@protontech/openpgp 6.0.0-beta.1 → 6.0.0-beta.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -2
- package/dist/lightweight/argon2id.min.mjs +1 -1
- package/dist/lightweight/argon2id.mjs +1 -1
- package/dist/lightweight/legacy_ciphers.min.mjs +1 -1
- package/dist/lightweight/legacy_ciphers.mjs +1 -1
- package/dist/lightweight/noble_curves.min.mjs +1 -1
- package/dist/lightweight/noble_curves.mjs +1 -1
- package/dist/lightweight/noble_hashes.min.mjs +1 -1
- package/dist/lightweight/noble_hashes.mjs +1 -1
- package/dist/lightweight/openpgp.min.mjs +3 -2
- package/dist/lightweight/openpgp.min.mjs.map +1 -1
- package/dist/lightweight/openpgp.mjs +1011 -168
- package/dist/lightweight/sha3.min.mjs +1 -1
- package/dist/lightweight/sha3.mjs +1 -1
- package/dist/node/openpgp.cjs +985 -134
- package/dist/node/openpgp.min.cjs +12 -11
- package/dist/node/openpgp.min.cjs.map +1 -1
- package/dist/node/openpgp.min.mjs +12 -11
- package/dist/node/openpgp.min.mjs.map +1 -1
- package/dist/node/openpgp.mjs +984 -134
- package/dist/openpgp.js +1011 -168
- package/dist/openpgp.min.js +12 -11
- package/dist/openpgp.min.js.map +1 -1
- package/dist/openpgp.min.mjs +12 -11
- package/dist/openpgp.min.mjs.map +1 -1
- package/dist/openpgp.mjs +1011 -168
- package/openpgp.d.ts +8 -1
- package/package.json +6 -5
|
@@ -1,14 +1,15 @@
|
|
|
1
|
-
/*! OpenPGP.js v6.0.0-beta.
|
|
2
|
-
"use strict";const e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var t=require("module"),r=require("node:crypto"),i="undefined"!=typeof document?document.currentScript:null;function n(e){var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var i=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,i.get?i:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var s=/*#__PURE__*/n(r);const a=Symbol("doneWritingPromise"),o=Symbol("doneWritingResolve"),c=Symbol("doneWritingReject"),h=Symbol("readingIndex");class ArrayStream extends Array{constructor(){super(),Object.setPrototypeOf(this,ArrayStream.prototype),this[a]=new Promise(((e,t)=>{this[o]=e,this[c]=t})),this[a].catch((()=>{}))}}function u(e){return e&&e.getReader&&Array.isArray(e)}function l(e){if(!u(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function y(t){if(u(t))return"array";if(e.ReadableStream&&e.ReadableStream.prototype.isPrototypeOf(t))return"web";if(t&&!(e.ReadableStream&&t instanceof e.ReadableStream)&&"function"==typeof t._read&&"object"==typeof t._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!t||!t.getReader)&&"web-like"}function f(e){return Uint8Array.prototype.isPrototypeOf(e)}function g(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!f(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((function(e){r.set(e,i),i+=e.length})),r}ArrayStream.prototype.getReader=function(){return void 0===this[h]&&(this[h]=0),{read:async()=>(await this[a],this[h]===this.length?{value:void 0,done:!0}:{value:this[this[h]++],done:!1})}},ArrayStream.prototype.readToEnd=async function(e){await this[a];const t=e(this.slice(this[h]));return this.length=0,t},ArrayStream.prototype.clone=function(){const e=new ArrayStream;return e[a]=this[a].then((()=>{e.push(...this)})),e},l.prototype.write=async function(e){this.stream.push(e)},l.prototype.close=async function(){this.stream[o]()},l.prototype.abort=async function(e){return this.stream[c](e),e},l.prototype.releaseLock=function(){},"object"==typeof e.process&&e.process.versions;const p=new WeakSet,d=Symbol("externalBuffer");function A(e){if(this.stream=e,e[d]&&(this[d]=e[d].slice()),u(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(y(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||p.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{p.add(e)}catch(e){}}}function w(e){return y(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function m(e){if(y(e))return e;const t=new ArrayStream;return(async()=>{const r=M(t);await r.write(e),await r.close()})(),t}function b(e){return e.some((e=>y(e)&&!u(e)))?function(e){e=e.map(w);const t=v((async function(e){await Promise.all(i.map((t=>x(t,e))))}));let r=Promise.resolve();const i=e.map(((i,n)=>B(i,((i,s)=>(r=r.then((()=>E(i,t.writable,{preventClose:n!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>u(e)))?function(e){const t=new ArrayStream;let r=Promise.resolve();return e.forEach(((i,n)=>(r=r.then((()=>E(i,t,{preventClose:n!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):g(e)}async function E(e,t,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(y(e)&&!u(e)){e=w(e);try{if(e[d]){const r=M(t);for(let t=0;t<e[d].length;t++)await r.ready,await r.write(e[d][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:i,preventCancel:n})}catch(e){}return}const s=R(e=m(e)),a=M(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){i||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function k(e,t){const r=new TransformStream(t);return E(e,r.writable),r.readable}function v(e){let t,r,i=!1;return{readable:new ReadableStream({start(e){r=e},pull(){t?t():i=!0},cancel:e},{highWaterMark:0}),writable:new WritableStream({write:async function(e){r.enqueue(e),i?i=!1:(await new Promise((e=>{t=e})),t=null)},close:r.close.bind(r),abort:r.error.bind(r)})}}function I(e,t=(()=>{}),r=(()=>{})){if(u(e)){const i=new ArrayStream;return(async()=>{const n=M(i);try{const i=await U(e),s=t(i),a=r();let o;o=void 0!==s&&void 0!==a?b([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(e){await n.abort(e)}})(),i}if(y(e))return k(e,{async transform(e,r){try{const i=await t(e);void 0!==i&&r.enqueue(i)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const i=t(e),n=r();return void 0!==i&&void 0!==n?b([i,n]):void 0!==i?i:n}function B(e,t){if(y(e)&&!u(e)){let r;const i=new TransformStream({start(e){r=e}}),n=E(e,i.writable),s=v((async function(e){r.error(e),await n,await new Promise(setTimeout)}));return t(i.readable,s.writable),s.readable}e=m(e);const r=new ArrayStream;return t(e,r),r}function S(e,t){let r;const i=B(e,((e,n)=>{const s=R(e);s.remainder=()=>(s.releaseLock(),E(e,n),i),r=t(s)}));return r}function C(e){if(u(e))return e.clone();if(y(e)){const t=function(e){if(u(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(y(e)){const t=w(e).tee();return t[0][d]=t[1][d]=e[d],t}return[P(e),P(e)]}(e);return D(e,t[0]),t[1]}return P(e)}function K(e){return u(e)?C(e):y(e)?new ReadableStream({start(t){const r=B(e,(async(e,r)=>{const i=R(e),n=M(r);try{for(;;){await n.ready;const{done:e,value:r}=await i.read();if(e){try{t.close()}catch(e){}return void await n.close()}try{t.enqueue(r)}catch(e){}await n.write(r)}}catch(e){t.error(e),await n.abort(e)}}));D(e,r)}}):P(e)}function D(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(t):i.get=i.get.bind(t),Object.defineProperty(e,r,i))}))}function P(e,t=0,r=1/0){if(u(e))throw Error("Not implemented");if(y(e)){if(t>=0&&r>=0){let i=0;return k(e,{transform(e,n){i<r?(i+e.length>=t&&n.enqueue(P(e,Math.max(t-i,0),r-i)),i+=e.length):n.terminate()}})}if(t<0&&(r<0||r===1/0)){let i=[];return I(e,(e=>{e.length>=-t?i=[e]:i.push(e)}),(()=>P(b(i),t,r)))}if(0===t&&r<0){let i;return I(e,(e=>{const n=i?b([i,e]):e;if(n.length>=-r)return i=P(n,r),P(n,t,r);i=n}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),Q((async()=>P(await U(e),t,r)))}return e[d]&&(e=b(e[d].concat([e]))),f(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function U(e,t=b){return u(e)?e.readToEnd(t):y(e)?R(e).readToEnd(t):e}async function x(e,t){if(y(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function Q(e){const t=new ArrayStream;return(async()=>{const r=M(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function R(e){return new A(e)}function M(e){return new l(e)}A.prototype.read=async function(){if(this[d]&&this[d].length){return{done:!1,value:this[d].shift()}}return this._read()},A.prototype.releaseLock=function(){this[d]&&(this.stream[d]=this[d]),this._releaseLock()},A.prototype.cancel=function(e){return this._cancel(e)},A.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:i}=await this.read();if(i+="",r)return t.length?b(t):void 0;const n=i.indexOf("\n")+1;n&&(e=b(t.concat(i.substr(0,n))),t=[]),n!==i.length&&t.push(i.substr(n))}return this.unshift(...t),e},A.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(P(t,1)),r},A.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return t.length?b(t):void 0;if(t.push(n),r+=n.length,r>=e){const r=b(t);return this.unshift(P(r,e)),P(r,0,e)}}},A.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},A.prototype.unshift=function(...e){this[d]||(this[d]=[]),1===e.length&&f(e[0])&&this[d].length&&e[0].length&&this[d][0].byteOffset>=e[0].length?this[d][0]=new Uint8Array(this[d][0].buffer,this[d][0].byteOffset-e[0].length,this[d][0].byteLength+e[0].length):this[d].unshift(...e.filter((e=>e&&e.length)))},A.prototype.readToEnd=async function(e=b){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const T=Symbol("byValue");var L={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[T]||(e[T]=[],Object.entries(e).forEach((([t,r])=>{e[T][r]=t}))),void 0!==e[T][t])return e[T][t];throw Error("Invalid enum value.")}},_={preferredHashAlgorithm:L.hash.sha256,preferredSymmetricAlgorithm:L.symmetric.aes256,preferredCompressionAlgorithm:L.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:L.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,s2kType:L.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([L.symmetric.aes128,L.symmetric.aes192,L.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.1",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([L.hash.md5,L.hash.ripemd]),rejectMessageHashAlgorithms:new Set([L.hash.md5,L.hash.ripemd,L.hash.sha1]),rejectPublicKeyAlgorithms:new Set([L.publicKey.elgamal,L.publicKey.dsa]),rejectCurves:new Set([L.curve.secp256k1])};const N=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),F={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:t.createRequire("undefined"==typeof document?require("url").pathToFileURL(__filename).href:i&&i.src||new URL("openpgp.min.cjs",document.baseURI).href),isArray:function(e){return e instanceof Array},isUint8Array:f,isStream:y,getNobleCurve:async(e,t)=>{if(!_.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return Au}));switch(e){case L.publicKey.ecdh:case L.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case L.publicKey.x448:return r.get("x448");case L.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let i=0;i<t;i++)r[i]=e>>8*(t-i-1)&255;return r},readDate:function(e){const t=F.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return F.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return F.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){const r=new Uint8Array(t),i=t-e.length;return r.set(e,i),r},uint8ArrayToMPI:function(e){const t=F.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),i=new Uint8Array([(65280&t)>>8,255&t]);return F.concatUint8Array([i,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+F.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return I(e,(e=>{if(!F.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,i=(e=new Uint8Array(e)).length;for(let n=0;n<i;n+=r)t.push(String.fromCharCode.apply(String,e.subarray(n,n+r<i?n+r:i)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return I(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return I(e,r,(()=>r(new Uint8Array,!0)))},concat:b,concatUint8Array:g,equalsUint8Array:function(e,t){if(!F.isUint8Array(e)||!F.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return F.writeNumber(t,2)},printDebug:function(e){N&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){N&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let i=0;i<r;i++)t[i]=e[i]<<1^e[i+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const t=void 0!==e&&e.crypto&&e.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!t)throw Error("The WebCrypto API is not available");return t},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!F.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return I(e,(e=>{let r;t&&(e=F.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const i=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&i.push(r);if(!i.length)return e;const n=new Uint8Array(e.length+i.length);let s=0;for(let t=0;t<i.length;t++){const r=e.subarray(i[t-1]||0,i[t]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(e.subarray(i[i.length-1]||0),s),n}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return I(e,(e=>{let r;13===(e=t&&10!==e[0]?F.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let i=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const n=r-(10===e[r]?1:0);t&&e.copyWithin(i,t,n),i+=n-t}return e.subarray(0,i)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return Error(e);try{t.message=e+": "+t.message}catch(e){}return t},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let i;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){i=e}}))),r(i)}))},selectUint8Array:function(e,t,r){const i=Math.max(t.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=t[i]&256-e|r[i]&255+e,s+=e&i<t.length|1-e&i<r.length;return n.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===L.symmetric.aes128||e===L.symmetric.aes192||e===L.symmetric.aes256}},H=F.getNodeBuffer();let O,z;function G(e){let t=new Uint8Array;return I(e,(e=>{t=F.concatUint8Array([t,e]);const r=[],i=Math.floor(t.length/45),n=45*i,s=O(t.subarray(0,n));for(let e=0;e<i;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(n),r.join("")}),(()=>t.length?O(t)+"\n":""))}function j(e){let t="";return I(e,(e=>{t+=e;let r=0;const i=[" ","\t","\r","\n"];for(let e=0;e<i.length;e++){const n=i[e];for(let e=t.indexOf(n);-1!==e;e=t.indexOf(n,e+1))r++}let n=t.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(t[n])&&r--;const s=z(t.substr(0,n));return t=t.substr(n),s}),(()=>z(t)))}function q(e){return j(e.replace(/-/g,"+").replace(/_/g,"/"))}function V(e,t){let r=G(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function Y(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?L.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?L.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?L.armor.signed:/MESSAGE/.test(t[1])?L.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?L.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?L.armor.privateKey:/SIGNATURE/.test(t[1])?L.armor.signature:void 0}function J(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function W(e){const t=function(e){let t=13501623;return I(e,(e=>{const r=$?Math.floor(e.length/4):0,i=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=i[e],t=Z[0][t>>24&255]^Z[1][t>>16&255]^Z[2][t>>8&255]^Z[3][255&t];for(let i=4*r;i<e.length;i++)t=t>>8^Z[0][255&t^e[i]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return G(t)}H?(O=e=>H.from(e).toString("base64"),z=e=>{const t=H.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(O=e=>btoa(F.uint8ArrayToString(e)),z=e=>F.stringToUint8Array(atob(e)));const Z=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);Z[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)Z[1][e]=Z[0][e]>>8^Z[0][255&Z[0][e]];for(let e=0;e<=255;e++)Z[2][e]=Z[1][e]>>8^Z[0][255&Z[1][e]];for(let e=0;e<=255;e++)Z[3][e]=Z[2][e]>>8^Z[0][255&Z[2][e]];const $=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function X(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||F.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||F.printDebugError(Error("Unknown header: "+e[t]))}function ee(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function te(e){return new Promise((async(t,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=j(B(e,(async(e,y)=>{const f=R(e);try{for(;;){let e=await f.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=F.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==L.armor.signed||(i.test(e)?(u=u.join("\r\n"),c=!0,X(h),h=[],o=!1):u.push(e.replace(/^- /,"")));else if(i.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(e)){if(X(h),o=!0,c||s!==L.armor.signed){t({text:u,data:l,headers:a,type:s});break}}else h.push(e);else i.test(e)&&(s=Y(e))}}catch(e){return void r(e)}const g=M(y);try{for(;;){await g.ready;const{done:e,value:t}=await f.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await f.readToEnd();e.length||(e=""),e=r+e,e=F.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(i);if(1===t.length)throw Error("Misformed armored text");const n=ee(t[0].slice(0,-1));await g.write(n);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}})))}catch(e){r(e)}})).then((async e=>(u(e.data)&&(e.data=await U(e.data)),e)))}function re(e,t,r,i,n,s=!1,a=_){let o,c;e===L.armor.signed&&(o=t.text,c=t.hash,t=t.data);const h=s&&K(t),u=[];switch(e){case L.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case L.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case L.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP SIGNATURE-----\n");break;case L.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP MESSAGE-----\n");break;case L.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case L.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case L.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push(J(n,a)),u.push(G(t)),h&&u.push("=",W(h)),u.push("-----END PGP SIGNATURE-----\n")}return F.concat(u)}async function ie(e){switch(e){case L.symmetric.aes128:case L.symmetric.aes192:case L.symmetric.aes256:throw Error("Not a legacy cipher");case L.symmetric.cast5:case L.symmetric.blowfish:case L.symmetric.twofish:case L.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return xu})),r=t.get(e);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function ne(e){switch(e){case L.symmetric.aes128:case L.symmetric.aes192:case L.symmetric.aes256:case L.symmetric.twofish:return 16;case L.symmetric.blowfish:case L.symmetric.cast5:case L.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function se(e){switch(e){case L.symmetric.aes128:case L.symmetric.blowfish:case L.symmetric.cast5:return 16;case L.symmetric.aes192:case L.symmetric.tripledes:return 24;case L.symmetric.aes256:case L.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function ae(e){return{keySize:se(e),blockSize:ne(e)}}var oe=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:ae,getLegacyCipher:ie});function ce(e,t){let r=e[0],i=e[1],n=e[2],s=e[3];r=ue(r,i,n,s,t[0],7,-680876936),s=ue(s,r,i,n,t[1],12,-389564586),n=ue(n,s,r,i,t[2],17,606105819),i=ue(i,n,s,r,t[3],22,-1044525330),r=ue(r,i,n,s,t[4],7,-176418897),s=ue(s,r,i,n,t[5],12,1200080426),n=ue(n,s,r,i,t[6],17,-1473231341),i=ue(i,n,s,r,t[7],22,-45705983),r=ue(r,i,n,s,t[8],7,1770035416),s=ue(s,r,i,n,t[9],12,-1958414417),n=ue(n,s,r,i,t[10],17,-42063),i=ue(i,n,s,r,t[11],22,-1990404162),r=ue(r,i,n,s,t[12],7,1804603682),s=ue(s,r,i,n,t[13],12,-40341101),n=ue(n,s,r,i,t[14],17,-1502002290),i=ue(i,n,s,r,t[15],22,1236535329),r=le(r,i,n,s,t[1],5,-165796510),s=le(s,r,i,n,t[6],9,-1069501632),n=le(n,s,r,i,t[11],14,643717713),i=le(i,n,s,r,t[0],20,-373897302),r=le(r,i,n,s,t[5],5,-701558691),s=le(s,r,i,n,t[10],9,38016083),n=le(n,s,r,i,t[15],14,-660478335),i=le(i,n,s,r,t[4],20,-405537848),r=le(r,i,n,s,t[9],5,568446438),s=le(s,r,i,n,t[14],9,-1019803690),n=le(n,s,r,i,t[3],14,-187363961),i=le(i,n,s,r,t[8],20,1163531501),r=le(r,i,n,s,t[13],5,-1444681467),s=le(s,r,i,n,t[2],9,-51403784),n=le(n,s,r,i,t[7],14,1735328473),i=le(i,n,s,r,t[12],20,-1926607734),r=ye(r,i,n,s,t[5],4,-378558),s=ye(s,r,i,n,t[8],11,-2022574463),n=ye(n,s,r,i,t[11],16,1839030562),i=ye(i,n,s,r,t[14],23,-35309556),r=ye(r,i,n,s,t[1],4,-1530992060),s=ye(s,r,i,n,t[4],11,1272893353),n=ye(n,s,r,i,t[7],16,-155497632),i=ye(i,n,s,r,t[10],23,-1094730640),r=ye(r,i,n,s,t[13],4,681279174),s=ye(s,r,i,n,t[0],11,-358537222),n=ye(n,s,r,i,t[3],16,-722521979),i=ye(i,n,s,r,t[6],23,76029189),r=ye(r,i,n,s,t[9],4,-640364487),s=ye(s,r,i,n,t[12],11,-421815835),n=ye(n,s,r,i,t[15],16,530742520),i=ye(i,n,s,r,t[2],23,-995338651),r=fe(r,i,n,s,t[0],6,-198630844),s=fe(s,r,i,n,t[7],10,1126891415),n=fe(n,s,r,i,t[14],15,-1416354905),i=fe(i,n,s,r,t[5],21,-57434055),r=fe(r,i,n,s,t[12],6,1700485571),s=fe(s,r,i,n,t[3],10,-1894986606),n=fe(n,s,r,i,t[10],15,-1051523),i=fe(i,n,s,r,t[1],21,-2054922799),r=fe(r,i,n,s,t[8],6,1873313359),s=fe(s,r,i,n,t[15],10,-30611744),n=fe(n,s,r,i,t[6],15,-1560198380),i=fe(i,n,s,r,t[13],21,1309151649),r=fe(r,i,n,s,t[4],6,-145523070),s=fe(s,r,i,n,t[11],10,-1120210379),n=fe(n,s,r,i,t[2],15,718787259),i=fe(i,n,s,r,t[9],21,-343485551),e[0]=Ae(r,e[0]),e[1]=Ae(i,e[1]),e[2]=Ae(n,e[2]),e[3]=Ae(s,e[3])}function he(e,t,r,i,n,s){return t=Ae(Ae(t,e),Ae(i,s)),Ae(t<<n|t>>>32-n,r)}function ue(e,t,r,i,n,s,a){return he(t&r|~t&i,e,t,n,s,a)}function le(e,t,r,i,n,s,a){return he(t&i|r&~i,e,t,n,s,a)}function ye(e,t,r,i,n,s,a){return he(t^r^i,e,t,n,s,a)}function fe(e,t,r,i,n,s,a){return he(r^(t|~i),e,t,n,s,a)}function ge(e){const t=[];let r;for(r=0;r<64;r+=4)t[r>>2]=e.charCodeAt(r)+(e.charCodeAt(r+1)<<8)+(e.charCodeAt(r+2)<<16)+(e.charCodeAt(r+3)<<24);return t}const pe="0123456789abcdef".split("");function de(e){let t="",r=0;for(;r<4;r++)t+=pe[e>>8*r+4&15]+pe[e>>8*r&15];return t}function Ae(e,t){return e+t&4294967295}const we=F.getWebCrypto(),me=F.getNodeCrypto(),be=me&&me.getHashes();function Ee(e){if(me&&be.includes(e))return async function(t){const r=me.createHash(e);return I(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function ke(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return Zu})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(u(e)&&(e=await U(e)),F.isStream(e)){const t=(await r()).create();return I(e,(e=>{t.update(e)}),(()=>t.digest()))}if(we&&t)return new Uint8Array(await we.digest(t,e));return(await r())(e)}}var ve={md5:Ee("md5")||async function(e){const t=function(e){const t=e.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=e.length;i+=64)ce(r,ge(e.substring(i-64,i)));e=e.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<e.length;i++)n[i>>2]|=e.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(ce(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*t,ce(r,n),r}(F.uint8ArrayToString(e));return F.hexToUint8Array(function(e){for(let t=0;t<e.length;t++)e[t]=de(e[t]);return e.join("")}(t))},sha1:Ee("sha1")||ke("sha1","SHA-1"),sha224:Ee("sha224")||ke("sha224"),sha256:Ee("sha256")||ke("sha256","SHA-256"),sha384:Ee("sha384")||ke("sha384","SHA-384"),sha512:Ee("sha512")||ke("sha512","SHA-512"),ripemd:Ee("ripemd160")||ke("ripemd160"),sha3_256:Ee("sha3-256")||ke("sha3_256"),sha3_512:Ee("sha3-512")||ke("sha3_512"),digest:function(e,t){switch(e){case L.hash.md5:return this.md5(t);case L.hash.sha1:return this.sha1(t);case L.hash.ripemd:return this.ripemd(t);case L.hash.sha256:return this.sha256(t);case L.hash.sha384:return this.sha384(t);case L.hash.sha512:return this.sha512(t);case L.hash.sha224:return this.sha224(t);case L.hash.sha3_256:return this.sha3_256(t);case L.hash.sha3_512:return this.sha3_512(t);default:throw Error("Unsupported hash function")}},getHashByteLength:function(e){switch(e){case L.hash.md5:return 16;case L.hash.sha1:case L.hash.ripemd:return 20;case L.hash.sha256:return 32;case L.hash.sha384:return 48;case L.hash.sha512:return 64;case L.hash.sha224:return 28;case L.hash.sha3_256:return 32;case L.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(e){switch(e){case L.hash.md5:case L.hash.sha1:case L.hash.ripemd:case L.hash.sha224:case L.hash.sha256:return 64;case L.hash.sha384:case L.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}},Ie=function(){var e,t,r=!1;function i(r,i){var n=e[(t[r]+t[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=e[255-t[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){e=[],t=[];var i,n,s=1;for(i=0;i<255;i++)e[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=e[i],t[e[i]]=i;e[255]=e[0],t[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var y=1;y<4;y++)a[y][u]=a[y-1][u]>>>8|a[y-1][u]<<24,o[y][l]=o[y-1][l]>>>8|o[y-1][l]<<24}c=!0}var u=function(e,t){c||h();var r=new Uint32Array(t);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(e,t,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0;var I=new e.Uint32Array(r),B=new e.Uint8Array(r);function S(e,t,r,o,c,h,u,l){e=e|0;t=t|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0;y=r|0x400,f=r|0x800,g=r|0xc00;c=c^I[(e|0)>>2],h=h^I[(e|4)>>2],u=u^I[(e|8)>>2],l=l^I[(e|12)>>2];for(m=16;(m|0)<=o<<4;m=m+16|0){p=I[(r|c>>22&1020)>>2]^I[(y|h>>14&1020)>>2]^I[(f|u>>6&1020)>>2]^I[(g|l<<2&1020)>>2]^I[(e|m|0)>>2],d=I[(r|h>>22&1020)>>2]^I[(y|u>>14&1020)>>2]^I[(f|l>>6&1020)>>2]^I[(g|c<<2&1020)>>2]^I[(e|m|4)>>2],A=I[(r|u>>22&1020)>>2]^I[(y|l>>14&1020)>>2]^I[(f|c>>6&1020)>>2]^I[(g|h<<2&1020)>>2]^I[(e|m|8)>>2],w=I[(r|l>>22&1020)>>2]^I[(y|c>>14&1020)>>2]^I[(f|h>>6&1020)>>2]^I[(g|u<<2&1020)>>2]^I[(e|m|12)>>2];c=p,h=d,u=A,l=w}i=I[(t|c>>22&1020)>>2]<<24^I[(t|h>>14&1020)>>2]<<16^I[(t|u>>6&1020)>>2]<<8^I[(t|l<<2&1020)>>2]^I[(e|m|0)>>2],n=I[(t|h>>22&1020)>>2]<<24^I[(t|u>>14&1020)>>2]<<16^I[(t|l>>6&1020)>>2]<<8^I[(t|c<<2&1020)>>2]^I[(e|m|4)>>2],s=I[(t|u>>22&1020)>>2]<<24^I[(t|l>>14&1020)>>2]<<16^I[(t|c>>6&1020)>>2]<<8^I[(t|h<<2&1020)>>2]^I[(e|m|8)>>2],a=I[(t|l>>22&1020)>>2]<<24^I[(t|c>>14&1020)>>2]<<16^I[(t|h>>6&1020)>>2]<<8^I[(t|u<<2&1020)>>2]^I[(e|m|12)>>2]}function C(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;S(0x0000,0x0800,0x1000,v,e,t,r,i)}function K(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var s=0;S(0x0400,0x0c00,0x2000,v,e,i,r,t);s=n,n=a,a=s}function D(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o^e,c^t,h^r,u^l);o=i,c=n,h=s,u=a}function P(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;var y=0;S(0x0400,0x0c00,0x2000,v,e,l,r,t);y=n,n=a,a=y;i=i^o,n=n^c,s=s^h,a=a^u;o=e,c=t,h=r,u=l}function U(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i=i^e,c=n=n^t,h=s=s^r,u=a=a^l}function x(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);i=i^e,n=n^t,s=s^r,a=a^l;o=e,c=t,h=r,u=l}function Q(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i,c=n,h=s,u=a;i=i^e,n=n^t,s=s^r,a=a^l}function R(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;S(0x0000,0x0800,0x1000,v,l,y,f,g);g=~w&g|w&g+1;f=~A&f|A&f+((g|0)==0);y=~d&y|d&y+((f|0)==0);l=~p&l|p&l+((y|0)==0);i=i^e;n=n^t;s=s^r;a=a^o}function M(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0;e=e^o,t=t^c,r=r^h,i=i^u;n=m|0,s=b|0,a=E|0,l=k|0;for(;(d|0)<128;d=d+1|0){if(n>>>31){y=y^e,f=f^t,g=g^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;A=i&1;i=i>>>1|r<<31,r=r>>>1|t<<31,t=t>>>1|e<<31,e=e>>>1;if(A)e=e^0xe1000000}o=y,c=f,h=g,u=p}function T(e){e=e|0;v=e}function L(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;i=e,n=t,s=r,a=o}function _(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;o=e,c=t,h=r,u=i}function N(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;l=e,y=t,f=r,g=i}function F(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;p=e,d=t,A=r,w=i}function H(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;g=~w&g|w&i,f=~A&f|A&r,y=~d&y|d&t,l=~p&l|p&e}function O(e){e=e|0;if(e&15)return-1;B[e|0]=i>>>24,B[e|1]=i>>>16&255,B[e|2]=i>>>8&255,B[e|3]=i&255,B[e|4]=n>>>24,B[e|5]=n>>>16&255,B[e|6]=n>>>8&255,B[e|7]=n&255,B[e|8]=s>>>24,B[e|9]=s>>>16&255,B[e|10]=s>>>8&255,B[e|11]=s&255,B[e|12]=a>>>24,B[e|13]=a>>>16&255,B[e|14]=a>>>8&255,B[e|15]=a&255;return 16}function z(e){e=e|0;if(e&15)return-1;B[e|0]=o>>>24,B[e|1]=o>>>16&255,B[e|2]=o>>>8&255,B[e|3]=o&255,B[e|4]=c>>>24,B[e|5]=c>>>16&255,B[e|6]=c>>>8&255,B[e|7]=c&255,B[e|8]=h>>>24,B[e|9]=h>>>16&255,B[e|10]=h>>>8&255,B[e|11]=h&255,B[e|12]=u>>>24,B[e|13]=u>>>16&255,B[e|14]=u>>>8&255,B[e|15]=u&255;return 16}function G(){C(0,0,0,0);m=i,b=n,E=s,k=a}function j(e,t,r){e=e|0;t=t|0;r=r|0;var o=0;if(t&15)return-1;while((r|0)>=16){V[e&7](B[t|0]<<24|B[t|1]<<16|B[t|2]<<8|B[t|3],B[t|4]<<24|B[t|5]<<16|B[t|6]<<8|B[t|7],B[t|8]<<24|B[t|9]<<16|B[t|10]<<8|B[t|11],B[t|12]<<24|B[t|13]<<16|B[t|14]<<8|B[t|15]);B[t|0]=i>>>24,B[t|1]=i>>>16&255,B[t|2]=i>>>8&255,B[t|3]=i&255,B[t|4]=n>>>24,B[t|5]=n>>>16&255,B[t|6]=n>>>8&255,B[t|7]=n&255,B[t|8]=s>>>24,B[t|9]=s>>>16&255,B[t|10]=s>>>8&255,B[t|11]=s&255,B[t|12]=a>>>24,B[t|13]=a>>>16&255,B[t|14]=a>>>8&255,B[t|15]=a&255;o=o+16|0,t=t+16|0,r=r-16|0}return o|0}function q(e,t,r){e=e|0;t=t|0;r=r|0;var i=0;if(t&15)return-1;while((r|0)>=16){Y[e&1](B[t|0]<<24|B[t|1]<<16|B[t|2]<<8|B[t|3],B[t|4]<<24|B[t|5]<<16|B[t|6]<<8|B[t|7],B[t|8]<<24|B[t|9]<<16|B[t|10]<<8|B[t|11],B[t|12]<<24|B[t|13]<<16|B[t|14]<<8|B[t|15]);i=i+16|0,t=t+16|0,r=r-16|0}return i|0}var V=[C,K,D,P,U,x,Q,R];var Y=[D,M];return{set_rounds:T,set_state:L,set_iv:_,set_nonce:N,set_mask:F,set_counter:H,get_state:O,get_iv:z,gcm_init:G,cipher:j,mac:q}}({Uint8Array,Uint32Array},e,t);return u.set_key=function(e,t,i,s,a,c,h,l,y){var f=r.subarray(0,60),g=r.subarray(256,316);f.set([t,i,s,a,c,h,l,y]);for(var p=e,d=1;p<4*e+28;p++){var A=f[p-1];(p%e==0||8===e&&p%e==4)&&(A=n[A>>>24]<<24^n[A>>>16&255]<<16^n[A>>>8&255]<<8^n[255&A]),p%e==0&&(A=A<<8^A>>>24^d<<24,d=d<<1^(128&d?27:0)),f[p]=f[p-e]^A}for(var w=0;w<p;w+=4)for(var m=0;m<4;m++){A=f[p-(4+w)+(4-m)%4];g[w+m]=w<4||w>=p-4?A:o[0][n[A>>>24]]^o[1][n[A>>>16&255]]^o[2][n[A>>>8&255]]^o[3][n[255&A]]}u.set_rounds(e+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function Be(e){return e instanceof Uint8Array}function Se(e,t,r,i,n){const s=e.length-t,a=s<n?s:n;return e.set(r.subarray(i,i+a),t),a}function Ce(...e){const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);let i=0;for(let t=0;t<e.length;t++)r.set(e[t],i),i+=e[t].length;return r}class Ke extends Error{constructor(...e){super(...e)}}class De extends Error{constructor(...e){super(...e)}}class Pe extends Error{constructor(...e){super(...e)}}const Ue=[],xe=[];class Qe{constructor(e,t,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=e,this.iv=t,this.padding=r,this.acquire_asm(n,s)}acquire_asm(e,t){return void 0!==this.heap&&void 0!==this.asm||(this.heap=e||Ue.pop()||function(e,t){const r=e?e.byteLength:65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return e||new Uint8Array(new ArrayBuffer(r))}().subarray(Ie.HEAP_DATA),this.asm=t||xe.pop()||new Ie(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(Ue.push(this.heap),xe.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(e,t){const{asm:r}=this.acquire_asm(),i=e.length;if(16!==i&&24!==i&&32!==i)throw new De("illegal key size");const n=new DataView(e.buffer,e.byteOffset,e.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==t){if(16!==t.length)throw new De("illegal iv size");let e=new DataView(t.buffer,t.byteOffset,t.byteLength);r.set_iv(e.getUint32(0),e.getUint32(4),e.getUint32(8),e.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(e){if(!Be(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=Ie.ENC[this.mode],n=Ie.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=Se(t,s+a,e,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(t.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=Ie.ENC[this.mode],i=Ie.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let t=0;t<a;++t)e[n+s+t]=a;s+=a,o=s}else if(s%16)throw new De("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&t.cipher(r,i+n,s),o&&c.set(e.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(e){if(!Be(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=Ie.DEC[this.mode],n=Ie.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=a+c&-16,l=0,y=0;this.padding&&(l=a+c-u||16,u-=l);const f=new Uint8Array(u);for(;c>0;)y=Se(t,s+a,e,o,c),a+=y,o+=y,c-=y,y=r.cipher(i,n+s,a-(c?0:l)),y&&f.set(t.subarray(s,s+y),h),h+=y,y<a?(s+=y,a-=y):(s=0,a=0);return this.pos=s,this.len=a,f}AES_Decrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=Ie.DEC[this.mode],i=Ie.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new De("data length must be a multiple of the block size");s+=16-s%16}if(t.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let t=e[n+a-1];if(t<1||t>16||t>a)throw new Pe("bad padding");let r=0;for(let i=t;i>1;i--)r|=t^e[n+a-i];if(r)throw new Pe("bad padding");a-=t}}const o=new Uint8Array(a);return a>0&&o.set(e.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class Re{static encrypt(e,t,r){return new Re(t,r).encrypt(e)}static decrypt(e,t,r){return new Re(t,r).decrypt(e)}constructor(e,t,r){this.aes=r||new Qe(e,t,!0,"CFB"),delete this.aes.padding}encrypt(e){return Ce(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Ce(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const Me=F.getWebCrypto(),Te=F.getNodeCrypto(),Le=Te?Te.getCiphers():[],_e={idea:Le.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Le.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Le.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Le.includes("bf-cfb")?"bf-cfb":void 0,aes128:Le.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Le.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Le.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Ne{constructor(e,t,r){const{blockSize:i}=ae(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=ae(e);return Me.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Me.importKey("raw",this.key,r,!1,["encrypt"]);const i=await Me.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(i).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,i=F.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),n=F.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return Fe(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(e.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const t=this.nextBlock;i=await this._runCBC(this.prevBlock),Fe(i,t),this.prevBlock=i.slice(),this.i=0;const n=e.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);Fe(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(F.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return Fe(t,e),this.clearSensitiveData(),t}}function Fe(e,t){const r=Math.min(e.length,t.length);for(let i=0;i<r;i++)e[i]=e[i]^t[i]}var He=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i){const n=L.read(L.symmetric,e);if(Te&&_e[n])return function(e,t,r,i){const n=L.read(L.symmetric,e),s=new Te.createDecipheriv(_e[n],t,i);return I(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(F.isAES(e))return function(e,t,r,i){if(F.isStream(r)){const e=new Re(t,i);return I(r,(t=>e.aes.AES_Decrypt_process(t)),(()=>e.aes.AES_Decrypt_finish()))}return Re.decrypt(r,t,i)}(0,t,r,i);const s=new(await ie(e))(t),a=s.blockSize;let o=i,c=new Uint8Array;const h=e=>{e&&(c=F.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,i=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[i++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,i)};return I(r,h,h)},encrypt:async function(e,t,r,i,n){const s=L.read(L.symmetric,e);if(F.getNodeCrypto()&&_e[s])return function(e,t,r,i){const n=L.read(L.symmetric,e),s=new Te.createCipheriv(_e[n],t,i);return I(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(F.isAES(e))return async function(e,t,r,i){if(Me&&await Ne.isSupported(e)){const n=new Ne(e,t,i);return F.isStream(r)?I(r,(e=>n.encryptChunk(e)),(()=>n.finish())):n.encrypt(r)}{const e=new Re(t,i);return I(r,(t=>e.aes.AES_Encrypt_process(t)),(()=>e.aes.AES_Encrypt_finish()))}}(e,t,r,i);const a=new(await ie(e))(t),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=e=>{e&&(h=F.concatUint8Array([h,e]));const t=new Uint8Array(h.length);let r,i=0;for(;e?h.length>=o:h.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^e[r],t[i++]=c[r];h=h.subarray(o)}return t.subarray(0,i)};return I(r,u,u)}});class Oe{static encrypt(e,t,r){return new Oe(t,r).encrypt(e)}static decrypt(e,t,r){return new Oe(t,r).encrypt(e)}constructor(e,t,r){this.aes=r||new Qe(e,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(t)}encrypt(e){return Ce(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Ce(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(e,t,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new De("illegal counter size");let e=Math.pow(2,r)-1;i.set_mask(0,0,e/4294967296|0,0|e)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===e)throw Error("nonce is required");{let t=e.length;if(!t||t>16)throw new De("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(e),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==t){if(t<0||t>=Math.pow(2,r))throw new De("illegal counter value");i.set_counter(0,0,t/4294967296|0,0|t)}}}class ze{static encrypt(e,t,r=!0,i){return new ze(t,i,r).encrypt(e)}static decrypt(e,t,r=!0,i){return new ze(t,i,r).decrypt(e)}constructor(e,t,r=!0,i){this.aes=i||new Qe(e,t,r,"CBC")}encrypt(e){return Ce(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Ce(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const Ge=F.getWebCrypto(),je=F.getNodeCrypto(),qe=16;function Ve(e,t){const r=e.length-qe;for(let i=0;i<qe;i++)e[i+r]^=t[i];return e}const Ye=new Uint8Array(qe);async function Je(e){const t=await async function(e){if(F.getNodeCrypto())return async function(t){const r=new je.createCipheriv("aes-"+8*e.length+"-cbc",e,Ye).update(t);return new Uint8Array(r)};if(F.getWebCrypto())try{return e=await Ge.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await Ge.encrypt({name:"AES-CBC",iv:Ye,length:8*qe},e,t);return new Uint8Array(r).subarray(0,r.byteLength-qe)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return ze.encrypt(t,e,!1,Ye)}}(e),r=F.double(await t(Ye)),i=F.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%qe==0)return Ve(e,t);const i=new Uint8Array(e.length+(qe-e.length%qe));return i.set(e),i[e.length]=128,Ve(i,r)}(e,r,i))).subarray(-qe)}}const We=F.getWebCrypto(),Ze=F.getNodeCrypto(),$e=F.getNodeBuffer(),Xe=16,et=Xe,tt=Xe,rt=new Uint8Array(Xe),it=new Uint8Array(Xe);it[Xe-1]=1;const nt=new Uint8Array(Xe);async function st(e){const t=await Je(e);return function(e,r){return t(F.concatUint8Array([e,r]))}}async function at(e){if(F.getNodeCrypto())return async function(t,r){const i=new Ze.createCipheriv("aes-"+8*e.length+"-ctr",e,r),n=$e.concat([i.update(t),i.final()]);return new Uint8Array(n)};if(F.getWebCrypto())try{const t=await We.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const i=await We.encrypt({name:"AES-CTR",counter:r,length:8*Xe},t,e);return new Uint8Array(i)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return Oe.encrypt(t,e,r)}}async function ot(e,t){if(e!==L.symmetric.aes128&&e!==L.symmetric.aes192&&e!==L.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([st(t),at(t)]);return{encrypt:async function(e,t,n){const[s,a]=await Promise.all([r(rt,t),r(it,n)]),o=await i(e,s),c=await r(nt,o);for(let e=0;e<tt;e++)c[e]^=a[e]^s[e];return F.concatUint8Array([o,c])},decrypt:async function(e,t,n){if(e.length<tt)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-tt),a=e.subarray(-tt),[o,c,h]=await Promise.all([r(rt,t),r(it,n),r(nt,s)]),u=h;for(let e=0;e<tt;e++)u[e]^=c[e]^o[e];if(!F.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}nt[Xe-1]=2,ot.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},ot.blockLength=Xe,ot.ivLength=et,ot.tagLength=tt;const ct=16,ht=16;function ut(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function lt(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function yt(e,t){return lt(e.slice(),t)}const ft=new Uint8Array(ct),gt=new Uint8Array([1]);async function pt(e,t){const{keySize:r}=ae(e);if(!F.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let i=0;const n=e=>ze.encrypt(e,t,!1),s=e=>ze.decrypt(e,t,!1);let a;function o(e,t,r,s){const o=t.length/ct|0;!function(e,t){const r=F.nbits(Math.max(e.length,t.length)/ct|0)-1;for(let e=i+1;e<=r;e++)a[e]=F.double(a[e-1]);i=r}(t,s);const c=F.concatUint8Array([ft.subarray(0,15-r.length),gt,r]),h=63&c[15];c[15]&=192;const u=n(c),l=F.concatUint8Array([u,yt(u.subarray(0,8),u.subarray(1,9))]),y=F.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),f=new Uint8Array(ct),g=new Uint8Array(t.length+ht);let p,d=0;for(p=0;p<o;p++)lt(y,a[ut(p+1)]),g.set(lt(e(yt(y,t)),y),d),lt(f,e===n?t:g.subarray(d)),t=t.subarray(ct),d+=ct;if(t.length){lt(y,a.x);const r=n(y);g.set(yt(t,r),d);const i=new Uint8Array(ct);i.set(e===n?t:g.subarray(d,-16),0),i[t.length]=128,lt(f,i),d+=t.length}const A=lt(n(lt(lt(f,y),a.$)),function(e){if(!e.length)return ft;const t=e.length/ct|0,r=new Uint8Array(ct),i=new Uint8Array(ct);for(let s=0;s<t;s++)lt(r,a[ut(s+1)]),lt(i,n(yt(r,e))),e=e.subarray(ct);if(e.length){lt(r,a.x);const t=new Uint8Array(ct);t.set(e,0),t[e.length]=128,lt(t,r),lt(i,n(t))}return i}(s));return g.set(A,d),g}return function(){const e=n(ft),t=F.double(e);a=[],a[0]=F.double(t),a.x=e,a.$=t}(),{encrypt:async function(e,t,r){return o(n,e,t,r)},decrypt:async function(e,t,r){if(e.length<ht)throw Error("Invalid OCB ciphertext");const i=e.subarray(-16);e=e.subarray(0,-16);const n=o(s,e,t,r);if(F.equalsUint8Array(i,n.subarray(-16)))return n.subarray(0,-16);throw Error("Authentication tag mismatch")}}}pt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},pt.blockLength=ct,pt.ivLength=15,pt.tagLength=ht;const dt=68719476704;class At{static encrypt(e,t,r,i,n){return new At(t,r,i,n).encrypt(e)}static decrypt(e,t,r,i,n){return new At(t,r,i,n).decrypt(e)}constructor(e,t,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new Qe(e,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new De("illegal tagSize value");const o=t.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(t),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(Ie.MAC.GCM,Ie.HEAP_DATA,16),s.get_iv(Ie.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(t),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>dt)throw new De("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(e){return this.AES_GCM_encrypt(e)}decrypt(e){return this.AES_GCM_decrypt(e)}AES_GCM_Encrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>dt)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=Se(n,a+o,e,t,r),o+=u,t+=u,r-=u,u=i.cipher(Ie.ENC.CTR,Ie.HEAP_DATA+a,o),u=i.mac(Ie.MAC.GCM,Ie.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);e.cipher(Ie.ENC.CTR,Ie.HEAP_DATA+s,a+15&-16),a&&o.set(t.subarray(s,s+a));let c=a;for(;15&c;c++)t[s+c]=0;e.mac(Ie.MAC.GCM,Ie.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return t[0]=0,t[1]=0,t[2]=0,t[3]=h>>>29,t[4]=h>>>21,t[5]=h>>>13&255,t[6]=h>>>5&255,t[7]=h<<3&255,t[8]=t[9]=t[10]=0,t[11]=u>>>29,t[12]=u>>>21&255,t[13]=u>>>13&255,t[14]=u>>>5&255,t[15]=u<<3&255,e.mac(Ie.MAC.GCM,Ie.HEAP_DATA,16),e.get_iv(Ie.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(Ie.ENC.CTR,Ie.HEAP_DATA,16),o.set(t.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,y=0;if((s-1<<4)+c+r>dt)throw new RangeError("counter overflow");const f=new Uint8Array(u);for(;r>l;)y=Se(n,o+c,e,t,r-l),c+=y,t+=y,r-=y,y=i.mac(Ie.MAC.GCM,Ie.HEAP_DATA+o,y),y=i.cipher(Ie.DEC.CTR,Ie.HEAP_DATA+o,y),y&&f.set(n.subarray(o,o+y),h),s+=y>>>4,h+=y,o=0,c=0;return r>0&&(c+=Se(n,0,e,t,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,f}AES_GCM_Decrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new Ke("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(t.subarray(s+o,s+a));let u=o;for(;15&u;u++)t[s+u]=0;e.mac(Ie.MAC.GCM,Ie.HEAP_DATA+s,u),e.cipher(Ie.DEC.CTR,Ie.HEAP_DATA+s,u),o&&c.set(t.subarray(s,s+o));const l=void 0!==i?i.length:0,y=(n-1<<4)+a-r;t[0]=0,t[1]=0,t[2]=0,t[3]=l>>>29,t[4]=l>>>21,t[5]=l>>>13&255,t[6]=l>>>5&255,t[7]=l<<3&255,t[8]=t[9]=t[10]=0,t[11]=y>>>29,t[12]=y>>>21&255,t[13]=y>>>13&255,t[14]=y>>>5&255,t[15]=y<<3&255,e.mac(Ie.MAC.GCM,Ie.HEAP_DATA,16),e.get_iv(Ie.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(Ie.ENC.CTR,Ie.HEAP_DATA,16);let f=0;for(let e=0;e<r;++e)f|=h[e]^t[e];if(f)throw new Pe("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(e){const t=this.AES_GCM_Decrypt_process(e),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}AES_GCM_encrypt(e){const t=this.AES_GCM_Encrypt_process(e),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}_gcm_mac_process(e){let{asm:t,heap:r}=this.aes.acquire_asm(),i=0,n=e.length||0,s=0;for(;n>0;){for(s=Se(r,0,e,i,n),i+=s,n-=s;15&s;)r[s++]=0;t.mac(Ie.MAC.GCM,Ie.HEAP_DATA,s)}}}const wt=F.getWebCrypto(),mt=F.getNodeCrypto(),bt=F.getNodeBuffer(),Et=16,kt="AES-GCM";async function vt(e,t){if(e!==L.symmetric.aes128&&e!==L.symmetric.aes192&&e!==L.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(F.getNodeCrypto())return{encrypt:async function(e,r,i=new Uint8Array){const n=new mt.createCipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i);const s=bt.concat([n.update(e),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,i=new Uint8Array){const n=new mt.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i),n.setAuthTag(e.slice(e.length-Et,e.length));const s=bt.concat([n.update(e.slice(0,e.length-Et)),n.final()]);return new Uint8Array(s)}};if(F.getWebCrypto())try{const e=await wt.importKey("raw",t,{name:kt},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return At.encrypt(i,t,n,s);const a=await wt.encrypt({name:kt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===Et)return At.decrypt(i,t,n,s);try{const t=await wt.decrypt({name:kt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,i){return At.encrypt(e,t,r,i)},decrypt:async function(e,r,i){return At.decrypt(e,t,r,i)}}}vt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},vt.blockLength=16,vt.ivLength=12,vt.tagLength=Et;var It={cfb:He,gcm:vt,experimentalGCM:vt,eax:ot,ocb:pt};const Bt=BigInt(0),St=BigInt(1);function Ct(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function Kt(e,t){const r=e%t;return r<Bt?r+t:r}function Dt(e,t,r){if(r===Bt)throw Error("Modulo cannot be zero");if(r===St)return BigInt(0);if(t<Bt)throw Error("Unsopported negative exponent");let i=t,n=e;n%=r;let s=BigInt(1);for(;i>Bt;){const e=i&St;i>>=St;s=e?s*n%r:s,n=n*n%r}return s}function Pt(e){return e>=Bt?e:-e}function Ut(e,t){const{gcd:r,x:i}=function(e,t){let r=BigInt(0),i=BigInt(1),n=BigInt(1),s=BigInt(0),a=Pt(e),o=Pt(t);const c=e<Bt,h=t<Bt;for(;o!==Bt;){const e=a/o;let t=r;r=n-e*r,n=t,t=i,i=s-e*i,s=t,t=o,o=a%o,a=t}return{x:c?-n:n,y:h?-s:s,gcd:a}}(e,t);if(r!==St)throw Error("Inverse does not exist");return Kt(i+t,t)}function xt(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function Qt(e,t){return(e>>BigInt(t)&St)===Bt?0:1}function Rt(e){const t=e<Bt?BigInt(-1):Bt;let r=1,i=e;for(;(i>>=St)!==t;)r++;return r}function Mt(e){const t=e<Bt?BigInt(-1):Bt,r=BigInt(8);let i=1,n=e;for(;(n>>=r)!==t;)i++;return i}function Tt(e,t="be",r){let i=e.toString(16);i.length%2==1&&(i="0"+i);const n=i.length/2,s=new Uint8Array(r||n),a=r?r-n:0;let o=0;for(;o<n;)s[o+a]=parseInt(i.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const Lt=F.getNodeCrypto();function _t(e){const t=new Uint8Array(e);if(Lt){const e=Lt.randomBytes(t.length);t.set(e)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(t)}return t}function Nt(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return Kt(Ct(_t(Mt(r)+8)),r)+e}var Ft=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Nt,getRandomBytes:_t});const Ht=BigInt(1);function Ot(e,t,r){const i=BigInt(30),n=Ht<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=Nt(n,n<<Ht),o=xt(Kt(a,i));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,Rt(a)>e&&(a=Kt(a,n<<Ht),a+=n,o=xt(Kt(a,i)))}while(!zt(a,t,r));return a}function zt(e,t,r){return(!t||function(e,t){let r=e,i=t;for(;i!==Bt;){const e=i;i=r%i,r=e}return r}(e-Ht,t)===Ht)&&(!!function(e){const t=BigInt(0);return Gt.every((r=>Kt(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return Dt(t,e-Ht,e)===Ht}(e)&&!!function(e,t,r){const i=Rt(e);t||(t=Math.max(1,i/48|0));const n=e-Ht;let s=0;for(;!Qt(n,s);)s++;const a=e>>BigInt(s);for(;t>0;t--){let t,r=Dt(Nt(BigInt(2),n),a,e);if(r!==Ht&&r!==n){for(t=1;t<s;t++){if(r=Kt(r*r,e),r===Ht)return!1;if(r===n)break}if(t===s)return!1}}return!0}(e,r)))}const Gt=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const jt=[];function qt(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const i=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const i=_t(e-r);for(let e=0;e<i.length;e++)0!==i[e]&&(t[r++]=i[e])}return t}(t-r-3),n=new Uint8Array(t);return n[1]=2,n.set(i,2),n.set(e,t-r),n}function Vt(e,t){let r=2,i=1;for(let t=r;t<e.length;t++)i&=0!==e[t],r+=i;const n=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&n>=8&!i;if(t)return F.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Yt(e,t,r){let i;if(t.length!==ve.getHashByteLength(e))throw Error("Invalid hash length");const n=new Uint8Array(jt[e].length);for(i=0;i<jt[e].length;i++)n[i]=jt[e][i];const s=n.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(t,r-t.length),o}jt[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],jt[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],jt[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],jt[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],jt[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],jt[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],jt[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var Jt=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Vt,emeEncode:qt,emsaEncode:Yt});const Wt=F.getWebCrypto(),Zt=F.getNodeCrypto(),$t=BigInt(1);async function Xt(e,t,r,i,n,s){const a=Ct(i),o=Ct(n),c=Ct(r);let h=Kt(c,o-$t),u=Kt(c,a-$t);return u=Tt(u),h=Tt(h),{kty:"RSA",n:V(e),e:V(t),d:V(r),p:V(n),q:V(i),dp:V(h),dq:V(u),qi:V(s),ext:!0}}function er(e,t){return{kty:"RSA",n:V(e),e:V(t),ext:!0}}function tr(e,t){return{n:q(e.n),e:Tt(t),d:q(e.d),p:q(e.q),q:q(e.p),u:q(e.qi)}}var rr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a,o){if(F.getNodeCrypto()&&!o)try{return await async function(e,t,r,i,n,s,a){const o=await Xt(t,r,i,n,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Zt.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Zt.privateDecrypt(c,e))}catch(e){throw Error("Decryption error")}}(e,t,r,i,n,s,a)}catch(e){F.printDebugError(e)}return async function(e,t,r,i,n,s,a,o){if(e=Ct(e),t=Ct(t),r=Ct(r),i=Ct(i),n=Ct(n),s=Ct(s),a=Ct(a),e>=t)throw Error("Data too large.");const c=Kt(i,s-$t),h=Kt(i,n-$t),u=Nt(BigInt(2),t),l=Dt(Ut(u,t),r,t);e=Kt(e*l,t);const y=Dt(e,h,n),f=Dt(e,c,s),g=Kt(a*(f-y),s);let p=g*n+y;return p=Kt(p*u,t),Vt(Tt(p,"be",Mt(t)),o)}(e,t,r,i,n,s,a,o)},encrypt:async function(e,t,r){return F.getNodeCrypto()?async function(e,t,r){const i=er(t,r),n={key:i,format:"jwk",type:"pkcs1",padding:Zt.constants.RSA_PKCS1_PADDING};return new Uint8Array(Zt.publicEncrypt(n,e))}(e,t,r):async function(e,t,r){if(t=Ct(t),e=Ct(qt(e,Mt(t))),r=Ct(r),e>=t)throw Error("Message size cannot exceed modulus size");return Tt(Dt(e,r,t),"be",Mt(t))}(e,t,r)},generate:async function(e,t){if(t=BigInt(t),F.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:Tt(t),hash:{name:"SHA-1"}},i=await Wt.generateKey(r,!0,["sign","verify"]);return tr(await Wt.exportKey("jwk",i.privateKey),t)}if(F.getNodeCrypto()){const r={modulusLength:e,publicExponent:xt(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},i=await new Promise(((e,t)=>{Zt.generateKeyPair("rsa",r,((r,i,n)=>{r?t(r):e(n)}))}));return tr(i,t)}let r,i,n;do{i=Ot(e-(e>>1),t,40),r=Ot(e>>1,t,40),n=r*i}while(Rt(n)!==e);const s=(r-$t)*(i-$t);return i<r&&([r,i]=[i,r]),{n:Tt(n),e:Tt(t),d:Tt(Ut(t,s)),p:Tt(r),q:Tt(i),u:Tt(Ut(r,i))}},sign:async function(e,t,r,i,n,s,a,o,c){if(t&&!F.isStream(t))if(F.getWebCrypto())try{return await async function(e,t,r,i,n,s,a,o){const c=await Xt(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},u=await Wt.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await Wt.sign("RSASSA-PKCS1-v1_5",u,t))}(L.read(L.webHash,e),t,r,i,n,s,a,o)}catch(e){F.printDebugError(e)}else if(F.getNodeCrypto())return async function(e,t,r,i,n,s,a,o){const c=Zt.createSign(L.read(L.hash,e));c.write(t),c.end();const h=await Xt(r,i,n,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(e,t,r,i,n,s,a,o);return async function(e,t,r,i){t=Ct(t);const n=Ct(Yt(e,i,Mt(t)));if(r=Ct(r),n>=t)throw Error("Message size cannot exceed modulus size");return Tt(Dt(n,r,t),"be",Mt(t))}(e,r,n,c)},validateParams:async function(e,t,r,i,n,s){if(e=Ct(e),(i=Ct(i))*(n=Ct(n))!==e)return!1;const a=BigInt(2);if(Kt(i*(s=Ct(s)),n)!==BigInt(1))return!1;t=Ct(t),r=Ct(r);const o=Nt(a,a<<BigInt(Math.floor(Rt(e)/3))),c=o*r*t;return!(Kt(c,i-$t)!==o||Kt(c,n-$t)!==o)},verify:async function(e,t,r,i,n,s){if(t&&!F.isStream(t))if(F.getWebCrypto())try{return await async function(e,t,r,i,n){const s=er(i,n),a=await Wt.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return Wt.verify("RSASSA-PKCS1-v1_5",a,r,t)}(L.read(L.webHash,e),t,r,i,n)}catch(e){F.printDebugError(e)}else if(F.getNodeCrypto())return async function(e,t,r,i,n){const s=er(i,n),a={key:s,format:"jwk",type:"pkcs1"},o=Zt.createVerify(L.read(L.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch(e){return!1}}(e,t,r,i,n);return async function(e,t,r,i,n){if(r=Ct(r),t=Ct(t),i=Ct(i),t>=r)throw Error("Signature size cannot exceed modulus size");const s=Tt(Dt(t,i,r),"be",Mt(r)),a=Yt(e,n,Mt(r));return F.equalsUint8Array(s,a)}(e,r,i,n,s)}});const ir=BigInt(1);var nr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){return e=Ct(e),t=Ct(t),r=Ct(r),Vt(Tt(Kt(Ut(Dt(e,i=Ct(i),r),r)*t,r),"be",Mt(r)),n)},encrypt:async function(e,t,r,i){t=Ct(t),r=Ct(r),i=Ct(i);const n=Ct(qt(e,Mt(t))),s=Nt(ir,t-ir);return{c1:Tt(Dt(r,s,t)),c2:Tt(Kt(Dt(i,s,t)*n,t))}},validateParams:async function(e,t,r,i){if(e=Ct(e),t=Ct(t),r=Ct(r),t<=ir||t>=e)return!1;const n=BigInt(Rt(e));if(n<BigInt(1023))return!1;if(Dt(t,e-ir,e)!==ir)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=Kt(s*t,e),s===ir)return!1;a++}i=Ct(i);const h=Nt(o<<n-ir,o<<n);return r===Dt(t,(e-ir)*h+i,e)}});const sr=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0,ar={};var or=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},cr=function(){throw Error("no PRNG")},hr=new Uint8Array(32);hr[0]=9;var ur=or(),lr=or([1]),yr=or([56129,1]),fr=or([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),gr=or([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),pr=or([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),dr=or([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),Ar=or([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function wr(e,t,r,i){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=i>>24&255,e[t+5]=i>>16&255,e[t+6]=i>>8&255,e[t+7]=255&i}function mr(e,t,r,i){return function(e,t,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=e[t+s]^r[i+s];return(1&a-1>>>8)-1}(e,t,r,i,32)}function br(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function Er(e){var t,r,i=1;for(t=0;t<16;t++)r=e[t]+i+65535,i=Math.floor(r/65536),e[t]=r-65536*i;e[0]+=i-1+37*(i-1)}function kr(e,t,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(e[s]^t[s]),e[s]^=i,t[s]^=i}function vr(e,t){var r,i,n,s=or(),a=or();for(r=0;r<16;r++)a[r]=t[r];for(Er(a),Er(a),Er(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,kr(a,s,1-n)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function Ir(e,t){var r=new Uint8Array(32),i=new Uint8Array(32);return vr(r,e),vr(i,t),mr(r,0,i,0)}function Br(e){var t=new Uint8Array(32);return vr(t,e),1&t[0]}function Sr(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function Cr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]+r[i]}function Kr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]-r[i]}function Dr(e,t,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0,I=0,B=0,S=0,C=0,K=0,D=0,P=0,U=0,x=0,Q=0,R=0,M=0,T=r[0],L=r[1],_=r[2],N=r[3],F=r[4],H=r[5],O=r[6],z=r[7],G=r[8],j=r[9],q=r[10],V=r[11],Y=r[12],J=r[13],W=r[14],Z=r[15];s+=(i=t[0])*T,a+=i*L,o+=i*_,c+=i*N,h+=i*F,u+=i*H,l+=i*O,y+=i*z,f+=i*G,g+=i*j,p+=i*q,d+=i*V,A+=i*Y,w+=i*J,m+=i*W,b+=i*Z,a+=(i=t[1])*T,o+=i*L,c+=i*_,h+=i*N,u+=i*F,l+=i*H,y+=i*O,f+=i*z,g+=i*G,p+=i*j,d+=i*q,A+=i*V,w+=i*Y,m+=i*J,b+=i*W,E+=i*Z,o+=(i=t[2])*T,c+=i*L,h+=i*_,u+=i*N,l+=i*F,y+=i*H,f+=i*O,g+=i*z,p+=i*G,d+=i*j,A+=i*q,w+=i*V,m+=i*Y,b+=i*J,E+=i*W,k+=i*Z,c+=(i=t[3])*T,h+=i*L,u+=i*_,l+=i*N,y+=i*F,f+=i*H,g+=i*O,p+=i*z,d+=i*G,A+=i*j,w+=i*q,m+=i*V,b+=i*Y,E+=i*J,k+=i*W,v+=i*Z,h+=(i=t[4])*T,u+=i*L,l+=i*_,y+=i*N,f+=i*F,g+=i*H,p+=i*O,d+=i*z,A+=i*G,w+=i*j,m+=i*q,b+=i*V,E+=i*Y,k+=i*J,v+=i*W,I+=i*Z,u+=(i=t[5])*T,l+=i*L,y+=i*_,f+=i*N,g+=i*F,p+=i*H,d+=i*O,A+=i*z,w+=i*G,m+=i*j,b+=i*q,E+=i*V,k+=i*Y,v+=i*J,I+=i*W,B+=i*Z,l+=(i=t[6])*T,y+=i*L,f+=i*_,g+=i*N,p+=i*F,d+=i*H,A+=i*O,w+=i*z,m+=i*G,b+=i*j,E+=i*q,k+=i*V,v+=i*Y,I+=i*J,B+=i*W,S+=i*Z,y+=(i=t[7])*T,f+=i*L,g+=i*_,p+=i*N,d+=i*F,A+=i*H,w+=i*O,m+=i*z,b+=i*G,E+=i*j,k+=i*q,v+=i*V,I+=i*Y,B+=i*J,S+=i*W,C+=i*Z,f+=(i=t[8])*T,g+=i*L,p+=i*_,d+=i*N,A+=i*F,w+=i*H,m+=i*O,b+=i*z,E+=i*G,k+=i*j,v+=i*q,I+=i*V,B+=i*Y,S+=i*J,C+=i*W,K+=i*Z,g+=(i=t[9])*T,p+=i*L,d+=i*_,A+=i*N,w+=i*F,m+=i*H,b+=i*O,E+=i*z,k+=i*G,v+=i*j,I+=i*q,B+=i*V,S+=i*Y,C+=i*J,K+=i*W,D+=i*Z,p+=(i=t[10])*T,d+=i*L,A+=i*_,w+=i*N,m+=i*F,b+=i*H,E+=i*O,k+=i*z,v+=i*G,I+=i*j,B+=i*q,S+=i*V,C+=i*Y,K+=i*J,D+=i*W,P+=i*Z,d+=(i=t[11])*T,A+=i*L,w+=i*_,m+=i*N,b+=i*F,E+=i*H,k+=i*O,v+=i*z,I+=i*G,B+=i*j,S+=i*q,C+=i*V,K+=i*Y,D+=i*J,P+=i*W,U+=i*Z,A+=(i=t[12])*T,w+=i*L,m+=i*_,b+=i*N,E+=i*F,k+=i*H,v+=i*O,I+=i*z,B+=i*G,S+=i*j,C+=i*q,K+=i*V,D+=i*Y,P+=i*J,U+=i*W,x+=i*Z,w+=(i=t[13])*T,m+=i*L,b+=i*_,E+=i*N,k+=i*F,v+=i*H,I+=i*O,B+=i*z,S+=i*G,C+=i*j,K+=i*q,D+=i*V,P+=i*Y,U+=i*J,x+=i*W,Q+=i*Z,m+=(i=t[14])*T,b+=i*L,E+=i*_,k+=i*N,v+=i*F,I+=i*H,B+=i*O,S+=i*z,C+=i*G,K+=i*j,D+=i*q,P+=i*V,U+=i*Y,x+=i*J,Q+=i*W,R+=i*Z,b+=(i=t[15])*T,a+=38*(k+=i*_),o+=38*(v+=i*N),c+=38*(I+=i*F),h+=38*(B+=i*H),u+=38*(S+=i*O),l+=38*(C+=i*z),y+=38*(K+=i*G),f+=38*(D+=i*j),g+=38*(P+=i*q),p+=38*(U+=i*V),d+=38*(x+=i*Y),A+=38*(Q+=i*J),w+=38*(R+=i*W),m+=38*(M+=i*Z),s=(i=(s+=38*(E+=i*L))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=h,e[5]=u,e[6]=l,e[7]=y,e[8]=f,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function Pr(e,t){Dr(e,t,t)}function Ur(e,t){var r,i=or();for(r=0;r<16;r++)i[r]=t[r];for(r=253;r>=0;r--)Pr(i,i),2!==r&&4!==r&&Dr(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}function xr(e,t,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=or(),c=or(),h=or(),u=or(),l=or(),y=or();for(n=0;n<31;n++)s[n]=t[n];for(s[31]=127&t[31]|64,s[0]&=248,Sr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)kr(o,c,i=s[n>>>3]>>>(7&n)&1),kr(h,u,i),Cr(l,o,h),Kr(o,o,h),Cr(h,c,u),Kr(c,c,u),Pr(u,l),Pr(y,o),Dr(o,h,o),Dr(h,c,l),Cr(l,o,h),Kr(o,o,h),Pr(c,o),Kr(h,u,y),Dr(o,h,yr),Cr(o,o,u),Dr(h,h,o),Dr(o,u,y),Dr(u,c,a),Pr(c,l),kr(o,c,i),kr(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var f=a.subarray(32),g=a.subarray(16);return Ur(f,f),Dr(g,g,f),vr(e,g),0}function Qr(e,t){return xr(e,t,hr)}var Rr=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function Mr(e,t,r,i){for(var n,s,a,o,c,h,u,l,y,f,g,p,d,A,w,m,b,E,k,v,I,B,S,C,K,D,P=new Int32Array(16),U=new Int32Array(16),x=e[0],Q=e[1],R=e[2],M=e[3],T=e[4],L=e[5],_=e[6],N=e[7],F=t[0],H=t[1],O=t[2],z=t[3],G=t[4],j=t[5],q=t[6],V=t[7],Y=0;i>=128;){for(k=0;k<16;k++)v=8*k+Y,P[k]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],U[k]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(k=0;k<80;k++)if(n=x,s=Q,a=R,o=M,c=T,h=L,u=_,N,y=F,f=H,g=O,p=z,d=G,A=j,w=q,V,S=65535&(B=V),C=B>>>16,K=65535&(I=N),D=I>>>16,S+=65535&(B=(G>>>14|T<<18)^(G>>>18|T<<14)^(T>>>9|G<<23)),C+=B>>>16,K+=65535&(I=(T>>>14|G<<18)^(T>>>18|G<<14)^(G>>>9|T<<23)),D+=I>>>16,S+=65535&(B=G&j^~G&q),C+=B>>>16,K+=65535&(I=T&L^~T&_),D+=I>>>16,I=Rr[2*k],S+=65535&(B=Rr[2*k+1]),C+=B>>>16,K+=65535&I,D+=I>>>16,I=P[k%16],C+=(B=U[k%16])>>>16,K+=65535&I,D+=I>>>16,K+=(C+=(S+=65535&B)>>>16)>>>16,S=65535&(B=E=65535&S|C<<16),C=B>>>16,K=65535&(I=b=65535&K|(D+=K>>>16)<<16),D=I>>>16,S+=65535&(B=(F>>>28|x<<4)^(x>>>2|F<<30)^(x>>>7|F<<25)),C+=B>>>16,K+=65535&(I=(x>>>28|F<<4)^(F>>>2|x<<30)^(F>>>7|x<<25)),D+=I>>>16,C+=(B=F&H^F&O^H&O)>>>16,K+=65535&(I=x&Q^x&R^Q&R),D+=I>>>16,l=65535&(K+=(C+=(S+=65535&B)>>>16)>>>16)|(D+=K>>>16)<<16,m=65535&S|C<<16,S=65535&(B=p),C=B>>>16,K=65535&(I=o),D=I>>>16,C+=(B=E)>>>16,K+=65535&(I=b),D+=I>>>16,Q=n,R=s,M=a,T=o=65535&(K+=(C+=(S+=65535&B)>>>16)>>>16)|(D+=K>>>16)<<16,L=c,_=h,N=u,x=l,H=y,O=f,z=g,G=p=65535&S|C<<16,j=d,q=A,V=w,F=m,k%16==15)for(v=0;v<16;v++)I=P[v],S=65535&(B=U[v]),C=B>>>16,K=65535&I,D=I>>>16,I=P[(v+9)%16],S+=65535&(B=U[(v+9)%16]),C+=B>>>16,K+=65535&I,D+=I>>>16,b=P[(v+1)%16],S+=65535&(B=((E=U[(v+1)%16])>>>1|b<<31)^(E>>>8|b<<24)^(E>>>7|b<<25)),C+=B>>>16,K+=65535&(I=(b>>>1|E<<31)^(b>>>8|E<<24)^b>>>7),D+=I>>>16,b=P[(v+14)%16],C+=(B=((E=U[(v+14)%16])>>>19|b<<13)^(b>>>29|E<<3)^(E>>>6|b<<26))>>>16,K+=65535&(I=(b>>>19|E<<13)^(E>>>29|b<<3)^b>>>6),D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,P[v]=65535&K|D<<16,U[v]=65535&S|C<<16;S=65535&(B=F),C=B>>>16,K=65535&(I=x),D=I>>>16,I=e[0],C+=(B=t[0])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[0]=x=65535&K|D<<16,t[0]=F=65535&S|C<<16,S=65535&(B=H),C=B>>>16,K=65535&(I=Q),D=I>>>16,I=e[1],C+=(B=t[1])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[1]=Q=65535&K|D<<16,t[1]=H=65535&S|C<<16,S=65535&(B=O),C=B>>>16,K=65535&(I=R),D=I>>>16,I=e[2],C+=(B=t[2])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[2]=R=65535&K|D<<16,t[2]=O=65535&S|C<<16,S=65535&(B=z),C=B>>>16,K=65535&(I=M),D=I>>>16,I=e[3],C+=(B=t[3])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[3]=M=65535&K|D<<16,t[3]=z=65535&S|C<<16,S=65535&(B=G),C=B>>>16,K=65535&(I=T),D=I>>>16,I=e[4],C+=(B=t[4])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[4]=T=65535&K|D<<16,t[4]=G=65535&S|C<<16,S=65535&(B=j),C=B>>>16,K=65535&(I=L),D=I>>>16,I=e[5],C+=(B=t[5])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[5]=L=65535&K|D<<16,t[5]=j=65535&S|C<<16,S=65535&(B=q),C=B>>>16,K=65535&(I=_),D=I>>>16,I=e[6],C+=(B=t[6])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[6]=_=65535&K|D<<16,t[6]=q=65535&S|C<<16,S=65535&(B=V),C=B>>>16,K=65535&(I=N),D=I>>>16,I=e[7],C+=(B=t[7])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[7]=N=65535&K|D<<16,t[7]=V=65535&S|C<<16,Y+=128,i-=128}return i}function Tr(e,t,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,Mr(n,s,t,r),r%=128,i=0;i<r;i++)a[i]=t[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,wr(a,r-8,o/536870912|0,o<<3),Mr(n,s,a,r),i=0;i<8;i++)wr(e,8*i,n[i],s[i]);return 0}function Lr(e,t){var r=or(),i=or(),n=or(),s=or(),a=or(),o=or(),c=or(),h=or(),u=or();Kr(r,e[1],e[0]),Kr(u,t[1],t[0]),Dr(r,r,u),Cr(i,e[0],e[1]),Cr(u,t[0],t[1]),Dr(i,i,u),Dr(n,e[3],t[3]),Dr(n,n,gr),Dr(s,e[2],t[2]),Cr(s,s,s),Kr(a,i,r),Kr(o,s,n),Cr(c,s,n),Cr(h,i,r),Dr(e[0],a,o),Dr(e[1],h,c),Dr(e[2],c,o),Dr(e[3],a,h)}function _r(e,t,r){var i;for(i=0;i<4;i++)kr(e[i],t[i],r)}function Nr(e,t){var r=or(),i=or(),n=or();Ur(n,t[2]),Dr(r,t[0],n),Dr(i,t[1],n),vr(e,i),e[31]^=Br(r)<<7}function Fr(e,t,r){var i,n;for(br(e[0],ur),br(e[1],lr),br(e[2],lr),br(e[3],ur),n=255;n>=0;--n)_r(e,t,i=r[n/8|0]>>(7&n)&1),Lr(t,e),Lr(e,e),_r(e,t,i)}function Hr(e,t){var r=[or(),or(),or(),or()];br(r[0],pr),br(r[1],dr),br(r[2],lr),Dr(r[3],pr,dr),Fr(e,r,t)}function Or(e,t,r){var i,n=new Uint8Array(64),s=[or(),or(),or(),or()];for(r||cr(t,32),Tr(n,t,32),n[0]&=248,n[31]&=127,n[31]|=64,Hr(s,n),Nr(e,s),i=0;i<32;i++)t[i+32]=e[i];return 0}var zr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function Gr(e,t){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)t[n]+=r-16*t[i]*zr[n-(i-32)],r=Math.floor((t[n]+128)/256),t[n]-=256*r;t[n]+=r,t[i]=0}for(r=0,n=0;n<32;n++)t[n]+=r-(t[31]>>4)*zr[n],r=t[n]>>8,t[n]&=255;for(n=0;n<32;n++)t[n]-=r*zr[n];for(i=0;i<32;i++)t[i+1]+=t[i]>>8,e[i]=255&t[i]}function jr(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;Gr(e,r)}function qr(e,t){var r=or(),i=or(),n=or(),s=or(),a=or(),o=or(),c=or();return br(e[2],lr),Sr(e[1],t),Pr(n,e[1]),Dr(s,n,fr),Kr(n,n,e[2]),Cr(s,e[2],s),Pr(a,s),Pr(o,a),Dr(c,o,a),Dr(r,c,n),Dr(r,r,s),function(e,t){var r,i=or();for(r=0;r<16;r++)i[r]=t[r];for(r=250;r>=0;r--)Pr(i,i),1!