMPI(t.subarray(i));i+=n.length+2;const s=V.readMPI(t.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:e,p:r,q:n,u:s}}}case z.publicKey.dsa:case z.publicKey.elgamal:{const e=V.readMPI(t.subarray(i));return i+=e.length+2,{read:i,privateParams:{x:e}}}case z.publicKey.ecdsa:case z.publicKey.ecdh:{const n=Bn(e,r.oid);let s=V.readMPI(t.subarray(i));return i+=s.length+2,s=V.leftPad(s,n),{read:i,privateParams:{d:s}}}case z.publicKey.eddsaLegacy:{const n=Bn(e,r.oid);let s=V.readMPI(t.subarray(i));return i+=s.length+2,s=V.leftPad(s,n),{read:i,privateParams:{seed:s}}}case z.publicKey.ed25519:case z.publicKey.ed448:{const r=Bn(e),n=V.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case z.publicKey.x25519:case z.publicKey.x448:{const r=Bn(e),n=V.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case z.publicKey.hmac:{const{cipher:e}=r,n=We.getHashByteLength(e.getValue()),s=t.subarray(i,i+32);i+=32;const a=t.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case z.publicKey.aead:{const{cipher:e}=r,n=t.subarray(i,i+32);i+=32;const{keySize:s}=Xe(e.getValue()),a=t.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new ci("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(e,t){let r=0;switch(e){case z.publicKey.rsaEncrypt:case z.publicKey.rsaEncryptSign:case z.publicKey.rsaSign:{const e=V.readMPI(t.subarray(r));r+=e.length+2;const i=V.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:e,e:i}}}case z.publicKey.dsa:{const e=V.readMPI(t.subarray(r));r+=e.length+2;const i=V.readMPI(t.subarray(r));r+=i.length+2;const n=V.readMPI(t.subarray(r));r+=n.length+2;const s=V.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:i,g:n,y:s}}}case z.publicKey.elgamal:{const e=V.readMPI(t.subarray(r));r+=e.length+2;const i=V.readMPI(t.subarray(r));r+=i.length+2;const n=V.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:e,g:i,y:n}}}case z.publicKey.ecdsa:{const e=new ei;r+=e.read(t),In(e);const i=V.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:e,Q:i}}}case z.publicKey.eddsaLegacy:{const e=new ei;r+=e.read(t),In(e);let i=V.readMPI(t.subarray(r));return r+=i.length+2,i=V.leftPad(i,33),{read:r,publicParams:{oid:e,Q:i}}}case z.publicKey.ecdh:{const e=new ei;r+=e.read(t),In(e);const i=V.readMPI(t.subarray(r));r+=i.length+2;const n=new gn;return r+=n.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:i,kdfParams:n}}}case z.publicKey.ed25519:case z.publicKey.ed448:case z.publicKey.x25519:case z.publicKey.x448:{const i=V.readExactSubarray(t,r,r+Bn(e));return r+=i.length,{read:r,publicParams:{A:i}}}case z.publicKey.hmac:case z.publicKey.aead:{const e=new An;r+=e.read(t);const i=We.getHashByteLength(z.hash.sha256),n=t.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:e,digest:n}}}default:throw new ci("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(e,t,r,i,n,s){switch(e){case z.publicKey.rsaEncryptSign:case z.publicKey.rsaEncrypt:{const{c:e}=i,{n,e:a}=t,{d:o,p:c,q:h,u}=r;return fn.rsa.decrypt(e,n,a,o,c,h,u,s)}case z.publicKey.elgamal:{const{c1:e,c2:n}=i,a=t.p,o=r.x;return fn.elgamal.decrypt(e,n,a,o,s)}case z.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:h}=i;return fn.elliptic.ecdh.decrypt(e,a,c,h.data,s,o,n)}case z.publicKey.x25519:case z.publicKey.x448:{const{A:n}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!V.isAES(o.algorithm))throw Error("AES session key expected");return fn.elliptic.ecdhX.decrypt(e,a,o.wrappedKey,n,s)}case z.publicKey.aead:{const{cipher:e}=t,n=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=Sn(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(e,t,r,i,n,s){switch(e){case z.publicKey.rsaEncrypt:case z.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await fn.rsa.encrypt(n,e,t)}}case z.publicKey.elgamal:{const{p:e,g:t,y:i}=r;return fn.elgamal.encrypt(n,e,t,i)}case z.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await fn.elliptic.ecdh.encrypt(e,i,n,t,s);return{V:a,C:new pn(o)}}case z.publicKey.x25519:case z.publicKey.x448:{if(!V.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await fn.elliptic.ecdhX.encrypt(e,n,i);return{ephemeralPublicKey:s,C:vn.fromObject({algorithm:t,wrappedKey:a})}}case z.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=i,a=G.preferredAEADAlgorithm,o=Sn(G.preferredAEADAlgorithm),{ivLength:c}=o,h=jt(c),u=await o(t,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new wn(a),iv:h,c:new yn(l)}}default:return[]}},serializeParams:function(e,t){const r=new Set([z.publicKey.ed25519,z.publicKey.x25519,z.publicKey.ed448,z.publicKey.x448,z.publicKey.aead,z.publicKey.hmac]),i=Object.keys(t).map((i=>{const n=t[i];return V.isUint8Array(n)?r.has(e)?n:V.uint8ArrayToMPI(n):n.write()}));return V.concatUint8Array(i)},validateParams:async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case z.publicKey.rsaEncrypt:case z.publicKey.rsaEncryptSign:case z.publicKey.rsaSign:{const{n:e,e:i}=t,{d:n,p:s,q:a,u:o}=r;return fn.rsa.validateParams(e,i,n,s,a,o)}case z.publicKey.dsa:{const{p:e,q:i,g:n,y:s}=t,{x:a}=r;return fn.dsa.validateParams(e,i,n,s,a)}case z.publicKey.elgamal:{const{p:e,g:i,y:n}=t,{x:s}=r;return fn.elgamal.validateParams(e,i,n,s)}case z.publicKey.ecdsa:case z.publicKey.ecdh:{const i=fn.elliptic[z.read(z.publicKey,e)],{oid:n,Q:s}=t,{d:a}=r;return i.validateParams(n,s,a)}case z.publicKey.eddsaLegacy:{const{Q:e,oid:i}=t,{seed:n}=r;return fn.elliptic.eddsaLegacy.validateParams(i,e,n)}case z.publicKey.ed25519:case z.publicKey.ed448:{const{A:i}=t,{seed:n}=r;return fn.elliptic.eddsa.validateParams(e,i,n)}case z.publicKey.x25519:case z.publicKey.x448:{const{A:i}=t,{k:n}=r;return fn.elliptic.ecdhX.validateParams(e,i,n)}case z.publicKey.hmac:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r;return We.getHashByteLength(e.getValue())===s.length&&V.equalsUint8Array(i,await We.sha256(n))}case z.publicKey.aead:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=Xe(e.getValue());return a===s.length&&V.equalsUint8Array(i,await We.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const Kn={cipher:Re,hash:We,mode:Gt,publicKey:fn,signature:dn,random:Zt,pkcs1:rr,pkcs5:qi,aesKW:Hi};Object.assign(Kn,Cn);class Un extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,Un),this.name="Argon2OutOfMemoryError"}}let Pn,Dn;class Mn{constructor(e=G){const{passes:t,parallelism:r,memoryExponent:i}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=i}generateSalt(){this.salt=Kn.random.getRandomBytes(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([z.write(z.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return V.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{Pn=Pn||(await Promise.resolve().then((function(){return Ll}))).default,Dn=Dn||Pn();const i=await Dn,n=i({version:19,type:2,password:V.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>1048576&&(Dn=Pn(),Dn.catch((()=>{}))),n}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new Un("Could not allocate required memory for Argon2"):e}}}class xn{constructor(e,t=G){this.algorithm=z.hash.sha256,this.type=z.read(z.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=Kn.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==V.uint8ArrayToString(e.subarray(t,t+3)))throw new ci("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new ci("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new ci("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...V.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([z.write(z.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return V.concatUint8Array(e)}async produceKey(e,t){e=V.encodeUTF8(e);const r=[];let i=0,n=0;for(;i<t;){let t;switch(this.type){case"simple":t=V.concatUint8Array([new Uint8Array(n),e]);break;case"salted":t=V.concatUint8Array([new Uint8Array(n),this.salt,e]);break;case"iterated":{const r=V.concatUint8Array([this.salt,e]);let i=r.length;const s=Math.max(this.getCount(),i);t=new Uint8Array(n+s),t.set(r,n);for(let e=n+i;e<s;e+=i,i*=2)t.copyWithin(e,n,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await Kn.hash.digest(this.algorithm,t);r.push(s),i+=s.length,n++}return V.concatUint8Array(r).subarray(0,t)}}const Qn=new Set([z.s2k.argon2,z.s2k.iterated]);function Rn(e,t=G){switch(e){case z.s2k.argon2:return new Mn(t);case z.s2k.iterated:case z.s2k.gnu:case z.s2k.salted:case z.s2k.simple:return new xn(e,t);default:throw new ci("Unsupported S2K type")}}function _n(e){const{s2kType:t}=e;if(!Qn.has(t))throw Error("The provided `config.s2kType` value is not allowed");return Rn(t,e)}var Tn=Uint8Array,Ln=Uint16Array,Nn=Uint32Array,On=new Tn([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Fn=new Tn([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),Hn=new Tn([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),zn=function(e,t){for(var r=new Ln(31),i=0;i<31;++i)r[i]=t+=1<<e[i-1];var n=new Nn(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},Gn=zn(On,2),qn=Gn[0],jn=Gn[1];qn[28]=258,jn[258]=28;for(var Vn=zn(Fn,0),Zn=Vn[0],Yn=Vn[1],Jn=new Ln(32768),Wn=0;Wn<32768;++Wn){var $n=(43690&Wn)>>>1|(21845&Wn)<<1;$n=(61680&($n=(52428&$n)>>>2|(13107&$n)<<2))>>>4|(3855&$n)<<4,Jn[Wn]=((65280&$n)>>>8|(255&$n)<<8)>>>1}var Xn=function(e,t,r){for(var i=e.length,n=0,s=new Ln(t);n<i;++n)e[n]&&++s[e[n]-1];var a,o=new Ln(t);for(n=0;n<t;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new Ln(1<<t);var c=15-t;for(n=0;n<i;++n)if(e[n])for(var h=n<<4|e[n],u=t-e[n],l=o[e[n]-1]++<<u,f=l|(1<<u)-1;l<=f;++l)a[Jn[l]>>>c]=h}else for(a=new Ln(i),n=0;n<i;++n)e[n]&&(a[n]=Jn[o[e[n]-1]++]>>>15-e[n]);return a},es=new Tn(288);for(Wn=0;Wn<144;++Wn)es[Wn]=8;for(Wn=144;Wn<256;++Wn)es[Wn]=9;for(Wn=256;Wn<280;++Wn)es[Wn]=7;for(Wn=280;Wn<288;++Wn)es[Wn]=8;var ts=new Tn(32);for(Wn=0;Wn<32;++Wn)ts[Wn]=5;var rs=/*#__PURE__*/Xn(es,9,0),is=/*#__PURE__*/Xn(es,9,1),ns=/*#__PURE__*/Xn(ts,5,0),ss=/*#__PURE__*/Xn(ts,5,1),as=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},os=function(e,t,r){var i=t/8|0;return(e[i]|e[i+1]<<8)>>(7&t)&r},cs=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},hs=function(e){return(e+7)/8|0},us=function(e,t,r){(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length);var i=new(2==e.BYTES_PER_ELEMENT?Ln:4==e.BYTES_PER_ELEMENT?Nn:Tn)(r-t);return i.set(e.subarray(t,r)),i},ls=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],fs=function(e,t,r){var i=Error(t||ls[e]);if(i.code=e,Error.captureStackTrace&&Error.captureStackTrace(i,fs),!r)throw i;return i},ys=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8},ds=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8,e[i+2]|=r>>>16},ps=function(e,t){for(var r=[],i=0;i<e.length;++i)e[i]&&r.push({s:i,f:e[i]});var n=r.length,s=r.slice();if(!n)return[Es,0];if(1==n){var a=new Tn(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var f=s[0].s;for(i=1;i<n;++i)s[i].s>f&&(f=s[i].s);var y=new Ln(f+1),d=gs(r[u-1],y,0);if(d>t){i=0;var p=0,g=d-t,m=1<<g;for(s.sort((function(e,t){return y[t.s]-y[e.s]||e.f-t.f}));i<n;++i){var w=s[i].s;if(!(y[w]>t))break;p+=m-(1<<d-y[w]),y[w]=t}for(p>>>=g;p>0;){var A=s[i].s;y[A]<t?p-=1<<t-y[A]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;y[b]==t&&(--y[b],++p)}d=t}return[new Tn(y),d]},gs=function(e,t,r){return-1==e.s?Math.max(gs(e.l,t,r+1),gs(e.r,t,r+1)):t[e.s]=r},ms=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new Ln(++t),i=0,n=e[0],s=1,a=function(e){r[i++]=e},o=1;o<=t;++o)if(e[o]==n&&o!=t)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=e[o]}return[r.subarray(0,i),t]},ws=function(e,t){for(var r=0,i=0;i<t.length;++i)r+=e[i]*t[i];return r},As=function(e,t,r){var i=r.length,n=hs(t+2);e[n]=255&i,e[n+1]=i>>>8,e[n+2]=255^e[n],e[n+3]=255^e[n+1];for(var s=0;s<i;++s)e[n+s+4]=r[s];return 8*(n+4+i)},bs=function(e,t,r,i,n,s,a,o,c,h,u){ys(t,u++,r),++n[256];for(var l=ps(n,15),f=l[0],y=l[1],d=ps(s,15),p=d[0],g=d[1],m=ms(f),w=m[0],A=m[1],b=ms(p),v=b[0],E=b[1],k=new Ln(19),S=0;S<w.length;++S)k[31&w[S]]++;for(S=0;S<v.length;++S)k[31&v[S]]++;for(var I=ps(k,7),B=I[0],C=I[1],K=19;K>4&&!B[Hn[K-1]];--K);var U,P,D,M,x=h+5<<3,Q=ws(n,es)+ws(s,ts)+a,R=ws(n,f)+ws(s,p)+a+14+3*K+ws(k,B)+(2*k[16]+3*k[17]+7*k[18]);if(x<=Q&&x<=R)return As(t,u,e.subarray(c,c+h));if(ys(t,u,1+(R<Q)),u+=2,R<Q){U=Xn(f,y,0),P=f,D=Xn(p,g,0),M=p;var _=Xn(B,C,0);ys(t,u,A-257),ys(t,u+5,E-1),ys(t,u+10,K-4),u+=14;for(S=0;S<K;++S)ys(t,u+3*S,B[Hn[S]]);u+=3*K;for(var T=[w,v],L=0;L<2;++L){var N=T[L];for(S=0;S<N.length;++S){var O=31&N[S];ys(t,u,_[O]),u+=B[O],O>15&&(ys(t,u,N[S]>>>5&127),u+=N[S]>>>12)}}}else U=rs,P=es,D=ns,M=ts;for(S=0;S<o;++S)if(i[S]>255){O=i[S]>>>18&31;ds(t,u,U[O+257]),u+=P[O+257],O>7&&(ys(t,u,i[S]>>>23&31),u+=On[O]);var F=31&i[S];ds(t,u,D[F]),u+=M[F],F>3&&(ds(t,u,i[S]>>>5&8191),u+=Fn[F])}else ds(t,u,U[i[S]]),u+=P[i[S]];return ds(t,u,U[256]),u+P[256]},vs=/*#__PURE__*/new Nn([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),Es=/*#__PURE__*/new Tn(0),ks=function(){var e=1,t=0;return{p:function(r){for(var i=e,n=t,s=0|r.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=i+=r[a];i=(65535&i)+15*(i>>16),n=(65535&n)+15*(n>>16)}e=i,t=n},d:function(){return(255&(e%=65521))<<24|e>>>8<<16|(255&(t%=65521))<<8|t>>>8}}},Ss=function(e,t,r,i,n){return function(e,t,r,i,n,s){var a=e.length,o=new Tn(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!t||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=As(c,h+1,e.subarray(u,l))}else{for(var f=vs[t-1],y=f>>>13,d=8191&f,p=(1<<r)-1,g=new Ln(32768),m=new Ln(p+1),w=Math.ceil(r/3),A=2*w,b=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<A)&p},v=new Nn(25e3),E=new Ln(288),k=new Ln(32),S=0,I=0,B=(u=0,0),C=0,K=0;u<a;++u){var U=b(u),P=32767&u,D=m[U];if(g[P]=D,m[U]=P,C<=u){var M=a-u;if((S>7e3||B>24576)&&M>423){h=bs(e,c,0,v,E,k,I,B,K,u-K,h),B=S=I=0,K=u;for(var x=0;x<286;++x)E[x]=0;for(x=0;x<30;++x)k[x]=0}var Q=2,R=0,_=d,T=P-D&32767;if(M>2&&U==b(u-T))for(var L=Math.min(y,M)-1,N=Math.min(32767,u),O=Math.min(258,M);T<=N&&--_&&P!=D;){if(e[u+Q]==e[u+Q-T]){for(var F=0;F<O&&e[u+F]==e[u+F-T];++F);if(F>Q){if(Q=F,R=T,F>L)break;var H=Math.min(T,F-2),z=0;for(x=0;x<H;++x){var G=u-T+x+32768&32767,q=G-g[G]+32768&32767;q>z&&(z=q,D=G)}}}T+=(P=D)-(D=g[P])+32768&32767}if(R){v[B++]=268435456|jn[Q]<<18|Yn[R];var j=31&jn[Q],V=31&Yn[R];I+=On[j]+Fn[V],++E[257+j],++k[V],C=u+Q,++S}else v[B++]=e[u],++E[e[u]]}}h=bs(e,c,s,v,E,k,I,B,K,u-K,h),!s&&7&h&&(h=As(c,h+1,Es))}return us(o,0,i+hs(h)+n)}(e,null==t.level?6:t.level,null==t.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):12+t.mem,r,i,!n)},Is=/*#__PURE__*/function(){function e(e,t){t||"function"!=typeof e||(t=e,e={}),this.ondata=t,this.o=e||{}}return e.prototype.p=function(e,t){this.ondata(Ss(e,this.o,0,0,!t),t)},e.prototype.push=function(e,t){this.ondata||fs(5),this.d&&fs(4),this.d=t,this.p(e,t||!1)},e}(),Bs=/*#__PURE__*/function(){function e(e){this.s={},this.p=new Tn(0),this.ondata=e}return e.prototype.e=function(e){this.ondata||fs(5),this.d&&fs(4);var t=this.p.length,r=new Tn(t+e.length);r.set(this.p),r.set(e,t),this.p=r},e.prototype.c=function(e){this.d=this.s.i=e||!1;var t=this.s.b,r=function(e,t,r){var i=e.length;if(!i||r&&r.f&&!r.l)return t||new Tn(0);var n=!t||r,s=!r||r.i;r||(r={}),t||(t=new Tn(3*i));var a=function(e){var r=t.length;if(e>r){var i=new Tn(Math.max(2*r,e));i.set(t),t=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,f=r.m,y=r.n,d=8*i;do{if(!u){o=os(e,c,1);var p=os(e,c+1,3);if(c+=3,!p){var g=e[(C=hs(c)+4)-4]|e[C-3]<<8,m=C+g;if(m>i){s&&fs(0);break}n&&a(h+g),t.set(e.subarray(C,m),h),r.b=h+=g,r.p=c=8*m,r.f=o;continue}if(1==p)u=is,l=ss,f=9,y=5;else if(2==p){var w=os(e,c,31)+257,A=os(e,c+10,15)+4,b=w+os(e,c+5,31)+1;c+=14;for(var v=new Tn(b),E=new Tn(19),k=0;k<A;++k)E[Hn[k]]=os(e,c+3*k,7);c+=3*A;var S=as(E),I=(1<<S)-1,B=Xn(E,S,1);for(k=0;k<b;){var C,K=B[os(e,c,I)];if(c+=15&K,(C=K>>>4)<16)v[k++]=C;else{var U=0,P=0;for(16==C?(P=3+os(e,c,3),c+=2,U=v[k-1]):17==C?(P=3+os(e,c,7),c+=3):18==C&&(P=11+os(e,c,127),c+=7);P--;)v[k++]=U}}var D=v.subarray(0,w),M=v.subarray(w);f=as(D),y=as(M),u=Xn(D,f,1),l=Xn(M,y,1)}else fs(1);if(c>d){s&&fs(0);break}}n&&a(h+131072);for(var x=(1<<f)-1,Q=(1<<y)-1,R=c;;R=c){var _=(U=u[cs(e,c)&x])>>>4;if((c+=15&U)>d){s&&fs(0);break}if(U||fs(2),_<256)t[h++]=_;else{if(256==_){R=c,u=null;break}var T=_-254;if(_>264){var L=On[k=_-257];T=os(e,c,(1<<L)-1)+qn[k],c+=L}var N=l[cs(e,c)&Q],O=N>>>4;if(N||fs(3),c+=15&N,M=Zn[O],O>3&&(L=Fn[O],M+=cs(e,c)&(1<<L)-1,c+=L),c>d){s&&fs(0);break}n&&a(h+131072);for(var F=h+T;h<F;h+=4)t[h]=t[h-M],t[h+1]=t[h+1-M],t[h+2]=t[h+2-M],t[h+3]=t[h+3-M];h=F}}r.l=u,r.p=R,r.b=h,r.f=o,u&&(o=1,r.m=f,r.d=l,r.n=y)}while(!o);return h==t.length?t:us(t,0,h)}(this.p,this.o,this.s);this.ondata(us(r,t,this.s.b),this.d),this.o=us(r,this.s.b-32768),this.s.b=this.o.length,this.p=us(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),Cs=/*#__PURE__*/function(){function e(e,t){this.c=ks(),this.v=1,Is.call(this,e,t)}return e.prototype.push=function(e,t){Is.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){this.c.p(e);var r=Ss(e,this.o,this.v&&2,t&&4,!t);this.v&&(function(e,t){var r=t.level,i=0==r?0:r<6?1:9==r?3:2;e[0]=120,e[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),t&&function(e,t,r){for(;r;++t)e[t]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,t)},e}(),Ks=/*#__PURE__*/function(){function e(e){this.v=1,Bs.call(this,e)}return e.prototype.push=function(e,t){if(Bs.prototype.e.call(this,e),this.v){if(this.p.length<2&&!t)return;this.p=this.p.subarray(2),this.v=0}t&&(this.p.length<4&&fs(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),Bs.prototype.c.call(this,t)},e}(),Us="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{Us.decode(Es,{stream:!0}),1}catch(e){}var Ps=void 0!==e?e:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function Ds(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var Ms=[0,1,3,7,15,31,63,127,255],xs=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};xs.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},xs.prototype.read=function(e){for(var t=0;e>0;){this._ensureByte();var r=8-this.bitOffset;if(e>=r)t<<=r,t|=Ms[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,e-=r;else{t<<=e;var i=r-e;t|=(this.curByte&Ms[e]<<i)>>i,this.bitOffset+=e,e=0}}return t},xs.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},xs.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)};var Qs=xs,Rs=function(){};Rs.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},Rs.prototype.read=function(e,t,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;e[t++]=n,i++}return i},Rs.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},Rs.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},Rs.prototype.write=function(e,t,r){var i;for(i=0;i<r;i++)this.writeByte(e[t++]);return r},Rs.prototype.flush=function(){};var _s,Ts=Rs,Ls=(_s=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var e=4294967295;this.getCRC=function(){return~e>>>0},this.updateCRC=function(t){e=e<<8^_s[255&(e>>>24^t)]},this.updateCRCRun=function(t,r){for(;r-- >0;)e=e<<8^_s[255&(e>>>24^t)]}}),Ns=Qs,Os=Ts,Fs=Ls,Hs=function(e,t){var r,i=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=i,i},zs={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},Gs={};Gs[zs.LAST_BLOCK]="Bad file checksum",Gs[zs.NOT_BZIP_DATA]="Not bzip data",Gs[zs.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",Gs[zs.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",Gs[zs.DATA_ERROR]="Data error",Gs[zs.OUT_OF_MEMORY]="Out of memory",Gs[zs.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var qs=function(e,t){var r=Gs[e]||"unknown error";t&&(r+=": "+t);var i=new TypeError(r);throw i.errorCode=e,i},js=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};js.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new Fs,!0):(this.writeCount=-1,!1)},js.prototype._start_bunzip=function(e,t){var r=new Uint8Array(4);4===e.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||qs(zs.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&qs(zs.NOT_BZIP_DATA,"level out of range"),this.reader=new Ns(e),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=t,this.streamCRC=0},js.prototype._get_next_block=function(){var e,t,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&qs(zs.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&qs(zs.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&qs(zs.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(e=0;e<16;e++)if(a&1<<15-e){var h=16*e;for(r=i.read(16),t=0;t<16;t++)r&1<<15-t&&(o[c++]=h+t)}var u=i.read(3);(u<2||u>6)&&qs(zs.DATA_ERROR);var l=i.read(15);0===l&&qs(zs.DATA_ERROR);var f=new Uint8Array(256);for(e=0;e<u;e++)f[e]=e;var y=new Uint8Array(l);for(e=0;e<l;e++){for(t=0;i.read(1);t++)t>=u&&qs(zs.DATA_ERROR);y[e]=Hs(f,t)}var d,p=c+2,g=[];for(t=0;t<u;t++){var m,w,A=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),e=0;e<p;e++){for(;(a<1||a>20)&&qs(zs.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;A[e]=a}for(m=w=A[0],e=1;e<p;e++)A[e]>w?w=A[e]:A[e]<m&&(m=A[e]);d={},g.push(d),d.permute=new Uint16Array(258),d.limit=new Uint32Array(22),d.base=new Uint32Array(21),d.minLen=m,d.maxLen=w;var v=0;for(e=m;e<=w;e++)for(b[e]=d.limit[e]=0,a=0;a<p;a++)A[a]===e&&(d.permute[v++]=a);for(e=0;e<p;e++)b[A[e]]++;for(v=a=0,e=m;e<w;e++)v+=b[e],d.limit[e]=v-1,v<<=1,a+=b[e],d.base[e+1]=v-a;d.limit[w+1]=Number.MAX_VALUE,d.limit[w]=v+b[w]-1,d.base[m]=0}var E=new Uint32Array(256);for(e=0;e<256;e++)f[e]=e;var k,S=0,I=0,B=0,C=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,B>=l&&qs(zs.DATA_ERROR),d=g[y[B++]]),e=d.minLen,t=i.read(e);e>d.maxLen&&qs(zs.DATA_ERROR),!(t<=d.limit[e]);e++)t=t<<1|i.read(1);((t-=d.base[e])<0||t>=258)&&qs(zs.DATA_ERROR);var K=d.permute[t];if(0!==K&&1!==K){if(S)for(S=0,I+a>this.dbufSize&&qs(zs.DATA_ERROR),E[k=o[f[0]]]+=a;a--;)C[I++]=k;if(K>c)break;I>=this.dbufSize&&qs(zs.DATA_ERROR),E[k=o[k=Hs(f,e=K-1)]]++,C[I++]=k}else S||(S=1,a=0),a+=0===K?S:2*S,S<<=1}for((s<0||s>=I)&&qs(zs.DATA_ERROR),t=0,e=0;e<256;e++)r=t+E[e],E[e]=t,t=r;for(e=0;e<I;e++)C[E[k=255&C[e]]]|=e<<8,E[k]++;var U=0,P=0,D=0;return I&&(P=255&(U=C[s]),U>>=8,D=-1),this.writePos=U,this.writeCurrent=P,this.writeCount=I,this.writeRun=D,!0},js.prototype._read_bunzip=function(e,t){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&qs(zs.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var Vs=function(e){if("readByte"in e)return e;var t=new Os;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},Zs=function(e){var t=new Os,r=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),r=!1;else{if("writeByte"in e)return e;t.buffer=e,r=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(r&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};var Ys=function(e,t,r){for(var i=Vs(e),n=Zs(t),s=new js(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&qs(zs.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class Js{static get tag(){return z.packet.literalData}constructor(e=new Date){this.format=z.literal.utf8,this.date=V.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=z.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||V.isStream(this.text))&&(this.text=V.decodeUTF8(V.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=V.canonicalizeEOL(V.encodeUTF8(this.text))),e?Q(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await M(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=V.decodeUTF8(await e.readBytes(r)),this.date=V.readDate(await e.readBytes(4));let i=e.remainder();y(i)&&(i=await T(i)),this.setBytes(i,t)}))}writeHeader(){const e=V.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),i=V.writeDate(this.date);return V.concatUint8Array([r,t,e,i])}write(){const e=this.writeHeader(),t=this.getBytes();return V.concat([e,t])}}class Ws{constructor(){this.bytes=""}read(e){return this.bytes=V.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return V.stringToUint8Array(this.bytes)}toHex(){return V.uint8ArrayToHex(V.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new Ws;return t.read(V.hexToUint8Array(e)),t}static wildcard(){const e=new Ws;return e.read(new Uint8Array(8)),e}}const $s=Symbol("verified"),Xs=new Set([z.signatureSubpacket.issuerKeyID,z.signatureSubpacket.issuerFingerprint,z.signatureSubpacket.embeddedSignature]);class ea{static get tag(){return z.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Ws,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[$s]=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ci(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[t++],this.publicKeyAlgorithm=e[t++],this.hashAlgorithm=e[t++],t+=this.readSubPackets(e.subarray(t,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,t),t+=this.readSubPackets(e.subarray(t,e.length),!1),this.signedHashValue=e.subarray(t,t+2),t+=2,6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r}const r=e.subarray(t,e.length),{read:i,signatureParams:n}=Kn.signature.parseSignatureParams(this.publicKeyAlgorithm,r);if(i<r.length)throw Error("Error reading MPIs");this.params=n}writeParams(){return this.params instanceof Promise?N((async()=>Kn.serializeParams(this.publicKeyAlgorithm,await this.params))):Kn.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),V.concat(e)}async sign(e,t,r=new Date,i=!1){this.version=e.version,this.created=V.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const n=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(n.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=V.concat(n),6===this.version){const e=ra(this.hashAlgorithm);if(null===this.salt)this.salt=Kn.random.getRandomBytes(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}const s=this.toHash(this.signatureType,t,i),a=await this.hash(this.signatureType,t,s,i);this.signedHashValue=_(x(a),0,2);const o=async()=>Kn.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,s,await T(a));V.isStream(a)?this.params=o():(this.params=await o(),this[$s]=!0)}writeHashedSubPackets(){const e=z.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(ta(e.signatureCreationTime,!0,V.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(ta(e.signatureExpirationTime,!0,V.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(ta(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(ta(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(ta(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(ta(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(ta(e.keyExpirationTime,!0,V.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=V.stringToUint8Array(V.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(ta(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=V.concat([r,this.revocationKeyFingerprint]),t.push(ta(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(ta(e.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=V.encodeUTF8(i);r.push(V.writeNumber(o.length,2)),r.push(V.writeNumber(n.length,2)),r.push(o),r.push(n),r=V.concat(r),t.push(ta(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=V.stringToUint8Array(V.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(ta(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=V.stringToUint8Array(V.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(ta(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=V.stringToUint8Array(V.uint8ArrayToString(this.keyServerPreferences)),t.push(ta(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(ta(e.preferredKeyServer,!1,V.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(ta(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(ta(e.policyURI,!1,V.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=V.stringToUint8Array(V.uint8ArrayToString(this.keyFlags)),t.push(ta(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(ta(e.signersUserID,!1,V.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=V.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(ta(e.reasonForRevocation,!0,r))),null!==this.features&&(r=V.stringToUint8Array(V.uint8ArrayToString(this.features)),t.push(ta(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(V.stringToUint8Array(this.signatureTargetHash)),r=V.concat(r),t.push(ta(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(ta(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=V.concat(r),t.push(ta(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=V.stringToUint8Array(V.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(ta(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(ta(e.preferredCipherSuites,!1,r)));const i=V.concat(t),n=V.writeNumber(i.length,6===this.version?4:2);return V.concat([n,i])}writeUnhashedSubPackets(){const e=[];this.unhashedSubpackets.forEach((t=>{e.push(ri(t.length)),e.push(t)}));const t=V.concat(e),r=V.writeNumber(t.length,6===this.version?4:2);return V.concat([r,t])}readSubPacket(e,t=!0){let r=0;const i=!!(128&e[r]),n=127&e[r];if(t||(this.unhashedSubpackets.push(e.subarray(r,e.length)),Xs.has(n)))switch(r++,n){case z.signatureSubpacket.signatureCreationTime:this.created=V.readDate(e.subarray(r,e.length));break;case z.signatureSubpacket.signatureExpirationTime:{const t=V.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case z.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case z.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case z.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case z.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case z.signatureSubpacket.keyExpirationTime:{const t=V.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case z.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case z.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case z.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case z.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const n=V.readNumber(e.subarray(r,r+2));r+=2;const s=V.readNumber(e.subarray(r,r+2));r+=2;const a=V.decodeUTF8(e.subarray(r,r+n)),o=e.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:i}),t&&(this.notations[a]=V.decodeUTF8(o));break}case z.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case z.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case z.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case z.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=V.decodeUTF8(e.subarray(r,e.length));break;case z.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case z.signatureSubpacket.policyURI:this.policyURI=V.decodeUTF8(e.subarray(r,e.length));break;case z.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case z.signatureSubpacket.signersUserID:this.signersUserID=V.decodeUTF8(e.subarray(r,e.length));break;case z.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=V.decodeUTF8(e.subarray(r,e.length));break;case z.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case z.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=Kn.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=V.uint8ArrayToString(e.subarray(r,r+t));break}case z.signatureSubpacket.embeddedSignature:this.embeddedSignature=new ea,this.embeddedSignature.read(e.subarray(r,e.length));break;case z.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case z.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case z.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:{const e=Error("Unknown signature subpacket type "+n);if(i)throw e;V.printDebug(e)}}}readSubPackets(e,t=!0,r){const i=6===this.version?4:2,n=V.readNumber(e.subarray(0,i));let s=i;for(;s<2+n;){const i=ti(e.subarray(s,e.length));s+=i.offset,this.readSubPacket(e.subarray(s,s+i.len),t,r),s+=i.len}return s}toSign(e,t){const r=z.signature;switch(e){case r.binary:return null!==t.text?V.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return V.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,i;if(t.userID)i=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,e=t.userAttribute}const n=e.write();return V.concat([this.toSign(r.key,t),new Uint8Array([i]),V.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return V.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return P(x(this.signatureData),(e=>{r+=e.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==z.signature.binary&&this.signatureType!==z.signature.text||(t?i.push(new Uint8Array(6)):i.push(e.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(V.writeNumber(r,4)),V.concat(i)}))}toHash(e,t,r=!1){const i=this.toSign(e,t);return V.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,i=!1){if(6===this.version&&this.salt.length!==ra(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,i)),Kn.hash.digest(this.hashAlgorithm,r)}async verify(e,t,r,i=new Date,n=!1,s=G){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===z.signature.binary||t===z.signature.text;if(!(this[$s]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(t,r,n),s=await this.hash(t,r,i)),s=await T(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===z.publicKey.hmac?e.privateParams:null;if(this[$s]=await Kn.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,i,s),!this[$s])throw Error("Signature verification failed")}const o=V.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+z.read(z.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[z.signature.binary,z.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+z.read(z.hash,this.hashAlgorithm).toUpperCase());if(this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=V.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function ta(e,t,r){const i=[];return i.push(ri(r.length+1)),i.push(new Uint8Array([(t?128:0)|e])),i.push(r),V.concat(i)}function ra(e){switch(e){case z.hash.sha256:return 16;case z.hash.sha384:return 24;case z.hash.sha512:return 32;case z.hash.sha224:case z.hash.sha3_256:return 16;case z.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class ia{static get tag(){return z.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new ia;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ci(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new Ws,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Ws,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),V.concatUint8Array(e)}calculateTrailer(...e){return N((async()=>ea.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==z.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!V.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!V.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function na(e,t){if(!t[e]){let t;try{t=z.read(z.packet,e)}catch(t){throw new hi("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}ia.prototype.hash=ea.prototype.hash,ia.prototype.toHash=ea.prototype.toHash,ia.prototype.toSign=ea.prototype.toSign;class sa extends Array{static async fromBinary(e,t,r=G){const i=new sa;return await i.read(e,t,r),i}async read(e,t,r=G){r.additionalAllowedPackets.length&&(t={...t,...V.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=D(e,(async(e,i)=>{const n=F(i);try{for(;;){await n.ready;if(await oi(e,(async e=>{try{if(e.tag===z.packet.marker||e.tag===z.packet.trust||e.tag===z.packet.padding)return;const i=na(e.tag,t);i.packets=new sa,i.fromStream=V.isStream(e.packet),await i.read(e.packet,r),await n.write(i)}catch(t){if(t instanceof hi){if(!(e.tag<=39))return;await n.abort(t)}const i=!r.ignoreUnsupportedPackets&&t instanceof ci,s=!(r.ignoreMalformedPackets||t instanceof ci);if(i||s||ai(e.tag))await n.abort(t);else{const t=new ui(e.tag,e.packet);await n.write(t)}V.printDebugError(t)}})))return await n.ready,void await n.close()}}catch(e){await n.abort(e)}}));const i=O(this.stream);for(;;){const{done:e,value:t}=await i.read();if(e?this.stream=null:this.push(t),e||ai(t.constructor.tag))break}i.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ui?this[t].tag:this[t].constructor.tag,i=this[t].write();if(V.isStream(i)&&ai(this[t].constructor.tag)){let t=[],n=0;const s=512;e.push(ni(r)),e.push(P(i,(e=>{if(t.push(e),n+=e.length,n>=s){const e=Math.min(Math.log(n)/Math.LN2|0,30),r=2**e,i=V.concat([ii(e)].concat(t));return t=[i.subarray(1+r)],n=t[0].length,i.subarray(0,1+r)}}),(()=>V.concat([ri(n)].concat(t)))))}else{if(V.isStream(i)){let t=0;e.push(P(x(i),(e=>{t+=e.length}),(()=>si(r,t))))}else e.push(si(r,i.length));e.push(i)}}return V.concat(e)}filterByTag(...e){const t=new sa,r=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(r(this[i].constructor.tag))&&t.push(this[i]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,i=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(i(r[n].constructor.tag))&&t.push(n);return t}}const aa=/*#__PURE__*/V.constructAllowedPackets([Js,ia,ea]);class oa{static get tag(){return z.packet.compressedData}constructor(e=G){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null,this.deflateLevel=e.deflateLevel}async read(e,t=G){await M(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),V.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=G){const t=z.read(z.compression,this.algorithm),r=da[t];if(!r)throw Error(t+" decompression not supported");this.packets=await sa.fromBinary(r(this.compressed),aa,e)}compress(){const e=z.read(z.compression,this.algorithm),t=ya[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write(),this.deflateLevel)}}const ca=V.getNodeZlib();function ha(e){return e}function ua(e,t,r={}){return function(i){return!V.isStream(i)||y(i)?N((()=>T(i).then((t=>new Promise(((i,n)=>{e(t,r,((e,t)=>{if(e)return n(e);i(t)}))})))))):p(m(i).pipe(t(r)))}}function la(e,t){return r=>{if(!V.isStream(r)||y(r))return N((()=>T(r).then((r=>new Promise(((i,n)=>{const s=new e(t);s.ondata=e=>{i(e)};try{s.push(r,!0)}catch(e){n(e)}}))))));const i=r.getReader(),n=new e(t);return new ReadableStream({async start(e){for(n.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await i.read();if(e)return void n.push(new Uint8Array,!0);t.length&&n.push(t)}}})}}function fa(e){return function(t){return N((async()=>e(await T(t))))}}const ya=ca?{zip:/*#__PURE__*/(e,t)=>ua(ca.deflateRaw,ca.createDeflateRaw,{level:t})(e),zlib:/*#__PURE__*/(e,t)=>ua(ca.deflate,ca.createDeflate,{level:t})(e)}:{zip:/*#__PURE__*/(e,t)=>la(Is,{level:t})(e),zlib:/*#__PURE__*/(e,t)=>la(Cs,{level:t})(e)},da=ca?{uncompressed:ha,zip:/*#__PURE__*/ua(ca.inflateRaw,ca.createInflateRaw),zlib:/*#__PURE__*/ua(ca.inflate,ca.createInflate),bzip2:/*#__PURE__*/fa(Ys)}:{uncompressed:ha,zip:/*#__PURE__*/la(Bs),zlib:/*#__PURE__*/la(Ks),bzip2:/*#__PURE__*/fa(Ys)},pa=/*#__PURE__*/V.constructAllowedPackets([Js,oa,ia,ea]);class ga{static get tag(){return z.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new ga;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await M(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new ci(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?V.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):V.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=G){let i=this.packets.write();if(y(i)&&(i=await T(i)),2===this.version)this.cipherAlgorithm=e,this.salt=Kn.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await ma(this,"encrypt",t,i);else{const{blockSize:n}=Kn.getCipher(e),s=await Kn.getPrefixRandom(e),a=new Uint8Array([211,20]),o=V.concat([s,i,a]),c=await Kn.hash.sha1(Q(o)),h=V.concat([o,c]);this.encrypted=await Kn.mode.cfb.encrypt(e,t,h,new Uint8Array(n),r)}return!0}async decrypt(e,t,r=G){let i,n=x(this.encrypted);if(y(n)&&(n=await T(n)),2===this.version)i=await ma(this,"decrypt",t,n);else{const{blockSize:s}=Kn.getCipher(e),a=await Kn.mode.cfb.decrypt(e,t,n,new Uint8Array(s)),o=_(Q(a),-20),c=_(a,0,-20),h=Promise.all([T(await Kn.hash.sha1(Q(c))),T(o)]).then((([e,t])=>{if(!V.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),u=_(c,s+2);i=_(u,0,-2),i=B([i,N((()=>h))]),V.isStream(n)&&r.allowUnauthenticatedStream||(i=await T(i))}return this.packets=await sa.fromBinary(i,pa,r),!0}}async function ma(e,t,r,i){const n=e instanceof ga&&2===e.version,s=!n&&e.constructor.tag===z.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=Kn.getAEADMode(e.aeadAlgorithm),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,h=2**(e.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),f=new Uint8Array(l,0,5+u),y=new Uint8Array(l),d=new DataView(l),p=new Uint8Array(l,5,8);f.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let g,m,w=0,A=Promise.resolve(),b=0,v=0;if(n){const{keySize:t}=Kn.getCipher(e.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await nn(z.hash.sha256,r,e.salt,n,t+i);r=s.subarray(0,t),g=s.subarray(t),g.fill(0,g.length-8),m=new DataView(g.buffer,g.byteOffset,g.byteLength)}else g=e.iv;const E=await a(e.cipherAlgorithm,r);return D(i,(async(r,i)=>{if("array"!==V.isStream(r)){const t=new TransformStream({},{highWaterMark:V.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});C(t.readable,i),i=t.writable}const s=O(r),a=F(i);try{for(;;){let e=await s.readBytes(h+o)||new Uint8Array;const r=e.subarray(e.length-o);let i,l,k;if(e=e.subarray(0,e.length-o),n)k=g;else{k=g.slice();for(let e=0;e<8;e++)k[g.length-8+e]^=p[e]}if(!w||e.length?(s.unshift(r),i=E[t](e,k,f),i.catch((()=>{})),v+=e.length-o+c):(d.setInt32(5+u+4,b),i=E[t](r,k,y),i.catch((()=>{})),v+=c,l=!0),b+=e.length-o,A=A.then((()=>i)).then((async e=>{await a.ready,await a.write(e),v-=e.length})).catch((e=>a.abort(e))),(l||v>a.desiredSize)&&await A,l){await a.close();break}n?m.setInt32(g.length-4,++w):d.setInt32(9,++w)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const wa=/*#__PURE__*/V.constructAllowedPackets([Js,oa,ia,ea]);class Aa{static get tag(){return z.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=z.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await M(e,(async e=>{const t=await e.readByte();if(1!==t)throw new ci(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=Kn.getAEADMode(this.aeadAlgorithm);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return V.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=G){this.packets=await sa.fromBinary(await ma(this,"decrypt",t,x(this.encrypted)),wa,r)}async encrypt(e,t,r=G){this.cipherAlgorithm=e;const{ivLength:i}=Kn.getAEADMode(this.aeadAlgorithm);this.iv=Kn.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await ma(this,"encrypt",t,n)}}class ba{static get tag(){return z.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Ws,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new ba;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?Ws.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ci(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const i=r-1;this.publicKeyFingerprint=e.subarray(t,t+i),t+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Ws.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));this.publicKeyAlgorithm=e[t++],this.encrypted=Kn.parseEncSessionKeyParams(this.publicKeyAlgorithm,e.subarray(t)),3!==this.version||this.publicKeyAlgorithm!==z.publicKey.x25519&&this.publicKeyAlgorithm!==z.publicKey.x448||(this.sessionKeyAlgorithm=z.write(z.symmetric,this.encrypted.C.algorithm))}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),Kn.serializeParams(this.publicKeyAlgorithm,this.encrypted)),V.concatUint8Array(e)}async encrypt(e){const t=z.write(z.publicKey,this.publicKeyAlgorithm),r=va(this.version,t,this.sessionKeyAlgorithm,this.sessionKey),i=t===z.publicKey.aead?e.privateParams:null;this.encrypted=await Kn.publicKeyEncrypt(t,this.sessionKeyAlgorithm,e.publicParams,i,r,e.getFingerprintBytes())}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?va(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,i=await Kn.publicKeyDecrypt(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,e.getFingerprintBytes(),r),{sessionKey:n,sessionKeyAlgorithm:s}=function(e,t,r,i){switch(t){case z.publicKey.rsaEncrypt:case z.publicKey.rsaEncryptSign:case z.publicKey.elgamal:case z.publicKey.ecdh:case z.publicKey.aead:{const t=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=V.writeChecksum(t.subarray(t.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(i){const t=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:V.selectUint8Array(t,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===e?null:V.selectUint8(t,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===e||z.read(z.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case z.publicKey.x25519:case z.publicKey.x448:return{sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);3===this.version&&this.publicKeyAlgorithm!==z.publicKey.x25519&&this.publicKeyAlgorithm!==z.publicKey.x448&&(this.sessionKeyAlgorithm=s),this.sessionKey=n}}function va(e,t,r,i){switch(t){case z.publicKey.rsaEncrypt:case z.publicKey.rsaEncryptSign:case z.publicKey.elgamal:case z.publicKey.ecdh:case z.publicKey.aead:return V.concatUint8Array([new Uint8Array(6===e?[]:[r]),i,V.writeChecksum(i.subarray(i.length%8))]);case z.publicKey.x25519:case z.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class Ea{static get tag(){return z.packet.symEncryptedSessionKey}constructor(e=G){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=z.symmetric.aes256,this.aeadAlgorithm=z.write(z.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ci(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const i=e[t++];if(this.s2k=Rn(i),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=Kn.getAEADMode(this.aeadAlgorithm);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;t=V.concatUint8Array([new Uint8Array([this.version,n,e,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?t=V.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=V.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=V.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=Kn.getCipher(t),n=await this.s2k.produceKey(e,i);if(this.version>=5){const e=Kn.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|Ea.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await nn(z.hash.sha256,n,new Uint8Array,r,i):n,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await Kn.mode.cfb.decrypt(t,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=z.write(z.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length)}else this.sessionKey=n}async encrypt(e,t=G){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=_n(t),this.s2k.generateSalt();const{blockSize:i,keySize:n}=Kn.getCipher(r),s=await this.s2k.produceKey(e,n);if(null===this.sessionKey&&(this.sessionKey=Kn.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const e=Kn.getAEADMode(this.aeadAlgorithm);this.iv=Kn.random.getRandomBytes(e.ivLength);const t=new Uint8Array([192|Ea.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await nn(z.hash.sha256,s,new Uint8Array,t,n):s,a=await e(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=V.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await Kn.mode.cfb.encrypt(r,s,e,new Uint8Array(i),t)}}}class ka{static get tag(){return z.packet.publicKey}constructor(e=new Date,t=G){this.version=t.v6Keys?6:4,this.created=V.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new ka,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e){let t=0;if(this.version=e[t++],4===this.version||5===this.version||6===this.version){this.created=V.readDate(e.subarray(t,t+4)),t+=4,this.algorithm=e[t++],this.version>=5&&(t+=4);const{read:r,publicParams:i}=Kn.parsePublicKeyParams(this.algorithm,e.subarray(t));if(6===this.version&&i.oid&&(i.oid.getName()===z.curve.curve25519Legacy||i.oid.getName()===z.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,t+=r,await this.computeFingerprintAndKeyID(),t}throw new ci(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(V.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=Kn.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&e.push(V.writeNumber(t.length,4)),e.push(t),V.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,i=e>=5?4:2;return V.concatUint8Array([new Uint8Array([r]),V.writeNumber(t.length,i),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Ws,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await Kn.hash.sha256(e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await Kn.hash.sha1(e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return V.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&V.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=z.read(z.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=V.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}ka.prototype.readPublicKey=ka.prototype.read,ka.prototype.writePublicKey=ka.prototype.write;const Sa=/*#__PURE__*/V.constructAllowedPackets([Js,oa,ia,ea]);class Ia{static get tag(){return z.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=G){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=Kn.getCipher(e),n=await T(x(this.encrypted)),s=await Kn.mode.cfb.decrypt(e,t,n.subarray(i+2),n.subarray(2,i+2));this.packets=await sa.fromBinary(s,Sa,r)}async encrypt(e,t,r=G){const i=this.packets.write(),{blockSize:n}=Kn.getCipher(e),s=await Kn.getPrefixRandom(e),a=await Kn.mode.cfb.encrypt(e,t,s,new Uint8Array(n),r),o=await Kn.mode.cfb.encrypt(e,t,i,a.subarray(2),r);this.encrypted=V.concat([a,o])}}class Ba extends ka{static get tag(){return z.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new Ba,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class Ca{static get tag(){return z.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=ti(e.subarray(t,e.length));t+=r.offset,this.attributes.push(V.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(ri(this.attributes[t].length)),e.push(V.stringToUint8Array(this.attributes[t]));return V.concatUint8Array(e)}equals(e){return!!(e&&e instanceof Ca)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class Ka extends ka{static get tag(){return z.packet.secretKey}constructor(e=new Date,t=G){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.privateParams=null}async read(e){let t=await this.readPublicKey(e);const r=t;this.s2kUsage=e[t++],5===this.version&&t++,6===this.version&&this.s2kUsage&&t++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[t++],253===this.s2kUsage&&(this.aead=e[t++]),6===this.version&&t++;const r=e[t++];if(this.s2k=Rn(r),t+=this.s2k.read(e.subarray(t,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(253!==this.s2kUsage||5===this.version?this.iv=e.subarray(t,t+Kn.getCipher(this.symmetric).blockSize):this.iv=e.subarray(t,t+Kn.getAEADMode(this.aead).ivLength),t+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(r),this.isEncrypted=!0}if(5===this.version&&(t+=4),this.keyMaterial=e.subarray(t),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!V.equalsUint8Array(V.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=Kn.parsePrivateKeyParams(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof ci)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return V.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=Kn.serializeParams(this.algorithm,this.privateParams)),5===this.version&&t.push(V.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(V.writeChecksum(this.keyMaterial))),V.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=G){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=Rn(z.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=z.symmetric.aes256)}async encrypt(e,t=G){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=_n(t),this.s2k.generateSalt();const r=Kn.serializeParams(this.algorithm,this.privateParams);this.symmetric=z.symmetric.aes256;const{blockSize:i}=Kn.getCipher(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=z.aead.eax;const t=Kn.getAEADMode(this.aead),n=ni(this.constructor.tag),s=await Ua(this.version,this.s2k,e,this.symmetric,this.aead,n),a=await t(this.symmetric,s);this.iv=5===this.version?Kn.random.getRandomBytes(i):Kn.random.getRandomBytes(t.ivLength);const o=5===this.version?new Uint8Array:V.concatUint8Array([n,this.writePublicKey()]);this.keyMaterial=await a.encrypt(r,this.iv.subarray(0,t.ivLength),o)}else{this.s2kUsage=254;const n=await Ua(this.version,this.s2k,e,this.symmetric);this.iv=Kn.random.getRandomBytes(i),this.keyMaterial=await Kn.mode.cfb.encrypt(this.symmetric,n,V.concatUint8Array([r,await Kn.hash.sha1(r,t)]),this.iv,t)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=ni(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(t=await Ua(this.version,this.s2k,e,this.symmetric,this.aead,r),253===this.s2kUsage){const e=Kn.getAEADMode(this.aead),n=await e(this.symmetric,t);try{const t=5===this.version?new Uint8Array:V.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await Kn.mode.cfb.decrypt(this.symmetric,t,this.keyMaterial,this.iv);i=e.subarray(0,-20);const r=await Kn.hash.sha1(i);if(!V.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=Kn.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");let e;try{e=await Kn.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===z.publicKey.ecdh&&t===z.curve.curve25519Legacy||this.algorithm===z.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await Kn.generateParams(this.algorithm,e,t,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function Ua(e,t,r,i,n,s){const{keySize:a}=Kn.getCipher(i),o=await t.produceKey(r,a);if(!n||5===e)return o;const c=V.concatUint8Array([s,new Uint8Array([e,i,n])]);return nn(z.hash.sha256,o,new Uint8Array,c,a)}class Pa{static get tag(){return z.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(V.isString(e)||e.name&&!V.isString(e.name)||e.email&&!V.isEmailAddress(e.email)||e.comment&&!V.isString(e.comment))throw Error("Invalid user ID format");const t=new Pa;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=G){const r=V.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:e,comment:t,email:r}=i.groups;this.comment=t?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=e?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return V.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class Da extends Ka{static get tag(){return z.packet.secretSubkey}constructor(e=new Date,t=G){super(e,t)}}const Ma=/*#__PURE__*/V.constructAllowedPackets([ea]);class xa{constructor(e){this.packets=e||new sa}write(){return this.packets.write()}armor(e=G){return ae(z.armor.signature,this.write(),void 0,void 0,void 0,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function Qa(e,t){const r=new Da(e.date,t);return r.packets=null,r.algorithm=z.write(z.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Ra(e,t){const r=new Ka(e.date,t);return r.packets=null,r.algorithm=z.write(z.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function _a(e,t,r,i,n=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,i,n,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw V.wrapError(`Could not find valid ${z.read(z.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function Ta(e,t,r=new Date){const i=V.normalizeDate(r);if(null!==i){const r=Ha(e,t);return!(e.created<=i&&i<r)}return!1}async function La(e,t,r,i){const n={};n.key=t,n.bind=e;const s={signatureType:z.signature.subkeyBinding};r.sign?(s.keyFlags=[z.keyFlags.signData],s.embeddedSignature=await Na(n,null,e,{signatureType:z.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[z.keyFlags.forwardedCommunication]:[z.keyFlags.encryptCommunication|z.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await Na(n,null,t,s,r.date,void 0,void 0,void 0,i)}async function Na(e,t,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new ea;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(e,t,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(e){const t=await e.getPrimarySelfSignature(r,i,n);t.preferredHashAlgorithms&&([a]=t.preferredHashAlgorithms,s=Kn.hash.getHashByteLength(s)<=Kn.hash.getHashByteLength(a)?a:s)}switch(t.algorithm){case z.publicKey.ecdsa:case z.publicKey.eddsaLegacy:case z.publicKey.ed25519:case z.publicKey.ed448:a=Kn.getPreferredCurveHashAlgo(t.algorithm,t.publicParams.oid)}return Kn.hash.getHashByteLength(s)<=Kn.hash.getHashByteLength(a)?a:s}(t,r,n,s,c),h.rawNotations=a,await h.sign(r,e,n,o),h}async function Oa(e,t,r,i=new Date,n){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(i)||n&&!await n(e)||t[r].some((function(t){return V.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function Fa(e,t,r,i,n,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(i.map((async function(e){try{n&&!e.issuerKeyID.equals(n.issuerKeyID)||(await e.verify(s,t,r,o.revocationsExpire?a:null,!1,o),c.push(e.issuerKeyID))}catch(e){}}))),n?(n.revoked=!!c.some((e=>e.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function Ha(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function za(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=V.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"ecc":try{e.curve=z.write(z.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==z.curve.ed25519Legacy&&e.curve!==z.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?z.curve.ed25519Legacy:z.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===z.curve.ed25519Legacy?z.publicKey.eddsaLegacy:z.publicKey.ecdsa:e.algorithm=z.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?z.publicKey.ed25519:z.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?z.publicKey.ed448:z.publicKey.x448;break;case"rsa":e.algorithm=z.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=z.publicKey.hmac;try{e.symmetric=z.write(z.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=z.publicKey.aead;try{e.symmetric=z.write(z.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function Ga(e,t,r){switch(e.algorithm){case z.publicKey.rsaEncryptSign:case z.publicKey.rsaSign:case z.publicKey.dsa:case z.publicKey.ecdsa:case z.publicKey.eddsaLegacy:case z.publicKey.ed25519:case z.publicKey.ed448:case z.publicKey.hmac:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||0!=(t.keyFlags[0]&z.keyFlags.signData);default:return!1}}function qa(e,t,r){switch(e.algorithm){case z.publicKey.rsaEncryptSign:case z.publicKey.rsaEncrypt:case z.publicKey.elgamal:case z.publicKey.ecdh:case z.publicKey.x25519:case z.publicKey.x448:case z.publicKey.aead:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||0!=(t.keyFlags[0]&z.keyFlags.encryptCommunication)||0!=(t.keyFlags[0]&z.keyFlags.encryptStorage);default:return!1}}function ja(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case z.publicKey.rsaEncryptSign:case z.publicKey.rsaEncrypt:case z.publicKey.elgamal:case z.publicKey.ecdh:case z.publicKey.x25519:case z.publicKey.x448:return!(!(!t.keyFlags||0!=(t.keyFlags[0]&z.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||0!=(t.keyFlags[0]&z.keyFlags.encryptCommunication)||0!=(t.keyFlags[0]&z.keyFlags.encryptStorage)||r.allowForwardedMessages&&0!=(t.keyFlags[0]&z.keyFlags.forwardedCommunication));default:return!1}}function Va(e,t){const r=z.write(z.publicKey,e.algorithm),i=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case z.publicKey.rsaEncryptSign:case z.publicKey.rsaSign:case z.publicKey.rsaEncrypt:if(i.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case z.publicKey.ecdsa:case z.publicKey.eddsaLegacy:case z.publicKey.ecdh:if(t.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class Za{constructor(e,t){this.userID=e.constructor.tag===z.packet.userID?e:null,this.userAttribute=e.constructor.tag===z.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new sa;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new Za(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new Za(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return Na(n,e,s.keyPacket,{signatureType:z.signature.certGeneric,keyFlags:[z.keyFlags.certifyKeys|z.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,i=G){const n=this.mainKey.keyPacket;return Fa(n,z.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,i)}async verifyCertificate(e,t,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,i);if(e.revoked||await n.isRevoked(e,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,z.signature.certGeneric,a,r,void 0,i)}catch(e){throw V.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(i,z.signature.certGeneric,n,e,void 0,t)}catch(e){throw V.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await Oa(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(i,z.signature.certGeneric,n,t,!1,r),!0}catch(e){return!1}})),await Oa(e,this,"otherCertifications",t),await Oa(e,this,"revocationSignatures",t,(function(e){return Fa(i,z.signature.certRevocation,n,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=z.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=G){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new Za(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await Na(s,null,e,{signatureType:z.signature.certRevocation,reasonForRevocationFlag:z.write(z.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class Ya{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new sa;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Ya(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,i=G){const n=this.mainKey.keyPacket;return Fa(n,z.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verify(e=new Date,t=G){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await _a(this.bindingSignatures,r,z.signature.subkeyBinding,i,e,t);if(n.revoked||await this.isRevoked(n,null,e,t))throw Error("Subkey is revoked");if(Ta(this.keyPacket,n,e))throw Error("Subkey is expired");return n}async getExpirationTime(e=new Date,t=G){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await _a(this.bindingSignatures,r,z.signature.subkeyBinding,i,e,t)}catch(e){return null}const s=Ha(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=G){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===z.packet.publicSubkey&&e.keyPacket.constructor.tag===z.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await Oa(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<n.bindingSignatures.length;t++)if(n.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>n.bindingSignatures[t].created&&(n.bindingSignatures[t]=e),!1;try{return await e.verify(i,z.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await Oa(e,this,"revocationSignatures",t,(function(e){return Fa(i,z.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=z.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=G){const s={key:e,bind:this.keyPacket},a=new Ya(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await Na(s,null,e,{signatureType:z.signature.subkeyRevocation,reasonForRevocationFlag:z.write(z.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{Ya.prototype[e]=function(){return this.keyPacket[e]()}}));const Ja=/*#__PURE__*/V.constructAllowedPackets([ea]),Wa=new Set([z.packet.publicKey,z.packet.privateKey]),$a=new Set([z.packet.publicKey,z.packet.privateKey,z.packet.publicSubkey,z.packet.privateSubkey]);class Xa{packetListToStructure(e,t=new Set){let r,i,n,s;for(const a of e){if(a instanceof ui){$a.has(a.tag)&&!s&&(s=Wa.has(a.tag)?Wa:$a);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case z.packet.publicKey:case z.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case z.packet.userID:case z.packet.userAttribute:r=new Za(a,this),this.users.push(r);break;case z.packet.publicSubkey:case z.packet.secretSubkey:r=null,n=new Ya(a,this),this.subkeys.push(n);break;case z.packet.signature:switch(a.signatureType){case z.signature.certGeneric:case z.signature.certPersona:case z.signature.certCasual:case z.signature.certPositive:if(!r){V.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case z.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case z.signature.key:this.directSignatures.push(a);break;case z.signature.subkeyBinding:if(!n){V.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case z.signature.keyRevocation:this.revocationSignatures.push(a);break;case z.signature.subkeyRevocation:if(!n){V.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const e=new sa;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},i=G){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket,s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await _a(r.bindingSignatures,n,z.signature.subkeyBinding,e,t,i);if(!Ga(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await _a([s.embeddedSignature],r.keyPacket,z.signature.keyBinding,e,t,i),Va(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Ga(n,s,i))return Va(n,i),this}catch(e){a=e}throw V.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},i=G){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket,s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await _a(r.bindingSignatures,n,z.signature.subkeyBinding,e,t,i);if(qa(r.keyPacket,s,i))return Va(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&qa(n,s,i))return Va(n,i),this}catch(e){a=e}throw V.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,i=G){return Fa(this.keyPacket,z.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verifyPrimaryKey(e=new Date,t={},r=G){const i=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(Ta(i,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==i.version){const t=await _a(this.directSignatures,i,z.signature.key,{key:i},e,r).catch((()=>{}));if(t&&Ta(i,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=G){let r;try{const i=await this.getPrimarySelfSignature(null,e,t),n=Ha(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await _a(this.directSignatures,this.keyPacket,z.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=Ha(this.keyPacket,a);r=Math.min(n,s,e)}else r=n<s?n:s}catch(e){r=null}return V.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=G){const i=this.keyPacket;if(6===i.version)return _a(this.directSignatures,i,z.signature.key,{key:i},e,r);const{selfCertification:n}=await this.getPrimaryUser(e,t,r);return n}async getPrimaryUser(e=new Date,t={},r=G){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await _a(s.selfCertifications,i,z.signature.certGeneric,o,e,r);n.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=n.sort((function(e,t){const r=e.selfCertification,i=t.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=G){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const i=this.clone();return await Oa(e,i,"revocationSignatures",t,(n=>Fa(i.keyPacket,z.signature.keyRevocation,i,[n],null,e.keyPacket,t,r))),await Oa(e,i,"directSignatures",t),await Promise.all(e.users.map((async e=>{const n=i.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const n=i.