@protontech/openpgp 6.0.0-alpha.1.patch.0 → 6.0.0-beta.0

package/dist/node/openpgp.min.cjs

@@ -1,15 +1,15 @@
-/*! OpenPGP.js v6.0.0-alpha.1.patch.0 - 2024-03-01 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
-"use strict";const t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var e=require("module"),r=require("node:crypto"),i="undefined"!=typeof document?document.currentScript:null;function n(t){var e=Object.create(null);return t&&Object.keys(t).forEach((function(r){if("default"!==r){var i=Object.getOwnPropertyDescriptor(t,r);Object.defineProperty(e,r,i.get?i:{enumerable:!0,get:function(){return t[r]}})}})),e.default=t,Object.freeze(e)}var s=/*#__PURE__*/n(r);const a=Symbol("doneWritingPromise"),o=Symbol("doneWritingResolve"),c=Symbol("doneWritingReject"),h=Symbol("readingIndex");class u extends Array{constructor(){super(),Object.setPrototypeOf(this,u.prototype),this[a]=new Promise(((t,e)=>{this[o]=t,this[c]=e})),this[a].catch((()=>{}))}}function l(t){return t&&t.getReader&&Array.isArray(t)}function f(t){if(!l(t)){const e=t.getWriter(),r=e.releaseLock;return e.releaseLock=()=>{e.closed.catch((function(){})),r.call(e)},e}this.stream=t}function y(e){if(l(e))return"array";if(t.ReadableStream&&t.ReadableStream.prototype.isPrototypeOf(e))return"web";if(e&&!(t.ReadableStream&&e instanceof t.ReadableStream)&&"function"==typeof e._read&&"object"==typeof e._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!e||!e.getReader)&&"web-like"}function d(t){return Uint8Array.prototype.isPrototypeOf(t)}function p(t){if(1===t.length)return t[0];let e=0;for(let r=0;r<t.length;r++){if(!d(t[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");e+=t[r].length}const r=new Uint8Array(e);let i=0;return t.forEach((function(t){r.set(t,i),i+=t.length})),r}u.prototype.getReader=function(){return void 0===this[h]&&(this[h]=0),{read:async()=>(await this[a],this[h]===this.length?{value:void 0,done:!0}:{value:this[this[h]++],done:!1})}},u.prototype.readToEnd=async function(t){await this[a];const e=t(this.slice(this[h]));return this.length=0,e},u.prototype.clone=function(){const t=new u;return t[a]=this[a].then((()=>{t.push(...this)})),t},f.prototype.write=async function(t){this.stream.push(t)},f.prototype.close=async function(){this.stream[o]()},f.prototype.abort=async function(t){return this.stream[c](t),t},f.prototype.releaseLock=function(){},"object"==typeof t.process&&t.process.versions;const g=new WeakSet,m=Symbol("externalBuffer");function w(t){if(this.stream=t,t[m]&&(this[m]=t[m].slice()),l(t)){const e=t.getReader();return this._read=e.read.bind(e),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(y(t)){const e=t.getReader();return this._read=e.read.bind(e),this._releaseLock=()=>{e.closed.catch((function(){})),e.releaseLock()},void(this._cancel=e.cancel.bind(e))}let e=!1;this._read=async()=>e||g.has(t)?{value:void 0,done:!0}:(e=!0,{value:t,done:!1}),this._releaseLock=()=>{if(e)try{g.add(t)}catch(t){}}}function A(t){return y(t)?t:new ReadableStream({start(e){e.enqueue(t),e.close()}})}function b(t){if(y(t))return t;const e=new u;return(async()=>{const r=_(e);await r.write(t),await r.close()})(),e}function v(t){return t.some((t=>y(t)&&!l(t)))?function(t){t=t.map(A);const e=S((async function(t){await Promise.all(i.map((e=>x(e,t))))}));let r=Promise.resolve();const i=t.map(((i,n)=>C(i,((i,s)=>(r=r.then((()=>E(i,e.writable,{preventClose:n!==t.length-1}))),r)))));return e.readable}(t):t.some((t=>l(t)))?function(t){const e=new u;let r=Promise.resolve();return t.forEach(((i,n)=>(r=r.then((()=>E(i,e,{preventClose:n!==t.length-1}))),r))),e}(t):"string"==typeof t[0]?t.join(""):p(t)}async function E(t,e,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(y(t)&&!l(t)){t=A(t);try{if(t[m]){const r=_(e);for(let e=0;e<t[m].length;e++)await r.ready,await r.write(t[m][e]);r.releaseLock()}await t.pipeTo(e,{preventClose:r,preventAbort:i,preventCancel:n})}catch(t){}return}const s=R(t=b(t)),a=_(e);try{for(;;){await a.ready;const{done:t,value:e}=await s.read();if(t){r||await a.close();break}await a.write(e)}}catch(t){i||await a.abort(t)}finally{s.releaseLock(),a.releaseLock()}}function k(t,e){const r=new TransformStream(e);return E(t,r.writable),r.readable}function S(t){let e,r,i=!1;return{readable:new ReadableStream({start(t){r=t},pull(){e?e():i=!0},cancel:t},{highWaterMark:0}),writable:new WritableStream({write:async function(t){r.enqueue(t),i?i=!1:(await new Promise((t=>{e=t})),e=null)},close:r.close.bind(r),abort:r.error.bind(r)})}}function I(t,e=(()=>{}),r=(()=>{})){if(l(t)){const i=new u;return(async()=>{const n=_(i);try{const i=await M(t),s=e(i),a=r();let o;o=void 0!==s&&void 0!==a?v([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(t){await n.abort(t)}})(),i}if(y(t))return k(t,{async transform(t,r){try{const i=await e(t);void 0!==i&&r.enqueue(i)}catch(t){r.error(t)}},async flush(t){try{const e=await r();void 0!==e&&t.enqueue(e)}catch(e){t.error(e)}}});const i=e(t),n=r();return void 0!==i&&void 0!==n?v([i,n]):void 0!==i?i:n}function C(t,e){if(y(t)&&!l(t)){let r;const i=new TransformStream({start(t){r=t}}),n=E(t,i.writable),s=S((async function(t){r.error(t),await n,await new Promise(setTimeout)}));return e(i.readable,s.writable),s.readable}t=b(t);const r=new u;return e(t,r),r}function B(t,e){let r;const i=C(t,((t,n)=>{const s=R(t);s.remainder=()=>(s.releaseLock(),E(t,n),i),r=e(s)}));return r}function K(t){if(l(t))return t.clone();if(y(t)){const e=function(t){if(l(t))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(y(t)){const e=A(t).tee();return e[0][m]=e[1][m]=t[m],e}return[U(t),U(t)]}(t);return D(t,e[0]),e[1]}return U(t)}function P(t){return l(t)?K(t):y(t)?new ReadableStream({start(e){const r=C(t,(async(t,r)=>{const i=R(t),n=_(r);try{for(;;){await n.ready;const{done:t,value:r}=await i.read();if(t){try{e.close()}catch(t){}return void await n.close()}try{e.enqueue(r)}catch(t){}await n.write(r)}}catch(t){e.error(t),await n.abort(t)}}));D(t,r)}}):U(t)}function D(t,e){Object.entries(Object.getOwnPropertyDescriptors(t.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(e):i.get=i.get.bind(e),Object.defineProperty(t,r,i))}))}function U(t,e=0,r=1/0){if(l(t))throw Error("Not implemented");if(y(t)){if(e>=0&&r>=0){let i=0;return k(t,{transform(t,n){i<r?(i+t.length>=e&&n.enqueue(U(t,Math.max(e-i,0),r-i)),i+=t.length):n.terminate()}})}if(e<0&&(r<0||r===1/0)){let i=[];return I(t,(t=>{t.length>=-e?i=[t]:i.push(t)}),(()=>U(v(i),e,r)))}if(0===e&&r<0){let i;return I(t,(t=>{const n=i?v([i,t]):t;if(n.length>=-r)return i=U(n,r),U(n,e,r);i=n}))}return console.warn(`stream.slice(input, ${e}, ${r}) not implemented efficiently.`),Q((async()=>U(await M(t),e,r)))}return t[m]&&(t=v(t[m].concat([t]))),d(t)?t.subarray(e,r===1/0?t.length:r):t.slice(e,r)}async function M(t,e=v){return l(t)?t.readToEnd(e):y(t)?R(t).readToEnd(e):t}async function x(t,e){if(y(t)){if(t.cancel){const r=await t.cancel(e);return await new Promise(setTimeout),r}if(t.destroy)return t.destroy(e),await new Promise(setTimeout),e}}function Q(t){const e=new u;return(async()=>{const r=_(e);try{await r.write(await t()),await r.close()}catch(t){await r.abort(t)}})(),e}function R(t){return new w(t)}function _(t){return new f(t)}w.prototype.read=async function(){if(this[m]&&this[m].length){return{done:!1,value:this[m].shift()}}return this._read()},w.prototype.releaseLock=function(){this[m]&&(this.stream[m]=this[m]),this._releaseLock()},w.prototype.cancel=function(t){return this._cancel(t)},w.prototype.readLine=async function(){let t,e=[];for(;!t;){let{done:r,value:i}=await this.read();if(i+="",r)return e.length?v(e):void 0;const n=i.indexOf("\n")+1;n&&(t=v(e.concat(i.substr(0,n))),e=[]),n!==i.length&&e.push(i.substr(n))}return this.unshift(...e),t},w.prototype.readByte=async function(){const{done:t,value:e}=await this.read();if(t)return;const r=e[0];return this.unshift(U(e,1)),r},w.prototype.readBytes=async function(t){const e=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return e.length?v(e):void 0;if(e.push(n),r+=n.length,r>=t){const r=v(e);return this.unshift(U(r,t)),U(r,0,t)}}},w.prototype.peekBytes=async function(t){const e=await this.readBytes(t);return this.unshift(e),e},w.prototype.unshift=function(...t){this[m]||(this[m]=[]),1===t.length&&d(t[0])&&this[m].length&&t[0].length&&this[m][0].byteOffset>=t[0].length?this[m][0]=new Uint8Array(this[m][0].buffer,this[m][0].byteOffset-t[0].length,this[m][0].byteLength+t[0].length):this[m].unshift(...t.filter((t=>t&&t.length)))},w.prototype.readToEnd=async function(t=v){const e=[];for(;;){const{done:t,value:r}=await this.read();if(t)break;e.push(r)}return t(e)};const T=Symbol("byValue");var L={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(t,e){if("number"==typeof e&&(e=this.read(t,e)),void 0!==t[e])return t[e];throw Error("Invalid enum value.")},read:function(t,e){if(t[T]||(t[T]=[],Object.entries(t).forEach((([e,r])=>{t[T][r]=e}))),void 0!==t[T][e])return t[T][e];throw Error("Invalid enum value.")}},N={preferredHashAlgorithm:L.hash.sha256,preferredSymmetricAlgorithm:L.symmetric.aes256,preferredCompressionAlgorithm:L.compression.uncompressed,aeadProtect:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:L.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,s2kType:L.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,revocationsExpire:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([L.symmetric.aes128,L.symmetric.aes192,L.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-alpha.1.patch.0",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],useEllipticFallback:!0,rejectHashAlgorithms:new Set([L.hash.md5,L.hash.ripemd]),rejectMessageHashAlgorithms:new Set([L.hash.md5,L.hash.ripemd,L.hash.sha1]),rejectPublicKeyAlgorithms:new Set([L.publicKey.elgamal,L.publicKey.dsa]),rejectCurves:new Set([L.curve.secp256k1]),checkEdDSAFaultySignatures:!0};const O=(()=>{try{return"development"===process.env.NODE_ENV}catch(t){}return!1})(),F={isString:function(t){return"string"==typeof t||t instanceof String},nodeRequire:e.createRequire("undefined"==typeof document?require("url").pathToFileURL(__filename).href:i&&i.src||new URL("openpgp.min.cjs",document.baseURI).href),isArray:function(t){return t instanceof Array},isUint8Array:d,isStream:y,getBigInteger:async function(){if("undefined"!=typeof BigInt){const{default:t}=await Promise.resolve().then((function(){return Ja}));return t}{const{default:t}=await Promise.resolve().then((function(){return Xa}));return t}},getNobleCurve:async(t,e)=>{if(!N.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return eu}));switch(t){case L.publicKey.ecdh:case L.publicKey.ecdsa:{const t=r.get(e);if(!t)throw Error("Unsupported curve");return t}case L.publicKey.x448:return r.get("x448");case L.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(t){let e=0;for(let r=0;r<t.length;r++)e+=256**r*t[t.length-1-r];return e},writeNumber:function(t,e){const r=new Uint8Array(e);for(let i=0;i<e;i++)r[i]=t>>8*(e-i-1)&255;return r},readDate:function(t){const e=F.readNumber(t);return new Date(1e3*e)},writeDate:function(t){const e=Math.floor(t.getTime()/1e3);return F.writeNumber(e,4)},normalizeDate:function(t=Date.now()){return null===t||t===1/0?t:new Date(1e3*Math.floor(+t/1e3))},readMPI:function(t){const e=(t[0]<<8|t[1])+7>>>3;return F.readExactSubarray(t,2,2+e)},readExactSubarray:function(t,e,r){if(t.length<r-e)throw Error("Input array too short");return t.subarray(e,r)},leftPad(t,e){const r=new Uint8Array(e),i=e-t.length;return r.set(t,i),r},uint8ArrayToMPI:function(t){const e=F.uint8ArrayBitLength(t);if(0===e)throw Error("Zero MPI");const r=t.subarray(t.length-Math.ceil(e/8)),i=new Uint8Array([(65280&e)>>8,255&e]);return F.concatUint8Array([i,r])},uint8ArrayBitLength:function(t){let e;for(e=0;e<t.length&&0===t[e];e++);if(e===t.length)return 0;const r=t.subarray(e);return 8*(r.length-1)+F.nbits(r[0])},hexToUint8Array:function(t){const e=new Uint8Array(t.length>>1);for(let r=0;r<t.length>>1;r++)e[r]=parseInt(t.substr(r<<1,2),16);return e},uint8ArrayToHex:function(t){const e="0123456789abcdef";let r="";return t.forEach((t=>{r+=e[t>>4]+e[15&t]})),r},stringToUint8Array:function(t){return I(t,(t=>{if(!F.isString(t))throw Error("stringToUint8Array: Data must be in the form of a string");const e=new Uint8Array(t.length);for(let r=0;r<t.length;r++)e[r]=t.charCodeAt(r);return e}))},uint8ArrayToString:function(t){const e=[],r=16384,i=(t=new Uint8Array(t)).length;for(let n=0;n<i;n+=r)e.push(String.fromCharCode.apply(String,t.subarray(n,n+r<i?n+r:i)));return e.join("")},encodeUTF8:function(t){const e=new TextEncoder("utf-8");function r(t,r=!1){return e.encode(t,{stream:!r})}return I(t,r,(()=>r("",!0)))},decodeUTF8:function(t){const e=new TextDecoder("utf-8");function r(t,r=!1){return e.decode(t,{stream:!r})}return I(t,r,(()=>r(new Uint8Array,!0)))},concat:v,concatUint8Array:p,equalsUint8Array:function(t,e){if(!F.isUint8Array(t)||!F.isUint8Array(e))throw Error("Data must be in the form of a Uint8Array");if(t.length!==e.length)return!1;for(let r=0;r<t.length;r++)if(t[r]!==e[r])return!1;return!0},writeChecksum:function(t){let e=0;for(let r=0;r<t.length;r++)e=e+t[r]&65535;return F.writeNumber(e,2)},printDebug:function(t){O&&console.log("[OpenPGP.js debug]",t)},printDebugError:function(t){O&&console.error("[OpenPGP.js debug]",t)},nbits:function(t){let e=1,r=t>>>16;return 0!==r&&(t=r,e+=16),r=t>>8,0!==r&&(t=r,e+=8),r=t>>4,0!==r&&(t=r,e+=4),r=t>>2,0!==r&&(t=r,e+=2),r=t>>1,0!==r&&(t=r,e+=1),e},double:function(t){const e=new Uint8Array(t.length),r=t.length-1;for(let i=0;i<r;i++)e[i]=t[i]<<1^t[i+1]>>7;return e[r]=t[r]<<1^135*(t[0]>>7),e},shiftRight:function(t,e){if(e)for(let r=t.length-1;r>=0;r--)t[r]>>=e,r>0&&(t[r]|=t[r-1]<<8-e);return t},getWebCrypto:function(){const e=void 0!==t&&t.crypto&&t.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!e)throw Error("The WebCrypto API is not available");return e},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(t){if(!F.isString(t))return!1;return/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/.test(t)},canonicalizeEOL:function(t){let e=!1;return I(t,(t=>{let r;e&&(t=F.concatUint8Array([new Uint8Array([13]),t])),13===t[t.length-1]?(e=!0,t=t.subarray(0,-1)):e=!1;const i=[];for(let e=0;r=t.indexOf(10,e)+1,r;e=r)13!==t[r-2]&&i.push(r);if(!i.length)return t;const n=new Uint8Array(t.length+i.length);let s=0;for(let e=0;e<i.length;e++){const r=t.subarray(i[e-1]||0,i[e]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(t.subarray(i[i.length-1]||0),s),n}),(()=>e?new Uint8Array([13]):void 0))},nativeEOL:function(t){let e=!1;return I(t,(t=>{let r;13===(t=e&&10!==t[0]?F.concatUint8Array([new Uint8Array([13]),t]):new Uint8Array(t))[t.length-1]?(e=!0,t=t.subarray(0,-1)):e=!1;let i=0;for(let e=0;e!==t.length;e=r){r=t.indexOf(13,e)+1,r||(r=t.length);const n=r-(10===t[r]?1:0);e&&t.copyWithin(i,e,n),i+=n-e}return t.subarray(0,i)}),(()=>e?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(t){return t.split("\n").map((t=>{let e=t.length-1;for(;e>=0&&(" "===t[e]||"\t"===t[e]||"\r"===t[e]);e--);return t.substr(0,e+1)})).join("\n")},wrapError:function(t,e){if(!e)return Error(t);try{e.message=t+": "+e.message}catch(t){}return e},constructAllowedPackets:function(t){const e={};return t.forEach((t=>{if(!t.tag)throw Error("Invalid input: expected a packet class");e[t.tag]=t})),e},anyPromise:function(t){return new Promise((async(e,r)=>{let i;await Promise.all(t.map((async t=>{try{e(await t)}catch(t){i=t}}))),r(i)}))},selectUint8Array:function(t,e,r){const i=Math.max(e.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=e[i]&256-t|r[i]&255+t,s+=t&i<e.length|1-t&i<r.length;return n.subarray(0,s)},selectUint8:function(t,e,r){return e&256-t|r&255+t},isAES:function(t){return t===L.symmetric.aes128||t===L.symmetric.aes192||t===L.symmetric.aes256}},H=F.getNodeBuffer();let z,G;function q(t){let e=new Uint8Array;return I(t,(t=>{e=F.concatUint8Array([e,t]);const r=[],i=Math.floor(e.length/45),n=45*i,s=z(e.subarray(0,n));for(let t=0;t<i;t++)r.push(s.substr(60*t,60)),r.push("\n");return e=e.subarray(n),r.join("")}),(()=>e.length?z(e)+"\n":""))}function j(t){let e="";return I(t,(t=>{e+=t;let r=0;const i=[" ","\t","\r","\n"];for(let t=0;t<i.length;t++){const n=i[t];for(let t=e.indexOf(n);-1!==t;t=e.indexOf(n,t+1))r++}let n=e.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(e[n])&&r--;const s=G(e.substr(0,n));return e=e.substr(n),s}),(()=>G(e)))}function V(t){return j(t.replace(/-/g,"+").replace(/_/g,"/"))}function Z(t,e){let r=q(t).replace(/[\r\n]/g,"");return e&&(r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,"")),r}function J(t){const e=t.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!e)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(e[1])?L.armor.multipartSection:/MESSAGE, PART \d+/.test(e[1])?L.armor.multipartLast:/SIGNED MESSAGE/.test(e[1])?L.armor.signed:/MESSAGE/.test(e[1])?L.armor.message:/PUBLIC KEY BLOCK/.test(e[1])?L.armor.publicKey:/PRIVATE KEY BLOCK/.test(e[1])?L.armor.privateKey:/SIGNATURE/.test(e[1])?L.armor.signature:void 0}function Y(t,e){let r="";return e.showVersion&&(r+="Version: "+e.versionString+"\n"),e.showComment&&(r+="Comment: "+e.commentString+"\n"),t&&(r+="Comment: "+t+"\n"),r+="\n",r}function W(t){for(let e=0;e<t.length;e++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(t[e])||F.printDebugError(Error("Improperly formatted armor header: "+t[e])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(t[e])||F.printDebugError(Error("Unknown header: "+t[e]))}function $(t){let e=t;const r=t.lastIndexOf("=");return r>=0&&r!==t.length-1&&(e=t.slice(0,r)),e}function X(t){return new Promise((async(e,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=j(C(t,(async(t,f)=>{const y=R(t);try{for(;;){let t=await y.readLine();if(void 0===t)throw Error("Misformed armored text");if(t=F.removeTrailingSpaces(t.replace(/[\r\n]/g,"")),s)if(o)c||s!==L.armor.signed||(i.test(t)?(u=u.join("\r\n"),c=!0,W(h),h=[],o=!1):u.push(t.replace(/^- /,"")));else if(i.test(t)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(t)){if(W(h),o=!0,c||s!==L.armor.signed){e({text:u,data:l,headers:a,type:s});break}}else h.push(t);else i.test(t)&&(s=J(t))}}catch(t){return void r(t)}const d=_(f);try{for(;;){await d.ready;const{done:t,value:e}=await y.read();if(t)throw Error("Misformed armored text");const r=e+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let t=await y.readToEnd();t.length||(t=""),t=r+t,t=F.removeTrailingSpaces(t.replace(/\r/g,""));const e=t.split(i);if(1===e.length)throw Error("Misformed armored text");const n=$(e[0].slice(0,-1));await d.write(n);break}await d.write(r)}await d.ready,await d.close()}catch(t){await d.abort(t)}})))}catch(t){r(t)}})).then((async t=>(l(t.data)&&(t.data=await M(t.data)),t)))}function tt(t,e,r,i,n,s=N){let a,o;t===L.armor.signed&&(a=e.text,o=e.hash,e=e.data);const c=[];switch(t){case L.armor.multipartSection:c.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case L.armor.multipartLast:c.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case L.armor.signed:c.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),c.push(o?`Hash: ${o}\n\n`:"\n"),c.push(a.replace(/^-/gm,"- -")),c.push("\n-----BEGIN PGP SIGNATURE-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP SIGNATURE-----\n");break;case L.armor.message:c.push("-----BEGIN PGP MESSAGE-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP MESSAGE-----\n");break;case L.armor.publicKey:c.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case L.armor.privateKey:c.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case L.armor.signature:c.push("-----BEGIN PGP SIGNATURE-----\n"),c.push(Y(n,s)),c.push(q(e)),c.push("-----END PGP SIGNATURE-----\n")}return F.concat(c)}async function et(t){switch(t){case L.symmetric.aes128:case L.symmetric.aes192:case L.symmetric.aes256:throw Error("Not a legacy cipher");case L.symmetric.cast5:case L.symmetric.blowfish:case L.symmetric.twofish:case L.symmetric.tripledes:{const{legacyCiphers:e}=await Promise.resolve().then((function(){return gu})),r=e.get(t);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function rt(t){switch(t){case L.symmetric.aes128:case L.symmetric.aes192:case L.symmetric.aes256:case L.symmetric.twofish:return 16;case L.symmetric.blowfish:case L.symmetric.cast5:case L.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function it(t){switch(t){case L.symmetric.aes128:case L.symmetric.blowfish:case L.symmetric.cast5:return 16;case L.symmetric.aes192:case L.symmetric.tripledes:return 24;case L.symmetric.aes256:case L.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function nt(t){return{keySize:it(t),blockSize:rt(t)}}H?(z=t=>H.from(t).toString("base64"),G=t=>{const e=H.from(t,"base64");return new Uint8Array(e.buffer,e.byteOffset,e.byteLength)}):(z=t=>btoa(F.uint8ArrayToString(t)),G=t=>F.stringToUint8Array(atob(t)));var st=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:nt,getLegacyCipher:et});function at(t,e){let r=t[0],i=t[1],n=t[2],s=t[3];r=ct(r,i,n,s,e[0],7,-680876936),s=ct(s,r,i,n,e[1],12,-389564586),n=ct(n,s,r,i,e[2],17,606105819),i=ct(i,n,s,r,e[3],22,-1044525330),r=ct(r,i,n,s,e[4],7,-176418897),s=ct(s,r,i,n,e[5],12,1200080426),n=ct(n,s,r,i,e[6],17,-1473231341),i=ct(i,n,s,r,e[7],22,-45705983),r=ct(r,i,n,s,e[8],7,1770035416),s=ct(s,r,i,n,e[9],12,-1958414417),n=ct(n,s,r,i,e[10],17,-42063),i=ct(i,n,s,r,e[11],22,-1990404162),r=ct(r,i,n,s,e[12],7,1804603682),s=ct(s,r,i,n,e[13],12,-40341101),n=ct(n,s,r,i,e[14],17,-1502002290),i=ct(i,n,s,r,e[15],22,1236535329),r=ht(r,i,n,s,e[1],5,-165796510),s=ht(s,r,i,n,e[6],9,-1069501632),n=ht(n,s,r,i,e[11],14,643717713),i=ht(i,n,s,r,e[0],20,-373897302),r=ht(r,i,n,s,e[5],5,-701558691),s=ht(s,r,i,n,e[10],9,38016083),n=ht(n,s,r,i,e[15],14,-660478335),i=ht(i,n,s,r,e[4],20,-405537848),r=ht(r,i,n,s,e[9],5,568446438),s=ht(s,r,i,n,e[14],9,-1019803690),n=ht(n,s,r,i,e[3],14,-187363961),i=ht(i,n,s,r,e[8],20,1163531501),r=ht(r,i,n,s,e[13],5,-1444681467),s=ht(s,r,i,n,e[2],9,-51403784),n=ht(n,s,r,i,e[7],14,1735328473),i=ht(i,n,s,r,e[12],20,-1926607734),r=ut(r,i,n,s,e[5],4,-378558),s=ut(s,r,i,n,e[8],11,-2022574463),n=ut(n,s,r,i,e[11],16,1839030562),i=ut(i,n,s,r,e[14],23,-35309556),r=ut(r,i,n,s,e[1],4,-1530992060),s=ut(s,r,i,n,e[4],11,1272893353),n=ut(n,s,r,i,e[7],16,-155497632),i=ut(i,n,s,r,e[10],23,-1094730640),r=ut(r,i,n,s,e[13],4,681279174),s=ut(s,r,i,n,e[0],11,-358537222),n=ut(n,s,r,i,e[3],16,-722521979),i=ut(i,n,s,r,e[6],23,76029189),r=ut(r,i,n,s,e[9],4,-640364487),s=ut(s,r,i,n,e[12],11,-421815835),n=ut(n,s,r,i,e[15],16,530742520),i=ut(i,n,s,r,e[2],23,-995338651),r=lt(r,i,n,s,e[0],6,-198630844),s=lt(s,r,i,n,e[7],10,1126891415),n=lt(n,s,r,i,e[14],15,-1416354905),i=lt(i,n,s,r,e[5],21,-57434055),r=lt(r,i,n,s,e[12],6,1700485571),s=lt(s,r,i,n,e[3],10,-1894986606),n=lt(n,s,r,i,e[10],15,-1051523),i=lt(i,n,s,r,e[1],21,-2054922799),r=lt(r,i,n,s,e[8],6,1873313359),s=lt(s,r,i,n,e[15],10,-30611744),n=lt(n,s,r,i,e[6],15,-1560198380),i=lt(i,n,s,r,e[13],21,1309151649),r=lt(r,i,n,s,e[4],6,-145523070),s=lt(s,r,i,n,e[11],10,-1120210379),n=lt(n,s,r,i,e[2],15,718787259),i=lt(i,n,s,r,e[9],21,-343485551),t[0]=pt(r,t[0]),t[1]=pt(i,t[1]),t[2]=pt(n,t[2]),t[3]=pt(s,t[3])}function ot(t,e,r,i,n,s){return e=pt(pt(e,t),pt(i,s)),pt(e<<n|e>>>32-n,r)}function ct(t,e,r,i,n,s,a){return ot(e&r|~e&i,t,e,n,s,a)}function ht(t,e,r,i,n,s,a){return ot(e&i|r&~i,t,e,n,s,a)}function ut(t,e,r,i,n,s,a){return ot(e^r^i,t,e,n,s,a)}function lt(t,e,r,i,n,s,a){return ot(r^(e|~i),t,e,n,s,a)}function ft(t){const e=[];let r;for(r=0;r<64;r+=4)e[r>>2]=t.charCodeAt(r)+(t.charCodeAt(r+1)<<8)+(t.charCodeAt(r+2)<<16)+(t.charCodeAt(r+3)<<24);return e}const yt="0123456789abcdef".split("");function dt(t){let e="",r=0;for(;r<4;r++)e+=yt[t>>8*r+4&15]+yt[t>>8*r&15];return e}function pt(t,e){return t+e&4294967295}const gt=F.getWebCrypto(),mt=F.getNodeCrypto(),wt=mt&&mt.getHashes();function At(t){if(mt&&wt.includes(t))return async function(e){const r=mt.createHash(t);return I(e,(t=>{r.update(t)}),(()=>new Uint8Array(r.digest())))}}function bt(t,e){const r=async()=>{const{nobleHashes:e}=await Promise.resolve().then((function(){return Lu})),r=e.get(t);if(!r)throw Error("Unsupported hash");return r};return async function(t){if(l(t)&&(t=await M(t)),F.isStream(t)){const e=(await r()).create();return I(t,(t=>{e.update(t)}),(()=>e.digest()))}if(gt&&e)return new Uint8Array(await gt.digest(e,t));return(await r())(t)}}var vt={md5:At("md5")||async function(t){const e=function(t){const e=t.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=t.length;i+=64)at(r,ft(t.substring(i-64,i)));t=t.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<t.length;i++)n[i>>2]|=t.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(at(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*e,at(r,n),r}(F.uint8ArrayToString(t));return F.hexToUint8Array(function(t){for(let e=0;e<t.length;e++)t[e]=dt(t[e]);return t.join("")}(e))},sha1:At("sha1")||bt("sha1","SHA-1"),sha224:At("sha224")||bt("sha224"),sha256:At("sha256")||bt("sha256","SHA-256"),sha384:At("sha384")||bt("sha384","SHA-384"),sha512:At("sha512")||bt("sha512","SHA-512"),ripemd:At("ripemd160")||bt("ripemd160"),sha3_256:At("sha3-256")||bt("sha3_256"),sha3_512:At("sha3-512")||bt("sha3_512"),digest:function(t,e){switch(t){case L.hash.md5:return this.md5(e);case L.hash.sha1:return this.sha1(e);case L.hash.ripemd:return this.ripemd(e);case L.hash.sha256:return this.sha256(e);case L.hash.sha384:return this.sha384(e);case L.hash.sha512:return this.sha512(e);case L.hash.sha224:return this.sha224(e);case L.hash.sha3_256:return this.sha3_256(e);case L.hash.sha3_512:return this.sha3_512(e);default:throw Error("Unsupported hash function")}},getHashByteLength:function(t){switch(t){case L.hash.md5:return 16;case L.hash.sha1:case L.hash.ripemd:return 20;case L.hash.sha256:return 32;case L.hash.sha384:return 48;case L.hash.sha512:return 64;case L.hash.sha224:return 28;case L.hash.sha3_256:return 32;case L.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(t){switch(t){case L.hash.md5:case L.hash.sha1:case L.hash.ripemd:case L.hash.sha224:case L.hash.sha256:return 64;case L.hash.sha384:case L.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}},Et=function(){var t,e,r=!1;function i(r,i){var n=t[(e[r]+e[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=t[255-e[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){t=[],e=[];var i,n,s=1;for(i=0;i<255;i++)t[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=t[i],e[t[i]]=i;t[255]=t[0],e[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var f=1;f<4;f++)a[f][u]=a[f-1][u]>>>8|a[f-1][u]<<24,o[f][l]=o[f-1][l]>>>8|o[f-1][l]<<24}c=!0}var u=function(t,e){c||h();var r=new Uint32Array(e);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(t,e,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0,b=0,v=0,E=0,k=0;var S=new t.Uint32Array(r),I=new t.Uint8Array(r);function C(t,e,r,o,c,h,u,l){t=t|0;e=e|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0;f=r|0x400,y=r|0x800,d=r|0xc00;c=c^S[(t|0)>>2],h=h^S[(t|4)>>2],u=u^S[(t|8)>>2],l=l^S[(t|12)>>2];for(A=16;(A|0)<=o<<4;A=A+16|0){p=S[(r|c>>22&1020)>>2]^S[(f|h>>14&1020)>>2]^S[(y|u>>6&1020)>>2]^S[(d|l<<2&1020)>>2]^S[(t|A|0)>>2],g=S[(r|h>>22&1020)>>2]^S[(f|u>>14&1020)>>2]^S[(y|l>>6&1020)>>2]^S[(d|c<<2&1020)>>2]^S[(t|A|4)>>2],m=S[(r|u>>22&1020)>>2]^S[(f|l>>14&1020)>>2]^S[(y|c>>6&1020)>>2]^S[(d|h<<2&1020)>>2]^S[(t|A|8)>>2],w=S[(r|l>>22&1020)>>2]^S[(f|c>>14&1020)>>2]^S[(y|h>>6&1020)>>2]^S[(d|u<<2&1020)>>2]^S[(t|A|12)>>2];c=p,h=g,u=m,l=w}i=S[(e|c>>22&1020)>>2]<<24^S[(e|h>>14&1020)>>2]<<16^S[(e|u>>6&1020)>>2]<<8^S[(e|l<<2&1020)>>2]^S[(t|A|0)>>2],n=S[(e|h>>22&1020)>>2]<<24^S[(e|u>>14&1020)>>2]<<16^S[(e|l>>6&1020)>>2]<<8^S[(e|c<<2&1020)>>2]^S[(t|A|4)>>2],s=S[(e|u>>22&1020)>>2]<<24^S[(e|l>>14&1020)>>2]<<16^S[(e|c>>6&1020)>>2]<<8^S[(e|h<<2&1020)>>2]^S[(t|A|8)>>2],a=S[(e|l>>22&1020)>>2]<<24^S[(e|c>>14&1020)>>2]<<16^S[(e|h>>6&1020)>>2]<<8^S[(e|u<<2&1020)>>2]^S[(t|A|12)>>2]}function B(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;C(0x0000,0x0800,0x1000,k,t,e,r,i)}function K(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;var s=0;C(0x0400,0x0c00,0x2000,k,t,i,r,e);s=n,n=a,a=s}function P(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o^t,c^e,h^r,u^l);o=i,c=n,h=s,u=a}function D(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;var f=0;C(0x0400,0x0c00,0x2000,k,t,l,r,e);f=n,n=a,a=f;i=i^o,n=n^c,s=s^h,a=a^u;o=t,c=e,h=r,u=l}function U(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);o=i=i^t,c=n=n^e,h=s=s^r,u=a=a^l}function M(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);i=i^t,n=n^e,s=s^r,a=a^l;o=t,c=e,h=r,u=l}function x(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);o=i,c=n,h=s,u=a;i=i^t,n=n^e,s=s^r,a=a^l}function Q(t,e,r,o){t=t|0;e=e|0;r=r|0;o=o|0;C(0x0000,0x0800,0x1000,k,l,f,y,d);d=~w&d|w&d+1;y=~m&y|m&y+((d|0)==0);f=~g&f|g&f+((y|0)==0);l=~p&l|p&l+((f|0)==0);i=i^t;n=n^e;s=s^r;a=a^o}function R(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0;t=t^o,e=e^c,r=r^h,i=i^u;n=A|0,s=b|0,a=v|0,l=E|0;for(;(g|0)<128;g=g+1|0){if(n>>>31){f=f^t,y=y^e,d=d^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;m=i&1;i=i>>>1|r<<31,r=r>>>1|e<<31,e=e>>>1|t<<31,t=t>>>1;if(m)t=t^0xe1000000}o=f,c=y,h=d,u=p}function _(t){t=t|0;k=t}function T(t,e,r,o){t=t|0;e=e|0;r=r|0;o=o|0;i=t,n=e,s=r,a=o}function L(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;o=t,c=e,h=r,u=i}function N(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;l=t,f=e,y=r,d=i}function O(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;p=t,g=e,m=r,w=i}function F(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;d=~w&d|w&i,y=~m&y|m&r,f=~g&f|g&e,l=~p&l|p&t}function H(t){t=t|0;if(t&15)return-1;I[t|0]=i>>>24,I[t|1]=i>>>16&255,I[t|2]=i>>>8&255,I[t|3]=i&255,I[t|4]=n>>>24,I[t|5]=n>>>16&255,I[t|6]=n>>>8&255,I[t|7]=n&255,I[t|8]=s>>>24,I[t|9]=s>>>16&255,I[t|10]=s>>>8&255,I[t|11]=s&255,I[t|12]=a>>>24,I[t|13]=a>>>16&255,I[t|14]=a>>>8&255,I[t|15]=a&255;return 16}function z(t){t=t|0;if(t&15)return-1;I[t|0]=o>>>24,I[t|1]=o>>>16&255,I[t|2]=o>>>8&255,I[t|3]=o&255,I[t|4]=c>>>24,I[t|5]=c>>>16&255,I[t|6]=c>>>8&255,I[t|7]=c&255,I[t|8]=h>>>24,I[t|9]=h>>>16&255,I[t|10]=h>>>8&255,I[t|11]=h&255,I[t|12]=u>>>24,I[t|13]=u>>>16&255,I[t|14]=u>>>8&255,I[t|15]=u&255;return 16}function G(){B(0,0,0,0);A=i,b=n,v=s,E=a}function q(t,e,r){t=t|0;e=e|0;r=r|0;var o=0;if(e&15)return-1;while((r|0)>=16){V[t&7](I[e|0]<<24|I[e|1]<<16|I[e|2]<<8|I[e|3],I[e|4]<<24|I[e|5]<<16|I[e|6]<<8|I[e|7],I[e|8]<<24|I[e|9]<<16|I[e|10]<<8|I[e|11],I[e|12]<<24|I[e|13]<<16|I[e|14]<<8|I[e|15]);I[e|0]=i>>>24,I[e|1]=i>>>16&255,I[e|2]=i>>>8&255,I[e|3]=i&255,I[e|4]=n>>>24,I[e|5]=n>>>16&255,I[e|6]=n>>>8&255,I[e|7]=n&255,I[e|8]=s>>>24,I[e|9]=s>>>16&255,I[e|10]=s>>>8&255,I[e|11]=s&255,I[e|12]=a>>>24,I[e|13]=a>>>16&255,I[e|14]=a>>>8&255,I[e|15]=a&255;o=o+16|0,e=e+16|0,r=r-16|0}return o|0}function j(t,e,r){t=t|0;e=e|0;r=r|0;var i=0;if(e&15)return-1;while((r|0)>=16){Z[t&1](I[e|0]<<24|I[e|1]<<16|I[e|2]<<8|I[e|3],I[e|4]<<24|I[e|5]<<16|I[e|6]<<8|I[e|7],I[e|8]<<24|I[e|9]<<16|I[e|10]<<8|I[e|11],I[e|12]<<24|I[e|13]<<16|I[e|14]<<8|I[e|15]);i=i+16|0,e=e+16|0,r=r-16|0}return i|0}var V=[B,K,P,D,U,M,x,Q];var Z=[P,R];return{set_rounds:_,set_state:T,set_iv:L,set_nonce:N,set_mask:O,set_counter:F,get_state:H,get_iv:z,gcm_init:G,cipher:q,mac:j}}({Uint8Array,Uint32Array},t,e);return u.set_key=function(t,e,i,s,a,c,h,l,f){var y=r.subarray(0,60),d=r.subarray(256,316);y.set([e,i,s,a,c,h,l,f]);for(var p=t,g=1;p<4*t+28;p++){var m=y[p-1];(p%t==0||8===t&&p%t==4)&&(m=n[m>>>24]<<24^n[m>>>16&255]<<16^n[m>>>8&255]<<8^n[255&m]),p%t==0&&(m=m<<8^m>>>24^g<<24,g=g<<1^(128&g?27:0)),y[p]=y[p-t]^m}for(var w=0;w<p;w+=4)for(var A=0;A<4;A++){m=y[p-(4+w)+(4-A)%4];d[w+A]=w<4||w>=p-4?m:o[0][n[m>>>24]]^o[1][n[m>>>16&255]]^o[2][n[m>>>8&255]]^o[3][n[255&m]]}u.set_rounds(t+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function kt(t){return t instanceof Uint8Array}function St(t,e,r,i,n){const s=t.length-e,a=s<n?s:n;return t.set(r.subarray(i,i+a),e),a}function It(...t){const e=t.reduce(((t,e)=>t+e.length),0),r=new Uint8Array(e);let i=0;for(let e=0;e<t.length;e++)r.set(t[e],i),i+=t[e].length;return r}class Ct extends Error{constructor(...t){super(...t)}}class Bt extends Error{constructor(...t){super(...t)}}class Kt extends Error{constructor(...t){super(...t)}}const Pt=[],Dt=[];class Ut{constructor(t,e,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=t,this.iv=e,this.padding=r,this.acquire_asm(n,s)}acquire_asm(t,e){return void 0!==this.heap&&void 0!==this.asm||(this.heap=t||Pt.pop()||function(t,e){const r=t?t.byteLength:e||65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return t||new Uint8Array(new ArrayBuffer(r))}().subarray(Et.HEAP_DATA),this.asm=e||Dt.pop()||new Et(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(Pt.push(this.heap),Dt.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(t,e){const{asm:r}=this.acquire_asm(),i=t.length;if(16!==i&&24!==i&&32!==i)throw new Bt("illegal key size");const n=new DataView(t.buffer,t.byteOffset,t.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==e){if(16!==e.length)throw new Bt("illegal iv size");let t=new DataView(e.buffer,e.byteOffset,e.byteLength);r.set_iv(t.getUint32(0),t.getUint32(4),t.getUint32(8),t.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(t){if(!kt(t))throw new TypeError("data isn't of expected type");let{heap:e,asm:r}=this.acquire_asm(),i=Et.ENC[this.mode],n=Et.HEAP_DATA,s=this.pos,a=this.len,o=0,c=t.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=St(e,s+a,t,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(e.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:t,asm:e}=this.acquire_asm(),r=Et.ENC[this.mode],i=Et.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let e=0;e<a;++e)t[n+s+e]=a;s+=a,o=s}else if(s%16)throw new Bt("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&e.cipher(r,i+n,s),o&&c.set(t.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(t){if(!kt(t))throw new TypeError("data isn't of expected type");let{heap:e,asm:r}=this.acquire_asm(),i=Et.DEC[this.mode],n=Et.HEAP_DATA,s=this.pos,a=this.len,o=0,c=t.length||0,h=0,u=a+c&-16,l=0,f=0;this.padding&&(l=a+c-u||16,u-=l);const y=new Uint8Array(u);for(;c>0;)f=St(e,s+a,t,o,c),a+=f,o+=f,c-=f,f=r.cipher(i,n+s,a-(c?0:l)),f&&y.set(e.subarray(s,s+f),h),h+=f,f<a?(s+=f,a-=f):(s=0,a=0);return this.pos=s,this.len=a,y}AES_Decrypt_finish(){let{heap:t,asm:e}=this.acquire_asm(),r=Et.DEC[this.mode],i=Et.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new Bt("data length must be a multiple of the block size");s+=16-s%16}if(e.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let e=t[n+a-1];if(e<1||e>16||e>a)throw new Kt("bad padding");let r=0;for(let i=e;i>1;i--)r|=e^t[n+a-i];if(r)throw new Kt("bad padding");a-=e}}const o=new Uint8Array(a);return a>0&&o.set(t.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class Mt{static encrypt(t,e,r){return new Mt(e,r).encrypt(t)}static decrypt(t,e,r){return new Mt(e,r).decrypt(t)}constructor(t,e,r){this.aes=r||new Ut(t,e,!0,"CFB"),delete this.aes.padding}encrypt(t){return It(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return It(this.aes.AES_Decrypt_process(t),this.aes.AES_Decrypt_finish())}}const xt=F.getWebCrypto(),Qt=F.getNodeCrypto(),Rt=Qt?Qt.getCiphers():[],_t={idea:Rt.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Rt.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Rt.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Rt.includes("bf-cfb")?"bf-cfb":void 0,aes128:Rt.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Rt.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Rt.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Tt{constructor(t,e,r){const{blockSize:i}=nt(t);this.key=e,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(t){const{keySize:e}=nt(t);return xt.importKey("raw",new Uint8Array(e),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(t,e){const r="AES-CBC";this.keyRef=this.keyRef||await xt.importKey("raw",this.key,r,!1,["encrypt"]);const i=await xt.encrypt({name:r,iv:e||this.zeroBlock},this.keyRef,t);return new Uint8Array(i).subarray(0,t.length)}async encryptChunk(t){const e=this.nextBlock.length-this.i,r=t.subarray(0,e);if(this.nextBlock.set(r,this.i),this.i+t.length>=2*this.blockSize){const r=(t.length-e)%this.blockSize,i=F.concatUint8Array([this.nextBlock,t.subarray(e,t.length-r)]),n=F.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return Lt(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(t.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const e=this.nextBlock;i=await this._runCBC(this.prevBlock),Lt(i,e),this.prevBlock=i.slice(),this.i=0;const n=t.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let t;if(0===this.i)t=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const e=this.nextBlock,r=await this._runCBC(this.prevBlock);Lt(r,e),t=r.subarray(0,e.length)}return this.clearSensitiveData(),t}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(t){const e=(await this._runCBC(F.concatUint8Array([new Uint8Array(this.blockSize),t]),this.iv)).subarray(0,t.length);return Lt(e,t),this.clearSensitiveData(),e}}function Lt(t,e){const r=Math.min(t.length,e.length);for(let i=0;i<r;i++)t[i]=t[i]^e[i]}var Nt=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i){const n=L.read(L.symmetric,t);if(Qt&&_t[n])return function(t,e,r,i){const n=L.read(L.symmetric,t),s=new Qt.createDecipheriv(_t[n],e,i);return I(r,(t=>new Uint8Array(s.update(t))))}(t,e,r,i);if(F.isAES(t))return function(t,e,r,i){if(F.isStream(r)){const t=new Mt(e,i);return I(r,(e=>t.aes.AES_Decrypt_process(e)),(()=>t.aes.AES_Decrypt_finish()))}return Mt.decrypt(r,e,i)}(0,e,r,i);const s=new(await et(t))(e),a=s.blockSize;let o=i,c=new Uint8Array;const h=t=>{t&&(c=F.concatUint8Array([c,t]));const e=new Uint8Array(c.length);let r,i=0;for(;t?c.length>=a:c.length;){const t=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)e[i++]=o[r]^t[r];c=c.subarray(a)}return e.subarray(0,i)};return I(r,h,h)},encrypt:async function(t,e,r,i,n){const s=L.read(L.symmetric,t);if(F.getNodeCrypto()&&_t[s])return function(t,e,r,i){const n=L.read(L.symmetric,t),s=new Qt.createCipheriv(_t[n],e,i);return I(r,(t=>new Uint8Array(s.update(t))))}(t,e,r,i);if(F.isAES(t))return async function(t,e,r,i){if(xt&&await Tt.isSupported(t)){const n=new Tt(t,e,i);return F.isStream(r)?I(r,(t=>n.encryptChunk(t)),(()=>n.finish())):n.encrypt(r)}{const t=new Mt(e,i);return I(r,(e=>t.aes.AES_Encrypt_process(e)),(()=>t.aes.AES_Encrypt_finish()))}}(t,e,r,i);const a=new(await et(t))(e),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=t=>{t&&(h=F.concatUint8Array([h,t]));const e=new Uint8Array(h.length);let r,i=0;for(;t?h.length>=o:h.length;){const t=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^t[r],e[i++]=c[r];h=h.subarray(o)}return e.subarray(0,i)};return I(r,u,u)}});class Ot{static encrypt(t,e,r){return new Ot(e,r).encrypt(t)}static decrypt(t,e,r){return new Ot(e,r).encrypt(t)}constructor(t,e,r){this.aes=r||new Ut(t,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(e)}encrypt(t){return It(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return It(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(t,e,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new Bt("illegal counter size");let t=Math.pow(2,r)-1;i.set_mask(0,0,t/4294967296|0,0|t)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===t)throw Error("nonce is required");{let e=t.length;if(!e||e>16)throw new Bt("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(t),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==e){if(e<0||e>=Math.pow(2,r))throw new Bt("illegal counter value");i.set_counter(0,0,e/4294967296|0,0|e)}}}class Ft{static encrypt(t,e,r=!0,i){return new Ft(e,i,r).encrypt(t)}static decrypt(t,e,r=!0,i){return new Ft(e,i,r).decrypt(t)}constructor(t,e,r=!0,i){this.aes=i||new Ut(t,e,r,"CBC")}encrypt(t){return It(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return It(this.aes.AES_Decrypt_process(t),this.aes.AES_Decrypt_finish())}}const Ht=F.getWebCrypto(),zt=F.getNodeCrypto(),Gt=16;function qt(t,e){const r=t.length-Gt;for(let i=0;i<Gt;i++)t[i+r]^=e[i];return t}const jt=new Uint8Array(Gt);async function Vt(t){const e=await async function(t){if(F.getNodeCrypto())return async function(e){const r=new zt.createCipheriv("aes-"+8*t.length+"-cbc",t,jt).update(e);return new Uint8Array(r)};if(F.getWebCrypto())try{return t=await Ht.importKey("raw",t,{name:"AES-CBC",length:8*t.length},!1,["encrypt"]),async function(e){const r=await Ht.encrypt({name:"AES-CBC",iv:jt,length:8*Gt},t,e);return new Uint8Array(r).subarray(0,r.byteLength-Gt)}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return async function(e){return Ft.encrypt(e,t,!1,jt)}}(t),r=F.double(await e(jt)),i=F.double(r);return async function(t){return(await e(function(t,e,r){if(t.length&&t.length%Gt==0)return qt(t,e);const i=new Uint8Array(t.length+(Gt-t.length%Gt));return i.set(t),i[t.length]=128,qt(i,r)}(t,r,i))).subarray(-Gt)}}const Zt=F.getWebCrypto(),Jt=F.getNodeCrypto(),Yt=F.getNodeBuffer(),Wt=16,$t=Wt,Xt=Wt,te=new Uint8Array(Wt),ee=new Uint8Array(Wt);ee[Wt-1]=1;const re=new Uint8Array(Wt);async function ie(t){const e=await Vt(t);return function(t,r){return e(F.concatUint8Array([t,r]))}}async function ne(t){if(F.getNodeCrypto())return async function(e,r){const i=new Jt.createCipheriv("aes-"+8*t.length+"-ctr",t,r),n=Yt.concat([i.update(e),i.final()]);return new Uint8Array(n)};if(F.getWebCrypto())try{const e=await Zt.importKey("raw",t,{name:"AES-CTR",length:8*t.length},!1,["encrypt"]);return async function(t,r){const i=await Zt.encrypt({name:"AES-CTR",counter:r,length:8*Wt},e,t);return new Uint8Array(i)}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return async function(e,r){return Ot.encrypt(e,t,r)}}async function se(t,e){if(t!==L.symmetric.aes128&&t!==L.symmetric.aes192&&t!==L.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([ie(e),ne(e)]);return{encrypt:async function(t,e,n){const[s,a]=await Promise.all([r(te,e),r(ee,n)]),o=await i(t,s),c=await r(re,o);for(let t=0;t<Xt;t++)c[t]^=a[t]^s[t];return F.concatUint8Array([o,c])},decrypt:async function(t,e,n){if(t.length<Xt)throw Error("Invalid EAX ciphertext");const s=t.subarray(0,-Xt),a=t.subarray(-Xt),[o,c,h]=await Promise.all([r(te,e),r(ee,n),r(re,s)]),u=h;for(let t=0;t<Xt;t++)u[t]^=c[t]^o[t];if(!F.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}re[Wt-1]=2,se.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[8+t]^=e[t];return r},se.blockLength=Wt,se.ivLength=$t,se.tagLength=Xt;const ae=16,oe=16;function ce(t){let e=0;for(let r=1;0==(t&r);r<<=1)e++;return e}function he(t,e){for(let r=0;r<t.length;r++)t[r]^=e[r];return t}function ue(t,e){return he(t.slice(),e)}const le=new Uint8Array(ae),fe=new Uint8Array([1]);async function ye(t,e){const{keySize:r}=nt(t);if(!F.isAES(t)||e.length!==r)throw Error("Unexpected algorithm or key size");let i=0;const n=t=>Ft.encrypt(t,e,!1),s=t=>Ft.decrypt(t,e,!1);let a;function o(t,e,r,s){const o=e.length/ae|0;!function(t,e){const r=F.nbits(Math.max(t.length,e.length)/ae|0)-1;for(let t=i+1;t<=r;t++)a[t]=F.double(a[t-1]);i=r}(e,s);const c=F.concatUint8Array([le.subarray(0,15-r.length),fe,r]),h=63&c[15];c[15]&=192;const u=n(c),l=F.concatUint8Array([u,ue(u.subarray(0,8),u.subarray(1,9))]),f=F.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),y=new Uint8Array(ae),d=new Uint8Array(e.length+oe);let p,g=0;for(p=0;p<o;p++)he(f,a[ce(p+1)]),d.set(he(t(ue(f,e)),f),g),he(y,t===n?e:d.subarray(g)),e=e.subarray(ae),g+=ae;if(e.length){he(f,a.x);const r=n(f);d.set(ue(e,r),g);const i=new Uint8Array(ae);i.set(t===n?e:d.subarray(g,-16),0),i[e.length]=128,he(y,i),g+=e.length}const m=he(n(he(he(y,f),a.$)),function(t){if(!t.length)return le;const e=t.length/ae|0,r=new Uint8Array(ae),i=new Uint8Array(ae);for(let s=0;s<e;s++)he(r,a[ce(s+1)]),he(i,n(ue(r,t))),t=t.subarray(ae);if(t.length){he(r,a.x);const e=new Uint8Array(ae);e.set(t,0),e[t.length]=128,he(e,r),he(i,n(e))}return i}(s));return d.set(m,g),d}return function(){const t=n(le),e=F.double(t);a=[],a[0]=F.double(e),a.x=t,a.$=e}(),{encrypt:async function(t,e,r){return o(n,t,e,r)},decrypt:async function(t,e,r){if(t.length<oe)throw Error("Invalid OCB ciphertext");const i=t.subarray(-16);t=t.subarray(0,-16);const n=o(s,t,e,r);if(F.equalsUint8Array(i,n.subarray(-16)))return n.subarray(0,-16);throw Error("Authentication tag mismatch")}}}ye.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[7+t]^=e[t];return r},ye.blockLength=ae,ye.ivLength=15,ye.tagLength=oe;const de=68719476704;class pe{static encrypt(t,e,r,i,n){return new pe(e,r,i,n).encrypt(t)}static decrypt(t,e,r,i,n){return new pe(e,r,i,n).decrypt(t)}constructor(t,e,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new Ut(t,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new Bt("illegal tagSize value");const o=e.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(e),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(Et.MAC.GCM,Et.HEAP_DATA,16),s.get_iv(Et.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(e),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>de)throw new Bt("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(t){return this.AES_GCM_encrypt(t)}decrypt(t){return this.AES_GCM_decrypt(t)}AES_GCM_Encrypt_process(t){let e=0,r=t.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>de)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=St(n,a+o,t,e,r),o+=u,e+=u,r-=u,u=i.cipher(Et.ENC.CTR,Et.HEAP_DATA+a,o),u=i.mac(Et.MAC.GCM,Et.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:t,heap:e}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);t.cipher(Et.ENC.CTR,Et.HEAP_DATA+s,a+15&-16),a&&o.set(e.subarray(s,s+a));let c=a;for(;15&c;c++)e[s+c]=0;t.mac(Et.MAC.GCM,Et.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return e[0]=0,e[1]=0,e[2]=0,e[3]=h>>>29,e[4]=h>>>21,e[5]=h>>>13&255,e[6]=h>>>5&255,e[7]=h<<3&255,e[8]=e[9]=e[10]=0,e[11]=u>>>29,e[12]=u>>>21&255,e[13]=u>>>13&255,e[14]=u>>>5&255,e[15]=u<<3&255,t.mac(Et.MAC.GCM,Et.HEAP_DATA,16),t.get_iv(Et.HEAP_DATA),t.set_counter(0,0,0,this.gamma0),t.cipher(Et.ENC.CTR,Et.HEAP_DATA,16),o.set(e.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(t){let e=0,r=t.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,f=0;if((s-1<<4)+c+r>de)throw new RangeError("counter overflow");const y=new Uint8Array(u);for(;r>l;)f=St(n,o+c,t,e,r-l),c+=f,e+=f,r-=f,f=i.mac(Et.MAC.GCM,Et.HEAP_DATA+o,f),f=i.cipher(Et.DEC.CTR,Et.HEAP_DATA+o,f),f&&y.set(n.subarray(o,o+f),h),s+=f>>>4,h+=f,o=0,c=0;return r>0&&(c+=St(n,0,t,e,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,y}AES_GCM_Decrypt_finish(){let{asm:t,heap:e}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new Ct("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(e.subarray(s+o,s+a));let u=o;for(;15&u;u++)e[s+u]=0;t.mac(Et.MAC.GCM,Et.HEAP_DATA+s,u),t.cipher(Et.DEC.CTR,Et.HEAP_DATA+s,u),o&&c.set(e.subarray(s,s+o));const l=void 0!==i?i.length:0,f=(n-1<<4)+a-r;e[0]=0,e[1]=0,e[2]=0,e[3]=l>>>29,e[4]=l>>>21,e[5]=l>>>13&255,e[6]=l>>>5&255,e[7]=l<<3&255,e[8]=e[9]=e[10]=0,e[11]=f>>>29,e[12]=f>>>21&255,e[13]=f>>>13&255,e[14]=f>>>5&255,e[15]=f<<3&255,t.mac(Et.MAC.GCM,Et.HEAP_DATA,16),t.get_iv(Et.HEAP_DATA),t.set_counter(0,0,0,this.gamma0),t.cipher(Et.ENC.CTR,Et.HEAP_DATA,16);let y=0;for(let t=0;t<r;++t)y|=h[t]^e[t];if(y)throw new Kt("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(t){const e=this.AES_GCM_Decrypt_process(t),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(e.length+r.length);return e.length&&i.set(e),r.length&&i.set(r,e.length),i}AES_GCM_encrypt(t){const e=this.AES_GCM_Encrypt_process(t),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(e.length+r.length);return e.length&&i.set(e),r.length&&i.set(r,e.length),i}_gcm_mac_process(t){let{asm:e,heap:r}=this.aes.acquire_asm(),i=0,n=t.length||0,s=0;for(;n>0;){for(s=St(r,0,t,i,n),i+=s,n-=s;15&s;)r[s++]=0;e.mac(Et.MAC.GCM,Et.HEAP_DATA,s)}}}const ge=F.getWebCrypto(),me=F.getNodeCrypto(),we=F.getNodeBuffer(),Ae=16,be="AES-GCM";async function ve(t,e){if(t!==L.symmetric.aes128&&t!==L.symmetric.aes192&&t!==L.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(F.getNodeCrypto())return{encrypt:async function(t,r,i=new Uint8Array){const n=new me.createCipheriv("aes-"+8*e.length+"-gcm",e,r);n.setAAD(i);const s=we.concat([n.update(t),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(t,r,i=new Uint8Array){const n=new me.createDecipheriv("aes-"+8*e.length+"-gcm",e,r);n.setAAD(i),n.setAuthTag(t.slice(t.length-Ae,t.length));const s=we.concat([n.update(t.slice(0,t.length-Ae)),n.final()]);return new Uint8Array(s)}};if(F.getWebCrypto())try{const t=await ge.importKey("raw",e,{name:be},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return pe.encrypt(i,e,n,s);const a=await ge.encrypt({name:be,iv:n,additionalData:s,tagLength:128},t,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===Ae)return pe.decrypt(i,e,n,s);try{const e=await ge.decrypt({name:be,iv:n,additionalData:s,tagLength:128},t,i);return new Uint8Array(e)}catch(t){if("OperationError"===t.name)throw Error("Authentication tag mismatch")}}}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return{encrypt:async function(t,r,i){return pe.encrypt(t,e,r,i)},decrypt:async function(t,r,i){return pe.decrypt(t,e,r,i)}}}ve.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[4+t]^=e[t];return r},ve.blockLength=16,ve.ivLength=12,ve.tagLength=Ae;var Ee={cfb:Nt,gcm:ve,experimentalGCM:ve,eax:se,ocb:ye};const ke=F.getNodeCrypto();function Se(t){const e=new Uint8Array(t);if(ke){const t=ke.randomBytes(e.length);e.set(t)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(e)}return e}async function Ie(t,e){const r=await F.getBigInteger();if(e.lt(t))throw Error("Illegal parameter value: max <= min");const i=e.sub(t);return new r(Se(i.byteLength()+8)).mod(i).add(t)}var Ce=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Ie,getRandomBytes:Se});async function Be(t,e,r){const i=await F.getBigInteger(),n=new i(1),s=n.leftShift(new i(t-1)),a=new i(30),o=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2],c=await Ie(s,s.leftShift(n));let h=c.mod(a).toNumber();do{c.iadd(new i(o[h])),h=(h+o[h])%o.length,c.bitLength()>t&&(c.imod(s.leftShift(n)).iadd(s),h=c.mod(a).toNumber())}while(!await Ke(c,e,r));return c}async function Ke(t,e,r){return!(e&&!t.dec().gcd(e).isOne())&&(!!await async function(t){const e=await F.getBigInteger();return Pe.every((r=>0!==t.mod(new e(r))))}(t)&&(!!await async function(t,e){const r=await F.getBigInteger();return e=e||new r(2),e.modExp(t.dec(),t).isOne()}(t)&&!!await async function(t,e,r){const i=await F.getBigInteger(),n=t.bitLength();e||(e=Math.max(1,n/48|0));const s=t.dec();let a=0;for(;!s.getBit(a);)a++;const o=t.rightShift(new i(a));for(;e>0;e--){let e,n=(r?r():await Ie(new i(2),s)).modExp(o,t);if(!n.isOne()&&!n.equal(s)){for(e=1;e<a;e++){if(n=n.mul(n).mod(t),n.isOne())return!1;if(n.equal(s))break}if(e===a)return!1}}return!0}(t,r)))}const Pe=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999];const De=[];function Ue(t,e){const r=t.length;if(r>e-11)throw Error("Message too long");const i=function(t){const e=new Uint8Array(t);let r=0;for(;r<t;){const i=Se(t-r);for(let t=0;t<i.length;t++)0!==i[t]&&(e[r++]=i[t])}return e}(e-r-3),n=new Uint8Array(e);return n[1]=2,n.set(i,2),n.set(t,e-r),n}function Me(t,e){let r=2,i=1;for(let e=r;e<t.length;e++)i&=0!==t[e],r+=i;const n=r-2,s=t.subarray(r+1),a=0===t[0]&2===t[1]&n>=8&!i;if(e)return F.selectUint8Array(a,s,e);if(a)return s;throw Error("Decryption error")}async function xe(t,e,r){let i;if(e.length!==vt.getHashByteLength(t))throw Error("Invalid hash length");const n=new Uint8Array(De[t].length);for(i=0;i<De[t].length;i++)n[i]=De[t][i];const s=n.length+e.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(e,r-e.length),o}De[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],De[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],De[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],De[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],De[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],De[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],De[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var Qe=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Me,emeEncode:Ue,emsaEncode:xe});const Re=F.getWebCrypto(),_e=F.getNodeCrypto();async function Te(t,e,r,i,n,s){const a=await F.getBigInteger(),o=new a(i),c=new a(n),h=new a(r);let u=h.mod(c.dec()),l=h.mod(o.dec());return l=l.toUint8Array(),u=u.toUint8Array(),{kty:"RSA",n:Z(t,!0),e:Z(e,!0),d:Z(r,!0),p:Z(n,!0),q:Z(i,!0),dp:Z(u,!0),dq:Z(l,!0),qi:Z(s,!0),ext:!0}}function Le(t,e){return{kty:"RSA",n:Z(t,!0),e:Z(e,!0),ext:!0}}function Ne(t,e){return{n:V(t.n),e:e.toUint8Array(),d:V(t.d),p:V(t.q),q:V(t.p),u:V(t.qi)}}var Oe=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n,s,a,o){if(F.getNodeCrypto()&&!o)try{return await async function(t,e,r,i,n,s,a){const o=await Te(e,r,i,n,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:_e.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(_e.privateDecrypt(c,t))}catch(t){throw Error("Decryption error")}}(t,e,r,i,n,s,a)}catch(t){F.printDebugError(t)}return async function(t,e,r,i,n,s,a,o){const c=await F.getBigInteger();if(t=new c(t),e=new c(e),r=new c(r),i=new c(i),n=new c(n),s=new c(s),a=new c(a),t.gte(e))throw Error("Data too large.");const h=i.mod(s.dec()),u=i.mod(n.dec()),l=(await Ie(new c(2),e)).mod(e),f=l.modInv(e).modExp(r,e);t=t.mul(f).mod(e);const y=t.modExp(u,n),d=t.modExp(h,s),p=a.mul(d.sub(y)).mod(s);let g=p.mul(n).add(y);return g=g.mul(l).mod(e),Me(g.toUint8Array("be",e.byteLength()),o)}(t,e,r,i,n,s,a,o)},encrypt:async function(t,e,r){return F.getNodeCrypto()?async function(t,e,r){const i=Le(e,r),n={key:i,format:"jwk",type:"pkcs1",padding:_e.constants.RSA_PKCS1_PADDING};return new Uint8Array(_e.publicEncrypt(n,t))}(t,e,r):async function(t,e,r){const i=await F.getBigInteger();if(e=new i(e),t=new i(Ue(t,e.byteLength())),r=new i(r),t.gte(e))throw Error("Message size cannot exceed modulus size");return t.modExp(r,e).toUint8Array("be",e.byteLength())}(t,e,r)},generate:async function(t,e){if(e=new(await F.getBigInteger())(e),F.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:t,publicExponent:e.toUint8Array(),hash:{name:"SHA-1"}},i=await Re.generateKey(r,!0,["sign","verify"]);return Ne(await Re.exportKey("jwk",i.privateKey),e)}if(F.getNodeCrypto()){const r={modulusLength:t,publicExponent:e.toNumber(),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},i=await new Promise(((t,e)=>{_e.generateKeyPair("rsa",r,((r,i,n)=>{r?e(r):t(n)}))}));return Ne(i,e)}let r,i,n;do{i=await Be(t-(t>>1),e,40),r=await Be(t>>1,e,40),n=r.mul(i)}while(n.bitLength()!==t);const s=r.dec().imul(i.dec());return i.lt(r)&&([r,i]=[i,r]),{n:n.toUint8Array(),e:e.toUint8Array(),d:e.modInv(s).toUint8Array(),p:r.toUint8Array(),q:i.toUint8Array(),u:r.modInv(i).toUint8Array()}},sign:async function(t,e,r,i,n,s,a,o,c){if(e&&!F.isStream(e))if(F.getWebCrypto())try{return await async function(t,e,r,i,n,s,a,o){const c=await Te(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:t}},u=await Re.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await Re.sign("RSASSA-PKCS1-v1_5",u,e))}(L.read(L.webHash,t),e,r,i,n,s,a,o)}catch(t){F.printDebugError(t)}else if(F.getNodeCrypto())return async function(t,e,r,i,n,s,a,o){const c=_e.createSign(L.read(L.hash,t));c.write(e),c.end();const h=await Te(r,i,n,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(t,e,r,i,n,s,a,o);return async function(t,e,r,i){const n=await F.getBigInteger();e=new n(e);const s=new n(await xe(t,i,e.byteLength()));if(r=new n(r),s.gte(e))throw Error("Message size cannot exceed modulus size");return s.modExp(r,e).toUint8Array("be",e.byteLength())}(t,r,n,c)},validateParams:async function(t,e,r,i,n,s){const a=await F.getBigInteger();if(t=new a(t),i=new a(i),n=new a(n),!i.mul(n).equal(t))return!1;const o=new a(2);if(s=new a(s),!i.mul(s).mod(n).isOne())return!1;e=new a(e),r=new a(r);const c=new a(Math.floor(t.bitLength()/3)),h=await Ie(o,o.leftShift(c)),u=h.mul(r).mul(e);return!(!u.mod(i.dec()).equal(h)||!u.mod(n.dec()).equal(h))},verify:async function(t,e,r,i,n,s){if(e&&!F.isStream(e))if(F.getWebCrypto())try{return await async function(t,e,r,i,n){const s=Le(i,n),a=await Re.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:t}},!1,["verify"]);return Re.verify("RSASSA-PKCS1-v1_5",a,r,e)}(L.read(L.webHash,t),e,r,i,n)}catch(t){F.printDebugError(t)}else if(F.getNodeCrypto())return async function(t,e,r,i,n){const s=Le(i,n),a={key:s,format:"jwk",type:"pkcs1"},o=_e.createVerify(L.read(L.hash,t));o.write(e),o.end();try{return await o.verify(a,r)}catch(t){return!1}}(t,e,r,i,n);return async function(t,e,r,i,n){const s=await F.getBigInteger();if(r=new s(r),e=new s(e),i=new s(i),e.gte(r))throw Error("Signature size cannot exceed modulus size");const a=e.modExp(i,r).toUint8Array("be",r.byteLength()),o=await xe(t,n,r.byteLength());return F.equalsUint8Array(a,o)}(t,r,i,n,s)}});var Fe=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n){const s=await F.getBigInteger();return t=new s(t),e=new s(e),r=new s(r),i=new s(i),Me(t.modExp(i,r).modInv(r).imul(e).imod(r).toUint8Array("be",r.byteLength()),n)},encrypt:async function(t,e,r,i){const n=await F.getBigInteger();e=new n(e),r=new n(r),i=new n(i);const s=new n(Ue(t,e.byteLength())),a=await Ie(new n(1),e.dec());return{c1:r.modExp(a,e).toUint8Array(),c2:i.modExp(a,e).imul(s).imod(e).toUint8Array()}},validateParams:async function(t,e,r,i){const n=await F.getBigInteger();t=new n(t),e=new n(e),r=new n(r);const s=new n(1);if(e.lte(s)||e.gte(t))return!1;const a=new n(t.bitLength()),o=new n(1023);if(a.lt(o))return!1;if(!e.modExp(t.dec(),t).isOne())return!1;let c=e;const h=new n(1),u=new n(2).leftShift(new n(17));for(;h.lt(u);){if(c=c.mul(e).imod(t),c.isOne())return!1;h.iinc()}i=new n(i);const l=new n(2),f=await Ie(l.leftShift(a.dec()),l.leftShift(a)),y=t.dec().imul(f).iadd(i);return!!r.equal(e.modExp(y,t))}});const He=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0,ze={};var Ge=function(t){var e,r=new Float64Array(16);if(t)for(e=0;e<t.length;e++)r[e]=t[e];return r},qe=function(){throw Error("no PRNG")},je=new Uint8Array(32);je[0]=9;var Ve=Ge(),Ze=Ge([1]),Je=Ge([56129,1]),Ye=Ge([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),We=Ge([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),$e=Ge([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),Xe=Ge([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),tr=Ge([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function er(t,e,r,i){t[e]=r>>24&255,t[e+1]=r>>16&255,t[e+2]=r>>8&255,t[e+3]=255&r,t[e+4]=i>>24&255,t[e+5]=i>>16&255,t[e+6]=i>>8&255,t[e+7]=255&i}function rr(t,e,r,i){return function(t,e,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=t[e+s]^r[i+s];return(1&a-1>>>8)-1}(t,e,r,i,32)}function ir(t,e){var r;for(r=0;r<16;r++)t[r]=0|e[r]}function nr(t){var e,r,i=1;for(e=0;e<16;e++)r=t[e]+i+65535,i=Math.floor(r/65536),t[e]=r-65536*i;t[0]+=i-1+37*(i-1)}function sr(t,e,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(t[s]^e[s]),t[s]^=i,e[s]^=i}function ar(t,e){var r,i,n,s=Ge(),a=Ge();for(r=0;r<16;r++)a[r]=e[r];for(nr(a),nr(a),nr(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,sr(a,s,1-n)}for(r=0;r<16;r++)t[2*r]=255&a[r],t[2*r+1]=a[r]>>8}function or(t,e){var r=new Uint8Array(32),i=new Uint8Array(32);return ar(r,t),ar(i,e),rr(r,0,i,0)}function cr(t){var e=new Uint8Array(32);return ar(e,t),1&e[0]}function hr(t,e){var r;for(r=0;r<16;r++)t[r]=e[2*r]+(e[2*r+1]<<8);t[15]&=32767}function ur(t,e,r){for(var i=0;i<16;i++)t[i]=e[i]+r[i]}function lr(t,e,r){for(var i=0;i<16;i++)t[i]=e[i]-r[i]}function fr(t,e,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0,b=0,v=0,E=0,k=0,S=0,I=0,C=0,B=0,K=0,P=0,D=0,U=0,M=0,x=0,Q=0,R=0,_=r[0],T=r[1],L=r[2],N=r[3],O=r[4],F=r[5],H=r[6],z=r[7],G=r[8],q=r[9],j=r[10],V=r[11],Z=r[12],J=r[13],Y=r[14],W=r[15];s+=(i=e[0])*_,a+=i*T,o+=i*L,c+=i*N,h+=i*O,u+=i*F,l+=i*H,f+=i*z,y+=i*G,d+=i*q,p+=i*j,g+=i*V,m+=i*Z,w+=i*J,A+=i*Y,b+=i*W,a+=(i=e[1])*_,o+=i*T,c+=i*L,h+=i*N,u+=i*O,l+=i*F,f+=i*H,y+=i*z,d+=i*G,p+=i*q,g+=i*j,m+=i*V,w+=i*Z,A+=i*J,b+=i*Y,v+=i*W,o+=(i=e[2])*_,c+=i*T,h+=i*L,u+=i*N,l+=i*O,f+=i*F,y+=i*H,d+=i*z,p+=i*G,g+=i*q,m+=i*j,w+=i*V,A+=i*Z,b+=i*J,v+=i*Y,E+=i*W,c+=(i=e[3])*_,h+=i*T,u+=i*L,l+=i*N,f+=i*O,y+=i*F,d+=i*H,p+=i*z,g+=i*G,m+=i*q,w+=i*j,A+=i*V,b+=i*Z,v+=i*J,E+=i*Y,k+=i*W,h+=(i=e[4])*_,u+=i*T,l+=i*L,f+=i*N,y+=i*O,d+=i*F,p+=i*H,g+=i*z,m+=i*G,w+=i*q,A+=i*j,b+=i*V,v+=i*Z,E+=i*J,k+=i*Y,S+=i*W,u+=(i=e[5])*_,l+=i*T,f+=i*L,y+=i*N,d+=i*O,p+=i*F,g+=i*H,m+=i*z,w+=i*G,A+=i*q,b+=i*j,v+=i*V,E+=i*Z,k+=i*J,S+=i*Y,I+=i*W,l+=(i=e[6])*_,f+=i*T,y+=i*L,d+=i*N,p+=i*O,g+=i*F,m+=i*H,w+=i*z,A+=i*G,b+=i*q,v+=i*j,E+=i*V,k+=i*Z,S+=i*J,I+=i*Y,C+=i*W,f+=(i=e[7])*_,y+=i*T,d+=i*L,p+=i*N,g+=i*O,m+=i*F,w+=i*H,A+=i*z,b+=i*G,v+=i*q,E+=i*j,k+=i*V,S+=i*Z,I+=i*J,C+=i*Y,B+=i*W,y+=(i=e[8])*_,d+=i*T,p+=i*L,g+=i*N,m+=i*O,w+=i*F,A+=i*H,b+=i*z,v+=i*G,E+=i*q,k+=i*j,S+=i*V,I+=i*Z,C+=i*J,B+=i*Y,K+=i*W,d+=(i=e[9])*_,p+=i*T,g+=i*L,m+=i*N,w+=i*O,A+=i*F,b+=i*H,v+=i*z,E+=i*G,k+=i*q,S+=i*j,I+=i*V,C+=i*Z,B+=i*J,K+=i*Y,P+=i*W,p+=(i=e[10])*_,g+=i*T,m+=i*L,w+=i*N,A+=i*O,b+=i*F,v+=i*H,E+=i*z,k+=i*G,S+=i*q,I+=i*j,C+=i*V,B+=i*Z,K+=i*J,P+=i*Y,D+=i*W,g+=(i=e[11])*_,m+=i*T,w+=i*L,A+=i*N,b+=i*O,v+=i*F,E+=i*H,k+=i*z,S+=i*G,I+=i*q,C+=i*j,B+=i*V,K+=i*Z,P+=i*J,D+=i*Y,U+=i*W,m+=(i=e[12])*_,w+=i*T,A+=i*L,b+=i*N,v+=i*O,E+=i*F,k+=i*H,S+=i*z,I+=i*G,C+=i*q,B+=i*j,K+=i*V,P+=i*Z,D+=i*J,U+=i*Y,M+=i*W,w+=(i=e[13])*_,A+=i*T,b+=i*L,v+=i*N,E+=i*O,k+=i*F,S+=i*H,I+=i*z,C+=i*G,B+=i*q,K+=i*j,P+=i*V,D+=i*Z,U+=i*J,M+=i*Y,x+=i*W,A+=(i=e[14])*_,b+=i*T,v+=i*L,E+=i*N,k+=i*O,S+=i*F,I+=i*H,C+=i*z,B+=i*G,K+=i*q,P+=i*j,D+=i*V,U+=i*Z,M+=i*J,x+=i*Y,Q+=i*W,b+=(i=e[15])*_,a+=38*(E+=i*L),o+=38*(k+=i*N),c+=38*(S+=i*O),h+=38*(I+=i*F),u+=38*(C+=i*H),l+=38*(B+=i*z),f+=38*(K+=i*G),y+=38*(P+=i*q),d+=38*(D+=i*j),p+=38*(U+=i*V),g+=38*(M+=i*Z),m+=38*(x+=i*J),w+=38*(Q+=i*Y),A+=38*(R+=i*W),s=(i=(s+=38*(v+=i*T))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),t[0]=s,t[1]=a,t[2]=o,t[3]=c,t[4]=h,t[5]=u,t[6]=l,t[7]=f,t[8]=y,t[9]=d,t[10]=p,t[11]=g,t[12]=m,t[13]=w,t[14]=A,t[15]=b}function yr(t,e){fr(t,e,e)}function dr(t,e){var r,i=Ge();for(r=0;r<16;r++)i[r]=e[r];for(r=253;r>=0;r--)yr(i,i),2!==r&&4!==r&&fr(i,i,e);for(r=0;r<16;r++)t[r]=i[r]}function pr(t,e,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=Ge(),c=Ge(),h=Ge(),u=Ge(),l=Ge(),f=Ge();for(n=0;n<31;n++)s[n]=e[n];for(s[31]=127&e[31]|64,s[0]&=248,hr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)sr(o,c,i=s[n>>>3]>>>(7&n)&1),sr(h,u,i),ur(l,o,h),lr(o,o,h),ur(h,c,u),lr(c,c,u),yr(u,l),yr(f,o),fr(o,h,o),fr(h,c,l),ur(l,o,h),lr(o,o,h),yr(c,o),lr(h,u,f),fr(o,h,Je),ur(o,o,u),fr(h,h,o),fr(o,u,f),fr(u,c,a),yr(c,l),sr(o,c,i),sr(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var y=a.subarray(32),d=a.subarray(16);return dr(y,y),fr(d,d,y),ar(t,d),0}function gr(t,e){return pr(t,e,je)}var mr=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function wr(t,e,r,i){for(var n,s,a,o,c,h,u,l,f,y,d,p,g,m,w,A,b,v,E,k,S,I,C,B,K,P,D=new Int32Array(16),U=new Int32Array(16),M=t[0],x=t[1],Q=t[2],R=t[3],_=t[4],T=t[5],L=t[6],N=t[7],O=e[0],F=e[1],H=e[2],z=e[3],G=e[4],q=e[5],j=e[6],V=e[7],Z=0;i>=128;){for(E=0;E<16;E++)k=8*E+Z,D[E]=r[k+0]<<24|r[k+1]<<16|r[k+2]<<8|r[k+3],U[E]=r[k+4]<<24|r[k+5]<<16|r[k+6]<<8|r[k+7];for(E=0;E<80;E++)if(n=M,s=x,a=Q,o=R,c=_,h=T,u=L,N,f=O,y=F,d=H,p=z,g=G,m=q,w=j,V,C=65535&(I=V),B=I>>>16,K=65535&(S=N),P=S>>>16,C+=65535&(I=(G>>>14|_<<18)^(G>>>18|_<<14)^(_>>>9|G<<23)),B+=I>>>16,K+=65535&(S=(_>>>14|G<<18)^(_>>>18|G<<14)^(G>>>9|_<<23)),P+=S>>>16,C+=65535&(I=G&q^~G&j),B+=I>>>16,K+=65535&(S=_&T^~_&L),P+=S>>>16,S=mr[2*E],C+=65535&(I=mr[2*E+1]),B+=I>>>16,K+=65535&S,P+=S>>>16,S=D[E%16],B+=(I=U[E%16])>>>16,K+=65535&S,P+=S>>>16,K+=(B+=(C+=65535&I)>>>16)>>>16,C=65535&(I=v=65535&C|B<<16),B=I>>>16,K=65535&(S=b=65535&K|(P+=K>>>16)<<16),P=S>>>16,C+=65535&(I=(O>>>28|M<<4)^(M>>>2|O<<30)^(M>>>7|O<<25)),B+=I>>>16,K+=65535&(S=(M>>>28|O<<4)^(O>>>2|M<<30)^(O>>>7|M<<25)),P+=S>>>16,B+=(I=O&F^O&H^F&H)>>>16,K+=65535&(S=M&x^M&Q^x&Q),P+=S>>>16,l=65535&(K+=(B+=(C+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,A=65535&C|B<<16,C=65535&(I=p),B=I>>>16,K=65535&(S=o),P=S>>>16,B+=(I=v)>>>16,K+=65535&(S=b),P+=S>>>16,x=n,Q=s,R=a,_=o=65535&(K+=(B+=(C+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,T=c,L=h,N=u,M=l,F=f,H=y,z=d,G=p=65535&C|B<<16,q=g,j=m,V=w,O=A,E%16==15)for(k=0;k<16;k++)S=D[k],C=65535&(I=U[k]),B=I>>>16,K=65535&S,P=S>>>16,S=D[(k+9)%16],C+=65535&(I=U[(k+9)%16]),B+=I>>>16,K+=65535&S,P+=S>>>16,b=D[(k+1)%16],C+=65535&(I=((v=U[(k+1)%16])>>>1|b<<31)^(v>>>8|b<<24)^(v>>>7|b<<25)),B+=I>>>16,K+=65535&(S=(b>>>1|v<<31)^(b>>>8|v<<24)^b>>>7),P+=S>>>16,b=D[(k+14)%16],B+=(I=((v=U[(k+14)%16])>>>19|b<<13)^(b>>>29|v<<3)^(v>>>6|b<<26))>>>16,K+=65535&(S=(b>>>19|v<<13)^(v>>>29|b<<3)^b>>>6),P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,D[k]=65535&K|P<<16,U[k]=65535&C|B<<16;C=65535&(I=O),B=I>>>16,K=65535&(S=M),P=S>>>16,S=t[0],B+=(I=e[0])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[0]=M=65535&K|P<<16,e[0]=O=65535&C|B<<16,C=65535&(I=F),B=I>>>16,K=65535&(S=x),P=S>>>16,S=t[1],B+=(I=e[1])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[1]=x=65535&K|P<<16,e[1]=F=65535&C|B<<16,C=65535&(I=H),B=I>>>16,K=65535&(S=Q),P=S>>>16,S=t[2],B+=(I=e[2])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[2]=Q=65535&K|P<<16,e[2]=H=65535&C|B<<16,C=65535&(I=z),B=I>>>16,K=65535&(S=R),P=S>>>16,S=t[3],B+=(I=e[3])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[3]=R=65535&K|P<<16,e[3]=z=65535&C|B<<16,C=65535&(I=G),B=I>>>16,K=65535&(S=_),P=S>>>16,S=t[4],B+=(I=e[4])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[4]=_=65535&K|P<<16,e[4]=G=65535&C|B<<16,C=65535&(I=q),B=I>>>16,K=65535&(S=T),P=S>>>16,S=t[5],B+=(I=e[5])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[5]=T=65535&K|P<<16,e[5]=q=65535&C|B<<16,C=65535&(I=j),B=I>>>16,K=65535&(S=L),P=S>>>16,S=t[6],B+=(I=e[6])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[6]=L=65535&K|P<<16,e[6]=j=65535&C|B<<16,C=65535&(I=V),B=I>>>16,K=65535&(S=N),P=S>>>16,S=t[7],B+=(I=e[7])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[7]=N=65535&K|P<<16,e[7]=V=65535&C|B<<16,Z+=128,i-=128}return i}function Ar(t,e,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,wr(n,s,e,r),r%=128,i=0;i<r;i++)a[i]=e[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,er(a,r-8,o/536870912|0,o<<3),wr(n,s,a,r),i=0;i<8;i++)er(t,8*i,n[i],s[i]);return 0}function br(t,e){var r=Ge(),i=Ge(),n=Ge(),s=Ge(),a=Ge(),o=Ge(),c=Ge(),h=Ge(),u=Ge();lr(r,t[1],t[0]),lr(u,e[1],e[0]),fr(r,r,u),ur(i,t[0],t[1]),ur(u,e[0],e[1]),fr(i,i,u),fr(n,t[3],e[3]),fr(n,n,We),fr(s,t[2],e[2]),ur(s,s,s),lr(a,i,r),lr(o,s,n),ur(c,s,n),ur(h,i,r),fr(t[0],a,o),fr(t[1],h,c),fr(t[2],c,o),fr(t[3],a,h)}function vr(t,e,r){var i;for(i=0;i<4;i++)sr(t[i],e[i],r)}function Er(t,e){var r=Ge(),i=Ge(),n=Ge();dr(n,e[2]),fr(r,e[0],n),fr(i,e[1],n),ar(t,i),t[31]^=cr(r)<<7}function kr(t,e,r){var i,n;for(ir(t[0],Ve),ir(t[1],Ze),ir(t[2],Ze),ir(t[3],Ve),n=255;n>=0;--n)vr(t,e,i=r[n/8|0]>>(7&n)&1),br(e,t),br(t,t),vr(t,e,i)}function Sr(t,e){var r=[Ge(),Ge(),Ge(),Ge()];ir(r[0],$e),ir(r[1],Xe),ir(r[2],Ze),fr(r[3],$e,Xe),kr(t,r,e)}function Ir(t,e,r){var i,n=new Uint8Array(64),s=[Ge(),Ge(),Ge(),Ge()];for(r||qe(e,32),Ar(n,e,32),n[0]&=248,n[31]&=127,n[31]|=64,Sr(s,n),Er(t,s),i=0;i<32;i++)e[i+32]=t[i];return 0}var Cr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function Br(t,e){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)e[n]+=r-16*e[i]*Cr[n-(i-32)],r=Math.floor((e[n]+128)/256),e[n]-=256*r;e[n]+=r,e[i]=0}for(r=0,n=0;n<32;n++)e[n]+=r-(e[31]>>4)*Cr[n],r=e[n]>>8,e[n]&=255;for(n=0;n<32;n++)e[n]-=r*Cr[n];for(i=0;i<32;i++)e[i+1]+=e[i]>>8,t[i]=255&e[i]}function Kr(t){var e,r=new Float64Array(64);for(e=0;e<64;e++)r[e]=t[e];for(e=0;e<64;e++)t[e]=0;Br(t,r)}function Pr(t,e){var r=Ge(),i=Ge(),n=Ge(),s=Ge(),a=Ge(),o=Ge(),c=Ge();return ir(t[2],Ze),hr(t[1],e),yr(n,t[1]),fr(s,n,Ye),lr(n,n,t[2]),ur(s,t[2],s),yr(a,s),yr(o,a),fr(c,o,a),fr(r,c,n),fr(r,r,s),function(t,e){var r,i=Ge();for(r=0;r<16;r++)i[r]=e[r];for(r=250;r>=0;r--)yr(i,i),1!==r&&fr(i,i,e);for(r=0;r<16;r++)t[r]=i[r]}(r,r),fr(r,r,n),fr(r,r,s),fr(r,r,s),fr(t[0],r,s),yr(i,t[0]),fr(i,i,s),or(i,n)&&fr(t[0],t[0],tr),yr(i,t[0]),fr(i,i,s),or(i,n)?-1:(cr(t[0])===e[31]>>7&&lr(t[0],Ve,t[0]),fr(t[3],t[0],t[1]),0)}var Dr=64;function Ur(){for(var t=0;t<arguments.length;t++)if(!(arguments[t]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}ze.scalarMult=function(t,e){if(Ur(t,e),32!==t.length)throw Error("bad n size");if(32!==e.length)throw Error("bad p size");var r=new Uint8Array(32);return pr(r,t,e),r},ze.box={},ze.box.keyPair=function(){var t=new Uint8Array(32),e=new Uint8Array(32);return function(t,e){qe(e,32),gr(t,e)}(t,e),{publicKey:t,secretKey:e}},ze.box.keyPair.fromSecretKey=function(t){if(Ur(t),32!==t.length)throw Error("bad secret key size");var e=new Uint8Array(32);return gr(e,t),{publicKey:e,secretKey:new Uint8Array(t)}},ze.sign=function(t,e){if(Ur(t,e),64!==e.length)throw Error("bad secret key size");var r=new Uint8Array(Dr+t.length);return function(t,e,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[Ge(),Ge(),Ge(),Ge()];Ar(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)t[64+n]=e[n];for(n=0;n<32;n++)t[32+n]=a[32+n];for(Ar(c,t.subarray(32),r+32),Kr(c),Sr(u,c),Er(t,u),n=32;n<64;n++)t[n]=i[n];for(Ar(o,t,r+64),Kr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];Br(t.subarray(32),h)}(r,t,t.length,e),r},ze.sign.detached=function(t,e){for(var r=ze.sign(t,e),i=new Uint8Array(Dr),n=0;n<i.length;n++)i[n]=r[n];return i},ze.sign.detached.verify=function(t,e,r){if(Ur(t,e,r),e.length!==Dr)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array(Dr+t.length),s=new Uint8Array(Dr+t.length);for(i=0;i<Dr;i++)n[i]=e[i];for(i=0;i<t.length;i++)n[i+Dr]=t[i];return function(t,e,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[Ge(),Ge(),Ge(),Ge()],c=[Ge(),Ge(),Ge(),Ge()];if(r<64)return-1;if(Pr(c,i))return-1;for(n=0;n<r;n++)t[n]=e[n];for(n=0;n<32;n++)t[n+32]=i[n];if(Ar(a,t,r),Kr(a),kr(o,c,a),Sr(c,e.subarray(32)),br(o,c),Er(s,o),r-=64,rr(e,0,s,0)){for(n=0;n<r;n++)t[n]=0;return-1}for(n=0;n<r;n++)t[n]=e[n+64];return r}(s,n,n.length,r)>=0},ze.sign.keyPair=function(){var t=new Uint8Array(32),e=new Uint8Array(64);return Ir(t,e),{publicKey:t,secretKey:e}},ze.sign.keyPair.fromSecretKey=function(t){if(Ur(t),64!==t.length)throw Error("bad secret key size");for(var e=new Uint8Array(32),r=0;r<e.length;r++)e[r]=t[32+r];return{publicKey:e,secretKey:new Uint8Array(t)}},ze.sign.keyPair.fromSeed=function(t){if(Ur(t),32!==t.length)throw Error("bad seed size");for(var e=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=t[i];return Ir(e,r,!0),{publicKey:e,secretKey:r}},ze.setPRNG=function(t){qe=t},function(){if(He&&He.getRandomValues){ze.setPRNG((function(t,e){var r,i=new Uint8Array(e);for(r=0;r<e;r+=65536)He.getRandomValues(i.subarray(r,r+Math.min(e-r,65536)));for(r=0;r<e;r++)t[r]=i[r];!function(t){for(var e=0;e<t.length;e++)t[e]=0}(i)}))}}();const Mr={"2a8648ce3d030107":L.curve.nistP256,"2b81040022":L.curve.nistP384,"2b81040023":L.curve.nistP521,"2b8104000a":L.curve.secp256k1,"2b06010401da470f01":L.curve.ed25519Legacy,"2b060104019755010501":L.curve.curve25519Legacy,"2b2403030208010107":L.curve.brainpoolP256r1,"2b240303020801010b":L.curve.brainpoolP384r1,"2b240303020801010d":L.curve.brainpoolP512r1};class xr{constructor(t){if(t instanceof xr)this.oid=t.oid;else if(F.isArray(t)||F.isUint8Array(t)){if(6===(t=new Uint8Array(t))[0]){if(t[1]!==t.length-2)throw Error("Length mismatch in DER encoded oid");t=t.subarray(2)}this.oid=t}else this.oid=""}read(t){if(t.length>=1){const e=t[0];if(t.length>=1+e)return this.oid=t.subarray(1,1+e),1+this.oid.length}throw Error("Invalid oid")}write(){return F.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return F.uint8ArrayToHex(this.oid)}getName(){const t=Mr[this.toHex()];if(!t)throw Error("Unknown curve object identifier.");return t}}function Qr(t){let e,r=0;const i=t[0];return i<192?([r]=t,e=1):i<255?(r=(t[0]-192<<8)+t[1]+192,e=2):255===i&&(r=F.readNumber(t.subarray(1,5)),e=5),{len:r,offset:e}}function Rr(t){return t<192?new Uint8Array([t]):t>191&&t<8384?new Uint8Array([192+(t-192>>8),t-192&255]):F.concatUint8Array([new Uint8Array([255]),F.writeNumber(t,4)])}function _r(t){if(t<0||t>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+t])}function Tr(t){return new Uint8Array([192|t])}function Lr(t,e){return F.concatUint8Array([Tr(t),Rr(e)])}function Nr(t){return[L.packet.literalData,L.packet.compressedData,L.packet.symmetricallyEncryptedData,L.packet.symEncryptedIntegrityProtectedData,L.packet.aeadEncryptedData].includes(t)}async function Or(t,e){const r=R(t);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||0==(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,l=-1;l=0,0!=(64&a)&&(l=1),l?h=63&a:(h=(63&a)>>2,c=3&a);const f=Nr(h);let y,d=null;if(f){if("array"===F.isStream(t)){const t=new u;i=_(t),d=t}else{const t=new TransformStream;i=_(t.writable),d=t.readable}n=e({tag:h,packet:d})}else d=[];do{if(l){const t=await r.readByte();if(y=!1,t<192)o=t;else if(t>=192&&t<224)o=(t-192<<8)+await r.readByte()+192;else if(t>223&&t<255){if(o=1<<(31&t),y=!0,!f)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let t=0;for(;;){i&&await i.ready;const{done:e,value:n}=await r.read();if(e){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-t);if(i?await i.write(s):d.push(s),t+=n.length,t>=o){r.unshift(n.subarray(o-t+n.length));break}}}}while(y);const p=await r.peekBytes(f?1/0:2);return i?(await i.ready,await i.close()):(d=F.concatUint8Array(d),await e({tag:h,packet:d})),!p||!p.length}catch(t){if(i)return await i.abort(t),!0;throw t}finally{i&&await n,r.releaseLock()}}class Fr extends Error{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,Fr),this.name="UnsupportedError"}}class Hr extends Fr{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,Fr),this.name="UnknownPacketError"}}class zr{constructor(t,e){this.tag=t,this.rawContent=e}write(){return this.rawContent}}const Gr=F.getWebCrypto(),qr=F.getNodeCrypto(),jr={[L.curve.nistP256]:"P-256",[L.curve.nistP384]:"P-384",[L.curve.nistP521]:"P-521"},Vr=qr?qr.getCurves():[],Zr=qr?{[L.curve.secp256k1]:Vr.includes("secp256k1")?"secp256k1":void 0,[L.curve.nistP256]:Vr.includes("prime256v1")?"prime256v1":void 0,[L.curve.nistP384]:Vr.includes("secp384r1")?"secp384r1":void 0,[L.curve.nistP521]:Vr.includes("secp521r1")?"secp521r1":void 0,[L.curve.ed25519Legacy]:Vr.includes("ED25519")?"ED25519":void 0,[L.curve.curve25519Legacy]:Vr.includes("X25519")?"X25519":void 0,[L.curve.brainpoolP256r1]:Vr.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[L.curve.brainpoolP384r1]:Vr.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[L.curve.brainpoolP512r1]:Vr.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},Jr={[L.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:Zr[L.curve.nistP256],web:jr[L.curve.nistP256],payloadSize:32,sharedSize:256},[L.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:L.publicKey.ecdsa,hash:L.hash.sha384,cipher:L.symmetric.aes192,node:Zr[L.curve.nistP384],web:jr[L.curve.nistP384],payloadSize:48,sharedSize:384},[L.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:L.publicKey.ecdsa,hash:L.hash.sha512,cipher:L.symmetric.aes256,node:Zr[L.curve.nistP521],web:jr[L.curve.nistP521],payloadSize:66,sharedSize:528},[L.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:Zr[L.curve.secp256k1],payloadSize:32},[L.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:L.publicKey.eddsaLegacy,hash:L.hash.sha512,node:!1,payloadSize:32},[L.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:L.publicKey.ecdh,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:!1,payloadSize:32},[L.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:Zr[L.curve.brainpoolP256r1],payloadSize:32},[L.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:L.publicKey.ecdsa,hash:L.hash.sha384,cipher:L.symmetric.aes192,node:Zr[L.curve.brainpoolP384r1],payloadSize:48},[L.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:L.publicKey.ecdsa,hash:L.hash.sha512,cipher:L.symmetric.aes256,node:Zr[L.curve.brainpoolP512r1],payloadSize:64}};class Yr{constructor(t){try{this.name=t instanceof xr?t.getName():L.write(L.curve,t)}catch(t){throw new Fr("Unknown curve")}const e=Jr[this.name];this.keyType=e.keyType,this.oid=e.oid,this.hash=e.hash,this.cipher=e.cipher,this.node=e.node,this.web=e.web,this.payloadSize=e.payloadSize,this.sharedSize=e.sharedSize,this.web&&F.getWebCrypto()?this.type="web":this.node&&F.getNodeCrypto()?this.type="node":this.name===L.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===L.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(t){const e=await Gr.generateKey({name:"ECDSA",namedCurve:jr[t]},!0,["sign","verify"]),r=await Gr.exportKey("jwk",e.privateKey),i=await Gr.exportKey("jwk",e.publicKey);return{publicKey:Xr(i),privateKey:V(r.d)}}(this.name)}catch(t){return F.printDebugError("Browser did not support generating ec key "+t.message),$r(this.name)}case"node":return async function(t){const e=qr.createECDH(Zr[t]);return await e.generateKeys(),{publicKey:new Uint8Array(e.getPublicKey()),privateKey:new Uint8Array(e.getPrivateKey())}}(this.name);case"curve25519Legacy":{const t=Se(32);t[0]=127&t[0]|64,t[31]&=248;const e=t.slice().reverse(),{publicKey:r}=ze.box.keyPair.fromSecretKey(e);return{publicKey:F.concatUint8Array([new Uint8Array([64]),r]),privateKey:t}}case"ed25519Legacy":{const t=Se(32),e=ze.sign.keyPair.fromSeed(t);return{publicKey:F.concatUint8Array([new Uint8Array([64]),e.publicKey]),privateKey:t}}default:return $r(this.name)}}}async function Wr(t,e,r,i){const n={[L.curve.nistP256]:!0,[L.curve.nistP384]:!0,[L.curve.nistP521]:!0,[L.curve.secp256k1]:!0,[L.curve.curve25519Legacy]:t===L.publicKey.ecdh,[L.curve.brainpoolP256r1]:!0,[L.curve.brainpoolP384r1]:!0,[L.curve.brainpoolP512r1]:!0},s=e.getName();if(!n[s])return!1;if(s===L.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:t}=ze.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const e=new Uint8Array([64,...t]);return!!F.equalsUint8Array(e,r)}const a=(await F.getNobleCurve(L.publicKey.ecdsa,s)).getPublicKey(i,!1);return!!F.equalsUint8Array(a,r)}async function $r(t){const e=await F.getNobleCurve(L.publicKey.ecdsa,t),r=e.utils.randomPrivateKey();return{publicKey:e.getPublicKey(r,!1),privateKey:r}}function Xr(t){const e=V(t.x),r=V(t.y),i=new Uint8Array(e.length+r.length+1);return i[0]=4,i.set(e,1),i.set(r,e.length+1),i}function ti(t,e,r){const i=t,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:e,x:Z(n,!0),y:Z(s,!0),ext:!0}}function ei(t,e,r,i){const n=ti(t,e,r);return n.d=Z(i,!0),n}const ri=F.getWebCrypto(),ii=F.getNodeCrypto();async function ni(t,e,r,i,n,s){const a=new Yr(t);if(r&&!F.isStream(r)){const t={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(t,e,r,i){const n=t.payloadSize,s=ei(t.payloadSize,jr[t.name],i.publicKey,i.privateKey),a=await ri.importKey("jwk",s,{name:"ECDSA",namedCurve:jr[t.name],hash:{name:L.read(L.webHash,t.hash)}},!1,["sign"]),o=new Uint8Array(await ri.sign({name:"ECDSA",namedCurve:jr[t.name],hash:{name:L.read(L.webHash,e)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,e,r,t)}catch(t){if("nistP521"!==a.name&&("DataError"===t.name||"OperationError"===t.name))throw t;F.printDebugError("Browser did not support signing: "+t.message)}break;case"node":return async function(t,e,r,i){const n=F.nodeRequire("eckey-utils"),s=F.getNodeBuffer(),{privateKey:a}=n.generateDer({curveName:Zr[t.name],privateKey:s.from(i)}),o=ii.createSign(L.read(L.hash,e));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=t.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,e,r,n)}}const o=(await F.getNobleCurve(L.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:o.r.toUint8Array("be",a.payloadSize),s:o.s.toUint8Array("be",a.payloadSize)}}async function si(t,e,r,i,n,s){const a=new Yr(t),o=async()=>0===s[0]&&ai(a,r,s.subarray(1),n);if(i&&!F.isStream(i))switch(a.type){case"web":try{const t=await async function(t,e,{r,s:i},n,s){const a=ti(t.payloadSize,jr[t.name],s),o=await ri.importKey("jwk",a,{name:"ECDSA",namedCurve:jr[t.name],hash:{name:L.read(L.webHash,t.hash)}},!1,["verify"]),c=F.concatUint8Array([r,i]).buffer;return ri.verify({name:"ECDSA",namedCurve:jr[t.name],hash:{name:L.read(L.webHash,e)}},o,c,n)}(a,e,r,i,n);return t||o()}catch(t){if("nistP521"!==a.name&&("DataError"===t.name||"OperationError"===t.name))throw t;F.printDebugError("Browser did not support verifying: "+t.message)}break;case"node":{const t=await async function(t,e,{r,s:i},n,s){const a=F.nodeRequire("eckey-utils"),o=F.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:Zr[t.name],publicKey:o.from(s)}),h=ii.createVerify(L.read(L.hash,e));h.write(n),h.end();const u=F.concatUint8Array([r,i]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(t){return!1}}(a,e,r,i,n);return t||o()}}return await ai(a,r,s,n)||o()}async function ai(t,e,r,i){return(await F.getNobleCurve(L.publicKey.ecdsa,t.name)).verify(F.concatUint8Array([e.r,e.s]),r,i,{lowS:!1})}var oi=/*#__PURE__*/Object.freeze({__proto__:null,sign:ni,validateParams:async function(t,e,r){const i=new Yr(t);if(i.keyType!==L.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=Se(8),n=L.hash.sha256,s=await vt.digest(n,i);try{const a=await ni(t,n,i,e,r,s);return await si(t,n,a,i,e,s)}catch(t){return!1}}default:return Wr(L.publicKey.ecdsa,t,e,r)}},verify:si});var ci=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(t,e,r,i,n,s){if(vt.getHashByteLength(e)<vt.getHashByteLength(L.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=F.concatUint8Array([n,i.subarray(1)]),o=ze.sign.detached(s,a);if(N.checkEdDSAFaultySignatures&&!ze.sign.detached.verify(s,o,i.subarray(1)))throw Error("Transient signing failure");return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(t,e,r){if(t.getName()!==L.curve.ed25519Legacy)return!1;const{publicKey:i}=ze.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return F.equalsUint8Array(e,n)},verify:async function(t,e,{r,s:i},n,s,a){if(vt.getHashByteLength(e)<vt.getHashByteLength(L.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=F.concatUint8Array([r,i]);return ze.sign.detached.verify(a,o,s.subarray(1))}});function hi(t){switch(t){case L.publicKey.ed25519:return 32;case L.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function ui(t){switch(t){case L.publicKey.ed25519:return L.hash.sha256;case L.publicKey.ed448:return L.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var li=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(t){switch(t){case L.publicKey.ed25519:{const e=Se(hi(t)),{publicKey:r}=ze.sign.keyPair.fromSeed(e);return{A:r,seed:e}}case L.publicKey.ed448:{const t=await F.getNobleCurve(L.publicKey.ed448),e=t.utils.randomPrivateKey();return{A:t.getPublicKey(e),seed:e}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:hi,getPreferredHashAlgo:ui,sign:async function(t,e,r,i,n,s){if(vt.getHashByteLength(e)<vt.getHashByteLength(ui(t)))throw Error("Hash algorithm too weak for EdDSA.");switch(t){case L.publicKey.ed25519:{const t=F.concatUint8Array([n,i]),e=ze.sign.detached(s,t);if(N.checkEdDSAFaultySignatures&&!ze.sign.detached.verify(s,e,i))throw Error("Transient signing failure");return{RS:e}}case L.publicKey.ed448:return{RS:(await F.getNobleCurve(L.