==r&&Dr(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}(r,r),Dr(r,r,n),Dr(r,r,s),Dr(r,r,s),Dr(e[0],r,s),Pr(i,e[0]),Dr(i,i,s),Ir(i,n)&&Dr(e[0],e[0],Ar),Pr(i,e[0]),Dr(i,i,s),Ir(i,n)?-1:(Br(e[0])===t[31]>>7&&Kr(e[0],ur,e[0]),Dr(e[3],e[0],e[1]),0)}var Vr=64;function Yr(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}ar.scalarMult=function(e,t){if(Yr(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return xr(r,e,t),r},ar.box={},ar.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){cr(t,32),Qr(e,t)}(e,t),{publicKey:e,secretKey:t}},ar.box.keyPair.fromSecretKey=function(e){if(Yr(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return Qr(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},ar.sign=function(e,t){if(Yr(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(Vr+e.length);return function(e,t,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[or(),or(),or(),or()];Tr(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)e[64+n]=t[n];for(n=0;n<32;n++)e[32+n]=a[32+n];for(Tr(c,e.subarray(32),r+32),jr(c),Hr(u,c),Nr(e,u),n=32;n<64;n++)e[n]=i[n];for(Tr(o,e,r+64),jr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];Gr(e.subarray(32),h)}(r,e,e.length,t),r},ar.sign.detached=function(e,t){for(var r=ar.sign(e,t),i=new Uint8Array(Vr),n=0;n<i.length;n++)i[n]=r[n];return i},ar.sign.detached.verify=function(e,t,r){if(Yr(e,t,r),t.length!==Vr)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array(Vr+e.length),s=new Uint8Array(Vr+e.length);for(i=0;i<Vr;i++)n[i]=t[i];for(i=0;i<e.length;i++)n[i+Vr]=e[i];return function(e,t,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[or(),or(),or(),or()],c=[or(),or(),or(),or()];if(r<64)return-1;if(qr(c,i))return-1;for(n=0;n<r;n++)e[n]=t[n];for(n=0;n<32;n++)e[n+32]=i[n];if(Tr(a,e,r),jr(a),Fr(o,c,a),Hr(c,t.subarray(32)),Lr(o,c),Nr(s,o),r-=64,mr(t,0,s,0)){for(n=0;n<r;n++)e[n]=0;return-1}for(n=0;n<r;n++)e[n]=t[n+64];return r}(s,n,n.length,r)>=0},ar.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return Or(e,t),{publicKey:e,secretKey:t}},ar.sign.keyPair.fromSecretKey=function(e){if(Yr(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},ar.sign.keyPair.fromSeed=function(e){if(Yr(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=e[i];return Or(t,r,!0),{publicKey:t,secretKey:r}},ar.setPRNG=function(e){cr=e},function(){if(sr&&sr.getRandomValues){ar.setPRNG((function(e,t){var r,i=new Uint8Array(t);for(r=0;r<t;r+=65536)sr.getRandomValues(i.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=i[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(i)}))}}();const Jr={"2a8648ce3d030107":L.curve.nistP256,"2b81040022":L.curve.nistP384,"2b81040023":L.curve.nistP521,"2b8104000a":L.curve.secp256k1,"2b06010401da470f01":L.curve.ed25519Legacy,"2b060104019755010501":L.curve.curve25519Legacy,"2b2403030208010107":L.curve.brainpoolP256r1,"2b240303020801010b":L.curve.brainpoolP384r1,"2b240303020801010d":L.curve.brainpoolP512r1};class Wr{constructor(e){if(e instanceof Wr)this.oid=e.oid;else if(F.isArray(e)||F.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return F.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return F.uint8ArrayToHex(this.oid)}getName(){const e=Jr[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function Zr(e){let t,r=0;const i=e[0];return i<192?([r]=e,t=1):i<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===i&&(r=F.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function $r(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):F.concatUint8Array([new Uint8Array([255]),F.writeNumber(e,4)])}function Xr(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function ei(e){return new Uint8Array([192|e])}function ti(e,t){return F.concatUint8Array([ei(e),$r(t)])}function ri(e){return[L.packet.literalData,L.packet.compressedData,L.packet.symmetricallyEncryptedData,L.packet.symEncryptedIntegrityProtectedData,L.packet.aeadEncryptedData].includes(e)}async function ii(e,t){const r=R(e);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,u=-1;u=0,64&a&&(u=1),u?h=63&a:(h=(63&a)>>2,c=3&a);const l=ri(h);let y,f=null;if(l){if("array"===F.isStream(e)){const e=new ArrayStream;i=M(e),f=e}else{const e=new TransformStream;i=M(e.writable),f=e.readable}n=t({tag:h,packet:f})}else f=[];do{if(u){const e=await r.readByte();if(y=!1,e<192)o=e;else if(e>=192&&e<224)o=(e-192<<8)+await r.readByte()+192;else if(e>223&&e<255){if(o=1<<(31&e),y=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let e=0;for(;;){i&&await i.ready;const{done:t,value:n}=await r.read();if(t){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-e);if(i?await i.write(s):f.push(s),e+=n.length,e>=o){r.unshift(n.subarray(o-e+n.length));break}}}}while(y);const g=await r.peekBytes(l?1/0:2);return i?(await i.ready,await i.close()):(f=F.concatUint8Array(f),await t({tag:h,packet:f})),!g||!g.length}catch(e){if(i)return await i.abort(e),!0;throw e}finally{i&&await n,r.releaseLock()}}class ni extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ni),this.name="UnsupportedError"}}class si extends ni{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ni),this.name="UnknownPacketError"}}class ai{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}const oi=F.getWebCrypto(),ci=F.getNodeCrypto(),hi={[L.curve.nistP256]:"P-256",[L.curve.nistP384]:"P-384",[L.curve.nistP521]:"P-521"},ui=ci?ci.getCurves():[],li=ci?{[L.curve.secp256k1]:ui.includes("secp256k1")?"secp256k1":void 0,[L.curve.nistP256]:ui.includes("prime256v1")?"prime256v1":void 0,[L.curve.nistP384]:ui.includes("secp384r1")?"secp384r1":void 0,[L.curve.nistP521]:ui.includes("secp521r1")?"secp521r1":void 0,[L.curve.ed25519Legacy]:ui.includes("ED25519")?"ED25519":void 0,[L.curve.curve25519Legacy]:ui.includes("X25519")?"X25519":void 0,[L.curve.brainpoolP256r1]:ui.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[L.curve.brainpoolP384r1]:ui.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[L.curve.brainpoolP512r1]:ui.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},yi={[L.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:li[L.curve.nistP256],web:hi[L.curve.nistP256],payloadSize:32,sharedSize:256},[L.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:L.publicKey.ecdsa,hash:L.hash.sha384,cipher:L.symmetric.aes192,node:li[L.curve.nistP384],web:hi[L.curve.nistP384],payloadSize:48,sharedSize:384},[L.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:L.publicKey.ecdsa,hash:L.hash.sha512,cipher:L.symmetric.aes256,node:li[L.curve.nistP521],web:hi[L.curve.nistP521],payloadSize:66,sharedSize:528},[L.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:li[L.curve.secp256k1],payloadSize:32},[L.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:L.publicKey.eddsaLegacy,hash:L.hash.sha512,node:!1,payloadSize:32},[L.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:L.publicKey.ecdh,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:!1,payloadSize:32},[L.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:li[L.curve.brainpoolP256r1],payloadSize:32},[L.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:L.publicKey.ecdsa,hash:L.hash.sha384,cipher:L.symmetric.aes192,node:li[L.curve.brainpoolP384r1],payloadSize:48},[L.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:L.publicKey.ecdsa,hash:L.hash.sha512,cipher:L.symmetric.aes256,node:li[L.curve.brainpoolP512r1],payloadSize:64}};class fi{constructor(e){try{this.name=e instanceof Wr?e.getName():L.write(L.curve,e)}catch(e){throw new ni("Unknown curve")}const t=yi[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.web&&F.getWebCrypto()?this.type="web":this.node&&F.getNodeCrypto()?this.type="node":this.name===L.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===L.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e){const t=await oi.generateKey({name:"ECDSA",namedCurve:hi[e]},!0,["sign","verify"]),r=await oi.exportKey("jwk",t.privateKey),i=await oi.exportKey("jwk",t.publicKey);return{publicKey:di(i),privateKey:q(r.d)}}(this.name)}catch(e){return F.printDebugError("Browser did not support generating ec key "+e.message),pi(this.name)}case"node":return async function(e){const t=ci.createECDH(li[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const e=_t(32);e[0]=127&e[0]|64,e[31]&=248;const t=e.slice().reverse(),{publicKey:r}=ar.box.keyPair.fromSecretKey(t);return{publicKey:F.concatUint8Array([new Uint8Array([64]),r]),privateKey:e}}case"ed25519Legacy":{const e=_t(32),t=ar.sign.keyPair.fromSeed(e);return{publicKey:F.concatUint8Array([new Uint8Array([64]),t.publicKey]),privateKey:e}}default:return pi(this.name)}}}async function gi(e,t,r,i){const n={[L.curve.nistP256]:!0,[L.curve.nistP384]:!0,[L.curve.nistP521]:!0,[L.curve.secp256k1]:!0,[L.curve.curve25519Legacy]:e===L.publicKey.ecdh,[L.curve.brainpoolP256r1]:!0,[L.curve.brainpoolP384r1]:!0,[L.curve.brainpoolP512r1]:!0},s=t.getName();if(!n[s])return!1;if(s===L.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:e}=ar.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const t=new Uint8Array([64,...e]);return!!F.equalsUint8Array(t,r)}const a=(await F.getNobleCurve(L.publicKey.ecdsa,s)).getPublicKey(i,!1);return!!F.equalsUint8Array(a,r)}async function pi(e){const t=await F.getNobleCurve(L.publicKey.ecdsa,e),r=t.utils.randomPrivateKey();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function di(e){const t=q(e.x),r=q(e.y),i=new Uint8Array(t.length+r.length+1);return i[0]=4,i.set(t,1),i.set(r,t.length+1),i}function Ai(e,t,r){const i=e,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:t,x:V(n),y:V(s),ext:!0}}function wi(e,t,r,i){const n=Ai(e,t,r);return n.d=V(i),n}const mi=F.getWebCrypto(),bi=F.getNodeCrypto();async function Ei(e,t,r,i,n,s){const a=new fi(e);if(r&&!F.isStream(r)){const e={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(e,t,r,i){const n=e.payloadSize,s=wi(e.payloadSize,hi[e.name],i.publicKey,i.privateKey),a=await mi.importKey("jwk",s,{name:"ECDSA",namedCurve:hi[e.name],hash:{name:L.read(L.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await mi.sign({name:"ECDSA",namedCurve:hi[e.name],hash:{name:L.read(L.webHash,t)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;F.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,i){const n=F.nodeRequire("eckey-utils"),s=F.getNodeBuffer(),{privateKey:a}=n.generateDer({curveName:li[e.name],privateKey:s.from(i)}),o=bi.createSign(L.read(L.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=e.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,t,r,n)}}const o=(await F.getNobleCurve(L.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:Tt(o.r,"be",a.payloadSize),s:Tt(o.s,"be",a.payloadSize)}}async function ki(e,t,r,i,n,s){const a=new fi(e),o=async()=>0===s[0]&&vi(a,r,s.subarray(1),n);if(i&&!F.isStream(i))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:i},n,s){const a=Ai(e.payloadSize,hi[e.name],s),o=await mi.importKey("jwk",a,{name:"ECDSA",namedCurve:hi[e.name],hash:{name:L.read(L.webHash,e.hash)}},!1,["verify"]),c=F.concatUint8Array([r,i]).buffer;return mi.verify({name:"ECDSA",namedCurve:hi[e.name],hash:{name:L.read(L.webHash,t)}},o,c,n)}(a,t,r,i,n);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;F.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:i},n,s){const a=F.nodeRequire("eckey-utils"),o=F.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:li[e.name],publicKey:o.from(s)}),h=bi.createVerify(L.read(L.hash,t));h.write(n),h.end();const u=F.concatUint8Array([r,i]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(e){return!1}}(a,t,r,i,n);return e||o()}}return await vi(a,r,s,n)||o()}async function vi(e,t,r,i){return(await F.getNobleCurve(L.publicKey.ecdsa,e.name)).verify(F.concatUint8Array([t.r,t.s]),r,i,{lowS:!1})}var Ii=/*#__PURE__*/Object.freeze({__proto__:null,sign:Ei,validateParams:async function(e,t,r){const i=new fi(e);if(i.keyType!==L.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=_t(8),n=L.hash.sha256,s=await ve.digest(n,i);try{const a=await Ei(e,n,i,t,r,s);return await ki(e,n,a,i,t,s)}catch(e){return!1}}default:return gi(L.publicKey.ecdsa,e,t,r)}},verify:ki});var Bi=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){if(ve.getHashByteLength(t)<ve.getHashByteLength(L.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=F.concatUint8Array([n,i.subarray(1)]),o=ar.sign.detached(s,a);return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(e,t,r){if(e.getName()!==L.curve.ed25519Legacy)return!1;const{publicKey:i}=ar.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return F.equalsUint8Array(t,n)},verify:async function(e,t,{r,s:i},n,s,a){if(ve.getHashByteLength(t)<ve.getHashByteLength(L.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=F.concatUint8Array([r,i]);return ar.sign.detached.verify(a,o,s.subarray(1))}});function Si(e){switch(e){case L.publicKey.ed25519:return 32;case L.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function Ci(e){switch(e){case L.publicKey.ed25519:return L.hash.sha256;case L.publicKey.ed448:return L.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var Ki=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){switch(e){case L.publicKey.ed25519:{const t=_t(Si(e)),{publicKey:r}=ar.sign.keyPair.fromSeed(t);return{A:r,seed:t}}case L.publicKey.ed448:{const e=await F.getNobleCurve(L.publicKey.ed448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),seed:t}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:Si,getPreferredHashAlgo:Ci,sign:async function(e,t,r,i,n,s){if(ve.getHashByteLength(t)<ve.getHashByteLength(Ci(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case L.publicKey.ed25519:{const e=F.concatUint8Array([n,i]);return{RS:ar.sign.detached(s,e)}}case L.publicKey.ed448:return{RS:(await F.getNobleCurve(L.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(e,t,r){switch(e){case L.publicKey.ed25519:{const{publicKey:e}=ar.sign.keyPair.fromSeed(r);return F.equalsUint8Array(t,e)}case L.publicKey.ed448:{const e=(await F.getNobleCurve(L.publicKey.ed448)).getPublicKey(r);return F.equalsUint8Array(t,e)}default:return!1}},verify:async function(e,t,{RS:r},i,n,s){if(ve.getHashByteLength(t)<ve.getHashByteLength(Ci(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case L.publicKey.ed25519:return ar.sign.detached.verify(s,r,n);case L.publicKey.ed448:return(await F.getNobleCurve(L.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});const Di=F.getWebCrypto();async function Pi(e,t,r){const{keySize:i}=ae(e);if(!F.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");try{const e=await Di.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),i=await Di.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),n=await Di.wrapKey("raw",i,e,{name:"AES-KW"});return new Uint8Array(n)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return function(e,t,r){const i=new ze(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=xi(r);let a=n;const o=s,c=s.length/2,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=0;e<=5;++e)for(let t=0;t<c;++t)h[1]=c*e+(1+t),u[0]=a[0],u[1]=a[1],u[2]=o[2*t],u[3]=o[2*t+1],u=xi(i.encrypt(Qi(u))),a=u.subarray(0,2),a[0]^=h[0],a[1]^=h[1],o[2*t]=u[2],o[2*t+1]=u[3];return Qi(a,o)}(0,t,r)}async function Ui(e,t,r){const{keySize:i}=ae(e);if(!F.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");let n;try{n=await Di.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return F.printDebugError("Browser did not support operation: "+e.message),function(e,t,r){const i=new ze(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=xi(r);let a=s.subarray(0,2);const o=s.subarray(2),c=s.length/2-1,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=5;e>=0;--e)for(let t=c-1;t>=0;--t)h[1]=c*e+(t+1),u[0]=a[0]^h[0],u[1]=a[1]^h[1],u[2]=o[2*t],u[3]=o[2*t+1],u=xi(i.decrypt(Qi(u))),a=u.subarray(0,2),o[2*t]=u[2],o[2*t+1]=u[3];if(a[0]===n[0]&&a[1]===n[1])return Qi(o);throw Error("Key Data Integrity failed")}(0,t,r)}try{const e=await Di.unwrapKey("raw",r,n,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await Di.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}function xi(e){const t=e.buffer,r=new DataView(t),i=new Uint32Array(e.length/4);for(let t=0;t<e.length/4;++t)i[t]=r.getUint32(4*t);return i}function Qi(){let e=0;for(let t=0;t<arguments.length;++t)e+=4*arguments[t].length;const t=new ArrayBuffer(e),r=new DataView(t);let i=0;for(let e=0;e<arguments.length;++e){for(let t=0;t<arguments[e].length;++t)r.setUint32(i+4*t,arguments[e][t]);i+=4*arguments[e].length}return new Uint8Array(t)}var Ri=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:Ui,wrap:Pi});function Mi(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}function Ti(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const i=e.subarray(t-r),n=new Uint8Array(r).fill(r);if(F.equalsUint8Array(i,n))return e.subarray(0,t-r)}}throw Error("Invalid padding")}var Li=/*#__PURE__*/Object.freeze({__proto__:null,decode:Ti,encode:Mi});const _i=F.getWebCrypto(),Ni=F.getNodeCrypto();function Fi(e,t,r,i){return F.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),F.stringToUint8Array("Anonymous Sender "),r.replacementFingerprint||i.subarray(0,20)])}async function Hi(e,t,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await ve.digest(e,F.concatUint8Array([new Uint8Array([0,0,0,1]),t,i]))).subarray(0,r)}async function Oi(e,t){switch(e.type){case"curve25519Legacy":{const r=_t(32),{secretKey:i,sharedKey:n}=await zi(e,t,null,r);let{publicKey:s}=ar.box.keyPair.fromSecretKey(i);return s=F.concatUint8Array([new Uint8Array([64]),s]),{publicKey:s,sharedKey:n}}case"web":if(e.web&&F.getWebCrypto())try{return await async function(e,t){const r=Ai(e.payloadSize,e.web,t);let i=_i.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),n=_i.importKey("jwk",r,{name:"ECDH",namedCurve:e.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=_i.deriveBits({name:"ECDH",namedCurve:e.web,public:n},i.privateKey,e.sharedSize),a=_i.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(di(a));return{publicKey:c,sharedKey:o}}(e,t)}catch(r){return F.printDebugError(r),ji(e,t)}break;case"node":return async function(e,t){const r=Ni.createECDH(e.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(t)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(e,t);default:return ji(e,t)}}async function zi(e,t,r,i){if(i.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(i,e.payloadSize-i.length),i=t}switch(e.type){case"curve25519Legacy":{const e=i.slice().reverse();return{secretKey:e,sharedKey:ar.scalarMult(e,t.subarray(1))}}case"web":if(e.web&&F.getWebCrypto())try{return await async function(e,t,r,i){const n=wi(e.payloadSize,e.web,r,i);let s=_i.importKey("jwk",n,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const a=Ai(e.payloadSize,e.web,t);let o=_i.importKey("jwk",a,{name:"ECDH",namedCurve:e.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=_i.deriveBits({name:"ECDH",namedCurve:e.web,public:o},s,e.sharedSize),h=_i.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:q(h.d),sharedKey:u}}(e,t,r,i)}catch(r){return F.printDebugError(r),Gi(e,t,i)}break;case"node":return async function(e,t,r){const i=Ni.createECDH(e.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(t));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(e,t,i);default:return Gi(e,t,i)}}async function Gi(e,t,r){return{secretKey:r,sharedKey:(await F.getNobleCurve(L.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function ji(e,t){const r=await F.getNobleCurve(L.publicKey.ecdh,e.name),{publicKey:i,privateKey:n}=await e.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,t).subarray(1)}}var qi=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a){const o=new fi(e),{sharedKey:c}=await zi(o,r,n,s),h=Fi(L.publicKey.ecdh,e,t,a),{keySize:u}=ae(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await Hi(t.hash,c,u,h,1===e,2===e);return Ti(await Ui(t.cipher,r,i))}catch(e){l=e}throw l},encrypt:async function(e,t,r,i,n){const s=Mi(r),a=new fi(e),{publicKey:o,sharedKey:c}=await Oi(a,i),h=Fi(L.publicKey.ecdh,e,t,n),{keySize:u}=ae(t.cipher),l=await Hi(t.hash,c,u,h);return{publicKey:o,wrappedKey:await Pi(t.cipher,l,s)}},validateParams:async function(e,t,r){return gi(L.publicKey.ecdh,e,t,r)}});const Vi=F.getWebCrypto();async function Yi(e,t,r,i,n){const s=L.read(L.webHash,e);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Vi.importKey("raw",t,"HKDF",!1,["deriveBits"]),o=await Vi.deriveBits({name:"HKDF",hash:s,salt:r,info:i},a,8*n);return new Uint8Array(o)}const Ji={x25519:F.encodeUTF8("OpenPGP X25519"),x448:F.encodeUTF8("OpenPGP X448")};var Wi=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){switch(e){case L.publicKey.x25519:{const e=ar.scalarMult(n,t),s=F.concatUint8Array([t,i,e]),a=L.symmetric.aes128,{keySize:o}=ae(a);return Ui(a,await Yi(L.hash.sha256,s,new Uint8Array,Ji.x25519,o),r)}case L.publicKey.x448:{const e=(await F.getNobleCurve(L.publicKey.x448)).getSharedSecret(n,t),s=F.concatUint8Array([t,i,e]),a=L.symmetric.aes256,{keySize:o}=ae(L.symmetric.aes256);return Ui(a,await Yi(L.hash.sha512,s,new Uint8Array,Ji.x448,o),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(e,t,r){switch(e){case L.publicKey.x25519:{const e=_t(32),i=ar.scalarMult(e,r),{publicKey:n}=ar.box.keyPair.fromSecretKey(e),s=F.concatUint8Array([n,r,i]),a=L.symmetric.aes128,{keySize:o}=ae(a),c=await Yi(L.hash.sha256,s,new Uint8Array,Ji.x25519,o);return{ephemeralPublicKey:n,wrappedKey:await Pi(a,c,t)}}case L.publicKey.x448:{const e=await F.getNobleCurve(L.publicKey.x448),i=e.utils.randomPrivateKey(),n=e.getSharedSecret(i,r),s=e.getPublicKey(i),a=F.concatUint8Array([s,r,n]),o=L.symmetric.aes256,{keySize:c}=ae(L.symmetric.aes256),h=await Yi(L.hash.sha512,a,new Uint8Array,Ji.x448,c);return{ephemeralPublicKey:s,wrappedKey:await Pi(o,h,t)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(e){switch(e){case L.publicKey.x25519:{const e=_t(32),{publicKey:t}=ar.box.keyPair.fromSecretKey(e);return{A:t,k:e}}case L.publicKey.x448:{const e=await F.getNobleCurve(L.publicKey.x448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),k:t}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(e){switch(e){case L.publicKey.x25519:return 32;case L.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(e,t,r){switch(e){case L.publicKey.x25519:{const{publicKey:e}=ar.box.keyPair.fromSecretKey(r);return F.equalsUint8Array(t,e)}case L.publicKey.x448:{const e=(await F.getNobleCurve(L.publicKey.x448)).getPublicKey(r);return F.equalsUint8Array(t,e)}default:return!1}}}),Zi=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:fi,ecdh:qi,ecdhX:Wi,ecdsa:Ii,eddsa:Ki,eddsaLegacy:Bi,generate:async function(e){const t=new fi(e),{oid:r,hash:i,cipher:n}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:F.leftPad(s.privateKey,t.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(e){return yi[e.getName()].hash}});const $i=BigInt(0),Xi=BigInt(1);var en=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){const a=BigInt(0);let o,c,h,u;i=Ct(i),n=Ct(n),r=Ct(r),s=Ct(s),r=Kt(r,i),s=Kt(s,n);const l=Kt(Ct(t.subarray(0,Mt(n))),n);for(;;){if(o=Nt(Xi,n),c=Kt(Dt(r,o,i),n),c===a)continue;const e=Kt(s*c,n);if(u=Kt(l+e,n),h=Kt(Ut(o,n)*u,n),h!==a)break}return{r:Tt(c,"be",Mt(i)),s:Tt(h,"be",Mt(i))}},validateParams:async function(e,t,r,i,n){if(e=Ct(e),t=Ct(t),r=Ct(r),i=Ct(i),r<=Xi||r>=e)return!1;if(Kt(e-Xi,t)!==$i)return!1;if(Dt(r,t,e)!==Xi)return!1;const s=BigInt(Rt(t));if(s<BigInt(150)||!zt(t,null,32))return!1;n=Ct(n);const a=BigInt(2);return i===Dt(r,t*Nt(a<<s-Xi,a<<s)+n,e)},verify:async function(e,t,r,i,n,s,a,o){if(t=Ct(t),r=Ct(r),s=Ct(s),a=Ct(a),n=Ct(n),o=Ct(o),t<=$i||t>=a||r<=$i||r>=a)return F.printDebug("invalid DSA Signature"),!1;const c=Kt(Ct(i.subarray(0,Mt(a))),a),h=Ut(r,a);if(h===$i)return F.printDebug("invalid DSA Signature"),!1;n=Kt(n,s),o=Kt(o,s);const u=Kt(c*h,a),l=Kt(t*h,a);return Kt(Kt(Dt(n,u,s)*Dt(o,l,s),s),a)===t}});const tn=new Set([L.hash.sha1,L.hash.sha256,L.hash.sha512]),rn=F.getWebCrypto(),nn=F.getNodeCrypto();var sn={rsa:rr,elgamal:nr,elliptic:Zi,dsa:en,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){if(!tn.has(e))throw Error("Unsupported hash algorithm.");const t=L.read(L.webHash,e),r=rn||nn.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(e,t,r){if(!tn.has(e))throw Error("Unsupported hash algorithm.");const i=L.read(L.webHash,e),n=rn||nn.webcrypto.subtle,s=await n.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(e,t,r,i){if(!tn.has(e))throw Error("Unsupported hash algorithm.");const n=L.read(L.webHash,e),s=rn||nn.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class an{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!F.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return F.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}var on=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(e,t){let r=0;switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const e=F.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case L.publicKey.dsa:case L.publicKey.ecdsa:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const i=F.readMPI(t.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:e,s:i}}}case L.publicKey.eddsaLegacy:{let e=F.readMPI(t.subarray(r));r+=e.length+2,e=F.leftPad(e,32);let i=F.readMPI(t.subarray(r));return r+=i.length+2,i=F.leftPad(i,32),{read:r,signatureParams:{r:e,s:i}}}case L.publicKey.ed25519:case L.publicKey.ed448:{const i=2*sn.elliptic.eddsa.getPayloadSize(e),n=F.readExactSubarray(t,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case L.publicKey.hmac:{const e=new an;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}default:throw new ni("Unknown signature algorithm.")}},sign:async function(e,t,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await sn.rsa.sign(t,n,e,a,o,c,h,u,s)}}case L.publicKey.dsa:{const{g:e,p:n,q:a}=r,{x:o}=i;return sn.dsa.sign(t,s,e,n,a,o)}case L.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case L.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=i;return sn.elliptic.ecdsa.sign(e,t,n,a,o,s)}case L.publicKey.eddsaLegacy:{const{oid:e,Q:a}=r,{seed:o}=i;return sn.elliptic.eddsaLegacy.sign(e,t,n,a,o,s)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return sn.elliptic.eddsa.sign(e,t,n,a,o,s)}case L.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=i,n=await sn.hmac.sign(e.getValue(),t,s);return{mac:new an(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(e,t,r,i,n,s,a){switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const{n:e,e:n}=i,o=F.leftPad(r.s,e.length);return sn.rsa.verify(t,s,o,e,n,a)}case L.publicKey.dsa:{const{g:e,p:n,q:s,y:o}=i,{r:c,s:h}=r;return sn.dsa.verify(t,c,h,a,e,n,s,o)}case L.publicKey.ecdsa:{const{oid:e,Q:n}=i,o=new sn.elliptic.CurveWithOID(e).payloadSize,c=F.leftPad(r.r,o),h=F.leftPad(r.s,o);return sn.elliptic.ecdsa.verify(e,t,{r:c,s:h},s,n,a)}case L.publicKey.eddsaLegacy:{const{oid:e,Q:n}=i;return sn.elliptic.eddsaLegacy.verify(e,t,r,s,n,a)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:n}=i;return sn.elliptic.eddsa.verify(e,t,r,s,n,a)}case L.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=i,{keyMaterial:t}=n;return sn.hmac.verify(e.getValue(),t,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class cn{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return F.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class hn{constructor(e){if(e){const{version:t,hash:r,cipher:i,replacementFingerprint:n}=e;this.version=t||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new ni("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const i=t-r+1;this.replacementFingerprint=e.slice(r,r+i),r+=i}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return F.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const un=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=L.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return L.read(e,this.data)}getValue(){return this.data}},ln=un(L.aead),yn=un(L.symmetric),fn=un(L.hash);class gn{static fromObject({wrappedKey:e,algorithm:t}){const r=new gn;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=F.readExactSubarray(e,t,t+r),t+=r}write(){return F.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function pn(e,t){const r=_t(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await ve.sha256(r)}}}function dn(e){const{keySize:t}=ae(e);return _t(t)}function An(e){const t=L.read(L.aead,e);return It[t]}function wn(e){try{e.getName()}catch(e){throw new ni("Unknown curve OID")}}function mn(e,t){switch(e){case L.publicKey.ecdsa:case L.publicKey.ecdh:case L.publicKey.eddsaLegacy:return new sn.elliptic.CurveWithOID(t).payloadSize;case L.publicKey.ed25519:case L.publicKey.ed448:return sn.elliptic.eddsa.getPayloadSize(e);case L.publicKey.x25519:case L.publicKey.x448:return sn.elliptic.ecdhX.getPayloadSize(e);default:throw Error("Unknown elliptic algo")}}var bn=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(e,t,r,i){switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:return sn.rsa.generate(t,65537).then((({n:e,e:t,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:e,e:t}})));case L.publicKey.ecdsa:return sn.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new Wr(e),Q:t}})));case L.publicKey.eddsaLegacy:return sn.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new Wr(e),Q:t}})));case L.publicKey.ecdh:return sn.elliptic.generate(r).then((({oid:e,Q:t,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new Wr(e),Q:t,kdfParams:new hn({hash:i,cipher:n})}})));case L.publicKey.ed25519:case L.publicKey.ed448:return sn.elliptic.eddsa.generate(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case L.publicKey.x25519:case L.publicKey.x448:return sn.elliptic.ecdhX.generate(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case L.publicKey.hmac:return pn(await sn.hmac.generate(i),new fn(i));case L.publicKey.aead:return pn(dn(i),new yn(i));case L.publicKey.dsa:case L.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:dn,getAEADMode:An,getCipherParams:ae,getCurvePayloadSize:mn,getPreferredCurveHashAlgo:function(e,t){switch(e){case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:return sn.elliptic.getPreferredHashAlgo(t);case L.publicKey.ed25519:case L.publicKey.ed448:return sn.elliptic.eddsa.getPreferredHashAlgo(e);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(e){const{blockSize:t}=ae(e),r=await _t(t),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return F.concat([r,i])},parseEncSessionKeyParams:function(e,t){let r=0;switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:return{c:F.readMPI(t.subarray(r))};case L.publicKey.elgamal:{const e=F.readMPI(t.subarray(r));r+=e.length+2;return{c1:e,c2:F.readMPI(t.subarray(r))}}case L.publicKey.ecdh:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const i=new cn;return i.read(t.subarray(r)),{V:e,C:i}}case L.publicKey.x25519:case L.publicKey.x448:{const i=mn(e),n=F.readExactSubarray(t,r,r+i);r+=n.length;const s=new gn;return s.read(t.subarray(r)),{ephemeralPublicKey:n,C:s}}case L.publicKey.aead:{const e=new ln;r+=e.read(t.subarray(r));const{ivLength:i}=An(e.getValue()),n=t.subarray(r,r+i);r+=i;const s=new an;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:n,c:s}}default:throw new ni("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(e,t,r){let i=0;switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const e=F.readMPI(t.subarray(i));i+=e.length+2;const r=F.readMPI(t.subarray(i));i+=r.length+2;const n=F.readMPI(t.subarray(i));i+=n.length+2;const s=F.readMPI(t.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:e,p:r,q:n,u:s}}}case L.publicKey.dsa:case L.publicKey.elgamal:{const e=F.readMPI(t.subarray(i));return i+=e.length+2,{read:i,privateParams:{x:e}}}case L.publicKey.ecdsa:case L.publicKey.ecdh:{const n=mn(e,r.oid);let s=F.readMPI(t.subarray(i));return i+=s.length+2,s=F.leftPad(s,n),{read:i,privateParams:{d:s}}}case L.publicKey.eddsaLegacy:{const n=mn(e,r.oid);let s=F.readMPI(t.subarray(i));return i+=s.length+2,s=F.leftPad(s,n),{read:i,privateParams:{seed:s}}}case L.publicKey.ed25519:case L.publicKey.ed448:{const r=mn(e),n=F.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case L.publicKey.x25519:case L.publicKey.x448:{const r=mn(e),n=F.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case L.publicKey.hmac:{const{cipher:e}=r,n=ve.getHashByteLength(e.getValue()),s=t.subarray(i,i+32);i+=32;const a=t.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case L.publicKey.aead:{const{cipher:e}=r,n=t.subarray(i,i+32);i+=32;const{keySize:s}=ae(e.getValue()),a=t.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new ni("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(e,t){let r=0;switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const i=F.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:e,e:i}}}case L.publicKey.dsa:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const i=F.readMPI(t.subarray(r));r+=i.length+2;const n=F.readMPI(t.subarray(r));r+=n.length+2;const s=F.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:i,g:n,y:s}}}case L.publicKey.elgamal:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const i=F.readMPI(t.subarray(r));r+=i.length+2;const n=F.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:e,g:i,y:n}}}case L.publicKey.ecdsa:{const e=new Wr;r+=e.read(t),wn(e);const i=F.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:e,Q:i}}}case L.publicKey.eddsaLegacy:{const e=new Wr;r+=e.read(t),wn(e);let i=F.readMPI(t.subarray(r));return r+=i.length+2,i=F.leftPad(i,33),{read:r,publicParams:{oid:e,Q:i}}}case L.publicKey.ecdh:{const e=new Wr;r+=e.read(t),wn(e);const i=F.readMPI(t.subarray(r));r+=i.length+2;const n=new hn;return r+=n.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:i,kdfParams:n}}}case L.publicKey.ed25519:case L.publicKey.ed448:case L.publicKey.x25519:case L.publicKey.x448:{const i=F.readExactSubarray(t,r,r+mn(e));return r+=i.length,{read:r,publicParams:{A:i}}}case L.publicKey.hmac:case L.publicKey.aead:{const e=new yn;r+=e.read(t);const i=ve.getHashByteLength(L.hash.sha256),n=t.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:e,digest:n}}}default:throw new ni("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(e,t,r,i,n,s){switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:{const{c:e}=i,{n,e:a}=t,{d:o,p:c,q:h,u}=r;return sn.rsa.decrypt(e,n,a,o,c,h,u,s)}case L.publicKey.elgamal:{const{c1:e,c2:n}=i,a=t.p,o=r.x;return sn.elgamal.decrypt(e,n,a,o,s)}case L.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:h}=i;return sn.elliptic.ecdh.decrypt(e,a,c,h.data,s,o,n)}case L.publicKey.x25519:case L.publicKey.x448:{const{A:n}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!F.isAES(o.algorithm))throw Error("AES session key expected");return sn.elliptic.ecdhX.decrypt(e,a,o.wrappedKey,n,s)}case L.publicKey.aead:{const{cipher:e}=t,n=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=An(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(e,t,r,i,n,s){switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await sn.rsa.encrypt(n,e,t)}}case L.publicKey.elgamal:{const{p:e,g:t,y:i}=r;return sn.elgamal.encrypt(n,e,t,i)}case L.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await sn.elliptic.ecdh.encrypt(e,i,n,t,s);return{V:a,C:new cn(o)}}case L.publicKey.x25519:case L.publicKey.x448:{if(t&&!F.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await sn.elliptic.ecdhX.encrypt(e,n,i);return{ephemeralPublicKey:s,C:gn.fromObject({algorithm:t,wrappedKey:a})}}case L.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=i,a=_.preferredAEADAlgorithm,o=An(_.preferredAEADAlgorithm),{ivLength:c}=o,h=_t(c),u=await o(t,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new ln(a),iv:h,c:new an(l)}}default:return[]}},serializeParams:function(e,t){const r=new Set([L.publicKey.ed25519,L.publicKey.x25519,L.publicKey.ed448,L.publicKey.x448,L.publicKey.aead,L.publicKey.hmac]),i=Object.keys(t).map((i=>{const n=t[i];return F.isUint8Array(n)?r.has(e)?n:F.uint8ArrayToMPI(n):n.write()}));return F.concatUint8Array(i)},validateParams:async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const{n:e,e:i}=t,{d:n,p:s,q:a,u:o}=r;return sn.rsa.validateParams(e,i,n,s,a,o)}case L.publicKey.dsa:{const{p:e,q:i,g:n,y:s}=t,{x:a}=r;return sn.dsa.validateParams(e,i,n,s,a)}case L.publicKey.elgamal:{const{p:e,g:i,y:n}=t,{x:s}=r;return sn.elgamal.validateParams(e,i,n,s)}case L.publicKey.ecdsa:case L.publicKey.ecdh:{const i=sn.elliptic[L.read(L.publicKey,e)],{oid:n,Q:s}=t,{d:a}=r;return i.validateParams(n,s,a)}case L.publicKey.eddsaLegacy:{const{Q:e,oid:i}=t,{seed:n}=r;return sn.elliptic.eddsaLegacy.validateParams(i,e,n)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:i}=t,{seed:n}=r;return sn.elliptic.eddsa.validateParams(e,i,n)}case L.publicKey.x25519:case L.publicKey.x448:{const{A:i}=t,{k:n}=r;return sn.elliptic.ecdhX.validateParams(e,i,n)}case L.publicKey.hmac:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r;return ve.getHashByteLength(e.getValue())===s.length&&F.equalsUint8Array(i,await ve.sha256(n))}case L.publicKey.aead:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=ae(e.getValue());return a===s.length&&F.equalsUint8Array(i,await ve.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const En={cipher:oe,hash:ve,mode:It,publicKey:sn,signature:on,random:Ft,pkcs1:Jt,pkcs5:Li,aesKW:Ri};Object.assign(En,bn);class kn extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,kn),this.name="Argon2OutOfMemoryError"}}let vn,In,Bn=2<<19;class Sn{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return Bn}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){Bn=e}static reloadWasmModule(){vn&&(In=vn(),In.catch((()=>{})))}constructor(e=_){const{passes:t,parallelism:r,memoryExponent:i}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=i}generateSalt(){this.salt=En.random.getRandomBytes(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([L.write(L.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return F.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{vn=vn||(await Promise.resolve().then((function(){return Ml}))).default,In=In||vn();const i=await In,n=i({version:19,type:2,password:F.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>Sn.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&Sn.reloadWasmModule(),n}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new kn("Could not allocate required memory for Argon2"):e}}}class Cn{constructor(e,t=_){this.algorithm=L.hash.sha256,this.type=L.read(L.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=En.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==F.uint8ArrayToString(e.subarray(t,t+3)))throw new ni("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new ni("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new ni("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...F.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([L.write(L.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return F.concatUint8Array(e)}async produceKey(e,t){e=F.encodeUTF8(e);const r=[];let i=0,n=0;for(;i<t;){let t;switch(this.type){case"simple":t=F.concatUint8Array([new Uint8Array(n),e]);break;case"salted":t=F.concatUint8Array([new Uint8Array(n),this.salt,e]);break;case"iterated":{const r=F.concatUint8Array([this.salt,e]);let i=r.length;const s=Math.max(this.getCount(),i);t=new Uint8Array(n+s),t.set(r,n);for(let e=n+i;e<s;e+=i,i*=2)t.copyWithin(e,n,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await En.hash.digest(this.algorithm,t);r.push(s),i+=s.length,n++}return F.concatUint8Array(r).subarray(0,t)}}const Kn=new Set([L.s2k.argon2,L.s2k.iterated]);function Dn(e,t=_){switch(e){case L.s2k.argon2:return new Sn(t);case L.s2k.iterated:case L.s2k.gnu:case L.s2k.salted:case L.s2k.simple:return new Cn(e,t);default:throw new ni("Unsupported S2K type")}}function Pn(e){const{s2kType:t}=e;if(!Kn.has(t))throw Error("The provided `config.s2kType` value is not allowed");return Dn(t,e)}var Un=t.createRequire("/");try{Un("worker_threads").Worker}catch(e){}var xn=Uint8Array,Qn=Uint16Array,Rn=Uint32Array,Mn=new xn([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Tn=new xn([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),Ln=new xn([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),_n=function(e,t){for(var r=new Qn(31),i=0;i<31;++i)r[i]=t+=1<<e[i-1];var n=new Rn(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},Nn=_n(Mn,2),Fn=Nn[0],Hn=Nn[1];Fn[28]=258,Hn[258]=28;for(var On=_n(Tn,0),zn=On[0],Gn=On[1],jn=new Qn(32768),qn=0;qn<32768;++qn){var Vn=(43690&qn)>>>1|(21845&qn)<<1;Vn=(61680&(Vn=(52428&Vn)>>>2|(13107&Vn)<<2))>>>4|(3855&Vn)<<4,jn[qn]=((65280&Vn)>>>8|(255&Vn)<<8)>>>1}var Yn=function(e,t,r){for(var i=e.length,n=0,s=new Qn(t);n<i;++n)e[n]&&++s[e[n]-1];var a,o=new Qn(t);for(n=0;n<t;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new Qn(1<<t);var c=15-t;for(n=0;n<i;++n)if(e[n])for(var h=n<<4|e[n],u=t-e[n],l=o[e[n]-1]++<<u,y=l|(1<<u)-1;l<=y;++l)a[jn[l]>>>c]=h}else for(a=new Qn(i),n=0;n<i;++n)e[n]&&(a[n]=jn[o[e[n]-1]++]>>>15-e[n]);return a},Jn=new xn(288);for(qn=0;qn<144;++qn)Jn[qn]=8;for(qn=144;qn<256;++qn)Jn[qn]=9;for(qn=256;qn<280;++qn)Jn[qn]=7;for(qn=280;qn<288;++qn)Jn[qn]=8;var Wn=new xn(32);for(qn=0;qn<32;++qn)Wn[qn]=5;var Zn=/*#__PURE__*/Yn(Jn,9,0),$n=/*#__PURE__*/Yn(Jn,9,1),Xn=/*#__PURE__*/Yn(Wn,5,0),es=/*#__PURE__*/Yn(Wn,5,1),ts=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},rs=function(e,t,r){var i=t/8|0;return(e[i]|e[i+1]<<8)>>(7&t)&r},is=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},ns=function(e){return(e+7)/8|0},ss=function(e,t,r){(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length);var i=new(2==e.BYTES_PER_ELEMENT?Qn:4==e.BYTES_PER_ELEMENT?Rn:xn)(r-t);return i.set(e.subarray(t,r)),i},as=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],os=function(e,t,r){var i=Error(t||as[e]);if(i.code=e,Error.captureStackTrace&&Error.captureStackTrace(i,os),!r)throw i;return i},cs=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8},hs=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8,e[i+2]|=r>>>16},us=function(e,t){for(var r=[],i=0;i<e.length;++i)e[i]&&r.push({s:i,f:e[i]});var n=r.length,s=r.slice();if(!n)return[As,0];if(1==n){var a=new xn(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var y=s[0].s;for(i=1;i<n;++i)s[i].s>y&&(y=s[i].s);var f=new Qn(y+1),g=ls(r[u-1],f,0);if(g>t){i=0;var p=0,d=g-t,A=1<<d;for(s.sort((function(e,t){return f[t.s]-f[e.s]||e.f-t.f}));i<n;++i){var w=s[i].s;if(!(f[w]>t))break;p+=A-(1<<g-f[w]),f[w]=t}for(p>>>=d;p>0;){var m=s[i].s;f[m]<t?p-=1<<t-f[m]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;f[b]==t&&(--f[b],++p)}g=t}return[new xn(f),g]},ls=function(e,t,r){return-1==e.s?Math.max(ls(e.l,t,r+1),ls(e.r,t,r+1)):t[e.s]=r},ys=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new Qn(++t),i=0,n=e[0],s=1,a=function(e){r[i++]=e},o=1;o<=t;++o)if(e[o]==n&&o!=t)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=e[o]}return[r.subarray(0,i),t]},fs=function(e,t){for(var r=0,i=0;i<t.length;++i)r+=e[i]*t[i];return r},gs=function(e,t,r){var i=r.length,n=ns(t+2);e[n]=255&i,e[n+1]=i>>>8,e[n+2]=255^e[n],e[n+3]=255^e[n+1];for(var s=0;s<i;++s)e[n+s+4]=r[s];return 8*(n+4+i)},ps=function(e,t,r,i,n,s,a,o,c,h,u){cs(t,u++,r),++n[256];for(var l=us(n,15),y=l[0],f=l[1],g=us(s,15),p=g[0],d=g[1],A=ys(y),w=A[0],m=A[1],b=ys(p),E=b[0],k=b[1],v=new Qn(19),I=0;I<w.length;++I)v[31&w[I]]++;for(I=0;I<E.length;++I)v[31&E[I]]++;for(var B=us(v,7),S=B[0],C=B[1],K=19;K>4&&!S[Ln[K-1]];--K);var D,P,U,x,Q=h+5<<3,R=fs(n,Jn)+fs(s,Wn)+a,M=fs(n,y)+fs(s,p)+a+14+3*K+fs(v,S)+(2*v[16]+3*v[17]+7*v[18]);if(Q<=R&&Q<=M)return gs(t,u,e.subarray(c,c+h));if(cs(t,u,1+(M<R)),u+=2,M<R){D=Yn(y,f,0),P=y,U=Yn(p,d,0),x=p;var T=Yn(S,C,0);cs(t,u,m-257),cs(t,u+5,k-1),cs(t,u+10,K-4),u+=14;for(I=0;I<K;++I)cs(t,u+3*I,S[Ln[I]]);u+=3*K;for(var L=[w,E],_=0;_<2;++_){var N=L[_];for(I=0;I<N.length;++I){var F=31&N[I];cs(t,u,T[F]),u+=S[F],F>15&&(cs(t,u,N[I]>>>5&127),u+=N[I]>>>12)}}}else D=Zn,P=Jn,U=Xn,x=Wn;for(I=0;I<o;++I)if(i[I]>255){F=i[I]>>>18&31;hs(t,u,D[F+257]),u+=P[F+257],F>7&&(cs(t,u,i[I]>>>23&31),u+=Mn[F]);var H=31&i[I];hs(t,u,U[H]),u+=x[H],H>3&&(hs(t,u,i[I]>>>5&8191),u+=Tn[H])}else hs(t,u,D[i[I]]),u+=P[i[I]];return hs(t,u,D[256]),u+P[256]},ds=/*#__PURE__*/new Rn([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),As=/*#__PURE__*/new xn(0),ws=function(e,t,r,i,n){return function(e,t,r,i,n,s){var a=e.length,o=new xn(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!t||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=gs(c,h+1,e.subarray(u,l))}else{for(var y=ds[t-1],f=y>>>13,g=8191&y,p=(1<<r)-1,d=new Qn(32768),A=new Qn(p+1),w=Math.ceil(r/3),m=2*w,b=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<m)&p},E=new Rn(25e3),k=new Qn(288),v=new Qn(32),I=0,B=0,S=(u=0,0),C=0,K=0;u<a;++u){var D=b(u),P=32767&u,U=A[D];if(d[P]=U,A[D]=P,C<=u){var x=a-u;if((I>7e3||S>24576)&&x>423){h=ps(e,c,0,E,k,v,B,S,K,u-K,h),S=I=B=0,K=u;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)v[Q]=0}var R=2,M=0,T=g,L=P-U&32767;if(x>2&&D==b(u-L))for(var _=Math.min(f,x)-1,N=Math.min(32767,u),F=Math.min(258,x);L<=N&&--T&&P!=U;){if(e[u+R]==e[u+R-L]){for(var H=0;H<F&&e[u+H]==e[u+H-L];++H);if(H>R){if(R=H,M=L,H>_)break;var O=Math.min(L,H-2),z=0;for(Q=0;Q<O;++Q){var G=u-L+Q+32768&32767,j=G-d[G]+32768&32767;j>z&&(z=j,U=G)}}}L+=(P=U)-(U=d[P])+32768&32767}if(M){E[S++]=268435456|Hn[R]<<18|Gn[M];var q=31&Hn[R],V=31&Gn[M];B+=Mn[q]+Tn[V],++k[257+q],++v[V],C=u+R,++I}else E[S++]=e[u],++k[e[u]]}}h=ps(e,c,s,E,k,v,B,S,K,u-K,h),!s&&7&h&&(h=gs(c,h+1,As))}return ss(o,0,i+ns(h)+n)}(e,null==t.level?6:t.level,null==t.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):12+t.mem,r,i,!n)},ms=/*#__PURE__*/function(){function e(e,t){t||"function"!=typeof e||(t=e,e={}),this.ondata=t,this.o=e||{}}return e.prototype.p=function(e,t){this.ondata(ws(e,this.o,0,0,!t),t)},e.prototype.push=function(e,t){this.ondata||os(5),this.d&&os(4),this.d=t,this.p(e,t||!1)},e}(),bs=/*#__PURE__*/function(){function e(e){this.s={},this.p=new xn(0),this.ondata=e}return e.prototype.e=function(e){this.ondata||os(5),this.d&&os(4);var t=this.p.length,r=new xn(t+e.length);r.set(this.p),r.set(e,t),this.p=r},e.prototype.c=function(e){this.d=this.s.i=e||!1;var t=this.s.b,r=function(e,t,r){var i=e.length;if(!i||r&&r.f&&!r.l)return t||new xn(0);var n=!t||r,s=!r||r.i;r||(r={}),t||(t=new xn(3*i));var a=function(e){var r=t.length;if(e>r){var i=new xn(Math.max(2*r,e));i.set(t),t=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,y=r.m,f=r.n,g=8*i;do{if(!u){o=rs(e,c,1);var p=rs(e,c+1,3);if(c+=3,!p){var d=e[(C=ns(c)+4)-4]|e[C-3]<<8,A=C+d;if(A>i){s&&os(0);break}n&&a(h+d),t.set(e.subarray(C,A),h),r.b=h+=d,r.p=c=8*A,r.f=o;continue}if(1==p)u=$n,l=es,y=9,f=5;else if(2==p){var w=rs(e,c,31)+257,m=rs(e,c+10,15)+4,b=w+rs(e,c+5,31)+1;c+=14;for(var E=new xn(b),k=new xn(19),v=0;v<m;++v)k[Ln[v]]=rs(e,c+3*v,7);c+=3*m;var I=ts(k),B=(1<<I)-1,S=Yn(k,I,1);for(v=0;v<b;){var C,K=S[rs(e,c,B)];if(c+=15&K,(C=K>>>4)<16)E[v++]=C;else{var D=0,P=0;for(16==C?(P=3+rs(e,c,3),c+=2,D=E[v-1]):17==C?(P=3+rs(e,c,7),c+=3):18==C&&(P=11+rs(e,c,127),c+=7);P--;)E[v++]=D}}var U=E.subarray(0,w),x=E.subarray(w);y=ts(U),f=ts(x),u=Yn(U,y,1),l=Yn(x,f,1)}else os(1);if(c>g){s&&os(0);break}}n&&a(h+131072);for(var Q=(1<<y)-1,R=(1<<f)-1,M=c;;M=c){var T=(D=u[is(e,c)&Q])>>>4;if((c+=15&D)>g){s&&os(0);break}if(D||os(2),T<256)t[h++]=T;else{if(256==T){M=c,u=null;break}var L=T-254;if(T>264){var _=Mn[v=T-257];L=rs(e,c,(1<<_)-1)+Fn[v],c+=_}var N=l[is(e,c)&R],F=N>>>4;if(N||os(3),c+=15&N,x=zn[F],F>3&&(_=Tn[F],x+=is(e,c)&(1<<_)-1,c+=_),c>g){s&&os(0);break}n&&a(h+131072);for(var H=h+L;h<H;h+=4)t[h]=t[h-x],t[h+1]=t[h+1-x],t[h+2]=t[h+2-x],t[h+3]=t[h+3-x];h=H}}r.l=u,r.p=M,r.b=h,r.f=o,u&&(o=1,r.m=y,r.d=l,r.n=f)}while(!o);return h==t.length?t:ss(t,0,h)}(this.p,this.o,this.s);this.ondata(ss(r,t,this.s.b),this.d),this.o=ss(r,this.s.b-32768),this.s.b=this.o.length,this.p=ss(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),Es=/*#__PURE__*/function(){function e(e,t){var r,i;this.c=(r=1,i=0,{p:function(e){for(var t=r,n=i,s=0|e.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=t+=e[a];t=(65535&t)+15*(t>>16),n=(65535&n)+15*(n>>16)}r=t,i=n},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(i%=65521))<<8|i>>>8}}),this.v=1,ms.call(this,e,t)}return e.prototype.push=function(e,t){ms.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){this.c.p(e);var r=ws(e,this.o,this.v&&2,t&&4,!t);this.v&&(function(e,t){var r=t.level,i=0==r?0:r<6?1:9==r?3:2;e[0]=120,e[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),t&&function(e,t,r){for(;r;++t)e[t]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,t)},e}(),ks=/*#__PURE__*/function(){function e(e){this.v=1,bs.call(this,e)}return e.prototype.push=function(e,t){if(bs.prototype.e.call(this,e),this.v){if(this.p.length<2&&!t)return;this.p=this.p.subarray(2),this.v=0}t&&(this.p.length<4&&os(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),bs.prototype.c.call(this,t)},e}(),vs="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{vs.decode(As,{stream:!0}),1}catch(e){}var Is=[0,1,3,7,15,31,63,127,255],Bs=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};Bs.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},Bs.prototype.read=function(e){for(var t=0;e>0;){this._ensureByte();var r=8-this.bitOffset;if(e>=r)t<<=r,t|=Is[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,e-=r;else{t<<=e;var i=r-e;t|=(this.curByte&Is[e]<<i)>>i,this.bitOffset+=e,e=0}}return t},Bs.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},Bs.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)};var Ss=Bs,Cs=function(){};Cs.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},Cs.prototype.read=function(e,t,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;e[t++]=n,i++}return i},Cs.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},Cs.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},Cs.prototype.write=function(e,t,r){var i;for(i=0;i<r;i++)this.writeByte(e[t++]);return r},Cs.prototype.flush=function(){};var Ks,Ds=Cs,Ps=(Ks=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var e=4294967295;this.getCRC=function(){return~e>>>0},this.updateCRC=function(t){e=e<<8^Ks[255&(e>>>24^t)]},this.updateCRCRun=function(t,r){for(;r-- >0;)e=e<<8^Ks[255&(e>>>24^t)]}}),Us=Ss,xs=Ds,Qs=Ps,Rs=function(e,t){var r,i=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=i,i},Ms={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},Ts={};Ts[Ms.LAST_BLOCK]="Bad file checksum",Ts[Ms.NOT_BZIP_DATA]="Not bzip data",Ts[Ms.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",Ts[Ms.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",Ts[Ms.DATA_ERROR]="Data error",Ts[Ms.OUT_OF_MEMORY]="Out of memory",Ts[Ms.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var Ls=function(e,t){var r=Ts[e]||"unknown error";t&&(r+=": "+t);var i=new TypeError(r);throw i.errorCode=e,i},_s=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};_s.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new Qs,!0):(this.writeCount=-1,!1)},_s.prototype._start_bunzip=function(e,t){var r=new Uint8Array(4);4===e.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||Ls(Ms.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&Ls(Ms.NOT_BZIP_DATA,"level out of range"),this.reader=new Us(e),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=t,this.streamCRC=0},_s.prototype._get_next_block=function(){var e,t,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&Ls(Ms.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&Ls(Ms.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&Ls(Ms.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(e=0;e<16;e++)if(a&1<<15-e){var h=16*e;for(r=i.read(16),t=0;t<16;t++)r&1<<15-t&&(o[c++]=h+t)}var u=i.read(3);(u<2||u>6)&&Ls(Ms.DATA_ERROR);var l=i.read(15);0===l&&Ls(Ms.DATA_ERROR);var y=new Uint8Array(256);for(e=0;e<u;e++)y[e]=e;var f=new Uint8Array(l);for(e=0;e<l;e++){for(t=0;i.read(1);t++)t>=u&&Ls(Ms.DATA_ERROR);f[e]=Rs(y,t)}var g,p=c+2,d=[];for(t=0;t<u;t++){var A,w,m=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),e=0;e<p;e++){for(;(a<1||a>20)&&Ls(Ms.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;m[e]=a}for(A=w=m[0],e=1;e<p;e++)m[e]>w?w=m[e]:m[e]<A&&(A=m[e]);g={},d.push(g),g.permute=new Uint16Array(258),g.limit=new Uint32Array(22),g.base=new Uint32Array(21),g.minLen=A,g.maxLen=w;var E=0;for(e=A;e<=w;e++)for(b[e]=g.limit[e]=0,a=0;a<p;a++)m[a]===e&&(g.permute[E++]=a);for(e=0;e<p;e++)b[m[e]]++;for(E=a=0,e=A;e<w;e++)E+=b[e],g.limit[e]=E-1,E<<=1,a+=b[e],g.base[e+1]=E-a;g.limit[w+1]=Number.MAX_VALUE,g.limit[w]=E+b[w]-1,g.base[A]=0}var k=new Uint32Array(256);for(e=0;e<256;e++)y[e]=e;var v,I=0,B=0,S=0,C=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,S>=l&&Ls(Ms.DATA_ERROR),g=d[f[S++]]),e=g.minLen,t=i.read(e);e>g.maxLen&&Ls(Ms.DATA_ERROR),!(t<=g.limit[e]);e++)t=t<<1|i.read(1);((t-=g.base[e])<0||t>=258)&&Ls(Ms.DATA_ERROR);var K=g.permute[t];if(0!==K&&1!==K){if(I)for(I=0,B+a>this.dbufSize&&Ls(Ms.DATA_ERROR),k[v=o[y[0]]]+=a;a--;)C[B++]=v;if(K>c)break;B>=this.dbufSize&&Ls(Ms.DATA_ERROR),k[v=o[v=Rs(y,e=K-1)]]++,C[B++]=v}else I||(I=1,a=0),a+=0===K?I:2*I,I<<=1}for((s<0||s>=B)&&Ls(Ms.DATA_ERROR),t=0,e=0;e<256;e++)r=t+k[e],k[e]=t,t=r;for(e=0;e<B;e++)C[k[v=255&C[e]]]|=e<<8,k[v]++;var D=0,P=0,U=0;return B&&(P=255&(D=C[s]),D>>=8,U=-1),this.writePos=D,this.writeCurrent=P,this.writeCount=B,this.writeRun=U,!0},_s.prototype._read_bunzip=function(e,t){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&Ls(Ms.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var Ns=function(e){if("readByte"in e)return e;var t=new xs;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},Fs=function(e){var t=new xs,r=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),r=!1;else{if("writeByte"in e)return e;t.buffer=e,r=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(r&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};var Hs=function(e,t,r){for(var i=Ns(e),n=Fs(t),s=new _s(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&Ls(Ms.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class Os{static get tag(){return L.packet.literalData}constructor(e=new Date){this.format=L.literal.utf8,this.date=F.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=L.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||F.isStream(this.text))&&(this.text=F.decodeUTF8(F.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=F.canonicalizeEOL(F.encodeUTF8(this.text))),e?K(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await S(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=F.decodeUTF8(await e.readBytes(r)),this.date=F.readDate(await e.readBytes(4));let i=e.remainder();u(i)&&(i=await U(i)),this.setBytes(i,t)}))}writeHeader(){const e=F.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),i=F.writeDate(this.date);return F.concatUint8Array([r,t,e,i])}write(){const e=this.writeHeader(),t=this.getBytes();return F.concat([e,t])}}class zs{constructor(){this.bytes=""}read(e){return this.bytes=F.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return F.stringToUint8Array(this.bytes)}toHex(){return F.uint8ArrayToHex(F.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new zs;return t.read(F.hexToUint8Array(e)),t}static wildcard(){const e=new zs;return e.read(new Uint8Array(8)),e}}const Gs=Symbol("verified"),js="salt@notations.openpgpjs.org",qs=new Set([L.signatureSubpacket.issuerKeyID,L.signatureSubpacket.issuerFingerprint,L.signatureSubpacket.embeddedSignature]);class Vs{static get tag(){return L.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new zs,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Gs]=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ni(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[t++],this.publicKeyAlgorithm=e[t++],this.hashAlgorithm=e[t++],t+=this.readSubPackets(e.subarray(t,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,t),t+=this.readSubPackets(e.subarray(t,e.length),!1),this.signedHashValue=e.subarray(t,t+2),t+=2,6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r}const r=e.subarray(t,e.length),{read:i,signatureParams:n}=En.signature.parseSignatureParams(this.publicKeyAlgorithm,r);if(i<r.length)throw Error("Error reading MPIs");this.params=n}writeParams(){return this.params instanceof Promise?Q((async()=>En.serializeParams(this.publicKeyAlgorithm,await this.params))):En.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),F.concat(e)}async sign(e,t,r=new Date,i=!1,n){this.version=e.version,this.created=F.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Js(this.hashAlgorithm);if(null===this.salt)this.salt=En.random.getRandomBytes(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(n.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===js)).length)throw Error("Unexpected existing salt notation");{const e=En.random.getRandomBytes(Js(this.hashAlgorithm));this.rawNotations.push({name:js,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=F.concat(s);const a=this.toHash(this.signatureType,t,i),o=await this.hash(this.signatureType,t,a,i);this.signedHashValue=P(C(o),0,2);const c=async()=>En.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await U(o));F.isStream(o)?this.params=c():(this.params=await c(),this[Gs]=!0)}writeHashedSubPackets(){const e=L.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(Ys(e.signatureCreationTime,!0,F.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(Ys(e.signatureExpirationTime,!0,F.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(Ys(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(Ys(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(Ys(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(Ys(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(Ys(e.keyExpirationTime,!0,F.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(Ys(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=F.concat([r,this.revocationKeyFingerprint]),t.push(Ys(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(Ys(e.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=F.encodeUTF8(i);r.push(F.writeNumber(o.length,2)),r.push(F.writeNumber(n.length,2)),r.push(o),r.push(n),r=F.concat(r),t.push(Ys(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(Ys(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(Ys(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyServerPreferences)),t.push(Ys(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(Ys(e.preferredKeyServer,!1,F.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(Ys(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(Ys(e.policyURI,!1,F.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyFlags)),t.push(Ys(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(Ys(e.signersUserID,!1,F.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=F.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(Ys(e.reasonForRevocation,!0,r))),null!==this.features&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.features)),t.push(Ys(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(F.stringToUint8Array(this.signatureTargetHash)),r=F.concat(r),t.push(Ys(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(Ys(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=F.concat(r),t.push(Ys(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(Ys(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(Ys(e.preferredCipherSuites,!1,r)));const i=F.concat(t),n=F.writeNumber(i.length,6===this.version?4:2);return F.concat([n,i])}writeUnhashedSubPackets(){const e=[];this.unhashedSubpackets.forEach((t=>{e.push($r(t.length)),e.push(t)}));const t=F.concat(e),r=F.writeNumber(t.length,6===this.version?4:2);return F.concat([r,t])}readSubPacket(e,t=!0){let r=0;const i=!!(128&e[r]),n=127&e[r];if(t||(this.unhashedSubpackets.push(e.subarray(r,e.length)),qs.has(n)))switch(r++,n){case L.signatureSubpacket.signatureCreationTime:this.created=F.readDate(e.subarray(r,e.length));break;case L.signatureSubpacket.signatureExpirationTime:{const t=F.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case L.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case L.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case L.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case L.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case L.signatureSubpacket.keyExpirationTime:{const t=F.