@protontech/openpgp 6.0.0-beta.1 → 6.0.0-beta.3.patch.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -15
- package/dist/lightweight/argon2id.min.mjs +2 -2
- package/dist/lightweight/argon2id.min.mjs.map +1 -1
- package/dist/lightweight/argon2id.mjs +1 -1
- package/dist/lightweight/legacy_ciphers.min.mjs +2 -2
- package/dist/lightweight/legacy_ciphers.min.mjs.map +1 -1
- package/dist/lightweight/legacy_ciphers.mjs +1 -1
- package/dist/lightweight/noble_curves.min.mjs +11 -11
- package/dist/lightweight/noble_curves.min.mjs.map +1 -1
- package/dist/lightweight/noble_curves.mjs +416 -206
- package/dist/lightweight/noble_hashes.min.mjs +1 -1
- package/dist/lightweight/noble_hashes.min.mjs.map +1 -1
- package/dist/lightweight/noble_hashes.mjs +7 -2
- package/dist/lightweight/openpgp.min.mjs +4 -2
- package/dist/lightweight/openpgp.min.mjs.map +1 -1
- package/dist/lightweight/openpgp.mjs +4300 -3802
- package/dist/lightweight/sha3.min.mjs +3 -3
- package/dist/lightweight/sha3.min.mjs.map +1 -1
- package/dist/lightweight/sha3.mjs +17 -4
- package/dist/node/openpgp.cjs +6127 -5389
- package/dist/node/openpgp.min.cjs +14 -11
- package/dist/node/openpgp.min.cjs.map +1 -1
- package/dist/node/openpgp.min.mjs +14 -11
- package/dist/node/openpgp.min.mjs.map +1 -1
- package/dist/node/openpgp.mjs +6126 -5389
- package/dist/openpgp.js +6133 -5407
- package/dist/openpgp.min.js +14 -11
- package/dist/openpgp.min.js.map +1 -1
- package/dist/openpgp.min.mjs +14 -11
- package/dist/openpgp.min.mjs.map +1 -1
- package/dist/openpgp.mjs +6133 -5407
- package/openpgp.d.ts +9 -1
- package/package.json +22 -21
package/dist/openpgp.min.js
CHANGED
|
@@ -1,14 +1,17 @@
|
|
|
1
|
-
/*! OpenPGP.js v6.0.0-beta.
|
|
2
|
-
var openpgp=function(e){"use strict";const t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},r=Symbol("doneWritingPromise"),i=Symbol("doneWritingResolve"),n=Symbol("doneWritingReject"),s=Symbol("readingIndex");class ArrayStream extends Array{constructor(){super(),Object.setPrototypeOf(this,ArrayStream.prototype),this[r]=new Promise(((e,t)=>{this[i]=e,this[n]=t})),this[r].catch((()=>{}))}}function a(e){return e&&e.getReader&&Array.isArray(e)}function o(e){if(!a(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function c(e){if(a(e))return"array";if(t.ReadableStream&&t.ReadableStream.prototype.isPrototypeOf(e))return"web";if(e&&!(t.ReadableStream&&e instanceof t.ReadableStream)&&"function"==typeof e._read&&"object"==typeof e._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!e||!e.getReader)&&"web-like"}function h(e){return Uint8Array.prototype.isPrototypeOf(e)}function u(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!h(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((function(e){r.set(e,i),i+=e.length})),r}ArrayStream.prototype.getReader=function(){return void 0===this[s]&&(this[s]=0),{read:async()=>(await this[r],this[s]===this.length?{value:void 0,done:!0}:{value:this[this[s]++],done:!1})}},ArrayStream.prototype.readToEnd=async function(e){await this[r];const t=e(this.slice(this[s]));return this.length=0,t},ArrayStream.prototype.clone=function(){const e=new ArrayStream;return e[r]=this[r].then((()=>{e.push(...this)})),e},o.prototype.write=async function(e){this.stream.push(e)},o.prototype.close=async function(){this.stream[i]()},o.prototype.abort=async function(e){return this.stream[n](e),e},o.prototype.releaseLock=function(){},"object"==typeof t.process&&t.process.versions;const l=new WeakSet,y=Symbol("externalBuffer");function f(e){if(this.stream=e,e[y]&&(this[y]=e[y].slice()),a(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(c(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||l.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{l.add(e)}catch(e){}}}function g(e){return c(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function p(e){if(c(e))return e;const t=new ArrayStream;return(async()=>{const r=U(t);await r.write(e),await r.close()})(),t}function d(e){return e.some((e=>c(e)&&!a(e)))?function(e){e=e.map(g);const t=m((async function(e){await Promise.all(i.map((t=>K(t,e))))}));let r=Promise.resolve();const i=e.map(((i,n)=>E(i,((i,s)=>(r=r.then((()=>A(i,t.writable,{preventClose:n!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>a(e)))?function(e){const t=new ArrayStream;let r=Promise.resolve();return e.forEach(((i,n)=>(r=r.then((()=>A(i,t,{preventClose:n!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):u(e)}async function A(e,t,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(c(e)&&!a(e)){e=g(e);try{if(e[y]){const r=U(t);for(let t=0;t<e[y].length;t++)await r.ready,await r.write(e[y][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:i,preventCancel:n})}catch(e){}return}const s=P(e=p(e)),o=U(t);try{for(;;){await o.ready;const{done:e,value:t}=await s.read();if(e){r||await o.close();break}await o.write(t)}}catch(e){i||await o.abort(e)}finally{s.releaseLock(),o.releaseLock()}}function w(e,t){const r=new TransformStream(t);return A(e,r.writable),r.readable}function m(e){let t,r,i=!1;return{readable:new ReadableStream({start(e){r=e},pull(){t?t():i=!0},cancel:e},{highWaterMark:0}),writable:new WritableStream({write:async function(e){r.enqueue(e),i?i=!1:(await new Promise((e=>{t=e})),t=null)},close:r.close.bind(r),abort:r.error.bind(r)})}}function b(e,t=(()=>{}),r=(()=>{})){if(a(e)){const i=new ArrayStream;return(async()=>{const n=U(i);try{const i=await C(e),s=t(i),a=r();let o;o=void 0!==s&&void 0!==a?d([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(e){await n.abort(e)}})(),i}if(c(e))return w(e,{async transform(e,r){try{const i=await t(e);void 0!==i&&r.enqueue(i)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const i=t(e),n=r();return void 0!==i&&void 0!==n?d([i,n]):void 0!==i?i:n}function E(e,t){if(c(e)&&!a(e)){let r;const i=new TransformStream({start(e){r=e}}),n=A(e,i.writable),s=m((async function(e){r.error(e),await n,await new Promise(setTimeout)}));return t(i.readable,s.writable),s.readable}e=p(e);const r=new ArrayStream;return t(e,r),r}function k(e,t){let r;const i=E(e,((e,n)=>{const s=P(e);s.remainder=()=>(s.releaseLock(),A(e,n),i),r=t(s)}));return r}function v(e){if(a(e))return e.clone();if(c(e)){const t=function(e){if(a(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(c(e)){const t=g(e).tee();return t[0][y]=t[1][y]=e[y],t}return[S(e),S(e)]}(e);return B(e,t[0]),t[1]}return S(e)}function I(e){return a(e)?v(e):c(e)?new ReadableStream({start(t){const r=E(e,(async(e,r)=>{const i=P(e),n=U(r);try{for(;;){await n.ready;const{done:e,value:r}=await i.read();if(e){try{t.close()}catch(e){}return void await n.close()}try{t.enqueue(r)}catch(e){}await n.write(r)}}catch(e){t.error(e),await n.abort(e)}}));B(e,r)}}):S(e)}function B(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(t):i.get=i.get.bind(t),Object.defineProperty(e,r,i))}))}function S(e,t=0,r=1/0){if(a(e))throw Error("Not implemented");if(c(e)){if(t>=0&&r>=0){let i=0;return w(e,{transform(e,n){i<r?(i+e.length>=t&&n.enqueue(S(e,Math.max(t-i,0),r-i)),i+=e.length):n.terminate()}})}if(t<0&&(r<0||r===1/0)){let i=[];return b(e,(e=>{e.length>=-t?i=[e]:i.push(e)}),(()=>S(d(i),t,r)))}if(0===t&&r<0){let i;return b(e,(e=>{const n=i?d([i,e]):e;if(n.length>=-r)return i=S(n,r),S(n,t,r);i=n}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),D((async()=>S(await C(e),t,r)))}return e[y]&&(e=d(e[y].concat([e]))),h(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function C(e,t=d){return a(e)?e.readToEnd(t):c(e)?P(e).readToEnd(t):e}async function K(e,t){if(c(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function D(e){const t=new ArrayStream;return(async()=>{const r=U(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function P(e){return new f(e)}function U(e){return new o(e)}f.prototype.read=async function(){if(this[y]&&this[y].length){return{done:!1,value:this[y].shift()}}return this._read()},f.prototype.releaseLock=function(){this[y]&&(this.stream[y]=this[y]),this._releaseLock()},f.prototype.cancel=function(e){return this._cancel(e)},f.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:i}=await this.read();if(i+="",r)return t.length?d(t):void 0;const n=i.indexOf("\n")+1;n&&(e=d(t.concat(i.substr(0,n))),t=[]),n!==i.length&&t.push(i.substr(n))}return this.unshift(...t),e},f.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(S(t,1)),r},f.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return t.length?d(t):void 0;if(t.push(n),r+=n.length,r>=e){const r=d(t);return this.unshift(S(r,e)),S(r,0,e)}}},f.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},f.prototype.unshift=function(...e){this[y]||(this[y]=[]),1===e.length&&h(e[0])&&this[y].length&&e[0].length&&this[y][0].byteOffset>=e[0].length?this[y][0]=new Uint8Array(this[y][0].buffer,this[y][0].byteOffset-e[0].length,this[y][0].byteLength+e[0].length):this[y].unshift(...e.filter((e=>e&&e.length)))},f.prototype.readToEnd=async function(e=d){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const x=Symbol("byValue");var Q={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[x]||(e[x]=[],Object.entries(e).forEach((([t,r])=>{e[x][r]=t}))),void 0!==e[x][t])return e[x][t];throw Error("Invalid enum value.")}},R={preferredHashAlgorithm:Q.hash.sha256,preferredSymmetricAlgorithm:Q.symmetric.aes256,preferredCompressionAlgorithm:Q.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:Q.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,s2kType:Q.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([Q.symmetric.aes128,Q.symmetric.aes192,Q.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.1",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([Q.hash.md5,Q.hash.ripemd]),rejectMessageHashAlgorithms:new Set([Q.hash.md5,Q.hash.ripemd,Q.hash.sha1]),rejectPublicKeyAlgorithms:new Set([Q.publicKey.elgamal,Q.publicKey.dsa]),rejectCurves:new Set([Q.curve.secp256k1])};const M=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),T={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:()=>{},isArray:function(e){return e instanceof Array},isUint8Array:h,isStream:c,getNobleCurve:async(e,t)=>{if(!R.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return yu}));switch(e){case Q.publicKey.ecdh:case Q.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case Q.publicKey.x448:return r.get("x448");case Q.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let i=0;i<t;i++)r[i]=e>>8*(t-i-1)&255;return r},readDate:function(e){const t=T.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return T.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return T.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){const r=new Uint8Array(t),i=t-e.length;return r.set(e,i),r},uint8ArrayToMPI:function(e){const t=T.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),i=new Uint8Array([(65280&t)>>8,255&t]);return T.concatUint8Array([i,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+T.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return b(e,(e=>{if(!T.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,i=(e=new Uint8Array(e)).length;for(let n=0;n<i;n+=r)t.push(String.fromCharCode.apply(String,e.subarray(n,n+r<i?n+r:i)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return b(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return b(e,r,(()=>r(new Uint8Array,!0)))},concat:d,concatUint8Array:u,equalsUint8Array:function(e,t){if(!T.isUint8Array(e)||!T.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return T.writeNumber(t,2)},printDebug:function(e){M&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){M&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let i=0;i<r;i++)t[i]=e[i]<<1^e[i+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const e=void 0!==t&&t.crypto&&t.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!e)throw Error("The WebCrypto API is not available");return e},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!T.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return b(e,(e=>{let r;t&&(e=T.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const i=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&i.push(r);if(!i.length)return e;const n=new Uint8Array(e.length+i.length);let s=0;for(let t=0;t<i.length;t++){const r=e.subarray(i[t-1]||0,i[t]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(e.subarray(i[i.length-1]||0),s),n}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return b(e,(e=>{let r;13===(e=t&&10!==e[0]?T.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let i=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const n=r-(10===e[r]?1:0);t&&e.copyWithin(i,t,n),i+=n-t}return e.subarray(0,i)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return Error(e);try{t.message=e+": "+t.message}catch(e){}return t},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let i;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){i=e}}))),r(i)}))},selectUint8Array:function(e,t,r){const i=Math.max(t.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=t[i]&256-e|r[i]&255+e,s+=e&i<t.length|1-e&i<r.length;return n.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===Q.symmetric.aes128||e===Q.symmetric.aes192||e===Q.symmetric.aes256}},L=T.getNodeBuffer();let _,N;function F(e){let t=new Uint8Array;return b(e,(e=>{t=T.concatUint8Array([t,e]);const r=[],i=Math.floor(t.length/45),n=45*i,s=_(t.subarray(0,n));for(let e=0;e<i;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(n),r.join("")}),(()=>t.length?_(t)+"\n":""))}function H(e){let t="";return b(e,(e=>{t+=e;let r=0;const i=[" ","\t","\r","\n"];for(let e=0;e<i.length;e++){const n=i[e];for(let e=t.indexOf(n);-1!==e;e=t.indexOf(n,e+1))r++}let n=t.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(t[n])&&r--;const s=N(t.substr(0,n));return t=t.substr(n),s}),(()=>N(t)))}function O(e){return H(e.replace(/-/g,"+").replace(/_/g,"/"))}function z(e,t){let r=F(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function G(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?Q.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?Q.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?Q.armor.signed:/MESSAGE/.test(t[1])?Q.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?Q.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?Q.armor.privateKey:/SIGNATURE/.test(t[1])?Q.armor.signature:void 0}function j(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function q(e){const t=function(e){let t=13501623;return b(e,(e=>{const r=Y?Math.floor(e.length/4):0,i=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=i[e],t=V[0][t>>24&255]^V[1][t>>16&255]^V[2][t>>8&255]^V[3][255&t];for(let i=4*r;i<e.length;i++)t=t>>8^V[0][255&t^e[i]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return F(t)}L?(_=e=>L.from(e).toString("base64"),N=e=>{const t=L.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(_=e=>btoa(T.uint8ArrayToString(e)),N=e=>T.stringToUint8Array(atob(e)));const V=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);V[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)V[1][e]=V[0][e]>>8^V[0][255&V[0][e]];for(let e=0;e<=255;e++)V[2][e]=V[1][e]>>8^V[0][255&V[1][e]];for(let e=0;e<=255;e++)V[3][e]=V[2][e]>>8^V[0][255&V[2][e]];const Y=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function J(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||T.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||T.printDebugError(Error("Unknown header: "+e[t]))}function W(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function Z(e){return new Promise((async(t,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=H(E(e,(async(e,y)=>{const f=P(e);try{for(;;){let e=await f.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=T.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==Q.armor.signed||(i.test(e)?(u=u.join("\r\n"),c=!0,J(h),h=[],o=!1):u.push(e.replace(/^- /,"")));else if(i.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(e)){if(J(h),o=!0,c||s!==Q.armor.signed){t({text:u,data:l,headers:a,type:s});break}}else h.push(e);else i.test(e)&&(s=G(e))}}catch(e){return void r(e)}const g=U(y);try{for(;;){await g.ready;const{done:e,value:t}=await f.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await f.readToEnd();e.length||(e=""),e=r+e,e=T.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(i);if(1===t.length)throw Error("Misformed armored text");const n=W(t[0].slice(0,-1));await g.write(n);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}})))}catch(e){r(e)}})).then((async e=>(a(e.data)&&(e.data=await C(e.data)),e)))}function $(e,t,r,i,n,s=!1,a=R){let o,c;e===Q.armor.signed&&(o=t.text,c=t.hash,t=t.data);const h=s&&I(t),u=[];switch(e){case Q.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),u.push(j(n,a)),u.push(F(t)),h&&u.push("=",q(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case Q.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push(j(n,a)),u.push(F(t)),h&&u.push("=",q(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case Q.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push(j(n,a)),u.push(F(t)),h&&u.push("=",q(h)),u.push("-----END PGP SIGNATURE-----\n");break;case Q.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push(j(n,a)),u.push(F(t)),h&&u.push("=",q(h)),u.push("-----END PGP MESSAGE-----\n");break;case Q.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push(j(n,a)),u.push(F(t)),h&&u.push("=",q(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case Q.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push(j(n,a)),u.push(F(t)),h&&u.push("=",q(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case Q.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push(j(n,a)),u.push(F(t)),h&&u.push("=",q(h)),u.push("-----END PGP SIGNATURE-----\n")}return T.concat(u)}async function X(e){switch(e){case Q.symmetric.aes128:case Q.symmetric.aes192:case Q.symmetric.aes256:throw Error("Not a legacy cipher");case Q.symmetric.cast5:case Q.symmetric.blowfish:case Q.symmetric.twofish:case Q.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return Cu})),r=t.get(e);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function ee(e){switch(e){case Q.symmetric.aes128:case Q.symmetric.aes192:case Q.symmetric.aes256:case Q.symmetric.twofish:return 16;case Q.symmetric.blowfish:case Q.symmetric.cast5:case Q.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function te(e){switch(e){case Q.symmetric.aes128:case Q.symmetric.blowfish:case Q.symmetric.cast5:return 16;case Q.symmetric.aes192:case Q.symmetric.tripledes:return 24;case Q.symmetric.aes256:case Q.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function re(e){return{keySize:te(e),blockSize:ee(e)}}var ie=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:re,getLegacyCipher:X});function ne(e,t){let r=e[0],i=e[1],n=e[2],s=e[3];r=ae(r,i,n,s,t[0],7,-680876936),s=ae(s,r,i,n,t[1],12,-389564586),n=ae(n,s,r,i,t[2],17,606105819),i=ae(i,n,s,r,t[3],22,-1044525330),r=ae(r,i,n,s,t[4],7,-176418897),s=ae(s,r,i,n,t[5],12,1200080426),n=ae(n,s,r,i,t[6],17,-1473231341),i=ae(i,n,s,r,t[7],22,-45705983),r=ae(r,i,n,s,t[8],7,1770035416),s=ae(s,r,i,n,t[9],12,-1958414417),n=ae(n,s,r,i,t[10],17,-42063),i=ae(i,n,s,r,t[11],22,-1990404162),r=ae(r,i,n,s,t[12],7,1804603682),s=ae(s,r,i,n,t[13],12,-40341101),n=ae(n,s,r,i,t[14],17,-1502002290),i=ae(i,n,s,r,t[15],22,1236535329),r=oe(r,i,n,s,t[1],5,-165796510),s=oe(s,r,i,n,t[6],9,-1069501632),n=oe(n,s,r,i,t[11],14,643717713),i=oe(i,n,s,r,t[0],20,-373897302),r=oe(r,i,n,s,t[5],5,-701558691),s=oe(s,r,i,n,t[10],9,38016083),n=oe(n,s,r,i,t[15],14,-660478335),i=oe(i,n,s,r,t[4],20,-405537848),r=oe(r,i,n,s,t[9],5,568446438),s=oe(s,r,i,n,t[14],9,-1019803690),n=oe(n,s,r,i,t[3],14,-187363961),i=oe(i,n,s,r,t[8],20,1163531501),r=oe(r,i,n,s,t[13],5,-1444681467),s=oe(s,r,i,n,t[2],9,-51403784),n=oe(n,s,r,i,t[7],14,1735328473),i=oe(i,n,s,r,t[12],20,-1926607734),r=ce(r,i,n,s,t[5],4,-378558),s=ce(s,r,i,n,t[8],11,-2022574463),n=ce(n,s,r,i,t[11],16,1839030562),i=ce(i,n,s,r,t[14],23,-35309556),r=ce(r,i,n,s,t[1],4,-1530992060),s=ce(s,r,i,n,t[4],11,1272893353),n=ce(n,s,r,i,t[7],16,-155497632),i=ce(i,n,s,r,t[10],23,-1094730640),r=ce(r,i,n,s,t[13],4,681279174),s=ce(s,r,i,n,t[0],11,-358537222),n=ce(n,s,r,i,t[3],16,-722521979),i=ce(i,n,s,r,t[6],23,76029189),r=ce(r,i,n,s,t[9],4,-640364487),s=ce(s,r,i,n,t[12],11,-421815835),n=ce(n,s,r,i,t[15],16,530742520),i=ce(i,n,s,r,t[2],23,-995338651),r=he(r,i,n,s,t[0],6,-198630844),s=he(s,r,i,n,t[7],10,1126891415),n=he(n,s,r,i,t[14],15,-1416354905),i=he(i,n,s,r,t[5],21,-57434055),r=he(r,i,n,s,t[12],6,1700485571),s=he(s,r,i,n,t[3],10,-1894986606),n=he(n,s,r,i,t[10],15,-1051523),i=he(i,n,s,r,t[1],21,-2054922799),r=he(r,i,n,s,t[8],6,1873313359),s=he(s,r,i,n,t[15],10,-30611744),n=he(n,s,r,i,t[6],15,-1560198380),i=he(i,n,s,r,t[13],21,1309151649),r=he(r,i,n,s,t[4],6,-145523070),s=he(s,r,i,n,t[11],10,-1120210379),n=he(n,s,r,i,t[2],15,718787259),i=he(i,n,s,r,t[9],21,-343485551),e[0]=fe(r,e[0]),e[1]=fe(i,e[1]),e[2]=fe(n,e[2]),e[3]=fe(s,e[3])}function se(e,t,r,i,n,s){return t=fe(fe(t,e),fe(i,s)),fe(t<<n|t>>>32-n,r)}function ae(e,t,r,i,n,s,a){return se(t&r|~t&i,e,t,n,s,a)}function oe(e,t,r,i,n,s,a){return se(t&i|r&~i,e,t,n,s,a)}function ce(e,t,r,i,n,s,a){return se(t^r^i,e,t,n,s,a)}function he(e,t,r,i,n,s,a){return se(r^(t|~i),e,t,n,s,a)}function ue(e){const t=[];let r;for(r=0;r<64;r+=4)t[r>>2]=e.charCodeAt(r)+(e.charCodeAt(r+1)<<8)+(e.charCodeAt(r+2)<<16)+(e.charCodeAt(r+3)<<24);return t}const le="0123456789abcdef".split("");function ye(e){let t="",r=0;for(;r<4;r++)t+=le[e>>8*r+4&15]+le[e>>8*r&15];return t}function fe(e,t){return e+t&4294967295}const ge=T.getWebCrypto(),pe=T.getNodeCrypto(),de=pe&&pe.getHashes();function Ae(e){if(pe&&de.includes(e))return async function(t){const r=pe.createHash(e);return b(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function we(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return qu})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(a(e)&&(e=await C(e)),T.isStream(e)){const t=(await r()).create();return b(e,(e=>{t.update(e)}),(()=>t.digest()))}if(ge&&t)return new Uint8Array(await ge.digest(t,e));return(await r())(e)}}var me={md5:Ae("md5")||async function(e){const t=function(e){const t=e.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=e.length;i+=64)ne(r,ue(e.substring(i-64,i)));e=e.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<e.length;i++)n[i>>2]|=e.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(ne(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*t,ne(r,n),r}(T.uint8ArrayToString(e));return T.hexToUint8Array(function(e){for(let t=0;t<e.length;t++)e[t]=ye(e[t]);return e.join("")}(t))},sha1:Ae("sha1")||we("sha1","SHA-1"),sha224:Ae("sha224")||we("sha224"),sha256:Ae("sha256")||we("sha256","SHA-256"),sha384:Ae("sha384")||we("sha384","SHA-384"),sha512:Ae("sha512")||we("sha512","SHA-512"),ripemd:Ae("ripemd160")||we("ripemd160"),sha3_256:Ae("sha3-256")||we("sha3_256"),sha3_512:Ae("sha3-512")||we("sha3_512"),digest:function(e,t){switch(e){case Q.hash.md5:return this.md5(t);case Q.hash.sha1:return this.sha1(t);case Q.hash.ripemd:return this.ripemd(t);case Q.hash.sha256:return this.sha256(t);case Q.hash.sha384:return this.sha384(t);case Q.hash.sha512:return this.sha512(t);case Q.hash.sha224:return this.sha224(t);case Q.hash.sha3_256:return this.sha3_256(t);case Q.hash.sha3_512:return this.sha3_512(t);default:throw Error("Unsupported hash function")}},getHashByteLength:function(e){switch(e){case Q.hash.md5:return 16;case Q.hash.sha1:case Q.hash.ripemd:return 20;case Q.hash.sha256:return 32;case Q.hash.sha384:return 48;case Q.hash.sha512:return 64;case Q.hash.sha224:return 28;case Q.hash.sha3_256:return 32;case Q.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(e){switch(e){case Q.hash.md5:case Q.hash.sha1:case Q.hash.ripemd:case Q.hash.sha224:case Q.hash.sha256:return 64;case Q.hash.sha384:case Q.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}},be=function(){var e,t,r=!1;function i(r,i){var n=e[(t[r]+t[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=e[255-t[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){e=[],t=[];var i,n,s=1;for(i=0;i<255;i++)e[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=e[i],t[e[i]]=i;e[255]=e[0],t[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var y=1;y<4;y++)a[y][u]=a[y-1][u]>>>8|a[y-1][u]<<24,o[y][l]=o[y-1][l]>>>8|o[y-1][l]<<24}c=!0}var u=function(e,t){c||h();var r=new Uint32Array(t);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(e,t,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0;var I=new e.Uint32Array(r),B=new e.Uint8Array(r);function S(e,t,r,o,c,h,u,l){e=e|0;t=t|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0;y=r|0x400,f=r|0x800,g=r|0xc00;c=c^I[(e|0)>>2],h=h^I[(e|4)>>2],u=u^I[(e|8)>>2],l=l^I[(e|12)>>2];for(m=16;(m|0)<=o<<4;m=m+16|0){p=I[(r|c>>22&1020)>>2]^I[(y|h>>14&1020)>>2]^I[(f|u>>6&1020)>>2]^I[(g|l<<2&1020)>>2]^I[(e|m|0)>>2],d=I[(r|h>>22&1020)>>2]^I[(y|u>>14&1020)>>2]^I[(f|l>>6&1020)>>2]^I[(g|c<<2&1020)>>2]^I[(e|m|4)>>2],A=I[(r|u>>22&1020)>>2]^I[(y|l>>14&1020)>>2]^I[(f|c>>6&1020)>>2]^I[(g|h<<2&1020)>>2]^I[(e|m|8)>>2],w=I[(r|l>>22&1020)>>2]^I[(y|c>>14&1020)>>2]^I[(f|h>>6&1020)>>2]^I[(g|u<<2&1020)>>2]^I[(e|m|12)>>2];c=p,h=d,u=A,l=w}i=I[(t|c>>22&1020)>>2]<<24^I[(t|h>>14&1020)>>2]<<16^I[(t|u>>6&1020)>>2]<<8^I[(t|l<<2&1020)>>2]^I[(e|m|0)>>2],n=I[(t|h>>22&1020)>>2]<<24^I[(t|u>>14&1020)>>2]<<16^I[(t|l>>6&1020)>>2]<<8^I[(t|c<<2&1020)>>2]^I[(e|m|4)>>2],s=I[(t|u>>22&1020)>>2]<<24^I[(t|l>>14&1020)>>2]<<16^I[(t|c>>6&1020)>>2]<<8^I[(t|h<<2&1020)>>2]^I[(e|m|8)>>2],a=I[(t|l>>22&1020)>>2]<<24^I[(t|c>>14&1020)>>2]<<16^I[(t|h>>6&1020)>>2]<<8^I[(t|u<<2&1020)>>2]^I[(e|m|12)>>2]}function C(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;S(0x0000,0x0800,0x1000,v,e,t,r,i)}function K(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var s=0;S(0x0400,0x0c00,0x2000,v,e,i,r,t);s=n,n=a,a=s}function D(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o^e,c^t,h^r,u^l);o=i,c=n,h=s,u=a}function P(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;var y=0;S(0x0400,0x0c00,0x2000,v,e,l,r,t);y=n,n=a,a=y;i=i^o,n=n^c,s=s^h,a=a^u;o=e,c=t,h=r,u=l}function U(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i=i^e,c=n=n^t,h=s=s^r,u=a=a^l}function x(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);i=i^e,n=n^t,s=s^r,a=a^l;o=e,c=t,h=r,u=l}function Q(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i,c=n,h=s,u=a;i=i^e,n=n^t,s=s^r,a=a^l}function R(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;S(0x0000,0x0800,0x1000,v,l,y,f,g);g=~w&g|w&g+1;f=~A&f|A&f+((g|0)==0);y=~d&y|d&y+((f|0)==0);l=~p&l|p&l+((y|0)==0);i=i^e;n=n^t;s=s^r;a=a^o}function M(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0;e=e^o,t=t^c,r=r^h,i=i^u;n=m|0,s=b|0,a=E|0,l=k|0;for(;(d|0)<128;d=d+1|0){if(n>>>31){y=y^e,f=f^t,g=g^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;A=i&1;i=i>>>1|r<<31,r=r>>>1|t<<31,t=t>>>1|e<<31,e=e>>>1;if(A)e=e^0xe1000000}o=y,c=f,h=g,u=p}function T(e){e=e|0;v=e}function L(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;i=e,n=t,s=r,a=o}function _(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;o=e,c=t,h=r,u=i}function N(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;l=e,y=t,f=r,g=i}function F(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;p=e,d=t,A=r,w=i}function H(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;g=~w&g|w&i,f=~A&f|A&r,y=~d&y|d&t,l=~p&l|p&e}function O(e){e=e|0;if(e&15)return-1;B[e|0]=i>>>24,B[e|1]=i>>>16&255,B[e|2]=i>>>8&255,B[e|3]=i&255,B[e|4]=n>>>24,B[e|5]=n>>>16&255,B[e|6]=n>>>8&255,B[e|7]=n&255,B[e|8]=s>>>24,B[e|9]=s>>>16&255,B[e|10]=s>>>8&255,B[e|11]=s&255,B[e|12]=a>>>24,B[e|13]=a>>>16&255,B[e|14]=a>>>8&255,B[e|15]=a&255;return 16}function z(e){e=e|0;if(e&15)return-1;B[e|0]=o>>>24,B[e|1]=o>>>16&255,B[e|2]=o>>>8&255,B[e|3]=o&255,B[e|4]=c>>>24,B[e|5]=c>>>16&255,B[e|6]=c>>>8&255,B[e|7]=c&255,B[e|8]=h>>>24,B[e|9]=h>>>16&255,B[e|10]=h>>>8&255,B[e|11]=h&255,B[e|12]=u>>>24,B[e|13]=u>>>16&255,B[e|14]=u>>>8&255,B[e|15]=u&255;return 16}function G(){C(0,0,0,0);m=i,b=n,E=s,k=a}function j(e,t,r){e=e|0;t=t|0;r=r|0;var o=0;if(t&15)return-1;while((r|0)>=16){V[e&7](B[t|0]<<24|B[t|1]<<16|B[t|2]<<8|B[t|3],B[t|4]<<24|B[t|5]<<16|B[t|6]<<8|B[t|7],B[t|8]<<24|B[t|9]<<16|B[t|10]<<8|B[t|11],B[t|12]<<24|B[t|13]<<16|B[t|14]<<8|B[t|15]);B[t|0]=i>>>24,B[t|1]=i>>>16&255,B[t|2]=i>>>8&255,B[t|3]=i&255,B[t|4]=n>>>24,B[t|5]=n>>>16&255,B[t|6]=n>>>8&255,B[t|7]=n&255,B[t|8]=s>>>24,B[t|9]=s>>>16&255,B[t|10]=s>>>8&255,B[t|11]=s&255,B[t|12]=a>>>24,B[t|13]=a>>>16&255,B[t|14]=a>>>8&255,B[t|15]=a&255;o=o+16|0,t=t+16|0,r=r-16|0}return o|0}function q(e,t,r){e=e|0;t=t|0;r=r|0;var i=0;if(t&15)return-1;while((r|0)>=16){Y[e&1](B[t|0]<<24|B[t|1]<<16|B[t|2]<<8|B[t|3],B[t|4]<<24|B[t|5]<<16|B[t|6]<<8|B[t|7],B[t|8]<<24|B[t|9]<<16|B[t|10]<<8|B[t|11],B[t|12]<<24|B[t|13]<<16|B[t|14]<<8|B[t|15]);i=i+16|0,t=t+16|0,r=r-16|0}return i|0}var V=[C,K,D,P,U,x,Q,R];var Y=[D,M];return{set_rounds:T,set_state:L,set_iv:_,set_nonce:N,set_mask:F,set_counter:H,get_state:O,get_iv:z,gcm_init:G,cipher:j,mac:q}}({Uint8Array,Uint32Array},e,t);return u.set_key=function(e,t,i,s,a,c,h,l,y){var f=r.subarray(0,60),g=r.subarray(256,316);f.set([t,i,s,a,c,h,l,y]);for(var p=e,d=1;p<4*e+28;p++){var A=f[p-1];(p%e==0||8===e&&p%e==4)&&(A=n[A>>>24]<<24^n[A>>>16&255]<<16^n[A>>>8&255]<<8^n[255&A]),p%e==0&&(A=A<<8^A>>>24^d<<24,d=d<<1^(128&d?27:0)),f[p]=f[p-e]^A}for(var w=0;w<p;w+=4)for(var m=0;m<4;m++){A=f[p-(4+w)+(4-m)%4];g[w+m]=w<4||w>=p-4?A:o[0][n[A>>>24]]^o[1][n[A>>>16&255]]^o[2][n[A>>>8&255]]^o[3][n[255&A]]}u.set_rounds(e+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function Ee(e){return e instanceof Uint8Array}function ke(e,t,r,i,n){const s=e.length-t,a=s<n?s:n;return e.set(r.subarray(i,i+a),t),a}function ve(...e){const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);let i=0;for(let t=0;t<e.length;t++)r.set(e[t],i),i+=e[t].length;return r}class Ie extends Error{constructor(...e){super(...e)}}class Be extends Error{constructor(...e){super(...e)}}class Se extends Error{constructor(...e){super(...e)}}const Ce=[],Ke=[];class De{constructor(e,t,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=e,this.iv=t,this.padding=r,this.acquire_asm(n,s)}acquire_asm(e,t){return void 0!==this.heap&&void 0!==this.asm||(this.heap=e||Ce.pop()||function(e,t){const r=e?e.byteLength:65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return e||new Uint8Array(new ArrayBuffer(r))}().subarray(be.HEAP_DATA),this.asm=t||Ke.pop()||new be(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(Ce.push(this.heap),Ke.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(e,t){const{asm:r}=this.acquire_asm(),i=e.length;if(16!==i&&24!==i&&32!==i)throw new Be("illegal key size");const n=new DataView(e.buffer,e.byteOffset,e.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==t){if(16!==t.length)throw new Be("illegal iv size");let e=new DataView(t.buffer,t.byteOffset,t.byteLength);r.set_iv(e.getUint32(0),e.getUint32(4),e.getUint32(8),e.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(e){if(!Ee(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=be.ENC[this.mode],n=be.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=ke(t,s+a,e,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(t.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=be.ENC[this.mode],i=be.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let t=0;t<a;++t)e[n+s+t]=a;s+=a,o=s}else if(s%16)throw new Be("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&t.cipher(r,i+n,s),o&&c.set(e.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(e){if(!Ee(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=be.DEC[this.mode],n=be.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=a+c&-16,l=0,y=0;this.padding&&(l=a+c-u||16,u-=l);const f=new Uint8Array(u);for(;c>0;)y=ke(t,s+a,e,o,c),a+=y,o+=y,c-=y,y=r.cipher(i,n+s,a-(c?0:l)),y&&f.set(t.subarray(s,s+y),h),h+=y,y<a?(s+=y,a-=y):(s=0,a=0);return this.pos=s,this.len=a,f}AES_Decrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=be.DEC[this.mode],i=be.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new Be("data length must be a multiple of the block size");s+=16-s%16}if(t.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let t=e[n+a-1];if(t<1||t>16||t>a)throw new Se("bad padding");let r=0;for(let i=t;i>1;i--)r|=t^e[n+a-i];if(r)throw new Se("bad padding");a-=t}}const o=new Uint8Array(a);return a>0&&o.set(e.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class Pe{static encrypt(e,t,r){return new Pe(t,r).encrypt(e)}static decrypt(e,t,r){return new Pe(t,r).decrypt(e)}constructor(e,t,r){this.aes=r||new De(e,t,!0,"CFB"),delete this.aes.padding}encrypt(e){return ve(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return ve(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const Ue=T.getWebCrypto(),xe=T.getNodeCrypto(),Qe=xe?xe.getCiphers():[],Re={idea:Qe.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Qe.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Qe.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Qe.includes("bf-cfb")?"bf-cfb":void 0,aes128:Qe.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Qe.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Qe.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Me{constructor(e,t,r){const{blockSize:i}=re(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=re(e);return Ue.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Ue.importKey("raw",this.key,r,!1,["encrypt"]);const i=await Ue.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(i).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,i=T.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),n=T.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return Te(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(e.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const t=this.nextBlock;i=await this._runCBC(this.prevBlock),Te(i,t),this.prevBlock=i.slice(),this.i=0;const n=e.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);Te(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(T.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return Te(t,e),this.clearSensitiveData(),t}}function Te(e,t){const r=Math.min(e.length,t.length);for(let i=0;i<r;i++)e[i]=e[i]^t[i]}var Le=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i){const n=Q.read(Q.symmetric,e);if(xe&&Re[n])return function(e,t,r,i){const n=Q.read(Q.symmetric,e),s=new xe.createDecipheriv(Re[n],t,i);return b(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(T.isAES(e))return function(e,t,r,i){if(T.isStream(r)){const e=new Pe(t,i);return b(r,(t=>e.aes.AES_Decrypt_process(t)),(()=>e.aes.AES_Decrypt_finish()))}return Pe.decrypt(r,t,i)}(0,t,r,i);const s=new(await X(e))(t),a=s.blockSize;let o=i,c=new Uint8Array;const h=e=>{e&&(c=T.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,i=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[i++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,i)};return b(r,h,h)},encrypt:async function(e,t,r,i,n){const s=Q.read(Q.symmetric,e);if(T.getNodeCrypto()&&Re[s])return function(e,t,r,i){const n=Q.read(Q.symmetric,e),s=new xe.createCipheriv(Re[n],t,i);return b(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(T.isAES(e))return async function(e,t,r,i){if(Ue&&await Me.isSupported(e)){const n=new Me(e,t,i);return T.isStream(r)?b(r,(e=>n.encryptChunk(e)),(()=>n.finish())):n.encrypt(r)}{const e=new Pe(t,i);return b(r,(t=>e.aes.AES_Encrypt_process(t)),(()=>e.aes.AES_Encrypt_finish()))}}(e,t,r,i);const a=new(await X(e))(t),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=e=>{e&&(h=T.concatUint8Array([h,e]));const t=new Uint8Array(h.length);let r,i=0;for(;e?h.length>=o:h.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^e[r],t[i++]=c[r];h=h.subarray(o)}return t.subarray(0,i)};return b(r,u,u)}});class _e{static encrypt(e,t,r){return new _e(t,r).encrypt(e)}static decrypt(e,t,r){return new _e(t,r).encrypt(e)}constructor(e,t,r){this.aes=r||new De(e,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(t)}encrypt(e){return ve(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return ve(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(e,t,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new Be("illegal counter size");let e=Math.pow(2,r)-1;i.set_mask(0,0,e/4294967296|0,0|e)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===e)throw Error("nonce is required");{let t=e.length;if(!t||t>16)throw new Be("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(e),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==t){if(t<0||t>=Math.pow(2,r))throw new Be("illegal counter value");i.set_counter(0,0,t/4294967296|0,0|t)}}}class Ne{static encrypt(e,t,r=!0,i){return new Ne(t,i,r).encrypt(e)}static decrypt(e,t,r=!0,i){return new Ne(t,i,r).decrypt(e)}constructor(e,t,r=!0,i){this.aes=i||new De(e,t,r,"CBC")}encrypt(e){return ve(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return ve(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const Fe=T.getWebCrypto(),He=T.getNodeCrypto(),Oe=16;function ze(e,t){const r=e.length-Oe;for(let i=0;i<Oe;i++)e[i+r]^=t[i];return e}const Ge=new Uint8Array(Oe);async function je(e){const t=await async function(e){if(T.getNodeCrypto())return async function(t){const r=new He.createCipheriv("aes-"+8*e.length+"-cbc",e,Ge).update(t);return new Uint8Array(r)};if(T.getWebCrypto())try{return e=await Fe.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await Fe.encrypt({name:"AES-CBC",iv:Ge,length:8*Oe},e,t);return new Uint8Array(r).subarray(0,r.byteLength-Oe)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;T.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return Ne.encrypt(t,e,!1,Ge)}}(e),r=T.double(await t(Ge)),i=T.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%Oe==0)return ze(e,t);const i=new Uint8Array(e.length+(Oe-e.length%Oe));return i.set(e),i[e.length]=128,ze(i,r)}(e,r,i))).subarray(-Oe)}}const qe=T.getWebCrypto(),Ve=T.getNodeCrypto(),Ye=T.getNodeBuffer(),Je=16,We=Je,Ze=Je,$e=new Uint8Array(Je),Xe=new Uint8Array(Je);Xe[Je-1]=1;const et=new Uint8Array(Je);async function tt(e){const t=await je(e);return function(e,r){return t(T.concatUint8Array([e,r]))}}async function rt(e){if(T.getNodeCrypto())return async function(t,r){const i=new Ve.createCipheriv("aes-"+8*e.length+"-ctr",e,r),n=Ye.concat([i.update(t),i.final()]);return new Uint8Array(n)};if(T.getWebCrypto())try{const t=await qe.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const i=await qe.encrypt({name:"AES-CTR",counter:r,length:8*Je},t,e);return new Uint8Array(i)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;T.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return _e.encrypt(t,e,r)}}async function it(e,t){if(e!==Q.symmetric.aes128&&e!==Q.symmetric.aes192&&e!==Q.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([tt(t),rt(t)]);return{encrypt:async function(e,t,n){const[s,a]=await Promise.all([r($e,t),r(Xe,n)]),o=await i(e,s),c=await r(et,o);for(let e=0;e<Ze;e++)c[e]^=a[e]^s[e];return T.concatUint8Array([o,c])},decrypt:async function(e,t,n){if(e.length<Ze)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-Ze),a=e.subarray(-Ze),[o,c,h]=await Promise.all([r($e,t),r(Xe,n),r(et,s)]),u=h;for(let e=0;e<Ze;e++)u[e]^=c[e]^o[e];if(!T.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}et[Je-1]=2,it.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},it.blockLength=Je,it.ivLength=We,it.tagLength=Ze;const nt=16,st=16;function at(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function ot(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function ct(e,t){return ot(e.slice(),t)}const ht=new Uint8Array(nt),ut=new Uint8Array([1]);async function lt(e,t){const{keySize:r}=re(e);if(!T.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let i=0;const n=e=>Ne.encrypt(e,t,!1),s=e=>Ne.decrypt(e,t,!1);let a;function o(e,t,r,s){const o=t.length/nt|0;!function(e,t){const r=T.nbits(Math.max(e.length,t.length)/nt|0)-1;for(let e=i+1;e<=r;e++)a[e]=T.double(a[e-1]);i=r}(t,s);const c=T.concatUint8Array([ht.subarray(0,15-r.length),ut,r]),h=63&c[15];c[15]&=192;const u=n(c),l=T.concatUint8Array([u,ct(u.subarray(0,8),u.subarray(1,9))]),y=T.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),f=new Uint8Array(nt),g=new Uint8Array(t.length+st);let p,d=0;for(p=0;p<o;p++)ot(y,a[at(p+1)]),g.set(ot(e(ct(y,t)),y),d),ot(f,e===n?t:g.subarray(d)),t=t.subarray(nt),d+=nt;if(t.length){ot(y,a.x);const r=n(y);g.set(ct(t,r),d);const i=new Uint8Array(nt);i.set(e===n?t:g.subarray(d,-16),0),i[t.length]=128,ot(f,i),d+=t.length}const A=ot(n(ot(ot(f,y),a.$)),function(e){if(!e.length)return ht;const t=e.length/nt|0,r=new Uint8Array(nt),i=new Uint8Array(nt);for(let s=0;s<t;s++)ot(r,a[at(s+1)]),ot(i,n(ct(r,e))),e=e.subarray(nt);if(e.length){ot(r,a.x);const t=new Uint8Array(nt);t.set(e,0),t[e.length]=128,ot(t,r),ot(i,n(t))}return i}(s));return g.set(A,d),g}return function(){const e=n(ht),t=T.double(e);a=[],a[0]=T.double(t),a.x=e,a.$=t}(),{encrypt:async function(e,t,r){return o(n,e,t,r)},decrypt:async function(e,t,r){if(e.length<st)throw Error("Invalid OCB ciphertext");const i=e.subarray(-16);e=e.subarray(0,-16);const n=o(s,e,t,r);if(T.equalsUint8Array(i,n.subarray(-16)))return n.subarray(0,-16);throw Error("Authentication tag mismatch")}}}lt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},lt.blockLength=nt,lt.ivLength=15,lt.tagLength=st;const yt=68719476704;class ft{static encrypt(e,t,r,i,n){return new ft(t,r,i,n).encrypt(e)}static decrypt(e,t,r,i,n){return new ft(t,r,i,n).decrypt(e)}constructor(e,t,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new De(e,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new Be("illegal tagSize value");const o=t.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(t),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(be.MAC.GCM,be.HEAP_DATA,16),s.get_iv(be.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(t),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>yt)throw new Be("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(e){return this.AES_GCM_encrypt(e)}decrypt(e){return this.AES_GCM_decrypt(e)}AES_GCM_Encrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>yt)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=ke(n,a+o,e,t,r),o+=u,t+=u,r-=u,u=i.cipher(be.ENC.CTR,be.HEAP_DATA+a,o),u=i.mac(be.MAC.GCM,be.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);e.cipher(be.ENC.CTR,be.HEAP_DATA+s,a+15&-16),a&&o.set(t.subarray(s,s+a));let c=a;for(;15&c;c++)t[s+c]=0;e.mac(be.MAC.GCM,be.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return t[0]=0,t[1]=0,t[2]=0,t[3]=h>>>29,t[4]=h>>>21,t[5]=h>>>13&255,t[6]=h>>>5&255,t[7]=h<<3&255,t[8]=t[9]=t[10]=0,t[11]=u>>>29,t[12]=u>>>21&255,t[13]=u>>>13&255,t[14]=u>>>5&255,t[15]=u<<3&255,e.mac(be.MAC.GCM,be.HEAP_DATA,16),e.get_iv(be.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(be.ENC.CTR,be.HEAP_DATA,16),o.set(t.