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(t,e,r){switch(t){case L.publicKey.ed25519:{const{publicKey:t}=ze.sign.keyPair.fromSeed(r);return F.equalsUint8Array(e,t)}case L.publicKey.ed448:{const t=(await F.getNobleCurve(L.publicKey.ed448)).getPublicKey(r);return F.equalsUint8Array(e,t)}default:return!1}},verify:async function(t,e,{RS:r},i,n,s){if(vt.getHashByteLength(e)<vt.getHashByteLength(ui(t)))throw Error("Hash algorithm too weak for EdDSA.");switch(t){case L.publicKey.ed25519:return ze.sign.detached.verify(s,r,n);case L.publicKey.ed448:return(await F.getNobleCurve(L.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});const fi=F.getWebCrypto();async function yi(t,e,r){const{keySize:i}=nt(t);if(!F.isAES(t)||e.length!==i)throw Error("Unexpected algorithm or key size");try{const t=await fi.importKey("raw",e,{name:"AES-KW"},!1,["wrapKey"]),i=await fi.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),n=await fi.wrapKey("raw",i,t,{name:"AES-KW"});return new Uint8Array(n)}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return function(t,e,r){const i=new Ft(e,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=pi(r);let a=n;const o=s,c=s.length/2,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let t=0;t<=5;++t)for(let e=0;e<c;++e)h[1]=c*t+(1+e),u[0]=a[0],u[1]=a[1],u[2]=o[2*e],u[3]=o[2*e+1],u=pi(i.encrypt(gi(u))),a=u.subarray(0,2),a[0]^=h[0],a[1]^=h[1],o[2*e]=u[2],o[2*e+1]=u[3];return gi(a,o)}(0,e,r)}async function di(t,e,r){const{keySize:i}=nt(t);if(!F.isAES(t)||e.length!==i)throw Error("Unexpected algorithm or key size");let n;try{n=await fi.importKey("raw",e,{name:"AES-KW"},!1,["unwrapKey"])}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;return F.printDebugError("Browser did not support operation: "+t.message),function(t,e,r){const i=new Ft(e,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=pi(r);let a=s.subarray(0,2);const o=s.subarray(2),c=s.length/2-1,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let t=5;t>=0;--t)for(let e=c-1;e>=0;--e)h[1]=c*t+(e+1),u[0]=a[0]^h[0],u[1]=a[1]^h[1],u[2]=o[2*e],u[3]=o[2*e+1],u=pi(i.decrypt(gi(u))),a=u.subarray(0,2),o[2*e]=u[2],o[2*e+1]=u[3];if(a[0]===n[0]&&a[1]===n[1])return gi(o);throw Error("Key Data Integrity failed")}(0,e,r)}try{const t=await fi.unwrapKey("raw",r,n,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await fi.exportKey("raw",t))}catch(t){if("OperationError"===t.name)throw Error("Key Data Integrity failed");throw t}}function pi(t){const e=t.buffer,r=new DataView(e),i=new Uint32Array(t.length/4);for(let e=0;e<t.length/4;++e)i[e]=r.getUint32(4*e);return i}function gi(){let t=0;for(let e=0;e<arguments.length;++e)t+=4*arguments[e].length;const e=new ArrayBuffer(t),r=new DataView(e);let i=0;for(let t=0;t<arguments.length;++t){for(let e=0;e<arguments[t].length;++e)r.setUint32(i+4*e,arguments[t][e]);i+=4*arguments[t].length}return new Uint8Array(e)}var mi=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:di,wrap:yi});function wi(t){const e=8-t.length%8,r=new Uint8Array(t.length+e).fill(e);return r.set(t),r}function Ai(t){const e=t.length;if(e>0){const r=t[e-1];if(r>=1){const i=t.subarray(e-r),n=new Uint8Array(r).fill(r);if(F.equalsUint8Array(i,n))return t.subarray(0,e-r)}}throw Error("Invalid padding")}var bi=/*#__PURE__*/Object.freeze({__proto__:null,decode:Ai,encode:wi});const vi=F.getWebCrypto(),Ei=F.getNodeCrypto();function ki(t,e,r,i){return F.concatUint8Array([e.write(),new Uint8Array([t]),r.write(!0),F.stringToUint8Array("Anonymous Sender    "),r.replacementFingerprint||i.subarray(0,20)])}async function Si(t,e,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<e.length&&0===e[a];a++);e=e.subarray(a)}if(s){for(a=e.length-1;a>=0&&0===e[a];a--);e=e.subarray(0,a+1)}return(await vt.digest(t,F.concatUint8Array([new Uint8Array([0,0,0,1]),e,i]))).subarray(0,r)}async function Ii(t,e){switch(t.type){case"curve25519Legacy":{const r=Se(32),{secretKey:i,sharedKey:n}=await Ci(t,e,null,r);let{publicKey:s}=ze.box.keyPair.fromSecretKey(i);return s=F.concatUint8Array([new Uint8Array([64]),s]),{publicKey:s,sharedKey:n}}case"web":if(t.web&&F.getWebCrypto())try{return await async function(t,e){const r=ti(t.payloadSize,t.web,e);let i=vi.generateKey({name:"ECDH",namedCurve:t.web},!0,["deriveKey","deriveBits"]),n=vi.importKey("jwk",r,{name:"ECDH",namedCurve:t.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=vi.deriveBits({name:"ECDH",namedCurve:t.web,public:n},i.privateKey,t.sharedSize),a=vi.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(Xr(a));return{publicKey:c,sharedKey:o}}(t,e)}catch(r){return F.printDebugError(r),Ki(t,e)}break;case"node":return async function(t,e){const r=Ei.createECDH(t.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(e)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(t,e);default:return Ki(t,e)}}async function Ci(t,e,r,i){if(i.length!==t.payloadSize){const e=new Uint8Array(t.payloadSize);e.set(i,t.payloadSize-i.length),i=e}switch(t.type){case"curve25519Legacy":{const t=i.slice().reverse();return{secretKey:t,sharedKey:ze.scalarMult(t,e.subarray(1))}}case"web":if(t.web&&F.getWebCrypto())try{return await async function(t,e,r,i){const n=ei(t.payloadSize,t.web,r,i);let s=vi.importKey("jwk",n,{name:"ECDH",namedCurve:t.web},!0,["deriveKey","deriveBits"]);const a=ti(t.payloadSize,t.web,e);let o=vi.importKey("jwk",a,{name:"ECDH",namedCurve:t.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=vi.deriveBits({name:"ECDH",namedCurve:t.web,public:o},s,t.sharedSize),h=vi.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:V(h.d),sharedKey:u}}(t,e,r,i)}catch(r){return F.printDebugError(r),Bi(t,e,i)}break;case"node":return async function(t,e,r){const i=Ei.createECDH(t.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(e));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(t,e,i);default:return Bi(t,e,i)}}async function Bi(t,e,r){return{secretKey:r,sharedKey:(await F.getNobleCurve(L.publicKey.ecdh,t.name)).getSharedSecret(r,e).subarray(1)}}async function Ki(t,e){const r=await F.getNobleCurve(L.publicKey.ecdh,t.name),{publicKey:i,privateKey:n}=await t.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,e).subarray(1)}}var Pi=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n,s,a){const o=new Yr(t),{sharedKey:c}=await Ci(o,r,n,s),h=ki(L.publicKey.ecdh,t,e,a),{keySize:u}=nt(e.cipher);let l;for(let t=0;t<3;t++)try{const r=await Si(e.hash,c,u,h,1===t,2===t);return Ai(await di(e.cipher,r,i))}catch(t){l=t}throw l},encrypt:async function(t,e,r,i,n){const s=wi(r),a=new Yr(t),{publicKey:o,sharedKey:c}=await Ii(a,i),h=ki(L.publicKey.ecdh,t,e,n),{keySize:u}=nt(e.cipher),l=await Si(e.hash,c,u,h);return{publicKey:o,wrappedKey:await yi(e.cipher,l,s)}},validateParams:async function(t,e,r){return Wr(L.publicKey.ecdh,t,e,r)}});const Di=F.getWebCrypto();async function Ui(t,e,r,i,n){const s=L.read(L.webHash,t);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Di.importKey("raw",e,"HKDF",!1,["deriveBits"]),o=await Di.deriveBits({name:"HKDF",hash:s,salt:r,info:i},a,8*n);return new Uint8Array(o)}const Mi={x25519:F.encodeUTF8("OpenPGP X25519"),x448:F.encodeUTF8("OpenPGP X448")};var xi=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n){switch(t){case L.publicKey.x25519:{const t=ze.scalarMult(n,e),s=F.concatUint8Array([e,i,t]),a=L.symmetric.aes128,{keySize:o}=nt(a);return di(a,await Ui(L.hash.sha256,s,new Uint8Array,Mi.x25519,o),r)}case L.publicKey.x448:{const t=(await F.getNobleCurve(L.publicKey.x448)).getSharedSecret(n,e),s=F.concatUint8Array([e,i,t]),a=L.symmetric.aes256,{keySize:o}=nt(L.symmetric.aes256);return di(a,await Ui(L.hash.sha512,s,new Uint8Array,Mi.x448,o),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(t,e,r){switch(t){case L.publicKey.x25519:{const t=Se(32),i=ze.scalarMult(t,r),{publicKey:n}=ze.box.keyPair.fromSecretKey(t),s=F.concatUint8Array([n,r,i]),a=L.symmetric.aes128,{keySize:o}=nt(a),c=await Ui(L.hash.sha256,s,new Uint8Array,Mi.x25519,o);return{ephemeralPublicKey:n,wrappedKey:await yi(a,c,e)}}case L.publicKey.x448:{const t=await F.getNobleCurve(L.publicKey.x448),i=t.utils.randomPrivateKey(),n=t.getSharedSecret(i,r),s=t.getPublicKey(i),a=F.concatUint8Array([s,r,n]),o=L.symmetric.aes256,{keySize:c}=nt(L.symmetric.aes256),h=await Ui(L.hash.sha512,a,new Uint8Array,Mi.x448,c);return{ephemeralPublicKey:s,wrappedKey:await yi(o,h,e)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(t){switch(t){case L.publicKey.x25519:{const t=Se(32),{publicKey:e}=ze.box.keyPair.fromSecretKey(t);return{A:e,k:t}}case L.publicKey.x448:{const t=await F.getNobleCurve(L.publicKey.x448),e=t.utils.randomPrivateKey();return{A:t.getPublicKey(e),k:e}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(t){switch(t){case L.publicKey.x25519:return 32;case L.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(t,e,r){switch(t){case L.publicKey.x25519:{const{publicKey:t}=ze.box.keyPair.fromSecretKey(r);return F.equalsUint8Array(e,t)}case L.publicKey.x448:{const t=(await F.getNobleCurve(L.publicKey.x448)).getPublicKey(r);return F.equalsUint8Array(e,t)}default:return!1}}}),Qi=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:Yr,ecdh:Pi,ecdhX:xi,ecdsa:oi,eddsa:li,eddsaLegacy:ci,generate:async function(t){const e=new Yr(t),{oid:r,hash:i,cipher:n}=e,s=await e.genKeyPair();return{oid:r,Q:s.publicKey,secret:F.leftPad(s.privateKey,e.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(t){return Jr[t.getName()].hash}});var Ri=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(t,e,r,i,n,s){const a=await F.getBigInteger(),o=new a(1);let c,h,u,l;i=new a(i),n=new a(n),r=new a(r),s=new a(s),r=r.mod(i),s=s.mod(n);const f=new a(e.subarray(0,n.byteLength())).mod(n);for(;;){if(c=await Ie(o,n),h=r.modExp(c,i).imod(n),h.isZero())continue;const t=s.mul(h).imod(n);if(l=f.add(t).imod(n),u=c.modInv(n).imul(l).imod(n),!u.isZero())break}return{r:h.toUint8Array("be",n.byteLength()),s:u.toUint8Array("be",n.byteLength())}},validateParams:async function(t,e,r,i,n){const s=await F.getBigInteger();t=new s(t),e=new s(e),r=new s(r),i=new s(i);const a=new s(1);if(r.lte(a)||r.gte(t))return!1;if(!t.dec().mod(e).isZero())return!1;if(!r.modExp(e,t).isOne())return!1;const o=new s(e.bitLength()),c=new s(150);if(o.lt(c)||!await Ke(e,null,32))return!1;n=new s(n);const h=new s(2),u=await Ie(h.leftShift(o.dec()),h.leftShift(o)),l=e.mul(u).add(n);return!!i.equal(r.modExp(l,t))},verify:async function(t,e,r,i,n,s,a,o){const c=await F.getBigInteger(),h=new c(0);if(e=new c(e),r=new c(r),s=new c(s),a=new c(a),n=new c(n),o=new c(o),e.lte(h)||e.gte(a)||r.lte(h)||r.gte(a))return F.printDebug("invalid DSA Signature"),!1;const u=new c(i.subarray(0,a.byteLength())).imod(a),l=r.modInv(a);if(l.isZero())return F.printDebug("invalid DSA Signature"),!1;n=n.mod(s),o=o.mod(s);const f=u.mul(l).imod(a),y=e.mul(l).imod(a),d=n.modExp(f,s),p=o.modExp(y,s);return d.mul(p).imod(s).imod(a).equal(e)}});const _i=new Set([L.hash.sha1,L.hash.sha256,L.hash.sha512]),Ti=F.getWebCrypto(),Li=F.getNodeCrypto();var Ni={rsa:Oe,elgamal:Fe,elliptic:Qi,dsa:Ri,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(t){if(!_i.has(t))throw Error("Unsupported hash algorithm.");const e=L.read(L.webHash,t),r=Ti||Li.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:e}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(t,e,r){if(!_i.has(t))throw Error("Unsupported hash algorithm.");const i=L.read(L.webHash,t),n=Ti||Li.webcrypto.subtle,s=await n.importKey("raw",e,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(t,e,r,i){if(!_i.has(t))throw Error("Unsupported hash algorithm.");const n=L.read(L.webHash,t),s=Ti||Li.webcrypto.subtle,a=await s.importKey("raw",e,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class Oi{constructor(t){if(void 0===t&&(t=new Uint8Array([])),!F.isUint8Array(t))throw Error("data must be in the form of a Uint8Array");this.data=t,this.length=this.data.byteLength}write(){return F.concatUint8Array([new Uint8Array([this.length]),this.data])}read(t){if(t.length>=1){const e=t[0];if(t.length>=e+1)return this.data=t.subarray(1,1+e),this.length=e,1+e}throw Error("Invalid octet string")}}var Fi=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(t,e){let r=0;switch(t){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const t=F.readMPI(e.subarray(r));return r+=t.length+2,{read:r,signatureParams:{s:t}}}case L.publicKey.dsa:case L.publicKey.ecdsa:{const t=F.readMPI(e.subarray(r));r+=t.length+2;const i=F.readMPI(e.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:t,s:i}}}case L.publicKey.eddsaLegacy:{let t=F.readMPI(e.subarray(r));r+=t.length+2,t=F.leftPad(t,32);let i=F.readMPI(e.subarray(r));return r+=i.length+2,i=F.leftPad(i,32),{read:r,signatureParams:{r:t,s:i}}}case L.publicKey.ed25519:case L.publicKey.ed448:{const i=2*Ni.elliptic.eddsa.getPayloadSize(t),n=F.readExactSubarray(e,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case L.publicKey.hmac:{const t=new Oi;return r+=t.read(e.subarray(r)),{read:r,signatureParams:{mac:t}}}default:throw new Fr("Unknown signature algorithm.")}},sign:async function(t,e,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(t){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const{n:t,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await Ni.rsa.sign(e,n,t,a,o,c,h,u,s)}}case L.publicKey.dsa:{const{g:t,p:n,q:a}=r,{x:o}=i;return Ni.dsa.sign(e,s,t,n,a,o)}case L.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case L.publicKey.ecdsa:{const{oid:t,Q:a}=r,{d:o}=i;return Ni.elliptic.ecdsa.sign(t,e,n,a,o,s)}case L.publicKey.eddsaLegacy:{const{oid:t,Q:a}=r,{seed:o}=i;return Ni.elliptic.eddsaLegacy.sign(t,e,n,a,o,s)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return Ni.elliptic.eddsa.sign(t,e,n,a,o,s)}case L.publicKey.hmac:{const{cipher:t}=r,{keyMaterial:e}=i,n=await Ni.hmac.sign(t.getValue(),e,s);return{mac:new Oi(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(t,e,r,i,n,s,a){switch(t){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const{n:t,e:n}=i,o=F.leftPad(r.s,t.length);return Ni.rsa.verify(e,s,o,t,n,a)}case L.publicKey.dsa:{const{g:t,p:n,q:s,y:o}=i,{r:c,s:h}=r;return Ni.dsa.verify(e,c,h,a,t,n,s,o)}case L.publicKey.ecdsa:{const{oid:t,Q:n}=i,o=new Ni.elliptic.CurveWithOID(t).payloadSize,c=F.leftPad(r.r,o),h=F.leftPad(r.s,o);return Ni.elliptic.ecdsa.verify(t,e,{r:c,s:h},s,n,a)}case L.publicKey.eddsaLegacy:{const{oid:t,Q:n}=i;return Ni.elliptic.eddsaLegacy.verify(t,e,r,s,n,a)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:n}=i;return Ni.elliptic.eddsa.verify(t,e,r,s,n,a)}case L.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:t}=i,{keyMaterial:e}=n;return Ni.hmac.verify(t.getValue(),e,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class Hi{constructor(t){t&&(this.data=t)}read(t){if(t.length>=1){const e=t[0];if(t.length>=1+e)return this.data=t.subarray(1,1+e),1+this.data.length}throw Error("Invalid symmetric key")}write(){return F.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class zi{constructor(t){if(t){const{version:e,hash:r,cipher:i,replacementFingerprint:n}=t;this.version=e||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(t){if(t.length<4||1!==t[1]&&255!==t[1])throw new Fr("Cannot read KDFParams");const e=t[0];this.version=t[1],this.hash=t[2],this.cipher=t[3];let r=4;if(255===this.version){const i=e-r+1;this.replacementFingerprint=t.slice(r,r+i),r+=i}return r}write(t){if(!this.version||1===this.version||t)return new Uint8Array([3,1,this.hash,this.cipher]);return F.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const Gi=t=>class{constructor(t){this.data=void 0===t?null:t}read(e){const r=e[0];return this.data=L.write(t,r),1}write(){return new Uint8Array([this.data])}getName(){return L.read(t,this.data)}getValue(){return this.data}},qi=Gi(L.aead),ji=Gi(L.symmetric),Vi=Gi(L.hash);class Zi{static fromObject({wrappedKey:t,algorithm:e}){const r=new Zi;return r.wrappedKey=t,r.algorithm=e,r}read(t){let e=0,r=t[e++];this.algorithm=r%2?t[e++]:null,r-=r%2,this.wrappedKey=F.readExactSubarray(t,e,e+r),e+=r}write(){return F.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function Ji(t,e){const r=Se(32);return{privateParams:{hashSeed:r,keyMaterial:t},publicParams:{cipher:e,digest:await vt.sha256(r)}}}function Yi(t){const{keySize:e}=nt(t);return Se(e)}function Wi(t){const e=L.read(L.aead,t);return Ee[e]}function $i(t){try{t.getName()}catch(t){throw new Fr("Unknown curve OID")}}function Xi(t,e){switch(t){case L.publicKey.ecdsa:case L.publicKey.ecdh:case L.publicKey.eddsaLegacy:return new Ni.elliptic.CurveWithOID(e).payloadSize;case L.publicKey.ed25519:case L.publicKey.ed448:return Ni.elliptic.eddsa.getPayloadSize(t);case L.publicKey.x25519:case L.publicKey.x448:return Ni.elliptic.ecdhX.getPayloadSize(t);default:throw Error("Unknown elliptic algo")}}var tn=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(t,e,r,i){switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:return Ni.rsa.generate(e,65537).then((({n:t,e,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:t,e}})));case L.publicKey.ecdsa:return Ni.elliptic.generate(r).then((({oid:t,Q:e,secret:r})=>({privateParams:{d:r},publicParams:{oid:new xr(t),Q:e}})));case L.publicKey.eddsaLegacy:return Ni.elliptic.generate(r).then((({oid:t,Q:e,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new xr(t),Q:e}})));case L.publicKey.ecdh:return Ni.elliptic.generate(r).then((({oid:t,Q:e,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new xr(t),Q:e,kdfParams:new zi({hash:i,cipher:n})}})));case L.publicKey.ed25519:case L.publicKey.ed448:return Ni.elliptic.eddsa.generate(t).then((({A:t,seed:e})=>({privateParams:{seed:e},publicParams:{A:t}})));case L.publicKey.x25519:case L.publicKey.x448:return Ni.elliptic.ecdhX.generate(t).then((({A:t,k:e})=>({privateParams:{k:e},publicParams:{A:t}})));case L.publicKey.hmac:return Ji(await Ni.hmac.generate(i),new Vi(i));case L.publicKey.aead:return Ji(Yi(i),new ji(i));case L.publicKey.dsa:case L.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:Yi,getAEADMode:Wi,getCipherParams:nt,getCurvePayloadSize:Xi,getPreferredCurveHashAlgo:function(t,e){switch(t){case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:return Ni.elliptic.getPreferredHashAlgo(e);case L.publicKey.ed25519:case L.publicKey.ed448:return Ni.elliptic.eddsa.getPreferredHashAlgo(t);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(t){const{blockSize:e}=nt(t),r=await Se(e),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return F.concat([r,i])},parseEncSessionKeyParams:function(t,e){let r=0;switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:return{c:F.readMPI(e.subarray(r))};case L.publicKey.elgamal:{const t=F.readMPI(e.subarray(r));r+=t.length+2;return{c1:t,c2:F.readMPI(e.subarray(r))}}case L.publicKey.ecdh:{const t=F.readMPI(e.subarray(r));r+=t.length+2;const i=new Hi;return i.read(e.subarray(r)),{V:t,C:i}}case L.publicKey.x25519:case L.publicKey.x448:{const i=Xi(t),n=F.readExactSubarray(e,r,r+i);r+=n.length;const s=new Zi;return s.read(e.subarray(r)),{ephemeralPublicKey:n,C:s}}case L.publicKey.aead:{const t=new qi;r+=t.read(e.subarray(r));const{ivLength:i}=Wi(t.getValue()),n=e.subarray(r,r+i);r+=i;const s=new Oi;return r+=s.read(e.subarray(r)),{aeadMode:t,iv:n,c:s}}default:throw new Fr("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(t,e,r){let i=0;switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const t=F.readMPI(e.subarray(i));i+=t.length+2;const r=F.readMPI(e.subarray(i));i+=r.length+2;const n=F.readMPI(e.subarray(i));i+=n.length+2;const s=F.readMPI(e.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:t,p:r,q:n,u:s}}}case L.publicKey.dsa:case L.publicKey.elgamal:{const t=F.readMPI(e.subarray(i));return i+=t.length+2,{read:i,privateParams:{x:t}}}case L.publicKey.ecdsa:case L.publicKey.ecdh:{const n=Xi(t,r.oid);let s=F.readMPI(e.subarray(i));return i+=s.length+2,s=F.leftPad(s,n),{read:i,privateParams:{d:s}}}case L.publicKey.eddsaLegacy:{const n=Xi(t,r.oid);let s=F.readMPI(e.subarray(i));return i+=s.length+2,s=F.leftPad(s,n),{read:i,privateParams:{seed:s}}}case L.publicKey.ed25519:case L.publicKey.ed448:{const r=Xi(t),n=F.readExactSubarray(e,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case L.publicKey.x25519:case L.publicKey.x448:{const r=Xi(t),n=F.readExactSubarray(e,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case L.publicKey.hmac:{const{cipher:t}=r,n=vt.getHashByteLength(t.getValue()),s=e.subarray(i,i+32);i+=32;const a=e.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case L.publicKey.aead:{const{cipher:t}=r,n=e.subarray(i,i+32);i+=32;const{keySize:s}=nt(t.getValue()),a=e.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new Fr("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(t,e){let r=0;switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const t=F.readMPI(e.subarray(r));r+=t.length+2;const i=F.readMPI(e.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:t,e:i}}}case L.publicKey.dsa:{const t=F.readMPI(e.subarray(r));r+=t.length+2;const i=F.readMPI(e.subarray(r));r+=i.length+2;const n=F.readMPI(e.subarray(r));r+=n.length+2;const s=F.readMPI(e.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:t,q:i,g:n,y:s}}}case L.publicKey.elgamal:{const t=F.readMPI(e.subarray(r));r+=t.length+2;const i=F.readMPI(e.subarray(r));r+=i.length+2;const n=F.readMPI(e.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:t,g:i,y:n}}}case L.publicKey.ecdsa:{const t=new xr;r+=t.read(e),$i(t);const i=F.readMPI(e.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:t,Q:i}}}case L.publicKey.eddsaLegacy:{const t=new xr;r+=t.read(e),$i(t);let i=F.readMPI(e.subarray(r));return r+=i.length+2,i=F.leftPad(i,33),{read:r,publicParams:{oid:t,Q:i}}}case L.publicKey.ecdh:{const t=new xr;r+=t.read(e),$i(t);const i=F.readMPI(e.subarray(r));r+=i.length+2;const n=new zi;return r+=n.read(e.subarray(r)),{read:r,publicParams:{oid:t,Q:i,kdfParams:n}}}case L.publicKey.ed25519:case L.publicKey.ed448:case L.publicKey.x25519:case L.publicKey.x448:{const i=F.readExactSubarray(e,r,r+Xi(t));return r+=i.length,{read:r,publicParams:{A:i}}}case L.publicKey.hmac:case L.publicKey.aead:{const t=new ji;r+=t.read(e);const i=vt.getHashByteLength(L.hash.sha256),n=e.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:t,digest:n}}}default:throw new Fr("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(t,e,r,i,n,s){switch(t){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:{const{c:t}=i,{n,e:a}=e,{d:o,p:c,q:h,u}=r;return Ni.rsa.decrypt(t,n,a,o,c,h,u,s)}case L.publicKey.elgamal:{const{c1:t,c2:n}=i,a=e.p,o=r.x;return Ni.elgamal.decrypt(t,n,a,o,s)}case L.publicKey.ecdh:{const{oid:t,Q:s,kdfParams:a}=e,{d:o}=r,{V:c,C:h}=i;return Ni.elliptic.ecdh.decrypt(t,a,c,h.data,s,o,n)}case L.publicKey.x25519:case L.publicKey.x448:{const{A:n}=e,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!F.isAES(o.algorithm))throw Error("AES session key expected");return Ni.elliptic.ecdhX.decrypt(t,a,o.wrappedKey,n,s)}case L.publicKey.aead:{const{cipher:t}=e,n=t.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=Wi(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(t,e,r,i,n,s){switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:{const{n:t,e}=r;return{c:await Ni.rsa.encrypt(n,t,e)}}case L.publicKey.elgamal:{const{p:t,g:e,y:i}=r;return Ni.elgamal.encrypt(n,t,e,i)}case L.publicKey.ecdh:{const{oid:t,Q:e,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await Ni.elliptic.ecdh.encrypt(t,i,n,e,s);return{V:a,C:new Hi(o)}}case L.publicKey.x25519:case L.publicKey.x448:{if(!F.isAES(e))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await Ni.elliptic.ecdhX.encrypt(t,n,i);return{ephemeralPublicKey:s,C:Zi.fromObject({algorithm:e,wrappedKey:a})}}case L.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:t}=r,e=t.getValue(),{keyMaterial:s}=i,a=N.preferredAEADAlgorithm,o=Wi(N.preferredAEADAlgorithm),{ivLength:c}=o,h=Se(c),u=await o(e,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new qi(a),iv:h,c:new Oi(l)}}default:return[]}},serializeParams:function(t,e){const r=new Set([L.publicKey.ed25519,L.publicKey.x25519,L.publicKey.ed448,L.publicKey.x448,L.publicKey.aead,L.publicKey.hmac]),i=Object.keys(e).map((i=>{const n=e[i];return F.isUint8Array(n)?r.has(t)?n:F.uint8ArrayToMPI(n):n.write()}));return F.concatUint8Array(i)},validateParams:async function(t,e,r){if(!e||!r)throw Error("Missing key parameters");switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const{n:t,e:i}=e,{d:n,p:s,q:a,u:o}=r;return Ni.rsa.validateParams(t,i,n,s,a,o)}case L.publicKey.dsa:{const{p:t,q:i,g:n,y:s}=e,{x:a}=r;return Ni.dsa.validateParams(t,i,n,s,a)}case L.publicKey.elgamal:{const{p:t,g:i,y:n}=e,{x:s}=r;return Ni.elgamal.validateParams(t,i,n,s)}case L.publicKey.ecdsa:case L.publicKey.ecdh:{const i=Ni.elliptic[L.read(L.publicKey,t)],{oid:n,Q:s}=e,{d:a}=r;return i.validateParams(n,s,a)}case L.publicKey.eddsaLegacy:{const{Q:t,oid:i}=e,{seed:n}=r;return Ni.elliptic.eddsaLegacy.validateParams(i,t,n)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:i}=e,{seed:n}=r;return Ni.elliptic.eddsa.validateParams(t,i,n)}case L.publicKey.x25519:case L.publicKey.x448:{const{A:i}=e,{k:n}=r;return Ni.elliptic.ecdhX.validateParams(t,i,n)}case L.publicKey.hmac:{const{cipher:t,digest:i}=e,{hashSeed:n,keyMaterial:s}=r;return vt.getHashByteLength(t.getValue())===s.length&&F.equalsUint8Array(i,await vt.sha256(n))}case L.publicKey.aead:{const{cipher:t,digest:i}=e,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=nt(t.getValue());return a===s.length&&F.equalsUint8Array(i,await vt.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const en={cipher:st,hash:vt,mode:Ee,publicKey:Ni,signature:Fi,random:Ce,pkcs1:Qe,pkcs5:bi,aesKW:mi};Object.assign(en,tn);class rn extends Error{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,rn),this.name="Argon2OutOfMemoryError"}}let nn,sn;class an{constructor(t=N){const{passes:e,parallelism:r,memoryExponent:i}=t.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=e,this.p=r,this.encodedM=i}generateSalt(){this.salt=en.random.getRandomBytes(16)}read(t){let e=0;return this.salt=t.subarray(e,e+16),e+=16,this.t=t[e++],this.p=t[e++],this.encodedM=t[e++],e}write(){const t=[new Uint8Array([L.write(L.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return F.concatUint8Array(t)}async produceKey(t,e){const r=2<<this.encodedM-1;try{nn=nn||(await Promise.resolve().then((function(){return Il}))).default,sn=sn||nn();const i=await sn,n=i({version:19,type:2,password:F.encodeUTF8(t),salt:this.salt,tagLength:e,memorySize:r,parallelism:this.p,passes:this.t});return r>1048576&&(sn=nn(),sn.catch((()=>{}))),n}catch(t){throw t.message&&(t.message.includes("Unable to grow instance memory")||t.message.includes("failed to grow memory")||t.message.includes("WebAssembly.Memory.grow")||t.message.includes("Out of memory"))?new rn("Could not allocate required memory for Argon2"):t}}}class on{constructor(t,e=N){this.algorithm=L.hash.sha256,this.type=L.read(L.s2k,t),this.c=e.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=en.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(t){let e=0;switch(this.algorithm=t[e++],this.type){case"simple":break;case"salted":this.salt=t.subarray(e,e+8),e+=8;break;case"iterated":this.salt=t.subarray(e,e+8),e+=8,this.c=t[e++];break;case"gnu":if("GNU"!==F.uint8ArrayToString(t.subarray(e,e+3)))throw new Fr("Unknown s2k type.");e+=3;if(1001!==1e3+t[e++])throw new Fr("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new Fr("Unknown s2k type.")}return e}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...F.stringToUint8Array("GNU"),1]);const t=[new Uint8Array([L.write(L.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":t.push(this.salt);break;case"iterated":t.push(this.salt),t.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return F.concatUint8Array(t)}async produceKey(t,e){t=F.encodeUTF8(t);const r=[];let i=0,n=0;for(;i<e;){let e;switch(this.type){case"simple":e=F.concatUint8Array([new Uint8Array(n),t]);break;case"salted":e=F.concatUint8Array([new Uint8Array(n),this.salt,t]);break;case"iterated":{const r=F.concatUint8Array([this.salt,t]);let i=r.length;const s=Math.max(this.getCount(),i);e=new Uint8Array(n+s),e.set(r,n);for(let t=n+i;t<s;t+=i,i*=2)e.copyWithin(t,n,t);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await en.hash.digest(this.algorithm,e);r.push(s),i+=s.length,n++}return F.concatUint8Array(r).subarray(0,e)}}const cn=new Set([L.s2k.argon2,L.s2k.iterated]);function hn(t,e=N){switch(t){case L.s2k.argon2:return new an(e);case L.s2k.iterated:case L.s2k.gnu:case L.s2k.salted:case L.s2k.simple:return new on(t,e);default:throw new Fr("Unsupported S2K type")}}function un(t){const{s2kType:e}=t;if(!cn.has(e))throw Error("The provided `config.s2kType` value is not allowed");return hn(e,t)}var ln=Uint8Array,fn=Uint16Array,yn=Uint32Array,dn=new ln([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),pn=new ln([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),gn=new ln([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),mn=function(t,e){for(var r=new fn(31),i=0;i<31;++i)r[i]=e+=1<<t[i-1];var n=new yn(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},wn=mn(dn,2),An=wn[0],bn=wn[1];An[28]=258,bn[258]=28;for(var vn=mn(pn,0),En=vn[0],kn=vn[1],Sn=new fn(32768),In=0;In<32768;++In){var Cn=(43690&In)>>>1|(21845&In)<<1;Cn=(61680&(Cn=(52428&Cn)>>>2|(13107&Cn)<<2))>>>4|(3855&Cn)<<4,Sn[In]=((65280&Cn)>>>8|(255&Cn)<<8)>>>1}var Bn=function(t,e,r){for(var i=t.length,n=0,s=new fn(e);n<i;++n)t[n]&&++s[t[n]-1];var a,o=new fn(e);for(n=0;n<e;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new fn(1<<e);var c=15-e;for(n=0;n<i;++n)if(t[n])for(var h=n<<4|t[n],u=e-t[n],l=o[t[n]-1]++<<u,f=l|(1<<u)-1;l<=f;++l)a[Sn[l]>>>c]=h}else for(a=new fn(i),n=0;n<i;++n)t[n]&&(a[n]=Sn[o[t[n]-1]++]>>>15-t[n]);return a},Kn=new ln(288);for(In=0;In<144;++In)Kn[In]=8;for(In=144;In<256;++In)Kn[In]=9;for(In=256;In<280;++In)Kn[In]=7;for(In=280;In<288;++In)Kn[In]=8;var Pn=new ln(32);for(In=0;In<32;++In)Pn[In]=5;var Dn=/*#__PURE__*/Bn(Kn,9,0),Un=/*#__PURE__*/Bn(Kn,9,1),Mn=/*#__PURE__*/Bn(Pn,5,0),xn=/*#__PURE__*/Bn(Pn,5,1),Qn=function(t){for(var e=t[0],r=1;r<t.length;++r)t[r]>e&&(e=t[r]);return e},Rn=function(t,e,r){var i=e/8|0;return(t[i]|t[i+1]<<8)>>(7&e)&r},_n=function(t,e){var r=e/8|0;return(t[r]|t[r+1]<<8|t[r+2]<<16)>>(7&e)},Tn=function(t){return(t+7)/8|0},Ln=function(t,e,r){(null==e||e<0)&&(e=0),(null==r||r>t.length)&&(r=t.length);var i=new(2==t.BYTES_PER_ELEMENT?fn:4==t.BYTES_PER_ELEMENT?yn:ln)(r-e);return i.set(t.subarray(e,r)),i},Nn=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],On=function(t,e,r){var i=Error(e||Nn[t]);if(i.code=t,Error.captureStackTrace&&Error.captureStackTrace(i,On),!r)throw i;return i},Fn=function(t,e,r){r<<=7&e;var i=e/8|0;t[i]|=r,t[i+1]|=r>>>8},Hn=function(t,e,r){r<<=7&e;var i=e/8|0;t[i]|=r,t[i+1]|=r>>>8,t[i+2]|=r>>>16},zn=function(t,e){for(var r=[],i=0;i<t.length;++i)t[i]&&r.push({s:i,f:t[i]});var n=r.length,s=r.slice();if(!n)return[Yn,0];if(1==n){var a=new ln(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(t,e){return t.f-e.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var f=s[0].s;for(i=1;i<n;++i)s[i].s>f&&(f=s[i].s);var y=new fn(f+1),d=Gn(r[u-1],y,0);if(d>e){i=0;var p=0,g=d-e,m=1<<g;for(s.sort((function(t,e){return y[e.s]-y[t.s]||t.f-e.f}));i<n;++i){var w=s[i].s;if(!(y[w]>e))break;p+=m-(1<<d-y[w]),y[w]=e}for(p>>>=g;p>0;){var A=s[i].s;y[A]<e?p-=1<<e-y[A]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;y[b]==e&&(--y[b],++p)}d=e}return[new ln(y),d]},Gn=function(t,e,r){return-1==t.s?Math.max(Gn(t.l,e,r+1),Gn(t.r,e,r+1)):e[t.s]=r},qn=function(t){for(var e=t.length;e&&!t[--e];);for(var r=new fn(++e),i=0,n=t[0],s=1,a=function(t){r[i++]=t},o=1;o<=e;++o)if(t[o]==n&&o!=e)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=t[o]}return[r.subarray(0,i),e]},jn=function(t,e){for(var r=0,i=0;i<e.length;++i)r+=t[i]*e[i];return r},Vn=function(t,e,r){var i=r.length,n=Tn(e+2);t[n]=255&i,t[n+1]=i>>>8,t[n+2]=255^t[n],t[n+3]=255^t[n+1];for(var s=0;s<i;++s)t[n+s+4]=r[s];return 8*(n+4+i)},Zn=function(t,e,r,i,n,s,a,o,c,h,u){Fn(e,u++,r),++n[256];for(var l=zn(n,15),f=l[0],y=l[1],d=zn(s,15),p=d[0],g=d[1],m=qn(f),w=m[0],A=m[1],b=qn(p),v=b[0],E=b[1],k=new fn(19),S=0;S<w.length;++S)k[31&w[S]]++;for(S=0;S<v.length;++S)k[31&v[S]]++;for(var I=zn(k,7),C=I[0],B=I[1],K=19;K>4&&!C[gn[K-1]];--K);var P,D,U,M,x=h+5<<3,Q=jn(n,Kn)+jn(s,Pn)+a,R=jn(n,f)+jn(s,p)+a+14+3*K+jn(k,C)+(2*k[16]+3*k[17]+7*k[18]);if(x<=Q&&x<=R)return Vn(e,u,t.subarray(c,c+h));if(Fn(e,u,1+(R<Q)),u+=2,R<Q){P=Bn(f,y,0),D=f,U=Bn(p,g,0),M=p;var _=Bn(C,B,0);Fn(e,u,A-257),Fn(e,u+5,E-1),Fn(e,u+10,K-4),u+=14;for(S=0;S<K;++S)Fn(e,u+3*S,C[gn[S]]);u+=3*K;for(var T=[w,v],L=0;L<2;++L){var N=T[L];for(S=0;S<N.length;++S){var O=31&N[S];Fn(e,u,_[O]),u+=C[O],O>15&&(Fn(e,u,N[S]>>>5&127),u+=N[S]>>>12)}}}else P=Dn,D=Kn,U=Mn,M=Pn;for(S=0;S<o;++S)if(i[S]>255){O=i[S]>>>18&31;Hn(e,u,P[O+257]),u+=D[O+257],O>7&&(Fn(e,u,i[S]>>>23&31),u+=dn[O]);var F=31&i[S];Hn(e,u,U[F]),u+=M[F],F>3&&(Hn(e,u,i[S]>>>5&8191),u+=pn[F])}else Hn(e,u,P[i[S]]),u+=D[i[S]];return Hn(e,u,P[256]),u+D[256]},Jn=/*#__PURE__*/new yn([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),Yn=/*#__PURE__*/new ln(0),Wn=function(t,e,r,i,n){return function(t,e,r,i,n,s){var a=t.length,o=new ln(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!e||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=Vn(c,h+1,t.subarray(u,l))}else{for(var f=Jn[e-1],y=f>>>13,d=8191&f,p=(1<<r)-1,g=new fn(32768),m=new fn(p+1),w=Math.ceil(r/3),A=2*w,b=function(e){return(t[e]^t[e+1]<<w^t[e+2]<<A)&p},v=new yn(25e3),E=new fn(288),k=new fn(32),S=0,I=0,C=(u=0,0),B=0,K=0;u<a;++u){var P=b(u),D=32767&u,U=m[P];if(g[D]=U,m[P]=D,B<=u){var M=a-u;if((S>7e3||C>24576)&&M>423){h=Zn(t,c,0,v,E,k,I,C,K,u-K,h),C=S=I=0,K=u;for(var x=0;x<286;++x)E[x]=0;for(x=0;x<30;++x)k[x]=0}var Q=2,R=0,_=d,T=D-U&32767;if(M>2&&P==b(u-T))for(var L=Math.min(y,M)-1,N=Math.min(32767,u),O=Math.min(258,M);T<=N&&--_&&D!=U;){if(t[u+Q]==t[u+Q-T]){for(var F=0;F<O&&t[u+F]==t[u+F-T];++F);if(F>Q){if(Q=F,R=T,F>L)break;var H=Math.min(T,F-2),z=0;for(x=0;x<H;++x){var G=u-T+x+32768&32767,q=G-g[G]+32768&32767;q>z&&(z=q,U=G)}}}T+=(D=U)-(U=g[D])+32768&32767}if(R){v[C++]=268435456|bn[Q]<<18|kn[R];var j=31&bn[Q],V=31&kn[R];I+=dn[j]+pn[V],++E[257+j],++k[V],B=u+Q,++S}else v[C++]=t[u],++E[t[u]]}}h=Zn(t,c,s,v,E,k,I,C,K,u-K,h),!s&&7&h&&(h=Vn(c,h+1,Yn))}return Ln(o,0,i+Tn(h)+n)}(t,null==e.level?6:e.level,null==e.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(t.length)))):12+e.mem,r,i,!n)},$n=/*#__PURE__*/function(){function t(t,e){e||"function"!=typeof t||(e=t,t={}),this.ondata=e,this.o=t||{}}return t.prototype.p=function(t,e){this.ondata(Wn(t,this.o,0,0,!e),e)},t.prototype.push=function(t,e){this.ondata||On(5),this.d&&On(4),this.d=e,this.p(t,e||!1)},t}(),Xn=/*#__PURE__*/function(){function t(t){this.s={},this.p=new ln(0),this.ondata=t}return t.prototype.e=function(t){this.ondata||On(5),this.d&&On(4);var e=this.p.length,r=new ln(e+t.length);r.set(this.p),r.set(t,e),this.p=r},t.prototype.c=function(t){this.d=this.s.i=t||!1;var e=this.s.b,r=function(t,e,r){var i=t.length;if(!i||r&&r.f&&!r.l)return e||new ln(0);var n=!e||r,s=!r||r.i;r||(r={}),e||(e=new ln(3*i));var a=function(t){var r=e.length;if(t>r){var i=new ln(Math.max(2*r,t));i.set(e),e=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,f=r.m,y=r.n,d=8*i;do{if(!u){o=Rn(t,c,1);var p=Rn(t,c+1,3);if(c+=3,!p){var g=t[(B=Tn(c)+4)-4]|t[B-3]<<8,m=B+g;if(m>i){s&&On(0);break}n&&a(h+g),e.set(t.subarray(B,m),h),r.b=h+=g,r.p=c=8*m,r.f=o;continue}if(1==p)u=Un,l=xn,f=9,y=5;else if(2==p){var w=Rn(t,c,31)+257,A=Rn(t,c+10,15)+4,b=w+Rn(t,c+5,31)+1;c+=14;for(var v=new ln(b),E=new ln(19),k=0;k<A;++k)E[gn[k]]=Rn(t,c+3*k,7);c+=3*A;var S=Qn(E),I=(1<<S)-1,C=Bn(E,S,1);for(k=0;k<b;){var B,K=C[Rn(t,c,I)];if(c+=15&K,(B=K>>>4)<16)v[k++]=B;else{var P=0,D=0;for(16==B?(D=3+Rn(t,c,3),c+=2,P=v[k-1]):17==B?(D=3+Rn(t,c,7),c+=3):18==B&&(D=11+Rn(t,c,127),c+=7);D--;)v[k++]=P}}var U=v.subarray(0,w),M=v.subarray(w);f=Qn(U),y=Qn(M),u=Bn(U,f,1),l=Bn(M,y,1)}else On(1);if(c>d){s&&On(0);break}}n&&a(h+131072);for(var x=(1<<f)-1,Q=(1<<y)-1,R=c;;R=c){var _=(P=u[_n(t,c)&x])>>>4;if((c+=15&P)>d){s&&On(0);break}if(P||On(2),_<256)e[h++]=_;else{if(256==_){R=c,u=null;break}var T=_-254;if(_>264){var L=dn[k=_-257];T=Rn(t,c,(1<<L)-1)+An[k],c+=L}var N=l[_n(t,c)&Q],O=N>>>4;if(N||On(3),c+=15&N,M=En[O],O>3&&(L=pn[O],M+=_n(t,c)&(1<<L)-1,c+=L),c>d){s&&On(0);break}n&&a(h+131072);for(var F=h+T;h<F;h+=4)e[h]=e[h-M],e[h+1]=e[h+1-M],e[h+2]=e[h+2-M],e[h+3]=e[h+3-M];h=F}}r.l=u,r.p=R,r.b=h,r.f=o,u&&(o=1,r.m=f,r.d=l,r.n=y)}while(!o);return h==e.length?e:Ln(e,0,h)}(this.p,this.o,this.s);this.ondata(Ln(r,e,this.s.b),this.d),this.o=Ln(r,this.s.b-32768),this.s.b=this.o.length,this.p=Ln(this.p,this.s.p/8|0),this.s.p&=7},t.prototype.push=function(t,e){this.e(t),this.c(e)},t}(),ts=/*#__PURE__*/function(){function t(t,e){var r,i;this.c=(r=1,i=0,{p:function(t){for(var e=r,n=i,s=0|t.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=e+=t[a];e=(65535&e)+15*(e>>16),n=(65535&n)+15*(n>>16)}r=e,i=n},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(i%=65521))<<8|i>>>8}}),this.v=1,$n.call(this,t,e)}return t.prototype.push=function(t,e){$n.prototype.push.call(this,t,e)},t.prototype.p=function(t,e){this.c.p(t);var r=Wn(t,this.o,this.v&&2,e&&4,!e);this.v&&(function(t,e){var r=e.level,i=0==r?0:r<6?1:9==r?3:2;t[0]=120,t[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),e&&function(t,e,r){for(;r;++e)t[e]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,e)},t}(),es=/*#__PURE__*/function(){function t(t){this.v=1,Xn.call(this,t)}return t.prototype.push=function(t,e){if(Xn.prototype.e.call(this,t),this.v){if(this.p.length<2&&!e)return;this.p=this.p.subarray(2),this.v=0}e&&(this.p.length<4&&On(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),Xn.prototype.c.call(this,e)},t}(),rs="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{rs.decode(Yn,{stream:!0}),1}catch(t){}var is=void 0!==t?t:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function ns(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default")?t.default:t}var ss=[0,1,3,7,15,31,63,127,255],as=function(t){this.stream=t,this.bitOffset=0,this.curByte=0,this.hasByte=!1};as.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},as.prototype.read=function(t){for(var e=0;t>0;){this._ensureByte();var r=8-this.bitOffset;if(t>=r)e<<=r,e|=ss[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,t-=r;else{e<<=t;var i=r-t;e|=(this.curByte&ss[t]<<i)>>i,this.bitOffset+=t,t=0}}return e},as.prototype.seek=function(t){var e=t%8,r=(t-e)/8;this.bitOffset=e,this.stream.seek(r),this.hasByte=!1},as.prototype.pi=function(){var t,e=new Uint8Array(6);for(t=0;t<e.length;t++)e[t]=this.read(8);return function(t){return Array.prototype.map.call(t,(t=>("00"+t.toString(16)).slice(-2))).join("")}(e)};var os=as,cs=function(){};cs.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},cs.prototype.read=function(t,e,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;t[e++]=n,i++}return i},cs.prototype.seek=function(t){throw Error("abstract method seek() not implemented")},cs.prototype.writeByte=function(t){throw Error("abstract method readByte() not implemented")},cs.prototype.write=function(t,e,r){var i;for(i=0;i<r;i++)this.writeByte(t[e++]);return r},cs.prototype.flush=function(){};var hs,us=cs,ls=(hs=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var t=4294967295;this.getCRC=function(){return~t>>>0},this.updateCRC=function(e){t=t<<8^hs[255&(t>>>24^e)]},this.updateCRCRun=function(e,r){for(;r-- >0;)t=t<<8^hs[255&(t>>>24^e)]}}),fs=os,ys=us,ds=ls,ps=function(t,e){var r,i=t[e];for(r=e;r>0;r--)t[r]=t[r-1];return t[0]=i,i},gs={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},ms={};ms[gs.LAST_BLOCK]="Bad file checksum",ms[gs.NOT_BZIP_DATA]="Not bzip data",ms[gs.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",ms[gs.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",ms[gs.DATA_ERROR]="Data error",ms[gs.OUT_OF_MEMORY]="Out of memory",ms[gs.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var ws=function(t,e){var r=ms[t]||"unknown error";e&&(r+=": "+e);var i=new TypeError(r);throw i.errorCode=t,i},As=function(t,e){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(t,e)};As.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new ds,!0):(this.writeCount=-1,!1)},As.prototype._start_bunzip=function(t,e){var r=new Uint8Array(4);4===t.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||ws(gs.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&ws(gs.NOT_BZIP_DATA,"level out of range"),this.reader=new fs(t),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=e,this.streamCRC=0},As.prototype._get_next_block=function(){var t,e,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&ws(gs.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&ws(gs.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&ws(gs.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(t=0;t<16;t++)if(a&1<<15-t){var h=16*t;for(r=i.read(16),e=0;e<16;e++)r&1<<15-e&&(o[c++]=h+e)}var u=i.read(3);(u<2||u>6)&&ws(gs.DATA_ERROR);var l=i.read(15);0===l&&ws(gs.DATA_ERROR);var f=new Uint8Array(256);for(t=0;t<u;t++)f[t]=t;var y=new Uint8Array(l);for(t=0;t<l;t++){for(e=0;i.read(1);e++)e>=u&&ws(gs.DATA_ERROR);y[t]=ps(f,e)}var d,p=c+2,g=[];for(e=0;e<u;e++){var m,w,A=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),t=0;t<p;t++){for(;(a<1||a>20)&&ws(gs.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;A[t]=a}for(m=w=A[0],t=1;t<p;t++)A[t]>w?w=A[t]:A[t]<m&&(m=A[t]);d={},g.push(d),d.permute=new Uint16Array(258),d.limit=new Uint32Array(22),d.base=new Uint32Array(21),d.minLen=m,d.maxLen=w;var v=0;for(t=m;t<=w;t++)for(b[t]=d.limit[t]=0,a=0;a<p;a++)A[a]===t&&(d.permute[v++]=a);for(t=0;t<p;t++)b[A[t]]++;for(v=a=0,t=m;t<w;t++)v+=b[t],d.limit[t]=v-1,v<<=1,a+=b[t],d.base[t+1]=v-a;d.limit[w+1]=Number.MAX_VALUE,d.limit[w]=v+b[w]-1,d.base[m]=0}var E=new Uint32Array(256);for(t=0;t<256;t++)f[t]=t;var k,S=0,I=0,C=0,B=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,C>=l&&ws(gs.DATA_ERROR),d=g[y[C++]]),t=d.minLen,e=i.read(t);t>d.maxLen&&ws(gs.DATA_ERROR),!(e<=d.limit[t]);t++)e=e<<1|i.read(1);((e-=d.base[t])<0||e>=258)&&ws(gs.DATA_ERROR);var K=d.permute[e];if(0!==K&&1!==K){if(S)for(S=0,I+a>this.dbufSize&&ws(gs.DATA_ERROR),E[k=o[f[0]]]+=a;a--;)B[I++]=k;if(K>c)break;I>=this.dbufSize&&ws(gs.DATA_ERROR),E[k=o[k=ps(f,t=K-1)]]++,B[I++]=k}else S||(S=1,a=0),a+=0===K?S:2*S,S<<=1}for((s<0||s>=I)&&ws(gs.DATA_ERROR),e=0,t=0;t<256;t++)r=e+E[t],E[t]=e,e=r;for(t=0;t<I;t++)B[E[k=255&B[t]]]|=t<<8,E[k]++;var P=0,D=0,U=0;return I&&(D=255&(P=B[s]),P>>=8,U=-1),this.writePos=P,this.writeCurrent=D,this.writeCount=I,this.writeRun=U,!0},As.prototype._read_bunzip=function(t,e){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&ws(gs.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var bs=function(t){if("readByte"in t)return t;var e=new ys;return e.pos=0,e.readByte=function(){return t[this.pos++]},e.seek=function(t){this.pos=t},e.eof=function(){return this.pos>=t.length},e},vs=function(t){var e=new ys,r=!0;if(t)if("number"==typeof t)e.buffer=new Uint8Array(t),r=!1;else{if("writeByte"in t)return t;e.buffer=t,r=!1}else e.buffer=new Uint8Array(16384);return e.pos=0,e.writeByte=function(t){if(r&&this.pos>=this.buffer.length){var e=new Uint8Array(2*this.buffer.length);e.set(this.buffer),this.buffer=e}this.buffer[this.pos++]=t},e.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var t=new Uint8Array(this.pos);t.set(this.buffer.subarray(0,this.pos)),this.buffer=t}return this.buffer},e._coerced=!0,e};var Es=function(t,e,r){for(var i=bs(t),n=vs(e),s=new As(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&ws(gs.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class ks{static get tag(){return L.packet.literalData}constructor(t=new Date){this.format=L.literal.utf8,this.date=F.normalizeDate(t),this.text=null,this.data=null,this.filename=""}setText(t,e=L.literal.utf8){this.format=e,this.text=t,this.data=null}getText(t=!1){return(null===this.text||F.isStream(this.text))&&(this.text=F.decodeUTF8(F.nativeEOL(this.getBytes(t)))),this.text}setBytes(t,e){this.format=e,this.data=t,this.text=null}getBytes(t=!1){return null===this.data&&(this.data=F.canonicalizeEOL(F.encodeUTF8(this.text))),t?P(this.data):this.data}setFilename(t){this.filename=t}getFilename(){return this.filename}async read(t){await B(t,(async t=>{const e=await t.readByte(),r=await t.readByte();this.filename=F.decodeUTF8(await t.readBytes(r)),this.date=F.readDate(await t.readBytes(4));let i=t.remainder();l(i)&&(i=await M(i)),this.setBytes(i,e)}))}writeHeader(){const t=F.encodeUTF8(this.filename),e=new Uint8Array([t.length]),r=new Uint8Array([this.format]),i=F.writeDate(this.date);return F.concatUint8Array([r,e,t,i])}write(){const t=this.writeHeader(),e=this.getBytes();return F.concat([t,e])}}class Ss{constructor(){this.bytes=""}read(t){return this.bytes=F.uint8ArrayToString(t.subarray(0,8)),this.bytes.length}write(){return F.stringToUint8Array(this.bytes)}toHex(){return F.uint8ArrayToHex(F.stringToUint8Array(this.bytes))}equals(t,e=!1){return e&&(t.isWildcard()||this.isWildcard())||this.bytes===t.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(t){return t.toHex()}static fromID(t){const e=new Ss;return e.read(F.hexToUint8Array(t)),e}static wildcard(){const t=new Ss;return t.read(new Uint8Array(8)),t}}const Is=Symbol("verified"),Cs=new Set([L.signatureSubpacket.issuerKeyID,L.signatureSubpacket.issuerFingerprint,L.signatureSubpacket.embeddedSignature]);class Bs{static get tag(){return L.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Ss,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Is]=null}read(t){let e=0;if(this.version=t[e++],4!==this.version&&5!==this.version&&6!==this.version)throw new Fr(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=t[e++],this.publicKeyAlgorithm=t[e++],this.hashAlgorithm=t[e++],e+=this.readSubPackets(t.subarray(e,t.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=t.subarray(0,e),e+=this.readSubPackets(t.subarray(e,t.length),!1),this.signedHashValue=t.subarray(e,e+2),e+=2,6===this.version){const r=t[e++];this.salt=t.subarray(e,e+r),e+=r}const r=t.subarray(e,t.length),{read:i,signatureParams:n}=en.signature.parseSignatureParams(this.publicKeyAlgorithm,r);if(i<r.length)throw Error("Error reading MPIs");this.params=n}writeParams(){return this.params instanceof Promise?Q((async()=>en.serializeParams(this.publicKeyAlgorithm,await this.params))):en.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const t=[];return t.push(this.signatureData),t.push(this.writeUnhashedSubPackets()),t.push(this.signedHashValue),6===this.version&&(t.push(new Uint8Array([this.salt.length])),t.push(this.salt)),t.push(this.writeParams()),F.concat(t)}async sign(t,e,r=new Date,i=!1){this.version=t.version,this.created=F.normalizeDate(r),this.issuerKeyVersion=t.version,this.issuerFingerprint=t.getFingerprintBytes(),this.issuerKeyID=t.getKeyID();const n=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(n.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=F.concat(n),6===this.version){const t=Ps(this.hashAlgorithm);if(null===this.salt)this.salt=en.random.getRandomBytes(t);else if(t!==this.salt.length)throw Error("Provided salt does not have the required length")}const s=this.toHash(this.signatureType,e,i),a=await this.hash(this.signatureType,e,s,i);this.signedHashValue=U(K(a),0,2);const o=async()=>en.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,t.publicParams,t.privateParams,s,await M(a));F.isStream(a)?this.params=o():(this.params=await o(),this[Is]=!0)}writeHashedSubPackets(){const t=L.signatureSubpacket,e=[];let r;if(null===this.created)throw Error("Missing signature creation time");e.push(Ks(t.signatureCreationTime,!0,F.writeDate(this.created))),null!==this.signatureExpirationTime&&e.push(Ks(t.signatureExpirationTime,!0,F.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&e.push(Ks(t.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),e.push(Ks(t.trustSignature,!0,r))),null!==this.regularExpression&&e.push(Ks(t.regularExpression,!0,this.regularExpression)),null!==this.revocable&&e.push(Ks(t.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&e.push(Ks(t.keyExpirationTime,!0,F.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredSymmetricAlgorithms)),e.push(Ks(t.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=F.concat([r,this.revocationKeyFingerprint]),e.push(Ks(t.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&e.push(Ks(t.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=F.encodeUTF8(i);r.push(F.writeNumber(o.length,2)),r.push(F.writeNumber(n.length,2)),r.push(o),r.push(n),r=F.concat(r),e.push(Ks(t.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredHashAlgorithms)),e.push(Ks(t.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredCompressionAlgorithms)),e.push(Ks(t.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyServerPreferences)),e.push(Ks(t.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&e.push(Ks(t.preferredKeyServer,!1,F.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&e.push(Ks(t.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&e.push(Ks(t.policyURI,!1,F.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyFlags)),e.push(Ks(t.keyFlags,!0,r))),null!==this.signersUserID&&e.push(Ks(t.signersUserID,!1,F.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=F.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),e.push(Ks(t.reasonForRevocation,!0,r))),null!==this.features&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.features)),e.push(Ks(t.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(F.stringToUint8Array(this.signatureTargetHash)),r=F.concat(r),e.push(Ks(t.signatureTarget,!0,r))),null!==this.embeddedSignature&&e.push(Ks(t.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=F.concat(r),e.push(Ks(t.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredAEADAlgorithms)),e.push(Ks(t.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),e.push(Ks(t.preferredCipherSuites,!1,r)));const i=F.concat(e),n=F.writeNumber(i.length,6===this.version?4:2);return F.concat([n,i])}writeUnhashedSubPackets(){const t=[];this.unhashedSubpackets.forEach((e=>{t.push(Rr(e.length)),t.push(e)}));const e=F.concat(t),r=F.writeNumber(e.length,6===this.version?4:2);return F.concat([r,e])}readSubPacket(t,e=!0){let r=0;const i=!!(128&t[r]),n=127&t[r];if(e||(this.unhashedSubpackets.push(t.subarray(r,t.length)),Cs.has(n)))switch(r++,n){case L.signatureSubpacket.signatureCreationTime:this.created=F.readDate(t.subarray(r,t.length));break;case L.signatureSubpacket.signatureExpirationTime:{const e=F.readNumber(t.subarray(r,t.length));this.signatureNeverExpires=0===e,this.signatureExpirationTime=e;break}case L.signatureSubpacket.exportableCertification:this.exportable=1===t[r++];break;case L.signatureSubpacket.trustSignature:this.trustLevel=t[r++],this.trustAmount=t[r++];break;case L.signatureSubpacket.regularExpression:this.regularExpression=t[r];break;case L.signatureSubpacket.revocable:this.revocable=1===t[r++];break;case L.signatureSubpacket.keyExpirationTime:{const e=F.readNumber(t.subarray(r,t.length));this.keyExpirationTime=e,this.keyNeverExpires=0===e;break}case L.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.revocationKey:this.revocationKeyClass=t[r++],this.revocationKeyAlgorithm=t[r++],this.revocationKeyFingerprint=t.subarray(r,r+20);break;case L.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(t.subarray(r,t.length));else if(e)throw Error("Unexpected Issuer Key ID subpacket");break;case L.signatureSubpacket.notationData:{const e=!!(128&t[r]);r+=4;const n=F.readNumber(t.subarray(r,r+2));r+=2;const s=F.readNumber(t.subarray(r,r+2));r+=2;const a=F.decodeUTF8(t.subarray(r,r+n)),o=t.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:e,value:o,critical:i}),e&&(this.notations[a]=F.decodeUTF8(o));break}case L.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=F.decodeUTF8(t.subarray(r,t.length));break;case L.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==t[r++];break;case L.signatureSubpacket.policyURI:this.policyURI=F.decodeUTF8(t.subarray(r,t.length));break;case L.signatureSubpacket.keyFlags:this.keyFlags=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.signersUserID:this.signersUserID=F.decodeUTF8(t.subarray(r,t.length));break;case L.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=t[r++],this.reasonForRevocationString=F.decodeUTF8(t.subarray(r,t.length));break;case L.signatureSubpacket.features:this.features=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=t[r++],this.signatureTargetHashAlgorithm=t[r++];const e=en.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=F.uint8ArrayToString(t.subarray(r,r+e));break}case L.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Bs,this.embeddedSignature.read(t.subarray(r,t.length));break;case L.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=t[r++],this.issuerFingerprint=t.subarray(r,t.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case L.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...t.subarray(r,t.length)];break;case L.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let e=r;e<t.length;e+=2)this.preferredCipherSuites.push([t[e],t[e+1]]);break;default:{const t=Error("Unknown signature subpacket type "+n);if(i)throw t;F.printDebug(t)}}}readSubPackets(t,e=!0,r){const i=6===this.version?4:2,n=F.readNumber(t.subarray(0,i));let s=i;for(;s<2+n;){const i=Qr(t.subarray(s,t.length));s+=i.offset,this.readSubPacket(t.subarray(s,s+i.len),e,r),s+=i.len}return s}toSign(t,e){const r=L.signature;switch(t){case r.binary:return null!==e.text?F.encodeUTF8(e.getText(!0)):e.getBytes(!0);case r.text:{const t=e.getBytes(!0);return F.canonicalizeEOL(t)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let t,i;if(e.userID)i=180,t=e.userID;else{if(!e.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,t=e.userAttribute}const n=t.write();return F.concat([this.toSign(r.key,e),new Uint8Array([i]),F.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return F.concat([this.toSign(r.key,e),this.toSign(r.key,{key:e.bind})]);case r.key:if(void 0===e.key)throw Error("Key packet is required for this signature.");return e.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,e);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(t,e){let r=0;return I(K(this.signatureData),(t=>{r+=t.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==L.signature.binary&&this.signatureType!==L.signature.text||(e?i.push(new Uint8Array(6)):i.push(t.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(F.writeNumber(r,4)),F.concat(i)}))}toHash(t,e,r=!1){const i=this.toSign(t,e);return F.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(e,r)])}async hash(t,e,r,i=!1){if(6===this.version&&this.salt.length!==Ps(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(t,e,i)),en.hash.digest(this.hashAlgorithm,r)}async verify(t,e,r,i=new Date,n=!1,s=N){if(!this.issuerKeyID.equals(t.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==t.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=e===L.signature.binary||e===L.signature.text;if(!(this[Is]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(e,r,n),s=await this.hash(e,r,i)),s=await M(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===L.publicKey.hmac?t.privateParams:null;if(this[Is]=await en.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,t.publicParams,a,i,s),!this[Is])throw Error("Signature verification failed")}const o=F.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+L.read(L.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[L.signature.binary,L.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+L.read(L.hash,this.hashAlgorithm).toUpperCase());if(this.rawNotations.forEach((({name:t,critical:e})=>{if(e&&s.knownNotations.indexOf(t)<0)throw Error("Unknown critical notation: "+t)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(t=new Date){const e=F.normalizeDate(t);return null!==e&&!(this.created<=e&&e<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ks(t,e,r){const i=[];return i.push(Rr(r.length+1)),i.push(new Uint8Array([(e?128:0)|t])),i.push(r),F.concat(i)}function Ps(t){switch(t){case L.hash.sha256:return 16;case L.hash.sha384:return 24;case L.hash.sha512:return 32;case L.hash.sha224:case L.hash.sha3_256:return 16;case L.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Ds{static get tag(){return L.packet.onePassSignature}static fromSignaturePacket(t,e){const r=new Ds;return r.version=6===t.version?6:3,r.signatureType=t.signatureType,r.hashAlgorithm=t.hashAlgorithm,r.publicKeyAlgorithm=t.publicKeyAlgorithm,r.issuerKeyID=t.issuerKeyID,r.salt=t.salt,r.issuerFingerprint=t.issuerFingerprint,r.flags=e?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(t){let e=0;if(this.version=t[e++],3!==this.version&&6!==this.version)throw new Fr(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=t[e++],this.hashAlgorithm=t[e++],this.publicKeyAlgorithm=t[e++],6===this.version){const r=t[e++];this.salt=t.subarray(e,e+r),e+=r,this.issuerFingerprint=t.subarray(e,e+32),e+=32,this.issuerKeyID=new Ss,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Ss,this.issuerKeyID.read(t.subarray(e,e+8)),e+=8;return this.flags=t[e++],this}write(){const t=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?t.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):t.push(this.issuerKeyID.write()),t.push(new Uint8Array([this.flags])),F.concatUint8Array(t)}calculateTrailer(...t){return Q((async()=>Bs.prototype.calculateTrailer.apply(await this.correspondingSig,t)))}async verify(){const t=await this.correspondingSig;if(!t||t.constructor.tag!==L.packet.signature)throw Error("Corresponding signature packet missing");if(t.signatureType!==this.signatureType||t.hashAlgorithm!==this.hashAlgorithm||t.publicKeyAlgorithm!==this.publicKeyAlgorithm||!t.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===t.version||6===this.version&&6!==t.version||6===this.version&&!F.equalsUint8Array(t.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!F.equalsUint8Array(t.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return t.hashed=this.hashed,t.verify.apply(t,arguments)}}function Us(t,e){if(!e[t]){let e;try{e=L.read(L.packet,t)}catch(e){throw new Hr("Unknown packet type with tag: "+t)}throw Error("Packet not allowed in this context: "+e)}return new e[t]}Ds.prototype.hash=Bs.prototype.hash,Ds.prototype.toHash=Bs.prototype.toHash,Ds.prototype.toSign=Bs.prototype.toSign;class Ms extends Array{static async fromBinary(t,e,r=N){const i=new Ms;return await i.read(t,e,r),i}async read(t,e,r=N){r.additionalAllowedPackets.length&&(e={...e,...F.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=C(t,(async(t,i)=>{const n=_(i);try{for(;;){await n.ready;if(await Or(t,(async t=>{try{if(t.tag===L.packet.marker||t.tag===L.packet.trust||t.tag===L.packet.padding)return;const i=Us(t.tag,e);i.packets=new Ms,i.fromStream=F.isStream(t.packet),await i.read(t.packet,r),await n.write(i)}catch(e){if(e instanceof Hr){if(!(t.tag<=39))return;await n.abort(e)}const i=!r.ignoreUnsupportedPackets&&e instanceof Fr,s=!(r.ignoreMalformedPackets||e instanceof Fr);if(i||s||Nr(t.tag))await n.abort(e);else{const e=new zr(t.tag,t.packet);await n.write(e)}F.printDebugError(e)}})))return await n.ready,void await n.close()}}catch(t){await n.abort(t)}}));const i=R(this.stream);for(;;){const{done:t,value:e}=await i.read();if(t?this.stream=null:this.push(e),t||Nr(e.constructor.tag))break}i.releaseLock()}write(){const t=[];for(let e=0;e<this.length;e++){const r=this[e]instanceof zr?this[e].tag:this[e].constructor.tag,i=this[e].write();if(F.isStream(i)&&Nr(this[e].constructor.tag)){let e=[],n=0;const s=512;t.push(Tr(r)),t.push(I(i,(t=>{if(e.push(t),n+=t.length,n>=s){const t=Math.min(Math.log(n)/Math.LN2|0,30),r=2**t,i=F.concat([_r(t)].concat(e));return e=[i.subarray(1+r)],n=e[0].length,i.subarray(0,1+r)}}),(()=>F.concat([Rr(n)].concat(e)))))}else{if(F.isStream(i)){let e=0;t.push(I(K(i),(t=>{e+=t.length}),(()=>Lr(r,e))))}else t.push(Lr(r,i.length));t.push(i)}}return F.concat(t)}filterByTag(...t){const e=new Ms,r=t=>e=>t===e;for(let i=0;i<this.length;i++)t.some(r(this[i].constructor.tag))&&e.push(this[i]);return e}findPacket(t){return this.find((e=>e.constructor.tag===t))}indexOfTag(...t){const e=[],r=this,i=t=>e=>t===e;for(let n=0;n<this.length;n++)t.some(i(r[n].constructor.tag))&&e.push(n);return e}}const xs=/*#__PURE__*/F.constructAllowedPackets([ks,Ds,Bs]);class Qs{static get tag(){return L.packet.compressedData}constructor(t=N){this.packets=null,this.algorithm=t.preferredCompressionAlgorithm,this.compressed=null}async read(t,e=N){await B(t,(async t=>{this.algorithm=await t.readByte(),this.compressed=t.remainder(),await this.decompress(e)}))}write(){return null===this.compressed&&this.compress(),F.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(t=N){const e=L.read(L.compression,this.algorithm),r=Ns[e];if(!r)throw Error(e+" decompression not supported");this.packets=await Ms.fromBinary(r(this.compressed),xs,t)}compress(){const t=L.read(L.compression,this.algorithm),e=Ls[t];if(!e)throw Error(t+" compression not supported");this.compressed=e(this.packets.write())}}function Rs(t,e){return r=>{if(!F.isStream(r)||l(r))return Q((()=>M(r).then((t=>new Promise(((r,i)=>{const n=new e;n.ondata=t=>{r(t)};try{n.push(t,!0)}catch(t){i(t)}}))))));if(t)try{const e=t();return r.pipeThrough(e)}catch(t){if("TypeError"!==t.name)throw t}const i=r.getReader(),n=new e;return new ReadableStream({async start(t){for(n.ondata=async(e,r)=>{t.enqueue(e),r&&t.close()};;){const{done:t,value:e}=await i.read();if(t)return void n.push(new Uint8Array,!0);e.length&&n.push(e)}}})}}function _s(t){return function(e){return Q((async()=>t(await M(e))))}}const Ts=t=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(t)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(t))}),Ls={zip:/*#__PURE__*/Rs(Ts("deflate-raw").compressor,$n),zlib:/*#__PURE__*/Rs(Ts("deflate").compressor,ts)},Ns={uncompressed:t=>t,zip:/*#__PURE__*/Rs(Ts("deflate-raw").decompressor,Xn),zlib:/*#__PURE__*/Rs(Ts("deflate").decompressor,es),bzip2:/*#__PURE__*/_s(Es)},Os=/*#__PURE__*/F.constructAllowedPackets([ks,Qs,Ds,Bs]);class Fs{static get tag(){return L.packet.symEncryptedIntegrityProtectedData}static fromObject({version:t,aeadAlgorithm:e}){if(1!==t&&2!==t)throw Error("Unsupported SEIPD version");const r=new Fs;return r.version=t,2===t&&(r.aeadAlgorithm=e),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(t){await B(t,(async t=>{if(this.version=await t.readByte(),1!==this.version&&2!==this.version)throw new Fr(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await t.readByte(),this.aeadAlgorithm=await t.readByte(),this.chunkSizeByte=await t.readByte(),this.salt=await t.readBytes(32)),this.encrypted=t.remainder()}))}write(){return 2===this.version?F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):F.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(t,e,r=N){let i=this.packets.write();if(l(i)&&(i=await M(i)),2===this.version)this.cipherAlgorithm=t,this.salt=en.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await Hs(this,"encrypt",e,i);else{const{blockSize:n}=en.getCipherParams(t),s=await en.getPrefixRandom(t),a=new Uint8Array([211,20]),o=F.concat([s,i,a]),c=await en.hash.sha1(P(o)),h=F.concat([o,c]);this.encrypted=await en.mode.cfb.encrypt(t,e,h,new Uint8Array(n),r)}return!0}async decrypt(t,e,r=N){let i,n=K(this.encrypted);if(l(n)&&(n=await M(n)),2===this.version)i=await Hs(this,"decrypt",e,n);else{const{blockSize:s}=en.getCipherParams(t),a=await en.mode.cfb.decrypt(t,e,n,new Uint8Array(s)),o=U(P(a),-20),c=U(a,0,-20),h=Promise.all([M(await en.hash.sha1(P(c))),M(o)]).then((([t,e])=>{if(!F.equalsUint8Array(t,e))throw Error("Modification detected.");return new Uint8Array})),u=U(c,s+2);i=U(u,0,-2),i=v([i,Q((()=>h))]),F.isStream(n)&&r.allowUnauthenticatedStream||(i=await M(i))}return this.packets=await Ms.fromBinary(i,Os,r),!0}}async function Hs(t,e,r,i){const n=t instanceof Fs&&2===t.version,s=!n&&t.constructor.tag===L.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=en.getAEADMode(t.aeadAlgorithm),o="decrypt"===e?a.tagLength:0,c="encrypt"===e?a.tagLength:0,h=2**(t.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),f=new Uint8Array(l,0,5+u),y=new Uint8Array(l),d=new DataView(l),p=new Uint8Array(l,5,8);f.set([192|t.constructor.tag,t.version,t.cipherAlgorithm,t.aeadAlgorithm,t.chunkSizeByte],0);let g,m,w=0,A=Promise.resolve(),b=0,v=0;if(n){const{keySize:e}=en.getCipherParams(t.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await Ui(L.hash.sha256,r,t.salt,n,e+i);r=s.subarray(0,e),g=s.subarray(e),g.fill(0,g.length-8),m=new DataView(g.buffer,g.byteOffset,g.byteLength)}else g=t.iv;const k=await a(t.cipherAlgorithm,r);return C(i,(async(r,i)=>{if("array"!==F.isStream(r)){const e=new TransformStream({},{highWaterMark:F.getHardwareConcurrency()*2**(t.chunkSizeByte+6),size:t=>t.length});E(e.readable,i),i=e.writable}const s=R(r),a=_(i);try{for(;;){let t=await s.readBytes(h+o)||new Uint8Array;const r=t.subarray(t.length-o);let i,l,E;if(t=t.subarray(0,t.length-o),n)E=g;else{E=g.slice();for(let t=0;t<8;t++)E[g.length-8+t]^=p[t]}if(!w||t.length?(s.unshift(r),i=k[e](t,E,f),i.catch((()=>{})),v+=t.length-o+c):(d.setInt32(5+u+4,b),i=k[e](r,E,y),i.catch((()=>{})),v+=c,l=!0),b+=t.length-o,A=A.then((()=>i)).then((async t=>{await a.ready,await a.write(t),v-=t.length})).catch((t=>a.abort(t))),(l||v>a.desiredSize)&&await A,l){await a.close();break}n?m.setInt32(g.length-4,++w):d.setInt32(9,++w)}}catch(t){await a.ready.catch((()=>{})),await a.abort(t)}}))}const zs=/*#__PURE__*/F.constructAllowedPackets([ks,Qs,Ds,Bs]);class Gs{static get tag(){return L.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=L.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(t){await B(t,(async t=>{const e=await t.readByte();if(1!==e)throw new Fr(`Version ${e} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await t.readByte(),this.aeadAlgorithm=await t.readByte(),this.chunkSizeByte=await t.readByte();const r=en.getAEADMode(this.aeadAlgorithm);this.iv=await t.readBytes(r.ivLength),this.encrypted=t.remainder()}))}write(){return F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(t,e,r=N){this.packets=await Ms.fromBinary(await Hs(this,"decrypt",e,K(this.encrypted)),zs,r)}async encrypt(t,e,r=N){this.cipherAlgorithm=t;const{ivLength:i}=en.getAEADMode(this.aeadAlgorithm);this.iv=en.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await Hs(this,"encrypt",e,n)}}class qs{static get tag(){return L.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Ss,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:t,encryptionKeyPacket:e,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new qs;if(3!==t&&6!==t)throw Error("Unsupported PKESK version");return s.version=t,6===t&&(s.publicKeyVersion=r?null:e.version,s.publicKeyFingerprint=r?null:e.getFingerprintBytes()),s.publicKeyID=r?Ss.wildcard():e.getKeyID(),s.publicKeyAlgorithm=e.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(t){let e=0;if(this.version=t[e++],3!==this.version&&6!==this.version)throw new Fr(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=t[e++];if(r){this.publicKeyVersion=t[e++];const i=r-1;this.publicKeyFingerprint=t.subarray(e,e+i),e+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Ss.wildcard()}else e+=this.publicKeyID.read(t.subarray(e,e+8));this.publicKeyAlgorithm=t[e++],this.encrypted=en.parseEncSessionKeyParams(this.publicKeyAlgorithm,t.subarray(e)),3!==this.version||this.publicKeyAlgorithm!==L.publicKey.x25519&&this.publicKeyAlgorithm!==L.publicKey.x448||(this.sessionKeyAlgorithm=L.write(L.symmetric,this.encrypted.C.algorithm))}write(){const t=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(t.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),t.push(this.publicKeyFingerprint)):t.push(new Uint8Array([0])):t.push(this.publicKeyID.write()),t.push(new Uint8Array([this.publicKeyAlgorithm]),en.serializeParams(this.publicKeyAlgorithm,this.encrypted)),F.concatUint8Array(t)}async encrypt(t){const e=L.write(L.publicKey,this.publicKeyAlgorithm),r=js(this.version,e,this.sessionKeyAlgorithm,this.sessionKey),i=e===L.publicKey.aead?t.privateParams:null;this.encrypted=await en.publicKeyEncrypt(e,this.sessionKeyAlgorithm,t.publicParams,i,r,t.getFingerprintBytes())}async decrypt(t,e){if(this.publicKeyAlgorithm!==t.algorithm)throw Error("Decryption error");const r=e?js(this.version,this.publicKeyAlgorithm,e.sessionKeyAlgorithm,e.sessionKey):null,i=await en.publicKeyDecrypt(this.publicKeyAlgorithm,t.publicParams,t.privateParams,this.encrypted,t.getFingerprintBytes(),r),{sessionKey:n,sessionKeyAlgorithm:s}=function(t,e,r,i){switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.aead:{const e=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=F.writeChecksum(e.subarray(e.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===t?{sessionKeyAlgorithm:null,sessionKey:e}:{sessionKeyAlgorithm:e[0],sessionKey:e.subarray(1)};if(i){const e=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:F.selectUint8Array(e,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===t?null:F.selectUint8(e,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===t||L.read(L.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case L.publicKey.x25519:case L.publicKey.x448:return{sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,e);3===this.version&&this.publicKeyAlgorithm!==L.publicKey.x25519&&this.publicKeyAlgorithm!==L.publicKey.x448&&(this.sessionKeyAlgorithm=s),this.sessionKey=n}}function js(t,e,r,i){switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.aead:return F.concatUint8Array([new Uint8Array(6===t?[]:[r]),i,F.writeChecksum(i.subarray(i.length%8))]);case L.publicKey.x25519:case L.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class Vs{static get tag(){return L.packet.symEncryptedSessionKey}constructor(t=N){this.version=t.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=L.symmetric.aes256,this.aeadAlgorithm=L.write(L.aead,t.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(t){let e=0;if(this.version=t[e++],4!==this.version&&5!==this.version&&6!==this.version)throw new Fr(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&e++;const r=t[e++];this.version>=5&&(this.aeadAlgorithm=t[e++],6===this.version&&e++);const i=t[e++];if(this.s2k=hn(i),e+=this.s2k.read(t.subarray(e,t.length)),this.version>=5){const r=en.getAEADMode(this.aeadAlgorithm);this.iv=t.subarray(e,e+=r.ivLength)}this.version>=5||e<t.length?(this.encrypted=t.subarray(e,t.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const t=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let e;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;e=F.concatUint8Array([new Uint8Array([this.version,n,t,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?e=F.concatUint8Array([new Uint8Array([this.version,t,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(e=F.concatUint8Array([new Uint8Array([this.version,t]),r]),null!==this.encrypted&&(e=F.concatUint8Array([e,this.encrypted])));return e}async decrypt(t){const e=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=en.getCipherParams(e),n=await this.s2k.produceKey(t,i);if(this.version>=5){const t=en.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|Vs.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await Ui(L.hash.sha256,n,new Uint8Array,r,i):n,a=await t(e,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const t=await en.mode.cfb.decrypt(e,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=L.write(L.symmetric,t[0]),this.sessionKey=t.subarray(1,t.length)}else this.sessionKey=n}async encrypt(t,e=N){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=un(e),this.s2k.generateSalt();const{blockSize:i,keySize:n}=en.getCipherParams(r),s=await this.s2k.produceKey(t,n);if(null===this.sessionKey&&(this.sessionKey=en.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const t=en.getAEADMode(this.aeadAlgorithm);this.iv=en.random.getRandomBytes(t.ivLength);const e=new Uint8Array([192|Vs.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await Ui(L.hash.sha256,s,new Uint8Array,e,n):s,a=await t(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,e)}else{const t=F.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await en.mode.cfb.encrypt(r,s,t,new Uint8Array(i),e)}}}class Zs{static get tag(){return L.packet.publicKey}constructor(t=new Date,e=N){this.version=e.v6Keys?6:4,this.created=F.normalizeDate(t),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(t){const e=new Zs,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=t;return e.version=r,e.created=i,e.algorithm=n,e.publicParams=s,e.keyID=a,e.fingerprint=o,e}async read(t){let e=0;if(this.version=t[e++],4===this.version||5===this.version||6===this.version){this.created=F.readDate(t.subarray(e,e+4)),e+=4,this.algorithm=t[e++],this.version>=5&&(e+=4);const{read:r,publicParams:i}=en.parsePublicKeyParams(this.algorithm,t.subarray(e));if(6===this.version&&i.oid&&(i.oid.getName()===L.curve.curve25519Legacy||i.oid.getName()===L.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,e+=r,await this.computeFingerprintAndKeyID(),e}throw new Fr(`Version ${this.version} of the key packet is unsupported.`)}write(){const t=[];t.push(new Uint8Array([this.version])),t.push(F.writeDate(this.created)),t.push(new Uint8Array([this.algorithm]));const e=en.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&t.push(F.writeNumber(e.length,4)),t.push(e),F.concatUint8Array(t)}writeForHash(t){const e=this.writePublicKey(),r=149+t,i=t>=5?4:2;return F.concatUint8Array([new Uint8Array([r]),F.writeNumber(e.length,i),e])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Ss,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const t=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await en.hash.sha256(t);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await en.hash.sha1(t)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return F.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(t){return this.version===t.version&&F.equalsUint8Array(this.writePublicKey(),t.writePublicKey())}getAlgorithmInfo(){const t={};t.algorithm=L.read(L.publicKey,this.algorithm);const e=this.publicParams.n||this.publicParams.p;return e?t.bits=F.uint8ArrayBitLength(e):this.publicParams.oid?t.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(t.symmetric=this.publicParams.cipher.getName()),t}}Zs.prototype.readPublicKey=Zs.prototype.read,Zs.prototype.writePublicKey=Zs.prototype.write;const Js=/*#__PURE__*/F.constructAllowedPackets([ks,Qs,Ds,Bs]);class Ys{static get tag(){return L.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(t){this.encrypted=t}write(){return this.encrypted}async decrypt(t,e,r=N){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=en.getCipherParams(t),n=await M(K(this.encrypted)),s=await en.mode.cfb.decrypt(t,e,n.subarray(i+2),n.subarray(2,i+2));this.packets=await Ms.fromBinary(s,Js,r)}async encrypt(t,e,r=N){const i=this.packets.write(),{blockSize:n}=en.getCipherParams(t),s=await en.getPrefixRandom(t),a=await en.mode.cfb.encrypt(t,e,s,new Uint8Array(n),r),o=await en.mode.cfb.encrypt(t,e,i,a.subarray(2),r);this.encrypted=F.concat([a,o])}}class Ws extends Zs{static get tag(){return L.packet.publicSubkey}constructor(t,e){super(t,e)}static fromSecretSubkeyPacket(t){const e=new Ws,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=t;return e.version=r,e.created=i,e.algorithm=n,e.publicParams=s,e.keyID=a,e.fingerprint=o,e}}class $s{static get tag(){return L.packet.userAttribute}constructor(){this.attributes=[]}read(t){let e=0;for(;e<t.length;){const r=Qr(t.subarray(e,t.length));e+=r.offset,this.attributes.push(F.uint8ArrayToString(t.subarray(e,e+r.len))),e+=r.len}}write(){const t=[];for(let e=0;e<this.attributes.length;e++)t.push(Rr(this.attributes[e].length)),t.push(F.stringToUint8Array(this.attributes[e]));return F.concatUint8Array(t)}equals(t){return!!(t&&t instanceof $s)&&this.attributes.every((function(e,r){return e===t.attributes[r]}))}}class Xs extends Zs{static get tag(){return L.packet.secretKey}constructor(t=new Date,e=N){super(t,e),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(t,e=N){let r=await this.readPublicKey(t);const i=r;this.s2kUsage=t[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=t[r++],253===this.s2kUsage&&(this.aead=t[r++]),6===this.version&&r++;const e=t[r++];if(this.s2k=hn(e),r+=this.s2k.read(t.subarray(r,t.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&e.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=t.subarray(r,r+en.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=t.subarray(r,r+en.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(e){if(!this.s2kUsage)throw e;this.unparseableKeyMaterial=t.subarray(i),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=t.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let t;if(6===this.version)t=this.keyMaterial;else if(t=this.keyMaterial.subarray(0,-2),!F.equalsUint8Array(F.writeChecksum(t),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:e,privateParams:r}=en.parsePrivateKeyParams(this.algorithm,t,this.publicParams);if(e<t.length)throw Error("Error reading MPIs");this.privateParams=r}catch(t){if(t instanceof Fr)throw t;throw Error("Error reading MPIs")}}}write(){const t=this.writePublicKey();if(this.unparseableKeyMaterial)return F.concatUint8Array([t,this.unparseableKeyMaterial]);const e=[t];e.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const t=this.s2k.write();6===this.version&&r.push(t.length),r.push(...t)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&e.push(new Uint8Array([r.length])),e.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=en.serializeParams(this.algorithm,this.privateParams)),5===this.version&&e.push(F.writeNumber(this.keyMaterial.length,4)),e.push(this.keyMaterial),this.s2kUsage||6===this.version||e.push(F.writeChecksum(this.keyMaterial))),F.concatUint8Array(e)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(t=N){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=hn(L.s2k.gnu,t),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=L.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(t,e=N){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!t)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=un(e),this.s2k.generateSalt();const r=en.serializeParams(this.algorithm,this.privateParams);this.symmetric=L.symmetric.aes256;const{blockSize:i}=en.getCipherParams(this.symmetric);if(e.aeadProtect){this.s2kUsage=253,this.aead=L.aead.eax;const e=en.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const n=Tr(this.constructor.tag),s=await ta(this.version,this.s2k,t,this.symmetric,this.aead,n),a=await e(this.symmetric,s);this.iv=this.isLegacyAEAD?en.random.getRandomBytes(i):en.random.getRandomBytes(e.ivLength);const o=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([n,this.writePublicKey()]);this.keyMaterial=await a.encrypt(r,this.iv.subarray(0,e.ivLength),o)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const n=await ta(this.version,this.s2k,t,this.symmetric);this.iv=en.random.getRandomBytes(i),this.keyMaterial=await en.mode.cfb.encrypt(this.symmetric,n,F.concatUint8Array([r,await en.hash.sha1(r,e)]),this.iv,e)}}async decrypt(t){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let e;const r=Tr(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(e=await ta(this.version,this.s2k,t,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const t=en.getAEADMode(this.aead),n=await t(this.symmetric,e);try{const e=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,t.ivLength),e)}catch(t){if("Authentication tag mismatch"===t.message)throw Error("Incorrect key passphrase: "+t.message);throw t}}else{const t=await en.mode.cfb.decrypt(this.symmetric,e,this.keyMaterial,this.iv);i=t.subarray(0,-20);const r=await en.hash.sha1(i);if(!F.equalsUint8Array(r,t.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:t}=en.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=t}catch(t){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let t;try{t=await en.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(e){t=!1}if(!t)throw Error("Key is invalid")}async generate(t,e,r){if(6===this.version&&(this.algorithm===L.publicKey.ecdh&&e===L.curve.curve25519Legacy||this.algorithm===L.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${e}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await en.generateParams(this.algorithm,t,e,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((t=>{this.privateParams[t].fill(0),delete this.privateParams[t]})),this.privateParams=null,this.isEncrypted=!0)}}async function ta(t,e,r,i,n,s,a){const{keySize:o}=en.getCipherParams(i),c=await e.produceKey(r,o);if(!n||5===t||a)return c;const h=F.concatUint8Array([s,new Uint8Array([t,i,n])]);return Ui(L.hash.sha256,c,new Uint8Array,h,o)}class ea{static get tag(){return L.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(t){if(F.isString(t)||t.name&&!F.isString(t.name)||t.email&&!F.isEmailAddress(t.email)||t.comment&&!F.isString(t.comment))throw Error("Invalid user ID format");const e=new ea;Object.assign(e,t);const r=[];return e.name&&r.push(e.name),e.comment&&r.push(`(${e.comment})`),e.email&&r.push(`<${e.email}>`),e.userID=r.join(" "),e}read(t,e=N){const r=F.decodeUTF8(t);if(r.length>e.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:t,comment:e,email:r}=i.groups;this.comment=e?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=t?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return F.encodeUTF8(this.userID)}equals(t){return t&&t.userID===this.userID}}class ra extends Xs{static get tag(){return L.packet.secretSubkey}constructor(t=new Date,e=N){super(t,e)}}const ia=/*#__PURE__*/F.constructAllowedPackets([Bs]);class na{constructor(t){this.packets=t||new Ms}write(){return this.packets.write()}armor(t=N){return tt(L.armor.signature,this.write(),void 0,void 0,void 0,t)}getSigningKeyIDs(){return this.packets.map((t=>t.issuerKeyID))}}async function sa(t,e){const r=new ra(t.date,e);return r.packets=null,r.algorithm=L.write(L.publicKey,t.algorithm),await r.generate(t.rsaBits,t.curve,t.symmetric),await r.computeFingerprintAndKeyID(),r}async function aa(t,e){const r=new Xs(t.date,e);return r.packets=null,r.algorithm=L.write(L.publicKey,t.algorithm),await r.generate(t.rsaBits,t.curve,t.symmetric),await r.computeFingerprintAndKeyID(),r}async function oa(t,e,r,i,n=new Date,s){let a,o;for(let c=t.length-1;c>=0;c--)try{(!a||t[c].created>=a.created)&&(await t[c].verify(e,r,i,n,void 0,s),a=t[c])}catch(t){o=t}if(!a)throw F.wrapError(`Could not find valid ${L.read(L.signature,r)} signature in key ${e.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((t,e,r)=>e+" "+r.toLowerCase())),o);return a}function ca(t,e,r=new Date){const i=F.normalizeDate(r);if(null!==i){const r=ya(t,e);return!(t.created<=i&&i<r)}return!1}async function ha(t,e,r,i){const n={};n.key=e,n.bind=t;const s={signatureType:L.signature.subkeyBinding};r.sign?(s.keyFlags=[L.keyFlags.signData],s.embeddedSignature=await ua(n,null,t,{signatureType:L.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[L.keyFlags.forwardedCommunication]:[L.keyFlags.encryptCommunication|L.