@protontech/openpgp 6.0.0-beta.0.patch.0 → 6.0.0-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (41) hide show
  1. package/dist/lightweight/argon2id.min.mjs +2 -2
  2. package/dist/lightweight/argon2id.min.mjs.map +1 -1
  3. package/dist/lightweight/argon2id.mjs +5 -28
  4. package/dist/lightweight/legacy_ciphers.min.mjs +2 -2
  5. package/dist/lightweight/legacy_ciphers.min.mjs.map +1 -1
  6. package/dist/lightweight/legacy_ciphers.mjs +6 -51
  7. package/dist/lightweight/noble_curves.min.mjs +11 -11
  8. package/dist/lightweight/noble_curves.min.mjs.map +1 -1
  9. package/dist/lightweight/noble_curves.mjs +477 -465
  10. package/dist/lightweight/noble_hashes.min.mjs +2 -2
  11. package/dist/lightweight/noble_hashes.min.mjs.map +1 -1
  12. package/dist/lightweight/noble_hashes.mjs +19 -31
  13. package/dist/lightweight/openpgp.min.mjs +2 -2
  14. package/dist/lightweight/openpgp.min.mjs.map +1 -1
  15. package/dist/lightweight/openpgp.mjs +591 -457
  16. package/dist/lightweight/sha3.min.mjs +3 -3
  17. package/dist/lightweight/sha3.min.mjs.map +1 -1
  18. package/dist/lightweight/sha3.mjs +80 -80
  19. package/dist/node/openpgp.cjs +1245 -5442
  20. package/dist/node/openpgp.min.cjs +11 -12
  21. package/dist/node/openpgp.min.cjs.map +1 -1
  22. package/dist/node/openpgp.min.mjs +11 -12
  23. package/dist/node/openpgp.min.mjs.map +1 -1
  24. package/dist/node/openpgp.mjs +1245 -5442
  25. package/dist/openpgp.js +1238 -5435
  26. package/dist/openpgp.min.js +11 -12
  27. package/dist/openpgp.min.js.map +1 -1
  28. package/dist/openpgp.min.mjs +11 -12
  29. package/dist/openpgp.min.mjs.map +1 -1
  30. package/dist/openpgp.mjs +1238 -5435
  31. package/openpgp.d.ts +61 -60
  32. package/package.json +16 -10
  33. package/dist/lightweight/bn.interface.min.mjs +0 -3
  34. package/dist/lightweight/bn.interface.min.mjs.map +0 -1
  35. package/dist/lightweight/bn.interface.mjs +0 -3807
  36. package/dist/lightweight/interface.min.mjs +0 -3
  37. package/dist/lightweight/interface.min.mjs.map +0 -1
  38. package/dist/lightweight/interface.mjs +0 -16
  39. package/dist/lightweight/native.interface.min.mjs +0 -3
  40. package/dist/lightweight/native.interface.min.mjs.map +0 -1
  41. package/dist/lightweight/native.interface.mjs +0 -456
@@ -1,15 +1,14 @@
1
- /*! OpenPGP.js v6.0.0-beta.0.patch.0 - 2024-04-19 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
2
- "use strict";const t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var e=require("module"),r=require("node:crypto"),i="undefined"!=typeof document?document.currentScript:null;function n(t){var e=Object.create(null);return t&&Object.keys(t).forEach((function(r){if("default"!==r){var i=Object.getOwnPropertyDescriptor(t,r);Object.defineProperty(e,r,i.get?i:{enumerable:!0,get:function(){return t[r]}})}})),e.default=t,Object.freeze(e)}var s=/*#__PURE__*/n(r);const a=Symbol("doneWritingPromise"),o=Symbol("doneWritingResolve"),c=Symbol("doneWritingReject"),h=Symbol("readingIndex");class ArrayStream extends Array{constructor(){super(),Object.setPrototypeOf(this,ArrayStream.prototype),this[a]=new Promise(((t,e)=>{this[o]=t,this[c]=e})),this[a].catch((()=>{}))}}function u(t){return t&&t.getReader&&Array.isArray(t)}function l(t){if(!u(t)){const e=t.getWriter(),r=e.releaseLock;return e.releaseLock=()=>{e.closed.catch((function(){})),r.call(e)},e}this.stream=t}function f(e){if(u(e))return"array";if(t.ReadableStream&&t.ReadableStream.prototype.isPrototypeOf(e))return"web";if(e&&!(t.ReadableStream&&e instanceof t.ReadableStream)&&"function"==typeof e._read&&"object"==typeof e._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!e||!e.getReader)&&"web-like"}function y(t){return Uint8Array.prototype.isPrototypeOf(t)}function d(t){if(1===t.length)return t[0];let e=0;for(let r=0;r<t.length;r++){if(!y(t[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");e+=t[r].length}const r=new Uint8Array(e);let i=0;return t.forEach((function(t){r.set(t,i),i+=t.length})),r}ArrayStream.prototype.getReader=function(){return void 0===this[h]&&(this[h]=0),{read:async()=>(await this[a],this[h]===this.length?{value:void 0,done:!0}:{value:this[this[h]++],done:!1})}},ArrayStream.prototype.readToEnd=async function(t){await this[a];const e=t(this.slice(this[h]));return this.length=0,e},ArrayStream.prototype.clone=function(){const t=new ArrayStream;return t[a]=this[a].then((()=>{t.push(...this)})),t},l.prototype.write=async function(t){this.stream.push(t)},l.prototype.close=async function(){this.stream[o]()},l.prototype.abort=async function(t){return this.stream[c](t),t},l.prototype.releaseLock=function(){},"object"==typeof t.process&&t.process.versions;const p=new WeakSet,g=Symbol("externalBuffer");function m(t){if(this.stream=t,t[g]&&(this[g]=t[g].slice()),u(t)){const e=t.getReader();return this._read=e.read.bind(e),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(f(t)){const e=t.getReader();return this._read=e.read.bind(e),this._releaseLock=()=>{e.closed.catch((function(){})),e.releaseLock()},void(this._cancel=e.cancel.bind(e))}let e=!1;this._read=async()=>e||p.has(t)?{value:void 0,done:!0}:(e=!0,{value:t,done:!1}),this._releaseLock=()=>{if(e)try{p.add(t)}catch(t){}}}function w(t){return f(t)?t:new ReadableStream({start(e){e.enqueue(t),e.close()}})}function A(t){if(f(t))return t;const e=new ArrayStream;return(async()=>{const r=R(e);await r.write(t),await r.close()})(),e}function b(t){return t.some((t=>f(t)&&!u(t)))?function(t){t=t.map(w);const e=k((async function(t){await Promise.all(i.map((e=>M(e,t))))}));let r=Promise.resolve();const i=t.map(((i,n)=>I(i,((i,s)=>(r=r.then((()=>v(i,e.writable,{preventClose:n!==t.length-1}))),r)))));return e.readable}(t):t.some((t=>u(t)))?function(t){const e=new ArrayStream;let r=Promise.resolve();return t.forEach(((i,n)=>(r=r.then((()=>v(i,e,{preventClose:n!==t.length-1}))),r))),e}(t):"string"==typeof t[0]?t.join(""):d(t)}async function v(t,e,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(f(t)&&!u(t)){t=w(t);try{if(t[g]){const r=R(e);for(let e=0;e<t[g].length;e++)await r.ready,await r.write(t[g][e]);r.releaseLock()}await t.pipeTo(e,{preventClose:r,preventAbort:i,preventCancel:n})}catch(t){}return}const s=Q(t=A(t)),a=R(e);try{for(;;){await a.ready;const{done:t,value:e}=await s.read();if(t){r||await a.close();break}await a.write(e)}}catch(t){i||await a.abort(t)}finally{s.releaseLock(),a.releaseLock()}}function E(t,e){const r=new TransformStream(e);return v(t,r.writable),r.readable}function k(t){let e,r,i=!1;return{readable:new ReadableStream({start(t){r=t},pull(){e?e():i=!0},cancel:t},{highWaterMark:0}),writable:new WritableStream({write:async function(t){r.enqueue(t),i?i=!1:(await new Promise((t=>{e=t})),e=null)},close:r.close.bind(r),abort:r.error.bind(r)})}}function S(t,e=(()=>{}),r=(()=>{})){if(u(t)){const i=new ArrayStream;return(async()=>{const n=R(i);try{const i=await U(t),s=e(i),a=r();let o;o=void 0!==s&&void 0!==a?b([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(t){await n.abort(t)}})(),i}if(f(t))return E(t,{async transform(t,r){try{const i=await e(t);void 0!==i&&r.enqueue(i)}catch(t){r.error(t)}},async flush(t){try{const e=await r();void 0!==e&&t.enqueue(e)}catch(e){t.error(e)}}});const i=e(t),n=r();return void 0!==i&&void 0!==n?b([i,n]):void 0!==i?i:n}function I(t,e){if(f(t)&&!u(t)){let r;const i=new TransformStream({start(t){r=t}}),n=v(t,i.writable),s=k((async function(t){r.error(t),await n,await new Promise(setTimeout)}));return e(i.readable,s.writable),s.readable}t=A(t);const r=new ArrayStream;return e(t,r),r}function C(t,e){let r;const i=I(t,((t,n)=>{const s=Q(t);s.remainder=()=>(s.releaseLock(),v(t,n),i),r=e(s)}));return r}function B(t){if(u(t))return t.clone();if(f(t)){const e=function(t){if(u(t))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(f(t)){const e=w(t).tee();return e[0][g]=e[1][g]=t[g],e}return[D(t),D(t)]}(t);return P(t,e[0]),e[1]}return D(t)}function K(t){return u(t)?B(t):f(t)?new ReadableStream({start(e){const r=I(t,(async(t,r)=>{const i=Q(t),n=R(r);try{for(;;){await n.ready;const{done:t,value:r}=await i.read();if(t){try{e.close()}catch(t){}return void await n.close()}try{e.enqueue(r)}catch(t){}await n.write(r)}}catch(t){e.error(t),await n.abort(t)}}));P(t,r)}}):D(t)}function P(t,e){Object.entries(Object.getOwnPropertyDescriptors(t.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(e):i.get=i.get.bind(e),Object.defineProperty(t,r,i))}))}function D(t,e=0,r=1/0){if(u(t))throw Error("Not implemented");if(f(t)){if(e>=0&&r>=0){let i=0;return E(t,{transform(t,n){i<r?(i+t.length>=e&&n.enqueue(D(t,Math.max(e-i,0),r-i)),i+=t.length):n.terminate()}})}if(e<0&&(r<0||r===1/0)){let i=[];return S(t,(t=>{t.length>=-e?i=[t]:i.push(t)}),(()=>D(b(i),e,r)))}if(0===e&&r<0){let i;return S(t,(t=>{const n=i?b([i,t]):t;if(n.length>=-r)return i=D(n,r),D(n,e,r);i=n}))}return console.warn(`stream.slice(input, ${e}, ${r}) not implemented efficiently.`),x((async()=>D(await U(t),e,r)))}return t[g]&&(t=b(t[g].concat([t]))),y(t)?t.subarray(e,r===1/0?t.length:r):t.slice(e,r)}async function U(t,e=b){return u(t)?t.readToEnd(e):f(t)?Q(t).readToEnd(e):t}async function M(t,e){if(f(t)){if(t.cancel){const r=await t.cancel(e);return await new Promise(setTimeout),r}if(t.destroy)return t.destroy(e),await new Promise(setTimeout),e}}function x(t){const e=new ArrayStream;return(async()=>{const r=R(e);try{await r.write(await t()),await r.close()}catch(t){await r.abort(t)}})(),e}function Q(t){return new m(t)}function R(t){return new l(t)}m.prototype.read=async function(){if(this[g]&&this[g].length){return{done:!1,value:this[g].shift()}}return this._read()},m.prototype.releaseLock=function(){this[g]&&(this.stream[g]=this[g]),this._releaseLock()},m.prototype.cancel=function(t){return this._cancel(t)},m.prototype.readLine=async function(){let t,e=[];for(;!t;){let{done:r,value:i}=await this.read();if(i+="",r)return e.length?b(e):void 0;const n=i.indexOf("\n")+1;n&&(t=b(e.concat(i.substr(0,n))),e=[]),n!==i.length&&e.push(i.substr(n))}return this.unshift(...e),t},m.prototype.readByte=async function(){const{done:t,value:e}=await this.read();if(t)return;const r=e[0];return this.unshift(D(e,1)),r},m.prototype.readBytes=async function(t){const e=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return e.length?b(e):void 0;if(e.push(n),r+=n.length,r>=t){const r=b(e);return this.unshift(D(r,t)),D(r,0,t)}}},m.prototype.peekBytes=async function(t){const e=await this.readBytes(t);return this.unshift(e),e},m.prototype.unshift=function(...t){this[g]||(this[g]=[]),1===t.length&&y(t[0])&&this[g].length&&t[0].length&&this[g][0].byteOffset>=t[0].length?this[g][0]=new Uint8Array(this[g][0].buffer,this[g][0].byteOffset-t[0].length,this[g][0].byteLength+t[0].length):this[g].unshift(...t.filter((t=>t&&t.length)))},m.prototype.readToEnd=async function(t=b){const e=[];for(;;){const{done:t,value:r}=await this.read();if(t)break;e.push(r)}return t(e)};const _=Symbol("byValue");var T={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(t,e){if("number"==typeof e&&(e=this.read(t,e)),void 0!==t[e])return t[e];throw Error("Invalid enum value.")},read:function(t,e){if(t[_]||(t[_]=[],Object.entries(t).forEach((([e,r])=>{t[_][r]=e}))),void 0!==t[_][e])return t[_][e];throw Error("Invalid enum value.")}},L={preferredHashAlgorithm:T.hash.sha256,preferredSymmetricAlgorithm:T.symmetric.aes256,preferredCompressionAlgorithm:T.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:T.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,s2kType:T.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([T.symmetric.aes128,T.symmetric.aes192,T.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.0.patch.0",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([T.hash.md5,T.hash.ripemd]),rejectMessageHashAlgorithms:new Set([T.hash.md5,T.hash.ripemd,T.hash.sha1]),rejectPublicKeyAlgorithms:new Set([T.publicKey.elgamal,T.publicKey.dsa]),rejectCurves:new Set([T.curve.secp256k1])};const N=(()=>{try{return"development"===process.env.NODE_ENV}catch(t){}return!1})(),O={isString:function(t){return"string"==typeof t||t instanceof String},nodeRequire:e.createRequire("undefined"==typeof document?require("url").pathToFileURL(__filename).href:i&&i.src||new URL("openpgp.min.cjs",document.baseURI).href),isArray:function(t){return t instanceof Array},isUint8Array:y,isStream:f,getBigInteger:async function(){if("undefined"!=typeof BigInt){const{default:t}=await Promise.resolve().then((function(){return Xa}));return t}{const{default:t}=await Promise.resolve().then((function(){return io}));return t}},getNobleCurve:async(t,e)=>{if(!L.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return su}));switch(t){case T.publicKey.ecdh:case T.publicKey.ecdsa:{const t=r.get(e);if(!t)throw Error("Unsupported curve");return t}case T.publicKey.x448:return r.get("x448");case T.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(t){let e=0;for(let r=0;r<t.length;r++)e+=256**r*t[t.length-1-r];return e},writeNumber:function(t,e){const r=new Uint8Array(e);for(let i=0;i<e;i++)r[i]=t>>8*(e-i-1)&255;return r},readDate:function(t){const e=O.readNumber(t);return new Date(1e3*e)},writeDate:function(t){const e=Math.floor(t.getTime()/1e3);return O.writeNumber(e,4)},normalizeDate:function(t=Date.now()){return null===t||t===1/0?t:new Date(1e3*Math.floor(+t/1e3))},readMPI:function(t){const e=(t[0]<<8|t[1])+7>>>3;return O.readExactSubarray(t,2,2+e)},readExactSubarray:function(t,e,r){if(t.length<r-e)throw Error("Input array too short");return t.subarray(e,r)},leftPad(t,e){const r=new Uint8Array(e),i=e-t.length;return r.set(t,i),r},uint8ArrayToMPI:function(t){const e=O.uint8ArrayBitLength(t);if(0===e)throw Error("Zero MPI");const r=t.subarray(t.length-Math.ceil(e/8)),i=new Uint8Array([(65280&e)>>8,255&e]);return O.concatUint8Array([i,r])},uint8ArrayBitLength:function(t){let e;for(e=0;e<t.length&&0===t[e];e++);if(e===t.length)return 0;const r=t.subarray(e);return 8*(r.length-1)+O.nbits(r[0])},hexToUint8Array:function(t){const e=new Uint8Array(t.length>>1);for(let r=0;r<t.length>>1;r++)e[r]=parseInt(t.substr(r<<1,2),16);return e},uint8ArrayToHex:function(t){const e="0123456789abcdef";let r="";return t.forEach((t=>{r+=e[t>>4]+e[15&t]})),r},stringToUint8Array:function(t){return S(t,(t=>{if(!O.isString(t))throw Error("stringToUint8Array: Data must be in the form of a string");const e=new Uint8Array(t.length);for(let r=0;r<t.length;r++)e[r]=t.charCodeAt(r);return e}))},uint8ArrayToString:function(t){const e=[],r=16384,i=(t=new Uint8Array(t)).length;for(let n=0;n<i;n+=r)e.push(String.fromCharCode.apply(String,t.subarray(n,n+r<i?n+r:i)));return e.join("")},encodeUTF8:function(t){const e=new TextEncoder("utf-8");function r(t,r=!1){return e.encode(t,{stream:!r})}return S(t,r,(()=>r("",!0)))},decodeUTF8:function(t){const e=new TextDecoder("utf-8");function r(t,r=!1){return e.decode(t,{stream:!r})}return S(t,r,(()=>r(new Uint8Array,!0)))},concat:b,concatUint8Array:d,equalsUint8Array:function(t,e){if(!O.isUint8Array(t)||!O.isUint8Array(e))throw Error("Data must be in the form of a Uint8Array");if(t.length!==e.length)return!1;for(let r=0;r<t.length;r++)if(t[r]!==e[r])return!1;return!0},writeChecksum:function(t){let e=0;for(let r=0;r<t.length;r++)e=e+t[r]&65535;return O.writeNumber(e,2)},printDebug:function(t){N&&console.log("[OpenPGP.js debug]",t)},printDebugError:function(t){N&&console.error("[OpenPGP.js debug]",t)},nbits:function(t){let e=1,r=t>>>16;return 0!==r&&(t=r,e+=16),r=t>>8,0!==r&&(t=r,e+=8),r=t>>4,0!==r&&(t=r,e+=4),r=t>>2,0!==r&&(t=r,e+=2),r=t>>1,0!==r&&(t=r,e+=1),e},double:function(t){const e=new Uint8Array(t.length),r=t.length-1;for(let i=0;i<r;i++)e[i]=t[i]<<1^t[i+1]>>7;return e[r]=t[r]<<1^135*(t[0]>>7),e},shiftRight:function(t,e){if(e)for(let r=t.length-1;r>=0;r--)t[r]>>=e,r>0&&(t[r]|=t[r-1]<<8-e);return t},getWebCrypto:function(){const e=void 0!==t&&t.crypto&&t.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!e)throw Error("The WebCrypto API is not available");return e},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(t){if(!O.isString(t))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(t)},canonicalizeEOL:function(t){let e=!1;return S(t,(t=>{let r;e&&(t=O.concatUint8Array([new Uint8Array([13]),t])),13===t[t.length-1]?(e=!0,t=t.subarray(0,-1)):e=!1;const i=[];for(let e=0;r=t.indexOf(10,e)+1,r;e=r)13!==t[r-2]&&i.push(r);if(!i.length)return t;const n=new Uint8Array(t.length+i.length);let s=0;for(let e=0;e<i.length;e++){const r=t.subarray(i[e-1]||0,i[e]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(t.subarray(i[i.length-1]||0),s),n}),(()=>e?new Uint8Array([13]):void 0))},nativeEOL:function(t){let e=!1;return S(t,(t=>{let r;13===(t=e&&10!==t[0]?O.concatUint8Array([new Uint8Array([13]),t]):new Uint8Array(t))[t.length-1]?(e=!0,t=t.subarray(0,-1)):e=!1;let i=0;for(let e=0;e!==t.length;e=r){r=t.indexOf(13,e)+1,r||(r=t.length);const n=r-(10===t[r]?1:0);e&&t.copyWithin(i,e,n),i+=n-e}return t.subarray(0,i)}),(()=>e?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(t){return t.split("\n").map((t=>{let e=t.length-1;for(;e>=0&&(" "===t[e]||"\t"===t[e]||"\r"===t[e]);e--);return t.substr(0,e+1)})).join("\n")},wrapError:function(t,e){if(!e)return Error(t);try{e.message=t+": "+e.message}catch(t){}return e},constructAllowedPackets:function(t){const e={};return t.forEach((t=>{if(!t.tag)throw Error("Invalid input: expected a packet class");e[t.tag]=t})),e},anyPromise:function(t){return new Promise((async(e,r)=>{let i;await Promise.all(t.map((async t=>{try{e(await t)}catch(t){i=t}}))),r(i)}))},selectUint8Array:function(t,e,r){const i=Math.max(e.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=e[i]&256-t|r[i]&255+t,s+=t&i<e.length|1-t&i<r.length;return n.subarray(0,s)},selectUint8:function(t,e,r){return e&256-t|r&255+t},isAES:function(t){return t===T.symmetric.aes128||t===T.symmetric.aes192||t===T.symmetric.aes256}},F=O.getNodeBuffer();let H,z;function G(t){let e=new Uint8Array;return S(t,(t=>{e=O.concatUint8Array([e,t]);const r=[],i=Math.floor(e.length/45),n=45*i,s=H(e.subarray(0,n));for(let t=0;t<i;t++)r.push(s.substr(60*t,60)),r.push("\n");return e=e.subarray(n),r.join("")}),(()=>e.length?H(e)+"\n":""))}function q(t){let e="";return S(t,(t=>{e+=t;let r=0;const i=[" ","\t","\r","\n"];for(let t=0;t<i.length;t++){const n=i[t];for(let t=e.indexOf(n);-1!==t;t=e.indexOf(n,t+1))r++}let n=e.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(e[n])&&r--;const s=z(e.substr(0,n));return e=e.substr(n),s}),(()=>z(e)))}function j(t){return q(t.replace(/-/g,"+").replace(/_/g,"/"))}function V(t,e){let r=G(t).replace(/[\r\n]/g,"");return e&&(r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,"")),r}function Z(t){const e=t.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!e)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(e[1])?T.armor.multipartSection:/MESSAGE, PART \d+/.test(e[1])?T.armor.multipartLast:/SIGNED MESSAGE/.test(e[1])?T.armor.signed:/MESSAGE/.test(e[1])?T.armor.message:/PUBLIC KEY BLOCK/.test(e[1])?T.armor.publicKey:/PRIVATE KEY BLOCK/.test(e[1])?T.armor.privateKey:/SIGNATURE/.test(e[1])?T.armor.signature:void 0}function J(t,e){let r="";return e.showVersion&&(r+="Version: "+e.versionString+"\n"),e.showComment&&(r+="Comment: "+e.commentString+"\n"),t&&(r+="Comment: "+t+"\n"),r+="\n",r}function Y(t){const e=function(t){let e=13501623;return S(t,(t=>{const r=$?Math.floor(t.length/4):0,i=new Uint32Array(t.buffer,t.byteOffset,r);for(let t=0;t<r;t++)e^=i[t],e=W[0][e>>24&255]^W[1][e>>16&255]^W[2][e>>8&255]^W[3][255&e];for(let i=4*r;i<t.length;i++)e=e>>8^W[0][255&e^t[i]]}),(()=>new Uint8Array([e,e>>8,e>>16])))}(t);return G(e)}F?(H=t=>F.from(t).toString("base64"),z=t=>{const e=F.from(t,"base64");return new Uint8Array(e.buffer,e.byteOffset,e.byteLength)}):(H=t=>btoa(O.uint8ArrayToString(t)),z=t=>O.stringToUint8Array(atob(t)));const W=[Array(255),Array(255),Array(255),Array(255)];for(let t=0;t<=255;t++){let e=t<<16;for(let t=0;t<8;t++)e=e<<1^(8388608&e?8801531:0);W[0][t]=(16711680&e)>>16|65280&e|(255&e)<<16}for(let t=0;t<=255;t++)W[1][t]=W[0][t]>>8^W[0][255&W[0][t]];for(let t=0;t<=255;t++)W[2][t]=W[1][t]>>8^W[0][255&W[1][t]];for(let t=0;t<=255;t++)W[3][t]=W[2][t]>>8^W[0][255&W[2][t]];const $=function(){const t=new ArrayBuffer(2);return new DataView(t).setInt16(0,255,!0),255===new Int16Array(t)[0]}();function X(t){for(let e=0;e<t.length;e++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(t[e])||O.printDebugError(Error("Improperly formatted armor header: "+t[e])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(t[e])||O.printDebugError(Error("Unknown header: "+t[e]))}function tt(t){let e=t;const r=t.lastIndexOf("=");return r>=0&&r!==t.length-1&&(e=t.slice(0,r)),e}function et(t){return new Promise((async(e,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=q(I(t,(async(t,f)=>{const y=Q(t);try{for(;;){let t=await y.readLine();if(void 0===t)throw Error("Misformed armored text");if(t=O.removeTrailingSpaces(t.replace(/[\r\n]/g,"")),s)if(o)c||s!==T.armor.signed||(i.test(t)?(u=u.join("\r\n"),c=!0,X(h),h=[],o=!1):u.push(t.replace(/^- /,"")));else if(i.test(t)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(t)){if(X(h),o=!0,c||s!==T.armor.signed){e({text:u,data:l,headers:a,type:s});break}}else h.push(t);else i.test(t)&&(s=Z(t))}}catch(t){return void r(t)}const d=R(f);try{for(;;){await d.ready;const{done:t,value:e}=await y.read();if(t)throw Error("Misformed armored text");const r=e+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let t=await y.readToEnd();t.length||(t=""),t=r+t,t=O.removeTrailingSpaces(t.replace(/\r/g,""));const e=t.split(i);if(1===e.length)throw Error("Misformed armored text");const n=tt(e[0].slice(0,-1));await d.write(n);break}await d.write(r)}await d.ready,await d.close()}catch(t){await d.abort(t)}})))}catch(t){r(t)}})).then((async t=>(u(t.data)&&(t.data=await U(t.data)),t)))}function rt(t,e,r,i,n,s=!1,a=L){let o,c;t===T.armor.signed&&(o=e.text,c=e.hash,e=e.data);const h=s&&K(e),u=[];switch(t){case T.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case T.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case T.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP SIGNATURE-----\n");break;case T.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP MESSAGE-----\n");break;case T.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case T.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case T.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push(J(n,a)),u.push(G(e)),h&&u.push("=",Y(h)),u.push("-----END PGP SIGNATURE-----\n")}return O.concat(u)}async function it(t){switch(t){case T.symmetric.aes128:case T.symmetric.aes192:case T.symmetric.aes256:throw Error("Not a legacy cipher");case T.symmetric.cast5:case T.symmetric.blowfish:case T.symmetric.twofish:case T.symmetric.tripledes:{const{legacyCiphers:e}=await Promise.resolve().then((function(){return bu})),r=e.get(t);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function nt(t){switch(t){case T.symmetric.aes128:case T.symmetric.aes192:case T.symmetric.aes256:case T.symmetric.twofish:return 16;case T.symmetric.blowfish:case T.symmetric.cast5:case T.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function st(t){switch(t){case T.symmetric.aes128:case T.symmetric.blowfish:case T.symmetric.cast5:return 16;case T.symmetric.aes192:case T.symmetric.tripledes:return 24;case T.symmetric.aes256:case T.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function at(t){return{keySize:st(t),blockSize:nt(t)}}var ot=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:at,getLegacyCipher:it});function ct(t,e){let r=t[0],i=t[1],n=t[2],s=t[3];r=ut(r,i,n,s,e[0],7,-680876936),s=ut(s,r,i,n,e[1],12,-389564586),n=ut(n,s,r,i,e[2],17,606105819),i=ut(i,n,s,r,e[3],22,-1044525330),r=ut(r,i,n,s,e[4],7,-176418897),s=ut(s,r,i,n,e[5],12,1200080426),n=ut(n,s,r,i,e[6],17,-1473231341),i=ut(i,n,s,r,e[7],22,-45705983),r=ut(r,i,n,s,e[8],7,1770035416),s=ut(s,r,i,n,e[9],12,-1958414417),n=ut(n,s,r,i,e[10],17,-42063),i=ut(i,n,s,r,e[11],22,-1990404162),r=ut(r,i,n,s,e[12],7,1804603682),s=ut(s,r,i,n,e[13],12,-40341101),n=ut(n,s,r,i,e[14],17,-1502002290),i=ut(i,n,s,r,e[15],22,1236535329),r=lt(r,i,n,s,e[1],5,-165796510),s=lt(s,r,i,n,e[6],9,-1069501632),n=lt(n,s,r,i,e[11],14,643717713),i=lt(i,n,s,r,e[0],20,-373897302),r=lt(r,i,n,s,e[5],5,-701558691),s=lt(s,r,i,n,e[10],9,38016083),n=lt(n,s,r,i,e[15],14,-660478335),i=lt(i,n,s,r,e[4],20,-405537848),r=lt(r,i,n,s,e[9],5,568446438),s=lt(s,r,i,n,e[14],9,-1019803690),n=lt(n,s,r,i,e[3],14,-187363961),i=lt(i,n,s,r,e[8],20,1163531501),r=lt(r,i,n,s,e[13],5,-1444681467),s=lt(s,r,i,n,e[2],9,-51403784),n=lt(n,s,r,i,e[7],14,1735328473),i=lt(i,n,s,r,e[12],20,-1926607734),r=ft(r,i,n,s,e[5],4,-378558),s=ft(s,r,i,n,e[8],11,-2022574463),n=ft(n,s,r,i,e[11],16,1839030562),i=ft(i,n,s,r,e[14],23,-35309556),r=ft(r,i,n,s,e[1],4,-1530992060),s=ft(s,r,i,n,e[4],11,1272893353),n=ft(n,s,r,i,e[7],16,-155497632),i=ft(i,n,s,r,e[10],23,-1094730640),r=ft(r,i,n,s,e[13],4,681279174),s=ft(s,r,i,n,e[0],11,-358537222),n=ft(n,s,r,i,e[3],16,-722521979),i=ft(i,n,s,r,e[6],23,76029189),r=ft(r,i,n,s,e[9],4,-640364487),s=ft(s,r,i,n,e[12],11,-421815835),n=ft(n,s,r,i,e[15],16,530742520),i=ft(i,n,s,r,e[2],23,-995338651),r=yt(r,i,n,s,e[0],6,-198630844),s=yt(s,r,i,n,e[7],10,1126891415),n=yt(n,s,r,i,e[14],15,-1416354905),i=yt(i,n,s,r,e[5],21,-57434055),r=yt(r,i,n,s,e[12],6,1700485571),s=yt(s,r,i,n,e[3],10,-1894986606),n=yt(n,s,r,i,e[10],15,-1051523),i=yt(i,n,s,r,e[1],21,-2054922799),r=yt(r,i,n,s,e[8],6,1873313359),s=yt(s,r,i,n,e[15],10,-30611744),n=yt(n,s,r,i,e[6],15,-1560198380),i=yt(i,n,s,r,e[13],21,1309151649),r=yt(r,i,n,s,e[4],6,-145523070),s=yt(s,r,i,n,e[11],10,-1120210379),n=yt(n,s,r,i,e[2],15,718787259),i=yt(i,n,s,r,e[9],21,-343485551),t[0]=mt(r,t[0]),t[1]=mt(i,t[1]),t[2]=mt(n,t[2]),t[3]=mt(s,t[3])}function ht(t,e,r,i,n,s){return e=mt(mt(e,t),mt(i,s)),mt(e<<n|e>>>32-n,r)}function ut(t,e,r,i,n,s,a){return ht(e&r|~e&i,t,e,n,s,a)}function lt(t,e,r,i,n,s,a){return ht(e&i|r&~i,t,e,n,s,a)}function ft(t,e,r,i,n,s,a){return ht(e^r^i,t,e,n,s,a)}function yt(t,e,r,i,n,s,a){return ht(r^(e|~i),t,e,n,s,a)}function dt(t){const e=[];let r;for(r=0;r<64;r+=4)e[r>>2]=t.charCodeAt(r)+(t.charCodeAt(r+1)<<8)+(t.charCodeAt(r+2)<<16)+(t.charCodeAt(r+3)<<24);return e}const pt="0123456789abcdef".split("");function gt(t){let e="",r=0;for(;r<4;r++)e+=pt[t>>8*r+4&15]+pt[t>>8*r&15];return e}function mt(t,e){return t+e&4294967295}const wt=O.getWebCrypto(),At=O.getNodeCrypto(),bt=At&&At.getHashes();function vt(t){if(At&&bt.includes(t))return async function(e){const r=At.createHash(t);return S(e,(t=>{r.update(t)}),(()=>new Uint8Array(r.digest())))}}function Et(t,e){const r=async()=>{const{nobleHashes:e}=await Promise.resolve().then((function(){return Hu})),r=e.get(t);if(!r)throw Error("Unsupported hash");return r};return async function(t){if(u(t)&&(t=await U(t)),O.isStream(t)){const e=(await r()).create();return S(t,(t=>{e.update(t)}),(()=>e.digest()))}if(wt&&e)return new Uint8Array(await wt.digest(e,t));return(await r())(t)}}var kt={md5:vt("md5")||async function(t){const e=function(t){const e=t.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=t.length;i+=64)ct(r,dt(t.substring(i-64,i)));t=t.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<t.length;i++)n[i>>2]|=t.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(ct(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*e,ct(r,n),r}(O.uint8ArrayToString(t));return O.hexToUint8Array(function(t){for(let e=0;e<t.length;e++)t[e]=gt(t[e]);return t.join("")}(e))},sha1:vt("sha1")||Et("sha1","SHA-1"),sha224:vt("sha224")||Et("sha224"),sha256:vt("sha256")||Et("sha256","SHA-256"),sha384:vt("sha384")||Et("sha384","SHA-384"),sha512:vt("sha512")||Et("sha512","SHA-512"),ripemd:vt("ripemd160")||Et("ripemd160"),sha3_256:vt("sha3-256")||Et("sha3_256"),sha3_512:vt("sha3-512")||Et("sha3_512"),digest:function(t,e){switch(t){case T.hash.md5:return this.md5(e);case T.hash.sha1:return this.sha1(e);case T.hash.ripemd:return this.ripemd(e);case T.hash.sha256:return this.sha256(e);case T.hash.sha384:return this.sha384(e);case T.hash.sha512:return this.sha512(e);case T.hash.sha224:return this.sha224(e);case T.hash.sha3_256:return this.sha3_256(e);case T.hash.sha3_512:return this.sha3_512(e);default:throw Error("Unsupported hash function")}},getHashByteLength:function(t){switch(t){case T.hash.md5:return 16;case T.hash.sha1:case T.hash.ripemd:return 20;case T.hash.sha256:return 32;case T.hash.sha384:return 48;case T.hash.sha512:return 64;case T.hash.sha224:return 28;case T.hash.sha3_256:return 32;case T.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(t){switch(t){case T.hash.md5:case T.hash.sha1:case T.hash.ripemd:case T.hash.sha224:case T.hash.sha256:return 64;case T.hash.sha384:case T.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}},St=function(){var t,e,r=!1;function i(r,i){var n=t[(e[r]+e[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=t[255-e[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){t=[],e=[];var i,n,s=1;for(i=0;i<255;i++)t[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=t[i],e[t[i]]=i;t[255]=t[0],e[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var f=1;f<4;f++)a[f][u]=a[f-1][u]>>>8|a[f-1][u]<<24,o[f][l]=o[f-1][l]>>>8|o[f-1][l]<<24}c=!0}var u=function(t,e){c||h();var r=new Uint32Array(e);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(t,e,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0,b=0,v=0,E=0,k=0;var S=new t.Uint32Array(r),I=new t.Uint8Array(r);function C(t,e,r,o,c,h,u,l){t=t|0;e=e|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0;f=r|0x400,y=r|0x800,d=r|0xc00;c=c^S[(t|0)>>2],h=h^S[(t|4)>>2],u=u^S[(t|8)>>2],l=l^S[(t|12)>>2];for(A=16;(A|0)<=o<<4;A=A+16|0){p=S[(r|c>>22&1020)>>2]^S[(f|h>>14&1020)>>2]^S[(y|u>>6&1020)>>2]^S[(d|l<<2&1020)>>2]^S[(t|A|0)>>2],g=S[(r|h>>22&1020)>>2]^S[(f|u>>14&1020)>>2]^S[(y|l>>6&1020)>>2]^S[(d|c<<2&1020)>>2]^S[(t|A|4)>>2],m=S[(r|u>>22&1020)>>2]^S[(f|l>>14&1020)>>2]^S[(y|c>>6&1020)>>2]^S[(d|h<<2&1020)>>2]^S[(t|A|8)>>2],w=S[(r|l>>22&1020)>>2]^S[(f|c>>14&1020)>>2]^S[(y|h>>6&1020)>>2]^S[(d|u<<2&1020)>>2]^S[(t|A|12)>>2];c=p,h=g,u=m,l=w}i=S[(e|c>>22&1020)>>2]<<24^S[(e|h>>14&1020)>>2]<<16^S[(e|u>>6&1020)>>2]<<8^S[(e|l<<2&1020)>>2]^S[(t|A|0)>>2],n=S[(e|h>>22&1020)>>2]<<24^S[(e|u>>14&1020)>>2]<<16^S[(e|l>>6&1020)>>2]<<8^S[(e|c<<2&1020)>>2]^S[(t|A|4)>>2],s=S[(e|u>>22&1020)>>2]<<24^S[(e|l>>14&1020)>>2]<<16^S[(e|c>>6&1020)>>2]<<8^S[(e|h<<2&1020)>>2]^S[(t|A|8)>>2],a=S[(e|l>>22&1020)>>2]<<24^S[(e|c>>14&1020)>>2]<<16^S[(e|h>>6&1020)>>2]<<8^S[(e|u<<2&1020)>>2]^S[(t|A|12)>>2]}function B(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;C(0x0000,0x0800,0x1000,k,t,e,r,i)}function K(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;var s=0;C(0x0400,0x0c00,0x2000,k,t,i,r,e);s=n,n=a,a=s}function P(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o^t,c^e,h^r,u^l);o=i,c=n,h=s,u=a}function D(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;var f=0;C(0x0400,0x0c00,0x2000,k,t,l,r,e);f=n,n=a,a=f;i=i^o,n=n^c,s=s^h,a=a^u;o=t,c=e,h=r,u=l}function U(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);o=i=i^t,c=n=n^e,h=s=s^r,u=a=a^l}function M(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);i=i^t,n=n^e,s=s^r,a=a^l;o=t,c=e,h=r,u=l}function x(t,e,r,l){t=t|0;e=e|0;r=r|0;l=l|0;C(0x0000,0x0800,0x1000,k,o,c,h,u);o=i,c=n,h=s,u=a;i=i^t,n=n^e,s=s^r,a=a^l}function Q(t,e,r,o){t=t|0;e=e|0;r=r|0;o=o|0;C(0x0000,0x0800,0x1000,k,l,f,y,d);d=~w&d|w&d+1;y=~m&y|m&y+((d|0)==0);f=~g&f|g&f+((y|0)==0);l=~p&l|p&l+((f|0)==0);i=i^t;n=n^e;s=s^r;a=a^o}function R(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0;t=t^o,e=e^c,r=r^h,i=i^u;n=A|0,s=b|0,a=v|0,l=E|0;for(;(g|0)<128;g=g+1|0){if(n>>>31){f=f^t,y=y^e,d=d^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;m=i&1;i=i>>>1|r<<31,r=r>>>1|e<<31,e=e>>>1|t<<31,t=t>>>1;if(m)t=t^0xe1000000}o=f,c=y,h=d,u=p}function _(t){t=t|0;k=t}function T(t,e,r,o){t=t|0;e=e|0;r=r|0;o=o|0;i=t,n=e,s=r,a=o}function L(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;o=t,c=e,h=r,u=i}function N(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;l=t,f=e,y=r,d=i}function O(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;p=t,g=e,m=r,w=i}function F(t,e,r,i){t=t|0;e=e|0;r=r|0;i=i|0;d=~w&d|w&i,y=~m&y|m&r,f=~g&f|g&e,l=~p&l|p&t}function H(t){t=t|0;if(t&15)return-1;I[t|0]=i>>>24,I[t|1]=i>>>16&255,I[t|2]=i>>>8&255,I[t|3]=i&255,I[t|4]=n>>>24,I[t|5]=n>>>16&255,I[t|6]=n>>>8&255,I[t|7]=n&255,I[t|8]=s>>>24,I[t|9]=s>>>16&255,I[t|10]=s>>>8&255,I[t|11]=s&255,I[t|12]=a>>>24,I[t|13]=a>>>16&255,I[t|14]=a>>>8&255,I[t|15]=a&255;return 16}function z(t){t=t|0;if(t&15)return-1;I[t|0]=o>>>24,I[t|1]=o>>>16&255,I[t|2]=o>>>8&255,I[t|3]=o&255,I[t|4]=c>>>24,I[t|5]=c>>>16&255,I[t|6]=c>>>8&255,I[t|7]=c&255,I[t|8]=h>>>24,I[t|9]=h>>>16&255,I[t|10]=h>>>8&255,I[t|11]=h&255,I[t|12]=u>>>24,I[t|13]=u>>>16&255,I[t|14]=u>>>8&255,I[t|15]=u&255;return 16}function G(){B(0,0,0,0);A=i,b=n,v=s,E=a}function q(t,e,r){t=t|0;e=e|0;r=r|0;var o=0;if(e&15)return-1;while((r|0)>=16){V[t&7](I[e|0]<<24|I[e|1]<<16|I[e|2]<<8|I[e|3],I[e|4]<<24|I[e|5]<<16|I[e|6]<<8|I[e|7],I[e|8]<<24|I[e|9]<<16|I[e|10]<<8|I[e|11],I[e|12]<<24|I[e|13]<<16|I[e|14]<<8|I[e|15]);I[e|0]=i>>>24,I[e|1]=i>>>16&255,I[e|2]=i>>>8&255,I[e|3]=i&255,I[e|4]=n>>>24,I[e|5]=n>>>16&255,I[e|6]=n>>>8&255,I[e|7]=n&255,I[e|8]=s>>>24,I[e|9]=s>>>16&255,I[e|10]=s>>>8&255,I[e|11]=s&255,I[e|12]=a>>>24,I[e|13]=a>>>16&255,I[e|14]=a>>>8&255,I[e|15]=a&255;o=o+16|0,e=e+16|0,r=r-16|0}return o|0}function j(t,e,r){t=t|0;e=e|0;r=r|0;var i=0;if(e&15)return-1;while((r|0)>=16){Z[t&1](I[e|0]<<24|I[e|1]<<16|I[e|2]<<8|I[e|3],I[e|4]<<24|I[e|5]<<16|I[e|6]<<8|I[e|7],I[e|8]<<24|I[e|9]<<16|I[e|10]<<8|I[e|11],I[e|12]<<24|I[e|13]<<16|I[e|14]<<8|I[e|15]);i=i+16|0,e=e+16|0,r=r-16|0}return i|0}var V=[B,K,P,D,U,M,x,Q];var Z=[P,R];return{set_rounds:_,set_state:T,set_iv:L,set_nonce:N,set_mask:O,set_counter:F,get_state:H,get_iv:z,gcm_init:G,cipher:q,mac:j}}({Uint8Array,Uint32Array},t,e);return u.set_key=function(t,e,i,s,a,c,h,l,f){var y=r.subarray(0,60),d=r.subarray(256,316);y.set([e,i,s,a,c,h,l,f]);for(var p=t,g=1;p<4*t+28;p++){var m=y[p-1];(p%t==0||8===t&&p%t==4)&&(m=n[m>>>24]<<24^n[m>>>16&255]<<16^n[m>>>8&255]<<8^n[255&m]),p%t==0&&(m=m<<8^m>>>24^g<<24,g=g<<1^(128&g?27:0)),y[p]=y[p-t]^m}for(var w=0;w<p;w+=4)for(var A=0;A<4;A++){m=y[p-(4+w)+(4-A)%4];d[w+A]=w<4||w>=p-4?m:o[0][n[m>>>24]]^o[1][n[m>>>16&255]]^o[2][n[m>>>8&255]]^o[3][n[255&m]]}u.set_rounds(t+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function It(t){return t instanceof Uint8Array}function Ct(t,e,r,i,n){const s=t.length-e,a=s<n?s:n;return t.set(r.subarray(i,i+a),e),a}function Bt(...t){const e=t.reduce(((t,e)=>t+e.length),0),r=new Uint8Array(e);let i=0;for(let e=0;e<t.length;e++)r.set(t[e],i),i+=t[e].length;return r}class Kt extends Error{constructor(...t){super(...t)}}class Pt extends Error{constructor(...t){super(...t)}}class Dt extends Error{constructor(...t){super(...t)}}const Ut=[],Mt=[];class xt{constructor(t,e,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=t,this.iv=e,this.padding=r,this.acquire_asm(n,s)}acquire_asm(t,e){return void 0!==this.heap&&void 0!==this.asm||(this.heap=t||Ut.pop()||function(t,e){const r=t?t.byteLength:e||65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return t||new Uint8Array(new ArrayBuffer(r))}().subarray(St.HEAP_DATA),this.asm=e||Mt.pop()||new St(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(Ut.push(this.heap),Mt.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(t,e){const{asm:r}=this.acquire_asm(),i=t.length;if(16!==i&&24!==i&&32!==i)throw new Pt("illegal key size");const n=new DataView(t.buffer,t.byteOffset,t.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==e){if(16!==e.length)throw new Pt("illegal iv size");let t=new DataView(e.buffer,e.byteOffset,e.byteLength);r.set_iv(t.getUint32(0),t.getUint32(4),t.getUint32(8),t.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(t){if(!It(t))throw new TypeError("data isn't of expected type");let{heap:e,asm:r}=this.acquire_asm(),i=St.ENC[this.mode],n=St.HEAP_DATA,s=this.pos,a=this.len,o=0,c=t.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=Ct(e,s+a,t,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(e.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:t,asm:e}=this.acquire_asm(),r=St.ENC[this.mode],i=St.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let e=0;e<a;++e)t[n+s+e]=a;s+=a,o=s}else if(s%16)throw new Pt("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&e.cipher(r,i+n,s),o&&c.set(t.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(t){if(!It(t))throw new TypeError("data isn't of expected type");let{heap:e,asm:r}=this.acquire_asm(),i=St.DEC[this.mode],n=St.HEAP_DATA,s=this.pos,a=this.len,o=0,c=t.length||0,h=0,u=a+c&-16,l=0,f=0;this.padding&&(l=a+c-u||16,u-=l);const y=new Uint8Array(u);for(;c>0;)f=Ct(e,s+a,t,o,c),a+=f,o+=f,c-=f,f=r.cipher(i,n+s,a-(c?0:l)),f&&y.set(e.subarray(s,s+f),h),h+=f,f<a?(s+=f,a-=f):(s=0,a=0);return this.pos=s,this.len=a,y}AES_Decrypt_finish(){let{heap:t,asm:e}=this.acquire_asm(),r=St.DEC[this.mode],i=St.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new Pt("data length must be a multiple of the block size");s+=16-s%16}if(e.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let e=t[n+a-1];if(e<1||e>16||e>a)throw new Dt("bad padding");let r=0;for(let i=e;i>1;i--)r|=e^t[n+a-i];if(r)throw new Dt("bad padding");a-=e}}const o=new Uint8Array(a);return a>0&&o.set(t.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class Qt{static encrypt(t,e,r){return new Qt(e,r).encrypt(t)}static decrypt(t,e,r){return new Qt(e,r).decrypt(t)}constructor(t,e,r){this.aes=r||new xt(t,e,!0,"CFB"),delete this.aes.padding}encrypt(t){return Bt(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return Bt(this.aes.AES_Decrypt_process(t),this.aes.AES_Decrypt_finish())}}const Rt=O.getWebCrypto(),_t=O.getNodeCrypto(),Tt=_t?_t.getCiphers():[],Lt={idea:Tt.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Tt.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Tt.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Tt.includes("bf-cfb")?"bf-cfb":void 0,aes128:Tt.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Tt.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Tt.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Nt{constructor(t,e,r){const{blockSize:i}=at(t);this.key=e,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(t){const{keySize:e}=at(t);return Rt.importKey("raw",new Uint8Array(e),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(t,e){const r="AES-CBC";this.keyRef=this.keyRef||await Rt.importKey("raw",this.key,r,!1,["encrypt"]);const i=await Rt.encrypt({name:r,iv:e||this.zeroBlock},this.keyRef,t);return new Uint8Array(i).subarray(0,t.length)}async encryptChunk(t){const e=this.nextBlock.length-this.i,r=t.subarray(0,e);if(this.nextBlock.set(r,this.i),this.i+t.length>=2*this.blockSize){const r=(t.length-e)%this.blockSize,i=O.concatUint8Array([this.nextBlock,t.subarray(e,t.length-r)]),n=O.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return Ot(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(t.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const e=this.nextBlock;i=await this._runCBC(this.prevBlock),Ot(i,e),this.prevBlock=i.slice(),this.i=0;const n=t.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let t;if(0===this.i)t=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const e=this.nextBlock,r=await this._runCBC(this.prevBlock);Ot(r,e),t=r.subarray(0,e.length)}return this.clearSensitiveData(),t}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(t){const e=(await this._runCBC(O.concatUint8Array([new Uint8Array(this.blockSize),t]),this.iv)).subarray(0,t.length);return Ot(e,t),this.clearSensitiveData(),e}}function Ot(t,e){const r=Math.min(t.length,e.length);for(let i=0;i<r;i++)t[i]=t[i]^e[i]}var Ft=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i){const n=T.read(T.symmetric,t);if(_t&&Lt[n])return function(t,e,r,i){const n=T.read(T.symmetric,t),s=new _t.createDecipheriv(Lt[n],e,i);return S(r,(t=>new Uint8Array(s.update(t))))}(t,e,r,i);if(O.isAES(t))return function(t,e,r,i){if(O.isStream(r)){const t=new Qt(e,i);return S(r,(e=>t.aes.AES_Decrypt_process(e)),(()=>t.aes.AES_Decrypt_finish()))}return Qt.decrypt(r,e,i)}(0,e,r,i);const s=new(await it(t))(e),a=s.blockSize;let o=i,c=new Uint8Array;const h=t=>{t&&(c=O.concatUint8Array([c,t]));const e=new Uint8Array(c.length);let r,i=0;for(;t?c.length>=a:c.length;){const t=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)e[i++]=o[r]^t[r];c=c.subarray(a)}return e.subarray(0,i)};return S(r,h,h)},encrypt:async function(t,e,r,i,n){const s=T.read(T.symmetric,t);if(O.getNodeCrypto()&&Lt[s])return function(t,e,r,i){const n=T.read(T.symmetric,t),s=new _t.createCipheriv(Lt[n],e,i);return S(r,(t=>new Uint8Array(s.update(t))))}(t,e,r,i);if(O.isAES(t))return async function(t,e,r,i){if(Rt&&await Nt.isSupported(t)){const n=new Nt(t,e,i);return O.isStream(r)?S(r,(t=>n.encryptChunk(t)),(()=>n.finish())):n.encrypt(r)}{const t=new Qt(e,i);return S(r,(e=>t.aes.AES_Encrypt_process(e)),(()=>t.aes.AES_Encrypt_finish()))}}(t,e,r,i);const a=new(await it(t))(e),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=t=>{t&&(h=O.concatUint8Array([h,t]));const e=new Uint8Array(h.length);let r,i=0;for(;t?h.length>=o:h.length;){const t=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^t[r],e[i++]=c[r];h=h.subarray(o)}return e.subarray(0,i)};return S(r,u,u)}});class Ht{static encrypt(t,e,r){return new Ht(e,r).encrypt(t)}static decrypt(t,e,r){return new Ht(e,r).encrypt(t)}constructor(t,e,r){this.aes=r||new xt(t,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(e)}encrypt(t){return Bt(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return Bt(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(t,e,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new Pt("illegal counter size");let t=Math.pow(2,r)-1;i.set_mask(0,0,t/4294967296|0,0|t)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===t)throw Error("nonce is required");{let e=t.length;if(!e||e>16)throw new Pt("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(t),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==e){if(e<0||e>=Math.pow(2,r))throw new Pt("illegal counter value");i.set_counter(0,0,e/4294967296|0,0|e)}}}class zt{static encrypt(t,e,r=!0,i){return new zt(e,i,r).encrypt(t)}static decrypt(t,e,r=!0,i){return new zt(e,i,r).decrypt(t)}constructor(t,e,r=!0,i){this.aes=i||new xt(t,e,r,"CBC")}encrypt(t){return Bt(this.aes.AES_Encrypt_process(t),this.aes.AES_Encrypt_finish())}decrypt(t){return Bt(this.aes.AES_Decrypt_process(t),this.aes.AES_Decrypt_finish())}}const Gt=O.getWebCrypto(),qt=O.getNodeCrypto(),jt=16;function Vt(t,e){const r=t.length-jt;for(let i=0;i<jt;i++)t[i+r]^=e[i];return t}const Zt=new Uint8Array(jt);async function Jt(t){const e=await async function(t){if(O.getNodeCrypto())return async function(e){const r=new qt.createCipheriv("aes-"+8*t.length+"-cbc",t,Zt).update(e);return new Uint8Array(r)};if(O.getWebCrypto())try{return t=await Gt.importKey("raw",t,{name:"AES-CBC",length:8*t.length},!1,["encrypt"]),async function(e){const r=await Gt.encrypt({name:"AES-CBC",iv:Zt,length:8*jt},t,e);return new Uint8Array(r).subarray(0,r.byteLength-jt)}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return async function(e){return zt.encrypt(e,t,!1,Zt)}}(t),r=O.double(await e(Zt)),i=O.double(r);return async function(t){return(await e(function(t,e,r){if(t.length&&t.length%jt==0)return Vt(t,e);const i=new Uint8Array(t.length+(jt-t.length%jt));return i.set(t),i[t.length]=128,Vt(i,r)}(t,r,i))).subarray(-jt)}}const Yt=O.getWebCrypto(),Wt=O.getNodeCrypto(),$t=O.getNodeBuffer(),Xt=16,te=Xt,ee=Xt,re=new Uint8Array(Xt),ie=new Uint8Array(Xt);ie[Xt-1]=1;const ne=new Uint8Array(Xt);async function se(t){const e=await Jt(t);return function(t,r){return e(O.concatUint8Array([t,r]))}}async function ae(t){if(O.getNodeCrypto())return async function(e,r){const i=new Wt.createCipheriv("aes-"+8*t.length+"-ctr",t,r),n=$t.concat([i.update(e),i.final()]);return new Uint8Array(n)};if(O.getWebCrypto())try{const e=await Yt.importKey("raw",t,{name:"AES-CTR",length:8*t.length},!1,["encrypt"]);return async function(t,r){const i=await Yt.encrypt({name:"AES-CTR",counter:r,length:8*Xt},e,t);return new Uint8Array(i)}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return async function(e,r){return Ht.encrypt(e,t,r)}}async function oe(t,e){if(t!==T.symmetric.aes128&&t!==T.symmetric.aes192&&t!==T.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([se(e),ae(e)]);return{encrypt:async function(t,e,n){const[s,a]=await Promise.all([r(re,e),r(ie,n)]),o=await i(t,s),c=await r(ne,o);for(let t=0;t<ee;t++)c[t]^=a[t]^s[t];return O.concatUint8Array([o,c])},decrypt:async function(t,e,n){if(t.length<ee)throw Error("Invalid EAX ciphertext");const s=t.subarray(0,-ee),a=t.subarray(-ee),[o,c,h]=await Promise.all([r(re,e),r(ie,n),r(ne,s)]),u=h;for(let t=0;t<ee;t++)u[t]^=c[t]^o[t];if(!O.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}ne[Xt-1]=2,oe.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[8+t]^=e[t];return r},oe.blockLength=Xt,oe.ivLength=te,oe.tagLength=ee;const ce=16,he=16;function ue(t){let e=0;for(let r=1;!(t&r);r<<=1)e++;return e}function le(t,e){for(let r=0;r<t.length;r++)t[r]^=e[r];return t}function fe(t,e){return le(t.slice(),e)}const ye=new Uint8Array(ce),de=new Uint8Array([1]);async function pe(t,e){const{keySize:r}=at(t);if(!O.isAES(t)||e.length!==r)throw Error("Unexpected algorithm or key size");let i=0;const n=t=>zt.encrypt(t,e,!1),s=t=>zt.decrypt(t,e,!1);let a;function o(t,e,r,s){const o=e.length/ce|0;!function(t,e){const r=O.nbits(Math.max(t.length,e.length)/ce|0)-1;for(let t=i+1;t<=r;t++)a[t]=O.double(a[t-1]);i=r}(e,s);const c=O.concatUint8Array([ye.subarray(0,15-r.length),de,r]),h=63&c[15];c[15]&=192;const u=n(c),l=O.concatUint8Array([u,fe(u.subarray(0,8),u.subarray(1,9))]),f=O.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),y=new Uint8Array(ce),d=new Uint8Array(e.length+he);let p,g=0;for(p=0;p<o;p++)le(f,a[ue(p+1)]),d.set(le(t(fe(f,e)),f),g),le(y,t===n?e:d.subarray(g)),e=e.subarray(ce),g+=ce;if(e.length){le(f,a.x);const r=n(f);d.set(fe(e,r),g);const i=new Uint8Array(ce);i.set(t===n?e:d.subarray(g,-16),0),i[e.length]=128,le(y,i),g+=e.length}const m=le(n(le(le(y,f),a.$)),function(t){if(!t.length)return ye;const e=t.length/ce|0,r=new Uint8Array(ce),i=new Uint8Array(ce);for(let s=0;s<e;s++)le(r,a[ue(s+1)]),le(i,n(fe(r,t))),t=t.subarray(ce);if(t.length){le(r,a.x);const e=new Uint8Array(ce);e.set(t,0),e[t.length]=128,le(e,r),le(i,n(e))}return i}(s));return d.set(m,g),d}return function(){const t=n(ye),e=O.double(t);a=[],a[0]=O.double(e),a.x=t,a.$=e}(),{encrypt:async function(t,e,r){return o(n,t,e,r)},decrypt:async function(t,e,r){if(t.length<he)throw Error("Invalid OCB ciphertext");const i=t.subarray(-16);t=t.subarray(0,-16);const n=o(s,t,e,r);if(O.equalsUint8Array(i,n.subarray(-16)))return n.subarray(0,-16);throw Error("Authentication tag mismatch")}}}pe.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[7+t]^=e[t];return r},pe.blockLength=ce,pe.ivLength=15,pe.tagLength=he;const ge=68719476704;class me{static encrypt(t,e,r,i,n){return new me(e,r,i,n).encrypt(t)}static decrypt(t,e,r,i,n){return new me(e,r,i,n).decrypt(t)}constructor(t,e,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new xt(t,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new Pt("illegal tagSize value");const o=e.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(e),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(St.MAC.GCM,St.HEAP_DATA,16),s.get_iv(St.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(e),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>ge)throw new Pt("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(t){return this.AES_GCM_encrypt(t)}decrypt(t){return this.AES_GCM_decrypt(t)}AES_GCM_Encrypt_process(t){let e=0,r=t.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>ge)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=Ct(n,a+o,t,e,r),o+=u,e+=u,r-=u,u=i.cipher(St.ENC.CTR,St.HEAP_DATA+a,o),u=i.mac(St.MAC.GCM,St.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:t,heap:e}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);t.cipher(St.ENC.CTR,St.HEAP_DATA+s,a+15&-16),a&&o.set(e.subarray(s,s+a));let c=a;for(;15&c;c++)e[s+c]=0;t.mac(St.MAC.GCM,St.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return e[0]=0,e[1]=0,e[2]=0,e[3]=h>>>29,e[4]=h>>>21,e[5]=h>>>13&255,e[6]=h>>>5&255,e[7]=h<<3&255,e[8]=e[9]=e[10]=0,e[11]=u>>>29,e[12]=u>>>21&255,e[13]=u>>>13&255,e[14]=u>>>5&255,e[15]=u<<3&255,t.mac(St.MAC.GCM,St.HEAP_DATA,16),t.get_iv(St.HEAP_DATA),t.set_counter(0,0,0,this.gamma0),t.cipher(St.ENC.CTR,St.HEAP_DATA,16),o.set(e.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(t){let e=0,r=t.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,f=0;if((s-1<<4)+c+r>ge)throw new RangeError("counter overflow");const y=new Uint8Array(u);for(;r>l;)f=Ct(n,o+c,t,e,r-l),c+=f,e+=f,r-=f,f=i.mac(St.MAC.GCM,St.HEAP_DATA+o,f),f=i.cipher(St.DEC.CTR,St.HEAP_DATA+o,f),f&&y.set(n.subarray(o,o+f),h),s+=f>>>4,h+=f,o=0,c=0;return r>0&&(c+=Ct(n,0,t,e,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,y}AES_GCM_Decrypt_finish(){let{asm:t,heap:e}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new Kt("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(e.subarray(s+o,s+a));let u=o;for(;15&u;u++)e[s+u]=0;t.mac(St.MAC.GCM,St.HEAP_DATA+s,u),t.cipher(St.DEC.CTR,St.HEAP_DATA+s,u),o&&c.set(e.subarray(s,s+o));const l=void 0!==i?i.length:0,f=(n-1<<4)+a-r;e[0]=0,e[1]=0,e[2]=0,e[3]=l>>>29,e[4]=l>>>21,e[5]=l>>>13&255,e[6]=l>>>5&255,e[7]=l<<3&255,e[8]=e[9]=e[10]=0,e[11]=f>>>29,e[12]=f>>>21&255,e[13]=f>>>13&255,e[14]=f>>>5&255,e[15]=f<<3&255,t.mac(St.MAC.GCM,St.HEAP_DATA,16),t.get_iv(St.HEAP_DATA),t.set_counter(0,0,0,this.gamma0),t.cipher(St.ENC.CTR,St.HEAP_DATA,16);let y=0;for(let t=0;t<r;++t)y|=h[t]^e[t];if(y)throw new Dt("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(t){const e=this.AES_GCM_Decrypt_process(t),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(e.length+r.length);return e.length&&i.set(e),r.length&&i.set(r,e.length),i}AES_GCM_encrypt(t){const e=this.AES_GCM_Encrypt_process(t),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(e.length+r.length);return e.length&&i.set(e),r.length&&i.set(r,e.length),i}_gcm_mac_process(t){let{asm:e,heap:r}=this.aes.acquire_asm(),i=0,n=t.length||0,s=0;for(;n>0;){for(s=Ct(r,0,t,i,n),i+=s,n-=s;15&s;)r[s++]=0;e.mac(St.MAC.GCM,St.HEAP_DATA,s)}}}const we=O.getWebCrypto(),Ae=O.getNodeCrypto(),be=O.getNodeBuffer(),ve=16,Ee="AES-GCM";async function ke(t,e){if(t!==T.symmetric.aes128&&t!==T.symmetric.aes192&&t!==T.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(O.getNodeCrypto())return{encrypt:async function(t,r,i=new Uint8Array){const n=new Ae.createCipheriv("aes-"+8*e.length+"-gcm",e,r);n.setAAD(i);const s=be.concat([n.update(t),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(t,r,i=new Uint8Array){const n=new Ae.createDecipheriv("aes-"+8*e.length+"-gcm",e,r);n.setAAD(i),n.setAuthTag(t.slice(t.length-ve,t.length));const s=be.concat([n.update(t.slice(0,t.length-ve)),n.final()]);return new Uint8Array(s)}};if(O.getWebCrypto())try{const t=await we.importKey("raw",e,{name:Ee},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return me.encrypt(i,e,n,s);const a=await we.encrypt({name:Ee,iv:n,additionalData:s,tagLength:128},t,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===ve)return me.decrypt(i,e,n,s);try{const e=await we.decrypt({name:Ee,iv:n,additionalData:s,tagLength:128},t,i);return new Uint8Array(e)}catch(t){if("OperationError"===t.name)throw Error("Authentication tag mismatch")}}}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return{encrypt:async function(t,r,i){return me.encrypt(t,e,r,i)},decrypt:async function(t,r,i){return me.decrypt(t,e,r,i)}}}ke.getNonce=function(t,e){const r=t.slice();for(let t=0;t<e.length;t++)r[4+t]^=e[t];return r},ke.blockLength=16,ke.ivLength=12,ke.tagLength=ve;var Se={cfb:Ft,gcm:ke,experimentalGCM:ke,eax:oe,ocb:pe};const Ie=O.getNodeCrypto();function Ce(t){const e=new Uint8Array(t);if(Ie){const t=Ie.randomBytes(e.length);e.set(t)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(e)}return e}async function Be(t,e){const r=await O.getBigInteger();if(e.lt(t))throw Error("Illegal parameter value: max <= min");const i=e.sub(t);return new r(Ce(i.byteLength()+8)).mod(i).add(t)}var Ke=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Be,getRandomBytes:Ce});async function Pe(t,e,r){const i=await O.getBigInteger(),n=new i(1),s=n.leftShift(new i(t-1)),a=new i(30),o=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2],c=await Be(s,s.leftShift(n));let h=c.mod(a).toNumber();do{c.iadd(new i(o[h])),h=(h+o[h])%o.length,c.bitLength()>t&&(c.imod(s.leftShift(n)).iadd(s),h=c.mod(a).toNumber())}while(!await De(c,e,r));return c}async function De(t,e,r){return!(e&&!t.dec().gcd(e).isOne())&&(!!await async function(t){const e=await O.getBigInteger();return Ue.every((r=>0!==t.mod(new e(r))))}(t)&&(!!await async function(t,e){const r=await O.getBigInteger();return e=e||new r(2),e.modExp(t.dec(),t).isOne()}(t)&&!!await async function(t,e,r){const i=await O.getBigInteger(),n=t.bitLength();e||(e=Math.max(1,n/48|0));const s=t.dec();let a=0;for(;!s.getBit(a);)a++;const o=t.rightShift(new i(a));for(;e>0;e--){let e,n=(r?r():await Be(new i(2),s)).modExp(o,t);if(!n.isOne()&&!n.equal(s)){for(e=1;e<a;e++){if(n=n.mul(n).mod(t),n.isOne())return!1;if(n.equal(s))break}if(e===a)return!1}}return!0}(t,r)))}const Ue=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999];const Me=[];function xe(t,e){const r=t.length;if(r>e-11)throw Error("Message too long");const i=function(t){const e=new Uint8Array(t);let r=0;for(;r<t;){const i=Ce(t-r);for(let t=0;t<i.length;t++)0!==i[t]&&(e[r++]=i[t])}return e}(e-r-3),n=new Uint8Array(e);return n[1]=2,n.set(i,2),n.set(t,e-r),n}function Qe(t,e){let r=2,i=1;for(let e=r;e<t.length;e++)i&=0!==t[e],r+=i;const n=r-2,s=t.subarray(r+1),a=0===t[0]&2===t[1]&n>=8&!i;if(e)return O.selectUint8Array(a,s,e);if(a)return s;throw Error("Decryption error")}async function Re(t,e,r){let i;if(e.length!==kt.getHashByteLength(t))throw Error("Invalid hash length");const n=new Uint8Array(Me[t].length);for(i=0;i<Me[t].length;i++)n[i]=Me[t][i];const s=n.length+e.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(e,r-e.length),o}Me[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Me[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Me[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Me[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Me[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Me[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Me[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var _e=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Qe,emeEncode:xe,emsaEncode:Re});const Te=O.getWebCrypto(),Le=O.getNodeCrypto();async function Ne(t,e,r,i,n,s){const a=await O.getBigInteger(),o=new a(i),c=new a(n),h=new a(r);let u=h.mod(c.dec()),l=h.mod(o.dec());return l=l.toUint8Array(),u=u.toUint8Array(),{kty:"RSA",n:V(t,!0),e:V(e,!0),d:V(r,!0),p:V(n,!0),q:V(i,!0),dp:V(u,!0),dq:V(l,!0),qi:V(s,!0),ext:!0}}function Oe(t,e){return{kty:"RSA",n:V(t,!0),e:V(e,!0),ext:!0}}function Fe(t,e){return{n:j(t.n),e:e.toUint8Array(),d:j(t.d),p:j(t.q),q:j(t.p),u:j(t.qi)}}var He=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n,s,a,o){if(O.getNodeCrypto()&&!o)try{return await async function(t,e,r,i,n,s,a){const o=await Ne(e,r,i,n,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Le.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Le.privateDecrypt(c,t))}catch(t){throw Error("Decryption error")}}(t,e,r,i,n,s,a)}catch(t){O.printDebugError(t)}return async function(t,e,r,i,n,s,a,o){const c=await O.getBigInteger();if(t=new c(t),e=new c(e),r=new c(r),i=new c(i),n=new c(n),s=new c(s),a=new c(a),t.gte(e))throw Error("Data too large.");const h=i.mod(s.dec()),u=i.mod(n.dec()),l=(await Be(new c(2),e)).mod(e),f=l.modInv(e).modExp(r,e);t=t.mul(f).mod(e);const y=t.modExp(u,n),d=t.modExp(h,s),p=a.mul(d.sub(y)).mod(s);let g=p.mul(n).add(y);return g=g.mul(l).mod(e),Qe(g.toUint8Array("be",e.byteLength()),o)}(t,e,r,i,n,s,a,o)},encrypt:async function(t,e,r){return O.getNodeCrypto()?async function(t,e,r){const i=Oe(e,r),n={key:i,format:"jwk",type:"pkcs1",padding:Le.constants.RSA_PKCS1_PADDING};return new Uint8Array(Le.publicEncrypt(n,t))}(t,e,r):async function(t,e,r){const i=await O.getBigInteger();if(e=new i(e),t=new i(xe(t,e.byteLength())),r=new i(r),t.gte(e))throw Error("Message size cannot exceed modulus size");return t.modExp(r,e).toUint8Array("be",e.byteLength())}(t,e,r)},generate:async function(t,e){if(e=new(await O.getBigInteger())(e),O.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:t,publicExponent:e.toUint8Array(),hash:{name:"SHA-1"}},i=await Te.generateKey(r,!0,["sign","verify"]);return Fe(await Te.exportKey("jwk",i.privateKey),e)}if(O.getNodeCrypto()){const r={modulusLength:t,publicExponent:e.toNumber(),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},i=await new Promise(((t,e)=>{Le.generateKeyPair("rsa",r,((r,i,n)=>{r?e(r):t(n)}))}));return Fe(i,e)}let r,i,n;do{i=await Pe(t-(t>>1),e,40),r=await Pe(t>>1,e,40),n=r.mul(i)}while(n.bitLength()!==t);const s=r.dec().imul(i.dec());return i.lt(r)&&([r,i]=[i,r]),{n:n.toUint8Array(),e:e.toUint8Array(),d:e.modInv(s).toUint8Array(),p:r.toUint8Array(),q:i.toUint8Array(),u:r.modInv(i).toUint8Array()}},sign:async function(t,e,r,i,n,s,a,o,c){if(e&&!O.isStream(e))if(O.getWebCrypto())try{return await async function(t,e,r,i,n,s,a,o){const c=await Ne(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:t}},u=await Te.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await Te.sign("RSASSA-PKCS1-v1_5",u,e))}(T.read(T.webHash,t),e,r,i,n,s,a,o)}catch(t){O.printDebugError(t)}else if(O.getNodeCrypto())return async function(t,e,r,i,n,s,a,o){const c=Le.createSign(T.read(T.hash,t));c.write(e),c.end();const h=await Ne(r,i,n,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(t,e,r,i,n,s,a,o);return async function(t,e,r,i){const n=await O.getBigInteger();e=new n(e);const s=new n(await Re(t,i,e.byteLength()));if(r=new n(r),s.gte(e))throw Error("Message size cannot exceed modulus size");return s.modExp(r,e).toUint8Array("be",e.byteLength())}(t,r,n,c)},validateParams:async function(t,e,r,i,n,s){const a=await O.getBigInteger();if(t=new a(t),i=new a(i),n=new a(n),!i.mul(n).equal(t))return!1;const o=new a(2);if(s=new a(s),!i.mul(s).mod(n).isOne())return!1;e=new a(e),r=new a(r);const c=new a(Math.floor(t.bitLength()/3)),h=await Be(o,o.leftShift(c)),u=h.mul(r).mul(e);return!(!u.mod(i.dec()).equal(h)||!u.mod(n.dec()).equal(h))},verify:async function(t,e,r,i,n,s){if(e&&!O.isStream(e))if(O.getWebCrypto())try{return await async function(t,e,r,i,n){const s=Oe(i,n),a=await Te.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:t}},!1,["verify"]);return Te.verify("RSASSA-PKCS1-v1_5",a,r,e)}(T.read(T.webHash,t),e,r,i,n)}catch(t){O.printDebugError(t)}else if(O.getNodeCrypto())return async function(t,e,r,i,n){const s=Oe(i,n),a={key:s,format:"jwk",type:"pkcs1"},o=Le.createVerify(T.read(T.hash,t));o.write(e),o.end();try{return await o.verify(a,r)}catch(t){return!1}}(t,e,r,i,n);return async function(t,e,r,i,n){const s=await O.getBigInteger();if(r=new s(r),e=new s(e),i=new s(i),e.gte(r))throw Error("Signature size cannot exceed modulus size");const a=e.modExp(i,r).toUint8Array("be",r.byteLength()),o=await Re(t,n,r.byteLength());return O.equalsUint8Array(a,o)}(t,r,i,n,s)}});var ze=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n){const s=await O.getBigInteger();return t=new s(t),e=new s(e),r=new s(r),i=new s(i),Qe(t.modExp(i,r).modInv(r).imul(e).imod(r).toUint8Array("be",r.byteLength()),n)},encrypt:async function(t,e,r,i){const n=await O.getBigInteger();e=new n(e),r=new n(r),i=new n(i);const s=new n(xe(t,e.byteLength())),a=await Be(new n(1),e.dec());return{c1:r.modExp(a,e).toUint8Array(),c2:i.modExp(a,e).imul(s).imod(e).toUint8Array()}},validateParams:async function(t,e,r,i){const n=await O.getBigInteger();t=new n(t),e=new n(e),r=new n(r);const s=new n(1);if(e.lte(s)||e.gte(t))return!1;const a=new n(t.bitLength()),o=new n(1023);if(a.lt(o))return!1;if(!e.modExp(t.dec(),t).isOne())return!1;let c=e;const h=new n(1),u=new n(2).leftShift(new n(17));for(;h.lt(u);){if(c=c.mul(e).imod(t),c.isOne())return!1;h.iinc()}i=new n(i);const l=new n(2),f=await Be(l.leftShift(a.dec()),l.leftShift(a)),y=t.dec().imul(f).iadd(i);return!!r.equal(e.modExp(y,t))}});const Ge=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0,qe={};var je=function(t){var e,r=new Float64Array(16);if(t)for(e=0;e<t.length;e++)r[e]=t[e];return r},Ve=function(){throw Error("no PRNG")},Ze=new Uint8Array(32);Ze[0]=9;var Je=je(),Ye=je([1]),We=je([56129,1]),$e=je([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),Xe=je([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),tr=je([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),er=je([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),rr=je([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function ir(t,e,r,i){t[e]=r>>24&255,t[e+1]=r>>16&255,t[e+2]=r>>8&255,t[e+3]=255&r,t[e+4]=i>>24&255,t[e+5]=i>>16&255,t[e+6]=i>>8&255,t[e+7]=255&i}function nr(t,e,r,i){return function(t,e,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=t[e+s]^r[i+s];return(1&a-1>>>8)-1}(t,e,r,i,32)}function sr(t,e){var r;for(r=0;r<16;r++)t[r]=0|e[r]}function ar(t){var e,r,i=1;for(e=0;e<16;e++)r=t[e]+i+65535,i=Math.floor(r/65536),t[e]=r-65536*i;t[0]+=i-1+37*(i-1)}function or(t,e,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(t[s]^e[s]),t[s]^=i,e[s]^=i}function cr(t,e){var r,i,n,s=je(),a=je();for(r=0;r<16;r++)a[r]=e[r];for(ar(a),ar(a),ar(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,or(a,s,1-n)}for(r=0;r<16;r++)t[2*r]=255&a[r],t[2*r+1]=a[r]>>8}function hr(t,e){var r=new Uint8Array(32),i=new Uint8Array(32);return cr(r,t),cr(i,e),nr(r,0,i,0)}function ur(t){var e=new Uint8Array(32);return cr(e,t),1&e[0]}function lr(t,e){var r;for(r=0;r<16;r++)t[r]=e[2*r]+(e[2*r+1]<<8);t[15]&=32767}function fr(t,e,r){for(var i=0;i<16;i++)t[i]=e[i]+r[i]}function yr(t,e,r){for(var i=0;i<16;i++)t[i]=e[i]-r[i]}function dr(t,e,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,f=0,y=0,d=0,p=0,g=0,m=0,w=0,A=0,b=0,v=0,E=0,k=0,S=0,I=0,C=0,B=0,K=0,P=0,D=0,U=0,M=0,x=0,Q=0,R=0,_=r[0],T=r[1],L=r[2],N=r[3],O=r[4],F=r[5],H=r[6],z=r[7],G=r[8],q=r[9],j=r[10],V=r[11],Z=r[12],J=r[13],Y=r[14],W=r[15];s+=(i=e[0])*_,a+=i*T,o+=i*L,c+=i*N,h+=i*O,u+=i*F,l+=i*H,f+=i*z,y+=i*G,d+=i*q,p+=i*j,g+=i*V,m+=i*Z,w+=i*J,A+=i*Y,b+=i*W,a+=(i=e[1])*_,o+=i*T,c+=i*L,h+=i*N,u+=i*O,l+=i*F,f+=i*H,y+=i*z,d+=i*G,p+=i*q,g+=i*j,m+=i*V,w+=i*Z,A+=i*J,b+=i*Y,v+=i*W,o+=(i=e[2])*_,c+=i*T,h+=i*L,u+=i*N,l+=i*O,f+=i*F,y+=i*H,d+=i*z,p+=i*G,g+=i*q,m+=i*j,w+=i*V,A+=i*Z,b+=i*J,v+=i*Y,E+=i*W,c+=(i=e[3])*_,h+=i*T,u+=i*L,l+=i*N,f+=i*O,y+=i*F,d+=i*H,p+=i*z,g+=i*G,m+=i*q,w+=i*j,A+=i*V,b+=i*Z,v+=i*J,E+=i*Y,k+=i*W,h+=(i=e[4])*_,u+=i*T,l+=i*L,f+=i*N,y+=i*O,d+=i*F,p+=i*H,g+=i*z,m+=i*G,w+=i*q,A+=i*j,b+=i*V,v+=i*Z,E+=i*J,k+=i*Y,S+=i*W,u+=(i=e[5])*_,l+=i*T,f+=i*L,y+=i*N,d+=i*O,p+=i*F,g+=i*H,m+=i*z,w+=i*G,A+=i*q,b+=i*j,v+=i*V,E+=i*Z,k+=i*J,S+=i*Y,I+=i*W,l+=(i=e[6])*_,f+=i*T,y+=i*L,d+=i*N,p+=i*O,g+=i*F,m+=i*H,w+=i*z,A+=i*G,b+=i*q,v+=i*j,E+=i*V,k+=i*Z,S+=i*J,I+=i*Y,C+=i*W,f+=(i=e[7])*_,y+=i*T,d+=i*L,p+=i*N,g+=i*O,m+=i*F,w+=i*H,A+=i*z,b+=i*G,v+=i*q,E+=i*j,k+=i*V,S+=i*Z,I+=i*J,C+=i*Y,B+=i*W,y+=(i=e[8])*_,d+=i*T,p+=i*L,g+=i*N,m+=i*O,w+=i*F,A+=i*H,b+=i*z,v+=i*G,E+=i*q,k+=i*j,S+=i*V,I+=i*Z,C+=i*J,B+=i*Y,K+=i*W,d+=(i=e[9])*_,p+=i*T,g+=i*L,m+=i*N,w+=i*O,A+=i*F,b+=i*H,v+=i*z,E+=i*G,k+=i*q,S+=i*j,I+=i*V,C+=i*Z,B+=i*J,K+=i*Y,P+=i*W,p+=(i=e[10])*_,g+=i*T,m+=i*L,w+=i*N,A+=i*O,b+=i*F,v+=i*H,E+=i*z,k+=i*G,S+=i*q,I+=i*j,C+=i*V,B+=i*Z,K+=i*J,P+=i*Y,D+=i*W,g+=(i=e[11])*_,m+=i*T,w+=i*L,A+=i*N,b+=i*O,v+=i*F,E+=i*H,k+=i*z,S+=i*G,I+=i*q,C+=i*j,B+=i*V,K+=i*Z,P+=i*J,D+=i*Y,U+=i*W,m+=(i=e[12])*_,w+=i*T,A+=i*L,b+=i*N,v+=i*O,E+=i*F,k+=i*H,S+=i*z,I+=i*G,C+=i*q,B+=i*j,K+=i*V,P+=i*Z,D+=i*J,U+=i*Y,M+=i*W,w+=(i=e[13])*_,A+=i*T,b+=i*L,v+=i*N,E+=i*O,k+=i*F,S+=i*H,I+=i*z,C+=i*G,B+=i*q,K+=i*j,P+=i*V,D+=i*Z,U+=i*J,M+=i*Y,x+=i*W,A+=(i=e[14])*_,b+=i*T,v+=i*L,E+=i*N,k+=i*O,S+=i*F,I+=i*H,C+=i*z,B+=i*G,K+=i*q,P+=i*j,D+=i*V,U+=i*Z,M+=i*J,x+=i*Y,Q+=i*W,b+=(i=e[15])*_,a+=38*(E+=i*L),o+=38*(k+=i*N),c+=38*(S+=i*O),h+=38*(I+=i*F),u+=38*(C+=i*H),l+=38*(B+=i*z),f+=38*(K+=i*G),y+=38*(P+=i*q),d+=38*(D+=i*j),p+=38*(U+=i*V),g+=38*(M+=i*Z),m+=38*(x+=i*J),w+=38*(Q+=i*Y),A+=38*(R+=i*W),s=(i=(s+=38*(v+=i*T))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),t[0]=s,t[1]=a,t[2]=o,t[3]=c,t[4]=h,t[5]=u,t[6]=l,t[7]=f,t[8]=y,t[9]=d,t[10]=p,t[11]=g,t[12]=m,t[13]=w,t[14]=A,t[15]=b}function pr(t,e){dr(t,e,e)}function gr(t,e){var r,i=je();for(r=0;r<16;r++)i[r]=e[r];for(r=253;r>=0;r--)pr(i,i),2!==r&&4!==r&&dr(i,i,e);for(r=0;r<16;r++)t[r]=i[r]}function mr(t,e,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=je(),c=je(),h=je(),u=je(),l=je(),f=je();for(n=0;n<31;n++)s[n]=e[n];for(s[31]=127&e[31]|64,s[0]&=248,lr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)or(o,c,i=s[n>>>3]>>>(7&n)&1),or(h,u,i),fr(l,o,h),yr(o,o,h),fr(h,c,u),yr(c,c,u),pr(u,l),pr(f,o),dr(o,h,o),dr(h,c,l),fr(l,o,h),yr(o,o,h),pr(c,o),yr(h,u,f),dr(o,h,We),fr(o,o,u),dr(h,h,o),dr(o,u,f),dr(u,c,a),pr(c,l),or(o,c,i),or(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var y=a.subarray(32),d=a.subarray(16);return gr(y,y),dr(d,d,y),cr(t,d),0}function wr(t,e){return mr(t,e,Ze)}var Ar=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function br(t,e,r,i){for(var n,s,a,o,c,h,u,l,f,y,d,p,g,m,w,A,b,v,E,k,S,I,C,B,K,P,D=new Int32Array(16),U=new Int32Array(16),M=t[0],x=t[1],Q=t[2],R=t[3],_=t[4],T=t[5],L=t[6],N=t[7],O=e[0],F=e[1],H=e[2],z=e[3],G=e[4],q=e[5],j=e[6],V=e[7],Z=0;i>=128;){for(E=0;E<16;E++)k=8*E+Z,D[E]=r[k+0]<<24|r[k+1]<<16|r[k+2]<<8|r[k+3],U[E]=r[k+4]<<24|r[k+5]<<16|r[k+6]<<8|r[k+7];for(E=0;E<80;E++)if(n=M,s=x,a=Q,o=R,c=_,h=T,u=L,N,f=O,y=F,d=H,p=z,g=G,m=q,w=j,V,C=65535&(I=V),B=I>>>16,K=65535&(S=N),P=S>>>16,C+=65535&(I=(G>>>14|_<<18)^(G>>>18|_<<14)^(_>>>9|G<<23)),B+=I>>>16,K+=65535&(S=(_>>>14|G<<18)^(_>>>18|G<<14)^(G>>>9|_<<23)),P+=S>>>16,C+=65535&(I=G&q^~G&j),B+=I>>>16,K+=65535&(S=_&T^~_&L),P+=S>>>16,S=Ar[2*E],C+=65535&(I=Ar[2*E+1]),B+=I>>>16,K+=65535&S,P+=S>>>16,S=D[E%16],B+=(I=U[E%16])>>>16,K+=65535&S,P+=S>>>16,K+=(B+=(C+=65535&I)>>>16)>>>16,C=65535&(I=v=65535&C|B<<16),B=I>>>16,K=65535&(S=b=65535&K|(P+=K>>>16)<<16),P=S>>>16,C+=65535&(I=(O>>>28|M<<4)^(M>>>2|O<<30)^(M>>>7|O<<25)),B+=I>>>16,K+=65535&(S=(M>>>28|O<<4)^(O>>>2|M<<30)^(O>>>7|M<<25)),P+=S>>>16,B+=(I=O&F^O&H^F&H)>>>16,K+=65535&(S=M&x^M&Q^x&Q),P+=S>>>16,l=65535&(K+=(B+=(C+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,A=65535&C|B<<16,C=65535&(I=p),B=I>>>16,K=65535&(S=o),P=S>>>16,B+=(I=v)>>>16,K+=65535&(S=b),P+=S>>>16,x=n,Q=s,R=a,_=o=65535&(K+=(B+=(C+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,T=c,L=h,N=u,M=l,F=f,H=y,z=d,G=p=65535&C|B<<16,q=g,j=m,V=w,O=A,E%16==15)for(k=0;k<16;k++)S=D[k],C=65535&(I=U[k]),B=I>>>16,K=65535&S,P=S>>>16,S=D[(k+9)%16],C+=65535&(I=U[(k+9)%16]),B+=I>>>16,K+=65535&S,P+=S>>>16,b=D[(k+1)%16],C+=65535&(I=((v=U[(k+1)%16])>>>1|b<<31)^(v>>>8|b<<24)^(v>>>7|b<<25)),B+=I>>>16,K+=65535&(S=(b>>>1|v<<31)^(b>>>8|v<<24)^b>>>7),P+=S>>>16,b=D[(k+14)%16],B+=(I=((v=U[(k+14)%16])>>>19|b<<13)^(b>>>29|v<<3)^(v>>>6|b<<26))>>>16,K+=65535&(S=(b>>>19|v<<13)^(v>>>29|b<<3)^b>>>6),P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,D[k]=65535&K|P<<16,U[k]=65535&C|B<<16;C=65535&(I=O),B=I>>>16,K=65535&(S=M),P=S>>>16,S=t[0],B+=(I=e[0])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[0]=M=65535&K|P<<16,e[0]=O=65535&C|B<<16,C=65535&(I=F),B=I>>>16,K=65535&(S=x),P=S>>>16,S=t[1],B+=(I=e[1])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[1]=x=65535&K|P<<16,e[1]=F=65535&C|B<<16,C=65535&(I=H),B=I>>>16,K=65535&(S=Q),P=S>>>16,S=t[2],B+=(I=e[2])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[2]=Q=65535&K|P<<16,e[2]=H=65535&C|B<<16,C=65535&(I=z),B=I>>>16,K=65535&(S=R),P=S>>>16,S=t[3],B+=(I=e[3])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[3]=R=65535&K|P<<16,e[3]=z=65535&C|B<<16,C=65535&(I=G),B=I>>>16,K=65535&(S=_),P=S>>>16,S=t[4],B+=(I=e[4])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[4]=_=65535&K|P<<16,e[4]=G=65535&C|B<<16,C=65535&(I=q),B=I>>>16,K=65535&(S=T),P=S>>>16,S=t[5],B+=(I=e[5])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[5]=T=65535&K|P<<16,e[5]=q=65535&C|B<<16,C=65535&(I=j),B=I>>>16,K=65535&(S=L),P=S>>>16,S=t[6],B+=(I=e[6])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[6]=L=65535&K|P<<16,e[6]=j=65535&C|B<<16,C=65535&(I=V),B=I>>>16,K=65535&(S=N),P=S>>>16,S=t[7],B+=(I=e[7])>>>16,K+=65535&S,P+=S>>>16,P+=(K+=(B+=(C+=65535&I)>>>16)>>>16)>>>16,t[7]=N=65535&K|P<<16,e[7]=V=65535&C|B<<16,Z+=128,i-=128}return i}function vr(t,e,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,br(n,s,e,r),r%=128,i=0;i<r;i++)a[i]=e[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,ir(a,r-8,o/536870912|0,o<<3),br(n,s,a,r),i=0;i<8;i++)ir(t,8*i,n[i],s[i]);return 0}function Er(t,e){var r=je(),i=je(),n=je(),s=je(),a=je(),o=je(),c=je(),h=je(),u=je();yr(r,t[1],t[0]),yr(u,e[1],e[0]),dr(r,r,u),fr(i,t[0],t[1]),fr(u,e[0],e[1]),dr(i,i,u),dr(n,t[3],e[3]),dr(n,n,Xe),dr(s,t[2],e[2]),fr(s,s,s),yr(a,i,r),yr(o,s,n),fr(c,s,n),fr(h,i,r),dr(t[0],a,o),dr(t[1],h,c),dr(t[2],c,o),dr(t[3],a,h)}function kr(t,e,r){var i;for(i=0;i<4;i++)or(t[i],e[i],r)}function Sr(t,e){var r=je(),i=je(),n=je();gr(n,e[2]),dr(r,e[0],n),dr(i,e[1],n),cr(t,i),t[31]^=ur(r)<<7}function Ir(t,e,r){var i,n;for(sr(t[0],Je),sr(t[1],Ye),sr(t[2],Ye),sr(t[3],Je),n=255;n>=0;--n)kr(t,e,i=r[n/8|0]>>(7&n)&1),Er(e,t),Er(t,t),kr(t,e,i)}function Cr(t,e){var r=[je(),je(),je(),je()];sr(r[0],tr),sr(r[1],er),sr(r[2],Ye),dr(r[3],tr,er),Ir(t,r,e)}function Br(t,e,r){var i,n=new Uint8Array(64),s=[je(),je(),je(),je()];for(r||Ve(e,32),vr(n,e,32),n[0]&=248,n[31]&=127,n[31]|=64,Cr(s,n),Sr(t,s),i=0;i<32;i++)e[i+32]=t[i];return 0}var Kr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function Pr(t,e){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)e[n]+=r-16*e[i]*Kr[n-(i-32)],r=Math.floor((e[n]+128)/256),e[n]-=256*r;e[n]+=r,e[i]=0}for(r=0,n=0;n<32;n++)e[n]+=r-(e[31]>>4)*Kr[n],r=e[n]>>8,e[n]&=255;for(n=0;n<32;n++)e[n]-=r*Kr[n];for(i=0;i<32;i++)e[i+1]+=e[i]>>8,t[i]=255&e[i]}function Dr(t){var e,r=new Float64Array(64);for(e=0;e<64;e++)r[e]=t[e];for(e=0;e<64;e++)t[e]=0;Pr(t,r)}function Ur(t,e){var r=je(),i=je(),n=je(),s=je(),a=je(),o=je(),c=je();return sr(t[2],Ye),lr(t[1],e),pr(n,t[1]),dr(s,n,$e),yr(n,n,t[2]),fr(s,t[2],s),pr(a,s),pr(o,a),dr(c,o,a),dr(r,c,n),dr(r,r,s),function(t,e){var r,i=je();for(r=0;r<16;r++)i[r]=e[r];for(r=250;r>=0;r--)pr(i,i),1!==r&&dr(i,i,e);for(r=0;r<16;r++)t[r]=i[r]}(r,r),dr(r,r,n),dr(r,r,s),dr(r,r,s),dr(t[0],r,s),pr(i,t[0]),dr(i,i,s),hr(i,n)&&dr(t[0],t[0],rr),pr(i,t[0]),dr(i,i,s),hr(i,n)?-1:(ur(t[0])===e[31]>>7&&yr(t[0],Je,t[0]),dr(t[3],t[0],t[1]),0)}var Mr=64;function xr(){for(var t=0;t<arguments.length;t++)if(!(arguments[t]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}qe.scalarMult=function(t,e){if(xr(t,e),32!==t.length)throw Error("bad n size");if(32!==e.length)throw Error("bad p size");var r=new Uint8Array(32);return mr(r,t,e),r},qe.box={},qe.box.keyPair=function(){var t=new Uint8Array(32),e=new Uint8Array(32);return function(t,e){Ve(e,32),wr(t,e)}(t,e),{publicKey:t,secretKey:e}},qe.box.keyPair.fromSecretKey=function(t){if(xr(t),32!==t.length)throw Error("bad secret key size");var e=new Uint8Array(32);return wr(e,t),{publicKey:e,secretKey:new Uint8Array(t)}},qe.sign=function(t,e){if(xr(t,e),64!==e.length)throw Error("bad secret key size");var r=new Uint8Array(Mr+t.length);return function(t,e,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[je(),je(),je(),je()];vr(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)t[64+n]=e[n];for(n=0;n<32;n++)t[32+n]=a[32+n];for(vr(c,t.subarray(32),r+32),Dr(c),Cr(u,c),Sr(t,u),n=32;n<64;n++)t[n]=i[n];for(vr(o,t,r+64),Dr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];Pr(t.subarray(32),h)}(r,t,t.length,e),r},qe.sign.detached=function(t,e){for(var r=qe.sign(t,e),i=new Uint8Array(Mr),n=0;n<i.length;n++)i[n]=r[n];return i},qe.sign.detached.verify=function(t,e,r){if(xr(t,e,r),e.length!