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.subkeys.push(t)}}))),i}async getRevocationCertificate(e=new Date,t=G){const r={key:this.keyPacket},i=await _a(this.revocationSignatures,this.keyPacket,z.signature.keyRevocation,r,e,t),n=new sa;return n.push(i),ae(z.armor.publicKey,n.write(),null,null,"This is a revocation certificate")}async applyRevocationCertificate(e,t=new Date,r=G){const i=await se(e),n=(await sa.fromBinary(i.data,Ja,r)).findPacket(z.packet.signature);if(!n||n.signatureType!==z.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,z.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw V.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(e,t,r,i=G){const{index:n,user:s}=await this.getPrimaryUser(t,r,i),a=await s.certify(e,t,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(e,t=new Date,r=G){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(e,t,r)}))),i}async verifyPrimaryUser(e,t=new Date,r,i=G){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,i);return e?await s.verifyAllCertifications(e,t,i):[{keyID:n.getKeyID(),valid:await s.verify(t,i).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=G){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:i.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];n.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{Xa.prototype[e]=Ya.prototype[e]}));class eo extends Xa{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([z.packet.secretKey,z.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=G){return ae(z.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,e)}}class to extends eo{constructor(e){if(super(),this.packetListToStructure(e,new Set([z.packet.publicKey,z.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new sa,t=this.toPacketList();let r=!1;for(const i of t)if(!r||i.constructor.tag!==z.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case z.packet.secretKey:{if(i.algorithm===z.publicKey.aead||i.algorithm===z.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=ka.fromSecretKeyPacket(i);e.push(t);break}case z.packet.secretSubkey:{if(i.algorithm===z.publicKey.aead||i.algorithm===z.publicKey.hmac){r=!0;break}const t=Ba.fromSecretSubkeyPacket(i);e.push(t);break}default:e.push(i)}return new eo(e)}armor(e=G){return ae(z.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,e)}async getDecryptionKeys(e,t=new Date,r={},i=G){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0))try{const e={key:n,bind:this.subkeys[r].keyPacket},a=await _a(this.subkeys[r].bindingSignatures,n,z.signature.subkeyBinding,e,t,i);ja(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(e){}const a=await this.getPrimarySelfSignature(t,r,i);return e&&!n.getKeyID().equals(e,!0)||!ja(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=G){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=z.reasonForRevocation.noReason,string:t=""}={},r=new Date,i=G){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await Na(n,null,this.keyPacket,{signatureType:z.signature.keyRevocation,reasonForRevocationFlag:z.write(z.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,i)),s}async addSubkey(e={}){const t={...G,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(e){switch(z.write(z.publicKey,e)){case z.publicKey.rsaEncrypt:case z.publicKey.rsaEncryptSign:case z.publicKey.rsaSign:case z.publicKey.dsa:return"rsa";case z.publicKey.ecdsa:case z.publicKey.eddsaLegacy:return"ecc";case z.publicKey.ed25519:return"curve25519";case z.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",e=za(e,i);const n=await Qa(e,{...t,v6Keys:6===this.keyPacket.version});Va(n,t);const s=await La(n,r,e,t),a=this.toPacketList();return a.push(n,s),new to(a)}}const ro=/*#__PURE__*/V.constructAllowedPackets([ka,Ba,Ka,Da,Pa,Ca,ea]);function io(e){for(const t of e)switch(t.constructor.tag){case z.packet.secretKey:return new to(e);case z.packet.publicKey:return new eo(e)}throw Error("No key packet found")}async function no(e,t,r,i){r.passphrase&&await e.encrypt(r.passphrase,i),await Promise.all(t.map((async function(e,t){const n=r.subkeys[t].passphrase;n&&await e.encrypt(n,i)})));const n=new sa;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const e={};e.keyFlags=[z.keyFlags.certifyKeys|z.keyFlags.signData];const t=s([z.symmetric.aes256,z.symmetric.aes128],i.preferredSymmetricAlgorithm);if(e.preferredSymmetricAlgorithms=t,i.aeadProtect){const r=s([z.aead.gcm,z.aead.eax,z.aead.ocb],i.preferredAEADAlgorithm);e.preferredCipherSuites=r.flatMap((e=>t.map((t=>[t,e]))))}return e.preferredHashAlgorithms=s([z.hash.sha256,z.hash.sha512],i.preferredHashAlgorithm),e.preferredCompressionAlgorithms=s([z.compression.uncompressed,z.compression.zlib,z.compression.zip],i.preferredCompressionAlgorithm),e.features=[0],e.features[0]|=z.features.modificationDetection,i.aeadProtect&&(e.features[0]|=z.features.seipdv2),r.keyExpirationTime>0&&(e.keyExpirationTime=r.keyExpirationTime,e.keyNeverExpires=!1),e}if(n.push(e),6===e.version){const t={key:e},s=a();s.signatureType=z.signature.key;const o=await Na(t,null,e,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(t,n){const s=Pa.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=z.signature.certGeneric,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await Na(o,null,e,c,r.date,void 0,void 0,void 0,i)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{n.push(e),n.push(t)}))})),await Promise.all(t.map((async function(t,n){const s=r.subkeys[n];return{secretSubkeyPacket:t,subkeySignaturePacket:await La(t,e,s,i)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{n.push(e),n.push(t)}))}));const o={key:e};return n.push(await Na(o,null,e,{signatureType:z.signature.keyRevocation,reasonForRevocationFlag:z.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new to(n)}const so=/*#__PURE__*/V.constructAllowedPackets([Js,oa,Aa,ga,Ia,ba,Ea,ia,ea]),ao=/*#__PURE__*/V.constructAllowedPackets([Ea]),oo=/*#__PURE__*/V.constructAllowedPackets([ea]);class co{constructor(e){this.packets=e||new sa}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(z.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(z.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(z.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,i=new Date,n=G){const s=this.packets.filterByTag(z.packet.symmetricallyEncryptedData,z.packet.symEncryptedIntegrityProtectedData,z.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!V.isUint8Array(t)||!a.cipherAlgorithm&&!V.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||z.write(z.symmetric,e);await a.decrypt(r,t,n)}catch(e){V.printDebugError(e),h=e}})));if(L(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new co(a.packets);return a.packets=new sa,l}async decryptSessionKeys(e,t,r,i=new Date,n=G){let s,a=[];if(t){const e=this.packets.filterByTag(z.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let i;i=r?await sa.fromBinary(e.write(),ao,n):e,await Promise.all(i.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){V.printDebugError(e),e instanceof Un&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(z.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o=[z.symmetric.aes256,z.symmetric.aes128,z.symmetric.tripledes,z.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(i,void 0,n);t.preferredSymmetricAlgorithms&&(o=o.concat(t.preferredSymmetricAlgorithms))}catch(e){}const c=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,n)).map((e=>e.keyPacket));await Promise.all(c.map((async function(e){if(!e||e.isDummy())return;if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===z.publicKey.rsaEncrypt||t.publicKeyAlgorithm===z.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===z.publicKey.rsaSign||t.publicKeyAlgorithm===z.publicKey.elgamal)){const i=t.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new ba;r.read(i);const n={sessionKeyAlgorithm:t,sessionKey:Kn.generateSessionKey(t)};try{await r.decrypt(e,n),a.push(r)}catch(e){V.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const i=r||t.sessionKeyAlgorithm;if(i&&!o.includes(z.write(z.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){V.printDebugError(e),s=e}})))}))),L(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+V.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&z.read(z.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(z.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(z.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(z.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],i=G){const{symmetricAlgo:n,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],i=G){const n=await Promise.all(e.map(((e,n)=>e.getPrimarySelfSignature(t,r[n],i))));if(e.length?n.every((e=>e.features[0]&z.features.seipdv2)):i.aeadProtect){const e={symmetricAlgo:z.symmetric.aes128,aeadAlgo:z.aead.ocb},t={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((e=>e.preferredCipherSuites&&e.preferredCipherSuites.some((e=>e[0]===t.symmetricAlgo&&e[1]===t.aeadAlgo))))?t:e}const s=z.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,i),a=z.read(z.symmetric,n),o=s?z.read(z.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===z.publicKey.x25519||e.keyPacket.algorithm===z.publicKey.x448)&&!o&&!V.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:Kn.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,i=!1,n=[],s=new Date,a=[],o=G){if(r){if(!V.isUint8Array(r.data)||!V.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await co.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await co.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await co.encryptSessionKey(c,h,u,e,t,i,n,s,a,o),f=ga.fromObject({version:u?2:1,aeadAlgorithm:u?z.write(z.aead,u):null});f.packets=this.packets;const y=z.write(z.symmetric,h);return await f.encrypt(y,c,o),l.packets.push(f),f.packets=new sa,l}static async encryptSessionKey(e,t,r,i,n,s=!1,a=[],o=new Date,c=[],h=G){const u=new sa,l=z.write(z.symmetric,t),f=r&&z.write(z.aead,r);if(i){const t=await Promise.all(i.map((async function(t,r){const i=await t.getEncryptionKey(a[r],o,c,h),n=ba.fromObject({version:f?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...t)}if(n){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,i=async function(e,s,a,o){const c=new Ea(h);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((e=>t(c,e))))).reduce(r))return i(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((t=>i(e,l,f,t))));u.push(...s)}return new co(u)}async sign(e=[],t=null,r=[],i=new Date,n=[],s=[],a=G){const o=new sa,c=this.packets.findPacket(z.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await ho(c,e,t,r,i,n,s,!1,a),u=h.map(((e,t)=>ia.fromSignaturePacket(e,0===t))).reverse();return o.push(...u),o.push(c),o.push(...h),new co(o)}compress(e,t=G){if(e===z.compression.uncompressed)return this;const r=new oa(t);r.algorithm=e,r.packets=this.packets;const i=new sa;return i.push(r),new co(i)}async signDetached(e=[],t=null,r=[],i=new Date,n=[],s=[],a=G){const o=this.packets.findPacket(z.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new xa(await ho(o,e,t,r,i,n,s,!0,a))}async verify(e,t=new Date,r=G){const i=this.unwrapCompressed(),n=i.packets.filterByTag(z.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");y(i.packets.stream)&&i.packets.push(...await T(i.packets.stream,(e=>e||[])));const s=i.packets.filterByTag(z.packet.onePassSignature).reverse(),a=i.packets.filterByTag(z.packet.signature);return s.length&&!a.length&&V.isStream(i.packets.stream)&&!y(i.packets.stream)?(await Promise.all(s.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=N((async()=>(await e.correspondingSig).signatureData)),e.hashed=T(await e.hash(e.signatureType,n[0],void 0,!1)),e.hashed.catch((()=>{}))}))),i.packets.stream=D(i.packets.stream,(async(e,t)=>{const r=O(e),i=F(t);try{for(let e=0;e<s.length;e++){const{value:t}=await r.read();s[e].correspondingSigResolve(t)}await r.readToEnd(),await i.ready,await i.close()}catch(e){s.forEach((t=>{t.correspondingSigReject(e)})),await i.abort(e)}})),uo(s,n,e,t,!1,r)):uo(a,n,e,t,!1,r)}verifyDetached(e,t,r=new Date,i=G){const n=this.unwrapCompressed().packets.filterByTag(z.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return uo(e.packets.filterByTag(z.packet.signature),n,t,r,!0,i)}unwrapCompressed(){const e=this.packets.filterByTag(z.packet.compressedData);return e.length?new co(e[0].packets):this}async appendSignature(e,t=G){await this.packets.read(V.isUint8Array(e)?e:(await se(e)).data,oo,t)}write(){return this.packets.write()}armor(e=G){return ae(z.armor.message,this.write(),null,null,null,e)}}async function ho(e,t,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=G){const h=new sa,u=null===e.text?z.signature.binary:z.signature.text;if(await Promise.all(t.map((async(t,r)=>{const h=s[r];if(!t.isPrivate())throw Error("Need private key for signing");const l=await t.getSigningKey(i[r],n,h,c);return Na(e,t,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((e=>{h.push(...e)})),r){const e=r.packets.filterByTag(z.packet.signature);h.push(...e)}return h}async function uo(e,t,r,i=new Date,n=!1,s=G){return Promise.all(e.filter((function(e){return["text","binary"].includes(z.read(z.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,i=new Date,n=!1,s=G){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof ia?e.correspondingSig:e,h={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new sa;return e&&t.push(e),new xa(t)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(e,t,r,i,n,s)})))}const lo=/*#__PURE__*/V.constructAllowedPackets([ea]);class fo{constructor(e,t){if(this.text=V.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof xa))throw Error("Invalid signature input");this.signature=t||new xa(new sa)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=null,r=[],i=new Date,n=[],s=[],a=G){const o=new Js;o.setText(this.text);const c=new xa(await ho(o,e,t,r,i,n,s,!0,a));return new fo(this.text,c)}verify(e,t=new Date,r=G){const i=this.signature.packets.filterByTag(z.packet.signature),n=new Js;return n.setText(this.text),uo(i,[n],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=G){const t={hash:this.signature.packets.some((e=>6!==e.version))?Array.from(new Set(this.signature.packets.map((e=>z.read(z.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return ae(z.armor.signed,t,void 0,void 0,void 0,e)}}function yo(e){if(!(e instanceof co))throw Error("Parameter [message] needs to be of type Message")}function po(e){if(!(e instanceof fo||e instanceof co))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function go(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const mo=Object.keys(G).length;function wo(e){const t=Object.keys(e);if(t.length!==mo)for(const e of t)if(void 0===G[e])throw Error("Unknown config property: "+e)}function Ao(e){return e&&!V.isArray(e)&&(e=[e]),e}async function bo(e,t,r="utf8"){return"array"===V.isStream(e)?T(e):"node"===t?(e=m(e),"binary"!==r&&e.setEncoding(r),e):e}function vo(e,t){e.data=D(t.packets.stream,(async(t,r)=>{await C(e.data,r,{preventClose:!0});const i=F(r);try{await T(t,(e=>e)),await i.close()}catch(e){await i.abort(e)}}))}function Eo(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}class ko{static setImplementation(e,t=!1){if(ko.Implementation&&!t)throw Error("Implementation already set");ko.Implementation=e}static new(e){return new ko.Implementation(e)}}class So extends ko{constructor(e){if(super(),void 0===e)throw Error("Invalid BigInteger input");if(e instanceof Uint8Array){const t="0123456789ABCDEF";let r="";e.forEach((e=>{r+=t[e>>4]+t[15&e]})),this.value=BigInt("0x0"+r)}else this.value=BigInt(e)}clone(){return new So(this.value)}iinc(){return this.value++,this}inc(){return this.clone().iinc()}idec(){return this.value--,this}dec(){return this.clone().idec()}iadd(e){return this.value+=e.value,this}add(e){return this.clone().iadd(e)}isub(e){return this.value-=e.value,this}sub(e){return this.clone().isub(e)}imul(e){return this.value*=e.value,this}mul(e){return this.clone().imul(e)}imod(e){return this.value%=e.value,this.isNegative()&&this.iadd(e),this}mod(e){return this.clone().imod(e)}modExp(e,t){if(t.isZero())throw Error("Modulo cannot be zero");if(t.isOne())return new So(0);if(e.isNegative())throw Error("Unsopported negative exponent");let r=e.value,i=this.value;i%=t.value;let n=BigInt(1);for(;r>BigInt(0);){const e=r&BigInt(1);r>>=BigInt(1);const s=n*i%t.value;n=e?s:n,i=i*i%t.value}return new So(n)}modInv(e){const{gcd:t,x:r}=this._egcd(e);if(!t.isOne())throw Error("Inverse does not exist");return r.add(e).mod(e)}idiv(e){return this.value/=e.value,this}div(e){return this.clone().idiv(e)}_egcd(e){let t=BigInt(0),r=BigInt(1),i=BigInt(1),n=BigInt(0),s=this.abs().value,a=e.abs().value;const o=this.isNegative(),c=e.isNegative();for(;a!==BigInt(0);){const e=s/a;let o=t;t=i-e*t,i=o,o=r,r=n-e*r,n=o,o=a,a=s%a,s=o}return{x:new So(o?-i:i),y:new So(c?-n:n),gcd:new So(s)}}gcd(e){let t=this.value,r=e.value;for(;r!==BigInt(0);){const e=r;r=t%r,t=e}return new So(t)}ileftShift(e){return this.value<<=e.value,this}leftShift(e){return this.clone().ileftShift(e)}irightShift(e){return this.value>>=e.value,this}rightShift(e){return this.clone().irightShift(e)}ixor(e){return this.value^=e.value,this}xor(e){return this.clone().ixor(e)}ibitwiseAnd(e){return this.value&=e.value,this}bitwiseAnd(e){return this.clone().ibitwiseAnd(e)}ibitwiseOr(e){return this.value|=e.value,this}equal(e){return this.value===e.value}lt(e){return this.value<e.value}lte(e){return this.value<=e.value}gt(e){return this.value>e.value}gte(e){return this.value>=e.value}isZero(){return this.value===BigInt(0)}isOne(){return this.value===BigInt(1)}isNegative(){return this.value<BigInt(0)}isEven(){return!(this.value&BigInt(1))}abs(){const e=this.clone();return this.isNegative()&&(e.value=-e.value),e}negate(){const e=this.clone();return e.value=-e.value,e}toString(){return this.value.toString()}toNumber(){const e=Number(this.value);if(e>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return e}getBit(e){return(this.value>>BigInt(e)&BigInt(1))===BigInt(0)?0:1}bitLength(){const e=new So(0),t=new So(1),r=new So(-1),i=this.isNegative()?r:e;let n=1;const s=this.clone();for(;!s.irightShift(t).equal(i);)n++;return n}byteLength(){const e=new So(0),t=new So(-1),r=this.isNegative()?t:e,i=new So(8);let n=1;const s=this.clone();for(;!s.irightShift(i).equal(r);)n++;return n}toUint8Array(e="be",t){let r=this.value.toString(16);r.length%2==1&&(r="0"+r);const i=r.length/2,n=new Uint8Array(t||i),s=t?t-i:0;let a=0;for(;a<i;)n[a+s]=parseInt(r.slice(2*a,2*a+2),16),a++;return"be"!==e&&n.reverse(),n}}var Io=/*#__PURE__*/Object.freeze({__proto__:null,default:So}),Bo={exports:{}};!function(e,t){function r(e,t){if(!e)throw Error(t||"Assertion failed")}function i(e,t){e.super_=t;var r=function(){};r.prototype=t.prototype,e.prototype=new r,e.prototype.constructor=e}function n(e,t,r){if(n.isBN(e))return e;this.negative=0,this.words=null,this.length=0,this.red=null,null!==e&&("le"!==t&&"be"!==t||(r=t,t=10),this._init(e||0,t||10,r||"be"))}var s;"object"==typeof e?e.exports=n:t.BN=n,n.BN=n,n.wordSize=26;try{s=require("buffer").Buffer}catch(e){}function a(e,t,r){for(var i=0,n=Math.min(e.length,r),s=t;s<n;s++){var a=e.charCodeAt(s)-48;i<<=4,i|=a>=49&&a<=54?a-49+10:a>=17&&a<=22?a-17+10:15&a}return i}function o(e,t,r,i){for(var n=0,s=Math.min(e.length,r),a=t;a<s;a++){var o=e.charCodeAt(a)-48;n*=i,n+=o>=49?o-49+10:o>=17?o-17+10:o}return n}n.isBN=function(e){return e instanceof n||null!==e&&"object"==typeof e&&e.constructor.wordSize===n.wordSize&&Array.isArray(e.words)},n.max=function(e,t){return e.cmp(t)>0?e:t},n.min=function(e,t){return e.cmp(t)<0?e:t},n.prototype._init=function(e,t,i){if("number"==typeof e)return this._initNumber(e,t,i);if("object"==typeof e)return this._initArray(e,t,i);"hex"===t&&(t=16),r(t===(0|t)&&t>=2&&t<=36);var n=0;"-"===(e=e.toString().replace(/\s+/g,""))[0]&&n++,16===t?this._parseHex(e,n):this._parseBase(e,t,n),"-"===e[0]&&(this.negative=1),this.strip(),"le"===i&&this._initArray(this.toArray(),t,i)},n.prototype._initNumber=function(e,t,i){e<0&&(this.negative=1,e=-e),e<67108864?(this.words=[67108863&e],this.length=1):e<4503599627370496?(this.words=[67108863&e,e/67108864&67108863],this.length=2):(r(e<9007199254740992),this.words=[67108863&e,e/67108864&67108863,1],this.length=3),"le"===i&&this._initArray(this.toArray(),t,i)},n.prototype._initArray=function(e,t,i){if(r("number"==typeof e.length),e.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(e.length/3),this.words=Array(this.length);for(var n=0;n<this.length;n++)this.words[n]=0;var s,a,o=0;if("be"===i)for(n=e.length-1,s=0;n>=0;n-=3)a=e[n]|e[n-1]<<8|e[n-2]<<16,this.words[s]|=a<<o&67108863,this.words[s+1]=a>>>26-o&67108863,(o+=24)>=26&&(o-=26,s++);else if("le"===i)for(n=0,s=0;n<e.length;n+=3)a=e[n]|e[n+1]<<8|e[n+2]<<16,this.words[s]|=a<<o&67108863,this.words[s+1]=a>>>26-o&67108863,(o+=24)>=26&&(o-=26,s++);return this.strip()},n.prototype._parseHex=function(e,t){this.length=Math.ceil((e.length-t)/6),this.words=Array(this.length);for(var r=0;r<this.length;r++)this.words[r]=0;var i,n,s=0;for(r=e.length-6,i=0;r>=t;r-=6)n=a(e,r,r+6),this.words[i]|=n<<s&67108863,this.words[i+1]|=n>>>26-s&4194303,(s+=24)>=26&&(s-=26,i++);r+6!==t&&(n=a(e,t,r+6),this.words[i]|=n<<s&67108863,this.words[i+1]|=n>>>26-s&4194303),this.strip()},n.prototype._parseBase=function(e,t,r){this.words=[0],this.length=1;for(var i=0,n=1;n<=67108863;n*=t)i++;i--,n=n/t|0;for(var s=e.length-r,a=s%i,c=Math.min(s,s-a)+r,h=0,u=r;u<c;u+=i)h=o(e,u,u+i,t),this.imuln(n),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h);if(0!==a){var l=1;for(h=o(e,u,e.length,t),u=0;u<a;u++)l*=t;this.imuln(l),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h)}},n.prototype.copy=function(e){e.words=Array(this.length);for(var t=0;t<this.length;t++)e.words[t]=this.words[t];e.length=this.length,e.negative=this.negative,e.red=this.red},n.prototype.clone=function(){var e=new n(null);return this.copy(e),e},n.prototype._expand=function(e){for(;this.length<e;)this.words[this.length++]=0;return this},n.prototype.strip=function(){for(;this.length>1&&0===this.words[this.length-1];)this.length--;return this._normSign()},n.prototype._normSign=function(){return 1===this.length&&0===this.words[0]&&(this.negative=0),this},n.prototype.inspect=function(){return(this.red?"<BN-R: ":"<BN: ")+this.toString(16)+">"};var c=["","0","00","000","0000","00000","000000","0000000","00000000","000000000","0000000000","00000000000","000000000000","0000000000000","00000000000000","000000000000000","0000000000000000","00000000000000000","000000000000000000","0000000000000000000","00000000000000000000","000000000000000000000","0000000000000000000000","00000000000000000000000","000000000000000000000000","0000000000000000000000000"],h=[0,0,25,16,12,11,10,9,8,8,7,7,7,7,6,6,6,6,6,6,6,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5],u=[0,0,33554432,43046721,16777216,48828125,60466176,40353607,16777216,43046721,1e7,19487171,35831808,62748517,7529536,11390625,16777216,24137569,34012224,47045881,64e6,4084101,5153632,6436343,7962624,9765625,11881376,14348907,17210368,20511149,243e5,28629151,33554432,39135393,45435424,52521875,60466176];function l(e,t,r){r.negative=t.negative^e.negative;var i=e.length+t.length|0;r.length=i,i=i-1|0;var n=0|e.words[0],s=0|t.words[0],a=n*s,o=67108863&a,c=a/67108864|0;r.words[0]=o;for(var h=1;h<i;h++){for(var u=c>>>26,l=67108863&c,f=Math.min(h,t.length-1),y=Math.max(0,h-e.length+1);y<=f;y++){var d=h-y|0;u+=(a=(n=0|e.words[d])*(s=0|t.words[y])+l)/67108864|0,l=67108863&a}r.words[h]=0|l,c=0|u}return 0!==c?r.words[h]=0|c:r.length--,r.strip()}n.prototype.toString=function(e,t){var i;if(t=0|t||1,16===(e=e||10)||"hex"===e){i="";for(var n=0,s=0,a=0;a<this.length;a++){var o=this.words[a],l=(16777215&(o<<n|s)).toString(16);i=0!=(s=o>>>24-n&16777215)||a!==this.length-1?c[6-l.length]+l+i:l+i,(n+=2)>=26&&(n-=26,a--)}for(0!==s&&(i=s.toString(16)+i);i.length%t!=0;)i="0"+i;return 0!==this.negative&&(i="-"+i),i}if(e===(0|e)&&e>=2&&e<=36){var f=h[e],y=u[e];i="";var d=this.clone();for(d.negative=0;!d.isZero();){var p=d.modn(y).toString(e);i=(d=d.idivn(y)).isZero()?p+i:c[f-p.length]+p+i}for(this.isZero()&&(i="0"+i);i.length%t!=0;)i="0"+i;return 0!==this.negative&&(i="-"+i),i}r(!1,"Base should be between 2 and 36")},n.prototype.toNumber=function(){var e=this.words[0];return 2===this.length?e+=67108864*this.words[1]:3===this.length&&1===this.words[2]?e+=4503599627370496+67108864*this.words[1]:this.length>2&&r(!1,"Number can only safely store up to 53 bits"),0!==this.negative?-e:e},n.prototype.toJSON=function(){return this.toString(16)},n.prototype.toBuffer=function(e,t){return r(void 0!==s),this.toArrayLike(s,e,t)},n.prototype.toArray=function(e,t){return this.toArrayLike(Array,e,t)},n.prototype.toArrayLike=function(e,t,i){var n=this.byteLength(),s=i||Math.max(1,n);r(n<=s,"byte array longer than desired length"),r(s>0,"Requested array length <= 0"),this.strip();var a,o,c="le"===t,h=new e(s),u=this.clone();if(c){for(o=0;!u.isZero();o++)a=u.andln(255),u.iushrn(8),h[o]=a;for(;o<s;o++)h[o]=0}else{for(o=0;o<s-n;o++)h[o]=0;for(o=0;!u.isZero();o++)a=u.andln(255),u.iushrn(8),h[s-o-1]=a}return h},n.prototype._countBits=Math.clz32?function(e){return 32-Math.clz32(e)}:function(e){var t=e,r=0;return t>=4096&&(r+=13,t>>>=13),t>=64&&(r+=7,t>>>=7),t>=8&&(r+=4,t>>>=4),t>=2&&(r+=2,t>>>=2),r+t},n.prototype._zeroBits=function(e){if(0===e)return 26;var t=e,r=0;return 0==(8191&t)&&(r+=13,t>>>=13),0==(127&t)&&(r+=7,t>>>=7),0==(15&t)&&(r+=4,t>>>=4),0==(3&t)&&(r+=2,t>>>=2),0==(1&t)&&r++,r},n.prototype.bitLength=function(){var e=this.words[this.length-1],t=this._countBits(e);return 26*(this.length-1)+t},n.prototype.zeroBits=function(){if(this.isZero())return 0;for(var e=0,t=0;t<this.length;t++){var r=this._zeroBits(this.words[t]);if(e+=r,26!==r)break}return e},n.prototype.byteLength=function(){return Math.ceil(this.bitLength()/8)},n.prototype.toTwos=function(e){return 0!==this.negative?this.abs().inotn(e).iaddn(1):this.clone()},n.prototype.fromTwos=function(e){return this.testn(e-1)?this.notn(e).iaddn(1).ineg():this.clone()},n.prototype.isNeg=function(){return 0!==this.negative},n.prototype.neg=function(){return this.clone().ineg()},n.prototype.ineg=function(){return this.isZero()||(this.negative^=1),this},n.prototype.iuor=function(e){for(;this.length<e.length;)this.words[this.length++]=0;for(var t=0;t<e.length;t++)this.words[t]=this.words[t]|e.words[t];return this.strip()},n.prototype.ior=function(e){return r(0==(this.negative|e.negative)),this.iuor(e)},n.prototype.or=function(e){return this.length>e.length?this.clone().ior(e):e.clone().ior(this)},n.prototype.uor=function(e){return this.length>e.length?this.clone().iuor(e):e.clone().iuor(this)},n.prototype.iuand=function(e){var t;t=this.length>e.length?e:this;for(var r=0;r<t.length;r++)this.words[r]=this.words[r]&e.words[r];return this.length=t.length,this.strip()},n.prototype.iand=function(e){return r(0==(this.negative|e.negative)),this.iuand(e)},n.prototype.and=function(e){return this.length>e.length?this.clone().iand(e):e.clone().iand(this)},n.prototype.uand=function(e){return this.length>e.length?this.clone().iuand(e):e.clone().iuand(this)},n.prototype.iuxor=function(e){var t,r;this.length>e.length?(t=this,r=e):(t=e,r=this);for(var i=0;i<r.length;i++)this.words[i]=t.words[i]^r.words[i];if(this!==t)for(;i<t.length;i++)this.words[i]=t.words[i];return this.length=t.length,this.strip()},n.prototype.ixor=function(e){return r(0==(this.negative|e.negative)),this.iuxor(e)},n.prototype.xor=function(e){return this.length>e.length?this.clone().ixor(e):e.clone().ixor(this)},n.prototype.uxor=function(e){return this.length>e.length?this.clone().iuxor(e):e.clone().iuxor(this)},n.prototype.inotn=function(e){r("number"==typeof e&&e>=0);var t=0|Math.ceil(e/26),i=e%26;this._expand(t),i>0&&t--;for(var n=0;n<t;n++)this.words[n]=67108863&~this.words[n];return i>0&&(this.words[n]=~this.words[n]&67108863>>26-i),this.strip()},n.prototype.notn=function(e){return this.clone().inotn(e)},n.prototype.setn=function(e,t){r("number"==typeof e&&e>=0);var i=e/26|0,n=e%26;return this._expand(i+1),this.words[i]=t?this.words[i]|1<<n:this.words[i]&~(1<<n),this.strip()},n.prototype.iadd=function(e){var t,r,i;if(0!==this.negative&&0===e.negative)return this.negative=0,t=this.isub(e),this.negative^=1,this._normSign();if(0===this.negative&&0!==e.negative)return e.negative=0,t=this.isub(e),e.negative=1,t._normSign();this.length>e.length?(r=this,i=e):(r=e,i=this);for(var n=0,s=0;s<i.length;s++)t=(0|r.words[s])+(0|i.words[s])+n,this.words[s]=67108863&t,n=t>>>26;for(;0!==n&&s<r.length;s++)t=(0|r.words[s])+n,this.words[s]=67108863&t,n=t>>>26;if(this.length=r.length,0!==n)this.words[this.length]=n,this.length++;else if(r!==this)for(;s<r.length;s++)this.words[s]=r.words[s];return this},n.prototype.add=function(e){var t;return 0!==e.negative&&0===this.negative?(e.negative=0,t=this.sub(e),e.negative^=1,t):0===e.negative&&0!==this.negative?(this.negative=0,t=e.sub(this),this.negative=1,t):this.length>e.length?this.clone().iadd(e):e.clone().iadd(this)},n.prototype.isub=function(e){if(0!==e.negative){e.negative=0;var t=this.iadd(e);return e.negative=1,t._normSign()}if(0!==this.negative)return this.negative=0,this.iadd(e),this.negative=1,this._normSign();var r,i,n=this.cmp(e);if(0===n)return this.negative=0,this.length=1,this.words[0]=0,this;n>0?(r=this,i=e):(r=e,i=this);for(var s=0,a=0;a<i.length;a++)s=(t=(0|r.words[a])-(0|i.words[a])+s)>>26,this.words[a]=67108863&t;for(;0!==s&&a<r.length;a++)s=(t=(0|r.words[a])+s)>>26,this.words[a]=67108863&t;if(0===s&&a<r.length&&r!==this)for(;a<r.length;a++)this.words[a]=r.words[a];return this.length=Math.max(this.length,a),r!==this&&(this.negative=1),this.strip()},n.prototype.sub=function(e){return this.clone().isub(e)};var f=function(e,t,r){var i,n,s,a=e.words,o=t.words,c=r.words,h=0,u=0|a[0],l=8191&u,f=u>>>13,y=0|a[1],d=8191&y,p=y>>>13,g=0|a[2],m=8191&g,w=g>>>13,A=0|a[3],b=8191&A,v=A>>>13,E=0|a[4],k=8191&E,S=E>>>13,I=0|a[5],B=8191&I,C=I>>>13,K=0|a[6],U=8191&K,P=K>>>13,D=0|a[7],M=8191&D,x=D>>>13,Q=0|a[8],R=8191&Q,_=Q>>>13,T=0|a[9],L=8191&T,N=T>>>13,O=0|o[0],F=8191&O,H=O>>>13,z=0|o[1],G=8191&z,q=z>>>13,j=0|o[2],V=8191&j,Z=j>>>13,Y=0|o[3],J=8191&Y,W=Y>>>13,$=0|o[4],X=8191&$,ee=$>>>13,te=0|o[5],re=8191&te,ie=te>>>13,ne=0|o[6],se=8191&ne,ae=ne>>>13,oe=0|o[7],ce=8191&oe,he=oe>>>13,ue=0|o[8],le=8191&ue,fe=ue>>>13,ye=0|o[9],de=8191&ye,pe=ye>>>13;r.negative=e.negative^t.negative,r.length=19;var ge=(h+(i=Math.imul(l,F))|0)+((8191&(n=(n=Math.imul(l,H))+Math.imul(f,F)|0))<<13)|0;h=((s=Math.imul(f,H))+(n>>>13)|0)+(ge>>>26)|0,ge&=67108863,i=Math.imul(d,F),n=(n=Math.imul(d,H))+Math.imul(p,F)|0,s=Math.imul(p,H);var me=(h+(i=i+Math.imul(l,G)|0)|0)+((8191&(n=(n=n+Math.imul(l,q)|0)+Math.imul(f,G)|0))<<13)|0;h=((s=s+Math.imul(f,q)|0)+(n>>>13)|0)+(me>>>26)|0,me&=67108863,i=Math.imul(m,F),n=(n=Math.imul(m,H))+Math.imul(w,F)|0,s=Math.imul(w,H),i=i+Math.imul(d,G)|0,n=(n=n+Math.imul(d,q)|0)+Math.imul(p,G)|0,s=s+Math.imul(p,q)|0;var we=(h+(i=i+Math.imul(l,V)|0)|0)+((8191&(n=(n=n+Math.imul(l,Z)|0)+Math.imul(f,V)|0))<<13)|0;h=((s=s+Math.imul(f,Z)|0)+(n>>>13)|0)+(we>>>26)|0,we&=67108863,i=Math.imul(b,F),n=(n=Math.imul(b,H))+Math.imul(v,F)|0,s=Math.imul(v,H),i=i+Math.imul(m,G)|0,n=(n=n+Math.imul(m,q)|0)+Math.imul(w,G)|0,s=s+Math.imul(w,q)|0,i=i+Math.imul(d,V)|0,n=(n=n+Math.imul(d,Z)|0)+Math.imul(p,V)|0,s=s+Math.imul(p,Z)|0;var Ae=(h+(i=i+Math.imul(l,J)|0)|0)+((8191&(n=(n=n+Math.imul(l,W)|0)+Math.imul(f,J)|0))<<13)|0;h=((s=s+Math.imul(f,W)|0)+(n>>>13)|0)+(Ae>>>26)|0,Ae&=67108863,i=Math.imul(k,F),n=(n=Math.imul(k,H))+Math.imul(S,F)|0,s=Math.imul(S,H),i=i+Math.imul(b,G)|0,n=(n=n+Math.imul(b,q)|0)+Math.imul(v,G)|0,s=s+Math.imul(v,q)|0,i=i+Math.imul(m,V)|0,n=(n=n+Math.imul(m,Z)|0)+Math.imul(w,V)|0,s=s+Math.imul(w,Z)|0,i=i+Math.imul(d,J)|0,n=(n=n+Math.imul(d,W)|0)+Math.imul(p,J)|0,s=s+Math.imul(p,W)|0;var be=(h+(i=i+Math.imul(l,X)|0)|0)+((8191&(n=(n=n+Math.imul(l,ee)|0)+Math.imul(f,X)|0))<<13)|0;h=((s=s+Math.imul(f,ee)|0)+(n>>>13)|0)+(be>>>26)|0,be&=67108863,i=Math.imul(B,F),n=(n=Math.imul(B,H))+Math.imul(C,F)|0,s=Math.imul(C,H),i=i+Math.imul(k,G)|0,n=(n=n+Math.imul(k,q)|0)+Math.imul(S,G)|0,s=s+Math.imul(S,q)|0,i=i+Math.imul(b,V)|0,n=(n=n+Math.imul(b,Z)|0)+Math.imul(v,V)|0,s=s+Math.imul(v,Z)|0,i=i+Math.imul(m,J)|0,n=(n=n+Math.imul(m,W)|0)+Math.imul(w,J)|0,s=s+Math.imul(w,W)|0,i=i+Math.imul(d,X)|0,n=(n=n+Math.imul(d,ee)|0)+Math.imul(p,X)|0,s=s+Math.imul(p,ee)|0;var ve=(h+(i=i+Math.imul(l,re)|0)|0)+((8191&(n=(n=n+Math.imul(l,ie)|0)+Math.imul(f,re)|0))<<13)|0;h=((s=s+Math.imul(f,ie)|0)+(n>>>13)|0)+(ve>>>26)|0,ve&=67108863,i=Math.imul(U,F),n=(n=Math.imul(U,H))+Math.imul(P,F)|0,s=Math.imul(P,H),i=i+Math.imul(B,G)|0,n=(n=n+Math.imul(B,q)|0)+Math.imul(C,G)|0,s=s+Math.imul(C,q)|0,i=i+Math.imul(k,V)|0,n=(n=n+Math.imul(k,Z)|0)+Math.imul(S,V)|0,s=s+Math.imul(S,Z)|0,i=i+Math.imul(b,J)|0,n=(n=n+Math.imul(b,W)|0)+Math.imul(v,J)|0,s=s+Math.imul(v,W)|0,i=i+Math.imul(m,X)|0,n=(n=n+Math.imul(m,ee)|0)+Math.imul(w,X)|0,s=s+Math.imul(w,ee)|0,i=i+Math.imul(d,re)|0,n=(n=n+Math.imul(d,ie)|0)+Math.imul(p,re)|0,s=s+Math.imul(p,ie)|0;var Ee=(h+(i=i+Math.imul(l,se)|0)|0)+((8191&(n=(n=n+Math.imul(l,ae)|0)+Math.imul(f,se)|0))<<13)|0;h=((s=s+Math.imul(f,ae)|0)+(n>>>13)|0)+(Ee>>>26)|0,Ee&=67108863,i=Math.imul(M,F),n=(n=Math.imul(M,H))+Math.imul(x,F)|0,s=Math.imul(x,H),i=i+Math.imul(U,G)|0,n=(n=n+Math.imul(U,q)|0)+Math.imul(P,G)|0,s=s+Math.imul(P,q)|0,i=i+Math.imul(B,V)|0,n=(n=n+Math.imul(B,Z)|0)+Math.imul(C,V)|0,s=s+Math.imul(C,Z)|0,i=i+Math.imul(k,J)|0,n=(n=n+Math.imul(k,W)|0)+Math.imul(S,J)|0,s=s+Math.imul(S,W)|0,i=i+Math.imul(b,X)|0,n=(n=n+Math.imul(b,ee)|0)+Math.imul(v,X)|0,s=s+Math.imul(v,ee)|0,i=i+Math.imul(m,re)|0,n=(n=n+Math.imul(m,ie)|0)+Math.imul(w,re)|0,s=s+Math.imul(w,ie)|0,i=i+Math.imul(d,se)|0,n=(n=n+Math.imul(d,ae)|0)+Math.imul(p,se)|0,s=s+Math.imul(p,ae)|0;var ke=(h+(i=i+Math.imul(l,ce)|0)|0)+((8191&(n=(n=n+Math.imul(l,he)|0)+Math.imul(f,ce)|0))<<13)|0;h=((s=s+Math.imul(f,he)|0)+(n>>>13)|0)+(ke>>>26)|0,ke&=67108863,i=Math.imul(R,F),n=(n=Math.imul(R,H))+Math.imul(_,F)|0,s=Math.imul(_,H),i=i+Math.imul(M,G)|0,n=(n=n+Math.imul(M,q)|0)+Math.imul(x,G)|0,s=s+Math.imul(x,q)|0,i=i+Math.imul(U,V)|0,n=(n=n+Math.imul(U,Z)|0)+Math.imul(P,V)|0,s=s+Math.imul(P,Z)|0,i=i+Math.imul(B,J)|0,n=(n=n+Math.imul(B,W)|0)+Math.imul(C,J)|0,s=s+Math.imul(C,W)|0,i=i+Math.imul(k,X)|0,n=(n=n+Math.imul(k,ee)|0)+Math.imul(S,X)|0,s=s+Math.imul(S,ee)|0,i=i+Math.imul(b,re)|0,n=(n=n+Math.imul(b,ie)|0)+Math.imul(v,re)|0,s=s+Math.imul(v,ie)|0,i=i+Math.imul(m,se)|0,n=(n=n+Math.imul(m,ae)|0)+Math.imul(w,se)|0,s=s+Math.imul(w,ae)|0,i=i+Math.imul(d,ce)|0,n=(n=n+Math.imul(d,he)|0)+Math.imul(p,ce)|0,s=s+Math.imul(p,he)|0;var Se=(h+(i=i+Math.imul(l,le)|0)|0)+((8191&(n=(n=n+Math.imul(l,fe)|0)+Math.imul(f,le)|0))<<13)|0;h=((s=s+Math.imul(f,fe)|0)+(n>>>13)|0)+(Se>>>26)|0,Se&=67108863,i=Math.imul(L,F),n=(n=Math.imul(L,H))+Math.imul(N,F)|0,s=Math.imul(N,H),i=i+Math.imul(R,G)|0,n=(n=n+Math.imul(R,q)|0)+Math.imul(_,G)|0,s=s+Math.imul(_,q)|0,i=i+Math.imul(M,V)|0,n=(n=n+Math.imul(M,Z)|0)+Math.imul(x,V)|0,s=s+Math.imul(x,Z)|0,i=i+Math.imul(U,J)|0,n=(n=n+Math.imul(U,W)|0)+Math.imul(P,J)|0,s=s+Math.imul(P,W)|0,i=i+Math.imul(B,X)|0,n=(n=n+Math.imul(B,ee)|0)+Math.imul(C,X)|0,s=s+Math.imul(C,ee)|0,i=i+Math.imul(k,re)|0,n=(n=n+Math.imul(k,ie)|0)+Math.imul(S,re)|0,s=s+Math.imul(S,ie)|0,i=i+Math.imul(b,se)|0,n=(n=n+Math.imul(b,ae)|0)+Math.imul(v,se)|0,s=s+Math.imul(v,ae)|0,i=i+Math.imul(m,ce)|0,n=(n=n+Math.imul(m,he)|0)+Math.imul(w,ce)|0,s=s+Math.imul(w,he)|0,i=i+Math.imul(d,le)|0,n=(n=n+Math.imul(d,fe)|0)+Math.imul(p,le)|0,s=s+Math.imul(p,fe)|0;var Ie=(h+(i=i+Math.imul(l,de)|0)|0)+((8191&(n=(n=n+Math.imul(l,pe)|0)+Math.imul(f,de)|0))<<13)|0;h=((s=s+Math.imul(f,pe)|0)+(n>>>13)|0)+(Ie>>>26)|0,Ie&=67108863,i=Math.imul(L,G),n=(n=Math.imul(L,q))+Math.imul(N,G)|0,s=Math.imul(N,q),i=i+Math.imul(R,V)|0,n=(n=n+Math.imul(R,Z)|0)+Math.imul(_,V)|0,s=s+Math.imul(_,Z)|0,i=i+Math.imul(M,J)|0,n=(n=n+Math.imul(M,W)|0)+Math.imul(x,J)|0,s=s+Math.imul(x,W)|0,i=i+Math.imul(U,X)|0,n=(n=n+Math.imul(U,ee)|0)+Math.imul(P,X)|0,s=s+Math.imul(P,ee)|0,i=i+Math.imul(B,re)|0,n=(n=n+Math.imul(B,ie)|0)+Math.imul(C,re)|0,s=s+Math.imul(C,ie)|0,i=i+Math.imul(k,se)|0,n=(n=n+Math.imul(k,ae)|0)+Math.imul(S,se)|0,s=s+Math.imul(S,ae)|0,i=i+Math.imul(b,ce)|0,n=(n=n+Math.imul(b,he)|0)+Math.imul(v,ce)|0,s=s+Math.imul(v,he)|0,i=i+Math.imul(m,le)|0,n=(n=n+Math.imul(m,fe)|0)+Math.imul(w,le)|0,s=s+Math.imul(w,fe)|0;var Be=(h+(i=i+Math.imul(d,de)|0)|0)+((8191&(n=(n=n+Math.imul(d,pe)|0)+Math.imul(p,de)|0))<<13)|0;h=((s=s+Math.imul(p,pe)|0)+(n>>>13)|0)+(Be>>>26)|0,Be&=67108863,i=Math.imul(L,V),n=(n=Math.imul(L,Z))+Math.imul(N,V)|0,s=Math.imul(N,Z),i=i+Math.imul(R,J)|0,n=(n=n+Math.imul(R,W)|0)+Math.imul(_,J)|0,s=s+Math.imul(_,W)|0,i=i+Math.imul(M,X)|0,n=(n=n+Math.imul(M,ee)|0)+Math.imul(x,X)|0,s=s+Math.imul(x,ee)|0,i=i+Math.imul(U,re)|0,n=(n=n+Math.imul(U,ie)|0)+Math.imul(P,re)|0,s=s+Math.imul(P,ie)|0,i=i+Math.imul(B,se)|0,n=(n=n+Math.imul(B,ae)|0)+Math.imul(C,se)|0,s=s+Math.imul(C,ae)|0,i=i+Math.imul(k,ce)|0,n=(n=n+Math.imul(k,he)|0)+Math.imul(S,ce)|0,s=s+Math.imul(S,he)|0,i=i+Math.imul(b,le)|0,n=(n=n+Math.imul(b,fe)|0)+Math.imul(v,le)|0,s=s+Math.imul(v,fe)|0;var Ce=(h+(i=i+Math.imul(m,de)|0)|0)+((8191&(n=(n=n+Math.imul(m,pe)|0)+Math.imul(w,de)|0))<<13)|0;h=((s=s+Math.imul(w,pe)|0)+(n>>>13)|0)+(Ce>>>26)|0,Ce&=67108863,i=Math.imul(L,J),n=(n=Math.imul(L,W))+Math.imul(N,J)|0,s=Math.imul(N,W),i=i+Math.imul(R,X)|0,n=(n=n+Math.imul(R,ee)|0)+Math.imul(_,X)|0,s=s+Math.imul(_,ee)|0,i=i+Math.imul(M,re)|0,n=(n=n+Math.imul(M,ie)|0)+Math.imul(x,re)|0,s=s+Math.imul(x,ie)|0,i=i+Math.imul(U,se)|0,n=(n=n+Math.imul(U,ae)|0)+Math.imul(P,se)|0,s=s+Math.imul(P,ae)|0,i=i+Math.imul(B,ce)|0,n=(n=n+Math.imul(B,he)|0)+Math.imul(C,ce)|0,s=s+Math.imul(C,he)|0,i=i+Math.imul(k,le)|0,n=(n=n+Math.imul(k,fe)|0)+Math.imul(S,le)|0,s=s+Math.imul(S,fe)|0;var Ke=(h+(i=i+Math.imul(b,de)|0)|0)+((8191&(n=(n=n+Math.imul(b,pe)|0)+Math.imul(v,de)|0))<<13)|0;h=((s=s+Math.imul(v,pe)|0)+(n>>>13)|0)+(Ke>>>26)|0,Ke&=67108863,i=Math.imul(L,X),n=(n=Math.imul(L,ee))+Math.imul(N,X)|0,s=Math.imul(N,ee),i=i+Math.imul(R,re)|0,n=(n=n+Math.imul(R,ie)|0)+Math.imul(_,re)|0,s=s+Math.imul(_,ie)|0,i=i+Math.imul(M,se)|0,n=(n=n+Math.imul(M,ae)|0)+Math.imul(x,se)|0,s=s+Math.imul(x,ae)|0,i=i+Math.imul(U,ce)|0,n=(n=n+Math.imul(U,he)|0)+Math.imul(P,ce)|0,s=s+Math.imul(P,he)|0,i=i+Math.imul(B,le)|0,n=(n=n+Math.imul(B,fe)|0)+Math.imul(C,le)|0,s=s+Math.imul(C,fe)|0;var Ue=(h+(i=i+Math.imul(k,de)|0)|0)+((8191&(n=(n=n+Math.imul(k,pe)|0)+Math.imul(S,de)|0))<<13)|0;h=((s=s+Math.imul(S,pe)|0)+(n>>>13)|0)+(Ue>>>26)|0,Ue&=67108863,i=Math.imul(L,re),n=(n=Math.imul(L,ie))+Math.imul(N,re)|0,s=Math.imul(N,ie),i=i+Math.imul(R,se)|0,n=(n=n+Math.imul(R,ae)|0)+Math.imul(_,se)|0,s=s+Math.imul(_,ae)|0,i=i+Math.imul(M,ce)|0,n=(n=n+Math.imul(M,he)|0)+Math.imul(x,ce)|0,s=s+Math.imul(x,he)|0,i=i+Math.imul(U,le)|0,n=(n=n+Math.imul(U,fe)|0)+Math.imul(P,le)|0,s=s+Math.imul(P,fe)|0;var Pe=(h+(i=i+Math.imul(B,de)|0)|0)+((8191&(n=(n=n+Math.imul(B,pe)|0)+Math.imul(C,de)|0))<<13)|0;h=((s=s+Math.imul(C,pe)|0)+(n>>>13)|0)+(Pe>>>26)|0,Pe&=67108863,i=Math.imul(L,se),n=(n=Math.imul(L,ae))+Math.imul(N,se)|0,s=Math.imul(N,ae),i=i+Math.imul(R,ce)|0,n=(n=n+Math.imul(R,he)|0)+Math.imul(_,ce)|0,s=s+Math.imul(_,he)|0,i=i+Math.imul(M,le)|0,n=(n=n+Math.imul(M,fe)|0)+Math.imul(x,le)|0,s=s+Math.imul(x,fe)|0;var De=(h+(i=i+Math.imul(U,de)|0)|0)+((8191&(n=(n=n+Math.imul(U,pe)|0)+Math.imul(P,de)|0))<<13)|0;h=((s=s+Math.imul(P,pe)|0)+(n>>>13)|0)+(De>>>26)|0,De&=67108863,i=Math.imul(L,ce),n=(n=Math.imul(L,he))+Math.imul(N,ce)|0,s=Math.imul(N,he),i=i+Math.imul(R,le)|0,n=(n=n+Math.imul(R,fe)|0)+Math.imul(_,le)|0,s=s+Math.imul(_,fe)|0;var Me=(h+(i=i+Math.imul(M,de)|0)|0)+((8191&(n=(n=n+Math.imul(M,pe)|0)+Math.imul(x,de)|0))<<13)|0;h=((s=s+Math.imul(x,pe)|0)+(n>>>13)|0)+(Me>>>26)|0,Me&=67108863,i=Math.imul(L,le),n=(n=Math.imul(L,fe))+Math.imul(N,le)|0,s=Math.imul(N,fe);var xe=(h+(i=i+Math.imul(R,de)|0)|0)+((8191&(n=(n=n+Math.imul(R,pe)|0)+Math.imul(_,de)|0))<<13)|0;h=((s=s+Math.imul(_,pe)|0)+(n>>>13)|0)+(xe>>>26)|0,xe&=67108863;var Qe=(h+(i=Math.imul(L,de))|0)+((8191&(n=(n=Math.imul(L,pe))+Math.imul(N,de)|0))<<13)|0;return h=((s=Math.imul(N,pe))+(n>>>13)|0)+(Qe>>>26)|0,Qe&=67108863,c[0]=ge,c[1]=me,c[2]=we,c[3]=Ae,c[4]=be,c[5]=ve,c[6]=Ee,c[7]=ke,c[8]=Se,c[9]=Ie,c[10]=Be,c[11]=Ce,c[12]=Ke,c[13]=Ue,c[14]=Pe,c[15]=De,c[16]=Me,c[17]=xe,c[18]=Qe,0!==h&&(c[19]=h,r.length++),r};function y(e,t,r){return(new d).mulp(e,t,r)}function d(e,t){this.x=e,this.y=t}Math.imul||(f=l),n.prototype.mulTo=function(e,t){var r,i=this.length+e.length;return r=10===this.length&&10===e.length?f(this,e,t):i<63?l(this,e,t):i<1024?function(e,t,r){r.negative=t.negative^e.negative,r.length=e.length+t.length;for(var i=0,n=0,s=0;s<r.length-1;s++){var a=n;n=0;for(var o=67108863&i,c=Math.min(s,t.length-1),h=Math.max(0,s-e.length+1);h<=c;h++){var u=s-h,l=(0|e.words[u])*(0|t.words[h]),f=67108863&l;o=67108863&(f=f+o|0),n+=(a=(a=a+(l/67108864|0)|0)+(f>>>26)|0)>>>26,a&=67108863}r.words[s]=o,i=a,a=n}return 0!==i?r.words[s]=i:r.length--,r.strip()}(this,e,t):y(this,e,t),r},d.prototype.makeRBT=function(e){for(var t=Array(e),r=n.prototype._countBits(e)-1,i=0;i<e;i++)t[i]=this.revBin(i,r,e);return t},d.prototype.revBin=function(e,t,r){if(0===e||e===r-1)return e;for(var i=0,n=0;n<t;n++)i|=(1&e)<<t-n-1,e>>=1;return i},d.prototype.permute=function(e,t,r,i,n,s){for(var a=0;a<s;a++)i[a]=t[e[a]],n[a]=r[e[a]]},d.prototype.transform=function(e,t,r,i,n,s){this.permute(s,e,t,r,i,n);for(var a=1;a<n;a<<=1)for(var o=a<<1,c=Math.cos(2*Math.PI/o),h=Math.sin(2*Math.PI/o),u=0;u<n;u+=o)for(var l=c,f=h,y=0;y<a;y++){var d=r[u+y],p=i[u+y],g=r[u+y+a],m=i[u+y+a],w=l*g-f*m;m=l*m+f*g,g=w,r[u+y]=d+g,i[u+y]=p+m,r[u+y+a]=d-g,i[u+y+a]=p-m,y!==o&&(w=c*l-h*f,f=c*f+h*l,l=w)}},d.prototype.guessLen13b=function(e,t){var r=1|Math.max(t,e),i=1&r,n=0;for(r=r/2|0;r;r>>>=1)n++;return 1<<n+1+i},d.prototype.conjugate=function(e,t,r){if(!(r<=1))for(var i=0;i<r/2;i++){var n=e[i];e[i]=e[r-i-1],e[r-i-1]=n,n=t[i],t[i]=-t[r-i-1],t[r-i-1]=-n}},d.prototype.normalize13b=function(e,t){for(var r=0,i=0;i<t/2;i++){var n=8192*Math.round(e[2*i+1]/t)+Math.round(e[2*i]/t)+r;e[i]=67108863&n,r=n<67108864?0:n/67108864|0}return e},d.prototype.convert13b=function(e,t,i,n){for(var s=0,a=0;a<t;a++)s+=0|e[a],i[2*a]=8191&s,s>>>=13,i[2*a+1]=8191&s,s>>>=13;for(a=2*t;a<n;++a)i[a]=0;r(0===s),r(0==(-8192&s))},d.prototype.stub=function(e){for(var t=Array(e),r=0;r<e;r++)t[r]=0;return t},d.prototype.mulp=function(e,t,r){var i=2*this.guessLen13b(e.length,t.length),n=this.makeRBT(i),s=this.stub(i),a=Array(i),o=Array(i),c=Array(i),h=Array(i),u=Array(i),l=Array(i),f=r.words;f.length=i,this.convert13b(e.words,e.length,a,i),this.convert13b(t.words,t.length,h,i),this.transform(a,s,o,c,i,n),this.transform(h,s,u,l,i,n);for(var y=0;y<i;y++){var d=o[y]*u[y]-c[y]*l[y];c[y]=o[y]*l[y]+c[y]*u[y],o[y]=d}return this.conjugate(o,c,i),this.transform(o,c,f,s,i,n),this.conjugate(f,s,i),this.normalize13b(f,i),r.negative=e.negative^t.negative,r.length=e.length+t.length,r.strip()},n.prototype.mul=function(e){var t=new n(null);return t.words=Array(this.length+e.length),this.mulTo(e,t)},n.prototype.mulf=function(e){var t=new n(null);return t.words=Array(this.length+e.length),y(this,e,t)},n.prototype.imul=function(e){return this.clone().mulTo(e,this)},n.prototype.imuln=function(e){r("number"==typeof e),r(e<67108864);for(var t=0,i=0;i<this.length;i++){var n=(0|this.words[i])*e,s=(67108863&n)+(67108863&t);t>>=26,t+=n/67108864|0,t+=s>>>26,this.words[i]=67108863&s}return 0!==t&&(this.words[i]=t,this.length++),this},n.prototype.muln=function(e){return this.clone().imuln(e)},n.prototype.sqr=function(){return this.mul(this)},n.prototype.isqr=function(){return this.imul(this.clone())},n.prototype.pow=function(e){var t=function(e){for(var t=Array(e.bitLength()),r=0;r<t.length;r++){var i=r/26|0,n=r%26;t[r]=(e.words[i]&1<<n)>>>n}return t}(e);if(0===t.length)return new n(1);for(var r=this,i=0;i<t.length&&0===t[i];i++,r=r.sqr());if(++i<t.length)for(var s=r.sqr();i<t.length;i++,s=s.sqr())0!==t[i]&&(r=r.mul(s));return r},n.prototype.iushln=function(e){r("number"==typeof e&&e>=0);var t,i=e%26,n=(e-i)/26,s=67108863>>>26-i<<26-i;if(0!==i){var a=0;for(t=0;t<this.length;t++){var o=this.words[t]&s,c=(0|this.words[t])-o<<i;this.words[t]=c|a,a=o>>>26-i}a&&(this.words[t]=a,this.length++)}if(0!==n){for(t=this.length-1;t>=0;t--)this.words[t+n]=this.words[t];for(t=0;t<n;t++)this.words[t]=0;this.length+=n}return this.strip()},n.prototype.ishln=function(e){return r(0===this.negative),this.iushln(e)},n.prototype.iushrn=function(e,t,i){var n;r("number"==typeof e&&e>=0),n=t?(t-t%26)/26:0;var s=e%26,a=Math.min((e-s)/26,this.length),o=67108863^67108863>>>s<<s,c=i;if(n=Math.max(0,n-=a),c){for(var h=0;h<a;h++)c.words[h]=this.words[h];c.length=a}if(0===a);else if(this.length>a)for(this.length-=a,h=0;h<this.length;h++)this.words[h]=this.words[h+a];else this.words[0]=0,this.length=1;var u=0;for(h=this.length-1;h>=0&&(0!==u||h>=n);h--){var l=0|this.words[h];this.words[h]=u<<26-s|l>>>s,u=l&o}return c&&0!==u&&(c.words[c.length++]=u),0===this.length&&(this.words[0]=0,this.length=1),this.strip()},n.prototype.ishrn=function(e,t,i){return r(0===this.negative),this.iushrn(e,t,i)},n.prototype.shln=function(e){return this.clone().ishln(e)},n.prototype.ushln=function(e){return this.clone().iushln(e)},n.prototype.shrn=function(e){return this.clone().ishrn(e)},n.prototype.ushrn=function(e){return this.clone().iushrn(e)},n.prototype.testn=function(e){r("number"==typeof e&&e>=0);var t=e%26,i=(e-t)/26,n=1<<t;return!(this.length<=i||!(this.words[i]&n))},n.prototype.imaskn=function(e){r("number"==typeof e&&e>=0);var t=e%26,i=(e-t)/26;if(r(0===this.negative,"imaskn works only with positive numbers"),this.length<=i)return this;if(0!==t&&i++,this.length=Math.min(i,this.length),0!==t){var n=67108863^67108863>>>t<<t;this.words[this.length-1]&=n}return this.strip()},n.prototype.maskn=function(e){return this.clone().imaskn(e)},n.prototype.iaddn=function(e){return r("number"==typeof e),r(e<67108864),e<0?this.isubn(-e):0!==this.negative?1===this.length&&(0|this.words[0])<e?(this.words[0]=e-(0|this.words[0]),this.negative=0,this):(this.negative=0,this.isubn(e),this.negative=1,this):this._iaddn(e)},n.prototype._iaddn=function(e){this.words[0]+=e;for(var t=0;t<this.length&&this.words[t]>=67108864;t++)this.words[t]-=67108864,t===this.length-1?this.words[t+1]=1:this.words[t+1]++;return this.length=Math.max(this.length,t+1),this},n.prototype.isubn=function(e){if(r("number"==typeof e),r(e<67108864),e<0)return this.iaddn(-e);if(0!==this.negative)return this.negative=0,this.iaddn(e),this.negative=1,this;if(this.words[0]-=e,1===this.length&&this.words[0]<0)this.words[0]=-this.words[0],this.negative=1;else for(var t=0;t<this.length&&this.words[t]<0;t++)this.words[t]+=67108864,this.words[t+1]-=1;return this.strip()},n.prototype.addn=function(e){return this.clone().iaddn(e)},n.prototype.subn=function(e){return this.clone().isubn(e)},n.prototype.iabs=function(){return this.negative=0,this},n.prototype.abs=function(){return this.clone().iabs()},n.prototype._ishlnsubmul=function(e,t,i){var n,s,a=e.length+i;this._expand(a);var o=0;for(n=0;n<e.length;n++){s=(0|this.words[n+i])+o;var c=(0|e.words[n])*t;o=((s-=67108863&c)>>26)-(c/67108864|0),this.words[n+i]=67108863&s}for(;n<this.length-i;n++)o=(s=(0|this.words[n+i])+o)>>26,this.words[n+i]=67108863&s;if(0===o)return this.strip();for(r(-1===o),o=0,n=0;n<this.length;n++)o=(s=-(0|this.words[n])+o)>>26,this.words[n]=67108863&s;return this.negative=1,this.strip()},n.prototype._wordDiv=function(e,t){var r=(this.length,e.length),i=this.clone(),s=e,a=0|s.words[s.length-1];0!=(r=26-this._countBits(a))&&(s=s.ushln(r),i.iushln(r),a=0|s.words[s.length-1]);var o,c=i.length-s.length;if("mod"!==t){(o=new n(null)).length=c+1,o.words=Array(o.length);for(var h=0;h<o.length;h++)o.words[h]=0}var u=i.clone()._ishlnsubmul(s,1,c);0===u.negative&&(i=u,o&&(o.words[c]=1));for(var l=c-1;l>=0;l--){var f=67108864*(0|i.words[s.length+l])+(0|i.words[s.length+l-1]);for(f=Math.min(f/a|0,67108863),i._ishlnsubmul(s,f,l);0!==i.negative;)f--,i.negative=0,i._ishlnsubmul(s,1,l),i.isZero()||(i.negative^=1);o&&(o.words[l]=f)}return o&&o.strip(),i.strip(),"div"!==t&&0!==r&&i.iushrn(r),{div:o||null,mod:i}},n.prototype.divmod=function(e,t,i){return r(!e.isZero()),this.isZero()?{div:new n(0),mod:new n(0)}:0!==this.negative&&0===e.negative?(o=this.neg().divmod(e,t),"mod"!==t&&(s=o.div.neg()),"div"!==t&&(a=o.mod.neg(),i&&0!==a.negative&&a.iadd(e)),{div:s,mod:a}):0===this.negative&&0!==e.negative?(o=this.divmod(e.neg(),t),"mod"!==t&&(s=o.div.neg()),{div:s,mod:o.mod}):0!=(this.negative&e.negative)?(o=this.neg().divmod(e.neg(),t),"div"!==t&&(a=o.mod.neg(),i&&0!==a.negative&&a.isub(e)),{div:o.div,mod:a}):e.length>this.length||this.cmp(e)<0?{div:new n(0),mod:this}:1===e.length?"div"===t?{div:this.divn(e.words[0]),mod:null}:"mod"===t?{div:null,mod:new n(this.modn(e.words[0]))}:{div:this.divn(e.words[0]),mod:new n(this.modn(e.words[0]))}:this._wordDiv(e,t);var s,a,o},n.prototype.div=function(e){return this.divmod(e,"div",!1).div},n.prototype.mod=function(e){return this.divmod(e,"mod",!1).mod},n.prototype.umod=function(e){return this.divmod(e,"mod",!0).mod},n.prototype.divRound=function(e){var t=this.divmod(e);if(t.mod.isZero())return t.div;var r=0!==t.div.negative?t.mod.isub(e):t.mod,i=e.ushrn(1),n=e.andln(1),s=r.cmp(i);return s<0||1===n&&0===s?t.div:0!==t.div.negative?t.div.isubn(1):t.div.iaddn(1)},n.prototype.modn=function(e){r(e<=67108863);for(var t=(1<<26)%e,i=0,n=this.length-1;n>=0;n--)i=(t*i+(0|this.words[n]))%e;return i},n.prototype.idivn=function(e){r(e<=67108863);for(var t=0,i=this.length-1;i>=0;i--){var n=(0|this.words[i])+67108864*t;this.words[i]=n/e|0,t=n%e}return this.strip()},n.prototype.divn=function(e){return this.clone().idivn(e)},n.prototype.egcd=function(e){r(0===e.negative),r(!e.isZero());var t=this,i=e.clone();t=0!==t.negative?t.umod(e):t.clone();for(var s=new n(1),a=new n(0),o=new n(0),c=new n(1),h=0;t.isEven()&&i.isEven();)t.iushrn(1),i.iushrn(1),++h;for(var u=i.clone(),l=t.clone();!t.isZero();){for(var f=0,y=1;0==(t.words[0]&y)&&f<26;++f,y<<=1);if(f>0)for(t.iushrn(f);f-- >0;)(s.isOdd()||a.isOdd())&&(s.iadd(u),a.isub(l)),s.iushrn(1),a.iushrn(1);for(var d=0,p=1;0==(i.words[0]&p)&&d<26;++d,p<<=1);if(d>0)for(i.iushrn(d);d-- >0;)(o.isOdd()||c.isOdd())&&(o.iadd(u),c.isub(l)),o.iushrn(1),c.iushrn(1);t.cmp(i)>=0?(t.isub(i),s.isub(o),a.isub(c)):(i.isub(t),o.isub(s),c.isub(a))}return{a:o,b:c,gcd:i.iushln(h)}},n.prototype._invmp=function(e){r(0===e.negative),r(!e.isZero());var t=this,i=e.clone();t=0!==t.negative?t.umod(e):t.clone();for(var s,a=new n(1),o=new n(0),c=i.clone();t.cmpn(1)>0&&i.cmpn(1)>0;){for(var h=0,u=1;0==(t.words[0]&u)&&h<26;++h,u<<=1);if(h>0)for(t.iushrn(h);h-- >0;)a.isOdd()&&a.iadd(c),a.iushrn(1);for(var l=0,f=1;0==(i.words[0]&f)&&l<26;++l,f<<=1);if(l>0)for(i.iushrn(l);l-- >0;)o.isOdd()&&o.iadd(c),o.iushrn(1);t.cmp(i)>=0?(t.isub(i),a.isub(o)):(i.isub(t),o.isub(a))}return(s=0===t.cmpn(1)?a:o).cmpn(0)<0&&s.iadd(e),s},n.prototype.gcd=function(e){if(this.isZero())return e.abs();if(e.isZero())return this.abs();var t=this.clone(),r=e.clone();t.negative=0,r.negative=0;for(var i=0;t.isEven()&&r.isEven();i++)t.iushrn(1),r.iushrn(1);for(;;){for(;t.isEven();)t.iushrn(1);for(;r.isEven();)r.iushrn(1);var n=t.cmp(r);if(n<0){var s=t;t=r,r=s}else if(0===n||0===r.cmpn(1))break;t.isub(r)}return r.iushln(i)},n.prototype.invm=function(e){return this.egcd(e).a.umod(e)},n.prototype.isEven=function(){return 0==(1&this.words[0])},n.prototype.isOdd=function(){return 1==(1&this.words[0])},n.prototype.andln=function(e){return this.words[0]&e},n.prototype.bincn=function(e){r("number"==typeof e);var t=e%26,i=(e-t)/26,n=1<<t;if(this.length<=i)return this._expand(i+1),this.words[i]|=n,this;for(var s=n,a=i;0!==s&&a<this.length;a++){var o=0|this.words[a];s=(o+=s)>>>26,o&=67108863,this.words[a]=o}return 0!==s&&(this.words[a]=s,this.length++),this},n.prototype.isZero=function(){return 1===this.length&&0===this.words[0]},n.prototype.cmpn=function(e){var t,i=e<0;if(0!==this.negative&&!i)return-1;if(0===this.negative&&i)return 1;if(this.strip(),this.length>1)t=1;else{i&&(e=-e),r(e<=67108863,"Number is too big");var n=0|this.words[0];t=n===e?0:n<e?-1:1}return 0!==this.negative?0|-t:t},n.prototype.cmp=function(e){if(0!==this.negative&&0===e.negative)return-1;if(0===this.negative&&0!==e.negative)return 1;var t=this.ucmp(e);return 0!==this.negative?0|-t:t},n.prototype.ucmp=function(e){if(this.length>e.length)return 1;if(this.length<e.length)return-1;for(var t=0,r=this.length-1;r>=0;r--){var i=0|this.words[r],n=0|e.words[r];if(i!==n){i<n?t=-1:i>n&&(t=1);break}}return t},n.prototype.gtn=function(e){return 1===this.cmpn(e)},n.prototype.gt=function(e){return 1===this.cmp(e)},n.prototype.gten=function(e){return this.cmpn(e)>=0},n.prototype.gte=function(e){return this.cmp(e)>=0},n.prototype.ltn=function(e){return-1===this.cmpn(e)},n.prototype.lt=function(e){return-1===this.cmp(e)},n.prototype.lten=function(e){return this.cmpn(e)<=0},n.prototype.lte=function(e){return this.cmp(e)<=0},n.prototype.eqn=function(e){return 0===this.cmpn(e)},n.prototype.eq=function(e){return 0===this.cmp(e)},n.red=function(e){return new v(e)},n.prototype.toRed=function(e){return r(!this.red,"Already a number in reduction context"),r(0===this.negative,"red works only with positives"),e.convertTo(this)._forceRed(e)},n.prototype.fromRed=function(){return r(this.red,"fromRed works only with numbers in reduction context"),this.red.convertFrom(this)},n.prototype._forceRed=function(e){return this.red=e,this},n.prototype.forceRed=function(e){return r(!this.red,"Already a number in reduction context"),this._forceRed(e)},n.prototype.redAdd=function(e){return r(this.red,"redAdd works only with red numbers"),this.red.add(this,e)},n.prototype.redIAdd=function(e){return r(this.red,"redIAdd works only with red numbers"),this.red.iadd(this,e)},n.prototype.redSub=function(e){return r(this.red,"redSub works only with red numbers"),this.red.sub(this,e)},n.prototype.redISub=function(e){return r(this.red,"redISub works only with red numbers"),this.red.isub(this,e)},n.prototype.redShl=function(e){return r(this.red,"redShl works only with red numbers"),this.red.shl(this,e)},n.prototype.redMul=function(e){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,e),this.red.mul(this,e)},n.prototype.redIMul=function(e){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,e),this.red.imul(this,e)},n.prototype.redSqr=function(){return r(this.red,"redSqr works only with red numbers"),this.red._verify1(this),this.red.sqr(this)},n.prototype.redISqr=function(){return r(this.red,"redISqr works only with red numbers"),this.red._verify1(this),this.red.isqr(this)},n.prototype.redSqrt=function(){return r(this.red,"redSqrt works only with red numbers"),this.red._verify1(this),this.red.sqrt(this)},n.prototype.redInvm=function(){return r(this.red,"redInvm works only with red numbers"),this.red._verify1(this),this.red.invm(this)},n.prototype.redNeg=function(){return r(this.red,"redNeg works only with red numbers"),this.red._verify1(this),this.red.neg(this)},n.prototype.redPow=function(e){return r(this.red&&!e.red,"redPow(normalNum)"),this.red._verify1(this),this.red.pow(this,e)};var p={k256:null,p224:null,p192:null,p25519:null};function g(e,t){this.name=e,this.p=new n(t,16),this.n=this.p.bitLength(),this.k=new n(1).iushln(this.n).isub(this.p),this.tmp=this._tmp()}function m(){g.call(this,"k256","ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f")}function w(){g.call(this,"p224","ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001")}function A(){g.call(this,"p192","ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff")}function b(){g.call(this,"25519","7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed")}function v(e){if("string"==typeof e){var t=n._prime(e);this.m=t.p,this.prime=t}else r(e.gtn(1),"modulus must be greater than 1"),this.m=e,this.prime=null}function E(e){v.call(this,e),this.shift=this.m.bitLength(),this.shift%26!=0&&(this.shift+=26-this.shift%26),this.r=new n(1).iushln(this.shift),this.r2=this.imod(this.r.sqr()),this.rinv=this.r._invmp(this.m),this.minv=this.rinv.mul(this.r).isubn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}g.prototype._tmp=function(){var e=new n(null);return e.words=Array(Math.ceil(this.n/13)),e},g.prototype.ireduce=function(e){var t,r=e;do{this.split(r,this.tmp),t=(r=(r=this.imulK(r)).iadd(this.tmp)).bitLength()}while(t>this.n);var i=t<this.n?-1:r.ucmp(this.p);return 0===i?(r.words[0]=0,r.length=1):i>0?r.isub(this.p):r.strip(),r},g.prototype.split=function(e,t){e.iushrn(this.n,0,t)},g.prototype.imulK=function(e){return e.imul(this.k)},i(m,g),m.prototype.split=function(e,t){for(var r=4194303,i=Math.min(e.length,9),n=0;n<i;n++)t.words[n]=e.words[n];if(t.length=i,e.length<=9)return e.words[0]=0,void(e.length=1);var s=e.words[9];for(t.words[t.length++]=s&r,n=10;n<e.length;n++){var a=0|e.words[n];e.words[n-10]=(a&r)<<4|s>>>22,s=a}s>>>=22,e.words[n-10]=s,0===s&&e.length>10?e.length-=10:e.length-=9},m.prototype.imulK=function(e){e.words[e.length]=0,e.words[e.length+1]=0,e.length+=2;for(var t=0,r=0;r<e.length;r++){var i=0|e.words[r];t+=977*i,e.words[r]=67108863&t,t=64*i+(t/67108864|0)}return 0===e.words[e.length-1]&&(e.length--,0===e.words[e.length-1]&&e.length--),e},i(w,g),i(A,g),i(b,g),b.prototype.imulK=function(e){for(var t=0,r=0;r<e.length;r++){var i=19*(0|e.words[r])+t,n=67108863&i;i>>>=26,e.words[r]=n,t=i}return 0!==t&&(e.words[e.length++]=t),e},n._prime=function(e){if(p[e])return p[e];var t;if("k256"===e)t=new m;else if("p224"===e)t=new w;else if("p192"===e)t=new A;else{if("p25519"!==e)throw Error("Unknown prime "+e);t=new b}return p[e]=t,t},v.prototype._verify1=function(e){r(0===e.negative,"red works only with positives"),r(e.red,"red works only with red numbers")},v.prototype._verify2=function(e,t){r(0==(e.negative|t.negative),"red works only with positives"),r(e.red&&e.red===t.red,"red works only with red numbers")},v.prototype.imod=function(e){return this.prime?this.prime.ireduce(e)._forceRed(this):e.umod(this.m)._forceRed(this)},v.prototype.neg=function(e){return e.isZero()?e.clone():this.m.sub(e)._forceRed(this)},v.prototype.add=function(e,t){this._verify2(e,t);var r=e.add(t);return r.cmp(this.m)>=0&&r.isub(this.m),r._forceRed(this)},v.prototype.iadd=function(e,t){this._verify2(e,t);var r=e.iadd(t);return r.cmp(this.m)>=0&&r.isub(this.m),r},v.prototype.sub=function(e,t){this._verify2(e,t);var r=e.sub(t);return r.cmpn(0)<0&&r.iadd(this.m),r._forceRed(this)},v.prototype.isub=function(e,t){this._verify2(e,t);var r=e.isub(t);return r.cmpn(0)<0&&r.iadd(this.m),r},v.prototype.shl=function(e,t){return this._verify1(e),this.imod(e.ushln(t))},v.prototype.imul=function(e,t){return this._verify2(e,t),this.imod(e.imul(t))},v.prototype.mul=function(e,t){return this._verify2(e,t),this.imod(e.mul(t))},v.prototype.isqr=function(e){return this.imul(e,e.clone())},v.prototype.sqr=function(e){return this.mul(e,e)},v.prototype.sqrt=function(e){if(e.isZero())return e.clone();var t=this.m.andln(3);if(r(t%2==1),3===t){var i=this.m.add(new n(1)).iushrn(2);return this.pow(e,i)}for(var s=this.m.subn(1),a=0;!s.isZero()&&0===s.andln(1);)a++,s.iushrn(1);r(!s.isZero());var o=new n(1).toRed(this),c=o.redNeg(),h=this.m.subn(1).iushrn(1),u=this.m.bitLength();for(u=new n(2*u*u).toRed(this);0!==this.pow(u,h).cmp(c);)u.redIAdd(c);for(var l=this.pow(u,s),f=this.pow(e,s.addn(1).iushrn(1)),y=this.pow(e,s),d=a;0!==y.cmp(o);){for(var p=y,g=0;0!==p.cmp(o);g++)p=p.redSqr();r(g<d);var m=this.pow(l,new n(1).iushln(d-g-1));f=f.redMul(m),l=m.redSqr(),y=y.redMul(l),d=g}return f},v.prototype.invm=function(e){var t=e._invmp(this.m);return 0!==t.negative?(t.negative=0,this.imod(t).redNeg()):this.imod(t)},v.prototype.pow=function(e,t){if(t.isZero())return new n(1).toRed(this);if(0===t.cmpn(1))return e.clone();var r=Array(16);r[0]=new n(1).toRed(this),r[1]=e;for(var i=2;i<r.length;i++)r[i]=this.mul(r[i-1],e);var s=r[0],a=0,o=0,c=t.bitLength()%26;for(0===c&&(c=26),i=t.length-1;i>=0;i--){for(var h=t.words[i],u=c-1;u>=0;u--){var l=h>>u&1;s!==r[0]&&(s=this.sqr(s)),0!==l||0!==a?(a<<=1,a|=l,(4==++o||0===i&&0===u)&&(s=this.mul(s,r[a]),o=0,a=0)):o=0}c=26}return s},v.prototype.convertTo=function(e){var t=e.umod(this.m);return t===e?t.clone():t},v.prototype.convertFrom=function(e){var t=e.clone();return t.red=null,t},n.mont=function(e){return new E(e)},i(E,v),E.prototype.convertTo=function(e){return this.imod(e.ushln(this.shift))},E.prototype.convertFrom=function(e){var t=this.imod(e.mul(this.rinv));return t.red=null,t},E.prototype.imul=function(e,t){if(e.isZero()||t.isZero())return e.words[0]=0,e.length=1,e;var r=e.imul(t),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),n=r.isub(i).iushrn(this.shift),s=n;return n.cmp(this.m)>=0?s=n.isub(this.m):n.cmpn(0)<0&&(s=n.iadd(this.m)),s._forceRed(this)},E.prototype.mul=function(e,t){if(e.isZero()||t.isZero())return new n(0)._forceRed(this);var r=e.mul(t),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),s=r.isub(i).iushrn(this.shift),a=s;return s.cmp(this.m)>=0?a=s.isub(this.m):s.cmpn(0)<0&&(a=s.iadd(this.m)),a._forceRed(this)},E.prototype.invm=function(e){return this.imod(e._invmp(this.m).mul(this.r2))._forceRed(this)}}(Bo,Ps);var Co=Ds(Bo.exports),Ko=/*#__PURE__*/Object.freeze({__proto__:null,default:Co});class Uo extends ko{constructor(e){if(super(),void 0===e)throw Error("Invalid BigInteger input");const t=("string"==typeof e||e instanceof String)&&e.startsWith("0x");this.value=t?new Co(e.substring(2),16):new Co(e)}clone(){return new Uo(this.value.clone())}iinc(){return this.value.iadd(new Co(1)),this}inc(){return this.clone().iinc()}idec(){return this.value.isub(new Co(1)),this}dec(){return this.clone().idec()}iadd(e){return this.value.iadd(e.value),this}add(e){return this.clone().iadd(e)}isub(e){return this.value.isub(e.value),this}sub(e){return this.clone().isub(e)}imul(e){return this.value.imul(e.value),this}mul(e){return this.clone().imul(e)}imod(e){return this.value=this.value.umod(e.value),this}mod(e){return this.clone().imod(e)}modExp(e,t){const r=t.isEven()?Co.red(t.value):Co.mont(t.value),i=this.clone();return i.value=i.value.toRed(r).redPow(e.value).fromRed(),i}modInv(e){if(!this.gcd(e).isOne())throw Error("Inverse does not exist");return new Uo(this.value.invm(e.value))}idiv(e){return this.value=this.value.div(e.value),this}div(e){return this.clone().idiv(e)}gcd(e){return new Uo(this.value.gcd(e.value))}ileftShift(e){return e.isNegative()?this.irightShift(e.negate()):(this.value.ishln(e.value.toNumber()),this)}leftShift(e){return this.clone().ileftShift(e)}irightShift(e){return e.isNegative()?this.ileftShift(e.negate()):(this.value.ishrn(e.value.toNumber()),this)}rightShift(e){return this.clone().irightShift(e)}ixor(e){return this.value.ixor(e.value),this}xor(e){return this.clone().ixor(e)}ibitwiseAnd(e){return this.value.iand(e.value),this}bitwiseAnd(e){return this.clone().ibitwiseAnd(e)}ibitwiseOr(e){return this.value.ior(e.value),this}equal(e){return this.value.eq(e.value)}lt(e){return this.value.lt(e.value)}lte(e){return this.value.lte(e.value)}gt(e){return this.value.gt(e.value)}gte(e){return this.value.gte(e.value)}isZero(){return this.value.isZero()}isOne(){return this.value.eq(new Co(1))}isNegative(){return this.value.isNeg()}isEven(){return this.value.isEven()}abs(){const e=this.clone();return e.value=e.value.abs(),e}negate(){const e=this.clone();return e.value.ineg(),e}toString(){return this.value.toString()}toNumber(){return this.value.toNumber()}getBit(e){return this.value.testn(e)?1:0}bitLength(){return this.value.bitLength()}byteLength(){return this.value.byteLength()}toUint8Array(e="be",t){return this.value.toArrayLike(Uint8Array,e,t)}}var Po=/*#__PURE__*/Object.freeze({__proto__:null,default:Uo});function Do(e){if(!Number.isSafeInteger(e)||e<0)throw Error("Wrong positive integer: "+e)}function Mo(e,...t){if(!(e instanceof Uint8Array))throw Error("Expected Uint8Array");if(t.length>0&&!t.includes(e.length))throw Error(`Expected Uint8Array of length ${t}, not of length=${e.length}`)}function xo(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Qo(e,t){Mo(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const Ro=o&&"object"==typeof o&&"webcrypto"in o?o.webcrypto:void 0,_o=e=>e instanceof Uint8Array,To=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),Lo=(e,t)=>e<<32-t|e>>>t;
|
|
3
|
-
/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */if(!(68===new Uint8Array(new Uint32Array([287454020]).buffer)[0]))throw Error("Non little-endian hardware is not supported");function
|
|
1
|
+
/*! OpenPGP.js v6.0.0-alpha.1.patch.0 - 2024-03-01 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
|
|
2
|
+