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await ua(n,null,e,s,r.date,void 0,void 0,void 0,i)}async function ua(t,e,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Bs;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(t,e,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(t){const e=await t.getPrimarySelfSignature(r,i,n);e.preferredHashAlgorithms&&([a]=e.preferredHashAlgorithms,s=en.hash.getHashByteLength(s)<=en.hash.getHashByteLength(a)?a:s)}switch(e.algorithm){case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ed25519:case L.publicKey.ed448:a=en.getPreferredCurveHashAlgo(e.algorithm,e.publicParams.oid)}return en.hash.getHashByteLength(s)<=en.hash.getHashByteLength(a)?a:s}(e,r,n,s,c),h.rawNotations=a,await h.sign(r,t,n,o),h}async function la(t,e,r,i=new Date,n){(t=t[r])&&(e[r].length?await Promise.all(t.map((async function(t){t.isExpired(i)||n&&!await n(t)||e[r].some((function(e){return F.equalsUint8Array(e.writeParams(),t.writeParams())}))||e[r].push(t)}))):e[r]=t)}async function fa(t,e,r,i,n,s,a=new Date,o){s=s||t;const c=[];return await Promise.all(i.map((async function(t){try{n&&!t.issuerKeyID.equals(n.issuerKeyID)||(await t.verify(s,e,r,o.revocationsExpire?a:null,!1,o),c.push(t.issuerKeyID))}catch(t){}}))),n?(n.revoked=!!c.some((t=>t.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function ya(t,e){let r;return!1===e.keyNeverExpires&&(r=t.created.getTime()+1e3*e.keyExpirationTime),r?new Date(r):1/0}function da(t,e={}){if(t.type=t.type||e.type,t.curve=t.curve||e.curve,t.rsaBits=t.rsaBits||e.rsaBits,t.symmetricHash=t.symmetricHash||e.symmetricHash,t.symmetricCipher=t.symmetricCipher||e.symmetricCipher,t.keyExpirationTime=void 0!==t.keyExpirationTime?t.keyExpirationTime:e.keyExpirationTime,t.passphrase=F.isString(t.passphrase)?t.passphrase:e.passphrase,t.date=t.date||e.date,t.sign=t.sign||!1,t.forwarding=t.forwarding||!1,t.sign&&t.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(t.type){case"ecc":try{t.curve=L.write(L.curve,t.curve)}catch(t){throw Error("Unknown curve")}t.curve!==L.curve.ed25519Legacy&&t.curve!==L.curve.curve25519Legacy&&"ed25519"!==t.curve&&"curve25519"!==t.curve||(t.curve=t.sign?L.curve.ed25519Legacy:L.curve.curve25519Legacy),t.sign?t.algorithm=t.curve===L.curve.ed25519Legacy?L.publicKey.eddsaLegacy:L.publicKey.ecdsa:t.algorithm=L.publicKey.ecdh;break;case"curve25519":t.algorithm=t.sign?L.publicKey.ed25519:L.publicKey.x25519;break;case"curve448":t.algorithm=t.sign?L.publicKey.ed448:L.publicKey.x448;break;case"rsa":t.algorithm=L.publicKey.rsaEncryptSign;break;case"symmetric":if(t.sign){t.algorithm=L.publicKey.hmac;try{t.symmetric=L.write(L.hash,t.symmetricHash)}catch(t){throw Error("Unknown hash algorithm")}}else{t.algorithm=L.publicKey.aead;try{t.symmetric=L.write(L.symmetric,t.symmetricCipher)}catch(t){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+t.type)}return t}function pa(t,e,r){switch(t.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.dsa:case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ed25519:case L.publicKey.ed448:case L.publicKey.hmac:if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!e.keyFlags||0!=(e.keyFlags[0]&L.keyFlags.signData);default:return!1}}function ga(t,e,r){switch(t.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.x25519:case L.publicKey.x448:case L.publicKey.aead:if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!e.keyFlags||0!=(e.keyFlags[0]&L.keyFlags.encryptCommunication)||0!=(e.keyFlags[0]&L.keyFlags.encryptStorage);default:return!1}}function ma(t,e,r){if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(t.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.x25519:case L.publicKey.x448:return!(!(!e.keyFlags||0!=(e.keyFlags[0]&L.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!e.keyFlags||0!=(e.keyFlags[0]&L.keyFlags.encryptCommunication)||0!=(e.keyFlags[0]&L.keyFlags.encryptStorage)||r.allowForwardedMessages&&0!=(e.keyFlags[0]&L.keyFlags.forwardedCommunication));default:return!1}}function wa(t,e){const r=L.write(L.publicKey,t.algorithm),i=t.getAlgorithmInfo();if(e.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.rsaEncrypt:if(i.bits<e.minRSABits)throw Error(`RSA keys shorter than ${e.minRSABits} bits are considered too weak.`);break;case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ecdh:if(e.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class Aa{constructor(t,e){this.userID=t.constructor.tag===L.packet.userID?t:null,this.userAttribute=t.constructor.tag===L.packet.userAttribute?t:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=e}toPacketList(){const t=new Ms;return t.push(this.userID||this.userAttribute),t.push(...this.revocationSignatures),t.push(...this.selfCertifications),t.push(...this.otherCertifications),t}clone(){const t=new Aa(this.userID||this.userAttribute,this.mainKey);return t.selfCertifications=[...this.selfCertifications],t.otherCertifications=[...this.otherCertifications],t.revocationSignatures=[...this.revocationSignatures],t}async certify(t,e,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new Aa(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(t.map((async function(t){if(!t.isPrivate())throw Error("Need private key for signing");if(t.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await t.getSigningKey(void 0,e,void 0,r);return ua(n,t,s.keyPacket,{signatureType:L.signature.certGeneric,keyFlags:[L.keyFlags.certifyKeys|L.keyFlags.signData]},e,void 0,void 0,void 0,r)}))),await s.update(this,e,r),s}async isRevoked(t,e,r=new Date,i=N){const n=this.mainKey.keyPacket;return fa(n,L.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,t,e,r,i)}async verifyCertificate(t,e,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=t,c=e.filter((t=>t.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async e=>{const s=await e.getSigningKey(o,t.created,void 0,i);if(t.revoked||await n.isRevoked(t,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await t.verify(s.keyPacket,L.signature.certGeneric,a,r,void 0,i)}catch(t){throw F.wrapError("User certificate is invalid",t)}}))),!0)}async verifyAllCertifications(t,e=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,t,e,r).catch((()=>!1))}))))}async verify(t=new Date,e){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,t,e))throw Error("Self-certification is revoked");try{await s.verify(i,L.signature.certGeneric,n,t,void 0,e)}catch(t){throw F.wrapError("Self-certification is invalid",t)}return!0}catch(t){s=t}throw s}async update(t,e,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await la(t,this,"selfCertifications",e,(async function(t){try{return await t.verify(i,L.signature.certGeneric,n,e,!1,r),!0}catch(t){return!1}})),await la(t,this,"otherCertifications",e),await la(t,this,"revocationSignatures",e,(function(t){return fa(i,L.signature.certRevocation,n,[t],void 0,void 0,e,r)}))}async revoke(t,{flag:e=L.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=N){const s={userID:this.userID,userAttribute:this.userAttribute,key:t},a=new Aa(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await ua(s,null,t,{signatureType:L.signature.certRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,e),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class ba{constructor(t,e){this.keyPacket=t,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=e}toPacketList(){const t=new Ms;return t.push(this.keyPacket),t.push(...this.revocationSignatures),t.push(...this.bindingSignatures),t}clone(){const t=new ba(this.keyPacket,this.mainKey);return t.bindingSignatures=[...this.bindingSignatures],t.revocationSignatures=[...this.revocationSignatures],t}async isRevoked(t,e,r=new Date,i=N){const n=this.mainKey.keyPacket;return fa(n,L.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,t,e,r,i)}async verify(t=new Date,e=N){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await oa(this.bindingSignatures,r,L.signature.subkeyBinding,i,t,e);if(n.revoked||await this.isRevoked(n,null,t,e))throw Error("Subkey is revoked");if(ca(this.keyPacket,n,t))throw Error("Subkey is expired");return n}async getExpirationTime(t=new Date,e=N){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await oa(this.bindingSignatures,r,L.signature.subkeyBinding,i,t,e)}catch(t){return null}const s=ya(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(t,e=new Date,r=N){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(t))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===L.packet.publicSubkey&&t.keyPacket.constructor.tag===L.packet.secretSubkey&&(this.keyPacket=t.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await la(t,this,"bindingSignatures",e,(async function(t){for(let e=0;e<n.bindingSignatures.length;e++)if(n.bindingSignatures[e].issuerKeyID.equals(t.issuerKeyID))return t.created>n.bindingSignatures[e].created&&(n.bindingSignatures[e]=t),!1;try{return await t.verify(i,L.signature.subkeyBinding,s,e,void 0,r),!0}catch(t){return!1}})),await la(t,this,"revocationSignatures",e,(function(t){return fa(i,L.signature.subkeyRevocation,s,[t],void 0,void 0,e,r)}))}async revoke(t,{flag:e=L.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=N){const s={key:t,bind:this.keyPacket},a=new ba(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await ua(s,null,t,{signatureType:L.signature.subkeyRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,e),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(t){return this.keyPacket.hasSameFingerprintAs(t.keyPacket||t)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((t=>{ba.prototype[t]=function(){return this.keyPacket[t]()}}));const va=/*#__PURE__*/F.constructAllowedPackets([Bs]),Ea=new Set([L.packet.publicKey,L.packet.privateKey]),ka=new Set([L.packet.publicKey,L.packet.privateKey,L.packet.publicSubkey,L.packet.privateSubkey]);class Sa{packetListToStructure(t,e=new Set){let r,i,n,s;for(const a of t){if(a instanceof zr){ka.has(a.tag)&&!s&&(s=Ea.has(a.tag)?Ea:ka);continue}const t=a.constructor.tag;if(s){if(!s.has(t))continue;s=null}if(e.has(t))throw Error("Unexpected packet type: "+t);switch(t){case L.packet.publicKey:case L.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case L.packet.userID:case L.packet.userAttribute:r=new Aa(a,this),this.users.push(r);break;case L.packet.publicSubkey:case L.packet.secretSubkey:r=null,n=new ba(a,this),this.subkeys.push(n);break;case L.packet.signature:switch(a.signatureType){case L.signature.certGeneric:case L.signature.certPersona:case L.signature.certCasual:case L.signature.certPositive:if(!r){F.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case L.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case L.signature.key:this.directSignatures.push(a);break;case L.signature.subkeyBinding:if(!n){F.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case L.signature.keyRevocation:this.revocationSignatures.push(a);break;case L.signature.subkeyRevocation:if(!n){F.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const t=new Ms;return t.push(this.keyPacket),t.push(...this.revocationSignatures),t.push(...this.directSignatures),this.users.map((e=>t.push(...e.toPacketList()))),this.subkeys.map((e=>t.push(...e.toPacketList()))),t}clone(t=!1){const e=new this.constructor(this.toPacketList());return t&&e.getKeys().forEach((t=>{if(t.keyPacket=Object.create(Object.getPrototypeOf(t.keyPacket),Object.getOwnPropertyDescriptors(t.keyPacket)),!t.keyPacket.isDecrypted())return;const e={};Object.keys(t.keyPacket.privateParams).forEach((r=>{e[r]=new Uint8Array(t.keyPacket.privateParams[r])})),t.keyPacket.privateParams=e})),e}getSubkeys(t=null){return this.subkeys.filter((e=>!t||e.getKeyID().equals(t,!0)))}getKeys(t=null){const e=[];return t&&!this.getKeyID().equals(t,!0)||e.push(this),e.concat(this.getSubkeys(t))}getKeyIDs(){return this.getKeys().map((t=>t.getKeyID()))}getUserIDs(){return this.users.map((t=>t.userID?t.userID.userID:null)).filter((t=>null!==t))}write(){return this.toPacketList().write()}async getSigningKey(t=null,e=new Date,r={},i=N){await this.verifyPrimaryKey(e,r,i);const n=this.keyPacket;try{wa(n,i)}catch(t){throw F.wrapError("Could not verify primary key",t)}const s=this.subkeys.slice().sort(((t,e)=>e.keyPacket.created-t.keyPacket.created));let a;for(const r of s)if(!t||r.getKeyID().equals(t))try{await r.verify(e,i);const t={key:n,bind:r.keyPacket},s=await oa(r.bindingSignatures,n,L.signature.subkeyBinding,t,e,i);if(!pa(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await oa([s.embeddedSignature],r.keyPacket,L.signature.keyBinding,t,e,i),wa(r.keyPacket,i),r}catch(t){a=t}try{const s=await this.getPrimarySelfSignature(e,r,i);if((!t||n.getKeyID().equals(t))&&pa(n,s,i))return wa(n,i),this}catch(t){a=t}throw F.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(t,e=new Date,r={},i=N){await this.verifyPrimaryKey(e,r,i);const n=this.keyPacket;try{wa(n,i)}catch(t){throw F.wrapError("Could not verify primary key",t)}const s=this.subkeys.slice().sort(((t,e)=>e.keyPacket.created-t.keyPacket.created));let a;for(const r of s)if(!t||r.getKeyID().equals(t))try{await r.verify(e,i);const t={key:n,bind:r.keyPacket},s=await oa(r.bindingSignatures,n,L.signature.subkeyBinding,t,e,i);if(ga(r.keyPacket,s,i))return wa(r.keyPacket,i),r}catch(t){a=t}try{const s=await this.getPrimarySelfSignature(e,r,i);if((!t||n.getKeyID().equals(t))&&ga(n,s,i))return wa(n,i),this}catch(t){a=t}throw F.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(t,e,r=new Date,i=N){return fa(this.keyPacket,L.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,t,e,r,i)}async verifyPrimaryKey(t=new Date,e={},r=N){const i=this.keyPacket;if(await this.isRevoked(null,null,t,r))throw Error("Primary key is revoked");if(ca(i,await this.getPrimarySelfSignature(t,e,r),t))throw Error("Primary key is expired");if(6!==i.version){const e=await oa(this.directSignatures,i,L.signature.key,{key:i},t,r).catch((()=>{}));if(e&&ca(i,e,t))throw Error("Primary key is expired")}}async getExpirationTime(t,e=N){let r;try{const i=await this.getPrimarySelfSignature(null,t,e),n=ya(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await oa(this.directSignatures,this.keyPacket,L.signature.key,{key:this.keyPacket},null,e).catch((()=>{}));if(a){const t=ya(this.keyPacket,a);r=Math.min(n,s,t)}else r=n<s?n:s}catch(t){r=null}return F.normalizeDate(r)}async getPrimarySelfSignature(t=new Date,e={},r=N){const i=this.keyPacket;if(6===i.version)return oa(this.directSignatures,i,L.signature.key,{key:i},t,r);const{selfCertification:n}=await this.getPrimaryUser(t,e,r);return n}async getPrimaryUser(t=new Date,e={},r=N){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==e.name&&s.userID.name!==e.name||void 0!==e.email&&s.userID.email!==e.email||void 0!==e.comment&&s.userID.comment!==e.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await oa(s.selfCertifications,i,L.signature.certGeneric,o,t,r);n.push({index:a,user:s,selfCertification:c})}catch(t){s=t}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(e){return e.selfCertification.revoked||e.user.isRevoked(e.selfCertification,null,t,r)})));const a=n.sort((function(t,e){const r=t.selfCertification,i=e.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,t,r))throw Error("Primary user is revoked");return a}async update(t,e=new Date,r=N){if(!this.hasSameFingerprintAs(t))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&t.isPrivate()){if(!(this.subkeys.length===t.subkeys.length&&this.subkeys.every((e=>t.subkeys.some((t=>e.hasSameFingerprintAs(t)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return t.update(this,r)}const i=this.clone();return await la(t,i,"revocationSignatures",e,(n=>fa(i.keyPacket,L.signature.keyRevocation,i,[n],null,t.keyPacket,e,r))),await la(t,i,"directSignatures",e),await Promise.all(t.users.map((async t=>{const n=i.users.filter((e=>t.userID&&t.userID.equals(e.userID)||t.userAttribute&&t.userAttribute.equals(e.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(t,e,r))));else{const e=t.clone();e.mainKey=i,i.users.push(e)}}))),await Promise.all(t.subkeys.map((async t=>{const n=i.subkeys.filter((e=>e.hasSameFingerprintAs(t)));if(n.length>0)await Promise.all(n.map((i=>i.update(t,e,r))));else{const e=t.clone();e.mainKey=i,i.subkeys.push(e)}}))),i}async getRevocationCertificate(t=new Date,e=N){const r={key:this.keyPacket},i=await oa(this.revocationSignatures,this.keyPacket,L.signature.keyRevocation,r,t,e),n=new Ms;return n.push(i),tt(L.armor.publicKey,n.write(),null,null,"This is a revocation certificate")}async applyRevocationCertificate(t,e=new Date,r=N){const i=await X(t),n=(await Ms.fromBinary(i.data,va,r)).findPacket(L.packet.signature);if(!n||n.signatureType!==L.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,L.signature.keyRevocation,{key:this.keyPacket},e,void 0,r)}catch(t){throw F.wrapError("Could not verify revocation signature",t)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(t,e,r,i=N){const{index:n,user:s}=await this.getPrimaryUser(e,r,i),a=await s.certify(t,e,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(t,e=new Date,r=N){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(t,e,r)}))),i}async verifyPrimaryUser(t,e=new Date,r,i=N){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(e,r,i);return t?await s.verifyAllCertifications(t,e,i):[{keyID:n.getKeyID(),valid:await s.verify(e,i).catch((()=>!1))}]}async verifyAllUsers(t,e=new Date,r=N){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=t?await s.verifyAllCertifications(t,e,r):[{keyID:i.getKeyID(),valid:await s.verify(e,r).catch((()=>!1))}];n.push(...a.map((t=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:t.keyID,valid:t.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((t=>{Sa.prototype[t]=ba.prototype[t]}));class Ia extends Sa{constructor(t){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],t&&(this.packetListToStructure(t,new Set([L.packet.secretKey,L.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(t=N){return tt(L.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t)}}class Ca extends Ia{constructor(t){if(super(),this.packetListToStructure(t,new Set([L.packet.publicKey,L.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const t=new Ms,e=this.toPacketList();let r=!1;for(const i of e)if(!r||i.constructor.tag!==L.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case L.packet.secretKey:{if(i.algorithm===L.publicKey.aead||i.algorithm===L.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const e=Zs.fromSecretKeyPacket(i);t.push(e);break}case L.packet.secretSubkey:{if(i.algorithm===L.publicKey.aead||i.algorithm===L.publicKey.hmac){r=!0;break}const e=Ws.fromSecretSubkeyPacket(i);t.push(e);break}default:t.push(i)}return new Ia(t)}armor(t=N){return tt(L.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t)}async getDecryptionKeys(t,e=new Date,r={},i=N){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!t||this.subkeys[r].getKeyID().equals(t,!0))try{const t={key:n,bind:this.subkeys[r].keyPacket},a=await oa(this.subkeys[r].bindingSignatures,n,L.signature.subkeyBinding,t,e,i);ma(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(t){}const a=await this.getPrimarySelfSignature(e,r,i);return t&&!n.getKeyID().equals(t,!0)||!ma(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:t})=>t.isDecrypted()))}async validate(t=N){if(!this.isPrivate())throw Error("Cannot validate a public key");let e;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...t,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(e=r.keyPacket)}else e=this.keyPacket;if(e)return e.validate();{const t=this.getKeys();if(t.map((t=>t.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(t.map((async t=>t.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:t})=>{t.isDecrypted()&&t.clearPrivateParams()}))}async revoke({flag:t=L.reasonForRevocation.noReason,string:e=""}={},r=new Date,i=N){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await ua(n,null,this.keyPacket,{signatureType:L.signature.keyRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,t),reasonForRevocationString:e},r,void 0,void 0,void 0,i)),s}async addSubkey(t={}){const e={...N,...t.config};if(t.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(t.rsaBits<e.minRSABits)throw Error(`rsaBits should be at least ${e.minRSABits}, got: ${t.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(t){switch(L.write(L.publicKey,t)){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.dsa:return"rsa";case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:return"ecc";case L.publicKey.ed25519:return"curve25519";case L.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",t=da(t,i);const n=await sa(t,{...e,v6Keys:6===this.keyPacket.version});wa(n,e);const s=await ha(n,r,t,e),a=this.toPacketList();return a.push(n,s),new Ca(a)}}const Ba=/*#__PURE__*/F.constructAllowedPackets([Zs,Ws,Xs,ra,ea,$s,Bs]);function Ka(t){for(const e of t)switch(e.constructor.tag){case L.packet.secretKey:return new Ca(t);case L.packet.publicKey:return new Ia(t)}throw Error("No key packet found")}async function Pa(t,e,r,i){r.passphrase&&await t.encrypt(r.passphrase,i),await Promise.all(e.map((async function(t,e){const n=r.subkeys[e].passphrase;n&&await t.encrypt(n,i)})));const n=new Ms;function s(t,e){return[e,...t.filter((t=>t!==e))]}function a(){const e={};e.keyFlags=[L.keyFlags.certifyKeys|L.keyFlags.signData];const n=s([L.symmetric.aes256,L.symmetric.aes128],i.preferredSymmetricAlgorithm);if(e.preferredSymmetricAlgorithms=n,i.aeadProtect){const t=s([L.aead.gcm,L.aead.eax,L.aead.ocb],i.preferredAEADAlgorithm);e.preferredCipherSuites=t.flatMap((t=>n.map((e=>[e,t]))))}return e.preferredHashAlgorithms=s([L.hash.sha256,L.hash.sha512,...6===t.version?[L.hash.sha3_256,L.hash.sha3_512]:[]],i.preferredHashAlgorithm),e.preferredCompressionAlgorithms=s([L.compression.uncompressed,L.compression.zlib,L.compression.zip],i.preferredCompressionAlgorithm),e.features=[0],e.features[0]|=L.features.modificationDetection,i.aeadProtect&&(e.features[0]|=L.features.seipdv2),r.keyExpirationTime>0&&(e.keyExpirationTime=r.keyExpirationTime,e.keyNeverExpires=!1),e}if(n.push(t),6===t.version){const e={key:t},s=a();s.signatureType=L.signature.key;const o=await ua(e,null,t,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(e,n){const s=ea.fromObject(e),o={userID:s,key:t},c=6!==t.version?a():{};c.signatureType=L.signature.certGeneric,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await ua(o,null,t,c,r.date,void 0,void 0,void 0,i)}}))).then((t=>{t.forEach((({userIDPacket:t,signaturePacket:e})=>{n.push(t),n.push(e)}))})),await Promise.all(e.map((async function(e,n){const s=r.subkeys[n];return{secretSubkeyPacket:e,subkeySignaturePacket:await ha(e,t,s,i)}}))).then((t=>{t.forEach((({secretSubkeyPacket:t,subkeySignaturePacket:e})=>{n.push(t),n.push(e)}))}));const o={key:t};return n.push(await ua(o,null,t,{signatureType:L.signature.keyRevocation,reasonForRevocationFlag:L.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&t.clearPrivateParams(),await Promise.all(e.map((async function(t,e){r.subkeys[e].passphrase&&t.clearPrivateParams()}))),new Ca(n)}const Da=/*#__PURE__*/F.constructAllowedPackets([ks,Qs,Gs,Fs,Ys,qs,Vs,Ds,Bs]),Ua=/*#__PURE__*/F.constructAllowedPackets([Vs]),Ma=/*#__PURE__*/F.constructAllowedPackets([Bs]);class xa{constructor(t){this.packets=t||new Ms}getEncryptionKeyIDs(){const t=[];return this.packets.filterByTag(L.packet.publicKeyEncryptedSessionKey).forEach((function(e){t.push(e.publicKeyID)})),t}getSigningKeyIDs(){const t=this.unwrapCompressed(),e=t.packets.filterByTag(L.packet.onePassSignature);if(e.length>0)return e.map((t=>t.issuerKeyID));return t.packets.filterByTag(L.packet.signature).map((t=>t.issuerKeyID))}async decrypt(t,e,r,i=new Date,n=N){const s=this.packets.filterByTag(L.packet.symmetricallyEncryptedData,L.packet.symEncryptedIntegrityProtectedData,L.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(t,e,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:t,data:e})=>{if(!F.isUint8Array(e)||!a.cipherAlgorithm&&!F.isString(t))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||L.write(L.symmetric,t);await a.decrypt(r,e,n)}catch(t){F.printDebugError(t),h=t}})));if(x(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new xa(a.packets);return a.packets=new Ms,l}async decryptSessionKeys(t,e,r,i=new Date,n=N){let s,a=[];if(e){const t=this.packets.filterByTag(L.packet.symEncryptedSessionKey);if(0===t.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(e.map((async function(e,r){let i;i=r?await Ms.fromBinary(t.write(),Ua,n):t,await Promise.all(i.map((async function(t){try{await t.decrypt(e),a.push(t)}catch(t){F.printDebugError(t),t instanceof rn&&(s=t)}})))})))}else{if(!t)throw Error("No key or password specified.");{const e=this.packets.filterByTag(L.packet.publicKeyEncryptedSessionKey);if(0===e.length)throw Error("No public key encrypted session key packet found.");await Promise.all(e.map((async function(e){await Promise.all(t.map((async function(t){let o=[L.symmetric.aes256,L.symmetric.aes128,L.symmetric.tripledes,L.symmetric.cast5];try{const e=await t.getPrimarySelfSignature(i,void 0,n);e.preferredSymmetricAlgorithms&&(o=o.concat(e.preferredSymmetricAlgorithms))}catch(t){}const c=(await t.getDecryptionKeys(e.publicKeyID,null,void 0,n)).map((t=>t.keyPacket));await Promise.all(c.map((async function(t){if(!t||t.isDummy())return;if(!t.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(e.publicKeyAlgorithm===L.publicKey.rsaEncrypt||e.publicKeyAlgorithm===L.publicKey.rsaEncryptSign||e.publicKeyAlgorithm===L.publicKey.rsaSign||e.publicKeyAlgorithm===L.publicKey.elgamal)){const i=e.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async e=>{const r=new qs;r.read(i);const n={sessionKeyAlgorithm:e,sessionKey:en.generateSessionKey(e)};try{await r.decrypt(t,n),a.push(r)}catch(t){F.printDebugError(t),s=t}})))}else try{await e.decrypt(t);const i=r||e.sessionKeyAlgorithm;if(i&&!o.includes(L.write(L.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(e)}catch(t){F.printDebugError(t),s=t}})))}))),x(e.encrypted),e.encrypted=null})))}}if(a.length>0){if(a.length>1){const t=new Set;a=a.filter((e=>{const r=e.sessionKeyAlgorithm+F.uint8ArrayToString(e.sessionKey);return!t.has(r)&&(t.add(r),!0)}))}return a.map((t=>({data:t.sessionKey,algorithm:t.sessionKeyAlgorithm&&L.read(L.symmetric,t.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const t=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return t&&t.getBytes()||null}getFilename(){const t=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return t&&t.getFilename()||null}getText(){const t=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return t?t.getText():null}static async generateSessionKey(t=[],e=new Date,r=[],i=N){const{symmetricAlgo:n,aeadAlgo:s}=await async function(t=[],e=new Date,r=[],i=N){const n=await Promise.all(t.map(((t,n)=>t.getPrimarySelfSignature(e,r[n],i))));if(t.length?n.every((t=>t.features[0]&L.features.seipdv2)):i.aeadProtect){const t={symmetricAlgo:L.symmetric.aes128,aeadAlgo:L.aead.ocb},e={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((t=>t.preferredCipherSuites&&t.preferredCipherSuites.some((t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo))))?e:t}const s=L.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((t=>t.preferredSymmetricAlgorithms&&t.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(t,e,r,i),a=L.read(L.symmetric,n),o=s?L.read(L.aead,s):void 0;await Promise.all(t.map((t=>t.getEncryptionKey().catch((()=>null)).then((t=>{if(t&&(t.keyPacket.algorithm===L.publicKey.x25519||t.keyPacket.algorithm===L.publicKey.x448)&&!o&&!F.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:en.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(t,e,r,i=!1,n=[],s=new Date,a=[],o=N){if(r){if(!F.isUint8Array(r.data)||!F.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(t&&t.length)r=await xa.generateSessionKey(t,s,a,o);else{if(!e||!e.length)throw Error("No keys, passwords, or session key provided.");r=await xa.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await xa.encryptSessionKey(c,h,u,t,e,i,n,s,a,o),f=Fs.fromObject({version:u?2:1,aeadAlgorithm:u?L.write(L.aead,u):null});f.packets=this.packets;const y=L.write(L.symmetric,h);return await f.encrypt(y,c,o),l.packets.push(f),f.packets=new Ms,l}static async encryptSessionKey(t,e,r,i,n,s=!1,a=[],o=new Date,c=[],h=N){const u=new Ms,l=L.write(L.symmetric,e),f=r&&L.write(L.aead,r);if(i){const e=await Promise.all(i.map((async function(e,r){const i=await e.getEncryptionKey(a[r],o,c,h),n=qs.fromObject({version:f?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:t,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...e)}if(n){const e=async function(t,e){try{return await t.decrypt(e),1}catch(t){return 0}},r=(t,e)=>t+e,i=async function(t,s,a,o){const c=new Vs(h);if(c.sessionKey=t,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((t=>e(c,t))))).reduce(r))return i(t,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((e=>i(t,l,f,e))));u.push(...s)}return new xa(u)}async sign(t=[],e=null,r=[],i=new Date,n=[],s=[],a=N){const o=new Ms,c=this.packets.findPacket(L.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await Qa(c,t,e,r,i,n,s,!1,a),u=h.map(((t,e)=>Ds.fromSignaturePacket(t,0===e))).reverse();return o.push(...u),o.push(c),o.push(...h),new xa(o)}compress(t,e=N){if(t===L.compression.uncompressed)return this;const r=new Qs(e);r.algorithm=t,r.packets=this.packets;const i=new Ms;return i.push(r),new xa(i)}async signDetached(t=[],e=null,r=[],i=new Date,n=[],s=[],a=N){const o=this.packets.findPacket(L.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new na(await Qa(o,t,e,r,i,n,s,!0,a))}async verify(t,e=new Date,r=N){const i=this.unwrapCompressed(),n=i.packets.filterByTag(L.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");l(i.packets.stream)&&i.packets.push(...await M(i.packets.stream,(t=>t||[])));const s=i.packets.filterByTag(L.packet.onePassSignature).reverse(),a=i.packets.filterByTag(L.packet.signature);return s.length&&!a.length&&F.isStream(i.packets.stream)&&!l(i.packets.stream)?(await Promise.all(s.map((async t=>{t.correspondingSig=new Promise(((e,r)=>{t.correspondingSigResolve=e,t.correspondingSigReject=r})),t.signatureData=Q((async()=>(await t.correspondingSig).signatureData)),t.hashed=M(await t.hash(t.signatureType,n[0],void 0,!1)),t.hashed.catch((()=>{}))}))),i.packets.stream=C(i.packets.stream,(async(t,e)=>{const r=R(t),i=_(e);try{for(let t=0;t<s.length;t++){const{value:e}=await r.read();s[t].correspondingSigResolve(e)}await r.readToEnd(),await i.ready,await i.close()}catch(t){s.forEach((e=>{e.correspondingSigReject(t)})),await i.abort(t)}})),Ra(s,n,t,e,!1,r)):Ra(a,n,t,e,!1,r)}verifyDetached(t,e,r=new Date,i=N){const n=this.unwrapCompressed().packets.filterByTag(L.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return Ra(t.packets.filterByTag(L.packet.signature),n,e,r,!0,i)}unwrapCompressed(){const t=this.packets.filterByTag(L.packet.compressedData);return t.length?new xa(t[0].packets):this}async appendSignature(t,e=N){await this.packets.read(F.isUint8Array(t)?t:(await X(t)).data,Ma,e)}write(){return this.packets.write()}armor(t=N){return tt(L.armor.message,this.write(),null,null,null,t)}}async function Qa(t,e,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=N){const h=new Ms,u=null===t.text?L.signature.binary:L.signature.text;if(await Promise.all(e.map((async(e,r)=>{const h=s[r];if(!e.isPrivate())throw Error("Need private key for signing");const l=await e.getSigningKey(i[r],n,h,c);return ua(t,e,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((t=>{h.push(...t)})),r){const t=r.packets.filterByTag(L.packet.signature);h.push(...t)}return h}async function Ra(t,e,r,i=new Date,n=!1,s=N){return Promise.all(t.filter((function(t){return["text","binary"].includes(L.read(L.signature,t.signatureType))})).map((async function(t){return async function(t,e,r,i=new Date,n=!1,s=N){let a,o;for(const e of r){const r=e.getKeys(t.issuerKeyID);if(r.length>0){a=e,o=r[0];break}}const c=t instanceof Ds?t.correspondingSig:t,h={keyID:t.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+t.issuerKeyID.toHex());await t.verify(o.keyPacket,t.signatureType,e[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(t){if(!s.allowInsecureVerificationWithReformattedKeys||!t.message.match(/Signature creation time is in the future/))throw t;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const t=await c,e=new Ms;return t&&e.push(t),new na(e)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(t,e,r,i,n,s)})))}const _a=/*#__PURE__*/F.constructAllowedPackets([Bs]);class Ta{constructor(t,e){if(this.text=F.removeTrailingSpaces(t).replace(/\r?\n/g,"\r\n"),e&&!(e instanceof na))throw Error("Invalid signature input");this.signature=e||new na(new Ms)}getSigningKeyIDs(){const t=[];return this.signature.packets.forEach((function(e){t.push(e.issuerKeyID)})),t}async sign(t,e=null,r=[],i=new Date,n=[],s=[],a=N){const o=new ks;o.setText(this.text);const c=new na(await Qa(o,t,e,r,i,n,s,!0,a));return new Ta(this.text,c)}verify(t,e=new Date,r=N){const i=this.signature.packets.filterByTag(L.packet.signature),n=new ks;return n.setText(this.text),Ra(i,[n],t,e,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(t=N){const e={hash:this.signature.packets.some((t=>6!==t.version))?Array.from(new Set(this.signature.packets.map((t=>L.read(L.hash,t.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return tt(L.armor.signed,e,void 0,void 0,void 0,t)}}function La(t){if(!(t instanceof xa))throw Error("Parameter [message] needs to be of type Message")}function Na(t){if(!(t instanceof Ta||t instanceof xa))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function Oa(t){if("armored"!==t&&"binary"!==t&&"object"!==t)throw Error("Unsupported format "+t)}const Fa=Object.keys(N).length;function Ha(t){const e=Object.keys(t);if(e.length!==Fa)for(const t of e)if(void 0===N[t])throw Error("Unknown config property: "+t)}function za(t){return t&&!F.isArray(t)&&(t=[t]),t}async function Ga(t){return"array"===F.isStream(t)?M(t):t}function qa(t,e){t.data=C(e.packets.stream,(async(e,r)=>{await E(t.data,r,{preventClose:!0});const i=_(r);try{await M(e,(t=>t)),await i.close()}catch(t){await i.abort(t)}}))}function ja(t,e,r){switch(e){case"object":return t;case"armored":return t.armor(r);case"binary":return t.write();default:throw Error("Unsupported format "+e)}}class Va{static setImplementation(t,e=!1){if(Va.Implementation&&!e)throw Error("Implementation already set");Va.Implementation=t}static new(t){return new Va.Implementation(t)}}class Za extends Va{constructor(t){if(super(),void 0===t)throw Error("Invalid BigInteger input");if(t instanceof Uint8Array){const e="0123456789ABCDEF";let r="";t.forEach((t=>{r+=e[t>>4]+e[15&t]})),this.value=BigInt("0x0"+r)}else this.value=BigInt(t)}clone(){return new Za(this.value)}iinc(){return this.value++,this}inc(){return this.clone().iinc()}idec(){return this.value--,this}dec(){return this.clone().idec()}iadd(t){return this.value+=t.value,this}add(t){return this.clone().iadd(t)}isub(t){return this.value-=t.value,this}sub(t){return this.clone().isub(t)}imul(t){return this.value*=t.value,this}mul(t){return this.clone().imul(t)}imod(t){return this.value%=t.value,this.isNegative()&&this.iadd(t),this}mod(t){return this.clone().imod(t)}modExp(t,e){if(e.isZero())throw Error("Modulo cannot be zero");if(e.isOne())return new Za(0);if(t.isNegative())throw Error("Unsopported negative exponent");let r=t.value,i=this.value;i%=e.value;let n=BigInt(1);for(;r>BigInt(0);){const t=r&BigInt(1);r>>=BigInt(1);const s=n*i%e.value;n=t?s:n,i=i*i%e.value}return new Za(n)}modInv(t){const{gcd:e,x:r}=this._egcd(t);if(!e.isOne())throw Error("Inverse does not exist");return r.add(t).mod(t)}idiv(t){return this.value/=t.value,this}div(t){return this.clone().idiv(t)}_egcd(t){let e=BigInt(0),r=BigInt(1),i=BigInt(1),n=BigInt(0),s=this.abs().value,a=t.abs().value;const o=this.isNegative(),c=t.isNegative();for(;a!==BigInt(0);){const t=s/a;let o=e;e=i-t*e,i=o,o=r,r=n-t*r,n=o,o=a,a=s%a,s=o}return{x:new Za(o?-i:i),y:new Za(c?-n:n),gcd:new Za(s)}}gcd(t){let e=this.value,r=t.value;for(;r!==BigInt(0);){const t=r;r=e%r,e=t}return new Za(e)}ileftShift(t){return this.value<<=t.value,this}leftShift(t){return this.clone().ileftShift(t)}irightShift(t){return this.value>>=t.value,this}rightShift(t){return this.clone().irightShift(t)}ixor(t){return this.value^=t.value,this}xor(t){return this.clone().ixor(t)}ibitwiseAnd(t){return this.value&=t.value,this}bitwiseAnd(t){return this.clone().ibitwiseAnd(t)}ibitwiseOr(t){return this.value|=t.value,this}equal(t){return this.value===t.value}lt(t){return this.value<t.value}lte(t){return this.value<=t.value}gt(t){return this.value>t.value}gte(t){return this.value>=t.value}isZero(){return this.value===BigInt(0)}isOne(){return this.value===BigInt(1)}isNegative(){return this.value<BigInt(0)}isEven(){return!(this.value&BigInt(1))}abs(){const t=this.clone();return this.isNegative()&&(t.value=-t.value),t}negate(){const t=this.clone();return t.value=-t.value,t}toString(){return this.value.toString()}toNumber(){const t=Number(this.value);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}getBit(t){return(this.value>>BigInt(t)&BigInt(1))===BigInt(0)?0:1}bitLength(){const t=new Za(0),e=new Za(1),r=new Za(-1),i=this.isNegative()?r:t;let n=1;const s=this.clone();for(;!s.irightShift(e).equal(i);)n++;return n}byteLength(){const t=new Za(0),e=new Za(-1),r=this.isNegative()?e:t,i=new Za(8);let n=1;const s=this.clone();for(;!s.irightShift(i).equal(r);)n++;return n}toUint8Array(t="be",e){let r=this.value.toString(16);r.length%2==1&&(r="0"+r);const i=r.length/2,n=new Uint8Array(e||i),s=e?e-i:0;let a=0;for(;a<i;)n[a+s]=parseInt(r.slice(2*a,2*a+2),16),a++;return"be"!==t&&n.reverse(),n}}var Ja=/*#__PURE__*/Object.freeze({__proto__:null,default:Za}),Ya={exports:{}};!function(t,e){function r(t,e){if(!t)throw Error(e||"Assertion failed")}function i(t,e){t.super_=e;var r=function(){};r.prototype=e.prototype,t.prototype=new r,t.prototype.constructor=t}function n(t,e,r){if(n.isBN(t))return t;this.negative=0,this.words=null,this.length=0,this.red=null,null!==t&&("le"!==e&&"be"!==e||(r=e,e=10),this._init(t||0,e||10,r||"be"))}var s;"object"==typeof t?t.exports=n:e.BN=n,n.BN=n,n.wordSize=26;try{s="undefined"!=typeof window&&void 0!==window.Buffer?window.Buffer:require("buffer").Buffer}catch(t){}function a(t,e){var r=t.charCodeAt(e);return r>=65&&r<=70?r-55:r>=97&&r<=102?r-87:r-48&15}function o(t,e,r){var i=a(t,r);return r-1>=e&&(i|=a(t,r-1)<<4),i}function c(t,e,r,i){for(var n=0,s=Math.min(t.length,r),a=e;a<s;a++){var o=t.charCodeAt(a)-48;n*=i,n+=o>=49?o-49+10:o>=17?o-17+10:o}return n}n.isBN=function(t){return t instanceof n||null!==t&&"object"==typeof t&&t.constructor.wordSize===n.wordSize&&Array.isArray(t.words)},n.max=function(t,e){return t.cmp(e)>0?t:e},n.min=function(t,e){return t.cmp(e)<0?t:e},n.prototype._init=function(t,e,i){if("number"==typeof t)return this._initNumber(t,e,i);if("object"==typeof t)return this._initArray(t,e,i);"hex"===e&&(e=16),r(e===(0|e)&&e>=2&&e<=36);var n=0;"-"===(t=t.toString().replace(/\s+/g,""))[0]&&(n++,this.negative=1),n<t.length&&(16===e?this._parseHex(t,n,i):(this._parseBase(t,e,n),"le"===i&&this._initArray(this.toArray(),e,i)))},n.prototype._initNumber=function(t,e,i){t<0&&(this.negative=1,t=-t),t<67108864?(this.words=[67108863&t],this.length=1):t<4503599627370496?(this.words=[67108863&t,t/67108864&67108863],this.length=2):(r(t<9007199254740992),this.words=[67108863&t,t/67108864&67108863,1],this.length=3),"le"===i&&this._initArray(this.toArray(),e,i)},n.prototype._initArray=function(t,e,i){if(r("number"==typeof t.length),t.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(t.length/3),this.words=Array(this.length);for(var n=0;n<this.length;n++)this.words[n]=0;var s,a,o=0;if("be"===i)for(n=t.length-1,s=0;n>=0;n-=3)a=t[n]|t[n-1]<<8|t[n-2]<<16,this.words[s]|=a<<o&67108863,this.words[s+1]=a>>>26-o&67108863,(o+=24)>=26&&(o-=26,s++);else if("le"===i)for(n=0,s=0;n<t.length;n+=3)a=t[n]|t[n+1]<<8|t[n+2]<<16,this.words[s]|=a<<o&67108863,this.words[s+1]=a>>>26-o&67108863,(o+=24)>=26&&(o-=26,s++);return this.strip()},n.prototype._parseHex=function(t,e,r){this.length=Math.ceil((t.length-e)/6),this.words=Array(this.length);for(var i=0;i<this.length;i++)this.words[i]=0;var n,s=0,a=0;if("be"===r)for(i=t.length-1;i>=e;i-=2)n=o(t,e,i)<<s,this.words[a]|=67108863&n,s>=18?(s-=18,a+=1,this.words[a]|=n>>>26):s+=8;else for(i=(t.length-e)%2==0?e+1:e;i<t.length;i+=2)n=o(t,e,i)<<s,this.words[a]|=67108863&n,s>=18?(s-=18,a+=1,this.words[a]|=n>>>26):s+=8;this.strip()},n.prototype._parseBase=function(t,e,r){this.words=[0],this.length=1;for(var i=0,n=1;n<=67108863;n*=e)i++;i--,n=n/e|0;for(var s=t.length-r,a=s%i,o=Math.min(s,s-a)+r,h=0,u=r;u<o;u+=i)h=c(t,u,u+i,e),this.imuln(n),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h);if(0!==a){var l=1;for(h=c(t,u,t.length,e),u=0;u<a;u++)l*=e;this.imuln(l),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h)}this.strip()},n.prototype.copy=function(t){t.words=Array(this.length);for(var e=0;e<this.length;e++)t.words[e]=this.words[e];t.length=this.length,t.negative=this.negative,t.red=this.red},n.prototype.clone=function(){var t=new n(null);return this.copy(t),t},n.prototype._expand=function(t){for(;this.length<t;)this.words[this.length++]=0;return this},n.prototype.strip=function(){for(;this.length>1&&0===this.words[this.length-1];)this.length--;return this._normSign()},n.prototype._normSign=function(){return 1===this.length&&0===this.words[0]&&(this.negative=0),this},n.prototype.inspect=function(){return(this.red?"<BN-R: ":"<BN: ")+this.toString(16)+">"};var h=["","0","00","000","0000","00000","000000","0000000","00000000","000000000","0000000000","00000000000","000000000000","0000000000000","00000000000000","000000000000000","0000000000000000","00000000000000000","000000000000000000","0000000000000000000","00000000000000000000","000000000000000000000","0000000000000000000000","00000000000000000000000","000000000000000000000000","0000000000000000000000000"],u=[0,0,25,16,12,11,10,9,8,8,7,7,7,7,6,6,6,6,6,6,6,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5],l=[0,0,33554432,43046721,16777216,48828125,60466176,40353607,16777216,43046721,1e7,19487171,35831808,62748517,7529536,11390625,16777216,24137569,34012224,47045881,64e6,4084101,5153632,6436343,7962624,9765625,11881376,14348907,17210368,20511149,243e5,28629151,33554432,39135393,45435424,52521875,60466176];function f(t,e,r){r.negative=e.negative^t.negative;var i=t.length+e.length|0;r.length=i,i=i-1|0;var n=0|t.words[0],s=0|e.words[0],a=n*s,o=67108863&a,c=a/67108864|0;r.words[0]=o;for(var h=1;h<i;h++){for(var u=c>>>26,l=67108863&c,f=Math.min(h,e.length-1),y=Math.max(0,h-t.length+1);y<=f;y++){var d=h-y|0;u+=(a=(n=0|t.words[d])*(s=0|e.words[y])+l)/67108864|0,l=67108863&a}r.words[h]=0|l,c=0|u}return 0!==c?r.words[h]=0|c:r.length--,r.strip()}n.prototype.toString=function(t,e){var i;if(e=0|e||1,16===(t=t||10)||"hex"===t){i="";for(var n=0,s=0,a=0;a<this.length;a++){var o=this.words[a],c=(16777215&(o<<n|s)).toString(16);i=0!=(s=o>>>24-n&16777215)||a!==this.length-1?h[6-c.length]+c+i:c+i,(n+=2)>=26&&(n-=26,a--)}for(0!==s&&(i=s.toString(16)+i);i.length%e!=0;)i="0"+i;return 0!==this.negative&&(i="-"+i),i}if(t===(0|t)&&t>=2&&t<=36){var f=u[t],y=l[t];i="";var d=this.clone();for(d.negative=0;!d.isZero();){var p=d.modn(y).toString(t);i=(d=d.idivn(y)).isZero()?p+i:h[f-p.length]+p+i}for(this.isZero()&&(i="0"+i);i.length%e!=0;)i="0"+i;return 0!==this.negative&&(i="-"+i),i}r(!1,"Base should be between 2 and 36")},n.prototype.toNumber=function(){var t=this.words[0];return 2===this.length?t+=67108864*this.words[1]:3===this.length&&1===this.words[2]?t+=4503599627370496+67108864*this.words[1]:this.length>2&&r(!1,"Number can only safely store up to 53 bits"),0!==this.negative?-t:t},n.prototype.toJSON=function(){return this.toString(16)},n.prototype.toBuffer=function(t,e){return r(void 0!==s),this.toArrayLike(s,t,e)},n.prototype.toArray=function(t,e){return this.toArrayLike(Array,t,e)},n.prototype.toArrayLike=function(t,e,i){var n=this.byteLength(),s=i||Math.max(1,n);r(n<=s,"byte array longer than desired length"),r(s>0,"Requested array length <= 0"),this.strip();var a,o,c="le"===e,h=new t(s),u=this.clone();if(c){for(o=0;!u.isZero();o++)a=u.andln(255),u.iushrn(8),h[o]=a;for(;o<s;o++)h[o]=0}else{for(o=0;o<s-n;o++)h[o]=0;for(o=0;!u.isZero();o++)a=u.andln(255),u.iushrn(8),h[s-o-1]=a}return h},n.prototype._countBits=Math.clz32?function(t){return 32-Math.clz32(t)}:function(t){var e=t,r=0;return e>=4096&&(r+=13,e>>>=13),e>=64&&(r+=7,e>>>=7),e>=8&&(r+=4,e>>>=4),e>=2&&(r+=2,e>>>=2),r+e},n.prototype._zeroBits=function(t){if(0===t)return 26;var e=t,r=0;return 0==(8191&e)&&(r+=13,e>>>=13),0==(127&e)&&(r+=7,e>>>=7),0==(15&e)&&(r+=4,e>>>=4),0==(3&e)&&(r+=2,e>>>=2),0==(1&e)&&r++,r},n.prototype.bitLength=function(){var t=this.words[this.length-1],e=this._countBits(t);return 26*(this.length-1)+e},n.prototype.zeroBits=function(){if(this.isZero())return 0;for(var t=0,e=0;e<this.length;e++){var r=this._zeroBits(this.words[e]);if(t+=r,26!==r)break}return t},n.prototype.byteLength=function(){return Math.ceil(this.bitLength()/8)},n.prototype.toTwos=function(t){return 0!==this.negative?this.abs().inotn(t).iaddn(1):this.clone()},n.prototype.fromTwos=function(t){return this.testn(t-1)?this.notn(t).iaddn(1).ineg():this.clone()},n.prototype.isNeg=function(){return 0!==this.negative},n.prototype.neg=function(){return this.clone().ineg()},n.prototype.ineg=function(){return this.isZero()||(this.negative^=1),this},n.prototype.iuor=function(t){for(;this.length<t.length;)this.words[this.length++]=0;for(var e=0;e<t.length;e++)this.words[e]=this.words[e]|t.words[e];return this.strip()},n.prototype.ior=function(t){return r(0==(this.negative|t.negative)),this.iuor(t)},n.prototype.or=function(t){return this.length>t.length?this.clone().ior(t):t.clone().ior(this)},n.prototype.uor=function(t){return this.length>t.length?this.clone().iuor(t):t.clone().iuor(this)},n.prototype.iuand=function(t){var e;e=this.length>t.length?t:this;for(var r=0;r<e.length;r++)this.words[r]=this.words[r]&t.words[r];return this.length=e.length,this.strip()},n.prototype.iand=function(t){return r(0==(this.negative|t.negative)),this.iuand(t)},n.prototype.and=function(t){return this.length>t.length?this.clone().iand(t):t.clone().iand(this)},n.prototype.uand=function(t){return this.length>t.length?this.clone().iuand(t):t.clone().iuand(this)},n.prototype.iuxor=function(t){var e,r;this.length>t.length?(e=this,r=t):(e=t,r=this);for(var i=0;i<r.length;i++)this.words[i]=e.words[i]^r.words[i];if(this!==e)for(;i<e.length;i++)this.words[i]=e.words[i];return this.length=e.length,this.strip()},n.prototype.ixor=function(t){return r(0==(this.negative|t.negative)),this.iuxor(t)},n.prototype.xor=function(t){return this.length>t.length?this.clone().ixor(t):t.clone().ixor(this)},n.prototype.uxor=function(t){return this.length>t.length?this.clone().iuxor(t):t.clone().iuxor(this)},n.prototype.inotn=function(t){r("number"==typeof t&&t>=0);var e=0|Math.ceil(t/26),i=t%26;this._expand(e),i>0&&e--;for(var n=0;n<e;n++)this.words[n]=67108863&~this.words[n];return i>0&&(this.words[n]=~this.words[n]&67108863>>26-i),this.strip()},n.prototype.notn=function(t){return this.clone().inotn(t)},n.prototype.setn=function(t,e){r("number"==typeof t&&t>=0);var i=t/26|0,n=t%26;return this._expand(i+1),this.words[i]=e?this.words[i]|1<<n:this.words[i]&~(1<<n),this.strip()},n.prototype.iadd=function(t){var e,r,i;if(0!==this.negative&&0===t.negative)return this.negative=0,e=this.isub(t),this.negative^=1,this._normSign();if(0===this.negative&&0!==t.negative)return t.negative=0,e=this.isub(t),t.negative=1,e._normSign();this.length>t.length?(r=this,i=t):(r=t,i=this);for(var n=0,s=0;s<i.length;s++)e=(0|r.words[s])+(0|i.words[s])+n,this.words[s]=67108863&e,n=e>>>26;for(;0!==n&&s<r.length;s++)e=(0|r.words[s])+n,this.words[s]=67108863&e,n=e>>>26;if(this.length=r.length,0!==n)this.words[this.length]=n,this.length++;else if(r!==this)for(;s<r.length;s++)this.words[s]=r.words[s];return this},n.prototype.add=function(t){var e;return 0!==t.negative&&0===this.negative?(t.negative=0,e=this.sub(t),t.negative^=1,e):0===t.negative&&0!==this.negative?(this.negative=0,e=t.sub(this),this.negative=1,e):this.length>t.length?this.clone().iadd(t):t.clone().iadd(this)},n.prototype.isub=function(t){if(0!==t.negative){t.negative=0;var e=this.iadd(t);return t.negative=1,e._normSign()}if(0!==this.negative)return this.negative=0,this.iadd(t),this.negative=1,this._normSign();var r,i,n=this.cmp(t);if(0===n)return this.negative=0,this.length=1,this.words[0]=0,this;n>0?(r=this,i=t):(r=t,i=this);for(var s=0,a=0;a<i.length;a++)s=(e=(0|r.words[a])-(0|i.words[a])+s)>>26,this.words[a]=67108863&e;for(;0!==s&&a<r.length;a++)s=(e=(0|r.words[a])+s)>>26,this.words[a]=67108863&e;if(0===s&&a<r.length&&r!==this)for(;a<r.length;a++)this.words[a]=r.words[a];return this.length=Math.max(this.length,a),r!==this&&(this.negative=1),this.strip()},n.prototype.sub=function(t){return this.clone().isub(t)};var y=function(t,e,r){var i,n,s,a=t.words,o=e.words,c=r.words,h=0,u=0|a[0],l=8191&u,f=u>>>13,y=0|a[1],d=8191&y,p=y>>>13,g=0|a[2],m=8191&g,w=g>>>13,A=0|a[3],b=8191&A,v=A>>>13,E=0|a[4],k=8191&E,S=E>>>13,I=0|a[5],C=8191&I,B=I>>>13,K=0|a[6],P=8191&K,D=K>>>13,U=0|a[7],M=8191&U,x=U>>>13,Q=0|a[8],R=8191&Q,_=Q>>>13,T=0|a[9],L=8191&T,N=T>>>13,O=0|o[0],F=8191&O,H=O>>>13,z=0|o[1],G=8191&z,q=z>>>13,j=0|o[2],V=8191&j,Z=j>>>13,J=0|o[3],Y=8191&J,W=J>>>13,$=0|o[4],X=8191&$,tt=$>>>13,et=0|o[5],rt=8191&et,it=et>>>13,nt=0|o[6],st=8191&nt,at=nt>>>13,ot=0|o[7],ct=8191&ot,ht=ot>>>13,ut=0|o[8],lt=8191&ut,ft=ut>>>13,yt=0|o[9],dt=8191&yt,pt=yt>>>13;r.negative=t.negative^e.negative,r.length=19;var gt=(h+(i=Math.imul(l,F))|0)+((8191&(n=(n=Math.imul(l,H))+Math.imul(f,F)|0))<<13)|0;h=((s=Math.imul(f,H))+(n>>>13)|0)+(gt>>>26)|0,gt&=67108863,i=Math.imul(d,F),n=(n=Math.imul(d,H))+Math.imul(p,F)|0,s=Math.imul(p,H);var mt=(h+(i=i+Math.imul(l,G)|0)|0)+((8191&(n=(n=n+Math.imul(l,q)|0)+Math.imul(f,G)|0))<<13)|0;h=((s=s+Math.imul(f,q)|0)+(n>>>13)|0)+(mt>>>26)|0,mt&=67108863,i=Math.imul(m,F),n=(n=Math.imul(m,H))+Math.imul(w,F)|0,s=Math.imul(w,H),i=i+Math.imul(d,G)|0,n=(n=n+Math.imul(d,q)|0)+Math.imul(p,G)|0,s=s+Math.imul(p,q)|0;var wt=(h+(i=i+Math.imul(l,V)|0)|0)+((8191&(n=(n=n+Math.imul(l,Z)|0)+Math.imul(f,V)|0))<<13)|0;h=((s=s+Math.imul(f,Z)|0)+(n>>>13)|0)+(wt>>>26)|0,wt&=67108863,i=Math.imul(b,F),n=(n=Math.imul(b,H))+Math.imul(v,F)|0,s=Math.imul(v,H),i=i+Math.imul(m,G)|0,n=(n=n+Math.imul(m,q)|0)+Math.imul(w,G)|0,s=s+Math.imul(w,q)|0,i=i+Math.imul(d,V)|0,n=(n=n+Math.imul(d,Z)|0)+Math.imul(p,V)|0,s=s+Math.imul(p,Z)|0;var At=(h+(i=i+Math.imul(l,Y)|0)|0)+((8191&(n=(n=n+Math.imul(l,W)|0)+Math.imul(f,Y)|0))<<13)|0;h=((s=s+Math.imul(f,W)|0)+(n>>>13)|0)+(At>>>26)|0,At&=67108863,i=Math.imul(k,F),n=(n=Math.imul(k,H))+Math.imul(S,F)|0,s=Math.imul(S,H),i=i+Math.imul(b,G)|0,n=(n=n+Math.imul(b,q)|0)+Math.imul(v,G)|0,s=s+Math.imul(v,q)|0,i=i+Math.imul(m,V)|0,n=(n=n+Math.imul(m,Z)|0)+Math.imul(w,V)|0,s=s+Math.imul(w,Z)|0,i=i+Math.imul(d,Y)|0,n=(n=n+Math.imul(d,W)|0)+Math.imul(p,Y)|0,s=s+Math.imul(p,W)|0;var bt=(h+(i=i+Math.imul(l,X)|0)|0)+((8191&(n=(n=n+Math.imul(l,tt)|0)+Math.imul(f,X)|0))<<13)|0;h=((s=s+Math.imul(f,tt)|0)+(n>>>13)|0)+(bt>>>26)|0,bt&=67108863,i=Math.imul(C,F),n=(n=Math.imul(C,H))+Math.imul(B,F)|0,s=Math.imul(B,H),i=i+Math.imul(k,G)|0,n=(n=n+Math.imul(k,q)|0)+Math.imul(S,G)|0,s=s+Math.imul(S,q)|0,i=i+Math.imul(b,V)|0,n=(n=n+Math.imul(b,Z)|0)+Math.imul(v,V)|0,s=s+Math.imul(v,Z)|0,i=i+Math.imul(m,Y)|0,n=(n=n+Math.imul(m,W)|0)+Math.imul(w,Y)|0,s=s+Math.imul(w,W)|0,i=i+Math.imul(d,X)|0,n=(n=n+Math.imul(d,tt)|0)+Math.imul(p,X)|0,s=s+Math.imul(p,tt)|0;var vt=(h+(i=i+Math.imul(l,rt)|0)|0)+((8191&(n=(n=n+Math.imul(l,it)|0)+Math.imul(f,rt)|0))<<13)|0;h=((s=s+Math.imul(f,it)|0)+(n>>>13)|0)+(vt>>>26)|0,vt&=67108863,i=Math.imul(P,F),n=(n=Math.imul(P,H))+Math.imul(D,F)|0,s=Math.imul(D,H),i=i+Math.imul(C,G)|0,n=(n=n+Math.imul(C,q)|0)+Math.imul(B,G)|0,s=s+Math.imul(B,q)|0,i=i+Math.imul(k,V)|0,n=(n=n+Math.imul(k,Z)|0)+Math.imul(S,V)|0,s=s+Math.imul(S,Z)|0,i=i+Math.imul(b,Y)|0,n=(n=n+Math.imul(b,W)|0)+Math.imul(v,Y)|0,s=s+Math.imul(v,W)|0,i=i+Math.imul(m,X)|0,n=(n=n+Math.imul(m,tt)|0)+Math.imul(w,X)|0,s=s+Math.imul(w,tt)|0,i=i+Math.imul(d,rt)|0,n=(n=n+Math.imul(d,it)|0)+Math.imul(p,rt)|0,s=s+Math.imul(p,it)|0;var Et=(h+(i=i+Math.imul(l,st)|0)|0)+((8191&(n=(n=n+Math.imul(l,at)|0)+Math.imul(f,st)|0))<<13)|0;h=((s=s+Math.imul(f,at)|0)+(n>>>13)|0)+(Et>>>26)|0,Et&=67108863,i=Math.imul(M,F),n=(n=Math.imul(M,H))+Math.imul(x,F)|0,s=Math.imul(x,H),i=i+Math.imul(P,G)|0,n=(n=n+Math.imul(P,q)|0)+Math.imul(D,G)|0,s=s+Math.imul(D,q)|0,i=i+Math.imul(C,V)|0,n=(n=n+Math.imul(C,Z)|0)+Math.imul(B,V)|0,s=s+Math.imul(B,Z)|0,i=i+Math.imul(k,Y)|0,n=(n=n+Math.imul(k,W)|0)+Math.imul(S,Y)|0,s=s+Math.imul(S,W)|0,i=i+Math.imul(b,X)|0,n=(n=n+Math.imul(b,tt)|0)+Math.imul(v,X)|0,s=s+Math.imul(v,tt)|0,i=i+Math.imul(m,rt)|0,n=(n=n+Math.imul(m,it)|0)+Math.imul(w,rt)|0,s=s+Math.imul(w,it)|0,i=i+Math.imul(d,st)|0,n=(n=n+Math.imul(d,at)|0)+Math.imul(p,st)|0,s=s+Math.imul(p,at)|0;var kt=(h+(i=i+Math.imul(l,ct)|0)|0)+((8191&(n=(n=n+Math.imul(l,ht)|0)+Math.imul(f,ct)|0))<<13)|0;h=((s=s+Math.imul(f,ht)|0)+(n>>>13)|0)+(kt>>>26)|0,kt&=67108863,i=Math.imul(R,F),n=(n=Math.imul(R,H))+Math.imul(_,F)|0,s=Math.imul(_,H),i=i+Math.imul(M,G)|0,n=(n=n+Math.imul(M,q)|0)+Math.imul(x,G)|0,s=s+Math.imul(x,q)|0,i=i+Math.imul(P,V)|0,n=(n=n+Math.imul(P,Z)|0)+Math.imul(D,V)|0,s=s+Math.imul(D,Z)|0,i=i+Math.imul(C,Y)|0,n=(n=n+Math.imul(C,W)|0)+Math.imul(B,Y)|0,s=s+Math.imul(B,W)|0,i=i+Math.imul(k,X)|0,n=(n=n+Math.imul(k,tt)|0)+Math.imul(S,X)|0,s=s+Math.imul(S,tt)|0,i=i+Math.imul(b,rt)|0,n=(n=n+Math.imul(b,it)|0)+Math.imul(v,rt)|0,s=s+Math.imul(v,it)|0,i=i+Math.imul(m,st)|0,n=(n=n+Math.imul(m,at)|0)+Math.imul(w,st)|0,s=s+Math.imul(w,at)|0,i=i+Math.imul(d,ct)|0,n=(n=n+Math.imul(d,ht)|0)+Math.imul(p,ct)|0,s=s+Math.imul(p,ht)|0;var St=(h+(i=i+Math.imul(l,lt)|0)|0)+((8191&(n=(n=n+Math.imul(l,ft)|0)+Math.imul(f,lt)|0))<<13)|0;h=((s=s+Math.imul(f,ft)|0)+(n>>>13)|0)+(St>>>26)|0,St&=67108863,i=Math.imul(L,F),n=(n=Math.imul(L,H))+Math.imul(N,F)|0,s=Math.imul(N,H),i=i+Math.imul(R,G)|0,n=(n=n+Math.imul(R,q)|0)+Math.imul(_,G)|0,s=s+Math.imul(_,q)|0,i=i+Math.imul(M,V)|0,n=(n=n+Math.imul(M,Z)|0)+Math.imul(x,V)|0,s=s+Math.imul(x,Z)|0,i=i+Math.imul(P,Y)|0,n=(n=n+Math.imul(P,W)|0)+Math.imul(D,Y)|0,s=s+Math.imul(D,W)|0,i=i+Math.imul(C,X)|0,n=(n=n+Math.imul(C,tt)|0)+Math.imul(B,X)|0,s=s+Math.imul(B,tt)|0,i=i+Math.imul(k,rt)|0,n=(n=n+Math.imul(k,it)|0)+Math.imul(S,rt)|0,s=s+Math.imul(S,it)|0,i=i+Math.imul(b,st)|0,n=(n=n+Math.imul(b,at)|0)+Math.imul(v,st)|0,s=s+Math.imul(v,at)|0,i=i+Math.imul(m,ct)|0,n=(n=n+Math.imul(m,ht)|0)+Math.imul(w,ct)|0,s=s+Math.imul(w,ht)|0,i=i+Math.imul(d,lt)|0,n=(n=n+Math.imul(d,ft)|0)+Math.imul(p,lt)|0,s=s+Math.imul(p,ft)|0;var It=(h+(i=i+Math.imul(l,dt)|0)|0)+((8191&(n=(n=n+Math.imul(l,pt)|0)+Math.imul(f,dt)|0))<<13)|0;h=((s=s+Math.imul(f,pt)|0)+(n>>>13)|0)+(It>>>26)|0,It&=67108863,i=Math.imul(L,G),n=(n=Math.imul(L,q))+Math.imul(N,G)|0,s=Math.imul(N,q),i=i+Math.imul(R,V)|0,n=(n=n+Math.imul(R,Z)|0)+Math.imul(_,V)|0,s=s+Math.imul(_,Z)|0,i=i+Math.imul(M,Y)|0,n=(n=n+Math.imul(M,W)|0)+Math.imul(x,Y)|0,s=s+Math.imul(x,W)|0,i=i+Math.imul(P,X)|0,n=(n=n+Math.imul(P,tt)|0)+Math.imul(D,X)|0,s=s+Math.imul(D,tt)|0,i=i+Math.imul(C,rt)|0,n=(n=n+Math.imul(C,it)|0)+Math.imul(B,rt)|0,s=s+Math.imul(B,it)|0,i=i+Math.imul(k,st)|0,n=(n=n+Math.imul(k,at)|0)+Math.imul(S,st)|0,s=s+Math.imul(S,at)|0,i=i+Math.imul(b,ct)|0,n=(n=n+Math.imul(b,ht)|0)+Math.imul(v,ct)|0,s=s+Math.imul(v,ht)|0,i=i+Math.imul(m,lt)|0,n=(n=n+Math.imul(m,ft)|0)+Math.imul(w,lt)|0,s=s+Math.imul(w,ft)|0;var Ct=(h+(i=i+Math.imul(d,dt)|0)|0)+((8191&(n=(n=n+Math.imul(d,pt)|0)+Math.imul(p,dt)|0))<<13)|0;h=((s=s+Math.imul(p,pt)|0)+(n>>>13)|0)+(Ct>>>26)|0,Ct&=67108863,i=Math.imul(L,V),n=(n=Math.imul(L,Z))+Math.imul(N,V)|0,s=Math.imul(N,Z),i=i+Math.imul(R,Y)|0,n=(n=n+Math.imul(R,W)|0)+Math.imul(_,Y)|0,s=s+Math.imul(_,W)|0,i=i+Math.imul(M,X)|0,n=(n=n+Math.imul(M,tt)|0)+Math.imul(x,X)|0,s=s+Math.imul(x,tt)|0,i=i+Math.imul(P,rt)|0,n=(n=n+Math.imul(P,it)|0)+Math.imul(D,rt)|0,s=s+Math.imul(D,it)|0,i=i+Math.imul(C,st)|0,n=(n=n+Math.imul(C,at)|0)+Math.imul(B,st)|0,s=s+Math.imul(B,at)|0,i=i+Math.imul(k,ct)|0,n=(n=n+Math.imul(k,ht)|0)+Math.imul(S,ct)|0,s=s+Math.imul(S,ht)|0,i=i+Math.imul(b,lt)|0,n=(n=n+Math.imul(b,ft)|0)+Math.imul(v,lt)|0,s=s+Math.imul(v,ft)|0;var Bt=(h+(i=i+Math.imul(m,dt)|0)|0)+((8191&(n=(n=n+Math.imul(m,pt)|0)+Math.imul(w,dt)|0))<<13)|0;h=((s=s+Math.imul(w,pt)|0)+(n>>>13)|0)+(Bt>>>26)|0,Bt&=67108863,i=Math.imul(L,Y),n=(n=Math.imul(L,W))+Math.imul(N,Y)|0,s=Math.imul(N,W),i=i+Math.imul(R,X)|0,n=(n=n+Math.imul(R,tt)|0)+Math.imul(_,X)|0,s=s+Math.imul(_,tt)|0,i=i+Math.imul(M,rt)|0,n=(n=n+Math.imul(M,it)|0)+Math.imul(x,rt)|0,s=s+Math.imul(x,it)|0,i=i+Math.imul(P,st)|0,n=(n=n+Math.imul(P,at)|0)+Math.imul(D,st)|0,s=s+Math.imul(D,at)|0,i=i+Math.imul(C,ct)|0,n=(n=n+Math.imul(C,ht)|0)+Math.imul(B,ct)|0,s=s+Math.imul(B,ht)|0,i=i+Math.imul(k,lt)|0,n=(n=n+Math.imul(k,ft)|0)+Math.imul(S,lt)|0,s=s+Math.imul(S,ft)|0;var Kt=(h+(i=i+Math.imul(b,dt)|0)|0)+((8191&(n=(n=n+Math.imul(b,pt)|0)+Math.imul(v,dt)|0))<<13)|0;h=((s=s+Math.imul(v,pt)|0)+(n>>>13)|0)+(Kt>>>26)|0,Kt&=67108863,i=Math.imul(L,X),n=(n=Math.imul(L,tt))+Math.imul(N,X)|0,s=Math.imul(N,tt),i=i+Math.imul(R,rt)|0,n=(n=n+Math.imul(R,it)|0)+Math.imul(_,rt)|0,s=s+Math.imul(_,it)|0,i=i+Math.imul(M,st)|0,n=(n=n+Math.imul(M,at)|0)+Math.imul(x,st)|0,s=s+Math.imul(x,at)|0,i=i+Math.imul(P,ct)|0,n=(n=n+Math.imul(P,ht)|0)+Math.imul(D,ct)|0,s=s+Math.imul(D,ht)|0,i=i+Math.imul(C,lt)|0,n=(n=n+Math.imul(C,ft)|0)+Math.imul(B,lt)|0,s=s+Math.imul(B,ft)|0;var Pt=(h+(i=i+Math.imul(k,dt)|0)|0)+((8191&(n=(n=n+Math.imul(k,pt)|0)+Math.imul(S,dt)|0))<<13)|0;h=((s=s+Math.imul(S,pt)|0)+(n>>>13)|0)+(Pt>>>26)|0,Pt&=67108863,i=Math.imul(L,rt),n=(n=Math.imul(L,it))+Math.imul(N,rt)|0,s=Math.imul(N,it),i=i+Math.imul(R,st)|0,n=(n=n+Math.imul(R,at)|0)+Math.imul(_,st)|0,s=s+Math.imul(_,at)|0,i=i+Math.imul(M,ct)|0,n=(n=n+Math.imul(M,ht)|0)+Math.imul(x,ct)|0,s=s+Math.imul(x,ht)|0,i=i+Math.imul(P,lt)|0,n=(n=n+Math.imul(P,ft)|0)+Math.imul(D,lt)|0,s=s+Math.imul(D,ft)|0;var Dt=(h+(i=i+Math.imul(C,dt)|0)|0)+((8191&(n=(n=n+Math.imul(C,pt)|0)+Math.imul(B,dt)|0))<<13)|0;h=((s=s+Math.imul(B,pt)|0)+(n>>>13)|0)+(Dt>>>26)|0,Dt&=67108863,i=Math.imul(L,st),n=(n=Math.imul(L,at))+Math.imul(N,st)|0,s=Math.imul(N,at),i=i+Math.imul(R,ct)|0,n=(n=n+Math.imul(R,ht)|0)+Math.imul(_,ct)|0,s=s+Math.imul(_,ht)|0,i=i+Math.imul(M,lt)|0,n=(n=n+Math.imul(M,ft)|0)+Math.imul(x,lt)|0,s=s+Math.imul(x,ft)|0;var Ut=(h+(i=i+Math.imul(P,dt)|0)|0)+((8191&(n=(n=n+Math.imul(P,pt)|0)+Math.imul(D,dt)|0))<<13)|0;h=((s=s+Math.imul(D,pt)|0)+(n>>>13)|0)+(Ut>>>26)|0,Ut&=67108863,i=Math.imul(L,ct),n=(n=Math.imul(L,ht))+Math.imul(N,ct)|0,s=Math.imul(N,ht),i=i+Math.imul(R,lt)|0,n=(n=n+Math.imul(R,ft)|0)+Math.imul(_,lt)|0,s=s+Math.imul(_,ft)|0;var Mt=(h+(i=i+Math.imul(M,dt)|0)|0)+((8191&(n=(n=n+Math.imul(M,pt)|0)+Math.imul(x,dt)|0))<<13)|0;h=((s=s+Math.imul(x,pt)|0)+(n>>>13)|0)+(Mt>>>26)|0,Mt&=67108863,i=Math.imul(L,lt),n=(n=Math.imul(L,ft))+Math.imul(N,lt)|0,s=Math.imul(N,ft);var xt=(h+(i=i+Math.imul(R,dt)|0)|0)+((8191&(n=(n=n+Math.imul(R,pt)|0)+Math.imul(_,dt)|0))<<13)|0;h=((s=s+Math.imul(_,pt)|0)+(n>>>13)|0)+(xt>>>26)|0,xt&=67108863;var Qt=(h+(i=Math.imul(L,dt))|0)+((8191&(n=(n=Math.imul(L,pt))+Math.imul(N,dt)|0))<<13)|0;return h=((s=Math.imul(N,pt))+(n>>>13)|0)+(Qt>>>26)|0,Qt&=67108863,c[0]=gt,c[1]=mt,c[2]=wt,c[3]=At,c[4]=bt,c[5]=vt,c[6]=Et,c[7]=kt,c[8]=St,c[9]=It,c[10]=Ct,c[11]=Bt,c[12]=Kt,c[13]=Pt,c[14]=Dt,c[15]=Ut,c[16]=Mt,c[17]=xt,c[18]=Qt,0!==h&&(c[19]=h,r.length++),r};function d(t,e,r){return(new p).mulp(t,e,r)}function p(t,e){this.x=t,this.y=e}Math.imul||(y=f),n.prototype.mulTo=function(t,e){var r,i=this.length+t.length;return r=10===this.length&&10===t.length?y(this,t,e):i<63?f(this,t,e):i<1024?function(t,e,r){r.negative=e.negative^t.negative,r.length=t.length+e.length;for(var i=0,n=0,s=0;s<r.length-1;s++){var a=n;n=0;for(var o=67108863&i,c=Math.min(s,e.length-1),h=Math.max(0,s-t.length+1);h<=c;h++){var u=s-h,l=(0|t.words[u])*(0|e.words[h]),f=67108863&l;o=67108863&(f=f+o|0),n+=(a=(a=a+(l/67108864|0)|0)+(f>>>26)|0)>>>26,a&=67108863}r.words[s]=o,i=a,a=n}return 0!==i?r.words[s]=i:r.length--,r.strip()}(this,t,e):d(this,t,e),r},p.prototype.makeRBT=function(t){for(var e=Array(t),r=n.prototype._countBits(t)-1,i=0;i<t;i++)e[i]=this.revBin(i,r,t);return e},p.prototype.revBin=function(t,e,r){if(0===t||t===r-1)return t;for(var i=0,n=0;n<e;n++)i|=(1&t)<<e-n-1,t>>=1;return i},p.prototype.permute=function(t,e,r,i,n,s){for(var a=0;a<s;a++)i[a]=e[t[a]],n[a]=r[t[a]]},p.prototype.transform=function(t,e,r,i,n,s){this.permute(s,t,e,r,i,n);for(var a=1;a<n;a<<=1)for(var o=a<<1,c=Math.cos(2*Math.PI/o),h=Math.sin(2*Math.PI/o),u=0;u<n;u+=o)for(var l=c,f=h,y=0;y<a;y++){var d=r[u+y],p=i[u+y],g=r[u+y+a],m=i[u+y+a],w=l*g-f*m;m=l*m+f*g,g=w,r[u+y]=d+g,i[u+y]=p+m,r[u+y+a]=d-g,i[u+y+a]=p-m,y!==o&&(w=c*l-h*f,f=c*f+h*l,l=w)}},p.prototype.guessLen13b=function(t,e){var r=1|Math.max(e,t),i=1&r,n=0;for(r=r/2|0;r;r>>>=1)n++;return 1<<n+1+i},p.prototype.conjugate=function(t,e,r){if(!(r<=1))for(var i=0;i<r/2;i++){var n=t[i];t[i]=t[r-i-1],t[r-i-1]=n,n=e[i],e[i]=-e[r-i-1],e[r-i-1]=-n}},p.prototype.normalize13b=function(t,e){for(var r=0,i=0;i<e/2;i++){var n=8192*Math.round(t[2*i+1]/e)+Math.round(t[2*i]/e)+r;t[i]=67108863&n,r=n<67108864?0:n/67108864|0}return t},p.prototype.convert13b=function(t,e,i,n){for(var s=0,a=0;a<e;a++)s+=0|t[a],i[2*a]=8191&s,s>>>=13,i[2*a+1]=8191&s,s>>>=13;for(a=2*e;a<n;++a)i[a]=0;r(0===s),r(0==(-8192&s))},p.prototype.stub=function(t){for(var e=Array(t),r=0;r<t;r++)e[r]=0;return e},p.prototype.mulp=function(t,e,r){var i=2*this.guessLen13b(t.length,e.length),n=this.makeRBT(i),s=this.stub(i),a=Array(i),o=Array(i),c=Array(i),h=Array(i),u=Array(i),l=Array(i),f=r.words;f.length=i,this.convert13b(t.words,t.length,a,i),this.convert13b(e.words,e.length,h,i),this.transform(a,s,o,c,i,n),this.transform(h,s,u,l,i,n);for(var y=0;y<i;y++){var d=o[y]*u[y]-c[y]*l[y];c[y]=o[y]*l[y]+c[y]*u[y],o[y]=d}return this.conjugate(o,c,i),this.transform(o,c,f,s,i,n),this.conjugate(f,s,i),this.normalize13b(f,i),r.negative=t.negative^e.negative,r.length=t.length+e.length,r.strip()},n.prototype.mul=function(t){var e=new n(null);return e.words=Array(this.length+t.length),this.mulTo(t,e)},n.prototype.mulf=function(t){var e=new n(null);return e.words=Array(this.length+t.length),d(this,t,e)},n.prototype.imul=function(t){return this.clone().mulTo(t,this)},n.prototype.imuln=function(t){r("number"==typeof t),r(t<67108864);for(var e=0,i=0;i<this.length;i++){var n=(0|this.words[i])*t,s=(67108863&n)+(67108863&e);e>>=26,e+=n/67108864|0,e+=s>>>26,this.words[i]=67108863&s}return 0!==e&&(this.words[i]=e,this.length++),this},n.prototype.muln=function(t){return this.clone().imuln(t)},n.prototype.sqr=function(){return this.mul(this)},n.prototype.isqr=function(){return this.imul(this.clone())},n.prototype.pow=function(t){var e=function(t){for(var e=Array(t.bitLength()),r=0;r<e.length;r++){var i=r/26|0,n=r%26;e[r]=(t.words[i]&1<<n)>>>n}return e}(t);if(0===e.length)return new n(1);for(var r=this,i=0;i<e.length&&0===e[i];i++,r=r.sqr());if(++i<e.length)for(var s=r.sqr();i<e.length;i++,s=s.sqr())0!==e[i]&&(r=r.mul(s));return r},n.prototype.iushln=function(t){r("number"==typeof t&&t>=0);var e,i=t%26,n=(t-i)/26,s=67108863>>>26-i<<26-i;if(0!==i){var a=0;for(e=0;e<this.length;e++){var o=this.words[e]&s,c=(0|this.words[e])-o<<i;this.words[e]=c|a,a=o>>>26-i}a&&(this.words[e]=a,this.length++)}if(0!==n){for(e=this.length-1;e>=0;e--)this.words[e+n]=this.words[e];for(e=0;e<n;e++)this.words[e]=0;this.length+=n}return this.strip()},n.prototype.ishln=function(t){return r(0===this.negative),this.iushln(t)},n.prototype.iushrn=function(t,e,i){var n;r("number"==typeof t&&t>=0),n=e?(e-e%26)/26:0;var s=t%26,a=Math.min((t-s)/26,this.length),o=67108863^67108863>>>s<<s,c=i;if(n=Math.max(0,n-=a),c){for(var h=0;h<a;h++)c.words[h]=this.words[h];c.length=a}if(0===a);else if(this.length>a)for(this.length-=a,h=0;h<this.length;h++)this.words[h]=this.words[h+a];else this.words[0]=0,this.length=1;var u=0;for(h=this.length-1;h>=0&&(0!==u||h>=n);h--){var l=0|this.words[h];this.words[h]=u<<26-s|l>>>s,u=l&o}return c&&0!==u&&(c.words[c.length++]=u),0===this.length&&(this.words[0]=0,this.length=1),this.strip()},n.prototype.ishrn=function(t,e,i){return r(0===this.negative),this.iushrn(t,e,i)},n.prototype.shln=function(t){return this.clone().ishln(t)},n.prototype.ushln=function(t){return this.clone().iushln(t)},n.prototype.shrn=function(t){return this.clone().ishrn(t)},n.prototype.ushrn=function(t){return this.clone().iushrn(t)},n.prototype.testn=function(t){r("number"==typeof t&&t>=0);var e=t%26,i=(t-e)/26,n=1<<e;return!(this.length<=i||!(this.words[i]&n))},n.prototype.imaskn=function(t){r("number"==typeof t&&t>=0);var e=t%26,i=(t-e)/26;if(r(0===this.negative,"imaskn works only with positive numbers"),this.length<=i)return this;if(0!==e&&i++,this.length=Math.min(i,this.length),0!==e){var n=67108863^67108863>>>e<<e;this.words[this.length-1]&=n}return this.strip()},n.prototype.maskn=function(t){return this.clone().imaskn(t)},n.prototype.iaddn=function(t){return r("number"==typeof t),r(t<67108864),t<0?this.isubn(-t):0!==this.negative?1===this.length&&(0|this.words[0])<t?(this.words[0]=t-(0|this.words[0]),this.negative=0,this):(this.negative=0,this.isubn(t),this.negative=1,this):this._iaddn(t)},n.prototype._iaddn=function(t){this.words[0]+=t;for(var e=0;e<this.length&&this.words[e]>=67108864;e++)this.words[e]-=67108864,e===this.length-1?this.words[e+1]=1:this.words[e+1]++;return this.length=Math.max(this.length,e+1),this},n.prototype.isubn=function(t){if(r("number"==typeof t),r(t<67108864),t<0)return this.iaddn(-t);if(0!==this.negative)return this.negative=0,this.iaddn(t),this.negative=1,this;if(this.words[0]-=t,1===this.length&&this.words[0]<0)this.words[0]=-this.words[0],this.negative=1;else for(var e=0;e<this.length&&this.words[e]<0;e++)this.words[e]+=67108864,this.words[e+1]-=1;return this.strip()},n.prototype.addn=function(t){return this.clone().iaddn(t)},n.prototype.subn=function(t){return this.clone().isubn(t)},n.prototype.iabs=function(){return this.negative=0,this},n.prototype.abs=function(){return this.clone().iabs()},n.prototype._ishlnsubmul=function(t,e,i){var n,s,a=t.length+i;this._expand(a);var o=0;for(n=0;n<t.length;n++){s=(0|this.words[n+i])+o;var c=(0|t.words[n])*e;o=((s-=67108863&c)>>26)-(c/67108864|0),this.words[n+i]=67108863&s}for(;n<this.length-i;n++)o=(s=(0|this.words[n+i])+o)>>26,this.words[n+i]=67108863&s;if(0===o)return this.strip();for(r(-1===o),o=0,n=0;n<this.length;n++)o=(s=-(0|this.words[n])+o)>>26,this.words[n]=67108863&s;return this.negative=1,this.strip()},n.prototype._wordDiv=function(t,e){var r=(this.length,t.length),i=this.clone(),s=t,a=0|s.words[s.length-1];0!=(r=26-this._countBits(a))&&(s=s.ushln(r),i.iushln(r),a=0|s.words[s.length-1]);var o,c=i.length-s.length;if("mod"!==e){(o=new n(null)).length=c+1,o.words=Array(o.length);for(var h=0;h<o.length;h++)o.words[h]=0}var u=i.clone()._ishlnsubmul(s,1,c);0===u.negative&&(i=u,o&&(o.words[c]=1));for(var l=c-1;l>=0;l--){var f=67108864*(0|i.words[s.length+l])+(0|i.words[s.length+l-1]);for(f=Math.min(f/a|0,67108863),i._ishlnsubmul(s,f,l);0!==i.negative;)f--,i.negative=0,i._ishlnsubmul(s,1,l),i.isZero()||(i.negative^=1);o&&(o.words[l]=f)}return o&&o.strip(),i.strip(),"div"!==e&&0!==r&&i.iushrn(r),{div:o||null,mod:i}},n.prototype.divmod=function(t,e,i){return r(!t.isZero()),this.isZero()?{div:new n(0),mod:new n(0)}:0!==this.negative&&0===t.negative?(o=this.neg().divmod(t,e),"mod"!==e&&(s=o.div.neg()),"div"!==e&&(a=o.mod.neg(),i&&0!==a.negative&&a.iadd(t)),{div:s,mod:a}):0===this.negative&&0!==t.negative?(o=this.divmod(t.neg(),e),"mod"!==e&&(s=o.div.neg()),{div:s,mod:o.mod}):0!=(this.negative&t.negative)?(o=this.neg().divmod(t.neg(),e),"div"!==e&&(a=o.mod.neg(),i&&0!==a.negative&&a.isub(t)),{div:o.div,mod:a}):t.length>this.length||this.cmp(t)<0?{div:new n(0),mod:this}:1===t.length?"div"===e?{div:this.divn(t.words[0]),mod:null}:"mod"===e?{div:null,mod:new n(this.modn(t.words[0]))}:{div:this.divn(t.words[0]),mod:new n(this.modn(t.words[0]))}:this._wordDiv(t,e);var s,a,o},n.prototype.div=function(t){return this.divmod(t,"div",!1).div},n.prototype.mod=function(t){return this.divmod(t,"mod",!1).mod},n.prototype.umod=function(t){return this.divmod(t,"mod",!0).mod},n.prototype.divRound=function(t){var e=this.divmod(t);if(e.mod.isZero())return e.div;var r=0!==e.div.negative?e.mod.isub(t):e.mod,i=t.ushrn(1),n=t.andln(1),s=r.cmp(i);return s<0||1===n&&0===s?e.div:0!==e.div.negative?e.div.isubn(1):e.div.iaddn(1)},n.prototype.modn=function(t){r(t<=67108863);for(var e=(1<<26)%t,i=0,n=this.length-1;n>=0;n--)i=(e*i+(0|this.words[n]))%t;return i},n.prototype.idivn=function(t){r(t<=67108863);for(var e=0,i=this.length-1;i>=0;i--){var n=(0|this.words[i])+67108864*e;this.words[i]=n/t|0,e=n%t}return this.strip()},n.prototype.divn=function(t){return this.clone().idivn(t)},n.prototype.egcd=function(t){r(0===t.negative),r(!t.isZero());var e=this,i=t.clone();e=0!==e.negative?e.umod(t):e.clone();for(var s=new n(1),a=new n(0),o=new n(0),c=new n(1),h=0;e.isEven()&&i.isEven();)e.iushrn(1),i.iushrn(1),++h;for(var u=i.clone(),l=e.clone();!e.isZero();){for(var f=0,y=1;0==(e.words[0]&y)&&f<26;++f,y<<=1);if(f>0)for(e.iushrn(f);f-- >0;)(s.isOdd()||a.isOdd())&&(s.iadd(u),a.isub(l)),s.iushrn(1),a.iushrn(1);for(var d=0,p=1;0==(i.words[0]&p)&&d<26;++d,p<<=1);if(d>0)for(i.iushrn(d);d-- >0;)(o.isOdd()||c.isOdd())&&(o.iadd(u),c.isub(l)),o.iushrn(1),c.iushrn(1);e.cmp(i)>=0?(e.isub(i),s.isub(o),a.isub(c)):(i.isub(e),o.isub(s),c.isub(a))}return{a:o,b:c,gcd:i.iushln(h)}},n.prototype._invmp=function(t){r(0===t.negative),r(!t.isZero());var e=this,i=t.clone();e=0!==e.negative?e.umod(t):e.clone();for(var s,a=new n(1),o=new n(0),c=i.clone();e.cmpn(1)>0&&i.cmpn(1)>0;){for(var h=0,u=1;0==(e.words[0]&u)&&h<26;++h,u<<=1);if(h>0)for(e.iushrn(h);h-- >0;)a.isOdd()&&a.iadd(c),a.iushrn(1);for(var l=0,f=1;0==(i.words[0]&f)&&l<26;++l,f<<=1);if(l>0)for(i.iushrn(l);l-- >0;)o.isOdd()&&o.iadd(c),o.iushrn(1);e.cmp(i)>=0?(e.isub(i),a.isub(o)):(i.isub(e),o.isub(a))}return(s=0===e.cmpn(1)?a:o).cmpn(0)<0&&s.iadd(t),s},n.prototype.gcd=function(t){if(this.isZero())return t.abs();if(t.isZero())return this.abs();var e=this.clone(),r=t.clone();e.negative=0,r.negative=0;for(var i=0;e.isEven()&&r.isEven();i++)e.iushrn(1),r.iushrn(1);for(;;){for(;e.isEven();)e.iushrn(1);for(;r.isEven();)r.iushrn(1);var n=e.cmp(r);if(n<0){var s=e;e=r,r=s}else if(0===n||0===r.cmpn(1))break;e.isub(r)}return r.iushln(i)},n.prototype.invm=function(t){return this.egcd(t).a.umod(t)},n.prototype.isEven=function(){return 0==(1&this.words[0])},n.prototype.isOdd=function(){return 1==(1&this.words[0])},n.prototype.andln=function(t){return this.words[0]&t},n.prototype.bincn=function(t){r("number"==typeof t);var e=t%26,i=(t-e)/26,n=1<<e;if(this.length<=i)return this._expand(i+1),this.words[i]|=n,this;for(var s=n,a=i;0!==s&&a<this.length;a++){var o=0|this.words[a];s=(o+=s)>>>26,o&=67108863,this.words[a]=o}return 0!==s&&(this.words[a]=s,this.length++),this},n.prototype.isZero=function(){return 1===this.length&&0===this.words[0]},n.prototype.cmpn=function(t){var e,i=t<0;if(0!==this.negative&&!i)return-1;if(0===this.negative&&i)return 1;if(this.strip(),this.length>1)e=1;else{i&&(t=-t),r(t<=67108863,"Number is too big");var n=0|this.words[0];e=n===t?0:n<t?-1:1}return 0!==this.negative?0|-e:e},n.prototype.cmp=function(t){if(0!==this.negative&&0===t.negative)return-1;if(0===this.negative&&0!==t.negative)return 1;var e=this.ucmp(t);return 0!==this.negative?0|-e:e},n.prototype.ucmp=function(t){if(this.length>t.length)return 1;if(this.length<t.length)return-1;for(var e=0,r=this.length-1;r>=0;r--){var i=0|this.words[r],n=0|t.words[r];if(i!==n){i<n?e=-1:i>n&&(e=1);break}}return e},n.prototype.gtn=function(t){return 1===this.cmpn(t)},n.prototype.gt=function(t){return 1===this.cmp(t)},n.prototype.gten=function(t){return this.cmpn(t)>=0},n.prototype.gte=function(t){return this.cmp(t)>=0},n.prototype.ltn=function(t){return-1===this.cmpn(t)},n.prototype.lt=function(t){return-1===this.cmp(t)},n.prototype.lten=function(t){return this.cmpn(t)<=0},n.prototype.lte=function(t){return this.cmp(t)<=0},n.prototype.eqn=function(t){return 0===this.cmpn(t)},n.prototype.eq=function(t){return 0===this.cmp(t)},n.red=function(t){return new E(t)},n.prototype.toRed=function(t){return r(!this.red,"Already a number in reduction context"),r(0===this.negative,"red works only with positives"),t.convertTo(this)._forceRed(t)},n.prototype.fromRed=function(){return r(this.red,"fromRed works only with numbers in reduction context"),this.red.convertFrom(this)},n.prototype._forceRed=function(t){return this.red=t,this},n.prototype.forceRed=function(t){return r(!this.red,"Already a number in reduction context"),this._forceRed(t)},n.prototype.redAdd=function(t){return r(this.red,"redAdd works only with red numbers"),this.red.add(this,t)},n.prototype.redIAdd=function(t){return r(this.red,"redIAdd works only with red numbers"),this.red.iadd(this,t)},n.prototype.redSub=function(t){return r(this.red,"redSub works only with red numbers"),this.red.sub(this,t)},n.prototype.redISub=function(t){return r(this.red,"redISub works only with red numbers"),this.red.isub(this,t)},n.prototype.redShl=function(t){return r(this.red,"redShl works only with red numbers"),this.red.shl(this,t)},n.prototype.redMul=function(t){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,t),this.red.mul(this,t)},n.prototype.redIMul=function(t){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,t),this.red.imul(this,t)},n.prototype.redSqr=function(){return r(this.red,"redSqr works only with red numbers"),this.red._verify1(this),this.red.sqr(this)},n.prototype.redISqr=function(){return r(this.red,"redISqr works only with red numbers"),this.red._verify1(this),this.red.isqr(this)},n.prototype.redSqrt=function(){return r(this.red,"redSqrt works only with red numbers"),this.red._verify1(this),this.red.sqrt(this)},n.prototype.redInvm=function(){return r(this.red,"redInvm works only with red numbers"),this.red._verify1(this),this.red.invm(this)},n.prototype.redNeg=function(){return r(this.red,"redNeg works only with red numbers"),this.red._verify1(this),this.red.neg(this)},n.prototype.redPow=function(t){return r(this.red&&!t.red,"redPow(normalNum)"),this.red._verify1(this),this.red.pow(this,t)};var g={k256:null,p224:null,p192:null,p25519:null};function m(t,e){this.name=t,this.p=new n(e,16),this.n=this.p.bitLength(),this.k=new n(1).iushln(this.n).isub(this.p),this.tmp=this._tmp()}function w(){m.call(this,"k256","ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f")}function A(){m.call(this,"p224","ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001")}function b(){m.call(this,"p192","ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff")}function v(){m.call(this,"25519","7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed")}function E(t){if("string"==typeof t){var e=n._prime(t);this.m=e.p,this.prime=e}else r(t.gtn(1),"modulus must be greater than 1"),this.m=t,this.prime=null}function k(t){E.call(this,t),this.shift=this.m.bitLength(),this.shift%26!=0&&(this.shift+=26-this.shift%26),this.r=new n(1).iushln(this.shift),this.r2=this.imod(this.r.sqr()),this.rinv=this.r._invmp(this.m),this.minv=this.rinv.mul(this.r).isubn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}m.prototype._tmp=function(){var t=new n(null);return t.words=Array(Math.ceil(this.n/13)),t},m.prototype.ireduce=function(t){var e,r=t;do{this.split(r,this.tmp),e=(r=(r=this.imulK(r)).iadd(this.tmp)).bitLength()}while(e>this.n);var i=e<this.n?-1:r.ucmp(this.p);return 0===i?(r.words[0]=0,r.length=1):i>0?r.isub(this.p):void 0!==r.strip?r.strip():r._strip(),r},m.prototype.split=function(t,e){t.iushrn(this.n,0,e)},m.prototype.imulK=function(t){return t.imul(this.k)},i(w,m),w.prototype.split=function(t,e){for(var r=4194303,i=Math.min(t.length,9),n=0;n<i;n++)e.words[n]=t.words[n];if(e.length=i,t.length<=9)return t.words[0]=0,void(t.length=1);var s=t.words[9];for(e.words[e.length++]=s&r,n=10;n<t.length;n++){var a=0|t.words[n];t.words[n-10]=(a&r)<<4|s>>>22,s=a}s>>>=22,t.words[n-10]=s,0===s&&t.length>10?t.length-=10:t.length-=9},w.prototype.imulK=function(t){t.words[t.length]=0,t.words[t.length+1]=0,t.length+=2;for(var e=0,r=0;r<t.length;r++){var i=0|t.words[r];e+=977*i,t.words[r]=67108863&e,e=64*i+(e/67108864|0)}return 0===t.words[t.length-1]&&(t.length--,0===t.words[t.length-1]&&t.length--),t},i(A,m),i(b,m),i(v,m),v.prototype.imulK=function(t){for(var e=0,r=0;r<t.length;r++){var i=19*(0|t.words[r])+e,n=67108863&i;i>>>=26,t.words[r]=n,e=i}return 0!==e&&(t.words[t.length++]=e),t},n._prime=function(t){if(g[t])return g[t];var e;if("k256"===t)e=new w;else if("p224"===t)e=new A;else if("p192"===t)e=new b;else{if("p25519"!==t)throw Error("Unknown prime "+t);e=new v}return g[t]=e,e},E.prototype._verify1=function(t){r(0===t.negative,"red works only with positives"),r(t.red,"red works only with red numbers")},E.prototype._verify2=function(t,e){r(0==(t.negative|e.negative),"red works only with positives"),r(t.red&&t.red===e.red,"red works only with red numbers")},E.prototype.imod=function(t){return this.prime?this.prime.ireduce(t)._forceRed(this):t.umod(this.m)._forceRed(this)},E.prototype.neg=function(t){return t.isZero()?t.clone():this.m.sub(t)._forceRed(this)},E.prototype.add=function(t,e){this._verify2(t,e);var r=t.add(e);return r.cmp(this.m)>=0&&r.isub(this.m),r._forceRed(this)},E.prototype.iadd=function(t,e){this._verify2(t,e);var r=t.iadd(e);return r.cmp(this.m)>=0&&r.isub(this.m),r},E.prototype.sub=function(t,e){this._verify2(t,e);var r=t.sub(e);return r.cmpn(0)<0&&r.iadd(this.m),r._forceRed(this)},E.prototype.isub=function(t,e){this._verify2(t,e);var r=t.isub(e);return r.cmpn(0)<0&&r.iadd(this.m),r},E.prototype.shl=function(t,e){return this._verify1(t),this.imod(t.ushln(e))},E.prototype.imul=function(t,e){return this._verify2(t,e),this.imod(t.imul(e))},E.prototype.mul=function(t,e){return this._verify2(t,e),this.imod(t.mul(e))},E.prototype.isqr=function(t){return this.imul(t,t.clone())},E.prototype.sqr=function(t){return this.mul(t,t)},E.prototype.sqrt=function(t){if(t.isZero())return t.clone();var e=this.m.andln(3);if(r(e%2==1),3===e){var i=this.m.add(new n(1)).iushrn(2);return this.pow(t,i)}for(var s=this.m.subn(1),a=0;!s.isZero()&&0===s.andln(1);)a++,s.iushrn(1);r(!s.isZero());var o=new n(1).toRed(this),c=o.redNeg(),h=this.m.subn(1).iushrn(1),u=this.m.bitLength();for(u=new n(2*u*u).toRed(this);0!==this.pow(u,h).cmp(c);)u.redIAdd(c);for(var l=this.pow(u,s),f=this.pow(t,s.addn(1).iushrn(1)),y=this.pow(t,s),d=a;0!==y.cmp(o);){for(var p=y,g=0;0!==p.cmp(o);g++)p=p.redSqr();r(g<d);var m=this.pow(l,new n(1).iushln(d-g-1));f=f.redMul(m),l=m.redSqr(),y=y.redMul(l),d=g}return f},E.prototype.invm=function(t){var e=t._invmp(this.m);return 0!==e.negative?(e.negative=0,this.imod(e).redNeg()):this.imod(e)},E.prototype.pow=function(t,e){if(e.isZero())return new n(1).toRed(this);if(0===e.cmpn(1))return t.clone();var r=Array(16);r[0]=new n(1).toRed(this),r[1]=t;for(var i=2;i<r.length;i++)r[i]=this.mul(r[i-1],t);var s=r[0],a=0,o=0,c=e.bitLength()%26;for(0===c&&(c=26),i=e.length-1;i>=0;i--){for(var h=e.words[i],u=c-1;u>=0;u--){var l=h>>u&1;s!==r[0]&&(s=this.sqr(s)),0!==l||0!==a?(a<<=1,a|=l,(4==++o||0===i&&0===u)&&(s=this.mul(s,r[a]),o=0,a=0)):o=0}c=26}return s},E.prototype.convertTo=function(t){var e=t.umod(this.m);return e===t?e.clone():e},E.prototype.convertFrom=function(t){var e=t.clone();return e.red=null,e},n.mont=function(t){return new k(t)},i(k,E),k.prototype.convertTo=function(t){return this.imod(t.ushln(this.shift))},k.prototype.convertFrom=function(t){var e=this.imod(t.mul(this.rinv));return e.red=null,e},k.prototype.imul=function(t,e){if(t.isZero()||e.isZero())return t.words[0]=0,t.length=1,t;var r=t.imul(e),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),n=r.isub(i).iushrn(this.shift),s=n;return n.cmp(this.m)>=0?s=n.isub(this.m):n.cmpn(0)<0&&(s=n.iadd(this.m)),s._forceRed(this)},k.prototype.mul=function(t,e){if(t.isZero()||e.isZero())return new n(0)._forceRed(this);var r=t.mul(e),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),s=r.isub(i).iushrn(this.shift),a=s;return s.cmp(this.m)>=0?a=s.isub(this.m):s.cmpn(0)<0&&(a=s.iadd(this.m)),a._forceRed(this)},k.prototype.invm=function(t){return this.imod(t._invmp(this.m).mul(this.r2))._forceRed(this)}}(Ya,is);var Wa=/*@__PURE__*/ns(Ya.exports);class $a extends Va{constructor(t){if(super(),void 0===t)throw Error("Invalid BigInteger input");const e=("string"==typeof t||t instanceof String)&&t.startsWith("0x");this.value=e?new Wa(t.substring(2),16):new Wa(t)}clone(){return new $a(this.value.clone())}iinc(){return this.value.iadd(new Wa(1)),this}inc(){return this.clone().iinc()}idec(){return this.value.isub(new Wa(1)),this}dec(){return this.clone().idec()}iadd(t){return this.value.iadd(t.value),this}add(t){return this.clone().iadd(t)}isub(t){return this.value.isub(t.value),this}sub(t){return this.clone().isub(t)}imul(t){return this.value.imul(t.value),this}mul(t){return this.clone().imul(t)}imod(t){return this.value=this.value.umod(t.value),this}mod(t){return this.clone().imod(t)}modExp(t,e){const r=e.isEven()?Wa.red(e.value):Wa.mont(e.value),i=this.clone();return i.value=i.value.toRed(r).redPow(t.value).fromRed(),i}modInv(t){if(!this.gcd(t).isOne())throw Error("Inverse does not exist");return new $a(this.value.invm(t.value))}idiv(t){return this.value=this.value.div(t.value),this}div(t){return this.clone().idiv(t)}gcd(t){return new $a(this.value.gcd(t.value))}ileftShift(t){return t.isNegative()?this.irightShift(t.negate()):(this.value.ishln(t.value.toNumber()),this)}leftShift(t){return this.clone().ileftShift(t)}irightShift(t){return t.isNegative()?this.ileftShift(t.negate()):(this.value.ishrn(t.value.toNumber()),this)}rightShift(t){return this.clone().irightShift(t)}ixor(t){return this.value.ixor(t.value),this}xor(t){return this.clone().ixor(t)}ibitwiseAnd(t){return this.value.iand(t.value),this}bitwiseAnd(t){return this.clone().ibitwiseAnd(t)}ibitwiseOr(t){return this.value.ior(t.value),this}equal(t){return this.value.eq(t.value)}lt(t){return this.value.lt(t.value)}lte(t){return this.value.lte(t.value)}gt(t){return this.value.gt(t.value)}gte(t){return this.value.gte(t.value)}isZero(){return this.value.isZero()}isOne(){return this.value.eq(new Wa(1))}isNegative(){return this.value.isNeg()}isEven(){return this.value.isEven()}abs(){const t=this.clone();return t.value=t.value.abs(),t}negate(){const t=this.clone();return t.value.ineg(),t}toString(){return this.value.toString()}toNumber(){return this.value.toNumber()}getBit(t){return this.value.testn(t)?1:0}bitLength(){return this.value.bitLength()}byteLength(){return this.value.byteLength()}toUint8Array(t="be",e){return this.value.toArrayLike(Uint8Array,t,e)}}var Xa=/*#__PURE__*/Object.freeze({__proto__:null,default:$a});function to(t){if(!Number.isSafeInteger(t)||t<0)throw Error("Wrong positive integer: "+t)}function eo(t,...e){if(!((r=t)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Expected Uint8Array");var r;if(e.length>0&&!e.includes(t.length))throw Error(`Expected Uint8Array of length ${e}, not of length=${t.length}`)}function ro(t,e=!0){if(t.destroyed)throw Error("Hash instance has been destroyed");if(e&&t.finished)throw Error("Hash#digest() has already been called")}function io(t,e){eo(t);const r=e.outputLen;if(t.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const no=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0;