==Mr)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array(Mr+t.length),s=new Uint8Array(Mr+t.length);for(i=0;i<Mr;i++)n[i]=e[i];for(i=0;i<t.length;i++)n[i+Mr]=t[i];return function(t,e,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[je(),je(),je(),je()],c=[je(),je(),je(),je()];if(r<64)return-1;if(Ur(c,i))return-1;for(n=0;n<r;n++)t[n]=e[n];for(n=0;n<32;n++)t[n+32]=i[n];if(vr(a,t,r),Dr(a),Ir(o,c,a),Cr(c,e.subarray(32)),Er(o,c),Sr(s,o),r-=64,nr(e,0,s,0)){for(n=0;n<r;n++)t[n]=0;return-1}for(n=0;n<r;n++)t[n]=e[n+64];return r}(s,n,n.length,r)>=0},qe.sign.keyPair=function(){var t=new Uint8Array(32),e=new Uint8Array(64);return Br(t,e),{publicKey:t,secretKey:e}},qe.sign.keyPair.fromSecretKey=function(t){if(xr(t),64!==t.length)throw Error("bad secret key size");for(var e=new Uint8Array(32),r=0;r<e.length;r++)e[r]=t[32+r];return{publicKey:e,secretKey:new Uint8Array(t)}},qe.sign.keyPair.fromSeed=function(t){if(xr(t),32!==t.length)throw Error("bad seed size");for(var e=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=t[i];return Br(e,r,!0),{publicKey:e,secretKey:r}},qe.setPRNG=function(t){Ve=t},function(){if(Ge&&Ge.getRandomValues){qe.setPRNG((function(t,e){var r,i=new Uint8Array(e);for(r=0;r<e;r+=65536)Ge.getRandomValues(i.subarray(r,r+Math.min(e-r,65536)));for(r=0;r<e;r++)t[r]=i[r];!function(t){for(var e=0;e<t.length;e++)t[e]=0}(i)}))}}();const Qr={"2a8648ce3d030107":T.curve.nistP256,"2b81040022":T.curve.nistP384,"2b81040023":T.curve.nistP521,"2b8104000a":T.curve.secp256k1,"2b06010401da470f01":T.curve.ed25519Legacy,"2b060104019755010501":T.curve.curve25519Legacy,"2b2403030208010107":T.curve.brainpoolP256r1,"2b240303020801010b":T.curve.brainpoolP384r1,"2b240303020801010d":T.curve.brainpoolP512r1};class Rr{constructor(t){if(t instanceof Rr)this.oid=t.oid;else if(O.isArray(t)||O.isUint8Array(t)){if(6===(t=new Uint8Array(t))[0]){if(t[1]!==t.length-2)throw Error("Length mismatch in DER encoded oid");t=t.subarray(2)}this.oid=t}else this.oid=""}read(t){if(t.length>=1){const e=t[0];if(t.length>=1+e)return this.oid=t.subarray(1,1+e),1+this.oid.length}throw Error("Invalid oid")}write(){return O.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return O.uint8ArrayToHex(this.oid)}getName(){const t=Qr[this.toHex()];if(!t)throw Error("Unknown curve object identifier.");return t}}function _r(t){let e,r=0;const i=t[0];return i<192?([r]=t,e=1):i<255?(r=(t[0]-192<<8)+t[1]+192,e=2):255===i&&(r=O.readNumber(t.subarray(1,5)),e=5),{len:r,offset:e}}function Tr(t){return t<192?new Uint8Array([t]):t>191&&t<8384?new Uint8Array([192+(t-192>>8),t-192&255]):O.concatUint8Array([new Uint8Array([255]),O.writeNumber(t,4)])}function Lr(t){if(t<0||t>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+t])}function Nr(t){return new Uint8Array([192|t])}function Or(t,e){return O.concatUint8Array([Nr(t),Tr(e)])}function Fr(t){return[T.packet.literalData,T.packet.compressedData,T.packet.symmetricallyEncryptedData,T.packet.symEncryptedIntegrityProtectedData,T.packet.aeadEncryptedData].includes(t)}async function Hr(t,e){const r=Q(t);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,u=-1;u=0,64&a&&(u=1),u?h=63&a:(h=(63&a)>>2,c=3&a);const l=Fr(h);let f,y=null;if(l){if("array"===O.isStream(t)){const t=new ArrayStream;i=R(t),y=t}else{const t=new TransformStream;i=R(t.writable),y=t.readable}n=e({tag:h,packet:y})}else y=[];do{if(u){const t=await r.readByte();if(f=!1,t<192)o=t;else if(t>=192&&t<224)o=(t-192<<8)+await r.readByte()+192;else if(t>223&&t<255){if(o=1<<(31&t),f=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let t=0;for(;;){i&&await i.ready;const{done:e,value:n}=await r.read();if(e){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-t);if(i?await i.write(s):y.push(s),t+=n.length,t>=o){r.unshift(n.subarray(o-t+n.length));break}}}}while(f);const d=await r.peekBytes(l?1/0:2);return i?(await i.ready,await i.close()):(y=O.concatUint8Array(y),await e({tag:h,packet:y})),!d||!d.length}catch(t){if(i)return await i.abort(t),!0;throw t}finally{i&&await n,r.releaseLock()}}class zr extends Error{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,zr),this.name="UnsupportedError"}}class Gr extends zr{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,zr),this.name="UnknownPacketError"}}class qr{constructor(t,e){this.tag=t,this.rawContent=e}write(){return this.rawContent}}const jr=O.getWebCrypto(),Vr=O.getNodeCrypto(),Zr={[T.curve.nistP256]:"P-256",[T.curve.nistP384]:"P-384",[T.curve.nistP521]:"P-521"},Jr=Vr?Vr.getCurves():[],Yr=Vr?{[T.curve.secp256k1]:Jr.includes("secp256k1")?"secp256k1":void 0,[T.curve.nistP256]:Jr.includes("prime256v1")?"prime256v1":void 0,[T.curve.nistP384]:Jr.includes("secp384r1")?"secp384r1":void 0,[T.curve.nistP521]:Jr.includes("secp521r1")?"secp521r1":void 0,[T.curve.ed25519Legacy]:Jr.includes("ED25519")?"ED25519":void 0,[T.curve.curve25519Legacy]:Jr.includes("X25519")?"X25519":void 0,[T.curve.brainpoolP256r1]:Jr.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[T.curve.brainpoolP384r1]:Jr.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[T.curve.brainpoolP512r1]:Jr.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},Wr={[T.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:T.publicKey.ecdsa,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:Yr[T.curve.nistP256],web:Zr[T.curve.nistP256],payloadSize:32,sharedSize:256},[T.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:T.publicKey.ecdsa,hash:T.hash.sha384,cipher:T.symmetric.aes192,node:Yr[T.curve.nistP384],web:Zr[T.curve.nistP384],payloadSize:48,sharedSize:384},[T.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:T.publicKey.ecdsa,hash:T.hash.sha512,cipher:T.symmetric.aes256,node:Yr[T.curve.nistP521],web:Zr[T.curve.nistP521],payloadSize:66,sharedSize:528},[T.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:T.publicKey.ecdsa,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:Yr[T.curve.secp256k1],payloadSize:32},[T.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:T.publicKey.eddsaLegacy,hash:T.hash.sha512,node:!1,payloadSize:32},[T.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:T.publicKey.ecdh,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:!1,payloadSize:32},[T.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:T.publicKey.ecdsa,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:Yr[T.curve.brainpoolP256r1],payloadSize:32},[T.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:T.publicKey.ecdsa,hash:T.hash.sha384,cipher:T.symmetric.aes192,node:Yr[T.curve.brainpoolP384r1],payloadSize:48},[T.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:T.publicKey.ecdsa,hash:T.hash.sha512,cipher:T.symmetric.aes256,node:Yr[T.curve.brainpoolP512r1],payloadSize:64}};class $r{constructor(t){try{this.name=t instanceof Rr?t.getName():T.write(T.curve,t)}catch(t){throw new zr("Unknown curve")}const e=Wr[this.name];this.keyType=e.keyType,this.oid=e.oid,this.hash=e.hash,this.cipher=e.cipher,this.node=e.node,this.web=e.web,this.payloadSize=e.payloadSize,this.sharedSize=e.sharedSize,this.web&&O.getWebCrypto()?this.type="web":this.node&&O.getNodeCrypto()?this.type="node":this.name===T.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===T.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(t){const e=await jr.generateKey({name:"ECDSA",namedCurve:Zr[t]},!0,["sign","verify"]),r=await jr.exportKey("jwk",e.privateKey),i=await jr.exportKey("jwk",e.publicKey);return{publicKey:ei(i),privateKey:j(r.d)}}(this.name)}catch(t){return O.printDebugError("Browser did not support generating ec key "+t.message),ti(this.name)}case"node":return async function(t){const e=Vr.createECDH(Yr[t]);return await e.generateKeys(),{publicKey:new Uint8Array(e.getPublicKey()),privateKey:new Uint8Array(e.getPrivateKey())}}(this.name);case"curve25519Legacy":{const t=Ce(32);t[0]=127&t[0]|64,t[31]&=248;const e=t.slice().reverse(),{publicKey:r}=qe.box.keyPair.fromSecretKey(e);return{publicKey:O.concatUint8Array([new Uint8Array([64]),r]),privateKey:t}}case"ed25519Legacy":{const t=Ce(32),e=qe.sign.keyPair.fromSeed(t);return{publicKey:O.concatUint8Array([new Uint8Array([64]),e.publicKey]),privateKey:t}}default:return ti(this.name)}}}async function Xr(t,e,r,i){const n={[T.curve.nistP256]:!0,[T.curve.nistP384]:!0,[T.curve.nistP521]:!0,[T.curve.secp256k1]:!0,[T.curve.curve25519Legacy]:t===T.publicKey.ecdh,[T.curve.brainpoolP256r1]:!0,[T.curve.brainpoolP384r1]:!0,[T.curve.brainpoolP512r1]:!0},s=e.getName();if(!n[s])return!1;if(s===T.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:t}=qe.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const e=new Uint8Array([64,...t]);return!!O.equalsUint8Array(e,r)}const a=(await O.getNobleCurve(T.publicKey.ecdsa,s)).getPublicKey(i,!1);return!!O.equalsUint8Array(a,r)}async function ti(t){const e=await O.getNobleCurve(T.publicKey.ecdsa,t),r=e.utils.randomPrivateKey();return{publicKey:e.getPublicKey(r,!1),privateKey:r}}function ei(t){const e=j(t.x),r=j(t.y),i=new Uint8Array(e.length+r.length+1);return i[0]=4,i.set(e,1),i.set(r,e.length+1),i}function ri(t,e,r){const i=t,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:e,x:V(n,!0),y:V(s,!0),ext:!0}}function ii(t,e,r,i){const n=ri(t,e,r);return n.d=V(i,!0),n}const ni=O.getWebCrypto(),si=O.getNodeCrypto();async function ai(t,e,r,i,n,s){const a=new $r(t);if(r&&!O.isStream(r)){const t={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(t,e,r,i){const n=t.payloadSize,s=ii(t.payloadSize,Zr[t.name],i.publicKey,i.privateKey),a=await ni.importKey("jwk",s,{name:"ECDSA",namedCurve:Zr[t.name],hash:{name:T.read(T.webHash,t.hash)}},!1,["sign"]),o=new Uint8Array(await ni.sign({name:"ECDSA",namedCurve:Zr[t.name],hash:{name:T.read(T.webHash,e)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,e,r,t)}catch(t){if("nistP521"!==a.name&&("DataError"===t.name||"OperationError"===t.name))throw t;O.printDebugError("Browser did not support signing: "+t.message)}break;case"node":return async function(t,e,r,i){const n=O.nodeRequire("eckey-utils"),s=O.getNodeBuffer(),{privateKey:a}=n.generateDer({curveName:Yr[t.name],privateKey:s.from(i)}),o=si.createSign(T.read(T.hash,e));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=t.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,e,r,n)}}const o=(await O.getNobleCurve(T.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:o.r.toUint8Array("be",a.payloadSize),s:o.s.toUint8Array("be",a.payloadSize)}}async function oi(t,e,r,i,n,s){const a=new $r(t),o=async()=>0===s[0]&&ci(a,r,s.subarray(1),n);if(i&&!O.isStream(i))switch(a.type){case"web":try{const t=await async function(t,e,{r,s:i},n,s){const a=ri(t.payloadSize,Zr[t.name],s),o=await ni.importKey("jwk",a,{name:"ECDSA",namedCurve:Zr[t.name],hash:{name:T.read(T.webHash,t.hash)}},!1,["verify"]),c=O.concatUint8Array([r,i]).buffer;return ni.verify({name:"ECDSA",namedCurve:Zr[t.name],hash:{name:T.read(T.webHash,e)}},o,c,n)}(a,e,r,i,n);return t||o()}catch(t){if("nistP521"!==a.name&&("DataError"===t.name||"OperationError"===t.name))throw t;O.printDebugError("Browser did not support verifying: "+t.message)}break;case"node":{const t=await async function(t,e,{r,s:i},n,s){const a=O.nodeRequire("eckey-utils"),o=O.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:Yr[t.name],publicKey:o.from(s)}),h=si.createVerify(T.read(T.hash,e));h.write(n),h.end();const u=O.concatUint8Array([r,i]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(t){return!1}}(a,e,r,i,n);return t||o()}}return await ci(a,r,s,n)||o()}async function ci(t,e,r,i){return(await O.getNobleCurve(T.publicKey.ecdsa,t.name)).verify(O.concatUint8Array([e.r,e.s]),r,i,{lowS:!1})}var hi=/*#__PURE__*/Object.freeze({__proto__:null,sign:ai,validateParams:async function(t,e,r){const i=new $r(t);if(i.keyType!==T.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=Ce(8),n=T.hash.sha256,s=await kt.digest(n,i);try{const a=await ai(t,n,i,e,r,s);return await oi(t,n,a,i,e,s)}catch(t){return!1}}default:return Xr(T.publicKey.ecdsa,t,e,r)}},verify:oi});var ui=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(t,e,r,i,n,s){if(kt.getHashByteLength(e)<kt.getHashByteLength(T.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=O.concatUint8Array([n,i.subarray(1)]),o=qe.sign.detached(s,a);return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(t,e,r){if(t.getName()!==T.curve.ed25519Legacy)return!1;const{publicKey:i}=qe.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return O.equalsUint8Array(e,n)},verify:async function(t,e,{r,s:i},n,s,a){if(kt.getHashByteLength(e)<kt.getHashByteLength(T.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=O.concatUint8Array([r,i]);return qe.sign.detached.verify(a,o,s.subarray(1))}});function li(t){switch(t){case T.publicKey.ed25519:return 32;case T.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function fi(t){switch(t){case T.publicKey.ed25519:return T.hash.sha256;case T.publicKey.ed448:return T.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var yi=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(t){switch(t){case T.publicKey.ed25519:{const e=Ce(li(t)),{publicKey:r}=qe.sign.keyPair.fromSeed(e);return{A:r,seed:e}}case T.publicKey.ed448:{const t=await O.getNobleCurve(T.publicKey.ed448),e=t.utils.randomPrivateKey();return{A:t.getPublicKey(e),seed:e}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:li,getPreferredHashAlgo:fi,sign:async function(t,e,r,i,n,s){if(kt.getHashByteLength(e)<kt.getHashByteLength(fi(t)))throw Error("Hash algorithm too weak for EdDSA.");switch(t){case T.publicKey.ed25519:{const t=O.concatUint8Array([n,i]);return{RS:qe.sign.detached(s,t)}}case T.publicKey.ed448:return{RS:(await O.getNobleCurve(T.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(t,e,r){switch(t){case T.publicKey.ed25519:{const{publicKey:t}=qe.sign.keyPair.fromSeed(r);return O.equalsUint8Array(e,t)}case T.publicKey.ed448:{const t=(await O.getNobleCurve(T.publicKey.ed448)).getPublicKey(r);return O.equalsUint8Array(e,t)}default:return!1}},verify:async function(t,e,{RS:r},i,n,s){if(kt.getHashByteLength(e)<kt.getHashByteLength(fi(t)))throw Error("Hash algorithm too weak for EdDSA.");switch(t){case T.publicKey.ed25519:return qe.sign.detached.verify(s,r,n);case T.publicKey.ed448:return(await O.getNobleCurve(T.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});const di=O.getWebCrypto();async function pi(t,e,r){const{keySize:i}=at(t);if(!O.isAES(t)||e.length!==i)throw Error("Unexpected algorithm or key size");try{const t=await di.importKey("raw",e,{name:"AES-KW"},!1,["wrapKey"]),i=await di.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),n=await di.wrapKey("raw",i,t,{name:"AES-KW"});return new Uint8Array(n)}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return function(t,e,r){const i=new zt(e,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=mi(r);let a=n;const o=s,c=s.length/2,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let t=0;t<=5;++t)for(let e=0;e<c;++e)h[1]=c*t+(1+e),u[0]=a[0],u[1]=a[1],u[2]=o[2*e],u[3]=o[2*e+1],u=mi(i.encrypt(wi(u))),a=u.subarray(0,2),a[0]^=h[0],a[1]^=h[1],o[2*e]=u[2],o[2*e+1]=u[3];return wi(a,o)}(0,e,r)}async function gi(t,e,r){const{keySize:i}=at(t);if(!O.isAES(t)||e.length!==i)throw Error("Unexpected algorithm or key size");let n;try{n=await di.importKey("raw",e,{name:"AES-KW"},!1,["unwrapKey"])}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;return O.printDebugError("Browser did not support operation: "+t.message),function(t,e,r){const i=new zt(e,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=mi(r);let a=s.subarray(0,2);const o=s.subarray(2),c=s.length/2-1,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let t=5;t>=0;--t)for(let e=c-1;e>=0;--e)h[1]=c*t+(e+1),u[0]=a[0]^h[0],u[1]=a[1]^h[1],u[2]=o[2*e],u[3]=o[2*e+1],u=mi(i.decrypt(wi(u))),a=u.subarray(0,2),o[2*e]=u[2],o[2*e+1]=u[3];if(a[0]===n[0]&&a[1]===n[1])return wi(o);throw Error("Key Data Integrity failed")}(0,e,r)}try{const t=await di.unwrapKey("raw",r,n,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await di.exportKey("raw",t))}catch(t){if("OperationError"===t.name)throw Error("Key Data Integrity failed");throw t}}function mi(t){const e=t.buffer,r=new DataView(e),i=new Uint32Array(t.length/4);for(let e=0;e<t.length/4;++e)i[e]=r.getUint32(4*e);return i}function wi(){let t=0;for(let e=0;e<arguments.length;++e)t+=4*arguments[e].length;const e=new ArrayBuffer(t),r=new DataView(e);let i=0;for(let t=0;t<arguments.length;++t){for(let e=0;e<arguments[t].length;++e)r.setUint32(i+4*e,arguments[t][e]);i+=4*arguments[t].length}return new Uint8Array(e)}var Ai=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:gi,wrap:pi});function bi(t){const e=8-t.length%8,r=new Uint8Array(t.length+e).fill(e);return r.set(t),r}function vi(t){const e=t.length;if(e>0){const r=t[e-1];if(r>=1){const i=t.subarray(e-r),n=new Uint8Array(r).fill(r);if(O.equalsUint8Array(i,n))return t.subarray(0,e-r)}}throw Error("Invalid padding")}var Ei=/*#__PURE__*/Object.freeze({__proto__:null,decode:vi,encode:bi});const ki=O.getWebCrypto(),Si=O.getNodeCrypto();function Ii(t,e,r,i){return O.concatUint8Array([e.write(),new Uint8Array([t]),r.write(!0),O.stringToUint8Array("Anonymous Sender "),r.replacementFingerprint||i.subarray(0,20)])}async function Ci(t,e,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<e.length&&0===e[a];a++);e=e.subarray(a)}if(s){for(a=e.length-1;a>=0&&0===e[a];a--);e=e.subarray(0,a+1)}return(await kt.digest(t,O.concatUint8Array([new Uint8Array([0,0,0,1]),e,i]))).subarray(0,r)}async function Bi(t,e){switch(t.type){case"curve25519Legacy":{const r=Ce(32),{secretKey:i,sharedKey:n}=await Ki(t,e,null,r);let{publicKey:s}=qe.box.keyPair.fromSecretKey(i);return s=O.concatUint8Array([new Uint8Array([64]),s]),{publicKey:s,sharedKey:n}}case"web":if(t.web&&O.getWebCrypto())try{return await async function(t,e){const r=ri(t.payloadSize,t.web,e);let i=ki.generateKey({name:"ECDH",namedCurve:t.web},!0,["deriveKey","deriveBits"]),n=ki.importKey("jwk",r,{name:"ECDH",namedCurve:t.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=ki.deriveBits({name:"ECDH",namedCurve:t.web,public:n},i.privateKey,t.sharedSize),a=ki.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(ei(a));return{publicKey:c,sharedKey:o}}(t,e)}catch(r){return O.printDebugError(r),Di(t,e)}break;case"node":return async function(t,e){const r=Si.createECDH(t.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(e)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(t,e);default:return Di(t,e)}}async function Ki(t,e,r,i){if(i.length!==t.payloadSize){const e=new Uint8Array(t.payloadSize);e.set(i,t.payloadSize-i.length),i=e}switch(t.type){case"curve25519Legacy":{const t=i.slice().reverse();return{secretKey:t,sharedKey:qe.scalarMult(t,e.subarray(1))}}case"web":if(t.web&&O.getWebCrypto())try{return await async function(t,e,r,i){const n=ii(t.payloadSize,t.web,r,i);let s=ki.importKey("jwk",n,{name:"ECDH",namedCurve:t.web},!0,["deriveKey","deriveBits"]);const a=ri(t.payloadSize,t.web,e);let o=ki.importKey("jwk",a,{name:"ECDH",namedCurve:t.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=ki.deriveBits({name:"ECDH",namedCurve:t.web,public:o},s,t.sharedSize),h=ki.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:j(h.d),sharedKey:u}}(t,e,r,i)}catch(r){return O.printDebugError(r),Pi(t,e,i)}break;case"node":return async function(t,e,r){const i=Si.createECDH(t.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(e));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(t,e,i);default:return Pi(t,e,i)}}async function Pi(t,e,r){return{secretKey:r,sharedKey:(await O.getNobleCurve(T.publicKey.ecdh,t.name)).getSharedSecret(r,e).subarray(1)}}async function Di(t,e){const r=await O.getNobleCurve(T.publicKey.ecdh,t.name),{publicKey:i,privateKey:n}=await t.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,e).subarray(1)}}var Ui=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n,s,a){const o=new $r(t),{sharedKey:c}=await Ki(o,r,n,s),h=Ii(T.publicKey.ecdh,t,e,a),{keySize:u}=at(e.cipher);let l;for(let t=0;t<3;t++)try{const r=await Ci(e.hash,c,u,h,1===t,2===t);return vi(await gi(e.cipher,r,i))}catch(t){l=t}throw l},encrypt:async function(t,e,r,i,n){const s=bi(r),a=new $r(t),{publicKey:o,sharedKey:c}=await Bi(a,i),h=Ii(T.publicKey.ecdh,t,e,n),{keySize:u}=at(e.cipher),l=await Ci(e.hash,c,u,h);return{publicKey:o,wrappedKey:await pi(e.cipher,l,s)}},validateParams:async function(t,e,r){return Xr(T.publicKey.ecdh,t,e,r)}});const Mi=O.getWebCrypto();async function xi(t,e,r,i,n){const s=T.read(T.webHash,t);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Mi.importKey("raw",e,"HKDF",!1,["deriveBits"]),o=await Mi.deriveBits({name:"HKDF",hash:s,salt:r,info:i},a,8*n);return new Uint8Array(o)}const Qi={x25519:O.encodeUTF8("OpenPGP X25519"),x448:O.encodeUTF8("OpenPGP X448")};var Ri=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(t,e,r,i,n){switch(t){case T.publicKey.x25519:{const t=qe.scalarMult(n,e),s=O.concatUint8Array([e,i,t]),a=T.symmetric.aes128,{keySize:o}=at(a);return gi(a,await xi(T.hash.sha256,s,new Uint8Array,Qi.x25519,o),r)}case T.publicKey.x448:{const t=(await O.getNobleCurve(T.publicKey.x448)).getSharedSecret(n,e),s=O.concatUint8Array([e,i,t]),a=T.symmetric.aes256,{keySize:o}=at(T.symmetric.aes256);return gi(a,await xi(T.hash.sha512,s,new Uint8Array,Qi.x448,o),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(t,e,r){switch(t){case T.publicKey.x25519:{const t=Ce(32),i=qe.scalarMult(t,r),{publicKey:n}=qe.box.keyPair.fromSecretKey(t),s=O.concatUint8Array([n,r,i]),a=T.symmetric.aes128,{keySize:o}=at(a),c=await xi(T.hash.sha256,s,new Uint8Array,Qi.x25519,o);return{ephemeralPublicKey:n,wrappedKey:await pi(a,c,e)}}case T.publicKey.x448:{const t=await O.getNobleCurve(T.publicKey.x448),i=t.utils.randomPrivateKey(),n=t.getSharedSecret(i,r),s=t.getPublicKey(i),a=O.concatUint8Array([s,r,n]),o=T.symmetric.aes256,{keySize:c}=at(T.symmetric.aes256),h=await xi(T.hash.sha512,a,new Uint8Array,Qi.x448,c);return{ephemeralPublicKey:s,wrappedKey:await pi(o,h,e)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(t){switch(t){case T.publicKey.x25519:{const t=Ce(32),{publicKey:e}=qe.box.keyPair.fromSecretKey(t);return{A:e,k:t}}case T.publicKey.x448:{const t=await O.getNobleCurve(T.publicKey.x448),e=t.utils.randomPrivateKey();return{A:t.getPublicKey(e),k:e}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(t){switch(t){case T.publicKey.x25519:return 32;case T.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(t,e,r){switch(t){case T.publicKey.x25519:{const{publicKey:t}=qe.box.keyPair.fromSecretKey(r);return O.equalsUint8Array(e,t)}case T.publicKey.x448:{const t=(await O.getNobleCurve(T.publicKey.x448)).getPublicKey(r);return O.equalsUint8Array(e,t)}default:return!1}}}),_i=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:$r,ecdh:Ui,ecdhX:Ri,ecdsa:hi,eddsa:yi,eddsaLegacy:ui,generate:async function(t){const e=new $r(t),{oid:r,hash:i,cipher:n}=e,s=await e.genKeyPair();return{oid:r,Q:s.publicKey,secret:O.leftPad(s.privateKey,e.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(t){return Wr[t.getName()].hash}});var Ti=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(t,e,r,i,n,s){const a=await O.getBigInteger(),o=new a(1);let c,h,u,l;i=new a(i),n=new a(n),r=new a(r),s=new a(s),r=r.mod(i),s=s.mod(n);const f=new a(e.subarray(0,n.byteLength())).mod(n);for(;;){if(c=await Be(o,n),h=r.modExp(c,i).imod(n),h.isZero())continue;const t=s.mul(h).imod(n);if(l=f.add(t).imod(n),u=c.modInv(n).imul(l).imod(n),!u.isZero())break}return{r:h.toUint8Array("be",n.byteLength()),s:u.toUint8Array("be",n.byteLength())}},validateParams:async function(t,e,r,i,n){const s=await O.getBigInteger();t=new s(t),e=new s(e),r=new s(r),i=new s(i);const a=new s(1);if(r.lte(a)||r.gte(t))return!1;if(!t.dec().mod(e).isZero())return!1;if(!r.modExp(e,t).isOne())return!1;const o=new s(e.bitLength()),c=new s(150);if(o.lt(c)||!await De(e,null,32))return!1;n=new s(n);const h=new s(2),u=await Be(h.leftShift(o.dec()),h.leftShift(o)),l=e.mul(u).add(n);return!!i.equal(r.modExp(l,t))},verify:async function(t,e,r,i,n,s,a,o){const c=await O.getBigInteger(),h=new c(0);if(e=new c(e),r=new c(r),s=new c(s),a=new c(a),n=new c(n),o=new c(o),e.lte(h)||e.gte(a)||r.lte(h)||r.gte(a))return O.printDebug("invalid DSA Signature"),!1;const u=new c(i.subarray(0,a.byteLength())).imod(a),l=r.modInv(a);if(l.isZero())return O.printDebug("invalid DSA Signature"),!1;n=n.mod(s),o=o.mod(s);const f=u.mul(l).imod(a),y=e.mul(l).imod(a),d=n.modExp(f,s),p=o.modExp(y,s);return d.mul(p).imod(s).imod(a).equal(e)}});const Li=new Set([T.hash.sha1,T.hash.sha256,T.hash.sha512]),Ni=O.getWebCrypto(),Oi=O.getNodeCrypto();var Fi={rsa:He,elgamal:ze,elliptic:_i,dsa:Ti,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(t){if(!Li.has(t))throw Error("Unsupported hash algorithm.");const e=T.read(T.webHash,t),r=Ni||Oi.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:e}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(t,e,r){if(!Li.has(t))throw Error("Unsupported hash algorithm.");const i=T.read(T.webHash,t),n=Ni||Oi.webcrypto.subtle,s=await n.importKey("raw",e,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(t,e,r,i){if(!Li.has(t))throw Error("Unsupported hash algorithm.");const n=T.read(T.webHash,t),s=Ni||Oi.webcrypto.subtle,a=await s.importKey("raw",e,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class Hi{constructor(t){if(void 0===t&&(t=new Uint8Array([])),!O.isUint8Array(t))throw Error("data must be in the form of a Uint8Array");this.data=t,this.length=this.data.byteLength}write(){return O.concatUint8Array([new Uint8Array([this.length]),this.data])}read(t){if(t.length>=1){const e=t[0];if(t.length>=e+1)return this.data=t.subarray(1,1+e),this.length=e,1+e}throw Error("Invalid octet string")}}var zi=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(t,e){let r=0;switch(t){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.rsaSign:{const t=O.readMPI(e.subarray(r));return r+=t.length+2,{read:r,signatureParams:{s:t}}}case T.publicKey.dsa:case T.publicKey.ecdsa:{const t=O.readMPI(e.subarray(r));r+=t.length+2;const i=O.readMPI(e.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:t,s:i}}}case T.publicKey.eddsaLegacy:{let t=O.readMPI(e.subarray(r));r+=t.length+2,t=O.leftPad(t,32);let i=O.readMPI(e.subarray(r));return r+=i.length+2,i=O.leftPad(i,32),{read:r,signatureParams:{r:t,s:i}}}case T.publicKey.ed25519:case T.publicKey.ed448:{const i=2*Fi.elliptic.eddsa.getPayloadSize(t),n=O.readExactSubarray(e,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case T.publicKey.hmac:{const t=new Hi;return r+=t.read(e.subarray(r)),{read:r,signatureParams:{mac:t}}}default:throw new zr("Unknown signature algorithm.")}},sign:async function(t,e,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(t){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.rsaSign:{const{n:t,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await Fi.rsa.sign(e,n,t,a,o,c,h,u,s)}}case T.publicKey.dsa:{const{g:t,p:n,q:a}=r,{x:o}=i;return Fi.dsa.sign(e,s,t,n,a,o)}case T.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case T.publicKey.ecdsa:{const{oid:t,Q:a}=r,{d:o}=i;return Fi.elliptic.ecdsa.sign(t,e,n,a,o,s)}case T.publicKey.eddsaLegacy:{const{oid:t,Q:a}=r,{seed:o}=i;return Fi.elliptic.eddsaLegacy.sign(t,e,n,a,o,s)}case T.publicKey.ed25519:case T.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return Fi.elliptic.eddsa.sign(t,e,n,a,o,s)}case T.publicKey.hmac:{const{cipher:t}=r,{keyMaterial:e}=i,n=await Fi.hmac.sign(t.getValue(),e,s);return{mac:new Hi(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(t,e,r,i,n,s,a){switch(t){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.rsaSign:{const{n:t,e:n}=i,o=O.leftPad(r.s,t.length);return Fi.rsa.verify(e,s,o,t,n,a)}case T.publicKey.dsa:{const{g:t,p:n,q:s,y:o}=i,{r:c,s:h}=r;return Fi.dsa.verify(e,c,h,a,t,n,s,o)}case T.publicKey.ecdsa:{const{oid:t,Q:n}=i,o=new Fi.elliptic.CurveWithOID(t).payloadSize,c=O.leftPad(r.r,o),h=O.leftPad(r.s,o);return Fi.elliptic.ecdsa.verify(t,e,{r:c,s:h},s,n,a)}case T.publicKey.eddsaLegacy:{const{oid:t,Q:n}=i;return Fi.elliptic.eddsaLegacy.verify(t,e,r,s,n,a)}case T.publicKey.ed25519:case T.publicKey.ed448:{const{A:n}=i;return Fi.elliptic.eddsa.verify(t,e,r,s,n,a)}case T.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:t}=i,{keyMaterial:e}=n;return Fi.hmac.verify(t.getValue(),e,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class Gi{constructor(t){t&&(this.data=t)}read(t){if(t.length>=1){const e=t[0];if(t.length>=1+e)return this.data=t.subarray(1,1+e),1+this.data.length}throw Error("Invalid symmetric key")}write(){return O.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class qi{constructor(t){if(t){const{version:e,hash:r,cipher:i,replacementFingerprint:n}=t;this.version=e||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(t){if(t.length<4||1!==t[1]&&255!==t[1])throw new zr("Cannot read KDFParams");const e=t[0];this.version=t[1],this.hash=t[2],this.cipher=t[3];let r=4;if(255===this.version){const i=e-r+1;this.replacementFingerprint=t.slice(r,r+i),r+=i}return r}write(t){if(!this.version||1===this.version||t)return new Uint8Array([3,1,this.hash,this.cipher]);return O.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const ji=t=>class{constructor(t){this.data=void 0===t?null:t}read(e){const r=e[0];return this.data=T.write(t,r),1}write(){return new Uint8Array([this.data])}getName(){return T.read(t,this.data)}getValue(){return this.data}},Vi=ji(T.aead),Zi=ji(T.symmetric),Ji=ji(T.hash);class Yi{static fromObject({wrappedKey:t,algorithm:e}){const r=new Yi;return r.wrappedKey=t,r.algorithm=e,r}read(t){let e=0,r=t[e++];this.algorithm=r%2?t[e++]:null,r-=r%2,this.wrappedKey=O.readExactSubarray(t,e,e+r),e+=r}write(){return O.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function Wi(t,e){const r=Ce(32);return{privateParams:{hashSeed:r,keyMaterial:t},publicParams:{cipher:e,digest:await kt.sha256(r)}}}function $i(t){const{keySize:e}=at(t);return Ce(e)}function Xi(t){const e=T.read(T.aead,t);return Se[e]}function tn(t){try{t.getName()}catch(t){throw new zr("Unknown curve OID")}}function en(t,e){switch(t){case T.publicKey.ecdsa:case T.publicKey.ecdh:case T.publicKey.eddsaLegacy:return new Fi.elliptic.CurveWithOID(e).payloadSize;case T.publicKey.ed25519:case T.publicKey.ed448:return Fi.elliptic.eddsa.getPayloadSize(t);case T.publicKey.x25519:case T.publicKey.x448:return Fi.elliptic.ecdhX.getPayloadSize(t);default:throw Error("Unknown elliptic algo")}}var rn=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(t,e,r,i){switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:return Fi.rsa.generate(e,65537).then((({n:t,e,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:t,e}})));case T.publicKey.ecdsa:return Fi.elliptic.generate(r).then((({oid:t,Q:e,secret:r})=>({privateParams:{d:r},publicParams:{oid:new Rr(t),Q:e}})));case T.publicKey.eddsaLegacy:return Fi.elliptic.generate(r).then((({oid:t,Q:e,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new Rr(t),Q:e}})));case T.publicKey.ecdh:return Fi.elliptic.generate(r).then((({oid:t,Q:e,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new Rr(t),Q:e,kdfParams:new qi({hash:i,cipher:n})}})));case T.publicKey.ed25519:case T.publicKey.ed448:return Fi.elliptic.eddsa.generate(t).then((({A:t,seed:e})=>({privateParams:{seed:e},publicParams:{A:t}})));case T.publicKey.x25519:case T.publicKey.x448:return Fi.elliptic.ecdhX.generate(t).then((({A:t,k:e})=>({privateParams:{k:e},publicParams:{A:t}})));case T.publicKey.hmac:return Wi(await Fi.hmac.generate(i),new Ji(i));case T.publicKey.aead:return Wi($i(i),new Zi(i));case T.publicKey.dsa:case T.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:$i,getAEADMode:Xi,getCipherParams:at,getCurvePayloadSize:en,getPreferredCurveHashAlgo:function(t,e){switch(t){case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:return Fi.elliptic.getPreferredHashAlgo(e);case T.publicKey.ed25519:case T.publicKey.ed448:return Fi.elliptic.eddsa.getPreferredHashAlgo(t);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(t){const{blockSize:e}=at(t),r=await Ce(e),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return O.concat([r,i])},parseEncSessionKeyParams:function(t,e){let r=0;switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:return{c:O.readMPI(e.subarray(r))};case T.publicKey.elgamal:{const t=O.readMPI(e.subarray(r));r+=t.length+2;return{c1:t,c2:O.readMPI(e.subarray(r))}}case T.publicKey.ecdh:{const t=O.readMPI(e.subarray(r));r+=t.length+2;const i=new Gi;return i.read(e.subarray(r)),{V:t,C:i}}case T.publicKey.x25519:case T.publicKey.x448:{const i=en(t),n=O.readExactSubarray(e,r,r+i);r+=n.length;const s=new Yi;return s.read(e.subarray(r)),{ephemeralPublicKey:n,C:s}}case T.publicKey.aead:{const t=new Vi;r+=t.read(e.subarray(r));const{ivLength:i}=Xi(t.getValue()),n=e.subarray(r,r+i);r+=i;const s=new Hi;return r+=s.read(e.subarray(r)),{aeadMode:t,iv:n,c:s}}default:throw new zr("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(t,e,r){let i=0;switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:{const t=O.readMPI(e.subarray(i));i+=t.length+2;const r=O.readMPI(e.subarray(i));i+=r.length+2;const n=O.readMPI(e.subarray(i));i+=n.length+2;const s=O.readMPI(e.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:t,p:r,q:n,u:s}}}case T.publicKey.dsa:case T.publicKey.elgamal:{const t=O.readMPI(e.subarray(i));return i+=t.length+2,{read:i,privateParams:{x:t}}}case T.publicKey.ecdsa:case T.publicKey.ecdh:{const n=en(t,r.oid);let s=O.readMPI(e.subarray(i));return i+=s.length+2,s=O.leftPad(s,n),{read:i,privateParams:{d:s}}}case T.publicKey.eddsaLegacy:{const n=en(t,r.oid);let s=O.readMPI(e.subarray(i));return i+=s.length+2,s=O.leftPad(s,n),{read:i,privateParams:{seed:s}}}case T.publicKey.ed25519:case T.publicKey.ed448:{const r=en(t),n=O.readExactSubarray(e,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case T.publicKey.x25519:case T.publicKey.x448:{const r=en(t),n=O.readExactSubarray(e,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case T.publicKey.hmac:{const{cipher:t}=r,n=kt.getHashByteLength(t.getValue()),s=e.subarray(i,i+32);i+=32;const a=e.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case T.publicKey.aead:{const{cipher:t}=r,n=e.subarray(i,i+32);i+=32;const{keySize:s}=at(t.getValue()),a=e.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new zr("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(t,e){let r=0;switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:{const t=O.readMPI(e.subarray(r));r+=t.length+2;const i=O.readMPI(e.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:t,e:i}}}case T.publicKey.dsa:{const t=O.readMPI(e.subarray(r));r+=t.length+2;const i=O.readMPI(e.subarray(r));r+=i.length+2;const n=O.readMPI(e.subarray(r));r+=n.length+2;const s=O.readMPI(e.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:t,q:i,g:n,y:s}}}case T.publicKey.elgamal:{const t=O.readMPI(e.subarray(r));r+=t.length+2;const i=O.readMPI(e.subarray(r));r+=i.length+2;const n=O.readMPI(e.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:t,g:i,y:n}}}case T.publicKey.ecdsa:{const t=new Rr;r+=t.read(e),tn(t);const i=O.readMPI(e.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:t,Q:i}}}case T.publicKey.eddsaLegacy:{const t=new Rr;r+=t.read(e),tn(t);let i=O.readMPI(e.subarray(r));return r+=i.length+2,i=O.leftPad(i,33),{read:r,publicParams:{oid:t,Q:i}}}case T.publicKey.ecdh:{const t=new Rr;r+=t.read(e),tn(t);const i=O.readMPI(e.subarray(r));r+=i.length+2;const n=new qi;return r+=n.read(e.subarray(r)),{read:r,publicParams:{oid:t,Q:i,kdfParams:n}}}case T.publicKey.ed25519:case T.publicKey.ed448:case T.publicKey.x25519:case T.publicKey.x448:{const i=O.readExactSubarray(e,r,r+en(t));return r+=i.length,{read:r,publicParams:{A:i}}}case T.publicKey.hmac:case T.publicKey.aead:{const t=new Zi;r+=t.read(e);const i=kt.getHashByteLength(T.hash.sha256),n=e.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:t,digest:n}}}default:throw new zr("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(t,e,r,i,n,s){switch(t){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:{const{c:t}=i,{n,e:a}=e,{d:o,p:c,q:h,u}=r;return Fi.rsa.decrypt(t,n,a,o,c,h,u,s)}case T.publicKey.elgamal:{const{c1:t,c2:n}=i,a=e.p,o=r.x;return Fi.elgamal.decrypt(t,n,a,o,s)}case T.publicKey.ecdh:{const{oid:t,Q:s,kdfParams:a}=e,{d:o}=r,{V:c,C:h}=i;return Fi.elliptic.ecdh.decrypt(t,a,c,h.data,s,o,n)}case T.publicKey.x25519:case T.publicKey.x448:{const{A:n}=e,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!O.isAES(o.algorithm))throw Error("AES session key expected");return Fi.elliptic.ecdhX.decrypt(t,a,o.wrappedKey,n,s)}case T.publicKey.aead:{const{cipher:t}=e,n=t.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=Xi(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(t,e,r,i,n,s){switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:{const{n:t,e}=r;return{c:await Fi.rsa.encrypt(n,t,e)}}case T.publicKey.elgamal:{const{p:t,g:e,y:i}=r;return Fi.elgamal.encrypt(n,t,e,i)}case T.publicKey.ecdh:{const{oid:t,Q:e,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await Fi.elliptic.ecdh.encrypt(t,i,n,e,s);return{V:a,C:new Gi(o)}}case T.publicKey.x25519:case T.publicKey.x448:{if(e&&!O.isAES(e))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await Fi.elliptic.ecdhX.encrypt(t,n,i);return{ephemeralPublicKey:s,C:Yi.fromObject({algorithm:e,wrappedKey:a})}}case T.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:t}=r,e=t.getValue(),{keyMaterial:s}=i,a=L.preferredAEADAlgorithm,o=Xi(L.preferredAEADAlgorithm),{ivLength:c}=o,h=Ce(c),u=await o(e,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new Vi(a),iv:h,c:new Hi(l)}}default:return[]}},serializeParams:function(t,e){const r=new Set([T.publicKey.ed25519,T.publicKey.x25519,T.publicKey.ed448,T.publicKey.x448,T.publicKey.aead,T.publicKey.hmac]),i=Object.keys(e).map((i=>{const n=e[i];return O.isUint8Array(n)?r.has(t)?n:O.uint8ArrayToMPI(n):n.write()}));return O.concatUint8Array(i)},validateParams:async function(t,e,r){if(!e||!r)throw Error("Missing key parameters");switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:{const{n:t,e:i}=e,{d:n,p:s,q:a,u:o}=r;return Fi.rsa.validateParams(t,i,n,s,a,o)}case T.publicKey.dsa:{const{p:t,q:i,g:n,y:s}=e,{x:a}=r;return Fi.dsa.validateParams(t,i,n,s,a)}case T.publicKey.elgamal:{const{p:t,g:i,y:n}=e,{x:s}=r;return Fi.elgamal.validateParams(t,i,n,s)}case T.publicKey.ecdsa:case T.publicKey.ecdh:{const i=Fi.elliptic[T.read(T.publicKey,t)],{oid:n,Q:s}=e,{d:a}=r;return i.validateParams(n,s,a)}case T.publicKey.eddsaLegacy:{const{Q:t,oid:i}=e,{seed:n}=r;return Fi.elliptic.eddsaLegacy.validateParams(i,t,n)}case T.publicKey.ed25519:case T.publicKey.ed448:{const{A:i}=e,{seed:n}=r;return Fi.elliptic.eddsa.validateParams(t,i,n)}case T.publicKey.x25519:case T.publicKey.x448:{const{A:i}=e,{k:n}=r;return Fi.elliptic.ecdhX.validateParams(t,i,n)}case T.publicKey.hmac:{const{cipher:t,digest:i}=e,{hashSeed:n,keyMaterial:s}=r;return kt.getHashByteLength(t.getValue())===s.length&&O.equalsUint8Array(i,await kt.sha256(n))}case T.publicKey.aead:{const{cipher:t,digest:i}=e,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=at(t.getValue());return a===s.length&&O.equalsUint8Array(i,await kt.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const nn={cipher:ot,hash:kt,mode:Se,publicKey:Fi,signature:zi,random:Ke,pkcs1:_e,pkcs5:Ei,aesKW:Ai};Object.assign(nn,rn);class sn extends Error{constructor(...t){super(...t),Error.captureStackTrace&&Error.captureStackTrace(this,sn),this.name="Argon2OutOfMemoryError"}}let an,on,cn=2<<19;class hn{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return cn}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(t){cn=t}static reloadWasmModule(){an&&(on=an(),on.catch((()=>{})))}constructor(t=L){const{passes:e,parallelism:r,memoryExponent:i}=t.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=e,this.p=r,this.encodedM=i}generateSalt(){this.salt=nn.random.getRandomBytes(16)}read(t){let e=0;return this.salt=t.subarray(e,e+16),e+=16,this.t=t[e++],this.p=t[e++],this.encodedM=t[e++],e}write(){const t=[new Uint8Array([T.write(T.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return O.concatUint8Array(t)}async produceKey(t,e){const r=2<<this.encodedM-1;try{an=an||(await Promise.resolve().then((function(){return Pl}))).default,on=on||an();const i=await on,n=i({version:19,type:2,password:O.encodeUTF8(t),salt:this.salt,tagLength:e,memorySize:r,parallelism:this.p,passes:this.t});return r>hn.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&hn.reloadWasmModule(),n}catch(t){throw t.message&&(t.message.includes("Unable to grow instance memory")||t.message.includes("failed to grow memory")||t.message.includes("WebAssembly.Memory.grow")||t.message.includes("Out of memory"))?new sn("Could not allocate required memory for Argon2"):t}}}class un{constructor(t,e=L){this.algorithm=T.hash.sha256,this.type=T.read(T.s2k,t),this.c=e.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=nn.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(t){let e=0;switch(this.algorithm=t[e++],this.type){case"simple":break;case"salted":this.salt=t.subarray(e,e+8),e+=8;break;case"iterated":this.salt=t.subarray(e,e+8),e+=8,this.c=t[e++];break;case"gnu":if("GNU"!==O.uint8ArrayToString(t.subarray(e,e+3)))throw new zr("Unknown s2k type.");e+=3;if(1001!==1e3+t[e++])throw new zr("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new zr("Unknown s2k type.")}return e}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...O.stringToUint8Array("GNU"),1]);const t=[new Uint8Array([T.write(T.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":t.push(this.salt);break;case"iterated":t.push(this.salt),t.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return O.concatUint8Array(t)}async produceKey(t,e){t=O.encodeUTF8(t);const r=[];let i=0,n=0;for(;i<e;){let e;switch(this.type){case"simple":e=O.concatUint8Array([new Uint8Array(n),t]);break;case"salted":e=O.concatUint8Array([new Uint8Array(n),this.salt,t]);break;case"iterated":{const r=O.concatUint8Array([this.salt,t]);let i=r.length;const s=Math.max(this.getCount(),i);e=new Uint8Array(n+s),e.set(r,n);for(let t=n+i;t<s;t+=i,i*=2)e.copyWithin(t,n,t);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await nn.hash.digest(this.algorithm,e);r.push(s),i+=s.length,n++}return O.concatUint8Array(r).subarray(0,e)}}const ln=new Set([T.s2k.argon2,T.s2k.iterated]);function fn(t,e=L){switch(t){case T.s2k.argon2:return new hn(e);case T.s2k.iterated:case T.s2k.gnu:case T.s2k.salted:case T.s2k.simple:return new un(t,e);default:throw new zr("Unsupported S2K type")}}function yn(t){const{s2kType:e}=t;if(!ln.has(e))throw Error("The provided `config.s2kType` value is not allowed");return fn(e,t)}var dn=Uint8Array,pn=Uint16Array,gn=Uint32Array,mn=new dn([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),wn=new dn([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),An=new dn([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),bn=function(t,e){for(var r=new pn(31),i=0;i<31;++i)r[i]=e+=1<<t[i-1];var n=new gn(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},vn=bn(mn,2),En=vn[0],kn=vn[1];En[28]=258,kn[258]=28;for(var Sn=bn(wn,0),In=Sn[0],Cn=Sn[1],Bn=new pn(32768),Kn=0;Kn<32768;++Kn){var Pn=(43690&Kn)>>>1|(21845&Kn)<<1;Pn=(61680&(Pn=(52428&Pn)>>>2|(13107&Pn)<<2))>>>4|(3855&Pn)<<4,Bn[Kn]=((65280&Pn)>>>8|(255&Pn)<<8)>>>1}var Dn=function(t,e,r){for(var i=t.length,n=0,s=new pn(e);n<i;++n)t[n]&&++s[t[n]-1];var a,o=new pn(e);for(n=0;n<e;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new pn(1<<e);var c=15-e;for(n=0;n<i;++n)if(t[n])for(var h=n<<4|t[n],u=e-t[n],l=o[t[n]-1]++<<u,f=l|(1<<u)-1;l<=f;++l)a[Bn[l]>>>c]=h}else for(a=new pn(i),n=0;n<i;++n)t[n]&&(a[n]=Bn[o[t[n]-1]++]>>>15-t[n]);return a},Un=new dn(288);for(Kn=0;Kn<144;++Kn)Un[Kn]=8;for(Kn=144;Kn<256;++Kn)Un[Kn]=9;for(Kn=256;Kn<280;++Kn)Un[Kn]=7;for(Kn=280;Kn<288;++Kn)Un[Kn]=8;var Mn=new dn(32);for(Kn=0;Kn<32;++Kn)Mn[Kn]=5;var xn=/*#__PURE__*/Dn(Un,9,0),Qn=/*#__PURE__*/Dn(Un,9,1),Rn=/*#__PURE__*/Dn(Mn,5,0),_n=/*#__PURE__*/Dn(Mn,5,1),Tn=function(t){for(var e=t[0],r=1;r<t.length;++r)t[r]>e&&(e=t[r]);return e},Ln=function(t,e,r){var i=e/8|0;return(t[i]|t[i+1]<<8)>>(7&e)&r},Nn=function(t,e){var r=e/8|0;return(t[r]|t[r+1]<<8|t[r+2]<<16)>>(7&e)},On=function(t){return(t+7)/8|0},Fn=function(t,e,r){(null==e||e<0)&&(e=0),(null==r||r>t.length)&&(r=t.length);var i=new(2==t.BYTES_PER_ELEMENT?pn:4==t.BYTES_PER_ELEMENT?gn:dn)(r-e);return i.set(t.subarray(e,r)),i},Hn=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],zn=function(t,e,r){var i=Error(e||Hn[t]);if(i.code=t,Error.captureStackTrace&&Error.captureStackTrace(i,zn),!r)throw i;return i},Gn=function(t,e,r){r<<=7&e;var i=e/8|0;t[i]|=r,t[i+1]|=r>>>8},qn=function(t,e,r){r<<=7&e;var i=e/8|0;t[i]|=r,t[i+1]|=r>>>8,t[i+2]|=r>>>16},jn=function(t,e){for(var r=[],i=0;i<t.length;++i)t[i]&&r.push({s:i,f:t[i]});var n=r.length,s=r.slice();if(!n)return[Xn,0];if(1==n){var a=new dn(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(t,e){return t.f-e.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var f=s[0].s;for(i=1;i<n;++i)s[i].s>f&&(f=s[i].s);var y=new pn(f+1),d=Vn(r[u-1],y,0);if(d>e){i=0;var p=0,g=d-e,m=1<<g;for(s.sort((function(t,e){return y[e.s]-y[t.s]||t.f-e.f}));i<n;++i){var w=s[i].s;if(!(y[w]>e))break;p+=m-(1<<d-y[w]),y[w]=e}for(p>>>=g;p>0;){var A=s[i].s;y[A]<e?p-=1<<e-y[A]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;y[b]==e&&(--y[b],++p)}d=e}return[new dn(y),d]},Vn=function(t,e,r){return-1==t.s?Math.max(Vn(t.l,e,r+1),Vn(t.r,e,r+1)):e[t.s]=r},Zn=function(t){for(var e=t.length;e&&!t[--e];);for(var r=new pn(++e),i=0,n=t[0],s=1,a=function(t){r[i++]=t},o=1;o<=e;++o)if(t[o]==n&&o!=e)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=t[o]}return[r.subarray(0,i),e]},Jn=function(t,e){for(var r=0,i=0;i<e.length;++i)r+=t[i]*e[i];return r},Yn=function(t,e,r){var i=r.length,n=On(e+2);t[n]=255&i,t[n+1]=i>>>8,t[n+2]=255^t[n],t[n+3]=255^t[n+1];for(var s=0;s<i;++s)t[n+s+4]=r[s];return 8*(n+4+i)},Wn=function(t,e,r,i,n,s,a,o,c,h,u){Gn(e,u++,r),++n[256];for(var l=jn(n,15),f=l[0],y=l[1],d=jn(s,15),p=d[0],g=d[1],m=Zn(f),w=m[0],A=m[1],b=Zn(p),v=b[0],E=b[1],k=new pn(19),S=0;S<w.length;++S)k[31&w[S]]++;for(S=0;S<v.length;++S)k[31&v[S]]++;for(var I=jn(k,7),C=I[0],B=I[1],K=19;K>4&&!C[An[K-1]];--K);var P,D,U,M,x=h+5<<3,Q=Jn(n,Un)+Jn(s,Mn)+a,R=Jn(n,f)+Jn(s,p)+a+14+3*K+Jn(k,C)+(2*k[16]+3*k[17]+7*k[18]);if(x<=Q&&x<=R)return Yn(e,u,t.subarray(c,c+h));if(Gn(e,u,1+(R<Q)),u+=2,R<Q){P=Dn(f,y,0),D=f,U=Dn(p,g,0),M=p;var _=Dn(C,B,0);Gn(e,u,A-257),Gn(e,u+5,E-1),Gn(e,u+10,K-4),u+=14;for(S=0;S<K;++S)Gn(e,u+3*S,C[An[S]]);u+=3*K;for(var T=[w,v],L=0;L<2;++L){var N=T[L];for(S=0;S<N.length;++S){var O=31&N[S];Gn(e,u,_[O]),u+=C[O],O>15&&(Gn(e,u,N[S]>>>5&127),u+=N[S]>>>12)}}}else P=xn,D=Un,U=Rn,M=Mn;for(S=0;S<o;++S)if(i[S]>255){O=i[S]>>>18&31;qn(e,u,P[O+257]),u+=D[O+257],O>7&&(Gn(e,u,i[S]>>>23&31),u+=mn[O]);var F=31&i[S];qn(e,u,U[F]),u+=M[F],F>3&&(qn(e,u,i[S]>>>5&8191),u+=wn[F])}else qn(e,u,P[i[S]]),u+=D[i[S]];return qn(e,u,P[256]),u+D[256]},$n=/*#__PURE__*/new gn([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),Xn=/*#__PURE__*/new dn(0),ts=function(t,e,r,i,n){return function(t,e,r,i,n,s){var a=t.length,o=new dn(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!e||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=Yn(c,h+1,t.subarray(u,l))}else{for(var f=$n[e-1],y=f>>>13,d=8191&f,p=(1<<r)-1,g=new pn(32768),m=new pn(p+1),w=Math.ceil(r/3),A=2*w,b=function(e){return(t[e]^t[e+1]<<w^t[e+2]<<A)&p},v=new gn(25e3),E=new pn(288),k=new pn(32),S=0,I=0,C=(u=0,0),B=0,K=0;u<a;++u){var P=b(u),D=32767&u,U=m[P];if(g[D]=U,m[P]=D,B<=u){var M=a-u;if((S>7e3||C>24576)&&M>423){h=Wn(t,c,0,v,E,k,I,C,K,u-K,h),C=S=I=0,K=u;for(var x=0;x<286;++x)E[x]=0;for(x=0;x<30;++x)k[x]=0}var Q=2,R=0,_=d,T=D-U&32767;if(M>2&&P==b(u-T))for(var L=Math.min(y,M)-1,N=Math.min(32767,u),O=Math.min(258,M);T<=N&&--_&&D!=U;){if(t[u+Q]==t[u+Q-T]){for(var F=0;F<O&&t[u+F]==t[u+F-T];++F);if(F>Q){if(Q=F,R=T,F>L)break;var H=Math.min(T,F-2),z=0;for(x=0;x<H;++x){var G=u-T+x+32768&32767,q=G-g[G]+32768&32767;q>z&&(z=q,U=G)}}}T+=(D=U)-(U=g[D])+32768&32767}if(R){v[C++]=268435456|kn[Q]<<18|Cn[R];var j=31&kn[Q],V=31&Cn[R];I+=mn[j]+wn[V],++E[257+j],++k[V],B=u+Q,++S}else v[C++]=t[u],++E[t[u]]}}h=Wn(t,c,s,v,E,k,I,C,K,u-K,h),!s&&7&h&&(h=Yn(c,h+1,Xn))}return Fn(o,0,i+On(h)+n)}(t,null==e.level?6:e.level,null==e.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(t.length)))):12+e.mem,r,i,!n)},es=/*#__PURE__*/function(){function t(t,e){e||"function"!=typeof t||(e=t,t={}),this.ondata=e,this.o=t||{}}return t.prototype.p=function(t,e){this.ondata(ts(t,this.o,0,0,!e),e)},t.prototype.push=function(t,e){this.ondata||zn(5),this.d&&zn(4),this.d=e,this.p(t,e||!1)},t}(),rs=/*#__PURE__*/function(){function t(t){this.s={},this.p=new dn(0),this.ondata=t}return t.prototype.e=function(t){this.ondata||zn(5),this.d&&zn(4);var e=this.p.length,r=new dn(e+t.length);r.set(this.p),r.set(t,e),this.p=r},t.prototype.c=function(t){this.d=this.s.i=t||!1;var e=this.s.b,r=function(t,e,r){var i=t.length;if(!i||r&&r.f&&!r.l)return e||new dn(0);var n=!e||r,s=!r||r.i;r||(r={}),e||(e=new dn(3*i));var a=function(t){var r=e.length;if(t>r){var i=new dn(Math.max(2*r,t));i.set(e),e=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,f=r.m,y=r.n,d=8*i;do{if(!u){o=Ln(t,c,1);var p=Ln(t,c+1,3);if(c+=3,!p){var g=t[(B=On(c)+4)-4]|t[B-3]<<8,m=B+g;if(m>i){s&&zn(0);break}n&&a(h+g),e.set(t.subarray(B,m),h),r.b=h+=g,r.p=c=8*m,r.f=o;continue}if(1==p)u=Qn,l=_n,f=9,y=5;else if(2==p){var w=Ln(t,c,31)+257,A=Ln(t,c+10,15)+4,b=w+Ln(t,c+5,31)+1;c+=14;for(var v=new dn(b),E=new dn(19),k=0;k<A;++k)E[An[k]]=Ln(t,c+3*k,7);c+=3*A;var S=Tn(E),I=(1<<S)-1,C=Dn(E,S,1);for(k=0;k<b;){var B,K=C[Ln(t,c,I)];if(c+=15&K,(B=K>>>4)<16)v[k++]=B;else{var P=0,D=0;for(16==B?(D=3+Ln(t,c,3),c+=2,P=v[k-1]):17==B?(D=3+Ln(t,c,7),c+=3):18==B&&(D=11+Ln(t,c,127),c+=7);D--;)v[k++]=P}}var U=v.subarray(0,w),M=v.subarray(w);f=Tn(U),y=Tn(M),u=Dn(U,f,1),l=Dn(M,y,1)}else zn(1);if(c>d){s&&zn(0);break}}n&&a(h+131072);for(var x=(1<<f)-1,Q=(1<<y)-1,R=c;;R=c){var _=(P=u[Nn(t,c)&x])>>>4;if((c+=15&P)>d){s&&zn(0);break}if(P||zn(2),_<256)e[h++]=_;else{if(256==_){R=c,u=null;break}var T=_-254;if(_>264){var L=mn[k=_-257];T=Ln(t,c,(1<<L)-1)+En[k],c+=L}var N=l[Nn(t,c)&Q],O=N>>>4;if(N||zn(3),c+=15&N,M=In[O],O>3&&(L=wn[O],M+=Nn(t,c)&(1<<L)-1,c+=L),c>d){s&&zn(0);break}n&&a(h+131072);for(var F=h+T;h<F;h+=4)e[h]=e[h-M],e[h+1]=e[h+1-M],e[h+2]=e[h+2-M],e[h+3]=e[h+3-M];h=F}}r.l=u,r.p=R,r.b=h,r.f=o,u&&(o=1,r.m=f,r.d=l,r.n=y)}while(!o);return h==e.length?e:Fn(e,0,h)}(this.p,this.o,this.s);this.ondata(Fn(r,e,this.s.b),this.d),this.o=Fn(r,this.s.b-32768),this.s.b=this.o.length,this.p=Fn(this.p,this.s.p/8|0),this.s.p&=7},t.prototype.push=function(t,e){this.e(t),this.c(e)},t}(),is=/*#__PURE__*/function(){function t(t,e){var r,i;this.c=(r=1,i=0,{p:function(t){for(var e=r,n=i,s=0|t.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=e+=t[a];e=(65535&e)+15*(e>>16),n=(65535&n)+15*(n>>16)}r=e,i=n},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(i%=65521))<<8|i>>>8}}),this.v=1,es.call(this,t,e)}return t.prototype.push=function(t,e){es.prototype.push.call(this,t,e)},t.prototype.p=function(t,e){this.c.p(t);var r=ts(t,this.o,this.v&&2,e&&4,!e);this.v&&(function(t,e){var r=e.level,i=0==r?0:r<6?1:9==r?3:2;t[0]=120,t[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),e&&function(t,e,r){for(;r;++e)t[e]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,e)},t}(),ns=/*#__PURE__*/function(){function t(t){this.v=1,rs.call(this,t)}return t.prototype.push=function(t,e){if(rs.prototype.e.call(this,t),this.v){if(this.p.length<2&&!e)return;this.p=this.p.subarray(2),this.v=0}e&&(this.p.length<4&&zn(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),rs.prototype.c.call(this,e)},t}(),ss="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{ss.decode(Xn,{stream:!0}),1}catch(t){}var as=void 0!==t?t:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function os(t){return t&&t.__esModule&&Object.prototype.hasOwnProperty.call(t,"default")?t.default:t}var cs=[0,1,3,7,15,31,63,127,255],hs=function(t){this.stream=t,this.bitOffset=0,this.curByte=0,this.hasByte=!1};hs.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},hs.prototype.read=function(t){for(var e=0;t>0;){this._ensureByte();var r=8-this.bitOffset;if(t>=r)e<<=r,e|=cs[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,t-=r;else{e<<=t;var i=r-t;e|=(this.curByte&cs[t]<<i)>>i,this.bitOffset+=t,t=0}}return e},hs.prototype.seek=function(t){var e=t%8,r=(t-e)/8;this.bitOffset=e,this.stream.seek(r),this.hasByte=!1},hs.prototype.pi=function(){var t,e=new Uint8Array(6);for(t=0;t<e.length;t++)e[t]=this.read(8);return function(t){return Array.prototype.map.call(t,(t=>("00"+t.toString(16)).slice(-2))).join("")}(e)};var us=hs,ls=function(){};ls.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},ls.prototype.read=function(t,e,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;t[e++]=n,i++}return i},ls.prototype.seek=function(t){throw Error("abstract method seek() not implemented")},ls.prototype.writeByte=function(t){throw Error("abstract method readByte() not implemented")},ls.prototype.write=function(t,e,r){var i;for(i=0;i<r;i++)this.writeByte(t[e++]);return r},ls.prototype.flush=function(){};var fs,ys=ls,ds=(fs=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var t=4294967295;this.getCRC=function(){return~t>>>0},this.updateCRC=function(e){t=t<<8^fs[255&(t>>>24^e)]},this.updateCRCRun=function(e,r){for(;r-- >0;)t=t<<8^fs[255&(t>>>24^e)]}}),ps=us,gs=ys,ms=ds,ws=function(t,e){var r,i=t[e];for(r=e;r>0;r--)t[r]=t[r-1];return t[0]=i,i},As={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},bs={};bs[As.LAST_BLOCK]="Bad file checksum",bs[As.NOT_BZIP_DATA]="Not bzip data",bs[As.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",bs[As.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",bs[As.DATA_ERROR]="Data error",bs[As.OUT_OF_MEMORY]="Out of memory",bs[As.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var vs=function(t,e){var r=bs[t]||"unknown error";e&&(r+=": "+e);var i=new TypeError(r);throw i.errorCode=t,i},Es=function(t,e){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(t,e)};Es.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new ms,!0):(this.writeCount=-1,!1)},Es.prototype._start_bunzip=function(t,e){var r=new Uint8Array(4);4===t.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||vs(As.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&vs(As.NOT_BZIP_DATA,"level out of range"),this.reader=new ps(t),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=e,this.streamCRC=0},Es.prototype._get_next_block=function(){var t,e,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&vs(As.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&vs(As.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&vs(As.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(t=0;t<16;t++)if(a&1<<15-t){var h=16*t;for(r=i.read(16),e=0;e<16;e++)r&1<<15-e&&(o[c++]=h+e)}var u=i.read(3);(u<2||u>6)&&vs(As.DATA_ERROR);var l=i.read(15);0===l&&vs(As.DATA_ERROR);var f=new Uint8Array(256);for(t=0;t<u;t++)f[t]=t;var y=new Uint8Array(l);for(t=0;t<l;t++){for(e=0;i.read(1);e++)e>=u&&vs(As.DATA_ERROR);y[t]=ws(f,e)}var d,p=c+2,g=[];for(e=0;e<u;e++){var m,w,A=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),t=0;t<p;t++){for(;(a<1||a>20)&&vs(As.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;A[t]=a}for(m=w=A[0],t=1;t<p;t++)A[t]>w?w=A[t]:A[t]<m&&(m=A[t]);d={},g.push(d),d.permute=new Uint16Array(258),d.limit=new Uint32Array(22),d.base=new Uint32Array(21),d.minLen=m,d.maxLen=w;var v=0;for(t=m;t<=w;t++)for(b[t]=d.limit[t]=0,a=0;a<p;a++)A[a]===t&&(d.permute[v++]=a);for(t=0;t<p;t++)b[A[t]]++;for(v=a=0,t=m;t<w;t++)v+=b[t],d.limit[t]=v-1,v<<=1,a+=b[t],d.base[t+1]=v-a;d.limit[w+1]=Number.MAX_VALUE,d.limit[w]=v+b[w]-1,d.base[m]=0}var E=new Uint32Array(256);for(t=0;t<256;t++)f[t]=t;var k,S=0,I=0,C=0,B=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,C>=l&&vs(As.DATA_ERROR),d=g[y[C++]]),t=d.minLen,e=i.read(t);t>d.maxLen&&vs(As.DATA_ERROR),!(e<=d.limit[t]);t++)e=e<<1|i.read(1);((e-=d.base[t])<0||e>=258)&&vs(As.DATA_ERROR);var K=d.permute[e];if(0!==K&&1!==K){if(S)for(S=0,I+a>this.dbufSize&&vs(As.DATA_ERROR),E[k=o[f[0]]]+=a;a--;)B[I++]=k;if(K>c)break;I>=this.dbufSize&&vs(As.DATA_ERROR),E[k=o[k=ws(f,t=K-1)]]++,B[I++]=k}else S||(S=1,a=0),a+=0===K?S:2*S,S<<=1}for((s<0||s>=I)&&vs(As.DATA_ERROR),e=0,t=0;t<256;t++)r=e+E[t],E[t]=e,e=r;for(t=0;t<I;t++)B[E[k=255&B[t]]]|=t<<8,E[k]++;var P=0,D=0,U=0;return I&&(D=255&(P=B[s]),P>>=8,U=-1),this.writePos=P,this.writeCurrent=D,this.writeCount=I,this.writeRun=U,!0},Es.prototype._read_bunzip=function(t,e){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&vs(As.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var ks=function(t){if("readByte"in t)return t;var e=new gs;return e.pos=0,e.readByte=function(){return t[this.pos++]},e.seek=function(t){this.pos=t},e.eof=function(){return this.pos>=t.length},e},Ss=function(t){var e=new gs,r=!0;if(t)if("number"==typeof t)e.buffer=new Uint8Array(t),r=!1;else{if("writeByte"in t)return t;e.buffer=t,r=!1}else e.buffer=new Uint8Array(16384);return e.pos=0,e.writeByte=function(t){if(r&&this.pos>=this.buffer.length){var e=new Uint8Array(2*this.buffer.length);e.set(this.buffer),this.buffer=e}this.buffer[this.pos++]=t},e.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var t=new Uint8Array(this.pos);t.set(this.buffer.subarray(0,this.pos)),this.buffer=t}return this.buffer},e._coerced=!0,e};var Is=function(t,e,r){for(var i=ks(t),n=Ss(e),s=new Es(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&vs(As.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class Cs{static get tag(){return T.packet.literalData}constructor(t=new Date){this.format=T.literal.utf8,this.date=O.normalizeDate(t),this.text=null,this.data=null,this.filename=""}setText(t,e=T.literal.utf8){this.format=e,this.text=t,this.data=null}getText(t=!1){return(null===this.text||O.isStream(this.text))&&(this.text=O.decodeUTF8(O.nativeEOL(this.getBytes(t)))),this.text}setBytes(t,e){this.format=e,this.data=t,this.text=null}getBytes(t=!1){return null===this.data&&(this.data=O.canonicalizeEOL(O.encodeUTF8(this.text))),t?K(this.data):this.data}setFilename(t){this.filename=t}getFilename(){return this.filename}async read(t){await C(t,(async t=>{const e=await t.readByte(),r=await t.readByte();this.filename=O.decodeUTF8(await t.readBytes(r)),this.date=O.readDate(await t.readBytes(4));let i=t.remainder();u(i)&&(i=await U(i)),this.setBytes(i,e)}))}writeHeader(){const t=O.encodeUTF8(this.filename),e=new Uint8Array([t.length]),r=new Uint8Array([this.format]),i=O.writeDate(this.date);return O.concatUint8Array([r,e,t,i])}write(){const t=this.writeHeader(),e=this.getBytes();return O.concat([t,e])}}class Bs{constructor(){this.bytes=""}read(t){return this.bytes=O.uint8ArrayToString(t.subarray(0,8)),this.bytes.length}write(){return O.stringToUint8Array(this.bytes)}toHex(){return O.uint8ArrayToHex(O.stringToUint8Array(this.bytes))}equals(t,e=!1){return e&&(t.isWildcard()||this.isWildcard())||this.bytes===t.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(t){return t.toHex()}static fromID(t){const e=new Bs;return e.read(O.hexToUint8Array(t)),e}static wildcard(){const t=new Bs;return t.read(new Uint8Array(8)),t}}const Ks=Symbol("verified"),Ps="salt@notations.openpgpjs.org",Ds=new Set([T.signatureSubpacket.issuerKeyID,T.signatureSubpacket.issuerFingerprint,T.signatureSubpacket.embeddedSignature]);class Us{static get tag(){return T.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Bs,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Ks]=null}read(t){let e=0;if(this.version=t[e++],4!==this.version&&5!==this.version&&6!==this.version)throw new zr(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=t[e++],this.publicKeyAlgorithm=t[e++],this.hashAlgorithm=t[e++],e+=this.readSubPackets(t.subarray(e,t.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=t.subarray(0,e),e+=this.readSubPackets(t.subarray(e,t.length),!1),this.signedHashValue=t.subarray(e,e+2),e+=2,6===this.version){const r=t[e++];this.salt=t.subarray(e,e+r),e+=r}const r=t.subarray(e,t.length),{read:i,signatureParams:n}=nn.signature.parseSignatureParams(this.publicKeyAlgorithm,r);if(i<r.length)throw Error("Error reading MPIs");this.params=n}writeParams(){return this.params instanceof Promise?x((async()=>nn.serializeParams(this.publicKeyAlgorithm,await this.params))):nn.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const t=[];return t.push(this.signatureData),t.push(this.writeUnhashedSubPackets()),t.push(this.signedHashValue),6===this.version&&(t.push(new Uint8Array([this.salt.length])),t.push(this.salt)),t.push(this.writeParams()),O.concat(t)}async sign(t,e,r=new Date,i=!1,n){this.version=t.version,this.created=O.normalizeDate(r),this.issuerKeyVersion=t.version,this.issuerFingerprint=t.getFingerprintBytes(),this.issuerKeyID=t.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const t=xs(this.hashAlgorithm);if(null===this.salt)this.salt=nn.random.getRandomBytes(t);else if(t!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(n.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:t})=>t===Ps)).length)throw Error("Unexpected existing salt notation");{const t=nn.random.getRandomBytes(xs(this.hashAlgorithm));this.rawNotations.push({name:Ps,value:t,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=O.concat(s);const a=this.toHash(this.signatureType,e,i),o=await this.hash(this.signatureType,e,a,i);this.signedHashValue=D(B(o),0,2);const c=async()=>nn.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,t.publicParams,t.privateParams,a,await U(o));O.isStream(o)?this.params=c():(this.params=await c(),this[Ks]=!0)}writeHashedSubPackets(){const t=T.signatureSubpacket,e=[];let r;if(null===this.created)throw Error("Missing signature creation time");e.push(Ms(t.signatureCreationTime,!0,O.writeDate(this.created))),null!==this.signatureExpirationTime&&e.push(Ms(t.signatureExpirationTime,!0,O.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&e.push(Ms(t.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),e.push(Ms(t.trustSignature,!0,r))),null!==this.regularExpression&&e.push(Ms(t.regularExpression,!0,this.regularExpression)),null!==this.revocable&&e.push(Ms(t.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&e.push(Ms(t.keyExpirationTime,!0,O.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredSymmetricAlgorithms)),e.push(Ms(t.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=O.concat([r,this.revocationKeyFingerprint]),e.push(Ms(t.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&e.push(Ms(t.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=O.encodeUTF8(i);r.push(O.writeNumber(o.length,2)),r.push(O.writeNumber(n.length,2)),r.push(o),r.push(n),r=O.concat(r),e.push(Ms(t.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredHashAlgorithms)),e.push(Ms(t.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredCompressionAlgorithms)),e.push(Ms(t.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyServerPreferences)),e.push(Ms(t.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&e.push(Ms(t.preferredKeyServer,!1,O.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&e.push(Ms(t.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&e.push(Ms(t.policyURI,!1,O.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyFlags)),e.push(Ms(t.keyFlags,!0,r))),null!==this.signersUserID&&e.push(Ms(t.signersUserID,!1,O.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=O.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),e.push(Ms(t.reasonForRevocation,!0,r))),null!==this.features&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.features)),e.push(Ms(t.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(O.stringToUint8Array(this.signatureTargetHash)),r=O.concat(r),e.push(Ms(t.signatureTarget,!0,r))),null!==this.embeddedSignature&&e.push(Ms(t.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=O.concat(r),e.push(Ms(t.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredAEADAlgorithms)),e.push(Ms(t.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),e.push(Ms(t.preferredCipherSuites,!1,r)));const i=O.concat(e),n=O.writeNumber(i.length,6===this.version?4:2);return O.concat([n,i])}writeUnhashedSubPackets(){const t=[];this.unhashedSubpackets.forEach((e=>{t.push(Tr(e.length)),t.push(e)}));const e=O.concat(t),r=O.writeNumber(e.length,6===this.version?4:2);return O.concat([r,e])}readSubPacket(t,e=!0){let r=0;const i=!!(128&t[r]),n=127&t[r];if(e||(this.unhashedSubpackets.push(t.subarray(r,t.length)),Ds.has(n)))switch(r++,n){case T.signatureSubpacket.signatureCreationTime:this.created=O.readDate(t.subarray(r,t.length));break;case T.signatureSubpacket.signatureExpirationTime:{const e=O.readNumber(t.subarray(r,t.length));this.signatureNeverExpires=0===e,this.signatureExpirationTime=e;break}case T.signatureSubpacket.exportableCertification:this.exportable=1===t[r++];break;case T.signatureSubpacket.trustSignature:this.trustLevel=t[r++],this.trustAmount=t[r++];break;case T.signatureSubpacket.regularExpression:this.regularExpression=t[r];break;case T.signatureSubpacket.revocable:this.revocable=1===t[r++];break;case T.signatureSubpacket.keyExpirationTime:{const e=O.readNumber(t.subarray(r,t.length));this.keyExpirationTime=e,this.keyNeverExpires=0===e;break}case T.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.revocationKey:this.revocationKeyClass=t[r++],this.revocationKeyAlgorithm=t[r++],this.revocationKeyFingerprint=t.subarray(r,r+20);break;case T.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(t.subarray(r,t.length));else if(e)throw Error("Unexpected Issuer Key ID subpacket");break;case T.signatureSubpacket.notationData:{const e=!!(128&t[r]);r+=4;const n=O.readNumber(t.subarray(r,r+2));r+=2;const s=O.readNumber(t.subarray(r,r+2));r+=2;const a=O.decodeUTF8(t.subarray(r,r+n)),o=t.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:e,value:o,critical:i}),e&&(this.notations[a]=O.decodeUTF8(o));break}case T.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=O.decodeUTF8(t.subarray(r,t.length));break;case T.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==t[r++];break;case T.signatureSubpacket.policyURI:this.policyURI=O.decodeUTF8(t.subarray(r,t.length));break;case T.signatureSubpacket.keyFlags:this.keyFlags=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.signersUserID:this.signersUserID=O.decodeUTF8(t.subarray(r,t.length));break;case T.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=t[r++],this.reasonForRevocationString=O.decodeUTF8(t.subarray(r,t.length));break;case T.signatureSubpacket.features:this.features=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=t[r++],this.signatureTargetHashAlgorithm=t[r++];const e=nn.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=O.uint8ArrayToString(t.subarray(r,r+e));break}case T.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Us,this.embeddedSignature.read(t.subarray(r,t.length));break;case T.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=t[r++],this.issuerFingerprint=t.subarray(r,t.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case T.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...t.subarray(r,t.length)];break;case T.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let e=r;e<t.length;e+=2)this.preferredCipherSuites.push([t[e],t[e+1]]);break;default:{const t=Error("Unknown signature subpacket type "+n);if(i)throw t;O.printDebug(t)}}}readSubPackets(t,e=!0,r){const i=6===this.version?4:2,n=O.readNumber(t.subarray(0,i));let s=i;for(;s<2+n;){const i=_r(t.subarray(s,t.length));s+=i.offset,this.readSubPacket(t.subarray(s,s+i.len),e,r),s+=i.len}return s}toSign(t,e){const r=T.signature;switch(t){case r.binary:return null!==e.text?O.encodeUTF8(e.getText(!0)):e.getBytes(!0);case r.text:{const t=e.getBytes(!0);return O.canonicalizeEOL(t)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let t,i;if(e.userID)i=180,t=e.userID;else{if(!e.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,t=e.userAttribute}const n=t.write();return O.concat([this.toSign(r.key,e),new Uint8Array([i]),O.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return O.concat([this.toSign(r.key,e),this.toSign(r.key,{key:e.bind})]);case r.key:if(void 0===e.key)throw Error("Key packet is required for this signature.");return e.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,e);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(t,e){let r=0;return S(B(this.signatureData),(t=>{r+=t.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==T.signature.binary&&this.signatureType!==T.signature.text||(e?i.push(new Uint8Array(6)):i.push(t.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(O.writeNumber(r,4)),O.concat(i)}))}toHash(t,e,r=!1){const i=this.toSign(t,e);return O.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(e,r)])}async hash(t,e,r,i=!1){if(6===this.version&&this.salt.length!==xs(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(t,e,i)),nn.hash.digest(this.hashAlgorithm,r)}async verify(t,e,r,i=new Date,n=!1,s=L){if(!this.issuerKeyID.equals(t.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==t.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=e===T.signature.binary||e===T.signature.text;if(!(this[Ks]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(e,r,n),s=await this.hash(e,r,i)),s=await U(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===T.publicKey.hmac?t.privateParams:null;if(this[Ks]=await nn.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,t.publicParams,a,i,s),!this[Ks])throw Error("Signature verification failed")}const o=O.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+T.read(T.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[T.signature.binary,T.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+T.read(T.hash,this.hashAlgorithm).toUpperCase());if(this.rawNotations.forEach((({name:t,critical:e})=>{if(e&&s.knownNotations.indexOf(t)<0)throw Error("Unknown critical notation: "+t)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(t=new Date){const e=O.normalizeDate(t);return null!==e&&!(this.created<=e&&e<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ms(t,e,r){const i=[];return i.push(Tr(r.length+1)),i.push(new Uint8Array([(e?128:0)|t])),i.push(r),O.concat(i)}function xs(t){switch(t){case T.hash.sha256:return 16;case T.hash.sha384:return 24;case T.hash.sha512:return 32;case T.hash.sha224:case T.hash.sha3_256:return 16;case T.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Qs{static get tag(){return T.packet.onePassSignature}static fromSignaturePacket(t,e){const r=new Qs;return r.version=6===t.version?6:3,r.signatureType=t.signatureType,r.hashAlgorithm=t.hashAlgorithm,r.publicKeyAlgorithm=t.publicKeyAlgorithm,r.issuerKeyID=t.issuerKeyID,r.salt=t.salt,r.issuerFingerprint=t.issuerFingerprint,r.flags=e?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(t){let e=0;if(this.version=t[e++],3!==this.version&&6!==this.version)throw new zr(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=t[e++],this.hashAlgorithm=t[e++],this.publicKeyAlgorithm=t[e++],6===this.version){const r=t[e++];this.salt=t.subarray(e,e+r),e+=r,this.issuerFingerprint=t.subarray(e,e+32),e+=32,this.issuerKeyID=new Bs,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Bs,this.issuerKeyID.read(t.subarray(e,e+8)),e+=8;return this.flags=t[e++],this}write(){const t=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?t.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):t.push(this.issuerKeyID.write()),t.push(new Uint8Array([this.flags])),O.concatUint8Array(t)}calculateTrailer(...t){return x((async()=>Us.prototype.calculateTrailer.apply(await this.correspondingSig,t)))}async verify(){const t=await this.correspondingSig;if(!t||t.constructor.tag!==T.packet.signature)throw Error("Corresponding signature packet missing");if(t.signatureType!==this.signatureType||t.hashAlgorithm!==this.hashAlgorithm||t.publicKeyAlgorithm!==this.publicKeyAlgorithm||!t.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===t.version||6===this.version&&6!==t.version||6===this.version&&!O.equalsUint8Array(t.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!O.equalsUint8Array(t.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return t.hashed=this.hashed,t.verify.apply(t,arguments)}}function Rs(t,e){if(!e[t]){let e;try{e=T.read(T.packet,t)}catch(e){throw new Gr("Unknown packet type with tag: "+t)}throw Error("Packet not allowed in this context: "+e)}return new e[t]}Qs.prototype.hash=Us.prototype.hash,Qs.prototype.toHash=Us.prototype.toHash,Qs.prototype.toSign=Us.prototype.toSign;class _s extends Array{static async fromBinary(t,e,r=L){const i=new _s;return await i.read(t,e,r),i}async read(t,e,r=L){r.additionalAllowedPackets.length&&(e={...e,...O.