"use strict";const t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var e=require("module"),r=require("node:crypto"),i="undefined"!=typeof document?document.currentScript:null;function n(t){var e=Object.create(null);return t&&Object.keys(t).forEach((function(r){if("default"!==r){var i=Object.getOwnPropertyDescriptor(t,r);Object.defineProperty(e,r,i.get?i:{enumerable:!0,get:function(){return t[r]}})}})),e.default=t,Object.freeze(e)}var s=/*#__PURE__*/n(r);const a=Symbol("doneWritingPromise"),o=Symbol("doneWritingResolve"),c=Symbol("doneWritingReject"),h=Symbol("readingIndex");class u extends Array{constructor(){super(),Object.setPrototypeOf(this,u.prototype),this[a]=new Promise(((t,e)=>{this[o]=t,this[c]=e})),this[a].catch((()=>{}))}}function l(t){return t&&t.getReader&&Array.isArray(t)}function f(t){if(!l(t)){const e=t.getWriter(),r=e.releaseLock;return e.releaseLock=()=>{e.closed.catch((function(){})),r.call(e)},e}this.stream=t}function y(e){if(l(e))return"array";if(t.ReadableStream&&t.ReadableStream.prototype.isPrototypeOf(e))return"web";if(e&&!(t.ReadableStream&&e instanceof t.ReadableStream)&&"function"==typeof e._read&&"object"==typeof e._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!e||!e.getReader)&&"web-like"}function d(t){return Uint8Array.prototype.isPrototypeOf(t)}function p(t){if(1===t.length)return t[0];let e=0;for(let r=0;r<t.length;r++){if(!d(t[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");e+=t[r].length}const r=new Uint8Array(e);let i=0;return t.forEach((function(t){r.set(t,i),i+=t.length})),r}u.prototype.getReader=function(){return void 0===this[h]&&(this[h]=0),{read:async()=>(await this[a],this[h]===this.length?{value:void 0,done:!0}:{value:this[this[h]++],done:!1})}},u.prototype.readToEnd=async function(t){await this[a];const e=t(this.slice(this[h]));return this.length=0,e},u.prototype.clone=function(){const t=new u;return t[a]=this[a].then((()=>{t.push(...this)})),t},f.prototype.write=async function(t){this.stream.push(t)},f.prototype.close=async function(){this.stream[o]()},f.prototype.abort=async function(t){return this.stream[c](t),t},f.prototype.releaseLock=function(){},"object"==typeof t.process&&t.process.versions;const g=new WeakSet,m=Symbol("externalBuffer");function w(t){if(this.stream=t,t[m]&&(this[m]=t[m].slice()),l(t)){const e=t.getReader();return this._read=e.read.bind(e),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(y(t)){const e=t.getReader();return this._read=e.read.bind(e),this._releaseLock=()=>{e.closed.catch((function(){})),e.releaseLock()},void(this._cancel=e.cancel.bind(e))}let e=!1;this._read=async()=>e||g.has(t)?{value:void 0,done:!0}:(e=!0,{value:t,done:!1}),this._releaseLock=()=>{if(e)try{g.add(t)}catch(t){}}}function A(t){return y(t)?t:new ReadableStream({start(e){e.enqueue(t),e.close()}})}function b(t){if(y(t))return t;const e=new u;return(async()=>{const r=_(e);await r.write(t),await r.close()})(),e}function v(t){return t.some((t=>y(t)&&!l(t)))?function(t){t=t.map(A);const e=S((async function(t){await Promise.all(i.map((e=>x(e,t))))}));let r=Promise.resolve();const i=t.map(((i,n)=>C(i,((i,s)=>(r=r.then((()=>E(i,e.writable,{preventClose:n!==t.length-1}))),r)))));return e.readable}(t):t.some((t=>l(t)))?function(t){const e=new u;let r=Promise.resolve();return t.forEach(((i,n)=>(r=r.then((()=>E(i,e,{preventClose:n!==t.length-1}))),r))),e}(t):"string"==typeof t[0]?t.join(""):p(t)}async function E(t,e,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(y(t)&&!l(t)){t=A(t);try{if(t[m]){const r=_(e);for(let e=0;e<t[m].length;e++)await r.ready,await r.write(t[m][e]);r.releaseLock()}await t.pipeTo(e,{preventClose:r,preventAbort:i,preventCancel:n})}catch(t){}return}const s=R(t=b(t)),a=_(e);try{for(;;){await a.ready;const{done:t,value:e}=await s.read();if(t){r||await a.close();break}await a.write(e)}}catch(t){i||await a.abort(t)}finally{s.releaseLock(),a.releaseLock()}}function k(t,e){const r=new TransformStream(e);return E(t,r.writable),r.readable}function S(t){let e,r,i=!1;return{readable:new ReadableStream({start(t){r=t},pull(){e?e():i=!0},cancel:t},{highWaterMark:0}),writable:new WritableStream({write:async function(t){r.enqueue(t),i?i=!1:(await new Promise((t=>{e=t})),e=null)},close:r.close.bind(r),abort:r.error.bind(r)})}}function I(t,e=(()=>{}),r=(()=>{})){if(l(t)){const i=new u;return(async()=>{const n=_(i);try{const i=await M(t),s=e(i),a=r();let o;o=void 0!==s&&void 0!==a?v([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(t){await n.abort(t)}})(),i}if(y(t))return k(t,{async transform(t,r){try{const i=await e(t);void 0!==i&&r.enqueue(i)}catch(t){r.error(t)}},async flush(t){try{const e=await r();void 0!==e&&t.enqueue(e)}catch(e){t.error(e)}}});const i=e(t),n=r();return void 0!==i&&void 0!==n?v([i,n]):void 0!==i?i:n}function C(t,e){if(y(t)&&!l(t)){let r;const i=new TransformStream({start(t){r=t}}),n=E(t,i.writable),s=S((async function(t){r.error(t),await n,await new Promise(setTimeout)}));return e(i.readable,s.writable),s.readable}t=b(t);const r=new u;return e(t,r),r}function B(t,e){let r;const i=C(t,((t,n)=>{const s=R(t);s.remainder=()=>(s.releaseLock(),E(t,n),i),r=e(s)}));return r}function K(t){if(l(t))return t.clone();if(y(t)){const e=function(t){if(l(t))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(y(t)){const e=A(t).tee();return e[0][m]=e[1][m]=t[m],e}return[U(t),U(t)]}(t);return D(t,e[0]),e[1]}return U(t)}function P(t){return l(t)?K(t):y(t)?new ReadableStream({start(e){const r=C(t,(async(t,r)=>{const i=R(t),n=_(r);try{for(;;){await n.ready;const{done:t,value:r}=await i.read();if(t){try{e.close()}catch(t){}return void await n.close()}try{e.enqueue(r)}catch(t){}await n.write(r)}}catch(t){e.error(t),await n.abort(t)}}));D(t,r)}}):U(t)}function D(t,e){Object.entries(Object.getOwnPropertyDescriptors(t.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(e):i.get=i.get.bind(e),Object.defineProperty(t,r,i))}))}function U(t,e=0,r=1/0){if(l(t))throw Error("Not implemented");if(y(t)){if(e>=0&&r>=0){let i=0;return k(t,{transform(t,n){i<r?(i+t.length>=e&&n.enqueue(U(t,Math.max(e-i,0),r-i)),i+=t.length):n.terminate()}})}if(e<0&&(r<0||r===1/0)){let i=[];return I(t,(t=>{t.length>=-e?i=[t]:i.push(t)}),(()=>U(v(i),e,r)))}if(0===e&&r<0){let i;return I(t,(t=>{const n=i?v([i,t]):t;if(n.length>=-r)return i=U(n,r),U(n,e,r);i=n}))}return console.warn(`stream.slice(input, ${e}, ${r}) not implemented efficiently.`),Q((async()=>U(await M(t),e,r)))}return t[m]&&(t=v(t[m].concat([t]))),d(t)?t.subarray(e,r===1/0?t.length:r):t.slice(e,r)}async function M(t,e=v){return l(t)?t.readToEnd(e):y(t)?R(t).readToEnd(e):t}async function x(t,e){if(y(t)){if(t.cancel){const r=await t.cancel(e);return await new Promise(setTimeout),r}if(t.destroy)return t.destroy(e),await new Promise(setTimeout),e}}function Q(t){const e=new u;return(async()=>{const r=_(e);try{await r.write(await t()),await r.close()}catch(t){await r.abort(t)}})(),e}function R(t){return new w(t)}function _(t){return new f(t)}w.prototype.read=async function(){if(this[m]&&this[m].length){return{done:!1,value:this[m].shift()}}return this._read()},w.prototype.releaseLock=function(){this[m]&&(this.stream[m]=this[m]),this._releaseLock()},w.prototype.cancel=function(t){return this._cancel(t)},w.prototype.readLine=async function(){let t,e=[];for(;!t;){let{done:r,value:i}=await this.read();if(i+="",r)return e.length?v(e):void 0;const n=i.indexOf("\n")+1;n&&(t=v(e.concat(i.substr(0,n))),e=[]),n!==i.length&&e.push(i.substr(n))}return this.unshift(...e),t},w.prototype.readByte=async function(){const{done:t,value:e}=await this.read();if(t)return;const r=e[0];return this.unshift(U(e,1)),r},w.prototype.readBytes=async function(t){const e=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return e.length?v(e):void 0;if(e.push(n),r+=n.length,r>=t){const r=v(e);return this.unshift(U(r,t)),U(r,0,t)}}},w.prototype.peekBytes=async function(t){const e=await this.readBytes(t);return this.unshift(e),e},w.prototype.unshift=function(...t){this[m]||(this[m]=[]),1===t.length&&d(t[0])&&this[m].length&&t[0].length&&this[m][0].byteOffset>=t[0].length?this[m][0]=new Uint8Array(this[m][0].buffer,this[m][0].byteOffset-t[0].length,this[m][0].byteLength+t[0].length):this[m].unshift(...t.filter((t=>t&&t.length)))},w.prototype.readToEnd=async function(t=v){const e=[];for(;;){const{done:t,value:r}=await this.read();if(t)break;e.push(r)}return t(e)};const T=Symbol("byValue");var L={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(t,e){if("number"==typeof e&&(e=this.read(t,e)),void 0!==t[e])return t[e];throw Error("Invalid enum value.")},read:function(t,e){if(t[T]||(t[T]=[],Object.entries(t).forEach((([e,r])=>{t[T][r]=e}))),void 0!==t[T][e])return t[T][e];throw Error("Invalid enum value.")}},N={preferredHashAlgorithm:L.hash.sha256,preferredSymmetricAlgorithm:L.symmetric.aes256,preferredCompressionAlgorithm:L.compression.uncompressed,aeadProtect:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:L.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,s2kType:L.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,revocationsExpire:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([L.symmetric.aes128,L.symmetric.aes192,L.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-alpha.1.patch.0",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],useEllipticFallback:!0,rejectHashAlgorithms:new Set([L.hash.md5,L.hash.ripemd]),rejectMessageHashAlgorithms:new Set([L.hash.md5,L.hash.ripemd,L.hash.sha1]),rejectPublicKeyAlgorithms:new Set([L.publicKey.elgamal,L.publicKey.dsa]),rejectCurves:new Set([L.curve.secp256k1]),checkEdDSAFaultySignatures:!0};const O=(()=>{try{return"development"===process.env.NODE_ENV}catch(t){}return!1})(),F={isString:function(t){return"string"==typeof t||t instanceof String},nodeRequire:e.createRequire("undefined"==typeof document?require("url").pathToFileURL(__filename).href:i&&i.src||new URL("openpgp.min.cjs",document.baseURI).href),isArray:function(t){return t instanceof Array},isUint8Array:d,isStream:y,getBigInteger:async function(){if("undefined"!=typeof BigInt){const{default:t}=await Promise.resolve().then((function(){return Ja}));return t}{const{default:t}=await Promise.resolve().then((function(){return Xa}));return t}},getNobleCurve:async(t,e)=>{if(!N.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return eu}));switch(t){case L.publicKey.ecdh:case L.publicKey.ecdsa:{const t=r.get(e);if(!t)throw Error("Unsupported curve");return t}case L.publicKey.x448:return r.get("x448");case L.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(t){let e=0;for(let r=0;r<t.length;r++)e+=256**r*t[t.length-1-r];return e},writeNumber:function(t,e){const r=new Uint8Array(e);for(let i=0;i<e;i++)r[i]=t>>8*(e-i-1)&255;return r},readDate:function(t){const e=F.readNumber(t);return new Date(1e3*e)},writeDate:function(t){const e=Math.floor(t.getTime()/1e3);return F.writeNumber(e,4)},normalizeDate:function(t=Date.now()){return null===t||t===1/0?t:new Date(1e3*Math.floor(+t/1e3))},readMPI:function(t){const e=(t[0]<<8|t[1])+7>>>3;return F.readExactSubarray(t,2,2+e)},readExactSubarray:function(t,e,r){if(t.length<r-e)throw Error("Input array too short");return t.subarray(e,r)},leftPad(t,e){const r=new Uint8Array(e),i=e-t.length;return r.set(t,i),r},uint8ArrayToMPI:function(t){const e=F.uint8ArrayBitLength(t);if(0===e)throw Error("Zero MPI");const r=t.subarray(t.length-Math.ceil(e/8)),i=new Uint8Array([(65280&e)>>8,255&e]);return F.concatUint8Array([i,r])},uint8ArrayBitLength:function(t){let e;for(e=0;e<t.length&&0===t[e];e++);if(e===t.length)return 0;const r=t.subarray(e);return 8*(r.length-1)+F.nbits(r[0])},hexToUint8Array:function(t){const e=new Uint8Array(t.length>>1);for(let r=0;r<t.length>>1;r++)e[r]=parseInt(t.substr(r<<1,2),16);return e},uint8ArrayToHex:function(t){const e="0123456789abcdef";let r="";return t.forEach((t=>{r+=e[t>>4]+e[15&t]})),r},stringToUint8Array:function(t){return I(t,(t=>{if(!F.isString(t))throw Error("stringToUint8Array: Data must be in the form of a string");const e=new Uint8Array(t.length);for(let r=0;r<t.length;r++)e[r]=t.charCodeAt(r);return e}))},uint8ArrayToString:function(t){const e=[],r=16384,i=(t=new Uint8Array(t)).length;for(let n=0;n<i;n+=r)e.push(String.fromCharCode.apply(String,t.subarray(n,n+r<i?n+r:i)));return e.join("")},encodeUTF8:function(t){const e=new TextEncoder("utf-8");function r(t,r=!1){return e.encode(t,{stream:!r})}return I(t,r,(()=>r("",!0)))},decodeUTF8:function(t){const e=new TextDecoder("utf-8");function r(t,r=!1){return e.decode(t,{stream:!r})}return I(t,r,(()=>r(new Uint8Array,!0)))},concat:v,concatUint8Array:p,equalsUint8Array:function(t,e){if(!F.isUint8Array(t)||!F.isUint8Array(e))throw Error("Data must be in the form of a Uint8Array");if(t.length!==e.length)return!1;for(let r=0;r<t.length;r++)if(t[r]!==e[r])return!1;return!0},writeChecksum:function(t){let e=0;for(let r=0;r<t.length;r++)e=e+t[r]&65535;return F.writeNumber(e,2)},printDebug:function(t){O&&console.log("[OpenPGP.js debug]",t)},printDebugError:function(t){O&&console.error("[OpenPGP.js debug]",t)},nbits:function(t){let e=1,r=t>>>16;return 0!==r&&(t=r,e+=16),r=t>>8,0!==r&&(t=r,e+=8),r=t>>4,0!==r&&(t=r,e+=4),r=t>>2,0!==r&&(t=r,e+=2),r=t>>1,0!==r&&(t=r,e+=1),e},double:function(t){const e=new Uint8Array(t.length),r=t.length-1;for(let i=0;i<r;i++)e[i]=t[i]<<1^t[i+1]>>7;return e[r]=t[r]<<1^135*(t[0]>>7),e},shiftRight:function(t,e){if(e)for(let r=t.length-1;r>=0;r--)t[r]>>=e,r>0&&(t[r]|=t[r-1]<<8-e);return t},getWebCrypto:function(){const e=void 0!==t&&t.crypto&&t.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!e)throw Error("The WebCrypto API is not available");return e},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(t){if(!F.isString(t))return!1;return/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/.test(t)},canonicalizeEOL:function(t){let e=!1;return I(t,(t=>{let r;e&&(t=F.concatUint8Array([new Uint8Array([13]),t])),13===t[t.length-1]?(e=!0,t=t.subarray(0,-1)):e=!1;const i=[];for(let e=0;r=t.indexOf(10,e)+1,r;e=r)13!==t[r-2]&&i.push(r);if(!i.length)return t;const n=new Uint8Array(t.length+i.length);let s=0;for(let e=0;e<i.length;e++){const r=t.subarray(i[e-1]||0,i[e]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(t.subarray(i[i.length-1]||0),s),n}),(()=>e?new Uint8Array([13]):void 0))},nativeEOL:function(t){let e=!1;return I(t,(t=>{let r;13===(t=e&&10!==t[0]?F.concatUint8Array([new Uint8Array([13]),t]):new Uint8Array(t))[t.length-1]?(e=!0,t=t.subarray(0,-1)):e=!1;let i=0;for(let e=0;e!==t.length;e=r){r=t.indexOf(13,e)+1,r||(r=t.length);const n=r-(10===t[r]?1:0);e&&t.copyWithin(i,e,n),i+=n-e}return t.subarray(0,i)}),(()=>e?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(t){return t.split("\n").map((t=>{let e=t.length-1;for(;e>=0&&(" "===t[e]||"\t"===t[e]||"\r"===t[e]);e--);return t.substr(0,e+1)})).join("\n")},wrapError:function(t,e){if(!e)return Error(t);try{e.message=t+": "+e.message}catch(t){}return e},constructAllowedPackets:function(t){const e={};return t.forEach((t=>{if(!t.tag)throw Error("Invalid input: expected a packet class");e[t.tag]=t})),e},anyPromise:function(t){return new Promise((async(e,r)=>{let i;await Promise.all(t.map((async t=>{try{e(await t)}catch(t){i=t}}))),r(i)}))},selectUint8Array:function(t,e,r){const i=Math.max(e.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=e[i]&256-t|r[i]&255+t,s+=t&i<e.length|1-t&i<r.length;return n.subarray(0,s)},selectUint8:function(t,e,r){return e&256-t|r&255+t},isAES:function(t){return t===L.symmetric.aes128||t===L.symmetric.aes192||t===L.symmetric.aes256}},H=F.getNodeBuffer();let z,G;function q(t){let e=new Uint8Array;return I(t,(t=>{e=F.concatUint8Array([e,t]);const r=[],i=Math.floor(e.length/45),n=45*i,s=z(e.subarray(0,n));for(let t=0;t<i;t++)r.push(s.substr(60*t,60)),r.push("\n");return e=e.subarray(n),r.join("")}),(()=>e.length?z(e)+"\n":""))}function j(t){let e="";return I(t,(t=>{e+=t;let r=0;const i=[" ","\t","\r","\n"];for(let t=0;t<i.length;t++){const n=i[t];for(let t=e.indexOf(n);-1!==t;t=e.indexOf(n,t+1))r++}let n=e.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(e[n])&&r--;const s=G(e.substr(0,n));return e=e.substr(n),s}),(()=>G(e)))}function V(t){return j(t.replace(/-/g,"+").replace(/_/g,"/"))}function Z(t,e){let r=q(t).replace(/[\r\n]/g,"");return e&&(r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,"")),r}function J(t){const e=t.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!e)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(e[1])?L.armor.multipartSection:/MESSAGE, PART \d+/.test(e[1])?L.armor.multipartLast:/SIGNED MESSAGE/.test(e[1])?L.armor.signed:/MESSAGE/.test(e[1])?L.armor.message:/PUBLIC KEY BLOCK/.test(e[1])?L.armor.publicKey:/PRIVATE KEY BLOCK/.test(e[1])?L.armor.privateKey:/SIGNATURE/.test(e[1])?L.armor.signature:void 0}function Y(t,e){let r="";return e.showVersion&&(r+="Version: "+e.versionString+"\n"),e.showComment&&(r+="Comment: "+e.commentString+"\n"),t&&(r+="Comment: "+t+"\n"),r+="\n",r}function W(t){for(let e=0;e<t.length;e++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(t[e])||F.printDebugError(Error("Improperly formatted armor header: "+t[e])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(t[e])||F.printDebugError(Error("Unknown header: "+t[e]))}function $(t){let e=t;const r=t.lastIndexOf("=");return r>=0&&r!==t.length-1&&(e=t.slice(0,r)),e}function X(t){return new Promise((async(e,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=j(C(t,(async(t,f)=>{const y=R(t);try{for(;;){let t=await y.readLine();if(void 0===t)throw Error("Misformed armored text");if(t=F.removeTrailingSpaces(t.replace(/[\r\n]/g,"")),s)if(o)c||s!==L.armor.signed||(i.test(t)?(u=u.join("\r\n"),c=!0,W(h),h=[],o=!1):u.push(t.replace(/^- /,"")));else if(i.test(t)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(t)){if(W(h),o=!0,c||s!==L.armor.signed){e({text:u,data:l,headers:a,type:s});break}}else h.push(t);else i.test(t)&&(s=J(t))}}catch(t){return void r(t)}const d=_(f);try{for(;;){await d.ready;const{done:t,value:e}=await y.read();if(t)throw Error("Misformed armored text");const r=e+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let t=await y.readToEnd();t.length||(t=""),t=r+t,t=F.removeTrailingSpaces(t.replace(/\r/g,""));const e=t.split(i);if(1===e.length)throw Error("Misformed armored text");const n=$(e[0].slice(0,-1));await d.write(n);break}await d.write(r)}await d.ready,await d.close()}catch(t){await d.abort(t)}})))}catch(t){r(t)}})).then((async t=>(l(t.data)&&(t.data=await M(t.data)),t)))}function tt(t,e,r,i,n,s=N){let a,o;t===L.armor.signed&&(a=e.text,o=e.hash,e=e.data);const c=[];switch(t){case L.armor.multipartSection:c.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case L.armor.multipartLast:c.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case L.armor.signed:c.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),c.push(o?`Hash: ${o}\n\n`:"\n"),c.push(a.replace(/^-/gm,"- -")),c.push("\n-----BEGIN PGP SIGNATURE-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP SIGNATURE-----\n");break;case L.armor.message:c.push("-----BEGIN PGP MESSAGE-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP MESSAGE-----\n");break;case L.armor.publicKey:c.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case L.armor.privateKey:c.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case L.armor.signature:c.push("-----BEGIN PGP SIGNATURE-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP SIGNATURE-----\n")}return F.concat(c)}async function et(t){switch(t){case L.symmetric.aes128:case L.symmetric.aes192:case L.symmetric.aes256:throw Error("Not a legacy cipher");case L.symmetric.cast5:case L.symmetric.blowfish:case L.symmetric.twofish:case L.symmetric.tripledes:{const{legacyCiphers:e}=await Promise.resolve().then((function(){return gu})),r=e.get(t);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function rt(t){switch(t){case L.symmetric.aes128:case L.symmetric.aes192:case L.symmetric.aes256:case L.symmetric.twofish:return 16;case L.symmetric.blowfish:case L.symmetric.cast5:case L.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function it(t){switch(t){case L.symmetric.aes128:case L.symmetric.blowfish:case L.symmetric.cast5:return 16;case L.symmetric.aes192:case L.symmetric.tripledes:return 24;case L.symmetric.aes256:case L.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function nt(t){return{keySize:it(t),blockSize:rt(t)}}H?(z=t=>H.from(t).toString("base64"),G=t=>{const e=H.from(t,"base64");return new Uint8Array(e.buffer,e.byteOffset,e.byteLength)}):(z=t=>btoa(F.uint8ArrayToString(t)),G=t=>F.stringToUint8Array(atob(t)));var st=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:nt,getLegacyCipher:et});function at(t,e){let r=t[0],i=t[1],n=t[2],s=t[3];r=ct(r,i,n,s,e[0],7,-680876936),s=ct(s,r,i,n,e[1],12,-389564586),n=ct(n,s,r,i,e[2],17,606105819),i=ct(i,n,s,r,e[3],22,-1044525330),r=ct(r,i,n,s,e[4],7,-176418897),s=ct(s,r,i,n,e[5],12,1200080426),n=ct(n,s,r,i,e[6],17,-1473231341),i=ct(i,n,s,r,e[7],22,-45705983),r=ct(r,i,n,s,e[8],7,1770035416),s=ct(s,r,i,n,e[9],12,-1958414417),n=ct(n,s,r,i,e[10],17,-42063),i=ct(i,n,s,r,e[11],22,-1990404162),r=ct(r,i,n,s,e[12],7,1804603682),s=ct(s,r,i,n,e[13],12,-40341101),n=ct(n,s,r,i,e[14],17,-1502002290),i=ct(i,n,s,r,e[15],22,1236535329),r=ht(r,i,n,s,e[1],5,-165796510),s=ht(s,r,i,n,e[6],9,-1069501632),n=ht(n,s,r,i,e[11],14,643717713),i=ht(i,n,s,r,e[0],20,-373897302),r=ht(r,i,n,s,e[5],5,-701558691),s=ht(s,r,i,n,e[10],9,38016083),n=ht(n,s,r,i,e[15],14,-660478335),i=ht(i,n,s,r,e[4],20,-405537848),r=ht(r,i,n,s,e[9],5,568446438),s=ht(s,r,i,n,e[14],9,-1019803690),n=ht(n,s,r,i,e[3],14,-187363961),i=ht(i,n,s,r,e[8],20,1163531501),r=ht(r,i,n,s,e[13],5,-1444681467),s=ht(s,r,i,n,e[2],9,-51403784),n=ht(n,s,r,i,e[7],14,1735328473),i=ht(i,n,s,r,e[12],20,-1926607734),r=ut(r,i,n,s,e[5],4,-378558),s=ut(s,r,i,n,e[8],11,-2022574463),n=ut(n,s,r,i,e[11],16,1839030562),i=ut(i,n,s,r,e[14],23,-35309556),r=ut(r,i,n,s,e[1],4,-1530992060),s=ut(s,r,i,n,e[4],11,1272893353),n=ut(n,s,r,i,e[7],16,-155497632),i=ut(i,n,s,r,e[10],23,-1094730640),r=ut(r,i,n,s,e[13],4,681279174),s=ut(s,r,i,n,e[0],11,-358537222),n=ut(n,s,r,i,e[3],16,-722521979),i=ut(i,n,s,r,e[6],23,76029189),r=ut(r,i,n,s,e[9],4,-640364487),s=ut(s,r,i,n,e[12],11,-421815835),n=ut(n,s,r,i,e[15],16,530742520),i=ut(i,n,s,r,e[2],23,-995338651),r=lt(r,i,n,s,e[0],6,-198630844),s=lt(s,r,i,n,e[7],10,1126891415),n=lt(n,s,r,i,e[14],15,-1416354905),i=lt(i,n,s,r,e[5],21,-57434055),r=lt(r,i,n,s,e[12],6,1700485571),s=lt(s,r,i,n,e[3],10,-1894986606),n=lt(n,s,r,i,e[10],15,-1051523),i=lt(i,n,s,r,e[1],21,-2054922799),r=lt(r,i,n,s,e[8],6,1873313359),s=lt(s,r,i,n,e[15],10,-30611744),n=lt(n,s,r,i,e[6],15,-1560198380),i=lt(i,n,s,r,e[13],21,1309151649),r=lt(r,i,n,s,e[4],6,-145523070),s=lt(s,r,i,n,e[11],10,-1120210379),n=lt(n,s,r,i,e[2],15,718787259),i=lt(i,n,s,r,e[9],21,-343485551),t[0]=pt(r,t[0]),t[1]=pt(i,t[1]),t[2]=pt(n,t[2]),t[3]=pt(s,t[3])}function ot(t,e,r,i,n,s){return e=pt(pt(e,t),pt(i,s)),pt(e<<n|e>>>32-n,r)}function ct(t,e,r,i,n,s,a){return ot(e&r|~e&i,t,e,n,s,a)}function ht(t,e,r,i,n,s,a){return ot(e&i|r&~i,t,e,n,s,a)}function ut(t,e,r,i,n,s,a){return ot(e^r^i,t,e,n,s,a)}function lt(t,e,r,i,n,s,a){return ot(r^(e|~i),t,e,n,s,a)}function ft(t){const e=[];let r;for(r=0;r<64;r+=4)e[r>>2]=t.charCodeAt(r)+(t.charCodeAt(r+1)<<8)+(t.charCodeAt(r+2)<<16)+(t.charCodeAt(r+3)<<24);return e}const yt="0123456789abcdef".split("");function dt(t){let e="",r=0;for(;r<4;r++)e+=yt[t>>8*r+4&15]+yt[t>>8*r&15];return e}function pt(t,e){return t+e&4294967295}const gt=F.getWebCrypto(),mt=F.getNodeCrypto(),wt=mt&&mt.getHashes();function At(t){if(mt&&wt.includes(t))return async function(e){const r=mt.createHash(t);return I(e,(t=>{r.update(t)}),(()=>new Uint8Array(r.digest())))}}function bt(t,e){const r=async()=>{const{nobleHashes:e}=await Promise.resolve().then((function(){return Lu})),r=e.get(t);if(!r)throw Error("Unsupported hash");return r};return async function(t){if(l(t)&&(t=await M(t)),F.isStream(t)){const e=(await r()).create();return I(t,(t=>{e.update(t)}),(()=>e.digest()))}if(gt&&e)return new Uint8Array(await gt.digest(e,t));return(await r())(t)}}var vt={md5:At("md5")||async function(t){const e=function(t){const e=t.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=t.length;i+=64)at(r,ft(t.substring(i-64,i)));t=t.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<t.length;i++)n[i>>2]|=t.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(at(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*e,at(r,n),r}(F.uint8ArrayToString(t));return F.hexToUint8Array(function(t){for(let e=0;e<t.length;e++)t[e]=dt(t[e]);return t.join("")}(e))},sha1:At("sha1")||bt("sha1","SHA-1"),sha224:At("sha224")||bt("sha224"),sha256:At("sha256")||bt("sha256","SHA-256"),sha384:At("sha384")||bt("sha384","SHA-384"),sha512:At("sha512")||bt("sha512","SHA-512"),ripemd:At("ripemd160")||bt("ripemd160"),sha3_256:At("sha3-256")||bt("sha3_256"),sha3_512:At("sha3-512")||bt("sha3_512"),digest:function(t,e){switch(t){case L.hash.md5:return this.md5(e);case L.hash.sha1:return this.sha1(e);case L.hash.ripemd:return this.ripemd(e);case L.hash.sha256:return this.sha256(e);case L.hash.sha384:return this.sha384(e);case L.hash.sha512:return this.sha512(e);case L.hash.sha224:return this.sha224(e);case L.hash.sha3_256:return this.sha3_256(e);case L.hash.sha3_512:return this.sha3_512(e);default:throw Error("Unsupported hash function")}},getHashByteLength:function(t){switch(t){case L.hash.md5:return 16;case L.hash.sha1:case L.hash.ripemd:return 20;case L.hash.sha256:return 32;case L.hash.sha384:return 48;case L.hash.sha512:return 64;case L.hash.sha224:return 28;case L.hash.sha3_256:return 32;case L.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(t){switch(t){case L.hash.md5:case L.hash.sha1:case L.hash.ripemd:case L.hash.sha224:case L.hash.sha256:return 64;case L.hash.sha384:case L.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}},Et=function(){var t,e,r=!1;function i(r,i){var n=t[(e[r]+e[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=t[255-e[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){t=[],e=[];var i,n,s=1;for(i=0;i<255;i++)t[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=t[i],e[t[i]]=i;t[255]=t[0],e[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var f=1;f<4;f++)a[f][u]=a[f-1][u]>>>8|a[f-1][u]<<24,o[f][l]=o[f-1][l]>>>8|o[f-1][l]<<24}c=!0}var u=function(t,e){c||h();var r=new Uint32Array(e);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(t,e,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0,b=0,v=0,E=0,k=0;var S=new t.Uint32Array(r),I=new t.Uint8Array(r);function C(t,e,r,o,c,h,u,l){t=t|0;e=e|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0;f=r|0x400,y=r|0x800,d=r|0xc00;c=c^S[(t|0)>>2],h=h^S[(t|4)>>2],u=u^S[(t|8)>>2],l=l^S[(t|12)>>2];for(A=16;(A|0)<=o<<4;A=A+16|0){p=S[(r|c>>22&1020)>>2]^S[(f|h>>14&1020)>>2]^S[(y|u>>6&1020)>>2]^S[(d|l<<2&1020)>>2]^S[(t|A|0)>>2],g=S[(r|h>>22&1020)>>2]^S[(f|u>>14&1020)>>2]^S[(y|l>>6&1020)>>2]^S[(d|c<<2&1020)>>2]^S[(t|A|4)>>2],m=S[(r|u>>22&1020)>>2]^S[(f|l>>14&1020)>>2]^S[(y|c>>6&1020)>>2]^S[(d|h<<2&1020)>>2]^S[(t|A|8)>>2],w=S[(r|l>>22&1020)>>2]^S[(f|c>>14&1020)>>2]^S[(y|h>>6&1020)>>2]^S[(d|u<<2&1020)>>2]^S[(t|A|12)>>2];c=p,h=g,u=m,l=w}i=S[(e|c>>22&1020)>>2]<<24^S[(e|h>>14&1020)>>2]<<16^S[(e|u>>6&1020)>>2]<<8^S[(e|l<<2&1020)>>2]^S[(t|A|0)>>2],n=S[(e|h>>22&1020)>>2]<<24^S[(e|u>>14&1020)>>2]<<16^S[(e|l>>6&1020)>>2]<<8^S[(e|c<<2&1020)>>2]^S[(t|A|4)>>2],s=S[(e|u>>22&1020)>>2]<<24^S[(e|l>>14&1020)>>2]<<16^S[(e|c>>6&1020)>>2]<<8^S[(e|h<<2&1020)>>2]^S[(t|A|8)>>2],a=S[(e|l>>22&1020)>>2]<<24^S[(e|c>>14&1020)>>2]<<16^S[(e|h>>6&1020)>>2]<<8^S[(e|u<<2&1020)>>2]^S[(t|A|12)>>2]}function B(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;C(0x0000,0x0800,0x1000,k,t,e,r,i)}function K(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;var s=0;C(0x0400,0x0c00,0x2000,k,t,i,r,e);s=n,n=a,a=s}function P(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o^t,c^e,h^r,u^l);o=i,c=n,h=s,u=a}function D(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;var f=0;C(0x0400,0x0c00,0x2000,k,t,l,r,e);f=n,n=a,a=f;i=i^o,n=n^c,s=s^h,a=a^u;o=t,c=e,h=r,u=l}function U(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);o=i=i^t,c=n=n^e,h=s=s^r,u=a=a^l}function M(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);i=i^t,n=n^e,s=s^r,a=a^l;o=t,c=e,h=r,u=l}function x(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);o=i,c=n,h=s,u=a;i=i^t,n=n^e,s=s^r,a=a^l}function Q(t,e,r,o){t=t|0;e=e|0;r=r|0;o=o|0;C(0x0000,0x0800,0x1000,k,l,f,y,d);d=~w&d|w&d+1;y=~m&y|m&y+((d|0)==0);f=~g&f|g&f+((y|0)==0);l=~p&l|p&l+((f|0)==0);i=i^t;n=n^e;s=s^r;a=a^o}function R(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0;t=t^o,e=e^c,r=r^h,i=i^u;n=A|0,s=b|0,a=v|0,l=E|0;for(;(g|0)<128;g=g+1|0){if(n>>>31){f=f^t,y=y^e,d=d^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;m=i&1;i=i>>>1|r<<31,r=r>>>1|e<<31,e=e>>>1|t<<31,t=t>>>1;if(m)t=t^0xe1000000}o=f,c=y,h=d,u=p}function _(t){t=t|0;k=t}function T(t,e,r,o){t=t|0;e=e|0;r=r|0;o=o|0;i=t,n=e,s=r,a=o}function L(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;o=t,c=e,h=r,u=i}function N(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;l=t,f=e,y=r,d=i}function O(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;p=t,g=e,m=r,w=i}function F(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;d=~w&d|w&i,y=~m&y|m&r,f=~g&f|g&e,l=~p&l|p&t}function H(t){t=t|0;if(t&15)return-1;I[t|0]=i>>>24,I[t|1]=i>>>16&255,I[t|2]=i>>>8&255,I[t|3]=i&255,I[t|4]=n>>>24,I[t|5]=n>>>16&255,I[t|6]=n>>>8&255,I[t|7]=n&255,I[t|8]=s>>>24,I[t|9]=s>>>16&255,I[t|10]=s>>>8&255,I[t|11]=s&255,I[t|12]=a>>>24,I[t|13]=a>>>16&255,I[t|14]=a>>>8&255,I[t|15]=a&255;return 16}function z(t){t=t|0;if(t&15)return-1;I[t|0]=o>>>24,I[t|1]=o>>>16&255,I[t|2]=o>>>8&255,I[t|3]=o&255,I[t|4]=c>>>24,I[t|5]=c>>>16&255,I[t|6]=c>>>8&255,I[t|7]=c&255,I[t|8]=h>>>24,I[t|9]=h>>>16&255,I[t|10]=h>>>8&255,I[t|11]=h&255,I[t|12]=u>>>24,I[t|13]=u>>>16&255,I[t|14]=u>>>8&255,I[t|15]=u&255;return 16}function G(){B(0,0,0,0);A=i,b=n,v=s,E=a}function q(t,e,r){t=t|0;e=e|0;r=r|0;var o=0;if(e&15)return-1;while((r|0)>=16){V[t&7](I[e|0]<<24|I[e|1]<<16|I[e|2]<<8|I[e|3],I[e|4]<<24|I[e|5]<<16|I[e|6]<<8|I[e|7],I[e|8]<<24|I[e|9]<<16|I[e|10]<<8|I[e|11],I[e|12]<<24|I[e|13]<<16|I[e|14]<<8|I[e|15]);I[e|0]=i>>>24,I[e|1]=i>>>16&255,I[e|2]=i>>>8&255,I[e|3]=i&255,I[e|4]=n>>>24,I[e|5]=n>>>16&255,I[e|6]=n>>>8&255,I[e|7]=n&255,I[e|8]=s>>>24,I[e|9]=s>>>16&255,I[e|10]=s>>>8&255,I[e|11]=s&255,I[e|12]=a>>>24,I[e|13]=a>>>16&255,I[e|14]=a>>>8&255,I[e|15]=a&255;o=o+16|0,e=e+16|0,r=r-16|0}return o|0}function j(t,e,r){t=t|0;e=e|0;r=r|0;var i=0;if(e&15)return-1;while((r|0)>=16){Z[t&1](I[e|0]<<24|I[e|1]<<16|I[e|2]<<8|I[e|3],I[e|4]<<24|I[e|5]<<16|I[e|6]<<8|I[e|7],I[e|8]<<24|I[e|9]<<16|I[e|10]<<8|I[e|11],I[e|12]<<24|I[e|13]<<16|I[e|14]<<8|I[e|15]);i=i+16|0,e=e+16|0,r=r-16|0}return i|0}var V=[B,K,P,D,U,M,x,Q];var Z=[P,R];return{set_rounds:_,set_state:T,set_iv:L,set_nonce:N,set_mask:O,set_counter:F,get_state:H,get_iv:z,gcm_init:G,cipher:q,mac:j}}({Uint8Array,Uint32Array},t,e);return u.set_key=function(t,e,i,s,a,c,h,l,f){var y=r.subarray(0,60),d=r.subarray(256,316);y.set([e,i,s,a,c,h,l,f]);for(var p=t,g=1;p<4*t+28;p++){var m=y[p-1];(p%t==0||8===t&&p%t==4)&&(m=n[m>>>24]<<24^n[m>>>16&255]<<16^n[m>>>8&255]<<8^n[255&m]),p%t==0&&(m=m<<8^m>>>24^g<<24,g=g<<1^(128&g?27:0)),y[p]=y[p-t]^m}for(var w=0;w<p;w+=4)for(var A=0;A<4;A++){m=y[p-(4+w)+(4-A)%4];d[w+A]=w<4||w>=p-4?m:o[0][n[m>>>24]]^o[1][n[m>>>16&255]]^o[2][n[m>>>8&255]]^o[3][n[255&m]]}u.set_rounds(t+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function kt(t){return t instanceof Uint8Array}function St(t,e,r,i,n){const s=t.length-e,a=s<n?s:n;return t.set(r.subarray(i,i+a),e),a}function It(...t){const e=t.reduce(((t,e)=>t+e.length),0),r=new Uint8Array(e);let i=0;for(let e=0;e<t.length;e++)r.set(t[e],i),i+=t[e].length;return r}class Ct extends Error{constructor(...t){super(...t)}}class Bt extends Error{constructor(...t){super(...t)}}class Kt extends Error{constructor(...t){super(...t)}}const Pt=[],Dt=[];class Ut{constructor(t,e,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=t,this.iv=e,this.padding=r,this.acquire_asm(n,s)}acquire_asm(t,e){return void 0!==this.heap&&void 0!==this.asm||(this.heap=t||Pt.pop()||function(t,e){const r=t?t.byteLength:e||65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return t||new Uint8Array(new ArrayBuffer(r))}().subarray(Et.HEAP_DATA),this.asm=e||Dt.pop()||new Et(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(Pt.push(this.heap),Dt.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(t,e){const{asm:r}=this.acquire_asm(),i=t.length;if(16!==i&&24!==i&&32!==i)throw new Bt("illegal key size");const n=new DataView(t.buffer,t.byteOffset,t.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==e){if(16!==e.length)throw new Bt("illegal iv size");let t=new DataView(e.buffer,e.byteOffset,e.byteLength);r.set_iv(t.getUint32(0),t.getUint32(4),t.getUint32(8),t.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(t){if(!kt(t))throw new TypeError("data isn't of expected type");let{heap:e,asm:r}=this.acquire_asm(),i=Et.ENC[this.mode],n=Et.HEAP_DATA,s=this.pos,a=this.len,o=0,c=t.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=St(e,s+a,t,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(e.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:t,asm:e}=this.acquire_asm(),r=Et.ENC[this.mode],i=Et.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let e=0;e<a;++e)t[n+s+e]=a;s+=a,o=s}else if(s%16)throw new Bt("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&e.cipher(r,i+n,s),o&&c.set(t.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(t){if(!kt(t))throw new TypeError("data isn't of expected type");let{heap:e,asm:r}=this.acquire_asm(),i=Et.DEC[this.mode],n=Et.HEAP_DATA,s=this.pos,a=this.len,o=0,c=t.length||0,h=0,u=a+c&-16,l=0,f=0;this.padding&&(l=a+c-u||16,u-=l);const y=new Uint8Array(u);for(;c>0;)f=St(e,s+a,t,o,c),a+=f,o+=f,c-=f,f=r.cipher(i,n+s,a-(c?0:l)),f&&y.set(e.subarray(s,s+f),h),h+=f,f<a?(s+=f,a-=f):(s=0,a=0);return this.pos=s,this.len=a,y}AES_Decrypt_finish(){let{heap:t,asm:e}=this.acquire_asm(),r=Et.DEC[this.mode],i=Et.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new Bt("data length must be a multiple of the block size");s+=16-s%16}if(e.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let e=t[n+a-1];if(e<1||e>16||e>a)throw new Kt("bad padding");let r=0;for(let i=e;i>1;i--)r|=e^t[n+a-i];if(r)throw new Kt("bad padding");a-=e}}const o=new Uint8Array(a);return a>0&&o.set(t.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class Mt{static encrypt(t,e,r){return new Mt(e,r).encrypt(t)}static decrypt(t,e,r){return new Mt(e,r).decrypt(t)}constructor(t,e,r){this.aes=r||new Ut(t,e,!0,"CFB"),delete this.aes.padding}encrypt(t){return It(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return It(this.aes.AES_Decrypt_process(t),this.aes.AES_Decrypt_finish())}}const xt=F.getWebCrypto(),Qt=F.getNodeCrypto(),Rt=Qt?Qt.getCiphers():[],_t={idea:Rt.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Rt.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Rt.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Rt.includes("bf-cfb")?"bf-cfb":void 0,aes128:Rt.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Rt.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Rt.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Tt{constructor(t,e,r){const{blockSize:i}=nt(t);this.key=e,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(t){const{keySize:e}=nt(t);return xt.importKey("raw",new Uint8Array(e),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(t,e){const r="AES-CBC";this.keyRef=this.keyRef||await xt.importKey("raw",this.key,r,!1,["encrypt"]);const i=await xt.encrypt({name:r,iv:e||this.zeroBlock},this.keyRef,t);return new Uint8Array(i).subarray(0,t.length)}async encryptChunk(t){const e=this.nextBlock.length-this.i,r=t.subarray(0,e);if(this.nextBlock.set(r,this.i),this.i+t.length>=2*this.blockSize){const r=(t.length-e)%this.blockSize,i=F.concatUint8Array([this.nextBlock,t.subarray(e,t.length-r)]),n=F.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return Lt(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(t.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const e=this.nextBlock;i=await this._runCBC(this.prevBlock),Lt(i,e),this.prevBlock=i.slice(),this.i=0;const n=t.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let t;if(0===this.i)t=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const e=this.nextBlock,r=await this._runCBC(this.prevBlock);Lt(r,e),t=r.subarray(0,e.length)}return this.clearSensitiveData(),t}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(t){const e=(await this._runCBC(F.concatUint8Array([new Uint8Array(this.blockSize),t]),this.iv)).subarray(0,t.length);return Lt(e,t),this.clearSensitiveData(),e}}function Lt(t,e){const r=Math.min(t.length,e.length);for(let i=0;i<r;i++)t[i]=t[i]^e[i]}var Nt=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i){const n=L.read(L.symmetric,t);if(Qt&&_t[n])return function(t,e,r,i){const n=L.read(L.symmetric,t),s=new Qt.createDecipheriv(_t[n],e,i);return I(r,(t=>new Uint8Array(s.update(t))))}(t,e,r,i);if(F.isAES(t))return function(t,e,r,i){if(F.isStream(r)){const t=new Mt(e,i);return I(r,(e=>t.aes.AES_Decrypt_process(e)),(()=>t.aes.AES_Decrypt_finish()))}return Mt.decrypt(r,e,i)}(0,e,r,i);const s=new(await et(t))(e),a=s.blockSize;let o=i,c=new Uint8Array;const h=t=>{t&&(c=F.concatUint8Array([c,t]));const e=new Uint8Array(c.length);let r,i=0;for(;t?c.length>=a:c.length;){const t=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)e[i++]=o[r]^t[r];c=c.subarray(a)}return e.subarray(0,i)};return I(r,h,h)},encrypt:async function(t,e,r,i,n){const s=L.read(L.symmetric,t);if(F.getNodeCrypto()&&_t[s])return function(t,e,r,i){const n=L.read(L.symmetric,t),s=new Qt.createCipheriv(_t[n],e,i);return I(r,(t=>new Uint8Array(s.update(t))))}(t,e,r,i);if(F.isAES(t))return async function(t,e,r,i){if(xt&&await Tt.isSupported(t)){const n=new Tt(t,e,i);return F.isStream(r)?I(r,(t=>n.encryptChunk(t)),(()=>n.finish())):n.encrypt(r)}{const t=new Mt(e,i);return I(r,(e=>t.aes.AES_Encrypt_process(e)),(()=>t.aes.AES_Encrypt_finish()))}}(t,e,r,i);const a=new(await et(t))(e),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=t=>{t&&(h=F.concatUint8Array([h,t]));const e=new Uint8Array(h.length);let r,i=0;for(;t?h.length>=o:h.length;){const t=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^t[r],e[i++]=c[r];h=h.subarray(o)}return e.subarray(0,i)};return I(r,u,u)}});class Ot{static encrypt(t,e,r){return new Ot(e,r).encrypt(t)}static decrypt(t,e,r){return new Ot(e,r).encrypt(t)}constructor(t,e,r){this.aes=r||new Ut(t,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(e)}encrypt(t){return It(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return It(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(t,e,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new Bt("illegal counter size");let t=Math.pow(2,r)-1;i.set_mask(0,0,t/4294967296|0,0|t)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===t)throw Error("nonce is required");{let e=t.length;if(!e||e>16)throw new Bt("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(t),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==e){if(e<0||e>=Math.pow(2,r))throw new Bt("illegal counter value");i.set_counter(0,0,e/4294967296|0,0|e)}}}class Ft{static encrypt(t,e,r=!0,i){return new Ft(e,i,r).encrypt(t)}static decrypt(t,e,r=!0,i){return new Ft(e,i,r).decrypt(t)}constructor(t,e,r=!0,i){this.aes=i||new Ut(t,e,r,"CBC")}encrypt(t){return It(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return It(this.aes.AES_Decrypt_process(t),this.aes.AES_Decrypt_finish())}}const Ht=F.getWebCrypto(),zt=F.getNodeCrypto(),Gt=16;function qt(t,e){const r=t.length-Gt;for(let i=0;i<Gt;i++)t[i+r]^=e[i];return t}const jt=new Uint8Array(Gt);async function Vt(t){const e=await async function(t){if(F.getNodeCrypto())return async function(e){const r=new zt.createCipheriv("aes-"+8*t.length+"-cbc",t,jt).update(e);return new Uint8Array(r)};if(F.getWebCrypto())try{return t=await Ht.importKey("raw",t,{name:"AES-CBC",length:8*t.length},!1,["encrypt"]),async function(e){const r=await Ht.encrypt({name:"AES-CBC",iv:jt,length:8*Gt},t,e);return new Uint8Array(r).subarray(0,r.byteLength-Gt)}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return async function(e){return Ft.encrypt(e,t,!1,jt)}}(t),r=F.double(await e(jt)),i=F.double(r);return async function(t){return(await e(function(t,e,r){if(t.length&&t.length%Gt==0)return qt(t,e);const i=new Uint8Array(t.length+(Gt-t.length%Gt));return i.set(t),i[t.length]=128,qt(i,r)}(t,r,i))).subarray(-Gt)}}const Zt=F.getWebCrypto(),Jt=F.getNodeCrypto(),Yt=F.getNodeBuffer(),Wt=16,$t=Wt,Xt=Wt,te=new Uint8Array(Wt),ee=new Uint8Array(Wt);ee[Wt-1]=1;const re=new Uint8Array(Wt);async function ie(t){const e=await Vt(t);return function(t,r){return e(F.concatUint8Array([t,r]))}}async function ne(t){if(F.getNodeCrypto())return async function(e,r){const i=new Jt.createCipheriv("aes-"+8*t.length+"-ctr",t,r),n=Yt.concat([i.update(e),i.final()]);return new Uint8Array(n)};if(F.getWebCrypto())try{const e=await Zt.importKey("raw",t,{name:"AES-CTR",length:8*t.length},!1,["encrypt"]);return async function(t,r){const i=await Zt.encrypt({name:"AES-CTR",counter:r,length:8*Wt},e,t);return new Uint8Array(i)}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return async function(e,r){return Ot.encrypt(e,t,r)}}async function se(t,e){if(t!==L.symmetric.aes128&&t!==L.symmetric.aes192&&t!==L.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([ie(e),ne(e)]);return{encrypt:async function(t,e,n){const[s,a]=await Promise.all([r(te,e),r(ee,n)]),o=await i(t,s),c=await r(re,o);for(let t=0;t<Xt;t++)c[t]^=a[t]^s[t];return F.concatUint8Array([o,c])},decrypt:async function(t,e,n){if(t.length<Xt)throw Error("Invalid EAX ciphertext");const s=t.subarray(0,-Xt),a=t.subarray(-Xt),[o,c,h]=await Promise.all([r(te,e),r(ee,n),r(re,s)]),u=h;for(let t=0;t<Xt;t++)u[t]^=c[t]^o[t];if(!F.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}re[Wt-1]=2,se.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[8+t]^=e[t];return r},se.blockLength=Wt,se.ivLength=$t,se.tagLength=Xt;const ae=16,oe=16;function ce(t){let e=0;for(let r=1;0==(t&r);r<<=1)e++;return e}function he(t,e){for(let r=0;r<t.length;r++)t[r]^=e[r];return t}function ue(t,e){return he(t.slice(),e)}const le=new Uint8Array(ae),fe=new Uint8Array([1]);async function ye(t,e){const{keySize:r}=nt(t);if(!F.isAES(t)||e.length!==r)throw Error("Unexpected algorithm or key size");let i=0;const n=t=>Ft.encrypt(t,e,!1),s=t=>Ft.decrypt(t,e,!1);let a;function o(t,e,r,s){const o=e.length/ae|0;!function(t,e){const r=F.nbits(Math.max(t.length,e.length)/ae|0)-1;for(let t=i+1;t<=r;t++)a[t]=F.double(a[t-1]);i=r}(e,s);const c=F.concatUint8Array([le.subarray(0,15-r.length),fe,r]),h=63&c[15];c[15]&=192;const u=n(c),l=F.concatUint8Array([u,ue(u.subarray(0,8),u.subarray(1,9))]),f=F.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),y=new Uint8Array(ae),d=new Uint8Array(e.length+oe);let p,g=0;for(p=0;p<o;p++)he(f,a[ce(p+1)]),d.set(he(t(ue(f,e)),f),g),he(y,t===n?e:d.subarray(g)),e=e.subarray(ae),g+=ae;if(e.length){he(f,a.x);const r=n(f);d.set(ue(e,r),g);const i=new Uint8Array(ae);i.set(t===n?e:d.subarray(g,-16),0),i[e.length]=128,he(y,i),g+=e.length}const m=he(n(he(he(y,f),a.$)),function(t){if(!t.length)return le;const e=t.length/ae|0,r=new Uint8Array(ae),i=new Uint8Array(ae);for(let s=0;s<e;s++)he(r,a[ce(s+1)]),he(i,n(ue(r,t))),t=t.subarray(ae);if(t.length){he(r,a.x);const e=new Uint8Array(ae);e.set(t,0),e[t.length]=128,he(e,r),he(i,n(e))}return i}(s));return d.set(m,g),d}return function(){const t=n(le),e=F.double(t);a=[],a[0]=F.double(e),a.x=t,a.$=e}(),{encrypt:async function(t,e,r){return o(n,t,e,r)},decrypt:async function(t,e,r){if(t.length<oe)throw Error("Invalid OCB ciphertext");const i=t.subarray(-16);t=t.subarray(0,-16);const n=o(s,t,e,r);if(F.equalsUint8Array(i,n.subarray(-16)))return n.subarray(0,-16);throw Error("Authentication tag mismatch")}}}ye.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[7+t]^=e[t];return r},ye.blockLength=ae,ye.ivLength=15,ye.tagLength=oe;const de=68719476704;class pe{static encrypt(t,e,r,i,n){return new pe(e,r,i,n).encrypt(t)}static decrypt(t,e,r,i,n){return new pe(e,r,i,n).decrypt(t)}constructor(t,e,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new Ut(t,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new Bt("illegal tagSize value");const o=e.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(e),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(Et.MAC.GCM,Et.HEAP_DATA,16),s.get_iv(Et.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(e),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>de)throw new Bt("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(t){return this.AES_GCM_encrypt(t)}decrypt(t){return this.AES_GCM_decrypt(t)}AES_GCM_Encrypt_process(t){let e=0,r=t.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>de)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=St(n,a+o,t,e,r),o+=u,e+=u,r-=u,u=i.cipher(Et.ENC.CTR,Et.HEAP_DATA+a,o),u=i.mac(Et.MAC.GCM,Et.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:t,heap:e}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);t.cipher(Et.ENC.CTR,Et.HEAP_DATA+s,a+15&-16),a&&o.set(e.subarray(s,s+a));let c=a;for(;15&c;c++)e[s+c]=0;t.mac(Et.MAC.GCM,Et.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return e[0]=0,e[1]=0,e[2]=0,e[3]=h>>>29,e[4]=h>>>21,e[5]=h>>>13&255,e[6]=h>>>5&255,e[7]=h<<3&255,e[8]=e[9]=e[10]=0,e[11]=u>>>29,e[12]=u>>>21&255,e[13]=u>>>13&255,e[14]=u>>>5&255,e[15]=u<<3&255,t.mac(Et.MAC.GCM,Et.HEAP_DATA,16),t.get_iv(Et.HEAP_DATA),t.set_counter(0,0,0,this.gamma0),t.cipher(Et.ENC.CTR,Et.HEAP_DATA,16),o.set(e.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(t){let e=0,r=t.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,f=0;if((s-1<<4)+c+r>de)throw new RangeError("counter overflow");const y=new Uint8Array(u);for(;r>l;)f=St(n,o+c,t,e,r-l),c+=f,e+=f,r-=f,f=i.mac(Et.MAC.GCM,Et.HEAP_DATA+o,f),f=i.cipher(Et.DEC.CTR,Et.HEAP_DATA+o,f),f&&y.set(n.subarray(o,o+f),h),s+=f>>>4,h+=f,o=0,c=0;return r>0&&(c+=St(n,0,t,e,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,y}AES_GCM_Decrypt_finish(){let{asm:t,heap:e}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new Ct("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(e.subarray(s+o,s+a));let u=o;for(;15&u;u++)e[s+u]=0;t.mac(Et.MAC.GCM,Et.HEAP_DATA+s,u),t.cipher(Et.DEC.CTR,Et.HEAP_DATA+s,u),o&&c.set(e.subarray(s,s+o));const l=void 0!==i?i.length:0,f=(n-1<<4)+a-r;e[0]=0,e[1]=0,e[2]=0,e[3]=l>>>29,e[4]=l>>>21,e[5]=l>>>13&255,e[6]=l>>>5&255,e[7]=l<<3&255,e[8]=e[9]=e[10]=0,e[11]=f>>>29,e[12]=f>>>21&255,e[13]=f>>>13&255,e[14]=f>>>5&255,e[15]=f<<3&255,t.mac(Et.MAC.GCM,Et.HEAP_DATA,16),t.get_iv(Et.HEAP_DATA),t.set_counter(0,0,0,this.gamma0),t.cipher(Et.ENC.CTR,Et.HEAP_DATA,16);let y=0;for(let t=0;t<r;++t)y|=h[t]^e[t];if(y)throw new Kt("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(t){const e=this.AES_GCM_Decrypt_process(t),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(e.length+r.length);return e.length&&i.set(e),r.length&&i.set(r,e.length),i}AES_GCM_encrypt(t){const e=this.AES_GCM_Encrypt_process(t),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(e.length+r.length);return e.length&&i.set(e),r.length&&i.set(r,e.length),i}_gcm_mac_process(t){let{asm:e,heap:r}=this.aes.acquire_asm(),i=0,n=t.length||0,s=0;for(;n>0;){for(s=St(r,0,t,i,n),i+=s,n-=s;15&s;)r[s++]=0;e.mac(Et.MAC.GCM,Et.HEAP_DATA,s)}}}const ge=F.getWebCrypto(),me=F.getNodeCrypto(),we=F.getNodeBuffer(),Ae=16,be="AES-GCM";async function ve(t,e){if(t!==L.symmetric.aes128&&t!==L.symmetric.aes192&&t!==L.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(F.getNodeCrypto())return{encrypt:async function(t,r,i=new Uint8Array){const n=new me.createCipheriv("aes-"+8*e.length+"-gcm",e,r);n.setAAD(i);const s=we.concat([n.update(t),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(t,r,i=new Uint8Array){const n=new me.createDecipheriv("aes-"+8*e.length+"-gcm",e,r);n.setAAD(i),n.setAuthTag(t.slice(t.length-Ae,t.length));const s=we.concat([n.update(t.slice(0,t.length-Ae)),n.final()]);return new Uint8Array(s)}};if(F.getWebCrypto())try{const t=await ge.importKey("raw",e,{name:be},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return pe.encrypt(i,e,n,s);const a=await ge.encrypt({name:be,iv:n,additionalData:s,tagLength:128},t,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===Ae)return pe.decrypt(i,e,n,s);try{const e=await ge.decrypt({name:be,iv:n,additionalData:s,tagLength:128},t,i);return new Uint8Array(e)}catch(t){if("OperationError"===t.name)throw Error("Authentication tag mismatch")}}}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return{encrypt:async function(t,r,i){return pe.encrypt(t,e,r,i)},decrypt:async function(t,r,i){return pe.decrypt(t,e,r,i)}}}ve.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[4+t]^=e[t];return r},ve.blockLength=16,ve.ivLength=12,ve.tagLength=Ae;var Ee={cfb:Nt,gcm:ve,experimentalGCM:ve,eax:se,ocb:ye};const ke=F.getNodeCrypto();function Se(t){const e=new Uint8Array(t);if(ke){const t=ke.randomBytes(e.length);e.set(t)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(e)}return e}async function Ie(t,e){const r=await F.getBigInteger();if(e.lt(t))throw Error("Illegal parameter value: max <= min");const i=e.sub(t);return new r(Se(i.byteLength()+8)).mod(i).add(t)}var Ce=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Ie,getRandomBytes:Se});async function Be(t,e,r){const i=await F.getBigInteger(),n=new i(1),s=n.leftShift(new i(t-1)),a=new i(30),o=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2],c=await Ie(s,s.leftShift(n));let h=c.mod(a).toNumber();do{c.iadd(new i(o[h])),h=(h+o[h])%o.length,c.bitLength()>t&&(c.imod(s.leftShift(n)).iadd(s),h=c.mod(a).toNumber())}while(!await Ke(c,e,r));return c}async function Ke(t,e,r){return!(e&&!t.dec().gcd(e).isOne())&&(!!await async function(t){const e=await F.getBigInteger();return Pe.every((r=>0!==t.mod(new e(r))))}(t)&&(!!await async function(t,e){const r=await F.getBigInteger();return e=e||new r(2),e.modExp(t.dec(),t).isOne()}(t)&&!!await async function(t,e,r){const i=await F.getBigInteger(),n=t.bitLength();e||(e=Math.max(1,n/48|0));const s=t.dec();let a=0;for(;!s.getBit(a);)a++;const o=t.rightShift(new i(a));for(;e>0;e--){let e,n=(r?r():await Ie(new i(2),s)).modExp(o,t);if(!n.isOne()&&!n.equal(s)){for(e=1;e<a;e++){if(n=n.mul(n).mod(t),n.isOne())return!1;if(n.equal(s))break}if(e===a)return!1}}return!0}(t,r)))}const Pe=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999];const De=[];function Ue(t,e){const r=t.length;if(r>e-11)throw Error("Message too long");const i=function(t){const e=new Uint8Array(t);let r=0;for(;r<t;){const i=Se(t-r);for(let t=0;t<i.length;t++)0!==i[t]&&(e[r++]=i[t])}return e}(e-r-3),n=new Uint8Array(e);return n[1]=2,n.set(i,2),n.set(t,e-r),n}function Me(t,e){let r=2,i=1;for(let e=r;e<t.length;e++)i&=0!==t[e],r+=i;const n=r-2,s=t.subarray(r+1),a=0===t[0]&2===t[1]&n>=8&!i;if(e)return F.selectUint8Array(a,s,e);if(a)return s;throw Error("Decryption error")}async function xe(t,e,r){let i;if(e.length!==vt.getHashByteLength(t))throw Error("Invalid hash length");const n=new Uint8Array(De[t].length);for(i=0;i<De[t].length;i++)n[i]=De[t][i];const s=n.length+e.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(e,r-e.length),o}De[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],De[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],De[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],De[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],De[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],De[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],De[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var Qe=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Me,emeEncode:Ue,emsaEncode:xe});const Re=F.getWebCrypto(),_e=F.getNodeCrypto();async function Te(t,e,r,i,n,s){const a=await F.getBigInteger(),o=new a(i),c=new a(n),h=new a(r);let u=h.mod(c.dec()),l=h.mod(o.dec());return l=l.toUint8Array(),u=u.toUint8Array(),{kty:"RSA",n:Z(t,!0),e:Z(e,!0),d:Z(r,!0),p:Z(n,!0),q:Z(i,!0),dp:Z(u,!0),dq:Z(l,!0),qi:Z(s,!0),ext:!0}}function Le(t,e){return{kty:"RSA",n:Z(t,!0),e:Z(e,!0),ext:!0}}function Ne(t,e){return{n:V(t.n),e:e.toUint8Array(),d:V(t.d),p:V(t.q),q:V(t.p),u:V(t.qi)}}var Oe=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n,s,a,o){if(F.getNodeCrypto()&&!o)try{return await async function(t,e,r,i,n,s,a){const o=await Te(e,r,i,n,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:_e.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(_e.privateDecrypt(c,t))}catch(t){throw Error("Decryption error")}}(t,e,r,i,n,s,a)}catch(t){F.printDebugError(t)}return async function(t,e,r,i,n,s,a,o){const c=await F.getBigInteger();if(t=new c(t),e=new c(e),r=new c(r),i=new c(i),n=new c(n),s=new c(s),a=new c(a),t.gte(e))throw Error("Data too large.");const h=i.mod(s.dec()),u=i.mod(n.dec()),l=(await Ie(new c(2),e)).mod(e),f=l.modInv(e).modExp(r,e);t=t.mul(f).mod(e);const y=t.modExp(u,n),d=t.modExp(h,s),p=a.mul(d.sub(y)).mod(s);let g=p.mul(n).add(y);return g=g.mul(l).mod(e),Me(g.toUint8Array("be",e.byteLength()),o)}(t,e,r,i,n,s,a,o)},encrypt:async function(t,e,r){return F.getNodeCrypto()?async function(t,e,r){const i=Le(e,r),n={key:i,format:"jwk",type:"pkcs1",padding:_e.constants.RSA_PKCS1_PADDING};return new Uint8Array(_e.publicEncrypt(n,t))}(t,e,r):async function(t,e,r){const i=await F.getBigInteger();if(e=new i(e),t=new i(Ue(t,e.byteLength())),r=new i(r),t.gte(e))throw Error("Message size cannot exceed modulus size");return t.modExp(r,e).toUint8Array("be",e.byteLength())}(t,e,r)},generate:async function(t,e){if(e=new(await F.getBigInteger())(e),F.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:t,publicExponent:e.toUint8Array(),hash:{name:"SHA-1"}},i=await Re.generateKey(r,!0,["sign","verify"]);return Ne(await Re.exportKey("jwk",i.privateKey),e)}if(F.getNodeCrypto()){const r={modulusLength:t,publicExponent:e.toNumber(),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},i=await new Promise(((t,e)=>{_e.generateKeyPair("rsa",r,((r,i,n)=>{r?e(r):t(n)}))}));return Ne(i,e)}let r,i,n;do{i=await Be(t-(t>>1),e,40),r=await Be(t>>1,e,40),n=r.mul(i)}while(n.bitLength()!==t);const s=r.dec().imul(i.dec());return i.lt(r)&&([r,i]=[i,r]),{n:n.toUint8Array(),e:e.toUint8Array(),d:e.modInv(s).toUint8Array(),p:r.toUint8Array(),q:i.toUint8Array(),u:r.modInv(i).toUint8Array()}},sign:async function(t,e,r,i,n,s,a,o,c){if(e&&!F.isStream(e))if(F.getWebCrypto())try{return await async function(t,e,r,i,n,s,a,o){const c=await Te(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:t}},u=await Re.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await Re.sign("RSASSA-PKCS1-v1_5",u,e))}(L.read(L.webHash,t),e,r,i,n,s,a,o)}catch(t){F.printDebugError(t)}else if(F.getNodeCrypto())return async function(t,e,r,i,n,s,a,o){const c=_e.createSign(L.read(L.hash,t));c.write(e),c.end();const h=await Te(r,i,n,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(t,e,r,i,n,s,a,o);return async function(t,e,r,i){const n=await F.getBigInteger();e=new n(e);const s=new n(await xe(t,i,e.byteLength()));if(r=new n(r),s.gte(e))throw Error("Message size cannot exceed modulus size");return s.modExp(r,e).toUint8Array("be",e.byteLength())}(t,r,n,c)},validateParams:async function(t,e,r,i,n,s){const a=await F.getBigInteger();if(t=new a(t),i=new a(i),n=new a(n),!i.mul(n).equal(t))return!1;const o=new a(2);if(s=new a(s),!i.mul(s).mod(n).isOne())return!1;e=new a(e),r=new a(r);const c=new a(Math.floor(t.bitLength()/3)),h=await Ie(o,o.leftShift(c)),u=h.mul(r).mul(e);return!(!u.mod(i.dec()).equal(h)||!u.mod(n.dec()).equal(h))},verify:async function(t,e,r,i,n,s){if(e&&!F.isStream(e))if(F.getWebCrypto())try{return await async function(t,e,r,i,n){const s=Le(i,n),a=await Re.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:t}},!1,["verify"]);return Re.verify("RSASSA-PKCS1-v1_5",a,r,e)}(L.read(L.webHash,t),e,r,i,n)}catch(t){F.printDebugError(t)}else if(F.getNodeCrypto())return async function(t,e,r,i,n){const s=Le(i,n),a={key:s,format:"jwk",type:"pkcs1"},o=_e.createVerify(L.read(L.hash,t));o.write(e),o.end();try{return await o.verify(a,r)}catch(t){return!1}}(t,e,r,i,n);return async function(t,e,r,i,n){const s=await F.getBigInteger();if(r=new s(r),e=new s(e),i=new s(i),e.gte(r))throw Error("Signature size cannot exceed modulus size");const a=e.modExp(i,r).toUint8Array("be",r.byteLength()),o=await xe(t,n,r.byteLength());return F.equalsUint8Array(a,o)}(t,r,i,n,s)}});var Fe=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n){const s=await F.getBigInteger();return t=new s(t),e=new s(e),r=new s(r),i=new s(i),Me(t.modExp(i,r).modInv(r).imul(e).imod(r).toUint8Array("be",r.byteLength()),n)},encrypt:async function(t,e,r,i){const n=await F.getBigInteger();e=new n(e),r=new n(r),i=new n(i);const s=new n(Ue(t,e.byteLength())),a=await Ie(new n(1),e.dec());return{c1:r.modExp(a,e).toUint8Array(),c2:i.modExp(a,e).imul(s).imod(e).toUint8Array()}},validateParams:async function(t,e,r,i){const n=await F.getBigInteger();t=new n(t),e=new n(e),r=new n(r);const s=new n(1);if(e.lte(s)||e.gte(t))return!1;const a=new n(t.bitLength()),o=new n(1023);if(a.lt(o))return!1;if(!e.modExp(t.dec(),t).isOne())return!1;let c=e;const h=new n(1),u=new n(2).leftShift(new n(17));for(;h.lt(u);){if(c=c.mul(e).imod(t),c.isOne())return!1;h.iinc()}i=new n(i);const l=new n(2),f=await Ie(l.leftShift(a.dec()),l.leftShift(a)),y=t.dec().imul(f).iadd(i);return!!r.equal(e.modExp(y,t))}});const He=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0,ze={};var Ge=function(t){var e,r=new Float64Array(16);if(t)for(e=0;e<t.length;e++)r[e]=t[e];return r},qe=function(){throw Error("no PRNG")},je=new Uint8Array(32);je[0]=9;var Ve=Ge(),Ze=Ge([1]),Je=Ge([56129,1]),Ye=Ge([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),We=Ge([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),$e=Ge([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),Xe=Ge([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),tr=Ge([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function er(t,e,r,i){t[e]=r>>24&255,t[e+1]=r>>16&255,t[e+2]=r>>8&255,t[e+3]=255&r,t[e+4]=i>>24&255,t[e+5]=i>>16&255,t[e+6]=i>>8&255,t[e+7]=255&i}function rr(t,e,r,i){return function(t,e,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=t[e+s]^r[i+s];return(1&a-1>>>8)-1}(t,e,r,i,32)}function ir(t,e){var r;for(r=0;r<16;r++)t[r]=0|e[r]}function nr(t){var e,r,i=1;for(e=0;e<16;e++)r=t[e]+i+65535,i=Math.floor(r/65536),t[e]=r-65536*i;t[0]+=i-1+37*(i-1)}function sr(t,e,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(t[s]^e[s]),t[s]^=i,e[s]^=i}function ar(t,e){var r,i,n,s=Ge(),a=Ge();for(r=0;r<16;r++)a[r]=e[r];for(nr(a),nr(a),nr(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,sr(a,s,1-n)}for(r=0;r<16;r++)t[2*r]=255&a[r],t[2*r+1]=a[r]>>8}function or(t,e){var r=new Uint8Array(32),i=new Uint8Array(32);return ar(r,t),ar(i,e),rr(r,0,i,0)}function cr(t){var e=new Uint8Array(32);return ar(e,t),1&e[0]}function hr(t,e){var r;for(r=0;r<16;r++)t[r]=e[2*r]+(e[2*r+1]<<8);t[15]&=32767}function ur(t,e,r){for(var i=0;i<16;i++)t[i]=e[i]+r[i]}function lr(t,e,r){for(var i=0;i<16;i++)t[i]=e[i]-r[i]}function fr(t,e,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0,b=0,v=0,E=0,k=0,S=0,I=0,C=0,B=0,K=0,P=0,D=0,U=0,M=0,x=0,Q=0,R=0,_=r[0],T=r[1],L=r[2],N=r[3],O=r[4],F=r[5],H=r[6],z=r[7],G=r[8],q=r[9],j=r[10],V=r[11],Z=r[12],J=r[13],Y=r[14],W=r[15];s+=(i=e[0])*_,a+=i*T,o+=i*L,c+=i*N,h+=i*O,u+=i*F,l+=i*H,f+=i*z,y+=i*G,d+=i*q,p+=i*j,g+=i*V,m+=i*Z,w+=i*J,A+=i*Y,b+=i*W,a+=(i=e[1])*_,o+=i*T,c+=i*L,h+=i*N,u+=i*O,l+=i*F,f+=i*H,y+=i*z,d+=i*G,p+=i*q,g+=i*j,m+=i*V,w+=i*Z,A+=i*J,b+=i*Y,v+=i*W,o+=(i=e[2])*_,c+=i*T,h+=i*L,u+=i*N,l+=i*O,f+=i*F,y+=i*H,d+=i*z,p+=i*G,g+=i*q,m+=i*j,w+=i*V,A+=i*Z,b+=i*J,v+=i*Y,E+=i*W,c+=(i=e[3])*_,h+=i*T,u+=i*L,l+=i*N,f+=i*O,y+=i*F,d+=i*H,p+=i*z,g+=i*G,m+=i*q,w+=i*j,A+=i*V,b+=i*Z,v+=i*J,E+=i*Y,k+=i*W,h+=(i=e[4])*_,u+=i*T,l+=i*L,f+=i*N,y+=i*O,d+=i*F,p+=i*H,g+=i*z,m+=i*G,w+=i*q,A+=i*j,b+=i*V,v+=i*Z,E+=i*J,k+=i*Y,S+=i*W,u+=(i=e[5])*_,l+=i*T,f+=i*L,y+=i*N,d+=i*O,p+=i*F,g+=i*H,m+=i*z,w+=i*G,A+=i*q,b+=i*j,v+=i*V,E+=i*Z,k+=i*J,S+=i*Y,I+=i*W,l+=(i=e[6])*_,f+=i*T,y+=i*L,d+=i*N,p+=i*O,g+=i*F,m+=i*H,w+=i*z,A+=i*G,b+=i*q,v+=i*j,E+=i*V,k+=i*Z,S+=i*J,I+=i*Y,C+=i*W,f+=(i=e[7])*_,y+=i*T,d+=i*L,p+=i*N,g+=i*O,m+=i*F,w+=i*H,A+=i*z,b+=i*G,v+=i*q,E+=i*j,k+=i*V,S+=i*Z,I+=i*J,C+=i*Y,B+=i*W,y+=(i=e[8])*_,d+=i*T,p+=i*L,g+=i*N,m+=i*O,w+=i*F,A+=i*H,b+=i*z,v+=i*G,E+=i*q,k+=i*j,S+=i*V,I+=i*Z,C+=i*J,B+=i*Y,K+=i*W,d+=(i=e[9])*_,p+=i*T,g+=i*L,m+=i*N,w+=i*O,A+=i*F,b+=i*H,v+=i*z,E+=i*G,k+=i*q,S+=i*j,I+=i*V,C+=i*Z,B+=i*J,K+=i*Y,P+=i*W,p+=(i=e[10])*_,g+=i*T,m+=i*L,w+=i*N,A+=i*O,b+=i*F,v+=i*H,E+=i*z,k+=i*G,S+=i*q,I+=i*j,C+=i*V,B+=i*Z,K+=i*J,P+=i*Y,D+=i*W,g+=(i=e[11])*_,m+=i*T,w+=i*L,A+=i*N,b+=i*O,v+=i*F,E+=i*H,k+=i*z,S+=i*G,I+=i*q,C+=i*j,B+=i*V,K+=i*Z,P+=i*J,D+=i*Y,U+=i*W,m+=(i=e[12])*_,w+=i*T,A+=i*L,b+=i*N,v+=i*O,E+=i*F,k+=i*H,S+=i*z,I+=i*G,C+=i*q,B+=i*j,K+=i*V,P+=i*Z,D+=i*J,U+=i*Y,M+=i*W,w+=(i=e[13])*_,A+=i*T,b+=i*L,v+=i*N,E+=i*O,k+=i*F,S+=i*H,I+=i*z,C+=i*G,B+=i*q,K+=i*j,P+=i*V,D+=i*Z,U+=i*J,M+=i*Y,x+=i*W,A+=(i=e[14])*_,b+=i*T,v+=i*L,E+=i*N,k+=i*O,S+=i*F,I+=i*H,C+=i*z,B+=i*G,K+=i*q,P+=i*j,D+=i*V,U+=i*Z,M+=i*J,x+=i*Y,Q+=i*W,b+=(i=e[15])*_,a+=38*(E+=i*L),o+=38*(k+=i*N),c+=38*(S+=i*O),h+=38*(I+=i*F),u+=38*(C+=i*H),l+=38*(B+=i*z),f+=38*(K+=i*G),y+=38*(P+=i*q),d+=38*(D+=i*j),p+=38*(U+=i*V),g+=38*(M+=i*Z),m+=38*(x+=i*J),w+=38*(Q+=i*Y),A+=38*(R+=i*W),s=(i=(s+=38*(v+=i*T))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),t[0]=s,t[1]=a,t[2]=o,t[3]=c,t[4]=h,t[5]=u,t[6]=l,t[7]=f,t[8]=y,t[9]=d,t[10]=p,t[11]=g,t[12]=m,t[13]=w,t[14]=A,t[15]=b}function yr(t,e){fr(t,e,e)}function dr(t,e){var r,i=Ge();for(r=0;r<16;r++)i[r]=e[r];for(r=253;r>=0;r--)yr(i,i),2!==r&&4!==r&&fr(i,i,e);for(r=0;r<16;r++)t[r]=i[r]}function pr(t,e,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=Ge(),c=Ge(),h=Ge(),u=Ge(),l=Ge(),f=Ge();for(n=0;n<31;n++)s[n]=e[n];for(s[31]=127&e[31]|64,s[0]&=248,hr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)sr(o,c,i=s[n>>>3]>>>(7&n)&1),sr(h,u,i),ur(l,o,h),lr(o,o,h),ur(h,c,u),lr(c,c,u),yr(u,l),yr(f,o),fr(o,h,o),fr(h,c,l),ur(l,o,h),lr(o,o,h),yr(c,o),lr(h,u,f),fr(o,h,Je),ur(o,o,u),fr(h,h,o),fr(o,u,f),fr(u,c,a),yr(c,l),sr(o,c,i),sr(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var y=a.subarray(32),d=a.subarray(16);return dr(y,y),fr(d,d,y),ar(t,d),0}function gr(t,e){return pr(t,e,je)}var mr=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function wr(t,e,r,i){for(var n,s,a,o,c,h,u,l,f,y,d,p,g,m,w,A,b,v,E,k,S,I,C,B,K,P,D=new Int32Array(16),U=new Int32Array(16),M=t[0],x=t[1],Q=t[2],R=t[3],_=t[4],T=t[5],L=t[6],N=t[7],O=e[0],F=e[1],H=e[2],z=e[3],G=e[4],q=e[5],j=e[6],V=e[7],Z=0;i>=128;){for(E=0;E<16;E++)k=8*E+Z,D[E]=r[k+0]<<24|r[k+1]<<16|r[k+2]<<8|r[k+3],U[E]=r[k+4]<<24|r[k+5]<<16|r[k+6]<<8|r[k+7];for(E=0;E<80;E++)if(n=M,s=x,a=Q,o=R,c=_,h=T,u=L,N,f=O,y=F,d=H,p=z,g=G,m=q,w=j,V,C=65535&(I=V),B=I>>>16,K=65535&(S=N),P=S>>>16,C+=65535&(I=(G>>>14|_<<18)^(G>>>18|_<<14)^(_>>>9|G<<23)),B+=I>>>16,K+=65535&(S=(_>>>14|G<<18)^(_>>>18|G<<14)^(G>>>9|_<<23)),P+=S>>>16,C+=65535&(I=G&q^~G&j),B+=I>>>16,K+=65535&(S=_&T^~_&L),P+=S>>>16,S=mr[2*E],C+=65535&(I=mr[2*E+1]),B+=I>>>16,K+=65535&S,P+=S>>>16,S=D[E%16],B+=(I=U[E%16])>>>16,K+=65535&S,P+=S>>>16,K+=(B+=(C+=65535&I)>>>16)>>>16,C=65535&(I=v=65535&C|B<<16),B=I>>>16,K=65535&(S=b=65535&K|(P+=K>>>16)<<16),P=S>>>16,C+=65535&(I=(O>>>28|M<<4)^(M>>>2|O<<30)^(M>>>7|O<<25)),B+=I>>>16,K+=65535&(S=(M>>>28|O<<4)^(O>>>2|M<<30)^(O>>>7|M<<25)),P+=S>>>16,B+=(I=O&F^O&H^F&H)>>>16,K+=65535&(S=M&x^M&Q^x&Q),P+=S>>>16,l=65535&(K+=(B+=(C+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,A=65535&C|B<<16,C=65535&(I=p),B=I>>>16,K=65535&(S=o),P=S>>>16,B+=(I=v)>>>16,K+=65535&(S=b),P+=S>>>16,x=n,Q=s,R=a,_=o=65535&(K+=(B+=(C+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,T=c,L=h,N=u,M=l,F=f,H=y,z=d,G=p=65535&C|B<<16,q=g,j=m,V=w,O=A,E%16==15)for(k=0;k<16;k++)S=D[k],C=65535&(I=U[k]),B=I>>>16,K=65535&S,P=S>>>16,S=D[(k+9)%16],C+=65535&(I=U[(k+9)%16]),B+=I>>>16,K+=65535&S,P+=S>>>16,b=D[(k+1)%16],C+=65535&(I=((v=U[(k+1)%16])>>>1|b<<31)^(v>>>8|b<<24)^(v>>>7|b<<25)),B+=I>>>16,K+=65535&(S=(b>>>1|v<<31)^(b>>>8|v<<24)^b>>>7),P+=S>>>16,b=D[(k+14)%16],B+=(I=((v=U[(k+14)%16])>>>19|b<<13)^(b>>>29|v<<3)^(v>>>6|b<<26))>>>16,K+=65535&(S=(b>>>19|v<<13)^(v>>>29|b<<3)^b>>>6),P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,D[k]=65535&K|P<<16,U[k]=65535&C|B<<16;C=65535&(I=O),B=I>>>16,K=65535&(S=M),P=S>>>16,S=t[0],B+=(I=e[0])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[0]=M=65535&K|P<<16,e[0]=O=65535&C|B<<16,C=65535&(I=F),B=I>>>16,K=65535&(S=x),P=S>>>16,S=t[1],B+=(I=e[1])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[1]=x=65535&K|P<<16,e[1]=F=65535&C|B<<16,C=65535&(I=H),B=I>>>16,K=65535&(S=Q),P=S>>>16,S=t[2],B+=(I=e[2])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[2]=Q=65535&K|P<<16,e[2]=H=65535&C|B<<16,C=65535&(I=z),B=I>>>16,K=65535&(S=R),P=S>>>16,S=t[3],B+=(I=e[3])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[3]=R=65535&K|P<<16,e[3]=z=65535&C|B<<16,C=65535&(I=G),B=I>>>16,K=65535&(S=_),P=S>>>16,S=t[4],B+=(I=e[4])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[4]=_=65535&K|P<<16,e[4]=G=65535&C|B<<16,C=65535&(I=q),B=I>>>16,K=65535&(S=T),P=S>>>16,S=t[5],B+=(I=e[5])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[5]=T=65535&K|P<<16,e[5]=q=65535&C|B<<16,C=65535&(I=j),B=I>>>16,K=65535&(S=L),P=S>>>16,S=t[6],B+=(I=e[6])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[6]=L=65535&K|P<<16,e[6]=j=65535&C|B<<16,C=65535&(I=V),B=I>>>16,K=65535&(S=N),P=S>>>16,S=t[7],B+=(I=e[7])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[7]=N=65535&K|P<<16,e[7]=V=65535&C|B<<16,Z+=128,i-=128}return i}function Ar(t,e,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,wr(n,s,e,r),r%=128,i=0;i<r;i++)a[i]=e[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,er(a,r-8,o/536870912|0,o<<3),wr(n,s,a,r),i=0;i<8;i++)er(t,8*i,n[i],s[i]);return 0}function br(t,e){var r=Ge(),i=Ge(),n=Ge(),s=Ge(),a=Ge(),o=Ge(),c=Ge(),h=Ge(),u=Ge();lr(r,t[1],t[0]),lr(u,e[1],e[0]),fr(r,r,u),ur(i,t[0],t[1]),ur(u,e[0],e[1]),fr(i,i,u),fr(n,t[3],e[3]),fr(n,n,We),fr(s,t[2],e[2]),ur(s,s,s),lr(a,i,r),lr(o,s,n),ur(c,s,n),ur(h,i,r),fr(t[0],a,o),fr(t[1],h,c),fr(t[2],c,o),fr(t[3],a,h)}function vr(t,e,r){var i;for(i=0;i<4;i++)sr(t[i],e[i],r)}function Er(t,e){var r=Ge(),i=Ge(),n=Ge();dr(n,e[2]),fr(r,e[0],n),fr(i,e[1],n),ar(t,i),t[31]^=cr(r)<<7}function kr(t,e,r){var i,n;for(ir(t[0],Ve),ir(t[1],Ze),ir(t[2],Ze),ir(t[3],Ve),n=255;n>=0;--n)vr(t,e,i=r[n/8|0]>>(7&n)&1),br(e,t),br(t,t),vr(t,e,i)}function Sr(t,e){var r=[Ge(),Ge(),Ge(),Ge()];ir(r[0],$e),ir(r[1],Xe),ir(r[2],Ze),fr(r[3],$e,Xe),kr(t,r,e)}function Ir(t,e,r){var i,n=new Uint8Array(64),s=[Ge(),Ge(),Ge(),Ge()];for(r||qe(e,32),Ar(n,e,32),n[0]&=248,n[31]&=127,n[31]|=64,Sr(s,n),Er(t,s),i=0;i<32;i++)e[i+32]=t[i];return 0}var Cr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function Br(t,e){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)e[n]+=r-16*e[i]*Cr[n-(i-32)],r=Math.floor((e[n]+128)/256),e[n]-=256*r;e[n]+=r,e[i]=0}for(r=0,n=0;n<32;n++)e[n]+=r-(e[31]>>4)*Cr[n],r=e[n]>>8,e[n]&=255;for(n=0;n<32;n++)e[n]-=r*Cr[n];for(i=0;i<32;i++)e[i+1]+=e[i]>>8,t[i]=255&e[i]}function Kr(t){var e,r=new Float64Array(64);for(e=0;e<64;e++)r[e]=t[e];for(e=0;e<64;e++)t[e]=0;Br(t,r)}function Pr(t,e){var r=Ge(),i=Ge(),n=Ge(),s=Ge(),a=Ge(),o=Ge(),c=Ge();return ir(t[2],Ze),hr(t[1],e),yr(n,t[1]),fr(s,n,Ye),lr(n,n,t[2]),ur(s,t[2],s),yr(a,s),yr(o,a),fr(c,o,a),fr(r,c,n),fr(r,r,s),function(t,e){var r,i=Ge();for(r=0;r<16;r++)i[r]=e[r];for(r=250;r>=0;r--)yr(i,i),1!