-/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function so(t){return t instanceof Uint8Array||null!=t&&"object"==typeof t&&"Uint8Array"===t.constructor.name}const ao=t=>new DataView(t.buffer,t.byteOffset,t.byteLength),oo=(t,e)=>t<<32-e|t>>>e;if(!(68===new Uint8Array(new Uint32Array([287454020]).buffer)[0]))throw Error("Non little-endian hardware is not supported");function co(t){if("string"!=typeof t)throw Error("utf8ToBytes expected string, got "+typeof t);return new Uint8Array((new TextEncoder).encode(t))}function ho(t){if("string"==typeof t&&(t=co(t)),!so(t))throw Error("expected Uint8Array, got "+typeof t);return t}function uo(...t){let e=0;for(let r=0;r<t.length;r++){const i=t[r];if(!so(i))throw Error("Uint8Array expected");e+=i.length}const r=new Uint8Array(e);for(let e=0,i=0;e<t.length;e++){const n=t[e];r.set(n,i),i+=n.length}return r}class lo{clone(){return this._cloneInto()}}function fo(t){const e=e=>t().update(ho(e)).digest(),r=t();return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=()=>t(),e}function yo(t=32){if(no&&"function"==typeof no.getRandomValues)return no.getRandomValues(new Uint8Array(t));throw Error("crypto.getRandomValues must be defined")}class po extends lo{constructor(t,e){super(),this.finished=!1,this.destroyed=!1,function(t){if("function"!=typeof t||"function"!=typeof t.create)throw Error("Hash should be wrapped by utils.wrapConstructor");to(t.outputLen),to(t.blockLen)}(t);const r=ho(e);if(this.iHash=t.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const i=this.blockLen,n=new Uint8Array(i);n.set(r.length>i?t.create().update(r).digest():r);for(let t=0;t<n.length;t++)n[t]^=54;this.iHash.update(n),this.oHash=t.create();for(let t=0;t<n.length;t++)n[t]^=106;this.oHash.update(n),n.fill(0)}update(t){return ro(this),this.iHash.update(t),this}digestInto(t){ro(this),eo(t,this.outputLen),this.finished=!0,this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){const t=new Uint8Array(this.oHash.outputLen);return this.digestInto(t),t}_cloneInto(t){t||(t=Object.create(Object.getPrototypeOf(this),{}));const{oHash:e,iHash:r,finished:i,destroyed:n,blockLen:s,outputLen:a}=this;return t.finished=i,t.destroyed=n,t.blockLen=s,t.outputLen=a,t.oHash=e._cloneInto(t.oHash),t.iHash=r._cloneInto(t.iHash),t}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const go=(t,e,r)=>new po(t,e).update(r).digest();go.create=(t,e)=>new po(t,e);Va.setImplementation("undefined"!=typeof BigInt?Za:$a);
+/*! OpenPGP.js v6.0.0-beta.0 - 2024-04-18 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
+"use strict";const t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var e=require("module"),r=require("node:crypto"),i="undefined"!=typeof document?document.currentScript:null;function n(t){var e=Object.create(null);return t&&Object.keys(t).forEach((function(r){if("default"!==r){var i=Object.getOwnPropertyDescriptor(t,r);Object.defineProperty(e,r,i.get?i:{enumerable:!0,get:function(){return t[r]}})}})),e.default=t,Object.freeze(e)}var s=/*#__PURE__*/n(r);const a=Symbol("doneWritingPromise"),o=Symbol("doneWritingResolve"),c=Symbol("doneWritingReject"),h=Symbol("readingIndex");class ArrayStream extends Array{constructor(){super(),Object.setPrototypeOf(this,ArrayStream.prototype),this[a]=new Promise(((t,e)=>{this[o]=t,this[c]=e})),this[a].catch((()=>{}))}}function u(t){return t&&t.getReader&&Array.isArray(t)}function l(t){if(!u(t)){const e=t.getWriter(),r=e.releaseLock;return e.releaseLock=()=>{e.closed.catch((function(){})),r.call(e)},e}this.stream=t}function f(e){if(u(e))return"array";if(t.ReadableStream&&t.ReadableStream.prototype.isPrototypeOf(e))return"web";if(e&&!(t.ReadableStream&&e instanceof t.ReadableStream)&&"function"==typeof e._read&&"object"==typeof e._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!e||!e.getReader)&&"web-like"}function y(t){return Uint8Array.prototype.isPrototypeOf(t)}function d(t){if(1===t.length)return t[0];let e=0;for(let r=0;r<t.length;r++){if(!y(t[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");e+=t[r].length}const r=new Uint8Array(e);let i=0;return t.forEach((function(t){r.set(t,i),i+=t.length})),r}ArrayStream.prototype.getReader=function(){return void 0===this[h]&&(this[h]=0),{read:async()=>(await this[a],this[h]===this.length?{value:void 0,done:!0}:{value:this[this[h]++],done:!1})}},ArrayStream.prototype.readToEnd=async function(t){await this[a];const e=t(this.slice(this[h]));return this.length=0,e},ArrayStream.prototype.clone=function(){const t=new ArrayStream;return t[a]=this[a].then((()=>{t.push(...this)})),t},l.prototype.write=async function(t){this.stream.push(t)},l.prototype.close=async function(){this.stream[o]()},l.prototype.abort=async function(t){return this.stream[c](t),t},l.prototype.releaseLock=function(){},"object"==typeof t.process&&t.process.versions;const p=new WeakSet,g=Symbol("externalBuffer");function m(t){if(this.stream=t,t[g]&&(this[g]=t[g].slice()),u(t)){const e=t.getReader();return this._read=e.read.bind(e),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(f(t)){const e=t.getReader();return this._read=e.read.bind(e),this._releaseLock=()=>{e.closed.catch((function(){})),e.releaseLock()},void(this._cancel=e.cancel.bind(e))}let e=!1;this._read=async()=>e||p.has(t)?{value:void 0,done:!0}:(e=!0,{value:t,done:!1}),this._releaseLock=()=>{if(e)try{p.add(t)}catch(t){}}}function w(t){return f(t)?t:new ReadableStream({start(e){e.enqueue(t),e.close()}})}function A(t){if(f(t))return t;const e=new ArrayStream;return(async()=>{const r=R(e);await r.write(t),await r.close()})(),e}function b(t){return t.some((t=>f(t)&&!u(t)))?function(t){t=t.map(w);const e=k((async function(t){await Promise.all(i.map((e=>M(e,t))))}));let r=Promise.resolve();const i=t.map(((i,n)=>I(i,((i,s)=>(r=r.then((()=>v(i,e.writable,{preventClose:n!==t.length-1}))),r)))));return e.readable}(t):t.some((t=>u(t)))?function(t){const e=new ArrayStream;let r=Promise.resolve();return t.forEach(((i,n)=>(r=r.then((()=>v(i,e,{preventClose:n!==t.length-1}))),r))),e}(t):"string"==typeof t[0]?t.join(""):d(t)}async function v(t,e,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(f(t)&&!u(t)){t=w(t);try{if(t[g]){const r=R(e);for(let e=0;e<t[g].length;e++)await r.ready,await r.write(t[g][e]);r.releaseLock()}await t.pipeTo(e,{preventClose:r,preventAbort:i,preventCancel:n})}catch(t){}return}const s=Q(t=A(t)),a=R(e);try{for(;;){await a.ready;const{done:t,value:e}=await s.read();if(t){r||await a.close();break}await a.write(e)}}catch(t){i||await a.abort(t)}finally{s.releaseLock(),a.releaseLock()}}function E(t,e){const r=new TransformStream(e);return v(t,r.writable),r.readable}function k(t){let e,r,i=!1;return{readable:new ReadableStream({start(t){r=t},pull(){e?e():i=!0},cancel:t},{highWaterMark:0}),writable:new WritableStream({write:async function(t){r.enqueue(t),i?i=!1:(await new Promise((t=>{e=t})),e=null)},close:r.close.bind(r),abort:r.error.bind(r)})}}function S(t,e=(()=>{}),r=(()=>{})){if(u(t)){const i=new ArrayStream;return(async()=>{const n=R(i);try{const i=await U(t),s=e(i),a=r();let o;o=void 0!==s&&void 0!==a?b([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(t){await n.abort(t)}})(),i}if(f(t))return E(t,{async transform(t,r){try{const i=await e(t);void 0!==i&&r.enqueue(i)}catch(t){r.error(t)}},async flush(t){try{const e=await r();void 0!==e&&t.enqueue(e)}catch(e){t.error(e)}}});const i=e(t),n=r();return void 0!==i&&void 0!==n?b([i,n]):void 0!==i?i:n}function I(t,e){if(f(t)&&!u(t)){let r;const i=new TransformStream({start(t){r=t}}),n=v(t,i.writable),s=k((async function(t){r.error(t),await n,await new Promise(setTimeout)}));return e(i.readable,s.writable),s.readable}t=A(t);const r=new ArrayStream;return e(t,r),r}function C(t,e){let r;const i=I(t,((t,n)=>{const s=Q(t);s.remainder=()=>(s.releaseLock(),v(t,n),i),r=e(s)}));return r}function B(t){if(u(t))return t.clone();if(f(t)){const e=function(t){if(u(t))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(f(t)){const e=w(t).tee();return e[0][g]=e[1][g]=t[g],e}return[D(t),D(t)]}(t);return P(t,e[0]),e[1]}return D(t)}function K(t){return u(t)?B(t):f(t)?new ReadableStream({start(e){const r=I(t,(async(t,r)=>{const i=Q(t),n=R(r);try{for(;;){await n.ready;const{done:t,value:r}=await i.read();if(t){try{e.close()}catch(t){}return void await n.close()}try{e.enqueue(r)}catch(t){}await n.write(r)}}catch(t){e.error(t),await n.abort(t)}}));P(t,r)}}):D(t)}function P(t,e){Object.entries(Object.getOwnPropertyDescriptors(t.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(e):i.get=i.get.bind(e),Object.defineProperty(t,r,i))}))}function D(t,e=0,r=1/0){if(u(t))throw Error("Not implemented");if(f(t)){if(e>=0&&r>=0){let i=0;return E(t,{transform(t,n){i<r?(i+t.length>=e&&n.enqueue(D(t,Math.max(e-i,0),r-i)),i+=t.length):n.terminate()}})}if(e<0&&(r<0||r===1/0)){let i=[];return S(t,(t=>{t.length>=-e?i=[t]:i.push(t)}),(()=>D(b(i),e,r)))}if(0===e&&r<0){let i;return S(t,(t=>{const n=i?b([i,t]):t;if(n.length>=-r)return i=D(n,r),D(n,e,r);i=n}))}return console.warn(`stream.slice(input, ${e}, ${r}) not implemented efficiently.`),x((async()=>D(await U(t),e,r)))}return t[g]&&(t=b(t[g].concat([t]))),y(t)?t.subarray(e,r===1/0?t.length:r):t.slice(e,r)}async function U(t,e=b){return u(t)?t.readToEnd(e):f(t)?Q(t).readToEnd(e):t}async function M(t,e){if(f(t)){if(t.cancel){const r=await t.cancel(e);return await new Promise(setTimeout),r}if(t.destroy)return t.destroy(e),await new Promise(setTimeout),e}}function x(t){const e=new ArrayStream;return(async()=>{const r=R(e);try{await r.write(await t()),await r.close()}catch(t){await r.abort(t)}})(),e}function Q(t){return new m(t)}function R(t){return new l(t)}m.prototype.read=async function(){if(this[g]&&this[g].length){return{done:!1,value:this[g].shift()}}return this._read()},m.prototype.releaseLock=function(){this[g]&&(this.stream[g]=this[g]),this._releaseLock()},m.prototype.cancel=function(t){return this._cancel(t)},m.prototype.readLine=async function(){let t,e=[];for(;!t;){let{done:r,value:i}=await this.read();if(i+="",r)return e.length?b(e):void 0;const n=i.indexOf("\n")+1;n&&(t=b(e.concat(i.substr(0,n))),e=[]),n!==i.length&&e.push(i.substr(n))}return this.unshift(...e),t},m.prototype.readByte=async function(){const{done:t,value:e}=await this.read();if(t)return;const r=e[0];return this.unshift(D(e,1)),r},m.prototype.readBytes=async function(t){const e=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return e.length?b(e):void 0;if(e.push(n),r+=n.length,r>=t){const r=b(e);return this.unshift(D(r,t)),D(r,0,t)}}},m.prototype.peekBytes=async function(t){const e=await this.readBytes(t);return this.unshift(e),e},m.prototype.unshift=function(...t){this[g]||(this[g]=[]),1===t.length&&y(t[0])&&this[g].length&&t[0].length&&this[g][0].byteOffset>=t[0].length?this[g][0]=new Uint8Array(this[g][0].buffer,this[g][0].byteOffset-t[0].length,this[g][0].byteLength+t[0].length):this[g].unshift(...t.filter((t=>t&&t.length)))},m.prototype.readToEnd=async function(t=b){const e=[];for(;;){const{done:t,value:r}=await this.read();if(t)break;e.push(r)}return t(e)};const _=Symbol("byValue");var T={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(t,e){if("number"==typeof e&&(e=this.read(t,e)),void 0!==t[e])return t[e];throw Error("Invalid enum value.")},read:function(t,e){if(t[_]||(t[_]=[],Object.entries(t).forEach((([e,r])=>{t[_][r]=e}))),void 0!==t[_][e])return t[_][e];throw Error("Invalid enum value.")}},L={preferredHashAlgorithm:T.hash.sha256,preferredSymmetricAlgorithm:T.symmetric.aes256,preferredCompressionAlgorithm:T.compression.uncompressed,aeadProtect:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:T.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,s2kType:T.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([T.symmetric.aes128,T.symmetric.aes192,T.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.0",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([T.hash.md5,T.hash.ripemd]),rejectMessageHashAlgorithms:new Set([T.hash.md5,T.hash.ripemd,T.hash.sha1]),rejectPublicKeyAlgorithms:new Set([T.publicKey.elgamal,T.publicKey.dsa]),rejectCurves:new Set([T.curve.secp256k1])};const N=(()=>{try{return"development"===process.env.NODE_ENV}catch(t){}return!1})(),O={isString:function(t){return"string"==typeof t||t instanceof String},nodeRequire:e.createRequire("undefined"==typeof document?require("url").pathToFileURL(__filename).href:i&&i.src||new URL("openpgp.min.cjs",document.baseURI).href),isArray:function(t){return t instanceof Array},isUint8Array:y,isStream:f,getBigInteger:async function(){if("undefined"!=typeof BigInt){const{default:t}=await Promise.resolve().then((function(){return Xa}));return t}{const{default:t}=await Promise.resolve().then((function(){return io}));return t}},getNobleCurve:async(t,e)=>{if(!L.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return su}));switch(t){case T.publicKey.ecdh:case T.publicKey.ecdsa:{const t=r.get(e);if(!t)throw Error("Unsupported curve");return t}case T.publicKey.x448:return r.get("x448");case T.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(t){let e=0;for(let r=0;r<t.length;r++)e+=256**r*t[t.length-1-r];return e},writeNumber:function(t,e){const r=new Uint8Array(e);for(let i=0;i<e;i++)r[i]=t>>8*(e-i-1)&255;return r},readDate:function(t){const e=O.readNumber(t);return new Date(1e3*e)},writeDate:function(t){const e=Math.floor(t.getTime()/1e3);return O.writeNumber(e,4)},normalizeDate:function(t=Date.now()){return null===t||t===1/0?t:new Date(1e3*Math.floor(+t/1e3))},readMPI:function(t){const e=(t[0]<<8|t[1])+7>>>3;return O.readExactSubarray(t,2,2+e)},readExactSubarray:function(t,e,r){if(t.length<r-e)throw Error("Input array too short");return t.subarray(e,r)},leftPad(t,e){const r=new Uint8Array(e),i=e-t.length;return r.set(t,i),r},uint8ArrayToMPI:function(t){const e=O.uint8ArrayBitLength(t);if(0===e)throw Error("Zero MPI");const r=t.subarray(t.length-Math.ceil(e/8)),i=new Uint8Array([(65280&e)>>8,255&e]);return O.concatUint8Array([i,r])},uint8ArrayBitLength:function(t){let e;for(e=0;e<t.length&&0===t[e];e++);if(e===t.length)return 0;const r=t.subarray(e);return 8*(r.length-1)+O.nbits(r[0])},hexToUint8Array:function(t){const e=new Uint8Array(t.length>>1);for(let r=0;r<t.length>>1;r++)e[r]=parseInt(t.substr(r<<1,2),16);return e},uint8ArrayToHex:function(t){const e="0123456789abcdef";let r="";return t.forEach((t=>{r+=e[t>>4]+e[15&t]})),r},stringToUint8Array:function(t){return S(t,(t=>{if(!O.isString(t))throw Error("stringToUint8Array: Data must be in the form of a string");const e=new Uint8Array(t.length);for(let r=0;r<t.length;r++)e[r]=t.charCodeAt(r);return e}))},uint8ArrayToString:function(t){const e=[],r=16384,i=(t=new Uint8Array(t)).length;for(let n=0;n<i;n+=r)e.push(String.fromCharCode.apply(String,t.subarray(n,n+r<i?n+r:i)));return e.join("")},encodeUTF8:function(t){const e=new TextEncoder("utf-8");function r(t,r=!1){return e.encode(t,{stream:!r})}return S(t,r,(()=>r("",!0)))},decodeUTF8:function(t){const e=new TextDecoder("utf-8");function r(t,r=!1){return e.decode(t,{stream:!r})}return S(t,r,(()=>r(new Uint8Array,!0)))},concat:b,concatUint8Array:d,equalsUint8Array:function(t,e){if(!O.isUint8Array(t)||!O.isUint8Array(e))throw Error("Data must be in the form of a Uint8Array");if(t.length!==e.length)return!1;for(let r=0;r<t.length;r++)if(t[r]!==e[r])return!1;return!0},writeChecksum:function(t){let e=0;for(let r=0;r<t.length;r++)e=e+t[r]&65535;return O.writeNumber(e,2)},printDebug:function(t){N&&console.log("[OpenPGP.js debug]",t)},printDebugError:function(t){N&&console.error("[OpenPGP.js debug]",t)},nbits:function(t){let e=1,r=t>>>16;return 0!==r&&(t=r,e+=16),r=t>>8,0!==r&&(t=r,e+=8),r=t>>4,0!==r&&(t=r,e+=4),r=t>>2,0!==r&&(t=r,e+=2),r=t>>1,0!==r&&(t=r,e+=1),e},double:function(t){const e=new Uint8Array(t.length),r=t.length-1;for(let i=0;i<r;i++)e[i]=t[i]<<1^t[i+1]>>7;return e[r]=t[r]<<1^135*(t[0]>>7),e},shiftRight:function(t,e){if(e)for(let r=t.length-1;r>=0;r--)t[r]>>=e,r>0&&(t[r]|=t[r-1]<<8-e);return t},getWebCrypto:function(){const e=void 0!==t&&t.crypto&&t.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!e)throw Error("The WebCrypto API is not available");return e},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(t){if(!O.isString(t))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(t)},canonicalizeEOL:function(t){let e=!1;return S(t,(t=>{let r;e&&(t=O.concatUint8Array([new Uint8Array([13]),t])),13===t[t.length-1]?(e=!0,t=t.subarray(0,-1)):e=!1;const i=[];for(let e=0;r=t.indexOf(10,e)+1,r;e=r)13!==t[r-2]&&i.push(r);if(!i.length)return t;const n=new Uint8Array(t.length+i.length);let s=0;for(let e=0;e<i.length;e++){const r=t.subarray(i[e-1]||0,i[e]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(t.subarray(i[i.length-1]||0),s),n}),(()=>e?new Uint8Array([13]):void 0))},nativeEOL:function(t){let e=!1;return S(t,(t=>{let r;13===(t=e&&10!==t[0]?O.concatUint8Array([new Uint8Array([13]),t]):new Uint8Array(t))[t.length-1]?(e=!0,t=t.subarray(0,-1)):e=!1;let i=0;for(let e=0;e!==t.length;e=r){r=t.indexOf(13,e)+1,r||(r=t.length);const n=r-(10===t[r]?1:0);e&&t.copyWithin(i,e,n),i+=n-e}return t.subarray(0,i)}),(()=>e?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(t){return t.split("\n").map((t=>{let e=t.length-1;for(;e>=0&&(" "===t[e]||"\t"===t[e]||"\r"===t[e]);e--);return t.substr(0,e+1)})).join("\n")},wrapError:function(t,e){if(!e)return Error(t);try{e.message=t+": "+e.message}catch(t){}return e},constructAllowedPackets:function(t){const e={};return t.forEach((t=>{if(!t.tag)throw Error("Invalid input: expected a packet class");e[t.tag]=t})),e},anyPromise:function(t){return new Promise((async(e,r)=>{let i;await Promise.all(t.map((async t=>{try{e(await t)}catch(t){i=t}}))),r(i)}))},selectUint8Array:function(t,e,r){const i=Math.max(e.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=e[i]&256-t|r[i]&255+t,s+=t&i<e.length|1-t&i<r.length;return n.subarray(0,s)},selectUint8:function(t,e,r){return e&256-t|r&255+t},isAES:function(t){return t===T.symmetric.aes128||t===T.symmetric.aes192||t===T.symmetric.aes256}},F=O.getNodeBuffer();let H,z;function G(t){let e=new Uint8Array;return S(t,(t=>{e=O.concatUint8Array([e,t]);const r=[],i=Math.floor(e.length/45),n=45*i,s=H(e.subarray(0,n));for(let t=0;t<i;t++)r.push(s.substr(60*t,60)),r.push("\n");return e=e.subarray(n),r.join("")}),(()=>e.length?H(e)+"\n":""))}function q(t){let e="";return S(t,(t=>{e+=t;let r=0;const i=[" ","\t","\r","\n"];for(let t=0;t<i.length;t++){const n=i[t];for(let t=e.indexOf(n);-1!==t;t=e.indexOf(n,t+1))r++}let n=e.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(e[n])&&r--;const s=z(e.substr(0,n));return e=e.substr(n),s}),(()=>z(e)))}function j(t){return q(t.replace(/-/g,"+").replace(/_/g,"/"))}function V(t,e){let r=G(t).replace(/[\r\n]/g,"");return e&&(r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,"")),r}function Z(t){const e=t.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!e)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(e[1])?T.armor.multipartSection:/MESSAGE, PART \d+/.test(e[1])?T.armor.multipartLast:/SIGNED MESSAGE/.test(e[1])?T.armor.signed:/MESSAGE/.test(e[1])?T.armor.message:/PUBLIC KEY BLOCK/.test(e[1])?T.armor.publicKey:/PRIVATE KEY BLOCK/.test(e[1])?T.armor.privateKey:/SIGNATURE/.test(e[1])?T.armor.signature:void 0}function J(t,e){let r="";return e.showVersion&&(r+="Version: "+e.versionString+"\n"),e.showComment&&(r+="Comment: "+e.commentString+"\n"),t&&(r+="Comment: "+t+"\n"),r+="\n",r}function Y(t){const e=function(t){let e=13501623;return S(t,(t=>{const r=$?Math.floor(t.length/4):0,i=new Uint32Array(t.buffer,t.byteOffset,r);for(let t=0;t<r;t++)e^=i[t],e=W[0][e>>24&255]^W[1][e>>16&255]^W[2][e>>8&255]^W[3][255&e];for(let i=4*r;i<t.length;i++)e=e>>8^W[0][255&e^t[i]]}),(()=>new Uint8Array([e,e>>8,e>>16])))}(t);return G(e)}F?(H=t=>F.from(t).toString("base64"),z=t=>{const e=F.from(t,"base64");return new Uint8Array(e.buffer,e.byteOffset,e.byteLength)}):(H=t=>btoa(O.uint8ArrayToString(t)),z=t=>O.stringToUint8Array(atob(t)));const W=[Array(255),Array(255),Array(255),Array(255)];for(let t=0;t<=255;t++){let e=t<<16;for(let t=0;t<8;t++)e=e<<1^(8388608&e?8801531:0);W[0][t]=(16711680&e)>>16|65280&e|(255&e)<<16}for(let t=0;t<=255;t++)W[1][t]=W[0][t]>>8^W[0][255&W[0][t]];for(let t=0;t<=255;t++)W[2][t]=W[1][t]>>8^W[0][255&W[1][t]];for(let t=0;t<=255;t++)W[3][t]=W[2][t]>>8^W[0][255&W[2][t]];const $=function(){const t=new ArrayBuffer(2);return new DataView(t).setInt16(0,255,!0),255===new Int16Array(t)[0]}();function X(t){for(let e=0;e<t.length;e++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(t[e])||O.printDebugError(Error("Improperly formatted armor header: "+t[e])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(t[e])||O.printDebugError(Error("Unknown header: "+t[e]))}function tt(t){let e=t;const r=t.lastIndexOf("=");return r>=0&&r!==t.length-1&&(e=t.slice(0,r)),e}function et(t){return new Promise((async(e,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=q(I(t,(async(t,f)=>{const y=Q(t);try{for(;;){let t=await y.readLine();if(void 0===t)throw Error("Misformed armored text");if(t=O.removeTrailingSpaces(t.replace(/[\r\n]/g,"")),s)if(o)c||s!==T.armor.signed||(i.test(t)?(u=u.join("\r\n"),c=!0,X(h),h=[],o=!1):u.push(t.replace(/^- /,"")));else if(i.test(t)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(t)){if(X(h),o=!0,c||s!==T.armor.signed){e({text:u,data:l,headers:a,type:s});break}}else h.push(t);else i.test(t)&&(s=Z(t))}}catch(t){return void r(t)}const d=R(f);try{for(;;){await d.ready;const{done:t,value:e}=await y.read();if(t)throw Error("Misformed armored text");const r=e+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let t=await y.readToEnd();t.length||(t=""),t=r+t,t=O.removeTrailingSpaces(t.replace(/\r/g,""));const e=t.split(i);if(1===e.length)throw Error("Misformed armored text");const n=tt(e[0].slice(0,-1));await d.write(n);break}await d.write(r)}await d.ready,await d.close()}catch(t){await d.abort(t)}})))}catch(t){r(t)}})).then((async t=>(u(t.data)&&(t.data=await U(t.data)),t)))}function rt(t,e,r,i,n,s=!1,a=L){let o,c;t===T.armor.signed&&(o=e.text,c=e.hash,e=e.data);const h=s&&K(e),u=[];switch(t){case T.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case T.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case T.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP SIGNATURE-----\n");break;case T.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP MESSAGE-----\n");break;case T.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case T.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case T.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP SIGNATURE-----\n")}return O.concat(u)}async function it(t){switch(t){case T.symmetric.aes128:case T.symmetric.aes192:case T.symmetric.aes256:throw Error("Not a legacy cipher");case T.symmetric.cast5:case T.symmetric.blowfish:case T.symmetric.twofish:case T.symmetric.tripledes:{const{legacyCiphers:e}=await Promise.resolve().then((function(){return bu})),r=e.get(t);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function nt(t){switch(t){case T.symmetric.aes128:case T.symmetric.aes192:case T.symmetric.aes256:case T.symmetric.twofish:return 16;case T.symmetric.blowfish:case T.symmetric.cast5:case T.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function st(t){switch(t){case T.symmetric.aes128:case T.symmetric.blowfish:case T.symmetric.cast5:return 16;case T.symmetric.aes192:case T.symmetric.tripledes:return 24;case T.symmetric.aes256:case T.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function at(t){return{keySize:st(t),blockSize:nt(t)}}var ot=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:at,getLegacyCipher:it});function ct(t,e){let r=t[0],i=t[1],n=t[2],s=t[3];r=ut(r,i,n,s,e[0],7,-680876936),s=ut(s,r,i,n,e[1],12,-389564586),n=ut(n,s,r,i,e[2],17,606105819),i=ut(i,n,s,r,e[3],22,-1044525330),r=ut(r,i,n,s,e[4],7,-176418897),s=ut(s,r,i,n,e[5],12,1200080426),n=ut(n,s,r,i,e[6],17,-1473231341),i=ut(i,n,s,r,e[7],22,-45705983),r=ut(r,i,n,s,e[8],7,1770035416),s=ut(s,r,i,n,e[9],12,-1958414417),n=ut(n,s,r,i,e[10],17,-42063),i=ut(i,n,s,r,e[11],22,-1990404162),r=ut(r,i,n,s,e[12],7,1804603682),s=ut(s,r,i,n,e[13],12,-40341101),n=ut(n,s,r,i,e[14],17,-1502002290),i=ut(i,n,s,r,e[15],22,1236535329),r=lt(r,i,n,s,e[1],5,-165796510),s=lt(s,r,i,n,e[6],9,-1069501632),n=lt(n,s,r,i,e[11],14,643717713),i=lt(i,n,s,r,e[0],20,-373897302),r=lt(r,i,n,s,e[5],5,-701558691),s=lt(s,r,i,n,e[10],9,38016083),n=lt(n,s,r,i,e[15],14,-660478335),i=lt(i,n,s,r,e[4],20,-405537848),r=lt(r,i,n,s,e[9],5,568446438),s=lt(s,r,i,n,e[14],9,-1019803690),n=lt(n,s,r,i,e[3],14,-187363961),i=lt(i,n,s,r,e[8],20,1163531501),r=lt(r,i,n,s,e[13],5,-1444681467),s=lt(s,r,i,n,e[2],9,-51403784),n=lt(n,s,r,i,e[7],14,1735328473),i=lt(i,n,s,r,e[12],20,-1926607734),r=ft(r,i,n,s,e[5],4,-378558),s=ft(s,r,i,n,e[8],11,-2022574463),n=ft(n,s,r,i,e[11],16,1839030562),i=ft(i,n,s,r,e[14],23,-35309556),r=ft(r,i,n,s,e[1],4,-1530992060),s=ft(s,r,i,n,e[4],11,1272893353),n=ft(n,s,r,i,e[7],16,-155497632),i=ft(i,n,s,r,e[10],23,-1094730640),r=ft(r,i,n,s,e[13],4,681279174),s=ft(s,r,i,n,e[0],11,-358537222),n=ft(n,s,r,i,e[3],16,-722521979),i=ft(i,n,s,r,e[6],23,76029189),r=ft(r,i,n,s,e[9],4,-640364487),s=ft(s,r,i,n,e[12],11,-421815835),n=ft(n,s,r,i,e[15],16,530742520),i=ft(i,n,s,r,e[2],23,-995338651),r=yt(r,i,n,s,e[0],6,-198630844),s=yt(s,r,i,n,e[7],10,1126891415),n=yt(n,s,r,i,e[14],15,-1416354905),i=yt(i,n,s,r,e[5],21,-57434055),r=yt(r,i,n,s,e[12],6,1700485571),s=yt(s,r,i,n,e[3],10,-1894986606),n=yt(n,s,r,i,e[10],15,-1051523),i=yt(i,n,s,r,e[1],21,-2054922799),r=yt(r,i,n,s,e[8],6,1873313359),s=yt(s,r,i,n,e[15],10,-30611744),n=yt(n,s,r,i,e[6],15,-1560198380),i=yt(i,n,s,r,e[13],21,1309151649),r=yt(r,i,n,s,e[4],6,-145523070),s=yt(s,r,i,n,e[11],10,-1120210379),n=yt(n,s,r,i,e[2],15,718787259),i=yt(i,n,s,r,e[9],21,-343485551),t[0]=mt(r,t[0]),t[1]=mt(i,t[1]),t[2]=mt(n,t[2]),t[3]=mt(s,t[3])}function ht(t,e,r,i,n,s){return e=mt(mt(e,t),mt(i,s)),mt(e<<n|e>>>32-n,r)}function ut(t,e,r,i,n,s,a){return ht(e&r|~e&i,t,e,n,s,a)}function lt(t,e,r,i,n,s,a){return ht(e&i|r&~i,t,e,n,s,a)}function ft(t,e,r,i,n,s,a){return ht(e^r^i,t,e,n,s,a)}function yt(t,e,r,i,n,s,a){return ht(r^(e|~i),t,e,n,s,a)}function dt(t){const e=[];let r;for(r=0;r<64;r+=4)e[r>>2]=t.charCodeAt(r)+(t.charCodeAt(r+1)<<8)+(t.charCodeAt(r+2)<<16)+(t.charCodeAt(r+3)<<24);return e}const pt="0123456789abcdef".split("");function gt(t){let e="",r=0;for(;r<4;r++)e+=pt[t>>8*r+4&15]+pt[t>>8*r&15];return e}function mt(t,e){return t+e&4294967295}const wt=O.getWebCrypto(),At=O.getNodeCrypto(),bt=At&&At.getHashes();function vt(t){if(At&&bt.includes(t))return async function(e){const r=At.createHash(t);return S(e,(t=>{r.update(t)}),(()=>new Uint8Array(r.digest())))}}function Et(t,e){const r=async()=>{const{nobleHashes:e}=await Promise.resolve().then((function(){return Hu})),r=e.get(t);if(!r)throw Error("Unsupported hash");return r};return async function(t){if(u(t)&&(t=await U(t)),O.isStream(t)){const e=(await r()).create();return S(t,(t=>{e.update(t)}),(()=>e.digest()))}if(wt&&e)return new Uint8Array(await wt.digest(e,t));return(await r())(t)}}var kt={md5:vt("md5")||async function(t){const e=function(t){const e=t.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=t.length;i+=64)ct(r,dt(t.substring(i-64,i)));t=t.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<t.length;i++)n[i>>2]|=t.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(ct(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*e,ct(r,n),r}(O.uint8ArrayToString(t));return O.hexToUint8Array(function(t){for(let e=0;e<t.length;e++)t[e]=gt(t[e]);return t.join("")}(e))},sha1:vt("sha1")||Et("sha1","SHA-1"),sha224:vt("sha224")||Et("sha224"),sha256:vt("sha256")||Et("sha256","SHA-256"),sha384:vt("sha384")||Et("sha384","SHA-384"),sha512:vt("sha512")||Et("sha512","SHA-512"),ripemd:vt("ripemd160")||Et("ripemd160"),sha3_256:vt("sha3-256")||Et("sha3_256"),sha3_512:vt("sha3-512")||Et("sha3_512"),digest:function(t,e){switch(t){case T.hash.md5:return this.md5(e);case T.hash.sha1:return this.sha1(e);case T.hash.ripemd:return this.ripemd(e);case T.hash.sha256:return this.sha256(e);case T.hash.sha384:return this.sha384(e);case T.hash.sha512:return this.sha512(e);case T.hash.sha224:return this.sha224(e);case T.hash.sha3_256:return this.sha3_256(e);case T.hash.sha3_512:return this.sha3_512(e);default:throw Error("Unsupported hash function")}},getHashByteLength:function(t){switch(t){case T.hash.md5:return 16;case T.hash.sha1:case T.hash.ripemd:return 20;case T.hash.sha256:return 32;case T.hash.sha384:return 48;case T.hash.sha512:return 64;case T.hash.sha224:return 28;case T.hash.sha3_256:return 32;case T.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(t){switch(t){case T.hash.md5:case T.hash.sha1:case T.hash.ripemd:case T.hash.sha224:case T.hash.sha256:return 64;case T.hash.sha384:case T.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}},St=function(){var t,e,r=!1;function i(r,i){var n=t[(e[r]+e[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=t[255-e[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){t=[],e=[];var i,n,s=1;for(i=0;i<255;i++)t[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=t[i],e[t[i]]=i;t[255]=t[0],e[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var f=1;f<4;f++)a[f][u]=a[f-1][u]>>>8|a[f-1][u]<<24,o[f][l]=o[f-1][l]>>>8|o[f-1][l]<<24}c=!0}var u=function(t,e){c||h();var r=new Uint32Array(e);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(t,e,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0,b=0,v=0,E=0,k=0;var S=new t.Uint32Array(r),I=new t.Uint8Array(r);function C(t,e,r,o,c,h,u,l){t=t|0;e=e|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0;f=r|0x400,y=r|0x800,d=r|0xc00;c=c^S[(t|0)>>2],h=h^S[(t|4)>>2],u=u^S[(t|8)>>2],l=l^S[(t|12)>>2];for(A=16;(A|0)<=o<<4;A=A+16|0){p=S[(r|c>>22&1020)>>2]^S[(f|h>>14&1020)>>2]^S[(y|u>>6&1020)>>2]^S[(d|l<<2&1020)>>2]^S[(t|A|0)>>2],g=S[(r|h>>22&1020)>>2]^S[(f|u>>14&1020)>>2]^S[(y|l>>6&1020)>>2]^S[(d|c<<2&1020)>>2]^S[(t|A|4)>>2],m=S[(r|u>>22&1020)>>2]^S[(f|l>>14&1020)>>2]^S[(y|c>>6&1020)>>2]^S[(d|h<<2&1020)>>2]^S[(t|A|8)>>2],w=S[(r|l>>22&1020)>>2]^S[(f|c>>14&1020)>>2]^S[(y|h>>6&1020)>>2]^S[(d|u<<2&1020)>>2]^S[(t|A|12)>>2];c=p,h=g,u=m,l=w}i=S[(e|c>>22&1020)>>2]<<24^S[(e|h>>14&1020)>>2]<<16^S[(e|u>>6&1020)>>2]<<8^S[(e|l<<2&1020)>>2]^S[(t|A|0)>>2],n=S[(e|h>>22&1020)>>2]<<24^S[(e|u>>14&1020)>>2]<<16^S[(e|l>>6&1020)>>2]<<8^S[(e|c<<2&1020)>>2]^S[(t|A|4)>>2],s=S[(e|u>>22&1020)>>2]<<24^S[(e|l>>14&1020)>>2]<<16^S[(e|c>>6&1020)>>2]<<8^S[(e|h<<2&1020)>>2]^S[(t|A|8)>>2],a=S[(e|l>>22&1020)>>2]<<24^S[(e|c>>14&1020)>>2]<<16^S[(e|h>>6&1020)>>2]<<8^S[(e|u<<2&1020)>>2]^S[(t|A|12)>>2]}function B(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;C(0x0000,0x0800,0x1000,k,t,e,r,i)}function K(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;var s=0;C(0x0400,0x0c00,0x2000,k,t,i,r,e);s=n,n=a,a=s}function P(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o^t,c^e,h^r,u^l);o=i,c=n,h=s,u=a}function D(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;var f=0;C(0x0400,0x0c00,0x2000,k,t,l,r,e);f=n,n=a,a=f;i=i^o,n=n^c,s=s^h,a=a^u;o=t,c=e,h=r,u=l}function U(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);o=i=i^t,c=n=n^e,h=s=s^r,u=a=a^l}function M(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);i=i^t,n=n^e,s=s^r,a=a^l;o=t,c=e,h=r,u=l}function x(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);o=i,c=n,h=s,u=a;i=i^t,n=n^e,s=s^r,a=a^l}function Q(t,e,r,o){t=t|0;e=e|0;r=r|0;o=o|0;C(0x0000,0x0800,0x1000,k,l,f,y,d);d=~w&d|w&d+1;y=~m&y|m&y+((d|0)==0);f=~g&f|g&f+((y|0)==0);l=~p&l|p&l+((f|0)==0);i=i^t;n=n^e;s=s^r;a=a^o}function R(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0;t=t^o,e=e^c,r=r^h,i=i^u;n=A|0,s=b|0,a=v|0,l=E|0;for(;(g|0)<128;g=g+1|0){if(n>>>31){f=f^t,y=y^e,d=d^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;m=i&1;i=i>>>1|r<<31,r=r>>>1|e<<31,e=e>>>1|t<<31,t=t>>>1;if(m)t=t^0xe1000000}o=f,c=y,h=d,u=p}function _(t){t=t|0;k=t}function T(t,e,r,o){t=t|0;e=e|0;r=r|0;o=o|0;i=t,n=e,s=r,a=o}function L(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;o=t,c=e,h=r,u=i}function N(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;l=t,f=e,y=r,d=i}function O(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;p=t,g=e,m=r,w=i}function F(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;d=~w&d|w&i,y=~m&y|m&r,f=~g&f|g&e,l=~p&l|p&t}function H(t){t=t|0;if(t&15)return-1;I[t|0]=i>>>24,I[t|1]=i>>>16&255,I[t|2]=i>>>8&255,I[t|3]=i&255,I[t|4]=n>>>24,I[t|5]=n>>>16&255,I[t|6]=n>>>8&255,I[t|7]=n&255,I[t|8]=s>>>24,I[t|9]=s>>>16&255,I[t|10]=s>>>8&255,I[t|11]=s&255,I[t|12]=a>>>24,I[t|13]=a>>>16&255,I[t|14]=a>>>8&255,I[t|15]=a&255;return 16}function z(t){t=t|0;if(t&15)return-1;I[t|0]=o>>>24,I[t|1]=o>>>16&255,I[t|2]=o>>>8&255,I[t|3]=o&255,I[t|4]=c>>>24,I[t|5]=c>>>16&255,I[t|6]=c>>>8&255,I[t|7]=c&255,I[t|8]=h>>>24,I[t|9]=h>>>16&255,I[t|10]=h>>>8&255,I[t|11]=h&255,I[t|12]=u>>>24,I[t|13]=u>>>16&255,I[t|14]=u>>>8&255,I[t|15]=u&255;return 16}function G(){B(0,0,0,0);A=i,b=n,v=s,E=a}function q(t,e,r){t=t|0;e=e|0;r=r|0;var o=0;if(e&15)return-1;while((r|0)>=16){V[t&7](I[e|0]<<24|I[e|1]<<16|I[e|2]<<8|I[e|3],I[e|4]<<24|I[e|5]<<16|I[e|6]<<8|I[e|7],I[e|8]<<24|I[e|9]<<16|I[e|10]<<8|I[e|11],I[e|12]<<24|I[e|13]<<16|I[e|14]<<8|I[e|15]);I[e|0]=i>>>24,I[e|1]=i>>>16&255,I[e|2]=i>>>8&255,I[e|3]=i&255,I[e|4]=n>>>24,I[e|5]=n>>>16&255,I[e|6]=n>>>8&255,I[e|7]=n&255,I[e|8]=s>>>24,I[e|9]=s>>>16&255,I[e|10]=s>>>8&255,I[e|11]=s&255,I[e|12]=a>>>24,I[e|13]=a>>>16&255,I[e|14]=a>>>8&255,I[e|15]=a&255;o=o+16|0,e=e+16|0,r=r-16|0}return o|0}function j(t,e,r){t=t|0;e=e|0;r=r|0;var i=0;if(e&15)return-1;while((r|0)>=16){Z[t&1](I[e|0]<<24|I[e|1]<<16|I[e|2]<<8|I[e|3],I[e|4]<<24|I[e|5]<<16|I[e|6]<<8|I[e|7],I[e|8]<<24|I[e|9]<<16|I[e|10]<<8|I[e|11],I[e|12]<<24|I[e|13]<<16|I[e|14]<<8|I[e|15]);i=i+16|0,e=e+16|0,r=r-16|0}return i|0}var V=[B,K,P,D,U,M,x,Q];var Z=[P,R];return{set_rounds:_,set_state:T,set_iv:L,set_nonce:N,set_mask:O,set_counter:F,get_state:H,get_iv:z,gcm_init:G,cipher:q,mac:j}}({Uint8Array,Uint32Array},t,e);return u.set_key=function(t,e,i,s,a,c,h,l,f){var y=r.subarray(0,60),d=r.subarray(256,316);y.set([e,i,s,a,c,h,l,f]);for(var p=t,g=1;p<4*t+28;p++){var m=y[p-1];(p%t==0||8===t&&p%t==4)&&(m=n[m>>>24]<<24^n[m>>>16&255]<<16^n[m>>>8&255]<<8^n[255&m]),p%t==0&&(m=m<<8^m>>>24^g<<24,g=g<<1^(128&g?27:0)),y[p]=y[p-t]^m}for(var w=0;w<p;w+=4)for(var A=0;A<4;A++){m=y[p-(4+w)+(4-A)%4];d[w+A]=w<4||w>=p-4?m:o[0][n[m>>>24]]^o[1][n[m>>>16&255]]^o[2][n[m>>>8&255]]^o[3][n[255&m]]}u.set_rounds(t+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function It(t){return t instanceof Uint8Array}function Ct(t,e,r,i,n){const s=t.length-e,a=s<n?s:n;return t.set(r.subarray(i,i+a),e),a}function Bt(...t){const e=t.reduce(((t,e)=>t+e.length),0),r=new Uint8Array(e);let i=0;for(let e=0;e<t.length;e++)r.set(t[e],i),i+=t[e].length;return r}class Kt extends Error{constructor(...t){super(...t)}}class Pt extends Error{constructor(...t){super(...t)}}class Dt extends Error{constructor(...t){super(...t)}}const Ut=[],Mt=[];class xt{constructor(t,e,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=t,this.iv=e,this.padding=r,this.acquire_asm(n,s)}acquire_asm(t,e){return void 0!==this.heap&&void 0!==this.asm||(this.heap=t||Ut.pop()||function(t,e){const r=t?t.byteLength:e||65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return t||new Uint8Array(new ArrayBuffer(r))}().subarray(St.HEAP_DATA),this.asm=e||Mt.pop()||new St(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(Ut.push(this.heap),Mt.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(t,e){const{asm:r}=this.acquire_asm(),i=t.length;if(16!==i&&24!==i&&32!==i)throw new Pt("illegal key size");const n=new DataView(t.buffer,t.byteOffset,t.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==e){if(16!==e.length)throw new Pt("illegal iv size");let t=new DataView(e.buffer,e.byteOffset,e.byteLength);r.set_iv(t.getUint32(0),t.getUint32(4),t.getUint32(8),t.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(t){if(!It(t))throw new TypeError("data isn't of expected type");let{heap:e,asm:r}=this.acquire_asm(),i=St.ENC[this.mode],n=St.HEAP_DATA,s=this.pos,a=this.len,o=0,c=t.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=Ct(e,s+a,t,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(e.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:t,asm:e}=this.acquire_asm(),r=St.ENC[this.mode],i=St.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let e=0;e<a;++e)t[n+s+e]=a;s+=a,o=s}else if(s%16)throw new Pt("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&e.cipher(r,i+n,s),o&&c.set(t.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(t){if(!It(t))throw new TypeError("data isn't of expected type");let{heap:e,asm:r}=this.acquire_asm(),i=St.DEC[this.mode],n=St.HEAP_DATA,s=this.pos,a=this.len,o=0,c=t.length||0,h=0,u=a+c&-16,l=0,f=0;this.padding&&(l=a+c-u||16,u-=l);const y=new Uint8Array(u);for(;c>0;)f=Ct(e,s+a,t,o,c),a+=f,o+=f,c-=f,f=r.cipher(i,n+s,a-(c?0:l)),f&&y.set(e.subarray(s,s+f),h),h+=f,f<a?(s+=f,a-=f):(s=0,a=0);return this.pos=s,this.len=a,y}AES_Decrypt_finish(){let{heap:t,asm:e}=this.acquire_asm(),r=St.DEC[this.mode],i=St.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new Pt("data length must be a multiple of the block size");s+=16-s%16}if(e.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let e=t[n+a-1];if(e<1||e>16||e>a)throw new Dt("bad padding");let r=0;for(let i=e;i>1;i--)r|=e^t[n+a-i];if(r)throw new Dt("bad padding");a-=e}}const o=new Uint8Array(a);return a>0&&o.set(t.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class Qt{static encrypt(t,e,r){return new Qt(e,r).encrypt(t)}static decrypt(t,e,r){return new Qt(e,r).decrypt(t)}constructor(t,e,r){this.aes=r||new xt(t,e,!0,"CFB"),delete this.aes.padding}encrypt(t){return Bt(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return Bt(this.aes.AES_Decrypt_process(t),this.aes.AES_Decrypt_finish())}}const Rt=O.getWebCrypto(),_t=O.getNodeCrypto(),Tt=_t?_t.getCiphers():[],Lt={idea:Tt.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Tt.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Tt.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Tt.includes("bf-cfb")?"bf-cfb":void 0,aes128:Tt.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Tt.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Tt.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Nt{constructor(t,e,r){const{blockSize:i}=at(t);this.key=e,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(t){const{keySize:e}=at(t);return Rt.importKey("raw",new Uint8Array(e),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(t,e){const r="AES-CBC";this.keyRef=this.keyRef||await Rt.importKey("raw",this.key,r,!1,["encrypt"]);const i=await Rt.encrypt({name:r,iv:e||this.zeroBlock},this.keyRef,t);return new Uint8Array(i).subarray(0,t.length)}async encryptChunk(t){const e=this.nextBlock.length-this.i,r=t.subarray(0,e);if(this.nextBlock.set(r,this.i),this.i+t.length>=2*this.blockSize){const r=(t.length-e)%this.blockSize,i=O.concatUint8Array([this.nextBlock,t.subarray(e,t.length-r)]),n=O.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return Ot(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(t.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const e=this.nextBlock;i=await this._runCBC(this.prevBlock),Ot(i,e),this.prevBlock=i.slice(),this.i=0;const n=t.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let t;if(0===this.i)t=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const e=this.nextBlock,r=await this._runCBC(this.prevBlock);Ot(r,e),t=r.subarray(0,e.length)}return this.clearSensitiveData(),t}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(t){const e=(await this._runCBC(O.concatUint8Array([new Uint8Array(this.blockSize),t]),this.iv)).subarray(0,t.length);return Ot(e,t),this.clearSensitiveData(),e}}function Ot(t,e){const r=Math.min(t.length,e.length);for(let i=0;i<r;i++)t[i]=t[i]^e[i]}var Ft=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i){const n=T.read(T.symmetric,t);if(_t&&Lt[n])return function(t,e,r,i){const n=T.read(T.symmetric,t),s=new _t.createDecipheriv(Lt[n],e,i);return S(r,(t=>new Uint8Array(s.update(t))))}(t,e,r,i);if(O.isAES(t))return function(t,e,r,i){if(O.isStream(r)){const t=new Qt(e,i);return S(r,(e=>t.aes.AES_Decrypt_process(e)),(()=>t.aes.AES_Decrypt_finish()))}return Qt.decrypt(r,e,i)}(0,e,r,i);const s=new(await it(t))(e),a=s.blockSize;let o=i,c=new Uint8Array;const h=t=>{t&&(c=O.concatUint8Array([c,t]));const e=new Uint8Array(c.length);let r,i=0;for(;t?c.length>=a:c.length;){const t=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)e[i++]=o[r]^t[r];c=c.subarray(a)}return e.subarray(0,i)};return S(r,h,h)},encrypt:async function(t,e,r,i,n){const s=T.read(T.symmetric,t);if(O.getNodeCrypto()&&Lt[s])return function(t,e,r,i){const n=T.read(T.symmetric,t),s=new _t.createCipheriv(Lt[n],e,i);return S(r,(t=>new Uint8Array(s.update(t))))}(t,e,r,i);if(O.isAES(t))return async function(t,e,r,i){if(Rt&&await Nt.isSupported(t)){const n=new Nt(t,e,i);return O.isStream(r)?S(r,(t=>n.encryptChunk(t)),(()=>n.finish())):n.encrypt(r)}{const t=new Qt(e,i);return S(r,(e=>t.aes.AES_Encrypt_process(e)),(()=>t.aes.AES_Encrypt_finish()))}}(t,e,r,i);const a=new(await it(t))(e),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=t=>{t&&(h=O.concatUint8Array([h,t]));const e=new Uint8Array(h.length);let r,i=0;for(;t?h.length>=o:h.length;){const t=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^t[r],e[i++]=c[r];h=h.subarray(o)}return e.subarray(0,i)};return S(r,u,u)}});class Ht{static encrypt(t,e,r){return new Ht(e,r).encrypt(t)}static decrypt(t,e,r){return new Ht(e,r).encrypt(t)}constructor(t,e,r){this.aes=r||new xt(t,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(e)}encrypt(t){return Bt(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return Bt(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(t,e,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new Pt("illegal counter size");let t=Math.pow(2,r)-1;i.set_mask(0,0,t/4294967296|0,0|t)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===t)throw Error("nonce is required");{let e=t.length;if(!e||e>16)throw new Pt("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(t),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==e){if(e<0||e>=Math.pow(2,r))throw new Pt("illegal counter value");i.set_counter(0,0,e/4294967296|0,0|e)}}}class zt{static encrypt(t,e,r=!0,i){return new zt(e,i,r).encrypt(t)}static decrypt(t,e,r=!0,i){return new zt(e,i,r).decrypt(t)}constructor(t,e,r=!0,i){this.aes=i||new xt(t,e,r,"CBC")}encrypt(t){return Bt(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return Bt(this.aes.AES_Decrypt_process(t),this.aes.AES_Decrypt_finish())}}const Gt=O.getWebCrypto(),qt=O.getNodeCrypto(),jt=16;function Vt(t,e){const r=t.length-jt;for(let i=0;i<jt;i++)t[i+r]^=e[i];return t}const Zt=new Uint8Array(jt);async function Jt(t){const e=await async function(t){if(O.getNodeCrypto())return async function(e){const r=new qt.createCipheriv("aes-"+8*t.length+"-cbc",t,Zt).update(e);return new Uint8Array(r)};if(O.getWebCrypto())try{return t=await Gt.importKey("raw",t,{name:"AES-CBC",length:8*t.length},!1,["encrypt"]),async function(e){const r=await Gt.encrypt({name:"AES-CBC",iv:Zt,length:8*jt},t,e);return new Uint8Array(r).subarray(0,r.byteLength-jt)}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return async function(e){return zt.encrypt(e,t,!1,Zt)}}(t),r=O.double(await e(Zt)),i=O.double(r);return async function(t){return(await e(function(t,e,r){if(t.length&&t.length%jt==0)return Vt(t,e);const i=new Uint8Array(t.length+(jt-t.length%jt));return i.set(t),i[t.length]=128,Vt(i,r)}(t,r,i))).subarray(-jt)}}const Yt=O.getWebCrypto(),Wt=O.getNodeCrypto(),$t=O.getNodeBuffer(),Xt=16,te=Xt,ee=Xt,re=new Uint8Array(Xt),ie=new Uint8Array(Xt);ie[Xt-1]=1;const ne=new Uint8Array(Xt);async function se(t){const e=await Jt(t);return function(t,r){return e(O.concatUint8Array([t,r]))}}async function ae(t){if(O.getNodeCrypto())return async function(e,r){const i=new Wt.createCipheriv("aes-"+8*t.length+"-ctr",t,r),n=$t.concat([i.update(e),i.final()]);return new Uint8Array(n)};if(O.getWebCrypto())try{const e=await Yt.importKey("raw",t,{name:"AES-CTR",length:8*t.length},!1,["encrypt"]);return async function(t,r){const i=await Yt.encrypt({name:"AES-CTR",counter:r,length:8*Xt},e,t);return new Uint8Array(i)}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return async function(e,r){return Ht.encrypt(e,t,r)}}async function oe(t,e){if(t!==T.symmetric.aes128&&t!==T.symmetric.aes192&&t!==T.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([se(e),ae(e)]);return{encrypt:async function(t,e,n){const[s,a]=await Promise.all([r(re,e),r(ie,n)]),o=await i(t,s),c=await r(ne,o);for(let t=0;t<ee;t++)c[t]^=a[t]^s[t];return O.concatUint8Array([o,c])},decrypt:async function(t,e,n){if(t.length<ee)throw Error("Invalid EAX ciphertext");const s=t.subarray(0,-ee),a=t.subarray(-ee),[o,c,h]=await Promise.all([r(re,e),r(ie,n),r(ne,s)]),u=h;for(let t=0;t<ee;t++)u[t]^=c[t]^o[t];if(!O.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}ne[Xt-1]=2,oe.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[8+t]^=e[t];return r},oe.blockLength=Xt,oe.ivLength=te,oe.tagLength=ee;const ce=16,he=16;function ue(t){let e=0;for(let r=1;!(t&r);r<<=1)e++;return e}function le(t,e){for(let r=0;r<t.length;r++)t[r]^=e[r];return t}function fe(t,e){return le(t.slice(),e)}const ye=new Uint8Array(ce),de=new Uint8Array([1]);async function pe(t,e){const{keySize:r}=at(t);if(!O.isAES(t)||e.length!==r)throw Error("Unexpected algorithm or key size");let i=0;const n=t=>zt.encrypt(t,e,!1),s=t=>zt.decrypt(t,e,!1);let a;function o(t,e,r,s){const o=e.length/ce|0;!function(t,e){const r=O.nbits(Math.max(t.length,e.length)/ce|0)-1;for(let t=i+1;t<=r;t++)a[t]=O.double(a[t-1]);i=r}(e,s);const c=O.concatUint8Array([ye.subarray(0,15-r.length),de,r]),h=63&c[15];c[15]&=192;const u=n(c),l=O.concatUint8Array([u,fe(u.subarray(0,8),u.subarray(1,9))]),f=O.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),y=new Uint8Array(ce),d=new Uint8Array(e.length+he);let p,g=0;for(p=0;p<o;p++)le(f,a[ue(p+1)]),d.set(le(t(fe(f,e)),f),g),le(y,t===n?e:d.subarray(g)),e=e.subarray(ce),g+=ce;if(e.length){le(f,a.x);const r=n(f);d.set(fe(e,r),g);const i=new Uint8Array(ce);i.set(t===n?e:d.subarray(g,-16),0),i[e.length]=128,le(y,i),g+=e.length}const m=le(n(le(le(y,f),a.$)),function(t){if(!t.length)return ye;const e=t.length/ce|0,r=new Uint8Array(ce),i=new Uint8Array(ce);for(let s=0;s<e;s++)le(r,a[ue(s+1)]),le(i,n(fe(r,t))),t=t.subarray(ce);if(t.length){le(r,a.x);const e=new Uint8Array(ce);e.set(t,0),e[t.length]=128,le(e,r),le(i,n(e))}return i}(s));return d.set(m,g),d}return function(){const t=n(ye),e=O.double(t);a=[],a[0]=O.double(e),a.x=t,a.$=e}(),{encrypt:async function(t,e,r){return o(n,t,e,r)},decrypt:async function(t,e,r){if(t.length<he)throw Error("Invalid OCB ciphertext");const i=t.subarray(-16);t=t.subarray(0,-16);const n=o(s,t,e,r);if(O.equalsUint8Array(i,n.subarray(-16)))return n.subarray(0,-16);throw Error("Authentication tag mismatch")}}}pe.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[7+t]^=e[t];return r},pe.blockLength=ce,pe.ivLength=15,pe.tagLength=he;const ge=68719476704;class me{static encrypt(t,e,r,i,n){return new me(e,r,i,n).encrypt(t)}static decrypt(t,e,r,i,n){return new me(e,r,i,n).decrypt(t)}constructor(t,e,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new xt(t,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new Pt("illegal tagSize value");const o=e.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(e),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(St.MAC.GCM,St.HEAP_DATA,16),s.get_iv(St.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(e),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>ge)throw new Pt("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(t){return this.AES_GCM_encrypt(t)}decrypt(t){return this.AES_GCM_decrypt(t)}AES_GCM_Encrypt_process(t){let e=0,r=t.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>ge)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=Ct(n,a+o,t,e,r),o+=u,e+=u,r-=u,u=i.cipher(St.ENC.CTR,St.HEAP_DATA+a,o),u=i.mac(St.MAC.GCM,St.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:t,heap:e}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);t.cipher(St.ENC.CTR,St.HEAP_DATA+s,a+15&-16),a&&o.set(e.subarray(s,s+a));let c=a;for(;15&c;c++)e[s+c]=0;t.mac(St.MAC.GCM,St.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return e[0]=0,e[1]=0,e[2]=0,e[3]=h>>>29,e[4]=h>>>21,e[5]=h>>>13&255,e[6]=h>>>5&255,e[7]=h<<3&255,e[8]=e[9]=e[10]=0,e[11]=u>>>29,e[12]=u>>>21&255,e[13]=u>>>13&255,e[14]=u>>>5&255,e[15]=u<<3&255,t.mac(St.MAC.GCM,St.HEAP_DATA,16),t.get_iv(St.HEAP_DATA),t.set_counter(0,0,0,this.gamma0),t.cipher(St.ENC.CTR,St.HEAP_DATA,16),o.set(e.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(t){let e=0,r=t.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,f=0;if((s-1<<4)+c+r>ge)throw new RangeError("counter overflow");const y=new Uint8Array(u);for(;r>l;)f=Ct(n,o+c,t,e,r-l),c+=f,e+=f,r-=f,f=i.mac(St.MAC.GCM,St.HEAP_DATA+o,f),f=i.cipher(St.DEC.CTR,St.HEAP_DATA+o,f),f&&y.set(n.subarray(o,o+f),h),s+=f>>>4,h+=f,o=0,c=0;return r>0&&(c+=Ct(n,0,t,e,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,y}AES_GCM_Decrypt_finish(){let{asm:t,heap:e}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new Kt("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(e.subarray(s+o,s+a));let u=o;for(;15&u;u++)e[s+u]=0;t.mac(St.MAC.GCM,St.HEAP_DATA+s,u),t.cipher(St.DEC.CTR,St.HEAP_DATA+s,u),o&&c.set(e.subarray(s,s+o));const l=void 0!==i?i.length:0,f=(n-1<<4)+a-r;e[0]=0,e[1]=0,e[2]=0,e[3]=l>>>29,e[4]=l>>>21,e[5]=l>>>13&255,e[6]=l>>>5&255,e[7]=l<<3&255,e[8]=e[9]=e[10]=0,e[11]=f>>>29,e[12]=f>>>21&255,e[13]=f>>>13&255,e[14]=f>>>5&255,e[15]=f<<3&255,t.mac(St.MAC.GCM,St.HEAP_DATA,16),t.get_iv(St.HEAP_DATA),t.set_counter(0,0,0,this.gamma0),t.cipher(St.ENC.CTR,St.HEAP_DATA,16);let y=0;for(let t=0;t<r;++t)y|=h[t]^e[t];if(y)throw new Dt("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(t){const e=this.AES_GCM_Decrypt_process(t),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(e.length+r.length);return e.length&&i.set(e),r.length&&i.set(r,e.length),i}AES_GCM_encrypt(t){const e=this.AES_GCM_Encrypt_process(t),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(e.length+r.length);return e.length&&i.set(e),r.length&&i.set(r,e.length),i}_gcm_mac_process(t){let{asm:e,heap:r}=this.aes.acquire_asm(),i=0,n=t.length||0,s=0;for(;n>0;){for(s=Ct(r,0,t,i,n),i+=s,n-=s;15&s;)r[s++]=0;e.mac(St.MAC.GCM,St.HEAP_DATA,s)}}}const we=O.getWebCrypto(),Ae=O.getNodeCrypto(),be=O.getNodeBuffer(),ve=16,Ee="AES-GCM";async function ke(t,e){if(t!==T.symmetric.aes128&&t!==T.symmetric.aes192&&t!==T.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(O.getNodeCrypto())return{encrypt:async function(t,r,i=new Uint8Array){const n=new Ae.createCipheriv("aes-"+8*e.length+"-gcm",e,r);n.setAAD(i);const s=be.concat([n.update(t),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(t,r,i=new Uint8Array){const n=new Ae.createDecipheriv("aes-"+8*e.length+"-gcm",e,r);n.setAAD(i),n.setAuthTag(t.slice(t.length-ve,t.length));const s=be.concat([n.update(t.slice(0,t.length-ve)),n.final()]);return new Uint8Array(s)}};if(O.getWebCrypto())try{const t=await we.importKey("raw",e,{name:Ee},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return me.encrypt(i,e,n,s);const a=await we.encrypt({name:Ee,iv:n,additionalData:s,tagLength:128},t,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===ve)return me.decrypt(i,e,n,s);try{const e=await we.decrypt({name:Ee,iv:n,additionalData:s,tagLength:128},t,i);return new Uint8Array(e)}catch(t){if("OperationError"===t.name)throw Error("Authentication tag mismatch")}}}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return{encrypt:async function(t,r,i){return me.encrypt(t,e,r,i)},decrypt:async function(t,r,i){return me.decrypt(t,e,r,i)}}}ke.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[4+t]^=e[t];return r},ke.blockLength=16,ke.ivLength=12,ke.tagLength=ve;var Se={cfb:Ft,gcm:ke,experimentalGCM:ke,eax:oe,ocb:pe};const Ie=O.getNodeCrypto();function Ce(t){const e=new Uint8Array(t);if(Ie){const t=Ie.randomBytes(e.length);e.set(t)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(e)}return e}async function Be(t,e){const r=await O.getBigInteger();if(e.lt(t))throw Error("Illegal parameter value: max <= min");const i=e.sub(t);return new r(Ce(i.byteLength()+8)).mod(i).add(t)}var Ke=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Be,getRandomBytes:Ce});async function Pe(t,e,r){const i=await O.getBigInteger(),n=new i(1),s=n.leftShift(new i(t-1)),a=new i(30),o=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2],c=await Be(s,s.leftShift(n));let h=c.mod(a).toNumber();do{c.iadd(new i(o[h])),h=(h+o[h])%o.length,c.bitLength()>t&&(c.imod(s.leftShift(n)).iadd(s),h=c.mod(a).toNumber())}while(!await De(c,e,r));return c}async function De(t,e,r){return!(e&&!t.dec().gcd(e).isOne())&&(!!await async function(t){const e=await O.getBigInteger();return Ue.every((r=>0!==t.mod(new e(r))))}(t)&&(!!await async function(t,e){const r=await O.getBigInteger();return e=e||new r(2),e.modExp(t.dec(),t).isOne()}(t)&&!!await async function(t,e,r){const i=await O.getBigInteger(),n=t.bitLength();e||(e=Math.max(1,n/48|0));const s=t.dec();let a=0;for(;!s.getBit(a);)a++;const o=t.rightShift(new i(a));for(;e>0;e--){let e,n=(r?r():await Be(new i(2),s)).modExp(o,t);if(!n.isOne()&&!n.equal(s)){for(e=1;e<a;e++){if(n=n.mul(n).mod(t),n.isOne())return!1;if(n.equal(s))break}if(e===a)return!1}}return!0}(t,r)))}const Ue=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999];const Me=[];function xe(t,e){const r=t.length;if(r>e-11)throw Error("Message too long");const i=function(t){const e=new Uint8Array(t);let r=0;for(;r<t;){const i=Ce(t-r);for(let t=0;t<i.length;t++)0!==i[t]&&(e[r++]=i[t])}return e}(e-r-3),n=new Uint8Array(e);return n[1]=2,n.set(i,2),n.set(t,e-r),n}function Qe(t,e){let r=2,i=1;for(let e=r;e<t.length;e++)i&=0!==t[e],r+=i;const n=r-2,s=t.subarray(r+1),a=0===t[0]&2===t[1]&n>=8&!i;if(e)return O.selectUint8Array(a,s,e);if(a)return s;throw Error("Decryption error")}async function Re(t,e,r){let i;if(e.length!==kt.getHashByteLength(t))throw Error("Invalid hash length");const n=new Uint8Array(Me[t].length);for(i=0;i<Me[t].length;i++)n[i]=Me[t][i];const s=n.length+e.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(e,r-e.length),o}Me[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Me[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Me[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Me[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Me[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Me[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Me[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var _e=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Qe,emeEncode:xe,emsaEncode:Re});const Te=O.getWebCrypto(),Le=O.getNodeCrypto();async function Ne(t,e,r,i,n,s){const a=await O.getBigInteger(),o=new a(i),c=new a(n),h=new a(r);let u=h.mod(c.dec()),l=h.mod(o.dec());return l=l.toUint8Array(),u=u.toUint8Array(),{kty:"RSA",n:V(t,!0),e:V(e,!0),d:V(r,!0),p:V(n,!0),q:V(i,!0),dp:V(u,!0),dq:V(l,!0),qi:V(s,!0),ext:!0}}function Oe(t,e){return{kty:"RSA",n:V(t,!0),e:V(e,!0),ext:!0}}function Fe(t,e){return{n:j(t.n),e:e.toUint8Array(),d:j(t.d),p:j(t.q),q:j(t.p),u:j(t.qi)}}var He=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n,s,a,o){if(O.getNodeCrypto()&&!o)try{return await async function(t,e,r,i,n,s,a){const o=await Ne(e,r,i,n,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Le.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Le.privateDecrypt(c,t))}catch(t){throw Error("Decryption error")}}(t,e,r,i,n,s,a)}catch(t){O.printDebugError(t)}return async function(t,e,r,i,n,s,a,o){const c=await O.getBigInteger();if(t=new c(t),e=new c(e),r=new c(r),i=new c(i),n=new c(n),s=new c(s),a=new c(a),t.gte(e))throw Error("Data too large.");const h=i.mod(s.dec()),u=i.mod(n.dec()),l=(await Be(new c(2),e)).mod(e),f=l.modInv(e).modExp(r,e);t=t.mul(f).mod(e);const y=t.modExp(u,n),d=t.modExp(h,s),p=a.mul(d.sub(y)).mod(s);let g=p.mul(n).add(y);return g=g.mul(l).mod(e),Qe(g.toUint8Array("be",e.byteLength()),o)}(t,e,r,i,n,s,a,o)},encrypt:async function(t,e,r){return O.getNodeCrypto()?async function(t,e,r){const i=Oe(e,r),n={key:i,format:"jwk",type:"pkcs1",padding:Le.constants.RSA_PKCS1_PADDING};return new Uint8Array(Le.publicEncrypt(n,t))}(t,e,r):async function(t,e,r){const i=await O.getBigInteger();if(e=new i(e),t=new i(xe(t,e.byteLength())),r=new i(r),t.gte(e))throw Error("Message size cannot exceed modulus size");return t.modExp(r,e).toUint8Array("be",e.byteLength())}(t,e,r)},generate:async function(t,e){if(e=new(await O.getBigInteger())(e),O.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:t,publicExponent:e.toUint8Array(),hash:{name:"SHA-1"}},i=await Te.generateKey(r,!0,["sign","verify"]);return Fe(await Te.exportKey("jwk",i.privateKey),e)}if(O.getNodeCrypto()){const r={modulusLength:t,publicExponent:e.toNumber(),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},i=await new Promise(((t,e)=>{Le.generateKeyPair("rsa",r,((r,i,n)=>{r?e(r):t(n)}))}));return Fe(i,e)}let r,i,n;do{i=await Pe(t-(t>>1),e,40),r=await Pe(t>>1,e,40),n=r.mul(i)}while(n.bitLength()!==t);const s=r.dec().imul(i.dec());return i.lt(r)&&([r,i]=[i,r]),{n:n.toUint8Array(),e:e.toUint8Array(),d:e.modInv(s).toUint8Array(),p:r.toUint8Array(),q:i.toUint8Array(),u:r.modInv(i).toUint8Array()}},sign:async function(t,e,r,i,n,s,a,o,c){if(e&&!O.isStream(e))if(O.getWebCrypto())try{return await async function(t,e,r,i,n,s,a,o){const c=await Ne(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:t}},u=await Te.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await Te.sign("RSASSA-PKCS1-v1_5",u,e))}(T.read(T.webHash,t),e,r,i,n,s,a,o)}catch(t){O.printDebugError(t)}else if(O.getNodeCrypto())return async function(t,e,r,i,n,s,a,o){const c=Le.createSign(T.read(T.hash,t));c.write(e),c.end();const h=await Ne(r,i,n,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(t,e,r,i,n,s,a,o);return async function(t,e,r,i){const n=await O.getBigInteger();e=new n(e);const s=new n(await Re(t,i,e.byteLength()));if(r=new n(r),s.gte(e))throw Error("Message size cannot exceed modulus size");return s.modExp(r,e).toUint8Array("be",e.byteLength())}(t,r,n,c)},validateParams:async function(t,e,r,i,n,s){const a=await O.getBigInteger();if(t=new a(t),i=new a(i),n=new a(n),!i.mul(n).equal(t))return!1;const o=new a(2);if(s=new a(s),!i.mul(s).mod(n).isOne())return!1;e=new a(e),r=new a(r);const c=new a(Math.floor(t.bitLength()/3)),h=await Be(o,o.leftShift(c)),u=h.mul(r).mul(e);return!(!u.mod(i.dec()).equal(h)||!u.mod(n.dec()).equal(h))},verify:async function(t,e,r,i,n,s){if(e&&!O.isStream(e))if(O.getWebCrypto())try{return await async function(t,e,r,i,n){const s=Oe(i,n),a=await Te.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:t}},!1,["verify"]);return Te.verify("RSASSA-PKCS1-v1_5",a,r,e)}(T.read(T.webHash,t),e,r,i,n)}catch(t){O.printDebugError(t)}else if(O.getNodeCrypto())return async function(t,e,r,i,n){const s=Oe(i,n),a={key:s,format:"jwk",type:"pkcs1"},o=Le.createVerify(T.read(T.hash,t));o.write(e),o.end();try{return await o.verify(a,r)}catch(t){return!1}}(t,e,r,i,n);return async function(t,e,r,i,n){const s=await O.getBigInteger();if(r=new s(r),e=new s(e),i=new s(i),e.gte(r))throw Error("Signature size cannot exceed modulus size");const a=e.modExp(i,r).toUint8Array("be",r.byteLength()),o=await Re(t,n,r.byteLength());return O.equalsUint8Array(a,o)}(t,r,i,n,s)}});var ze=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n){const s=await O.getBigInteger();return t=new s(t),e=new s(e),r=new s(r),i=new s(i),Qe(t.modExp(i,r).modInv(r).imul(e).imod(r).toUint8Array("be",r.byteLength()),n)},encrypt:async function(t,e,r,i){const n=await O.getBigInteger();e=new n(e),r=new n(r),i=new n(i);const s=new n(xe(t,e.byteLength())),a=await Be(new n(1),e.dec());return{c1:r.modExp(a,e).toUint8Array(),c2:i.modExp(a,e).imul(s).imod(e).toUint8Array()}},validateParams:async function(t,e,r,i){const n=await O.getBigInteger();t=new n(t),e=new n(e),r=new n(r);const s=new n(1);if(e.lte(s)||e.gte(t))return!1;const a=new n(t.bitLength()),o=new n(1023);if(a.lt(o))return!1;if(!e.modExp(t.dec(),t).isOne())return!1;let c=e;const h=new n(1),u=new n(2).leftShift(new n(17));for(;h.lt(u);){if(c=c.mul(e).imod(t),c.isOne())return!1;h.iinc()}i=new n(i);const l=new n(2),f=await Be(l.leftShift(a.dec()),l.leftShift(a)),y=t.dec().imul(f).iadd(i);return!!r.equal(e.modExp(y,t))}});const Ge=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0,qe={};var je=function(t){var e,r=new Float64Array(16);if(t)for(e=0;e<t.length;e++)r[e]=t[e];return r},Ve=function(){throw Error("no PRNG")},Ze=new Uint8Array(32);Ze[0]=9;var Je=je(),Ye=je([1]),We=je([56129,1]),$e=je([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),Xe=je([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),tr=je([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),er=je([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),rr=je([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function ir(t,e,r,i){t[e]=r>>24&255,t[e+1]=r>>16&255,t[e+2]=r>>8&255,t[e+3]=255&r,t[e+4]=i>>24&255,t[e+5]=i>>16&255,t[e+6]=i>>8&255,t[e+7]=255&i}function nr(t,e,r,i){return function(t,e,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=t[e+s]^r[i+s];return(1&a-1>>>8)-1}(t,e,r,i,32)}function sr(t,e){var r;for(r=0;r<16;r++)t[r]=0|e[r]}function ar(t){var e,r,i=1;for(e=0;e<16;e++)r=t[e]+i+65535,i=Math.floor(r/65536),t[e]=r-65536*i;t[0]+=i-1+37*(i-1)}function or(t,e,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(t[s]^e[s]),t[s]^=i,e[s]^=i}function cr(t,e){var r,i,n,s=je(),a=je();for(r=0;r<16;r++)a[r]=e[r];for(ar(a),ar(a),ar(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,or(a,s,1-n)}for(r=0;r<16;r++)t[2*r]=255&a[r],t[2*r+1]=a[r]>>8}function hr(t,e){var r=new Uint8Array(32),i=new Uint8Array(32);return cr(r,t),cr(i,e),nr(r,0,i,0)}function ur(t){var e=new Uint8Array(32);return cr(e,t),1&e[0]}function lr(t,e){var r;for(r=0;r<16;r++)t[r]=e[2*r]+(e[2*r+1]<<8);t[15]&=32767}function fr(t,e,r){for(var i=0;i<16;i++)t[i]=e[i]+r[i]}function yr(t,e,r){for(var i=0;i<16;i++)t[i]=e[i]-r[i]}function dr(t,e,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0,b=0,v=0,E=0,k=0,S=0,I=0,C=0,B=0,K=0,P=0,D=0,U=0,M=0,x=0,Q=0,R=0,_=r[0],T=r[1],L=r[2],N=r[3],O=r[4],F=r[5],H=r[6],z=r[7],G=r[8],q=r[9],j=r[10],V=r[11],Z=r[12],J=r[13],Y=r[14],W=r[15];s+=(i=e[0])*_,a+=i*T,o+=i*L,c+=i*N,h+=i*O,u+=i*F,l+=i*H,f+=i*z,y+=i*G,d+=i*q,p+=i*j,g+=i*V,m+=i*Z,w+=i*J,A+=i*Y,b+=i*W,a+=(i=e[1])*_,o+=i*T,c+=i*L,h+=i*N,u+=i*O,l+=i*F,f+=i*H,y+=i*z,d+=i*G,p+=i*q,g+=i*j,m+=i*V,w+=i*Z,A+=i*J,b+=i*Y,v+=i*W,o+=(i=e[2])*_,c+=i*T,h+=i*L,u+=i*N,l+=i*O,f+=i*F,y+=i*H,d+=i*z,p+=i*G,g+=i*q,m+=i*j,w+=i*V,A+=i*Z,b+=i*J,v+=i*Y,E+=i*W,c+=(i=e[3])*_,h+=i*T,u+=i*L,l+=i*N,f+=i*O,y+=i*F,d+=i*H,p+=i*z,g+=i*G,m+=i*q,w+=i*j,A+=i*V,b+=i*Z,v+=i*J,E+=i*Y,k+=i*W,h+=(i=e[4])*_,u+=i*T,l+=i*L,f+=i*N,y+=i*O,d+=i*F,p+=i*H,g+=i*z,m+=i*G,w+=i*q,A+=i*j,b+=i*V,v+=i*Z,E+=i*J,k+=i*Y,S+=i*W,u+=(i=e[5])*_,l+=i*T,f+=i*L,y+=i*N,d+=i*O,p+=i*F,g+=i*H,m+=i*z,w+=i*G,A+=i*q,b+=i*j,v+=i*V,E+=i*Z,k+=i*J,S+=i*Y,I+=i*W,l+=(i=e[6])*_,f+=i*T,y+=i*L,d+=i*N,p+=i*O,g+=i*F,m+=i*H,w+=i*z,A+=i*G,b+=i*q,v+=i*j,E+=i*V,k+=i*Z,S+=i*J,I+=i*Y,C+=i*W,f+=(i=e[7])*_,y+=i*T,d+=i*L,p+=i*N,g+=i*O,m+=i*F,w+=i*H,A+=i*z,b+=i*G,v+=i*q,E+=i*j,k+=i*V,S+=i*Z,I+=i*J,C+=i*Y,B+=i*W,y+=(i=e[8])*_,d+=i*T,p+=i*L,g+=i*N,m+=i*O,w+=i*F,A+=i*H,b+=i*z,v+=i*G,E+=i*q,k+=i*j,S+=i*V,I+=i*Z,C+=i*J,B+=i*Y,K+=i*W,d+=(i=e[9])*_,p+=i*T,g+=i*L,m+=i*N,w+=i*O,A+=i*F,b+=i*H,v+=i*z,E+=i*G,k+=i*q,S+=i*j,I+=i*V,C+=i*Z,B+=i*J,K+=i*Y,P+=i*W,p+=(i=e[10])*_,g+=i*T,m+=i*L,w+=i*N,A+=i*O,b+=i*F,v+=i*H,E+=i*z,k+=i*G,S+=i*q,I+=i*j,C+=i*V,B+=i*Z,K+=i*J,P+=i*Y,D+=i*W,g+=(i=e[11])*_,m+=i*T,w+=i*L,A+=i*N,b+=i*O,v+=i*F,E+=i*H,k+=i*z,S+=i*G,I+=i*q,C+=i*j,B+=i*V,K+=i*Z,P+=i*J,D+=i*Y,U+=i*W,m+=(i=e[12])*_,w+=i*T,A+=i*L,b+=i*N,v+=i*O,E+=i*F,k+=i*H,S+=i*z,I+=i*G,C+=i*q,B+=i*j,K+=i*V,P+=i*Z,D+=i*J,U+=i*Y,M+=i*W,w+=(i=e[13])*_,A+=i*T,b+=i*L,v+=i*N,E+=i*O,k+=i*F,S+=i*H,I+=i*z,C+=i*G,B+=i*q,K+=i*j,P+=i*V,D+=i*Z,U+=i*J,M+=i*Y,x+=i*W,A+=(i=e[14])*_,b+=i*T,v+=i*L,E+=i*N,k+=i*O,S+=i*F,I+=i*H,C+=i*z,B+=i*G,K+=i*q,P+=i*j,D+=i*V,U+=i*Z,M+=i*J,x+=i*Y,Q+=i*W,b+=(i=e[15])*_,a+=38*(E+=i*L),o+=38*(k+=i*N),c+=38*(S+=i*O),h+=38*(I+=i*F),u+=38*(C+=i*H),l+=38*(B+=i*z),f+=38*(K+=i*G),y+=38*(P+=i*q),d+=38*(D+=i*j),p+=38*(U+=i*V),g+=38*(M+=i*Z),m+=38*(x+=i*J),w+=38*(Q+=i*Y),A+=38*(R+=i*W),s=(i=(s+=38*(v+=i*T))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),t[0]=s,t[1]=a,t[2]=o,t[3]=c,t[4]=h,t[5]=u,t[6]=l,t[7]=f,t[8]=y,t[9]=d,t[10]=p,t[11]=g,t[12]=m,t[13]=w,t[14]=A,t[15]=b}function pr(t,e){dr(t,e,e)}function gr(t,e){var r,i=je();for(r=0;r<16;r++)i[r]=e[r];for(r=253;r>=0;r--)pr(i,i),2!==r&&4!==r&&dr(i,i,e);for(r=0;r<16;r++)t[r]=i[r]}function mr(t,e,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=je(),c=je(),h=je(),u=je(),l=je(),f=je();for(n=0;n<31;n++)s[n]=e[n];for(s[31]=127&e[31]|64,s[0]&=248,lr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)or(o,c,i=s[n>>>3]>>>(7&n)&1),or(h,u,i),fr(l,o,h),yr(o,o,h),fr(h,c,u),yr(c,c,u),pr(u,l),pr(f,o),dr(o,h,o),dr(h,c,l),fr(l,o,h),yr(o,o,h),pr(c,o),yr(h,u,f),dr(o,h,We),fr(o,o,u),dr(h,h,o),dr(o,u,f),dr(u,c,a),pr(c,l),or(o,c,i),or(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var y=a.subarray(32),d=a.subarray(16);return gr(y,y),dr(d,d,y),cr(t,d),0}function wr(t,e){return mr(t,e,Ze)}var Ar=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function br(t,e,r,i){for(var n,s,a,o,c,h,u,l,f,y,d,p,g,m,w,A,b,v,E,k,S,I,C,B,K,P,D=new Int32Array(16),U=new Int32Array(16),M=t[0],x=t[1],Q=t[2],R=t[3],_=t[4],T=t[5],L=t[6],N=t[7],O=e[0],F=e[1],H=e[2],z=e[3],G=e[4],q=e[5],j=e[6],V=e[7],Z=0;i>=128;){for(E=0;E<16;E++)k=8*E+Z,D[E]=r[k+0]<<24|r[k+1]<<16|r[k+2]<<8|r[k+3],U[E]=r[k+4]<<24|r[k+5]<<16|r[k+6]<<8|r[k+7];for(E=0;E<80;E++)if(n=M,s=x,a=Q,o=R,c=_,h=T,u=L,N,f=O,y=F,d=H,p=z,g=G,m=q,w=j,V,C=65535&(I=V),B=I>>>16,K=65535&(S=N),P=S>>>16,C+=65535&(I=(G>>>14|_<<18)^(G>>>18|_<<14)^(_>>>9|G<<23)),B+=I>>>16,K+=65535&(S=(_>>>14|G<<18)^(_>>>18|G<<14)^(G>>>9|_<<23)),P+=S>>>16,C+=65535&(I=G&q^~G&j),B+=I>>>16,K+=65535&(S=_&T^~_&L),P+=S>>>16,S=Ar[2*E],C+=65535&(I=Ar[2*E+1]),B+=I>>>16,K+=65535&S,P+=S>>>16,S=D[E%16],B+=(I=U[E%16])>>>16,K+=65535&S,P+=S>>>16,K+=(B+=(C+=65535&I)>>>16)>>>16,C=65535&(I=v=65535&C|B<<16),B=I>>>16,K=65535&(S=b=65535&K|(P+=K>>>16)<<16),P=S>>>16,C+=65535&(I=(O>>>28|M<<4)^(M>>>2|O<<30)^(M>>>7|O<<25)),B+=I>>>16,K+=65535&(S=(M>>>28|O<<4)^(O>>>2|M<<30)^(O>>>7|M<<25)),P+=S>>>16,B+=(I=O&F^O&H^F&H)>>>16,K+=65535&(S=M&x^M&Q^x&Q),P+=S>>>16,l=65535&(K+=(B+=(C+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,A=65535&C|B<<16,C=65535&(I=p),B=I>>>16,K=65535&(S=o),P=S>>>16,B+=(I=v)>>>16,K+=65535&(S=b),P+=S>>>16,x=n,Q=s,R=a,_=o=65535&(K+=(B+=(C+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,T=c,L=h,N=u,M=l,F=f,H=y,z=d,G=p=65535&C|B<<16,q=g,j=m,V=w,O=A,E%16==15)for(k=0;k<16;k++)S=D[k],C=65535&(I=U[k]),B=I>>>16,K=65535&S,P=S>>>16,S=D[(k+9)%16],C+=65535&(I=U[(k+9)%16]),B+=I>>>16,K+=65535&S,P+=S>>>16,b=D[(k+1)%16],C+=65535&(I=((v=U[(k+1)%16])>>>1|b<<31)^(v>>>8|b<<24)^(v>>>7|b<<25)),B+=I>>>16,K+=65535&(S=(b>>>1|v<<31)^(b>>>8|v<<24)^b>>>7),P+=S>>>16,b=D[(k+14)%16],B+=(I=((v=U[(k+14)%16])>>>19|b<<13)^(b>>>29|v<<3)^(v>>>6|b<<26))>>>16,K+=65535&(S=(b>>>19|v<<13)^(v>>>29|b<<3)^b>>>6),P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,D[k]=65535&K|P<<16,U[k]=65535&C|B<<16;C=65535&(I=O),B=I>>>16,K=65535&(S=M),P=S>>>16,S=t[0],B+=(I=e[0])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[0]=M=65535&K|P<<16,e[0]=O=65535&C|B<<16,C=65535&(I=F),B=I>>>16,K=65535&(S=x),P=S>>>16,S=t[1],B+=(I=e[1])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[1]=x=65535&K|P<<16,e[1]=F=65535&C|B<<16,C=65535&(I=H),B=I>>>16,K=65535&(S=Q),P=S>>>16,S=t[2],B+=(I=e[2])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[2]=Q=65535&K|P<<16,e[2]=H=65535&C|B<<16,C=65535&(I=z),B=I>>>16,K=65535&(S=R),P=S>>>16,S=t[3],B+=(I=e[3])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[3]=R=65535&K|P<<16,e[3]=z=65535&C|B<<16,C=65535&(I=G),B=I>>>16,K=65535&(S=_),P=S>>>16,S=t[4],B+=(I=e[4])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[4]=_=65535&K|P<<16,e[4]=G=65535&C|B<<16,C=65535&(I=q),B=I>>>16,K=65535&(S=T),P=S>>>16,S=t[5],B+=(I=e[5])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[5]=T=65535&K|P<<16,e[5]=q=65535&C|B<<16,C=65535&(I=j),B=I>>>16,K=65535&(S=L),P=S>>>16,S=t[6],B+=(I=e[6])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[6]=L=65535&K|P<<16,e[6]=j=65535&C|B<<16,C=65535&(I=V),B=I>>>16,K=65535&(S=N),P=S>>>16,S=t[7],B+=(I=e[7])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[7]=N=65535&K|P<<16,e[7]=V=65535&C|B<<16,Z+=128,i-=128}return i}function vr(t,e,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,br(n,s,e,r),r%=128,i=0;i<r;i++)a[i]=e[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,ir(a,r-8,o/536870912|0,o<<3),br(n,s,a,r),i=0;i<8;i++)ir(t,8*i,n[i],s[i]);return 0}function Er(t,e){var r=je(),i=je(),n=je(),s=je(),a=je(),o=je(),c=je(),h=je(),u=je();yr(r,t[1],t[0]),yr(u,e[1],e[0]),dr(r,r,u),fr(i,t[0],t[1]),fr(u,e[0],e[1]),dr(i,i,u),dr(n,t[3],e[3]),dr(n,n,Xe),dr(s,t[2],e[2]),fr(s,s,s),yr(a,i,r),yr(o,s,n),fr(c,s,n),fr(h,i,r),dr(t[0],a,o),dr(t[1],h,c),dr(t[2],c,o),dr(t[3],a,h)}function kr(t,e,r){var i;for(i=0;i<4;i++)or(t[i],e[i],r)}function Sr(t,e){var r=je(),i=je(),n=je();gr(n,e[2]),dr(r,e[0],n),dr(i,e[1],n),cr(t,i),t[31]^=ur(r)<<7}function Ir(t,e,r){var i,n;for(sr(t[0],Je),sr(t[1],Ye),sr(t[2],Ye),sr(t[3],Je),n=255;n>=0;--n)kr(t,e,i=r[n/8|0]>>(7&n)&1),Er(e,t),Er(t,t),kr(t,e,i)}function Cr(t,e){var r=[je(),je(),je(),je()];sr(r[0],tr),sr(r[1],er),sr(r[2],Ye),dr(r[3],tr,er),Ir(t,r,e)}function Br(t,e,r){var i,n=new Uint8Array(64),s=[je(),je(),je(),je()];for(r||Ve(e,32),vr(n,e,32),n[0]&=248,n[31]&=127,n[31]|=64,Cr(s,n),Sr(t,s),i=0;i<32;i++)e[i+32]=t[i];return 0}var Kr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function Pr(t,e){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)e[n]+=r-16*e[i]*Kr[n-(i-32)],r=Math.floor((e[n]+128)/256),e[n]-=256*r;e[n]+=r,e[i]=0}for(r=0,n=0;n<32;n++)e[n]+=r-(e[31]>>4)*Kr[n],r=e[n]>>8,e[n]&=255;for(n=0;n<32;n++)e[n]-=r*Kr[n];for(i=0;i<32;i++)e[i+1]+=e[i]>>8,t[i]=255&e[i]}function Dr(t){var e,r=new Float64Array(64);for(e=0;e<64;e++)r[e]=t[e];for(e=0;e<64;e++)t[e]=0;Pr(t,r)}function Ur(t,e){var r=je(),i=je(),n=je(),s=je(),a=je(),o=je(),c=je();return sr(t[2],Ye),lr(t[1],e),pr(n,t[1]),dr(s,n,$e),yr(n,n,t[2]),fr(s,t[2],s),pr(a,s),pr(o,a),dr(c,o,a),dr(r,c,n),dr(r,r,s),function(t,e){var r,i=je();for(r=0;r<16;r++)i[r]=e[r];for(r=250;r>=0;r--)pr(i,i),1!==r&&dr(i,i,e);for(r=0;r<16;r++)t[r]=i[r]}(r,r),dr(r,r,n),dr(r,r,s),dr(r,r,s),dr(t[0],r,s),pr(i,t[0]),dr(i,i,s),hr(i,n)&&dr(t[0],t[0],rr),pr(i,t[0]),dr(i,i,s),hr(i,n)?-1:(ur(t[0])===e[31]>>7&&yr(t[0],Je,t[0]),dr(t[3],t[0],t[1]),0)}var Mr=64;function xr(){for(var t=0;t<arguments.length;t++)if(!(arguments[t]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}qe.scalarMult=function(t,e){if(xr(t,e),32!==t.length)throw Error("bad n size");if(32!==e.length)throw Error("bad p size");var r=new Uint8Array(32);return mr(r,t,e),r},qe.box={},qe.box.keyPair=function(){var t=new Uint8Array(32),e=new Uint8Array(32);return function(t,e){Ve(e,32),wr(t,e)}(t,e),{publicKey:t,secretKey:e}},qe.box.keyPair.fromSecretKey=function(t){if(xr(t),32!==t.length)throw Error("bad secret key size");var e=new Uint8Array(32);return wr(e,t),{publicKey:e,secretKey:new Uint8Array(t)}},qe.sign=function(t,e){if(xr(t,e),64!==e.length)throw Error("bad secret key size");var r=new Uint8Array(Mr+t.length);return function(t,e,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[je(),je(),je(),je()];vr(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)t[64+n]=e[n];for(n=0;n<32;n++)t[32+n]=a[32+n];for(vr(c,t.subarray(32),r+32),Dr(c),Cr(u,c),Sr(t,u),n=32;n<64;n++)t[n]=i[n];for(vr(o,t,r+64),Dr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];Pr(t.subarray(32),h)}(r,t,t.length,e),r},qe.sign.detached=function(t,e){for(var r=qe.sign(t,e),i=new Uint8Array(Mr),n=0;n<i.length;n++)i[n]=r[n];return i},qe.sign.detached.verify=function(t,e,r){if(xr(t,e,r),e.length!==Mr)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array(Mr+t.length),s=new Uint8Array(Mr+t.length);for(i=0;i<Mr;i++)n[i]=e[i];for(i=0;i<t.length;i++)n[i+Mr]=t[i];return function(t,e,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[je(),je(),je(),je()],c=[je(),je(),je(),je()];if(r<64)return-1;if(Ur(c,i))return-1;for(n=0;n<r;n++)t[n]=e[n];for(n=0;n<32;n++)t[n+32]=i[n];if(vr(a,t,r),Dr(a),Ir(o,c,a),Cr(c,e.subarray(32)),Er(o,c),Sr(s,o),r-=64,nr(e,0,s,0)){for(n=0;n<r;n++)t[n]=0;return-1}for(n=0;n<r;n++)t[n]=e[n+64];return r}(s,n,n.length,r)>=0},qe.sign.keyPair=function(){var t=new Uint8Array(32),e=new Uint8Array(64);return Br(t,e),{publicKey:t,secretKey:e}},qe.sign.keyPair.fromSecretKey=function(t){if(xr(t),64!==t.length)throw Error("bad secret key size");for(var e=new Uint8Array(32),r=0;r<e.length;r++)e[r]=t[32+r];return{publicKey:e,secretKey:new Uint8Array(t)}},qe.sign.keyPair.fromSeed=function(t){if(xr(t),32!==t.length)throw Error("bad seed size");for(var e=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=t[i];return Br(e,r,!0),{publicKey:e,secretKey:r}},qe.setPRNG=function(t){Ve=t},function(){if(Ge&&Ge.getRandomValues){qe.setPRNG((function(t,e){var r,i=new Uint8Array(e);for(r=0;r<e;r+=65536)Ge.getRandomValues(i.subarray(r,r+Math.min(e-r,65536)));for(r=0;r<e;r++)t[r]=i[r];!function(t){for(var e=0;e<t.length;e++)t[e]=0}(i)}))}}();const Qr={"2a8648ce3d030107":T.curve.nistP256,"2b81040022":T.curve.nistP384,"2b81040023":T.curve.nistP521,"2b8104000a":T.curve.secp256k1,"2b06010401da470f01":T.curve.ed25519Legacy,"2b060104019755010501":T.curve.curve25519Legacy,"2b2403030208010107":T.curve.brainpoolP256r1,"2b240303020801010b":T.curve.brainpoolP384r1,"2b240303020801010d":T.curve.brainpoolP512r1};class Rr{constructor(t){if(t instanceof Rr)this.oid=t.oid;else if(O.isArray(t)||O.isUint8Array(t)){if(6===(t=new Uint8Array(t))[0]){if(t[1]!==t.length-2)throw Error("Length mismatch in DER encoded oid");t=t.subarray(2)}this.oid=t}else this.oid=""}read(t){if(t.length>=1){const e=t[0];if(t.length>=1+e)return this.oid=t.subarray(1,1+e),1+this.oid.length}throw Error("Invalid oid")}write(){return O.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return O.uint8ArrayToHex(this.oid)}getName(){const t=Qr[this.toHex()];if(!t)throw Error("Unknown curve object identifier.");return t}}function _r(t){let e,r=0;const i=t[0];return i<192?([r]=t,e=1):i<255?(r=(t[0]-192<<8)+t[1]+192,e=2):255===i&&(r=O.readNumber(t.subarray(1,5)),e=5),{len:r,offset:e}}function Tr(t){return t<192?new Uint8Array([t]):t>191&&t<8384?new Uint8Array([192+(t-192>>8),t-192&255]):O.concatUint8Array([new Uint8Array([255]),O.writeNumber(t,4)])}function Lr(t){if(t<0||t>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+t])}function Nr(t){return new Uint8Array([192|t])}function Or(t,e){return O.concatUint8Array([Nr(t),Tr(e)])}function Fr(t){return[T.packet.literalData,T.packet.compressedData,T.packet.symmetricallyEncryptedData,T.packet.symEncryptedIntegrityProtectedData,T.packet.aeadEncryptedData].includes(t)}async function Hr(t,e){const r=Q(t);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,u=-1;u=0,64&a&&(u=1),u?h=63&a:(h=(63&a)>>2,c=3&a);const l=Fr(h);let f,y=null;if(l){if("array"===O.isStream(t)){const t=new ArrayStream;i=R(t),y=t}else{const t=new TransformStream;i=R(t.writable),y=t.readable}n=e({tag:h,packet:y})}else y=[];do{if(u){const t=await r.readByte();if(f=!1,t<192)o=t;else if(t>=192&&t<224)o=(t-192<<8)+await r.readByte()+192;else if(t>223&&t<255){if(o=1<<(31&t),f=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let t=0;for(;;){i&&await i.ready;const{done:e,value:n}=await r.read();if(e){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-t);if(i?await i.write(s):y.push(s),t+=n.length,t>=o){r.unshift(n.subarray(o-t+n.length));break}}}}while(f);const d=await r.peekBytes(l?1/0:2);return i?(await i.ready,await i.close()):(y=O.concatUint8Array(y),await e({tag:h,packet:y})),!d||!d.length}catch(t){if(i)return await i.abort(t),!0;throw t}finally{i&&await n,r.releaseLock()}}class zr extends Error{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,zr),this.name="UnsupportedError"}}class Gr extends zr{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,zr),this.name="UnknownPacketError"}}class qr{constructor(t,e){this.tag=t,this.rawContent=e}write(){return this.rawContent}}const jr=O.getWebCrypto(),Vr=O.getNodeCrypto(),Zr={[T.curve.nistP256]:"P-256",[T.curve.nistP384]:"P-384",[T.curve.nistP521]:"P-521"},Jr=Vr?Vr.getCurves():[],Yr=Vr?{[T.curve.secp256k1]:Jr.includes("secp256k1")?"secp256k1":void 0,[T.curve.nistP256]:Jr.includes("prime256v1")?"prime256v1":void 0,[T.curve.nistP384]:Jr.includes("secp384r1")?"secp384r1":void 0,[T.curve.nistP521]:Jr.includes("secp521r1")?"secp521r1":void 0,[T.curve.ed25519Legacy]:Jr.includes("ED25519")?"ED25519":void 0,[T.curve.curve25519Legacy]:Jr.includes("X25519")?"X25519":void 0,[T.curve.brainpoolP256r1]:Jr.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[T.curve.brainpoolP384r1]:Jr.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[T.curve.brainpoolP512r1]:Jr.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},Wr={[T.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:T.publicKey.ecdsa,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:Yr[T.curve.nistP256],web:Zr[T.curve.nistP256],payloadSize:32,sharedSize:256},[T.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:T.publicKey.ecdsa,hash:T.hash.sha384,cipher:T.symmetric.aes192,node:Yr[T.curve.nistP384],web:Zr[T.curve.nistP384],payloadSize:48,sharedSize:384},[T.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:T.publicKey.ecdsa,hash:T.hash.sha512,cipher:T.symmetric.aes256,node:Yr[T.curve.nistP521],web:Zr[T.curve.nistP521],payloadSize:66,sharedSize:528},[T.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:T.publicKey.ecdsa,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:Yr[T.curve.secp256k1],payloadSize:32},[T.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:T.publicKey.eddsaLegacy,hash:T.hash.sha512,node:!1,payloadSize:32},[T.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:T.publicKey.ecdh,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:!1,payloadSize:32},[T.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:T.publicKey.ecdsa,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:Yr[T.curve.brainpoolP256r1],payloadSize:32},[T.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:T.publicKey.ecdsa,hash:T.hash.sha384,cipher:T.symmetric.aes192,node:Yr[T.curve.brainpoolP384r1],payloadSize:48},[T.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:T.publicKey.ecdsa,hash:T.hash.sha512,cipher:T.symmetric.aes256,node:Yr[T.curve.brainpoolP512r1],payloadSize:64}};class $r{constructor(t){try{this.name=t instanceof Rr?t.getName():T.write(T.curve,t)}catch(t){throw new zr("Unknown curve")}const e=Wr[this.name];this.keyType=e.keyType,this.oid=e.oid,this.hash=e.hash,this.cipher=e.cipher,this.node=e.node,this.web=e.web,this.payloadSize=e.payloadSize,this.sharedSize=e.sharedSize,this.web&&O.getWebCrypto()?this.type="web":this.node&&O.getNodeCrypto()?this.type="node":this.name===T.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===T.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(t){const e=await jr.generateKey({name:"ECDSA",namedCurve:Zr[t]},!0,["sign","verify"]),r=await jr.exportKey("jwk",e.privateKey),i=await jr.exportKey("jwk",e.publicKey);return{publicKey:ei(i),privateKey:j(r.d)}}(this.name)}catch(t){return O.printDebugError("Browser did not support generating ec key "+t.message),ti(this.name)}case"node":return async function(t){const e=Vr.createECDH(Yr[t]);return await e.generateKeys(),{publicKey:new Uint8Array(e.getPublicKey()),privateKey:new Uint8Array(e.getPrivateKey())}}(this.name);case"curve25519Legacy":{const t=Ce(32);t[0]=127&t[0]|64,t[31]&=248;const e=t.slice().reverse(),{publicKey:r}=qe.box.keyPair.fromSecretKey(e);return{publicKey:O.concatUint8Array([new Uint8Array([64]),r]),privateKey:t}}case"ed25519Legacy":{const t=Ce(32),e=qe.sign.keyPair.fromSeed(t);return{publicKey:O.concatUint8Array([new Uint8Array([64]),e.publicKey]),privateKey:t}}default:return ti(this.name)}}}async function Xr(t,e,r,i){const n={[T.curve.nistP256]:!0,[T.curve.nistP384]:!0,[T.curve.nistP521]:!0,[T.curve.secp256k1]:!0,[T.curve.curve25519Legacy]:t===T.publicKey.ecdh,[T.curve.brainpoolP256r1]:!0,[T.curve.brainpoolP384r1]:!0,[T.curve.brainpoolP512r1]:!0},s=e.getName();if(!n[s])return!1;if(s===T.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:t}=qe.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const e=new Uint8Array([64,...t]);return!!O.equalsUint8Array(e,r)}const a=(await O.getNobleCurve(T.publicKey.ecdsa,s)).getPublicKey(i,!1);return!!O.equalsUint8Array(a,r)}async function ti(t){const e=await O.getNobleCurve(T.publicKey.ecdsa,t),r=e.utils.randomPrivateKey();return{publicKey:e.getPublicKey(r,!1),privateKey:r}}function ei(t){const e=j(t.x),r=j(t.y),i=new Uint8Array(e.length+r.length+1);return i[0]=4,i.set(e,1),i.set(r,e.length+1),i}function ri(t,e,r){const i=t,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:e,x:V(n,!0),y:V(s,!0),ext:!0}}function ii(t,e,r,i){const n=ri(t,e,r);return n.d=V(i,!0),n}const ni=O.getWebCrypto(),si=O.getNodeCrypto();async function ai(t,e,r,i,n,s){const a=new $r(t);if(r&&!O.isStream(r)){const t={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(t,e,r,i){const n=t.payloadSize,s=ii(t.payloadSize,Zr[t.name],i.publicKey,i.privateKey),a=await ni.importKey("jwk",s,{name:"ECDSA",namedCurve:Zr[t.name],hash:{name:T.read(T.webHash,t.hash)}},!1,["sign"]),o=new Uint8Array(await ni.sign({name:"ECDSA",namedCurve:Zr[t.name],hash:{name:T.read(T.webHash,e)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,e,r,t)}catch(t){if("nistP521"!==a.name&&("DataError"===t.name||"OperationError"===t.name))throw t;O.printDebugError("Browser did not support signing: "+t.message)}break;case"node":return async function(t,e,r,i){const n=O.nodeRequire("eckey-utils"),s=O.getNodeBuffer(),{privateKey:a}=n.generateDer({curveName:Yr[t.name],privateKey:s.from(i)}),o=si.createSign(T.read(T.hash,e));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=t.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,e,r,n)}}const o=(await O.getNobleCurve(T.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:o.r.toUint8Array("be",a.payloadSize),s:o.s.toUint8Array("be",a.payloadSize)}}async function oi(t,e,r,i,n,s){const a=new $r(t),o=async()=>0===s[0]&&ci(a,r,s.subarray(1),n);if(i&&!O.isStream(i))switch(a.type){case"web":try{const t=await async function(t,e,{r,s:i},n,s){const a=ri(t.payloadSize,Zr[t.name],s),o=await ni.importKey("jwk",a,{name:"ECDSA",namedCurve:Zr[t.name],hash:{name:T.read(T.webHash,t.hash)}},!1,["verify"]),c=O.concatUint8Array([r,i]).buffer;return ni.verify({name:"ECDSA",namedCurve:Zr[t.name],hash:{name:T.read(T.webHash,e)}},o,c,n)}(a,e,r,i,n);return t||o()}catch(t){if("nistP521"!