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=I(t,(async(t,i)=>{const n=R(i);try{for(;;){await n.ready;if(await Hr(t,(async t=>{try{if(t.tag===T.packet.marker||t.tag===T.packet.trust||t.tag===T.packet.padding)return;const i=Rs(t.tag,e);i.packets=new _s,i.fromStream=O.isStream(t.packet),await i.read(t.packet,r),await n.write(i)}catch(e){if(e instanceof Gr){if(!(t.tag<=39))return;await n.abort(e)}const i=!r.ignoreUnsupportedPackets&&e instanceof zr,s=!(r.ignoreMalformedPackets||e instanceof zr);if(i||s||Fr(t.tag))await n.abort(e);else{const e=new qr(t.tag,t.packet);await n.write(e)}O.printDebugError(e)}})))return await n.ready,void await n.close()}}catch(t){await n.abort(t)}}));const i=Q(this.stream);for(;;){const{done:t,value:e}=await i.read();if(t?this.stream=null:this.push(e),t||Fr(e.constructor.tag))break}i.releaseLock()}write(){const t=[];for(let e=0;e<this.length;e++){const r=this[e]instanceof qr?this[e].tag:this[e].constructor.tag,i=this[e].write();if(O.isStream(i)&&Fr(this[e].constructor.tag)){let e=[],n=0;const s=512;t.push(Nr(r)),t.push(S(i,(t=>{if(e.push(t),n+=t.length,n>=s){const t=Math.min(Math.log(n)/Math.LN2|0,30),r=2**t,i=O.concat([Lr(t)].concat(e));return e=[i.subarray(1+r)],n=e[0].length,i.subarray(0,1+r)}}),(()=>O.concat([Tr(n)].concat(e)))))}else{if(O.isStream(i)){let e=0;t.push(S(B(i),(t=>{e+=t.length}),(()=>Or(r,e))))}else t.push(Or(r,i.length));t.push(i)}}return O.concat(t)}filterByTag(...t){const e=new _s,r=t=>e=>t===e;for(let i=0;i<this.length;i++)t.some(r(this[i].constructor.tag))&&e.push(this[i]);return e}findPacket(t){return this.find((e=>e.constructor.tag===t))}indexOfTag(...t){const e=[],r=this,i=t=>e=>t===e;for(let n=0;n<this.length;n++)t.some(i(r[n].constructor.tag))&&e.push(n);return e}}const Ts=/*#__PURE__*/O.constructAllowedPackets([Cs,Qs,Us]);class Ls{static get tag(){return T.packet.compressedData}constructor(t=L){this.packets=null,this.algorithm=t.preferredCompressionAlgorithm,this.compressed=null}async read(t,e=L){await C(t,(async t=>{this.algorithm=await t.readByte(),this.compressed=t.remainder(),await this.decompress(e)}))}write(){return null===this.compressed&&this.compress(),O.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(t=L){const e=T.read(T.compression,this.algorithm),r=zs[e];if(!r)throw Error(e+" decompression not supported");this.packets=await _s.fromBinary(r(this.compressed),Ts,t)}compress(){const t=T.read(T.compression,this.algorithm),e=Hs[t];if(!e)throw Error(t+" compression not supported");this.compressed=e(this.packets.write())}}function Ns(t,e){return r=>{if(!O.isStream(r)||u(r))return x((()=>U(r).then((t=>new Promise(((r,i)=>{const n=new e;n.ondata=t=>{r(t)};try{n.push(t,!0)}catch(t){i(t)}}))))));if(t)try{const e=t();return r.pipeThrough(e)}catch(t){if("TypeError"!==t.name)throw t}const i=r.getReader(),n=new e;return new ReadableStream({async start(t){for(n.ondata=async(e,r)=>{t.enqueue(e),r&&t.close()};;){const{done:t,value:e}=await i.read();if(t)return void n.push(new Uint8Array,!0);e.length&&n.push(e)}}})}}function Os(t){return function(e){return x((async()=>t(await U(e))))}}const Fs=t=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(t)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(t))}),Hs={zip:/*#__PURE__*/Ns(Fs("deflate-raw").compressor,es),zlib:/*#__PURE__*/Ns(Fs("deflate").compressor,is)},zs={uncompressed:t=>t,zip:/*#__PURE__*/Ns(Fs("deflate-raw").decompressor,rs),zlib:/*#__PURE__*/Ns(Fs("deflate").decompressor,ns),bzip2:/*#__PURE__*/Os(Is)},Gs=/*#__PURE__*/O.constructAllowedPackets([Cs,Ls,Qs,Us]);class qs{static get tag(){return T.packet.symEncryptedIntegrityProtectedData}static fromObject({version:t,aeadAlgorithm:e}){if(1!==t&&2!==t)throw Error("Unsupported SEIPD version");const r=new qs;return r.version=t,2===t&&(r.aeadAlgorithm=e),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(t){await C(t,(async t=>{if(this.version=await t.readByte(),1!==this.version&&2!==this.version)throw new zr(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await t.readByte(),this.aeadAlgorithm=await t.readByte(),this.chunkSizeByte=await t.readByte(),this.salt=await t.readBytes(32)),this.encrypted=t.remainder()}))}write(){return 2===this.version?O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):O.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(t,e,r=L){let i=this.packets.write();if(u(i)&&(i=await U(i)),2===this.version)this.cipherAlgorithm=t,this.salt=nn.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await js(this,"encrypt",e,i);else{const{blockSize:n}=nn.getCipherParams(t),s=await nn.getPrefixRandom(t),a=new Uint8Array([211,20]),o=O.concat([s,i,a]),c=await nn.hash.sha1(K(o)),h=O.concat([o,c]);this.encrypted=await nn.mode.cfb.encrypt(t,e,h,new Uint8Array(n),r)}return!0}async decrypt(t,e,r=L){let i,n=B(this.encrypted);if(u(n)&&(n=await U(n)),2===this.version)i=await js(this,"decrypt",e,n);else{const{blockSize:s}=nn.getCipherParams(t),a=await nn.mode.cfb.decrypt(t,e,n,new Uint8Array(s)),o=D(K(a),-20),c=D(a,0,-20),h=Promise.all([U(await nn.hash.sha1(K(c))),U(o)]).then((([t,e])=>{if(!O.equalsUint8Array(t,e))throw Error("Modification detected.");return new Uint8Array})),u=D(c,s+2);i=D(u,0,-2),i=b([i,x((()=>h))]),O.isStream(n)&&r.allowUnauthenticatedStream||(i=await U(i))}return this.packets=await _s.fromBinary(i,Gs,r),!0}}async function js(t,e,r,i){const n=t instanceof qs&&2===t.version,s=!n&&t.constructor.tag===T.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=nn.getAEADMode(t.aeadAlgorithm),o="decrypt"===e?a.tagLength:0,c="encrypt"===e?a.tagLength:0,h=2**(t.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),f=new Uint8Array(l,0,5+u),y=new Uint8Array(l),d=new DataView(l),p=new Uint8Array(l,5,8);f.set([192|t.constructor.tag,t.version,t.cipherAlgorithm,t.aeadAlgorithm,t.chunkSizeByte],0);let g,m,w=0,A=Promise.resolve(),b=0,E=0;if(n){const{keySize:e}=nn.getCipherParams(t.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await xi(T.hash.sha256,r,t.salt,n,e+i);r=s.subarray(0,e),g=s.subarray(e),g.fill(0,g.length-8),m=new DataView(g.buffer,g.byteOffset,g.byteLength)}else g=t.iv;const k=await a(t.cipherAlgorithm,r);return I(i,(async(r,i)=>{if("array"!==O.isStream(r)){const e=new TransformStream({},{highWaterMark:O.getHardwareConcurrency()*2**(t.chunkSizeByte+6),size:t=>t.length});v(e.readable,i),i=e.writable}const s=Q(r),a=R(i);try{for(;;){let t=await s.readBytes(h+o)||new Uint8Array;const r=t.subarray(t.length-o);let i,l,v;if(t=t.subarray(0,t.length-o),n)v=g;else{v=g.slice();for(let t=0;t<8;t++)v[g.length-8+t]^=p[t]}if(!w||t.length?(s.unshift(r),i=k[e](t,v,f),i.catch((()=>{})),E+=t.length-o+c):(d.setInt32(5+u+4,b),i=k[e](r,v,y),i.catch((()=>{})),E+=c,l=!0),b+=t.length-o,A=A.then((()=>i)).then((async t=>{await a.ready,await a.write(t),E-=t.length})).catch((t=>a.abort(t))),(l||E>a.desiredSize)&&await A,l){await a.close();break}n?m.setInt32(g.length-4,++w):d.setInt32(9,++w)}}catch(t){await a.ready.catch((()=>{})),await a.abort(t)}}))}const Vs=/*#__PURE__*/O.constructAllowedPackets([Cs,Ls,Qs,Us]);class Zs{static get tag(){return T.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=T.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(t){await C(t,(async t=>{const e=await t.readByte();if(1!==e)throw new zr(`Version ${e} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await t.readByte(),this.aeadAlgorithm=await t.readByte(),this.chunkSizeByte=await t.readByte();const r=nn.getAEADMode(this.aeadAlgorithm);this.iv=await t.readBytes(r.ivLength),this.encrypted=t.remainder()}))}write(){return O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(t,e,r=L){this.packets=await _s.fromBinary(await js(this,"decrypt",e,B(this.encrypted)),Vs,r)}async encrypt(t,e,r=L){this.cipherAlgorithm=t;const{ivLength:i}=nn.getAEADMode(this.aeadAlgorithm);this.iv=nn.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await js(this,"encrypt",e,n)}}class Js{static get tag(){return T.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Bs,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:t,encryptionKeyPacket:e,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new Js;if(3!==t&&6!==t)throw Error("Unsupported PKESK version");return s.version=t,6===t&&(s.publicKeyVersion=r?null:e.version,s.publicKeyFingerprint=r?null:e.getFingerprintBytes()),s.publicKeyID=r?Bs.wildcard():e.getKeyID(),s.publicKeyAlgorithm=e.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(t){let e=0;if(this.version=t[e++],3!==this.version&&6!==this.version)throw new zr(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=t[e++];if(r){this.publicKeyVersion=t[e++];const i=r-1;this.publicKeyFingerprint=t.subarray(e,e+i),e+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Bs.wildcard()}else e+=this.publicKeyID.read(t.subarray(e,e+8));if(this.publicKeyAlgorithm=t[e++],this.encrypted=nn.parseEncSessionKeyParams(this.publicKeyAlgorithm,t.subarray(e)),this.publicKeyAlgorithm===T.publicKey.x25519||this.publicKeyAlgorithm===T.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=T.write(T.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const t=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(t.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),t.push(this.publicKeyFingerprint)):t.push(new Uint8Array([0])):t.push(this.publicKeyID.write()),t.push(new Uint8Array([this.publicKeyAlgorithm]),nn.serializeParams(this.publicKeyAlgorithm,this.encrypted)),O.concatUint8Array(t)}async encrypt(t){const e=T.write(T.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,i=Ys(this.version,e,r,this.sessionKey),n=e===T.publicKey.aead?t.privateParams:null;this.encrypted=await nn.publicKeyEncrypt(e,r,t.publicParams,n,i,t.getFingerprintBytes())}async decrypt(t,e){if(this.publicKeyAlgorithm!==t.algorithm)throw Error("Decryption error");const r=e?Ys(this.version,this.publicKeyAlgorithm,e.sessionKeyAlgorithm,e.sessionKey):null,i=await nn.publicKeyDecrypt(this.publicKeyAlgorithm,t.publicParams,t.privateParams,this.encrypted,t.getFingerprintBytes(),r),{sessionKey:n,sessionKeyAlgorithm:s}=function(t,e,r,i){switch(e){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.aead:{const e=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=O.writeChecksum(e.subarray(e.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===t?{sessionKeyAlgorithm:null,sessionKey:e}:{sessionKeyAlgorithm:e[0],sessionKey:e.subarray(1)};if(i){const e=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:O.selectUint8Array(e,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===t?null:O.selectUint8(e,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===t||T.read(T.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case T.publicKey.x25519:case T.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,e);3===this.version&&this.publicKeyAlgorithm!==T.publicKey.x25519&&this.publicKeyAlgorithm!==T.publicKey.x448&&(this.sessionKeyAlgorithm=s),this.sessionKey=n}}function Ys(t,e,r,i){switch(e){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.aead:return O.concatUint8Array([new Uint8Array(6===t?[]:[r]),i,O.writeChecksum(i.subarray(i.length%8))]);case T.publicKey.x25519:case T.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class Ws{static get tag(){return T.packet.symEncryptedSessionKey}constructor(t=L){this.version=t.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=T.symmetric.aes256,this.aeadAlgorithm=T.write(T.aead,t.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(t){let e=0;if(this.version=t[e++],4!==this.version&&5!==this.version&&6!==this.version)throw new zr(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&e++;const r=t[e++];this.version>=5&&(this.aeadAlgorithm=t[e++],6===this.version&&e++);const i=t[e++];if(this.s2k=fn(i),e+=this.s2k.read(t.subarray(e,t.length)),this.version>=5){const r=nn.getAEADMode(this.aeadAlgorithm);this.iv=t.subarray(e,e+=r.ivLength)}this.version>=5||e<t.length?(this.encrypted=t.subarray(e,t.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const t=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let e;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;e=O.concatUint8Array([new Uint8Array([this.version,n,t,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?e=O.concatUint8Array([new Uint8Array([this.version,t,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(e=O.concatUint8Array([new Uint8Array([this.version,t]),r]),null!==this.encrypted&&(e=O.concatUint8Array([e,this.encrypted])));return e}async decrypt(t){const e=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=nn.getCipherParams(e),n=await this.s2k.produceKey(t,i);if(this.version>=5){const t=nn.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|Ws.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await xi(T.hash.sha256,n,new Uint8Array,r,i):n,a=await t(e,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const t=await nn.mode.cfb.decrypt(e,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=T.write(T.symmetric,t[0]),this.sessionKey=t.subarray(1,t.length)}else this.sessionKey=n}async encrypt(t,e=L){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=yn(e),this.s2k.generateSalt();const{blockSize:i,keySize:n}=nn.getCipherParams(r),s=await this.s2k.produceKey(t,n);if(null===this.sessionKey&&(this.sessionKey=nn.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const t=nn.getAEADMode(this.aeadAlgorithm);this.iv=nn.random.getRandomBytes(t.ivLength);const e=new Uint8Array([192|Ws.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await xi(T.hash.sha256,s,new Uint8Array,e,n):s,a=await t(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,e)}else{const t=O.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await nn.mode.cfb.encrypt(r,s,t,new Uint8Array(i),e)}}}class $s{static get tag(){return T.packet.publicKey}constructor(t=new Date,e=L){this.version=e.v6Keys?6:4,this.created=O.normalizeDate(t),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(t){const e=new $s,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=t;return e.version=r,e.created=i,e.algorithm=n,e.publicParams=s,e.keyID=a,e.fingerprint=o,e}async read(t){let e=0;if(this.version=t[e++],4===this.version||5===this.version||6===this.version){this.created=O.readDate(t.subarray(e,e+4)),e+=4,this.algorithm=t[e++],this.version>=5&&(e+=4);const{read:r,publicParams:i}=nn.parsePublicKeyParams(this.algorithm,t.subarray(e));if(6===this.version&&i.oid&&(i.oid.getName()===T.curve.curve25519Legacy||i.oid.getName()===T.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,e+=r,await this.computeFingerprintAndKeyID(),e}throw new zr(`Version ${this.version} of the key packet is unsupported.`)}write(){const t=[];t.push(new Uint8Array([this.version])),t.push(O.writeDate(this.created)),t.push(new Uint8Array([this.algorithm]));const e=nn.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&t.push(O.writeNumber(e.length,4)),t.push(e),O.concatUint8Array(t)}writeForHash(t){const e=this.writePublicKey(),r=149+t,i=t>=5?4:2;return O.concatUint8Array([new Uint8Array([r]),O.writeNumber(e.length,i),e])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Bs,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const t=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await nn.hash.sha256(t);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await nn.hash.sha1(t)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return O.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(t){return this.version===t.version&&O.equalsUint8Array(this.writePublicKey(),t.writePublicKey())}getAlgorithmInfo(){const t={};t.algorithm=T.read(T.publicKey,this.algorithm);const e=this.publicParams.n||this.publicParams.p;return e?t.bits=O.uint8ArrayBitLength(e):this.publicParams.oid?t.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(t.symmetric=this.publicParams.cipher.getName()),t}}$s.prototype.readPublicKey=$s.prototype.read,$s.prototype.writePublicKey=$s.prototype.write;const Xs=/*#__PURE__*/O.constructAllowedPackets([Cs,Ls,Qs,Us]);class ta{static get tag(){return T.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(t){this.encrypted=t}write(){return this.encrypted}async decrypt(t,e,r=L){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=nn.getCipherParams(t),n=await U(B(this.encrypted)),s=await nn.mode.cfb.decrypt(t,e,n.subarray(i+2),n.subarray(2,i+2));this.packets=await _s.fromBinary(s,Xs,r)}async encrypt(t,e,r=L){const i=this.packets.write(),{blockSize:n}=nn.getCipherParams(t),s=await nn.getPrefixRandom(t),a=await nn.mode.cfb.encrypt(t,e,s,new Uint8Array(n),r),o=await nn.mode.cfb.encrypt(t,e,i,a.subarray(2),r);this.encrypted=O.concat([a,o])}}class ea extends $s{static get tag(){return T.packet.publicSubkey}constructor(t,e){super(t,e)}static fromSecretSubkeyPacket(t){const e=new ea,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=t;return e.version=r,e.created=i,e.algorithm=n,e.publicParams=s,e.keyID=a,e.fingerprint=o,e}}class ra{static get tag(){return T.packet.userAttribute}constructor(){this.attributes=[]}read(t){let e=0;for(;e<t.length;){const r=_r(t.subarray(e,t.length));e+=r.offset,this.attributes.push(O.uint8ArrayToString(t.subarray(e,e+r.len))),e+=r.len}}write(){const t=[];for(let e=0;e<this.attributes.length;e++)t.push(Tr(this.attributes[e].length)),t.push(O.stringToUint8Array(this.attributes[e]));return O.concatUint8Array(t)}equals(t){return!!(t&&t instanceof ra)&&this.attributes.every((function(e,r){return e===t.attributes[r]}))}}class ia extends $s{static get tag(){return T.packet.secretKey}constructor(t=new Date,e=L){super(t,e),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(t,e=L){let r=await this.readPublicKey(t);const i=r;this.s2kUsage=t[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=t[r++],253===this.s2kUsage&&(this.aead=t[r++]),6===this.version&&r++;const e=t[r++];if(this.s2k=fn(e),r+=this.s2k.read(t.subarray(r,t.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&e.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=t.subarray(r,r+nn.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=t.subarray(r,r+nn.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(e){if(!this.s2kUsage)throw e;this.unparseableKeyMaterial=t.subarray(i),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=t.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let t;if(6===this.version)t=this.keyMaterial;else if(t=this.keyMaterial.subarray(0,-2),!O.equalsUint8Array(O.writeChecksum(t),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:e,privateParams:r}=nn.parsePrivateKeyParams(this.algorithm,t,this.publicParams);if(e<t.length)throw Error("Error reading MPIs");this.privateParams=r}catch(t){if(t instanceof zr)throw t;throw Error("Error reading MPIs")}}}write(){const t=this.writePublicKey();if(this.unparseableKeyMaterial)return O.concatUint8Array([t,this.unparseableKeyMaterial]);const e=[t];e.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const t=this.s2k.write();6===this.version&&r.push(t.length),r.push(...t)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&e.push(new Uint8Array([r.length])),e.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=nn.serializeParams(this.algorithm,this.privateParams)),5===this.version&&e.push(O.writeNumber(this.keyMaterial.length,4)),e.push(this.keyMaterial),this.s2kUsage||6===this.version||e.push(O.writeChecksum(this.keyMaterial))),O.concatUint8Array(e)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(t=L){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=fn(T.s2k.gnu,t),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=T.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(t,e=L){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!t)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=yn(e),this.s2k.generateSalt();const r=nn.serializeParams(this.algorithm,this.privateParams);this.symmetric=T.symmetric.aes256;const{blockSize:i}=nn.getCipherParams(this.symmetric);if(e.aeadProtect){this.s2kUsage=253,this.aead=T.aead.eax;const e=nn.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const n=Nr(this.constructor.tag),s=await na(this.version,this.s2k,t,this.symmetric,this.aead,n),a=await e(this.symmetric,s);this.iv=this.isLegacyAEAD?nn.random.getRandomBytes(i):nn.random.getRandomBytes(e.ivLength);const o=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([n,this.writePublicKey()]);this.keyMaterial=await a.encrypt(r,this.iv.subarray(0,e.ivLength),o)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const n=await na(this.version,this.s2k,t,this.symmetric);this.iv=nn.random.getRandomBytes(i),this.keyMaterial=await nn.mode.cfb.encrypt(this.symmetric,n,O.concatUint8Array([r,await nn.hash.sha1(r,e)]),this.iv,e)}}async decrypt(t){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let e;const r=Nr(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(e=await na(this.version,this.s2k,t,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const t=nn.getAEADMode(this.aead),n=await t(this.symmetric,e);try{const e=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,t.ivLength),e)}catch(t){if("Authentication tag mismatch"===t.message)throw Error("Incorrect key passphrase: "+t.message);throw t}}else{const t=await nn.mode.cfb.decrypt(this.symmetric,e,this.keyMaterial,this.iv);i=t.subarray(0,-20);const r=await nn.hash.sha1(i);if(!O.equalsUint8Array(r,t.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:t}=nn.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=t}catch(t){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let t;try{t=await nn.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(e){t=!1}if(!t)throw Error("Key is invalid")}async generate(t,e,r){if(6===this.version&&(this.algorithm===T.publicKey.ecdh&&e===T.curve.curve25519Legacy||this.algorithm===T.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${e}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await nn.generateParams(this.algorithm,t,e,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((t=>{this.privateParams[t].fill(0),delete this.privateParams[t]})),this.privateParams=null,this.isEncrypted=!0)}}async function na(t,e,r,i,n,s,a){const{keySize:o}=nn.getCipherParams(i),c=await e.produceKey(r,o);if(!n||5===t||a)return c;const h=O.concatUint8Array([s,new Uint8Array([t,i,n])]);return xi(T.hash.sha256,c,new Uint8Array,h,o)}class sa{static get tag(){return T.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(t){if(O.isString(t)||t.name&&!O.isString(t.name)||t.email&&!O.isEmailAddress(t.email)||t.comment&&!O.isString(t.comment))throw Error("Invalid user ID format");const e=new sa;Object.assign(e,t);const r=[];return e.name&&r.push(e.name),e.comment&&r.push(`(${e.comment})`),e.email&&r.push(`<${e.email}>`),e.userID=r.join(" "),e}read(t,e=L){const r=O.decodeUTF8(t);if(r.length>e.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:t,comment:e,email:r}=i.groups;this.comment=e?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=t?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return O.encodeUTF8(this.userID)}equals(t){return t&&t.userID===this.userID}}class aa extends ia{static get tag(){return T.packet.secretSubkey}constructor(t=new Date,e=L){super(t,e)}}const oa=/*#__PURE__*/O.constructAllowedPackets([Us]);class ca{constructor(t){this.packets=t||new _s}write(){return this.packets.write()}armor(t=L){const e=this.packets.some((t=>t.constructor.tag===Us.tag&&6!==t.version));return rt(T.armor.signature,this.write(),void 0,void 0,void 0,e,t)}getSigningKeyIDs(){return this.packets.map((t=>t.issuerKeyID))}}async function ha(t,e){const r=new aa(t.date,e);return r.packets=null,r.algorithm=T.write(T.publicKey,t.algorithm),await r.generate(t.rsaBits,t.curve,t.symmetric),await r.computeFingerprintAndKeyID(),r}async function ua(t,e){const r=new ia(t.date,e);return r.packets=null,r.algorithm=T.write(T.publicKey,t.algorithm),await r.generate(t.rsaBits,t.curve,t.symmetric),await r.computeFingerprintAndKeyID(),r}async function la(t,e,r,i,n=new Date,s){let a,o;for(let c=t.length-1;c>=0;c--)try{(!a||t[c].created>=a.created)&&(await t[c].verify(e,r,i,n,void 0,s),a=t[c])}catch(t){o=t}if(!a)throw O.wrapError(`Could not find valid ${T.read(T.signature,r)} signature in key ${e.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((t,e,r)=>e+" "+r.toLowerCase())),o);return a}function fa(t,e,r=new Date){const i=O.normalizeDate(r);if(null!==i){const r=ma(t,e);return!(t.created<=i&&i<r)}return!1}async function ya(t,e,r,i){const n={};n.key=e,n.bind=t;const s={signatureType:T.signature.subkeyBinding};r.sign?(s.keyFlags=[T.keyFlags.signData],s.embeddedSignature=await da(n,null,t,{signatureType:T.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[T.keyFlags.forwardedCommunication]:[T.keyFlags.encryptCommunication|T.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await da(n,null,e,s,r.date,void 0,void 0,void 0,i)}async function da(t,e,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Us;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(t,e,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(t){const e=await t.getPrimarySelfSignature(r,i,n);e.preferredHashAlgorithms&&([a]=e.preferredHashAlgorithms,s=nn.hash.getHashByteLength(s)<=nn.hash.getHashByteLength(a)?a:s)}switch(e.algorithm){case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:case T.publicKey.ed25519:case T.publicKey.ed448:a=nn.getPreferredCurveHashAlgo(e.algorithm,e.publicParams.oid)}return nn.hash.getHashByteLength(s)<=nn.hash.getHashByteLength(a)?a:s}(e,r,n,s,c),h.rawNotations=[...a],await h.sign(r,t,n,o,c),h}async function pa(t,e,r,i=new Date,n){(t=t[r])&&(e[r].length?await Promise.all(t.map((async function(t){t.isExpired(i)||n&&!await n(t)||e[r].some((function(e){return O.equalsUint8Array(e.writeParams(),t.writeParams())}))||e[r].push(t)}))):e[r]=t)}async function ga(t,e,r,i,n,s,a=new Date,o){s=s||t;const c=[];return await Promise.all(i.map((async function(t){try{n&&!t.issuerKeyID.equals(n.issuerKeyID)||(await t.verify(s,e,r,a,!1,o),c.push(t.issuerKeyID))}catch(t){}}))),n?(n.revoked=!!c.some((t=>t.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function ma(t,e){let r;return!1===e.keyNeverExpires&&(r=t.created.getTime()+1e3*e.keyExpirationTime),r?new Date(r):1/0}function wa(t,e={}){if(t.type=t.type||e.type,t.curve=t.curve||e.curve,t.rsaBits=t.rsaBits||e.rsaBits,t.symmetricHash=t.symmetricHash||e.symmetricHash,t.symmetricCipher=t.symmetricCipher||e.symmetricCipher,t.keyExpirationTime=void 0!==t.keyExpirationTime?t.keyExpirationTime:e.keyExpirationTime,t.passphrase=O.isString(t.passphrase)?t.passphrase:e.passphrase,t.date=t.date||e.date,t.sign=t.sign||!1,t.forwarding=t.forwarding||!1,t.sign&&t.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(t.type){case"ecc":try{t.curve=T.write(T.curve,t.curve)}catch(t){throw Error("Unknown curve")}t.curve!==T.curve.ed25519Legacy&&t.curve!==T.curve.curve25519Legacy&&"ed25519"!==t.curve&&"curve25519"!==t.curve||(t.curve=t.sign?T.curve.ed25519Legacy:T.curve.curve25519Legacy),t.sign?t.algorithm=t.curve===T.curve.ed25519Legacy?T.publicKey.eddsaLegacy:T.publicKey.ecdsa:t.algorithm=T.publicKey.ecdh;break;case"curve25519":t.algorithm=t.sign?T.publicKey.ed25519:T.publicKey.x25519;break;case"curve448":t.algorithm=t.sign?T.publicKey.ed448:T.publicKey.x448;break;case"rsa":t.algorithm=T.publicKey.rsaEncryptSign;break;case"symmetric":if(t.sign){t.algorithm=T.publicKey.hmac;try{t.symmetric=T.write(T.hash,t.symmetricHash)}catch(t){throw Error("Unknown hash algorithm")}}else{t.algorithm=T.publicKey.aead;try{t.symmetric=T.write(T.symmetric,t.symmetricCipher)}catch(t){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+t.type)}return t}function Aa(t,e,r){switch(t.algorithm){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:case T.publicKey.dsa:case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:case T.publicKey.ed25519:case T.publicKey.ed448:case T.publicKey.hmac:if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!e.keyFlags||!!(e.keyFlags[0]&T.keyFlags.signData);default:return!1}}function ba(t,e,r){switch(t.algorithm){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.x25519:case T.publicKey.x448:case T.publicKey.aead:if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!e.keyFlags||!!(e.keyFlags[0]&T.keyFlags.encryptCommunication)||!!(e.keyFlags[0]&T.keyFlags.encryptStorage);default:return!1}}function va(t,e,r){if(!e.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(t.algorithm){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.x25519:case T.publicKey.x448:return!(!(!e.keyFlags||!!(e.keyFlags[0]&T.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!e.keyFlags||!!(e.keyFlags[0]&T.keyFlags.encryptCommunication)||!!(e.keyFlags[0]&T.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(e.keyFlags[0]&T.keyFlags.forwardedCommunication));default:return!1}}function Ea(t,e){const r=T.write(T.publicKey,t.algorithm),i=t.getAlgorithmInfo();if(e.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:case T.publicKey.rsaEncrypt:if(i.bits<e.minRSABits)throw Error(`RSA keys shorter than ${e.minRSABits} bits are considered too weak.`);break;case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:case T.publicKey.ecdh:if(e.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class ka{constructor(t,e){this.userID=t.constructor.tag===T.packet.userID?t:null,this.userAttribute=t.constructor.tag===T.packet.userAttribute?t:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=e}toPacketList(){const t=new _s;return t.push(this.userID||this.userAttribute),t.push(...this.revocationSignatures),t.push(...this.selfCertifications),t.push(...this.otherCertifications),t}clone(){const t=new ka(this.userID||this.userAttribute,this.mainKey);return t.selfCertifications=[...this.selfCertifications],t.otherCertifications=[...this.otherCertifications],t.revocationSignatures=[...this.revocationSignatures],t}async certify(t,e,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new ka(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(t.map((async function(t){if(!t.isPrivate())throw Error("Need private key for signing");if(t.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await t.getSigningKey(void 0,e,void 0,r);return da(n,t,s.keyPacket,{signatureType:T.signature.certGeneric,keyFlags:[T.keyFlags.certifyKeys|T.keyFlags.signData]},e,void 0,void 0,void 0,r)}))),await s.update(this,e,r),s}async isRevoked(t,e,r=new Date,i=L){const n=this.mainKey.keyPacket;return ga(n,T.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,t,e,r,i)}async verifyCertificate(t,e,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=t,c=e.filter((t=>t.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async e=>{const s=await e.getSigningKey(o,t.created,void 0,i);if(t.revoked||await n.isRevoked(t,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await t.verify(s.keyPacket,T.signature.certGeneric,a,r,void 0,i)}catch(t){throw O.wrapError("User certificate is invalid",t)}}))),!0)}async verifyAllCertifications(t,e=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,t,e,r).catch((()=>!1))}))))}async verify(t=new Date,e){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,t,e))throw Error("Self-certification is revoked");try{await s.verify(i,T.signature.certGeneric,n,t,void 0,e)}catch(t){throw O.wrapError("Self-certification is invalid",t)}return!0}catch(t){s=t}throw s}async update(t,e,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await pa(t,this,"selfCertifications",e,(async function(t){try{return await t.verify(i,T.signature.certGeneric,n,e,!1,r),!0}catch(t){return!1}})),await pa(t,this,"otherCertifications",e),await pa(t,this,"revocationSignatures",e,(function(t){return ga(i,T.signature.certRevocation,n,[t],void 0,void 0,e,r)}))}async revoke(t,{flag:e=T.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=L){const s={userID:this.userID,userAttribute:this.userAttribute,key:t},a=new ka(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await da(s,null,t,{signatureType:T.signature.certRevocation,reasonForRevocationFlag:T.write(T.reasonForRevocation,e),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class Sa{constructor(t,e){this.keyPacket=t,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=e}toPacketList(){const t=new _s;return t.push(this.keyPacket),t.push(...this.revocationSignatures),t.push(...this.bindingSignatures),t}clone(){const t=new Sa(this.keyPacket,this.mainKey);return t.bindingSignatures=[...this.bindingSignatures],t.revocationSignatures=[...this.revocationSignatures],t}async isRevoked(t,e,r=new Date,i=L){const n=this.mainKey.keyPacket;return ga(n,T.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,t,e,r,i)}async verify(t=new Date,e=L){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await la(this.bindingSignatures,r,T.signature.subkeyBinding,i,t,e);if(n.revoked||await this.isRevoked(n,null,t,e))throw Error("Subkey is revoked");if(fa(this.keyPacket,n,t))throw Error("Subkey is expired");return n}async getExpirationTime(t=new Date,e=L){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await la(this.bindingSignatures,r,T.signature.subkeyBinding,i,t,e)}catch(t){return null}const s=ma(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(t,e=new Date,r=L){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(t))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===T.packet.publicSubkey&&t.keyPacket.constructor.tag===T.packet.secretSubkey&&(this.keyPacket=t.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await pa(t,this,"bindingSignatures",e,(async function(t){for(let e=0;e<n.bindingSignatures.length;e++)if(n.bindingSignatures[e].issuerKeyID.equals(t.issuerKeyID))return t.created>n.bindingSignatures[e].created&&(n.bindingSignatures[e]=t),!1;try{return await t.verify(i,T.signature.subkeyBinding,s,e,void 0,r),!0}catch(t){return!1}})),await pa(t,this,"revocationSignatures",e,(function(t){return ga(i,T.signature.subkeyRevocation,s,[t],void 0,void 0,e,r)}))}async revoke(t,{flag:e=T.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=L){const s={key:t,bind:this.keyPacket},a=new Sa(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await da(s,null,t,{signatureType:T.signature.subkeyRevocation,reasonForRevocationFlag:T.write(T.reasonForRevocation,e),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(t){return this.keyPacket.hasSameFingerprintAs(t.keyPacket||t)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((t=>{Sa.prototype[t]=function(){return this.keyPacket[t]()}}));const Ia=/*#__PURE__*/O.constructAllowedPackets([Us]),Ca=new Set([T.packet.publicKey,T.packet.privateKey]),Ba=new Set([T.packet.publicKey,T.packet.privateKey,T.packet.publicSubkey,T.packet.privateSubkey]);class Ka{packetListToStructure(t,e=new Set){let r,i,n,s;for(const a of t){if(a instanceof qr){Ba.has(a.tag)&&!s&&(s=Ca.has(a.tag)?Ca:Ba);continue}const t=a.constructor.tag;if(s){if(!s.has(t))continue;s=null}if(e.has(t))throw Error("Unexpected packet type: "+t);switch(t){case T.packet.publicKey:case T.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case T.packet.userID:case T.packet.userAttribute:r=new ka(a,this),this.users.push(r);break;case T.packet.publicSubkey:case T.packet.secretSubkey:r=null,n=new Sa(a,this),this.subkeys.push(n);break;case T.packet.signature:switch(a.signatureType){case T.signature.certGeneric:case T.signature.certPersona:case T.signature.certCasual:case T.signature.certPositive:if(!r){O.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case T.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case T.signature.key:this.directSignatures.push(a);break;case T.signature.subkeyBinding:if(!n){O.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case T.signature.keyRevocation:this.revocationSignatures.push(a);break;case T.signature.subkeyRevocation:if(!n){O.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const t=new _s;return t.push(this.keyPacket),t.push(...this.revocationSignatures),t.push(...this.directSignatures),this.users.map((e=>t.push(...e.toPacketList()))),this.subkeys.map((e=>t.push(...e.toPacketList()))),t}clone(t=!1){const e=new this.constructor(this.toPacketList());return t&&e.getKeys().forEach((t=>{if(t.keyPacket=Object.create(Object.getPrototypeOf(t.keyPacket),Object.getOwnPropertyDescriptors(t.keyPacket)),!t.keyPacket.isDecrypted())return;const e={};Object.keys(t.keyPacket.privateParams).forEach((r=>{e[r]=new Uint8Array(t.keyPacket.privateParams[r])})),t.keyPacket.privateParams=e})),e}getSubkeys(t=null){return this.subkeys.filter((e=>!t||e.getKeyID().equals(t,!0)))}getKeys(t=null){const e=[];return t&&!this.getKeyID().equals(t,!0)||e.push(this),e.concat(this.getSubkeys(t))}getKeyIDs(){return this.getKeys().map((t=>t.getKeyID()))}getUserIDs(){return this.users.map((t=>t.userID?t.userID.userID:null)).filter((t=>null!==t))}write(){return this.toPacketList().write()}async getSigningKey(t=null,e=new Date,r={},i=L){await this.verifyPrimaryKey(e,r,i);const n=this.keyPacket;try{Ea(n,i)}catch(t){throw O.wrapError("Could not verify primary key",t)}const s=this.subkeys.slice().sort(((t,e)=>e.keyPacket.created-t.keyPacket.created));let a;for(const r of s)if(!t||r.getKeyID().equals(t))try{await r.verify(e,i);const t={key:n,bind:r.keyPacket},s=await la(r.bindingSignatures,n,T.signature.subkeyBinding,t,e,i);if(!Aa(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await la([s.embeddedSignature],r.keyPacket,T.signature.keyBinding,t,e,i),Ea(r.keyPacket,i),r}catch(t){a=t}try{const s=await this.getPrimarySelfSignature(e,r,i);if((!t||n.getKeyID().equals(t))&&Aa(n,s,i))return Ea(n,i),this}catch(t){a=t}throw O.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(t,e=new Date,r={},i=L){await this.verifyPrimaryKey(e,r,i);const n=this.keyPacket;try{Ea(n,i)}catch(t){throw O.wrapError("Could not verify primary key",t)}const s=this.subkeys.slice().sort(((t,e)=>e.keyPacket.created-t.keyPacket.created));let a;for(const r of s)if(!t||r.getKeyID().equals(t))try{await r.verify(e,i);const t={key:n,bind:r.keyPacket},s=await la(r.bindingSignatures,n,T.signature.subkeyBinding,t,e,i);if(ba(r.keyPacket,s,i))return Ea(r.keyPacket,i),r}catch(t){a=t}try{const s=await this.getPrimarySelfSignature(e,r,i);if((!t||n.getKeyID().equals(t))&&ba(n,s,i))return Ea(n,i),this}catch(t){a=t}throw O.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(t,e,r=new Date,i=L){return ga(this.keyPacket,T.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,t,e,r,i)}async verifyPrimaryKey(t=new Date,e={},r=L){const i=this.keyPacket;if(await this.isRevoked(null,null,t,r))throw Error("Primary key is revoked");if(fa(i,await this.getPrimarySelfSignature(t,e,r),t))throw Error("Primary key is expired");if(6!==i.version){const e=await la(this.directSignatures,i,T.signature.key,{key:i},t,r).catch((()=>{}));if(e&&fa(i,e,t))throw Error("Primary key is expired")}}async getExpirationTime(t,e=L){let r;try{const i=await this.getPrimarySelfSignature(null,t,e),n=ma(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await la(this.directSignatures,this.keyPacket,T.signature.key,{key:this.keyPacket},null,e).catch((()=>{}));if(a){const t=ma(this.keyPacket,a);r=Math.min(n,s,t)}else r=n<s?n:s}catch(t){r=null}return O.normalizeDate(r)}async getPrimarySelfSignature(t=new Date,e={},r=L){const i=this.keyPacket;if(6===i.version)return la(this.directSignatures,i,T.signature.key,{key:i},t,r);const{selfCertification:n}=await this.getPrimaryUser(t,e,r);return n}async getPrimaryUser(t=new Date,e={},r=L){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==e.name&&s.userID.name!==e.name||void 0!==e.email&&s.userID.email!==e.email||void 0!==e.comment&&s.userID.comment!==e.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await la(s.selfCertifications,i,T.signature.certGeneric,o,t,r);n.push({index:a,user:s,selfCertification:c})}catch(t){s=t}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(e){return e.selfCertification.revoked||e.user.isRevoked(e.selfCertification,null,t,r)})));const a=n.sort((function(t,e){const r=t.selfCertification,i=e.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,t,r))throw Error("Primary user is revoked");return a}async update(t,e=new Date,r=L){if(!this.hasSameFingerprintAs(t))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&t.isPrivate()){if(!(this.subkeys.length===t.subkeys.length&&this.subkeys.every((e=>t.subkeys.some((t=>e.hasSameFingerprintAs(t)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return t.update(this,r)}const i=this.clone();return await pa(t,i,"revocationSignatures",e,(n=>ga(i.keyPacket,T.signature.keyRevocation,i,[n],null,t.keyPacket,e,r))),await pa(t,i,"directSignatures",e),await Promise.all(t.users.map((async t=>{const n=i.users.filter((e=>t.userID&&t.userID.equals(e.userID)||t.userAttribute&&t.userAttribute.equals(e.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(t,e,r))));else{const e=t.clone();e.mainKey=i,i.users.push(e)}}))),await Promise.all(t.subkeys.map((async t=>{const n=i.subkeys.filter((e=>e.hasSameFingerprintAs(t)));if(n.length>0)await Promise.all(n.map((i=>i.update(t,e,r))));else{const e=t.clone();e.mainKey=i,i.subkeys.push(e)}}))),i}async getRevocationCertificate(t=new Date,e=L){const r={key:this.keyPacket},i=await la(this.revocationSignatures,this.keyPacket,T.signature.keyRevocation,r,t,e),n=new _s;n.push(i);const s=6!==this.keyPacket.version;return rt(T.armor.publicKey,n.write(),null,null,"This is a revocation certificate",s,e)}async applyRevocationCertificate(t,e=new Date,r=L){const i=await et(t),n=(await _s.fromBinary(i.data,Ia,r)).findPacket(T.packet.signature);if(!n||n.signatureType!==T.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,T.signature.keyRevocation,{key:this.keyPacket},e,void 0,r)}catch(t){throw O.wrapError("Could not verify revocation signature",t)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(t,e,r,i=L){const{index:n,user:s}=await this.getPrimaryUser(e,r,i),a=await s.certify(t,e,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(t,e=new Date,r=L){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(t,e,r)}))),i}async verifyPrimaryUser(t,e=new Date,r,i=L){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(e,r,i);return t?await s.verifyAllCertifications(t,e,i):[{keyID:n.getKeyID(),valid:await s.verify(e,i).catch((()=>!1))}]}async verifyAllUsers(t,e=new Date,r=L){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=t?await s.verifyAllCertifications(t,e,r):[{keyID:i.getKeyID(),valid:await s.verify(e,r).catch((()=>!1))}];n.push(...a.map((t=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:t.keyID,valid:t.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((t=>{Ka.prototype[t]=Sa.prototype[t]}));class Pa extends Ka{constructor(t){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],t&&(this.packetListToStructure(t,new Set([T.packet.secretKey,T.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(t=L){const e=6!==this.keyPacket.version;return rt(T.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,e,t)}}class Da extends Pa{constructor(t){if(super(),this.packetListToStructure(t,new Set([T.packet.publicKey,T.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const t=new _s,e=this.toPacketList();let r=!1;for(const i of e)if(!r||i.constructor.tag!==T.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case T.packet.secretKey:{if(i.algorithm===T.publicKey.aead||i.algorithm===T.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const e=$s.fromSecretKeyPacket(i);t.push(e);break}case T.packet.secretSubkey:{if(i.algorithm===T.publicKey.aead||i.algorithm===T.publicKey.hmac){r=!0;break}const e=ea.fromSecretSubkeyPacket(i);t.push(e);break}default:t.push(i)}return new Pa(t)}armor(t=L){const e=6!==this.keyPacket.version;return rt(T.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,e,t)}async getDecryptionKeys(t,e=new Date,r={},i=L){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!t||this.subkeys[r].getKeyID().equals(t,!0))try{const t={key:n,bind:this.subkeys[r].keyPacket},a=await la(this.subkeys[r].bindingSignatures,n,T.signature.subkeyBinding,t,e,i);va(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(t){}const a=await this.getPrimarySelfSignature(e,r,i);return t&&!n.getKeyID().equals(t,!0)||!va(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:t})=>t.isDecrypted()))}async validate(t=L){if(!this.isPrivate())throw Error("Cannot validate a public key");let e;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...t,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(e=r.keyPacket)}else e=this.keyPacket;if(e)return e.validate();{const t=this.getKeys();if(t.map((t=>t.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(t.map((async t=>t.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:t})=>{t.isDecrypted()&&t.clearPrivateParams()}))}async revoke({flag:t=T.reasonForRevocation.noReason,string:e=""}={},r=new Date,i=L){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await da(n,null,this.keyPacket,{signatureType:T.signature.keyRevocation,reasonForRevocationFlag:T.write(T.reasonForRevocation,t),reasonForRevocationString:e},r,void 0,void 0,void 0,i)),s}async addSubkey(t={}){const e={...L,...t.config};if(t.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(t.rsaBits<e.minRSABits)throw Error(`rsaBits should be at least ${e.minRSABits}, got: ${t.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(t){switch(T.write(T.publicKey,t)){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:case T.publicKey.dsa:return"rsa";case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:return"ecc";case T.publicKey.ed25519:return"curve25519";case T.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",t=wa(t,i);const n=await ha(t,{...e,v6Keys:6===this.keyPacket.version});Ea(n,e);const s=await ya(n,r,t,e),a=this.toPacketList();return a.push(n,s),new Da(a)}}const Ua=/*#__PURE__*/O.constructAllowedPackets([$s,ea,ia,aa,sa,ra,Us]);function Ma(t){for(const e of t)switch(e.constructor.tag){case T.packet.secretKey:return new Da(t);case T.packet.publicKey:return new Pa(t)}throw Error("No key packet found")}async function xa(t,e,r,i){r.passphrase&&await t.encrypt(r.passphrase,i),await Promise.all(e.map((async function(t,e){const n=r.subkeys[e].passphrase;n&&await t.encrypt(n,i)})));const n=new _s;function s(t,e){return[e,...t.filter((t=>t!==e))]}function a(){const e={};e.keyFlags=[T.keyFlags.certifyKeys|T.keyFlags.signData];const n=s([T.symmetric.aes256,T.symmetric.aes128],i.preferredSymmetricAlgorithm);if(e.preferredSymmetricAlgorithms=n,i.aeadProtect){const t=s([T.aead.gcm,T.aead.eax,T.aead.ocb],i.preferredAEADAlgorithm);e.preferredCipherSuites=t.flatMap((t=>n.map((e=>[e,t]))))}return e.preferredHashAlgorithms=s([T.hash.sha256,T.hash.sha512,...6===t.version?[T.hash.sha3_256,T.hash.sha3_512]:[]],i.preferredHashAlgorithm),e.preferredCompressionAlgorithms=s([T.compression.uncompressed,T.compression.zlib,T.compression.zip],i.preferredCompressionAlgorithm),e.features=[0],e.features[0]|=T.features.modificationDetection,i.aeadProtect&&(e.features[0]|=T.features.seipdv2),r.keyExpirationTime>0&&(e.keyExpirationTime=r.keyExpirationTime,e.keyNeverExpires=!1),e}if(n.push(t),6===t.version){const e={key:t},s=a();s.signatureType=T.signature.key;const o=await da(e,null,t,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(e,n){const s=sa.fromObject(e),o={userID:s,key:t},c=6!==t.version?a():{};c.signatureType=T.signature.certGeneric,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await da(o,null,t,c,r.date,void 0,void 0,void 0,i)}}))).then((t=>{t.forEach((({userIDPacket:t,signaturePacket:e})=>{n.push(t),n.push(e)}))})),await Promise.all(e.map((async function(e,n){const s=r.subkeys[n];return{secretSubkeyPacket:e,subkeySignaturePacket:await ya(e,t,s,i)}}))).then((t=>{t.forEach((({secretSubkeyPacket:t,subkeySignaturePacket:e})=>{n.push(t),n.push(e)}))}));const o={key:t};return n.push(await da(o,null,t,{signatureType:T.signature.keyRevocation,reasonForRevocationFlag:T.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&t.clearPrivateParams(),await Promise.all(e.map((async function(t,e){r.subkeys[e].passphrase&&t.clearPrivateParams()}))),new Da(n)}const Qa=/*#__PURE__*/O.constructAllowedPackets([Cs,Ls,Zs,qs,ta,Js,Ws,Qs,Us]),Ra=/*#__PURE__*/O.constructAllowedPackets([Ws]),_a=/*#__PURE__*/O.constructAllowedPackets([Us]);class Ta{constructor(t){this.packets=t||new _s}getEncryptionKeyIDs(){const t=[];return this.packets.filterByTag(T.packet.publicKeyEncryptedSessionKey).forEach((function(e){t.push(e.publicKeyID)})),t}getSigningKeyIDs(){const t=this.unwrapCompressed(),e=t.packets.filterByTag(T.packet.onePassSignature);if(e.length>0)return e.map((t=>t.issuerKeyID));return t.packets.filterByTag(T.packet.signature).map((t=>t.issuerKeyID))}async decrypt(t,e,r,i=new Date,n=L){const s=this.packets.filterByTag(T.packet.symmetricallyEncryptedData,T.packet.symEncryptedIntegrityProtectedData,T.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(t,e,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:t,data:e})=>{if(!O.isUint8Array(e)||!a.cipherAlgorithm&&!O.isString(t))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||T.write(T.symmetric,t);await a.decrypt(r,e,n)}catch(t){O.printDebugError(t),h=t}})));if(M(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new Ta(a.packets);return a.packets=new _s,l}async decryptSessionKeys(t,e,r,i=new Date,n=L){let s,a=[];if(e){const t=this.packets.filterByTag(T.packet.symEncryptedSessionKey);if(0===t.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(e.map((async function(e,r){let i;i=r?await _s.fromBinary(t.write(),Ra,n):t,await Promise.all(i.map((async function(t){try{await t.decrypt(e),a.push(t)}catch(t){O.printDebugError(t),t instanceof sn&&(s=t)}})))})))}else{if(!t)throw Error("No key or password specified.");{const e=this.packets.filterByTag(T.packet.publicKeyEncryptedSessionKey);if(0===e.length)throw Error("No public key encrypted session key packet found.");await Promise.all(e.map((async function(e){await Promise.all(t.map((async function(t){let o=[T.symmetric.aes256,T.symmetric.aes128,T.symmetric.tripledes,T.symmetric.cast5];try{const e=await t.getPrimarySelfSignature(i,void 0,n);e.preferredSymmetricAlgorithms&&(o=o.concat(e.preferredSymmetricAlgorithms))}catch(t){}const c=(await t.getDecryptionKeys(e.publicKeyID,null,void 0,n)).map((t=>t.keyPacket));await Promise.all(c.map((async function(t){if(!t||t.isDummy())return;if(!t.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(e.publicKeyAlgorithm===T.publicKey.rsaEncrypt||e.publicKeyAlgorithm===T.publicKey.rsaEncryptSign||e.publicKeyAlgorithm===T.publicKey.rsaSign||e.publicKeyAlgorithm===T.publicKey.elgamal)){const i=e.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async e=>{const r=new Js;r.read(i);const n={sessionKeyAlgorithm:e,sessionKey:nn.generateSessionKey(e)};try{await r.decrypt(t,n),a.push(r)}catch(t){O.printDebugError(t),s=t}})))}else try{await e.decrypt(t);const i=r||e.sessionKeyAlgorithm;if(i&&!o.includes(T.write(T.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(e)}catch(t){O.printDebugError(t),s=t}})))}))),M(e.encrypted),e.encrypted=null})))}}if(a.length>0){if(a.length>1){const t=new Set;a=a.filter((e=>{const r=e.sessionKeyAlgorithm+O.uint8ArrayToString(e.sessionKey);return!t.has(r)&&(t.add(r),!0)}))}return a.map((t=>({data:t.sessionKey,algorithm:t.sessionKeyAlgorithm&&T.read(T.symmetric,t.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const t=this.unwrapCompressed().packets.findPacket(T.packet.literalData);return t&&t.getBytes()||null}getFilename(){const t=this.unwrapCompressed().packets.findPacket(T.packet.literalData);return t&&t.getFilename()||null}getText(){const t=this.unwrapCompressed().packets.findPacket(T.packet.literalData);return t?t.getText():null}static async generateSessionKey(t=[],e=new Date,r=[],i=L){const{symmetricAlgo:n,aeadAlgo:s}=await async function(t=[],e=new Date,r=[],i=L){const n=await Promise.all(t.map(((t,n)=>t.getPrimarySelfSignature(e,r[n],i))));if(t.length?!i.ignoreSEIPDv2FeatureFlag&&n.every((t=>t.features&&t.features[0]&T.features.seipdv2)):i.aeadProtect){const t={symmetricAlgo:T.symmetric.aes128,aeadAlgo:T.aead.ocb},e={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((t=>t.preferredCipherSuites&&t.preferredCipherSuites.some((t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo))))?e:t}const s=T.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((t=>t.preferredSymmetricAlgorithms&&t.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(t,e,r,i),a=T.read(T.symmetric,n),o=s?T.read(T.aead,s):void 0;await Promise.all(t.map((t=>t.getEncryptionKey().catch((()=>null)).then((t=>{if(t&&(t.keyPacket.algorithm===T.publicKey.x25519||t.keyPacket.algorithm===T.publicKey.x448)&&!o&&!O.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:nn.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(t,e,r,i=!1,n=[],s=new Date,a=[],o=L){if(r){if(!O.isUint8Array(r.data)||!O.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(t&&t.length)r=await Ta.generateSessionKey(t,s,a,o);else{if(!e||!e.length)throw Error("No keys, passwords, or session key provided.");r=await Ta.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await Ta.encryptSessionKey(c,h,u,t,e,i,n,s,a,o),f=qs.fromObject({version:u?2:1,aeadAlgorithm:u?T.write(T.aead,u):null});f.packets=this.packets;const y=T.write(T.symmetric,h);return await f.encrypt(y,c,o),l.packets.push(f),f.packets=new _s,l}static async encryptSessionKey(t,e,r,i,n,s=!1,a=[],o=new Date,c=[],h=L){const u=new _s,l=T.write(T.symmetric,e),f=r&&T.write(T.aead,r);if(i){const e=await Promise.all(i.map((async function(e,r){const i=await e.getEncryptionKey(a[r],o,c,h),n=Js.fromObject({version:f?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:t,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...e)}if(n){const e=async function(t,e){try{return await t.decrypt(e),1}catch(t){return 0}},r=(t,e)=>t+e,i=async function(t,s,a,o){const c=new Ws(h);if(c.sessionKey=t,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((t=>e(c,t))))).reduce(r))return i(t,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((e=>i(t,l,f,e))));u.push(...s)}return new Ta(u)}async sign(t=[],e=null,r=[],i=new Date,n=[],s=[],a=L){const o=new _s,c=this.packets.findPacket(T.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await La(c,t,e,r,i,n,s,!1,a),u=h.map(((t,e)=>Qs.fromSignaturePacket(t,0===e))).reverse();return o.push(...u),o.push(c),o.push(...h),new Ta(o)}compress(t,e=L){if(t===T.compression.uncompressed)return this;const r=new Ls(e);r.algorithm=t,r.packets=this.packets;const i=new _s;return i.push(r),new Ta(i)}async signDetached(t=[],e=null,r=[],i=new Date,n=[],s=[],a=L){const o=this.packets.findPacket(T.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new ca(await La(o,t,e,r,i,n,s,!0,a))}async verify(t,e=new Date,r=L){const i=this.unwrapCompressed(),n=i.packets.filterByTag(T.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");u(i.packets.stream)&&i.packets.push(...await U(i.packets.stream,(t=>t||[])));const s=i.packets.filterByTag(T.packet.onePassSignature).reverse(),a=i.packets.filterByTag(T.packet.signature);return s.length&&!a.length&&O.isStream(i.packets.stream)&&!u(i.packets.stream)?(await Promise.all(s.map((async t=>{t.correspondingSig=new Promise(((e,r)=>{t.correspondingSigResolve=e,t.correspondingSigReject=r})),t.signatureData=x((async()=>(await t.correspondingSig).signatureData)),t.hashed=U(await t.hash(t.signatureType,n[0],void 0,!1)),t.hashed.catch((()=>{}))}))),i.packets.stream=I(i.packets.stream,(async(t,e)=>{const r=Q(t),i=R(e);try{for(let t=0;t<s.length;t++){const{value:e}=await r.read();s[t].correspondingSigResolve(e)}await r.readToEnd(),await i.ready,await i.close()}catch(t){s.forEach((e=>{e.correspondingSigReject(t)})),await i.abort(t)}})),Na(s,n,t,e,!1,r)):Na(a,n,t,e,!1,r)}verifyDetached(t,e,r=new Date,i=L){const n=this.unwrapCompressed().packets.filterByTag(T.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return Na(t.packets.filterByTag(T.packet.signature),n,e,r,!0,i)}unwrapCompressed(){const t=this.packets.filterByTag(T.packet.compressedData);return t.length?new Ta(t[0].packets):this}async appendSignature(t,e=L){await this.packets.read(O.isUint8Array(t)?t:(await et(t)).data,_a,e)}write(){return this.packets.write()}armor(t=L){const e=this.packets[this.packets.length-1],r=e.constructor.tag===qs.tag?2!==e.version:this.packets.some((t=>t.constructor.tag===Us.tag&&6!==t.version));return rt(T.armor.message,this.write(),null,null,null,r,t)}}async function La(t,e,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=L){const h=new _s,u=null===t.text?T.signature.binary:T.signature.text;if(await Promise.all(e.map((async(e,r)=>{const h=s[r];if(!e.isPrivate())throw Error("Need private key for signing");const l=await e.getSigningKey(i[r],n,h,c);return da(t,e,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((t=>{h.push(...t)})),r){const t=r.packets.filterByTag(T.packet.signature);h.push(...t)}return h}async function Na(t,e,r,i=new Date,n=!1,s=L){return Promise.all(t.filter((function(t){return["text","binary"].includes(T.read(T.signature,t.signatureType))})).map((async function(t){return async function(t,e,r,i=new Date,n=!1,s=L){let a,o;for(const e of r){const r=e.getKeys(t.issuerKeyID);if(r.length>0){a=e,o=r[0];break}}const c=t instanceof Qs?t.correspondingSig:t,h={keyID:t.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+t.issuerKeyID.toHex());await t.verify(o.keyPacket,t.signatureType,e[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(t){if(!s.allowInsecureVerificationWithReformattedKeys||!t.message.match(/Signature creation time is in the future/))throw t;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const t=await c,e=new _s;return t&&e.push(t),new ca(e)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(t,e,r,i,n,s)})))}const Oa=/*#__PURE__*/O.constructAllowedPackets([Us]);class Fa{constructor(t,e){if(this.text=O.removeTrailingSpaces(t).replace(/\r?\n/g,"\r\n"),e&&!(e instanceof ca))throw Error("Invalid signature input");this.signature=e||new ca(new _s)}getSigningKeyIDs(){const t=[];return this.signature.packets.forEach((function(e){t.push(e.issuerKeyID)})),t}async sign(t,e=null,r=[],i=new Date,n=[],s=[],a=L){const o=new Cs;o.setText(this.text);const c=new ca(await La(o,t,e,r,i,n,s,!0,a));return new Fa(this.text,c)}verify(t,e=new Date,r=L){const i=this.signature.packets.filterByTag(T.packet.signature),n=new Cs;return n.setText(this.text),Na(i,[n],t,e,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(t=L){const e=this.signature.packets.some((t=>6!==t.version)),r={hash:e?Array.from(new Set(this.signature.packets.map((t=>T.read(T.hash,t.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return rt(T.armor.signed,r,void 0,void 0,void 0,e,t)}}function Ha(t){if(!(t instanceof Ta))throw Error("Parameter [message] needs to be of type Message")}function za(t){if(!(t instanceof Fa||t instanceof Ta))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function Ga(t){if("armored"!==t&&"binary"!==t&&"object"!==t)throw Error("Unsupported format "+t)}const qa=Object.keys(L).length;function ja(t){const e=Object.keys(t);if(e.length!==qa)for(const t of e)if(void 0===L[t])throw Error("Unknown config property: "+t)}function Va(t){return t&&!O.isArray(t)&&(t=[t]),t}async function Za(t){return"array"===O.isStream(t)?U(t):t}function Ja(t,e){t.data=I(e.packets.stream,(async(e,r)=>{await v(t.data,r,{preventClose:!0});const i=R(r);try{await U(e,(t=>t)),await i.close()}catch(t){await i.abort(t)}}))}function Ya(t,e,r){switch(e){case"object":return t;case"armored":return t.armor(r);case"binary":return t.write();default:throw Error("Unsupported format "+e)}}class Wa{static setImplementation(t,e=!1){if(Wa.Implementation&&!e)throw Error("Implementation already set");Wa.Implementation=t}static new(t){return new Wa.Implementation(t)}}class $a extends Wa{constructor(t){if(super(),void 0===t)throw Error("Invalid BigInteger input");if(t instanceof Uint8Array){const e="0123456789ABCDEF";let r="";t.forEach((t=>{r+=e[t>>4]+e[15&t]})),this.value=BigInt("0x0"+r)}else this.value=BigInt(t)}clone(){return new $a(this.value)}iinc(){return this.value++,this}inc(){return this.clone().iinc()}idec(){return this.value--,this}dec(){return this.clone().idec()}iadd(t){return this.value+=t.value,this}add(t){return this.clone().iadd(t)}isub(t){return this.value-=t.value,this}sub(t){return this.clone().isub(t)}imul(t){return this.value*=t.value,this}mul(t){return this.clone().imul(t)}imod(t){return this.value%=t.value,this.isNegative()&&this.iadd(t),this}mod(t){return this.clone().imod(t)}modExp(t,e){if(e.isZero())throw Error("Modulo cannot be zero");if(e.isOne())return new $a(0);if(t.isNegative())throw Error("Unsopported negative exponent");let r=t.value,i=this.value;i%=e.value;let n=BigInt(1);for(;r>BigInt(0);){const t=r&BigInt(1);r>>=BigInt(1);const s=n*i%e.value;n=t?s:n,i=i*i%e.value}return new $a(n)}modInv(t){const{gcd:e,x:r}=this._egcd(t);if(!e.isOne())throw Error("Inverse does not exist");return r.add(t).mod(t)}idiv(t){return this.value/=t.value,this}div(t){return this.clone().idiv(t)}_egcd(t){let e=BigInt(0),r=BigInt(1),i=BigInt(1),n=BigInt(0),s=this.abs().value,a=t.abs().value;const o=this.isNegative(),c=t.isNegative();for(;a!==BigInt(0);){const t=s/a;let o=e;e=i-t*e,i=o,o=r,r=n-t*r,n=o,o=a,a=s%a,s=o}return{x:new $a(o?-i:i),y:new $a(c?-n:n),gcd:new $a(s)}}gcd(t){let e=this.value,r=t.value;for(;r!==BigInt(0);){const t=r;r=e%r,e=t}return new $a(e)}ileftShift(t){return this.value<<=t.value,this}leftShift(t){return this.clone().ileftShift(t)}irightShift(t){return this.value>>=t.value,this}rightShift(t){return this.clone().irightShift(t)}ixor(t){return this.value^=t.value,this}xor(t){return this.clone().ixor(t)}ibitwiseAnd(t){return this.value&=t.value,this}bitwiseAnd(t){return this.clone().ibitwiseAnd(t)}ibitwiseOr(t){return this.value|=t.value,this}equal(t){return this.value===t.value}lt(t){return this.value<t.value}lte(t){return this.value<=t.value}gt(t){return this.value>t.value}gte(t){return this.value>=t.value}isZero(){return this.value===BigInt(0)}isOne(){return this.value===BigInt(1)}isNegative(){return this.value<BigInt(0)}isEven(){return!(this.value&BigInt(1))}abs(){const t=this.clone();return this.isNegative()&&(t.value=-t.value),t}negate(){const t=this.clone();return t.value=-t.value,t}toString(){return this.value.toString()}toNumber(){const t=Number(this.value);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}getBit(t){return(this.value>>BigInt(t)&BigInt(1))===BigInt(0)?0:1}bitLength(){const t=new $a(0),e=new $a(1),r=new $a(-1),i=this.isNegative()?r:t;let n=1;const s=this.clone();for(;!s.irightShift(e).equal(i);)n++;return n}byteLength(){const t=new $a(0),e=new $a(-1),r=this.isNegative()?e:t,i=new $a(8);let n=1;const s=this.clone();for(;!s.irightShift(i).equal(r);)n++;return n}toUint8Array(t="be",e){let r=this.value.toString(16);r.length%2==1&&(r="0"+r);const i=r.length/2,n=new Uint8Array(e||i),s=e?e-i:0;let a=0;for(;a<i;)n[a+s]=parseInt(r.slice(2*a,2*a+2),16),a++;return"be"!==t&&n.reverse(),n}}var Xa=/*#__PURE__*/Object.freeze({__proto__:null,default:$a}),to={exports:{}};!function(t,e){function r(t,e){if(!t)throw Error(e||"Assertion failed")}function i(t,e){t.super_=e;var r=function(){};r.prototype=e.prototype,t.prototype=new r,t.prototype.constructor=t}function n(t,e,r){if(n.isBN(t))return t;this.negative=0,this.words=null,this.length=0,this.red=null,null!==t&&("le"!==e&&"be"!==e||(r=e,e=10),this._init(t||0,e||10,r||"be"))}var s;"object"==typeof t?t.exports=n:e.BN=n,n.BN=n,n.wordSize=26;try{s="undefined"!=typeof window&&void 0!==window.Buffer?window.Buffer:require("buffer").Buffer}catch(t){}function a(t,e){var r=t.charCodeAt(e);return r>=65&&r<=70?r-55:r>=97&&r<=102?r-87:r-48&15}function o(t,e,r){var i=a(t,r);return r-1>=e&&(i|=a(t,r-1)<<4),i}function c(t,e,r,i){for(var n=0,s=Math.min(t.length,r),a=e;a<s;a++){var o=t.charCodeAt(a)-48;n*=i,n+=o>=49?o-49+10:o>=17?o-17+10:o}return n}n.isBN=function(t){return t instanceof n||null!==t&&"object"==typeof t&&t.constructor.wordSize===n.wordSize&&Array.isArray(t.words)},n.max=function(t,e){return t.cmp(e)>0?t:e},n.min=function(t,e){return t.cmp(e)<0?t:e},n.prototype._init=function(t,e,i){if("number"==typeof t)return this._initNumber(t,e,i);if("object"==typeof t)return this._initArray(t,e,i);"hex"===e&&(e=16),r(e===(0|e)&&e>=2&&e<=36);var n=0;"-"===(t=t.toString().replace(/\s+/g,""))[0]&&(n++,this.negative=1),n<t.length&&(16===e?this._parseHex(t,n,i):(this._parseBase(t,e,n),"le"===i&&this._initArray(this.toArray(),e,i)))},n.prototype._initNumber=function(t,e,i){t<0&&(this.negative=1,t=-t),t<67108864?(this.words=[67108863&t],this.length=1):t<4503599627370496?(this.words=[67108863&t,t/67108864&67108863],this.length=2):(r(t<9007199254740992),this.words=[67108863&t,t/67108864&67108863,1],this.length=3),"le"===i&&this._initArray(this.toArray(),e,i)},n.prototype._initArray=function(t,e,i){if(r("number"==typeof t.length),t.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(t.length/3),this.words=Array(this.length);for(var n=0;n<this.length;n++)this.words[n]=0;var s,a,o=0;if("be"===i)for(n=t.length-1,s=0;n>=0;n-=3)a=t[n]|t[n-1]<<8|t[n-2]<<16,this.words[s]|=a<<o&67108863,this.words[s+1]=a>>>26-o&67108863,(o+=24)>=26&&(o-=26,s++);else if("le"===i)for(n=0,s=0;n<t.length;n+=3)a=t[n]|t[n+1]<<8|t[n+2]<<16,this.words[s]|=a<<o&67108863,this.words[s+1]=a>>>26-o&67108863,(o+=24)>=26&&(o-=26,s++);return this.strip()},n.prototype._parseHex=function(t,e,r){this.length=Math.ceil((t.length-e)/6),this.words=Array(this.length);for(var i=0;i<this.length;i++)this.words[i]=0;var n,s=0,a=0;if("be"===r)for(i=t.length-1;i>=e;i-=2)n=o(t,e,i)<<s,this.words[a]|=67108863&n,s>=18?(s-=18,a+=1,this.words[a]|=n>>>26):s+=8;else for(i=(t.length-e)%2==0?e+1:e;i<t.length;i+=2)n=o(t,e,i)<<s,this.words[a]|=67108863&n,s>=18?(s-=18,a+=1,this.words[a]|=n>>>26):s+=8;this.strip()},n.prototype._parseBase=function(t,e,r){this.words=[0],this.length=1;for(var i=0,n=1;n<=67108863;n*=e)i++;i--,n=n/e|0;for(var s=t.length-r,a=s%i,o=Math.min(s,s-a)+r,h=0,u=r;u<o;u+=i)h=c(t,u,u+i,e),this.imuln(n),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h);if(0!==a){var l=1;for(h=c(t,u,t.length,e),u=0;u<a;u++)l*=e;this.imuln(l),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h)}this.strip()},n.prototype.copy=function(t){t.words=Array(this.length);for(var e=0;e<this.length;e++)t.words[e]=this.words[e];t.length=this.length,t.negative=this.negative,t.red=this.red},n.prototype.clone=function(){var t=new n(null);return this.copy(t),t},n.prototype._expand=function(t){for(;this.length<t;)this.words[this.length++]=0;return this},n.prototype.strip=function(){for(;this.length>1&&0===this.words[this.length-1];)this.length--;return this._normSign()},n.prototype._normSign=function(){return 1===this.length&&0===this.words[0]&&(this.negative=0),this},n.prototype.inspect=function(){return(this.red?"<BN-R: ":"<BN: ")+this.toString(16)+">"};var h=["","0","00","000","0000","00000","000000","0000000","00000000","000000000","0000000000","00000000000","000000000000","0000000000000","00000000000000","000000000000000","0000000000000000","00000000000000000","000000000000000000","0000000000000000000","00000000000000000000","000000000000000000000","0000000000000000000000","00000000000000000000000","000000000000000000000000","0000000000000000000000000"],u=[0,0,25,16,12,11,10,9,8,8,7,7,7,7,6,6,6,6,6,6,6,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5],l=[0,0,33554432,43046721,16777216,48828125,60466176,40353607,16777216,43046721,1e7,19487171,35831808,62748517,7529536,11390625,16777216,24137569,34012224,47045881,64e6,4084101,5153632,6436343,7962624,9765625,11881376,14348907,17210368,20511149,243e5,28629151,33554432,39135393,45435424,52521875,60466176];function f(t,e,r){r.negative=e.negative^t.negative;var i=t.length+e.length|0;r.length=i,i=i-1|0;var n=0|t.words[0],s=0|e.words[0],a=n*s,o=67108863&a,c=a/67108864|0;r.words[0]=o;for(var h=1;h<i;h++){for(var u=c>>>26,l=67108863&c,f=Math.min(h,e.length-1),y=Math.max(0,h-t.length+1);y<=f;y++){var d=h-y|0;u+=(a=(n=0|t.words[d])*(s=0|e.words[y])+l)/67108864|0,l=67108863&a}r.words[h]=0|l,c=0|u}return 0!==c?r.words[h]=0|c:r.length--,r.strip()}n.prototype.toString=function(t,e){var i;if(e=0|e||1,16===(t=t||10)||"hex"===t){i="";for(var n=0,s=0,a=0;a<this.length;a++){var o=this.words[a],c=(16777215&(o<<n|s)).toString(16);i=0!=(s=o>>>24-n&16777215)||a!==this.length-1?h[6-c.length]+c+i:c+i,(n+=2)>=26&&(n-=26,a--)}for(0!==s&&(i=s.toString(16)+i);i.length%e!=0;)i="0"+i;return 0!==this.negative&&(i="-"+i),i}if(t===(0|t)&&t>=2&&t<=36){var f=u[t],y=l[t];i="";var d=this.clone();for(d.negative=0;!d.isZero();){var p=d.modn(y).toString(t);i=(d=d.idivn(y)).isZero()?p+i:h[f-p.length]+p+i}for(this.isZero()&&(i="0"+i);i.length%e!=0;)i="0"+i;return 0!==this.negative&&(i="-"+i),i}r(!1,"Base should be between 2 and 36")},n.prototype.toNumber=function(){var t=this.words[0];return 2===this.length?t+=67108864*this.words[1]:3===this.length&&1===this.words[2]?t+=4503599627370496+67108864*this.words[1]:this.length>2&&r(!1,"Number can only safely store up to 53 bits"),0!==this.negative?-t:t},n.prototype.toJSON=function(){return this.toString(16)},n.prototype.toBuffer=function(t,e){return r(void 0!==s),this.toArrayLike(s,t,e)},n.prototype.toArray=function(t,e){return this.toArrayLike(Array,t,e)},n.prototype.toArrayLike=function(t,e,i){var n=this.byteLength(),s=i||Math.max(1,n);r(n<=s,"byte array longer than desired length"),r(s>0,"Requested array length <= 0"),this.strip();var a,o,c="le"===e,h=new t(s),u=this.clone();if(c){for(o=0;!u.isZero();o++)a=u.andln(255),u.iushrn(8),h[o]=a;for(;o<s;o++)h[o]=0}else{for(o=0;o<s-n;o++)h[o]=0;for(o=0;!u.isZero();o++)a=u.andln(255),u.iushrn(8),h[s-o-1]=a}return h},n.prototype._countBits=Math.clz32?function(t){return 32-Math.clz32(t)}:function(t){var e=t,r=0;return e>=4096&&(r+=13,e>>>=13),e>=64&&(r+=7,e>>>=7),e>=8&&(r+=4,e>>>=4),e>=2&&(r+=2,e>>>=2),r+e},n.prototype._zeroBits=function(t){if(0===t)return 26;var e=t,r=0;return 8191&e||(r+=13,e>>>=13),127&e||(r+=7,e>>>=7),15&e||(r+=4,e>>>=4),3&e||(r+=2,e>>>=2),1&e||r++,r},n.prototype.bitLength=function(){var t=this.words[this.length-1],e=this._countBits(t);return 26*(this.length-1)+e},n.prototype.zeroBits=function(){if(this.isZero())return 0;for(var t=0,e=0;e<this.length;e++){var r=this._zeroBits(this.words[e]);if(t+=r,26!==r)break}return t},n.prototype.byteLength=function(){return Math.ceil(this.bitLength()/8)},n.prototype.toTwos=function(t){return 0!==this.negative?this.abs().inotn(t).iaddn(1):this.clone()},n.prototype.fromTwos=function(t){return this.testn(t-1)?this.notn(t).iaddn(1).ineg():this.clone()},n.prototype.isNeg=function(){return 0!==this.negative},n.prototype.neg=function(){return this.clone().ineg()},n.prototype.ineg=function(){return this.isZero()||(this.negative^=1),this},n.prototype.iuor=function(t){for(;this.length<t.length;)this.words[this.length++]=0;for(var e=0;e<t.length;e++)this.words[e]=this.words[e]|t.words[e];return this.strip()},n.prototype.ior=function(t){return r(!(this.negative|t.negative)),this.iuor(t)},n.prototype.or=function(t){return this.length>t.length?this.clone().ior(t):t.clone().ior(this)},n.prototype.uor=function(t){return this.length>t.length?this.clone().iuor(t):t.clone().iuor(this)},n.prototype.iuand=function(t){var e;e=this.length>t.length?t:this;for(var r=0;r<e.length;r++)this.words[r]=this.words[r]&t.words[r];return this.length=e.length,this.strip()},n.prototype.iand=function(t){return r(!(this.negative|t.negative)),this.iuand(t)},n.prototype.and=function(t){return this.length>t.length?this.clone().iand(t):t.clone().iand(this)},n.prototype.uand=function(t){return this.length>t.length?this.clone().iuand(t):t.clone().iuand(this)},n.prototype.iuxor=function(t){var e,r;this.length>t.length?(e=this,r=t):(e=t,r=this);for(var i=0;i<r.length;i++)this.words[i]=e.words[i]^r.words[i];if(this!==e)for(;i<e.length;i++)this.words[i]=e.words[i];return this.length=e.length,this.strip()},n.prototype.ixor=function(t){return r(!(this.negative|t.negative)),this.iuxor(t)},n.prototype.xor=function(t){return this.length>t.length?this.clone().ixor(t):t.clone().ixor(this)},n.prototype.uxor=function(t){return this.length>t.length?this.clone().iuxor(t):t.clone().iuxor(this)},n.prototype.inotn=function(t){r("number"==typeof t&&t>=0);var e=0|Math.ceil(t/26),i=t%26;this._expand(e),i>0&&e--;for(var n=0;n<e;n++)this.words[n]=67108863&~this.words[n];return i>0&&(this.words[n]=~this.words[n]&67108863>>26-i),this.strip()},n.prototype.notn=function(t){return this.clone().inotn(t)},n.prototype.setn=function(t,e){r("number"==typeof t&&t>=0);var i=t/26|0,n=t%26;return this._expand(i+1),this.words[i]=e?this.words[i]|1<<n:this.words[i]&~(1<<n),this.strip()},n.prototype.iadd=function(t){var e,r,i;if(0!