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,y=0;if((s-1<<4)+c+r>yt)throw new RangeError("counter overflow");const f=new Uint8Array(u);for(;r>l;)y=ke(n,o+c,e,t,r-l),c+=y,t+=y,r-=y,y=i.mac(be.MAC.GCM,be.HEAP_DATA+o,y),y=i.cipher(be.DEC.CTR,be.HEAP_DATA+o,y),y&&f.set(n.subarray(o,o+y),h),s+=y>>>4,h+=y,o=0,c=0;return r>0&&(c+=ke(n,0,e,t,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,f}AES_GCM_Decrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new Ie("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(t.subarray(s+o,s+a));let u=o;for(;15&u;u++)t[s+u]=0;e.mac(be.MAC.GCM,be.HEAP_DATA+s,u),e.cipher(be.DEC.CTR,be.HEAP_DATA+s,u),o&&c.set(t.subarray(s,s+o));const l=void 0!==i?i.length:0,y=(n-1<<4)+a-r;t[0]=0,t[1]=0,t[2]=0,t[3]=l>>>29,t[4]=l>>>21,t[5]=l>>>13&255,t[6]=l>>>5&255,t[7]=l<<3&255,t[8]=t[9]=t[10]=0,t[11]=y>>>29,t[12]=y>>>21&255,t[13]=y>>>13&255,t[14]=y>>>5&255,t[15]=y<<3&255,e.mac(be.MAC.GCM,be.HEAP_DATA,16),e.get_iv(be.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(be.ENC.CTR,be.HEAP_DATA,16);let f=0;for(let e=0;e<r;++e)f|=h[e]^t[e];if(f)throw new Se("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(e){const t=this.AES_GCM_Decrypt_process(e),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}AES_GCM_encrypt(e){const t=this.AES_GCM_Encrypt_process(e),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}_gcm_mac_process(e){let{asm:t,heap:r}=this.aes.acquire_asm(),i=0,n=e.length||0,s=0;for(;n>0;){for(s=ke(r,0,e,i,n),i+=s,n-=s;15&s;)r[s++]=0;t.mac(be.MAC.GCM,be.HEAP_DATA,s)}}}const gt=T.getWebCrypto(),pt=T.getNodeCrypto(),dt=T.getNodeBuffer(),At=16,wt="AES-GCM";async function mt(e,t){if(e!==Q.symmetric.aes128&&e!==Q.symmetric.aes192&&e!==Q.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(T.getNodeCrypto())return{encrypt:async function(e,r,i=new Uint8Array){const n=new pt.createCipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i);const s=dt.concat([n.update(e),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,i=new Uint8Array){const n=new pt.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i),n.setAuthTag(e.slice(e.length-At,e.length));const s=dt.concat([n.update(e.slice(0,e.length-At)),n.final()]);return new Uint8Array(s)}};if(T.getWebCrypto())try{const e=await gt.importKey("raw",t,{name:wt},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return ft.encrypt(i,t,n,s);const a=await gt.encrypt({name:wt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===At)return ft.decrypt(i,t,n,s);try{const t=await gt.decrypt({name:wt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;T.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,i){return ft.encrypt(e,t,r,i)},decrypt:async function(e,r,i){return ft.decrypt(e,t,r,i)}}}mt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},mt.blockLength=16,mt.ivLength=12,mt.tagLength=At;var bt={cfb:Le,gcm:mt,experimentalGCM:mt,eax:it,ocb:lt};const Et=BigInt(0),kt=BigInt(1);function vt(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function It(e,t){const r=e%t;return r<Et?r+t:r}function Bt(e,t,r){if(r===Et)throw Error("Modulo cannot be zero");if(r===kt)return BigInt(0);if(t<Et)throw Error("Unsopported negative exponent");let i=t,n=e;n%=r;let s=BigInt(1);for(;i>Et;){const e=i&kt;i>>=kt;s=e?s*n%r:s,n=n*n%r}return s}function St(e){return e>=Et?e:-e}function Ct(e,t){const{gcd:r,x:i}=function(e,t){let r=BigInt(0),i=BigInt(1),n=BigInt(1),s=BigInt(0),a=St(e),o=St(t);const c=e<Et,h=t<Et;for(;o!==Et;){const e=a/o;let t=r;r=n-e*r,n=t,t=i,i=s-e*i,s=t,t=o,o=a%o,a=t}return{x:c?-n:n,y:h?-s:s,gcd:a}}(e,t);if(r!==kt)throw Error("Inverse does not exist");return It(i+t,t)}function Kt(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function Dt(e,t){return(e>>BigInt(t)&kt)===Et?0:1}function Pt(e){const t=e<Et?BigInt(-1):Et;let r=1,i=e;for(;(i>>=kt)!==t;)r++;return r}function Ut(e){const t=e<Et?BigInt(-1):Et,r=BigInt(8);let i=1,n=e;for(;(n>>=r)!==t;)i++;return i}function xt(e,t="be",r){let i=e.toString(16);i.length%2==1&&(i="0"+i);const n=i.length/2,s=new Uint8Array(r||n),a=r?r-n:0;let o=0;for(;o<n;)s[o+a]=parseInt(i.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const Qt=T.getNodeCrypto();function Rt(e){const t=new Uint8Array(e);if(Qt){const e=Qt.randomBytes(t.length);t.set(e)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(t)}return t}function Mt(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return It(vt(Rt(Ut(r)+8)),r)+e}var Tt=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Mt,getRandomBytes:Rt});const Lt=BigInt(1);function _t(e,t,r){const i=BigInt(30),n=Lt<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=Mt(n,n<<Lt),o=Kt(It(a,i));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,Pt(a)>e&&(a=It(a,n<<Lt),a+=n,o=Kt(It(a,i)))}while(!Nt(a,t,r));return a}function Nt(e,t,r){return(!t||function(e,t){let r=e,i=t;for(;i!==Et;){const e=i;i=r%i,r=e}return r}(e-Lt,t)===Lt)&&(!!function(e){const t=BigInt(0);return Ft.every((r=>It(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return Bt(t,e-Lt,e)===Lt}(e)&&!!function(e,t,r){const i=Pt(e);t||(t=Math.max(1,i/48|0));const n=e-Lt;let s=0;for(;!Dt(n,s);)s++;const a=e>>BigInt(s);for(;t>0;t--){let t,r=Bt(Mt(BigInt(2),n),a,e);if(r!==Lt&&r!==n){for(t=1;t<s;t++){if(r=It(r*r,e),r===Lt)return!1;if(r===n)break}if(t===s)return!1}}return!0}(e,r)))}const Ft=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const Ht=[];function Ot(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const i=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const i=Rt(e-r);for(let e=0;e<i.length;e++)0!==i[e]&&(t[r++]=i[e])}return t}(t-r-3),n=new Uint8Array(t);return n[1]=2,n.set(i,2),n.set(e,t-r),n}function zt(e,t){let r=2,i=1;for(let t=r;t<e.length;t++)i&=0!==e[t],r+=i;const n=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&n>=8&!i;if(t)return T.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Gt(e,t,r){let i;if(t.length!==me.getHashByteLength(e))throw Error("Invalid hash length");const n=new Uint8Array(Ht[e].length);for(i=0;i<Ht[e].length;i++)n[i]=Ht[e][i];const s=n.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(t,r-t.length),o}Ht[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Ht[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Ht[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Ht[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Ht[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Ht[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Ht[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var jt=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:zt,emeEncode:Ot,emsaEncode:Gt});const qt=T.getWebCrypto(),Vt=T.getNodeCrypto(),Yt=BigInt(1);async function Jt(e,t,r,i,n,s){const a=vt(i),o=vt(n),c=vt(r);let h=It(c,o-Yt),u=It(c,a-Yt);return u=xt(u),h=xt(h),{kty:"RSA",n:z(e),e:z(t),d:z(r),p:z(n),q:z(i),dp:z(h),dq:z(u),qi:z(s),ext:!0}}function Wt(e,t){return{kty:"RSA",n:z(e),e:z(t),ext:!0}}function Zt(e,t){return{n:O(e.n),e:xt(t),d:O(e.d),p:O(e.q),q:O(e.p),u:O(e.qi)}}var $t=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a,o){if(T.getNodeCrypto()&&!o)try{return await async function(e,t,r,i,n,s,a){const o=await Jt(t,r,i,n,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Vt.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Vt.privateDecrypt(c,e))}catch(e){throw Error("Decryption error")}}(e,t,r,i,n,s,a)}catch(e){T.printDebugError(e)}return async function(e,t,r,i,n,s,a,o){if(e=vt(e),t=vt(t),r=vt(r),i=vt(i),n=vt(n),s=vt(s),a=vt(a),e>=t)throw Error("Data too large.");const c=It(i,s-Yt),h=It(i,n-Yt),u=Mt(BigInt(2),t),l=Bt(Ct(u,t),r,t);e=It(e*l,t);const y=Bt(e,h,n),f=Bt(e,c,s),g=It(a*(f-y),s);let p=g*n+y;return p=It(p*u,t),zt(xt(p,"be",Ut(t)),o)}(e,t,r,i,n,s,a,o)},encrypt:async function(e,t,r){return T.getNodeCrypto()?async function(e,t,r){const i=Wt(t,r),n={key:i,format:"jwk",type:"pkcs1",padding:Vt.constants.RSA_PKCS1_PADDING};return new Uint8Array(Vt.publicEncrypt(n,e))}(e,t,r):async function(e,t,r){if(t=vt(t),e=vt(Ot(e,Ut(t))),r=vt(r),e>=t)throw Error("Message size cannot exceed modulus size");return xt(Bt(e,r,t),"be",Ut(t))}(e,t,r)},generate:async function(e,t){if(t=BigInt(t),T.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:xt(t),hash:{name:"SHA-1"}},i=await qt.generateKey(r,!0,["sign","verify"]);return Zt(await qt.exportKey("jwk",i.privateKey),t)}if(T.getNodeCrypto()){const r={modulusLength:e,publicExponent:Kt(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},i=await new Promise(((e,t)=>{Vt.generateKeyPair("rsa",r,((r,i,n)=>{r?t(r):e(n)}))}));return Zt(i,t)}let r,i,n;do{i=_t(e-(e>>1),t,40),r=_t(e>>1,t,40),n=r*i}while(Pt(n)!==e);const s=(r-Yt)*(i-Yt);return i<r&&([r,i]=[i,r]),{n:xt(n),e:xt(t),d:xt(Ct(t,s)),p:xt(r),q:xt(i),u:xt(Ct(r,i))}},sign:async function(e,t,r,i,n,s,a,o,c){if(t&&!T.isStream(t))if(T.getWebCrypto())try{return await async function(e,t,r,i,n,s,a,o){const c=await Jt(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},u=await qt.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await qt.sign("RSASSA-PKCS1-v1_5",u,t))}(Q.read(Q.webHash,e),t,r,i,n,s,a,o)}catch(e){T.printDebugError(e)}else if(T.getNodeCrypto())return async function(e,t,r,i,n,s,a,o){const c=Vt.createSign(Q.read(Q.hash,e));c.write(t),c.end();const h=await Jt(r,i,n,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(e,t,r,i,n,s,a,o);return async function(e,t,r,i){t=vt(t);const n=vt(Gt(e,i,Ut(t)));if(r=vt(r),n>=t)throw Error("Message size cannot exceed modulus size");return xt(Bt(n,r,t),"be",Ut(t))}(e,r,n,c)},validateParams:async function(e,t,r,i,n,s){if(e=vt(e),(i=vt(i))*(n=vt(n))!==e)return!1;const a=BigInt(2);if(It(i*(s=vt(s)),n)!==BigInt(1))return!1;t=vt(t),r=vt(r);const o=Mt(a,a<<BigInt(Math.floor(Pt(e)/3))),c=o*r*t;return!(It(c,i-Yt)!==o||It(c,n-Yt)!==o)},verify:async function(e,t,r,i,n,s){if(t&&!T.isStream(t))if(T.getWebCrypto())try{return await async function(e,t,r,i,n){const s=Wt(i,n),a=await qt.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return qt.verify("RSASSA-PKCS1-v1_5",a,r,t)}(Q.read(Q.webHash,e),t,r,i,n)}catch(e){T.printDebugError(e)}else if(T.getNodeCrypto())return async function(e,t,r,i,n){const s=Wt(i,n),a={key:s,format:"jwk",type:"pkcs1"},o=Vt.createVerify(Q.read(Q.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch(e){return!1}}(e,t,r,i,n);return async function(e,t,r,i,n){if(r=vt(r),t=vt(t),i=vt(i),t>=r)throw Error("Signature size cannot exceed modulus size");const s=xt(Bt(t,i,r),"be",Ut(r)),a=Gt(e,n,Ut(r));return T.equalsUint8Array(s,a)}(e,r,i,n,s)}});const Xt=BigInt(1);var er=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){return e=vt(e),t=vt(t),r=vt(r),zt(xt(It(Ct(Bt(e,i=vt(i),r),r)*t,r),"be",Ut(r)),n)},encrypt:async function(e,t,r,i){t=vt(t),r=vt(r),i=vt(i);const n=vt(Ot(e,Ut(t))),s=Mt(Xt,t-Xt);return{c1:xt(Bt(r,s,t)),c2:xt(It(Bt(i,s,t)*n,t))}},validateParams:async function(e,t,r,i){if(e=vt(e),t=vt(t),r=vt(r),t<=Xt||t>=e)return!1;const n=BigInt(Pt(e));if(n<BigInt(1023))return!1;if(Bt(t,e-Xt,e)!==Xt)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=It(s*t,e),s===Xt)return!1;a++}i=vt(i);const h=Mt(o<<n-Xt,o<<n);return r===Bt(t,(e-Xt)*h+i,e)}});const tr="object"==typeof t&&"crypto"in t?t.crypto:void 0,rr={};var ir=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},nr=function(){throw Error("no PRNG")},sr=new Uint8Array(32);sr[0]=9;var ar=ir(),or=ir([1]),cr=ir([56129,1]),hr=ir([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),ur=ir([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),lr=ir([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),yr=ir([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),fr=ir([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function gr(e,t,r,i){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=i>>24&255,e[t+5]=i>>16&255,e[t+6]=i>>8&255,e[t+7]=255&i}function pr(e,t,r,i){return function(e,t,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=e[t+s]^r[i+s];return(1&a-1>>>8)-1}(e,t,r,i,32)}function dr(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function Ar(e){var t,r,i=1;for(t=0;t<16;t++)r=e[t]+i+65535,i=Math.floor(r/65536),e[t]=r-65536*i;e[0]+=i-1+37*(i-1)}function wr(e,t,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(e[s]^t[s]),e[s]^=i,t[s]^=i}function mr(e,t){var r,i,n,s=ir(),a=ir();for(r=0;r<16;r++)a[r]=t[r];for(Ar(a),Ar(a),Ar(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,wr(a,s,1-n)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function br(e,t){var r=new Uint8Array(32),i=new Uint8Array(32);return mr(r,e),mr(i,t),pr(r,0,i,0)}function Er(e){var t=new Uint8Array(32);return mr(t,e),1&t[0]}function kr(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function vr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]+r[i]}function Ir(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]-r[i]}function Br(e,t,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0,I=0,B=0,S=0,C=0,K=0,D=0,P=0,U=0,x=0,Q=0,R=0,M=0,T=r[0],L=r[1],_=r[2],N=r[3],F=r[4],H=r[5],O=r[6],z=r[7],G=r[8],j=r[9],q=r[10],V=r[11],Y=r[12],J=r[13],W=r[14],Z=r[15];s+=(i=t[0])*T,a+=i*L,o+=i*_,c+=i*N,h+=i*F,u+=i*H,l+=i*O,y+=i*z,f+=i*G,g+=i*j,p+=i*q,d+=i*V,A+=i*Y,w+=i*J,m+=i*W,b+=i*Z,a+=(i=t[1])*T,o+=i*L,c+=i*_,h+=i*N,u+=i*F,l+=i*H,y+=i*O,f+=i*z,g+=i*G,p+=i*j,d+=i*q,A+=i*V,w+=i*Y,m+=i*J,b+=i*W,E+=i*Z,o+=(i=t[2])*T,c+=i*L,h+=i*_,u+=i*N,l+=i*F,y+=i*H,f+=i*O,g+=i*z,p+=i*G,d+=i*j,A+=i*q,w+=i*V,m+=i*Y,b+=i*J,E+=i*W,k+=i*Z,c+=(i=t[3])*T,h+=i*L,u+=i*_,l+=i*N,y+=i*F,f+=i*H,g+=i*O,p+=i*z,d+=i*G,A+=i*j,w+=i*q,m+=i*V,b+=i*Y,E+=i*J,k+=i*W,v+=i*Z,h+=(i=t[4])*T,u+=i*L,l+=i*_,y+=i*N,f+=i*F,g+=i*H,p+=i*O,d+=i*z,A+=i*G,w+=i*j,m+=i*q,b+=i*V,E+=i*Y,k+=i*J,v+=i*W,I+=i*Z,u+=(i=t[5])*T,l+=i*L,y+=i*_,f+=i*N,g+=i*F,p+=i*H,d+=i*O,A+=i*z,w+=i*G,m+=i*j,b+=i*q,E+=i*V,k+=i*Y,v+=i*J,I+=i*W,B+=i*Z,l+=(i=t[6])*T,y+=i*L,f+=i*_,g+=i*N,p+=i*F,d+=i*H,A+=i*O,w+=i*z,m+=i*G,b+=i*j,E+=i*q,k+=i*V,v+=i*Y,I+=i*J,B+=i*W,S+=i*Z,y+=(i=t[7])*T,f+=i*L,g+=i*_,p+=i*N,d+=i*F,A+=i*H,w+=i*O,m+=i*z,b+=i*G,E+=i*j,k+=i*q,v+=i*V,I+=i*Y,B+=i*J,S+=i*W,C+=i*Z,f+=(i=t[8])*T,g+=i*L,p+=i*_,d+=i*N,A+=i*F,w+=i*H,m+=i*O,b+=i*z,E+=i*G,k+=i*j,v+=i*q,I+=i*V,B+=i*Y,S+=i*J,C+=i*W,K+=i*Z,g+=(i=t[9])*T,p+=i*L,d+=i*_,A+=i*N,w+=i*F,m+=i*H,b+=i*O,E+=i*z,k+=i*G,v+=i*j,I+=i*q,B+=i*V,S+=i*Y,C+=i*J,K+=i*W,D+=i*Z,p+=(i=t[10])*T,d+=i*L,A+=i*_,w+=i*N,m+=i*F,b+=i*H,E+=i*O,k+=i*z,v+=i*G,I+=i*j,B+=i*q,S+=i*V,C+=i*Y,K+=i*J,D+=i*W,P+=i*Z,d+=(i=t[11])*T,A+=i*L,w+=i*_,m+=i*N,b+=i*F,E+=i*H,k+=i*O,v+=i*z,I+=i*G,B+=i*j,S+=i*q,C+=i*V,K+=i*Y,D+=i*J,P+=i*W,U+=i*Z,A+=(i=t[12])*T,w+=i*L,m+=i*_,b+=i*N,E+=i*F,k+=i*H,v+=i*O,I+=i*z,B+=i*G,S+=i*j,C+=i*q,K+=i*V,D+=i*Y,P+=i*J,U+=i*W,x+=i*Z,w+=(i=t[13])*T,m+=i*L,b+=i*_,E+=i*N,k+=i*F,v+=i*H,I+=i*O,B+=i*z,S+=i*G,C+=i*j,K+=i*q,D+=i*V,P+=i*Y,U+=i*J,x+=i*W,Q+=i*Z,m+=(i=t[14])*T,b+=i*L,E+=i*_,k+=i*N,v+=i*F,I+=i*H,B+=i*O,S+=i*z,C+=i*G,K+=i*j,D+=i*q,P+=i*V,U+=i*Y,x+=i*J,Q+=i*W,R+=i*Z,b+=(i=t[15])*T,a+=38*(k+=i*_),o+=38*(v+=i*N),c+=38*(I+=i*F),h+=38*(B+=i*H),u+=38*(S+=i*O),l+=38*(C+=i*z),y+=38*(K+=i*G),f+=38*(D+=i*j),g+=38*(P+=i*q),p+=38*(U+=i*V),d+=38*(x+=i*Y),A+=38*(Q+=i*J),w+=38*(R+=i*W),m+=38*(M+=i*Z),s=(i=(s+=38*(E+=i*L))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=h,e[5]=u,e[6]=l,e[7]=y,e[8]=f,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function Sr(e,t){Br(e,t,t)}function Cr(e,t){var r,i=ir();for(r=0;r<16;r++)i[r]=t[r];for(r=253;r>=0;r--)Sr(i,i),2!==r&&4!==r&&Br(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}function Kr(e,t,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=ir(),c=ir(),h=ir(),u=ir(),l=ir(),y=ir();for(n=0;n<31;n++)s[n]=t[n];for(s[31]=127&t[31]|64,s[0]&=248,kr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)wr(o,c,i=s[n>>>3]>>>(7&n)&1),wr(h,u,i),vr(l,o,h),Ir(o,o,h),vr(h,c,u),Ir(c,c,u),Sr(u,l),Sr(y,o),Br(o,h,o),Br(h,c,l),vr(l,o,h),Ir(o,o,h),Sr(c,o),Ir(h,u,y),Br(o,h,cr),vr(o,o,u),Br(h,h,o),Br(o,u,y),Br(u,c,a),Sr(c,l),wr(o,c,i),wr(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var f=a.subarray(32),g=a.subarray(16);return Cr(f,f),Br(g,g,f),mr(e,g),0}function Dr(e,t){return Kr(e,t,sr)}var Pr=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function Ur(e,t,r,i){for(var n,s,a,o,c,h,u,l,y,f,g,p,d,A,w,m,b,E,k,v,I,B,S,C,K,D,P=new Int32Array(16),U=new Int32Array(16),x=e[0],Q=e[1],R=e[2],M=e[3],T=e[4],L=e[5],_=e[6],N=e[7],F=t[0],H=t[1],O=t[2],z=t[3],G=t[4],j=t[5],q=t[6],V=t[7],Y=0;i>=128;){for(k=0;k<16;k++)v=8*k+Y,P[k]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],U[k]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(k=0;k<80;k++)if(n=x,s=Q,a=R,o=M,c=T,h=L,u=_,N,y=F,f=H,g=O,p=z,d=G,A=j,w=q,V,S=65535&(B=V),C=B>>>16,K=65535&(I=N),D=I>>>16,S+=65535&(B=(G>>>14|T<<18)^(G>>>18|T<<14)^(T>>>9|G<<23)),C+=B>>>16,K+=65535&(I=(T>>>14|G<<18)^(T>>>18|G<<14)^(G>>>9|T<<23)),D+=I>>>16,S+=65535&(B=G&j^~G&q),C+=B>>>16,K+=65535&(I=T&L^~T&_),D+=I>>>16,I=Pr[2*k],S+=65535&(B=Pr[2*k+1]),C+=B>>>16,K+=65535&I,D+=I>>>16,I=P[k%16],C+=(B=U[k%16])>>>16,K+=65535&I,D+=I>>>16,K+=(C+=(S+=65535&B)>>>16)>>>16,S=65535&(B=E=65535&S|C<<16),C=B>>>16,K=65535&(I=b=65535&K|(D+=K>>>16)<<16),D=I>>>16,S+=65535&(B=(F>>>28|x<<4)^(x>>>2|F<<30)^(x>>>7|F<<25)),C+=B>>>16,K+=65535&(I=(x>>>28|F<<4)^(F>>>2|x<<30)^(F>>>7|x<<25)),D+=I>>>16,C+=(B=F&H^F&O^H&O)>>>16,K+=65535&(I=x&Q^x&R^Q&R),D+=I>>>16,l=65535&(K+=(C+=(S+=65535&B)>>>16)>>>16)|(D+=K>>>16)<<16,m=65535&S|C<<16,S=65535&(B=p),C=B>>>16,K=65535&(I=o),D=I>>>16,C+=(B=E)>>>16,K+=65535&(I=b),D+=I>>>16,Q=n,R=s,M=a,T=o=65535&(K+=(C+=(S+=65535&B)>>>16)>>>16)|(D+=K>>>16)<<16,L=c,_=h,N=u,x=l,H=y,O=f,z=g,G=p=65535&S|C<<16,j=d,q=A,V=w,F=m,k%16==15)for(v=0;v<16;v++)I=P[v],S=65535&(B=U[v]),C=B>>>16,K=65535&I,D=I>>>16,I=P[(v+9)%16],S+=65535&(B=U[(v+9)%16]),C+=B>>>16,K+=65535&I,D+=I>>>16,b=P[(v+1)%16],S+=65535&(B=((E=U[(v+1)%16])>>>1|b<<31)^(E>>>8|b<<24)^(E>>>7|b<<25)),C+=B>>>16,K+=65535&(I=(b>>>1|E<<31)^(b>>>8|E<<24)^b>>>7),D+=I>>>16,b=P[(v+14)%16],C+=(B=((E=U[(v+14)%16])>>>19|b<<13)^(b>>>29|E<<3)^(E>>>6|b<<26))>>>16,K+=65535&(I=(b>>>19|E<<13)^(E>>>29|b<<3)^b>>>6),D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,P[v]=65535&K|D<<16,U[v]=65535&S|C<<16;S=65535&(B=F),C=B>>>16,K=65535&(I=x),D=I>>>16,I=e[0],C+=(B=t[0])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[0]=x=65535&K|D<<16,t[0]=F=65535&S|C<<16,S=65535&(B=H),C=B>>>16,K=65535&(I=Q),D=I>>>16,I=e[1],C+=(B=t[1])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[1]=Q=65535&K|D<<16,t[1]=H=65535&S|C<<16,S=65535&(B=O),C=B>>>16,K=65535&(I=R),D=I>>>16,I=e[2],C+=(B=t[2])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[2]=R=65535&K|D<<16,t[2]=O=65535&S|C<<16,S=65535&(B=z),C=B>>>16,K=65535&(I=M),D=I>>>16,I=e[3],C+=(B=t[3])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[3]=M=65535&K|D<<16,t[3]=z=65535&S|C<<16,S=65535&(B=G),C=B>>>16,K=65535&(I=T),D=I>>>16,I=e[4],C+=(B=t[4])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[4]=T=65535&K|D<<16,t[4]=G=65535&S|C<<16,S=65535&(B=j),C=B>>>16,K=65535&(I=L),D=I>>>16,I=e[5],C+=(B=t[5])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[5]=L=65535&K|D<<16,t[5]=j=65535&S|C<<16,S=65535&(B=q),C=B>>>16,K=65535&(I=_),D=I>>>16,I=e[6],C+=(B=t[6])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[6]=_=65535&K|D<<16,t[6]=q=65535&S|C<<16,S=65535&(B=V),C=B>>>16,K=65535&(I=N),D=I>>>16,I=e[7],C+=(B=t[7])>>>16,K+=65535&I,D+=I>>>16,D+=(K+=(C+=(S+=65535&B)>>>16)>>>16)>>>16,e[7]=N=65535&K|D<<16,t[7]=V=65535&S|C<<16,Y+=128,i-=128}return i}function xr(e,t,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,Ur(n,s,t,r),r%=128,i=0;i<r;i++)a[i]=t[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,gr(a,r-8,o/536870912|0,o<<3),Ur(n,s,a,r),i=0;i<8;i++)gr(e,8*i,n[i],s[i]);return 0}function Qr(e,t){var r=ir(),i=ir(),n=ir(),s=ir(),a=ir(),o=ir(),c=ir(),h=ir(),u=ir();Ir(r,e[1],e[0]),Ir(u,t[1],t[0]),Br(r,r,u),vr(i,e[0],e[1]),vr(u,t[0],t[1]),Br(i,i,u),Br(n,e[3],t[3]),Br(n,n,ur),Br(s,e[2],t[2]),vr(s,s,s),Ir(a,i,r),Ir(o,s,n),vr(c,s,n),vr(h,i,r),Br(e[0],a,o),Br(e[1],h,c),Br(e[2],c,o),Br(e[3],a,h)}function Rr(e,t,r){var i;for(i=0;i<4;i++)wr(e[i],t[i],r)}function Mr(e,t){var r=ir(),i=ir(),n=ir();Cr(n,t[2]),Br(r,t[0],n),Br(i,t[1],n),mr(e,i),e[31]^=Er(r)<<7}function Tr(e,t,r){var i,n;for(dr(e[0],ar),dr(e[1],or),dr(e[2],or),dr(e[3],ar),n=255;n>=0;--n)Rr(e,t,i=r[n/8|0]>>(7&n)&1),Qr(t,e),Qr(e,e),Rr(e,t,i)}function Lr(e,t){var r=[ir(),ir(),ir(),ir()];dr(r[0],lr),dr(r[1],yr),dr(r[2],or),Br(r[3],lr,yr),Tr(e,r,t)}function _r(e,t,r){var i,n=new Uint8Array(64),s=[ir(),ir(),ir(),ir()];for(r||nr(t,32),xr(n,t,32),n[0]&=248,n[31]&=127,n[31]|=64,Lr(s,n),Mr(e,s),i=0;i<32;i++)t[i+32]=e[i];return 0}var Nr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function Fr(e,t){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)t[n]+=r-16*t[i]*Nr[n-(i-32)],r=Math.floor((t[n]+128)/256),t[n]-=256*r;t[n]+=r,t[i]=0}for(r=0,n=0;n<32;n++)t[n]+=r-(t[31]>>4)*Nr[n],r=t[n]>>8,t[n]&=255;for(n=0;n<32;n++)t[n]-=r*Nr[n];for(i=0;i<32;i++)t[i+1]+=t[i]>>8,e[i]=255&t[i]}function Hr(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;Fr(e,r)}function Or(e,t){var r=ir(),i=ir(),n=ir(),s=ir(),a=ir(),o=ir(),c=ir();return dr(e[2],or),kr(e[1],t),Sr(n,e[1]),Br(s,n,hr),Ir(n,n,e[2]),vr(s,e[2],s),Sr(a,s),Sr(o,a),Br(c,o,a),Br(r,c,n),Br(r,r,s),function(e,t){var r,i=ir();for(r=0;r<16;r++)i[r]=t[r];for(r=250;r>=0;r--)Sr(i,i),1!==r&&Br(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}(r,r),Br(r,r,n),Br(r,r,s),Br(r,r,s),Br(e[0],r,s),Sr(i,e[0]),Br(i,i,s),br(i,n)&&Br(e[0],e[0],fr),Sr(i,e[0]),Br(i,i,s),br(i,n)?-1:(Er(e[0])===t[31]>>7&&Ir(e[0],ar,e[0]),Br(e[3],e[0],e[1]),0)}var zr=64;function Gr(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}rr.scalarMult=function(e,t){if(Gr(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return Kr(r,e,t),r},rr.box={},rr.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){nr(t,32),Dr(e,t)}(e,t),{publicKey:e,secretKey:t}},rr.box.keyPair.fromSecretKey=function(e){if(Gr(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return Dr(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},rr.sign=function(e,t){if(Gr(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(zr+e.length);return function(e,t,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[ir(),ir(),ir(),ir()];xr(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)e[64+n]=t[n];for(n=0;n<32;n++)e[32+n]=a[32+n];for(xr(c,e.subarray(32),r+32),Hr(c),Lr(u,c),Mr(e,u),n=32;n<64;n++)e[n]=i[n];for(xr(o,e,r+64),Hr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];Fr(e.subarray(32),h)}(r,e,e.length,t),r},rr.sign.detached=function(e,t){for(var r=rr.sign(e,t),i=new Uint8Array(zr),n=0;n<i.length;n++)i[n]=r[n];return i},rr.sign.detached.verify=function(e,t,r){if(Gr(e,t,r),t.length!==zr)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array(zr+e.length),s=new Uint8Array(zr+e.length);for(i=0;i<zr;i++)n[i]=t[i];for(i=0;i<e.length;i++)n[i+zr]=e[i];return function(e,t,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[ir(),ir(),ir(),ir()],c=[ir(),ir(),ir(),ir()];if(r<64)return-1;if(Or(c,i))return-1;for(n=0;n<r;n++)e[n]=t[n];for(n=0;n<32;n++)e[n+32]=i[n];if(xr(a,e,r),Hr(a),Tr(o,c,a),Lr(c,t.subarray(32)),Qr(o,c),Mr(s,o),r-=64,pr(t,0,s,0)){for(n=0;n<r;n++)e[n]=0;return-1}for(n=0;n<r;n++)e[n]=t[n+64];return r}(s,n,n.length,r)>=0},rr.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return _r(e,t),{publicKey:e,secretKey:t}},rr.sign.keyPair.fromSecretKey=function(e){if(Gr(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},rr.sign.keyPair.fromSeed=function(e){if(Gr(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=e[i];return _r(t,r,!0),{publicKey:t,secretKey:r}},rr.setPRNG=function(e){nr=e},function(){if(tr&&tr.getRandomValues){rr.setPRNG((function(e,t){var r,i=new Uint8Array(t);for(r=0;r<t;r+=65536)tr.getRandomValues(i.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=i[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(i)}))}}();const jr={"2a8648ce3d030107":Q.curve.nistP256,"2b81040022":Q.curve.nistP384,"2b81040023":Q.curve.nistP521,"2b8104000a":Q.curve.secp256k1,"2b06010401da470f01":Q.curve.ed25519Legacy,"2b060104019755010501":Q.curve.curve25519Legacy,"2b2403030208010107":Q.curve.brainpoolP256r1,"2b240303020801010b":Q.curve.brainpoolP384r1,"2b240303020801010d":Q.curve.brainpoolP512r1};class qr{constructor(e){if(e instanceof qr)this.oid=e.oid;else if(T.isArray(e)||T.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return T.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return T.uint8ArrayToHex(this.oid)}getName(){const e=jr[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function Vr(e){let t,r=0;const i=e[0];return i<192?([r]=e,t=1):i<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===i&&(r=T.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function Yr(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):T.concatUint8Array([new Uint8Array([255]),T.writeNumber(e,4)])}function Jr(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function Wr(e){return new Uint8Array([192|e])}function Zr(e,t){return T.concatUint8Array([Wr(e),Yr(t)])}function $r(e){return[Q.packet.literalData,Q.packet.compressedData,Q.packet.symmetricallyEncryptedData,Q.packet.symEncryptedIntegrityProtectedData,Q.packet.aeadEncryptedData].includes(e)}async function Xr(e,t){const r=P(e);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,u=-1;u=0,64&a&&(u=1),u?h=63&a:(h=(63&a)>>2,c=3&a);const l=$r(h);let y,f=null;if(l){if("array"===T.isStream(e)){const e=new ArrayStream;i=U(e),f=e}else{const e=new TransformStream;i=U(e.writable),f=e.readable}n=t({tag:h,packet:f})}else f=[];do{if(u){const e=await r.readByte();if(y=!1,e<192)o=e;else if(e>=192&&e<224)o=(e-192<<8)+await r.readByte()+192;else if(e>223&&e<255){if(o=1<<(31&e),y=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let e=0;for(;;){i&&await i.ready;const{done:t,value:n}=await r.read();if(t){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-e);if(i?await i.write(s):f.push(s),e+=n.length,e>=o){r.unshift(n.subarray(o-e+n.length));break}}}}while(y);const g=await r.peekBytes(l?1/0:2);return i?(await i.ready,await i.close()):(f=T.concatUint8Array(f),await t({tag:h,packet:f})),!g||!g.length}catch(e){if(i)return await i.abort(e),!0;throw e}finally{i&&await n,r.releaseLock()}}class ei extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ei),this.name="UnsupportedError"}}class ti extends ei{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ei),this.name="UnknownPacketError"}}class ri{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}const ii=T.getWebCrypto(),ni=T.getNodeCrypto(),si={[Q.curve.nistP256]:"P-256",[Q.curve.nistP384]:"P-384",[Q.curve.nistP521]:"P-521"},ai=ni?ni.getCurves():[],oi=ni?{[Q.curve.secp256k1]:ai.includes("secp256k1")?"secp256k1":void 0,[Q.curve.nistP256]:ai.includes("prime256v1")?"prime256v1":void 0,[Q.curve.nistP384]:ai.includes("secp384r1")?"secp384r1":void 0,[Q.curve.nistP521]:ai.includes("secp521r1")?"secp521r1":void 0,[Q.curve.ed25519Legacy]:ai.includes("ED25519")?"ED25519":void 0,[Q.curve.curve25519Legacy]:ai.includes("X25519")?"X25519":void 0,[Q.curve.brainpoolP256r1]:ai.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[Q.curve.brainpoolP384r1]:ai.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[Q.curve.brainpoolP512r1]:ai.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},ci={[Q.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha256,cipher:Q.symmetric.aes128,node:oi[Q.curve.nistP256],web:si[Q.curve.nistP256],payloadSize:32,sharedSize:256},[Q.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha384,cipher:Q.symmetric.aes192,node:oi[Q.curve.nistP384],web:si[Q.curve.nistP384],payloadSize:48,sharedSize:384},[Q.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha512,cipher:Q.symmetric.aes256,node:oi[Q.curve.nistP521],web:si[Q.curve.nistP521],payloadSize:66,sharedSize:528},[Q.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha256,cipher:Q.symmetric.aes128,node:oi[Q.curve.secp256k1],payloadSize:32},[Q.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:Q.publicKey.eddsaLegacy,hash:Q.hash.sha512,node:!1,payloadSize:32},[Q.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:Q.publicKey.ecdh,hash:Q.hash.sha256,cipher:Q.symmetric.aes128,node:!1,payloadSize:32},[Q.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha256,cipher:Q.symmetric.aes128,node:oi[Q.curve.brainpoolP256r1],payloadSize:32},[Q.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha384,cipher:Q.symmetric.aes192,node:oi[Q.curve.brainpoolP384r1],payloadSize:48},[Q.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha512,cipher:Q.symmetric.aes256,node:oi[Q.curve.brainpoolP512r1],payloadSize:64}};class hi{constructor(e){try{this.name=e instanceof qr?e.getName():Q.write(Q.curve,e)}catch(e){throw new ei("Unknown curve")}const t=ci[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.web&&T.getWebCrypto()?this.type="web":this.node&&T.getNodeCrypto()?this.type="node":this.name===Q.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===Q.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e){const t=await ii.generateKey({name:"ECDSA",namedCurve:si[e]},!0,["sign","verify"]),r=await ii.exportKey("jwk",t.privateKey),i=await ii.exportKey("jwk",t.publicKey);return{publicKey:yi(i),privateKey:O(r.d)}}(this.name)}catch(e){return T.printDebugError("Browser did not support generating ec key "+e.message),li(this.name)}case"node":return async function(e){const t=ni.createECDH(oi[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const e=Rt(32);e[0]=127&e[0]|64,e[31]&=248;const t=e.slice().reverse(),{publicKey:r}=rr.box.keyPair.fromSecretKey(t);return{publicKey:T.concatUint8Array([new Uint8Array([64]),r]),privateKey:e}}case"ed25519Legacy":{const e=Rt(32),t=rr.sign.keyPair.fromSeed(e);return{publicKey:T.concatUint8Array([new Uint8Array([64]),t.publicKey]),privateKey:e}}default:return li(this.name)}}}async function ui(e,t,r,i){const n={[Q.curve.nistP256]:!0,[Q.curve.nistP384]:!0,[Q.curve.nistP521]:!0,[Q.curve.secp256k1]:!0,[Q.curve.curve25519Legacy]:e===Q.publicKey.ecdh,[Q.curve.brainpoolP256r1]:!0,[Q.curve.brainpoolP384r1]:!0,[Q.curve.brainpoolP512r1]:!0},s=t.getName();if(!n[s])return!1;if(s===Q.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:e}=rr.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const t=new Uint8Array([64,...e]);return!!T.equalsUint8Array(t,r)}const a=(await T.getNobleCurve(Q.publicKey.ecdsa,s)).getPublicKey(i,!1);return!!T.equalsUint8Array(a,r)}async function li(e){const t=await T.getNobleCurve(Q.publicKey.ecdsa,e),r=t.utils.randomPrivateKey();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function yi(e){const t=O(e.x),r=O(e.y),i=new Uint8Array(t.length+r.length+1);return i[0]=4,i.set(t,1),i.set(r,t.length+1),i}function fi(e,t,r){const i=e,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:t,x:z(n),y:z(s),ext:!0}}function gi(e,t,r,i){const n=fi(e,t,r);return n.d=z(i),n}const pi=T.getWebCrypto(),di=T.getNodeCrypto();async function Ai(e,t,r,i,n,s){const a=new hi(e);if(r&&!T.isStream(r)){const e={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(e,t,r,i){const n=e.payloadSize,s=gi(e.payloadSize,si[e.name],i.publicKey,i.privateKey),a=await pi.importKey("jwk",s,{name:"ECDSA",namedCurve:si[e.name],hash:{name:Q.read(Q.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await pi.sign({name:"ECDSA",namedCurve:si[e.name],hash:{name:Q.read(Q.webHash,t)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;T.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,i){const n=T.nodeRequire("eckey-utils"),s=T.getNodeBuffer(),{privateKey:a}=n.generateDer({curveName:oi[e.name],privateKey:s.from(i)}),o=di.createSign(Q.read(Q.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=e.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,t,r,n)}}const o=(await T.getNobleCurve(Q.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:xt(o.r,"be",a.payloadSize),s:xt(o.s,"be",a.payloadSize)}}async function wi(e,t,r,i,n,s){const a=new hi(e),o=async()=>0===s[0]&&mi(a,r,s.subarray(1),n);if(i&&!T.isStream(i))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:i},n,s){const a=fi(e.payloadSize,si[e.name],s),o=await pi.importKey("jwk",a,{name:"ECDSA",namedCurve:si[e.name],hash:{name:Q.read(Q.webHash,e.hash)}},!1,["verify"]),c=T.concatUint8Array([r,i]).buffer;return pi.verify({name:"ECDSA",namedCurve:si[e.name],hash:{name:Q.read(Q.webHash,t)}},o,c,n)}(a,t,r,i,n);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;T.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:i},n,s){const a=T.nodeRequire("eckey-utils"),o=T.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:oi[e.name],publicKey:o.from(s)}),h=di.createVerify(Q.read(Q.hash,t));h.write(n),h.end();const u=T.concatUint8Array([r,i]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(e){return!1}}(a,t,r,i,n);return e||o()}}return await mi(a,r,s,n)||o()}async function mi(e,t,r,i){return(await T.getNobleCurve(Q.publicKey.ecdsa,e.name)).verify(T.concatUint8Array([t.r,t.s]),r,i,{lowS:!1})}var bi=/*#__PURE__*/Object.freeze({__proto__:null,sign:Ai,validateParams:async function(e,t,r){const i=new hi(e);if(i.keyType!==Q.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=Rt(8),n=Q.hash.sha256,s=await me.digest(n,i);try{const a=await Ai(e,n,i,t,r,s);return await wi(e,n,a,i,t,s)}catch(e){return!1}}default:return ui(Q.publicKey.ecdsa,e,t,r)}},verify:wi});var Ei=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){if(me.getHashByteLength(t)<me.getHashByteLength(Q.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=T.concatUint8Array([n,i.subarray(1)]),o=rr.sign.detached(s,a);return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(e,t,r){if(e.getName()!==Q.curve.ed25519Legacy)return!1;const{publicKey:i}=rr.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return T.equalsUint8Array(t,n)},verify:async function(e,t,{r,s:i},n,s,a){if(me.getHashByteLength(t)<me.getHashByteLength(Q.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=T.concatUint8Array([r,i]);return rr.sign.detached.verify(a,o,s.subarray(1))}});function ki(e){switch(e){case Q.publicKey.ed25519:return 32;case Q.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function vi(e){switch(e){case Q.publicKey.ed25519:return Q.hash.sha256;case Q.publicKey.ed448:return Q.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var Ii=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){switch(e){case Q.publicKey.ed25519:{const t=Rt(ki(e)),{publicKey:r}=rr.sign.keyPair.fromSeed(t);return{A:r,seed:t}}case Q.publicKey.ed448:{const e=await T.getNobleCurve(Q.publicKey.ed448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),seed:t}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:ki,getPreferredHashAlgo:vi,sign:async function(e,t,r,i,n,s){if(me.getHashByteLength(t)<me.getHashByteLength(vi(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case Q.publicKey.ed25519:{const e=T.concatUint8Array([n,i]);return{RS:rr.sign.detached(s,e)}}case Q.publicKey.ed448:return{RS:(await T.getNobleCurve(Q.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(e,t,r){switch(e){case Q.publicKey.ed25519:{const{publicKey:e}=rr.sign.keyPair.fromSeed(r);return T.equalsUint8Array(t,e)}case Q.publicKey.ed448:{const e=(await T.getNobleCurve(Q.publicKey.ed448)).getPublicKey(r);return T.equalsUint8Array(t,e)}default:return!1}},verify:async function(e,t,{RS:r},i,n,s){if(me.getHashByteLength(t)<me.getHashByteLength(vi(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case Q.publicKey.ed25519:return rr.sign.detached.verify(s,r,n);case Q.publicKey.ed448:return(await T.getNobleCurve(Q.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});const Bi=T.getWebCrypto();async function Si(e,t,r){const{keySize:i}=re(e);if(!T.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");try{const e=await Bi.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),i=await Bi.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),n=await Bi.wrapKey("raw",i,e,{name:"AES-KW"});return new Uint8Array(n)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;T.printDebugError("Browser did not support operation: "+e.message)}return function(e,t,r){const i=new Ne(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=Ki(r);let a=n;const o=s,c=s.length/2,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=0;e<=5;++e)for(let t=0;t<c;++t)h[1]=c*e+(1+t),u[0]=a[0],u[1]=a[1],u[2]=o[2*t],u[3]=o[2*t+1],u=Ki(i.encrypt(Di(u))),a=u.subarray(0,2),a[0]^=h[0],a[1]^=h[1],o[2*t]=u[2],o[2*t+1]=u[3];return Di(a,o)}(0,t,r)}async function Ci(e,t,r){const{keySize:i}=re(e);if(!T.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");let n;try{n=await Bi.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return T.printDebugError("Browser did not support operation: "+e.message),function(e,t,r){const i=new Ne(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=Ki(r);let a=s.subarray(0,2);const o=s.subarray(2),c=s.length/2-1,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=5;e>=0;--e)for(let t=c-1;t>=0;--t)h[1]=c*e+(t+1),u[0]=a[0]^h[0],u[1]=a[1]^h[1],u[2]=o[2*t],u[3]=o[2*t+1],u=Ki(i.decrypt(Di(u))),a=u.subarray(0,2),o[2*t]=u[2],o[2*t+1]=u[3];if(a[0]===n[0]&&a[1]===n[1])return Di(o);throw Error("Key Data Integrity failed")}(0,t,r)}try{const e=await Bi.unwrapKey("raw",r,n,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await Bi.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}function Ki(e){const t=e.buffer,r=new DataView(t),i=new Uint32Array(e.length/4);for(let t=0;t<e.length/4;++t)i[t]=r.getUint32(4*t);return i}function Di(){let e=0;for(let t=0;t<arguments.length;++t)e+=4*arguments[t].length;const t=new ArrayBuffer(e),r=new DataView(t);let i=0;for(let e=0;e<arguments.length;++e){for(let t=0;t<arguments[e].length;++t)r.setUint32(i+4*t,arguments[e][t]);i+=4*arguments[e].length}return new Uint8Array(t)}var Pi=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:Ci,wrap:Si});function Ui(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}function xi(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const i=e.subarray(t-r),n=new Uint8Array(r).fill(r);if(T.equalsUint8Array(i,n))return e.subarray(0,t-r)}}throw Error("Invalid padding")}var Qi=/*#__PURE__*/Object.freeze({__proto__:null,decode:xi,encode:Ui});const Ri=T.getWebCrypto(),Mi=T.getNodeCrypto();function Ti(e,t,r,i){return T.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),T.stringToUint8Array("Anonymous Sender "),r.replacementFingerprint||i.subarray(0,20)])}async function Li(e,t,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await me.digest(e,T.concatUint8Array([new Uint8Array([0,0,0,1]),t,i]))).subarray(0,r)}async function _i(e,t){switch(e.type){case"curve25519Legacy":{const r=Rt(32),{secretKey:i,sharedKey:n}=await Ni(e,t,null,r);let{publicKey:s}=rr.box.keyPair.fromSecretKey(i);return s=T.concatUint8Array([new Uint8Array([64]),s]),{publicKey:s,sharedKey:n}}case"web":if(e.web&&T.getWebCrypto())try{return await async function(e,t){const r=fi(e.payloadSize,e.web,t);let i=Ri.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),n=Ri.importKey("jwk",r,{name:"ECDH",namedCurve:e.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=Ri.deriveBits({name:"ECDH",namedCurve:e.web,public:n},i.privateKey,e.sharedSize),a=Ri.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(yi(a));return{publicKey:c,sharedKey:o}}(e,t)}catch(r){return T.printDebugError(r),Hi(e,t)}break;case"node":return async function(e,t){const r=Mi.createECDH(e.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(t)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(e,t);default:return Hi(e,t)}}async function Ni(e,t,r,i){if(i.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(i,e.payloadSize-i.length),i=t}switch(e.type){case"curve25519Legacy":{const e=i.slice().reverse();return{secretKey:e,sharedKey:rr.scalarMult(e,t.subarray(1))}}case"web":if(e.web&&T.getWebCrypto())try{return await async function(e,t,r,i){const n=gi(e.payloadSize,e.web,r,i);let s=Ri.importKey("jwk",n,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const a=fi(e.payloadSize,e.web,t);let o=Ri.importKey("jwk",a,{name:"ECDH",namedCurve:e.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=Ri.deriveBits({name:"ECDH",namedCurve:e.web,public:o},s,e.sharedSize),h=Ri.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:O(h.d),sharedKey:u}}(e,t,r,i)}catch(r){return T.printDebugError(r),Fi(e,t,i)}break;case"node":return async function(e,t,r){const i=Mi.createECDH(e.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(t));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(e,t,i);default:return Fi(e,t,i)}}async function Fi(e,t,r){return{secretKey:r,sharedKey:(await T.getNobleCurve(Q.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function Hi(e,t){const r=await T.getNobleCurve(Q.publicKey.ecdh,e.name),{publicKey:i,privateKey:n}=await e.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,t).subarray(1)}}var Oi=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a){const o=new hi(e),{sharedKey:c}=await Ni(o,r,n,s),h=Ti(Q.publicKey.ecdh,e,t,a),{keySize:u}=re(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await Li(t.hash,c,u,h,1===e,2===e);return xi(await Ci(t.cipher,r,i))}catch(e){l=e}throw l},encrypt:async function(e,t,r,i,n){const s=Ui(r),a=new hi(e),{publicKey:o,sharedKey:c}=await _i(a,i),h=Ti(Q.publicKey.ecdh,e,t,n),{keySize:u}=re(t.cipher),l=await Li(t.hash,c,u,h);return{publicKey:o,wrappedKey:await Si(t.cipher,l,s)}},validateParams:async function(e,t,r){return ui(Q.publicKey.ecdh,e,t,r)}});const zi=T.getWebCrypto();async function Gi(e,t,r,i,n){const s=Q.read(Q.webHash,e);if(!s)throw Error("Hash algo not supported with HKDF");const a=await zi.importKey("raw",t,"HKDF",!1,["deriveBits"]),o=await zi.deriveBits({name:"HKDF",hash:s,salt:r,info:i},a,8*n);return new Uint8Array(o)}const ji={x25519:T.encodeUTF8("OpenPGP X25519"),x448:T.encodeUTF8("OpenPGP X448")};var qi=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){switch(e){case Q.publicKey.x25519:{const e=rr.scalarMult(n,t),s=T.concatUint8Array([t,i,e]),a=Q.symmetric.aes128,{keySize:o}=re(a);return Ci(a,await Gi(Q.hash.sha256,s,new Uint8Array,ji.x25519,o),r)}case Q.publicKey.x448:{const e=(await T.getNobleCurve(Q.publicKey.x448)).getSharedSecret(n,t),s=T.concatUint8Array([t,i,e]),a=Q.symmetric.aes256,{keySize:o}=re(Q.symmetric.aes256);return Ci(a,await Gi(Q.hash.sha512,s,new Uint8Array,ji.x448,o),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(e,t,r){switch(e){case Q.publicKey.x25519:{const e=Rt(32),i=rr.scalarMult(e,r),{publicKey:n}=rr.box.keyPair.fromSecretKey(e),s=T.concatUint8Array([n,r,i]),a=Q.symmetric.aes128,{keySize:o}=re(a),c=await Gi(Q.hash.sha256,s,new Uint8Array,ji.x25519,o);return{ephemeralPublicKey:n,wrappedKey:await Si(a,c,t)}}case Q.publicKey.x448:{const e=await T.getNobleCurve(Q.publicKey.x448),i=e.utils.randomPrivateKey(),n=e.getSharedSecret(i,r),s=e.getPublicKey(i),a=T.concatUint8Array([s,r,n]),o=Q.symmetric.aes256,{keySize:c}=re(Q.symmetric.aes256),h=await Gi(Q.hash.sha512,a,new Uint8Array,ji.x448,c);return{ephemeralPublicKey:s,wrappedKey:await Si(o,h,t)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(e){switch(e){case Q.publicKey.x25519:{const e=Rt(32),{publicKey:t}=rr.box.keyPair.fromSecretKey(e);return{A:t,k:e}}case Q.publicKey.x448:{const e=await T.getNobleCurve(Q.publicKey.x448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),k:t}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(e){switch(e){case Q.publicKey.x25519:return 32;case Q.