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case L.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case L.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case L.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const n=F.readNumber(e.subarray(r,r+2));r+=2;const s=F.readNumber(e.subarray(r,r+2));r+=2;const a=F.decodeUTF8(e.subarray(r,r+n)),o=e.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:i}),t&&(this.notations[a]=F.decodeUTF8(o));break}case L.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case L.signatureSubpacket.policyURI:this.policyURI=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.signersUserID:this.signersUserID=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=En.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=F.uint8ArrayToString(e.subarray(r,r+t));break}case L.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Vs,this.embeddedSignature.read(e.subarray(r,e.length));break;case L.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case L.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:{const e=Error("Unknown signature subpacket type "+n);if(i)throw e;F.printDebug(e)}}}readSubPackets(e,t=!0,r){const i=6===this.version?4:2,n=F.readNumber(e.subarray(0,i));let s=i;for(;s<2+n;){const i=Zr(e.subarray(s,e.length));s+=i.offset,this.readSubPacket(e.subarray(s,s+i.len),t,r),s+=i.len}return s}toSign(e,t){const r=L.signature;switch(e){case r.binary:return null!==t.text?F.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return F.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,i;if(t.userID)i=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,e=t.userAttribute}const n=e.write();return F.concat([this.toSign(r.key,t),new Uint8Array([i]),F.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return F.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return I(C(this.signatureData),(e=>{r+=e.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==L.signature.binary&&this.signatureType!==L.signature.text||(t?i.push(new Uint8Array(6)):i.push(e.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(F.writeNumber(r,4)),F.concat(i)}))}toHash(e,t,r=!1){const i=this.toSign(e,t);return F.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,i=!1){if(6===this.version&&this.salt.length!==Js(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,i)),En.hash.digest(this.hashAlgorithm,r)}async verify(e,t,r,i=new Date,n=!1,s=_){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===L.signature.binary||t===L.signature.text;if(!(this[Gs]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(t,r,n),s=await this.hash(t,r,i)),s=await U(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===L.publicKey.hmac?e.privateParams:null;if(this[Gs]=await En.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,i,s),!this[Gs])throw Error("Signature verification failed")}const o=F.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+L.read(L.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[L.signature.binary,L.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+L.read(L.hash,this.hashAlgorithm).toUpperCase());if(this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=F.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ys(e,t,r){const i=[];return i.push($r(r.length+1)),i.push(new Uint8Array([(t?128:0)|e])),i.push(r),F.concat(i)}function Js(e){switch(e){case L.hash.sha256:return 16;case L.hash.sha384:return 24;case L.hash.sha512:return 32;case L.hash.sha224:case L.hash.sha3_256:return 16;case L.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Ws{static get tag(){return L.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new Ws;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ni(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new zs,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new zs,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),F.concatUint8Array(e)}calculateTrailer(...e){return Q((async()=>Vs.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==L.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!F.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!F.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function Zs(e,t){if(!t[e]){let t;try{t=L.read(L.packet,e)}catch(t){throw new si("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}Ws.prototype.hash=Vs.prototype.hash,Ws.prototype.toHash=Vs.prototype.toHash,Ws.prototype.toSign=Vs.prototype.toSign;class $s extends Array{static async fromBinary(e,t,r=_){const i=new $s;return await i.read(e,t,r),i}async read(e,t,r=_){r.additionalAllowedPackets.length&&(t={...t,...F.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=B(e,(async(e,i)=>{const n=M(i);try{for(;;){await n.ready;if(await ii(e,(async e=>{try{if(e.tag===L.packet.marker||e.tag===L.packet.trust||e.tag===L.packet.padding)return;const i=Zs(e.tag,t);i.packets=new $s,i.fromStream=F.isStream(e.packet),await i.read(e.packet,r),await n.write(i)}catch(t){if(t instanceof si){if(!(e.tag<=39))return;await n.abort(t)}const i=!r.ignoreUnsupportedPackets&&t instanceof ni,s=!(r.ignoreMalformedPackets||t instanceof ni);if(i||s||ri(e.tag))await n.abort(t);else{const t=new ai(e.tag,e.packet);await n.write(t)}F.printDebugError(t)}})))return await n.ready,void await n.close()}}catch(e){await n.abort(e)}}));const i=R(this.stream);for(;;){const{done:e,value:t}=await i.read();if(e?this.stream=null:this.push(t),e||ri(t.constructor.tag))break}i.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ai?this[t].tag:this[t].constructor.tag,i=this[t].write();if(F.isStream(i)&&ri(this[t].constructor.tag)){let t=[],n=0;const s=512;e.push(ei(r)),e.push(I(i,(e=>{if(t.push(e),n+=e.length,n>=s){const e=Math.min(Math.log(n)/Math.LN2|0,30),r=2**e,i=F.concat([Xr(e)].concat(t));return t=[i.subarray(1+r)],n=t[0].length,i.subarray(0,1+r)}}),(()=>F.concat([$r(n)].concat(t)))))}else{if(F.isStream(i)){let t=0;e.push(I(C(i),(e=>{t+=e.length}),(()=>ti(r,t))))}else e.push(ti(r,i.length));e.push(i)}}return F.concat(e)}filterByTag(...e){const t=new $s,r=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(r(this[i].constructor.tag))&&t.push(this[i]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,i=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(i(r[n].constructor.tag))&&t.push(n);return t}}const Xs=/*#__PURE__*/F.constructAllowedPackets([Os,Ws,Vs]);class ea{static get tag(){return L.packet.compressedData}constructor(e=_){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=_){await S(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),F.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=_){const t=L.read(L.compression,this.algorithm),r=sa[t];if(!r)throw Error(t+" decompression not supported");this.packets=await $s.fromBinary(r(this.compressed),Xs,e)}compress(){const e=L.read(L.compression,this.algorithm),t=na[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function ta(e,t){return r=>{if(!F.isStream(r)||u(r))return Q((()=>U(r).then((e=>new Promise(((r,i)=>{const n=new t;n.ondata=e=>{r(e)};try{n.push(e,!0)}catch(e){i(e)}}))))));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const i=r.getReader(),n=new t;return new ReadableStream({async start(e){for(n.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await i.read();if(e)return void n.push(new Uint8Array,!0);t.length&&n.push(t)}}})}}function ra(e){return function(t){return Q((async()=>e(await U(t))))}}const ia=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),na={zip:/*#__PURE__*/ta(ia("deflate-raw").compressor,ms),zlib:/*#__PURE__*/ta(ia("deflate").compressor,Es)},sa={uncompressed:e=>e,zip:/*#__PURE__*/ta(ia("deflate-raw").decompressor,bs),zlib:/*#__PURE__*/ta(ia("deflate").decompressor,ks),bzip2:/*#__PURE__*/ra(Hs)},aa=/*#__PURE__*/F.constructAllowedPackets([Os,ea,Ws,Vs]);class oa{static get tag(){return L.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new oa;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await S(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new ni(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):F.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=_){let i=this.packets.write();if(u(i)&&(i=await U(i)),2===this.version)this.cipherAlgorithm=e,this.salt=En.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await ca(this,"encrypt",t,i);else{const{blockSize:n}=En.getCipherParams(e),s=await En.getPrefixRandom(e),a=new Uint8Array([211,20]),o=F.concat([s,i,a]),c=await En.hash.sha1(K(o)),h=F.concat([o,c]);this.encrypted=await En.mode.cfb.encrypt(e,t,h,new Uint8Array(n),r)}return!0}async decrypt(e,t,r=_){let i,n=C(this.encrypted);if(u(n)&&(n=await U(n)),2===this.version)i=await ca(this,"decrypt",t,n);else{const{blockSize:s}=En.getCipherParams(e),a=await En.mode.cfb.decrypt(e,t,n,new Uint8Array(s)),o=P(K(a),-20),c=P(a,0,-20),h=Promise.all([U(await En.hash.sha1(K(c))),U(o)]).then((([e,t])=>{if(!F.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),u=P(c,s+2);i=P(u,0,-2),i=b([i,Q((()=>h))]),F.isStream(n)&&r.allowUnauthenticatedStream||(i=await U(i))}return this.packets=await $s.fromBinary(i,aa,r),!0}}async function ca(e,t,r,i){const n=e instanceof oa&&2===e.version,s=!n&&e.constructor.tag===L.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=En.getAEADMode(e.aeadAlgorithm),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,h=2**(e.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),y=new Uint8Array(l,0,5+u),f=new Uint8Array(l),g=new DataView(l),p=new Uint8Array(l,5,8);y.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,A,w=0,m=Promise.resolve(),b=0,k=0;if(n){const{keySize:t}=En.getCipherParams(e.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await Yi(L.hash.sha256,r,e.salt,n,t+i);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),A=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const v=await a(e.cipherAlgorithm,r);return B(i,(async(r,i)=>{if("array"!==F.isStream(r)){const t=new TransformStream({},{highWaterMark:F.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});E(t.readable,i),i=t.writable}const s=R(r),a=M(i);try{for(;;){let e=await s.readBytes(h+o)||new Uint8Array;const r=e.subarray(e.length-o);let i,l,E;if(e=e.subarray(0,e.length-o),n)E=d;else{E=d.slice();for(let e=0;e<8;e++)E[d.length-8+e]^=p[e]}if(!w||e.length?(s.unshift(r),i=v[t](e,E,y),i.catch((()=>{})),k+=e.length-o+c):(g.setInt32(5+u+4,b),i=v[t](r,E,f),i.catch((()=>{})),k+=c,l=!0),b+=e.length-o,m=m.then((()=>i)).then((async e=>{await a.ready,await a.write(e),k-=e.length})).catch((e=>a.abort(e))),(l||k>a.desiredSize)&&await m,l){await a.close();break}n?A.setInt32(d.length-4,++w):g.setInt32(9,++w)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const ha=/*#__PURE__*/F.constructAllowedPackets([Os,ea,Ws,Vs]);class ua{static get tag(){return L.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=L.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await S(e,(async e=>{const t=await e.readByte();if(1!==t)throw new ni(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=En.getAEADMode(this.aeadAlgorithm);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=_){this.packets=await $s.fromBinary(await ca(this,"decrypt",t,C(this.encrypted)),ha,r)}async encrypt(e,t,r=_){this.cipherAlgorithm=e;const{ivLength:i}=En.getAEADMode(this.aeadAlgorithm);this.iv=En.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await ca(this,"encrypt",t,n)}}class la{static get tag(){return L.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new zs,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new la;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?zs.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ni(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const i=r-1;this.publicKeyFingerprint=e.subarray(t,t+i),t+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=zs.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=En.parseEncSessionKeyParams(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===L.publicKey.x25519||this.publicKeyAlgorithm===L.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=L.write(L.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),En.serializeParams(this.publicKeyAlgorithm,this.encrypted)),F.concatUint8Array(e)}async encrypt(e){const t=L.write(L.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,i=ya(this.version,t,r,this.sessionKey),n=t===L.publicKey.aead?e.privateParams:null;this.encrypted=await En.publicKeyEncrypt(t,r,e.publicParams,n,i,e.getFingerprintBytes())}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?ya(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,i=await En.publicKeyDecrypt(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,e.getFingerprintBytes(),r),{sessionKey:n,sessionKeyAlgorithm:s}=function(e,t,r,i){switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.aead:{const t=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=F.writeChecksum(t.subarray(t.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(i){const t=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:F.selectUint8Array(t,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===e?null:F.selectUint8(t,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===e||L.read(L.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case L.publicKey.x25519:case L.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);3===this.version&&this.publicKeyAlgorithm!==L.publicKey.x25519&&this.publicKeyAlgorithm!==L.publicKey.x448&&(this.sessionKeyAlgorithm=s),this.sessionKey=n}}function ya(e,t,r,i){switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.aead:return F.concatUint8Array([new Uint8Array(6===e?[]:[r]),i,F.writeChecksum(i.subarray(i.length%8))]);case L.publicKey.x25519:case L.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class fa{static get tag(){return L.packet.symEncryptedSessionKey}constructor(e=_){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=L.symmetric.aes256,this.aeadAlgorithm=L.write(L.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ni(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const i=e[t++];if(this.s2k=Dn(i),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=En.getAEADMode(this.aeadAlgorithm);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;t=F.concatUint8Array([new Uint8Array([this.version,n,e,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?t=F.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=F.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=F.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=En.getCipherParams(t),n=await this.s2k.produceKey(e,i);if(this.version>=5){const e=En.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|fa.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await Yi(L.hash.sha256,n,new Uint8Array,r,i):n,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await En.mode.cfb.decrypt(t,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=L.write(L.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length)}else this.sessionKey=n}async encrypt(e,t=_){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=Pn(t),this.s2k.generateSalt();const{blockSize:i,keySize:n}=En.getCipherParams(r),s=await this.s2k.produceKey(e,n);if(null===this.sessionKey&&(this.sessionKey=En.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const e=En.getAEADMode(this.aeadAlgorithm);this.iv=En.random.getRandomBytes(e.ivLength);const t=new Uint8Array([192|fa.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await Yi(L.hash.sha256,s,new Uint8Array,t,n):s,a=await e(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=F.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await En.mode.cfb.encrypt(r,s,e,new Uint8Array(i),t)}}}class ga{static get tag(){return L.packet.publicKey}constructor(e=new Date,t=_){this.version=t.v6Keys?6:4,this.created=F.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new ga,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e){let t=0;if(this.version=e[t++],4===this.version||5===this.version||6===this.version){this.created=F.readDate(e.subarray(t,t+4)),t+=4,this.algorithm=e[t++],this.version>=5&&(t+=4);const{read:r,publicParams:i}=En.parsePublicKeyParams(this.algorithm,e.subarray(t));if(6===this.version&&i.oid&&(i.oid.getName()===L.curve.curve25519Legacy||i.oid.getName()===L.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,t+=r,await this.computeFingerprintAndKeyID(),t}throw new ni(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(F.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=En.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&e.push(F.writeNumber(t.length,4)),e.push(t),F.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,i=e>=5?4:2;return F.concatUint8Array([new Uint8Array([r]),F.writeNumber(t.length,i),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new zs,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await En.hash.sha256(e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await En.hash.sha1(e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return F.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&F.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=L.read(L.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=F.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}ga.prototype.readPublicKey=ga.prototype.read,ga.prototype.writePublicKey=ga.prototype.write;const pa=/*#__PURE__*/F.constructAllowedPackets([Os,ea,Ws,Vs]);class da{static get tag(){return L.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=_){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=En.getCipherParams(e),n=await U(C(this.encrypted)),s=await En.mode.cfb.decrypt(e,t,n.subarray(i+2),n.subarray(2,i+2));this.packets=await $s.fromBinary(s,pa,r)}async encrypt(e,t,r=_){const i=this.packets.write(),{blockSize:n}=En.getCipherParams(e),s=await En.getPrefixRandom(e),a=await En.mode.cfb.encrypt(e,t,s,new Uint8Array(n),r),o=await En.mode.cfb.encrypt(e,t,i,a.subarray(2),r);this.encrypted=F.concat([a,o])}}class Aa extends ga{static get tag(){return L.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new Aa,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class wa{static get tag(){return L.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=Zr(e.subarray(t,e.length));t+=r.offset,this.attributes.push(F.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push($r(this.attributes[t].length)),e.push(F.stringToUint8Array(this.attributes[t]));return F.concatUint8Array(e)}equals(e){return!!(e&&e instanceof wa)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class ma extends ga{static get tag(){return L.packet.secretKey}constructor(e=new Date,t=_){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=_){let r=await this.readPublicKey(e);const i=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=Dn(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+En.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+En.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(i),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!F.equalsUint8Array(F.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=En.parsePrivateKeyParams(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof ni)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return F.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=En.serializeParams(this.algorithm,this.privateParams)),5===this.version&&t.push(F.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(F.writeChecksum(this.keyMaterial))),F.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=_){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=Dn(L.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=L.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=_){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=Pn(t),this.s2k.generateSalt();const r=En.serializeParams(this.algorithm,this.privateParams);this.symmetric=L.symmetric.aes256;const{blockSize:i}=En.getCipherParams(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=L.aead.eax;const t=En.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const n=ei(this.constructor.tag),s=await ba(this.version,this.s2k,e,this.symmetric,this.aead,n),a=await t(this.symmetric,s);this.iv=this.isLegacyAEAD?En.random.getRandomBytes(i):En.random.getRandomBytes(t.ivLength);const o=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([n,this.writePublicKey()]);this.keyMaterial=await a.encrypt(r,this.iv.subarray(0,t.ivLength),o)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const n=await ba(this.version,this.s2k,e,this.symmetric);this.iv=En.random.getRandomBytes(i),this.keyMaterial=await En.mode.cfb.encrypt(this.symmetric,n,F.concatUint8Array([r,await En.hash.sha1(r,t)]),this.iv,t)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=ei(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(t=await ba(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const e=En.getAEADMode(this.aead),n=await e(this.symmetric,t);try{const t=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await En.mode.cfb.decrypt(this.symmetric,t,this.keyMaterial,this.iv);i=e.subarray(0,-20);const r=await En.hash.sha1(i);if(!F.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=En.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await En.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===L.publicKey.ecdh&&t===L.curve.curve25519Legacy||this.algorithm===L.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await En.generateParams(this.algorithm,e,t,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function ba(e,t,r,i,n,s,a){const{keySize:o}=En.getCipherParams(i),c=await t.produceKey(r,o);if(!n||5===e||a)return c;const h=F.concatUint8Array([s,new Uint8Array([e,i,n])]);return Yi(L.hash.sha256,c,new Uint8Array,h,o)}class Ea{static get tag(){return L.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(F.isString(e)||e.name&&!F.isString(e.name)||e.email&&!F.isEmailAddress(e.email)||e.comment&&!F.isString(e.comment))throw Error("Invalid user ID format");const t=new Ea;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=_){const r=F.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:e,comment:t,email:r}=i.groups;this.comment=t?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=e?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return F.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class ka extends ma{static get tag(){return L.packet.secretSubkey}constructor(e=new Date,t=_){super(e,t)}}const va=/*#__PURE__*/F.constructAllowedPackets([Vs]);class Ia{constructor(e){this.packets=e||new $s}write(){return this.packets.write()}armor(e=_){const t=this.packets.some((e=>e.constructor.tag===Vs.tag&&6!==e.version));return re(L.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function Ba(e,t){const r=new ka(e.date,t);return r.packets=null,r.algorithm=L.write(L.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Sa(e,t){const r=new ma(e.date,t);return r.packets=null,r.algorithm=L.write(L.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Ca(e,t,r,i,n=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,i,n,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw F.wrapError(`Could not find valid ${L.read(L.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function Ka(e,t,r=new Date){const i=F.normalizeDate(r);if(null!==i){const r=Qa(e,t);return!(e.created<=i&&i<r)}return!1}async function Da(e,t,r,i){const n={};n.key=t,n.bind=e;const s={signatureType:L.signature.subkeyBinding};r.sign?(s.keyFlags=[L.keyFlags.signData],s.embeddedSignature=await Pa(n,null,e,{signatureType:L.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[L.keyFlags.forwardedCommunication]:[L.keyFlags.encryptCommunication|L.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await Pa(n,null,t,s,r.date,void 0,void 0,void 0,i)}async function Pa(e,t,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Vs;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(e,t,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(e){const t=await e.getPrimarySelfSignature(r,i,n);t.preferredHashAlgorithms&&([a]=t.preferredHashAlgorithms,s=En.hash.getHashByteLength(s)<=En.hash.getHashByteLength(a)?a:s)}switch(t.algorithm){case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ed25519:case L.publicKey.ed448:a=En.getPreferredCurveHashAlgo(t.algorithm,t.publicParams.oid)}return En.hash.getHashByteLength(s)<=En.hash.getHashByteLength(a)?a:s}(t,r,n,s,c),h.rawNotations=[...a],await h.sign(r,e,n,o,c),h}async function Ua(e,t,r,i=new Date,n){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(i)||n&&!await n(e)||t[r].some((function(t){return F.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function xa(e,t,r,i,n,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(i.map((async function(e){try{n&&!e.issuerKeyID.equals(n.issuerKeyID)||(await e.verify(s,t,r,a,!1,o),c.push(e.issuerKeyID))}catch(e){}}))),n?(n.revoked=!!c.some((e=>e.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function Qa(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function Ra(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=F.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"ecc":try{e.curve=L.write(L.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==L.curve.ed25519Legacy&&e.curve!==L.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?L.curve.ed25519Legacy:L.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===L.curve.ed25519Legacy?L.publicKey.eddsaLegacy:L.publicKey.ecdsa:e.algorithm=L.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?L.publicKey.ed25519:L.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?L.publicKey.ed448:L.publicKey.x448;break;case"rsa":e.algorithm=L.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=L.publicKey.hmac;try{e.symmetric=L.write(L.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=L.publicKey.aead;try{e.symmetric=L.write(L.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function Ma(e,t,r){switch(e.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.dsa:case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ed25519:case L.publicKey.ed448:case L.publicKey.hmac:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.signData);default:return!1}}function Ta(e,t,r){switch(e.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.x25519:case L.publicKey.x448:case L.publicKey.aead:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&L.keyFlags.encryptStorage);default:return!1}}function La(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.x25519:case L.publicKey.x448:return!(!(!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&L.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&L.keyFlags.forwardedCommunication));default:return!1}}function _a(e,t){const r=L.write(L.publicKey,e.algorithm),i=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.rsaEncrypt:if(i.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ecdh:if(t.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class Na{constructor(e,t){this.userID=e.constructor.tag===L.packet.userID?e:null,this.userAttribute=e.constructor.tag===L.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new $s;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new Na(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new Na(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return Pa(n,e,s.keyPacket,{signatureType:L.signature.certGeneric,keyFlags:[L.keyFlags.certifyKeys|L.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,i=_){const n=this.mainKey.keyPacket;return xa(n,L.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,i)}async verifyCertificate(e,t,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,i);if(e.revoked||await n.isRevoked(e,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,L.signature.certGeneric,a,r,void 0,i)}catch(e){throw F.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(i,L.signature.certGeneric,n,e,void 0,t)}catch(e){throw F.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await Ua(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(i,L.signature.certGeneric,n,t,!1,r),!0}catch(e){return!1}})),await Ua(e,this,"otherCertifications",t),await Ua(e,this,"revocationSignatures",t,(function(e){return xa(i,L.signature.certRevocation,n,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=L.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=_){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new Na(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await Pa(s,null,e,{signatureType:L.signature.certRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class Fa{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new $s;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Fa(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,i=_){const n=this.mainKey.keyPacket;return xa(n,L.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verify(e=new Date,t=_){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await Ca(this.bindingSignatures,r,L.signature.subkeyBinding,i,e,t);if(n.revoked||await this.isRevoked(n,null,e,t))throw Error("Subkey is revoked");if(Ka(this.keyPacket,n,e))throw Error("Subkey is expired");return n}async getExpirationTime(e=new Date,t=_){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await Ca(this.bindingSignatures,r,L.signature.subkeyBinding,i,e,t)}catch(e){return null}const s=Qa(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=_){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===L.packet.publicSubkey&&e.keyPacket.constructor.tag===L.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await Ua(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<n.bindingSignatures.length;t++)if(n.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>n.bindingSignatures[t].created&&(n.bindingSignatures[t]=e),!1;try{return await e.verify(i,L.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await Ua(e,this,"revocationSignatures",t,(function(e){return xa(i,L.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=L.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=_){const s={key:e,bind:this.keyPacket},a=new Fa(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await Pa(s,null,e,{signatureType:L.signature.subkeyRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{Fa.prototype[e]=function(){return this.keyPacket[e]()}}));const Ha=/*#__PURE__*/F.constructAllowedPackets([Vs]),Oa=new Set([L.packet.publicKey,L.packet.privateKey]),za=new Set([L.packet.publicKey,L.packet.privateKey,L.packet.publicSubkey,L.packet.privateSubkey]);class Ga{packetListToStructure(e,t=new Set){let r,i,n,s;for(const a of e){if(a instanceof ai){za.has(a.tag)&&!s&&(s=Oa.has(a.tag)?Oa:za);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case L.packet.publicKey:case L.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case L.packet.userID:case L.packet.userAttribute:r=new Na(a,this),this.users.push(r);break;case L.packet.publicSubkey:case L.packet.secretSubkey:r=null,n=new Fa(a,this),this.subkeys.push(n);break;case L.packet.signature:switch(a.signatureType){case L.signature.certGeneric:case L.signature.certPersona:case L.signature.certCasual:case L.signature.certPositive:if(!r){F.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case L.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case L.signature.key:this.directSignatures.push(a);break;case L.signature.subkeyBinding:if(!n){F.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case L.signature.keyRevocation:this.revocationSignatures.push(a);break;case L.signature.subkeyRevocation:if(!n){F.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const e=new $s;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},i=_){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{_a(n,i)}catch(e){throw F.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await Ca(r.bindingSignatures,n,L.signature.subkeyBinding,e,t,i);if(!Ma(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await Ca([s.embeddedSignature],r.keyPacket,L.signature.keyBinding,e,t,i),_a(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Ma(n,s,i))return _a(n,i),this}catch(e){a=e}throw F.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},i=_){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{_a(n,i)}catch(e){throw F.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await Ca(r.bindingSignatures,n,L.signature.subkeyBinding,e,t,i);if(Ta(r.keyPacket,s,i))return _a(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Ta(n,s,i))return _a(n,i),this}catch(e){a=e}throw F.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,i=_){return xa(this.keyPacket,L.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verifyPrimaryKey(e=new Date,t={},r=_){const i=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(Ka(i,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==i.version){const t=await Ca(this.directSignatures,i,L.signature.key,{key:i},e,r).catch((()=>{}));if(t&&Ka(i,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=_){let r;try{const i=await this.getPrimarySelfSignature(null,e,t),n=Qa(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await Ca(this.directSignatures,this.keyPacket,L.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=Qa(this.keyPacket,a);r=Math.min(n,s,e)}else r=n<s?n:s}catch(e){r=null}return F.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=_){const i=this.keyPacket;if(6===i.version)return Ca(this.directSignatures,i,L.signature.key,{key:i},e,r);const{selfCertification:n}=await this.getPrimaryUser(e,t,r);return n}async getPrimaryUser(e=new Date,t={},r=_){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await Ca(s.selfCertifications,i,L.signature.certGeneric,o,e,r);n.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=n.sort((function(e,t){const r=e.selfCertification,i=t.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=_){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const i=this.clone();return await Ua(e,i,"revocationSignatures",t,(n=>xa(i.keyPacket,L.signature.keyRevocation,i,[n],null,e.keyPacket,t,r))),await Ua(e,i,"directSignatures",t),await Promise.all(e.users.map((async e=>{const n=i.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const n=i.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.subkeys.push(t)}}))),i}async getRevocationCertificate(e=new Date,t=_){const r={key:this.keyPacket},i=await Ca(this.revocationSignatures,this.keyPacket,L.signature.keyRevocation,r,e,t),n=new $s;n.push(i);const s=6!==this.keyPacket.version;return re(L.armor.publicKey,n.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=_){const i=await te(e),n=(await $s.fromBinary(i.data,Ha,r)).findPacket(L.packet.signature);if(!n||n.signatureType!==L.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,L.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw F.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(e,t,r,i=_){const{index:n,user:s}=await this.getPrimaryUser(t,r,i),a=await s.certify(e,t,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(e,t=new Date,r=_){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(e,t,r)}))),i}async verifyPrimaryUser(e,t=new Date,r,i=_){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,i);return e?await s.verifyAllCertifications(e,t,i):[{keyID:n.getKeyID(),valid:await s.verify(t,i).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=_){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:i.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];n.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{Ga.prototype[e]=Fa.prototype[e]}));class ja extends Ga{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([L.packet.secretKey,L.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=_){const t=6!==this.keyPacket.version;return re(L.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class qa extends ja{constructor(e){if(super(),this.packetListToStructure(e,new Set([L.packet.publicKey,L.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new $s,t=this.toPacketList();let r=!1;for(const i of t)if(!r||i.constructor.tag!==L.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case L.packet.secretKey:{if(i.algorithm===L.publicKey.aead||i.algorithm===L.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=ga.fromSecretKeyPacket(i);e.push(t);break}case L.packet.secretSubkey:{if(i.algorithm===L.publicKey.aead||i.algorithm===L.publicKey.hmac){r=!0;break}const t=Aa.fromSecretSubkeyPacket(i);e.push(t);break}default:e.push(i)}return new ja(e)}armor(e=_){const t=6!==this.keyPacket.version;return re(L.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},i=_){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0))try{const e={key:n,bind:this.subkeys[r].keyPacket},a=await Ca(this.subkeys[r].bindingSignatures,n,L.signature.subkeyBinding,e,t,i);La(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(e){}const a=await this.getPrimarySelfSignature(t,r,i);return e&&!n.getKeyID().equals(e,!0)||!La(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=_){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=L.reasonForRevocation.noReason,string:t=""}={},r=new Date,i=_){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await Pa(n,null,this.keyPacket,{signatureType:L.signature.keyRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,i)),s}async addSubkey(e={}){const t={..._,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(e){switch(L.write(L.publicKey,e)){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.dsa:return"rsa";case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:return"ecc";case L.publicKey.ed25519:return"curve25519";case L.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",e=Ra(e,i);const n=await Ba(e,{...t,v6Keys:6===this.keyPacket.version});_a(n,t);const s=await Da(n,r,e,t),a=this.toPacketList();return a.push(n,s),new qa(a)}}const Va=/*#__PURE__*/F.constructAllowedPackets([ga,Aa,ma,ka,Ea,wa,Vs]);function Ya(e){for(const t of e)switch(t.constructor.tag){case L.packet.secretKey:return new qa(e);case L.packet.publicKey:return new ja(e)}throw Error("No key packet found")}async function Ja(e,t,r,i){r.passphrase&&await e.encrypt(r.passphrase,i),await Promise.all(t.map((async function(e,t){const n=r.subkeys[t].passphrase;n&&await e.encrypt(n,i)})));const n=new $s;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[L.keyFlags.certifyKeys|L.keyFlags.signData];const n=s([L.symmetric.aes256,L.symmetric.aes128],i.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=n,i.aeadProtect){const e=s([L.aead.gcm,L.aead.eax,L.aead.ocb],i.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>n.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([L.hash.sha256,L.hash.sha512,...6===e.version?[L.hash.sha3_256,L.hash.sha3_512]:[]],i.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([L.compression.uncompressed,L.compression.zlib,L.compression.zip],i.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=L.features.modificationDetection,i.aeadProtect&&(t.features[0]|=L.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(n.push(e),6===e.version){const t={key:e},s=a();s.signatureType=L.signature.key;const o=await Pa(t,null,e,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(t,n){const s=Ea.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=L.signature.certGeneric,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await Pa(o,null,e,c,r.date,void 0,void 0,void 0,i)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{n.push(e),n.push(t)}))})),await Promise.all(t.map((async function(t,n){const s=r.subkeys[n];return{secretSubkeyPacket:t,subkeySignaturePacket:await Da(t,e,s,i)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{n.push(e),n.push(t)}))}));const o={key:e};return n.push(await Pa(o,null,e,{signatureType:L.signature.keyRevocation,reasonForRevocationFlag:L.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new qa(n)}const Wa=/*#__PURE__*/F.constructAllowedPackets([Os,ea,ua,oa,da,la,fa,Ws,Vs]),Za=/*#__PURE__*/F.constructAllowedPackets([fa]),$a=/*#__PURE__*/F.constructAllowedPackets([Vs]);class Xa{constructor(e){this.packets=e||new $s}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(L.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(L.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(L.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,i=new Date,n=_){const s=this.packets.filterByTag(L.packet.symmetricallyEncryptedData,L.packet.symEncryptedIntegrityProtectedData,L.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!F.isUint8Array(t)||!a.cipherAlgorithm&&!F.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||L.write(L.symmetric,e);await a.decrypt(r,t,n)}catch(e){F.printDebugError(e),h=e}})));if(x(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new Xa(a.packets);return a.packets=new $s,l}async decryptSessionKeys(e,t,r,i=new Date,n=_){let s,a=[];if(t){const e=this.packets.filterByTag(L.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let i;i=r?await $s.fromBinary(e.write(),Za,n):e,await Promise.all(i.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){F.printDebugError(e),e instanceof kn&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(L.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o=[L.symmetric.aes256,L.symmetric.aes128,L.symmetric.tripledes,L.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(i,void 0,n);t.preferredSymmetricAlgorithms&&(o=o.concat(t.preferredSymmetricAlgorithms))}catch(e){}const c=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,n)).map((e=>e.keyPacket));await Promise.all(c.map((async function(e){if(!e||e.isDummy())return;if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===L.publicKey.rsaEncrypt||t.publicKeyAlgorithm===L.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===L.publicKey.rsaSign||t.publicKeyAlgorithm===L.publicKey.elgamal)){const i=t.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new la;r.read(i);const n={sessionKeyAlgorithm:t,sessionKey:En.generateSessionKey(t)};try{await r.decrypt(e,n),a.push(r)}catch(e){F.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const i=r||t.sessionKeyAlgorithm;if(i&&!o.includes(L.write(L.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){F.printDebugError(e),s=e}})))}))),x(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+F.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&L.read(L.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],i=_){const{symmetricAlgo:n,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],i=_){const n=await Promise.all(e.map(((e,n)=>e.getPrimarySelfSignature(t,r[n],i))));if(e.length?!i.ignoreSEIPDv2FeatureFlag&&n.every((e=>e.features&&e.features[0]&L.features.seipdv2)):i.aeadProtect){const e={symmetricAlgo:L.symmetric.aes128,aeadAlgo:L.aead.ocb},t={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((e=>e.preferredCipherSuites&&e.preferredCipherSuites.some((e=>e[0]===t.symmetricAlgo&&e[1]===t.aeadAlgo))))?t:e}const s=L.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,i),a=L.read(L.symmetric,n),o=s?L.read(L.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===L.publicKey.x25519||e.keyPacket.algorithm===L.publicKey.x448)&&!o&&!F.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:En.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,i=!1,n=[],s=new Date,a=[],o=_){if(r){if(!F.isUint8Array(r.data)||!F.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Xa.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Xa.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await Xa.encryptSessionKey(c,h,u,e,t,i,n,s,a,o),y=oa.fromObject({version:u?2:1,aeadAlgorithm:u?L.write(L.aead,u):null});y.packets=this.packets;const f=L.write(L.symmetric,h);return await y.encrypt(f,c,o),l.packets.push(y),y.packets=new $s,l}static async encryptSessionKey(e,t,r,i,n,s=!1,a=[],o=new Date,c=[],h=_){const u=new $s,l=L.write(L.symmetric,t),y=r&&L.write(L.aead,r);if(i){const t=await Promise.all(i.map((async function(t,r){const i=await t.getEncryptionKey(a[r],o,c,h),n=la.fromObject({version:y?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...t)}if(n){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,i=async function(e,s,a,o){const c=new fa(h);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((e=>t(c,e))))).reduce(r))return i(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((t=>i(e,l,y,t))));u.push(...s)}return new Xa(u)}async sign(e=[],t=null,r=[],i=new Date,n=[],s=[],a=_){const o=new $s,c=this.packets.findPacket(L.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await eo(c,e,t,r,i,n,s,!1,a),u=h.map(((e,t)=>Ws.fromSignaturePacket(e,0===t))).reverse();return o.push(...u),o.push(c),o.push(...h),new Xa(o)}compress(e,t=_){if(e===L.compression.uncompressed)return this;const r=new ea(t);r.algorithm=e,r.packets=this.packets;const i=new $s;return i.push(r),new Xa(i)}async signDetached(e=[],t=null,r=[],i=new Date,n=[],s=[],a=_){const o=this.packets.findPacket(L.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new Ia(await eo(o,e,t,r,i,n,s,!0,a))}async verify(e,t=new Date,r=_){const i=this.unwrapCompressed(),n=i.packets.filterByTag(L.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");u(i.packets.stream)&&i.packets.push(...await U(i.packets.stream,(e=>e||[])));const s=i.packets.filterByTag(L.packet.onePassSignature).reverse(),a=i.packets.filterByTag(L.packet.signature);return s.length&&!a.length&&F.isStream(i.packets.stream)&&!u(i.packets.stream)?(await Promise.all(s.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=Q((async()=>(await e.correspondingSig).signatureData)),e.hashed=U(await e.hash(e.signatureType,n[0],void 0,!1)),e.hashed.catch((()=>{}))}))),i.packets.stream=B(i.packets.stream,(async(e,t)=>{const r=R(e),i=M(t);try{for(let e=0;e<s.length;e++){const{value:t}=await r.read();s[e].correspondingSigResolve(t)}await r.readToEnd(),await i.ready,await i.close()}catch(e){s.forEach((t=>{t.correspondingSigReject(e)})),await i.abort(e)}})),to(s,n,e,t,!1,r)):to(a,n,e,t,!1,r)}verifyDetached(e,t,r=new Date,i=_){const n=this.unwrapCompressed().packets.filterByTag(L.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return to(e.packets.filterByTag(L.packet.signature),n,t,r,!0,i)}unwrapCompressed(){const e=this.packets.filterByTag(L.packet.compressedData);return e.length?new Xa(e[0].packets):this}async appendSignature(e,t=_){await this.packets.read(F.isUint8Array(e)?e:(await te(e)).data,$a,t)}write(){return this.packets.write()}armor(e=_){const t=this.packets[this.packets.length-1],r=t.constructor.tag===oa.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===Vs.tag&&6!==e.version));return re(L.armor.message,this.write(),null,null,null,r,e)}}async function eo(e,t,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=_){const h=new $s,u=null===e.text?L.signature.binary:L.signature.text;if(await Promise.all(t.map((async(t,r)=>{const h=s[r];if(!t.isPrivate())throw Error("Need private key for signing");const l=await t.getSigningKey(i[r],n,h,c);return Pa(e,t,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((e=>{h.push(...e)})),r){const e=r.packets.filterByTag(L.packet.signature);h.push(...e)}return h}async function to(e,t,r,i=new Date,n=!1,s=_){return Promise.all(e.filter((function(e){return["text","binary"].includes(L.read(L.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,i=new Date,n=!1,s=_){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof Ws?e.correspondingSig:e,h={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new $s;return e&&t.push(e),new Ia(t)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(e,t,r,i,n,s)})))}const ro=/*#__PURE__*/F.constructAllowedPackets([Vs]);class io{constructor(e,t){if(this.text=F.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof Ia))throw Error("Invalid signature input");this.signature=t||new Ia(new $s)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=null,r=[],i=new Date,n=[],s=[],a=_){const o=new Os;o.setText(this.text);const c=new Ia(await eo(o,e,t,r,i,n,s,!0,a));return new io(this.text,c)}verify(e,t=new Date,r=_){const i=this.signature.packets.filterByTag(L.packet.signature),n=new Os;return n.setText(this.text),to(i,[n],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=_){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>L.read(L.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return re(L.armor.signed,r,void 0,void 0,void 0,t,e)}}function no(e){if(!(e instanceof Xa))throw Error("Parameter [message] needs to be of type Message")}function so(e){if(!(e instanceof io||e instanceof Xa))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function ao(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const oo=Object.keys(_).length;function co(e){const t=Object.keys(e);if(t.length!==oo)for(const e of t)if(void 0===_[e])throw Error("Unknown config property: "+e)}function ho(e){return e&&!F.isArray(e)&&(e=[e]),e}async function uo(e){return"array"===F.isStream(e)?U(e):e}function lo(e,t){e.data=B(t.packets.stream,(async(t,r)=>{await E(e.data,r,{preventClose:!0});const i=M(r);try{await U(t,(e=>e)),await i.close()}catch(e){await i.abort(e)}}))}function yo(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}function fo(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, not "+e)}function go(e,...t){if(!((r=e)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function po(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Ao(e,t){go(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const wo=s&&"object"==typeof s&&"webcrypto"in s?s.webcrypto:void 0,mo=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),bo=(e,t)=>e<<32-t|e>>>t,Eo=(e,t)=>e<<t|e>>>32-t>>>0,ko=68===new Uint8Array(new Uint32Array([287454020]).buffer)[0];
|
|
3
|
-
/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function vo(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function Io(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}function Bo(e){return"string"==typeof e&&(e=Io(e)),go(e),e}function So(...e){let t=0;for(let r=0;r<e.length;r++){const i=e[r];go(i),t+=i.length}const r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}class Co{clone(){return this._cloneInto()}}function Ko(e){const t=t=>e().update(Bo(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function Do(e=32){if(wo&&"function"==typeof wo.getRandomValues)return wo.getRandomValues(new Uint8Array(e));throw Error("crypto.getRandomValues must be defined")}class Po extends Co{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,function(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.wrapConstructor");fo(e.outputLen),fo(e.blockLen)}(e);const r=Bo(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const i=this.blockLen,n=new Uint8Array(i);n.set(r.length>i?e.create().update(r).digest():r);for(let e=0;e<n.length;e++)n[e]^=54;this.iHash.update(n),this.oHash=e.create();for(let e=0;e<n.length;e++)n[e]^=106;this.oHash.update(n),n.fill(0)}update(e){return po(this),this.iHash.update(e),this}digestInto(e){po(this),go(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:s,outputLen:a}=this;return e.finished=i,e.destroyed=n,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const Uo=(e,t,r)=>new Po(e,t).update(r).digest();Uo.create=(e,t)=>new Po(e,t)
|
|
4
|
-
/*! noble-
|
|
5
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com)
|
|
1
|
+
/*! OpenPGP.js v6.0.0-beta.2 - 2024-07-05 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
|
|
2
|
+
"use strict";const e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var t=require("module"),r=require("node:crypto"),i=require("crypto"),n="undefined"!=typeof document?document.currentScript:null;function s(e){var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var i=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,i.get?i:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var a=/*#__PURE__*/s(r),o=/*#__PURE__*/s(i);const c=Symbol("doneWritingPromise"),h=Symbol("doneWritingResolve"),u=Symbol("doneWritingReject"),l=Symbol("readingIndex");class ArrayStream extends Array{constructor(){super(),Object.setPrototypeOf(this,ArrayStream.prototype),this[c]=new Promise(((e,t)=>{this[h]=e,this[u]=t})),this[c].catch((()=>{}))}}function y(e){return e&&e.getReader&&Array.isArray(e)}function f(e){if(!y(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function g(t){if(y(t))return"array";if(e.ReadableStream&&e.ReadableStream.prototype.isPrototypeOf(t))return"web";if(t&&!(e.ReadableStream&&t instanceof e.ReadableStream)&&"function"==typeof t._read&&"object"==typeof t._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!t||!t.getReader)&&"web-like"}function p(e){return Uint8Array.prototype.isPrototypeOf(e)}function d(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!p(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((function(e){r.set(e,i),i+=e.length})),r}ArrayStream.prototype.getReader=function(){return void 0===this[l]&&(this[l]=0),{read:async()=>(await this[c],this[l]===this.length?{value:void 0,done:!0}:{value:this[this[l]++],done:!1})}},ArrayStream.prototype.readToEnd=async function(e){await this[c];const t=e(this.slice(this[l]));return this.length=0,t},ArrayStream.prototype.clone=function(){const e=new ArrayStream;return e[c]=this[c].then((()=>{e.push(...this)})),e},f.prototype.write=async function(e){this.stream.push(e)},f.prototype.close=async function(){this.stream[h]()},f.prototype.abort=async function(e){return this.stream[u](e),e},f.prototype.releaseLock=function(){},"object"==typeof e.process&&e.process.versions;const A=new WeakSet,w=Symbol("externalBuffer");function m(e){if(this.stream=e,e[w]&&(this[w]=e[w].slice()),y(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(g(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||A.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{A.add(e)}catch(e){}}}function b(e){return g(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function E(e){if(g(e))return e;const t=new ArrayStream;return(async()=>{const r=L(t);await r.write(e),await r.close()})(),t}function k(e){return e.some((e=>g(e)&&!y(e)))?function(e){e=e.map(b);const t=I((async function(e){await Promise.all(i.map((t=>R(t,e))))}));let r=Promise.resolve();const i=e.map(((i,n)=>C(i,((i,s)=>(r=r.then((()=>v(i,t.writable,{preventClose:n!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>y(e)))?function(e){const t=new ArrayStream;let r=Promise.resolve();return e.forEach(((i,n)=>(r=r.then((()=>v(i,t,{preventClose:n!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):d(e)}async function v(e,t,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(g(e)&&!y(e)){e=b(e);try{if(e[w]){const r=L(t);for(let t=0;t<e[w].length;t++)await r.ready,await r.write(e[w][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:i,preventCancel:n})}catch(e){}return}const s=T(e=E(e)),a=L(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){i||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function B(e,t){const r=new TransformStream(t);return v(e,r.writable),r.readable}function I(e){let t,r,i,n=!1,s=!1;return{readable:new ReadableStream({start(e){i=e},pull(){t?t():n=!0},async cancel(t){s=!0,e&&await e(t),r&&r(t)}},{highWaterMark:0}),writable:new WritableStream({write:async function(e){if(s)throw Error("Stream is cancelled");i.enqueue(e),n?n=!1:(await new Promise(((e,i)=>{t=e,r=i})),t=null,r=null)},close:i.close.bind(i),abort:i.error.bind(i)})}}function S(e,t=(()=>{}),r=(()=>{})){if(y(e)){const i=new ArrayStream;return(async()=>{const n=L(i);try{const i=await Q(e),s=t(i),a=r();let o;o=void 0!==s&&void 0!==a?k([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(e){await n.abort(e)}})(),i}if(g(e))return B(e,{async transform(e,r){try{const i=await t(e);void 0!==i&&r.enqueue(i)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const i=t(e),n=r();return void 0!==i&&void 0!==n?k([i,n]):void 0!==i?i:n}function C(e,t){if(g(e)&&!y(e)){let r;const i=new TransformStream({start(e){r=e}}),n=v(e,i.writable),s=I((async function(e){r.error(e),await n,await new Promise(setTimeout)}));return t(i.readable,s.writable),s.readable}e=E(e);const r=new ArrayStream;return t(e,r),r}function K(e,t){let r;const i=C(e,((e,n)=>{const s=T(e);s.remainder=()=>(s.releaseLock(),v(e,n),i),r=t(s)}));return r}function P(e){if(y(e))return e.clone();if(g(e)){const t=function(e){if(y(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(g(e)){const t=b(e).tee();return t[0][w]=t[1][w]=e[w],t}return[x(e),x(e)]}(e);return U(e,t[0]),t[1]}return x(e)}function D(e){return y(e)?P(e):g(e)?new ReadableStream({start(t){const r=C(e,(async(e,r)=>{const i=T(e),n=L(r);try{for(;;){await n.ready;const{done:e,value:r}=await i.read();if(e){try{t.close()}catch(e){}return void await n.close()}try{t.enqueue(r)}catch(e){}await n.write(r)}}catch(e){t.error(e),await n.abort(e)}}));U(e,r)}}):x(e)}function U(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(t):i.get=i.get.bind(t),Object.defineProperty(e,r,i))}))}function x(e,t=0,r=1/0){if(y(e))throw Error("Not implemented");if(g(e)){if(t>=0&&r>=0){let i=0;return B(e,{transform(e,n){i<r?(i+e.length>=t&&n.enqueue(x(e,Math.max(t-i,0),r-i)),i+=e.length):n.terminate()}})}if(t<0&&(r<0||r===1/0)){let i=[];return S(e,(e=>{e.length>=-t?i=[e]:i.push(e)}),(()=>x(k(i),t,r)))}if(0===t&&r<0){let i;return S(e,(e=>{const n=i?k([i,e]):e;if(n.length>=-r)return i=x(n,r),x(n,t,r);i=n}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),M((async()=>x(await Q(e),t,r)))}return e[w]&&(e=k(e[w].concat([e]))),p(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function Q(e,t=k){return y(e)?e.readToEnd(t):g(e)?T(e).readToEnd(t):e}async function R(e,t){if(g(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function M(e){const t=new ArrayStream;return(async()=>{const r=L(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function T(e){return new m(e)}function L(e){return new f(e)}m.prototype.read=async function(){if(this[w]&&this[w].length){return{done:!1,value:this[w].shift()}}return this._read()},m.prototype.releaseLock=function(){this[w]&&(this.stream[w]=this[w]),this._releaseLock()},m.prototype.cancel=function(e){return this._cancel(e)},m.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:i}=await this.read();if(i+="",r)return t.length?k(t):void 0;const n=i.indexOf("\n")+1;n&&(e=k(t.concat(i.substr(0,n))),t=[]),n!==i.length&&t.push(i.substr(n))}return this.unshift(...t),e},m.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(x(t,1)),r},m.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return t.length?k(t):void 0;if(t.push(n),r+=n.length,r>=e){const r=k(t);return this.unshift(x(r,e)),x(r,0,e)}}},m.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},m.prototype.unshift=function(...e){this[w]||(this[w]=[]),1===e.length&&p(e[0])&&this[w].length&&e[0].length&&this[w][0].byteOffset>=e[0].length?this[w][0]=new Uint8Array(this[w][0].buffer,this[w][0].byteOffset-e[0].length,this[w][0].byteLength+e[0].length):this[w].unshift(...e.filter((e=>e&&e.length)))},m.prototype.readToEnd=async function(e=k){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const _=Symbol("byValue");var F={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[_]||(e[_]=[],Object.entries(e).forEach((([t,r])=>{e[_][r]=t}))),void 0!==e[_][t])return e[_][t];throw Error("Invalid enum value.")}},N={preferredHashAlgorithm:F.hash.sha256,preferredSymmetricAlgorithm:F.symmetric.aes256,preferredCompressionAlgorithm:F.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:F.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,enableParsingV5Entities:!1,s2kType:F.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([F.symmetric.aes128,F.symmetric.aes192,F.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.2",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([F.hash.md5,F.hash.ripemd]),rejectMessageHashAlgorithms:new Set([F.hash.md5,F.hash.ripemd,F.hash.sha1]),rejectPublicKeyAlgorithms:new Set([F.publicKey.elgamal,F.publicKey.dsa]),rejectCurves:new Set([F.curve.secp256k1])};const H=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),O={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:t.createRequire("undefined"==typeof document?require("url").pathToFileURL(__filename).href:n&&n.src||new URL("openpgp.min.cjs",document.baseURI).href),isArray:function(e){return e instanceof Array},isUint8Array:p,isStream:g,getNobleCurve:async(e,t)=>{if(!N.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return ul}));switch(e){case F.publicKey.ecdh:case F.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case F.publicKey.x448:return r.get("x448");case F.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let i=0;i<t;i++)r[i]=e>>8*(t-i-1)&255;return r},readDate:function(e){const t=O.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return O.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return O.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){const r=new Uint8Array(t),i=t-e.length;return r.set(e,i),r},uint8ArrayToMPI:function(e){const t=O.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),i=new Uint8Array([(65280&t)>>8,255&t]);return O.concatUint8Array([i,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+O.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return S(e,(e=>{if(!O.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,i=(e=new Uint8Array(e)).length;for(let n=0;n<i;n+=r)t.push(String.fromCharCode.apply(String,e.subarray(n,n+r<i?n+r:i)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return S(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return S(e,r,(()=>r(new Uint8Array,!0)))},concat:k,concatUint8Array:d,equalsUint8Array:function(e,t){if(!O.isUint8Array(e)||!O.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return O.writeNumber(t,2)},printDebug:function(e){H&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){H&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let i=0;i<r;i++)t[i]=e[i]<<1^e[i+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const t=void 0!==e&&e.crypto&&e.