==this.negative&&0===t.negative)return this.negative=0,e=this.isub(t),this.negative^=1,this._normSign();if(0===this.negative&&0!==t.negative)return t.negative=0,e=this.isub(t),t.negative=1,e._normSign();this.length>t.length?(r=this,i=t):(r=t,i=this);for(var n=0,s=0;s<i.length;s++)e=(0|r.words[s])+(0|i.words[s])+n,this.words[s]=67108863&e,n=e>>>26;for(;0!==n&&s<r.length;s++)e=(0|r.words[s])+n,this.words[s]=67108863&e,n=e>>>26;if(this.length=r.length,0!==n)this.words[this.length]=n,this.length++;else if(r!==this)for(;s<r.length;s++)this.words[s]=r.words[s];return this},n.prototype.add=function(t){var e;return 0!==t.negative&&0===this.negative?(t.negative=0,e=this.sub(t),t.negative^=1,e):0===t.negative&&0!==this.negative?(this.negative=0,e=t.sub(this),this.negative=1,e):this.length>t.length?this.clone().iadd(t):t.clone().iadd(this)},n.prototype.isub=function(t){if(0!==t.negative){t.negative=0;var e=this.iadd(t);return t.negative=1,e._normSign()}if(0!==this.negative)return this.negative=0,this.iadd(t),this.negative=1,this._normSign();var r,i,n=this.cmp(t);if(0===n)return this.negative=0,this.length=1,this.words[0]=0,this;n>0?(r=this,i=t):(r=t,i=this);for(var s=0,a=0;a<i.length;a++)s=(e=(0|r.words[a])-(0|i.words[a])+s)>>26,this.words[a]=67108863&e;for(;0!==s&&a<r.length;a++)s=(e=(0|r.words[a])+s)>>26,this.words[a]=67108863&e;if(0===s&&a<r.length&&r!==this)for(;a<r.length;a++)this.words[a]=r.words[a];return this.length=Math.max(this.length,a),r!==this&&(this.negative=1),this.strip()},n.prototype.sub=function(t){return this.clone().isub(t)};var y=function(t,e,r){var i,n,s,a=t.words,o=e.words,c=r.words,h=0,u=0|a[0],l=8191&u,f=u>>>13,y=0|a[1],d=8191&y,p=y>>>13,g=0|a[2],m=8191&g,w=g>>>13,A=0|a[3],b=8191&A,v=A>>>13,E=0|a[4],k=8191&E,S=E>>>13,I=0|a[5],C=8191&I,B=I>>>13,K=0|a[6],P=8191&K,D=K>>>13,U=0|a[7],M=8191&U,x=U>>>13,Q=0|a[8],R=8191&Q,_=Q>>>13,T=0|a[9],L=8191&T,N=T>>>13,O=0|o[0],F=8191&O,H=O>>>13,z=0|o[1],G=8191&z,q=z>>>13,j=0|o[2],V=8191&j,Z=j>>>13,J=0|o[3],Y=8191&J,W=J>>>13,$=0|o[4],X=8191&$,tt=$>>>13,et=0|o[5],rt=8191&et,it=et>>>13,nt=0|o[6],st=8191&nt,at=nt>>>13,ot=0|o[7],ct=8191&ot,ht=ot>>>13,ut=0|o[8],lt=8191&ut,ft=ut>>>13,yt=0|o[9],dt=8191&yt,pt=yt>>>13;r.negative=t.negative^e.negative,r.length=19;var gt=(h+(i=Math.imul(l,F))|0)+((8191&(n=(n=Math.imul(l,H))+Math.imul(f,F)|0))<<13)|0;h=((s=Math.imul(f,H))+(n>>>13)|0)+(gt>>>26)|0,gt&=67108863,i=Math.imul(d,F),n=(n=Math.imul(d,H))+Math.imul(p,F)|0,s=Math.imul(p,H);var mt=(h+(i=i+Math.imul(l,G)|0)|0)+((8191&(n=(n=n+Math.imul(l,q)|0)+Math.imul(f,G)|0))<<13)|0;h=((s=s+Math.imul(f,q)|0)+(n>>>13)|0)+(mt>>>26)|0,mt&=67108863,i=Math.imul(m,F),n=(n=Math.imul(m,H))+Math.imul(w,F)|0,s=Math.imul(w,H),i=i+Math.imul(d,G)|0,n=(n=n+Math.imul(d,q)|0)+Math.imul(p,G)|0,s=s+Math.imul(p,q)|0;var wt=(h+(i=i+Math.imul(l,V)|0)|0)+((8191&(n=(n=n+Math.imul(l,Z)|0)+Math.imul(f,V)|0))<<13)|0;h=((s=s+Math.imul(f,Z)|0)+(n>>>13)|0)+(wt>>>26)|0,wt&=67108863,i=Math.imul(b,F),n=(n=Math.imul(b,H))+Math.imul(v,F)|0,s=Math.imul(v,H),i=i+Math.imul(m,G)|0,n=(n=n+Math.imul(m,q)|0)+Math.imul(w,G)|0,s=s+Math.imul(w,q)|0,i=i+Math.imul(d,V)|0,n=(n=n+Math.imul(d,Z)|0)+Math.imul(p,V)|0,s=s+Math.imul(p,Z)|0;var At=(h+(i=i+Math.imul(l,Y)|0)|0)+((8191&(n=(n=n+Math.imul(l,W)|0)+Math.imul(f,Y)|0))<<13)|0;h=((s=s+Math.imul(f,W)|0)+(n>>>13)|0)+(At>>>26)|0,At&=67108863,i=Math.imul(k,F),n=(n=Math.imul(k,H))+Math.imul(S,F)|0,s=Math.imul(S,H),i=i+Math.imul(b,G)|0,n=(n=n+Math.imul(b,q)|0)+Math.imul(v,G)|0,s=s+Math.imul(v,q)|0,i=i+Math.imul(m,V)|0,n=(n=n+Math.imul(m,Z)|0)+Math.imul(w,V)|0,s=s+Math.imul(w,Z)|0,i=i+Math.imul(d,Y)|0,n=(n=n+Math.imul(d,W)|0)+Math.imul(p,Y)|0,s=s+Math.imul(p,W)|0;var bt=(h+(i=i+Math.imul(l,X)|0)|0)+((8191&(n=(n=n+Math.imul(l,tt)|0)+Math.imul(f,X)|0))<<13)|0;h=((s=s+Math.imul(f,tt)|0)+(n>>>13)|0)+(bt>>>26)|0,bt&=67108863,i=Math.imul(C,F),n=(n=Math.imul(C,H))+Math.imul(B,F)|0,s=Math.imul(B,H),i=i+Math.imul(k,G)|0,n=(n=n+Math.imul(k,q)|0)+Math.imul(S,G)|0,s=s+Math.imul(S,q)|0,i=i+Math.imul(b,V)|0,n=(n=n+Math.imul(b,Z)|0)+Math.imul(v,V)|0,s=s+Math.imul(v,Z)|0,i=i+Math.imul(m,Y)|0,n=(n=n+Math.imul(m,W)|0)+Math.imul(w,Y)|0,s=s+Math.imul(w,W)|0,i=i+Math.imul(d,X)|0,n=(n=n+Math.imul(d,tt)|0)+Math.imul(p,X)|0,s=s+Math.imul(p,tt)|0;var vt=(h+(i=i+Math.imul(l,rt)|0)|0)+((8191&(n=(n=n+Math.imul(l,it)|0)+Math.imul(f,rt)|0))<<13)|0;h=((s=s+Math.imul(f,it)|0)+(n>>>13)|0)+(vt>>>26)|0,vt&=67108863,i=Math.imul(P,F),n=(n=Math.imul(P,H))+Math.imul(D,F)|0,s=Math.imul(D,H),i=i+Math.imul(C,G)|0,n=(n=n+Math.imul(C,q)|0)+Math.imul(B,G)|0,s=s+Math.imul(B,q)|0,i=i+Math.imul(k,V)|0,n=(n=n+Math.imul(k,Z)|0)+Math.imul(S,V)|0,s=s+Math.imul(S,Z)|0,i=i+Math.imul(b,Y)|0,n=(n=n+Math.imul(b,W)|0)+Math.imul(v,Y)|0,s=s+Math.imul(v,W)|0,i=i+Math.imul(m,X)|0,n=(n=n+Math.imul(m,tt)|0)+Math.imul(w,X)|0,s=s+Math.imul(w,tt)|0,i=i+Math.imul(d,rt)|0,n=(n=n+Math.imul(d,it)|0)+Math.imul(p,rt)|0,s=s+Math.imul(p,it)|0;var Et=(h+(i=i+Math.imul(l,st)|0)|0)+((8191&(n=(n=n+Math.imul(l,at)|0)+Math.imul(f,st)|0))<<13)|0;h=((s=s+Math.imul(f,at)|0)+(n>>>13)|0)+(Et>>>26)|0,Et&=67108863,i=Math.imul(M,F),n=(n=Math.imul(M,H))+Math.imul(x,F)|0,s=Math.imul(x,H),i=i+Math.imul(P,G)|0,n=(n=n+Math.imul(P,q)|0)+Math.imul(D,G)|0,s=s+Math.imul(D,q)|0,i=i+Math.imul(C,V)|0,n=(n=n+Math.imul(C,Z)|0)+Math.imul(B,V)|0,s=s+Math.imul(B,Z)|0,i=i+Math.imul(k,Y)|0,n=(n=n+Math.imul(k,W)|0)+Math.imul(S,Y)|0,s=s+Math.imul(S,W)|0,i=i+Math.imul(b,X)|0,n=(n=n+Math.imul(b,tt)|0)+Math.imul(v,X)|0,s=s+Math.imul(v,tt)|0,i=i+Math.imul(m,rt)|0,n=(n=n+Math.imul(m,it)|0)+Math.imul(w,rt)|0,s=s+Math.imul(w,it)|0,i=i+Math.imul(d,st)|0,n=(n=n+Math.imul(d,at)|0)+Math.imul(p,st)|0,s=s+Math.imul(p,at)|0;var kt=(h+(i=i+Math.imul(l,ct)|0)|0)+((8191&(n=(n=n+Math.imul(l,ht)|0)+Math.imul(f,ct)|0))<<13)|0;h=((s=s+Math.imul(f,ht)|0)+(n>>>13)|0)+(kt>>>26)|0,kt&=67108863,i=Math.imul(R,F),n=(n=Math.imul(R,H))+Math.imul(_,F)|0,s=Math.imul(_,H),i=i+Math.imul(M,G)|0,n=(n=n+Math.imul(M,q)|0)+Math.imul(x,G)|0,s=s+Math.imul(x,q)|0,i=i+Math.imul(P,V)|0,n=(n=n+Math.imul(P,Z)|0)+Math.imul(D,V)|0,s=s+Math.imul(D,Z)|0,i=i+Math.imul(C,Y)|0,n=(n=n+Math.imul(C,W)|0)+Math.imul(B,Y)|0,s=s+Math.imul(B,W)|0,i=i+Math.imul(k,X)|0,n=(n=n+Math.imul(k,tt)|0)+Math.imul(S,X)|0,s=s+Math.imul(S,tt)|0,i=i+Math.imul(b,rt)|0,n=(n=n+Math.imul(b,it)|0)+Math.imul(v,rt)|0,s=s+Math.imul(v,it)|0,i=i+Math.imul(m,st)|0,n=(n=n+Math.imul(m,at)|0)+Math.imul(w,st)|0,s=s+Math.imul(w,at)|0,i=i+Math.imul(d,ct)|0,n=(n=n+Math.imul(d,ht)|0)+Math.imul(p,ct)|0,s=s+Math.imul(p,ht)|0;var St=(h+(i=i+Math.imul(l,lt)|0)|0)+((8191&(n=(n=n+Math.imul(l,ft)|0)+Math.imul(f,lt)|0))<<13)|0;h=((s=s+Math.imul(f,ft)|0)+(n>>>13)|0)+(St>>>26)|0,St&=67108863,i=Math.imul(L,F),n=(n=Math.imul(L,H))+Math.imul(N,F)|0,s=Math.imul(N,H),i=i+Math.imul(R,G)|0,n=(n=n+Math.imul(R,q)|0)+Math.imul(_,G)|0,s=s+Math.imul(_,q)|0,i=i+Math.imul(M,V)|0,n=(n=n+Math.imul(M,Z)|0)+Math.imul(x,V)|0,s=s+Math.imul(x,Z)|0,i=i+Math.imul(P,Y)|0,n=(n=n+Math.imul(P,W)|0)+Math.imul(D,Y)|0,s=s+Math.imul(D,W)|0,i=i+Math.imul(C,X)|0,n=(n=n+Math.imul(C,tt)|0)+Math.imul(B,X)|0,s=s+Math.imul(B,tt)|0,i=i+Math.imul(k,rt)|0,n=(n=n+Math.imul(k,it)|0)+Math.imul(S,rt)|0,s=s+Math.imul(S,it)|0,i=i+Math.imul(b,st)|0,n=(n=n+Math.imul(b,at)|0)+Math.imul(v,st)|0,s=s+Math.imul(v,at)|0,i=i+Math.imul(m,ct)|0,n=(n=n+Math.imul(m,ht)|0)+Math.imul(w,ct)|0,s=s+Math.imul(w,ht)|0,i=i+Math.imul(d,lt)|0,n=(n=n+Math.imul(d,ft)|0)+Math.imul(p,lt)|0,s=s+Math.imul(p,ft)|0;var It=(h+(i=i+Math.imul(l,dt)|0)|0)+((8191&(n=(n=n+Math.imul(l,pt)|0)+Math.imul(f,dt)|0))<<13)|0;h=((s=s+Math.imul(f,pt)|0)+(n>>>13)|0)+(It>>>26)|0,It&=67108863,i=Math.imul(L,G),n=(n=Math.imul(L,q))+Math.imul(N,G)|0,s=Math.imul(N,q),i=i+Math.imul(R,V)|0,n=(n=n+Math.imul(R,Z)|0)+Math.imul(_,V)|0,s=s+Math.imul(_,Z)|0,i=i+Math.imul(M,Y)|0,n=(n=n+Math.imul(M,W)|0)+Math.imul(x,Y)|0,s=s+Math.imul(x,W)|0,i=i+Math.imul(P,X)|0,n=(n=n+Math.imul(P,tt)|0)+Math.imul(D,X)|0,s=s+Math.imul(D,tt)|0,i=i+Math.imul(C,rt)|0,n=(n=n+Math.imul(C,it)|0)+Math.imul(B,rt)|0,s=s+Math.imul(B,it)|0,i=i+Math.imul(k,st)|0,n=(n=n+Math.imul(k,at)|0)+Math.imul(S,st)|0,s=s+Math.imul(S,at)|0,i=i+Math.imul(b,ct)|0,n=(n=n+Math.imul(b,ht)|0)+Math.imul(v,ct)|0,s=s+Math.imul(v,ht)|0,i=i+Math.imul(m,lt)|0,n=(n=n+Math.imul(m,ft)|0)+Math.imul(w,lt)|0,s=s+Math.imul(w,ft)|0;var Ct=(h+(i=i+Math.imul(d,dt)|0)|0)+((8191&(n=(n=n+Math.imul(d,pt)|0)+Math.imul(p,dt)|0))<<13)|0;h=((s=s+Math.imul(p,pt)|0)+(n>>>13)|0)+(Ct>>>26)|0,Ct&=67108863,i=Math.imul(L,V),n=(n=Math.imul(L,Z))+Math.imul(N,V)|0,s=Math.imul(N,Z),i=i+Math.imul(R,Y)|0,n=(n=n+Math.imul(R,W)|0)+Math.imul(_,Y)|0,s=s+Math.imul(_,W)|0,i=i+Math.imul(M,X)|0,n=(n=n+Math.imul(M,tt)|0)+Math.imul(x,X)|0,s=s+Math.imul(x,tt)|0,i=i+Math.imul(P,rt)|0,n=(n=n+Math.imul(P,it)|0)+Math.imul(D,rt)|0,s=s+Math.imul(D,it)|0,i=i+Math.imul(C,st)|0,n=(n=n+Math.imul(C,at)|0)+Math.imul(B,st)|0,s=s+Math.imul(B,at)|0,i=i+Math.imul(k,ct)|0,n=(n=n+Math.imul(k,ht)|0)+Math.imul(S,ct)|0,s=s+Math.imul(S,ht)|0,i=i+Math.imul(b,lt)|0,n=(n=n+Math.imul(b,ft)|0)+Math.imul(v,lt)|0,s=s+Math.imul(v,ft)|0;var Bt=(h+(i=i+Math.imul(m,dt)|0)|0)+((8191&(n=(n=n+Math.imul(m,pt)|0)+Math.imul(w,dt)|0))<<13)|0;h=((s=s+Math.imul(w,pt)|0)+(n>>>13)|0)+(Bt>>>26)|0,Bt&=67108863,i=Math.imul(L,Y),n=(n=Math.imul(L,W))+Math.imul(N,Y)|0,s=Math.imul(N,W),i=i+Math.imul(R,X)|0,n=(n=n+Math.imul(R,tt)|0)+Math.imul(_,X)|0,s=s+Math.imul(_,tt)|0,i=i+Math.imul(M,rt)|0,n=(n=n+Math.imul(M,it)|0)+Math.imul(x,rt)|0,s=s+Math.imul(x,it)|0,i=i+Math.imul(P,st)|0,n=(n=n+Math.imul(P,at)|0)+Math.imul(D,st)|0,s=s+Math.imul(D,at)|0,i=i+Math.imul(C,ct)|0,n=(n=n+Math.imul(C,ht)|0)+Math.imul(B,ct)|0,s=s+Math.imul(B,ht)|0,i=i+Math.imul(k,lt)|0,n=(n=n+Math.imul(k,ft)|0)+Math.imul(S,lt)|0,s=s+Math.imul(S,ft)|0;var Kt=(h+(i=i+Math.imul(b,dt)|0)|0)+((8191&(n=(n=n+Math.imul(b,pt)|0)+Math.imul(v,dt)|0))<<13)|0;h=((s=s+Math.imul(v,pt)|0)+(n>>>13)|0)+(Kt>>>26)|0,Kt&=67108863,i=Math.imul(L,X),n=(n=Math.imul(L,tt))+Math.imul(N,X)|0,s=Math.imul(N,tt),i=i+Math.imul(R,rt)|0,n=(n=n+Math.imul(R,it)|0)+Math.imul(_,rt)|0,s=s+Math.imul(_,it)|0,i=i+Math.imul(M,st)|0,n=(n=n+Math.imul(M,at)|0)+Math.imul(x,st)|0,s=s+Math.imul(x,at)|0,i=i+Math.imul(P,ct)|0,n=(n=n+Math.imul(P,ht)|0)+Math.imul(D,ct)|0,s=s+Math.imul(D,ht)|0,i=i+Math.imul(C,lt)|0,n=(n=n+Math.imul(C,ft)|0)+Math.imul(B,lt)|0,s=s+Math.imul(B,ft)|0;var Pt=(h+(i=i+Math.imul(k,dt)|0)|0)+((8191&(n=(n=n+Math.imul(k,pt)|0)+Math.imul(S,dt)|0))<<13)|0;h=((s=s+Math.imul(S,pt)|0)+(n>>>13)|0)+(Pt>>>26)|0,Pt&=67108863,i=Math.imul(L,rt),n=(n=Math.imul(L,it))+Math.imul(N,rt)|0,s=Math.imul(N,it),i=i+Math.imul(R,st)|0,n=(n=n+Math.imul(R,at)|0)+Math.imul(_,st)|0,s=s+Math.imul(_,at)|0,i=i+Math.imul(M,ct)|0,n=(n=n+Math.imul(M,ht)|0)+Math.imul(x,ct)|0,s=s+Math.imul(x,ht)|0,i=i+Math.imul(P,lt)|0,n=(n=n+Math.imul(P,ft)|0)+Math.imul(D,lt)|0,s=s+Math.imul(D,ft)|0;var Dt=(h+(i=i+Math.imul(C,dt)|0)|0)+((8191&(n=(n=n+Math.imul(C,pt)|0)+Math.imul(B,dt)|0))<<13)|0;h=((s=s+Math.imul(B,pt)|0)+(n>>>13)|0)+(Dt>>>26)|0,Dt&=67108863,i=Math.imul(L,st),n=(n=Math.imul(L,at))+Math.imul(N,st)|0,s=Math.imul(N,at),i=i+Math.imul(R,ct)|0,n=(n=n+Math.imul(R,ht)|0)+Math.imul(_,ct)|0,s=s+Math.imul(_,ht)|0,i=i+Math.imul(M,lt)|0,n=(n=n+Math.imul(M,ft)|0)+Math.imul(x,lt)|0,s=s+Math.imul(x,ft)|0;var Ut=(h+(i=i+Math.imul(P,dt)|0)|0)+((8191&(n=(n=n+Math.imul(P,pt)|0)+Math.imul(D,dt)|0))<<13)|0;h=((s=s+Math.imul(D,pt)|0)+(n>>>13)|0)+(Ut>>>26)|0,Ut&=67108863,i=Math.imul(L,ct),n=(n=Math.imul(L,ht))+Math.imul(N,ct)|0,s=Math.imul(N,ht),i=i+Math.imul(R,lt)|0,n=(n=n+Math.imul(R,ft)|0)+Math.imul(_,lt)|0,s=s+Math.imul(_,ft)|0;var Mt=(h+(i=i+Math.imul(M,dt)|0)|0)+((8191&(n=(n=n+Math.imul(M,pt)|0)+Math.imul(x,dt)|0))<<13)|0;h=((s=s+Math.imul(x,pt)|0)+(n>>>13)|0)+(Mt>>>26)|0,Mt&=67108863,i=Math.imul(L,lt),n=(n=Math.imul(L,ft))+Math.imul(N,lt)|0,s=Math.imul(N,ft);var xt=(h+(i=i+Math.imul(R,dt)|0)|0)+((8191&(n=(n=n+Math.imul(R,pt)|0)+Math.imul(_,dt)|0))<<13)|0;h=((s=s+Math.imul(_,pt)|0)+(n>>>13)|0)+(xt>>>26)|0,xt&=67108863;var Qt=(h+(i=Math.imul(L,dt))|0)+((8191&(n=(n=Math.imul(L,pt))+Math.imul(N,dt)|0))<<13)|0;return h=((s=Math.imul(N,pt))+(n>>>13)|0)+(Qt>>>26)|0,Qt&=67108863,c[0]=gt,c[1]=mt,c[2]=wt,c[3]=At,c[4]=bt,c[5]=vt,c[6]=Et,c[7]=kt,c[8]=St,c[9]=It,c[10]=Ct,c[11]=Bt,c[12]=Kt,c[13]=Pt,c[14]=Dt,c[15]=Ut,c[16]=Mt,c[17]=xt,c[18]=Qt,0!==h&&(c[19]=h,r.length++),r};function d(t,e,r){return(new p).mulp(t,e,r)}function p(t,e){this.x=t,this.y=e}Math.imul||(y=f),n.prototype.mulTo=function(t,e){var r,i=this.length+t.length;return r=10===this.length&&10===t.length?y(this,t,e):i<63?f(this,t,e):i<1024?function(t,e,r){r.negative=e.negative^t.negative,r.length=t.length+e.length;for(var i=0,n=0,s=0;s<r.length-1;s++){var a=n;n=0;for(var o=67108863&i,c=Math.min(s,e.length-1),h=Math.max(0,s-t.length+1);h<=c;h++){var u=s-h,l=(0|t.words[u])*(0|e.words[h]),f=67108863&l;o=67108863&(f=f+o|0),n+=(a=(a=a+(l/67108864|0)|0)+(f>>>26)|0)>>>26,a&=67108863}r.words[s]=o,i=a,a=n}return 0!==i?r.words[s]=i:r.length--,r.strip()}(this,t,e):d(this,t,e),r},p.prototype.makeRBT=function(t){for(var e=Array(t),r=n.prototype._countBits(t)-1,i=0;i<t;i++)e[i]=this.revBin(i,r,t);return e},p.prototype.revBin=function(t,e,r){if(0===t||t===r-1)return t;for(var i=0,n=0;n<e;n++)i|=(1&t)<<e-n-1,t>>=1;return i},p.prototype.permute=function(t,e,r,i,n,s){for(var a=0;a<s;a++)i[a]=e[t[a]],n[a]=r[t[a]]},p.prototype.transform=function(t,e,r,i,n,s){this.permute(s,t,e,r,i,n);for(var a=1;a<n;a<<=1)for(var o=a<<1,c=Math.cos(2*Math.PI/o),h=Math.sin(2*Math.PI/o),u=0;u<n;u+=o)for(var l=c,f=h,y=0;y<a;y++){var d=r[u+y],p=i[u+y],g=r[u+y+a],m=i[u+y+a],w=l*g-f*m;m=l*m+f*g,g=w,r[u+y]=d+g,i[u+y]=p+m,r[u+y+a]=d-g,i[u+y+a]=p-m,y!==o&&(w=c*l-h*f,f=c*f+h*l,l=w)}},p.prototype.guessLen13b=function(t,e){var r=1|Math.max(e,t),i=1&r,n=0;for(r=r/2|0;r;r>>>=1)n++;return 1<<n+1+i},p.prototype.conjugate=function(t,e,r){if(!(r<=1))for(var i=0;i<r/2;i++){var n=t[i];t[i]=t[r-i-1],t[r-i-1]=n,n=e[i],e[i]=-e[r-i-1],e[r-i-1]=-n}},p.prototype.normalize13b=function(t,e){for(var r=0,i=0;i<e/2;i++){var n=8192*Math.round(t[2*i+1]/e)+Math.round(t[2*i]/e)+r;t[i]=67108863&n,r=n<67108864?0:n/67108864|0}return t},p.prototype.convert13b=function(t,e,i,n){for(var s=0,a=0;a<e;a++)s+=0|t[a],i[2*a]=8191&s,s>>>=13,i[2*a+1]=8191&s,s>>>=13;for(a=2*e;a<n;++a)i[a]=0;r(0===s),r(!(-8192&s))},p.prototype.stub=function(t){for(var e=Array(t),r=0;r<t;r++)e[r]=0;return e},p.prototype.mulp=function(t,e,r){var i=2*this.guessLen13b(t.length,e.length),n=this.makeRBT(i),s=this.stub(i),a=Array(i),o=Array(i),c=Array(i),h=Array(i),u=Array(i),l=Array(i),f=r.words;f.length=i,this.convert13b(t.words,t.length,a,i),this.convert13b(e.words,e.length,h,i),this.transform(a,s,o,c,i,n),this.transform(h,s,u,l,i,n);for(var y=0;y<i;y++){var d=o[y]*u[y]-c[y]*l[y];c[y]=o[y]*l[y]+c[y]*u[y],o[y]=d}return this.conjugate(o,c,i),this.transform(o,c,f,s,i,n),this.conjugate(f,s,i),this.normalize13b(f,i),r.negative=t.negative^e.negative,r.length=t.length+e.length,r.strip()},n.prototype.mul=function(t){var e=new n(null);return e.words=Array(this.length+t.length),this.mulTo(t,e)},n.prototype.mulf=function(t){var e=new n(null);return e.words=Array(this.length+t.length),d(this,t,e)},n.prototype.imul=function(t){return this.clone().mulTo(t,this)},n.prototype.imuln=function(t){r("number"==typeof t),r(t<67108864);for(var e=0,i=0;i<this.length;i++){var n=(0|this.words[i])*t,s=(67108863&n)+(67108863&e);e>>=26,e+=n/67108864|0,e+=s>>>26,this.words[i]=67108863&s}return 0!==e&&(this.words[i]=e,this.length++),this},n.prototype.muln=function(t){return this.clone().imuln(t)},n.prototype.sqr=function(){return this.mul(this)},n.prototype.isqr=function(){return this.imul(this.clone())},n.prototype.pow=function(t){var e=function(t){for(var e=Array(t.bitLength()),r=0;r<e.length;r++){var i=r/26|0,n=r%26;e[r]=(t.words[i]&1<<n)>>>n}return e}(t);if(0===e.length)return new n(1);for(var r=this,i=0;i<e.length&&0===e[i];i++,r=r.sqr());if(++i<e.length)for(var s=r.sqr();i<e.length;i++,s=s.sqr())0!==e[i]&&(r=r.mul(s));return r},n.prototype.iushln=function(t){r("number"==typeof t&&t>=0);var e,i=t%26,n=(t-i)/26,s=67108863>>>26-i<<26-i;if(0!==i){var a=0;for(e=0;e<this.length;e++){var o=this.words[e]&s,c=(0|this.words[e])-o<<i;this.words[e]=c|a,a=o>>>26-i}a&&(this.words[e]=a,this.length++)}if(0!==n){for(e=this.length-1;e>=0;e--)this.words[e+n]=this.words[e];for(e=0;e<n;e++)this.words[e]=0;this.length+=n}return this.strip()},n.prototype.ishln=function(t){return r(0===this.negative),this.iushln(t)},n.prototype.iushrn=function(t,e,i){var n;r("number"==typeof t&&t>=0),n=e?(e-e%26)/26:0;var s=t%26,a=Math.min((t-s)/26,this.length),o=67108863^67108863>>>s<<s,c=i;if(n=Math.max(0,n-=a),c){for(var h=0;h<a;h++)c.words[h]=this.words[h];c.length=a}if(0===a);else if(this.length>a)for(this.length-=a,h=0;h<this.length;h++)this.words[h]=this.words[h+a];else this.words[0]=0,this.length=1;var u=0;for(h=this.length-1;h>=0&&(0!==u||h>=n);h--){var l=0|this.words[h];this.words[h]=u<<26-s|l>>>s,u=l&o}return c&&0!==u&&(c.words[c.length++]=u),0===this.length&&(this.words[0]=0,this.length=1),this.strip()},n.prototype.ishrn=function(t,e,i){return r(0===this.negative),this.iushrn(t,e,i)},n.prototype.shln=function(t){return this.clone().ishln(t)},n.prototype.ushln=function(t){return this.clone().iushln(t)},n.prototype.shrn=function(t){return this.clone().ishrn(t)},n.prototype.ushrn=function(t){return this.clone().iushrn(t)},n.prototype.testn=function(t){r("number"==typeof t&&t>=0);var e=t%26,i=(t-e)/26,n=1<<e;return!(this.length<=i||!(this.words[i]&n))},n.prototype.imaskn=function(t){r("number"==typeof t&&t>=0);var e=t%26,i=(t-e)/26;if(r(0===this.negative,"imaskn works only with positive numbers"),this.length<=i)return this;if(0!==e&&i++,this.length=Math.min(i,this.length),0!==e){var n=67108863^67108863>>>e<<e;this.words[this.length-1]&=n}return this.strip()},n.prototype.maskn=function(t){return this.clone().imaskn(t)},n.prototype.iaddn=function(t){return r("number"==typeof t),r(t<67108864),t<0?this.isubn(-t):0!==this.negative?1===this.length&&(0|this.words[0])<t?(this.words[0]=t-(0|this.words[0]),this.negative=0,this):(this.negative=0,this.isubn(t),this.negative=1,this):this._iaddn(t)},n.prototype._iaddn=function(t){this.words[0]+=t;for(var e=0;e<this.length&&this.words[e]>=67108864;e++)this.words[e]-=67108864,e===this.length-1?this.words[e+1]=1:this.words[e+1]++;return this.length=Math.max(this.length,e+1),this},n.prototype.isubn=function(t){if(r("number"==typeof t),r(t<67108864),t<0)return this.iaddn(-t);if(0!==this.negative)return this.negative=0,this.iaddn(t),this.negative=1,this;if(this.words[0]-=t,1===this.length&&this.words[0]<0)this.words[0]=-this.words[0],this.negative=1;else for(var e=0;e<this.length&&this.words[e]<0;e++)this.words[e]+=67108864,this.words[e+1]-=1;return this.strip()},n.prototype.addn=function(t){return this.clone().iaddn(t)},n.prototype.subn=function(t){return this.clone().isubn(t)},n.prototype.iabs=function(){return this.negative=0,this},n.prototype.abs=function(){return this.clone().iabs()},n.prototype._ishlnsubmul=function(t,e,i){var n,s,a=t.length+i;this._expand(a);var o=0;for(n=0;n<t.length;n++){s=(0|this.words[n+i])+o;var c=(0|t.words[n])*e;o=((s-=67108863&c)>>26)-(c/67108864|0),this.words[n+i]=67108863&s}for(;n<this.length-i;n++)o=(s=(0|this.words[n+i])+o)>>26,this.words[n+i]=67108863&s;if(0===o)return this.strip();for(r(-1===o),o=0,n=0;n<this.length;n++)o=(s=-(0|this.words[n])+o)>>26,this.words[n]=67108863&s;return this.negative=1,this.strip()},n.prototype._wordDiv=function(t,e){var r=(this.length,t.length),i=this.clone(),s=t,a=0|s.words[s.length-1];0!=(r=26-this._countBits(a))&&(s=s.ushln(r),i.iushln(r),a=0|s.words[s.length-1]);var o,c=i.length-s.length;if("mod"!==e){(o=new n(null)).length=c+1,o.words=Array(o.length);for(var h=0;h<o.length;h++)o.words[h]=0}var u=i.clone()._ishlnsubmul(s,1,c);0===u.negative&&(i=u,o&&(o.words[c]=1));for(var l=c-1;l>=0;l--){var f=67108864*(0|i.words[s.length+l])+(0|i.words[s.length+l-1]);for(f=Math.min(f/a|0,67108863),i._ishlnsubmul(s,f,l);0!==i.negative;)f--,i.negative=0,i._ishlnsubmul(s,1,l),i.isZero()||(i.negative^=1);o&&(o.words[l]=f)}return o&&o.strip(),i.strip(),"div"!==e&&0!==r&&i.iushrn(r),{div:o||null,mod:i}},n.prototype.divmod=function(t,e,i){return r(!t.isZero()),this.isZero()?{div:new n(0),mod:new n(0)}:0!==this.negative&&0===t.negative?(o=this.neg().divmod(t,e),"mod"!==e&&(s=o.div.neg()),"div"!==e&&(a=o.mod.neg(),i&&0!==a.negative&&a.iadd(t)),{div:s,mod:a}):0===this.negative&&0!==t.negative?(o=this.divmod(t.neg(),e),"mod"!==e&&(s=o.div.neg()),{div:s,mod:o.mod}):this.negative&t.negative?(o=this.neg().divmod(t.neg(),e),"div"!==e&&(a=o.mod.neg(),i&&0!==a.negative&&a.isub(t)),{div:o.div,mod:a}):t.length>this.length||this.cmp(t)<0?{div:new n(0),mod:this}:1===t.length?"div"===e?{div:this.divn(t.words[0]),mod:null}:"mod"===e?{div:null,mod:new n(this.modn(t.words[0]))}:{div:this.divn(t.words[0]),mod:new n(this.modn(t.words[0]))}:this._wordDiv(t,e);var s,a,o},n.prototype.div=function(t){return this.divmod(t,"div",!1).div},n.prototype.mod=function(t){return this.divmod(t,"mod",!1).mod},n.prototype.umod=function(t){return this.divmod(t,"mod",!0).mod},n.prototype.divRound=function(t){var e=this.divmod(t);if(e.mod.isZero())return e.div;var r=0!==e.div.negative?e.mod.isub(t):e.mod,i=t.ushrn(1),n=t.andln(1),s=r.cmp(i);return s<0||1===n&&0===s?e.div:0!==e.div.negative?e.div.isubn(1):e.div.iaddn(1)},n.prototype.modn=function(t){r(t<=67108863);for(var e=(1<<26)%t,i=0,n=this.length-1;n>=0;n--)i=(e*i+(0|this.words[n]))%t;return i},n.prototype.idivn=function(t){r(t<=67108863);for(var e=0,i=this.length-1;i>=0;i--){var n=(0|this.words[i])+67108864*e;this.words[i]=n/t|0,e=n%t}return this.strip()},n.prototype.divn=function(t){return this.clone().idivn(t)},n.prototype.egcd=function(t){r(0===t.negative),r(!t.isZero());var e=this,i=t.clone();e=0!==e.negative?e.umod(t):e.clone();for(var s=new n(1),a=new n(0),o=new n(0),c=new n(1),h=0;e.isEven()&&i.isEven();)e.iushrn(1),i.iushrn(1),++h;for(var u=i.clone(),l=e.clone();!e.isZero();){for(var f=0,y=1;!(e.words[0]&y)&&f<26;++f,y<<=1);if(f>0)for(e.iushrn(f);f-- >0;)(s.isOdd()||a.isOdd())&&(s.iadd(u),a.isub(l)),s.iushrn(1),a.iushrn(1);for(var d=0,p=1;!(i.words[0]&p)&&d<26;++d,p<<=1);if(d>0)for(i.iushrn(d);d-- >0;)(o.isOdd()||c.isOdd())&&(o.iadd(u),c.isub(l)),o.iushrn(1),c.iushrn(1);e.cmp(i)>=0?(e.isub(i),s.isub(o),a.isub(c)):(i.isub(e),o.isub(s),c.isub(a))}return{a:o,b:c,gcd:i.iushln(h)}},n.prototype._invmp=function(t){r(0===t.negative),r(!t.isZero());var e=this,i=t.clone();e=0!==e.negative?e.umod(t):e.clone();for(var s,a=new n(1),o=new n(0),c=i.clone();e.cmpn(1)>0&&i.cmpn(1)>0;){for(var h=0,u=1;!(e.words[0]&u)&&h<26;++h,u<<=1);if(h>0)for(e.iushrn(h);h-- >0;)a.isOdd()&&a.iadd(c),a.iushrn(1);for(var l=0,f=1;!(i.words[0]&f)&&l<26;++l,f<<=1);if(l>0)for(i.iushrn(l);l-- >0;)o.isOdd()&&o.iadd(c),o.iushrn(1);e.cmp(i)>=0?(e.isub(i),a.isub(o)):(i.isub(e),o.isub(a))}return(s=0===e.cmpn(1)?a:o).cmpn(0)<0&&s.iadd(t),s},n.prototype.gcd=function(t){if(this.isZero())return t.abs();if(t.isZero())return this.abs();var e=this.clone(),r=t.clone();e.negative=0,r.negative=0;for(var i=0;e.isEven()&&r.isEven();i++)e.iushrn(1),r.iushrn(1);for(;;){for(;e.isEven();)e.iushrn(1);for(;r.isEven();)r.iushrn(1);var n=e.cmp(r);if(n<0){var s=e;e=r,r=s}else if(0===n||0===r.cmpn(1))break;e.isub(r)}return r.iushln(i)},n.prototype.invm=function(t){return this.egcd(t).a.umod(t)},n.prototype.isEven=function(){return!(1&this.words[0])},n.prototype.isOdd=function(){return!(1&~this.words[0])},n.prototype.andln=function(t){return this.words[0]&t},n.prototype.bincn=function(t){r("number"==typeof t);var e=t%26,i=(t-e)/26,n=1<<e;if(this.length<=i)return this._expand(i+1),this.words[i]|=n,this;for(var s=n,a=i;0!==s&&a<this.length;a++){var o=0|this.words[a];s=(o+=s)>>>26,o&=67108863,this.words[a]=o}return 0!==s&&(this.words[a]=s,this.length++),this},n.prototype.isZero=function(){return 1===this.length&&0===this.words[0]},n.prototype.cmpn=function(t){var e,i=t<0;if(0!==this.negative&&!i)return-1;if(0===this.negative&&i)return 1;if(this.strip(),this.length>1)e=1;else{i&&(t=-t),r(t<=67108863,"Number is too big");var n=0|this.words[0];e=n===t?0:n<t?-1:1}return 0!==this.negative?0|-e:e},n.prototype.cmp=function(t){if(0!==this.negative&&0===t.negative)return-1;if(0===this.negative&&0!==t.negative)return 1;var e=this.ucmp(t);return 0!==this.negative?0|-e:e},n.prototype.ucmp=function(t){if(this.length>t.length)return 1;if(this.length<t.length)return-1;for(var e=0,r=this.length-1;r>=0;r--){var i=0|this.words[r],n=0|t.words[r];if(i!==n){i<n?e=-1:i>n&&(e=1);break}}return e},n.prototype.gtn=function(t){return 1===this.cmpn(t)},n.prototype.gt=function(t){return 1===this.cmp(t)},n.prototype.gten=function(t){return this.cmpn(t)>=0},n.prototype.gte=function(t){return this.cmp(t)>=0},n.prototype.ltn=function(t){return-1===this.cmpn(t)},n.prototype.lt=function(t){return-1===this.cmp(t)},n.prototype.lten=function(t){return this.cmpn(t)<=0},n.prototype.lte=function(t){return this.cmp(t)<=0},n.prototype.eqn=function(t){return 0===this.cmpn(t)},n.prototype.eq=function(t){return 0===this.cmp(t)},n.red=function(t){return new E(t)},n.prototype.toRed=function(t){return r(!this.red,"Already a number in reduction context"),r(0===this.negative,"red works only with positives"),t.convertTo(this)._forceRed(t)},n.prototype.fromRed=function(){return r(this.red,"fromRed works only with numbers in reduction context"),this.red.convertFrom(this)},n.prototype._forceRed=function(t){return this.red=t,this},n.prototype.forceRed=function(t){return r(!this.red,"Already a number in reduction context"),this._forceRed(t)},n.prototype.redAdd=function(t){return r(this.red,"redAdd works only with red numbers"),this.red.add(this,t)},n.prototype.redIAdd=function(t){return r(this.red,"redIAdd works only with red numbers"),this.red.iadd(this,t)},n.prototype.redSub=function(t){return r(this.red,"redSub works only with red numbers"),this.red.sub(this,t)},n.prototype.redISub=function(t){return r(this.red,"redISub works only with red numbers"),this.red.isub(this,t)},n.prototype.redShl=function(t){return r(this.red,"redShl works only with red numbers"),this.red.shl(this,t)},n.prototype.redMul=function(t){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,t),this.red.mul(this,t)},n.prototype.redIMul=function(t){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,t),this.red.imul(this,t)},n.prototype.redSqr=function(){return r(this.red,"redSqr works only with red numbers"),this.red._verify1(this),this.red.sqr(this)},n.prototype.redISqr=function(){return r(this.red,"redISqr works only with red numbers"),this.red._verify1(this),this.red.isqr(this)},n.prototype.redSqrt=function(){return r(this.red,"redSqrt works only with red numbers"),this.red._verify1(this),this.red.sqrt(this)},n.prototype.redInvm=function(){return r(this.red,"redInvm works only with red numbers"),this.red._verify1(this),this.red.invm(this)},n.prototype.redNeg=function(){return r(this.red,"redNeg works only with red numbers"),this.red._verify1(this),this.red.neg(this)},n.prototype.redPow=function(t){return r(this.red&&!t.red,"redPow(normalNum)"),this.red._verify1(this),this.red.pow(this,t)};var g={k256:null,p224:null,p192:null,p25519:null};function m(t,e){this.name=t,this.p=new n(e,16),this.n=this.p.bitLength(),this.k=new n(1).iushln(this.n).isub(this.p),this.tmp=this._tmp()}function w(){m.call(this,"k256","ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f")}function A(){m.call(this,"p224","ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001")}function b(){m.call(this,"p192","ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff")}function v(){m.call(this,"25519","7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed")}function E(t){if("string"==typeof t){var e=n._prime(t);this.m=e.p,this.prime=e}else r(t.gtn(1),"modulus must be greater than 1"),this.m=t,this.prime=null}function k(t){E.call(this,t),this.shift=this.m.bitLength(),this.shift%26!=0&&(this.shift+=26-this.shift%26),this.r=new n(1).iushln(this.shift),this.r2=this.imod(this.r.sqr()),this.rinv=this.r._invmp(this.m),this.minv=this.rinv.mul(this.r).isubn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}m.prototype._tmp=function(){var t=new n(null);return t.words=Array(Math.ceil(this.n/13)),t},m.prototype.ireduce=function(t){var e,r=t;do{this.split(r,this.tmp),e=(r=(r=this.imulK(r)).iadd(this.tmp)).bitLength()}while(e>this.n);var i=e<this.n?-1:r.ucmp(this.p);return 0===i?(r.words[0]=0,r.length=1):i>0?r.isub(this.p):void 0!==r.strip?r.strip():r._strip(),r},m.prototype.split=function(t,e){t.iushrn(this.n,0,e)},m.prototype.imulK=function(t){return t.imul(this.k)},i(w,m),w.prototype.split=function(t,e){for(var r=4194303,i=Math.min(t.length,9),n=0;n<i;n++)e.words[n]=t.words[n];if(e.length=i,t.length<=9)return t.words[0]=0,void(t.length=1);var s=t.words[9];for(e.words[e.length++]=s&r,n=10;n<t.length;n++){var a=0|t.words[n];t.words[n-10]=(a&r)<<4|s>>>22,s=a}s>>>=22,t.words[n-10]=s,0===s&&t.length>10?t.length-=10:t.length-=9},w.prototype.imulK=function(t){t.words[t.length]=0,t.words[t.length+1]=0,t.length+=2;for(var e=0,r=0;r<t.length;r++){var i=0|t.words[r];e+=977*i,t.words[r]=67108863&e,e=64*i+(e/67108864|0)}return 0===t.words[t.length-1]&&(t.length--,0===t.words[t.length-1]&&t.length--),t},i(A,m),i(b,m),i(v,m),v.prototype.imulK=function(t){for(var e=0,r=0;r<t.length;r++){var i=19*(0|t.words[r])+e,n=67108863&i;i>>>=26,t.words[r]=n,e=i}return 0!==e&&(t.words[t.length++]=e),t},n._prime=function(t){if(g[t])return g[t];var e;if("k256"===t)e=new w;else if("p224"===t)e=new A;else if("p192"===t)e=new b;else{if("p25519"!==t)throw Error("Unknown prime "+t);e=new v}return g[t]=e,e},E.prototype._verify1=function(t){r(0===t.negative,"red works only with positives"),r(t.red,"red works only with red numbers")},E.prototype._verify2=function(t,e){r(!(t.negative|e.negative),"red works only with positives"),r(t.red&&t.red===e.red,"red works only with red numbers")},E.prototype.imod=function(t){return this.prime?this.prime.ireduce(t)._forceRed(this):t.umod(this.m)._forceRed(this)},E.prototype.neg=function(t){return t.isZero()?t.clone():this.m.sub(t)._forceRed(this)},E.prototype.add=function(t,e){this._verify2(t,e);var r=t.add(e);return r.cmp(this.m)>=0&&r.isub(this.m),r._forceRed(this)},E.prototype.iadd=function(t,e){this._verify2(t,e);var r=t.iadd(e);return r.cmp(this.m)>=0&&r.isub(this.m),r},E.prototype.sub=function(t,e){this._verify2(t,e);var r=t.sub(e);return r.cmpn(0)<0&&r.iadd(this.m),r._forceRed(this)},E.prototype.isub=function(t,e){this._verify2(t,e);var r=t.isub(e);return r.cmpn(0)<0&&r.iadd(this.m),r},E.prototype.shl=function(t,e){return this._verify1(t),this.imod(t.ushln(e))},E.prototype.imul=function(t,e){return this._verify2(t,e),this.imod(t.imul(e))},E.prototype.mul=function(t,e){return this._verify2(t,e),this.imod(t.mul(e))},E.prototype.isqr=function(t){return this.imul(t,t.clone())},E.prototype.sqr=function(t){return this.mul(t,t)},E.prototype.sqrt=function(t){if(t.isZero())return t.clone();var e=this.m.andln(3);if(r(e%2==1),3===e){var i=this.m.add(new n(1)).iushrn(2);return this.pow(t,i)}for(var s=this.m.subn(1),a=0;!s.isZero()&&0===s.andln(1);)a++,s.iushrn(1);r(!s.isZero());var o=new n(1).toRed(this),c=o.redNeg(),h=this.m.subn(1).iushrn(1),u=this.m.bitLength();for(u=new n(2*u*u).toRed(this);0!==this.pow(u,h).cmp(c);)u.redIAdd(c);for(var l=this.pow(u,s),f=this.pow(t,s.addn(1).iushrn(1)),y=this.pow(t,s),d=a;0!==y.cmp(o);){for(var p=y,g=0;0!==p.cmp(o);g++)p=p.redSqr();r(g<d);var m=this.pow(l,new n(1).iushln(d-g-1));f=f.redMul(m),l=m.redSqr(),y=y.redMul(l),d=g}return f},E.prototype.invm=function(t){var e=t._invmp(this.m);return 0!==e.negative?(e.negative=0,this.imod(e).redNeg()):this.imod(e)},E.prototype.pow=function(t,e){if(e.isZero())return new n(1).toRed(this);if(0===e.cmpn(1))return t.clone();var r=Array(16);r[0]=new n(1).toRed(this),r[1]=t;for(var i=2;i<r.length;i++)r[i]=this.mul(r[i-1],t);var s=r[0],a=0,o=0,c=e.bitLength()%26;for(0===c&&(c=26),i=e.length-1;i>=0;i--){for(var h=e.words[i],u=c-1;u>=0;u--){var l=h>>u&1;s!==r[0]&&(s=this.sqr(s)),0!==l||0!==a?(a<<=1,a|=l,(4==++o||0===i&&0===u)&&(s=this.mul(s,r[a]),o=0,a=0)):o=0}c=26}return s},E.prototype.convertTo=function(t){var e=t.umod(this.m);return e===t?e.clone():e},E.prototype.convertFrom=function(t){var e=t.clone();return e.red=null,e},n.mont=function(t){return new k(t)},i(k,E),k.prototype.convertTo=function(t){return this.imod(t.ushln(this.shift))},k.prototype.convertFrom=function(t){var e=this.imod(t.mul(this.rinv));return e.red=null,e},k.prototype.imul=function(t,e){if(t.isZero()||e.isZero())return t.words[0]=0,t.length=1,t;var r=t.imul(e),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),n=r.isub(i).iushrn(this.shift),s=n;return n.cmp(this.m)>=0?s=n.isub(this.m):n.cmpn(0)<0&&(s=n.iadd(this.m)),s._forceRed(this)},k.prototype.mul=function(t,e){if(t.isZero()||e.isZero())return new n(0)._forceRed(this);var r=t.mul(e),i=r.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),s=r.isub(i).iushrn(this.shift),a=s;return s.cmp(this.m)>=0?a=s.isub(this.m):s.cmpn(0)<0&&(a=s.iadd(this.m)),a._forceRed(this)},k.prototype.invm=function(t){return this.imod(t._invmp(this.m).mul(this.r2))._forceRed(this)}}(to,as);var eo=/*@__PURE__*/os(to.exports);class ro extends Wa{constructor(t){if(super(),void 0===t)throw Error("Invalid BigInteger input");const e=("string"==typeof t||t instanceof String)&&t.startsWith("0x");this.value=e?new eo(t.substring(2),16):new eo(t)}clone(){return new ro(this.value.clone())}iinc(){return this.value.iadd(new eo(1)),this}inc(){return this.clone().iinc()}idec(){return this.value.isub(new eo(1)),this}dec(){return this.clone().idec()}iadd(t){return this.value.iadd(t.value),this}add(t){return this.clone().iadd(t)}isub(t){return this.value.isub(t.value),this}sub(t){return this.clone().isub(t)}imul(t){return this.value.imul(t.value),this}mul(t){return this.clone().imul(t)}imod(t){return this.value=this.value.umod(t.value),this}mod(t){return this.clone().imod(t)}modExp(t,e){const r=e.isEven()?eo.red(e.value):eo.mont(e.value),i=this.clone();return i.value=i.value.toRed(r).redPow(t.value).fromRed(),i}modInv(t){if(!this.gcd(t).isOne())throw Error("Inverse does not exist");return new ro(this.value.invm(t.value))}idiv(t){return this.value=this.value.div(t.value),this}div(t){return this.clone().idiv(t)}gcd(t){return new ro(this.value.gcd(t.value))}ileftShift(t){return t.isNegative()?this.irightShift(t.negate()):(this.value.ishln(t.value.toNumber()),this)}leftShift(t){return this.clone().ileftShift(t)}irightShift(t){return t.isNegative()?this.ileftShift(t.negate()):(this.value.ishrn(t.value.toNumber()),this)}rightShift(t){return this.clone().irightShift(t)}ixor(t){return this.value.ixor(t.value),this}xor(t){return this.clone().ixor(t)}ibitwiseAnd(t){return this.value.iand(t.value),this}bitwiseAnd(t){return this.clone().ibitwiseAnd(t)}ibitwiseOr(t){return this.value.ior(t.value),this}equal(t){return this.value.eq(t.value)}lt(t){return this.value.lt(t.value)}lte(t){return this.value.lte(t.value)}gt(t){return this.value.gt(t.value)}gte(t){return this.value.gte(t.value)}isZero(){return this.value.isZero()}isOne(){return this.value.eq(new eo(1))}isNegative(){return this.value.isNeg()}isEven(){return this.value.isEven()}abs(){const t=this.clone();return t.value=t.value.abs(),t}negate(){const t=this.clone();return t.value.ineg(),t}toString(){return this.value.toString()}toNumber(){return this.value.toNumber()}getBit(t){return this.value.testn(t)?1:0}bitLength(){return this.value.bitLength()}byteLength(){return this.value.byteLength()}toUint8Array(t="be",e){return this.value.toArrayLike(Uint8Array,t,e)}}var io=/*#__PURE__*/Object.freeze({__proto__:null,default:ro});function no(t){if(!Number.isSafeInteger(t)||t<0)throw Error("Wrong positive integer: "+t)}function so(t,...e){if(!((r=t)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Expected Uint8Array");var r;if(e.length>0&&!e.includes(t.length))throw Error(`Expected Uint8Array of length ${e}, not of length=${t.length}`)}function ao(t,e=!0){if(t.destroyed)throw Error("Hash instance has been destroyed");if(e&&t.finished)throw Error("Hash#digest() has already been called")}function oo(t,e){so(t);const r=e.outputLen;if(t.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const co=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0;
3
- /*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ho(t){return t instanceof Uint8Array||null!=t&&"object"==typeof t&&"Uint8Array"===t.constructor.name}const uo=t=>new DataView(t.buffer,t.byteOffset,t.byteLength),lo=(t,e)=>t<<32-e|t>>>e;if(!(68===new Uint8Array(new Uint32Array([287454020]).buffer)[0]))throw Error("Non little-endian hardware is not supported");function fo(t){if("string"!=typeof t)throw Error("utf8ToBytes expected string, got "+typeof t);return new Uint8Array((new TextEncoder).encode(t))}function yo(t){if("string"==typeof t&&(t=fo(t)),!ho(t))throw Error("expected Uint8Array, got "+typeof t);return t}function po(...t){let e=0;for(let r=0;r<t.length;r++){const i=t[r];if(!ho(i))throw Error("Uint8Array expected");e+=i.length}const r=new Uint8Array(e);for(let e=0,i=0;e<t.length;e++){const n=t[e];r.set(n,i),i+=n.length}return r}class go{clone(){return this._cloneInto()}}function mo(t){const e=e=>t().update(yo(e)).digest(),r=t();return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=()=>t(),e}function wo(t=32){if(co&&"function"==typeof co.getRandomValues)return co.getRandomValues(new Uint8Array(t));throw Error("crypto.getRandomValues must be defined")}class Ao extends go{constructor(t,e){super(),this.finished=!1,this.destroyed=!1,function(t){if("function"!=typeof t||"function"!=typeof t.create)throw Error("Hash should be wrapped by utils.wrapConstructor");no(t.outputLen),no(t.blockLen)}(t);const r=yo(e);if(this.iHash=t.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const i=this.blockLen,n=new Uint8Array(i);n.set(r.length>i?t.create().update(r).digest():r);for(let t=0;t<n.length;t++)n[t]^=54;this.iHash.update(n),this.oHash=t.create();for(let t=0;t<n.length;t++)n[t]^=106;this.oHash.update(n),n.fill(0)}update(t){return ao(this),this.iHash.update(t),this}digestInto(t){ao(this),so(t,this.outputLen),this.finished=!0,this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){const t=new Uint8Array(this.oHash.outputLen);return this.digestInto(t),t}_cloneInto(t){t||(t=Object.create(Object.getPrototypeOf(this),{}));const{oHash:e,iHash:r,finished:i,destroyed:n,blockLen:s,outputLen:a}=this;return t.finished=i,t.destroyed=n,t.blockLen=s,t.outputLen=a,t.oHash=e._cloneInto(t.oHash),t.iHash=r._cloneInto(t.iHash),t}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const bo=(t,e,r)=>new Ao(t,e).update(r).digest();bo.create=(t,e)=>new Ao(t,e);Wa.setImplementation("undefined"!=typeof BigInt?$a:ro);
1
+ /*! OpenPGP.js v6.0.0-beta.1 - 2024-05-17 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
2
+ "use strict";const e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var t=require("module"),r=require("node:crypto"),i="undefined"!=typeof document?document.currentScript:null;function n(e){var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var i=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,i.get?i:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var s=/*#__PURE__*/n(r);const a=Symbol("doneWritingPromise"),o=Symbol("doneWritingResolve"),c=Symbol("doneWritingReject"),h=Symbol("readingIndex");class ArrayStream extends Array{constructor(){super(),Object.setPrototypeOf(this,ArrayStream.prototype),this[a]=new Promise(((e,t)=>{this[o]=e,this[c]=t})),this[a].catch((()=>{}))}}function u(e){return e&&e.getReader&&Array.isArray(e)}function l(e){if(!u(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function y(t){if(u(t))return"array";if(e.ReadableStream&&e.ReadableStream.prototype.isPrototypeOf(t))return"web";if(t&&!(e.ReadableStream&&t instanceof e.ReadableStream)&&"function"==typeof t._read&&"object"==typeof t._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!t||!t.getReader)&&"web-like"}function f(e){return Uint8Array.prototype.isPrototypeOf(e)}function g(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!f(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((function(e){r.set(e,i),i+=e.length})),r}ArrayStream.prototype.getReader=function(){return void 0===this[h]&&(this[h]=0),{read:async()=>(await this[a],this[h]===this.length?{value:void 0,done:!0}:{value:this[this[h]++],done:!1})}},ArrayStream.prototype.readToEnd=async function(e){await this[a];const t=e(this.slice(this[h]));return this.length=0,t},ArrayStream.prototype.clone=function(){const e=new ArrayStream;return e[a]=this[a].then((()=>{e.push(...this)})),e},l.prototype.write=async function(e){this.stream.push(e)},l.prototype.close=async function(){this.stream[o]()},l.prototype.abort=async function(e){return this.stream[c](e),e},l.prototype.releaseLock=function(){},"object"==typeof e.process&&e.process.versions;const p=new WeakSet,d=Symbol("externalBuffer");function A(e){if(this.stream=e,e[d]&&(this[d]=e[d].slice()),u(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(y(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||p.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{p.add(e)}catch(e){}}}function w(e){return y(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function m(e){if(y(e))return e;const t=new ArrayStream;return(async()=>{const r=M(t);await r.write(e),await r.close()})(),t}function b(e){return e.some((e=>y(e)&&!u(e)))?function(e){e=e.map(w);const t=v((async function(e){await Promise.all(i.map((t=>x(t,e))))}));let r=Promise.resolve();const i=e.map(((i,n)=>B(i,((i,s)=>(r=r.then((()=>E(i,t.writable,{preventClose:n!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>u(e)))?function(e){const t=new ArrayStream;let r=Promise.resolve();return e.forEach(((i,n)=>(r=r.then((()=>E(i,t,{preventClose:n!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):g(e)}async function E(e,t,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(y(e)&&!u(e)){e=w(e);try{if(e[d]){const r=M(t);for(let t=0;t<e[d].length;t++)await r.ready,await r.write(e[d][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:i,preventCancel:n})}catch(e){}return}const s=R(e=m(e)),a=M(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){i||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function k(e,t){const r=new TransformStream(t);return E(e,r.writable),r.readable}function v(e){let t,r,i=!1;return{readable:new ReadableStream({start(e){r=e},pull(){t?t():i=!0},cancel:e},{highWaterMark:0}),writable:new WritableStream({write:async function(e){r.enqueue(e),i?i=!1:(await new Promise((e=>{t=e})),t=null)},close:r.close.bind(r),abort:r.error.bind(r)})}}function I(e,t=(()=>{}),r=(()=>{})){if(u(e)){const i=new ArrayStream;return(async()=>{const n=M(i);try{const i=await U(e),s=t(i),a=r();let o;o=void 0!==s&&void 0!==a?b([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(e){await n.abort(e)}})(),i}if(y(e))return k(e,{async transform(e,r){try{const i=await t(e);void 0!==i&&r.enqueue(i)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const i=t(e),n=r();return void 0!==i&&void 0!==n?b([i,n]):void 0!==i?i:n}function B(e,t){if(y(e)&&!u(e)){let r;const i=new TransformStream({start(e){r=e}}),n=E(e,i.writable),s=v((async function(e){r.error(e),await n,await new Promise(setTimeout)}));return t(i.readable,s.writable),s.readable}e=m(e);const r=new ArrayStream;return t(e,r),r}function S(e,t){let r;const i=B(e,((e,n)=>{const s=R(e);s.remainder=()=>(s.releaseLock(),E(e,n),i),r=t(s)}));return r}function C(e){if(u(e))return e.clone();if(y(e)){const t=function(e){if(u(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(y(e)){const t=w(e).tee();return t[0][d]=t[1][d]=e[d],t}return[P(e),P(e)]}(e);return D(e,t[0]),t[1]}return P(e)}function K(e){return u(e)?C(e):y(e)?new ReadableStream({start(t){const r=B(e,(async(e,r)=>{const i=R(e),n=M(r);try{for(;;){await n.ready;const{done:e,value:r}=await i.read();if(e){try{t.close()}catch(e){}return void await n.close()}try{t.enqueue(r)}catch(e){}await n.write(r)}}catch(e){t.error(e),await n.abort(e)}}));D(e,r)}}):P(e)}function D(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(t):i.get=i.get.bind(t),Object.defineProperty(e,r,i))}))}function P(e,t=0,r=1/0){if(u(e))throw Error("Not implemented");if(y(e)){if(t>=0&&r>=0){let i=0;return k(e,{transform(e,n){i<r?(i+e.length>=t&&n.enqueue(P(e,Math.max(t-i,0),r-i)),i+=e.length):n.terminate()}})}if(t<0&&(r<0||r===1/0)){let i=[];return I(e,(e=>{e.length>=-t?i=[e]:i.push(e)}),(()=>P(b(i),t,r)))}if(0===t&&r<0){let i;return I(e,(e=>{const n=i?b([i,e]):e;if(n.length>=-r)return i=P(n,r),P(n,t,r);i=n}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),Q((async()=>P(await U(e),t,r)))}return e[d]&&(e=b(e[d].concat([e]))),f(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function U(e,t=b){return u(e)?e.readToEnd(t):y(e)?R(e).readToEnd(t):e}async function x(e,t){if(y(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function Q(e){const t=new ArrayStream;return(async()=>{const r=M(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function R(e){return new A(e)}function M(e){return new l(e)}A.prototype.read=async function(){if(this[d]&&this[d].length){return{done:!1,value:this[d].shift()}}return this._read()},A.prototype.releaseLock=function(){this[d]&&(this.stream[d]=this[d]),this._releaseLock()},A.prototype.cancel=function(e){return this._cancel(e)},A.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:i}=await this.read();if(i+="",r)return t.length?b(t):void 0;const n=i.indexOf("\n")+1;n&&(e=b(t.concat(i.substr(0,n))),t=[]),n!==i.length&&t.push(i.substr(n))}return this.unshift(...t),e},A.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(P(t,1)),r},A.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return t.length?b(t):void 0;if(t.push(n),r+=n.length,r>=e){const r=b(t);return this.unshift(P(r,e)),P(r,0,e)}}},A.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},A.prototype.unshift=function(...e){this[d]||(this[d]=[]),1===e.length&&f(e[0])&&this[d].length&&e[0].length&&this[d][0].byteOffset>=e[0].length?this[d][0]=new Uint8Array(this[d][0].buffer,this[d][0].byteOffset-e[0].length,this[d][0].byteLength+e[0].length):this[d].unshift(...e.filter((e=>e&&e.length)))},A.prototype.readToEnd=async function(e=b){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const T=Symbol("byValue");var L={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[T]||(e[T]=[],Object.entries(e).forEach((([t,r])=>{e[T][r]=t}))),void 0!==e[T][t])return e[T][t];throw Error("Invalid enum value.")}},_={preferredHashAlgorithm:L.hash.sha256,preferredSymmetricAlgorithm:L.symmetric.aes256,preferredCompressionAlgorithm:L.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:L.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,s2kType:L.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([L.symmetric.aes128,L.symmetric.aes192,L.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.1",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([L.hash.md5,L.hash.ripemd]),rejectMessageHashAlgorithms:new Set([L.hash.md5,L.hash.ripemd,L.hash.sha1]),rejectPublicKeyAlgorithms:new Set([L.publicKey.elgamal,L.publicKey.dsa]),rejectCurves:new Set([L.curve.secp256k1])};const N=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),F={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:t.createRequire("undefined"==typeof document?require("url").pathToFileURL(__filename).href:i&&i.src||new URL("openpgp.min.cjs",document.baseURI).href),isArray:function(e){return e instanceof Array},isUint8Array:f,isStream:y,getNobleCurve:async(e,t)=>{if(!_.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return Au}));switch(e){case L.publicKey.ecdh:case L.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case L.publicKey.x448:return r.get("x448");case L.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let i=0;i<t;i++)r[i]=e>>8*(t-i-1)&255;return r},readDate:function(e){const t=F.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return F.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return F.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){const r=new Uint8Array(t),i=t-e.length;return r.set(e,i),r},uint8ArrayToMPI:function(e){const t=F.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),i=new Uint8Array([(65280&t)>>8,255&t]);return F.concatUint8Array([i,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+F.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return I(e,(e=>{if(!F.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,i=(e=new Uint8Array(e)).length;for(let n=0;n<i;n+=r)t.push(String.fromCharCode.apply(String,e.subarray(n,n+r<i?n+r:i)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return I(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return I(e,r,(()=>r(new Uint8Array,!0)))},concat:b,concatUint8Array:g,equalsUint8Array:function(e,t){if(!F.isUint8Array(e)||!F.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return F.writeNumber(t,2)},printDebug:function(e){N&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){N&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let i=0;i<r;i++)t[i]=e[i]<<1^e[i+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const t=void 0!==e&&e.crypto&&e.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!t)throw Error("The WebCrypto API is not available");return t},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!F.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return I(e,(e=>{let r;t&&(e=F.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const i=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&i.push(r);if(!i.length)return e;const n=new Uint8Array(e.length+i.length);let s=0;for(let t=0;t<i.length;t++){const r=e.subarray(i[t-1]||0,i[t]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(e.subarray(i[i.length-1]||0),s),n}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return I(e,(e=>{let r;13===(e=t&&10!==e[0]?F.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let i=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const n=r-(10===e[r]?1:0);t&&e.copyWithin(i,t,n),i+=n-t}return e.subarray(0,i)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return Error(e);try{t.message=e+": "+t.message}catch(e){}return t},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let i;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){i=e}}))),r(i)}))},selectUint8Array:function(e,t,r){const i=Math.max(t.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=t[i]&256-e|r[i]&255+e,s+=e&i<t.length|1-e&i<r.length;return n.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===L.symmetric.aes128||e===L.symmetric.aes192||e===L.symmetric.aes256}},H=F.getNodeBuffer();let O,z;function G(e){let t=new Uint8Array;return I(e,(e=>{t=F.concatUint8Array([t,e]);const r=[],i=Math.floor(t.length/45),n=45*i,s=O(t.subarray(0,n));for(let e=0;e<i;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(n),r.join("")}),(()=>t.length?O(t)+"\n":""))}function j(e){let t="";return I(e,(e=>{t+=e;let r=0;const i=[" ","\t","\r","\n"];for(let e=0;e<i.length;e++){const n=i[e];for(let e=t.indexOf(n);-1!==e;e=t.indexOf(n,e+1))r++}let n=t.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(t[n])&&r--;const s=z(t.substr(0,n));return t=t.substr(n),s}),(()=>z(t)))}function q(e){return j(e.replace(/-/g,"+").replace(/_/g,"/"))}function V(e,t){let r=G(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function Y(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?L.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?L.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?L.armor.signed:/MESSAGE/.test(t[1])?L.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?L.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?L.armor.privateKey:/SIGNATURE/.test(t[1])?L.armor.signature:void 0}function J(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function W(e){const t=function(e){let t=13501623;return I(e,(e=>{const r=$?Math.floor(e.length/4):0,i=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=i[e],t=Z[0][t>>24&255]^Z[1][t>>16&255]^Z[2][t>>8&255]^Z[3][255&t];for(let i=4*r;i<e.length;i++)t=t>>8^Z[0][255&t^e[i]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return G(t)}H?(O=e=>H.from(e).toString("base64"),z=e=>{const t=H.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(O=e=>btoa(F.uint8ArrayToString(e)),z=e=>F.stringToUint8Array(atob(e)));const Z=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);Z[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)Z[1][e]=Z[0][e]>>8^Z[0][255&Z[0][e]];for(let e=0;e<=255;e++)Z[2][e]=Z[1][e]>>8^Z[0][255&Z[1][e]];for(let e=0;e<=255;e++)Z[3][e]=Z[2][e]>>8^Z[0][255&Z[2][e]];const $=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function X(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||F.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||F.printDebugError(Error("Unknown header: "+e[t]))}function ee(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function te(e){return new Promise((async(t,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=j(B(e,(async(e,y)=>{const f=R(e);try{for(;;){let e=await f.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=F.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==L.armor.signed||(i.test(e)?(u=u.join("\r\n"),c=!0,X(h),h=[],o=!1):u.push(e.replace(/^- /,"")));else if(i.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(e)){if(X(h),o=!0,c||s!==L.armor.signed){t({text:u,data:l,headers:a,type:s});break}}else h.push(e);else i.test(e)&&(s=Y(e))}}catch(e){return void r(e)}const g=M(y);try{for(;;){await g.ready;const{done:e,value:t}=await f.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await f.readToEnd();e.length||(e=""),e=r+e,e=F.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(i);if(1===t.length)throw Error("Misformed armored text");const n=ee(t[0].slice(0,-1));await g.write(n);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}})))}catch(e){r(e)}})).then((async e=>(u(e.data)&&(e.data=await U(e.data)),e)))}function re(e,t,r,i,n,s=!1,a=_){let o,c;e===L.armor.signed&&(o=t.text,c=t.hash,t=t.data);const h=s&&K(t),u=[];switch(e){case L.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case L.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case L.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP SIGNATURE-----\n");break;case L.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP MESSAGE-----\n");break;case L.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case L.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case L.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP SIGNATURE-----\n")}return F.concat(u)}async function ie(e){switch(e){case L.symmetric.aes128:case L.symmetric.aes192:case L.symmetric.aes256:throw Error("Not a legacy cipher");case L.symmetric.cast5:case L.symmetric.blowfish:case L.symmetric.twofish:case L.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return xu})),r=t.get(e);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function ne(e){switch(e){case L.symmetric.aes128:case L.symmetric.aes192:case L.symmetric.aes256:case L.symmetric.twofish:return 16;case L.symmetric.blowfish:case L.symmetric.cast5:case L.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function se(e){switch(e){case L.symmetric.aes128:case L.symmetric.blowfish:case L.symmetric.cast5:return 16;case L.symmetric.aes192:case L.symmetric.tripledes:return 24;case L.symmetric.aes256:case L.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function ae(e){return{keySize:se(e),blockSize:ne(e)}}var oe=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:ae,getLegacyCipher:ie});function ce(e,t){let r=e[0],i=e[1],n=e[2],s=e[3];r=ue(r,i,n,s,t[0],7,-680876936),s=ue(s,r,i,n,t[1],12,-389564586),n=ue(n,s,r,i,t[2],17,606105819),i=ue(i,n,s,r,t[3],22,-1044525330),r=ue(r,i,n,s,t[4],7,-176418897),s=ue(s,r,i,n,t[5],12,1200080426),n=ue(n,s,r,i,t[6],17,-1473231341),i=ue(i,n,s,r,t[7],22,-45705983),r=ue(r,i,n,s,t[8],7,1770035416),s=ue(s,r,i,n,t[9],12,-1958414417),n=ue(n,s,r,i,t[10],17,-42063),i=ue(i,n,s,r,t[11],22,-1990404162),r=ue(r,i,n,s,t[12],7,1804603682),s=ue(s,r,i,n,t[13],12,-40341101),n=ue(n,s,r,i,t[14],17,-1502002290),i=ue(i,n,s,r,t[15],22,1236535329),r=le(r,i,n,s,t[1],5,-165796510),s=le(s,r,i,n,t[6],9,-1069501632),n=le(n,s,r,i,t[11],14,643717713),i=le(i,n,s,r,t[0],20,-373897302),r=le(r,i,n,s,t[5],5,-701558691),s=le(s,r,i,n,t[10],9,38016083),n=le(n,s,r,i,t[15],14,-660478335),i=le(i,n,s,r,t[4],20,-405537848),r=le(r,i,n,s,t[9],5,568446438),s=le(s,r,i,n,t[14],9,-1019803690),n=le(n,s,r,i,t[3],14,-187363961),i=le(i,n,s,r,t[8],20,1163531501),r=le(r,i,n,s,t[13],5,-1444681467),s=le(s,r,i,n,t[2],9,-51403784),n=le(n,s,r,i,t[7],14,1735328473),i=le(i,n,s,r,t[12],20,-1926607734),r=ye(r,i,n,s,t[5],4,-378558),s=ye(s,r,i,n,t[8],11,-2022574463),n=ye(n,s,r,i,t[11],16,1839030562),i=ye(i,n,s,r,t[14],23,-35309556),r=ye(r,i,n,s,t[1],4,-1530992060),s=ye(s,r,i,n,t[4],11,1272893353),n=ye(n,s,r,i,t[7],16,-155497632),i=ye(i,n,s,r,t[10],23,-1094730640),r=ye(r,i,n,s,t[13],4,681279174),s=ye(s,r,i,n,t[0],11,-358537222),n=ye(n,s,r,i,t[3],16,-722521979),i=ye(i,n,s,r,t[6],23,76029189),r=ye(r,i,n,s,t[9],4,-640364487),s=ye(s,r,i,n,t[12],11,-421815835),n=ye(n,s,r,i,t[15],16,530742520),i=ye(i,n,s,r,t[2],23,-995338651),r=fe(r,i,n,s,t[0],6,-198630844),s=fe(s,r,i,n,t[7],10,1126891415),n=fe(n,s,r,i,t[14],15,-1416354905),i=fe(i,n,s,r,t[5],21,-57434055),r=fe(r,i,n,s,t[12],6,1700485571),s=fe(s,r,i,n,t[3],10,-1894986606),n=fe(n,s,r,i,t[10],15,-1051523),i=fe(i,n,s,r,t[1],21,-2054922799),r=fe(r,i,n,s,t[8],6,1873313359),s=fe(s,r,i,n,t[15],10,-30611744),n=fe(n,s,r,i,t[6],15,-1560198380),i=fe(i,n,s,r,t[13],21,1309151649),r=fe(r,i,n,s,t[4],6,-145523070),s=fe(s,r,i,n,t[11],10,-1120210379),n=fe(n,s,r,i,t[2],15,718787259),i=fe(i,n,s,r,t[9],21,-343485551),e[0]=Ae(r,e[0]),e[1]=Ae(i,e[1]),e[2]=Ae(n,e[2]),e[3]=Ae(s,e[3])}function he(e,t,r,i,n,s){return t=Ae(Ae(t,e),Ae(i,s)),Ae(t<<n|t>>>32-n,r)}function ue(e,t,r,i,n,s,a){return he(t&r|~t&i,e,t,n,s,a)}function le(e,t,r,i,n,s,a){return he(t&i|r&~i,e,t,n,s,a)}function ye(e,t,r,i,n,s,a){return he(t^r^i,e,t,n,s,a)}function fe(e,t,r,i,n,s,a){return he(r^(t|~i),e,t,n,s,a)}function ge(e){const t=[];let r;for(r=0;r<64;r+=4)t[r>>2]=e.charCodeAt(r)+(e.charCodeAt(r+1)<<8)+(e.charCodeAt(r+2)<<16)+(e.charCodeAt(r+3)<<24);return t}const pe="0123456789abcdef".split("");function de(e){let t="",r=0;for(;r<4;r++)t+=pe[e>>8*r+4&15]+pe[e>>8*r&15];return t}function Ae(e,t){return e+t&4294967295}const we=F.getWebCrypto(),me=F.getNodeCrypto(),be=me&&me.getHashes();function Ee(e){if(me&&be.includes(e))return async function(t){const r=me.createHash(e);return I(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function ke(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return Zu})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(u(e)&&(e=await U(e)),F.isStream(e)){const t=(await r()).create();return I(e,(e=>{t.update(e)}),(()=>t.digest()))}if(we&&t)return new Uint8Array(await we.digest(t,e));return(await r())(e)}}var ve={md5:Ee("md5")||async function(e){const t=function(e){const t=e.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=e.length;i+=64)ce(r,ge(e.substring(i-64,i)));e=e.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<e.length;i++)n[i>>2]|=e.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(ce(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*t,ce(r,n),r}(F.uint8ArrayToString(e));return F.hexToUint8Array(function(e){for(let t=0;t<e.length;t++)e[t]=de(e[t]);return e.join("")}(t))},sha1:Ee("sha1")||ke("sha1","SHA-1"),sha224:Ee("sha224")||ke("sha224"),sha256:Ee("sha256")||ke("sha256","SHA-256"),sha384:Ee("sha384")||ke("sha384","SHA-384"),sha512:Ee("sha512")||ke("sha512","SHA-512"),ripemd:Ee("ripemd160")||ke("ripemd160"),sha3_256:Ee("sha3-256")||ke("sha3_256"),sha3_512:Ee("sha3-512")||ke("sha3_512"),digest:function(e,t){switch(e){case L.hash.md5:return this.md5(t);case L.hash.sha1:return this.sha1(t);case L.hash.ripemd:return this.ripemd(t);case L.hash.sha256:return this.sha256(t);case L.hash.sha384:return this.sha384(t);case L.hash.sha512:return this.sha512(t);case L.hash.sha224:return this.sha224(t);case L.hash.sha3_256:return this.sha3_256(t);case L.hash.sha3_512:return this.sha3_512(t);default:throw Error("Unsupported hash function")}},getHashByteLength:function(e){switch(e){case L.hash.md5:return 16;case L.hash.sha1:case L.hash.ripemd:return 20;case L.hash.sha256:return 32;case L.hash.sha384:return 48;case L.hash.sha512:return 64;case L.hash.sha224:return 28;case L.hash.sha3_256:return 32;case L.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(e){switch(e){case L.hash.md5:case L.hash.sha1:case L.hash.ripemd:case L.hash.sha224:case L.hash.sha256:return 64;case L.hash.sha384:case L.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}},Ie=function(){var e,t,r=!1;function i(r,i){var n=e[(t[r]+t[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=e[255-t[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){e=[],t=[];var i,n,s=1;for(i=0;i<255;i++)e[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=e[i],t[e[i]]=i;e[255]=e[0],t[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var y=1;y<4;y++)a[y][u]=a[y-1][u]>>>8|a[y-1][u]<<24,o[y][l]=o[y-1][l]>>>8|o[y-1][l]<<24}c=!0}var u=function(e,t){c||h();var r=new Uint32Array(t);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(e,t,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0;var I=new e.Uint32Array(r),B=new e.Uint8Array(r);function S(e,t,r,o,c,h,u,l){e=e|0;t=t|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0;y=r|0x400,f=r|0x800,g=r|0xc00;c=c^I[(e|0)>>2],h=h^I[(e|4)>>2],u=u^I[(e|8)>>2],l=l^I[(e|12)>>2];for(m=16;(m|0)<=o<<4;m=m+16|0){p=I[(r|c>>22&1020)>>2]^I[(y|h>>14&1020)>>2]^I[(f|u>>6&1020)>>2]^I[(g|l<<2&1020)>>2]^I[(e|m|0)>>2],d=I[(r|h>>22&1020)>>2]^I[(y|u>>14&1020)>>2]^I[(f|l>>6&1020)>>2]^I[(g|c<<2&1020)>>2]^I[(e|m|4)>>2],A=I[(r|u>>22&1020)>>2]^I[(y|l>>14&1020)>>2]^I[(f|c>>6&1020)>>2]^I[(g|h<<2&1020)>>2]^I[(e|m|8)>>2],w=I[(r|l>>22&1020)>>2]^I[(y|c>>14&1020)>>2]^I[(f|h>>6&1020)>>2]^I[(g|u<<2&1020)>>2]^I[(e|m|12)>>2];c=p,h=d,u=A,l=w}i=I[(t|c>>22&1020)>>2]<<24^I[(t|h>>14&1020)>>2]<<16^I[(t|u>>6&1020)>>2]<<8^I[(t|l<<2&1020)>>2]^I[(e|m|0)>>2],n=I[(t|h>>22&1020)>>2]<<24^I[(t|u>>14&1020)>>2]<<16^I[(t|l>>6&1020)>>2]<<8^I[(t|c<<2&1020)>>2]^I[(e|m|4)>>2],s=I[(t|u>>22&1020)>>2]<<24^I[(t|l>>14&1020)>>2]<<16^I[(t|c>>6&1020)>>2]<<8^I[(t|h<<2&1020)>>2]^I[(e|m|8)>>2],a=I[(t|l>>22&1020)>>2]<<24^I[(t|c>>14&1020)>>2]<<16^I[(t|h>>6&1020)>>2]<<8^I[(t|u<<2&1020)>>2]^I[(e|m|12)>>2]}function C(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;S(0x0000,0x0800,0x1000,v,e,t,r,i)}function K(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var s=0;S(0x0400,0x0c00,0x2000,v,e,i,r,t);s=n,n=a,a=s}function D(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o^e,c^t,h^r,u^l);o=i,c=n,h=s,u=a}function P(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;var y=0;S(0x0400,0x0c00,0x2000,v,e,l,r,t);y=n,n=a,a=y;i=i^o,n=n^c,s=s^h,a=a^u;o=e,c=t,h=r,u=l}function U(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i=i^e,c=n=n^t,h=s=s^r,u=a=a^l}function x(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);i=i^e,n=n^t,s=s^r,a=a^l;o=e,c=t,h=r,u=l}function Q(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i,c=n,h=s,u=a;i=i^e,n=n^t,s=s^r,a=a^l}function R(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;S(0x0000,0x0800,0x1000,v,l,y,f,g);g=~w&g|w&g+1;f=~A&f|A&f+((g|0)==0);y=~d&y|d&y+((f|0)==0);l=~p&l|p&l+((y|0)==0);i=i^e;n=n^t;s=s^r;a=a^o}function M(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0;e=e^o,t=t^c,r=r^h,i=i^u;n=m|0,s=b|0,a=E|0,l=k|0;for(;(d|0)<128;d=d+1|0){if(n>>>31){y=y^e,f=f^t,g=g^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;A=i&1;i=i>>>1|r<<31,r=r>>>1|t<<31,t=t>>>1|e<<31,e=e>>>1;if(A)e=e^0xe1000000}o=y,c=f,h=g,u=p}function T(e){e=e|0;v=e}function L(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;i=e,n=t,s=r,a=o}function _(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;o=e,c=t,h=r,u=i}function N(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;l=e,y=t,f=r,g=i}function F(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;p=e,d=t,A=r,w=i}function H(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;g=~w&g|w&i,f=~A&f|A&r,y=~d&y|d&t,l=~p&l|p&e}function O(e){e=e|0;if(e&15)return-1;B[e|0]=i>>>24,B[e|1]=i>>>16&255,B[e|2]=i>>>8&255,B[e|3]=i&255,B[e|4]=n>>>24,B[e|5]=n>>>16&255,B[e|6]=n>>>8&255,B[e|7]=n&255,B[e|8]=s>>>24,B[e|9]=s>>>16&255,B[e|10]=s>>>8&255,B[e|11]=s&255,B[e|12]=a>>>24,B[e|13]=a>>>16&255,B[e|14]=a>>>8&255,B[e|15]=a&255;return 16}function z(e){e=e|0;if(e&15)return-1;B[e|0]=o>>>24,B[e|1]=o>>>16&255,B[e|2]=o>>>8&255,B[e|3]=o&255,B[e|4]=c>>>24,B[e|5]=c>>>16&255,B[e|6]=c>>>8&255,B[e|7]=c&255,B[e|8]=h>>>24,B[e|9]=h>>>16&255,B[e|10]=h>>>8&255,B[e|11]=h&255,B[e|12]=u>>>24,B[e|13]=u>>>16&255,B[e|14]=u>>>8&255,B[e|15]=u&255;return 16}function G(){C(0,0,0,0);m=i,b=n,E=s,k=a}function j(e,t,r){e=e|0;t=t|0;r=r|0;var o=0;if(t&15)return-1;while((r|0)>=16){V[e&7](B[t|0]<<24|B[t|1]<<16|B[t|2]<<8|B[t|3],B[t|4]<<24|B[t|5]<<16|B[t|6]<<8|B[t|7],B[t|8]<<24|B[t|9]<<16|B[t|10]<<8|B[t|11],B[t|12]<<24|B[t|13]<<16|B[t|14]<<8|B[t|15]);B[t|0]=i>>>24,B[t|1]=i>>>16&255,B[t|2]=i>>>8&255,B[t|3]=i&255,B[t|4]=n>>>24,B[t|5]=n>>>16&255,B[t|6]=n>>>8&255,B[t|7]=n&255,B[t|8]=s>>>24,B[t|9]=s>>>16&255,B[t|10]=s>>>8&255,B[t|11]=s&255,B[t|12]=a>>>24,B[t|13]=a>>>16&255,B[t|14]=a>>>8&255,B[t|15]=a&255;o=o+16|0,t=t+16|0,r=r-16|0}return o|0}function q(e,t,r){e=e|0;t=t|0;r=r|0;var i=0;if(t&15)return-1;while((r|0)>=16){Y[e&1](B[t|0]<<24|B[t|1]<<16|B[t|2]<<8|B[t|3],B[t|4]<<24|B[t|5]<<16|B[t|6]<<8|B[t|7],B[t|8]<<24|B[t|9]<<16|B[t|10]<<8|B[t|11],B[t|12]<<24|B[t|13]<<16|B[t|14]<<8|B[t|15]);i=i+16|0,t=t+16|0,r=r-16|0}return i|0}var V=[C,K,D,P,U,x,Q,R];var Y=[D,M];return{set_rounds:T,set_state:L,set_iv:_,set_nonce:N,set_mask:F,set_counter:H,get_state:O,get_iv:z,gcm_init:G,cipher:j,mac:q}}({Uint8Array,Uint32Array},e,t);return u.set_key=function(e,t,i,s,a,c,h,l,y){var f=r.subarray(0,60),g=r.subarray(256,316);f.set([t,i,s,a,c,h,l,y]);for(var p=e,d=1;p<4*e+28;p++){var A=f[p-1];(p%e==0||8===e&&p%e==4)&&(A=n[A>>>24]<<24^n[A>>>16&255]<<16^n[A>>>8&255]<<8^n[255&A]),p%e==0&&(A=A<<8^A>>>24^d<<24,d=d<<1^(128&d?27:0)),f[p]=f[p-e]^A}for(var w=0;w<p;w+=4)for(var m=0;m<4;m++){A=f[p-(4+w)+(4-m)%4];g[w+m]=w<4||w>=p-4?A:o[0][n[A>>>24]]^o[1][n[A>>>16&255]]^o[2][n[A>>>8&255]]^o[3][n[255&A]]}u.set_rounds(e+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function Be(e){return e instanceof Uint8Array}function Se(e,t,r,i,n){const s=e.length-t,a=s<n?s:n;return e.set(r.subarray(i,i+a),t),a}function Ce(...e){const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);let i=0;for(let t=0;t<e.length;t++)r.set(e[t],i),i+=e[t].length;return r}class Ke extends Error{constructor(...e){super(...e)}}class De extends Error{constructor(...e){super(...e)}}class Pe extends Error{constructor(...e){super(...e)}}const Ue=[],xe=[];class Qe{constructor(e,t,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=e,this.iv=t,this.padding=r,this.acquire_asm(n,s)}acquire_asm(e,t){return void 0!==this.heap&&void 0!==this.asm||(this.heap=e||Ue.pop()||function(e,t){const r=e?e.byteLength:65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return e||new Uint8Array(new ArrayBuffer(r))}().subarray(Ie.HEAP_DATA),this.asm=t||xe.pop()||new Ie(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(Ue.push(this.heap),xe.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(e,t){const{asm:r}=this.acquire_asm(),i=e.length;if(16!==i&&24!==i&&32!==i)throw new De("illegal key size");const n=new DataView(e.buffer,e.byteOffset,e.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==t){if(16!==t.length)throw new De("illegal iv size");let e=new DataView(t.buffer,t.byteOffset,t.byteLength);r.set_iv(e.getUint32(0),e.getUint32(4),e.getUint32(8),e.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(e){if(!Be(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=Ie.ENC[this.mode],n=Ie.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=Se(t,s+a,e,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(t.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=Ie.ENC[this.mode],i=Ie.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let t=0;t<a;++t)e[n+s+t]=a;s+=a,o=s}else if(s%16)throw new De("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&t.cipher(r,i+n,s),o&&c.set(e.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(e){if(!Be(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=Ie.DEC[this.mode],n=Ie.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=a+c&-16,l=0,y=0;this.padding&&(l=a+c-u||16,u-=l);const f=new Uint8Array(u);for(;c>0;)y=Se(t,s+a,e,o,c),a+=y,o+=y,c-=y,y=r.cipher(i,n+s,a-(c?0:l)),y&&f.set(t.subarray(s,s+y),h),h+=y,y<a?(s+=y,a-=y):(s=0,a=0);return this.pos=s,this.len=a,f}AES_Decrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=Ie.DEC[this.mode],i=Ie.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new De("data length must be a multiple of the block size");s+=16-s%16}if(t.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let t=e[n+a-1];if(t<1||t>16||t>a)throw new Pe("bad padding");let r=0;for(let i=t;i>1;i--)r|=t^e[n+a-i];if(r)throw new Pe("bad padding");a-=t}}const o=new Uint8Array(a);return a>0&&o.set(e.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class Re{static encrypt(e,t,r){return new Re(t,r).encrypt(e)}static decrypt(e,t,r){return new Re(t,r).decrypt(e)}constructor(e,t,r){this.aes=r||new Qe(e,t,!0,"CFB"),delete this.aes.padding}encrypt(e){return Ce(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Ce(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const Me=F.getWebCrypto(),Te=F.getNodeCrypto(),Le=Te?Te.getCiphers():[],_e={idea:Le.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Le.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Le.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Le.includes("bf-cfb")?"bf-cfb":void 0,aes128:Le.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Le.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Le.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Ne{constructor(e,t,r){const{blockSize:i}=ae(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=ae(e);return Me.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Me.importKey("raw",this.key,r,!1,["encrypt"]);const i=await Me.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(i).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,i=F.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),n=F.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return Fe(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(e.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const t=this.nextBlock;i=await this._runCBC(this.prevBlock),Fe(i,t),this.prevBlock=i.slice(),this.i=0;const n=e.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);Fe(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(F.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return Fe(t,e),this.clearSensitiveData(),t}}function Fe(e,t){const r=Math.min(e.length,t.length);for(let i=0;i<r;i++)e[i]=e[i]^t[i]}var He=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i){const n=L.read(L.symmetric,e);if(Te&&_e[n])return function(e,t,r,i){const n=L.read(L.symmetric,e),s=new Te.createDecipheriv(_e[n],t,i);return I(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(F.isAES(e))return function(e,t,r,i){if(F.isStream(r)){const e=new Re(t,i);return I(r,(t=>e.aes.AES_Decrypt_process(t)),(()=>e.aes.AES_Decrypt_finish()))}return Re.decrypt(r,t,i)}(0,t,r,i);const s=new(await ie(e))(t),a=s.blockSize;let o=i,c=new Uint8Array;const h=e=>{e&&(c=F.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,i=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[i++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,i)};return I(r,h,h)},encrypt:async function(e,t,r,i,n){const s=L.read(L.symmetric,e);if(F.getNodeCrypto()&&_e[s])return function(e,t,r,i){const n=L.read(L.symmetric,e),s=new Te.createCipheriv(_e[n],t,i);return I(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(F.isAES(e))return async function(e,t,r,i){if(Me&&await Ne.isSupported(e)){const n=new Ne(e,t,i);return F.isStream(r)?I(r,(e=>n.encryptChunk(e)),(()=>n.finish())):n.encrypt(r)}{const e=new Re(t,i);return I(r,(t=>e.aes.AES_Encrypt_process(t)),(()=>e.aes.AES_Encrypt_finish()))}}(e,t,r,i);const a=new(await ie(e))(t),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=e=>{e&&(h=F.concatUint8Array([h,e]));const t=new Uint8Array(h.length);let r,i=0;for(;e?h.length>=o:h.