==r&&fr(i,i,e);for(r=0;r<16;r++)t[r]=i[r]}(r,r),fr(r,r,n),fr(r,r,s),fr(r,r,s),fr(t[0],r,s),yr(i,t[0]),fr(i,i,s),or(i,n)&&fr(t[0],t[0],tr),yr(i,t[0]),fr(i,i,s),or(i,n)?-1:(cr(t[0])===e[31]>>7&&lr(t[0],Ve,t[0]),fr(t[3],t[0],t[1]),0)}var Dr=64;function Ur(){for(var t=0;t<arguments.length;t++)if(!(arguments[t]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}ze.scalarMult=function(t,e){if(Ur(t,e),32!==t.length)throw Error("bad n size");if(32!==e.length)throw Error("bad p size");var r=new Uint8Array(32);return pr(r,t,e),r},ze.box={},ze.box.keyPair=function(){var t=new Uint8Array(32),e=new Uint8Array(32);return function(t,e){qe(e,32),gr(t,e)}(t,e),{publicKey:t,secretKey:e}},ze.box.keyPair.fromSecretKey=function(t){if(Ur(t),32!==t.length)throw Error("bad secret key size");var e=new Uint8Array(32);return gr(e,t),{publicKey:e,secretKey:new Uint8Array(t)}},ze.sign=function(t,e){if(Ur(t,e),64!==e.length)throw Error("bad secret key size");var r=new Uint8Array(Dr+t.length);return function(t,e,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[Ge(),Ge(),Ge(),Ge()];Ar(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)t[64+n]=e[n];for(n=0;n<32;n++)t[32+n]=a[32+n];for(Ar(c,t.subarray(32),r+32),Kr(c),Sr(u,c),Er(t,u),n=32;n<64;n++)t[n]=i[n];for(Ar(o,t,r+64),Kr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];Br(t.subarray(32),h)}(r,t,t.length,e),r},ze.sign.detached=function(t,e){for(var r=ze.sign(t,e),i=new Uint8Array(Dr),n=0;n<i.length;n++)i[n]=r[n];return i},ze.sign.detached.verify=function(t,e,r){if(Ur(t,e,r),e.length!==Dr)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array(Dr+t.length),s=new Uint8Array(Dr+t.length);for(i=0;i<Dr;i++)n[i]=e[i];for(i=0;i<t.length;i++)n[i+Dr]=t[i];return function(t,e,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[Ge(),Ge(),Ge(),Ge()],c=[Ge(),Ge(),Ge(),Ge()];if(r<64)return-1;if(Pr(c,i))return-1;for(n=0;n<r;n++)t[n]=e[n];for(n=0;n<32;n++)t[n+32]=i[n];if(Ar(a,t,r),Kr(a),kr(o,c,a),Sr(c,e.subarray(32)),br(o,c),Er(s,o),r-=64,rr(e,0,s,0)){for(n=0;n<r;n++)t[n]=0;return-1}for(n=0;n<r;n++)t[n]=e[n+64];return r}(s,n,n.length,r)>=0},ze.sign.keyPair=function(){var t=new Uint8Array(32),e=new Uint8Array(64);return Ir(t,e),{publicKey:t,secretKey:e}},ze.sign.keyPair.fromSecretKey=function(t){if(Ur(t),64!==t.length)throw Error("bad secret key size");for(var e=new Uint8Array(32),r=0;r<e.length;r++)e[r]=t[32+r];return{publicKey:e,secretKey:new Uint8Array(t)}},ze.sign.keyPair.fromSeed=function(t){if(Ur(t),32!==t.length)throw Error("bad seed size");for(var e=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=t[i];return Ir(e,r,!0),{publicKey:e,secretKey:r}},ze.setPRNG=function(t){qe=t},function(){if(He&&He.getRandomValues){ze.setPRNG((function(t,e){var r,i=new Uint8Array(e);for(r=0;r<e;r+=65536)He.getRandomValues(i.subarray(r,r+Math.min(e-r,65536)));for(r=0;r<e;r++)t[r]=i[r];!function(t){for(var e=0;e<t.length;e++)t[e]=0}(i)}))}}();const Mr={"2a8648ce3d030107":L.curve.nistP256,"2b81040022":L.curve.nistP384,"2b81040023":L.curve.nistP521,"2b8104000a":L.curve.secp256k1,"2b06010401da470f01":L.curve.ed25519Legacy,"2b060104019755010501":L.curve.curve25519Legacy,"2b2403030208010107":L.curve.brainpoolP256r1,"2b240303020801010b":L.curve.brainpoolP384r1,"2b240303020801010d":L.curve.brainpoolP512r1};class xr{constructor(t){if(t instanceof xr)this.oid=t.oid;else if(F.isArray(t)||F.isUint8Array(t)){if(6===(t=new Uint8Array(t))[0]){if(t[1]!==t.length-2)throw Error("Length mismatch in DER encoded oid");t=t.subarray(2)}this.oid=t}else this.oid=""}read(t){if(t.length>=1){const e=t[0];if(t.length>=1+e)return this.oid=t.subarray(1,1+e),1+this.oid.length}throw Error("Invalid oid")}write(){return F.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return F.uint8ArrayToHex(this.oid)}getName(){const t=Mr[this.toHex()];if(!t)throw Error("Unknown curve object identifier.");return t}}function Qr(t){let e,r=0;const i=t[0];return i<192?([r]=t,e=1):i<255?(r=(t[0]-192<<8)+t[1]+192,e=2):255===i&&(r=F.readNumber(t.subarray(1,5)),e=5),{len:r,offset:e}}function Rr(t){return t<192?new Uint8Array([t]):t>191&&t<8384?new Uint8Array([192+(t-192>>8),t-192&255]):F.concatUint8Array([new Uint8Array([255]),F.writeNumber(t,4)])}function _r(t){if(t<0||t>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+t])}function Tr(t){return new Uint8Array([192|t])}function Lr(t,e){return F.concatUint8Array([Tr(t),Rr(e)])}function Nr(t){return[L.packet.literalData,L.packet.compressedData,L.packet.symmetricallyEncryptedData,L.packet.symEncryptedIntegrityProtectedData,L.packet.aeadEncryptedData].includes(t)}async function Or(t,e){const r=R(t);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||0==(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,l=-1;l=0,0!=(64&a)&&(l=1),l?h=63&a:(h=(63&a)>>2,c=3&a);const f=Nr(h);let y,d=null;if(f){if("array"===F.isStream(t)){const t=new u;i=_(t),d=t}else{const t=new TransformStream;i=_(t.writable),d=t.readable}n=e({tag:h,packet:d})}else d=[];do{if(l){const t=await r.readByte();if(y=!1,t<192)o=t;else if(t>=192&&t<224)o=(t-192<<8)+await r.readByte()+192;else if(t>223&&t<255){if(o=1<<(31&t),y=!0,!f)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let t=0;for(;;){i&&await i.ready;const{done:e,value:n}=await r.read();if(e){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-t);if(i?await i.write(s):d.push(s),t+=n.length,t>=o){r.unshift(n.subarray(o-t+n.length));break}}}}while(y);const p=await r.peekBytes(f?1/0:2);return i?(await i.ready,await i.close()):(d=F.concatUint8Array(d),await e({tag:h,packet:d})),!p||!p.length}catch(t){if(i)return await i.abort(t),!0;throw t}finally{i&&await n,r.releaseLock()}}class Fr extends Error{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,Fr),this.name="UnsupportedError"}}class Hr extends Fr{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,Fr),this.name="UnknownPacketError"}}class zr{constructor(t,e){this.tag=t,this.rawContent=e}write(){return this.rawContent}}const Gr=F.getWebCrypto(),qr=F.getNodeCrypto(),jr={[L.curve.nistP256]:"P-256",[L.curve.nistP384]:"P-384",[L.curve.nistP521]:"P-521"},Vr=qr?qr.getCurves():[],Zr=qr?{[L.curve.secp256k1]:Vr.includes("secp256k1")?"secp256k1":void 0,[L.curve.nistP256]:Vr.includes("prime256v1")?"prime256v1":void 0,[L.curve.nistP384]:Vr.includes("secp384r1")?"secp384r1":void 0,[L.curve.nistP521]:Vr.includes("secp521r1")?"secp521r1":void 0,[L.curve.ed25519Legacy]:Vr.includes("ED25519")?"ED25519":void 0,[L.curve.curve25519Legacy]:Vr.includes("X25519")?"X25519":void 0,[L.curve.brainpoolP256r1]:Vr.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[L.curve.brainpoolP384r1]:Vr.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[L.curve.brainpoolP512r1]:Vr.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},Jr={[L.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:Zr[L.curve.nistP256],web:jr[L.curve.nistP256],payloadSize:32,sharedSize:256},[L.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:L.publicKey.ecdsa,hash:L.hash.sha384,cipher:L.symmetric.aes192,node:Zr[L.curve.nistP384],web:jr[L.curve.nistP384],payloadSize:48,sharedSize:384},[L.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:L.publicKey.ecdsa,hash:L.hash.sha512,cipher:L.symmetric.aes256,node:Zr[L.curve.nistP521],web:jr[L.curve.nistP521],payloadSize:66,sharedSize:528},[L.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:Zr[L.curve.secp256k1],payloadSize:32},[L.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:L.publicKey.eddsaLegacy,hash:L.hash.sha512,node:!1,payloadSize:32},[L.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:L.publicKey.ecdh,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:!1,payloadSize:32},[L.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:Zr[L.curve.brainpoolP256r1],payloadSize:32},[L.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:L.publicKey.ecdsa,hash:L.hash.sha384,cipher:L.symmetric.aes192,node:Zr[L.curve.brainpoolP384r1],payloadSize:48},[L.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:L.publicKey.ecdsa,hash:L.hash.sha512,cipher:L.symmetric.aes256,node:Zr[L.curve.brainpoolP512r1],payloadSize:64}};class Yr{constructor(t){try{this.name=t instanceof xr?t.getName():L.write(L.curve,t)}catch(t){throw new Fr("Unknown curve")}const e=Jr[this.name];this.keyType=e.keyType,this.oid=e.oid,this.hash=e.hash,this.cipher=e.cipher,this.node=e.node,this.web=e.web,this.payloadSize=e.payloadSize,this.sharedSize=e.sharedSize,this.web&&F.getWebCrypto()?this.type="web":this.node&&F.getNodeCrypto()?this.type="node":this.name===L.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===L.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(t){const e=await Gr.generateKey({name:"ECDSA",namedCurve:jr[t]},!0,["sign","verify"]),r=await Gr.exportKey("jwk",e.privateKey),i=await Gr.exportKey("jwk",e.publicKey);return{publicKey:Xr(i),privateKey:V(r.d)}}(this.name)}catch(t){return F.printDebugError("Browser did not support generating ec key "+t.message),$r(this.name)}case"node":return async function(t){const e=qr.createECDH(Zr[t]);return await e.generateKeys(),{publicKey:new Uint8Array(e.getPublicKey()),privateKey:new Uint8Array(e.getPrivateKey())}}(this.name);case"curve25519Legacy":{const t=Se(32);t[0]=127&t[0]|64,t[31]&=248;const e=t.slice().reverse(),{publicKey:r}=ze.box.keyPair.fromSecretKey(e);return{publicKey:F.concatUint8Array([new Uint8Array([64]),r]),privateKey:t}}case"ed25519Legacy":{const t=Se(32),e=ze.sign.keyPair.fromSeed(t);return{publicKey:F.concatUint8Array([new Uint8Array([64]),e.publicKey]),privateKey:t}}default:return $r(this.name)}}}async function Wr(t,e,r,i){const n={[L.curve.nistP256]:!0,[L.curve.nistP384]:!0,[L.curve.nistP521]:!0,[L.curve.secp256k1]:!0,[L.curve.curve25519Legacy]:t===L.publicKey.ecdh,[L.curve.brainpoolP256r1]:!0,[L.curve.brainpoolP384r1]:!0,[L.curve.brainpoolP512r1]:!0},s=e.getName();if(!n[s])return!1;if(s===L.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:t}=ze.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const e=new Uint8Array([64,...t]);return!!F.equalsUint8Array(e,r)}const a=(await F.getNobleCurve(L.publicKey.ecdsa,s)).getPublicKey(i,!1);return!!F.equalsUint8Array(a,r)}async function $r(t){const e=await F.getNobleCurve(L.publicKey.ecdsa,t),r=e.utils.randomPrivateKey();return{publicKey:e.getPublicKey(r,!1),privateKey:r}}function Xr(t){const e=V(t.x),r=V(t.y),i=new Uint8Array(e.length+r.length+1);return i[0]=4,i.set(e,1),i.set(r,e.length+1),i}function ti(t,e,r){const i=t,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:e,x:Z(n,!0),y:Z(s,!0),ext:!0}}function ei(t,e,r,i){const n=ti(t,e,r);return n.d=Z(i,!0),n}const ri=F.getWebCrypto(),ii=F.getNodeCrypto();async function ni(t,e,r,i,n,s){const a=new Yr(t);if(r&&!F.isStream(r)){const t={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(t,e,r,i){const n=t.payloadSize,s=ei(t.payloadSize,jr[t.name],i.publicKey,i.privateKey),a=await ri.importKey("jwk",s,{name:"ECDSA",namedCurve:jr[t.name],hash:{name:L.read(L.webHash,t.hash)}},!1,["sign"]),o=new Uint8Array(await ri.sign({name:"ECDSA",namedCurve:jr[t.name],hash:{name:L.read(L.webHash,e)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,e,r,t)}catch(t){if("nistP521"!==a.name&&("DataError"===t.name||"OperationError"===t.name))throw t;F.printDebugError("Browser did not support signing: "+t.message)}break;case"node":return async function(t,e,r,i){const n=F.nodeRequire("eckey-utils"),s=F.getNodeBuffer(),{privateKey:a}=n.generateDer({curveName:Zr[t.name],privateKey:s.from(i)}),o=ii.createSign(L.read(L.hash,e));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=t.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,e,r,n)}}const o=(await F.getNobleCurve(L.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:o.r.toUint8Array("be",a.payloadSize),s:o.s.toUint8Array("be",a.payloadSize)}}async function si(t,e,r,i,n,s){const a=new Yr(t),o=async()=>0===s[0]&&ai(a,r,s.subarray(1),n);if(i&&!F.isStream(i))switch(a.type){case"web":try{const t=await async function(t,e,{r,s:i},n,s){const a=ti(t.payloadSize,jr[t.name],s),o=await ri.importKey("jwk",a,{name:"ECDSA",namedCurve:jr[t.name],hash:{name:L.read(L.webHash,t.hash)}},!1,["verify"]),c=F.concatUint8Array([r,i]).buffer;return ri.verify({name:"ECDSA",namedCurve:jr[t.name],hash:{name:L.read(L.webHash,e)}},o,c,n)}(a,e,r,i,n);return t||o()}catch(t){if("nistP521"!==a.name&&("DataError"===t.name||"OperationError"===t.name))throw t;F.printDebugError("Browser did not support verifying: "+t.message)}break;case"node":{const t=await async function(t,e,{r,s:i},n,s){const a=F.nodeRequire("eckey-utils"),o=F.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:Zr[t.name],publicKey:o.from(s)}),h=ii.createVerify(L.read(L.hash,e));h.write(n),h.end();const u=F.concatUint8Array([r,i]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(t){return!1}}(a,e,r,i,n);return t||o()}}return await ai(a,r,s,n)||o()}async function ai(t,e,r,i){return(await F.getNobleCurve(L.publicKey.ecdsa,t.name)).verify(F.concatUint8Array([e.r,e.s]),r,i,{lowS:!1})}var oi=/*#__PURE__*/Object.freeze({__proto__:null,sign:ni,validateParams:async function(t,e,r){const i=new Yr(t);if(i.keyType!==L.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=Se(8),n=L.hash.sha256,s=await vt.digest(n,i);try{const a=await ni(t,n,i,e,r,s);return await si(t,n,a,i,e,s)}catch(t){return!1}}default:return Wr(L.publicKey.ecdsa,t,e,r)}},verify:si});var ci=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(t,e,r,i,n,s){if(vt.getHashByteLength(e)<vt.getHashByteLength(L.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=F.concatUint8Array([n,i.subarray(1)]),o=ze.sign.detached(s,a);if(N.checkEdDSAFaultySignatures&&!ze.sign.detached.verify(s,o,i.subarray(1)))throw Error("Transient signing failure");return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(t,e,r){if(t.getName()!==L.curve.ed25519Legacy)return!1;const{publicKey:i}=ze.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return F.equalsUint8Array(e,n)},verify:async function(t,e,{r,s:i},n,s,a){if(vt.getHashByteLength(e)<vt.getHashByteLength(L.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=F.concatUint8Array([r,i]);return ze.sign.detached.verify(a,o,s.subarray(1))}});function hi(t){switch(t){case L.publicKey.ed25519:return 32;case L.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function ui(t){switch(t){case L.publicKey.ed25519:return L.hash.sha256;case L.publicKey.ed448:return L.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var li=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(t){switch(t){case L.publicKey.ed25519:{const e=Se(hi(t)),{publicKey:r}=ze.sign.keyPair.fromSeed(e);return{A:r,seed:e}}case L.publicKey.ed448:{const t=await F.getNobleCurve(L.publicKey.ed448),e=t.utils.randomPrivateKey();return{A:t.getPublicKey(e),seed:e}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:hi,getPreferredHashAlgo:ui,sign:async function(t,e,r,i,n,s){if(vt.getHashByteLength(e)<vt.getHashByteLength(ui(t)))throw Error("Hash algorithm too weak for EdDSA.");switch(t){case L.publicKey.ed25519:{const t=F.concatUint8Array([n,i]),e=ze.sign.detached(s,t);if(N.checkEdDSAFaultySignatures&&!ze.sign.detached.verify(s,e,i))throw Error("Transient signing failure");return{RS:e}}case L.publicKey.ed448:return{RS:(await F.getNobleCurve(L.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(t,e,r){switch(t){case L.publicKey.ed25519:{const{publicKey:t}=ze.sign.keyPair.fromSeed(r);return F.equalsUint8Array(e,t)}case L.publicKey.ed448:{const t=(await F.getNobleCurve(L.publicKey.ed448)).getPublicKey(r);return F.equalsUint8Array(e,t)}default:return!1}},verify:async function(t,e,{RS:r},i,n,s){if(vt.getHashByteLength(e)<vt.getHashByteLength(ui(t)))throw Error("Hash algorithm too weak for EdDSA.");switch(t){case L.publicKey.ed25519:return ze.sign.detached.verify(s,r,n);case L.publicKey.ed448:return(await F.getNobleCurve(L.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});const fi=F.getWebCrypto();async function yi(t,e,r){const{keySize:i}=nt(t);if(!F.isAES(t)||e.length!==i)throw Error("Unexpected algorithm or key size");try{const t=await fi.importKey("raw",e,{name:"AES-KW"},!1,["wrapKey"]),i=await fi.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),n=await fi.wrapKey("raw",i,t,{name:"AES-KW"});return new Uint8Array(n)}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return function(t,e,r){const i=new Ft(e,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=pi(r);let a=n;const o=s,c=s.length/2,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let t=0;t<=5;++t)for(let e=0;e<c;++e)h[1]=c*t+(1+e),u[0]=a[0],u[1]=a[1],u[2]=o[2*e],u[3]=o[2*e+1],u=pi(i.encrypt(gi(u))),a=u.subarray(0,2),a[0]^=h[0],a[1]^=h[1],o[2*e]=u[2],o[2*e+1]=u[3];return gi(a,o)}(0,e,r)}async function di(t,e,r){const{keySize:i}=nt(t);if(!F.isAES(t)||e.length!==i)throw Error("Unexpected algorithm or key size");let n;try{n=await fi.importKey("raw",e,{name:"AES-KW"},!1,["unwrapKey"])}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;return F.printDebugError("Browser did not support operation: "+t.message),function(t,e,r){const i=new Ft(e,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=pi(r);let a=s.subarray(0,2);const o=s.subarray(2),c=s.length/2-1,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let t=5;t>=0;--t)for(let e=c-1;e>=0;--e)h[1]=c*t+(e+1),u[0]=a[0]^h[0],u[1]=a[1]^h[1],u[2]=o[2*e],u[3]=o[2*e+1],u=pi(i.decrypt(gi(u))),a=u.subarray(0,2),o[2*e]=u[2],o[2*e+1]=u[3];if(a[0]===n[0]&&a[1]===n[1])return gi(o);throw Error("Key Data Integrity failed")}(0,e,r)}try{const t=await fi.unwrapKey("raw",r,n,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await fi.exportKey("raw",t))}catch(t){if("OperationError"===t.name)throw Error("Key Data Integrity failed");throw t}}function pi(t){const e=t.buffer,r=new DataView(e),i=new Uint32Array(t.length/4);for(let e=0;e<t.length/4;++e)i[e]=r.getUint32(4*e);return i}function gi(){let t=0;for(let e=0;e<arguments.length;++e)t+=4*arguments[e].length;const e=new ArrayBuffer(t),r=new DataView(e);let i=0;for(let t=0;t<arguments.length;++t){for(let e=0;e<arguments[t].length;++e)r.setUint32(i+4*e,arguments[t][e]);i+=4*arguments[t].length}return new Uint8Array(e)}var mi=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:di,wrap:yi});function wi(t){const e=8-t.length%8,r=new Uint8Array(t.length+e).fill(e);return r.set(t),r}function Ai(t){const e=t.length;if(e>0){const r=t[e-1];if(r>=1){const i=t.subarray(e-r),n=new Uint8Array(r).fill(r);if(F.equalsUint8Array(i,n))return t.subarray(0,e-r)}}throw Error("Invalid padding")}var bi=/*#__PURE__*/Object.freeze({__proto__:null,decode:Ai,encode:wi});const vi=F.getWebCrypto(),Ei=F.getNodeCrypto();function ki(t,e,r,i){return F.concatUint8Array([e.write(),new Uint8Array([t]),r.write(!0),F.stringToUint8Array("Anonymous Sender "),r.replacementFingerprint||i.subarray(0,20)])}async function Si(t,e,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<e.length&&0===e[a];a++);e=e.subarray(a)}if(s){for(a=e.length-1;a>=0&&0===e[a];a--);e=e.subarray(0,a+1)}return(await vt.digest(t,F.concatUint8Array([new Uint8Array([0,0,0,1]),e,i]))).subarray(0,r)}async function Ii(t,e){switch(t.type){case"curve25519Legacy":{const r=Se(32),{secretKey:i,sharedKey:n}=await Ci(t,e,null,r);let{publicKey:s}=ze.box.keyPair.fromSecretKey(i);return s=F.concatUint8Array([new Uint8Array([64]),s]),{publicKey:s,sharedKey:n}}case"web":if(t.web&&F.getWebCrypto())try{return await async function(t,e){const r=ti(t.payloadSize,t.web,e);let i=vi.generateKey({name:"ECDH",namedCurve:t.web},!0,["deriveKey","deriveBits"]),n=vi.importKey("jwk",r,{name:"ECDH",namedCurve:t.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=vi.deriveBits({name:"ECDH",namedCurve:t.web,public:n},i.privateKey,t.sharedSize),a=vi.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(Xr(a));return{publicKey:c,sharedKey:o}}(t,e)}catch(r){return F.printDebugError(r),Ki(t,e)}break;case"node":return async function(t,e){const r=Ei.createECDH(t.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(e)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(t,e);default:return Ki(t,e)}}async function Ci(t,e,r,i){if(i.length!==t.payloadSize){const e=new Uint8Array(t.payloadSize);e.set(i,t.payloadSize-i.length),i=e}switch(t.type){case"curve25519Legacy":{const t=i.slice().reverse();return{secretKey:t,sharedKey:ze.scalarMult(t,e.subarray(1))}}case"web":if(t.web&&F.getWebCrypto())try{return await async function(t,e,r,i){const n=ei(t.payloadSize,t.web,r,i);let s=vi.importKey("jwk",n,{name:"ECDH",namedCurve:t.web},!0,["deriveKey","deriveBits"]);const a=ti(t.payloadSize,t.web,e);let o=vi.importKey("jwk",a,{name:"ECDH",namedCurve:t.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=vi.deriveBits({name:"ECDH",namedCurve:t.web,public:o},s,t.sharedSize),h=vi.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:V(h.d),sharedKey:u}}(t,e,r,i)}catch(r){return F.printDebugError(r),Bi(t,e,i)}break;case"node":return async function(t,e,r){const i=Ei.createECDH(t.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(e));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(t,e,i);default:return Bi(t,e,i)}}async function Bi(t,e,r){return{secretKey:r,sharedKey:(await F.getNobleCurve(L.publicKey.ecdh,t.name)).getSharedSecret(r,e).subarray(1)}}async function Ki(t,e){const r=await F.getNobleCurve(L.publicKey.ecdh,t.name),{publicKey:i,privateKey:n}=await t.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,e).subarray(1)}}var Pi=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n,s,a){const o=new Yr(t),{sharedKey:c}=await Ci(o,r,n,s),h=ki(L.publicKey.ecdh,t,e,a),{keySize:u}=nt(e.cipher);let l;for(let t=0;t<3;t++)try{const r=await Si(e.hash,c,u,h,1===t,2===t);return Ai(await di(e.cipher,r,i))}catch(t){l=t}throw l},encrypt:async function(t,e,r,i,n){const s=wi(r),a=new Yr(t),{publicKey:o,sharedKey:c}=await Ii(a,i),h=ki(L.publicKey.ecdh,t,e,n),{keySize:u}=nt(e.cipher),l=await Si(e.hash,c,u,h);return{publicKey:o,wrappedKey:await yi(e.cipher,l,s)}},validateParams:async function(t,e,r){return Wr(L.publicKey.ecdh,t,e,r)}});const Di=F.getWebCrypto();async function Ui(t,e,r,i,n){const s=L.read(L.webHash,t);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Di.importKey("raw",e,"HKDF",!1,["deriveBits"]),o=await Di.deriveBits({name:"HKDF",hash:s,salt:r,info:i},a,8*n);return new Uint8Array(o)}const Mi={x25519:F.encodeUTF8("OpenPGP X25519"),x448:F.encodeUTF8("OpenPGP X448")};var xi=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n){switch(t){case L.publicKey.x25519:{const t=ze.scalarMult(n,e),s=F.concatUint8Array([e,i,t]),a=L.symmetric.aes128,{keySize:o}=nt(a);return di(a,await Ui(L.hash.sha256,s,new Uint8Array,Mi.x25519,o),r)}case L.publicKey.x448:{const t=(await F.getNobleCurve(L.publicKey.x448)).getSharedSecret(n,e),s=F.concatUint8Array([e,i,t]),a=L.symmetric.aes256,{keySize:o}=nt(L.symmetric.aes256);return di(a,await Ui(L.hash.sha512,s,new Uint8Array,Mi.x448,o),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(t,e,r){switch(t){case L.publicKey.x25519:{const t=Se(32),i=ze.scalarMult(t,r),{publicKey:n}=ze.box.keyPair.fromSecretKey(t),s=F.concatUint8Array([n,r,i]),a=L.symmetric.aes128,{keySize:o}=nt(a),c=await Ui(L.hash.sha256,s,new Uint8Array,Mi.x25519,o);return{ephemeralPublicKey:n,wrappedKey:await yi(a,c,e)}}case L.publicKey.x448:{const t=await F.getNobleCurve(L.publicKey.x448),i=t.utils.randomPrivateKey(),n=t.getSharedSecret(i,r),s=t.getPublicKey(i),a=F.concatUint8Array([s,r,n]),o=L.symmetric.aes256,{keySize:c}=nt(L.symmetric.aes256),h=await Ui(L.hash.sha512,a,new Uint8Array,Mi.x448,c);return{ephemeralPublicKey:s,wrappedKey:await yi(o,h,e)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(t){switch(t){case L.publicKey.x25519:{const t=Se(32),{publicKey:e}=ze.box.keyPair.fromSecretKey(t);return{A:e,k:t}}case L.publicKey.x448:{const t=await F.getNobleCurve(L.publicKey.x448),e=t.utils.randomPrivateKey();return{A:t.getPublicKey(e),k:e}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(t){switch(t){case L.publicKey.x25519:return 32;case L.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(t,e,r){switch(t){case L.publicKey.x25519:{const{publicKey:t}=ze.box.keyPair.fromSecretKey(r);return F.equalsUint8Array(e,t)}case L.publicKey.x448:{const t=(await F.getNobleCurve(L.publicKey.x448)).getPublicKey(r);return F.equalsUint8Array(e,t)}default:return!1}}}),Qi=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:Yr,ecdh:Pi,ecdhX:xi,ecdsa:oi,eddsa:li,eddsaLegacy:ci,generate:async function(t){const e=new Yr(t),{oid:r,hash:i,cipher:n}=e,s=await e.genKeyPair();return{oid:r,Q:s.publicKey,secret:F.leftPad(s.privateKey,e.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(t){return Jr[t.getName()].hash}});var Ri=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(t,e,r,i,n,s){const a=await F.getBigInteger(),o=new a(1);let c,h,u,l;i=new a(i),n=new a(n),r=new a(r),s=new a(s),r=r.mod(i),s=s.mod(n);const f=new a(e.subarray(0,n.byteLength())).mod(n);for(;;){if(c=await Ie(o,n),h=r.modExp(c,i).imod(n),h.isZero())continue;const t=s.mul(h).imod(n);if(l=f.add(t).imod(n),u=c.modInv(n).imul(l).imod(n),!u.isZero())break}return{r:h.toUint8Array("be",n.byteLength()),s:u.toUint8Array("be",n.byteLength())}},validateParams:async function(t,e,r,i,n){const s=await F.getBigInteger();t=new s(t),e=new s(e),r=new s(r),i=new s(i);const a=new s(1);if(r.lte(a)||r.gte(t))return!1;if(!t.dec().mod(e).isZero())return!1;if(!r.modExp(e,t).isOne())return!1;const o=new s(e.bitLength()),c=new s(150);if(o.lt(c)||!await Ke(e,null,32))return!1;n=new s(n);const h=new s(2),u=await Ie(h.leftShift(o.dec()),h.leftShift(o)),l=e.mul(u).add(n);return!!i.equal(r.modExp(l,t))},verify:async function(t,e,r,i,n,s,a,o){const c=await F.getBigInteger(),h=new c(0);if(e=new c(e),r=new c(r),s=new c(s),a=new c(a),n=new c(n),o=new c(o),e.lte(h)||e.gte(a)||r.lte(h)||r.gte(a))return F.printDebug("invalid DSA Signature"),!1;const u=new c(i.subarray(0,a.byteLength())).imod(a),l=r.modInv(a);if(l.isZero())return F.printDebug("invalid DSA Signature"),!1;n=n.mod(s),o=o.mod(s);const f=u.mul(l).imod(a),y=e.mul(l).imod(a),d=n.modExp(f,s),p=o.modExp(y,s);return d.mul(p).imod(s).imod(a).equal(e)}});const _i=new Set([L.hash.sha1,L.hash.sha256,L.hash.sha512]),Ti=F.getWebCrypto(),Li=F.getNodeCrypto();var Ni={rsa:Oe,elgamal:Fe,elliptic:Qi,dsa:Ri,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(t){if(!_i.has(t))throw Error("Unsupported hash algorithm.");const e=L.read(L.webHash,t),r=Ti||Li.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:e}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(t,e,r){if(!_i.has(t))throw Error("Unsupported hash algorithm.");const i=L.read(L.webHash,t),n=Ti||Li.webcrypto.subtle,s=await n.importKey("raw",e,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(t,e,r,i){if(!_i.has(t))throw Error("Unsupported hash algorithm.");const n=L.read(L.webHash,t),s=Ti||Li.webcrypto.subtle,a=await s.importKey("raw",e,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class Oi{constructor(t){if(void 0===t&&(t=new Uint8Array([])),!F.isUint8Array(t))throw Error("data must be in the form of a Uint8Array");this.data=t,this.length=this.data.byteLength}write(){return F.concatUint8Array([new Uint8Array([this.length]),this.data])}read(t){if(t.length>=1){const e=t[0];if(t.length>=e+1)return this.data=t.subarray(1,1+e),this.length=e,1+e}throw Error("Invalid octet string")}}var Fi=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(t,e){let r=0;switch(t){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const t=F.readMPI(e.subarray(r));return r+=t.length+2,{read:r,signatureParams:{s:t}}}case L.publicKey.dsa:case L.publicKey.ecdsa:{const t=F.readMPI(e.subarray(r));r+=t.length+2;const i=F.readMPI(e.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:t,s:i}}}case L.publicKey.eddsaLegacy:{let t=F.readMPI(e.subarray(r));r+=t.length+2,t=F.leftPad(t,32);let i=F.readMPI(e.subarray(r));return r+=i.length+2,i=F.leftPad(i,32),{read:r,signatureParams:{r:t,s:i}}}case L.publicKey.ed25519:case L.publicKey.ed448:{const i=2*Ni.elliptic.eddsa.getPayloadSize(t),n=F.readExactSubarray(e,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case L.publicKey.hmac:{const t=new Oi;return r+=t.read(e.subarray(r)),{read:r,signatureParams:{mac:t}}}default:throw new Fr("Unknown signature algorithm.")}},sign:async function(t,e,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(t){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const{n:t,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await Ni.rsa.sign(e,n,t,a,o,c,h,u,s)}}case L.publicKey.dsa:{const{g:t,p:n,q:a}=r,{x:o}=i;return Ni.dsa.sign(e,s,t,n,a,o)}case L.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case L.publicKey.ecdsa:{const{oid:t,Q:a}=r,{d:o}=i;return Ni.elliptic.ecdsa.sign(t,e,n,a,o,s)}case L.publicKey.eddsaLegacy:{const{oid:t,Q:a}=r,{seed:o}=i;return Ni.elliptic.eddsaLegacy.sign(t,e,n,a,o,s)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return Ni.elliptic.eddsa.sign(t,e,n,a,o,s)}case L.publicKey.hmac:{const{cipher:t}=r,{keyMaterial:e}=i,n=await Ni.hmac.sign(t.getValue(),e,s);return{mac:new Oi(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(t,e,r,i,n,s,a){switch(t){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const{n:t,e:n}=i,o=F.leftPad(r.s,t.length);return Ni.rsa.verify(e,s,o,t,n,a)}case L.publicKey.dsa:{const{g:t,p:n,q:s,y:o}=i,{r:c,s:h}=r;return Ni.dsa.verify(e,c,h,a,t,n,s,o)}case L.publicKey.ecdsa:{const{oid:t,Q:n}=i,o=new Ni.elliptic.CurveWithOID(t).payloadSize,c=F.leftPad(r.r,o),h=F.leftPad(r.s,o);return Ni.elliptic.ecdsa.verify(t,e,{r:c,s:h},s,n,a)}case L.publicKey.eddsaLegacy:{const{oid:t,Q:n}=i;return Ni.elliptic.eddsaLegacy.verify(t,e,r,s,n,a)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:n}=i;return Ni.elliptic.eddsa.verify(t,e,r,s,n,a)}case L.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:t}=i,{keyMaterial:e}=n;return Ni.hmac.verify(t.getValue(),e,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class Hi{constructor(t){t&&(this.data=t)}read(t){if(t.length>=1){const e=t[0];if(t.length>=1+e)return this.data=t.subarray(1,1+e),1+this.data.length}throw Error("Invalid symmetric key")}write(){return F.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class zi{constructor(t){if(t){const{version:e,hash:r,cipher:i,replacementFingerprint:n}=t;this.version=e||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(t){if(t.length<4||1!==t[1]&&255!==t[1])throw new Fr("Cannot read KDFParams");const e=t[0];this.version=t[1],this.hash=t[2],this.cipher=t[3];let r=4;if(255===this.version){const i=e-r+1;this.replacementFingerprint=t.slice(r,r+i),r+=i}return r}write(t){if(!this.version||1===this.version||t)return new Uint8Array([3,1,this.hash,this.cipher]);return F.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const Gi=t=>class{constructor(t){this.data=void 0===t?null:t}read(e){const r=e[0];return this.data=L.write(t,r),1}write(){return new Uint8Array([this.data])}getName(){return L.read(t,this.data)}getValue(){return this.data}},qi=Gi(L.aead),ji=Gi(L.symmetric),Vi=Gi(L.hash);class Zi{static fromObject({wrappedKey:t,algorithm:e}){const r=new Zi;return r.wrappedKey=t,r.algorithm=e,r}read(t){let e=0,r=t[e++];this.algorithm=r%2?t[e++]:null,r-=r%2,this.wrappedKey=F.readExactSubarray(t,e,e+r),e+=r}write(){return F.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function Ji(t,e){const r=Se(32);return{privateParams:{hashSeed:r,keyMaterial:t},publicParams:{cipher:e,digest:await vt.sha256(r)}}}function Yi(t){const{keySize:e}=nt(t);return Se(e)}function Wi(t){const e=L.read(L.aead,t);return Ee[e]}function $i(t){try{t.getName()}catch(t){throw new Fr("Unknown curve OID")}}function Xi(t,e){switch(t){case L.publicKey.ecdsa:case L.publicKey.ecdh:case L.publicKey.eddsaLegacy:return new Ni.elliptic.CurveWithOID(e).payloadSize;case L.publicKey.ed25519:case L.publicKey.ed448:return Ni.elliptic.eddsa.getPayloadSize(t);case L.publicKey.x25519:case L.publicKey.x448:return Ni.elliptic.ecdhX.getPayloadSize(t);default:throw Error("Unknown elliptic algo")}}var tn=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(t,e,r,i){switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:return Ni.rsa.generate(e,65537).then((({n:t,e,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:t,e}})));case L.publicKey.ecdsa:return Ni.elliptic.generate(r).then((({oid:t,Q:e,secret:r})=>({privateParams:{d:r},publicParams:{oid:new xr(t),Q:e}})));case L.publicKey.eddsaLegacy:return Ni.elliptic.generate(r).then((({oid:t,Q:e,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new xr(t),Q:e}})));case L.publicKey.ecdh:return Ni.elliptic.generate(r).then((({oid:t,Q:e,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new xr(t),Q:e,kdfParams:new zi({hash:i,cipher:n})}})));case L.publicKey.ed25519:case L.publicKey.ed448:return Ni.elliptic.eddsa.generate(t).then((({A:t,seed:e})=>({privateParams:{seed:e},publicParams:{A:t}})));case L.publicKey.x25519:case L.publicKey.x448:return Ni.elliptic.ecdhX.generate(t).then((({A:t,k:e})=>({privateParams:{k:e},publicParams:{A:t}})));case L.publicKey.hmac:return Ji(await Ni.hmac.generate(i),new Vi(i));case L.publicKey.aead:return Ji(Yi(i),new ji(i));case L.publicKey.dsa:case L.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:Yi,getAEADMode:Wi,getCipherParams:nt,getCurvePayloadSize:Xi,getPreferredCurveHashAlgo:function(t,e){switch(t){case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:return Ni.elliptic.getPreferredHashAlgo(e);case L.publicKey.ed25519:case L.publicKey.ed448:return Ni.elliptic.eddsa.getPreferredHashAlgo(t);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(t){const{blockSize:e}=nt(t),r=await Se(e),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return F.concat([r,i])},parseEncSessionKeyParams:function(t,e){let r=0;switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:return{c:F.readMPI(e.subarray(r))};case L.publicKey.elgamal:{const t=F.readMPI(e.subarray(r));r+=t.length+2;return{c1:t,c2:F.readMPI(e.subarray(r))}}case L.publicKey.ecdh:{const t=F.readMPI(e.subarray(r));r+=t.length+2;const i=new Hi;return i.read(e.subarray(r)),{V:t,C:i}}case L.publicKey.x25519:case L.publicKey.x448:{const i=Xi(t),n=F.readExactSubarray(e,r,r+i);r+=n.length;const s=new Zi;return s.read(e.subarray(r)),{ephemeralPublicKey:n,C:s}}case L.publicKey.aead:{const t=new qi;r+=t.read(e.subarray(r));const{ivLength:i}=Wi(t.getValue()),n=e.subarray(r,r+i);r+=i;const s=new Oi;return r+=s.read(e.subarray(r)),{aeadMode:t,iv:n,c:s}}default:throw new Fr("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(t,e,r){let i=0;switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const t=F.readMPI(e.subarray(i));i+=t.length+2;const r=F.readMPI(e.subarray(i));i+=r.length+2;const n=F.readMPI(e.subarray(i));i+=n.length+2;const s=F.readMPI(e.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:t,p:r,q:n,u:s}}}case L.publicKey.dsa:case L.publicKey.elgamal:{const t=F.readMPI(e.subarray(i));return i+=t.length+2,{read:i,privateParams:{x:t}}}case L.publicKey.ecdsa:case L.publicKey.ecdh:{const n=Xi(t,r.oid);let s=F.readMPI(e.subarray(i));return i+=s.length+2,s=F.leftPad(s,n),{read:i,privateParams:{d:s}}}case L.publicKey.eddsaLegacy:{const n=Xi(t,r.oid);let s=F.readMPI(e.subarray(i));return i+=s.length+2,s=F.leftPad(s,n),{read:i,privateParams:{seed:s}}}case L.publicKey.ed25519:case L.publicKey.ed448:{const r=Xi(t),n=F.readExactSubarray(e,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case L.publicKey.x25519:case L.publicKey.x448:{const r=Xi(t),n=F.readExactSubarray(e,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case L.publicKey.hmac:{const{cipher:t}=r,n=vt.getHashByteLength(t.getValue()),s=e.subarray(i,i+32);i+=32;const a=e.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case L.publicKey.aead:{const{cipher:t}=r,n=e.subarray(i,i+32);i+=32;const{keySize:s}=nt(t.getValue()),a=e.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new Fr("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(t,e){let r=0;switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const t=F.readMPI(e.subarray(r));r+=t.length+2;const i=F.readMPI(e.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:t,e:i}}}case L.publicKey.dsa:{const t=F.readMPI(e.subarray(r));r+=t.length+2;const i=F.readMPI(e.subarray(r));r+=i.length+2;const n=F.readMPI(e.subarray(r));r+=n.length+2;const s=F.readMPI(e.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:t,q:i,g:n,y:s}}}case L.publicKey.elgamal:{const t=F.readMPI(e.subarray(r));r+=t.length+2;const i=F.readMPI(e.subarray(r));r+=i.length+2;const n=F.readMPI(e.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:t,g:i,y:n}}}case L.publicKey.ecdsa:{const t=new xr;r+=t.read(e),$i(t);const i=F.readMPI(e.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:t,Q:i}}}case L.publicKey.eddsaLegacy:{const t=new xr;r+=t.read(e),$i(t);let i=F.readMPI(e.subarray(r));return r+=i.length+2,i=F.leftPad(i,33),{read:r,publicParams:{oid:t,Q:i}}}case L.publicKey.ecdh:{const t=new xr;r+=t.read(e),$i(t);const i=F.readMPI(e.subarray(r));r+=i.length+2;const n=new zi;return r+=n.read(e.subarray(r)),{read:r,publicParams:{oid:t,Q:i,kdfParams:n}}}case L.publicKey.ed25519:case L.publicKey.ed448:case L.publicKey.x25519:case L.publicKey.x448:{const i=F.readExactSubarray(e,r,r+Xi(t));return r+=i.length,{read:r,publicParams:{A:i}}}case L.publicKey.hmac:case L.publicKey.aead:{const t=new ji;r+=t.read(e);const i=vt.getHashByteLength(L.hash.sha256),n=e.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:t,digest:n}}}default:throw new Fr("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(t,e,r,i,n,s){switch(t){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:{const{c:t}=i,{n,e:a}=e,{d:o,p:c,q:h,u}=r;return Ni.rsa.decrypt(t,n,a,o,c,h,u,s)}case L.publicKey.elgamal:{const{c1:t,c2:n}=i,a=e.p,o=r.x;return Ni.elgamal.decrypt(t,n,a,o,s)}case L.publicKey.ecdh:{const{oid:t,Q:s,kdfParams:a}=e,{d:o}=r,{V:c,C:h}=i;return Ni.elliptic.ecdh.decrypt(t,a,c,h.data,s,o,n)}case L.publicKey.x25519:case L.publicKey.x448:{const{A:n}=e,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!F.isAES(o.algorithm))throw Error("AES session key expected");return Ni.elliptic.ecdhX.decrypt(t,a,o.wrappedKey,n,s)}case L.publicKey.aead:{const{cipher:t}=e,n=t.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=Wi(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(t,e,r,i,n,s){switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:{const{n:t,e}=r;return{c:await Ni.rsa.encrypt(n,t,e)}}case L.publicKey.elgamal:{const{p:t,g:e,y:i}=r;return Ni.elgamal.encrypt(n,t,e,i)}case L.publicKey.ecdh:{const{oid:t,Q:e,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await Ni.elliptic.ecdh.encrypt(t,i,n,e,s);return{V:a,C:new Hi(o)}}case L.publicKey.x25519:case L.publicKey.x448:{if(!F.isAES(e))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await Ni.elliptic.ecdhX.encrypt(t,n,i);return{ephemeralPublicKey:s,C:Zi.fromObject({algorithm:e,wrappedKey:a})}}case L.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:t}=r,e=t.getValue(),{keyMaterial:s}=i,a=N.preferredAEADAlgorithm,o=Wi(N.preferredAEADAlgorithm),{ivLength:c}=o,h=Se(c),u=await o(e,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new qi(a),iv:h,c:new Oi(l)}}default:return[]}},serializeParams:function(t,e){const r=new Set([L.publicKey.ed25519,L.publicKey.x25519,L.publicKey.ed448,L.publicKey.x448,L.publicKey.aead,L.publicKey.hmac]),i=Object.keys(e).map((i=>{const n=e[i];return F.isUint8Array(n)?r.has(t)?n:F.uint8ArrayToMPI(n):n.write()}));return F.concatUint8Array(i)},validateParams:async function(t,e,r){if(!e||!r)throw Error("Missing key parameters");switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const{n:t,e:i}=e,{d:n,p:s,q:a,u:o}=r;return Ni.rsa.validateParams(t,i,n,s,a,o)}case L.publicKey.dsa:{const{p:t,q:i,g:n,y:s}=e,{x:a}=r;return Ni.dsa.validateParams(t,i,n,s,a)}case L.publicKey.elgamal:{const{p:t,g:i,y:n}=e,{x:s}=r;return Ni.elgamal.validateParams(t,i,n,s)}case L.publicKey.ecdsa:case L.publicKey.ecdh:{const i=Ni.elliptic[L.read(L.publicKey,t)],{oid:n,Q:s}=e,{d:a}=r;return i.validateParams(n,s,a)}case L.publicKey.eddsaLegacy:{const{Q:t,oid:i}=e,{seed:n}=r;return Ni.elliptic.eddsaLegacy.validateParams(i,t,n)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:i}=e,{seed:n}=r;return Ni.elliptic.eddsa.validateParams(t,i,n)}case L.publicKey.x25519:case L.publicKey.x448:{const{A:i}=e,{k:n}=r;return Ni.elliptic.ecdhX.validateParams(t,i,n)}case L.publicKey.hmac:{const{cipher:t,digest:i}=e,{hashSeed:n,keyMaterial:s}=r;return vt.getHashByteLength(t.getValue())===s.length&&F.equalsUint8Array(i,await vt.sha256(n))}case L.publicKey.aead:{const{cipher:t,digest:i}=e,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=nt(t.getValue());return a===s.length&&F.equalsUint8Array(i,await vt.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const en={cipher:st,hash:vt,mode:Ee,publicKey:Ni,signature:Fi,random:Ce,pkcs1:Qe,pkcs5:bi,aesKW:mi};Object.assign(en,tn);class rn extends Error{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,rn),this.name="Argon2OutOfMemoryError"}}let nn,sn;class an{constructor(t=N){const{passes:e,parallelism:r,memoryExponent:i}=t.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=e,this.p=r,this.encodedM=i}generateSalt(){this.salt=en.random.getRandomBytes(16)}read(t){let e=0;return this.salt=t.subarray(e,e+16),e+=16,this.t=t[e++],this.p=t[e++],this.encodedM=t[e++],e}write(){const t=[new Uint8Array([L.write(L.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return F.concatUint8Array(t)}async produceKey(t,e){const r=2<<this.encodedM-1;try{nn=nn||(await Promise.resolve().then((function(){return Il}))).default,sn=sn||nn();const i=await sn,n=i({version:19,type:2,password:F.encodeUTF8(t),salt:this.salt,tagLength:e,memorySize:r,parallelism:this.p,passes:this.t});return r>1048576&&(sn=nn(),sn.catch((()=>{}))),n}catch(t){throw t.message&&(t.message.includes("Unable to grow instance memory")||t.message.includes("failed to grow memory")||t.message.includes("WebAssembly.Memory.grow")||t.message.includes("Out of memory"))?new rn("Could not allocate required memory for Argon2"):t}}}class on{constructor(t,e=N){this.algorithm=L.hash.sha256,this.type=L.read(L.s2k,t),this.c=e.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=en.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(t){let e=0;switch(this.algorithm=t[e++],this.type){case"simple":break;case"salted":this.salt=t.subarray(e,e+8),e+=8;break;case"iterated":this.salt=t.subarray(e,e+8),e+=8,this.c=t[e++];break;case"gnu":if("GNU"!==F.uint8ArrayToString(t.subarray(e,e+3)))throw new Fr("Unknown s2k type.");e+=3;if(1001!==1e3+t[e++])throw new Fr("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new Fr("Unknown s2k type.")}return e}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...F.stringToUint8Array("GNU"),1]);const t=[new Uint8Array([L.write(L.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":t.push(this.salt);break;case"iterated":t.push(this.salt),t.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return F.concatUint8Array(t)}async produceKey(t,e){t=F.encodeUTF8(t);const r=[];let i=0,n=0;for(;i<e;){let e;switch(this.type){case"simple":e=F.concatUint8Array([new Uint8Array(n),t]);break;case"salted":e=F.concatUint8Array([new Uint8Array(n),this.salt,t]);break;case"iterated":{const r=F.concatUint8Array([this.salt,t]);let i=r.length;const s=Math.max(this.getCount(),i);e=new Uint8Array(n+s),e.set(r,n);for(let t=n+i;t<s;t+=i,i*=2)e.copyWithin(t,n,t);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await en.hash.digest(this.algorithm,e);r.push(s),i+=s.length,n++}return F.concatUint8Array(r).subarray(0,e)}}const cn=new Set([L.s2k.argon2,L.s2k.iterated]);function hn(t,e=N){switch(t){case L.s2k.argon2:return new an(e);case L.s2k.iterated:case L.s2k.gnu:case L.s2k.salted:case L.s2k.simple:return new on(t,e);default:throw new Fr("Unsupported S2K type")}}function un(t){const{s2kType:e}=t;if(!cn.has(e))throw Error("The provided `config.s2kType` value is not allowed");return hn(e,t)}var ln=Uint8Array,fn=Uint16Array,yn=Uint32Array,dn=new ln([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),pn=new ln([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),gn=new ln([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),mn=function(t,e){for(var r=new fn(31),i=0;i<31;++i)r[i]=e+=1<<t[i-1];var n=new yn(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},wn=mn(dn,2),An=wn[0],bn=wn[1];An[28]=258,bn[258]=28;for(var vn=mn(pn,0),En=vn[0],kn=vn[1],Sn=new fn(32768),In=0;In<32768;++In){var Cn=(43690&In)>>>1|(21845&In)<<1;Cn=(61680&(Cn=(52428&Cn)>>>2|(13107&Cn)<<2))>>>4|(3855&Cn)<<4,Sn[In]=((65280&Cn)>>>8|(255&Cn)<<8)>>>1}var Bn=function(t,e,r){for(var i=t.length,n=0,s=new fn(e);n<i;++n)t[n]&&++s[t[n]-1];var a,o=new fn(e);for(n=0;n<e;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new fn(1<<e);var c=15-e;for(n=0;n<i;++n)if(t[n])for(var h=n<<4|t[n],u=e-t[n],l=o[t[n]-1]++<<u,f=l|(1<<u)-1;l<=f;++l)a[Sn[l]>>>c]=h}else for(a=new fn(i),n=0;n<i;++n)t[n]&&(a[n]=Sn[o[t[n]-1]++]>>>15-t[n]);return a},Kn=new ln(288);for(In=0;In<144;++In)Kn[In]=8;for(In=144;In<256;++In)Kn[In]=9;for(In=256;In<280;++In)Kn[In]=7;for(In=280;In<288;++In)Kn[In]=8;var Pn=new ln(32);for(In=0;In<32;++In)Pn[In]=5;var Dn=/*#__PURE__*/Bn(Kn,9,0),Un=/*#__PURE__*/Bn(Kn,9,1),Mn=/*#__PURE__*/Bn(Pn,5,0),xn=/*#__PURE__*/Bn(Pn,5,1),Qn=function(t){for(var e=t[0],r=1;r<t.length;++r)t[r]>e&&(e=t[r]);return e},Rn=function(t,e,r){var i=e/8|0;return(t[i]|t[i+1]<<8)>>(7&e)&r},_n=function(t,e){var r=e/8|0;return(t[r]|t[r+1]<<8|t[r+2]<<16)>>(7&e)},Tn=function(t){return(t+7)/8|0},Ln=function(t,e,r){(null==e||e<0)&&(e=0),(null==r||r>t.length)&&(r=t.length);var i=new(2==t.BYTES_PER_ELEMENT?fn:4==t.BYTES_PER_ELEMENT?yn:ln)(r-e);return i.set(t.subarray(e,r)),i},Nn=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],On=function(t,e,r){var i=Error(e||Nn[t]);if(i.code=t,Error.captureStackTrace&&Error.captureStackTrace(i,On),!r)throw i;return i},Fn=function(t,e,r){r<<=7&e;var i=e/8|0;t[i]|=r,t[i+1]|=r>>>8},Hn=function(t,e,r){r<<=7&e;var i=e/8|0;t[i]|=r,t[i+1]|=r>>>8,t[i+2]|=r>>>16},zn=function(t,e){for(var r=[],i=0;i<t.length;++i)t[i]&&r.push({s:i,f:t[i]});var n=r.length,s=r.slice();if(!n)return[Yn,0];if(1==n){var a=new ln(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(t,e){return t.f-e.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var f=s[0].s;for(i=1;i<n;++i)s[i].s>f&&(f=s[i].s);var y=new fn(f+1),d=Gn(r[u-1],y,0);if(d>e){i=0;var p=0,g=d-e,m=1<<g;for(s.sort((function(t,e){return y[e.s]-y[t.s]||t.f-e.f}));i<n;++i){var w=s[i].s;if(!(y[w]>e))break;p+=m-(1<<d-y[w]),y[w]=e}for(p>>>=g;p>0;){var A=s[i].s;y[A]<e?p-=1<<e-y[A]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;y[b]==e&&(--y[b],++p)}d=e}return[new ln(y),d]},Gn=function(t,e,r){return-1==t.s?Math.max(Gn(t.l,e,r+1),Gn(t.r,e,r+1)):e[t.s]=r},qn=function(t){for(var e=t.length;e&&!t[--e];);for(var r=new fn(++e),i=0,n=t[0],s=1,a=function(t){r[i++]=t},o=1;o<=e;++o)if(t[o]==n&&o!=e)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=t[o]}return[r.subarray(0,i),e]},jn=function(t,e){for(var r=0,i=0;i<e.length;++i)r+=t[i]*e[i];return r},Vn=function(t,e,r){var i=r.length,n=Tn(e+2);t[n]=255&i,t[n+1]=i>>>8,t[n+2]=255^t[n],t[n+3]=255^t[n+1];for(var s=0;s<i;++s)t[n+s+4]=r[s];return 8*(n+4+i)},Zn=function(t,e,r,i,n,s,a,o,c,h,u){Fn(e,u++,r),++n[256];for(var l=zn(n,15),f=l[0],y=l[1],d=zn(s,15),p=d[0],g=d[1],m=qn(f),w=m[0],A=m[1],b=qn(p),v=b[0],E=b[1],k=new fn(19),S=0;S<w.length;++S)k[31&w[S]]++;for(S=0;S<v.length;++S)k[31&v[S]]++;for(var I=zn(k,7),C=I[0],B=I[1],K=19;K>4&&!C[gn[K-1]];--K);var P,D,U,M,x=h+5<<3,Q=jn(n,Kn)+jn(s,Pn)+a,R=jn(n,f)+jn(s,p)+a+14+3*K+jn(k,C)+(2*k[16]+3*k[17]+7*k[18]);if(x<=Q&&x<=R)return Vn(e,u,t.subarray(c,c+h));if(Fn(e,u,1+(R<Q)),u+=2,R<Q){P=Bn(f,y,0),D=f,U=Bn(p,g,0),M=p;var _=Bn(C,B,0);Fn(e,u,A-257),Fn(e,u+5,E-1),Fn(e,u+10,K-4),u+=14;for(S=0;S<K;++S)Fn(e,u+3*S,C[gn[S]]);u+=3*K;for(var T=[w,v],L=0;L<2;++L){var N=T[L];for(S=0;S<N.length;++S){var O=31&N[S];Fn(e,u,_[O]),u+=C[O],O>15&&(Fn(e,u,N[S]>>>5&127),u+=N[S]>>>12)}}}else P=Dn,D=Kn,U=Mn,M=Pn;for(S=0;S<o;++S)if(i[S]>255){O=i[S]>>>18&31;Hn(e,u,P[O+257]),u+=D[O+257],O>7&&(Fn(e,u,i[S]>>>23&31),u+=dn[O]);var F=31&i[S];Hn(e,u,U[F]),u+=M[F],F>3&&(Hn(e,u,i[S]>>>5&8191),u+=pn[F])}else Hn(e,u,P[i[S]]),u+=D[i[S]];return Hn(e,u,P[256]),u+D[256]},Jn=/*#__PURE__*/new yn([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),Yn=/*#__PURE__*/new ln(0),Wn=function(t,e,r,i,n){return function(t,e,r,i,n,s){var a=t.length,o=new ln(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!e||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=Vn(c,h+1,t.subarray(u,l))}else{for(var f=Jn[e-1],y=f>>>13,d=8191&f,p=(1<<r)-1,g=new fn(32768),m=new fn(p+1),w=Math.ceil(r/3),A=2*w,b=function(e){return(t[e]^t[e+1]<<w^t[e+2]<<A)&p},v=new yn(25e3),E=new fn(288),k=new fn(32),S=0,I=0,C=(u=0,0),B=0,K=0;u<a;++u){var P=b(u),D=32767&u,U=m[P];if(g[D]=U,m[P]=D,B<=u){var M=a-u;if((S>7e3||C>24576)&&M>423){h=Zn(t,c,0,v,E,k,I,C,K,u-K,h),C=S=I=0,K=u;for(var x=0;x<286;++x)E[x]=0;for(x=0;x<30;++x)k[x]=0}var Q=2,R=0,_=d,T=D-U&32767;if(M>2&&P==b(u-T))for(var L=Math.min(y,M)-1,N=Math.min(32767,u),O=Math.min(258,M);T<=N&&--_&&D!=U;){if(t[u+Q]==t[u+Q-T]){for(var F=0;F<O&&t[u+F]==t[u+F-T];++F);if(F>Q){if(Q=F,R=T,F>L)break;var H=Math.min(T,F-2),z=0;for(x=0;x<H;++x){var G=u-T+x+32768&32767,q=G-g[G]+32768&32767;q>z&&(z=q,U=G)}}}T+=(D=U)-(U=g[D])+32768&32767}if(R){v[C++]=268435456|bn[Q]<<18|kn[R];var j=31&bn[Q],V=31&kn[R];I+=dn[j]+pn[V],++E[257+j],++k[V],B=u+Q,++S}else v[C++]=t[u],++E[t[u]]}}h=Zn(t,c,s,v,E,k,I,C,K,u-K,h),!s&&7&h&&(h=Vn(c,h+1,Yn))}return Ln(o,0,i+Tn(h)+n)}(t,null==e.level?6:e.level,null==e.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(t.length)))):12+e.mem,r,i,!n)},$n=/*#__PURE__*/function(){function t(t,e){e||"function"!=typeof t||(e=t,t={}),this.ondata=e,this.o=t||{}}return t.prototype.p=function(t,e){this.ondata(Wn(t,this.o,0,0,!e),e)},t.prototype.push=function(t,e){this.ondata||On(5),this.d&&On(4),this.d=e,this.p(t,e||!1)},t}(),Xn=/*#__PURE__*/function(){function t(t){this.s={},this.p=new ln(0),this.ondata=t}return t.prototype.e=function(t){this.ondata||On(5),this.d&&On(4);var e=this.p.length,r=new ln(e+t.length);r.set(this.p),r.set(t,e),this.p=r},t.prototype.c=function(t){this.d=this.s.i=t||!1;var e=this.s.b,r=function(t,e,r){var i=t.length;if(!i||r&&r.f&&!r.l)return e||new ln(0);var n=!e||r,s=!r||r.i;r||(r={}),e||(e=new ln(3*i));var a=function(t){var r=e.length;if(t>r){var i=new ln(Math.max(2*r,t));i.set(e),e=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,f=r.m,y=r.n,d=8*i;do{if(!u){o=Rn(t,c,1);var p=Rn(t,c+1,3);if(c+=3,!p){var g=t[(B=Tn(c)+4)-4]|t[B-3]<<8,m=B+g;if(m>i){s&&On(0);break}n&&a(h+g),e.set(t.subarray(B,m),h),r.b=h+=g,r.p=c=8*m,r.f=o;continue}if(1==p)u=Un,l=xn,f=9,y=5;else if(2==p){var w=Rn(t,c,31)+257,A=Rn(t,c+10,15)+4,b=w+Rn(t,c+5,31)+1;c+=14;for(var v=new ln(b),E=new ln(19),k=0;k<A;++k)E[gn[k]]=Rn(t,c+3*k,7);c+=3*A;var S=Qn(E),I=(1<<S)-1,C=Bn(E,S,1);for(k=0;k<b;){var B,K=C[Rn(t,c,I)];if(c+=15&K,(B=K>>>4)<16)v[k++]=B;else{var P=0,D=0;for(16==B?(D=3+Rn(t,c,3),c+=2,P=v[k-1]):17==B?(D=3+Rn(t,c,7),c+=3):18==B&&(D=11+Rn(t,c,127),c+=7);D--;)v[k++]=P}}var U=v.subarray(0,w),M=v.subarray(w);f=Qn(U),y=Qn(M),u=Bn(U,f,1),l=Bn(M,y,1)}else On(1);if(c>d){s&&On(0);break}}n&&a(h+131072);for(var x=(1<<f)-1,Q=(1<<y)-1,R=c;;R=c){var _=(P=u[_n(t,c)&x])>>>4;if((c+=15&P)>d){s&&On(0);break}if(P||On(2),_<256)e[h++]=_;else{if(256==_){R=c,u=null;break}var T=_-254;if(_>264){var L=dn[k=_-257];T=Rn(t,c,(1<<L)-1)+An[k],c+=L}var N=l[_n(t,c)&Q],O=N>>>4;if(N||On(3),c+=15&N,M=En[O],O>3&&(L=pn[O],M+=_n(t,c)&(1<<L)-1,c+=L),c>d){s&&On(0);break}n&&a(h+131072);for(var F=h+T;h<F;h+=4)e[h]=e[h-M],e[h+1]=e[h+1-M],e[h+2]=e[h+2-M],e[h+3]=e[h+3-M];h=F}}r.l=u,r.p=R,r.b=h,r.f=o,u&&(o=1,r.m=f,r.d=l,r.n=y)}while(!o);return h==e.length?e:Ln(e,0,h)}(this.p,this.o,this.s);this.ondata(Ln(r,e,this.s.b),this.d),this.o=Ln(r,this.s.b-32768),this.s.b=this.o.length,this.p=Ln(this.p,this.s.p/8|0),this.s.p&=7},t.prototype.push=function(t,e){this.e(t),this.c(e)},t}(),ts=/*#__PURE__*/function(){function t(t,e){var r,i;this.c=(r=1,i=0,{p:function(t){for(var e=r,n=i,s=0|t.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=e+=t[a];e=(65535&e)+15*(e>>16),n=(65535&n)+15*(n>>16)}r=e,i=n},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(i%=65521))<<8|i>>>8}}),this.v=1,$n.call(this,t,e)}return t.prototype.push=function(t,e){$n.prototype.push.call(this,t,e)},t.prototype.p=function(t,e){this.c.p(t);var r=Wn(t,this.o,this.v&&2,e&&4,!e);this.v&&(function(t,e){var r=e.level,i=0==r?0:r<6?1:9==r?3:2;t[0]=120,t[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),e&&function(t,e,r){for(;r;++e)t[e]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,e)},t}(),es=/*#__PURE__*/function(){function t(t){this.v=1,Xn.call(this,t)}return t.prototype.push=function(t,e){if(Xn.prototype.e.call(this,t),this.v){if(this.p.length<2&&!e)return;this.p=this.p.subarray(2),this.v=0}e&&(this.p.length<4&&On(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),Xn.prototype.c.call(this,e)},t}(),rs="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{rs.decode(Yn,{stream:!0}),1}catch(t){}var is=void 0!==t?t:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function ns(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default")?t.default:t}var ss=[0,1,3,7,15,31,63,127,255],as=function(t){this.stream=t,this.bitOffset=0,this.curByte=0,this.hasByte=!1};as.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},as.prototype.read=function(t){for(var e=0;t>0;){this._ensureByte();var r=8-this.bitOffset;if(t>=r)e<<=r,e|=ss[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,t-=r;else{e<<=t;var i=r-t;e|=(this.curByte&ss[t]<<i)>>i,this.bitOffset+=t,t=0}}return e},as.prototype.seek=function(t){var e=t%8,r=(t-e)/8;this.bitOffset=e,this.stream.seek(r),this.hasByte=!1},as.prototype.pi=function(){var t,e=new Uint8Array(6);for(t=0;t<e.length;t++)e[t]=this.read(8);return function(t){return Array.prototype.map.call(t,(t=>("00"+t.toString(16)).slice(-2))).join("")}(e)};var os=as,cs=function(){};cs.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},cs.prototype.read=function(t,e,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;t[e++]=n,i++}return i},cs.prototype.seek=function(t){throw Error("abstract method seek() not implemented")},cs.prototype.writeByte=function(t){throw Error("abstract method readByte() not implemented")},cs.prototype.write=function(t,e,r){var i;for(i=0;i<r;i++)this.writeByte(t[e++]);return r},cs.prototype.flush=function(){};var hs,us=cs,ls=(hs=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var t=4294967295;this.getCRC=function(){return~t>>>0},this.updateCRC=function(e){t=t<<8^hs[255&(t>>>24^e)]},this.updateCRCRun=function(e,r){for(;r-- >0;)t=t<<8^hs[255&(t>>>24^e)]}}),fs=os,ys=us,ds=ls,ps=function(t,e){var r,i=t[e];for(r=e;r>0;r--)t[r]=t[r-1];return t[0]=i,i},gs={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},ms={};ms[gs.LAST_BLOCK]="Bad file checksum",ms[gs.NOT_BZIP_DATA]="Not bzip data",ms[gs.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",ms[gs.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",ms[gs.DATA_ERROR]="Data error",ms[gs.OUT_OF_MEMORY]="Out of memory",ms[gs.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var ws=function(t,e){var r=ms[t]||"unknown error";e&&(r+=": "+e);var i=new TypeError(r);throw i.errorCode=t,i},As=function(t,e){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(t,e)};As.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new ds,!0):(this.writeCount=-1,!1)},As.prototype._start_bunzip=function(t,e){var r=new Uint8Array(4);4===t.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||ws(gs.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&ws(gs.NOT_BZIP_DATA,"level out of range"),this.reader=new fs(t),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=e,this.streamCRC=0},As.prototype._get_next_block=function(){var t,e,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&ws(gs.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&ws(gs.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&ws(gs.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(t=0;t<16;t++)if(a&1<<15-t){var h=16*t;for(r=i.read(16),e=0;e<16;e++)r&1<<15-e&&(o[c++]=h+e)}var u=i.read(3);(u<2||u>6)&&ws(gs.DATA_ERROR);var l=i.read(15);0===l&&ws(gs.DATA_ERROR);var f=new Uint8Array(256);for(t=0;t<u;t++)f[t]=t;var y=new Uint8Array(l);for(t=0;t<l;t++){for(e=0;i.read(1);e++)e>=u&&ws(gs.DATA_ERROR);y[t]=ps(f,e)}var d,p=c+2,g=[];for(e=0;e<u;e++){var m,w,A=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),t=0;t<p;t++){for(;(a<1||a>20)&&ws(gs.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;A[t]=a}for(m=w=A[0],t=1;t<p;t++)A[t]>w?w=A[t]:A[t]<m&&(m=A[t]);d={},g.push(d),d.permute=new Uint16Array(258),d.limit=new Uint32Array(22),d.base=new Uint32Array(21),d.minLen=m,d.maxLen=w;var v=0;for(t=m;t<=w;t++)for(b[t]=d.limit[t]=0,a=0;a<p;a++)A[a]===t&&(d.permute[v++]=a);for(t=0;t<p;t++)b[A[t]]++;for(v=a=0,t=m;t<w;t++)v+=b[t],d.limit[t]=v-1,v<<=1,a+=b[t],d.base[t+1]=v-a;d.limit[w+1]=Number.MAX_VALUE,d.limit[w]=v+b[w]-1,d.base[m]=0}var E=new Uint32Array(256);for(t=0;t<256;t++)f[t]=t;var k,S=0,I=0,C=0,B=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,C>=l&&ws(gs.DATA_ERROR),d=g[y[C++]]),t=d.minLen,e=i.read(t);t>d.maxLen&&ws(gs.DATA_ERROR),!(e<=d.limit[t]);t++)e=e<<1|i.read(1);((e-=d.base[t])<0||e>=258)&&ws(gs.DATA_ERROR);var K=d.permute[e];if(0!==K&&1!==K){if(S)for(S=0,I+a>this.dbufSize&&ws(gs.DATA_ERROR),E[k=o[f[0]]]+=a;a--;)B[I++]=k;if(K>c)break;I>=this.dbufSize&&ws(gs.DATA_ERROR),E[k=o[k=ps(f,t=K-1)]]++,B[I++]=k}else S||(S=1,a=0),a+=0===K?S:2*S,S<<=1}for((s<0||s>=I)&&ws(gs.DATA_ERROR),e=0,t=0;t<256;t++)r=e+E[t],E[t]=e,e=r;for(t=0;t<I;t++)B[E[k=255&B[t]]]|=t<<8,E[k]++;var P=0,D=0,U=0;return I&&(D=255&(P=B[s]),P>>=8,U=-1),this.writePos=P,this.writeCurrent=D,this.writeCount=I,this.writeRun=U,!0},As.prototype._read_bunzip=function(t,e){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&ws(gs.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var bs=function(t){if("readByte"in t)return t;var e=new ys;return e.pos=0,e.readByte=function(){return t[this.pos++]},e.seek=function(t){this.pos=t},e.eof=function(){return this.pos>=t.length},e},vs=function(t){var e=new ys,r=!0;if(t)if("number"==typeof t)e.buffer=new Uint8Array(t),r=!1;else{if("writeByte"in t)return t;e.buffer=t,r=!1}else e.buffer=new Uint8Array(16384);return e.pos=0,e.writeByte=function(t){if(r&&this.pos>=this.buffer.length){var e=new Uint8Array(2*this.buffer.length);e.set(this.buffer),this.buffer=e}this.buffer[this.pos++]=t},e.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var t=new Uint8Array(this.pos);t.set(this.buffer.subarray(0,this.pos)),this.buffer=t}return this.buffer},e._coerced=!0,e};var Es=function(t,e,r){for(var i=bs(t),n=vs(e),s=new As(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&ws(gs.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class ks{static get tag(){return L.packet.literalData}constructor(t=new Date){this.format=L.literal.utf8,this.date=F.normalizeDate(t),this.text=null,this.data=null,this.filename=""}setText(t,e=L.literal.utf8){this.format=e,this.text=t,this.data=null}getText(t=!1){return(null===this.text||F.isStream(this.text))&&(this.text=F.decodeUTF8(F.nativeEOL(this.getBytes(t)))),this.text}setBytes(t,e){this.format=e,this.data=t,this.text=null}getBytes(t=!1){return null===this.data&&(this.data=F.canonicalizeEOL(F.encodeUTF8(this.text))),t?P(this.data):this.data}setFilename(t){this.filename=t}getFilename(){return this.filename}async read(t){await B(t,(async t=>{const e=await t.readByte(),r=await t.readByte();this.filename=F.decodeUTF8(await t.readBytes(r)),this.date=F.readDate(await t.readBytes(4));let i=t.remainder();l(i)&&(i=await M(i)),this.setBytes(i,e)}))}writeHeader(){const t=F.encodeUTF8(this.filename),e=new Uint8Array([t.length]),r=new Uint8Array([this.format]),i=F.writeDate(this.date);return F.concatUint8Array([r,e,t,i])}write(){const t=this.writeHeader(),e=this.getBytes();return F.concat([t,e])}}class Ss{constructor(){this.bytes=""}read(t){return this.bytes=F.uint8ArrayToString(t.subarray(0,8)),this.bytes.length}write(){return F.stringToUint8Array(this.bytes)}toHex(){return F.uint8ArrayToHex(F.stringToUint8Array(this.bytes))}equals(t,e=!1){return e&&(t.isWildcard()||this.isWildcard())||this.bytes===t.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(t){return t.toHex()}static fromID(t){const e=new Ss;return e.read(F.hexToUint8Array(t)),e}static wildcard(){const t=new Ss;return t.read(new Uint8Array(8)),t}}const Is=Symbol("verified"),Cs=new Set([L.signatureSubpacket.issuerKeyID,L.signatureSubpacket.issuerFingerprint,L.signatureSubpacket.embeddedSignature]);class Bs{static get tag(){return L.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Ss,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Is]=null}read(t){let e=0;if(this.version=t[e++],4!==this.version&&5!==this.version&&6!==this.version)throw new Fr(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=t[e++],this.publicKeyAlgorithm=t[e++],this.hashAlgorithm=t[e++],e+=this.readSubPackets(t.subarray(e,t.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=t.subarray(0,e),e+=this.readSubPackets(t.subarray(e,t.length),!1),this.signedHashValue=t.subarray(e,e+2),e+=2,6===this.version){const r=t[e++];this.salt=t.subarray(e,e+r),e+=r}const r=t.subarray(e,t.length),{read:i,signatureParams:n}=en.signature.parseSignatureParams(this.publicKeyAlgorithm,r);if(i<r.length)throw Error("Error reading MPIs");this.params=n}writeParams(){return this.params instanceof Promise?Q((async()=>en.serializeParams(this.publicKeyAlgorithm,await this.params))):en.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const t=[];return t.push(this.signatureData),t.push(this.writeUnhashedSubPackets()),t.push(this.signedHashValue),6===this.version&&(t.push(new Uint8Array([this.salt.length])),t.push(this.salt)),t.push(this.writeParams()),F.concat(t)}async sign(t,e,r=new Date,i=!1){this.version=t.version,this.created=F.normalizeDate(r),this.issuerKeyVersion=t.version,this.issuerFingerprint=t.getFingerprintBytes(),this.issuerKeyID=t.getKeyID();const n=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(n.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=F.concat(n),6===this.version){const t=Ps(this.hashAlgorithm);if(null===this.salt)this.salt=en.random.getRandomBytes(t);else if(t!==this.salt.length)throw Error("Provided salt does not have the required length")}const s=this.toHash(this.signatureType,e,i),a=await this.hash(this.signatureType,e,s,i);this.signedHashValue=U(K(a),0,2);const o=async()=>en.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,t.publicParams,t.privateParams,s,await M(a));F.isStream(a)?this.params=o():(this.params=await o(),this[Is]=!0)}writeHashedSubPackets(){const t=L.signatureSubpacket,e=[];let r;if(null===this.created)throw Error("Missing signature creation time");e.push(Ks(t.signatureCreationTime,!0,F.writeDate(this.created))),null!==this.signatureExpirationTime&&e.push(Ks(t.signatureExpirationTime,!0,F.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&e.push(Ks(t.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),e.push(Ks(t.trustSignature,!0,r))),null!==this.regularExpression&&e.push(Ks(t.regularExpression,!0,this.regularExpression)),null!==this.revocable&&e.push(Ks(t.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&e.push(Ks(t.keyExpirationTime,!0,F.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredSymmetricAlgorithms)),e.push(Ks(t.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=F.concat([r,this.revocationKeyFingerprint]),e.push(Ks(t.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&e.push(Ks(t.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=F.encodeUTF8(i);r.push(F.writeNumber(o.length,2)),r.push(F.writeNumber(n.length,2)),r.push(o),r.push(n),r=F.concat(r),e.push(Ks(t.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredHashAlgorithms)),e.push(Ks(t.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredCompressionAlgorithms)),e.push(Ks(t.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyServerPreferences)),e.push(Ks(t.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&e.push(Ks(t.preferredKeyServer,!1,F.