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(e,t,r){switch(e){case Q.publicKey.x25519:{const{publicKey:e}=rr.box.keyPair.fromSecretKey(r);return T.equalsUint8Array(t,e)}case Q.publicKey.x448:{const e=(await T.getNobleCurve(Q.publicKey.x448)).getPublicKey(r);return T.equalsUint8Array(t,e)}default:return!1}}}),Vi=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:hi,ecdh:Oi,ecdhX:qi,ecdsa:bi,eddsa:Ii,eddsaLegacy:Ei,generate:async function(e){const t=new hi(e),{oid:r,hash:i,cipher:n}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:T.leftPad(s.privateKey,t.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(e){return ci[e.getName()].hash}});const Yi=BigInt(0),Ji=BigInt(1);var Wi=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){const a=BigInt(0);let o,c,h,u;i=vt(i),n=vt(n),r=vt(r),s=vt(s),r=It(r,i),s=It(s,n);const l=It(vt(t.subarray(0,Ut(n))),n);for(;;){if(o=Mt(Ji,n),c=It(Bt(r,o,i),n),c===a)continue;const e=It(s*c,n);if(u=It(l+e,n),h=It(Ct(o,n)*u,n),h!==a)break}return{r:xt(c,"be",Ut(i)),s:xt(h,"be",Ut(i))}},validateParams:async function(e,t,r,i,n){if(e=vt(e),t=vt(t),r=vt(r),i=vt(i),r<=Ji||r>=e)return!1;if(It(e-Ji,t)!==Yi)return!1;if(Bt(r,t,e)!==Ji)return!1;const s=BigInt(Pt(t));if(s<BigInt(150)||!Nt(t,null,32))return!1;n=vt(n);const a=BigInt(2);return i===Bt(r,t*Mt(a<<s-Ji,a<<s)+n,e)},verify:async function(e,t,r,i,n,s,a,o){if(t=vt(t),r=vt(r),s=vt(s),a=vt(a),n=vt(n),o=vt(o),t<=Yi||t>=a||r<=Yi||r>=a)return T.printDebug("invalid DSA Signature"),!1;const c=It(vt(i.subarray(0,Ut(a))),a),h=Ct(r,a);if(h===Yi)return T.printDebug("invalid DSA Signature"),!1;n=It(n,s),o=It(o,s);const u=It(c*h,a),l=It(t*h,a);return It(It(Bt(n,u,s)*Bt(o,l,s),s),a)===t}});const Zi=new Set([Q.hash.sha1,Q.hash.sha256,Q.hash.sha512]),$i=T.getWebCrypto(),Xi=T.getNodeCrypto();var en={rsa:$t,elgamal:er,elliptic:Vi,dsa:Wi,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){if(!Zi.has(e))throw Error("Unsupported hash algorithm.");const t=Q.read(Q.webHash,e),r=$i||Xi.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(e,t,r){if(!Zi.has(e))throw Error("Unsupported hash algorithm.");const i=Q.read(Q.webHash,e),n=$i||Xi.webcrypto.subtle,s=await n.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(e,t,r,i){if(!Zi.has(e))throw Error("Unsupported hash algorithm.");const n=Q.read(Q.webHash,e),s=$i||Xi.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class tn{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!T.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return T.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}var rn=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(e,t){let r=0;switch(e){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaSign:{const e=T.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case Q.publicKey.dsa:case Q.publicKey.ecdsa:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const i=T.readMPI(t.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:e,s:i}}}case Q.publicKey.eddsaLegacy:{let e=T.readMPI(t.subarray(r));r+=e.length+2,e=T.leftPad(e,32);let i=T.readMPI(t.subarray(r));return r+=i.length+2,i=T.leftPad(i,32),{read:r,signatureParams:{r:e,s:i}}}case Q.publicKey.ed25519:case Q.publicKey.ed448:{const i=2*en.elliptic.eddsa.getPayloadSize(e),n=T.readExactSubarray(t,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case Q.publicKey.hmac:{const e=new tn;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}default:throw new ei("Unknown signature algorithm.")}},sign:async function(e,t,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(e){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await en.rsa.sign(t,n,e,a,o,c,h,u,s)}}case Q.publicKey.dsa:{const{g:e,p:n,q:a}=r,{x:o}=i;return en.dsa.sign(t,s,e,n,a,o)}case Q.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case Q.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=i;return en.elliptic.ecdsa.sign(e,t,n,a,o,s)}case Q.publicKey.eddsaLegacy:{const{oid:e,Q:a}=r,{seed:o}=i;return en.elliptic.eddsaLegacy.sign(e,t,n,a,o,s)}case Q.publicKey.ed25519:case Q.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return en.elliptic.eddsa.sign(e,t,n,a,o,s)}case Q.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=i,n=await en.hmac.sign(e.getValue(),t,s);return{mac:new tn(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(e,t,r,i,n,s,a){switch(e){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaSign:{const{n:e,e:n}=i,o=T.leftPad(r.s,e.length);return en.rsa.verify(t,s,o,e,n,a)}case Q.publicKey.dsa:{const{g:e,p:n,q:s,y:o}=i,{r:c,s:h}=r;return en.dsa.verify(t,c,h,a,e,n,s,o)}case Q.publicKey.ecdsa:{const{oid:e,Q:n}=i,o=new en.elliptic.CurveWithOID(e).payloadSize,c=T.leftPad(r.r,o),h=T.leftPad(r.s,o);return en.elliptic.ecdsa.verify(e,t,{r:c,s:h},s,n,a)}case Q.publicKey.eddsaLegacy:{const{oid:e,Q:n}=i;return en.elliptic.eddsaLegacy.verify(e,t,r,s,n,a)}case Q.publicKey.ed25519:case Q.publicKey.ed448:{const{A:n}=i;return en.elliptic.eddsa.verify(e,t,r,s,n,a)}case Q.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=i,{keyMaterial:t}=n;return en.hmac.verify(e.getValue(),t,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class nn{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return T.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class sn{constructor(e){if(e){const{version:t,hash:r,cipher:i,replacementFingerprint:n}=e;this.version=t||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new ei("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const i=t-r+1;this.replacementFingerprint=e.slice(r,r+i),r+=i}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return T.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const an=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=Q.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return Q.read(e,this.data)}getValue(){return this.data}},on=an(Q.aead),cn=an(Q.symmetric),hn=an(Q.hash);class un{static fromObject({wrappedKey:e,algorithm:t}){const r=new un;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=T.readExactSubarray(e,t,t+r),t+=r}write(){return T.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function ln(e,t){const r=Rt(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await me.sha256(r)}}}function yn(e){const{keySize:t}=re(e);return Rt(t)}function fn(e){const t=Q.read(Q.aead,e);return bt[t]}function gn(e){try{e.getName()}catch(e){throw new ei("Unknown curve OID")}}function pn(e,t){switch(e){case Q.publicKey.ecdsa:case Q.publicKey.ecdh:case Q.publicKey.eddsaLegacy:return new en.elliptic.CurveWithOID(t).payloadSize;case Q.publicKey.ed25519:case Q.publicKey.ed448:return en.elliptic.eddsa.getPayloadSize(e);case Q.publicKey.x25519:case Q.publicKey.x448:return en.elliptic.ecdhX.getPayloadSize(e);default:throw Error("Unknown elliptic algo")}}var dn=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(e,t,r,i){switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:return en.rsa.generate(t,65537).then((({n:e,e:t,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:e,e:t}})));case Q.publicKey.ecdsa:return en.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new qr(e),Q:t}})));case Q.publicKey.eddsaLegacy:return en.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new qr(e),Q:t}})));case Q.publicKey.ecdh:return en.elliptic.generate(r).then((({oid:e,Q:t,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new qr(e),Q:t,kdfParams:new sn({hash:i,cipher:n})}})));case Q.publicKey.ed25519:case Q.publicKey.ed448:return en.elliptic.eddsa.generate(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case Q.publicKey.x25519:case Q.publicKey.x448:return en.elliptic.ecdhX.generate(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case Q.publicKey.hmac:return ln(await en.hmac.generate(i),new hn(i));case Q.publicKey.aead:return ln(yn(i),new cn(i));case Q.publicKey.dsa:case Q.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:yn,getAEADMode:fn,getCipherParams:re,getCurvePayloadSize:pn,getPreferredCurveHashAlgo:function(e,t){switch(e){case Q.publicKey.ecdsa:case Q.publicKey.eddsaLegacy:return en.elliptic.getPreferredHashAlgo(t);case Q.publicKey.ed25519:case Q.publicKey.ed448:return en.elliptic.eddsa.getPreferredHashAlgo(e);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(e){const{blockSize:t}=re(e),r=await Rt(t),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return T.concat([r,i])},parseEncSessionKeyParams:function(e,t){let r=0;switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:return{c:T.readMPI(t.subarray(r))};case Q.publicKey.elgamal:{const e=T.readMPI(t.subarray(r));r+=e.length+2;return{c1:e,c2:T.readMPI(t.subarray(r))}}case Q.publicKey.ecdh:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const i=new nn;return i.read(t.subarray(r)),{V:e,C:i}}case Q.publicKey.x25519:case Q.publicKey.x448:{const i=pn(e),n=T.readExactSubarray(t,r,r+i);r+=n.length;const s=new un;return s.read(t.subarray(r)),{ephemeralPublicKey:n,C:s}}case Q.publicKey.aead:{const e=new on;r+=e.read(t.subarray(r));const{ivLength:i}=fn(e.getValue()),n=t.subarray(r,r+i);r+=i;const s=new tn;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:n,c:s}}default:throw new ei("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(e,t,r){let i=0;switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:{const e=T.readMPI(t.subarray(i));i+=e.length+2;const r=T.readMPI(t.subarray(i));i+=r.length+2;const n=T.readMPI(t.subarray(i));i+=n.length+2;const s=T.readMPI(t.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:e,p:r,q:n,u:s}}}case Q.publicKey.dsa:case Q.publicKey.elgamal:{const e=T.readMPI(t.subarray(i));return i+=e.length+2,{read:i,privateParams:{x:e}}}case Q.publicKey.ecdsa:case Q.publicKey.ecdh:{const n=pn(e,r.oid);let s=T.readMPI(t.subarray(i));return i+=s.length+2,s=T.leftPad(s,n),{read:i,privateParams:{d:s}}}case Q.publicKey.eddsaLegacy:{const n=pn(e,r.oid);let s=T.readMPI(t.subarray(i));return i+=s.length+2,s=T.leftPad(s,n),{read:i,privateParams:{seed:s}}}case Q.publicKey.ed25519:case Q.publicKey.ed448:{const r=pn(e),n=T.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case Q.publicKey.x25519:case Q.publicKey.x448:{const r=pn(e),n=T.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case Q.publicKey.hmac:{const{cipher:e}=r,n=me.getHashByteLength(e.getValue()),s=t.subarray(i,i+32);i+=32;const a=t.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case Q.publicKey.aead:{const{cipher:e}=r,n=t.subarray(i,i+32);i+=32;const{keySize:s}=re(e.getValue()),a=t.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new ei("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(e,t){let r=0;switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const i=T.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:e,e:i}}}case Q.publicKey.dsa:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const i=T.readMPI(t.subarray(r));r+=i.length+2;const n=T.readMPI(t.subarray(r));r+=n.length+2;const s=T.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:i,g:n,y:s}}}case Q.publicKey.elgamal:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const i=T.readMPI(t.subarray(r));r+=i.length+2;const n=T.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:e,g:i,y:n}}}case Q.publicKey.ecdsa:{const e=new qr;r+=e.read(t),gn(e);const i=T.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:e,Q:i}}}case Q.publicKey.eddsaLegacy:{const e=new qr;r+=e.read(t),gn(e);let i=T.readMPI(t.subarray(r));return r+=i.length+2,i=T.leftPad(i,33),{read:r,publicParams:{oid:e,Q:i}}}case Q.publicKey.ecdh:{const e=new qr;r+=e.read(t),gn(e);const i=T.readMPI(t.subarray(r));r+=i.length+2;const n=new sn;return r+=n.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:i,kdfParams:n}}}case Q.publicKey.ed25519:case Q.publicKey.ed448:case Q.publicKey.x25519:case Q.publicKey.x448:{const i=T.readExactSubarray(t,r,r+pn(e));return r+=i.length,{read:r,publicParams:{A:i}}}case Q.publicKey.hmac:case Q.publicKey.aead:{const e=new cn;r+=e.read(t);const i=me.getHashByteLength(Q.hash.sha256),n=t.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:e,digest:n}}}default:throw new ei("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(e,t,r,i,n,s){switch(e){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:{const{c:e}=i,{n,e:a}=t,{d:o,p:c,q:h,u}=r;return en.rsa.decrypt(e,n,a,o,c,h,u,s)}case Q.publicKey.elgamal:{const{c1:e,c2:n}=i,a=t.p,o=r.x;return en.elgamal.decrypt(e,n,a,o,s)}case Q.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:h}=i;return en.elliptic.ecdh.decrypt(e,a,c,h.data,s,o,n)}case Q.publicKey.x25519:case Q.publicKey.x448:{const{A:n}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!T.isAES(o.algorithm))throw Error("AES session key expected");return en.elliptic.ecdhX.decrypt(e,a,o.wrappedKey,n,s)}case Q.publicKey.aead:{const{cipher:e}=t,n=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=fn(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(e,t,r,i,n,s){switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await en.rsa.encrypt(n,e,t)}}case Q.publicKey.elgamal:{const{p:e,g:t,y:i}=r;return en.elgamal.encrypt(n,e,t,i)}case Q.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await en.elliptic.ecdh.encrypt(e,i,n,t,s);return{V:a,C:new nn(o)}}case Q.publicKey.x25519:case Q.publicKey.x448:{if(t&&!T.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await en.elliptic.ecdhX.encrypt(e,n,i);return{ephemeralPublicKey:s,C:un.fromObject({algorithm:t,wrappedKey:a})}}case Q.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=i,a=R.preferredAEADAlgorithm,o=fn(R.preferredAEADAlgorithm),{ivLength:c}=o,h=Rt(c),u=await o(t,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new on(a),iv:h,c:new tn(l)}}default:return[]}},serializeParams:function(e,t){const r=new Set([Q.publicKey.ed25519,Q.publicKey.x25519,Q.publicKey.ed448,Q.publicKey.x448,Q.publicKey.aead,Q.publicKey.hmac]),i=Object.keys(t).map((i=>{const n=t[i];return T.isUint8Array(n)?r.has(e)?n:T.uint8ArrayToMPI(n):n.write()}));return T.concatUint8Array(i)},validateParams:async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:{const{n:e,e:i}=t,{d:n,p:s,q:a,u:o}=r;return en.rsa.validateParams(e,i,n,s,a,o)}case Q.publicKey.dsa:{const{p:e,q:i,g:n,y:s}=t,{x:a}=r;return en.dsa.validateParams(e,i,n,s,a)}case Q.publicKey.elgamal:{const{p:e,g:i,y:n}=t,{x:s}=r;return en.elgamal.validateParams(e,i,n,s)}case Q.publicKey.ecdsa:case Q.publicKey.ecdh:{const i=en.elliptic[Q.read(Q.publicKey,e)],{oid:n,Q:s}=t,{d:a}=r;return i.validateParams(n,s,a)}case Q.publicKey.eddsaLegacy:{const{Q:e,oid:i}=t,{seed:n}=r;return en.elliptic.eddsaLegacy.validateParams(i,e,n)}case Q.publicKey.ed25519:case Q.publicKey.ed448:{const{A:i}=t,{seed:n}=r;return en.elliptic.eddsa.validateParams(e,i,n)}case Q.publicKey.x25519:case Q.publicKey.x448:{const{A:i}=t,{k:n}=r;return en.elliptic.ecdhX.validateParams(e,i,n)}case Q.publicKey.hmac:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r;return me.getHashByteLength(e.getValue())===s.length&&T.equalsUint8Array(i,await me.sha256(n))}case Q.publicKey.aead:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=re(e.getValue());return a===s.length&&T.equalsUint8Array(i,await me.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const An={cipher:ie,hash:me,mode:bt,publicKey:en,signature:rn,random:Tt,pkcs1:jt,pkcs5:Qi,aesKW:Pi};Object.assign(An,dn);class wn extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,wn),this.name="Argon2OutOfMemoryError"}}let mn,bn,En=2<<19;class kn{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return En}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){En=e}static reloadWasmModule(){mn&&(bn=mn(),bn.catch((()=>{})))}constructor(e=R){const{passes:t,parallelism:r,memoryExponent:i}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=i}generateSalt(){this.salt=An.random.getRandomBytes(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([Q.write(Q.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return T.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{mn=mn||(await Promise.resolve().then((function(){return Pl}))).default,bn=bn||mn();const i=await bn,n=i({version:19,type:2,password:T.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>kn.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&kn.reloadWasmModule(),n}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new wn("Could not allocate required memory for Argon2"):e}}}class vn{constructor(e,t=R){this.algorithm=Q.hash.sha256,this.type=Q.read(Q.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=An.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==T.uint8ArrayToString(e.subarray(t,t+3)))throw new ei("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new ei("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new ei("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...T.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([Q.write(Q.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return T.concatUint8Array(e)}async produceKey(e,t){e=T.encodeUTF8(e);const r=[];let i=0,n=0;for(;i<t;){let t;switch(this.type){case"simple":t=T.concatUint8Array([new Uint8Array(n),e]);break;case"salted":t=T.concatUint8Array([new Uint8Array(n),this.salt,e]);break;case"iterated":{const r=T.concatUint8Array([this.salt,e]);let i=r.length;const s=Math.max(this.getCount(),i);t=new Uint8Array(n+s),t.set(r,n);for(let e=n+i;e<s;e+=i,i*=2)t.copyWithin(e,n,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await An.hash.digest(this.algorithm,t);r.push(s),i+=s.length,n++}return T.concatUint8Array(r).subarray(0,t)}}const In=new Set([Q.s2k.argon2,Q.s2k.iterated]);function Bn(e,t=R){switch(e){case Q.s2k.argon2:return new kn(t);case Q.s2k.iterated:case Q.s2k.gnu:case Q.s2k.salted:case Q.s2k.simple:return new vn(e,t);default:throw new ei("Unsupported S2K type")}}function Sn(e){const{s2kType:t}=e;if(!In.has(t))throw Error("The provided `config.s2kType` value is not allowed");return Bn(t,e)}var Cn=Uint8Array,Kn=Uint16Array,Dn=Uint32Array,Pn=new Cn([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Un=new Cn([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),xn=new Cn([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),Qn=function(e,t){for(var r=new Kn(31),i=0;i<31;++i)r[i]=t+=1<<e[i-1];var n=new Dn(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},Rn=Qn(Pn,2),Mn=Rn[0],Tn=Rn[1];Mn[28]=258,Tn[258]=28;for(var Ln=Qn(Un,0),_n=Ln[0],Nn=Ln[1],Fn=new Kn(32768),Hn=0;Hn<32768;++Hn){var On=(43690&Hn)>>>1|(21845&Hn)<<1;On=(61680&(On=(52428&On)>>>2|(13107&On)<<2))>>>4|(3855&On)<<4,Fn[Hn]=((65280&On)>>>8|(255&On)<<8)>>>1}var zn=function(e,t,r){for(var i=e.length,n=0,s=new Kn(t);n<i;++n)e[n]&&++s[e[n]-1];var a,o=new Kn(t);for(n=0;n<t;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new Kn(1<<t);var c=15-t;for(n=0;n<i;++n)if(e[n])for(var h=n<<4|e[n],u=t-e[n],l=o[e[n]-1]++<<u,y=l|(1<<u)-1;l<=y;++l)a[Fn[l]>>>c]=h}else for(a=new Kn(i),n=0;n<i;++n)e[n]&&(a[n]=Fn[o[e[n]-1]++]>>>15-e[n]);return a},Gn=new Cn(288);for(Hn=0;Hn<144;++Hn)Gn[Hn]=8;for(Hn=144;Hn<256;++Hn)Gn[Hn]=9;for(Hn=256;Hn<280;++Hn)Gn[Hn]=7;for(Hn=280;Hn<288;++Hn)Gn[Hn]=8;var jn=new Cn(32);for(Hn=0;Hn<32;++Hn)jn[Hn]=5;var qn=/*#__PURE__*/zn(Gn,9,0),Vn=/*#__PURE__*/zn(Gn,9,1),Yn=/*#__PURE__*/zn(jn,5,0),Jn=/*#__PURE__*/zn(jn,5,1),Wn=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},Zn=function(e,t,r){var i=t/8|0;return(e[i]|e[i+1]<<8)>>(7&t)&r},$n=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},Xn=function(e){return(e+7)/8|0},es=function(e,t,r){(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length);var i=new(2==e.BYTES_PER_ELEMENT?Kn:4==e.BYTES_PER_ELEMENT?Dn:Cn)(r-t);return i.set(e.subarray(t,r)),i},ts=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],rs=function(e,t,r){var i=Error(t||ts[e]);if(i.code=e,Error.captureStackTrace&&Error.captureStackTrace(i,rs),!r)throw i;return i},is=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8},ns=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8,e[i+2]|=r>>>16},ss=function(e,t){for(var r=[],i=0;i<e.length;++i)e[i]&&r.push({s:i,f:e[i]});var n=r.length,s=r.slice();if(!n)return[ys,0];if(1==n){var a=new Cn(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var y=s[0].s;for(i=1;i<n;++i)s[i].s>y&&(y=s[i].s);var f=new Kn(y+1),g=as(r[u-1],f,0);if(g>t){i=0;var p=0,d=g-t,A=1<<d;for(s.sort((function(e,t){return f[t.s]-f[e.s]||e.f-t.f}));i<n;++i){var w=s[i].s;if(!(f[w]>t))break;p+=A-(1<<g-f[w]),f[w]=t}for(p>>>=d;p>0;){var m=s[i].s;f[m]<t?p-=1<<t-f[m]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;f[b]==t&&(--f[b],++p)}g=t}return[new Cn(f),g]},as=function(e,t,r){return-1==e.s?Math.max(as(e.l,t,r+1),as(e.r,t,r+1)):t[e.s]=r},os=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new Kn(++t),i=0,n=e[0],s=1,a=function(e){r[i++]=e},o=1;o<=t;++o)if(e[o]==n&&o!=t)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=e[o]}return[r.subarray(0,i),t]},cs=function(e,t){for(var r=0,i=0;i<t.length;++i)r+=e[i]*t[i];return r},hs=function(e,t,r){var i=r.length,n=Xn(t+2);e[n]=255&i,e[n+1]=i>>>8,e[n+2]=255^e[n],e[n+3]=255^e[n+1];for(var s=0;s<i;++s)e[n+s+4]=r[s];return 8*(n+4+i)},us=function(e,t,r,i,n,s,a,o,c,h,u){is(t,u++,r),++n[256];for(var l=ss(n,15),y=l[0],f=l[1],g=ss(s,15),p=g[0],d=g[1],A=os(y),w=A[0],m=A[1],b=os(p),E=b[0],k=b[1],v=new Kn(19),I=0;I<w.length;++I)v[31&w[I]]++;for(I=0;I<E.length;++I)v[31&E[I]]++;for(var B=ss(v,7),S=B[0],C=B[1],K=19;K>4&&!S[xn[K-1]];--K);var D,P,U,x,Q=h+5<<3,R=cs(n,Gn)+cs(s,jn)+a,M=cs(n,y)+cs(s,p)+a+14+3*K+cs(v,S)+(2*v[16]+3*v[17]+7*v[18]);if(Q<=R&&Q<=M)return hs(t,u,e.subarray(c,c+h));if(is(t,u,1+(M<R)),u+=2,M<R){D=zn(y,f,0),P=y,U=zn(p,d,0),x=p;var T=zn(S,C,0);is(t,u,m-257),is(t,u+5,k-1),is(t,u+10,K-4),u+=14;for(I=0;I<K;++I)is(t,u+3*I,S[xn[I]]);u+=3*K;for(var L=[w,E],_=0;_<2;++_){var N=L[_];for(I=0;I<N.length;++I){var F=31&N[I];is(t,u,T[F]),u+=S[F],F>15&&(is(t,u,N[I]>>>5&127),u+=N[I]>>>12)}}}else D=qn,P=Gn,U=Yn,x=jn;for(I=0;I<o;++I)if(i[I]>255){F=i[I]>>>18&31;ns(t,u,D[F+257]),u+=P[F+257],F>7&&(is(t,u,i[I]>>>23&31),u+=Pn[F]);var H=31&i[I];ns(t,u,U[H]),u+=x[H],H>3&&(ns(t,u,i[I]>>>5&8191),u+=Un[H])}else ns(t,u,D[i[I]]),u+=P[i[I]];return ns(t,u,D[256]),u+P[256]},ls=/*#__PURE__*/new Dn([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),ys=/*#__PURE__*/new Cn(0),fs=function(e,t,r,i,n){return function(e,t,r,i,n,s){var a=e.length,o=new Cn(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!t||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=hs(c,h+1,e.subarray(u,l))}else{for(var y=ls[t-1],f=y>>>13,g=8191&y,p=(1<<r)-1,d=new Kn(32768),A=new Kn(p+1),w=Math.ceil(r/3),m=2*w,b=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<m)&p},E=new Dn(25e3),k=new Kn(288),v=new Kn(32),I=0,B=0,S=(u=0,0),C=0,K=0;u<a;++u){var D=b(u),P=32767&u,U=A[D];if(d[P]=U,A[D]=P,C<=u){var x=a-u;if((I>7e3||S>24576)&&x>423){h=us(e,c,0,E,k,v,B,S,K,u-K,h),S=I=B=0,K=u;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)v[Q]=0}var R=2,M=0,T=g,L=P-U&32767;if(x>2&&D==b(u-L))for(var _=Math.min(f,x)-1,N=Math.min(32767,u),F=Math.min(258,x);L<=N&&--T&&P!=U;){if(e[u+R]==e[u+R-L]){for(var H=0;H<F&&e[u+H]==e[u+H-L];++H);if(H>R){if(R=H,M=L,H>_)break;var O=Math.min(L,H-2),z=0;for(Q=0;Q<O;++Q){var G=u-L+Q+32768&32767,j=G-d[G]+32768&32767;j>z&&(z=j,U=G)}}}L+=(P=U)-(U=d[P])+32768&32767}if(M){E[S++]=268435456|Tn[R]<<18|Nn[M];var q=31&Tn[R],V=31&Nn[M];B+=Pn[q]+Un[V],++k[257+q],++v[V],C=u+R,++I}else E[S++]=e[u],++k[e[u]]}}h=us(e,c,s,E,k,v,B,S,K,u-K,h),!s&&7&h&&(h=hs(c,h+1,ys))}return es(o,0,i+Xn(h)+n)}(e,null==t.level?6:t.level,null==t.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):12+t.mem,r,i,!n)},gs=/*#__PURE__*/function(){function e(e,t){t||"function"!=typeof e||(t=e,e={}),this.ondata=t,this.o=e||{}}return e.prototype.p=function(e,t){this.ondata(fs(e,this.o,0,0,!t),t)},e.prototype.push=function(e,t){this.ondata||rs(5),this.d&&rs(4),this.d=t,this.p(e,t||!1)},e}(),ps=/*#__PURE__*/function(){function e(e){this.s={},this.p=new Cn(0),this.ondata=e}return e.prototype.e=function(e){this.ondata||rs(5),this.d&&rs(4);var t=this.p.length,r=new Cn(t+e.length);r.set(this.p),r.set(e,t),this.p=r},e.prototype.c=function(e){this.d=this.s.i=e||!1;var t=this.s.b,r=function(e,t,r){var i=e.length;if(!i||r&&r.f&&!r.l)return t||new Cn(0);var n=!t||r,s=!r||r.i;r||(r={}),t||(t=new Cn(3*i));var a=function(e){var r=t.length;if(e>r){var i=new Cn(Math.max(2*r,e));i.set(t),t=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,y=r.m,f=r.n,g=8*i;do{if(!u){o=Zn(e,c,1);var p=Zn(e,c+1,3);if(c+=3,!p){var d=e[(C=Xn(c)+4)-4]|e[C-3]<<8,A=C+d;if(A>i){s&&rs(0);break}n&&a(h+d),t.set(e.subarray(C,A),h),r.b=h+=d,r.p=c=8*A,r.f=o;continue}if(1==p)u=Vn,l=Jn,y=9,f=5;else if(2==p){var w=Zn(e,c,31)+257,m=Zn(e,c+10,15)+4,b=w+Zn(e,c+5,31)+1;c+=14;for(var E=new Cn(b),k=new Cn(19),v=0;v<m;++v)k[xn[v]]=Zn(e,c+3*v,7);c+=3*m;var I=Wn(k),B=(1<<I)-1,S=zn(k,I,1);for(v=0;v<b;){var C,K=S[Zn(e,c,B)];if(c+=15&K,(C=K>>>4)<16)E[v++]=C;else{var D=0,P=0;for(16==C?(P=3+Zn(e,c,3),c+=2,D=E[v-1]):17==C?(P=3+Zn(e,c,7),c+=3):18==C&&(P=11+Zn(e,c,127),c+=7);P--;)E[v++]=D}}var U=E.subarray(0,w),x=E.subarray(w);y=Wn(U),f=Wn(x),u=zn(U,y,1),l=zn(x,f,1)}else rs(1);if(c>g){s&&rs(0);break}}n&&a(h+131072);for(var Q=(1<<y)-1,R=(1<<f)-1,M=c;;M=c){var T=(D=u[$n(e,c)&Q])>>>4;if((c+=15&D)>g){s&&rs(0);break}if(D||rs(2),T<256)t[h++]=T;else{if(256==T){M=c,u=null;break}var L=T-254;if(T>264){var _=Pn[v=T-257];L=Zn(e,c,(1<<_)-1)+Mn[v],c+=_}var N=l[$n(e,c)&R],F=N>>>4;if(N||rs(3),c+=15&N,x=_n[F],F>3&&(_=Un[F],x+=$n(e,c)&(1<<_)-1,c+=_),c>g){s&&rs(0);break}n&&a(h+131072);for(var H=h+L;h<H;h+=4)t[h]=t[h-x],t[h+1]=t[h+1-x],t[h+2]=t[h+2-x],t[h+3]=t[h+3-x];h=H}}r.l=u,r.p=M,r.b=h,r.f=o,u&&(o=1,r.m=y,r.d=l,r.n=f)}while(!o);return h==t.length?t:es(t,0,h)}(this.p,this.o,this.s);this.ondata(es(r,t,this.s.b),this.d),this.o=es(r,this.s.b-32768),this.s.b=this.o.length,this.p=es(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),ds=/*#__PURE__*/function(){function e(e,t){var r,i;this.c=(r=1,i=0,{p:function(e){for(var t=r,n=i,s=0|e.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=t+=e[a];t=(65535&t)+15*(t>>16),n=(65535&n)+15*(n>>16)}r=t,i=n},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(i%=65521))<<8|i>>>8}}),this.v=1,gs.call(this,e,t)}return e.prototype.push=function(e,t){gs.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){this.c.p(e);var r=fs(e,this.o,this.v&&2,t&&4,!t);this.v&&(function(e,t){var r=t.level,i=0==r?0:r<6?1:9==r?3:2;e[0]=120,e[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),t&&function(e,t,r){for(;r;++t)e[t]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,t)},e}(),As=/*#__PURE__*/function(){function e(e){this.v=1,ps.call(this,e)}return e.prototype.push=function(e,t){if(ps.prototype.e.call(this,e),this.v){if(this.p.length<2&&!t)return;this.p=this.p.subarray(2),this.v=0}t&&(this.p.length<4&&rs(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),ps.prototype.c.call(this,t)},e}(),ws="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{ws.decode(ys,{stream:!0}),1}catch(e){}var ms=[0,1,3,7,15,31,63,127,255],bs=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};bs.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},bs.prototype.read=function(e){for(var t=0;e>0;){this._ensureByte();var r=8-this.bitOffset;if(e>=r)t<<=r,t|=ms[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,e-=r;else{t<<=e;var i=r-e;t|=(this.curByte&ms[e]<<i)>>i,this.bitOffset+=e,e=0}}return t},bs.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},bs.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)};var Es=bs,ks=function(){};ks.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},ks.prototype.read=function(e,t,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;e[t++]=n,i++}return i},ks.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},ks.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},ks.prototype.write=function(e,t,r){var i;for(i=0;i<r;i++)this.writeByte(e[t++]);return r},ks.prototype.flush=function(){};var vs,Is=ks,Bs=(vs=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var e=4294967295;this.getCRC=function(){return~e>>>0},this.updateCRC=function(t){e=e<<8^vs[255&(e>>>24^t)]},this.updateCRCRun=function(t,r){for(;r-- >0;)e=e<<8^vs[255&(e>>>24^t)]}}),Ss=Es,Cs=Is,Ks=Bs,Ds=function(e,t){var r,i=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=i,i},Ps={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},Us={};Us[Ps.LAST_BLOCK]="Bad file checksum",Us[Ps.NOT_BZIP_DATA]="Not bzip data",Us[Ps.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",Us[Ps.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",Us[Ps.DATA_ERROR]="Data error",Us[Ps.OUT_OF_MEMORY]="Out of memory",Us[Ps.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var xs=function(e,t){var r=Us[e]||"unknown error";t&&(r+=": "+t);var i=new TypeError(r);throw i.errorCode=e,i},Qs=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};Qs.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new Ks,!0):(this.writeCount=-1,!1)},Qs.prototype._start_bunzip=function(e,t){var r=new Uint8Array(4);4===e.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||xs(Ps.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&xs(Ps.NOT_BZIP_DATA,"level out of range"),this.reader=new Ss(e),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=t,this.streamCRC=0},Qs.prototype._get_next_block=function(){var e,t,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&xs(Ps.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&xs(Ps.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&xs(Ps.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(e=0;e<16;e++)if(a&1<<15-e){var h=16*e;for(r=i.read(16),t=0;t<16;t++)r&1<<15-t&&(o[c++]=h+t)}var u=i.read(3);(u<2||u>6)&&xs(Ps.DATA_ERROR);var l=i.read(15);0===l&&xs(Ps.DATA_ERROR);var y=new Uint8Array(256);for(e=0;e<u;e++)y[e]=e;var f=new Uint8Array(l);for(e=0;e<l;e++){for(t=0;i.read(1);t++)t>=u&&xs(Ps.DATA_ERROR);f[e]=Ds(y,t)}var g,p=c+2,d=[];for(t=0;t<u;t++){var A,w,m=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),e=0;e<p;e++){for(;(a<1||a>20)&&xs(Ps.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;m[e]=a}for(A=w=m[0],e=1;e<p;e++)m[e]>w?w=m[e]:m[e]<A&&(A=m[e]);g={},d.push(g),g.permute=new Uint16Array(258),g.limit=new Uint32Array(22),g.base=new Uint32Array(21),g.minLen=A,g.maxLen=w;var E=0;for(e=A;e<=w;e++)for(b[e]=g.limit[e]=0,a=0;a<p;a++)m[a]===e&&(g.permute[E++]=a);for(e=0;e<p;e++)b[m[e]]++;for(E=a=0,e=A;e<w;e++)E+=b[e],g.limit[e]=E-1,E<<=1,a+=b[e],g.base[e+1]=E-a;g.limit[w+1]=Number.MAX_VALUE,g.limit[w]=E+b[w]-1,g.base[A]=0}var k=new Uint32Array(256);for(e=0;e<256;e++)y[e]=e;var v,I=0,B=0,S=0,C=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,S>=l&&xs(Ps.DATA_ERROR),g=d[f[S++]]),e=g.minLen,t=i.read(e);e>g.maxLen&&xs(Ps.DATA_ERROR),!(t<=g.limit[e]);e++)t=t<<1|i.read(1);((t-=g.base[e])<0||t>=258)&&xs(Ps.DATA_ERROR);var K=g.permute[t];if(0!==K&&1!==K){if(I)for(I=0,B+a>this.dbufSize&&xs(Ps.DATA_ERROR),k[v=o[y[0]]]+=a;a--;)C[B++]=v;if(K>c)break;B>=this.dbufSize&&xs(Ps.DATA_ERROR),k[v=o[v=Ds(y,e=K-1)]]++,C[B++]=v}else I||(I=1,a=0),a+=0===K?I:2*I,I<<=1}for((s<0||s>=B)&&xs(Ps.DATA_ERROR),t=0,e=0;e<256;e++)r=t+k[e],k[e]=t,t=r;for(e=0;e<B;e++)C[k[v=255&C[e]]]|=e<<8,k[v]++;var D=0,P=0,U=0;return B&&(P=255&(D=C[s]),D>>=8,U=-1),this.writePos=D,this.writeCurrent=P,this.writeCount=B,this.writeRun=U,!0},Qs.prototype._read_bunzip=function(e,t){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&xs(Ps.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var Rs=function(e){if("readByte"in e)return e;var t=new Cs;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},Ms=function(e){var t=new Cs,r=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),r=!1;else{if("writeByte"in e)return e;t.buffer=e,r=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(r&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};var Ts=function(e,t,r){for(var i=Rs(e),n=Ms(t),s=new Qs(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&xs(Ps.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class Ls{static get tag(){return Q.packet.literalData}constructor(e=new Date){this.format=Q.literal.utf8,this.date=T.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=Q.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||T.isStream(this.text))&&(this.text=T.decodeUTF8(T.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=T.canonicalizeEOL(T.encodeUTF8(this.text))),e?I(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await k(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=T.decodeUTF8(await e.readBytes(r)),this.date=T.readDate(await e.readBytes(4));let i=e.remainder();a(i)&&(i=await C(i)),this.setBytes(i,t)}))}writeHeader(){const e=T.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),i=T.writeDate(this.date);return T.concatUint8Array([r,t,e,i])}write(){const e=this.writeHeader(),t=this.getBytes();return T.concat([e,t])}}class _s{constructor(){this.bytes=""}read(e){return this.bytes=T.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return T.stringToUint8Array(this.bytes)}toHex(){return T.uint8ArrayToHex(T.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new _s;return t.read(T.hexToUint8Array(e)),t}static wildcard(){const e=new _s;return e.read(new Uint8Array(8)),e}}const Ns=Symbol("verified"),Fs="salt@notations.openpgpjs.org",Hs=new Set([Q.signatureSubpacket.issuerKeyID,Q.signatureSubpacket.issuerFingerprint,Q.signatureSubpacket.embeddedSignature]);class Os{static get tag(){return Q.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new _s,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Ns]=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ei(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[t++],this.publicKeyAlgorithm=e[t++],this.hashAlgorithm=e[t++],t+=this.readSubPackets(e.subarray(t,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,t),t+=this.readSubPackets(e.subarray(t,e.length),!1),this.signedHashValue=e.subarray(t,t+2),t+=2,6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r}const r=e.subarray(t,e.length),{read:i,signatureParams:n}=An.signature.parseSignatureParams(this.publicKeyAlgorithm,r);if(i<r.length)throw Error("Error reading MPIs");this.params=n}writeParams(){return this.params instanceof Promise?D((async()=>An.serializeParams(this.publicKeyAlgorithm,await this.params))):An.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),T.concat(e)}async sign(e,t,r=new Date,i=!1,n){this.version=e.version,this.created=T.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Gs(this.hashAlgorithm);if(null===this.salt)this.salt=An.random.getRandomBytes(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(n.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===Fs)).length)throw Error("Unexpected existing salt notation");{const e=An.random.getRandomBytes(Gs(this.hashAlgorithm));this.rawNotations.push({name:Fs,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=T.concat(s);const a=this.toHash(this.signatureType,t,i),o=await this.hash(this.signatureType,t,a,i);this.signedHashValue=S(v(o),0,2);const c=async()=>An.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await C(o));T.isStream(o)?this.params=c():(this.params=await c(),this[Ns]=!0)}writeHashedSubPackets(){const e=Q.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(zs(e.signatureCreationTime,!0,T.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(zs(e.signatureExpirationTime,!0,T.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(zs(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(zs(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(zs(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(zs(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(zs(e.keyExpirationTime,!0,T.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(zs(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=T.concat([r,this.revocationKeyFingerprint]),t.push(zs(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(zs(e.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=T.encodeUTF8(i);r.push(T.writeNumber(o.length,2)),r.push(T.writeNumber(n.length,2)),r.push(o),r.push(n),r=T.concat(r),t.push(zs(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(zs(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(zs(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.keyServerPreferences)),t.push(zs(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(zs(e.preferredKeyServer,!1,T.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(zs(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(zs(e.policyURI,!1,T.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.keyFlags)),t.push(zs(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(zs(e.signersUserID,!1,T.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=T.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(zs(e.reasonForRevocation,!0,r))),null!==this.features&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.features)),t.push(zs(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(T.stringToUint8Array(this.signatureTargetHash)),r=T.concat(r),t.push(zs(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(zs(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=T.concat(r),t.push(zs(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(zs(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(zs(e.preferredCipherSuites,!1,r)));const i=T.concat(t),n=T.writeNumber(i.length,6===this.version?4:2);return T.concat([n,i])}writeUnhashedSubPackets(){const e=[];this.unhashedSubpackets.forEach((t=>{e.push(Yr(t.length)),e.push(t)}));const t=T.concat(e),r=T.writeNumber(t.length,6===this.version?4:2);return T.concat([r,t])}readSubPacket(e,t=!0){let r=0;const i=!!(128&e[r]),n=127&e[r];if(t||(this.unhashedSubpackets.push(e.subarray(r,e.length)),Hs.has(n)))switch(r++,n){case Q.signatureSubpacket.signatureCreationTime:this.created=T.readDate(e.subarray(r,e.length));break;case Q.signatureSubpacket.signatureExpirationTime:{const t=T.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case Q.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case Q.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case Q.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case Q.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case Q.signatureSubpacket.keyExpirationTime:{const t=T.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case Q.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case Q.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case Q.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const n=T.readNumber(e.subarray(r,r+2));r+=2;const s=T.readNumber(e.subarray(r,r+2));r+=2;const a=T.decodeUTF8(e.subarray(r,r+n)),o=e.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:i}),t&&(this.notations[a]=T.decodeUTF8(o));break}case Q.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=T.decodeUTF8(e.subarray(r,e.length));break;case Q.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case Q.signatureSubpacket.policyURI:this.policyURI=T.decodeUTF8(e.subarray(r,e.length));break;case Q.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.signersUserID:this.signersUserID=T.decodeUTF8(e.subarray(r,e.length));break;case Q.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=T.decodeUTF8(e.subarray(r,e.length));break;case Q.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=An.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=T.uint8ArrayToString(e.subarray(r,r+t));break}case Q.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Os,this.embeddedSignature.read(e.subarray(r,e.length));break;case Q.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case Q.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:{const e=Error("Unknown signature subpacket type "+n);if(i)throw e;T.printDebug(e)}}}readSubPackets(e,t=!0,r){const i=6===this.version?4:2,n=T.readNumber(e.subarray(0,i));let s=i;for(;s<2+n;){const i=Vr(e.subarray(s,e.length));s+=i.offset,this.readSubPacket(e.subarray(s,s+i.len),t,r),s+=i.len}return s}toSign(e,t){const r=Q.signature;switch(e){case r.binary:return null!==t.text?T.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return T.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,i;if(t.userID)i=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,e=t.userAttribute}const n=e.write();return T.concat([this.toSign(r.key,t),new Uint8Array([i]),T.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return T.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return b(v(this.signatureData),(e=>{r+=e.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==Q.signature.binary&&this.signatureType!==Q.signature.text||(t?i.push(new Uint8Array(6)):i.push(e.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(T.writeNumber(r,4)),T.concat(i)}))}toHash(e,t,r=!1){const i=this.toSign(e,t);return T.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,i=!1){if(6===this.version&&this.salt.length!==Gs(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,i)),An.hash.digest(this.hashAlgorithm,r)}async verify(e,t,r,i=new Date,n=!1,s=R){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===Q.signature.binary||t===Q.signature.text;if(!(this[Ns]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(t,r,n),s=await this.hash(t,r,i)),s=await C(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===Q.publicKey.hmac?e.privateParams:null;if(this[Ns]=await An.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,i,s),!this[Ns])throw Error("Signature verification failed")}const o=T.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+Q.read(Q.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[Q.signature.binary,Q.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+Q.read(Q.hash,this.hashAlgorithm).toUpperCase());if(this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=T.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function zs(e,t,r){const i=[];return i.push(Yr(r.length+1)),i.push(new Uint8Array([(t?128:0)|e])),i.push(r),T.concat(i)}function Gs(e){switch(e){case Q.hash.sha256:return 16;case Q.hash.sha384:return 24;case Q.hash.sha512:return 32;case Q.hash.sha224:case Q.hash.sha3_256:return 16;case Q.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class js{static get tag(){return Q.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new js;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ei(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new _s,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new _s,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),T.concatUint8Array(e)}calculateTrailer(...e){return D((async()=>Os.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==Q.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!T.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!T.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function qs(e,t){if(!t[e]){let t;try{t=Q.read(Q.packet,e)}catch(t){throw new ti("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}js.prototype.hash=Os.prototype.hash,js.prototype.toHash=Os.prototype.toHash,js.prototype.toSign=Os.prototype.toSign;class Vs extends Array{static async fromBinary(e,t,r=R){const i=new Vs;return await i.read(e,t,r),i}async read(e,t,r=R){r.additionalAllowedPackets.length&&(t={...t,...T.