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^e[r],t[i++]=c[r];h=h.subarray(o)}return t.subarray(0,i)};return I(r,u,u)}});class Oe{static encrypt(e,t,r){return new Oe(t,r).encrypt(e)}static decrypt(e,t,r){return new Oe(t,r).encrypt(e)}constructor(e,t,r){this.aes=r||new Qe(e,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(t)}encrypt(e){return Ce(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Ce(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(e,t,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new De("illegal counter size");let e=Math.pow(2,r)-1;i.set_mask(0,0,e/4294967296|0,0|e)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===e)throw Error("nonce is required");{let t=e.length;if(!t||t>16)throw new De("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(e),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==t){if(t<0||t>=Math.pow(2,r))throw new De("illegal counter value");i.set_counter(0,0,t/4294967296|0,0|t)}}}class ze{static encrypt(e,t,r=!0,i){return new ze(t,i,r).encrypt(e)}static decrypt(e,t,r=!0,i){return new ze(t,i,r).decrypt(e)}constructor(e,t,r=!0,i){this.aes=i||new Qe(e,t,r,"CBC")}encrypt(e){return Ce(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Ce(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const Ge=F.getWebCrypto(),je=F.getNodeCrypto(),qe=16;function Ve(e,t){const r=e.length-qe;for(let i=0;i<qe;i++)e[i+r]^=t[i];return e}const Ye=new Uint8Array(qe);async function Je(e){const t=await async function(e){if(F.getNodeCrypto())return async function(t){const r=new je.createCipheriv("aes-"+8*e.length+"-cbc",e,Ye).update(t);return new Uint8Array(r)};if(F.getWebCrypto())try{return e=await Ge.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await Ge.encrypt({name:"AES-CBC",iv:Ye,length:8*qe},e,t);return new Uint8Array(r).subarray(0,r.byteLength-qe)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return ze.encrypt(t,e,!1,Ye)}}(e),r=F.double(await t(Ye)),i=F.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%qe==0)return Ve(e,t);const i=new Uint8Array(e.length+(qe-e.length%qe));return i.set(e),i[e.length]=128,Ve(i,r)}(e,r,i))).subarray(-qe)}}const We=F.getWebCrypto(),Ze=F.getNodeCrypto(),$e=F.getNodeBuffer(),Xe=16,et=Xe,tt=Xe,rt=new Uint8Array(Xe),it=new Uint8Array(Xe);it[Xe-1]=1;const nt=new Uint8Array(Xe);async function st(e){const t=await Je(e);return function(e,r){return t(F.concatUint8Array([e,r]))}}async function at(e){if(F.getNodeCrypto())return async function(t,r){const i=new Ze.createCipheriv("aes-"+8*e.length+"-ctr",e,r),n=$e.concat([i.update(t),i.final()]);return new Uint8Array(n)};if(F.getWebCrypto())try{const t=await We.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const i=await We.encrypt({name:"AES-CTR",counter:r,length:8*Xe},t,e);return new Uint8Array(i)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return Oe.encrypt(t,e,r)}}async function ot(e,t){if(e!==L.symmetric.aes128&&e!==L.symmetric.aes192&&e!==L.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([st(t),at(t)]);return{encrypt:async function(e,t,n){const[s,a]=await Promise.all([r(rt,t),r(it,n)]),o=await i(e,s),c=await r(nt,o);for(let e=0;e<tt;e++)c[e]^=a[e]^s[e];return F.concatUint8Array([o,c])},decrypt:async function(e,t,n){if(e.length<tt)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-tt),a=e.subarray(-tt),[o,c,h]=await Promise.all([r(rt,t),r(it,n),r(nt,s)]),u=h;for(let e=0;e<tt;e++)u[e]^=c[e]^o[e];if(!F.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}nt[Xe-1]=2,ot.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},ot.blockLength=Xe,ot.ivLength=et,ot.tagLength=tt;const ct=16,ht=16;function ut(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function lt(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function yt(e,t){return lt(e.slice(),t)}const ft=new Uint8Array(ct),gt=new Uint8Array([1]);async function pt(e,t){const{keySize:r}=ae(e);if(!F.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let i=0;const n=e=>ze.encrypt(e,t,!1),s=e=>ze.decrypt(e,t,!1);let a;function o(e,t,r,s){const o=t.length/ct|0;!function(e,t){const r=F.nbits(Math.max(e.length,t.length)/ct|0)-1;for(let e=i+1;e<=r;e++)a[e]=F.double(a[e-1]);i=r}(t,s);const c=F.concatUint8Array([ft.subarray(0,15-r.length),gt,r]),h=63&c[15];c[15]&=192;const u=n(c),l=F.concatUint8Array([u,yt(u.subarray(0,8),u.subarray(1,9))]),y=F.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),f=new Uint8Array(ct),g=new Uint8Array(t.length+ht);let p,d=0;for(p=0;p<o;p++)lt(y,a[ut(p+1)]),g.set(lt(e(yt(y,t)),y),d),lt(f,e===n?t:g.subarray(d)),t=t.subarray(ct),d+=ct;if(t.length){lt(y,a.x);const r=n(y);g.set(yt(t,r),d);const i=new Uint8Array(ct);i.set(e===n?t:g.subarray(d,-16),0),i[t.length]=128,lt(f,i),d+=t.length}const A=lt(n(lt(lt(f,y),a.$)),function(e){if(!e.length)return ft;const t=e.length/ct|0,r=new Uint8Array(ct),i=new Uint8Array(ct);for(let s=0;s<t;s++)lt(r,a[ut(s+1)]),lt(i,n(yt(r,e))),e=e.subarray(ct);if(e.length){lt(r,a.x);const t=new Uint8Array(ct);t.set(e,0),t[e.length]=128,lt(t,r),lt(i,n(t))}return i}(s));return g.set(A,d),g}return function(){const e=n(ft),t=F.double(e);a=[],a[0]=F.double(t),a.x=e,a.$=t}(),{encrypt:async function(e,t,r){return o(n,e,t,r)},decrypt:async function(e,t,r){if(e.length<ht)throw Error("Invalid OCB ciphertext");const i=e.subarray(-16);e=e.subarray(0,-16);const n=o(s,e,t,r);if(F.equalsUint8Array(i,n.subarray(-16)))return n.subarray(0,-16);throw Error("Authentication tag mismatch")}}}pt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},pt.blockLength=ct,pt.ivLength=15,pt.tagLength=ht;const dt=68719476704;class At{static encrypt(e,t,r,i,n){return new At(t,r,i,n).encrypt(e)}static decrypt(e,t,r,i,n){return new At(t,r,i,n).decrypt(e)}constructor(e,t,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new Qe(e,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new De("illegal tagSize value");const o=t.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(t),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(Ie.MAC.GCM,Ie.HEAP_DATA,16),s.get_iv(Ie.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(t),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>dt)throw new De("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(e){return this.AES_GCM_encrypt(e)}decrypt(e){return this.AES_GCM_decrypt(e)}AES_GCM_Encrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>dt)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=Se(n,a+o,e,t,r),o+=u,t+=u,r-=u,u=i.cipher(Ie.ENC.CTR,Ie.HEAP_DATA+a,o),u=i.mac(Ie.MAC.GCM,Ie.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);e.cipher(Ie.ENC.CTR,Ie.HEAP_DATA+s,a+15&-16),a&&o.set(t.subarray(s,s+a));let c=a;for(;15&c;c++)t[s+c]=0;e.mac(Ie.MAC.GCM,Ie.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return t[0]=0,t[1]=0,t[2]=0,t[3]=h>>>29,t[4]=h>>>21,t[5]=h>>>13&255,t[6]=h>>>5&255,t[7]=h<<3&255,t[8]=t[9]=t[10]=0,t[11]=u>>>29,t[12]=u>>>21&255,t[13]=u>>>13&255,t[14]=u>>>5&255,t[15]=u<<3&255,e.mac(Ie.MAC.GCM,Ie.HEAP_DATA,16),e.get_iv(Ie.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(Ie.ENC.CTR,Ie.HEAP_DATA,16),o.set(t.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,y=0;if((s-1<<4)+c+r>dt)throw new RangeError("counter overflow");const f=new Uint8Array(u);for(;r>l;)y=Se(n,o+c,e,t,r-l),c+=y,t+=y,r-=y,y=i.mac(Ie.MAC.GCM,Ie.HEAP_DATA+o,y),y=i.cipher(Ie.DEC.CTR,Ie.HEAP_DATA+o,y),y&&f.set(n.subarray(o,o+y),h),s+=y>>>4,h+=y,o=0,c=0;return r>0&&(c+=Se(n,0,e,t,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,f}AES_GCM_Decrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new Ke("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(t.subarray(s+o,s+a));let u=o;for(;15&u;u++)t[s+u]=0;e.mac(Ie.MAC.GCM,Ie.HEAP_DATA+s,u),e.cipher(Ie.DEC.CTR,Ie.HEAP_DATA+s,u),o&&c.set(t.subarray(s,s+o));const l=void 0!==i?i.length:0,y=(n-1<<4)+a-r;t[0]=0,t[1]=0,t[2]=0,t[3]=l>>>29,t[4]=l>>>21,t[5]=l>>>13&255,t[6]=l>>>5&255,t[7]=l<<3&255,t[8]=t[9]=t[10]=0,t[11]=y>>>29,t[12]=y>>>21&255,t[13]=y>>>13&255,t[14]=y>>>5&255,t[15]=y<<3&255,e.mac(Ie.MAC.GCM,Ie.HEAP_DATA,16),e.get_iv(Ie.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(Ie.ENC.CTR,Ie.HEAP_DATA,16);let f=0;for(let e=0;e<r;++e)f|=h[e]^t[e];if(f)throw new Pe("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(e){const t=this.AES_GCM_Decrypt_process(e),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}AES_GCM_encrypt(e){const t=this.AES_GCM_Encrypt_process(e),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}_gcm_mac_process(e){let{asm:t,heap:r}=this.aes.acquire_asm(),i=0,n=e.length||0,s=0;for(;n>0;){for(s=Se(r,0,e,i,n),i+=s,n-=s;15&s;)r[s++]=0;t.mac(Ie.MAC.GCM,Ie.HEAP_DATA,s)}}}const wt=F.getWebCrypto(),mt=F.getNodeCrypto(),bt=F.getNodeBuffer(),Et=16,kt="AES-GCM";async function vt(e,t){if(e!==L.symmetric.aes128&&e!==L.symmetric.aes192&&e!==L.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(F.getNodeCrypto())return{encrypt:async function(e,r,i=new Uint8Array){const n=new mt.createCipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i);const s=bt.concat([n.update(e),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,i=new Uint8Array){const n=new mt.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i),n.setAuthTag(e.slice(e.length-Et,e.length));const s=bt.concat([n.update(e.slice(0,e.length-Et)),n.final()]);return new Uint8Array(s)}};if(F.getWebCrypto())try{const e=await wt.importKey("raw",t,{name:kt},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return At.encrypt(i,t,n,s);const a=await wt.encrypt({name:kt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===Et)return At.decrypt(i,t,n,s);try{const t=await wt.decrypt({name:kt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,i){return At.encrypt(e,t,r,i)},decrypt:async function(e,r,i){return At.decrypt(e,t,r,i)}}}vt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},vt.blockLength=16,vt.ivLength=12,vt.tagLength=Et;var It={cfb:He,gcm:vt,experimentalGCM:vt,eax:ot,ocb:pt};const Bt=BigInt(0),St=BigInt(1);function Ct(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function Kt(e,t){const r=e%t;return r<Bt?r+t:r}function Dt(e,t,r){if(r===Bt)throw Error("Modulo cannot be zero");if(r===St)return BigInt(0);if(t<Bt)throw Error("Unsopported negative exponent");let i=t,n=e;n%=r;let s=BigInt(1);for(;i>Bt;){const e=i&St;i>>=St;s=e?s*n%r:s,n=n*n%r}return s}function Pt(e){return e>=Bt?e:-e}function Ut(e,t){const{gcd:r,x:i}=function(e,t){let r=BigInt(0),i=BigInt(1),n=BigInt(1),s=BigInt(0),a=Pt(e),o=Pt(t);const c=e<Bt,h=t<Bt;for(;o!==Bt;){const e=a/o;let t=r;r=n-e*r,n=t,t=i,i=s-e*i,s=t,t=o,o=a%o,a=t}return{x:c?-n:n,y:h?-s:s,gcd:a}}(e,t);if(r!==St)throw Error("Inverse does not exist");return Kt(i+t,t)}function xt(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function Qt(e,t){return(e>>BigInt(t)&St)===Bt?0:1}function Rt(e){const t=e<Bt?BigInt(-1):Bt;let r=1,i=e;for(;(i>>=St)!==t;)r++;return r}function Mt(e){const t=e<Bt?BigInt(-1):Bt,r=BigInt(8);let i=1,n=e;for(;(n>>=r)!==t;)i++;return i}function Tt(e,t="be",r){let i=e.toString(16);i.length%2==1&&(i="0"+i);const n=i.length/2,s=new Uint8Array(r||n),a=r?r-n:0;let o=0;for(;o<n;)s[o+a]=parseInt(i.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const Lt=F.getNodeCrypto();function _t(e){const t=new Uint8Array(e);if(Lt){const e=Lt.randomBytes(t.length);t.set(e)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(t)}return t}function Nt(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return Kt(Ct(_t(Mt(r)+8)),r)+e}var Ft=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Nt,getRandomBytes:_t});const Ht=BigInt(1);function Ot(e,t,r){const i=BigInt(30),n=Ht<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=Nt(n,n<<Ht),o=xt(Kt(a,i));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,Rt(a)>e&&(a=Kt(a,n<<Ht),a+=n,o=xt(Kt(a,i)))}while(!zt(a,t,r));return a}function zt(e,t,r){return(!t||function(e,t){let r=e,i=t;for(;i!==Bt;){const e=i;i=r%i,r=e}return r}(e-Ht,t)===Ht)&&(!!function(e){const t=BigInt(0);return Gt.every((r=>Kt(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return Dt(t,e-Ht,e)===Ht}(e)&&!!function(e,t,r){const i=Rt(e);t||(t=Math.max(1,i/48|0));const n=e-Ht;let s=0;for(;!Qt(n,s);)s++;const a=e>>BigInt(s);for(;t>0;t--){let t,r=Dt(Nt(BigInt(2),n),a,e);if(r!==Ht&&r!==n){for(t=1;t<s;t++){if(r=Kt(r*r,e),r===Ht)return!1;if(r===n)break}if(t===s)return!1}}return!0}(e,r)))}const Gt=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const jt=[];function qt(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const i=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const i=_t(e-r);for(let e=0;e<i.length;e++)0!==i[e]&&(t[r++]=i[e])}return t}(t-r-3),n=new Uint8Array(t);return n[1]=2,n.set(i,2),n.set(e,t-r),n}function Vt(e,t){let r=2,i=1;for(let t=r;t<e.length;t++)i&=0!==e[t],r+=i;const n=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&n>=8&!i;if(t)return F.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Yt(e,t,r){let i;if(t.length!==ve.getHashByteLength(e))throw Error("Invalid hash length");const n=new Uint8Array(jt[e].length);for(i=0;i<jt[e].length;i++)n[i]=jt[e][i];const s=n.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(t,r-t.length),o}jt[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],jt[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],jt[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],jt[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],jt[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],jt[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],jt[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var Jt=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Vt,emeEncode:qt,emsaEncode:Yt});const Wt=F.getWebCrypto(),Zt=F.getNodeCrypto(),$t=BigInt(1);async function Xt(e,t,r,i,n,s){const a=Ct(i),o=Ct(n),c=Ct(r);let h=Kt(c,o-$t),u=Kt(c,a-$t);return u=Tt(u),h=Tt(h),{kty:"RSA",n:V(e),e:V(t),d:V(r),p:V(n),q:V(i),dp:V(h),dq:V(u),qi:V(s),ext:!0}}function er(e,t){return{kty:"RSA",n:V(e),e:V(t),ext:!0}}function tr(e,t){return{n:q(e.n),e:Tt(t),d:q(e.d),p:q(e.q),q:q(e.p),u:q(e.qi)}}var rr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a,o){if(F.getNodeCrypto()&&!o)try{return await async function(e,t,r,i,n,s,a){const o=await Xt(t,r,i,n,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Zt.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Zt.privateDecrypt(c,e))}catch(e){throw Error("Decryption error")}}(e,t,r,i,n,s,a)}catch(e){F.printDebugError(e)}return async function(e,t,r,i,n,s,a,o){if(e=Ct(e),t=Ct(t),r=Ct(r),i=Ct(i),n=Ct(n),s=Ct(s),a=Ct(a),e>=t)throw Error("Data too large.");const c=Kt(i,s-$t),h=Kt(i,n-$t),u=Nt(BigInt(2),t),l=Dt(Ut(u,t),r,t);e=Kt(e*l,t);const y=Dt(e,h,n),f=Dt(e,c,s),g=Kt(a*(f-y),s);let p=g*n+y;return p=Kt(p*u,t),Vt(Tt(p,"be",Mt(t)),o)}(e,t,r,i,n,s,a,o)},encrypt:async function(e,t,r){return F.getNodeCrypto()?async function(e,t,r){const i=er(t,r),n={key:i,format:"jwk",type:"pkcs1",padding:Zt.constants.RSA_PKCS1_PADDING};return new Uint8Array(Zt.publicEncrypt(n,e))}(e,t,r):async function(e,t,r){if(t=Ct(t),e=Ct(qt(e,Mt(t))),r=Ct(r),e>=t)throw Error("Message size cannot exceed modulus size");return Tt(Dt(e,r,t),"be",Mt(t))}(e,t,r)},generate:async function(e,t){if(t=BigInt(t),F.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:Tt(t),hash:{name:"SHA-1"}},i=await Wt.generateKey(r,!0,["sign","verify"]);return tr(await Wt.exportKey("jwk",i.privateKey),t)}if(F.getNodeCrypto()){const r={modulusLength:e,publicExponent:xt(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},i=await new Promise(((e,t)=>{Zt.generateKeyPair("rsa",r,((r,i,n)=>{r?t(r):e(n)}))}));return tr(i,t)}let r,i,n;do{i=Ot(e-(e>>1),t,40),r=Ot(e>>1,t,40),n=r*i}while(Rt(n)!==e);const s=(r-$t)*(i-$t);return i<r&&([r,i]=[i,r]),{n:Tt(n),e:Tt(t),d:Tt(Ut(t,s)),p:Tt(r),q:Tt(i),u:Tt(Ut(r,i))}},sign:async function(e,t,r,i,n,s,a,o,c){if(t&&!F.isStream(t))if(F.getWebCrypto())try{return await async function(e,t,r,i,n,s,a,o){const c=await Xt(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},u=await Wt.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await Wt.sign("RSASSA-PKCS1-v1_5",u,t))}(L.read(L.webHash,e),t,r,i,n,s,a,o)}catch(e){F.printDebugError(e)}else if(F.getNodeCrypto())return async function(e,t,r,i,n,s,a,o){const c=Zt.createSign(L.read(L.hash,e));c.write(t),c.end();const h=await Xt(r,i,n,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(e,t,r,i,n,s,a,o);return async function(e,t,r,i){t=Ct(t);const n=Ct(Yt(e,i,Mt(t)));if(r=Ct(r),n>=t)throw Error("Message size cannot exceed modulus size");return Tt(Dt(n,r,t),"be",Mt(t))}(e,r,n,c)},validateParams:async function(e,t,r,i,n,s){if(e=Ct(e),(i=Ct(i))*(n=Ct(n))!==e)return!1;const a=BigInt(2);if(Kt(i*(s=Ct(s)),n)!==BigInt(1))return!1;t=Ct(t),r=Ct(r);const o=Nt(a,a<<BigInt(Math.floor(Rt(e)/3))),c=o*r*t;return!(Kt(c,i-$t)!==o||Kt(c,n-$t)!==o)},verify:async function(e,t,r,i,n,s){if(t&&!F.isStream(t))if(F.getWebCrypto())try{return await async function(e,t,r,i,n){const s=er(i,n),a=await Wt.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return Wt.verify("RSASSA-PKCS1-v1_5",a,r,t)}(L.read(L.webHash,e),t,r,i,n)}catch(e){F.printDebugError(e)}else if(F.getNodeCrypto())return async function(e,t,r,i,n){const s=er(i,n),a={key:s,format:"jwk",type:"pkcs1"},o=Zt.createVerify(L.read(L.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch(e){return!1}}(e,t,r,i,n);return async function(e,t,r,i,n){if(r=Ct(r),t=Ct(t),i=Ct(i),t>=r)throw Error("Signature size cannot exceed modulus size");const s=Tt(Dt(t,i,r),"be",Mt(r)),a=Yt(e,n,Mt(r));return F.equalsUint8Array(s,a)}(e,r,i,n,s)}});const ir=BigInt(1);var nr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){return e=Ct(e),t=Ct(t),r=Ct(r),Vt(Tt(Kt(Ut(Dt(e,i=Ct(i),r),r)*t,r),"be",Mt(r)),n)},encrypt:async function(e,t,r,i){t=Ct(t),r=Ct(r),i=Ct(i);const n=Ct(qt(e,Mt(t))),s=Nt(ir,t-ir);return{c1:Tt(Dt(r,s,t)),c2:Tt(Kt(Dt(i,s,t)*n,t))}},validateParams:async function(e,t,r,i){if(e=Ct(e),t=Ct(t),r=Ct(r),t<=ir||t>=e)return!1;const n=BigInt(Rt(e));if(n<BigInt(1023))return!1;if(Dt(t,e-ir,e)!==ir)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=Kt(s*t,e),s===ir)return!1;a++}i=Ct(i);const h=Nt(o<<n-ir,o<<n);return r===Dt(t,(e-ir)*h+i,e)}});const sr=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0,ar={};var or=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},cr=function(){throw Error("no PRNG")},hr=new Uint8Array(32);hr[0]=9;var ur=or(),lr=or([1]),yr=or([56129,1]),fr=or([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),gr=or([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),pr=or([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),dr=or([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),Ar=or([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function wr(e,t,r,i){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=i>>24&255,e[t+5]=i>>16&255,e[t+6]=i>>8&255,e[t+7]=255&i}function mr(e,t,r,i){return function(e,t,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=e[t+s]^r[i+s];return(1&a-1>>>8)-1}(e,t,r,i,32)}function br(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function Er(e){var t,r,i=1;for(t=0;t<16;t++)r=e[t]+i+65535,i=Math.floor(r/65536),e[t]=r-65536*i;e[0]+=i-1+37*(i-1)}function kr(e,t,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(e[s]^t[s]),e[s]^=i,t[s]^=i}function vr(e,t){var r,i,n,s=or(),a=or();for(r=0;r<16;r++)a[r]=t[r];for(Er(a),Er(a),Er(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,kr(a,s,1-n)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function Ir(e,t){var r=new Uint8Array(32),i=new Uint8Array(32);return vr(r,e),vr(i,t),mr(r,0,i,0)}function Br(e){var t=new Uint8Array(32);return vr(t,e),1&t[0]}function Sr(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function Cr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]+r[i]}function Kr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]-r[i]}function Dr(e,t,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0,I=0,B=0,S=0,C=0,K=0,D=0,P=0,U=0,x=0,Q=0,R=0,M=0,T=r[0],L=r[1],_=r[2],N=r[3],F=r[4],H=r[5],O=r[6],z=r[7],G=r[8],j=r[9],q=r[10],V=r[11],Y=r[12],J=r[13],W=r[14],Z=r[15];s+=(i=t[0])*T,a+=i*L,o+=i*_,c+=i*N,h+=i*F,u+=i*H,l+=i*O,y+=i*z,f+=i*G,g+=i*j,p+=i*q,d+=i*V,A+=i*Y,w+=i*J,m+=i*W,b+=i*Z,a+=(i=t[1])*T,o+=i*L,c+=i*_,h+=i*N,u+=i*F,l+=i*H,y+=i*O,f+=i*z,g+=i*G,p+=i*j,d+=i*q,A+=i*V,w+=i*Y,m+=i*J,b+=i*W,E+=i*Z,o+=(i=t[2])*T,c+=i*L,h+=i*_,u+=i*N,l+=i*F,y+=i*H,f+=i*O,g+=i*z,p+=i*G,d+=i*j,A+=i*q,w+=i*V,m+=i*Y,b+=i*J,E+=i*W,k+=i*Z,c+=(i=t[3])*T,h+=i*L,u+=i*_,l+=i*N,y+=i*F,f+=i*H,g+=i*O,p+=i*z,d+=i*G,A+=i*j,w+=i*q,m+=i*V,b+=i*Y,E+=i*J,k+=i*W,v+=i*Z,h+=(i=t[4])*T,u+=i*L,l+=i*_,y+=i*N,f+=i*F,g+=i*H,p+=i*O,d+=i*z,A+=i*G,w+=i*j,m+=i*q,b+=i*V,E+=i*Y,k+=i*J,v+=i*W,I+=i*Z,u+=(i=t[5])*T,l+=i*L,y+=i*_,f+=i*N,g+=i*F,p+=i*H,d+=i*O,A+=i*z,w+=i*G,m+=i*j,b+=i*q,E+=i*V,k+=i*Y,v+=i*J,I+=i*W,B+=i*Z,l+=(i=t[6])*T,y+=i*L,f+=i*_,g+=i*N,p+=i*F,d+=i*H,A+=i*O,w+=i*z,m+=i*G,b+=i*j,E+=i*q,k+=i*V,v+=i*Y,I+=i*J,B+=i*W,S+=i*Z,y+=(i=t[7])*T,f+=i*L,g+=i*_,p+=i*N,d+=i*F,A+=i*H,w+=i*O,m+=i*z,b+=i*G,E+=i*j,k+=i*q,v+=i*V,I+=i*Y,B+=i*J,S+=i*W,C+=i*Z,f+=(i=t[8])*T,g+=i*L,p+=i*_,d+=i*N,A+=i*F,w+=i*H,m+=i*O,b+=i*z,E+=i*G,k+=i*j,v+=i*q,I+=i*V,B+=i*Y,S+=i*J,C+=i*W,K+=i*Z,g+=(i=t[9])*T,p+=i*L,d+=i*_,A+=i*N,w+=i*F,m+=i*H,b+=i*O,E+=i*z,k+=i*G,v+=i*j,I+=i*q,B+=i*V,S+=i*Y,C+=i*J,K+=i*W,D+=i*Z,p+=(i=t[10])*T,d+=i*L,A+=i*_,w+=i*N,m+=i*F,b+=i*H,E+=i*O,k+=i*z,v+=i*G,I+=i*j,B+=i*q,S+=i*V,C+=i*Y,K+=i*J,D+=i*W,P+=i*Z,d+=(i=t[11])*T,A+=i*L,w+=i*_,m+=i*N,b+=i*F,E+=i*H,k+=i*O,v+=i*z,I+=i*G,B+=i*j,S+=i*q,C+=i*V,K+=i*Y,D+=i*J,P+=i*W,U+=i*Z,A+=(i=t[12])*T,w+=i*L,m+=i*_,b+=i*N,E+=i*F,k+=i*H,v+=i*O,I+=i*z,B+=i*G,S+=i*j,C+=i*q,K+=i*V,D+=i*Y,P+=i*J,U+=i*W,x+=i*Z,w+=(i=t[13])*T,m+=i*L,b+=i*_,E+=i*N,k+=i*F,v+=i*H,I+=i*O,B+=i*z,S+=i*G,C+=i*j,K+=i*q,D+=i*V,P+=i*Y,U+=i*J,x+=i*W,Q+=i*Z,m+=(i=t[14])*T,b+=i*L,E+=i*_,k+=i*N,v+=i*F,I+=i*H,B+=i*O,S+=i*z,C+=i*G,K+=i*j,D+=i*q,P+=i*V,U+=i*Y,x+=i*J,Q+=i*W,R+=i*Z,b+=(i=t[15])*T,a+=38*(k+=i*_),o+=38*(v+=i*N),c+=38*(I+=i*F),h+=38*(B+=i*H),u+=38*(S+=i*O),l+=38*(C+=i*z),y+=38*(K+=i*G),f+=38*(D+=i*j),g+=38*(P+=i*q),p+=38*(U+=i*V),d+=38*(x+=i*Y),A+=38*(Q+=i*J),w+=38*(R+=i*W),m+=38*(M+=i*Z),s=(i=(s+=38*(E+=i*L))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=h,e[5]=u,e[6]=l,e[7]=y,e[8]=f,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function Pr(e,t){Dr(e,t,t)}function Ur(e,t){var r,i=or();for(r=0;r<16;r++)i[r]=t[r];for(r=253;r>=0;r--)Pr(i,i),2!==r&&4!==r&&Dr(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}function xr(e,t,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=or(),c=or(),h=or(),u=or(),l=or(),y=or();for(n=0;n<31;n++)s[n]=t[n];for(s[31]=127&t[31]|64,s[0]&=248,Sr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)kr(o,c,i=s[n>>>3]>>>(7&n)&1),kr(h,u,i),Cr(l,o,h),Kr(o,o,h),Cr(h,c,u),Kr(c,c,u),Pr(u,l),Pr(y,o),Dr(o,h,o),Dr(h,c,l),Cr(l,o,h),Kr(o,o,h),Pr(c,o),Kr(h,u,y),Dr(o,h,yr),Cr(o,o,u),Dr(h,h,o),Dr(o,u,y),Dr(u,c,a),Pr(c,l),kr(o,c,i),kr(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var f=a.subarray(32),g=a.subarray(16);return Ur(f,f),Dr(g,g,f),vr(e,g),0}function Qr(e,t){return xr(e,t,hr)}var Rr=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function Mr(e,t,r,i){for(var n,s,a,o,c,h,u,l,y,f,g,p,d,A,w,m,b,E,k,v,I,B,S,C,K,D,P=new Int32Array(16),U=new Int32Array(16),x=e[0],Q=e[1],R=e[2],M=e[3],T=e[4],L=e[5],_=e[6],N=e[7],F=t[0],H=t[1],O=t[2],z=t[3],G=t[4],j=t[5],q=t[6],V=t[7],Y=0;i>=128;){for(k=0;k<16;k++)v=8*k+Y,P[k]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],U[k]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(k=0;k<80;k++)if(n=x,s=Q,a=R,o=M,c=T,h=L,u=_,N,y=F,f=H,g=O,p=z,d=G,A=j,w=q,V,S=65535&(B=V),C=B>>>16,K=65535&(I=N),D=I>>>16,S+=65535&(B=(G>>>14|T<<18)^(G>>>18|T<<14)^(T>>>9|G<<23)),C+=B>>>16,K+=65535&(I=(T>>>14|G<<18)^(T>>>18|G<<14)^(G>>>9|T<<23)),D+=I>>>16,S+=65535&(B=G&j^~G&q),C+=B>>>16,K+=65535&(I=T&L^~T&_),D+=I>>>16,I=Rr[2*k],S+=65535&(B=Rr[2*k+1]),C+=B>>>16,K+=65535&I,D+=I>>>16,I=P[k%16],C+=(B=U[k%16])>>>16,K+=65535&I,D+=I>>>16,K+=(C+=(S+=65535&B)>>>16)>>>16,S=65535&(B=E=65535&S|C<<16),C=B>>>16,K=65535&(I=b=65535&K|(D+=K>>>16)<<16),D=I>>>16,S+=65535&(B=(F>>>28|x<<4)^(x>>>2|F<<30)^(x>>>7|F<<25)),C+=B>>>16,K+=65535&(I=(x>>>28|F<<4)^(F>>>2|x<<30)^(F>>>7|x<<25)),D+=I>>>16,C+=(B=F&H^F&O^H&O)>>>16,K+=65535&(I=x&Q^x&R^Q&R),D+=I>>>16,l=65535&(K+=(C+=(S+=65535&B)>>>16)>>>16)|(D+=K>>>16)<<16,m=65535&S|C<<16,S=65535&(B=p),C=B>>>16,K=65535&(I=o),D=I>>>16,C+=(B=E)>>>16,K+=65535&(I=b),D+=I>>>16,Q=n,R=s,M=a,T=o=65535&(K+=(C+=(S+=65535&B)>>>16)>>>16)|(D+=K>>>16)<<16,L=c,_=h,N=u,x=l,H=y,O=f,z=g,G=p=65535&S|C<<16,j=d,q=A,V=w,F=m,k%16==15)for(v=0;v<16;v++)I=P[v],S=65535&(B=U[v]),C=B>>>16,K=65535&I,D=I>>>16,I=P[(v+9)%16],S+=65535&(B=U[(v+9)%16]),C+=B>>>16,K+=65535&I,D+=I>>>16,b=P[(v+1)%16],S+=65535&(B=((E=U[(v+1)%16])>>>1|b<<31)^(E>>>8|b<<24)^(E>>>7|b<<25)),C+=B>>>16,K+=65535&(I=(b>>>1|E<<31)^(b>>>8|E<<24)^b>>>7),D+=I>>>16,b=P[(v+14)%16],C+=(B=((E=U[(v+14)%16])>>>19|b<<13)^(b>>>29|E<<3)^(E>>>6|b<<26))>>>16,K+=65535&(I=(b>>>19|E<<13)^(E>>>29|b<<3)^b>>>6),D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,P[v]=65535&K|D<<16,U[v]=65535&S|C<<16;S=65535&(B=F),C=B>>>16,K=65535&(I=x),D=I>>>16,I=e[0],C+=(B=t[0])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[0]=x=65535&K|D<<16,t[0]=F=65535&S|C<<16,S=65535&(B=H),C=B>>>16,K=65535&(I=Q),D=I>>>16,I=e[1],C+=(B=t[1])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[1]=Q=65535&K|D<<16,t[1]=H=65535&S|C<<16,S=65535&(B=O),C=B>>>16,K=65535&(I=R),D=I>>>16,I=e[2],C+=(B=t[2])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[2]=R=65535&K|D<<16,t[2]=O=65535&S|C<<16,S=65535&(B=z),C=B>>>16,K=65535&(I=M),D=I>>>16,I=e[3],C+=(B=t[3])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[3]=M=65535&K|D<<16,t[3]=z=65535&S|C<<16,S=65535&(B=G),C=B>>>16,K=65535&(I=T),D=I>>>16,I=e[4],C+=(B=t[4])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[4]=T=65535&K|D<<16,t[4]=G=65535&S|C<<16,S=65535&(B=j),C=B>>>16,K=65535&(I=L),D=I>>>16,I=e[5],C+=(B=t[5])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[5]=L=65535&K|D<<16,t[5]=j=65535&S|C<<16,S=65535&(B=q),C=B>>>16,K=65535&(I=_),D=I>>>16,I=e[6],C+=(B=t[6])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[6]=_=65535&K|D<<16,t[6]=q=65535&S|C<<16,S=65535&(B=V),C=B>>>16,K=65535&(I=N),D=I>>>16,I=e[7],C+=(B=t[7])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[7]=N=65535&K|D<<16,t[7]=V=65535&S|C<<16,Y+=128,i-=128}return i}function Tr(e,t,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,Mr(n,s,t,r),r%=128,i=0;i<r;i++)a[i]=t[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,wr(a,r-8,o/536870912|0,o<<3),Mr(n,s,a,r),i=0;i<8;i++)wr(e,8*i,n[i],s[i]);return 0}function Lr(e,t){var r=or(),i=or(),n=or(),s=or(),a=or(),o=or(),c=or(),h=or(),u=or();Kr(r,e[1],e[0]),Kr(u,t[1],t[0]),Dr(r,r,u),Cr(i,e[0],e[1]),Cr(u,t[0],t[1]),Dr(i,i,u),Dr(n,e[3],t[3]),Dr(n,n,gr),Dr(s,e[2],t[2]),Cr(s,s,s),Kr(a,i,r),Kr(o,s,n),Cr(c,s,n),Cr(h,i,r),Dr(e[0],a,o),Dr(e[1],h,c),Dr(e[2],c,o),Dr(e[3],a,h)}function _r(e,t,r){var i;for(i=0;i<4;i++)kr(e[i],t[i],r)}function Nr(e,t){var r=or(),i=or(),n=or();Ur(n,t[2]),Dr(r,t[0],n),Dr(i,t[1],n),vr(e,i),e[31]^=Br(r)<<7}function Fr(e,t,r){var i,n;for(br(e[0],ur),br(e[1],lr),br(e[2],lr),br(e[3],ur),n=255;n>=0;--n)_r(e,t,i=r[n/8|0]>>(7&n)&1),Lr(t,e),Lr(e,e),_r(e,t,i)}function Hr(e,t){var r=[or(),or(),or(),or()];br(r[0],pr),br(r[1],dr),br(r[2],lr),Dr(r[3],pr,dr),Fr(e,r,t)}function Or(e,t,r){var i,n=new Uint8Array(64),s=[or(),or(),or(),or()];for(r||cr(t,32),Tr(n,t,32),n[0]&=248,n[31]&=127,n[31]|=64,Hr(s,n),Nr(e,s),i=0;i<32;i++)t[i+32]=e[i];return 0}var zr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function Gr(e,t){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)t[n]+=r-16*t[i]*zr[n-(i-32)],r=Math.floor((t[n]+128)/256),t[n]-=256*r;t[n]+=r,t[i]=0}for(r=0,n=0;n<32;n++)t[n]+=r-(t[31]>>4)*zr[n],r=t[n]>>8,t[n]&=255;for(n=0;n<32;n++)t[n]-=r*zr[n];for(i=0;i<32;i++)t[i+1]+=t[i]>>8,e[i]=255&t[i]}function jr(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;Gr(e,r)}function qr(e,t){var r=or(),i=or(),n=or(),s=or(),a=or(),o=or(),c=or();return br(e[2],lr),Sr(e[1],t),Pr(n,e[1]),Dr(s,n,fr),Kr(n,n,e[2]),Cr(s,e[2],s),Pr(a,s),Pr(o,a),Dr(c,o,a),Dr(r,c,n),Dr(r,r,s),function(e,t){var r,i=or();for(r=0;r<16;r++)i[r]=t[r];for(r=250;r>=0;r--)Pr(i,i),1!==r&&Dr(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}(r,r),Dr(r,r,n),Dr(r,r,s),Dr(r,r,s),Dr(e[0],r,s),Pr(i,e[0]),Dr(i,i,s),Ir(i,n)&&Dr(e[0],e[0],Ar),Pr(i,e[0]),Dr(i,i,s),Ir(i,n)?-1:(Br(e[0])===t[31]>>7&&Kr(e[0],ur,e[0]),Dr(e[3],e[0],e[1]),0)}var Vr=64;function Yr(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}ar.scalarMult=function(e,t){if(Yr(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return xr(r,e,t),r},ar.box={},ar.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){cr(t,32),Qr(e,t)}(e,t),{publicKey:e,secretKey:t}},ar.box.keyPair.fromSecretKey=function(e){if(Yr(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return Qr(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},ar.sign=function(e,t){if(Yr(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(Vr+e.length);return function(e,t,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[or(),or(),or(),or()];Tr(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)e[64+n]=t[n];for(n=0;n<32;n++)e[32+n]=a[32+n];for(Tr(c,e.subarray(32),r+32),jr(c),Hr(u,c),Nr(e,u),n=32;n<64;n++)e[n]=i[n];for(Tr(o,e,r+64),jr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];Gr(e.subarray(32),h)}(r,e,e.length,t),r},ar.sign.detached=function(e,t){for(var r=ar.sign(e,t),i=new Uint8Array(Vr),n=0;n<i.length;n++)i[n]=r[n];return i},ar.sign.detached.verify=function(e,t,r){if(Yr(e,t,r),t.length!==Vr)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array(Vr+e.length),s=new Uint8Array(Vr+e.length);for(i=0;i<Vr;i++)n[i]=t[i];for(i=0;i<e.length;i++)n[i+Vr]=e[i];return function(e,t,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[or(),or(),or(),or()],c=[or(),or(),or(),or()];if(r<64)return-1;if(qr(c,i))return-1;for(n=0;n<r;n++)e[n]=t[n];for(n=0;n<32;n++)e[n+32]=i[n];if(Tr(a,e,r),jr(a),Fr(o,c,a),Hr(c,t.subarray(32)),Lr(o,c),Nr(s,o),r-=64,mr(t,0,s,0)){for(n=0;n<r;n++)e[n]=0;return-1}for(n=0;n<r;n++)e[n]=t[n+64];return r}(s,n,n.length,r)>=0},ar.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return Or(e,t),{publicKey:e,secretKey:t}},ar.sign.keyPair.fromSecretKey=function(e){if(Yr(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},ar.sign.keyPair.fromSeed=function(e){if(Yr(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=e[i];return Or(t,r,!0),{publicKey:t,secretKey:r}},ar.setPRNG=function(e){cr=e},function(){if(sr&&sr.getRandomValues){ar.setPRNG((function(e,t){var r,i=new Uint8Array(t);for(r=0;r<t;r+=65536)sr.getRandomValues(i.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=i[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(i)}))}}();const Jr={"2a8648ce3d030107":L.curve.nistP256,"2b81040022":L.curve.nistP384,"2b81040023":L.curve.nistP521,"2b8104000a":L.curve.secp256k1,"2b06010401da470f01":L.curve.ed25519Legacy,"2b060104019755010501":L.curve.curve25519Legacy,"2b2403030208010107":L.curve.brainpoolP256r1,"2b240303020801010b":L.curve.brainpoolP384r1,"2b240303020801010d":L.curve.brainpoolP512r1};class Wr{constructor(e){if(e instanceof Wr)this.oid=e.oid;else if(F.isArray(e)||F.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return F.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return F.uint8ArrayToHex(this.oid)}getName(){const e=Jr[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function Zr(e){let t,r=0;const i=e[0];return i<192?([r]=e,t=1):i<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===i&&(r=F.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function $r(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):F.concatUint8Array([new Uint8Array([255]),F.writeNumber(e,4)])}function Xr(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function ei(e){return new Uint8Array([192|e])}function ti(e,t){return F.concatUint8Array([ei(e),$r(t)])}function ri(e){return[L.packet.literalData,L.packet.compressedData,L.packet.symmetricallyEncryptedData,L.packet.symEncryptedIntegrityProtectedData,L.packet.aeadEncryptedData].includes(e)}async function ii(e,t){const r=R(e);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,u=-1;u=0,64&a&&(u=1),u?h=63&a:(h=(63&a)>>2,c=3&a);const l=ri(h);let y,f=null;if(l){if("array"===F.isStream(e)){const e=new ArrayStream;i=M(e),f=e}else{const e=new TransformStream;i=M(e.writable),f=e.readable}n=t({tag:h,packet:f})}else f=[];do{if(u){const e=await r.readByte();if(y=!1,e<192)o=e;else if(e>=192&&e<224)o=(e-192<<8)+await r.readByte()+192;else if(e>223&&e<255){if(o=1<<(31&e),y=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let e=0;for(;;){i&&await i.ready;const{done:t,value:n}=await r.read();if(t){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-e);if(i?await i.write(s):f.push(s),e+=n.length,e>=o){r.unshift(n.subarray(o-e+n.length));break}}}}while(y);const g=await r.peekBytes(l?1/0:2);return i?(await i.ready,await i.close()):(f=F.concatUint8Array(f),await t({tag:h,packet:f})),!g||!g.length}catch(e){if(i)return await i.abort(e),!0;throw e}finally{i&&await n,r.releaseLock()}}class ni extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ni),this.name="UnsupportedError"}}class si extends ni{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ni),this.name="UnknownPacketError"}}class ai{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}const oi=F.getWebCrypto(),ci=F.getNodeCrypto(),hi={[L.curve.nistP256]:"P-256",[L.curve.nistP384]:"P-384",[L.curve.nistP521]:"P-521"},ui=ci?ci.getCurves():[],li=ci?{[L.curve.secp256k1]:ui.includes("secp256k1")?"secp256k1":void 0,[L.curve.nistP256]:ui.includes("prime256v1")?"prime256v1":void 0,[L.curve.nistP384]:ui.includes("secp384r1")?"secp384r1":void 0,[L.curve.nistP521]:ui.includes("secp521r1")?"secp521r1":void 0,[L.curve.ed25519Legacy]:ui.includes("ED25519")?"ED25519":void 0,[L.curve.curve25519Legacy]:ui.includes("X25519")?"X25519":void 0,[L.curve.brainpoolP256r1]:ui.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[L.curve.brainpoolP384r1]:ui.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[L.curve.brainpoolP512r1]:ui.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},yi={[L.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:li[L.curve.nistP256],web:hi[L.curve.nistP256],payloadSize:32,sharedSize:256},[L.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:L.publicKey.ecdsa,hash:L.hash.sha384,cipher:L.symmetric.aes192,node:li[L.curve.nistP384],web:hi[L.curve.nistP384],payloadSize:48,sharedSize:384},[L.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:L.publicKey.ecdsa,hash:L.hash.sha512,cipher:L.symmetric.aes256,node:li[L.curve.nistP521],web:hi[L.curve.nistP521],payloadSize:66,sharedSize:528},[L.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:li[L.curve.secp256k1],payloadSize:32},[L.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:L.publicKey.eddsaLegacy,hash:L.hash.sha512,node:!1,payloadSize:32},[L.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:L.publicKey.ecdh,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:!1,payloadSize:32},[L.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:li[L.curve.brainpoolP256r1],payloadSize:32},[L.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:L.publicKey.ecdsa,hash:L.hash.sha384,cipher:L.symmetric.aes192,node:li[L.curve.brainpoolP384r1],payloadSize:48},[L.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:L.publicKey.ecdsa,hash:L.hash.sha512,cipher:L.symmetric.aes256,node:li[L.curve.brainpoolP512r1],payloadSize:64}};class fi{constructor(e){try{this.name=e instanceof Wr?e.getName():L.write(L.curve,e)}catch(e){throw new ni("Unknown curve")}const t=yi[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.web&&F.getWebCrypto()?this.type="web":this.node&&F.getNodeCrypto()?this.type="node":this.name===L.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===L.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e){const t=await oi.generateKey({name:"ECDSA",namedCurve:hi[e]},!0,["sign","verify"]),r=await oi.exportKey("jwk",t.privateKey),i=await oi.exportKey("jwk",t.publicKey);return{publicKey:di(i),privateKey:q(r.d)}}(this.name)}catch(e){return F.printDebugError("Browser did not support generating ec key "+e.message),pi(this.name)}case"node":return async function(e){const t=ci.createECDH(li[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const e=_t(32);e[0]=127&e[0]|64,e[31]&=248;const t=e.slice().reverse(),{publicKey:r}=ar.box.keyPair.fromSecretKey(t);return{publicKey:F.concatUint8Array([new Uint8Array([64]),r]),privateKey:e}}case"ed25519Legacy":{const e=_t(32),t=ar.sign.keyPair.fromSeed(e);return{publicKey:F.concatUint8Array([new Uint8Array([64]),t.publicKey]),privateKey:e}}default:return pi(this.name)}}}async function gi(e,t,r,i){const n={[L.curve.nistP256]:!0,[L.curve.nistP384]:!0,[L.curve.nistP521]:!0,[L.curve.secp256k1]:!0,[L.curve.curve25519Legacy]:e===L.publicKey.ecdh,[L.curve.brainpoolP256r1]:!0,[L.curve.brainpoolP384r1]:!0,[L.curve.brainpoolP512r1]:!0},s=t.getName();if(!n[s])return!1;if(s===L.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:e}=ar.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const t=new Uint8Array([64,...e]);return!!F.equalsUint8Array(t,r)}const a=(await F.getNobleCurve(L.publicKey.ecdsa,s)).getPublicKey(i,!1);return!!F.equalsUint8Array(a,r)}async function pi(e){const t=await F.getNobleCurve(L.publicKey.ecdsa,e),r=t.utils.randomPrivateKey();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function di(e){const t=q(e.x),r=q(e.y),i=new Uint8Array(t.length+r.length+1);return i[0]=4,i.set(t,1),i.set(r,t.length+1),i}function Ai(e,t,r){const i=e,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:t,x:V(n),y:V(s),ext:!0}}function wi(e,t,r,i){const n=Ai(e,t,r);return n.d=V(i),n}const mi=F.getWebCrypto(),bi=F.getNodeCrypto();async function Ei(e,t,r,i,n,s){const a=new fi(e);if(r&&!F.isStream(r)){const e={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(e,t,r,i){const n=e.payloadSize,s=wi(e.payloadSize,hi[e.name],i.publicKey,i.privateKey),a=await mi.importKey("jwk",s,{name:"ECDSA",namedCurve:hi[e.name],hash:{name:L.read(L.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await mi.sign({name:"ECDSA",namedCurve:hi[e.name],hash:{name:L.read(L.webHash,t)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;F.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,i){const n=F.nodeRequire("eckey-utils"),s=F.getNodeBuffer(),{privateKey:a}=n.generateDer({curveName:li[e.name],privateKey:s.from(i)}),o=bi.createSign(L.read(L.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=e.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,t,r,n)}}const o=(await F.getNobleCurve(L.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:Tt(o.r,"be",a.payloadSize),s:Tt(o.s,"be",a.payloadSize)}}async function ki(e,t,r,i,n,s){const a=new fi(e),o=async()=>0===s[0]&&vi(a,r,s.subarray(1),n);if(i&&!F.isStream(i))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:i},n,s){const a=Ai(e.payloadSize,hi[e.name],s),o=await mi.importKey("jwk",a,{name:"ECDSA",namedCurve:hi[e.name],hash:{name:L.read(L.webHash,e.hash)}},!1,["verify"]),c=F.concatUint8Array([r,i]).buffer;return mi.verify({name:"ECDSA",namedCurve:hi[e.name],hash:{name:L.read(L.webHash,t)}},o,c,n)}(a,t,r,i,n);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;F.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:i},n,s){const a=F.nodeRequire("eckey-utils"),o=F.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:li[e.name],publicKey:o.from(s)}),h=bi.createVerify(L.read(L.hash,t));h.write(n),h.end();const u=F.concatUint8Array([r,i]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(e){return!1}}(a,t,r,i,n);return e||o()}}return await vi(a,r,s,n)||o()}async function vi(e,t,r,i){return(await F.getNobleCurve(L.publicKey.ecdsa,e.name)).verify(F.concatUint8Array([t.r,t.s]),r,i,{lowS:!1})}var Ii=/*#__PURE__*/Object.freeze({__proto__:null,sign:Ei,validateParams:async function(e,t,r){const i=new fi(e);if(i.keyType!==L.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=_t(8),n=L.hash.sha256,s=await ve.digest(n,i);try{const a=await Ei(e,n,i,t,r,s);return await ki(e,n,a,i,t,s)}catch(e){return!1}}default:return gi(L.publicKey.ecdsa,e,t,r)}},verify:ki});var Bi=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){if(ve.getHashByteLength(t)<ve.getHashByteLength(L.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=F.concatUint8Array([n,i.subarray(1)]),o=ar.sign.detached(s,a);return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(e,t,r){if(e.getName()!==L.curve.ed25519Legacy)return!1;const{publicKey:i}=ar.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return F.equalsUint8Array(t,n)},verify:async function(e,t,{r,s:i},n,s,a){if(ve.getHashByteLength(t)<ve.getHashByteLength(L.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=F.concatUint8Array([r,i]);return ar.sign.detached.verify(a,o,s.subarray(1))}});function Si(e){switch(e){case L.publicKey.ed25519:return 32;case L.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function Ci(e){switch(e){case L.publicKey.ed25519:return L.hash.sha256;case L.publicKey.ed448:return L.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var Ki=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){switch(e){case L.publicKey.ed25519:{const t=_t(Si(e)),{publicKey:r}=ar.sign.keyPair.fromSeed(t);return{A:r,seed:t}}case L.publicKey.ed448:{const e=await F.getNobleCurve(L.publicKey.ed448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),seed:t}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:Si,getPreferredHashAlgo:Ci,sign:async function(e,t,r,i,n,s){if(ve.getHashByteLength(t)<ve.getHashByteLength(Ci(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case L.publicKey.ed25519:{const e=F.concatUint8Array([n,i]);return{RS:ar.sign.detached(s,e)}}case L.publicKey.ed448:return{RS:(await F.getNobleCurve(L.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(e,t,r){switch(e){case L.publicKey.ed25519:{const{publicKey:e}=ar.sign.keyPair.fromSeed(r);return F.equalsUint8Array(t,e)}case L.publicKey.ed448:{const e=(await F.getNobleCurve(L.publicKey.ed448)).getPublicKey(r);return F.equalsUint8Array(t,e)}default:return!1}},verify:async function(e,t,{RS:r},i,n,s){if(ve.getHashByteLength(t)<ve.getHashByteLength(Ci(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case L.publicKey.ed25519:return ar.sign.detached.verify(s,r,n);case L.publicKey.ed448:return(await F.getNobleCurve(L.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});const Di=F.getWebCrypto();async function Pi(e,t,r){const{keySize:i}=ae(e);if(!F.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");try{const e=await Di.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),i=await Di.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),n=await Di.wrapKey("raw",i,e,{name:"AES-KW"});return new Uint8Array(n)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return function(e,t,r){const i=new ze(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=xi(r);let a=n;const o=s,c=s.length/2,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=0;e<=5;++e)for(let t=0;t<c;++t)h[1]=c*e+(1+t),u[0]=a[0],u[1]=a[1],u[2]=o[2*t],u[3]=o[2*t+1],u=xi(i.encrypt(Qi(u))),a=u.subarray(0,2),a[0]^=h[0],a[1]^=h[1],o[2*t]=u[2],o[2*t+1]=u[3];return Qi(a,o)}(0,t,r)}async function Ui(e,t,r){const{keySize:i}=ae(e);if(!F.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");let n;try{n=await Di.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return F.printDebugError("Browser did not support operation: "+e.message),function(e,t,r){const i=new ze(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=xi(r);let a=s.subarray(0,2);const o=s.subarray(2),c=s.length/2-1,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=5;e>=0;--e)for(let t=c-1;t>=0;--t)h[1]=c*e+(t+1),u[0]=a[0]^h[0],u[1]=a[1]^h[1],u[2]=o[2*t],u[3]=o[2*t+1],u=xi(i.decrypt(Qi(u))),a=u.subarray(0,2),o[2*t]=u[2],o[2*t+1]=u[3];if(a[0]===n[0]&&a[1]===n[1])return Qi(o);throw Error("Key Data Integrity failed")}(0,t,r)}try{const e=await Di.unwrapKey("raw",r,n,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await Di.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}function xi(e){const t=e.buffer,r=new DataView(t),i=new Uint32Array(e.length/4);for(let t=0;t<e.length/4;++t)i[t]=r.getUint32(4*t);return i}function Qi(){let e=0;for(let t=0;t<arguments.length;++t)e+=4*arguments[t].length;const t=new ArrayBuffer(e),r=new DataView(t);let i=0;for(let e=0;e<arguments.length;++e){for(let t=0;t<arguments[e].length;++t)r.setUint32(i+4*t,arguments[e][t]);i+=4*arguments[e].length}return new Uint8Array(t)}var Ri=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:Ui,wrap:Pi});function Mi(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}function Ti(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const i=e.subarray(t-r),n=new Uint8Array(r).fill(r);if(F.equalsUint8Array(i,n))return e.subarray(0,t-r)}}throw Error("Invalid padding")}var Li=/*#__PURE__*/Object.freeze({__proto__:null,decode:Ti,encode:Mi});const _i=F.getWebCrypto(),Ni=F.getNodeCrypto();function Fi(e,t,r,i){return F.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),F.stringToUint8Array("Anonymous Sender "),r.replacementFingerprint||i.subarray(0,20)])}async function Hi(e,t,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await ve.digest(e,F.concatUint8Array([new Uint8Array([0,0,0,1]),t,i]))).subarray(0,r)}async function Oi(e,t){switch(e.type){case"curve25519Legacy":{const r=_t(32),{secretKey:i,sharedKey:n}=await zi(e,t,null,r);let{publicKey:s}=ar.box.keyPair.fromSecretKey(i);return s=F.concatUint8Array([new Uint8Array([64]),s]),{publicKey:s,sharedKey:n}}case"web":if(e.web&&F.getWebCrypto())try{return await async function(e,t){const r=Ai(e.payloadSize,e.web,t);let i=_i.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),n=_i.importKey("jwk",r,{name:"ECDH",namedCurve:e.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=_i.deriveBits({name:"ECDH",namedCurve:e.web,public:n},i.privateKey,e.sharedSize),a=_i.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(di(a));return{publicKey:c,sharedKey:o}}(e,t)}catch(r){return F.printDebugError(r),ji(e,t)}break;case"node":return async function(e,t){const r=Ni.createECDH(e.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(t)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(e,t);default:return ji(e,t)}}async function zi(e,t,r,i){if(i.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(i,e.payloadSize-i.length),i=t}switch(e.type){case"curve25519Legacy":{const e=i.slice().reverse();return{secretKey:e,sharedKey:ar.scalarMult(e,t.subarray(1))}}case"web":if(e.web&&F.getWebCrypto())try{return await async function(e,t,r,i){const n=wi(e.payloadSize,e.web,r,i);let s=_i.importKey("jwk",n,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const a=Ai(e.payloadSize,e.web,t);let o=_i.importKey("jwk",a,{name:"ECDH",namedCurve:e.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=_i.deriveBits({name:"ECDH",namedCurve:e.web,public:o},s,e.sharedSize),h=_i.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:q(h.d),sharedKey:u}}(e,t,r,i)}catch(r){return F.printDebugError(r),Gi(e,t,i)}break;case"node":return async function(e,t,r){const i=Ni.createECDH(e.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(t));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(e,t,i);default:return Gi(e,t,i)}}async function Gi(e,t,r){return{secretKey:r,sharedKey:(await F.getNobleCurve(L.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function ji(e,t){const r=await F.getNobleCurve(L.publicKey.ecdh,e.name),{publicKey:i,privateKey:n}=await e.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,t).subarray(1)}}var qi=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a){const o=new fi(e),{sharedKey:c}=await zi(o,r,n,s),h=Fi(L.publicKey.ecdh,e,t,a),{keySize:u}=ae(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await Hi(t.hash,c,u,h,1===e,2===e);return Ti(await Ui(t.cipher,r,i))}catch(e){l=e}throw l},encrypt:async function(e,t,r,i,n){const s=Mi(r),a=new fi(e),{publicKey:o,sharedKey:c}=await Oi(a,i),h=Fi(L.publicKey.ecdh,e,t,n),{keySize:u}=ae(t.cipher),l=await Hi(t.hash,c,u,h);return{publicKey:o,wrappedKey:await Pi(t.cipher,l,s)}},validateParams:async function(e,t,r){return gi(L.publicKey.ecdh,e,t,r)}});const Vi=F.getWebCrypto();async function Yi(e,t,r,i,n){const s=L.read(L.webHash,e);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Vi.importKey("raw",t,"HKDF",!1,["deriveBits"]),o=await Vi.deriveBits({name:"HKDF",hash:s,salt:r,info:i},a,8*n);return new Uint8Array(o)}const Ji={x25519:F.encodeUTF8("OpenPGP X25519"),x448:F.encodeUTF8("OpenPGP X448")};var Wi=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){switch(e){case L.publicKey.x25519:{const e=ar.scalarMult(n,t),s=F.concatUint8Array([t,i,e]),a=L.symmetric.aes128,{keySize:o}=ae(a);return Ui(a,await Yi(L.hash.sha256,s,new Uint8Array,Ji.x25519,o),r)}case L.publicKey.x448:{const e=(await F.getNobleCurve(L.publicKey.x448)).getSharedSecret(n,t),s=F.concatUint8Array([t,i,e]),a=L.symmetric.aes256,{keySize:o}=ae(L.symmetric.aes256);return Ui(a,await Yi(L.hash.sha512,s,new Uint8Array,Ji.x448,o),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(e,t,r){switch(e){case L.publicKey.x25519:{const e=_t(32),i=ar.scalarMult(e,r),{publicKey:n}=ar.box.keyPair.fromSecretKey(e),s=F.concatUint8Array([n,r,i]),a=L.symmetric.aes128,{keySize:o}=ae(a),c=await Yi(L.hash.sha256,s,new Uint8Array,Ji.x25519,o);return{ephemeralPublicKey:n,wrappedKey:await Pi(a,c,t)}}case L.publicKey.x448:{const e=await F.getNobleCurve(L.publicKey.x448),i=e.utils.randomPrivateKey(),n=e.getSharedSecret(i,r),s=e.getPublicKey(i),a=F.concatUint8Array([s,r,n]),o=L.symmetric.aes256,{keySize:c}=ae(L.symmetric.aes256),h=await Yi(L.hash.sha512,a,new Uint8Array,Ji.x448,c);return{ephemeralPublicKey:s,wrappedKey:await Pi(o,h,t)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(e){switch(e){case L.publicKey.x25519:{const e=_t(32),{publicKey:t}=ar.box.keyPair.fromSecretKey(e);return{A:t,k:e}}case L.publicKey.x448:{const e=await F.getNobleCurve(L.publicKey.x448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),k:t}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(e){switch(e){case L.publicKey.x25519:return 32;case L.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(e,t,r){switch(e){case L.publicKey.x25519:{const{publicKey:e}=ar.box.keyPair.fromSecretKey(r);return F.equalsUint8Array(t,e)}case L.publicKey.x448:{const e=(await F.getNobleCurve(L.publicKey.x448)).getPublicKey(r);return F.equalsUint8Array(t,e)}default:return!1}}}),Zi=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:fi,ecdh:qi,ecdhX:Wi,ecdsa:Ii,eddsa:Ki,eddsaLegacy:Bi,generate:async function(e){const t=new fi(e),{oid:r,hash:i,cipher:n}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:F.leftPad(s.privateKey,t.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(e){return yi[e.getName()].hash}});const $i=BigInt(0),Xi=BigInt(1);var en=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){const a=BigInt(0);let o,c,h,u;i=Ct(i),n=Ct(n),r=Ct(r),s=Ct(s),r=Kt(r,i),s=Kt(s,n);const l=Kt(Ct(t.subarray(0,Mt(n))),n);for(;;){if(o=Nt(Xi,n),c=Kt(Dt(r,o,i),n),c===a)continue;const e=Kt(s*c,n);if(u=Kt(l+e,n),h=Kt(Ut(o,n)*u,n),h!==a)break}return{r:Tt(c,"be",Mt(i)),s:Tt(h,"be",Mt(i))}},validateParams:async function(e,t,r,i,n){if(e=Ct(e),t=Ct(t),r=Ct(r),i=Ct(i),r<=Xi||r>=e)return!1;if(Kt(e-Xi,t)!==$i)return!1;if(Dt(r,t,e)!==Xi)return!1;const s=BigInt(Rt(t));if(s<BigInt(150)||!zt(t,null,32))return!1;n=Ct(n);const a=BigInt(2);return i===Dt(r,t*Nt(a<<s-Xi,a<<s)+n,e)},verify:async function(e,t,r,i,n,s,a,o){if(t=Ct(t),r=Ct(r),s=Ct(s),a=Ct(a),n=Ct(n),o=Ct(o),t<=$i||t>=a||r<=$i||r>=a)return F.printDebug("invalid DSA Signature"),!1;const c=Kt(Ct(i.subarray(0,Mt(a))),a),h=Ut(r,a);if(h===$i)return F.printDebug("invalid DSA Signature"),!1;n=Kt(n,s),o=Kt(o,s);const u=Kt(c*h,a),l=Kt(t*h,a);return Kt(Kt(Dt(n,u,s)*Dt(o,l,s),s),a)===t}});const tn=new Set([L.hash.sha1,L.hash.sha256,L.hash.sha512]),rn=F.getWebCrypto(),nn=F.getNodeCrypto();var sn={rsa:rr,elgamal:nr,elliptic:Zi,dsa:en,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){if(!tn.has(e))throw Error("Unsupported hash algorithm.");const t=L.read(L.webHash,e),r=rn||nn.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(e,t,r){if(!tn.has(e))throw Error("Unsupported hash algorithm.");const i=L.read(L.webHash,e),n=rn||nn.webcrypto.subtle,s=await n.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(e,t,r,i){if(!tn.has(e))throw Error("Unsupported hash algorithm.");const n=L.read(L.webHash,e),s=rn||nn.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class an{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!F.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return F.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}var on=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(e,t){let r=0;switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const e=F.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case L.publicKey.dsa:case L.publicKey.ecdsa:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const i=F.readMPI(t.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:e,s:i}}}case L.publicKey.eddsaLegacy:{let e=F.readMPI(t.subarray(r));r+=e.length+2,e=F.leftPad(e,32);let i=F.readMPI(t.subarray(r));return r+=i.length+2,i=F.leftPad(i,32),{read:r,signatureParams:{r:e,s:i}}}case L.publicKey.ed25519:case L.publicKey.ed448:{const i=2*sn.elliptic.eddsa.getPayloadSize(e),n=F.readExactSubarray(t,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case L.publicKey.hmac:{const e=new an;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}default:throw new ni("Unknown signature algorithm.")}},sign:async function(e,t,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await sn.rsa.sign(t,n,e,a,o,c,h,u,s)}}case L.publicKey.dsa:{const{g:e,p:n,q:a}=r,{x:o}=i;return sn.dsa.sign(t,s,e,n,a,o)}case L.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case L.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=i;return sn.elliptic.ecdsa.sign(e,t,n,a,o,s)}case L.publicKey.eddsaLegacy:{const{oid:e,Q:a}=r,{seed:o}=i;return sn.elliptic.eddsaLegacy.sign(e,t,n,a,o,s)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return sn.elliptic.eddsa.sign(e,t,n,a,o,s)}case L.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=i,n=await sn.hmac.sign(e.getValue(),t,s);return{mac:new an(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(e,t,r,i,n,s,a){switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const{n:e,e:n}=i,o=F.leftPad(r.s,e.length);return sn.rsa.verify(t,s,o,e,n,a)}case L.publicKey.dsa:{const{g:e,p:n,q:s,y:o}=i,{r:c,s:h}=r;return sn.dsa.verify(t,c,h,a,e,n,s,o)}case L.publicKey.ecdsa:{const{oid:e,Q:n}=i,o=new sn.elliptic.CurveWithOID(e).payloadSize,c=F.leftPad(r.r,o),h=F.leftPad(r.s,o);return sn.elliptic.ecdsa.verify(e,t,{r:c,s:h},s,n,a)}case L.publicKey.eddsaLegacy:{const{oid:e,Q:n}=i;return sn.elliptic.eddsaLegacy.verify(e,t,r,s,n,a)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:n}=i;return sn.elliptic.eddsa.verify(e,t,r,s,n,a)}case L.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=i,{keyMaterial:t}=n;return sn.hmac.verify(e.getValue(),t,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class cn{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return F.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class hn{constructor(e){if(e){const{version:t,hash:r,cipher:i,replacementFingerprint:n}=e;this.version=t||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new ni("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const i=t-r+1;this.replacementFingerprint=e.slice(r,r+i),r+=i}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return F.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const un=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=L.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return L.read(e,this.data)}getValue(){return this.data}},ln=un(L.aead),yn=un(L.symmetric),fn=un(L.hash);class gn{static fromObject({wrappedKey:e,algorithm:t}){const r=new gn;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=F.readExactSubarray(e,t,t+r),t+=r}write(){return F.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function pn(e,t){const r=_t(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await ve.sha256(r)}}}function dn(e){const{keySize:t}=ae(e);return _t(t)}function An(e){const t=L.read(L.aead,e);return It[t]}function wn(e){try{e.getName()}catch(e){throw new ni("Unknown curve OID")}}function mn(e,t){switch(e){case L.publicKey.ecdsa:case L.publicKey.ecdh:case L.publicKey.eddsaLegacy:return new sn.elliptic.CurveWithOID(t).payloadSize;case L.publicKey.ed25519:case L.publicKey.ed448:return sn.elliptic.eddsa.getPayloadSize(e);case L.publicKey.x25519:case L.publicKey.x448:return sn.elliptic.ecdhX.getPayloadSize(e);default:throw Error("Unknown elliptic algo")}}var bn=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(e,t,r,i){switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:return sn.rsa.generate(t,65537).then((({n:e,e:t,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:e,e:t}})));case L.publicKey.ecdsa:return sn.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new Wr(e),Q:t}})));case L.publicKey.eddsaLegacy:return sn.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new Wr(e),Q:t}})));case L.publicKey.ecdh:return sn.elliptic.generate(r).then((({oid:e,Q:t,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new Wr(e),Q:t,kdfParams:new hn({hash:i,cipher:n})}})));case L.publicKey.ed25519:case L.publicKey.ed448:return sn.elliptic.eddsa.generate(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case L.publicKey.x25519:case L.publicKey.x448:return sn.elliptic.ecdhX.generate(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case L.publicKey.hmac:return pn(await sn.hmac.generate(i),new fn(i));case L.publicKey.aead:return pn(dn(i),new yn(i));case L.publicKey.dsa:case L.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:dn,getAEADMode:An,getCipherParams:ae,getCurvePayloadSize:mn,getPreferredCurveHashAlgo:function(e,t){switch(e){case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:return sn.elliptic.getPreferredHashAlgo(t);case L.publicKey.ed25519:case L.publicKey.ed448:return sn.elliptic.eddsa.getPreferredHashAlgo(e);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(e){const{blockSize:t}=ae(e),r=await _t(t),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return F.concat([r,i])},parseEncSessionKeyParams:function(e,t){let r=0;switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:return{c:F.readMPI(t.subarray(r))};case L.publicKey.elgamal:{const e=F.readMPI(t.subarray(r));r+=e.length+2;return{c1:e,c2:F.readMPI(t.subarray(r))}}case L.publicKey.ecdh:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const i=new cn;return i.read(t.subarray(r)),{V:e,C:i}}case L.publicKey.x25519:case L.publicKey.x448:{const i=mn(e),n=F.readExactSubarray(t,r,r+i);r+=n.length;const s=new gn;return s.read(t.subarray(r)),{ephemeralPublicKey:n,C:s}}case L.publicKey.aead:{const e=new ln;r+=e.read(t.subarray(r));const{ivLength:i}=An(e.getValue()),n=t.subarray(r,r+i);r+=i;const s=new an;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:n,c:s}}default:throw new ni("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(e,t,r){let i=0;switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const e=F.readMPI(t.subarray(i));i+=e.length+2;const r=F.readMPI(t.subarray(i));i+=r.length+2;const n=F.readMPI(t.subarray(i));i+=n.length+2;const s=F.readMPI(t.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:e,p:r,q:n,u:s}}}case L.publicKey.dsa:case L.publicKey.elgamal:{const e=F.readMPI(t.subarray(i));return i+=e.length+2,{read:i,privateParams:{x:e}}}case L.publicKey.ecdsa:case L.publicKey.ecdh:{const n=mn(e,r.oid);let s=F.readMPI(t.subarray(i));return i+=s.length+2,s=F.leftPad(s,n),{read:i,privateParams:{d:s}}}case L.publicKey.eddsaLegacy:{const n=mn(e,r.oid);let s=F.readMPI(t.subarray(i));return i+=s.length+2,s=F.leftPad(s,n),{read:i,privateParams:{seed:s}}}case L.publicKey.ed25519:case L.publicKey.ed448:{const r=mn(e),n=F.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case L.publicKey.x25519:case L.publicKey.x448:{const r=mn(e),n=F.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case L.publicKey.hmac:{const{cipher:e}=r,n=ve.getHashByteLength(e.getValue()),s=t.subarray(i,i+32);i+=32;const a=t.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case L.publicKey.aead:{const{cipher:e}=r,n=t.subarray(i,i+32);i+=32;const{keySize:s}=ae(e.getValue()),a=t.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new ni("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(e,t){let r=0;switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const i=F.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:e,e:i}}}case L.publicKey.dsa:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const i=F.readMPI(t.subarray(r));r+=i.length+2;const n=F.readMPI(t.subarray(r));r+=n.length+2;const s=F.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:i,g:n,y:s}}}case L.publicKey.elgamal:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const i=F.readMPI(t.subarray(r));r+=i.length+2;const n=F.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:e,g:i,y:n}}}case L.publicKey.ecdsa:{const e=new Wr;r+=e.read(t),wn(e);const i=F.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:e,Q:i}}}case L.publicKey.eddsaLegacy:{const e=new Wr;r+=e.read(t),wn(e);let i=F.readMPI(t.subarray(r));return r+=i.length+2,i=F.leftPad(i,33),{read:r,publicParams:{oid:e,Q:i}}}case L.publicKey.ecdh:{const e=new Wr;r+=e.read(t),wn(e);const i=F.readMPI(t.subarray(r));r+=i.length+2;const n=new hn;return r+=n.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:i,kdfParams:n}}}case L.publicKey.ed25519:case L.publicKey.ed448:case L.publicKey.x25519:case L.publicKey.x448:{const i=F.readExactSubarray(t,r,r+mn(e));return r+=i.length,{read:r,publicParams:{A:i}}}case L.publicKey.hmac:case L.publicKey.aead:{const e=new yn;r+=e.read(t);const i=ve.getHashByteLength(L.hash.sha256),n=t.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:e,digest:n}}}default:throw new ni("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(e,t,r,i,n,s){switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:{const{c:e}=i,{n,e:a}=t,{d:o,p:c,q:h,u}=r;return sn.rsa.decrypt(e,n,a,o,c,h,u,s)}case L.publicKey.elgamal:{const{c1:e,c2:n}=i,a=t.p,o=r.x;return sn.elgamal.decrypt(e,n,a,o,s)}case L.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:h}=i;return sn.elliptic.ecdh.decrypt(e,a,c,h.data,s,o,n)}case L.publicKey.x25519:case L.publicKey.x448:{const{A:n}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!F.isAES(o.algorithm))throw Error("AES session key expected");return sn.elliptic.ecdhX.decrypt(e,a,o.wrappedKey,n,s)}case L.publicKey.aead:{const{cipher:e}=t,n=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=An(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(e,t,r,i,n,s){switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await sn.rsa.encrypt(n,e,t)}}case L.publicKey.elgamal:{const{p:e,g:t,y:i}=r;return sn.elgamal.encrypt(n,e,t,i)}case L.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await sn.elliptic.ecdh.encrypt(e,i,n,t,s);return{V:a,C:new cn(o)}}case L.publicKey.x25519:case L.publicKey.x448:{if(t&&!F.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await sn.elliptic.ecdhX.encrypt(e,n,i);return{ephemeralPublicKey:s,C:gn.fromObject({algorithm:t,wrappedKey:a})}}case L.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=i,a=_.preferredAEADAlgorithm,o=An(_.preferredAEADAlgorithm),{ivLength:c}=o,h=_t(c),u=await o(t,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new ln(a),iv:h,c:new an(l)}}default:return[]}},serializeParams:function(e,t){const r=new Set([L.publicKey.ed25519,L.publicKey.x25519,L.publicKey.ed448,L.publicKey.x448,L.publicKey.aead,L.publicKey.hmac]),i=Object.keys(t).map((i=>{const n=t[i];return F.isUint8Array(n)?r.has(e)?n:F.uint8ArrayToMPI(n):n.write()}));return F.concatUint8Array(i)},validateParams:async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const{n:e,e:i}=t,{d:n,p:s,q:a,u:o}=r;return sn.rsa.validateParams(e,i,n,s,a,o)}case L.publicKey.dsa:{const{p:e,q:i,g:n,y:s}=t,{x:a}=r;return sn.dsa.validateParams(e,i,n,s,a)}case L.publicKey.elgamal:{const{p:e,g:i,y:n}=t,{x:s}=r;return sn.elgamal.validateParams(e,i,n,s)}case L.publicKey.ecdsa:case L.publicKey.ecdh:{const i=sn.elliptic[L.read(L.publicKey,e)],{oid:n,Q:s}=t,{d:a}=r;return i.validateParams(n,s,a)}case L.publicKey.eddsaLegacy:{const{Q:e,oid:i}=t,{seed:n}=r;return sn.elliptic.eddsaLegacy.validateParams(i,e,n)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:i}=t,{seed:n}=r;return sn.elliptic.eddsa.validateParams(e,i,n)}case L.publicKey.x25519:case L.publicKey.x448:{const{A:i}=t,{k:n}=r;return sn.elliptic.ecdhX.validateParams(e,i,n)}case L.publicKey.hmac:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r;return ve.getHashByteLength(e.getValue())===s.length&&F.equalsUint8Array(i,await ve.sha256(n))}case L.publicKey.aead:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=ae(e.getValue());return a===s.length&&F.equalsUint8Array(i,await ve.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const En={cipher:oe,hash:ve,mode:It,publicKey:sn,signature:on,random:Ft,pkcs1:Jt,pkcs5:Li,aesKW:Ri};Object.assign(En,bn);class kn extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,kn),this.name="Argon2OutOfMemoryError"}}let vn,In,Bn=2<<19;class Sn{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return Bn}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){Bn=e}static reloadWasmModule(){vn&&(In=vn(),In.catch((()=>{})))}constructor(e=_){const{passes:t,parallelism:r,memoryExponent:i}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=i}generateSalt(){this.salt=En.random.getRandomBytes(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([L.write(L.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return F.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{vn=vn||(await Promise.resolve().then((function(){return Ml}))).default,In=In||vn();const i=await In,n=i({version:19,type:2,password:F.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>Sn.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&Sn.reloadWasmModule(),n}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new kn("Could not allocate required memory for Argon2"):e}}}class Cn{constructor(e,t=_){this.algorithm=L.hash.sha256,this.type=L.read(L.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=En.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==F.uint8ArrayToString(e.subarray(t,t+3)))throw new ni("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new ni("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new ni("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...F.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([L.write(L.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return F.concatUint8Array(e)}async produceKey(e,t){e=F.encodeUTF8(e);const r=[];let i=0,n=0;for(;i<t;){let t;switch(this.type){case"simple":t=F.concatUint8Array([new Uint8Array(n),e]);break;case"salted":t=F.concatUint8Array([new Uint8Array(n),this.salt,e]);break;case"iterated":{const r=F.concatUint8Array([this.salt,e]);let i=r.length;const s=Math.max(this.getCount(),i);t=new Uint8Array(n+s),t.set(r,n);for(let e=n+i;e<s;e+=i,i*=2)t.copyWithin(e,n,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await En.hash.digest(this.algorithm,t);r.push(s),i+=s.length,n++}return F.concatUint8Array(r).subarray(0,t)}}const Kn=new Set([L.s2k.argon2,L.s2k.iterated]);function Dn(e,t=_){switch(e){case L.s2k.argon2:return new Sn(t);case L.s2k.iterated:case L.s2k.gnu:case L.s2k.salted:case L.s2k.simple:return new Cn(e,t);default:throw new ni("Unsupported S2K type")}}function Pn(e){const{s2kType:t}=e;if(!Kn.has(t))throw Error("The provided `config.s2kType` value is not allowed");return Dn(t,e)}var Un=t.createRequire("/");try{Un("worker_threads").Worker}catch(e){}var xn=Uint8Array,Qn=Uint16Array,Rn=Uint32Array,Mn=new xn([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Tn=new xn([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),Ln=new xn([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),_n=function(e,t){for(var r=new Qn(31),i=0;i<31;++i)r[i]=t+=1<<e[i-1];var n=new Rn(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},Nn=_n(Mn,2),Fn=Nn[0],Hn=Nn[1];Fn[28]=258,Hn[258]=28;for(var On=_n(Tn,0),zn=On[0],Gn=On[1],jn=new Qn(32768),qn=0;qn<32768;++qn){var Vn=(43690&qn)>>>1|(21845&qn)<<1;Vn=(61680&(Vn=(52428&Vn)>>>2|(13107&Vn)<<2))>>>4|(3855&Vn)<<4,jn[qn]=((65280&Vn)>>>8|(255&Vn)<<8)>>>1}var Yn=function(e,t,r){for(var i=e.length,n=0,s=new Qn(t);n<i;++n)e[n]&&++s[e[n]-1];var a,o=new Qn(t);for(n=0;n<t;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new Qn(1<<t);var c=15-t;for(n=0;n<i;++n)if(e[n])for(var h=n<<4|e[n],u=t-e[n],l=o[e[n]-1]++<<u,y=l|(1<<u)-1;l<=y;++l)a[jn[l]>>>c]=h}else for(a=new Qn(i),n=0;n<i;++n)e[n]&&(a[n]=jn[o[e[n]-1]++]>>>15-e[n]);return a},Jn=new xn(288);for(qn=0;qn<144;++qn)Jn[qn]=8;for(qn=144;qn<256;++qn)Jn[qn]=9;for(qn=256;qn<280;++qn)Jn[qn]=7;for(qn=280;qn<288;++qn)Jn[qn]=8;var Wn=new xn(32);for(qn=0;qn<32;++qn)Wn[qn]=5;var Zn=/*#__PURE__*/Yn(Jn,9,0),$n=/*#__PURE__*/Yn(Jn,9,1),Xn=/*#__PURE__*/Yn(Wn,5,0),es=/*#__PURE__*/Yn(Wn,5,1),ts=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},rs=function(e,t,r){var i=t/8|0;return(e[i]|e[i+1]<<8)>>(7&t)&r},is=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},ns=function(e){return(e+7)/8|0},ss=function(e,t,r){(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length);var i=new(2==e.BYTES_PER_ELEMENT?Qn:4==e.BYTES_PER_ELEMENT?Rn:xn)(r-t);return i.set(e.subarray(t,r)),i},as=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],os=function(e,t,r){var i=Error(t||as[e]);if(i.code=e,Error.captureStackTrace&&Error.captureStackTrace(i,os),!r)throw i;return i},cs=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8},hs=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8,e[i+2]|=r>>>16},us=function(e,t){for(var r=[],i=0;i<e.length;++i)e[i]&&r.push({s:i,f:e[i]});var n=r.length,s=r.slice();if(!n)return[As,0];if(1==n){var a=new xn(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var y=s[0].s;for(i=1;i<n;++i)s[i].s>y&&(y=s[i].s);var f=new Qn(y+1),g=ls(r[u-1],f,0);if(g>t){i=0;var p=0,d=g-t,A=1<<d;for(s.sort((function(e,t){return f[t.s]-f[e.s]||e.f-t.f}));i<n;++i){var w=s[i].s;if(!(f[w]>t))break;p+=A-(1<<g-f[w]),f[w]=t}for(p>>>=d;p>0;){var m=s[i].s;f[m]<t?p-=1<<t-f[m]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;f[b]==t&&(--f[b],++p)}g=t}return[new xn(f),g]},ls=function(e,t,r){return-1==e.s?Math.max(ls(e.l,t,r+1),ls(e.r,t,r+1)):t[e.s]=r},ys=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new Qn(++t),i=0,n=e[0],s=1,a=function(e){r[i++]=e},o=1;o<=t;++o)if(e[o]==n&&o!=t)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=e[o]}return[r.subarray(0,i),t]},fs=function(e,t){for(var r=0,i=0;i<t.length;++i)r+=e[i]*t[i];return r},gs=function(e,t,r){var i=r.length,n=ns(t+2);e[n]=255&i,e[n+1]=i>>>8,e[n+2]=255^e[n],e[n+3]=255^e[n+1];for(var s=0;s<i;++s)e[n+s+4]=r[s];return 8*(n+4+i)},ps=function(e,t,r,i,n,s,a,o,c,h,u){cs(t,u++,r),++n[256];for(var l=us(n,15),y=l[0],f=l[1],g=us(s,15),p=g[0],d=g[1],A=ys(y),w=A[0],m=A[1],b=ys(p),E=b[0],k=b[1],v=new Qn(19),I=0;I<w.length;++I)v[31&w[I]]++;for(I=0;I<E.length;++I)v[31&E[I]]++;for(var B=us(v,7),S=B[0],C=B[1],K=19;K>4&&!S[Ln[K-1]];--K);var D,P,U,x,Q=h+5<<3,R=fs(n,Jn)+fs(s,Wn)+a,M=fs(n,y)+fs(s,p)+a+14+3*K+fs(v,S)+(2*v[16]+3*v[17]+7*v[18]);if(Q<=R&&Q<=M)return gs(t,u,e.subarray(c,c+h));if(cs(t,u,1+(M<R)),u+=2,M<R){D=Yn(y,f,0),P=y,U=Yn(p,d,0),x=p;var T=Yn(S,C,0);cs(t,u,m-257),cs(t,u+5,k-1),cs(t,u+10,K-4),u+=14;for(I=0;I<K;++I)cs(t,u+3*I,S[Ln[I]]);u+=3*K;for(var L=[w,E],_=0;_<2;++_){var N=L[_];for(I=0;I<N.length;++I){var F=31&N[I];cs(t,u,T[F]),u+=S[F],F>15&&(cs(t,u,N[I]>>>5&127),u+=N[I]>>>12)}}}else D=Zn,P=Jn,U=Xn,x=Wn;for(I=0;I<o;++I)if(i[I]>255){F=i[I]>>>18&31;hs(t,u,D[F+257]),u+=P[F+257],F>7&&(cs(t,u,i[I]>>>23&31),u+=Mn[F]);var H=31&i[I];hs(t,u,U[H]),u+=x[H],H>3&&(hs(t,u,i[I]>>>5&8191),u+=Tn[H])}else hs(t,u,D[i[I]]),u+=P[i[I]];return hs(t,u,D[256]),u+P[256]},ds=/*#__PURE__*/new Rn([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),As=/*#__PURE__*/new xn(0),ws=function(e,t,r,i,n){return function(e,t,r,i,n,s){var a=e.length,o=new xn(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!t||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=gs(c,h+1,e.subarray(u,l))}else{for(var y=ds[t-1],f=y>>>13,g=8191&y,p=(1<<r)-1,d=new Qn(32768),A=new Qn(p+1),w=Math.ceil(r/3),m=2*w,b=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<m)&p},E=new Rn(25e3),k=new Qn(288),v=new Qn(32),I=0,B=0,S=(u=0,0),C=0,K=0;u<a;++u){var D=b(u),P=32767&u,U=A[D];if(d[P]=U,A[D]=P,C<=u){var x=a-u;if((I>7e3||S>24576)&&x>423){h=ps(e,c,0,E,k,v,B,S,K,u-K,h),S=I=B=0,K=u;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)v[Q]=0}var R=2,M=0,T=g,L=P-U&32767;if(x>2&&D==b(u-L))for(var _=Math.min(f,x)-1,N=Math.min(32767,u),F=Math.min(258,x);L<=N&&--T&&P!