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&e.push(Ks(t.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&e.push(Ks(t.policyURI,!1,F.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyFlags)),e.push(Ks(t.keyFlags,!0,r))),null!==this.signersUserID&&e.push(Ks(t.signersUserID,!1,F.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=F.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),e.push(Ks(t.reasonForRevocation,!0,r))),null!==this.features&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.features)),e.push(Ks(t.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(F.stringToUint8Array(this.signatureTargetHash)),r=F.concat(r),e.push(Ks(t.signatureTarget,!0,r))),null!==this.embeddedSignature&&e.push(Ks(t.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=F.concat(r),e.push(Ks(t.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredAEADAlgorithms)),e.push(Ks(t.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),e.push(Ks(t.preferredCipherSuites,!1,r)));const i=F.concat(e),n=F.writeNumber(i.length,6===this.version?4:2);return F.concat([n,i])}writeUnhashedSubPackets(){const t=[];this.unhashedSubpackets.forEach((e=>{t.push(Rr(e.length)),t.push(e)}));const e=F.concat(t),r=F.writeNumber(e.length,6===this.version?4:2);return F.concat([r,e])}readSubPacket(t,e=!0){let r=0;const i=!!(128&t[r]),n=127&t[r];if(e||(this.unhashedSubpackets.push(t.subarray(r,t.length)),Cs.has(n)))switch(r++,n){case L.signatureSubpacket.signatureCreationTime:this.created=F.readDate(t.subarray(r,t.length));break;case L.signatureSubpacket.signatureExpirationTime:{const e=F.readNumber(t.subarray(r,t.length));this.signatureNeverExpires=0===e,this.signatureExpirationTime=e;break}case L.signatureSubpacket.exportableCertification:this.exportable=1===t[r++];break;case L.signatureSubpacket.trustSignature:this.trustLevel=t[r++],this.trustAmount=t[r++];break;case L.signatureSubpacket.regularExpression:this.regularExpression=t[r];break;case L.signatureSubpacket.revocable:this.revocable=1===t[r++];break;case L.signatureSubpacket.keyExpirationTime:{const e=F.readNumber(t.subarray(r,t.length));this.keyExpirationTime=e,this.keyNeverExpires=0===e;break}case L.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.revocationKey:this.revocationKeyClass=t[r++],this.revocationKeyAlgorithm=t[r++],this.revocationKeyFingerprint=t.subarray(r,r+20);break;case L.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(t.subarray(r,t.length));else if(e)throw Error("Unexpected Issuer Key ID subpacket");break;case L.signatureSubpacket.notationData:{const e=!!(128&t[r]);r+=4;const n=F.readNumber(t.subarray(r,r+2));r+=2;const s=F.readNumber(t.subarray(r,r+2));r+=2;const a=F.decodeUTF8(t.subarray(r,r+n)),o=t.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:e,value:o,critical:i}),e&&(this.notations[a]=F.decodeUTF8(o));break}case L.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=F.decodeUTF8(t.subarray(r,t.length));break;case L.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==t[r++];break;case L.signatureSubpacket.policyURI:this.policyURI=F.decodeUTF8(t.subarray(r,t.length));break;case L.signatureSubpacket.keyFlags:this.keyFlags=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.signersUserID:this.signersUserID=F.decodeUTF8(t.subarray(r,t.length));break;case L.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=t[r++],this.reasonForRevocationString=F.decodeUTF8(t.subarray(r,t.length));break;case L.signatureSubpacket.features:this.features=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=t[r++],this.signatureTargetHashAlgorithm=t[r++];const e=en.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=F.uint8ArrayToString(t.subarray(r,r+e));break}case L.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Bs,this.embeddedSignature.read(t.subarray(r,t.length));break;case L.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=t[r++],this.issuerFingerprint=t.subarray(r,t.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case L.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let e=r;e<t.length;e+=2)this.preferredCipherSuites.push([t[e],t[e+1]]);break;default:{const t=Error("Unknown signature subpacket type "+n);if(i)throw t;F.printDebug(t)}}}readSubPackets(t,e=!0,r){const i=6===this.version?4:2,n=F.readNumber(t.subarray(0,i));let s=i;for(;s<2+n;){const i=Qr(t.subarray(s,t.length));s+=i.offset,this.readSubPacket(t.subarray(s,s+i.len),e,r),s+=i.len}return s}toSign(t,e){const r=L.signature;switch(t){case r.binary:return null!==e.text?F.encodeUTF8(e.getText(!0)):e.getBytes(!0);case r.text:{const t=e.getBytes(!0);return F.canonicalizeEOL(t)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let t,i;if(e.userID)i=180,t=e.userID;else{if(!e.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,t=e.userAttribute}const n=t.write();return F.concat([this.toSign(r.key,e),new Uint8Array([i]),F.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return F.concat([this.toSign(r.key,e),this.toSign(r.key,{key:e.bind})]);case r.key:if(void 0===e.key)throw Error("Key packet is required for this signature.");return e.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,e);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(t,e){let r=0;return I(K(this.signatureData),(t=>{r+=t.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==L.signature.binary&&this.signatureType!==L.signature.text||(e?i.push(new Uint8Array(6)):i.push(t.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(F.writeNumber(r,4)),F.concat(i)}))}toHash(t,e,r=!1){const i=this.toSign(t,e);return F.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(e,r)])}async hash(t,e,r,i=!1){if(6===this.version&&this.salt.length!==Ps(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(t,e,i)),en.hash.digest(this.hashAlgorithm,r)}async verify(t,e,r,i=new Date,n=!1,s=N){if(!this.issuerKeyID.equals(t.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==t.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=e===L.signature.binary||e===L.signature.text;if(!(this[Is]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(e,r,n),s=await this.hash(e,r,i)),s=await M(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===L.publicKey.hmac?t.privateParams:null;if(this[Is]=await en.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,t.publicParams,a,i,s),!this[Is])throw Error("Signature verification failed")}const o=F.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+L.read(L.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[L.signature.binary,L.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+L.read(L.hash,this.hashAlgorithm).toUpperCase());if(this.rawNotations.forEach((({name:t,critical:e})=>{if(e&&s.knownNotations.indexOf(t)<0)throw Error("Unknown critical notation: "+t)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(t=new Date){const e=F.normalizeDate(t);return null!==e&&!(this.created<=e&&e<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ks(t,e,r){const i=[];return i.push(Rr(r.length+1)),i.push(new Uint8Array([(e?128:0)|t])),i.push(r),F.concat(i)}function Ps(t){switch(t){case L.hash.sha256:return 16;case L.hash.sha384:return 24;case L.hash.sha512:return 32;case L.hash.sha224:case L.hash.sha3_256:return 16;case L.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Ds{static get tag(){return L.packet.onePassSignature}static fromSignaturePacket(t,e){const r=new Ds;return r.version=6===t.version?6:3,r.signatureType=t.signatureType,r.hashAlgorithm=t.hashAlgorithm,r.publicKeyAlgorithm=t.publicKeyAlgorithm,r.issuerKeyID=t.issuerKeyID,r.salt=t.salt,r.issuerFingerprint=t.issuerFingerprint,r.flags=e?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(t){let e=0;if(this.version=t[e++],3!==this.version&&6!==this.version)throw new Fr(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=t[e++],this.hashAlgorithm=t[e++],this.publicKeyAlgorithm=t[e++],6===this.version){const r=t[e++];this.salt=t.subarray(e,e+r),e+=r,this.issuerFingerprint=t.subarray(e,e+32),e+=32,this.issuerKeyID=new Ss,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Ss,this.issuerKeyID.read(t.subarray(e,e+8)),e+=8;return this.flags=t[e++],this}write(){const t=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?t.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):t.push(this.issuerKeyID.write()),t.push(new Uint8Array([this.flags])),F.concatUint8Array(t)}calculateTrailer(...t){return Q((async()=>Bs.prototype.calculateTrailer.apply(await this.correspondingSig,t)))}async verify(){const t=await this.correspondingSig;if(!t||t.constructor.tag!==L.packet.signature)throw Error("Corresponding signature packet missing");if(t.signatureType!==this.signatureType||t.hashAlgorithm!==this.hashAlgorithm||t.publicKeyAlgorithm!==this.publicKeyAlgorithm||!t.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===t.version||6===this.version&&6!==t.version||6===this.version&&!F.equalsUint8Array(t.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!F.equalsUint8Array(t.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return t.hashed=this.hashed,t.verify.apply(t,arguments)}}function Us(t,e){if(!e[t]){let e;try{e=L.read(L.packet,t)}catch(e){throw new Hr("Unknown packet type with tag: "+t)}throw Error("Packet not allowed in this context: "+e)}return new e[t]}Ds.prototype.hash=Bs.prototype.hash,Ds.prototype.toHash=Bs.prototype.toHash,Ds.prototype.toSign=Bs.prototype.toSign;class Ms extends Array{static async fromBinary(t,e,r=N){const i=new Ms;return await i.read(t,e,r),i}async read(t,e,r=N){r.additionalAllowedPackets.length&&(e={...e,...F.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=C(t,(async(t,i)=>{const n=_(i);try{for(;;){await n.ready;if(await Or(t,(async t=>{try{if(t.tag===L.packet.marker||t.tag===L.packet.trust||t.tag===L.packet.padding)return;const i=Us(t.tag,e);i.packets=new Ms,i.fromStream=F.isStream(t.packet),await i.read(t.packet,r),await n.write(i)}catch(e){if(e instanceof Hr){if(!(t.tag<=39))return;await n.abort(e)}const i=!r.ignoreUnsupportedPackets&&e instanceof Fr,s=!(r.ignoreMalformedPackets||e instanceof Fr);if(i||s||Nr(t.tag))await n.abort(e);else{const e=new zr(t.tag,t.packet);await n.write(e)}F.printDebugError(e)}})))return await n.ready,void await n.close()}}catch(t){await n.abort(t)}}));const i=R(this.stream);for(;;){const{done:t,value:e}=await i.read();if(t?this.stream=null:this.push(e),t||Nr(e.constructor.tag))break}i.releaseLock()}write(){const t=[];for(let e=0;e<this.length;e++){const r=this[e]instanceof zr?this[e].tag:this[e].constructor.tag,i=this[e].write();if(F.isStream(i)&&Nr(this[e].constructor.tag)){let e=[],n=0;const s=512;t.push(Tr(r)),t.push(I(i,(t=>{if(e.push(t),n+=t.length,n>=s){const t=Math.min(Math.log(n)/Math.LN2|0,30),r=2**t,i=F.concat([_r(t)].concat(e));return e=[i.subarray(1+r)],n=e[0].length,i.subarray(0,1+r)}}),(()=>F.concat([Rr(n)].concat(e)))))}else{if(F.isStream(i)){let e=0;t.push(I(K(i),(t=>{e+=t.length}),(()=>Lr(r,e))))}else t.push(Lr(r,i.length));t.push(i)}}return F.concat(t)}filterByTag(...t){const e=new Ms,r=t=>e=>t===e;for(let i=0;i<this.length;i++)t.some(r(this[i].constructor.tag))&&e.push(this[i]);return e}findPacket(t){return this.find((e=>e.constructor.tag===t))}indexOfTag(...t){const e=[],r=this,i=t=>e=>t===e;for(let n=0;n<this.length;n++)t.some(i(r[n].constructor.tag))&&e.push(n);return e}}const xs=/*#__PURE__*/F.constructAllowedPackets([ks,Ds,Bs]);class Qs{static get tag(){return L.packet.compressedData}constructor(t=N){this.packets=null,this.algorithm=t.preferredCompressionAlgorithm,this.compressed=null}async read(t,e=N){await B(t,(async t=>{this.algorithm=await t.readByte(),this.compressed=t.remainder(),await this.decompress(e)}))}write(){return null===this.compressed&&this.compress(),F.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(t=N){const e=L.read(L.compression,this.algorithm),r=Ns[e];if(!r)throw Error(e+" decompression not supported");this.packets=await Ms.fromBinary(r(this.compressed),xs,t)}compress(){const t=L.read(L.compression,this.algorithm),e=Ls[t];if(!e)throw Error(t+" compression not supported");this.compressed=e(this.packets.write())}}function Rs(t,e){return r=>{if(!F.isStream(r)||l(r))return Q((()=>M(r).then((t=>new Promise(((r,i)=>{const n=new e;n.ondata=t=>{r(t)};try{n.push(t,!0)}catch(t){i(t)}}))))));if(t)try{const e=t();return r.pipeThrough(e)}catch(t){if("TypeError"!==t.name)throw t}const i=r.getReader(),n=new e;return new ReadableStream({async start(t){for(n.ondata=async(e,r)=>{t.enqueue(e),r&&t.close()};;){const{done:t,value:e}=await i.read();if(t)return void n.push(new Uint8Array,!0);e.length&&n.push(e)}}})}}function _s(t){return function(e){return Q((async()=>t(await M(e))))}}const Ts=t=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(t)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(t))}),Ls={zip:/*#__PURE__*/Rs(Ts("deflate-raw").compressor,$n),zlib:/*#__PURE__*/Rs(Ts("deflate").compressor,ts)},Ns={uncompressed:t=>t,zip:/*#__PURE__*/Rs(Ts("deflate-raw").decompressor,Xn),zlib:/*#__PURE__*/Rs(Ts("deflate").decompressor,es),bzip2:/*#__PURE__*/_s(Es)},Os=/*#__PURE__*/F.constructAllowedPackets([ks,Qs,Ds,Bs]);class Fs{static get tag(){return L.packet.symEncryptedIntegrityProtectedData}static fromObject({version:t,aeadAlgorithm:e}){if(1!==t&&2!==t)throw Error("Unsupported SEIPD version");const r=new Fs;return r.version=t,2===t&&(r.aeadAlgorithm=e),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(t){await B(t,(async t=>{if(this.version=await t.readByte(),1!==this.version&&2!==this.version)throw new Fr(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await t.readByte(),this.aeadAlgorithm=await t.readByte(),this.chunkSizeByte=await t.readByte(),this.salt=await t.readBytes(32)),this.encrypted=t.remainder()}))}write(){return 2===this.version?F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):F.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(t,e,r=N){let i=this.packets.write();if(l(i)&&(i=await M(i)),2===this.version)this.cipherAlgorithm=t,this.salt=en.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await Hs(this,"encrypt",e,i);else{const{blockSize:n}=en.getCipherParams(t),s=await en.getPrefixRandom(t),a=new Uint8Array([211,20]),o=F.concat([s,i,a]),c=await en.hash.sha1(P(o)),h=F.concat([o,c]);this.encrypted=await en.mode.cfb.encrypt(t,e,h,new Uint8Array(n),r)}return!0}async decrypt(t,e,r=N){let i,n=K(this.encrypted);if(l(n)&&(n=await M(n)),2===this.version)i=await Hs(this,"decrypt",e,n);else{const{blockSize:s}=en.getCipherParams(t),a=await en.mode.cfb.decrypt(t,e,n,new Uint8Array(s)),o=U(P(a),-20),c=U(a,0,-20),h=Promise.all([M(await en.hash.sha1(P(c))),M(o)]).then((([t,e])=>{if(!F.equalsUint8Array(t,e))throw Error("Modification detected.");return new Uint8Array})),u=U(c,s+2);i=U(u,0,-2),i=v([i,Q((()=>h))]),F.isStream(n)&&r.allowUnauthenticatedStream||(i=await M(i))}return this.packets=await Ms.fromBinary(i,Os,r),!0}}async function Hs(t,e,r,i){const n=t instanceof Fs&&2===t.version,s=!n&&t.constructor.tag===L.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=en.getAEADMode(t.aeadAlgorithm),o="decrypt"===e?a.tagLength:0,c="encrypt"===e?a.tagLength:0,h=2**(t.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),f=new Uint8Array(l,0,5+u),y=new Uint8Array(l),d=new DataView(l),p=new Uint8Array(l,5,8);f.set([192|t.constructor.tag,t.version,t.cipherAlgorithm,t.aeadAlgorithm,t.chunkSizeByte],0);let g,m,w=0,A=Promise.resolve(),b=0,v=0;if(n){const{keySize:e}=en.getCipherParams(t.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await Ui(L.hash.sha256,r,t.salt,n,e+i);r=s.subarray(0,e),g=s.subarray(e),g.fill(0,g.length-8),m=new DataView(g.buffer,g.byteOffset,g.byteLength)}else g=t.iv;const k=await a(t.cipherAlgorithm,r);return C(i,(async(r,i)=>{if("array"!==F.isStream(r)){const e=new TransformStream({},{highWaterMark:F.getHardwareConcurrency()*2**(t.chunkSizeByte+6),size:t=>t.length});E(e.readable,i),i=e.writable}const s=R(r),a=_(i);try{for(;;){let t=await s.readBytes(h+o)||new Uint8Array;const r=t.subarray(t.length-o);let i,l,E;if(t=t.subarray(0,t.length-o),n)E=g;else{E=g.slice();for(let t=0;t<8;t++)E[g.length-8+t]^=p[t]}if(!w||t.length?(s.unshift(r),i=k[e](t,E,f),i.catch((()=>{})),v+=t.length-o+c):(d.setInt32(5+u+4,b),i=k[e](r,E,y),i.catch((()=>{})),v+=c,l=!0),b+=t.length-o,A=A.then((()=>i)).then((async t=>{await a.ready,await a.write(t),v-=t.length})).catch((t=>a.abort(t))),(l||v>a.desiredSize)&&await A,l){await a.close();break}n?m.setInt32(g.length-4,++w):d.setInt32(9,++w)}}catch(t){await a.ready.catch((()=>{})),await a.abort(t)}}))}const zs=/*#__PURE__*/F.constructAllowedPackets([ks,Qs,Ds,Bs]);class Gs{static get tag(){return L.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=L.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(t){await B(t,(async t=>{const e=await t.readByte();if(1!==e)throw new Fr(`Version ${e} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await t.readByte(),this.aeadAlgorithm=await t.readByte(),this.chunkSizeByte=await t.readByte();const r=en.getAEADMode(this.aeadAlgorithm);this.iv=await t.readBytes(r.ivLength),this.encrypted=t.remainder()}))}write(){return F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(t,e,r=N){this.packets=await Ms.fromBinary(await Hs(this,"decrypt",e,K(this.encrypted)),zs,r)}async encrypt(t,e,r=N){this.cipherAlgorithm=t;const{ivLength:i}=en.getAEADMode(this.aeadAlgorithm);this.iv=en.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await Hs(this,"encrypt",e,n)}}class qs{static get tag(){return L.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Ss,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:t,encryptionKeyPacket:e,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new qs;if(3!==t&&6!==t)throw Error("Unsupported PKESK version");return s.version=t,6===t&&(s.publicKeyVersion=r?null:e.version,s.publicKeyFingerprint=r?null:e.getFingerprintBytes()),s.publicKeyID=r?Ss.wildcard():e.getKeyID(),s.publicKeyAlgorithm=e.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(t){let e=0;if(this.version=t[e++],3!==this.version&&6!==this.version)throw new Fr(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=t[e++];if(r){this.publicKeyVersion=t[e++];const i=r-1;this.publicKeyFingerprint=t.subarray(e,e+i),e+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Ss.wildcard()}else e+=this.publicKeyID.read(t.subarray(e,e+8));this.publicKeyAlgorithm=t[e++],this.encrypted=en.parseEncSessionKeyParams(this.publicKeyAlgorithm,t.subarray(e)),3!==this.version||this.publicKeyAlgorithm!==L.publicKey.x25519&&this.publicKeyAlgorithm!==L.publicKey.x448||(this.sessionKeyAlgorithm=L.write(L.symmetric,this.encrypted.C.algorithm))}write(){const t=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(t.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),t.push(this.publicKeyFingerprint)):t.push(new Uint8Array([0])):t.push(this.publicKeyID.write()),t.push(new Uint8Array([this.publicKeyAlgorithm]),en.serializeParams(this.publicKeyAlgorithm,this.encrypted)),F.concatUint8Array(t)}async encrypt(t){const e=L.write(L.publicKey,this.publicKeyAlgorithm),r=js(this.version,e,this.sessionKeyAlgorithm,this.sessionKey),i=e===L.publicKey.aead?t.privateParams:null;this.encrypted=await en.publicKeyEncrypt(e,this.sessionKeyAlgorithm,t.publicParams,i,r,t.getFingerprintBytes())}async decrypt(t,e){if(this.publicKeyAlgorithm!==t.algorithm)throw Error("Decryption error");const r=e?js(this.version,this.publicKeyAlgorithm,e.sessionKeyAlgorithm,e.sessionKey):null,i=await en.publicKeyDecrypt(this.publicKeyAlgorithm,t.publicParams,t.privateParams,this.encrypted,t.getFingerprintBytes(),r),{sessionKey:n,sessionKeyAlgorithm:s}=function(t,e,r,i){switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.aead:{const e=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=F.writeChecksum(e.subarray(e.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===t?{sessionKeyAlgorithm:null,sessionKey:e}:{sessionKeyAlgorithm:e[0],sessionKey:e.subarray(1)};if(i){const e=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:F.selectUint8Array(e,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===t?null:F.selectUint8(e,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===t||L.read(L.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case L.publicKey.x25519:case L.publicKey.x448:return{sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,e);3===this.version&&this.publicKeyAlgorithm!==L.publicKey.x25519&&this.publicKeyAlgorithm!==L.publicKey.x448&&(this.sessionKeyAlgorithm=s),this.sessionKey=n}}function js(t,e,r,i){switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.aead:return F.concatUint8Array([new Uint8Array(6===t?[]:[r]),i,F.writeChecksum(i.subarray(i.length%8))]);case L.publicKey.x25519:case L.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class Vs{static get tag(){return L.packet.symEncryptedSessionKey}constructor(t=N){this.version=t.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=L.symmetric.aes256,this.aeadAlgorithm=L.write(L.aead,t.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(t){let e=0;if(this.version=t[e++],4!==this.version&&5!==this.version&&6!==this.version)throw new Fr(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&e++;const r=t[e++];this.version>=5&&(this.aeadAlgorithm=t[e++],6===this.version&&e++);const i=t[e++];if(this.s2k=hn(i),e+=this.s2k.read(t.subarray(e,t.length)),this.version>=5){const r=en.getAEADMode(this.aeadAlgorithm);this.iv=t.subarray(e,e+=r.ivLength)}this.version>=5||e<t.length?(this.encrypted=t.subarray(e,t.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const t=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let e;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;e=F.concatUint8Array([new Uint8Array([this.version,n,t,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?e=F.concatUint8Array([new Uint8Array([this.version,t,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(e=F.concatUint8Array([new Uint8Array([this.version,t]),r]),null!==this.encrypted&&(e=F.concatUint8Array([e,this.encrypted])));return e}async decrypt(t){const e=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=en.getCipherParams(e),n=await this.s2k.produceKey(t,i);if(this.version>=5){const t=en.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|Vs.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await Ui(L.hash.sha256,n,new Uint8Array,r,i):n,a=await t(e,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const t=await en.mode.cfb.decrypt(e,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=L.write(L.symmetric,t[0]),this.sessionKey=t.subarray(1,t.length)}else this.sessionKey=n}async encrypt(t,e=N){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=un(e),this.s2k.generateSalt();const{blockSize:i,keySize:n}=en.getCipherParams(r),s=await this.s2k.produceKey(t,n);if(null===this.sessionKey&&(this.sessionKey=en.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const t=en.getAEADMode(this.aeadAlgorithm);this.iv=en.random.getRandomBytes(t.ivLength);const e=new Uint8Array([192|Vs.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await Ui(L.hash.sha256,s,new Uint8Array,e,n):s,a=await t(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,e)}else{const t=F.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await en.mode.cfb.encrypt(r,s,t,new Uint8Array(i),e)}}}class Zs{static get tag(){return L.packet.publicKey}constructor(t=new Date,e=N){this.version=e.v6Keys?6:4,this.created=F.normalizeDate(t),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(t){const e=new Zs,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=t;return e.version=r,e.created=i,e.algorithm=n,e.publicParams=s,e.keyID=a,e.fingerprint=o,e}async read(t){let e=0;if(this.version=t[e++],4===this.version||5===this.version||6===this.version){this.created=F.readDate(t.subarray(e,e+4)),e+=4,this.algorithm=t[e++],this.version>=5&&(e+=4);const{read:r,publicParams:i}=en.parsePublicKeyParams(this.algorithm,t.subarray(e));if(6===this.version&&i.oid&&(i.oid.getName()===L.curve.curve25519Legacy||i.oid.getName()===L.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,e+=r,await this.computeFingerprintAndKeyID(),e}throw new Fr(`Version ${this.version} of the key packet is unsupported.`)}write(){const t=[];t.push(new Uint8Array([this.version])),t.push(F.writeDate(this.created)),t.push(new Uint8Array([this.algorithm]));const e=en.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&t.push(F.writeNumber(e.length,4)),t.push(e),F.concatUint8Array(t)}writeForHash(t){const e=this.writePublicKey(),r=149+t,i=t>=5?4:2;return F.concatUint8Array([new Uint8Array([r]),F.writeNumber(e.length,i),e])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Ss,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const t=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await en.hash.sha256(t);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await en.hash.sha1(t)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return F.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(t){return this.version===t.version&&F.equalsUint8Array(this.writePublicKey(),t.writePublicKey())}getAlgorithmInfo(){const t={};t.algorithm=L.read(L.publicKey,this.algorithm);const e=this.publicParams.n||this.publicParams.p;return e?t.bits=F.uint8ArrayBitLength(e):this.publicParams.oid?t.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(t.symmetric=this.publicParams.cipher.getName()),t}}Zs.prototype.readPublicKey=Zs.prototype.read,Zs.prototype.writePublicKey=Zs.prototype.write;const Js=/*#__PURE__*/F.constructAllowedPackets([ks,Qs,Ds,Bs]);class Ys{static get tag(){return L.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(t){this.encrypted=t}write(){return this.encrypted}async decrypt(t,e,r=N){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=en.getCipherParams(t),n=await M(K(this.encrypted)),s=await en.mode.cfb.decrypt(t,e,n.subarray(i+2),n.subarray(2,i+2));this.packets=await Ms.fromBinary(s,Js,r)}async encrypt(t,e,r=N){const i=this.packets.write(),{blockSize:n}=en.getCipherParams(t),s=await en.getPrefixRandom(t),a=await en.mode.cfb.encrypt(t,e,s,new Uint8Array(n),r),o=await en.mode.cfb.encrypt(t,e,i,a.subarray(2),r);this.encrypted=F.concat([a,o])}}class Ws extends Zs{static get tag(){return L.packet.publicSubkey}constructor(t,e){super(t,e)}static fromSecretSubkeyPacket(t){const e=new Ws,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=t;return e.version=r,e.created=i,e.algorithm=n,e.publicParams=s,e.keyID=a,e.fingerprint=o,e}}class $s{static get tag(){return L.packet.userAttribute}constructor(){this.attributes=[]}read(t){let e=0;for(;e<t.length;){const r=Qr(t.subarray(e,t.length));e+=r.offset,this.attributes.push(F.uint8ArrayToString(t.subarray(e,e+r.len))),e+=r.len}}write(){const t=[];for(let e=0;e<this.attributes.length;e++)t.push(Rr(this.attributes[e].length)),t.push(F.stringToUint8Array(this.attributes[e]));return F.concatUint8Array(t)}equals(t){return!!(t&&t instanceof $s)&&this.attributes.every((function(e,r){return e===t.attributes[r]}))}}class Xs extends Zs{static get tag(){return L.packet.secretKey}constructor(t=new Date,e=N){super(t,e),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(t,e=N){let r=await this.readPublicKey(t);const i=r;this.s2kUsage=t[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=t[r++],253===this.s2kUsage&&(this.aead=t[r++]),6===this.version&&r++;const e=t[r++];if(this.s2k=hn(e),r+=this.s2k.read(t.subarray(r,t.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&e.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=t.subarray(r,r+en.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=t.subarray(r,r+en.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(e){if(!this.s2kUsage)throw e;this.unparseableKeyMaterial=t.subarray(i),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=t.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let t;if(6===this.version)t=this.keyMaterial;else if(t=this.keyMaterial.subarray(0,-2),!F.equalsUint8Array(F.writeChecksum(t),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:e,privateParams:r}=en.parsePrivateKeyParams(this.algorithm,t,this.publicParams);if(e<t.length)throw Error("Error reading MPIs");this.privateParams=r}catch(t){if(t instanceof Fr)throw t;throw Error("Error reading MPIs")}}}write(){const t=this.writePublicKey();if(this.unparseableKeyMaterial)return F.concatUint8Array([t,this.unparseableKeyMaterial]);const e=[t];e.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const t=this.s2k.write();6===this.version&&r.push(t.length),r.push(...t)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&e.push(new Uint8Array([r.length])),e.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=en.serializeParams(this.algorithm,this.privateParams)),5===this.version&&e.push(F.writeNumber(this.keyMaterial.length,4)),e.push(this.keyMaterial),this.s2kUsage||6===this.version||e.push(F.writeChecksum(this.keyMaterial))),F.concatUint8Array(e)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(t=N){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=hn(L.s2k.gnu,t),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=L.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(t,e=N){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!t)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=un(e),this.s2k.generateSalt();const r=en.serializeParams(this.algorithm,this.privateParams);this.symmetric=L.symmetric.aes256;const{blockSize:i}=en.getCipherParams(this.symmetric);if(e.aeadProtect){this.s2kUsage=253,this.aead=L.aead.eax;const e=en.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const n=Tr(this.constructor.tag),s=await ta(this.version,this.s2k,t,this.symmetric,this.aead,n),a=await e(this.symmetric,s);this.iv=this.isLegacyAEAD?en.random.getRandomBytes(i):en.random.getRandomBytes(e.ivLength);const o=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([n,this.writePublicKey()]);this.keyMaterial=await a.encrypt(r,this.iv.subarray(0,e.ivLength),o)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const n=await ta(this.version,this.s2k,t,this.symmetric);this.iv=en.random.getRandomBytes(i),this.keyMaterial=await en.mode.cfb.encrypt(this.symmetric,n,F.concatUint8Array([r,await en.hash.sha1(r,e)]),this.iv,e)}}async decrypt(t){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let e;const r=Tr(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(e=await ta(this.version,this.s2k,t,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const t=en.getAEADMode(this.aead),n=await t(this.symmetric,e);try{const e=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,t.ivLength),e)}catch(t){if("Authentication tag mismatch"===t.message)throw Error("Incorrect key passphrase: "+t.message);throw t}}else{const t=await en.mode.cfb.decrypt(this.symmetric,e,this.keyMaterial,this.iv);i=t.subarray(0,-20);const r=await en.hash.sha1(i);if(!F.equalsUint8Array(r,t.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:t}=en.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=t}catch(t){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let t;try{t=await en.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(e){t=!1}if(!t)throw Error("Key is invalid")}async generate(t,e,r){if(6===this.version&&(this.algorithm===L.publicKey.ecdh&&e===L.curve.curve25519Legacy||this.algorithm===L.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${e}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await en.generateParams(this.algorithm,t,e,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((t=>{this.privateParams[t].fill(0),delete this.privateParams[t]})),this.privateParams=null,this.isEncrypted=!0)}}async function ta(t,e,r,i,n,s,a){const{keySize:o}=en.getCipherParams(i),c=await e.produceKey(r,o);if(!n||5===t||a)return c;const h=F.concatUint8Array([s,new Uint8Array([t,i,n])]);return Ui(L.hash.sha256,c,new Uint8Array,h,o)}class ea{static get tag(){return L.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(t){if(F.isString(t)||t.name&&!F.isString(t.name)||t.email&&!F.isEmailAddress(t.email)||t.comment&&!F.isString(t.comment))throw Error("Invalid user ID format");const e=new ea;Object.assign(e,t);const r=[];return e.name&&r.push(e.name),e.comment&&r.push(`(${e.comment})`),e.email&&r.push(`<${e.email}>`),e.userID=r.join(" "),e}read(t,e=N){const r=F.decodeUTF8(t);if(r.length>e.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:t,comment:e,email:r}=i.groups;this.comment=e?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=t?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return F.encodeUTF8(this.userID)}equals(t){return t&&t.userID===this.userID}}class ra extends Xs{static get tag(){return L.packet.secretSubkey}constructor(t=new Date,e=N){super(t,e)}}const ia=/*#__PURE__*/F.constructAllowedPackets([Bs]);class na{constructor(t){this.packets=t||new Ms}write(){return this.packets.write()}armor(t=N){return tt(L.armor.signature,this.write(),void 0,void 0,void 0,t)}getSigningKeyIDs(){return this.packets.map((t=>t.issuerKeyID))}}async function sa(t,e){const r=new ra(t.date,e);return r.packets=null,r.algorithm=L.write(L.publicKey,t.algorithm),await r.generate(t.rsaBits,t.curve,t.symmetric),await r.computeFingerprintAndKeyID(),r}async function aa(t,e){const r=new Xs(t.date,e);return r.packets=null,r.algorithm=L.write(L.publicKey,t.algorithm),await r.generate(t.rsaBits,t.curve,t.symmetric),await r.computeFingerprintAndKeyID(),r}async function oa(t,e,r,i,n=new Date,s){let a,o;for(let c=t.length-1;c>=0;c--)try{(!a||t[c].created>=a.created)&&(await t[c].verify(e,r,i,n,void 0,s),a=t[c])}catch(t){o=t}if(!a)throw F.wrapError(`Could not find valid ${L.read(L.signature,r)} signature in key ${e.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((t,e,r)=>e+" "+r.toLowerCase())),o);return a}function ca(t,e,r=new Date){const i=F.normalizeDate(r);if(null!==i){const r=ya(t,e);return!(t.created<=i&&i<r)}return!1}async function ha(t,e,r,i){const n={};n.key=e,n.bind=t;const s={signatureType:L.signature.subkeyBinding};r.sign?(s.keyFlags=[L.keyFlags.signData],s.embeddedSignature=await ua(n,null,t,{signatureType:L.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[L.keyFlags.forwardedCommunication]:[L.keyFlags.encryptCommunication|L.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await ua(n,null,e,s,r.date,void 0,void 0,void 0,i)}async function ua(t,e,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Bs;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(t,e,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(t){const e=await t.getPrimarySelfSignature(r,i,n);e.preferredHashAlgorithms&&([a]=e.preferredHashAlgorithms,s=en.hash.getHashByteLength(s)<=en.hash.getHashByteLength(a)?a:s)}switch(e.algorithm){case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ed25519:case L.publicKey.ed448:a=en.getPreferredCurveHashAlgo(e.algorithm,e.publicParams.oid)}return en.hash.getHashByteLength(s)<=en.hash.getHashByteLength(a)?a:s}(e,r,n,s,c),h.rawNotations=a,await h.sign(r,t,n,o),h}async function la(t,e,r,i=new Date,n){(t=t[r])&&(e[r].length?await Promise.all(t.map((async function(t){t.isExpired(i)||n&&!await n(t)||e[r].some((function(e){return F.equalsUint8Array(e.writeParams(),t.writeParams())}))||e[r].push(t)}))):e[r]=t)}async function fa(t,e,r,i,n,s,a=new Date,o){s=s||t;const c=[];return await Promise.all(i.map((async function(t){try{n&&!t.issuerKeyID.equals(n.issuerKeyID)||(await t.verify(s,e,r,o.revocationsExpire?a:null,!1,o),c.push(t.issuerKeyID))}catch(t){}}))),n?(n.revoked=!!c.some((t=>t.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function ya(t,e){let r;return!1===e.keyNeverExpires&&(r=t.created.getTime()+1e3*e.keyExpirationTime),r?new Date(r):1/0}function da(t,e={}){if(t.type=t.type||e.type,t.curve=t.curve||e.curve,t.rsaBits=t.rsaBits||e.rsaBits,t.symmetricHash=t.symmetricHash||e.symmetricHash,t.symmetricCipher=t.symmetricCipher||e.symmetricCipher,t.keyExpirationTime=void 0!==t.keyExpirationTime?t.keyExpirationTime:e.keyExpirationTime,t.passphrase=F.isString(t.passphrase)?t.passphrase:e.passphrase,t.date=t.date||e.date,t.sign=t.sign||!1,t.forwarding=t.forwarding||!1,t.sign&&t.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(t.type){case"ecc":try{t.curve=L.write(L.curve,t.curve)}catch(t){throw Error("Unknown curve")}t.curve!==L.curve.ed25519Legacy&&t.curve!==L.curve.curve25519Legacy&&"ed25519"!==t.curve&&"curve25519"!==t.curve||(t.curve=t.sign?L.curve.ed25519Legacy:L.curve.curve25519Legacy),t.sign?t.algorithm=t.curve===L.curve.ed25519Legacy?L.publicKey.eddsaLegacy:L.publicKey.ecdsa:t.algorithm=L.publicKey.ecdh;break;case"curve25519":t.algorithm=t.sign?L.publicKey.ed25519:L.publicKey.x25519;break;case"curve448":t.algorithm=t.sign?L.publicKey.ed448:L.publicKey.x448;break;case"rsa":t.algorithm=L.publicKey.rsaEncryptSign;break;case"symmetric":if(t.sign){t.algorithm=L.publicKey.hmac;try{t.symmetric=L.write(L.hash,t.symmetricHash)}catch(t){throw Error("Unknown hash algorithm")}}else{t.algorithm=L.publicKey.aead;try{t.symmetric=L.write(L.symmetric,t.symmetricCipher)}catch(t){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+t.type)}return t}function pa(t,e,r){switch(t.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.dsa:case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ed25519:case L.publicKey.ed448:case L.publicKey.hmac:if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!e.keyFlags||0!=(e.keyFlags[0]&L.keyFlags.signData);default:return!1}}function ga(t,e,r){switch(t.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.x25519:case L.publicKey.x448:case L.publicKey.aead:if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!e.keyFlags||0!=(e.keyFlags[0]&L.keyFlags.encryptCommunication)||0!=(e.keyFlags[0]&L.keyFlags.encryptStorage);default:return!1}}function ma(t,e,r){if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(t.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.x25519:case L.publicKey.x448:return!(!(!e.keyFlags||0!=(e.keyFlags[0]&L.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!e.keyFlags||0!=(e.keyFlags[0]&L.keyFlags.encryptCommunication)||0!=(e.keyFlags[0]&L.keyFlags.encryptStorage)||r.allowForwardedMessages&&0!=(e.keyFlags[0]&L.keyFlags.forwardedCommunication));default:return!1}}function wa(t,e){const r=L.write(L.publicKey,t.algorithm),i=t.getAlgorithmInfo();if(e.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.rsaEncrypt:if(i.bits<e.minRSABits)throw Error(`RSA keys shorter than ${e.minRSABits} bits are considered too weak.`);break;case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ecdh:if(e.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class Aa{constructor(t,e){this.userID=t.constructor.tag===L.packet.userID?t:null,this.userAttribute=t.constructor.tag===L.packet.userAttribute?t:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=e}toPacketList(){const t=new Ms;return t.push(this.userID||this.userAttribute),t.push(...this.revocationSignatures),t.push(...this.selfCertifications),t.push(...this.otherCertifications),t}clone(){const t=new Aa(this.userID||this.userAttribute,this.mainKey);return t.selfCertifications=[...this.selfCertifications],t.otherCertifications=[...this.otherCertifications],t.revocationSignatures=[...this.revocationSignatures],t}async certify(t,e,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new Aa(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(t.map((async function(t){if(!t.isPrivate())throw Error("Need private key for signing");if(t.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await t.getSigningKey(void 0,e,void 0,r);return ua(n,t,s.keyPacket,{signatureType:L.signature.certGeneric,keyFlags:[L.keyFlags.certifyKeys|L.keyFlags.signData]},e,void 0,void 0,void 0,r)}))),await s.update(this,e,r),s}async isRevoked(t,e,r=new Date,i=N){const n=this.mainKey.keyPacket;return fa(n,L.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,t,e,r,i)}async verifyCertificate(t,e,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=t,c=e.filter((t=>t.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async e=>{const s=await e.getSigningKey(o,t.created,void 0,i);if(t.revoked||await n.isRevoked(t,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await t.verify(s.keyPacket,L.signature.certGeneric,a,r,void 0,i)}catch(t){throw F.wrapError("User certificate is invalid",t)}}))),!0)}async verifyAllCertifications(t,e=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,t,e,r).catch((()=>!1))}))))}async verify(t=new Date,e){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,t,e))throw Error("Self-certification is revoked");try{await s.verify(i,L.signature.certGeneric,n,t,void 0,e)}catch(t){throw F.wrapError("Self-certification is invalid",t)}return!0}catch(t){s=t}throw s}async update(t,e,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await la(t,this,"selfCertifications",e,(async function(t){try{return await t.verify(i,L.signature.certGeneric,n,e,!1,r),!0}catch(t){return!1}})),await la(t,this,"otherCertifications",e),await la(t,this,"revocationSignatures",e,(function(t){return fa(i,L.signature.certRevocation,n,[t],void 0,void 0,e,r)}))}async revoke(t,{flag:e=L.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=N){const s={userID:this.userID,userAttribute:this.userAttribute,key:t},a=new Aa(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await ua(s,null,t,{signatureType:L.signature.certRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,e),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class ba{constructor(t,e){this.keyPacket=t,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=e}toPacketList(){const t=new Ms;return t.push(this.keyPacket),t.push(...this.revocationSignatures),t.push(...this.bindingSignatures),t}clone(){const t=new ba(this.keyPacket,this.mainKey);return t.bindingSignatures=[...this.bindingSignatures],t.revocationSignatures=[...this.revocationSignatures],t}async isRevoked(t,e,r=new Date,i=N){const n=this.mainKey.keyPacket;return fa(n,L.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,t,e,r,i)}async verify(t=new Date,e=N){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await oa(this.bindingSignatures,r,L.signature.subkeyBinding,i,t,e);if(n.revoked||await this.isRevoked(n,null,t,e))throw Error("Subkey is revoked");if(ca(this.keyPacket,n,t))throw Error("Subkey is expired");return n}async getExpirationTime(t=new Date,e=N){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await oa(this.bindingSignatures,r,L.signature.subkeyBinding,i,t,e)}catch(t){return null}const s=ya(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(t,e=new Date,r=N){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(t))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===L.packet.publicSubkey&&t.keyPacket.constructor.tag===L.packet.secretSubkey&&(this.keyPacket=t.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await la(t,this,"bindingSignatures",e,(async function(t){for(let e=0;e<n.bindingSignatures.length;e++)if(n.bindingSignatures[e].issuerKeyID.equals(t.issuerKeyID))return t.created>n.bindingSignatures[e].created&&(n.bindingSignatures[e]=t),!1;try{return await t.verify(i,L.signature.subkeyBinding,s,e,void 0,r),!0}catch(t){return!1}})),await la(t,this,"revocationSignatures",e,(function(t){return fa(i,L.signature.subkeyRevocation,s,[t],void 0,void 0,e,r)}))}async revoke(t,{flag:e=L.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=N){const s={key:t,bind:this.keyPacket},a=new ba(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await ua(s,null,t,{signatureType:L.signature.subkeyRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,e),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(t){return this.keyPacket.hasSameFingerprintAs(t.keyPacket||t)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((t=>{ba.prototype[t]=function(){return this.keyPacket[t]()}}));const va=/*#__PURE__*/F.constructAllowedPackets([Bs]),Ea=new Set([L.packet.publicKey,L.packet.privateKey]),ka=new Set([L.packet.publicKey,L.packet.privateKey,L.packet.publicSubkey,L.packet.privateSubkey]);class Sa{packetListToStructure(t,e=new Set){let r,i,n,s;for(const a of t){if(a instanceof zr){ka.has(a.tag)&&!s&&(s=Ea.has(a.tag)?Ea:ka);continue}const t=a.constructor.tag;if(s){if(!s.has(t))continue;s=null}if(e.has(t))throw Error("Unexpected packet type: "+t);switch(t){case L.packet.publicKey:case L.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case L.packet.userID:case L.packet.userAttribute:r=new Aa(a,this),this.users.push(r);break;case L.packet.publicSubkey:case L.packet.secretSubkey:r=null,n=new ba(a,this),this.subkeys.push(n);break;case L.packet.signature:switch(a.signatureType){case L.signature.certGeneric:case L.signature.certPersona:case L.signature.certCasual:case L.signature.certPositive:if(!r){F.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case L.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case L.signature.key:this.directSignatures.push(a);break;case L.signature.subkeyBinding:if(!n){F.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case L.signature.keyRevocation:this.revocationSignatures.push(a);break;case L.signature.subkeyRevocation:if(!n){F.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const t=new Ms;return t.push(this.keyPacket),t.push(...this.revocationSignatures),t.push(...this.directSignatures),this.users.map((e=>t.push(...e.toPacketList()))),this.subkeys.map((e=>t.push(...e.toPacketList()))),t}clone(t=!1){const e=new this.constructor(this.toPacketList());return t&&e.getKeys().forEach((t=>{if(t.keyPacket=Object.create(Object.getPrototypeOf(t.keyPacket),Object.getOwnPropertyDescriptors(t.keyPacket)),!t.keyPacket.isDecrypted())return;const e={};Object.keys(t.keyPacket.privateParams).forEach((r=>{e[r]=new Uint8Array(t.keyPacket.privateParams[r])})),t.keyPacket.privateParams=e})),e}getSubkeys(t=null){return this.subkeys.filter((e=>!t||e.getKeyID().equals(t,!0)))}getKeys(t=null){const e=[];return t&&!this.getKeyID().equals(t,!0)||e.push(this),e.concat(this.getSubkeys(t))}getKeyIDs(){return this.getKeys().map((t=>t.getKeyID()))}getUserIDs(){return this.users.map((t=>t.userID?t.userID.userID:null)).filter((t=>null!==t))}write(){return this.toPacketList().write()}async getSigningKey(t=null,e=new Date,r={},i=N){await this.verifyPrimaryKey(e,r,i);const n=this.keyPacket;try{wa(n,i)}catch(t){throw F.wrapError("Could not verify primary key",t)}const s=this.subkeys.slice().sort(((t,e)=>e.keyPacket.created-t.keyPacket.created));let a;for(const r of s)if(!t||r.getKeyID().equals(t))try{await r.verify(e,i);const t={key:n,bind:r.keyPacket},s=await oa(r.bindingSignatures,n,L.signature.subkeyBinding,t,e,i);if(!pa(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await oa([s.embeddedSignature],r.keyPacket,L.signature.keyBinding,t,e,i),wa(r.keyPacket,i),r}catch(t){a=t}try{const s=await this.getPrimarySelfSignature(e,r,i);if((!t||n.getKeyID().equals(t))&&pa(n,s,i))return wa(n,i),this}catch(t){a=t}throw F.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(t,e=new Date,r={},i=N){await this.verifyPrimaryKey(e,r,i);const n=this.keyPacket;try{wa(n,i)}catch(t){throw F.wrapError("Could not verify primary key",t)}const s=this.subkeys.slice().sort(((t,e)=>e.keyPacket.created-t.keyPacket.created));let a;for(const r of s)if(!t||r.getKeyID().equals(t))try{await r.verify(e,i);const t={key:n,bind:r.keyPacket},s=await oa(r.bindingSignatures,n,L.signature.subkeyBinding,t,e,i);if(ga(r.keyPacket,s,i))return wa(r.keyPacket,i),r}catch(t){a=t}try{const s=await this.getPrimarySelfSignature(e,r,i);if((!t||n.getKeyID().equals(t))&&ga(n,s,i))return wa(n,i),this}catch(t){a=t}throw F.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(t,e,r=new Date,i=N){return fa(this.keyPacket,L.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,t,e,r,i)}async verifyPrimaryKey(t=new Date,e={},r=N){const i=this.keyPacket;if(await this.isRevoked(null,null,t,r))throw Error("Primary key is revoked");if(ca(i,await this.getPrimarySelfSignature(t,e,r),t))throw Error("Primary key is expired");if(6!==i.version){const e=await oa(this.directSignatures,i,L.signature.key,{key:i},t,r).catch((()=>{}));if(e&&ca(i,e,t))throw Error("Primary key is expired")}}async getExpirationTime(t,e=N){let r;try{const i=await this.getPrimarySelfSignature(null,t,e),n=ya(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await oa(this.directSignatures,this.keyPacket,L.signature.key,{key:this.keyPacket},null,e).catch((()=>{}));if(a){const t=ya(this.keyPacket,a);r=Math.min(n,s,t)}else r=n<s?n:s}catch(t){r=null}return F.normalizeDate(r)}async getPrimarySelfSignature(t=new Date,e={},r=N){const i=this.keyPacket;if(6===i.version)return oa(this.directSignatures,i,L.signature.key,{key:i},t,r);const{selfCertification:n}=await this.getPrimaryUser(t,e,r);return n}async getPrimaryUser(t=new Date,e={},r=N){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==e.name&&s.userID.name!==e.name||void 0!==e.email&&s.userID.email!==e.email||void 0!==e.comment&&s.userID.comment!==e.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await oa(s.selfCertifications,i,L.signature.certGeneric,o,t,r);n.push({index:a,user:s,selfCertification:c})}catch(t){s=t}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(e){return e.selfCertification.revoked||e.user.isRevoked(e.selfCertification,null,t,r)})));const a=n.sort((function(t,e){const r=t.selfCertification,i=e.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,t,r))throw Error("Primary user is revoked");return a}async update(t,e=new Date,r=N){if(!this.hasSameFingerprintAs(t))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&t.isPrivate()){if(!(this.subkeys.length===t.subkeys.length&&this.subkeys.every((e=>t.subkeys.some((t=>e.hasSameFingerprintAs(t)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return t.update(this,r)}const i=this.clone();return await la(t,i,"revocationSignatures",e,(n=>fa(i.keyPacket,L.signature.keyRevocation,i,[n],null,t.keyPacket,e,r))),await la(t,i,"directSignatures",e),await Promise.all(t.users.map((async t=>{const n=i.users.filter((e=>t.userID&&t.userID.equals(e.userID)||t.userAttribute&&t.userAttribute.equals(e.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(t,e,r))));else{const e=t.clone();e.mainKey=i,i.users.push(e)}}))),await Promise.all(t.subkeys.map((async t=>{const n=i.subkeys.filter((e=>e.hasSameFingerprintAs(t)));if(n.length>0)await Promise.all(n.map((i=>i.update(t,e,r))));else{const e=t.clone();e.mainKey=i,i.subkeys.push(e)}}))),i}async getRevocationCertificate(t=new Date,e=N){const r={key:this.keyPacket},i=await oa(this.revocationSignatures,this.keyPacket,L.signature.keyRevocation,r,t,e),n=new Ms;return n.push(i),tt(L.armor.publicKey,n.write(),null,null,"This is a revocation certificate")}async applyRevocationCertificate(t,e=new Date,r=N){const i=await X(t),n=(await Ms.fromBinary(i.data,va,r)).findPacket(L.packet.signature);if(!n||n.signatureType!==L.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,L.signature.keyRevocation,{key:this.keyPacket},e,void 0,r)}catch(t){throw F.wrapError("Could not verify revocation signature",t)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(t,e,r,i=N){const{index:n,user:s}=await this.getPrimaryUser(e,r,i),a=await s.certify(t,e,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(t,e=new Date,r=N){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(t,e,r)}))),i}async verifyPrimaryUser(t,e=new Date,r,i=N){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(e,r,i);return t?await s.verifyAllCertifications(t,e,i):[{keyID:n.getKeyID(),valid:await s.verify(e,i).catch((()=>!1))}]}async verifyAllUsers(t,e=new Date,r=N){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=t?await s.verifyAllCertifications(t,e,r):[{keyID:i.getKeyID(),valid:await s.verify(e,r).catch((()=>!1))}];n.push(...a.map((t=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:t.keyID,valid:t.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((t=>{Sa.prototype[t]=ba.prototype[t]}));class Ia extends Sa{constructor(t){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],t&&(this.packetListToStructure(t,new Set([L.packet.secretKey,L.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(t=N){return tt(L.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t)}}class Ca extends Ia{constructor(t){if(super(),this.packetListToStructure(t,new Set([L.packet.publicKey,L.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const t=new Ms,e=this.toPacketList();let r=!1;for(const i of e)if(!r||i.constructor.tag!==L.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case L.packet.secretKey:{if(i.algorithm===L.publicKey.aead||i.algorithm===L.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const e=Zs.fromSecretKeyPacket(i);t.push(e);break}case L.packet.secretSubkey:{if(i.algorithm===L.publicKey.aead||i.algorithm===L.publicKey.hmac){r=!0;break}const e=Ws.fromSecretSubkeyPacket(i);t.push(e);break}default:t.push(i)}return new Ia(t)}armor(t=N){return tt(L.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t)}async getDecryptionKeys(t,e=new Date,r={},i=N){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!t||this.subkeys[r].getKeyID().equals(t,!0))try{const t={key:n,bind:this.subkeys[r].keyPacket},a=await oa(this.subkeys[r].bindingSignatures,n,L.signature.subkeyBinding,t,e,i);ma(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(t){}const a=await this.getPrimarySelfSignature(e,r,i);return t&&!n.getKeyID().equals(t,!0)||!ma(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:t})=>t.isDecrypted()))}async validate(t=N){if(!this.isPrivate())throw Error("Cannot validate a public key");let e;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...t,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(e=r.keyPacket)}else e=this.keyPacket;if(e)return e.validate();{const t=this.getKeys();if(t.map((t=>t.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(t.map((async t=>t.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:t})=>{t.isDecrypted()&&t.clearPrivateParams()}))}async revoke({flag:t=L.reasonForRevocation.noReason,string:e=""}={},r=new Date,i=N){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await ua(n,null,this.keyPacket,{signatureType:L.signature.keyRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,t),reasonForRevocationString:e},r,void 0,void 0,void 0,i)),s}async addSubkey(t={}){const e={...N,...t.config};if(t.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(t.rsaBits<e.minRSABits)throw Error(`rsaBits should be at least ${e.minRSABits}, got: ${t.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(t){switch(L.write(L.publicKey,t)){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.dsa:return"rsa";case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:return"ecc";case L.publicKey.ed25519:return"curve25519";case L.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",t=da(t,i);const n=await sa(t,{...e,v6Keys:6===this.keyPacket.version});wa(n,e);const s=await ha(n,r,t,e),a=this.toPacketList();return a.push(n,s),new Ca(a)}}const Ba=/*#__PURE__*/F.constructAllowedPackets([Zs,Ws,Xs,ra,ea,$s,Bs]);function Ka(t){for(const e of t)switch(e.constructor.tag){case L.packet.secretKey:return new Ca(t);case L.packet.publicKey:return new Ia(t)}throw Error("No key packet found")}async function Pa(t,e,r,i){r.passphrase&&await t.encrypt(r.passphrase,i),await Promise.all(e.map((async function(t,e){const n=r.subkeys[e].passphrase;n&&await t.encrypt(n,i)})));const n=new Ms;function s(t,e){return[e,...t.filter((t=>t!==e))]}function a(){const e={};e.keyFlags=[L.keyFlags.certifyKeys|L.keyFlags.signData];const n=s([L.symmetric.aes256,L.symmetric.aes128],i.preferredSymmetricAlgorithm);if(e.preferredSymmetricAlgorithms=n,i.aeadProtect){const t=s([L.aead.gcm,L.aead.eax,L.aead.ocb],i.preferredAEADAlgorithm);e.preferredCipherSuites=t.flatMap((t=>n.map((e=>[e,t]))))}return e.preferredHashAlgorithms=s([L.hash.sha256,L.hash.sha512,...6===t.version?[L.hash.sha3_256,L.hash.sha3_512]:[]],i.preferredHashAlgorithm),e.preferredCompressionAlgorithms=s([L.compression.uncompressed,L.compression.zlib,L.compression.zip],i.preferredCompressionAlgorithm),e.features=[0],e.features[0]|=L.features.modificationDetection,i.aeadProtect&&(e.features[0]|=L.features.seipdv2),r.keyExpirationTime>0&&(e.keyExpirationTime=r.keyExpirationTime,e.keyNeverExpires=!1),e}if(n.push(t),6===t.version){const e={key:t},s=a();s.signatureType=L.signature.key;const o=await ua(e,null,t,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(e,n){const s=ea.fromObject(e),o={userID:s,key:t},c=6!==t.version?a():{};c.signatureType=L.signature.certGeneric,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await ua(o,null,t,c,r.date,void 0,void 0,void 0,i)}}))).then((t=>{t.forEach((({userIDPacket:t,signaturePacket:e})=>{n.push(t),n.push(e)}))})),await Promise.all(e.map((async function(e,n){const s=r.subkeys[n];return{secretSubkeyPacket:e,subkeySignaturePacket:await ha(e,t,s,i)}}))).then((t=>{t.forEach((({secretSubkeyPacket:t,subkeySignaturePacket:e})=>{n.push(t),n.push(e)}))}));const o={key:t};return n.push(await ua(o,null,t,{signatureType:L.signature.keyRevocation,reasonForRevocationFlag:L.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&t.clearPrivateParams(),await Promise.all(e.map((async function(t,e){r.subkeys[e].passphrase&&t.clearPrivateParams()}))),new Ca(n)}const Da=/*#__PURE__*/F.constructAllowedPackets([ks,Qs,Gs,Fs,Ys,qs,Vs,Ds,Bs]),Ua=/*#__PURE__*/F.constructAllowedPackets([Vs]),Ma=/*#__PURE__*/F.constructAllowedPackets([Bs]);class xa{constructor(t){this.packets=t||new Ms}getEncryptionKeyIDs(){const t=[];return this.packets.filterByTag(L.packet.publicKeyEncryptedSessionKey).forEach((function(e){t.push(e.publicKeyID)})),t}getSigningKeyIDs(){const t=this.unwrapCompressed(),e=t.packets.filterByTag(L.packet.onePassSignature);if(e.length>0)return e.map((t=>t.issuerKeyID));return t.packets.filterByTag(L.packet.signature).map((t=>t.issuerKeyID))}async decrypt(t,e,r,i=new Date,n=N){const s=this.packets.filterByTag(L.packet.symmetricallyEncryptedData,L.packet.symEncryptedIntegrityProtectedData,L.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(t,e,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:t,data:e})=>{if(!F.isUint8Array(e)||!a.cipherAlgorithm&&!F.isString(t))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||L.write(L.symmetric,t);await a.decrypt(r,e,n)}catch(t){F.printDebugError(t),h=t}})));if(x(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new xa(a.packets);return a.packets=new Ms,l}async decryptSessionKeys(t,e,r,i=new Date,n=N){let s,a=[];if(e){const t=this.packets.filterByTag(L.packet.symEncryptedSessionKey);if(0===t.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(e.map((async function(e,r){let i;i=r?await Ms.fromBinary(t.write(),Ua,n):t,await Promise.all(i.map((async function(t){try{await t.decrypt(e),a.push(t)}catch(t){F.printDebugError(t),t instanceof rn&&(s=t)}})))})))}else{if(!t)throw Error("No key or password specified.");{const e=this.packets.filterByTag(L.packet.publicKeyEncryptedSessionKey);if(0===e.length)throw Error("No public key encrypted session key packet found.");await Promise.all(e.map((async function(e){await Promise.all(t.map((async function(t){let o=[L.symmetric.aes256,L.symmetric.aes128,L.symmetric.tripledes,L.symmetric.cast5];try{const e=await t.getPrimarySelfSignature(i,void 0,n);e.preferredSymmetricAlgorithms&&(o=o.concat(e.preferredSymmetricAlgorithms))}catch(t){}const c=(await t.getDecryptionKeys(e.publicKeyID,null,void 0,n)).map((t=>t.keyPacket));await Promise.all(c.map((async function(t){if(!t||t.isDummy())return;if(!t.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(e.publicKeyAlgorithm===L.publicKey.rsaEncrypt||e.publicKeyAlgorithm===L.publicKey.rsaEncryptSign||e.publicKeyAlgorithm===L.publicKey.rsaSign||e.publicKeyAlgorithm===L.publicKey.elgamal)){const i=e.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async e=>{const r=new qs;r.read(i);const n={sessionKeyAlgorithm:e,sessionKey:en.generateSessionKey(e)};try{await r.decrypt(t,n),a.push(r)}catch(t){F.printDebugError(t),s=t}})))}else try{await e.decrypt(t);const i=r||e.sessionKeyAlgorithm;if(i&&!o.includes(L.write(L.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(e)}catch(t){F.printDebugError(t),s=t}})))}))),x(e.encrypted),e.encrypted=null})))}}if(a.length>0){if(a.length>1){const t=new Set;a=a.filter((e=>{const r=e.sessionKeyAlgorithm+F.uint8ArrayToString(e.sessionKey);return!t.has(r)&&(t.add(r),!0)}))}return a.map((t=>({data:t.sessionKey,algorithm:t.sessionKeyAlgorithm&&L.read(L.symmetric,t.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const t=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return t&&t.getBytes()||null}getFilename(){const t=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return t&&t.getFilename()||null}getText(){const t=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return t?t.getText():null}static async generateSessionKey(t=[],e=new Date,r=[],i=N){const{symmetricAlgo:n,aeadAlgo:s}=await async function(t=[],e=new Date,r=[],i=N){const n=await Promise.all(t.map(((t,n)=>t.getPrimarySelfSignature(e,r[n],i))));if(t.length?n.every((t=>t.features[0]&L.features.seipdv2)):i.aeadProtect){const t={symmetricAlgo:L.symmetric.aes128,aeadAlgo:L.aead.ocb},e={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((t=>t.preferredCipherSuites&&t.preferredCipherSuites.some((t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo))))?e:t}const s=L.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((t=>t.preferredSymmetricAlgorithms&&t.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(t,e,r,i),a=L.read(L.symmetric,n),o=s?L.read(L.aead,s):void 0;await Promise.all(t.map((t=>t.getEncryptionKey().catch((()=>null)).then((t=>{if(t&&(t.keyPacket.algorithm===L.publicKey.x25519||t.keyPacket.algorithm===L.publicKey.x448)&&!o&&!F.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:en.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(t,e,r,i=!1,n=[],s=new Date,a=[],o=N){if(r){if(!F.isUint8Array(r.data)||!F.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(t&&t.length)r=await xa.generateSessionKey(t,s,a,o);else{if(!e||!e.length)throw Error("No keys, passwords, or session key provided.");r=await xa.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await xa.encryptSessionKey(c,h,u,t,e,i,n,s,a,o),f=Fs.fromObject({version:u?2:1,aeadAlgorithm:u?L.write(L.aead,u):null});f.packets=this.packets;const y=L.write(L.symmetric,h);return await f.encrypt(y,c,o),l.packets.push(f),f.packets=new Ms,l}static async encryptSessionKey(t,e,r,i,n,s=!1,a=[],o=new Date,c=[],h=N){const u=new Ms,l=L.write(L.symmetric,e),f=r&&L.write(L.aead,r);if(i){const e=await Promise.all(i.map((async function(e,r){const i=await e.getEncryptionKey(a[r],o,c,h),n=qs.fromObject({version:f?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:t,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...e)}if(n){const e=async function(t,e){try{return await t.decrypt(e),1}catch(t){return 0}},r=(t,e)=>t+e,i=async function(t,s,a,o){const c=new Vs(h);if(c.sessionKey=t,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((t=>e(c,t))))).reduce(r))return i(t,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((e=>i(t,l,f,e))));u.push(...s)}return new xa(u)}async sign(t=[],e=null,r=[],i=new Date,n=[],s=[],a=N){const o=new Ms,c=this.packets.findPacket(L.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await Qa(c,t,e,r,i,n,s,!1,a),u=h.map(((t,e)=>Ds.fromSignaturePacket(t,0===e))).reverse();return o.push(...u),o.push(c),o.push(...h),new xa(o)}compress(t,e=N){if(t===L.compression.uncompressed)return this;const r=new Qs(e);r.algorithm=t,r.packets=this.packets;const i=new Ms;return i.push(r),new xa(i)}async signDetached(t=[],e=null,r=[],i=new Date,n=[],s=[],a=N){const o=this.packets.findPacket(L.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new na(await Qa(o,t,e,r,i,n,s,!0,a))}async verify(t,e=new Date,r=N){const i=this.unwrapCompressed(),n=i.packets.filterByTag(L.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");l(i.packets.stream)&&i.packets.push(...await M(i.packets.stream,(t=>t||[])));const s=i.packets.filterByTag(L.packet.onePassSignature).reverse(),a=i.packets.filterByTag(L.packet.signature);return s.length&&!a.length&&F.isStream(i.packets.stream)&&!l(i.packets.stream)?(await Promise.all(s.map((async t=>{t.correspondingSig=new Promise(((e,r)=>{t.correspondingSigResolve=e,t.correspondingSigReject=r})),t.signatureData=Q((async()=>(await t.correspondingSig).signatureData)),t.hashed=M(await t.hash(t.signatureType,n[0],void 0,!1)),t.hashed.catch((()=>{}))}))),i.packets.stream=C(i.packets.stream,(async(t,e)=>{const r=R(t),i=_(e);try{for(let t=0;t<s.length;t++){const{value:e}=await r.read();s[t].correspondingSigResolve(e)}await r.readToEnd(),await i.ready,await i.close()}catch(t){s.forEach((e=>{e.correspondingSigReject(t)})),await i.abort(t)}})),Ra(s,n,t,e,!1,r)):Ra(a,n,t,e,!1,r)}verifyDetached(t,e,r=new Date,i=N){const n=this.unwrapCompressed().packets.filterByTag(L.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return Ra(t.packets.filterByTag(L.packet.signature),n,e,r,!0,i)}unwrapCompressed(){const t=this.packets.filterByTag(L.packet.compressedData);return t.length?new xa(t[0].packets):this}async appendSignature(t,e=N){await this.packets.read(F.isUint8Array(t)?t:(await X(t)).data,Ma,e)}write(){return this.packets.write()}armor(t=N){return tt(L.armor.message,this.write(),null,null,null,t)}}async function Qa(t,e,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=N){const h=new Ms,u=null===t.text?L.signature.binary:L.signature.text;if(await Promise.all(e.map((async(e,r)=>{const h=s[r];if(!e.isPrivate())throw Error("Need private key for signing");const l=await e.getSigningKey(i[r],n,h,c);return ua(t,e,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((t=>{h.push(...t)})),r){const t=r.packets.filterByTag(L.packet.signature);h.push(...t)}return h}async function Ra(t,e,r,i=new Date,n=!1,s=N){return Promise.all(t.filter((function(t){return["text","binary"].includes(L.read(L.signature,t.signatureType))})).map((async function(t){return async function(t,e,r,i=new Date,n=!1,s=N){let a,o;for(const e of r){const r=e.getKeys(t.issuerKeyID);if(r.length>0){a=e,o=r[0];break}}const c=t instanceof Ds?t.correspondingSig:t,h={keyID:t.