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=E(e,(async(e,i)=>{const n=U(i);try{for(;;){await n.ready;if(await Xr(e,(async e=>{try{if(e.tag===Q.packet.marker||e.tag===Q.packet.trust||e.tag===Q.packet.padding)return;const i=qs(e.tag,t);i.packets=new Vs,i.fromStream=T.isStream(e.packet),await i.read(e.packet,r),await n.write(i)}catch(t){if(t instanceof ti){if(!(e.tag<=39))return;await n.abort(t)}const i=!r.ignoreUnsupportedPackets&&t instanceof ei,s=!(r.ignoreMalformedPackets||t instanceof ei);if(i||s||$r(e.tag))await n.abort(t);else{const t=new ri(e.tag,e.packet);await n.write(t)}T.printDebugError(t)}})))return await n.ready,void await n.close()}}catch(e){await n.abort(e)}}));const i=P(this.stream);for(;;){const{done:e,value:t}=await i.read();if(e?this.stream=null:this.push(t),e||$r(t.constructor.tag))break}i.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ri?this[t].tag:this[t].constructor.tag,i=this[t].write();if(T.isStream(i)&&$r(this[t].constructor.tag)){let t=[],n=0;const s=512;e.push(Wr(r)),e.push(b(i,(e=>{if(t.push(e),n+=e.length,n>=s){const e=Math.min(Math.log(n)/Math.LN2|0,30),r=2**e,i=T.concat([Jr(e)].concat(t));return t=[i.subarray(1+r)],n=t[0].length,i.subarray(0,1+r)}}),(()=>T.concat([Yr(n)].concat(t)))))}else{if(T.isStream(i)){let t=0;e.push(b(v(i),(e=>{t+=e.length}),(()=>Zr(r,t))))}else e.push(Zr(r,i.length));e.push(i)}}return T.concat(e)}filterByTag(...e){const t=new Vs,r=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(r(this[i].constructor.tag))&&t.push(this[i]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,i=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(i(r[n].constructor.tag))&&t.push(n);return t}}const Ys=/*#__PURE__*/T.constructAllowedPackets([Ls,js,Os]);class Js{static get tag(){return Q.packet.compressedData}constructor(e=R){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=R){await k(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),T.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=R){const t=Q.read(Q.compression,this.algorithm),r=ea[t];if(!r)throw Error(t+" decompression not supported");this.packets=await Vs.fromBinary(r(this.compressed),Ys,e)}compress(){const e=Q.read(Q.compression,this.algorithm),t=Xs[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function Ws(e,t){return r=>{if(!T.isStream(r)||a(r))return D((()=>C(r).then((e=>new Promise(((r,i)=>{const n=new t;n.ondata=e=>{r(e)};try{n.push(e,!0)}catch(e){i(e)}}))))));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const i=r.getReader(),n=new t;return new ReadableStream({async start(e){for(n.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await i.read();if(e)return void n.push(new Uint8Array,!0);t.length&&n.push(t)}}})}}function Zs(e){return function(t){return D((async()=>e(await C(t))))}}const $s=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),Xs={zip:/*#__PURE__*/Ws($s("deflate-raw").compressor,gs),zlib:/*#__PURE__*/Ws($s("deflate").compressor,ds)},ea={uncompressed:e=>e,zip:/*#__PURE__*/Ws($s("deflate-raw").decompressor,ps),zlib:/*#__PURE__*/Ws($s("deflate").decompressor,As),bzip2:/*#__PURE__*/Zs(Ts)},ta=/*#__PURE__*/T.constructAllowedPackets([Ls,Js,js,Os]);class ra{static get tag(){return Q.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new ra;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await k(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new ei(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?T.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):T.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=R){let i=this.packets.write();if(a(i)&&(i=await C(i)),2===this.version)this.cipherAlgorithm=e,this.salt=An.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await ia(this,"encrypt",t,i);else{const{blockSize:n}=An.getCipherParams(e),s=await An.getPrefixRandom(e),a=new Uint8Array([211,20]),o=T.concat([s,i,a]),c=await An.hash.sha1(I(o)),h=T.concat([o,c]);this.encrypted=await An.mode.cfb.encrypt(e,t,h,new Uint8Array(n),r)}return!0}async decrypt(e,t,r=R){let i,n=v(this.encrypted);if(a(n)&&(n=await C(n)),2===this.version)i=await ia(this,"decrypt",t,n);else{const{blockSize:s}=An.getCipherParams(e),a=await An.mode.cfb.decrypt(e,t,n,new Uint8Array(s)),o=S(I(a),-20),c=S(a,0,-20),h=Promise.all([C(await An.hash.sha1(I(c))),C(o)]).then((([e,t])=>{if(!T.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),u=S(c,s+2);i=S(u,0,-2),i=d([i,D((()=>h))]),T.isStream(n)&&r.allowUnauthenticatedStream||(i=await C(i))}return this.packets=await Vs.fromBinary(i,ta,r),!0}}async function ia(e,t,r,i){const n=e instanceof ra&&2===e.version,s=!n&&e.constructor.tag===Q.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=An.getAEADMode(e.aeadAlgorithm),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,h=2**(e.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),y=new Uint8Array(l,0,5+u),f=new Uint8Array(l),g=new DataView(l),p=new Uint8Array(l,5,8);y.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,w,m=0,b=Promise.resolve(),k=0,v=0;if(n){const{keySize:t}=An.getCipherParams(e.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await Gi(Q.hash.sha256,r,e.salt,n,t+i);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),w=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const I=await a(e.cipherAlgorithm,r);return E(i,(async(r,i)=>{if("array"!==T.isStream(r)){const t=new TransformStream({},{highWaterMark:T.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});A(t.readable,i),i=t.writable}const s=P(r),a=U(i);try{for(;;){let e=await s.readBytes(h+o)||new Uint8Array;const r=e.subarray(e.length-o);let i,l,A;if(e=e.subarray(0,e.length-o),n)A=d;else{A=d.slice();for(let e=0;e<8;e++)A[d.length-8+e]^=p[e]}if(!m||e.length?(s.unshift(r),i=I[t](e,A,y),i.catch((()=>{})),v+=e.length-o+c):(g.setInt32(5+u+4,k),i=I[t](r,A,f),i.catch((()=>{})),v+=c,l=!0),k+=e.length-o,b=b.then((()=>i)).then((async e=>{await a.ready,await a.write(e),v-=e.length})).catch((e=>a.abort(e))),(l||v>a.desiredSize)&&await b,l){await a.close();break}n?w.setInt32(d.length-4,++m):g.setInt32(9,++m)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const na=/*#__PURE__*/T.constructAllowedPackets([Ls,Js,js,Os]);class sa{static get tag(){return Q.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=Q.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await k(e,(async e=>{const t=await e.readByte();if(1!==t)throw new ei(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=An.getAEADMode(this.aeadAlgorithm);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return T.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=R){this.packets=await Vs.fromBinary(await ia(this,"decrypt",t,v(this.encrypted)),na,r)}async encrypt(e,t,r=R){this.cipherAlgorithm=e;const{ivLength:i}=An.getAEADMode(this.aeadAlgorithm);this.iv=An.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await ia(this,"encrypt",t,n)}}class aa{static get tag(){return Q.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new _s,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new aa;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?_s.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ei(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const i=r-1;this.publicKeyFingerprint=e.subarray(t,t+i),t+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=_s.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=An.parseEncSessionKeyParams(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===Q.publicKey.x25519||this.publicKeyAlgorithm===Q.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=Q.write(Q.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),An.serializeParams(this.publicKeyAlgorithm,this.encrypted)),T.concatUint8Array(e)}async encrypt(e){const t=Q.write(Q.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,i=oa(this.version,t,r,this.sessionKey),n=t===Q.publicKey.aead?e.privateParams:null;this.encrypted=await An.publicKeyEncrypt(t,r,e.publicParams,n,i,e.getFingerprintBytes())}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?oa(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,i=await An.publicKeyDecrypt(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,e.getFingerprintBytes(),r),{sessionKey:n,sessionKeyAlgorithm:s}=function(e,t,r,i){switch(t){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.elgamal:case Q.publicKey.ecdh:case Q.publicKey.aead:{const t=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=T.writeChecksum(t.subarray(t.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(i){const t=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:T.selectUint8Array(t,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===e?null:T.selectUint8(t,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===e||Q.read(Q.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case Q.publicKey.x25519:case Q.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);3===this.version&&this.publicKeyAlgorithm!==Q.publicKey.x25519&&this.publicKeyAlgorithm!==Q.publicKey.x448&&(this.sessionKeyAlgorithm=s),this.sessionKey=n}}function oa(e,t,r,i){switch(t){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.elgamal:case Q.publicKey.ecdh:case Q.publicKey.aead:return T.concatUint8Array([new Uint8Array(6===e?[]:[r]),i,T.writeChecksum(i.subarray(i.length%8))]);case Q.publicKey.x25519:case Q.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class ca{static get tag(){return Q.packet.symEncryptedSessionKey}constructor(e=R){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=Q.symmetric.aes256,this.aeadAlgorithm=Q.write(Q.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ei(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const i=e[t++];if(this.s2k=Bn(i),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=An.getAEADMode(this.aeadAlgorithm);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;t=T.concatUint8Array([new Uint8Array([this.version,n,e,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?t=T.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=T.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=T.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=An.getCipherParams(t),n=await this.s2k.produceKey(e,i);if(this.version>=5){const e=An.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|ca.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await Gi(Q.hash.sha256,n,new Uint8Array,r,i):n,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await An.mode.cfb.decrypt(t,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=Q.write(Q.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length)}else this.sessionKey=n}async encrypt(e,t=R){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=Sn(t),this.s2k.generateSalt();const{blockSize:i,keySize:n}=An.getCipherParams(r),s=await this.s2k.produceKey(e,n);if(null===this.sessionKey&&(this.sessionKey=An.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const e=An.getAEADMode(this.aeadAlgorithm);this.iv=An.random.getRandomBytes(e.ivLength);const t=new Uint8Array([192|ca.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await Gi(Q.hash.sha256,s,new Uint8Array,t,n):s,a=await e(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=T.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await An.mode.cfb.encrypt(r,s,e,new Uint8Array(i),t)}}}class ha{static get tag(){return Q.packet.publicKey}constructor(e=new Date,t=R){this.version=t.v6Keys?6:4,this.created=T.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new ha,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e){let t=0;if(this.version=e[t++],4===this.version||5===this.version||6===this.version){this.created=T.readDate(e.subarray(t,t+4)),t+=4,this.algorithm=e[t++],this.version>=5&&(t+=4);const{read:r,publicParams:i}=An.parsePublicKeyParams(this.algorithm,e.subarray(t));if(6===this.version&&i.oid&&(i.oid.getName()===Q.curve.curve25519Legacy||i.oid.getName()===Q.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,t+=r,await this.computeFingerprintAndKeyID(),t}throw new ei(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(T.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=An.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&e.push(T.writeNumber(t.length,4)),e.push(t),T.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,i=e>=5?4:2;return T.concatUint8Array([new Uint8Array([r]),T.writeNumber(t.length,i),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new _s,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await An.hash.sha256(e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await An.hash.sha1(e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return T.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&T.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=Q.read(Q.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=T.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}ha.prototype.readPublicKey=ha.prototype.read,ha.prototype.writePublicKey=ha.prototype.write;const ua=/*#__PURE__*/T.constructAllowedPackets([Ls,Js,js,Os]);class la{static get tag(){return Q.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=R){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=An.getCipherParams(e),n=await C(v(this.encrypted)),s=await An.mode.cfb.decrypt(e,t,n.subarray(i+2),n.subarray(2,i+2));this.packets=await Vs.fromBinary(s,ua,r)}async encrypt(e,t,r=R){const i=this.packets.write(),{blockSize:n}=An.getCipherParams(e),s=await An.getPrefixRandom(e),a=await An.mode.cfb.encrypt(e,t,s,new Uint8Array(n),r),o=await An.mode.cfb.encrypt(e,t,i,a.subarray(2),r);this.encrypted=T.concat([a,o])}}class ya extends ha{static get tag(){return Q.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new ya,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class fa{static get tag(){return Q.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=Vr(e.subarray(t,e.length));t+=r.offset,this.attributes.push(T.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(Yr(this.attributes[t].length)),e.push(T.stringToUint8Array(this.attributes[t]));return T.concatUint8Array(e)}equals(e){return!!(e&&e instanceof fa)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class ga extends ha{static get tag(){return Q.packet.secretKey}constructor(e=new Date,t=R){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=R){let r=await this.readPublicKey(e);const i=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=Bn(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+An.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+An.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(i),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!T.equalsUint8Array(T.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=An.parsePrivateKeyParams(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof ei)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return T.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=An.serializeParams(this.algorithm,this.privateParams)),5===this.version&&t.push(T.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(T.writeChecksum(this.keyMaterial))),T.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=R){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=Bn(Q.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=Q.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=R){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=Sn(t),this.s2k.generateSalt();const r=An.serializeParams(this.algorithm,this.privateParams);this.symmetric=Q.symmetric.aes256;const{blockSize:i}=An.getCipherParams(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=Q.aead.eax;const t=An.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const n=Wr(this.constructor.tag),s=await pa(this.version,this.s2k,e,this.symmetric,this.aead,n),a=await t(this.symmetric,s);this.iv=this.isLegacyAEAD?An.random.getRandomBytes(i):An.random.getRandomBytes(t.ivLength);const o=this.isLegacyAEAD?new Uint8Array:T.concatUint8Array([n,this.writePublicKey()]);this.keyMaterial=await a.encrypt(r,this.iv.subarray(0,t.ivLength),o)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const n=await pa(this.version,this.s2k,e,this.symmetric);this.iv=An.random.getRandomBytes(i),this.keyMaterial=await An.mode.cfb.encrypt(this.symmetric,n,T.concatUint8Array([r,await An.hash.sha1(r,t)]),this.iv,t)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=Wr(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(t=await pa(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const e=An.getAEADMode(this.aead),n=await e(this.symmetric,t);try{const t=this.isLegacyAEAD?new Uint8Array:T.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await An.mode.cfb.decrypt(this.symmetric,t,this.keyMaterial,this.iv);i=e.subarray(0,-20);const r=await An.hash.sha1(i);if(!T.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=An.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await An.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===Q.publicKey.ecdh&&t===Q.curve.curve25519Legacy||this.algorithm===Q.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await An.generateParams(this.algorithm,e,t,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function pa(e,t,r,i,n,s,a){const{keySize:o}=An.getCipherParams(i),c=await t.produceKey(r,o);if(!n||5===e||a)return c;const h=T.concatUint8Array([s,new Uint8Array([e,i,n])]);return Gi(Q.hash.sha256,c,new Uint8Array,h,o)}class da{static get tag(){return Q.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(T.isString(e)||e.name&&!T.isString(e.name)||e.email&&!T.isEmailAddress(e.email)||e.comment&&!T.isString(e.comment))throw Error("Invalid user ID format");const t=new da;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=R){const r=T.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:e,comment:t,email:r}=i.groups;this.comment=t?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=e?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return T.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class Aa extends ga{static get tag(){return Q.packet.secretSubkey}constructor(e=new Date,t=R){super(e,t)}}const wa=/*#__PURE__*/T.constructAllowedPackets([Os]);class ma{constructor(e){this.packets=e||new Vs}write(){return this.packets.write()}armor(e=R){const t=this.packets.some((e=>e.constructor.tag===Os.tag&&6!==e.version));return $(Q.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function ba(e,t){const r=new Aa(e.date,t);return r.packets=null,r.algorithm=Q.write(Q.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Ea(e,t){const r=new ga(e.date,t);return r.packets=null,r.algorithm=Q.write(Q.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function ka(e,t,r,i,n=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,i,n,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw T.wrapError(`Could not find valid ${Q.read(Q.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function va(e,t,r=new Date){const i=T.normalizeDate(r);if(null!==i){const r=Ka(e,t);return!(e.created<=i&&i<r)}return!1}async function Ia(e,t,r,i){const n={};n.key=t,n.bind=e;const s={signatureType:Q.signature.subkeyBinding};r.sign?(s.keyFlags=[Q.keyFlags.signData],s.embeddedSignature=await Ba(n,null,e,{signatureType:Q.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[Q.keyFlags.forwardedCommunication]:[Q.keyFlags.encryptCommunication|Q.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await Ba(n,null,t,s,r.date,void 0,void 0,void 0,i)}async function Ba(e,t,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Os;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(e,t,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(e){const t=await e.getPrimarySelfSignature(r,i,n);t.preferredHashAlgorithms&&([a]=t.preferredHashAlgorithms,s=An.hash.getHashByteLength(s)<=An.hash.getHashByteLength(a)?a:s)}switch(t.algorithm){case Q.publicKey.ecdsa:case Q.publicKey.eddsaLegacy:case Q.publicKey.ed25519:case Q.publicKey.ed448:a=An.getPreferredCurveHashAlgo(t.algorithm,t.publicParams.oid)}return An.hash.getHashByteLength(s)<=An.hash.getHashByteLength(a)?a:s}(t,r,n,s,c),h.rawNotations=[...a],await h.sign(r,e,n,o,c),h}async function Sa(e,t,r,i=new Date,n){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(i)||n&&!await n(e)||t[r].some((function(t){return T.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function Ca(e,t,r,i,n,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(i.map((async function(e){try{n&&!e.issuerKeyID.equals(n.issuerKeyID)||(await e.verify(s,t,r,a,!1,o),c.push(e.issuerKeyID))}catch(e){}}))),n?(n.revoked=!!c.some((e=>e.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function Ka(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function Da(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=T.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"ecc":try{e.curve=Q.write(Q.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==Q.curve.ed25519Legacy&&e.curve!==Q.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?Q.curve.ed25519Legacy:Q.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===Q.curve.ed25519Legacy?Q.publicKey.eddsaLegacy:Q.publicKey.ecdsa:e.algorithm=Q.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?Q.publicKey.ed25519:Q.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?Q.publicKey.ed448:Q.publicKey.x448;break;case"rsa":e.algorithm=Q.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=Q.publicKey.hmac;try{e.symmetric=Q.write(Q.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=Q.publicKey.aead;try{e.symmetric=Q.write(Q.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function Pa(e,t,r){switch(e.algorithm){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:case Q.publicKey.dsa:case Q.publicKey.ecdsa:case Q.publicKey.eddsaLegacy:case Q.publicKey.ed25519:case Q.publicKey.ed448:case Q.publicKey.hmac:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&Q.keyFlags.signData);default:return!1}}function Ua(e,t,r){switch(e.algorithm){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:case Q.publicKey.elgamal:case Q.publicKey.ecdh:case Q.publicKey.x25519:case Q.publicKey.x448:case Q.publicKey.aead:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&Q.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&Q.keyFlags.encryptStorage);default:return!1}}function xa(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:case Q.publicKey.elgamal:case Q.publicKey.ecdh:case Q.publicKey.x25519:case Q.publicKey.x448:return!(!(!t.keyFlags||!!(t.keyFlags[0]&Q.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&Q.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&Q.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&Q.keyFlags.forwardedCommunication));default:return!1}}function Qa(e,t){const r=Q.write(Q.publicKey,e.algorithm),i=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:case Q.publicKey.rsaEncrypt:if(i.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case Q.publicKey.ecdsa:case Q.publicKey.eddsaLegacy:case Q.publicKey.ecdh:if(t.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class Ra{constructor(e,t){this.userID=e.constructor.tag===Q.packet.userID?e:null,this.userAttribute=e.constructor.tag===Q.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Vs;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new Ra(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new Ra(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return Ba(n,e,s.keyPacket,{signatureType:Q.signature.certGeneric,keyFlags:[Q.keyFlags.certifyKeys|Q.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,i=R){const n=this.mainKey.keyPacket;return Ca(n,Q.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,i)}async verifyCertificate(e,t,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,i);if(e.revoked||await n.isRevoked(e,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,Q.signature.certGeneric,a,r,void 0,i)}catch(e){throw T.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(i,Q.signature.certGeneric,n,e,void 0,t)}catch(e){throw T.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await Sa(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(i,Q.signature.certGeneric,n,t,!1,r),!0}catch(e){return!1}})),await Sa(e,this,"otherCertifications",t),await Sa(e,this,"revocationSignatures",t,(function(e){return Ca(i,Q.signature.certRevocation,n,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=Q.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=R){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new Ra(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await Ba(s,null,e,{signatureType:Q.signature.certRevocation,reasonForRevocationFlag:Q.write(Q.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class Ma{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Vs;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Ma(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,i=R){const n=this.mainKey.keyPacket;return Ca(n,Q.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verify(e=new Date,t=R){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await ka(this.bindingSignatures,r,Q.signature.subkeyBinding,i,e,t);if(n.revoked||await this.isRevoked(n,null,e,t))throw Error("Subkey is revoked");if(va(this.keyPacket,n,e))throw Error("Subkey is expired");return n}async getExpirationTime(e=new Date,t=R){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await ka(this.bindingSignatures,r,Q.signature.subkeyBinding,i,e,t)}catch(e){return null}const s=Ka(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=R){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===Q.packet.publicSubkey&&e.keyPacket.constructor.tag===Q.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await Sa(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<n.bindingSignatures.length;t++)if(n.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>n.bindingSignatures[t].created&&(n.bindingSignatures[t]=e),!1;try{return await e.verify(i,Q.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await Sa(e,this,"revocationSignatures",t,(function(e){return Ca(i,Q.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=Q.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=R){const s={key:e,bind:this.keyPacket},a=new Ma(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await Ba(s,null,e,{signatureType:Q.signature.subkeyRevocation,reasonForRevocationFlag:Q.write(Q.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{Ma.prototype[e]=function(){return this.keyPacket[e]()}}));const Ta=/*#__PURE__*/T.constructAllowedPackets([Os]),La=new Set([Q.packet.publicKey,Q.packet.privateKey]),_a=new Set([Q.packet.publicKey,Q.packet.privateKey,Q.packet.publicSubkey,Q.packet.privateSubkey]);class Na{packetListToStructure(e,t=new Set){let r,i,n,s;for(const a of e){if(a instanceof ri){_a.has(a.tag)&&!s&&(s=La.has(a.tag)?La:_a);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case Q.packet.publicKey:case Q.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case Q.packet.userID:case Q.packet.userAttribute:r=new Ra(a,this),this.users.push(r);break;case Q.packet.publicSubkey:case Q.packet.secretSubkey:r=null,n=new Ma(a,this),this.subkeys.push(n);break;case Q.packet.signature:switch(a.signatureType){case Q.signature.certGeneric:case Q.signature.certPersona:case Q.signature.certCasual:case Q.signature.certPositive:if(!r){T.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case Q.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case Q.signature.key:this.directSignatures.push(a);break;case Q.signature.subkeyBinding:if(!n){T.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case Q.signature.keyRevocation:this.revocationSignatures.push(a);break;case Q.signature.subkeyRevocation:if(!n){T.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const e=new Vs;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},i=R){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{Qa(n,i)}catch(e){throw T.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await ka(r.bindingSignatures,n,Q.signature.subkeyBinding,e,t,i);if(!Pa(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await ka([s.embeddedSignature],r.keyPacket,Q.signature.keyBinding,e,t,i),Qa(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Pa(n,s,i))return Qa(n,i),this}catch(e){a=e}throw T.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},i=R){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{Qa(n,i)}catch(e){throw T.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await ka(r.bindingSignatures,n,Q.signature.subkeyBinding,e,t,i);if(Ua(r.keyPacket,s,i))return Qa(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Ua(n,s,i))return Qa(n,i),this}catch(e){a=e}throw T.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,i=R){return Ca(this.keyPacket,Q.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verifyPrimaryKey(e=new Date,t={},r=R){const i=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(va(i,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==i.version){const t=await ka(this.directSignatures,i,Q.signature.key,{key:i},e,r).catch((()=>{}));if(t&&va(i,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=R){let r;try{const i=await this.getPrimarySelfSignature(null,e,t),n=Ka(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await ka(this.directSignatures,this.keyPacket,Q.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=Ka(this.keyPacket,a);r=Math.min(n,s,e)}else r=n<s?n:s}catch(e){r=null}return T.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=R){const i=this.keyPacket;if(6===i.version)return ka(this.directSignatures,i,Q.signature.key,{key:i},e,r);const{selfCertification:n}=await this.getPrimaryUser(e,t,r);return n}async getPrimaryUser(e=new Date,t={},r=R){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await ka(s.selfCertifications,i,Q.signature.certGeneric,o,e,r);n.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=n.sort((function(e,t){const r=e.selfCertification,i=t.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=R){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const i=this.clone();return await Sa(e,i,"revocationSignatures",t,(n=>Ca(i.keyPacket,Q.signature.keyRevocation,i,[n],null,e.keyPacket,t,r))),await Sa(e,i,"directSignatures",t),await Promise.all(e.users.map((async e=>{const n=i.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const n=i.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.subkeys.push(t)}}))),i}async getRevocationCertificate(e=new Date,t=R){const r={key:this.keyPacket},i=await ka(this.revocationSignatures,this.keyPacket,Q.signature.keyRevocation,r,e,t),n=new Vs;n.push(i);const s=6!==this.keyPacket.version;return $(Q.armor.publicKey,n.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=R){const i=await Z(e),n=(await Vs.fromBinary(i.data,Ta,r)).findPacket(Q.packet.signature);if(!n||n.signatureType!==Q.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,Q.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw T.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(e,t,r,i=R){const{index:n,user:s}=await this.getPrimaryUser(t,r,i),a=await s.certify(e,t,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(e,t=new Date,r=R){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(e,t,r)}))),i}async verifyPrimaryUser(e,t=new Date,r,i=R){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,i);return e?await s.verifyAllCertifications(e,t,i):[{keyID:n.getKeyID(),valid:await s.verify(t,i).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=R){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:i.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];n.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{Na.prototype[e]=Ma.prototype[e]}));class Fa extends Na{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([Q.packet.secretKey,Q.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=R){const t=6!==this.keyPacket.version;return $(Q.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class Ha extends Fa{constructor(e){if(super(),this.packetListToStructure(e,new Set([Q.packet.publicKey,Q.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new Vs,t=this.toPacketList();let r=!1;for(const i of t)if(!r||i.constructor.tag!==Q.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case Q.packet.secretKey:{if(i.algorithm===Q.publicKey.aead||i.algorithm===Q.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=ha.fromSecretKeyPacket(i);e.push(t);break}case Q.packet.secretSubkey:{if(i.algorithm===Q.publicKey.aead||i.algorithm===Q.publicKey.hmac){r=!0;break}const t=ya.fromSecretSubkeyPacket(i);e.push(t);break}default:e.push(i)}return new Fa(e)}armor(e=R){const t=6!==this.keyPacket.version;return $(Q.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},i=R){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0))try{const e={key:n,bind:this.subkeys[r].keyPacket},a=await ka(this.subkeys[r].bindingSignatures,n,Q.signature.subkeyBinding,e,t,i);xa(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(e){}const a=await this.getPrimarySelfSignature(t,r,i);return e&&!n.getKeyID().equals(e,!0)||!xa(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=R){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=Q.reasonForRevocation.noReason,string:t=""}={},r=new Date,i=R){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await Ba(n,null,this.keyPacket,{signatureType:Q.signature.keyRevocation,reasonForRevocationFlag:Q.write(Q.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,i)),s}async addSubkey(e={}){const t={...R,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(e){switch(Q.write(Q.publicKey,e)){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:case Q.publicKey.dsa:return"rsa";case Q.publicKey.ecdsa:case Q.publicKey.eddsaLegacy:return"ecc";case Q.publicKey.ed25519:return"curve25519";case Q.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",e=Da(e,i);const n=await ba(e,{...t,v6Keys:6===this.keyPacket.version});Qa(n,t);const s=await Ia(n,r,e,t),a=this.toPacketList();return a.push(n,s),new Ha(a)}}const Oa=/*#__PURE__*/T.constructAllowedPackets([ha,ya,ga,Aa,da,fa,Os]);function za(e){for(const t of e)switch(t.constructor.tag){case Q.packet.secretKey:return new Ha(e);case Q.packet.publicKey:return new Fa(e)}throw Error("No key packet found")}async function Ga(e,t,r,i){r.passphrase&&await e.encrypt(r.passphrase,i),await Promise.all(t.map((async function(e,t){const n=r.subkeys[t].passphrase;n&&await e.encrypt(n,i)})));const n=new Vs;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[Q.keyFlags.certifyKeys|Q.keyFlags.signData];const n=s([Q.symmetric.aes256,Q.symmetric.aes128],i.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=n,i.aeadProtect){const e=s([Q.aead.gcm,Q.aead.eax,Q.aead.ocb],i.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>n.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([Q.hash.sha256,Q.hash.sha512,...6===e.version?[Q.hash.sha3_256,Q.hash.sha3_512]:[]],i.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([Q.compression.uncompressed,Q.compression.zlib,Q.compression.zip],i.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=Q.features.modificationDetection,i.aeadProtect&&(t.features[0]|=Q.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(n.push(e),6===e.version){const t={key:e},s=a();s.signatureType=Q.signature.key;const o=await Ba(t,null,e,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(t,n){const s=da.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=Q.signature.certGeneric,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await Ba(o,null,e,c,r.date,void 0,void 0,void 0,i)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{n.push(e),n.push(t)}))})),await Promise.all(t.map((async function(t,n){const s=r.subkeys[n];return{secretSubkeyPacket:t,subkeySignaturePacket:await Ia(t,e,s,i)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{n.push(e),n.push(t)}))}));const o={key:e};return n.push(await Ba(o,null,e,{signatureType:Q.signature.keyRevocation,reasonForRevocationFlag:Q.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new Ha(n)}const ja=/*#__PURE__*/T.constructAllowedPackets([Ls,Js,sa,ra,la,aa,ca,js,Os]),qa=/*#__PURE__*/T.constructAllowedPackets([ca]),Va=/*#__PURE__*/T.constructAllowedPackets([Os]);class Ya{constructor(e){this.packets=e||new Vs}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(Q.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(Q.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(Q.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,i=new Date,n=R){const s=this.packets.filterByTag(Q.packet.symmetricallyEncryptedData,Q.packet.symEncryptedIntegrityProtectedData,Q.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!T.isUint8Array(t)||!a.cipherAlgorithm&&!T.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||Q.write(Q.symmetric,e);await a.decrypt(r,t,n)}catch(e){T.printDebugError(e),h=e}})));if(K(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new Ya(a.packets);return a.packets=new Vs,l}async decryptSessionKeys(e,t,r,i=new Date,n=R){let s,a=[];if(t){const e=this.packets.filterByTag(Q.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let i;i=r?await Vs.fromBinary(e.write(),qa,n):e,await Promise.all(i.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){T.printDebugError(e),e instanceof wn&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(Q.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o=[Q.symmetric.aes256,Q.symmetric.aes128,Q.symmetric.tripledes,Q.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(i,void 0,n);t.preferredSymmetricAlgorithms&&(o=o.concat(t.preferredSymmetricAlgorithms))}catch(e){}const c=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,n)).map((e=>e.keyPacket));await Promise.all(c.map((async function(e){if(!e||e.isDummy())return;if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===Q.publicKey.rsaEncrypt||t.publicKeyAlgorithm===Q.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===Q.publicKey.rsaSign||t.publicKeyAlgorithm===Q.publicKey.elgamal)){const i=t.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new aa;r.read(i);const n={sessionKeyAlgorithm:t,sessionKey:An.generateSessionKey(t)};try{await r.decrypt(e,n),a.push(r)}catch(e){T.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const i=r||t.sessionKeyAlgorithm;if(i&&!o.includes(Q.write(Q.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){T.printDebugError(e),s=e}})))}))),K(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+T.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&Q.read(Q.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(Q.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(Q.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(Q.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],i=R){const{symmetricAlgo:n,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],i=R){const n=await Promise.all(e.map(((e,n)=>e.getPrimarySelfSignature(t,r[n],i))));if(e.length?!i.ignoreSEIPDv2FeatureFlag&&n.every((e=>e.features&&e.features[0]&Q.features.seipdv2)):i.aeadProtect){const e={symmetricAlgo:Q.symmetric.aes128,aeadAlgo:Q.aead.ocb},t={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((e=>e.preferredCipherSuites&&e.preferredCipherSuites.some((e=>e[0]===t.symmetricAlgo&&e[1]===t.aeadAlgo))))?t:e}const s=Q.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,i),a=Q.read(Q.symmetric,n),o=s?Q.read(Q.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===Q.publicKey.x25519||e.keyPacket.algorithm===Q.publicKey.x448)&&!o&&!T.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:An.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,i=!1,n=[],s=new Date,a=[],o=R){if(r){if(!T.isUint8Array(r.data)||!T.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Ya.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Ya.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await Ya.encryptSessionKey(c,h,u,e,t,i,n,s,a,o),y=ra.fromObject({version:u?2:1,aeadAlgorithm:u?Q.write(Q.aead,u):null});y.packets=this.packets;const f=Q.write(Q.symmetric,h);return await y.encrypt(f,c,o),l.packets.push(y),y.packets=new Vs,l}static async encryptSessionKey(e,t,r,i,n,s=!1,a=[],o=new Date,c=[],h=R){const u=new Vs,l=Q.write(Q.symmetric,t),y=r&&Q.write(Q.aead,r);if(i){const t=await Promise.all(i.map((async function(t,r){const i=await t.getEncryptionKey(a[r],o,c,h),n=aa.fromObject({version:y?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...t)}if(n){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,i=async function(e,s,a,o){const c=new ca(h);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((e=>t(c,e))))).reduce(r))return i(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((t=>i(e,l,y,t))));u.push(...s)}return new Ya(u)}async sign(e=[],t=null,r=[],i=new Date,n=[],s=[],a=R){const o=new Vs,c=this.packets.findPacket(Q.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await Ja(c,e,t,r,i,n,s,!1,a),u=h.map(((e,t)=>js.fromSignaturePacket(e,0===t))).reverse();return o.push(...u),o.push(c),o.push(...h),new Ya(o)}compress(e,t=R){if(e===Q.compression.uncompressed)return this;const r=new Js(t);r.algorithm=e,r.packets=this.packets;const i=new Vs;return i.push(r),new Ya(i)}async signDetached(e=[],t=null,r=[],i=new Date,n=[],s=[],a=R){const o=this.packets.findPacket(Q.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new ma(await Ja(o,e,t,r,i,n,s,!0,a))}async verify(e,t=new Date,r=R){const i=this.unwrapCompressed(),n=i.packets.filterByTag(Q.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");a(i.packets.stream)&&i.packets.push(...await C(i.packets.stream,(e=>e||[])));const s=i.packets.filterByTag(Q.packet.onePassSignature).reverse(),o=i.packets.filterByTag(Q.packet.signature);return s.length&&!o.length&&T.isStream(i.packets.stream)&&!a(i.packets.stream)?(await Promise.all(s.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=D((async()=>(await e.correspondingSig).signatureData)),e.hashed=C(await e.hash(e.signatureType,n[0],void 0,!1)),e.hashed.catch((()=>{}))}))),i.packets.stream=E(i.packets.stream,(async(e,t)=>{const r=P(e),i=U(t);try{for(let e=0;e<s.length;e++){const{value:t}=await r.read();s[e].correspondingSigResolve(t)}await r.readToEnd(),await i.ready,await i.close()}catch(e){s.forEach((t=>{t.correspondingSigReject(e)})),await i.abort(e)}})),Wa(s,n,e,t,!1,r)):Wa(o,n,e,t,!1,r)}verifyDetached(e,t,r=new Date,i=R){const n=this.unwrapCompressed().packets.filterByTag(Q.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return Wa(e.packets.filterByTag(Q.packet.signature),n,t,r,!0,i)}unwrapCompressed(){const e=this.packets.filterByTag(Q.packet.compressedData);return e.length?new Ya(e[0].packets):this}async appendSignature(e,t=R){await this.packets.read(T.isUint8Array(e)?e:(await Z(e)).data,Va,t)}write(){return this.packets.write()}armor(e=R){const t=this.packets[this.packets.length-1],r=t.constructor.tag===ra.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===Os.tag&&6!==e.version));return $(Q.armor.message,this.write(),null,null,null,r,e)}}async function Ja(e,t,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=R){const h=new Vs,u=null===e.text?Q.signature.binary:Q.signature.text;if(await Promise.all(t.map((async(t,r)=>{const h=s[r];if(!t.isPrivate())throw Error("Need private key for signing");const l=await t.getSigningKey(i[r],n,h,c);return Ba(e,t,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((e=>{h.push(...e)})),r){const e=r.packets.filterByTag(Q.packet.signature);h.push(...e)}return h}async function Wa(e,t,r,i=new Date,n=!1,s=R){return Promise.all(e.filter((function(e){return["text","binary"].includes(Q.read(Q.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,i=new Date,n=!1,s=R){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof js?e.correspondingSig:e,h={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new Vs;return e&&t.push(e),new ma(t)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(e,t,r,i,n,s)})))}const Za=/*#__PURE__*/T.constructAllowedPackets([Os]);class $a{constructor(e,t){if(this.text=T.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof ma))throw Error("Invalid signature input");this.signature=t||new ma(new Vs)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=null,r=[],i=new Date,n=[],s=[],a=R){const o=new Ls;o.setText(this.text);const c=new ma(await Ja(o,e,t,r,i,n,s,!0,a));return new $a(this.text,c)}verify(e,t=new Date,r=R){const i=this.signature.packets.filterByTag(Q.packet.signature),n=new Ls;return n.setText(this.text),Wa(i,[n],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=R){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>Q.read(Q.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return $(Q.armor.signed,r,void 0,void 0,void 0,t,e)}}function Xa(e){if(!(e instanceof Ya))throw Error("Parameter [message] needs to be of type Message")}function eo(e){if(!(e instanceof $a||e instanceof Ya))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function to(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const ro=Object.keys(R).length;function io(e){const t=Object.keys(e);if(t.length!==ro)for(const e of t)if(void 0===R[e])throw Error("Unknown config property: "+e)}function no(e){return e&&!T.isArray(e)&&(e=[e]),e}async function so(e){return"array"===T.isStream(e)?C(e):e}function ao(e,t){e.data=E(t.packets.stream,(async(t,r)=>{await A(e.data,r,{preventClose:!0});const i=U(r);try{await C(t,(e=>e)),await i.close()}catch(e){await i.abort(e)}}))}function oo(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}function co(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, not "+e)}function ho(e,...t){if(!((r=e)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function uo(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function lo(e,t){ho(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const yo="object"==typeof t&&"crypto"in t?t.crypto:void 0,fo=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),go=(e,t)=>e<<32-t|e>>>t,po=(e,t)=>e<<t|e>>>32-t>>>0,Ao=68===new Uint8Array(new Uint32Array([287454020]).buffer)[0];