=U;){if(e[u+R]==e[u+R-L]){for(var H=0;H<F&&e[u+H]==e[u+H-L];++H);if(H>R){if(R=H,M=L,H>_)break;var O=Math.min(L,H-2),z=0;for(Q=0;Q<O;++Q){var G=u-L+Q+32768&32767,j=G-d[G]+32768&32767;j>z&&(z=j,U=G)}}}L+=(P=U)-(U=d[P])+32768&32767}if(M){E[S++]=268435456|Hn[R]<<18|Gn[M];var q=31&Hn[R],V=31&Gn[M];B+=Mn[q]+Tn[V],++k[257+q],++v[V],C=u+R,++I}else E[S++]=e[u],++k[e[u]]}}h=ps(e,c,s,E,k,v,B,S,K,u-K,h),!s&&7&h&&(h=gs(c,h+1,As))}return ss(o,0,i+ns(h)+n)}(e,null==t.level?6:t.level,null==t.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):12+t.mem,r,i,!n)},ms=/*#__PURE__*/function(){function e(e,t){t||"function"!=typeof e||(t=e,e={}),this.ondata=t,this.o=e||{}}return e.prototype.p=function(e,t){this.ondata(ws(e,this.o,0,0,!t),t)},e.prototype.push=function(e,t){this.ondata||os(5),this.d&&os(4),this.d=t,this.p(e,t||!1)},e}(),bs=/*#__PURE__*/function(){function e(e){this.s={},this.p=new xn(0),this.ondata=e}return e.prototype.e=function(e){this.ondata||os(5),this.d&&os(4);var t=this.p.length,r=new xn(t+e.length);r.set(this.p),r.set(e,t),this.p=r},e.prototype.c=function(e){this.d=this.s.i=e||!1;var t=this.s.b,r=function(e,t,r){var i=e.length;if(!i||r&&r.f&&!r.l)return t||new xn(0);var n=!t||r,s=!r||r.i;r||(r={}),t||(t=new xn(3*i));var a=function(e){var r=t.length;if(e>r){var i=new xn(Math.max(2*r,e));i.set(t),t=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,y=r.m,f=r.n,g=8*i;do{if(!u){o=rs(e,c,1);var p=rs(e,c+1,3);if(c+=3,!p){var d=e[(C=ns(c)+4)-4]|e[C-3]<<8,A=C+d;if(A>i){s&&os(0);break}n&&a(h+d),t.set(e.subarray(C,A),h),r.b=h+=d,r.p=c=8*A,r.f=o;continue}if(1==p)u=$n,l=es,y=9,f=5;else if(2==p){var w=rs(e,c,31)+257,m=rs(e,c+10,15)+4,b=w+rs(e,c+5,31)+1;c+=14;for(var E=new xn(b),k=new xn(19),v=0;v<m;++v)k[Ln[v]]=rs(e,c+3*v,7);c+=3*m;var I=ts(k),B=(1<<I)-1,S=Yn(k,I,1);for(v=0;v<b;){var C,K=S[rs(e,c,B)];if(c+=15&K,(C=K>>>4)<16)E[v++]=C;else{var D=0,P=0;for(16==C?(P=3+rs(e,c,3),c+=2,D=E[v-1]):17==C?(P=3+rs(e,c,7),c+=3):18==C&&(P=11+rs(e,c,127),c+=7);P--;)E[v++]=D}}var U=E.subarray(0,w),x=E.subarray(w);y=ts(U),f=ts(x),u=Yn(U,y,1),l=Yn(x,f,1)}else os(1);if(c>g){s&&os(0);break}}n&&a(h+131072);for(var Q=(1<<y)-1,R=(1<<f)-1,M=c;;M=c){var T=(D=u[is(e,c)&Q])>>>4;if((c+=15&D)>g){s&&os(0);break}if(D||os(2),T<256)t[h++]=T;else{if(256==T){M=c,u=null;break}var L=T-254;if(T>264){var _=Mn[v=T-257];L=rs(e,c,(1<<_)-1)+Fn[v],c+=_}var N=l[is(e,c)&R],F=N>>>4;if(N||os(3),c+=15&N,x=zn[F],F>3&&(_=Tn[F],x+=is(e,c)&(1<<_)-1,c+=_),c>g){s&&os(0);break}n&&a(h+131072);for(var H=h+L;h<H;h+=4)t[h]=t[h-x],t[h+1]=t[h+1-x],t[h+2]=t[h+2-x],t[h+3]=t[h+3-x];h=H}}r.l=u,r.p=M,r.b=h,r.f=o,u&&(o=1,r.m=y,r.d=l,r.n=f)}while(!o);return h==t.length?t:ss(t,0,h)}(this.p,this.o,this.s);this.ondata(ss(r,t,this.s.b),this.d),this.o=ss(r,this.s.b-32768),this.s.b=this.o.length,this.p=ss(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),Es=/*#__PURE__*/function(){function e(e,t){var r,i;this.c=(r=1,i=0,{p:function(e){for(var t=r,n=i,s=0|e.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=t+=e[a];t=(65535&t)+15*(t>>16),n=(65535&n)+15*(n>>16)}r=t,i=n},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(i%=65521))<<8|i>>>8}}),this.v=1,ms.call(this,e,t)}return e.prototype.push=function(e,t){ms.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){this.c.p(e);var r=ws(e,this.o,this.v&&2,t&&4,!t);this.v&&(function(e,t){var r=t.level,i=0==r?0:r<6?1:9==r?3:2;e[0]=120,e[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),t&&function(e,t,r){for(;r;++t)e[t]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,t)},e}(),ks=/*#__PURE__*/function(){function e(e){this.v=1,bs.call(this,e)}return e.prototype.push=function(e,t){if(bs.prototype.e.call(this,e),this.v){if(this.p.length<2&&!t)return;this.p=this.p.subarray(2),this.v=0}t&&(this.p.length<4&&os(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),bs.prototype.c.call(this,t)},e}(),vs="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{vs.decode(As,{stream:!0}),1}catch(e){}var Is=[0,1,3,7,15,31,63,127,255],Bs=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};Bs.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},Bs.prototype.read=function(e){for(var t=0;e>0;){this._ensureByte();var r=8-this.bitOffset;if(e>=r)t<<=r,t|=Is[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,e-=r;else{t<<=e;var i=r-e;t|=(this.curByte&Is[e]<<i)>>i,this.bitOffset+=e,e=0}}return t},Bs.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},Bs.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)};var Ss=Bs,Cs=function(){};Cs.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},Cs.prototype.read=function(e,t,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;e[t++]=n,i++}return i},Cs.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},Cs.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},Cs.prototype.write=function(e,t,r){var i;for(i=0;i<r;i++)this.writeByte(e[t++]);return r},Cs.prototype.flush=function(){};var Ks,Ds=Cs,Ps=(Ks=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var e=4294967295;this.getCRC=function(){return~e>>>0},this.updateCRC=function(t){e=e<<8^Ks[255&(e>>>24^t)]},this.updateCRCRun=function(t,r){for(;r-- >0;)e=e<<8^Ks[255&(e>>>24^t)]}}),Us=Ss,xs=Ds,Qs=Ps,Rs=function(e,t){var r,i=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=i,i},Ms={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},Ts={};Ts[Ms.LAST_BLOCK]="Bad file checksum",Ts[Ms.NOT_BZIP_DATA]="Not bzip data",Ts[Ms.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",Ts[Ms.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",Ts[Ms.DATA_ERROR]="Data error",Ts[Ms.OUT_OF_MEMORY]="Out of memory",Ts[Ms.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var Ls=function(e,t){var r=Ts[e]||"unknown error";t&&(r+=": "+t);var i=new TypeError(r);throw i.errorCode=e,i},_s=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};_s.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new Qs,!0):(this.writeCount=-1,!1)},_s.prototype._start_bunzip=function(e,t){var r=new Uint8Array(4);4===e.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||Ls(Ms.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&Ls(Ms.NOT_BZIP_DATA,"level out of range"),this.reader=new Us(e),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=t,this.streamCRC=0},_s.prototype._get_next_block=function(){var e,t,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&Ls(Ms.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&Ls(Ms.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&Ls(Ms.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(e=0;e<16;e++)if(a&1<<15-e){var h=16*e;for(r=i.read(16),t=0;t<16;t++)r&1<<15-t&&(o[c++]=h+t)}var u=i.read(3);(u<2||u>6)&&Ls(Ms.DATA_ERROR);var l=i.read(15);0===l&&Ls(Ms.DATA_ERROR);var y=new Uint8Array(256);for(e=0;e<u;e++)y[e]=e;var f=new Uint8Array(l);for(e=0;e<l;e++){for(t=0;i.read(1);t++)t>=u&&Ls(Ms.DATA_ERROR);f[e]=Rs(y,t)}var g,p=c+2,d=[];for(t=0;t<u;t++){var A,w,m=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),e=0;e<p;e++){for(;(a<1||a>20)&&Ls(Ms.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;m[e]=a}for(A=w=m[0],e=1;e<p;e++)m[e]>w?w=m[e]:m[e]<A&&(A=m[e]);g={},d.push(g),g.permute=new Uint16Array(258),g.limit=new Uint32Array(22),g.base=new Uint32Array(21),g.minLen=A,g.maxLen=w;var E=0;for(e=A;e<=w;e++)for(b[e]=g.limit[e]=0,a=0;a<p;a++)m[a]===e&&(g.permute[E++]=a);for(e=0;e<p;e++)b[m[e]]++;for(E=a=0,e=A;e<w;e++)E+=b[e],g.limit[e]=E-1,E<<=1,a+=b[e],g.base[e+1]=E-a;g.limit[w+1]=Number.MAX_VALUE,g.limit[w]=E+b[w]-1,g.base[A]=0}var k=new Uint32Array(256);for(e=0;e<256;e++)y[e]=e;var v,I=0,B=0,S=0,C=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,S>=l&&Ls(Ms.DATA_ERROR),g=d[f[S++]]),e=g.minLen,t=i.read(e);e>g.maxLen&&Ls(Ms.DATA_ERROR),!(t<=g.limit[e]);e++)t=t<<1|i.read(1);((t-=g.base[e])<0||t>=258)&&Ls(Ms.DATA_ERROR);var K=g.permute[t];if(0!==K&&1!==K){if(I)for(I=0,B+a>this.dbufSize&&Ls(Ms.DATA_ERROR),k[v=o[y[0]]]+=a;a--;)C[B++]=v;if(K>c)break;B>=this.dbufSize&&Ls(Ms.DATA_ERROR),k[v=o[v=Rs(y,e=K-1)]]++,C[B++]=v}else I||(I=1,a=0),a+=0===K?I:2*I,I<<=1}for((s<0||s>=B)&&Ls(Ms.DATA_ERROR),t=0,e=0;e<256;e++)r=t+k[e],k[e]=t,t=r;for(e=0;e<B;e++)C[k[v=255&C[e]]]|=e<<8,k[v]++;var D=0,P=0,U=0;return B&&(P=255&(D=C[s]),D>>=8,U=-1),this.writePos=D,this.writeCurrent=P,this.writeCount=B,this.writeRun=U,!0},_s.prototype._read_bunzip=function(e,t){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&Ls(Ms.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var Ns=function(e){if("readByte"in e)return e;var t=new xs;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},Fs=function(e){var t=new xs,r=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),r=!1;else{if("writeByte"in e)return e;t.buffer=e,r=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(r&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};var Hs=function(e,t,r){for(var i=Ns(e),n=Fs(t),s=new _s(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&Ls(Ms.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class Os{static get tag(){return L.packet.literalData}constructor(e=new Date){this.format=L.literal.utf8,this.date=F.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=L.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||F.isStream(this.text))&&(this.text=F.decodeUTF8(F.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=F.canonicalizeEOL(F.encodeUTF8(this.text))),e?K(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await S(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=F.decodeUTF8(await e.readBytes(r)),this.date=F.readDate(await e.readBytes(4));let i=e.remainder();u(i)&&(i=await U(i)),this.setBytes(i,t)}))}writeHeader(){const e=F.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),i=F.writeDate(this.date);return F.concatUint8Array([r,t,e,i])}write(){const e=this.writeHeader(),t=this.getBytes();return F.concat([e,t])}}class zs{constructor(){this.bytes=""}read(e){return this.bytes=F.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return F.stringToUint8Array(this.bytes)}toHex(){return F.uint8ArrayToHex(F.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new zs;return t.read(F.hexToUint8Array(e)),t}static wildcard(){const e=new zs;return e.read(new Uint8Array(8)),e}}const Gs=Symbol("verified"),js="salt@notations.openpgpjs.org",qs=new Set([L.signatureSubpacket.issuerKeyID,L.signatureSubpacket.issuerFingerprint,L.signatureSubpacket.embeddedSignature]);class Vs{static get tag(){return L.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new zs,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Gs]=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ni(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[t++],this.publicKeyAlgorithm=e[t++],this.hashAlgorithm=e[t++],t+=this.readSubPackets(e.subarray(t,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,t),t+=this.readSubPackets(e.subarray(t,e.length),!1),this.signedHashValue=e.subarray(t,t+2),t+=2,6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r}const r=e.subarray(t,e.length),{read:i,signatureParams:n}=En.signature.parseSignatureParams(this.publicKeyAlgorithm,r);if(i<r.length)throw Error("Error reading MPIs");this.params=n}writeParams(){return this.params instanceof Promise?Q((async()=>En.serializeParams(this.publicKeyAlgorithm,await this.params))):En.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),F.concat(e)}async sign(e,t,r=new Date,i=!1,n){this.version=e.version,this.created=F.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Js(this.hashAlgorithm);if(null===this.salt)this.salt=En.random.getRandomBytes(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(n.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===js)).length)throw Error("Unexpected existing salt notation");{const e=En.random.getRandomBytes(Js(this.hashAlgorithm));this.rawNotations.push({name:js,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=F.concat(s);const a=this.toHash(this.signatureType,t,i),o=await this.hash(this.signatureType,t,a,i);this.signedHashValue=P(C(o),0,2);const c=async()=>En.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await U(o));F.isStream(o)?this.params=c():(this.params=await c(),this[Gs]=!0)}writeHashedSubPackets(){const e=L.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(Ys(e.signatureCreationTime,!0,F.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(Ys(e.signatureExpirationTime,!0,F.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(Ys(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(Ys(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(Ys(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(Ys(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(Ys(e.keyExpirationTime,!0,F.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(Ys(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=F.concat([r,this.revocationKeyFingerprint]),t.push(Ys(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(Ys(e.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=F.encodeUTF8(i);r.push(F.writeNumber(o.length,2)),r.push(F.writeNumber(n.length,2)),r.push(o),r.push(n),r=F.concat(r),t.push(Ys(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(Ys(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(Ys(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyServerPreferences)),t.push(Ys(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(Ys(e.preferredKeyServer,!1,F.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(Ys(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(Ys(e.policyURI,!1,F.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyFlags)),t.push(Ys(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(Ys(e.signersUserID,!1,F.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=F.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(Ys(e.reasonForRevocation,!0,r))),null!==this.features&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.features)),t.push(Ys(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(F.stringToUint8Array(this.signatureTargetHash)),r=F.concat(r),t.push(Ys(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(Ys(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=F.concat(r),t.push(Ys(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(Ys(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(Ys(e.preferredCipherSuites,!1,r)));const i=F.concat(t),n=F.writeNumber(i.length,6===this.version?4:2);return F.concat([n,i])}writeUnhashedSubPackets(){const e=[];this.unhashedSubpackets.forEach((t=>{e.push($r(t.length)),e.push(t)}));const t=F.concat(e),r=F.writeNumber(t.length,6===this.version?4:2);return F.concat([r,t])}readSubPacket(e,t=!0){let r=0;const i=!!(128&e[r]),n=127&e[r];if(t||(this.unhashedSubpackets.push(e.subarray(r,e.length)),qs.has(n)))switch(r++,n){case L.signatureSubpacket.signatureCreationTime:this.created=F.readDate(e.subarray(r,e.length));break;case L.signatureSubpacket.signatureExpirationTime:{const t=F.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case L.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case L.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case L.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case L.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case L.signatureSubpacket.keyExpirationTime:{const t=F.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case L.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case L.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case L.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const n=F.readNumber(e.subarray(r,r+2));r+=2;const s=F.readNumber(e.subarray(r,r+2));r+=2;const a=F.decodeUTF8(e.subarray(r,r+n)),o=e.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:i}),t&&(this.notations[a]=F.decodeUTF8(o));break}case L.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case L.signatureSubpacket.policyURI:this.policyURI=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.signersUserID:this.signersUserID=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=En.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=F.uint8ArrayToString(e.subarray(r,r+t));break}case L.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Vs,this.embeddedSignature.read(e.subarray(r,e.length));break;case L.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case L.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:{const e=Error("Unknown signature subpacket type "+n);if(i)throw e;F.printDebug(e)}}}readSubPackets(e,t=!0,r){const i=6===this.version?4:2,n=F.readNumber(e.subarray(0,i));let s=i;for(;s<2+n;){const i=Zr(e.subarray(s,e.length));s+=i.offset,this.readSubPacket(e.subarray(s,s+i.len),t,r),s+=i.len}return s}toSign(e,t){const r=L.signature;switch(e){case r.binary:return null!==t.text?F.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return F.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,i;if(t.userID)i=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,e=t.userAttribute}const n=e.write();return F.concat([this.toSign(r.key,t),new Uint8Array([i]),F.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return F.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return I(C(this.signatureData),(e=>{r+=e.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==L.signature.binary&&this.signatureType!==L.signature.text||(t?i.push(new Uint8Array(6)):i.push(e.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(F.writeNumber(r,4)),F.concat(i)}))}toHash(e,t,r=!1){const i=this.toSign(e,t);return F.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,i=!1){if(6===this.version&&this.salt.length!==Js(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,i)),En.hash.digest(this.hashAlgorithm,r)}async verify(e,t,r,i=new Date,n=!1,s=_){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===L.signature.binary||t===L.signature.text;if(!(this[Gs]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(t,r,n),s=await this.hash(t,r,i)),s=await U(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===L.publicKey.hmac?e.privateParams:null;if(this[Gs]=await En.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,i,s),!this[Gs])throw Error("Signature verification failed")}const o=F.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+L.read(L.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[L.signature.binary,L.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+L.read(L.hash,this.hashAlgorithm).toUpperCase());if(this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=F.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ys(e,t,r){const i=[];return i.push($r(r.length+1)),i.push(new Uint8Array([(t?128:0)|e])),i.push(r),F.concat(i)}function Js(e){switch(e){case L.hash.sha256:return 16;case L.hash.sha384:return 24;case L.hash.sha512:return 32;case L.hash.sha224:case L.hash.sha3_256:return 16;case L.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Ws{static get tag(){return L.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new Ws;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ni(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new zs,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new zs,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),F.concatUint8Array(e)}calculateTrailer(...e){return Q((async()=>Vs.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==L.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!F.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!F.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function Zs(e,t){if(!t[e]){let t;try{t=L.read(L.packet,e)}catch(t){throw new si("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}Ws.prototype.hash=Vs.prototype.hash,Ws.prototype.toHash=Vs.prototype.toHash,Ws.prototype.toSign=Vs.prototype.toSign;class $s extends Array{static async fromBinary(e,t,r=_){const i=new $s;return await i.read(e,t,r),i}async read(e,t,r=_){r.additionalAllowedPackets.length&&(t={...t,...F.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=B(e,(async(e,i)=>{const n=M(i);try{for(;;){await n.ready;if(await ii(e,(async e=>{try{if(e.tag===L.packet.marker||e.tag===L.packet.trust||e.tag===L.packet.padding)return;const i=Zs(e.tag,t);i.packets=new $s,i.fromStream=F.isStream(e.packet),await i.read(e.packet,r),await n.write(i)}catch(t){if(t instanceof si){if(!(e.tag<=39))return;await n.abort(t)}const i=!r.ignoreUnsupportedPackets&&t instanceof ni,s=!(r.ignoreMalformedPackets||t instanceof ni);if(i||s||ri(e.tag))await n.abort(t);else{const t=new ai(e.tag,e.packet);await n.write(t)}F.printDebugError(t)}})))return await n.ready,void await n.close()}}catch(e){await n.abort(e)}}));const i=R(this.stream);for(;;){const{done:e,value:t}=await i.read();if(e?this.stream=null:this.push(t),e||ri(t.constructor.tag))break}i.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ai?this[t].tag:this[t].constructor.tag,i=this[t].write();if(F.isStream(i)&&ri(this[t].constructor.tag)){let t=[],n=0;const s=512;e.push(ei(r)),e.push(I(i,(e=>{if(t.push(e),n+=e.length,n>=s){const e=Math.min(Math.log(n)/Math.LN2|0,30),r=2**e,i=F.concat([Xr(e)].concat(t));return t=[i.subarray(1+r)],n=t[0].length,i.subarray(0,1+r)}}),(()=>F.concat([$r(n)].concat(t)))))}else{if(F.isStream(i)){let t=0;e.push(I(C(i),(e=>{t+=e.length}),(()=>ti(r,t))))}else e.push(ti(r,i.length));e.push(i)}}return F.concat(e)}filterByTag(...e){const t=new $s,r=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(r(this[i].constructor.tag))&&t.push(this[i]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,i=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(i(r[n].constructor.tag))&&t.push(n);return t}}const Xs=/*#__PURE__*/F.constructAllowedPackets([Os,Ws,Vs]);class ea{static get tag(){return L.packet.compressedData}constructor(e=_){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=_){await S(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),F.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=_){const t=L.read(L.compression,this.algorithm),r=sa[t];if(!r)throw Error(t+" decompression not supported");this.packets=await $s.fromBinary(r(this.compressed),Xs,e)}compress(){const e=L.read(L.compression,this.algorithm),t=na[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function ta(e,t){return r=>{if(!F.isStream(r)||u(r))return Q((()=>U(r).then((e=>new Promise(((r,i)=>{const n=new t;n.ondata=e=>{r(e)};try{n.push(e,!0)}catch(e){i(e)}}))))));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const i=r.getReader(),n=new t;return new ReadableStream({async start(e){for(n.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await i.read();if(e)return void n.push(new Uint8Array,!0);t.length&&n.push(t)}}})}}function ra(e){return function(t){return Q((async()=>e(await U(t))))}}const ia=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),na={zip:/*#__PURE__*/ta(ia("deflate-raw").compressor,ms),zlib:/*#__PURE__*/ta(ia("deflate").compressor,Es)},sa={uncompressed:e=>e,zip:/*#__PURE__*/ta(ia("deflate-raw").decompressor,bs),zlib:/*#__PURE__*/ta(ia("deflate").decompressor,ks),bzip2:/*#__PURE__*/ra(Hs)},aa=/*#__PURE__*/F.constructAllowedPackets([Os,ea,Ws,Vs]);class oa{static get tag(){return L.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new oa;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await S(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new ni(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):F.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=_){let i=this.packets.write();if(u(i)&&(i=await U(i)),2===this.version)this.cipherAlgorithm=e,this.salt=En.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await ca(this,"encrypt",t,i);else{const{blockSize:n}=En.getCipherParams(e),s=await En.getPrefixRandom(e),a=new Uint8Array([211,20]),o=F.concat([s,i,a]),c=await En.hash.sha1(K(o)),h=F.concat([o,c]);this.encrypted=await En.mode.cfb.encrypt(e,t,h,new Uint8Array(n),r)}return!0}async decrypt(e,t,r=_){let i,n=C(this.encrypted);if(u(n)&&(n=await U(n)),2===this.version)i=await ca(this,"decrypt",t,n);else{const{blockSize:s}=En.getCipherParams(e),a=await En.mode.cfb.decrypt(e,t,n,new Uint8Array(s)),o=P(K(a),-20),c=P(a,0,-20),h=Promise.all([U(await En.hash.sha1(K(c))),U(o)]).then((([e,t])=>{if(!F.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),u=P(c,s+2);i=P(u,0,-2),i=b([i,Q((()=>h))]),F.isStream(n)&&r.allowUnauthenticatedStream||(i=await U(i))}return this.packets=await $s.fromBinary(i,aa,r),!0}}async function ca(e,t,r,i){const n=e instanceof oa&&2===e.version,s=!n&&e.constructor.tag===L.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=En.getAEADMode(e.aeadAlgorithm),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,h=2**(e.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),y=new Uint8Array(l,0,5+u),f=new Uint8Array(l),g=new DataView(l),p=new Uint8Array(l,5,8);y.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,A,w=0,m=Promise.resolve(),b=0,k=0;if(n){const{keySize:t}=En.getCipherParams(e.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await Yi(L.hash.sha256,r,e.salt,n,t+i);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),A=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const v=await a(e.cipherAlgorithm,r);return B(i,(async(r,i)=>{if("array"!==F.isStream(r)){const t=new TransformStream({},{highWaterMark:F.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});E(t.readable,i),i=t.writable}const s=R(r),a=M(i);try{for(;;){let e=await s.readBytes(h+o)||new Uint8Array;const r=e.subarray(e.length-o);let i,l,E;if(e=e.subarray(0,e.length-o),n)E=d;else{E=d.slice();for(let e=0;e<8;e++)E[d.length-8+e]^=p[e]}if(!w||e.length?(s.unshift(r),i=v[t](e,E,y),i.catch((()=>{})),k+=e.length-o+c):(g.setInt32(5+u+4,b),i=v[t](r,E,f),i.catch((()=>{})),k+=c,l=!0),b+=e.length-o,m=m.then((()=>i)).then((async e=>{await a.ready,await a.write(e),k-=e.length})).catch((e=>a.abort(e))),(l||k>a.desiredSize)&&await m,l){await a.close();break}n?A.setInt32(d.length-4,++w):g.setInt32(9,++w)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const ha=/*#__PURE__*/F.constructAllowedPackets([Os,ea,Ws,Vs]);class ua{static get tag(){return L.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=L.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await S(e,(async e=>{const t=await e.readByte();if(1!==t)throw new ni(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=En.getAEADMode(this.aeadAlgorithm);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=_){this.packets=await $s.fromBinary(await ca(this,"decrypt",t,C(this.encrypted)),ha,r)}async encrypt(e,t,r=_){this.cipherAlgorithm=e;const{ivLength:i}=En.getAEADMode(this.aeadAlgorithm);this.iv=En.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await ca(this,"encrypt",t,n)}}class la{static get tag(){return L.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new zs,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new la;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?zs.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ni(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const i=r-1;this.publicKeyFingerprint=e.subarray(t,t+i),t+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=zs.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=En.parseEncSessionKeyParams(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===L.publicKey.x25519||this.publicKeyAlgorithm===L.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=L.write(L.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),En.serializeParams(this.publicKeyAlgorithm,this.encrypted)),F.concatUint8Array(e)}async encrypt(e){const t=L.write(L.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,i=ya(this.version,t,r,this.sessionKey),n=t===L.publicKey.aead?e.privateParams:null;this.encrypted=await En.publicKeyEncrypt(t,r,e.publicParams,n,i,e.getFingerprintBytes())}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?ya(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,i=await En.publicKeyDecrypt(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,e.getFingerprintBytes(),r),{sessionKey:n,sessionKeyAlgorithm:s}=function(e,t,r,i){switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.aead:{const t=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=F.writeChecksum(t.subarray(t.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(i){const t=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:F.selectUint8Array(t,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===e?null:F.selectUint8(t,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===e||L.read(L.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case L.publicKey.x25519:case L.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);3===this.version&&this.publicKeyAlgorithm!==L.publicKey.x25519&&this.publicKeyAlgorithm!==L.publicKey.x448&&(this.sessionKeyAlgorithm=s),this.sessionKey=n}}function ya(e,t,r,i){switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.aead:return F.concatUint8Array([new Uint8Array(6===e?[]:[r]),i,F.writeChecksum(i.subarray(i.length%8))]);case L.publicKey.x25519:case L.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class fa{static get tag(){return L.packet.symEncryptedSessionKey}constructor(e=_){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=L.symmetric.aes256,this.aeadAlgorithm=L.write(L.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ni(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const i=e[t++];if(this.s2k=Dn(i),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=En.getAEADMode(this.aeadAlgorithm);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;t=F.concatUint8Array([new Uint8Array([this.version,n,e,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?t=F.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=F.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=F.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=En.getCipherParams(t),n=await this.s2k.produceKey(e,i);if(this.version>=5){const e=En.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|fa.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await Yi(L.hash.sha256,n,new Uint8Array,r,i):n,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await En.mode.cfb.decrypt(t,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=L.write(L.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length)}else this.sessionKey=n}async encrypt(e,t=_){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=Pn(t),this.s2k.generateSalt();const{blockSize:i,keySize:n}=En.getCipherParams(r),s=await this.s2k.produceKey(e,n);if(null===this.sessionKey&&(this.sessionKey=En.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const e=En.getAEADMode(this.aeadAlgorithm);this.iv=En.random.getRandomBytes(e.ivLength);const t=new Uint8Array([192|fa.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await Yi(L.hash.sha256,s,new Uint8Array,t,n):s,a=await e(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=F.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await En.mode.cfb.encrypt(r,s,e,new Uint8Array(i),t)}}}class ga{static get tag(){return L.packet.publicKey}constructor(e=new Date,t=_){this.version=t.v6Keys?6:4,this.created=F.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new ga,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e){let t=0;if(this.version=e[t++],4===this.version||5===this.version||6===this.version){this.created=F.readDate(e.subarray(t,t+4)),t+=4,this.algorithm=e[t++],this.version>=5&&(t+=4);const{read:r,publicParams:i}=En.parsePublicKeyParams(this.algorithm,e.subarray(t));if(6===this.version&&i.oid&&(i.oid.getName()===L.curve.curve25519Legacy||i.oid.getName()===L.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,t+=r,await this.computeFingerprintAndKeyID(),t}throw new ni(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(F.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=En.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&e.push(F.writeNumber(t.length,4)),e.push(t),F.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,i=e>=5?4:2;return F.concatUint8Array([new Uint8Array([r]),F.writeNumber(t.length,i),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new zs,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await En.hash.sha256(e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await En.hash.sha1(e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return F.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&F.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=L.read(L.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=F.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}ga.prototype.readPublicKey=ga.prototype.read,ga.prototype.writePublicKey=ga.prototype.write;const pa=/*#__PURE__*/F.constructAllowedPackets([Os,ea,Ws,Vs]);class da{static get tag(){return L.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=_){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=En.getCipherParams(e),n=await U(C(this.encrypted)),s=await En.mode.cfb.decrypt(e,t,n.subarray(i+2),n.subarray(2,i+2));this.packets=await $s.fromBinary(s,pa,r)}async encrypt(e,t,r=_){const i=this.packets.write(),{blockSize:n}=En.getCipherParams(e),s=await En.getPrefixRandom(e),a=await En.mode.cfb.encrypt(e,t,s,new Uint8Array(n),r),o=await En.mode.cfb.encrypt(e,t,i,a.subarray(2),r);this.encrypted=F.concat([a,o])}}class Aa extends ga{static get tag(){return L.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new Aa,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class wa{static get tag(){return L.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=Zr(e.subarray(t,e.length));t+=r.offset,this.attributes.push(F.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push($r(this.attributes[t].length)),e.push(F.stringToUint8Array(this.attributes[t]));return F.concatUint8Array(e)}equals(e){return!!(e&&e instanceof wa)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class ma extends ga{static get tag(){return L.packet.secretKey}constructor(e=new Date,t=_){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=_){let r=await this.readPublicKey(e);const i=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=Dn(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+En.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+En.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(i),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!F.equalsUint8Array(F.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=En.parsePrivateKeyParams(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof ni)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return F.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=En.serializeParams(this.algorithm,this.privateParams)),5===this.version&&t.push(F.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(F.writeChecksum(this.keyMaterial))),F.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=_){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=Dn(L.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=L.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=_){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=Pn(t),this.s2k.generateSalt();const r=En.serializeParams(this.algorithm,this.privateParams);this.symmetric=L.symmetric.aes256;const{blockSize:i}=En.getCipherParams(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=L.aead.eax;const t=En.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const n=ei(this.constructor.tag),s=await ba(this.version,this.s2k,e,this.symmetric,this.aead,n),a=await t(this.symmetric,s);this.iv=this.isLegacyAEAD?En.random.getRandomBytes(i):En.random.getRandomBytes(t.ivLength);const o=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([n,this.writePublicKey()]);this.keyMaterial=await a.encrypt(r,this.iv.subarray(0,t.ivLength),o)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const n=await ba(this.version,this.s2k,e,this.symmetric);this.iv=En.random.getRandomBytes(i),this.keyMaterial=await En.mode.cfb.encrypt(this.symmetric,n,F.concatUint8Array([r,await En.hash.sha1(r,t)]),this.iv,t)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=ei(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(t=await ba(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const e=En.getAEADMode(this.aead),n=await e(this.symmetric,t);try{const t=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await En.mode.cfb.decrypt(this.symmetric,t,this.keyMaterial,this.iv);i=e.subarray(0,-20);const r=await En.hash.sha1(i);if(!F.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=En.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await En.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===L.publicKey.ecdh&&t===L.curve.curve25519Legacy||this.algorithm===L.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await En.generateParams(this.algorithm,e,t,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function ba(e,t,r,i,n,s,a){const{keySize:o}=En.getCipherParams(i),c=await t.produceKey(r,o);if(!n||5===e||a)return c;const h=F.concatUint8Array([s,new Uint8Array([e,i,n])]);return Yi(L.hash.sha256,c,new Uint8Array,h,o)}class Ea{static get tag(){return L.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(F.isString(e)||e.name&&!F.isString(e.name)||e.email&&!F.isEmailAddress(e.email)||e.comment&&!F.isString(e.comment))throw Error("Invalid user ID format");const t=new Ea;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=_){const r=F.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:e,comment:t,email:r}=i.groups;this.comment=t?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=e?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return F.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class ka extends ma{static get tag(){return L.packet.secretSubkey}constructor(e=new Date,t=_){super(e,t)}}const va=/*#__PURE__*/F.constructAllowedPackets([Vs]);class Ia{constructor(e){this.packets=e||new $s}write(){return this.packets.write()}armor(e=_){const t=this.packets.some((e=>e.constructor.tag===Vs.tag&&6!==e.version));return re(L.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function Ba(e,t){const r=new ka(e.date,t);return r.packets=null,r.algorithm=L.write(L.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Sa(e,t){const r=new ma(e.date,t);return r.packets=null,r.algorithm=L.write(L.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Ca(e,t,r,i,n=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,i,n,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw F.wrapError(`Could not find valid ${L.read(L.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function Ka(e,t,r=new Date){const i=F.normalizeDate(r);if(null!==i){const r=Qa(e,t);return!(e.created<=i&&i<r)}return!1}async function Da(e,t,r,i){const n={};n.key=t,n.bind=e;const s={signatureType:L.signature.subkeyBinding};r.sign?(s.keyFlags=[L.keyFlags.signData],s.embeddedSignature=await Pa(n,null,e,{signatureType:L.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[L.keyFlags.forwardedCommunication]:[L.keyFlags.encryptCommunication|L.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await Pa(n,null,t,s,r.date,void 0,void 0,void 0,i)}async function Pa(e,t,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Vs;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(e,t,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(e){const t=await e.getPrimarySelfSignature(r,i,n);t.preferredHashAlgorithms&&([a]=t.preferredHashAlgorithms,s=En.hash.getHashByteLength(s)<=En.hash.getHashByteLength(a)?a:s)}switch(t.algorithm){case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ed25519:case L.publicKey.ed448:a=En.getPreferredCurveHashAlgo(t.algorithm,t.publicParams.oid)}return En.hash.getHashByteLength(s)<=En.hash.getHashByteLength(a)?a:s}(t,r,n,s,c),h.rawNotations=[...a],await h.sign(r,e,n,o,c),h}async function Ua(e,t,r,i=new Date,n){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(i)||n&&!await n(e)||t[r].some((function(t){return F.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function xa(e,t,r,i,n,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(i.map((async function(e){try{n&&!e.issuerKeyID.equals(n.issuerKeyID)||(await e.verify(s,t,r,a,!1,o),c.push(e.issuerKeyID))}catch(e){}}))),n?(n.revoked=!!c.some((e=>e.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function Qa(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function Ra(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=F.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"ecc":try{e.curve=L.write(L.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==L.curve.ed25519Legacy&&e.curve!==L.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?L.curve.ed25519Legacy:L.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===L.curve.ed25519Legacy?L.publicKey.eddsaLegacy:L.publicKey.ecdsa:e.algorithm=L.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?L.publicKey.ed25519:L.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?L.publicKey.ed448:L.publicKey.x448;break;case"rsa":e.algorithm=L.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=L.publicKey.hmac;try{e.symmetric=L.write(L.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=L.publicKey.aead;try{e.symmetric=L.write(L.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function Ma(e,t,r){switch(e.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.dsa:case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ed25519:case L.publicKey.ed448:case L.publicKey.hmac:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.signData);default:return!1}}function Ta(e,t,r){switch(e.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.x25519:case L.publicKey.x448:case L.publicKey.aead:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&L.keyFlags.encryptStorage);default:return!1}}function La(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.x25519:case L.publicKey.x448:return!(!(!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&L.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&L.keyFlags.forwardedCommunication));default:return!1}}function _a(e,t){const r=L.write(L.publicKey,e.algorithm),i=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.rsaEncrypt:if(i.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ecdh:if(t.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class Na{constructor(e,t){this.userID=e.constructor.tag===L.packet.userID?e:null,this.userAttribute=e.constructor.tag===L.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new $s;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new Na(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new Na(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return Pa(n,e,s.keyPacket,{signatureType:L.signature.certGeneric,keyFlags:[L.keyFlags.certifyKeys|L.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,i=_){const n=this.mainKey.keyPacket;return xa(n,L.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,i)}async verifyCertificate(e,t,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,i);if(e.revoked||await n.isRevoked(e,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,L.signature.certGeneric,a,r,void 0,i)}catch(e){throw F.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(i,L.signature.certGeneric,n,e,void 0,t)}catch(e){throw F.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await Ua(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(i,L.signature.certGeneric,n,t,!1,r),!0}catch(e){return!1}})),await Ua(e,this,"otherCertifications",t),await Ua(e,this,"revocationSignatures",t,(function(e){return xa(i,L.signature.certRevocation,n,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=L.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=_){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new Na(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await Pa(s,null,e,{signatureType:L.signature.certRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class Fa{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new $s;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Fa(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,i=_){const n=this.mainKey.keyPacket;return xa(n,L.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verify(e=new Date,t=_){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await Ca(this.bindingSignatures,r,L.signature.subkeyBinding,i,e,t);if(n.revoked||await this.isRevoked(n,null,e,t))throw Error("Subkey is revoked");if(Ka(this.keyPacket,n,e))throw Error("Subkey is expired");return n}async getExpirationTime(e=new Date,t=_){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await Ca(this.bindingSignatures,r,L.signature.subkeyBinding,i,e,t)}catch(e){return null}const s=Qa(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=_){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===L.packet.publicSubkey&&e.keyPacket.constructor.tag===L.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await Ua(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<n.bindingSignatures.length;t++)if(n.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>n.bindingSignatures[t].created&&(n.bindingSignatures[t]=e),!1;try{return await e.verify(i,L.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await Ua(e,this,"revocationSignatures",t,(function(e){return xa(i,L.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=L.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=_){const s={key:e,bind:this.keyPacket},a=new Fa(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await Pa(s,null,e,{signatureType:L.signature.subkeyRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{Fa.prototype[e]=function(){return this.keyPacket[e]()}}));const Ha=/*#__PURE__*/F.constructAllowedPackets([Vs]),Oa=new Set([L.packet.publicKey,L.packet.privateKey]),za=new Set([L.packet.publicKey,L.packet.privateKey,L.packet.publicSubkey,L.packet.privateSubkey]);class Ga{packetListToStructure(e,t=new Set){let r,i,n,s;for(const a of e){if(a instanceof ai){za.has(a.tag)&&!s&&(s=Oa.has(a.tag)?Oa:za);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case L.packet.publicKey:case L.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case L.packet.userID:case L.packet.userAttribute:r=new Na(a,this),this.users.push(r);break;case L.packet.publicSubkey:case L.packet.secretSubkey:r=null,n=new Fa(a,this),this.subkeys.push(n);break;case L.packet.signature:switch(a.signatureType){case L.signature.certGeneric:case L.signature.certPersona:case L.signature.certCasual:case L.signature.certPositive:if(!r){F.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case L.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case L.signature.key:this.directSignatures.push(a);break;case L.signature.subkeyBinding:if(!n){F.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case L.signature.keyRevocation:this.revocationSignatures.push(a);break;case L.signature.subkeyRevocation:if(!n){F.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const e=new $s;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},i=_){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{_a(n,i)}catch(e){throw F.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await Ca(r.bindingSignatures,n,L.signature.subkeyBinding,e,t,i);if(!Ma(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await Ca([s.embeddedSignature],r.keyPacket,L.signature.keyBinding,e,t,i),_a(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Ma(n,s,i))return _a(n,i),this}catch(e){a=e}throw F.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},i=_){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{_a(n,i)}catch(e){throw F.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await Ca(r.bindingSignatures,n,L.signature.subkeyBinding,e,t,i);if(Ta(r.keyPacket,s,i))return _a(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Ta(n,s,i))return _a(n,i),this}catch(e){a=e}throw F.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,i=_){return xa(this.keyPacket,L.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verifyPrimaryKey(e=new Date,t={},r=_){const i=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(Ka(i,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==i.version){const t=await Ca(this.directSignatures,i,L.signature.key,{key:i},e,r).catch((()=>{}));if(t&&Ka(i,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=_){let r;try{const i=await this.getPrimarySelfSignature(null,e,t),n=Qa(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await Ca(this.directSignatures,this.keyPacket,L.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=Qa(this.keyPacket,a);r=Math.min(n,s,e)}else r=n<s?n:s}catch(e){r=null}return F.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=_){const i=this.keyPacket;if(6===i.version)return Ca(this.directSignatures,i,L.signature.key,{key:i},e,r);const{selfCertification:n}=await this.getPrimaryUser(e,t,r);return n}async getPrimaryUser(e=new Date,t={},r=_){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await Ca(s.selfCertifications,i,L.signature.certGeneric,o,e,r);n.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=n.sort((function(e,t){const r=e.selfCertification,i=t.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=_){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const i=this.clone();return await Ua(e,i,"revocationSignatures",t,(n=>xa(i.keyPacket,L.signature.keyRevocation,i,[n],null,e.keyPacket,t,r))),await Ua(e,i,"directSignatures",t),await Promise.all(e.users.map((async e=>{const n=i.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const n=i.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.subkeys.push(t)}}))),i}async getRevocationCertificate(e=new Date,t=_){const r={key:this.keyPacket},i=await Ca(this.revocationSignatures,this.keyPacket,L.signature.keyRevocation,r,e,t),n=new $s;n.push(i);const s=6!==this.keyPacket.version;return re(L.armor.publicKey,n.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=_){const i=await te(e),n=(await $s.fromBinary(i.data,Ha,r)).findPacket(L.packet.signature);if(!n||n.signatureType!==L.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,L.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw F.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(e,t,r,i=_){const{index:n,user:s}=await this.getPrimaryUser(t,r,i),a=await s.certify(e,t,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(e,t=new Date,r=_){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(e,t,r)}))),i}async verifyPrimaryUser(e,t=new Date,r,i=_){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,i);return e?await s.verifyAllCertifications(e,t,i):[{keyID:n.getKeyID(),valid:await s.verify(t,i).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=_){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:i.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];n.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{Ga.prototype[e]=Fa.prototype[e]}));class ja extends Ga{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([L.packet.secretKey,L.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=_){const t=6!==this.keyPacket.version;return re(L.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class qa extends ja{constructor(e){if(super(),this.packetListToStructure(e,new Set([L.packet.publicKey,L.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new $s,t=this.toPacketList();let r=!1;for(const i of t)if(!r||i.constructor.tag!==L.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case L.packet.secretKey:{if(i.algorithm===L.publicKey.aead||i.algorithm===L.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=ga.fromSecretKeyPacket(i);e.push(t);break}case L.packet.secretSubkey:{if(i.algorithm===L.publicKey.aead||i.algorithm===L.publicKey.hmac){r=!0;break}const t=Aa.fromSecretSubkeyPacket(i);e.push(t);break}default:e.push(i)}return new ja(e)}armor(e=_){const t=6!==this.keyPacket.version;return re(L.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},i=_){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0))try{const e={key:n,bind:this.subkeys[r].keyPacket},a=await Ca(this.subkeys[r].bindingSignatures,n,L.signature.subkeyBinding,e,t,i);La(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(e){}const a=await this.getPrimarySelfSignature(t,r,i);return e&&!n.getKeyID().equals(e,!0)||!La(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=_){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=L.reasonForRevocation.noReason,string:t=""}={},r=new Date,i=_){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await Pa(n,null,this.keyPacket,{signatureType:L.signature.keyRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,i)),s}async addSubkey(e={}){const t={..._,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(e){switch(L.write(L.publicKey,e)){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.dsa:return"rsa";case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:return"ecc";case L.publicKey.ed25519:return"curve25519";case L.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",e=Ra(e,i);const n=await Ba(e,{...t,v6Keys:6===this.keyPacket.version});_a(n,t);const s=await Da(n,r,e,t),a=this.toPacketList();return a.push(n,s),new qa(a)}}const Va=/*#__PURE__*/F.constructAllowedPackets([ga,Aa,ma,ka,Ea,wa,Vs]);function Ya(e){for(const t of e)switch(t.constructor.tag){case L.packet.secretKey:return new qa(e);case L.packet.publicKey:return new ja(e)}throw Error("No key packet found")}async function Ja(e,t,r,i){r.passphrase&&await e.encrypt(r.passphrase,i),await Promise.all(t.map((async function(e,t){const n=r.subkeys[t].passphrase;n&&await e.encrypt(n,i)})));const n=new $s;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[L.keyFlags.certifyKeys|L.keyFlags.signData];const n=s([L.symmetric.aes256,L.symmetric.aes128],i.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=n,i.aeadProtect){const e=s([L.aead.gcm,L.aead.eax,L.aead.ocb],i.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>n.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([L.hash.sha256,L.hash.sha512,...6===e.version?[L.hash.sha3_256,L.hash.sha3_512]:[]],i.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([L.compression.uncompressed,L.compression.zlib,L.compression.zip],i.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=L.features.modificationDetection,i.aeadProtect&&(t.features[0]|=L.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(n.push(e),6===e.version){const t={key:e},s=a();s.signatureType=L.signature.key;const o=await Pa(t,null,e,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(t,n){const s=Ea.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=L.signature.certGeneric,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await Pa(o,null,e,c,r.date,void 0,void 0,void 0,i)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{n.push(e),n.push(t)}))})),await Promise.all(t.map((async function(t,n){const s=r.subkeys[n];return{secretSubkeyPacket:t,subkeySignaturePacket:await Da(t,e,s,i)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{n.push(e),n.push(t)}))}));const o={key:e};return n.push(await Pa(o,null,e,{signatureType:L.signature.keyRevocation,reasonForRevocationFlag:L.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new qa(n)}const Wa=/*#__PURE__*/F.constructAllowedPackets([Os,ea,ua,oa,da,la,fa,Ws,Vs]),Za=/*#__PURE__*/F.constructAllowedPackets([fa]),$a=/*#__PURE__*/F.constructAllowedPackets([Vs]);class Xa{constructor(e){this.packets=e||new $s}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(L.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(L.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(L.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,i=new Date,n=_){const s=this.packets.filterByTag(L.packet.symmetricallyEncryptedData,L.packet.symEncryptedIntegrityProtectedData,L.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!F.isUint8Array(t)||!a.cipherAlgorithm&&!F.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||L.write(L.symmetric,e);await a.decrypt(r,t,n)}catch(e){F.printDebugError(e),h=e}})));if(x(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new Xa(a.packets);return a.packets=new $s,l}async decryptSessionKeys(e,t,r,i=new Date,n=_){let s,a=[];if(t){const e=this.packets.filterByTag(L.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let i;i=r?await $s.fromBinary(e.write(),Za,n):e,await Promise.all(i.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){F.printDebugError(e),e instanceof kn&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(L.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o=[L.symmetric.aes256,L.symmetric.aes128,L.symmetric.tripledes,L.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(i,void 0,n);t.preferredSymmetricAlgorithms&&(o=o.concat(t.preferredSymmetricAlgorithms))}catch(e){}const c=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,n)).map((e=>e.keyPacket));await Promise.all(c.map((async function(e){if(!e||e.isDummy())return;if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===L.publicKey.rsaEncrypt||t.publicKeyAlgorithm===L.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===L.publicKey.rsaSign||t.publicKeyAlgorithm===L.publicKey.elgamal)){const i=t.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new la;r.read(i);const n={sessionKeyAlgorithm:t,sessionKey:En.generateSessionKey(t)};try{await r.decrypt(e,n),a.push(r)}catch(e){F.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const i=r||t.sessionKeyAlgorithm;if(i&&!o.includes(L.write(L.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){F.printDebugError(e),s=e}})))}))),x(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+F.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&L.read(L.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],i=_){const{symmetricAlgo:n,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],i=_){const n=await Promise.all(e.map(((e,n)=>e.getPrimarySelfSignature(t,r[n],i))));if(e.length?!i.ignoreSEIPDv2FeatureFlag&&n.every((e=>e.features&&e.features[0]&L.features.seipdv2)):i.aeadProtect){const e={symmetricAlgo:L.symmetric.aes128,aeadAlgo:L.aead.ocb},t={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((e=>e.preferredCipherSuites&&e.preferredCipherSuites.some((e=>e[0]===t.symmetricAlgo&&e[1]===t.aeadAlgo))))?t:e}const s=L.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,i),a=L.read(L.symmetric,n),o=s?L.read(L.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===L.publicKey.x25519||e.keyPacket.algorithm===L.publicKey.x448)&&!o&&!F.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:En.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,i=!1,n=[],s=new Date,a=[],o=_){if(r){if(!F.isUint8Array(r.data)||!F.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Xa.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Xa.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await Xa.encryptSessionKey(c,h,u,e,t,i,n,s,a,o),y=oa.fromObject({version:u?2:1,aeadAlgorithm:u?L.write(L.aead,u):null});y.packets=this.packets;const f=L.write(L.symmetric,h);return await y.encrypt(f,c,o),l.packets.push(y),y.packets=new $s,l}static async encryptSessionKey(e,t,r,i,n,s=!1,a=[],o=new Date,c=[],h=_){const u=new $s,l=L.write(L.symmetric,t),y=r&&L.write(L.aead,r);if(i){const t=await Promise.all(i.map((async function(t,r){const i=await t.getEncryptionKey(a[r],o,c,h),n=la.fromObject({version:y?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...t)}if(n){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,i=async function(e,s,a,o){const c=new fa(h);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((e=>t(c,e))))).reduce(r))return i(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((t=>i(e,l,y,t))));u.push(...s)}return new Xa(u)}async sign(e=[],t=null,r=[],i=new Date,n=[],s=[],a=_){const o=new $s,c=this.packets.findPacket(L.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await eo(c,e,t,r,i,n,s,!1,a),u=h.map(((e,t)=>Ws.fromSignaturePacket(e,0===t))).reverse();return o.push(...u),o.push(c),o.push(...h),new Xa(o)}compress(e,t=_){if(e===L.compression.uncompressed)return this;const r=new ea(t);r.algorithm=e,r.packets=this.packets;const i=new $s;return i.push(r),new Xa(i)}async signDetached(e=[],t=null,r=[],i=new Date,n=[],s=[],a=_){const o=this.packets.findPacket(L.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new Ia(await eo(o,e,t,r,i,n,s,!0,a))}async verify(e,t=new Date,r=_){const i=this.unwrapCompressed(),n=i.packets.filterByTag(L.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");u(i.packets.stream)&&i.packets.push(...await U(i.packets.stream,(e=>e||[])));const s=i.packets.filterByTag(L.packet.onePassSignature).reverse(),a=i.packets.filterByTag(L.packet.signature);return s.length&&!a.length&&F.isStream(i.packets.stream)&&!u(i.packets.stream)?(await Promise.all(s.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=Q((async()=>(await e.correspondingSig).signatureData)),e.hashed=U(await e.hash(e.signatureType,n[0],void 0,!1)),e.hashed.catch((()=>{}))}))),i.packets.stream=B(i.packets.stream,(async(e,t)=>{const r=R(e),i=M(t);try{for(let e=0;e<s.length;e++){const{value:t}=await r.read();s[e].correspondingSigResolve(t)}await r.readToEnd(),await i.ready,await i.close()}catch(e){s.forEach((t=>{t.correspondingSigReject(e)})),await i.abort(e)}})),to(s,n,e,t,!1,r)):to(a,n,e,t,!1,r)}verifyDetached(e,t,r=new Date,i=_){const n=this.unwrapCompressed().packets.filterByTag(L.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return to(e.packets.filterByTag(L.packet.signature),n,t,r,!0,i)}unwrapCompressed(){const e=this.packets.filterByTag(L.packet.compressedData);return e.length?new Xa(e[0].packets):this}async appendSignature(e,t=_){await this.packets.read(F.isUint8Array(e)?e:(await te(e)).data,$a,t)}write(){return this.packets.write()}armor(e=_){const t=this.packets[this.packets.length-1],r=t.constructor.tag===oa.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===Vs.tag&&6!==e.version));return re(L.armor.message,this.write(),null,null,null,r,e)}}async function eo(e,t,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=_){const h=new $s,u=null===e.text?L.signature.binary:L.signature.text;if(await Promise.all(t.map((async(t,r)=>{const h=s[r];if(!t.isPrivate())throw Error("Need private key for signing");const l=await t.getSigningKey(i[r],n,h,c);return Pa(e,t,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((e=>{h.push(...e)})),r){const e=r.packets.filterByTag(L.packet.signature);h.push(...e)}return h}async function to(e,t,r,i=new Date,n=!1,s=_){return Promise.all(e.filter((function(e){return["text","binary"].includes(L.read(L.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,i=new Date,n=!1,s=_){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof Ws?e.correspondingSig:e,h={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new $s;return e&&t.push(e),new Ia(t)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(e,t,r,i,n,s)})))}const ro=/*#__PURE__*/F.constructAllowedPackets([Vs]);class io{constructor(e,t){if(this.text=F.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof Ia))throw Error("Invalid signature input");this.signature=t||new Ia(new $s)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=null,r=[],i=new Date,n=[],s=[],a=_){const o=new Os;o.setText(this.text);const c=new Ia(await eo(o,e,t,r,i,n,s,!0,a));return new io(this.text,c)}verify(e,t=new Date,r=_){const i=this.signature.packets.filterByTag(L.packet.signature),n=new Os;return n.setText(this.text),to(i,[n],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=_){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>L.read(L.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return re(L.armor.signed,r,void 0,void 0,void 0,t,e)}}function no(e){if(!(e instanceof Xa))throw Error("Parameter [message] needs to be of type Message")}function so(e){if(!(e instanceof io||e instanceof Xa))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function ao(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const oo=Object.keys(_).length;function co(e){const t=Object.keys(e);if(t.length!==oo)for(const e of t)if(void 0===_[e])throw Error("Unknown config property: "+e)}function ho(e){return e&&!F.isArray(e)&&(e=[e]),e}async function uo(e){return"array"===F.isStream(e)?U(e):e}function lo(e,t){e.data=B(t.packets.stream,(async(t,r)=>{await E(e.data,r,{preventClose:!0});const i=M(r);try{await U(t,(e=>e)),await i.close()}catch(e){await i.abort(e)}}))}function yo(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}function fo(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, not "+e)}function go(e,...t){if(!((r=e)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function po(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Ao(e,t){go(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const wo=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0,mo=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),bo=(e,t)=>e<<32-t|e>>>t,Eo=(e,t)=>e<<t|e>>>32-t>>>0,ko=68===new Uint8Array(new Uint32Array([287454020]).buffer)[0];
3
+ /*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function vo(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function Io(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}function Bo(e){return"string"==typeof e&&(e=Io(e)),go(e),e}function So(...e){let t=0;for(let r=0;r<e.length;r++){const i=e[r];go(i),t+=i.length}const r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}class Co{clone(){return this._cloneInto()}}function Ko(e){const t=t=>e().update(Bo(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function Do(e=32){if(wo&&"function"==typeof wo.getRandomValues)return wo.getRandomValues(new Uint8Array(e));throw Error("crypto.getRandomValues must be defined")}class Po extends Co{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,function(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.wrapConstructor");fo(e.outputLen),fo(e.blockLen)}(e);const r=Bo(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const i=this.blockLen,n=new Uint8Array(i);n.set(r.length>i?e.create().update(r).digest():r);for(let e=0;e<n.length;e++)n[e]^=54;this.iHash.update(n),this.oHash=e.create();for(let e=0;e<n.length;e++)n[e]^=106;this.oHash.update(n),n.fill(0)}update(e){return po(this),this.iHash.update(e),this}digestInto(e){po(this),go(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:s,outputLen:a}=this;return e.finished=i,e.destroyed=n,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const Uo=(e,t,r)=>new Po(e,t).update(r).digest();Uo.create=(e,t)=>new Po(e,t)
4
+ /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */;const xo=BigInt(0),Qo=BigInt(1),Ro=BigInt(2);function Mo(e){return e instanceof Uint8Array||null!=e&&"object"==typeof e&&"Uint8Array"===e.constructor.name}function To(e){if(!Mo(e))throw Error("Uint8Array expected")}const Lo=/* @__PURE__ */Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function _o(e){To(e);let t="";for(let r=0;r<e.length;r++)t+=Lo[e[r]];return t}function No(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function Fo(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return BigInt(""===e?"0":"0x"+e)}const Ho={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function Oo(e){return e>=Ho._0&&e<=Ho._9?e-Ho._0:e>=Ho._A&&e<=Ho._F?e-(Ho._A-10):e>=Ho._a&&e<=Ho._f?e-(Ho._a-10):void 0}function zo(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);const t=e.length,r=t/2;if(t%2)throw Error("padded hex string expected, got unpadded hex of length "+t);const i=new Uint8Array(r);for(let t=0,n=0;t<r;t++,n+=2){const r=Oo(e.charCodeAt(n)),s=Oo(e.charCodeAt(n+1));if(void 0===r||void 0===s){const t=e[n]+e[n+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+n)}i[t]=16*r+s}return i}function Go(e){return Fo(_o(e))}function jo(e){return To(e),Fo(_o(Uint8Array.from(e).reverse()))}function qo(e,t){return zo(e.toString(16).padStart(2*t,"0"))}function Vo(e,t){return qo(e,t).reverse()}function Yo(e,t,r){let i;if("string"==typeof t)try{i=zo(t)}catch(r){throw Error(`${e} must be valid hex string, got "${t}". Cause: ${r}`)}else{if(!Mo(t))throw Error(e+" must be hex string or Uint8Array");i=Uint8Array.from(t)}const n=i.length;if("number"==typeof r&&n!==r)throw Error(`${e} expected ${r} bytes, got ${n}`);return i}function Jo(...e){let t=0;for(let r=0;r<e.length;r++){const i=e[r];To(i),t+=i.length}const r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}const Wo=e=>(Ro<<BigInt(e-1))-Qo,Zo=e=>new Uint8Array(e),$o=e=>Uint8Array.from(e);function Xo(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let i=Zo(e),n=Zo(e),s=0;const a=()=>{i.fill(1),n.fill(0),s=0},o=(...e)=>r(n,i,...e),c=(e=Zo())=>{n=o($o([0]),e),i=o(),0!==e.length&&(n=o($o([1]),e),i=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){i=o();const t=i.slice();r.push(t),e+=i.length}return Jo(...r)};return(e,t)=>{let r;for(a(),c(e);!(r=t(h()));)c();return a(),r}}const ec={bigint:e=>"bigint"==typeof e,function:e=>"function"==typeof e,boolean:e=>"boolean"==typeof e,string:e=>"string"==typeof e,stringOrUint8Array:e=>"string"==typeof e||Mo(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>"function"==typeof e&&Number.isSafeInteger(e.outputLen)};function tc(e,t,r={}){const i=(t,r,i)=>{const n=ec[r];if("function"!=typeof n)throw Error(`Invalid validator "${r}", expected function`);const s=e[t];if(!(i&&void 0===s||n(s,e)))throw Error(`Invalid param ${t+""}=${s} (${typeof s}), expected ${r}`)};for(const[e,r]of Object.entries(t))i(e,r,!1);for(const[e,t]of Object.entries(r))i(e,t,!0);return e}var rc=/*#__PURE__*/Object.freeze({__proto__:null,abytes:To,bitGet:function(e,t){return e>>BigInt(t)&Qo},bitLen:function(e){let t;for(t=0;e>xo;e>>=Qo,t+=1);return t},bitMask:Wo,bitSet:function(e,t,r){return e|(r?Qo:xo)<<BigInt(t)},bytesToHex:_o,bytesToNumberBE:Go,bytesToNumberLE:jo,concatBytes:Jo,createHmacDrbg:Xo,ensureBytes:Yo,equalBytes:function(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return 0===r},hexToBytes:zo,hexToNumber:Fo,isBytes:Mo,numberToBytesBE:qo,numberToBytesLE:Vo,numberToHexUnpadded:No,numberToVarBytesBE:function(e){return zo(No(e))},utf8ToBytes:function(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))},validateObject:tc});
5
+ /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const ic=BigInt(0),nc=BigInt(1),sc=BigInt(2),ac=BigInt(3),oc=BigInt(4),cc=BigInt(5),hc=BigInt(8);function uc(e,t){const r=e%t;return r>=ic?r:t+r}function lc(e,t,r){if(r<=ic||t<ic)throw Error("Expected power/modulo > 0");if(r===nc)return ic;let i=nc;for(;t>ic;)t&nc&&(i=i*e%r),e=e*e%r,t>>=nc;return i}function yc(e,t,r){let i=e;for(;t-- >ic;)i*=i,i%=r;return i}function fc(e,t){if(e===ic||t<=ic)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=uc(e,t),i=t,n=ic,s=nc;for(;r!==ic;){const e=i%r,t=n-s*(i/r);i=r,r=e,n=s,s=t}if(i!==nc)throw Error("invert: does not exist");return uc(n,t)}function gc(e){if(e%oc===ac){const t=(e+nc)/oc;return function(e,r){const i=e.pow(r,t);if(!e.eql(e.sqr(i),r))throw Error("Cannot find square root");return i}}if(e%hc===cc){const t=(e-cc)/hc;return function(e,r){const i=e.mul(r,sc),n=e.pow(i,t),s=e.mul(r,n),a=e.mul(e.mul(s,sc),n),o=e.mul(s,e.sub(a,e.ONE));if(!e.eql(e.sqr(o),r))throw Error("Cannot find square root");return o}}return function(e){const t=(e-nc)/sc;let r,i,n;for(r=e-nc,i=0;r%sc===ic;r/=sc,i++);for(n=sc;n<e&&lc(n,t,e)!==e-nc;n++);if(1===i){const t=(e+nc)/oc;return function(e,r){const i=e.pow(r,t);if(!e.eql(e.sqr(i),r))throw Error("Cannot find square root");return i}}const s=(r+nc)/sc;return function(e,a){if(e.pow(a,t)===e.neg(e.ONE))throw Error("Cannot find square root");let o=i,c=e.pow(e.mul(e.ONE,n),r),h=e.pow(a,s),u=e.pow(a,r);for(;!e.eql(u,e.ONE);){if(e.eql(u,e.ZERO))return e.ZERO;let t=1;for(let r=e.sqr(u);t<o&&!e.eql(r,e.ONE);t++)r=e.sqr(r);const r=e.pow(c,nc<<BigInt(o-t-1));c=e.sqr(r),h=e.mul(h,r),u=e.mul(u,c),o=t}return h}}(e)}BigInt(9),BigInt(16);const pc=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function dc(e,t){const r=void 0!==t?t:e.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function Ac(e,t,r=!1,i={}){if(e<=ic)throw Error("Expected Field ORDER > 0, got "+e);const{nBitLength:n,nByteLength:s}=dc(e,t);if(s>2048)throw Error("Field lengths over 2048 bytes are not supported");const a=gc(e),o=Object.freeze({ORDER:e,BITS:n,BYTES:s,MASK:Wo(n),ZERO:ic,ONE:nc,create:t=>uc(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("Invalid field element: expected bigint, got "+typeof t);return ic<=t&&t<e},is0:e=>e===ic,isOdd:e=>(e&nc)===nc,neg:t=>uc(-t,e),eql:(e,t)=>e===t,sqr:t=>uc(t*t,e),add:(t,r)=>uc(t+r,e),sub:(t,r)=>uc(t-r,e),mul:(t,r)=>uc(t*r,e),pow:(e,t)=>function(e,t,r){if(r<ic)throw Error("Expected power > 0");if(r===ic)return e.ONE;if(r===nc)return t;let i=e.ONE,n=t;for(;r>ic;)r&nc&&(i=e.mul(i,n)),n=e.sqr(n),r>>=nc;return i}(o,e,t),div:(t,r)=>uc(t*fc(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>fc(t,e),sqrt:i.sqrt||(e=>a(o,e)),invertBatch:e=>function(e,t){const r=Array(t.length),i=t.reduce(((t,i,n)=>e.is0(i)?t:(r[n]=t,e.mul(t,i))),e.ONE),n=e.inv(i);return t.reduceRight(((t,i,n)=>e.is0(i)?t:(r[n]=e.mul(t,r[n]),e.mul(t,i))),n),r}(o,e),cmov:(e,t,r)=>r?t:e,toBytes:e=>r?Vo(e,s):qo(e,s),fromBytes:e=>{if(e.length!==s)throw Error(`Fp.fromBytes: expected ${s}, got ${e.length}`);return r?jo(e):Go(e)}});return Object.freeze(o)}function wc(e){if("bigint"!=typeof e)throw Error("field order must be bigint");const t=e.toString(2).length;return Math.ceil(t/8)}function mc(e){const t=wc(e);return t+Math.ceil(t/2)}