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!t)throw Error("The WebCrypto API is not available");return t},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!O.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return S(e,(e=>{let r;t&&(e=O.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const i=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&i.push(r);if(!i.length)return e;const n=new Uint8Array(e.length+i.length);let s=0;for(let t=0;t<i.length;t++){const r=e.subarray(i[t-1]||0,i[t]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(e.subarray(i[i.length-1]||0),s),n}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return S(e,(e=>{let r;13===(e=t&&10!==e[0]?O.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let i=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const n=r-(10===e[r]?1:0);t&&e.copyWithin(i,t,n),i+=n-t}return e.subarray(0,i)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return Error(e);try{t.message=e+": "+t.message}catch(e){}return t},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let i;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){i=e}}))),r(i)}))},selectUint8Array:function(e,t,r){const i=Math.max(t.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=t[i]&256-e|r[i]&255+e,s+=e&i<t.length|1-e&i<r.length;return n.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===F.symmetric.aes128||e===F.symmetric.aes192||e===F.symmetric.aes256}},z=O.getNodeBuffer();let G,q;function j(e){let t=new Uint8Array;return S(e,(e=>{t=O.concatUint8Array([t,e]);const r=[],i=Math.floor(t.length/45),n=45*i,s=G(t.subarray(0,n));for(let e=0;e<i;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(n),r.join("")}),(()=>t.length?G(t)+"\n":""))}function V(e){let t="";return S(e,(e=>{t+=e;let r=0;const i=[" ","\t","\r","\n"];for(let e=0;e<i.length;e++){const n=i[e];for(let e=t.indexOf(n);-1!==e;e=t.indexOf(n,e+1))r++}let n=t.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(t[n])&&r--;const s=q(t.substr(0,n));return t=t.substr(n),s}),(()=>q(t)))}function Y(e){return V(e.replace(/-/g,"+").replace(/_/g,"/"))}function Z(e,t){let r=j(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function J(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?F.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?F.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?F.armor.signed:/MESSAGE/.test(t[1])?F.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?F.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?F.armor.privateKey:/SIGNATURE/.test(t[1])?F.armor.signature:void 0}function W(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function $(e){const t=function(e){let t=13501623;return S(e,(e=>{const r=ee?Math.floor(e.length/4):0,i=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=i[e],t=X[0][t>>24&255]^X[1][t>>16&255]^X[2][t>>8&255]^X[3][255&t];for(let i=4*r;i<e.length;i++)t=t>>8^X[0][255&t^e[i]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return j(t)}z?(G=e=>z.from(e).toString("base64"),q=e=>{const t=z.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(G=e=>btoa(O.uint8ArrayToString(e)),q=e=>O.stringToUint8Array(atob(e)));const X=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);X[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)X[1][e]=X[0][e]>>8^X[0][255&X[0][e]];for(let e=0;e<=255;e++)X[2][e]=X[1][e]>>8^X[0][255&X[1][e]];for(let e=0;e<=255;e++)X[3][e]=X[2][e]>>8^X[0][255&X[2][e]];const ee=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function te(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||O.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||O.printDebugError(Error("Unknown header: "+e[t]))}function re(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function ie(e){return new Promise((async(t,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=V(C(e,(async(e,y)=>{const f=T(e);try{for(;;){let e=await f.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=O.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==F.armor.signed||(i.test(e)?(u=u.join("\r\n"),c=!0,te(h),h=[],o=!1):u.push(e.replace(/^- /,"")));else if(i.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(e)){if(te(h),o=!0,c||s!==F.armor.signed){t({text:u,data:l,headers:a,type:s});break}}else h.push(e);else i.test(e)&&(s=J(e))}}catch(e){return void r(e)}const g=L(y);try{for(;;){await g.ready;const{done:e,value:t}=await f.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await f.readToEnd();e.length||(e=""),e=r+e,e=O.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(i);if(1===t.length)throw Error("Misformed armored text");const n=re(t[0].slice(0,-1));await g.write(n);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}})))}catch(e){r(e)}})).then((async e=>(y(e.data)&&(e.data=await Q(e.data)),e)))}function ne(e,t,r,i,n,s=!1,a=N){let o,c;e===F.armor.signed&&(o=t.text,c=t.hash,t=t.data);const h=s&&D(t),u=[];switch(e){case F.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case F.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case F.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP SIGNATURE-----\n");break;case F.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP MESSAGE-----\n");break;case F.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case F.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case F.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP SIGNATURE-----\n")}return O.concat(u)}async function se(e){switch(e){case F.symmetric.aes128:case F.symmetric.aes192:case F.symmetric.aes256:throw Error("Not a legacy cipher");case F.symmetric.cast5:case F.symmetric.blowfish:case F.symmetric.twofish:case F.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return Il})),r=t.get(e);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function ae(e){switch(e){case F.symmetric.aes128:case F.symmetric.aes192:case F.symmetric.aes256:case F.symmetric.twofish:return 16;case F.symmetric.blowfish:case F.symmetric.cast5:case F.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function oe(e){switch(e){case F.symmetric.aes128:case F.symmetric.blowfish:case F.symmetric.cast5:return 16;case F.symmetric.aes192:case F.symmetric.tripledes:return 24;case F.symmetric.aes256:case F.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function ce(e){return{keySize:oe(e),blockSize:ae(e)}}var he=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:ce,getLegacyCipher:se});function ue(e,t){let r=e[0],i=e[1],n=e[2],s=e[3];r=ye(r,i,n,s,t[0],7,-680876936),s=ye(s,r,i,n,t[1],12,-389564586),n=ye(n,s,r,i,t[2],17,606105819),i=ye(i,n,s,r,t[3],22,-1044525330),r=ye(r,i,n,s,t[4],7,-176418897),s=ye(s,r,i,n,t[5],12,1200080426),n=ye(n,s,r,i,t[6],17,-1473231341),i=ye(i,n,s,r,t[7],22,-45705983),r=ye(r,i,n,s,t[8],7,1770035416),s=ye(s,r,i,n,t[9],12,-1958414417),n=ye(n,s,r,i,t[10],17,-42063),i=ye(i,n,s,r,t[11],22,-1990404162),r=ye(r,i,n,s,t[12],7,1804603682),s=ye(s,r,i,n,t[13],12,-40341101),n=ye(n,s,r,i,t[14],17,-1502002290),i=ye(i,n,s,r,t[15],22,1236535329),r=fe(r,i,n,s,t[1],5,-165796510),s=fe(s,r,i,n,t[6],9,-1069501632),n=fe(n,s,r,i,t[11],14,643717713),i=fe(i,n,s,r,t[0],20,-373897302),r=fe(r,i,n,s,t[5],5,-701558691),s=fe(s,r,i,n,t[10],9,38016083),n=fe(n,s,r,i,t[15],14,-660478335),i=fe(i,n,s,r,t[4],20,-405537848),r=fe(r,i,n,s,t[9],5,568446438),s=fe(s,r,i,n,t[14],9,-1019803690),n=fe(n,s,r,i,t[3],14,-187363961),i=fe(i,n,s,r,t[8],20,1163531501),r=fe(r,i,n,s,t[13],5,-1444681467),s=fe(s,r,i,n,t[2],9,-51403784),n=fe(n,s,r,i,t[7],14,1735328473),i=fe(i,n,s,r,t[12],20,-1926607734),r=ge(r,i,n,s,t[5],4,-378558),s=ge(s,r,i,n,t[8],11,-2022574463),n=ge(n,s,r,i,t[11],16,1839030562),i=ge(i,n,s,r,t[14],23,-35309556),r=ge(r,i,n,s,t[1],4,-1530992060),s=ge(s,r,i,n,t[4],11,1272893353),n=ge(n,s,r,i,t[7],16,-155497632),i=ge(i,n,s,r,t[10],23,-1094730640),r=ge(r,i,n,s,t[13],4,681279174),s=ge(s,r,i,n,t[0],11,-358537222),n=ge(n,s,r,i,t[3],16,-722521979),i=ge(i,n,s,r,t[6],23,76029189),r=ge(r,i,n,s,t[9],4,-640364487),s=ge(s,r,i,n,t[12],11,-421815835),n=ge(n,s,r,i,t[15],16,530742520),i=ge(i,n,s,r,t[2],23,-995338651),r=pe(r,i,n,s,t[0],6,-198630844),s=pe(s,r,i,n,t[7],10,1126891415),n=pe(n,s,r,i,t[14],15,-1416354905),i=pe(i,n,s,r,t[5],21,-57434055),r=pe(r,i,n,s,t[12],6,1700485571),s=pe(s,r,i,n,t[3],10,-1894986606),n=pe(n,s,r,i,t[10],15,-1051523),i=pe(i,n,s,r,t[1],21,-2054922799),r=pe(r,i,n,s,t[8],6,1873313359),s=pe(s,r,i,n,t[15],10,-30611744),n=pe(n,s,r,i,t[6],15,-1560198380),i=pe(i,n,s,r,t[13],21,1309151649),r=pe(r,i,n,s,t[4],6,-145523070),s=pe(s,r,i,n,t[11],10,-1120210379),n=pe(n,s,r,i,t[2],15,718787259),i=pe(i,n,s,r,t[9],21,-343485551),e[0]=me(r,e[0]),e[1]=me(i,e[1]),e[2]=me(n,e[2]),e[3]=me(s,e[3])}function le(e,t,r,i,n,s){return t=me(me(t,e),me(i,s)),me(t<<n|t>>>32-n,r)}function ye(e,t,r,i,n,s,a){return le(t&r|~t&i,e,t,n,s,a)}function fe(e,t,r,i,n,s,a){return le(t&i|r&~i,e,t,n,s,a)}function ge(e,t,r,i,n,s,a){return le(t^r^i,e,t,n,s,a)}function pe(e,t,r,i,n,s,a){return le(r^(t|~i),e,t,n,s,a)}function de(e){const t=[];let r;for(r=0;r<64;r+=4)t[r>>2]=e.charCodeAt(r)+(e.charCodeAt(r+1)<<8)+(e.charCodeAt(r+2)<<16)+(e.charCodeAt(r+3)<<24);return t}const Ae="0123456789abcdef".split("");function we(e){let t="",r=0;for(;r<4;r++)t+=Ae[e>>8*r+4&15]+Ae[e>>8*r&15];return t}function me(e,t){return e+t&4294967295}const be=O.getWebCrypto(),Ee=O.getNodeCrypto(),ke=Ee&&Ee.getHashes();function ve(e){if(Ee&&ke.includes(e))return async function(t){const r=Ee.createHash(e);return S(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function Be(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return Gl})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(y(e)&&(e=await Q(e)),O.isStream(e)){const t=(await r()).create();return S(e,(e=>{t.update(e)}),(()=>t.digest()))}if(be&&t)return new Uint8Array(await be.digest(t,e));return(await r())(e)}}var Ie={md5:ve("md5")||async function(e){const t=function(e){const t=e.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=e.length;i+=64)ue(r,de(e.substring(i-64,i)));e=e.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<e.length;i++)n[i>>2]|=e.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(ue(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*t,ue(r,n),r}(O.uint8ArrayToString(e));return O.hexToUint8Array(function(e){for(let t=0;t<e.length;t++)e[t]=we(e[t]);return e.join("")}(t))},sha1:ve("sha1")||Be("sha1","SHA-1"),sha224:ve("sha224")||Be("sha224"),sha256:ve("sha256")||Be("sha256","SHA-256"),sha384:ve("sha384")||Be("sha384","SHA-384"),sha512:ve("sha512")||Be("sha512","SHA-512"),ripemd:ve("ripemd160")||Be("ripemd160"),sha3_256:ve("sha3-256")||Be("sha3_256"),sha3_512:ve("sha3-512")||Be("sha3_512"),digest:function(e,t){switch(e){case F.hash.md5:return this.md5(t);case F.hash.sha1:return this.sha1(t);case F.hash.ripemd:return this.ripemd(t);case F.hash.sha256:return this.sha256(t);case F.hash.sha384:return this.sha384(t);case F.hash.sha512:return this.sha512(t);case F.hash.sha224:return this.sha224(t);case F.hash.sha3_256:return this.sha3_256(t);case F.hash.sha3_512:return this.sha3_512(t);default:throw Error("Unsupported hash function")}},getHashByteLength:function(e){switch(e){case F.hash.md5:return 16;case F.hash.sha1:case F.hash.ripemd:return 20;case F.hash.sha256:return 32;case F.hash.sha384:return 48;case F.hash.sha512:return 64;case F.hash.sha224:return 28;case F.hash.sha3_256:return 32;case F.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(e){switch(e){case F.hash.md5:case F.hash.sha1:case F.hash.ripemd:case F.hash.sha224:case F.hash.sha256:return 64;case F.hash.sha384:case F.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}},Se=function(){var e,t,r=!1;function i(r,i){var n=e[(t[r]+t[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=e[255-t[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){e=[],t=[];var i,n,s=1;for(i=0;i<255;i++)e[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=e[i],t[e[i]]=i;e[255]=e[0],t[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var y=1;y<4;y++)a[y][u]=a[y-1][u]>>>8|a[y-1][u]<<24,o[y][l]=o[y-1][l]>>>8|o[y-1][l]<<24}c=!0}var u=function(e,t){c||h();var r=new Uint32Array(t);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(e,t,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0;var B=new e.Uint32Array(r),I=new e.Uint8Array(r);function S(e,t,r,o,c,h,u,l){e=e|0;t=t|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0;y=r|0x400,f=r|0x800,g=r|0xc00;c=c^B[(e|0)>>2],h=h^B[(e|4)>>2],u=u^B[(e|8)>>2],l=l^B[(e|12)>>2];for(m=16;(m|0)<=o<<4;m=m+16|0){p=B[(r|c>>22&1020)>>2]^B[(y|h>>14&1020)>>2]^B[(f|u>>6&1020)>>2]^B[(g|l<<2&1020)>>2]^B[(e|m|0)>>2],d=B[(r|h>>22&1020)>>2]^B[(y|u>>14&1020)>>2]^B[(f|l>>6&1020)>>2]^B[(g|c<<2&1020)>>2]^B[(e|m|4)>>2],A=B[(r|u>>22&1020)>>2]^B[(y|l>>14&1020)>>2]^B[(f|c>>6&1020)>>2]^B[(g|h<<2&1020)>>2]^B[(e|m|8)>>2],w=B[(r|l>>22&1020)>>2]^B[(y|c>>14&1020)>>2]^B[(f|h>>6&1020)>>2]^B[(g|u<<2&1020)>>2]^B[(e|m|12)>>2];c=p,h=d,u=A,l=w}i=B[(t|c>>22&1020)>>2]<<24^B[(t|h>>14&1020)>>2]<<16^B[(t|u>>6&1020)>>2]<<8^B[(t|l<<2&1020)>>2]^B[(e|m|0)>>2],n=B[(t|h>>22&1020)>>2]<<24^B[(t|u>>14&1020)>>2]<<16^B[(t|l>>6&1020)>>2]<<8^B[(t|c<<2&1020)>>2]^B[(e|m|4)>>2],s=B[(t|u>>22&1020)>>2]<<24^B[(t|l>>14&1020)>>2]<<16^B[(t|c>>6&1020)>>2]<<8^B[(t|h<<2&1020)>>2]^B[(e|m|8)>>2],a=B[(t|l>>22&1020)>>2]<<24^B[(t|c>>14&1020)>>2]<<16^B[(t|h>>6&1020)>>2]<<8^B[(t|u<<2&1020)>>2]^B[(e|m|12)>>2]}function C(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;S(0x0000,0x0800,0x1000,v,e,t,r,i)}function K(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var s=0;S(0x0400,0x0c00,0x2000,v,e,i,r,t);s=n,n=a,a=s}function P(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o^e,c^t,h^r,u^l);o=i,c=n,h=s,u=a}function D(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;var y=0;S(0x0400,0x0c00,0x2000,v,e,l,r,t);y=n,n=a,a=y;i=i^o,n=n^c,s=s^h,a=a^u;o=e,c=t,h=r,u=l}function U(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i=i^e,c=n=n^t,h=s=s^r,u=a=a^l}function x(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);i=i^e,n=n^t,s=s^r,a=a^l;o=e,c=t,h=r,u=l}function Q(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i,c=n,h=s,u=a;i=i^e,n=n^t,s=s^r,a=a^l}function R(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;S(0x0000,0x0800,0x1000,v,l,y,f,g);g=~w&g|w&g+1;f=~A&f|A&f+((g|0)==0);y=~d&y|d&y+((f|0)==0);l=~p&l|p&l+((y|0)==0);i=i^e;n=n^t;s=s^r;a=a^o}function M(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0;e=e^o,t=t^c,r=r^h,i=i^u;n=m|0,s=b|0,a=E|0,l=k|0;for(;(d|0)<128;d=d+1|0){if(n>>>31){y=y^e,f=f^t,g=g^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;A=i&1;i=i>>>1|r<<31,r=r>>>1|t<<31,t=t>>>1|e<<31,e=e>>>1;if(A)e=e^0xe1000000}o=y,c=f,h=g,u=p}function T(e){e=e|0;v=e}function L(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;i=e,n=t,s=r,a=o}function _(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;o=e,c=t,h=r,u=i}function F(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;l=e,y=t,f=r,g=i}function N(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;p=e,d=t,A=r,w=i}function H(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;g=~w&g|w&i,f=~A&f|A&r,y=~d&y|d&t,l=~p&l|p&e}function O(e){e=e|0;if(e&15)return-1;I[e|0]=i>>>24,I[e|1]=i>>>16&255,I[e|2]=i>>>8&255,I[e|3]=i&255,I[e|4]=n>>>24,I[e|5]=n>>>16&255,I[e|6]=n>>>8&255,I[e|7]=n&255,I[e|8]=s>>>24,I[e|9]=s>>>16&255,I[e|10]=s>>>8&255,I[e|11]=s&255,I[e|12]=a>>>24,I[e|13]=a>>>16&255,I[e|14]=a>>>8&255,I[e|15]=a&255;return 16}function z(e){e=e|0;if(e&15)return-1;I[e|0]=o>>>24,I[e|1]=o>>>16&255,I[e|2]=o>>>8&255,I[e|3]=o&255,I[e|4]=c>>>24,I[e|5]=c>>>16&255,I[e|6]=c>>>8&255,I[e|7]=c&255,I[e|8]=h>>>24,I[e|9]=h>>>16&255,I[e|10]=h>>>8&255,I[e|11]=h&255,I[e|12]=u>>>24,I[e|13]=u>>>16&255,I[e|14]=u>>>8&255,I[e|15]=u&255;return 16}function G(){C(0,0,0,0);m=i,b=n,E=s,k=a}function q(e,t,r){e=e|0;t=t|0;r=r|0;var o=0;if(t&15)return-1;while((r|0)>=16){V[e&7](I[t|0]<<24|I[t|1]<<16|I[t|2]<<8|I[t|3],I[t|4]<<24|I[t|5]<<16|I[t|6]<<8|I[t|7],I[t|8]<<24|I[t|9]<<16|I[t|10]<<8|I[t|11],I[t|12]<<24|I[t|13]<<16|I[t|14]<<8|I[t|15]);I[t|0]=i>>>24,I[t|1]=i>>>16&255,I[t|2]=i>>>8&255,I[t|3]=i&255,I[t|4]=n>>>24,I[t|5]=n>>>16&255,I[t|6]=n>>>8&255,I[t|7]=n&255,I[t|8]=s>>>24,I[t|9]=s>>>16&255,I[t|10]=s>>>8&255,I[t|11]=s&255,I[t|12]=a>>>24,I[t|13]=a>>>16&255,I[t|14]=a>>>8&255,I[t|15]=a&255;o=o+16|0,t=t+16|0,r=r-16|0}return o|0}function j(e,t,r){e=e|0;t=t|0;r=r|0;var i=0;if(t&15)return-1;while((r|0)>=16){Y[e&1](I[t|0]<<24|I[t|1]<<16|I[t|2]<<8|I[t|3],I[t|4]<<24|I[t|5]<<16|I[t|6]<<8|I[t|7],I[t|8]<<24|I[t|9]<<16|I[t|10]<<8|I[t|11],I[t|12]<<24|I[t|13]<<16|I[t|14]<<8|I[t|15]);i=i+16|0,t=t+16|0,r=r-16|0}return i|0}var V=[C,K,P,D,U,x,Q,R];var Y=[P,M];return{set_rounds:T,set_state:L,set_iv:_,set_nonce:F,set_mask:N,set_counter:H,get_state:O,get_iv:z,gcm_init:G,cipher:q,mac:j}}({Uint8Array,Uint32Array},e,t);return u.set_key=function(e,t,i,s,a,c,h,l,y){var f=r.subarray(0,60),g=r.subarray(256,316);f.set([t,i,s,a,c,h,l,y]);for(var p=e,d=1;p<4*e+28;p++){var A=f[p-1];(p%e==0||8===e&&p%e==4)&&(A=n[A>>>24]<<24^n[A>>>16&255]<<16^n[A>>>8&255]<<8^n[255&A]),p%e==0&&(A=A<<8^A>>>24^d<<24,d=d<<1^(128&d?27:0)),f[p]=f[p-e]^A}for(var w=0;w<p;w+=4)for(var m=0;m<4;m++){A=f[p-(4+w)+(4-m)%4];g[w+m]=w<4||w>=p-4?A:o[0][n[A>>>24]]^o[1][n[A>>>16&255]]^o[2][n[A>>>8&255]]^o[3][n[255&A]]}u.set_rounds(e+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function Ce(e){return e instanceof Uint8Array}function Ke(e,t,r,i,n){const s=e.length-t,a=s<n?s:n;return e.set(r.subarray(i,i+a),t),a}function Pe(...e){const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);let i=0;for(let t=0;t<e.length;t++)r.set(e[t],i),i+=e[t].length;return r}class De extends Error{constructor(...e){super(...e)}}class Ue extends Error{constructor(...e){super(...e)}}class xe extends Error{constructor(...e){super(...e)}}const Qe=[],Re=[];class Me{constructor(e,t,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=e,this.iv=t,this.padding=r,this.acquire_asm(n,s)}acquire_asm(e,t){return void 0!==this.heap&&void 0!==this.asm||(this.heap=e||Qe.pop()||function(e,t){const r=e?e.byteLength:65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return e||new Uint8Array(new ArrayBuffer(r))}().subarray(Se.HEAP_DATA),this.asm=t||Re.pop()||new Se(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(Qe.push(this.heap),Re.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(e,t){const{asm:r}=this.acquire_asm(),i=e.length;if(16!==i&&24!==i&&32!==i)throw new Ue("illegal key size");const n=new DataView(e.buffer,e.byteOffset,e.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==t){if(16!==t.length)throw new Ue("illegal iv size");let e=new DataView(t.buffer,t.byteOffset,t.byteLength);r.set_iv(e.getUint32(0),e.getUint32(4),e.getUint32(8),e.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(e){if(!Ce(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=Se.ENC[this.mode],n=Se.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=Ke(t,s+a,e,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(t.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=Se.ENC[this.mode],i=Se.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let t=0;t<a;++t)e[n+s+t]=a;s+=a,o=s}else if(s%16)throw new Ue("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&t.cipher(r,i+n,s),o&&c.set(e.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(e){if(!Ce(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=Se.DEC[this.mode],n=Se.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=a+c&-16,l=0,y=0;this.padding&&(l=a+c-u||16,u-=l);const f=new Uint8Array(u);for(;c>0;)y=Ke(t,s+a,e,o,c),a+=y,o+=y,c-=y,y=r.cipher(i,n+s,a-(c?0:l)),y&&f.set(t.subarray(s,s+y),h),h+=y,y<a?(s+=y,a-=y):(s=0,a=0);return this.pos=s,this.len=a,f}AES_Decrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=Se.DEC[this.mode],i=Se.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new Ue("data length must be a multiple of the block size");s+=16-s%16}if(t.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let t=e[n+a-1];if(t<1||t>16||t>a)throw new xe("bad padding");let r=0;for(let i=t;i>1;i--)r|=t^e[n+a-i];if(r)throw new xe("bad padding");a-=t}}const o=new Uint8Array(a);return a>0&&o.set(e.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class Te{static encrypt(e,t,r){return new Te(t,r).encrypt(e)}static decrypt(e,t,r){return new Te(t,r).decrypt(e)}constructor(e,t,r){this.aes=r||new Me(e,t,!0,"CFB"),delete this.aes.padding}encrypt(e){return Pe(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Pe(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const Le=O.getWebCrypto(),_e=O.getNodeCrypto(),Fe=_e?_e.getCiphers():[],Ne={idea:Fe.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Fe.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Fe.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Fe.includes("bf-cfb")?"bf-cfb":void 0,aes128:Fe.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Fe.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Fe.includes("aes-256-cfb")?"aes-256-cfb":void 0};class He{constructor(e,t,r){const{blockSize:i}=ce(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=ce(e);return Le.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Le.importKey("raw",this.key,r,!1,["encrypt"]);const i=await Le.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(i).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,i=O.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),n=O.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return Oe(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(e.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const t=this.nextBlock;i=await this._runCBC(this.prevBlock),Oe(i,t),this.prevBlock=i.slice(),this.i=0;const n=e.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);Oe(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(O.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return Oe(t,e),this.clearSensitiveData(),t}}function Oe(e,t){const r=Math.min(e.length,t.length);for(let i=0;i<r;i++)e[i]=e[i]^t[i]}var ze=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i){const n=F.read(F.symmetric,e);if(_e&&Ne[n])return function(e,t,r,i){const n=F.read(F.symmetric,e),s=new _e.createDecipheriv(Ne[n],t,i);return S(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(O.isAES(e))return function(e,t,r,i){if(O.isStream(r)){const e=new Te(t,i);return S(r,(t=>e.aes.AES_Decrypt_process(t)),(()=>e.aes.AES_Decrypt_finish()))}return Te.decrypt(r,t,i)}(0,t,r,i);const s=new(await se(e))(t),a=s.blockSize;let o=i,c=new Uint8Array;const h=e=>{e&&(c=O.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,i=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[i++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,i)};return S(r,h,h)},encrypt:async function(e,t,r,i,n){const s=F.read(F.symmetric,e);if(O.getNodeCrypto()&&Ne[s])return function(e,t,r,i){const n=F.read(F.symmetric,e),s=new _e.createCipheriv(Ne[n],t,i);return S(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(O.isAES(e))return async function(e,t,r,i){if(Le&&await He.isSupported(e)){const n=new He(e,t,i);return O.isStream(r)?S(r,(e=>n.encryptChunk(e)),(()=>n.finish())):n.encrypt(r)}{const e=new Te(t,i);return S(r,(t=>e.aes.AES_Encrypt_process(t)),(()=>e.aes.AES_Encrypt_finish()))}}(e,t,r,i);const a=new(await se(e))(t),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=e=>{e&&(h=O.concatUint8Array([h,e]));const t=new Uint8Array(h.length);let r,i=0;for(;e?h.length>=o:h.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^e[r],t[i++]=c[r];h=h.subarray(o)}return t.subarray(0,i)};return S(r,u,u)}});class Ge{static encrypt(e,t,r){return new Ge(t,r).encrypt(e)}static decrypt(e,t,r){return new Ge(t,r).encrypt(e)}constructor(e,t,r){this.aes=r||new Me(e,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(t)}encrypt(e){return Pe(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Pe(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(e,t,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new Ue("illegal counter size");let e=Math.pow(2,r)-1;i.set_mask(0,0,e/4294967296|0,0|e)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===e)throw Error("nonce is required");{let t=e.length;if(!t||t>16)throw new Ue("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(e),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==t){if(t<0||t>=Math.pow(2,r))throw new Ue("illegal counter value");i.set_counter(0,0,t/4294967296|0,0|t)}}}class qe{static encrypt(e,t,r=!0,i){return new qe(t,i,r).encrypt(e)}static decrypt(e,t,r=!0,i){return new qe(t,i,r).decrypt(e)}constructor(e,t,r=!0,i){this.aes=i||new Me(e,t,r,"CBC")}encrypt(e){return Pe(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Pe(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const je=O.getWebCrypto(),Ve=O.getNodeCrypto(),Ye=16;function Ze(e,t){const r=e.length-Ye;for(let i=0;i<Ye;i++)e[i+r]^=t[i];return e}const Je=new Uint8Array(Ye);async function We(e){const t=await async function(e){if(O.getNodeCrypto())return async function(t){const r=new Ve.createCipheriv("aes-"+8*e.length+"-cbc",e,Je).update(t);return new Uint8Array(r)};if(O.getWebCrypto())try{return e=await je.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await je.encrypt({name:"AES-CBC",iv:Je,length:8*Ye},e,t);return new Uint8Array(r).subarray(0,r.byteLength-Ye)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return qe.encrypt(t,e,!1,Je)}}(e),r=O.double(await t(Je)),i=O.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%Ye==0)return Ze(e,t);const i=new Uint8Array(e.length+(Ye-e.length%Ye));return i.set(e),i[e.length]=128,Ze(i,r)}(e,r,i))).subarray(-Ye)}}const $e=O.getWebCrypto(),Xe=O.getNodeCrypto(),et=O.getNodeBuffer(),tt=16,rt=tt,it=tt,nt=new Uint8Array(tt),st=new Uint8Array(tt);st[tt-1]=1;const at=new Uint8Array(tt);async function ot(e){const t=await We(e);return function(e,r){return t(O.concatUint8Array([e,r]))}}async function ct(e){if(O.getNodeCrypto())return async function(t,r){const i=new Xe.createCipheriv("aes-"+8*e.length+"-ctr",e,r),n=et.concat([i.update(t),i.final()]);return new Uint8Array(n)};if(O.getWebCrypto())try{const t=await $e.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const i=await $e.encrypt({name:"AES-CTR",counter:r,length:8*tt},t,e);return new Uint8Array(i)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return Ge.encrypt(t,e,r)}}async function ht(e,t){if(e!==F.symmetric.aes128&&e!==F.symmetric.aes192&&e!==F.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([ot(t),ct(t)]);return{encrypt:async function(e,t,n){const[s,a]=await Promise.all([r(nt,t),r(st,n)]),o=await i(e,s),c=await r(at,o);for(let e=0;e<it;e++)c[e]^=a[e]^s[e];return O.concatUint8Array([o,c])},decrypt:async function(e,t,n){if(e.length<it)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-it),a=e.subarray(-it),[o,c,h]=await Promise.all([r(nt,t),r(st,n),r(at,s)]),u=h;for(let e=0;e<it;e++)u[e]^=c[e]^o[e];if(!O.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}at[tt-1]=2,ht.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},ht.blockLength=tt,ht.ivLength=rt,ht.tagLength=it;const ut=16,lt=16;function yt(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function ft(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function gt(e,t){return ft(e.slice(),t)}const pt=new Uint8Array(ut),dt=new Uint8Array([1]);async function At(e,t){const{keySize:r}=ce(e);if(!O.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let i=0;const n=e=>qe.encrypt(e,t,!1),s=e=>qe.decrypt(e,t,!1);let a;function o(e,t,r,s){const o=t.length/ut|0;!function(e,t){const r=O.nbits(Math.max(e.length,t.length)/ut|0)-1;for(let e=i+1;e<=r;e++)a[e]=O.double(a[e-1]);i=r}(t,s);const c=O.concatUint8Array([pt.subarray(0,15-r.length),dt,r]),h=63&c[15];c[15]&=192;const u=n(c),l=O.concatUint8Array([u,gt(u.subarray(0,8),u.subarray(1,9))]),y=O.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),f=new Uint8Array(ut),g=new Uint8Array(t.length+lt);let p,d=0;for(p=0;p<o;p++)ft(y,a[yt(p+1)]),g.set(ft(e(gt(y,t)),y),d),ft(f,e===n?t:g.subarray(d)),t=t.subarray(ut),d+=ut;if(t.length){ft(y,a.x);const r=n(y);g.set(gt(t,r),d);const i=new Uint8Array(ut);i.set(e===n?t:g.subarray(d,-16),0),i[t.length]=128,ft(f,i),d+=t.length}const A=ft(n(ft(ft(f,y),a.$)),function(e){if(!e.length)return pt;const t=e.length/ut|0,r=new Uint8Array(ut),i=new Uint8Array(ut);for(let s=0;s<t;s++)ft(r,a[yt(s+1)]),ft(i,n(gt(r,e))),e=e.subarray(ut);if(e.length){ft(r,a.x);const t=new Uint8Array(ut);t.set(e,0),t[e.length]=128,ft(t,r),ft(i,n(t))}return i}(s));return g.set(A,d),g}return function(){const e=n(pt),t=O.double(e);a=[],a[0]=O.double(t),a.x=e,a.$=t}(),{encrypt:async function(e,t,r){return o(n,e,t,r)},decrypt:async function(e,t,r){if(e.length<lt)throw Error("Invalid OCB ciphertext");const i=e.subarray(-16);e=e.subarray(0,-16);const n=o(s,e,t,r);if(O.equalsUint8Array(i,n.subarray(-16)))return n.subarray(0,-16);throw Error("Authentication tag mismatch")}}}At.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},At.blockLength=ut,At.ivLength=15,At.tagLength=lt;const wt=68719476704;class mt{static encrypt(e,t,r,i,n){return new mt(t,r,i,n).encrypt(e)}static decrypt(e,t,r,i,n){return new mt(t,r,i,n).decrypt(e)}constructor(e,t,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new Me(e,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new Ue("illegal tagSize value");const o=t.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(t),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(Se.MAC.GCM,Se.HEAP_DATA,16),s.get_iv(Se.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(t),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>wt)throw new Ue("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(e){return this.AES_GCM_encrypt(e)}decrypt(e){return this.AES_GCM_decrypt(e)}AES_GCM_Encrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>wt)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=Ke(n,a+o,e,t,r),o+=u,t+=u,r-=u,u=i.cipher(Se.ENC.CTR,Se.HEAP_DATA+a,o),u=i.mac(Se.MAC.GCM,Se.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);e.cipher(Se.ENC.CTR,Se.HEAP_DATA+s,a+15&-16),a&&o.set(t.subarray(s,s+a));let c=a;for(;15&c;c++)t[s+c]=0;e.mac(Se.MAC.GCM,Se.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return t[0]=0,t[1]=0,t[2]=0,t[3]=h>>>29,t[4]=h>>>21,t[5]=h>>>13&255,t[6]=h>>>5&255,t[7]=h<<3&255,t[8]=t[9]=t[10]=0,t[11]=u>>>29,t[12]=u>>>21&255,t[13]=u>>>13&255,t[14]=u>>>5&255,t[15]=u<<3&255,e.mac(Se.MAC.GCM,Se.HEAP_DATA,16),e.get_iv(Se.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(Se.ENC.CTR,Se.HEAP_DATA,16),o.set(t.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,y=0;if((s-1<<4)+c+r>wt)throw new RangeError("counter overflow");const f=new Uint8Array(u);for(;r>l;)y=Ke(n,o+c,e,t,r-l),c+=y,t+=y,r-=y,y=i.mac(Se.MAC.GCM,Se.HEAP_DATA+o,y),y=i.cipher(Se.DEC.CTR,Se.HEAP_DATA+o,y),y&&f.set(n.subarray(o,o+y),h),s+=y>>>4,h+=y,o=0,c=0;return r>0&&(c+=Ke(n,0,e,t,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,f}AES_GCM_Decrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new De("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(t.subarray(s+o,s+a));let u=o;for(;15&u;u++)t[s+u]=0;e.mac(Se.MAC.GCM,Se.HEAP_DATA+s,u),e.cipher(Se.DEC.CTR,Se.HEAP_DATA+s,u),o&&c.set(t.subarray(s,s+o));const l=void 0!==i?i.length:0,y=(n-1<<4)+a-r;t[0]=0,t[1]=0,t[2]=0,t[3]=l>>>29,t[4]=l>>>21,t[5]=l>>>13&255,t[6]=l>>>5&255,t[7]=l<<3&255,t[8]=t[9]=t[10]=0,t[11]=y>>>29,t[12]=y>>>21&255,t[13]=y>>>13&255,t[14]=y>>>5&255,t[15]=y<<3&255,e.mac(Se.MAC.GCM,Se.HEAP_DATA,16),e.get_iv(Se.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(Se.ENC.CTR,Se.HEAP_DATA,16);let f=0;for(let e=0;e<r;++e)f|=h[e]^t[e];if(f)throw new xe("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(e){const t=this.AES_GCM_Decrypt_process(e),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}AES_GCM_encrypt(e){const t=this.AES_GCM_Encrypt_process(e),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}_gcm_mac_process(e){let{asm:t,heap:r}=this.aes.acquire_asm(),i=0,n=e.length||0,s=0;for(;n>0;){for(s=Ke(r,0,e,i,n),i+=s,n-=s;15&s;)r[s++]=0;t.mac(Se.MAC.GCM,Se.HEAP_DATA,s)}}}const bt=O.getWebCrypto(),Et=O.getNodeCrypto(),kt=O.getNodeBuffer(),vt=16,Bt="AES-GCM";async function It(e,t){if(e!==F.symmetric.aes128&&e!==F.symmetric.aes192&&e!==F.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(O.getNodeCrypto())return{encrypt:async function(e,r,i=new Uint8Array){const n=new Et.createCipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i);const s=kt.concat([n.update(e),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,i=new Uint8Array){const n=new Et.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i),n.setAuthTag(e.slice(e.length-vt,e.length));const s=kt.concat([n.update(e.slice(0,e.length-vt)),n.final()]);return new Uint8Array(s)}};if(O.getWebCrypto())try{const e=await bt.importKey("raw",t,{name:Bt},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return mt.encrypt(i,t,n,s);const a=await bt.encrypt({name:Bt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===vt)return mt.decrypt(i,t,n,s);try{const t=await bt.decrypt({name:Bt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,i){return mt.encrypt(e,t,r,i)},decrypt:async function(e,r,i){return mt.decrypt(e,t,r,i)}}}It.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},It.blockLength=16,It.ivLength=12,It.tagLength=vt;var St={cfb:ze,gcm:It,experimentalGCM:It,eax:ht,ocb:At};const Ct=BigInt(0),Kt=BigInt(1);function Pt(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function Dt(e,t){const r=e%t;return r<Ct?r+t:r}function Ut(e,t,r){if(r===Ct)throw Error("Modulo cannot be zero");if(r===Kt)return BigInt(0);if(t<Ct)throw Error("Unsopported negative exponent");let i=t,n=e;n%=r;let s=BigInt(1);for(;i>Ct;){const e=i&Kt;i>>=Kt;s=e?s*n%r:s,n=n*n%r}return s}function xt(e){return e>=Ct?e:-e}function Qt(e,t){const{gcd:r,x:i}=function(e,t){let r=BigInt(0),i=BigInt(1),n=BigInt(1),s=BigInt(0),a=xt(e),o=xt(t);const c=e<Ct,h=t<Ct;for(;o!==Ct;){const e=a/o;let t=r;r=n-e*r,n=t,t=i,i=s-e*i,s=t,t=o,o=a%o,a=t}return{x:c?-n:n,y:h?-s:s,gcd:a}}(e,t);if(r!==Kt)throw Error("Inverse does not exist");return Dt(i+t,t)}function Rt(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function Mt(e,t){return(e>>BigInt(t)&Kt)===Ct?0:1}function Tt(e){const t=e<Ct?BigInt(-1):Ct;let r=1,i=e;for(;(i>>=Kt)!==t;)r++;return r}function Lt(e){const t=e<Ct?BigInt(-1):Ct,r=BigInt(8);let i=1,n=e;for(;(n>>=r)!==t;)i++;return i}function _t(e,t="be",r){let i=e.toString(16);i.length%2==1&&(i="0"+i);const n=i.length/2,s=new Uint8Array(r||n),a=r?r-n:0;let o=0;for(;o<n;)s[o+a]=parseInt(i.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const Ft=O.getNodeCrypto();function Nt(e){const t=new Uint8Array(e);if(Ft){const e=Ft.randomBytes(t.length);t.set(e)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(t)}return t}function Ht(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return Dt(Pt(Nt(Lt(r)+8)),r)+e}var Ot=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Ht,getRandomBytes:Nt});const zt=BigInt(1);function Gt(e,t,r){const i=BigInt(30),n=zt<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=Ht(n,n<<zt),o=Rt(Dt(a,i));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,Tt(a)>e&&(a=Dt(a,n<<zt),a+=n,o=Rt(Dt(a,i)))}while(!qt(a,t,r));return a}function qt(e,t,r){return(!t||function(e,t){let r=e,i=t;for(;i!==Ct;){const e=i;i=r%i,r=e}return r}(e-zt,t)===zt)&&(!!function(e){const t=BigInt(0);return jt.every((r=>Dt(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return Ut(t,e-zt,e)===zt}(e)&&!!function(e,t,r){const i=Tt(e);t||(t=Math.max(1,i/48|0));const n=e-zt;let s=0;for(;!Mt(n,s);)s++;const a=e>>BigInt(s);for(;t>0;t--){let t,r=Ut(Ht(BigInt(2),n),a,e);if(r!==zt&&r!==n){for(t=1;t<s;t++){if(r=Dt(r*r,e),r===zt)return!1;if(r===n)break}if(t===s)return!1}}return!0}(e,r)))}const jt=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const Vt=[];function Yt(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const i=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const i=Nt(e-r);for(let e=0;e<i.length;e++)0!==i[e]&&(t[r++]=i[e])}return t}(t-r-3),n=new Uint8Array(t);return n[1]=2,n.set(i,2),n.set(e,t-r),n}function Zt(e,t){let r=2,i=1;for(let t=r;t<e.length;t++)i&=0!==e[t],r+=i;const n=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&n>=8&!i;if(t)return O.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Jt(e,t,r){let i;if(t.length!==Ie.getHashByteLength(e))throw Error("Invalid hash length");const n=new Uint8Array(Vt[e].length);for(i=0;i<Vt[e].length;i++)n[i]=Vt[e][i];const s=n.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(t,r-t.length),o}Vt[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Vt[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Vt[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Vt[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Vt[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Vt[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Vt[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var Wt=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Zt,emeEncode:Yt,emsaEncode:Jt});const $t=O.getWebCrypto(),Xt=O.getNodeCrypto(),er=BigInt(1);async function tr(e,t,r,i,n,s){const a=Pt(i),o=Pt(n),c=Pt(r);let h=Dt(c,o-er),u=Dt(c,a-er);return u=_t(u),h=_t(h),{kty:"RSA",n:Z(e),e:Z(t),d:Z(r),p:Z(n),q:Z(i),dp:Z(h),dq:Z(u),qi:Z(s),ext:!0}}function rr(e,t){return{kty:"RSA",n:Z(e),e:Z(t),ext:!0}}function ir(e,t){return{n:Y(e.n),e:_t(t),d:Y(e.d),p:Y(e.q),q:Y(e.p),u:Y(e.qi)}}var nr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a,o){if(O.getNodeCrypto()&&!o)try{return await async function(e,t,r,i,n,s,a){const o=await tr(t,r,i,n,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Xt.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Xt.privateDecrypt(c,e))}catch(e){throw Error("Decryption error")}}(e,t,r,i,n,s,a)}catch(e){O.printDebugError(e)}return async function(e,t,r,i,n,s,a,o){if(e=Pt(e),t=Pt(t),r=Pt(r),i=Pt(i),n=Pt(n),s=Pt(s),a=Pt(a),e>=t)throw Error("Data too large.");const c=Dt(i,s-er),h=Dt(i,n-er),u=Ht(BigInt(2),t),l=Ut(Qt(u,t),r,t);e=Dt(e*l,t);const y=Ut(e,h,n),f=Ut(e,c,s),g=Dt(a*(f-y),s);let p=g*n+y;return p=Dt(p*u,t),Zt(_t(p,"be",Lt(t)),o)}(e,t,r,i,n,s,a,o)},encrypt:async function(e,t,r){return O.getNodeCrypto()?async function(e,t,r){const i=rr(t,r),n={key:i,format:"jwk",type:"pkcs1",padding:Xt.constants.RSA_PKCS1_PADDING};return new Uint8Array(Xt.publicEncrypt(n,e))}(e,t,r):async function(e,t,r){if(t=Pt(t),e=Pt(Yt(e,Lt(t))),r=Pt(r),e>=t)throw Error("Message size cannot exceed modulus size");return _t(Ut(e,r,t),"be",Lt(t))}(e,t,r)},generate:async function(e,t){if(t=BigInt(t),O.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:_t(t),hash:{name:"SHA-1"}},i=await $t.generateKey(r,!0,["sign","verify"]);return ir(await $t.exportKey("jwk",i.privateKey),t)}if(O.getNodeCrypto()){const r={modulusLength:e,publicExponent:Rt(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},i=await new Promise(((e,t)=>{Xt.generateKeyPair("rsa",r,((r,i,n)=>{r?t(r):e(n)}))}));return ir(i,t)}let r,i,n;do{i=Gt(e-(e>>1),t,40),r=Gt(e>>1,t,40),n=r*i}while(Tt(n)!==e);const s=(r-er)*(i-er);return i<r&&([r,i]=[i,r]),{n:_t(n),e:_t(t),d:_t(Qt(t,s)),p:_t(r),q:_t(i),u:_t(Qt(r,i))}},sign:async function(e,t,r,i,n,s,a,o,c){if(t&&!O.isStream(t))if(O.getWebCrypto())try{return await async function(e,t,r,i,n,s,a,o){const c=await tr(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},u=await $t.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await $t.sign("RSASSA-PKCS1-v1_5",u,t))}(F.read(F.webHash,e),t,r,i,n,s,a,o)}catch(e){O.printDebugError(e)}else if(O.getNodeCrypto())return async function(e,t,r,i,n,s,a,o){const c=Xt.createSign(F.read(F.hash,e));c.write(t),c.end();const h=await tr(r,i,n,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(e,t,r,i,n,s,a,o);return async function(e,t,r,i){t=Pt(t);const n=Pt(Jt(e,i,Lt(t)));if(r=Pt(r),n>=t)throw Error("Message size cannot exceed modulus size");return _t(Ut(n,r,t),"be",Lt(t))}(e,r,n,c)},validateParams:async function(e,t,r,i,n,s){if(e=Pt(e),(i=Pt(i))*(n=Pt(n))!==e)return!1;const a=BigInt(2);if(Dt(i*(s=Pt(s)),n)!==BigInt(1))return!1;t=Pt(t),r=Pt(r);const o=Ht(a,a<<BigInt(Math.floor(Tt(e)/3))),c=o*r*t;return!(Dt(c,i-er)!==o||Dt(c,n-er)!==o)},verify:async function(e,t,r,i,n,s){if(t&&!O.isStream(t))if(O.getWebCrypto())try{return await async function(e,t,r,i,n){const s=rr(i,n),a=await $t.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return $t.verify("RSASSA-PKCS1-v1_5",a,r,t)}(F.read(F.webHash,e),t,r,i,n)}catch(e){O.printDebugError(e)}else if(O.getNodeCrypto())return async function(e,t,r,i,n){const s=rr(i,n),a={key:s,format:"jwk",type:"pkcs1"},o=Xt.createVerify(F.read(F.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch(e){return!1}}(e,t,r,i,n);return async function(e,t,r,i,n){if(r=Pt(r),t=Pt(t),i=Pt(i),t>=r)throw Error("Signature size cannot exceed modulus size");const s=_t(Ut(t,i,r),"be",Lt(r)),a=Jt(e,n,Lt(r));return O.equalsUint8Array(s,a)}(e,r,i,n,s)}});const sr=BigInt(1);var ar=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){return e=Pt(e),t=Pt(t),r=Pt(r),Zt(_t(Dt(Qt(Ut(e,i=Pt(i),r),r)*t,r),"be",Lt(r)),n)},encrypt:async function(e,t,r,i){t=Pt(t),r=Pt(r),i=Pt(i);const n=Pt(Yt(e,Lt(t))),s=Ht(sr,t-sr);return{c1:_t(Ut(r,s,t)),c2:_t(Dt(Ut(i,s,t)*n,t))}},validateParams:async function(e,t,r,i){if(e=Pt(e),t=Pt(t),r=Pt(r),t<=sr||t>=e)return!1;const n=BigInt(Tt(e));if(n<BigInt(1023))return!1;if(Ut(t,e-sr,e)!==sr)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=Dt(s*t,e),s===sr)return!1;a++}i=Pt(i);const h=Ht(o<<n-sr,o<<n);return r===Ut(t,(e-sr)*h+i,e)}});const or=a&&"object"==typeof a&&"webcrypto"in a?a.webcrypto:void 0,cr={};var hr=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},ur=function(){throw Error("no PRNG")},lr=new Uint8Array(32);lr[0]=9;var yr=hr(),fr=hr([1]),gr=hr([56129,1]),pr=hr([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),dr=hr([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),Ar=hr([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),wr=hr([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),mr=hr([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function br(e,t,r,i){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=i>>24&255,e[t+5]=i>>16&255,e[t+6]=i>>8&255,e[t+7]=255&i}function Er(e,t,r,i){return function(e,t,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=e[t+s]^r[i+s];return(1&a-1>>>8)-1}(e,t,r,i,32)}function kr(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function vr(e){var t,r,i=1;for(t=0;t<16;t++)r=e[t]+i+65535,i=Math.floor(r/65536),e[t]=r-65536*i;e[0]+=i-1+37*(i-1)}function Br(e,t,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(e[s]^t[s]),e[s]^=i,t[s]^=i}function Ir(e,t){var r,i,n,s=hr(),a=hr();for(r=0;r<16;r++)a[r]=t[r];for(vr(a),vr(a),vr(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,Br(a,s,1-n)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function Sr(e,t){var r=new Uint8Array(32),i=new Uint8Array(32);return Ir(r,e),Ir(i,t),Er(r,0,i,0)}function Cr(e){var t=new Uint8Array(32);return Ir(t,e),1&t[0]}function Kr(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function Pr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]+r[i]}function Dr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]-r[i]}function Ur(e,t,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0,B=0,I=0,S=0,C=0,K=0,P=0,D=0,U=0,x=0,Q=0,R=0,M=0,T=r[0],L=r[1],_=r[2],F=r[3],N=r[4],H=r[5],O=r[6],z=r[7],G=r[8],q=r[9],j=r[10],V=r[11],Y=r[12],Z=r[13],J=r[14],W=r[15];s+=(i=t[0])*T,a+=i*L,o+=i*_,c+=i*F,h+=i*N,u+=i*H,l+=i*O,y+=i*z,f+=i*G,g+=i*q,p+=i*j,d+=i*V,A+=i*Y,w+=i*Z,m+=i*J,b+=i*W,a+=(i=t[1])*T,o+=i*L,c+=i*_,h+=i*F,u+=i*N,l+=i*H,y+=i*O,f+=i*z,g+=i*G,p+=i*q,d+=i*j,A+=i*V,w+=i*Y,m+=i*Z,b+=i*J,E+=i*W,o+=(i=t[2])*T,c+=i*L,h+=i*_,u+=i*F,l+=i*N,y+=i*H,f+=i*O,g+=i*z,p+=i*G,d+=i*q,A+=i*j,w+=i*V,m+=i*Y,b+=i*Z,E+=i*J,k+=i*W,c+=(i=t[3])*T,h+=i*L,u+=i*_,l+=i*F,y+=i*N,f+=i*H,g+=i*O,p+=i*z,d+=i*G,A+=i*q,w+=i*j,m+=i*V,b+=i*Y,E+=i*Z,k+=i*J,v+=i*W,h+=(i=t[4])*T,u+=i*L,l+=i*_,y+=i*F,f+=i*N,g+=i*H,p+=i*O,d+=i*z,A+=i*G,w+=i*q,m+=i*j,b+=i*V,E+=i*Y,k+=i*Z,v+=i*J,B+=i*W,u+=(i=t[5])*T,l+=i*L,y+=i*_,f+=i*F,g+=i*N,p+=i*H,d+=i*O,A+=i*z,w+=i*G,m+=i*q,b+=i*j,E+=i*V,k+=i*Y,v+=i*Z,B+=i*J,I+=i*W,l+=(i=t[6])*T,y+=i*L,f+=i*_,g+=i*F,p+=i*N,d+=i*H,A+=i*O,w+=i*z,m+=i*G,b+=i*q,E+=i*j,k+=i*V,v+=i*Y,B+=i*Z,I+=i*J,S+=i*W,y+=(i=t[7])*T,f+=i*L,g+=i*_,p+=i*F,d+=i*N,A+=i*H,w+=i*O,m+=i*z,b+=i*G,E+=i*q,k+=i*j,v+=i*V,B+=i*Y,I+=i*Z,S+=i*J,C+=i*W,f+=(i=t[8])*T,g+=i*L,p+=i*_,d+=i*F,A+=i*N,w+=i*H,m+=i*O,b+=i*z,E+=i*G,k+=i*q,v+=i*j,B+=i*V,I+=i*Y,S+=i*Z,C+=i*J,K+=i*W,g+=(i=t[9])*T,p+=i*L,d+=i*_,A+=i*F,w+=i*N,m+=i*H,b+=i*O,E+=i*z,k+=i*G,v+=i*q,B+=i*j,I+=i*V,S+=i*Y,C+=i*Z,K+=i*J,P+=i*W,p+=(i=t[10])*T,d+=i*L,A+=i*_,w+=i*F,m+=i*N,b+=i*H,E+=i*O,k+=i*z,v+=i*G,B+=i*q,I+=i*j,S+=i*V,C+=i*Y,K+=i*Z,P+=i*J,D+=i*W,d+=(i=t[11])*T,A+=i*L,w+=i*_,m+=i*F,b+=i*N,E+=i*H,k+=i*O,v+=i*z,B+=i*G,I+=i*q,S+=i*j,C+=i*V,K+=i*Y,P+=i*Z,D+=i*J,U+=i*W,A+=(i=t[12])*T,w+=i*L,m+=i*_,b+=i*F,E+=i*N,k+=i*H,v+=i*O,B+=i*z,I+=i*G,S+=i*q,C+=i*j,K+=i*V,P+=i*Y,D+=i*Z,U+=i*J,x+=i*W,w+=(i=t[13])*T,m+=i*L,b+=i*_,E+=i*F,k+=i*N,v+=i*H,B+=i*O,I+=i*z,S+=i*G,C+=i*q,K+=i*j,P+=i*V,D+=i*Y,U+=i*Z,x+=i*J,Q+=i*W,m+=(i=t[14])*T,b+=i*L,E+=i*_,k+=i*F,v+=i*N,B+=i*H,I+=i*O,S+=i*z,C+=i*G,K+=i*q,P+=i*j,D+=i*V,U+=i*Y,x+=i*Z,Q+=i*J,R+=i*W,b+=(i=t[15])*T,a+=38*(k+=i*_),o+=38*(v+=i*F),c+=38*(B+=i*N),h+=38*(I+=i*H),u+=38*(S+=i*O),l+=38*(C+=i*z),y+=38*(K+=i*G),f+=38*(P+=i*q),g+=38*(D+=i*j),p+=38*(U+=i*V),d+=38*(x+=i*Y),A+=38*(Q+=i*Z),w+=38*(R+=i*J),m+=38*(M+=i*W),s=(i=(s+=38*(E+=i*L))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=h,e[5]=u,e[6]=l,e[7]=y,e[8]=f,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function xr(e,t){Ur(e,t,t)}function Qr(e,t){var r,i=hr();for(r=0;r<16;r++)i[r]=t[r];for(r=253;r>=0;r--)xr(i,i),2!==r&&4!==r&&Ur(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}function Rr(e,t,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=hr(),c=hr(),h=hr(),u=hr(),l=hr(),y=hr();for(n=0;n<31;n++)s[n]=t[n];for(s[31]=127&t[31]|64,s[0]&=248,Kr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)Br(o,c,i=s[n>>>3]>>>(7&n)&1),Br(h,u,i),Pr(l,o,h),Dr(o,o,h),Pr(h,c,u),Dr(c,c,u),xr(u,l),xr(y,o),Ur(o,h,o),Ur(h,c,l),Pr(l,o,h),Dr(o,o,h),xr(c,o),Dr(h,u,y),Ur(o,h,gr),Pr(o,o,u),Ur(h,h,o),Ur(o,u,y),Ur(u,c,a),xr(c,l),Br(o,c,i),Br(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var f=a.subarray(32),g=a.subarray(16);return Qr(f,f),Ur(g,g,f),Ir(e,g),0}function Mr(e,t){return Rr(e,t,lr)}var Tr=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function Lr(e,t,r,i){for(var n,s,a,o,c,h,u,l,y,f,g,p,d,A,w,m,b,E,k,v,B,I,S,C,K,P,D=new Int32Array(16),U=new Int32Array(16),x=e[0],Q=e[1],R=e[2],M=e[3],T=e[4],L=e[5],_=e[6],F=e[7],N=t[0],H=t[1],O=t[2],z=t[3],G=t[4],q=t[5],j=t[6],V=t[7],Y=0;i>=128;){for(k=0;k<16;k++)v=8*k+Y,D[k]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],U[k]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(k=0;k<80;k++)if(n=x,s=Q,a=R,o=M,c=T,h=L,u=_,F,y=N,f=H,g=O,p=z,d=G,A=q,w=j,V,S=65535&(I=V),C=I>>>16,K=65535&(B=F),P=B>>>16,S+=65535&(I=(G>>>14|T<<18)^(G>>>18|T<<14)^(T>>>9|G<<23)),C+=I>>>16,K+=65535&(B=(T>>>14|G<<18)^(T>>>18|G<<14)^(G>>>9|T<<23)),P+=B>>>16,S+=65535&(I=G&q^~G&j),C+=I>>>16,K+=65535&(B=T&L^~T&_),P+=B>>>16,B=Tr[2*k],S+=65535&(I=Tr[2*k+1]),C+=I>>>16,K+=65535&B,P+=B>>>16,B=D[k%16],C+=(I=U[k%16])>>>16,K+=65535&B,P+=B>>>16,K+=(C+=(S+=65535&I)>>>16)>>>16,S=65535&(I=E=65535&S|C<<16),C=I>>>16,K=65535&(B=b=65535&K|(P+=K>>>16)<<16),P=B>>>16,S+=65535&(I=(N>>>28|x<<4)^(x>>>2|N<<30)^(x>>>7|N<<25)),C+=I>>>16,K+=65535&(B=(x>>>28|N<<4)^(N>>>2|x<<30)^(N>>>7|x<<25)),P+=B>>>16,C+=(I=N&H^N&O^H&O)>>>16,K+=65535&(B=x&Q^x&R^Q&R),P+=B>>>16,l=65535&(K+=(C+=(S+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,m=65535&S|C<<16,S=65535&(I=p),C=I>>>16,K=65535&(B=o),P=B>>>16,C+=(I=E)>>>16,K+=65535&(B=b),P+=B>>>16,Q=n,R=s,M=a,T=o=65535&(K+=(C+=(S+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,L=c,_=h,F=u,x=l,H=y,O=f,z=g,G=p=65535&S|C<<16,q=d,j=A,V=w,N=m,k%16==15)for(v=0;v<16;v++)B=D[v],S=65535&(I=U[v]),C=I>>>16,K=65535&B,P=B>>>16,B=D[(v+9)%16],S+=65535&(I=U[(v+9)%16]),C+=I>>>16,K+=65535&B,P+=B>>>16,b=D[(v+1)%16],S+=65535&(I=((E=U[(v+1)%16])>>>1|b<<31)^(E>>>8|b<<24)^(E>>>7|b<<25)),C+=I>>>16,K+=65535&(B=(b>>>1|E<<31)^(b>>>8|E<<24)^b>>>7),P+=B>>>16,b=D[(v+14)%16],C+=(I=((E=U[(v+14)%16])>>>19|b<<13)^(b>>>29|E<<3)^(E>>>6|b<<26))>>>16,K+=65535&(B=(b>>>19|E<<13)^(E>>>29|b<<3)^b>>>6),P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,D[v]=65535&K|P<<16,U[v]=65535&S|C<<16;S=65535&(I=N),C=I>>>16,K=65535&(B=x),P=B>>>16,B=e[0],C+=(I=t[0])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[0]=x=65535&K|P<<16,t[0]=N=65535&S|C<<16,S=65535&(I=H),C=I>>>16,K=65535&(B=Q),P=B>>>16,B=e[1],C+=(I=t[1])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[1]=Q=65535&K|P<<16,t[1]=H=65535&S|C<<16,S=65535&(I=O),C=I>>>16,K=65535&(B=R),P=B>>>16,B=e[2],C+=(I=t[2])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[2]=R=65535&K|P<<16,t[2]=O=65535&S|C<<16,S=65535&(I=z),C=I>>>16,K=65535&(B=M),P=B>>>16,B=e[3],C+=(I=t[3])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[3]=M=65535&K|P<<16,t[3]=z=65535&S|C<<16,S=65535&(I=G),C=I>>>16,K=65535&(B=T),P=B>>>16,B=e[4],C+=(I=t[4])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[4]=T=65535&K|P<<16,t[4]=G=65535&S|C<<16,S=65535&(I=q),C=I>>>16,K=65535&(B=L),P=B>>>16,B=e[5],C+=(I=t[5])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[5]=L=65535&K|P<<16,t[5]=q=65535&S|C<<16,S=65535&(I=j),C=I>>>16,K=65535&(B=_),P=B>>>16,B=e[6],C+=(I=t[6])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[6]=_=65535&K|P<<16,t[6]=j=65535&S|C<<16,S=65535&(I=V),C=I>>>16,K=65535&(B=F),P=B>>>16,B=e[7],C+=(I=t[7])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[7]=F=65535&K|P<<16,t[7]=V=65535&S|C<<16,Y+=128,i-=128}return i}function _r(e,t,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,Lr(n,s,t,r),r%=128,i=0;i<r;i++)a[i]=t[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,br(a,r-8,o/536870912|0,o<<3),Lr(n,s,a,r),i=0;i<8;i++)br(e,8*i,n[i],s[i]);return 0}function Fr(e,t){var r=hr(),i=hr(),n=hr(),s=hr(),a=hr(),o=hr(),c=hr(),h=hr(),u=hr();Dr(r,e[1],e[0]),Dr(u,t[1],t[0]),Ur(r,r,u),Pr(i,e[0],e[1]),Pr(u,t[0],t[1]),Ur(i,i,u),Ur(n,e[3],t[3]),Ur(n,n,dr),Ur(s,e[2],t[2]),Pr(s,s,s),Dr(a,i,r),Dr(o,s,n),Pr(c,s,n),Pr(h,i,r),Ur(e[0],a,o),Ur(e[1],h,c),Ur(e[2],c,o),Ur(e[3],a,h)}function Nr(e,t,r){var i;for(i=0;i<4;i++)Br(e[i],t[i],r)}function Hr(e,t){var r=hr(),i=hr(),n=hr();Qr(n,t[2]),Ur(r,t[0],n),Ur(i,t[1],n),Ir(e,i),e[31]^=Cr(r)<<7}function Or(e,t,r){var i,n;for(kr(e[0],yr),kr(e[1],fr),kr(e[2],fr),kr(e[3],yr),n=255;n>=0;--n)Nr(e,t,i=r[n/8|0]>>(7&n)&1),Fr(t,e),Fr(e,e),Nr(e,t,i)}function zr(e,t){var r=[hr(),hr(),hr(),hr()];kr(r[0],Ar),kr(r[1],wr),kr(r[2],fr),Ur(r[3],Ar,wr),Or(e,r,t)}function Gr(e,t,r){var i,n=new Uint8Array(64),s=[hr(),hr(),hr(),hr()];for(r||ur(t,32),_r(n,t,32),n[0]&=248,n[31]&=127,n[31]|=64,zr(s,n),Hr(e,s),i=0;i<32;i++)t[i+32]=e[i];return 0}var qr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function jr(e,t){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)t[n]+=r-16*t[i]*qr[n-(i-32)],r=Math.floor((t[n]+128)/256),t[n]-=256*r;t[n]+=r,t[i]=0}for(r=0,n=0;n<32;n++)t[n]+=r-(t[31]>>4)*qr[n],r=t[n]>>8,t[n]&=255;for(n=0;n<32;n++)t[n]-=r*qr[n];for(i=0;i<32;i++)t[i+1]+=t[i]>>8,e[i]=255&t[i]}function Vr(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;jr(e,r)}function Yr(e,t){var r=hr(),i=hr(),n=hr(),s=hr(),a=hr(),o=hr(),c=hr();return kr(e[2],fr),Kr(e[1],t),xr(n,e[1]),Ur(s,n,pr),Dr(n,n,e[2]),Pr(s,e[2],s),xr(a,s),xr(o,a),Ur(c,o,a),Ur(r,c,n),Ur(r,r,s),function(e,t){var r,i=hr();for(r=0;r<16;r++)i[r]=t[r];for(r=250;r>=0;r--)xr(i,i),1!==r&&Ur(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}(r,r),Ur(r,r,n),Ur(r,r,s),Ur(r,r,s),Ur(e[0],r,s),xr(i,e[0]),Ur(i,i,s),Sr(i,n)&&Ur(e[0],e[0],mr),xr(i,e[0]),Ur(i,i,s),Sr(i,n)?-1:(Cr(e[0])===t[31]>>7&&Dr(e[0],yr,e[0]),Ur(e[3],e[0],e[1]),0)}var Zr=64;function Jr(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}cr.scalarMult=function(e,t){if(Jr(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return Rr(r,e,t),r},cr.box={},cr.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){ur(t,32),Mr(e,t)}(e,t),{publicKey:e,secretKey:t}},cr.box.keyPair.fromSecretKey=function(e){if(Jr(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return Mr(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},cr.sign=function(e,t){if(Jr(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(Zr+e.length);return function(e,t,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[hr(),hr(),hr(),hr()];_r(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)e[64+n]=t[n];for(n=0;n<32;n++)e[32+n]=a[32+n];for(_r(c,e.subarray(32),r+32),Vr(c),zr(u,c),Hr(e,u),n=32;n<64;n++)e[n]=i[n];for(_r(o,e,r+64),Vr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];jr(e.subarray(32),h)}(r,e,e.length,t),r},cr.sign.detached=function(e,t){for(var r=cr.sign(e,t),i=new Uint8Array(Zr),n=0;n<i.length;n++)i[n]=r[n];return i},cr.sign.detached.verify=function(e,t,r){if(Jr(e,t,r),t.length!==Zr)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array(Zr+e.length),s=new Uint8Array(Zr+e.length);for(i=0;i<Zr;i++)n[i]=t[i];for(i=0;i<e.length;i++)n[i+Zr]=e[i];return function(e,t,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[hr(),hr(),hr(),hr()],c=[hr(),hr(),hr(),hr()];if(r<64)return-1;if(Yr(c,i))return-1;for(n=0;n<r;n++)e[n]=t[n];for(n=0;n<32;n++)e[n+32]=i[n];if(_r(a,e,r),Vr(a),Or(o,c,a),zr(c,t.subarray(32)),Fr(o,c),Hr(s,o),r-=64,Er(t,0,s,0)){for(n=0;n<r;n++)e[n]=0;return-1}for(n=0;n<r;n++)e[n]=t[n+64];return r}(s,n,n.length,r)>=0},cr.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return Gr(e,t),{publicKey:e,secretKey:t}},cr.sign.keyPair.fromSecretKey=function(e){if(Jr(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},cr.sign.keyPair.fromSeed=function(e){if(Jr(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=e[i];return Gr(t,r,!0),{publicKey:t,secretKey:r}},cr.setPRNG=function(e){ur=e},function(){if(or&&or.getRandomValues){cr.setPRNG((function(e,t){var r,i=new Uint8Array(t);for(r=0;r<t;r+=65536)or.getRandomValues(i.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=i[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(i)}))}}();const Wr={"2a8648ce3d030107":F.curve.nistP256,"2b81040022":F.curve.nistP384,"2b81040023":F.curve.nistP521,"2b8104000a":F.curve.secp256k1,"2b06010401da470f01":F.curve.ed25519Legacy,"2b060104019755010501":F.curve.curve25519Legacy,"2b2403030208010107":F.curve.brainpoolP256r1,"2b240303020801010b":F.curve.brainpoolP384r1,"2b240303020801010d":F.curve.brainpoolP512r1};class $r{constructor(e){if(e instanceof $r)this.oid=e.oid;else if(O.isArray(e)||O.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return O.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return O.uint8ArrayToHex(this.oid)}getName(){const e=Wr[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function Xr(e){let t,r=0;const i=e[0];return i<192?([r]=e,t=1):i<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===i&&(r=O.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function ei(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):O.concatUint8Array([new Uint8Array([255]),O.writeNumber(e,4)])}function ti(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function ri(e){return new Uint8Array([192|e])}function ii(e,t){return O.concatUint8Array([ri(e),ei(t)])}function ni(e){return[F.packet.literalData,F.packet.compressedData,F.packet.symmetricallyEncryptedData,F.packet.symEncryptedIntegrityProtectedData,F.packet.aeadEncryptedData].includes(e)}async function si(e,t){const r=T(e);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,u=-1;u=0,64&a&&(u=1),u?h=63&a:(h=(63&a)>>2,c=3&a);const l=ni(h);let y,f=null;if(l){if("array"===O.isStream(e)){const e=new ArrayStream;i=L(e),f=e}else{const e=new TransformStream;i=L(e.writable),f=e.readable}n=t({tag:h,packet:f})}else f=[];do{if(u){const e=await r.readByte();if(y=!1,e<192)o=e;else if(e>=192&&e<224)o=(e-192<<8)+await r.readByte()+192;else if(e>223&&e<255){if(o=1<<(31&e),y=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let e=0;for(;;){i&&await i.ready;const{done:t,value:n}=await r.read();if(t){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-e);if(i?await i.write(s):f.push(s),e+=n.length,e>=o){r.unshift(n.subarray(o-e+n.length));break}}}}while(y);const g=await r.peekBytes(l?1/0:2);return i?(await i.ready,await i.close()):(f=O.concatUint8Array(f),await t({tag:h,packet:f})),!g||!g.length}catch(e){if(i)return await i.abort(e),!0;throw e}finally{i&&await n,r.releaseLock()}}class ai extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ai),this.name="UnsupportedError"}}class oi extends ai{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ai),this.name="UnknownPacketError"}}class ci{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}const hi=O.getWebCrypto(),ui=O.getNodeCrypto(),li={[F.curve.nistP256]:"P-256",[F.curve.nistP384]:"P-384",[F.curve.nistP521]:"P-521"},yi=ui?ui.getCurves():[],fi=ui?{[F.curve.secp256k1]:yi.includes("secp256k1")?"secp256k1":void 0,[F.curve.nistP256]:yi.includes("prime256v1")?"prime256v1":void 0,[F.curve.nistP384]:yi.includes("secp384r1")?"secp384r1":void 0,[F.curve.nistP521]:yi.includes("secp521r1")?"secp521r1":void 0,[F.curve.ed25519Legacy]:yi.includes("ED25519")?"ED25519":void 0,[F.curve.curve25519Legacy]:yi.includes("X25519")?"X25519":void 0,[F.curve.brainpoolP256r1]:yi.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[F.curve.brainpoolP384r1]:yi.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[F.curve.brainpoolP512r1]:yi.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},gi={[F.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:fi[F.curve.nistP256],web:li[F.curve.nistP256],payloadSize:32,sharedSize:256,wireFormatLeadingByte:4},[F.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:F.publicKey.ecdsa,hash:F.hash.sha384,cipher:F.symmetric.aes192,node:fi[F.curve.nistP384],web:li[F.curve.nistP384],payloadSize:48,sharedSize:384,wireFormatLeadingByte:4},[F.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:F.publicKey.ecdsa,hash:F.hash.sha512,cipher:F.symmetric.aes256,node:fi[F.curve.nistP521],web:li[F.curve.nistP521],payloadSize:66,sharedSize:528,wireFormatLeadingByte:4},[F.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:fi[F.curve.secp256k1],payloadSize:32,wireFormatLeadingByte:4},[F.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:F.publicKey.eddsaLegacy,hash:F.hash.sha512,node:!1,payloadSize:32,wireFormatLeadingByte:64},[F.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:F.publicKey.ecdh,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:!1,payloadSize:32,wireFormatLeadingByte:64},[F.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:fi[F.curve.brainpoolP256r1],payloadSize:32,wireFormatLeadingByte:4},[F.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:F.publicKey.ecdsa,hash:F.hash.sha384,cipher:F.symmetric.aes192,node:fi[F.curve.brainpoolP384r1],payloadSize:48,wireFormatLeadingByte:4},[F.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:F.publicKey.ecdsa,hash:F.hash.sha512,cipher:F.symmetric.aes256,node:fi[F.curve.brainpoolP512r1],payloadSize:64,wireFormatLeadingByte:4}};class pi{constructor(e){try{this.name=e instanceof $r?e.getName():F.write(F.curve,e)}catch(e){throw new ai("Unknown curve")}const t=gi[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.wireFormatLeadingByte=t.wireFormatLeadingByte,this.web&&O.getWebCrypto()?this.type="web":this.node&&O.getNodeCrypto()?this.type="node":this.name===F.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===F.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e,t){const r=await hi.generateKey({name:"ECDSA",namedCurve:li[e]},!0,["sign","verify"]),i=await hi.exportKey("jwk",r.privateKey),n=await hi.exportKey("jwk",r.publicKey);return{publicKey:mi(n,t),privateKey:Y(i.d)}}(this.name,this.wireFormatLeadingByte)}catch(e){return O.printDebugError("Browser did not support generating ec key "+e.message),wi(this.name)}case"node":return async function(e){const t=ui.createECDH(fi[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const e=Nt(32);e[0]=127&e[0]|64,e[31]&=248;const t=e.slice().reverse(),{publicKey:r}=cr.box.keyPair.fromSecretKey(t);return{publicKey:O.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),r]),privateKey:e}}case"ed25519Legacy":{const e=Nt(32),t=cr.sign.keyPair.fromSeed(e);return{publicKey:O.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t.publicKey]),privateKey:e}}default:return wi(this.name)}}}async function di(e,t,r,i){const n={[F.curve.nistP256]:!0,[F.curve.nistP384]:!0,[F.curve.nistP521]:!0,[F.curve.secp256k1]:!0,[F.curve.curve25519Legacy]:e===F.publicKey.ecdh,[F.curve.brainpoolP256r1]:!0,[F.curve.brainpoolP384r1]:!0,[F.curve.brainpoolP512r1]:!0},s=t.getName();if(!n[s])return!1;if(s===F.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:e}=cr.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const t=new Uint8Array([64,...e]);return!!O.equalsUint8Array(t,r)}const a=(await O.getNobleCurve(F.publicKey.ecdsa,s)).getPublicKey(i,!1);return!!O.equalsUint8Array(a,r)}function Ai(e,t){const{payloadSize:r,wireFormatLeadingByte:i,name:n}=e,s=n===F.curve.curve25519Legacy||n===F.curve.ed25519Legacy?r:2*r;if(t[0]!==i||t.length!==s+1)throw Error("Invalid point encoding")}async function wi(e){const t=await O.getNobleCurve(F.publicKey.ecdsa,e),r=t.utils.randomPrivateKey();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function mi(e,t){const r=Y(e.x),i=Y(e.y),n=new Uint8Array(r.length+i.length+1);return n[0]=t,n.set(r,1),n.set(i,r.length+1),n}function bi(e,t,r){const i=e,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:t,x:Z(n),y:Z(s),ext:!0}}function Ei(e,t,r,i){const n=bi(e,t,r);return n.d=Z(i),n}const ki=O.getWebCrypto(),vi=O.getNodeCrypto();async function Bi(e,t,r,i,n,s){const a=new pi(e);if(Ai(a,i),r&&!O.isStream(r)){const e={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(e,t,r,i){const n=e.payloadSize,s=Ei(e.payloadSize,li[e.name],i.publicKey,i.privateKey),a=await ki.importKey("jwk",s,{name:"ECDSA",namedCurve:li[e.name],hash:{name:F.read(F.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await ki.sign({name:"ECDSA",namedCurve:li[e.name],hash:{name:F.read(F.webHash,t)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;O.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,i){const n=O.nodeRequire("eckey-utils"),s=O.getNodeBuffer(),{privateKey:a}=n.generateDer({curveName:fi[e.name],privateKey:s.from(i)}),o=vi.createSign(F.read(F.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=e.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,t,r,n)}}const o=(await O.getNobleCurve(F.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:_t(o.r,"be",a.payloadSize),s:_t(o.s,"be",a.payloadSize)}}async function Ii(e,t,r,i,n,s){const a=new pi(e);Ai(a,n);const o=async()=>0===s[0]&&Si(a,r,s.subarray(1),n);if(i&&!O.isStream(i))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:i},n,s){const a=bi(e.payloadSize,li[e.name],s),o=await ki.importKey("jwk",a,{name:"ECDSA",namedCurve:li[e.name],hash:{name:F.read(F.webHash,e.hash)}},!1,["verify"]),c=O.concatUint8Array([r,i]).buffer;return ki.verify({name:"ECDSA",namedCurve:li[e.name],hash:{name:F.read(F.webHash,t)}},o,c,n)}(a,t,r,i,n);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;O.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:i},n,s){const a=O.nodeRequire("eckey-utils"),o=O.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:fi[e.name],publicKey:o.from(s)}),h=vi.createVerify(F.read(F.hash,t));h.write(n),h.end();const u=O.concatUint8Array([r,i]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(e){return!1}}(a,t,r,i,n);return e||o()}}return await Si(a,r,s,n)||o()}async function Si(e,t,r,i){return(await O.getNobleCurve(F.publicKey.ecdsa,e.name)).verify(O.concatUint8Array([t.r,t.s]),r,i,{lowS:!1})}var Ci=/*#__PURE__*/Object.freeze({__proto__:null,sign:Bi,validateParams:async function(e,t,r){const i=new pi(e);if(i.keyType!==F.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=Nt(8),n=F.hash.sha256,s=await Ie.digest(n,i);try{const a=await Bi(e,n,i,t,r,s);return await Ii(e,n,a,i,t,s)}catch(e){return!1}}default:return di(F.publicKey.ecdsa,e,t,r)}},verify:Ii});