|
|
3
|
-
/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function wo(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function mo(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}function bo(e){return"string"==typeof e&&(e=mo(e)),ho(e),e}function Eo(...e){let t=0;for(let r=0;r<e.length;r++){const i=e[r];ho(i),t+=i.length}const r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}class ko{clone(){return this._cloneInto()}}function vo(e){const t=t=>e().update(bo(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function Io(e=32){if(yo&&"function"==typeof yo.getRandomValues)return yo.getRandomValues(new Uint8Array(e));throw Error("crypto.getRandomValues must be defined")}class Bo extends ko{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,function(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.wrapConstructor");co(e.outputLen),co(e.blockLen)}(e);const r=bo(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const i=this.blockLen,n=new Uint8Array(i);n.set(r.length>i?e.create().update(r).digest():r);for(let e=0;e<n.length;e++)n[e]^=54;this.iHash.update(n),this.oHash=e.create();for(let e=0;e<n.length;e++)n[e]^=106;this.oHash.update(n),n.fill(0)}update(e){return uo(this),this.iHash.update(e),this}digestInto(e){uo(this),ho(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:s,outputLen:a}=this;return e.finished=i,e.destroyed=n,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const So=(e,t,r)=>new Bo(e,t).update(r).digest();So.create=(e,t)=>new Bo(e,t)
|
|
4
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */;const Co=BigInt(0),Ko=BigInt(1),Do=BigInt(2);function Po(e){return e instanceof Uint8Array||null!=e&&"object"==typeof e&&"Uint8Array"===e.constructor.name}function Uo(e){if(!Po(e))throw Error("Uint8Array expected")}const xo=/* @__PURE__ */Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function Qo(e){Uo(e);let t="";for(let r=0;r<e.length;r++)t+=xo[e[r]];return t}function Ro(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function Mo(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return BigInt(""===e?"0":"0x"+e)}const To={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function Lo(e){return e>=To._0&&e<=To._9?e-To._0:e>=To._A&&e<=To._F?e-(To._A-10):e>=To._a&&e<=To._f?e-(To._a-10):void 0}function _o(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);const t=e.length,r=t/2;if(t%2)throw Error("padded hex string expected, got unpadded hex of length "+t);const i=new Uint8Array(r);for(let t=0,n=0;t<r;t++,n+=2){const r=Lo(e.charCodeAt(n)),s=Lo(e.charCodeAt(n+1));if(void 0===r||void 0===s){const t=e[n]+e[n+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+n)}i[t]=16*r+s}return i}function No(e){return Mo(Qo(e))}function Fo(e){return Uo(e),Mo(Qo(Uint8Array.from(e).reverse()))}function Ho(e,t){return _o(e.toString(16).padStart(2*t,"0"))}function Oo(e,t){return Ho(e,t).reverse()}function zo(e,t,r){let i;if("string"==typeof t)try{i=_o(t)}catch(r){throw Error(`${e} must be valid hex string, got "${t}". Cause: ${r}`)}else{if(!Po(t))throw Error(e+" must be hex string or Uint8Array");i=Uint8Array.from(t)}const n=i.length;if("number"==typeof r&&n!==r)throw Error(`${e} expected ${r} bytes, got ${n}`);return i}function Go(...e){let t=0;for(let r=0;r<e.length;r++){const i=e[r];Uo(i),t+=i.length}const r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}const jo=e=>(Do<<BigInt(e-1))-Ko,qo=e=>new Uint8Array(e),Vo=e=>Uint8Array.from(e);function Yo(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let i=qo(e),n=qo(e),s=0;const a=()=>{i.fill(1),n.fill(0),s=0},o=(...e)=>r(n,i,...e),c=(e=qo())=>{n=o(Vo([0]),e),i=o(),0!==e.length&&(n=o(Vo([1]),e),i=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){i=o();const t=i.slice();r.push(t),e+=i.length}return Go(...r)};return(e,t)=>{let r;for(a(),c(e);!(r=t(h()));)c();return a(),r}}const Jo={bigint:e=>"bigint"==typeof e,function:e=>"function"==typeof e,boolean:e=>"boolean"==typeof e,string:e=>"string"==typeof e,stringOrUint8Array:e=>"string"==typeof e||Po(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>"function"==typeof e&&Number.isSafeInteger(e.outputLen)};function Wo(e,t,r={}){const i=(t,r,i)=>{const n=Jo[r];if("function"!=typeof n)throw Error(`Invalid validator "${r}", expected function`);const s=e[t];if(!(i&&void 0===s||n(s,e)))throw Error(`Invalid param ${t+""}=${s} (${typeof s}), expected ${r}`)};for(const[e,r]of Object.entries(t))i(e,r,!1);for(const[e,t]of Object.entries(r))i(e,t,!0);return e}var Zo=/*#__PURE__*/Object.freeze({__proto__:null,abytes:Uo,bitGet:function(e,t){return e>>BigInt(t)&Ko},bitLen:function(e){let t;for(t=0;e>Co;e>>=Ko,t+=1);return t},bitMask:jo,bitSet:function(e,t,r){return e|(r?Ko:Co)<<BigInt(t)},bytesToHex:Qo,bytesToNumberBE:No,bytesToNumberLE:Fo,concatBytes:Go,createHmacDrbg:Yo,ensureBytes:zo,equalBytes:function(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return 0===r},hexToBytes:_o,hexToNumber:Mo,isBytes:Po,numberToBytesBE:Ho,numberToBytesLE:Oo,numberToHexUnpadded:Ro,numberToVarBytesBE:function(e){return _o(Ro(e))},utf8ToBytes:function(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))},validateObject:Wo});
|
|
5
|
-
/*! noble-
|
|
1
|
+
/*! OpenPGP.js v6.0.0-beta.3.patch.0 - 2024-09-09 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
|
|
2
|
+
var openpgp=function(e){"use strict";const t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},r=Symbol("doneWritingPromise"),n=Symbol("doneWritingResolve"),i=Symbol("doneWritingReject"),s=Symbol("readingIndex");class a extends Array{constructor(){super(),Object.setPrototypeOf(this,a.prototype),this[r]=new Promise(((e,t)=>{this[n]=e,this[i]=t})),this[r].catch((()=>{}))}}function o(e){return e&&e.getReader&&Array.isArray(e)}function c(e){if(!o(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function h(e){if(o(e))return"array";if(t.ReadableStream&&t.ReadableStream.prototype.isPrototypeOf(e))return"web";if(e&&!(t.ReadableStream&&e instanceof t.ReadableStream)&&"function"==typeof e._read&&"object"==typeof e._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!e||!e.getReader)&&"web-like"}function u(e){return Uint8Array.prototype.isPrototypeOf(e)}function l(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!u(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach((function(e){r.set(e,n),n+=e.length})),r}a.prototype.getReader=function(){return void 0===this[s]&&(this[s]=0),{read:async()=>(await this[r],this[s]===this.length?{value:void 0,done:!0}:{value:this[this[s]++],done:!1})}},a.prototype.readToEnd=async function(e){await this[r];const t=e(this.slice(this[s]));return this.length=0,t},a.prototype.clone=function(){const e=new a;return e[r]=this[r].then((()=>{e.push(...this)})),e},c.prototype.write=async function(e){this.stream.push(e)},c.prototype.close=async function(){this.stream[n]()},c.prototype.abort=async function(e){return this.stream[i](e),e},c.prototype.releaseLock=function(){},"object"==typeof t.process&&t.process.versions;const y=new WeakSet,f=Symbol("externalBuffer");function g(e){if(this.stream=e,e[f]&&(this[f]=e[f].slice()),o(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(h(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||y.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{y.add(e)}catch(e){}}}function p(e){return h(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function d(e){if(h(e))return e;const t=new a;return(async()=>{const r=x(t);await r.write(e),await r.close()})(),t}function A(e){return e.some((e=>h(e)&&!o(e)))?function(e){e=e.map(p);const t=b((async function(e){await Promise.all(n.map((t=>P(t,e))))}));let r=Promise.resolve();const n=e.map(((n,i)=>k(n,((n,s)=>(r=r.then((()=>w(n,t.writable,{preventClose:i!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>o(e)))?function(e){const t=new a;let r=Promise.resolve();return e.forEach(((n,i)=>(r=r.then((()=>w(n,t,{preventClose:i!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):l(e)}async function w(e,t,{preventClose:r=!1,preventAbort:n=!1,preventCancel:i=!1}={}){if(h(e)&&!o(e)){e=p(e);try{if(e[f]){const r=x(t);for(let t=0;t<e[f].length;t++)await r.ready,await r.write(e[f][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:n,preventCancel:i})}catch(e){}return}const s=D(e=d(e)),a=x(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){n||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function m(e,t){const r=new TransformStream(t);return w(e,r.writable),r.readable}function b(e){let t,r,n,i=!1,s=!1;return{readable:new ReadableStream({start(e){n=e},pull(){t?t():i=!0},async cancel(t){s=!0,e&&await e(t),r&&r(t)}},{highWaterMark:0}),writable:new WritableStream({write:async function(e){if(s)throw Error("Stream is cancelled");n.enqueue(e),i?i=!1:(await new Promise(((e,n)=>{t=e,r=n})),t=null,r=null)},close:n.close.bind(n),abort:n.error.bind(n)})}}function E(e,t=()=>{},r=()=>{}){if(o(e)){const n=new a;return(async()=>{const i=x(n);try{const n=await C(e),s=t(n),a=r();let o;o=void 0!==s&&void 0!==a?A([s,a]):void 0!==s?s:a,await i.write(o),await i.close()}catch(e){await i.abort(e)}})(),n}if(h(e))return m(e,{async transform(e,r){try{const n=await t(e);void 0!==n&&r.enqueue(n)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const n=t(e),i=r();return void 0!==n&&void 0!==i?A([n,i]):void 0!==n?n:i}function k(e,t){if(h(e)&&!o(e)){let r;const n=new TransformStream({start(e){r=e}}),i=w(e,n.writable),s=b((async function(e){r.error(e),await i,await new Promise(setTimeout)}));return t(n.readable,s.writable),s.readable}e=d(e);const r=new a;return t(e,r),r}function v(e,t){let r;const n=k(e,((e,i)=>{const s=D(e);s.remainder=()=>(s.releaseLock(),w(e,i),n),r=t(s)}));return r}function B(e){if(o(e))return e.clone();if(h(e)){const t=function(e){if(o(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(h(e)){const t=p(e).tee();return t[0][f]=t[1][f]=e[f],t}return[K(e),K(e)]}(e);return S(e,t[0]),t[1]}return K(e)}function I(e){return o(e)?B(e):h(e)?new ReadableStream({start(t){const r=k(e,(async(e,r)=>{const n=D(e),i=x(r);try{for(;;){await i.ready;const{done:e,value:r}=await n.read();if(e){try{t.close()}catch(e){}return void await i.close()}try{t.enqueue(r)}catch(e){}await i.write(r)}}catch(e){t.error(e),await i.abort(e)}}));S(e,r)}}):K(e)}function S(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,n])=>{"constructor"!==r&&(n.value?n.value=n.value.bind(t):n.get=n.get.bind(t),Object.defineProperty(e,r,n))}))}function K(e,t=0,r=1/0){if(o(e))throw Error("Not implemented");if(h(e)){if(t>=0&&r>=0){let n=0;return m(e,{transform(e,i){n<r?(n+e.length>=t&&i.enqueue(K(e,Math.max(t-n,0),r-n)),n+=e.length):i.terminate()}})}if(t<0&&(r<0||r===1/0)){let n=[];return E(e,(e=>{e.length>=-t?n=[e]:n.push(e)}),(()=>K(A(n),t,r)))}if(0===t&&r<0){let n;return E(e,(e=>{const i=n?A([n,e]):e;if(i.length>=-r)return n=K(i,r),K(i,t,r);n=i}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),U((async()=>K(await C(e),t,r)))}return e[f]&&(e=A(e[f].concat([e]))),u(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function C(e,t=A){return o(e)?e.readToEnd(t):h(e)?D(e).readToEnd(t):e}async function P(e,t){if(h(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function U(e){const t=new a;return(async()=>{const r=x(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function D(e){return new g(e)}function x(e){return new c(e)}g.prototype.read=async function(){if(this[f]&&this[f].length){return{done:!1,value:this[f].shift()}}return this._read()},g.prototype.releaseLock=function(){this[f]&&(this.stream[f]=this[f]),this._releaseLock()},g.prototype.cancel=function(e){return this._cancel(e)},g.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:n}=await this.read();if(n+="",r)return t.length?A(t):void 0;const i=n.indexOf("\n")+1;i&&(e=A(t.concat(n.substr(0,i))),t=[]),i!==n.length&&t.push(n.substr(i))}return this.unshift(...t),e},g.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(K(t,1)),r},g.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:n,value:i}=await this.read();if(n)return t.length?A(t):void 0;if(t.push(i),r+=i.length,r>=e){const r=A(t);return this.unshift(K(r,e)),K(r,0,e)}}},g.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},g.prototype.unshift=function(...e){this[f]||(this[f]=[]),1===e.length&&u(e[0])&&this[f].length&&e[0].length&&this[f][0].byteOffset>=e[0].length?this[f][0]=new Uint8Array(this[f][0].buffer,this[f][0].byteOffset-e[0].length,this[f][0].byteLength+e[0].length):this[f].unshift(...e.filter((e=>e&&e.length)))},g.prototype.readToEnd=async function(e=A){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const Q=Symbol("byValue");var R={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[Q]||(e[Q]=[],Object.entries(e).forEach((([t,r])=>{e[Q][r]=t}))),void 0!==e[Q][t])return e[Q][t];throw Error("Invalid enum value.")}},M={preferredHashAlgorithm:R.hash.sha256,preferredSymmetricAlgorithm:R.symmetric.aes256,preferredCompressionAlgorithm:R.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:R.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,enableParsingV5Entities:!1,s2kType:R.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([R.symmetric.aes128,R.symmetric.aes192,R.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.3.patch.0",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([R.hash.md5,R.hash.ripemd]),rejectMessageHashAlgorithms:new Set([R.hash.md5,R.hash.ripemd,R.hash.sha1]),rejectPublicKeyAlgorithms:new Set([R.publicKey.elgamal,R.publicKey.dsa]),rejectCurves:new Set([R.curve.secp256k1])};const L=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),T={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:()=>{},isArray:function(e){return e instanceof Array},isUint8Array:u,isStream:h,getNobleCurve:async(e,t)=>{if(!M.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return yy}));switch(e){case R.publicKey.ecdh:case R.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case R.publicKey.x448:return r.get("x448");case R.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let n=0;n<t;n++)r[n]=e>>8*(t-n-1)&255;return r},readDate:function(e){const t=T.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return T.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return T.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){const r=new Uint8Array(t),n=t-e.length;return r.set(e,n),r},uint8ArrayToMPI:function(e){const t=T.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),n=new Uint8Array([(65280&t)>>8,255&t]);return T.concatUint8Array([n,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+T.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return E(e,(e=>{if(!T.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,n=(e=new Uint8Array(e)).length;for(let i=0;i<n;i+=r)t.push(String.fromCharCode.apply(String,e.subarray(i,i+r<n?i+r:n)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return E(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return E(e,r,(()=>r(new Uint8Array,!0)))},concat:A,concatUint8Array:l,equalsUint8Array:function(e,t){if(!T.isUint8Array(e)||!T.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return T.writeNumber(t,2)},printDebug:function(e){L&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){L&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let n=0;n<r;n++)t[n]=e[n]<<1^e[n+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const e=void 0!==t&&t.crypto&&t.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!e)throw Error("The WebCrypto API is not available");return e},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!T.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return E(e,(e=>{let r;t&&(e=T.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const n=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&n.push(r);if(!n.length)return e;const i=new Uint8Array(e.length+n.length);let s=0;for(let t=0;t<n.length;t++){const r=e.subarray(n[t-1]||0,n[t]);i.set(r,s),s+=r.length,i[s-1]=13,i[s]=10,s++}return i.set(e.subarray(n[n.length-1]||0),s),i}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return E(e,(e=>{let r;13===(e=t&&10!==e[0]?T.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let n=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const i=r-(10===e[r]?1:0);t&&e.copyWithin(n,t,i),n+=i-t}return e.subarray(0,n)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return Error(e);try{t.message=e+": "+t.message}catch(e){}return t},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let n;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){n=e}}))),r(n)}))},selectUint8Array:function(e,t,r){const n=Math.max(t.length,r.length),i=new Uint8Array(n);let s=0;for(let n=0;n<i.length;n++)i[n]=t[n]&256-e|r[n]&255+e,s+=e&n<t.length|1-e&n<r.length;return i.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===R.symmetric.aes128||e===R.symmetric.aes192||e===R.symmetric.aes256}},F=T.getNodeBuffer();let N,H;function O(e){let t=new Uint8Array;return E(e,(e=>{t=T.concatUint8Array([t,e]);const r=[],n=Math.floor(t.length/45),i=45*n,s=N(t.subarray(0,i));for(let e=0;e<n;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(i),r.join("")}),(()=>t.length?N(t)+"\n":""))}function z(e){let t="";return E(e,(e=>{t+=e;let r=0;const n=[" ","\t","\r","\n"];for(let e=0;e<n.length;e++){const i=n[e];for(let e=t.indexOf(i);-1!==e;e=t.indexOf(i,e+1))r++}let i=t.length;for(;i>0&&(i-r)%4!=0;i--)n.includes(t[i])&&r--;const s=H(t.substr(0,i));return t=t.substr(i),s}),(()=>H(t)))}function _(e){return z(e.replace(/-/g,"+").replace(/_/g,"/"))}function G(e,t){let r=O(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function j(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?R.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?R.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?R.armor.signed:/MESSAGE/.test(t[1])?R.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?R.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?R.armor.privateKey:/SIGNATURE/.test(t[1])?R.armor.signature:void 0}function q(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function V(e){const t=function(e){let t=13501623;return E(e,(e=>{const r=Z?Math.floor(e.length/4):0,n=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=n[e],t=W[0][t>>24&255]^W[1][t>>16&255]^W[2][t>>8&255]^W[3][255&t];for(let n=4*r;n<e.length;n++)t=t>>8^W[0][255&t^e[n]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return O(t)}F?(N=e=>F.from(e).toString("base64"),H=e=>{const t=F.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(N=e=>btoa(T.uint8ArrayToString(e)),H=e=>T.stringToUint8Array(atob(e)));const W=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);W[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)W[1][e]=W[0][e]>>8^W[0][255&W[0][e]];for(let e=0;e<=255;e++)W[2][e]=W[1][e]>>8^W[0][255&W[1][e]];for(let e=0;e<=255;e++)W[3][e]=W[2][e]>>8^W[0][255&W[2][e]];const Z=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function Y(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||T.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||T.printDebugError(Error("Unknown header: "+e[t]))}function J(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function $(e){return new Promise((async(t,r)=>{try{const n=/^-----[^-]+-----$/m,i=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=z(k(e,(async(e,y)=>{const f=D(e);try{for(;;){let e=await f.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=T.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==R.armor.signed||(n.test(e)?(u=u.join("\r\n"),c=!0,Y(h),h=[],o=!1):u.push(e.replace(/^- /,"")));else if(n.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),i.test(e)){if(Y(h),o=!0,c||s!==R.armor.signed){t({text:u,data:l,headers:a,type:s});break}}else h.push(e);else n.test(e)&&(s=j(e))}}catch(e){return void r(e)}const g=x(y);try{for(;;){await g.ready;const{done:e,value:t}=await f.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await f.readToEnd();e.length||(e=""),e=r+e,e=T.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(n);if(1===t.length)throw Error("Misformed armored text");const i=J(t[0].slice(0,-1));await g.write(i);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}})))}catch(e){r(e)}})).then((async e=>(o(e.data)&&(e.data=await C(e.data)),e)))}function X(e,t,r,n,i,s=!1,a=M){let o,c;e===R.armor.signed&&(o=t.text,c=t.hash,t=t.data);const h=s&&I(t),u=[];switch(e){case R.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+n+"-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+n+"-----\n");break;case R.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case R.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP SIGNATURE-----\n");break;case R.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP MESSAGE-----\n");break;case R.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case R.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case R.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP SIGNATURE-----\n")}return T.concat(u)}async function ee(e){switch(e){case R.symmetric.aes128:case R.symmetric.aes192:case R.symmetric.aes256:throw Error("Not a legacy cipher");case R.symmetric.cast5:case R.symmetric.blowfish:case R.symmetric.twofish:case R.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return Ky})),r=t.get(e);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function te(e){switch(e){case R.symmetric.aes128:case R.symmetric.aes192:case R.symmetric.aes256:case R.symmetric.twofish:return 16;case R.symmetric.blowfish:case R.symmetric.cast5:case R.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function re(e){switch(e){case R.symmetric.aes128:case R.symmetric.blowfish:case R.symmetric.cast5:return 16;case R.symmetric.aes192:case R.symmetric.tripledes:return 24;case R.symmetric.aes256:case R.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function ne(e){return{keySize:re(e),blockSize:te(e)}}var ie=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:ne,getLegacyCipher:ee});function se(e,t){let r=e[0],n=e[1],i=e[2],s=e[3];r=oe(r,n,i,s,t[0],7,-680876936),s=oe(s,r,n,i,t[1],12,-389564586),i=oe(i,s,r,n,t[2],17,606105819),n=oe(n,i,s,r,t[3],22,-1044525330),r=oe(r,n,i,s,t[4],7,-176418897),s=oe(s,r,n,i,t[5],12,1200080426),i=oe(i,s,r,n,t[6],17,-1473231341),n=oe(n,i,s,r,t[7],22,-45705983),r=oe(r,n,i,s,t[8],7,1770035416),s=oe(s,r,n,i,t[9],12,-1958414417),i=oe(i,s,r,n,t[10],17,-42063),n=oe(n,i,s,r,t[11],22,-1990404162),r=oe(r,n,i,s,t[12],7,1804603682),s=oe(s,r,n,i,t[13],12,-40341101),i=oe(i,s,r,n,t[14],17,-1502002290),n=oe(n,i,s,r,t[15],22,1236535329),r=ce(r,n,i,s,t[1],5,-165796510),s=ce(s,r,n,i,t[6],9,-1069501632),i=ce(i,s,r,n,t[11],14,643717713),n=ce(n,i,s,r,t[0],20,-373897302),r=ce(r,n,i,s,t[5],5,-701558691),s=ce(s,r,n,i,t[10],9,38016083),i=ce(i,s,r,n,t[15],14,-660478335),n=ce(n,i,s,r,t[4],20,-405537848),r=ce(r,n,i,s,t[9],5,568446438),s=ce(s,r,n,i,t[14],9,-1019803690),i=ce(i,s,r,n,t[3],14,-187363961),n=ce(n,i,s,r,t[8],20,1163531501),r=ce(r,n,i,s,t[13],5,-1444681467),s=ce(s,r,n,i,t[2],9,-51403784),i=ce(i,s,r,n,t[7],14,1735328473),n=ce(n,i,s,r,t[12],20,-1926607734),r=he(r,n,i,s,t[5],4,-378558),s=he(s,r,n,i,t[8],11,-2022574463),i=he(i,s,r,n,t[11],16,1839030562),n=he(n,i,s,r,t[14],23,-35309556),r=he(r,n,i,s,t[1],4,-1530992060),s=he(s,r,n,i,t[4],11,1272893353),i=he(i,s,r,n,t[7],16,-155497632),n=he(n,i,s,r,t[10],23,-1094730640),r=he(r,n,i,s,t[13],4,681279174),s=he(s,r,n,i,t[0],11,-358537222),i=he(i,s,r,n,t[3],16,-722521979),n=he(n,i,s,r,t[6],23,76029189),r=he(r,n,i,s,t[9],4,-640364487),s=he(s,r,n,i,t[12],11,-421815835),i=he(i,s,r,n,t[15],16,530742520),n=he(n,i,s,r,t[2],23,-995338651),r=ue(r,n,i,s,t[0],6,-198630844),s=ue(s,r,n,i,t[7],10,1126891415),i=ue(i,s,r,n,t[14],15,-1416354905),n=ue(n,i,s,r,t[5],21,-57434055),r=ue(r,n,i,s,t[12],6,1700485571),s=ue(s,r,n,i,t[3],10,-1894986606),i=ue(i,s,r,n,t[10],15,-1051523),n=ue(n,i,s,r,t[1],21,-2054922799),r=ue(r,n,i,s,t[8],6,1873313359),s=ue(s,r,n,i,t[15],10,-30611744),i=ue(i,s,r,n,t[6],15,-1560198380),n=ue(n,i,s,r,t[13],21,1309151649),r=ue(r,n,i,s,t[4],6,-145523070),s=ue(s,r,n,i,t[11],10,-1120210379),i=ue(i,s,r,n,t[2],15,718787259),n=ue(n,i,s,r,t[9],21,-343485551),e[0]=ge(r,e[0]),e[1]=ge(n,e[1]),e[2]=ge(i,e[2]),e[3]=ge(s,e[3])}function ae(e,t,r,n,i,s){return t=ge(ge(t,e),ge(n,s)),ge(t<<i|t>>>32-i,r)}function oe(e,t,r,n,i,s,a){return ae(t&r|~t&n,e,t,i,s,a)}function ce(e,t,r,n,i,s,a){return ae(t&n|r&~n,e,t,i,s,a)}function he(e,t,r,n,i,s,a){return ae(t^r^n,e,t,i,s,a)}function ue(e,t,r,n,i,s,a){return ae(r^(t|~n),e,t,i,s,a)}function le(e){const t=[];let r;for(r=0;r<64;r+=4)t[r>>2]=e.charCodeAt(r)+(e.charCodeAt(r+1)<<8)+(e.charCodeAt(r+2)<<16)+(e.charCodeAt(r+3)<<24);return t}const ye="0123456789abcdef".split("");function fe(e){let t="",r=0;for(;r<4;r++)t+=ye[e>>8*r+4&15]+ye[e>>8*r&15];return t}function ge(e,t){return e+t&4294967295}const pe=T.getWebCrypto(),de=T.getNodeCrypto(),Ae=de&&de.getHashes();function we(e){if(de&&Ae.includes(e))return async function(t){const r=de.createHash(e);return E(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function me(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return qy})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(o(e)&&(e=await C(e)),T.isStream(e)){const t=(await r()).create();return E(e,(e=>{t.update(e)}),(()=>t.digest()))}if(pe&&t)return new Uint8Array(await pe.digest(t,e));return(await r())(e)}}var be={md5:we("md5")||async function(e){const t=function(e){const t=e.length,r=[1732584193,-271733879,-1732584194,271733878];let n;for(n=64;n<=e.length;n+=64)se(r,le(e.substring(n-64,n)));e=e.substring(n-64);const i=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(n=0;n<e.length;n++)i[n>>2]|=e.charCodeAt(n)<<(n%4<<3);if(i[n>>2]|=128<<(n%4<<3),n>55)for(se(r,i),n=0;n<16;n++)i[n]=0;return i[14]=8*t,se(r,i),r}(T.uint8ArrayToString(e));return T.hexToUint8Array(function(e){for(let t=0;t<e.length;t++)e[t]=fe(e[t]);return e.join("")}(t))},sha1:we("sha1")||me("sha1","SHA-1"),sha224:we("sha224")||me("sha224"),sha256:we("sha256")||me("sha256","SHA-256"),sha384:we("sha384")||me("sha384","SHA-384"),sha512:we("sha512")||me("sha512","SHA-512"),ripemd:we("ripemd160")||me("ripemd160"),sha3_256:we("sha3-256")||me("sha3_256"),sha3_512:we("sha3-512")||me("sha3_512"),digest:function(e,t){switch(e){case R.hash.md5:return this.md5(t);case R.hash.sha1:return this.sha1(t);case R.hash.ripemd:return this.ripemd(t);case R.hash.sha256:return this.sha256(t);case R.hash.sha384:return this.sha384(t);case R.hash.sha512:return this.sha512(t);case R.hash.sha224:return this.sha224(t);case R.hash.sha3_256:return this.sha3_256(t);case R.hash.sha3_512:return this.sha3_512(t);default:throw Error("Unsupported hash function")}},getHashByteLength:function(e){switch(e){case R.hash.md5:return 16;case R.hash.sha1:case R.hash.ripemd:return 20;case R.hash.sha256:return 32;case R.hash.sha384:return 48;case R.hash.sha512:return 64;case R.hash.sha224:return 28;case R.hash.sha3_256:return 32;case R.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(e){switch(e){case R.hash.md5:case R.hash.sha1:case R.hash.ripemd:case R.hash.sha224:case R.hash.sha256:return 64;case R.hash.sha384:case R.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}};function Ee(e){return e instanceof Uint8Array||null!=e&&"object"==typeof e&&"Uint8Array"===e.constructor.name}function ke(e,...t){if(!Ee(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function ve(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Be(e,t){ke(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}
|
|
3
|
+
/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */const Ie=e=>new Uint8Array(e.buffer,e.byteOffset,e.byteLength),Se=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),Ke=e=>new DataView(e.buffer,e.byteOffset,e.byteLength);if(!(68===new Uint8Array(new Uint32Array([287454020]).buffer)[0]))throw Error("Non little-endian hardware is not supported");function Ce(e){if("string"==typeof e)e=function(e){if("string"!=typeof e)throw Error("string expected, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}(e);else{if(!Ee(e))throw Error("Uint8Array expected, got "+typeof e);e=Qe(e)}return e}function Pe(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r}const Ue=(e,t)=>(Object.assign(t,e),t);function De(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s);e.setUint32(t+0,a,n),e.setUint32(t+4,o,n)}function xe(e){return e.byteOffset%4==0}function Qe(e){return Uint8Array.from(e)}function Re(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}const Me=16,Le=/* @__PURE__ */new Uint8Array(16),Te=Se(Le),Fe=e=>(e>>>0&255)<<24|(e>>>8&255)<<16|(e>>>16&255)<<8|e>>>24&255;class Ne{constructor(e,t){this.blockLen=Me,this.outputLen=Me,this.s0=0,this.s1=0,this.s2=0,this.s3=0,this.finished=!1,ke(e=Ce(e),16);const r=Ke(e);let n=r.getUint32(0,!1),i=r.getUint32(4,!1),s=r.getUint32(8,!1),a=r.getUint32(12,!1);const o=[];for(let e=0;e<128;e++)o.push({s0:Fe(n),s1:Fe(i),s2:Fe(s),s3:Fe(a)}),({s0:n,s1:i,s2:s,s3:a}={s3:(u=s)<<31|(l=a)>>>1,s2:(h=i)<<31|u>>>1,s1:(c=n)<<31|h>>>1,s0:c>>>1^225<<24&-(1&l)});var c,h,u,l;const y=(e=>e>65536?8:e>1024?4:2)(t||1024);if(![1,2,4,8].includes(y))throw Error(`ghash: wrong window size=${y}, should be 2, 4 or 8`);this.W=y;const f=128/y,g=this.windowSize=2**y,p=[];for(let e=0;e<f;e++)for(let t=0;t<g;t++){let r=0,n=0,i=0,s=0;for(let a=0;a<y;a++){if(!(t>>>y-a-1&1))continue;const{s0:c,s1:h,s2:u,s3:l}=o[y*e+a];r^=c,n^=h,i^=u,s^=l}p.push({s0:r,s1:n,s2:i,s3:s})}this.t=p}_updateBlock(e,t,r,n){e^=this.s0,t^=this.s1,r^=this.s2,n^=this.s3;const{W:i,t:s,windowSize:a}=this;let o=0,c=0,h=0,u=0;const l=(1<<i)-1;let y=0;for(const f of[e,t,r,n])for(let e=0;e<4;e++){const t=f>>>8*e&255;for(let e=8/i-1;e>=0;e--){const r=t>>>i*e&l,{s0:n,s1:f,s2:g,s3:p}=s[y*a+r];o^=n,c^=f,h^=g,u^=p,y+=1}}this.s0=o,this.s1=c,this.s2=h,this.s3=u}update(e){e=Ce(e),ve(this);const t=Se(e),r=Math.floor(e.length/Me),n=e.length%Me;for(let e=0;e<r;e++)this._updateBlock(t[4*e+0],t[4*e+1],t[4*e+2],t[4*e+3]);return n&&(Le.set(e.subarray(r*Me)),this._updateBlock(Te[0],Te[1],Te[2],Te[3]),Re(Te)),this}destroy(){const{t:e}=this;for(const t of e)t.s0=0,t.s1=0,t.s2=0,t.s3=0}digestInto(e){ve(this),Be(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Se(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e}digest(){const e=new Uint8Array(Me);return this.digestInto(e),this.destroy(),e}}class He extends Ne{constructor(e,t){const r=function(e){e.reverse();const t=1&e[15];let r=0;for(let t=0;t<e.length;t++){const n=e[t];e[t]=n>>>1|r,r=(1&n)<<7}return e[0]^=225&-t,e}(Qe(e=Ce(e)));super(r,t),Re(r)}update(e){e=Ce(e),ve(this);const t=Se(e),r=e.length%Me,n=Math.floor(e.length/Me);for(let e=0;e<n;e++)this._updateBlock(Fe(t[4*e+3]),Fe(t[4*e+2]),Fe(t[4*e+1]),Fe(t[4*e+0]));return r&&(Le.set(e.subarray(n*Me)),this._updateBlock(Fe(Te[3]),Fe(Te[2]),Fe(Te[1]),Fe(Te[0])),Re(Te)),this}digestInto(e){ve(this),Be(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Se(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e.reverse()}}function Oe(e){const t=(t,r)=>e(r,t.length).update(Ce(t)).digest(),r=e(new Uint8Array(16),0);return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=(t,r)=>e(t,r),t}const ze=Oe(((e,t)=>new Ne(e,t)));Oe(((e,t)=>new He(e,t)));const _e=16,Ge=new Uint8Array(_e),je=283;function qe(e){return e<<1^je&-(e>>7)}function Ve(e,t){let r=0;for(;t>0;t>>=1)r^=e&-(1&t),e=qe(e);return r}const We=/* @__PURE__ */(()=>{const e=new Uint8Array(256);for(let t=0,r=1;t<256;t++,r^=qe(r))e[t]=r;const t=new Uint8Array(256);t[0]=99;for(let r=0;r<255;r++){let n=e[255-r];n|=n<<8,t[e[r]]=255&(n^n>>4^n>>5^n>>6^n>>7^99)}return Re(e),t})(),Ze=/* @__PURE__ */We.map(((e,t)=>We.indexOf(t))),Ye=e=>e<<24|e>>>8,Je=e=>e<<8|e>>>24,$e=e=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;function Xe(e,t){if(256!==e.length)throw Error("Wrong sbox length");const r=new Uint32Array(256).map(((r,n)=>t(e[n]))),n=r.map(Je),i=n.map(Je),s=i.map(Je),a=new Uint32Array(65536),o=new Uint32Array(65536),c=new Uint16Array(65536);for(let t=0;t<256;t++)for(let h=0;h<256;h++){const u=256*t+h;a[u]=r[t]^n[h],o[u]=i[t]^s[h],c[u]=e[t]<<8|e[h]}return{sbox:e,sbox2:c,T0:r,T1:n,T2:i,T3:s,T01:a,T23:o}}const et=/* @__PURE__ */Xe(We,(e=>Ve(e,3)<<24|e<<16|e<<8|Ve(e,2))),tt=/* @__PURE__ */Xe(Ze,(e=>Ve(e,11)<<24|Ve(e,13)<<16|Ve(e,9)<<8|Ve(e,14))),rt=/* @__PURE__ */(()=>{const e=new Uint8Array(16);for(let t=0,r=1;t<16;t++,r=qe(r))e[t]=r;return e})();function nt(e){ke(e);const t=e.length;if(![16,24,32].includes(t))throw Error("aes: wrong key size: should be 16, 24 or 32, got: "+t);const{sbox2:r}=et,n=[];xe(e)||n.push(e=Qe(e));const i=Se(e),s=i.length,a=e=>at(r,e,e,e,e),o=new Uint32Array(t+28);o.set(i);for(let e=s;e<o.length;e++){let t=o[e-1];e%s==0?t=a(Ye(t))^rt[e/s-1]:s>6&&e%s==4&&(t=a(t)),o[e]=o[e-s]^t}return Re(...n),o}function it(e){const t=nt(e),r=t.slice(),n=t.length,{sbox2:i}=et,{T0:s,T1:a,T2:o,T3:c}=tt;for(let e=0;e<n;e+=4)for(let i=0;i<4;i++)r[e+i]=t[n-e-4+i];Re(t);for(let e=4;e<n-4;e++){const t=r[e],n=at(i,t,t,t,t);r[e]=s[255&n]^a[n>>>8&255]^o[n>>>16&255]^c[n>>>24]}return r}function st(e,t,r,n,i,s){return e[r<<8&65280|n>>>8&255]^t[i>>>8&65280|s>>>24&255]}function at(e,t,r,n,i){return e[255&t|65280&r]|e[n>>>16&255|i>>>16&65280]<<16}function ot(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=et;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const h=e.length/4-2;for(let s=0;s<h;s++){const s=e[c++]^st(a,o,t,r,n,i),h=e[c++]^st(a,o,r,n,i,t),u=e[c++]^st(a,o,n,i,t,r),l=e[c++]^st(a,o,i,t,r,n);t=s,r=h,n=u,i=l}return{s0:e[c++]^at(s,t,r,n,i),s1:e[c++]^at(s,r,n,i,t),s2:e[c++]^at(s,n,i,t,r),s3:e[c++]^at(s,i,t,r,n)}}function ct(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=tt;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const h=e.length/4-2;for(let s=0;s<h;s++){const s=e[c++]^st(a,o,t,i,n,r),h=e[c++]^st(a,o,r,t,i,n),u=e[c++]^st(a,o,n,r,t,i),l=e[c++]^st(a,o,i,n,r,t);t=s,r=h,n=u,i=l}return{s0:e[c++]^at(s,t,i,n,r),s1:e[c++]^at(s,r,t,i,n),s2:e[c++]^at(s,n,r,t,i),s3:e[c++]^at(s,i,n,r,t)}}function ht(e,t){if(void 0===t)return new Uint8Array(e);if(ke(t),t.length<e)throw Error(`aes: wrong destination length, expected at least ${e}, got: ${t.length}`);if(!xe(t))throw Error("unaligned dst");return t}function ut(e,t,r,n){ke(t,_e),ke(r);const i=r.length;n=ht(i,n);const s=t,a=Se(s);let{s0:o,s1:c,s2:h,s3:u}=ot(e,a[0],a[1],a[2],a[3]);const l=Se(r),y=Se(n);for(let t=0;t+4<=l.length;t+=4){y[t+0]=l[t+0]^o,y[t+1]=l[t+1]^c,y[t+2]=l[t+2]^h,y[t+3]=l[t+3]^u;let r=1;for(let e=s.length-1;e>=0;e--)r=r+(255&s[e])|0,s[e]=255&r,r>>>=8;({s0:o,s1:c,s2:h,s3:u}=ot(e,a[0],a[1],a[2],a[3]))}const f=_e*Math.floor(l.length/4);if(f<i){const e=new Uint32Array([o,c,h,u]),t=Ie(e);for(let e=f,s=0;e<i;e++,s++)n[e]=r[e]^t[s];Re(e)}return n}function lt(e,t,r,n,i){ke(r,_e),ke(n),i=ht(n.length,i);const s=r,a=Se(s),o=Ke(s),c=Se(n),h=Se(i),u=t?0:12,l=n.length;let y=o.getUint32(u,t),{s0:f,s1:g,s2:p,s3:d}=ot(e,a[0],a[1],a[2],a[3]);for(let r=0;r+4<=c.length;r+=4)h[r+0]=c[r+0]^f,h[r+1]=c[r+1]^g,h[r+2]=c[r+2]^p,h[r+3]=c[r+3]^d,y=y+1>>>0,o.setUint32(u,y,t),({s0:f,s1:g,s2:p,s3:d}=ot(e,a[0],a[1],a[2],a[3]));const A=_e*Math.floor(c.length/4);if(A<l){const e=new Uint32Array([f,g,p,d]),t=Ie(e);for(let e=A,r=0;e<l;e++,r++)i[e]=n[e]^t[r];Re(e)}return i}const yt=Ue({blockSize:16,nonceLength:16},(function(e,t){function r(r,n){if(ke(r),void 0!==n&&(ke(n),!xe(n)))throw Error("unaligned destination");const i=nt(e),s=Qe(t),a=[i,s];xe(r)||a.push(r=Qe(r));const o=ut(i,s,r,n);return Re(...a),o}return ke(e),ke(t,_e),{encrypt:(e,t)=>r(e,t),decrypt:(e,t)=>r(e,t)}}));const ft=Ue({blockSize:16,nonceLength:16},(function(e,t,r={}){ke(e),ke(t,16);const n=!r.disablePadding;return{encrypt(r,i){const s=nt(e),{b:a,o,out:c}=function(e,t,r){ke(e);let n=e.length;const i=n%_e;if(!t&&0!==i)throw Error("aec/(cbc-ecb): unpadded plaintext with disabled padding");xe(e)||(e=Qe(e));const s=Se(e);if(t){let e=_e-i;e||(e=_e),n+=e}const a=ht(n,r);return{b:s,o:Se(a),out:a}}(r,n,i);let h=t;const u=[s];xe(h)||u.push(h=Qe(h));const l=Se(h);let y=l[0],f=l[1],g=l[2],p=l[3],d=0;for(;d+4<=a.length;)y^=a[d+0],f^=a[d+1],g^=a[d+2],p^=a[d+3],({s0:y,s1:f,s2:g,s3:p}=ot(s,y,f,g,p)),o[d++]=y,o[d++]=f,o[d++]=g,o[d++]=p;if(n){const e=function(e){const t=new Uint8Array(16),r=Se(t);t.set(e);const n=_e-e.length;for(let e=_e-n;e<_e;e++)t[e]=n;return r}(r.subarray(4*d));y^=e[0],f^=e[1],g^=e[2],p^=e[3],({s0:y,s1:f,s2:g,s3:p}=ot(s,y,f,g,p)),o[d++]=y,o[d++]=f,o[d++]=g,o[d++]=p}return Re(...u),c},decrypt(r,i){!function(e){if(ke(e),e.length%_e!=0)throw Error("aes/(cbc-ecb).decrypt ciphertext should consist of blocks with size 16")}(r);const s=it(e);let a=t;const o=[s];xe(a)||o.push(a=Qe(a));const c=Se(a),h=ht(r.length,i);xe(r)||o.push(r=Qe(r));const u=Se(r),l=Se(h);let y=c[0],f=c[1],g=c[2],p=c[3];for(let e=0;e+4<=u.length;){const t=y,r=f,n=g,i=p;y=u[e+0],f=u[e+1],g=u[e+2],p=u[e+3];const{s0:a,s1:o,s2:c,s3:h}=ct(s,y,f,g,p);l[e++]=a^t,l[e++]=o^r,l[e++]=c^n,l[e++]=h^i}return Re(...o),function(e,t){if(!t)return e;const r=e.length;if(!r)throw Error("aes/pcks5: empty ciphertext not allowed");const n=e[r-1];if(n<=0||n>16)throw Error("aes/pcks5: wrong padding byte: "+n);const i=e.subarray(0,-n);for(let t=0;t<n;t++)if(e[r-t-1]!==n)throw Error("aes/pcks5: wrong padding");return i}(h,n)}}})),gt=Ue({blockSize:16,nonceLength:16},(function(e,t){function r(r,n,i){ke(r);const s=r.length;i=ht(s,i);const a=nt(e);let o=t;const c=[a];xe(o)||c.push(o=Qe(o)),xe(r)||c.push(r=Qe(r));const h=Se(r),u=Se(i),l=n?u:h,y=Se(o);let f=y[0],g=y[1],p=y[2],d=y[3];for(let e=0;e+4<=h.length;){const{s0:t,s1:r,s2:n,s3:i}=ot(a,f,g,p,d);u[e+0]=h[e+0]^t,u[e+1]=h[e+1]^r,u[e+2]=h[e+2]^n,u[e+3]=h[e+3]^i,f=l[e++],g=l[e++],p=l[e++],d=l[e++]}const A=_e*Math.floor(h.length/4);if(A<s){({s0:f,s1:g,s2:p,s3:d}=ot(a,f,g,p,d));const e=Ie(new Uint32Array([f,g,p,d]));for(let t=A,n=0;t<s;t++,n++)i[t]=r[t]^e[n];Re(e)}return Re(...c),i}return ke(e),ke(t,16),{encrypt:(e,t)=>r(e,!0,t),decrypt:(e,t)=>r(e,!1,t)}}));const pt=Ue({blockSize:16,nonceLength:12,tagLength:16},(function(e,t,r){if(ke(e),ke(t),void 0!==r&&ke(r),0===t.length)throw Error("aes/gcm: empty nonce");const n=16;function i(e,t,n){const i=function(e,t,r,n,i){const s=null==i?0:i.length,a=e.create(r,n.length+s);i&&a.update(i),a.update(n);const o=new Uint8Array(16),c=Ke(o);i&&De(c,0,BigInt(8*s),t),De(c,8,BigInt(8*n.length),t),a.update(o);const h=a.digest();return Re(o),h}(ze,!1,e,n,r);for(let e=0;e<t.length;e++)i[e]^=t[e];return i}function s(){const r=nt(e),n=Ge.slice(),i=Ge.slice();if(lt(r,!1,i,i,n),12===t.length)i.set(t);else{const e=Ge.slice();De(Ke(e),8,BigInt(8*t.length),!1);const r=ze.create(n).update(t).update(e);r.digestInto(i),r.destroy()}return{xk:r,authKey:n,counter:i,tagMask:lt(r,!1,i,Ge)}}return{encrypt(e){ke(e);const{xk:t,authKey:r,counter:a,tagMask:o}=s(),c=new Uint8Array(e.length+n),h=[t,r,a,o];xe(e)||h.push(e=Qe(e)),lt(t,!1,a,e,c);const u=i(r,o,c.subarray(0,c.length-n));return h.push(u),c.set(u,e.length),Re(...h),c},decrypt(e){if(ke(e),e.length<n)throw Error("aes/gcm: ciphertext less than tagLen (16)");const{xk:t,authKey:r,counter:a,tagMask:o}=s(),c=[t,r,o,a];xe(e)||c.push(e=Qe(e));const h=e.subarray(0,-16),u=e.subarray(-16),l=i(r,o,h);if(c.push(l),!Pe(l,u))throw Error("aes/gcm: invalid ghash tag");const y=lt(t,!1,a,h);return Re(...c),y}}}));function dt(e){return null!=e&&"object"==typeof e&&(e instanceof Uint32Array||"Uint32Array"===e.constructor.name)}function At(e,t){if(ke(t,16),!dt(e))throw Error("_encryptBlock accepts result of expandKeyLE");const r=Se(t);let{s0:n,s1:i,s2:s,s3:a}=ot(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}function wt(e,t){if(ke(t,16),!dt(e))throw Error("_decryptBlock accepts result of expandKeyLE");const r=Se(t);let{s0:n,s1:i,s2:s,s3:a}=ct(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}const mt={encrypt(e,t){if(t.length>=2**32)throw Error("plaintext should be less than 4gb");const r=nt(e);if(16===t.length)At(r,t);else{const e=Se(t);let n=e[0],i=e[1];for(let t=0,s=1;t<6;t++)for(let t=2;t<e.length;t+=2,s++){const{s0:a,s1:o,s2:c,s3:h}=ot(r,n,i,e[t],e[t+1]);n=a,i=o^$e(s),e[t]=c,e[t+1]=h}e[0]=n,e[1]=i}r.fill(0)},decrypt(e,t){if(t.length-8>=2**32)throw Error("ciphertext should be less than 4gb");const r=it(e),n=t.length/8-1;if(1===n)wt(r,t);else{const e=Se(t);let i=e[0],s=e[1];for(let t=0,a=6*n;t<6;t++)for(let t=2*n;t>=1;t-=2,a--){s^=$e(a);const{s0:n,s1:o,s2:c,s3:h}=ct(r,i,s,e[t],e[t+1]);i=n,s=o,e[t]=c,e[t+1]=h}e[0]=i,e[1]=s}r.fill(0)}},bt=new Uint8Array(8).fill(166),Et=Ue({blockSize:8},(e=>({encrypt(t){if(ke(t),!t.length||t.length%8!