==a.name&&("DataError"===t.name||"OperationError"===t.name))throw t;O.printDebugError("Browser did not support verifying: "+t.message)}break;case"node":{const t=await async function(t,e,{r,s:i},n,s){const a=O.nodeRequire("eckey-utils"),o=O.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:Yr[t.name],publicKey:o.from(s)}),h=si.createVerify(T.read(T.hash,e));h.write(n),h.end();const u=O.concatUint8Array([r,i]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(t){return!1}}(a,e,r,i,n);return t||o()}}return await ci(a,r,s,n)||o()}async function ci(t,e,r,i){return(await O.getNobleCurve(T.publicKey.ecdsa,t.name)).verify(O.concatUint8Array([e.r,e.s]),r,i,{lowS:!1})}var hi=/*#__PURE__*/Object.freeze({__proto__:null,sign:ai,validateParams:async function(t,e,r){const i=new $r(t);if(i.keyType!==T.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=Ce(8),n=T.hash.sha256,s=await kt.digest(n,i);try{const a=await ai(t,n,i,e,r,s);return await oi(t,n,a,i,e,s)}catch(t){return!1}}default:return Xr(T.publicKey.ecdsa,t,e,r)}},verify:oi});var ui=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(t,e,r,i,n,s){if(kt.getHashByteLength(e)<kt.getHashByteLength(T.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=O.concatUint8Array([n,i.subarray(1)]),o=qe.sign.detached(s,a);return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(t,e,r){if(t.getName()!==T.curve.ed25519Legacy)return!1;const{publicKey:i}=qe.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return O.equalsUint8Array(e,n)},verify:async function(t,e,{r,s:i},n,s,a){if(kt.getHashByteLength(e)<kt.getHashByteLength(T.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=O.concatUint8Array([r,i]);return qe.sign.detached.verify(a,o,s.subarray(1))}});function li(t){switch(t){case T.publicKey.ed25519:return 32;case T.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function fi(t){switch(t){case T.publicKey.ed25519:return T.hash.sha256;case T.publicKey.ed448:return T.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var yi=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(t){switch(t){case T.publicKey.ed25519:{const e=Ce(li(t)),{publicKey:r}=qe.sign.keyPair.fromSeed(e);return{A:r,seed:e}}case T.publicKey.ed448:{const t=await O.getNobleCurve(T.publicKey.ed448),e=t.utils.randomPrivateKey();return{A:t.getPublicKey(e),seed:e}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:li,getPreferredHashAlgo:fi,sign:async function(t,e,r,i,n,s){if(kt.getHashByteLength(e)<kt.getHashByteLength(fi(t)))throw Error("Hash algorithm too weak for EdDSA.");switch(t){case T.publicKey.ed25519:{const t=O.concatUint8Array([n,i]);return{RS:qe.sign.detached(s,t)}}case T.publicKey.ed448:return{RS:(await O.getNobleCurve(T.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(t,e,r){switch(t){case T.publicKey.ed25519:{const{publicKey:t}=qe.sign.keyPair.fromSeed(r);return O.equalsUint8Array(e,t)}case T.publicKey.ed448:{const t=(await O.getNobleCurve(T.publicKey.ed448)).getPublicKey(r);return O.equalsUint8Array(e,t)}default:return!1}},verify:async function(t,e,{RS:r},i,n,s){if(kt.getHashByteLength(e)<kt.getHashByteLength(fi(t)))throw Error("Hash algorithm too weak for EdDSA.");switch(t){case T.publicKey.ed25519:return qe.sign.detached.verify(s,r,n);case T.publicKey.ed448:return(await O.getNobleCurve(T.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});const di=O.getWebCrypto();async function pi(t,e,r){const{keySize:i}=at(t);if(!O.isAES(t)||e.length!==i)throw Error("Unexpected algorithm or key size");try{const t=await di.importKey("raw",e,{name:"AES-KW"},!1,["wrapKey"]),i=await di.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),n=await di.wrapKey("raw",i,t,{name:"AES-KW"});return new Uint8Array(n)}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return function(t,e,r){const i=new zt(e,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=mi(r);let a=n;const o=s,c=s.length/2,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let t=0;t<=5;++t)for(let e=0;e<c;++e)h[1]=c*t+(1+e),u[0]=a[0],u[1]=a[1],u[2]=o[2*e],u[3]=o[2*e+1],u=mi(i.encrypt(wi(u))),a=u.subarray(0,2),a[0]^=h[0],a[1]^=h[1],o[2*e]=u[2],o[2*e+1]=u[3];return wi(a,o)}(0,e,r)}async function gi(t,e,r){const{keySize:i}=at(t);if(!O.isAES(t)||e.length!==i)throw Error("Unexpected algorithm or key size");let n;try{n=await di.importKey("raw",e,{name:"AES-KW"},!1,["unwrapKey"])}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;return O.printDebugError("Browser did not support operation: "+t.message),function(t,e,r){const i=new zt(e,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=mi(r);let a=s.subarray(0,2);const o=s.subarray(2),c=s.length/2-1,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let t=5;t>=0;--t)for(let e=c-1;e>=0;--e)h[1]=c*t+(e+1),u[0]=a[0]^h[0],u[1]=a[1]^h[1],u[2]=o[2*e],u[3]=o[2*e+1],u=mi(i.decrypt(wi(u))),a=u.subarray(0,2),o[2*e]=u[2],o[2*e+1]=u[3];if(a[0]===n[0]&&a[1]===n[1])return wi(o);throw Error("Key Data Integrity failed")}(0,e,r)}try{const t=await di.unwrapKey("raw",r,n,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await di.exportKey("raw",t))}catch(t){if("OperationError"===t.name)throw Error("Key Data Integrity failed");throw t}}function mi(t){const e=t.buffer,r=new DataView(e),i=new Uint32Array(t.length/4);for(let e=0;e<t.length/4;++e)i[e]=r.getUint32(4*e);return i}function wi(){let t=0;for(let e=0;e<arguments.length;++e)t+=4*arguments[e].length;const e=new ArrayBuffer(t),r=new DataView(e);let i=0;for(let t=0;t<arguments.length;++t){for(let e=0;e<arguments[t].length;++e)r.setUint32(i+4*e,arguments[t][e]);i+=4*arguments[t].length}return new Uint8Array(e)}var Ai=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:gi,wrap:pi});function bi(t){const e=8-t.length%8,r=new Uint8Array(t.length+e).fill(e);return r.set(t),r}function vi(t){const e=t.length;if(e>0){const r=t[e-1];if(r>=1){const i=t.subarray(e-r),n=new Uint8Array(r).fill(r);if(O.equalsUint8Array(i,n))return t.subarray(0,e-r)}}throw Error("Invalid padding")}var Ei=/*#__PURE__*/Object.freeze({__proto__:null,decode:vi,encode:bi});const ki=O.getWebCrypto(),Si=O.getNodeCrypto();function Ii(t,e,r,i){return O.concatUint8Array([e.write(),new Uint8Array([t]),r.write(!0),O.stringToUint8Array("Anonymous Sender    "),r.replacementFingerprint||i.subarray(0,20)])}async function Ci(t,e,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<e.length&&0===e[a];a++);e=e.subarray(a)}if(s){for(a=e.length-1;a>=0&&0===e[a];a--);e=e.subarray(0,a+1)}return(await kt.digest(t,O.concatUint8Array([new Uint8Array([0,0,0,1]),e,i]))).subarray(0,r)}async function Bi(t,e){switch(t.type){case"curve25519Legacy":{const r=Ce(32),{secretKey:i,sharedKey:n}=await Ki(t,e,null,r);let{publicKey:s}=qe.box.keyPair.fromSecretKey(i);return s=O.concatUint8Array([new Uint8Array([64]),s]),{publicKey:s,sharedKey:n}}case"web":if(t.web&&O.getWebCrypto())try{return await async function(t,e){const r=ri(t.payloadSize,t.web,e);let i=ki.generateKey({name:"ECDH",namedCurve:t.web},!0,["deriveKey","deriveBits"]),n=ki.importKey("jwk",r,{name:"ECDH",namedCurve:t.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=ki.deriveBits({name:"ECDH",namedCurve:t.web,public:n},i.privateKey,t.sharedSize),a=ki.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(ei(a));return{publicKey:c,sharedKey:o}}(t,e)}catch(r){return O.printDebugError(r),Di(t,e)}break;case"node":return async function(t,e){const r=Si.createECDH(t.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(e)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(t,e);default:return Di(t,e)}}async function Ki(t,e,r,i){if(i.length!==t.payloadSize){const e=new Uint8Array(t.payloadSize);e.set(i,t.payloadSize-i.length),i=e}switch(t.type){case"curve25519Legacy":{const t=i.slice().reverse();return{secretKey:t,sharedKey:qe.scalarMult(t,e.subarray(1))}}case"web":if(t.web&&O.getWebCrypto())try{return await async function(t,e,r,i){const n=ii(t.payloadSize,t.web,r,i);let s=ki.importKey("jwk",n,{name:"ECDH",namedCurve:t.web},!0,["deriveKey","deriveBits"]);const a=ri(t.payloadSize,t.web,e);let o=ki.importKey("jwk",a,{name:"ECDH",namedCurve:t.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=ki.deriveBits({name:"ECDH",namedCurve:t.web,public:o},s,t.sharedSize),h=ki.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:j(h.d),sharedKey:u}}(t,e,r,i)}catch(r){return O.printDebugError(r),Pi(t,e,i)}break;case"node":return async function(t,e,r){const i=Si.createECDH(t.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(e));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(t,e,i);default:return Pi(t,e,i)}}async function Pi(t,e,r){return{secretKey:r,sharedKey:(await O.getNobleCurve(T.publicKey.ecdh,t.name)).getSharedSecret(r,e).subarray(1)}}async function Di(t,e){const r=await O.getNobleCurve(T.publicKey.ecdh,t.name),{publicKey:i,privateKey:n}=await t.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,e).subarray(1)}}var Ui=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n,s,a){const o=new $r(t),{sharedKey:c}=await Ki(o,r,n,s),h=Ii(T.publicKey.ecdh,t,e,a),{keySize:u}=at(e.cipher);let l;for(let t=0;t<3;t++)try{const r=await Ci(e.hash,c,u,h,1===t,2===t);return vi(await gi(e.cipher,r,i))}catch(t){l=t}throw l},encrypt:async function(t,e,r,i,n){const s=bi(r),a=new $r(t),{publicKey:o,sharedKey:c}=await Bi(a,i),h=Ii(T.publicKey.ecdh,t,e,n),{keySize:u}=at(e.cipher),l=await Ci(e.hash,c,u,h);return{publicKey:o,wrappedKey:await pi(e.cipher,l,s)}},validateParams:async function(t,e,r){return Xr(T.publicKey.ecdh,t,e,r)}});const Mi=O.getWebCrypto();async function xi(t,e,r,i,n){const s=T.read(T.webHash,t);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Mi.importKey("raw",e,"HKDF",!1,["deriveBits"]),o=await Mi.deriveBits({name:"HKDF",hash:s,salt:r,info:i},a,8*n);return new Uint8Array(o)}const Qi={x25519:O.encodeUTF8("OpenPGP X25519"),x448:O.encodeUTF8("OpenPGP X448")};var Ri=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n){switch(t){case T.publicKey.x25519:{const t=qe.scalarMult(n,e),s=O.concatUint8Array([e,i,t]),a=T.symmetric.aes128,{keySize:o}=at(a);return gi(a,await xi(T.hash.sha256,s,new Uint8Array,Qi.x25519,o),r)}case T.publicKey.x448:{const t=(await O.getNobleCurve(T.publicKey.x448)).getSharedSecret(n,e),s=O.concatUint8Array([e,i,t]),a=T.symmetric.aes256,{keySize:o}=at(T.symmetric.aes256);return gi(a,await xi(T.hash.sha512,s,new Uint8Array,Qi.x448,o),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(t,e,r){switch(t){case T.publicKey.x25519:{const t=Ce(32),i=qe.scalarMult(t,r),{publicKey:n}=qe.box.keyPair.fromSecretKey(t),s=O.concatUint8Array([n,r,i]),a=T.symmetric.aes128,{keySize:o}=at(a),c=await xi(T.hash.sha256,s,new Uint8Array,Qi.x25519,o);return{ephemeralPublicKey:n,wrappedKey:await pi(a,c,e)}}case T.publicKey.x448:{const t=await O.getNobleCurve(T.publicKey.x448),i=t.utils.randomPrivateKey(),n=t.getSharedSecret(i,r),s=t.getPublicKey(i),a=O.concatUint8Array([s,r,n]),o=T.symmetric.aes256,{keySize:c}=at(T.symmetric.aes256),h=await xi(T.hash.sha512,a,new Uint8Array,Qi.x448,c);return{ephemeralPublicKey:s,wrappedKey:await pi(o,h,e)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(t){switch(t){case T.publicKey.x25519:{const t=Ce(32),{publicKey:e}=qe.box.keyPair.fromSecretKey(t);return{A:e,k:t}}case T.publicKey.x448:{const t=await O.getNobleCurve(T.publicKey.x448),e=t.utils.randomPrivateKey();return{A:t.getPublicKey(e),k:e}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(t){switch(t){case T.publicKey.x25519:return 32;case T.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(t,e,r){switch(t){case T.publicKey.x25519:{const{publicKey:t}=qe.box.keyPair.fromSecretKey(r);return O.equalsUint8Array(e,t)}case T.publicKey.x448:{const t=(await O.getNobleCurve(T.publicKey.x448)).getPublicKey(r);return O.equalsUint8Array(e,t)}default:return!1}}}),_i=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:$r,ecdh:Ui,ecdhX:Ri,ecdsa:hi,eddsa:yi,eddsaLegacy:ui,generate:async function(t){const e=new $r(t),{oid:r,hash:i,cipher:n}=e,s=await e.genKeyPair();return{oid:r,Q:s.publicKey,secret:O.leftPad(s.privateKey,e.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(t){return Wr[t.getName()].hash}});var Ti=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(t,e,r,i,n,s){const a=await O.getBigInteger(),o=new a(1);let c,h,u,l;i=new a(i),n=new a(n),r=new a(r),s=new a(s),r=r.mod(i),s=s.mod(n);const f=new a(e.subarray(0,n.byteLength())).mod(n);for(;;){if(c=await Be(o,n),h=r.modExp(c,i).imod(n),h.isZero())continue;const t=s.mul(h).imod(n);if(l=f.add(t).imod(n),u=c.modInv(n).imul(l).imod(n),!u.isZero())break}return{r:h.toUint8Array("be",n.byteLength()),s:u.toUint8Array("be",n.byteLength())}},validateParams:async function(t,e,r,i,n){const s=await O.getBigInteger();t=new s(t),e=new s(e),r=new s(r),i=new s(i);const a=new s(1);if(r.lte(a)||r.gte(t))return!1;if(!t.dec().mod(e).isZero())return!1;if(!r.modExp(e,t).isOne())return!1;const o=new s(e.bitLength()),c=new s(150);if(o.lt(c)||!await De(e,null,32))return!1;n=new s(n);const h=new s(2),u=await Be(h.leftShift(o.dec()),h.leftShift(o)),l=e.mul(u).add(n);return!!i.equal(r.modExp(l,t))},verify:async function(t,e,r,i,n,s,a,o){const c=await O.getBigInteger(),h=new c(0);if(e=new c(e),r=new c(r),s=new c(s),a=new c(a),n=new c(n),o=new c(o),e.lte(h)||e.gte(a)||r.lte(h)||r.gte(a))return O.printDebug("invalid DSA Signature"),!1;const u=new c(i.subarray(0,a.byteLength())).imod(a),l=r.modInv(a);if(l.isZero())return O.printDebug("invalid DSA Signature"),!1;n=n.mod(s),o=o.mod(s);const f=u.mul(l).imod(a),y=e.mul(l).imod(a),d=n.modExp(f,s),p=o.modExp(y,s);return d.mul(p).imod(s).imod(a).equal(e)}});const Li=new Set([T.hash.sha1,T.hash.sha256,T.hash.sha512]),Ni=O.getWebCrypto(),Oi=O.getNodeCrypto();var Fi={rsa:He,elgamal:ze,elliptic:_i,dsa:Ti,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(t){if(!Li.has(t))throw Error("Unsupported hash algorithm.");const e=T.read(T.webHash,t),r=Ni||Oi.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:e}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(t,e,r){if(!Li.has(t))throw Error("Unsupported hash algorithm.");const i=T.read(T.webHash,t),n=Ni||Oi.webcrypto.subtle,s=await n.importKey("raw",e,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(t,e,r,i){if(!Li.has(t))throw Error("Unsupported hash algorithm.");const n=T.read(T.webHash,t),s=Ni||Oi.webcrypto.subtle,a=await s.importKey("raw",e,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class Hi{constructor(t){if(void 0===t&&(t=new Uint8Array([])),!O.isUint8Array(t))throw Error("data must be in the form of a Uint8Array");this.data=t,this.length=this.data.byteLength}write(){return O.concatUint8Array([new Uint8Array([this.length]),this.data])}read(t){if(t.length>=1){const e=t[0];if(t.length>=e+1)return this.data=t.subarray(1,1+e),this.length=e,1+e}throw Error("Invalid octet string")}}var zi=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(t,e){let r=0;switch(t){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.rsaSign:{const t=O.readMPI(e.subarray(r));return r+=t.length+2,{read:r,signatureParams:{s:t}}}case T.publicKey.dsa:case T.publicKey.ecdsa:{const t=O.readMPI(e.subarray(r));r+=t.length+2;const i=O.readMPI(e.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:t,s:i}}}case T.publicKey.eddsaLegacy:{let t=O.readMPI(e.subarray(r));r+=t.length+2,t=O.leftPad(t,32);let i=O.readMPI(e.subarray(r));return r+=i.length+2,i=O.leftPad(i,32),{read:r,signatureParams:{r:t,s:i}}}case T.publicKey.ed25519:case T.publicKey.ed448:{const i=2*Fi.elliptic.eddsa.getPayloadSize(t),n=O.readExactSubarray(e,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case T.publicKey.hmac:{const t=new Hi;return r+=t.read(e.subarray(r)),{read:r,signatureParams:{mac:t}}}default:throw new zr("Unknown signature algorithm.")}},sign:async function(t,e,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(t){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.rsaSign:{const{n:t,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await Fi.rsa.sign(e,n,t,a,o,c,h,u,s)}}case T.publicKey.dsa:{const{g:t,p:n,q:a}=r,{x:o}=i;return Fi.dsa.sign(e,s,t,n,a,o)}case T.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case T.publicKey.ecdsa:{const{oid:t,Q:a}=r,{d:o}=i;return Fi.elliptic.ecdsa.sign(t,e,n,a,o,s)}case T.publicKey.eddsaLegacy:{const{oid:t,Q:a}=r,{seed:o}=i;return Fi.elliptic.eddsaLegacy.sign(t,e,n,a,o,s)}case T.publicKey.ed25519:case T.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return Fi.elliptic.eddsa.sign(t,e,n,a,o,s)}case T.publicKey.hmac:{const{cipher:t}=r,{keyMaterial:e}=i,n=await Fi.hmac.sign(t.getValue(),e,s);return{mac:new Hi(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(t,e,r,i,n,s,a){switch(t){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.rsaSign:{const{n:t,e:n}=i,o=O.leftPad(r.s,t.length);return Fi.rsa.verify(e,s,o,t,n,a)}case T.publicKey.dsa:{const{g:t,p:n,q:s,y:o}=i,{r:c,s:h}=r;return Fi.dsa.verify(e,c,h,a,t,n,s,o)}case T.publicKey.ecdsa:{const{oid:t,Q:n}=i,o=new Fi.elliptic.CurveWithOID(t).payloadSize,c=O.leftPad(r.r,o),h=O.leftPad(r.s,o);return Fi.elliptic.ecdsa.verify(t,e,{r:c,s:h},s,n,a)}case T.publicKey.eddsaLegacy:{const{oid:t,Q:n}=i;return Fi.elliptic.eddsaLegacy.verify(t,e,r,s,n,a)}case T.publicKey.ed25519:case T.publicKey.ed448:{const{A:n}=i;return Fi.elliptic.eddsa.verify(t,e,r,s,n,a)}case T.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:t}=i,{keyMaterial:e}=n;return Fi.hmac.verify(t.getValue(),e,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class Gi{constructor(t){t&&(this.data=t)}read(t){if(t.length>=1){const e=t[0];if(t.length>=1+e)return this.data=t.subarray(1,1+e),1+this.data.length}throw Error("Invalid symmetric key")}write(){return O.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class qi{constructor(t){if(t){const{version:e,hash:r,cipher:i,replacementFingerprint:n}=t;this.version=e||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(t){if(t.length<4||1!==t[1]&&255!==t[1])throw new zr("Cannot read KDFParams");const e=t[0];this.version=t[1],this.hash=t[2],this.cipher=t[3];let r=4;if(255===this.version){const i=e-r+1;this.replacementFingerprint=t.slice(r,r+i),r+=i}return r}write(t){if(!this.version||1===this.version||t)return new Uint8Array([3,1,this.hash,this.cipher]);return O.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const ji=t=>class{constructor(t){this.data=void 0===t?null:t}read(e){const r=e[0];return this.data=T.write(t,r),1}write(){return new Uint8Array([this.data])}getName(){return T.read(t,this.data)}getValue(){return this.data}},Vi=ji(T.aead),Zi=ji(T.symmetric),Ji=ji(T.hash);class Yi{static fromObject({wrappedKey:t,algorithm:e}){const r=new Yi;return r.wrappedKey=t,r.algorithm=e,r}read(t){let e=0,r=t[e++];this.algorithm=r%2?t[e++]:null,r-=r%2,this.wrappedKey=O.readExactSubarray(t,e,e+r),e+=r}write(){return O.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function Wi(t,e){const r=Ce(32);return{privateParams:{hashSeed:r,keyMaterial:t},publicParams:{cipher:e,digest:await kt.sha256(r)}}}function $i(t){const{keySize:e}=at(t);return Ce(e)}function Xi(t){const e=T.read(T.aead,t);return Se[e]}function tn(t){try{t.getName()}catch(t){throw new zr("Unknown curve OID")}}function en(t,e){switch(t){case T.publicKey.ecdsa:case T.publicKey.ecdh:case T.publicKey.eddsaLegacy:return new Fi.elliptic.CurveWithOID(e).payloadSize;case T.publicKey.ed25519:case T.publicKey.ed448:return Fi.elliptic.eddsa.getPayloadSize(t);case T.publicKey.x25519:case T.publicKey.x448:return Fi.elliptic.ecdhX.getPayloadSize(t);default:throw Error("Unknown elliptic algo")}}var rn=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(t,e,r,i){switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:return Fi.rsa.generate(e,65537).then((({n:t,e,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:t,e}})));case T.publicKey.ecdsa:return Fi.elliptic.generate(r).then((({oid:t,Q:e,secret:r})=>({privateParams:{d:r},publicParams:{oid:new Rr(t),Q:e}})));case T.publicKey.eddsaLegacy:return Fi.elliptic.generate(r).then((({oid:t,Q:e,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new Rr(t),Q:e}})));case T.publicKey.ecdh:return Fi.elliptic.generate(r).then((({oid:t,Q:e,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new Rr(t),Q:e,kdfParams:new qi({hash:i,cipher:n})}})));case T.publicKey.ed25519:case T.publicKey.ed448:return Fi.elliptic.eddsa.generate(t).then((({A:t,seed:e})=>({privateParams:{seed:e},publicParams:{A:t}})));case T.publicKey.x25519:case T.publicKey.x448:return Fi.elliptic.ecdhX.generate(t).then((({A:t,k:e})=>({privateParams:{k:e},publicParams:{A:t}})));case T.publicKey.hmac:return Wi(await Fi.hmac.generate(i),new Ji(i));case T.publicKey.aead:return Wi($i(i),new Zi(i));case T.publicKey.dsa:case T.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:$i,getAEADMode:Xi,getCipherParams:at,getCurvePayloadSize:en,getPreferredCurveHashAlgo:function(t,e){switch(t){case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:return Fi.elliptic.getPreferredHashAlgo(e);case T.publicKey.ed25519:case T.publicKey.ed448:return Fi.elliptic.eddsa.getPreferredHashAlgo(t);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(t){const{blockSize:e}=at(t),r=await Ce(e),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return O.concat([r,i])},parseEncSessionKeyParams:function(t,e){let r=0;switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:return{c:O.readMPI(e.subarray(r))};case T.publicKey.elgamal:{const t=O.readMPI(e.subarray(r));r+=t.length+2;return{c1:t,c2:O.readMPI(e.subarray(r))}}case T.publicKey.ecdh:{const t=O.readMPI(e.subarray(r));r+=t.length+2;const i=new Gi;return i.read(e.subarray(r)),{V:t,C:i}}case T.publicKey.x25519:case T.publicKey.x448:{const i=en(t),n=O.readExactSubarray(e,r,r+i);r+=n.length;const s=new Yi;return s.read(e.subarray(r)),{ephemeralPublicKey:n,C:s}}case T.publicKey.aead:{const t=new Vi;r+=t.read(e.subarray(r));const{ivLength:i}=Xi(t.getValue()),n=e.subarray(r,r+i);r+=i;const s=new Hi;return r+=s.read(e.subarray(r)),{aeadMode:t,iv:n,c:s}}default:throw new zr("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(t,e,r){let i=0;switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:{const t=O.readMPI(e.subarray(i));i+=t.length+2;const r=O.readMPI(e.subarray(i));i+=r.length+2;const n=O.readMPI(e.subarray(i));i+=n.length+2;const s=O.readMPI(e.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:t,p:r,q:n,u:s}}}case T.publicKey.dsa:case T.publicKey.elgamal:{const t=O.readMPI(e.subarray(i));return i+=t.length+2,{read:i,privateParams:{x:t}}}case T.publicKey.ecdsa:case T.publicKey.ecdh:{const n=en(t,r.oid);let s=O.readMPI(e.subarray(i));return i+=s.length+2,s=O.leftPad(s,n),{read:i,privateParams:{d:s}}}case T.publicKey.eddsaLegacy:{const n=en(t,r.oid);let s=O.readMPI(e.subarray(i));return i+=s.length+2,s=O.leftPad(s,n),{read:i,privateParams:{seed:s}}}case T.publicKey.ed25519:case T.publicKey.ed448:{const r=en(t),n=O.readExactSubarray(e,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case T.publicKey.x25519:case T.publicKey.x448:{const r=en(t),n=O.readExactSubarray(e,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case T.publicKey.hmac:{const{cipher:t}=r,n=kt.getHashByteLength(t.getValue()),s=e.subarray(i,i+32);i+=32;const a=e.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case T.publicKey.aead:{const{cipher:t}=r,n=e.subarray(i,i+32);i+=32;const{keySize:s}=at(t.getValue()),a=e.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new zr("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(t,e){let r=0;switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:{const t=O.readMPI(e.subarray(r));r+=t.length+2;const i=O.readMPI(e.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:t,e:i}}}case T.publicKey.dsa:{const t=O.readMPI(e.subarray(r));r+=t.length+2;const i=O.readMPI(e.subarray(r));r+=i.length+2;const n=O.readMPI(e.subarray(r));r+=n.length+2;const s=O.readMPI(e.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:t,q:i,g:n,y:s}}}case T.publicKey.elgamal:{const t=O.readMPI(e.subarray(r));r+=t.length+2;const i=O.readMPI(e.subarray(r));r+=i.length+2;const n=O.readMPI(e.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:t,g:i,y:n}}}case T.publicKey.ecdsa:{const t=new Rr;r+=t.read(e),tn(t);const i=O.readMPI(e.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:t,Q:i}}}case T.publicKey.eddsaLegacy:{const t=new Rr;r+=t.read(e),tn(t);let i=O.readMPI(e.subarray(r));return r+=i.length+2,i=O.leftPad(i,33),{read:r,publicParams:{oid:t,Q:i}}}case T.publicKey.ecdh:{const t=new Rr;r+=t.read(e),tn(t);const i=O.readMPI(e.subarray(r));r+=i.length+2;const n=new qi;return r+=n.read(e.subarray(r)),{read:r,publicParams:{oid:t,Q:i,kdfParams:n}}}case T.publicKey.ed25519:case T.publicKey.ed448:case T.publicKey.x25519:case T.publicKey.x448:{const i=O.readExactSubarray(e,r,r+en(t));return r+=i.length,{read:r,publicParams:{A:i}}}case T.publicKey.hmac:case T.publicKey.aead:{const t=new Zi;r+=t.read(e);const i=kt.getHashByteLength(T.hash.sha256),n=e.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:t,digest:n}}}default:throw new zr("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(t,e,r,i,n,s){switch(t){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:{const{c:t}=i,{n,e:a}=e,{d:o,p:c,q:h,u}=r;return Fi.rsa.decrypt(t,n,a,o,c,h,u,s)}case T.publicKey.elgamal:{const{c1:t,c2:n}=i,a=e.p,o=r.x;return Fi.elgamal.decrypt(t,n,a,o,s)}case T.publicKey.ecdh:{const{oid:t,Q:s,kdfParams:a}=e,{d:o}=r,{V:c,C:h}=i;return Fi.elliptic.ecdh.decrypt(t,a,c,h.data,s,o,n)}case T.publicKey.x25519:case T.publicKey.x448:{const{A:n}=e,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!O.isAES(o.algorithm))throw Error("AES session key expected");return Fi.elliptic.ecdhX.decrypt(t,a,o.wrappedKey,n,s)}case T.publicKey.aead:{const{cipher:t}=e,n=t.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=Xi(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(t,e,r,i,n,s){switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:{const{n:t,e}=r;return{c:await Fi.rsa.encrypt(n,t,e)}}case T.publicKey.elgamal:{const{p:t,g:e,y:i}=r;return Fi.elgamal.encrypt(n,t,e,i)}case T.publicKey.ecdh:{const{oid:t,Q:e,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await Fi.elliptic.ecdh.encrypt(t,i,n,e,s);return{V:a,C:new Gi(o)}}case T.publicKey.x25519:case T.publicKey.x448:{if(e&&!O.isAES(e))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await Fi.elliptic.ecdhX.encrypt(t,n,i);return{ephemeralPublicKey:s,C:Yi.fromObject({algorithm:e,wrappedKey:a})}}case T.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:t}=r,e=t.getValue(),{keyMaterial:s}=i,a=L.preferredAEADAlgorithm,o=Xi(L.preferredAEADAlgorithm),{ivLength:c}=o,h=Ce(c),u=await o(e,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new Vi(a),iv:h,c:new Hi(l)}}default:return[]}},serializeParams:function(t,e){const r=new Set([T.publicKey.ed25519,T.publicKey.x25519,T.publicKey.ed448,T.publicKey.x448,T.publicKey.aead,T.publicKey.hmac]),i=Object.keys(e).map((i=>{const n=e[i];return O.isUint8Array(n)?r.has(t)?n:O.uint8ArrayToMPI(n):n.write()}));return O.concatUint8Array(i)},validateParams:async function(t,e,r){if(!e||!r)throw Error("Missing key parameters");switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:{const{n:t,e:i}=e,{d:n,p:s,q:a,u:o}=r;return Fi.rsa.validateParams(t,i,n,s,a,o)}case T.publicKey.dsa:{const{p:t,q:i,g:n,y:s}=e,{x:a}=r;return Fi.dsa.validateParams(t,i,n,s,a)}case T.publicKey.elgamal:{const{p:t,g:i,y:n}=e,{x:s}=r;return Fi.elgamal.validateParams(t,i,n,s)}case T.publicKey.ecdsa:case T.publicKey.ecdh:{const i=Fi.elliptic[T.read(T.publicKey,t)],{oid:n,Q:s}=e,{d:a}=r;return i.validateParams(n,s,a)}case T.publicKey.eddsaLegacy:{const{Q:t,oid:i}=e,{seed:n}=r;return Fi.elliptic.eddsaLegacy.validateParams(i,t,n)}case T.publicKey.ed25519:case T.publicKey.ed448:{const{A:i}=e,{seed:n}=r;return Fi.elliptic.eddsa.validateParams(t,i,n)}case T.publicKey.x25519:case T.publicKey.x448:{const{A:i}=e,{k:n}=r;return Fi.elliptic.ecdhX.validateParams(t,i,n)}case T.publicKey.hmac:{const{cipher:t,digest:i}=e,{hashSeed:n,keyMaterial:s}=r;return kt.getHashByteLength(t.getValue())===s.length&&O.equalsUint8Array(i,await kt.sha256(n))}case T.publicKey.aead:{const{cipher:t,digest:i}=e,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=at(t.getValue());return a===s.length&&O.equalsUint8Array(i,await kt.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const nn={cipher:ot,hash:kt,mode:Se,publicKey:Fi,signature:zi,random:Ke,pkcs1:_e,pkcs5:Ei,aesKW:Ai};Object.assign(nn,rn);class sn extends Error{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,sn),this.name="Argon2OutOfMemoryError"}}let an,on,cn=2<<19;class hn{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return cn}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(t){cn=t}static reloadWasmModule(){an&&(on=an(),on.catch((()=>{})))}constructor(t=L){const{passes:e,parallelism:r,memoryExponent:i}=t.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=e,this.p=r,this.encodedM=i}generateSalt(){this.salt=nn.random.getRandomBytes(16)}read(t){let e=0;return this.salt=t.subarray(e,e+16),e+=16,this.t=t[e++],this.p=t[e++],this.encodedM=t[e++],e}write(){const t=[new Uint8Array([T.write(T.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return O.concatUint8Array(t)}async produceKey(t,e){const r=2<<this.encodedM-1;try{an=an||(await Promise.resolve().then((function(){return Pl}))).default,on=on||an();const i=await on,n=i({version:19,type:2,password:O.encodeUTF8(t),salt:this.salt,tagLength:e,memorySize:r,parallelism:this.p,passes:this.t});return r>hn.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&hn.reloadWasmModule(),n}catch(t){throw t.message&&(t.message.includes("Unable to grow instance memory")||t.message.includes("failed to grow memory")||t.message.includes("WebAssembly.Memory.grow")||t.message.includes("Out of memory"))?new sn("Could not allocate required memory for Argon2"):t}}}class un{constructor(t,e=L){this.algorithm=T.hash.sha256,this.type=T.read(T.s2k,t),this.c=e.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=nn.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(t){let e=0;switch(this.algorithm=t[e++],this.type){case"simple":break;case"salted":this.salt=t.subarray(e,e+8),e+=8;break;case"iterated":this.salt=t.subarray(e,e+8),e+=8,this.c=t[e++];break;case"gnu":if("GNU"!==O.uint8ArrayToString(t.subarray(e,e+3)))throw new zr("Unknown s2k type.");e+=3;if(1001!==1e3+t[e++])throw new zr("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new zr("Unknown s2k type.")}return e}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...O.stringToUint8Array("GNU"),1]);const t=[new Uint8Array([T.write(T.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":t.push(this.salt);break;case"iterated":t.push(this.salt),t.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return O.concatUint8Array(t)}async produceKey(t,e){t=O.encodeUTF8(t);const r=[];let i=0,n=0;for(;i<e;){let e;switch(this.type){case"simple":e=O.concatUint8Array([new Uint8Array(n),t]);break;case"salted":e=O.concatUint8Array([new Uint8Array(n),this.salt,t]);break;case"iterated":{const r=O.concatUint8Array([this.salt,t]);let i=r.length;const s=Math.max(this.getCount(),i);e=new Uint8Array(n+s),e.set(r,n);for(let t=n+i;t<s;t+=i,i*=2)e.copyWithin(t,n,t);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await nn.hash.digest(this.algorithm,e);r.push(s),i+=s.length,n++}return O.concatUint8Array(r).subarray(0,e)}}const ln=new Set([T.s2k.argon2,T.s2k.iterated]);function fn(t,e=L){switch(t){case T.s2k.argon2:return new hn(e);case T.s2k.iterated:case T.s2k.gnu:case T.s2k.salted:case T.s2k.simple:return new un(t,e);default:throw new zr("Unsupported S2K type")}}function yn(t){const{s2kType:e}=t;if(!ln.has(e))throw Error("The provided `config.s2kType` value is not allowed");return fn(e,t)}var dn=Uint8Array,pn=Uint16Array,gn=Uint32Array,mn=new dn([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),wn=new dn([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),An=new dn([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),bn=function(t,e){for(var r=new pn(31),i=0;i<31;++i)r[i]=e+=1<<t[i-1];var n=new gn(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},vn=bn(mn,2),En=vn[0],kn=vn[1];En[28]=258,kn[258]=28;for(var Sn=bn(wn,0),In=Sn[0],Cn=Sn[1],Bn=new pn(32768),Kn=0;Kn<32768;++Kn){var Pn=(43690&Kn)>>>1|(21845&Kn)<<1;Pn=(61680&(Pn=(52428&Pn)>>>2|(13107&Pn)<<2))>>>4|(3855&Pn)<<4,Bn[Kn]=((65280&Pn)>>>8|(255&Pn)<<8)>>>1}var Dn=function(t,e,r){for(var i=t.length,n=0,s=new pn(e);n<i;++n)t[n]&&++s[t[n]-1];var a,o=new pn(e);for(n=0;n<e;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new pn(1<<e);var c=15-e;for(n=0;n<i;++n)if(t[n])for(var h=n<<4|t[n],u=e-t[n],l=o[t[n]-1]++<<u,f=l|(1<<u)-1;l<=f;++l)a[Bn[l]>>>c]=h}else for(a=new pn(i),n=0;n<i;++n)t[n]&&(a[n]=Bn[o[t[n]-1]++]>>>15-t[n]);return a},Un=new dn(288);for(Kn=0;Kn<144;++Kn)Un[Kn]=8;for(Kn=144;Kn<256;++Kn)Un[Kn]=9;for(Kn=256;Kn<280;++Kn)Un[Kn]=7;for(Kn=280;Kn<288;++Kn)Un[Kn]=8;var Mn=new dn(32);for(Kn=0;Kn<32;++Kn)Mn[Kn]=5;var xn=/*#__PURE__*/Dn(Un,9,0),Qn=/*#__PURE__*/Dn(Un,9,1),Rn=/*#__PURE__*/Dn(Mn,5,0),_n=/*#__PURE__*/Dn(Mn,5,1),Tn=function(t){for(var e=t[0],r=1;r<t.length;++r)t[r]>e&&(e=t[r]);return e},Ln=function(t,e,r){var i=e/8|0;return(t[i]|t[i+1]<<8)>>(7&e)&r},Nn=function(t,e){var r=e/8|0;return(t[r]|t[r+1]<<8|t[r+2]<<16)>>(7&e)},On=function(t){return(t+7)/8|0},Fn=function(t,e,r){(null==e||e<0)&&(e=0),(null==r||r>t.length)&&(r=t.length);var i=new(2==t.BYTES_PER_ELEMENT?pn:4==t.BYTES_PER_ELEMENT?gn:dn)(r-e);return i.set(t.subarray(e,r)),i},Hn=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],zn=function(t,e,r){var i=Error(e||Hn[t]);if(i.code=t,Error.captureStackTrace&&Error.captureStackTrace(i,zn),!r)throw i;return i},Gn=function(t,e,r){r<<=7&e;var i=e/8|0;t[i]|=r,t[i+1]|=r>>>8},qn=function(t,e,r){r<<=7&e;var i=e/8|0;t[i]|=r,t[i+1]|=r>>>8,t[i+2]|=r>>>16},jn=function(t,e){for(var r=[],i=0;i<t.length;++i)t[i]&&r.push({s:i,f:t[i]});var n=r.length,s=r.slice();if(!n)return[Xn,0];if(1==n){var a=new dn(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(t,e){return t.f-e.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var f=s[0].s;for(i=1;i<n;++i)s[i].s>f&&(f=s[i].s);var y=new pn(f+1),d=Vn(r[u-1],y,0);if(d>e){i=0;var p=0,g=d-e,m=1<<g;for(s.sort((function(t,e){return y[e.s]-y[t.s]||t.f-e.f}));i<n;++i){var w=s[i].s;if(!(y[w]>e))break;p+=m-(1<<d-y[w]),y[w]=e}for(p>>>=g;p>0;){var A=s[i].s;y[A]<e?p-=1<<e-y[A]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;y[b]==e&&(--y[b],++p)}d=e}return[new dn(y),d]},Vn=function(t,e,r){return-1==t.s?Math.max(Vn(t.l,e,r+1),Vn(t.r,e,r+1)):e[t.s]=r},Zn=function(t){for(var e=t.length;e&&!t[--e];);for(var r=new pn(++e),i=0,n=t[0],s=1,a=function(t){r[i++]=t},o=1;o<=e;++o)if(t[o]==n&&o!=e)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=t[o]}return[r.subarray(0,i),e]},Jn=function(t,e){for(var r=0,i=0;i<e.length;++i)r+=t[i]*e[i];return r},Yn=function(t,e,r){var i=r.length,n=On(e+2);t[n]=255&i,t[n+1]=i>>>8,t[n+2]=255^t[n],t[n+3]=255^t[n+1];for(var s=0;s<i;++s)t[n+s+4]=r[s];return 8*(n+4+i)},Wn=function(t,e,r,i,n,s,a,o,c,h,u){Gn(e,u++,r),++n[256];for(var l=jn(n,15),f=l[0],y=l[1],d=jn(s,15),p=d[0],g=d[1],m=Zn(f),w=m[0],A=m[1],b=Zn(p),v=b[0],E=b[1],k=new pn(19),S=0;S<w.length;++S)k[31&w[S]]++;for(S=0;S<v.length;++S)k[31&v[S]]++;for(var I=jn(k,7),C=I[0],B=I[1],K=19;K>4&&!C[An[K-1]];--K);var P,D,U,M,x=h+5<<3,Q=Jn(n,Un)+Jn(s,Mn)+a,R=Jn(n,f)+Jn(s,p)+a+14+3*K+Jn(k,C)+(2*k[16]+3*k[17]+7*k[18]);if(x<=Q&&x<=R)return Yn(e,u,t.subarray(c,c+h));if(Gn(e,u,1+(R<Q)),u+=2,R<Q){P=Dn(f,y,0),D=f,U=Dn(p,g,0),M=p;var _=Dn(C,B,0);Gn(e,u,A-257),Gn(e,u+5,E-1),Gn(e,u+10,K-4),u+=14;for(S=0;S<K;++S)Gn(e,u+3*S,C[An[S]]);u+=3*K;for(var T=[w,v],L=0;L<2;++L){var N=T[L];for(S=0;S<N.length;++S){var O=31&N[S];Gn(e,u,_[O]),u+=C[O],O>15&&(Gn(e,u,N[S]>>>5&127),u+=N[S]>>>12)}}}else P=xn,D=Un,U=Rn,M=Mn;for(S=0;S<o;++S)if(i[S]>255){O=i[S]>>>18&31;qn(e,u,P[O+257]),u+=D[O+257],O>7&&(Gn(e,u,i[S]>>>23&31),u+=mn[O]);var F=31&i[S];qn(e,u,U[F]),u+=M[F],F>3&&(qn(e,u,i[S]>>>5&8191),u+=wn[F])}else qn(e,u,P[i[S]]),u+=D[i[S]];return qn(e,u,P[256]),u+D[256]},$n=/*#__PURE__*/new gn([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),Xn=/*#__PURE__*/new dn(0),ts=function(t,e,r,i,n){return function(t,e,r,i,n,s){var a=t.length,o=new dn(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!e||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=Yn(c,h+1,t.subarray(u,l))}else{for(var f=$n[e-1],y=f>>>13,d=8191&f,p=(1<<r)-1,g=new pn(32768),m=new pn(p+1),w=Math.ceil(r/3),A=2*w,b=function(e){return(t[e]^t[e+1]<<w^t[e+2]<<A)&p},v=new gn(25e3),E=new pn(288),k=new pn(32),S=0,I=0,C=(u=0,0),B=0,K=0;u<a;++u){var P=b(u),D=32767&u,U=m[P];if(g[D]=U,m[P]=D,B<=u){var M=a-u;if((S>7e3||C>24576)&&M>423){h=Wn(t,c,0,v,E,k,I,C,K,u-K,h),C=S=I=0,K=u;for(var x=0;x<286;++x)E[x]=0;for(x=0;x<30;++x)k[x]=0}var Q=2,R=0,_=d,T=D-U&32767;if(M>2&&P==b(u-T))for(var L=Math.min(y,M)-1,N=Math.min(32767,u),O=Math.min(258,M);T<=N&&--_&&D!=U;){if(t[u+Q]==t[u+Q-T]){for(var F=0;F<O&&t[u+F]==t[u+F-T];++F);if(F>Q){if(Q=F,R=T,F>L)break;var H=Math.min(T,F-2),z=0;for(x=0;x<H;++x){var G=u-T+x+32768&32767,q=G-g[G]+32768&32767;q>z&&(z=q,U=G)}}}T+=(D=U)-(U=g[D])+32768&32767}if(R){v[C++]=268435456|kn[Q]<<18|Cn[R];var j=31&kn[Q],V=31&Cn[R];I+=mn[j]+wn[V],++E[257+j],++k[V],B=u+Q,++S}else v[C++]=t[u],++E[t[u]]}}h=Wn(t,c,s,v,E,k,I,C,K,u-K,h),!s&&7&h&&(h=Yn(c,h+1,Xn))}return Fn(o,0,i+On(h)+n)}(t,null==e.level?6:e.level,null==e.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(t.length)))):12+e.mem,r,i,!n)},es=/*#__PURE__*/function(){function t(t,e){e||"function"!=typeof t||(e=t,t={}),this.ondata=e,this.o=t||{}}return t.prototype.p=function(t,e){this.ondata(ts(t,this.o,0,0,!e),e)},t.prototype.push=function(t,e){this.ondata||zn(5),this.d&&zn(4),this.d=e,this.p(t,e||!1)},t}(),rs=/*#__PURE__*/function(){function t(t){this.s={},this.p=new dn(0),this.ondata=t}return t.prototype.e=function(t){this.ondata||zn(5),this.d&&zn(4);var e=this.p.length,r=new dn(e+t.length);r.set(this.p),r.set(t,e),this.p=r},t.prototype.c=function(t){this.d=this.s.i=t||!1;var e=this.s.b,r=function(t,e,r){var i=t.length;if(!i||r&&r.f&&!r.l)return e||new dn(0);var n=!e||r,s=!r||r.i;r||(r={}),e||(e=new dn(3*i));var a=function(t){var r=e.length;if(t>r){var i=new dn(Math.max(2*r,t));i.set(e),e=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,f=r.m,y=r.n,d=8*i;do{if(!u){o=Ln(t,c,1);var p=Ln(t,c+1,3);if(c+=3,!p){var g=t[(B=On(c)+4)-4]|t[B-3]<<8,m=B+g;if(m>i){s&&zn(0);break}n&&a(h+g),e.set(t.subarray(B,m),h),r.b=h+=g,r.p=c=8*m,r.f=o;continue}if(1==p)u=Qn,l=_n,f=9,y=5;else if(2==p){var w=Ln(t,c,31)+257,A=Ln(t,c+10,15)+4,b=w+Ln(t,c+5,31)+1;c+=14;for(var v=new dn(b),E=new dn(19),k=0;k<A;++k)E[An[k]]=Ln(t,c+3*k,7);c+=3*A;var S=Tn(E),I=(1<<S)-1,C=Dn(E,S,1);for(k=0;k<b;){var B,K=C[Ln(t,c,I)];if(c+=15&K,(B=K>>>4)<16)v[k++]=B;else{var P=0,D=0;for(16==B?(D=3+Ln(t,c,3),c+=2,P=v[k-1]):17==B?(D=3+Ln(t,c,7),c+=3):18==B&&(D=11+Ln(t,c,127),c+=7);D--;)v[k++]=P}}var U=v.subarray(0,w),M=v.subarray(w);f=Tn(U),y=Tn(M),u=Dn(U,f,1),l=Dn(M,y,1)}else zn(1);if(c>d){s&&zn(0);break}}n&&a(h+131072);for(var x=(1<<f)-1,Q=(1<<y)-1,R=c;;R=c){var _=(P=u[Nn(t,c)&x])>>>4;if((c+=15&P)>d){s&&zn(0);break}if(P||zn(2),_<256)e[h++]=_;else{if(256==_){R=c,u=null;break}var T=_-254;if(_>264){var L=mn[k=_-257];T=Ln(t,c,(1<<L)-1)+En[k],c+=L}var N=l[Nn(t,c)&Q],O=N>>>4;if(N||zn(3),c+=15&N,M=In[O],O>3&&(L=wn[O],M+=Nn(t,c)&(1<<L)-1,c+=L),c>d){s&&zn(0);break}n&&a(h+131072);for(var F=h+T;h<F;h+=4)e[h]=e[h-M],e[h+1]=e[h+1-M],e[h+2]=e[h+2-M],e[h+3]=e[h+3-M];h=F}}r.l=u,r.p=R,r.b=h,r.f=o,u&&(o=1,r.m=f,r.d=l,r.n=y)}while(!o);return h==e.length?e:Fn(e,0,h)}(this.p,this.o,this.s);this.ondata(Fn(r,e,this.s.b),this.d),this.o=Fn(r,this.s.b-32768),this.s.b=this.o.length,this.p=Fn(this.p,this.s.p/8|0),this.s.p&=7},t.prototype.push=function(t,e){this.e(t),this.c(e)},t}(),is=/*#__PURE__*/function(){function t(t,e){var r,i;this.c=(r=1,i=0,{p:function(t){for(var e=r,n=i,s=0|t.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=e+=t[a];e=(65535&e)+15*(e>>16),n=(65535&n)+15*(n>>16)}r=e,i=n},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(i%=65521))<<8|i>>>8}}),this.v=1,es.call(this,t,e)}return t.prototype.push=function(t,e){es.prototype.push.call(this,t,e)},t.prototype.p=function(t,e){this.c.p(t);var r=ts(t,this.o,this.v&&2,e&&4,!e);this.v&&(function(t,e){var r=e.level,i=0==r?0:r<6?1:9==r?3:2;t[0]=120,t[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),e&&function(t,e,r){for(;r;++e)t[e]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,e)},t}(),ns=/*#__PURE__*/function(){function t(t){this.v=1,rs.call(this,t)}return t.prototype.push=function(t,e){if(rs.prototype.e.call(this,t),this.v){if(this.p.length<2&&!e)return;this.p=this.p.subarray(2),this.v=0}e&&(this.p.length<4&&zn(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),rs.prototype.c.call(this,e)},t}(),ss="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{ss.decode(Xn,{stream:!0}),1}catch(t){}var as=void 0!==t?t:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function os(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default")?t.default:t}var cs=[0,1,3,7,15,31,63,127,255],hs=function(t){this.stream=t,this.bitOffset=0,this.curByte=0,this.hasByte=!1};hs.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},hs.prototype.read=function(t){for(var e=0;t>0;){this._ensureByte();var r=8-this.bitOffset;if(t>=r)e<<=r,e|=cs[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,t-=r;else{e<<=t;var i=r-t;e|=(this.curByte&cs[t]<<i)>>i,this.bitOffset+=t,t=0}}return e},hs.prototype.seek=function(t){var e=t%8,r=(t-e)/8;this.bitOffset=e,this.stream.seek(r),this.hasByte=!1},hs.prototype.pi=function(){var t,e=new Uint8Array(6);for(t=0;t<e.length;t++)e[t]=this.read(8);return function(t){return Array.prototype.map.call(t,(t=>("00"+t.toString(16)).slice(-2))).join("")}(e)};var us=hs,ls=function(){};ls.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},ls.prototype.read=function(t,e,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;t[e++]=n,i++}return i},ls.prototype.seek=function(t){throw Error("abstract method seek() not implemented")},ls.prototype.writeByte=function(t){throw Error("abstract method readByte() not implemented")},ls.prototype.write=function(t,e,r){var i;for(i=0;i<r;i++)this.writeByte(t[e++]);return r},ls.prototype.flush=function(){};var fs,ys=ls,ds=(fs=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var t=4294967295;this.getCRC=function(){return~t>>>0},this.updateCRC=function(e){t=t<<8^fs[255&(t>>>24^e)]},this.updateCRCRun=function(e,r){for(;r-- >0;)t=t<<8^fs[255&(t>>>24^e)]}}),ps=us,gs=ys,ms=ds,ws=function(t,e){var r,i=t[e];for(r=e;r>0;r--)t[r]=t[r-1];return t[0]=i,i},As={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},bs={};bs[As.LAST_BLOCK]="Bad file checksum",bs[As.NOT_BZIP_DATA]="Not bzip data",bs[As.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",bs[As.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",bs[As.DATA_ERROR]="Data error",bs[As.OUT_OF_MEMORY]="Out of memory",bs[As.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var vs=function(t,e){var r=bs[t]||"unknown error";e&&(r+=": "+e);var i=new TypeError(r);throw i.errorCode=t,i},Es=function(t,e){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(t,e)};Es.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new ms,!0):(this.writeCount=-1,!1)},Es.prototype._start_bunzip=function(t,e){var r=new Uint8Array(4);4===t.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||vs(As.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&vs(As.NOT_BZIP_DATA,"level out of range"),this.reader=new ps(t),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=e,this.streamCRC=0},Es.prototype._get_next_block=function(){var t,e,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&vs(As.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&vs(As.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&vs(As.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(t=0;t<16;t++)if(a&1<<15-t){var h=16*t;for(r=i.read(16),e=0;e<16;e++)r&1<<15-e&&(o[c++]=h+e)}var u=i.read(3);(u<2||u>6)&&vs(As.DATA_ERROR);var l=i.read(15);0===l&&vs(As.DATA_ERROR);var f=new Uint8Array(256);for(t=0;t<u;t++)f[t]=t;var y=new Uint8Array(l);for(t=0;t<l;t++){for(e=0;i.read(1);e++)e>=u&&vs(As.DATA_ERROR);y[t]=ws(f,e)}var d,p=c+2,g=[];for(e=0;e<u;e++){var m,w,A=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),t=0;t<p;t++){for(;(a<1||a>20)&&vs(As.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;A[t]=a}for(m=w=A[0],t=1;t<p;t++)A[t]>w?w=A[t]:A[t]<m&&(m=A[t]);d={},g.push(d),d.permute=new Uint16Array(258),d.limit=new Uint32Array(22),d.base=new Uint32Array(21),d.minLen=m,d.maxLen=w;var v=0;for(t=m;t<=w;t++)for(b[t]=d.limit[t]=0,a=0;a<p;a++)A[a]===t&&(d.permute[v++]=a);for(t=0;t<p;t++)b[A[t]]++;for(v=a=0,t=m;t<w;t++)v+=b[t],d.limit[t]=v-1,v<<=1,a+=b[t],d.base[t+1]=v-a;d.limit[w+1]=Number.MAX_VALUE,d.limit[w]=v+b[w]-1,d.base[m]=0}var E=new Uint32Array(256);for(t=0;t<256;t++)f[t]=t;var k,S=0,I=0,C=0,B=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,C>=l&&vs(As.DATA_ERROR),d=g[y[C++]]),t=d.minLen,e=i.read(t);t>d.maxLen&&vs(As.DATA_ERROR),!(e<=d.limit[t]);t++)e=e<<1|i.read(1);((e-=d.base[t])<0||e>=258)&&vs(As.DATA_ERROR);var K=d.permute[e];if(0!==K&&1!==K){if(S)for(S=0,I+a>this.dbufSize&&vs(As.DATA_ERROR),E[k=o[f[0]]]+=a;a--;)B[I++]=k;if(K>c)break;I>=this.dbufSize&&vs(As.DATA_ERROR),E[k=o[k=ws(f,t=K-1)]]++,B[I++]=k}else S||(S=1,a=0),a+=0===K?S:2*S,S<<=1}for((s<0||s>=I)&&vs(As.DATA_ERROR),e=0,t=0;t<256;t++)r=e+E[t],E[t]=e,e=r;for(t=0;t<I;t++)B[E[k=255&B[t]]]|=t<<8,E[k]++;var P=0,D=0,U=0;return I&&(D=255&(P=B[s]),P>>=8,U=-1),this.writePos=P,this.writeCurrent=D,this.writeCount=I,this.writeRun=U,!0},Es.prototype._read_bunzip=function(t,e){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&vs(As.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var ks=function(t){if("readByte"in t)return t;var e=new gs;return e.pos=0,e.readByte=function(){return t[this.pos++]},e.seek=function(t){this.pos=t},e.eof=function(){return this.pos>=t.length},e},Ss=function(t){var e=new gs,r=!0;if(t)if("number"==typeof t)e.buffer=new Uint8Array(t),r=!1;else{if("writeByte"in t)return t;e.buffer=t,r=!1}else e.buffer=new Uint8Array(16384);return e.pos=0,e.writeByte=function(t){if(r&&this.pos>=this.buffer.length){var e=new Uint8Array(2*this.buffer.length);e.set(this.buffer),this.buffer=e}this.buffer[this.pos++]=t},e.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var t=new Uint8Array(this.pos);t.set(this.buffer.subarray(0,this.pos)),this.buffer=t}return this.buffer},e._coerced=!0,e};var Is=function(t,e,r){for(var i=ks(t),n=Ss(e),s=new Es(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&vs(As.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class Cs{static get tag(){return T.packet.literalData}constructor(t=new Date){this.format=T.literal.utf8,this.date=O.normalizeDate(t),this.text=null,this.data=null,this.filename=""}setText(t,e=T.literal.utf8){this.format=e,this.text=t,this.data=null}getText(t=!1){return(null===this.text||O.isStream(this.text))&&(this.text=O.decodeUTF8(O.nativeEOL(this.getBytes(t)))),this.text}setBytes(t,e){this.format=e,this.data=t,this.text=null}getBytes(t=!1){return null===this.data&&(this.data=O.canonicalizeEOL(O.encodeUTF8(this.text))),t?K(this.data):this.data}setFilename(t){this.filename=t}getFilename(){return this.filename}async read(t){await C(t,(async t=>{const e=await t.readByte(),r=await t.readByte();this.filename=O.decodeUTF8(await t.readBytes(r)),this.date=O.readDate(await t.readBytes(4));let i=t.remainder();u(i)&&(i=await U(i)),this.setBytes(i,e)}))}writeHeader(){const t=O.encodeUTF8(this.filename),e=new Uint8Array([t.length]),r=new Uint8Array([this.format]),i=O.writeDate(this.date);return O.concatUint8Array([r,e,t,i])}write(){const t=this.writeHeader(),e=this.getBytes();return O.concat([t,e])}}class Bs{constructor(){this.bytes=""}read(t){return this.bytes=O.uint8ArrayToString(t.subarray(0,8)),this.bytes.length}write(){return O.stringToUint8Array(this.bytes)}toHex(){return O.uint8ArrayToHex(O.stringToUint8Array(this.bytes))}equals(t,e=!1){return e&&(t.isWildcard()||this.isWildcard())||this.bytes===t.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(t){return t.toHex()}static fromID(t){const e=new Bs;return e.read(O.hexToUint8Array(t)),e}static wildcard(){const t=new Bs;return t.read(new Uint8Array(8)),t}}const Ks=Symbol("verified"),Ps="salt@notations.openpgpjs.org",Ds=new Set([T.signatureSubpacket.issuerKeyID,T.signatureSubpacket.issuerFingerprint,T.signatureSubpacket.embeddedSignature]);class Us{static get tag(){return T.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Bs,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Ks]=null}read(t){let e=0;if(this.version=t[e++],4!==this.version&&5!==this.version&&6!==this.version)throw new zr(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=t[e++],this.publicKeyAlgorithm=t[e++],this.hashAlgorithm=t[e++],e+=this.readSubPackets(t.subarray(e,t.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=t.subarray(0,e),e+=this.readSubPackets(t.subarray(e,t.length),!1),this.signedHashValue=t.subarray(e,e+2),e+=2,6===this.version){const r=t[e++];this.salt=t.subarray(e,e+r),e+=r}const r=t.subarray(e,t.length),{read:i,signatureParams:n}=nn.signature.parseSignatureParams(this.publicKeyAlgorithm,r);if(i<r.length)throw Error("Error reading MPIs");this.params=n}writeParams(){return this.params instanceof Promise?x((async()=>nn.serializeParams(this.publicKeyAlgorithm,await this.params))):nn.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const t=[];return t.push(this.signatureData),t.push(this.writeUnhashedSubPackets()),t.push(this.signedHashValue),6===this.version&&(t.push(new Uint8Array([this.salt.length])),t.push(this.salt)),t.push(this.writeParams()),O.concat(t)}async sign(t,e,r=new Date,i=!1,n){this.version=t.version,this.created=O.normalizeDate(r),this.issuerKeyVersion=t.version,this.issuerFingerprint=t.getFingerprintBytes(),this.issuerKeyID=t.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const t=xs(this.hashAlgorithm);if(null===this.salt)this.salt=nn.random.getRandomBytes(t);else if(t!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(n.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:t})=>t===Ps)).length)throw Error("Unexpected existing salt notation");{const t=nn.random.getRandomBytes(xs(this.hashAlgorithm));this.rawNotations.push({name:Ps,value:t,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=O.concat(s);const a=this.toHash(this.signatureType,e,i),o=await this.hash(this.signatureType,e,a,i);this.signedHashValue=D(B(o),0,2);const c=async()=>nn.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,t.publicParams,t.privateParams,a,await U(o));O.isStream(o)?this.params=c():(this.params=await c(),this[Ks]=!0)}writeHashedSubPackets(){const t=T.signatureSubpacket,e=[];let r;if(null===this.created)throw Error("Missing signature creation time");e.push(Ms(t.signatureCreationTime,!0,O.writeDate(this.created))),null!==this.signatureExpirationTime&&e.push(Ms(t.signatureExpirationTime,!0,O.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&e.push(Ms(t.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),e.push(Ms(t.trustSignature,!0,r))),null!==this.regularExpression&&e.push(Ms(t.regularExpression,!0,this.regularExpression)),null!==this.revocable&&e.push(Ms(t.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&e.push(Ms(t.keyExpirationTime,!0,O.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredSymmetricAlgorithms)),e.push(Ms(t.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=O.concat([r,this.revocationKeyFingerprint]),e.push(Ms(t.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&e.push(Ms(t.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=O.encodeUTF8(i);r.push(O.writeNumber(o.length,2)),r.push(O.writeNumber(n.length,2)),r.push(o),r.push(n),r=O.concat(r),e.push(Ms(t.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredHashAlgorithms)),e.push(Ms(t.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredCompressionAlgorithms)),e.push(Ms(t.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyServerPreferences)),e.push(Ms(t.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&e.push(Ms(t.preferredKeyServer,!1,O.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&e.push(Ms(t.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&e.push(Ms(t.policyURI,!1,O.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyFlags)),e.push(Ms(t.keyFlags,!0,r))),null!==this.signersUserID&&e.push(Ms(t.signersUserID,!1,O.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=O.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),e.push(Ms(t.reasonForRevocation,!0,r))),null!==this.features&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.features)),e.push(Ms(t.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(O.stringToUint8Array(this.signatureTargetHash)),r=O.concat(r),e.push(Ms(t.signatureTarget,!0,r))),null!==this.embeddedSignature&&e.push(Ms(t.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=O.concat(r),e.push(Ms(t.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredAEADAlgorithms)),e.push(Ms(t.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),e.push(Ms(t.preferredCipherSuites,!1,r)));const i=O.concat(e),n=O.writeNumber(i.length,6===this.version?4:2);return O.concat([n,i])}writeUnhashedSubPackets(){const t=[];this.unhashedSubpackets.forEach((e=>{t.push(Tr(e.length)),t.push(e)}));const e=O.concat(t),r=O.writeNumber(e.length,6===this.version?4:2);return O.concat([r,e])}readSubPacket(t,e=!0){let r=0;const i=!!(128&t[r]),n=127&t[r];if(e||(this.unhashedSubpackets.push(t.subarray(r,t.length)),Ds.has(n)))switch(r++,n){case T.signatureSubpacket.signatureCreationTime:this.created=O.readDate(t.subarray(r,t.length));break;case T.signatureSubpacket.signatureExpirationTime:{const e=O.readNumber(t.subarray(r,t.length));this.signatureNeverExpires=0===e,this.signatureExpirationTime=e;break}case T.signatureSubpacket.exportableCertification:this.exportable=1===t[r++];break;case T.signatureSubpacket.trustSignature:this.trustLevel=t[r++],this.trustAmount=t[r++];break;case T.signatureSubpacket.regularExpression:this.regularExpression=t[r];break;case T.signatureSubpacket.revocable:this.revocable=1===t[r++];break;case T.signatureSubpacket.keyExpirationTime:{const e=O.readNumber(t.subarray(r,t.length));this.keyExpirationTime=e,this.keyNeverExpires=0===e;break}case T.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.revocationKey:this.revocationKeyClass=t[r++],this.revocationKeyAlgorithm=t[r++],this.revocationKeyFingerprint=t.subarray(r,r+20);break;case T.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(t.subarray(r,t.length));else if(e)throw Error("Unexpected Issuer Key ID subpacket");break;case T.signatureSubpacket.notationData:{const e=!!(128&t[r]);r+=4;const n=O.readNumber(t.subarray(r,r+2));r+=2;const s=O.readNumber(t.subarray(r,r+2));r+=2;const a=O.decodeUTF8(t.subarray(r,r+n)),o=t.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:e,value:o,critical:i}),e&&(this.notations[a]=O.decodeUTF8(o));break}case T.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=O.decodeUTF8(t.subarray(r,t.length));break;case T.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==t[r++];break;case T.signatureSubpacket.policyURI:this.policyURI=O.decodeUTF8(t.subarray(r,t.length));break;case T.signatureSubpacket.keyFlags:this.keyFlags=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.signersUserID:this.signersUserID=O.decodeUTF8(t.subarray(r,t.length));break;case T.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=t[r++],this.reasonForRevocationString=O.decodeUTF8(t.subarray(r,t.length));break;case T.signatureSubpacket.features:this.features=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=t[r++],this.signatureTargetHashAlgorithm=t[r++];const e=nn.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=O.uint8ArrayToString(t.subarray(r,r+e));break}case T.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Us,this.embeddedSignature.read(t.subarray(r,t.length));break;case T.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=t[r++],this.issuerFingerprint=t.subarray(r,t.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case T.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let e=r;e<t.length;e+=2)this.preferredCipherSuites.push([t[e],t[e+1]]);break;default:{const t=Error("Unknown signature subpacket type "+n);if(i)throw t;O.printDebug(t)}}}readSubPackets(t,e=!0,r){const i=6===this.version?4:2,n=O.readNumber(t.subarray(0,i));let s=i;for(;s<2+n;){const i=_r(t.subarray(s,t.length));s+=i.offset,this.readSubPacket(t.subarray(s,s+i.len),e,r),s+=i.len}return s}toSign(t,e){const r=T.signature;switch(t){case r.binary:return null!==e.text?O.encodeUTF8(e.getText(!0)):e.getBytes(!0);case r.text:{const t=e.getBytes(!0);return O.canonicalizeEOL(t)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let t,i;if(e.userID)i=180,t=e.userID;else{if(!e.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,t=e.userAttribute}const n=t.write();return O.concat([this.toSign(r.key,e),new Uint8Array([i]),O.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return O.concat([this.toSign(r.key,e),this.toSign(r.key,{key:e.bind})]);case r.key:if(void 0===e.key)throw Error("Key packet is required for this signature.");return e.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,e);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(t,e){let r=0;return S(B(this.signatureData),(t=>{r+=t.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==T.signature.binary&&this.signatureType!==T.signature.text||(e?i.push(new Uint8Array(6)):i.push(t.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(O.writeNumber(r,4)),O.concat(i)}))}toHash(t,e,r=!1){const i=this.toSign(t,e);return O.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(e,r)])}async hash(t,e,r,i=!1){if(6===this.version&&this.salt.length!==xs(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(t,e,i)),nn.hash.digest(this.hashAlgorithm,r)}async verify(t,e,r,i=new Date,n=!1,s=L){if(!this.issuerKeyID.equals(t.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==t.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=e===T.signature.binary||e===T.signature.text;if(!(this[Ks]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(e,r,n),s=await this.hash(e,r,i)),s=await U(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===T.publicKey.hmac?t.privateParams:null;if(this[Ks]=await nn.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,t.publicParams,a,i,s),!this[Ks])throw Error("Signature verification failed")}const o=O.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+T.read(T.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[T.signature.binary,T.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+T.read(T.hash,this.hashAlgorithm).toUpperCase());if(this.rawNotations.forEach((({name:t,critical:e})=>{if(e&&s.knownNotations.indexOf(t)<0)throw Error("Unknown critical notation: "+t)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(t=new Date){const e=O.normalizeDate(t);return null!==e&&!(this.created<=e&&e<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ms(t,e,r){const i=[];return i.push(Tr(r.length+1)),i.push(new Uint8Array([(e?128:0)|t])),i.push(r),O.concat(i)}function xs(t){switch(t){case T.hash.sha256:return 16;case T.hash.sha384:return 24;case T.hash.sha512:return 32;case T.hash.sha224:case T.hash.sha3_256:return 16;case T.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Qs{static get tag(){return T.packet.onePassSignature}static fromSignaturePacket(t,e){const r=new Qs;return r.version=6===t.version?6:3,r.signatureType=t.signatureType,r.hashAlgorithm=t.hashAlgorithm,r.publicKeyAlgorithm=t.publicKeyAlgorithm,r.issuerKeyID=t.issuerKeyID,r.salt=t.salt,r.issuerFingerprint=t.issuerFingerprint,r.flags=e?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(t){let e=0;if(this.version=t[e++],3!==this.version&&6!==this.version)throw new zr(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=t[e++],this.hashAlgorithm=t[e++],this.publicKeyAlgorithm=t[e++],6===this.version){const r=t[e++];this.salt=t.subarray(e,e+r),e+=r,this.issuerFingerprint=t.subarray(e,e+32),e+=32,this.issuerKeyID=new Bs,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Bs,this.issuerKeyID.read(t.subarray(e,e+8)),e+=8;return this.flags=t[e++],this}write(){const t=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?t.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):t.push(this.issuerKeyID.write()),t.push(new Uint8Array([this.flags])),O.concatUint8Array(t)}calculateTrailer(...t){return x((async()=>Us.prototype.calculateTrailer.apply(await this.correspondingSig,t)))}async verify(){const t=await this.correspondingSig;if(!t||t.constructor.tag!==T.packet.signature)throw Error("Corresponding signature packet missing");if(t.signatureType!==this.signatureType||t.hashAlgorithm!==this.hashAlgorithm||t.publicKeyAlgorithm!==this.publicKeyAlgorithm||!t.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===t.version||6===this.version&&6!==t.version||6===this.version&&!O.equalsUint8Array(t.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!O.equalsUint8Array(t.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return t.hashed=this.hashed,t.verify.apply(t,arguments)}}function Rs(t,e){if(!e[t]){let e;try{e=T.read(T.packet,t)}catch(e){throw new Gr("Unknown packet type with tag: "+t)}throw Error("Packet not allowed in this context: "+e)}return new e[t]}Qs.prototype.hash=Us.prototype.hash,Qs.prototype.toHash=Us.prototype.toHash,Qs.prototype.toSign=Us.prototype.toSign;class _s extends Array{static async fromBinary(t,e,r=L){const i=new _s;return await i.read(t,e,r),i}async read(t,e,r=L){r.additionalAllowedPackets.length&&(e={...e,...O.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=I(t,(async(t,i)=>{const n=R(i);try{for(;;){await n.ready;if(await Hr(t,(async t=>{try{if(t.tag===T.packet.marker||t.tag===T.packet.trust||t.tag===T.packet.padding)return;const i=Rs(t.tag,e);i.packets=new _s,i.fromStream=O.isStream(t.packet),await i.read(t.packet,r),await n.write(i)}catch(e){if(e instanceof Gr){if(!(t.tag<=39))return;await n.abort(e)}const i=!r.ignoreUnsupportedPackets&&e instanceof zr,s=!(r.ignoreMalformedPackets||e instanceof zr);if(i||s||Fr(t.tag))await n.abort(e);else{const e=new qr(t.tag,t.packet);await n.write(e)}O.printDebugError(e)}})))return await n.ready,void await n.close()}}catch(t){await n.abort(t)}}));const i=Q(this.stream);for(;;){const{done:t,value:e}=await i.read();if(t?this.stream=null:this.push(e),t||Fr(e.constructor.tag))break}i.releaseLock()}write(){const t=[];for(let e=0;e<this.length;e++){const r=this[e]instanceof qr?this[e].tag:this[e].constructor.tag,i=this[e].write();if(O.isStream(i)&&Fr(this[e].constructor.tag)){let e=[],n=0;const s=512;t.push(Nr(r)),t.push(S(i,(t=>{if(e.push(t),n+=t.length,n>=s){const t=Math.min(Math.log(n)/Math.LN2|0,30),r=2**t,i=O.concat([Lr(t)].concat(e));return e=[i.subarray(1+r)],n=e[0].length,i.subarray(0,1+r)}}),(()=>O.concat([Tr(n)].concat(e)))))}else{if(O.isStream(i)){let e=0;t.push(S(B(i),(t=>{e+=t.length}),(()=>Or(r,e))))}else t.push(Or(r,i.length));t.push(i)}}return O.concat(t)}filterByTag(...t){const e=new _s,r=t=>e=>t===e;for(let i=0;i<this.length;i++)t.some(r(this[i].constructor.tag))&&e.push(this[i]);return e}findPacket(t){return this.find((e=>e.constructor.tag===t))}indexOfTag(...t){const e=[],r=this,i=t=>e=>t===e;for(let n=0;n<this.length;n++)t.some(i(r[n].constructor.tag))&&e.push(n);return e}}const Ts=/*#__PURE__*/O.constructAllowedPackets([Cs,Qs,Us]);class Ls{static get tag(){return T.packet.compressedData}constructor(t=L){this.packets=null,this.algorithm=t.preferredCompressionAlgorithm,this.compressed=null}async read(t,e=L){await C(t,(async t=>{this.algorithm=await t.readByte(),this.compressed=t.remainder(),await this.decompress(e)}))}write(){return null===this.compressed&&this.compress(),O.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(t=L){const e=T.read(T.compression,this.algorithm),r=zs[e];if(!r)throw Error(e+" decompression not supported");this.packets=await _s.fromBinary(r(this.compressed),Ts,t)}compress(){const t=T.read(T.compression,this.algorithm),e=Hs[t];if(!e)throw Error(t+" compression not supported");this.compressed=e(this.packets.write())}}function Ns(t,e){return r=>{if(!O.isStream(r)||u(r))return x((()=>U(r).then((t=>new Promise(((r,i)=>{const n=new e;n.ondata=t=>{r(t)};try{n.push(t,!0)}catch(t){i(t)}}))))));if(t)try{const e=t();return r.pipeThrough(e)}catch(t){if("TypeError"!==t.name)throw t}const i=r.getReader(),n=new e;return new ReadableStream({async start(t){for(n.ondata=async(e,r)=>{t.enqueue(e),r&&t.close()};;){const{done:t,value:e}=await i.read();if(t)return void n.push(new Uint8Array,!0);e.length&&n.push(e)}}})}}function Os(t){return function(e){return x((async()=>t(await U(e))))}}const Fs=t=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(t)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(t))}),Hs={zip:/*#__PURE__*/Ns(Fs("deflate-raw").compressor,es),zlib:/*#__PURE__*/Ns(Fs("deflate").compressor,is)},zs={uncompressed:t=>t,zip:/*#__PURE__*/Ns(Fs("deflate-raw").decompressor,rs),zlib:/*#__PURE__*/Ns(Fs("deflate").decompressor,ns),bzip2:/*#__PURE__*/Os(Is)},Gs=/*#__PURE__*/O.constructAllowedPackets([Cs,Ls,Qs,Us]);class qs{static get tag(){return T.packet.symEncryptedIntegrityProtectedData}static fromObject({version:t,aeadAlgorithm:e}){if(1!==t&&2!==t)throw Error("Unsupported SEIPD version");const r=new qs;return r.version=t,2===t&&(r.aeadAlgorithm=e),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(t){await C(t,(async t=>{if(this.version=await t.readByte(),1!==this.version&&2!==this.version)throw new zr(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await t.readByte(),this.aeadAlgorithm=await t.readByte(),this.chunkSizeByte=await t.readByte(),this.salt=await t.readBytes(32)),this.encrypted=t.remainder()}))}write(){return 2===this.version?O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):O.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(t,e,r=L){let i=this.packets.write();if(u(i)&&(i=await U(i)),2===this.version)this.cipherAlgorithm=t,this.salt=nn.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await js(this,"encrypt",e,i);else{const{blockSize:n}=nn.getCipherParams(t),s=await nn.getPrefixRandom(t),a=new Uint8Array([211,20]),o=O.concat([s,i,a]),c=await nn.hash.sha1(K(o)),h=O.concat([o,c]);this.encrypted=await nn.mode.cfb.encrypt(t,e,h,new Uint8Array(n),r)}return!0}async decrypt(t,e,r=L){let i,n=B(this.encrypted);if(u(n)&&(n=await U(n)),2===this.version)i=await js(this,"decrypt",e,n);else{const{blockSize:s}=nn.getCipherParams(t),a=await nn.mode.cfb.decrypt(t,e,n,new Uint8Array(s)),o=D(K(a),-20),c=D(a,0,-20),h=Promise.all([U(await nn.hash.sha1(K(c))),U(o)]).then((([t,e])=>{if(!O.equalsUint8Array(t,e))throw Error("Modification detected.");return new Uint8Array})),u=D(c,s+2);i=D(u,0,-2),i=b([i,x((()=>h))]),O.isStream(n)&&r.allowUnauthenticatedStream||(i=await U(i))}return this.packets=await _s.fromBinary(i,Gs,r),!0}}async function js(t,e,r,i){const n=t instanceof qs&&2===t.version,s=!n&&t.constructor.tag===T.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=nn.getAEADMode(t.aeadAlgorithm),o="decrypt"===e?a.tagLength:0,c="encrypt"===e?a.tagLength:0,h=2**(t.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),f=new Uint8Array(l,0,5+u),y=new Uint8Array(l),d=new DataView(l),p=new Uint8Array(l,5,8);f.set([192|t.constructor.tag,t.version,t.cipherAlgorithm,t.aeadAlgorithm,t.chunkSizeByte],0);let g,m,w=0,A=Promise.resolve(),b=0,E=0;if(n){const{keySize:e}=nn.getCipherParams(t.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await xi(T.hash.sha256,r,t.salt,n,e+i);r=s.subarray(0,e),g=s.subarray(e),g.fill(0,g.length-8),m=new DataView(g.buffer,g.byteOffset,g.byteLength)}else g=t.iv;const k=await a(t.cipherAlgorithm,r);return I(i,(async(r,i)=>{if("array"!==O.isStream(r)){const e=new TransformStream({},{highWaterMark:O.getHardwareConcurrency()*2**(t.chunkSizeByte+6),size:t=>t.length});v(e.readable,i),i=e.writable}const s=Q(r),a=R(i);try{for(;;){let t=await s.readBytes(h+o)||new Uint8Array;const r=t.subarray(t.length-o);let i,l,v;if(t=t.subarray(0,t.length-o),n)v=g;else{v=g.slice();for(let t=0;t<8;t++)v[g.length-8+t]^=p[t]}if(!w||t.length?(s.unshift(r),i=k[e](t,v,f),i.catch((()=>{})),E+=t.length-o+c):(d.setInt32(5+u+4,b),i=k[e](r,v,y),i.catch((()=>{})),E+=c,l=!0),b+=t.length-o,A=A.then((()=>i)).then((async t=>{await a.ready,await a.write(t),E-=t.length})).catch((t=>a.abort(t))),(l||E>a.desiredSize)&&await A,l){await a.close();break}n?m.setInt32(g.length-4,++w):d.setInt32(9,++w)}}catch(t){await a.ready.catch((()=>{})),await a.abort(t)}}))}const Vs=/*#__PURE__*/O.constructAllowedPackets([Cs,Ls,Qs,Us]);class Zs{static get tag(){return T.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=T.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(t){await C(t,(async t=>{const e=await t.readByte();if(1!==e)throw new zr(`Version ${e} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await t.readByte(),this.aeadAlgorithm=await t.readByte(),this.chunkSizeByte=await t.readByte();const r=nn.getAEADMode(this.aeadAlgorithm);this.iv=await t.readBytes(r.ivLength),this.encrypted=t.remainder()}))}write(){return O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(t,e,r=L){this.packets=await _s.fromBinary(await js(this,"decrypt",e,B(this.encrypted)),Vs,r)}async encrypt(t,e,r=L){this.cipherAlgorithm=t;const{ivLength:i}=nn.getAEADMode(this.aeadAlgorithm);this.iv=nn.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await js(this,"encrypt",e,n)}}class Js{static get tag(){return T.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Bs,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:t,encryptionKeyPacket:e,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new Js;if(3!==t&&6!==t)throw Error("Unsupported PKESK version");return s.version=t,6===t&&(s.publicKeyVersion=r?null:e.version,s.publicKeyFingerprint=r?null:e.getFingerprintBytes()),s.publicKeyID=r?Bs.wildcard():e.getKeyID(),s.publicKeyAlgorithm=e.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(t){let e=0;if(this.version=t[e++],3!==this.version&&6!==this.version)throw new zr(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=t[e++];if(r){this.publicKeyVersion=t[e++];const i=r-1;this.publicKeyFingerprint=t.subarray(e,e+i),e+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Bs.wildcard()}else e+=this.publicKeyID.read(t.subarray(e,e+8));if(this.publicKeyAlgorithm=t[e++],this.encrypted=nn.parseEncSessionKeyParams(this.publicKeyAlgorithm,t.subarray(e)),this.publicKeyAlgorithm===T.publicKey.x25519||this.publicKeyAlgorithm===T.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=T.write(T.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const t=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(t.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),t.push(this.publicKeyFingerprint)):t.push(new Uint8Array([0])):t.push(this.publicKeyID.write()),t.push(new Uint8Array([this.publicKeyAlgorithm]),nn.serializeParams(this.publicKeyAlgorithm,this.encrypted)),O.concatUint8Array(t)}async encrypt(t){const e=T.write(T.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,i=Ys(this.version,e,r,this.sessionKey),n=e===T.publicKey.aead?t.privateParams:null;this.encrypted=await nn.publicKeyEncrypt(e,r,t.publicParams,n,i,t.getFingerprintBytes())}async decrypt(t,e){if(this.publicKeyAlgorithm!==t.algorithm)throw Error("Decryption error");const r=e?Ys(this.version,this.publicKeyAlgorithm,e.sessionKeyAlgorithm,e.sessionKey):null,i=await nn.publicKeyDecrypt(this.publicKeyAlgorithm,t.publicParams,t.privateParams,this.encrypted,t.getFingerprintBytes(),r),{sessionKey:n,sessionKeyAlgorithm:s}=function(t,e,r,i){switch(e){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.aead:{const e=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=O.writeChecksum(e.subarray(e.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===t?{sessionKeyAlgorithm:null,sessionKey:e}:{sessionKeyAlgorithm:e[0],sessionKey:e.subarray(1)};if(i){const e=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:O.selectUint8Array(e,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===t?null:O.selectUint8(e,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===t||T.read(T.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case T.publicKey.x25519:case T.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,e);3===this.version&&this.publicKeyAlgorithm!==T.publicKey.x25519&&this.publicKeyAlgorithm!==T.publicKey.x448&&(this.sessionKeyAlgorithm=s),this.sessionKey=n}}function Ys(t,e,r,i){switch(e){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.aead:return O.concatUint8Array([new Uint8Array(6===t?[]:[r]),i,O.writeChecksum(i.subarray(i.length%8))]);case T.publicKey.x25519:case T.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class Ws{static get tag(){return T.packet.symEncryptedSessionKey}constructor(t=L){this.version=t.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=T.symmetric.aes256,this.aeadAlgorithm=T.write(T.aead,t.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(t){let e=0;if(this.version=t[e++],4!==this.version&&5!==this.version&&6!==this.version)throw new zr(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&e++;const r=t[e++];this.version>=5&&(this.aeadAlgorithm=t[e++],6===this.version&&e++);const i=t[e++];if(this.s2k=fn(i),e+=this.s2k.read(t.subarray(e,t.length)),this.version>=5){const r=nn.getAEADMode(this.aeadAlgorithm);this.iv=t.subarray(e,e+=r.ivLength)}this.version>=5||e<t.length?(this.encrypted=t.subarray(e,t.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const t=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let e;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;e=O.concatUint8Array([new Uint8Array([this.version,n,t,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?e=O.concatUint8Array([new Uint8Array([this.version,t,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(e=O.concatUint8Array([new Uint8Array([this.version,t]),r]),null!==this.encrypted&&(e=O.concatUint8Array([e,this.encrypted])));return e}async decrypt(t){const e=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=nn.getCipherParams(e),n=await this.s2k.produceKey(t,i);if(this.version>=5){const t=nn.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|Ws.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await xi(T.hash.sha256,n,new Uint8Array,r,i):n,a=await t(e,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const t=await nn.mode.cfb.decrypt(e,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=T.write(T.symmetric,t[0]),this.sessionKey=t.subarray(1,t.length)}else this.sessionKey=n}async encrypt(t,e=L){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=yn(e),this.s2k.generateSalt();const{blockSize:i,keySize:n}=nn.getCipherParams(r),s=await this.s2k.produceKey(t,n);if(null===this.sessionKey&&(this.sessionKey=nn.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const t=nn.getAEADMode(this.aeadAlgorithm);this.iv=nn.random.getRandomBytes(t.ivLength);const e=new Uint8Array([192|Ws.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await xi(T.hash.sha256,s,new Uint8Array,e,n):s,a=await t(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,e)}else{const t=O.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await nn.mode.cfb.encrypt(r,s,t,new Uint8Array(i),e)}}}class $s{static get tag(){return T.packet.publicKey}constructor(t=new Date,e=L){this.version=e.v6Keys?6:4,this.created=O.normalizeDate(t),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(t){const e=new $s,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=t;return e.version=r,e.created=i,e.algorithm=n,e.publicParams=s,e.keyID=a,e.fingerprint=o,e}async read(t){let e=0;if(this.version=t[e++],4===this.version||5===this.version||6===this.version){this.created=O.readDate(t.subarray(e,e+4)),e+=4,this.algorithm=t[e++],this.version>=5&&(e+=4);const{read:r,publicParams:i}=nn.parsePublicKeyParams(this.algorithm,t.subarray(e));if(6===this.version&&i.oid&&(i.oid.getName()===T.curve.curve25519Legacy||i.oid.getName()===T.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,e+=r,await this.computeFingerprintAndKeyID(),e}throw new zr(`Version ${this.version} of the key packet is unsupported.`)}write(){const t=[];t.push(new Uint8Array([this.version])),t.push(O.writeDate(this.created)),t.push(new Uint8Array([this.algorithm]));const e=nn.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&t.push(O.writeNumber(e.length,4)),t.push(e),O.concatUint8Array(t)}writeForHash(t){const e=this.writePublicKey(),r=149+t,i=t>=5?4:2;return O.concatUint8Array([new Uint8Array([r]),O.writeNumber(e.length,i),e])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Bs,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const t=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await nn.hash.sha256(t);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await nn.hash.sha1(t)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return O.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(t){return this.version===t.version&&O.equalsUint8Array(this.writePublicKey(),t.writePublicKey())}getAlgorithmInfo(){const t={};t.algorithm=T.read(T.publicKey,this.algorithm);const e=this.publicParams.n||this.publicParams.p;return e?t.bits=O.uint8ArrayBitLength(e):this.publicParams.oid?t.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(t.symmetric=this.publicParams.cipher.getName()),t}}$s.prototype.readPublicKey=$s.prototype.read,$s.prototype.writePublicKey=$s.prototype.write;const Xs=/*#__PURE__*/O.constructAllowedPackets([Cs,Ls,Qs,Us]);class ta{static get tag(){return T.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(t){this.encrypted=t}write(){return this.encrypted}async decrypt(t,e,r=L){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=nn.getCipherParams(t),n=await U(B(this.encrypted)),s=await nn.mode.cfb.decrypt(t,e,n.subarray(i+2),n.subarray(2,i+2));this.packets=await _s.fromBinary(s,Xs,r)}async encrypt(t,e,r=L){const i=this.packets.write(),{blockSize:n}=nn.getCipherParams(t),s=await nn.getPrefixRandom(t),a=await nn.mode.cfb.encrypt(t,e,s,new Uint8Array(n),r),o=await nn.mode.cfb.encrypt(t,e,i,a.subarray(2),r);this.encrypted=O.concat([a,o])}}class ea extends $s{static get tag(){return T.packet.publicSubkey}constructor(t,e){super(t,e)}static fromSecretSubkeyPacket(t){const e=new ea,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=t;return e.version=r,e.created=i,e.algorithm=n,e.publicParams=s,e.keyID=a,e.fingerprint=o,e}}class ra{static get tag(){return T.packet.userAttribute}constructor(){this.attributes=[]}read(t){let e=0;for(;e<t.length;){const r=_r(t.subarray(e,t.length));e+=r.offset,this.attributes.push(O.uint8ArrayToString(t.subarray(e,e+r.len))),e+=r.len}}write(){const t=[];for(let e=0;e<this.attributes.length;e++)t.push(Tr(this.attributes[e].length)),t.push(O.stringToUint8Array(this.attributes[e]));return O.concatUint8Array(t)}equals(t){return!!(t&&t instanceof ra)&&this.attributes.every((function(e,r){return e===t.attributes[r]}))}}class ia extends $s{static get tag(){return T.packet.secretKey}constructor(t=new Date,e=L){super(t,e),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(t,e=L){let r=await this.readPublicKey(t);const i=r;this.s2kUsage=t[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=t[r++],253===this.s2kUsage&&(this.aead=t[r++]),6===this.version&&r++;const e=t[r++];if(this.s2k=fn(e),r+=this.s2k.read(t.subarray(r,t.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&e.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=t.subarray(r,r+nn.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=t.subarray(r,r+nn.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(e){if(!this.s2kUsage)throw e;this.unparseableKeyMaterial=t.subarray(i),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=t.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let t;if(6===this.version)t=this.keyMaterial;else if(t=this.keyMaterial.subarray(0,-2),!O.equalsUint8Array(O.writeChecksum(t),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:e,privateParams:r}=nn.parsePrivateKeyParams(this.algorithm,t,this.publicParams);if(e<t.length)throw Error("Error reading MPIs");this.privateParams=r}catch(t){if(t instanceof zr)throw t;throw Error("Error reading MPIs")}}}write(){const t=this.writePublicKey();if(this.unparseableKeyMaterial)return O.concatUint8Array([t,this.unparseableKeyMaterial]);const e=[t];e.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const t=this.s2k.write();6===this.version&&r.push(t.length),r.push(...t)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&e.push(new Uint8Array([r.length])),e.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=nn.serializeParams(this.algorithm,this.privateParams)),5===this.version&&e.push(O.writeNumber(this.keyMaterial.length,4)),e.push(this.keyMaterial),this.s2kUsage||6===this.version||e.push(O.writeChecksum(this.keyMaterial))),O.concatUint8Array(e)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(t=L){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=fn(T.s2k.gnu,t),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=T.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(t,e=L){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!t)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=yn(e),this.s2k.generateSalt();const r=nn.serializeParams(this.algorithm,this.privateParams);this.symmetric=T.symmetric.aes256;const{blockSize:i}=nn.getCipherParams(this.symmetric);if(e.aeadProtect){this.s2kUsage=253,this.aead=T.aead.eax;const e=nn.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const n=Nr(this.constructor.tag),s=await na(this.version,this.s2k,t,this.symmetric,this.aead,n),a=await e(this.symmetric,s);this.iv=this.isLegacyAEAD?nn.random.getRandomBytes(i):nn.random.getRandomBytes(e.ivLength);const o=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([n,this.writePublicKey()]);this.keyMaterial=await a.encrypt(r,this.iv.subarray(0,e.ivLength),o)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const n=await na(this.version,this.s2k,t,this.symmetric);this.iv=nn.random.getRandomBytes(i),this.keyMaterial=await nn.mode.cfb.encrypt(this.symmetric,n,O.concatUint8Array([r,await nn.hash.sha1(r,e)]),this.iv,e)}}async decrypt(t){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let e;const r=Nr(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(e=await na(this.version,this.s2k,t,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const t=nn.getAEADMode(this.aead),n=await t(this.symmetric,e);try{const e=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,t.ivLength),e)}catch(t){if("Authentication tag mismatch"===t.message)throw Error("Incorrect key passphrase: "+t.message);throw t}}else{const t=await nn.mode.cfb.decrypt(this.symmetric,e,this.keyMaterial,this.iv);i=t.subarray(0,-20);const r=await nn.hash.sha1(i);if(!O.equalsUint8Array(r,t.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:t}=nn.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=t}catch(t){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let t;try{t=await nn.