4
6
  /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
5
- const vo=Object.freeze(Wa.new(2));function Eo(t){return t instanceof Uint8Array||null!=t&&"object"==typeof t&&"Uint8Array"===t.constructor.name}const ko=/* @__PURE__ */Array.from({length:256},((t,e)=>e.toString(16).padStart(2,"0")));function So(t){if(!Eo(t))throw Error("Uint8Array expected");let e="";for(let r=0;r<t.length;r++)e+=ko[t[r]];return e}function Io(t){const e=t instanceof Wa?So(t.toUint8Array()):t.toString(16);return 1&e.length?"0"+e:e}const Co={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function Bo(t){return t>=Co._0&&t<=Co._9?t-Co._0:t>=Co._A&&t<=Co._F?t-(Co._A-10):t>=Co._a&&t<=Co._f?t-(Co._a-10):void 0}function Ko(t){if("string"!=typeof t)throw Error("hex string expected, got "+typeof t);const e=t.length,r=e/2;if(e%2)throw Error("padded hex string expected, got unpadded hex of length "+e);const i=new Uint8Array(r);for(let e=0,n=0;e<r;e++,n+=2){const r=Bo(t.charCodeAt(n)),s=Bo(t.charCodeAt(n+1));if(void 0===r||void 0===s){const e=t[n]+t[n+1];throw Error('hex string expected, got non-hex character "'+e+'" at index '+n)}i[e]=16*r+s}return i}function Po(t){return Wa.new(t)}function Do(t){if(!Eo(t))throw Error("Uint8Array expected");return Wa.new(t.slice().reverse())}function Uo(t,e){return t.toUint8Array("be",e)}function Mo(t,e){return t.toUint8Array("le",e)}function xo(t,e,r){let i;if("string"==typeof e)try{i=Ko(e)}catch(r){throw Error(`${t} must be valid hex string, got "${e}". Cause: ${r}`)}else{if(!Eo(e))throw Error(t+" must be hex string or Uint8Array");i=new Uint8Array(e)}const n=i.length;if("number"==typeof r&&n!==r)throw Error(`${t} expected ${r} bytes, got ${n}`);return i}function Qo(...t){let e=0;for(let r=0;r<t.length;r++){const i=t[r];if(!Eo(i))throw Error("Uint8Array expected");e+=i.length}let r=new Uint8Array(e),i=0;for(let e=0;e<t.length;e++){const n=t[e];r.set(n,i),i+=n.length}return r}const Ro=t=>vo.leftShift(Wa.new(t-1)).idec(),_o=t=>new Uint8Array(t),To=t=>Uint8Array.from(t);function Lo(t,e,r){if("number"!=typeof t||t<2)throw Error("hashLen must be a number");if("number"!=typeof e||e<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let i=_o(t),n=_o(t),s=0;const a=()=>{i.fill(1),n.fill(0),s=0},o=(...t)=>r(n,i,...t),c=(t=_o())=>{n=o(To([0]),t),i=o(),0!==t.length&&(n=o(To([1]),t),i=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let t=0;const r=[];for(;t<e;){i=o();const e=i.slice();r.push(e),t+=i.length}return Qo(...r)};return(t,e)=>{let r;for(a(),c(t);!(r=e(h()));)c();return a(),r}}const No={BigInteger:t=>t instanceof Wa,function:t=>"function"==typeof t,boolean:t=>"boolean"==typeof t,string:t=>"string"==typeof t,stringOrUint8Array:t=>"string"==typeof t||Eo(t),isSafeInteger:t=>Number.isSafeInteger(t),array:t=>Array.isArray(t),field:(t,e)=>e.Fp.isValid(t),hash:t=>"function"==typeof t&&Number.isSafeInteger(t.outputLen)};function Oo(t,e,r={}){const i=(e,r,i)=>{const n=No[r];if("function"!=typeof n)throw Error(`Invalid validator "${r}", expected function`);const s=t[e];if(!(i&&void 0===s||n(s,t)))throw Error(`Invalid param ${e+""}=${s} (${typeof s}), expected ${r}`)};for(const[t,r]of Object.entries(e))i(t,r,!1);for(const[t,e]of Object.entries(r))i(t,e,!0);return t}var Fo=/*#__PURE__*/Object.freeze({__proto__:null,bitGet:(t,e)=>t.getBit(e),bitLen:function(t){return t.bitLength()},bitMask:Ro,bitSet:(t,e,r)=>{throw Error("unsupported bitSet")},bytesToHex:So,bytesToNumberBE:Po,bytesToNumberLE:Do,concatBytes:Qo,createHmacDrbg:Lo,ensureBytes:xo,equalBytes:function(t,e){if(t.length!==e.length)return!1;let r=0;for(let i=0;i<t.length;i++)r|=t[i]^e[i];return 0===r},hexToBytes:Ko,hexToNumber:function(t){if("string"!=typeof t)throw Error("hex string expected, got "+typeof t);return Wa.new(""===t?"0":"0x"+t)},isBytes:Eo,numberToBytesBE:Uo,numberToBytesLE:Mo,numberToHexUnpadded:Io,numberToVarBytesBE:function(t){return Ko(Io(t))},utf8ToBytes:function(t){if("string"!=typeof t)throw Error("utf8ToBytes expected string, got "+typeof t);return new Uint8Array((new TextEncoder).encode(t))},validateObject:Oo});
6
- /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Ho=Object.freeze(Wa.new(0)),zo=Object.freeze(Wa.new(1)),Go=Object.freeze(Wa.new(2)),qo=Object.freeze(Wa.new(3)),jo=Object.freeze(Wa.new(4)),Vo=Object.freeze(Wa.new(5)),Zo=Object.freeze(Wa.new(8)),Jo=Object.freeze(Wa.new(9)),Yo=Object.freeze(Wa.new(16));function Wo(t,e){return t.mod(e)}function $o(t,e,r){return t.modExp(e,r)}function Xo(t,e,r){return t.modExp(Go.leftShift(e.dec()),r)}function tc(t,e){return t.modInv(e)}function ec(t){if(t.mod(jo).equal(qo)){const e=t.add(zo).irightShift(Go);return function(t,r){const i=t.pow(r,e);if(!t.eql(t.sqr(i),r))throw Error("Cannot find square root");return i}}if(t.mod(Zo).equal(Vo)){const e=t.sub(Vo).irightShift(qo);return function(t,r){const i=t.mul(r,Go),n=t.pow(i,e),s=t.mul(r,n),a=t.mul(t.mul(s,Go),n),o=t.mul(s,t.sub(a,t.ONE));if(!t.eql(t.sqr(o),r))throw Error("Cannot find square root");return o}}return t.mod(Yo).equal(Jo),function(t){const e=t.dec().rightShift(zo);let r=t.dec(),i=Wa.new(0);for(;r.isEven();)r.irightShift(zo),i.iinc();let n=Wa.new(2);const s=t.dec();for(;n.lt(t)&&!$o(n,e,t).equal(s);)n.iinc();if(i.isOne()){const e=t.inc().irightShift(Go);return function(t,r){const i=t.pow(r,e);if(!t.eql(t.sqr(i),r))throw Error("Cannot find square root");return i}}const a=r.inc().irightShift(zo);return function(t,s){if(t.eql(t.pow(s,e),t.neg(t.ONE)))throw Error("Cannot find square root");let o=i,c=t.pow(t.mul(t.ONE,n),r),h=t.pow(s,a),u=t.pow(s,r);for(;!t.eql(u,t.ONE);){if(t.eql(u,t.ZERO))return t.ZERO;let e=Wa.new(1);for(let r=t.sqr(u);e.lt(o)&&!t.eql(r,t.ONE);e.iinc())r=t.sqr(r);const r=t.pow(c,zo.leftShift(o.sub(e).idec()));c=t.sqr(r),h=t.mul(h,r),u=t.mul(u,c),o=e}return h}}(t)}const rc=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function ic(t,e){const r=void 0!==e?e:t.bitLength();return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function nc(t,e,r=!1,i={}){if(t.lte(Ho))throw Error("Expected Field ORDER > 0, got "+t);const{nBitLength:n,nByteLength:s}=ic(t,e);if(s>2048)throw Error("Field lengths over 2048 bytes are not supported");const a=ec(t),o=Object.freeze({ORDER:t,BITS:n,BYTES:s,MASK:Ro(n),ZERO:Ho,ONE:zo,create:e=>Wo(e,t),isValid:e=>{if(!(e instanceof Wa))throw Error("Invalid field element: expected bigint, got "+typeof e);return Ho.lte(e)&&e.lt(t)},is0:t=>t.isZero(),isOdd:t=>!t.isEven(),neg:e=>Wo(e.negate(),t),eql:(t,e)=>t.equal(e),sqr:e=>Wo(e.mul(e),t),add:(e,r)=>Wo(e.add(r),t),sub:(e,r)=>Wo(e.sub(r),t),mul:(e,r)=>Wo(e.mul(r),t),pow:(t,e)=>function(t,e,r){if(r.isNegative())throw Error("Expected power > 0");if(r.isZero())return t.ONE;if(r.isOne())return e;let i=t.ONE,n=e;for(;r.gt(Ho);)r.isEven()||(i=t.mul(i,n)),n=t.sqr(n),r=r.rightShift(zo);return i}(o,t,e),div:(e,r)=>Wo(e.mul(tc(r,t)),t),sqrN:t=>t.mul(t),addN:(t,e)=>t.add(e),subN:(t,e)=>t.sub(e),mulN:(t,e)=>t.mul(e),inv:e=>tc(e,t),sqrt:i.sqrt||(t=>a(o,t)),invertBatch:t=>function(t,e){const r=Array(e.length),i=e.reduce(((e,i,n)=>t.is0(i)?e:(r[n]=e,t.mul(e,i))),t.ONE),n=t.inv(i);return e.reduceRight(((e,i,n)=>t.is0(i)?e:(r[n]=t.mul(e,r[n]),t.mul(e,i))),n),r}(o,t),cmov:(t,e,r)=>r?e:t,toBytes:t=>r?Mo(t,s):Uo(t,s),fromBytes:t=>{if(t.length!==s)throw Error(`Fp.fromBytes: expected ${s}, got ${t.length}`);return r?Do(t):Po(t)}});return Object.freeze(o)}function sc(t){if(!(t instanceof Wa))throw Error("field order must be bigint");return t.byteLength()}function ac(t){const e=sc(t);return e+Math.ceil(e/2)}
7
+ const bc=BigInt(0),Ec=BigInt(1);function kc(e,t){const r=(e,t)=>{const r=t.negate();return e?r:t},i=e=>({windows:Math.ceil(t/e)+1,windowSize:2**(e-1)});return{constTimeNegate:r,unsafeLadder(t,r){let i=e.ZERO,n=t;for(;r>bc;)r&Ec&&(i=i.add(n)),n=n.double(),r>>=Ec;return i},precomputeWindow(e,t){const{windows:r,windowSize:n}=i(t),s=[];let a=e,o=a;for(let e=0;e<r;e++){o=a,s.push(o);for(let e=1;e<n;e++)o=o.add(a),s.push(o);a=o.double()}return s},wNAF(t,n,s){const{windows:a,windowSize:o}=i(t);let c=e.ZERO,h=e.BASE;const u=BigInt(2**t-1),l=2**t,y=BigInt(t);for(let e=0;e<a;e++){const t=e*o;let i=Number(s&u);s>>=y,i>o&&(i-=l,s+=Ec);const a=t,f=t+Math.abs(i)-1,g=e%2!=0,p=i<0;0===i?h=h.add(r(g,n[a])):c=c.add(r(p,n[f]))}return{p:c,f:h}},wNAFCached(e,t,r,i){const n=e._WINDOW_SIZE||1;let s=t.get(e);return s||(s=this.precomputeWindow(e,n),1!==n&&t.set(e,i(s))),this.wNAF(n,s,r)}}}function vc(e){return tc(e.Fp,pc.reduce(((e,t)=>(e[t]="function",e)),{ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),tc(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...dc(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}
8
+ /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:Ic,hexToBytes:Bc}=rc,Sc={Err:class extends Error{constructor(e=""){super(e)}},_parseInt(e){const{Err:t}=Sc;if(e.length<2||2!==e[0])throw new t("Invalid signature integer tag");const r=e[1],i=e.subarray(2,r+2);if(!r||i.length!==r)throw new t("Invalid signature integer: wrong length");if(128&i[0])throw new t("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new t("Invalid signature integer: unnecessary leading zero");return{d:Ic(i),l:e.subarray(r+2)}},toSig(e){const{Err:t}=Sc,r="string"==typeof e?Bc(e):e;To(r);let i=r.length;if(i<2||48!=r[0])throw new t("Invalid signature tag");if(r[1]!==i-2)throw new t("Invalid signature: incorrect length");const{d:n,l:s}=Sc._parseInt(r.subarray(2)),{d:a,l:o}=Sc._parseInt(s);if(o.length)throw new t("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(e){const t=e=>8&Number.parseInt(e[0],16)?"00"+e:e,r=e=>{const t=e.toString(16);return 1&t.length?"0"+t:t},i=t(r(e.s)),n=t(r(e.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},Cc=BigInt(0),Kc=BigInt(1);BigInt(2);const Dc=BigInt(3);function Pc(e){const t=function(e){const t=vc(e);tc(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=t;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}(e),{Fp:r}=t,i=t.toBytes||((e,t,i)=>{const n=t.toAffine();return Jo(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=t.fromBytes||(e=>{const t=e.subarray(1);return{x:r.fromBytes(t.subarray(0,r.BYTES)),y:r.fromBytes(t.subarray(r.BYTES,2*r.BYTES))}});function s(e){const{a:i,b:n}=t,s=r.sqr(e),a=r.mul(s,e);return r.add(r.add(a,r.mul(e,i)),n)}if(!r.eql(r.sqr(t.Gy),s(t.Gx)))throw Error("bad generator point: equation left != right");function a(e){return"bigint"==typeof e&&Cc<e&&e<t.n}function o(e){if(!a(e))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(e){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=t;if(r&&"bigint"!=typeof e){if(Mo(e)&&(e=_o(e)),"string"!=typeof e||!r.includes(e.length))throw Error("Invalid key");e=e.padStart(2*i,"0")}let a;try{a="bigint"==typeof e?e:Go(Yo("private key",e,i))}catch(t){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof e}`)}return n&&(a=uc(a,s)),o(a),a}const h=new Map;function u(e){if(!(e instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(e,t,i){if(this.px=e,this.py=t,this.pz=i,null==e||!r.isValid(e))throw Error("x required");if(null==t||!r.isValid(t))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(e){const{x:t,y:i}=e||{};if(!e||!r.isValid(t)||!r.isValid(i))throw Error("invalid affine point");if(e instanceof l)throw Error("projective point not allowed");const n=e=>r.eql(e,r.ZERO);return n(t)&&n(i)?l.ZERO:new l(t,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}static fromHex(e){const t=l.fromAffine(n(Yo("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return l.BASE.multiply(c(e))}_setWindowSize(e){this._WINDOW_SIZE=e,h.delete(this)}assertValidity(){if(this.is0()){if(t.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:e,y:i}=this.toAffine();if(!r.isValid(e)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(e);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:e}=this.toAffine();if(r.isOdd)return!r.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){u(e);const{px:t,py:i,pz:n}=this,{px:s,py:a,pz:o}=e,c=r.eql(r.mul(t,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:e,b:i}=t,n=r.mul(i,Dc),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,y=r.mul(s,s),f=r.mul(a,a),g=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(e,u),h=r.mul(n,g),h=r.add(c,h),c=r.sub(f,h),h=r.add(f,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),g=r.mul(e,g),p=r.sub(y,g),p=r.mul(e,p),p=r.add(p,u),u=r.add(y,y),y=r.add(u,y),y=r.add(y,g),y=r.mul(y,p),h=r.add(h,y),g=r.mul(a,o),g=r.add(g,g),y=r.mul(g,p),c=r.sub(c,y),u=r.mul(g,f),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(e){u(e);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=e;let h=r.ZERO,y=r.ZERO,f=r.ZERO;const g=t.a,p=r.mul(t.b,Dc);let d=r.mul(i,a),A=r.mul(n,o),w=r.mul(s,c),m=r.add(i,n),b=r.add(a,o);m=r.mul(m,b),b=r.add(d,A),m=r.sub(m,b),b=r.add(i,s);let E=r.add(a,c);return b=r.mul(b,E),E=r.add(d,w),b=r.sub(b,E),E=r.add(n,s),h=r.add(o,c),E=r.mul(E,h),h=r.add(A,w),E=r.sub(E,h),f=r.mul(g,b),h=r.mul(p,w),f=r.add(h,f),h=r.sub(A,f),f=r.add(A,f),y=r.mul(h,f),A=r.add(d,d),A=r.add(A,d),w=r.mul(g,w),b=r.mul(p,b),A=r.add(A,w),w=r.sub(d,w),w=r.mul(g,w),b=r.add(b,w),d=r.mul(A,b),y=r.add(y,d),d=r.mul(E,b),h=r.mul(m,h),h=r.sub(h,d),d=r.mul(m,A),f=r.mul(E,f),f=r.add(f,d),new l(h,y,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(l.ZERO)}wNAF(e){return f.wNAFCached(this,h,e,(e=>{const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}))}multiplyUnsafe(e){const i=l.ZERO;if(e===Cc)return i;if(o(e),e===Kc)return this;const{endo:n}=t;if(!n)return f.unsafeLadder(this,e);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(e),u=i,y=i,g=this;for(;a>Cc||h>Cc;)a&Kc&&(u=u.add(g)),h&Kc&&(y=y.add(g)),g=g.double(),a>>=Kc,h>>=Kc;return s&&(u=u.negate()),c&&(y=y.negate()),y=new l(r.mul(y.px,n.beta),y.py,y.pz),u.add(y)}multiply(e){o(e);let i,n,s=e;const{endo:a}=t;if(a){const{k1neg:e,k1:t,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(t),{p:y,f:g}=this.wNAF(c);h=f.constTimeNegate(e,h),y=f.constTimeNegate(o,y),y=new l(r.mul(y.px,a.beta),y.py,y.pz),i=h.add(y),n=u.add(g)}else{const{p:e,f:t}=this.wNAF(s);i=e,n=t}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(e,t,r){const i=l.BASE,n=(e,t)=>t!==Cc&&t!==Kc&&e.equals(i)?e.multiply(t):e.multiplyUnsafe(t),s=n(this,t).add(n(e,r));return s.is0()?void 0:s}toAffine(e){const{px:t,py:i,pz:n}=this,s=this.is0();null==e&&(e=s?r.ONE:r.inv(n));const a=r.mul(t,e),o=r.mul(i,e),c=r.mul(n,e);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:e,isTorsionFree:r}=t;if(e===Kc)return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:e,clearCofactor:r}=t;return e===Kc?this:r?r(l,this):this.multiplyUnsafe(t.h)}toRawBytes(e=!0){return this.assertValidity(),i(l,this,e)}toHex(e=!0){return _o(this.toRawBytes(e))}}l.BASE=new l(t.Gx,t.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const y=t.nBitLength,f=kc(l,t.endo?Math.ceil(y/2):y);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function Uc(e){const t=function(e){const t=vc(e);return tc(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}(e),{Fp:r,n:i}=t,n=r.BYTES+1,s=2*r.BYTES+1;function a(e){return uc(e,i)}function o(e){return fc(e,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=Pc({...t,toBytes(e,t,i){const n=t.toAffine(),s=r.toBytes(n.x),a=Jo;return i?a(Uint8Array.from([t.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(e){const t=e.length,i=e[0],a=e.subarray(1);if(t!==n||2!==i&&3!==i){if(t===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${t} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const e=Go(a);if(!(Cc<(o=e)&&o<r.ORDER))throw Error("Point is not on curve");const t=u(e);let n;try{n=r.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("Point is not on curve"+t)}return!(1&~i)!==((n&Kc)===Kc)&&(n=r.neg(n)),{x:e,y:n}}var o}}),y=e=>_o(qo(e,t.nByteLength));function f(e){return e>i>>Kc}const g=(e,t,r)=>Go(e.slice(t,r));class p{constructor(e,t,r){this.r=e,this.s=t,this.recovery=r,this.assertValidity()}static fromCompact(e){const r=t.nByteLength;return e=Yo("compactSignature",e,2*r),new p(g(e,0,r),g(e,r,2*r))}static fromDER(e){const{r:t,s:r}=Sc.toSig(Yo("DER",e));return new p(t,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(e){return new p(this.r,this.s,e)}recoverPublicKey(e){const{r:i,s:n,recovery:s}=this,h=m(Yo("msgHash",e));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i+t.n:i;if(u>=r.ORDER)throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",f=c.fromHex(l+y(u)),g=o(u),p=a(-h*g),d=a(n*g),A=c.BASE.multiplyAndAddUnsafe(f,p,d);if(!A)throw Error("point at infinify");return A.assertValidity(),A}hasHighS(){return f(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(-this.s),this.recovery):this}toDERRawBytes(){return zo(this.toDERHex())}toDERHex(){return Sc.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return zo(this.toCompactHex())}toCompactHex(){return y(this.r)+y(this.s)}}const d={isValidPrivateKey(e){try{return h(e),!0}catch(e){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const e=mc(t.n);return function(e,t,r=!1){const i=e.length,n=wc(t),s=mc(t);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=uc(r?Go(e):jo(e),t-nc)+nc;return r?Vo(a,n):qo(a,n)}(t.randomBytes(e),t.n)},precompute:(e=8,t=c.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)};function A(e){const t=Mo(e),r="string"==typeof e,i=(t||r)&&e.length;return t?i===n||i===s:r?i===2*n||i===2*s:e instanceof c}const w=t.bits2int||function(e){const r=Go(e),i=8*e.length-t.nBitLength;return i>0?r>>BigInt(i):r},m=t.bits2int_modN||function(e){return a(w(e))},b=Wo(t.nBitLength);function E(e){if("bigint"!=typeof e)throw Error("bigint expected");if(!(Cc<=e&&e<b))throw Error("bigint expected < 2^"+t.nBitLength);return qo(e,t.nByteLength)}function k(e,i,n=v){if(["recovered","canonical"].some((e=>e in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=t;let{lowS:y,prehash:g,extraEntropy:d}=n;null==y&&(y=!0),e=Yo("msgHash",e),g&&(e=Yo("prehashed msgHash",s(e)));const A=m(e),b=h(i),k=[E(b),E(A)];if(null!=d&&!1!==d){const e=!0===d?u(r.BYTES):d;k.push(Yo("extraEntropy",e))}const I=Jo(...k),B=A;return{seed:I,k2sig:function(e){const t=w(e);if(!l(t))return;const r=o(t),i=c.BASE.multiply(t).toAffine(),n=a(i.x);if(n===Cc)return;const s=a(r*a(B+n*b));if(s===Cc)return;let h=(i.x===n?0:2)|Number(i.y&Kc),u=s;return y&&f(s)&&(u=function(e){return f(e)?a(-e):e}(s),h^=1),new p(n,u,h)}}}const v={lowS:t.lowS,prehash:!1},I={lowS:t.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:t,getPublicKey:function(e,t=!0){return c.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(A(e))throw Error("first arg must be private key");if(!A(t))throw Error("second arg must be public key");return c.fromHex(t).multiply(h(e)).toRawBytes(r)},sign:function(e,r,i=v){const{seed:n,k2sig:s}=k(e,r,i),a=t;return Xo(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(e,r,i,n=I){const s=e;if(r=Yo("msgHash",r),i=Yo("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,y;try{if("string"==typeof s||Mo(s))try{l=p.fromDER(s)}catch(e){if(!(e instanceof Sc.Err))throw e;l=p.fromCompact(s)}else{if("object"!=typeof s||"bigint"!=typeof s.r||"bigint"!=typeof s.s)throw Error("PARSE");{const{r:e,s:t}=s;l=new p(e,t)}}y=c.fromHex(i)}catch(e){if("PARSE"===e.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=t.hash(r));const{r:f,s:g}=l,d=m(r),A=o(g),w=a(d*A),b=a(f*A),E=c.BASE.multiplyAndAddUnsafe(y,w,b)?.toAffine();return!!E&&a(E.x)===f},ProjectivePoint:c,Signature:p,utils:d}}
9
+ /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function xc(e){return{hash:e,hmac:(t,...r)=>Uo(e,t,So(...r)),randomBytes:Do}}function Qc(e,t){const r=t=>Uc({...e,...xc(t)});return Object.freeze({...r(t),create:r})}BigInt(4);const Rc=(e,t,r)=>e&t^~e&r,Mc=(e,t,r)=>e&t^e&r^t&r;class Tc extends Co{constructor(e,t,r,i){super(),this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=mo(this.buffer)}update(e){po(this);const{view:t,buffer:r,blockLen:i}=this,n=(e=Bo(e)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(t,0),this.pos=0);else{const t=mo(e);for(;i<=n-s;s+=i)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){po(this),Ao(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;t[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let e=s;e<i;e++)t[e]=0;!function(e,t,r,i){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,i);const n=BigInt(32),s=BigInt(4294967295),a=Number(r>>n&s),o=Number(r&s),c=i?4:0,h=i?0:4;e.setUint32(t+c,a,i),e.setUint32(t+h,o,i)}(r,i-8,BigInt(8*this.length),n),this.process(r,0);const a=mo(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,h[e],n)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return e.length=i,e.pos=a,e.finished=n,e.destroyed=s,i%t&&e.buffer.set(r),e}}const Lc=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),_c=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Nc=/* @__PURE__ */new Uint32Array(64);class Fc extends Tc{constructor(){super(64,32,8,!1),this.A=0|_c[0],this.B=0|_c[1],this.C=0|_c[2],this.D=0|_c[3],this.E=0|_c[4],this.F=0|_c[5],this.G=0|_c[6],this.H=0|_c[7]}get(){const{A:e,B:t,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[e,t,r,i,n,s,a,o]}set(e,t,r,i,n,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)Nc[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=Nc[e-15],r=Nc[e-2],i=bo(t,7)^bo(t,18)^t>>>3,n=bo(r,17)^bo(r,19)^r>>>10;Nc[e]=n+Nc[e-7]+i+Nc[e-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let e=0;e<64;e++){const t=h+(bo(a,6)^bo(a,11)^bo(a,25))+Rc(a,o,c)+Lc[e]+Nc[e]|0,u=(bo(r,2)^bo(r,13)^bo(r,22))+Mc(r,i,n)|0;h=c,c=o,o=a,a=s+t|0,s=n,n=i,i=r,r=t+u|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){Nc.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class Hc extends Fc{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Oc=/* @__PURE__ */Ko((()=>new Fc)),zc=/* @__PURE__ */Ko((()=>new Hc)),Gc=Ac(BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),jc=Qc({a:Gc.create(BigInt("-3")),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Gc,n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:BigInt(1),lowS:!1},Oc),qc=/* @__PURE__ */BigInt(2**32-1),Vc=/* @__PURE__ */BigInt(32);function Yc(e,t=!1){return t?{h:Number(e&qc),l:Number(e>>Vc&qc)}:{h:0|Number(e>>Vc&qc),l:0|Number(e&qc)}}function Jc(e,t=!1){let r=new Uint32Array(e.length),i=new Uint32Array(e.length);for(let n=0;n<e.length;n++){const{h:s,l:a}=Yc(e[n],t);[r[n],i[n]]=[s,a]}return[r,i]}const Wc=(e,t,r)=>e<<r|t>>>32-r,Zc=(e,t,r)=>t<<r|e>>>32-r,$c=(e,t,r)=>t<<r-32|e>>>64-r,Xc=(e,t,r)=>e<<r-32|t>>>64-r;const eh={fromBig:Yc,split:Jc,toBig:(e,t)=>BigInt(e>>>0)<<Vc|BigInt(t>>>0),shrSH:(e,t,r)=>e>>>r,shrSL:(e,t,r)=>e<<32-r|t>>>r,rotrSH:(e,t,r)=>e>>>r|t<<32-r,rotrSL:(e,t,r)=>e<<32-r|t>>>r,rotrBH:(e,t,r)=>e<<64-r|t>>>r-32,rotrBL:(e,t,r)=>e>>>r-32|t<<64-r,rotr32H:(e,t)=>t,rotr32L:(e,t)=>e,rotlSH:Wc,rotlSL:Zc,rotlBH:$c,rotlBL:Xc,add:function(e,t,r,i){const n=(t>>>0)+(i>>>0);return{h:e+r+(n/2**32|0)|0,l:0|n}},add3L:(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),add3H:(e,t,r,i)=>t+r+i+(e/2**32|0)|0,add4L:(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),add4H:(e,t,r,i,n)=>t+r+i+n+(e/2**32|0)|0,add5H:(e,t,r,i,n,s)=>t+r+i+n+s+(e/2**32|0)|0,add5L:(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0)},[th,rh]=/* @__PURE__ */(()=>eh.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),ih=/* @__PURE__ */new Uint32Array(80),nh=/* @__PURE__ */new Uint32Array(80);class sh extends Tc{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:y,Gl:f,Hh:g,Hl:p}=this;return[e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p]}set(e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|y,this.Gl=0|f,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)ih[r]=e.getUint32(t),nh[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|ih[e-15],r=0|nh[e-15],i=eh.rotrSH(t,r,1)^eh.rotrSH(t,r,8)^eh.shrSH(t,r,7),n=eh.rotrSL(t,r,1)^eh.rotrSL(t,r,8)^eh.shrSL(t,r,7),s=0|ih[e-2],a=0|nh[e-2],o=eh.rotrSH(s,a,19)^eh.rotrBH(s,a,61)^eh.shrSH(s,a,6),c=eh.rotrSL(s,a,19)^eh.rotrBL(s,a,61)^eh.shrSL(s,a,6),h=eh.add4L(n,c,nh[e-7],nh[e-16]),u=eh.add4H(h,i,o,ih[e-7],ih[e-16]);ih[e]=0|u,nh[e]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:y,Fl:f,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=eh.rotrSH(u,l,14)^eh.rotrSH(u,l,18)^eh.rotrBH(u,l,41),w=eh.rotrSL(u,l,14)^eh.rotrSL(u,l,18)^eh.rotrBL(u,l,41),m=u&y^~u&g,b=l&f^~l&p,E=eh.add5L(A,w,b,rh[e],nh[e]),k=eh.add5H(E,d,t,m,th[e],ih[e]),v=0|E,I=eh.rotrSH(r,i,28)^eh.rotrBH(r,i,34)^eh.rotrBH(r,i,39),B=eh.rotrSL(r,i,28)^eh.rotrBL(r,i,34)^eh.rotrBL(r,i,39),S=r&n^r&a^n&a,C=i&s^i&o^s&o;d=0|g,A=0|p,g=0|y,p=0|f,y=0|u,f=0|l,({h:u,l}=eh.add(0|c,0|h,0|k,0|v)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=eh.add3L(v,B,C);r=eh.add3H(K,k,I,S),i=0|K}({h:r,l:i}=eh.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=eh.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=eh.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=eh.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=eh.add(0|this.Eh,0|this.El,0|u,0|l)),({h:y,l:f}=eh.add(0|this.Fh,0|this.Fl,0|y,0|f)),({h:g,l:p}=eh.add(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=eh.add(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,i,n,s,a,o,c,h,u,l,y,f,g,p,d,A)}roundClean(){ih.fill(0),nh.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class ah extends sh{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const oh=/* @__PURE__ */Ko((()=>new sh)),ch=/* @__PURE__ */Ko((()=>new ah)),hh=Ac(BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),uh=Qc({a:hh.create(BigInt("-3")),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:hh,n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:BigInt(1),lowS:!1},ch),lh=Ac(BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),yh={a:lh.create(BigInt("-3")),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:lh,n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:BigInt(1)},fh=Qc({a:yh.a,b:yh.b,Fp:lh,n:yh.n,Gx:yh.Gx,Gy:yh.Gy,h:yh.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},oh),gh=[],ph=[],dh=[],Ah=/* @__PURE__ */BigInt(0),wh=/* @__PURE__ */BigInt(1),mh=/* @__PURE__ */BigInt(2),bh=/* @__PURE__ */BigInt(7),Eh=/* @__PURE__ */BigInt(256),kh=/* @__PURE__ */BigInt(113);for(let e=0,t=wh,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],gh.push(2*(5*i+r)),ph.push((e+1)*(e+2)/2%64);let n=Ah;for(let e=0;e<7;e++)t=(t<<wh^(t>>bh)*kh)%Eh,t&mh&&(n^=wh<<(wh<</* @__PURE__ */BigInt(e))-wh);dh.push(n)}const[vh,Ih]=/* @__PURE__ */Jc(dh,!0),Bh=(e,t,r)=>r>32?$c(e,t,r):Wc(e,t,r),Sh=(e,t,r)=>r>32?Xc(e,t,r):Zc(e,t,r);class Ch extends Co{constructor(e,t,r,i=!1,n=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,fo(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){ko||vo(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const i=(t+8)%10,n=(t+2)%10,s=r[n],a=r[n+1],o=Bh(s,a,1)^r[i],c=Sh(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],n=e[3];for(let r=0;r<24;r++){const i=ph[r],s=Bh(t,n,i),a=Sh(t,n,i),o=gh[r];t=e[o],n=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let i=0;i<10;i++)r[i]=e[t+i];for(let i=0;i<10;i++)e[t+i]^=~r[(i+2)%10]&r[(i+4)%10]}e[0]^=vh[i],e[1]^=Ih[i]}r.fill(0)}(this.state32,this.rounds),ko||vo(this.state32),this.posOut=0,this.pos=0}update(e){po(this);const{blockLen:t,state:r}=this,i=(e=Bo(e)).length;for(let n=0;n<i;){const s=Math.min(t-this.pos,i-n);for(let t=0;t<s;t++)r[this.pos++]^=e[n++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:i}=this;e[r]^=t,128&t&&r===i-1&&this.keccak(),e[i-1]^=128,this.keccak()}writeInto(e){po(this,!1),go(e),this.finish();const t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return fo(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Ao(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return e||(e=new Ch(t,r,i,s,n)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=s,e.destroyed=this.destroyed,e}}const Kh=(e,t,r)=>Ko((()=>new Ch(t,e,r))),Dh=/* @__PURE__ */Kh(6,136,32),Ph=/* @__PURE__ */Kh(6,72,64),Uh=/* @__PURE__ */((e,t,r)=>function(e){const t=(t,r)=>e(r).update(Bo(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((i={})=>new Ch(t,e,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),xh=BigInt(0),Qh=BigInt(1),Rh=BigInt(2),Mh=BigInt(8),Th={zip215:!0};function Lh(e){const t=function(e){const t=vc(e);return tc(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}(e),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=t,h=Rh<<BigInt(8*o)-Qh,u=r.create,l=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:r.sqrt(e*r.inv(t))}}catch(e){return{isValid:!1,value:xh}}}),y=t.adjustScalarBytes||(e=>e),f=t.domain||((e,t,r)=>{if(t.length||r)throw Error("Contexts/pre-hash are not supported");return e}),g=e=>"bigint"==typeof e&&xh<e,p=(e,t)=>g(e)&&g(t)&&e<t,d=e=>e===xh||p(e,h);function A(e,t){if(p(e,t))return e;throw Error(`Expected valid scalar < ${t}, got ${typeof e} ${e}`)}function w(e){return e===xh?e:A(e,i)}const m=new Map;function b(e){if(!(e instanceof E))throw Error("ExtendedPoint expected")}class E{constructor(e,t,r,i){if(this.ex=e,this.ey=t,this.ez=r,this.et=i,!d(e))throw Error("x required");if(!d(t))throw Error("y required");if(!d(r))throw Error("z required");if(!d(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(e){if(e instanceof E)throw Error("extended point not allowed");const{x:t,y:r}=e||{};if(!d(t)||!d(r))throw Error("invalid affine point");return new E(t,r,Qh,u(t*r))}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.ez)));return e.map(((e,r)=>e.toAffine(t[r]))).map(E.fromAffine)}_setWindowSize(e){this._WINDOW_SIZE=e,m.delete(this)}assertValidity(){const{a:e,d:r}=t;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i*i),c=u(n*n),h=u(s*s),l=u(h*h),y=u(o*e);if(u(h*u(y+c))!==u(l+u(r*u(o*c))))throw Error("bad point: equation left != right (1)");if(u(i*n)!==u(s*a))throw Error("bad point: equation left != right (2)")}equals(e){b(e);const{ex:t,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=e,o=u(t*a),c=u(n*i),h=u(r*a),l=u(s*i);return o===c&&h===l}is0(){return this.equals(E.ZERO)}negate(){return new E(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){const{a:e}=t,{ex:r,ey:i,ez:n}=this,s=u(r*r),a=u(i*i),o=u(Rh*u(n*n)),c=u(e*s),h=r+i,l=u(u(h*h)-s-a),y=c+a,f=y-o,g=c-a,p=u(l*f),d=u(y*g),A=u(l*g),w=u(f*y);return new E(p,d,w,A)}add(e){b(e);const{a:r,d:i}=t,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:y}=e;if(r===BigInt(-1)){const e=u((s-n)*(h+c)),t=u((s+n)*(h-c)),r=u(t-e);if(r===xh)return this.double();const i=u(a*Rh*y),f=u(o*Rh*l),g=f+i,p=t+e,d=f-i,A=u(g*r),w=u(p*d),m=u(g*d),b=u(r*p);return new E(A,w,b,m)}const f=u(n*c),g=u(s*h),p=u(o*i*y),d=u(a*l),A=u((n+s)*(c+h)-f-g),w=d-p,m=d+p,k=u(g-r*f),v=u(A*w),I=u(m*k),B=u(A*k),S=u(w*m);return new E(v,I,S,B)}subtract(e){return this.add(e.negate())}wNAF(e){return I.wNAFCached(this,m,e,E.normalizeZ)}multiply(e){const{p:t,f:r}=this.wNAF(A(e,i));return E.normalizeZ([t,r])[0]}multiplyUnsafe(e){let t=w(e);return t===xh?v:this.equals(v)||t===Qh?this:this.equals(k)?this.wNAF(t).p:I.unsafeLadder(this,t)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return I.unsafeLadder(this,i).is0()}toAffine(e){const{ex:t,ey:i,ez:n}=this,s=this.is0();null==e&&(e=s?Mh:r.inv(n));const a=u(t*e),o=u(i*e),c=u(n*e);if(s)return{x:xh,y:Qh};if(c!==Qh)throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:e}=t;return e===Qh?this:this.multiplyUnsafe(e)}static fromHex(e,i=!1){const{d:n,a:s}=t,a=r.BYTES,o=(e=Yo("pointHex",e,a)).slice(),c=e[a-1];o[a-1]=-129&c;const y=jo(o);y===xh||A(y,i?h:r.ORDER);const f=u(y*y),g=u(f-Qh),p=u(n*f-s);let{isValid:d,value:w}=l(g,p);if(!d)throw Error("Point.fromHex: invalid y coordinate");const m=(w&Qh)===Qh,b=!!(128&c);if(!i&&w===xh&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==m&&(w=u(-w)),E.fromAffine({x:w,y})}static fromPrivateKey(e){return C(e).point}toRawBytes(){const{x:e,y:t}=this.toAffine(),i=Vo(t,r.BYTES);return i[i.length-1]|=e&Qh?128:0,i}toHex(){return _o(this.toRawBytes())}}E.BASE=new E(t.Gx,t.Gy,Qh,u(t.Gx*t.Gy)),E.ZERO=new E(xh,Qh,Qh,xh);const{BASE:k,ZERO:v}=E,I=kc(E,8*o);function B(e){return uc(e,i)}function S(e){return B(jo(e))}function C(e){const t=o;e=Yo("private key",e,t);const r=Yo("hashed private key",s(e),2*t),i=y(r.slice(0,t)),n=r.slice(t,2*t),a=S(i),c=k.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(e=new Uint8Array,...t){const r=Jo(...t);return S(s(f(r,Yo("context",e),!!n)))}const D=Th;k._setWindowSize(8);return{CURVE:t,getPublicKey:function(e){return C(e).pointBytes},sign:function(e,t,i={}){e=Yo("message",e),n&&(e=n(e));const{prefix:s,scalar:a,pointBytes:c}=C(t),h=K(i.context,s,e),u=k.multiply(h).toRawBytes(),l=B(h+K(i.context,u,c,e)*a);return w(l),Yo("result",Jo(u,Vo(l,r.BYTES)),2*o)},verify:function(e,t,i,s=D){const{context:a,zip215:o}=s,c=r.BYTES;e=Yo("signature",e,2*c),t=Yo("message",t),n&&(t=n(t));const h=jo(e.slice(c,2*c));let u,l,y;try{u=E.fromHex(i,o),l=E.fromHex(e.slice(0,c),o),y=k.multiplyUnsafe(h)}catch(e){return!1}if(!o&&u.isSmallOrder())return!1;const f=K(a,l.toRawBytes(),u.toRawBytes(),t);return l.add(u.multiplyUnsafe(f)).subtract(y).clearCofactor().equals(E.ZERO)},ExtendedPoint:E,utils:{getExtendedPublicKey:C,randomPrivateKey:()=>a(r.BYTES),precompute:(e=8,t=E.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)}}}
10
+ /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const _h=BigInt(0),Nh=BigInt(1);function Fh(e){const t=(tc(r=e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...r}));var r;const{P:i}=t,n=e=>uc(e,i),s=t.montgomeryBits,a=Math.ceil(s/8),o=t.nByteLength,c=t.adjustScalarBytes||(e=>e),h=t.powPminus2||(e=>lc(e,i-BigInt(2),i));function u(e,t,r){const i=n(e*(t-r));return[t=n(t-i),r=n(r+i)]}function l(e){if("bigint"==typeof e&&_h<=e&&e<i)return e;throw Error("Expected valid scalar 0 < scalar < CURVE.P")}const y=(t.a-BigInt(2))/BigInt(4);function f(e){return Vo(n(e),a)}function g(e,t){const r=function(e){const t=Yo("u coordinate",e,a);return 32===o&&(t[31]&=127),jo(t)}(t),i=function(e){const t=Yo("scalar",e),r=t.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return jo(c(t))}(e),g=function(e,t){const r=l(e),i=l(t),a=r;let o,c=Nh,f=_h,g=r,p=Nh,d=_h;for(let e=BigInt(s-1);e>=_h;e--){const t=i>>e&Nh;d^=t,o=u(d,c,g),c=o[0],g=o[1],o=u(d,f,p),f=o[0],p=o[1],d=t;const r=c+f,s=n(r*r),h=c-f,l=n(h*h),A=s-l,w=g+p,m=n((g-p)*r),b=n(w*h),E=m+b,k=m-b;g=n(E*E),p=n(a*n(k*k)),c=n(s*l),f=n(A*(s+n(y*A)))}o=u(d,c,g),c=o[0],g=o[1],o=u(d,f,p),f=o[0],p=o[1];const A=h(f);return n(c*A)}(r,i);if(g===_h)throw Error("Invalid private or public key received");return f(g)}const p=f(t.Gu);function d(e){return g(e,p)}return{scalarMult:g,scalarMultBase:d,getSharedSecret:(e,t)=>g(e,t),getPublicKey:e=>d(e),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:p}}
11
+ /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Hh=Ko((()=>Uh.create({dkLen:114}))),Oh=(Ko((()=>Uh.create({dkLen:64}))),BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439")),zh=BigInt(1),Gh=BigInt(2),jh=BigInt(3);BigInt(4);const qh=BigInt(11),Vh=BigInt(22),Yh=BigInt(44),Jh=BigInt(88),Wh=BigInt(223);function Zh(e){const t=Oh,r=e*e*e%t,i=r*r*e%t,n=yc(i,jh,t)*i%t,s=yc(n,jh,t)*i%t,a=yc(s,Gh,t)*r%t,o=yc(a,qh,t)*a%t,c=yc(o,Vh,t)*o%t,h=yc(c,Yh,t)*c%t,u=yc(h,Jh,t)*h%t,l=yc(u,Yh,t)*c%t,y=yc(l,Gh,t)*r%t,f=yc(y,zh,t)*e%t;return yc(f,Wh,t)*y%t}function $h(e){return e[0]&=252,e[55]|=128,e[56]=0,e}const Xh=Ac(Oh,456,!0),eu={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:Xh,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Hh,randomBytes:Do,adjustScalarBytes:$h,domain:(e,t,r)=>{if(t.length>255)throw Error("Context is too big: "+t.length);return So(Io("SigEd448"),new Uint8Array([r?1:0,t.length]),t,e)},uvRatio:function(e,t){const r=Oh,i=uc(e*e*t,r),n=uc(i*e,r),s=uc(n*i*t,r),a=uc(n*Zh(s),r),o=uc(a*a,r);return{isValid:uc(o*t,r)===e,value:a}}},tu=/* @__PURE__ */Lh(eu),ru=/* @__PURE__ */(()=>Fh({a:BigInt(156326),montgomeryBits:448,nByteLength:56,P:Oh,Gu:BigInt(5),powPminus2:e=>{const t=Oh;return uc(yc(Zh(e),BigInt(2),t)*e,t)},adjustScalarBytes:$h,randomBytes:Do}))();Xh.ORDER,BigInt(3),BigInt(4),BigInt(156326),BigInt("39082"),BigInt("78163"),BigInt("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),BigInt("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716"),BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
7
12
  /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
8
- const oc=Object.freeze(Wa.new(0)),cc=Object.freeze(Wa.new(1));function hc(t,e){const r=(t,e)=>{const r=e.negate();return t?r:e},i=t=>({windows:Math.ceil(e/t)+1,windowSize:2**(t-1)});return{constTimeNegate:r,unsafeLadder(e,r){const i=r.clone();let n=t.ZERO,s=e;for(;i.gt(oc);)i.isEven()||(n=n.add(s)),s=s.double(),i.irightShift(cc);return n},precomputeWindow(t,e){const{windows:r,windowSize:n}=i(e),s=[];let a=t,o=a;for(let t=0;t<r;t++){o=a,s.push(o);for(let t=1;t<n;t++)o=o.add(a),s.push(o);a=o.double()}return s},wNAF(e,n,s){const a=s.clone(),{windows:o,windowSize:c}=i(e);let h=t.ZERO,u=t.BASE;const l=Wa.new(2**e-1),f=2**e,y=Wa.new(e);for(let t=0;t<o;t++){const e=t*c;let i=a.bitwiseAnd(l).toNumber();a.irightShift(y),i>c&&(i-=f,a.iinc());const s=e,o=e+Math.abs(i)-1,d=t%2!=0,p=i<0;0===i?u=u.add(r(d,n[s])):h=h.add(r(p,n[o]))}return{p:h,f:u}},wNAFCached(t,e,r,i){const n=t._WINDOW_SIZE||1;let s=e.get(t);return s||(s=this.precomputeWindow(t,n),1!==n&&e.set(t,i(s))),this.wNAF(n,s,r)}}}function uc(t){return Oo(t.Fp,rc.reduce(((t,e)=>(t[e]="function",t)),{ORDER:"BigInteger",MASK:"BigInteger",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),Oo(t,{n:"BigInteger",h:"BigInteger",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...ic(t.n,t.nBitLength),...t,p:t.Fp.ORDER})}
9
- /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:lc,hexToBytes:fc}=Fo,yc={Err:class extends Error{constructor(t=""){super(t)}},_parseInt(t){const{Err:e}=yc;if(t.length<2||2!==t[0])throw new e("Invalid signature integer tag");const r=t[1],i=t.subarray(2,r+2);if(!r||i.length!==r)throw new e("Invalid signature integer: wrong length");if(128&i[0])throw new e("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new e("Invalid signature integer: unnecessary leading zero");return{d:lc(i),l:t.subarray(r+2)}},toSig(t){const{Err:e}=yc,r="string"==typeof t?fc(t):t;if(!Eo(r))throw Error("ui8a expected");let i=r.length;if(i<2||48!=r[0])throw new e("Invalid signature tag");if(r[1]!==i-2)throw new e("Invalid signature: incorrect length");const{d:n,l:s}=yc._parseInt(r.subarray(2)),{d:a,l:o}=yc._parseInt(s);if(o.length)throw new e("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(t){const e=t=>8&Number.parseInt(t[0],16)?"00"+t:t,r=t=>{const e=t instanceof Wa?So(t.toUint8Array()):t.toString(16);return 1&e.length?"0"+e:e},i=e(r(t.s)),n=e(r(t.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},dc=Object.freeze(Wa.new(0)),pc=Object.freeze(Wa.new(1));Object.freeze(Wa.new(2));const gc=Object.freeze(Wa.new(3));function mc(t){const e=function(t){const e=uc(t);Oo(e,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=e;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||!(r.beta instanceof Wa)||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...e})}(t),{Fp:r}=e,i=e.toBytes||((t,e,i)=>{const n=e.toAffine();return Qo(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=e.fromBytes||(t=>{const e=t.subarray(1);return{x:r.fromBytes(e.subarray(0,r.BYTES)),y:r.fromBytes(e.subarray(r.BYTES,2*r.BYTES))}});function s(t){const{a:i,b:n}=e,s=r.sqr(t),a=r.mul(s,t);return r.add(r.add(a,r.mul(t,i)),n)}if(!r.eql(r.sqr(e.Gy),s(e.Gx)))throw Error("bad generator point: equation left != right");function a(t){return t instanceof Wa&&dc.lt(t)&&t.lt(e.n)}function o(t){if(!a(t))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(t){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=e;if(r&&!(t instanceof Wa)){if(Eo(t)&&(t=So(t)),"string"!=typeof t||!r.includes(t.length))throw Error("Invalid key");t=t.padStart(2*i,"0")}let a;try{a=t instanceof Wa?t:Po(xo("private key",t,i))}catch(e){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof t}`)}return n&&(a=Wo(a,s)),o(a),a}const h=new Map;function u(t){if(!(t instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(t,e,i){if(this.px=t,this.py=e,this.pz=i,null==t||!r.isValid(t))throw Error("x required");if(null==e||!r.isValid(e))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(t){const{x:e,y:i}=t||{};if(!t||!r.isValid(e)||!r.isValid(i))throw Error("invalid affine point");if(t instanceof l)throw Error("projective point not allowed");const n=t=>r.eql(t,r.ZERO);return n(e)&&n(i)?l.ZERO:new l(e,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(t){const e=r.invertBatch(t.map((t=>t.pz)));return t.map(((t,r)=>t.toAffine(e[r]))).map(l.fromAffine)}static fromHex(t){const e=l.fromAffine(n(xo("pointHex",t)));return e.assertValidity(),e}static fromPrivateKey(t){return l.BASE.multiply(c(t))}_setWindowSize(t){this._WINDOW_SIZE=t,h.delete(this)}assertValidity(){if(this.is0()){if(e.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:t,y:i}=this.toAffine();if(!r.isValid(t)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(t);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:t}=this.toAffine();if(r.isOdd)return!r.isOdd(t);throw Error("Field doesn't support isOdd")}equals(t){u(t);const{px:e,py:i,pz:n}=this,{px:s,py:a,pz:o}=t,c=r.eql(r.mul(e,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:t,b:i}=e,n=r.mul(i,gc),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,f=r.mul(s,s),y=r.mul(a,a),d=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(t,u),h=r.mul(n,d),h=r.add(c,h),c=r.sub(y,h),h=r.add(y,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),d=r.mul(t,d),p=r.sub(f,d),p=r.mul(t,p),p=r.add(p,u),u=r.add(f,f),f=r.add(u,f),f=r.add(f,d),f=r.mul(f,p),h=r.add(h,f),d=r.mul(a,o),d=r.add(d,d),f=r.mul(d,p),c=r.sub(c,f),u=r.mul(d,y),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(t){u(t);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=t;let h=r.ZERO,f=r.ZERO,y=r.ZERO;const d=e.a,p=r.mul(e.b,gc);let g=r.mul(i,a),m=r.mul(n,o),w=r.mul(s,c),A=r.add(i,n),b=r.add(a,o);A=r.mul(A,b),b=r.add(g,m),A=r.sub(A,b),b=r.add(i,s);let v=r.add(a,c);return b=r.mul(b,v),v=r.add(g,w),b=r.sub(b,v),v=r.add(n,s),h=r.add(o,c),v=r.mul(v,h),h=r.add(m,w),v=r.sub(v,h),y=r.mul(d,b),h=r.mul(p,w),y=r.add(h,y),h=r.sub(m,y),y=r.add(m,y),f=r.mul(h,y),m=r.add(g,g),m=r.add(m,g),w=r.mul(d,w),b=r.mul(p,b),m=r.add(m,w),w=r.sub(g,w),w=r.mul(d,w),b=r.add(b,w),g=r.mul(m,b),f=r.add(f,g),g=r.mul(v,b),h=r.mul(A,h),h=r.sub(h,g),g=r.mul(A,m),y=r.mul(v,y),y=r.add(y,g),new l(h,f,y)}subtract(t){return this.add(t.negate())}is0(){return this.equals(l.ZERO)}wNAF(t){return y.wNAFCached(this,h,t,(t=>{const e=r.invertBatch(t.map((t=>t.pz)));return t.map(((t,r)=>t.toAffine(e[r]))).map(l.fromAffine)}))}multiplyUnsafe(t){const i=l.ZERO;if(t.isZero())return i;if(o(t),t.isOne())return this;const{endo:n}=e;if(!n)return y.unsafeLadder(this,t);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(t),u=i,f=i,d=this;for(;a.gt(dc)||h.gt(dc);)a.isEven()||(u=u.add(d)),h.isEven()||(f=f.add(d)),d=d.double(),a=a.rightShift(pc),h=h.rightShift(pc);return s&&(u=u.negate()),c&&(f=f.negate()),f=new l(r.mul(f.px,n.beta),f.py,f.pz),u.add(f)}multiply(t){o(t);let i,n,s=t;const{endo:a}=e;if(a){const{k1neg:t,k1:e,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(e),{p:f,f:d}=this.wNAF(c);h=y.constTimeNegate(t,h),f=y.constTimeNegate(o,f),f=new l(r.mul(f.px,a.beta),f.py,f.pz),i=h.add(f),n=u.add(d)}else{const{p:t,f:e}=this.wNAF(s);i=t,n=e}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(t,e,r){const i=l.BASE,n=(t,e)=>e.isZero()||e.isOne()||!t.equals(i)?t.multiplyUnsafe(e):t.multiply(e),s=n(this,e).add(n(t,r));return s.is0()?void 0:s}toAffine(t){const{px:e,py:i,pz:n}=this,s=this.is0();null==t&&(t=s?r.ONE:r.inv(n));const a=r.mul(e,t),o=r.mul(i,t),c=r.mul(n,t);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:t,isTorsionFree:r}=e;if(t.isOne())return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:t,clearCofactor:r}=e;return t.isOne()?this:r?r(l,this):this.multiplyUnsafe(e.h)}toRawBytes(t=!0){return this.assertValidity(),i(l,this,t)}toHex(t=!0){return So(this.toRawBytes(t))}}l.BASE=new l(e.Gx,e.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const f=e.nBitLength,y=hc(l,e.endo?Math.ceil(f/2):f);return{CURVE:e,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function wc(t){const e=function(t){const e=uc(t);return Oo(e,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...e})}(t),{Fp:r,n:i}=e,n=r.BYTES+1,s=2*r.BYTES+1;function a(t){return Wo(t,i)}function o(t){return tc(t,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=mc({...e,toBytes(t,e,i){const n=e.toAffine(),s=r.toBytes(n.x),a=Qo;return i?a(Uint8Array.from([e.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(t){const e=t.length,i=t[0],a=t.subarray(1);if(e!==n||2!==i&&3!==i){if(e===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${e} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const t=Po(a);if(o=t,!dc.lt(o)||!o.lt(r.ORDER))throw Error("Point is not on curve");const e=u(t);let n=r.sqrt(e);return!(1&~i)!==!n.isEven()&&(n=r.neg(n)),{x:t,y:n}}var o}}),f=t=>So(Uo(t,e.nByteLength));function y(t){const e=i.rightShift(pc);return t.gt(e)}const d=(t,e,r)=>Po(t.slice(e,r));class p{constructor(t,e,r){this.r=t,this.s=e,this.recovery=r,this.assertValidity()}static fromCompact(t){const r=e.nByteLength;return t=xo("compactSignature",t,2*r),new p(d(t,0,r),d(t,r,2*r))}static fromDER(t){const{r:e,s:r}=yc.toSig(xo("DER",t));return new p(e,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(t){return new p(this.r,this.s,t)}recoverPublicKey(t){const{r:i,s:n,recovery:s}=this,h=A(xo("msgHash",t));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i.add(e.n):i;if(u.gte(r.ORDER))throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",y=c.fromHex(l+f(u)),d=o(u),p=a(h.negate().imul(d)),g=a(n.mul(d)),m=c.BASE.multiplyAndAddUnsafe(y,p,g);if(!m)throw Error("point at infinify");return m.assertValidity(),m}hasHighS(){return y(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(this.s.negate()),this.recovery):this}toDERRawBytes(){return Ko(this.toDERHex())}toDERHex(){return yc.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return Ko(this.toCompactHex())}toCompactHex(){return f(this.r)+f(this.s)}}const g={isValidPrivateKey(t){try{return h(t),!0}catch(t){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const t=ac(e.n);return function(t,e,r=!1){const i=t.length,n=sc(e),s=ac(e);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=Wo(r?Po(t):Do(t),e.dec()).inc();return r?Mo(a,n):Uo(a,n)}(e.randomBytes(t),e.n)},precompute:(t=8,e=c.BASE)=>(e._setWindowSize(t),e.multiply(Wa.new(3)),e)};function m(t){const e=Eo(t),r="string"==typeof t,i=(e||r)&&t.length;return e?i===n||i===s:r?i===2*n||i===2*s:t instanceof c}const w=e.bits2int||function(t){const r=Po(t),i=8*t.length-e.nBitLength;return i>0?r.rightShift(Wa.new(i)):r},A=e.bits2int_modN||function(t){return a(w(t))},b=Ro(e.nBitLength);function v(t){if(!(t instanceof Wa))throw Error("bigint expected");if(!dc.lte(t)||!t.lt(b))throw Error("bigint expected < 2^"+e.nBitLength);return Uo(t,e.nByteLength)}function E(t,i,n=k){if(["recovered","canonical"].some((t=>t in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=e;let{lowS:f,prehash:d,extraEntropy:g}=n;null==f&&(f=!0),t=xo("msgHash",t),d&&(t=xo("prehashed msgHash",s(t)));const m=A(t),b=h(i),E=[v(b),v(m)];if(null!=g){const t=!0===g?u(r.BYTES):g;E.push(xo("extraEntropy",t))}const S=Qo(...E),I=m;return{seed:S,k2sig:function(t){const e=w(t);if(!l(e))return;const r=o(e),i=c.BASE.multiply(e).toAffine(),n=a(i.x);if(n.isZero())return;const s=a(r.mul(a(I.add(n.mul(b)))));if(s.isZero())return;let h=(i.x.equal(n)?0:2)|i.y.getBit(0),u=s;return f&&y(s)&&(u=function(t){return y(t)?a(t.negate()):t}(s),h^=1),new p(n,u,h)}}}const k={lowS:e.lowS,prehash:!1},S={lowS:e.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:e,getPublicKey:function(t,e=!0){return c.fromPrivateKey(t).toRawBytes(e)},getSharedSecret:function(t,e,r=!0){if(m(t))throw Error("first arg must be private key");if(!m(e))throw Error("second arg must be public key");return c.fromHex(e).multiply(h(t)).toRawBytes(r)},sign:function(t,r,i=k){const{seed:n,k2sig:s}=E(t,r,i),a=e;return Lo(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(t,r,i,n=S){const s=t;if(r=xo("msgHash",r),i=xo("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,f;try{if("string"==typeof s||Eo(s))try{l=p.fromDER(s)}catch(t){if(!(t instanceof yc.Err))throw t;l=p.fromCompact(s)}else{if(!("object"==typeof s&&s.r instanceof Wa&&s.s instanceof Wa))throw Error("PARSE");{const{r:t,s:e}=s;l=new p(t,e)}}f=c.fromHex(i)}catch(t){if("PARSE"===t.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=e.hash(r));const{r:y,s:d}=l,g=A(r),m=o(d),w=a(g.mul(m)),b=a(y.mul(m)),v=c.BASE.multiplyAndAddUnsafe(f,w,b)?.toAffine();return!!v&&a(v.x).equal(y)},ProjectivePoint:c,Signature:p,utils:g}}
10
- /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Ac(t){return{hash:t,hmac:(e,...r)=>bo(t,e,po(...r)),randomBytes:wo}}function bc(t,e){const r=e=>wc({...t,...Ac(e)});return Object.freeze({...r(e),create:r})}Object.freeze(Wa.new(4));class vc extends go{constructor(t,e,r,i){super(),this.blockLen=t,this.outputLen=e,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(t),this.view=uo(this.buffer)}update(t){ao(this);const{view:e,buffer:r,blockLen:i}=this,n=(t=yo(t)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(t.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(e,0),this.pos=0);else{const e=uo(t);for(;i<=n-s;s+=i)this.process(e,s)}}return this.length+=t.length,this.roundClean(),this}digestInto(t){ao(this),oo(t,this),this.finished=!0;const{buffer:e,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;e[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let t=s;t<i;t++)e[t]=0;!function(t,e,r,i){if("function"==typeof t.setBigUint64)return t.setBigUint64(e,BigInt(r.toString()),i);const n=Object.freeze(Wa.new(32)),s=Object.freeze(Wa.new(4294967295)),a=r.rightShift(n).bitwiseAnd(s).toNumber(),o=r.bitwiseAnd(s).toNumber(),c=i?4:0,h=i?0:4;t.setUint32(e+c,a,i),t.setUint32(e+h,o,i)}(r,i-8,Wa.new(8*this.length),n),this.process(r,0);const a=uo(t),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let t=0;t<c;t++)a.setUint32(4*t,h[t],n)}digest(){const{buffer:t,outputLen:e}=this;this.digestInto(t);const r=t.slice(0,e);return this.destroy(),r}_cloneInto(t){t||(t=new this.constructor),t.set(...this.get());const{blockLen:e,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return t.length=i,t.pos=a,t.finished=n,t.destroyed=s,i%e&&t.buffer.set(r),t}}const Ec=(t,e,r)=>t&e^t&r^e&r,kc=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Sc=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Ic=/* @__PURE__ */new Uint32Array(64);class Cc extends vc{constructor(){super(64,32,8,!1),this.A=0|Sc[0],this.B=0|Sc[1],this.C=0|Sc[2],this.D=0|Sc[3],this.E=0|Sc[4],this.F=0|Sc[5],this.G=0|Sc[6],this.H=0|Sc[7]}get(){const{A:t,B:e,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[t,e,r,i,n,s,a,o]}set(t,e,r,i,n,s,a,o){this.A=0|t,this.B=0|e,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(t,e){for(let r=0;r<16;r++,e+=4)Ic[r]=t.getUint32(e,!1);for(let t=16;t<64;t++){const e=Ic[t-15],r=Ic[t-2],i=lo(e,7)^lo(e,18)^e>>>3,n=lo(r,17)^lo(r,19)^r>>>10;Ic[t]=n+Ic[t-7]+i+Ic[t-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let t=0;t<64;t++){const e=h+(lo(a,6)^lo(a,11)^lo(a,25))+((u=a)&o^~u&c)+kc[t]+Ic[t]|0,l=(lo(r,2)^lo(r,13)^lo(r,22))+Ec(r,i,n)|0;h=c,c=o,o=a,a=s+e|0,s=n,n=i,i=r,r=e+l|0}var u;r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){Ic.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class Bc extends Cc{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Kc=/* @__PURE__ */mo((()=>new Cc)),Pc=/* @__PURE__ */mo((()=>new Bc)),Dc=nc(Wa.new("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),Uc=bc({a:Dc.create(Wa.new("-3")),b:Wa.new("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Dc,n:Wa.new("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:Wa.new("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:Wa.new("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:Wa.new(1),lowS:!1},Kc),Mc=Object.freeze(Wa.new(2**32-1)),xc=Object.freeze(Wa.new(32));function Qc(t,e=!1){return e?{h:t.bitwiseAnd(Mc).toNumber(),l:t.rightShift(xc).bitwiseAnd(Mc).toNumber()}:{h:0|t.rightShift(xc).bitwiseAnd(Mc).toNumber(),l:0|t.bitwiseAnd(Mc).toNumber()}}function Rc(t,e=!1){let r=new Uint32Array(t.length),i=new Uint32Array(t.length);for(let n=0;n<t.length;n++){const{h:s,l:a}=Qc(t[n],e);[r[n],i[n]]=[s,a]}return[r,i]}const _c=(t,e,r)=>t<<r|e>>>32-r,Tc=(t,e,r)=>e<<r|t>>>32-r,Lc=(t,e,r)=>e<<r-32|t>>>64-r,Nc=(t,e,r)=>t<<r-32|e>>>64-r;const Oc={fromBig:Qc,split:Rc,toBig:(t,e)=>Wa.new(t>>>0).ileftShift(xc).ibitwiseOr(Wa.new(e>>>0)),shrSH:(t,e,r)=>t>>>r,shrSL:(t,e,r)=>t<<32-r|e>>>r,rotrSH:(t,e,r)=>t>>>r|e<<32-r,rotrSL:(t,e,r)=>t<<32-r|e>>>r,rotrBH:(t,e,r)=>t<<64-r|e>>>r-32,rotrBL:(t,e,r)=>t>>>r-32|e<<64-r,rotr32H:(t,e)=>e,rotr32L:(t,e)=>t,rotlSH:_c,rotlSL:Tc,rotlBH:Lc,rotlBL:Nc,add:function(t,e,r,i){const n=(e>>>0)+(i>>>0);return{h:t+r+(n/2**32|0)|0,l:0|n}},add3L:(t,e,r)=>(t>>>0)+(e>>>0)+(r>>>0),add3H:(t,e,r,i)=>e+r+i+(t/2**32|0)|0,add4L:(t,e,r,i)=>(t>>>0)+(e>>>0)+(r>>>0)+(i>>>0),add4H:(t,e,r,i,n)=>e+r+i+n+(t/2**32|0)|0,add5H:(t,e,r,i,n,s)=>e+r+i+n+s+(t/2**32|0)|0,add5L:(t,e,r,i,n)=>(t>>>0)+(e>>>0)+(r>>>0)+(i>>>0)+(n>>>0)},[Fc,Hc]=/* @__PURE__ */(()=>Oc.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((t=>Wa.new(t)))))(),zc=/* @__PURE__ */new Uint32Array(80),Gc=/* @__PURE__ */new Uint32Array(80);class qc extends vc{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:t,Al:e,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:f,Gl:y,Hh:d,Hl:p}=this;return[t,e,r,i,n,s,a,o,c,h,u,l,f,y,d,p]}set(t,e,r,i,n,s,a,o,c,h,u,l,f,y,d,p){this.Ah=0|t,this.Al=0|e,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|f,this.Gl=0|y,this.Hh=0|d,this.Hl=0|p}process(t,e){for(let r=0;r<16;r++,e+=4)zc[r]=t.getUint32(e),Gc[r]=t.getUint32(e+=4);for(let t=16;t<80;t++){const e=0|zc[t-15],r=0|Gc[t-15],i=Oc.rotrSH(e,r,1)^Oc.rotrSH(e,r,8)^Oc.shrSH(e,r,7),n=Oc.rotrSL(e,r,1)^Oc.rotrSL(e,r,8)^Oc.shrSL(e,r,7),s=0|zc[t-2],a=0|Gc[t-2],o=Oc.rotrSH(s,a,19)^Oc.rotrBH(s,a,61)^Oc.shrSH(s,a,6),c=Oc.rotrSL(s,a,19)^Oc.rotrBL(s,a,61)^Oc.shrSL(s,a,6),h=Oc.add4L(n,c,Gc[t-7],Gc[t-16]),u=Oc.add4H(h,i,o,zc[t-7],zc[t-16]);zc[t]=0|u,Gc[t]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:f,Fl:y,Gh:d,Gl:p,Hh:g,Hl:m}=this;for(let t=0;t<80;t++){const e=Oc.rotrSH(u,l,14)^Oc.rotrSH(u,l,18)^Oc.rotrBH(u,l,41),w=Oc.rotrSL(u,l,14)^Oc.rotrSL(u,l,18)^Oc.rotrBL(u,l,41),A=u&f^~u&d,b=l&y^~l&p,v=Oc.add5L(m,w,b,Hc[t],Gc[t]),E=Oc.add5H(v,g,e,A,Fc[t],zc[t]),k=0|v,S=Oc.rotrSH(r,i,28)^Oc.rotrBH(r,i,34)^Oc.rotrBH(r,i,39),I=Oc.rotrSL(r,i,28)^Oc.rotrBL(r,i,34)^Oc.rotrBL(r,i,39),C=r&n^r&a^n&a,B=i&s^i&o^s&o;g=0|d,m=0|p,d=0|f,p=0|y,f=0|u,y=0|l,({h:u,l}=Oc.add(0|c,0|h,0|E,0|k)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=Oc.add3L(k,I,B);r=Oc.add3H(K,E,S,C),i=0|K}({h:r,l:i}=Oc.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=Oc.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=Oc.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=Oc.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=Oc.add(0|this.Eh,0|this.El,0|u,0|l)),({h:f,l:y}=Oc.add(0|this.Fh,0|this.Fl,0|f,0|y)),({h:d,l:p}=Oc.add(0|this.Gh,0|this.Gl,0|d,0|p)),({h:g,l:m}=Oc.add(0|this.Hh,0|this.Hl,0|g,0|m)),this.set(r,i,n,s,a,o,c,h,u,l,f,y,d,p,g,m)}roundClean(){zc.fill(0),Gc.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class jc extends qc{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const Vc=/* @__PURE__ */mo((()=>new qc)),Zc=/* @__PURE__ */mo((()=>new jc)),Jc=nc(Wa.new("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),Yc=bc({a:Jc.create(Wa.new("-3")),b:Wa.new("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:Jc,n:Wa.new("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:Wa.new("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:Wa.new("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:Wa.new(1),lowS:!1},Zc),Wc=nc(Wa.new("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),$c={a:Wc.create(Wa.new("-3")),b:Wa.new("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:Wc,n:Wa.new("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:Wa.new("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:Wa.new("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:Wa.new(1)},Xc=bc({a:$c.a,b:$c.b,Fp:Wc,n:$c.n,Gx:$c.Gx,Gy:$c.Gy,h:$c.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},Vc),th=nc(Wa.new("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),eh=bc({a:th.create(Wa.new("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:Wa.new("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:th,n:Wa.new("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:Wa.new("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:Wa.new("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:Wa.new(1),lowS:!1},Kc),rh=nc(Wa.new("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),ih=bc({a:rh.create(Wa.new("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:Wa.new("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:rh,n:Wa.new("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:Wa.new("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:Wa.new("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:Wa.new(1),lowS:!1},Zc),nh=nc(Wa.new("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),sh=bc({a:nh.create(Wa.new("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:Wa.new("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:nh,n:Wa.new("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:Wa.new("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:Wa.new("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:Wa.new(1),lowS:!1},Vc),[ah,oh,ch]=[[],[],[]],hh=/* @__PURE__ */Object.freeze(Wa.new(0)),uh=/* @__PURE__ */Object.freeze(Wa.new(1)),lh=/* @__PURE__ */Object.freeze(Wa.new(2)),fh=/* @__PURE__ */Object.freeze(Wa.new(7)),yh=/* @__PURE__ */Object.freeze(Wa.new(256)),dh=/* @__PURE__ */Object.freeze(Wa.new(113));for(let t=0,e=uh,r=1,i=0;t<24;t++){[r,i]=[i,(2*r+3*i)%5],ah.push(2*(5*i+r)),oh.push((t+1)*(t+2)/2%64);const n=hh.clone();for(let t=0;t<7;t++)e=e.leftShift(uh).ixor(e.rightShift(fh).imul(dh)).imod(yh),e.bitwiseAnd(lh).isZero()||n.ixor(uh.leftShift(uh.leftShift(/* @__PURE__ */Wa.new(t)).idec()));ch.push(n)}const[ph,gh]=/* @__PURE__ */Rc(ch,!0),mh=(t,e,r)=>r>32?Lc(t,e,r):_c(t,e,r),wh=(t,e,r)=>r>32?Nc(t,e,r):Tc(t,e,r);class Ah extends go{constructor(t,e,r,i=!1,n=24){if(super(),this.blockLen=t,this.suffix=e,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,no(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){!function(t,e=24){const r=new Uint32Array(10);for(let i=24-e;i<24;i++){for(let e=0;e<10;e++)r[e]=t[e]^t[e+10]^t[e+20]^t[e+30]^t[e+40];for(let e=0;e<10;e+=2){const i=(e+8)%10,n=(e+2)%10,s=r[n],a=r[n+1],o=mh(s,a,1)^r[i],c=wh(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)t[e+r]^=o,t[e+r+1]^=c}let e=t[2],n=t[3];for(let r=0;r<24;r++){const i=oh[r],s=mh(e,n,i),a=wh(e,n,i),o=ah[r];e=t[o],n=t[o+1],t[o]=s,t[o+1]=a}for(let e=0;e<50;e+=10){for(let i=0;i<10;i++)r[i]=t[e+i];for(let i=0;i<10;i++)t[e+i]^=~r[(i+2)%10]&r[(i+4)%10]}t[0]^=ph[i],t[1]^=gh[i]}r.fill(0)}(this.state32,this.rounds),this.posOut=0,this.pos=0}update(t){ao(this);const{blockLen:e,state:r}=this,i=(t=yo(t)).length;for(let n=0;n<i;){const s=Math.min(e-this.pos,i-n);for(let e=0;e<s;e++)r[this.pos++]^=t[n++];this.pos===e&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:t,suffix:e,pos:r,blockLen:i}=this;t[r]^=e,128&e&&r===i-1&&this.keccak(),t[i-1]^=128,this.keccak()}writeInto(t){ao(this,!1),so(t),this.finish();const e=this.state,{blockLen:r}=this;for(let i=0,n=t.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);t.set(e.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return t}xofInto(t){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(t)}xof(t){return no(t),this.xofInto(new Uint8Array(t))}digestInto(t){if(oo(t,this),this.finished)throw Error("digest() was already called");return this.writeInto(t),this.destroy(),t}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(t){const{blockLen:e,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return t||(t=new Ah(e,r,i,s,n)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=n,t.suffix=r,t.outputLen=i,t.enableXOF=s,t.destroyed=this.destroyed,t}}const bh=(t,e,r)=>mo((()=>new Ah(e,t,r))),vh=/* @__PURE__ */bh(6,136,32),Eh=/* @__PURE__ */bh(6,72,64),kh=/* @__PURE__ */((t,e,r)=>function(t){const e=(e,r)=>t(r).update(yo(e)).digest(),r=t({});return e.outputLen=r.outputLen,e.blockLen=r.blockLen,e.create=e=>t(e),e}(((i={})=>new Ah(e,t,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),Sh=Object.freeze(Wa.new(0)),Ih=Object.freeze(Wa.new(1)),Ch=Object.freeze(Wa.new(2)),Bh=Object.freeze(Wa.new(3)),Kh=Object.freeze(Wa.new(8)),Ph={zip215:!0};function Dh(t){const e=function(t){const e=uc(t);return Oo(t,{hash:"function",a:"BigInteger",d:"BigInteger",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...e})}(t),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=e,h=Ch.leftShift(Wa.new(8*o).idec()),u=r.create,l=e.uvRatio||((t,e)=>{try{return{isValid:!0,value:r.sqrt(t.mul(r.inv(e)))}}catch(t){return{isValid:!1,value:Sh}}}),f=e.adjustScalarBytes||(t=>t),y=e.domain||((t,e,r)=>{if(e.length||r)throw Error("Contexts/pre-hash are not supported");return t}),d=t=>t instanceof Wa&&t.gt(Sh),p=(t,e)=>d(t)&&d(e)&&t.lt(e),g=t=>t.isZero()||p(t,h);function m(t,e){if(p(t,e))return t;throw Error(`Expected valid scalar < ${e}, got ${typeof t} ${t}`)}function w(t){return t.isZero()?t:m(t,i)}const A=new Map;function b(t){if(!(t instanceof v))throw Error("ExtendedPoint expected")}class v{constructor(t,e,r,i){if(this.ex=t,this.ey=e,this.ez=r,this.et=i,!g(t))throw Error("x required");if(!g(e))throw Error("y required");if(!g(r))throw Error("z required");if(!g(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(t){if(t instanceof v)throw Error("extended point not allowed");const{x:e,y:r}=t||{};if(!g(e)||!g(r))throw Error("invalid affine point");return new v(e,r,Ih,u(e.mul(r)))}static normalizeZ(t){const e=r.invertBatch(t.map((t=>t.ez)));return t.map(((t,r)=>t.toAffine(e[r]))).map(v.fromAffine)}_setWindowSize(t){this._WINDOW_SIZE=t,A.delete(this)}assertValidity(){const{a:t,d:r}=e;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i.mul(i)),c=u(n.mul(n)),h=u(s.mul(s)),l=u(h.mul(h)),f=u(o.mul(t)),y=u(h.mul(u(f.add(c)))),d=u(l.add(u(r.mul(u(o.mul(c))))));if(!y.equal(d))throw Error("bad point: equation left != right (1)");const p=u(i.mul(n)),g=u(s.mul(a));if(!p.equal(g))throw Error("bad point: equation left != right (2)")}equals(t){b(t);const{ex:e,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=t,o=u(e.mul(a)),c=u(n.mul(i)),h=u(r.mul(a)),l=u(s.mul(i));return o.equal(c)&&h.equal(l)}is0(){return this.equals(v.ZERO)}negate(){return new v(u(this.ex.negate()),this.ey,this.ez,u(this.et.negate()))}double(){const{a:t}=e,{ex:r,ey:i,ez:n}=this,s=u(r.mul(r)),a=u(i.mul(i)),o=u(Ch.mul(u(n.mul(n)))),c=u(t.mul(s)),h=r.add(i),l=u(u(h.mul(h)).sub(s).isub(a)),f=c.add(a),y=f.sub(o),d=c.sub(a),p=u(l.mul(y)),g=u(f.mul(d)),m=u(l.mul(d)),w=u(y.mul(f));return new v(p,g,w,m)}add(t){b(t);const{a:r,d:i}=e,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:f}=t;if(r.equal(Wa.new(-1))){const t=u(s.sub(n).imul(h.add(c))),e=u(s.add(n).imul(h.sub(c))),r=u(e.sub(t));if(r.isZero())return this.double();const i=u(a.mul(Ch).imul(f)),y=u(o.mul(Ch).imul(l)),d=y.add(i),p=e.add(t),g=y.sub(i),m=u(d.mul(r)),w=u(p.mul(g)),A=u(d.mul(g)),b=u(r.mul(p));return new v(m,w,b,A)}const y=u(n.mul(c)),d=u(s.mul(h)),p=u(o.mul(i).imul(f)),g=u(a.mul(l)),m=u(n.add(s).imul(c.add(h)).isub(y).isub(d)),w=g.sub(p),A=g.add(p),E=u(d.sub(r.mul(y))),k=u(m.mul(w)),S=u(A.mul(E)),I=u(m.mul(E)),C=u(w.mul(A));return new v(k,S,C,I)}subtract(t){return this.add(t.negate())}wNAF(t){return S.wNAFCached(this,A,t,v.normalizeZ)}multiply(t){const{p:e,f:r}=this.wNAF(m(t,i));return v.normalizeZ([e,r])[0]}multiplyUnsafe(t){let e=w(t);return e.isZero()?k:this.equals(k)||e.isOne()?this:this.equals(E)?this.wNAF(e).p:S.unsafeLadder(this,e)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return S.unsafeLadder(this,i).is0()}toAffine(t){const{ex:e,ey:i,ez:n}=this,s=this.is0();null==t&&(t=s?Kh:r.inv(n));const a=u(e.mul(t)),o=u(i.mul(t)),c=u(n.mul(t));if(s)return{x:Sh.clone(),y:Ih.clone()};if(!c.isOne())throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:t}=e;return t.isOne()?this:this.multiplyUnsafe(t)}static fromHex(t,i=!1){const{d:n,a:s}=e,a=r.BYTES,o=(t=xo("pointHex",t,a)).slice(),c=t[a-1];o[a-1]=-129&c;const f=Do(o);f.isZero()||m(f,i?h:r.ORDER);const y=u(f.mul(f)),d=u(y.dec()),p=u(n.mul(y).isub(s));let{isValid:g,value:w}=l(d,p);if(!g)throw Error("Point.fromHex: invalid y coordinate");const A=!w.isEven(),b=!!(128&c);if(!i&&w.isZero()&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==A&&(w=u(w.negate())),v.fromAffine({x:w,y:f})}static fromPrivateKey(t){return B(t).point}toRawBytes(){const{x:t,y:e}=this.toAffine(),i=e.toUint8Array("le",r.BYTES);return i[i.length-1]|=t.isEven()?0:128,i}toHex(){return So(this.toRawBytes())}}v.BASE=new v(e.Gx,e.Gy,Ih,u(e.Gx.mul(e.Gy))),v.ZERO=new v(Sh,Ih,Ih,Sh);const{BASE:E,ZERO:k}=v,S=hc(v,8*o);function I(t){return Wo(t,i)}function C(t){return I(Do(t))}function B(t){const e=o;t=xo("private key",t,e);const r=xo("hashed private key",s(t),2*e),i=f(r.slice(0,e)),n=r.slice(e,2*e),a=C(i),c=E.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(t=new Uint8Array,...e){const r=Qo(...e);return C(s(y(r,xo("context",t),!!n)))}const P=Ph;E._setWindowSize(8);return{CURVE:e,getPublicKey:function(t){return B(t).pointBytes},sign:function(t,e,i={}){t=xo("message",t),n&&(t=n(t));const{prefix:s,scalar:a,pointBytes:c}=B(e),h=K(i.context,s,t),u=E.multiply(h).toRawBytes(),l=K(i.context,u,c,t),f=I(h.add(l.mul(a)));return w(f),xo("result",Qo(u,f.toUint8Array("le",r.BYTES)),2*o)},verify:function(t,e,i,s=P){const{context:a,zip215:o}=s,c=r.BYTES;t=xo("signature",t,2*c),e=xo("message",e),n&&(e=n(e));const h=Do(t.slice(c,2*c));let u,l,f;try{u=v.fromHex(i,o),l=v.fromHex(t.slice(0,c),o),f=E.multiplyUnsafe(h)}catch(t){return!1}if(!o&&u.isSmallOrder())return!1;const y=K(a,l.toRawBytes(),u.toRawBytes(),e);return l.add(u.multiplyUnsafe(y)).subtract(f).clearCofactor().equals(v.ZERO)},ExtendedPoint:v,utils:{getExtendedPublicKey:B,randomPrivateKey:()=>a(r.BYTES),precompute:(t=8,e=v.BASE)=>(e._setWindowSize(t),e.multiply(Bh),e)}}}
11
- /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Uh=Object.freeze(Wa.new(0)),Mh=Object.freeze(Wa.new(1)),xh=Object.freeze(Wa.new(2));function Qh(t){const e=(Oo(r=t,{a:"BigInteger"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"BigInteger"}),Object.freeze({...r}));var r;const{P:i}=e,n=t=>Wo(t,i),s=e.montgomeryBits,a=Math.ceil(s/8),o=e.nByteLength,c=e.adjustScalarBytes||(t=>t),h=e.powPminus2||(t=>$o(t,i.sub(xh),i));function u(t,e,r){const i=n(t.mul(e.sub(r)));return[e=n(e.sub(i)),r=n(r.add(i))]}function l(t){if(t instanceof Wa&&!t.isNegative()&&t.lt(i))return t;throw Error("Expected valid scalar 0 < scalar < CURVE.P")}const f=e.a.sub(xh).irightShift(xh);function y(t){return Mo(n(t),a)}function d(t,e){const r=function(t){const e=xo("u coordinate",t,a);return 32===o&&(e[31]&=127),Do(e)}(e),i=function(t){const e=xo("scalar",t),r=e.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return Do(c(e))}(t),d=function(t,e){const r=l(t),i=l(e),a=r;let o,c=Mh,y=Uh,d=r,p=Mh,g=Uh.clone();for(let t=Wa.new(s-1);!t.isNegative();t.idec()){const e=Wa.new(i.rightShift(t).getBit(0));g.ixor(e),o=u(g,c,d),c=o[0],d=o[1],o=u(g,y,p),y=o[0],p=o[1],g=e;const r=c.add(y),s=n(r.mul(r)),h=c.sub(y),l=n(h.mul(h)),m=s.sub(l),w=d.add(p),A=d.sub(p),b=n(A.mul(r)),v=n(w.mul(h)),E=b.add(v),k=b.sub(v);d=n(E.mul(E)),p=n(a.mul(n(k.mul(k)))),c=n(s.mul(l)),y=n(m.mul(s.add(n(f.mul(m)))))}o=u(g,c,d),c=o[0],d=o[1],o=u(g,y,p),y=o[0],p=o[1];const m=h(y);return n(c.mul(m))}(r,i);if(d.isZero())throw Error("Invalid private or public key received");return y(d)}const p=y(e.Gu);function g(t){return d(t,p)}return{scalarMult:d,scalarMultBase:g,getSharedSecret:(t,e)=>d(t,e),getPublicKey:t=>g(t),utils:{randomPrivateKey:()=>e.randomBytes(e.nByteLength)},GuBytes:p}}
12
- /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Rh=mo((()=>kh.create({dkLen:114}))),_h=(mo((()=>kh.create({dkLen:64}))),Wa.new("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439")),Th=Wa.new(1),Lh=Wa.new(2),Nh=Wa.new(3),Oh=Wa.new(11),Fh=Wa.new(22),Hh=Wa.new(44),zh=Wa.new(88),Gh=Wa.new(223);function qh(t){const e=_h,r=t.modExp(Nh,e),i=r.mul(r).imul(t).imod(e),n=Xo(i,Nh,e).imul(i).imod(e),s=Xo(n,Nh,e).imul(i).imod(e),a=Xo(s,Lh,e).imul(r).imod(e),o=Xo(a,Oh,e).imul(a).imod(e),c=Xo(o,Fh,e).imul(o).imod(e),h=Xo(c,Hh,e).imul(c).imod(e),u=Xo(h,zh,e).imul(h).imod(e),l=Xo(u,Hh,e).imul(c).imod(e),f=Xo(l,Lh,e).imul(r).imod(e),y=Xo(f,Th,e).imul(t).imod(e);return Xo(y,Gh,e).imul(f).imod(e)}function jh(t){return t[0]&=252,t[55]|=128,t[56]=0,t}const Vh=nc(_h,456,!0),Zh={a:Wa.new(1),d:Wa.new("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:Vh,n:Wa.new("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:Wa.new(4),Gx:Wa.new("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:Wa.new("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Rh,randomBytes:wo,adjustScalarBytes:jh,domain:(t,e,r)=>{if(e.length>255)throw Error("Context is too big: "+e.length);return po(fo("SigEd448"),new Uint8Array([r?1:0,e.length]),e,t)},uvRatio:function(t,e){const r=_h,i=Wo(t.mul(t).imul(e),r),n=Wo(i.mul(t),r),s=qh(Wo(n.mul(i).imul(e),r)),a=Wo(n.mul(s),r),o=Wo(a.mul(a),r);return{isValid:Wo(o.mul(e),r).equal(t),value:a}}},Jh=/* @__PURE__ */Dh(Zh),Yh=/* @__PURE__ */(()=>Qh({a:Wa.new(156326),montgomeryBits:448,nByteLength:56,P:_h,Gu:Wa.new(5),powPminus2:t=>{const e=_h;return Wo(Xo(qh(t),Wa.new(2),e).mul(t),e)},adjustScalarBytes:jh,randomBytes:wo}))();Object.freeze(Wa.new(4)),Vh.ORDER.sub(Nh).irightShift(Lh),Wa.new(156326),Wa.new("39082"),Wa.new("78163"),Wa.new("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),Wa.new("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716"),Wa.new("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
13
- /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
14