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+t.issuerKeyID.toHex());await t.verify(o.keyPacket,t.signatureType,e[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(t){if(!s.allowInsecureVerificationWithReformattedKeys||!t.message.match(/Signature creation time is in the future/))throw t;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const t=await c,e=new Ms;return t&&e.push(t),new na(e)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(t,e,r,i,n,s)})))}const _a=/*#__PURE__*/F.constructAllowedPackets([Bs]);class Ta{constructor(t,e){if(this.text=F.removeTrailingSpaces(t).replace(/\r?\n/g,"\r\n"),e&&!(e instanceof na))throw Error("Invalid signature input");this.signature=e||new na(new Ms)}getSigningKeyIDs(){const t=[];return this.signature.packets.forEach((function(e){t.push(e.issuerKeyID)})),t}async sign(t,e=null,r=[],i=new Date,n=[],s=[],a=N){const o=new ks;o.setText(this.text);const c=new na(await Qa(o,t,e,r,i,n,s,!0,a));return new Ta(this.text,c)}verify(t,e=new Date,r=N){const i=this.signature.packets.filterByTag(L.packet.signature),n=new ks;return n.setText(this.text),Ra(i,[n],t,e,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(t=N){const e={hash:this.signature.packets.some((t=>6!==t.version))?Array.from(new Set(this.signature.packets.map((t=>L.read(L.hash,t.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return tt(L.armor.signed,e,void 0,void 0,void 0,t)}}function La(t){if(!(t instanceof xa))throw Error("Parameter [message] needs to be of type Message")}function Na(t){if(!(t instanceof Ta||t instanceof xa))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function Oa(t){if("armored"!==t&&"binary"!==t&&"object"!==t)throw Error("Unsupported format "+t)}const Fa=Object.keys(N).length;function Ha(t){const e=Object.keys(t);if(e.length!==Fa)for(const t of e)if(void 0===N[t])throw Error("Unknown config property: "+t)}function za(t){return t&&!F.isArray(t)&&(t=[t]),t}async function Ga(t){return"array"===F.isStream(t)?M(t):t}function qa(t,e){t.data=C(e.packets.stream,(async(e,r)=>{await E(t.data,r,{preventClose:!0});const i=_(r);try{await M(e,(t=>t)),await i.close()}catch(t){await i.abort(t)}}))}function ja(t,e,r){switch(e){case"object":return t;case"armored":return t.armor(r);case"binary":return t.write();default:throw Error("Unsupported format "+e)}}class Va{static setImplementation(t,e=!1){if(Va.Implementation&&!e)throw Error("Implementation already set");Va.Implementation=t}static new(t){return new Va.Implementation(t)}}class Za extends Va{constructor(t){if(super(),void 0===t)throw Error("Invalid BigInteger input");if(t instanceof Uint8Array){const e="0123456789ABCDEF";let r="";t.forEach((t=>{r+=e[t>>4]+e[15&t]})),this.value=BigInt("0x0"+r)}else this.value=BigInt(t)}clone(){return new Za(this.value)}iinc(){return this.value++,this}inc(){return this.clone().iinc()}idec(){return this.value--,this}dec(){return this.clone().idec()}iadd(t){return this.value+=t.value,this}add(t){return this.clone().iadd(t)}isub(t){return this.value-=t.value,this}sub(t){return this.clone().isub(t)}imul(t){return this.value*=t.value,this}mul(t){return this.clone().imul(t)}imod(t){return this.value%=t.value,this.isNegative()&&this.iadd(t),this}mod(t){return this.clone().imod(t)}modExp(t,e){if(e.isZero())throw Error("Modulo cannot be zero");if(e.isOne())return new Za(0);if(t.isNegative())throw Error("Unsopported negative exponent");let r=t.value,i=this.value;i%=e.value;let n=BigInt(1);for(;r>BigInt(0);){const t=r&BigInt(1);r>>=BigInt(1);const s=n*i%e.value;n=t?s:n,i=i*i%e.value}return new Za(n)}modInv(t){const{gcd:e,x:r}=this._egcd(t);if(!e.isOne())throw Error("Inverse does not exist");return r.add(t).mod(t)}idiv(t){return this.value/=t.value,this}div(t){return this.clone().idiv(t)}_egcd(t){let e=BigInt(0),r=BigInt(1),i=BigInt(1),n=BigInt(0),s=this.abs().value,a=t.abs().value;const o=this.isNegative(),c=t.isNegative();for(;a!==BigInt(0);){const t=s/a;let o=e;e=i-t*e,i=o,o=r,r=n-t*r,n=o,o=a,a=s%a,s=o}return{x:new Za(o?-i:i),y:new Za(c?-n:n),gcd:new Za(s)}}gcd(t){let e=this.value,r=t.value;for(;r!==BigInt(0);){const t=r;r=e%r,e=t}return new Za(e)}ileftShift(t){return this.value<<=t.value,this}leftShift(t){return this.clone().ileftShift(t)}irightShift(t){return this.value>>=t.value,this}rightShift(t){return this.clone().irightShift(t)}ixor(t){return this.value^=t.value,this}xor(t){return this.clone().ixor(t)}ibitwiseAnd(t){return this.value&=t.value,this}bitwiseAnd(t){return this.clone().ibitwiseAnd(t)}ibitwiseOr(t){return this.value|=t.value,this}equal(t){return this.value===t.value}lt(t){return this.value<t.value}lte(t){return this.value<=t.value}gt(t){return this.value>t.value}gte(t){return this.value>=t.value}isZero(){return this.value===BigInt(0)}isOne(){return this.value===BigInt(1)}isNegative(){return this.value<BigInt(0)}isEven(){return!(this.value&BigInt(1))}abs(){const t=this.clone();return this.isNegative()&&(t.value=-t.value),t}negate(){const t=this.clone();return t.value=-t.value,t}toString(){return this.value.toString()}toNumber(){const t=Number(this.value);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}getBit(t){return(this.value>>BigInt(t)&BigInt(1))===BigInt(0)?0:1}bitLength(){const t=new Za(0),e=new Za(1),r=new Za(-1),i=this.isNegative()?r:t;let n=1;const s=this.clone();for(;!s.irightShift(e).equal(i);)n++;return n}byteLength(){const t=new Za(0),e=new Za(-1),r=this.isNegative()?e:t,i=new Za(8);let n=1;const s=this.clone();for(;!s.irightShift(i).equal(r);)n++;return n}toUint8Array(t="be",e){let r=this.value.toString(16);r.length%2==1&&(r="0"+r);const i=r.length/2,n=new Uint8Array(e||i),s=e?e-i:0;let a=0;for(;a<i;)n[a+s]=parseInt(r.slice(2*a,2*a+2),16),a++;return"be"!==t&&n.reverse(),n}}var Ja=/*#__PURE__*/Object.freeze({__proto__:null,default:Za}),Ya={exports:{}};!function(t,e){function r(t,e){if(!t)throw Error(e||"Assertion failed")}function i(t,e){t.super_=e;var r=function(){};r.prototype=e.prototype,t.prototype=new r,t.prototype.constructor=t}function n(t,e,r){if(n.isBN(t))return t;this.negative=0,this.words=null,this.length=0,this.red=null,null!==t&&("le"!==e&&"be"!==e||(r=e,e=10),this._init(t||0,e||10,r||"be"))}var s;"object"==typeof t?t.exports=n:e.BN=n,n.BN=n,n.wordSize=26;try{s="undefined"!=typeof window&&void 0!==window.Buffer?window.Buffer:require("buffer").Buffer}catch(t){}function a(t,e){var r=t.charCodeAt(e);return r>=65&&r<=70?r-55:r>=97&&r<=102?r-87:r-48&15}function o(t,e,r){var i=a(t,r);return r-1>=e&&(i|=a(t,r-1)<<4),i}function c(t,e,r,i){for(var n=0,s=Math.min(t.length,r),a=e;a<s;a++){var o=t.charCodeAt(a)-48;n*=i,n+=o>=49?o-49+10:o>=17?o-17+10:o}return n}n.isBN=function(t){return t instanceof n||null!==t&&"object"==typeof t&&t.constructor.wordSize===n.wordSize&&Array.isArray(t.words)},n.max=function(t,e){return t.cmp(e)>0?t:e},n.min=function(t,e){return t.cmp(e)<0?t:e},n.prototype._init=function(t,e,i){if("number"==typeof t)return this._initNumber(t,e,i);if("object"==typeof t)return this._initArray(t,e,i);"hex"===e&&(e=16),r(e===(0|e)&&e>=2&&e<=36);var n=0;"-"===(t=t.toString().replace(/\s+/g,""))[0]&&(n++,this.negative=1),n<t.length&&(16===e?this._parseHex(t,n,i):(this._parseBase(t,e,n),"le"===i&&this._initArray(this.toArray(),e,i)))},n.prototype._initNumber=function(t,e,i){t<0&&(this.negative=1,t=-t),t<67108864?(this.words=[67108863&t],this.length=1):t<4503599627370496?(this.words=[67108863&t,t/67108864&67108863],this.length=2):(r(t<9007199254740992),this.words=[67108863&t,t/67108864&67108863,1],this.length=3),"le"===i&&this._initArray(this.toArray(),e,i)},n.prototype._initArray=function(t,e,i){if(r("number"==typeof t.length),t.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(t.length/3),this.words=Array(this.length);for(var n=0;n<this.length;n++)this.words[n]=0;var s,a,o=0;if("be"===i)for(n=t.length-1,s=0;n>=0;n-=3)a=t[n]|t[n-1]<<8|t[n-2]<<16,this.words[s]|=a<<o&67108863,this.words[s+1]=a>>>26-o&67108863,(o+=24)>=26&&(o-=26,s++);else if("le"===i)for(n=0,s=0;n<t.length;n+=3)a=t[n]|t[n+1]<<8|t[n+2]<<16,this.words[s]|=a<<o&67108863,this.words[s+1]=a>>>26-o&67108863,(o+=24)>=26&&(o-=26,s++);return this.strip()},n.prototype._parseHex=function(t,e,r){this.length=Math.ceil((t.length-e)/6),this.words=Array(this.length);for(var i=0;i<this.length;i++)this.words[i]=0;var n,s=0,a=0;if("be"===r)for(i=t.length-1;i>=e;i-=2)n=o(t,e,i)<<s,this.words[a]|=67108863&n,s>=18?(s-=18,a+=1,this.words[a]|=n>>>26):s+=8;else for(i=(t.length-e)%2==0?e+1:e;i<t.length;i+=2)n=o(t,e,i)<<s,this.words[a]|=67108863&n,s>=18?(s-=18,a+=1,this.words[a]|=n>>>26):s+=8;this.strip()},n.prototype._parseBase=function(t,e,r){this.words=[0],this.length=1;for(var i=0,n=1;n<=67108863;n*=e)i++;i--,n=n/e|0;for(var s=t.length-r,a=s%i,o=Math.min(s,s-a)+r,h=0,u=r;u<o;u+=i)h=c(t,u,u+i,e),this.imuln(n),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h);if(0!==a){var l=1;for(h=c(t,u,t.length,e),u=0;u<a;u++)l*=e;this.imuln(l),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h)}this.strip()},n.prototype.copy=function(t){t.words=Array(this.length);for(var e=0;e<this.length;e++)t.words[e]=this.words[e];t.length=this.length,t.negative=this.negative,t.red=this.red},n.prototype.clone=function(){var t=new n(null);return this.copy(t),t},n.prototype._expand=function(t){for(;this.length<t;)this.words[this.length++]=0;return this},n.prototype.strip=function(){for(;this.length>1&&0===this.words[this.length-1];)this.length--;return this._normSign()},n.prototype._normSign=function(){return 1===this.length&&0===this.words[0]&&(this.negative=0),this},n.prototype.inspect=function(){return(this.red?"<BN-R: ":"<BN: ")+this.toString(16)+">"};var h=["","0","00","000","0000","00000","000000","0000000","00000000","000000000","0000000000","00000000000","000000000000","0000000000000","00000000000000","000000000000000","0000000000000000","00000000000000000","000000000000000000","0000000000000000000","00000000000000000000","000000000000000000000","0000000000000000000000","00000000000000000000000","000000000000000000000000","0000000000000000000000000"],u=[0,0,25,16,12,11,10,9,8,8,7,7,7,7,6,6,6,6,6,6,6,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5],l=[0,0,33554432,43046721,16777216,48828125,60466176,40353607,16777216,43046721,1e7,19487171,35831808,62748517,7529536,11390625,16777216,24137569,34012224,47045881,64e6,4084101,5153632,6436343,7962624,9765625,11881376,14348907,17210368,20511149,243e5,28629151,33554432,39135393,45435424,52521875,60466176];function f(t,e,r){r.negative=e.negative^t.negative;var i=t.length+e.length|0;r.length=i,i=i-1|0;var n=0|t.words[0],s=0|e.words[0],a=n*s,o=67108863&a,c=a/67108864|0;r.words[0]=o;for(var h=1;h<i;h++){for(var u=c>>>26,l=67108863&c,f=Math.min(h,e.length-1),y=Math.max(0,h-t.length+1);y<=f;y++){var d=h-y|0;u+=(a=(n=0|t.words[d])*(s=0|e.words[y])+l)/67108864|0,l=67108863&a}r.words[h]=0|l,c=0|u}return 0!==c?r.words[h]=0|c:r.length--,r.strip()}n.prototype.toString=function(t,e){var i;if(e=0|e||1,16===(t=t||10)||"hex"===t){i="";for(var n=0,s=0,a=0;a<this.length;a++){var o=this.words[a],c=(16777215&(o<<n|s)).toString(16);i=0!=(s=o>>>24-n&16777215)||a!==this.length-1?h[6-c.length]+c+i:c+i,(n+=2)>=26&&(n-=26,a--)}for(0!==s&&(i=s.toString(16)+i);i.length%e!=0;)i="0"+i;return 0!==this.negative&&(i="-"+i),i}if(t===(0|t)&&t>=2&&t<=36){var f=u[t],y=l[t];i="";var d=this.clone();for(d.negative=0;!d.isZero();){var p=d.modn(y).toString(t);i=(d=d.idivn(y)).isZero()?p+i:h[f-p.length]+p+i}for(this.isZero()&&(i="0"+i);i.length%e!=0;)i="0"+i;return 0!==this.negative&&(i="-"+i),i}r(!1,"Base should be between 2 and 36")},n.prototype.toNumber=function(){var t=this.words[0];return 2===this.length?t+=67108864*this.words[1]:3===this.length&&1===this.words[2]?t+=4503599627370496+67108864*this.words[1]:this.length>2&&r(!1,"Number can only safely store up to 53 bits"),0!==this.negative?-t:t},n.prototype.toJSON=function(){return this.toString(16)},n.prototype.toBuffer=function(t,e){return r(void 0!==s),this.toArrayLike(s,t,e)},n.prototype.toArray=function(t,e){return this.toArrayLike(Array,t,e)},n.prototype.toArrayLike=function(t,e,i){var n=this.byteLength(),s=i||Math.max(1,n);r(n<=s,"byte array longer than desired length"),r(s>0,"Requested array length <= 0"),this.strip();var a,o,c="le"===e,h=new t(s),u=this.clone();if(c){for(o=0;!u.isZero();o++)a=u.andln(255),u.iushrn(8),h[o]=a;for(;o<s;o++)h[o]=0}else{for(o=0;o<s-n;o++)h[o]=0;for(o=0;!u.isZero();o++)a=u.andln(255),u.iushrn(8),h[s-o-1]=a}return h},n.prototype._countBits=Math.clz32?function(t){return 32-Math.clz32(t)}:function(t){var e=t,r=0;return e>=4096&&(r+=13,e>>>=13),e>=64&&(r+=7,e>>>=7),e>=8&&(r+=4,e>>>=4),e>=2&&(r+=2,e>>>=2),r+e},n.prototype._zeroBits=function(t){if(0===t)return 26;var e=t,r=0;return 0==(8191&e)&&(r+=13,e>>>=13),0==(127&e)&&(r+=7,e>>>=7),0==(15&e)&&(r+=4,e>>>=4),0==(3&e)&&(r+=2,e>>>=2),0==(1&e)&&r++,r},n.prototype.bitLength=function(){var t=this.words[this.length-1],e=this._countBits(t);return 26*(this.length-1)+e},n.prototype.zeroBits=function(){if(this.isZero())return 0;for(var t=0,e=0;e<this.length;e++){var r=this._zeroBits(this.words[e]);if(t+=r,26!==r)break}return t},n.prototype.byteLength=function(){return Math.ceil(this.bitLength()/8)},n.prototype.toTwos=function(t){return 0!==this.negative?this.abs().inotn(t).iaddn(1):this.clone()},n.prototype.fromTwos=function(t){return this.testn(t-1)?this.notn(t).iaddn(1).ineg():this.clone()},n.prototype.isNeg=function(){return 0!==this.negative},n.prototype.neg=function(){return this.clone().ineg()},n.prototype.ineg=function(){return this.isZero()||(this.negative^=1),this},n.prototype.iuor=function(t){for(;this.length<t.length;)this.words[this.length++]=0;for(var e=0;e<t.length;e++)this.words[e]=this.words[e]|t.words[e];return this.strip()},n.prototype.ior=function(t){return r(0==(this.negative|t.negative)),this.iuor(t)},n.prototype.or=function(t){return this.length>t.length?this.clone().ior(t):t.clone().ior(this)},n.prototype.uor=function(t){return this.length>t.length?this.clone().iuor(t):t.clone().iuor(this)},n.prototype.iuand=function(t){var e;e=this.length>t.length?t:this;for(var r=0;r<e.length;r++)this.words[r]=this.words[r]&t.words[r];return this.length=e.length,this.strip()},n.prototype.iand=function(t){return r(0==(this.negative|t.negative)),this.iuand(t)},n.prototype.and=function(t){return this.length>t.length?this.clone().iand(t):t.clone().iand(this)},n.prototype.uand=function(t){return this.length>t.length?this.clone().iuand(t):t.clone().iuand(this)},n.prototype.iuxor=function(t){var e,r;this.length>t.length?(e=this,r=t):(e=t,r=this);for(var i=0;i<r.length;i++)this.words[i]=e.words[i]^r.words[i];if(this!==e)for(;i<e.length;i++)this.words[i]=e.words[i];return this.length=e.length,this.strip()},n.prototype.ixor=function(t){return r(0==(this.negative|t.negative)),this.iuxor(t)},n.prototype.xor=function(t){return this.length>t.length?this.clone().ixor(t):t.clone().ixor(this)},n.prototype.uxor=function(t){return this.length>t.length?this.clone().iuxor(t):t.clone().iuxor(this)},n.prototype.inotn=function(t){r("number"==typeof t&&t>=0);var e=0|Math.ceil(t/26),i=t%26;this._expand(e),i>0&&e--;for(var n=0;n<e;n++)this.words[n]=67108863&~this.words[n];return i>0&&(this.words[n]=~this.words[n]&67108863>>26-i),this.strip()},n.prototype.notn=function(t){return this.clone().inotn(t)},n.prototype.setn=function(t,e){r("number"==typeof t&&t>=0);var i=t/26|0,n=t%26;return this._expand(i+1),this.words[i]=e?this.words[i]|1<<n:this.words[i]&~(1<<n),this.strip()},n.prototype.iadd=function(t){var e,r,i;if(0!==this.negative&&0===t.negative)return this.negative=0,e=this.isub(t),this.negative^=1,this._normSign();if(0===this.negative&&0!==t.negative)return t.negative=0,e=this.isub(t),t.negative=1,e._normSign();this.length>t.length?(r=this,i=t):(r=t,i=this);for(var n=0,s=0;s<i.length;s++)e=(0|r.words[s])+(0|i.words[s])+n,this.words[s]=67108863&e,n=e>>>26;for(;0!==n&&s<r.length;s++)e=(0|r.words[s])+n,this.words[s]=67108863&e,n=e>>>26;if(this.length=r.length,0!==n)this.words[this.length]=n,this.length++;else if(r!==this)for(;s<r.length;s++)this.words[s]=r.words[s];return this},n.prototype.add=function(t){var e;return 0!==t.negative&&0===this.negative?(t.negative=0,e=this.sub(t),t.negative^=1,e):0===t.negative&&0!==this.negative?(this.negative=0,e=t.sub(this),this.negative=1,e):this.length>t.length?this.clone().iadd(t):t.clone().iadd(this)},n.prototype.isub=function(t){if(0!==t.negative){t.negative=0;var e=this.iadd(t);return t.negative=1,e._normSign()}if(0!==this.negative)return this.negative=0,this.iadd(t),this.negative=1,this._normSign();var r,i,n=this.cmp(t);if(0===n)return this.negative=0,this.length=1,this.words[0]=0,this;n>0?(r=this,i=t):(r=t,i=this);for(var s=0,a=0;a<i.length;a++)s=(e=(0|r.words[a])-(0|i.words[a])+s)>>26,this.words[a]=67108863&e;for(;0!==s&&a<r.length;a++)s=(e=(0|r.words[a])+s)>>26,this.words[a]=67108863&e;if(0===s&&a<r.length&&r!==this)for(;a<r.length;a++)this.words[a]=r.words[a];return this.length=Math.max(this.length,a),r!==this&&(this.negative=1),this.strip()},n.prototype.sub=function(t){return this.clone().isub(t)};var y=function(t,e,r){var i,n,s,a=t.words,o=e.words,c=r.words,h=0,u=0|a[0],l=8191&u,f=u>>>13,y=0|a[1],d=8191&y,p=y>>>13,g=0|a[2],m=8191&g,w=g>>>13,A=0|a[3],b=8191&A,v=A>>>13,E=0|a[4],k=8191&E,S=E>>>13,I=0|a[5],C=8191&I,B=I>>>13,K=0|a[6],P=8191&K,D=K>>>13,U=0|a[7],M=8191&U,x=U>>>13,Q=0|a[8],R=8191&Q,_=Q>>>13,T=0|a[9],L=8191&T,N=T>>>13,O=0|o[0],F=8191&O,H=O>>>13,z=0|o[1],G=8191&z,q=z>>>13,j=0|o[2],V=8191&j,Z=j>>>13,J=0|o[3],Y=8191&J,W=J>>>13,$=0|o[4],X=8191&$,tt=$>>>13,et=0|o[5],rt=8191&et,it=et>>>13,nt=0|o[6],st=8191&nt,at=nt>>>13,ot=0|o[7],ct=8191&ot,ht=ot>>>13,ut=0|o[8],lt=8191&ut,ft=ut>>>13,yt=0|o[9],dt=8191&yt,pt=yt>>>13;r.negative=t.negative^e.negative,r.length=19;var gt=(h+(i=Math.imul(l,F))|0)+((8191&(n=(n=Math.imul(l,H))+Math.imul(f,F)|0))<<13)|0;h=((s=Math.imul(f,H))+(n>>>13)|0)+(gt>>>26)|0,gt&=67108863,i=Math.imul(d,F),n=(n=Math.imul(d,H))+Math.imul(p,F)|0,s=Math.imul(p,H);var mt=(h+(i=i+Math.imul(l,G)|0)|0)+((8191&(n=(n=n+Math.imul(l,q)|0)+Math.imul(f,G)|0))<<13)|0;h=((s=s+Math.imul(f,q)|0)+(n>>>13)|0)+(mt>>>26)|0,mt&=67108863,i=Math.imul(m,F),n=(n=Math.imul(m,H))+Math.imul(w,F)|0,s=Math.imul(w,H),i=i+Math.imul(d,G)|0,n=(n=n+Math.imul(d,q)|0)+Math.imul(p,G)|0,s=s+Math.imul(p,q)|0;var wt=(h+(i=i+Math.imul(l,V)|0)|0)+((8191&(n=(n=n+Math.imul(l,Z)|0)+Math.imul(f,V)|0))<<13)|0;h=((s=s+Math.imul(f,Z)|0)+(n>>>13)|0)+(wt>>>26)|0,wt&=67108863,i=Math.imul(b,F),n=(n=Math.imul(b,H))+Math.imul(v,F)|0,s=Math.imul(v,H),i=i+Math.imul(m,G)|0,n=(n=n+Math.imul(m,q)|0)+Math.imul(w,G)|0,s=s+Math.imul(w,q)|0,i=i+Math.imul(d,V)|0,n=(n=n+Math.imul(d,Z)|0)+Math.imul(p,V)|0,s=s+Math.imul(p,Z)|0;var At=(h+(i=i+Math.imul(l,Y)|0)|0)+((8191&(n=(n=n+Math.imul(l,W)|0)+Math.imul(f,Y)|0))<<13)|0;h=((s=s+Math.imul(f,W)|0)+(n>>>13)|0)+(At>>>26)|0,At&=67108863,i=Math.imul(k,F),n=(n=Math.imul(k,H))+Math.imul(S,F)|0,s=Math.imul(S,H),i=i+Math.imul(b,G)|0,n=(n=n+Math.imul(b,q)|0)+Math.imul(v,G)|0,s=s+Math.imul(v,q)|0,i=i+Math.imul(m,V)|0,n=(n=n+Math.imul(m,Z)|0)+Math.imul(w,V)|0,s=s+Math.imul(w,Z)|0,i=i+Math.imul(d,Y)|0,n=(n=n+Math.imul(d,W)|0)+Math.imul(p,Y)|0,s=s+Math.imul(p,W)|0;var bt=(h+(i=i+Math.imul(l,X)|0)|0)+((8191&(n=(n=n+Math.imul(l,tt)|0)+Math.imul(f,X)|0))<<13)|0;h=((s=s+Math.imul(f,tt)|0)+(n>>>13)|0)+(bt>>>26)|0,bt&=67108863,i=Math.imul(C,F),n=(n=Math.imul(C,H))+Math.imul(B,F)|0,s=Math.imul(B,H),i=i+Math.imul(k,G)|0,n=(n=n+Math.imul(k,q)|0)+Math.imul(S,G)|0,s=s+Math.imul(S,q)|0,i=i+Math.imul(b,V)|0,n=(n=n+Math.imul(b,Z)|0)+Math.imul(v,V)|0,s=s+Math.imul(v,Z)|0,i=i+Math.imul(m,Y)|0,n=(n=n+Math.imul(m,W)|0)+Math.imul(w,Y)|0,s=s+Math.imul(w,W)|0,i=i+Math.imul(d,X)|0,n=(n=n+Math.imul(d,tt)|0)+Math.imul(p,X)|0,s=s+Math.imul(p,tt)|0;var vt=(h+(i=i+Math.imul(l,rt)|0)|0)+((8191&(n=(n=n+Math.imul(l,it)|0)+Math.imul(f,rt)|0))<<13)|0;h=((s=s+Math.imul(f,it)|0)+(n>>>13)|0)+(vt>>>26)|0,vt&=67108863,i=Math.imul(P,F),n=(n=Math.imul(P,H))+Math.imul(D,F)|0,s=Math.imul(D,H),i=i+Math.imul(C,G)|0,n=(n=n+Math.imul(C,q)|0)+Math.imul(B,G)|0,s=s+Math.imul(B,q)|0,i=i+Math.imul(k,V)|0,n=(n=n+Math.imul(k,Z)|0)+Math.imul(S,V)|0,s=s+Math.imul(S,Z)|0,i=i+Math.imul(b,Y)|0,n=(n=n+Math.imul(b,W)|0)+Math.imul(v,Y)|0,s=s+Math.imul(v,W)|0,i=i+Math.imul(m,X)|0,n=(n=n+Math.imul(m,tt)|0)+Math.imul(w,X)|0,s=s+Math.imul(w,tt)|0,i=i+Math.imul(d,rt)|0,n=(n=n+Math.imul(d,it)|0)+Math.imul(p,rt)|0,s=s+Math.imul(p,it)|0;var Et=(h+(i=i+Math.imul(l,st)|0)|0)+((8191&(n=(n=n+Math.imul(l,at)|0)+Math.imul(f,st)|0))<<13)|0;h=((s=s+Math.imul(f,at)|0)+(n>>>13)|0)+(Et>>>26)|0,Et&=67108863,i=Math.imul(M,F),n=(n=Math.imul(M,H))+Math.imul(x,F)|0,s=Math.imul(x,H),i=i+Math.imul(P,G)|0,n=(n=n+Math.imul(P,q)|0)+Math.imul(D,G)|0,s=s+Math.imul(D,q)|0,i=i+Math.imul(C,V)|0,n=(n=n+Math.imul(C,Z)|0)+Math.imul(B,V)|0,s=s+Math.imul(B,Z)|0,i=i+Math.imul(k,Y)|0,n=(n=n+Math.imul(k,W)|0)+Math.imul(S,Y)|0,s=s+Math.imul(S,W)|0,i=i+Math.imul(b,X)|0,n=(n=n+Math.imul(b,tt)|0)+Math.imul(v,X)|0,s=s+Math.imul(v,tt)|0,i=i+Math.imul(m,rt)|0,n=(n=n+Math.imul(m,it)|0)+Math.imul(w,rt)|0,s=s+Math.imul(w,it)|0,i=i+Math.imul(d,st)|0,n=(n=n+Math.imul(d,at)|0)+Math.imul(p,st)|0,s=s+Math.imul(p,at)|0;var kt=(h+(i=i+Math.imul(l,ct)|0)|0)+((8191&(n=(n=n+Math.imul(l,ht)|0)+Math.imul(f,ct)|0))<<13)|0;h=((s=s+Math.imul(f,ht)|0)+(n>>>13)|0)+(kt>>>26)|0,kt&=67108863,i=Math.imul(R,F),n=(n=Math.imul(R,H))+Math.imul(_,F)|0,s=Math.imul(_,H),i=i+Math.imul(M,G)|0,n=(n=n+Math.imul(M,q)|0)+Math.imul(x,G)|0,s=s+Math.imul(x,q)|0,i=i+Math.imul(P,V)|0,n=(n=n+Math.imul(P,Z)|0)+Math.imul(D,V)|0,s=s+Math.imul(D,Z)|0,i=i+Math.imul(C,Y)|0,n=(n=n+Math.imul(C,W)|0)+Math.imul(B,Y)|0,s=s+Math.imul(B,W)|0,i=i+Math.imul(k,X)|0,n=(n=n+Math.imul(k,tt)|0)+Math.imul(S,X)|0,s=s+Math.imul(S,tt)|0,i=i+Math.imul(b,rt)|0,n=(n=n+Math.imul(b,it)|0)+Math.imul(v,rt)|0,s=s+Math.imul(v,it)|0,i=i+Math.imul(m,st)|0,n=(n=n+Math.imul(m,at)|0)+Math.imul(w,st)|0,s=s+Math.imul(w,at)|0,i=i+Math.imul(d,ct)|0,n=(n=n+Math.imul(d,ht)|0)+Math.imul(p,ct)|0,s=s+Math.imul(p,ht)|0;var St=(h+(i=i+Math.imul(l,lt)|0)|0)+((8191&(n=(n=n+Math.imul(l,ft)|0)+Math.imul(f,lt)|0))<<13)|0;h=((s=s+Math.imul(f,ft)|0)+(n>>>13)|0)+(St>>>26)|0,St&=67108863,i=Math.imul(L,F),n=(n=Math.imul(L,H))+Math.imul(N,F)|0,s=Math.imul(N,H),i=i+Math.imul(R,G)|0,n=(n=n+Math.imul(R,q)|0)+Math.imul(_,G)|0,s=s+Math.imul(_,q)|0,i=i+Math.imul(M,V)|0,n=(n=n+Math.imul(M,Z)|0)+Math.imul(x,V)|0,s=s+Math.imul(x,Z)|0,i=i+Math.imul(P,Y)|0,n=(n=n+Math.imul(P,W)|0)+Math.imul(D,Y)|0,s=s+Math.imul(D,W)|0,i=i+Math.imul(C,X)|0,n=(n=n+Math.imul(C,tt)|0)+Math.imul(B,X)|0,s=s+Math.imul(B,tt)|0,i=i+Math.imul(k,rt)|0,n=(n=n+Math.imul(k,it)|0)+Math.imul(S,rt)|0,s=s+Math.imul(S,it)|0,i=i+Math.imul(b,st)|0,n=(n=n+Math.imul(b,at)|0)+Math.imul(v,st)|0,s=s+Math.imul(v,at)|0,i=i+Math.imul(m,ct)|0,n=(n=n+Math.imul(m,ht)|0)+Math.imul(w,ct)|0,s=s+Math.imul(w,ht)|0,i=i+Math.imul(d,lt)|0,n=(n=n+Math.imul(d,ft)|0)+Math.imul(p,lt)|0,s=s+Math.imul(p,ft)|0;var It=(h+(i=i+Math.imul(l,dt)|0)|0)+((8191&(n=(n=n+Math.imul(l,pt)|0)+Math.imul(f,dt)|0))<<13)|0;h=((s=s+Math.imul(f,pt)|0)+(n>>>13)|0)+(It>>>26)|0,It&=67108863,i=Math.imul(L,G),n=(n=Math.imul(L,q))+Math.imul(N,G)|0,s=Math.imul(N,q),i=i+Math.imul(R,V)|0,n=(n=n+Math.imul(R,Z)|0)+Math.imul(_,V)|0,s=s+Math.imul(_,Z)|0,i=i+Math.imul(M,Y)|0,n=(n=n+Math.imul(M,W)|0)+Math.imul(x,Y)|0,s=s+Math.imul(x,W)|0,i=i+Math.imul(P,X)|0,n=(n=n+Math.imul(P,tt)|0)+Math.imul(D,X)|0,s=s+Math.imul(D,tt)|0,i=i+Math.imul(C,rt)|0,n=(n=n+Math.imul(C,it)|0)+Math.imul(B,rt)|0,s=s+Math.imul(B,it)|0,i=i+Math.imul(k,st)|0,n=(n=n+Math.imul(k,at)|0)+Math.imul(S,st)|0,s=s+Math.imul(S,at)|0,i=i+Math.imul(b,ct)|0,n=(n=n+Math.imul(b,ht)|0)+Math.imul(v,ct)|0,s=s+Math.imul(v,ht)|0,i=i+Math.imul(m,lt)|0,n=(n=n+Math.imul(m,ft)|0)+Math.imul(w,lt)|0,s=s+Math.imul(w,ft)|0;var Ct=(h+(i=i+Math.imul(d,dt)|0)|0)+((8191&(n=(n=n+Math.imul(d,pt)|0)+Math.imul(p,dt)|0))<<13)|0;h=((s=s+Math.imul(p,pt)|0)+(n>>>13)|0)+(Ct>>>26)|0,Ct&=67108863,i=Math.imul(L,V),n=(n=Math.imul(L,Z))+Math.imul(N,V)|0,s=Math.imul(N,Z),i=i+Math.imul(R,Y)|0,n=(n=n+Math.imul(R,W)|0)+Math.imul(_,Y)|0,s=s+Math.imul(_,W)|0,i=i+Math.imul(M,X)|0,n=(n=n+Math.imul(M,tt)|0)+Math.imul(x,X)|0,s=s+Math.imul(x,tt)|0,i=i+Math.imul(P,rt)|0,n=(n=n+Math.imul(P,it)|0)+Math.imul(D,rt)|0,s=s+Math.imul(D,it)|0,i=i+Math.imul(C,st)|0,n=(n=n+Math.imul(C,at)|0)+Math.imul(B,st)|0,s=s+Math.imul(B,at)|0,i=i+Math.imul(k,ct)|0,n=(n=n+Math.imul(k,ht)|0)+Math.imul(S,ct)|0,s=s+Math.imul(S,ht)|0,i=i+Math.imul(b,lt)|0,n=(n=n+Math.imul(b,ft)|0)+Math.imul(v,lt)|0,s=s+Math.imul(v,ft)|0;var Bt=(h+(i=i+Math.imul(m,dt)|0)|0)+((8191&(n=(n=n+Math.imul(m,pt)|0)+Math.imul(w,dt)|0))<<13)|0;h=((s=s+Math.imul(w,pt)|0)+(n>>>13)|0)+(Bt>>>26)|0,Bt&=67108863,i=Math.imul(L,Y),n=(n=Math.imul(L,W))+Math.imul(N,Y)|0,s=Math.imul(N,W),i=i+Math.imul(R,X)|0,n=(n=n+Math.imul(R,tt)|0)+Math.imul(_,X)|0,s=s+Math.imul(_,tt)|0,i=i+Math.imul(M,rt)|0,n=(n=n+Math.imul(M,it)|0)+Math.imul(x,rt)|0,s=s+Math.imul(x,it)|0,i=i+Math.imul(P,st)|0,n=(n=n+Math.imul(P,at)|0)+Math.imul(D,st)|0,s=s+Math.imul(D,at)|0,i=i+Math.imul(C,ct)|0,n=(n=n+Math.imul(C,ht)|0)+Math.imul(B,ct)|0,s=s+Math.imul(B,ht)|0,i=i+Math.imul(k,lt)|0,n=(n=n+Math.imul(k,ft)|0)+Math.imul(S,lt)|0,s=s+Math.imul(S,ft)|0;var Kt=(h+(i=i+Math.imul(b,dt)|0)|0)+((8191&(n=(n=n+Math.imul(b,pt)|0)+Math.imul(v,dt)|0))<<13)|0;h=((s=s+Math.imul(v,pt)|0)+(n>>>13)|0)+(Kt>>>26)|0,Kt&=67108863,i=Math.imul(L,X),n=(n=Math.imul(L,tt))+Math.imul(N,X)|0,s=Math.imul(N,tt),i=i+Math.imul(R,rt)|0,n=(n=n+Math.imul(R,it)|0)+Math.imul(_,rt)|0,s=s+Math.imul(_,it)|0,i=i+Math.imul(M,st)|0,n=(n=n+Math.imul(M,at)|0)+Math.imul(x,st)|0,s=s+Math.imul(x,at)|0,i=i+Math.imul(P,ct)|0,n=(n=n+Math.imul(P,ht)|0)+Math.imul(D,ct)|0,s=s+Math.imul(D,ht)|0,i=i+Math.imul(C,lt)|0,n=(n=n+Math.imul(C,ft)|0)+Math.imul(B,lt)|0,s=s+Math.imul(B,ft)|0;var Pt=(h+(i=i+Math.imul(k,dt)|0)|0)+((8191&(n=(n=n+Math.imul(k,pt)|0)+Math.imul(S,dt)|0))<<13)|0;h=((s=s+Math.imul(S,pt)|0)+(n>>>13)|0)+(Pt>>>26)|0,Pt&=67108863,i=Math.imul(L,rt),n=(n=Math.imul(L,it))+Math.imul(N,rt)|0,s=Math.imul(N,it),i=i+Math.imul(R,st)|0,n=(n=n+Math.imul(R,at)|0)+Math.imul(_,st)|0,s=s+Math.imul(_,at)|0,i=i+Math.imul(M,ct)|0,n=(n=n+Math.imul(M,ht)|0)+Math.imul(x,ct)|0,s=s+Math.imul(x,ht)|0,i=i+Math.imul(P,lt)|0,n=(n=n+Math.imul(P,ft)|0)+Math.imul(D,lt)|0,s=s+Math.imul(D,ft)|0;var Dt=(h+(i=i+Math.imul(C,dt)|0)|0)+((8191&(n=(n=n+Math.imul(C,pt)|0)+Math.imul(B,dt)|0))<<13)|0;h=((s=s+Math.imul(B,pt)|0)+(n>>>13)|0)+(Dt>>>26)|0,Dt&=67108863,i=Math.imul(L,st),n=(n=Math.imul(L,at))+Math.imul(N,st)|0,s=Math.imul(N,at),i=i+Math.imul(R,ct)|0,n=(n=n+Math.imul(R,ht)|0)+Math.imul(_,ct)|0,s=s+Math.imul(_,ht)|0,i=i+Math.imul(M,lt)|0,n=(n=n+Math.imul(M,ft)|0)+Math.imul(x,lt)|0,s=s+Math.imul(x,ft)|0;var Ut=(h+(i=i+Math.imul(P,dt)|0)|0)+((8191&(n=(n=n+Math.imul(P,pt)|0)+Math.imul(D,dt)|0))<<13)|0;h=((s=s+Math.imul(D,pt)|0)+(n>>>13)|0)+(Ut>>>26)|0,Ut&=67108863,i=Math.imul(L,ct),n=(n=Math.imul(L,ht))+Math.imul(N,ct)|0,s=Math.imul(N,ht),i=i+Math.imul(R,lt)|0,n=(n=n+Math.imul(R,ft)|0)+Math.imul(_,lt)|0,s=s+Math.imul(_,ft)|0;var Mt=(h+(i=i+Math.imul(M,dt)|0)|0)+((8191&(n=(n=n+Math.imul(M,pt)|0)+Math.imul(x,dt)|0))<<13)|0;h=((s=s+Math.imul(x,pt)|0)+(n>>>13)|0)+(Mt>>>26)|0,Mt&=67108863,i=Math.imul(L,lt),n=(n=Math.imul(L,ft))+Math.imul(N,lt)|0,s=Math.imul(N,ft);var xt=(h+(i=i+Math.imul(R,dt)|0)|0)+((8191&(n=(n=n+Math.imul(R,pt)|0)+Math.imul(_,dt)|0))<<13)|0;h=((s=s+Math.imul(_,pt)|0)+(n>>>13)|0)+(xt>>>26)|0,xt&=67108863;var Qt=(h+(i=Math.imul(L,dt))|0)+((8191&(n=(n=Math.imul(L,pt))+Math.imul(N,dt)|0))<<13)|0;return h=((s=Math.imul(N,pt))+(n>>>13)|0)+(Qt>>>26)|0,Qt&=67108863,c[0]=gt,c[1]=mt,c[2]=wt,c[3]=At,c[4]=bt,c[5]=vt,c[6]=Et,c[7]=kt,c[8]=St,c[9]=It,c[10]=Ct,c[11]=Bt,c[12]=Kt,c[13]=Pt,c[14]=Dt,c[15]=Ut,c[16]=Mt,c[17]=xt,c[18]=Qt,0!==h&&(c[19]=h,r.length++),r};function d(t,e,r){return(new p).mulp(t,e,r)}function p(t,e){this.x=t,this.y=e}Math.imul||(y=f),n.prototype.mulTo=function(t,e){var r,i=this.length+t.length;return r=10===this.length&&10===t.length?y(this,t,e):i<63?f(this,t,e):i<1024?function(t,e,r){r.negative=e.negative^t.negative,r.length=t.length+e.length;for(var i=0,n=0,s=0;s<r.length-1;s++){var a=n;n=0;for(var o=67108863&i,c=Math.min(s,e.length-1),h=Math.max(0,s-t.length+1);h<=c;h++){var u=s-h,l=(0|t.words[u])*(0|e.words[h]),f=67108863&l;o=67108863&(f=f+o|0),n+=(a=(a=a+(l/67108864|0)|0)+(f>>>26)|0)>>>26,a&=67108863}r.words[s]=o,i=a,a=n}return 0!==i?r.words[s]=i:r.length--,r.strip()}(this,t,e):d(this,t,e),r},p.prototype.makeRBT=function(t){for(var e=Array(t),r=n.prototype._countBits(t)-1,i=0;i<t;i++)e[i]=this.revBin(i,r,t);return e},p.prototype.revBin=function(t,e,r){if(0===t||t===r-1)return t;for(var i=0,n=0;n<e;n++)i|=(1&t)<<e-n-1,t>>=1;return i},p.prototype.permute=function(t,e,r,i,n,s){for(var a=0;a<s;a++)i[a]=e[t[a]],n[a]=r[t[a]]},p.prototype.transform=function(t,e,r,i,n,s){this.permute(s,t,e,r,i,n);for(var a=1;a<n;a<<=1)for(var o=a<<1,c=Math.cos(2*Math.PI/o),h=Math.sin(2*Math.PI/o),u=0;u<n;u+=o)for(var l=c,f=h,y=0;y<a;y++){var d=r[u+y],p=i[u+y],g=r[u+y+a],m=i[u+y+a],w=l*g-f*m;m=l*m+f*g,g=w,r[u+y]=d+g,i[u+y]=p+m,r[u+y+a]=d-g,i[u+y+a]=p-m,y!==o&&(w=c*l-h*f,f=c*f+h*l,l=w)}},p.prototype.guessLen13b=function(t,e){var r=1|Math.max(e,t),i=1&r,n=0;for(r=r/2|0;r;r>>>=1)n++;return 1<<n+1+i},p.prototype.conjugate=function(t,e,r){if(!(r<=1))for(var i=0;i<r/2;i++){var n=t[i];t[i]=t[r-i-1],t[r-i-1]=n,n=e[i],e[i]=-e[r-i-1],e[r-i-1]=-n}},p.prototype.normalize13b=function(t,e){for(var r=0,i=0;i<e/2;i++){var n=8192*Math.round(t[2*i+1]/e)+Math.round(t[2*i]/e)+r;t[i]=67108863&n,r=n<67108864?0:n/67108864|0}return t},p.prototype.convert13b=function(t,e,i,n){for(var s=0,a=0;a<e;a++)s+=0|t[a],i[2*a]=8191&s,s>>>=13,i[2*a+1]=8191&s,s>>>=13;for(a=2*e;a<n;++a)i[a]=0;r(0===s),r(0==(-8192&s))},p.prototype.stub=function(t){for(var e=Array(t),r=0;r<t;r++)e[r]=0;return e},p.prototype.mulp=function(t,e,r){var i=2*this.guessLen13b(t.length,e.length),n=this.makeRBT(i),s=this.stub(i),a=Array(i),o=Array(i),c=Array(i),h=Array(i),u=Array(i),l=Array(i),f=r.words;f.length=i,this.convert13b(t.words,t.length,a,i),this.convert13b(e.words,e.length,h,i),this.transform(a,s,o,c,i,n),this.transform(h,s,u,l,i,n);for(var y=0;y<i;y++){var d=o[y]*u[y]-c[y]*l[y];c[y]=o[y]*l[y]+c[y]*u[y],o[y]=d}return this.conjugate(o,c,i),this.transform(o,c,f,s,i,n),this.conjugate(f,s,i),this.normalize13b(f,i),r.negative=t.negative^e.negative,r.length=t.length+e.length,r.strip()},n.prototype.mul=function(t){var e=new n(null);return e.words=Array(this.length+t.length),this.mulTo(t,e)},n.prototype.mulf=function(t){var e=new n(null);return e.words=Array(this.length+t.length),d(this,t,e)},n.prototype.imul=function(t){return this.clone().mulTo(t,this)},n.prototype.imuln=function(t){r("number"==typeof t),r(t<67108864);for(var e=0,i=0;i<this.length;i++){var n=(0|this.words[i])*t,s=(67108863&n)+(67108863&e);e>>=26,e+=n/67108864|0,e+=s>>>26,this.words[i]=67108863&s}return 0!==e&&(this.words[i]=e,this.length++),this},n.prototype.muln=function(t){return this.clone().imuln(t)},n.prototype.sqr=function(){return this.mul(this)},n.prototype.isqr=function(){return this.imul(this.clone())},n.prototype.pow=function(t){var e=function(t){for(var e=Array(t.bitLength()),r=0;r<e.length;r++){var i=r/26|0,n=r%26;e[r]=(t.words[i]&1<<n)>>>n}return e}(t);if(0===e.length)return new n(1);for(var r=this,i=0;i<e.length&&0===e[i];i++,r=r.sqr());if(++i<e.length)for(var s=r.sqr();i<e.length;i++,s=s.sqr())0!==e[i]&&(r=r.mul(s));return r},n.prototype.iushln=function(t){r("number"==typeof t&&t>=0);var e,i=t%26,n=(t-i)/26,s=67108863>>>26-i<<26-i;if(0!==i){var a=0;for(e=0;e<this.length;e++){var o=this.words[e]&s,c=(0|this.words[e])-o<<i;this.words[e]=c|a,a=o>>>26-i}a&&(this.words[e]=a,this.length++)}if(0!==n){for(e=this.length-1;e>=0;e--)this.words[e+n]=this.words[e];for(e=0;e<n;e++)this.words[e]=0;this.length+=n}return this.strip()},n.prototype.ishln=function(t){return r(0===this.negative),this.iushln(t)},n.prototype.iushrn=function(t,e,i){var n;r("number"==typeof t&&t>=0),n=e?(e-e%26)/26:0;var s=t%26,a=Math.min((t-s)/26,this.length),o=67108863^67108863>>>s<<s,c=i;if(n=Math.max(0,n-=a),c){for(var h=0;h<a;h++)c.words[h]=this.words[h];c.length=a}if(0===a);else if(this.length>a)for(this.length-=a,h=0;h<this.length;h++)this.words[h]=this.words[h+a];else this.words[0]=0,this.length=1;var u=0;for(h=this.length-1;h>=0&&(0!==u||h>=n);h--){var l=0|this.words[h];this.words[h]=u<<26-s|l>>>s,u=l&o}return c&&0!==u&&(c.words[c.length++]=u),0===this.length&&(this.words[0]=0,this.length=1),this.strip()},n.prototype.ishrn=function(t,e,i){return r(0===this.negative),this.iushrn(t,e,i)},n.prototype.shln=function(t){return this.clone().ishln(t)},n.prototype.ushln=function(t){return this.clone().iushln(t)},n.prototype.shrn=function(t){return this.clone().ishrn(t)},n.prototype.ushrn=function(t){return this.clone().iushrn(t)},n.prototype.testn=function(t){r("number"==typeof t&&t>=0);var e=t%26,i=(t-e)/26,n=1<<e;return!(this.length<=i||!(this.words[i]&n))},n.prototype.imaskn=function(t){r("number"==typeof t&&t>=0);var e=t%26,i=(t-e)/26;if(r(0===this.negative,"imaskn works only with positive numbers"),this.length<=i)return this;if(0!==e&&i++,this.length=Math.min(i,this.length),0!==e){var n=67108863^67108863>>>e<<e;this.words[this.length-1]&=n}return this.strip()},n.prototype.maskn=function(t){return this.clone().imaskn(t)},n.prototype.iaddn=function(t){return r("number"==typeof t),r(t<67108864),t<0?this.isubn(-t):0!==this.negative?1===this.length&&(0|this.words[0])<t?(this.words[0]=t-(0|this.words[0]),this.negative=0,this):(this.negative=0,this.isubn(t),this.negative=1,this):this._iaddn(t)},n.prototype._iaddn=function(t){this.words[0]+=t;for(var e=0;e<this.length&&this.words[e]>=67108864;e++)this.words[e]-=67108864,e===this.length-1?this.words[e+1]=1:this.words[e+1]++;return this.length=Math.max(this.length,e+1),this},n.prototype.isubn=function(t){if(r("number"==typeof t),r(t<67108864),t<0)return this.iaddn(-t);if(0!==this.negative)return this.negative=0,this.iaddn(t),this.negative=1,this;if(this.words[0]-=t,1===this.length&&this.words[0]<0)this.words[0]=-this.words[0],this.negative=1;else for(var e=0;e<this.length&&this.words[e]<0;e++)this.words[e]+=67108864,this.words[e+1]-=1;return this.strip()},n.prototype.addn=function(t){return this.clone().iaddn(t)},n.prototype.subn=function(t){return this.clone().isubn(t)},n.prototype.iabs=function(){return this.negative=0,this},n.prototype.abs=function(){return this.clone().iabs()},n.prototype._ishlnsubmul=function(t,e,i){var n,s,a=t.length+i;this._expand(a);var o=0;for(n=0;n<t.length;n++){s=(0|this.words[n+i])+o;var c=(0|t.words[n])*e;o=((s-=67108863&c)>>26)-(c/67108864|0),this.words[n+i]=67108863&s}for(;n<this.length-i;n++)o=(s=(0|this.words[n+i])+o)>>26,this.words[n+i]=67108863&s;if(0===o)return this.strip();for(r(-1===o),o=0,n=0;n<this.length;n++)o=(s=-(0|this.words[n])+o)>>26,this.words[n]=67108863&s;return this.negative=1,this.strip()},n.prototype._wordDiv=function(t,e){var r=(this.length,t.length),i=this.clone(),s=t,a=0|s.words[s.length-1];0!=(r=26-this._countBits(a))&&(s=s.ushln(r),i.iushln(r),a=0|s.words[s.length-1]);var o,c=i.length-s.length;if("mod"!==e){(o=new n(null)).length=c+1,o.words=Array(o.length);for(var h=0;h<o.length;h++)o.words[h]=0}var u=i.clone()._ishlnsubmul(s,1,c);0===u.negative&&(i=u,o&&(o.words[c]=1));for(var l=c-1;l>=0;l--){var f=67108864*(0|i.words[s.length+l])+(0|i.words[s.length+l-1]);for(f=Math.min(f/a|0,67108863),i._ishlnsubmul(s,f,l);0!==i.negative;)f--,i.negative=0,i._ishlnsubmul(s,1,l),i.isZero()||(i.negative^=1);o&&(o.words[l]=f)}return o&&o.strip(),i.strip(),"div"!==e&&0!==r&&i.iushrn(r),{div:o||null,mod:i}},n.prototype.divmod=function(t,e,i){return r(!t.isZero()),this.isZero()?{div:new n(0),mod:new n(0)}:0!==this.negative&&0===t.negative?(o=this.neg().divmod(t,e),"mod"!==e&&(s=o.div.neg()),"div"!==e&&(a=o.mod.neg(),i&&0!==a.negative&&a.iadd(t)),{div:s,mod:a}):0===this.negative&&0!==t.negative?(o=this.divmod(t.neg(),e),"mod"!==e&&(s=o.div.neg()),{div:s,mod:o.mod}):0!=(this.negative&t.negative)?(o=this.neg().divmod(t.neg(),e),"div"!==e&&(a=o.mod.neg(),i&&0!==a.negative&&a.isub(t)),{div:o.div,mod:a}):t.length>this.length||this.cmp(t)<0?{div:new n(0),mod:this}:1===t.length?"div"===e?{div:this.divn(t.words[0]),mod:null}:"mod"===e?{div:null,mod:new n(this.modn(t.words[0]))}:{div:this.divn(t.words[0]),mod:new n(this.modn(t.words[0]))}:this._wordDiv(t,e);var s,a,o},n.prototype.div=function(t){return this.divmod(t,"div",!1).div},n.prototype.mod=function(t){return this.divmod(t,"mod",!1).mod},n.prototype.umod=function(t){return this.divmod(t,"mod",!0).mod},n.prototype.divRound=function(t){var e=this.divmod(t);if(e.mod.isZero())return e.div;var r=0!==e.div.negative?e.mod.isub(t):e.mod,i=t.ushrn(1),n=t.andln(1),s=r.cmp(i);return s<0||1===n&&0===s?e.div:0!==e.div.negative?e.div.isubn(1):e.div.iaddn(1)},n.prototype.modn=function(t){r(t<=67108863);for(var e=(1<<26)%t,i=0,n=this.length-1;n>=0;n--)i=(e*i+(0|this.words[n]))%t;return i},n.prototype.idivn=function(t){r(t<=67108863);for(var e=0,i=this.length-1;i>=0;i--){var n=(0|this.words[i])+67108864*e;this.words[i]=n/t|0,e=n%t}return this.strip()},n.prototype.divn=function(t){return this.clone().idivn(t)},n.prototype.egcd=function(t){r(0===t.negative),r(!t.isZero());var e=this,i=t.clone();e=0!==e.negative?e.umod(t):e.clone();for(var s=new n(1),a=new n(0),o=new n(0),c=new n(1),h=0;e.isEven()&&i.isEven();)e.iushrn(1),i.iushrn(1),++h;for(var u=i.clone(),l=e.clone();!e.isZero();){for(var f=0,y=1;0==(e.words[0]&y)&&f<26;++f,y<<=1);if(f>0)for(e.iushrn(f);f-- >0;)(s.isOdd()||a.isOdd())&&(s.iadd(u),a.isub(l)),s.iushrn(1),a.iushrn(1);for(var d=0,p=1;0==(i.words[0]&p)&&d<26;++d,p<<=1);if(d>0)for(i.iushrn(d);d-- >0;)(o.isOdd()||c.isOdd())&&(o.iadd(u),c.isub(l)),o.iushrn(1),c.iushrn(1);e.cmp(i)>=0?(e.isub(i),s.isub(o),a.isub(c)):(i.isub(e),o.isub(s),c.isub(a))}return{a:o,b:c,gcd:i.iushln(h)}},n.prototype._invmp=function(t){r(0===t.negative),r(!t.isZero());var e=this,i=t.clone();e=0!==e.negative?e.umod(t):e.clone();for(var s,a=new n(1),o=new n(0),c=i.clone();e.cmpn(1)>0&&i.cmpn(1)>0;){for(var h=0,u=1;0==(e.words[0]&u)&&h<26;++h,u<<=1);if(h>0)for(e.iushrn(h);h-- >0;)a.isOdd()&&a.iadd(c),a.iushrn(1);for(var l=0,f=1;0==(i.words[0]&f)&&l<26;++l,f<<=1);if(l>0)for(i.iushrn(l);l-- >0;)o.isOdd()&&o.iadd(c),o.iushrn(1);e.cmp(i)>=0?(e.isub(i),a.isub(o)):(i.isub(e),o.isub(a))}return(s=0===e.cmpn(1)?a:o).cmpn(0)<0&&s.iadd(t),s},n.prototype.gcd=function(t){if(this.isZero())return t.abs();if(t.isZero())return this.abs();var e=this.clone(),r=t.clone();e.negative=0,r.negative=0;for(var i=0;e.isEven()&&r.isEven();i++)e.iushrn(1),r.iushrn(1);for(;;){for(;e.isEven();)e.iushrn(1);for(;r.isEven();)r.iushrn(1);var n=e.cmp(r);if(n<0){var s=e;e=r,r=s}else if(0===n||0===r.cmpn(1))break;e.isub(r)}return r.iushln(i)},n.prototype.invm=function(t){return this.egcd(t).a.umod(t)},n.prototype.isEven=function(){return 0==(1&this.words[0])},n.prototype.isOdd=function(){return 1==(1&this.words[0])},n.prototype.andln=function(t){return this.words[0]&t},n.prototype.bincn=function(t){r("number"==typeof t);var e=t%26,i=(t-e)/26,n=1<<e;if(this.length<=i)return this._expand(i+1),this.words[i]|=n,this;for(var s=n,a=i;0!==s&&a<this.length;a++){var o=0|this.words[a];s=(o+=s)>>>26,o&=67108863,this.words[a]=o}return 0!==s&&(this.words[a]=s,this.length++),this},n.prototype.isZero=function(){return 1===this.length&&0===this.words[0]},n.prototype.cmpn=function(t){var e,i=t<0;if(0!==this.negative&&!i)return-1;if(0===this.negative&&i)return 1;if(this.strip(),this.length>1)e=1;else{i&&(t=-t),r(t<=67108863,"Number is too big");var n=0|this.words[0];e=n===t?0:n<t?-1:1}return 0!==this.negative?0|-e:e},n.prototype.cmp=function(t){if(0!==this.negative&&0===t.negative)return-1;if(0===this.negative&&0!==t.negative)return 1;var e=this.ucmp(t);return 0!==this.negative?0|-e:e},n.prototype.ucmp=function(t){if(this.length>t.length)return 1;if(this.length<t.length)return-1;for(var e=0,r=this.length-1;r>=0;r--){var i=0|this.words[r],n=0|t.words[r];if(i!==n){i<n?e=-1:i>n&&(e=1);break}}return e},n.prototype.gtn=function(t){return 1===this.cmpn(t)},n.prototype.gt=function(t){return 1===this.cmp(t)},n.prototype.gten=function(t){return this.cmpn(t)>=0},n.prototype.gte=function(t){return this.cmp(t)>=0},n.prototype.ltn=function(t){return-1===this.cmpn(t)},n.prototype.lt=function(t){return-1===this.cmp(t)},n.prototype.lten=function(t){return this.cmpn(t)<=0},n.prototype.lte=function(t){return this.cmp(t)<=0},n.prototype.eqn=function(t){return 0===this.cmpn(t)},n.prototype.eq=function(t){return 0===this.cmp(t)},n.red=function(t){return new E(t)},n.prototype.toRed=function(t){return r(!this.red,"Already a number in reduction context"),r(0===this.negative,"red works only with positives"),t.convertTo(this)._forceRed(t)},n.prototype.fromRed=function(){return r(this.red,"fromRed works only with numbers in reduction context"),this.red.convertFrom(this)},n.prototype._forceRed=function(t){return this.red=t,this},n.prototype.forceRed=function(t){return r(!this.red,"Already a number in reduction context"),this._forceRed(t)},n.prototype.redAdd=function(t){return r(this.red,"redAdd works only with red numbers"),this.red.add(this,t)},n.prototype.redIAdd=function(t){return r(this.red,"redIAdd works only with red numbers"),this.red.iadd(this,t)},n.prototype.redSub=function(t){return r(this.red,"redSub works only with red numbers"),this.red.sub(this,t)},n.prototype.redISub=function(t){return r(this.red,"redISub works only with red numbers"),this.red.isub(this,t)},n.prototype.redShl=function(t){return r(this.red,"redShl works only with red numbers"),this.red.shl(this,t)},n.prototype.redMul=function(t){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,t),this.red.mul(this,t)},n.prototype.redIMul=function(t){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,t),this.red.imul(this,t)},n.prototype.redSqr=function(){return r(this.red,"redSqr works only with red numbers"),this.red._verify1(this),this.red.sqr(this)},n.prototype.redISqr=function(){return r(this.red,"redISqr works only with red numbers"),this.red._verify1(this),this.red.isqr(this)},n.prototype.redSqrt=function(){return r(this.red,"redSqrt works only with red numbers"),this.red._verify1(this),this.red.sqrt(this)},n.prototype.redInvm=function(){return r(this.red,"redInvm works only with red numbers"),this.red._verify1(this),this.red.invm(this)},n.prototype.redNeg=function(){return r(this.red,"redNeg works only with red numbers"),this.red._verify1(this),this.red.neg(this)},n.prototype.redPow=function(t){return r(this.red&&!t.red,"redPow(normalNum)"),this.red._verify1(this),this.red.pow(this,t)};var g={k256:null,p224:null,p192:null,p25519:null};function m(t,e){this.name=t,this.p=new n(e,16),this.n=this.p.bitLength(),this.k=new n(1).iushln(this.n).isub(this.p),this.tmp=this._tmp()}function w(){m.call(this,"k256","ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f")}function A(){m.call(this,"p224","ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001")}function b(){m.call(this,"p192","ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff")}function v(){m.call(this,"25519","7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed")}function E(t){if("string"==typeof t){var e=n._prime(t);this.m=e.p,this.prime=e}else r(t.gtn(1),"modulus must be greater than 1"),this.m=t,this.prime=null}function k(t){E.call(this,t),this.shift=this.m.bitLength(),this.shift%26!=0&&(this.shift+=26-this.shift%26),this.r=new n(1).iushln(this.shift),this.r2=this.imod(this.r.sqr()),this.rinv=this.r._invmp(this.m),this.minv=this.rinv.mul(this.r).isubn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}m.prototype._tmp=function(){var t=new n(null);return t.words=Array(Math.ceil(this.n/13)),t},m.prototype.ireduce=function(t){var e,r=t;do{this.split(r,this.tmp),e=(r=(r=this.imulK(r)).iadd(this.tmp)).bitLength()}while(e>this.n);var i=e<this.n?-1:r.ucmp(this.p);return 0===i?(r.words[0]=0,r.length=1):i>0?r.isub(this.p):void 0!==r.strip?r.strip():r._strip(),r},m.prototype.split=function(t,e){t.iushrn(this.n,0,e)},m.prototype.imulK=function(t){return t.imul(this.k)},i(w,m),w.prototype.split=function(t,e){for(var r=4194303,i=Math.min(t.length,9),n=0;n<i;n++)e.words[n]=t.words[n];if(e.length=i,t.length<=9)return t.words[0]=0,void(t.length=1);var s=t.words[9];for(e.words[e.length++]=s&r,n=10;n<t.length;n++){var a=0|t.words[n];t.words[n-10]=(a&r)<<4|s>>>22,s=a}s>>>=22,t.words[n-10]=s,0===s&&t.length>10?t.length-=10:t.length-=9},w.prototype.imulK=function(t){t.words[t.length]=0,t.words[t.length+1]=0,t.length+=2;for(var e=0,r=0;r<t.length;r++){var i=0|t.words[r];e+=977*i,t.words[r]=67108863&e,e=64*i+(e/67108864|0)}return 0===t.words[t.length-1]&&(t.length--,0===t.words[t.length-1]&&t.length--),t},i(A,m),i(b,m),i(v,m),v.prototype.imulK=function(t){for(var e=0,r=0;r<t.length;r++){var i=19*(0|t.words[r])+e,n=67108863&i;i>>>=26,t.words[r]=n,e=i}return 0!==e&&(t.words[t.length++]=e),t},n._prime=function(t){if(g[t])return g[t];var e;if("k256"===t)e=new w;else if("p224"===t)e=new A;else if("p192"===t)e=new b;else{if("p25519"!==t)throw Error("Unknown prime "+t);e=new v}return g[t]=e,e},E.prototype._verify1=function(t){r(0===t.negative,"red works only with positives"),r(t.red,"red works only with red numbers")},E.prototype._verify2=function(t,e){r(0==(t.negative|e.negative),"red works only with positives"),r(t.red&&t.red===e.red,"red works only with red numbers")},E.prototype.imod=function(t){return this.prime?this.prime.ireduce(t)._forceRed(this):t.umod(this.m)._forceRed(this)},E.prototype.neg=function(t){return t.isZero()?t.clone():this.m.sub(t)._forceRed(this)},E.prototype.add=function(t,e){this._verify2(t,e);var r=t.add(e);return r.cmp(this.m)>=0&&r.isub(this.m),r._forceRed(this)},E.prototype.iadd=function(t,e){this._verify2(t,e);var r=t.iadd(e);return r.cmp(this.m)>=0&&r.isub(this.m),r},E.prototype.sub=function(t,e){this._verify2(t,e);var r=t.sub(e);return r.cmpn(0)<0&&r.iadd(this.m),r._forceRed(this)},E.prototype.isub=function(t,e){this._verify2(t,e);var r=t.isub(e);return r.cmpn(0)<0&&r.iadd(this.m),r},E.prototype.shl=function(t,e){return this._verify1(t),this.imod(t.ushln(e))},E.prototype.imul=function(t,e){return this._verify2(t,e),this.imod(t.imul(e))},E.prototype.mul=function(t,e){return this._verify2(t,e),this.imod(t.mul(e))},E.prototype.isqr=function(t){return this.imul(t,t.clone())},E.prototype.sqr=function(t){return this.mul(t,t)},E.prototype.sqrt=function(t){if(t.isZero())return t.clone();var e=this.m.andln(3);if(r(e%2==1),3===e){var i=this.m.add(new n(1)).iushrn(2);return this.pow(t,i)}for(var s=this.m.subn(1),a=0;!s.isZero()&&0===s.andln(1);)a++,s.iushrn(1);r(!s.isZero());var o=new n(1).toRed(this),c=o.redNeg(),h=this.m.subn(1).iushrn(1),u=this.m.bitLength();for(u=new n(2*u*u).toRed(this);0!==this.pow(u,h).cmp(c);)u.redIAdd(c);for(var l=this.pow(u,s),f=this.pow(t,s.addn(1).iushrn(1)),y=this.pow(t,s),d=a;0!==y.cmp(o);){for(var p=y,g=0;0!==p.cmp(o);g++)p=p.redSqr();r(g<d);var m=this.pow(l,new n(1).iushln(d-g-1));f=f.redMul(m),l=m.redSqr(),y=y.redMul(l),d=g}return f},E.prototype.invm=function(t){var e=t._invmp(this.m);return 0!==e.negative?(e.negative=0,this.imod(e).redNeg()):this.imod(e)},E.prototype.pow=function(t,e){if(e.isZero())return new n(1).toRed(this);if(0===e.cmpn(1))return t.clone();var r=Array(16);r[0]=new n(1).toRed(this),r[1]=t;for(var i=2;i<r.length;i++)r[i]=this.mul(r[i-1],t);var s=r[0],a=0,o=0,c=e.bitLength()%26;for(0===c&&(c=26),i=e.length-1;i>=0;i--){for(var h=e.words[i],u=c-1;u>=0;u--){var l=h>>u&1;s!==r[0]&&(s=this.sqr(s)),0!==l||0!==a?(a<<=1,a|=l,(4==++o||0===i&&0===u)&&(s=this.mul(s,r[a]),o=0,a=0)):o=0}c=26}return s},E.prototype.convertTo=function(t){var e=t.umod(this.m);return e===t?e.clone():e},E.prototype.convertFrom=function(t){var e=t.clone();return e.red=null,e},n.mont=function(t){return new k(t)},i(k,E),k.prototype.convertTo=function(t){return this.imod(t.ushln(this.shift))},k.prototype.convertFrom=function(t){var e=this.imod(t.mul(this.rinv));return e.red=null,e},k.prototype.imul=function(t,e){if(t.isZero()||e.isZero())return t.words[0]=0,t.length=1,t;var r=t.imul(e),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),n=r.isub(i).iushrn(this.shift),s=n;return n.cmp(this.m)>=0?s=n.isub(this.m):n.cmpn(0)<0&&(s=n.iadd(this.m)),s._forceRed(this)},k.prototype.mul=function(t,e){if(t.isZero()||e.isZero())return new n(0)._forceRed(this);var r=t.mul(e),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),s=r.isub(i).iushrn(this.shift),a=s;return s.cmp(this.m)>=0?a=s.isub(this.m):s.cmpn(0)<0&&(a=s.iadd(this.m)),a._forceRed(this)},k.prototype.invm=function(t){return this.imod(t._invmp(this.m).mul(this.r2))._forceRed(this)}}(Ya,is);var Wa=/*@__PURE__*/ns(Ya.exports);class $a extends Va{constructor(t){if(super(),void 0===t)throw Error("Invalid BigInteger input");const e=("string"==typeof t||t instanceof String)&&t.startsWith("0x");this.value=e?new Wa(t.substring(2),16):new Wa(t)}clone(){return new $a(this.value.clone())}iinc(){return this.value.iadd(new Wa(1)),this}inc(){return this.clone().iinc()}idec(){return this.value.isub(new Wa(1)),this}dec(){return this.clone().idec()}iadd(t){return this.value.iadd(t.value),this}add(t){return this.clone().iadd(t)}isub(t){return this.value.isub(t.value),this}sub(t){return this.clone().isub(t)}imul(t){return this.value.imul(t.value),this}mul(t){return this.clone().imul(t)}imod(t){return this.value=this.value.umod(t.value),this}mod(t){return this.clone().imod(t)}modExp(t,e){const r=e.isEven()?Wa.red(e.value):Wa.mont(e.value),i=this.clone();return i.value=i.value.toRed(r).redPow(t.value).fromRed(),i}modInv(t){if(!this.gcd(t).isOne())throw Error("Inverse does not exist");return new $a(this.value.invm(t.value))}idiv(t){return this.value=this.value.div(t.value),this}div(t){return this.clone().idiv(t)}gcd(t){return new $a(this.value.gcd(t.value))}ileftShift(t){return t.isNegative()?this.irightShift(t.negate()):(this.value.ishln(t.value.toNumber()),this)}leftShift(t){return this.clone().ileftShift(t)}irightShift(t){return t.isNegative()?this.ileftShift(t.negate()):(this.value.ishrn(t.value.toNumber()),this)}rightShift(t){return this.clone().irightShift(t)}ixor(t){return this.value.ixor(t.value),this}xor(t){return this.clone().ixor(t)}ibitwiseAnd(t){return this.value.iand(t.value),this}bitwiseAnd(t){return this.clone().ibitwiseAnd(t)}ibitwiseOr(t){return this.value.ior(t.value),this}equal(t){return this.value.eq(t.value)}lt(t){return this.value.lt(t.value)}lte(t){return this.value.lte(t.value)}gt(t){return this.value.gt(t.value)}gte(t){return this.value.gte(t.value)}isZero(){return this.value.isZero()}isOne(){return this.value.eq(new Wa(1))}isNegative(){return this.value.isNeg()}isEven(){return this.value.isEven()}abs(){const t=this.clone();return t.value=t.value.abs(),t}negate(){const t=this.clone();return t.value.ineg(),t}toString(){return this.value.toString()}toNumber(){return this.value.toNumber()}getBit(t){return this.value.testn(t)?1:0}bitLength(){return this.value.bitLength()}byteLength(){return this.value.byteLength()}toUint8Array(t="be",e){return this.value.toArrayLike(Uint8Array,t,e)}}var Xa=/*#__PURE__*/Object.freeze({__proto__:null,default:$a});function to(t){if(!Number.isSafeInteger(t)||t<0)throw Error("Wrong positive integer: "+t)}function eo(t,...e){if(!((r=t)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Expected Uint8Array");var r;if(e.length>0&&!e.includes(t.length))throw Error(`Expected Uint8Array of length ${e}, not of length=${t.length}`)}function ro(t,e=!0){if(t.destroyed)throw Error("Hash instance has been destroyed");if(e&&t.finished)throw Error("Hash#digest() has already been called")}function io(t,e){eo(t);const r=e.outputLen;if(t.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const no=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0;
|
|
3
|
+
/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function so(t){return t instanceof Uint8Array||null!=t&&"object"==typeof t&&"Uint8Array"===t.constructor.name}const ao=t=>new DataView(t.buffer,t.byteOffset,t.byteLength),oo=(t,e)=>t<<32-e|t>>>e;if(!(68===new Uint8Array(new Uint32Array([287454020]).buffer)[0]))throw Error("Non little-endian hardware is not supported");function co(t){if("string"!=typeof t)throw Error("utf8ToBytes expected string, got "+typeof t);return new Uint8Array((new TextEncoder).encode(t))}function ho(t){if("string"==typeof t&&(t=co(t)),!so(t))throw Error("expected Uint8Array, got "+typeof t);return t}function uo(...t){let e=0;for(let r=0;r<t.length;r++){const i=t[r];if(!so(i))throw Error("Uint8Array expected");e+=i.length}const r=new Uint8Array(e);for(let e=0,i=0;e<t.length;e++){const n=t[e];r.set(n,i),i+=n.length}return r}class lo{clone(){return this._cloneInto()}}function fo(t){const e=e=>t().update(ho(e)).digest(),r=t();return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=()=>t(),e}function yo(t=32){if(no&&"function"==typeof no.getRandomValues)return no.getRandomValues(new Uint8Array(t));throw Error("crypto.getRandomValues must be defined")}class po extends lo{constructor(t,e){super(),this.finished=!1,this.destroyed=!1,function(t){if("function"!=typeof t||"function"!=typeof t.create)throw Error("Hash should be wrapped by utils.wrapConstructor");to(t.outputLen),to(t.blockLen)}(t);const r=ho(e);if(this.iHash=t.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const i=this.blockLen,n=new Uint8Array(i);n.set(r.length>i?t.create().update(r).digest():r);for(let t=0;t<n.length;t++)n[t]^=54;this.iHash.update(n),this.oHash=t.create();for(let t=0;t<n.length;t++)n[t]^=106;this.oHash.update(n),n.fill(0)}update(t){return ro(this),this.iHash.update(t),this}digestInto(t){ro(this),eo(t,this.outputLen),this.finished=!0,this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){const t=new Uint8Array(this.oHash.outputLen);return this.digestInto(t),t}_cloneInto(t){t||(t=Object.create(Object.getPrototypeOf(this),{}));const{oHash:e,iHash:r,finished:i,destroyed:n,blockLen:s,outputLen:a}=this;return t.finished=i,t.destroyed=n,t.blockLen=s,t.outputLen=a,t.oHash=e._cloneInto(t.oHash),t.iHash=r._cloneInto(t.iHash),t}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const go=(t,e,r)=>new po(t,e).update(r).digest();go.create=(t,e)=>new po(t,e);Va.setImplementation("undefined"!=typeof BigInt?Za:$a);
|
|
4
4
|
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
|
|
5
|
-
const
|
|
6
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const
|
|
5
|
+
const mo=Object.freeze(Va.new(2));function wo(t){return t instanceof Uint8Array||null!=t&&"object"==typeof t&&"Uint8Array"===t.constructor.name}const Ao=/* @__PURE__ */Array.from({length:256},((t,e)=>e.toString(16).padStart(2,"0")));function bo(t){if(!wo(t))throw Error("Uint8Array expected");let e="";for(let r=0;r<t.length;r++)e+=Ao[t[r]];return e}function vo(t){const e=t instanceof Va?bo(t.toUint8Array()):t.toString(16);return 1&e.length?"0"+e:e}const Eo={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function ko(t){return t>=Eo._0&&t<=Eo._9?t-Eo._0:t>=Eo._A&&t<=Eo._F?t-(Eo._A-10):t>=Eo._a&&t<=Eo._f?t-(Eo._a-10):void 0}function So(t){if("string"!=typeof t)throw Error("hex string expected, got "+typeof t);const e=t.length,r=e/2;if(e%2)throw Error("padded hex string expected, got unpadded hex of length "+e);const i=new Uint8Array(r);for(let e=0,n=0;e<r;e++,n+=2){const r=ko(t.charCodeAt(n)),s=ko(t.charCodeAt(n+1));if(void 0===r||void 0===s){const e=t[n]+t[n+1];throw Error('hex string expected, got non-hex character "'+e+'" at index '+n)}i[e]=16*r+s}return i}function Io(t){return Va.new(t)}function Co(t){if(!wo(t))throw Error("Uint8Array expected");return Va.new(t.slice().reverse())}function Bo(t,e){return t.toUint8Array("be",e)}function Ko(t,e){return t.toUint8Array("le",e)}function Po(t,e,r){let i;if("string"==typeof e)try{i=So(e)}catch(r){throw Error(`${t} must be valid hex string, got "${e}". Cause: ${r}`)}else{if(!wo(e))throw Error(t+" must be hex string or Uint8Array");i=new Uint8Array(e)}const n=i.length;if("number"==typeof r&&n!==r)throw Error(`${t} expected ${r} bytes, got ${n}`);return i}function Do(...t){let e=0;for(let r=0;r<t.length;r++){const i=t[r];if(!wo(i))throw Error("Uint8Array expected");e+=i.length}let r=new Uint8Array(e),i=0;for(let e=0;e<t.length;e++){const n=t[e];r.set(n,i),i+=n.length}return r}const Uo=t=>mo.leftShift(Va.new(t-1)).idec(),Mo=t=>new Uint8Array(t),xo=t=>Uint8Array.from(t);function Qo(t,e,r){if("number"!=typeof t||t<2)throw Error("hashLen must be a number");if("number"!=typeof e||e<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let i=Mo(t),n=Mo(t),s=0;const a=()=>{i.fill(1),n.fill(0),s=0},o=(...t)=>r(n,i,...t),c=(t=Mo())=>{n=o(xo([0]),t),i=o(),0!==t.length&&(n=o(xo([1]),t),i=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let t=0;const r=[];for(;t<e;){i=o();const e=i.slice();r.push(e),t+=i.length}return Do(...r)};return(t,e)=>{let r;for(a(),c(t);!(r=e(h()));)c();return a(),r}}const Ro={BigInteger:t=>t instanceof Va,function:t=>"function"==typeof t,boolean:t=>"boolean"==typeof t,string:t=>"string"==typeof t,stringOrUint8Array:t=>"string"==typeof t||wo(t),isSafeInteger:t=>Number.isSafeInteger(t),array:t=>Array.isArray(t),field:(t,e)=>e.Fp.isValid(t),hash:t=>"function"==typeof t&&Number.isSafeInteger(t.outputLen)};function _o(t,e,r={}){const i=(e,r,i)=>{const n=Ro[r];if("function"!=typeof n)throw Error(`Invalid validator "${r}", expected function`);const s=t[e];if(!(i&&void 0===s||n(s,t)))throw Error(`Invalid param ${e+""}=${s} (${typeof s}), expected ${r}`)};for(const[t,r]of Object.entries(e))i(t,r,!1);for(const[t,e]of Object.entries(r))i(t,e,!0);return t}var To=/*#__PURE__*/Object.freeze({__proto__:null,bitGet:(t,e)=>t.getBit(e),bitLen:function(t){return t.bitLength()},bitMask:Uo,bitSet:(t,e,r)=>{throw Error("unsupported bitSet")},bytesToHex:bo,bytesToNumberBE:Io,bytesToNumberLE:Co,concatBytes:Do,createHmacDrbg:Qo,ensureBytes:Po,equalBytes:function(t,e){if(t.length!==e.length)return!1;let r=0;for(let i=0;i<t.length;i++)r|=t[i]^e[i];return 0===r},hexToBytes:So,hexToNumber:function(t){if("string"!=typeof t)throw Error("hex string expected, got "+typeof t);return Va.new(""===t?"0":"0x"+t)},isBytes:wo,numberToBytesBE:Bo,numberToBytesLE:Ko,numberToHexUnpadded:vo,numberToVarBytesBE:function(t){return So(vo(t))},utf8ToBytes:function(t){if("string"!=typeof t)throw Error("utf8ToBytes expected string, got "+typeof t);return new Uint8Array((new TextEncoder).encode(t))},validateObject:_o});
|
|
6
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Lo=Object.freeze(Va.new(0)),No=Object.freeze(Va.new(1)),Oo=Object.freeze(Va.new(2)),Fo=Object.freeze(Va.new(3)),Ho=Object.freeze(Va.new(4)),zo=Object.freeze(Va.new(5)),Go=Object.freeze(Va.new(8)),qo=Object.freeze(Va.new(9)),jo=Object.freeze(Va.new(16));function Vo(t,e){return t.mod(e)}function Zo(t,e,r){return t.modExp(e,r)}function Jo(t,e,r){return t.modExp(Oo.leftShift(e.dec()),r)}function Yo(t,e){return t.modInv(e)}function Wo(t){if(t.mod(Ho).equal(Fo)){const e=t.add(No).irightShift(Oo);return function(t,r){const i=t.pow(r,e);if(!t.eql(t.sqr(i),r))throw Error("Cannot find square root");return i}}if(t.mod(Go).equal(zo)){const e=t.sub(zo).irightShift(Fo);return function(t,r){const i=t.mul(r,Oo),n=t.pow(i,e),s=t.mul(r,n),a=t.mul(t.mul(s,Oo),n),o=t.mul(s,t.sub(a,t.ONE));if(!t.eql(t.sqr(o),r))throw Error("Cannot find square root");return o}}return t.mod(jo).equal(qo),function(t){const e=t.dec().rightShift(No);let r=t.dec(),i=Va.new(0);for(;r.isEven();)r.irightShift(No),i.iinc();let n=Va.new(2);const s=t.dec();for(;n.lt(t)&&!Zo(n,e,t).equal(s);)n.iinc();if(i.isOne()){const e=t.inc().irightShift(Oo);return function(t,r){const i=t.pow(r,e);if(!t.eql(t.sqr(i),r))throw Error("Cannot find square root");return i}}const a=r.inc().irightShift(No);return function(t,s){if(t.eql(t.pow(s,e),t.neg(t.ONE)))throw Error("Cannot find square root");let o=i,c=t.pow(t.mul(t.ONE,n),r),h=t.pow(s,a),u=t.pow(s,r);for(;!t.eql(u,t.ONE);){if(t.eql(u,t.ZERO))return t.ZERO;let e=Va.new(1);for(let r=t.sqr(u);e.lt(o)&&!t.eql(r,t.ONE);e.iinc())r=t.sqr(r);const r=t.pow(c,No.leftShift(o.sub(e).idec()));c=t.sqr(r),h=t.mul(h,r),u=t.mul(u,c),o=e}return h}}(t)}const $o=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Xo(t,e){const r=void 0!==e?e:t.bitLength();return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function tc(t,e,r=!1,i={}){if(t.lte(Lo))throw Error("Expected Field ORDER > 0, got "+t);const{nBitLength:n,nByteLength:s}=Xo(t,e);if(s>2048)throw Error("Field lengths over 2048 bytes are not supported");const a=Wo(t),o=Object.freeze({ORDER:t,BITS:n,BYTES:s,MASK:Uo(n),ZERO:Lo,ONE:No,create:e=>Vo(e,t),isValid:e=>{if(!(e instanceof Va))throw Error("Invalid field element: expected bigint, got "+typeof e);return Lo.lte(e)&&e.lt(t)},is0:t=>t.isZero(),isOdd:t=>!t.isEven(),neg:e=>Vo(e.negate(),t),eql:(t,e)=>t.equal(e),sqr:e=>Vo(e.mul(e),t),add:(e,r)=>Vo(e.add(r),t),sub:(e,r)=>Vo(e.sub(r),t),mul:(e,r)=>Vo(e.mul(r),t),pow:(t,e)=>function(t,e,r){if(r.isNegative())throw Error("Expected power > 0");if(r.isZero())return t.ONE;if(r.isOne())return e;let i=t.ONE,n=e;for(;r.gt(Lo);)r.isEven()||(i=t.mul(i,n)),n=t.sqr(n),r=r.rightShift(No);return i}(o,t,e),div:(e,r)=>Vo(e.mul(Yo(r,t)),t),sqrN:t=>t.mul(t),addN:(t,e)=>t.add(e),subN:(t,e)=>t.sub(e),mulN:(t,e)=>t.mul(e),inv:e=>Yo(e,t),sqrt:i.sqrt||(t=>a(o,t)),invertBatch:t=>function(t,e){const r=Array(e.length),i=e.reduce(((e,i,n)=>t.is0(i)?e:(r[n]=e,t.mul(e,i))),t.ONE),n=t.inv(i);return e.reduceRight(((e,i,n)=>t.is0(i)?e:(r[n]=t.mul(e,r[n]),t.mul(e,i))),n),r}(o,t),cmov:(t,e,r)=>r?e:t,toBytes:t=>r?Ko(t,s):Bo(t,s),fromBytes:t=>{if(t.length!==s)throw Error(`Fp.fromBytes: expected ${s}, got ${t.length}`);return r?Co(t):Io(t)}});return Object.freeze(o)}function ec(t){if(!(t instanceof Va))throw Error("field order must be bigint");return t.byteLength()}function rc(t){const e=ec(t);return e+Math.ceil(e/2)}
|
|
7
7
|
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
|
|
8
|
-
const
|
|
9