|
|
3
|
+
/*! noble-ed25519 - MIT License (c) 2019 Paul Miller (paulmillr.com) */const Ki=BigInt(0),Pi=BigInt(1),Di=BigInt(2),Ui=BigInt(8),xi=BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),Qi=Object.freeze({a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),P:BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),l:xi,n:xi,h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960")}),Ri=BigInt("0x10000000000000000000000000000000000000000000000000000000000000000"),Mi=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");BigInt("6853475219497561581579357271197624642482790079785650197046958215289687604742");const Ti=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),Li=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),_i=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),Fi=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");class Ni{constructor(e,t,r,i){this.x=e,this.y=t,this.z=r,this.t=i}static fromAffine(e){if(!(e instanceof Vi))throw new TypeError("ExtendedPoint#fromAffine: expected Point");return e.equals(Vi.ZERO)?Ni.ZERO:new Ni(e.x,e.y,Pi,an(e.x*e.y))}static toAffineBatch(e){const t=function(e,t=Qi.P){const r=Array(e.length),i=e.reduce(((e,i,n)=>i===Ki?e:(r[n]=e,an(e*i,t))),Pi),n=on(i,t);return e.reduceRight(((e,i,n)=>i===Ki?e:(r[n]=an(e*r[n],t),an(e*i,t))),n),r}(e.map((e=>e.z)));return e.map(((e,r)=>e.toAffine(t[r])))}static normalizeZ(e){return this.toAffineBatch(e).map(this.fromAffine)}equals(e){Oi(e);const{x:t,y:r,z:i}=this,{x:n,y:s,z:a}=e,o=an(t*a),c=an(n*i),h=an(r*a),u=an(s*i);return o===c&&h===u}negate(){return new Ni(an(-this.x),this.y,this.z,an(-this.t))}double(){const{x:e,y:t,z:r}=this,{a:i}=Qi,n=an(e*e),s=an(t*t),a=an(Di*an(r*r)),o=an(i*n),c=e+t,h=an(an(c*c)-n-s),u=o+s,l=u-a,y=o-s,f=an(h*l),g=an(u*y),p=an(h*y),d=an(l*u);return new Ni(f,g,d,p)}add(e){Oi(e);const{x:t,y:r,z:i,t:n}=this,{x:s,y:a,z:o,t:c}=e,h=an((r-t)*(a+s)),u=an((r+t)*(a-s)),l=an(u-h);if(l===Ki)return this.double();const y=an(i*Di*c),f=an(n*Di*o),g=f+y,p=u+h,d=f-y,A=an(g*l),w=an(p*d),m=an(g*d),b=an(l*p);return new Ni(A,w,b,m)}subtract(e){return this.add(e.negate())}precomputeWindow(e){const t=1+256/e,r=[];let i=this,n=i;for(let s=0;s<t;s++){n=i,r.push(n);for(let t=1;t<2**(e-1);t++)n=n.add(i),r.push(n);i=n.double()}return r}wNAF(e,t){!t&&this.equals(Ni.BASE)&&(t=Vi.BASE);const r=t&&t._WINDOW_SIZE||1;if(256%r)throw Error("Point#wNAF: Invalid precomputation window, must be power of 2");let i=t&&ji.get(t);i||(i=this.precomputeWindow(r),t&&1!==r&&(i=Ni.normalizeZ(i),ji.set(t,i)));let n=Ni.ZERO,s=Ni.BASE;const a=1+256/r,o=2**(r-1),c=BigInt(2**r-1),h=2**r,u=BigInt(r);for(let t=0;t<a;t++){const r=t*o;let a=Number(e&c);e>>=u,a>o&&(a-=h,e+=Pi);const l=r,y=r+Math.abs(a)-1,f=t%2!=0,g=a<0;0===a?s=s.add(Hi(f,i[l])):n=n.add(Hi(g,i[y]))}return Ni.normalizeZ([n,s])[0]}multiply(e,t){return this.wNAF(fn(e,Qi.l),t)}multiplyUnsafe(e){let t=fn(e,Qi.l,!1);const r=Ni.BASE,i=Ni.ZERO;if(t===Ki)return i;if(this.equals(i)||t===Pi)return this;if(this.equals(r))return this.wNAF(t);let n=i,s=this;for(;t>Ki;)t&Pi&&(n=n.add(s)),s=s.double(),t>>=Pi;return n}isSmallOrder(){return this.multiplyUnsafe(Qi.h).equals(Ni.ZERO)}isTorsionFree(){let e=this.multiplyUnsafe(Qi.l/Di).double();return Qi.l%Di&&(e=e.add(this)),e.equals(Ni.ZERO)}toAffine(e){const{x:t,y:r,z:i}=this,n=this.equals(Ni.ZERO);null==e&&(e=n?Ui:on(i));const s=an(t*e),a=an(r*e),o=an(i*e);if(n)return Vi.ZERO;if(o!==Pi)throw Error("invZ was invalid");return new Vi(s,a)}fromRistrettoBytes(){Gi()}toRistrettoBytes(){Gi()}fromRistrettoHash(){Gi()}}function Hi(e,t){const r=t.negate();return e?r:t}function Oi(e){if(!(e instanceof Ni))throw new TypeError("ExtendedPoint expected")}function zi(e){if(!(e instanceof qi))throw new TypeError("RistrettoPoint expected")}function Gi(){throw Error("Legacy method: switch to RistrettoPoint")}Ni.BASE=new Ni(Qi.Gx,Qi.Gy,Pi,an(Qi.Gx*Qi.Gy)),Ni.ZERO=new Ni(Ki,Pi,Pi,Ki);class qi{constructor(e){this.ep=e}static calcElligatorRistrettoMap(e){const{d:t}=Qi,r=an(Mi*e*e),i=an((r+Pi)*_i);let n=BigInt(-1);const s=an((n-t*r)*an(r+t));let{isValid:a,value:o}=hn(i,s),c=an(o*e);tn(c)||(c=an(-c)),a||(o=c),a||(n=r);const h=an(n*(r-Pi)*Fi-s),u=o*o,l=an((o+o)*s),y=an(h*Ti),f=an(Pi-u),g=an(Pi+u);return new Ni(an(l*g),an(f*y),an(y*g),an(l*f))}static hashToCurve(e){const t=sn((e=yn(e,64)).slice(0,32)),r=this.calcElligatorRistrettoMap(t),i=sn(e.slice(32,64)),n=this.calcElligatorRistrettoMap(i);return new qi(r.add(n))}static fromHex(e){e=yn(e,32);const{a:t,d:r}=Qi,i="RistrettoPoint.fromHex: the hex is not valid encoding of RistrettoPoint",n=sn(e);if(!function(e,t){if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0}(en(n),e)||tn(n))throw Error(i);const s=an(n*n),a=an(Pi+t*s),o=an(Pi-t*s),c=an(a*a),h=an(o*o),u=an(t*r*c-h),{isValid:l,value:y}=un(an(u*h)),f=an(y*o),g=an(y*f*u);let p=an((n+n)*f);tn(p)&&(p=an(-p));const d=an(a*g),A=an(p*d);if(!l||tn(A)||d===Ki)throw Error(i);return new qi(new Ni(p,d,Pi,A))}toRawBytes(){let{x:e,y:t,z:r,t:i}=this.ep;const n=an(an(r+t)*an(r-t)),s=an(e*t),a=an(s*s),{value:o}=un(an(n*a)),c=an(o*n),h=an(o*s),u=an(c*h*i);let l;if(tn(i*u)){let r=an(t*Mi),i=an(e*Mi);e=r,t=i,l=an(c*Li)}else l=h;tn(e*u)&&(t=an(-t));let y=an((r-t)*l);return tn(y)&&(y=an(-y)),en(y)}toHex(){return Wi(this.toRawBytes())}toString(){return this.toHex()}equals(e){zi(e);const t=this.ep,r=e.ep,i=an(t.x*r.y)===an(t.y*r.x),n=an(t.y*r.y)===an(t.x*r.x);return i||n}add(e){return zi(e),new qi(this.ep.add(e.ep))}subtract(e){return zi(e),new qi(this.ep.subtract(e.ep))}multiply(e){return new qi(this.ep.multiply(e))}multiplyUnsafe(e){return new qi(this.ep.multiplyUnsafe(e))}}qi.BASE=new qi(Ni.BASE),qi.ZERO=new qi(Ni.ZERO);const ji=new WeakMap;class Vi{constructor(e,t){this.x=e,this.y=t}_setWindowSize(e){this._WINDOW_SIZE=e,ji.delete(this)}static fromHex(e,t=!0){const{d:r,P:i}=Qi,n=(e=yn(e,32)).slice();n[31]=-129&e[31];const s=rn(n);if(t&&s>=i)throw Error("Expected 0 < hex < P");if(!t&&s>=Ri)throw Error("Expected 0 < hex < 2**256");const a=an(s*s),o=an(a-Pi),c=an(r*a+Pi);let{isValid:h,value:u}=hn(o,c);if(!h)throw Error("Point.fromHex: invalid y coordinate");const l=(u&Pi)===Pi;return!!(128&e[31])!==l&&(u=an(-u)),new Vi(u,s)}static async fromPrivateKey(e){return(await pn(e)).point}toRawBytes(){const e=en(this.y);return e[31]|=this.x&Pi?128:0,e}toHex(){return Wi(this.toRawBytes())}toX25519(){const{y:e}=this;return en(an((Pi+e)*on(Pi-e)))}isTorsionFree(){return Ni.fromAffine(this).isTorsionFree()}equals(e){return this.x===e.x&&this.y===e.y}negate(){return new Vi(an(-this.x),this.y)}add(e){return Ni.fromAffine(this).add(Ni.fromAffine(e)).toAffine()}subtract(e){return this.add(e.negate())}multiply(e){return Ni.fromAffine(this).multiply(e,this).toAffine()}}Vi.BASE=new Vi(Qi.Gx,Qi.Gy),Vi.ZERO=new Vi(Ki,Pi);let Yi=class e{constructor(e,t){this.r=e,this.s=t,this.assertValidity()}static fromHex(t){const r=yn(t,64),i=Vi.fromHex(r.slice(0,32),!1),n=rn(r.slice(32,64));return new e(i,n)}assertValidity(){const{r:e,s:t}=this;if(!(e instanceof Vi))throw Error("Expected Point instance");return fn(t,Qi.l,!1),this}toRawBytes(){const e=new Uint8Array(64);return e.set(this.r.toRawBytes()),e.set(en(this.s),32),e}toHex(){return Wi(this.toRawBytes())}};function Zi(...e){if(!e.every((e=>e instanceof Uint8Array)))throw Error("Expected Uint8Array list");if(1===e.length)return e[0];const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}const Ji=Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function Wi(e){if(!(e instanceof Uint8Array))throw Error("Uint8Array expected");let t="";for(let r=0;r<e.length;r++)t+=Ji[e[r]];return t}function $i(e){if("string"!=typeof e)throw new TypeError("hexToBytes: expected string, got "+typeof e);if(e.length%2)throw Error("hexToBytes: received invalid unpadded hex");const t=new Uint8Array(e.length/2);for(let r=0;r<t.length;r++){const i=2*r,n=e.slice(i,i+2),s=Number.parseInt(n,16);if(Number.isNaN(s)||s<0)throw Error("Invalid byte sequence");t[r]=s}return t}function Xi(e){return $i(e.toString(16).padStart(64,"0"))}function en(e){return Xi(e).reverse()}function tn(e){return(an(e)&Pi)===Pi}function rn(e){if(!(e instanceof Uint8Array))throw Error("Expected Uint8Array");return BigInt("0x"+Wi(Uint8Array.from(e).reverse()))}const nn=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function sn(e){return an(rn(e)&nn)}function an(e,t=Qi.P){const r=e%t;return r>=Ki?r:t+r}function on(e,t=Qi.P){if(e===Ki||t<=Ki)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=an(e,t),i=t,n=Ki,s=Pi;for(;r!==Ki;){const e=i%r,t=n-s*(i/r);i=r,r=e,n=s,s=t}if(i!==Pi)throw Error("invert: does not exist");return an(n,t)}function cn(e,t){const{P:r}=Qi;let i=e;for(;t-- >Ki;)i*=i,i%=r;return i}function hn(e,t){const r=an(t*t*t),i=function(e){const{P:t}=Qi,r=BigInt(5),i=BigInt(10),n=BigInt(20),s=BigInt(40),a=BigInt(80),o=e*e%t*e%t,c=cn(o,Di)*o%t,h=cn(c,Pi)*e%t,u=cn(h,r)*h%t,l=cn(u,i)*u%t,y=cn(l,n)*l%t,f=cn(y,s)*y%t,g=cn(f,a)*f%t,p=cn(g,a)*f%t,d=cn(p,i)*u%t;return{pow_p_5_8:cn(d,Di)*e%t,b2:o}}(e*an(r*r*t)).pow_p_5_8;let n=an(e*r*i);const s=an(t*n*n),a=n,o=an(n*Mi),c=s===e,h=s===an(-e),u=s===an(-e*Mi);return c&&(n=a),(h||u)&&(n=o),tn(n)&&(n=an(-n)),{isValid:c||h,value:n}}function un(e){return hn(Pi,e)}function ln(e){return an(rn(e),Qi.l)}function yn(e,t){const r=e instanceof Uint8Array?Uint8Array.from(e):$i(e);if("number"==typeof t&&r.length!==t)throw Error(`Expected ${t} bytes`);return r}function fn(e,t,r=!0){if(!t)throw new TypeError("Specify max value");if("number"==typeof e&&Number.isSafeInteger(e)&&(e=BigInt(e)),"bigint"==typeof e&&e<t)if(r){if(Ki<e)return e}else if(Ki<=e)return e;throw new TypeError("Expected valid scalar: 0 < scalar < max")}let gn;async function pn(e){return function(e){const t=function(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}(e.slice(0,32)),r=e.slice(32,64),i=ln(t),n=Vi.BASE.multiply(i),s=n.toRawBytes();return{head:t,prefix:r,scalar:i,point:n,pointBytes:s}}(await wn.sha512(function(e){if(32!==(e="bigint"==typeof e||"number"==typeof e?Xi(fn(e,Ri)):yn(e)).length)throw Error("Expected 32 bytes");return e}(e)))}async function dn(e,t,r){const{r:i,SB:n,msg:s,pub:a}=function(e,t,r){t=yn(t),r instanceof Vi||(r=Vi.fromHex(r,!1));const{r:i,s:n}=e instanceof Yi?e.assertValidity():Yi.fromHex(e);return{r:i,s:n,SB:Ni.BASE.multiplyUnsafe(n),pub:r,msg:t}}(e,t,r),o=await wn.sha512(i.toRawBytes(),a.toRawBytes(),s);return function(e,t,r,i){const n=ln(i),s=Ni.fromAffine(e).multiplyUnsafe(n);return Ni.fromAffine(t).add(s).subtract(r).multiplyUnsafe(Qi.h).equals(Ni.ZERO)}(a,i,n,o)}Vi.BASE._setWindowSize(8);const An={node:o,web:"object"==typeof self&&"crypto"in self?self.crypto:void 0},wn={bytesToHex:Wi,hexToBytes:$i,concatBytes:Zi,getExtendedPublicKey:pn,mod:an,invert:on,TORSION_SUBGROUP:["0100000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a","0000000000000000000000000000000000000000000000000000000000000080","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05","ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc85","0000000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa"],hashToPrivateScalar:e=>{if((e=yn(e)).length<40||e.length>1024)throw Error("Expected 40-1024 bytes of private key as per FIPS 186");return an(rn(e),Qi.l-Pi)+Pi},randomBytes:(e=32)=>{if(An.web)return An.web.getRandomValues(new Uint8Array(e));if(An.node){const{randomBytes:t}=An.node;return new Uint8Array(t(e).buffer)}throw Error("The environment doesn't have randomBytes function")},randomPrivateKey:()=>wn.randomBytes(32),sha512:async(...e)=>{const t=Zi(...e);if(An.web){const e=await An.web.subtle.digest("SHA-512",t.buffer);return new Uint8Array(e)}if(An.node)return Uint8Array.from(An.node.createHash("sha512").update(t).digest());throw Error("The environment doesn't have sha512 function")},precompute(e=8,t=Vi.BASE){const r=t.equals(Vi.BASE)?t:new Vi(t.x,t.y);return r._setWindowSize(e),r.multiply(Di),r},sha512Sync:void 0};Object.defineProperties(wn,{sha512Sync:{configurable:!1,get:()=>gn,set(e){gn||(gn=e)}}});var mn=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){if(Ai(new pi(e),i),Ie.getHashByteLength(t)<Ie.getHashByteLength(F.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=O.concatUint8Array([n,i.subarray(1)]),o=cr.sign.detached(s,a);return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(e,t,r){if(e.getName()!==F.curve.ed25519Legacy)return!1;const{publicKey:i}=cr.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return O.equalsUint8Array(t,n)},verify:async function(e,t,{r,s:i},n,s,a){if(Ai(new pi(e),s),Ie.getHashByteLength(t)<Ie.getHashByteLength(F.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");return dn(O.concatUint8Array([r,i]),a,s.subarray(1))}});function bn(e){switch(e){case F.publicKey.ed25519:return 32;case F.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function En(e){switch(e){case F.publicKey.ed25519:return F.hash.sha256;case F.publicKey.ed448:return F.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var kn=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){switch(e){case F.publicKey.ed25519:{const t=Nt(bn(e)),{publicKey:r}=cr.sign.keyPair.fromSeed(t);return{A:r,seed:t}}case F.publicKey.ed448:{const e=await O.getNobleCurve(F.publicKey.ed448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),seed:t}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:bn,getPreferredHashAlgo:En,sign:async function(e,t,r,i,n,s){if(Ie.getHashByteLength(t)<Ie.getHashByteLength(En(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case F.publicKey.ed25519:{const e=O.concatUint8Array([n,i]);return{RS:cr.sign.detached(s,e)}}case F.publicKey.ed448:return{RS:(await O.getNobleCurve(F.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(e,t,r){switch(e){case F.publicKey.ed25519:{const{publicKey:e}=cr.sign.keyPair.fromSeed(r);return O.equalsUint8Array(t,e)}case F.publicKey.ed448:{const e=(await O.getNobleCurve(F.publicKey.ed448)).getPublicKey(r);return O.equalsUint8Array(t,e)}default:return!1}},verify:async function(e,t,{RS:r},i,n,s){if(Ie.getHashByteLength(t)<Ie.getHashByteLength(En(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case F.publicKey.ed25519:return dn(r,s,n);case F.publicKey.ed448:return(await O.getNobleCurve(F.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});const vn=O.getWebCrypto();async function Bn(e,t,r){const{keySize:i}=ce(e);if(!O.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");try{const e=await vn.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),i=await vn.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),n=await vn.wrapKey("raw",i,e,{name:"AES-KW"});return new Uint8Array(n)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return function(e,t,r){const i=new qe(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=Sn(r);let a=n;const o=s,c=s.length/2,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=0;e<=5;++e)for(let t=0;t<c;++t)h[1]=c*e+(1+t),u[0]=a[0],u[1]=a[1],u[2]=o[2*t],u[3]=o[2*t+1],u=Sn(i.encrypt(Cn(u))),a=u.subarray(0,2),a[0]^=h[0],a[1]^=h[1],o[2*t]=u[2],o[2*t+1]=u[3];return Cn(a,o)}(0,t,r)}async function In(e,t,r){const{keySize:i}=ce(e);if(!O.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");let n;try{n=await vn.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return O.printDebugError("Browser did not support operation: "+e.message),function(e,t,r){const i=new qe(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=Sn(r);let a=s.subarray(0,2);const o=s.subarray(2),c=s.length/2-1,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=5;e>=0;--e)for(let t=c-1;t>=0;--t)h[1]=c*e+(t+1),u[0]=a[0]^h[0],u[1]=a[1]^h[1],u[2]=o[2*t],u[3]=o[2*t+1],u=Sn(i.decrypt(Cn(u))),a=u.subarray(0,2),o[2*t]=u[2],o[2*t+1]=u[3];if(a[0]===n[0]&&a[1]===n[1])return Cn(o);throw Error("Key Data Integrity failed")}(0,t,r)}try{const e=await vn.unwrapKey("raw",r,n,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await vn.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}function Sn(e){const t=e.buffer,r=new DataView(t),i=new Uint32Array(e.length/4);for(let t=0;t<e.length/4;++t)i[t]=r.getUint32(4*t);return i}function Cn(){let e=0;for(let t=0;t<arguments.length;++t)e+=4*arguments[t].length;const t=new ArrayBuffer(e),r=new DataView(t);let i=0;for(let e=0;e<arguments.length;++e){for(let t=0;t<arguments[e].length;++t)r.setUint32(i+4*t,arguments[e][t]);i+=4*arguments[e].length}return new Uint8Array(t)}var Kn=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:In,wrap:Bn});function Pn(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}function Dn(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const i=e.subarray(t-r),n=new Uint8Array(r).fill(r);if(O.equalsUint8Array(i,n))return e.subarray(0,t-r)}}throw Error("Invalid padding")}var Un=/*#__PURE__*/Object.freeze({__proto__:null,decode:Dn,encode:Pn});const xn=O.getWebCrypto(),Qn=O.getNodeCrypto();function Rn(e,t,r,i){return O.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),O.stringToUint8Array("Anonymous Sender "),r.replacementFingerprint||i])}async function Mn(e,t,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await Ie.digest(e,O.concatUint8Array([new Uint8Array([0,0,0,1]),t,i]))).subarray(0,r)}async function Tn(e,t){switch(e.type){case"curve25519Legacy":{const r=Nt(32),{secretKey:i,sharedKey:n}=await Ln(e,t,null,r);let{publicKey:s}=cr.box.keyPair.fromSecretKey(i);return s=O.concatUint8Array([new Uint8Array([e.wireFormatLeadingByte]),s]),{publicKey:s,sharedKey:n}}case"web":if(e.web&&O.getWebCrypto())try{return await async function(e,t){const r=bi(e.payloadSize,e.web,t);let i=xn.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),n=xn.importKey("jwk",r,{name:"ECDH",namedCurve:e.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=xn.deriveBits({name:"ECDH",namedCurve:e.web,public:n},i.privateKey,e.sharedSize),a=xn.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(mi(a,e.wireFormatLeadingByte));return{publicKey:c,sharedKey:o}}(e,t)}catch(r){return O.printDebugError(r),Fn(e,t)}break;case"node":return async function(e,t){const r=Qn.createECDH(e.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(t)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(e,t);default:return Fn(e,t)}}async function Ln(e,t,r,i){if(i.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(i,e.payloadSize-i.length),i=t}switch(e.type){case"curve25519Legacy":{const e=i.slice().reverse();return{secretKey:e,sharedKey:cr.scalarMult(e,t.subarray(1))}}case"web":if(e.web&&O.getWebCrypto())try{return await async function(e,t,r,i){const n=Ei(e.payloadSize,e.web,r,i);let s=xn.importKey("jwk",n,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const a=bi(e.payloadSize,e.web,t);let o=xn.importKey("jwk",a,{name:"ECDH",namedCurve:e.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=xn.deriveBits({name:"ECDH",namedCurve:e.web,public:o},s,e.sharedSize),h=xn.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:Y(h.d),sharedKey:u}}(e,t,r,i)}catch(r){return O.printDebugError(r),_n(e,t,i)}break;case"node":return async function(e,t,r){const i=Qn.createECDH(e.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(t));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(e,t,i);default:return _n(e,t,i)}}async function _n(e,t,r){return{secretKey:r,sharedKey:(await O.getNobleCurve(F.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function Fn(e,t){const r=await O.getNobleCurve(F.publicKey.ecdh,e.name),{publicKey:i,privateKey:n}=await e.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,t).subarray(1)}}var Nn=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a){const o=new pi(e);Ai(o,n),Ai(o,r);const{sharedKey:c}=await Ln(o,r,n,s),h=Rn(F.publicKey.ecdh,e,t,a),{keySize:u}=ce(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await Mn(t.hash,c,u,h,1===e,2===e);return Dn(await In(t.cipher,r,i))}catch(e){l=e}throw l},encrypt:async function(e,t,r,i,n){const s=Pn(r),a=new pi(e);Ai(a,i);const{publicKey:o,sharedKey:c}=await Tn(a,i),h=Rn(F.publicKey.ecdh,e,t,n),{keySize:u}=ce(t.cipher),l=await Mn(t.hash,c,u,h);return{publicKey:o,wrappedKey:await Bn(t.cipher,l,s)}},validateParams:async function(e,t,r){return di(F.publicKey.ecdh,e,t,r)}});const Hn=O.getWebCrypto();async function On(e,t,r,i,n){const s=F.read(F.webHash,e);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Hn.importKey("raw",t,"HKDF",!1,["deriveBits"]),o=await Hn.deriveBits({name:"HKDF",hash:s,salt:r,info:i},a,8*n);return new Uint8Array(o)}const zn={x25519:O.encodeUTF8("OpenPGP X25519"),x448:O.encodeUTF8("OpenPGP X448")};var Gn=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){switch(e){case F.publicKey.x25519:{const e=cr.scalarMult(n,t),s=O.concatUint8Array([t,i,e]),a=F.symmetric.aes128,{keySize:o}=ce(a);return In(a,await On(F.hash.sha256,s,new Uint8Array,zn.x25519,o),r)}case F.publicKey.x448:{const e=(await O.getNobleCurve(F.publicKey.x448)).getSharedSecret(n,t),s=O.concatUint8Array([t,i,e]),a=F.symmetric.aes256,{keySize:o}=ce(F.symmetric.aes256);return In(a,await On(F.hash.sha512,s,new Uint8Array,zn.x448,o),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(e,t,r){switch(e){case F.publicKey.x25519:{const e=Nt(32),i=cr.scalarMult(e,r),{publicKey:n}=cr.box.keyPair.fromSecretKey(e),s=O.concatUint8Array([n,r,i]),a=F.symmetric.aes128,{keySize:o}=ce(a),c=await On(F.hash.sha256,s,new Uint8Array,zn.x25519,o);return{ephemeralPublicKey:n,wrappedKey:await Bn(a,c,t)}}case F.publicKey.x448:{const e=await O.getNobleCurve(F.publicKey.x448),i=e.utils.randomPrivateKey(),n=e.getSharedSecret(i,r),s=e.getPublicKey(i),a=O.concatUint8Array([s,r,n]),o=F.symmetric.aes256,{keySize:c}=ce(F.symmetric.aes256),h=await On(F.hash.sha512,a,new Uint8Array,zn.x448,c);return{ephemeralPublicKey:s,wrappedKey:await Bn(o,h,t)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(e){switch(e){case F.publicKey.x25519:{const e=Nt(32),{publicKey:t}=cr.box.keyPair.fromSecretKey(e);return{A:t,k:e}}case F.publicKey.x448:{const e=await O.getNobleCurve(F.publicKey.x448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),k:t}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(e){switch(e){case F.publicKey.x25519:return 32;case F.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(e,t,r){switch(e){case F.publicKey.x25519:{const{publicKey:e}=cr.box.keyPair.fromSecretKey(r);return O.equalsUint8Array(t,e)}case F.publicKey.x448:{const e=(await O.getNobleCurve(F.publicKey.x448)).getPublicKey(r);return O.equalsUint8Array(t,e)}default:return!1}}}),qn=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:pi,ecdh:Nn,ecdhX:Gn,ecdsa:Ci,eddsa:kn,eddsaLegacy:mn,generate:async function(e){const t=new pi(e),{oid:r,hash:i,cipher:n}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:O.leftPad(s.privateKey,t.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(e){return gi[e.getName()].hash}});const jn=BigInt(0),Vn=BigInt(1);var Yn=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){const a=BigInt(0);let o,c,h,u;i=Pt(i),n=Pt(n),r=Pt(r),s=Pt(s),r=Dt(r,i),s=Dt(s,n);const l=Dt(Pt(t.subarray(0,Lt(n))),n);for(;;){if(o=Ht(Vn,n),c=Dt(Ut(r,o,i),n),c===a)continue;const e=Dt(s*c,n);if(u=Dt(l+e,n),h=Dt(Qt(o,n)*u,n),h!==a)break}return{r:_t(c,"be",Lt(i)),s:_t(h,"be",Lt(i))}},validateParams:async function(e,t,r,i,n){if(e=Pt(e),t=Pt(t),r=Pt(r),i=Pt(i),r<=Vn||r>=e)return!1;if(Dt(e-Vn,t)!==jn)return!1;if(Ut(r,t,e)!==Vn)return!1;const s=BigInt(Tt(t));if(s<BigInt(150)||!qt(t,null,32))return!1;n=Pt(n);const a=BigInt(2);return i===Ut(r,t*Ht(a<<s-Vn,a<<s)+n,e)},verify:async function(e,t,r,i,n,s,a,o){if(t=Pt(t),r=Pt(r),s=Pt(s),a=Pt(a),n=Pt(n),o=Pt(o),t<=jn||t>=a||r<=jn||r>=a)return O.printDebug("invalid DSA Signature"),!1;const c=Dt(Pt(i.subarray(0,Lt(a))),a),h=Qt(r,a);if(h===jn)return O.printDebug("invalid DSA Signature"),!1;n=Dt(n,s),o=Dt(o,s);const u=Dt(c*h,a),l=Dt(t*h,a);return Dt(Dt(Ut(n,u,s)*Ut(o,l,s),s),a)===t}});const Zn=new Set([F.hash.sha1,F.hash.sha256,F.hash.sha512]),Jn=O.getWebCrypto(),Wn=O.getNodeCrypto();var $n={rsa:nr,elgamal:ar,elliptic:qn,dsa:Yn,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){if(!Zn.has(e))throw Error("Unsupported hash algorithm.");const t=F.read(F.webHash,e),r=Jn||Wn.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(e,t,r){if(!Zn.has(e))throw Error("Unsupported hash algorithm.");const i=F.read(F.webHash,e),n=Jn||Wn.webcrypto.subtle,s=await n.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(e,t,r,i){if(!Zn.has(e))throw Error("Unsupported hash algorithm.");const n=F.read(F.webHash,e),s=Jn||Wn.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class Xn{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!O.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return O.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}var es=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(e,t){let r=0;switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case F.publicKey.dsa:case F.publicKey.ecdsa:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const i=O.readMPI(t.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:e,s:i}}}case F.publicKey.eddsaLegacy:{let e=O.readMPI(t.subarray(r));r+=e.length+2,e=O.leftPad(e,32);let i=O.readMPI(t.subarray(r));return r+=i.length+2,i=O.leftPad(i,32),{read:r,signatureParams:{r:e,s:i}}}case F.publicKey.ed25519:case F.publicKey.ed448:{const i=2*$n.elliptic.eddsa.getPayloadSize(e),n=O.readExactSubarray(t,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case F.publicKey.hmac:{const e=new Xn;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}default:throw new ai("Unknown signature algorithm.")}},sign:async function(e,t,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await $n.rsa.sign(t,n,e,a,o,c,h,u,s)}}case F.publicKey.dsa:{const{g:e,p:n,q:a}=r,{x:o}=i;return $n.dsa.sign(t,s,e,n,a,o)}case F.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case F.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=i;return $n.elliptic.ecdsa.sign(e,t,n,a,o,s)}case F.publicKey.eddsaLegacy:{const{oid:e,Q:a}=r,{seed:o}=i;return $n.elliptic.eddsaLegacy.sign(e,t,n,a,o,s)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return $n.elliptic.eddsa.sign(e,t,n,a,o,s)}case F.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=i,n=await $n.hmac.sign(e.getValue(),t,s);return{mac:new Xn(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(e,t,r,i,n,s,a){switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const{n:e,e:n}=i,o=O.leftPad(r.s,e.length);return $n.rsa.verify(t,s,o,e,n,a)}case F.publicKey.dsa:{const{g:e,p:n,q:s,y:o}=i,{r:c,s:h}=r;return $n.dsa.verify(t,c,h,a,e,n,s,o)}case F.publicKey.ecdsa:{const{oid:e,Q:n}=i,o=new $n.elliptic.CurveWithOID(e).payloadSize,c=O.leftPad(r.r,o),h=O.leftPad(r.s,o);return $n.elliptic.ecdsa.verify(e,t,{r:c,s:h},s,n,a)}case F.publicKey.eddsaLegacy:{const{oid:e,Q:n}=i;return $n.elliptic.eddsaLegacy.verify(e,t,r,s,n,a)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:n}=i;return $n.elliptic.eddsa.verify(e,t,r,s,n,a)}case F.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=i,{keyMaterial:t}=n;return $n.hmac.verify(e.getValue(),t,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class ts{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return O.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class rs{constructor(e){if(e){const{version:t,hash:r,cipher:i,replacementFingerprint:n}=e;this.version=t||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new ai("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const i=t-r+1;this.replacementFingerprint=e.slice(r,r+i),r+=i}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return O.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const is=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=F.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return F.read(e,this.data)}getValue(){return this.data}},ns=is(F.aead),ss=is(F.symmetric),as=is(F.hash);class os{static fromObject({wrappedKey:e,algorithm:t}){const r=new os;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=O.readExactSubarray(e,t,t+r),t+=r}write(){return O.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function cs(e,t){const r=Nt(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await Ie.sha256(r)}}}function hs(e){const{keySize:t}=ce(e);return Nt(t)}function us(e){const t=F.read(F.aead,e);return St[t]}function ls(e){try{e.getName()}catch(e){throw new ai("Unknown curve OID")}}function ys(e,t){switch(e){case F.publicKey.ecdsa:case F.publicKey.ecdh:case F.publicKey.eddsaLegacy:return new $n.elliptic.CurveWithOID(t).payloadSize;case F.publicKey.ed25519:case F.publicKey.ed448:return $n.elliptic.eddsa.getPayloadSize(e);case F.publicKey.x25519:case F.publicKey.x448:return $n.elliptic.ecdhX.getPayloadSize(e);default:throw Error("Unknown elliptic algo")}}var fs=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(e,t,r,i){switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:return $n.rsa.generate(t,65537).then((({n:e,e:t,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:e,e:t}})));case F.publicKey.ecdsa:return $n.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new $r(e),Q:t}})));case F.publicKey.eddsaLegacy:return $n.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new $r(e),Q:t}})));case F.publicKey.ecdh:return $n.elliptic.generate(r).then((({oid:e,Q:t,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new $r(e),Q:t,kdfParams:new rs({hash:i,cipher:n})}})));case F.publicKey.ed25519:case F.publicKey.ed448:return $n.elliptic.eddsa.generate(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case F.publicKey.x25519:case F.publicKey.x448:return $n.elliptic.ecdhX.generate(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case F.publicKey.hmac:return cs(await $n.hmac.generate(i),new as(i));case F.publicKey.aead:return cs(hs(i),new ss(i));case F.publicKey.dsa:case F.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:hs,getAEADMode:us,getCipherParams:ce,getCurvePayloadSize:ys,getPreferredCurveHashAlgo:function(e,t){switch(e){case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:return $n.elliptic.getPreferredHashAlgo(t);case F.publicKey.ed25519:case F.publicKey.ed448:return $n.elliptic.eddsa.getPreferredHashAlgo(e);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(e){const{blockSize:t}=ce(e),r=await Nt(t),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return O.concat([r,i])},parseEncSessionKeyParams:function(e,t){let r=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:return{c:O.readMPI(t.subarray(r))};case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(r));r+=e.length+2;return{c1:e,c2:O.readMPI(t.subarray(r))}}case F.publicKey.ecdh:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const i=new ts;return i.read(t.subarray(r)),{V:e,C:i}}case F.publicKey.x25519:case F.publicKey.x448:{const i=ys(e),n=O.readExactSubarray(t,r,r+i);r+=n.length;const s=new os;return s.read(t.subarray(r)),{ephemeralPublicKey:n,C:s}}case F.publicKey.aead:{const e=new ns;r+=e.read(t.subarray(r));const{ivLength:i}=us(e.getValue()),n=t.subarray(r,r+i);r+=i;const s=new Xn;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:n,c:s}}default:throw new ai("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(e,t,r){let i=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(i));i+=e.length+2;const r=O.readMPI(t.subarray(i));i+=r.length+2;const n=O.readMPI(t.subarray(i));i+=n.length+2;const s=O.readMPI(t.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:e,p:r,q:n,u:s}}}case F.publicKey.dsa:case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(i));return i+=e.length+2,{read:i,privateParams:{x:e}}}case F.publicKey.ecdsa:case F.publicKey.ecdh:{const n=ys(e,r.oid);let s=O.readMPI(t.subarray(i));return i+=s.length+2,s=O.leftPad(s,n),{read:i,privateParams:{d:s}}}case F.publicKey.eddsaLegacy:{const n=ys(e,r.oid);if(r.oid.getName()!==F.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let s=O.readMPI(t.subarray(i));return i+=s.length+2,s=O.leftPad(s,n),{read:i,privateParams:{seed:s}}}case F.publicKey.ed25519:case F.publicKey.ed448:{const r=ys(e),n=O.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case F.publicKey.x25519:case F.publicKey.x448:{const r=ys(e),n=O.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case F.publicKey.hmac:{const{cipher:e}=r,n=Ie.getHashByteLength(e.getValue()),s=t.subarray(i,i+32);i+=32;const a=t.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case F.publicKey.aead:{const{cipher:e}=r,n=t.subarray(i,i+32);i+=32;const{keySize:s}=ce(e.getValue()),a=t.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new ai("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(e,t){let r=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const i=O.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:e,e:i}}}case F.publicKey.dsa:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const i=O.readMPI(t.subarray(r));r+=i.length+2;const n=O.readMPI(t.subarray(r));r+=n.length+2;const s=O.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:i,g:n,y:s}}}case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const i=O.readMPI(t.subarray(r));r+=i.length+2;const n=O.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:e,g:i,y:n}}}case F.publicKey.ecdsa:{const e=new $r;r+=e.read(t),ls(e);const i=O.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:e,Q:i}}}case F.publicKey.eddsaLegacy:{const e=new $r;if(r+=e.read(t),ls(e),e.getName()!==F.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let i=O.readMPI(t.subarray(r));return r+=i.length+2,i=O.leftPad(i,33),{read:r,publicParams:{oid:e,Q:i}}}case F.publicKey.ecdh:{const e=new $r;r+=e.read(t),ls(e);const i=O.readMPI(t.subarray(r));r+=i.length+2;const n=new rs;return r+=n.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:i,kdfParams:n}}}case F.publicKey.ed25519:case F.publicKey.ed448:case F.publicKey.x25519:case F.publicKey.x448:{const i=O.readExactSubarray(t,r,r+ys(e));return r+=i.length,{read:r,publicParams:{A:i}}}case F.publicKey.hmac:case F.publicKey.aead:{const e=new ss;r+=e.read(t);const i=Ie.getHashByteLength(F.hash.sha256),n=t.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:e,digest:n}}}default:throw new ai("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(e,t,r,i,n,s){switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:{const{c:e}=i,{n,e:a}=t,{d:o,p:c,q:h,u}=r;return $n.rsa.decrypt(e,n,a,o,c,h,u,s)}case F.publicKey.elgamal:{const{c1:e,c2:n}=i,a=t.p,o=r.x;return $n.elgamal.decrypt(e,n,a,o,s)}case F.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:h}=i;return $n.elliptic.ecdh.decrypt(e,a,c,h.data,s,o,n)}case F.publicKey.x25519:case F.publicKey.x448:{const{A:n}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!O.isAES(o.algorithm))throw Error("AES session key expected");return $n.elliptic.ecdhX.decrypt(e,a,o.wrappedKey,n,s)}case F.publicKey.aead:{const{cipher:e}=t,n=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=us(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(e,t,r,i,n,s){switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await $n.rsa.encrypt(n,e,t)}}case F.publicKey.elgamal:{const{p:e,g:t,y:i}=r;return $n.elgamal.encrypt(n,e,t,i)}case F.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await $n.elliptic.ecdh.encrypt(e,i,n,t,s);return{V:a,C:new ts(o)}}case F.publicKey.x25519:case F.publicKey.x448:{if(t&&!O.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await $n.elliptic.ecdhX.encrypt(e,n,i);return{ephemeralPublicKey:s,C:os.fromObject({algorithm:t,wrappedKey:a})}}case F.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=i,a=N.preferredAEADAlgorithm,o=us(N.preferredAEADAlgorithm),{ivLength:c}=o,h=Nt(c),u=await o(t,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new ns(a),iv:h,c:new Xn(l)}}default:return[]}},serializeParams:function(e,t){const r=new Set([F.publicKey.ed25519,F.publicKey.x25519,F.publicKey.ed448,F.publicKey.x448,F.publicKey.aead,F.publicKey.hmac]),i=Object.keys(t).map((i=>{const n=t[i];return O.isUint8Array(n)?r.has(e)?n:O.uint8ArrayToMPI(n):n.write()}));return O.concatUint8Array(i)},validateParams:async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const{n:e,e:i}=t,{d:n,p:s,q:a,u:o}=r;return $n.rsa.validateParams(e,i,n,s,a,o)}case F.publicKey.dsa:{const{p:e,q:i,g:n,y:s}=t,{x:a}=r;return $n.dsa.validateParams(e,i,n,s,a)}case F.publicKey.elgamal:{const{p:e,g:i,y:n}=t,{x:s}=r;return $n.elgamal.validateParams(e,i,n,s)}case F.publicKey.ecdsa:case F.publicKey.ecdh:{const i=$n.elliptic[F.read(F.publicKey,e)],{oid:n,Q:s}=t,{d:a}=r;return i.validateParams(n,s,a)}case F.publicKey.eddsaLegacy:{const{Q:e,oid:i}=t,{seed:n}=r;return $n.elliptic.eddsaLegacy.validateParams(i,e,n)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:i}=t,{seed:n}=r;return $n.elliptic.eddsa.validateParams(e,i,n)}case F.publicKey.x25519:case F.publicKey.x448:{const{A:i}=t,{k:n}=r;return $n.elliptic.ecdhX.validateParams(e,i,n)}case F.publicKey.hmac:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r;return Ie.getHashByteLength(e.getValue())===s.length&&O.equalsUint8Array(i,await Ie.sha256(n))}case F.publicKey.aead:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=ce(e.getValue());return a===s.length&&O.equalsUint8Array(i,await Ie.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const gs={cipher:he,hash:Ie,mode:St,publicKey:$n,signature:es,random:Ot,pkcs1:Wt,pkcs5:Un,aesKW:Kn};Object.assign(gs,fs);class ps extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ps),this.name="Argon2OutOfMemoryError"}}let ds,As,ws=2<<19;class ms{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return ws}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){ws=e}static reloadWasmModule(){ds&&(As=ds(),As.catch((()=>{})))}constructor(e=N){const{passes:t,parallelism:r,memoryExponent:i}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=i}generateSalt(){this.salt=gs.random.getRandomBytes(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([F.write(F.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return O.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{ds=ds||(await Promise.resolve().then((function(){return Ky}))).default,As=As||ds();const i=await As,n=i({version:19,type:2,password:O.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>ms.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&ms.reloadWasmModule(),n}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new ps("Could not allocate required memory for Argon2"):e}}}class bs{constructor(e,t=N){this.algorithm=F.hash.sha256,this.type=F.read(F.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=gs.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==O.uint8ArrayToString(e.subarray(t,t+3)))throw new ai("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new ai("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new ai("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...O.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([F.write(F.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return O.concatUint8Array(e)}async produceKey(e,t){e=O.encodeUTF8(e);const r=[];let i=0,n=0;for(;i<t;){let t;switch(this.type){case"simple":t=O.concatUint8Array([new Uint8Array(n),e]);break;case"salted":t=O.concatUint8Array([new Uint8Array(n),this.salt,e]);break;case"iterated":{const r=O.concatUint8Array([this.salt,e]);let i=r.length;const s=Math.max(this.getCount(),i);t=new Uint8Array(n+s),t.set(r,n);for(let e=n+i;e<s;e+=i,i*=2)t.copyWithin(e,n,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await gs.hash.digest(this.algorithm,t);r.push(s),i+=s.length,n++}return O.concatUint8Array(r).subarray(0,t)}}const Es=new Set([F.s2k.argon2,F.s2k.iterated]);function ks(e,t=N){switch(e){case F.s2k.argon2:return new ms(t);case F.s2k.iterated:case F.s2k.gnu:case F.s2k.salted:case F.s2k.simple:return new bs(e,t);default:throw new ai("Unsupported S2K type")}}function vs(e){const{s2kType:t}=e;if(!Es.has(t))throw Error("The provided `config.s2kType` value is not allowed");return ks(t,e)}var Bs=t.createRequire("/");try{Bs("worker_threads").Worker}catch(e){}var Is=Uint8Array,Ss=Uint16Array,Cs=Uint32Array,Ks=new Is([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Ps=new Is([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),Ds=new Is([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),Us=function(e,t){for(var r=new Ss(31),i=0;i<31;++i)r[i]=t+=1<<e[i-1];var n=new Cs(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},xs=Us(Ks,2),Qs=xs[0],Rs=xs[1];Qs[28]=258,Rs[258]=28;for(var Ms=Us(Ps,0),Ts=Ms[0],Ls=Ms[1],_s=new Ss(32768),Fs=0;Fs<32768;++Fs){var Ns=(43690&Fs)>>>1|(21845&Fs)<<1;Ns=(61680&(Ns=(52428&Ns)>>>2|(13107&Ns)<<2))>>>4|(3855&Ns)<<4,_s[Fs]=((65280&Ns)>>>8|(255&Ns)<<8)>>>1}var Hs=function(e,t,r){for(var i=e.length,n=0,s=new Ss(t);n<i;++n)e[n]&&++s[e[n]-1];var a,o=new Ss(t);for(n=0;n<t;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new Ss(1<<t);var c=15-t;for(n=0;n<i;++n)if(e[n])for(var h=n<<4|e[n],u=t-e[n],l=o[e[n]-1]++<<u,y=l|(1<<u)-1;l<=y;++l)a[_s[l]>>>c]=h}else for(a=new Ss(i),n=0;n<i;++n)e[n]&&(a[n]=_s[o[e[n]-1]++]>>>15-e[n]);return a},Os=new Is(288);for(Fs=0;Fs<144;++Fs)Os[Fs]=8;for(Fs=144;Fs<256;++Fs)Os[Fs]=9;for(Fs=256;Fs<280;++Fs)Os[Fs]=7;for(Fs=280;Fs<288;++Fs)Os[Fs]=8;var zs=new Is(32);for(Fs=0;Fs<32;++Fs)zs[Fs]=5;var Gs=/*#__PURE__*/Hs(Os,9,0),qs=/*#__PURE__*/Hs(Os,9,1),js=/*#__PURE__*/Hs(zs,5,0),Vs=/*#__PURE__*/Hs(zs,5,1),Ys=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},Zs=function(e,t,r){var i=t/8|0;return(e[i]|e[i+1]<<8)>>(7&t)&r},Js=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},Ws=function(e){return(e+7)/8|0},$s=function(e,t,r){(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length);var i=new(2==e.BYTES_PER_ELEMENT?Ss:4==e.BYTES_PER_ELEMENT?Cs:Is)(r-t);return i.set(e.subarray(t,r)),i},Xs=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],ea=function(e,t,r){var i=Error(t||Xs[e]);if(i.code=e,Error.captureStackTrace&&Error.captureStackTrace(i,ea),!r)throw i;return i},ta=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8},ra=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8,e[i+2]|=r>>>16},ia=function(e,t){for(var r=[],i=0;i<e.length;++i)e[i]&&r.push({s:i,f:e[i]});var n=r.length,s=r.slice();if(!n)return[ua,0];if(1==n){var a=new Is(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var y=s[0].s;for(i=1;i<n;++i)s[i].s>y&&(y=s[i].s);var f=new Ss(y+1),g=na(r[u-1],f,0);if(g>t){i=0;var p=0,d=g-t,A=1<<d;for(s.sort((function(e,t){return f[t.s]-f[e.s]||e.f-t.f}));i<n;++i){var w=s[i].s;if(!(f[w]>t))break;p+=A-(1<<g-f[w]),f[w]=t}for(p>>>=d;p>0;){var m=s[i].s;f[m]<t?p-=1<<t-f[m]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;f[b]==t&&(--f[b],++p)}g=t}return[new Is(f),g]},na=function(e,t,r){return-1==e.s?Math.max(na(e.l,t,r+1),na(e.r,t,r+1)):t[e.s]=r},sa=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new Ss(++t),i=0,n=e[0],s=1,a=function(e){r[i++]=e},o=1;o<=t;++o)if(e[o]==n&&o!=t)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=e[o]}return[r.subarray(0,i),t]},aa=function(e,t){for(var r=0,i=0;i<t.length;++i)r+=e[i]*t[i];return r},oa=function(e,t,r){var i=r.length,n=Ws(t+2);e[n]=255&i,e[n+1]=i>>>8,e[n+2]=255^e[n],e[n+3]=255^e[n+1];for(var s=0;s<i;++s)e[n+s+4]=r[s];return 8*(n+4+i)},ca=function(e,t,r,i,n,s,a,o,c,h,u){ta(t,u++,r),++n[256];for(var l=ia(n,15),y=l[0],f=l[1],g=ia(s,15),p=g[0],d=g[1],A=sa(y),w=A[0],m=A[1],b=sa(p),E=b[0],k=b[1],v=new Ss(19),B=0;B<w.length;++B)v[31&w[B]]++;for(B=0;B<E.length;++B)v[31&E[B]]++;for(var I=ia(v,7),S=I[0],C=I[1],K=19;K>4&&!S[Ds[K-1]];--K);var P,D,U,x,Q=h+5<<3,R=aa(n,Os)+aa(s,zs)+a,M=aa(n,y)+aa(s,p)+a+14+3*K+aa(v,S)+(2*v[16]+3*v[17]+7*v[18]);if(Q<=R&&Q<=M)return oa(t,u,e.subarray(c,c+h));if(ta(t,u,1+(M<R)),u+=2,M<R){P=Hs(y,f,0),D=y,U=Hs(p,d,0),x=p;var T=Hs(S,C,0);ta(t,u,m-257),ta(t,u+5,k-1),ta(t,u+10,K-4),u+=14;for(B=0;B<K;++B)ta(t,u+3*B,S[Ds[B]]);u+=3*K;for(var L=[w,E],_=0;_<2;++_){var F=L[_];for(B=0;B<F.length;++B){var N=31&F[B];ta(t,u,T[N]),u+=S[N],N>15&&(ta(t,u,F[B]>>>5&127),u+=F[B]>>>12)}}}else P=Gs,D=Os,U=js,x=zs;for(B=0;B<o;++B)if(i[B]>255){N=i[B]>>>18&31;ra(t,u,P[N+257]),u+=D[N+257],N>7&&(ta(t,u,i[B]>>>23&31),u+=Ks[N]);var H=31&i[B];ra(t,u,U[H]),u+=x[H],H>3&&(ra(t,u,i[B]>>>5&8191),u+=Ps[H])}else ra(t,u,P[i[B]]),u+=D[i[B]];return ra(t,u,P[256]),u+D[256]},ha=/*#__PURE__*/new Cs([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),ua=/*#__PURE__*/new Is(0),la=function(e,t,r,i,n){return function(e,t,r,i,n,s){var a=e.length,o=new Is(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!t||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=oa(c,h+1,e.subarray(u,l))}else{for(var y=ha[t-1],f=y>>>13,g=8191&y,p=(1<<r)-1,d=new Ss(32768),A=new Ss(p+1),w=Math.ceil(r/3),m=2*w,b=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<m)&p},E=new Cs(25e3),k=new Ss(288),v=new Ss(32),B=0,I=0,S=(u=0,0),C=0,K=0;u<a;++u){var P=b(u),D=32767&u,U=A[P];if(d[D]=U,A[P]=D,C<=u){var x=a-u;if((B>7e3||S>24576)&&x>423){h=ca(e,c,0,E,k,v,I,S,K,u-K,h),S=B=I=0,K=u;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)v[Q]=0}var R=2,M=0,T=g,L=D-U&32767;if(x>2&&P==b(u-L))for(var _=Math.min(f,x)-1,F=Math.min(32767,u),N=Math.min(258,x);L<=F&&--T&&D!=U;){if(e[u+R]==e[u+R-L]){for(var H=0;H<N&&e[u+H]==e[u+H-L];++H);if(H>R){if(R=H,M=L,H>_)break;var O=Math.min(L,H-2),z=0;for(Q=0;Q<O;++Q){var G=u-L+Q+32768&32767,q=G-d[G]+32768&32767;q>z&&(z=q,U=G)}}}L+=(D=U)-(U=d[D])+32768&32767}if(M){E[S++]=268435456|Rs[R]<<18|Ls[M];var j=31&Rs[R],V=31&Ls[M];I+=Ks[j]+Ps[V],++k[257+j],++v[V],C=u+R,++B}else E[S++]=e[u],++k[e[u]]}}h=ca(e,c,s,E,k,v,I,S,K,u-K,h),!s&&7&h&&(h=oa(c,h+1,ua))}return $s(o,0,i+Ws(h)+n)}(e,null==t.level?6:t.level,null==t.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):12+t.mem,r,i,!n)},ya=/*#__PURE__*/function(){function e(e,t){t||"function"!=typeof e||(t=e,e={}),this.ondata=t,this.o=e||{}}return e.prototype.p=function(e,t){this.ondata(la(e,this.o,0,0,!t),t)},e.prototype.push=function(e,t){this.ondata||ea(5),this.d&&ea(4),this.d=t,this.p(e,t||!1)},e}(),fa=/*#__PURE__*/function(){function e(e){this.s={},this.p=new Is(0),this.ondata=e}return e.prototype.e=function(e){this.ondata||ea(5),this.d&&ea(4);var t=this.p.length,r=new Is(t+e.length);r.set(this.p),r.set(e,t),this.p=r},e.prototype.c=function(e){this.d=this.s.i=e||!1;var t=this.s.b,r=function(e,t,r){var i=e.length;if(!i||r&&r.f&&!r.l)return t||new Is(0);var n=!t||r,s=!r||r.i;r||(r={}),t||(t=new Is(3*i));var a=function(e){var r=t.length;if(e>r){var i=new Is(Math.max(2*r,e));i.set(t),t=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,y=r.m,f=r.n,g=8*i;do{if(!u){o=Zs(e,c,1);var p=Zs(e,c+1,3);if(c+=3,!p){var d=e[(C=Ws(c)+4)-4]|e[C-3]<<8,A=C+d;if(A>i){s&&ea(0);break}n&&a(h+d),t.set(e.subarray(C,A),h),r.b=h+=d,r.p=c=8*A,r.f=o;continue}if(1==p)u=qs,l=Vs,y=9,f=5;else if(2==p){var w=Zs(e,c,31)+257,m=Zs(e,c+10,15)+4,b=w+Zs(e,c+5,31)+1;c+=14;for(var E=new Is(b),k=new Is(19),v=0;v<m;++v)k[Ds[v]]=Zs(e,c+3*v,7);c+=3*m;var B=Ys(k),I=(1<<B)-1,S=Hs(k,B,1);for(v=0;v<b;){var C,K=S[Zs(e,c,I)];if(c+=15&K,(C=K>>>4)<16)E[v++]=C;else{var P=0,D=0;for(16==C?(D=3+Zs(e,c,3),c+=2,P=E[v-1]):17==C?(D=3+Zs(e,c,7),c+=3):18==C&&(D=11+Zs(e,c,127),c+=7);D--;)E[v++]=P}}var U=E.subarray(0,w),x=E.subarray(w);y=Ys(U),f=Ys(x),u=Hs(U,y,1),l=Hs(x,f,1)}else ea(1);if(c>g){s&&ea(0);break}}n&&a(h+131072);for(var Q=(1<<y)-1,R=(1<<f)-1,M=c;;M=c){var T=(P=u[Js(e,c)&Q])>>>4;if((c+=15&P)>g){s&&ea(0);break}if(P||ea(2),T<256)t[h++]=T;else{if(256==T){M=c,u=null;break}var L=T-254;if(T>264){var _=Ks[v=T-257];L=Zs(e,c,(1<<_)-1)+Qs[v],c+=_}var F=l[Js(e,c)&R],N=F>>>4;if(F||ea(3),c+=15&F,x=Ts[N],N>3&&(_=Ps[N],x+=Js(e,c)&(1<<_)-1,c+=_),c>g){s&&ea(0);break}n&&a(h+131072);for(var H=h+L;h<H;h+=4)t[h]=t[h-x],t[h+1]=t[h+1-x],t[h+2]=t[h+2-x],t[h+3]=t[h+3-x];h=H}}r.l=u,r.p=M,r.b=h,r.f=o,u&&(o=1,r.m=y,r.d=l,r.n=f)}while(!o);return h==t.length?t:$s(t,0,h)}(this.p,this.o,this.s);this.ondata($s(r,t,this.s.b),this.d),this.o=$s(r,this.s.b-32768),this.s.b=this.o.length,this.p=$s(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),ga=/*#__PURE__*/function(){function e(e,t){var r,i;this.c=(r=1,i=0,{p:function(e){for(var t=r,n=i,s=0|e.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=t+=e[a];t=(65535&t)+15*(t>>16),n=(65535&n)+15*(n>>16)}r=t,i=n},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(i%=65521))<<8|i>>>8}}),this.v=1,ya.call(this,e,t)}return e.prototype.push=function(e,t){ya.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){this.c.p(e);var r=la(e,this.o,this.v&&2,t&&4,!t);this.v&&(function(e,t){var r=t.level,i=0==r?0:r<6?1:9==r?3:2;e[0]=120,e[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),t&&function(e,t,r){for(;r;++t)e[t]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,t)},e}(),pa=/*#__PURE__*/function(){function e(e){this.v=1,fa.call(this,e)}return e.prototype.push=function(e,t){if(fa.prototype.e.call(this,e),this.v){if(this.p.length<2&&!t)return;this.p=this.p.subarray(2),this.v=0}t&&(this.p.length<4&&ea(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),fa.prototype.c.call(this,t)},e}(),da="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{da.decode(ua,{stream:!0}),1}catch(e){}var Aa=[0,1,3,7,15,31,63,127,255],wa=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};wa.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},wa.prototype.read=function(e){for(var t=0;e>0;){this._ensureByte();var r=8-this.bitOffset;if(e>=r)t<<=r,t|=Aa[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,e-=r;else{t<<=e;var i=r-e;t|=(this.curByte&Aa[e]<<i)>>i,this.bitOffset+=e,e=0}}return t},wa.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},wa.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)};var ma=wa,ba=function(){};ba.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},ba.prototype.read=function(e,t,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;e[t++]=n,i++}return i},ba.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},ba.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},ba.prototype.write=function(e,t,r){var i;for(i=0;i<r;i++)this.writeByte(e[t++]);return r},ba.prototype.flush=function(){};var Ea,ka=ba,va=(Ea=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var e=4294967295;this.getCRC=function(){return~e>>>0},this.updateCRC=function(t){e=e<<8^Ea[255&(e>>>24^t)]},this.updateCRCRun=function(t,r){for(;r-- >0;)e=e<<8^Ea[255&(e>>>24^t)]}}),Ba=ma,Ia=ka,Sa=va,Ca=function(e,t){var r,i=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=i,i},Ka={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},Pa={};Pa[Ka.LAST_BLOCK]="Bad file checksum",Pa[Ka.NOT_BZIP_DATA]="Not bzip data",Pa[Ka.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",Pa[Ka.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",Pa[Ka.DATA_ERROR]="Data error",Pa[Ka.OUT_OF_MEMORY]="Out of memory",Pa[Ka.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var Da=function(e,t){var r=Pa[e]||"unknown error";t&&(r+=": "+t);var i=new TypeError(r);throw i.errorCode=e,i},Ua=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};Ua.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new Sa,!0):(this.writeCount=-1,!1)},Ua.prototype._start_bunzip=function(e,t){var r=new Uint8Array(4);4===e.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||Da(Ka.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&Da(Ka.NOT_BZIP_DATA,"level out of range"),this.reader=new Ba(e),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=t,this.streamCRC=0},Ua.prototype._get_next_block=function(){var e,t,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&Da(Ka.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&Da(Ka.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&Da(Ka.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(e=0;e<16;e++)if(a&1<<15-e){var h=16*e;for(r=i.read(16),t=0;t<16;t++)r&1<<15-t&&(o[c++]=h+t)}var u=i.read(3);(u<2||u>6)&&Da(Ka.DATA_ERROR);var l=i.read(15);0===l&&Da(Ka.DATA_ERROR);var y=new Uint8Array(256);for(e=0;e<u;e++)y[e]=e;var f=new Uint8Array(l);for(e=0;e<l;e++){for(t=0;i.read(1);t++)t>=u&&Da(Ka.DATA_ERROR);f[e]=Ca(y,t)}var g,p=c+2,d=[];for(t=0;t<u;t++){var A,w,m=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),e=0;e<p;e++){for(;(a<1||a>20)&&Da(Ka.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;m[e]=a}for(A=w=m[0],e=1;e<p;e++)m[e]>w?w=m[e]:m[e]<A&&(A=m[e]);g={},d.push(g),g.permute=new Uint16Array(258),g.limit=new Uint32Array(22),g.base=new Uint32Array(21),g.minLen=A,g.maxLen=w;var E=0;for(e=A;e<=w;e++)for(b[e]=g.limit[e]=0,a=0;a<p;a++)m[a]===e&&(g.permute[E++]=a);for(e=0;e<p;e++)b[m[e]]++;for(E=a=0,e=A;e<w;e++)E+=b[e],g.limit[e]=E-1,E<<=1,a+=b[e],g.base[e+1]=E-a;g.limit[w+1]=Number.MAX_VALUE,g.limit[w]=E+b[w]-1,g.base[A]=0}var k=new Uint32Array(256);for(e=0;e<256;e++)y[e]=e;var v,B=0,I=0,S=0,C=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,S>=l&&Da(Ka.DATA_ERROR),g=d[f[S++]]),e=g.minLen,t=i.read(e);e>g.maxLen&&Da(Ka.DATA_ERROR),!(t<=g.limit[e]);e++)t=t<<1|i.read(1);((t-=g.base[e])<0||t>=258)&&Da(Ka.DATA_ERROR);var K=g.permute[t];if(0!==K&&1!==K){if(B)for(B=0,I+a>this.dbufSize&&Da(Ka.DATA_ERROR),k[v=o[y[0]]]+=a;a--;)C[I++]=v;if(K>c)break;I>=this.dbufSize&&Da(Ka.DATA_ERROR),k[v=o[v=Ca(y,e=K-1)]]++,C[I++]=v}else B||(B=1,a=0),a+=0===K?B:2*B,B<<=1}for((s<0||s>=I)&&Da(Ka.DATA_ERROR),t=0,e=0;e<256;e++)r=t+k[e],k[e]=t,t=r;for(e=0;e<I;e++)C[k[v=255&C[e]]]|=e<<8,k[v]++;var P=0,D=0,U=0;return I&&(D=255&(P=C[s]),P>>=8,U=-1),this.writePos=P,this.writeCurrent=D,this.writeCount=I,this.writeRun=U,!0},Ua.prototype._read_bunzip=function(e,t){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&Da(Ka.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var xa=function(e){if("readByte"in e)return e;var t=new Ia;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},Qa=function(e){var t=new Ia,r=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),r=!1;else{if("writeByte"in e)return e;t.buffer=e,r=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(r&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};var Ra=function(e,t,r){for(var i=xa(e),n=Qa(t),s=new Ua(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&Da(Ka.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class Ma{static get tag(){return F.packet.literalData}constructor(e=new Date){this.format=F.literal.utf8,this.date=O.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=F.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||O.isStream(this.text))&&(this.text=O.decodeUTF8(O.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=O.canonicalizeEOL(O.encodeUTF8(this.text))),e?D(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await K(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=O.decodeUTF8(await e.readBytes(r)),this.date=O.readDate(await e.readBytes(4));let i=e.remainder();y(i)&&(i=await Q(i)),this.setBytes(i,t)}))}writeHeader(){const e=O.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),i=O.writeDate(this.date);return O.concatUint8Array([r,t,e,i])}write(){const e=this.writeHeader(),t=this.getBytes();return O.concat([e,t])}}class Ta{constructor(){this.bytes=""}read(e){return this.bytes=O.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return O.stringToUint8Array(this.bytes)}toHex(){return O.uint8ArrayToHex(O.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new Ta;return t.read(O.hexToUint8Array(e)),t}static wildcard(){const e=new Ta;return e.read(new Uint8Array(8)),e}}const La=Symbol("verified"),_a="salt@notations.openpgpjs.org",Fa=new Set([F.signatureSubpacket.issuerKeyID,F.signatureSubpacket.issuerFingerprint,F.signatureSubpacket.embeddedSignature]);class Na{static get tag(){return F.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.unknownSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Ta,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[La]=null}read(e,t=N){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new ai("Support for v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4!==this.version&&5!==this.version&&6!==this.version)throw new ai(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[r++],this.publicKeyAlgorithm=e[r++],this.hashAlgorithm=e[r++],r+=this.readSubPackets(e.subarray(r,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,r),r+=this.readSubPackets(e.subarray(r,e.length),!1),this.signedHashValue=e.subarray(r,r+2),r+=2,6===this.version){const t=e[r++];this.salt=e.subarray(r,r+t),r+=t}const i=e.subarray(r,e.length),{read:n,signatureParams:s}=gs.signature.parseSignatureParams(this.publicKeyAlgorithm,i);if(n<i.length)throw Error("Error reading MPIs");this.params=s}writeParams(){return this.params instanceof Promise?M((async()=>gs.serializeParams(this.publicKeyAlgorithm,await this.params))):gs.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),O.concat(e)}async sign(e,t,r=new Date,i=!1,n){this.version=e.version,this.created=O.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Oa(this.hashAlgorithm);if(null===this.salt)this.salt=gs.random.getRandomBytes(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(n.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===_a)).length)throw Error("Unexpected existing salt notation");{const e=gs.random.getRandomBytes(Oa(this.hashAlgorithm));this.rawNotations.push({name:_a,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=O.concat(s);const a=this.toHash(this.signatureType,t,i),o=await this.hash(this.signatureType,t,a,i);this.signedHashValue=x(P(o),0,2);const c=async()=>gs.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await Q(o));O.isStream(o)?this.params=c():(this.params=await c(),this[La]=!0)}writeHashedSubPackets(){const e=F.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(Ha(e.signatureCreationTime,!0,O.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(Ha(e.signatureExpirationTime,!0,O.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(Ha(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(Ha(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(Ha(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(Ha(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(Ha(e.keyExpirationTime,!0,O.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(Ha(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=O.concat([r,this.revocationKeyFingerprint]),t.push(Ha(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(Ha(e.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=O.encodeUTF8(i);r.push(O.writeNumber(o.length,2)),r.push(O.writeNumber(n.length,2)),r.push(o),r.push(n),r=O.concat(r),t.push(Ha(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(Ha(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(Ha(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyServerPreferences)),t.push(Ha(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(Ha(e.preferredKeyServer,!1,O.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(Ha(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(Ha(e.policyURI,!1,O.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyFlags)),t.push(Ha(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(Ha(e.signersUserID,!1,O.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=O.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(Ha(e.reasonForRevocation,!0,r))),null!==this.features&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.features)),t.push(Ha(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(O.stringToUint8Array(this.signatureTargetHash)),r=O.concat(r),t.push(Ha(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(Ha(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=O.concat(r),t.push(Ha(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(Ha(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(Ha(e.preferredCipherSuites,!1,r)));const i=O.concat(t),n=O.writeNumber(i.length,6===this.version?4:2);return O.concat([n,i])}writeUnhashedSubPackets(){const e=this.unhashedSubpackets.map((({type:e,critical:t,body:r})=>Ha(e,t,r))),t=O.concat(e),r=O.writeNumber(t.length,6===this.version?4:2);return O.concat([r,t])}readSubPacket(e,t=!0){let r=0;const i=!!