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(e){t=!1}if(!t)throw Error("Key is invalid")}async generate(t,e,r){if(6===this.version&&(this.algorithm===T.publicKey.ecdh&&e===T.curve.curve25519Legacy||this.algorithm===T.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${e}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await nn.generateParams(this.algorithm,t,e,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((t=>{this.privateParams[t].fill(0),delete this.privateParams[t]})),this.privateParams=null,this.isEncrypted=!0)}}async function na(t,e,r,i,n,s,a){const{keySize:o}=nn.getCipherParams(i),c=await e.produceKey(r,o);if(!n||5===t||a)return c;const h=O.concatUint8Array([s,new Uint8Array([t,i,n])]);return xi(T.hash.sha256,c,new Uint8Array,h,o)}class sa{static get tag(){return T.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(t){if(O.isString(t)||t.name&&!O.isString(t.name)||t.email&&!O.isEmailAddress(t.email)||t.comment&&!O.isString(t.comment))throw Error("Invalid user ID format");const e=new sa;Object.assign(e,t);const r=[];return e.name&&r.push(e.name),e.comment&&r.push(`(${e.comment})`),e.email&&r.push(`<${e.email}>`),e.userID=r.join(" "),e}read(t,e=L){const r=O.decodeUTF8(t);if(r.length>e.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:t,comment:e,email:r}=i.groups;this.comment=e?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=t?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return O.encodeUTF8(this.userID)}equals(t){return t&&t.userID===this.userID}}class aa extends ia{static get tag(){return T.packet.secretSubkey}constructor(t=new Date,e=L){super(t,e)}}const oa=/*#__PURE__*/O.constructAllowedPackets([Us]);class ca{constructor(t){this.packets=t||new _s}write(){return this.packets.write()}armor(t=L){const e=this.packets.some((t=>t.constructor.tag===Us.tag&&6!==t.version));return rt(T.armor.signature,this.write(),void 0,void 0,void 0,e,t)}getSigningKeyIDs(){return this.packets.map((t=>t.issuerKeyID))}}async function ha(t,e){const r=new aa(t.date,e);return r.packets=null,r.algorithm=T.write(T.publicKey,t.algorithm),await r.generate(t.rsaBits,t.curve,t.symmetric),await r.computeFingerprintAndKeyID(),r}async function ua(t,e){const r=new ia(t.date,e);return r.packets=null,r.algorithm=T.write(T.publicKey,t.algorithm),await r.generate(t.rsaBits,t.curve,t.symmetric),await r.computeFingerprintAndKeyID(),r}async function la(t,e,r,i,n=new Date,s){let a,o;for(let c=t.length-1;c>=0;c--)try{(!a||t[c].created>=a.created)&&(await t[c].verify(e,r,i,n,void 0,s),a=t[c])}catch(t){o=t}if(!a)throw O.wrapError(`Could not find valid ${T.read(T.signature,r)} signature in key ${e.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((t,e,r)=>e+" "+r.toLowerCase())),o);return a}function fa(t,e,r=new Date){const i=O.normalizeDate(r);if(null!==i){const r=ma(t,e);return!(t.created<=i&&i<r)}return!1}async function ya(t,e,r,i){const n={};n.key=e,n.bind=t;const s={signatureType:T.signature.subkeyBinding};r.sign?(s.keyFlags=[T.keyFlags.signData],s.embeddedSignature=await da(n,null,t,{signatureType:T.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[T.keyFlags.forwardedCommunication]:[T.keyFlags.encryptCommunication|T.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await da(n,null,e,s,r.date,void 0,void 0,void 0,i)}async function da(t,e,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Us;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(t,e,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(t){const e=await t.getPrimarySelfSignature(r,i,n);e.preferredHashAlgorithms&&([a]=e.preferredHashAlgorithms,s=nn.hash.getHashByteLength(s)<=nn.hash.getHashByteLength(a)?a:s)}switch(e.algorithm){case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:case T.publicKey.ed25519:case T.publicKey.ed448:a=nn.getPreferredCurveHashAlgo(e.algorithm,e.publicParams.oid)}return nn.hash.getHashByteLength(s)<=nn.hash.getHashByteLength(a)?a:s}(e,r,n,s,c),h.rawNotations=[...a],await h.sign(r,t,n,o,c),h}async function pa(t,e,r,i=new Date,n){(t=t[r])&&(e[r].length?await Promise.all(t.map((async function(t){t.isExpired(i)||n&&!await n(t)||e[r].some((function(e){return O.equalsUint8Array(e.writeParams(),t.writeParams())}))||e[r].push(t)}))):e[r]=t)}async function ga(t,e,r,i,n,s,a=new Date,o){s=s||t;const c=[];return await Promise.all(i.map((async function(t){try{n&&!t.issuerKeyID.equals(n.issuerKeyID)||(await t.verify(s,e,r,a,!1,o),c.push(t.issuerKeyID))}catch(t){}}))),n?(n.revoked=!!c.some((t=>t.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function ma(t,e){let r;return!1===e.keyNeverExpires&&(r=t.created.getTime()+1e3*e.keyExpirationTime),r?new Date(r):1/0}function wa(t,e={}){if(t.type=t.type||e.type,t.curve=t.curve||e.curve,t.rsaBits=t.rsaBits||e.rsaBits,t.symmetricHash=t.symmetricHash||e.symmetricHash,t.symmetricCipher=t.symmetricCipher||e.symmetricCipher,t.keyExpirationTime=void 0!==t.keyExpirationTime?t.keyExpirationTime:e.keyExpirationTime,t.passphrase=O.isString(t.passphrase)?t.passphrase:e.passphrase,t.date=t.date||e.date,t.sign=t.sign||!1,t.forwarding=t.forwarding||!1,t.sign&&t.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(t.type){case"ecc":try{t.curve=T.write(T.curve,t.curve)}catch(t){throw Error("Unknown curve")}t.curve!==T.curve.ed25519Legacy&&t.curve!==T.curve.curve25519Legacy&&"ed25519"!==t.curve&&"curve25519"!==t.curve||(t.curve=t.sign?T.curve.ed25519Legacy:T.curve.curve25519Legacy),t.sign?t.algorithm=t.curve===T.curve.ed25519Legacy?T.publicKey.eddsaLegacy:T.publicKey.ecdsa:t.algorithm=T.publicKey.ecdh;break;case"curve25519":t.algorithm=t.sign?T.publicKey.ed25519:T.publicKey.x25519;break;case"curve448":t.algorithm=t.sign?T.publicKey.ed448:T.publicKey.x448;break;case"rsa":t.algorithm=T.publicKey.rsaEncryptSign;break;case"symmetric":if(t.sign){t.algorithm=T.publicKey.hmac;try{t.symmetric=T.write(T.hash,t.symmetricHash)}catch(t){throw Error("Unknown hash algorithm")}}else{t.algorithm=T.publicKey.aead;try{t.symmetric=T.write(T.symmetric,t.symmetricCipher)}catch(t){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+t.type)}return t}function Aa(t,e,r){switch(t.algorithm){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:case T.publicKey.dsa:case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:case T.publicKey.ed25519:case T.publicKey.ed448:case T.publicKey.hmac:if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!e.keyFlags||!!(e.keyFlags[0]&T.keyFlags.signData);default:return!1}}function ba(t,e,r){switch(t.algorithm){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.x25519:case T.publicKey.x448:case T.publicKey.aead:if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!e.keyFlags||!!(e.keyFlags[0]&T.keyFlags.encryptCommunication)||!!(e.keyFlags[0]&T.keyFlags.encryptStorage);default:return!1}}function va(t,e,r){if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(t.algorithm){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.x25519:case T.publicKey.x448:return!(!(!e.keyFlags||!!(e.keyFlags[0]&T.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!e.keyFlags||!!(e.keyFlags[0]&T.keyFlags.encryptCommunication)||!!(e.keyFlags[0]&T.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(e.keyFlags[0]&T.keyFlags.forwardedCommunication));default:return!1}}function Ea(t,e){const r=T.write(T.publicKey,t.algorithm),i=t.getAlgorithmInfo();if(e.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:case T.publicKey.rsaEncrypt:if(i.bits<e.minRSABits)throw Error(`RSA keys shorter than ${e.minRSABits} bits are considered too weak.`);break;case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:case T.publicKey.ecdh:if(e.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class ka{constructor(t,e){this.userID=t.constructor.tag===T.packet.userID?t:null,this.userAttribute=t.constructor.tag===T.packet.userAttribute?t:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=e}toPacketList(){const t=new _s;return t.push(this.userID||this.userAttribute),t.push(...this.revocationSignatures),t.push(...this.selfCertifications),t.push(...this.otherCertifications),t}clone(){const t=new ka(this.userID||this.userAttribute,this.mainKey);return t.selfCertifications=[...this.selfCertifications],t.otherCertifications=[...this.otherCertifications],t.revocationSignatures=[...this.revocationSignatures],t}async certify(t,e,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new ka(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(t.map((async function(t){if(!t.isPrivate())throw Error("Need private key for signing");if(t.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await t.getSigningKey(void 0,e,void 0,r);return da(n,t,s.keyPacket,{signatureType:T.signature.certGeneric,keyFlags:[T.keyFlags.certifyKeys|T.keyFlags.signData]},e,void 0,void 0,void 0,r)}))),await s.update(this,e,r),s}async isRevoked(t,e,r=new Date,i=L){const n=this.mainKey.keyPacket;return ga(n,T.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,t,e,r,i)}async verifyCertificate(t,e,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=t,c=e.filter((t=>t.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async e=>{const s=await e.getSigningKey(o,t.created,void 0,i);if(t.revoked||await n.isRevoked(t,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await t.verify(s.keyPacket,T.signature.certGeneric,a,r,void 0,i)}catch(t){throw O.wrapError("User certificate is invalid",t)}}))),!0)}async verifyAllCertifications(t,e=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,t,e,r).catch((()=>!1))}))))}async verify(t=new Date,e){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,t,e))throw Error("Self-certification is revoked");try{await s.verify(i,T.signature.certGeneric,n,t,void 0,e)}catch(t){throw O.wrapError("Self-certification is invalid",t)}return!0}catch(t){s=t}throw s}async update(t,e,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await pa(t,this,"selfCertifications",e,(async function(t){try{return await t.verify(i,T.signature.certGeneric,n,e,!1,r),!0}catch(t){return!1}})),await pa(t,this,"otherCertifications",e),await pa(t,this,"revocationSignatures",e,(function(t){return ga(i,T.signature.certRevocation,n,[t],void 0,void 0,e,r)}))}async revoke(t,{flag:e=T.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=L){const s={userID:this.userID,userAttribute:this.userAttribute,key:t},a=new ka(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await da(s,null,t,{signatureType:T.signature.certRevocation,reasonForRevocationFlag:T.write(T.reasonForRevocation,e),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class Sa{constructor(t,e){this.keyPacket=t,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=e}toPacketList(){const t=new _s;return t.push(this.keyPacket),t.push(...this.revocationSignatures),t.push(...this.bindingSignatures),t}clone(){const t=new Sa(this.keyPacket,this.mainKey);return t.bindingSignatures=[...this.bindingSignatures],t.revocationSignatures=[...this.revocationSignatures],t}async isRevoked(t,e,r=new Date,i=L){const n=this.mainKey.keyPacket;return ga(n,T.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,t,e,r,i)}async verify(t=new Date,e=L){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await la(this.bindingSignatures,r,T.signature.subkeyBinding,i,t,e);if(n.revoked||await this.isRevoked(n,null,t,e))throw Error("Subkey is revoked");if(fa(this.keyPacket,n,t))throw Error("Subkey is expired");return n}async getExpirationTime(t=new Date,e=L){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await la(this.bindingSignatures,r,T.signature.subkeyBinding,i,t,e)}catch(t){return null}const s=ma(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(t,e=new Date,r=L){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(t))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===T.packet.publicSubkey&&t.keyPacket.constructor.tag===T.packet.secretSubkey&&(this.keyPacket=t.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await pa(t,this,"bindingSignatures",e,(async function(t){for(let e=0;e<n.bindingSignatures.length;e++)if(n.bindingSignatures[e].issuerKeyID.equals(t.issuerKeyID))return t.created>n.bindingSignatures[e].created&&(n.bindingSignatures[e]=t),!1;try{return await t.verify(i,T.signature.subkeyBinding,s,e,void 0,r),!0}catch(t){return!1}})),await pa(t,this,"revocationSignatures",e,(function(t){return ga(i,T.signature.subkeyRevocation,s,[t],void 0,void 0,e,r)}))}async revoke(t,{flag:e=T.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=L){const s={key:t,bind:this.keyPacket},a=new Sa(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await da(s,null,t,{signatureType:T.signature.subkeyRevocation,reasonForRevocationFlag:T.write(T.reasonForRevocation,e),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(t){return this.keyPacket.hasSameFingerprintAs(t.keyPacket||t)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((t=>{Sa.prototype[t]=function(){return this.keyPacket[t]()}}));const Ia=/*#__PURE__*/O.constructAllowedPackets([Us]),Ca=new Set([T.packet.publicKey,T.packet.privateKey]),Ba=new Set([T.packet.publicKey,T.packet.privateKey,T.packet.publicSubkey,T.packet.privateSubkey]);class Ka{packetListToStructure(t,e=new Set){let r,i,n,s;for(const a of t){if(a instanceof qr){Ba.has(a.tag)&&!s&&(s=Ca.has(a.tag)?Ca:Ba);continue}const t=a.constructor.tag;if(s){if(!s.has(t))continue;s=null}if(e.has(t))throw Error("Unexpected packet type: "+t);switch(t){case T.packet.publicKey:case T.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case T.packet.userID:case T.packet.userAttribute:r=new ka(a,this),this.users.push(r);break;case T.packet.publicSubkey:case T.packet.secretSubkey:r=null,n=new Sa(a,this),this.subkeys.push(n);break;case T.packet.signature:switch(a.signatureType){case T.signature.certGeneric:case T.signature.certPersona:case T.signature.certCasual:case T.signature.certPositive:if(!r){O.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case T.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case T.signature.key:this.directSignatures.push(a);break;case T.signature.subkeyBinding:if(!n){O.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case T.signature.keyRevocation:this.revocationSignatures.push(a);break;case T.signature.subkeyRevocation:if(!n){O.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const t=new _s;return t.push(this.keyPacket),t.push(...this.revocationSignatures),t.push(...this.directSignatures),this.users.map((e=>t.push(...e.toPacketList()))),this.subkeys.map((e=>t.push(...e.toPacketList()))),t}clone(t=!1){const e=new this.constructor(this.toPacketList());return t&&e.getKeys().forEach((t=>{if(t.keyPacket=Object.create(Object.getPrototypeOf(t.keyPacket),Object.getOwnPropertyDescriptors(t.keyPacket)),!t.keyPacket.isDecrypted())return;const e={};Object.keys(t.keyPacket.privateParams).forEach((r=>{e[r]=new Uint8Array(t.keyPacket.privateParams[r])})),t.keyPacket.privateParams=e})),e}getSubkeys(t=null){return this.subkeys.filter((e=>!t||e.getKeyID().equals(t,!0)))}getKeys(t=null){const e=[];return t&&!this.getKeyID().equals(t,!0)||e.push(this),e.concat(this.getSubkeys(t))}getKeyIDs(){return this.getKeys().map((t=>t.getKeyID()))}getUserIDs(){return this.users.map((t=>t.userID?t.userID.userID:null)).filter((t=>null!==t))}write(){return this.toPacketList().write()}async getSigningKey(t=null,e=new Date,r={},i=L){await this.verifyPrimaryKey(e,r,i);const n=this.keyPacket;try{Ea(n,i)}catch(t){throw O.wrapError("Could not verify primary key",t)}const s=this.subkeys.slice().sort(((t,e)=>e.keyPacket.created-t.keyPacket.created));let a;for(const r of s)if(!t||r.getKeyID().equals(t))try{await r.verify(e,i);const t={key:n,bind:r.keyPacket},s=await la(r.bindingSignatures,n,T.signature.subkeyBinding,t,e,i);if(!Aa(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await la([s.embeddedSignature],r.keyPacket,T.signature.keyBinding,t,e,i),Ea(r.keyPacket,i),r}catch(t){a=t}try{const s=await this.getPrimarySelfSignature(e,r,i);if((!t||n.getKeyID().equals(t))&&Aa(n,s,i))return Ea(n,i),this}catch(t){a=t}throw O.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(t,e=new Date,r={},i=L){await this.verifyPrimaryKey(e,r,i);const n=this.keyPacket;try{Ea(n,i)}catch(t){throw O.wrapError("Could not verify primary key",t)}const s=this.subkeys.slice().sort(((t,e)=>e.keyPacket.created-t.keyPacket.created));let a;for(const r of s)if(!t||r.getKeyID().equals(t))try{await r.verify(e,i);const t={key:n,bind:r.keyPacket},s=await la(r.bindingSignatures,n,T.signature.subkeyBinding,t,e,i);if(ba(r.keyPacket,s,i))return Ea(r.keyPacket,i),r}catch(t){a=t}try{const s=await this.getPrimarySelfSignature(e,r,i);if((!t||n.getKeyID().equals(t))&&ba(n,s,i))return Ea(n,i),this}catch(t){a=t}throw O.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(t,e,r=new Date,i=L){return ga(this.keyPacket,T.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,t,e,r,i)}async verifyPrimaryKey(t=new Date,e={},r=L){const i=this.keyPacket;if(await this.isRevoked(null,null,t,r))throw Error("Primary key is revoked");if(fa(i,await this.getPrimarySelfSignature(t,e,r),t))throw Error("Primary key is expired");if(6!==i.version){const e=await la(this.directSignatures,i,T.signature.key,{key:i},t,r).catch((()=>{}));if(e&&fa(i,e,t))throw Error("Primary key is expired")}}async getExpirationTime(t,e=L){let r;try{const i=await this.getPrimarySelfSignature(null,t,e),n=ma(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await la(this.directSignatures,this.keyPacket,T.signature.key,{key:this.keyPacket},null,e).catch((()=>{}));if(a){const t=ma(this.keyPacket,a);r=Math.min(n,s,t)}else r=n<s?n:s}catch(t){r=null}return O.normalizeDate(r)}async getPrimarySelfSignature(t=new Date,e={},r=L){const i=this.keyPacket;if(6===i.version)return la(this.directSignatures,i,T.signature.key,{key:i},t,r);const{selfCertification:n}=await this.getPrimaryUser(t,e,r);return n}async getPrimaryUser(t=new Date,e={},r=L){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==e.name&&s.userID.name!==e.name||void 0!==e.email&&s.userID.email!==e.email||void 0!==e.comment&&s.userID.comment!==e.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await la(s.selfCertifications,i,T.signature.certGeneric,o,t,r);n.push({index:a,user:s,selfCertification:c})}catch(t){s=t}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(e){return e.selfCertification.revoked||e.user.isRevoked(e.selfCertification,null,t,r)})));const a=n.sort((function(t,e){const r=t.selfCertification,i=e.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,t,r))throw Error("Primary user is revoked");return a}async update(t,e=new Date,r=L){if(!this.hasSameFingerprintAs(t))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&t.isPrivate()){if(!(this.subkeys.length===t.subkeys.length&&this.subkeys.every((e=>t.subkeys.some((t=>e.hasSameFingerprintAs(t)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return t.update(this,r)}const i=this.clone();return await pa(t,i,"revocationSignatures",e,(n=>ga(i.keyPacket,T.signature.keyRevocation,i,[n],null,t.keyPacket,e,r))),await pa(t,i,"directSignatures",e),await Promise.all(t.users.map((async t=>{const n=i.users.filter((e=>t.userID&&t.userID.equals(e.userID)||t.userAttribute&&t.userAttribute.equals(e.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(t,e,r))));else{const e=t.clone();e.mainKey=i,i.users.push(e)}}))),await Promise.all(t.subkeys.map((async t=>{const n=i.subkeys.filter((e=>e.hasSameFingerprintAs(t)));if(n.length>0)await Promise.all(n.map((i=>i.update(t,e,r))));else{const e=t.clone();e.mainKey=i,i.subkeys.push(e)}}))),i}async getRevocationCertificate(t=new Date,e=L){const r={key:this.keyPacket},i=await la(this.revocationSignatures,this.keyPacket,T.signature.keyRevocation,r,t,e),n=new _s;n.push(i);const s=6!==this.keyPacket.version;return rt(T.armor.publicKey,n.write(),null,null,"This is a revocation certificate",s,e)}async applyRevocationCertificate(t,e=new Date,r=L){const i=await et(t),n=(await _s.fromBinary(i.data,Ia,r)).findPacket(T.packet.signature);if(!n||n.signatureType!==T.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,T.signature.keyRevocation,{key:this.keyPacket},e,void 0,r)}catch(t){throw O.wrapError("Could not verify revocation signature",t)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(t,e,r,i=L){const{index:n,user:s}=await this.getPrimaryUser(e,r,i),a=await s.certify(t,e,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(t,e=new Date,r=L){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(t,e,r)}))),i}async verifyPrimaryUser(t,e=new Date,r,i=L){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(e,r,i);return t?await s.verifyAllCertifications(t,e,i):[{keyID:n.getKeyID(),valid:await s.verify(e,i).catch((()=>!1))}]}async verifyAllUsers(t,e=new Date,r=L){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=t?await s.verifyAllCertifications(t,e,r):[{keyID:i.getKeyID(),valid:await s.verify(e,r).catch((()=>!1))}];n.push(...a.map((t=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:t.keyID,valid:t.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((t=>{Ka.prototype[t]=Sa.prototype[t]}));class Pa extends Ka{constructor(t){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],t&&(this.packetListToStructure(t,new Set([T.packet.secretKey,T.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(t=L){const e=6!==this.keyPacket.version;return rt(T.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,e,t)}}class Da extends Pa{constructor(t){if(super(),this.packetListToStructure(t,new Set([T.packet.publicKey,T.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const t=new _s,e=this.toPacketList();let r=!1;for(const i of e)if(!r||i.constructor.tag!==T.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case T.packet.secretKey:{if(i.algorithm===T.publicKey.aead||i.algorithm===T.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const e=$s.fromSecretKeyPacket(i);t.push(e);break}case T.packet.secretSubkey:{if(i.algorithm===T.publicKey.aead||i.algorithm===T.publicKey.hmac){r=!0;break}const e=ea.fromSecretSubkeyPacket(i);t.push(e);break}default:t.push(i)}return new Pa(t)}armor(t=L){const e=6!==this.keyPacket.version;return rt(T.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,e,t)}async getDecryptionKeys(t,e=new Date,r={},i=L){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!t||this.subkeys[r].getKeyID().equals(t,!0))try{const t={key:n,bind:this.subkeys[r].keyPacket},a=await la(this.subkeys[r].bindingSignatures,n,T.signature.subkeyBinding,t,e,i);va(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(t){}const a=await this.getPrimarySelfSignature(e,r,i);return t&&!n.getKeyID().equals(t,!0)||!va(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:t})=>t.isDecrypted()))}async validate(t=L){if(!this.isPrivate())throw Error("Cannot validate a public key");let e;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...t,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(e=r.keyPacket)}else e=this.keyPacket;if(e)return e.validate();{const t=this.getKeys();if(t.map((t=>t.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(t.map((async t=>t.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:t})=>{t.isDecrypted()&&t.clearPrivateParams()}))}async revoke({flag:t=T.reasonForRevocation.noReason,string:e=""}={},r=new Date,i=L){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await da(n,null,this.keyPacket,{signatureType:T.signature.keyRevocation,reasonForRevocationFlag:T.write(T.reasonForRevocation,t),reasonForRevocationString:e},r,void 0,void 0,void 0,i)),s}async addSubkey(t={}){const e={...L,...t.config};if(t.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(t.rsaBits<e.minRSABits)throw Error(`rsaBits should be at least ${e.minRSABits}, got: ${t.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(t){switch(T.write(T.publicKey,t)){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:case T.publicKey.dsa:return"rsa";case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:return"ecc";case T.publicKey.ed25519:return"curve25519";case T.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",t=wa(t,i);const n=await ha(t,{...e,v6Keys:6===this.keyPacket.version});Ea(n,e);const s=await ya(n,r,t,e),a=this.toPacketList();return a.push(n,s),new Da(a)}}const Ua=/*#__PURE__*/O.constructAllowedPackets([$s,ea,ia,aa,sa,ra,Us]);function Ma(t){for(const e of t)switch(e.constructor.tag){case T.packet.secretKey:return new Da(t);case T.packet.publicKey:return new Pa(t)}throw Error("No key packet found")}async function xa(t,e,r,i){r.passphrase&&await t.encrypt(r.passphrase,i),await Promise.all(e.map((async function(t,e){const n=r.subkeys[e].passphrase;n&&await t.encrypt(n,i)})));const n=new _s;function s(t,e){return[e,...t.filter((t=>t!==e))]}function a(){const e={};e.keyFlags=[T.keyFlags.certifyKeys|T.keyFlags.signData];const n=s([T.symmetric.aes256,T.symmetric.aes128],i.preferredSymmetricAlgorithm);if(e.preferredSymmetricAlgorithms=n,i.aeadProtect){const t=s([T.aead.gcm,T.aead.eax,T.aead.ocb],i.preferredAEADAlgorithm);e.preferredCipherSuites=t.flatMap((t=>n.map((e=>[e,t]))))}return e.preferredHashAlgorithms=s([T.hash.sha256,T.hash.sha512,...6===t.version?[T.hash.sha3_256,T.hash.sha3_512]:[]],i.preferredHashAlgorithm),e.preferredCompressionAlgorithms=s([T.compression.uncompressed,T.compression.zlib,T.compression.zip],i.preferredCompressionAlgorithm),e.features=[0],e.features[0]|=T.features.modificationDetection,i.aeadProtect&&(e.features[0]|=T.features.seipdv2),r.keyExpirationTime>0&&(e.keyExpirationTime=r.keyExpirationTime,e.keyNeverExpires=!1),e}if(n.push(t),6===t.version){const e={key:t},s=a();s.signatureType=T.signature.key;const o=await da(e,null,t,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(e,n){const s=sa.fromObject(e),o={userID:s,key:t},c=6!==t.version?a():{};c.signatureType=T.signature.certGeneric,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await da(o,null,t,c,r.date,void 0,void 0,void 0,i)}}))).then((t=>{t.forEach((({userIDPacket:t,signaturePacket:e})=>{n.push(t),n.push(e)}))})),await Promise.all(e.map((async function(e,n){const s=r.subkeys[n];return{secretSubkeyPacket:e,subkeySignaturePacket:await ya(e,t,s,i)}}))).then((t=>{t.forEach((({secretSubkeyPacket:t,subkeySignaturePacket:e})=>{n.push(t),n.push(e)}))}));const o={key:t};return n.push(await da(o,null,t,{signatureType:T.signature.keyRevocation,reasonForRevocationFlag:T.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&t.clearPrivateParams(),await Promise.all(e.map((async function(t,e){r.subkeys[e].passphrase&&t.clearPrivateParams()}))),new Da(n)}const Qa=/*#__PURE__*/O.constructAllowedPackets([Cs,Ls,Zs,qs,ta,Js,Ws,Qs,Us]),Ra=/*#__PURE__*/O.constructAllowedPackets([Ws]),_a=/*#__PURE__*/O.constructAllowedPackets([Us]);class Ta{constructor(t){this.packets=t||new _s}getEncryptionKeyIDs(){const t=[];return this.packets.filterByTag(T.packet.publicKeyEncryptedSessionKey).forEach((function(e){t.push(e.publicKeyID)})),t}getSigningKeyIDs(){const t=this.unwrapCompressed(),e=t.packets.filterByTag(T.packet.onePassSignature);if(e.length>0)return e.map((t=>t.issuerKeyID));return t.packets.filterByTag(T.packet.signature).map((t=>t.issuerKeyID))}async decrypt(t,e,r,i=new Date,n=L){const s=this.packets.filterByTag(T.packet.symmetricallyEncryptedData,T.packet.symEncryptedIntegrityProtectedData,T.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(t,e,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:t,data:e})=>{if(!O.isUint8Array(e)||!a.cipherAlgorithm&&!O.isString(t))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||T.write(T.symmetric,t);await a.decrypt(r,e,n)}catch(t){O.printDebugError(t),h=t}})));if(M(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new Ta(a.packets);return a.packets=new _s,l}async decryptSessionKeys(t,e,r,i=new Date,n=L){let s,a=[];if(e){const t=this.packets.filterByTag(T.packet.symEncryptedSessionKey);if(0===t.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(e.map((async function(e,r){let i;i=r?await _s.fromBinary(t.write(),Ra,n):t,await Promise.all(i.map((async function(t){try{await t.decrypt(e),a.push(t)}catch(t){O.printDebugError(t),t instanceof sn&&(s=t)}})))})))}else{if(!t)throw Error("No key or password specified.");{const e=this.packets.filterByTag(T.packet.publicKeyEncryptedSessionKey);if(0===e.length)throw Error("No public key encrypted session key packet found.");await Promise.all(e.map((async function(e){await Promise.all(t.map((async function(t){let o=[T.symmetric.aes256,T.symmetric.aes128,T.symmetric.tripledes,T.symmetric.cast5];try{const e=await t.getPrimarySelfSignature(i,void 0,n);e.preferredSymmetricAlgorithms&&(o=o.concat(e.preferredSymmetricAlgorithms))}catch(t){}const c=(await t.getDecryptionKeys(e.publicKeyID,null,void 0,n)).map((t=>t.keyPacket));await Promise.all(c.map((async function(t){if(!t||t.isDummy())return;if(!t.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(e.publicKeyAlgorithm===T.publicKey.rsaEncrypt||e.publicKeyAlgorithm===T.publicKey.rsaEncryptSign||e.publicKeyAlgorithm===T.publicKey.rsaSign||e.publicKeyAlgorithm===T.publicKey.elgamal)){const i=e.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async e=>{const r=new Js;r.read(i);const n={sessionKeyAlgorithm:e,sessionKey:nn.generateSessionKey(e)};try{await r.decrypt(t,n),a.push(r)}catch(t){O.printDebugError(t),s=t}})))}else try{await e.decrypt(t);const i=r||e.sessionKeyAlgorithm;if(i&&!o.includes(T.write(T.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(e)}catch(t){O.printDebugError(t),s=t}})))}))),M(e.encrypted),e.encrypted=null})))}}if(a.length>0){if(a.length>1){const t=new Set;a=a.filter((e=>{const r=e.sessionKeyAlgorithm+O.uint8ArrayToString(e.sessionKey);return!t.has(r)&&(t.add(r),!0)}))}return a.map((t=>({data:t.sessionKey,algorithm:t.sessionKeyAlgorithm&&T.read(T.symmetric,t.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const t=this.unwrapCompressed().packets.findPacket(T.packet.literalData);return t&&t.getBytes()||null}getFilename(){const t=this.unwrapCompressed().packets.findPacket(T.packet.literalData);return t&&t.getFilename()||null}getText(){const t=this.unwrapCompressed().packets.findPacket(T.packet.literalData);return t?t.getText():null}static async generateSessionKey(t=[],e=new Date,r=[],i=L){const{symmetricAlgo:n,aeadAlgo:s}=await async function(t=[],e=new Date,r=[],i=L){const n=await Promise.all(t.map(((t,n)=>t.getPrimarySelfSignature(e,r[n],i))));if(t.length?n.every((t=>t.features&&t.features[0]&T.features.seipdv2)):i.aeadProtect){const t={symmetricAlgo:T.symmetric.aes128,aeadAlgo:T.aead.ocb},e={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((t=>t.preferredCipherSuites&&t.preferredCipherSuites.some((t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo))))?e:t}const s=T.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((t=>t.preferredSymmetricAlgorithms&&t.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(t,e,r,i),a=T.read(T.symmetric,n),o=s?T.read(T.aead,s):void 0;await Promise.all(t.map((t=>t.getEncryptionKey().catch((()=>null)).then((t=>{if(t&&(t.keyPacket.algorithm===T.publicKey.x25519||t.keyPacket.algorithm===T.publicKey.x448)&&!o&&!O.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:nn.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(t,e,r,i=!1,n=[],s=new Date,a=[],o=L){if(r){if(!O.isUint8Array(r.data)||!O.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(t&&t.length)r=await Ta.generateSessionKey(t,s,a,o);else{if(!e||!e.length)throw Error("No keys, passwords, or session key provided.");r=await Ta.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await Ta.encryptSessionKey(c,h,u,t,e,i,n,s,a,o),f=qs.fromObject({version:u?2:1,aeadAlgorithm:u?T.write(T.aead,u):null});f.packets=this.packets;const y=T.write(T.symmetric,h);return await f.encrypt(y,c,o),l.packets.push(f),f.packets=new _s,l}static async encryptSessionKey(t,e,r,i,n,s=!1,a=[],o=new Date,c=[],h=L){const u=new _s,l=T.write(T.symmetric,e),f=r&&T.write(T.aead,r);if(i){const e=await Promise.all(i.map((async function(e,r){const i=await e.getEncryptionKey(a[r],o,c,h),n=Js.fromObject({version:f?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:t,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...e)}if(n){const e=async function(t,e){try{return await t.decrypt(e),1}catch(t){return 0}},r=(t,e)=>t+e,i=async function(t,s,a,o){const c=new Ws(h);if(c.sessionKey=t,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((t=>e(c,t))))).reduce(r))return i(t,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((e=>i(t,l,f,e))));u.push(...s)}return new Ta(u)}async sign(t=[],e=null,r=[],i=new Date,n=[],s=[],a=L){const o=new _s,c=this.packets.findPacket(T.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await La(c,t,e,r,i,n,s,!1,a),u=h.map(((t,e)=>Qs.fromSignaturePacket(t,0===e))).reverse();return o.push(...u),o.push(c),o.push(...h),new Ta(o)}compress(t,e=L){if(t===T.compression.uncompressed)return this;const r=new Ls(e);r.algorithm=t,r.packets=this.packets;const i=new _s;return i.push(r),new Ta(i)}async signDetached(t=[],e=null,r=[],i=new Date,n=[],s=[],a=L){const o=this.packets.findPacket(T.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new ca(await La(o,t,e,r,i,n,s,!0,a))}async verify(t,e=new Date,r=L){const i=this.unwrapCompressed(),n=i.packets.filterByTag(T.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");u(i.packets.stream)&&i.packets.push(...await U(i.packets.stream,(t=>t||[])));const s=i.packets.filterByTag(T.packet.onePassSignature).reverse(),a=i.packets.filterByTag(T.packet.signature);return s.length&&!a.length&&O.isStream(i.packets.stream)&&!u(i.packets.stream)?(await Promise.all(s.map((async t=>{t.correspondingSig=new Promise(((e,r)=>{t.correspondingSigResolve=e,t.correspondingSigReject=r})),t.signatureData=x((async()=>(await t.correspondingSig).signatureData)),t.hashed=U(await t.hash(t.signatureType,n[0],void 0,!1)),t.hashed.catch((()=>{}))}))),i.packets.stream=I(i.packets.stream,(async(t,e)=>{const r=Q(t),i=R(e);try{for(let t=0;t<s.length;t++){const{value:e}=await r.read();s[t].correspondingSigResolve(e)}await r.readToEnd(),await i.ready,await i.close()}catch(t){s.forEach((e=>{e.correspondingSigReject(t)})),await i.abort(t)}})),Na(s,n,t,e,!1,r)):Na(a,n,t,e,!1,r)}verifyDetached(t,e,r=new Date,i=L){const n=this.unwrapCompressed().packets.filterByTag(T.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return Na(t.packets.filterByTag(T.packet.signature),n,e,r,!0,i)}unwrapCompressed(){const t=this.packets.filterByTag(T.packet.compressedData);return t.length?new Ta(t[0].packets):this}async appendSignature(t,e=L){await this.packets.read(O.isUint8Array(t)?t:(await et(t)).data,_a,e)}write(){return this.packets.write()}armor(t=L){const e=this.packets[this.packets.length-1],r=e.constructor.tag===qs.tag?2!==e.version:this.packets.some((t=>t.constructor.tag===Us.tag&&6!==t.version));return rt(T.armor.message,this.write(),null,null,null,r,t)}}async function La(t,e,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=L){const h=new _s,u=null===t.text?T.signature.binary:T.signature.text;if(await Promise.all(e.map((async(e,r)=>{const h=s[r];if(!e.isPrivate())throw Error("Need private key for signing");const l=await e.getSigningKey(i[r],n,h,c);return da(t,e,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((t=>{h.push(...t)})),r){const t=r.packets.filterByTag(T.packet.signature);h.push(...t)}return h}async function Na(t,e,r,i=new Date,n=!1,s=L){return Promise.all(t.filter((function(t){return["text","binary"].includes(T.read(T.signature,t.signatureType))})).map((async function(t){return async function(t,e,r,i=new Date,n=!1,s=L){let a,o;for(const e of r){const r=e.getKeys(t.issuerKeyID);if(r.length>0){a=e,o=r[0];break}}const c=t instanceof Qs?t.correspondingSig:t,h={keyID:t.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+t.issuerKeyID.toHex());await t.verify(o.keyPacket,t.signatureType,e[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(t){if(!s.allowInsecureVerificationWithReformattedKeys||!t.message.match(/Signature creation time is in the future/))throw t;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const t=await c,e=new _s;return t&&e.push(t),new ca(e)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(t,e,r,i,n,s)})))}const Oa=/*#__PURE__*/O.constructAllowedPackets([Us]);class Fa{constructor(t,e){if(this.text=O.removeTrailingSpaces(t).replace(/\r?\n/g,"\r\n"),e&&!(e instanceof ca))throw Error("Invalid signature input");this.signature=e||new ca(new _s)}getSigningKeyIDs(){const t=[];return this.signature.packets.forEach((function(e){t.push(e.issuerKeyID)})),t}async sign(t,e=null,r=[],i=new Date,n=[],s=[],a=L){const o=new Cs;o.setText(this.text);const c=new ca(await La(o,t,e,r,i,n,s,!0,a));return new Fa(this.text,c)}verify(t,e=new Date,r=L){const i=this.signature.packets.filterByTag(T.packet.signature),n=new Cs;return n.setText(this.text),Na(i,[n],t,e,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(t=L){const e=this.signature.packets.some((t=>6!==t.version)),r={hash:e?Array.from(new Set(this.signature.packets.map((t=>T.read(T.hash,t.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return rt(T.armor.signed,r,void 0,void 0,void 0,e,t)}}function Ha(t){if(!(t instanceof Ta))throw Error("Parameter [message] needs to be of type Message")}function za(t){if(!(t instanceof Fa||t instanceof Ta))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function Ga(t){if("armored"!==t&&"binary"!==t&&"object"!==t)throw Error("Unsupported format "+t)}const qa=Object.keys(L).length;function ja(t){const e=Object.keys(t);if(e.length!==qa)for(const t of e)if(void 0===L[t])throw Error("Unknown config property: "+t)}function Va(t){return t&&!O.isArray(t)&&(t=[t]),t}async function Za(t){return"array"===O.isStream(t)?U(t):t}function Ja(t,e){t.data=I(e.packets.stream,(async(e,r)=>{await v(t.data,r,{preventClose:!0});const i=R(r);try{await U(e,(t=>t)),await i.close()}catch(t){await i.abort(t)}}))}function Ya(t,e,r){switch(e){case"object":return t;case"armored":return t.armor(r);case"binary":return t.write();default:throw Error("Unsupported format "+e)}}class Wa{static setImplementation(t,e=!1){if(Wa.Implementation&&!e)throw Error("Implementation already set");Wa.Implementation=t}static new(t){return new Wa.Implementation(t)}}class $a extends Wa{constructor(t){if(super(),void 0===t)throw Error("Invalid BigInteger input");if(t instanceof Uint8Array){const e="0123456789ABCDEF";let r="";t.forEach((t=>{r+=e[t>>4]+e[15&t]})),this.value=BigInt("0x0"+r)}else this.value=BigInt(t)}clone(){return new $a(this.value)}iinc(){return this.value++,this}inc(){return this.clone().iinc()}idec(){return this.value--,this}dec(){return this.clone().idec()}iadd(t){return this.value+=t.value,this}add(t){return this.clone().iadd(t)}isub(t){return this.value-=t.value,this}sub(t){return this.clone().isub(t)}imul(t){return this.value*=t.value,this}mul(t){return this.clone().imul(t)}imod(t){return this.value%=t.value,this.isNegative()&&this.iadd(t),this}mod(t){return this.clone().imod(t)}modExp(t,e){if(e.isZero())throw Error("Modulo cannot be zero");if(e.isOne())return new $a(0);if(t.isNegative())throw Error("Unsopported negative exponent");let r=t.value,i=this.value;i%=e.value;let n=BigInt(1);for(;r>BigInt(0);){const t=r&BigInt(1);r>>=BigInt(1);const s=n*i%e.value;n=t?s:n,i=i*i%e.value}return new $a(n)}modInv(t){const{gcd:e,x:r}=this._egcd(t);if(!e.isOne())throw Error("Inverse does not exist");return r.add(t).mod(t)}idiv(t){return this.value/=t.value,this}div(t){return this.clone().idiv(t)}_egcd(t){let e=BigInt(0),r=BigInt(1),i=BigInt(1),n=BigInt(0),s=this.abs().value,a=t.abs().value;const o=this.isNegative(),c=t.isNegative();for(;a!==BigInt(0);){const t=s/a;let o=e;e=i-t*e,i=o,o=r,r=n-t*r,n=o,o=a,a=s%a,s=o}return{x:new $a(o?-i:i),y:new $a(c?-n:n),gcd:new $a(s)}}gcd(t){let e=this.value,r=t.value;for(;r!==BigInt(0);){const t=r;r=e%r,e=t}return new $a(e)}ileftShift(t){return this.value<<=t.value,this}leftShift(t){return this.clone().ileftShift(t)}irightShift(t){return this.value>>=t.value,this}rightShift(t){return this.clone().irightShift(t)}ixor(t){return this.value^=t.value,this}xor(t){return this.clone().ixor(t)}ibitwiseAnd(t){return this.value&=t.value,this}bitwiseAnd(t){return this.clone().ibitwiseAnd(t)}ibitwiseOr(t){return this.value|=t.value,this}equal(t){return this.value===t.value}lt(t){return this.value<t.value}lte(t){return this.value<=t.value}gt(t){return this.value>t.value}gte(t){return this.value>=t.value}isZero(){return this.value===BigInt(0)}isOne(){return this.value===BigInt(1)}isNegative(){return this.value<BigInt(0)}isEven(){return!(this.value&BigInt(1))}abs(){const t=this.clone();return this.isNegative()&&(t.value=-t.value),t}negate(){const t=this.clone();return t.value=-t.value,t}toString(){return this.value.toString()}toNumber(){const t=Number(this.value);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}getBit(t){return(this.value>>BigInt(t)&BigInt(1))===BigInt(0)?0:1}bitLength(){const t=new $a(0),e=new $a(1),r=new $a(-1),i=this.isNegative()?r:t;let n=1;const s=this.clone();for(;!s.irightShift(e).equal(i);)n++;return n}byteLength(){const t=new $a(0),e=new $a(-1),r=this.isNegative()?e:t,i=new $a(8);let n=1;const s=this.clone();for(;!s.irightShift(i).equal(r);)n++;return n}toUint8Array(t="be",e){let r=this.value.toString(16);r.length%2==1&&(r="0"+r);const i=r.length/2,n=new Uint8Array(e||i),s=e?e-i:0;let a=0;for(;a<i;)n[a+s]=parseInt(r.slice(2*a,2*a+2),16),a++;return"be"!==t&&n.reverse(),n}}var Xa=/*#__PURE__*/Object.freeze({__proto__:null,default:$a}),to={exports:{}};!function(t,e){function r(t,e){if(!t)throw Error(e||"Assertion failed")}function i(t,e){t.super_=e;var r=function(){};r.prototype=e.prototype,t.prototype=new r,t.prototype.constructor=t}function n(t,e,r){if(n.isBN(t))return t;this.negative=0,this.words=null,this.length=0,this.red=null,null!==t&&("le"!==e&&"be"!==e||(r=e,e=10),this._init(t||0,e||10,r||"be"))}var s;"object"==typeof t?t.exports=n:e.BN=n,n.BN=n,n.wordSize=26;try{s="undefined"!=typeof window&&void 0!==window.Buffer?window.Buffer:require("buffer").Buffer}catch(t){}function a(t,e){var r=t.charCodeAt(e);return r>=65&&r<=70?r-55:r>=97&&r<=102?r-87:r-48&15}function o(t,e,r){var i=a(t,r);return r-1>=e&&(i|=a(t,r-1)<<4),i}function c(t,e,r,i){for(var n=0,s=Math.min(t.length,r),a=e;a<s;a++){var o=t.charCodeAt(a)-48;n*=i,n+=o>=49?o-49+10:o>=17?o-17+10:o}return n}n.isBN=function(t){return t instanceof n||null!==t&&"object"==typeof t&&t.constructor.wordSize===n.wordSize&&Array.isArray(t.words)},n.max=function(t,e){return t.cmp(e)>0?t:e},n.min=function(t,e){return t.cmp(e)<0?t:e},n.prototype._init=function(t,e,i){if("number"==typeof t)return this._initNumber(t,e,i);if("object"==typeof t)return this._initArray(t,e,i);"hex"===e&&(e=16),r(e===(0|e)&&e>=2&&e<=36);var n=0;"-"===(t=t.toString().replace(/\s+/g,""))[0]&&(n++,this.negative=1),n<t.length&&(16===e?this._parseHex(t,n,i):(this._parseBase(t,e,n),"le"===i&&this._initArray(this.toArray(),e,i)))},n.prototype._initNumber=function(t,e,i){t<0&&(this.negative=1,t=-t),t<67108864?(this.words=[67108863&t],this.length=1):t<4503599627370496?(this.words=[67108863&t,t/67108864&67108863],this.length=2):(r(t<9007199254740992),this.words=[67108863&t,t/67108864&67108863,1],this.length=3),"le"===i&&this._initArray(this.toArray(),e,i)},n.prototype._initArray=function(t,e,i){if(r("number"==typeof t.length),t.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(t.length/3),this.words=Array(this.length);for(var n=0;n<this.length;n++)this.words[n]=0;var s,a,o=0;if("be"===i)for(n=t.length-1,s=0;n>=0;n-=3)a=t[n]|t[n-1]<<8|t[n-2]<<16,this.words[s]|=a<<o&67108863,this.words[s+1]=a>>>26-o&67108863,(o+=24)>=26&&(o-=26,s++);else if("le"===i)for(n=0,s=0;n<t.length;n+=3)a=t[n]|t[n+1]<<8|t[n+2]<<16,this.words[s]|=a<<o&67108863,this.words[s+1]=a>>>26-o&67108863,(o+=24)>=26&&(o-=26,s++);return this.strip()},n.prototype._parseHex=function(t,e,r){this.length=Math.ceil((t.length-e)/6),this.words=Array(this.length);for(var i=0;i<this.length;i++)this.words[i]=0;var n,s=0,a=0;if("be"===r)for(i=t.length-1;i>=e;i-=2)n=o(t,e,i)<<s,this.words[a]|=67108863&n,s>=18?(s-=18,a+=1,this.words[a]|=n>>>26):s+=8;else for(i=(t.length-e)%2==0?e+1:e;i<t.length;i+=2)n=o(t,e,i)<<s,this.words[a]|=67108863&n,s>=18?(s-=18,a+=1,this.words[a]|=n>>>26):s+=8;this.strip()},n.prototype._parseBase=function(t,e,r){this.words=[0],this.length=1;for(var i=0,n=1;n<=67108863;n*=e)i++;i--,n=n/e|0;for(var s=t.length-r,a=s%i,o=Math.min(s,s-a)+r,h=0,u=r;u<o;u+=i)h=c(t,u,u+i,e),this.imuln(n),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h);if(0!==a){var l=1;for(h=c(t,u,t.length,e),u=0;u<a;u++)l*=e;this.imuln(l),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h)}this.strip()},n.prototype.copy=function(t){t.words=Array(this.length);for(var e=0;e<this.length;e++)t.words[e]=this.words[e];t.length=this.length,t.negative=this.negative,t.red=this.red},n.prototype.clone=function(){var t=new n(null);return this.copy(t),t},n.prototype._expand=function(t){for(;this.length<t;)this.words[this.length++]=0;return this},n.prototype.strip=function(){for(;this.length>1&&0===this.words[this.length-1];)this.length--;return this._normSign()},n.prototype._normSign=function(){return 1===this.length&&0===this.words[0]&&(this.negative=0),this},n.prototype.inspect=function(){return(this.red?"<BN-R: ":"<BN: ")+this.toString(16)+">"};var h=["","0","00","000","0000","00000","000000","0000000","00000000","000000000","0000000000","00000000000","000000000000","0000000000000","00000000000000","000000000000000","0000000000000000","00000000000000000","000000000000000000","0000000000000000000","00000000000000000000","000000000000000000000","0000000000000000000000","00000000000000000000000","000000000000000000000000","0000000000000000000000000"],u=[0,0,25,16,12,11,10,9,8,8,7,7,7,7,6,6,6,6,6,6,6,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5],l=[0,0,33554432,43046721,16777216,48828125,60466176,40353607,16777216,43046721,1e7,19487171,35831808,62748517,7529536,11390625,16777216,24137569,34012224,47045881,64e6,4084101,5153632,6436343,7962624,9765625,11881376,14348907,17210368,20511149,243e5,28629151,33554432,39135393,45435424,52521875,60466176];function f(t,e,r){r.negative=e.negative^t.negative;var i=t.length+e.length|0;r.length=i,i=i-1|0;var n=0|t.words[0],s=0|e.words[0],a=n*s,o=67108863&a,c=a/67108864|0;r.words[0]=o;for(var h=1;h<i;h++){for(var u=c>>>26,l=67108863&c,f=Math.min(h,e.length-1),y=Math.max(0,h-t.length+1);y<=f;y++){var d=h-y|0;u+=(a=(n=0|t.words[d])*(s=0|e.words[y])+l)/67108864|0,l=67108863&a}r.words[h]=0|l,c=0|u}return 0!==c?r.words[h]=0|c:r.length--,r.strip()}n.prototype.toString=function(t,e){var i;if(e=0|e||1,16===(t=t||10)||"hex"===t){i="";for(var n=0,s=0,a=0;a<this.length;a++){var o=this.words[a],c=(16777215&(o<<n|s)).toString(16);i=0!=(s=o>>>24-n&16777215)||a!==this.length-1?h[6-c.length]+c+i:c+i,(n+=2)>=26&&(n-=26,a--)}for(0!==s&&(i=s.toString(16)+i);i.length%e!=0;)i="0"+i;return 0!==this.negative&&(i="-"+i),i}if(t===(0|t)&&t>=2&&t<=36){var f=u[t],y=l[t];i="";var d=this.clone();for(d.negative=0;!d.isZero();){var p=d.modn(y).toString(t);i=(d=d.idivn(y)).isZero()?p+i:h[f-p.length]+p+i}for(this.isZero()&&(i="0"+i);i.length%e!=0;)i="0"+i;return 0!==this.negative&&(i="-"+i),i}r(!1,"Base should be between 2 and 36")},n.prototype.toNumber=function(){var t=this.words[0];return 2===this.length?t+=67108864*this.words[1]:3===this.length&&1===this.words[2]?t+=4503599627370496+67108864*this.words[1]:this.length>2&&r(!1,"Number can only safely store up to 53 bits"),0!==this.negative?-t:t},n.prototype.toJSON=function(){return this.toString(16)},n.prototype.toBuffer=function(t,e){return r(void 0!==s),this.toArrayLike(s,t,e)},n.prototype.toArray=function(t,e){return this.toArrayLike(Array,t,e)},n.prototype.toArrayLike=function(t,e,i){var n=this.byteLength(),s=i||Math.max(1,n);r(n<=s,"byte array longer than desired length"),r(s>0,"Requested array length <= 0"),this.strip();var a,o,c="le"===e,h=new t(s),u=this.clone();if(c){for(o=0;!u.isZero();o++)a=u.andln(255),u.iushrn(8),h[o]=a;for(;o<s;o++)h[o]=0}else{for(o=0;o<s-n;o++)h[o]=0;for(o=0;!u.isZero();o++)a=u.andln(255),u.iushrn(8),h[s-o-1]=a}return h},n.prototype._countBits=Math.clz32?function(t){return 32-Math.clz32(t)}:function(t){var e=t,r=0;return e>=4096&&(r+=13,e>>>=13),e>=64&&(r+=7,e>>>=7),e>=8&&(r+=4,e>>>=4),e>=2&&(r+=2,e>>>=2),r+e},n.prototype._zeroBits=function(t){if(0===t)return 26;var e=t,r=0;return 8191&e||(r+=13,e>>>=13),127&e||(r+=7,e>>>=7),15&e||(r+=4,e>>>=4),3&e||(r+=2,e>>>=2),1&e||r++,r},n.prototype.bitLength=function(){var t=this.words[this.length-1],e=this._countBits(t);return 26*(this.length-1)+e},n.prototype.zeroBits=function(){if(this.isZero())return 0;for(var t=0,e=0;e<this.length;e++){var r=this._zeroBits(this.words[e]);if(t+=r,26!==r)break}return t},n.prototype.byteLength=function(){return Math.ceil(this.bitLength()/8)},n.prototype.toTwos=function(t){return 0!==this.negative?this.abs().inotn(t).iaddn(1):this.clone()},n.prototype.fromTwos=function(t){return this.testn(t-1)?this.notn(t).iaddn(1).ineg():this.clone()},n.prototype.isNeg=function(){return 0!==this.negative},n.prototype.neg=function(){return this.clone().ineg()},n.prototype.ineg=function(){return this.isZero()||(this.negative^=1),this},n.prototype.iuor=function(t){for(;this.length<t.length;)this.words[this.length++]=0;for(var e=0;e<t.length;e++)this.words[e]=this.words[e]|t.words[e];return this.strip()},n.prototype.ior=function(t){return r(!(this.negative|t.negative)),this.iuor(t)},n.prototype.or=function(t){return this.length>t.length?this.clone().ior(t):t.clone().ior(this)},n.prototype.uor=function(t){return this.length>t.length?this.clone().iuor(t):t.clone().iuor(this)},n.prototype.iuand=function(t){var e;e=this.length>t.length?t:this;for(var r=0;r<e.length;r++)this.words[r]=this.words[r]&t.words[r];return this.length=e.length,this.strip()},n.prototype.iand=function(t){return r(!(this.negative|t.negative)),this.iuand(t)},n.prototype.and=function(t){return this.length>t.length?this.clone().iand(t):t.clone().iand(this)},n.prototype.uand=function(t){return this.length>t.length?this.clone().iuand(t):t.clone().iuand(this)},n.prototype.iuxor=function(t){var e,r;this.length>t.length?(e=this,r=t):(e=t,r=this);for(var i=0;i<r.length;i++)this.words[i]=e.words[i]^r.words[i];if(this!==e)for(;i<e.length;i++)this.words[i]=e.words[i];return this.length=e.length,this.strip()},n.prototype.ixor=function(t){return r(!(this.negative|t.negative)),this.iuxor(t)},n.prototype.xor=function(t){return this.length>t.length?this.clone().ixor(t):t.clone().ixor(this)},n.prototype.uxor=function(t){return this.length>t.length?this.clone().iuxor(t):t.clone().iuxor(this)},n.prototype.inotn=function(t){r("number"==typeof t&&t>=0);var e=0|Math.ceil(t/26),i=t%26;this._expand(e),i>0&&e--;for(var n=0;n<e;n++)this.words[n]=67108863&~this.words[n];return i>0&&(this.words[n]=~this.words[n]&67108863>>26-i),this.strip()},n.prototype.notn=function(t){return this.clone().inotn(t)},n.prototype.setn=function(t,e){r("number"==typeof t&&t>=0);var i=t/26|0,n=t%26;return this._expand(i+1),this.words[i]=e?this.words[i]|1<<n:this.words[i]&~(1<<n),this.strip()},n.prototype.iadd=function(t){var e,r,i;if(0!==this.negative&&0===t.negative)return this.negative=0,e=this.isub(t),this.negative^=1,this._normSign();if(0===this.negative&&0!==t.negative)return t.negative=0,e=this.isub(t),t.negative=1,e._normSign();this.length>t.length?(r=this,i=t):(r=t,i=this);for(var n=0,s=0;s<i.length;s++)e=(0|r.words[s])+(0|i.words[s])+n,this.words[s]=67108863&e,n=e>>>26;for(;0!==n&&s<r.length;s++)e=(0|r.words[s])+n,this.words[s]=67108863&e,n=e>>>26;if(this.length=r.length,0!==n)this.words[this.length]=n,this.length++;else if(r!==this)for(;s<r.length;s++)this.words[s]=r.words[s];return this},n.prototype.add=function(t){var e;return 0!==t.negative&&0===this.negative?(t.negative=0,e=this.sub(t),t.negative^=1,e):0===t.negative&&0!==this.negative?(this.negative=0,e=t.sub(this),this.negative=1,e):this.length>t.length?this.clone().iadd(t):t.clone().iadd(this)},n.prototype.isub=function(t){if(0!==t.negative){t.negative=0;var e=this.iadd(t);return t.negative=1,e._normSign()}if(0!==this.negative)return this.negative=0,this.iadd(t),this.negative=1,this._normSign();var r,i,n=this.cmp(t);if(0===n)return this.negative=0,this.length=1,this.words[0]=0,this;n>0?(r=this,i=t):(r=t,i=this);for(var s=0,a=0;a<i.length;a++)s=(e=(0|r.words[a])-(0|i.words[a])+s)>>26,this.words[a]=67108863&e;for(;0!==s&&a<r.length;a++)s=(e=(0|r.words[a])+s)>>26,this.words[a]=67108863&e;if(0===s&&a<r.length&&r!==this)for(;a<r.length;a++)this.words[a]=r.words[a];return this.length=Math.max(this.length,a),r!==this&&(this.negative=1),this.strip()},n.prototype.sub=function(t){return this.clone().isub(t)};var y=function(t,e,r){var i,n,s,a=t.words,o=e.words,c=r.words,h=0,u=0|a[0],l=8191&u,f=u>>>13,y=0|a[1],d=8191&y,p=y>>>13,g=0|a[2],m=8191&g,w=g>>>13,A=0|a[3],b=8191&A,v=A>>>13,E=0|a[4],k=8191&E,S=E>>>13,I=0|a[5],C=8191&I,B=I>>>13,K=0|a[6],P=8191&K,D=K>>>13,U=0|a[7],M=8191&U,x=U>>>13,Q=0|a[8],R=8191&Q,_=Q>>>13,T=0|a[9],L=8191&T,N=T>>>13,O=0|o[0],F=8191&O,H=O>>>13,z=0|o[1],G=8191&z,q=z>>>13,j=0|o[2],V=8191&j,Z=j>>>13,J=0|o[3],Y=8191&J,W=J>>>13,$=0|o[4],X=8191&$,tt=$>>>13,et=0|o[5],rt=8191&et,it=et>>>13,nt=0|o[6],st=8191&nt,at=nt>>>13,ot=0|o[7],ct=8191&ot,ht=ot>>>13,ut=0|o[8],lt=8191&ut,ft=ut>>>13,yt=0|o[9],dt=8191&yt,pt=yt>>>13;r.negative=t.negative^e.negative,r.length=19;var gt=(h+(i=Math.imul(l,F))|0)+((8191&(n=(n=Math.imul(l,H))+Math.imul(f,F)|0))<<13)|0;h=((s=Math.imul(f,H))+(n>>>13)|0)+(gt>>>26)|0,gt&=67108863,i=Math.imul(d,F),n=(n=Math.imul(d,H))+Math.imul(p,F)|0,s=Math.imul(p,H);var mt=(h+(i=i+Math.imul(l,G)|0)|0)+((8191&(n=(n=n+Math.imul(l,q)|0)+Math.imul(f,G)|0))<<13)|0;h=((s=s+Math.imul(f,q)|0)+(n>>>13)|0)+(mt>>>26)|0,mt&=67108863,i=Math.imul(m,F),n=(n=Math.imul(m,H))+Math.imul(w,F)|0,s=Math.imul(w,H),i=i+Math.imul(d,G)|0,n=(n=n+Math.imul(d,q)|0)+Math.imul(p,G)|0,s=s+Math.imul(p,q)|0;var wt=(h+(i=i+Math.imul(l,V)|0)|0)+((8191&(n=(n=n+Math.imul(l,Z)|0)+Math.imul(f,V)|0))<<13)|0;h=((s=s+Math.imul(f,Z)|0)+(n>>>13)|0)+(wt>>>26)|0,wt&=67108863,i=Math.imul(b,F),n=(n=Math.imul(b,H))+Math.imul(v,F)|0,s=Math.imul(v,H),i=i+Math.imul(m,G)|0,n=(n=n+Math.imul(m,q)|0)+Math.imul(w,G)|0,s=s+Math.imul(w,q)|0,i=i+Math.imul(d,V)|0,n=(n=n+Math.imul(d,Z)|0)+Math.imul(p,V)|0,s=s+Math.imul(p,Z)|0;var At=(h+(i=i+Math.imul(l,Y)|0)|0)+((8191&(n=(n=n+Math.imul(l,W)|0)+Math.imul(f,Y)|0))<<13)|0;h=((s=s+Math.imul(f,W)|0)+(n>>>13)|0)+(At>>>26)|0,At&=67108863,i=Math.imul(k,F),n=(n=Math.imul(k,H))+Math.imul(S,F)|0,s=Math.imul(S,H),i=i+Math.imul(b,G)|0,n=(n=n+Math.imul(b,q)|0)+Math.imul(v,G)|0,s=s+Math.imul(v,q)|0,i=i+Math.imul(m,V)|0,n=(n=n+Math.imul(m,Z)|0)+Math.imul(w,V)|0,s=s+Math.imul(w,Z)|0,i=i+Math.imul(d,Y)|0,n=(n=n+Math.imul(d,W)|0)+Math.imul(p,Y)|0,s=s+Math.imul(p,W)|0;var bt=(h+(i=i+Math.imul(l,X)|0)|0)+((8191&(n=(n=n+Math.imul(l,tt)|0)+Math.imul(f,X)|0))<<13)|0;h=((s=s+Math.imul(f,tt)|0)+(n>>>13)|0)+(bt>>>26)|0,bt&=67108863,i=Math.imul(C,F),n=(n=Math.imul(C,H))+Math.imul(B,F)|0,s=Math.imul(B,H),i=i+Math.imul(k,G)|0,n=(n=n+Math.imul(k,q)|0)+Math.imul(S,G)|0,s=s+Math.imul(S,q)|0,i=i+Math.imul(b,V)|0,n=(n=n+Math.imul(b,Z)|0)+Math.imul(v,V)|0,s=s+Math.imul(v,Z)|0,i=i+Math.imul(m,Y)|0,n=(n=n+Math.imul(m,W)|0)+Math.imul(w,Y)|0,s=s+Math.imul(w,W)|0,i=i+Math.imul(d,X)|0,n=(n=n+Math.imul(d,tt)|0)+Math.imul(p,X)|0,s=s+Math.imul(p,tt)|0;var vt=(h+(i=i+Math.imul(l,rt)|0)|0)+((8191&(n=(n=n+Math.imul(l,it)|0)+Math.imul(f,rt)|0))<<13)|0;h=((s=s+Math.imul(f,it)|0)+(n>>>13)|0)+(vt>>>26)|0,vt&=67108863,i=Math.imul(P,F),n=(n=Math.imul(P,H))+Math.imul(D,F)|0,s=Math.imul(D,H),i=i+Math.imul(C,G)|0,n=(n=n+Math.imul(C,q)|0)+Math.imul(B,G)|0,s=s+Math.imul(B,q)|0,i=i+Math.imul(k,V)|0,n=(n=n+Math.imul(k,Z)|0)+Math.imul(S,V)|0,s=s+Math.imul(S,Z)|0,i=i+Math.imul(b,Y)|0,n=(n=n+Math.imul(b,W)|0)+Math.imul(v,Y)|0,s=s+Math.imul(v,W)|0,i=i+Math.imul(m,X)|0,n=(n=n+Math.imul(m,tt)|0)+Math.imul(w,X)|0,s=s+Math.imul(w,tt)|0,i=i+Math.imul(d,rt)|0,n=(n=n+Math.imul(d,it)|0)+Math.imul(p,rt)|0,s=s+Math.imul(p,it)|0;var Et=(h+(i=i+Math.imul(l,st)|0)|0)+((8191&(n=(n=n+Math.imul(l,at)|0)+Math.imul(f,st)|0))<<13)|0;h=((s=s+Math.imul(f,at)|0)+(n>>>13)|0)+(Et>>>26)|0,Et&=67108863,i=Math.imul(M,F),n=(n=Math.imul(M,H))+Math.imul(x,F)|0,s=Math.imul(x,H),i=i+Math.imul(P,G)|0,n=(n=n+Math.imul(P,q)|0)+Math.imul(D,G)|0,s=s+Math.imul(D,q)|0,i=i+Math.imul(C,V)|0,n=(n=n+Math.imul(C,Z)|0)+Math.imul(B,V)|0,s=s+Math.imul(B,Z)|0,i=i+Math.imul(k,Y)|0,n=(n=n+Math.imul(k,W)|0)+Math.imul(S,Y)|0,s=s+Math.imul(S,W)|0,i=i+Math.imul(b,X)|0,n=(n=n+Math.imul(b,tt)|0)+Math.imul(v,X)|0,s=s+Math.imul(v,tt)|0,i=i+Math.imul(m,rt)|0,n=(n=n+Math.imul(m,it)|0)+Math.imul(w,rt)|0,s=s+Math.imul(w,it)|0,i=i+Math.imul(d,st)|0,n=(n=n+Math.imul(d,at)|0)+Math.imul(p,st)|0,s=s+Math.imul(p,at)|0;var kt=(h+(i=i+Math.imul(l,ct)|0)|0)+((8191&(n=(n=n+Math.imul(l,ht)|0)+Math.imul(f,ct)|0))<<13)|0;h=((s=s+Math.imul(f,ht)|0)+(n>>>13)|0)+(kt>>>26)|0,kt&=67108863,i=Math.imul(R,F),n=(n=Math.imul(R,H))+Math.imul(_,F)|0,s=Math.imul(_,H),i=i+Math.imul(M,G)|0,n=(n=n+Math.imul(M,q)|0)+Math.imul(x,G)|0,s=s+Math.imul(x,q)|0,i=i+Math.imul(P,V)|0,n=(n=n+Math.imul(P,Z)|0)+Math.imul(D,V)|0,s=s+Math.imul(D,Z)|0,i=i+Math.imul(C,Y)|0,n=(n=n+Math.imul(C,W)|0)+Math.imul(B,Y)|0,s=s+Math.imul(B,W)|0,i=i+Math.imul(k,X)|0,n=(n=n+Math.imul(k,tt)|0)+Math.imul(S,X)|0,s=s+Math.imul(S,tt)|0,i=i+Math.imul(b,rt)|0,n=(n=n+Math.imul(b,it)|0)+Math.imul(v,rt)|0,s=s+Math.imul(v,it)|0,i=i+Math.imul(m,st)|0,n=(n=n+Math.imul(m,at)|0)+Math.imul(w,st)|0,s=s+Math.imul(w,at)|0,i=i+Math.imul(d,ct)|0,n=(n=n+Math.imul(d,ht)|0)+Math.imul(p,ct)|0,s=s+Math.imul(p,ht)|0;var St=(h+(i=i+Math.imul(l,lt)|0)|0)+((8191&(n=(n=n+Math.imul(l,ft)|0)+Math.imul(f,lt)|0))<<13)|0;h=((s=s+Math.imul(f,ft)|0)+(n>>>13)|0)+(St>>>26)|0,St&=67108863,i=Math.imul(L,F),n=(n=Math.imul(L,H))+Math.imul(N,F)|0,s=Math.imul(N,H),i=i+Math.imul(R,G)|0,n=(n=n+Math.imul(R,q)|0)+Math.imul(_,G)|0,s=s+Math.imul(_,q)|0,i=i+Math.imul(M,V)|0,n=(n=n+Math.imul(M,Z)|0)+Math.imul(x,V)|0,s=s+Math.imul(x,Z)|0,i=i+Math.imul(P,Y)|0,n=(n=n+Math.imul(P,W)|0)+Math.imul(D,Y)|0,s=s+Math.imul(D,W)|0,i=i+Math.imul(C,X)|0,n=(n=n+Math.imul(C,tt)|0)+Math.imul(B,X)|0,s=s+Math.imul(B,tt)|0,i=i+Math.imul(k,rt)|0,n=(n=n+Math.imul(k,it)|0)+Math.imul(S,rt)|0,s=s+Math.imul(S,it)|0,i=i+Math.imul(b,st)|0,n=(n=n+Math.imul(b,at)|0)+Math.imul(v,st)|0,s=s+Math.imul(v,at)|0,i=i+Math.imul(m,ct)|0,n=(n=n+Math.imul(m,ht)|0)+Math.imul(w,ct)|0,s=s+Math.imul(w,ht)|0,i=i+Math.imul(d,lt)|0,n=(n=n+Math.imul(d,ft)|0)+Math.imul(p,lt)|0,s=s+Math.imul(p,ft)|0;var It=(h+(i=i+Math.imul(l,dt)|0)|0)+((8191&(n=(n=n+Math.imul(l,pt)|0)+Math.imul(f,dt)|0))<<13)|0;h=((s=s+Math.imul(f,pt)|0)+(n>>>13)|0)+(It>>>26)|0,It&=67108863,i=Math.imul(L,G),n=(n=Math.imul(L,q))+Math.imul(N,G)|0,s=Math.imul(N,q),i=i+Math.imul(R,V)|0,n=(n=n+Math.imul(R,Z)|0)+Math.imul(_,V)|0,s=s+Math.imul(_,Z)|0,i=i+Math.imul(M,Y)|0,n=(n=n+Math.imul(M,W)|0)+Math.imul(x,Y)|0,s=s+Math.imul(x,W)|0,i=i+Math.imul(P,X)|0,n=(n=n+Math.imul(P,tt)|0)+Math.imul(D,X)|0,s=s+Math.imul(D,tt)|0,i=i+Math.imul(C,rt)|0,n=(n=n+Math.imul(C,it)|0)+Math.imul(B,rt)|0,s=s+Math.imul(B,it)|0,i=i+Math.imul(k,st)|0,n=(n=n+Math.imul(k,at)|0)+Math.imul(S,st)|0,s=s+Math.imul(S,at)|0,i=i+Math.imul(b,ct)|0,n=(n=n+Math.imul(b,ht)|0)+Math.imul(v,ct)|0,s=s+Math.imul(v,ht)|0,i=i+Math.imul(m,lt)|0,n=(n=n+Math.imul(m,ft)|0)+Math.imul(w,lt)|0,s=s+Math.imul(w,ft)|0;var Ct=(h+(i=i+Math.imul(d,dt)|0)|0)+((8191&(n=(n=n+Math.imul(d,pt)|0)+Math.imul(p,dt)|0))<<13)|0;h=((s=s+Math.imul(p,pt)|0)+(n>>>13)|0)+(Ct>>>26)|0,Ct&=67108863,i=Math.imul(L,V),n=(n=Math.imul(L,Z))+Math.imul(N,V)|0,s=Math.imul(N,Z),i=i+Math.imul(R,Y)|0,n=(n=n+Math.imul(R,W)|0)+Math.imul(_,Y)|0,s=s+Math.imul(_,W)|0,i=i+Math.imul(M,X)|0,n=(n=n+Math.imul(M,tt)|0)+Math.imul(x,X)|0,s=s+Math.imul(x,tt)|0,i=i+Math.imul(P,rt)|0,n=(n=n+Math.imul(P,it)|0)+Math.imul(D,rt)|0,s=s+Math.imul(D,it)|0,i=i+Math.imul(C,st)|0,n=(n=n+Math.imul(C,at)|0)+Math.imul(B,st)|0,s=s+Math.imul(B,at)|0,i=i+Math.imul(k,ct)|0,n=(n=n+Math.imul(k,ht)|0)+Math.imul(S,ct)|0,s=s+Math.imul(S,ht)|0,i=i+Math.imul(b,lt)|0,n=(n=n+Math.imul(b,ft)|0)+Math.imul(v,lt)|0,s=s+Math.imul(v,ft)|0;var Bt=(h+(i=i+Math.imul(m,dt)|0)|0)+((8191&(n=(n=n+Math.imul(m,pt)|0)+Math.imul(w,dt)|0))<<13)|0;h=((s=s+Math.imul(w,pt)|0)+(n>>>13)|0)+(Bt>>>26)|0,Bt&=67108863,i=Math.imul(L,Y),n=(n=Math.imul(L,W))+Math.imul(N,Y)|0,s=Math.imul(N,W),i=i+Math.imul(R,X)|0,n=(n=n+Math.imul(R,tt)|0)+Math.imul(_,X)|0,s=s+Math.imul(_,tt)|0,i=i+Math.imul(M,rt)|0,n=(n=n+Math.imul(M,it)|0)+Math.imul(x,rt)|0,s=s+Math.imul(x,it)|0,i=i+Math.imul(P,st)|0,n=(n=n+Math.imul(P,at)|0)+Math.imul(D,st)|0,s=s+Math.imul(D,at)|0,i=i+Math.imul(C,ct)|0,n=(n=n+Math.imul(C,ht)|0)+Math.imul(B,ct)|0,s=s+Math.imul(B,ht)|0,i=i+Math.imul(k,lt)|0,n=(n=n+Math.imul(k,ft)|0)+Math.imul(S,lt)|0,s=s+Math.imul(S,ft)|0;var Kt=(h+(i=i+Math.imul(b,dt)|0)|0)+((8191&(n=(n=n+Math.imul(b,pt)|0)+Math.imul(v,dt)|0))<<13)|0;h=((s=s+Math.imul(v,pt)|0)+(n>>>13)|0)+(Kt>>>26)|0,Kt&=67108863,i=Math.imul(L,X),n=(n=Math.imul(L,tt))+Math.imul(N,X)|0,s=Math.imul(N,tt),i=i+Math.imul(R,rt)|0,n=(n=n+Math.imul(R,it)|0)+Math.imul(_,rt)|0,s=s+Math.imul(_,it)|0,i=i+Math.imul(M,st)|0,n=(n=n+Math.imul(M,at)|0)+Math.imul(x,st)|0,s=s+Math.imul(x,at)|0,i=i+Math.imul(P,ct)|0,n=(n=n+Math.imul(P,ht)|0)+Math.imul(D,ct)|0,s=s+Math.imul(D,ht)|0,i=i+Math.imul(C,lt)|0,n=(n=n+Math.imul(C,ft)|0)+Math.imul(B,lt)|0,s=s+Math.imul(B,ft)|0;var Pt=(h+(i=i+Math.imul(k,dt)|0)|0)+((8191&(n=(n=n+Math.imul(k,pt)|0)+Math.imul(S,dt)|0))<<13)|0;h=((s=s+Math.imul(S,pt)|0)+(n>>>13)|0)+(Pt>>>26)|0,Pt&=67108863,i=Math.imul(L,rt),n=(n=Math.imul(L,it))+Math.imul(N,rt)|0,s=Math.imul(N,it),i=i+Math.imul(R,st)|0,n=(n=n+Math.imul(R,at)|0)+Math.imul(_,st)|0,s=s+Math.imul(_,at)|0,i=i+Math.imul(M,ct)|0,n=(n=n+Math.imul(M,ht)|0)+Math.imul(x,ct)|0,s=s+Math.imul(x,ht)|0,i=i+Math.imul(P,lt)|0,n=(n=n+Math.imul(P,ft)|0)+Math.imul(D,lt)|0,s=s+Math.imul(D,ft)|0;var Dt=(h+(i=i+Math.imul(C,dt)|0)|0)+((8191&(n=(n=n+Math.imul(C,pt)|0)+Math.imul(B,dt)|0))<<13)|0;h=((s=s+Math.imul(B,pt)|0)+(n>>>13)|0)+(Dt>>>26)|0,Dt&=67108863,i=Math.imul(L,st),n=(n=Math.imul(L,at))+Math.imul(N,st)|0,s=Math.imul(N,at),i=i+Math.imul(R,ct)|0,n=(n=n+Math.imul(R,ht)|0)+Math.imul(_,ct)|0,s=s+Math.imul(_,ht)|0,i=i+Math.imul(M,lt)|0,n=(n=n+Math.imul(M,ft)|0)+Math.imul(x,lt)|0,s=s+Math.imul(x,ft)|0;var Ut=(h+(i=i+Math.imul(P,dt)|0)|0)+((8191&(n=(n=n+Math.imul(P,pt)|0)+Math.imul(D,dt)|0))<<13)|0;h=((s=s+Math.imul(D,pt)|0)+(n>>>13)|0)+(Ut>>>26)|0,Ut&=67108863,i=Math.imul(L,ct),n=(n=Math.imul(L,ht))+Math.imul(N,ct)|0,s=Math.imul(N,ht),i=i+Math.imul(R,lt)|0,n=(n=n+Math.imul(R,ft)|0)+Math.imul(_,lt)|0,s=s+Math.imul(_,ft)|0;var Mt=(h+(i=i+Math.imul(M,dt)|0)|0)+((8191&(n=(n=n+Math.imul(M,pt)|0)+Math.imul(x,dt)|0))<<13)|0;h=((s=s+Math.imul(x,pt)|0)+(n>>>13)|0)+(Mt>>>26)|0,Mt&=67108863,i=Math.imul(L,lt),n=(n=Math.imul(L,ft))+Math.imul(N,lt)|0,s=Math.imul(N,ft);var xt=(h+(i=i+Math.imul(R,dt)|0)|0)+((8191&(n=(n=n+Math.imul(R,pt)|0)+Math.imul(_,dt)|0))<<13)|0;h=((s=s+Math.imul(_,pt)|0)+(n>>>13)|0)+(xt>>>26)|0,xt&=67108863;var Qt=(h+(i=Math.imul(L,dt))|0)+((8191&(n=(n=Math.imul(L,pt))+Math.imul(N,dt)|0))<<13)|0;return h=((s=Math.imul(N,pt))+(n>>>13)|0)+(Qt>>>26)|0,Qt&=67108863,c[0]=gt,c[1]=mt,c[2]=wt,c[3]=At,c[4]=bt,c[5]=vt,c[6]=Et,c[7]=kt,c[8]=St,c[9]=It,c[10]=Ct,c[11]=Bt,c[12]=Kt,c[13]=Pt,c[14]=Dt,c[15]=Ut,c[16]=Mt,c[17]=xt,c[18]=Qt,0!==h&&(c[19]=h,r.length++),r};function d(t,e,r){return(new p).mulp(t,e,r)}function p(t,e){this.x=t,this.y=e}Math.imul||(y=f),n.prototype.mulTo=function(t,e){var r,i=this.length+t.length;return r=10===this.length&&10===t.length?y(this,t,e):i<63?f(this,t,e):i<1024?function(t,e,r){r.negative=e.negative^t.negative,r.length=t.length+e.length;for(var i=0,n=0,s=0;s<r.length-1;s++){var a=n;n=0;for(var o=67108863&i,c=Math.min(s,e.length-1),h=Math.max(0,s-t.length+1);h<=c;h++){var u=s-h,l=(0|t.words[u])*(0|e.words[h]),f=67108863&l;o=67108863&(f=f+o|0),n+=(a=(a=a+(l/67108864|0)|0)+(f>>>26)|0)>>>26,a&=67108863}r.words[s]=o,i=a,a=n}return 0!==i?r.words[s]=i:r.length--,r.strip()}(this,t,e):d(this,t,e),r},p.prototype.makeRBT=function(t){for(var e=Array(t),r=n.prototype._countBits(t)-1,i=0;i<t;i++)e[i]=this.revBin(i,r,t);return e},p.prototype.revBin=function(t,e,r){if(0===t||t===r-1)return t;for(var i=0,n=0;n<e;n++)i|=(1&t)<<e-n-1,t>>=1;return i},p.prototype.permute=function(t,e,r,i,n,s){for(var a=0;a<s;a++)i[a]=e[t[a]],n[a]=r[t[a]]},p.prototype.transform=function(t,e,r,i,n,s){this.permute(s,t,e,r,i,n);for(var a=1;a<n;a<<=1)for(var o=a<<1,c=Math.cos(2*Math.PI/o),h=Math.sin(2*Math.PI/o),u=0;u<n;u+=o)for(var l=c,f=h,y=0;y<a;y++){var d=r[u+y],p=i[u+y],g=r[u+y+a],m=i[u+y+a],w=l*g-f*m;m=l*m+f*g,g=w,r[u+y]=d+g,i[u+y]=p+m,r[u+y+a]=d-g,i[u+y+a]=p-m,y!==o&&(w=c*l-h*f,f=c*f+h*l,l=w)}},p.prototype.guessLen13b=function(t,e){var r=1|Math.max(e,t),i=1&r,n=0;for(r=r/2|0;r;r>>>=1)n++;return 1<<n+1+i},p.prototype.conjugate=function(t,e,r){if(!(r<=1))for(var i=0;i<r/2;i++){var n=t[i];t[i]=t[r-i-1],t[r-i-1]=n,n=e[i],e[i]=-e[r-i-1],e[r-i-1]=-n}},p.prototype.normalize13b=function(t,e){for(var r=0,i=0;i<e/2;i++){var n=8192*Math.round(t[2*i+1]/e)+Math.round(t[2*i]/e)+r;t[i]=67108863&n,r=n<67108864?0:n/67108864|0}return t},p.prototype.convert13b=function(t,e,i,n){for(var s=0,a=0;a<e;a++)s+=0|t[a],i[2*a]=8191&s,s>>>=13,i[2*a+1]=8191&s,s>>>=13;for(a=2*e;a<n;++a)i[a]=0;r(0===s),r(!(-8192&s))},p.prototype.stub=function(t){for(var e=Array(t),r=0;r<t;r++)e[r]=0;return e},p.prototype.mulp=function(t,e,r){var i=2*this.guessLen13b(t.length,e.length),n=this.makeRBT(i),s=this.stub(i),a=Array(i),o=Array(i),c=Array(i),h=Array(i),u=Array(i),l=Array(i),f=r.words;f.length=i,this.convert13b(t.words,t.length,a,i),this.convert13b(e.words,e.length,h,i),this.transform(a,s,o,c,i,n),this.transform(h,s,u,l,i,n);for(var y=0;y<i;y++){var d=o[y]*u[y]-c[y]*l[y];c[y]=o[y]*l[y]+c[y]*u[y],o[y]=d}return this.conjugate(o,c,i),this.transform(o,c,f,s,i,n),this.conjugate(f,s,i),this.normalize13b(f,i),r.negative=t.negative^e.negative,r.length=t.length+e.length,r.strip()},n.prototype.mul=function(t){var e=new n(null);return e.words=Array(this.length+t.length),this.mulTo(t,e)},n.prototype.mulf=function(t){var e=new n(null);return e.words=Array(this.length+t.length),d(this,t,e)},n.prototype.imul=function(t){return this.clone().mulTo(t,this)},n.prototype.imuln=function(t){r("number"==typeof t),r(t<67108864);for(var e=0,i=0;i<this.length;i++){var n=(0|this.words[i])*t,s=(67108863&n)+(67108863&e);e>>=26,e+=n/67108864|0,e+=s>>>26,this.words[i]=67108863&s}return 0!==e&&(this.words[i]=e,this.length++),this},n.prototype.muln=function(t){return this.clone().imuln(t)},n.prototype.sqr=function(){return this.mul(this)},n.prototype.isqr=function(){return this.imul(this.clone())},n.prototype.pow=function(t){var e=function(t){for(var e=Array(t.bitLength()),r=0;r<e.length;r++){var i=r/26|0,n=r%26;e[r]=(t.words[i]&1<<n)>>>n}return e}(t);if(0===e.length)return new n(1);for(var r=this,i=0;i<e.length&&0===e[i];i++,r=r.sqr());if(++i<e.length)for(var s=r.sqr();i<e.length;i++,s=s.sqr())0!==e[i]&&(r=r.mul(s));return r},n.prototype.iushln=function(t){r("number"==typeof t&&t>=0);var e,i=t%26,n=(t-i)/26,s=67108863>>>26-i<<26-i;if(0!==i){var a=0;for(e=0;e<this.length;e++){var o=this.words[e]&s,c=(0|this.words[e])-o<<i;this.words[e]=c|a,a=o>>>26-i}a&&(this.words[e]=a,this.length++)}if(0!==n){for(e=this.length-1;e>=0;e--)this.words[e+n]=this.words[e];for(e=0;e<n;e++)this.words[e]=0;this.length+=n}return this.strip()},n.prototype.ishln=function(t){return r(0===this.negative),this.iushln(t)},n.prototype.iushrn=function(t,e,i){var n;r("number"==typeof t&&t>=0),n=e?(e-e%26)/26:0;var s=t%26,a=Math.min((t-s)/26,this.length),o=67108863^67108863>>>s<<s,c=i;if(n=Math.max(0,n-=a),c){for(var h=0;h<a;h++)c.words[h]=this.words[h];c.length=a}if(0===a);else if(this.length>a)for(this.length-=a,h=0;h<this.length;h++)this.words[h]=this.words[h+a];else this.words[0]=0,this.length=1;var u=0;for(h=this.length-1;h>=0&&(0!==u||h>=n);h--){var l=0|this.words[h];this.words[h]=u<<26-s|l>>>s,u=l&o}return c&&0!==u&&(c.words[c.length++]=u),0===this.length&&(this.words[0]=0,this.length=1),this.strip()},n.prototype.ishrn=function(t,e,i){return r(0===this.negative),this.iushrn(t,e,i)},n.prototype.shln=function(t){return this.clone().ishln(t)},n.prototype.ushln=function(t){return this.clone().iushln(t)},n.prototype.shrn=function(t){return this.clone().ishrn(t)},n.prototype.ushrn=function(t){return this.clone().iushrn(t)},n.prototype.testn=function(t){r("number"==typeof t&&t>=0);var e=t%26,i=(t-e)/26,n=1<<e;return!(this.length<=i||!(this.words[i]&n))},n.prototype.imaskn=function(t){r("number"==typeof t&&t>=0);var e=t%26,i=(t-e)/26;if(r(0===this.negative,"imaskn works only with positive numbers"),this.length<=i)return this;if(0!==e&&i++,this.length=Math.min(i,this.length),0!==e){var n=67108863^67108863>>>e<<e;this.words[this.length-1]&=n}return this.strip()},n.prototype.maskn=function(t){return this.clone().imaskn(t)},n.prototype.iaddn=function(t){return r("number"==typeof t),r(t<67108864),t<0?this.isubn(-t):0!==this.negative?1===this.length&&(0|this.words[0])<t?(this.words[0]=t-(0|this.words[0]),this.negative=0,this):(this.negative=0,this.isubn(t),this.negative=1,this):this._iaddn(t)},n.prototype._iaddn=function(t){this.words[0]+=t;for(var e=0;e<this.length&&this.words[e]>=67108864;e++)this.words[e]-=67108864,e===this.length-1?this.words[e+1]=1:this.words[e+1]++;return this.length=Math.max(this.length,e+1),this},n.prototype.isubn=function(t){if(r("number"==typeof t),r(t<67108864),t<0)return this.iaddn(-t);if(0!==this.negative)return this.negative=0,this.iaddn(t),this.negative=1,this;if(this.words[0]-=t,1===this.length&&this.words[0]<0)this.words[0]=-this.words[0],this.negative=1;else for(var e=0;e<this.length&&this.words[e]<0;e++)this.words[e]+=67108864,this.words[e+1]-=1;return this.strip()},n.prototype.addn=function(t){return this.clone().iaddn(t)},n.prototype.subn=function(t){return this.clone().isubn(t)},n.prototype.iabs=function(){return this.negative=0,this},n.prototype.abs=function(){return this.clone().iabs()},n.prototype._ishlnsubmul=function(t,e,i){var n,s,a=t.length+i;this._expand(a);var o=0;for(n=0;n<t.length;n++){s=(0|this.words[n+i])+o;var c=(0|t.words[n])*e;o=((s-=67108863&c)>>26)-(c/67108864|0),this.words[n+i]=67108863&s}for(;n<this.length-i;n++)o=(s=(0|this.words[n+i])+o)>>26,this.words[n+i]=67108863&s;if(0===o)return this.strip();for(r(-1===o),o=0,n=0;n<this.length;n++)o=(s=-(0|this.words[n])+o)>>26,this.words[n]=67108863&s;return this.negative=1,this.strip()},n.prototype._wordDiv=function(t,e){var r=(this.length,t.length),i=this.clone(),s=t,a=0|s.words[s.length-1];0!=(r=26-this._countBits(a))&&(s=s.ushln(r),i.iushln(r),a=0|s.words[s.length-1]);var o,c=i.length-s.length;if("mod"!==e){(o=new n(null)).length=c+1,o.words=Array(o.length);for(var h=0;h<o.length;h++)o.words[h]=0}var u=i.clone()._ishlnsubmul(s,1,c);0===u.negative&&(i=u,o&&(o.words[c]=1));for(var l=c-1;l>=0;l--){var f=67108864*(0|i.words[s.length+l])+(0|i.words[s.length+l-1]);for(f=Math.min(f/a|0,67108863),i._ishlnsubmul(s,f,l);0!==i.negative;)f--,i.negative=0,i._ishlnsubmul(s,1,l),i.isZero()||(i.negative^=1);o&&(o.words[l]=f)}return o&&o.strip(),i.strip(),"div"!==e&&0!==r&&i.iushrn(r),{div:o||null,mod:i}},n.prototype.divmod=function(t,e,i){return r(!t.isZero()),this.isZero()?{div:new n(0),mod:new n(0)}:0!==this.negative&&0===t.negative?(o=this.neg().divmod(t,e),"mod"!==e&&(s=o.div.neg()),"div"!==e&&(a=o.mod.neg(),i&&0!==a.negative&&a.iadd(t)),{div:s,mod:a}):0===this.negative&&0!==t.negative?(o=this.divmod(t.neg(),e),"mod"!==e&&(s=o.div.neg()),{div:s,mod:o.mod}):this.negative&t.negative?(o=this.neg().divmod(t.neg(),e),"div"!==e&&(a=o.mod.neg(),i&&0!==a.negative&&a.isub(t)),{div:o.div,mod:a}):t.length>this.length||this.cmp(t)<0?{div:new n(0),mod:this}:1===t.length?"div"===e?{div:this.divn(t.words[0]),mod:null}:"mod"===e?{div:null,mod:new n(this.modn(t.words[0]))}:{div:this.divn(t.words[0]),mod:new n(this.modn(t.words[0]))}:this._wordDiv(t,e);var s,a,o},n.prototype.div=function(t){return this.divmod(t,"div",!1).div},n.prototype.mod=function(t){return this.divmod(t,"mod",!1).mod},n.prototype.umod=function(t){return this.divmod(t,"mod",!0).mod},n.prototype.divRound=function(t){var e=this.divmod(t);if(e.mod.isZero())return e.div;var r=0!==e.div.negative?e.mod.isub(t):e.mod,i=t.ushrn(1),n=t.andln(1),s=r.cmp(i);return s<0||1===n&&0===s?e.div:0!==e.div.negative?e.div.isubn(1):e.div.iaddn(1)},n.prototype.modn=function(t){r(t<=67108863);for(var e=(1<<26)%t,i=0,n=this.length-1;n>=0;n--)i=(e*i+(0|this.words[n]))%t;return i},n.prototype.idivn=function(t){r(t<=67108863);for(var e=0,i=this.length-1;i>=0;i--){var n=(0|this.words[i])+67108864*e;this.words[i]=n/t|0,e=n%t}return this.strip()},n.prototype.divn=function(t){return this.clone().idivn(t)},n.prototype.egcd=function(t){r(0===t.negative),r(!t.isZero());var e=this,i=t.clone();e=0!==e.negative?e.umod(t):e.clone();for(var s=new n(1),a=new n(0),o=new n(0),c=new n(1),h=0;e.isEven()&&i.isEven();)e.iushrn(1),i.iushrn(1),++h;for(var u=i.clone(),l=e.clone();!e.isZero();){for(var f=0,y=1;!(e.words[0]&y)&&f<26;++f,y<<=1);if(f>0)for(e.iushrn(f);f-- >0;)(s.isOdd()||a.isOdd())&&(s.iadd(u),a.isub(l)),s.iushrn(1),a.iushrn(1);for(var d=0,p=1;!(i.words[0]&p)&&d<26;++d,p<<=1);if(d>0)for(i.iushrn(d);d-- >0;)(o.isOdd()||c.isOdd())&&(o.iadd(u),c.isub(l)),o.iushrn(1),c.iushrn(1);e.cmp(i)>=0?(e.isub(i),s.isub(o),a.isub(c)):(i.isub(e),o.isub(s),c.isub(a))}return{a:o,b:c,gcd:i.iushln(h)}},n.prototype._invmp=function(t){r(0===t.negative),r(!t.isZero());var e=this,i=t.clone();e=0!==e.negative?e.umod(t):e.clone();for(var s,a=new n(1),o=new n(0),c=i.clone();e.cmpn(1)>0&&i.cmpn(1)>0;){for(var h=0,u=1;!(e.words[0]&u)&&h<26;++h,u<<=1);if(h>0)for(e.iushrn(h);h-- >0;)a.isOdd()&&a.iadd(c),a.iushrn(1);for(var l=0,f=1;!(i.words[0]&f)&&l<26;++l,f<<=1);if(l>0)for(i.iushrn(l);l-- >0;)o.isOdd()&&o.iadd(c),o.iushrn(1);e.cmp(i)>=0?(e.isub(i),a.isub(o)):(i.isub(e),o.isub(a))}return(s=0===e.cmpn(1)?a:o).cmpn(0)<0&&s.iadd(t),s},n.prototype.gcd=function(t){if(this.isZero())return t.abs();if(t.isZero())return this.abs();var e=this.clone(),r=t.clone();e.negative=0,r.negative=0;for(var i=0;e.isEven()&&r.isEven();i++)e.iushrn(1),r.iushrn(1);for(;;){for(;e.isEven();)e.iushrn(1);for(;r.isEven();)r.iushrn(1);var n=e.cmp(r);if(n<0){var s=e;e=r,r=s}else if(0===n||0===r.cmpn(1))break;e.isub(r)}return r.iushln(i)},n.prototype.invm=function(t){return this.egcd(t).a.umod(t)},n.prototype.isEven=function(){return!(1&this.words[0])},n.prototype.isOdd=function(){return!(1&~this.words[0])},n.prototype.andln=function(t){return this.words[0]&t},n.prototype.bincn=function(t){r("number"==typeof t);var e=t%26,i=(t-e)/26,n=1<<e;if(this.length<=i)return this._expand(i+1),this.words[i]|=n,this;for(var s=n,a=i;0!==s&&a<this.length;a++){var o=0|this.words[a];s=(o+=s)>>>26,o&=67108863,this.words[a]=o}return 0!==s&&(this.words[a]=s,this.length++),this},n.prototype.isZero=function(){return 1===this.length&&0===this.words[0]},n.prototype.cmpn=function(t){var e,i=t<0;if(0!==this.negative&&!i)return-1;if(0===this.negative&&i)return 1;if(this.strip(),this.length>1)e=1;else{i&&(t=-t),r(t<=67108863,"Number is too big");var n=0|this.words[0];e=n===t?0:n<t?-1:1}return 0!==this.negative?0|-e:e},n.prototype.cmp=function(t){if(0!==this.negative&&0===t.negative)return-1;if(0===this.negative&&0!==t.negative)return 1;var e=this.ucmp(t);return 0!==this.negative?0|-e:e},n.prototype.ucmp=function(t){if(this.length>t.length)return 1;if(this.length<t.length)return-1;for(var e=0,r=this.length-1;r>=0;r--){var i=0|this.words[r],n=0|t.words[r];if(i!==n){i<n?e=-1:i>n&&(e=1);break}}return e},n.prototype.gtn=function(t){return 1===this.cmpn(t)},n.prototype.gt=function(t){return 1===this.cmp(t)},n.prototype.gten=function(t){return this.cmpn(t)>=0},n.prototype.gte=function(t){return this.cmp(t)>=0},n.prototype.ltn=function(t){return-1===this.cmpn(t)},n.prototype.lt=function(t){return-1===this.cmp(t)},n.prototype.lten=function(t){return this.cmpn(t)<=0},n.prototype.lte=function(t){return this.cmp(t)<=0},n.prototype.eqn=function(t){return 0===this.cmpn(t)},n.prototype.eq=function(t){return 0===this.cmp(t)},n.red=function(t){return new E(t)},n.prototype.toRed=function(t){return r(!this.red,"Already a number in reduction context"),r(0===this.negative,"red works only with positives"),t.convertTo(this)._forceRed(t)},n.prototype.fromRed=function(){return r(this.red,"fromRed works only with numbers in reduction context"),this.red.convertFrom(this)},n.prototype._forceRed=function(t){return this.red=t,this},n.prototype.forceRed=function(t){return r(!this.red,"Already a number in reduction context"),this._forceRed(t)},n.prototype.redAdd=function(t){return r(this.red,"redAdd works only with red numbers"),this.red.add(this,t)},n.prototype.redIAdd=function(t){return r(this.red,"redIAdd works only with red numbers"),this.red.iadd(this,t)},n.prototype.redSub=function(t){return r(this.red,"redSub works only with red numbers"),this.red.sub(this,t)},n.prototype.redISub=function(t){return r(this.red,"redISub works only with red numbers"),this.red.isub(this,t)},n.prototype.redShl=function(t){return r(this.red,"redShl works only with red numbers"),this.red.shl(this,t)},n.prototype.redMul=function(t){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,t),this.red.mul(this,t)},n.prototype.redIMul=function(t){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,t),this.red.imul(this,t)},n.prototype.redSqr=function(){return r(this.red,"redSqr works only with red numbers"),this.red._verify1(this),this.red.sqr(this)},n.prototype.redISqr=function(){return r(this.red,"redISqr works only with red numbers"),this.red._verify1(this),this.red.isqr(this)},n.prototype.redSqrt=function(){return r(this.red,"redSqrt works only with red numbers"),this.red._verify1(this),this.red.sqrt(this)},n.prototype.redInvm=function(){return r(this.red,"redInvm works only with red numbers"),this.red._verify1(this),this.red.invm(this)},n.prototype.redNeg=function(){return r(this.red,"redNeg works only with red numbers"),this.red._verify1(this),this.red.neg(this)},n.prototype.redPow=function(t){return r(this.red&&!t.red,"redPow(normalNum)"),this.red._verify1(this),this.red.pow(this,t)};var g={k256:null,p224:null,p192:null,p25519:null};function m(t,e){this.name=t,this.p=new n(e,16),this.n=this.p.bitLength(),this.k=new n(1).iushln(this.n).isub(this.p),this.tmp=this._tmp()}function w(){m.call(this,"k256","ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f")}function A(){m.call(this,"p224","ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001")}function b(){m.call(this,"p192","ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff")}function v(){m.call(this,"25519","7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed")}function E(t){if("string"==typeof t){var e=n._prime(t);this.m=e.p,this.prime=e}else r(t.gtn(1),"modulus must be greater than 1"),this.m=t,this.prime=null}function k(t){E.call(this,t),this.shift=this.m.bitLength(),this.shift%26!=0&&(this.shift+=26-this.shift%26),this.r=new n(1).iushln(this.shift),this.r2=this.imod(this.r.sqr()),this.rinv=this.r._invmp(this.m),this.minv=this.rinv.mul(this.r).isubn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}m.prototype._tmp=function(){var t=new n(null);return t.words=Array(Math.ceil(this.n/13)),t},m.prototype.ireduce=function(t){var e,r=t;do{this.split(r,this.tmp),e=(r=(r=this.imulK(r)).iadd(this.tmp)).bitLength()}while(e>this.n);var i=e<this.n?-1:r.ucmp(this.p);return 0===i?(r.words[0]=0,r.length=1):i>0?r.isub(this.p):void 0!==r.strip?r.strip():r._strip(),r},m.prototype.split=function(t,e){t.iushrn(this.n,0,e)},m.prototype.imulK=function(t){return t.imul(this.k)},i(w,m),w.prototype.split=function(t,e){for(var r=4194303,i=Math.min(t.length,9),n=0;n<i;n++)e.words[n]=t.words[n];if(e.length=i,t.length<=9)return t.words[0]=0,void(t.length=1);var s=t.words[9];for(e.words[e.length++]=s&r,n=10;n<t.length;n++){var a=0|t.words[n];t.words[n-10]=(a&r)<<4|s>>>22,s=a}s>>>=22,t.words[n-10]=s,0===s&&t.length>10?t.length-=10:t.length-=9},w.prototype.imulK=function(t){t.words[t.length]=0,t.words[t.length+1]=0,t.length+=2;for(var e=0,r=0;r<t.length;r++){var i=0|t.words[r];e+=977*i,t.words[r]=67108863&e,e=64*i+(e/67108864|0)}return 0===t.words[t.length-1]&&(t.length--,0===t.words[t.length-1]&&t.length--),t},i(A,m),i(b,m),i(v,m),v.prototype.imulK=function(t){for(var e=0,r=0;r<t.length;r++){var i=19*(0|t.words[r])+e,n=67108863&i;i>>>=26,t.words[r]=n,e=i}return 0!==e&&(t.words[t.length++]=e),t},n._prime=function(t){if(g[t])return g[t];var e;if("k256"===t)e=new w;else if("p224"===t)e=new A;else if("p192"===t)e=new b;else{if("p25519"!==t)throw Error("Unknown prime "+t);e=new v}return g[t]=e,e},E.prototype._verify1=function(t){r(0===t.negative,"red works only with positives"),r(t.red,"red works only with red numbers")},E.prototype._verify2=function(t,e){r(!(t.negative|e.negative),"red works only with positives"),r(t.red&&t.red===e.red,"red works only with red numbers")},E.prototype.imod=function(t){return this.prime?this.prime.ireduce(t)._forceRed(this):t.umod(this.m)._forceRed(this)},E.prototype.neg=function(t){return t.isZero()?t.clone():this.m.sub(t)._forceRed(this)},E.prototype.add=function(t,e){this._verify2(t,e);var r=t.add(e);return r.cmp(this.m)>=0&&r.isub(this.m),r._forceRed(this)},E.prototype.iadd=function(t,e){this._verify2(t,e);var r=t.iadd(e);return r.cmp(this.m)>=0&&r.isub(this.m),r},E.prototype.sub=function(t,e){this._verify2(t,e);var r=t.sub(e);return r.cmpn(0)<0&&r.iadd(this.m),r._forceRed(this)},E.prototype.isub=function(t,e){this._verify2(t,e);var r=t.isub(e);return r.cmpn(0)<0&&r.iadd(this.m),r},E.prototype.shl=function(t,e){return this._verify1(t),this.imod(t.ushln(e))},E.prototype.imul=function(t,e){return this._verify2(t,e),this.imod(t.imul(e))},E.prototype.mul=function(t,e){return this._verify2(t,e),this.imod(t.mul(e))},E.prototype.isqr=function(t){return this.imul(t,t.clone())},E.prototype.sqr=function(t){return this.mul(t,t)},E.prototype.sqrt=function(t){if(t.isZero())return t.clone();var e=this.m.andln(3);if(r(e%2==1),3===e){var i=this.m.add(new n(1)).iushrn(2);return this.pow(t,i)}for(var s=this.m.subn(1),a=0;!s.isZero()&&0===s.andln(1);)a++,s.iushrn(1);r(!s.isZero());var o=new n(1).toRed(this),c=o.redNeg(),h=this.m.subn(1).iushrn(1),u=this.m.bitLength();for(u=new n(2*u*u).toRed(this);0!==this.pow(u,h).cmp(c);)u.redIAdd(c);for(var l=this.pow(u,s),f=this.pow(t,s.addn(1).iushrn(1)),y=this.pow(t,s),d=a;0!==y.cmp(o);){for(var p=y,g=0;0!==p.cmp(o);g++)p=p.redSqr();r(g<d);var m=this.pow(l,new n(1).iushln(d-g-1));f=f.redMul(m),l=m.redSqr(),y=y.redMul(l),d=g}return f},E.prototype.invm=function(t){var e=t._invmp(this.m);return 0!==e.negative?(e.negative=0,this.imod(e).redNeg()):this.imod(e)},E.prototype.pow=function(t,e){if(e.isZero())return new n(1).toRed(this);if(0===e.cmpn(1))return t.clone();var r=Array(16);r[0]=new n(1).toRed(this),r[1]=t;for(var i=2;i<r.length;i++)r[i]=this.mul(r[i-1],t);var s=r[0],a=0,o=0,c=e.bitLength()%26;for(0===c&&(c=26),i=e.length-1;i>=0;i--){for(var h=e.words[i],u=c-1;u>=0;u--){var l=h>>u&1;s!==r[0]&&(s=this.sqr(s)),0!==l||0!==a?(a<<=1,a|=l,(4==++o||0===i&&0===u)&&(s=this.mul(s,r[a]),o=0,a=0)):o=0}c=26}return s},E.prototype.convertTo=function(t){var e=t.umod(this.m);return e===t?e.clone():e},E.prototype.convertFrom=function(t){var e=t.clone();return e.red=null,e},n.mont=function(t){return new k(t)},i(k,E),k.prototype.convertTo=function(t){return this.imod(t.ushln(this.shift))},k.prototype.convertFrom=function(t){var e=this.imod(t.mul(this.rinv));return e.red=null,e},k.prototype.imul=function(t,e){if(t.isZero()||e.isZero())return t.words[0]=0,t.length=1,t;var r=t.imul(e),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),n=r.isub(i).iushrn(this.shift),s=n;return n.cmp(this.m)>=0?s=n.isub(this.m):n.cmpn(0)<0&&(s=n.iadd(this.m)),s._forceRed(this)},k.prototype.mul=function(t,e){if(t.isZero()||e.isZero())return new n(0)._forceRed(this);var r=t.mul(e),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),s=r.isub(i).iushrn(this.shift),a=s;return s.cmp(this.m)>=0?a=s.isub(this.m):s.cmpn(0)<0&&(a=s.iadd(this.m)),a._forceRed(this)},k.prototype.invm=function(t){return this.imod(t._invmp(this.m).mul(this.r2))._forceRed(this)}}(to,as);var eo=/*@__PURE__*/os(to.exports);class ro extends Wa{constructor(t){if(super(),void 0===t)throw Error("Invalid BigInteger input");const e=("string"==typeof t||t instanceof String)&&t.startsWith("0x");this.value=e?new eo(t.substring(2),16):new eo(t)}clone(){return new ro(this.value.clone())}iinc(){return this.value.iadd(new eo(1)),this}inc(){return this.clone().iinc()}idec(){return this.value.isub(new eo(1)),this}dec(){return this.clone().idec()}iadd(t){return this.value.iadd(t.value),this}add(t){return this.clone().iadd(t)}isub(t){return this.value.isub(t.value),this}sub(t){return this.clone().isub(t)}imul(t){return this.value.imul(t.value),this}mul(t){return this.clone().imul(t)}imod(t){return this.value=this.value.umod(t.value),this}mod(t){return this.clone().imod(t)}modExp(t,e){const r=e.isEven()?eo.red(e.value):eo.mont(e.value),i=this.clone();return i.value=i.value.toRed(r).redPow(t.value).fromRed(),i}modInv(t){if(!this.gcd(t).isOne())throw Error("Inverse does not exist");return new ro(this.value.invm(t.value))}idiv(t){return this.value=this.value.div(t.value),this}div(t){return this.clone().idiv(t)}gcd(t){return new ro(this.value.gcd(t.value))}ileftShift(t){return t.isNegative()?this.irightShift(t.negate()):(this.value.ishln(t.value.toNumber()),this)}leftShift(t){return this.clone().ileftShift(t)}irightShift(t){return t.isNegative()?this.ileftShift(t.negate()):(this.value.ishrn(t.value.toNumber()),this)}rightShift(t){return this.clone().irightShift(t)}ixor(t){return this.value.ixor(t.value),this}xor(t){return this.clone().ixor(t)}ibitwiseAnd(t){return this.value.iand(t.value),this}bitwiseAnd(t){return this.clone().ibitwiseAnd(t)}ibitwiseOr(t){return this.value.ior(t.value),this}equal(t){return this.value.eq(t.value)}lt(t){return this.value.lt(t.value)}lte(t){return this.value.lte(t.value)}gt(t){return this.value.gt(t.value)}gte(t){return this.value.gte(t.value)}isZero(){return this.value.isZero()}isOne(){return this.value.eq(new eo(1))}isNegative(){return this.value.isNeg()}isEven(){return this.value.isEven()}abs(){const t=this.clone();return t.value=t.value.abs(),t}negate(){const t=this.clone();return t.value.ineg(),t}toString(){return this.value.toString()}toNumber(){return this.value.toNumber()}getBit(t){return this.value.testn(t)?1:0}bitLength(){return this.value.bitLength()}byteLength(){return this.value.byteLength()}toUint8Array(t="be",e){return this.value.toArrayLike(Uint8Array,t,e)}}var io=/*#__PURE__*/Object.freeze({__proto__:null,default:ro});function no(t){if(!Number.isSafeInteger(t)||t<0)throw Error("Wrong positive integer: "+t)}function so(t,...e){if(!((r=t)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Expected Uint8Array");var r;if(e.length>0&&!e.includes(t.length))throw Error(`Expected Uint8Array of length ${e}, not of length=${t.length}`)}function ao(t,e=!0){if(t.destroyed)throw Error("Hash instance has been destroyed");if(e&&t.finished)throw Error("Hash#digest() has already been called")}function oo(t,e){so(t);const r=e.outputLen;if(t.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const co=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0;