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:Rc,hexToBytes:_c}=lc,Tc={Err:class extends Error{constructor(e=""){super(e)}},_parseInt(e){const{Err:t}=Tc;if(e.length<2||2!==e[0])throw new t("Invalid signature integer tag");const r=e[1],i=e.subarray(2,r+2);if(!r||i.length!==r)throw new t("Invalid signature integer: wrong length");if(128&i[0])throw new t("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new t("Invalid signature integer: unnecessary leading zero");return{d:Rc(i),l:e.subarray(r+2)}},toSig(e){const{Err:t}=Tc,r="string"==typeof e?_c(e):e;if(!(r instanceof Uint8Array))throw Error("ui8a expected");let i=r.length;if(i<2||48!=r[0])throw new t("Invalid signature tag");if(r[1]!==i-2)throw new t("Invalid signature: incorrect length");const{d:n,l:s}=Tc._parseInt(r.subarray(2)),{d:a,l:o}=Tc._parseInt(s);if(o.length)throw new t("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(e){const t=e=>8&Number.parseInt(e[0],16)?"00"+e:e,r=e=>{const t=e instanceof ko?Jo(e.toUint8Array()):e.toString(16);return 1&t.length?"0"+t:t},i=t(r(e.s)),n=t(r(e.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},Lc=Object.freeze(ko.new(0)),Nc=Object.freeze(ko.new(1));Object.freeze(ko.new(2));const Oc=Object.freeze(ko.new(3));function Fc(e){const t=function(e){const t=Qc(e);uc(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=t;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||!(r.beta instanceof ko)||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}(e),{Fp:r}=t,i=t.toBytes||((e,t,i)=>{const n=t.toAffine();return nc(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=t.fromBytes||(e=>{const t=e.subarray(1);return{x:r.fromBytes(t.subarray(0,r.BYTES)),y:r.fromBytes(t.subarray(r.BYTES,2*r.BYTES))}});function s(e){const{a:i,b:n}=t,s=r.sqr(e),a=r.mul(s,e);return r.add(r.add(a,r.mul(e,i)),n)}if(!r.eql(r.sqr(t.Gy),s(t.Gx)))throw Error("bad generator point: equation left != right");function a(e){return e instanceof ko&&Lc.lt(e)&&e.lt(t.n)}function o(e){if(!a(e))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(e){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=t;if(r&&!(e instanceof ko)){if(e instanceof Uint8Array&&(e=Jo(e)),"string"!=typeof e||!r.includes(e.length))throw Error("Invalid key");e=e.padStart(2*i,"0")}let a;try{a=e instanceof ko?e:Xo(ic("private key",e,i))}catch(t){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof e}`)}return n&&(a=vc(a,s)),o(a),a}const h=new Map;function u(e){if(!(e instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(e,t,i){if(this.px=e,this.py=t,this.pz=i,null==e||!r.isValid(e))throw Error("x required");if(null==t||!r.isValid(t))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(e){const{x:t,y:i}=e||{};if(!e||!r.isValid(t)||!r.isValid(i))throw Error("invalid affine point");if(e instanceof l)throw Error("projective point not allowed");const n=e=>r.eql(e,r.ZERO);return n(t)&&n(i)?l.ZERO:new l(t,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}static fromHex(e){const t=l.fromAffine(n(ic("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return l.BASE.multiply(c(e))}_setWindowSize(e){this._WINDOW_SIZE=e,h.delete(this)}assertValidity(){if(this.is0()){if(t.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:e,y:i}=this.toAffine();if(!r.isValid(e)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(e);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:e}=this.toAffine();if(r.isOdd)return!r.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){u(e);const{px:t,py:i,pz:n}=this,{px:s,py:a,pz:o}=e,c=r.eql(r.mul(t,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:e,b:i}=t,n=r.mul(i,Oc),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,f=r.mul(s,s),y=r.mul(a,a),d=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(e,u),h=r.mul(n,d),h=r.add(c,h),c=r.sub(y,h),h=r.add(y,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),d=r.mul(e,d),p=r.sub(f,d),p=r.mul(e,p),p=r.add(p,u),u=r.add(f,f),f=r.add(u,f),f=r.add(f,d),f=r.mul(f,p),h=r.add(h,f),d=r.mul(a,o),d=r.add(d,d),f=r.mul(d,p),c=r.sub(c,f),u=r.mul(d,y),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(e){u(e);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=e;let h=r.ZERO,f=r.ZERO,y=r.ZERO;const d=t.a,p=r.mul(t.b,Oc);let g=r.mul(i,a),m=r.mul(n,o),w=r.mul(s,c),A=r.add(i,n),b=r.add(a,o);A=r.mul(A,b),b=r.add(g,m),A=r.sub(A,b),b=r.add(i,s);let v=r.add(a,c);return b=r.mul(b,v),v=r.add(g,w),b=r.sub(b,v),v=r.add(n,s),h=r.add(o,c),v=r.mul(v,h),h=r.add(m,w),v=r.sub(v,h),y=r.mul(d,b),h=r.mul(p,w),y=r.add(h,y),h=r.sub(m,y),y=r.add(m,y),f=r.mul(h,y),m=r.add(g,g),m=r.add(m,g),w=r.mul(d,w),b=r.mul(p,b),m=r.add(m,w),w=r.sub(g,w),w=r.mul(d,w),b=r.add(b,w),g=r.mul(m,b),f=r.add(f,g),g=r.mul(v,b),h=r.mul(A,h),h=r.sub(h,g),g=r.mul(A,m),y=r.mul(v,y),y=r.add(y,g),new l(h,f,y)}subtract(e){return this.add(e.negate())}is0(){return this.equals(l.ZERO)}wNAF(e){return y.wNAFCached(this,h,e,(e=>{const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}))}multiplyUnsafe(e){const i=l.ZERO;if(e.isZero())return i;if(o(e),e.isOne())return this;const{endo:n}=t;if(!n)return y.unsafeLadder(this,e);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(e),u=i,f=i,d=this;for(;a.gt(Lc)||h.gt(Lc);)a.isEven()||(u=u.add(d)),h.isEven()||(f=f.add(d)),d=d.double(),a=a.rightShift(Nc),h=h.rightShift(Nc);return s&&(u=u.negate()),c&&(f=f.negate()),f=new l(r.mul(f.px,n.beta),f.py,f.pz),u.add(f)}multiply(e){o(e);let i,n,s=e;const{endo:a}=t;if(a){const{k1neg:e,k1:t,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(t),{p:f,f:d}=this.wNAF(c);h=y.constTimeNegate(e,h),f=y.constTimeNegate(o,f),f=new l(r.mul(f.px,a.beta),f.py,f.pz),i=h.add(f),n=u.add(d)}else{const{p:e,f:t}=this.wNAF(s);i=e,n=t}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(e,t,r){const i=l.BASE,n=(e,t)=>t.isZero()||t.isOne()||!e.equals(i)?e.multiplyUnsafe(t):e.multiply(t),s=n(this,t).add(n(e,r));return s.is0()?void 0:s}toAffine(e){const{px:t,py:i,pz:n}=this,s=this.is0();null==e&&(e=s?r.ONE:r.inv(n));const a=r.mul(t,e),o=r.mul(i,e),c=r.mul(n,e);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:e,isTorsionFree:r}=t;if(e.isOne())return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:e,clearCofactor:r}=t;return e.isOne()?this:r?r(l,this):this.multiplyUnsafe(t.h)}toRawBytes(e=!0){return this.assertValidity(),i(l,this,e)}toHex(e=!0){return Jo(this.toRawBytes(e))}}l.BASE=new l(t.Gx,t.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const f=t.nBitLength,y=xc(l,t.endo?Math.ceil(f/2):f);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function Hc(e){const t=function(e){const t=Qc(e);return uc(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}(e),{Fp:r,n:i}=t,n=r.BYTES+1,s=2*r.BYTES+1;function a(e){return vc(e,i)}function o(e){return Sc(e,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=Fc({...t,toBytes(e,t,i){const n=t.toAffine(),s=r.toBytes(n.x),a=nc;return i?a(Uint8Array.from([t.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(e){const t=e.length,i=e[0],a=e.subarray(1);if(t!==n||2!==i&&3!==i){if(t===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${t} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const e=Xo(a);if(o=e,!Lc.lt(o)||!o.lt(r.ORDER))throw Error("Point is not on curve");const t=u(e);let n=r.sqrt(t);return 1==(1&i)!==!n.isEven()&&(n=r.neg(n)),{x:e,y:n}}var o}}),f=e=>Jo(tc(e,t.nByteLength));function y(e){const t=i.rightShift(Nc);return e.gt(t)}const d=(e,t,r)=>Xo(e.slice(t,r));class p{constructor(e,t,r){this.r=e,this.s=t,this.recovery=r,this.assertValidity()}static fromCompact(e){const r=t.nByteLength;return e=ic("compactSignature",e,2*r),new p(d(e,0,r),d(e,r,2*r))}static fromDER(e){const{r:t,s:r}=Tc.toSig(ic("DER",e));return new p(t,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(e){return new p(this.r,this.s,e)}recoverPublicKey(e){const{r:i,s:n,recovery:s}=this,h=A(ic("msgHash",e));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i.add(t.n):i;if(u.gte(r.ORDER))throw Error("recovery id 2 or 3 invalid");const l=0==(1&s)?"02":"03",y=c.fromHex(l+f(u)),d=o(u),p=a(h.negate().imul(d)),g=a(n.mul(d)),m=c.BASE.multiplyAndAddUnsafe(y,p,g);if(!m)throw Error("point at infinify");return m.assertValidity(),m}hasHighS(){return y(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(this.s.negate()),this.recovery):this}toDERRawBytes(){return $o(this.toDERHex())}toDERHex(){return Tc.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return $o(this.toCompactHex())}toCompactHex(){return f(this.r)+f(this.s)}}const g={isValidPrivateKey(e){try{return h(e),!0}catch(e){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const e=Pc(t.n);return function(e,t,r=!1){const i=e.length,n=Uc(t),s=Pc(t);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=vc(r?Xo(e):ec(e),t.dec()).inc();return r?rc(a,n):tc(a,n)}(t.randomBytes(e),t.n)},precompute:(e=8,t=c.BASE)=>(t._setWindowSize(e),t.multiply(ko.new(3)),t)};function m(e){const t=e instanceof Uint8Array,r="string"==typeof e,i=(t||r)&&e.length;return t?i===n||i===s:r?i===2*n||i===2*s:e instanceof c}const w=t.bits2int||function(e){const r=Xo(e),i=8*e.length-t.nBitLength;return i>0?r.rightShift(ko.new(i)):r},A=t.bits2int_modN||function(e){return a(w(e))},b=sc(t.nBitLength);function v(e){if(!(e instanceof ko))throw Error("bigint expected");if(!Lc.lte(e)||!e.lt(b))throw Error("bigint expected < 2^"+t.nBitLength);return tc(e,t.nByteLength)}function E(e,i,n=k){if(["recovered","canonical"].some((e=>e in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=t;let{lowS:f,prehash:d,extraEntropy:g}=n;null==f&&(f=!0),e=ic("msgHash",e),d&&(e=ic("prehashed msgHash",s(e)));const m=A(e),b=h(i),E=[v(b),v(m)];if(null!=g){const e=!0===g?u(r.BYTES):g;E.push(ic("extraEntropy",e))}const S=nc(...E),I=m;return{seed:S,k2sig:function(e){const t=w(e);if(!l(t))return;const r=o(t),i=c.BASE.multiply(t).toAffine(),n=a(i.x);if(n.isZero())return;const s=a(r.mul(a(I.add(n.mul(b)))));if(s.isZero())return;let h=(i.x.equal(n)?0:2)|i.y.getBit(0),u=s;return f&&y(s)&&(u=function(e){return y(e)?a(e.negate()):e}(s),h^=1),new p(n,u,h)}}}const k={lowS:t.lowS,prehash:!1},S={lowS:t.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:t,getPublicKey:function(e,t=!0){return c.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(m(e))throw Error("first arg must be private key");if(!m(t))throw Error("second arg must be public key");return c.fromHex(t).multiply(h(e)).toRawBytes(r)},sign:function(e,r,i=k){const{seed:n,k2sig:s}=E(e,r,i),a=t;return cc(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(e,r,i,n=S){const s=e;if(r=ic("msgHash",r),i=ic("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,f;try{if("string"==typeof s||s instanceof Uint8Array)try{l=p.fromDER(s)}catch(e){if(!(e instanceof Tc.Err))throw e;l=p.fromCompact(s)}else{if(!("object"==typeof s&&s.r instanceof ko&&s.s instanceof ko))throw Error("PARSE");{const{r:e,s:t}=s;l=new p(e,t)}}f=c.fromHex(i)}catch(e){if("PARSE"===e.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=t.hash(r));const{r:y,s:d}=l,g=A(r),m=o(d),w=a(g.mul(m)),b=a(y.mul(m)),v=c.BASE.multiplyAndAddUnsafe(f,w,b)?.toAffine();return!!v&&a(v.x).equal(y)},ProjectivePoint:c,Signature:p,utils:g}}
|
|
10
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function zc(e){return{hash:e,hmac:(t,...r)=>jo(e,t,Fo(...r)),randomBytes:Go}}function Gc(e,t){const r=t=>Hc({...e,...zc(t)});return Object.freeze({...r(t),create:r})}Object.freeze(ko.new(4));class qc extends Ho{constructor(e,t,r,i){super(),this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=To(this.buffer)}update(e){xo(this);const{view:t,buffer:r,blockLen:i}=this,n=(e=Oo(e)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(t,0),this.pos=0);else{const t=To(e);for(;i<=n-s;s+=i)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){xo(this),Qo(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;t[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let e=s;e<i;e++)t[e]=0;!function(e,t,r,i){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,BigInt(r.toString()),i);const n=Object.freeze(ko.new(32)),s=Object.freeze(ko.new(4294967295)),a=r.rightShift(n).bitwiseAnd(s).toNumber(),o=r.bitwiseAnd(s).toNumber(),c=i?4:0,h=i?0:4;e.setUint32(t+c,a,i),e.setUint32(t+h,o,i)}(r,i-8,ko.new(8*this.length),n),this.process(r,0);const a=To(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,h[e],n)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return e.length=i,e.pos=a,e.finished=n,e.destroyed=s,i%t&&e.buffer.set(r),e}}const jc=(e,t,r)=>e&t^e&r^t&r,Vc=new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Zc=new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Yc=new Uint32Array(64);class Jc extends qc{constructor(){super(64,32,8,!1),this.A=0|Zc[0],this.B=0|Zc[1],this.C=0|Zc[2],this.D=0|Zc[3],this.E=0|Zc[4],this.F=0|Zc[5],this.G=0|Zc[6],this.H=0|Zc[7]}get(){const{A:e,B:t,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[e,t,r,i,n,s,a,o]}set(e,t,r,i,n,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)Yc[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=Yc[e-15],r=Yc[e-2],i=Lo(t,7)^Lo(t,18)^t>>>3,n=Lo(r,17)^Lo(r,19)^r>>>10;Yc[e]=n+Yc[e-7]+i+Yc[e-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let e=0;e<64;e++){const t=h+(Lo(a,6)^Lo(a,11)^Lo(a,25))+((u=a)&o^~u&c)+Vc[e]+Yc[e]|0,l=(Lo(r,2)^Lo(r,13)^Lo(r,22))+jc(r,i,n)|0;h=c,c=o,o=a,a=s+t|0,s=n,n=i,i=r,r=t+l|0}var u;r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){Yc.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class Wc extends Jc{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const $c=zo((()=>new Jc)),Xc=zo((()=>new Wc)),eh=Kc(ko.new("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),th=Gc({a:eh.create(ko.new("-3")),b:ko.new("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:eh,n:ko.new("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:ko.new("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:ko.new("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:ko.new(1),lowS:!1},$c),rh=Object.freeze(ko.new(2**32-1)),ih=Object.freeze(ko.new(32));function nh(e,t=!1){return t?{h:e.bitwiseAnd(rh).toNumber(),l:e.rightShift(ih).bitwiseAnd(rh).toNumber()}:{h:0|e.rightShift(ih).bitwiseAnd(rh).toNumber(),l:0|e.bitwiseAnd(rh).toNumber()}}function sh(e,t=!1){let r=new Uint32Array(e.length),i=new Uint32Array(e.length);for(let n=0;n<e.length;n++){const{h:s,l:a}=nh(e[n],t);[r[n],i[n]]=[s,a]}return[r,i]}const ah=(e,t,r)=>e<<r|t>>>32-r,oh=(e,t,r)=>t<<r|e>>>32-r,ch=(e,t,r)=>t<<r-32|e>>>64-r,hh=(e,t,r)=>e<<r-32|t>>>64-r;var uh={fromBig:nh,split:sh,toBig:(e,t)=>ko.new(e>>>0).ileftShift(ih).ibitwiseOr(ko.new(t>>>0)),shrSH:(e,t,r)=>e>>>r,shrSL:(e,t,r)=>e<<32-r|t>>>r,rotrSH:(e,t,r)=>e>>>r|t<<32-r,rotrSL:(e,t,r)=>e<<32-r|t>>>r,rotrBH:(e,t,r)=>e<<64-r|t>>>r-32,rotrBL:(e,t,r)=>e>>>r-32|t<<64-r,rotr32H:(e,t)=>t,rotr32L:(e,t)=>e,rotlSH:ah,rotlSL:oh,rotlBH:ch,rotlBL:hh,add:function(e,t,r,i){const n=(t>>>0)+(i>>>0);return{h:e+r+(n/2**32|0)|0,l:0|n}},add3L:(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),add3H:(e,t,r,i)=>t+r+i+(e/2**32|0)|0,add4L:(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),add4H:(e,t,r,i,n)=>t+r+i+n+(e/2**32|0)|0,add5H:(e,t,r,i,n,s)=>t+r+i+n+s+(e/2**32|0)|0,add5L:(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0)};const[lh,fh]=(()=>uh.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>ko.new(e)))))(),yh=new Uint32Array(80),dh=new Uint32Array(80);class ph extends qc{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:f,Gl:y,Hh:d,Hl:p}=this;return[e,t,r,i,n,s,a,o,c,h,u,l,f,y,d,p]}set(e,t,r,i,n,s,a,o,c,h,u,l,f,y,d,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|f,this.Gl=0|y,this.Hh=0|d,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)yh[r]=e.getUint32(t),dh[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|yh[e-15],r=0|dh[e-15],i=uh.rotrSH(t,r,1)^uh.rotrSH(t,r,8)^uh.shrSH(t,r,7),n=uh.rotrSL(t,r,1)^uh.rotrSL(t,r,8)^uh.shrSL(t,r,7),s=0|yh[e-2],a=0|dh[e-2],o=uh.rotrSH(s,a,19)^uh.rotrBH(s,a,61)^uh.shrSH(s,a,6),c=uh.rotrSL(s,a,19)^uh.rotrBL(s,a,61)^uh.shrSL(s,a,6),h=uh.add4L(n,c,dh[e-7],dh[e-16]),u=uh.add4H(h,i,o,yh[e-7],yh[e-16]);yh[e]=0|u,dh[e]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:f,Fl:y,Gh:d,Gl:p,Hh:g,Hl:m}=this;for(let e=0;e<80;e++){const t=uh.rotrSH(u,l,14)^uh.rotrSH(u,l,18)^uh.rotrBH(u,l,41),w=uh.rotrSL(u,l,14)^uh.rotrSL(u,l,18)^uh.rotrBL(u,l,41),A=u&f^~u&d,b=l&y^~l&p,v=uh.add5L(m,w,b,fh[e],dh[e]),E=uh.add5H(v,g,t,A,lh[e],yh[e]),k=0|v,S=uh.rotrSH(r,i,28)^uh.rotrBH(r,i,34)^uh.rotrBH(r,i,39),I=uh.rotrSL(r,i,28)^uh.rotrBL(r,i,34)^uh.rotrBL(r,i,39),B=r&n^r&a^n&a,C=i&s^i&o^s&o;g=0|d,m=0|p,d=0|f,p=0|y,f=0|u,y=0|l,({h:u,l}=uh.add(0|c,0|h,0|E,0|k)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=uh.add3L(k,I,C);r=uh.add3H(K,E,S,B),i=0|K}({h:r,l:i}=uh.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=uh.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=uh.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=uh.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=uh.add(0|this.Eh,0|this.El,0|u,0|l)),({h:f,l:y}=uh.add(0|this.Fh,0|this.Fl,0|f,0|y)),({h:d,l:p}=uh.add(0|this.Gh,0|this.Gl,0|d,0|p)),({h:g,l:m}=uh.add(0|this.Hh,0|this.Hl,0|g,0|m)),this.set(r,i,n,s,a,o,c,h,u,l,f,y,d,p,g,m)}roundClean(){yh.fill(0),dh.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class gh extends ph{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const mh=zo((()=>new ph)),wh=zo((()=>new gh)),Ah=Kc(ko.new("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),bh=Gc({a:Ah.create(ko.new("-3")),b:ko.new("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:Ah,n:ko.new("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:ko.new("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:ko.new("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:ko.new(1),lowS:!1},wh),vh=Kc(ko.new("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),Eh={a:vh.create(ko.new("-3")),b:ko.new("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:vh,n:ko.new("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:ko.new("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:ko.new("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:ko.new(1)},kh=Gc({a:Eh.a,b:Eh.b,Fp:vh,n:Eh.n,Gx:Eh.Gx,Gy:Eh.Gy,h:Eh.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},mh),Sh=Kc(ko.new("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),Ih=Gc({a:Sh.create(ko.new("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:ko.new("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:Sh,n:ko.new("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:ko.new("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:ko.new("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:ko.new(1),lowS:!1},$c),Bh=Kc(ko.new("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),Ch=Gc({a:Bh.create(ko.new("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:ko.new("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:Bh,n:ko.new("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:ko.new("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:ko.new("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:ko.new(1),lowS:!1},wh),Kh=Kc(ko.new("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),Uh=Gc({a:Kh.create(ko.new("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:ko.new("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:Kh,n:ko.new("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:ko.new("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:ko.new("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:ko.new(1),lowS:!1},mh),[Ph,Dh,Mh]=[[],[],[]],xh=Object.freeze(ko.new(0)),Qh=Object.freeze(ko.new(1)),Rh=Object.freeze(ko.new(2)),_h=Object.freeze(ko.new(7)),Th=Object.freeze(ko.new(256)),Lh=Object.freeze(ko.new(113));for(let e=0,t=Qh,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],Ph.push(2*(5*i+r)),Dh.push((e+1)*(e+2)/2%64);const n=xh.clone();for(let e=0;e<7;e++)t=t.leftShift(Qh).ixor(t.rightShift(_h).imul(Lh)).imod(Th),t.bitwiseAnd(Rh).isZero()||n.ixor(Qh.leftShift(Qh.leftShift(ko.new(e)).idec()));Mh.push(n)}const[Nh,Oh]=sh(Mh,!0),Fh=(e,t,r)=>r>32?ch(e,t,r):ah(e,t,r),Hh=(e,t,r)=>r>32?hh(e,t,r):oh(e,t,r);class zh extends Ho{constructor(e,t,r,i=!1,n=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,Do(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){!function(e,t=24){const r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const i=(t+8)%10,n=(t+2)%10,s=r[n],a=r[n+1],o=Fh(s,a,1)^r[i],c=Hh(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],n=e[3];for(let r=0;r<24;r++){const i=Dh[r],s=Fh(t,n,i),a=Hh(t,n,i),o=Ph[r];t=e[o],n=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let i=0;i<10;i++)r[i]=e[t+i];for(let i=0;i<10;i++)e[t+i]^=~r[(i+2)%10]&r[(i+4)%10]}e[0]^=Nh[i],e[1]^=Oh[i]}r.fill(0)}(this.state32,this.rounds),this.posOut=0,this.pos=0}update(e){xo(this);const{blockLen:t,state:r}=this,i=(e=Oo(e)).length;for(let n=0;n<i;){const s=Math.min(t-this.pos,i-n);for(let t=0;t<s;t++)r[this.pos++]^=e[n++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:i}=this;e[r]^=t,0!=(128&t)&&r===i-1&&this.keccak(),e[i-1]^=128,this.keccak()}writeInto(e){xo(this,!1),Mo(e),this.finish();const t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Do(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Qo(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return e||(e=new zh(t,r,i,s,n)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=s,e.destroyed=this.destroyed,e}}const Gh=(e,t,r)=>zo((()=>new zh(t,e,r))),qh=Gh(6,136,32),jh=Gh(6,72,64),Vh=((e,t,r)=>function(e){const t=(t,r)=>e(r).update(Oo(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((i={})=>new zh(t,e,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),Zh=Object.freeze(ko.new(0)),Yh=Object.freeze(ko.new(1)),Jh=Object.freeze(ko.new(2)),Wh=Object.freeze(ko.new(3)),$h=Object.freeze(ko.new(8)),Xh={zip215:!0};function eu(e){const t=function(e){const t=Qc(e);return uc(e,{hash:"function",a:"BigInteger",d:"BigInteger",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}(e),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=t,h=Jh.leftShift(ko.new(8*o).idec()),u=r.create,l=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:r.sqrt(e.mul(r.inv(t)))}}catch(e){return{isValid:!1,value:Zh}}}),f=t.adjustScalarBytes||(e=>e),y=t.domain||((e,t,r)=>{if(t.length||r)throw Error("Contexts/pre-hash are not supported");return e}),d=e=>e instanceof ko&&e.gt(Zh),p=(e,t)=>d(e)&&d(t)&&e.lt(t),g=e=>e.isZero()||p(e,h);function m(e,t){if(p(e,t))return e;throw Error(`Expected valid scalar < ${t}, got ${typeof e} ${e}`)}function w(e){return e.isZero()?e:m(e,i)}const A=new Map;function b(e){if(!(e instanceof v))throw Error("ExtendedPoint expected")}class v{constructor(e,t,r,i){if(this.ex=e,this.ey=t,this.ez=r,this.et=i,!g(e))throw Error("x required");if(!g(t))throw Error("y required");if(!g(r))throw Error("z required");if(!g(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(e){if(e instanceof v)throw Error("extended point not allowed");const{x:t,y:r}=e||{};if(!g(t)||!g(r))throw Error("invalid affine point");return new v(t,r,Yh,u(t.mul(r)))}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.ez)));return e.map(((e,r)=>e.toAffine(t[r]))).map(v.fromAffine)}_setWindowSize(e){this._WINDOW_SIZE=e,A.delete(this)}assertValidity(){const{a:e,d:r}=t;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i.mul(i)),c=u(n.mul(n)),h=u(s.mul(s)),l=u(h.mul(h)),f=u(o.mul(e)),y=u(h.mul(u(f.add(c)))),d=u(l.add(u(r.mul(u(o.mul(c))))));if(!y.equal(d))throw Error("bad point: equation left != right (1)");const p=u(i.mul(n)),g=u(s.mul(a));if(!p.equal(g))throw Error("bad point: equation left != right (2)")}equals(e){b(e);const{ex:t,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=e,o=u(t.mul(a)),c=u(n.mul(i)),h=u(r.mul(a)),l=u(s.mul(i));return o.equal(c)&&h.equal(l)}is0(){return this.equals(v.ZERO)}negate(){return new v(u(this.ex.negate()),this.ey,this.ez,u(this.et.negate()))}double(){const{a:e}=t,{ex:r,ey:i,ez:n}=this,s=u(r.mul(r)),a=u(i.mul(i)),o=u(Jh.mul(u(n.mul(n)))),c=u(e.mul(s)),h=r.add(i),l=u(u(h.mul(h)).sub(s).isub(a)),f=c.add(a),y=f.sub(o),d=c.sub(a),p=u(l.mul(y)),g=u(f.mul(d)),m=u(l.mul(d)),w=u(y.mul(f));return new v(p,g,w,m)}add(e){b(e);const{a:r,d:i}=t,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:f}=e;if(r.equal(ko.new(-1))){const e=u(s.sub(n).imul(h.add(c))),t=u(s.add(n).imul(h.sub(c))),r=u(t.sub(e));if(r.isZero())return this.double();const i=u(a.mul(Jh).imul(f)),y=u(o.mul(Jh).imul(l)),d=y.add(i),p=t.add(e),g=y.sub(i),m=u(d.mul(r)),w=u(p.mul(g)),A=u(d.mul(g)),b=u(r.mul(p));return new v(m,w,b,A)}const y=u(n.mul(c)),d=u(s.mul(h)),p=u(o.mul(i).imul(f)),g=u(a.mul(l)),m=u(n.add(s).imul(c.add(h)).isub(y).isub(d)),w=g.sub(p),A=g.add(p),E=u(d.sub(r.mul(y))),k=u(m.mul(w)),S=u(A.mul(E)),I=u(m.mul(E)),B=u(w.mul(A));return new v(k,S,B,I)}subtract(e){return this.add(e.negate())}wNAF(e){return S.wNAFCached(this,A,e,v.normalizeZ)}multiply(e){const{p:t,f:r}=this.wNAF(m(e,i));return v.normalizeZ([t,r])[0]}multiplyUnsafe(e){let t=w(e);return t.isZero()?k:this.equals(k)||t.isOne()?this:this.equals(E)?this.wNAF(t).p:S.unsafeLadder(this,t)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return S.unsafeLadder(this,i).is0()}toAffine(e){const{ex:t,ey:i,ez:n}=this,s=this.is0();null==e&&(e=s?$h:r.inv(n));const a=u(t.mul(e)),o=u(i.mul(e)),c=u(n.mul(e));if(s)return{x:Zh.clone(),y:Yh.clone()};if(!c.isOne())throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:e}=t;return e.isOne()?this:this.multiplyUnsafe(e)}static fromHex(e,i=!1){const{d:n,a:s}=t,a=r.BYTES,o=(e=ic("pointHex",e,a)).slice(),c=e[a-1];o[a-1]=-129&c;const f=ec(o);f.isZero()||m(f,i?h:r.ORDER);const y=u(f.mul(f)),d=u(y.dec()),p=u(n.mul(y).isub(s));let{isValid:g,value:w}=l(d,p);if(!g)throw Error("Point.fromHex: invalid y coordinate");const A=!w.isEven(),b=0!=(128&c);if(!i&&w.isZero()&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==A&&(w=u(w.negate())),v.fromAffine({x:w,y:f})}static fromPrivateKey(e){return C(e).point}toRawBytes(){const{x:e,y:t}=this.toAffine(),i=t.toUint8Array("le",r.BYTES);return i[i.length-1]|=e.isEven()?0:128,i}toHex(){return Jo(this.toRawBytes())}}v.BASE=new v(t.Gx,t.Gy,Yh,u(t.Gx.mul(t.Gy))),v.ZERO=new v(Zh,Yh,Yh,Zh);const{BASE:E,ZERO:k}=v,S=xc(v,8*o);function I(e){return vc(e,i)}function B(e){return I(ec(e))}function C(e){const t=o;e=ic("private key",e,t);const r=ic("hashed private key",s(e),2*t),i=f(r.slice(0,t)),n=r.slice(t,2*t),a=B(i),c=E.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(e=new Uint8Array,...t){const r=nc(...t);return B(s(y(r,ic("context",e),!!n)))}const U=Xh;E._setWindowSize(8);return{CURVE:t,getPublicKey:function(e){return C(e).pointBytes},sign:function(e,t,i={}){e=ic("message",e),n&&(e=n(e));const{prefix:s,scalar:a,pointBytes:c}=C(t),h=K(i.context,s,e),u=E.multiply(h).toRawBytes(),l=K(i.context,u,c,e),f=I(h.add(l.mul(a)));return w(f),ic("result",nc(u,f.toUint8Array("le",r.BYTES)),2*o)},verify:function(e,t,i,s=U){const{context:a,zip215:o}=s,c=r.BYTES;e=ic("signature",e,2*c),t=ic("message",t),n&&(t=n(t));const h=ec(e.slice(c,2*c));let u,l,f;try{u=v.fromHex(i,o),l=v.fromHex(e.slice(0,c),o),f=E.multiplyUnsafe(h)}catch(e){return!1}if(!o&&u.isSmallOrder())return!1;const y=K(a,l.toRawBytes(),u.toRawBytes(),t);return l.add(u.multiplyUnsafe(y)).subtract(f).clearCofactor().equals(v.ZERO)},ExtendedPoint:v,utils:{getExtendedPublicKey:C,randomPrivateKey:()=>a(r.BYTES),precompute:(e=8,t=v.BASE)=>(t._setWindowSize(e),t.multiply(Wh),t)}}}
|
|
11
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const
|
|
12
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const
|
|
8
|
+
const ic=Object.freeze(Va.new(0)),nc=Object.freeze(Va.new(1));function sc(t,e){const r=(t,e)=>{const r=e.negate();return t?r:e},i=t=>({windows:Math.ceil(e/t)+1,windowSize:2**(t-1)});return{constTimeNegate:r,unsafeLadder(e,r){const i=r.clone();let n=t.ZERO,s=e;for(;i.gt(ic);)i.isEven()||(n=n.add(s)),s=s.double(),i.irightShift(nc);return n},precomputeWindow(t,e){const{windows:r,windowSize:n}=i(e),s=[];let a=t,o=a;for(let t=0;t<r;t++){o=a,s.push(o);for(let t=1;t<n;t++)o=o.add(a),s.push(o);a=o.double()}return s},wNAF(e,n,s){const a=s.clone(),{windows:o,windowSize:c}=i(e);let h=t.ZERO,u=t.BASE;const l=Va.new(2**e-1),f=2**e,y=Va.new(e);for(let t=0;t<o;t++){const e=t*c;let i=a.bitwiseAnd(l).toNumber();a.irightShift(y),i>c&&(i-=f,a.iinc());const s=e,o=e+Math.abs(i)-1,d=t%2!=0,p=i<0;0===i?u=u.add(r(d,n[s])):h=h.add(r(p,n[o]))}return{p:h,f:u}},wNAFCached(t,e,r,i){const n=t._WINDOW_SIZE||1;let s=e.get(t);return s||(s=this.precomputeWindow(t,n),1!==n&&e.set(t,i(s))),this.wNAF(n,s,r)}}}function ac(t){return _o(t.Fp,$o.reduce(((t,e)=>(t[e]="function",t)),{ORDER:"BigInteger",MASK:"BigInteger",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),_o(t,{n:"BigInteger",h:"BigInteger",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Xo(t.n,t.nBitLength),...t,p:t.Fp.ORDER})}
|
|
9
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:oc,hexToBytes:cc}=To,hc={Err:class extends Error{constructor(t=""){super(t)}},_parseInt(t){const{Err:e}=hc;if(t.length<2||2!==t[0])throw new e("Invalid signature integer tag");const r=t[1],i=t.subarray(2,r+2);if(!r||i.length!==r)throw new e("Invalid signature integer: wrong length");if(128&i[0])throw new e("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new e("Invalid signature integer: unnecessary leading zero");return{d:oc(i),l:t.subarray(r+2)}},toSig(t){const{Err:e}=hc,r="string"==typeof t?cc(t):t;if(!wo(r))throw Error("ui8a expected");let i=r.length;if(i<2||48!=r[0])throw new e("Invalid signature tag");if(r[1]!==i-2)throw new e("Invalid signature: incorrect length");const{d:n,l:s}=hc._parseInt(r.subarray(2)),{d:a,l:o}=hc._parseInt(s);if(o.length)throw new e("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(t){const e=t=>8&Number.parseInt(t[0],16)?"00"+t:t,r=t=>{const e=t instanceof Va?bo(t.toUint8Array()):t.toString(16);return 1&e.length?"0"+e:e},i=e(r(t.s)),n=e(r(t.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},uc=Object.freeze(Va.new(0)),lc=Object.freeze(Va.new(1));Object.freeze(Va.new(2));const fc=Object.freeze(Va.new(3));function yc(t){const e=function(t){const e=ac(t);_o(e,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=e;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||!(r.beta instanceof Va)||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...e})}(t),{Fp:r}=e,i=e.toBytes||((t,e,i)=>{const n=e.toAffine();return Do(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=e.fromBytes||(t=>{const e=t.subarray(1);return{x:r.fromBytes(e.subarray(0,r.BYTES)),y:r.fromBytes(e.subarray(r.BYTES,2*r.BYTES))}});function s(t){const{a:i,b:n}=e,s=r.sqr(t),a=r.mul(s,t);return r.add(r.add(a,r.mul(t,i)),n)}if(!r.eql(r.sqr(e.Gy),s(e.Gx)))throw Error("bad generator point: equation left != right");function a(t){return t instanceof Va&&uc.lt(t)&&t.lt(e.n)}function o(t){if(!a(t))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(t){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=e;if(r&&!(t instanceof Va)){if(wo(t)&&(t=bo(t)),"string"!=typeof t||!r.includes(t.length))throw Error("Invalid key");t=t.padStart(2*i,"0")}let a;try{a=t instanceof Va?t:Io(Po("private key",t,i))}catch(e){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof t}`)}return n&&(a=Vo(a,s)),o(a),a}const h=new Map;function u(t){if(!(t instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(t,e,i){if(this.px=t,this.py=e,this.pz=i,null==t||!r.isValid(t))throw Error("x required");if(null==e||!r.isValid(e))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(t){const{x:e,y:i}=t||{};if(!t||!r.isValid(e)||!r.isValid(i))throw Error("invalid affine point");if(t instanceof l)throw Error("projective point not allowed");const n=t=>r.eql(t,r.ZERO);return n(e)&&n(i)?l.ZERO:new l(e,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(t){const e=r.invertBatch(t.map((t=>t.pz)));return t.map(((t,r)=>t.toAffine(e[r]))).map(l.fromAffine)}static fromHex(t){const e=l.fromAffine(n(Po("pointHex",t)));return e.assertValidity(),e}static fromPrivateKey(t){return l.BASE.multiply(c(t))}_setWindowSize(t){this._WINDOW_SIZE=t,h.delete(this)}assertValidity(){if(this.is0()){if(e.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:t,y:i}=this.toAffine();if(!r.isValid(t)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(t);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:t}=this.toAffine();if(r.isOdd)return!r.isOdd(t);throw Error("Field doesn't support isOdd")}equals(t){u(t);const{px:e,py:i,pz:n}=this,{px:s,py:a,pz:o}=t,c=r.eql(r.mul(e,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:t,b:i}=e,n=r.mul(i,fc),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,f=r.mul(s,s),y=r.mul(a,a),d=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(t,u),h=r.mul(n,d),h=r.add(c,h),c=r.sub(y,h),h=r.add(y,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),d=r.mul(t,d),p=r.sub(f,d),p=r.mul(t,p),p=r.add(p,u),u=r.add(f,f),f=r.add(u,f),f=r.add(f,d),f=r.mul(f,p),h=r.add(h,f),d=r.mul(a,o),d=r.add(d,d),f=r.mul(d,p),c=r.sub(c,f),u=r.mul(d,y),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(t){u(t);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=t;let h=r.ZERO,f=r.ZERO,y=r.ZERO;const d=e.a,p=r.mul(e.b,fc);let g=r.mul(i,a),m=r.mul(n,o),w=r.mul(s,c),A=r.add(i,n),b=r.add(a,o);A=r.mul(A,b),b=r.add(g,m),A=r.sub(A,b),b=r.add(i,s);let v=r.add(a,c);return b=r.mul(b,v),v=r.add(g,w),b=r.sub(b,v),v=r.add(n,s),h=r.add(o,c),v=r.mul(v,h),h=r.add(m,w),v=r.sub(v,h),y=r.mul(d,b),h=r.mul(p,w),y=r.add(h,y),h=r.sub(m,y),y=r.add(m,y),f=r.mul(h,y),m=r.add(g,g),m=r.add(m,g),w=r.mul(d,w),b=r.mul(p,b),m=r.add(m,w),w=r.sub(g,w),w=r.mul(d,w),b=r.add(b,w),g=r.mul(m,b),f=r.add(f,g),g=r.mul(v,b),h=r.mul(A,h),h=r.sub(h,g),g=r.mul(A,m),y=r.mul(v,y),y=r.add(y,g),new l(h,f,y)}subtract(t){return this.add(t.negate())}is0(){return this.equals(l.ZERO)}wNAF(t){return y.wNAFCached(this,h,t,(t=>{const e=r.invertBatch(t.map((t=>t.pz)));return t.map(((t,r)=>t.toAffine(e[r]))).map(l.fromAffine)}))}multiplyUnsafe(t){const i=l.ZERO;if(t.isZero())return i;if(o(t),t.isOne())return this;const{endo:n}=e;if(!n)return y.unsafeLadder(this,t);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(t),u=i,f=i,d=this;for(;a.gt(uc)||h.gt(uc);)a.isEven()||(u=u.add(d)),h.isEven()||(f=f.add(d)),d=d.double(),a=a.rightShift(lc),h=h.rightShift(lc);return s&&(u=u.negate()),c&&(f=f.negate()),f=new l(r.mul(f.px,n.beta),f.py,f.pz),u.add(f)}multiply(t){o(t);let i,n,s=t;const{endo:a}=e;if(a){const{k1neg:t,k1:e,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(e),{p:f,f:d}=this.wNAF(c);h=y.constTimeNegate(t,h),f=y.constTimeNegate(o,f),f=new l(r.mul(f.px,a.beta),f.py,f.pz),i=h.add(f),n=u.add(d)}else{const{p:t,f:e}=this.wNAF(s);i=t,n=e}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(t,e,r){const i=l.BASE,n=(t,e)=>e.isZero()||e.isOne()||!t.equals(i)?t.multiplyUnsafe(e):t.multiply(e),s=n(this,e).add(n(t,r));return s.is0()?void 0:s}toAffine(t){const{px:e,py:i,pz:n}=this,s=this.is0();null==t&&(t=s?r.ONE:r.inv(n));const a=r.mul(e,t),o=r.mul(i,t),c=r.mul(n,t);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:t,isTorsionFree:r}=e;if(t.isOne())return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:t,clearCofactor:r}=e;return t.isOne()?this:r?r(l,this):this.multiplyUnsafe(e.h)}toRawBytes(t=!0){return this.assertValidity(),i(l,this,t)}toHex(t=!0){return bo(this.toRawBytes(t))}}l.BASE=new l(e.Gx,e.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const f=e.nBitLength,y=sc(l,e.endo?Math.ceil(f/2):f);return{CURVE:e,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function dc(t){const e=function(t){const e=ac(t);return _o(e,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...e})}(t),{Fp:r,n:i}=e,n=r.BYTES+1,s=2*r.BYTES+1;function a(t){return Vo(t,i)}function o(t){return Yo(t,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=yc({...e,toBytes(t,e,i){const n=e.toAffine(),s=r.toBytes(n.x),a=Do;return i?a(Uint8Array.from([e.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(t){const e=t.length,i=t[0],a=t.subarray(1);if(e!==n||2!==i&&3!==i){if(e===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${e} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const t=Io(a);if(o=t,!uc.lt(o)||!o.lt(r.ORDER))throw Error("Point is not on curve");const e=u(t);let n=r.sqrt(e);return 1==(1&i)!==!n.isEven()&&(n=r.neg(n)),{x:t,y:n}}var o}}),f=t=>bo(Bo(t,e.nByteLength));function y(t){const e=i.rightShift(lc);return t.gt(e)}const d=(t,e,r)=>Io(t.slice(e,r));class p{constructor(t,e,r){this.r=t,this.s=e,this.recovery=r,this.assertValidity()}static fromCompact(t){const r=e.nByteLength;return t=Po("compactSignature",t,2*r),new p(d(t,0,r),d(t,r,2*r))}static fromDER(t){const{r:e,s:r}=hc.toSig(Po("DER",t));return new p(e,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(t){return new p(this.r,this.s,t)}recoverPublicKey(t){const{r:i,s:n,recovery:s}=this,h=A(Po("msgHash",t));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i.add(e.n):i;if(u.gte(r.ORDER))throw Error("recovery id 2 or 3 invalid");const l=0==(1&s)?"02":"03",y=c.fromHex(l+f(u)),d=o(u),p=a(h.negate().imul(d)),g=a(n.mul(d)),m=c.BASE.multiplyAndAddUnsafe(y,p,g);if(!m)throw Error("point at infinify");return m.assertValidity(),m}hasHighS(){return y(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(this.s.negate()),this.recovery):this}toDERRawBytes(){return So(this.toDERHex())}toDERHex(){return hc.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return So(this.toCompactHex())}toCompactHex(){return f(this.r)+f(this.s)}}const g={isValidPrivateKey(t){try{return h(t),!0}catch(t){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const t=rc(e.n);return function(t,e,r=!1){const i=t.length,n=ec(e),s=rc(e);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=Vo(r?Io(t):Co(t),e.dec()).inc();return r?Ko(a,n):Bo(a,n)}(e.randomBytes(t),e.n)},precompute:(t=8,e=c.BASE)=>(e._setWindowSize(t),e.multiply(Va.new(3)),e)};function m(t){const e=wo(t),r="string"==typeof t,i=(e||r)&&t.length;return e?i===n||i===s:r?i===2*n||i===2*s:t instanceof c}const w=e.bits2int||function(t){const r=Io(t),i=8*t.length-e.nBitLength;return i>0?r.rightShift(Va.new(i)):r},A=e.bits2int_modN||function(t){return a(w(t))},b=Uo(e.nBitLength);function v(t){if(!(t instanceof Va))throw Error("bigint expected");if(!uc.lte(t)||!t.lt(b))throw Error("bigint expected < 2^"+e.nBitLength);return Bo(t,e.nByteLength)}function E(t,i,n=k){if(["recovered","canonical"].some((t=>t in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=e;let{lowS:f,prehash:d,extraEntropy:g}=n;null==f&&(f=!0),t=Po("msgHash",t),d&&(t=Po("prehashed msgHash",s(t)));const m=A(t),b=h(i),E=[v(b),v(m)];if(null!=g){const t=!0===g?u(r.BYTES):g;E.push(Po("extraEntropy",t))}const S=Do(...E),I=m;return{seed:S,k2sig:function(t){const e=w(t);if(!l(e))return;const r=o(e),i=c.BASE.multiply(e).toAffine(),n=a(i.x);if(n.isZero())return;const s=a(r.mul(a(I.add(n.mul(b)))));if(s.isZero())return;let h=(i.x.equal(n)?0:2)|i.y.getBit(0),u=s;return f&&y(s)&&(u=function(t){return y(t)?a(t.negate()):t}(s),h^=1),new p(n,u,h)}}}const k={lowS:e.lowS,prehash:!1},S={lowS:e.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:e,getPublicKey:function(t,e=!0){return c.fromPrivateKey(t).toRawBytes(e)},getSharedSecret:function(t,e,r=!0){if(m(t))throw Error("first arg must be private key");if(!m(e))throw Error("second arg must be public key");return c.fromHex(e).multiply(h(t)).toRawBytes(r)},sign:function(t,r,i=k){const{seed:n,k2sig:s}=E(t,r,i),a=e;return Qo(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(t,r,i,n=S){const s=t;if(r=Po("msgHash",r),i=Po("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,f;try{if("string"==typeof s||wo(s))try{l=p.fromDER(s)}catch(t){if(!(t instanceof hc.Err))throw t;l=p.fromCompact(s)}else{if(!("object"==typeof s&&s.r instanceof Va&&s.s instanceof Va))throw Error("PARSE");{const{r:t,s:e}=s;l=new p(t,e)}}f=c.fromHex(i)}catch(t){if("PARSE"===t.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=e.hash(r));const{r:y,s:d}=l,g=A(r),m=o(d),w=a(g.mul(m)),b=a(y.mul(m)),v=c.BASE.multiplyAndAddUnsafe(f,w,b)?.toAffine();return!!v&&a(v.x).equal(y)},ProjectivePoint:c,Signature:p,utils:g}}
|
|
10
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function pc(t){return{hash:t,hmac:(e,...r)=>go(t,e,uo(...r)),randomBytes:yo}}function gc(t,e){const r=e=>dc({...t,...pc(e)});return Object.freeze({...r(e),create:r})}Object.freeze(Va.new(4));class mc extends lo{constructor(t,e,r,i){super(),this.blockLen=t,this.outputLen=e,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=ao(this.buffer)}update(t){ro(this);const{view:e,buffer:r,blockLen:i}=this,n=(t=ho(t)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(t.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(e,0),this.pos=0);else{const e=ao(t);for(;i<=n-s;s+=i)this.process(e,s)}}return this.length+=t.length,this.roundClean(),this}digestInto(t){ro(this),io(t,this),this.finished=!0;const{buffer:e,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;e[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let t=s;t<i;t++)e[t]=0;!function(t,e,r,i){if("function"==typeof t.setBigUint64)return t.setBigUint64(e,BigInt(r.toString()),i);const n=Object.freeze(Va.new(32)),s=Object.freeze(Va.new(4294967295)),a=r.rightShift(n).bitwiseAnd(s).toNumber(),o=r.bitwiseAnd(s).toNumber(),c=i?4:0,h=i?0:4;t.setUint32(e+c,a,i),t.setUint32(e+h,o,i)}(r,i-8,Va.new(8*this.length),n),this.process(r,0);const a=ao(t),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let t=0;t<c;t++)a.setUint32(4*t,h[t],n)}digest(){const{buffer:t,outputLen:e}=this;this.digestInto(t);const r=t.slice(0,e);return this.destroy(),r}_cloneInto(t){t||(t=new this.constructor),t.set(...this.get());const{blockLen:e,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return t.length=i,t.pos=a,t.finished=n,t.destroyed=s,i%e&&t.buffer.set(r),t}}const wc=(t,e,r)=>t&e^t&r^e&r,Ac=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),bc=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),vc=/* @__PURE__ */new Uint32Array(64);class Ec extends mc{constructor(){super(64,32,8,!1),this.A=0|bc[0],this.B=0|bc[1],this.C=0|bc[2],this.D=0|bc[3],this.E=0|bc[4],this.F=0|bc[5],this.G=0|bc[6],this.H=0|bc[7]}get(){const{A:t,B:e,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[t,e,r,i,n,s,a,o]}set(t,e,r,i,n,s,a,o){this.A=0|t,this.B=0|e,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(t,e){for(let r=0;r<16;r++,e+=4)vc[r]=t.getUint32(e,!1);for(let t=16;t<64;t++){const e=vc[t-15],r=vc[t-2],i=oo(e,7)^oo(e,18)^e>>>3,n=oo(r,17)^oo(r,19)^r>>>10;vc[t]=n+vc[t-7]+i+vc[t-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let t=0;t<64;t++){const e=h+(oo(a,6)^oo(a,11)^oo(a,25))+((u=a)&o^~u&c)+Ac[t]+vc[t]|0,l=(oo(r,2)^oo(r,13)^oo(r,22))+wc(r,i,n)|0;h=c,c=o,o=a,a=s+e|0,s=n,n=i,i=r,r=e+l|0}var u;r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){vc.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class kc extends Ec{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Sc=/* @__PURE__ */fo((()=>new Ec)),Ic=/* @__PURE__ */fo((()=>new kc)),Cc=tc(Va.new("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),Bc=gc({a:Cc.create(Va.new("-3")),b:Va.new("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Cc,n:Va.new("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:Va.new("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:Va.new("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:Va.new(1),lowS:!1},Sc),Kc=Object.freeze(Va.new(2**32-1)),Pc=Object.freeze(Va.new(32));function Dc(t,e=!1){return e?{h:t.bitwiseAnd(Kc).toNumber(),l:t.rightShift(Pc).bitwiseAnd(Kc).toNumber()}:{h:0|t.rightShift(Pc).bitwiseAnd(Kc).toNumber(),l:0|t.bitwiseAnd(Kc).toNumber()}}function Uc(t,e=!1){let r=new Uint32Array(t.length),i=new Uint32Array(t.length);for(let n=0;n<t.length;n++){const{h:s,l:a}=Dc(t[n],e);[r[n],i[n]]=[s,a]}return[r,i]}const Mc=(t,e,r)=>t<<r|e>>>32-r,xc=(t,e,r)=>e<<r|t>>>32-r,Qc=(t,e,r)=>e<<r-32|t>>>64-r,Rc=(t,e,r)=>t<<r-32|e>>>64-r;const _c={fromBig:Dc,split:Uc,toBig:(t,e)=>Va.new(t>>>0).ileftShift(Pc).ibitwiseOr(Va.new(e>>>0)),shrSH:(t,e,r)=>t>>>r,shrSL:(t,e,r)=>t<<32-r|e>>>r,rotrSH:(t,e,r)=>t>>>r|e<<32-r,rotrSL:(t,e,r)=>t<<32-r|e>>>r,rotrBH:(t,e,r)=>t<<64-r|e>>>r-32,rotrBL:(t,e,r)=>t>>>r-32|e<<64-r,rotr32H:(t,e)=>e,rotr32L:(t,e)=>t,rotlSH:Mc,rotlSL:xc,rotlBH:Qc,rotlBL:Rc,add:function(t,e,r,i){const n=(e>>>0)+(i>>>0);return{h:t+r+(n/2**32|0)|0,l:0|n}},add3L:(t,e,r)=>(t>>>0)+(e>>>0)+(r>>>0),add3H:(t,e,r,i)=>e+r+i+(t/2**32|0)|0,add4L:(t,e,r,i)=>(t>>>0)+(e>>>0)+(r>>>0)+(i>>>0),add4H:(t,e,r,i,n)=>e+r+i+n+(t/2**32|0)|0,add5H:(t,e,r,i,n,s)=>e+r+i+n+s+(t/2**32|0)|0,add5L:(t,e,r,i,n)=>(t>>>0)+(e>>>0)+(r>>>0)+(i>>>0)+(n>>>0)},[Tc,Lc]=/* @__PURE__ */(()=>_c.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((t=>Va.new(t)))))(),Nc=/* @__PURE__ */new Uint32Array(80),Oc=/* @__PURE__ */new Uint32Array(80);class Fc extends mc{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:t,Al:e,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:f,Gl:y,Hh:d,Hl:p}=this;return[t,e,r,i,n,s,a,o,c,h,u,l,f,y,d,p]}set(t,e,r,i,n,s,a,o,c,h,u,l,f,y,d,p){this.Ah=0|t,this.Al=0|e,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|f,this.Gl=0|y,this.Hh=0|d,this.Hl=0|p}process(t,e){for(let r=0;r<16;r++,e+=4)Nc[r]=t.getUint32(e),Oc[r]=t.getUint32(e+=4);for(let t=16;t<80;t++){const e=0|Nc[t-15],r=0|Oc[t-15],i=_c.rotrSH(e,r,1)^_c.rotrSH(e,r,8)^_c.shrSH(e,r,7),n=_c.rotrSL(e,r,1)^_c.rotrSL(e,r,8)^_c.shrSL(e,r,7),s=0|Nc[t-2],a=0|Oc[t-2],o=_c.rotrSH(s,a,19)^_c.rotrBH(s,a,61)^_c.shrSH(s,a,6),c=_c.rotrSL(s,a,19)^_c.rotrBL(s,a,61)^_c.shrSL(s,a,6),h=_c.add4L(n,c,Oc[t-7],Oc[t-16]),u=_c.add4H(h,i,o,Nc[t-7],Nc[t-16]);Nc[t]=0|u,Oc[t]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:f,Fl:y,Gh:d,Gl:p,Hh:g,Hl:m}=this;for(let t=0;t<80;t++){const e=_c.rotrSH(u,l,14)^_c.rotrSH(u,l,18)^_c.rotrBH(u,l,41),w=_c.rotrSL(u,l,14)^_c.rotrSL(u,l,18)^_c.rotrBL(u,l,41),A=u&f^~u&d,b=l&y^~l&p,v=_c.add5L(m,w,b,Lc[t],Oc[t]),E=_c.add5H(v,g,e,A,Tc[t],Nc[t]),k=0|v,S=_c.rotrSH(r,i,28)^_c.rotrBH(r,i,34)^_c.rotrBH(r,i,39),I=_c.rotrSL(r,i,28)^_c.rotrBL(r,i,34)^_c.rotrBL(r,i,39),C=r&n^r&a^n&a,B=i&s^i&o^s&o;g=0|d,m=0|p,d=0|f,p=0|y,f=0|u,y=0|l,({h:u,l}=_c.add(0|c,0|h,0|E,0|k)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=_c.add3L(k,I,B);r=_c.add3H(K,E,S,C),i=0|K}({h:r,l:i}=_c.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=_c.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=_c.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=_c.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=_c.add(0|this.Eh,0|this.El,0|u,0|l)),({h:f,l:y}=_c.add(0|this.Fh,0|this.Fl,0|f,0|y)),({h:d,l:p}=_c.add(0|this.Gh,0|this.Gl,0|d,0|p)),({h:g,l:m}=_c.add(0|this.Hh,0|this.Hl,0|g,0|m)),this.set(r,i,n,s,a,o,c,h,u,l,f,y,d,p,g,m)}roundClean(){Nc.fill(0),Oc.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Hc extends Fc{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const zc=/* @__PURE__ */fo((()=>new Fc)),Gc=/* @__PURE__ */fo((()=>new Hc)),qc=tc(Va.new("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),jc=gc({a:qc.create(Va.new("-3")),b:Va.new("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:qc,n:Va.new("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:Va.new("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:Va.new("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:Va.new(1),lowS:!1},Gc),Vc=tc(Va.new("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),Zc={a:Vc.create(Va.new("-3")),b:Va.new("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:Vc,n:Va.new("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:Va.new("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:Va.new("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:Va.new(1)},Jc=gc({a:Zc.a,b:Zc.b,Fp:Vc,n:Zc.n,Gx:Zc.Gx,Gy:Zc.Gy,h:Zc.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},zc),Yc=tc(Va.new("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),Wc=gc({a:Yc.create(Va.new("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:Va.new("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:Yc,n:Va.new("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:Va.new("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:Va.new("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:Va.new(1),lowS:!1},Sc),$c=tc(Va.new("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),Xc=gc({a:$c.create(Va.new("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:Va.new("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:$c,n:Va.new("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:Va.new("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:Va.new("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:Va.new(1),lowS:!1},Gc),th=tc(Va.new("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),eh=gc({a:th.create(Va.new("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:Va.new("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:th,n:Va.new("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:Va.new("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:Va.new("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:Va.new(1),lowS:!1},zc),[rh,ih,nh]=[[],[],[]],sh=/* @__PURE__ */Object.freeze(Va.new(0)),ah=/* @__PURE__ */Object.freeze(Va.new(1)),oh=/* @__PURE__ */Object.freeze(Va.new(2)),ch=/* @__PURE__ */Object.freeze(Va.new(7)),hh=/* @__PURE__ */Object.freeze(Va.new(256)),uh=/* @__PURE__ */Object.freeze(Va.new(113));for(let t=0,e=ah,r=1,i=0;t<24;t++){[r,i]=[i,(2*r+3*i)%5],rh.push(2*(5*i+r)),ih.push((t+1)*(t+2)/2%64);const n=sh.clone();for(let t=0;t<7;t++)e=e.leftShift(ah).ixor(e.rightShift(ch).imul(uh)).imod(hh),e.bitwiseAnd(oh).isZero()||n.ixor(ah.leftShift(ah.leftShift(/* @__PURE__ */Va.new(t)).idec()));nh.push(n)}const[lh,fh]=/* @__PURE__ */Uc(nh,!0),yh=(t,e,r)=>r>32?Qc(t,e,r):Mc(t,e,r),dh=(t,e,r)=>r>32?Rc(t,e,r):xc(t,e,r);class ph extends lo{constructor(t,e,r,i=!1,n=24){if(super(),this.blockLen=t,this.suffix=e,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,to(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){!function(t,e=24){const r=new Uint32Array(10);for(let i=24-e;i<24;i++){for(let e=0;e<10;e++)r[e]=t[e]^t[e+10]^t[e+20]^t[e+30]^t[e+40];for(let e=0;e<10;e+=2){const i=(e+8)%10,n=(e+2)%10,s=r[n],a=r[n+1],o=yh(s,a,1)^r[i],c=dh(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)t[e+r]^=o,t[e+r+1]^=c}let e=t[2],n=t[3];for(let r=0;r<24;r++){const i=ih[r],s=yh(e,n,i),a=dh(e,n,i),o=rh[r];e=t[o],n=t[o+1],t[o]=s,t[o+1]=a}for(let e=0;e<50;e+=10){for(let i=0;i<10;i++)r[i]=t[e+i];for(let i=0;i<10;i++)t[e+i]^=~r[(i+2)%10]&r[(i+4)%10]}t[0]^=lh[i],t[1]^=fh[i]}r.fill(0)}(this.state32,this.rounds),this.posOut=0,this.pos=0}update(t){ro(this);const{blockLen:e,state:r}=this,i=(t=ho(t)).length;for(let n=0;n<i;){const s=Math.min(e-this.pos,i-n);for(let e=0;e<s;e++)r[this.pos++]^=t[n++];this.pos===e&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:t,suffix:e,pos:r,blockLen:i}=this;t[r]^=e,0!=(128&e)&&r===i-1&&this.keccak(),t[i-1]^=128,this.keccak()}writeInto(t){ro(this,!1),eo(t),this.finish();const e=this.state,{blockLen:r}=this;for(let i=0,n=t.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);t.set(e.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return t}xofInto(t){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(t)}xof(t){return to(t),this.xofInto(new Uint8Array(t))}digestInto(t){if(io(t,this),this.finished)throw Error("digest() was already called");return this.writeInto(t),this.destroy(),t}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(t){const{blockLen:e,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return t||(t=new ph(e,r,i,s,n)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=n,t.suffix=r,t.outputLen=i,t.enableXOF=s,t.destroyed=this.destroyed,t}}const gh=(t,e,r)=>fo((()=>new ph(e,t,r))),mh=/* @__PURE__ */gh(6,136,32),wh=/* @__PURE__ */gh(6,72,64),Ah=/* @__PURE__ */((t,e,r)=>function(t){const e=(e,r)=>t(r).update(ho(e)).digest(),r=t({});return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=e=>t(e),e}(((i={})=>new ph(e,t,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),bh=Object.freeze(Va.new(0)),vh=Object.freeze(Va.new(1)),Eh=Object.freeze(Va.new(2)),kh=Object.freeze(Va.new(3)),Sh=Object.freeze(Va.new(8)),Ih={zip215:!0};function Ch(t){const e=function(t){const e=ac(t);return _o(t,{hash:"function",a:"BigInteger",d:"BigInteger",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...e})}(t),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=e,h=Eh.leftShift(Va.new(8*o).idec()),u=r.create,l=e.uvRatio||((t,e)=>{try{return{isValid:!0,value:r.sqrt(t.mul(r.inv(e)))}}catch(t){return{isValid:!1,value:bh}}}),f=e.adjustScalarBytes||(t=>t),y=e.domain||((t,e,r)=>{if(e.length||r)throw Error("Contexts/pre-hash are not supported");return t}),d=t=>t instanceof Va&&t.gt(bh),p=(t,e)=>d(t)&&d(e)&&t.lt(e),g=t=>t.isZero()||p(t,h);function m(t,e){if(p(t,e))return t;throw Error(`Expected valid scalar < ${e}, got ${typeof t} ${t}`)}function w(t){return t.isZero()?t:m(t,i)}const A=new Map;function b(t){if(!(t instanceof v))throw Error("ExtendedPoint expected")}class v{constructor(t,e,r,i){if(this.ex=t,this.ey=e,this.ez=r,this.et=i,!g(t))throw Error("x required");if(!g(e))throw Error("y required");if(!g(r))throw Error("z required");if(!g(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(t){if(t instanceof v)throw Error("extended point not allowed");const{x:e,y:r}=t||{};if(!g(e)||!g(r))throw Error("invalid affine point");return new v(e,r,vh,u(e.mul(r)))}static normalizeZ(t){const e=r.invertBatch(t.map((t=>t.ez)));return t.map(((t,r)=>t.toAffine(e[r]))).map(v.fromAffine)}_setWindowSize(t){this._WINDOW_SIZE=t,A.delete(this)}assertValidity(){const{a:t,d:r}=e;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i.mul(i)),c=u(n.mul(n)),h=u(s.mul(s)),l=u(h.mul(h)),f=u(o.mul(t)),y=u(h.mul(u(f.add(c)))),d=u(l.add(u(r.mul(u(o.mul(c))))));if(!y.equal(d))throw Error("bad point: equation left != right (1)");const p=u(i.mul(n)),g=u(s.mul(a));if(!p.equal(g))throw Error("bad point: equation left != right (2)")}equals(t){b(t);const{ex:e,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=t,o=u(e.mul(a)),c=u(n.mul(i)),h=u(r.mul(a)),l=u(s.mul(i));return o.equal(c)&&h.equal(l)}is0(){return this.equals(v.ZERO)}negate(){return new v(u(this.ex.negate()),this.ey,this.ez,u(this.et.negate()))}double(){const{a:t}=e,{ex:r,ey:i,ez:n}=this,s=u(r.mul(r)),a=u(i.mul(i)),o=u(Eh.mul(u(n.mul(n)))),c=u(t.mul(s)),h=r.add(i),l=u(u(h.mul(h)).sub(s).isub(a)),f=c.add(a),y=f.sub(o),d=c.sub(a),p=u(l.mul(y)),g=u(f.mul(d)),m=u(l.mul(d)),w=u(y.mul(f));return new v(p,g,w,m)}add(t){b(t);const{a:r,d:i}=e,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:f}=t;if(r.equal(Va.new(-1))){const t=u(s.sub(n).imul(h.add(c))),e=u(s.add(n).imul(h.sub(c))),r=u(e.sub(t));if(r.isZero())return this.double();const i=u(a.mul(Eh).imul(f)),y=u(o.mul(Eh).imul(l)),d=y.add(i),p=e.add(t),g=y.sub(i),m=u(d.mul(r)),w=u(p.mul(g)),A=u(d.mul(g)),b=u(r.mul(p));return new v(m,w,b,A)}const y=u(n.mul(c)),d=u(s.mul(h)),p=u(o.mul(i).imul(f)),g=u(a.mul(l)),m=u(n.add(s).imul(c.add(h)).isub(y).isub(d)),w=g.sub(p),A=g.add(p),E=u(d.sub(r.mul(y))),k=u(m.mul(w)),S=u(A.mul(E)),I=u(m.mul(E)),C=u(w.mul(A));return new v(k,S,C,I)}subtract(t){return this.add(t.negate())}wNAF(t){return S.wNAFCached(this,A,t,v.normalizeZ)}multiply(t){const{p:e,f:r}=this.wNAF(m(t,i));return v.normalizeZ([e,r])[0]}multiplyUnsafe(t){let e=w(t);return e.isZero()?k:this.equals(k)||e.isOne()?this:this.equals(E)?this.wNAF(e).p:S.unsafeLadder(this,e)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return S.unsafeLadder(this,i).is0()}toAffine(t){const{ex:e,ey:i,ez:n}=this,s=this.is0();null==t&&(t=s?Sh:r.inv(n));const a=u(e.mul(t)),o=u(i.mul(t)),c=u(n.mul(t));if(s)return{x:bh.clone(),y:vh.clone()};if(!c.isOne())throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:t}=e;return t.isOne()?this:this.multiplyUnsafe(t)}static fromHex(t,i=!1){const{d:n,a:s}=e,a=r.BYTES,o=(t=Po("pointHex",t,a)).slice(),c=t[a-1];o[a-1]=-129&c;const f=Co(o);f.isZero()||m(f,i?h:r.ORDER);const y=u(f.mul(f)),d=u(y.dec()),p=u(n.mul(y).isub(s));let{isValid:g,value:w}=l(d,p);if(!g)throw Error("Point.fromHex: invalid y coordinate");const A=!w.isEven(),b=0!=(128&c);if(!i&&w.isZero()&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==A&&(w=u(w.negate())),v.fromAffine({x:w,y:f})}static fromPrivateKey(t){return B(t).point}toRawBytes(){const{x:t,y:e}=this.toAffine(),i=e.toUint8Array("le",r.BYTES);return i[i.length-1]|=t.isEven()?0:128,i}toHex(){return bo(this.toRawBytes())}}v.BASE=new v(e.Gx,e.Gy,vh,u(e.Gx.mul(e.Gy))),v.ZERO=new v(bh,vh,vh,bh);const{BASE:E,ZERO:k}=v,S=sc(v,8*o);function I(t){return Vo(t,i)}function C(t){return I(Co(t))}function B(t){const e=o;t=Po("private key",t,e);const r=Po("hashed private key",s(t),2*e),i=f(r.slice(0,e)),n=r.slice(e,2*e),a=C(i),c=E.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(t=new Uint8Array,...e){const r=Do(...e);return C(s(y(r,Po("context",t),!!n)))}const P=Ih;E._setWindowSize(8);return{CURVE:e,getPublicKey:function(t){return B(t).pointBytes},sign:function(t,e,i={}){t=Po("message",t),n&&(t=n(t));const{prefix:s,scalar:a,pointBytes:c}=B(e),h=K(i.context,s,t),u=E.multiply(h).toRawBytes(),l=K(i.context,u,c,t),f=I(h.add(l.mul(a)));return w(f),Po("result",Do(u,f.toUint8Array("le",r.BYTES)),2*o)},verify:function(t,e,i,s=P){const{context:a,zip215:o}=s,c=r.BYTES;t=Po("signature",t,2*c),e=Po("message",e),n&&(e=n(e));const h=Co(t.slice(c,2*c));let u,l,f;try{u=v.fromHex(i,o),l=v.fromHex(t.slice(0,c),o),f=E.multiplyUnsafe(h)}catch(t){return!1}if(!o&&u.isSmallOrder())return!1;const y=K(a,l.toRawBytes(),u.toRawBytes(),e);return l.add(u.multiplyUnsafe(y)).subtract(f).clearCofactor().equals(v.ZERO)},ExtendedPoint:v,utils:{getExtendedPublicKey:B,randomPrivateKey:()=>a(r.BYTES),precompute:(t=8,e=v.BASE)=>(e._setWindowSize(t),e.multiply(kh),e)}}}
|
|
11
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Bh=Object.freeze(Va.new(0)),Kh=Object.freeze(Va.new(1)),Ph=Object.freeze(Va.new(2));function Dh(t){const e=(_o(r=t,{a:"BigInteger"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"BigInteger"}),Object.freeze({...r}));var r;const{P:i}=e,n=t=>Vo(t,i),s=e.montgomeryBits,a=Math.ceil(s/8),o=e.nByteLength,c=e.adjustScalarBytes||(t=>t),h=e.powPminus2||(t=>Zo(t,i.sub(Ph),i));function u(t,e,r){const i=n(t.mul(e.sub(r)));return[e=n(e.sub(i)),r=n(r.add(i))]}function l(t){if(t instanceof Va&&!t.isNegative()&&t.lt(i))return t;throw Error("Expected valid scalar 0 < scalar < CURVE.P")}const f=e.a.sub(Ph).irightShift(Ph);function y(t){return Ko(n(t),a)}function d(t,e){const r=function(t){const e=Po("u coordinate",t,a);return 32===o&&(e[31]&=127),Co(e)}(e),i=function(t){const e=Po("scalar",t),r=e.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return Co(c(e))}(t),d=function(t,e){const r=l(t),i=l(e),a=r;let o,c=Kh,y=Bh,d=r,p=Kh,g=Bh.clone();for(let t=Va.new(s-1);!t.isNegative();t.idec()){const e=Va.new(i.rightShift(t).getBit(0));g.ixor(e),o=u(g,c,d),c=o[0],d=o[1],o=u(g,y,p),y=o[0],p=o[1],g=e;const r=c.add(y),s=n(r.mul(r)),h=c.sub(y),l=n(h.mul(h)),m=s.sub(l),w=d.add(p),A=d.sub(p),b=n(A.mul(r)),v=n(w.mul(h)),E=b.add(v),k=b.sub(v);d=n(E.mul(E)),p=n(a.mul(n(k.mul(k)))),c=n(s.mul(l)),y=n(m.mul(s.add(n(f.mul(m)))))}o=u(g,c,d),c=o[0],d=o[1],o=u(g,y,p),y=o[0],p=o[1];const m=h(y);return n(c.mul(m))}(r,i);if(d.isZero())throw Error("Invalid private or public key received");return y(d)}const p=y(e.Gu);function g(t){return d(t,p)}return{scalarMult:d,scalarMultBase:g,getSharedSecret:(t,e)=>d(t,e),getPublicKey:t=>g(t),utils:{randomPrivateKey:()=>e.randomBytes(e.nByteLength)},GuBytes:p}}
|
|
12
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Uh=fo((()=>Ah.create({dkLen:114}))),Mh=(fo((()=>Ah.create({dkLen:64}))),Va.new("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439")),xh=Va.new(1),Qh=Va.new(2),Rh=Va.new(3),_h=Va.new(11),Th=Va.new(22),Lh=Va.new(44),Nh=Va.new(88),Oh=Va.new(223);function Fh(t){const e=Mh,r=t.modExp(Rh,e),i=r.mul(r).imul(t).imod(e),n=Jo(i,Rh,e).imul(i).imod(e),s=Jo(n,Rh,e).imul(i).imod(e),a=Jo(s,Qh,e).imul(r).imod(e),o=Jo(a,_h,e).imul(a).imod(e),c=Jo(o,Th,e).imul(o).imod(e),h=Jo(c,Lh,e).imul(c).imod(e),u=Jo(h,Nh,e).imul(h).imod(e),l=Jo(u,Lh,e).imul(c).imod(e),f=Jo(l,Qh,e).imul(r).imod(e),y=Jo(f,xh,e).imul(t).imod(e);return Jo(y,Oh,e).imul(f).imod(e)}function Hh(t){return t[0]&=252,t[55]|=128,t[56]=0,t}const zh=tc(Mh,456,!0),Gh={a:Va.new(1),d:Va.new("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:zh,n:Va.new("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:Va.new(4),Gx:Va.new("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:Va.new("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Uh,randomBytes:yo,adjustScalarBytes:Hh,domain:(t,e,r)=>{if(e.length>255)throw Error("Context is too big: "+e.length);return uo(co("SigEd448"),new Uint8Array([r?1:0,e.length]),e,t)},uvRatio:function(t,e){const r=Mh,i=Vo(t.mul(t).imul(e),r),n=Vo(i.mul(t),r),s=Fh(Vo(n.mul(i).imul(e),r)),a=Vo(n.mul(s),r),o=Vo(a.mul(a),r);return{isValid:Vo(o.mul(e),r).equal(t),value:a}}},qh=/* @__PURE__ */Ch(Gh),jh=/* @__PURE__ */(()=>Dh({a:Va.new(156326),montgomeryBits:448,nByteLength:56,P:Mh,Gu:Va.new(5),powPminus2:t=>{const e=Mh;return Vo(Jo(Fh(t),Va.new(2),e).mul(t),e)},adjustScalarBytes:Hh,randomBytes:yo}))();Object.freeze(Va.new(4)),zh.ORDER.sub(Rh).irightShift(Qh),Va.new(156326),Va.new("39082"),Va.new("78163"),Va.new("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),Va.new("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716"),Va.new("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
|
|
13
13
|
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
|
|
14
|
-