(128&e[r]),n=127&e[r];if(r++,t||(this.unhashedSubpackets.push({type:n,critical:i,body:e.subarray(r,e.length)}),Fa.has(n)))switch(n){case F.signatureSubpacket.signatureCreationTime:this.created=O.readDate(e.subarray(r,e.length));break;case F.signatureSubpacket.signatureExpirationTime:{const t=O.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case F.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case F.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case F.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case F.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case F.signatureSubpacket.keyExpirationTime:{const t=O.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case F.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case F.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case F.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const n=O.readNumber(e.subarray(r,r+2));r+=2;const s=O.readNumber(e.subarray(r,r+2));r+=2;const a=O.decodeUTF8(e.subarray(r,r+n)),o=e.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:i}),t&&(this.notations[a]=O.decodeUTF8(o));break}case F.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case F.signatureSubpacket.policyURI:this.policyURI=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.signersUserID:this.signersUserID=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=gs.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=O.uint8ArrayToString(e.subarray(r,r+t));break}case F.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Na,this.embeddedSignature.read(e.subarray(r,e.length));break;case F.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case F.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:this.unknownSubpackets.push({type:n,critical:i,body:e.subarray(r,e.length)})}}readSubPackets(e,t=!0,r){const i=6===this.version?4:2,n=O.readNumber(e.subarray(0,i));let s=i;for(;s<2+n;){const i=Xr(e.subarray(s,e.length));s+=i.offset,this.readSubPacket(e.subarray(s,s+i.len),t,r),s+=i.len}return s}toSign(e,t){const r=F.signature;switch(e){case r.binary:return null!==t.text?O.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return O.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,i;if(t.userID)i=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,e=t.userAttribute}const n=e.write();return O.concat([this.toSign(r.key,t),new Uint8Array([i]),O.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return O.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return S(P(this.signatureData),(e=>{r+=e.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==F.signature.binary&&this.signatureType!==F.signature.text||(t?i.push(new Uint8Array(6)):i.push(e.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(O.writeNumber(r,4)),O.concat(i)}))}toHash(e,t,r=!1){const i=this.toSign(e,t);return O.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,i=!1){if(6===this.version&&this.salt.length!==Oa(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,i)),gs.hash.digest(this.hashAlgorithm,r)}async verify(e,t,r,i=new Date,n=!1,s=N){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===F.signature.binary||t===F.signature.text;if(!(this[La]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(t,r,n),s=await this.hash(t,r,i)),s=await Q(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===F.publicKey.hmac?e.privateParams:null;if(this[La]=await gs.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,i,s),!this[La])throw Error("Signature verification failed")}const o=O.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+F.read(F.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[F.signature.binary,F.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+F.read(F.hash,this.hashAlgorithm).toUpperCase());if(this.unknownSubpackets.forEach((({type:e,critical:t})=>{if(t)throw Error("Unknown critical signature subpacket type "+e)})),this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=O.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ha(e,t,r){const i=[];return i.push(ei(r.length+1)),i.push(new Uint8Array([(t?128:0)|e])),i.push(r),O.concat(i)}function Oa(e){switch(e){case F.hash.sha256:return 16;case F.hash.sha384:return 24;case F.hash.sha512:return 32;case F.hash.sha224:case F.hash.sha3_256:return 16;case F.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class za{static get tag(){return F.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new za;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ai(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new Ta,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Ta,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),O.concatUint8Array(e)}calculateTrailer(...e){return M((async()=>Na.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==F.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!O.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!O.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function Ga(e,t){if(!t[e]){let t;try{t=F.read(F.packet,e)}catch(t){throw new oi("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}za.prototype.hash=Na.prototype.hash,za.prototype.toHash=Na.prototype.toHash,za.prototype.toSign=Na.prototype.toSign;class qa extends Array{static async fromBinary(e,t,r=N){const i=new qa;return await i.read(e,t,r),i}async read(e,t,r=N){r.additionalAllowedPackets.length&&(t={...t,...O.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=C(e,(async(e,i)=>{const n=L(i);try{for(;;){await n.ready;if(await si(e,(async e=>{try{if(e.tag===F.packet.marker||e.tag===F.packet.trust||e.tag===F.packet.padding)return;const i=Ga(e.tag,t);i.packets=new qa,i.fromStream=O.isStream(e.packet),await i.read(e.packet,r),await n.write(i)}catch(t){if(t instanceof oi){if(!(e.tag<=39))return;await n.abort(t)}const i=!r.ignoreUnsupportedPackets&&t instanceof ai,s=!(r.ignoreMalformedPackets||t instanceof ai);if(i||s||ni(e.tag))await n.abort(t);else{const t=new ci(e.tag,e.packet);await n.write(t)}O.printDebugError(t)}})))return await n.ready,void await n.close()}}catch(e){await n.abort(e)}}));const i=T(this.stream);for(;;){const{done:e,value:t}=await i.read();if(e?this.stream=null:this.push(t),e||ni(t.constructor.tag))break}i.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ci?this[t].tag:this[t].constructor.tag,i=this[t].write();if(O.isStream(i)&&ni(this[t].constructor.tag)){let t=[],n=0;const s=512;e.push(ri(r)),e.push(S(i,(e=>{if(t.push(e),n+=e.length,n>=s){const e=Math.min(Math.log(n)/Math.LN2|0,30),r=2**e,i=O.concat([ti(e)].concat(t));return t=[i.subarray(1+r)],n=t[0].length,i.subarray(0,1+r)}}),(()=>O.concat([ei(n)].concat(t)))))}else{if(O.isStream(i)){let t=0;e.push(S(P(i),(e=>{t+=e.length}),(()=>ii(r,t))))}else e.push(ii(r,i.length));e.push(i)}}return O.concat(e)}filterByTag(...e){const t=new qa,r=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(r(this[i].constructor.tag))&&t.push(this[i]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,i=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(i(r[n].constructor.tag))&&t.push(n);return t}}const ja=/*#__PURE__*/O.constructAllowedPackets([Ma,za,Na]);class Va{static get tag(){return F.packet.compressedData}constructor(e=N){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=N){await K(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),O.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=N){const t=F.read(F.compression,this.algorithm),r=$a[t];if(!r)throw Error(t+" decompression not supported");this.packets=await qa.fromBinary(r(this.compressed),ja,e)}compress(){const e=F.read(F.compression,this.algorithm),t=Wa[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function Ya(e,t){return r=>{if(!O.isStream(r)||y(r))return M((()=>Q(r).then((e=>new Promise(((r,i)=>{const n=new t;n.ondata=e=>{r(e)};try{n.push(e,!0)}catch(e){i(e)}}))))));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const i=r.getReader(),n=new t;return new ReadableStream({async start(e){for(n.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await i.read();if(e)return void n.push(new Uint8Array,!0);t.length&&n.push(t)}}})}}function Za(e){return function(t){return M((async()=>e(await Q(t))))}}const Ja=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),Wa={zip:/*#__PURE__*/Ya(Ja("deflate-raw").compressor,ya),zlib:/*#__PURE__*/Ya(Ja("deflate").compressor,ga)},$a={uncompressed:e=>e,zip:/*#__PURE__*/Ya(Ja("deflate-raw").decompressor,fa),zlib:/*#__PURE__*/Ya(Ja("deflate").decompressor,pa),bzip2:/*#__PURE__*/Za(Ra)},Xa=/*#__PURE__*/O.constructAllowedPackets([Ma,Va,za,Na]);class eo{static get tag(){return F.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new eo;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await K(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new ai(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):O.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=N){let i=this.packets.write();if(y(i)&&(i=await Q(i)),2===this.version)this.cipherAlgorithm=e,this.salt=gs.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await to(this,"encrypt",t,i);else{const{blockSize:n}=gs.getCipherParams(e),s=await gs.getPrefixRandom(e),a=new Uint8Array([211,20]),o=O.concat([s,i,a]),c=await gs.hash.sha1(D(o)),h=O.concat([o,c]);this.encrypted=await gs.mode.cfb.encrypt(e,t,h,new Uint8Array(n),r)}return!0}async decrypt(e,t,r=N){let i,n=P(this.encrypted);if(y(n)&&(n=await Q(n)),2===this.version)i=await to(this,"decrypt",t,n);else{const{blockSize:s}=gs.getCipherParams(e),a=await gs.mode.cfb.decrypt(e,t,n,new Uint8Array(s)),o=x(D(a),-20),c=x(a,0,-20),h=Promise.all([Q(await gs.hash.sha1(D(c))),Q(o)]).then((([e,t])=>{if(!O.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),u=x(c,s+2);i=x(u,0,-2),i=k([i,M((()=>h))]),O.isStream(n)&&r.allowUnauthenticatedStream||(i=await Q(i))}return this.packets=await qa.fromBinary(i,Xa,r),!0}}async function to(e,t,r,i){const n=e instanceof eo&&2===e.version,s=!n&&e.constructor.tag===F.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=gs.getAEADMode(e.aeadAlgorithm),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,h=2**(e.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),y=new Uint8Array(l,0,5+u),f=new Uint8Array(l),g=new DataView(l),p=new Uint8Array(l,5,8);y.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,A,w=0,m=Promise.resolve(),b=0,E=0;if(n){const{keySize:t}=gs.getCipherParams(e.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await On(F.hash.sha256,r,e.salt,n,t+i);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),A=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const k=await a(e.cipherAlgorithm,r);return C(i,(async(r,i)=>{if("array"!==O.isStream(r)){const t=new TransformStream({},{highWaterMark:O.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});v(t.readable,i),i=t.writable}const s=T(r),a=L(i);try{for(;;){let e=await s.readBytes(h+o)||new Uint8Array;const r=e.subarray(e.length-o);let i,l,v;if(e=e.subarray(0,e.length-o),n)v=d;else{v=d.slice();for(let e=0;e<8;e++)v[d.length-8+e]^=p[e]}if(!w||e.length?(s.unshift(r),i=k[t](e,v,y),i.catch((()=>{})),E+=e.length-o+c):(g.setInt32(5+u+4,b),i=k[t](r,v,f),i.catch((()=>{})),E+=c,l=!0),b+=e.length-o,m=m.then((()=>i)).then((async e=>{await a.ready,await a.write(e),E-=e.length})).catch((e=>a.abort(e))),(l||E>a.desiredSize)&&await m,l){await a.close();break}n?A.setInt32(d.length-4,++w):g.setInt32(9,++w)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const ro=/*#__PURE__*/O.constructAllowedPackets([Ma,Va,za,Na]);class io{static get tag(){return F.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=F.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await K(e,(async e=>{const t=await e.readByte();if(1!==t)throw new ai(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=gs.getAEADMode(this.aeadAlgorithm);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=N){this.packets=await qa.fromBinary(await to(this,"decrypt",t,P(this.encrypted)),ro,r)}async encrypt(e,t,r=N){this.cipherAlgorithm=e;const{ivLength:i}=gs.getAEADMode(this.aeadAlgorithm);this.iv=gs.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await to(this,"encrypt",t,n)}}class no{static get tag(){return F.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Ta,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new no;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?Ta.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ai(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const i=r-1;this.publicKeyFingerprint=e.subarray(t,t+i),t+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Ta.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=gs.parseEncSessionKeyParams(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===F.publicKey.x25519||this.publicKeyAlgorithm===F.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=F.write(F.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),gs.serializeParams(this.publicKeyAlgorithm,this.encrypted)),O.concatUint8Array(e)}async encrypt(e){const t=F.write(F.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,i=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),n=so(this.version,t,r,this.sessionKey),s=t===F.publicKey.aead?e.privateParams:null;this.encrypted=await gs.publicKeyEncrypt(t,r,e.publicParams,s,n,i)}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?so(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,i=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),n=await gs.publicKeyDecrypt(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,i,r),{sessionKey:s,sessionKeyAlgorithm:a}=function(e,t,r,i){switch(t){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.aead:{const t=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=O.writeChecksum(t.subarray(t.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(i){const t=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:O.selectUint8Array(t,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===e?null:O.selectUint8(t,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===e||F.read(F.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case F.publicKey.x25519:case F.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,n,t);3===this.version&&this.publicKeyAlgorithm!==F.publicKey.x25519&&this.publicKeyAlgorithm!==F.publicKey.x448&&(this.sessionKeyAlgorithm=a),this.sessionKey=s}}function so(e,t,r,i){switch(t){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.aead:return O.concatUint8Array([new Uint8Array(6===e?[]:[r]),i,O.writeChecksum(i.subarray(i.length%8))]);case F.publicKey.x25519:case F.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class ao{static get tag(){return F.packet.symEncryptedSessionKey}constructor(e=N){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=F.symmetric.aes256,this.aeadAlgorithm=F.write(F.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ai(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const i=e[t++];if(this.s2k=ks(i),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=gs.getAEADMode(this.aeadAlgorithm);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;t=O.concatUint8Array([new Uint8Array([this.version,n,e,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?t=O.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=O.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=O.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=gs.getCipherParams(t),n=await this.s2k.produceKey(e,i);if(this.version>=5){const e=gs.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|ao.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await On(F.hash.sha256,n,new Uint8Array,r,i):n,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await gs.mode.cfb.decrypt(t,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=F.write(F.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length)}else this.sessionKey=n}async encrypt(e,t=N){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=vs(t),this.s2k.generateSalt();const{blockSize:i,keySize:n}=gs.getCipherParams(r),s=await this.s2k.produceKey(e,n);if(null===this.sessionKey&&(this.sessionKey=gs.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const e=gs.getAEADMode(this.aeadAlgorithm);this.iv=gs.random.getRandomBytes(e.ivLength);const t=new Uint8Array([192|ao.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await On(F.hash.sha256,s,new Uint8Array,t,n):s,a=await e(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=O.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await gs.mode.cfb.encrypt(r,s,e,new Uint8Array(i),t)}}}class oo{static get tag(){return F.packet.publicKey}constructor(e=new Date,t=N){this.version=t.v6Keys?6:4,this.created=O.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new oo,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e,t=N){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new ai("Support for parsing v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4===this.version||5===this.version||6===this.version){this.created=O.readDate(e.subarray(r,r+4)),r+=4,this.algorithm=e[r++],this.version>=5&&(r+=4);const{read:t,publicParams:i}=gs.parsePublicKeyParams(this.algorithm,e.subarray(r));if(6===this.version&&i.oid&&(i.oid.getName()===F.curve.curve25519Legacy||i.oid.getName()===F.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,r+=t,await this.computeFingerprintAndKeyID(),r}throw new ai(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(O.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=gs.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&e.push(O.writeNumber(t.length,4)),e.push(t),O.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,i=e>=5?4:2;return O.concatUint8Array([new Uint8Array([r]),O.writeNumber(t.length,i),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Ta,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await gs.hash.sha256(e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await gs.hash.sha1(e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return O.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&O.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=F.read(F.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=O.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}oo.prototype.readPublicKey=oo.prototype.read,oo.prototype.writePublicKey=oo.prototype.write;const co=/*#__PURE__*/O.constructAllowedPackets([Ma,Va,za,Na]);class ho{static get tag(){return F.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=N){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=gs.getCipherParams(e),n=await Q(P(this.encrypted)),s=await gs.mode.cfb.decrypt(e,t,n.subarray(i+2),n.subarray(2,i+2));this.packets=await qa.fromBinary(s,co,r)}async encrypt(e,t,r=N){const i=this.packets.write(),{blockSize:n}=gs.getCipherParams(e),s=await gs.getPrefixRandom(e),a=await gs.mode.cfb.encrypt(e,t,s,new Uint8Array(n),r),o=await gs.mode.cfb.encrypt(e,t,i,a.subarray(2),r);this.encrypted=O.concat([a,o])}}class uo extends oo{static get tag(){return F.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new uo,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class lo{static get tag(){return F.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=Xr(e.subarray(t,e.length));t+=r.offset,this.attributes.push(O.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(ei(this.attributes[t].length)),e.push(O.stringToUint8Array(this.attributes[t]));return O.concatUint8Array(e)}equals(e){return!!(e&&e instanceof lo)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class yo extends oo{static get tag(){return F.packet.secretKey}constructor(e=new Date,t=N){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=N){let r=await this.readPublicKey(e,t);const i=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=ks(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+gs.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+gs.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(i),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!O.equalsUint8Array(O.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=gs.parsePrivateKeyParams(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof ai)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return O.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=gs.serializeParams(this.algorithm,this.privateParams)),5===this.version&&t.push(O.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(O.writeChecksum(this.keyMaterial))),O.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=N){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=ks(F.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=F.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=N){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=vs(t),this.s2k.generateSalt();const r=gs.serializeParams(this.algorithm,this.privateParams);this.symmetric=F.symmetric.aes256;const{blockSize:i}=gs.getCipherParams(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=t.preferredAEADAlgorithm;const n=gs.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const s=ri(this.constructor.tag),a=await fo(this.version,this.s2k,e,this.symmetric,this.aead,s,this.isLegacyAEAD),o=await n(this.symmetric,a);this.iv=this.isLegacyAEAD?gs.random.getRandomBytes(i):gs.random.getRandomBytes(n.ivLength);const c=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([s,this.writePublicKey()]);this.keyMaterial=await o.encrypt(r,this.iv.subarray(0,n.ivLength),c)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const n=await fo(this.version,this.s2k,e,this.symmetric);this.iv=gs.random.getRandomBytes(i),this.keyMaterial=await gs.mode.cfb.encrypt(this.symmetric,n,O.concatUint8Array([r,await gs.hash.sha1(r,t)]),this.iv,t)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=ri(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(t=await fo(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const e=gs.getAEADMode(this.aead),n=await e(this.symmetric,t);try{const t=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await gs.mode.cfb.decrypt(this.symmetric,t,this.keyMaterial,this.iv);i=e.subarray(0,-20);const r=await gs.hash.sha1(i);if(!O.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=gs.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await gs.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===F.publicKey.ecdh&&t===F.curve.curve25519Legacy||this.algorithm===F.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await gs.generateParams(this.algorithm,e,t,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function fo(e,t,r,i,n,s,a){if("argon2"===t.type&&!n)throw Error("Using Argon2 S2K without AEAD is not allowed");if("simple"===t.type&&6===e)throw Error("Using Simple S2K with version 6 keys is not allowed");const{keySize:o}=gs.getCipherParams(i),c=await t.produceKey(r,o);if(!n||5===e||a)return c;const h=O.concatUint8Array([s,new Uint8Array([e,i,n])]);return On(F.hash.sha256,c,new Uint8Array,h,o)}class go{static get tag(){return F.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(O.isString(e)||e.name&&!O.isString(e.name)||e.email&&!O.isEmailAddress(e.email)||e.comment&&!O.isString(e.comment))throw Error("Invalid user ID format");const t=new go;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=N){const r=O.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:e,comment:t,email:r}=i.groups;this.comment=t?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=e?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return O.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class po extends yo{static get tag(){return F.packet.secretSubkey}constructor(e=new Date,t=N){super(e,t)}}const Ao=/*#__PURE__*/O.constructAllowedPackets([Na]);class wo{constructor(e){this.packets=e||new qa}write(){return this.packets.write()}armor(e=N){const t=this.packets.some((e=>e.constructor.tag===Na.tag&&6!==e.version));return ne(F.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function mo(e,t){const r=new po(e.date,t);return r.packets=null,r.algorithm=F.write(F.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function bo(e,t){const r=new yo(e.date,t);return r.packets=null,r.algorithm=F.write(F.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Eo(e,t,r,i,n=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,i,n,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw O.wrapError(`Could not find valid ${F.read(F.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function ko(e,t,r=new Date){const i=O.normalizeDate(r);if(null!==i){const r=Co(e,t);return!(e.created<=i&&i<r)}return!1}async function vo(e,t,r,i){const n={};n.key=t,n.bind=e;const s={signatureType:F.signature.subkeyBinding};r.sign?(s.keyFlags=[F.keyFlags.signData],s.embeddedSignature=await Bo(n,null,e,{signatureType:F.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[F.keyFlags.forwardedCommunication]:[F.keyFlags.encryptCommunication|F.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await Bo(n,null,t,s,r.date,void 0,void 0,void 0,i)}async function Bo(e,t,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Na;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(e,t,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(e){const t=await e.getPrimarySelfSignature(r,i,n);t.preferredHashAlgorithms&&([a]=t.preferredHashAlgorithms,s=gs.hash.getHashByteLength(s)<=gs.hash.getHashByteLength(a)?a:s)}switch(t.algorithm){case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:case F.publicKey.ed25519:case F.publicKey.ed448:a=gs.getPreferredCurveHashAlgo(t.algorithm,t.publicParams.oid)}return gs.hash.getHashByteLength(s)<=gs.hash.getHashByteLength(a)?a:s}(t,r,n,s,c),h.rawNotations=[...a],await h.sign(r,e,n,o,c),h}async function Io(e,t,r,i=new Date,n){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(i)||n&&!await n(e)||t[r].some((function(t){return O.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function So(e,t,r,i,n,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(i.map((async function(e){try{if(!n||e.issuerKeyID.equals(n.issuerKeyID)){const i=![F.reasonForRevocation.keyRetired,F.reasonForRevocation.keySuperseded,F.reasonForRevocation.userIDInvalid].includes(e.reasonForRevocationFlag);await e.verify(s,t,r,i?null:a,!1,o),c.push(e.issuerKeyID)}}catch(e){}}))),n?(n.revoked=!!c.some((e=>e.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function Co(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function Ko(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=O.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"ecc":try{e.curve=F.write(F.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==F.curve.ed25519Legacy&&e.curve!==F.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?F.curve.ed25519Legacy:F.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===F.curve.ed25519Legacy?F.publicKey.eddsaLegacy:F.publicKey.ecdsa:e.algorithm=F.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?F.publicKey.ed25519:F.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?F.publicKey.ed448:F.publicKey.x448;break;case"rsa":e.algorithm=F.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=F.publicKey.hmac;try{e.symmetric=F.write(F.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=F.publicKey.aead;try{e.symmetric=F.write(F.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function Po(e,t,r){switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.dsa:case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:case F.publicKey.ed25519:case F.publicKey.ed448:case F.publicKey.hmac:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.signData);default:return!1}}function Do(e,t,r){switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.x25519:case F.publicKey.x448:case F.publicKey.aead:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&F.keyFlags.encryptStorage);default:return!1}}function Uo(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.x25519:case F.publicKey.x448:return!(!(!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&F.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&F.keyFlags.forwardedCommunication));default:return!1}}function xo(e,t){const r=F.write(F.publicKey,e.algorithm),i=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.rsaEncrypt:if(i.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:case F.publicKey.ecdh:if(t.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class Qo{constructor(e,t){this.userID=e.constructor.tag===F.packet.userID?e:null,this.userAttribute=e.constructor.tag===F.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new qa;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new Qo(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new Qo(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return Bo(n,e,s.keyPacket,{signatureType:F.signature.certGeneric,keyFlags:[F.keyFlags.certifyKeys|F.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,i=N){const n=this.mainKey.keyPacket;return So(n,F.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,i)}async verifyCertificate(e,t,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,i);if(e.revoked||await n.isRevoked(e,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,F.signature.certGeneric,a,r,void 0,i)}catch(e){throw O.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(i,F.signature.certGeneric,n,e,void 0,t)}catch(e){throw O.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await Io(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(i,F.signature.certGeneric,n,t,!1,r),!0}catch(e){return!1}})),await Io(e,this,"otherCertifications",t),await Io(e,this,"revocationSignatures",t,(function(e){return So(i,F.signature.certRevocation,n,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=F.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=N){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new Qo(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await Bo(s,null,e,{signatureType:F.signature.certRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class Ro{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new qa;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Ro(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,i=N){const n=this.mainKey.keyPacket;return So(n,F.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verify(e=new Date,t=N){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await Eo(this.bindingSignatures,r,F.signature.subkeyBinding,i,e,t);if(n.revoked||await this.isRevoked(n,null,e,t))throw Error("Subkey is revoked");if(ko(this.keyPacket,n,e))throw Error("Subkey is expired");return n}async getExpirationTime(e=new Date,t=N){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await Eo(this.bindingSignatures,r,F.signature.subkeyBinding,i,e,t)}catch(e){return null}const s=Co(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=N){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===F.packet.publicSubkey&&e.keyPacket.constructor.tag===F.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await Io(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<n.bindingSignatures.length;t++)if(n.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>n.bindingSignatures[t].created&&(n.bindingSignatures[t]=e),!1;try{return await e.verify(i,F.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await Io(e,this,"revocationSignatures",t,(function(e){return So(i,F.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=F.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=N){const s={key:e,bind:this.keyPacket},a=new Ro(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await Bo(s,null,e,{signatureType:F.signature.subkeyRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{Ro.prototype[e]=function(){return this.keyPacket[e]()}}));const Mo=/*#__PURE__*/O.constructAllowedPackets([Na]),To=new Set([F.packet.publicKey,F.packet.privateKey]),Lo=new Set([F.packet.publicKey,F.packet.privateKey,F.packet.publicSubkey,F.packet.privateSubkey]);class _o{packetListToStructure(e,t=new Set){let r,i,n,s;for(const a of e){if(a instanceof ci){Lo.has(a.tag)&&!s&&(s=To.has(a.tag)?To:Lo);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case F.packet.publicKey:case F.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case F.packet.userID:case F.packet.userAttribute:r=new Qo(a,this),this.users.push(r);break;case F.packet.publicSubkey:case F.packet.secretSubkey:r=null,n=new Ro(a,this),this.subkeys.push(n);break;case F.packet.signature:switch(a.signatureType){case F.signature.certGeneric:case F.signature.certPersona:case F.signature.certCasual:case F.signature.certPositive:if(!r){O.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case F.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case F.signature.key:this.directSignatures.push(a);break;case F.signature.subkeyBinding:if(!n){O.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case F.signature.keyRevocation:this.revocationSignatures.push(a);break;case F.signature.subkeyRevocation:if(!n){O.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const e=new qa;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},i=N){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{xo(n,i)}catch(e){throw O.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await Eo(r.bindingSignatures,n,F.signature.subkeyBinding,e,t,i);if(!Po(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await Eo([s.embeddedSignature],r.keyPacket,F.signature.keyBinding,e,t,i),xo(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Po(n,s,i))return xo(n,i),this}catch(e){a=e}throw O.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},i=N){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{xo(n,i)}catch(e){throw O.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await Eo(r.bindingSignatures,n,F.signature.subkeyBinding,e,t,i);if(Do(r.keyPacket,s,i))return xo(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Do(n,s,i))return xo(n,i),this}catch(e){a=e}throw O.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,i=N){return So(this.keyPacket,F.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verifyPrimaryKey(e=new Date,t={},r=N){const i=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(ko(i,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==i.version){const t=await Eo(this.directSignatures,i,F.signature.key,{key:i},e,r).catch((()=>{}));if(t&&ko(i,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=N){let r;try{const i=await this.getPrimarySelfSignature(null,e,t),n=Co(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await Eo(this.directSignatures,this.keyPacket,F.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=Co(this.keyPacket,a);r=Math.min(n,s,e)}else r=n<s?n:s}catch(e){r=null}return O.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=N){const i=this.keyPacket;if(6===i.version)return Eo(this.directSignatures,i,F.signature.key,{key:i},e,r);const{selfCertification:n}=await this.getPrimaryUser(e,t,r);return n}async getPrimaryUser(e=new Date,t={},r=N){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await Eo(s.selfCertifications,i,F.signature.certGeneric,o,e,r);n.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=n.sort((function(e,t){const r=e.selfCertification,i=t.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=N){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const i=this.clone();return await Io(e,i,"revocationSignatures",t,(n=>So(i.keyPacket,F.signature.keyRevocation,i,[n],null,e.keyPacket,t,r))),await Io(e,i,"directSignatures",t),await Promise.all(e.users.map((async e=>{const n=i.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const n=i.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.subkeys.push(t)}}))),i}async getRevocationCertificate(e=new Date,t=N){const r={key:this.keyPacket},i=await Eo(this.revocationSignatures,this.keyPacket,F.signature.keyRevocation,r,e,t),n=new qa;n.push(i);const s=6!==this.keyPacket.version;return ne(F.armor.publicKey,n.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=N){const i=await ie(e),n=(await qa.fromBinary(i.data,Mo,r)).findPacket(F.packet.signature);if(!n||n.signatureType!==F.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,F.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw O.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(e,t,r,i=N){const{index:n,user:s}=await this.getPrimaryUser(t,r,i),a=await s.certify(e,t,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(e,t=new Date,r=N){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(e,t,r)}))),i}async verifyPrimaryUser(e,t=new Date,r,i=N){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,i);return e?await s.verifyAllCertifications(e,t,i):[{keyID:n.getKeyID(),valid:await s.verify(t,i).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=N){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:i.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];n.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{_o.prototype[e]=Ro.prototype[e]}));class Fo extends _o{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([F.packet.secretKey,F.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=N){const t=6!==this.keyPacket.version;return ne(F.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class No extends Fo{constructor(e){if(super(),this.packetListToStructure(e,new Set([F.packet.publicKey,F.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new qa,t=this.toPacketList();let r=!1;for(const i of t)if(!r||i.constructor.tag!==F.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case F.packet.secretKey:{if(i.algorithm===F.publicKey.aead||i.algorithm===F.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=oo.fromSecretKeyPacket(i);e.push(t);break}case F.packet.secretSubkey:{if(i.algorithm===F.publicKey.aead||i.algorithm===F.publicKey.hmac){r=!0;break}const t=uo.fromSecretSubkeyPacket(i);e.push(t);break}default:e.push(i)}return new Fo(e)}armor(e=N){const t=6!==this.keyPacket.version;return ne(F.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},i=N){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0))try{const e={key:n,bind:this.subkeys[r].keyPacket},a=await Eo(this.subkeys[r].bindingSignatures,n,F.signature.subkeyBinding,e,t,i);Uo(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(e){}const a=await this.getPrimarySelfSignature(t,r,i);return e&&!n.getKeyID().equals(e,!0)||!Uo(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=N){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=F.reasonForRevocation.noReason,string:t=""}={},r=new Date,i=N){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await Bo(n,null,this.keyPacket,{signatureType:F.signature.keyRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,i)),s}async addSubkey(e={}){const t={...N,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(e){switch(F.write(F.publicKey,e)){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.dsa:return"rsa";case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:return"ecc";case F.publicKey.ed25519:return"curve25519";case F.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",e=Ko(e,i);const n=await mo(e,{...t,v6Keys:6===this.keyPacket.version});xo(n,t);const s=await vo(n,r,e,t),a=this.toPacketList();return a.push(n,s),new No(a)}}const Ho=/*#__PURE__*/O.constructAllowedPackets([oo,uo,yo,po,go,lo,Na]);function Oo(e){for(const t of e)switch(t.constructor.tag){case F.packet.secretKey:return new No(e);case F.packet.publicKey:return new Fo(e)}throw Error("No key packet found")}async function zo(e,t,r,i){r.passphrase&&await e.encrypt(r.passphrase,i),await Promise.all(t.map((async function(e,t){const n=r.subkeys[t].passphrase;n&&await e.encrypt(n,i)})));const n=new qa;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[F.keyFlags.certifyKeys|F.keyFlags.signData];const n=s([F.symmetric.aes256,F.symmetric.aes128],i.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=n,i.aeadProtect){const e=s([F.aead.gcm,F.aead.eax,F.aead.ocb],i.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>n.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([F.hash.sha256,F.hash.sha512,...6===e.version?[F.hash.sha3_256,F.hash.sha3_512]:[]],i.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([F.compression.uncompressed,F.compression.zlib,F.compression.zip],i.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=F.features.modificationDetection,i.aeadProtect&&(t.features[0]|=F.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(n.push(e),6===e.version){const t={key:e},s=a();s.signatureType=F.signature.key;const o=await Bo(t,null,e,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(t,n){const s=go.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=F.signature.certPositive,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await Bo(o,null,e,c,r.date,void 0,void 0,void 0,i)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{n.push(e),n.push(t)}))})),await Promise.all(t.map((async function(t,n){const s=r.subkeys[n];return{secretSubkeyPacket:t,subkeySignaturePacket:await vo(t,e,s,i)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{n.push(e),n.push(t)}))}));const o={key:e};return n.push(await Bo(o,null,e,{signatureType:F.signature.keyRevocation,reasonForRevocationFlag:F.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new No(n)}const Go=/*#__PURE__*/O.constructAllowedPackets([Ma,Va,io,eo,ho,no,ao,za,Na]),qo=/*#__PURE__*/O.constructAllowedPackets([ao]),jo=/*#__PURE__*/O.constructAllowedPackets([Na]);class Vo{constructor(e){this.packets=e||new qa}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(F.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(F.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(F.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,i=new Date,n=N){const s=this.packets.filterByTag(F.packet.symmetricallyEncryptedData,F.packet.symEncryptedIntegrityProtectedData,F.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!O.isUint8Array(t)||!a.cipherAlgorithm&&!O.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||F.write(F.symmetric,e);await a.decrypt(r,t,n)}catch(e){O.printDebugError(e),h=e}})));if(R(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new Vo(a.packets);return a.packets=new qa,l}async decryptSessionKeys(e,t,r,i=new Date,n=N){let s,a=[];if(t){const e=this.packets.filterByTag(F.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let i;i=r?await qa.fromBinary(e.write(),qo,n):e,await Promise.all(i.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){O.printDebugError(e),e instanceof ps&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(F.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o=[F.symmetric.aes256,F.symmetric.aes128,F.symmetric.tripledes,F.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(i,void 0,n);t.preferredSymmetricAlgorithms&&(o=o.concat(t.preferredSymmetricAlgorithms))}catch(e){}const c=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,n)).map((e=>e.keyPacket));await Promise.all(c.map((async function(e){if(!e||e.isDummy())return;if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===F.publicKey.rsaEncrypt||t.publicKeyAlgorithm===F.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===F.publicKey.rsaSign||t.publicKeyAlgorithm===F.publicKey.elgamal)){const i=t.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new no;r.read(i);const n={sessionKeyAlgorithm:t,sessionKey:gs.generateSessionKey(t)};try{await r.decrypt(e,n),a.push(r)}catch(e){O.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const i=r||t.sessionKeyAlgorithm;if(i&&!o.includes(F.write(F.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){O.printDebugError(e),s=e}})))}))),R(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+O.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&F.read(F.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],i=N){const{symmetricAlgo:n,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],i=N){const n=await Promise.all(e.map(((e,n)=>e.getPrimarySelfSignature(t,r[n],i))));if(e.length?!i.ignoreSEIPDv2FeatureFlag&&n.every((e=>e.features&&e.features[0]&F.features.seipdv2)):i.aeadProtect){const e={symmetricAlgo:F.symmetric.aes128,aeadAlgo:F.aead.ocb},t={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((e=>e.preferredCipherSuites&&e.preferredCipherSuites.some((e=>e[0]===t.symmetricAlgo&&e[1]===t.aeadAlgo))))?t:e}const s=F.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,i),a=F.read(F.symmetric,n),o=s?F.read(F.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===F.publicKey.x25519||e.keyPacket.algorithm===F.publicKey.x448)&&!o&&!O.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:gs.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,i=!1,n=[],s=new Date,a=[],o=N){if(r){if(!O.isUint8Array(r.data)||!O.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Vo.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Vo.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await Vo.encryptSessionKey(c,h,u,e,t,i,n,s,a,o),y=eo.fromObject({version:u?2:1,aeadAlgorithm:u?F.write(F.aead,u):null});y.packets=this.packets;const f=F.write(F.symmetric,h);return await y.encrypt(f,c,o),l.packets.push(y),y.packets=new qa,l}static async encryptSessionKey(e,t,r,i,n,s=!1,a=[],o=new Date,c=[],h=N){const u=new qa,l=F.write(F.symmetric,t),y=r&&F.write(F.aead,r);if(i){const t=await Promise.all(i.map((async function(t,r){const i=await t.getEncryptionKey(a[r],o,c,h),n=no.fromObject({version:y?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...t)}if(n){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,i=async function(e,s,a,o){const c=new ao(h);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((e=>t(c,e))))).reduce(r))return i(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((t=>i(e,l,y,t))));u.push(...s)}return new Vo(u)}async sign(e=[],t=null,r=[],i=new Date,n=[],s=[],a=N){const o=new qa,c=this.packets.findPacket(F.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await Yo(c,e,t,r,i,n,s,!1,a),u=h.map(((e,t)=>za.fromSignaturePacket(e,0===t))).reverse();return o.push(...u),o.push(c),o.push(...h),new Vo(o)}compress(e,t=N){if(e===F.compression.uncompressed)return this;const r=new Va(t);r.algorithm=e,r.packets=this.packets;const i=new qa;return i.push(r),new Vo(i)}async signDetached(e=[],t=null,r=[],i=new Date,n=[],s=[],a=N){const o=this.packets.findPacket(F.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new wo(await Yo(o,e,t,r,i,n,s,!0,a))}async verify(e,t=new Date,r=N){const i=this.unwrapCompressed(),n=i.packets.filterByTag(F.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");y(i.packets.stream)&&i.packets.push(...await Q(i.packets.stream,(e=>e||[])));const s=i.packets.filterByTag(F.packet.onePassSignature).reverse(),a=i.packets.filterByTag(F.packet.signature);return s.length&&!a.length&&O.isStream(i.packets.stream)&&!y(i.packets.stream)?(await Promise.all(s.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=M((async()=>(await e.correspondingSig).signatureData)),e.hashed=Q(await e.hash(e.signatureType,n[0],void 0,!1)),e.hashed.catch((()=>{}))}))),i.packets.stream=C(i.packets.stream,(async(e,t)=>{const r=T(e),i=L(t);try{for(let e=0;e<s.length;e++){const{value:t}=await r.read();s[e].correspondingSigResolve(t)}await r.readToEnd(),await i.ready,await i.close()}catch(e){s.forEach((t=>{t.correspondingSigReject(e)})),await i.abort(e)}})),Zo(s,n,e,t,!1,r)):Zo(a,n,e,t,!1,r)}verifyDetached(e,t,r=new Date,i=N){const n=this.unwrapCompressed().packets.filterByTag(F.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return Zo(e.packets.filterByTag(F.packet.signature),n,t,r,!0,i)}unwrapCompressed(){const e=this.packets.filterByTag(F.packet.compressedData);return e.length?new Vo(e[0].packets):this}async appendSignature(e,t=N){await this.packets.read(O.isUint8Array(e)?e:(await ie(e)).data,jo,t)}write(){return this.packets.write()}armor(e=N){const t=this.packets[this.packets.length-1],r=t.constructor.tag===eo.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===Na.tag&&6!==e.version));return ne(F.armor.message,this.write(),null,null,null,r,e)}}async function Yo(e,t,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=N){const h=new qa,u=null===e.text?F.signature.binary:F.signature.text;if(await Promise.all(t.map((async(t,r)=>{const h=s[r];if(!t.isPrivate())throw Error("Need private key for signing");const l=await t.getSigningKey(i[r],n,h,c);return Bo(e,t,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((e=>{h.push(...e)})),r){const e=r.packets.filterByTag(F.packet.signature);h.push(...e)}return h}async function Zo(e,t,r,i=new Date,n=!1,s=N){return Promise.all(e.filter((function(e){return["text","binary"].includes(F.read(F.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,i=new Date,n=!1,s=N){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof za?e.correspondingSig:e,h={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new qa;return e&&t.push(e),new wo(t)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(e,t,r,i,n,s)})))}const Jo=/*#__PURE__*/O.constructAllowedPackets([Na]);class Wo{constructor(e,t){if(this.text=O.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof wo))throw Error("Invalid signature input");this.signature=t||new wo(new qa)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=null,r=[],i=new Date,n=[],s=[],a=N){const o=new Ma;o.setText(this.text);const c=new wo(await Yo(o,e,t,r,i,n,s,!0,a));return new Wo(this.text,c)}verify(e,t=new Date,r=N){const i=this.signature.packets.filterByTag(F.packet.signature),n=new Ma;return n.setText(this.text),Zo(i,[n],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=N){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>F.read(F.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return ne(F.armor.signed,r,void 0,void 0,void 0,t,e)}}function $o(e){if(!(e instanceof Vo))throw Error("Parameter [message] needs to be of type Message")}function Xo(e){if(!(e instanceof Wo||e instanceof Vo))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function ec(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const tc=Object.keys(N).length;function rc(e){const t=Object.keys(e);if(t.length!==tc)for(const e of t)if(void 0===N[e])throw Error("Unknown config property: "+e)}function ic(e){return e&&!O.isArray(e)&&(e=[e]),e}async function nc(e){return"array"===O.isStream(e)?Q(e):e}function sc(e,t){e.data=C(t.packets.stream,(async(t,r)=>{await v(e.data,r,{preventClose:!0});const i=L(r);try{await Q(t,(e=>e)),await i.close()}catch(e){await i.abort(e)}}))}function ac(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}function oc(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, not "+e)}function cc(e,...t){if(!((r=e)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function hc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function uc(e,t){cc(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const lc=a&&"object"==typeof a&&"webcrypto"in a?a.webcrypto:void 0,yc=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),fc=(e,t)=>e<<32-t|e>>>t,gc=(e,t)=>e<<t|e>>>32-t>>>0,pc=68===new Uint8Array(new Uint32Array([287454020]).buffer)[0];
|
|
4
|
+
/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function dc(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function Ac(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}function wc(e){return"string"==typeof e&&(e=Ac(e)),cc(e),e}function mc(...e){let t=0;for(let r=0;r<e.length;r++){const i=e[r];cc(i),t+=i.length}const r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}class bc{clone(){return this._cloneInto()}}function Ec(e){const t=t=>e().update(wc(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function kc(e=32){if(lc&&"function"==typeof lc.getRandomValues)return lc.getRandomValues(new Uint8Array(e));throw Error("crypto.getRandomValues must be defined")}class vc extends bc{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,function(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.wrapConstructor");oc(e.outputLen),oc(e.blockLen)}(e);const r=wc(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const i=this.blockLen,n=new Uint8Array(i);n.set(r.length>i?e.create().update(r).digest():r);for(let e=0;e<n.length;e++)n[e]^=54;this.iHash.update(n),this.oHash=e.create();for(let e=0;e<n.length;e++)n[e]^=106;this.oHash.update(n),n.fill(0)}update(e){return hc(this),this.iHash.update(e),this}digestInto(e){hc(this),cc(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:s,outputLen:a}=this;return e.finished=i,e.destroyed=n,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const Bc=(e,t,r)=>new vc(e,t).update(r).digest();Bc.create=(e,t)=>new vc(e,t)
|
|
5
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */;const Ic=BigInt(0),Sc=BigInt(1),Cc=BigInt(2);function Kc(e){return e instanceof Uint8Array||null!=e&&"object"==typeof e&&"Uint8Array"===e.constructor.name}function Pc(e){if(!Kc(e))throw Error("Uint8Array expected")}const Dc=/* @__PURE__ */Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function Uc(e){Pc(e);let t="";for(let r=0;r<e.length;r++)t+=Dc[e[r]];return t}function xc(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function Qc(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return BigInt(""===e?"0":"0x"+e)}const Rc={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function Mc(e){return e>=Rc._0&&e<=Rc._9?e-Rc._0:e>=Rc._A&&e<=Rc._F?e-(Rc._A-10):e>=Rc._a&&e<=Rc._f?e-(Rc._a-10):void 0}function Tc(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);const t=e.length,r=t/2;if(t%2)throw Error("padded hex string expected, got unpadded hex of length "+t);const i=new Uint8Array(r);for(let t=0,n=0;t<r;t++,n+=2){const r=Mc(e.charCodeAt(n)),s=Mc(e.charCodeAt(n+1));if(void 0===r||void 0===s){const t=e[n]+e[n+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+n)}i[t]=16*r+s}return i}function Lc(e){return Qc(Uc(e))}function _c(e){return Pc(e),Qc(Uc(Uint8Array.from(e).reverse()))}function Fc(e,t){return Tc(e.toString(16).padStart(2*t,"0"))}function Nc(e,t){return Fc(e,t).reverse()}function Hc(e,t,r){let i;if("string"==typeof t)try{i=Tc(t)}catch(r){throw Error(`${e} must be valid hex string, got "${t}". Cause: ${r}`)}else{if(!Kc(t))throw Error(e+" must be hex string or Uint8Array");i=Uint8Array.from(t)}const n=i.length;if("number"==typeof r&&n!==r)throw Error(`${e} expected ${r} bytes, got ${n}`);return i}function Oc(...e){let t=0;for(let r=0;r<e.length;r++){const i=e[r];Pc(i),t+=i.length}const r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}const zc=e=>(Cc<<BigInt(e-1))-Sc,Gc=e=>new Uint8Array(e),qc=e=>Uint8Array.from(e);function jc(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let i=Gc(e),n=Gc(e),s=0;const a=()=>{i.fill(1),n.fill(0),s=0},o=(...e)=>r(n,i,...e),c=(e=Gc())=>{n=o(qc([0]),e),i=o(),0!==e.length&&(n=o(qc([1]),e),i=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){i=o();const t=i.slice();r.push(t),e+=i.length}return Oc(...r)};return(e,t)=>{let r;for(a(),c(e);!(r=t(h()));)c();return a(),r}}const Vc={bigint:e=>"bigint"==typeof e,function:e=>"function"==typeof e,boolean:e=>"boolean"==typeof e,string:e=>"string"==typeof e,stringOrUint8Array:e=>"string"==typeof e||Kc(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>"function"==typeof e&&Number.isSafeInteger(e.outputLen)};function Yc(e,t,r={}){const i=(t,r,i)=>{const n=Vc[r];if("function"!=typeof n)throw Error(`Invalid validator "${r}", expected function`);const s=e[t];if(!(i&&void 0===s||n(s,e)))throw Error(`Invalid param ${t+""}=${s} (${typeof s}), expected ${r}`)};for(const[e,r]of Object.entries(t))i(e,r,!1);for(const[e,t]of Object.entries(r))i(e,t,!0);return e}var Zc=/*#__PURE__*/Object.freeze({__proto__:null,abytes:Pc,bitGet:function(e,t){return e>>BigInt(t)&Sc},bitLen:function(e){let t;for(t=0;e>Ic;e>>=Sc,t+=1);return t},bitMask:zc,bitSet:function(e,t,r){return e|(r?Sc:Ic)<<BigInt(t)},bytesToHex:Uc,bytesToNumberBE:Lc,bytesToNumberLE:_c,concatBytes:Oc,createHmacDrbg:jc,ensureBytes:Hc,equalBytes:function(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return 0===r},hexToBytes:Tc,hexToNumber:Qc,isBytes:Kc,numberToBytesBE:Fc,numberToBytesLE:Nc,numberToHexUnpadded:xc,numberToVarBytesBE:function(e){return Tc(xc(e))},utf8ToBytes:function(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))},validateObject:Yc});
|
|
6
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Jc=BigInt(0),Wc=BigInt(1),$c=BigInt(2),Xc=BigInt(3),eh=BigInt(4),th=BigInt(5),rh=BigInt(8);function ih(e,t){const r=e%t;return r>=Jc?r:t+r}function nh(e,t,r){if(r<=Jc||t<Jc)throw Error("Expected power/modulo > 0");if(r===Wc)return Jc;let i=Wc;for(;t>Jc;)t&Wc&&(i=i*e%r),e=e*e%r,t>>=Wc;return i}function sh(e,t,r){let i=e;for(;t-- >Jc;)i*=i,i%=r;return i}function ah(e,t){if(e===Jc||t<=Jc)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=ih(e,t),i=t,n=Jc,s=Wc;for(;r!==Jc;){const e=i%r,t=n-s*(i/r);i=r,r=e,n=s,s=t}if(i!==Wc)throw Error("invert: does not exist");return ih(n,t)}function oh(e){if(e%eh===Xc){const t=(e+Wc)/eh;return function(e,r){const i=e.pow(r,t);if(!e.eql(e.sqr(i),r))throw Error("Cannot find square root");return i}}if(e%rh===th){const t=(e-th)/rh;return function(e,r){const i=e.mul(r,$c),n=e.pow(i,t),s=e.mul(r,n),a=e.mul(e.mul(s,$c),n),o=e.mul(s,e.sub(a,e.ONE));if(!e.eql(e.sqr(o),r))throw Error("Cannot find square root");return o}}return function(e){const t=(e-Wc)/$c;let r,i,n;for(r=e-Wc,i=0;r%$c===Jc;r/=$c,i++);for(n=$c;n<e&&nh(n,t,e)!==e-Wc;n++);if(1===i){const t=(e+Wc)/eh;return function(e,r){const i=e.pow(r,t);if(!e.eql(e.sqr(i),r))throw Error("Cannot find square root");return i}}const s=(r+Wc)/$c;return function(e,a){if(e.pow(a,t)===e.neg(e.ONE))throw Error("Cannot find square root");let o=i,c=e.pow(e.mul(e.ONE,n),r),h=e.pow(a,s),u=e.pow(a,r);for(;!e.eql(u,e.ONE);){if(e.eql(u,e.ZERO))return e.ZERO;let t=1;for(let r=e.sqr(u);t<o&&!e.eql(r,e.ONE);t++)r=e.sqr(r);const r=e.pow(c,Wc<<BigInt(o-t-1));c=e.sqr(r),h=e.mul(h,r),u=e.mul(u,c),o=t}return h}}(e)}BigInt(9),BigInt(16);const ch=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function hh(e,t){const r=void 0!==t?t:e.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function uh(e,t,r=!1,i={}){if(e<=Jc)throw Error("Expected Field ORDER > 0, got "+e);const{nBitLength:n,nByteLength:s}=hh(e,t);if(s>2048)throw Error("Field lengths over 2048 bytes are not supported");const a=oh(e),o=Object.freeze({ORDER:e,BITS:n,BYTES:s,MASK:zc(n),ZERO:Jc,ONE:Wc,create:t=>ih(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("Invalid field element: expected bigint, got "+typeof t);return Jc<=t&&t<e},is0:e=>e===Jc,isOdd:e=>(e&Wc)===Wc,neg:t=>ih(-t,e),eql:(e,t)=>e===t,sqr:t=>ih(t*t,e),add:(t,r)=>ih(t+r,e),sub:(t,r)=>ih(t-r,e),mul:(t,r)=>ih(t*r,e),pow:(e,t)=>function(e,t,r){if(r<Jc)throw Error("Expected power > 0");if(r===Jc)return e.ONE;if(r===Wc)return t;let i=e.ONE,n=t;for(;r>Jc;)r&Wc&&(i=e.mul(i,n)),n=e.sqr(n),r>>=Wc;return i}(o,e,t),div:(t,r)=>ih(t*ah(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>ah(t,e),sqrt:i.sqrt||(e=>a(o,e)),invertBatch:e=>function(e,t){const r=Array(t.length),i=t.reduce(((t,i,n)=>e.is0(i)?t:(r[n]=t,e.mul(t,i))),e.ONE),n=e.inv(i);return t.reduceRight(((t,i,n)=>e.is0(i)?t:(r[n]=e.mul(t,r[n]),e.mul(t,i))),n),r}(o,e),cmov:(e,t,r)=>r?t:e,toBytes:e=>r?Nc(e,s):Fc(e,s),fromBytes:e=>{if(e.length!==s)throw Error(`Fp.fromBytes: expected ${s}, got ${e.length}`);return r?_c(e):Lc(e)}});return Object.freeze(o)}function lh(e){if("bigint"!=typeof e)throw Error("field order must be bigint");const t=e.toString(2).length;return Math.ceil(t/8)}function yh(e){const t=lh(e);return t+Math.ceil(t/2)}
|
|
6
7
|
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
|
|
7
|
-
const
|
|
8