=0)throw Error("plaintext length must be non-empty and a multiple of 8 bytes");if(8===t.length)throw Error("8-byte keys not allowed in AESKW, use AESKWP instead");const r=function(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];ke(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}(bt,t);return mt.encrypt(e,r),r},decrypt(t){if(ke(t),t.length%8!=0||t.length<24)throw Error("ciphertext must be at least 24 bytes and a multiple of 8 bytes");const r=Qe(t);if(mt.decrypt(e,r),!Pe(r.subarray(0,8),bt))throw Error("integrity check failed");return r.subarray(0,8).fill(0),r.subarray(8)}}))),kt={expandKeyLE:nt,expandKeyDecLE:it,encrypt:ot,decrypt:ct,encryptBlock:At,decryptBlock:wt,ctrCounter:ut,ctr32:lt},vt=T.getWebCrypto(),Bt=T.getNodeCrypto(),It=Bt?Bt.getCiphers():[],St={idea:It.includes("idea-cfb")?"idea-cfb":void 0,tripledes:It.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:It.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:It.includes("bf-cfb")?"bf-cfb":void 0,aes128:It.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:It.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:It.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Kt{constructor(e,t,r){const{blockSize:n}=ne(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(n),this.i=0,this.blockSize=n,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=ne(e);return vt.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await vt.importKey("raw",this.key,r,!1,["encrypt"]);const n=await vt.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(n).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=T.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=T.concatUint8Array([this.prevBlock,n.subarray(0,n.length-this.blockSize)]),s=await this._runCBC(i);return Pt(s,n),this.prevBlock=s.slice(-this.blockSize),r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,s}let n;if(this.i+=r.length,this.i===this.nextBlock.length){const t=this.nextBlock;n=await this._runCBC(this.prevBlock),Pt(n,t),this.prevBlock=n.slice(),this.i=0;const i=e.subarray(r.length);this.nextBlock.set(i,this.i),this.i+=i.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);Pt(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(T.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return Pt(t,e),this.clearSensitiveData(),t}}class Ct{constructor(e,t,r,n){this.forEncryption=e;const{blockSize:i}=ne(t);this.key=kt.expandKeyLE(r),n.byteOffset%4!=0&&(n=n.slice()),this.prevBlock=Ut(n),this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i}_runCFB(e){const t=Ut(e),r=new Uint8Array(e.length),n=Ut(r);for(let e=0;e+4<=n.length;e+=4){const{s0:r,s1:i,s2:s,s3:a}=kt.encrypt(this.key,this.prevBlock[0],this.prevBlock[1],this.prevBlock[2],this.prevBlock[3]);n[e+0]=t[e+0]^r,n[e+1]=t[e+1]^i,n[e+2]=t[e+2]^s,n[e+3]=t[e+3]^a,this.prevBlock=(this.forEncryption?n:t).slice(e,e+4)}return r}async processChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=T.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=this._runCFB(n);return r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,i}let n;if(this.i+=r.length,this.i===this.nextBlock.length){n=this._runCFB(this.nextBlock),this.i=0;const t=e.subarray(r.length);this.nextBlock.set(t,this.i),this.i+=t.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{e=this._runCFB(this.nextBlock).subarray(0,this.i)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.key.fill(0)}}function Pt(e,t){const r=Math.min(e.length,t.length);for(let n=0;n<r;n++)e[n]=e[n]^t[n]}const Ut=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4));var Dt=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n){const i=R.read(R.symmetric,e);if(Bt&&St[i])return function(e,t,r,n){const i=R.read(R.symmetric,e),s=new Bt.createDecipheriv(St[i],t,n);return E(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,n);if(T.isAES(e))return async function(e,t,r,n){if(T.isStream(r)){const i=new Ct(!1,e,t,n);return E(r,(e=>i.processChunk(e)),(()=>i.finish()))}return gt(t,n).decrypt(r)}(e,t,r,n);const s=new(await ee(e))(t),a=s.blockSize;let o=n,c=new Uint8Array;const h=e=>{e&&(c=T.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,n=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[n++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,n)};return E(r,h,h)},encrypt:async function(e,t,r,n,i){const s=R.read(R.symmetric,e);if(T.getNodeCrypto()&&St[s])return function(e,t,r,n){const i=R.read(R.symmetric,e),s=new Bt.createCipheriv(St[i],t,n);return E(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,n);if(T.isAES(e))return async function(e,t,r,n){if(vt&&await Kt.isSupported(e)){const i=new Kt(e,t,n);return T.isStream(r)?E(r,(e=>i.encryptChunk(e)),(()=>i.finish())):i.encrypt(r)}if(T.isStream(r)){const i=new Ct(!0,e,t,n);return E(r,(e=>i.processChunk(e)),(()=>i.finish()))}return gt(t,n).encrypt(r)}(e,t,r,n);const a=new(await ee(e))(t),o=a.blockSize,c=n.slice();let h=new Uint8Array;const u=e=>{e&&(h=T.concatUint8Array([h,e]));const t=new Uint8Array(h.length);let r,n=0;for(;e?h.length>=o:h.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^e[r],t[n++]=c[r];h=h.subarray(o)}return t.subarray(0,n)};return E(r,u,u)}});const xt=T.getWebCrypto(),Qt=T.getNodeCrypto(),Rt=16;function Mt(e,t){const r=e.length-Rt;for(let n=0;n<Rt;n++)e[n+r]^=t[n];return e}const Lt=new Uint8Array(Rt);async function Tt(e){const t=await Ft(e),r=T.double(await t(Lt)),n=T.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%Rt==0)return Mt(e,t);const n=new Uint8Array(e.length+(Rt-e.length%Rt));return n.set(e),n[e.length]=128,Mt(n,r)}(e,r,n))).subarray(-Rt)}}async function Ft(e){if(T.getNodeCrypto())return async function(t){const r=new Qt.createCipheriv("aes-"+8*e.length+"-cbc",e,Lt).update(t);return new Uint8Array(r)};if(T.getWebCrypto())try{return e=await xt.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await xt.encrypt({name:"AES-CBC",iv:Lt,length:8*Rt},e,t);return new Uint8Array(r).subarray(0,r.byteLength-Rt)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;T.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return ft(e,Lt,{disablePadding:!0}).encrypt(t)}}const Nt=T.getWebCrypto(),Ht=T.getNodeCrypto(),Ot=T.getNodeBuffer(),zt=16,_t=zt,Gt=zt,jt=new Uint8Array(zt),qt=new Uint8Array(zt);qt[zt-1]=1;const Vt=new Uint8Array(zt);async function Wt(e){const t=await Tt(e);return function(e,r){return t(T.concatUint8Array([e,r]))}}async function Zt(e){if(T.getNodeCrypto())return async function(t,r){const n=new Ht.createCipheriv("aes-"+8*e.length+"-ctr",e,r),i=Ot.concat([n.update(t),n.final()]);return new Uint8Array(i)};if(T.getWebCrypto())try{const t=await Nt.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const n=await Nt.encrypt({name:"AES-CTR",counter:r,length:8*zt},t,e);return new Uint8Array(n)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;T.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return yt(e,r).encrypt(t)}}async function Yt(e,t){if(e!==R.symmetric.aes128&&e!==R.symmetric.aes192&&e!==R.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,n]=await Promise.all([Wt(t),Zt(t)]);return{encrypt:async function(e,t,i){const[s,a]=await Promise.all([r(jt,t),r(qt,i)]),o=await n(e,s),c=await r(Vt,o);for(let e=0;e<Gt;e++)c[e]^=a[e]^s[e];return T.concatUint8Array([o,c])},decrypt:async function(e,t,i){if(e.length<Gt)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-Gt),a=e.subarray(-Gt),[o,c,h]=await Promise.all([r(jt,t),r(qt,i),r(Vt,s)]),u=h;for(let e=0;e<Gt;e++)u[e]^=c[e]^o[e];if(!T.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await n(s,o)}}}Vt[zt-1]=2,Yt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},Yt.blockLength=zt,Yt.ivLength=_t,Yt.tagLength=Gt;const Jt=16,$t=16;function Xt(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function er(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function tr(e,t){return er(e.slice(),t)}const rr=new Uint8Array(Jt),nr=new Uint8Array([1]);async function ir(e,t){const{keySize:r}=ne(e);if(!T.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let n=0;const i=ft(t,rr,{disablePadding:!0}),s=e=>i.encrypt(e),a=e=>i.decrypt(e);let o;function c(e,t,r,i){const a=t.length/Jt|0;!function(e,t){const r=T.nbits(Math.max(e.length,t.length)/Jt|0)-1;for(let e=n+1;e<=r;e++)o[e]=T.double(o[e-1]);n=r}(t,i);const c=T.concatUint8Array([rr.subarray(0,15-r.length),nr,r]),h=63&c[15];c[15]&=192;const u=s(c),l=T.concatUint8Array([u,tr(u.subarray(0,8),u.subarray(1,9))]),y=T.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),f=new Uint8Array(Jt),g=new Uint8Array(t.length+$t);let p,d=0;for(p=0;p<a;p++)er(y,o[Xt(p+1)]),g.set(er(e(tr(y,t)),y),d),er(f,e===s?t:g.subarray(d)),t=t.subarray(Jt),d+=Jt;if(t.length){er(y,o.x);const r=s(y);g.set(tr(t,r),d);const n=new Uint8Array(Jt);n.set(e===s?t:g.subarray(d,-16),0),n[t.length]=128,er(f,n),d+=t.length}const A=er(s(er(er(f,y),o.$)),function(e){if(!e.length)return rr;const t=e.length/Jt|0,r=new Uint8Array(Jt),n=new Uint8Array(Jt);for(let i=0;i<t;i++)er(r,o[Xt(i+1)]),er(n,s(tr(r,e))),e=e.subarray(Jt);if(e.length){er(r,o.x);const t=new Uint8Array(Jt);t.set(e,0),t[e.length]=128,er(t,r),er(n,s(t))}return n}(i));return g.set(A,d),g}return function(){const e=s(rr),t=T.double(e);o=[],o[0]=T.double(t),o.x=e,o.$=t}(),{encrypt:async function(e,t,r){return c(s,e,t,r)},decrypt:async function(e,t,r){if(e.length<$t)throw Error("Invalid OCB ciphertext");const n=e.subarray(-16);e=e.subarray(0,-16);const i=c(a,e,t,r);if(T.equalsUint8Array(n,i.subarray(-16)))return i.subarray(0,-16);throw Error("Authentication tag mismatch")}}}ir.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},ir.blockLength=Jt,ir.ivLength=15,ir.tagLength=$t;const sr=T.getWebCrypto(),ar=T.getNodeCrypto(),or=T.getNodeBuffer(),cr=16,hr="AES-GCM";async function ur(e,t){if(e!==R.symmetric.aes128&&e!==R.symmetric.aes192&&e!==R.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(T.getNodeCrypto())return{encrypt:async function(e,r,n=new Uint8Array){const i=new ar.createCipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n);const s=or.concat([i.update(e),i.final(),i.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,n=new Uint8Array){const i=new ar.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n),i.setAuthTag(e.slice(e.length-cr,e.length));const s=or.concat([i.update(e.slice(0,e.length-cr)),i.final()]);return new Uint8Array(s)}};if(T.getWebCrypto())try{const e=await sr.importKey("raw",t,{name:hr},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(n,i,s=new Uint8Array){if(r&&!n.length)return pt(t,i,s).encrypt(n);const a=await sr.encrypt({name:hr,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(a)},decrypt:async function(n,i,s=new Uint8Array){if(r&&n.length===cr)return pt(t,i,s).decrypt(n);try{const t=await sr.decrypt({name:hr,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;T.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,n){return pt(t,r,n).encrypt(e)},decrypt:async function(e,r,n){return pt(t,r,n).decrypt(e)}}}ur.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},ur.blockLength=16,ur.ivLength=12,ur.tagLength=cr;var lr={cfb:Dt,gcm:ur,experimentalGCM:ur,eax:Yt,ocb:ir};const yr=BigInt(0),fr=BigInt(1);function gr(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function pr(e,t){const r=e%t;return r<yr?r+t:r}function dr(e,t,r){if(r===yr)throw Error("Modulo cannot be zero");if(r===fr)return BigInt(0);if(t<yr)throw Error("Unsopported negative exponent");let n=t,i=e;i%=r;let s=BigInt(1);for(;n>yr;){const e=n&fr;n>>=fr;s=e?s*i%r:s,i=i*i%r}return s}function Ar(e){return e>=yr?e:-e}function wr(e,t){const{gcd:r,x:n}=function(e,t){let r=BigInt(0),n=BigInt(1),i=BigInt(1),s=BigInt(0),a=Ar(e),o=Ar(t);const c=e<yr,h=t<yr;for(;o!==yr;){const e=a/o;let t=r;r=i-e*r,i=t,t=n,n=s-e*n,s=t,t=o,o=a%o,a=t}return{x:c?-i:i,y:h?-s:s,gcd:a}}(e,t);if(r!==fr)throw Error("Inverse does not exist");return pr(n+t,t)}function mr(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function br(e,t){return(e>>BigInt(t)&fr)===yr?0:1}function Er(e){const t=e<yr?BigInt(-1):yr;let r=1,n=e;for(;(n>>=fr)!==t;)r++;return r}function kr(e){const t=e<yr?BigInt(-1):yr,r=BigInt(8);let n=1,i=e;for(;(i>>=r)!==t;)n++;return n}function vr(e,t="be",r){let n=e.toString(16);n.length%2==1&&(n="0"+n);const i=n.length/2,s=new Uint8Array(r||i),a=r?r-i:0;let o=0;for(;o<i;)s[o+a]=parseInt(n.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const Br=T.getNodeCrypto();function Ir(e){const t=new Uint8Array(e);if(Br){const e=Br.randomBytes(t.length);t.set(e)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(t)}return t}function Sr(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return pr(gr(Ir(kr(r)+8)),r)+e}var Kr=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Sr,getRandomBytes:Ir});const Cr=BigInt(1);function Pr(e,t,r){const n=BigInt(30),i=Cr<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=Sr(i,i<<Cr),o=mr(pr(a,n));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,Er(a)>e&&(a=pr(a,i<<Cr),a+=i,o=mr(pr(a,n)))}while(!Ur(a,t,r));return a}function Ur(e,t,r){return(!t||function(e,t){let r=e,n=t;for(;n!==yr;){const e=n;n=r%n,r=e}return r}(e-Cr,t)===Cr)&&(!!function(e){const t=BigInt(0);return Dr.every((r=>pr(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return dr(t,e-Cr,e)===Cr}(e)&&!!function(e,t){const r=Er(e);t||(t=Math.max(1,r/48|0));const n=e-Cr;let i=0;for(;!br(n,i);)i++;const s=e>>BigInt(i);for(;t>0;t--){let t,r=dr(Sr(BigInt(2),n),s,e);if(r!==Cr&&r!==n){for(t=1;t<i;t++){if(r=pr(r*r,e),r===Cr)return!1;if(r===n)break}if(t===i)return!1}}return!0}(e,r)))}const Dr=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const xr=[];function Qr(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const n=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const n=Ir(e-r);for(let e=0;e<n.length;e++)0!==n[e]&&(t[r++]=n[e])}return t}(t-r-3),i=new Uint8Array(t);return i[1]=2,i.set(n,2),i.set(e,t-r),i}function Rr(e,t){let r=2,n=1;for(let t=r;t<e.length;t++)n&=0!==e[t],r+=n;const i=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&i>=8&!n;if(t)return T.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Mr(e,t,r){let n;if(t.length!==be.getHashByteLength(e))throw Error("Invalid hash length");const i=new Uint8Array(xr[e].length);for(n=0;n<xr[e].length;n++)i[n]=xr[e][n];const s=i.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(i,r-s),o.set(t,r-t.length),o}xr[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],xr[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],xr[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],xr[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],xr[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],xr[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],xr[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var Lr=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Rr,emeEncode:Qr,emsaEncode:Mr});const Tr=T.getWebCrypto(),Fr=T.getNodeCrypto(),Nr=BigInt(1);async function Hr(e,t,r,n,i,s){const a=gr(n),o=gr(i),c=gr(r);let h=pr(c,o-Nr),u=pr(c,a-Nr);return u=vr(u),h=vr(h),{kty:"RSA",n:G(e),e:G(t),d:G(r),p:G(i),q:G(n),dp:G(h),dq:G(u),qi:G(s),ext:!0}}function Or(e,t){return{kty:"RSA",n:G(e),e:G(t),ext:!0}}function zr(e,t){return{n:_(e.n),e:vr(t),d:_(e.d),p:_(e.q),q:_(e.p),u:_(e.qi)}}var _r=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i,s,a,o){if(T.getNodeCrypto()&&!o)try{return await async function(e,t,r,n,i,s,a){const o=await Hr(t,r,n,i,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Fr.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Fr.privateDecrypt(c,e))}catch(e){throw Error("Decryption error")}}(e,t,r,n,i,s,a)}catch(e){T.printDebugError(e)}return async function(e,t,r,n,i,s,a,o){if(e=gr(e),t=gr(t),r=gr(r),n=gr(n),i=gr(i),s=gr(s),a=gr(a),e>=t)throw Error("Data too large.");const c=pr(n,s-Nr),h=pr(n,i-Nr),u=Sr(BigInt(2),t),l=dr(wr(u,t),r,t);e=pr(e*l,t);const y=dr(e,h,i),f=dr(e,c,s),g=pr(a*(f-y),s);let p=g*i+y;return p=pr(p*u,t),Rr(vr(p,"be",kr(t)),o)}(e,t,r,n,i,s,a,o)},encrypt:async function(e,t,r){return T.getNodeCrypto()?async function(e,t,r){const n=Or(t,r),i={key:n,format:"jwk",type:"pkcs1",padding:Fr.constants.RSA_PKCS1_PADDING};return new Uint8Array(Fr.publicEncrypt(i,e))}(e,t,r):async function(e,t,r){if(t=gr(t),e=gr(Qr(e,kr(t))),r=gr(r),e>=t)throw Error("Message size cannot exceed modulus size");return vr(dr(e,r,t),"be",kr(t))}(e,t,r)},generate:async function(e,t){if(t=BigInt(t),T.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:vr(t),hash:{name:"SHA-1"}},n=await Tr.generateKey(r,!0,["sign","verify"]);return zr(await Tr.exportKey("jwk",n.privateKey),t)}if(T.getNodeCrypto()){const r={modulusLength:e,publicExponent:mr(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},n=await new Promise(((e,t)=>{Fr.generateKeyPair("rsa",r,((r,n,i)=>{r?t(r):e(i)}))}));return zr(n,t)}let r,n,i;do{n=Pr(e-(e>>1),t,40),r=Pr(e>>1,t,40),i=r*n}while(Er(i)!==e);const s=(r-Nr)*(n-Nr);return n<r&&([r,n]=[n,r]),{n:vr(i),e:vr(t),d:vr(wr(t,s)),p:vr(r),q:vr(n),u:vr(wr(r,n))}},sign:async function(e,t,r,n,i,s,a,o,c){if(t&&!T.isStream(t))if(T.getWebCrypto())try{return await async function(e,t,r,n,i,s,a,o){const c=await Hr(r,n,i,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},u=await Tr.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await Tr.sign("RSASSA-PKCS1-v1_5",u,t))}(R.read(R.webHash,e),t,r,n,i,s,a,o)}catch(e){T.printDebugError(e)}else if(T.getNodeCrypto())return async function(e,t,r,n,i,s,a,o){const c=Fr.createSign(R.read(R.hash,e));c.write(t),c.end();const h=await Hr(r,n,i,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(e,t,r,n,i,s,a,o);return async function(e,t,r,n){t=gr(t);const i=gr(Mr(e,n,kr(t)));if(r=gr(r),i>=t)throw Error("Message size cannot exceed modulus size");return vr(dr(i,r,t),"be",kr(t))}(e,r,i,c)},validateParams:async function(e,t,r,n,i,s){if(e=gr(e),(n=gr(n))*(i=gr(i))!==e)return!1;const a=BigInt(2);if(pr(n*(s=gr(s)),i)!==BigInt(1))return!1;t=gr(t),r=gr(r);const o=Sr(a,a<<BigInt(Math.floor(Er(e)/3))),c=o*r*t;return!(pr(c,n-Nr)!==o||pr(c,i-Nr)!==o)},verify:async function(e,t,r,n,i,s){if(t&&!T.isStream(t))if(T.getWebCrypto())try{return await async function(e,t,r,n,i){const s=Or(n,i),a=await Tr.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return Tr.verify("RSASSA-PKCS1-v1_5",a,r,t)}(R.read(R.webHash,e),t,r,n,i)}catch(e){T.printDebugError(e)}else if(T.getNodeCrypto())return async function(e,t,r,n,i){const s=Or(n,i),a={key:s,format:"jwk",type:"pkcs1"},o=Fr.createVerify(R.read(R.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch(e){return!1}}(e,t,r,n,i);return async function(e,t,r,n,i){if(r=gr(r),t=gr(t),n=gr(n),t>=r)throw Error("Signature size cannot exceed modulus size");const s=vr(dr(t,n,r),"be",kr(r)),a=Mr(e,i,kr(r));return T.equalsUint8Array(s,a)}(e,r,n,i,s)}});const Gr=BigInt(1);var jr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i){return e=gr(e),t=gr(t),r=gr(r),Rr(vr(pr(wr(dr(e,n=gr(n),r),r)*t,r),"be",kr(r)),i)},encrypt:async function(e,t,r,n){t=gr(t),r=gr(r),n=gr(n);const i=gr(Qr(e,kr(t))),s=Sr(Gr,t-Gr);return{c1:vr(dr(r,s,t)),c2:vr(pr(dr(n,s,t)*i,t))}},validateParams:async function(e,t,r,n){if(e=gr(e),t=gr(t),r=gr(r),t<=Gr||t>=e)return!1;const i=BigInt(Er(e));if(i<BigInt(1023))return!1;if(dr(t,e-Gr,e)!==Gr)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=pr(s*t,e),s===Gr)return!1;a++}n=gr(n);const h=Sr(o<<i-Gr,o<<i);return r===dr(t,(e-Gr)*h+n,e)}});const qr="object"==typeof t&&"crypto"in t?t.crypto:void 0,Vr={};var Wr=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},Zr=function(){throw Error("no PRNG")},Yr=new Uint8Array(32);Yr[0]=9;var Jr=Wr(),$r=Wr([1]),Xr=Wr([56129,1]),en=Wr([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),tn=Wr([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),rn=Wr([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),nn=Wr([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),sn=Wr([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function an(e,t,r,n){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=n>>24&255,e[t+5]=n>>16&255,e[t+6]=n>>8&255,e[t+7]=255&n}function on(e,t,r,n){return function(e,t,r,n,i){var s,a=0;for(s=0;s<i;s++)a|=e[t+s]^r[n+s];return(1&a-1>>>8)-1}(e,t,r,n,32)}function cn(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function hn(e){var t,r,n=1;for(t=0;t<16;t++)r=e[t]+n+65535,n=Math.floor(r/65536),e[t]=r-65536*n;e[0]+=n-1+37*(n-1)}function un(e,t,r){for(var n,i=~(r-1),s=0;s<16;s++)n=i&(e[s]^t[s]),e[s]^=n,t[s]^=n}function ln(e,t){var r,n,i,s=Wr(),a=Wr();for(r=0;r<16;r++)a[r]=t[r];for(hn(a),hn(a),hn(a),n=0;n<2;n++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),i=s[15]>>16&1,s[14]&=65535,un(a,s,1-i)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function yn(e,t){var r=new Uint8Array(32),n=new Uint8Array(32);return ln(r,e),ln(n,t),on(r,0,n,0)}function fn(e){var t=new Uint8Array(32);return ln(t,e),1&t[0]}function gn(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function pn(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]+r[n]}function dn(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]-r[n]}function An(e,t,r){var n,i,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0,B=0,I=0,S=0,K=0,C=0,P=0,U=0,D=0,x=0,Q=0,R=0,M=0,L=r[0],T=r[1],F=r[2],N=r[3],H=r[4],O=r[5],z=r[6],_=r[7],G=r[8],j=r[9],q=r[10],V=r[11],W=r[12],Z=r[13],Y=r[14],J=r[15];s+=(n=t[0])*L,a+=n*T,o+=n*F,c+=n*N,h+=n*H,u+=n*O,l+=n*z,y+=n*_,f+=n*G,g+=n*j,p+=n*q,d+=n*V,A+=n*W,w+=n*Z,m+=n*Y,b+=n*J,a+=(n=t[1])*L,o+=n*T,c+=n*F,h+=n*N,u+=n*H,l+=n*O,y+=n*z,f+=n*_,g+=n*G,p+=n*j,d+=n*q,A+=n*V,w+=n*W,m+=n*Z,b+=n*Y,E+=n*J,o+=(n=t[2])*L,c+=n*T,h+=n*F,u+=n*N,l+=n*H,y+=n*O,f+=n*z,g+=n*_,p+=n*G,d+=n*j,A+=n*q,w+=n*V,m+=n*W,b+=n*Z,E+=n*Y,k+=n*J,c+=(n=t[3])*L,h+=n*T,u+=n*F,l+=n*N,y+=n*H,f+=n*O,g+=n*z,p+=n*_,d+=n*G,A+=n*j,w+=n*q,m+=n*V,b+=n*W,E+=n*Z,k+=n*Y,v+=n*J,h+=(n=t[4])*L,u+=n*T,l+=n*F,y+=n*N,f+=n*H,g+=n*O,p+=n*z,d+=n*_,A+=n*G,w+=n*j,m+=n*q,b+=n*V,E+=n*W,k+=n*Z,v+=n*Y,B+=n*J,u+=(n=t[5])*L,l+=n*T,y+=n*F,f+=n*N,g+=n*H,p+=n*O,d+=n*z,A+=n*_,w+=n*G,m+=n*j,b+=n*q,E+=n*V,k+=n*W,v+=n*Z,B+=n*Y,I+=n*J,l+=(n=t[6])*L,y+=n*T,f+=n*F,g+=n*N,p+=n*H,d+=n*O,A+=n*z,w+=n*_,m+=n*G,b+=n*j,E+=n*q,k+=n*V,v+=n*W,B+=n*Z,I+=n*Y,S+=n*J,y+=(n=t[7])*L,f+=n*T,g+=n*F,p+=n*N,d+=n*H,A+=n*O,w+=n*z,m+=n*_,b+=n*G,E+=n*j,k+=n*q,v+=n*V,B+=n*W,I+=n*Z,S+=n*Y,K+=n*J,f+=(n=t[8])*L,g+=n*T,p+=n*F,d+=n*N,A+=n*H,w+=n*O,m+=n*z,b+=n*_,E+=n*G,k+=n*j,v+=n*q,B+=n*V,I+=n*W,S+=n*Z,K+=n*Y,C+=n*J,g+=(n=t[9])*L,p+=n*T,d+=n*F,A+=n*N,w+=n*H,m+=n*O,b+=n*z,E+=n*_,k+=n*G,v+=n*j,B+=n*q,I+=n*V,S+=n*W,K+=n*Z,C+=n*Y,P+=n*J,p+=(n=t[10])*L,d+=n*T,A+=n*F,w+=n*N,m+=n*H,b+=n*O,E+=n*z,k+=n*_,v+=n*G,B+=n*j,I+=n*q,S+=n*V,K+=n*W,C+=n*Z,P+=n*Y,U+=n*J,d+=(n=t[11])*L,A+=n*T,w+=n*F,m+=n*N,b+=n*H,E+=n*O,k+=n*z,v+=n*_,B+=n*G,I+=n*j,S+=n*q,K+=n*V,C+=n*W,P+=n*Z,U+=n*Y,D+=n*J,A+=(n=t[12])*L,w+=n*T,m+=n*F,b+=n*N,E+=n*H,k+=n*O,v+=n*z,B+=n*_,I+=n*G,S+=n*j,K+=n*q,C+=n*V,P+=n*W,U+=n*Z,D+=n*Y,x+=n*J,w+=(n=t[13])*L,m+=n*T,b+=n*F,E+=n*N,k+=n*H,v+=n*O,B+=n*z,I+=n*_,S+=n*G,K+=n*j,C+=n*q,P+=n*V,U+=n*W,D+=n*Z,x+=n*Y,Q+=n*J,m+=(n=t[14])*L,b+=n*T,E+=n*F,k+=n*N,v+=n*H,B+=n*O,I+=n*z,S+=n*_,K+=n*G,C+=n*j,P+=n*q,U+=n*V,D+=n*W,x+=n*Z,Q+=n*Y,R+=n*J,b+=(n=t[15])*L,a+=38*(k+=n*F),o+=38*(v+=n*N),c+=38*(B+=n*H),h+=38*(I+=n*O),u+=38*(S+=n*z),l+=38*(K+=n*_),y+=38*(C+=n*G),f+=38*(P+=n*j),g+=38*(U+=n*q),p+=38*(D+=n*V),d+=38*(x+=n*W),A+=38*(Q+=n*Z),w+=38*(R+=n*Y),m+=38*(M+=n*J),s=(n=(s+=38*(E+=n*T))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s=(n=(s+=i-1+37*(i-1))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s+=i-1+37*(i-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=h,e[5]=u,e[6]=l,e[7]=y,e[8]=f,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function wn(e,t){An(e,t,t)}function mn(e,t){var r,n=Wr();for(r=0;r<16;r++)n[r]=t[r];for(r=253;r>=0;r--)wn(n,n),2!==r&&4!==r&&An(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}function bn(e,t,r){var n,i,s=new Uint8Array(32),a=new Float64Array(80),o=Wr(),c=Wr(),h=Wr(),u=Wr(),l=Wr(),y=Wr();for(i=0;i<31;i++)s[i]=t[i];for(s[31]=127&t[31]|64,s[0]&=248,gn(a,r),i=0;i<16;i++)c[i]=a[i],u[i]=o[i]=h[i]=0;for(o[0]=u[0]=1,i=254;i>=0;--i)un(o,c,n=s[i>>>3]>>>(7&i)&1),un(h,u,n),pn(l,o,h),dn(o,o,h),pn(h,c,u),dn(c,c,u),wn(u,l),wn(y,o),An(o,h,o),An(h,c,l),pn(l,o,h),dn(o,o,h),wn(c,o),dn(h,u,y),An(o,h,Xr),pn(o,o,u),An(h,h,o),An(o,u,y),An(u,c,a),wn(c,l),un(o,c,n),un(h,u,n);for(i=0;i<16;i++)a[i+16]=o[i],a[i+32]=h[i],a[i+48]=c[i],a[i+64]=u[i];var f=a.subarray(32),g=a.subarray(16);return mn(f,f),An(g,g,f),ln(e,g),0}function En(e,t){return bn(e,t,Yr)}var kn=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function vn(e,t,r,n){for(var i,s,a,o,c,h,u,l,y,f,g,p,d,A,w,m,b,E,k,v,B,I,S,K,C,P,U=new Int32Array(16),D=new Int32Array(16),x=e[0],Q=e[1],R=e[2],M=e[3],L=e[4],T=e[5],F=e[6],N=e[7],H=t[0],O=t[1],z=t[2],_=t[3],G=t[4],j=t[5],q=t[6],V=t[7],W=0;n>=128;){for(k=0;k<16;k++)v=8*k+W,U[k]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],D[k]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(k=0;k<80;k++)if(i=x,s=Q,a=R,o=M,c=L,h=T,u=F,N,y=H,f=O,g=z,p=_,d=G,A=j,w=q,V,S=65535&(I=V),K=I>>>16,C=65535&(B=N),P=B>>>16,S+=65535&(I=(G>>>14|L<<18)^(G>>>18|L<<14)^(L>>>9|G<<23)),K+=I>>>16,C+=65535&(B=(L>>>14|G<<18)^(L>>>18|G<<14)^(G>>>9|L<<23)),P+=B>>>16,S+=65535&(I=G&j^~G&q),K+=I>>>16,C+=65535&(B=L&T^~L&F),P+=B>>>16,B=kn[2*k],S+=65535&(I=kn[2*k+1]),K+=I>>>16,C+=65535&B,P+=B>>>16,B=U[k%16],K+=(I=D[k%16])>>>16,C+=65535&B,P+=B>>>16,C+=(K+=(S+=65535&I)>>>16)>>>16,S=65535&(I=E=65535&S|K<<16),K=I>>>16,C=65535&(B=b=65535&C|(P+=C>>>16)<<16),P=B>>>16,S+=65535&(I=(H>>>28|x<<4)^(x>>>2|H<<30)^(x>>>7|H<<25)),K+=I>>>16,C+=65535&(B=(x>>>28|H<<4)^(H>>>2|x<<30)^(H>>>7|x<<25)),P+=B>>>16,K+=(I=H&O^H&z^O&z)>>>16,C+=65535&(B=x&Q^x&R^Q&R),P+=B>>>16,l=65535&(C+=(K+=(S+=65535&I)>>>16)>>>16)|(P+=C>>>16)<<16,m=65535&S|K<<16,S=65535&(I=p),K=I>>>16,C=65535&(B=o),P=B>>>16,K+=(I=E)>>>16,C+=65535&(B=b),P+=B>>>16,Q=i,R=s,M=a,L=o=65535&(C+=(K+=(S+=65535&I)>>>16)>>>16)|(P+=C>>>16)<<16,T=c,F=h,N=u,x=l,O=y,z=f,_=g,G=p=65535&S|K<<16,j=d,q=A,V=w,H=m,k%16==15)for(v=0;v<16;v++)B=U[v],S=65535&(I=D[v]),K=I>>>16,C=65535&B,P=B>>>16,B=U[(v+9)%16],S+=65535&(I=D[(v+9)%16]),K+=I>>>16,C+=65535&B,P+=B>>>16,b=U[(v+1)%16],S+=65535&(I=((E=D[(v+1)%16])>>>1|b<<31)^(E>>>8|b<<24)^(E>>>7|b<<25)),K+=I>>>16,C+=65535&(B=(b>>>1|E<<31)^(b>>>8|E<<24)^b>>>7),P+=B>>>16,b=U[(v+14)%16],K+=(I=((E=D[(v+14)%16])>>>19|b<<13)^(b>>>29|E<<3)^(E>>>6|b<<26))>>>16,C+=65535&(B=(b>>>19|E<<13)^(E>>>29|b<<3)^b>>>6),P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,U[v]=65535&C|P<<16,D[v]=65535&S|K<<16;S=65535&(I=H),K=I>>>16,C=65535&(B=x),P=B>>>16,B=e[0],K+=(I=t[0])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[0]=x=65535&C|P<<16,t[0]=H=65535&S|K<<16,S=65535&(I=O),K=I>>>16,C=65535&(B=Q),P=B>>>16,B=e[1],K+=(I=t[1])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[1]=Q=65535&C|P<<16,t[1]=O=65535&S|K<<16,S=65535&(I=z),K=I>>>16,C=65535&(B=R),P=B>>>16,B=e[2],K+=(I=t[2])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[2]=R=65535&C|P<<16,t[2]=z=65535&S|K<<16,S=65535&(I=_),K=I>>>16,C=65535&(B=M),P=B>>>16,B=e[3],K+=(I=t[3])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[3]=M=65535&C|P<<16,t[3]=_=65535&S|K<<16,S=65535&(I=G),K=I>>>16,C=65535&(B=L),P=B>>>16,B=e[4],K+=(I=t[4])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[4]=L=65535&C|P<<16,t[4]=G=65535&S|K<<16,S=65535&(I=j),K=I>>>16,C=65535&(B=T),P=B>>>16,B=e[5],K+=(I=t[5])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[5]=T=65535&C|P<<16,t[5]=j=65535&S|K<<16,S=65535&(I=q),K=I>>>16,C=65535&(B=F),P=B>>>16,B=e[6],K+=(I=t[6])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[6]=F=65535&C|P<<16,t[6]=q=65535&S|K<<16,S=65535&(I=V),K=I>>>16,C=65535&(B=N),P=B>>>16,B=e[7],K+=(I=t[7])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[7]=N=65535&C|P<<16,t[7]=V=65535&S|K<<16,W+=128,n-=128}return n}function Bn(e,t,r){var n,i=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(i[0]=1779033703,i[1]=3144134277,i[2]=1013904242,i[3]=2773480762,i[4]=1359893119,i[5]=2600822924,i[6]=528734635,i[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,vn(i,s,t,r),r%=128,n=0;n<r;n++)a[n]=t[o-r+n];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,an(a,r-8,o/536870912|0,o<<3),vn(i,s,a,r),n=0;n<8;n++)an(e,8*n,i[n],s[n]);return 0}function In(e,t){var r=Wr(),n=Wr(),i=Wr(),s=Wr(),a=Wr(),o=Wr(),c=Wr(),h=Wr(),u=Wr();dn(r,e[1],e[0]),dn(u,t[1],t[0]),An(r,r,u),pn(n,e[0],e[1]),pn(u,t[0],t[1]),An(n,n,u),An(i,e[3],t[3]),An(i,i,tn),An(s,e[2],t[2]),pn(s,s,s),dn(a,n,r),dn(o,s,i),pn(c,s,i),pn(h,n,r),An(e[0],a,o),An(e[1],h,c),An(e[2],c,o),An(e[3],a,h)}function Sn(e,t,r){var n;for(n=0;n<4;n++)un(e[n],t[n],r)}function Kn(e,t){var r=Wr(),n=Wr(),i=Wr();mn(i,t[2]),An(r,t[0],i),An(n,t[1],i),ln(e,n),e[31]^=fn(r)<<7}function Cn(e,t,r){var n,i;for(cn(e[0],Jr),cn(e[1],$r),cn(e[2],$r),cn(e[3],Jr),i=255;i>=0;--i)Sn(e,t,n=r[i/8|0]>>(7&i)&1),In(t,e),In(e,e),Sn(e,t,n)}function Pn(e,t){var r=[Wr(),Wr(),Wr(),Wr()];cn(r[0],rn),cn(r[1],nn),cn(r[2],$r),An(r[3],rn,nn),Cn(e,r,t)}function Un(e,t,r){var n,i=new Uint8Array(64),s=[Wr(),Wr(),Wr(),Wr()];for(r||Zr(t,32),Bn(i,t,32),i[0]&=248,i[31]&=127,i[31]|=64,Pn(s,i),Kn(e,s),n=0;n<32;n++)t[n+32]=e[n];return 0}var Dn=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function xn(e,t){var r,n,i,s;for(n=63;n>=32;--n){for(r=0,i=n-32,s=n-12;i<s;++i)t[i]+=r-16*t[n]*Dn[i-(n-32)],r=Math.floor((t[i]+128)/256),t[i]-=256*r;t[i]+=r,t[n]=0}for(r=0,i=0;i<32;i++)t[i]+=r-(t[31]>>4)*Dn[i],r=t[i]>>8,t[i]&=255;for(i=0;i<32;i++)t[i]-=r*Dn[i];for(n=0;n<32;n++)t[n+1]+=t[n]>>8,e[n]=255&t[n]}function Qn(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;xn(e,r)}function Rn(e,t){var r=Wr(),n=Wr(),i=Wr(),s=Wr(),a=Wr(),o=Wr(),c=Wr();return cn(e[2],$r),gn(e[1],t),wn(i,e[1]),An(s,i,en),dn(i,i,e[2]),pn(s,e[2],s),wn(a,s),wn(o,a),An(c,o,a),An(r,c,i),An(r,r,s),function(e,t){var r,n=Wr();for(r=0;r<16;r++)n[r]=t[r];for(r=250;r>=0;r--)wn(n,n),1!==r&&An(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}(r,r),An(r,r,i),An(r,r,s),An(r,r,s),An(e[0],r,s),wn(n,e[0]),An(n,n,s),yn(n,i)&&An(e[0],e[0],sn),wn(n,e[0]),An(n,n,s),yn(n,i)?-1:(fn(e[0])===t[31]>>7&&dn(e[0],Jr,e[0]),An(e[3],e[0],e[1]),0)}var Mn=64;function Ln(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}Vr.scalarMult=function(e,t){if(Ln(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return bn(r,e,t),r},Vr.box={},Vr.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){Zr(t,32),En(e,t)}(e,t),{publicKey:e,secretKey:t}},Vr.box.keyPair.fromSecretKey=function(e){if(Ln(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return En(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},Vr.sign=function(e,t){if(Ln(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(Mn+e.length);return function(e,t,r,n){var i,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[Wr(),Wr(),Wr(),Wr()];Bn(a,n,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(i=0;i<r;i++)e[64+i]=t[i];for(i=0;i<32;i++)e[32+i]=a[32+i];for(Bn(c,e.subarray(32),r+32),Qn(c),Pn(u,c),Kn(e,u),i=32;i<64;i++)e[i]=n[i];for(Bn(o,e,r+64),Qn(o),i=0;i<64;i++)h[i]=0;for(i=0;i<32;i++)h[i]=c[i];for(i=0;i<32;i++)for(s=0;s<32;s++)h[i+s]+=o[i]*a[s];xn(e.subarray(32),h)}(r,e,e.length,t),r},Vr.sign.detached=function(e,t){for(var r=Vr.sign(e,t),n=new Uint8Array(Mn),i=0;i<n.length;i++)n[i]=r[i];return n},Vr.sign.detached.verify=function(e,t,r){if(Ln(e,t,r),t.length!==Mn)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var n,i=new Uint8Array(Mn+e.length),s=new Uint8Array(Mn+e.length);for(n=0;n<Mn;n++)i[n]=t[n];for(n=0;n<e.length;n++)i[n+Mn]=e[n];return function(e,t,r,n){var i,s=new Uint8Array(32),a=new Uint8Array(64),o=[Wr(),Wr(),Wr(),Wr()],c=[Wr(),Wr(),Wr(),Wr()];if(r<64)return-1;if(Rn(c,n))return-1;for(i=0;i<r;i++)e[i]=t[i];for(i=0;i<32;i++)e[i+32]=n[i];if(Bn(a,e,r),Qn(a),Cn(o,c,a),Pn(c,t.subarray(32)),In(o,c),Kn(s,o),r-=64,on(t,0,s,0)){for(i=0;i<r;i++)e[i]=0;return-1}for(i=0;i<r;i++)e[i]=t[i+64];return r}(s,i,i.length,r)>=0},Vr.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return Un(e,t),{publicKey:e,secretKey:t}},Vr.sign.keyPair.fromSecretKey=function(e){if(Ln(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},Vr.sign.keyPair.fromSeed=function(e){if(Ln(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),n=0;n<32;n++)r[n]=e[n];return Un(t,r,!0),{publicKey:t,secretKey:r}},Vr.setPRNG=function(e){Zr=e},function(){if(qr&&qr.getRandomValues){Vr.setPRNG((function(e,t){var r,n=new Uint8Array(t);for(r=0;r<t;r+=65536)qr.getRandomValues(n.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=n[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(n)}))}}();const Tn={"2a8648ce3d030107":R.curve.nistP256,"2b81040022":R.curve.nistP384,"2b81040023":R.curve.nistP521,"2b8104000a":R.curve.secp256k1,"2b06010401da470f01":R.curve.ed25519Legacy,"2b060104019755010501":R.curve.curve25519Legacy,"2b2403030208010107":R.curve.brainpoolP256r1,"2b240303020801010b":R.curve.brainpoolP384r1,"2b240303020801010d":R.curve.brainpoolP512r1};class Fn{constructor(e){if(e instanceof Fn)this.oid=e.oid;else if(T.isArray(e)||T.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return T.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return T.uint8ArrayToHex(this.oid)}getName(){const e=Tn[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function Nn(e){let t,r=0;const n=e[0];return n<192?([r]=e,t=1):n<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===n&&(r=T.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function Hn(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):T.concatUint8Array([new Uint8Array([255]),T.writeNumber(e,4)])}function On(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function zn(e){return new Uint8Array([192|e])}function _n(e,t){return T.concatUint8Array([zn(e),Hn(t)])}function Gn(e){return[R.packet.literalData,R.packet.compressedData,R.packet.symmetricallyEncryptedData,R.packet.symEncryptedIntegrityProtectedData,R.packet.aeadEncryptedData].includes(e)}async function jn(e,t){const r=D(e);let n,i;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const o=await r.readByte();let c,h,u=-1,l=-1;l=0,64&o&&(l=1),l?u=63&o:(u=(63&o)>>2,h=3&o);const y=Gn(u);let f,g=null;if(y){if("array"===T.isStream(e)){const e=new a;n=x(e),g=e}else{const e=new TransformStream;n=x(e.writable),g=e.readable}i=t({tag:u,packet:g})}else g=[];do{if(l){const e=await r.readByte();if(f=!1,e<192)c=e;else if(e>=192&&e<224)c=(e-192<<8)+await r.readByte()+192;else if(e>223&&e<255){if(c=1<<(31&e),f=!0,!y)throw new TypeError("This packet type does not support partial lengths.")}else c=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(h){case 0:c=await r.readByte();break;case 1:c=await r.readByte()<<8|await r.readByte();break;case 2:c=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:c=1/0}if(c>0){let e=0;for(;;){n&&await n.ready;const{done:t,value:i}=await r.read();if(t){if(c===1/0)break;throw Error("Unexpected end of packet")}const s=c===1/0?i:i.subarray(0,c-e);if(n?await n.write(s):g.push(s),e+=i.length,e>=c){r.unshift(i.subarray(c-e+i.length));break}}}}while(f);const p=await r.peekBytes(y?1/0:2);return n?(await n.ready,await n.close()):(g=T.concatUint8Array(g),await t({tag:u,packet:g})),!p||!p.length}catch(e){if(n)return await n.abort(e),!0;throw e}finally{n&&await i,r.releaseLock()}}class qn extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,qn),this.name="UnsupportedError"}}class Vn extends qn{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,qn),this.name="UnknownPacketError"}}class Wn{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}
|
|
4
|
+
/*! noble-ed25519 - MIT License (c) 2019 Paul Miller (paulmillr.com) */const Zn=BigInt(0),Yn=BigInt(1),Jn=BigInt(2),$n=BigInt(8),Xn=BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),ei=Object.freeze({a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),P:BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),l:Xn,n:Xn,h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960")}),ti=BigInt("0x10000000000000000000000000000000000000000000000000000000000000000"),ri=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");BigInt("6853475219497561581579357271197624642482790079785650197046958215289687604742");const ni=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),ii=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),si=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),ai=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");class oi{constructor(e,t,r,n){this.x=e,this.y=t,this.z=r,this.t=n}static fromAffine(e){if(!(e instanceof gi))throw new TypeError("ExtendedPoint#fromAffine: expected Point");return e.equals(gi.ZERO)?oi.ZERO:new oi(e.x,e.y,Yn,Si(e.x*e.y))}static toAffineBatch(e){const t=function(e,t=ei.P){const r=Array(e.length),n=e.reduce(((e,n,i)=>n===Zn?e:(r[i]=e,Si(e*n,t))),Yn),i=Ki(n,t);return e.reduceRight(((e,n,i)=>n===Zn?e:(r[i]=Si(e*r[i],t),Si(e*n,t))),i),r}(e.map((e=>e.z)));return e.map(((e,r)=>e.toAffine(t[r])))}static normalizeZ(e){return this.toAffineBatch(e).map(this.fromAffine)}equals(e){hi(e);const{x:t,y:r,z:n}=this,{x:i,y:s,z:a}=e,o=Si(t*a),c=Si(i*n),h=Si(r*a),u=Si(s*n);return o===c&&h===u}negate(){return new oi(Si(-this.x),this.y,this.z,Si(-this.t))}double(){const{x:e,y:t,z:r}=this,{a:n}=ei,i=Si(e*e),s=Si(t*t),a=Si(Jn*Si(r*r)),o=Si(n*i),c=e+t,h=Si(Si(c*c)-i-s),u=o+s,l=u-a,y=o-s,f=Si(h*l),g=Si(u*y),p=Si(h*y),d=Si(l*u);return new oi(f,g,d,p)}add(e){hi(e);const{x:t,y:r,z:n,t:i}=this,{x:s,y:a,z:o,t:c}=e,h=Si((r-t)*(a+s)),u=Si((r+t)*(a-s)),l=Si(u-h);if(l===Zn)return this.double();const y=Si(n*Jn*c),f=Si(i*Jn*o),g=f+y,p=u+h,d=f-y,A=Si(g*l),w=Si(p*d),m=Si(g*d),b=Si(l*p);return new oi(A,w,b,m)}subtract(e){return this.add(e.negate())}precomputeWindow(e){const t=1+256/e,r=[];let n=this,i=n;for(let s=0;s<t;s++){i=n,r.push(i);for(let t=1;t<2**(e-1);t++)i=i.add(n),r.push(i);n=i.double()}return r}wNAF(e,t){!t&&this.equals(oi.BASE)&&(t=gi.BASE);const r=t&&t._WINDOW_SIZE||1;if(256%r)throw Error("Point#wNAF: Invalid precomputation window, must be power of 2");let n=t&&fi.get(t);n||(n=this.precomputeWindow(r),t&&1!==r&&(n=oi.normalizeZ(n),fi.set(t,n)));let i=oi.ZERO,s=oi.BASE;const a=1+256/r,o=2**(r-1),c=BigInt(2**r-1),h=2**r,u=BigInt(r);for(let t=0;t<a;t++){const r=t*o;let a=Number(e&c);e>>=u,a>o&&(a-=h,e+=Yn);const l=r,y=r+Math.abs(a)-1,f=t%2!=0,g=a<0;0===a?s=s.add(ci(f,n[l])):i=i.add(ci(g,n[y]))}return oi.normalizeZ([i,s])[0]}multiply(e,t){return this.wNAF(Qi(e,ei.l),t)}multiplyUnsafe(e){let t=Qi(e,ei.l,!1);const r=oi.BASE,n=oi.ZERO;if(t===Zn)return n;if(this.equals(n)||t===Yn)return this;if(this.equals(r))return this.wNAF(t);let i=n,s=this;for(;t>Zn;)t&Yn&&(i=i.add(s)),s=s.double(),t>>=Yn;return i}isSmallOrder(){return this.multiplyUnsafe(ei.h).equals(oi.ZERO)}isTorsionFree(){let e=this.multiplyUnsafe(ei.l/Jn).double();return ei.l%Jn&&(e=e.add(this)),e.equals(oi.ZERO)}toAffine(e){const{x:t,y:r,z:n}=this,i=this.equals(oi.ZERO);null==e&&(e=i?$n:Ki(n));const s=Si(t*e),a=Si(r*e),o=Si(n*e);if(i)return gi.ZERO;if(o!==Yn)throw Error("invZ was invalid");return new gi(s,a)}fromRistrettoBytes(){li()}toRistrettoBytes(){li()}fromRistrettoHash(){li()}}function ci(e,t){const r=t.negate();return e?r:t}function hi(e){if(!(e instanceof oi))throw new TypeError("ExtendedPoint expected")}function ui(e){if(!(e instanceof yi))throw new TypeError("RistrettoPoint expected")}function li(){throw Error("Legacy method: switch to RistrettoPoint")}oi.BASE=new oi(ei.Gx,ei.Gy,Yn,Si(ei.Gx*ei.Gy)),oi.ZERO=new oi(Zn,Yn,Yn,Zn);class yi{constructor(e){this.ep=e}static calcElligatorRistrettoMap(e){const{d:t}=ei,r=Si(ri*e*e),n=Si((r+Yn)*si);let i=BigInt(-1);const s=Si((i-t*r)*Si(r+t));let{isValid:a,value:o}=Pi(n,s),c=Si(o*e);ki(c)||(c=Si(-c)),a||(o=c),a||(i=r);const h=Si(i*(r-Yn)*ai-s),u=o*o,l=Si((o+o)*s),y=Si(h*ni),f=Si(Yn-u),g=Si(Yn+u);return new oi(Si(l*g),Si(f*y),Si(y*g),Si(l*f))}static hashToCurve(e){const t=Ii((e=xi(e,64)).slice(0,32)),r=this.calcElligatorRistrettoMap(t),n=Ii(e.slice(32,64)),i=this.calcElligatorRistrettoMap(n);return new yi(r.add(i))}static fromHex(e){e=xi(e,32);const{a:t,d:r}=ei,n="RistrettoPoint.fromHex: the hex is not valid encoding of RistrettoPoint",i=Ii(e);if(!function(e,t){if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0}(Ei(i),e)||ki(i))throw Error(n);const s=Si(i*i),a=Si(Yn+t*s),o=Si(Yn-t*s),c=Si(a*a),h=Si(o*o),u=Si(t*r*c-h),{isValid:l,value:y}=Ui(Si(u*h)),f=Si(y*o),g=Si(y*f*u);let p=Si((i+i)*f);ki(p)&&(p=Si(-p));const d=Si(a*g),A=Si(p*d);if(!l||ki(A)||d===Zn)throw Error(n);return new yi(new oi(p,d,Yn,A))}toRawBytes(){let{x:e,y:t,z:r,t:n}=this.ep;const i=Si(Si(r+t)*Si(r-t)),s=Si(e*t),a=Si(s*s),{value:o}=Ui(Si(i*a)),c=Si(o*i),h=Si(o*s),u=Si(c*h*n);let l;if(ki(n*u)){let r=Si(t*ri),n=Si(e*ri);e=r,t=n,l=Si(c*ii)}else l=h;ki(e*u)&&(t=Si(-t));let y=Si((r-t)*l);return ki(y)&&(y=Si(-y)),Ei(y)}toHex(){return wi(this.toRawBytes())}toString(){return this.toHex()}equals(e){ui(e);const t=this.ep,r=e.ep,n=Si(t.x*r.y)===Si(t.y*r.x),i=Si(t.y*r.y)===Si(t.x*r.x);return n||i}add(e){return ui(e),new yi(this.ep.add(e.ep))}subtract(e){return ui(e),new yi(this.ep.subtract(e.ep))}multiply(e){return new yi(this.ep.multiply(e))}multiplyUnsafe(e){return new yi(this.ep.multiplyUnsafe(e))}}yi.BASE=new yi(oi.BASE),yi.ZERO=new yi(oi.ZERO);const fi=new WeakMap;class gi{constructor(e,t){this.x=e,this.y=t}_setWindowSize(e){this._WINDOW_SIZE=e,fi.delete(this)}static fromHex(e,t=!0){const{d:r,P:n}=ei,i=(e=xi(e,32)).slice();i[31]=-129&e[31];const s=vi(i);if(t&&s>=n)throw Error("Expected 0 < hex < P");if(!t&&s>=ti)throw Error("Expected 0 < hex < 2**256");const a=Si(s*s),o=Si(a-Yn),c=Si(r*a+Yn);let{isValid:h,value:u}=Pi(o,c);if(!h)throw Error("Point.fromHex: invalid y coordinate");const l=(u&Yn)===Yn;return!!(128&e[31])!==l&&(u=Si(-u)),new gi(u,s)}static async fromPrivateKey(e){return(await Mi(e)).point}toRawBytes(){const e=Ei(this.y);return e[31]|=this.x&Yn?128:0,e}toHex(){return wi(this.toRawBytes())}toX25519(){const{y:e}=this;return Ei(Si((Yn+e)*Ki(Yn-e)))}isTorsionFree(){return oi.fromAffine(this).isTorsionFree()}equals(e){return this.x===e.x&&this.y===e.y}negate(){return new gi(Si(-this.x),this.y)}add(e){return oi.fromAffine(this).add(oi.fromAffine(e)).toAffine()}subtract(e){return this.add(e.negate())}multiply(e){return oi.fromAffine(this).multiply(e,this).toAffine()}}gi.BASE=new gi(ei.Gx,ei.Gy),gi.ZERO=new gi(Zn,Yn);let pi=class e{constructor(e,t){this.r=e,this.s=t,this.assertValidity()}static fromHex(t){const r=xi(t,64),n=gi.fromHex(r.slice(0,32),!1),i=vi(r.slice(32,64));return new e(n,i)}assertValidity(){const{r:e,s:t}=this;if(!(e instanceof gi))throw Error("Expected Point instance");return Qi(t,ei.l,!1),this}toRawBytes(){const e=new Uint8Array(64);return e.set(this.r.toRawBytes()),e.set(Ei(this.s),32),e}toHex(){return wi(this.toRawBytes())}};function di(...e){if(!e.every((e=>e instanceof Uint8Array)))throw Error("Expected Uint8Array list");if(1===e.length)return e[0];const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}const Ai=Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function wi(e){if(!