+/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ho(t){return t instanceof Uint8Array||null!=t&&"object"==typeof t&&"Uint8Array"===t.constructor.name}const uo=t=>new DataView(t.buffer,t.byteOffset,t.byteLength),lo=(t,e)=>t<<32-e|t>>>e;if(!(68===new Uint8Array(new Uint32Array([287454020]).buffer)[0]))throw Error("Non little-endian hardware is not supported");function fo(t){if("string"!=typeof t)throw Error("utf8ToBytes expected string, got "+typeof t);return new Uint8Array((new TextEncoder).encode(t))}function yo(t){if("string"==typeof t&&(t=fo(t)),!ho(t))throw Error("expected Uint8Array, got "+typeof t);return t}function po(...t){let e=0;for(let r=0;r<t.length;r++){const i=t[r];if(!ho(i))throw Error("Uint8Array expected");e+=i.length}const r=new Uint8Array(e);for(let e=0,i=0;e<t.length;e++){const n=t[e];r.set(n,i),i+=n.length}return r}class go{clone(){return this._cloneInto()}}function mo(t){const e=e=>t().update(yo(e)).digest(),r=t();return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=()=>t(),e}function wo(t=32){if(co&&"function"==typeof co.getRandomValues)return co.getRandomValues(new Uint8Array(t));throw Error("crypto.getRandomValues must be defined")}class Ao extends go{constructor(t,e){super(),this.finished=!1,this.destroyed=!1,function(t){if("function"!=typeof t||"function"!=typeof t.create)throw Error("Hash should be wrapped by utils.wrapConstructor");no(t.outputLen),no(t.blockLen)}(t);const r=yo(e);if(this.iHash=t.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const i=this.blockLen,n=new Uint8Array(i);n.set(r.length>i?t.create().update(r).digest():r);for(let t=0;t<n.length;t++)n[t]^=54;this.iHash.update(n),this.oHash=t.create();for(let t=0;t<n.length;t++)n[t]^=106;this.oHash.update(n),n.fill(0)}update(t){return ao(this),this.iHash.update(t),this}digestInto(t){ao(this),so(t,this.outputLen),this.finished=!0,this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){const t=new Uint8Array(this.oHash.outputLen);return this.digestInto(t),t}_cloneInto(t){t||(t=Object.create(Object.getPrototypeOf(this),{}));const{oHash:e,iHash:r,finished:i,destroyed:n,blockLen:s,outputLen:a}=this;return t.finished=i,t.destroyed=n,t.blockLen=s,t.outputLen=a,t.oHash=e._cloneInto(t.oHash),t.iHash=r._cloneInto(t.iHash),t}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const bo=(t,e,r)=>new Ao(t,e).update(r).digest();bo.create=(t,e)=>new Ao(t,e);Wa.setImplementation("undefined"!=typeof BigInt?$a:ro);
 /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
-const mo=Object.freeze(Va.new(2));function wo(t){return t instanceof Uint8Array||null!=t&&"object"==typeof t&&"Uint8Array"===t.constructor.name}const Ao=/* @__PURE__ */Array.from({length:256},((t,e)=>e.toString(16).padStart(2,"0")));function bo(t){if(!wo(t))throw Error("Uint8Array expected");let e="";for(let r=0;r<t.length;r++)e+=Ao[t[r]];return e}function vo(t){const e=t instanceof Va?bo(t.toUint8Array()):t.toString(16);return 1&e.length?"0"+e:e}const Eo={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function ko(t){return t>=Eo._0&&t<=Eo._9?t-Eo._0:t>=Eo._A&&t<=Eo._F?t-(Eo._A-10):t>=Eo._a&&t<=Eo._f?t-(Eo._a-10):void 0}function So(t){if("string"!=typeof t)throw Error("hex string expected, got "+typeof t);const e=t.length,r=e/2;if(e%2)throw Error("padded hex string expected, got unpadded hex of length "+e);const i=new Uint8Array(r);for(let e=0,n=0;e<r;e++,n+=2){const r=ko(t.charCodeAt(n)),s=ko(t.charCodeAt(n+1));if(void 0===r||void 0===s){const e=t[n]+t[n+1];throw Error('hex string expected, got non-hex character "'+e+'" at index '+n)}i[e]=16*r+s}return i}function Io(t){return Va.new(t)}function Co(t){if(!wo(t))throw Error("Uint8Array expected");return Va.new(t.slice().reverse())}function Bo(t,e){return t.toUint8Array("be",e)}function Ko(t,e){return t.toUint8Array("le",e)}function Po(t,e,r){let i;if("string"==typeof e)try{i=So(e)}catch(r){throw Error(`${t} must be valid hex string, got "${e}". Cause: ${r}`)}else{if(!wo(e))throw Error(t+" must be hex string or Uint8Array");i=new Uint8Array(e)}const n=i.length;if("number"==typeof r&&n!==r)throw Error(`${t} expected ${r} bytes, got ${n}`);return i}function Do(...t){let e=0;for(let r=0;r<t.length;r++){const i=t[r];if(!wo(i))throw Error("Uint8Array expected");e+=i.length}let r=new Uint8Array(e),i=0;for(let e=0;e<t.length;e++){const n=t[e];r.set(n,i),i+=n.length}return r}const Uo=t=>mo.leftShift(Va.new(t-1)).idec(),Mo=t=>new Uint8Array(t),xo=t=>Uint8Array.from(t);function Qo(t,e,r){if("number"!=typeof t||t<2)throw Error("hashLen must be a number");if("number"!=typeof e||e<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let i=Mo(t),n=Mo(t),s=0;const a=()=>{i.fill(1),n.fill(0),s=0},o=(...t)=>r(n,i,...t),c=(t=Mo())=>{n=o(xo([0]),t),i=o(),0!==t.length&&(n=o(xo([1]),t),i=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let t=0;const r=[];for(;t<e;){i=o();const e=i.slice();r.push(e),t+=i.length}return Do(...r)};return(t,e)=>{let r;for(a(),c(t);!(r=e(h()));)c();return a(),r}}const Ro={BigInteger:t=>t instanceof Va,function:t=>"function"==typeof t,boolean:t=>"boolean"==typeof t,string:t=>"string"==typeof t,stringOrUint8Array:t=>"string"==typeof t||wo(t),isSafeInteger:t=>Number.isSafeInteger(t),array:t=>Array.isArray(t),field:(t,e)=>e.Fp.isValid(t),hash:t=>"function"==typeof t&&Number.isSafeInteger(t.outputLen)};function _o(t,e,r={}){const i=(e,r,i)=>{const n=Ro[r];if("function"!=typeof n)throw Error(`Invalid validator "${r}", expected function`);const s=t[e];if(!(i&&void 0===s||n(s,t)))throw Error(`Invalid param ${e+""}=${s} (${typeof s}), expected ${r}`)};for(const[t,r]of Object.entries(e))i(t,r,!1);for(const[t,e]of Object.entries(r))i(t,e,!0);return t}var To=/*#__PURE__*/Object.freeze({__proto__:null,bitGet:(t,e)=>t.getBit(e),bitLen:function(t){return t.bitLength()},bitMask:Uo,bitSet:(t,e,r)=>{throw Error("unsupported bitSet")},bytesToHex:bo,bytesToNumberBE:Io,bytesToNumberLE:Co,concatBytes:Do,createHmacDrbg:Qo,ensureBytes:Po,equalBytes:function(t,e){if(t.length!==e.length)return!1;let r=0;for(let i=0;i<t.length;i++)r|=t[i]^e[i];return 0===r},hexToBytes:So,hexToNumber:function(t){if("string"!=typeof t)throw Error("hex string expected, got "+typeof t);return Va.new(""===t?"0":"0x"+t)},isBytes:wo,numberToBytesBE:Bo,numberToBytesLE:Ko,numberToHexUnpadded:vo,numberToVarBytesBE:function(t){return So(vo(t))},utf8ToBytes:function(t){if("string"!=typeof t)throw Error("utf8ToBytes expected string, got "+typeof t);return new Uint8Array((new TextEncoder).encode(t))},validateObject:_o});
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Lo=Object.freeze(Va.new(0)),No=Object.freeze(Va.new(1)),Oo=Object.freeze(Va.new(2)),Fo=Object.freeze(Va.new(3)),Ho=Object.freeze(Va.new(4)),zo=Object.freeze(Va.new(5)),Go=Object.freeze(Va.new(8)),qo=Object.freeze(Va.new(9)),jo=Object.freeze(Va.new(16));function Vo(t,e){return t.mod(e)}function Zo(t,e,r){return t.modExp(e,r)}function Jo(t,e,r){return t.modExp(Oo.leftShift(e.dec()),r)}function Yo(t,e){return t.modInv(e)}function Wo(t){if(t.mod(Ho).equal(Fo)){const e=t.add(No).irightShift(Oo);return function(t,r){const i=t.pow(r,e);if(!t.eql(t.sqr(i),r))throw Error("Cannot find square root");return i}}if(t.mod(Go).equal(zo)){const e=t.sub(zo).irightShift(Fo);return function(t,r){const i=t.mul(r,Oo),n=t.pow(i,e),s=t.mul(r,n),a=t.mul(t.mul(s,Oo),n),o=t.mul(s,t.sub(a,t.ONE));if(!t.eql(t.sqr(o),r))throw Error("Cannot find square root");return o}}return t.mod(jo).equal(qo),function(t){const e=t.dec().rightShift(No);let r=t.dec(),i=Va.new(0);for(;r.isEven();)r.irightShift(No),i.iinc();let n=Va.new(2);const s=t.dec();for(;n.lt(t)&&!Zo(n,e,t).equal(s);)n.iinc();if(i.isOne()){const e=t.inc().irightShift(Oo);return function(t,r){const i=t.pow(r,e);if(!t.eql(t.sqr(i),r))throw Error("Cannot find square root");return i}}const a=r.inc().irightShift(No);return function(t,s){if(t.eql(t.pow(s,e),t.neg(t.ONE)))throw Error("Cannot find square root");let o=i,c=t.pow(t.mul(t.ONE,n),r),h=t.pow(s,a),u=t.pow(s,r);for(;!t.eql(u,t.ONE);){if(t.eql(u,t.ZERO))return t.ZERO;let e=Va.new(1);for(let r=t.sqr(u);e.lt(o)&&!t.eql(r,t.ONE);e.iinc())r=t.sqr(r);const r=t.pow(c,No.leftShift(o.sub(e).idec()));c=t.sqr(r),h=t.mul(h,r),u=t.mul(u,c),o=e}return h}}(t)}const $o=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Xo(t,e){const r=void 0!==e?e:t.bitLength();return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function tc(t,e,r=!1,i={}){if(t.lte(Lo))throw Error("Expected Field ORDER > 0, got "+t);const{nBitLength:n,nByteLength:s}=Xo(t,e);if(s>2048)throw Error("Field lengths over 2048 bytes are not supported");const a=Wo(t),o=Object.freeze({ORDER:t,BITS:n,BYTES:s,MASK:Uo(n),ZERO:Lo,ONE:No,create:e=>Vo(e,t),isValid:e=>{if(!(e instanceof Va))throw Error("Invalid field element: expected bigint, got "+typeof e);return Lo.lte(e)&&e.lt(t)},is0:t=>t.isZero(),isOdd:t=>!t.isEven(),neg:e=>Vo(e.negate(),t),eql:(t,e)=>t.equal(e),sqr:e=>Vo(e.mul(e),t),add:(e,r)=>Vo(e.add(r),t),sub:(e,r)=>Vo(e.sub(r),t),mul:(e,r)=>Vo(e.mul(r),t),pow:(t,e)=>function(t,e,r){if(r.isNegative())throw Error("Expected power > 0");if(r.isZero())return t.ONE;if(r.isOne())return e;let i=t.ONE,n=e;for(;r.gt(Lo);)r.isEven()||(i=t.mul(i,n)),n=t.sqr(n),r=r.rightShift(No);return i}(o,t,e),div:(e,r)=>Vo(e.mul(Yo(r,t)),t),sqrN:t=>t.mul(t),addN:(t,e)=>t.add(e),subN:(t,e)=>t.sub(e),mulN:(t,e)=>t.mul(e),inv:e=>Yo(e,t),sqrt:i.sqrt||(t=>a(o,t)),invertBatch:t=>function(t,e){const r=Array(e.length),i=e.reduce(((e,i,n)=>t.is0(i)?e:(r[n]=e,t.mul(e,i))),t.ONE),n=t.inv(i);return e.reduceRight(((e,i,n)=>t.is0(i)?e:(r[n]=t.mul(e,r[n]),t.mul(e,i))),n),r}(o,t),cmov:(t,e,r)=>r?e:t,toBytes:t=>r?Ko(t,s):Bo(t,s),fromBytes:t=>{if(t.length!==s)throw Error(`Fp.fromBytes: expected ${s}, got ${t.length}`);return r?Co(t):Io(t)}});return Object.freeze(o)}function ec(t){if(!(t instanceof Va))throw Error("field order must be bigint");return t.byteLength()}function rc(t){const e=ec(t);return e+Math.ceil(e/2)}
+const vo=Object.freeze(Wa.new(2));function Eo(t){return t instanceof Uint8Array||null!=t&&"object"==typeof t&&"Uint8Array"===t.constructor.name}const ko=/* @__PURE__ */Array.from({length:256},((t,e)=>e.toString(16).padStart(2,"0")));function So(t){if(!Eo(t))throw Error("Uint8Array expected");let e="";for(let r=0;r<t.length;r++)e+=ko[t[r]];return e}function Io(t){const e=t instanceof Wa?So(t.toUint8Array()):t.toString(16);return 1&e.length?"0"+e:e}const Co={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function Bo(t){return t>=Co._0&&t<=Co._9?t-Co._0:t>=Co._A&&t<=Co._F?t-(Co._A-10):t>=Co._a&&t<=Co._f?t-(Co._a-10):void 0}function Ko(t){if("string"!=typeof t)throw Error("hex string expected, got "+typeof t);const e=t.length,r=e/2;if(e%2)throw Error("padded hex string expected, got unpadded hex of length "+e);const i=new Uint8Array(r);for(let e=0,n=0;e<r;e++,n+=2){const r=Bo(t.charCodeAt(n)),s=Bo(t.charCodeAt(n+1));if(void 0===r||void 0===s){const e=t[n]+t[n+1];throw Error('hex string expected, got non-hex character "'+e+'" at index '+n)}i[e]=16*r+s}return i}function Po(t){return Wa.new(t)}function Do(t){if(!Eo(t))throw Error("Uint8Array expected");return Wa.new(t.slice().reverse())}function Uo(t,e){return t.toUint8Array("be",e)}function Mo(t,e){return t.toUint8Array("le",e)}function xo(t,e,r){let i;if("string"==typeof e)try{i=Ko(e)}catch(r){throw Error(`${t} must be valid hex string, got "${e}". Cause: ${r}`)}else{if(!Eo(e))throw Error(t+" must be hex string or Uint8Array");i=new Uint8Array(e)}const n=i.length;if("number"==typeof r&&n!==r)throw Error(`${t} expected ${r} bytes, got ${n}`);return i}function Qo(...t){let e=0;for(let r=0;r<t.length;r++){const i=t[r];if(!Eo(i))throw Error("Uint8Array expected");e+=i.length}let r=new Uint8Array(e),i=0;for(let e=0;e<t.length;e++){const n=t[e];r.set(n,i),i+=n.length}return r}const Ro=t=>vo.leftShift(Wa.new(t-1)).idec(),_o=t=>new Uint8Array(t),To=t=>Uint8Array.from(t);function Lo(t,e,r){if("number"!=typeof t||t<2)throw Error("hashLen must be a number");if("number"!=typeof e||e<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let i=_o(t),n=_o(t),s=0;const a=()=>{i.fill(1),n.fill(0),s=0},o=(...t)=>r(n,i,...t),c=(t=_o())=>{n=o(To([0]),t),i=o(),0!==t.length&&(n=o(To([1]),t),i=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let t=0;const r=[];for(;t<e;){i=o();const e=i.slice();r.push(e),t+=i.length}return Qo(...r)};return(t,e)=>{let r;for(a(),c(t);!(r=e(h()));)c();return a(),r}}const No={BigInteger:t=>t instanceof Wa,function:t=>"function"==typeof t,boolean:t=>"boolean"==typeof t,string:t=>"string"==typeof t,stringOrUint8Array:t=>"string"==typeof t||Eo(t),isSafeInteger:t=>Number.isSafeInteger(t),array:t=>Array.isArray(t),field:(t,e)=>e.Fp.isValid(t),hash:t=>"function"==typeof t&&Number.isSafeInteger(t.outputLen)};function Oo(t,e,r={}){const i=(e,r,i)=>{const n=No[r];if("function"!=typeof n)throw Error(`Invalid validator "${r}", expected function`);const s=t[e];if(!(i&&void 0===s||n(s,t)))throw Error(`Invalid param ${e+""}=${s} (${typeof s}), expected ${r}`)};for(const[t,r]of Object.entries(e))i(t,r,!1);for(const[t,e]of Object.entries(r))i(t,e,!0);return t}var Fo=/*#__PURE__*/Object.freeze({__proto__:null,bitGet:(t,e)=>t.getBit(e),bitLen:function(t){return t.bitLength()},bitMask:Ro,bitSet:(t,e,r)=>{throw Error("unsupported bitSet")},bytesToHex:So,bytesToNumberBE:Po,bytesToNumberLE:Do,concatBytes:Qo,createHmacDrbg:Lo,ensureBytes:xo,equalBytes:function(t,e){if(t.length!==e.length)return!1;let r=0;for(let i=0;i<t.length;i++)r|=t[i]^e[i];return 0===r},hexToBytes:Ko,hexToNumber:function(t){if("string"!=typeof t)throw Error("hex string expected, got "+typeof t);return Wa.new(""===t?"0":"0x"+t)},isBytes:Eo,numberToBytesBE:Uo,numberToBytesLE:Mo,numberToHexUnpadded:Io,numberToVarBytesBE:function(t){return Ko(Io(t))},utf8ToBytes:function(t){if("string"!=typeof t)throw Error("utf8ToBytes expected string, got "+typeof t);return new Uint8Array((new TextEncoder).encode(t))},validateObject:Oo});
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Ho=Object.freeze(Wa.new(0)),zo=Object.freeze(Wa.new(1)),Go=Object.freeze(Wa.new(2)),qo=Object.freeze(Wa.new(3)),jo=Object.freeze(Wa.new(4)),Vo=Object.freeze(Wa.new(5)),Zo=Object.freeze(Wa.new(8)),Jo=Object.freeze(Wa.new(9)),Yo=Object.freeze(Wa.new(16));function Wo(t,e){return t.mod(e)}function $o(t,e,r){return t.modExp(e,r)}function Xo(t,e,r){return t.modExp(Go.leftShift(e.dec()),r)}function tc(t,e){return t.modInv(e)}function ec(t){if(t.mod(jo).equal(qo)){const e=t.add(zo).irightShift(Go);return function(t,r){const i=t.pow(r,e);if(!t.eql(t.sqr(i),r))throw Error("Cannot find square root");return i}}if(t.mod(Zo).equal(Vo)){const e=t.sub(Vo).irightShift(qo);return function(t,r){const i=t.mul(r,Go),n=t.pow(i,e),s=t.mul(r,n),a=t.mul(t.mul(s,Go),n),o=t.mul(s,t.sub(a,t.ONE));if(!t.eql(t.sqr(o),r))throw Error("Cannot find square root");return o}}return t.mod(Yo).equal(Jo),function(t){const e=t.dec().rightShift(zo);let r=t.dec(),i=Wa.new(0);for(;r.isEven();)r.irightShift(zo),i.iinc();let n=Wa.new(2);const s=t.dec();for(;n.lt(t)&&!$o(n,e,t).equal(s);)n.iinc();if(i.isOne()){const e=t.inc().irightShift(Go);return function(t,r){const i=t.pow(r,e);if(!t.eql(t.sqr(i),r))throw Error("Cannot find square root");return i}}const a=r.inc().irightShift(zo);return function(t,s){if(t.eql(t.pow(s,e),t.neg(t.ONE)))throw Error("Cannot find square root");let o=i,c=t.pow(t.mul(t.ONE,n),r),h=t.pow(s,a),u=t.pow(s,r);for(;!t.eql(u,t.ONE);){if(t.eql(u,t.ZERO))return t.ZERO;let e=Wa.new(1);for(let r=t.sqr(u);e.lt(o)&&!t.eql(r,t.ONE);e.iinc())r=t.sqr(r);const r=t.pow(c,zo.leftShift(o.sub(e).idec()));c=t.sqr(r),h=t.mul(h,r),u=t.mul(u,c),o=e}return h}}(t)}const rc=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function ic(t,e){const r=void 0!==e?e:t.bitLength();return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function nc(t,e,r=!1,i={}){if(t.lte(Ho))throw Error("Expected Field ORDER > 0, got "+t);const{nBitLength:n,nByteLength:s}=ic(t,e);if(s>2048)throw Error("Field lengths over 2048 bytes are not supported");const a=ec(t),o=Object.freeze({ORDER:t,BITS:n,BYTES:s,MASK:Ro(n),ZERO:Ho,ONE:zo,create:e=>Wo(e,t),isValid:e=>{if(!(e instanceof Wa))throw Error("Invalid field element: expected bigint, got "+typeof e);return Ho.lte(e)&&e.lt(t)},is0:t=>t.isZero(),isOdd:t=>!t.isEven(),neg:e=>Wo(e.negate(),t),eql:(t,e)=>t.equal(e),sqr:e=>Wo(e.mul(e),t),add:(e,r)=>Wo(e.add(r),t),sub:(e,r)=>Wo(e.sub(r),t),mul:(e,r)=>Wo(e.mul(r),t),pow:(t,e)=>function(t,e,r){if(r.isNegative())throw Error("Expected power > 0");if(r.isZero())return t.ONE;if(r.isOne())return e;let i=t.ONE,n=e;for(;r.gt(Ho);)r.isEven()||(i=t.mul(i,n)),n=t.sqr(n),r=r.rightShift(zo);return i}(o,t,e),div:(e,r)=>Wo(e.mul(tc(r,t)),t),sqrN:t=>t.mul(t),addN:(t,e)=>t.add(e),subN:(t,e)=>t.sub(e),mulN:(t,e)=>t.mul(e),inv:e=>tc(e,t),sqrt:i.sqrt||(t=>a(o,t)),invertBatch:t=>function(t,e){const r=Array(e.length),i=e.reduce(((e,i,n)=>t.is0(i)?e:(r[n]=e,t.mul(e,i))),t.ONE),n=t.inv(i);return e.reduceRight(((e,i,n)=>t.is0(i)?e:(r[n]=t.mul(e,r[n]),t.mul(e,i))),n),r}(o,t),cmov:(t,e,r)=>r?e:t,toBytes:t=>r?Mo(t,s):Uo(t,s),fromBytes:t=>{if(t.length!==s)throw Error(`Fp.fromBytes: expected ${s}, got ${t.length}`);return r?Do(t):Po(t)}});return Object.freeze(o)}function sc(t){if(!(t instanceof Wa))throw Error("field order must be bigint");return t.byteLength()}function ac(t){const e=sc(t);return e+Math.ceil(e/2)}
 /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
-const ic=Object.freeze(Va.new(0)),nc=Object.freeze(Va.new(1));function sc(t,e){const r=(t,e)=>{const r=e.negate();return t?r:e},i=t=>({windows:Math.ceil(e/t)+1,windowSize:2**(t-1)});return{constTimeNegate:r,unsafeLadder(e,r){const i=r.clone();let n=t.ZERO,s=e;for(;i.gt(ic);)i.isEven()||(n=n.add(s)),s=s.double(),i.irightShift(nc);return n},precomputeWindow(t,e){const{windows:r,windowSize:n}=i(e),s=[];let a=t,o=a;for(let t=0;t<r;t++){o=a,s.push(o);for(let t=1;t<n;t++)o=o.add(a),s.push(o);a=o.double()}return s},wNAF(e,n,s){const a=s.clone(),{windows:o,windowSize:c}=i(e);let h=t.ZERO,u=t.BASE;const l=Va.new(2**e-1),f=2**e,y=Va.new(e);for(let t=0;t<o;t++){const e=t*c;let i=a.bitwiseAnd(l).toNumber();a.irightShift(y),i>c&&(i-=f,a.iinc());const s=e,o=e+Math.abs(i)-1,d=t%2!=0,p=i<0;0===i?u=u.add(r(d,n[s])):h=h.add(r(p,n[o]))}return{p:h,f:u}},wNAFCached(t,e,r,i){const n=t._WINDOW_SIZE||1;let s=e.get(t);return s||(s=this.precomputeWindow(t,n),1!==n&&e.set(t,i(s))),this.wNAF(n,s,r)}}}function ac(t){return _o(t.Fp,$o.reduce(((t,e)=>(t[e]="function",t)),{ORDER:"BigInteger",MASK:"BigInteger",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),_o(t,{n:"BigInteger",h:"BigInteger",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Xo(t.n,t.nBitLength),...t,p:t.Fp.ORDER})}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:oc,hexToBytes:cc}=To,hc={Err:class extends Error{constructor(t=""){super(t)}},_parseInt(t){const{Err:e}=hc;if(t.length<2||2!==t[0])throw new e("Invalid signature integer tag");const r=t[1],i=t.subarray(2,r+2);if(!r||i.length!==r)throw new e("Invalid signature integer: wrong length");if(128&i[0])throw new e("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new e("Invalid signature integer: unnecessary leading zero");return{d:oc(i),l:t.subarray(r+2)}},toSig(t){const{Err:e}=hc,r="string"==typeof t?cc(t):t;if(!wo(r))throw Error("ui8a expected");let i=r.length;if(i<2||48!=r[0])throw new e("Invalid signature tag");if(r[1]!==i-2)throw new e("Invalid signature: incorrect length");const{d:n,l:s}=hc._parseInt(r.subarray(2)),{d:a,l:o}=hc._parseInt(s);if(o.length)throw new e("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(t){const e=t=>8&Number.parseInt(t[0],16)?"00"+t:t,r=t=>{const e=t instanceof Va?bo(t.toUint8Array()):t.toString(16);return 1&e.length?"0"+e:e},i=e(r(t.s)),n=e(r(t.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},uc=Object.freeze(Va.new(0)),lc=Object.freeze(Va.new(1));Object.freeze(Va.new(2));const fc=Object.freeze(Va.new(3));function yc(t){const e=function(t){const e=ac(t);_o(e,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=e;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||!(r.beta instanceof Va)||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...e})}(t),{Fp:r}=e,i=e.toBytes||((t,e,i)=>{const n=e.toAffine();return Do(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=e.fromBytes||(t=>{const e=t.subarray(1);return{x:r.fromBytes(e.subarray(0,r.BYTES)),y:r.fromBytes(e.subarray(r.BYTES,2*r.BYTES))}});function s(t){const{a:i,b:n}=e,s=r.sqr(t),a=r.mul(s,t);return r.add(r.add(a,r.mul(t,i)),n)}if(!r.eql(r.sqr(e.Gy),s(e.Gx)))throw Error("bad generator point: equation left != right");function a(t){return t instanceof Va&&uc.lt(t)&&t.lt(e.n)}function o(t){if(!a(t))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(t){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=e;if(r&&!(t instanceof Va)){if(wo(t)&&(t=bo(t)),"string"!=typeof t||!r.includes(t.length))throw Error("Invalid key");t=t.padStart(2*i,"0")}let a;try{a=t instanceof Va?t:Io(Po("private key",t,i))}catch(e){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof t}`)}return n&&(a=Vo(a,s)),o(a),a}const h=new Map;function u(t){if(!(t instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(t,e,i){if(this.px=t,this.py=e,this.pz=i,null==t||!r.isValid(t))throw Error("x required");if(null==e||!r.isValid(e))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(t){const{x:e,y:i}=t||{};if(!t||!r.isValid(e)||!r.isValid(i))throw Error("invalid affine point");if(t instanceof l)throw Error("projective point not allowed");const n=t=>r.eql(t,r.ZERO);return n(e)&&n(i)?l.ZERO:new l(e,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(t){const e=r.invertBatch(t.map((t=>t.pz)));return t.map(((t,r)=>t.toAffine(e[r]))).map(l.fromAffine)}static fromHex(t){const e=l.fromAffine(n(Po("pointHex",t)));return e.assertValidity(),e}static fromPrivateKey(t){return l.BASE.multiply(c(t))}_setWindowSize(t){this._WINDOW_SIZE=t,h.delete(this)}assertValidity(){if(this.is0()){if(e.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:t,y:i}=this.toAffine();if(!r.isValid(t)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(t);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:t}=this.toAffine();if(r.isOdd)return!r.isOdd(t);throw Error("Field doesn't support isOdd")}equals(t){u(t);const{px:e,py:i,pz:n}=this,{px:s,py:a,pz:o}=t,c=r.eql(r.mul(e,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:t,b:i}=e,n=r.mul(i,fc),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,f=r.mul(s,s),y=r.mul(a,a),d=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(t,u),h=r.mul(n,d),h=r.add(c,h),c=r.sub(y,h),h=r.add(y,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),d=r.mul(t,d),p=r.sub(f,d),p=r.mul(t,p),p=r.add(p,u),u=r.add(f,f),f=r.add(u,f),f=r.add(f,d),f=r.mul(f,p),h=r.add(h,f),d=r.mul(a,o),d=r.add(d,d),f=r.mul(d,p),c=r.sub(c,f),u=r.mul(d,y),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(t){u(t);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=t;let h=r.ZERO,f=r.ZERO,y=r.ZERO;const d=e.a,p=r.mul(e.b,fc);let g=r.mul(i,a),m=r.mul(n,o),w=r.mul(s,c),A=r.add(i,n),b=r.add(a,o);A=r.mul(A,b),b=r.add(g,m),A=r.sub(A,b),b=r.add(i,s);let v=r.add(a,c);return b=r.mul(b,v),v=r.add(g,w),b=r.sub(b,v),v=r.add(n,s),h=r.add(o,c),v=r.mul(v,h),h=r.add(m,w),v=r.sub(v,h),y=r.mul(d,b),h=r.mul(p,w),y=r.add(h,y),h=r.sub(m,y),y=r.add(m,y),f=r.mul(h,y),m=r.add(g,g),m=r.add(m,g),w=r.mul(d,w),b=r.mul(p,b),m=r.add(m,w),w=r.sub(g,w),w=r.mul(d,w),b=r.add(b,w),g=r.mul(m,b),f=r.add(f,g),g=r.mul(v,b),h=r.mul(A,h),h=r.sub(h,g),g=r.mul(A,m),y=r.mul(v,y),y=r.add(y,g),new l(h,f,y)}subtract(t){return this.add(t.negate())}is0(){return this.equals(l.ZERO)}wNAF(t){return y.wNAFCached(this,h,t,(t=>{const e=r.invertBatch(t.map((t=>t.pz)));return t.map(((t,r)=>t.toAffine(e[r]))).map(l.fromAffine)}))}multiplyUnsafe(t){const i=l.ZERO;if(t.isZero())return i;if(o(t),t.isOne())return this;const{endo:n}=e;if(!n)return y.unsafeLadder(this,t);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(t),u=i,f=i,d=this;for(;a.gt(uc)||h.gt(uc);)a.isEven()||(u=u.add(d)),h.isEven()||(f=f.add(d)),d=d.double(),a=a.rightShift(lc),h=h.rightShift(lc);return s&&(u=u.negate()),c&&(f=f.negate()),f=new l(r.mul(f.px,n.beta),f.py,f.pz),u.add(f)}multiply(t){o(t);let i,n,s=t;const{endo:a}=e;if(a){const{k1neg:t,k1:e,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(e),{p:f,f:d}=this.wNAF(c);h=y.constTimeNegate(t,h),f=y.constTimeNegate(o,f),f=new l(r.mul(f.px,a.beta),f.py,f.pz),i=h.add(f),n=u.add(d)}else{const{p:t,f:e}=this.wNAF(s);i=t,n=e}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(t,e,r){const i=l.BASE,n=(t,e)=>e.isZero()||e.isOne()||!t.equals(i)?t.multiplyUnsafe(e):t.multiply(e),s=n(this,e).add(n(t,r));return s.is0()?void 0:s}toAffine(t){const{px:e,py:i,pz:n}=this,s=this.is0();null==t&&(t=s?r.ONE:r.inv(n));const a=r.mul(e,t),o=r.mul(i,t),c=r.mul(n,t);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:t,isTorsionFree:r}=e;if(t.isOne())return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:t,clearCofactor:r}=e;return t.isOne()?this:r?r(l,this):this.multiplyUnsafe(e.h)}toRawBytes(t=!0){return this.assertValidity(),i(l,this,t)}toHex(t=!0){return bo(this.toRawBytes(t))}}l.BASE=new l(e.Gx,e.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const f=e.nBitLength,y=sc(l,e.endo?Math.ceil(f/2):f);return{CURVE:e,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function dc(t){const e=function(t){const e=ac(t);return _o(e,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...e})}(t),{Fp:r,n:i}=e,n=r.BYTES+1,s=2*r.BYTES+1;function a(t){return Vo(t,i)}function o(t){return Yo(t,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=yc({...e,toBytes(t,e,i){const n=e.toAffine(),s=r.toBytes(n.x),a=Do;return i?a(Uint8Array.from([e.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(t){const e=t.length,i=t[0],a=t.subarray(1);if(e!==n||2!==i&&3!==i){if(e===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${e} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const t=Io(a);if(o=t,!uc.lt(o)||!o.lt(r.ORDER))throw Error("Point is not on curve");const e=u(t);let n=r.sqrt(e);return 1==(1&i)!==!n.isEven()&&(n=r.neg(n)),{x:t,y:n}}var o}}),f=t=>bo(Bo(t,e.nByteLength));function y(t){const e=i.rightShift(lc);return t.gt(e)}const d=(t,e,r)=>Io(t.slice(e,r));class p{constructor(t,e,r){this.r=t,this.s=e,this.recovery=r,this.assertValidity()}static fromCompact(t){const r=e.nByteLength;return t=Po("compactSignature",t,2*r),new p(d(t,0,r),d(t,r,2*r))}static fromDER(t){const{r:e,s:r}=hc.toSig(Po("DER",t));return new p(e,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(t){return new p(this.r,this.s,t)}recoverPublicKey(t){const{r:i,s:n,recovery:s}=this,h=A(Po("msgHash",t));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i.add(e.n):i;if(u.gte(r.ORDER))throw Error("recovery id 2 or 3 invalid");const l=0==(1&s)?"02":"03",y=c.fromHex(l+f(u)),d=o(u),p=a(h.negate().imul(d)),g=a(n.mul(d)),m=c.BASE.multiplyAndAddUnsafe(y,p,g);if(!m)throw Error("point at infinify");return m.assertValidity(),m}hasHighS(){return y(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(this.s.negate()),this.recovery):this}toDERRawBytes(){return So(this.toDERHex())}toDERHex(){return hc.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return So(this.toCompactHex())}toCompactHex(){return f(this.r)+f(this.s)}}const g={isValidPrivateKey(t){try{return h(t),!0}catch(t){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const t=rc(e.n);return function(t,e,r=!1){const i=t.length,n=ec(e),s=rc(e);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=Vo(r?Io(t):Co(t),e.dec()).inc();return r?Ko(a,n):Bo(a,n)}(e.randomBytes(t),e.n)},precompute:(t=8,e=c.BASE)=>(e._setWindowSize(t),e.multiply(Va.new(3)),e)};function m(t){const e=wo(t),r="string"==typeof t,i=(e||r)&&t.length;return e?i===n||i===s:r?i===2*n||i===2*s:t instanceof c}const w=e.bits2int||function(t){const r=Io(t),i=8*t.length-e.nBitLength;return i>0?r.rightShift(Va.new(i)):r},A=e.bits2int_modN||function(t){return a(w(t))},b=Uo(e.nBitLength);function v(t){if(!(t instanceof Va))throw Error("bigint expected");if(!uc.lte(t)||!t.lt(b))throw Error("bigint expected < 2^"+e.nBitLength);return Bo(t,e.nByteLength)}function E(t,i,n=k){if(["recovered","canonical"].some((t=>t in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=e;let{lowS:f,prehash:d,extraEntropy:g}=n;null==f&&(f=!0),t=Po("msgHash",t),d&&(t=Po("prehashed msgHash",s(t)));const m=A(t),b=h(i),E=[v(b),v(m)];if(null!=g){const t=!0===g?u(r.BYTES):g;E.push(Po("extraEntropy",t))}const S=Do(...E),I=m;return{seed:S,k2sig:function(t){const e=w(t);if(!l(e))return;const r=o(e),i=c.BASE.multiply(e).toAffine(),n=a(i.x);if(n.isZero())return;const s=a(r.mul(a(I.add(n.mul(b)))));if(s.isZero())return;let h=(i.x.equal(n)?0:2)|i.y.getBit(0),u=s;return f&&y(s)&&(u=function(t){return y(t)?a(t.negate()):t}(s),h^=1),new p(n,u,h)}}}const k={lowS:e.lowS,prehash:!1},S={lowS:e.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:e,getPublicKey:function(t,e=!0){return c.fromPrivateKey(t).toRawBytes(e)},getSharedSecret:function(t,e,r=!0){if(m(t))throw Error("first arg must be private key");if(!m(e))throw Error("second arg must be public key");return c.fromHex(e).multiply(h(t)).toRawBytes(r)},sign:function(t,r,i=k){const{seed:n,k2sig:s}=E(t,r,i),a=e;return Qo(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(t,r,i,n=S){const s=t;if(r=Po("msgHash",r),i=Po("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,f;try{if("string"==typeof s||wo(s))try{l=p.fromDER(s)}catch(t){if(!(t instanceof hc.Err))throw t;l=p.fromCompact(s)}else{if(!("object"==typeof s&&s.r instanceof Va&&s.s instanceof Va))throw Error("PARSE");{const{r:t,s:e}=s;l=new p(t,e)}}f=c.fromHex(i)}catch(t){if("PARSE"===t.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=e.hash(r));const{r:y,s:d}=l,g=A(r),m=o(d),w=a(g.mul(m)),b=a(y.mul(m)),v=c.BASE.multiplyAndAddUnsafe(f,w,b)?.toAffine();return!!v&&a(v.x).equal(y)},ProjectivePoint:c,Signature:p,utils:g}}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function pc(t){return{hash:t,hmac:(e,...r)=>go(t,e,uo(...r)),randomBytes:yo}}function gc(t,e){const r=e=>dc({...t,...pc(e)});return Object.freeze({...r(e),create:r})}Object.freeze(Va.new(4));class mc extends lo{constructor(t,e,r,i){super(),this.blockLen=t,this.outputLen=e,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=ao(this.buffer)}update(t){ro(this);const{view:e,buffer:r,blockLen:i}=this,n=(t=ho(t)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(t.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(e,0),this.pos=0);else{const e=ao(t);for(;i<=n-s;s+=i)this.process(e,s)}}return this.length+=t.length,this.roundClean(),this}digestInto(t){ro(this),io(t,this),this.finished=!0;const{buffer:e,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;e[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let t=s;t<i;t++)e[t]=0;!function(t,e,r,i){if("function"==typeof t.setBigUint64)return t.setBigUint64(e,BigInt(r.toString()),i);const n=Object.freeze(Va.new(32)),s=Object.freeze(Va.new(4294967295)),a=r.rightShift(n).bitwiseAnd(s).toNumber(),o=r.bitwiseAnd(s).toNumber(),c=i?4:0,h=i?0:4;t.setUint32(e+c,a,i),t.setUint32(e+h,o,i)}(r,i-8,Va.new(8*this.length),n),this.process(r,0);const a=ao(t),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let t=0;t<c;t++)a.setUint32(4*t,h[t],n)}digest(){const{buffer:t,outputLen:e}=this;this.digestInto(t);const r=t.slice(0,e);return this.destroy(),r}_cloneInto(t){t||(t=new this.constructor),t.set(...this.get());const{blockLen:e,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return t.length=i,t.pos=a,t.finished=n,t.destroyed=s,i%e&&t.buffer.set(r),t}}const wc=(t,e,r)=>t&e^t&r^e&r,Ac=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),bc=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),vc=/* @__PURE__ */new Uint32Array(64);class Ec extends mc{constructor(){super(64,32,8,!1),this.A=0|bc[0],this.B=0|bc[1],this.C=0|bc[2],this.D=0|bc[3],this.E=0|bc[4],this.F=0|bc[5],this.G=0|bc[6],this.H=0|bc[7]}get(){const{A:t,B:e,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[t,e,r,i,n,s,a,o]}set(t,e,r,i,n,s,a,o){this.A=0|t,this.B=0|e,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(t,e){for(let r=0;r<16;r++,e+=4)vc[r]=t.getUint32(e,!1);for(let t=16;t<64;t++){const e=vc[t-15],r=vc[t-2],i=oo(e,7)^oo(e,18)^e>>>3,n=oo(r,17)^oo(r,19)^r>>>10;vc[t]=n+vc[t-7]+i+vc[t-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let t=0;t<64;t++){const e=h+(oo(a,6)^oo(a,11)^oo(a,25))+((u=a)&o^~u&c)+Ac[t]+vc[t]|0,l=(oo(r,2)^oo(r,13)^oo(r,22))+wc(r,i,n)|0;h=c,c=o,o=a,a=s+e|0,s=n,n=i,i=r,r=e+l|0}var u;r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){vc.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class kc extends Ec{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Sc=/* @__PURE__ */fo((()=>new Ec)),Ic=/* @__PURE__ */fo((()=>new kc)),Cc=tc(Va.new("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),Bc=gc({a:Cc.create(Va.new("-3")),b:Va.new("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Cc,n:Va.new("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:Va.new("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:Va.new("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:Va.new(1),lowS:!1},Sc),Kc=Object.freeze(Va.new(2**32-1)),Pc=Object.freeze(Va.new(32));function Dc(t,e=!1){return e?{h:t.bitwiseAnd(Kc).toNumber(),l:t.rightShift(Pc).bitwiseAnd(Kc).toNumber()}:{h:0|t.rightShift(Pc).bitwiseAnd(Kc).toNumber(),l:0|t.bitwiseAnd(Kc).toNumber()}}function Uc(t,e=!1){let r=new Uint32Array(t.length),i=new Uint32Array(t.length);for(let n=0;n<t.length;n++){const{h:s,l:a}=Dc(t[n],e);[r[n],i[n]]=[s,a]}return[r,i]}const Mc=(t,e,r)=>t<<r|e>>>32-r,xc=(t,e,r)=>e<<r|t>>>32-r,Qc=(t,e,r)=>e<<r-32|t>>>64-r,Rc=(t,e,r)=>t<<r-32|e>>>64-r;const _c={fromBig:Dc,split:Uc,toBig:(t,e)=>Va.new(t>>>0).ileftShift(Pc).ibitwiseOr(Va.new(e>>>0)),shrSH:(t,e,r)=>t>>>r,shrSL:(t,e,r)=>t<<32-r|e>>>r,rotrSH:(t,e,r)=>t>>>r|e<<32-r,rotrSL:(t,e,r)=>t<<32-r|e>>>r,rotrBH:(t,e,r)=>t<<64-r|e>>>r-32,rotrBL:(t,e,r)=>t>>>r-32|e<<64-r,rotr32H:(t,e)=>e,rotr32L:(t,e)=>t,rotlSH:Mc,rotlSL:xc,rotlBH:Qc,rotlBL:Rc,add:function(t,e,r,i){const n=(e>>>0)+(i>>>0);return{h:t+r+(n/2**32|0)|0,l:0|n}},add3L:(t,e,r)=>(t>>>0)+(e>>>0)+(r>>>0),add3H:(t,e,r,i)=>e+r+i+(t/2**32|0)|0,add4L:(t,e,r,i)=>(t>>>0)+(e>>>0)+(r>>>0)+(i>>>0),add4H:(t,e,r,i,n)=>e+r+i+n+(t/2**32|0)|0,add5H:(t,e,r,i,n,s)=>e+r+i+n+s+(t/2**32|0)|0,add5L:(t,e,r,i,n)=>(t>>>0)+(e>>>0)+(r>>>0)+(i>>>0)+(n>>>0)},[Tc,Lc]=/* @__PURE__ */(()=>_c.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((t=>Va.new(t)))))(),Nc=/* @__PURE__ */new Uint32Array(80),Oc=/* @__PURE__ */new Uint32Array(80);class Fc extends mc{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:t,Al:e,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:f,Gl:y,Hh:d,Hl:p}=this;return[t,e,r,i,n,s,a,o,c,h,u,l,f,y,d,p]}set(t,e,r,i,n,s,a,o,c,h,u,l,f,y,d,p){this.Ah=0|t,this.Al=0|e,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|f,this.Gl=0|y,this.Hh=0|d,this.Hl=0|p}process(t,e){for(let r=0;r<16;r++,e+=4)Nc[r]=t.getUint32(e),Oc[r]=t.getUint32(e+=4);for(let t=16;t<80;t++){const e=0|Nc[t-15],r=0|Oc[t-15],i=_c.rotrSH(e,r,1)^_c.rotrSH(e,r,8)^_c.shrSH(e,r,7),n=_c.rotrSL(e,r,1)^_c.rotrSL(e,r,8)^_c.shrSL(e,r,7),s=0|Nc[t-2],a=0|Oc[t-2],o=_c.rotrSH(s,a,19)^_c.rotrBH(s,a,61)^_c.shrSH(s,a,6),c=_c.rotrSL(s,a,19)^_c.rotrBL(s,a,61)^_c.shrSL(s,a,6),h=_c.add4L(n,c,Oc[t-7],Oc[t-16]),u=_c.add4H(h,i,o,Nc[t-7],Nc[t-16]);Nc[t]=0|u,Oc[t]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:f,Fl:y,Gh:d,Gl:p,Hh:g,Hl:m}=this;for(let t=0;t<80;t++){const e=_c.rotrSH(u,l,14)^_c.rotrSH(u,l,18)^_c.rotrBH(u,l,41),w=_c.rotrSL(u,l,14)^_c.rotrSL(u,l,18)^_c.rotrBL(u,l,41),A=u&f^~u&d,b=l&y^~l&p,v=_c.add5L(m,w,b,Lc[t],Oc[t]),E=_c.add5H(v,g,e,A,Tc[t],Nc[t]),k=0|v,S=_c.rotrSH(r,i,28)^_c.rotrBH(r,i,34)^_c.rotrBH(r,i,39),I=_c.rotrSL(r,i,28)^_c.rotrBL(r,i,34)^_c.rotrBL(r,i,39),C=r&n^r&a^n&a,B=i&s^i&o^s&o;g=0|d,m=0|p,d=0|f,p=0|y,f=0|u,y=0|l,({h:u,l}=_c.add(0|c,0|h,0|E,0|k)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=_c.add3L(k,I,B);r=_c.add3H(K,E,S,C),i=0|K}({h:r,l:i}=_c.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=_c.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=_c.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=_c.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=_c.add(0|this.Eh,0|this.El,0|u,0|l)),({h:f,l:y}=_c.add(0|this.Fh,0|this.Fl,0|f,0|y)),({h:d,l:p}=_c.add(0|this.Gh,0|this.Gl,0|d,0|p)),({h:g,l:m}=_c.add(0|this.Hh,0|this.Hl,0|g,0|m)),this.set(r,i,n,s,a,o,c,h,u,l,f,y,d,p,g,m)}roundClean(){Nc.fill(0),Oc.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Hc extends Fc{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const zc=/* @__PURE__ */fo((()=>new Fc)),Gc=/* @__PURE__ */fo((()=>new Hc)),qc=tc(Va.new("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),jc=gc({a:qc.create(Va.new("-3")),b:Va.new("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:qc,n:Va.new("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:Va.new("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:Va.new("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:Va.new(1),lowS:!1},Gc),Vc=tc(Va.new("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),Zc={a:Vc.create(Va.new("-3")),b:Va.new("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:Vc,n:Va.new("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:Va.new("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:Va.new("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:Va.new(1)},Jc=gc({a:Zc.a,b:Zc.b,Fp:Vc,n:Zc.n,Gx:Zc.Gx,Gy:Zc.Gy,h:Zc.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},zc),Yc=tc(Va.new("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),Wc=gc({a:Yc.create(Va.new("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:Va.new("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:Yc,n:Va.new("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:Va.new("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:Va.new("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:Va.new(1),lowS:!1},Sc),$c=tc(Va.new("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),Xc=gc({a:$c.create(Va.new("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:Va.new("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:$c,n:Va.new("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:Va.new("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:Va.new("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:Va.new(1),lowS:!1},Gc),th=tc(Va.new("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),eh=gc({a:th.create(Va.new("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:Va.new("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:th,n:Va.new("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:Va.new("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:Va.new("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:Va.new(1),lowS:!1},zc),[rh,ih,nh]=[[],[],[]],sh=/* @__PURE__ */Object.freeze(Va.new(0)),ah=/* @__PURE__ */Object.freeze(Va.new(1)),oh=/* @__PURE__ */Object.freeze(Va.new(2)),ch=/* @__PURE__ */Object.freeze(Va.new(7)),hh=/* @__PURE__ */Object.freeze(Va.new(256)),uh=/* @__PURE__ */Object.freeze(Va.new(113));for(let t=0,e=ah,r=1,i=0;t<24;t++){[r,i]=[i,(2*r+3*i)%5],rh.push(2*(5*i+r)),ih.push((t+1)*(t+2)/2%64);const n=sh.clone();for(let t=0;t<7;t++)e=e.leftShift(ah).ixor(e.rightShift(ch).imul(uh)).imod(hh),e.bitwiseAnd(oh).isZero()||n.ixor(ah.leftShift(ah.leftShift(/* @__PURE__ */Va.new(t)).idec()));nh.push(n)}const[lh,fh]=/* @__PURE__ */Uc(nh,!0),yh=(t,e,r)=>r>32?Qc(t,e,r):Mc(t,e,r),dh=(t,e,r)=>r>32?Rc(t,e,r):xc(t,e,r);class ph extends lo{constructor(t,e,r,i=!1,n=24){if(super(),this.blockLen=t,this.suffix=e,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,to(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){!function(t,e=24){const r=new Uint32Array(10);for(let i=24-e;i<24;i++){for(let e=0;e<10;e++)r[e]=t[e]^t[e+10]^t[e+20]^t[e+30]^t[e+40];for(let e=0;e<10;e+=2){const i=(e+8)%10,n=(e+2)%10,s=r[n],a=r[n+1],o=yh(s,a,1)^r[i],c=dh(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)t[e+r]^=o,t[e+r+1]^=c}let e=t[2],n=t[3];for(let r=0;r<24;r++){const i=ih[r],s=yh(e,n,i),a=dh(e,n,i),o=rh[r];e=t[o],n=t[o+1],t[o]=s,t[o+1]=a}for(let e=0;e<50;e+=10){for(let i=0;i<10;i++)r[i]=t[e+i];for(let i=0;i<10;i++)t[e+i]^=~r[(i+2)%10]&r[(i+4)%10]}t[0]^=lh[i],t[1]^=fh[i]}r.fill(0)}(this.state32,this.rounds),this.posOut=0,this.pos=0}update(t){ro(this);const{blockLen:e,state:r}=this,i=(t=ho(t)).length;for(let n=0;n<i;){const s=Math.min(e-this.pos,i-n);for(let e=0;e<s;e++)r[this.pos++]^=t[n++];this.pos===e&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:t,suffix:e,pos:r,blockLen:i}=this;t[r]^=e,0!=(128&e)&&r===i-1&&this.keccak(),t[i-1]^=128,this.keccak()}writeInto(t){ro(this,!1),eo(t),this.finish();const e=this.state,{blockLen:r}=this;for(let i=0,n=t.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);t.set(e.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return t}xofInto(t){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(t)}xof(t){return to(t),this.xofInto(new Uint8Array(t))}digestInto(t){if(io(t,this),this.finished)throw Error("digest() was already called");return this.writeInto(t),this.destroy(),t}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(t){const{blockLen:e,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return t||(t=new ph(e,r,i,s,n)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=n,t.suffix=r,t.outputLen=i,t.enableXOF=s,t.destroyed=this.destroyed,t}}const gh=(t,e,r)=>fo((()=>new ph(e,t,r))),mh=/* @__PURE__ */gh(6,136,32),wh=/* @__PURE__ */gh(6,72,64),Ah=/* @__PURE__ */((t,e,r)=>function(t){const e=(e,r)=>t(r).update(ho(e)).digest(),r=t({});return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=e=>t(e),e}(((i={})=>new ph(e,t,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),bh=Object.freeze(Va.new(0)),vh=Object.freeze(Va.new(1)),Eh=Object.freeze(Va.new(2)),kh=Object.freeze(Va.new(3)),Sh=Object.freeze(Va.new(8)),Ih={zip215:!0};function Ch(t){const e=function(t){const e=ac(t);return _o(t,{hash:"function",a:"BigInteger",d:"BigInteger",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...e})}(t),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=e,h=Eh.leftShift(Va.new(8*o).idec()),u=r.create,l=e.uvRatio||((t,e)=>{try{return{isValid:!0,value:r.sqrt(t.mul(r.inv(e)))}}catch(t){return{isValid:!1,value:bh}}}),f=e.adjustScalarBytes||(t=>t),y=e.domain||((t,e,r)=>{if(e.length||r)throw Error("Contexts/pre-hash are not supported");return t}),d=t=>t instanceof Va&&t.gt(bh),p=(t,e)=>d(t)&&d(e)&&t.lt(e),g=t=>t.isZero()||p(t,h);function m(t,e){if(p(t,e))return t;throw Error(`Expected valid scalar < ${e}, got ${typeof t} ${t}`)}function w(t){return t.isZero()?t:m(t,i)}const A=new Map;function b(t){if(!(t instanceof v))throw Error("ExtendedPoint expected")}class v{constructor(t,e,r,i){if(this.ex=t,this.ey=e,this.ez=r,this.et=i,!g(t))throw Error("x required");if(!g(e))throw Error("y required");if(!g(r))throw Error("z required");if(!g(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(t){if(t instanceof v)throw Error("extended point not allowed");const{x:e,y:r}=t||{};if(!g(e)||!g(r))throw Error("invalid affine point");return new v(e,r,vh,u(e.mul(r)))}static normalizeZ(t){const e=r.invertBatch(t.map((t=>t.ez)));return t.map(((t,r)=>t.toAffine(e[r]))).map(v.fromAffine)}_setWindowSize(t){this._WINDOW_SIZE=t,A.delete(this)}assertValidity(){const{a:t,d:r}=e;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i.mul(i)),c=u(n.mul(n)),h=u(s.mul(s)),l=u(h.mul(h)),f=u(o.mul(t)),y=u(h.mul(u(f.add(c)))),d=u(l.add(u(r.mul(u(o.mul(c))))));if(!y.equal(d))throw Error("bad point: equation left != right (1)");const p=u(i.mul(n)),g=u(s.mul(a));if(!p.equal(g))throw Error("bad point: equation left != right (2)")}equals(t){b(t);const{ex:e,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=t,o=u(e.mul(a)),c=u(n.mul(i)),h=u(r.mul(a)),l=u(s.mul(i));return o.equal(c)&&h.equal(l)}is0(){return this.equals(v.ZERO)}negate(){return new v(u(this.ex.negate()),this.ey,this.ez,u(this.et.negate()))}double(){const{a:t}=e,{ex:r,ey:i,ez:n}=this,s=u(r.mul(r)),a=u(i.mul(i)),o=u(Eh.mul(u(n.mul(n)))),c=u(t.mul(s)),h=r.add(i),l=u(u(h.mul(h)).sub(s).isub(a)),f=c.add(a),y=f.sub(o),d=c.sub(a),p=u(l.mul(y)),g=u(f.mul(d)),m=u(l.mul(d)),w=u(y.mul(f));return new v(p,g,w,m)}add(t){b(t);const{a:r,d:i}=e,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:f}=t;if(r.equal(Va.new(-1))){const t=u(s.sub(n).imul(h.add(c))),e=u(s.add(n).imul(h.sub(c))),r=u(e.sub(t));if(r.isZero())return this.double();const i=u(a.mul(Eh).imul(f)),y=u(o.mul(Eh).imul(l)),d=y.add(i),p=e.add(t),g=y.sub(i),m=u(d.mul(r)),w=u(p.mul(g)),A=u(d.mul(g)),b=u(r.mul(p));return new v(m,w,b,A)}const y=u(n.mul(c)),d=u(s.mul(h)),p=u(o.mul(i).imul(f)),g=u(a.mul(l)),m=u(n.add(s).imul(c.add(h)).isub(y).isub(d)),w=g.sub(p),A=g.add(p),E=u(d.sub(r.mul(y))),k=u(m.mul(w)),S=u(A.mul(E)),I=u(m.mul(E)),C=u(w.mul(A));return new v(k,S,C,I)}subtract(t){return this.add(t.negate())}wNAF(t){return S.wNAFCached(this,A,t,v.normalizeZ)}multiply(t){const{p:e,f:r}=this.wNAF(m(t,i));return v.normalizeZ([e,r])[0]}multiplyUnsafe(t){let e=w(t);return e.isZero()?k:this.equals(k)||e.isOne()?this:this.equals(E)?this.wNAF(e).p:S.unsafeLadder(this,e)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return S.unsafeLadder(this,i).is0()}toAffine(t){const{ex:e,ey:i,ez:n}=this,s=this.is0();null==t&&(t=s?Sh:r.inv(n));const a=u(e.mul(t)),o=u(i.mul(t)),c=u(n.mul(t));if(s)return{x:bh.clone(),y:vh.clone()};if(!c.isOne())throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:t}=e;return t.isOne()?this:this.multiplyUnsafe(t)}static fromHex(t,i=!1){const{d:n,a:s}=e,a=r.BYTES,o=(t=Po("pointHex",t,a)).slice(),c=t[a-1];o[a-1]=-129&c;const f=Co(o);f.isZero()||m(f,i?h:r.ORDER);const y=u(f.mul(f)),d=u(y.dec()),p=u(n.mul(y).isub(s));let{isValid:g,value:w}=l(d,p);if(!g)throw Error("Point.fromHex: invalid y coordinate");const A=!w.isEven(),b=0!=(128&c);if(!i&&w.isZero()&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==A&&(w=u(w.negate())),v.fromAffine({x:w,y:f})}static fromPrivateKey(t){return B(t).point}toRawBytes(){const{x:t,y:e}=this.toAffine(),i=e.toUint8Array("le",r.BYTES);return i[i.length-1]|=t.isEven()?0:128,i}toHex(){return bo(this.toRawBytes())}}v.BASE=new v(e.Gx,e.Gy,vh,u(e.Gx.mul(e.Gy))),v.ZERO=new v(bh,vh,vh,bh);const{BASE:E,ZERO:k}=v,S=sc(v,8*o);function I(t){return Vo(t,i)}function C(t){return I(Co(t))}function B(t){const e=o;t=Po("private key",t,e);const r=Po("hashed private key",s(t),2*e),i=f(r.slice(0,e)),n=r.slice(e,2*e),a=C(i),c=E.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(t=new Uint8Array,...e){const r=Do(...e);return C(s(y(r,Po("context",t),!!n)))}const P=Ih;E._setWindowSize(8);return{CURVE:e,getPublicKey:function(t){return B(t).pointBytes},sign:function(t,e,i={}){t=Po("message",t),n&&(t=n(t));const{prefix:s,scalar:a,pointBytes:c}=B(e),h=K(i.context,s,t),u=E.multiply(h).toRawBytes(),l=K(i.context,u,c,t),f=I(h.add(l.mul(a)));return w(f),Po("result",Do(u,f.toUint8Array("le",r.BYTES)),2*o)},verify:function(t,e,i,s=P){const{context:a,zip215:o}=s,c=r.BYTES;t=Po("signature",t,2*c),e=Po("message",e),n&&(e=n(e));const h=Co(t.slice(c,2*c));let u,l,f;try{u=v.fromHex(i,o),l=v.fromHex(t.slice(0,c),o),f=E.multiplyUnsafe(h)}catch(t){return!1}if(!o&&u.isSmallOrder())return!1;const y=K(a,l.toRawBytes(),u.toRawBytes(),e);return l.add(u.multiplyUnsafe(y)).subtract(f).clearCofactor().equals(v.ZERO)},ExtendedPoint:v,utils:{getExtendedPublicKey:B,randomPrivateKey:()=>a(r.BYTES),precompute:(t=8,e=v.BASE)=>(e._setWindowSize(t),e.multiply(kh),e)}}}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Bh=Object.freeze(Va.new(0)),Kh=Object.freeze(Va.new(1)),Ph=Object.freeze(Va.new(2));function Dh(t){const e=(_o(r=t,{a:"BigInteger"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"BigInteger"}),Object.freeze({...r}));var r;const{P:i}=e,n=t=>Vo(t,i),s=e.montgomeryBits,a=Math.ceil(s/8),o=e.nByteLength,c=e.adjustScalarBytes||(t=>t),h=e.powPminus2||(t=>Zo(t,i.sub(Ph),i));function u(t,e,r){const i=n(t.mul(e.sub(r)));return[e=n(e.sub(i)),r=n(r.add(i))]}function l(t){if(t instanceof Va&&!t.isNegative()&&t.lt(i))return t;throw Error("Expected valid scalar 0 < scalar < CURVE.P")}const f=e.a.sub(Ph).irightShift(Ph);function y(t){return Ko(n(t),a)}function d(t,e){const r=function(t){const e=Po("u coordinate",t,a);return 32===o&&(e[31]&=127),Co(e)}(e),i=function(t){const e=Po("scalar",t),r=e.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return Co(c(e))}(t),d=function(t,e){const r=l(t),i=l(e),a=r;let o,c=Kh,y=Bh,d=r,p=Kh,g=Bh.clone();for(let t=Va.new(s-1);!t.isNegative();t.idec()){const e=Va.new(i.rightShift(t).getBit(0));g.ixor(e),o=u(g,c,d),c=o[0],d=o[1],o=u(g,y,p),y=o[0],p=o[1],g=e;const r=c.add(y),s=n(r.mul(r)),h=c.sub(y),l=n(h.mul(h)),m=s.sub(l),w=d.add(p),A=d.sub(p),b=n(A.mul(r)),v=n(w.mul(h)),E=b.add(v),k=b.sub(v);d=n(E.mul(E)),p=n(a.mul(n(k.mul(k)))),c=n(s.mul(l)),y=n(m.mul(s.add(n(f.mul(m)))))}o=u(g,c,d),c=o[0],d=o[1],o=u(g,y,p),y=o[0],p=o[1];const m=h(y);return n(c.mul(m))}(r,i);if(d.isZero())throw Error("Invalid private or public key received");return y(d)}const p=y(e.Gu);function g(t){return d(t,p)}return{scalarMult:d,scalarMultBase:g,getSharedSecret:(t,e)=>d(t,e),getPublicKey:t=>g(t),utils:{randomPrivateKey:()=>e.randomBytes(e.nByteLength)},GuBytes:p}}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Uh=fo((()=>Ah.create({dkLen:114}))),Mh=(fo((()=>Ah.create({dkLen:64}))),Va.new("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439")),xh=Va.new(1),Qh=Va.new(2),Rh=Va.new(3),_h=Va.new(11),Th=Va.new(22),Lh=Va.new(44),Nh=Va.new(88),Oh=Va.new(223);function Fh(t){const e=Mh,r=t.modExp(Rh,e),i=r.mul(r).imul(t).imod(e),n=Jo(i,Rh,e).imul(i).imod(e),s=Jo(n,Rh,e).imul(i).imod(e),a=Jo(s,Qh,e).imul(r).imod(e),o=Jo(a,_h,e).imul(a).imod(e),c=Jo(o,Th,e).imul(o).imod(e),h=Jo(c,Lh,e).imul(c).imod(e),u=Jo(h,Nh,e).imul(h).imod(e),l=Jo(u,Lh,e).imul(c).imod(e),f=Jo(l,Qh,e).imul(r).imod(e),y=Jo(f,xh,e).imul(t).imod(e);return Jo(y,Oh,e).imul(f).imod(e)}function Hh(t){return t[0]&=252,t[55]|=128,t[56]=0,t}const zh=tc(Mh,456,!0),Gh={a:Va.new(1),d:Va.new("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:zh,n:Va.new("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:Va.new(4),Gx:Va.new("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:Va.new("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Uh,randomBytes:yo,adjustScalarBytes:Hh,domain:(t,e,r)=>{if(e.length>255)throw Error("Context is too big: "+e.length);return uo(co("SigEd448"),new Uint8Array([r?1:0,e.length]),e,t)},uvRatio:function(t,e){const r=Mh,i=Vo(t.mul(t).imul(e),r),n=Vo(i.mul(t),r),s=Fh(Vo(n.mul(i).imul(e),r)),a=Vo(n.mul(s),r),o=Vo(a.mul(a),r);return{isValid:Vo(o.mul(e),r).equal(t),value:a}}},qh=/* @__PURE__ */Ch(Gh),jh=/* @__PURE__ */(()=>Dh({a:Va.new(156326),montgomeryBits:448,nByteLength:56,P:Mh,Gu:Va.new(5),powPminus2:t=>{const e=Mh;return Vo(Jo(Fh(t),Va.new(2),e).mul(t),e)},adjustScalarBytes:Hh,randomBytes:yo}))();Object.freeze(Va.new(4)),zh.ORDER.sub(Rh).irightShift(Qh),Va.new(156326),Va.new("39082"),Va.new("78163"),Va.new("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),Va.new("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716"),Va.new("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
+const oc=Object.freeze(Wa.new(0)),cc=Object.freeze(Wa.new(1));function hc(t,e){const r=(t,e)=>{const r=e.negate();return t?r:e},i=t=>({windows:Math.ceil(e/t)+1,windowSize:2**(t-1)});return{constTimeNegate:r,unsafeLadder(e,r){const i=r.clone();let n=t.ZERO,s=e;for(;i.gt(oc);)i.isEven()||(n=n.add(s)),s=s.double(),i.irightShift(cc);return n},precomputeWindow(t,e){const{windows:r,windowSize:n}=i(e),s=[];let a=t,o=a;for(let t=0;t<r;t++){o=a,s.push(o);for(let t=1;t<n;t++)o=o.add(a),s.push(o);a=o.double()}return s},wNAF(e,n,s){const a=s.clone(),{windows:o,windowSize:c}=i(e);let h=t.ZERO,u=t.BASE;const l=Wa.new(2**e-1),f=2**e,y=Wa.new(e);for(let t=0;t<o;t++){const e=t*c;let i=a.bitwiseAnd(l).toNumber();a.irightShift(y),i>c&&(i-=f,a.iinc());const s=e,o=e+Math.abs(i)-1,d=t%2!=0,p=i<0;0===i?u=u.add(r(d,n[s])):h=h.add(r(p,n[o]))}return{p:h,f:u}},wNAFCached(t,e,r,i){const n=t._WINDOW_SIZE||1;let s=e.get(t);return s||(s=this.precomputeWindow(t,n),1!==n&&e.set(t,i(s))),this.wNAF(n,s,r)}}}function uc(t){return Oo(t.Fp,rc.reduce(((t,e)=>(t[e]="function",t)),{ORDER:"BigInteger",MASK:"BigInteger",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),Oo(t,{n:"BigInteger",h:"BigInteger",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...ic(t.n,t.nBitLength),...t,p:t.Fp.ORDER})}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:lc,hexToBytes:fc}=Fo,yc={Err:class extends Error{constructor(t=""){super(t)}},_parseInt(t){const{Err:e}=yc;if(t.length<2||2!==t[0])throw new e("Invalid signature integer tag");const r=t[1],i=t.subarray(2,r+2);if(!r||i.length!==r)throw new e("Invalid signature integer: wrong length");if(128&i[0])throw new e("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new e("Invalid signature integer: unnecessary leading zero");return{d:lc(i),l:t.subarray(r+2)}},toSig(t){const{Err:e}=yc,r="string"==typeof t?fc(t):t;if(!Eo(r))throw Error("ui8a expected");let i=r.length;if(i<2||48!=r[0])throw new e("Invalid signature tag");if(r[1]!==i-2)throw new e("Invalid signature: incorrect length");const{d:n,l:s}=yc._parseInt(r.subarray(2)),{d:a,l:o}=yc._parseInt(s);if(o.length)throw new e("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(t){const e=t=>8&Number.parseInt(t[0],16)?"00"+t:t,r=t=>{const e=t instanceof Wa?So(t.toUint8Array()):t.toString(16);return 1&e.length?"0"+e:e},i=e(r(t.s)),n=e(r(t.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},dc=Object.freeze(Wa.new(0)),pc=Object.freeze(Wa.new(1));Object.freeze(Wa.new(2));const gc=Object.freeze(Wa.new(3));function mc(t){const e=function(t){const e=uc(t);Oo(e,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=e;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||!(r.beta instanceof Wa)||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...e})}(t),{Fp:r}=e,i=e.toBytes||((t,e,i)=>{const n=e.toAffine();return Qo(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=e.fromBytes||(t=>{const e=t.subarray(1);return{x:r.fromBytes(e.subarray(0,r.BYTES)),y:r.fromBytes(e.subarray(r.BYTES,2*r.BYTES))}});function s(t){const{a:i,b:n}=e,s=r.sqr(t),a=r.mul(s,t);return r.add(r.add(a,r.mul(t,i)),n)}if(!r.eql(r.sqr(e.Gy),s(e.Gx)))throw Error("bad generator point: equation left != right");function a(t){return t instanceof Wa&&dc.lt(t)&&t.lt(e.n)}function o(t){if(!a(t))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(t){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=e;if(r&&!(t instanceof Wa)){if(Eo(t)&&(t=So(t)),"string"!=typeof t||!r.includes(t.length))throw Error("Invalid key");t=t.padStart(2*i,"0")}let a;try{a=t instanceof Wa?t:Po(xo("private key",t,i))}catch(e){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof t}`)}return n&&(a=Wo(a,s)),o(a),a}const h=new Map;function u(t){if(!(t instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(t,e,i){if(this.px=t,this.py=e,this.pz=i,null==t||!r.isValid(t))throw Error("x required");if(null==e||!r.isValid(e))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(t){const{x:e,y:i}=t||{};if(!t||!r.isValid(e)||!r.isValid(i))throw Error("invalid affine point");if(t instanceof l)throw Error("projective point not allowed");const n=t=>r.eql(t,r.ZERO);return n(e)&&n(i)?l.ZERO:new l(e,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(t){const e=r.invertBatch(t.map((t=>t.pz)));return t.map(((t,r)=>t.toAffine(e[r]))).map(l.fromAffine)}static fromHex(t){const e=l.fromAffine(n(xo("pointHex",t)));return e.assertValidity(),e}static fromPrivateKey(t){return l.BASE.multiply(c(t))}_setWindowSize(t){this._WINDOW_SIZE=t,h.delete(this)}assertValidity(){if(this.is0()){if(e.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:t,y:i}=this.toAffine();if(!r.isValid(t)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(t);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:t}=this.toAffine();if(r.isOdd)return!r.isOdd(t);throw Error("Field doesn't support isOdd")}equals(t){u(t);const{px:e,py:i,pz:n}=this,{px:s,py:a,pz:o}=t,c=r.eql(r.mul(e,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:t,b:i}=e,n=r.mul(i,gc),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,f=r.mul(s,s),y=r.mul(a,a),d=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(t,u),h=r.mul(n,d),h=r.add(c,h),c=r.sub(y,h),h=r.add(y,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),d=r.mul(t,d),p=r.sub(f,d),p=r.mul(t,p),p=r.add(p,u),u=r.add(f,f),f=r.add(u,f),f=r.add(f,d),f=r.mul(f,p),h=r.add(h,f),d=r.mul(a,o),d=r.add(d,d),f=r.mul(d,p),c=r.sub(c,f),u=r.mul(d,y),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(t){u(t);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=t;let h=r.ZERO,f=r.ZERO,y=r.ZERO;const d=e.a,p=r.mul(e.b,gc);let g=r.mul(i,a),m=r.mul(n,o),w=r.mul(s,c),A=r.add(i,n),b=r.add(a,o);A=r.mul(A,b),b=r.add(g,m),A=r.sub(A,b),b=r.add(i,s);let v=r.add(a,c);return b=r.mul(b,v),v=r.add(g,w),b=r.sub(b,v),v=r.add(n,s),h=r.add(o,c),v=r.mul(v,h),h=r.add(m,w),v=r.sub(v,h),y=r.mul(d,b),h=r.mul(p,w),y=r.add(h,y),h=r.sub(m,y),y=r.add(m,y),f=r.mul(h,y),m=r.add(g,g),m=r.add(m,g),w=r.mul(d,w),b=r.mul(p,b),m=r.add(m,w),w=r.sub(g,w),w=r.mul(d,w),b=r.add(b,w),g=r.mul(m,b),f=r.add(f,g),g=r.mul(v,b),h=r.mul(A,h),h=r.sub(h,g),g=r.mul(A,m),y=r.mul(v,y),y=r.add(y,g),new l(h,f,y)}subtract(t){return this.add(t.negate())}is0(){return this.equals(l.ZERO)}wNAF(t){return y.wNAFCached(this,h,t,(t=>{const e=r.invertBatch(t.map((t=>t.pz)));return t.map(((t,r)=>t.toAffine(e[r]))).map(l.fromAffine)}))}multiplyUnsafe(t){const i=l.ZERO;if(t.isZero())return i;if(o(t),t.isOne())return this;const{endo:n}=e;if(!n)return y.unsafeLadder(this,t);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(t),u=i,f=i,d=this;for(;a.gt(dc)||h.gt(dc);)a.isEven()||(u=u.add(d)),h.isEven()||(f=f.add(d)),d=d.double(),a=a.rightShift(pc),h=h.rightShift(pc);return s&&(u=u.negate()),c&&(f=f.negate()),f=new l(r.mul(f.px,n.beta),f.py,f.pz),u.add(f)}multiply(t){o(t);let i,n,s=t;const{endo:a}=e;if(a){const{k1neg:t,k1:e,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(e),{p:f,f:d}=this.wNAF(c);h=y.constTimeNegate(t,h),f=y.constTimeNegate(o,f),f=new l(r.mul(f.px,a.beta),f.py,f.pz),i=h.add(f),n=u.add(d)}else{const{p:t,f:e}=this.wNAF(s);i=t,n=e}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(t,e,r){const i=l.BASE,n=(t,e)=>e.isZero()||e.isOne()||!t.equals(i)?t.multiplyUnsafe(e):t.multiply(e),s=n(this,e).add(n(t,r));return s.is0()?void 0:s}toAffine(t){const{px:e,py:i,pz:n}=this,s=this.is0();null==t&&(t=s?r.ONE:r.inv(n));const a=r.mul(e,t),o=r.mul(i,t),c=r.mul(n,t);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:t,isTorsionFree:r}=e;if(t.isOne())return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:t,clearCofactor:r}=e;return t.isOne()?this:r?r(l,this):this.multiplyUnsafe(e.h)}toRawBytes(t=!0){return this.assertValidity(),i(l,this,t)}toHex(t=!0){return So(this.toRawBytes(t))}}l.BASE=new l(e.Gx,e.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const f=e.nBitLength,y=hc(l,e.endo?Math.ceil(f/2):f);return{CURVE:e,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function wc(t){const e=function(t){const e=uc(t);return Oo(e,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...e})}(t),{Fp:r,n:i}=e,n=r.BYTES+1,s=2*r.BYTES+1;function a(t){return Wo(t,i)}function o(t){return tc(t,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=mc({...e,toBytes(t,e,i){const n=e.toAffine(),s=r.toBytes(n.x),a=Qo;return i?a(Uint8Array.from([e.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(t){const e=t.length,i=t[0],a=t.subarray(1);if(e!==n||2!==i&&3!==i){if(e===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${e} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const t=Po(a);if(o=t,!dc.lt(o)||!o.lt(r.ORDER))throw Error("Point is not on curve");const e=u(t);let n=r.sqrt(e);return!(1&~i)!==!n.isEven()&&(n=r.neg(n)),{x:t,y:n}}var o}}),f=t=>So(Uo(t,e.nByteLength));function y(t){const e=i.rightShift(pc);return t.gt(e)}const d=(t,e,r)=>Po(t.slice(e,r));class p{constructor(t,e,r){this.r=t,this.s=e,this.recovery=r,this.assertValidity()}static fromCompact(t){const r=e.nByteLength;return t=xo("compactSignature",t,2*r),new p(d(t,0,r),d(t,r,2*r))}static fromDER(t){const{r:e,s:r}=yc.toSig(xo("DER",t));return new p(e,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(t){return new p(this.r,this.s,t)}recoverPublicKey(t){const{r:i,s:n,recovery:s}=this,h=A(xo("msgHash",t));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i.add(e.n):i;if(u.gte(r.ORDER))throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",y=c.fromHex(l+f(u)),d=o(u),p=a(h.negate().imul(d)),g=a(n.mul(d)),m=c.BASE.multiplyAndAddUnsafe(y,p,g);if(!m)throw Error("point at infinify");return m.assertValidity(),m}hasHighS(){return y(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(this.s.negate()),this.recovery):this}toDERRawBytes(){return Ko(this.toDERHex())}toDERHex(){return yc.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return Ko(this.toCompactHex())}toCompactHex(){return f(this.r)+f(this.s)}}const g={isValidPrivateKey(t){try{return h(t),!0}catch(t){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const t=ac(e.n);return function(t,e,r=!1){const i=t.length,n=sc(e),s=ac(e);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=Wo(r?Po(t):Do(t),e.dec()).inc();return r?Mo(a,n):Uo(a,n)}(e.randomBytes(t),e.n)},precompute:(t=8,e=c.BASE)=>(e._setWindowSize(t),e.multiply(Wa.new(3)),e)};function m(t){const e=Eo(t),r="string"==typeof t,i=(e||r)&&t.length;return e?i===n||i===s:r?i===2*n||i===2*s:t instanceof c}const w=e.bits2int||function(t){const r=Po(t),i=8*t.length-e.nBitLength;return i>0?r.rightShift(Wa.new(i)):r},A=e.bits2int_modN||function(t){return a(w(t))},b=Ro(e.nBitLength);function v(t){if(!(t instanceof Wa))throw Error("bigint expected");if(!dc.lte(t)||!t.lt(b))throw Error("bigint expected < 2^"+e.nBitLength);return Uo(t,e.nByteLength)}function E(t,i,n=k){if(["recovered","canonical"].some((t=>t in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=e;let{lowS:f,prehash:d,extraEntropy:g}=n;null==f&&(f=!0),t=xo("msgHash",t),d&&(t=xo("prehashed msgHash",s(t)));const m=A(t),b=h(i),E=[v(b),v(m)];if(null!=g){const t=!0===g?u(r.BYTES):g;E.push(xo("extraEntropy",t))}const S=Qo(...E),I=m;return{seed:S,k2sig:function(t){const e=w(t);if(!l(e))return;const r=o(e),i=c.BASE.multiply(e).toAffine(),n=a(i.x);if(n.isZero())return;const s=a(r.mul(a(I.add(n.mul(b)))));if(s.isZero())return;let h=(i.x.equal(n)?0:2)|i.y.getBit(0),u=s;return f&&y(s)&&(u=function(t){return y(t)?a(t.negate()):t}(s),h^=1),new p(n,u,h)}}}const k={lowS:e.lowS,prehash:!1},S={lowS:e.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:e,getPublicKey:function(t,e=!0){return c.fromPrivateKey(t).toRawBytes(e)},getSharedSecret:function(t,e,r=!0){if(m(t))throw Error("first arg must be private key");if(!m(e))throw Error("second arg must be public key");return c.fromHex(e).multiply(h(t)).toRawBytes(r)},sign:function(t,r,i=k){const{seed:n,k2sig:s}=E(t,r,i),a=e;return Lo(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(t,r,i,n=S){const s=t;if(r=xo("msgHash",r),i=xo("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,f;try{if("string"==typeof s||Eo(s))try{l=p.fromDER(s)}catch(t){if(!(t instanceof yc.Err))throw t;l=p.fromCompact(s)}else{if(!("object"==typeof s&&s.r instanceof Wa&&s.s instanceof Wa))throw Error("PARSE");{const{r:t,s:e}=s;l=new p(t,e)}}f=c.fromHex(i)}catch(t){if("PARSE"===t.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=e.hash(r));const{r:y,s:d}=l,g=A(r),m=o(d),w=a(g.mul(m)),b=a(y.mul(m)),v=c.BASE.multiplyAndAddUnsafe(f,w,b)?.toAffine();return!!v&&a(v.x).equal(y)},ProjectivePoint:c,Signature:p,utils:g}}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Ac(t){return{hash:t,hmac:(e,...r)=>bo(t,e,po(...r)),randomBytes:wo}}function bc(t,e){const r=e=>wc({...t,...Ac(e)});return Object.freeze({...r(e),create:r})}Object.freeze(Wa.new(4));class vc extends go{constructor(t,e,r,i){super(),this.blockLen=t,this.outputLen=e,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=uo(this.buffer)}update(t){ao(this);const{view:e,buffer:r,blockLen:i}=this,n=(t=yo(t)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(t.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(e,0),this.pos=0);else{const e=uo(t);for(;i<=n-s;s+=i)this.process(e,s)}}return this.length+=t.length,this.roundClean(),this}digestInto(t){ao(this),oo(t,this),this.finished=!0;const{buffer:e,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;e[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let t=s;t<i;t++)e[t]=0;!function(t,e,r,i){if("function"==typeof t.setBigUint64)return t.setBigUint64(e,BigInt(r.toString()),i);const n=Object.freeze(Wa.new(32)),s=Object.freeze(Wa.new(4294967295)),a=r.rightShift(n).bitwiseAnd(s).toNumber(),o=r.bitwiseAnd(s).toNumber(),c=i?4:0,h=i?0:4;t.setUint32(e+c,a,i),t.setUint32(e+h,o,i)}(r,i-8,Wa.new(8*this.length),n),this.process(r,0);const a=uo(t),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let t=0;t<c;t++)a.setUint32(4*t,h[t],n)}digest(){const{buffer:t,outputLen:e}=this;this.digestInto(t);const r=t.slice(0,e);return this.destroy(),r}_cloneInto(t){t||(t=new this.constructor),t.set(...this.get());const{blockLen:e,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return t.length=i,t.pos=a,t.finished=n,t.destroyed=s,i%e&&t.buffer.set(r),t}}const Ec=(t,e,r)=>t&e^t&r^e&r,kc=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Sc=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Ic=/* @__PURE__ */new Uint32Array(64);class Cc extends vc{constructor(){super(64,32,8,!1),this.A=0|Sc[0],this.B=0|Sc[1],this.C=0|Sc[2],this.D=0|Sc[3],this.E=0|Sc[4],this.F=0|Sc[5],this.G=0|Sc[6],this.H=0|Sc[7]}get(){const{A:t,B:e,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[t,e,r,i,n,s,a,o]}set(t,e,r,i,n,s,a,o){this.A=0|t,this.B=0|e,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(t,e){for(let r=0;r<16;r++,e+=4)Ic[r]=t.getUint32(e,!1);for(let t=16;t<64;t++){const e=Ic[t-15],r=Ic[t-2],i=lo(e,7)^lo(e,18)^e>>>3,n=lo(r,17)^lo(r,19)^r>>>10;Ic[t]=n+Ic[t-7]+i+Ic[t-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let t=0;t<64;t++){const e=h+(lo(a,6)^lo(a,11)^lo(a,25))+((u=a)&o^~u&c)+kc[t]+Ic[t]|0,l=(lo(r,2)^lo(r,13)^lo(r,22))+Ec(r,i,n)|0;h=c,c=o,o=a,a=s+e|0,s=n,n=i,i=r,r=e+l|0}var u;r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){Ic.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class Bc extends Cc{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Kc=/* @__PURE__ */mo((()=>new Cc)),Pc=/* @__PURE__ */mo((()=>new Bc)),Dc=nc(Wa.new("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),Uc=bc({a:Dc.create(Wa.new("-3")),b:Wa.new("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Dc,n:Wa.new("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:Wa.new("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:Wa.new("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:Wa.new(1),lowS:!1},Kc),Mc=Object.freeze(Wa.new(2**32-1)),xc=Object.freeze(Wa.new(32));function Qc(t,e=!1){return e?{h:t.bitwiseAnd(Mc).toNumber(),l:t.rightShift(xc).bitwiseAnd(Mc).toNumber()}:{h:0|t.rightShift(xc).bitwiseAnd(Mc).toNumber(),l:0|t.bitwiseAnd(Mc).toNumber()}}function Rc(t,e=!1){let r=new Uint32Array(t.length),i=new Uint32Array(t.length);for(let n=0;n<t.length;n++){const{h:s,l:a}=Qc(t[n],e);[r[n],i[n]]=[s,a]}return[r,i]}const _c=(t,e,r)=>t<<r|e>>>32-r,Tc=(t,e,r)=>e<<r|t>>>32-r,Lc=(t,e,r)=>e<<r-32|t>>>64-r,Nc=(t,e,r)=>t<<r-32|e>>>64-r;const Oc={fromBig:Qc,split:Rc,toBig:(t,e)=>Wa.new(t>>>0).ileftShift(xc).ibitwiseOr(Wa.new(e>>>0)),shrSH:(t,e,r)=>t>>>r,shrSL:(t,e,r)=>t<<32-r|e>>>r,rotrSH:(t,e,r)=>t>>>r|e<<32-r,rotrSL:(t,e,r)=>t<<32-r|e>>>r,rotrBH:(t,e,r)=>t<<64-r|e>>>r-32,rotrBL:(t,e,r)=>t>>>r-32|e<<64-r,rotr32H:(t,e)=>e,rotr32L:(t,e)=>t,rotlSH:_c,rotlSL:Tc,rotlBH:Lc,rotlBL:Nc,add:function(t,e,r,i){const n=(e>>>0)+(i>>>0);return{h:t+r+(n/2**32|0)|0,l:0|n}},add3L:(t,e,r)=>(t>>>0)+(e>>>0)+(r>>>0),add3H:(t,e,r,i)=>e+r+i+(t/2**32|0)|0,add4L:(t,e,r,i)=>(t>>>0)+(e>>>0)+(r>>>0)+(i>>>0),add4H:(t,e,r,i,n)=>e+r+i+n+(t/2**32|0)|0,add5H:(t,e,r,i,n,s)=>e+r+i+n+s+(t/2**32|0)|0,add5L:(t,e,r,i,n)=>(t>>>0)+(e>>>0)+(r>>>0)+(i>>>0)+(n>>>0)},[Fc,Hc]=/* @__PURE__ */(()=>Oc.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((t=>Wa.new(t)))))(),zc=/* @__PURE__ */new Uint32Array(80),Gc=/* @__PURE__ */new Uint32Array(80);class qc extends vc{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:t,Al:e,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:f,Gl:y,Hh:d,Hl:p}=this;return[t,e,r,i,n,s,a,o,c,h,u,l,f,y,d,p]}set(t,e,r,i,n,s,a,o,c,h,u,l,f,y,d,p){this.Ah=0|t,this.Al=0|e,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|f,this.Gl=0|y,this.Hh=0|d,this.Hl=0|p}process(t,e){for(let r=0;r<16;r++,e+=4)zc[r]=t.getUint32(e),Gc[r]=t.getUint32(e+=4);for(let t=16;t<80;t++){const e=0|zc[t-15],r=0|Gc[t-15],i=Oc.rotrSH(e,r,1)^Oc.rotrSH(e,r,8)^Oc.shrSH(e,r,7),n=Oc.rotrSL(e,r,1)^Oc.rotrSL(e,r,8)^Oc.shrSL(e,r,7),s=0|zc[t-2],a=0|Gc[t-2],o=Oc.rotrSH(s,a,19)^Oc.rotrBH(s,a,61)^Oc.shrSH(s,a,6),c=Oc.rotrSL(s,a,19)^Oc.rotrBL(s,a,61)^Oc.shrSL(s,a,6),h=Oc.add4L(n,c,Gc[t-7],Gc[t-16]),u=Oc.add4H(h,i,o,zc[t-7],zc[t-16]);zc[t]=0|u,Gc[t]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:f,Fl:y,Gh:d,Gl:p,Hh:g,Hl:m}=this;for(let t=0;t<80;t++){const e=Oc.rotrSH(u,l,14)^Oc.rotrSH(u,l,18)^Oc.rotrBH(u,l,41),w=Oc.rotrSL(u,l,14)^Oc.rotrSL(u,l,18)^Oc.rotrBL(u,l,41),A=u&f^~u&d,b=l&y^~l&p,v=Oc.add5L(m,w,b,Hc[t],Gc[t]),E=Oc.add5H(v,g,e,A,Fc[t],zc[t]),k=0|v,S=Oc.rotrSH(r,i,28)^Oc.rotrBH(r,i,34)^Oc.rotrBH(r,i,39),I=Oc.rotrSL(r,i,28)^Oc.rotrBL(r,i,34)^Oc.rotrBL(r,i,39),C=r&n^r&a^n&a,B=i&s^i&o^s&o;g=0|d,m=0|p,d=0|f,p=0|y,f=0|u,y=0|l,({h:u,l}=Oc.add(0|c,0|h,0|E,0|k)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=Oc.add3L(k,I,B);r=Oc.add3H(K,E,S,C),i=0|K}({h:r,l:i}=Oc.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=Oc.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=Oc.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=Oc.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=Oc.add(0|this.Eh,0|this.El,0|u,0|l)),({h:f,l:y}=Oc.add(0|this.Fh,0|this.Fl,0|f,0|y)),({h:d,l:p}=Oc.add(0|this.Gh,0|this.Gl,0|d,0|p)),({h:g,l:m}=Oc.add(0|this.Hh,0|this.Hl,0|g,0|m)),this.set(r,i,n,s,a,o,c,h,u,l,f,y,d,p,g,m)}roundClean(){zc.fill(0),Gc.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class jc extends qc{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const Vc=/* @__PURE__ */mo((()=>new qc)),Zc=/* @__PURE__ */mo((()=>new jc)),Jc=nc(Wa.new("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),Yc=bc({a:Jc.create(Wa.new("-3")),b:Wa.new("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:Jc,n:Wa.new("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:Wa.new("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:Wa.new("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:Wa.new(1),lowS:!1},Zc),Wc=nc(Wa.new("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),$c={a:Wc.create(Wa.new("-3")),b:Wa.new("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:Wc,n:Wa.new("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:Wa.new("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:Wa.new("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:Wa.new(1)},Xc=bc({a:$c.a,b:$c.b,Fp:Wc,n:$c.n,Gx:$c.Gx,Gy:$c.Gy,h:$c.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},Vc),th=nc(Wa.new("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),eh=bc({a:th.create(Wa.new("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:Wa.new("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:th,n:Wa.new("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:Wa.new("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:Wa.new("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:Wa.new(1),lowS:!1},Kc),rh=nc(Wa.new("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),ih=bc({a:rh.create(Wa.new("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:Wa.new("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:rh,n:Wa.new("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:Wa.new("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:Wa.new("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:Wa.new(1),lowS:!1},Zc),nh=nc(Wa.new("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),sh=bc({a:nh.create(Wa.new("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:Wa.new("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:nh,n:Wa.new("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:Wa.new("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:Wa.new("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:Wa.new(1),lowS:!1},Vc),[ah,oh,ch]=[[],[],[]],hh=/* @__PURE__ */Object.freeze(Wa.new(0)),uh=/* @__PURE__ */Object.freeze(Wa.new(1)),lh=/* @__PURE__ */Object.freeze(Wa.new(2)),fh=/* @__PURE__ */Object.freeze(Wa.new(7)),yh=/* @__PURE__ */Object.freeze(Wa.new(256)),dh=/* @__PURE__ */Object.freeze(Wa.new(113));for(let t=0,e=uh,r=1,i=0;t<24;t++){[r,i]=[i,(2*r+3*i)%5],ah.push(2*(5*i+r)),oh.push((t+1)*(t+2)/2%64);const n=hh.clone();for(let t=0;t<7;t++)e=e.leftShift(uh).ixor(e.rightShift(fh).imul(dh)).imod(yh),e.bitwiseAnd(lh).isZero()||n.ixor(uh.leftShift(uh.leftShift(/* @__PURE__ */Wa.new(t)).idec()));ch.push(n)}const[ph,gh]=/* @__PURE__ */Rc(ch,!0),mh=(t,e,r)=>r>32?Lc(t,e,r):_c(t,e,r),wh=(t,e,r)=>r>32?Nc(t,e,r):Tc(t,e,r);class Ah extends go{constructor(t,e,r,i=!1,n=24){if(super(),this.blockLen=t,this.suffix=e,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,no(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){!function(t,e=24){const r=new Uint32Array(10);for(let i=24-e;i<24;i++){for(let e=0;e<10;e++)r[e]=t[e]^t[e+10]^t[e+20]^t[e+30]^t[e+40];for(let e=0;e<10;e+=2){const i=(e+8)%10,n=(e+2)%10,s=r[n],a=r[n+1],o=mh(s,a,1)^r[i],c=wh(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)t[e+r]^=o,t[e+r+1]^=c}let e=t[2],n=t[3];for(let r=0;r<24;r++){const i=oh[r],s=mh(e,n,i),a=wh(e,n,i),o=ah[r];e=t[o],n=t[o+1],t[o]=s,t[o+1]=a}for(let e=0;e<50;e+=10){for(let i=0;i<10;i++)r[i]=t[e+i];for(let i=0;i<10;i++)t[e+i]^=~r[(i+2)%10]&r[(i+4)%10]}t[0]^=ph[i],t[1]^=gh[i]}r.fill(0)}(this.state32,this.rounds),this.posOut=0,this.pos=0}update(t){ao(this);const{blockLen:e,state:r}=this,i=(t=yo(t)).length;for(let n=0;n<i;){const s=Math.min(e-this.pos,i-n);for(let e=0;e<s;e++)r[this.pos++]^=t[n++];this.pos===e&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:t,suffix:e,pos:r,blockLen:i}=this;t[r]^=e,128&e&&r===i-1&&this.keccak(),t[i-1]^=128,this.keccak()}writeInto(t){ao(this,!1),so(t),this.finish();const e=this.state,{blockLen:r}=this;for(let i=0,n=t.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);t.set(e.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return t}xofInto(t){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(t)}xof(t){return no(t),this.xofInto(new Uint8Array(t))}digestInto(t){if(oo(t,this),this.finished)throw Error("digest() was already called");return this.writeInto(t),this.destroy(),t}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(t){const{blockLen:e,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return t||(t=new Ah(e,r,i,s,n)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=n,t.suffix=r,t.outputLen=i,t.enableXOF=s,t.destroyed=this.destroyed,t}}const bh=(t,e,r)=>mo((()=>new Ah(e,t,r))),vh=/* @__PURE__ */bh(6,136,32),Eh=/* @__PURE__ */bh(6,72,64),kh=/* @__PURE__ */((t,e,r)=>function(t){const e=(e,r)=>t(r).update(yo(e)).digest(),r=t({});return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=e=>t(e),e}(((i={})=>new Ah(e,t,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),Sh=Object.freeze(Wa.new(0)),Ih=Object.freeze(Wa.new(1)),Ch=Object.freeze(Wa.new(2)),Bh=Object.freeze(Wa.new(3)),Kh=Object.freeze(Wa.new(8)),Ph={zip215:!0};function Dh(t){const e=function(t){const e=uc(t);return Oo(t,{hash:"function",a:"BigInteger",d:"BigInteger",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...e})}(t),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=e,h=Ch.leftShift(Wa.new(8*o).idec()),u=r.create,l=e.uvRatio||((t,e)=>{try{return{isValid:!0,value:r.sqrt(t.mul(r.inv(e)))}}catch(t){return{isValid:!1,value:Sh}}}),f=e.adjustScalarBytes||(t=>t),y=e.domain||((t,e,r)=>{if(e.length||r)throw Error("Contexts/pre-hash are not supported");return t}),d=t=>t instanceof Wa&&t.gt(Sh),p=(t,e)=>d(t)&&d(e)&&t.lt(e),g=t=>t.isZero()||p(t,h);function m(t,e){if(p(t,e))return t;throw Error(`Expected valid scalar < ${e}, got ${typeof t} ${t}`)}function w(t){return t.isZero()?t:m(t,i)}const A=new Map;function b(t){if(!(t instanceof v))throw Error("ExtendedPoint expected")}class v{constructor(t,e,r,i){if(this.ex=t,this.ey=e,this.ez=r,this.et=i,!g(t))throw Error("x required");if(!g(e))throw Error("y required");if(!g(r))throw Error("z required");if(!g(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(t){if(t instanceof v)throw Error("extended point not allowed");const{x:e,y:r}=t||{};if(!g(e)||!g(r))throw Error("invalid affine point");return new v(e,r,Ih,u(e.mul(r)))}static normalizeZ(t){const e=r.invertBatch(t.map((t=>t.ez)));return t.map(((t,r)=>t.toAffine(e[r]))).map(v.fromAffine)}_setWindowSize(t){this._WINDOW_SIZE=t,A.delete(this)}assertValidity(){const{a:t,d:r}=e;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i.mul(i)),c=u(n.mul(n)),h=u(s.mul(s)),l=u(h.mul(h)),f=u(o.mul(t)),y=u(h.mul(u(f.add(c)))),d=u(l.add(u(r.mul(u(o.mul(c))))));if(!y.equal(d))throw Error("bad point: equation left != right (1)");const p=u(i.mul(n)),g=u(s.mul(a));if(!p.equal(g))throw Error("bad point: equation left != right (2)")}equals(t){b(t);const{ex:e,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=t,o=u(e.mul(a)),c=u(n.mul(i)),h=u(r.mul(a)),l=u(s.mul(i));return o.equal(c)&&h.equal(l)}is0(){return this.equals(v.ZERO)}negate(){return new v(u(this.ex.negate()),this.ey,this.ez,u(this.et.negate()))}double(){const{a:t}=e,{ex:r,ey:i,ez:n}=this,s=u(r.mul(r)),a=u(i.mul(i)),o=u(Ch.mul(u(n.mul(n)))),c=u(t.mul(s)),h=r.add(i),l=u(u(h.mul(h)).sub(s).isub(a)),f=c.add(a),y=f.sub(o),d=c.sub(a),p=u(l.mul(y)),g=u(f.mul(d)),m=u(l.mul(d)),w=u(y.mul(f));return new v(p,g,w,m)}add(t){b(t);const{a:r,d:i}=e,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:f}=t;if(r.equal(Wa.new(-1))){const t=u(s.sub(n).imul(h.add(c))),e=u(s.add(n).imul(h.sub(c))),r=u(e.sub(t));if(r.isZero())return this.double();const i=u(a.mul(Ch).imul(f)),y=u(o.mul(Ch).imul(l)),d=y.add(i),p=e.add(t),g=y.sub(i),m=u(d.mul(r)),w=u(p.mul(g)),A=u(d.mul(g)),b=u(r.mul(p));return new v(m,w,b,A)}const y=u(n.mul(c)),d=u(s.mul(h)),p=u(o.mul(i).imul(f)),g=u(a.mul(l)),m=u(n.add(s).imul(c.add(h)).isub(y).isub(d)),w=g.sub(p),A=g.add(p),E=u(d.sub(r.mul(y))),k=u(m.mul(w)),S=u(A.mul(E)),I=u(m.mul(E)),C=u(w.mul(A));return new v(k,S,C,I)}subtract(t){return this.add(t.negate())}wNAF(t){return S.wNAFCached(this,A,t,v.normalizeZ)}multiply(t){const{p:e,f:r}=this.wNAF(m(t,i));return v.normalizeZ([e,r])[0]}multiplyUnsafe(t){let e=w(t);return e.isZero()?k:this.equals(k)||e.isOne()?this:this.equals(E)?this.wNAF(e).p:S.unsafeLadder(this,e)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return S.unsafeLadder(this,i).is0()}toAffine(t){const{ex:e,ey:i,ez:n}=this,s=this.is0();null==t&&(t=s?Kh:r.inv(n));const a=u(e.mul(t)),o=u(i.mul(t)),c=u(n.mul(t));if(s)return{x:Sh.clone(),y:Ih.clone()};if(!c.isOne())throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:t}=e;return t.isOne()?this:this.multiplyUnsafe(t)}static fromHex(t,i=!1){const{d:n,a:s}=e,a=r.BYTES,o=(t=xo("pointHex",t,a)).slice(),c=t[a-1];o[a-1]=-129&c;const f=Do(o);f.isZero()||m(f,i?h:r.ORDER);const y=u(f.mul(f)),d=u(y.dec()),p=u(n.mul(y).isub(s));let{isValid:g,value:w}=l(d,p);if(!g)throw Error("Point.fromHex: invalid y coordinate");const A=!w.isEven(),b=!!(128&c);if(!i&&w.isZero()&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==A&&(w=u(w.negate())),v.fromAffine({x:w,y:f})}static fromPrivateKey(t){return B(t).point}toRawBytes(){const{x:t,y:e}=this.toAffine(),i=e.toUint8Array("le",r.BYTES);return i[i.length-1]|=t.isEven()?0:128,i}toHex(){return So(this.toRawBytes())}}v.BASE=new v(e.Gx,e.Gy,Ih,u(e.Gx.mul(e.Gy))),v.ZERO=new v(Sh,Ih,Ih,Sh);const{BASE:E,ZERO:k}=v,S=hc(v,8*o);function I(t){return Wo(t,i)}function C(t){return I(Do(t))}function B(t){const e=o;t=xo("private key",t,e);const r=xo("hashed private key",s(t),2*e),i=f(r.slice(0,e)),n=r.slice(e,2*e),a=C(i),c=E.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(t=new Uint8Array,...e){const r=Qo(...e);return C(s(y(r,xo("context",t),!!n)))}const P=Ph;E._setWindowSize(8);return{CURVE:e,getPublicKey:function(t){return B(t).pointBytes},sign:function(t,e,i={}){t=xo("message",t),n&&(t=n(t));const{prefix:s,scalar:a,pointBytes:c}=B(e),h=K(i.context,s,t),u=E.multiply(h).toRawBytes(),l=K(i.context,u,c,t),f=I(h.add(l.mul(a)));return w(f),xo("result",Qo(u,f.toUint8Array("le",r.BYTES)),2*o)},verify:function(t,e,i,s=P){const{context:a,zip215:o}=s,c=r.BYTES;t=xo("signature",t,2*c),e=xo("message",e),n&&(e=n(e));const h=Do(t.slice(c,2*c));let u,l,f;try{u=v.fromHex(i,o),l=v.fromHex(t.slice(0,c),o),f=E.multiplyUnsafe(h)}catch(t){return!1}if(!o&&u.isSmallOrder())return!1;const y=K(a,l.toRawBytes(),u.toRawBytes(),e);return l.add(u.multiplyUnsafe(y)).subtract(f).clearCofactor().equals(v.ZERO)},ExtendedPoint:v,utils:{getExtendedPublicKey:B,randomPrivateKey:()=>a(r.BYTES),precompute:(t=8,e=v.BASE)=>(e._setWindowSize(t),e.multiply(Bh),e)}}}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Uh=Object.freeze(Wa.new(0)),Mh=Object.freeze(Wa.new(1)),xh=Object.freeze(Wa.new(2));function Qh(t){const e=(Oo(r=t,{a:"BigInteger"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"BigInteger"}),Object.freeze({...r}));var r;const{P:i}=e,n=t=>Wo(t,i),s=e.montgomeryBits,a=Math.ceil(s/8),o=e.nByteLength,c=e.adjustScalarBytes||(t=>t),h=e.powPminus2||(t=>$o(t,i.sub(xh),i));function u(t,e,r){const i=n(t.mul(e.sub(r)));return[e=n(e.sub(i)),r=n(r.add(i))]}function l(t){if(t instanceof Wa&&!t.isNegative()&&t.lt(i))return t;throw Error("Expected valid scalar 0 < scalar < CURVE.P")}const f=e.a.sub(xh).irightShift(xh);function y(t){return Mo(n(t),a)}function d(t,e){const r=function(t){const e=xo("u coordinate",t,a);return 32===o&&(e[31]&=127),Do(e)}(e),i=function(t){const e=xo("scalar",t),r=e.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return Do(c(e))}(t),d=function(t,e){const r=l(t),i=l(e),a=r;let o,c=Mh,y=Uh,d=r,p=Mh,g=Uh.clone();for(let t=Wa.new(s-1);!t.isNegative();t.idec()){const e=Wa.new(i.rightShift(t).getBit(0));g.ixor(e),o=u(g,c,d),c=o[0],d=o[1],o=u(g,y,p),y=o[0],p=o[1],g=e;const r=c.add(y),s=n(r.mul(r)),h=c.sub(y),l=n(h.mul(h)),m=s.sub(l),w=d.add(p),A=d.sub(p),b=n(A.mul(r)),v=n(w.mul(h)),E=b.add(v),k=b.sub(v);d=n(E.mul(E)),p=n(a.mul(n(k.mul(k)))),c=n(s.mul(l)),y=n(m.mul(s.add(n(f.mul(m)))))}o=u(g,c,d),c=o[0],d=o[1],o=u(g,y,p),y=o[0],p=o[1];const m=h(y);return n(c.mul(m))}(r,i);if(d.isZero())throw Error("Invalid private or public key received");return y(d)}const p=y(e.Gu);function g(t){return d(t,p)}return{scalarMult:d,scalarMultBase:g,getSharedSecret:(t,e)=>d(t,e),getPublicKey:t=>g(t),utils:{randomPrivateKey:()=>e.randomBytes(e.nByteLength)},GuBytes:p}}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Rh=mo((()=>kh.create({dkLen:114}))),_h=(mo((()=>kh.create({dkLen:64}))),Wa.new("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439")),Th=Wa.new(1),Lh=Wa.new(2),Nh=Wa.new(3),Oh=Wa.new(11),Fh=Wa.new(22),Hh=Wa.new(44),zh=Wa.new(88),Gh=Wa.new(223);function qh(t){const e=_h,r=t.modExp(Nh,e),i=r.mul(r).imul(t).imod(e),n=Xo(i,Nh,e).imul(i).imod(e),s=Xo(n,Nh,e).imul(i).imod(e),a=Xo(s,Lh,e).imul(r).imod(e),o=Xo(a,Oh,e).imul(a).imod(e),c=Xo(o,Fh,e).imul(o).imod(e),h=Xo(c,Hh,e).imul(c).imod(e),u=Xo(h,zh,e).imul(h).imod(e),l=Xo(u,Hh,e).imul(c).imod(e),f=Xo(l,Lh,e).imul(r).imod(e),y=Xo(f,Th,e).imul(t).imod(e);return Xo(y,Gh,e).imul(f).imod(e)}function jh(t){return t[0]&=252,t[55]|=128,t[56]=0,t}const Vh=nc(_h,456,!0),Zh={a:Wa.new(1),d:Wa.new("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:Vh,n:Wa.new("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:Wa.new(4),Gx:Wa.new("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:Wa.new("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Rh,randomBytes:wo,adjustScalarBytes:jh,domain:(t,e,r)=>{if(e.length>255)throw Error("Context is too big: "+e.length);return po(fo("SigEd448"),new Uint8Array([r?1:0,e.length]),e,t)},uvRatio:function(t,e){const r=_h,i=Wo(t.mul(t).imul(e),r),n=Wo(i.mul(t),r),s=qh(Wo(n.mul(i).imul(e),r)),a=Wo(n.mul(s),r),o=Wo(a.mul(a),r);return{isValid:Wo(o.mul(e),r).equal(t),value:a}}},Jh=/* @__PURE__ */Dh(Zh),Yh=/* @__PURE__ */(()=>Qh({a:Wa.new(156326),montgomeryBits:448,nByteLength:56,P:_h,Gu:Wa.new(5),powPminus2:t=>{const e=_h;return Wo(Xo(qh(t),Wa.new(2),e).mul(t),e)},adjustScalarBytes:jh,randomBytes:wo}))();Object.freeze(Wa.new(4)),Vh.ORDER.sub(Nh).irightShift(Lh),Wa.new(156326),Wa.new("39082"),Wa.new("78163"),Wa.new("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),Wa.new("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716"),Wa.new("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