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:Ic,hexToBytes:Bc}=rc,Sc={Err:class extends Error{constructor(e=""){super(e)}},_parseInt(e){const{Err:t}=Sc;if(e.length<2||2!==e[0])throw new t("Invalid signature integer tag");const r=e[1],i=e.subarray(2,r+2);if(!r||i.length!==r)throw new t("Invalid signature integer: wrong length");if(128&i[0])throw new t("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new t("Invalid signature integer: unnecessary leading zero");return{d:Ic(i),l:e.subarray(r+2)}},toSig(e){const{Err:t}=Sc,r="string"==typeof e?Bc(e):e;To(r);let i=r.length;if(i<2||48!=r[0])throw new t("Invalid signature tag");if(r[1]!==i-2)throw new t("Invalid signature: incorrect length");const{d:n,l:s}=Sc._parseInt(r.subarray(2)),{d:a,l:o}=Sc._parseInt(s);if(o.length)throw new t("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(e){const t=e=>8&Number.parseInt(e[0],16)?"00"+e:e,r=e=>{const t=e.toString(16);return 1&t.length?"0"+t:t},i=t(r(e.s)),n=t(r(e.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},Cc=BigInt(0),Kc=BigInt(1);BigInt(2);const Dc=BigInt(3);function Pc(e){const t=function(e){const t=vc(e);tc(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=t;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}(e),{Fp:r}=t,i=t.toBytes||((e,t,i)=>{const n=t.toAffine();return Jo(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=t.fromBytes||(e=>{const t=e.subarray(1);return{x:r.fromBytes(t.subarray(0,r.BYTES)),y:r.fromBytes(t.subarray(r.BYTES,2*r.BYTES))}});function s(e){const{a:i,b:n}=t,s=r.sqr(e),a=r.mul(s,e);return r.add(r.add(a,r.mul(e,i)),n)}if(!r.eql(r.sqr(t.Gy),s(t.Gx)))throw Error("bad generator point: equation left != right");function a(e){return"bigint"==typeof e&&Cc<e&&e<t.n}function o(e){if(!a(e))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(e){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=t;if(r&&"bigint"!=typeof e){if(Mo(e)&&(e=_o(e)),"string"!=typeof e||!r.includes(e.length))throw Error("Invalid key");e=e.padStart(2*i,"0")}let a;try{a="bigint"==typeof e?e:Go(Yo("private key",e,i))}catch(t){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof e}`)}return n&&(a=uc(a,s)),o(a),a}const h=new Map;function u(e){if(!(e instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(e,t,i){if(this.px=e,this.py=t,this.pz=i,null==e||!r.isValid(e))throw Error("x required");if(null==t||!r.isValid(t))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(e){const{x:t,y:i}=e||{};if(!e||!r.isValid(t)||!r.isValid(i))throw Error("invalid affine point");if(e instanceof l)throw Error("projective point not allowed");const n=e=>r.eql(e,r.ZERO);return n(t)&&n(i)?l.ZERO:new l(t,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}static fromHex(e){const t=l.fromAffine(n(Yo("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return l.BASE.multiply(c(e))}_setWindowSize(e){this._WINDOW_SIZE=e,h.delete(this)}assertValidity(){if(this.is0()){if(t.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:e,y:i}=this.toAffine();if(!r.isValid(e)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(e);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:e}=this.toAffine();if(r.isOdd)return!r.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){u(e);const{px:t,py:i,pz:n}=this,{px:s,py:a,pz:o}=e,c=r.eql(r.mul(t,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:e,b:i}=t,n=r.mul(i,Dc),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,y=r.mul(s,s),f=r.mul(a,a),g=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(e,u),h=r.mul(n,g),h=r.add(c,h),c=r.sub(f,h),h=r.add(f,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),g=r.mul(e,g),p=r.sub(y,g),p=r.mul(e,p),p=r.add(p,u),u=r.add(y,y),y=r.add(u,y),y=r.add(y,g),y=r.mul(y,p),h=r.add(h,y),g=r.mul(a,o),g=r.add(g,g),y=r.mul(g,p),c=r.sub(c,y),u=r.mul(g,f),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(e){u(e);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=e;let h=r.ZERO,y=r.ZERO,f=r.ZERO;const g=t.a,p=r.mul(t.b,Dc);let d=r.mul(i,a),A=r.mul(n,o),w=r.mul(s,c),m=r.add(i,n),b=r.add(a,o);m=r.mul(m,b),b=r.add(d,A),m=r.sub(m,b),b=r.add(i,s);let E=r.add(a,c);return b=r.mul(b,E),E=r.add(d,w),b=r.sub(b,E),E=r.add(n,s),h=r.add(o,c),E=r.mul(E,h),h=r.add(A,w),E=r.sub(E,h),f=r.mul(g,b),h=r.mul(p,w),f=r.add(h,f),h=r.sub(A,f),f=r.add(A,f),y=r.mul(h,f),A=r.add(d,d),A=r.add(A,d),w=r.mul(g,w),b=r.mul(p,b),A=r.add(A,w),w=r.sub(d,w),w=r.mul(g,w),b=r.add(b,w),d=r.mul(A,b),y=r.add(y,d),d=r.mul(E,b),h=r.mul(m,h),h=r.sub(h,d),d=r.mul(m,A),f=r.mul(E,f),f=r.add(f,d),new l(h,y,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(l.ZERO)}wNAF(e){return f.wNAFCached(this,h,e,(e=>{const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}))}multiplyUnsafe(e){const i=l.ZERO;if(e===Cc)return i;if(o(e),e===Kc)return this;const{endo:n}=t;if(!n)return f.unsafeLadder(this,e);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(e),u=i,y=i,g=this;for(;a>Cc||h>Cc;)a&Kc&&(u=u.add(g)),h&Kc&&(y=y.add(g)),g=g.double(),a>>=Kc,h>>=Kc;return s&&(u=u.negate()),c&&(y=y.negate()),y=new l(r.mul(y.px,n.beta),y.py,y.pz),u.add(y)}multiply(e){o(e);let i,n,s=e;const{endo:a}=t;if(a){const{k1neg:e,k1:t,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(t),{p:y,f:g}=this.wNAF(c);h=f.constTimeNegate(e,h),y=f.constTimeNegate(o,y),y=new l(r.mul(y.px,a.beta),y.py,y.pz),i=h.add(y),n=u.add(g)}else{const{p:e,f:t}=this.wNAF(s);i=e,n=t}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(e,t,r){const i=l.BASE,n=(e,t)=>t!==Cc&&t!==Kc&&e.equals(i)?e.multiply(t):e.multiplyUnsafe(t),s=n(this,t).add(n(e,r));return s.is0()?void 0:s}toAffine(e){const{px:t,py:i,pz:n}=this,s=this.is0();null==e&&(e=s?r.ONE:r.inv(n));const a=r.mul(t,e),o=r.mul(i,e),c=r.mul(n,e);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:e,isTorsionFree:r}=t;if(e===Kc)return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:e,clearCofactor:r}=t;return e===Kc?this:r?r(l,this):this.multiplyUnsafe(t.h)}toRawBytes(e=!0){return this.assertValidity(),i(l,this,e)}toHex(e=!0){return _o(this.toRawBytes(e))}}l.BASE=new l(t.Gx,t.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const y=t.nBitLength,f=kc(l,t.endo?Math.ceil(y/2):y);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function Uc(e){const t=function(e){const t=vc(e);return tc(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}(e),{Fp:r,n:i}=t,n=r.BYTES+1,s=2*r.BYTES+1;function a(e){return uc(e,i)}function o(e){return fc(e,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=Pc({...t,toBytes(e,t,i){const n=t.toAffine(),s=r.toBytes(n.x),a=Jo;return i?a(Uint8Array.from([t.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(e){const t=e.length,i=e[0],a=e.subarray(1);if(t!==n||2!==i&&3!==i){if(t===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${t} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const e=Go(a);if(!(Cc<(o=e)&&o<r.ORDER))throw Error("Point is not on curve");const t=u(e);let n;try{n=r.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("Point is not on curve"+t)}return!(1&~i)!==((n&Kc)===Kc)&&(n=r.neg(n)),{x:e,y:n}}var o}}),y=e=>_o(qo(e,t.nByteLength));function f(e){return e>i>>Kc}const g=(e,t,r)=>Go(e.slice(t,r));class p{constructor(e,t,r){this.r=e,this.s=t,this.recovery=r,this.assertValidity()}static fromCompact(e){const r=t.nByteLength;return e=Yo("compactSignature",e,2*r),new p(g(e,0,r),g(e,r,2*r))}static fromDER(e){const{r:t,s:r}=Sc.toSig(Yo("DER",e));return new p(t,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(e){return new p(this.r,this.s,e)}recoverPublicKey(e){const{r:i,s:n,recovery:s}=this,h=m(Yo("msgHash",e));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i+t.n:i;if(u>=r.ORDER)throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",f=c.fromHex(l+y(u)),g=o(u),p=a(-h*g),d=a(n*g),A=c.BASE.multiplyAndAddUnsafe(f,p,d);if(!A)throw Error("point at infinify");return A.assertValidity(),A}hasHighS(){return f(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(-this.s),this.recovery):this}toDERRawBytes(){return zo(this.toDERHex())}toDERHex(){return Sc.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return zo(this.toCompactHex())}toCompactHex(){return y(this.r)+y(this.s)}}const d={isValidPrivateKey(e){try{return h(e),!0}catch(e){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const e=mc(t.n);return function(e,t,r=!1){const i=e.length,n=wc(t),s=mc(t);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=uc(r?Go(e):jo(e),t-nc)+nc;return r?Vo(a,n):qo(a,n)}(t.randomBytes(e),t.n)},precompute:(e=8,t=c.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)};function A(e){const t=Mo(e),r="string"==typeof e,i=(t||r)&&e.length;return t?i===n||i===s:r?i===2*n||i===2*s:e instanceof c}const w=t.bits2int||function(e){const r=Go(e),i=8*e.length-t.nBitLength;return i>0?r>>BigInt(i):r},m=t.bits2int_modN||function(e){return a(w(e))},b=Wo(t.nBitLength);function E(e){if("bigint"!=typeof e)throw Error("bigint expected");if(!(Cc<=e&&e<b))throw Error("bigint expected < 2^"+t.nBitLength);return qo(e,t.nByteLength)}function k(e,i,n=v){if(["recovered","canonical"].some((e=>e in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=t;let{lowS:y,prehash:g,extraEntropy:d}=n;null==y&&(y=!0),e=Yo("msgHash",e),g&&(e=Yo("prehashed msgHash",s(e)));const A=m(e),b=h(i),k=[E(b),E(A)];if(null!=d&&!1!==d){const e=!0===d?u(r.BYTES):d;k.push(Yo("extraEntropy",e))}const I=Jo(...k),B=A;return{seed:I,k2sig:function(e){const t=w(e);if(!l(t))return;const r=o(t),i=c.BASE.multiply(t).toAffine(),n=a(i.x);if(n===Cc)return;const s=a(r*a(B+n*b));if(s===Cc)return;let h=(i.x===n?0:2)|Number(i.y&Kc),u=s;return y&&f(s)&&(u=function(e){return f(e)?a(-e):e}(s),h^=1),new p(n,u,h)}}}const v={lowS:t.lowS,prehash:!1},I={lowS:t.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:t,getPublicKey:function(e,t=!0){return c.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(A(e))throw Error("first arg must be private key");if(!A(t))throw Error("second arg must be public key");return c.fromHex(t).multiply(h(e)).toRawBytes(r)},sign:function(e,r,i=v){const{seed:n,k2sig:s}=k(e,r,i),a=t;return Xo(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(e,r,i,n=I){const s=e;if(r=Yo("msgHash",r),i=Yo("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,y;try{if("string"==typeof s||Mo(s))try{l=p.fromDER(s)}catch(e){if(!(e instanceof Sc.Err))throw e;l=p.fromCompact(s)}else{if("object"!=typeof s||"bigint"!=typeof s.r||"bigint"!=typeof s.s)throw Error("PARSE");{const{r:e,s:t}=s;l=new p(e,t)}}y=c.fromHex(i)}catch(e){if("PARSE"===e.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=t.hash(r));const{r:f,s:g}=l,d=m(r),A=o(g),w=a(d*A),b=a(f*A),E=c.BASE.multiplyAndAddUnsafe(y,w,b)?.toAffine();return!!E&&a(E.x)===f},ProjectivePoint:c,Signature:p,utils:d}}
|
|
9
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function xc(e){return{hash:e,hmac:(t,...r)=>Uo(e,t,So(...r)),randomBytes:Do}}function Qc(e,t){const r=t=>Uc({...e,...xc(t)});return Object.freeze({...r(t),create:r})}BigInt(4);const Rc=(e,t,r)=>e&t^~e&r,Mc=(e,t,r)=>e&t^e&r^t&r;class Tc extends Co{constructor(e,t,r,i){super(),this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=mo(this.buffer)}update(e){po(this);const{view:t,buffer:r,blockLen:i}=this,n=(e=Bo(e)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(t,0),this.pos=0);else{const t=mo(e);for(;i<=n-s;s+=i)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){po(this),Ao(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;t[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let e=s;e<i;e++)t[e]=0;!function(e,t,r,i){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,i);const n=BigInt(32),s=BigInt(4294967295),a=Number(r>>n&s),o=Number(r&s),c=i?4:0,h=i?0:4;e.setUint32(t+c,a,i),e.setUint32(t+h,o,i)}(r,i-8,BigInt(8*this.length),n),this.process(r,0);const a=mo(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,h[e],n)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return e.length=i,e.pos=a,e.finished=n,e.destroyed=s,i%t&&e.buffer.set(r),e}}const Lc=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),_c=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Nc=/* @__PURE__ */new Uint32Array(64);class Fc extends Tc{constructor(){super(64,32,8,!1),this.A=0|_c[0],this.B=0|_c[1],this.C=0|_c[2],this.D=0|_c[3],this.E=0|_c[4],this.F=0|_c[5],this.G=0|_c[6],this.H=0|_c[7]}get(){const{A:e,B:t,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[e,t,r,i,n,s,a,o]}set(e,t,r,i,n,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)Nc[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=Nc[e-15],r=Nc[e-2],i=bo(t,7)^bo(t,18)^t>>>3,n=bo(r,17)^bo(r,19)^r>>>10;Nc[e]=n+Nc[e-7]+i+Nc[e-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let e=0;e<64;e++){const t=h+(bo(a,6)^bo(a,11)^bo(a,25))+Rc(a,o,c)+Lc[e]+Nc[e]|0,u=(bo(r,2)^bo(r,13)^bo(r,22))+Mc(r,i,n)|0;h=c,c=o,o=a,a=s+t|0,s=n,n=i,i=r,r=t+u|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){Nc.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class Hc extends Fc{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Oc=/* @__PURE__ */Ko((()=>new Fc)),zc=/* @__PURE__ */Ko((()=>new Hc)),Gc=Ac(BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),jc=Qc({a:Gc.create(BigInt("-3")),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Gc,n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:BigInt(1),lowS:!1},Oc),qc=/* @__PURE__ */BigInt(2**32-1),Vc=/* @__PURE__ */BigInt(32);function Yc(e,t=!1){return t?{h:Number(e&qc),l:Number(e>>Vc&qc)}:{h:0|Number(e>>Vc&qc),l:0|Number(e&qc)}}function Jc(e,t=!1){let r=new Uint32Array(e.length),i=new Uint32Array(e.length);for(let n=0;n<e.length;n++){const{h:s,l:a}=Yc(e[n],t);[r[n],i[n]]=[s,a]}return[r,i]}const Wc=(e,t,r)=>e<<r|t>>>32-r,Zc=(e,t,r)=>t<<r|e>>>32-r,$c=(e,t,r)=>t<<r-32|e>>>64-r,Xc=(e,t,r)=>e<<r-32|t>>>64-r;const eh={fromBig:Yc,split:Jc,toBig:(e,t)=>BigInt(e>>>0)<<Vc|BigInt(t>>>0),shrSH:(e,t,r)=>e>>>r,shrSL:(e,t,r)=>e<<32-r|t>>>r,rotrSH:(e,t,r)=>e>>>r|t<<32-r,rotrSL:(e,t,r)=>e<<32-r|t>>>r,rotrBH:(e,t,r)=>e<<64-r|t>>>r-32,rotrBL:(e,t,r)=>e>>>r-32|t<<64-r,rotr32H:(e,t)=>t,rotr32L:(e,t)=>e,rotlSH:Wc,rotlSL:Zc,rotlBH:$c,rotlBL:Xc,add:function(e,t,r,i){const n=(t>>>0)+(i>>>0);return{h:e+r+(n/2**32|0)|0,l:0|n}},add3L:(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),add3H:(e,t,r,i)=>t+r+i+(e/2**32|0)|0,add4L:(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),add4H:(e,t,r,i,n)=>t+r+i+n+(e/2**32|0)|0,add5H:(e,t,r,i,n,s)=>t+r+i+n+s+(e/2**32|0)|0,add5L:(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0)},[th,rh]=/* @__PURE__ */(()=>eh.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),ih=/* @__PURE__ */new Uint32Array(80),nh=/* @__PURE__ */new Uint32Array(80);class sh extends Tc{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:y,Gl:f,Hh:g,Hl:p}=this;return[e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p]}set(e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|y,this.Gl=0|f,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)ih[r]=e.getUint32(t),nh[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|ih[e-15],r=0|nh[e-15],i=eh.rotrSH(t,r,1)^eh.rotrSH(t,r,8)^eh.shrSH(t,r,7),n=eh.rotrSL(t,r,1)^eh.rotrSL(t,r,8)^eh.shrSL(t,r,7),s=0|ih[e-2],a=0|nh[e-2],o=eh.rotrSH(s,a,19)^eh.rotrBH(s,a,61)^eh.shrSH(s,a,6),c=eh.rotrSL(s,a,19)^eh.rotrBL(s,a,61)^eh.shrSL(s,a,6),h=eh.add4L(n,c,nh[e-7],nh[e-16]),u=eh.add4H(h,i,o,ih[e-7],ih[e-16]);ih[e]=0|u,nh[e]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:y,Fl:f,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=eh.rotrSH(u,l,14)^eh.rotrSH(u,l,18)^eh.rotrBH(u,l,41),w=eh.rotrSL(u,l,14)^eh.rotrSL(u,l,18)^eh.rotrBL(u,l,41),m=u&y^~u&g,b=l&f^~l&p,E=eh.add5L(A,w,b,rh[e],nh[e]),k=eh.add5H(E,d,t,m,th[e],ih[e]),v=0|E,I=eh.rotrSH(r,i,28)^eh.rotrBH(r,i,34)^eh.rotrBH(r,i,39),B=eh.rotrSL(r,i,28)^eh.rotrBL(r,i,34)^eh.rotrBL(r,i,39),S=r&n^r&a^n&a,C=i&s^i&o^s&o;d=0|g,A=0|p,g=0|y,p=0|f,y=0|u,f=0|l,({h:u,l}=eh.add(0|c,0|h,0|k,0|v)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=eh.add3L(v,B,C);r=eh.add3H(K,k,I,S),i=0|K}({h:r,l:i}=eh.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=eh.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=eh.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=eh.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=eh.add(0|this.Eh,0|this.El,0|u,0|l)),({h:y,l:f}=eh.add(0|this.Fh,0|this.Fl,0|y,0|f)),({h:g,l:p}=eh.add(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=eh.add(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,i,n,s,a,o,c,h,u,l,y,f,g,p,d,A)}roundClean(){ih.fill(0),nh.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class ah extends sh{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const oh=/* @__PURE__ */Ko((()=>new sh)),ch=/* @__PURE__ */Ko((()=>new ah)),hh=Ac(BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),uh=Qc({a:hh.create(BigInt("-3")),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:hh,n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:BigInt(1),lowS:!1},ch),lh=Ac(BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),yh={a:lh.create(BigInt("-3")),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:lh,n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:BigInt(1)},fh=Qc({a:yh.a,b:yh.b,Fp:lh,n:yh.n,Gx:yh.Gx,Gy:yh.Gy,h:yh.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},oh),gh=[],ph=[],dh=[],Ah=/* @__PURE__ */BigInt(0),wh=/* @__PURE__ */BigInt(1),mh=/* @__PURE__ */BigInt(2),bh=/* @__PURE__ */BigInt(7),Eh=/* @__PURE__ */BigInt(256),kh=/* @__PURE__ */BigInt(113);for(let e=0,t=wh,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],gh.push(2*(5*i+r)),ph.push((e+1)*(e+2)/2%64);let n=Ah;for(let e=0;e<7;e++)t=(t<<wh^(t>>bh)*kh)%Eh,t&mh&&(n^=wh<<(wh<</* @__PURE__ */BigInt(e))-wh);dh.push(n)}const[vh,Ih]=/* @__PURE__ */Jc(dh,!0),Bh=(e,t,r)=>r>32?$c(e,t,r):Wc(e,t,r),Sh=(e,t,r)=>r>32?Xc(e,t,r):Zc(e,t,r);class Ch extends Co{constructor(e,t,r,i=!1,n=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,fo(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){ko||vo(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const i=(t+8)%10,n=(t+2)%10,s=r[n],a=r[n+1],o=Bh(s,a,1)^r[i],c=Sh(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],n=e[3];for(let r=0;r<24;r++){const i=ph[r],s=Bh(t,n,i),a=Sh(t,n,i),o=gh[r];t=e[o],n=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let i=0;i<10;i++)r[i]=e[t+i];for(let i=0;i<10;i++)e[t+i]^=~r[(i+2)%10]&r[(i+4)%10]}e[0]^=vh[i],e[1]^=Ih[i]}r.fill(0)}(this.state32,this.rounds),ko||vo(this.state32),this.posOut=0,this.pos=0}update(e){po(this);const{blockLen:t,state:r}=this,i=(e=Bo(e)).length;for(let n=0;n<i;){const s=Math.min(t-this.pos,i-n);for(let t=0;t<s;t++)r[this.pos++]^=e[n++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:i}=this;e[r]^=t,128&t&&r===i-1&&this.keccak(),e[i-1]^=128,this.keccak()}writeInto(e){po(this,!1),go(e),this.finish();const t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return fo(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(Ao(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return e||(e=new Ch(t,r,i,s,n)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=s,e.destroyed=this.destroyed,e}}const Kh=(e,t,r)=>Ko((()=>new Ch(t,e,r))),Dh=/* @__PURE__ */Kh(6,136,32),Ph=/* @__PURE__ */Kh(6,72,64),Uh=/* @__PURE__ */((e,t,r)=>function(e){const t=(t,r)=>e(r).update(Bo(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((i={})=>new Ch(t,e,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),xh=BigInt(0),Qh=BigInt(1),Rh=BigInt(2),Mh=BigInt(8),Th={zip215:!0};function Lh(e){const t=function(e){const t=vc(e);return tc(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}(e),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=t,h=Rh<<BigInt(8*o)-Qh,u=r.create,l=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:r.sqrt(e*r.inv(t))}}catch(e){return{isValid:!1,value:xh}}}),y=t.adjustScalarBytes||(e=>e),f=t.domain||((e,t,r)=>{if(t.length||r)throw Error("Contexts/pre-hash are not supported");return e}),g=e=>"bigint"==typeof e&&xh<e,p=(e,t)=>g(e)&&g(t)&&e<t,d=e=>e===xh||p(e,h);function A(e,t){if(p(e,t))return e;throw Error(`Expected valid scalar < ${t}, got ${typeof e} ${e}`)}function w(e){return e===xh?e:A(e,i)}const m=new Map;function b(e){if(!(e instanceof E))throw Error("ExtendedPoint expected")}class E{constructor(e,t,r,i){if(this.ex=e,this.ey=t,this.ez=r,this.et=i,!d(e))throw Error("x required");if(!d(t))throw Error("y required");if(!d(r))throw Error("z required");if(!d(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(e){if(e instanceof E)throw Error("extended point not allowed");const{x:t,y:r}=e||{};if(!d(t)||!d(r))throw Error("invalid affine point");return new E(t,r,Qh,u(t*r))}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.ez)));return e.map(((e,r)=>e.toAffine(t[r]))).map(E.fromAffine)}_setWindowSize(e){this._WINDOW_SIZE=e,m.delete(this)}assertValidity(){const{a:e,d:r}=t;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i*i),c=u(n*n),h=u(s*s),l=u(h*h),y=u(o*e);if(u(h*u(y+c))!==u(l+u(r*u(o*c))))throw Error("bad point: equation left != right (1)");if(u(i*n)!==u(s*a))throw Error("bad point: equation left != right (2)")}equals(e){b(e);const{ex:t,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=e,o=u(t*a),c=u(n*i),h=u(r*a),l=u(s*i);return o===c&&h===l}is0(){return this.equals(E.ZERO)}negate(){return new E(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){const{a:e}=t,{ex:r,ey:i,ez:n}=this,s=u(r*r),a=u(i*i),o=u(Rh*u(n*n)),c=u(e*s),h=r+i,l=u(u(h*h)-s-a),y=c+a,f=y-o,g=c-a,p=u(l*f),d=u(y*g),A=u(l*g),w=u(f*y);return new E(p,d,w,A)}add(e){b(e);const{a:r,d:i}=t,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:y}=e;if(r===BigInt(-1)){const e=u((s-n)*(h+c)),t=u((s+n)*(h-c)),r=u(t-e);if(r===xh)return this.double();const i=u(a*Rh*y),f=u(o*Rh*l),g=f+i,p=t+e,d=f-i,A=u(g*r),w=u(p*d),m=u(g*d),b=u(r*p);return new E(A,w,b,m)}const f=u(n*c),g=u(s*h),p=u(o*i*y),d=u(a*l),A=u((n+s)*(c+h)-f-g),w=d-p,m=d+p,k=u(g-r*f),v=u(A*w),I=u(m*k),B=u(A*k),S=u(w*m);return new E(v,I,S,B)}subtract(e){return this.add(e.negate())}wNAF(e){return I.wNAFCached(this,m,e,E.normalizeZ)}multiply(e){const{p:t,f:r}=this.wNAF(A(e,i));return E.normalizeZ([t,r])[0]}multiplyUnsafe(e){let t=w(e);return t===xh?v:this.equals(v)||t===Qh?this:this.equals(k)?this.wNAF(t).p:I.unsafeLadder(this,t)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return I.unsafeLadder(this,i).is0()}toAffine(e){const{ex:t,ey:i,ez:n}=this,s=this.is0();null==e&&(e=s?Mh:r.inv(n));const a=u(t*e),o=u(i*e),c=u(n*e);if(s)return{x:xh,y:Qh};if(c!==Qh)throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:e}=t;return e===Qh?this:this.multiplyUnsafe(e)}static fromHex(e,i=!1){const{d:n,a:s}=t,a=r.BYTES,o=(e=Yo("pointHex",e,a)).slice(),c=e[a-1];o[a-1]=-129&c;const y=jo(o);y===xh||A(y,i?h:r.ORDER);const f=u(y*y),g=u(f-Qh),p=u(n*f-s);let{isValid:d,value:w}=l(g,p);if(!d)throw Error("Point.fromHex: invalid y coordinate");const m=(w&Qh)===Qh,b=!!(128&c);if(!i&&w===xh&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==m&&(w=u(-w)),E.fromAffine({x:w,y})}static fromPrivateKey(e){return C(e).point}toRawBytes(){const{x:e,y:t}=this.toAffine(),i=Vo(t,r.BYTES);return i[i.length-1]|=e&Qh?128:0,i}toHex(){return _o(this.toRawBytes())}}E.BASE=new E(t.Gx,t.Gy,Qh,u(t.Gx*t.Gy)),E.ZERO=new E(xh,Qh,Qh,xh);const{BASE:k,ZERO:v}=E,I=kc(E,8*o);function B(e){return uc(e,i)}function S(e){return B(jo(e))}function C(e){const t=o;e=Yo("private key",e,t);const r=Yo("hashed private key",s(e),2*t),i=y(r.slice(0,t)),n=r.slice(t,2*t),a=S(i),c=k.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(e=new Uint8Array,...t){const r=Jo(...t);return S(s(f(r,Yo("context",e),!!n)))}const D=Th;k._setWindowSize(8);return{CURVE:t,getPublicKey:function(e){return C(e).pointBytes},sign:function(e,t,i={}){e=Yo("message",e),n&&(e=n(e));const{prefix:s,scalar:a,pointBytes:c}=C(t),h=K(i.context,s,e),u=k.multiply(h).toRawBytes(),l=B(h+K(i.context,u,c,e)*a);return w(l),Yo("result",Jo(u,Vo(l,r.BYTES)),2*o)},verify:function(e,t,i,s=D){const{context:a,zip215:o}=s,c=r.BYTES;e=Yo("signature",e,2*c),t=Yo("message",t),n&&(t=n(t));const h=jo(e.slice(c,2*c));let u,l,y;try{u=E.fromHex(i,o),l=E.fromHex(e.slice(0,c),o),y=k.multiplyUnsafe(h)}catch(e){return!1}if(!o&&u.isSmallOrder())return!1;const f=K(a,l.toRawBytes(),u.toRawBytes(),t);return l.add(u.multiplyUnsafe(f)).subtract(y).clearCofactor().equals(E.ZERO)},ExtendedPoint:E,utils:{getExtendedPublicKey:C,randomPrivateKey:()=>a(r.BYTES),precompute:(e=8,t=E.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)}}}
|
|
10
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const
|
|
11
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const
|
|
8
|
+
const fh=BigInt(0),gh=BigInt(1);function ph(e,t){const r=(e,t)=>{const r=t.negate();return e?r:t},i=e=>({windows:Math.ceil(t/e)+1,windowSize:2**(e-1)});return{constTimeNegate:r,unsafeLadder(t,r){let i=e.ZERO,n=t;for(;r>fh;)r&gh&&(i=i.add(n)),n=n.double(),r>>=gh;return i},precomputeWindow(e,t){const{windows:r,windowSize:n}=i(t),s=[];let a=e,o=a;for(let e=0;e<r;e++){o=a,s.push(o);for(let e=1;e<n;e++)o=o.add(a),s.push(o);a=o.double()}return s},wNAF(t,n,s){const{windows:a,windowSize:o}=i(t);let c=e.ZERO,h=e.BASE;const u=BigInt(2**t-1),l=2**t,y=BigInt(t);for(let e=0;e<a;e++){const t=e*o;let i=Number(s&u);s>>=y,i>o&&(i-=l,s+=gh);const a=t,f=t+Math.abs(i)-1,g=e%2!=0,p=i<0;0===i?h=h.add(r(g,n[a])):c=c.add(r(p,n[f]))}return{p:c,f:h}},wNAFCached(e,t,r,i){const n=e._WINDOW_SIZE||1;let s=t.get(e);return s||(s=this.precomputeWindow(e,n),1!==n&&t.set(e,i(s))),this.wNAF(n,s,r)}}}function dh(e){return Yc(e.Fp,ch.reduce(((e,t)=>(e[t]="function",e)),{ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),Yc(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...hh(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}
|
|
9
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:Ah,hexToBytes:wh}=Zc,mh={Err:class extends Error{constructor(e=""){super(e)}},_parseInt(e){const{Err:t}=mh;if(e.length<2||2!==e[0])throw new t("Invalid signature integer tag");const r=e[1],i=e.subarray(2,r+2);if(!r||i.length!==r)throw new t("Invalid signature integer: wrong length");if(128&i[0])throw new t("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new t("Invalid signature integer: unnecessary leading zero");return{d:Ah(i),l:e.subarray(r+2)}},toSig(e){const{Err:t}=mh,r="string"==typeof e?wh(e):e;Pc(r);let i=r.length;if(i<2||48!=r[0])throw new t("Invalid signature tag");if(r[1]!==i-2)throw new t("Invalid signature: incorrect length");const{d:n,l:s}=mh._parseInt(r.subarray(2)),{d:a,l:o}=mh._parseInt(s);if(o.length)throw new t("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(e){const t=e=>8&Number.parseInt(e[0],16)?"00"+e:e,r=e=>{const t=e.toString(16);return 1&t.length?"0"+t:t},i=t(r(e.s)),n=t(r(e.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},bh=BigInt(0),Eh=BigInt(1);BigInt(2);const kh=BigInt(3);function vh(e){const t=function(e){const t=dh(e);Yc(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=t;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}(e),{Fp:r}=t,i=t.toBytes||((e,t,i)=>{const n=t.toAffine();return Oc(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=t.fromBytes||(e=>{const t=e.subarray(1);return{x:r.fromBytes(t.subarray(0,r.BYTES)),y:r.fromBytes(t.subarray(r.BYTES,2*r.BYTES))}});function s(e){const{a:i,b:n}=t,s=r.sqr(e),a=r.mul(s,e);return r.add(r.add(a,r.mul(e,i)),n)}if(!r.eql(r.sqr(t.Gy),s(t.Gx)))throw Error("bad generator point: equation left != right");function a(e){return"bigint"==typeof e&&bh<e&&e<t.n}function o(e){if(!a(e))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(e){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=t;if(r&&"bigint"!=typeof e){if(Kc(e)&&(e=Uc(e)),"string"!=typeof e||!r.includes(e.length))throw Error("Invalid key");e=e.padStart(2*i,"0")}let a;try{a="bigint"==typeof e?e:Lc(Hc("private key",e,i))}catch(t){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof e}`)}return n&&(a=ih(a,s)),o(a),a}const h=new Map;function u(e){if(!(e instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(e,t,i){if(this.px=e,this.py=t,this.pz=i,null==e||!r.isValid(e))throw Error("x required");if(null==t||!r.isValid(t))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(e){const{x:t,y:i}=e||{};if(!e||!r.isValid(t)||!r.isValid(i))throw Error("invalid affine point");if(e instanceof l)throw Error("projective point not allowed");const n=e=>r.eql(e,r.ZERO);return n(t)&&n(i)?l.ZERO:new l(t,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}static fromHex(e){const t=l.fromAffine(n(Hc("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return l.BASE.multiply(c(e))}_setWindowSize(e){this._WINDOW_SIZE=e,h.delete(this)}assertValidity(){if(this.is0()){if(t.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:e,y:i}=this.toAffine();if(!r.isValid(e)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(e);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:e}=this.toAffine();if(r.isOdd)return!r.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){u(e);const{px:t,py:i,pz:n}=this,{px:s,py:a,pz:o}=e,c=r.eql(r.mul(t,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:e,b:i}=t,n=r.mul(i,kh),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,y=r.mul(s,s),f=r.mul(a,a),g=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(e,u),h=r.mul(n,g),h=r.add(c,h),c=r.sub(f,h),h=r.add(f,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),g=r.mul(e,g),p=r.sub(y,g),p=r.mul(e,p),p=r.add(p,u),u=r.add(y,y),y=r.add(u,y),y=r.add(y,g),y=r.mul(y,p),h=r.add(h,y),g=r.mul(a,o),g=r.add(g,g),y=r.mul(g,p),c=r.sub(c,y),u=r.mul(g,f),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(e){u(e);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=e;let h=r.ZERO,y=r.ZERO,f=r.ZERO;const g=t.a,p=r.mul(t.b,kh);let d=r.mul(i,a),A=r.mul(n,o),w=r.mul(s,c),m=r.add(i,n),b=r.add(a,o);m=r.mul(m,b),b=r.add(d,A),m=r.sub(m,b),b=r.add(i,s);let E=r.add(a,c);return b=r.mul(b,E),E=r.add(d,w),b=r.sub(b,E),E=r.add(n,s),h=r.add(o,c),E=r.mul(E,h),h=r.add(A,w),E=r.sub(E,h),f=r.mul(g,b),h=r.mul(p,w),f=r.add(h,f),h=r.sub(A,f),f=r.add(A,f),y=r.mul(h,f),A=r.add(d,d),A=r.add(A,d),w=r.mul(g,w),b=r.mul(p,b),A=r.add(A,w),w=r.sub(d,w),w=r.mul(g,w),b=r.add(b,w),d=r.mul(A,b),y=r.add(y,d),d=r.mul(E,b),h=r.mul(m,h),h=r.sub(h,d),d=r.mul(m,A),f=r.mul(E,f),f=r.add(f,d),new l(h,y,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(l.ZERO)}wNAF(e){return f.wNAFCached(this,h,e,(e=>{const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}))}multiplyUnsafe(e){const i=l.ZERO;if(e===bh)return i;if(o(e),e===Eh)return this;const{endo:n}=t;if(!n)return f.unsafeLadder(this,e);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(e),u=i,y=i,g=this;for(;a>bh||h>bh;)a&Eh&&(u=u.add(g)),h&Eh&&(y=y.add(g)),g=g.double(),a>>=Eh,h>>=Eh;return s&&(u=u.negate()),c&&(y=y.negate()),y=new l(r.mul(y.px,n.beta),y.py,y.pz),u.add(y)}multiply(e){o(e);let i,n,s=e;const{endo:a}=t;if(a){const{k1neg:e,k1:t,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(t),{p:y,f:g}=this.wNAF(c);h=f.constTimeNegate(e,h),y=f.constTimeNegate(o,y),y=new l(r.mul(y.px,a.beta),y.py,y.pz),i=h.add(y),n=u.add(g)}else{const{p:e,f:t}=this.wNAF(s);i=e,n=t}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(e,t,r){const i=l.BASE,n=(e,t)=>t!==bh&&t!==Eh&&e.equals(i)?e.multiply(t):e.multiplyUnsafe(t),s=n(this,t).add(n(e,r));return s.is0()?void 0:s}toAffine(e){const{px:t,py:i,pz:n}=this,s=this.is0();null==e&&(e=s?r.ONE:r.inv(n));const a=r.mul(t,e),o=r.mul(i,e),c=r.mul(n,e);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:e,isTorsionFree:r}=t;if(e===Eh)return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:e,clearCofactor:r}=t;return e===Eh?this:r?r(l,this):this.multiplyUnsafe(t.h)}toRawBytes(e=!0){return this.assertValidity(),i(l,this,e)}toHex(e=!0){return Uc(this.toRawBytes(e))}}l.BASE=new l(t.Gx,t.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const y=t.nBitLength,f=ph(l,t.endo?Math.ceil(y/2):y);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function Bh(e){const t=function(e){const t=dh(e);return Yc(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}(e),{Fp:r,n:i}=t,n=r.BYTES+1,s=2*r.BYTES+1;function a(e){return ih(e,i)}function o(e){return ah(e,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=vh({...t,toBytes(e,t,i){const n=t.toAffine(),s=r.toBytes(n.x),a=Oc;return i?a(Uint8Array.from([t.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(e){const t=e.length,i=e[0],a=e.subarray(1);if(t!==n||2!==i&&3!==i){if(t===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${t} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const e=Lc(a);if(!(bh<(o=e)&&o<r.ORDER))throw Error("Point is not on curve");const t=u(e);let n;try{n=r.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("Point is not on curve"+t)}return!(1&~i)!==((n&Eh)===Eh)&&(n=r.neg(n)),{x:e,y:n}}var o}}),y=e=>Uc(Fc(e,t.nByteLength));function f(e){return e>i>>Eh}const g=(e,t,r)=>Lc(e.slice(t,r));class p{constructor(e,t,r){this.r=e,this.s=t,this.recovery=r,this.assertValidity()}static fromCompact(e){const r=t.nByteLength;return e=Hc("compactSignature",e,2*r),new p(g(e,0,r),g(e,r,2*r))}static fromDER(e){const{r:t,s:r}=mh.toSig(Hc("DER",e));return new p(t,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(e){return new p(this.r,this.s,e)}recoverPublicKey(e){const{r:i,s:n,recovery:s}=this,h=m(Hc("msgHash",e));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i+t.n:i;if(u>=r.ORDER)throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",f=c.fromHex(l+y(u)),g=o(u),p=a(-h*g),d=a(n*g),A=c.BASE.multiplyAndAddUnsafe(f,p,d);if(!A)throw Error("point at infinify");return A.assertValidity(),A}hasHighS(){return f(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(-this.s),this.recovery):this}toDERRawBytes(){return Tc(this.toDERHex())}toDERHex(){return mh.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return Tc(this.toCompactHex())}toCompactHex(){return y(this.r)+y(this.s)}}const d={isValidPrivateKey(e){try{return h(e),!0}catch(e){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const e=yh(t.n);return function(e,t,r=!1){const i=e.length,n=lh(t),s=yh(t);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=ih(r?Lc(e):_c(e),t-Wc)+Wc;return r?Nc(a,n):Fc(a,n)}(t.randomBytes(e),t.n)},precompute:(e=8,t=c.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)};function A(e){const t=Kc(e),r="string"==typeof e,i=(t||r)&&e.length;return t?i===n||i===s:r?i===2*n||i===2*s:e instanceof c}const w=t.bits2int||function(e){const r=Lc(e),i=8*e.length-t.nBitLength;return i>0?r>>BigInt(i):r},m=t.bits2int_modN||function(e){return a(w(e))},b=zc(t.nBitLength);function E(e){if("bigint"!=typeof e)throw Error("bigint expected");if(!(bh<=e&&e<b))throw Error("bigint expected < 2^"+t.nBitLength);return Fc(e,t.nByteLength)}function k(e,i,n=v){if(["recovered","canonical"].some((e=>e in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=t;let{lowS:y,prehash:g,extraEntropy:d}=n;null==y&&(y=!0),e=Hc("msgHash",e),g&&(e=Hc("prehashed msgHash",s(e)));const A=m(e),b=h(i),k=[E(b),E(A)];if(null!=d&&!1!==d){const e=!0===d?u(r.BYTES):d;k.push(Hc("extraEntropy",e))}const B=Oc(...k),I=A;return{seed:B,k2sig:function(e){const t=w(e);if(!l(t))return;const r=o(t),i=c.BASE.multiply(t).toAffine(),n=a(i.x);if(n===bh)return;const s=a(r*a(I+n*b));if(s===bh)return;let h=(i.x===n?0:2)|Number(i.y&Eh),u=s;return y&&f(s)&&(u=function(e){return f(e)?a(-e):e}(s),h^=1),new p(n,u,h)}}}const v={lowS:t.lowS,prehash:!1},B={lowS:t.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:t,getPublicKey:function(e,t=!0){return c.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(A(e))throw Error("first arg must be private key");if(!A(t))throw Error("second arg must be public key");return c.fromHex(t).multiply(h(e)).toRawBytes(r)},sign:function(e,r,i=v){const{seed:n,k2sig:s}=k(e,r,i),a=t;return jc(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(e,r,i,n=B){const s=e;if(r=Hc("msgHash",r),i=Hc("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,y;try{if("string"==typeof s||Kc(s))try{l=p.fromDER(s)}catch(e){if(!(e instanceof mh.Err))throw e;l=p.fromCompact(s)}else{if("object"!=typeof s||"bigint"!=typeof s.r||"bigint"!=typeof s.s)throw Error("PARSE");{const{r:e,s:t}=s;l=new p(e,t)}}y=c.fromHex(i)}catch(e){if("PARSE"===e.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=t.hash(r));const{r:f,s:g}=l,d=m(r),A=o(g),w=a(d*A),b=a(f*A),E=c.BASE.multiplyAndAddUnsafe(y,w,b)?.toAffine();return!!E&&a(E.x)===f},ProjectivePoint:c,Signature:p,utils:d}}
|
|
10
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Ih(e){return{hash:e,hmac:(t,...r)=>Bc(e,t,mc(...r)),randomBytes:kc}}function Sh(e,t){const r=t=>Bh({...e,...Ih(t)});return Object.freeze({...r(t),create:r})}BigInt(4);const Ch=(e,t,r)=>e&t^~e&r,Kh=(e,t,r)=>e&t^e&r^t&r;class Ph extends bc{constructor(e,t,r,i){super(),this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=yc(this.buffer)}update(e){hc(this);const{view:t,buffer:r,blockLen:i}=this,n=(e=wc(e)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(t,0),this.pos=0);else{const t=yc(e);for(;i<=n-s;s+=i)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){hc(this),uc(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;t[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let e=s;e<i;e++)t[e]=0;!function(e,t,r,i){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,i);const n=BigInt(32),s=BigInt(4294967295),a=Number(r>>n&s),o=Number(r&s),c=i?4:0,h=i?0:4;e.setUint32(t+c,a,i),e.setUint32(t+h,o,i)}(r,i-8,BigInt(8*this.length),n),this.process(r,0);const a=yc(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,h[e],n)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return e.length=i,e.pos=a,e.finished=n,e.destroyed=s,i%t&&e.buffer.set(r),e}}const Dh=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Uh=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),xh=/* @__PURE__ */new Uint32Array(64);class Qh extends Ph{constructor(){super(64,32,8,!1),this.A=0|Uh[0],this.B=0|Uh[1],this.C=0|Uh[2],this.D=0|Uh[3],this.E=0|Uh[4],this.F=0|Uh[5],this.G=0|Uh[6],this.H=0|Uh[7]}get(){const{A:e,B:t,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[e,t,r,i,n,s,a,o]}set(e,t,r,i,n,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)xh[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=xh[e-15],r=xh[e-2],i=fc(t,7)^fc(t,18)^t>>>3,n=fc(r,17)^fc(r,19)^r>>>10;xh[e]=n+xh[e-7]+i+xh[e-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let e=0;e<64;e++){const t=h+(fc(a,6)^fc(a,11)^fc(a,25))+Ch(a,o,c)+Dh[e]+xh[e]|0,u=(fc(r,2)^fc(r,13)^fc(r,22))+Kh(r,i,n)|0;h=c,c=o,o=a,a=s+t|0,s=n,n=i,i=r,r=t+u|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){xh.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class Rh extends Qh{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Mh=/* @__PURE__ */Ec((()=>new Qh)),Th=/* @__PURE__ */Ec((()=>new Rh)),Lh=uh(BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),_h=Sh({a:Lh.create(BigInt("-3")),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Lh,n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:BigInt(1),lowS:!1},Mh),Fh=/* @__PURE__ */BigInt(2**32-1),Nh=/* @__PURE__ */BigInt(32);function Hh(e,t=!1){return t?{h:Number(e&Fh),l:Number(e>>Nh&Fh)}:{h:0|Number(e>>Nh&Fh),l:0|Number(e&Fh)}}function Oh(e,t=!1){let r=new Uint32Array(e.length),i=new Uint32Array(e.length);for(let n=0;n<e.length;n++){const{h:s,l:a}=Hh(e[n],t);[r[n],i[n]]=[s,a]}return[r,i]}const zh=(e,t,r)=>e<<r|t>>>32-r,Gh=(e,t,r)=>t<<r|e>>>32-r,qh=(e,t,r)=>t<<r-32|e>>>64-r,jh=(e,t,r)=>e<<r-32|t>>>64-r;const Vh={fromBig:Hh,split:Oh,toBig:(e,t)=>BigInt(e>>>0)<<Nh|BigInt(t>>>0),shrSH:(e,t,r)=>e>>>r,shrSL:(e,t,r)=>e<<32-r|t>>>r,rotrSH:(e,t,r)=>e>>>r|t<<32-r,rotrSL:(e,t,r)=>e<<32-r|t>>>r,rotrBH:(e,t,r)=>e<<64-r|t>>>r-32,rotrBL:(e,t,r)=>e>>>r-32|t<<64-r,rotr32H:(e,t)=>t,rotr32L:(e,t)=>e,rotlSH:zh,rotlSL:Gh,rotlBH:qh,rotlBL:jh,add:function(e,t,r,i){const n=(t>>>0)+(i>>>0);return{h:e+r+(n/2**32|0)|0,l:0|n}},add3L:(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),add3H:(e,t,r,i)=>t+r+i+(e/2**32|0)|0,add4L:(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),add4H:(e,t,r,i,n)=>t+r+i+n+(e/2**32|0)|0,add5H:(e,t,r,i,n,s)=>t+r+i+n+s+(e/2**32|0)|0,add5L:(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0)},[Yh,Zh]=/* @__PURE__ */(()=>Vh.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),Jh=/* @__PURE__ */new Uint32Array(80),Wh=/* @__PURE__ */new Uint32Array(80);class $h extends Ph{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:y,Gl:f,Hh:g,Hl:p}=this;return[e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p]}set(e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|y,this.Gl=0|f,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)Jh[r]=e.getUint32(t),Wh[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|Jh[e-15],r=0|Wh[e-15],i=Vh.rotrSH(t,r,1)^Vh.rotrSH(t,r,8)^Vh.shrSH(t,r,7),n=Vh.rotrSL(t,r,1)^Vh.rotrSL(t,r,8)^Vh.shrSL(t,r,7),s=0|Jh[e-2],a=0|Wh[e-2],o=Vh.rotrSH(s,a,19)^Vh.rotrBH(s,a,61)^Vh.shrSH(s,a,6),c=Vh.rotrSL(s,a,19)^Vh.rotrBL(s,a,61)^Vh.shrSL(s,a,6),h=Vh.add4L(n,c,Wh[e-7],Wh[e-16]),u=Vh.add4H(h,i,o,Jh[e-7],Jh[e-16]);Jh[e]=0|u,Wh[e]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:y,Fl:f,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=Vh.rotrSH(u,l,14)^Vh.rotrSH(u,l,18)^Vh.rotrBH(u,l,41),w=Vh.rotrSL(u,l,14)^Vh.rotrSL(u,l,18)^Vh.rotrBL(u,l,41),m=u&y^~u&g,b=l&f^~l&p,E=Vh.add5L(A,w,b,Zh[e],Wh[e]),k=Vh.add5H(E,d,t,m,Yh[e],Jh[e]),v=0|E,B=Vh.rotrSH(r,i,28)^Vh.rotrBH(r,i,34)^Vh.rotrBH(r,i,39),I=Vh.rotrSL(r,i,28)^Vh.rotrBL(r,i,34)^Vh.rotrBL(r,i,39),S=r&n^r&a^n&a,C=i&s^i&o^s&o;d=0|g,A=0|p,g=0|y,p=0|f,y=0|u,f=0|l,({h:u,l}=Vh.add(0|c,0|h,0|k,0|v)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=Vh.add3L(v,I,C);r=Vh.add3H(K,k,B,S),i=0|K}({h:r,l:i}=Vh.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=Vh.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=Vh.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=Vh.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=Vh.add(0|this.Eh,0|this.El,0|u,0|l)),({h:y,l:f}=Vh.add(0|this.Fh,0|this.Fl,0|y,0|f)),({h:g,l:p}=Vh.add(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=Vh.add(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,i,n,s,a,o,c,h,u,l,y,f,g,p,d,A)}roundClean(){Jh.fill(0),Wh.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Xh extends $h{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const eu=/* @__PURE__ */Ec((()=>new $h)),tu=/* @__PURE__ */Ec((()=>new Xh)),ru=uh(BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),iu=Sh({a:ru.create(BigInt("-3")),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:ru,n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:BigInt(1),lowS:!1},tu),nu=uh(BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),su={a:nu.create(BigInt("-3")),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:nu,n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:BigInt(1)},au=Sh({a:su.a,b:su.b,Fp:nu,n:su.n,Gx:su.Gx,Gy:su.Gy,h:su.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},eu),ou=[],cu=[],hu=[],uu=/* @__PURE__ */BigInt(0),lu=/* @__PURE__ */BigInt(1),yu=/* @__PURE__ */BigInt(2),fu=/* @__PURE__ */BigInt(7),gu=/* @__PURE__ */BigInt(256),pu=/* @__PURE__ */BigInt(113);for(let e=0,t=lu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],ou.push(2*(5*i+r)),cu.push((e+1)*(e+2)/2%64);let n=uu;for(let e=0;e<7;e++)t=(t<<lu^(t>>fu)*pu)%gu,t&yu&&(n^=lu<<(lu<</* @__PURE__ */BigInt(e))-lu);hu.push(n)}const[du,Au]=/* @__PURE__ */Oh(hu,!0),wu=(e,t,r)=>r>32?qh(e,t,r):zh(e,t,r),mu=(e,t,r)=>r>32?jh(e,t,r):Gh(e,t,r);class bu extends bc{constructor(e,t,r,i=!1,n=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,oc(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){pc||dc(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const i=(t+8)%10,n=(t+2)%10,s=r[n],a=r[n+1],o=wu(s,a,1)^r[i],c=mu(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],n=e[3];for(let r=0;r<24;r++){const i=cu[r],s=wu(t,n,i),a=mu(t,n,i),o=ou[r];t=e[o],n=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let i=0;i<10;i++)r[i]=e[t+i];for(let i=0;i<10;i++)e[t+i]^=~r[(i+2)%10]&r[(i+4)%10]}e[0]^=du[i],e[1]^=Au[i]}r.fill(0)}(this.state32,this.rounds),pc||dc(this.state32),this.posOut=0,this.pos=0}update(e){hc(this);const{blockLen:t,state:r}=this,i=(e=wc(e)).length;for(let n=0;n<i;){const s=Math.min(t-this.pos,i-n);for(let t=0;t<s;t++)r[this.pos++]^=e[n++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:i}=this;e[r]^=t,128&t&&r===i-1&&this.keccak(),e[i-1]^=128,this.keccak()}writeInto(e){hc(this,!1),cc(e),this.finish();const t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return oc(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(uc(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return e||(e=new bu(t,r,i,s,n)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=s,e.destroyed=this.destroyed,e}}const Eu=(e,t,r)=>Ec((()=>new bu(t,e,r))),ku=/* @__PURE__ */Eu(6,136,32),vu=/* @__PURE__ */Eu(6,72,64),Bu=/* @__PURE__ */((e,t,r)=>function(e){const t=(t,r)=>e(r).update(wc(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((i={})=>new bu(t,e,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),Iu=BigInt(0),Su=BigInt(1),Cu=BigInt(2),Ku=BigInt(8),Pu={zip215:!0};function Du(e){const t=function(e){const t=dh(e);return Yc(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}(e),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=t,h=Cu<<BigInt(8*o)-Su,u=r.create,l=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:r.sqrt(e*r.inv(t))}}catch(e){return{isValid:!1,value:Iu}}}),y=t.adjustScalarBytes||(e=>e),f=t.domain||((e,t,r)=>{if(t.length||r)throw Error("Contexts/pre-hash are not supported");return e}),g=e=>"bigint"==typeof e&&Iu<e,p=(e,t)=>g(e)&&g(t)&&e<t,d=e=>e===Iu||p(e,h);function A(e,t){if(p(e,t))return e;throw Error(`Expected valid scalar < ${t}, got ${typeof e} ${e}`)}function w(e){return e===Iu?e:A(e,i)}const m=new Map;function b(e){if(!(e instanceof E))throw Error("ExtendedPoint expected")}class E{constructor(e,t,r,i){if(this.ex=e,this.ey=t,this.ez=r,this.et=i,!d(e))throw Error("x required");if(!d(t))throw Error("y required");if(!d(r))throw Error("z required");if(!d(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(e){if(e instanceof E)throw Error("extended point not allowed");const{x:t,y:r}=e||{};if(!d(t)||!d(r))throw Error("invalid affine point");return new E(t,r,Su,u(t*r))}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.ez)));return e.map(((e,r)=>e.toAffine(t[r]))).map(E.fromAffine)}_setWindowSize(e){this._WINDOW_SIZE=e,m.delete(this)}assertValidity(){const{a:e,d:r}=t;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i*i),c=u(n*n),h=u(s*s),l=u(h*h),y=u(o*e);if(u(h*u(y+c))!==u(l+u(r*u(o*c))))throw Error("bad point: equation left != right (1)");if(u(i*n)!==u(s*a))throw Error("bad point: equation left != right (2)")}equals(e){b(e);const{ex:t,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=e,o=u(t*a),c=u(n*i),h=u(r*a),l=u(s*i);return o===c&&h===l}is0(){return this.equals(E.ZERO)}negate(){return new E(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){const{a:e}=t,{ex:r,ey:i,ez:n}=this,s=u(r*r),a=u(i*i),o=u(Cu*u(n*n)),c=u(e*s),h=r+i,l=u(u(h*h)-s-a),y=c+a,f=y-o,g=c-a,p=u(l*f),d=u(y*g),A=u(l*g),w=u(f*y);return new E(p,d,w,A)}add(e){b(e);const{a:r,d:i}=t,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:y}=e;if(r===BigInt(-1)){const e=u((s-n)*(h+c)),t=u((s+n)*(h-c)),r=u(t-e);if(r===Iu)return this.double();const i=u(a*Cu*y),f=u(o*Cu*l),g=f+i,p=t+e,d=f-i,A=u(g*r),w=u(p*d),m=u(g*d),b=u(r*p);return new E(A,w,b,m)}const f=u(n*c),g=u(s*h),p=u(o*i*y),d=u(a*l),A=u((n+s)*(c+h)-f-g),w=d-p,m=d+p,k=u(g-r*f),v=u(A*w),B=u(m*k),I=u(A*k),S=u(w*m);return new E(v,B,S,I)}subtract(e){return this.add(e.negate())}wNAF(e){return B.wNAFCached(this,m,e,E.normalizeZ)}multiply(e){const{p:t,f:r}=this.wNAF(A(e,i));return E.normalizeZ([t,r])[0]}multiplyUnsafe(e){let t=w(e);return t===Iu?v:this.equals(v)||t===Su?this:this.equals(k)?this.wNAF(t).p:B.unsafeLadder(this,t)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return B.unsafeLadder(this,i).is0()}toAffine(e){const{ex:t,ey:i,ez:n}=this,s=this.is0();null==e&&(e=s?Ku:r.inv(n));const a=u(t*e),o=u(i*e),c=u(n*e);if(s)return{x:Iu,y:Su};if(c!==Su)throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:e}=t;return e===Su?this:this.multiplyUnsafe(e)}static fromHex(e,i=!1){const{d:n,a:s}=t,a=r.BYTES,o=(e=Hc("pointHex",e,a)).slice(),c=e[a-1];o[a-1]=-129&c;const y=_c(o);y===Iu||A(y,i?h:r.ORDER);const f=u(y*y),g=u(f-Su),p=u(n*f-s);let{isValid:d,value:w}=l(g,p);if(!d)throw Error("Point.fromHex: invalid y coordinate");const m=(w&Su)===Su,b=!!(128&c);if(!i&&w===Iu&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==m&&(w=u(-w)),E.fromAffine({x:w,y})}static fromPrivateKey(e){return C(e).point}toRawBytes(){const{x:e,y:t}=this.toAffine(),i=Nc(t,r.BYTES);return i[i.length-1]|=e&Su?128:0,i}toHex(){return Uc(this.toRawBytes())}}E.BASE=new E(t.Gx,t.Gy,Su,u(t.Gx*t.Gy)),E.ZERO=new E(Iu,Su,Su,Iu);const{BASE:k,ZERO:v}=E,B=ph(E,8*o);function I(e){return ih(e,i)}function S(e){return I(_c(e))}function C(e){const t=o;e=Hc("private key",e,t);const r=Hc("hashed private key",s(e),2*t),i=y(r.slice(0,t)),n=r.slice(t,2*t),a=S(i),c=k.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(e=new Uint8Array,...t){const r=Oc(...t);return S(s(f(r,Hc("context",e),!!n)))}const P=Pu;k._setWindowSize(8);return{CURVE:t,getPublicKey:function(e){return C(e).pointBytes},sign:function(e,t,i={}){e=Hc("message",e),n&&(e=n(e));const{prefix:s,scalar:a,pointBytes:c}=C(t),h=K(i.context,s,e),u=k.multiply(h).toRawBytes(),l=I(h+K(i.context,u,c,e)*a);return w(l),Hc("result",Oc(u,Nc(l,r.BYTES)),2*o)},verify:function(e,t,i,s=P){const{context:a,zip215:o}=s,c=r.BYTES;e=Hc("signature",e,2*c),t=Hc("message",t),n&&(t=n(t));const h=_c(e.slice(c,2*c));let u,l,y;try{u=E.fromHex(i,o),l=E.fromHex(e.slice(0,c),o),y=k.multiplyUnsafe(h)}catch(e){return!1}if(!o&&u.isSmallOrder())return!1;const f=K(a,l.toRawBytes(),u.toRawBytes(),t);return l.add(u.multiplyUnsafe(f)).subtract(y).clearCofactor().equals(E.ZERO)},ExtendedPoint:E,utils:{getExtendedPublicKey:C,randomPrivateKey:()=>a(r.BYTES),precompute:(e=8,t=E.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)}}}
|
|
11
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Uu=BigInt(0),xu=BigInt(1);function Qu(e){const t=(Yc(r=e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...r}));var r;const{P:i}=t,n=e=>ih(e,i),s=t.montgomeryBits,a=Math.ceil(s/8),o=t.nByteLength,c=t.adjustScalarBytes||(e=>e),h=t.powPminus2||(e=>nh(e,i-BigInt(2),i));function u(e,t,r){const i=n(e*(t-r));return[t=n(t-i),r=n(r+i)]}function l(e){if("bigint"==typeof e&&Uu<=e&&e<i)return e;throw Error("Expected valid scalar 0 < scalar < CURVE.P")}const y=(t.a-BigInt(2))/BigInt(4);function f(e){return Nc(n(e),a)}function g(e,t){const r=function(e){const t=Hc("u coordinate",e,a);return 32===o&&(t[31]&=127),_c(t)}(t),i=function(e){const t=Hc("scalar",e),r=t.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return _c(c(t))}(e),g=function(e,t){const r=l(e),i=l(t),a=r;let o,c=xu,f=Uu,g=r,p=xu,d=Uu;for(let e=BigInt(s-1);e>=Uu;e--){const t=i>>e&xu;d^=t,o=u(d,c,g),c=o[0],g=o[1],o=u(d,f,p),f=o[0],p=o[1],d=t;const r=c+f,s=n(r*r),h=c-f,l=n(h*h),A=s-l,w=g+p,m=n((g-p)*r),b=n(w*h),E=m+b,k=m-b;g=n(E*E),p=n(a*n(k*k)),c=n(s*l),f=n(A*(s+n(y*A)))}o=u(d,c,g),c=o[0],g=o[1],o=u(d,f,p),f=o[0],p=o[1];const A=h(f);return n(c*A)}(r,i);if(g===Uu)throw Error("Invalid private or public key received");return f(g)}const p=f(t.Gu);function d(e){return g(e,p)}return{scalarMult:g,scalarMultBase:d,getSharedSecret:(e,t)=>g(e,t),getPublicKey:e=>d(e),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:p}}
|
|
12
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Ru=Ec((()=>Bu.create({dkLen:114}))),Mu=(Ec((()=>Bu.create({dkLen:64}))),BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439")),Tu=BigInt(1),Lu=BigInt(2),_u=BigInt(3);BigInt(4);const Fu=BigInt(11),Nu=BigInt(22),Hu=BigInt(44),Ou=BigInt(88),zu=BigInt(223);function Gu(e){const t=Mu,r=e*e*e%t,i=r*r*e%t,n=sh(i,_u,t)*i%t,s=sh(n,_u,t)*i%t,a=sh(s,Lu,t)*r%t,o=sh(a,Fu,t)*a%t,c=sh(o,Nu,t)*o%t,h=sh(c,Hu,t)*c%t,u=sh(h,Ou,t)*h%t,l=sh(u,Hu,t)*c%t,y=sh(l,Lu,t)*r%t,f=sh(y,Tu,t)*e%t;return sh(f,zu,t)*y%t}function qu(e){return e[0]&=252,e[55]|=128,e[56]=0,e}const ju=uh(Mu,456,!0),Vu={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:ju,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Ru,randomBytes:kc,adjustScalarBytes:qu,domain:(e,t,r)=>{if(t.length>255)throw Error("Context is too big: "+t.length);return mc(Ac("SigEd448"),new Uint8Array([r?1:0,t.length]),t,e)},uvRatio:function(e,t){const r=Mu,i=ih(e*e*t,r),n=ih(i*e,r),s=ih(n*i*t,r),a=ih(n*Gu(s),r),o=ih(a*a,r);return{isValid:ih(o*t,r)===e,value:a}}},Yu=/* @__PURE__ */Du(Vu),Zu=/* @__PURE__ */(()=>Qu({a:BigInt(156326),montgomeryBits:448,nByteLength:56,P:Mu,Gu:BigInt(5),powPminus2:e=>{const t=Mu;return ih(sh(Gu(e),BigInt(2),t)*e,t)},adjustScalarBytes:qu,randomBytes:kc}))();ju.ORDER,BigInt(3),BigInt(4),BigInt(156326),BigInt("39082"),BigInt("78163"),BigInt("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),BigInt("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716"),BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
|
|
12
13
|
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
|
|
13
|
-
const iu=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),nu=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),su=BigInt(1),au=BigInt(2),ou=(e,t)=>(e+t/au)/t;const cu=Ac(iu,void 0,void 0,{sqrt:function(e){const t=iu,r=BigInt(3),i=BigInt(6),n=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),h=e*e*e%t,u=h*h*e%t,l=yc(u,r,t)*u%t,y=yc(l,r,t)*u%t,f=yc(y,au,t)*h%t,g=yc(f,n,t)*f%t,p=yc(g,s,t)*g%t,d=yc(p,o,t)*p%t,A=yc(d,c,t)*d%t,w=yc(A,o,t)*p%t,m=yc(w,r,t)*u%t,b=yc(m,a,t)*g%t,E=yc(b,i,t)*h%t,k=yc(E,au,t);if(!cu.eql(cu.sqr(k),e))throw Error("Cannot find square root");return k}}),hu=Qc({a:BigInt(0),b:BigInt(7),Fp:cu,n:nu,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{const t=nu,r=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),i=-su*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),n=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=BigInt("0x100000000000000000000000000000000"),o=ou(s*e,t),c=ou(-i*e,t);let h=uc(e-o*r-c*n,t),u=uc(-o*i-c*s,t);const l=h>a,y=u>a;if(l&&(h=t-h),y&&(u=t-u),h>a||u>a)throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:l,k1:h,k2neg:y,k2:u}}}},Oc);BigInt(0),hu.ProjectivePoint;const uu=Ac(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),lu=Qc({a:uu.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:uu,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Oc),yu=Ac(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),fu=Qc({a:yu.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:yu,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},ch),gu=Ac(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),pu=Qc({a:gu.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:gu,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},oh),du=new Map(Object.entries({nistP256:jc,nistP384:uh,nistP521:fh,brainpoolP256r1:lu,brainpoolP384r1:fu,brainpoolP512r1:pu,secp256k1:hu,x448:ru,ed448:tu}));var Au=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:du});function wu(e,t,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],y=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],f=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,E,k,v,I=0,B=t.length;const S=32===e.length?3:9;E=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e,t){const r=8-e.length%8;let i;if(!(r<8)){if(8===r)return e;throw Error("des: invalid padding")}i=0;const n=new Uint8Array(e.length+r);for(let t=0;t<e.length;t++)n[t]=e[t];for(let t=0;t<r;t++)n[e.length+t]=i;return n}(t),B=t.length);let C=new Uint8Array(B),K=0;for(;I<B;){for(m=t[I++]<<24|t[I++]<<16|t[I++]<<8|t[I++],b=t[I++]<<24|t[I++]<<16|t[I++]<<8|t[I++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(k=E[p+1],v=E[p+2],g=E[p];g!==k;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|h[A>>>16&63]|l[A>>>8&63]|f[63&A]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|y[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,C[K++]=m>>>24,C[K++]=m>>>16&255,C[K++]=m>>>8&255,C[K++]=255&m,C[K++]=b>>>24,C[K++]=b>>>16&255,C[K++]=b>>>8&255,C[K++]=255&b}return r||(C=function(e,t){let r,i=null;if(r=0,!i){for(i=1;e[e.length-i]===r;)i++;i--}return e.subarray(0,e.length-i)}(C)),C}function mu(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],y=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],f=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,E=0,k=0;for(let v=0;v<p;v++){let p=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++],v=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|h[v>>>24&15]|u[v>>>20&15]|l[v>>>16&15]|y[v>>>12&15]|f[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[k++]=w^b,d[k++]=m^b<<16}return d}function bu(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return wu(mu(this.key[2]),wu(mu(this.key[1]),wu(mu(this.key[0]),e,!0),!1),!0)}}function Eu(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const i=t+e,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(e,t,r){const i=t^e,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(e,t,r){const i=t-e,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let e=0;e<4;e++)a=4*e,i[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=i[t[1]],c^=s[4][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][i[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][i[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][i[t[6]>>>2]>>>24-8*(3&t[6])&255],i[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][i[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][i[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][i[e[4]>>>2]>>>24-8*(3&e[4])&255],n[h]=c,h++}}for(let e=0;e<16;e++)this.masking[e]=n[e],this.rotate[e]=31&n[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function ku(e){this.cast5=new Eu,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}bu.keySize=bu.prototype.keySize=24,bu.blockSize=bu.prototype.blockSize=8,ku.blockSize=ku.prototype.blockSize=8,ku.keySize=ku.prototype.keySize=16;const vu=4294967295;function Iu(e,t){return(e<<t|e>>>32-t)&vu}function Bu(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Su(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function Cu(e,t){return e>>>8*t&255}function Ku(e){this.tf=function(){let e=null,t=null,r=-1,i=[],n=[[],[],[],[]];function s(e){return n[0][Cu(e,0)]^n[1][Cu(e,1)]^n[2][Cu(e,2)]^n[3][Cu(e,3)]}function a(e){return n[0][Cu(e,3)]^n[1][Cu(e,0)]^n[2][Cu(e,1)]^n[3][Cu(e,2)]}function o(e,t){let r=s(t[0]),n=a(t[1]);t[2]=Iu(t[2]^r+n+i[4*e+8]&vu,31),t[3]=Iu(t[3],1)^r+2*n+i[4*e+9]&vu,r=s(t[2]),n=a(t[3]),t[0]=Iu(t[0]^r+n+i[4*e+10]&vu,31),t[1]=Iu(t[1],1)^r+2*n+i[4*e+11]&vu}function c(e,t){let r=s(t[0]),n=a(t[1]);t[2]=Iu(t[2],1)^r+n+i[4*e+10]&vu,t[3]=Iu(t[3]^r+2*n+i[4*e+11]&vu,31),r=s(t[2]),n=a(t[3]),t[0]=Iu(t[0],1)^r+n+i[4*e+8]&vu,t[1]=Iu(t[1]^r+2*n+i[4*e+9]&vu,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const h=[],u=[],l=[];let y;const f=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],E=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],k=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],I=[[],[],[],[]];function B(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function C(e,t){let r,i,n;for(r=0;r<8;r++)i=t>>>24,t=t<<8&vu|e>>>24,e=e<<8&vu,n=i<<1,128&i&&(n^=333),t^=i^n<<16,n^=i>>>1,1&i&&(n^=166),t^=n<<24|n<<8;return t}function K(e,t){const r=t>>4,i=15&t,n=A[e][r^i],s=w[e][E[i]^k[r]];return b[e][E[s]^k[n]]<<4|m[e][n^s]}function D(e,t){let r=Cu(e,0),i=Cu(e,1),n=Cu(e,2),s=Cu(e,3);switch(y){case 4:r=v[1][r]^Cu(t[3],0),i=v[0][i]^Cu(t[3],1),n=v[0][n]^Cu(t[3],2),s=v[1][s]^Cu(t[3],3);case 3:r=v[1][r]^Cu(t[2],0),i=v[1][i]^Cu(t[2],1),n=v[0][n]^Cu(t[2],2),s=v[0][s]^Cu(t[2],3);case 2:r=v[0][v[0][r]^Cu(t[1],0)]^Cu(t[0],0),i=v[0][v[1][i]^Cu(t[1],1)]^Cu(t[0],1),n=v[1][v[0][n]^Cu(t[1],2)]^Cu(t[0],2),s=v[1][v[1][s]^Cu(t[1],3)]^Cu(t[0],3)}return I[0][r]^I[1][i]^I[2][n]^I[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=Bu(e,r);for(r=0;r<256;r++)v[0][r]=K(0,r),v[1][r]=K(1,r);for(r=0;r<256;r++)g=v[1][r],p=B(g),d=S(g),I[0][r]=g+(p<<8)+(d<<16)+(d<<24),I[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=B(g),d=S(g),I[1][r]=d+(d<<8)+(p<<16)+(g<<24),I[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(y=l.length/2,r=0;r<y;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,f[y-r-1]=C(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=D(s,h),a=Iu(D(a,u),8),i[r]=s+a&vu,i[r+1]=Iu(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,y){case 4:s=v[1][s]^Cu(f[3],0),a=v[0][a]^Cu(f[3],1),o=v[0][o]^Cu(f[3],2),c=v[1][c]^Cu(f[3],3);case 3:s=v[1][s]^Cu(f[2],0),a=v[1][a]^Cu(f[2],1),o=v[0][o]^Cu(f[2],2),c=v[0][c]^Cu(f[2],3);case 2:n[0][r]=I[0][v[0][v[0][s]^Cu(f[1],0)]^Cu(f[0],0)],n[1][r]=I[1][v[0][v[1][a]^Cu(f[1],1)]^Cu(f[0],1)],n[2][r]=I[2][v[1][v[0][o]^Cu(f[1],2)]^Cu(f[0],2)],n[3][r]=I[3][v[1][v[1][c]^Cu(f[1],3)]^Cu(f[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(e,n){t=e,r=n;const s=[Bu(t,r)^i[0],Bu(t,r+4)^i[1],Bu(t,r+8)^i[2],Bu(t,r+12)^i[3]];for(let e=0;e<8;e++)o(e,s);return Su(t,r,s[2]^i[4]),Su(t,r+4,s[3]^i[5]),Su(t,r+8,s[0]^i[6]),Su(t,r+12,s[1]^i[7]),r+=16,t},decrypt:function(e,n){t=e,r=n;const s=[Bu(t,r)^i[4],Bu(t,r+4)^i[5],Bu(t,r+8)^i[6],Bu(t,r+12)^i[7]];for(let e=7;e>=0;e--)c(e,s);Su(t,r,s[2]^i[0]),Su(t,r+4,s[3]^i[1]),Su(t,r+8,s[0]^i[2]),Su(t,r+12,s[1]^i[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function Du(){}function Pu(e){this.bf=new Du,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}Ku.keySize=Ku.prototype.keySize=32,Ku.blockSize=Ku.prototype.blockSize=16,Du.prototype.BLOCKSIZE=8,Du.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],Du.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],Du.prototype.NN=16,Du.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},Du.prototype._F=function(e){let t;const r=255&e,i=255&(e>>>=8),n=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][n],t^=this.sboxes[2][i],t+=this.sboxes[3][r],t},Du.prototype._encryptBlock=function(e){let t,r=e[0],i=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],e[0]=this._clean(i),e[1]=this._clean(r)},Du.prototype.encryptBlock=function(e){let t;const r=[0,0],i=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+i];this._encryptBlock(r);const n=[];for(t=0;t<this.BLOCKSIZE/2;++t)n[t+0]=r[0]>>>24-8*t&255,n[t+i]=r[1]>>>24-8*t&255;return n},Du.prototype._decryptBlock=function(e){let t,r=e[0],i=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[1],i^=this.parray[0],e[0]=this._clean(i),e[1]=this._clean(r)},Du.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let i=0;for(let t=0;t<4;++t)i=i<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^i}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const i=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(i),this.parray[t+0]=i[0],this.parray[t+1]=i[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[t][r+0]=i[0],this.sboxes[t][r+1]=i[1]},Pu.keySize=Pu.prototype.keySize=16,Pu.blockSize=Pu.prototype.blockSize=8;const Uu=new Map([[L.symmetric.tripledes,bu],[L.symmetric.cast5,ku],[L.symmetric.blowfish,Pu],[L.symmetric.twofish,Ku]]);var xu=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Uu});const Qu=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),Ru=/* @__PURE__ */new Uint32Array(80);class Mu extends Tc{constructor(){super(64,20,8,!1),this.A=0|Qu[0],this.B=0|Qu[1],this.C=0|Qu[2],this.D=0|Qu[3],this.E=0|Qu[4]}get(){const{A:e,B:t,C:r,D:i,E:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Ru[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)Ru[e]=Eo(Ru[e-3]^Ru[e-8]^Ru[e-14]^Ru[e-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=Rc(i,n,s),o=1518500249):e<40?(t=i^n^s,o=1859775393):e<60?