- const Wh=Object.freeze(Wa.new("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f")),$h=Object.freeze(Wa.new("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"));Object.freeze(Wa.new(0));const Xh=Object.freeze(Wa.new(1)),tu=Object.freeze(Wa.new(2)),eu=(t,e)=>t.add(e.rightShift(Xh)).idiv(e);const ru=nc(Wh,void 0,void 0,{sqrt:function(t){const e=Wh,r=Wa.new(3),i=Wa.new(6),n=Wa.new(11),s=Wa.new(22),a=Wa.new(23),o=Wa.new(44),c=Wa.new(88),h=t.mul(t).imul(t).imod(e),u=h.mul(h).imul(t).imod(e),l=Xo(u,r,e).imul(u).imod(e),f=Xo(l,r,e).imul(u).imod(e),y=Xo(f,tu,e).imul(h).imod(e),d=Xo(y,n,e).imul(y).imod(e),p=Xo(d,s,e).imul(d).imod(e),g=Xo(p,o,e).imul(p).imod(e),m=Xo(g,c,e).imul(g).imod(e),w=Xo(m,o,e).imul(p).imod(e),A=Xo(w,r,e).imul(u).imod(e),b=Xo(A,a,e).imul(d).imod(e),v=Xo(b,i,e).imul(h).imod(e),E=Xo(v,tu,e);if(!ru.eql(ru.sqr(E),t))throw Error("Cannot find square root");return E}}),iu=bc({a:Wa.new(0),b:Wa.new(7),Fp:ru,n:$h,Gx:Wa.new("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:Wa.new("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:Wa.new(1),lowS:!0,endo:{beta:Wa.new("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:t=>{const e=$h,r=Wa.new("0x3086d221a7d46bcde86c90e49284eb15"),i=Xh.negate().imul(Wa.new("0xe4437ed6010e88286f547fa90abfe4c3")),n=Wa.new("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=Wa.new("0x100000000000000000000000000000000"),o=eu(s.mul(t),e),c=eu(i.negate().imul(t),e);let h=Wo(t.sub(o.mul(r)).sub(c.mul(n)),e),u=Wo(o.negate().mul(i).isub(c.mul(s)),e);const l=h.gt(a),f=u.gt(a);if(l&&(h=e.sub(h)),f&&(u=e.sub(u)),h.gt(a)||u.gt(a))throw Error("splitScalar: Endomorphism failed, k="+t);return{k1neg:l,k1:h,k2neg:f,k2:u}}}},Kc);iu.ProjectivePoint;const nu=new Map(Object.entries({nistP256:Uc,nistP384:Yc,nistP521:Xc,brainpoolP256r1:eh,brainpoolP384r1:ih,brainpoolP512r1:sh,secp256k1:iu,x448:Yh,ed448:Jh}));var su=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:nu});function au(t,e,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],f=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],y=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let d,p,g,m,w,A,b,v,E,k,S,I,C,B,K=0,P=e.length;const D=32===t.length?3:9;v=3===D?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(e=function(t,e){const r=8-t.length%8;let i;if(2===e&&r<8)i=32;else if(1===e)i=r;else{if(e||!(r<8)){if(8===r)return t;throw Error("des: invalid padding")}i=0}const n=new Uint8Array(t.length+r);for(let e=0;e<t.length;e++)n[e]=t[e];for(let e=0;e<r;e++)n[t.length+e]=i;return n}(e,s),P=e.length);let U=new Uint8Array(P),M=0;for(1===i&&(E=n[K++]<<24|n[K++]<<16|n[K++]<<8|n[K++],S=n[K++]<<24|n[K++]<<16|n[K++]<<8|n[K++],K=0);K<P;){for(A=e[K++]<<24|e[K++]<<16|e[K++]<<8|e[K++],b=e[K++]<<24|e[K++]<<16|e[K++]<<8|e[K++],1===i&&(r?(A^=E,b^=S):(k=E,I=S,E=A,S=b)),g=252645135&(A>>>4^b),b^=g,A^=g<<4,g=65535&(A>>>16^b),b^=g,A^=g<<16,g=858993459&(b>>>2^A),A^=g,b^=g<<2,g=16711935&(b>>>8^A),A^=g,b^=g<<8,g=1431655765&(A>>>1^b),b^=g,A^=g<<1,A=A<<1|A>>>31,b=b<<1|b>>>31,p=0;p<D;p+=3){for(C=v[p+1],B=v[p+2],d=v[p];d!==C;d+=B)m=b^t[d],w=(b>>>4|b<<28)^t[d+1],g=A,A=b,b=g^(o[m>>>24&63]|h[m>>>16&63]|l[m>>>8&63]|y[63&m]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|f[63&w]);g=A,A=b,b=g}A=A>>>1|A<<31,b=b>>>1|b<<31,g=1431655765&(A>>>1^b),b^=g,A^=g<<1,g=16711935&(b>>>8^A),A^=g,b^=g<<8,g=858993459&(b>>>2^A),A^=g,b^=g<<2,g=65535&(A>>>16^b),b^=g,A^=g<<16,g=252645135&(A>>>4^b),b^=g,A^=g<<4,1===i&&(r?(E=A,S=b):(A^=k,b^=I)),U[M++]=A>>>24,U[M++]=A>>>16&255,U[M++]=A>>>8&255,U[M++]=255&A,U[M++]=b>>>24,U[M++]=b>>>16&255,U[M++]=b>>>8&255,U[M++]=255&b}return r||(U=function(t,e){let r,i=null;if(2===e)r=32;else if(1===e)i=t[t.length-1];else{if(e)throw Error("des: invalid padding");r=0}if(!i){for(i=1;t[t.length-i]===r;)i++;i--}return t.subarray(0,t.length-i)}(U,s)),U}function ou(t){const e=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],f=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],y=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],d=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=t.length>8?3:1,g=Array(32*p),m=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,A,b,v=0,E=0;for(let k=0;k<p;k++){let p=t[v++]<<24|t[v++]<<16|t[v++]<<8|t[v++],k=t[v++]<<24|t[v++]<<16|t[v++]<<8|t[v++];b=252645135&(p>>>4^k),k^=b,p^=b<<4,b=65535&(k>>>-16^p),p^=b,k^=b<<-16,b=858993459&(p>>>2^k),k^=b,p^=b<<2,b=65535&(k>>>-16^p),p^=b,k^=b<<-16,b=1431655765&(p>>>1^k),k^=b,p^=b<<1,b=16711935&(k>>>8^p),p^=b,k^=b<<8,b=1431655765&(p>>>1^k),k^=b,p^=b<<1,b=p<<8|k>>>20&240,p=k<<24|k<<8&16711680|k>>>8&65280|k>>>24&240,k=b;for(let t=0;t<16;t++)m[t]?(p=p<<2|p>>>26,k=k<<2|k>>>26):(p=p<<1|p>>>27,k=k<<1|k>>>27),p&=-15,k&=-15,w=e[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],A=c[k>>>28]|h[k>>>24&15]|u[k>>>20&15]|l[k>>>16&15]|f[k>>>12&15]|y[k>>>8&15]|d[k>>>4&15],b=65535&(A>>>16^w),g[E++]=w^b,g[E++]=A^b<<16}return g}function cu(t){this.key=[];for(let e=0;e<3;e++)this.key.push(new Uint8Array(t.subarray(8*e,8*e+8)));this.encrypt=function(t){return au(ou(this.key[2]),au(ou(this.key[1]),au(ou(this.key[0]),t,!0,0,null,null),!1,0,null,null),!0,0,null,null)}}function hu(){this.BlockSize=8,this.KeySize=16,this.setKey=function(t){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),t.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(t),!0},this.reset=function(){for(let t=0;t<16;t++)this.masking[t]=0,this.rotate[t]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(t){const e=Array(t.length);for(let s=0;s<t.length;s+=8){let a,o=t[s]<<24|t[s+1]<<16|t[s+2]<<8|t[s+3],c=t[s+4]<<24|t[s+5]<<16|t[s+6]<<8|t[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,e[s]=c>>>24&255,e[s+1]=c>>>16&255,e[s+2]=c>>>8&255,e[s+3]=255&c,e[s+4]=o>>>24&255,e[s+5]=o>>>16&255,e[s+6]=o>>>8&255,e[s+7]=255&o}return e},this.decrypt=function(t){const e=Array(t.length);for(let s=0;s<t.length;s+=8){let a,o=t[s]<<24|t[s+1]<<16|t[s+2]<<8|t[s+3],c=t[s+4]<<24|t[s+5]<<16|t[s+6]<<8|t[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,e[s]=c>>>24&255,e[s+1]=c>>>16&255,e[s+2]=c>>>8&255,e[s+3]=255&c,e[s+4]=o>>>24&255,e[s+5]=o>>16&255,e[s+6]=o>>8&255,e[s+7]=255&o}return e};const t=[,,,,];t[0]=[,,,,],t[0][0]=[4,0,13,15,12,14,8],t[0][1]=[5,2,16,18,17,19,10],t[0][2]=[6,3,23,22,21,20,9],t[0][3]=[7,1,26,25,27,24,11],t[1]=[,,,,],t[1][0]=[0,6,21,23,20,22,16],t[1][1]=[1,4,0,2,1,3,18],t[1][2]=[2,5,7,6,5,4,17],t[1][3]=[3,7,10,9,11,8,19],t[2]=[,,,,],t[2][0]=[4,0,13,15,12,14,8],t[2][1]=[5,2,16,18,17,19,10],t[2][2]=[6,3,23,22,21,20,9],t[2][3]=[7,1,26,25,27,24,11],t[3]=[,,,,],t[3][0]=[0,6,21,23,20,22,16],t[3][1]=[1,4,0,2,1,3,18],t[3][2]=[2,5,7,6,5,4,17],t[3][3]=[3,7,10,9,11,8,19];const e=[,,,,];function r(t,e,r){const i=e+t,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(t,e,r){const i=e^t,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(t,e,r){const i=e-t,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}e[0]=[,,,,],e[0][0]=[24,25,23,22,18],e[0][1]=[26,27,21,20,22],e[0][2]=[28,29,19,18,25],e[0][3]=[30,31,17,16,28],e[1]=[,,,,],e[1][0]=[3,2,12,13,8],e[1][1]=[1,0,14,15,13],e[1][2]=[7,6,8,9,3],e[1][3]=[5,4,10,11,7],e[2]=[,,,,],e[2][0]=[19,18,28,29,25],e[2][1]=[17,16,30,31,28],e[2][2]=[23,22,24,25,18],e[2][3]=[21,20,26,27,22],e[3]=[,,,,],e[3][0]=[8,9,7,6,3],e[3][1]=[10,11,5,4,7],e[3][2]=[12,13,3,2,8],e[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let t=0;t<4;t++)a=4*t,i[t]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const e=t[r][a];c=i[e[1]],c^=s[4][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[5][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[6][i[e[4]>>>2]>>>24-8*(3&e[4])&255],c^=s[7][i[e[5]>>>2]>>>24-8*(3&e[5])&255],c^=s[o[a]][i[e[6]>>>2]>>>24-8*(3&e[6])&255],i[e[0]]=c}for(a=0;a<4;a++){const t=e[r][a];c=s[4][i[t[0]>>>2]>>>24-8*(3&t[0])&255],c^=s[5][i[t[1]>>>2]>>>24-8*(3&t[1])&255],c^=s[6][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[7][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[4+a][i[t[4]>>>2]>>>24-8*(3&t[4])&255],n[h]=c,h++}}for(let t=0;t<16;t++)this.masking[t]=n[t],this.rotate[t]=31&n[16+t]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function uu(t){this.cast5=new hu,this.cast5.setKey(t),this.encrypt=function(t){return this.cast5.encrypt(t)}}cu.keySize=cu.prototype.keySize=24,cu.blockSize=cu.prototype.blockSize=8,uu.blockSize=uu.prototype.blockSize=8,uu.keySize=uu.prototype.keySize=16;const lu=4294967295;function fu(t,e){return(t<<e|t>>>32-e)&lu}function yu(t,e){return t[e]|t[e+1]<<8|t[e+2]<<16|t[e+3]<<24}function du(t,e,r){t.splice(e,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function pu(t,e){return t>>>8*e&255}function gu(t){this.tf=function(){let t=null,e=null,r=-1,i=[],n=[[],[],[],[]];function s(t){return n[0][pu(t,0)]^n[1][pu(t,1)]^n[2][pu(t,2)]^n[3][pu(t,3)]}function a(t){return n[0][pu(t,3)]^n[1][pu(t,0)]^n[2][pu(t,1)]^n[3][pu(t,2)]}function o(t,e){let r=s(e[0]),n=a(e[1]);e[2]=fu(e[2]^r+n+i[4*t+8]&lu,31),e[3]=fu(e[3],1)^r+2*n+i[4*t+9]&lu,r=s(e[2]),n=a(e[3]),e[0]=fu(e[0]^r+n+i[4*t+10]&lu,31),e[1]=fu(e[1],1)^r+2*n+i[4*t+11]&lu}function c(t,e){let r=s(e[0]),n=a(e[1]);e[2]=fu(e[2],1)^r+n+i[4*t+10]&lu,e[3]=fu(e[3]^r+2*n+i[4*t+11]&lu,31),r=s(e[2]),n=a(e[3]),e[0]=fu(e[0],1)^r+n+i[4*t+8]&lu,e[1]=fu(e[1]^r+2*n+i[4*t+9]&lu,31)}return{name:"twofish",blocksize:16,open:function(e){let r,s,a,o,c;t=e;const h=[],u=[],l=[];let f;const y=[];let d,p,g;const m=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],A=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],v=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],E=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],k=[[],[]],S=[[],[],[],[]];function I(t){return t^t>>2^[0,90,180,238][3&t]}function C(t){return t^t>>1^t>>2^[0,238,180,90][3&t]}function B(t,e){let r,i,n;for(r=0;r<8;r++)i=e>>>24,e=e<<8&lu|t>>>24,t=t<<8&lu,n=i<<1,128&i&&(n^=333),e^=i^n<<16,n^=i>>>1,1&i&&(n^=166),e^=n<<24|n<<8;return e}function K(t,e){const r=e>>4,i=15&e,n=m[t][r^i],s=w[t][v[i]^E[r]];return b[t][v[s]^E[n]]<<4|A[t][n^s]}function P(t,e){let r=pu(t,0),i=pu(t,1),n=pu(t,2),s=pu(t,3);switch(f){case 4:r=k[1][r]^pu(e[3],0),i=k[0][i]^pu(e[3],1),n=k[0][n]^pu(e[3],2),s=k[1][s]^pu(e[3],3);case 3:r=k[1][r]^pu(e[2],0),i=k[1][i]^pu(e[2],1),n=k[0][n]^pu(e[2],2),s=k[0][s]^pu(e[2],3);case 2:r=k[0][k[0][r]^pu(e[1],0)]^pu(e[0],0),i=k[0][k[1][i]^pu(e[1],1)]^pu(e[0],1),n=k[1][k[0][n]^pu(e[1],2)]^pu(e[0],2),s=k[1][k[1][s]^pu(e[1],3)]^pu(e[0],3)}return S[0][r]^S[1][i]^S[2][n]^S[3][s]}for(t=t.slice(0,32),r=t.length;16!==r&&24!==r&&32!==r;)t[r++]=0;for(r=0;r<t.length;r+=4)l[r>>2]=yu(t,r);for(r=0;r<256;r++)k[0][r]=K(0,r),k[1][r]=K(1,r);for(r=0;r<256;r++)d=k[1][r],p=I(d),g=C(d),S[0][r]=d+(p<<8)+(g<<16)+(g<<24),S[2][r]=p+(g<<8)+(d<<16)+(g<<24),d=k[0][r],p=I(d),g=C(d),S[1][r]=g+(g<<8)+(p<<16)+(d<<24),S[3][r]=p+(d<<8)+(g<<16)+(p<<24);for(f=l.length/2,r=0;r<f;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,y[f-r-1]=B(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=P(s,h),a=fu(P(a,u),8),i[r]=s+a&lu,i[r+1]=fu(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,f){case 4:s=k[1][s]^pu(y[3],0),a=k[0][a]^pu(y[3],1),o=k[0][o]^pu(y[3],2),c=k[1][c]^pu(y[3],3);case 3:s=k[1][s]^pu(y[2],0),a=k[1][a]^pu(y[2],1),o=k[0][o]^pu(y[2],2),c=k[0][c]^pu(y[2],3);case 2:n[0][r]=S[0][k[0][k[0][s]^pu(y[1],0)]^pu(y[0],0)],n[1][r]=S[1][k[0][k[1][a]^pu(y[1],1)]^pu(y[0],1)],n[2][r]=S[2][k[1][k[0][o]^pu(y[1],2)]^pu(y[0],2)],n[3][r]=S[3][k[1][k[1][c]^pu(y[1],3)]^pu(y[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(t,n){e=t,r=n;const s=[yu(e,r)^i[0],yu(e,r+4)^i[1],yu(e,r+8)^i[2],yu(e,r+12)^i[3]];for(let t=0;t<8;t++)o(t,s);return du(e,r,s[2]^i[4]),du(e,r+4,s[3]^i[5]),du(e,r+8,s[0]^i[6]),du(e,r+12,s[1]^i[7]),r+=16,e},decrypt:function(t,n){e=t,r=n;const s=[yu(e,r)^i[4],yu(e,r+4)^i[5],yu(e,r+8)^i[6],yu(e,r+12)^i[7]];for(let t=7;t>=0;t--)c(t,s);du(e,r,s[2]^i[0]),du(e,r+4,s[3]^i[1]),du(e,r+8,s[0]^i[2]),du(e,r+12,s[1]^i[3]),r+=16},finalize:function(){return e}}}(),this.tf.open(Array.from(t),0),this.encrypt=function(t){return this.tf.encrypt(Array.from(t),0)}}function mu(){}function wu(t){this.bf=new mu,this.bf.init(t),this.encrypt=function(t){return this.bf.encryptBlock(t)}}gu.keySize=gu.prototype.keySize=32,gu.blockSize=gu.prototype.blockSize=16,mu.prototype.BLOCKSIZE=8,mu.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],mu.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],mu.prototype.NN=16,mu.prototype._clean=function(t){if(t<0){t=(2147483647&t)+2147483648}return t},mu.prototype._F=function(t){let e;const r=255&t,i=255&(t>>>=8),n=255&(t>>>=8),s=255&(t>>>=8);return e=this.sboxes[0][s]+this.sboxes[1][n],e^=this.sboxes[2][i],e+=this.sboxes[3][r],e},mu.prototype._encryptBlock=function(t){let e,r=t[0],i=t[1];for(e=0;e<this.NN;++e){r^=this.parray[e],i=this._F(r)^i;const t=r;r=i,i=t}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],t[0]=this._clean(i),t[1]=this._clean(r)},mu.prototype.encryptBlock=function(t){let e;const r=[0,0],i=this.BLOCKSIZE/2;for(e=0;e<this.BLOCKSIZE/2;++e)r[0]=r[0]<<8|255&t[e+0],r[1]=r[1]<<8|255&t[e+i];this._encryptBlock(r);const n=[];for(e=0;e<this.BLOCKSIZE/2;++e)n[e+0]=r[0]>>>24-8*e&255,n[e+i]=r[1]>>>24-8*e&255;return n},mu.prototype._decryptBlock=function(t){let e,r=t[0],i=t[1];for(e=this.NN+1;e>1;--e){r^=this.parray[e],i=this._F(r)^i;const t=r;r=i,i=t}r^=this.parray[1],i^=this.parray[0],t[0]=this._clean(i),t[1]=this._clean(r)},mu.prototype.init=function(t){let e,r=0;for(this.parray=[],e=0;e<this.NN+2;++e){let i=0;for(let e=0;e<4;++e)i=i<<8|255&t[r],++r>=t.length&&(r=0);this.parray[e]=this.PARRAY[e]^i}for(this.sboxes=[],e=0;e<4;++e)for(this.sboxes[e]=[],r=0;r<256;++r)this.sboxes[e][r]=this.SBOXES[e][r];const i=[0,0];for(e=0;e<this.NN+2;e+=2)this._encryptBlock(i),this.parray[e+0]=i[0],this.parray[e+1]=i[1];for(e=0;e<4;++e)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[e][r+0]=i[0],this.sboxes[e][r+1]=i[1]},wu.keySize=wu.prototype.keySize=16,wu.blockSize=wu.prototype.blockSize=8;const Au=new Map([[T.symmetric.tripledes,cu],[T.symmetric.cast5,uu],[T.symmetric.blowfish,wu],[T.symmetric.twofish,gu]]);var bu=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Au});const vu=(t,e)=>t<<e|t>>>32-e>>>0,Eu=(t,e,r)=>t&e^t&r^e&r,ku=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),Su=/* @__PURE__ */new Uint32Array(80);class Iu extends vc{constructor(){super(64,20,8,!1),this.A=0|ku[0],this.B=0|ku[1],this.C=0|ku[2],this.D=0|ku[3],this.E=0|ku[4]}get(){const{A:t,B:e,C:r,D:i,E:n}=this;return[t,e,r,i,n]}set(t,e,r,i,n){this.A=0|t,this.B=0|e,this.C=0|r,this.D=0|i,this.E=0|n}process(t,e){for(let r=0;r<16;r++,e+=4)Su[r]=t.getUint32(e,!1);for(let t=16;t<80;t++)Su[t]=vu(Su[t-3]^Su[t-8]^Su[t-14]^Su[t-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let t=0;t<80;t++){let e,c;t<20?(e=(o=i)&n^~o&s,c=1518500249):t<40?(e=i^n^s,c=1859775393):t<60?(e=Eu(i,n,s),c=2400959708):(e=i^n^s,c=3395469782);const h=vu(r,5)+e+a+c+Su[t]|0;a=s,s=n,n=vu(i,30),i=r,r=h}var o;r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){Su.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Cu=/* @__PURE__ */mo((()=>new Iu)),Bu=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Ku=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((t,e)=>e))),Pu=/* @__PURE__ */Ku.map((t=>(9*t+5)%16));let Du=[Ku],Uu=[Pu];for(let t=0;t<4;t++)for(let e of[Du,Uu])e.push(e[t].map((t=>Bu[t])));const Mu=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((t=>new Uint8Array(t))),xu=/* @__PURE__ */Du.map(((t,e)=>t.map((t=>Mu[e][t])))),Qu=/* @__PURE__ */Uu.map(((t,e)=>t.map((t=>Mu[e][t])))),Ru=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),_u=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]),Tu=(t,e)=>t<<e|t>>>32-e;function Lu(t,e,r,i){return 0===t?e^r^i:1===t?e&r|~e&i:2===t?(e|~r)^i:3===t?e&i|r&~i:e^(r|~i)}const Nu=/* @__PURE__ */new Uint32Array(16);class Ou extends vc{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:t,h1:e,h2:r,h3:i,h4:n}=this;return[t,e,r,i,n]}set(t,e,r,i,n){this.h0=0|t,this.h1=0|e,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(t,e){for(let r=0;r<16;r++,e+=4)Nu[r]=t.getUint32(e,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let t=0;t<5;t++){const e=4-t,f=Ru[t],y=_u[t],d=Du[t],p=Uu[t],g=xu[t],m=Qu[t];for(let e=0;e<16;e++){const i=Tu(r+Lu(t,n,a,c)+Nu[d[e]]+f,g[e])+u|0;r=u,u=c,c=0|Tu(a,10),a=n,n=i}for(let t=0;t<16;t++){const r=Tu(i+Lu(e,s,o,h)+Nu[p[t]]+y,m[t])+l|0;i=l,l=h,h=0|Tu(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){Nu.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const Fu=new Map(Object.entries({sha1:Cu,sha224:Pc,sha256:Kc,sha384:Zc,sha512:Vc,sha3_256:vh,sha3_512:Eh,ripemd160:/* @__PURE__ */mo((()=>new Ou))}));var Hu=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Fu});function zu(t,e,r,i){t[e]+=r[i],t[e+1]+=r[i+1]+(t[e]<r[i])}function Gu(t,e){t[0]+=e,t[1]+=t[0]<e}function qu(t,e,r,i,n,s,a,o){zu(t,r,t,i),zu(t,r,e,a);let c=t[s]^t[r],h=t[s+1]^t[r+1];t[s]=h,t[s+1]=c,zu(t,n,t,s),c=t[i]^t[n],h=t[i+1]^t[n+1],t[i]=c>>>24^h<<8,t[i+1]=h>>>24^c<<8,zu(t,r,t,i),zu(t,r,e,o),c=t[s]^t[r],h=t[s+1]^t[r+1],t[s]=c>>>16^h<<16,t[s+1]=h>>>16^c<<16,zu(t,n,t,s),c=t[i]^t[n],h=t[i+1]^t[n+1],t[i]=h>>>31^c<<1,t[i+1]=c>>>31^h<<1}const ju=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),Vu=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((t=>2*t)));function Zu(t,e){const r=new Uint32Array(32),i=new Uint32Array(t.b.buffer,t.b.byteOffset,32);for(let e=0;e<16;e++)r[e]=t.h[e],r[e+16]=ju[e];r[24]^=t.t0[0],r[25]^=t.t0[1];const n=e?4294967295:0;r[28]^=n,r[29]^=n;for(let t=0;t<12;t++){const e=t<<4;qu(r,i,0,8,16,24,Vu[e+0],Vu[e+1]),qu(r,i,2,10,18,26,Vu[e+2],Vu[e+3]),qu(r,i,4,12,20,28,Vu[e+4],Vu[e+5]),qu(r,i,6,14,22,30,Vu[e+6],Vu[e+7]),qu(r,i,0,10,20,30,Vu[e+8],Vu[e+9]),qu(r,i,2,12,22,24,Vu[e+10],Vu[e+11]),qu(r,i,4,14,16,26,Vu[e+12],Vu[e+13]),qu(r,i,6,8,18,28,Vu[e+14],Vu[e+15])}for(let e=0;e<16;e++)t.h[e]^=r[e]^r[e+16]}class Ju{constructor(t,e,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(el),h:new Uint32Array(Wu/4),t0:new Uint32Array(2),c:0,outlen:t},n[0]=t,e&&(n[1]=e.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let t=0;t<16;t++)this.S.h[t]=ju[t]^s[t];if(e){const t=new Uint8Array(el);t.set(e),this.update(t)}}update(t){if(!(t instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let e=0;for(;e<t.length;){this.S.c===el&&(Gu(this.S.t0,this.S.c),Zu(this.S,!1),this.S.c=0);let r=el-this.S.c;this.S.b.set(t.subarray(e,e+r),this.S.c);const i=Math.min(r,t.length-e);this.S.c+=i,e+=i}return this}digest(t){Gu(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=el,Zu(this.S,!0);const e=t||new Uint8Array(this.S.outlen);for(let t=0;t<this.S.outlen;t++)e[t]=this.S.h[t>>2]>>8*(3&t);return this.S.h=null,e.buffer}}function Yu(t,e,r,i){if(t>Wu)throw Error(`outlen must be at most ${Wu} (given: ${t})`);if(e){if(!(e instanceof Uint8Array))throw Error("key must be Uint8Array or Buffer");if(e.length>$u)throw Error(`key size must be at most ${$u} (given: ${e.length})`)}if(r){if(!(r instanceof Uint8Array))throw Error("salt must be Uint8Array or Buffer");if(r.length!==Xu)throw Error(`salt must be exactly ${Xu} (given: ${r.length}`)}if(i){if(!(i instanceof Uint8Array))throw Error("personal must be Uint8Array or Buffer");if(i.length!==tl)throw Error(`salt must be exactly ${tl} (given: ${i.length}`)}return new Ju(t,e,r,i)}const Wu=64,$u=64,Xu=16,tl=16,el=128,rl=2,il=19,nl=4294967295,sl=4,al=4294967295,ol=8,cl=4294967295,hl=8,ul=4294967295,ll=4294967295,fl=32,yl=1024,dl=64,pl=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function gl(t,e,r){return t[r+0]=e,t[r+1]=e>>8,t[r+2]=e>>16,t[r+3]=e>>24,t}function ml(t,e,r){if(e>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=e;for(let e=r;e<r+7;e++)t[e]=i,i=(i-t[e])/256;return t}function wl(t,e,r){const i=new Uint8Array(64),n=new Uint8Array(4+e.length);if(gl(n,t,0),n.set(e,4),t<=64)return Yu(t).update(n).digest(r),r;const s=Math.ceil(t/32)-2;for(let t=0;t<s;t++)Yu(64).update(0===t?n:i).digest(i),r.set(i.subarray(0,32),32*t);const a=new Uint8Array(Yu(t-32*s).update(i).digest());return r.set(a,32*s),r}function Al(t,e,r,i){return t.fn.XOR(e.byteOffset,r.byteOffset,i.byteOffset),e}function bl(t,e,r,i){return t.fn.G(e.byteOffset,r.byteOffset,i.byteOffset,t.refs.gZ.byteOffset),i}function vl(t,e,r,i){return t.fn.G2(e.byteOffset,r.byteOffset,i.byteOffset,t.refs.gZ.byteOffset),i}function*El(t,e,r,i,n,s,a,o){t.refs.prngTmp.fill(0);const c=t.refs.prngTmp.subarray(0,48);ml(c,e,0),ml(c,r,8),ml(c,i,16),ml(c,n,24),ml(c,s,32),ml(c,rl,40);for(let e=1;e<=a;e++){ml(t.refs.prngTmp,e,c.length);const r=vl(t,t.refs.ZERO1024,t.refs.prngTmp,t.refs.prngR);for(let t=1===e?8*o:0;t<r.length;t+=8)yield r.subarray(t,t+8)}return[]}const kl=1024,Sl=64*kl;function Il(t,{memory:e,instance:r}){if(!pl)throw Error("BigEndian system not supported");const i=function({type:t,version:e,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(t,e,r,i)=>{if(e<r||e>i)throw Error(`${t} size should be between ${r} and ${i} bytes`)};if(t!==rl||e!==il)throw Error("Unsupported type or version");return u("password",i,hl,cl),u("salt",n,ol,al),u("tag",r,sl,nl),u("memory",c,8*o,ul),s&&u("associated data",s,0,ll),a&&u("secret",a,0,fl),{type:t,version:e,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:rl,version:il,...t}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*yl+10*kl;if(e.buffer.byteLength<l){const t=Math.ceil((l-e.buffer.byteLength)/Sl);e.grow(t)}let f=0;c.gZ=new Uint8Array(e.buffer,f,yl),f+=c.gZ.length,c.prngR=new Uint8Array(e.buffer,f,yl),f+=c.prngR.length,c.prngTmp=new Uint8Array(e.buffer,f,yl),f+=c.prngTmp.length,c.ZERO1024=new Uint8Array(e.buffer,f,1024),f+=c.ZERO1024.length;const y=new Uint32Array(e.buffer,f,2);f+=y.length*Uint32Array.BYTES_PER_ELEMENT;const d={fn:h,refs:c},p=new Uint8Array(e.buffer,f,yl);f+=p.length;const g=new Uint8Array(e.buffer,f,i.memorySize*yl),m=new Uint8Array(e.buffer,0,f),w=function(t){const e=Yu(dl),r=new Uint8Array(4),i=new Uint8Array(24);gl(i,t.lanes,0),gl(i,t.tagLength,4),gl(i,t.memorySize,8),gl(i,t.passes,12),gl(i,t.version,16),gl(i,t.type,20);const n=[i];t.password?(n.push(gl(new Uint8Array(4),t.password.length,0)),n.push(t.password)):n.push(r);t.salt?(n.push(gl(new Uint8Array(4),t.salt.length,0)),n.push(t.salt)):n.push(r);t.secret?(n.push(gl(new Uint8Array(4),t.secret.length,0)),n.push(t.secret)):n.push(r);t.ad?(n.push(gl(new Uint8Array(4),t.ad.length,0)),n.push(t.ad)):n.push(r);e.update(function(t){if(1===t.length)return t[0];let e=0;for(let r=0;r<t.length;r++){if(!(t[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");e+=t[r].length}const r=new Uint8Array(e);let i=0;return t.forEach((t=>{r.set(t,i),i+=t.length})),r}(n));const s=e.digest();return new Uint8Array(s)}(i),A=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(A))),v=(t,e)=>(b[t][e]=g.subarray(t*A*1024+1024*e,t*A*1024+1024*e+yl),b[t][e]);for(let t=0;t<i.lanes;t++){const e=new Uint8Array(w.length+8);e.set(w),gl(e,0,w.length),gl(e,t,w.length+4),wl(yl,e,v(t,0)),gl(e,1,w.length),wl(yl,e,v(t,1))}const E=A/4;for(let t=0;t<i.passes;t++)for(let e=0;e<4;e++){const r=0===t&&e<=1;for(let n=0;n<i.lanes;n++){let s=0===e&&0===t?2:0;const a=r?El(d,t,n,e,u,i.passes,E,s):null;for(;s<E;s++){const c=e*E+s,h=c>0?b[n][c-1]:b[n][A-1],u=r?a.next().value:h;o(y.byteOffset,u.byteOffset,n,i.lanes,t,e,s,4,E);const l=y[0],f=y[1];0===t&&v(n,c),bl(d,h,b[l][f],t>0?p:b[n][c]),t>0&&Al(d,b[n][c],p,b[n][c])}}}const k=b[0][A-1];for(let t=1;t<i.lanes;t++)Al(d,k,k,b[t][A-1]);const S=wl(i.tagLength,k,new Uint8Array(i.tagLength));return m.fill(0),e.grow(0),S}let Cl;async function Bl(t,e){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(t,e,r){const i={env:{memory:t}};if(void 0===Cl)try{const t=await e(i);return Cl=!0,t}catch(t){Cl=!1}return(Cl?e:r)(i)}(r,t,e);return t=>Il(t,{instance:i.instance,memory:r})}function Kl(t,e,r,i){function n(t,e,r){var i=r?WebAssembly.instantiateStreaming:WebAssembly.instantiate,n=r?WebAssembly.compileStreaming:WebAssembly.compile;return e?i(t,e):n(t)}var s;if(e){var a=require("fs"),o=require("path");return new Promise(((t,r)=>{a.readFile(o.resolve(__dirname,e),((e,s)=>{null!=e?r(e):t(n(s,i,!1))}))}))}if(s=Buffer.from(r,"base64"),t){var c=new WebAssembly.Module(s);return i?new WebAssembly.Instance(c,i):c}return n(s,i,!1)}var Pl=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Bl((t=>Kl(0,null,"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",t)),(t=>Kl(0,null,"AGFzbQEAAAABPwhgBH9/f38AYAABf2AAAGADf39/AGARf39/f39/f39/f39/f39/f38AYAl/f39/f39/f38Bf2ABfwBgAX8BfwITAQNlbnYGbWVtb3J5AgGQCICABAMLCgIDBAAABQEGBwEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwADAkcyAAQFZ2V0TFoABRlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAkJc3RhY2tTYXZlAAYMc3RhY2tSZXN0b3JlAAcKc3RhY2tBbGxvYwAICQcBAEEBCwEACssaCgMAAQtQAQJ/A0AgACAEQQN0IgNqIAIgA2opAwAgASADaikDAIU3AwAgACADQQhyIgNqIAIgA2opAwAgASADaikDAIU3AwAgBEECaiIEQYABRw0ACwveDwICfgF/IAAgAUEDdGoiEyATKQMAIhEgACAFQQN0aiIBKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA1BA3RqIgUgESAFKQMAhUIgiSIRNwMAIAAgCUEDdGoiCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIoiSIRNwMAIBMgESATKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAFIBEgBSkDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgASARIAEpAwCFQgGJNwMAIAAgAkEDdGoiDSANKQMAIhEgACAGQQN0aiICKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA5BA3RqIgYgESAGKQMAhUIgiSIRNwMAIAAgCkEDdGoiCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIoiSIRNwMAIA0gESANKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAKIBEgCikDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAiARIAIpAwCFQgGJNwMAIAAgA0EDdGoiDiAOKQMAIhEgACAHQQN0aiIDKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA9BA3RqIgcgESAHKQMAhUIgiSIRNwMAIAAgC0EDdGoiCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAMgESADKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAHIBEgBykDAIVCMIkiETcDACALIBEgCykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQgGJNwMAIAAgBEEDdGoiDyAPKQMAIhEgACAIQQN0aiIEKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIBBBA3RqIgggESAIKQMAhUIgiSIRNwMAIAAgDEEDdGoiACARIAApAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA8gESAPKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAIIBEgCCkDAIVCMIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIBMgEykDACIRIAIpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAggESAIKQMAhUIgiSIRNwMAIAsgESALKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACACIBEgAikDAIVCKIkiETcDACATIBEgEykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgCCARIAgpAwCFQjCJIhE3AwAgCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIBiTcDACANIA0pAwAiESADKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAFIBEgBSkDAIVCIIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQiiJIhE3AwAgDSARIA0pAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAUgESAFKQMAhUIwiSIRNwMAIAAgESAAKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACADIBEgAykDAIVCAYk3AwAgDiAOKQMAIhEgBCkDACISfCARQgGGQv7///8fgyASQv////8Pg358IhE3AwAgBiARIAYpAwCFQiCJIhE3AwAgCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIA8gDykDACIRIAEpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAcgESAHKQMAhUIgiSIRNwMAIAogESAKKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACABIBEgASkDAIVCKIkiETcDACAPIBEgDykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgByARIAcpAwCFQjCJIhE3AwAgCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIBiTcDAAvdCAEPfwNAIAIgBUEDdCIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAIgBkEIciIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAVBAmoiBUGAAUcNAAsDQCADIARBA3QiAGogACACaikDADcDACADIARBAXIiAEEDdCIBaiABIAJqKQMANwMAIAMgBEECciIBQQN0IgVqIAIgBWopAwA3AwAgAyAEQQNyIgVBA3QiBmogAiAGaikDADcDACADIARBBHIiBkEDdCIHaiACIAdqKQMANwMAIAMgBEEFciIHQQN0IghqIAIgCGopAwA3AwAgAyAEQQZyIghBA3QiCWogAiAJaikDADcDACADIARBB3IiCUEDdCIKaiACIApqKQMANwMAIAMgBEEIciIKQQN0IgtqIAIgC2opAwA3AwAgAyAEQQlyIgtBA3QiDGogAiAMaikDADcDACADIARBCnIiDEEDdCINaiACIA1qKQMANwMAIAMgBEELciINQQN0Ig5qIAIgDmopAwA3AwAgAyAEQQxyIg5BA3QiD2ogAiAPaikDADcDACADIARBDXIiD0EDdCIQaiACIBBqKQMANwMAIAMgBEEOciIQQQN0IhFqIAIgEWopAwA3AwAgAyAEQQ9yIhFBA3QiEmogAiASaikDADcDACADIARB//8DcSAAQf//A3EgAUH//wNxIAVB//8DcSAGQf//A3EgB0H//wNxIAhB//8DcSAJQf//A3EgCkH//wNxIAtB//8DcSAMQf//A3EgDUH//wNxIA5B//8DcSAPQf//A3EgEEH//wNxIBFB//8DcRACIARB8ABJIQAgBEEQaiEEIAANAAtBACEBIANBAEEBQRBBEUEgQSFBMEExQcAAQcEAQdAAQdEAQeAAQeEAQfAAQfEAEAIgA0ECQQNBEkETQSJBI0EyQTNBwgBBwwBB0gBB0wBB4gBB4wBB8gBB8wAQAiADQQRBBUEUQRVBJEElQTRBNUHEAEHFAEHUAEHVAEHkAEHlAEH0AEH1ABACIANBBkEHQRZBF0EmQSdBNkE3QcYAQccAQdYAQdcAQeYAQecAQfYAQfcAEAIgA0EIQQlBGEEZQShBKUE4QTlByABByQBB2ABB2QBB6ABB6QBB+ABB+QAQAiADQQpBC0EaQRtBKkErQTpBO0HKAEHLAEHaAEHbAEHqAEHrAEH6AEH7ABACIANBDEENQRxBHUEsQS1BPEE9QcwAQc0AQdwAQd0AQewAQe0AQfwAQf0AEAIgA0EOQQ9BHkEfQS5BL0E+QT9BzgBBzwBB3gBB3wBB7gBB7wBB/gBB/wAQAgNAIAIgAUEDdCIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAiAAQQhyIgRqIgUgAyAEaikDACAFKQMAhTcDACACIABBEHIiBGoiBSADIARqKQMAIAUpAwCFNwMAIAIgAEEYciIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAUEEaiIBQYABRw0ACwsWACAAIAEgAiADEAMgACACIAIgAxADC3sCAX8BfiACIQkgATUCACEKIAQgBXIEQCABKAIEIANwIQkLIAAgCTYCACAAIAdBAWsgBSAEGyAIbCAGQQFrQQBBfyAGGyACIAlGG2oiASAFQQFqIAhsQQAgBBtqIAGtIAogCn5CIIh+QiCIp0F/c2ogByAIbHA2AgQgAAsEACMACwYAIAAkAAsQACMAIABrQXBxIgAkACAACwUAQYAICw==",t)))});exports.AEADEncryptedDataPacket=Zs,exports.Argon2OutOfMemoryError=sn,exports.Argon2S2K=hn,exports.CleartextMessage=Fa,exports.CompressedDataPacket=Ls,exports.KDFParams=qi,exports.LiteralDataPacket=Cs,exports.MarkerPacket=class{static get tag(){return T.packet.marker}read(t){return 80===t[0]&&71===t[1]&&80===t[2]}write(){return new Uint8Array([80,71,80])}},exports.Message=Ta,exports.OnePassSignaturePacket=Qs,exports.PacketList=_s,exports.PaddingPacket=class{static get tag(){return T.packet.padding}constructor(){this.padding=null}read(t){}write(){return this.padding}async createPadding(t){this.padding=await nn.random.getRandomBytes(t)}},exports.PrivateKey=Da,exports.PublicKey=Pa,exports.PublicKeyEncryptedSessionKeyPacket=Js,exports.PublicKeyPacket=$s,exports.PublicSubkeyPacket=ea,exports.SecretKeyPacket=ia,exports.SecretSubkeyPacket=aa,exports.Signature=ca,exports.SignaturePacket=Us,exports.Subkey=Sa,exports.SymEncryptedIntegrityProtectedDataPacket=qs,exports.SymEncryptedSessionKeyPacket=Ws,exports.SymmetricallyEncryptedDataPacket=ta,exports.TrustPacket=class{static get tag(){return T.packet.trust}read(){throw new zr("Trust packets are not supported")}write(){throw new zr("Trust packets are not supported")}},exports.UnparseablePacket=qr,exports.UserAttributePacket=ra,exports.UserIDPacket=sa,exports.armor=rt,exports.config=L,exports.createCleartextMessage=async function({text:t,...e}){if(!t)throw Error("createCleartextMessage: must pass options object containing `text`");if(!O.isString(t))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(e);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new Fa(t)},exports.createMessage=async function({text:t,binary:e,filename:r,date:i=new Date,format:n=(void 0!==t?"utf8":"binary"),...s}){const a=void 0!==t?t:e;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(t&&!O.isString(t)&&!O.isStream(t))throw Error("createMessage: options.text must be a string or stream");if(e&&!O.isUint8Array(e)&&!O.isStream(e))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=O.isStream(a),h=new Cs(i);void 0!==t?h.setText(a,T.write(T.literal,n)):h.setBytes(a,T.write(T.literal,n)),void 0!==r&&h.setFilename(r);const u=new _s;u.push(h);const l=new Ta(u);return l.fromStream=c,l},exports.decrypt=async function({message:t,decryptionKeys:e,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(ja(h={...L,...h}),Ha(t),n=Va(n),e=Va(e),r=Va(r),i=Va(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await t.decrypt(e,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),Ja(l,t),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=b([l.data,x((async()=>{await O.anyPromise(l.signatures.map((t=>t.verified)))}))])}return l.data=await Za(l.data),l}catch(t){throw O.wrapError("Error decrypting message",t)}},exports.decryptKey=async function({privateKey:t,passphrase:e,config:r,...i}){ja(r={...L,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!t.isPrivate())throw Error("Cannot decrypt a public key");const s=t.clone(!0),a=O.isArray(e)?e:[e];try{return await Promise.all(s.getKeys().map((t=>O.anyPromise(a.map((e=>t.keyPacket.decrypt(e))))))),await s.validate(r),s}catch(t){throw s.clearPrivateParams(),O.wrapError("Error decrypting private key",t)}},exports.decryptSessionKeys=async function({message:t,decryptionKeys:e,passwords:r,date:i=new Date,config:n,...s}){if(ja(n={...L,...n}),Ha(t),e=Va(e),r=Va(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await t.decryptSessionKeys(e,r,void 0,i,n)}catch(t){throw O.wrapError("Error decrypting session keys",t)}},exports.encrypt=async function({message:t,encryptionKeys:e,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:f=[],signatureNotations:y=[],config:d,...p}){if(ja(d={...L,...d}),Ha(t),Ga(s),e=Va(e),r=Va(r),i=Va(i),c=Va(c),h=Va(h),l=Va(l),f=Va(f),y=Va(y),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const g=Object.keys(p);if(g.length>0)throw Error("Unknown option: "+g.join(", "));r||(r=[]);try{if((r.length||a)&&(t=await t.sign(r,a,c,u,l,y,d)),t=t.compress(await async function(t=[],e=new Date,r=[],i=L){const n=T.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(t.map((async function(t,n){const a=(await t.getPrimarySelfSignature(e,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(e,u,f,d),d),t=await t.encrypt(e,i,n,o,h,u,f,d),"object"===s)return t;return Za("armored"===s?t.armor(d):t.write())}catch(t){throw O.wrapError("Error encrypting message",t)}},exports.encryptKey=async function({privateKey:t,passphrase:e,config:r,...i}){ja(r={...L,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!t.isPrivate())throw Error("Cannot encrypt a public key");const s=t.clone(!0),a=s.getKeys(),o=O.isArray(e)?e:Array(a.length).fill(e);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(t,e)=>{const{keyPacket:i}=t;await i.encrypt(o[e],r),i.clearPrivateParams()}))),s}catch(t){throw s.clearPrivateParams(),O.wrapError("Error encrypting private key",t)}},exports.encryptSessionKey=async function({data:t,algorithm:e,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(ja(u={...L,...u}),function(t,e){if(!O.isUint8Array(t))throw Error("Parameter ["+(e||"data")+"] must be of type Uint8Array")}(t),function(t,e){if(!O.isString(t))throw Error("Parameter ["+(e||"data")+"] must be of type String")}(e,"algorithm"),Ga(s),i=Va(i),n=Va(n),o=Va(o),h=Va(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const f=Object.keys(l);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return Ya(await Ta.encryptSessionKey(t,e,r,i,n,a,o,c,h,u),s,u)}catch(t){throw O.wrapError("Error encrypting session key",t)}},exports.enums=T,exports.generateKey=async function({userIDs:t=[],passphrase:e,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...f}){ja(l={...L,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),t=Va(t);const y=Object.keys(f);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(0===t.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const d={userIDs:t,passphrase:e,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:t,revocationCertificate:e}=await async function(t,e){t.sign=!0,(t=wa(t)).subkeys=t.subkeys.map(((e,r)=>wa(t.subkeys[r],t)));let r=[ua(t,e)];r=r.concat(t.subkeys.map((t=>ha(t,e))));const i=await Promise.all(r),n=await xa(i[0],i.slice(1),t,e),s=await n.getRevocationCertificate(t.date,e);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(d,l);return t.getKeys().forEach((({keyPacket:t})=>Ea(t,l))),{privateKey:Ya(t,u,l),publicKey:"symmetric"!==r?Ya(t.toPublic(),u,l):null,revocationCertificate:e}}catch(t){throw O.wrapError("Error generating keypair",t)}},exports.generateSessionKey=async function({encryptionKeys:t,date:e=new Date,encryptionUserIDs:r=[],config:i,...n}){if(ja(i={...L,...i}),t=Va(t),r=Va(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Ta.generateSessionKey(t,e,r,i)}catch(t){throw O.wrapError("Error generating session key",t)}},exports.readCleartextMessage=async function({cleartextMessage:t,config:e,...r}){if(e={...L,...e},!t)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!O.isString(t))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await et(t);if(n.type!==T.armor.signed)throw Error("No cleartext signed message.");const s=await _s.fromBinary(n.data,Oa,e);!function(t,e){const r=function(t){const r=t=>e=>t.hashAlgorithm===e;for(let i=0;i<e.length;i++)if(e[i].constructor.tag===T.packet.signature&&!t.some(r(e[i])))return!1;return!0},i=[];if(t.forEach((t=>{const e=t.match(/^Hash: (.+)$/);if(!e)throw Error('Only "Hash" header allowed in cleartext signed message');{const t=e[1].replace(/\s/g,"").split(",").map((t=>{try{return T.write(T.hash,t.toLowerCase())}catch(e){throw Error("Unknown hash algorithm in armor header: "+t.toLowerCase())}}));i.push(...t)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new ca(s);return new Fa(n.text,a)},exports.readKey=async function({armoredKey:t,binaryKey:e,config:r,...i}){if(r={...L,...r},!t&&!e)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(t&&!O.isString(t))throw Error("readKey: options.armoredKey must be a string");if(e&&!O.isUint8Array(e))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(t){const{type:e,data:r}=await et(t);if(e!==T.armor.publicKey&&e!==T.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=e;return Ma(await _s.fromBinary(s,Ua,r))},exports.readKeys=async function({armoredKeys:t,binaryKeys:e,config:r,...i}){r={...L,...r};let n=t||e;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(t&&!O.isString(t))throw Error("readKeys: options.armoredKeys must be a string");if(e&&!O.isUint8Array(e))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(t){const{type:e,data:r}=await et(t);if(e!==T.armor.publicKey&&e!==T.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await _s.fromBinary(n,Ua,r),c=o.indexOfTag(T.packet.publicKey,T.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let t=0;t<c.length;t++){const e=Ma(o.slice(c[t],c[t+1]));a.push(e)}return a},exports.readMessage=async function({armoredMessage:t,binaryMessage:e,config:r,...i}){r={...L,...r};let n=t||e;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(t&&!O.isString(t)&&!O.isStream(t))throw Error("readMessage: options.armoredMessage must be a string or stream");if(e&&!O.isUint8Array(e)&&!O.isStream(e))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=O.isStream(n);if(t){const{type:t,data:e}=await et(n);if(t!==T.armor.message)throw Error("Armored text not of type message");n=e}const o=await _s.fromBinary(n,Qa,r),c=new Ta(o);return c.fromStream=a,c},exports.readPrivateKey=async function({armoredKey:t,binaryKey:e,config:r,...i}){if(r={...L,...r},!t&&!e)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(t&&!O.isString(t))throw Error("readPrivateKey: options.armoredKey must be a string");if(e&&!O.isUint8Array(e))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(t){const{type:e,data:r}=await et(t);if(e!==T.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=e;const a=await _s.fromBinary(s,Ua,r);return new Da(a)},exports.readPrivateKeys=async function({armoredKeys:t,binaryKeys:e,config:r}){r={...L,...r};let i=t||e;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(t&&!O.isString(t))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(e&&!O.isUint8Array(e))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(t){const{type:e,data:r}=await et(t);if(e!==T.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await _s.fromBinary(i,Ua,r),a=s.indexOfTag(T.packet.secretKey);if(0===a.length)throw Error("No secret key packet found");for(let t=0;t<a.length;t++){const e=s.slice(a[t],a[t+1]),r=new Da(e);n.push(r)}return n},exports.readSignature=async function({armoredSignature:t,binarySignature:e,config:r,...i}){r={...L,...r};let n=t||e;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(t&&!O.isString(t))throw Error("readSignature: options.armoredSignature must be a string");if(e&&!O.isUint8Array(e))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(t){const{type:t,data:e}=await et(n);if(t!==T.armor.signature)throw Error("Armored text not of type signature");n=e}const a=await _s.fromBinary(n,oa,r);return new ca(a)},exports.reformatKey=async function({privateKey:t,userIDs:e=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){ja(a={...L,...a}),e=Va(e);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===e.length&&6!==t.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:t,userIDs:e,passphrase:r,keyExpirationTime:i,date:n};try{const{key:t,revocationCertificate:e}=await async function(t,e){t=o(t);const{privateKey:r}=t;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:t})=>t.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;t.subkeys||(t.subkeys=await Promise.all(r.subkeys.map((async t=>{const r=t.keyPacket,n={key:i,bind:r},s=await la(t.bindingSignatures,i,T.signature.subkeyBinding,n,null,e).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&T.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&T.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((t=>t.keyPacket));if(t.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");t.subkeys=t.subkeys.map((e=>o(e,t)));const s=await xa(i,n,t,e),a=await s.getRevocationCertificate(t.date,e);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(t,e={}){return t.keyExpirationTime=t.keyExpirationTime||e.keyExpirationTime,t.passphrase=O.isString(t.passphrase)?t.passphrase:e.passphrase,t.date=t.date||e.date,t}}(h,a);return{privateKey:Ya(t,s,a),publicKey:Ya(t.toPublic(),s,a),revocationCertificate:e}}catch(t){throw O.wrapError("Error reformatting keypair",t)}},exports.revokeKey=async function({key:t,revocationCertificate:e,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){ja(s={...L,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=e?await t.applyRevocationCertificate(e,i,s):await t.revoke(r,i,s);return a.isPrivate()?{privateKey:Ya(a,n,s),publicKey:Ya(a.toPublic(),n,s)}:{privateKey:null,publicKey:Ya(a,n,s)}}catch(t){throw O.wrapError("Error revoking key",t)}},exports.sign=async function({message:t,signingKeys:e,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(ja(c={...L,...c}),za(t),Ga(r),e=Va(e),n=Va(n),a=Va(a),o=Va(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(t instanceof Fa&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(t instanceof Fa&&i)throw Error("Cannot detach-sign a cleartext message");if(!e||0===e.length)throw Error("No signing keys provided");try{let h;if(h=i?await t.signDetached(e,void 0,n,s,a,o,c):await t.sign(e,void 0,n,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),i&&(h=I(t.packets.write(),(async(t,e)=>{await Promise.all([v(h,e),U(t).catch((()=>{}))])}))),Za(h)}catch(t){throw O.wrapError("Error signing message",t)}},exports.unarmor=et,exports.verify=async function({message:t,verificationKeys:e,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(ja(a={...L,...a}),za(t),e=Va(e),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(t instanceof Fa&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(t instanceof Fa&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await t.verifyDetached(n,e,s,a):await t.verify(e,s,a),o.data="binary"===i?t.getLiteralData():t.getText(),t.fromStream&&Ja(o,t),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=b([o.data,x((async()=>{await O.anyPromise(o.signatures.map((t=>t.verified)))}))])}return o.data=await Za(o.data),o}catch(t){throw O.wrapError("Error verifying signed message",t)}};
13
+ const iu=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),nu=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),su=BigInt(1),au=BigInt(2),ou=(e,t)=>(e+t/au)/t;const cu=Ac(iu,void 0,void 0,{sqrt:function(e){const t=iu,r=BigInt(3),i=BigInt(6),n=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),h=e*e*e%t,u=h*h*e%t,l=yc(u,r,t)*u%t,y=yc(l,r,t)*u%t,f=yc(y,au,t)*h%t,g=yc(f,n,t)*f%t,p=yc(g,s,t)*g%t,d=yc(p,o,t)*p%t,A=yc(d,c,t)*d%t,w=yc(A,o,t)*p%t,m=yc(w,r,t)*u%t,b=yc(m,a,t)*g%t,E=yc(b,i,t)*h%t,k=yc(E,au,t);if(!cu.eql(cu.sqr(k),e))throw Error("Cannot find square root");return k}}),hu=Qc({a:BigInt(0),b:BigInt(7),Fp:cu,n:nu,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{const t=nu,r=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),i=-su*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),n=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=BigInt("0x100000000000000000000000000000000"),o=ou(s*e,t),c=ou(-i*e,t);let h=uc(e-o*r-c*n,t),u=uc(-o*i-c*s,t);const l=h>a,y=u>a;if(l&&(h=t-h),y&&(u=t-u),h>a||u>a)throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:l,k1:h,k2neg:y,k2:u}}}},Oc);BigInt(0),hu.ProjectivePoint;const uu=Ac(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),lu=Qc({a:uu.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:uu,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Oc),yu=Ac(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),fu=Qc({a:yu.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:yu,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},ch),gu=Ac(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),pu=Qc({a:gu.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:gu,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},oh),du=new Map(Object.entries({nistP256:jc,nistP384:uh,nistP521:fh,brainpoolP256r1:lu,brainpoolP384r1:fu,brainpoolP512r1:pu,secp256k1:hu,x448:ru,ed448:tu}));var Au=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:du});function wu(e,t,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],y=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],f=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,E,k,v,I=0,B=t.length;const S=32===e.length?3:9;E=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e,t){const r=8-e.length%8;let i;if(!(r<8)){if(8===r)return e;throw Error("des: invalid padding")}i=0;const n=new Uint8Array(e.length+r);for(let t=0;t<e.length;t++)n[t]=e[t];for(let t=0;t<r;t++)n[e.length+t]=i;return n}(t),B=t.length);let C=new Uint8Array(B),K=0;for(;I<B;){for(m=t[I++]<<24|t[I++]<<16|t[I++]<<8|t[I++],b=t[I++]<<24|t[I++]<<16|t[I++]<<8|t[I++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(k=E[p+1],v=E[p+2],g=E[p];g!==k;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|h[A>>>16&63]|l[A>>>8&63]|f[63&A]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|y[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,C[K++]=m>>>24,C[K++]=m>>>16&255,C[K++]=m>>>8&255,C[K++]=255&m,C[K++]=b>>>24,C[K++]=b>>>16&255,C[K++]=b>>>8&255,C[K++]=255&b}return r||(C=function(e,t){let r,i=null;if(r=0,!i){for(i=1;e[e.length-i]===r;)i++;i--}return e.subarray(0,e.length-i)}(C)),C}function mu(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],y=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],f=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,E=0,k=0;for(let v=0;v<p;v++){let p=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++],v=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|h[v>>>24&15]|u[v>>>20&15]|l[v>>>16&15]|y[v>>>12&15]|f[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[k++]=w^b,d[k++]=m^b<<16}return d}function bu(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return wu(mu(this.key[2]),wu(mu(this.key[1]),wu(mu(this.key[0]),e,!0),!1),!0)}}function Eu(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const i=t+e,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(e,t,r){const i=t^e,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(e,t,r){const i=t-e,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let e=0;e<4;e++)a=4*e,i[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=i[t[1]],c^=s[4][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][i[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][i[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][i[t[6]>>>2]>>>24-8*(3&t[6])&255],i[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][i[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][i[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][i[e[4]>>>2]>>>24-8*(3&e[4])&255],n[h]=c,h++}}for(let e=0;e<16;e++)this.masking[e]=n[e],this.rotate[e]=31&n[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function ku(e){this.cast5=new Eu,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}bu.keySize=bu.prototype.keySize=24,bu.blockSize=bu.prototype.blockSize=8,ku.blockSize=ku.prototype.blockSize=8,ku.keySize=ku.prototype.keySize=16;const vu=4294967295;function Iu(e,t){return(e<<t|e>>>32-t)&vu}function Bu(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Su(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function Cu(e,t){return e>>>8*t&255}function Ku(e){this.tf=function(){let e=null,t=null,r=-1,i=[],n=[[],[],[],[]];function s(e){return n[0][Cu(e,0)]^n[1][Cu(e,1)]^n[2][Cu(e,2)]^n[3][Cu(e,3)]}function a(e){return n[0][Cu(e,3)]^n[1][Cu(e,0)]^n[2][Cu(e,1)]^n[3][Cu(e,2)]}function o(e,t){let r=s(t[0]),n=a(t[1]);t[2]=Iu(t[2]^r+n+i[4*e+8]&vu,31),t[3]=Iu(t[3],1)^r+2*n+i[4*e+9]&vu,r=s(t[2]),n=a(t[3]),t[0]=Iu(t[0]^r+n+i[4*e+10]&vu,31),t[1]=Iu(t[1],1)^r+2*n+i[4*e+11]&vu}function c(e,t){let r=s(t[0]),n=a(t[1]);t[2]=Iu(t[2],1)^r+n+i[4*e+10]&vu,t[3]=Iu(t[3]^r+2*n+i[4*e+11]&vu,31),r=s(t[2]),n=a(t[3]),t[0]=Iu(t[0],1)^r+n+i[4*e+8]&vu,t[1]=Iu(t[1]^r+2*n+i[4*e+9]&vu,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const h=[],u=[],l=[];let y;const f=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],E=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],k=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],I=[[],[],[],[]];function B(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function C(e,t){let r,i,n;for(r=0;r<8;r++)i=t>>>24,t=t<<8&vu|e>>>24,e=e<<8&vu,n=i<<1,128&i&&(n^=333),t^=i^n<<16,n^=i>>>1,1&i&&(n^=166),t^=n<<24|n<<8;return t}function K(e,t){const r=t>>4,i=15&t,n=A[e][r^i],s=w[e][E[i]^k[r]];return b[e][E[s]^k[n]]<<4|m[e][n^s]}function D(e,t){let r=Cu(e,0),i=Cu(e,1),n=Cu(e,2),s=Cu(e,3);switch(y){case 4:r=v[1][r]^Cu(t[3],0),i=v[0][i]^Cu(t[3],1),n=v[0][n]^Cu(t[3],2),s=v[1][s]^Cu(t[3],3);case 3:r=v[1][r]^Cu(t[2],0),i=v[1][i]^Cu(t[2],1),n=v[0][n]^Cu(t[2],2),s=v[0][s]^Cu(t[2],3);case 2:r=v[0][v[0][r]^Cu(t[1],0)]^Cu(t[0],0),i=v[0][v[1][i]^Cu(t[1],1)]^Cu(t[0],1),n=v[1][v[0][n]^Cu(t[1],2)]^Cu(t[0],2),s=v[1][v[1][s]^Cu(t[1],3)]^Cu(t[0],3)}return I[0][r]^I[1][i]^I[2][n]^I[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=Bu(e,r);for(r=0;r<256;r++)v[0][r]=K(0,r),v[1][r]=K(1,r);for(r=0;r<256;r++)g=v[1][r],p=B(g),d=S(g),I[0][r]=g+(p<<8)+(d<<16)+(d<<24),I[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=B(g),d=S(g),I[1][r]=d+(d<<8)+(p<<16)+(g<<24),I[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(y=l.length/2,r=0;r<y;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,f[y-r-1]=C(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=D(s,h),a=Iu(D(a,u),8),i[r]=s+a&vu,i[r+1]=Iu(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,y){case 4:s=v[1][s]^Cu(f[3],0),a=v[0][a]^Cu(f[3],1),o=v[0][o]^Cu(f[3],2),c=v[1][c]^Cu(f[3],3);case 3:s=v[1][s]^Cu(f[2],0),a=v[1][a]^Cu(f[2],1),o=v[0][o]^Cu(f[2],2),c=v[0][c]^Cu(f[2],3);case 2:n[0][r]=I[0][v[0][v[0][s]^Cu(f[1],0)]^Cu(f[0],0)],n[1][r]=I[1][v[0][v[1][a]^Cu(f[1],1)]^Cu(f[0],1)],n[2][r]=I[2][v[1][v[0][o]^Cu(f[1],2)]^Cu(f[0],2)],n[3][r]=I[3][v[1][v[1][c]^Cu(f[1],3)]^Cu(f[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(e,n){t=e,r=n;const s=[Bu(t,r)^i[0],Bu(t,r+4)^i[1],Bu(t,r+8)^i[2],Bu(t,r+12)^i[3]];for(let e=0;e<8;e++)o(e,s);return Su(t,r,s[2]^i[4]),Su(t,r+4,s[3]^i[5]),Su(t,r+8,s[0]^i[6]),Su(t,r+12,s[1]^i[7]),r+=16,t},decrypt:function(e,n){t=e,r=n;const s=[Bu(t,r)^i[4],Bu(t,r+4)^i[5],Bu(t,r+8)^i[6],Bu(t,r+12)^i[7]];for(let e=7;e>=0;e--)c(e,s);Su(t,r,s[2]^i[0]),Su(t,r+4,s[3]^i[1]),Su(t,r+8,s[0]^i[2]),Su(t,r+12,s[1]^i[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function Du(){}function Pu(e){this.bf=new Du,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}Ku.keySize=Ku.prototype.keySize=32,Ku.blockSize=Ku.prototype.blockSize=16,Du.prototype.BLOCKSIZE=8,Du.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],Du.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],Du.prototype.NN=16,Du.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},Du.prototype._F=function(e){let t;const r=255&e,i=255&(e>>>=8),n=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][n],t^=this.sboxes[2][i],t+=this.sboxes[3][r],t},Du.prototype._encryptBlock=function(e){let t,r=e[0],i=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],e[0]=this._clean(i),e[1]=this._clean(r)},Du.prototype.encryptBlock=function(e){let t;const r=[0,0],i=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+i];this._encryptBlock(r);const n=[];for(t=0;t<this.BLOCKSIZE/2;++t)n[t+0]=r[0]>>>24-8*t&255,n[t+i]=r[1]>>>24-8*t&255;return n},Du.prototype._decryptBlock=function(e){let t,r=e[0],i=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[1],i^=this.parray[0],e[0]=this._clean(i),e[1]=this._clean(r)},Du.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let i=0;for(let t=0;t<4;++t)i=i<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^i}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const i=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(i),this.parray[t+0]=i[0],this.parray[t+1]=i[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[t][r+0]=i[0],this.sboxes[t][r+1]=i[1]},Pu.keySize=Pu.prototype.keySize=16,Pu.blockSize=Pu.prototype.blockSize=8;const Uu=new Map([[L.symmetric.tripledes,bu],[L.symmetric.cast5,ku],[L.symmetric.blowfish,Pu],[L.symmetric.twofish,Ku]]);var xu=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Uu});const Qu=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),Ru=/* @__PURE__ */new Uint32Array(80);class Mu extends Tc{constructor(){super(64,20,8,!1),this.A=0|Qu[0],this.B=0|Qu[1],this.C=0|Qu[2],this.D=0|Qu[3],this.E=0|Qu[4]}get(){const{A:e,B:t,C:r,D:i,E:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Ru[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)Ru[e]=Eo(Ru[e-3]^Ru[e-8]^Ru[e-14]^Ru[e-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=Rc(i,n,s),o=1518500249):e<40?(t=i^n^s,o=1859775393):e<60?(t=Mc(i,n,s),o=2400959708):(t=i^n^s,o=3395469782);const c=Eo(r,5)+t+a+o+Ru[e]|0;a=s,s=n,n=Eo(i,30),i=r,r=c}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){Ru.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Tu=/* @__PURE__ */Ko((()=>new Mu)),Lu=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),_u=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((e,t)=>t))),Nu=/* @__PURE__ */_u.map((e=>(9*e+5)%16));let Fu=[_u],Hu=[Nu];for(let e=0;e<4;e++)for(let t of[Fu,Hu])t.push(t[e].map((e=>Lu[e])));const Ou=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>new Uint8Array(e))),zu=/* @__PURE__ */Fu.map(((e,t)=>e.map((e=>Ou[t][e])))),Gu=/* @__PURE__ */Hu.map(((e,t)=>e.map((e=>Ou[t][e])))),ju=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),qu=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]);function Vu(e,t,r,i){return 0===e?t^r^i:1===e?t&r|~t&i:2===e?(t|~r)^i:3===e?t&i|r&~i:t^(r|~i)}const Yu=/* @__PURE__ */new Uint32Array(16);class Ju extends Tc{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:i,h4:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Yu[r]=e.getUint32(t,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let e=0;e<5;e++){const t=4-e,y=ju[e],f=qu[e],g=Fu[e],p=Hu[e],d=zu[e],A=Gu[e];for(let t=0;t<16;t++){const i=Eo(r+Vu(e,n,a,c)+Yu[g[t]]+y,d[t])+u|0;r=u,u=c,c=0|Eo(a,10),a=n,n=i}for(let e=0;e<16;e++){const r=Eo(i+Vu(t,s,o,h)+Yu[p[e]]+f,A[e])+l|0;i=l,l=h,h=0|Eo(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){Yu.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const Wu=new Map(Object.entries({sha1:Tu,sha224:zc,sha256:Oc,sha384:ch,sha512:oh,sha3_256:Dh,sha3_512:Ph,ripemd160:/* @__PURE__ */Ko((()=>new Ju))}));var Zu=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Wu});function $u(e,t,r,i){e[t]+=r[i],e[t+1]+=r[i+1]+(e[t]<r[i])}function Xu(e,t){e[0]+=t,e[1]+=e[0]<t}function el(e,t,r,i,n,s,a,o){$u(e,r,e,i),$u(e,r,t,a);let c=e[s]^e[r],h=e[s+1]^e[r+1];e[s]=h,e[s+1]=c,$u(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=c>>>24^h<<8,e[i+1]=h>>>24^c<<8,$u(e,r,e,i),$u(e,r,t,o),c=e[s]^e[r],h=e[s+1]^e[r+1],e[s]=c>>>16^h<<16,e[s+1]=h>>>16^c<<16,$u(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=h>>>31^c<<1,e[i+1]=c>>>31^h<<1}const tl=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),rl=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function il(e,t){const r=new Uint32Array(32),i=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=tl[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const n=t?4294967295:0;r[28]^=n,r[29]^=n;for(let e=0;e<12;e++){const t=e<<4;el(r,i,0,8,16,24,rl[t+0],rl[t+1]),el(r,i,2,10,18,26,rl[t+2],rl[t+3]),el(r,i,4,12,20,28,rl[t+4],rl[t+5]),el(r,i,6,14,22,30,rl[t+6],rl[t+7]),el(r,i,0,10,20,30,rl[t+8],rl[t+9]),el(r,i,2,12,22,24,rl[t+10],rl[t+11]),el(r,i,4,14,16,26,rl[t+12],rl[t+13]),el(r,i,6,8,18,28,rl[t+14],rl[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class nl{constructor(e,t,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(ol),h:new Uint32Array(al/4),t0:new Uint32Array(2),c:0,outlen:e},n[0]=e,t&&(n[1]=t.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=tl[e]^s[e];if(t){const e=new Uint8Array(ol);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===ol&&(Xu(this.S.t0,this.S.c),il(this.S,!1),this.S.c=0);let r=ol-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const i=Math.min(r,e.length-t);this.S.c+=i,t+=i}return this}digest(e){Xu(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=ol,il(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function sl(e,t,r,i){if(e>al)throw Error(`outlen must be at most ${al} (given: ${e})`);return new nl(e,t,r,i)}const al=64,ol=128,cl=2,hl=19,ul=4294967295,ll=4,yl=4294967295,fl=8,gl=4294967295,pl=8,dl=4294967295,Al=4294967295,wl=32,ml=1024,bl=64,El=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function kl(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function vl(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=t;for(let t=r;t<r+7;t++)e[t]=i,i=(i-e[t])/256;return e}function Il(e,t,r){const i=new Uint8Array(64),n=new Uint8Array(4+t.length);if(kl(n,e,0),n.set(t,4),e<=64)return sl(e).update(n).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)sl(64).update(0===e?n:i).digest(i),r.set(i.subarray(0,32),32*e);const a=new Uint8Array(sl(e-32*s).update(i).digest());return r.set(a,32*s),r}function Bl(e,t,r,i){return e.fn.XOR(t.byteOffset,r.byteOffset,i.byteOffset),t}function Sl(e,t,r,i){return e.fn.G(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function Cl(e,t,r,i){return e.fn.G2(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function*Kl(e,t,r,i,n,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);vl(c,t,0),vl(c,r,8),vl(c,i,16),vl(c,n,24),vl(c,s,32),vl(c,cl,40);for(let t=1;t<=a;t++){vl(e.refs.prngTmp,t,c.length);const r=Cl(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}const Dl=1024,Pl=64*Dl;function Ul(e,{memory:t,instance:r}){if(!El)throw Error("BigEndian system not supported");const i=function({type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(e,t,r,i)=>{if(t<r||t>i)throw Error(`${e} size should be between ${r} and ${i} bytes`)};if(e!==cl||t!==hl)throw Error("Unsupported type or version");return u("password",i,pl,gl),u("salt",n,fl,yl),u("tag",r,ll,ul),u("memory",c,8*o,dl),s&&u("associated data",s,0,Al),a&&u("secret",a,0,wl),{type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:cl,version:hl,...e}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*ml+10*Dl;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/Pl);t.grow(e)}let y=0;c.gZ=new Uint8Array(t.buffer,y,ml),y+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,y,ml),y+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,y,ml),y+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,y,1024),y+=c.ZERO1024.length;const f=new Uint32Array(t.buffer,y,2);y+=f.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:h,refs:c},p=new Uint8Array(t.buffer,y,ml);y+=p.length;const d=new Uint8Array(t.buffer,y,i.memorySize*ml),A=new Uint8Array(t.buffer,0,y),w=function(e){const t=sl(bl),r=new Uint8Array(4),i=new Uint8Array(24);kl(i,e.lanes,0),kl(i,e.tagLength,4),kl(i,e.memorySize,8),kl(i,e.passes,12),kl(i,e.version,16),kl(i,e.type,20);const n=[i];e.password?(n.push(kl(new Uint8Array(4),e.password.length,0)),n.push(e.password)):n.push(r);e.salt?(n.push(kl(new Uint8Array(4),e.salt.length,0)),n.push(e.salt)):n.push(r);e.secret?(n.push(kl(new Uint8Array(4),e.secret.length,0)),n.push(e.secret)):n.push(r);e.ad?(n.push(kl(new Uint8Array(4),e.ad.length,0)),n.push(e.ad)):n.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((e=>{r.set(e,i),i+=e.length})),r}(n));const s=t.digest();return new Uint8Array(s)}(i),m=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(m))),E=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+ml),b[e][t]);for(let e=0;e<i.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),kl(t,0,w.length),kl(t,e,w.length+4),Il(ml,t,E(e,0)),kl(t,1,w.length),Il(ml,t,E(e,1))}const k=m/4;for(let e=0;e<i.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let n=0;n<i.lanes;n++){let s=0===t&&0===e?2:0;const a=r?Kl(g,e,n,t,u,i.passes,k,s):null;for(;s<k;s++){const c=t*k+s,h=c>0?b[n][c-1]:b[n][m-1],u=r?a.next().value:h;o(f.byteOffset,u.byteOffset,n,i.lanes,e,t,s,4,k);const l=f[0],y=f[1];0===e&&E(n,c),Sl(g,h,b[l][y],e>0?p:b[n][c]),e>0&&Bl(g,b[n][c],p,b[n][c])}}}const v=b[0][m-1];for(let e=1;e<i.lanes;e++)Bl(g,v,v,b[e][m-1]);const I=Il(i.tagLength,v,new Uint8Array(i.tagLength));return A.fill(0),t.grow(0),I}let xl;async function Ql(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(e,t,r){const i={env:{memory:e}};if(void 0===xl)try{const e=await t(i);return xl=!0,e}catch(e){xl=!1}return(xl?t:r)(i)}(r,e,t);return e=>Ul(e,{instance:i.instance,memory:r})}function Rl(e,t,r,i){return function(e,t,r){var i=WebAssembly.instantiate,n=WebAssembly.compile;return t?i(e,t):n(e)}(Buffer.from(r,"base64"),i)}var Ml=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Ql((e=>Rl(0,0,"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",e)),(e=>Rl(0,0,"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",e)))});exports.AEADEncryptedDataPacket=ua,exports.Argon2OutOfMemoryError=kn,exports.Argon2S2K=Sn,exports.CleartextMessage=io,exports.CompressedDataPacket=ea,exports.KDFParams=hn,exports.LiteralDataPacket=Os,exports.MarkerPacket=class{static get tag(){return L.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}},exports.Message=Xa,exports.OnePassSignaturePacket=Ws,exports.PacketList=$s,exports.PaddingPacket=class{static get tag(){return L.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await En.random.getRandomBytes(e)}},exports.PrivateKey=qa,exports.PublicKey=ja,exports.PublicKeyEncryptedSessionKeyPacket=la,exports.PublicKeyPacket=ga,exports.PublicSubkeyPacket=Aa,exports.SecretKeyPacket=ma,exports.SecretSubkeyPacket=ka,exports.Signature=Ia,exports.SignaturePacket=Vs,exports.Subkey=Fa,exports.SymEncryptedIntegrityProtectedDataPacket=oa,exports.SymEncryptedSessionKeyPacket=fa,exports.SymmetricallyEncryptedDataPacket=da,exports.TrustPacket=class{static get tag(){return L.packet.trust}read(){throw new ni("Trust packets are not supported")}write(){throw new ni("Trust packets are not supported")}},exports.UnparseablePacket=ai,exports.UserAttributePacket=wa,exports.UserIDPacket=Ea,exports.armor=re,exports.config=_,exports.createCleartextMessage=async function({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!F.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new io(e)},exports.createMessage=async function({text:e,binary:t,filename:r,date:i=new Date,format:n=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!F.isString(e)&&!F.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!F.isUint8Array(t)&&!F.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=F.isStream(a),h=new Os(i);void 0!==e?h.setText(a,L.write(L.literal,n)):h.setBytes(a,L.write(L.literal,n)),void 0!==r&&h.setFilename(r);const u=new $s;u.push(h);const l=new Xa(u);return l.fromStream=c,l},exports.decrypt=async function({message:e,decryptionKeys:t,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(co(h={..._,...h}),no(e),n=ho(n),t=ho(t),r=ho(r),i=ho(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await e.decrypt(t,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),lo(l,e),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=b([l.data,Q((async()=>{await F.anyPromise(l.signatures.map((e=>e.verified)))}))])}return l.data=await uo(l.data),l}catch(e){throw F.wrapError("Error decrypting message",e)}},exports.decryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){co(r={..._,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=F.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>F.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),F.wrapError("Error decrypting private key",e)}},exports.decryptSessionKeys=async function({message:e,decryptionKeys:t,passwords:r,date:i=new Date,config:n,...s}){if(co(n={..._,...n}),no(e),t=ho(t),r=ho(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,i,n)}catch(e){throw F.wrapError("Error decrypting session keys",e)}},exports.encrypt=async function({message:e,encryptionKeys:t,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:y=[],signatureNotations:f=[],config:g,...p}){if(co(g={..._,...g}),no(e),ao(s),t=ho(t),r=ho(r),i=ho(i),c=ho(c),h=ho(h),l=ho(l),y=ho(y),f=ho(f),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,a,c,u,l,f,g)),e=e.compress(await async function(e=[],t=new Date,r=[],i=_){const n=L.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,n){const a=(await e.getPrimarySelfSignature(t,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(t,u,y,g),g),e=await e.encrypt(t,i,n,o,h,u,y,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await uo(p)}catch(e){throw F.wrapError("Error encrypting message",e)}},exports.encryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){co(r={..._,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=F.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:i}=e;await i.encrypt(o[t],r),i.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),F.wrapError("Error encrypting private key",e)}},exports.encryptSessionKey=async function({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(co(u={..._,...u}),function(e,t){if(!F.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!F.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),ao(s),i=ho(i),n=ho(n),o=ho(o),h=ho(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const y=Object.keys(l);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return yo(await Xa.encryptSessionKey(e,t,r,i,n,a,o,c,h,u),s,u)}catch(e){throw F.wrapError("Error encrypting session key",e)}},exports.enums=L,exports.generateKey=async function({userIDs:e=[],passphrase:t,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...y}){co(l={..._,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),e=ho(e);const f=Object.keys(y);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const g={userIDs:e,passphrase:t,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=Ra(e)).subkeys=e.subkeys.map(((t,r)=>Ra(e.subkeys[r],e)));let r=[Sa(e,t)];r=r.concat(e.subkeys.map((e=>Ba(e,t))));const i=await Promise.all(r),n=await Ja(i[0],i.slice(1),e,t),s=await n.getRevocationCertificate(e.date,t);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(g,l);return e.getKeys().forEach((({keyPacket:e})=>_a(e,l))),{privateKey:yo(e,u,l),publicKey:"symmetric"!==r?yo(e.toPublic(),u,l):null,revocationCertificate:t}}catch(e){throw F.wrapError("Error generating keypair",e)}},exports.generateSessionKey=async function({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:i,...n}){if(co(i={..._,...i}),e=ho(e),r=ho(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Xa.generateSessionKey(e,t,r,i)}catch(e){throw F.wrapError("Error generating session key",e)}},exports.readCleartextMessage=async function({cleartextMessage:e,config:t,...r}){if(t={..._,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!F.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await te(e);if(n.type!==L.armor.signed)throw Error("No cleartext signed message.");const s=await $s.fromBinary(n.data,ro,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let i=0;i<t.length;i++)if(t[i].constructor.tag===L.packet.signature&&!e.some(r(t[i])))return!1;return!0},i=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return L.write(L.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));i.push(...e)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new Ia(s);return new io(n.text,a)},exports.readKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={..._,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!F.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!F.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await te(e);if(t!==L.armor.publicKey&&t!==L.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await $s.fromBinary(s,Va,r),o=a.indexOfTag(L.packet.publicKey,L.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Ya(a.slice(o[0],o[1]))},exports.readKeys=async function({armoredKeys:e,binaryKeys:t,config:r,...i}){r={..._,...r};let n=e||t;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!F.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!F.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await te(e);if(t!==L.armor.publicKey&&t!==L.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await $s.fromBinary(n,Va,r),c=o.indexOfTag(L.packet.publicKey,L.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Ya(o.slice(c[e],c[e+1]));a.push(t)}return a},exports.readMessage=async function({armoredMessage:e,binaryMessage:t,config:r,...i}){r={..._,...r};let n=e||t;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!F.isString(e)&&!F.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!F.isUint8Array(t)&&!F.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=F.isStream(n);if(e){const{type:e,data:t}=await te(n);if(e!==L.armor.message)throw Error("Armored text not of type message");n=t}const o=await $s.fromBinary(n,Wa,r),c=new Xa(o);return c.fromStream=a,c},exports.readPrivateKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={..._,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!F.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!F.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await te(e);if(t!==L.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await $s.fromBinary(s,Va,r),o=a.indexOfTag(L.packet.publicKey,L.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===L.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new qa(t)}throw Error("No secret key packet found")},exports.readPrivateKeys=async function({armoredKeys:e,binaryKeys:t,config:r}){r={..._,...r};let i=e||t;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!F.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!F.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await te(e);if(t!==L.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await $s.fromBinary(i,Va,r),a=s.indexOfTag(L.packet.publicKey,L.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===L.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new qa(t);n.push(r)}if(0===n.length)throw Error("No secret key packet found");return n},exports.readSignature=async function({armoredSignature:e,binarySignature:t,config:r,...i}){r={..._,...r};let n=e||t;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!F.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!F.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await te(n);if(e!==L.armor.signature)throw Error("Armored text not of type signature");n=t}const a=await $s.fromBinary(n,va,r);return new Ia(a)},exports.reformatKey=async function({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){co(a={..._,...a}),t=ho(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:i,date:n};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,n={key:i,bind:r},s=await Ca(e.bindingSignatures,i,L.signature.subkeyBinding,n,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&L.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&L.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await Ja(i,n,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=F.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(h,a);return{privateKey:yo(e,s,a),publicKey:yo(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw F.wrapError("Error reformatting keypair",e)}},exports.revokeKey=async function({key:e,revocationCertificate:t,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){co(s={..._,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,i,s):await e.revoke(r,i,s);return a.isPrivate()?{privateKey:yo(a,n,s),publicKey:yo(a.toPublic(),n,s)}:{privateKey:null,publicKey:yo(a,n,s)}}catch(e){throw F.wrapError("Error revoking key",e)}},exports.sign=async function({message:e,signingKeys:t,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(co(c={..._,...c}),so(e),ao(r),t=ho(t),n=ho(n),a=ho(a),o=ho(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(e instanceof io&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof io&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let h;if(h=i?await e.signDetached(t,void 0,n,s,a,o,c):await e.sign(t,void 0,n,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),i&&(h=B(e.packets.write(),(async(e,t)=>{await Promise.all([E(h,t),U(e).catch((()=>{}))])}))),await uo(h)}catch(e){throw F.wrapError("Error signing message",e)}},exports.unarmor=te,exports.verify=async function({message:e,verificationKeys:t,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(co(a={..._,...a}),so(e),t=ho(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof io&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(e instanceof io&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await e.verifyDetached(n,t,s,a):await e.verify(t,s,a),o.data="binary"===i?e.getLiteralData():e.getText(),e.fromStream&&lo(o,e),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=b([o.data,Q((async()=>{await F.anyPromise(o.signatures.map((e=>e.verified)))}))])}return o.data=await uo(o.data),o}catch(e){throw F.wrapError("Error verifying signed message",e)}};
15
14
  //# sourceMappingURL=openpgp.min.cjs.map