const vu=Object.freeze(ko.new("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f")),Eu=Object.freeze(ko.new("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"));Object.freeze(ko.new(0));const ku=Object.freeze(ko.new(1)),Su=Object.freeze(ko.new(2)),Iu=(e,t)=>e.add(t.rightShift(ku)).idiv(t);const Bu=Kc(vu,void 0,void 0,{sqrt:function(e){const t=vu,r=ko.new(3),i=ko.new(6),n=ko.new(11),s=ko.new(22),a=ko.new(23),o=ko.new(44),c=ko.new(88),h=e.mul(e).imul(e).imod(t),u=h.mul(h).imul(e).imod(t),l=kc(u,r,t).imul(u).imod(t),f=kc(l,r,t).imul(u).imod(t),y=kc(f,Su,t).imul(h).imod(t),d=kc(y,n,t).imul(y).imod(t),p=kc(d,s,t).imul(d).imod(t),g=kc(p,o,t).imul(p).imod(t),m=kc(g,c,t).imul(g).imod(t),w=kc(m,o,t).imul(p).imod(t),A=kc(w,r,t).imul(u).imod(t),b=kc(A,a,t).imul(d).imod(t),v=kc(b,i,t).imul(h).imod(t),E=kc(v,Su,t);if(!Bu.eql(Bu.sqr(E),e))throw Error("Cannot find square root");return E}}),Cu=Gc({a:ko.new(0),b:ko.new(7),Fp:Bu,n:Eu,Gx:ko.new("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:ko.new("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:ko.new(1),lowS:!0,endo:{beta:ko.new("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{const t=Eu,r=ko.new("0x3086d221a7d46bcde86c90e49284eb15"),i=ku.negate().imul(ko.new("0xe4437ed6010e88286f547fa90abfe4c3")),n=ko.new("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=ko.new("0x100000000000000000000000000000000"),o=Iu(s.mul(e),t),c=Iu(i.negate().imul(e),t);let h=vc(e.sub(o.mul(r)).sub(c.mul(n)),t),u=vc(o.negate().mul(i).isub(c.mul(s)),t);const l=h.gt(a),f=u.gt(a);if(l&&(h=t.sub(h)),f&&(u=t.sub(u)),h.gt(a)||u.gt(a))throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:l,k1:h,k2neg:f,k2:u}}}},$c);Cu.ProjectivePoint;const Ku=new Map(Object.entries({p256:th,p384:bh,p521:kh,brainpoolP256r1:Ih,brainpoolP384r1:Ch,brainpoolP512r1:Uh,secp256k1:Cu,x448:bu,ed448:Au}));var Uu=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:Ku});const Pu=(e,t)=>e<<t|e>>>32-t>>>0,Du=(e,t,r)=>e&t^e&r^t&r,Mu=new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),xu=new Uint32Array(80);class Qu extends qc{constructor(){super(64,20,8,!1),this.A=0|Mu[0],this.B=0|Mu[1],this.C=0|Mu[2],this.D=0|Mu[3],this.E=0|Mu[4]}get(){const{A:e,B:t,C:r,D:i,E:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)xu[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)xu[e]=Pu(xu[e-3]^xu[e-8]^xu[e-14]^xu[e-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let e=0;e<80;e++){let t,c;e<20?(t=(o=i)&n^~o&s,c=1518500249):e<40?(t=i^n^s,c=1859775393):e<60?(t=Du(i,n,s),c=2400959708):(t=i^n^s,c=3395469782);const h=Pu(r,5)+t+a+c+xu[e]|0;a=s,s=n,n=Pu(i,30),i=r,r=h}var o;r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){xu.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Ru=zo((()=>new Qu)),_u=new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Tu=new Uint8Array(Array(16).fill(0).map(((e,t)=>t))),Lu=Tu.map((e=>(9*e+5)%16));let Nu=[Tu],Ou=[Lu];for(let e=0;e<4;e++)for(let t of[Nu,Ou])t.push(t[e].map((e=>_u[e])));const Fu=[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>new Uint8Array(e))),Hu=Nu.map(((e,t)=>e.map((e=>Fu[t][e])))),zu=Ou.map(((e,t)=>e.map((e=>Fu[t][e])))),Gu=new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),qu=new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]),ju=(e,t)=>e<<t|e>>>32-t;function Vu(e,t,r,i){return 0===e?t^r^i:1===e?t&r|~t&i:2===e?(t|~r)^i:3===e?t&i|r&~i:t^(r|~i)}const Zu=new Uint32Array(16);class Yu extends qc{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:i,h4:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Zu[r]=e.getUint32(t,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let e=0;e<5;e++){const t=4-e,f=Gu[e],y=qu[e],d=Nu[e],p=Ou[e],g=Hu[e],m=zu[e];for(let t=0;t<16;t++){const i=ju(r+Vu(e,n,a,c)+Zu[d[t]]+f,g[t])+u|0;r=u,u=c,c=0|ju(a,10),a=n,n=i}for(let e=0;e<16;e++){const r=ju(i+Vu(t,s,o,h)+Zu[p[e]]+y,m[e])+l|0;i=l,l=h,h=0|ju(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){Zu.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const Ju=new Map(Object.entries({sha1:Ru,sha224:Xc,sha256:$c,sha384:wh,sha512:mh,sha3_256:qh,sha3_512:jh,ripemd160:zo((()=>new Yu))}));var Wu=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Ju});function $u(e,t,r,i){e[t]+=r[i],e[t+1]+=r[i+1]+(e[t]<r[i])}function Xu(e,t){e[0]+=t,e[1]+=e[0]<t}function el(e,t,r,i,n,s,a,o){$u(e,r,e,i),$u(e,r,t,a);let c=e[s]^e[r],h=e[s+1]^e[r+1];e[s]=h,e[s+1]=c,$u(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=c>>>24^h<<8,e[i+1]=h>>>24^c<<8,$u(e,r,e,i),$u(e,r,t,o),c=e[s]^e[r],h=e[s+1]^e[r+1],e[s]=c>>>16^h<<16,e[s+1]=h>>>16^c<<16,$u(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=h>>>31^c<<1,e[i+1]=c>>>31^h<<1}const tl=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),rl=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function il(e,t){const r=new Uint32Array(32),i=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=tl[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const n=t?4294967295:0;r[28]^=n,r[29]^=n;for(let e=0;e<12;e++){const t=e<<4;el(r,i,0,8,16,24,rl[t+0],rl[t+1]),el(r,i,2,10,18,26,rl[t+2],rl[t+3]),el(r,i,4,12,20,28,rl[t+4],rl[t+5]),el(r,i,6,14,22,30,rl[t+6],rl[t+7]),el(r,i,0,10,20,30,rl[t+8],rl[t+9]),el(r,i,2,12,22,24,rl[t+10],rl[t+11]),el(r,i,4,14,16,26,rl[t+12],rl[t+13]),el(r,i,6,8,18,28,rl[t+14],rl[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class nl{constructor(e,t,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(ul),h:new Uint32Array(al/4),t0:new Uint32Array(2),c:0,outlen:e},n[0]=e,t&&(n[1]=t.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=tl[e]^s[e];if(t){const e=new Uint8Array(ul);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===ul&&(Xu(this.S.t0,this.S.c),il(this.S,!1),this.S.c=0);let r=ul-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const i=Math.min(r,e.length-t);this.S.c+=i,t+=i}return this}digest(e){Xu(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=ul,il(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function sl(e,t,r,i){if(e>al)throw Error(`outlen must be at most ${al} (given: ${e})`);if(t){if(!(t instanceof Uint8Array))throw Error("key must be Uint8Array or Buffer");if(t.length>ol)throw Error(`key size must be at most ${ol} (given: ${t.length})`)}if(r){if(!(r instanceof Uint8Array))throw Error("salt must be Uint8Array or Buffer");if(r.length!==cl)throw Error(`salt must be exactly ${cl} (given: ${r.length}`)}if(i){if(!(i instanceof Uint8Array))throw Error("personal must be Uint8Array or Buffer");if(i.length!==hl)throw Error(`salt must be exactly ${hl} (given: ${i.length}`)}return new nl(e,t,r,i)}const al=64,ol=64,cl=16,hl=16,ul=128,ll=2,fl=19,yl=4294967295,dl=4,pl=4294967295,gl=8,ml=4294967295,wl=8,Al=4294967295,bl=4294967295,vl=32,El=1024,kl=64,Sl=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function Il(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function Bl(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=t;for(let t=r;t<r+7;t++)e[t]=i,i=(i-e[t])/256;return e}function Cl(e,t,r){const i=new Uint8Array(64),n=new Uint8Array(4+t.length);if(Il(n,e,0),n.set(t,4),e<=64)return sl(e).update(n).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)sl(64).update(0===e?n:i).digest(i),r.set(i.subarray(0,32),32*e);const a=new Uint8Array(sl(e-32*s).update(i).digest());return r.set(a,32*s),r}function Kl(e,t,r,i){return e.fn.XOR(t.byteOffset,r.byteOffset,i.byteOffset),t}function Ul(e,t,r,i){return e.fn.G(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function Pl(e,t,r,i){return e.fn.G2(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function*Dl(e,t,r,i,n,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);Bl(c,t,0),Bl(c,r,8),Bl(c,i,16),Bl(c,n,24),Bl(c,s,32),Bl(c,ll,40);for(let t=1;t<=a;t++){Bl(e.refs.prngTmp,t,c.length);const r=Pl(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}const Ml=1024,xl=64*Ml;function Ql(e,{memory:t,instance:r}){if(!Sl)throw Error("BigEndian system not supported");const i=function({type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(e,t,r,i)=>{if(t<r||t>i)throw Error(`${e} size should be between ${r} and ${i} bytes`)};if(e!==ll||t!==fl)throw Error("Unsupported type or version");return u("password",i,wl,ml),u("salt",n,gl,pl),u("tag",r,dl,yl),u("memory",c,8*o,Al),s&&u("associated data",s,0,bl),a&&u("secret",a,0,vl),{type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:ll,version:fl,...e}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*El+10*Ml;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/xl);t.grow(e)}let f=0;c.gZ=new Uint8Array(t.buffer,f,El),f+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,f,El),f+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,f,El),f+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,f,1024),f+=c.ZERO1024.length;const y=new Uint32Array(t.buffer,f,2);f+=y.length*Uint32Array.BYTES_PER_ELEMENT;const d={fn:h,refs:c},p=new Uint8Array(t.buffer,f,El);f+=p.length;const g=new Uint8Array(t.buffer,f,i.memorySize*El),m=new Uint8Array(t.buffer,0,f),w=function(e){const t=sl(kl),r=new Uint8Array(4),i=new Uint8Array(24);Il(i,e.lanes,0),Il(i,e.tagLength,4),Il(i,e.memorySize,8),Il(i,e.passes,12),Il(i,e.version,16),Il(i,e.type,20);const n=[i];e.password?(n.push(Il(new Uint8Array(4),e.password.length,0)),n.push(e.password)):n.push(r);e.salt?(n.push(Il(new Uint8Array(4),e.salt.length,0)),n.push(e.salt)):n.push(r);e.secret?(n.push(Il(new Uint8Array(4),e.secret.length,0)),n.push(e.secret)):n.push(r);e.ad?(n.push(Il(new Uint8Array(4),e.ad.length,0)),n.push(e.ad)):n.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((e=>{r.set(e,i),i+=e.length})),r}(n));const s=t.digest();return new Uint8Array(s)}(i),A=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(A))),v=(e,t)=>(b[e][t]=g.subarray(e*A*1024+1024*t,e*A*1024+1024*t+El),b[e][t]);for(let e=0;e<i.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),Il(t,0,w.length),Il(t,e,w.length+4),Cl(El,t,v(e,0)),Il(t,1,w.length),Cl(El,t,v(e,1))}const E=A/4;for(let e=0;e<i.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let n=0;n<i.lanes;n++){let s=0===t&&0===e?2:0;const a=r?Dl(d,e,n,t,u,i.passes,E,s):null;for(;s<E;s++){const c=t*E+s,h=c>0?b[n][c-1]:b[n][A-1],u=r?a.next().value:h;o(y.byteOffset,u.byteOffset,n,i.lanes,e,t,s,4,E);const l=y[0],f=y[1];0===e&&v(n,c),Ul(d,h,b[l][f],e>0?p:b[n][c]),e>0&&Kl(d,b[n][c],p,b[n][c])}}}const k=b[0][A-1];for(let e=1;e<i.lanes;e++)Kl(d,k,k,b[e][A-1]);const S=Cl(i.tagLength,k,new Uint8Array(i.tagLength));return m.fill(0),t.grow(0),S}let Rl;async function _l(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(e,t,r){const i={env:{memory:e}};if(void 0===Rl)try{const e=await t(i);return Rl=!0,e}catch(e){Rl=!1}return(Rl?t:r)(i)}(r,e,t);return e=>Ql(e,{instance:i.instance,memory:r})}function Tl(e,t,r,i){function n(e,t,r){var i=r?WebAssembly.instantiateStreaming:WebAssembly.instantiate,n=r?WebAssembly.compileStreaming:WebAssembly.compile;return t?i(e,t):n(e)}var s;if(t){var a=require("fs"),o=require("path");return new Promise(((e,r)=>{a.readFile(o.resolve(__dirname,t),((t,s)=>{null!=t?r(t):e(n(s,i,!1))}))}))}if(s=Buffer.from(r,"base64"),e){var c=new WebAssembly.Module(s);return i?new WebAssembly.Instance(c,i):c}return n(s,i,!1)}var Ll=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>_l((e=>Tl(0,null,"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",e)),(e=>Tl(0,null,"AGFzbQEAAAABPwhgBH9/f38AYAABf2AAAGADf39/AGARf39/f39/f39/f39/f39/f38AYAl/f39/f39/f38Bf2ABfwBgAX8BfwITAQNlbnYGbWVtb3J5AgGQCICABAMLCgIDBAAABQEGBwEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwADAkcyAAQFZ2V0TFoABRlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAkJc3RhY2tTYXZlAAYMc3RhY2tSZXN0b3JlAAcKc3RhY2tBbGxvYwAICQcBAEEBCwEACssaCgMAAQtQAQJ/A0AgACAEQQN0IgNqIAIgA2opAwAgASADaikDAIU3AwAgACADQQhyIgNqIAIgA2opAwAgASADaikDAIU3AwAgBEECaiIEQYABRw0ACwveDwICfgF/IAAgAUEDdGoiEyATKQMAIhEgACAFQQN0aiIBKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA1BA3RqIgUgESAFKQMAhUIgiSIRNwMAIAAgCUEDdGoiCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIoiSIRNwMAIBMgESATKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAFIBEgBSkDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgASARIAEpAwCFQgGJNwMAIAAgAkEDdGoiDSANKQMAIhEgACAGQQN0aiICKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA5BA3RqIgYgESAGKQMAhUIgiSIRNwMAIAAgCkEDdGoiCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIoiSIRNwMAIA0gESANKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAKIBEgCikDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAiARIAIpAwCFQgGJNwMAIAAgA0EDdGoiDiAOKQMAIhEgACAHQQN0aiIDKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA9BA3RqIgcgESAHKQMAhUIgiSIRNwMAIAAgC0EDdGoiCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAMgESADKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAHIBEgBykDAIVCMIkiETcDACALIBEgCykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQgGJNwMAIAAgBEEDdGoiDyAPKQMAIhEgACAIQQN0aiIEKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIBBBA3RqIgggESAIKQMAhUIgiSIRNwMAIAAgDEEDdGoiACARIAApAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA8gESAPKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAIIBEgCCkDAIVCMIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIBMgEykDACIRIAIpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAggESAIKQMAhUIgiSIRNwMAIAsgESALKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACACIBEgAikDAIVCKIkiETcDACATIBEgEykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgCCARIAgpAwCFQjCJIhE3AwAgCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIBiTcDACANIA0pAwAiESADKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAFIBEgBSkDAIVCIIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQiiJIhE3AwAgDSARIA0pAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAUgESAFKQMAhUIwiSIRNwMAIAAgESAAKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACADIBEgAykDAIVCAYk3AwAgDiAOKQMAIhEgBCkDACISfCARQgGGQv7///8fgyASQv////8Pg358IhE3AwAgBiARIAYpAwCFQiCJIhE3AwAgCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIA8gDykDACIRIAEpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAcgESAHKQMAhUIgiSIRNwMAIAogESAKKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACABIBEgASkDAIVCKIkiETcDACAPIBEgDykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgByARIAcpAwCFQjCJIhE3AwAgCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIBiTcDAAvdCAEPfwNAIAIgBUEDdCIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAIgBkEIciIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAVBAmoiBUGAAUcNAAsDQCADIARBA3QiAGogACACaikDADcDACADIARBAXIiAEEDdCIBaiABIAJqKQMANwMAIAMgBEECciIBQQN0IgVqIAIgBWopAwA3AwAgAyAEQQNyIgVBA3QiBmogAiAGaikDADcDACADIARBBHIiBkEDdCIHaiACIAdqKQMANwMAIAMgBEEFciIHQQN0IghqIAIgCGopAwA3AwAgAyAEQQZyIghBA3QiCWogAiAJaikDADcDACADIARBB3IiCUEDdCIKaiACIApqKQMANwMAIAMgBEEIciIKQQN0IgtqIAIgC2opAwA3AwAgAyAEQQlyIgtBA3QiDGogAiAMaikDADcDACADIARBCnIiDEEDdCINaiACIA1qKQMANwMAIAMgBEELciINQQN0Ig5qIAIgDmopAwA3AwAgAyAEQQxyIg5BA3QiD2ogAiAPaikDADcDACADIARBDXIiD0EDdCIQaiACIBBqKQMANwMAIAMgBEEOciIQQQN0IhFqIAIgEWopAwA3AwAgAyAEQQ9yIhFBA3QiEmogAiASaikDADcDACADIARB//8DcSAAQf//A3EgAUH//wNxIAVB//8DcSAGQf//A3EgB0H//wNxIAhB//8DcSAJQf//A3EgCkH//wNxIAtB//8DcSAMQf//A3EgDUH//wNxIA5B//8DcSAPQf//A3EgEEH//wNxIBFB//8DcRACIARB8ABJIQAgBEEQaiEEIAANAAtBACEBIANBAEEBQRBBEUEgQSFBMEExQcAAQcEAQdAAQdEAQeAAQeEAQfAAQfEAEAIgA0ECQQNBEkETQSJBI0EyQTNBwgBBwwBB0gBB0wBB4gBB4wBB8gBB8wAQAiADQQRBBUEUQRVBJEElQTRBNUHEAEHFAEHUAEHVAEHkAEHlAEH0AEH1ABACIANBBkEHQRZBF0EmQSdBNkE3QcYAQccAQdYAQdcAQeYAQecAQfYAQfcAEAIgA0EIQQlBGEEZQShBKUE4QTlByABByQBB2ABB2QBB6ABB6QBB+ABB+QAQAiADQQpBC0EaQRtBKkErQTpBO0HKAEHLAEHaAEHbAEHqAEHrAEH6AEH7ABACIANBDEENQRxBHUEsQS1BPEE9QcwAQc0AQdwAQd0AQewAQe0AQfwAQf0AEAIgA0EOQQ9BHkEfQS5BL0E+QT9BzgBBzwBB3gBB3wBB7gBB7wBB/gBB/wAQAgNAIAIgAUEDdCIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAiAAQQhyIgRqIgUgAyAEaikDACAFKQMAhTcDACACIABBEHIiBGoiBSADIARqKQMAIAUpAwCFNwMAIAIgAEEYciIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAUEEaiIBQYABRw0ACwsWACAAIAEgAiADEAMgACACIAIgAxADC3sCAX8BfiACIQkgATUCACEKIAQgBXIEQCABKAIEIANwIQkLIAAgCTYCACAAIAdBAWsgBSAEGyAIbCAGQQFrQQBBfyAGGyACIAlGG2oiASAFQQFqIAhsQQAgBBtqIAGtIAogCn5CIIh+QiCIp0F/c2ogByAIbHA2AgQgAAsEACMACwYAIAAkAAsQACMAIABrQXBxIgAkACAACwUAQYAICw==",e)))});exports.AEADEncryptedDataPacket=Aa,exports.CleartextMessage=fo,exports.CompressedDataPacket=oa,exports.KDFParams=gn,exports.LiteralDataPacket=Js,exports.MarkerPacket=class{static get tag(){return z.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}},exports.Message=co,exports.OnePassSignaturePacket=ia,exports.PacketList=sa,exports.PaddingPacket=class{static get tag(){return z.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await Kn.random.getRandomBytes(e)}},exports.PrivateKey=to,exports.PublicKey=eo,exports.PublicKeyEncryptedSessionKeyPacket=ba,exports.PublicKeyPacket=ka,exports.PublicSubkeyPacket=Ba,exports.SecretKeyPacket=Ka,exports.SecretSubkeyPacket=Da,exports.Signature=xa,exports.SignaturePacket=ea,exports.Subkey=Ya,exports.SymEncryptedIntegrityProtectedDataPacket=ga,exports.SymEncryptedSessionKeyPacket=Ea,exports.SymmetricallyEncryptedDataPacket=Ia,exports.TrustPacket=class{static get tag(){return z.packet.trust}read(){throw new ci("Trust packets are not supported")}write(){throw new ci("Trust packets are not supported")}},exports.UnparseablePacket=ui,exports.UserAttributePacket=Ca,exports.UserIDPacket=Pa,exports.armor=ae,exports.config=G,exports.createCleartextMessage=async function({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!V.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new fo(e)},exports.createMessage=async function({text:e,binary:t,filename:r,date:i=new Date,format:n=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!V.isString(e)&&!V.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!V.isUint8Array(t)&&!V.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=V.isStream(a),h=new Js(i);void 0!==e?h.setText(a,z.write(z.literal,n)):h.setBytes(a,z.write(z.literal,n)),void 0!==r&&h.setFilename(r);const u=new sa;u.push(h);const l=new co(u);return l.fromStream=c,l},exports.decrypt=async function({message:e,decryptionKeys:t,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(wo(h={...G,...h}),yo(e),n=Ao(n),t=Ao(t),r=Ao(r),i=Ao(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await e.decrypt(t,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),vo(l,e),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=B([l.data,N((async()=>{await V.anyPromise(l.signatures.map((e=>e.verified)))}))])}return l.data=await bo(l.data,e.fromStream,a),l}catch(e){throw V.wrapError("Error decrypting message",e)}},exports.decryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){wo(r={...G,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=V.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>V.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),V.wrapError("Error decrypting private key",e)}},exports.decryptSessionKeys=async function({message:e,decryptionKeys:t,passwords:r,date:i=new Date,config:n,...s}){if(wo(n={...G,...n}),yo(e),t=Ao(t),r=Ao(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,i,n)}catch(e){throw V.wrapError("Error decrypting session keys",e)}},exports.encrypt=async function({message:e,encryptionKeys:t,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:f=[],signatureNotations:y=[],config:d,...p}){if(wo(d={...G,...d}),yo(e),go(s),t=Ao(t),r=Ao(r),i=Ao(i),c=Ao(c),h=Ao(h),l=Ao(l),f=Ao(f),y=Ao(y),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const g=Object.keys(p);if(g.length>0)throw Error("Unknown option: "+g.join(", "));r||(r=[]);const m=e.fromStream;try{if((r.length||a)&&(e=await e.sign(r,a,c,u,l,y,d)),e=e.compress(await async function(e=[],t=new Date,r=[],i=G){const n=z.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,n){const a=(await e.getPrimarySelfSignature(t,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(t,u,f,d),d),e=await e.encrypt(t,i,n,o,h,u,f,d),"object"===s)return e;const p="armored"===s;return bo(p?e.armor(d):e.write(),m,p?"utf8":"binary")}catch(e){throw V.wrapError("Error encrypting message",e)}},exports.encryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){wo(r={...G,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=V.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:i}=e;await i.encrypt(o[t],r),i.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),V.wrapError("Error encrypting private key",e)}},exports.encryptSessionKey=async function({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(wo(u={...G,...u}),function(e,t){if(!V.isUint8Array(e))throw Error("Parameter ["+(t||"data")+"] must be of type Uint8Array")}(e),function(e,t){if(!V.isString(e))throw Error("Parameter ["+(t||"data")+"] must be of type String")}(t,"algorithm"),go(s),i=Ao(i),n=Ao(n),o=Ao(o),h=Ao(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const f=Object.keys(l);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return Eo(await co.encryptSessionKey(e,t,r,i,n,a,o,c,h,u),s,u)}catch(e){throw V.wrapError("Error encrypting session key",e)}},exports.enums=z,exports.generateKey=async function({userIDs:e=[],passphrase:t,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...f}){wo(l={...G,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),e=Ao(e);const y=Object.keys(f);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const d={userIDs:e,passphrase:t,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=za(e)).subkeys=e.subkeys.map(((t,r)=>za(e.subkeys[r],e)));let r=[Ra(e,t)];r=r.concat(e.subkeys.map((e=>Qa(e,t))));const i=await Promise.all(r),n=await no(i[0],i.slice(1),e,t),s=await n.getRevocationCertificate(e.date,t);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(d,l);return e.getKeys().forEach((({keyPacket:e})=>Va(e,l))),{privateKey:Eo(e,u,l),publicKey:"symmetric"!==r?Eo(e.toPublic(),u,l):null,revocationCertificate:t}}catch(e){throw V.wrapError("Error generating keypair",e)}},exports.generateSessionKey=async function({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:i,...n}){if(wo(i={...G,...i}),e=Ao(e),r=Ao(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await co.generateSessionKey(e,t,r,i)}catch(e){throw V.wrapError("Error generating session key",e)}},exports.readCleartextMessage=async function({cleartextMessage:e,config:t,...r}){if(t={...G,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!V.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await se(e);if(n.type!==z.armor.signed)throw Error("No cleartext signed message.");const s=await sa.fromBinary(n.data,lo,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let i=0;i<t.length;i++)if(t[i].constructor.tag===z.packet.signature&&!e.some(r(t[i])))return!1;return!0},i=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return z.write(z.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));i.push(...e)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new xa(s);return new fo(n.text,a)},exports.readKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={...G,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!V.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!V.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await se(e);if(t!==z.armor.publicKey&&t!==z.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;return io(await sa.fromBinary(s,ro,r))},exports.readKeys=async function({armoredKeys:e,binaryKeys:t,config:r,...i}){r={...G,...r};let n=e||t;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!V.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!V.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await se(e);if(t!==z.armor.publicKey&&t!==z.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await sa.fromBinary(n,ro,r),c=o.indexOfTag(z.packet.publicKey,z.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=io(o.slice(c[e],c[e+1]));a.push(t)}return a},exports.readMessage=async function({armoredMessage:e,binaryMessage:t,config:r,...i}){r={...G,...r};let n=e||t;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!V.isString(e)&&!V.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!V.isUint8Array(t)&&!V.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=V.isStream(n);if(e){const{type:e,data:t}=await se(n);if(e!==z.armor.message)throw Error("Armored text not of type message");n=t}const o=await sa.fromBinary(n,so,r),c=new co(o);return c.fromStream=a,c},exports.readPrivateKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={...G,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!V.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!V.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await se(e);if(t!==z.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await sa.fromBinary(s,ro,r);return new to(a)},exports.readPrivateKeys=async function({armoredKeys:e,binaryKeys:t,config:r}){r={...G,...r};let i=e||t;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!V.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!V.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await se(e);if(t!==z.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await sa.fromBinary(i,ro,r),a=s.indexOfTag(z.packet.secretKey);if(0===a.length)throw Error("No secret key packet found");for(let e=0;e<a.length;e++){const t=s.slice(a[e],a[e+1]),r=new to(t);n.push(r)}return n},exports.readSignature=async function({armoredSignature:e,binarySignature:t,config:r,...i}){r={...G,...r};let n=e||t;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!V.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!V.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await se(n);if(e!==z.armor.signature)throw Error("Armored text not of type signature");n=t}const a=await sa.fromBinary(n,Ma,r);return new xa(a)},exports.reformatKey=async function({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){wo(a={...G,...a}),t=Ao(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:i,date:n};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,n={key:i,bind:r},s=await _a(e.bindingSignatures,i,z.signature.subkeyBinding,n,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&z.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&z.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await no(i,n,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=V.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(h,a);return{privateKey:Eo(e,s,a),publicKey:Eo(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw V.wrapError("Error reformatting keypair",e)}},exports.revokeKey=async function({key:e,revocationCertificate:t,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){wo(s={...G,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,i,s):await e.revoke(r,i,s);return a.isPrivate()?{privateKey:Eo(a,n,s),publicKey:Eo(a.toPublic(),n,s)}:{privateKey:null,publicKey:Eo(a,n,s)}}catch(e){throw V.wrapError("Error revoking key",e)}},exports.sign=async function({message:e,signingKeys:t,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(wo(c={...G,...c}),po(e),go(r),t=Ao(t),n=Ao(n),a=Ao(a),o=Ao(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(e instanceof fo&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof fo&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let h;if(h=i?await e.signDetached(t,void 0,n,s,a,o,c):await e.sign(t,void 0,n,s,a,o,c),"object"===r)return h;const u="armored"===r;return h=u?h.armor(c):h.write(),i&&(h=D(e.packets.write(),(async(e,t)=>{await Promise.all([C(h,t),T(e).catch((()=>{}))])}))),bo(h,e.fromStream,u?"utf8":"binary")}catch(e){throw V.wrapError("Error signing message",e)}},exports.unarmor=se,exports.verify=async function({message:e,verificationKeys:t,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(wo(a={...G,...a}),po(e),t=Ao(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof fo&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(e instanceof fo&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await e.verifyDetached(n,t,s,a):await e.verify(t,s,a),o.data="binary"===i?e.getLiteralData():e.getText(),e.fromStream&&vo(o,e),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=B([o.data,N((async()=>{await V.anyPromise(o.signatures.map((e=>e.verified)))}))])}return o.data=await bo(o.data,e.fromStream,i),o}catch(e){throw V.wrapError("Error verifying signed message",e)}};
|
|
14
|
+
const Vh=Object.freeze(Va.new("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f")),Zh=Object.freeze(Va.new("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"));Object.freeze(Va.new(0));const Jh=Object.freeze(Va.new(1)),Yh=Object.freeze(Va.new(2)),Wh=(t,e)=>t.add(e.rightShift(Jh)).idiv(e);const $h=tc(Vh,void 0,void 0,{sqrt:function(t){const e=Vh,r=Va.new(3),i=Va.new(6),n=Va.new(11),s=Va.new(22),a=Va.new(23),o=Va.new(44),c=Va.new(88),h=t.mul(t).imul(t).imod(e),u=h.mul(h).imul(t).imod(e),l=Jo(u,r,e).imul(u).imod(e),f=Jo(l,r,e).imul(u).imod(e),y=Jo(f,Yh,e).imul(h).imod(e),d=Jo(y,n,e).imul(y).imod(e),p=Jo(d,s,e).imul(d).imod(e),g=Jo(p,o,e).imul(p).imod(e),m=Jo(g,c,e).imul(g).imod(e),w=Jo(m,o,e).imul(p).imod(e),A=Jo(w,r,e).imul(u).imod(e),b=Jo(A,a,e).imul(d).imod(e),v=Jo(b,i,e).imul(h).imod(e),E=Jo(v,Yh,e);if(!$h.eql($h.sqr(E),t))throw Error("Cannot find square root");return E}}),Xh=gc({a:Va.new(0),b:Va.new(7),Fp:$h,n:Zh,Gx:Va.new("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:Va.new("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:Va.new(1),lowS:!0,endo:{beta:Va.new("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:t=>{const e=Zh,r=Va.new("0x3086d221a7d46bcde86c90e49284eb15"),i=Jh.negate().imul(Va.new("0xe4437ed6010e88286f547fa90abfe4c3")),n=Va.new("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=Va.new("0x100000000000000000000000000000000"),o=Wh(s.mul(t),e),c=Wh(i.negate().imul(t),e);let h=Vo(t.sub(o.mul(r)).sub(c.mul(n)),e),u=Vo(o.negate().mul(i).isub(c.mul(s)),e);const l=h.gt(a),f=u.gt(a);if(l&&(h=e.sub(h)),f&&(u=e.sub(u)),h.gt(a)||u.gt(a))throw Error("splitScalar: Endomorphism failed, k="+t);return{k1neg:l,k1:h,k2neg:f,k2:u}}}},Sc);Xh.ProjectivePoint;const tu=new Map(Object.entries({nistP256:Bc,nistP384:jc,nistP521:Jc,brainpoolP256r1:Wc,brainpoolP384r1:Xc,brainpoolP512r1:eh,secp256k1:Xh,x448:jh,ed448:qh}));var eu=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:tu});function ru(t,e,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],f=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],y=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let d,p,g,m,w,A,b,v,E,k,S,I,C,B,K=0,P=e.length;const D=32===t.length?3:9;v=3===D?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(e=function(t,e){const r=8-t.length%8;let i;if(2===e&&r<8)i=32;else if(1===e)i=r;else{if(e||!(r<8)){if(8===r)return t;throw Error("des: invalid padding")}i=0}const n=new Uint8Array(t.length+r);for(let e=0;e<t.length;e++)n[e]=t[e];for(let e=0;e<r;e++)n[t.length+e]=i;return n}(e,s),P=e.length);let U=new Uint8Array(P),M=0;for(1===i&&(E=n[K++]<<24|n[K++]<<16|n[K++]<<8|n[K++],S=n[K++]<<24|n[K++]<<16|n[K++]<<8|n[K++],K=0);K<P;){for(A=e[K++]<<24|e[K++]<<16|e[K++]<<8|e[K++],b=e[K++]<<24|e[K++]<<16|e[K++]<<8|e[K++],1===i&&(r?(A^=E,b^=S):(k=E,I=S,E=A,S=b)),g=252645135&(A>>>4^b),b^=g,A^=g<<4,g=65535&(A>>>16^b),b^=g,A^=g<<16,g=858993459&(b>>>2^A),A^=g,b^=g<<2,g=16711935&(b>>>8^A),A^=g,b^=g<<8,g=1431655765&(A>>>1^b),b^=g,A^=g<<1,A=A<<1|A>>>31,b=b<<1|b>>>31,p=0;p<D;p+=3){for(C=v[p+1],B=v[p+2],d=v[p];d!==C;d+=B)m=b^t[d],w=(b>>>4|b<<28)^t[d+1],g=A,A=b,b=g^(o[m>>>24&63]|h[m>>>16&63]|l[m>>>8&63]|y[63&m]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|f[63&w]);g=A,A=b,b=g}A=A>>>1|A<<31,b=b>>>1|b<<31,g=1431655765&(A>>>1^b),b^=g,A^=g<<1,g=16711935&(b>>>8^A),A^=g,b^=g<<8,g=858993459&(b>>>2^A),A^=g,b^=g<<2,g=65535&(A>>>16^b),b^=g,A^=g<<16,g=252645135&(A>>>4^b),b^=g,A^=g<<4,1===i&&(r?(E=A,S=b):(A^=k,b^=I)),U[M++]=A>>>24,U[M++]=A>>>16&255,U[M++]=A>>>8&255,U[M++]=255&A,U[M++]=b>>>24,U[M++]=b>>>16&255,U[M++]=b>>>8&255,U[M++]=255&b}return r||(U=function(t,e){let r,i=null;if(2===e)r=32;else if(1===e)i=t[t.length-1];else{if(e)throw Error("des: invalid padding");r=0}if(!i){for(i=1;t[t.length-i]===r;)i++;i--}return t.subarray(0,t.length-i)}(U,s)),U}function iu(t){const e=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],f=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],y=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],d=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=t.length>8?3:1,g=Array(32*p),m=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,A,b,v=0,E=0;for(let k=0;k<p;k++){let p=t[v++]<<24|t[v++]<<16|t[v++]<<8|t[v++],k=t[v++]<<24|t[v++]<<16|t[v++]<<8|t[v++];b=252645135&(p>>>4^k),k^=b,p^=b<<4,b=65535&(k>>>-16^p),p^=b,k^=b<<-16,b=858993459&(p>>>2^k),k^=b,p^=b<<2,b=65535&(k>>>-16^p),p^=b,k^=b<<-16,b=1431655765&(p>>>1^k),k^=b,p^=b<<1,b=16711935&(k>>>8^p),p^=b,k^=b<<8,b=1431655765&(p>>>1^k),k^=b,p^=b<<1,b=p<<8|k>>>20&240,p=k<<24|k<<8&16711680|k>>>8&65280|k>>>24&240,k=b;for(let t=0;t<16;t++)m[t]?(p=p<<2|p>>>26,k=k<<2|k>>>26):(p=p<<1|p>>>27,k=k<<1|k>>>27),p&=-15,k&=-15,w=e[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],A=c[k>>>28]|h[k>>>24&15]|u[k>>>20&15]|l[k>>>16&15]|f[k>>>12&15]|y[k>>>8&15]|d[k>>>4&15],b=65535&(A>>>16^w),g[E++]=w^b,g[E++]=A^b<<16}return g}function nu(t){this.key=[];for(let e=0;e<3;e++)this.key.push(new Uint8Array(t.subarray(8*e,8*e+8)));this.encrypt=function(t){return ru(iu(this.key[2]),ru(iu(this.key[1]),ru(iu(this.key[0]),t,!0,0,null,null),!1,0,null,null),!0,0,null,null)}}function su(){this.BlockSize=8,this.KeySize=16,this.setKey=function(t){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),t.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(t),!0},this.reset=function(){for(let t=0;t<16;t++)this.masking[t]=0,this.rotate[t]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(t){const e=Array(t.length);for(let s=0;s<t.length;s+=8){let a,o=t[s]<<24|t[s+1]<<16|t[s+2]<<8|t[s+3],c=t[s+4]<<24|t[s+5]<<16|t[s+6]<<8|t[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,e[s]=c>>>24&255,e[s+1]=c>>>16&255,e[s+2]=c>>>8&255,e[s+3]=255&c,e[s+4]=o>>>24&255,e[s+5]=o>>>16&255,e[s+6]=o>>>8&255,e[s+7]=255&o}return e},this.decrypt=function(t){const e=Array(t.length);for(let s=0;s<t.length;s+=8){let a,o=t[s]<<24|t[s+1]<<16|t[s+2]<<8|t[s+3],c=t[s+4]<<24|t[s+5]<<16|t[s+6]<<8|t[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,e[s]=c>>>24&255,e[s+1]=c>>>16&255,e[s+2]=c>>>8&255,e[s+3]=255&c,e[s+4]=o>>>24&255,e[s+5]=o>>16&255,e[s+6]=o>>8&255,e[s+7]=255&o}return e};const t=[,,,,];t[0]=[,,,,],t[0][0]=[4,0,13,15,12,14,8],t[0][1]=[5,2,16,18,17,19,10],t[0][2]=[6,3,23,22,21,20,9],t[0][3]=[7,1,26,25,27,24,11],t[1]=[,,,,],t[1][0]=[0,6,21,23,20,22,16],t[1][1]=[1,4,0,2,1,3,18],t[1][2]=[2,5,7,6,5,4,17],t[1][3]=[3,7,10,9,11,8,19],t[2]=[,,,,],t[2][0]=[4,0,13,15,12,14,8],t[2][1]=[5,2,16,18,17,19,10],t[2][2]=[6,3,23,22,21,20,9],t[2][3]=[7,1,26,25,27,24,11],t[3]=[,,,,],t[3][0]=[0,6,21,23,20,22,16],t[3][1]=[1,4,0,2,1,3,18],t[3][2]=[2,5,7,6,5,4,17],t[3][3]=[3,7,10,9,11,8,19];const e=[,,,,];function r(t,e,r){const i=e+t,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(t,e,r){const i=e^t,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(t,e,r){const i=e-t,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}e[0]=[,,,,],e[0][0]=[24,25,23,22,18],e[0][1]=[26,27,21,20,22],e[0][2]=[28,29,19,18,25],e[0][3]=[30,31,17,16,28],e[1]=[,,,,],e[1][0]=[3,2,12,13,8],e[1][1]=[1,0,14,15,13],e[1][2]=[7,6,8,9,3],e[1][3]=[5,4,10,11,7],e[2]=[,,,,],e[2][0]=[19,18,28,29,25],e[2][1]=[17,16,30,31,28],e[2][2]=[23,22,24,25,18],e[2][3]=[21,20,26,27,22],e[3]=[,,,,],e[3][0]=[8,9,7,6,3],e[3][1]=[10,11,5,4,7],e[3][2]=[12,13,3,2,8],e[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let t=0;t<4;t++)a=4*t,i[t]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const e=t[r][a];c=i[e[1]],c^=s[4][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[5][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[6][i[e[4]>>>2]>>>24-8*(3&e[4])&255],c^=s[7][i[e[5]>>>2]>>>24-8*(3&e[5])&255],c^=s[o[a]][i[e[6]>>>2]>>>24-8*(3&e[6])&255],i[e[0]]=c}for(a=0;a<4;a++){const t=e[r][a];c=s[4][i[t[0]>>>2]>>>24-8*(3&t[0])&255],c^=s[5][i[t[1]>>>2]>>>24-8*(3&t[1])&255],c^=s[6][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[7][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[4+a][i[t[4]>>>2]>>>24-8*(3&t[4])&255],n[h]=c,h++}}for(let t=0;t<16;t++)this.masking[t]=n[t],this.rotate[t]=31&n[16+t]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function au(t){this.cast5=new su,this.cast5.setKey(t),this.encrypt=function(t){return this.cast5.encrypt(t)}}nu.keySize=nu.prototype.keySize=24,nu.blockSize=nu.prototype.blockSize=8,au.blockSize=au.prototype.blockSize=8,au.keySize=au.prototype.keySize=16;const ou=4294967295;function cu(t,e){return(t<<e|t>>>32-e)&ou}function hu(t,e){return t[e]|t[e+1]<<8|t[e+2]<<16|t[e+3]<<24}function uu(t,e,r){t.splice(e,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function lu(t,e){return t>>>8*e&255}function fu(t){this.tf=function(){let t=null,e=null,r=-1,i=[],n=[[],[],[],[]];function s(t){return n[0][lu(t,0)]^n[1][lu(t,1)]^n[2][lu(t,2)]^n[3][lu(t,3)]}function a(t){return n[0][lu(t,3)]^n[1][lu(t,0)]^n[2][lu(t,1)]^n[3][lu(t,2)]}function o(t,e){let r=s(e[0]),n=a(e[1]);e[2]=cu(e[2]^r+n+i[4*t+8]&ou,31),e[3]=cu(e[3],1)^r+2*n+i[4*t+9]&ou,r=s(e[2]),n=a(e[3]),e[0]=cu(e[0]^r+n+i[4*t+10]&ou,31),e[1]=cu(e[1],1)^r+2*n+i[4*t+11]&ou}function c(t,e){let r=s(e[0]),n=a(e[1]);e[2]=cu(e[2],1)^r+n+i[4*t+10]&ou,e[3]=cu(e[3]^r+2*n+i[4*t+11]&ou,31),r=s(e[2]),n=a(e[3]),e[0]=cu(e[0],1)^r+n+i[4*t+8]&ou,e[1]=cu(e[1]^r+2*n+i[4*t+9]&ou,31)}return{name:"twofish",blocksize:16,open:function(e){let r,s,a,o,c;t=e;const h=[],u=[],l=[];let f;const y=[];let d,p,g;const m=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],A=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],v=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],E=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],k=[[],[]],S=[[],[],[],[]];function I(t){return t^t>>2^[0,90,180,238][3&t]}function C(t){return t^t>>1^t>>2^[0,238,180,90][3&t]}function B(t,e){let r,i,n;for(r=0;r<8;r++)i=e>>>24,e=e<<8&ou|t>>>24,t=t<<8&ou,n=i<<1,128&i&&(n^=333),e^=i^n<<16,n^=i>>>1,1&i&&(n^=166),e^=n<<24|n<<8;return e}function K(t,e){const r=e>>4,i=15&e,n=m[t][r^i],s=w[t][v[i]^E[r]];return b[t][v[s]^E[n]]<<4|A[t][n^s]}function P(t,e){let r=lu(t,0),i=lu(t,1),n=lu(t,2),s=lu(t,3);switch(f){case 4:r=k[1][r]^lu(e[3],0),i=k[0][i]^lu(e[3],1),n=k[0][n]^lu(e[3],2),s=k[1][s]^lu(e[3],3);case 3:r=k[1][r]^lu(e[2],0),i=k[1][i]^lu(e[2],1),n=k[0][n]^lu(e[2],2),s=k[0][s]^lu(e[2],3);case 2:r=k[0][k[0][r]^lu(e[1],0)]^lu(e[0],0),i=k[0][k[1][i]^lu(e[1],1)]^lu(e[0],1),n=k[1][k[0][n]^lu(e[1],2)]^lu(e[0],2),s=k[1][k[1][s]^lu(e[1],3)]^lu(e[0],3)}return S[0][r]^S[1][i]^S[2][n]^S[3][s]}for(t=t.slice(0,32),r=t.length;16!==r&&24!==r&&32!==r;)t[r++]=0;for(r=0;r<t.length;r+=4)l[r>>2]=hu(t,r);for(r=0;r<256;r++)k[0][r]=K(0,r),k[1][r]=K(1,r);for(r=0;r<256;r++)d=k[1][r],p=I(d),g=C(d),S[0][r]=d+(p<<8)+(g<<16)+(g<<24),S[2][r]=p+(g<<8)+(d<<16)+(g<<24),d=k[0][r],p=I(d),g=C(d),S[1][r]=g+(g<<8)+(p<<16)+(d<<24),S[3][r]=p+(d<<8)+(g<<16)+(p<<24);for(f=l.length/2,r=0;r<f;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,y[f-r-1]=B(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=P(s,h),a=cu(P(a,u),8),i[r]=s+a&ou,i[r+1]=cu(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,f){case 4:s=k[1][s]^lu(y[3],0),a=k[0][a]^lu(y[3],1),o=k[0][o]^lu(y[3],2),c=k[1][c]^lu(y[3],3);case 3:s=k[1][s]^lu(y[2],0),a=k[1][a]^lu(y[2],1),o=k[0][o]^lu(y[2],2),c=k[0][c]^lu(y[2],3);case 2:n[0][r]=S[0][k[0][k[0][s]^lu(y[1],0)]^lu(y[0],0)],n[1][r]=S[1][k[0][k[1][a]^lu(y[1],1)]^lu(y[0],1)],n[2][r]=S[2][k[1][k[0][o]^lu(y[1],2)]^lu(y[0],2)],n[3][r]=S[3][k[1][k[1][c]^lu(y[1],3)]^lu(y[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(t,n){e=t,r=n;const s=[hu(e,r)^i[0],hu(e,r+4)^i[1],hu(e,r+8)^i[2],hu(e,r+12)^i[3]];for(let t=0;t<8;t++)o(t,s);return uu(e,r,s[2]^i[4]),uu(e,r+4,s[3]^i[5]),uu(e,r+8,s[0]^i[6]),uu(e,r+12,s[1]^i[7]),r+=16,e},decrypt:function(t,n){e=t,r=n;const s=[hu(e,r)^i[4],hu(e,r+4)^i[5],hu(e,r+8)^i[6],hu(e,r+12)^i[7]];for(let t=7;t>=0;t--)c(t,s);uu(e,r,s[2]^i[0]),uu(e,r+4,s[3]^i[1]),uu(e,r+8,s[0]^i[2]),uu(e,r+12,s[1]^i[3]),r+=16},finalize:function(){return e}}}(),this.tf.open(Array.from(t),0),this.encrypt=function(t){return this.tf.encrypt(Array.from(t),0)}}function yu(){}function du(t){this.bf=new yu,this.bf.init(t),this.encrypt=function(t){return this.bf.encryptBlock(t)}}fu.keySize=fu.prototype.keySize=32,fu.blockSize=fu.prototype.blockSize=16,yu.prototype.BLOCKSIZE=8,yu.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],yu.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],yu.prototype.NN=16,yu.prototype._clean=function(t){if(t<0){t=(2147483647&t)+2147483648}return t},yu.prototype._F=function(t){let e;const r=255&t,i=255&(t>>>=8),n=255&(t>>>=8),s=255&(t>>>=8);return e=this.sboxes[0][s]+this.sboxes[1][n],e^=this.sboxes[2][i],e+=this.sboxes[3][r],e},yu.prototype._encryptBlock=function(t){let e,r=t[0],i=t[1];for(e=0;e<this.NN;++e){r^=this.parray[e],i=this._F(r)^i;const t=r;r=i,i=t}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],t[0]=this._clean(i),t[1]=this._clean(r)},yu.prototype.encryptBlock=function(t){let e;const r=[0,0],i=this.BLOCKSIZE/2;for(e=0;e<this.BLOCKSIZE/2;++e)r[0]=r[0]<<8|255&t[e+0],r[1]=r[1]<<8|255&t[e+i];this._encryptBlock(r);const n=[];for(e=0;e<this.BLOCKSIZE/2;++e)n[e+0]=r[0]>>>24-8*e&255,n[e+i]=r[1]>>>24-8*e&255;return n},yu.prototype._decryptBlock=function(t){let e,r=t[0],i=t[1];for(e=this.NN+1;e>1;--e){r^=this.parray[e],i=this._F(r)^i;const t=r;r=i,i=t}r^=this.parray[1],i^=this.parray[0],t[0]=this._clean(i),t[1]=this._clean(r)},yu.prototype.init=function(t){let e,r=0;for(this.parray=[],e=0;e<this.NN+2;++e){let i=0;for(let e=0;e<4;++e)i=i<<8|255&t[r],++r>=t.length&&(r=0);this.parray[e]=this.PARRAY[e]^i}for(this.sboxes=[],e=0;e<4;++e)for(this.sboxes[e]=[],r=0;r<256;++r)this.sboxes[e][r]=this.SBOXES[e][r];const i=[0,0];for(e=0;e<this.NN+2;e+=2)this._encryptBlock(i),this.parray[e+0]=i[0],this.parray[e+1]=i[1];for(e=0;e<4;++e)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[e][r+0]=i[0],this.sboxes[e][r+1]=i[1]},du.keySize=du.prototype.keySize=16,du.blockSize=du.prototype.blockSize=8;const pu=new Map([[L.symmetric.tripledes,nu],[L.symmetric.cast5,au],[L.symmetric.blowfish,du],[L.symmetric.twofish,fu]]);var gu=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:pu});const mu=(t,e)=>t<<e|t>>>32-e>>>0,wu=(t,e,r)=>t&e^t&r^e&r,Au=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),bu=/* @__PURE__ */new Uint32Array(80);class vu extends mc{constructor(){super(64,20,8,!1),this.A=0|Au[0],this.B=0|Au[1],this.C=0|Au[2],this.D=0|Au[3],this.E=0|Au[4]}get(){const{A:t,B:e,C:r,D:i,E:n}=this;return[t,e,r,i,n]}set(t,e,r,i,n){this.A=0|t,this.B=0|e,this.C=0|r,this.D=0|i,this.E=0|n}process(t,e){for(let r=0;r<16;r++,e+=4)bu[r]=t.getUint32(e,!1);for(let t=16;t<80;t++)bu[t]=mu(bu[t-3]^bu[t-8]^bu[t-14]^bu[t-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let t=0;t<80;t++){let e,c;t<20?(e=(o=i)&n^~o&s,c=1518500249):t<40?(e=i^n^s,c=1859775393):t<60?(e=wu(i,n,s),c=2400959708):(e=i^n^s,c=3395469782);const h=mu(r,5)+e+a+c+bu[t]|0;a=s,s=n,n=mu(i,30),i=r,r=h}var o;r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){bu.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Eu=/* @__PURE__ */fo((()=>new vu)),ku=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Su=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((t,e)=>e))),Iu=/* @__PURE__ */Su.map((t=>(9*t+5)%16));let Cu=[Su],Bu=[Iu];for(let t=0;t<4;t++)for(let e of[Cu,Bu])e.push(e[t].map((t=>ku[t])));const Ku=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((t=>new Uint8Array(t))),Pu=/* @__PURE__ */Cu.map(((t,e)=>t.map((t=>Ku[e][t])))),Du=/* @__PURE__ */Bu.map(((t,e)=>t.map((t=>Ku[e][t])))),Uu=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),Mu=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]),xu=(t,e)=>t<<e|t>>>32-e;function Qu(t,e,r,i){return 0===t?e^r^i:1===t?e&r|~e&i:2===t?(e|~r)^i:3===t?e&i|r&~i:e^(r|~i)}const Ru=/* @__PURE__ */new Uint32Array(16);class _u extends mc{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:t,h1:e,h2:r,h3:i,h4:n}=this;return[t,e,r,i,n]}set(t,e,r,i,n){this.h0=0|t,this.h1=0|e,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(t,e){for(let r=0;r<16;r++,e+=4)Ru[r]=t.getUint32(e,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let t=0;t<5;t++){const e=4-t,f=Uu[t],y=Mu[t],d=Cu[t],p=Bu[t],g=Pu[t],m=Du[t];for(let e=0;e<16;e++){const i=xu(r+Qu(t,n,a,c)+Ru[d[e]]+f,g[e])+u|0;r=u,u=c,c=0|xu(a,10),a=n,n=i}for(let t=0;t<16;t++){const r=xu(i+Qu(e,s,o,h)+Ru[p[t]]+y,m[t])+l|0;i=l,l=h,h=0|xu(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){Ru.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const Tu=new Map(Object.entries({sha1:Eu,sha224:Ic,sha256:Sc,sha384:Gc,sha512:zc,sha3_256:mh,sha3_512:wh,ripemd160:/* @__PURE__ */fo((()=>new _u))}));var Lu=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Tu});function Nu(t,e,r,i){t[e]+=r[i],t[e+1]+=r[i+1]+(t[e]<r[i])}function Ou(t,e){t[0]+=e,t[1]+=t[0]<e}function Fu(t,e,r,i,n,s,a,o){Nu(t,r,t,i),Nu(t,r,e,a);let c=t[s]^t[r],h=t[s+1]^t[r+1];t[s]=h,t[s+1]=c,Nu(t,n,t,s),c=t[i]^t[n],h=t[i+1]^t[n+1],t[i]=c>>>24^h<<8,t[i+1]=h>>>24^c<<8,Nu(t,r,t,i),Nu(t,r,e,o),c=t[s]^t[r],h=t[s+1]^t[r+1],t[s]=c>>>16^h<<16,t[s+1]=h>>>16^c<<16,Nu(t,n,t,s),c=t[i]^t[n],h=t[i+1]^t[n+1],t[i]=h>>>31^c<<1,t[i+1]=c>>>31^h<<1}const Hu=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),zu=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((t=>2*t)));function Gu(t,e){const r=new Uint32Array(32),i=new Uint32Array(t.b.buffer,t.b.byteOffset,32);for(let e=0;e<16;e++)r[e]=t.h[e],r[e+16]=Hu[e];r[24]^=t.t0[0],r[25]^=t.t0[1];const n=e?4294967295:0;r[28]^=n,r[29]^=n;for(let t=0;t<12;t++){const e=t<<4;Fu(r,i,0,8,16,24,zu[e+0],zu[e+1]),Fu(r,i,2,10,18,26,zu[e+2],zu[e+3]),Fu(r,i,4,12,20,28,zu[e+4],zu[e+5]),Fu(r,i,6,14,22,30,zu[e+6],zu[e+7]),Fu(r,i,0,10,20,30,zu[e+8],zu[e+9]),Fu(r,i,2,12,22,24,zu[e+10],zu[e+11]),Fu(r,i,4,14,16,26,zu[e+12],zu[e+13]),Fu(r,i,6,8,18,28,zu[e+14],zu[e+15])}for(let e=0;e<16;e++)t.h[e]^=r[e]^r[e+16]}class qu{constructor(t,e,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(Wu),h:new Uint32Array(Vu/4),t0:new Uint32Array(2),c:0,outlen:t},n[0]=t,e&&(n[1]=e.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let t=0;t<16;t++)this.S.h[t]=Hu[t]^s[t];if(e){const t=new Uint8Array(Wu);t.set(e),this.update(t)}}update(t){if(!(t instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let e=0;for(;e<t.length;){this.S.c===Wu&&(Ou(this.S.t0,this.S.c),Gu(this.S,!1),this.S.c=0);let r=Wu-this.S.c;this.S.b.set(t.subarray(e,e+r),this.S.c);const i=Math.min(r,t.length-e);this.S.c+=i,e+=i}return this}digest(t){Ou(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=Wu,Gu(this.S,!0);const e=t||new Uint8Array(this.S.outlen);for(let t=0;t<this.S.outlen;t++)e[t]=this.S.h[t>>2]>>8*(3&t);return this.S.h=null,e.buffer}}function ju(t,e,r,i){if(t>Vu)throw Error(`outlen must be at most ${Vu} (given: ${t})`);if(e){if(!(e instanceof Uint8Array))throw Error("key must be Uint8Array or Buffer");if(e.length>Zu)throw Error(`key size must be at most ${Zu} (given: ${e.length})`)}if(r){if(!(r instanceof Uint8Array))throw Error("salt must be Uint8Array or Buffer");if(r.length!==Ju)throw Error(`salt must be exactly ${Ju} (given: ${r.length}`)}if(i){if(!(i instanceof Uint8Array))throw Error("personal must be Uint8Array or Buffer");if(i.length!==Yu)throw Error(`salt must be exactly ${Yu} (given: ${i.length}`)}return new qu(t,e,r,i)}const Vu=64,Zu=64,Ju=16,Yu=16,Wu=128,$u=2,Xu=19,tl=4294967295,el=4,rl=4294967295,il=8,nl=4294967295,sl=8,al=4294967295,ol=4294967295,cl=32,hl=1024,ul=64,ll=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function fl(t,e,r){return t[r+0]=e,t[r+1]=e>>8,t[r+2]=e>>16,t[r+3]=e>>24,t}function yl(t,e,r){if(e>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=e;for(let e=r;e<r+7;e++)t[e]=i,i=(i-t[e])/256;return t}function dl(t,e,r){const i=new Uint8Array(64),n=new Uint8Array(4+e.length);if(fl(n,t,0),n.set(e,4),t<=64)return ju(t).update(n).digest(r),r;const s=Math.ceil(t/32)-2;for(let t=0;t<s;t++)ju(64).update(0===t?n:i).digest(i),r.set(i.subarray(0,32),32*t);const a=new Uint8Array(ju(t-32*s).update(i).digest());return r.set(a,32*s),r}function pl(t,e,r,i){return t.fn.XOR(e.byteOffset,r.byteOffset,i.byteOffset),e}function gl(t,e,r,i){return t.fn.G(e.byteOffset,r.byteOffset,i.byteOffset,t.refs.gZ.byteOffset),i}function ml(t,e,r,i){return t.fn.G2(e.byteOffset,r.byteOffset,i.byteOffset,t.refs.gZ.byteOffset),i}function*wl(t,e,r,i,n,s,a,o){t.refs.prngTmp.fill(0);const c=t.refs.prngTmp.subarray(0,48);yl(c,e,0),yl(c,r,8),yl(c,i,16),yl(c,n,24),yl(c,s,32),yl(c,$u,40);for(let e=1;e<=a;e++){yl(t.refs.prngTmp,e,c.length);const r=ml(t,t.refs.ZERO1024,t.refs.prngTmp,t.refs.prngR);for(let t=1===e?8*o:0;t<r.length;t+=8)yield r.subarray(t,t+8)}return[]}const Al=1024,bl=64*Al;function vl(t,{memory:e,instance:r}){if(!ll)throw Error("BigEndian system not supported");const i=function({type:t,version:e,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(t,e,r,i)=>{if(e<r||e>i)throw Error(`${t} size should be between ${r} and ${i} bytes`)};if(t!==$u||e!==Xu)throw Error("Unsupported type or version");return u("password",i,sl,nl),u("salt",n,il,rl),u("tag",r,el,tl),u("memory",c,8*o,al),s&&u("associated data",s,0,ol),a&&u("secret",a,0,cl),{type:t,version:e,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:$u,version:Xu,...t}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*hl+10*Al;if(e.buffer.byteLength<l){const t=Math.ceil((l-e.buffer.byteLength)/bl);e.grow(t)}let f=0;c.gZ=new Uint8Array(e.buffer,f,hl),f+=c.gZ.length,c.prngR=new Uint8Array(e.buffer,f,hl),f+=c.prngR.length,c.prngTmp=new Uint8Array(e.buffer,f,hl),f+=c.prngTmp.length,c.ZERO1024=new Uint8Array(e.buffer,f,1024),f+=c.ZERO1024.length;const y=new Uint32Array(e.buffer,f,2);f+=y.length*Uint32Array.BYTES_PER_ELEMENT;const d={fn:h,refs:c},p=new Uint8Array(e.buffer,f,hl);f+=p.length;const g=new Uint8Array(e.buffer,f,i.memorySize*hl),m=new Uint8Array(e.buffer,0,f),w=function(t){const e=ju(ul),r=new Uint8Array(4),i=new Uint8Array(24);fl(i,t.lanes,0),fl(i,t.tagLength,4),fl(i,t.memorySize,8),fl(i,t.passes,12),fl(i,t.version,16),fl(i,t.type,20);const n=[i];t.password?(n.push(fl(new Uint8Array(4),t.password.length,0)),n.push(t.password)):n.push(r);t.salt?(n.push(fl(new Uint8Array(4),t.salt.length,0)),n.push(t.salt)):n.push(r);t.secret?(n.push(fl(new Uint8Array(4),t.secret.length,0)),n.push(t.secret)):n.push(r);t.ad?(n.push(fl(new Uint8Array(4),t.ad.length,0)),n.push(t.ad)):n.push(r);e.update(function(t){if(1===t.length)return t[0];let e=0;for(let r=0;r<t.length;r++){if(!(t[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");e+=t[r].length}const r=new Uint8Array(e);let i=0;return t.forEach((t=>{r.set(t,i),i+=t.length})),r}(n));const s=e.digest();return new Uint8Array(s)}(i),A=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(A))),v=(t,e)=>(b[t][e]=g.subarray(t*A*1024+1024*e,t*A*1024+1024*e+hl),b[t][e]);for(let t=0;t<i.lanes;t++){const e=new Uint8Array(w.length+8);e.set(w),fl(e,0,w.length),fl(e,t,w.length+4),dl(hl,e,v(t,0)),fl(e,1,w.length),dl(hl,e,v(t,1))}const E=A/4;for(let t=0;t<i.passes;t++)for(let e=0;e<4;e++){const r=0===t&&e<=1;for(let n=0;n<i.lanes;n++){let s=0===e&&0===t?2:0;const a=r?wl(d,t,n,e,u,i.passes,E,s):null;for(;s<E;s++){const c=e*E+s,h=c>0?b[n][c-1]:b[n][A-1],u=r?a.next().value:h;o(y.byteOffset,u.byteOffset,n,i.lanes,t,e,s,4,E);const l=y[0],f=y[1];0===t&&v(n,c),gl(d,h,b[l][f],t>0?p:b[n][c]),t>0&&pl(d,b[n][c],p,b[n][c])}}}const k=b[0][A-1];for(let t=1;t<i.lanes;t++)pl(d,k,k,b[t][A-1]);const S=dl(i.tagLength,k,new Uint8Array(i.tagLength));return m.fill(0),e.grow(0),S}let El;async function kl(t,e){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(t,e,r){const i={env:{memory:t}};if(void 0===El)try{const t=await e(i);return El=!0,t}catch(t){El=!1}return(El?e:r)(i)}(r,t,e);return t=>vl(t,{instance:i.instance,memory:r})}function Sl(t,e,r,i){function n(t,e,r){var i=r?WebAssembly.instantiateStreaming:WebAssembly.instantiate,n=r?WebAssembly.compileStreaming:WebAssembly.compile;return e?i(t,e):n(t)}var s;if(e){var a=require("fs"),o=require("path");return new Promise(((t,r)=>{a.readFile(o.resolve(__dirname,e),((e,s)=>{null!=e?r(e):t(n(s,i,!1))}))}))}if(s=Buffer.from(r,"base64"),t){var c=new WebAssembly.Module(s);return i?new WebAssembly.Instance(c,i):c}return n(s,i,!1)}var Il=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>kl((t=>Sl(0,null,"AGFzbQEAAAABKwdgBH9/f38AYAABf2AAAGADf39/AGAJf39/f39/f39/AX9gAX8AYAF/AX8CEwEDZW52Bm1lbW9yeQIBkAiAgAQDCgkCAwAABAEFBgEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwACAkcyAAMFZ2V0TFoABBlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAgJc3RhY2tTYXZlAAUMc3RhY2tSZXN0b3JlAAYKc3RhY2tBbGxvYwAHCQcBAEEBCwEACs0gCQMAAQtYAQJ/A0AgACAEQQR0IgNqIAIgA2r9AAQAIAEgA2r9AAQA/VH9CwQAIAAgA0EQciIDaiACIANq/QAEACABIANq/QAEAP1R/QsEACAEQQJqIgRBwABHDQALC7ceAgt7A38DQCADIBFBBHQiD2ogASAPav0ABAAgACAPav0ABAD9USIF/QsEACACIA9qIAX9CwQAIAMgD0EQciIPaiABIA9q/QAEACAAIA9q/QAEAP1RIgX9CwQAIAIgD2ogBf0LBAAgEUECaiIRQcAARw0ACwNAIAMgEEEHdGoiAEEQaiAA/QAEcCAA/QAEMCIFIAD9AAQQIgT9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAQgBP0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9USIJQSD9ywEgCUEg/c0B/VAiCSAA/QAEUCIG/c4BIAkgCf0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIGIAX9USIFQSj9ywEgBUEY/c0B/VAiCCAE/c4BIAggCP0NAAECAwgJCgsAAQIDCAkKCyAEIAT9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIKIAogCf1RIgVBMP3LASAFQRD9zQH9UCIFIAb9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgkgCP1RIgRBAf3LASAEQT/9zQH9UCIMIAD9AARgIAD9AAQgIgQgAP0ABAAiBv3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBv1RIghBIP3LASAIQSD9zQH9UCIIIABBQGsiAf0ABAAiB/3OASAIIAj9DQABAgMICQoLAAECAwgJCgsgByAH/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiByAE/VEiBEEo/csBIARBGP3NAf1QIgsgBv3OASALIAv9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAI/VEiBEEw/csBIARBEP3NAf1QIgQgB/3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgByAH/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCCAL/VEiB0EB/csBIAdBP/3NAf1QIg0gDf0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eHyIH/c4BIAcgB/0NAAECAwgJCgsAAQIDCAkKCyAKIAr9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIKIAQgBSAF/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/VEiC0Eg/csBIAtBIP3NAf1QIgsgCP3OASALIAv9DQABAgMICQoLAAECAwgJCgsgCCAI/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCCAH/VEiB0Eo/csBIAdBGP3NAf1QIgcgCv3OASAHIAf9DQABAgMICQoLAAECAwgJCgsgCiAK/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiDv0LBAAgACAGIA0gDCAM/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4fIgr9zgEgCiAK/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgYgBSAEIAT9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9USIFQSD9ywEgBUEg/c0B/VAiBSAJ/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAJIAn9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJIAr9USIEQSj9ywEgBEEY/c0B/VAiCiAG/c4BIAogCv0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIE/QsEACAAIAQgBf1RIgVBMP3LASAFQRD9zQH9UCIFIA4gC/1RIgRBMP3LASAEQRD9zQH9UCIEIAT9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwRgIAAgBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwRwIAEgBCAI/c4BIAQgBP0NAAECAwgJCgsAAQIDCAkKCyAIIAj9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIE/QsEACAAIAUgCf3OASAFIAX9DQABAgMICQoLAAECAwgJCgsgCSAJ/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCf0LBFAgACAEIAf9USIFQQH9ywEgBUE//c0B/VAiBSAJIAr9USIEQQH9ywEgBEE//c0B/VAiBCAE/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEICAAIAQgBSAF/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEMCAQQQFqIhBBCEcNAAtBACEQA0AgAyAQQQR0aiIAQYABaiAA/QAEgAcgAP0ABIADIgUgAP0ABIABIgT9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAQgBP0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9USIJQSD9ywEgCUEg/c0B/VAiCSAA/QAEgAUiBv3OASAJIAn9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAF/VEiBUEo/csBIAVBGP3NAf1QIgggBP3OASAIIAj9DQABAgMICQoLAAECAwgJCgsgBCAE/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCiAKIAn9USIFQTD9ywEgBUEQ/c0B/VAiBSAG/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJIAj9USIEQQH9ywEgBEE//c0B/VAiDCAA/QAEgAYgAP0ABIACIgQgAP0ABAAiBv3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBv1RIghBIP3LASAIQSD9zQH9UCIIIAD9AASABCIH/c4BIAggCP0NAAECAwgJCgsAAQIDCAkKCyAHIAf9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIHIAT9USIEQSj9ywEgBEEY/c0B/VAiCyAG/c4BIAsgC/0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIGIAj9USIEQTD9ywEgBEEQ/c0B/VAiBCAH/c4BIAQgBP0NAAECAwgJCgsAAQIDCAkKCyAHIAf9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIIIAv9USIHQQH9ywEgB0E//c0B/VAiDSAN/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4fIgf9zgEgByAH/Q0AAQIDCAkKCwABAgMICQoLIAogCv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgogBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9USILQSD9ywEgC0Eg/c0B/VAiCyAI/c4BIAsgC/0NAAECAwgJCgsAAQIDCAkKCyAIIAj9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIIIAf9USIHQSj9ywEgB0EY/c0B/VAiByAK/c4BIAcgB/0NAAECAwgJCgsAAQIDCAkKCyAKIAr9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIO/QsEACAAIAYgDSAMIAz9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh8iCv3OASAKIAr9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAFIAQgBP0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/1RIgVBIP3LASAFQSD9zQH9UCIFIAn9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAkgCf0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgkgCv1RIgRBKP3LASAEQRj9zQH9UCIKIAb9zgEgCiAK/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9CwQAIAAgBCAF/VEiBUEw/csBIAVBEP3NAf1QIgUgDiAL/VEiBEEw/csBIARBEP3NAf1QIgQgBP0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/0LBIAGIAAgBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwSAByAAIAQgCP3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgCCAI/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBP0LBIAEIAAgBSAJ/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAJIAn9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJ/QsEgAUgACAEIAf9USIFQQH9ywEgBUE//c0B/VAiBSAJIAr9USIEQQH9ywEgBEE//c0B/VAiBCAE/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEgAIgACAEIAUgBf0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/0LBIADIBBBAWoiEEEIRw0AC0EAIRADQCACIBBBBHQiAGoiASAAIANq/QAEACAB/QAEAP1R/QsEACACIABBEHIiAWoiDyABIANq/QAEACAP/QAEAP1R/QsEACACIABBIHIiAWoiDyABIANq/QAEACAP/QAEAP1R/QsEACACIABBMHIiAGoiASAAIANq/QAEACAB/QAEAP1R/QsEACAQQQRqIhBBwABHDQALCxYAIAAgASACIAMQAiAAIAIgAiADEAILewIBfwF+IAIhCSABNQIAIQogBCAFcgRAIAEoAgQgA3AhCQsgACAJNgIAIAAgB0EBayAFIAQbIAhsIAZBAWtBAEF/IAYbIAIgCUYbaiIBIAVBAWogCGxBACAEG2ogAa0gCiAKfkIgiH5CIIinQX9zaiAHIAhscDYCBCAACwQAIwALBgAgACQACxAAIwAgAGtBcHEiACQAIAALBQBBgAgL",t)),(t=>Sl(0,null,"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",t)))});exports.AEADEncryptedDataPacket=Gs,exports.Argon2OutOfMemoryError=rn,exports.Argon2S2K=an,exports.CleartextMessage=Ta,exports.CompressedDataPacket=Qs,exports.KDFParams=zi,exports.LiteralDataPacket=ks,exports.MarkerPacket=class{static get tag(){return L.packet.marker}read(t){return 80===t[0]&&71===t[1]&&80===t[2]}write(){return new Uint8Array([80,71,80])}},exports.Message=xa,exports.OnePassSignaturePacket=Ds,exports.PacketList=Ms,exports.PaddingPacket=class{static get tag(){return L.packet.padding}constructor(){this.padding=null}read(t){}write(){return this.padding}async createPadding(t){this.padding=await en.random.getRandomBytes(t)}},exports.PrivateKey=Ca,exports.PublicKey=Ia,exports.PublicKeyEncryptedSessionKeyPacket=qs,exports.PublicKeyPacket=Zs,exports.PublicSubkeyPacket=Ws,exports.SecretKeyPacket=Xs,exports.SecretSubkeyPacket=ra,exports.Signature=na,exports.SignaturePacket=Bs,exports.Subkey=ba,exports.SymEncryptedIntegrityProtectedDataPacket=Fs,exports.SymEncryptedSessionKeyPacket=Vs,exports.SymmetricallyEncryptedDataPacket=Ys,exports.TrustPacket=class{static get tag(){return L.packet.trust}read(){throw new Fr("Trust packets are not supported")}write(){throw new Fr("Trust packets are not supported")}},exports.UnparseablePacket=zr,exports.UserAttributePacket=$s,exports.UserIDPacket=ea,exports.armor=tt,exports.config=N,exports.createCleartextMessage=async function({text:t,...e}){if(!t)throw Error("createCleartextMessage: must pass options object containing `text`");if(!F.isString(t))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(e);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new Ta(t)},exports.createMessage=async function({text:t,binary:e,filename:r,date:i=new Date,format:n=(void 0!==t?"utf8":"binary"),...s}){const a=void 0!==t?t:e;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(t&&!F.isString(t)&&!F.isStream(t))throw Error("createMessage: options.text must be a string or stream");if(e&&!F.isUint8Array(e)&&!F.isStream(e))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=F.isStream(a),h=new ks(i);void 0!==t?h.setText(a,L.write(L.literal,n)):h.setBytes(a,L.write(L.literal,n)),void 0!==r&&h.setFilename(r);const u=new Ms;u.push(h);const l=new xa(u);return l.fromStream=c,l},exports.decrypt=async function({message:t,decryptionKeys:e,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(Ha(h={...N,...h}),La(t),n=za(n),e=za(e),r=za(r),i=za(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await t.decrypt(e,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),qa(l,t),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=v([l.data,Q((async()=>{await F.anyPromise(l.signatures.map((t=>t.verified)))}))])}return l.data=await Ga(l.data),l}catch(t){throw F.wrapError("Error decrypting message",t)}},exports.decryptKey=async function({privateKey:t,passphrase:e,config:r,...i}){Ha(r={...N,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!t.isPrivate())throw Error("Cannot decrypt a public key");const s=t.clone(!0),a=F.isArray(e)?e:[e];try{return await Promise.all(s.getKeys().map((t=>F.anyPromise(a.map((e=>t.keyPacket.decrypt(e))))))),await s.validate(r),s}catch(t){throw s.clearPrivateParams(),F.wrapError("Error decrypting private key",t)}},exports.decryptSessionKeys=async function({message:t,decryptionKeys:e,passwords:r,date:i=new Date,config:n,...s}){if(Ha(n={...N,...n}),La(t),e=za(e),r=za(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await t.decryptSessionKeys(e,r,void 0,i,n)}catch(t){throw F.wrapError("Error decrypting session keys",t)}},exports.encrypt=async function({message:t,encryptionKeys:e,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:f=[],signatureNotations:y=[],config:d,...p}){if(Ha(d={...N,...d}),La(t),Oa(s),e=za(e),r=za(r),i=za(i),c=za(c),h=za(h),l=za(l),f=za(f),y=za(y),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const g=Object.keys(p);if(g.length>0)throw Error("Unknown option: "+g.join(", "));r||(r=[]);try{if((r.length||a)&&(t=await t.sign(r,a,c,u,l,y,d)),t=t.compress(await async function(t=[],e=new Date,r=[],i=N){const n=L.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(t.map((async function(t,n){const a=(await t.getPrimarySelfSignature(e,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(e,u,f,d),d),t=await t.encrypt(e,i,n,o,h,u,f,d),"object"===s)return t;return Ga("armored"===s?t.armor(d):t.write())}catch(t){throw F.wrapError("Error encrypting message",t)}},exports.encryptKey=async function({privateKey:t,passphrase:e,config:r,...i}){Ha(r={...N,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!t.isPrivate())throw Error("Cannot encrypt a public key");const s=t.clone(!0),a=s.getKeys(),o=F.isArray(e)?e:Array(a.length).fill(e);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(t,e)=>{const{keyPacket:i}=t;await i.encrypt(o[e],r),i.clearPrivateParams()}))),s}catch(t){throw s.clearPrivateParams(),F.wrapError("Error encrypting private key",t)}},exports.encryptSessionKey=async function({data:t,algorithm:e,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(Ha(u={...N,...u}),function(t,e){if(!F.isUint8Array(t))throw Error("Parameter ["+(e||"data")+"] must be of type Uint8Array")}(t),function(t,e){if(!F.isString(t))throw Error("Parameter ["+(e||"data")+"] must be of type String")}(e,"algorithm"),Oa(s),i=za(i),n=za(n),o=za(o),h=za(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const f=Object.keys(l);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return ja(await xa.encryptSessionKey(t,e,r,i,n,a,o,c,h,u),s,u)}catch(t){throw F.wrapError("Error encrypting session key",t)}},exports.enums=L,exports.generateKey=async function({userIDs:t=[],passphrase:e,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...f}){Ha(l={...N,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),t=za(t);const y=Object.keys(f);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(0===t.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const d={userIDs:t,passphrase:e,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:t,revocationCertificate:e}=await async function(t,e){t.sign=!0,(t=da(t)).subkeys=t.subkeys.map(((e,r)=>da(t.subkeys[r],t)));let r=[aa(t,e)];r=r.concat(t.subkeys.map((t=>sa(t,e))));const i=await Promise.all(r),n=await Pa(i[0],i.slice(1),t,e),s=await n.getRevocationCertificate(t.date,e);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(d,l);return t.getKeys().forEach((({keyPacket:t})=>wa(t,l))),{privateKey:ja(t,u,l),publicKey:"symmetric"!==r?ja(t.toPublic(),u,l):null,revocationCertificate:e}}catch(t){throw F.wrapError("Error generating keypair",t)}},exports.generateSessionKey=async function({encryptionKeys:t,date:e=new Date,encryptionUserIDs:r=[],config:i,...n}){if(Ha(i={...N,...i}),t=za(t),r=za(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await xa.generateSessionKey(t,e,r,i)}catch(t){throw F.wrapError("Error generating session key",t)}},exports.readCleartextMessage=async function({cleartextMessage:t,config:e,...r}){if(e={...N,...e},!t)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!F.isString(t))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await X(t);if(n.type!==L.armor.signed)throw Error("No cleartext signed message.");const s=await Ms.fromBinary(n.data,_a,e);!function(t,e){const r=function(t){const r=t=>e=>t.hashAlgorithm===e;for(let i=0;i<e.length;i++)if(e[i].constructor.tag===L.packet.signature&&!t.some(r(e[i])))return!1;return!0},i=[];if(t.forEach((t=>{const e=t.match(/^Hash: (.+)$/);if(!e)throw Error('Only "Hash" header allowed in cleartext signed message');{const t=e[1].replace(/\s/g,"").split(",").map((t=>{try{return L.write(L.hash,t.toLowerCase())}catch(e){throw Error("Unknown hash algorithm in armor header: "+t.toLowerCase())}}));i.push(...t)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new na(s);return new Ta(n.text,a)},exports.readKey=async function({armoredKey:t,binaryKey:e,config:r,...i}){if(r={...N,...r},!t&&!e)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(t&&!F.isString(t))throw Error("readKey: options.armoredKey must be a string");if(e&&!F.isUint8Array(e))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(t){const{type:e,data:r}=await X(t);if(e!==L.armor.publicKey&&e!==L.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=e;return Ka(await Ms.fromBinary(s,Ba,r))},exports.readKeys=async function({armoredKeys:t,binaryKeys:e,config:r,...i}){r={...N,...r};let n=t||e;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(t&&!F.isString(t))throw Error("readKeys: options.armoredKeys must be a string");if(e&&!F.isUint8Array(e))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(t){const{type:e,data:r}=await X(t);if(e!==L.armor.publicKey&&e!==L.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await Ms.fromBinary(n,Ba,r),c=o.indexOfTag(L.packet.publicKey,L.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let t=0;t<c.length;t++){const e=Ka(o.slice(c[t],c[t+1]));a.push(e)}return a},exports.readMessage=async function({armoredMessage:t,binaryMessage:e,config:r,...i}){r={...N,...r};let n=t||e;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(t&&!F.isString(t)&&!F.isStream(t))throw Error("readMessage: options.armoredMessage must be a string or stream");if(e&&!F.isUint8Array(e)&&!F.isStream(e))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=F.isStream(n);if(t){const{type:t,data:e}=await X(n);if(t!==L.armor.message)throw Error("Armored text not of type message");n=e}const o=await Ms.fromBinary(n,Da,r),c=new xa(o);return c.fromStream=a,c},exports.readPrivateKey=async function({armoredKey:t,binaryKey:e,config:r,...i}){if(r={...N,...r},!t&&!e)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(t&&!F.isString(t))throw Error("readPrivateKey: options.armoredKey must be a string");if(e&&!F.isUint8Array(e))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(t){const{type:e,data:r}=await X(t);if(e!==L.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=e;const a=await Ms.fromBinary(s,Ba,r);return new Ca(a)},exports.readPrivateKeys=async function({armoredKeys:t,binaryKeys:e,config:r}){r={...N,...r};let i=t||e;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(t&&!F.isString(t))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(e&&!F.isUint8Array(e))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(t){const{type:e,data:r}=await X(t);if(e!==L.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await Ms.fromBinary(i,Ba,r),a=s.indexOfTag(L.packet.secretKey);if(0===a.length)throw Error("No secret key packet found");for(let t=0;t<a.length;t++){const e=s.slice(a[t],a[t+1]),r=new Ca(e);n.push(r)}return n},exports.readSignature=async function({armoredSignature:t,binarySignature:e,config:r,...i}){r={...N,...r};let n=t||e;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(t&&!F.isString(t))throw Error("readSignature: options.armoredSignature must be a string");if(e&&!F.isUint8Array(e))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(t){const{type:t,data:e}=await X(n);if(t!==L.armor.signature)throw Error("Armored text not of type signature");n=e}const a=await Ms.fromBinary(n,ia,r);return new na(a)},exports.reformatKey=async function({privateKey:t,userIDs:e=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){Ha(a={...N,...a}),e=za(e);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===e.length&&6!==t.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:t,userIDs:e,passphrase:r,keyExpirationTime:i,date:n};try{const{key:t,revocationCertificate:e}=await async function(t,e){t=o(t);const{privateKey:r}=t;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:t})=>t.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;t.subkeys||(t.subkeys=await Promise.all(r.subkeys.map((async t=>{const r=t.keyPacket,n={key:i,bind:r},s=await oa(t.bindingSignatures,i,L.signature.subkeyBinding,n,null,e).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&L.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&L.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((t=>t.keyPacket));if(t.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");t.subkeys=t.subkeys.map((e=>o(e,t)));const s=await Pa(i,n,t,e),a=await s.getRevocationCertificate(t.date,e);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(t,e={}){return t.keyExpirationTime=t.keyExpirationTime||e.keyExpirationTime,t.passphrase=F.isString(t.passphrase)?t.passphrase:e.passphrase,t.date=t.date||e.date,t}}(h,a);return{privateKey:ja(t,s,a),publicKey:ja(t.toPublic(),s,a),revocationCertificate:e}}catch(t){throw F.wrapError("Error reformatting keypair",t)}},exports.revokeKey=async function({key:t,revocationCertificate:e,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){Ha(s={...N,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=e?await t.applyRevocationCertificate(e,i,s):await t.revoke(r,i,s);return a.isPrivate()?{privateKey:ja(a,n,s),publicKey:ja(a.toPublic(),n,s)}:{privateKey:null,publicKey:ja(a,n,s)}}catch(t){throw F.wrapError("Error revoking key",t)}},exports.sign=async function({message:t,signingKeys:e,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(Ha(c={...N,...c}),Na(t),Oa(r),e=za(e),n=za(n),a=za(a),o=za(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(t instanceof Ta&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(t instanceof Ta&&i)throw Error("Cannot detach-sign a cleartext message");if(!e||0===e.length)throw Error("No signing keys provided");try{let h;if(h=i?await t.signDetached(e,void 0,n,s,a,o,c):await t.sign(e,void 0,n,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),i&&(h=C(t.packets.write(),(async(t,e)=>{await Promise.all([E(h,e),M(t).catch((()=>{}))])}))),Ga(h)}catch(t){throw F.wrapError("Error signing message",t)}},exports.unarmor=X,exports.verify=async function({message:t,verificationKeys:e,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(Ha(a={...N,...a}),Na(t),e=za(e),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(t instanceof Ta&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(t instanceof Ta&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await t.verifyDetached(n,e,s,a):await t.verify(e,s,a),o.data="binary"===i?t.getLiteralData():t.getText(),t.fromStream&&qa(o,t),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=v([o.data,Q((async()=>{await F.anyPromise(o.signatures.map((t=>t.verified)))}))])}return o.data=await Ga(o.data),o}catch(t){throw F.wrapError("Error verifying signed message",t)}};
|
|
15
15
|
//# sourceMappingURL=openpgp.min.cjs.map
|