(t=Mc(i,n,s),o=2400959708):(t=i^n^s,o=3395469782);const c=Eo(r,5)+t+a+o+Ru[e]|0;a=s,s=n,n=Eo(i,30),i=r,r=c}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){Ru.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Tu=/* @__PURE__ */Ko((()=>new Mu)),Lu=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),_u=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((e,t)=>t))),Nu=/* @__PURE__ */_u.map((e=>(9*e+5)%16));let Fu=[_u],Hu=[Nu];for(let e=0;e<4;e++)for(let t of[Fu,Hu])t.push(t[e].map((e=>Lu[e])));const Ou=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>new Uint8Array(e))),zu=/* @__PURE__ */Fu.map(((e,t)=>e.map((e=>Ou[t][e])))),Gu=/* @__PURE__ */Hu.map(((e,t)=>e.map((e=>Ou[t][e])))),ju=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),qu=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]);function Vu(e,t,r,i){return 0===e?t^r^i:1===e?t&r|~t&i:2===e?(t|~r)^i:3===e?t&i|r&~i:t^(r|~i)}const Yu=/* @__PURE__ */new Uint32Array(16);class Ju extends Tc{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:i,h4:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Yu[r]=e.getUint32(t,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let e=0;e<5;e++){const t=4-e,y=ju[e],f=qu[e],g=Fu[e],p=Hu[e],d=zu[e],A=Gu[e];for(let t=0;t<16;t++){const i=Eo(r+Vu(e,n,a,c)+Yu[g[t]]+y,d[t])+u|0;r=u,u=c,c=0|Eo(a,10),a=n,n=i}for(let e=0;e<16;e++){const r=Eo(i+Vu(t,s,o,h)+Yu[p[e]]+f,A[e])+l|0;i=l,l=h,h=0|Eo(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){Yu.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const Wu=new Map(Object.entries({sha1:Tu,sha224:zc,sha256:Oc,sha384:ch,sha512:oh,sha3_256:Dh,sha3_512:Ph,ripemd160:/* @__PURE__ */Ko((()=>new Ju))}));var Zu=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Wu});function $u(e,t,r,i){e[t]+=r[i],e[t+1]+=r[i+1]+(e[t]<r[i])}function Xu(e,t){e[0]+=t,e[1]+=e[0]<t}function el(e,t,r,i,n,s,a,o){$u(e,r,e,i),$u(e,r,t,a);let c=e[s]^e[r],h=e[s+1]^e[r+1];e[s]=h,e[s+1]=c,$u(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=c>>>24^h<<8,e[i+1]=h>>>24^c<<8,$u(e,r,e,i),$u(e,r,t,o),c=e[s]^e[r],h=e[s+1]^e[r+1],e[s]=c>>>16^h<<16,e[s+1]=h>>>16^c<<16,$u(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=h>>>31^c<<1,e[i+1]=c>>>31^h<<1}const tl=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),rl=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function il(e,t){const r=new Uint32Array(32),i=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=tl[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const n=t?4294967295:0;r[28]^=n,r[29]^=n;for(let e=0;e<12;e++){const t=e<<4;el(r,i,0,8,16,24,rl[t+0],rl[t+1]),el(r,i,2,10,18,26,rl[t+2],rl[t+3]),el(r,i,4,12,20,28,rl[t+4],rl[t+5]),el(r,i,6,14,22,30,rl[t+6],rl[t+7]),el(r,i,0,10,20,30,rl[t+8],rl[t+9]),el(r,i,2,12,22,24,rl[t+10],rl[t+11]),el(r,i,4,14,16,26,rl[t+12],rl[t+13]),el(r,i,6,8,18,28,rl[t+14],rl[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class nl{constructor(e,t,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(ol),h:new Uint32Array(al/4),t0:new Uint32Array(2),c:0,outlen:e},n[0]=e,t&&(n[1]=t.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=tl[e]^s[e];if(t){const e=new Uint8Array(ol);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===ol&&(Xu(this.S.t0,this.S.c),il(this.S,!1),this.S.c=0);let r=ol-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const i=Math.min(r,e.length-t);this.S.c+=i,t+=i}return this}digest(e){Xu(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=ol,il(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function sl(e,t,r,i){if(e>al)throw Error(`outlen must be at most ${al} (given: ${e})`);return new nl(e,t,r,i)}const al=64,ol=128,cl=2,hl=19,ul=4294967295,ll=4,yl=4294967295,fl=8,gl=4294967295,pl=8,dl=4294967295,Al=4294967295,wl=32,ml=1024,bl=64,El=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function kl(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function vl(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=t;for(let t=r;t<r+7;t++)e[t]=i,i=(i-e[t])/256;return e}function Il(e,t,r){const i=new Uint8Array(64),n=new Uint8Array(4+t.length);if(kl(n,e,0),n.set(t,4),e<=64)return sl(e).update(n).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)sl(64).update(0===e?n:i).digest(i),r.set(i.subarray(0,32),32*e);const a=new Uint8Array(sl(e-32*s).update(i).digest());return r.set(a,32*s),r}function Bl(e,t,r,i){return e.fn.XOR(t.byteOffset,r.byteOffset,i.byteOffset),t}function Sl(e,t,r,i){return e.fn.G(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function Cl(e,t,r,i){return e.fn.G2(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function*Kl(e,t,r,i,n,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);vl(c,t,0),vl(c,r,8),vl(c,i,16),vl(c,n,24),vl(c,s,32),vl(c,cl,40);for(let t=1;t<=a;t++){vl(e.refs.prngTmp,t,c.length);const r=Cl(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}const Dl=1024,Pl=64*Dl;function Ul(e,{memory:t,instance:r}){if(!El)throw Error("BigEndian system not supported");const i=function({type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(e,t,r,i)=>{if(t<r||t>i)throw Error(`${e} size should be between ${r} and ${i} bytes`)};if(e!==cl||t!==hl)throw Error("Unsupported type or version");return u("password",i,pl,gl),u("salt",n,fl,yl),u("tag",r,ll,ul),u("memory",c,8*o,dl),s&&u("associated data",s,0,Al),a&&u("secret",a,0,wl),{type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:cl,version:hl,...e}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*ml+10*Dl;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/Pl);t.grow(e)}let y=0;c.gZ=new Uint8Array(t.buffer,y,ml),y+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,y,ml),y+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,y,ml),y+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,y,1024),y+=c.ZERO1024.length;const f=new Uint32Array(t.buffer,y,2);y+=f.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:h,refs:c},p=new Uint8Array(t.buffer,y,ml);y+=p.length;const d=new Uint8Array(t.buffer,y,i.memorySize*ml),A=new Uint8Array(t.buffer,0,y),w=function(e){const t=sl(bl),r=new Uint8Array(4),i=new Uint8Array(24);kl(i,e.lanes,0),kl(i,e.tagLength,4),kl(i,e.memorySize,8),kl(i,e.passes,12),kl(i,e.version,16),kl(i,e.type,20);const n=[i];e.password?(n.push(kl(new Uint8Array(4),e.password.length,0)),n.push(e.password)):n.push(r);e.salt?(n.push(kl(new Uint8Array(4),e.salt.length,0)),n.push(e.salt)):n.push(r);e.secret?(n.push(kl(new Uint8Array(4),e.secret.length,0)),n.push(e.secret)):n.push(r);e.ad?(n.push(kl(new Uint8Array(4),e.ad.length,0)),n.push(e.ad)):n.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((e=>{r.set(e,i),i+=e.length})),r}(n));const s=t.digest();return new Uint8Array(s)}(i),m=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(m))),E=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+ml),b[e][t]);for(let e=0;e<i.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),kl(t,0,w.length),kl(t,e,w.length+4),Il(ml,t,E(e,0)),kl(t,1,w.length),Il(ml,t,E(e,1))}const k=m/4;for(let e=0;e<i.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let n=0;n<i.lanes;n++){let s=0===t&&0===e?2:0;const a=r?Kl(g,e,n,t,u,i.passes,k,s):null;for(;s<k;s++){const c=t*k+s,h=c>0?b[n][c-1]:b[n][m-1],u=r?a.next().value:h;o(f.byteOffset,u.byteOffset,n,i.lanes,e,t,s,4,k);const l=f[0],y=f[1];0===e&&E(n,c),Sl(g,h,b[l][y],e>0?p:b[n][c]),e>0&&Bl(g,b[n][c],p,b[n][c])}}}const v=b[0][m-1];for(let e=1;e<i.lanes;e++)Bl(g,v,v,b[e][m-1]);const I=Il(i.tagLength,v,new Uint8Array(i.tagLength));return A.fill(0),t.grow(0),I}let xl;async function Ql(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(e,t,r){const i={env:{memory:e}};if(void 0===xl)try{const e=await t(i);return xl=!0,e}catch(e){xl=!1}return(xl?t:r)(i)}(r,e,t);return e=>Ul(e,{instance:i.instance,memory:r})}function Rl(e,t,r,i){return function(e,t,r){var i=WebAssembly.instantiate,n=WebAssembly.compile;return t?i(e,t):n(e)}(Buffer.from(r,"base64"),i)}var Ml=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Ql((e=>Rl(0,0,"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",e)),(e=>Rl(0,0,"AGFzbQEAAAABPwhgBH9/f38AYAABf2AAAGADf39/AGARf39/f39/f39/f39/f39/f38AYAl/f39/f39/f38Bf2ABfwBgAX8BfwITAQNlbnYGbWVtb3J5AgGQCICABAMLCgIDBAAABQEGBwEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwADAkcyAAQFZ2V0TFoABRlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAkJc3RhY2tTYXZlAAYMc3RhY2tSZXN0b3JlAAcKc3RhY2tBbGxvYwAICQcBAEEBCwEACssaCgMAAQtQAQJ/A0AgACAEQQN0IgNqIAIgA2opAwAgASADaikDAIU3AwAgACADQQhyIgNqIAIgA2opAwAgASADaikDAIU3AwAgBEECaiIEQYABRw0ACwveDwICfgF/IAAgAUEDdGoiEyATKQMAIhEgACAFQQN0aiIBKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA1BA3RqIgUgESAFKQMAhUIgiSIRNwMAIAAgCUEDdGoiCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIoiSIRNwMAIBMgESATKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAFIBEgBSkDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgASARIAEpAwCFQgGJNwMAIAAgAkEDdGoiDSANKQMAIhEgACAGQQN0aiICKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA5BA3RqIgYgESAGKQMAhUIgiSIRNwMAIAAgCkEDdGoiCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIoiSIRNwMAIA0gESANKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAKIBEgCikDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAiARIAIpAwCFQgGJNwMAIAAgA0EDdGoiDiAOKQMAIhEgACAHQQN0aiIDKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA9BA3RqIgcgESAHKQMAhUIgiSIRNwMAIAAgC0EDdGoiCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAMgESADKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAHIBEgBykDAIVCMIkiETcDACALIBEgCykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQgGJNwMAIAAgBEEDdGoiDyAPKQMAIhEgACAIQQN0aiIEKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIBBBA3RqIgggESAIKQMAhUIgiSIRNwMAIAAgDEEDdGoiACARIAApAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA8gESAPKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAIIBEgCCkDAIVCMIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIBMgEykDACIRIAIpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAggESAIKQMAhUIgiSIRNwMAIAsgESALKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACACIBEgAikDAIVCKIkiETcDACATIBEgEykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgCCARIAgpAwCFQjCJIhE3AwAgCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIBiTcDACANIA0pAwAiESADKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAFIBEgBSkDAIVCIIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQiiJIhE3AwAgDSARIA0pAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAUgESAFKQMAhUIwiSIRNwMAIAAgESAAKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACADIBEgAykDAIVCAYk3AwAgDiAOKQMAIhEgBCkDACISfCARQgGGQv7///8fgyASQv////8Pg358IhE3AwAgBiARIAYpAwCFQiCJIhE3AwAgCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIA8gDykDACIRIAEpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAcgESAHKQMAhUIgiSIRNwMAIAogESAKKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACABIBEgASkDAIVCKIkiETcDACAPIBEgDykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgByARIAcpAwCFQjCJIhE3AwAgCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIBiTcDAAvdCAEPfwNAIAIgBUEDdCIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAIgBkEIciIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAVBAmoiBUGAAUcNAAsDQCADIARBA3QiAGogACACaikDADcDACADIARBAXIiAEEDdCIBaiABIAJqKQMANwMAIAMgBEECciIBQQN0IgVqIAIgBWopAwA3AwAgAyAEQQNyIgVBA3QiBmogAiAGaikDADcDACADIARBBHIiBkEDdCIHaiACIAdqKQMANwMAIAMgBEEFciIHQQN0IghqIAIgCGopAwA3AwAgAyAEQQZyIghBA3QiCWogAiAJaikDADcDACADIARBB3IiCUEDdCIKaiACIApqKQMANwMAIAMgBEEIciIKQQN0IgtqIAIgC2opAwA3AwAgAyAEQQlyIgtBA3QiDGogAiAMaikDADcDACADIARBCnIiDEEDdCINaiACIA1qKQMANwMAIAMgBEELciINQQN0Ig5qIAIgDmopAwA3AwAgAyAEQQxyIg5BA3QiD2ogAiAPaikDADcDACADIARBDXIiD0EDdCIQaiACIBBqKQMANwMAIAMgBEEOciIQQQN0IhFqIAIgEWopAwA3AwAgAyAEQQ9yIhFBA3QiEmogAiASaikDADcDACADIARB//8DcSAAQf//A3EgAUH//wNxIAVB//8DcSAGQf//A3EgB0H//wNxIAhB//8DcSAJQf//A3EgCkH//wNxIAtB//8DcSAMQf//A3EgDUH//wNxIA5B//8DcSAPQf//A3EgEEH//wNxIBFB//8DcRACIARB8ABJIQAgBEEQaiEEIAANAAtBACEBIANBAEEBQRBBEUEgQSFBMEExQcAAQcEAQdAAQdEAQeAAQeEAQfAAQfEAEAIgA0ECQQNBEkETQSJBI0EyQTNBwgBBwwBB0gBB0wBB4gBB4wBB8gBB8wAQAiADQQRBBUEUQRVBJEElQTRBNUHEAEHFAEHUAEHVAEHkAEHlAEH0AEH1ABACIANBBkEHQRZBF0EmQSdBNkE3QcYAQccAQdYAQdcAQeYAQecAQfYAQfcAEAIgA0EIQQlBGEEZQShBKUE4QTlByABByQBB2ABB2QBB6ABB6QBB+ABB+QAQAiADQQpBC0EaQRtBKkErQTpBO0HKAEHLAEHaAEHbAEHqAEHrAEH6AEH7ABACIANBDEENQRxBHUEsQS1BPEE9QcwAQc0AQdwAQd0AQewAQe0AQfwAQf0AEAIgA0EOQQ9BHkEfQS5BL0E+QT9BzgBBzwBB3gBB3wBB7gBB7wBB/gBB/wAQAgNAIAIgAUEDdCIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAiAAQQhyIgRqIgUgAyAEaikDACAFKQMAhTcDACACIABBEHIiBGoiBSADIARqKQMAIAUpAwCFNwMAIAIgAEEYciIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAUEEaiIBQYABRw0ACwsWACAAIAEgAiADEAMgACACIAIgAxADC3sCAX8BfiACIQkgATUCACEKIAQgBXIEQCABKAIEIANwIQkLIAAgCTYCACAAIAdBAWsgBSAEGyAIbCAGQQFrQQBBfyAGGyACIAlGG2oiASAFQQFqIAhsQQAgBBtqIAGtIAogCn5CIIh+QiCIp0F/c2ogByAIbHA2AgQgAAsEACMACwYAIAAkAAsQACMAIABrQXBxIgAkACAACwUAQYAICw==",e)))});exports.AEADEncryptedDataPacket=ua,exports.Argon2OutOfMemoryError=kn,exports.Argon2S2K=Sn,exports.CleartextMessage=io,exports.CompressedDataPacket=ea,exports.KDFParams=hn,exports.LiteralDataPacket=Os,exports.MarkerPacket=class{static get tag(){return L.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}},exports.Message=Xa,exports.OnePassSignaturePacket=Ws,exports.PacketList=$s,exports.PaddingPacket=class{static get tag(){return L.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await En.random.getRandomBytes(e)}},exports.PrivateKey=qa,exports.PublicKey=ja,exports.PublicKeyEncryptedSessionKeyPacket=la,exports.PublicKeyPacket=ga,exports.PublicSubkeyPacket=Aa,exports.SecretKeyPacket=ma,exports.SecretSubkeyPacket=ka,exports.Signature=Ia,exports.SignaturePacket=Vs,exports.Subkey=Fa,exports.SymEncryptedIntegrityProtectedDataPacket=oa,exports.SymEncryptedSessionKeyPacket=fa,exports.SymmetricallyEncryptedDataPacket=da,exports.TrustPacket=class{static get tag(){return L.packet.trust}read(){throw new ni("Trust packets are not supported")}write(){throw new ni("Trust packets are not supported")}},exports.UnparseablePacket=ai,exports.UserAttributePacket=wa,exports.UserIDPacket=Ea,exports.armor=re,exports.config=_,exports.createCleartextMessage=async function({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!F.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new io(e)},exports.createMessage=async function({text:e,binary:t,filename:r,date:i=new Date,format:n=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!F.isString(e)&&!F.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!F.isUint8Array(t)&&!F.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=F.isStream(a),h=new Os(i);void 0!==e?h.setText(a,L.write(L.literal,n)):h.setBytes(a,L.write(L.literal,n)),void 0!==r&&h.setFilename(r);const u=new $s;u.push(h);const l=new Xa(u);return l.fromStream=c,l},exports.decrypt=async function({message:e,decryptionKeys:t,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(co(h={..._,...h}),no(e),n=ho(n),t=ho(t),r=ho(r),i=ho(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await e.decrypt(t,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),lo(l,e),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=b([l.data,Q((async()=>{await F.anyPromise(l.signatures.map((e=>e.verified)))}))])}return l.data=await uo(l.data),l}catch(e){throw F.wrapError("Error decrypting message",e)}},exports.decryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){co(r={..._,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=F.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>F.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),F.wrapError("Error decrypting private key",e)}},exports.decryptSessionKeys=async function({message:e,decryptionKeys:t,passwords:r,date:i=new Date,config:n,...s}){if(co(n={..._,...n}),no(e),t=ho(t),r=ho(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,i,n)}catch(e){throw F.wrapError("Error decrypting session keys",e)}},exports.encrypt=async function({message:e,encryptionKeys:t,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:y=[],signatureNotations:f=[],config:g,...p}){if(co(g={..._,...g}),no(e),ao(s),t=ho(t),r=ho(r),i=ho(i),c=ho(c),h=ho(h),l=ho(l),y=ho(y),f=ho(f),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,a,c,u,l,f,g)),e=e.compress(await async function(e=[],t=new Date,r=[],i=_){const n=L.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,n){const a=(await e.getPrimarySelfSignature(t,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(t,u,y,g),g),e=await e.encrypt(t,i,n,o,h,u,y,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await uo(p)}catch(e){throw F.wrapError("Error encrypting message",e)}},exports.encryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){co(r={..._,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=F.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:i}=e;await i.encrypt(o[t],r),i.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),F.wrapError("Error encrypting private key",e)}},exports.encryptSessionKey=async function({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(co(u={..._,...u}),function(e,t){if(!F.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!F.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),ao(s),i=ho(i),n=ho(n),o=ho(o),h=ho(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const y=Object.keys(l);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return yo(await Xa.encryptSessionKey(e,t,r,i,n,a,o,c,h,u),s,u)}catch(e){throw F.wrapError("Error encrypting session key",e)}},exports.enums=L,exports.generateKey=async function({userIDs:e=[],passphrase:t,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...y}){co(l={..._,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),e=ho(e);const f=Object.keys(y);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const g={userIDs:e,passphrase:t,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=Ra(e)).subkeys=e.subkeys.map(((t,r)=>Ra(e.subkeys[r],e)));let r=[Sa(e,t)];r=r.concat(e.subkeys.map((e=>Ba(e,t))));const i=await Promise.all(r),n=await Ja(i[0],i.slice(1),e,t),s=await n.getRevocationCertificate(e.date,t);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(g,l);return e.getKeys().forEach((({keyPacket:e})=>_a(e,l))),{privateKey:yo(e,u,l),publicKey:"symmetric"!==r?yo(e.toPublic(),u,l):null,revocationCertificate:t}}catch(e){throw F.wrapError("Error generating keypair",e)}},exports.generateSessionKey=async function({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:i,...n}){if(co(i={..._,...i}),e=ho(e),r=ho(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Xa.generateSessionKey(e,t,r,i)}catch(e){throw F.wrapError("Error generating session key",e)}},exports.readCleartextMessage=async function({cleartextMessage:e,config:t,...r}){if(t={..._,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!F.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await te(e);if(n.type!==L.armor.signed)throw Error("No cleartext signed message.");const s=await $s.fromBinary(n.data,ro,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let i=0;i<t.length;i++)if(t[i].constructor.tag===L.packet.signature&&!e.some(r(t[i])))return!1;return!0},i=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return L.write(L.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));i.push(...e)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new Ia(s);return new io(n.text,a)},exports.readKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={..._,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!F.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!F.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await te(e);if(t!==L.armor.publicKey&&t!==L.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await $s.fromBinary(s,Va,r),o=a.indexOfTag(L.packet.publicKey,L.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Ya(a.slice(o[0],o[1]))},exports.readKeys=async function({armoredKeys:e,binaryKeys:t,config:r,...i}){r={..._,...r};let n=e||t;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!F.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!F.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await te(e);if(t!==L.armor.publicKey&&t!==L.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await $s.fromBinary(n,Va,r),c=o.indexOfTag(L.packet.publicKey,L.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Ya(o.slice(c[e],c[e+1]));a.push(t)}return a},exports.readMessage=async function({armoredMessage:e,binaryMessage:t,config:r,...i}){r={..._,...r};let n=e||t;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!F.isString(e)&&!F.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!F.isUint8Array(t)&&!F.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=F.isStream(n);if(e){const{type:e,data:t}=await te(n);if(e!==L.armor.message)throw Error("Armored text not of type message");n=t}const o=await $s.fromBinary(n,Wa,r),c=new Xa(o);return c.fromStream=a,c},exports.readPrivateKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={..._,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!F.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!F.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await te(e);if(t!==L.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await $s.fromBinary(s,Va,r),o=a.indexOfTag(L.packet.publicKey,L.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===L.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new qa(t)}throw Error("No secret key packet found")},exports.readPrivateKeys=async function({armoredKeys:e,binaryKeys:t,config:r}){r={..._,...r};let i=e||t;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!F.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!F.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await te(e);if(t!==L.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await $s.fromBinary(i,Va,r),a=s.indexOfTag(L.packet.publicKey,L.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===L.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new qa(t);n.push(r)}if(0===n.length)throw Error("No secret key packet found");return n},exports.readSignature=async function({armoredSignature:e,binarySignature:t,config:r,...i}){r={..._,...r};let n=e||t;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!F.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!F.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await te(n);if(e!==L.armor.signature)throw Error("Armored text not of type signature");n=t}const a=await $s.fromBinary(n,va,r);return new Ia(a)},exports.reformatKey=async function({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){co(a={..._,...a}),t=ho(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:i,date:n};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,n={key:i,bind:r},s=await Ca(e.bindingSignatures,i,L.signature.subkeyBinding,n,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&L.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&L.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await Ja(i,n,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=F.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(h,a);return{privateKey:yo(e,s,a),publicKey:yo(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw F.wrapError("Error reformatting keypair",e)}},exports.revokeKey=async function({key:e,revocationCertificate:t,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){co(s={..._,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,i,s):await e.revoke(r,i,s);return a.isPrivate()?{privateKey:yo(a,n,s),publicKey:yo(a.toPublic(),n,s)}:{privateKey:null,publicKey:yo(a,n,s)}}catch(e){throw F.wrapError("Error revoking key",e)}},exports.sign=async function({message:e,signingKeys:t,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(co(c={..._,...c}),so(e),ao(r),t=ho(t),n=ho(n),a=ho(a),o=ho(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(e instanceof io&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof io&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let h;if(h=i?await e.signDetached(t,void 0,n,s,a,o,c):await e.sign(t,void 0,n,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),i&&(h=B(e.packets.write(),(async(e,t)=>{await Promise.all([E(h,t),U(e).catch((()=>{}))])}))),await uo(h)}catch(e){throw F.wrapError("Error signing message",e)}},exports.unarmor=te,exports.verify=async function({message:e,verificationKeys:t,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(co(a={..._,...a}),so(e),t=ho(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof io&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(e instanceof io&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await e.verifyDetached(n,t,s,a):await e.verify(t,s,a),o.data="binary"===i?e.getLiteralData():e.getText(),e.fromStream&&lo(o,e),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=b([o.data,Q((async()=>{await F.anyPromise(o.signatures.map((e=>e.verified)))}))])}return o.data=await uo(o.data),o}catch(e){throw F.wrapError("Error verifying signed message",e)}};
|
|
14
|
+
const Ju=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),Wu=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),$u=BigInt(1),Xu=BigInt(2),el=(e,t)=>(e+t/Xu)/t;const tl=uh(Ju,void 0,void 0,{sqrt:function(e){const t=Ju,r=BigInt(3),i=BigInt(6),n=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),h=e*e*e%t,u=h*h*e%t,l=sh(u,r,t)*u%t,y=sh(l,r,t)*u%t,f=sh(y,Xu,t)*h%t,g=sh(f,n,t)*f%t,p=sh(g,s,t)*g%t,d=sh(p,o,t)*p%t,A=sh(d,c,t)*d%t,w=sh(A,o,t)*p%t,m=sh(w,r,t)*u%t,b=sh(m,a,t)*g%t,E=sh(b,i,t)*h%t,k=sh(E,Xu,t);if(!tl.eql(tl.sqr(k),e))throw Error("Cannot find square root");return k}}),rl=Sh({a:BigInt(0),b:BigInt(7),Fp:tl,n:Wu,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{const t=Wu,r=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),i=-$u*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),n=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=BigInt("0x100000000000000000000000000000000"),o=el(s*e,t),c=el(-i*e,t);let h=ih(e-o*r-c*n,t),u=ih(-o*i-c*s,t);const l=h>a,y=u>a;if(l&&(h=t-h),y&&(u=t-u),h>a||u>a)throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:l,k1:h,k2neg:y,k2:u}}}},Mh);BigInt(0),rl.ProjectivePoint;const il=uh(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),nl=Sh({a:il.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:il,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Mh),sl=uh(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),al=Sh({a:sl.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:sl,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},tu),ol=uh(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),cl=Sh({a:ol.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:ol,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},eu),hl=new Map(Object.entries({nistP256:_h,nistP384:iu,nistP521:au,brainpoolP256r1:nl,brainpoolP384r1:al,brainpoolP512r1:cl,secp256k1:rl,x448:Zu,ed448:Yu}));var ul=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:hl});function ll(e,t,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],y=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],f=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,E,k,v,B=0,I=t.length;const S=32===e.length?3:9;E=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e,t){const r=8-e.length%8;let i;if(!(r<8)){if(8===r)return e;throw Error("des: invalid padding")}i=0;const n=new Uint8Array(e.length+r);for(let t=0;t<e.length;t++)n[t]=e[t];for(let t=0;t<r;t++)n[e.length+t]=i;return n}(t),I=t.length);let C=new Uint8Array(I),K=0;for(;B<I;){for(m=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],b=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(k=E[p+1],v=E[p+2],g=E[p];g!==k;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|h[A>>>16&63]|l[A>>>8&63]|f[63&A]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|y[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,C[K++]=m>>>24,C[K++]=m>>>16&255,C[K++]=m>>>8&255,C[K++]=255&m,C[K++]=b>>>24,C[K++]=b>>>16&255,C[K++]=b>>>8&255,C[K++]=255&b}return r||(C=function(e,t){let r,i=null;if(r=0,!i){for(i=1;e[e.length-i]===r;)i++;i--}return e.subarray(0,e.length-i)}(C)),C}function yl(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],y=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],f=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,E=0,k=0;for(let v=0;v<p;v++){let p=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++],v=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|h[v>>>24&15]|u[v>>>20&15]|l[v>>>16&15]|y[v>>>12&15]|f[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[k++]=w^b,d[k++]=m^b<<16}return d}function fl(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return ll(yl(this.key[2]),ll(yl(this.key[1]),ll(yl(this.key[0]),e,!0),!1),!0)}}function gl(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const i=t+e,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(e,t,r){const i=t^e,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(e,t,r){const i=t-e,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let e=0;e<4;e++)a=4*e,i[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=i[t[1]],c^=s[4][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][i[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][i[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][i[t[6]>>>2]>>>24-8*(3&t[6])&255],i[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][i[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][i[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][i[e[4]>>>2]>>>24-8*(3&e[4])&255],n[h]=c,h++}}for(let e=0;e<16;e++)this.masking[e]=n[e],this.rotate[e]=31&n[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function pl(e){this.cast5=new gl,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}fl.keySize=fl.prototype.keySize=24,fl.blockSize=fl.prototype.blockSize=8,pl.blockSize=pl.prototype.blockSize=8,pl.keySize=pl.prototype.keySize=16;const dl=4294967295;function Al(e,t){return(e<<t|e>>>32-t)&dl}function wl(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function ml(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function bl(e,t){return e>>>8*t&255}function El(e){this.tf=function(){let e=null,t=null,r=-1,i=[],n=[[],[],[],[]];function s(e){return n[0][bl(e,0)]^n[1][bl(e,1)]^n[2][bl(e,2)]^n[3][bl(e,3)]}function a(e){return n[0][bl(e,3)]^n[1][bl(e,0)]^n[2][bl(e,1)]^n[3][bl(e,2)]}function o(e,t){let r=s(t[0]),n=a(t[1]);t[2]=Al(t[2]^r+n+i[4*e+8]&dl,31),t[3]=Al(t[3],1)^r+2*n+i[4*e+9]&dl,r=s(t[2]),n=a(t[3]),t[0]=Al(t[0]^r+n+i[4*e+10]&dl,31),t[1]=Al(t[1],1)^r+2*n+i[4*e+11]&dl}function c(e,t){let r=s(t[0]),n=a(t[1]);t[2]=Al(t[2],1)^r+n+i[4*e+10]&dl,t[3]=Al(t[3]^r+2*n+i[4*e+11]&dl,31),r=s(t[2]),n=a(t[3]),t[0]=Al(t[0],1)^r+n+i[4*e+8]&dl,t[1]=Al(t[1]^r+2*n+i[4*e+9]&dl,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const h=[],u=[],l=[];let y;const f=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],E=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],k=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],B=[[],[],[],[]];function I(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function C(e,t){let r,i,n;for(r=0;r<8;r++)i=t>>>24,t=t<<8&dl|e>>>24,e=e<<8&dl,n=i<<1,128&i&&(n^=333),t^=i^n<<16,n^=i>>>1,1&i&&(n^=166),t^=n<<24|n<<8;return t}function K(e,t){const r=t>>4,i=15&t,n=A[e][r^i],s=w[e][E[i]^k[r]];return b[e][E[s]^k[n]]<<4|m[e][n^s]}function P(e,t){let r=bl(e,0),i=bl(e,1),n=bl(e,2),s=bl(e,3);switch(y){case 4:r=v[1][r]^bl(t[3],0),i=v[0][i]^bl(t[3],1),n=v[0][n]^bl(t[3],2),s=v[1][s]^bl(t[3],3);case 3:r=v[1][r]^bl(t[2],0),i=v[1][i]^bl(t[2],1),n=v[0][n]^bl(t[2],2),s=v[0][s]^bl(t[2],3);case 2:r=v[0][v[0][r]^bl(t[1],0)]^bl(t[0],0),i=v[0][v[1][i]^bl(t[1],1)]^bl(t[0],1),n=v[1][v[0][n]^bl(t[1],2)]^bl(t[0],2),s=v[1][v[1][s]^bl(t[1],3)]^bl(t[0],3)}return B[0][r]^B[1][i]^B[2][n]^B[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=wl(e,r);for(r=0;r<256;r++)v[0][r]=K(0,r),v[1][r]=K(1,r);for(r=0;r<256;r++)g=v[1][r],p=I(g),d=S(g),B[0][r]=g+(p<<8)+(d<<16)+(d<<24),B[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=I(g),d=S(g),B[1][r]=d+(d<<8)+(p<<16)+(g<<24),B[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(y=l.length/2,r=0;r<y;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,f[y-r-1]=C(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=P(s,h),a=Al(P(a,u),8),i[r]=s+a&dl,i[r+1]=Al(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,y){case 4:s=v[1][s]^bl(f[3],0),a=v[0][a]^bl(f[3],1),o=v[0][o]^bl(f[3],2),c=v[1][c]^bl(f[3],3);case 3:s=v[1][s]^bl(f[2],0),a=v[1][a]^bl(f[2],1),o=v[0][o]^bl(f[2],2),c=v[0][c]^bl(f[2],3);case 2:n[0][r]=B[0][v[0][v[0][s]^bl(f[1],0)]^bl(f[0],0)],n[1][r]=B[1][v[0][v[1][a]^bl(f[1],1)]^bl(f[0],1)],n[2][r]=B[2][v[1][v[0][o]^bl(f[1],2)]^bl(f[0],2)],n[3][r]=B[3][v[1][v[1][c]^bl(f[1],3)]^bl(f[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(e,n){t=e,r=n;const s=[wl(t,r)^i[0],wl(t,r+4)^i[1],wl(t,r+8)^i[2],wl(t,r+12)^i[3]];for(let e=0;e<8;e++)o(e,s);return ml(t,r,s[2]^i[4]),ml(t,r+4,s[3]^i[5]),ml(t,r+8,s[0]^i[6]),ml(t,r+12,s[1]^i[7]),r+=16,t},decrypt:function(e,n){t=e,r=n;const s=[wl(t,r)^i[4],wl(t,r+4)^i[5],wl(t,r+8)^i[6],wl(t,r+12)^i[7]];for(let e=7;e>=0;e--)c(e,s);ml(t,r,s[2]^i[0]),ml(t,r+4,s[3]^i[1]),ml(t,r+8,s[0]^i[2]),ml(t,r+12,s[1]^i[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function kl(){}function vl(e){this.bf=new kl,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}El.keySize=El.prototype.keySize=32,El.blockSize=El.prototype.blockSize=16,kl.prototype.BLOCKSIZE=8,kl.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],kl.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],kl.prototype.NN=16,kl.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},kl.prototype._F=function(e){let t;const r=255&e,i=255&(e>>>=8),n=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][n],t^=this.sboxes[2][i],t+=this.sboxes[3][r],t},kl.prototype._encryptBlock=function(e){let t,r=e[0],i=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],e[0]=this._clean(i),e[1]=this._clean(r)},kl.prototype.encryptBlock=function(e){let t;const r=[0,0],i=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+i];this._encryptBlock(r);const n=[];for(t=0;t<this.BLOCKSIZE/2;++t)n[t+0]=r[0]>>>24-8*t&255,n[t+i]=r[1]>>>24-8*t&255;return n},kl.prototype._decryptBlock=function(e){let t,r=e[0],i=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[1],i^=this.parray[0],e[0]=this._clean(i),e[1]=this._clean(r)},kl.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let i=0;for(let t=0;t<4;++t)i=i<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^i}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const i=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(i),this.parray[t+0]=i[0],this.parray[t+1]=i[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[t][r+0]=i[0],this.sboxes[t][r+1]=i[1]},vl.keySize=vl.prototype.keySize=16,vl.blockSize=vl.prototype.blockSize=8;const Bl=new Map([[F.symmetric.tripledes,fl],[F.symmetric.cast5,pl],[F.symmetric.blowfish,vl],[F.symmetric.twofish,El]]);var Il=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Bl});const Sl=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),Cl=/* @__PURE__ */new Uint32Array(80);class Kl extends Ph{constructor(){super(64,20,8,!1),this.A=0|Sl[0],this.B=0|Sl[1],this.C=0|Sl[2],this.D=0|Sl[3],this.E=0|Sl[4]}get(){const{A:e,B:t,C:r,D:i,E:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Cl[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)Cl[e]=gc(Cl[e-3]^Cl[e-8]^Cl[e-14]^Cl[e-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=Ch(i,n,s),o=1518500249):e<40?(t=i^n^s,o=1859775393):e<60?(t=Kh(i,n,s),o=2400959708):(t=i^n^s,o=3395469782);const c=gc(r,5)+t+a+o+Cl[e]|0;a=s,s=n,n=gc(i,30),i=r,r=c}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){Cl.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Pl=/* @__PURE__ */Ec((()=>new Kl)),Dl=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Ul=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((e,t)=>t))),xl=/* @__PURE__ */Ul.map((e=>(9*e+5)%16));let Ql=[Ul],Rl=[xl];for(let e=0;e<4;e++)for(let t of[Ql,Rl])t.push(t[e].map((e=>Dl[e])));const Ml=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>new Uint8Array(e))),Tl=/* @__PURE__ */Ql.map(((e,t)=>e.map((e=>Ml[t][e])))),Ll=/* @__PURE__ */Rl.map(((e,t)=>e.map((e=>Ml[t][e])))),_l=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),Fl=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]);function Nl(e,t,r,i){return 0===e?t^r^i:1===e?t&r|~t&i:2===e?(t|~r)^i:3===e?t&i|r&~i:t^(r|~i)}const Hl=/* @__PURE__ */new Uint32Array(16);class Ol extends Ph{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:i,h4:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Hl[r]=e.getUint32(t,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let e=0;e<5;e++){const t=4-e,y=_l[e],f=Fl[e],g=Ql[e],p=Rl[e],d=Tl[e],A=Ll[e];for(let t=0;t<16;t++){const i=gc(r+Nl(e,n,a,c)+Hl[g[t]]+y,d[t])+u|0;r=u,u=c,c=0|gc(a,10),a=n,n=i}for(let e=0;e<16;e++){const r=gc(i+Nl(t,s,o,h)+Hl[p[e]]+f,A[e])+l|0;i=l,l=h,h=0|gc(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){Hl.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const zl=new Map(Object.entries({sha1:Pl,sha224:Th,sha256:Mh,sha384:tu,sha512:eu,sha3_256:ku,sha3_512:vu,ripemd160:/* @__PURE__ */Ec((()=>new Ol))}));var Gl=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:zl});function ql(e,t,r,i){e[t]+=r[i],e[t+1]+=r[i+1]+(e[t]<r[i])}function jl(e,t){e[0]+=t,e[1]+=e[0]<t}function Vl(e,t,r,i,n,s,a,o){ql(e,r,e,i),ql(e,r,t,a);let c=e[s]^e[r],h=e[s+1]^e[r+1];e[s]=h,e[s+1]=c,ql(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=c>>>24^h<<8,e[i+1]=h>>>24^c<<8,ql(e,r,e,i),ql(e,r,t,o),c=e[s]^e[r],h=e[s+1]^e[r+1],e[s]=c>>>16^h<<16,e[s+1]=h>>>16^c<<16,ql(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=h>>>31^c<<1,e[i+1]=c>>>31^h<<1}const Yl=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),Zl=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function Jl(e,t){const r=new Uint32Array(32),i=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=Yl[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const n=t?4294967295:0;r[28]^=n,r[29]^=n;for(let e=0;e<12;e++){const t=e<<4;Vl(r,i,0,8,16,24,Zl[t+0],Zl[t+1]),Vl(r,i,2,10,18,26,Zl[t+2],Zl[t+3]),Vl(r,i,4,12,20,28,Zl[t+4],Zl[t+5]),Vl(r,i,6,14,22,30,Zl[t+6],Zl[t+7]),Vl(r,i,0,10,20,30,Zl[t+8],Zl[t+9]),Vl(r,i,2,12,22,24,Zl[t+10],Zl[t+11]),Vl(r,i,4,14,16,26,Zl[t+12],Zl[t+13]),Vl(r,i,6,8,18,28,Zl[t+14],Zl[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class Wl{constructor(e,t,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(ey),h:new Uint32Array(Xl/4),t0:new Uint32Array(2),c:0,outlen:e},n[0]=e,t&&(n[1]=t.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=Yl[e]^s[e];if(t){const e=new Uint8Array(ey);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===ey&&(jl(this.S.t0,this.S.c),Jl(this.S,!1),this.S.c=0);let r=ey-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const i=Math.min(r,e.length-t);this.S.c+=i,t+=i}return this}digest(e){jl(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=ey,Jl(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function $l(e,t,r,i){if(e>Xl)throw Error(`outlen must be at most ${Xl} (given: ${e})`);return new Wl(e,t,r,i)}const Xl=64,ey=128,ty=2,ry=19,iy=4294967295,ny=4,sy=4294967295,ay=8,oy=4294967295,cy=8,hy=4294967295,uy=4294967295,ly=32,yy=1024,fy=64,gy=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function py(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function dy(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=t;for(let t=r;t<r+7;t++)e[t]=i,i=(i-e[t])/256;return e}function Ay(e,t,r){const i=new Uint8Array(64),n=new Uint8Array(4+t.length);if(py(n,e,0),n.set(t,4),e<=64)return $l(e).update(n).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)$l(64).update(0===e?n:i).digest(i),r.set(i.subarray(0,32),32*e);const a=new Uint8Array($l(e-32*s).update(i).digest());return r.set(a,32*s),r}function wy(e,t,r,i){return e.fn.XOR(t.byteOffset,r.byteOffset,i.byteOffset),t}function my(e,t,r,i){return e.fn.G(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function by(e,t,r,i){return e.fn.G2(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function*Ey(e,t,r,i,n,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);dy(c,t,0),dy(c,r,8),dy(c,i,16),dy(c,n,24),dy(c,s,32),dy(c,ty,40);for(let t=1;t<=a;t++){dy(e.refs.prngTmp,t,c.length);const r=by(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}const ky=1024,vy=64*ky;function By(e,{memory:t,instance:r}){if(!gy)throw Error("BigEndian system not supported");const i=function({type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(e,t,r,i)=>{if(t<r||t>i)throw Error(`${e} size should be between ${r} and ${i} bytes`)};if(e!==ty||t!==ry)throw Error("Unsupported type or version");return u("password",i,cy,oy),u("salt",n,ay,sy),u("tag",r,ny,iy),u("memory",c,8*o,hy),s&&u("associated data",s,0,uy),a&&u("secret",a,0,ly),{type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:ty,version:ry,...e}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*yy+10*ky;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/vy);t.grow(e)}let y=0;c.gZ=new Uint8Array(t.buffer,y,yy),y+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,y,yy),y+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,y,yy),y+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,y,1024),y+=c.ZERO1024.length;const f=new Uint32Array(t.buffer,y,2);y+=f.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:h,refs:c},p=new Uint8Array(t.buffer,y,yy);y+=p.length;const d=new Uint8Array(t.buffer,y,i.memorySize*yy),A=new Uint8Array(t.buffer,0,y),w=function(e){const t=$l(fy),r=new Uint8Array(4),i=new Uint8Array(24);py(i,e.lanes,0),py(i,e.tagLength,4),py(i,e.memorySize,8),py(i,e.passes,12),py(i,e.version,16),py(i,e.type,20);const n=[i];e.password?(n.push(py(new Uint8Array(4),e.password.length,0)),n.push(e.password)):n.push(r);e.salt?(n.push(py(new Uint8Array(4),e.salt.length,0)),n.push(e.salt)):n.push(r);e.secret?(n.push(py(new Uint8Array(4),e.secret.length,0)),n.push(e.secret)):n.push(r);e.ad?(n.push(py(new Uint8Array(4),e.ad.length,0)),n.push(e.ad)):n.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((e=>{r.set(e,i),i+=e.length})),r}(n));const s=t.digest();return new Uint8Array(s)}(i),m=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(m))),E=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+yy),b[e][t]);for(let e=0;e<i.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),py(t,0,w.length),py(t,e,w.length+4),Ay(yy,t,E(e,0)),py(t,1,w.length),Ay(yy,t,E(e,1))}const k=m/4;for(let e=0;e<i.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let n=0;n<i.lanes;n++){let s=0===t&&0===e?2:0;const a=r?Ey(g,e,n,t,u,i.passes,k,s):null;for(;s<k;s++){const c=t*k+s,h=c>0?b[n][c-1]:b[n][m-1],u=r?a.next().value:h;o(f.byteOffset,u.byteOffset,n,i.lanes,e,t,s,4,k);const l=f[0],y=f[1];0===e&&E(n,c),my(g,h,b[l][y],e>0?p:b[n][c]),e>0&&wy(g,b[n][c],p,b[n][c])}}}const v=b[0][m-1];for(let e=1;e<i.lanes;e++)wy(g,v,v,b[e][m-1]);const B=Ay(i.tagLength,v,new Uint8Array(i.tagLength));return A.fill(0),t.grow(0),B}let Iy;async function Sy(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(e,t,r){const i={env:{memory:e}};if(void 0===Iy)try{const e=await t(i);return Iy=!0,e}catch(e){Iy=!1}return(Iy?t:r)(i)}(r,e,t);return e=>By(e,{instance:i.instance,memory:r})}function Cy(e,t,r,i){return function(e,t,r){var i=WebAssembly.instantiate,n=WebAssembly.compile;return t?i(e,t):n(e)}(Buffer.from(r,"base64"),i)}var Ky=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Sy((e=>Cy(0,0,"AGFzbQEAAAABKwdgBH9/f38AYAABf2AAAGADf39/AGAJf39/f39/f39/AX9gAX8AYAF/AX8CEwEDZW52Bm1lbW9yeQIBkAiAgAQDCgkCAwAABAEFBgEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwACAkcyAAMFZ2V0TFoABBlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAgJc3RhY2tTYXZlAAUMc3RhY2tSZXN0b3JlAAYKc3RhY2tBbGxvYwAHCQcBAEEBCwEACs0gCQMAAQtYAQJ/A0AgACAEQQR0IgNqIAIgA2r9AAQAIAEgA2r9AAQA/VH9CwQAIAAgA0EQciIDaiACIANq/QAEACABIANq/QAEAP1R/QsEACAEQQJqIgRBwABHDQALC7ceAgt7A38DQCADIBFBBHQiD2ogASAPav0ABAAgACAPav0ABAD9USIF/QsEACACIA9qIAX9CwQAIAMgD0EQciIPaiABIA9q/QAEACAAIA9q/QAEAP1RIgX9CwQAIAIgD2ogBf0LBAAgEUECaiIRQcAARw0ACwNAIAMgEEEHdGoiAEEQaiAA/QAEcCAA/QAEMCIFIAD9AAQQIgT9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAQgBP0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9USIJQSD9ywEgCUEg/c0B/VAiCSAA/QAEUCIG/c4BIAkgCf0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIGIAX9USIFQSj9ywEgBUEY/c0B/VAiCCAE/c4BIAggCP0NAAECAwgJCgsAAQIDCAkKCyAEIAT9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIKIAogCf1RIgVBMP3LASAFQRD9zQH9UCIFIAb9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgkgCP1RIgRBAf3LASAEQT/9zQH9UCIMIAD9AARgIAD9AAQgIgQgAP0ABAAiBv3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBv1RIghBIP3LASAIQSD9zQH9UCIIIABBQGsiAf0ABAAiB/3OASAIIAj9DQABAgMICQoLAAECAwgJCgsgByAH/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiByAE/VEiBEEo/csBIARBGP3NAf1QIgsgBv3OASALIAv9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAI/VEiBEEw/csBIARBEP3NAf1QIgQgB/3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgByAH/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCCAL/VEiB0EB/csBIAdBP/3NAf1QIg0gDf0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eHyIH/c4BIAcgB/0NAAECAwgJCgsAAQIDCAkKCyAKIAr9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIKIAQgBSAF/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/VEiC0Eg/csBIAtBIP3NAf1QIgsgCP3OASALIAv9DQABAgMICQoLAAECAwgJCgsgCCAI/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCCAH/VEiB0Eo/csBIAdBGP3NAf1QIgcgCv3OASAHIAf9DQABAgMICQoLAAECAwgJCgsgCiAK/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiDv0LBAAgACAGIA0gDCAM/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4fIgr9zgEgCiAK/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgYgBSAEIAT9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9USIFQSD9ywEgBUEg/c0B/VAiBSAJ/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAJIAn9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJIAr9USIEQSj9ywEgBEEY/c0B/VAiCiAG/c4BIAogCv0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIE/QsEACAAIAQgBf1RIgVBMP3LASAFQRD9zQH9UCIFIA4gC/1RIgRBMP3LASAEQRD9zQH9UCIEIAT9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwRgIAAgBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwRwIAEgBCAI/c4BIAQgBP0NAAECAwgJCgsAAQIDCAkKCyAIIAj9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIE/QsEACAAIAUgCf3OASAFIAX9DQABAgMICQoLAAECAwgJCgsgCSAJ/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCf0LBFAgACAEIAf9USIFQQH9ywEgBUE//c0B/VAiBSAJIAr9USIEQQH9ywEgBEE//c0B/VAiBCAE/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEICAAIAQgBSAF/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEMCAQQQFqIhBBCEcNAAtBACEQA0AgAyAQQQR0aiIAQYABaiAA/QAEgAcgAP0ABIADIgUgAP0ABIABIgT9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAQgBP0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9USIJQSD9ywEgCUEg/c0B/VAiCSAA/QAEgAUiBv3OASAJIAn9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAF/VEiBUEo/csBIAVBGP3NAf1QIgggBP3OASAIIAj9DQABAgMICQoLAAECAwgJCgsgBCAE/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCiAKIAn9USIFQTD9ywEgBUEQ/c0B/VAiBSAG/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJIAj9USIEQQH9ywEgBEE//c0B/VAiDCAA/QAEgAYgAP0ABIACIgQgAP0ABAAiBv3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBv1RIghBIP3LASAIQSD9zQH9UCIIIAD9AASABCIH/c4BIAggCP0NAAECAwgJCgsAAQIDCAkKCyAHIAf9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIHIAT9USIEQSj9ywEgBEEY/c0B/VAiCyAG/c4BIAsgC/0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIGIAj9USIEQTD9ywEgBEEQ/c0B/VAiBCAH/c4BIAQgBP0NAAECAwgJCgsAAQIDCAkKCyAHIAf9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIIIAv9USIHQQH9ywEgB0E//c0B/VAiDSAN/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4fIgf9zgEgByAH/Q0AAQIDCAkKCwABAgMICQoLIAogCv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgogBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9USILQSD9ywEgC0Eg/c0B/VAiCyAI/c4BIAsgC/0NAAECAwgJCgsAAQIDCAkKCyAIIAj9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIIIAf9USIHQSj9ywEgB0EY/c0B/VAiByAK/c4BIAcgB/0NAAECAwgJCgsAAQIDCAkKCyAKIAr9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIO/QsEACAAIAYgDSAMIAz9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh8iCv3OASAKIAr9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAFIAQgBP0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/1RIgVBIP3LASAFQSD9zQH9UCIFIAn9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAkgCf0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgkgCv1RIgRBKP3LASAEQRj9zQH9UCIKIAb9zgEgCiAK/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9CwQAIAAgBCAF/VEiBUEw/csBIAVBEP3NAf1QIgUgDiAL/VEiBEEw/csBIARBEP3NAf1QIgQgBP0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/0LBIAGIAAgBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwSAByAAIAQgCP3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgCCAI/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBP0LBIAEIAAgBSAJ/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAJIAn9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJ/QsEgAUgACAEIAf9USIFQQH9ywEgBUE//c0B/VAiBSAJIAr9USIEQQH9ywEgBEE//c0B/VAiBCAE/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEgAIgACAEIAUgBf0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/0LBIADIBBBAWoiEEEIRw0AC0EAIRADQCACIBBBBHQiAGoiASAAIANq/QAEACAB/QAEAP1R/QsEACACIABBEHIiAWoiDyABIANq/QAEACAP/QAEAP1R/QsEACACIABBIHIiAWoiDyABIANq/QAEACAP/QAEAP1R/QsEACACIABBMHIiAGoiASAAIANq/QAEACAB/QAEAP1R/QsEACAQQQRqIhBBwABHDQALCxYAIAAgASACIAMQAiAAIAIgAiADEAILewIBfwF+IAIhCSABNQIAIQogBCAFcgRAIAEoAgQgA3AhCQsgACAJNgIAIAAgB0EBayAFIAQbIAhsIAZBAWtBAEF/IAYbIAIgCUYbaiIBIAVBAWogCGxBACAEG2ogAa0gCiAKfkIgiH5CIIinQX9zaiAHIAhscDYCBCAACwQAIwALBgAgACQACxAAIwAgAGtBcHEiACQAIAALBQBBgAgL",e)),(e=>Cy(0,0,"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",e)))});exports.AEADEncryptedDataPacket=io,exports.Argon2OutOfMemoryError=ps,exports.Argon2S2K=ms,exports.CleartextMessage=Wo,exports.CompressedDataPacket=Va,exports.KDFParams=rs,exports.LiteralDataPacket=Ma,exports.MarkerPacket=class{static get tag(){return F.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}},exports.Message=Vo,exports.OnePassSignaturePacket=za,exports.PacketList=qa,exports.PaddingPacket=class{static get tag(){return F.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await gs.random.getRandomBytes(e)}},exports.PrivateKey=No,exports.PublicKey=Fo,exports.PublicKeyEncryptedSessionKeyPacket=no,exports.PublicKeyPacket=oo,exports.PublicSubkeyPacket=uo,exports.SecretKeyPacket=yo,exports.SecretSubkeyPacket=po,exports.Signature=wo,exports.SignaturePacket=Na,exports.Subkey=Ro,exports.SymEncryptedIntegrityProtectedDataPacket=eo,exports.SymEncryptedSessionKeyPacket=ao,exports.SymmetricallyEncryptedDataPacket=ho,exports.TrustPacket=class{static get tag(){return F.packet.trust}read(){throw new ai("Trust packets are not supported")}write(){throw new ai("Trust packets are not supported")}},exports.UnparseablePacket=ci,exports.UserAttributePacket=lo,exports.UserIDPacket=go,exports.armor=ne,exports.config=N,exports.createCleartextMessage=async function({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!O.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new Wo(e)},exports.createMessage=async function({text:e,binary:t,filename:r,date:i=new Date,format:n=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!O.isString(e)&&!O.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!O.isUint8Array(t)&&!O.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=O.isStream(a),h=new Ma(i);void 0!==e?h.setText(a,F.write(F.literal,n)):h.setBytes(a,F.write(F.literal,n)),void 0!==r&&h.setFilename(r);const u=new qa;u.push(h);const l=new Vo(u);return l.fromStream=c,l},exports.decrypt=async function({message:e,decryptionKeys:t,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(rc(h={...N,...h}),$o(e),n=ic(n),t=ic(t),r=ic(r),i=ic(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await e.decrypt(t,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),sc(l,e),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=k([l.data,M((async()=>{await O.anyPromise(l.signatures.map((e=>e.verified)))}))])}return l.data=await nc(l.data),l}catch(e){throw O.wrapError("Error decrypting message",e)}},exports.decryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){rc(r={...N,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=O.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>O.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),O.wrapError("Error decrypting private key",e)}},exports.decryptSessionKeys=async function({message:e,decryptionKeys:t,passwords:r,date:i=new Date,config:n,...s}){if(rc(n={...N,...n}),$o(e),t=ic(t),r=ic(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,i,n)}catch(e){throw O.wrapError("Error decrypting session keys",e)}},exports.encrypt=async function({message:e,encryptionKeys:t,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:y=[],signatureNotations:f=[],config:g,...p}){if(rc(g={...N,...g}),$o(e),ec(s),t=ic(t),r=ic(r),i=ic(i),c=ic(c),h=ic(h),l=ic(l),y=ic(y),f=ic(f),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,a,c,u,l,f,g)),e=e.compress(await async function(e=[],t=new Date,r=[],i=N){const n=F.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,n){const a=(await e.getPrimarySelfSignature(t,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(t,u,y,g),g),e=await e.encrypt(t,i,n,o,h,u,y,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await nc(p)}catch(e){throw O.wrapError("Error encrypting message",e)}},exports.encryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){rc(r={...N,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=O.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:i}=e;await i.encrypt(o[t],r),i.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),O.wrapError("Error encrypting private key",e)}},exports.encryptSessionKey=async function({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(rc(u={...N,...u}),function(e,t){if(!O.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!O.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),ec(s),i=ic(i),n=ic(n),o=ic(o),h=ic(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const y=Object.keys(l);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return ac(await Vo.encryptSessionKey(e,t,r,i,n,a,o,c,h,u),s,u)}catch(e){throw O.wrapError("Error encrypting session key",e)}},exports.enums=F,exports.generateKey=async function({userIDs:e=[],passphrase:t,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...y}){rc(l={...N,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),e=ic(e);const f=Object.keys(y);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const g={userIDs:e,passphrase:t,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=Ko(e)).subkeys=e.subkeys.map(((t,r)=>Ko(e.subkeys[r],e)));let r=[bo(e,t)];r=r.concat(e.subkeys.map((e=>mo(e,t))));const i=await Promise.all(r),n=await zo(i[0],i.slice(1),e,t),s=await n.getRevocationCertificate(e.date,t);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(g,l);return e.getKeys().forEach((({keyPacket:e})=>xo(e,l))),{privateKey:ac(e,u,l),publicKey:"symmetric"!==r?ac(e.toPublic(),u,l):null,revocationCertificate:t}}catch(e){throw O.wrapError("Error generating keypair",e)}},exports.generateSessionKey=async function({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:i,...n}){if(rc(i={...N,...i}),e=ic(e),r=ic(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Vo.generateSessionKey(e,t,r,i)}catch(e){throw O.wrapError("Error generating session key",e)}},exports.readCleartextMessage=async function({cleartextMessage:e,config:t,...r}){if(t={...N,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!O.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await ie(e);if(n.type!==F.armor.signed)throw Error("No cleartext signed message.");const s=await qa.fromBinary(n.data,Jo,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let i=0;i<t.length;i++)if(t[i].constructor.tag===F.packet.signature&&!e.some(r(t[i])))return!1;return!0},i=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return F.write(F.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));i.push(...e)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new wo(s);return new Wo(n.text,a)},exports.readKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={...N,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!O.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!O.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await ie(e);if(t!==F.armor.publicKey&&t!==F.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await qa.fromBinary(s,Ho,r),o=a.indexOfTag(F.packet.publicKey,F.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Oo(a.slice(o[0],o[1]))},exports.readKeys=async function({armoredKeys:e,binaryKeys:t,config:r,...i}){r={...N,...r};let n=e||t;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!O.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!O.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await ie(e);if(t!==F.armor.publicKey&&t!==F.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await qa.fromBinary(n,Ho,r),c=o.indexOfTag(F.packet.publicKey,F.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Oo(o.slice(c[e],c[e+1]));a.push(t)}return a},exports.readMessage=async function({armoredMessage:e,binaryMessage:t,config:r,...i}){r={...N,...r};let n=e||t;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!O.isString(e)&&!O.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!O.isUint8Array(t)&&!O.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=O.isStream(n);if(e){const{type:e,data:t}=await ie(n);if(e!==F.armor.message)throw Error("Armored text not of type message");n=t}const o=await qa.fromBinary(n,Go,r),c=new Vo(o);return c.fromStream=a,c},exports.readPrivateKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={...N,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!O.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!O.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await ie(e);if(t!==F.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await qa.fromBinary(s,Ho,r),o=a.indexOfTag(F.packet.publicKey,F.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===F.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new No(t)}throw Error("No secret key packet found")},exports.readPrivateKeys=async function({armoredKeys:e,binaryKeys:t,config:r}){r={...N,...r};let i=e||t;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!O.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!O.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await ie(e);if(t!==F.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await qa.fromBinary(i,Ho,r),a=s.indexOfTag(F.packet.publicKey,F.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===F.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new No(t);n.push(r)}if(0===n.length)throw Error("No secret key packet found");return n},exports.readSignature=async function({armoredSignature:e,binarySignature:t,config:r,...i}){r={...N,...r};let n=e||t;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!O.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!O.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await ie(n);if(e!==F.armor.signature)throw Error("Armored text not of type signature");n=t}const a=await qa.fromBinary(n,Ao,r);return new wo(a)},exports.reformatKey=async function({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){rc(a={...N,...a}),t=ic(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:i,date:n};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,n={key:i,bind:r},s=await Eo(e.bindingSignatures,i,F.signature.subkeyBinding,n,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&F.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&F.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await zo(i,n,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=O.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(h,a);return{privateKey:ac(e,s,a),publicKey:ac(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw O.wrapError("Error reformatting keypair",e)}},exports.revokeKey=async function({key:e,revocationCertificate:t,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){rc(s={...N,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,i,s):await e.revoke(r,i,s);return a.isPrivate()?{privateKey:ac(a,n,s),publicKey:ac(a.toPublic(),n,s)}:{privateKey:null,publicKey:ac(a,n,s)}}catch(e){throw O.wrapError("Error revoking key",e)}},exports.sign=async function({message:e,signingKeys:t,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(rc(c={...N,...c}),Xo(e),ec(r),t=ic(t),n=ic(n),a=ic(a),o=ic(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(e instanceof Wo&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof Wo&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let h;if(h=i?await e.signDetached(t,void 0,n,s,a,o,c):await e.sign(t,void 0,n,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),i&&(h=C(e.packets.write(),(async(e,t)=>{await Promise.all([v(h,t),Q(e).catch((()=>{}))])}))),await nc(h)}catch(e){throw O.wrapError("Error signing message",e)}},exports.unarmor=ie,exports.verify=async function({message:e,verificationKeys:t,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(rc(a={...N,...a}),Xo(e),t=ic(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof Wo&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(e instanceof Wo&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await e.verifyDetached(n,t,s,a):await e.verify(t,s,a),o.data="binary"===i?e.getLiteralData():e.getText(),e.fromStream&&!n&&sc(o,e),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=k([o.data,M((async()=>{await O.anyPromise(o.signatures.map((e=>e.verified)))}))])}return o.data=await nc(o.data),o}catch(e){throw O.wrapError("Error verifying signed message",e)}};
|
|
14
15
|
//# sourceMappingURL=openpgp.min.cjs.map
|