 /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
-const Vh=Object.freeze(Va.new("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f")),Zh=Object.freeze(Va.new("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"));Object.freeze(Va.new(0));const Jh=Object.freeze(Va.new(1)),Yh=Object.freeze(Va.new(2)),Wh=(t,e)=>t.add(e.rightShift(Jh)).idiv(e);const $h=tc(Vh,void 0,void 0,{sqrt:function(t){const e=Vh,r=Va.new(3),i=Va.new(6),n=Va.new(11),s=Va.new(22),a=Va.new(23),o=Va.new(44),c=Va.new(88),h=t.mul(t).imul(t).imod(e),u=h.mul(h).imul(t).imod(e),l=Jo(u,r,e).imul(u).imod(e),f=Jo(l,r,e).imul(u).imod(e),y=Jo(f,Yh,e).imul(h).imod(e),d=Jo(y,n,e).imul(y).imod(e),p=Jo(d,s,e).imul(d).imod(e),g=Jo(p,o,e).imul(p).imod(e),m=Jo(g,c,e).imul(g).imod(e),w=Jo(m,o,e).imul(p).imod(e),A=Jo(w,r,e).imul(u).imod(e),b=Jo(A,a,e).imul(d).imod(e),v=Jo(b,i,e).imul(h).imod(e),E=Jo(v,Yh,e);if(!$h.eql($h.sqr(E),t))throw Error("Cannot find square root");return E}}),Xh=gc({a:Va.new(0),b:Va.new(7),Fp:$h,n:Zh,Gx:Va.new("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:Va.new("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:Va.new(1),lowS:!0,endo:{beta:Va.new("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:t=>{const e=Zh,r=Va.new("0x3086d221a7d46bcde86c90e49284eb15"),i=Jh.negate().imul(Va.new("0xe4437ed6010e88286f547fa90abfe4c3")),n=Va.new("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=Va.new("0x100000000000000000000000000000000"),o=Wh(s.mul(t),e),c=Wh(i.negate().imul(t),e);let h=Vo(t.sub(o.mul(r)).sub(c.mul(n)),e),u=Vo(o.negate().mul(i).isub(c.mul(s)),e);const l=h.gt(a),f=u.gt(a);if(l&&(h=e.sub(h)),f&&(u=e.sub(u)),h.gt(a)||u.gt(a))throw Error("splitScalar: Endomorphism failed, k="+t);return{k1neg:l,k1:h,k2neg:f,k2:u}}}},Sc);Xh.ProjectivePoint;const tu=new Map(Object.entries({nistP256:Bc,nistP384:jc,nistP521:Jc,brainpoolP256r1:Wc,brainpoolP384r1:Xc,brainpoolP512r1:eh,secp256k1:Xh,x448:jh,ed448:qh}));var eu=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:tu});function ru(t,e,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],f=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],y=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let d,p,g,m,w,A,b,v,E,k,S,I,C,B,K=0,P=e.length;const D=32===t.length?3:9;v=3===D?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(e=function(t,e){const r=8-t.length%8;let i;if(2===e&&r<8)i=32;else if(1===e)i=r;else{if(e||!(r<8)){if(8===r)return t;throw Error("des: invalid padding")}i=0}const n=new Uint8Array(t.length+r);for(let e=0;e<t.length;e++)n[e]=t[e];for(let e=0;e<r;e++)n[t.length+e]=i;return n}(e,s),P=e.length);let U=new Uint8Array(P),M=0;for(1===i&&(E=n[K++]<<24|n[K++]<<16|n[K++]<<8|n[K++],S=n[K++]<<24|n[K++]<<16|n[K++]<<8|n[K++],K=0);K<P;){for(A=e[K++]<<24|e[K++]<<16|e[K++]<<8|e[K++],b=e[K++]<<24|e[K++]<<16|e[K++]<<8|e[K++],1===i&&(r?(A^=E,b^=S):(k=E,I=S,E=A,S=b)),g=252645135&(A>>>4^b),b^=g,A^=g<<4,g=65535&(A>>>16^b),b^=g,A^=g<<16,g=858993459&(b>>>2^A),A^=g,b^=g<<2,g=16711935&(b>>>8^A),A^=g,b^=g<<8,g=1431655765&(A>>>1^b),b^=g,A^=g<<1,A=A<<1|A>>>31,b=b<<1|b>>>31,p=0;p<D;p+=3){for(C=v[p+1],B=v[p+2],d=v[p];d!==C;d+=B)m=b^t[d],w=(b>>>4|b<<28)^t[d+1],g=A,A=b,b=g^(o[m>>>24&63]|h[m>>>16&63]|l[m>>>8&63]|y[63&m]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|f[63&w]);g=A,A=b,b=g}A=A>>>1|A<<31,b=b>>>1|b<<31,g=1431655765&(A>>>1^b),b^=g,A^=g<<1,g=16711935&(b>>>8^A),A^=g,b^=g<<8,g=858993459&(b>>>2^A),A^=g,b^=g<<2,g=65535&(A>>>16^b),b^=g,A^=g<<16,g=252645135&(A>>>4^b),b^=g,A^=g<<4,1===i&&(r?(E=A,S=b):(A^=k,b^=I)),U[M++]=A>>>24,U[M++]=A>>>16&255,U[M++]=A>>>8&255,U[M++]=255&A,U[M++]=b>>>24,U[M++]=b>>>16&255,U[M++]=b>>>8&255,U[M++]=255&b}return r||(U=function(t,e){let r,i=null;if(2===e)r=32;else if(1===e)i=t[t.length-1];else{if(e)throw Error("des: invalid padding");r=0}if(!i){for(i=1;t[t.length-i]===r;)i++;i--}return t.subarray(0,t.length-i)}(U,s)),U}function iu(t){const e=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],f=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],y=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],d=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=t.length>8?3:1,g=Array(32*p),m=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,A,b,v=0,E=0;for(let k=0;k<p;k++){let p=t[v++]<<24|t[v++]<<16|t[v++]<<8|t[v++],k=t[v++]<<24|t[v++]<<16|t[v++]<<8|t[v++];b=252645135&(p>>>4^k),k^=b,p^=b<<4,b=65535&(k>>>-16^p),p^=b,k^=b<<-16,b=858993459&(p>>>2^k),k^=b,p^=b<<2,b=65535&(k>>>-16^p),p^=b,k^=b<<-16,b=1431655765&(p>>>1^k),k^=b,p^=b<<1,b=16711935&(k>>>8^p),p^=b,k^=b<<8,b=1431655765&(p>>>1^k),k^=b,p^=b<<1,b=p<<8|k>>>20&240,p=k<<24|k<<8&16711680|k>>>8&65280|k>>>24&240,k=b;for(let t=0;t<16;t++)m[t]?(p=p<<2|p>>>26,k=k<<2|k>>>26):(p=p<<1|p>>>27,k=k<<1|k>>>27),p&=-15,k&=-15,w=e[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],A=c[k>>>28]|h[k>>>24&15]|u[k>>>20&15]|l[k>>>16&15]|f[k>>>12&15]|y[k>>>8&15]|d[k>>>4&15],b=65535&(A>>>16^w),g[E++]=w^b,g[E++]=A^b<<16}return g}function nu(t){this.key=[];for(let e=0;e<3;e++)this.key.push(new Uint8Array(t.subarray(8*e,8*e+8)));this.encrypt=function(t){return ru(iu(this.key[2]),ru(iu(this.key[1]),ru(iu(this.key[0]),t,!0,0,null,null),!1,0,null,null),!0,0,null,null)}}function su(){this.BlockSize=8,this.KeySize=16,this.setKey=function(t){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),t.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(t),!0},this.reset=function(){for(let t=0;t<16;t++)this.masking[t]=0,this.rotate[t]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(t){const e=Array(t.length);for(let s=0;s<t.length;s+=8){let a,o=t[s]<<24|t[s+1]<<16|t[s+2]<<8|t[s+3],c=t[s+4]<<24|t[s+5]<<16|t[s+6]<<8|t[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,e[s]=c>>>24&255,e[s+1]=c>>>16&255,e[s+2]=c>>>8&255,e[s+3]=255&c,e[s+4]=o>>>24&255,e[s+5]=o>>>16&255,e[s+6]=o>>>8&255,e[s+7]=255&o}return e},this.decrypt=function(t){const e=Array(t.length);for(let s=0;s<t.length;s+=8){let a,o=t[s]<<24|t[s+1]<<16|t[s+2]<<8|t[s+3],c=t[s+4]<<24|t[s+5]<<16|t[s+6]<<8|t[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,e[s]=c>>>24&255,e[s+1]=c>>>16&255,e[s+2]=c>>>8&255,e[s+3]=255&c,e[s+4]=o>>>24&255,e[s+5]=o>>16&255,e[s+6]=o>>8&255,e[s+7]=255&o}return e};const t=[,,,,];t[0]=[,,,,],t[0][0]=[4,0,13,15,12,14,8],t[0][1]=[5,2,16,18,17,19,10],t[0][2]=[6,3,23,22,21,20,9],t[0][3]=[7,1,26,25,27,24,11],t[1]=[,,,,],t[1][0]=[0,6,21,23,20,22,16],t[1][1]=[1,4,0,2,1,3,18],t[1][2]=[2,5,7,6,5,4,17],t[1][3]=[3,7,10,9,11,8,19],t[2]=[,,,,],t[2][0]=[4,0,13,15,12,14,8],t[2][1]=[5,2,16,18,17,19,10],t[2][2]=[6,3,23,22,21,20,9],t[2][3]=[7,1,26,25,27,24,11],t[3]=[,,,,],t[3][0]=[0,6,21,23,20,22,16],t[3][1]=[1,4,0,2,1,3,18],t[3][2]=[2,5,7,6,5,4,17],t[3][3]=[3,7,10,9,11,8,19];const e=[,,,,];function r(t,e,r){const i=e+t,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(t,e,r){const i=e^t,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(t,e,r){const i=e-t,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}e[0]=[,,,,],e[0][0]=[24,25,23,22,18],e[0][1]=[26,27,21,20,22],e[0][2]=[28,29,19,18,25],e[0][3]=[30,31,17,16,28],e[1]=[,,,,],e[1][0]=[3,2,12,13,8],e[1][1]=[1,0,14,15,13],e[1][2]=[7,6,8,9,3],e[1][3]=[5,4,10,11,7],e[2]=[,,,,],e[2][0]=[19,18,28,29,25],e[2][1]=[17,16,30,31,28],e[2][2]=[23,22,24,25,18],e[2][3]=[21,20,26,27,22],e[3]=[,,,,],e[3][0]=[8,9,7,6,3],e[3][1]=[10,11,5,4,7],e[3][2]=[12,13,3,2,8],e[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let t=0;t<4;t++)a=4*t,i[t]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const e=t[r][a];c=i[e[1]],c^=s[4][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[5][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[6][i[e[4]>>>2]>>>24-8*(3&e[4])&255],c^=s[7][i[e[5]>>>2]>>>24-8*(3&e[5])&255],c^=s[o[a]][i[e[6]>>>2]>>>24-8*(3&e[6])&255],i[e[0]]=c}for(a=0;a<4;a++){const t=e[r][a];c=s[4][i[t[0]>>>2]>>>24-8*(3&t[0])&255],c^=s[5][i[t[1]>>>2]>>>24-8*(3&t[1])&255],c^=s[6][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[7][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[4+a][i[t[4]>>>2]>>>24-8*(3&t[4])&255],n[h]=c,h++}}for(let t=0;t<16;t++)this.masking[t]=n[t],this.rotate[t]=31&n[16+t]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function au(t){this.cast5=new su,this.cast5.setKey(t),this.encrypt=function(t){return this.cast5.encrypt(t)}}nu.keySize=nu.prototype.keySize=24,nu.blockSize=nu.prototype.blockSize=8,au.blockSize=au.prototype.blockSize=8,au.keySize=au.prototype.keySize=16;const ou=4294967295;function cu(t,e){return(t<<e|t>>>32-e)&ou}function hu(t,e){return t[e]|t[e+1]<<8|t[e+2]<<16|t[e+3]<<24}function uu(t,e,r){t.splice(e,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function lu(t,e){return t>>>8*e&255}function fu(t){this.tf=function(){let t=null,e=null,r=-1,i=[],n=[[],[],[],[]];function s(t){return n[0][lu(t,0)]^n[1][lu(t,1)]^n[2][lu(t,2)]^n[3][lu(t,3)]}function a(t){return n[0][lu(t,3)]^n[1][lu(t,0)]^n[2][lu(t,1)]^n[3][lu(t,2)]}function o(t,e){let r=s(e[0]),n=a(e[1]);e[2]=cu(e[2]^r+n+i[4*t+8]&ou,31),e[3]=cu(e[3],1)^r+2*n+i[4*t+9]&ou,r=s(e[2]),n=a(e[3]),e[0]=cu(e[0]^r+n+i[4*t+10]&ou,31),e[1]=cu(e[1],1)^r+2*n+i[4*t+11]&ou}function c(t,e){let r=s(e[0]),n=a(e[1]);e[2]=cu(e[2],1)^r+n+i[4*t+10]&ou,e[3]=cu(e[3]^r+2*n+i[4*t+11]&ou,31),r=s(e[2]),n=a(e[3]),e[0]=cu(e[0],1)^r+n+i[4*t+8]&ou,e[1]=cu(e[1]^r+2*n+i[4*t+9]&ou,31)}return{name:"twofish",blocksize:16,open:function(e){let r,s,a,o,c;t=e;const h=[],u=[],l=[];let f;const y=[];let d,p,g;const m=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],A=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],v=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],E=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],k=[[],[]],S=[[],[],[],[]];function I(t){return t^t>>2^[0,90,180,238][3&t]}function C(t){return t^t>>1^t>>2^[0,238,180,90][3&t]}function B(t,e){let r,i,n;for(r=0;r<8;r++)i=e>>>24,e=e<<8&ou|t>>>24,t=t<<8&ou,n=i<<1,128&i&&(n^=333),e^=i^n<<16,n^=i>>>1,1&i&&(n^=166),e^=n<<24|n<<8;return e}function K(t,e){const r=e>>4,i=15&e,n=m[t][r^i],s=w[t][v[i]^E[r]];return b[t][v[s]^E[n]]<<4|A[t][n^s]}function P(t,e){let r=lu(t,0),i=lu(t,1),n=lu(t,2),s=lu(t,3);switch(f){case 4:r=k[1][r]^lu(e[3],0),i=k[0][i]^lu(e[3],1),n=k[0][n]^lu(e[3],2),s=k[1][s]^lu(e[3],3);case 3:r=k[1][r]^lu(e[2],0),i=k[1][i]^lu(e[2],1),n=k[0][n]^lu(e[2],2),s=k[0][s]^lu(e[2],3);case 2:r=k[0][k[0][r]^lu(e[1],0)]^lu(e[0],0),i=k[0][k[1][i]^lu(e[1],1)]^lu(e[0],1),n=k[1][k[0][n]^lu(e[1],2)]^lu(e[0],2),s=k[1][k[1][s]^lu(e[1],3)]^lu(e[0],3)}return S[0][r]^S[1][i]^S[2][n]^S[3][s]}for(t=t.slice(0,32),r=t.length;16!==r&&24!==r&&32!==r;)t[r++]=0;for(r=0;r<t.length;r+=4)l[r>>2]=hu(t,r);for(r=0;r<256;r++)k[0][r]=K(0,r),k[1][r]=K(1,r);for(r=0;r<256;r++)d=k[1][r],p=I(d),g=C(d),S[0][r]=d+(p<<8)+(g<<16)+(g<<24),S[2][r]=p+(g<<8)+(d<<16)+(g<<24),d=k[0][r],p=I(d),g=C(d),S[1][r]=g+(g<<8)+(p<<16)+(d<<24),S[3][r]=p+(d<<8)+(g<<16)+(p<<24);for(f=l.length/2,r=0;r<f;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,y[f-r-1]=B(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=P(s,h),a=cu(P(a,u),8),i[r]=s+a&ou,i[r+1]=cu(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,f){case 4:s=k[1][s]^lu(y[3],0),a=k[0][a]^lu(y[3],1),o=k[0][o]^lu(y[3],2),c=k[1][c]^lu(y[3],3);case 3:s=k[1][s]^lu(y[2],0),a=k[1][a]^lu(y[2],1),o=k[0][o]^lu(y[2],2),c=k[0][c]^lu(y[2],3);case 2:n[0][r]=S[0][k[0][k[0][s]^lu(y[1],0)]^lu(y[0],0)],n[1][r]=S[1][k[0][k[1][a]^lu(y[1],1)]^lu(y[0],1)],n[2][r]=S[2][k[1][k[0][o]^lu(y[1],2)]^lu(y[0],2)],n[3][r]=S[3][k[1][k[1][c]^lu(y[1],3)]^lu(y[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(t,n){e=t,r=n;const s=[hu(e,r)^i[0],hu(e,r+4)^i[1],hu(e,r+8)^i[2],hu(e,r+12)^i[3]];for(let t=0;t<8;t++)o(t,s);return uu(e,r,s[2]^i[4]),uu(e,r+4,s[3]^i[5]),uu(e,r+8,s[0]^i[6]),uu(e,r+12,s[1]^i[7]),r+=16,e},decrypt:function(t,n){e=t,r=n;const s=[hu(e,r)^i[4],hu(e,r+4)^i[5],hu(e,r+8)^i[6],hu(e,r+12)^i[7]];for(let t=7;t>=0;t--)c(t,s);uu(e,r,s[2]^i[0]),uu(e,r+4,s[3]^i[1]),uu(e,r+8,s[0]^i[2]),uu(e,r+12,s[1]^i[3]),r+=16},finalize:function(){return e}}}(),this.tf.open(Array.from(t),0),this.encrypt=function(t){return this.tf.encrypt(Array.from(t),0)}}function yu(){}function du(t){this.bf=new yu,this.bf.init(t),this.encrypt=function(t){return this.bf.encryptBlock(t)}}fu.keySize=fu.prototype.keySize=32,fu.blockSize=fu.prototype.blockSize=16,yu.prototype.BLOCKSIZE=8,yu.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],yu.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],yu.prototype.NN=16,yu.prototype._clean=function(t){if(t<0){t=(2147483647&t)+2147483648}return t},yu.prototype._F=function(t){let e;const r=255&t,i=255&(t>>>=8),n=255&(t>>>=8),s=255&(t>>>=8);return e=this.sboxes[0][s]+this.sboxes[1][n],e^=this.sboxes[2][i],e+=this.sboxes[3][r],e},yu.prototype._encryptBlock=function(t){let e,r=t[0],i=t[1];for(e=0;e<this.NN;++e){r^=this.parray[e],i=this._F(r)^i;const t=r;r=i,i=t}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],t[0]=this._clean(i),t[1]=this._clean(r)},yu.prototype.encryptBlock=function(t){let e;const r=[0,0],i=this.BLOCKSIZE/2;for(e=0;e<this.BLOCKSIZE/2;++e)r[0]=r[0]<<8|255&t[e+0],r[1]=r[1]<<8|255&t[e+i];this._encryptBlock(r);const n=[];for(e=0;e<this.BLOCKSIZE/2;++e)n[e+0]=r[0]>>>24-8*e&255,n[e+i]=r[1]>>>24-8*e&255;return n},yu.prototype._decryptBlock=function(t){let e,r=t[0],i=t[1];for(e=this.NN+1;e>1;--e){r^=this.parray[e],i=this._F(r)^i;const t=r;r=i,i=t}r^=this.parray[1],i^=this.parray[0],t[0]=this._clean(i),t[1]=this._clean(r)},yu.prototype.init=function(t){let e,r=0;for(this.parray=[],e=0;e<this.NN+2;++e){let i=0;for(let e=0;e<4;++e)i=i<<8|255&t[r],++r>=t.length&&(r=0);this.parray[e]=this.PARRAY[e]^i}for(this.sboxes=[],e=0;e<4;++e)for(this.sboxes[e]=[],r=0;r<256;++r)this.sboxes[e][r]=this.SBOXES[e][r];const i=[0,0];for(e=0;e<this.NN+2;e+=2)this._encryptBlock(i),this.parray[e+0]=i[0],this.parray[e+1]=i[1];for(e=0;e<4;++e)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[e][r+0]=i[0],this.sboxes[e][r+1]=i[1]},du.keySize=du.prototype.keySize=16,du.blockSize=du.prototype.blockSize=8;const pu=new Map([[L.symmetric.tripledes,nu],[L.symmetric.cast5,au],[L.symmetric.blowfish,du],[L.symmetric.twofish,fu]]);var gu=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:pu});const mu=(t,e)=>t<<e|t>>>32-e>>>0,wu=(t,e,r)=>t&e^t&r^e&r,Au=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),bu=/* @__PURE__ */new Uint32Array(80);class vu extends mc{constructor(){super(64,20,8,!1),this.A=0|Au[0],this.B=0|Au[1],this.C=0|Au[2],this.D=0|Au[3],this.E=0|Au[4]}get(){const{A:t,B:e,C:r,D:i,E:n}=this;return[t,e,r,i,n]}set(t,e,r,i,n){this.A=0|t,this.B=0|e,this.C=0|r,this.D=0|i,this.E=0|n}process(t,e){for(let r=0;r<16;r++,e+=4)bu[r]=t.getUint32(e,!1);for(let t=16;t<80;t++)bu[t]=mu(bu[t-3]^bu[t-8]^bu[t-14]^bu[t-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let t=0;t<80;t++){let e,c;t<20?(e=(o=i)&n^~o&s,c=1518500249):t<40?(e=i^n^s,c=1859775393):t<60?(e=wu(i,n,s),c=2400959708):(e=i^n^s,c=3395469782);const h=mu(r,5)+e+a+c+bu[t]|0;a=s,s=n,n=mu(i,30),i=r,r=h}var o;r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){bu.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Eu=/* @__PURE__ */fo((()=>new vu)),ku=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Su=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((t,e)=>e))),Iu=/* @__PURE__ */Su.map((t=>(9*t+5)%16));let Cu=[Su],Bu=[Iu];for(let t=0;t<4;t++)for(let e of[Cu,Bu])e.push(e[t].map((t=>ku[t])));const Ku=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((t=>new Uint8Array(t))),Pu=/* @__PURE__ */Cu.map(((t,e)=>t.map((t=>Ku[e][t])))),Du=/* @__PURE__ */Bu.map(((t,e)=>t.map((t=>Ku[e][t])))),Uu=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),Mu=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]),xu=(t,e)=>t<<e|t>>>32-e;function Qu(t,e,r,i){return 0===t?e^r^i:1===t?e&r|~e&i:2===t?(e|~r)^i:3===t?e&i|r&~i:e^(r|~i)}const Ru=/* @__PURE__ */new Uint32Array(16);class _u extends mc{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:t,h1:e,h2:r,h3:i,h4:n}=this;return[t,e,r,i,n]}set(t,e,r,i,n){this.h0=0|t,this.h1=0|e,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(t,e){for(let r=0;r<16;r++,e+=4)Ru[r]=t.getUint32(e,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let t=0;t<5;t++){const e=4-t,f=Uu[t],y=Mu[t],d=Cu[t],p=Bu[t],g=Pu[t],m=Du[t];for(let e=0;e<16;e++){const i=xu(r+Qu(t,n,a,c)+Ru[d[e]]+f,g[e])+u|0;r=u,u=c,c=0|xu(a,10),a=n,n=i}for(let t=0;t<16;t++){const r=xu(i+Qu(e,s,o,h)+Ru[p[t]]+y,m[t])+l|0;i=l,l=h,h=0|xu(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){Ru.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const Tu=new Map(Object.entries({sha1:Eu,sha224:Ic,sha256:Sc,sha384:Gc,sha512:zc,sha3_256:mh,sha3_512:wh,ripemd160:/* @__PURE__ */fo((()=>new _u))}));var Lu=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Tu});function Nu(t,e,r,i){t[e]+=r[i],t[e+1]+=r[i+1]+(t[e]<r[i])}function Ou(t,e){t[0]+=e,t[1]+=t[0]<e}function Fu(t,e,r,i,n,s,a,o){Nu(t,r,t,i),Nu(t,r,e,a);let c=t[s]^t[r],h=t[s+1]^t[r+1];t[s]=h,t[s+1]=c,Nu(t,n,t,s),c=t[i]^t[n],h=t[i+1]^t[n+1],t[i]=c>>>24^h<<8,t[i+1]=h>>>24^c<<8,Nu(t,r,t,i),Nu(t,r,e,o),c=t[s]^t[r],h=t[s+1]^t[r+1],t[s]=c>>>16^h<<16,t[s+1]=h>>>16^c<<16,Nu(t,n,t,s),c=t[i]^t[n],h=t[i+1]^t[n+1],t[i]=h>>>31^c<<1,t[i+1]=c>>>31^h<<1}const Hu=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),zu=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((t=>2*t)));function Gu(t,e){const r=new Uint32Array(32),i=new Uint32Array(t.b.buffer,t.b.byteOffset,32);for(let e=0;e<16;e++)r[e]=t.h[e],r[e+16]=Hu[e];r[24]^=t.t0[0],r[25]^=t.t0[1];const n=e?4294967295:0;r[28]^=n,r[29]^=n;for(let t=0;t<12;t++){const e=t<<4;Fu(r,i,0,8,16,24,zu[e+0],zu[e+1]),Fu(r,i,2,10,18,26,zu[e+2],zu[e+3]),Fu(r,i,4,12,20,28,zu[e+4],zu[e+5]),Fu(r,i,6,14,22,30,zu[e+6],zu[e+7]),Fu(r,i,0,10,20,30,zu[e+8],zu[e+9]),Fu(r,i,2,12,22,24,zu[e+10],zu[e+11]),Fu(r,i,4,14,16,26,zu[e+12],zu[e+13]),Fu(r,i,6,8,18,28,zu[e+14],zu[e+15])}for(let e=0;e<16;e++)t.h[e]^=r[e]^r[e+16]}class qu{constructor(t,e,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(Wu),h:new Uint32Array(Vu/4),t0:new Uint32Array(2),c:0,outlen:t},n[0]=t,e&&(n[1]=e.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let t=0;t<16;t++)this.S.h[t]=Hu[t]^s[t];if(e){const t=new Uint8Array(Wu);t.set(e),this.update(t)}}update(t){if(!(t instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let e=0;for(;e<t.length;){this.S.c===Wu&&(Ou(this.S.t0,this.S.c),Gu(this.S,!1),this.S.c=0);let r=Wu-this.S.c;this.S.b.set(t.subarray(e,e+r),this.S.c);const i=Math.min(r,t.length-e);this.S.c+=i,e+=i}return this}digest(t){Ou(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=Wu,Gu(this.S,!0);const e=t||new Uint8Array(this.S.outlen);for(let t=0;t<this.S.outlen;t++)e[t]=this.S.h[t>>2]>>8*(3&t);return this.S.h=null,e.buffer}}function ju(t,e,r,i){if(t>Vu)throw Error(`outlen must be at most ${Vu} (given: ${t})`);if(e){if(!(e instanceof Uint8Array))throw Error("key must be Uint8Array or Buffer");if(e.length>Zu)throw Error(`key size must be at most ${Zu} (given: ${e.length})`)}if(r){if(!(r instanceof Uint8Array))throw Error("salt must be Uint8Array or Buffer");if(r.length!==Ju)throw Error(`salt must be exactly ${Ju} (given: ${r.length}`)}if(i){if(!(i instanceof Uint8Array))throw Error("personal must be Uint8Array or Buffer");if(i.length!==Yu)throw Error(`salt must be exactly ${Yu} (given: ${i.length}`)}return new qu(t,e,r,i)}const Vu=64,Zu=64,Ju=16,Yu=16,Wu=128,$u=2,Xu=19,tl=4294967295,el=4,rl=4294967295,il=8,nl=4294967295,sl=8,al=4294967295,ol=4294967295,cl=32,hl=1024,ul=64,ll=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function fl(t,e,r){return t[r+0]=e,t[r+1]=e>>8,t[r+2]=e>>16,t[r+3]=e>>24,t}function yl(t,e,r){if(e>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=e;for(let e=r;e<r+7;e++)t[e]=i,i=(i-t[e])/256;return t}function dl(t,e,r){const i=new Uint8Array(64),n=new Uint8Array(4+e.length);if(fl(n,t,0),n.set(e,4),t<=64)return ju(t).update(n).digest(r),r;const s=Math.ceil(t/32)-2;for(let t=0;t<s;t++)ju(64).update(0===t?n:i).digest(i),r.set(i.subarray(0,32),32*t);const a=new Uint8Array(ju(t-32*s).update(i).digest());return r.set(a,32*s),r}function pl(t,e,r,i){return t.fn.XOR(e.byteOffset,r.byteOffset,i.byteOffset),e}function gl(t,e,r,i){return t.fn.G(e.byteOffset,r.byteOffset,i.byteOffset,t.refs.gZ.byteOffset),i}function ml(t,e,r,i){return t.fn.G2(e.byteOffset,r.byteOffset,i.byteOffset,t.refs.gZ.byteOffset),i}function*wl(t,e,r,i,n,s,a,o){t.refs.prngTmp.fill(0);const c=t.refs.prngTmp.subarray(0,48);yl(c,e,0),yl(c,r,8),yl(c,i,16),yl(c,n,24),yl(c,s,32),yl(c,$u,40);for(let e=1;e<=a;e++){yl(t.refs.prngTmp,e,c.length);const r=ml(t,t.refs.ZERO1024,t.refs.prngTmp,t.refs.prngR);for(let t=1===e?8*o:0;t<r.length;t+=8)yield r.subarray(t,t+8)}return[]}const Al=1024,bl=64*Al;function vl(t,{memory:e,instance:r}){if(!ll)throw Error("BigEndian system not supported");const i=function({type:t,version:e,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(t,e,r,i)=>{if(e<r||e>i)throw Error(`${t} size should be between ${r} and ${i} bytes`)};if(t!==$u||e!==Xu)throw Error("Unsupported type or version");return u("password",i,sl,nl),u("salt",n,il,rl),u("tag",r,el,tl),u("memory",c,8*o,al),s&&u("associated data",s,0,ol),a&&u("secret",a,0,cl),{type:t,version:e,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:$u,version:Xu,...t}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*hl+10*Al;if(e.buffer.byteLength<l){const t=Math.ceil((l-e.buffer.byteLength)/bl);e.grow(t)}let f=0;c.gZ=new Uint8Array(e.buffer,f,hl),f+=c.gZ.length,c.prngR=new Uint8Array(e.buffer,f,hl),f+=c.prngR.length,c.prngTmp=new Uint8Array(e.buffer,f,hl),f+=c.prngTmp.length,c.ZERO1024=new Uint8Array(e.buffer,f,1024),f+=c.ZERO1024.length;const y=new Uint32Array(e.buffer,f,2);f+=y.length*Uint32Array.BYTES_PER_ELEMENT;const d={fn:h,refs:c},p=new Uint8Array(e.buffer,f,hl);f+=p.length;const g=new Uint8Array(e.buffer,f,i.memorySize*hl),m=new Uint8Array(e.buffer,0,f),w=function(t){const e=ju(ul),r=new Uint8Array(4),i=new Uint8Array(24);fl(i,t.lanes,0),fl(i,t.tagLength,4),fl(i,t.memorySize,8),fl(i,t.passes,12),fl(i,t.version,16),fl(i,t.type,20);const n=[i];t.password?(n.push(fl(new Uint8Array(4),t.password.length,0)),n.push(t.password)):n.push(r);t.salt?(n.push(fl(new Uint8Array(4),t.salt.length,0)),n.push(t.salt)):n.push(r);t.secret?(n.push(fl(new Uint8Array(4),t.secret.length,0)),n.push(t.secret)):n.push(r);t.ad?(n.push(fl(new Uint8Array(4),t.ad.length,0)),n.push(t.ad)):n.push(r);e.update(function(t){if(1===t.length)return t[0];let e=0;for(let r=0;r<t.length;r++){if(!(t[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");e+=t[r].length}const r=new Uint8Array(e);let i=0;return t.forEach((t=>{r.set(t,i),i+=t.length})),r}(n));const s=e.digest();return new Uint8Array(s)}(i),A=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(A))),v=(t,e)=>(b[t][e]=g.subarray(t*A*1024+1024*e,t*A*1024+1024*e+hl),b[t][e]);for(let t=0;t<i.lanes;t++){const e=new Uint8Array(w.length+8);e.set(w),fl(e,0,w.length),fl(e,t,w.length+4),dl(hl,e,v(t,0)),fl(e,1,w.length),dl(hl,e,v(t,1))}const E=A/4;for(let t=0;t<i.passes;t++)for(let e=0;e<4;e++){const r=0===t&&e<=1;for(let n=0;n<i.lanes;n++){let s=0===e&&0===t?2:0;const a=r?wl(d,t,n,e,u,i.passes,E,s):null;for(;s<E;s++){const c=e*E+s,h=c>0?b[n][c-1]:b[n][A-1],u=r?a.next().value:h;o(y.byteOffset,u.byteOffset,n,i.lanes,t,e,s,4,E);const l=y[0],f=y[1];0===t&&v(n,c),gl(d,h,b[l][f],t>0?p:b[n][c]),t>0&&pl(d,b[n][c],p,b[n][c])}}}const k=b[0][A-1];for(let t=1;t<i.lanes;t++)pl(d,k,k,b[t][A-1]);const S=dl(i.tagLength,k,new Uint8Array(i.tagLength));return m.fill(0),e.grow(0),S}let El;async function kl(t,e){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(t,e,r){const i={env:{memory:t}};if(void 0===El)try{const t=await e(i);return El=!0,t}catch(t){El=!1}return(El?e:r)(i)}(r,t,e);return t=>vl(t,{instance:i.instance,memory:r})}function Sl(t,e,r,i){function n(t,e,r){var i=r?WebAssembly.instantiateStreaming:WebAssembly.instantiate,n=r?WebAssembly.compileStreaming:WebAssembly.compile;return e?i(t,e):n(t)}var s;if(e){var a=require("fs"),o=require("path");return new Promise(((t,r)=>{a.readFile(o.resolve(__dirname,e),((e,s)=>{null!=e?r(e):t(n(s,i,!1))}))}))}if(s=Buffer.from(r,"base64"),t){var c=new WebAssembly.Module(s);return i?new WebAssembly.Instance(c,i):c}return n(s,i,!1)}var Il=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>kl((t=>Sl(0,null,"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",t)),(t=>Sl(0,null,"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",t)))});exports.AEADEncryptedDataPacket=Gs,exports.Argon2OutOfMemoryError=rn,exports.Argon2S2K=an,exports.CleartextMessage=Ta,exports.CompressedDataPacket=Qs,exports.KDFParams=zi,exports.LiteralDataPacket=ks,exports.MarkerPacket=class{static get tag(){return L.packet.marker}read(t){return 80===t[0]&&71===t[1]&&80===t[2]}write(){return new Uint8Array([80,71,80])}},exports.Message=xa,exports.OnePassSignaturePacket=Ds,exports.PacketList=Ms,exports.PaddingPacket=class{static get tag(){return L.packet.padding}constructor(){this.padding=null}read(t){}write(){return this.padding}async createPadding(t){this.padding=await en.random.getRandomBytes(t)}},exports.PrivateKey=Ca,exports.PublicKey=Ia,exports.PublicKeyEncryptedSessionKeyPacket=qs,exports.PublicKeyPacket=Zs,exports.PublicSubkeyPacket=Ws,exports.SecretKeyPacket=Xs,exports.SecretSubkeyPacket=ra,exports.Signature=na,exports.SignaturePacket=Bs,exports.Subkey=ba,exports.SymEncryptedIntegrityProtectedDataPacket=Fs,exports.SymEncryptedSessionKeyPacket=Vs,exports.SymmetricallyEncryptedDataPacket=Ys,exports.TrustPacket=class{static get tag(){return L.packet.trust}read(){throw new Fr("Trust packets are not supported")}write(){throw new Fr("Trust packets are not supported")}},exports.UnparseablePacket=zr,exports.UserAttributePacket=$s,exports.UserIDPacket=ea,exports.armor=tt,exports.config=N,exports.createCleartextMessage=async function({text:t,...e}){if(!t)throw Error("createCleartextMessage: must pass options object containing `text`");if(!F.isString(t))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(e);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new Ta(t)},exports.createMessage=async function({text:t,binary:e,filename:r,date:i=new Date,format:n=(void 0!==t?"utf8":"binary"),...s}){const a=void 0!==t?t:e;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(t&&!F.isString(t)&&!F.isStream(t))throw Error("createMessage: options.text must be a string or stream");if(e&&!F.isUint8Array(e)&&!F.isStream(e))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=F.isStream(a),h=new ks(i);void 0!==t?h.setText(a,L.write(L.literal,n)):h.setBytes(a,L.write(L.literal,n)),void 0!==r&&h.setFilename(r);const u=new Ms;u.push(h);const l=new xa(u);return l.fromStream=c,l},exports.decrypt=async function({message:t,decryptionKeys:e,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(Ha(h={...N,...h}),La(t),n=za(n),e=za(e),r=za(r),i=za(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await t.decrypt(e,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),qa(l,t),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=v([l.data,Q((async()=>{await F.anyPromise(l.signatures.map((t=>t.verified)))}))])}return l.data=await Ga(l.data),l}catch(t){throw F.wrapError("Error decrypting message",t)}},exports.decryptKey=async function({privateKey:t,passphrase:e,config:r,...i}){Ha(r={...N,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!t.isPrivate())throw Error("Cannot decrypt a public key");const s=t.clone(!0),a=F.isArray(e)?e:[e];try{return await Promise.all(s.getKeys().map((t=>F.anyPromise(a.map((e=>t.keyPacket.decrypt(e))))))),await s.validate(r),s}catch(t){throw s.clearPrivateParams(),F.wrapError("Error decrypting private key",t)}},exports.decryptSessionKeys=async function({message:t,decryptionKeys:e,passwords:r,date:i=new Date,config:n,...s}){if(Ha(n={...N,...n}),La(t),e=za(e),r=za(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await t.decryptSessionKeys(e,r,void 0,i,n)}catch(t){throw F.wrapError("Error decrypting session keys",t)}},exports.encrypt=async function({message:t,encryptionKeys:e,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:f=[],signatureNotations:y=[],config:d,...p}){if(Ha(d={...N,...d}),La(t),Oa(s),e=za(e),r=za(r),i=za(i),c=za(c),h=za(h),l=za(l),f=za(f),y=za(y),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const g=Object.keys(p);if(g.length>0)throw Error("Unknown option: "+g.join(", "));r||(r=[]);try{if((r.length||a)&&(t=await t.sign(r,a,c,u,l,y,d)),t=t.compress(await async function(t=[],e=new Date,r=[],i=N){const n=L.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(t.map((async function(t,n){const a=(await t.getPrimarySelfSignature(e,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(e,u,f,d),d),t=await t.encrypt(e,i,n,o,h,u,f,d),"object"===s)return t;return Ga("armored"===s?t.armor(d):t.write())}catch(t){throw F.wrapError("Error encrypting message",t)}},exports.encryptKey=async function({privateKey:t,passphrase:e,config:r,...i}){Ha(r={...N,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!t.isPrivate())throw Error("Cannot encrypt a public key");const s=t.clone(!0),a=s.getKeys(),o=F.isArray(e)?e:Array(a.length).fill(e);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(t,e)=>{const{keyPacket:i}=t;await i.encrypt(o[e],r),i.clearPrivateParams()}))),s}catch(t){throw s.clearPrivateParams(),F.wrapError("Error encrypting private key",t)}},exports.encryptSessionKey=async function({data:t,algorithm:e,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(Ha(u={...N,...u}),function(t,e){if(!F.isUint8Array(t))throw Error("Parameter ["+(e||"data")+"] must be of type Uint8Array")}(t),function(t,e){if(!F.isString(t))throw Error("Parameter ["+(e||"data")+"] must be of type String")}(e,"algorithm"),Oa(s),i=za(i),n=za(n),o=za(o),h=za(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const f=Object.keys(l);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return ja(await xa.encryptSessionKey(t,e,r,i,n,a,o,c,h,u),s,u)}catch(t){throw F.wrapError("Error encrypting session key",t)}},exports.enums=L,exports.generateKey=async function({userIDs:t=[],passphrase:e,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...f}){Ha(l={...N,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),t=za(t);const y=Object.keys(f);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(0===t.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const d={userIDs:t,passphrase:e,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:t,revocationCertificate:e}=await async function(t,e){t.sign=!0,(t=da(t)).subkeys=t.subkeys.map(((e,r)=>da(t.subkeys[r],t)));let r=[aa(t,e)];r=r.concat(t.subkeys.map((t=>sa(t,e))));const i=await Promise.all(r),n=await Pa(i[0],i.slice(1),t,e),s=await n.getRevocationCertificate(t.date,e);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(d,l);return t.getKeys().forEach((({keyPacket:t})=>wa(t,l))),{privateKey:ja(t,u,l),publicKey:"symmetric"!==r?ja(t.toPublic(),u,l):null,revocationCertificate:e}}catch(t){throw F.wrapError("Error generating keypair",t)}},exports.generateSessionKey=async function({encryptionKeys:t,date:e=new Date,encryptionUserIDs:r=[],config:i,...n}){if(Ha(i={...N,...i}),t=za(t),r=za(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await xa.generateSessionKey(t,e,r,i)}catch(t){throw F.wrapError("Error generating session key",t)}},exports.readCleartextMessage=async function({cleartextMessage:t,config:e,...r}){if(e={...N,...e},!t)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!F.isString(t))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await X(t);if(n.type!==L.armor.signed)throw Error("No cleartext signed message.");const s=await Ms.fromBinary(n.data,_a,e);!function(t,e){const r=function(t){const r=t=>e=>t.hashAlgorithm===e;for(let i=0;i<e.length;i++)if(e[i].constructor.tag===L.packet.signature&&!t.some(r(e[i])))return!1;return!0},i=[];if(t.forEach((t=>{const e=t.match(/^Hash: (.+)$/);if(!e)throw Error('Only "Hash" header allowed in cleartext signed message');{const t=e[1].replace(/\s/g,"").split(",").map((t=>{try{return L.write(L.hash,t.toLowerCase())}catch(e){throw Error("Unknown hash algorithm in armor header: "+t.toLowerCase())}}));i.push(...t)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new na(s);return new Ta(n.text,a)},exports.readKey=async function({armoredKey:t,binaryKey:e,config:r,...i}){if(r={...N,...r},!t&&!e)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(t&&!F.isString(t))throw Error("readKey: options.armoredKey must be a string");if(e&&!F.isUint8Array(e))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(t){const{type:e,data:r}=await X(t);if(e!==L.armor.publicKey&&e!==L.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=e;return Ka(await Ms.fromBinary(s,Ba,r))},exports.readKeys=async function({armoredKeys:t,binaryKeys:e,config:r,...i}){r={...N,...r};let n=t||e;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(t&&!F.isString(t))throw Error("readKeys: options.armoredKeys must be a string");if(e&&!F.isUint8Array(e))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(t){const{type:e,data:r}=await X(t);if(e!==L.armor.publicKey&&e!==L.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await Ms.fromBinary(n,Ba,r),c=o.indexOfTag(L.packet.publicKey,L.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let t=0;t<c.length;t++){const e=Ka(o.slice(c[t],c[t+1]));a.push(e)}return a},exports.readMessage=async function({armoredMessage:t,binaryMessage:e,config:r,...i}){r={...N,...r};let n=t||e;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(t&&!F.isString(t)&&!F.isStream(t))throw Error("readMessage: options.armoredMessage must be a string or stream");if(e&&!F.isUint8Array(e)&&!F.isStream(e))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=F.isStream(n);if(t){const{type:t,data:e}=await X(n);if(t!==L.armor.message)throw Error("Armored text not of type message");n=e}const o=await Ms.fromBinary(n,Da,r),c=new xa(o);return c.fromStream=a,c},exports.readPrivateKey=async function({armoredKey:t,binaryKey:e,config:r,...i}){if(r={...N,...r},!t&&!e)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(t&&!F.isString(t))throw Error("readPrivateKey: options.armoredKey must be a string");if(e&&!F.isUint8Array(e))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(t){const{type:e,data:r}=await X(t);if(e!==L.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=e;const a=await Ms.fromBinary(s,Ba,r);return new Ca(a)},exports.readPrivateKeys=async function({armoredKeys:t,binaryKeys:e,config:r}){r={...N,...r};let i=t||e;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(t&&!F.isString(t))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(e&&!F.isUint8Array(e))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(t){const{type:e,data:r}=await X(t);if(e!==L.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await Ms.fromBinary(i,Ba,r),a=s.indexOfTag(L.packet.secretKey);if(0===a.length)throw Error("No secret key packet found");for(let t=0;t<a.length;t++){const e=s.slice(a[t],a[t+1]),r=new Ca(e);n.push(r)}return n},exports.readSignature=async function({armoredSignature:t,binarySignature:e,config:r,...i}){r={...N,...r};let n=t||e;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(t&&!F.isString(t))throw Error("readSignature: options.armoredSignature must be a string");if(e&&!F.isUint8Array(e))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(t){const{type:t,data:e}=await X(n);if(t!==L.armor.signature)throw Error("Armored text not of type signature");n=e}const a=await Ms.fromBinary(n,ia,r);return new na(a)},exports.reformatKey=async function({privateKey:t,userIDs:e=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){Ha(a={...N,...a}),e=za(e);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===e.length&&6!==t.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:t,userIDs:e,passphrase:r,keyExpirationTime:i,date:n};try{const{key:t,revocationCertificate:e}=await async function(t,e){t=o(t);const{privateKey:r}=t;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:t})=>t.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;t.subkeys||(t.subkeys=await Promise.all(r.subkeys.map((async t=>{const r=t.keyPacket,n={key:i,bind:r},s=await oa(t.bindingSignatures,i,L.signature.subkeyBinding,n,null,e).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&L.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&L.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((t=>t.keyPacket));if(t.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");t.subkeys=t.subkeys.map((e=>o(e,t)));const s=await Pa(i,n,t,e),a=await s.getRevocationCertificate(t.date,e);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(t,e={}){return t.keyExpirationTime=t.keyExpirationTime||e.keyExpirationTime,t.passphrase=F.isString(t.passphrase)?t.passphrase:e.passphrase,t.date=t.date||e.date,t}}(h,a);return{privateKey:ja(t,s,a),publicKey:ja(t.toPublic(),s,a),revocationCertificate:e}}catch(t){throw F.wrapError("Error reformatting keypair",t)}},exports.revokeKey=async function({key:t,revocationCertificate:e,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){Ha(s={...N,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=e?await t.applyRevocationCertificate(e,i,s):await t.revoke(r,i,s);return a.isPrivate()?{privateKey:ja(a,n,s),publicKey:ja(a.toPublic(),n,s)}:{privateKey:null,publicKey:ja(a,n,s)}}catch(t){throw F.wrapError("Error revoking key",t)}},exports.sign=async function({message:t,signingKeys:e,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(Ha(c={...N,...c}),Na(t),Oa(r),e=za(e),n=za(n),a=za(a),o=za(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(t instanceof Ta&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(t instanceof Ta&&i)throw Error("Cannot detach-sign a cleartext message");if(!e||0===e.length)throw Error("No signing keys provided");try{let h;if(h=i?await t.signDetached(e,void 0,n,s,a,o,c):await t.sign(e,void 0,n,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),i&&(h=C(t.packets.write(),(async(t,e)=>{await Promise.all([E(h,e),M(t).catch((()=>{}))])}))),Ga(h)}catch(t){throw F.wrapError("Error signing message",t)}},exports.unarmor=X,exports.verify=async function({message:t,verificationKeys:e,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(Ha(a={...N,...a}),Na(t),e=za(e),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(t instanceof Ta&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(t instanceof Ta&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await t.verifyDetached(n,e,s,a):await t.verify(e,s,a),o.data="binary"===i?t.getLiteralData():t.getText(),t.fromStream&&qa(o,t),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=v([o.data,Q((async()=>{await F.anyPromise(o.signatures.map((t=>t.verified)))}))])}return o.data=await Ga(o.data),o}catch(t){throw F.wrapError("Error verifying signed message",t)}};
+const Wh=Object.freeze(Wa.new("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f")),$h=Object.freeze(Wa.new("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"));Object.freeze(Wa.new(0));const Xh=Object.freeze(Wa.new(1)),tu=Object.freeze(Wa.new(2)),eu=(t,e)=>t.add(e.rightShift(Xh)).idiv(e);const ru=nc(Wh,void 0,void 0,{sqrt:function(t){const e=Wh,r=Wa.new(3),i=Wa.new(6),n=Wa.new(11),s=Wa.new(22),a=Wa.new(23),o=Wa.new(44),c=Wa.new(88),h=t.mul(t).imul(t).imod(e),u=h.mul(h).imul(t).imod(e),l=Xo(u,r,e).imul(u).imod(e),f=Xo(l,r,e).imul(u).imod(e),y=Xo(f,tu,e).imul(h).imod(e),d=Xo(y,n,e).imul(y).imod(e),p=Xo(d,s,e).imul(d).imod(e),g=Xo(p,o,e).imul(p).imod(e),m=Xo(g,c,e).imul(g).imod(e),w=Xo(m,o,e).imul(p).imod(e),A=Xo(w,r,e).imul(u).imod(e),b=Xo(A,a,e).imul(d).imod(e),v=Xo(b,i,e).imul(h).imod(e),E=Xo(v,tu,e);if(!ru.eql(ru.sqr(E),t))throw Error("Cannot find square root");return E}}),iu=bc({a:Wa.new(0),b:Wa.new(7),Fp:ru,n:$h,Gx:Wa.new("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:Wa.new("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:Wa.new(1),lowS:!0,endo:{beta:Wa.new("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:t=>{const e=$h,r=Wa.new("0x3086d221a7d46bcde86c90e49284eb15"),i=Xh.negate().imul(Wa.new("0xe4437ed6010e88286f547fa90abfe4c3")),n=Wa.new("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=Wa.new("0x100000000000000000000000000000000"),o=eu(s.mul(t),e),c=eu(i.negate().imul(t),e);let h=Wo(t.sub(o.mul(r)).sub(c.mul(n)),e),u=Wo(o.negate().mul(i).isub(c.mul(s)),e);const l=h.gt(a),f=u.gt(a);if(l&&(h=e.sub(h)),f&&(u=e.sub(u)),h.gt(a)||u.gt(a))throw Error("splitScalar: Endomorphism failed, k="+t);return{k1neg:l,k1:h,k2neg:f,k2:u}}}},Kc);iu.ProjectivePoint;const nu=new Map(Object.entries({nistP256:Uc,nistP384:Yc,nistP521:Xc,brainpoolP256r1:eh,brainpoolP384r1:ih,brainpoolP512r1:sh,secp256k1:iu,x448:Yh,ed448:Jh}));var su=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:nu});function au(t,e,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],f=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],y=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let d,p,g,m,w,A,b,v,E,k,S,I,C,B,K=0,P=e.length;const D=32===t.length?3:9;v=3===D?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(e=function(t,e){const r=8-t.length%8;let i;if(2===e&&r<8)i=32;else if(1===e)i=r;else{if(e||!(r<8)){if(8===r)return t;throw Error("des: invalid padding")}i=0}const n=new Uint8Array(t.length+r);for(let e=0;e<t.length;e++)n[e]=t[e];for(let e=0;e<r;e++)n[t.length+e]=i;return n}(e,s),P=e.length);let U=new Uint8Array(P),M=0;for(1===i&&(E=n[K++]<<24|n[K++]<<16|n[K++]<<8|n[K++],S=n[K++]<<24|n[K++]<<16|n[K++]<<8|n[K++],K=0);K<P;){for(A=e[K++]<<24|e[K++]<<16|e[K++]<<8|e[K++],b=e[K++]<<24|e[K++]<<16|e[K++]<<8|e[K++],1===i&&(r?(A^=E,b^=S):(k=E,I=S,E=A,S=b)),g=252645135&(A>>>4^b),b^=g,A^=g<<4,g=65535&(A>>>16^b),b^=g,A^=g<<16,g=858993459&(b>>>2^A),A^=g,b^=g<<2,g=16711935&(b>>>8^A),A^=g,b^=g<<8,g=1431655765&(A>>>1^b),b^=g,A^=g<<1,A=A<<1|A>>>31,b=b<<1|b>>>31,p=0;p<D;p+=3){for(C=v[p+1],B=v[p+2],d=v[p];d!==C;d+=B)m=b^t[d],w=(b>>>4|b<<28)^t[d+1],g=A,A=b,b=g^(o[m>>>24&63]|h[m>>>16&63]|l[m>>>8&63]|y[63&m]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|f[63&w]);g=A,A=b,b=g}A=A>>>1|A<<31,b=b>>>1|b<<31,g=1431655765&(A>>>1^b),b^=g,A^=g<<1,g=16711935&(b>>>8^A),A^=g,b^=g<<8,g=858993459&(b>>>2^A),A^=g,b^=g<<2,g=65535&(A>>>16^b),b^=g,A^=g<<16,g=252645135&(A>>>4^b),b^=g,A^=g<<4,1===i&&(r?(E=A,S=b):(A^=k,b^=I)),U[M++]=A>>>24,U[M++]=A>>>16&255,U[M++]=A>>>8&255,U[M++]=255&A,U[M++]=b>>>24,U[M++]=b>>>16&255,U[M++]=b>>>8&255,U[M++]=255&b}return r||(U=function(t,e){let r,i=null;if(2===e)r=32;else if(1===e)i=t[t.length-1];else{if(e)throw Error("des: invalid padding");r=0}if(!i){for(i=1;t[t.length-i]===r;)i++;i--}return t.subarray(0,t.length-i)}(U,s)),U}function ou(t){const e=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],f=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],y=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],d=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=t.length>8?3:1,g=Array(32*p),m=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,A,b,v=0,E=0;for(let k=0;k<p;k++){let p=t[v++]<<24|t[v++]<<16|t[v++]<<8|t[v++],k=t[v++]<<24|t[v++]<<16|t[v++]<<8|t[v++];b=252645135&(p>>>4^k),k^=b,p^=b<<4,b=65535&(k>>>-16^p),p^=b,k^=b<<-16,b=858993459&(p>>>2^k),k^=b,p^=b<<2,b=65535&(k>>>-16^p),p^=b,k^=b<<-16,b=1431655765&(p>>>1^k),k^=b,p^=b<<1,b=16711935&(k>>>8^p),p^=b,k^=b<<8,b=1431655765&(p>>>1^k),k^=b,p^=b<<1,b=p<<8|k>>>20&240,p=k<<24|k<<8&16711680|k>>>8&65280|k>>>24&240,k=b;for(let t=0;t<16;t++)m[t]?(p=p<<2|p>>>26,k=k<<2|k>>>26):(p=p<<1|p>>>27,k=k<<1|k>>>27),p&=-15,k&=-15,w=e[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],A=c[k>>>28]|h[k>>>24&15]|u[k>>>20&15]|l[k>>>16&15]|f[k>>>12&15]|y[k>>>8&15]|d[k>>>4&15],b=65535&(A>>>16^w),g[E++]=w^b,g[E++]=A^b<<16}return g}function cu(t){this.key=[];for(let e=0;e<3;e++)this.key.push(new Uint8Array(t.subarray(8*e,8*e+8)));this.encrypt=function(t){return au(ou(this.key[2]),au(ou(this.key[1]),au(ou(this.key[0]),t,!0,0,null,null),!1,0,null,null),!0,0,null,null)}}function hu(){this.BlockSize=8,this.KeySize=16,this.setKey=function(t){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),t.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(t),!0},this.reset=function(){for(let t=0;t<16;t++)this.masking[t]=0,this.rotate[t]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(t){const e=Array(t.length);for(let s=0;s<t.length;s+=8){let a,o=t[s]<<24|t[s+1]<<16|t[s+2]<<8|t[s+3],c=t[s+4]<<24|t[s+5]<<16|t[s+6]<<8|t[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,e[s]=c>>>24&255,e[s+1]=c>>>16&255,e[s+2]=c>>>8&255,e[s+3]=255&c,e[s+4]=o>>>24&255,e[s+5]=o>>>16&255,e[s+6]=o>>>8&255,e[s+7]=255&o}return e},this.decrypt=function(t){const e=Array(t.length);for(let s=0;s<t.length;s+=8){let a,o=t[s]<<24|t[s+1]<<16|t[s+2]<<8|t[s+3],c=t[s+4]<<24|t[s+5]<<16|t[s+6]<<8|t[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,e[s]=c>>>24&255,e[s+1]=c>>>16&255,e[s+2]=c>>>8&255,e[s+3]=255&c,e[s+4]=o>>>24&255,e[s+5]=o>>16&255,e[s+6]=o>>8&255,e[s+7]=255&o}return e};const t=[,,,,];t[0]=[,,,,],t[0][0]=[4,0,13,15,12,14,8],t[0][1]=[5,2,16,18,17,19,10],t[0][2]=[6,3,23,22,21,20,9],t[0][3]=[7,1,26,25,27,24,11],t[1]=[,,,,],t[1][0]=[0,6,21,23,20,22,16],t[1][1]=[1,4,0,2,1,3,18],t[1][2]=[2,5,7,6,5,4,17],t[1][3]=[3,7,10,9,11,8,19],t[2]=[,,,,],t[2][0]=[4,0,13,15,12,14,8],t[2][1]=[5,2,16,18,17,19,10],t[2][2]=[6,3,23,22,21,20,9],t[2][3]=[7,1,26,25,27,24,11],t[3]=[,,,,],t[3][0]=[0,6,21,23,20,22,16],t[3][1]=[1,4,0,2,1,3,18],t[3][2]=[2,5,7,6,5,4,17],t[3][3]=[3,7,10,9,11,8,19];const e=[,,,,];function r(t,e,r){const i=e+t,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(t,e,r){const i=e^t,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(t,e,r){const i=e-t,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}e[0]=[,,,,],e[0][0]=[24,25,23,22,18],e[0][1]=[26,27,21,20,22],e[0][2]=[28,29,19,18,25],e[0][3]=[30,31,17,16,28],e[1]=[,,,,],e[1][0]=[3,2,12,13,8],e[1][1]=[1,0,14,15,13],e[1][2]=[7,6,8,9,3],e[1][3]=[5,4,10,11,7],e[2]=[,,,,],e[2][0]=[19,18,28,29,25],e[2][1]=[17,16,30,31,28],e[2][2]=[23,22,24,25,18],e[2][3]=[21,20,26,27,22],e[3]=[,,,,],e[3][0]=[8,9,7,6,3],e[3][1]=[10,11,5,4,7],e[3][2]=[12,13,3,2,8],e[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let t=0;t<4;t++)a=4*t,i[t]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const e=t[r][a];c=i[e[1]],c^=s[4][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[5][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[6][i[e[4]>>>2]>>>24-8*(3&e[4])&255],c^=s[7][i[e[5]>>>2]>>>24-8*(3&e[5])&255],c^=s[o[a]][i[e[6]>>>2]>>>24-8*(3&e[6])&255],i[e[0]]=c}for(a=0;a<4;a++){const t=e[r][a];c=s[4][i[t[0]>>>2]>>>24-8*(3&t[0])&255],c^=s[5][i[t[1]>>>2]>>>24-8*(3&t[1])&255],c^=s[6][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[7][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[4+a][i[t[4]>>>2]>>>24-8*(3&t[4])&255],n[h]=c,h++}}for(let t=0;t<16;t++)this.masking[t]=n[t],this.rotate[t]=31&n[16+t]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function uu(t){this.cast5=new hu,this.cast5.setKey(t),this.encrypt=function(t){return this.cast5.encrypt(t)}}cu.keySize=cu.prototype.keySize=24,cu.blockSize=cu.prototype.blockSize=8,uu.blockSize=uu.prototype.blockSize=8,uu.keySize=uu.prototype.keySize=16;const lu=4294967295;function fu(t,e){return(t<<e|t>>>32-e)&lu}function yu(t,e){return t[e]|t[e+1]<<8|t[e+2]<<16|t[e+3]<<24}function du(t,e,r){t.splice(e,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function pu(t,e){return t>>>8*e&255}function gu(t){this.tf=function(){let t=null,e=null,r=-1,i=[],n=[[],[],[],[]];function s(t){return n[0][pu(t,0)]^n[1][pu(t,1)]^n[2][pu(t,2)]^n[3][pu(t,3)]}function a(t){return n[0][pu(t,3)]^n[1][pu(t,0)]^n[2][pu(t,1)]^n[3][pu(t,2)]}function o(t,e){let r=s(e[0]),n=a(e[1]);e[2]=fu(e[2]^r+n+i[4*t+8]&lu,31),e[3]=fu(e[3],1)^r+2*n+i[4*t+9]&lu,r=s(e[2]),n=a(e[3]),e[0]=fu(e[0]^r+n+i[4*t+10]&lu,31),e[1]=fu(e[1],1)^r+2*n+i[4*t+11]&lu}function c(t,e){let r=s(e[0]),n=a(e[1]);e[2]=fu(e[2],1)^r+n+i[4*t+10]&lu,e[3]=fu(e[3]^r+2*n+i[4*t+11]&lu,31),r=s(e[2]),n=a(e[3]),e[0]=fu(e[0],1)^r+n+i[4*t+8]&lu,e[1]=fu(e[1]^r+2*n+i[4*t+9]&lu,31)}return{name:"twofish",blocksize:16,open:function(e){let r,s,a,o,c;t=e;const h=[],u=[],l=[];let f;const y=[];let d,p,g;const m=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],A=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],v=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],E=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],k=[[],[]],S=[[],[],[],[]];function I(t){return t^t>>2^[0,90,180,238][3&t]}function C(t){return t^t>>1^t>>2^[0,238,180,90][3&t]}function B(t,e){let r,i,n;for(r=0;r<8;r++)i=e>>>24,e=e<<8&lu|t>>>24,t=t<<8&lu,n=i<<1,128&i&&(n^=333),e^=i^n<<16,n^=i>>>1,1&i&&(n^=166),e^=n<<24|n<<8;return e}function K(t,e){const r=e>>4,i=15&e,n=m[t][r^i],s=w[t][v[i]^E[r]];return b[t][v[s]^E[n]]<<4|A[t][n^s]}function P(t,e){let r=pu(t,0),i=pu(t,1),n=pu(t,2),s=pu(t,3);switch(f){case 4:r=k[1][r]^pu(e[3],0),i=k[0][i]^pu(e[3],1),n=k[0][n]^pu(e[3],2),s=k[1][s]^pu(e[3],3);case 3:r=k[1][r]^pu(e[2],0),i=k[1][i]^pu(e[2],1),n=k[0][n]^pu(e[2],2),s=k[0][s]^pu(e[2],3);case 2:r=k[0][k[0][r]^pu(e[1],0)]^pu(e[0],0),i=k[0][k[1][i]^pu(e[1],1)]^pu(e[0],1),n=k[1][k[0][n]^pu(e[1],2)]^pu(e[0],2),s=k[1][k[1][s]^pu(e[1],3)]^pu(e[0],3)}return S[0][r]^S[1][i]^S[2][n]^S[3][s]}for(t=t.slice(0,32),r=t.length;16!==r&&24!==r&&32!==r;)t[r++]=0;for(r=0;r<t.length;r+=4)l[r>>2]=yu(t,r);for(r=0;r<256;r++)k[0][r]=K(0,r),k[1][r]=K(1,r);for(r=0;r<256;r++)d=k[1][r],p=I(d),g=C(d),S[0][r]=d+(p<<8)+(g<<16)+(g<<24),S[2][r]=p+(g<<8)+(d<<16)+(g<<24),d=k[0][r],p=I(d),g=C(d),S[1][r]=g+(g<<8)+(p<<16)+(d<<24),S[3][r]=p+(d<<8)+(g<<16)+(p<<24);for(f=l.length/2,r=0;r<f;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,y[f-r-1]=B(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=P(s,h),a=fu(P(a,u),8),i[r]=s+a&lu,i[r+1]=fu(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,f){case 4:s=k[1][s]^pu(y[3],0),a=k[0][a]^pu(y[3],1),o=k[0][o]^pu(y[3],2),c=k[1][c]^pu(y[3],3);case 3:s=k[1][s]^pu(y[2],0),a=k[1][a]^pu(y[2],1),o=k[0][o]^pu(y[2],2),c=k[0][c]^pu(y[2],3);case 2:n[0][r]=S[0][k[0][k[0][s]^pu(y[1],0)]^pu(y[0],0)],n[1][r]=S[1][k[0][k[1][a]^pu(y[1],1)]^pu(y[0],1)],n[2][r]=S[2][k[1][k[0][o]^pu(y[1],2)]^pu(y[0],2)],n[3][r]=S[3][k[1][k[1][c]^pu(y[1],3)]^pu(y[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(t,n){e=t,r=n;const s=[yu(e,r)^i[0],yu(e,r+4)^i[1],yu(e,r+8)^i[2],yu(e,r+12)^i[3]];for(let t=0;t<8;t++)o(t,s);return du(e,r,s[2]^i[4]),du(e,r+4,s[3]^i[5]),du(e,r+8,s[0]^i[6]),du(e,r+12,s[1]^i[7]),r+=16,e},decrypt:function(t,n){e=t,r=n;const s=[yu(e,r)^i[4],yu(e,r+4)^i[5],yu(e,r+8)^i[6],yu(e,r+12)^i[7]];for(let t=7;t>=0;t--)c(t,s);du(e,r,s[2]^i[0]),du(e,r+4,s[3]^i[1]),du(e,r+8,s[0]^i[2]),du(e,r+12,s[1]^i[3]),r+=16},finalize:function(){return e}}}(),this.tf.open(Array.from(t),0),this.encrypt=function(t){return this.tf.encrypt(Array.from(t),0)}}function mu(){}function wu(t){this.bf=new mu,this.bf.init(t),this.encrypt=function(t){return this.bf.encryptBlock(t)}}gu.keySize=gu.prototype.keySize=32,gu.blockSize=gu.prototype.blockSize=16,mu.prototype.BLOCKSIZE=8,mu.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],mu.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],mu.prototype.NN=16,mu.prototype._clean=function(t){if(t<0){t=(2147483647&t)+2147483648}return t},mu.prototype._F=function(t){let e;const r=255&t,i=255&(t>>>=8),n=255&(t>>>=8),s=255&(t>>>=8);return e=this.sboxes[0][s]+this.sboxes[1][n],e^=this.sboxes[2][i],e+=this.sboxes[3][r],e},mu.prototype._encryptBlock=function(t){let e,r=t[0],i=t[1];for(e=0;e<this.NN;++e){r^=this.parray[e],i=this._F(r)^i;const t=r;r=i,i=t}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],t[0]=this._clean(i),t[1]=this._clean(r)},mu.prototype.encryptBlock=function(t){let e;const r=[0,0],i=this.BLOCKSIZE/2;for(e=0;e<this.BLOCKSIZE/2;++e)r[0]=r[0]<<8|255&t[e+0],r[1]=r[1]<<8|255&t[e+i];this._encryptBlock(r);const n=[];for(e=0;e<this.BLOCKSIZE/2;++e)n[e+0]=r[0]>>>24-8*e&255,n[e+i]=r[1]>>>24-8*e&255;return n},mu.prototype._decryptBlock=function(t){let e,r=t[0],i=t[1];for(e=this.NN+1;e>1;--e){r^=this.parray[e],i=this._F(r)^i;const t=r;r=i,i=t}r^=this.parray[1],i^=this.parray[0],t[0]=this._clean(i),t[1]=this._clean(r)},mu.prototype.init=function(t){let e,r=0;for(this.parray=[],e=0;e<this.NN+2;++e){let i=0;for(let e=0;e<4;++e)i=i<<8|255&t[r],++r>=t.length&&(r=0);this.parray[e]=this.PARRAY[e]^i}for(this.sboxes=[],e=0;e<4;++e)for(this.sboxes[e]=[],r=0;r<256;++r)this.sboxes[e][r]=this.SBOXES[e][r];const i=[0,0];for(e=0;e<this.NN+2;e+=2)this._encryptBlock(i),this.parray[e+0]=i[0],this.parray[e+1]=i[1];for(e=0;e<4;++e)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[e][r+0]=i[0],this.sboxes[e][r+1]=i[1]},wu.keySize=wu.prototype.keySize=16,wu.blockSize=wu.prototype.blockSize=8;const Au=new Map([[T.symmetric.tripledes,cu],[T.symmetric.cast5,uu],[T.symmetric.blowfish,wu],[T.symmetric.twofish,gu]]);var bu=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Au});const vu=(t,e)=>t<<e|t>>>32-e>>>0,Eu=(t,e,r)=>t&e^t&r^e&r,ku=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),Su=/* @__PURE__ */new Uint32Array(80);class Iu extends vc{constructor(){super(64,20,8,!1),this.A=0|ku[0],this.B=0|ku[1],this.C=0|ku[2],this.D=0|ku[3],this.E=0|ku[4]}get(){const{A:t,B:e,C:r,D:i,E:n}=this;return[t,e,r,i,n]}set(t,e,r,i,n){this.A=0|t,this.B=0|e,this.C=0|r,this.D=0|i,this.E=0|n}process(t,e){for(let r=0;r<16;r++,e+=4)Su[r]=t.getUint32(e,!1);for(let t=16;t<80;t++)Su[t]=vu(Su[t-3]^Su[t-8]^Su[t-14]^Su[t-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let t=0;t<80;t++){let e,c;t<20?(e=(o=i)&n^~o&s,c=1518500249):t<40?(e=i^n^s,c=1859775393):t<60?(e=Eu(i,n,s),c=2400959708):(e=i^n^s,c=3395469782);const h=vu(r,5)+e+a+c+Su[t]|0;a=s,s=n,n=vu(i,30),i=r,r=h}var o;r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){Su.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Cu=/* @__PURE__ */mo((()=>new Iu)),Bu=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Ku=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((t,e)=>e))),Pu=/* @__PURE__ */Ku.map((t=>(9*t+5)%16));let Du=[Ku],Uu=[Pu];for(let t=0;t<4;t++)for(let e of[Du,Uu])e.push(e[t].map((t=>Bu[t])));const Mu=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((t=>new Uint8Array(t))),xu=/* @__PURE__ */Du.map(((t,e)=>t.map((t=>Mu[e][t])))),Qu=/* @__PURE__ */Uu.map(((t,e)=>t.map((t=>Mu[e][t])))),Ru=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),_u=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]),Tu=(t,e)=>t<<e|t>>>32-e;function Lu(t,e,r,i){return 0===t?e^r^i:1===t?e&r|~e&i:2===t?(e|~r)^i:3===t?e&i|r&~i:e^(r|~i)}const Nu=/* @__PURE__ */new Uint32Array(16);class Ou extends vc{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:t,h1:e,h2:r,h3:i,h4:n}=this;return[t,e,r,i,n]}set(t,e,r,i,n){this.h0=0|t,this.h1=0|e,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(t,e){for(let r=0;r<16;r++,e+=4)Nu[r]=t.getUint32(e,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let t=0;t<5;t++){const e=4-t,f=Ru[t],y=_u[t],d=Du[t],p=Uu[t],g=xu[t],m=Qu[t];for(let e=0;e<16;e++){const i=Tu(r+Lu(t,n,a,c)+Nu[d[e]]+f,g[e])+u|0;r=u,u=c,c=0|Tu(a,10),a=n,n=i}for(let t=0;t<16;t++){const r=Tu(i+Lu(e,s,o,h)+Nu[p[t]]+y,m[t])+l|0;i=l,l=h,h=0|Tu(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){Nu.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const Fu=new Map(Object.entries({sha1:Cu,sha224:Pc,sha256:Kc,sha384:Zc,sha512:Vc,sha3_256:vh,sha3_512:Eh,ripemd160:/* @__PURE__ */mo((()=>new Ou))}));var Hu=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Fu});function zu(t,e,r,i){t[e]+=r[i],t[e+1]+=r[i+1]+(t[e]<r[i])}function Gu(t,e){t[0]+=e,t[1]+=t[0]<e}function qu(t,e,r,i,n,s,a,o){zu(t,r,t,i),zu(t,r,e,a);let c=t[s]^t[r],h=t[s+1]^t[r+1];t[s]=h,t[s+1]=c,zu(t,n,t,s),c=t[i]^t[n],h=t[i+1]^t[n+1],t[i]=c>>>24^h<<8,t[i+1]=h>>>24^c<<8,zu(t,r,t,i),zu(t,r,e,o),c=t[s]^t[r],h=t[s+1]^t[r+1],t[s]=c>>>16^h<<16,t[s+1]=h>>>16^c<<16,zu(t,n,t,s),c=t[i]^t[n],h=t[i+1]^t[n+1],t[i]=h>>>31^c<<1,t[i+1]=c>>>31^h<<1}const ju=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),Vu=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((t=>2*t)));function Zu(t,e){const r=new Uint32Array(32),i=new Uint32Array(t.b.buffer,t.b.byteOffset,32);for(let e=0;e<16;e++)r[e]=t.h[e],r[e+16]=ju[e];r[24]^=t.t0[0],r[25]^=t.t0[1];const n=e?4294967295:0;r[28]^=n,r[29]^=n;for(let t=0;t<12;t++){const e=t<<4;qu(r,i,0,8,16,24,Vu[e+0],Vu[e+1]),qu(r,i,2,10,18,26,Vu[e+2],Vu[e+3]),qu(r,i,4,12,20,28,Vu[e+4],Vu[e+5]),qu(r,i,6,14,22,30,Vu[e+6],Vu[e+7]),qu(r,i,0,10,20,30,Vu[e+8],Vu[e+9]),qu(r,i,2,12,22,24,Vu[e+10],Vu[e+11]),qu(r,i,4,14,16,26,Vu[e+12],Vu[e+13]),qu(r,i,6,8,18,28,Vu[e+14],Vu[e+15])}for(let e=0;e<16;e++)t.h[e]^=r[e]^r[e+16]}class Ju{constructor(t,e,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(el),h:new Uint32Array(Wu/4),t0:new Uint32Array(2),c:0,outlen:t},n[0]=t,e&&(n[1]=e.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let t=0;t<16;t++)this.S.h[t]=ju[t]^s[t];if(e){const t=new Uint8Array(el);t.set(e),this.update(t)}}update(t){if(!(t instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let e=0;for(;e<t.length;){this.S.c===el&&(Gu(this.S.t0,this.S.c),Zu(this.S,!1),this.S.c=0);let r=el-this.S.c;this.S.b.set(t.subarray(e,e+r),this.S.c);const i=Math.min(r,t.length-e);this.S.c+=i,e+=i}return this}digest(t){Gu(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=el,Zu(this.S,!0);const e=t||new Uint8Array(this.S.outlen);for(let t=0;t<this.S.outlen;t++)e[t]=this.S.h[t>>2]>>8*(3&t);return this.S.h=null,e.buffer}}function Yu(t,e,r,i){if(t>Wu)throw Error(`outlen must be at most ${Wu} (given: ${t})`);if(e){if(!(e instanceof Uint8Array))throw Error("key must be Uint8Array or Buffer");if(e.length>$u)throw Error(`key size must be at most ${$u} (given: ${e.length})`)}if(r){if(!(r instanceof Uint8Array))throw Error("salt must be Uint8Array or Buffer");if(r.length!==Xu)throw Error(`salt must be exactly ${Xu} (given: ${r.length}`)}if(i){if(!(i instanceof Uint8Array))throw Error("personal must be Uint8Array or Buffer");if(i.length!==tl)throw Error(`salt must be exactly ${tl} (given: ${i.length}`)}return new Ju(t,e,r,i)}const Wu=64,$u=64,Xu=16,tl=16,el=128,rl=2,il=19,nl=4294967295,sl=4,al=4294967295,ol=8,cl=4294967295,hl=8,ul=4294967295,ll=4294967295,fl=32,yl=1024,dl=64,pl=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function gl(t,e,r){return t[r+0]=e,t[r+1]=e>>8,t[r+2]=e>>16,t[r+3]=e>>24,t}function ml(t,e,r){if(e>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=e;for(let e=r;e<r+7;e++)t[e]=i,i=(i-t[e])/256;return t}function wl(t,e,r){const i=new Uint8Array(64),n=new Uint8Array(4+e.length);if(gl(n,t,0),n.set(e,4),t<=64)return Yu(t).update(n).digest(r),r;const s=Math.ceil(t/32)-2;for(let t=0;t<s;t++)Yu(64).update(0===t?n:i).digest(i),r.set(i.subarray(0,32),32*t);const a=new Uint8Array(Yu(t-32*s).update(i).digest());return r.set(a,32*s),r}function Al(t,e,r,i){return t.fn.XOR(e.byteOffset,r.byteOffset,i.byteOffset),e}function bl(t,e,r,i){return t.fn.G(e.byteOffset,r.byteOffset,i.byteOffset,t.refs.gZ.byteOffset),i}function vl(t,e,r,i){return t.fn.G2(e.byteOffset,r.byteOffset,i.byteOffset,t.refs.gZ.byteOffset),i}function*El(t,e,r,i,n,s,a,o){t.refs.prngTmp.fill(0);const c=t.refs.prngTmp.subarray(0,48);ml(c,e,0),ml(c,r,8),ml(c,i,16),ml(c,n,24),ml(c,s,32),ml(c,rl,40);for(let e=1;e<=a;e++){ml(t.refs.prngTmp,e,c.length);const r=vl(t,t.refs.ZERO1024,t.refs.prngTmp,t.refs.prngR);for(let t=1===e?8*o:0;t<r.length;t+=8)yield r.subarray(t,t+8)}return[]}const kl=1024,Sl=64*kl;function Il(t,{memory:e,instance:r}){if(!pl)throw Error("BigEndian system not supported");const i=function({type:t,version:e,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(t,e,r,i)=>{if(e<r||e>i)throw Error(`${t} size should be between ${r} and ${i} bytes`)};if(t!==rl||e!==il)throw Error("Unsupported type or version");return u("password",i,hl,cl),u("salt",n,ol,al),u("tag",r,sl,nl),u("memory",c,8*o,ul),s&&u("associated data",s,0,ll),a&&u("secret",a,0,fl),{type:t,version:e,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:rl,version:il,...t}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*yl+10*kl;if(e.buffer.byteLength<l){const t=Math.ceil((l-e.buffer.byteLength)/Sl);e.grow(t)}let f=0;c.gZ=new Uint8Array(e.buffer,f,yl),f+=c.gZ.length,c.prngR=new Uint8Array(e.buffer,f,yl),f+=c.prngR.length,c.prngTmp=new Uint8Array(e.buffer,f,yl),f+=c.prngTmp.length,c.ZERO1024=new Uint8Array(e.buffer,f,1024),f+=c.ZERO1024.length;const y=new Uint32Array(e.buffer,f,2);f+=y.length*Uint32Array.BYTES_PER_ELEMENT;const d={fn:h,refs:c},p=new Uint8Array(e.buffer,f,yl);f+=p.length;const g=new Uint8Array(e.buffer,f,i.memorySize*yl),m=new Uint8Array(e.buffer,0,f),w=function(t){const e=Yu(dl),r=new Uint8Array(4),i=new Uint8Array(24);gl(i,t.lanes,0),gl(i,t.tagLength,4),gl(i,t.memorySize,8),gl(i,t.passes,12),gl(i,t.version,16),gl(i,t.type,20);const n=[i];t.password?(n.push(gl(new Uint8Array(4),t.password.length,0)),n.push(t.password)):n.push(r);t.salt?(n.push(gl(new Uint8Array(4),t.salt.length,0)),n.push(t.salt)):n.push(r);t.secret?(n.push(gl(new Uint8Array(4),t.secret.length,0)),n.push(t.secret)):n.push(r);t.ad?(n.push(gl(new Uint8Array(4),t.ad.length,0)),n.push(t.ad)):n.push(r);e.update(function(t){if(1===t.length)return t[0];let e=0;for(let r=0;r<t.length;r++){if(!(t[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");e+=t[r].length}const r=new Uint8Array(e);let i=0;return t.forEach((t=>{r.set(t,i),i+=t.length})),r}(n));const s=e.digest();return new Uint8Array(s)}(i),A=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(A))),v=(t,e)=>(b[t][e]=g.subarray(t*A*1024+1024*e,t*A*1024+1024*e+yl),b[t][e]);for(let t=0;t<i.lanes;t++){const e=new Uint8Array(w.length+8);e.set(w),gl(e,0,w.length),gl(e,t,w.length+4),wl(yl,e,v(t,0)),gl(e,1,w.length),wl(yl,e,v(t,1))}const E=A/4;for(let t=0;t<i.passes;t++)for(let e=0;e<4;e++){const r=0===t&&e<=1;for(let n=0;n<i.lanes;n++){let s=0===e&&0===t?2:0;const a=r?El(d,t,n,e,u,i.passes,E,s):null;for(;s<E;s++){const c=e*E+s,h=c>0?b[n][c-1]:b[n][A-1],u=r?a.next().value:h;o(y.byteOffset,u.byteOffset,n,i.lanes,t,e,s,4,E);const l=y[0],f=y[1];0===t&&v(n,c),bl(d,h,b[l][f],t>0?p:b[n][c]),t>0&&Al(d,b[n][c],p,b[n][c])}}}const k=b[0][A-1];for(let t=1;t<i.lanes;t++)Al(d,k,k,b[t][A-1]);const S=wl(i.tagLength,k,new Uint8Array(i.tagLength));return m.fill(0),e.grow(0),S}let Cl;async function Bl(t,e){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(t,e,r){const i={env:{memory:t}};if(void 0===Cl)try{const t=await e(i);return Cl=!0,t}catch(t){Cl=!1}return(Cl?e:r)(i)}(r,t,e);return t=>Il(t,{instance:i.instance,memory:r})}function Kl(t,e,r,i){function n(t,e,r){var i=r?WebAssembly.instantiateStreaming:WebAssembly.instantiate,n=r?WebAssembly.compileStreaming:WebAssembly.compile;return e?i(t,e):n(t)}var s;if(e){var a=require("fs"),o=require("path");return new Promise(((t,r)=>{a.readFile(o.resolve(__dirname,e),((e,s)=>{null!=e?r(e):t(n(s,i,!1))}))}))}if(s=Buffer.from(r,"base64"),t){var c=new WebAssembly.Module(s);return i?new WebAssembly.Instance(c,i):c}return n(s,i,!1)}var Pl=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Bl((t=>Kl(0,null,"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",t)),(t=>Kl(0,null,"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",t)))});exports.AEADEncryptedDataPacket=Zs,exports.Argon2OutOfMemoryError=sn,exports.Argon2S2K=hn,exports.CleartextMessage=Fa,exports.CompressedDataPacket=Ls,exports.KDFParams=qi,exports.LiteralDataPacket=Cs,exports.MarkerPacket=class{static get tag(){return T.packet.marker}read(t){return 80===t[0]&&71===t[1]&&80===t[2]}write(){return new Uint8Array([80,71,80])}},exports.Message=Ta,exports.OnePassSignaturePacket=Qs,exports.PacketList=_s,exports.PaddingPacket=class{static get tag(){return T.packet.padding}constructor(){this.padding=null}read(t){}write(){return this.padding}async createPadding(t){this.padding=await nn.random.getRandomBytes(t)}},exports.PrivateKey=Da,exports.PublicKey=Pa,exports.PublicKeyEncryptedSessionKeyPacket=Js,exports.PublicKeyPacket=$s,exports.PublicSubkeyPacket=ea,exports.SecretKeyPacket=ia,exports.SecretSubkeyPacket=aa,exports.Signature=ca,exports.SignaturePacket=Us,exports.Subkey=Sa,exports.SymEncryptedIntegrityProtectedDataPacket=qs,exports.SymEncryptedSessionKeyPacket=Ws,exports.SymmetricallyEncryptedDataPacket=ta,exports.TrustPacket=class{static get tag(){return T.packet.trust}read(){throw new zr("Trust packets are not supported")}write(){throw new zr("Trust packets are not supported")}},exports.UnparseablePacket=qr,exports.UserAttributePacket=ra,exports.UserIDPacket=sa,exports.armor=rt,exports.config=L,exports.createCleartextMessage=async function({text:t,...e}){if(!t)throw Error("createCleartextMessage: must pass options object containing `text`");if(!O.isString(t))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(e);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new Fa(t)},exports.createMessage=async function({text:t,binary:e,filename:r,date:i=new Date,format:n=(void 0!==t?"utf8":"binary"),...s}){const a=void 0!==t?t:e;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(t&&!O.isString(t)&&!O.isStream(t))throw Error("createMessage: options.text must be a string or stream");if(e&&!O.isUint8Array(e)&&!O.isStream(e))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=O.isStream(a),h=new Cs(i);void 0!==t?h.setText(a,T.write(T.literal,n)):h.setBytes(a,T.write(T.literal,n)),void 0!==r&&h.setFilename(r);const u=new _s;u.push(h);const l=new Ta(u);return l.fromStream=c,l},exports.decrypt=async function({message:t,decryptionKeys:e,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(ja(h={...L,...h}),Ha(t),n=Va(n),e=Va(e),r=Va(r),i=Va(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await t.decrypt(e,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),Ja(l,t),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=b([l.data,x((async()=>{await O.anyPromise(l.signatures.map((t=>t.verified)))}))])}return l.data=await Za(l.data),l}catch(t){throw O.wrapError("Error decrypting message",t)}},exports.decryptKey=async function({privateKey:t,passphrase:e,config:r,...i}){ja(r={...L,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!t.isPrivate())throw Error("Cannot decrypt a public key");const s=t.clone(!0),a=O.isArray(e)?e:[e];try{return await Promise.all(s.getKeys().map((t=>O.anyPromise(a.map((e=>t.keyPacket.decrypt(e))))))),await s.validate(r),s}catch(t){throw s.clearPrivateParams(),O.wrapError("Error decrypting private key",t)}},exports.decryptSessionKeys=async function({message:t,decryptionKeys:e,passwords:r,date:i=new Date,config:n,...s}){if(ja(n={...L,...n}),Ha(t),e=Va(e),r=Va(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await t.decryptSessionKeys(e,r,void 0,i,n)}catch(t){throw O.wrapError("Error decrypting session keys",t)}},exports.encrypt=async function({message:t,encryptionKeys:e,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:f=[],signatureNotations:y=[],config:d,...p}){if(ja(d={...L,...d}),Ha(t),Ga(s),e=Va(e),r=Va(r),i=Va(i),c=Va(c),h=Va(h),l=Va(l),f=Va(f),y=Va(y),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const g=Object.keys(p);if(g.length>0)throw Error("Unknown option: "+g.join(", "));r||(r=[]);try{if((r.length||a)&&(t=await t.sign(r,a,c,u,l,y,d)),t=t.compress(await async function(t=[],e=new Date,r=[],i=L){const n=T.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(t.map((async function(t,n){const a=(await t.getPrimarySelfSignature(e,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(e,u,f,d),d),t=await t.encrypt(e,i,n,o,h,u,f,d),"object"===s)return t;return Za("armored"===s?t.armor(d):t.write())}catch(t){throw O.wrapError("Error encrypting message",t)}},exports.encryptKey=async function({privateKey:t,passphrase:e,config:r,...i}){ja(r={...L,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!t.isPrivate())throw Error("Cannot encrypt a public key");const s=t.clone(!0),a=s.getKeys(),o=O.isArray(e)?e:Array(a.length).fill(e);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(t,e)=>{const{keyPacket:i}=t;await i.encrypt(o[e],r),i.clearPrivateParams()}))),s}catch(t){throw s.clearPrivateParams(),O.wrapError("Error encrypting private key",t)}},exports.encryptSessionKey=async function({data:t,algorithm:e,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(ja(u={...L,...u}),function(t,e){if(!O.isUint8Array(t))throw Error("Parameter ["+(e||"data")+"] must be of type Uint8Array")}(t),function(t,e){if(!O.isString(t))throw Error("Parameter ["+(e||"data")+"] must be of type String")}(e,"algorithm"),Ga(s),i=Va(i),n=Va(n),o=Va(o),h=Va(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const f=Object.keys(l);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return Ya(await Ta.encryptSessionKey(t,e,r,i,n,a,o,c,h,u),s,u)}catch(t){throw O.wrapError("Error encrypting session key",t)}},exports.enums=T,exports.generateKey=async function({userIDs:t=[],passphrase:e,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...f}){ja(l={...L,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),t=Va(t);const y=Object.keys(f);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(0===t.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const d={userIDs:t,passphrase:e,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:t,revocationCertificate:e}=await async function(t,e){t.sign=!0,(t=wa(t)).subkeys=t.subkeys.map(((e,r)=>wa(t.subkeys[r],t)));let r=[ua(t,e)];r=r.concat(t.subkeys.map((t=>ha(t,e))));const i=await Promise.all(r),n=await xa(i[0],i.slice(1),t,e),s=await n.getRevocationCertificate(t.date,e);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(d,l);return t.getKeys().forEach((({keyPacket:t})=>Ea(t,l))),{privateKey:Ya(t,u,l),publicKey:"symmetric"!==r?Ya(t.toPublic(),u,l):null,revocationCertificate:e}}catch(t){throw O.wrapError("Error generating keypair",t)}},exports.generateSessionKey=async function({encryptionKeys:t,date:e=new Date,encryptionUserIDs:r=[],config:i,...n}){if(ja(i={...L,...i}),t=Va(t),r=Va(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Ta.generateSessionKey(t,e,r,i)}catch(t){throw O.wrapError("Error generating session key",t)}},exports.readCleartextMessage=async function({cleartextMessage:t,config:e,...r}){if(e={...L,...e},!t)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!O.isString(t))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await et(t);if(n.type!==T.armor.signed)throw Error("No cleartext signed message.");const s=await _s.fromBinary(n.data,Oa,e);!function(t,e){const r=function(t){const r=t=>e=>t.hashAlgorithm===e;for(let i=0;i<e.length;i++)if(e[i].constructor.tag===T.packet.signature&&!t.some(r(e[i])))return!1;return!0},i=[];if(t.forEach((t=>{const e=t.match(/^Hash: (.+)$/);if(!e)throw Error('Only "Hash" header allowed in cleartext signed message');{const t=e[1].replace(/\s/g,"").split(",").map((t=>{try{return T.write(T.hash,t.toLowerCase())}catch(e){throw Error("Unknown hash algorithm in armor header: "+t.toLowerCase())}}));i.push(...t)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new ca(s);return new Fa(n.text,a)},exports.readKey=async function({armoredKey:t,binaryKey:e,config:r,...i}){if(r={...L,...r},!t&&!e)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(t&&!O.isString(t))throw Error("readKey: options.armoredKey must be a string");if(e&&!O.isUint8Array(e))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(t){const{type:e,data:r}=await et(t);if(e!==T.armor.publicKey&&e!==T.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=e;return Ma(await _s.fromBinary(s,Ua,r))},exports.readKeys=async function({armoredKeys:t,binaryKeys:e,config:r,...i}){r={...L,...r};let n=t||e;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(t&&!O.isString(t))throw Error("readKeys: options.armoredKeys must be a string");if(e&&!O.isUint8Array(e))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(t){const{type:e,data:r}=await et(t);if(e!==T.armor.publicKey&&e!==T.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await _s.fromBinary(n,Ua,r),c=o.indexOfTag(T.packet.publicKey,T.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let t=0;t<c.length;t++){const e=Ma(o.slice(c[t],c[t+1]));a.push(e)}return a},exports.readMessage=async function({armoredMessage:t,binaryMessage:e,config:r,...i}){r={...L,...r};let n=t||e;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(t&&!O.isString(t)&&!O.isStream(t))throw Error("readMessage: options.armoredMessage must be a string or stream");if(e&&!O.isUint8Array(e)&&!O.isStream(e))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=O.isStream(n);if(t){const{type:t,data:e}=await et(n);if(t!==T.armor.message)throw Error("Armored text not of type message");n=e}const o=await _s.fromBinary(n,Qa,r),c=new Ta(o);return c.fromStream=a,c},exports.readPrivateKey=async function({armoredKey:t,binaryKey:e,config:r,...i}){if(r={...L,...r},!t&&!e)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(t&&!O.isString(t))throw Error("readPrivateKey: options.armoredKey must be a string");if(e&&!O.isUint8Array(e))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(t){const{type:e,data:r}=await et(t);if(e!==T.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=e;const a=await _s.fromBinary(s,Ua,r);return new Da(a)},exports.readPrivateKeys=async function({armoredKeys:t,binaryKeys:e,config:r}){r={...L,...r};let i=t||e;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(t&&!O.isString(t))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(e&&!O.isUint8Array(e))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(t){const{type:e,data:r}=await et(t);if(e!==T.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await _s.fromBinary(i,Ua,r),a=s.indexOfTag(T.packet.secretKey);if(0===a.length)throw Error("No secret key packet found");for(let t=0;t<a.length;t++){const e=s.slice(a[t],a[t+1]),r=new Da(e);n.push(r)}return n},exports.readSignature=async function({armoredSignature:t,binarySignature:e,config:r,...i}){r={...L,...r};let n=t||e;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(t&&!O.isString(t))throw Error("readSignature: options.armoredSignature must be a string");if(e&&!O.isUint8Array(e))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(t){const{type:t,data:e}=await et(n);if(t!==T.armor.signature)throw Error("Armored text not of type signature");n=e}const a=await _s.fromBinary(n,oa,r);return new ca(a)},exports.reformatKey=async function({privateKey:t,userIDs:e=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){ja(a={...L,...a}),e=Va(e);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===e.length&&6!==t.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:t,userIDs:e,passphrase:r,keyExpirationTime:i,date:n};try{const{key:t,revocationCertificate:e}=await async function(t,e){t=o(t);const{privateKey:r}=t;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:t})=>t.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;t.subkeys||(t.subkeys=await Promise.all(r.subkeys.map((async t=>{const r=t.keyPacket,n={key:i,bind:r},s=await la(t.bindingSignatures,i,T.signature.subkeyBinding,n,null,e).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&T.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&T.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((t=>t.keyPacket));if(t.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");t.subkeys=t.subkeys.map((e=>o(e,t)));const s=await xa(i,n,t,e),a=await s.getRevocationCertificate(t.date,e);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(t,e={}){return t.keyExpirationTime=t.keyExpirationTime||e.keyExpirationTime,t.passphrase=O.isString(t.passphrase)?t.passphrase:e.passphrase,t.date=t.date||e.date,t}}(h,a);return{privateKey:Ya(t,s,a),publicKey:Ya(t.toPublic(),s,a),revocationCertificate:e}}catch(t){throw O.wrapError("Error reformatting keypair",t)}},exports.revokeKey=async function({key:t,revocationCertificate:e,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){ja(s={...L,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=e?await t.applyRevocationCertificate(e,i,s):await t.revoke(r,i,s);return a.isPrivate()?{privateKey:Ya(a,n,s),publicKey:Ya(a.toPublic(),n,s)}:{privateKey:null,publicKey:Ya(a,n,s)}}catch(t){throw O.wrapError("Error revoking key",t)}},exports.sign=async function({message:t,signingKeys:e,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(ja(c={...L,...c}),za(t),Ga(r),e=Va(e),n=Va(n),a=Va(a),o=Va(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(t instanceof Fa&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(t instanceof Fa&&i)throw Error("Cannot detach-sign a cleartext message");if(!e||0===e.length)throw Error("No signing keys provided");try{let h;if(h=i?await t.signDetached(e,void 0,n,s,a,o,c):await t.sign(e,void 0,n,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),i&&(h=I(t.packets.write(),(async(t,e)=>{await Promise.all([v(h,e),U(t).catch((()=>{}))])}))),Za(h)}catch(t){throw O.wrapError("Error signing message",t)}},exports.unarmor=et,exports.verify=async function({message:t,verificationKeys:e,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(ja(a={...L,...a}),za(t),e=Va(e),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(t instanceof Fa&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(t instanceof Fa&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await t.verifyDetached(n,e,s,a):await t.verify(e,s,a),o.data="binary"===i?t.getLiteralData():t.getText(),t.fromStream&&Ja(o,t),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=b([o.data,x((async()=>{await O.anyPromise(o.signatures.map((t=>t.verified)))}))])}return o.data=await Za(o.data),o}catch(t){throw O.wrapError("Error verifying signed message",t)}};
 //# sourceMappingURL=openpgp.min.cjs.map