(e instanceof Uint8Array))throw Error("Uint8Array expected");let t="";for(let r=0;r<e.length;r++)t+=Ai[e[r]];return t}function mi(e){if("string"!=typeof e)throw new TypeError("hexToBytes: expected string, got "+typeof e);if(e.length%2)throw Error("hexToBytes: received invalid unpadded hex");const t=new Uint8Array(e.length/2);for(let r=0;r<t.length;r++){const n=2*r,i=e.slice(n,n+2),s=Number.parseInt(i,16);if(Number.isNaN(s)||s<0)throw Error("Invalid byte sequence");t[r]=s}return t}function bi(e){return mi(e.toString(16).padStart(64,"0"))}function Ei(e){return bi(e).reverse()}function ki(e){return(Si(e)&Yn)===Yn}function vi(e){if(!(e instanceof Uint8Array))throw Error("Expected Uint8Array");return BigInt("0x"+wi(Uint8Array.from(e).reverse()))}const Bi=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function Ii(e){return Si(vi(e)&Bi)}function Si(e,t=ei.P){const r=e%t;return r>=Zn?r:t+r}function Ki(e,t=ei.P){if(e===Zn||t<=Zn)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=Si(e,t),n=t,i=Zn,s=Yn;for(;r!==Zn;){const e=n%r,t=i-s*(n/r);n=r,r=e,i=s,s=t}if(n!==Yn)throw Error("invert: does not exist");return Si(i,t)}function Ci(e,t){const{P:r}=ei;let n=e;for(;t-- >Zn;)n*=n,n%=r;return n}function Pi(e,t){const r=Si(t*t*t),n=function(e){const{P:t}=ei,r=BigInt(5),n=BigInt(10),i=BigInt(20),s=BigInt(40),a=BigInt(80),o=e*e%t*e%t,c=Ci(o,Jn)*o%t,h=Ci(c,Yn)*e%t,u=Ci(h,r)*h%t,l=Ci(u,n)*u%t,y=Ci(l,i)*l%t,f=Ci(y,s)*y%t,g=Ci(f,a)*f%t,p=Ci(g,a)*f%t,d=Ci(p,n)*u%t;return{pow_p_5_8:Ci(d,Jn)*e%t,b2:o}}(e*Si(r*r*t)).pow_p_5_8;let i=Si(e*r*n);const s=Si(t*i*i),a=i,o=Si(i*ri),c=s===e,h=s===Si(-e),u=s===Si(-e*ri);return c&&(i=a),(h||u)&&(i=o),ki(i)&&(i=Si(-i)),{isValid:c||h,value:i}}function Ui(e){return Pi(Yn,e)}function Di(e){return Si(vi(e),ei.l)}function xi(e,t){const r=e instanceof Uint8Array?Uint8Array.from(e):mi(e);if("number"==typeof t&&r.length!==t)throw Error(`Expected ${t} bytes`);return r}function Qi(e,t,r=!0){if(!t)throw new TypeError("Specify max value");if("number"==typeof e&&Number.isSafeInteger(e)&&(e=BigInt(e)),"bigint"==typeof e&&e<t)if(r){if(Zn<e)return e}else if(Zn<=e)return e;throw new TypeError("Expected valid scalar: 0 < scalar < max")}let Ri;async function Mi(e){return function(e){const t=function(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}(e.slice(0,32)),r=e.slice(32,64),n=Di(t),i=gi.BASE.multiply(n),s=i.toRawBytes();return{head:t,prefix:r,scalar:n,point:i,pointBytes:s}}(await Fi.sha512(function(e){if(32!==(e="bigint"==typeof e||"number"==typeof e?bi(Qi(e,ti)):xi(e)).length)throw Error("Expected 32 bytes");return e}(e)))}async function Li(e,t,r){const{r:n,SB:i,msg:s,pub:a}=function(e,t,r){t=xi(t),r instanceof gi||(r=gi.fromHex(r,!1));const{r:n,s:i}=e instanceof pi?e.assertValidity():pi.fromHex(e);return{r:n,s:i,SB:oi.BASE.multiplyUnsafe(i),pub:r,msg:t}}(e,t,r),o=await Fi.sha512(n.toRawBytes(),a.toRawBytes(),s);return function(e,t,r,n){const i=Di(n),s=oi.fromAffine(e).multiplyUnsafe(i);return oi.fromAffine(t).add(s).subtract(r).multiplyUnsafe(ei.h).equals(oi.ZERO)}(a,n,i,o)}gi.BASE._setWindowSize(8);const Ti={node:null,web:"object"==typeof self&&"crypto"in self?self.crypto:void 0},Fi={bytesToHex:wi,hexToBytes:mi,concatBytes:di,getExtendedPublicKey:Mi,mod:Si,invert:Ki,TORSION_SUBGROUP:["0100000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a","0000000000000000000000000000000000000000000000000000000000000080","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05","ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc85","0000000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa"],hashToPrivateScalar:e=>{if((e=xi(e)).length<40||e.length>1024)throw Error("Expected 40-1024 bytes of private key as per FIPS 186");return Si(vi(e),ei.l-Yn)+Yn},randomBytes:(e=32)=>{if(Ti.web)return Ti.web.getRandomValues(new Uint8Array(e));throw Error("The environment doesn't have randomBytes function")},randomPrivateKey:()=>Fi.randomBytes(32),sha512:async(...e)=>{const t=di(...e);if(Ti.web){const e=await Ti.web.subtle.digest("SHA-512",t.buffer);return new Uint8Array(e)}throw Error("The environment doesn't have sha512 function")},precompute(e=8,t=gi.BASE){const r=t.equals(gi.BASE)?t:new gi(t.x,t.y);return r._setWindowSize(e),r.multiply(Jn),r},sha512Sync:void 0};async function Ni(e){switch(e){case R.publicKey.ed25519:try{const e=T.getWebCrypto(),t=await e.generateKey("Ed25519",!0,["sign","verify"]),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);return{A:new Uint8Array(_(n.x)),seed:_(r.d)}}catch(t){if("NotSupportedError"!==t.name&&"OperationError"!==t.name)throw t;const r=Ir(zi(e)),{publicKey:n}=Vr.sign.keyPair.fromSeed(r);return{A:n,seed:r}}case R.publicKey.ed448:{const e=await T.getNobleCurve(R.publicKey.ed448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),seed:t}}default:throw Error("Unsupported EdDSA algorithm")}}async function Hi(e,t,r,n,i,s){if(be.getHashByteLength(t)<be.getHashByteLength(_i(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case R.publicKey.ed25519:try{const t=T.getWebCrypto(),r=ji(e,n,i),a=await t.importKey("jwk",r,"Ed25519",!1,["sign"]);return{RS:new Uint8Array(await t.sign("Ed25519",a,s))}}catch(e){if("NotSupportedError"!==e.name)throw e;const t=T.concatUint8Array([i,n]);return{RS:Vr.sign.detached(s,t)}}case R.publicKey.ed448:return{RS:(await T.getNobleCurve(R.publicKey.ed448)).sign(s,i)};default:throw Error("Unsupported EdDSA algorithm")}}async function Oi(e,t,{RS:r},n,i,s){if(be.getHashByteLength(t)<be.getHashByteLength(_i(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case R.publicKey.ed25519:try{const t=T.getWebCrypto(),n=Gi(e,i),a=await t.importKey("jwk",n,"Ed25519",!1,["verify"]);return await t.verify("Ed25519",a,r,s)}catch(e){if("NotSupportedError"!==e.name)throw e;return Li(r,s,i)}case R.publicKey.ed448:return(await T.getNobleCurve(R.publicKey.ed448)).verify(r,s,i);default:throw Error("Unsupported EdDSA algorithm")}}function zi(e){switch(e){case R.publicKey.ed25519:return 32;case R.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function _i(e){switch(e){case R.publicKey.ed25519:return R.hash.sha256;case R.publicKey.ed448:return R.hash.sha512;default:throw Error("Unknown EdDSA algo")}}Object.defineProperties(Fi,{sha512Sync:{configurable:!1,get:()=>Ri,set(e){Ri||(Ri=e)}}});const Gi=(e,t)=>{if(e===R.publicKey.ed25519){return{kty:"OKP",crv:"Ed25519",x:G(t),ext:!0}}throw Error("Unsupported EdDSA algorithm")},ji=(e,t,r)=>{if(e===R.publicKey.ed25519){const n=Gi(e,t);return n.d=G(r),n}throw Error("Unsupported EdDSA algorithm")};var qi=/*#__PURE__*/Object.freeze({__proto__:null,generate:Ni,getPayloadSize:zi,getPreferredHashAlgo:_i,sign:Hi,validateParams:async function(e,t,r){switch(e){case R.publicKey.ed25519:{const{publicKey:e}=Vr.sign.keyPair.fromSeed(r);return T.equalsUint8Array(t,e)}case R.publicKey.ed448:{const e=(await T.getNobleCurve(R.publicKey.ed448)).getPublicKey(r);return T.equalsUint8Array(t,e)}default:return!1}},verify:Oi});const Vi=T.getWebCrypto();async function Wi(e,t,r){const{keySize:n}=ne(e);if(!T.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");try{const e=await Vi.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),n=await Vi.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),i=await Vi.wrapKey("raw",n,e,{name:"AES-KW"});return new Uint8Array(i)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;T.printDebugError("Browser did not support operation: "+e.message)}return Et(t).encrypt(r)}async function Zi(e,t,r){const{keySize:n}=ne(e);if(!T.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");let i;try{i=await Vi.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return T.printDebugError("Browser did not support operation: "+e.message),Et(t).decrypt(r)}try{const e=await Vi.unwrapKey("raw",r,i,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await Vi.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}var Yi=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:Zi,wrap:Wi});const Ji=T.getWebCrypto();async function $i(e,t,r,n,i){const s=R.read(R.webHash,e);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Ji.importKey("raw",t,"HKDF",!1,["deriveBits"]),o=await Ji.deriveBits({name:"HKDF",hash:s,salt:r,info:n},a,8*i);return new Uint8Array(o)}const Xi={x25519:T.encodeUTF8("OpenPGP X25519"),x448:T.encodeUTF8("OpenPGP X448")};async function es(e){switch(e){case R.publicKey.x25519:try{const e=T.getWebCrypto(),t=await e.generateKey("X25519",!0,["deriveKey","deriveBits"]),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);return{A:new Uint8Array(_(n.x)),k:_(r.d)}}catch(e){if("NotSupportedError"!==e.name)throw e;const t=Ir(32),{publicKey:r}=Vr.box.keyPair.fromSecretKey(t);return{A:r,k:t}}case R.publicKey.x448:{const e=await T.getNobleCurve(R.publicKey.x448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),k:t}}default:throw Error("Unsupported ECDH algorithm")}}function ts(e){switch(e){case R.publicKey.x25519:return 32;case R.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}}async function rs(e,t){switch(e){case R.publicKey.x25519:try{const r=T.getWebCrypto(),n=is(e,t),i=await r.generateKey("X25519",!0,["deriveKey","deriveBits"]),s=await r.importKey("jwk",n,"X25519",!1,[]),a=await r.deriveBits({name:"X25519",public:s},i.privateKey,8*ts(e)),o=await r.exportKey("jwk",i.publicKey);return{sharedSecret:new Uint8Array(a),ephemeralPublicKey:new Uint8Array(_(o.x))}}catch(r){if("NotSupportedError"!==r.name)throw r;const n=Ir(ts(e)),i=Vr.scalarMult(n,t),{publicKey:s}=Vr.box.keyPair.fromSecretKey(n);return{ephemeralPublicKey:s,sharedSecret:i}}case R.publicKey.x448:{const e=await T.getNobleCurve(R.publicKey.x448),r=e.utils.randomPrivateKey(),n=e.getSharedSecret(r,t);return{ephemeralPublicKey:e.getPublicKey(r),sharedSecret:n}}default:throw Error("Unsupported ECDH algorithm")}}async function ns(e,t,r,n){switch(e){case R.publicKey.x25519:try{const i=T.getWebCrypto(),s=function(e,t,r){if(e===R.publicKey.x25519){const n=is(e,t);return n.d=G(r),n}throw Error("Unsupported ECDH algorithm")}(e,r,n),a=is(e,t),o=await i.importKey("jwk",s,"X25519",!1,["deriveKey","deriveBits"]),c=await i.importKey("jwk",a,"X25519",!1,[]),h=await i.deriveBits({name:"X25519",public:c},o,8*ts(e));return new Uint8Array(h)}catch(e){if("NotSupportedError"!==e.name)throw e;return Vr.scalarMult(n,t)}case R.publicKey.x448:return(await T.getNobleCurve(R.publicKey.x448)).getSharedSecret(n,t);default:throw Error("Unsupported ECDH algorithm")}}function is(e,t){if(e===R.publicKey.x25519){return{kty:"OKP",crv:"X25519",x:G(t),ext:!0}}throw Error("Unsupported ECDH algorithm")}var ss=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i){const s=await ns(e,t,n,i),a=T.concatUint8Array([t,n,s]);switch(e){case R.publicKey.x25519:{const e=R.symmetric.aes128,{keySize:t}=ne(e);return Zi(e,await $i(R.hash.sha256,a,new Uint8Array,Xi.x25519,t),r)}case R.publicKey.x448:{const e=R.symmetric.aes256,{keySize:t}=ne(R.symmetric.aes256);return Zi(e,await $i(R.hash.sha512,a,new Uint8Array,Xi.x448,t),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(e,t,r){const{ephemeralPublicKey:n,sharedSecret:i}=await rs(e,r),s=T.concatUint8Array([n,r,i]);switch(e){case R.publicKey.x25519:{const e=R.symmetric.aes128,{keySize:r}=ne(e),i=await $i(R.hash.sha256,s,new Uint8Array,Xi.x25519,r);return{ephemeralPublicKey:n,wrappedKey:await Wi(e,i,t)}}case R.publicKey.x448:{const e=R.symmetric.aes256,{keySize:r}=ne(R.symmetric.aes256),i=await $i(R.hash.sha512,s,new Uint8Array,Xi.x448,r);return{ephemeralPublicKey:n,wrappedKey:await Wi(e,i,t)}}default:throw Error("Unsupported ECDH algorithm")}},generate:es,generateEphemeralEncryptionMaterial:rs,getPayloadSize:ts,recomputeSharedSecret:ns,validateParams:async function(e,t,r){switch(e){case R.publicKey.x25519:{const{publicKey:e}=Vr.box.keyPair.fromSecretKey(r);return T.equalsUint8Array(t,e)}case R.publicKey.x448:{const e=(await T.getNobleCurve(R.publicKey.x448)).getPublicKey(r);return T.equalsUint8Array(t,e)}default:return!1}}});const as=T.getWebCrypto(),os=T.getNodeCrypto(),cs={[R.curve.nistP256]:"P-256",[R.curve.nistP384]:"P-384",[R.curve.nistP521]:"P-521"},hs=os?os.getCurves():[],us=os?{[R.curve.secp256k1]:hs.includes("secp256k1")?"secp256k1":void 0,[R.curve.nistP256]:hs.includes("prime256v1")?"prime256v1":void 0,[R.curve.nistP384]:hs.includes("secp384r1")?"secp384r1":void 0,[R.curve.nistP521]:hs.includes("secp521r1")?"secp521r1":void 0,[R.curve.ed25519Legacy]:hs.includes("ED25519")?"ED25519":void 0,[R.curve.curve25519Legacy]:hs.includes("X25519")?"X25519":void 0,[R.curve.brainpoolP256r1]:hs.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[R.curve.brainpoolP384r1]:hs.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[R.curve.brainpoolP512r1]:hs.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},ls={[R.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:R.publicKey.ecdsa,hash:R.hash.sha256,cipher:R.symmetric.aes128,node:us[R.curve.nistP256],web:cs[R.curve.nistP256],payloadSize:32,sharedSize:256,wireFormatLeadingByte:4},[R.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:R.publicKey.ecdsa,hash:R.hash.sha384,cipher:R.symmetric.aes192,node:us[R.curve.nistP384],web:cs[R.curve.nistP384],payloadSize:48,sharedSize:384,wireFormatLeadingByte:4},[R.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:R.publicKey.ecdsa,hash:R.hash.sha512,cipher:R.symmetric.aes256,node:us[R.curve.nistP521],web:cs[R.curve.nistP521],payloadSize:66,sharedSize:528,wireFormatLeadingByte:4},[R.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:R.publicKey.ecdsa,hash:R.hash.sha256,cipher:R.symmetric.aes128,node:us[R.curve.secp256k1],payloadSize:32,wireFormatLeadingByte:4},[R.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:R.publicKey.eddsaLegacy,hash:R.hash.sha512,node:!1,payloadSize:32,wireFormatLeadingByte:64},[R.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:R.publicKey.ecdh,hash:R.hash.sha256,cipher:R.symmetric.aes128,node:!1,payloadSize:32,wireFormatLeadingByte:64},[R.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:R.publicKey.ecdsa,hash:R.hash.sha256,cipher:R.symmetric.aes128,node:us[R.curve.brainpoolP256r1],payloadSize:32,wireFormatLeadingByte:4},[R.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:R.publicKey.ecdsa,hash:R.hash.sha384,cipher:R.symmetric.aes192,node:us[R.curve.brainpoolP384r1],payloadSize:48,wireFormatLeadingByte:4},[R.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:R.publicKey.ecdsa,hash:R.hash.sha512,cipher:R.symmetric.aes256,node:us[R.curve.brainpoolP512r1],payloadSize:64,wireFormatLeadingByte:4}};class ys{constructor(e){try{this.name=e instanceof Fn?e.getName():R.write(R.curve,e)}catch(e){throw new qn("Unknown curve")}const t=ls[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.wireFormatLeadingByte=t.wireFormatLeadingByte,this.web&&T.getWebCrypto()?this.type="web":this.node&&T.getNodeCrypto()?this.type="node":this.name===R.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===R.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e,t){const r=await as.generateKey({name:"ECDSA",namedCurve:cs[e]},!0,["sign","verify"]),n=await as.exportKey("jwk",r.privateKey),i=await as.exportKey("jwk",r.publicKey);return{publicKey:ds(i,t),privateKey:_(n.d)}}(this.name,this.wireFormatLeadingByte)}catch(e){return T.printDebugError("Browser did not support generating ec key "+e.message),ps(this.name)}case"node":return async function(e){const t=os.createECDH(us[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const{k:e,A:t}=await es(R.publicKey.x25519),r=e.slice().reverse();r[0]=127&r[0]|64,r[31]&=248;return{publicKey:T.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:r}}case"ed25519Legacy":{const{seed:e,A:t}=await Ni(R.publicKey.ed25519);return{publicKey:T.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:e}}default:return ps(this.name)}}}async function fs(e,t,r,n){const i={[R.curve.nistP256]:!0,[R.curve.nistP384]:!0,[R.curve.nistP521]:!0,[R.curve.secp256k1]:!0,[R.curve.curve25519Legacy]:e===R.publicKey.ecdh,[R.curve.brainpoolP256r1]:!0,[R.curve.brainpoolP384r1]:!0,[R.curve.brainpoolP512r1]:!0},s=t.getName();if(!i[s])return!1;if(s===R.curve.curve25519Legacy){n=n.slice().reverse();const{publicKey:e}=Vr.box.keyPair.fromSecretKey(n);r=new Uint8Array(r);const t=new Uint8Array([64,...e]);return!!T.equalsUint8Array(t,r)}const a=(await T.getNobleCurve(R.publicKey.ecdsa,s)).getPublicKey(n,!1);return!!T.equalsUint8Array(a,r)}function gs(e,t){const{payloadSize:r,wireFormatLeadingByte:n,name:i}=e,s=i===R.curve.curve25519Legacy||i===R.curve.ed25519Legacy?r:2*r;if(t[0]!==n||t.length!==s+1)throw Error("Invalid point encoding")}async function ps(e){const t=await T.getNobleCurve(R.publicKey.ecdsa,e),r=t.utils.randomPrivateKey();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function ds(e,t){const r=_(e.x),n=_(e.y),i=new Uint8Array(r.length+n.length+1);return i[0]=t,i.set(r,1),i.set(n,r.length+1),i}function As(e,t,r){const n=e,i=r.slice(1,n+1),s=r.slice(n+1,2*n+1);return{kty:"EC",crv:t,x:G(i),y:G(s),ext:!0}}function ws(e,t,r,n){const i=As(e,t,r);return i.d=G(n),i}const ms=T.getWebCrypto(),bs=T.getNodeCrypto();async function Es(e,t,r,n,i,s){const a=new ys(e);if(gs(a,n),r&&!T.isStream(r)){const e={publicKey:n,privateKey:i};switch(a.type){case"web":try{return await async function(e,t,r,n){const i=e.payloadSize,s=ws(e.payloadSize,cs[e.name],n.publicKey,n.privateKey),a=await ms.importKey("jwk",s,{name:"ECDSA",namedCurve:cs[e.name],hash:{name:R.read(R.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await ms.sign({name:"ECDSA",namedCurve:cs[e.name],hash:{name:R.read(R.webHash,t)}},a,r));return{r:o.slice(0,i),s:o.slice(i,i<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;T.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,n){const i=T.nodeRequire("eckey-utils"),s=T.getNodeBuffer(),{privateKey:a}=i.generateDer({curveName:us[e.name],privateKey:s.from(n)}),o=bs.createSign(R.read(R.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=e.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,t,r,i)}}const o=(await T.getNobleCurve(R.publicKey.ecdsa,a.name)).sign(s,i,{lowS:!1});return{r:vr(o.r,"be",a.payloadSize),s:vr(o.s,"be",a.payloadSize)}}async function ks(e,t,r,n,i,s){const a=new ys(e);gs(a,i);const o=async()=>0===s[0]&&vs(a,r,s.subarray(1),i);if(n&&!T.isStream(n))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:n},i,s){const a=As(e.payloadSize,cs[e.name],s),o=await ms.importKey("jwk",a,{name:"ECDSA",namedCurve:cs[e.name],hash:{name:R.read(R.webHash,e.hash)}},!1,["verify"]),c=T.concatUint8Array([r,n]).buffer;return ms.verify({name:"ECDSA",namedCurve:cs[e.name],hash:{name:R.read(R.webHash,t)}},o,c,i)}(a,t,r,n,i);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;T.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:n},i,s){const a=T.nodeRequire("eckey-utils"),o=T.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:us[e.name],publicKey:o.from(s)}),h=bs.createVerify(R.read(R.hash,t));h.write(i),h.end();const u=T.concatUint8Array([r,n]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(e){return!1}}(a,t,r,n,i);return e||o()}}return await vs(a,r,s,i)||o()}async function vs(e,t,r,n){return(await T.getNobleCurve(R.publicKey.ecdsa,e.name)).verify(T.concatUint8Array([t.r,t.s]),r,n,{lowS:!1})}var Bs=/*#__PURE__*/Object.freeze({__proto__:null,sign:Es,validateParams:async function(e,t,r){const n=new ys(e);if(n.keyType!==R.publicKey.ecdsa)return!1;switch(n.type){case"web":case"node":{const n=Ir(8),i=R.hash.sha256,s=await be.digest(i,n);try{const a=await Es(e,i,n,t,r,s);return await ks(e,i,a,n,t,s)}catch(e){return!1}}default:return fs(R.publicKey.ecdsa,e,t,r)}},verify:ks});var Is=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,n,i,s){if(gs(new ys(e),n),be.getHashByteLength(t)<be.getHashByteLength(R.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const{RS:a}=await Hi(R.publicKey.ed25519,t,0,n.subarray(1),i,s);return{r:a.subarray(0,32),s:a.subarray(32)}},validateParams:async function(e,t,r){if(e.getName()!==R.curve.ed25519Legacy)return!1;const{publicKey:n}=Vr.sign.keyPair.fromSeed(r),i=new Uint8Array([64,...n]);return T.equalsUint8Array(t,i)},verify:async function(e,t,{r,s:n},i,s,a){if(gs(new ys(e),s),be.getHashByteLength(t)<be.getHashByteLength(R.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=T.concatUint8Array([r,n]);return Oi(R.publicKey.ed25519,t,{RS:o},0,s.subarray(1),a)}});function Ss(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}function Ks(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const n=e.subarray(t-r),i=new Uint8Array(r).fill(r);if(T.equalsUint8Array(n,i))return e.subarray(0,t-r)}}throw Error("Invalid padding")}var Cs=/*#__PURE__*/Object.freeze({__proto__:null,decode:Ks,encode:Ss});const Ps=T.getWebCrypto(),Us=T.getNodeCrypto();function Ds(e,t,r,n){return T.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),T.stringToUint8Array("Anonymous Sender "),r.replacementFingerprint||n])}async function xs(e,t,r,n,i=!1,s=!1){let a;if(i){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await be.digest(e,T.concatUint8Array([new Uint8Array([0,0,0,1]),t,n]))).subarray(0,r)}async function Qs(e,t){switch(e.type){case"curve25519Legacy":{const{sharedSecret:r,ephemeralPublicKey:n}=await rs(R.publicKey.x25519,t.subarray(1));return{publicKey:T.concatUint8Array([new Uint8Array([e.wireFormatLeadingByte]),n]),sharedKey:r}}case"web":if(e.web&&T.getWebCrypto())try{return await async function(e,t){const r=As(e.payloadSize,e.web,t);let n=Ps.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),i=Ps.importKey("jwk",r,{name:"ECDH",namedCurve:e.web},!1,[]);[n,i]=await Promise.all([n,i]);let s=Ps.deriveBits({name:"ECDH",namedCurve:e.web,public:i},n.privateKey,e.sharedSize),a=Ps.exportKey("jwk",n.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(ds(a,e.wireFormatLeadingByte));return{publicKey:c,sharedKey:o}}(e,t)}catch(r){return T.printDebugError(r),Ls(e,t)}break;case"node":return async function(e,t){const r=Us.createECDH(e.node);r.generateKeys();const n=new Uint8Array(r.computeSecret(t)),i=new Uint8Array(r.getPublicKey());return{publicKey:i,sharedKey:n}}(e,t);default:return Ls(e,t)}}async function Rs(e,t,r,n){if(n.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(n,e.payloadSize-n.length),n=t}switch(e.type){case"curve25519Legacy":{const e=n.slice().reverse();return{secretKey:e,sharedKey:await ns(R.publicKey.x25519,t.subarray(1),r.subarray(1),e)}}case"web":if(e.web&&T.getWebCrypto())try{return await async function(e,t,r,n){const i=ws(e.payloadSize,e.web,r,n);let s=Ps.importKey("jwk",i,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const a=As(e.payloadSize,e.web,t);let o=Ps.importKey("jwk",a,{name:"ECDH",namedCurve:e.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=Ps.deriveBits({name:"ECDH",namedCurve:e.web,public:o},s,e.sharedSize),h=Ps.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:_(h.d),sharedKey:u}}(e,t,r,n)}catch(r){return T.printDebugError(r),Ms(e,t,n)}break;case"node":return async function(e,t,r){const n=Us.createECDH(e.node);n.setPrivateKey(r);const i=new Uint8Array(n.computeSecret(t));return{secretKey:new Uint8Array(n.getPrivateKey()),sharedKey:i}}(e,t,n);default:return Ms(e,t,n)}}async function Ms(e,t,r){return{secretKey:r,sharedKey:(await T.getNobleCurve(R.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function Ls(e,t){const r=await T.getNobleCurve(R.publicKey.ecdh,e.name),{publicKey:n,privateKey:i}=await e.genKeyPair();return{publicKey:n,sharedKey:r.getSharedSecret(i,t).subarray(1)}}var Ts=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i,s,a){const o=new ys(e);gs(o,i),gs(o,r);const{sharedKey:c}=await Rs(o,r,i,s),h=Ds(R.publicKey.ecdh,e,t,a),{keySize:u}=ne(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await xs(t.hash,c,u,h,1===e,2===e);return Ks(await Zi(t.cipher,r,n))}catch(e){l=e}throw l},encrypt:async function(e,t,r,n,i){const s=Ss(r),a=new ys(e);gs(a,n);const{publicKey:o,sharedKey:c}=await Qs(a,n),h=Ds(R.publicKey.ecdh,e,t,i),{keySize:u}=ne(t.cipher),l=await xs(t.hash,c,u,h);return{publicKey:o,wrappedKey:await Wi(t.cipher,l,s)}},validateParams:async function(e,t,r){return fs(R.publicKey.ecdh,e,t,r)}}),Fs=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:ys,ecdh:Ts,ecdhX:ss,ecdsa:Bs,eddsa:qi,eddsaLegacy:Is,generate:async function(e){const t=new ys(e),{oid:r,hash:n,cipher:i}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:T.leftPad(s.privateKey,t.payloadSize),hash:n,cipher:i}},getPreferredHashAlgo:function(e){return ls[e.getName()].hash}});const Ns=BigInt(0),Hs=BigInt(1);var Os=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,n,i,s){const a=BigInt(0);let o,c,h,u;n=gr(n),i=gr(i),r=gr(r),s=gr(s),r=pr(r,n),s=pr(s,i);const l=pr(gr(t.subarray(0,kr(i))),i);for(;;){if(o=Sr(Hs,i),c=pr(dr(r,o,n),i),c===a)continue;const e=pr(s*c,i);if(u=pr(l+e,i),h=pr(wr(o,i)*u,i),h!==a)break}return{r:vr(c,"be",kr(n)),s:vr(h,"be",kr(n))}},validateParams:async function(e,t,r,n,i){if(e=gr(e),t=gr(t),r=gr(r),n=gr(n),r<=Hs||r>=e)return!1;if(pr(e-Hs,t)!==Ns)return!1;if(dr(r,t,e)!==Hs)return!1;const s=BigInt(Er(t));if(s<BigInt(150)||!Ur(t,null,32))return!1;i=gr(i);const a=BigInt(2);return n===dr(r,t*Sr(a<<s-Hs,a<<s)+i,e)},verify:async function(e,t,r,n,i,s,a,o){if(t=gr(t),r=gr(r),s=gr(s),a=gr(a),i=gr(i),o=gr(o),t<=Ns||t>=a||r<=Ns||r>=a)return T.printDebug("invalid DSA Signature"),!1;const c=pr(gr(n.subarray(0,kr(a))),a),h=wr(r,a);if(h===Ns)return T.printDebug("invalid DSA Signature"),!1;i=pr(i,s),o=pr(o,s);const u=pr(c*h,a),l=pr(t*h,a);return pr(pr(dr(i,u,s)*dr(o,l,s),s),a)===t}});const zs=new Set([R.hash.sha1,R.hash.sha256,R.hash.sha512]),_s=T.getWebCrypto(),Gs=T.getNodeCrypto();var js={rsa:_r,elgamal:jr,elliptic:Fs,dsa:Os,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){if(!zs.has(e))throw Error("Unsupported hash algorithm.");const t=R.read(R.webHash,e),r=_s||Gs.webcrypto.subtle,n=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),i=await r.exportKey("raw",n);return new Uint8Array(i)},sign:async function(e,t,r){if(!zs.has(e))throw Error("Unsupported hash algorithm.");const n=R.read(R.webHash,e),i=_s||Gs.webcrypto.subtle,s=await i.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["sign"]),a=await i.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(e,t,r,n){if(!zs.has(e))throw Error("Unsupported hash algorithm.");const i=R.read(R.webHash,e),s=_s||Gs.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["verify"]);return s.verify("HMAC",a,r,n)}})};class qs{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!T.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return T.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}var Vs=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(e,t){let r=0;switch(e){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:case R.publicKey.rsaSign:{const e=T.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case R.publicKey.dsa:case R.publicKey.ecdsa:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const n=T.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case R.publicKey.eddsaLegacy:{let e=T.readMPI(t.subarray(r));r+=e.length+2,e=T.leftPad(e,32);let n=T.readMPI(t.subarray(r));return r+=n.length+2,n=T.leftPad(n,32),{read:r,signatureParams:{r:e,s:n}}}case R.publicKey.ed25519:case R.publicKey.ed448:{const n=2*js.elliptic.eddsa.getPayloadSize(e),i=T.readExactSubarray(t,r,r+n);return r+=i.length,{read:r,signatureParams:{RS:i}}}case R.publicKey.hmac:{const e=new qs;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}default:throw new qn("Unknown signature algorithm.")}},sign:async function(e,t,r,n,i,s){if(!r||!n)throw Error("Missing key parameters");switch(e){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:case R.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:h,u}=n;return{s:await js.rsa.sign(t,i,e,a,o,c,h,u,s)}}case R.publicKey.dsa:{const{g:e,p:i,q:a}=r,{x:o}=n;return js.dsa.sign(t,s,e,i,a,o)}case R.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case R.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=n;return js.elliptic.ecdsa.sign(e,t,i,a,o,s)}case R.publicKey.eddsaLegacy:{const{oid:e,Q:a}=r,{seed:o}=n;return js.elliptic.eddsaLegacy.sign(e,t,i,a,o,s)}case R.publicKey.ed25519:case R.publicKey.ed448:{const{A:a}=r,{seed:o}=n;return js.elliptic.eddsa.sign(e,t,i,a,o,s)}case R.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=n,i=await js.hmac.sign(e.getValue(),t,s);return{mac:new qs(i)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(e,t,r,n,i,s,a){switch(e){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:case R.publicKey.rsaSign:{const{n:e,e:i}=n,o=T.leftPad(r.s,e.length);return js.rsa.verify(t,s,o,e,i,a)}case R.publicKey.dsa:{const{g:e,p:i,q:s,y:o}=n,{r:c,s:h}=r;return js.dsa.verify(t,c,h,a,e,i,s,o)}case R.publicKey.ecdsa:{const{oid:e,Q:i}=n,o=new js.elliptic.CurveWithOID(e).payloadSize,c=T.leftPad(r.r,o),h=T.leftPad(r.s,o);return js.elliptic.ecdsa.verify(e,t,{r:c,s:h},s,i,a)}case R.publicKey.eddsaLegacy:{const{oid:e,Q:i}=n;return js.elliptic.eddsaLegacy.verify(e,t,r,s,i,a)}case R.publicKey.ed25519:case R.publicKey.ed448:{const{A:i}=n;return js.elliptic.eddsa.verify(e,t,r,s,i,a)}case R.publicKey.hmac:{if(!i)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=n,{keyMaterial:t}=i;return js.hmac.verify(e.getValue(),t,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class Ws{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return T.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class Zs{constructor(e){if(e){const{version:t,hash:r,cipher:n,replacementFingerprint:i}=e;this.version=t||1,this.hash=r,this.cipher=n,this.replacementFingerprint=i}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new qn("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const n=t-r+1;this.replacementFingerprint=e.slice(r,r+n),r+=n}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return T.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const Ys=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=R.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return R.read(e,this.data)}getValue(){return this.data}},Js=Ys(R.aead),$s=Ys(R.symmetric),Xs=Ys(R.hash);class ea{static fromObject({wrappedKey:e,algorithm:t}){const r=new ea;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=T.readExactSubarray(e,t,t+r),t+=r}write(){return T.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function ta(e,t){const r=Ir(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await be.sha256(r)}}}function ra(e){const{keySize:t}=ne(e);return Ir(t)}function na(e){const t=R.read(R.aead,e);return lr[t]}function ia(e){try{e.getName()}catch(e){throw new qn("Unknown curve OID")}}function sa(e,t){switch(e){case R.publicKey.ecdsa:case R.publicKey.ecdh:case R.publicKey.eddsaLegacy:return new js.elliptic.CurveWithOID(t).payloadSize;case R.publicKey.ed25519:case R.publicKey.ed448:return js.elliptic.eddsa.getPayloadSize(e);case R.publicKey.x25519:case R.publicKey.x448:return js.elliptic.ecdhX.getPayloadSize(e);default:throw Error("Unknown elliptic algo")}}var aa=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(e,t,r,n){switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:return js.rsa.generate(t,65537).then((({n:e,e:t,d:r,p:n,q:i,u:s})=>({privateParams:{d:r,p:n,q:i,u:s},publicParams:{n:e,e:t}})));case R.publicKey.ecdsa:return js.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new Fn(e),Q:t}})));case R.publicKey.eddsaLegacy:return js.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new Fn(e),Q:t}})));case R.publicKey.ecdh:return js.elliptic.generate(r).then((({oid:e,Q:t,secret:r,hash:n,cipher:i})=>({privateParams:{d:r},publicParams:{oid:new Fn(e),Q:t,kdfParams:new Zs({hash:n,cipher:i})}})));case R.publicKey.ed25519:case R.publicKey.ed448:return js.elliptic.eddsa.generate(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case R.publicKey.x25519:case R.publicKey.x448:return js.elliptic.ecdhX.generate(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case R.publicKey.hmac:return ta(await js.hmac.generate(n),new Xs(n));case R.publicKey.aead:return ta(ra(n),new $s(n));case R.publicKey.dsa:case R.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:ra,getAEADMode:na,getCipherParams:ne,getCurvePayloadSize:sa,getPreferredCurveHashAlgo:function(e,t){switch(e){case R.publicKey.ecdsa:case R.publicKey.eddsaLegacy:return js.elliptic.getPreferredHashAlgo(t);case R.publicKey.ed25519:case R.publicKey.ed448:return js.elliptic.eddsa.getPreferredHashAlgo(e);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(e){const{blockSize:t}=ne(e),r=await Ir(t),n=new Uint8Array([r[r.length-2],r[r.length-1]]);return T.concat([r,n])},parseEncSessionKeyParams:function(e,t){let r=0;switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:return{c:T.readMPI(t.subarray(r))};case R.publicKey.elgamal:{const e=T.readMPI(t.subarray(r));r+=e.length+2;return{c1:e,c2:T.readMPI(t.subarray(r))}}case R.publicKey.ecdh:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const n=new Ws;return n.read(t.subarray(r)),{V:e,C:n}}case R.publicKey.x25519:case R.publicKey.x448:{const n=sa(e),i=T.readExactSubarray(t,r,r+n);r+=i.length;const s=new ea;return s.read(t.subarray(r)),{ephemeralPublicKey:i,C:s}}case R.publicKey.aead:{const e=new Js;r+=e.read(t.subarray(r));const{ivLength:n}=na(e.getValue()),i=t.subarray(r,r+n);r+=n;const s=new qs;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:i,c:s}}default:throw new qn("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(e,t,r){let n=0;switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:{const e=T.readMPI(t.subarray(n));n+=e.length+2;const r=T.readMPI(t.subarray(n));n+=r.length+2;const i=T.readMPI(t.subarray(n));n+=i.length+2;const s=T.readMPI(t.subarray(n));return n+=s.length+2,{read:n,privateParams:{d:e,p:r,q:i,u:s}}}case R.publicKey.dsa:case R.publicKey.elgamal:{const e=T.readMPI(t.subarray(n));return n+=e.length+2,{read:n,privateParams:{x:e}}}case R.publicKey.ecdsa:case R.publicKey.ecdh:{const i=sa(e,r.oid);let s=T.readMPI(t.subarray(n));return n+=s.length+2,s=T.leftPad(s,i),{read:n,privateParams:{d:s}}}case R.publicKey.eddsaLegacy:{const i=sa(e,r.oid);if(r.oid.getName()!==R.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let s=T.readMPI(t.subarray(n));return n+=s.length+2,s=T.leftPad(s,i),{read:n,privateParams:{seed:s}}}case R.publicKey.ed25519:case R.publicKey.ed448:{const r=sa(e),i=T.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{seed:i}}}case R.publicKey.x25519:case R.publicKey.x448:{const r=sa(e),i=T.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{k:i}}}case R.publicKey.hmac:{const{cipher:e}=r,i=be.getHashByteLength(e.getValue()),s=t.subarray(n,n+32);n+=32;const a=t.subarray(n,n+i);return n+=i,{read:n,privateParams:{hashSeed:s,keyMaterial:a}}}case R.publicKey.aead:{const{cipher:e}=r,i=t.subarray(n,n+32);n+=32;const{keySize:s}=ne(e.getValue()),a=t.subarray(n,n+s);return n+=s,{read:n,privateParams:{hashSeed:i,keyMaterial:a}}}default:throw new qn("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(e,t){let r=0;switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const n=T.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{n:e,e:n}}}case R.publicKey.dsa:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const n=T.readMPI(t.subarray(r));r+=n.length+2;const i=T.readMPI(t.subarray(r));r+=i.length+2;const s=T.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:n,g:i,y:s}}}case R.publicKey.elgamal:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const n=T.readMPI(t.subarray(r));r+=n.length+2;const i=T.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{p:e,g:n,y:i}}}case R.publicKey.ecdsa:{const e=new Fn;r+=e.read(t),ia(e);const n=T.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{oid:e,Q:n}}}case R.publicKey.eddsaLegacy:{const e=new Fn;if(r+=e.read(t),ia(e),e.getName()!==R.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let n=T.readMPI(t.subarray(r));return r+=n.length+2,n=T.leftPad(n,33),{read:r,publicParams:{oid:e,Q:n}}}case R.publicKey.ecdh:{const e=new Fn;r+=e.read(t),ia(e);const n=T.readMPI(t.subarray(r));r+=n.length+2;const i=new Zs;return r+=i.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:n,kdfParams:i}}}case R.publicKey.ed25519:case R.publicKey.ed448:case R.publicKey.x25519:case R.publicKey.x448:{const n=T.readExactSubarray(t,r,r+sa(e));return r+=n.length,{read:r,publicParams:{A:n}}}case R.publicKey.hmac:case R.publicKey.aead:{const e=new $s;r+=e.read(t);const n=be.getHashByteLength(R.hash.sha256),i=t.subarray(r,r+n);return r+=n,{read:r,publicParams:{cipher:e,digest:i}}}default:throw new qn("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(e,t,r,n,i,s){switch(e){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:{const{c:e}=n,{n:i,e:a}=t,{d:o,p:c,q:h,u}=r;return js.rsa.decrypt(e,i,a,o,c,h,u,s)}case R.publicKey.elgamal:{const{c1:e,c2:i}=n,a=t.p,o=r.x;return js.elgamal.decrypt(e,i,a,o,s)}case R.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:h}=n;return js.elliptic.ecdh.decrypt(e,a,c,h.data,s,o,i)}case R.publicKey.x25519:case R.publicKey.x448:{const{A:i}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=n;if(null!==o.algorithm&&!T.isAES(o.algorithm))throw Error("AES session key expected");return js.elliptic.ecdhX.decrypt(e,a,o.wrappedKey,i,s)}case R.publicKey.aead:{const{cipher:e}=t,i=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=n,h=na(a.getValue());return(await h(i,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(e,t,r,n,i,s){switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await js.rsa.encrypt(i,e,t)}}case R.publicKey.elgamal:{const{p:e,g:t,y:n}=r;return js.elgamal.encrypt(i,e,t,n)}case R.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:n}=r,{publicKey:a,wrappedKey:o}=await js.elliptic.ecdh.encrypt(e,n,i,t,s);return{V:a,C:new Ws(o)}}case R.publicKey.x25519:case R.publicKey.x448:{if(t&&!T.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:n}=r,{ephemeralPublicKey:s,wrappedKey:a}=await js.elliptic.ecdhX.encrypt(e,i,n);return{ephemeralPublicKey:s,C:ea.fromObject({algorithm:t,wrappedKey:a})}}case R.publicKey.aead:{if(!n)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=n,a=M.preferredAEADAlgorithm,o=na(M.preferredAEADAlgorithm),{ivLength:c}=o,h=Ir(c),u=await o(t,s),l=await u.encrypt(i,h,new Uint8Array);return{aeadMode:new Js(a),iv:h,c:new qs(l)}}default:return[]}},serializeParams:function(e,t){const r=new Set([R.publicKey.ed25519,R.publicKey.x25519,R.publicKey.ed448,R.publicKey.x448,R.publicKey.aead,R.publicKey.hmac]),n=Object.keys(t).map((n=>{const i=t[n];return T.isUint8Array(i)?r.has(e)?i:T.uint8ArrayToMPI(i):i.write()}));return T.concatUint8Array(n)},validateParams:async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:{const{n:e,e:n}=t,{d:i,p:s,q:a,u:o}=r;return js.rsa.validateParams(e,n,i,s,a,o)}case R.publicKey.dsa:{const{p:e,q:n,g:i,y:s}=t,{x:a}=r;return js.dsa.validateParams(e,n,i,s,a)}case R.publicKey.elgamal:{const{p:e,g:n,y:i}=t,{x:s}=r;return js.elgamal.validateParams(e,n,i,s)}case R.publicKey.ecdsa:case R.publicKey.ecdh:{const n=js.elliptic[R.read(R.publicKey,e)],{oid:i,Q:s}=t,{d:a}=r;return n.validateParams(i,s,a)}case R.publicKey.eddsaLegacy:{const{Q:e,oid:n}=t,{seed:i}=r;return js.elliptic.eddsaLegacy.validateParams(n,e,i)}case R.publicKey.ed25519:case R.publicKey.ed448:{const{A:n}=t,{seed:i}=r;return js.elliptic.eddsa.validateParams(e,n,i)}case R.publicKey.x25519:case R.publicKey.x448:{const{A:n}=t,{k:i}=r;return js.elliptic.ecdhX.validateParams(e,n,i)}case R.publicKey.hmac:{const{cipher:e,digest:n}=t,{hashSeed:i,keyMaterial:s}=r;return be.getHashByteLength(e.getValue())===s.length&&T.equalsUint8Array(n,await be.sha256(i))}case R.publicKey.aead:{const{cipher:e,digest:n}=t,{hashSeed:i,keyMaterial:s}=r,{keySize:a}=ne(e.getValue());return a===s.length&&T.equalsUint8Array(n,await be.sha256(i))}default:throw Error("Unknown public key algorithm.")}}});const oa={cipher:ie,hash:be,mode:lr,publicKey:js,signature:Vs,random:Kr,pkcs1:Lr,pkcs5:Cs,aesKW:Yi};Object.assign(oa,aa);class ca extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ca),this.name="Argon2OutOfMemoryError"}}let ha,ua,la=2<<19;class ya{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return la}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){la=e}static reloadWasmModule(){ha&&(ua=ha(),ua.catch((()=>{})))}constructor(e=M){const{passes:t,parallelism:r,memoryExponent:n}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=n}generateSalt(){this.salt=oa.random.getRandomBytes(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([R.write(R.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return T.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{ha=ha||(await Promise.resolve().then((function(){return Df}))).default,ua=ua||ha();const n=await ua,i=n({version:19,type:2,password:T.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>ya.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&ya.reloadWasmModule(),i}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new ca("Could not allocate required memory for Argon2"):e}}}class fa{constructor(e,t=M){this.algorithm=R.hash.sha256,this.type=R.read(R.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=oa.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==T.uint8ArrayToString(e.subarray(t,t+3)))throw new qn("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new qn("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new qn("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...T.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([R.write(R.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return T.concatUint8Array(e)}async produceKey(e,t){e=T.encodeUTF8(e);const r=[];let n=0,i=0;for(;n<t;){let t;switch(this.type){case"simple":t=T.concatUint8Array([new Uint8Array(i),e]);break;case"salted":t=T.concatUint8Array([new Uint8Array(i),this.salt,e]);break;case"iterated":{const r=T.concatUint8Array([this.salt,e]);let n=r.length;const s=Math.max(this.getCount(),n);t=new Uint8Array(i+s),t.set(r,i);for(let e=i+n;e<s;e+=n,n*=2)t.copyWithin(e,i,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await oa.hash.digest(this.algorithm,t);r.push(s),n+=s.length,i++}return T.concatUint8Array(r).subarray(0,t)}}const ga=new Set([R.s2k.argon2,R.s2k.iterated]);function pa(e,t=M){switch(e){case R.s2k.argon2:return new ya(t);case R.s2k.iterated:case R.s2k.gnu:case R.s2k.salted:case R.s2k.simple:return new fa(e,t);default:throw new qn("Unsupported S2K type")}}function da(e){const{s2kType:t}=e;if(!ga.has(t))throw Error("The provided `config.s2kType` value is not allowed");return pa(t,e)}var Aa=Uint8Array,wa=Uint16Array,ma=Uint32Array,ba=new Aa([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Ea=new Aa([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),ka=new Aa([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),va=function(e,t){for(var r=new wa(31),n=0;n<31;++n)r[n]=t+=1<<e[n-1];var i=new ma(r[30]);for(n=1;n<30;++n)for(var s=r[n];s<r[n+1];++s)i[s]=s-r[n]<<5|n;return[r,i]},Ba=va(ba,2),Ia=Ba[0],Sa=Ba[1];Ia[28]=258,Sa[258]=28;for(var Ka=va(Ea,0),Ca=Ka[0],Pa=Ka[1],Ua=new wa(32768),Da=0;Da<32768;++Da){var xa=(43690&Da)>>>1|(21845&Da)<<1;xa=(61680&(xa=(52428&xa)>>>2|(13107&xa)<<2))>>>4|(3855&xa)<<4,Ua[Da]=((65280&xa)>>>8|(255&xa)<<8)>>>1}var Qa=function(e,t,r){for(var n=e.length,i=0,s=new wa(t);i<n;++i)e[i]&&++s[e[i]-1];var a,o=new wa(t);for(i=0;i<t;++i)o[i]=o[i-1]+s[i-1]<<1;if(r){a=new wa(1<<t);var c=15-t;for(i=0;i<n;++i)if(e[i])for(var h=i<<4|e[i],u=t-e[i],l=o[e[i]-1]++<<u,y=l|(1<<u)-1;l<=y;++l)a[Ua[l]>>>c]=h}else for(a=new wa(n),i=0;i<n;++i)e[i]&&(a[i]=Ua[o[e[i]-1]++]>>>15-e[i]);return a},Ra=new Aa(288);for(Da=0;Da<144;++Da)Ra[Da]=8;for(Da=144;Da<256;++Da)Ra[Da]=9;for(Da=256;Da<280;++Da)Ra[Da]=7;for(Da=280;Da<288;++Da)Ra[Da]=8;var Ma=new Aa(32);for(Da=0;Da<32;++Da)Ma[Da]=5;var La=/*#__PURE__*/Qa(Ra,9,0),Ta=/*#__PURE__*/Qa(Ra,9,1),Fa=/*#__PURE__*/Qa(Ma,5,0),Na=/*#__PURE__*/Qa(Ma,5,1),Ha=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},Oa=function(e,t,r){var n=t/8|0;return(e[n]|e[n+1]<<8)>>(7&t)&r},za=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},_a=function(e){return(e+7)/8|0},Ga=function(e,t,r){(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length);var n=new(2==e.BYTES_PER_ELEMENT?wa:4==e.BYTES_PER_ELEMENT?ma:Aa)(r-t);return n.set(e.subarray(t,r)),n},ja=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],qa=function(e,t,r){var n=Error(t||ja[e]);if(n.code=e,Error.captureStackTrace&&Error.captureStackTrace(n,qa),!r)throw n;return n},Va=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>>8},Wa=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>>8,e[n+2]|=r>>>16},Za=function(e,t){for(var r=[],n=0;n<e.length;++n)e[n]&&r.push({s:n,f:e[n]});var i=r.length,s=r.slice();if(!i)return[ro,0];if(1==i){var a=new Aa(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=i-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var y=s[0].s;for(n=1;n<i;++n)s[n].s>y&&(y=s[n].s);var f=new wa(y+1),g=Ya(r[u-1],f,0);if(g>t){n=0;var p=0,d=g-t,A=1<<d;for(s.sort((function(e,t){return f[t.s]-f[e.s]||e.f-t.f}));n<i;++n){var w=s[n].s;if(!(f[w]>t))break;p+=A-(1<<g-f[w]),f[w]=t}for(p>>>=d;p>0;){var m=s[n].s;f[m]<t?p-=1<<t-f[m]++-1:++n}for(;n>=0&&p;--n){var b=s[n].s;f[b]==t&&(--f[b],++p)}g=t}return[new Aa(f),g]},Ya=function(e,t,r){return-1==e.s?Math.max(Ya(e.l,t,r+1),Ya(e.r,t,r+1)):t[e.s]=r},Ja=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new wa(++t),n=0,i=e[0],s=1,a=function(e){r[n++]=e},o=1;o<=t;++o)if(e[o]==i&&o!=t)++s;else{if(!i&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(i),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(i);s=1,i=e[o]}return[r.subarray(0,n),t]},$a=function(e,t){for(var r=0,n=0;n<t.length;++n)r+=e[n]*t[n];return r},Xa=function(e,t,r){var n=r.length,i=_a(t+2);e[i]=255&n,e[i+1]=n>>>8,e[i+2]=255^e[i],e[i+3]=255^e[i+1];for(var s=0;s<n;++s)e[i+s+4]=r[s];return 8*(i+4+n)},eo=function(e,t,r,n,i,s,a,o,c,h,u){Va(t,u++,r),++i[256];for(var l=Za(i,15),y=l[0],f=l[1],g=Za(s,15),p=g[0],d=g[1],A=Ja(y),w=A[0],m=A[1],b=Ja(p),E=b[0],k=b[1],v=new wa(19),B=0;B<w.length;++B)v[31&w[B]]++;for(B=0;B<E.length;++B)v[31&E[B]]++;for(var I=Za(v,7),S=I[0],K=I[1],C=19;C>4&&!S[ka[C-1]];--C);var P,U,D,x,Q=h+5<<3,R=$a(i,Ra)+$a(s,Ma)+a,M=$a(i,y)+$a(s,p)+a+14+3*C+$a(v,S)+(2*v[16]+3*v[17]+7*v[18]);if(Q<=R&&Q<=M)return Xa(t,u,e.subarray(c,c+h));if(Va(t,u,1+(M<R)),u+=2,M<R){P=Qa(y,f,0),U=y,D=Qa(p,d,0),x=p;var L=Qa(S,K,0);Va(t,u,m-257),Va(t,u+5,k-1),Va(t,u+10,C-4),u+=14;for(B=0;B<C;++B)Va(t,u+3*B,S[ka[B]]);u+=3*C;for(var T=[w,E],F=0;F<2;++F){var N=T[F];for(B=0;B<N.length;++B){var H=31&N[B];Va(t,u,L[H]),u+=S[H],H>15&&(Va(t,u,N[B]>>>5&127),u+=N[B]>>>12)}}}else P=La,U=Ra,D=Fa,x=Ma;for(B=0;B<o;++B)if(n[B]>255){H=n[B]>>>18&31;Wa(t,u,P[H+257]),u+=U[H+257],H>7&&(Va(t,u,n[B]>>>23&31),u+=ba[H]);var O=31&n[B];Wa(t,u,D[O]),u+=x[O],O>3&&(Wa(t,u,n[B]>>>5&8191),u+=Ea[O])}else Wa(t,u,P[n[B]]),u+=U[n[B]];return Wa(t,u,P[256]),u+U[256]},to=/*#__PURE__*/new ma([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),ro=/*#__PURE__*/new Aa(0),no=function(e,t,r,n,i){return function(e,t,r,n,i,s){var a=e.length,o=new Aa(n+a+5*(1+Math.ceil(a/7e3))+i),c=o.subarray(n,o.length-i),h=0;if(!t||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=Xa(c,h+1,e.subarray(u,l))}else{for(var y=to[t-1],f=y>>>13,g=8191&y,p=(1<<r)-1,d=new wa(32768),A=new wa(p+1),w=Math.ceil(r/3),m=2*w,b=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<m)&p},E=new ma(25e3),k=new wa(288),v=new wa(32),B=0,I=0,S=(u=0,0),K=0,C=0;u<a;++u){var P=b(u),U=32767&u,D=A[P];if(d[U]=D,A[P]=U,K<=u){var x=a-u;if((B>7e3||S>24576)&&x>423){h=eo(e,c,0,E,k,v,I,S,C,u-C,h),S=B=I=0,C=u;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)v[Q]=0}var R=2,M=0,L=g,T=U-D&32767;if(x>2&&P==b(u-T))for(var F=Math.min(f,x)-1,N=Math.min(32767,u),H=Math.min(258,x);T<=N&&--L&&U!=D;){if(e[u+R]==e[u+R-T]){for(var O=0;O<H&&e[u+O]==e[u+O-T];++O);if(O>R){if(R=O,M=T,O>F)break;var z=Math.min(T,O-2),_=0;for(Q=0;Q<z;++Q){var G=u-T+Q+32768&32767,j=G-d[G]+32768&32767;j>_&&(_=j,D=G)}}}T+=(U=D)-(D=d[U])+32768&32767}if(M){E[S++]=268435456|Sa[R]<<18|Pa[M];var q=31&Sa[R],V=31&Pa[M];I+=ba[q]+Ea[V],++k[257+q],++v[V],K=u+R,++B}else E[S++]=e[u],++k[e[u]]}}h=eo(e,c,s,E,k,v,I,S,C,u-C,h),!s&&7&h&&(h=Xa(c,h+1,ro))}return Ga(o,0,n+_a(h)+i)}(e,null==t.level?6:t.level,null==t.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):12+t.mem,r,n,!i)},io=/*#__PURE__*/function(){function e(e,t){t||"function"!=typeof e||(t=e,e={}),this.ondata=t,this.o=e||{}}return e.prototype.p=function(e,t){this.ondata(no(e,this.o,0,0,!t),t)},e.prototype.push=function(e,t){this.ondata||qa(5),this.d&&qa(4),this.d=t,this.p(e,t||!1)},e}(),so=/*#__PURE__*/function(){function e(e){this.s={},this.p=new Aa(0),this.ondata=e}return e.prototype.e=function(e){this.ondata||qa(5),this.d&&qa(4);var t=this.p.length,r=new Aa(t+e.length);r.set(this.p),r.set(e,t),this.p=r},e.prototype.c=function(e){this.d=this.s.i=e||!1;var t=this.s.b,r=function(e,t,r){var n=e.length;if(!n||r&&r.f&&!r.l)return t||new Aa(0);var i=!t||r,s=!r||r.i;r||(r={}),t||(t=new Aa(3*n));var a=function(e){var r=t.length;if(e>r){var n=new Aa(Math.max(2*r,e));n.set(t),t=n}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,y=r.m,f=r.n,g=8*n;do{if(!u){o=Oa(e,c,1);var p=Oa(e,c+1,3);if(c+=3,!p){var d=e[(K=_a(c)+4)-4]|e[K-3]<<8,A=K+d;if(A>n){s&&qa(0);break}i&&a(h+d),t.set(e.subarray(K,A),h),r.b=h+=d,r.p=c=8*A,r.f=o;continue}if(1==p)u=Ta,l=Na,y=9,f=5;else if(2==p){var w=Oa(e,c,31)+257,m=Oa(e,c+10,15)+4,b=w+Oa(e,c+5,31)+1;c+=14;for(var E=new Aa(b),k=new Aa(19),v=0;v<m;++v)k[ka[v]]=Oa(e,c+3*v,7);c+=3*m;var B=Ha(k),I=(1<<B)-1,S=Qa(k,B,1);for(v=0;v<b;){var K,C=S[Oa(e,c,I)];if(c+=15&C,(K=C>>>4)<16)E[v++]=K;else{var P=0,U=0;for(16==K?(U=3+Oa(e,c,3),c+=2,P=E[v-1]):17==K?(U=3+Oa(e,c,7),c+=3):18==K&&(U=11+Oa(e,c,127),c+=7);U--;)E[v++]=P}}var D=E.subarray(0,w),x=E.subarray(w);y=Ha(D),f=Ha(x),u=Qa(D,y,1),l=Qa(x,f,1)}else qa(1);if(c>g){s&&qa(0);break}}i&&a(h+131072);for(var Q=(1<<y)-1,R=(1<<f)-1,M=c;;M=c){var L=(P=u[za(e,c)&Q])>>>4;if((c+=15&P)>g){s&&qa(0);break}if(P||qa(2),L<256)t[h++]=L;else{if(256==L){M=c,u=null;break}var T=L-254;if(L>264){var F=ba[v=L-257];T=Oa(e,c,(1<<F)-1)+Ia[v],c+=F}var N=l[za(e,c)&R],H=N>>>4;if(N||qa(3),c+=15&N,x=Ca[H],H>3&&(F=Ea[H],x+=za(e,c)&(1<<F)-1,c+=F),c>g){s&&qa(0);break}i&&a(h+131072);for(var O=h+T;h<O;h+=4)t[h]=t[h-x],t[h+1]=t[h+1-x],t[h+2]=t[h+2-x],t[h+3]=t[h+3-x];h=O}}r.l=u,r.p=M,r.b=h,r.f=o,u&&(o=1,r.m=y,r.d=l,r.n=f)}while(!o);return h==t.length?t:Ga(t,0,h)}(this.p,this.o,this.s);this.ondata(Ga(r,t,this.s.b),this.d),this.o=Ga(r,this.s.b-32768),this.s.b=this.o.length,this.p=Ga(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),ao=/*#__PURE__*/function(){function e(e,t){var r,n;this.c=(r=1,n=0,{p:function(e){for(var t=r,i=n,s=0|e.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)i+=t+=e[a];t=(65535&t)+15*(t>>16),i=(65535&i)+15*(i>>16)}r=t,n=i},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(n%=65521))<<8|n>>>8}}),this.v=1,io.call(this,e,t)}return e.prototype.push=function(e,t){io.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){this.c.p(e);var r=no(e,this.o,this.v&&2,t&&4,!t);this.v&&(function(e,t){var r=t.level,n=0==r?0:r<6?1:9==r?3:2;e[0]=120,e[1]=n<<6|(n?32-2*n:1)}(r,this.o),this.v=0),t&&function(e,t,r){for(;r;++t)e[t]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,t)},e}(),oo=/*#__PURE__*/function(){function e(e){this.v=1,so.call(this,e)}return e.prototype.push=function(e,t){if(so.prototype.e.call(this,e),this.v){if(this.p.length<2&&!t)return;this.p=this.p.subarray(2),this.v=0}t&&(this.p.length<4&&qa(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),so.prototype.c.call(this,t)},e}(),co="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{co.decode(ro,{stream:!0}),1}catch(e){}var ho=[0,1,3,7,15,31,63,127,255],uo=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};uo.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},uo.prototype.read=function(e){for(var t=0;e>0;){this._ensureByte();var r=8-this.bitOffset;if(e>=r)t<<=r,t|=ho[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,e-=r;else{t<<=e;var n=r-e;t|=(this.curByte&ho[e]<<n)>>n,this.bitOffset+=e,e=0}}return t},uo.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},uo.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)};var lo=uo,yo=function(){};yo.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},yo.prototype.read=function(e,t,r){for(var n=0;n<r;){var i=this.readByte();if(i<0)return 0===n?-1:n;e[t++]=i,n++}return n},yo.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},yo.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},yo.prototype.write=function(e,t,r){var n;for(n=0;n<r;n++)this.writeByte(e[t++]);return r},yo.prototype.flush=function(){};var fo,go=yo,po=(fo=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var e=4294967295;this.getCRC=function(){return~e>>>0},this.updateCRC=function(t){e=e<<8^fo[255&(e>>>24^t)]},this.updateCRCRun=function(t,r){for(;r-- >0;)e=e<<8^fo[255&(e>>>24^t)]}}),Ao=lo,wo=go,mo=po,bo=function(e,t){var r,n=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=n,n},Eo={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},ko={};ko[Eo.LAST_BLOCK]="Bad file checksum",ko[Eo.NOT_BZIP_DATA]="Not bzip data",ko[Eo.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",ko[Eo.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",ko[Eo.DATA_ERROR]="Data error",ko[Eo.OUT_OF_MEMORY]="Out of memory",ko[Eo.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var vo=function(e,t){var r=ko[e]||"unknown error";t&&(r+=": "+t);var n=new TypeError(r);throw n.errorCode=e,n},Bo=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};Bo.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new mo,!0):(this.writeCount=-1,!1)},Bo.prototype._start_bunzip=function(e,t){var r=new Uint8Array(4);4===e.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||vo(Eo.NOT_BZIP_DATA,"bad magic");var n=r[3]-48;(n<1||n>9)&&vo(Eo.NOT_BZIP_DATA,"level out of range"),this.reader=new Ao(e),this.dbufSize=1e5*n,this.nextoutput=0,this.outputStream=t,this.streamCRC=0},Bo.prototype._get_next_block=function(){var e,t,r,n=this.reader,i=n.pi();if("177245385090"===i)return!1;"314159265359"!==i&&vo(Eo.NOT_BZIP_DATA),this.targetBlockCRC=n.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,n.read(1)&&vo(Eo.OBSOLETE_INPUT);var s=n.read(24);s>this.dbufSize&&vo(Eo.DATA_ERROR,"initial position out of bounds");var a=n.read(16),o=new Uint8Array(256),c=0;for(e=0;e<16;e++)if(a&1<<15-e){var h=16*e;for(r=n.read(16),t=0;t<16;t++)r&1<<15-t&&(o[c++]=h+t)}var u=n.read(3);(u<2||u>6)&&vo(Eo.DATA_ERROR);var l=n.read(15);0===l&&vo(Eo.DATA_ERROR);var y=new Uint8Array(256);for(e=0;e<u;e++)y[e]=e;var f=new Uint8Array(l);for(e=0;e<l;e++){for(t=0;n.read(1);t++)t>=u&&vo(Eo.DATA_ERROR);f[e]=bo(y,t)}var g,p=c+2,d=[];for(t=0;t<u;t++){var A,w,m=new Uint8Array(p),b=new Uint16Array(21);for(a=n.read(5),e=0;e<p;e++){for(;(a<1||a>20)&&vo(Eo.DATA_ERROR),n.read(1);)n.read(1)?a--:a++;m[e]=a}for(A=w=m[0],e=1;e<p;e++)m[e]>w?w=m[e]:m[e]<A&&(A=m[e]);g={},d.push(g),g.permute=new Uint16Array(258),g.limit=new Uint32Array(22),g.base=new Uint32Array(21),g.minLen=A,g.maxLen=w;var E=0;for(e=A;e<=w;e++)for(b[e]=g.limit[e]=0,a=0;a<p;a++)m[a]===e&&(g.permute[E++]=a);for(e=0;e<p;e++)b[m[e]]++;for(E=a=0,e=A;e<w;e++)E+=b[e],g.limit[e]=E-1,E<<=1,a+=b[e],g.base[e+1]=E-a;g.limit[w+1]=Number.MAX_VALUE,g.limit[w]=E+b[w]-1,g.base[A]=0}var k=new Uint32Array(256);for(e=0;e<256;e++)y[e]=e;var v,B=0,I=0,S=0,K=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,S>=l&&vo(Eo.DATA_ERROR),g=d[f[S++]]),e=g.minLen,t=n.read(e);e>g.maxLen&&vo(Eo.DATA_ERROR),!(t<=g.limit[e]);e++)t=t<<1|n.read(1);((t-=g.base[e])<0||t>=258)&&vo(Eo.DATA_ERROR);var C=g.permute[t];if(0!==C&&1!==C){if(B)for(B=0,I+a>this.dbufSize&&vo(Eo.DATA_ERROR),k[v=o[y[0]]]+=a;a--;)K[I++]=v;if(C>c)break;I>=this.dbufSize&&vo(Eo.DATA_ERROR),k[v=o[v=bo(y,e=C-1)]]++,K[I++]=v}else B||(B=1,a=0),a+=0===C?B:2*B,B<<=1}for((s<0||s>=I)&&vo(Eo.DATA_ERROR),t=0,e=0;e<256;e++)r=t+k[e],k[e]=t,t=r;for(e=0;e<I;e++)K[k[v=255&K[e]]]|=e<<8,k[v]++;var P=0,U=0,D=0;return I&&(U=255&(P=K[s]),P>>=8,D=-1),this.writePos=P,this.writeCurrent=U,this.writeCount=I,this.writeRun=D,!0},Bo.prototype._read_bunzip=function(e,t){var r,n,i;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,n=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,i=n,o=-1):(r=1,i=o),this.blockCRC.updateCRCRun(i,r);r--;)this.outputStream.writeByte(i),this.nextoutput++;o!=n&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&vo(Eo.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var Io=function(e){if("readByte"in e)return e;var t=new wo;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},So=function(e){var t=new wo,r=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),r=!1;else{if("writeByte"in e)return e;t.buffer=e,r=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(r&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};var Ko=function(e,t,r){for(var n=Io(e),i=So(t),s=new Bo(n,i);!("eof"in n)||!n.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&vo(Eo.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in n)||n.eof())break;s._start_bunzip(n,i)}if("getBuffer"in i)return i.getBuffer()};class Co{static get tag(){return R.packet.literalData}constructor(e=new Date){this.format=R.literal.utf8,this.date=T.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=R.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||T.isStream(this.text))&&(this.text=T.decodeUTF8(T.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=T.canonicalizeEOL(T.encodeUTF8(this.text))),e?I(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await v(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=T.decodeUTF8(await e.readBytes(r)),this.date=T.readDate(await e.readBytes(4));let n=e.remainder();o(n)&&(n=await C(n)),this.setBytes(n,t)}))}writeHeader(){const e=T.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),n=T.writeDate(this.date);return T.concatUint8Array([r,t,e,n])}write(){const e=this.writeHeader(),t=this.getBytes();return T.concat([e,t])}}class Po{constructor(){this.bytes=""}read(e){return this.bytes=T.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return T.stringToUint8Array(this.bytes)}toHex(){return T.uint8ArrayToHex(T.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new Po;return t.read(T.hexToUint8Array(e)),t}static wildcard(){const e=new Po;return e.read(new Uint8Array(8)),e}}const Uo=Symbol("verified"),Do="salt@notations.openpgpjs.org",xo=new Set([R.signatureSubpacket.issuerKeyID,R.signatureSubpacket.issuerFingerprint,R.signatureSubpacket.embeddedSignature]);class Qo{static get tag(){return R.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.unknownSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Po,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Uo]=null}read(e,t=M){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new qn("Support for v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4!==this.version&&5!==this.version&&6!==this.version)throw new qn(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[r++],this.publicKeyAlgorithm=e[r++],this.hashAlgorithm=e[r++],r+=this.readSubPackets(e.subarray(r,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,r),r+=this.readSubPackets(e.subarray(r,e.length),!1),this.signedHashValue=e.subarray(r,r+2),r+=2,6===this.version){const t=e[r++];this.salt=e.subarray(r,r+t),r+=t}const n=e.subarray(r,e.length),{read:i,signatureParams:s}=oa.signature.parseSignatureParams(this.publicKeyAlgorithm,n);if(i<n.length)throw Error("Error reading MPIs");this.params=s}writeParams(){return this.params instanceof Promise?U((async()=>oa.serializeParams(this.publicKeyAlgorithm,await this.params))):oa.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),T.concat(e)}async sign(e,t,r=new Date,n=!1,i){this.version=e.version,this.created=T.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Mo(this.hashAlgorithm);if(null===this.salt)this.salt=oa.random.getRandomBytes(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(i.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===Do)).length)throw Error("Unexpected existing salt notation");{const e=oa.random.getRandomBytes(Mo(this.hashAlgorithm));this.rawNotations.push({name:Do,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=T.concat(s);const a=this.toHash(this.signatureType,t,n),o=await this.hash(this.signatureType,t,a,n);this.signedHashValue=K(B(o),0,2);const c=async()=>oa.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await C(o));T.isStream(o)?this.params=c():(this.params=await c(),this[Uo]=!0)}writeHashedSubPackets(){const e=R.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(Ro(e.signatureCreationTime,!0,T.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(Ro(e.signatureExpirationTime,!0,T.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(Ro(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(Ro(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(Ro(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(Ro(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(Ro(e.keyExpirationTime,!0,T.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(Ro(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=T.concat([r,this.revocationKeyFingerprint]),t.push(Ro(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(Ro(e.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:n,value:i,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=T.encodeUTF8(n);r.push(T.writeNumber(o.length,2)),r.push(T.writeNumber(i.length,2)),r.push(o),r.push(i),r=T.concat(r),t.push(Ro(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(Ro(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(Ro(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.keyServerPreferences)),t.push(Ro(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(Ro(e.preferredKeyServer,!1,T.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(Ro(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(Ro(e.policyURI,!1,T.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.keyFlags)),t.push(Ro(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(Ro(e.signersUserID,!1,T.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=T.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(Ro(e.reasonForRevocation,!0,r))),null!==this.features&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.features)),t.push(Ro(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(T.stringToUint8Array(this.signatureTargetHash)),r=T.concat(r),t.push(Ro(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(Ro(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=T.concat(r),t.push(Ro(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(Ro(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(Ro(e.preferredCipherSuites,!1,r)));const n=T.concat(t),i=T.writeNumber(n.length,6===this.version?4:2);return T.concat([i,n])}writeUnhashedSubPackets(){const e=this.unhashedSubpackets.map((({type:e,critical:t,body:r})=>Ro(e,t,r))),t=T.concat(e),r=T.writeNumber(t.length,6===this.version?4:2);return T.concat([r,t])}readSubPacket(e,t=!0){let r=0;const n=!!(128&e[r]),i=127&e[r];if(r++,t||(this.unhashedSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)}),xo.has(i)))switch(i){case R.signatureSubpacket.signatureCreationTime:this.created=T.readDate(e.subarray(r,e.length));break;case R.signatureSubpacket.signatureExpirationTime:{const t=T.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case R.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case R.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case R.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case R.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case R.signatureSubpacket.keyExpirationTime:{const t=T.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case R.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case R.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case R.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const i=T.readNumber(e.subarray(r,r+2));r+=2;const s=T.readNumber(e.subarray(r,r+2));r+=2;const a=T.decodeUTF8(e.subarray(r,r+i)),o=e.subarray(r+i,r+i+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:n}),t&&(this.notations[a]=T.decodeUTF8(o));break}case R.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=T.decodeUTF8(e.subarray(r,e.length));break;case R.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case R.signatureSubpacket.policyURI:this.policyURI=T.decodeUTF8(e.subarray(r,e.length));break;case R.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.signersUserID:this.signersUserID=T.decodeUTF8(e.subarray(r,e.length));break;case R.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=T.decodeUTF8(e.subarray(r,e.length));break;case R.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=oa.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=T.uint8ArrayToString(e.subarray(r,r+t));break}case R.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Qo,this.embeddedSignature.read(e.subarray(r,e.length));break;case R.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case R.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:this.unknownSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)})}}readSubPackets(e,t=!0,r){const n=6===this.version?4:2,i=T.readNumber(e.subarray(0,n));let s=n;for(;s<2+i;){const n=Nn(e.subarray(s,e.length));s+=n.offset,this.readSubPacket(e.subarray(s,s+n.len),t,r),s+=n.len}return s}toSign(e,t){const r=R.signature;switch(e){case r.binary:return null!==t.text?T.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return T.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,n;if(t.userID)n=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");n=209,e=t.userAttribute}const i=e.write();return T.concat([this.toSign(r.key,t),new Uint8Array([n]),T.writeNumber(i.length,4),i])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return T.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return E(B(this.signatureData),(e=>{r+=e.length}),(()=>{const n=[];return 5!==this.version||this.signatureType!==R.signature.binary&&this.signatureType!==R.signature.text||(t?n.push(new Uint8Array(6)):n.push(e.writeHeader())),n.push(new Uint8Array([this.version,255])),5===this.version&&n.push(new Uint8Array(4)),n.push(T.writeNumber(r,4)),T.concat(n)}))}toHash(e,t,r=!1){const n=this.toSign(e,t);return T.concat([this.salt||new Uint8Array,n,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,n=!1){if(6===this.version&&this.salt.length!==Mo(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,n)),oa.hash.digest(this.hashAlgorithm,r)}async verify(e,t,r,n=new Date,i=!1,s=M){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===R.signature.binary||t===R.signature.text;if(!(this[Uo]&&!a)){let n,s;if(this.hashed?s=await this.hashed:(n=this.toHash(t,r,i),s=await this.hash(t,r,n)),s=await C(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===R.publicKey.hmac?e.privateParams:null;if(this[Uo]=await oa.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,n,s),!this[Uo])throw Error("Signature verification failed")}const o=T.normalizeDate(n);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+R.read(R.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[R.signature.binary,R.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+R.read(R.hash,this.hashAlgorithm).toUpperCase());if(this.unknownSubpackets.forEach((({type:e,critical:t})=>{if(t)throw Error("Unknown critical signature subpacket type "+e)})),this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=T.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ro(e,t,r){const n=[];return n.push(Hn(r.length+1)),n.push(new Uint8Array([(t?128:0)|e])),n.push(r),T.concat(n)}function Mo(e){switch(e){case R.hash.sha256:return 16;case R.hash.sha384:return 24;case R.hash.sha512:return 32;case R.hash.sha224:case R.hash.sha3_256:return 16;case R.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Lo{static get tag(){return R.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new Lo;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new qn(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new Po,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Po,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),T.concatUint8Array(e)}calculateTrailer(...e){return U((async()=>Qo.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==R.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!T.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!T.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function To(e,t){if(!t[e]){let t;try{t=R.read(R.packet,e)}catch(t){throw new Vn("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}Lo.prototype.hash=Qo.prototype.hash,Lo.prototype.toHash=Qo.prototype.toHash,Lo.prototype.toSign=Qo.prototype.toSign;class Fo extends Array{static async fromBinary(e,t,r=M){const n=new Fo;return await n.read(e,t,r),n}async read(e,t,r=M){r.additionalAllowedPackets.length&&(t={...t,...T.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=k(e,(async(e,n)=>{const i=x(n);try{for(;;){await i.ready;if(await jn(e,(async e=>{try{if(e.tag===R.packet.marker||e.tag===R.packet.trust||e.tag===R.packet.padding)return;const n=To(e.tag,t);n.packets=new Fo,n.fromStream=T.isStream(e.packet),await n.read(e.packet,r),await i.write(n)}catch(t){if(t instanceof Vn){if(!(e.tag<=39))return;await i.abort(t)}const n=!r.ignoreUnsupportedPackets&&t instanceof qn,s=!(r.ignoreMalformedPackets||t instanceof qn);if(n||s||Gn(e.tag))await i.abort(t);else{const t=new Wn(e.tag,e.packet);await i.write(t)}T.printDebugError(t)}})))return await i.ready,void await i.close()}}catch(e){await i.abort(e)}}));const n=D(this.stream);for(;;){const{done:e,value:t}=await n.read();if(e?this.stream=null:this.push(t),e||Gn(t.constructor.tag))break}n.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof Wn?this[t].tag:this[t].constructor.tag,n=this[t].write();if(T.isStream(n)&&Gn(this[t].constructor.tag)){let t=[],i=0;const s=512;e.push(zn(r)),e.push(E(n,(e=>{if(t.push(e),i+=e.length,i>=s){const e=Math.min(Math.log(i)/Math.LN2|0,30),r=2**e,n=T.concat([On(e)].concat(t));return t=[n.subarray(1+r)],i=t[0].length,n.subarray(0,1+r)}}),(()=>T.concat([Hn(i)].concat(t)))))}else{if(T.isStream(n)){let t=0;e.push(E(B(n),(e=>{t+=e.length}),(()=>_n(r,t))))}else e.push(_n(r,n.length));e.push(n)}}return T.concat(e)}filterByTag(...e){const t=new Fo,r=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(r(this[n].constructor.tag))&&t.push(this[n]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,n=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(n(r[i].constructor.tag))&&t.push(i);return t}}const No=/*#__PURE__*/T.constructAllowedPackets([Co,Lo,Qo]);class Ho{static get tag(){return R.packet.compressedData}constructor(e=M){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=M){await v(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),T.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=M){const t=R.read(R.compression,this.algorithm),r=jo[t];if(!r)throw Error(t+" decompression not supported");this.packets=await Fo.fromBinary(r(this.compressed),No,e)}compress(){const e=R.read(R.compression,this.algorithm),t=Go[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function Oo(e,t){return r=>{if(!T.isStream(r)||o(r))return U((()=>C(r).then((e=>new Promise(((r,n)=>{const i=new t;i.ondata=e=>{r(e)};try{i.push(e,!0)}catch(e){n(e)}}))))));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const n=r.getReader(),i=new t;return new ReadableStream({async start(e){for(i.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await n.read();if(e)return void i.push(new Uint8Array,!0);t.length&&i.push(t)}}})}}function zo(e){return function(t){return U((async()=>e(await C(t))))}}const _o=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),Go={zip:/*#__PURE__*/Oo(_o("deflate-raw").compressor,io),zlib:/*#__PURE__*/Oo(_o("deflate").compressor,ao)},jo={uncompressed:e=>e,zip:/*#__PURE__*/Oo(_o("deflate-raw").decompressor,so),zlib:/*#__PURE__*/Oo(_o("deflate").decompressor,oo),bzip2:/*#__PURE__*/zo(Ko)},qo=/*#__PURE__*/T.constructAllowedPackets([Co,Ho,Lo,Qo]);class Vo{static get tag(){return R.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new Vo;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await v(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new qn(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?T.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):T.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=M){let n=this.packets.write();if(o(n)&&(n=await C(n)),2===this.version)this.cipherAlgorithm=e,this.salt=oa.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await Wo(this,"encrypt",t,n);else{const{blockSize:i}=oa.getCipherParams(e),s=await oa.getPrefixRandom(e),a=new Uint8Array([211,20]),o=T.concat([s,n,a]),c=await oa.hash.sha1(I(o)),h=T.concat([o,c]);this.encrypted=await oa.mode.cfb.encrypt(e,t,h,new Uint8Array(i),r)}return!0}async decrypt(e,t,r=M){let n,i=B(this.encrypted);if(o(i)&&(i=await C(i)),2===this.version)n=await Wo(this,"decrypt",t,i);else{const{blockSize:s}=oa.getCipherParams(e),a=await oa.mode.cfb.decrypt(e,t,i,new Uint8Array(s)),o=K(I(a),-20),c=K(a,0,-20),h=Promise.all([C(await oa.hash.sha1(I(c))),C(o)]).then((([e,t])=>{if(!T.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),u=K(c,s+2);n=K(u,0,-2),n=A([n,U((()=>h))]),T.isStream(i)&&r.allowUnauthenticatedStream||(n=await C(n))}return this.packets=await Fo.fromBinary(n,qo,r),!0}}async function Wo(e,t,r,n){const i=e instanceof Vo&&2===e.version,s=!i&&e.constructor.tag===R.packet.aeadEncryptedData;if(!i&&!s)throw Error("Unexpected packet type");const a=oa.getAEADMode(e.aeadAlgorithm),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,h=2**(e.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),y=new Uint8Array(l,0,5+u),f=new Uint8Array(l),g=new DataView(l),p=new Uint8Array(l,5,8);y.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,A,m=0,b=Promise.resolve(),E=0,v=0;if(i){const{keySize:t}=oa.getCipherParams(e.cipherAlgorithm),{ivLength:n}=a,i=new Uint8Array(l,0,5),s=await $i(R.hash.sha256,r,e.salt,i,t+n);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),A=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const B=await a(e.cipherAlgorithm,r);return k(n,(async(r,n)=>{if("array"!==T.isStream(r)){const t=new TransformStream({},{highWaterMark:T.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});w(t.readable,n),n=t.writable}const s=D(r),a=x(n);try{for(;;){let e=await s.readBytes(h+o)||new Uint8Array;const r=e.subarray(e.length-o);let n,l,w;if(e=e.subarray(0,e.length-o),i)w=d;else{w=d.slice();for(let e=0;e<8;e++)w[d.length-8+e]^=p[e]}if(!m||e.length?(s.unshift(r),n=B[t](e,w,y),n.catch((()=>{})),v+=e.length-o+c):(g.setInt32(5+u+4,E),n=B[t](r,w,f),n.catch((()=>{})),v+=c,l=!0),E+=e.length-o,b=b.then((()=>n)).then((async e=>{await a.ready,await a.write(e),v-=e.length})).catch((e=>a.abort(e))),(l||v>a.desiredSize)&&await b,l){await a.close();break}i?A.setInt32(d.length-4,++m):g.setInt32(9,++m)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const Zo=/*#__PURE__*/T.constructAllowedPackets([Co,Ho,Lo,Qo]);class Yo{static get tag(){return R.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=R.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await v(e,(async e=>{const t=await e.readByte();if(1!==t)throw new qn(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=oa.getAEADMode(this.aeadAlgorithm);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return T.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=M){this.packets=await Fo.fromBinary(await Wo(this,"decrypt",t,B(this.encrypted)),Zo,r)}async encrypt(e,t,r=M){this.cipherAlgorithm=e;const{ivLength:n}=oa.getAEADMode(this.aeadAlgorithm);this.iv=oa.random.getRandomBytes(n),this.chunkSizeByte=r.aeadChunkSizeByte;const i=this.packets.write();this.encrypted=await Wo(this,"encrypt",t,i)}}class Jo{static get tag(){return R.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Po,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:n,sessionKeyAlgorithm:i}){const s=new Jo;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?Po.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=n,s.sessionKeyAlgorithm=i,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new qn(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const n=r-1;this.publicKeyFingerprint=e.subarray(t,t+n),t+=n,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Po.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=oa.parseEncSessionKeyParams(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===R.publicKey.x25519||this.publicKeyAlgorithm===R.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=R.write(R.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),oa.serializeParams(this.publicKeyAlgorithm,this.encrypted)),T.concatUint8Array(e)}async encrypt(e){const t=R.write(R.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=$o(this.version,t,r,this.sessionKey),s=t===R.publicKey.aead?e.privateParams:null;this.encrypted=await oa.publicKeyEncrypt(t,r,e.publicParams,s,i,n)}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?$o(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=await oa.publicKeyDecrypt(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,n,r),{sessionKey:s,sessionKeyAlgorithm:a}=function(e,t,r,n){switch(t){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.elgamal:case R.publicKey.ecdh:case R.publicKey.aead:{const t=r.subarray(0,r.length-2),i=r.subarray(r.length-2),s=T.writeChecksum(t.subarray(t.length%8)),a=s[0]===i[0]&s[1]===i[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(n){const t=a&o.sessionKeyAlgorithm===n.sessionKeyAlgorithm&o.sessionKey.length===n.sessionKey.length;return{sessionKey:T.selectUint8Array(t,o.sessionKey,n.sessionKey),sessionKeyAlgorithm:6===e?null:T.selectUint8(t,o.sessionKeyAlgorithm,n.sessionKeyAlgorithm)}}if(a&&(6===e||R.read(R.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case R.publicKey.x25519:case R.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);3===this.version&&this.publicKeyAlgorithm!==R.publicKey.x25519&&this.publicKeyAlgorithm!==R.publicKey.x448&&(this.sessionKeyAlgorithm=a),this.sessionKey=s}}function $o(e,t,r,n){switch(t){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.elgamal:case R.publicKey.ecdh:case R.publicKey.aead:return T.concatUint8Array([new Uint8Array(6===e?[]:[r]),n,T.writeChecksum(n.subarray(n.length%8))]);case R.publicKey.x25519:case R.publicKey.x448:return n;default:throw Error("Unsupported public key algorithm")}}class Xo{static get tag(){return R.packet.symEncryptedSessionKey}constructor(e=M){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=R.symmetric.aes256,this.aeadAlgorithm=R.write(R.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new qn(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const n=e[t++];if(this.s2k=pa(n),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=oa.getAEADMode(this.aeadAlgorithm);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const n=r.length,i=3+n+this.iv.length;t=T.concatUint8Array([new Uint8Array([this.version,i,e,this.aeadAlgorithm,n]),r,this.iv,this.encrypted])}else 5===this.version?t=T.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=T.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=T.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:n}=oa.getCipherParams(t),i=await this.s2k.produceKey(e,n);if(this.version>=5){const e=oa.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|Xo.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await $i(R.hash.sha256,i,new Uint8Array,r,n):i,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await oa.mode.cfb.decrypt(t,i,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=R.write(R.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length)}else this.sessionKey=i}async encrypt(e,t=M){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=da(t),this.s2k.generateSalt();const{blockSize:n,keySize:i}=oa.getCipherParams(r),s=await this.s2k.produceKey(e,i);if(null===this.sessionKey&&(this.sessionKey=oa.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const e=oa.getAEADMode(this.aeadAlgorithm);this.iv=oa.random.getRandomBytes(e.ivLength);const t=new Uint8Array([192|Xo.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),n=6===this.version?await $i(R.hash.sha256,s,new Uint8Array,t,i):s,a=await e(r,n);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=T.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await oa.mode.cfb.encrypt(r,s,e,new Uint8Array(n),t)}}}class ec{static get tag(){return R.packet.publicKey}constructor(e=new Date,t=M){this.version=t.v6Keys?6:4,this.created=T.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new ec,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e,t=M){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new qn("Support for parsing v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4===this.version||5===this.version||6===this.version){this.created=T.readDate(e.subarray(r,r+4)),r+=4,this.algorithm=e[r++],this.version>=5&&(r+=4);const{read:t,publicParams:n}=oa.parsePublicKeyParams(this.algorithm,e.subarray(r));if(6===this.version&&n.oid&&(n.oid.getName()===R.curve.curve25519Legacy||n.oid.getName()===R.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=n,r+=t,await this.computeFingerprintAndKeyID(),r}throw new qn(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(T.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=oa.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&e.push(T.writeNumber(t.length,4)),e.push(t),T.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,n=e>=5?4:2;return T.concatUint8Array([new Uint8Array([r]),T.writeNumber(t.length,n),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Po,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await oa.hash.sha256(e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await oa.hash.sha1(e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return T.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&T.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=R.read(R.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=T.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}ec.prototype.readPublicKey=ec.prototype.read,ec.prototype.writePublicKey=ec.prototype.write;const tc=/*#__PURE__*/T.constructAllowedPackets([Co,Ho,Lo,Qo]);class rc{static get tag(){return R.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=M){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:n}=oa.getCipherParams(e),i=await C(B(this.encrypted)),s=await oa.mode.cfb.decrypt(e,t,i.subarray(n+2),i.subarray(2,n+2));this.packets=await Fo.fromBinary(s,tc,r)}async encrypt(e,t,r=M){const n=this.packets.write(),{blockSize:i}=oa.getCipherParams(e),s=await oa.getPrefixRandom(e),a=await oa.mode.cfb.encrypt(e,t,s,new Uint8Array(i),r),o=await oa.mode.cfb.encrypt(e,t,n,a.subarray(2),r);this.encrypted=T.concat([a,o])}}class nc extends ec{static get tag(){return R.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new nc,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class ic{static get tag(){return R.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=Nn(e.subarray(t,e.length));t+=r.offset,this.attributes.push(T.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(Hn(this.attributes[t].length)),e.push(T.stringToUint8Array(this.attributes[t]));return T.concatUint8Array(e)}equals(e){return!!(e&&e instanceof ic)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class sc extends ec{static get tag(){return R.packet.secretKey}constructor(e=new Date,t=M){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=M){let r=await this.readPublicKey(e,t);const n=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=pa(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+oa.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+oa.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(n),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!T.equalsUint8Array(T.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=oa.parsePrivateKeyParams(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof qn)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return T.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=oa.serializeParams(this.algorithm,this.privateParams)),5===this.version&&t.push(T.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(T.writeChecksum(this.keyMaterial))),T.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=M){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=pa(R.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=R.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=M){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=da(t),this.s2k.generateSalt();const r=oa.serializeParams(this.algorithm,this.privateParams);this.symmetric=R.symmetric.aes256;const{blockSize:n}=oa.getCipherParams(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=t.preferredAEADAlgorithm;const i=oa.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const s=zn(this.constructor.tag),a=await ac(this.version,this.s2k,e,this.symmetric,this.aead,s,this.isLegacyAEAD),o=await i(this.symmetric,a);this.iv=this.isLegacyAEAD?oa.random.getRandomBytes(n):oa.random.getRandomBytes(i.ivLength);const c=this.isLegacyAEAD?new Uint8Array:T.concatUint8Array([s,this.writePublicKey()]);this.keyMaterial=await o.encrypt(r,this.iv.subarray(0,i.ivLength),c)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const i=await ac(this.version,this.s2k,e,this.symmetric);this.iv=oa.random.getRandomBytes(n),this.keyMaterial=await oa.mode.cfb.encrypt(this.symmetric,i,T.concatUint8Array([r,await oa.hash.sha1(r,t)]),this.iv,t)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=zn(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let n;if(t=await ac(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const e=oa.getAEADMode(this.aead),i=await e(this.symmetric,t);try{const t=this.isLegacyAEAD?new Uint8Array:T.concatUint8Array([r,this.writePublicKey()]);n=await i.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await oa.mode.cfb.decrypt(this.symmetric,t,this.keyMaterial,this.iv);n=e.subarray(0,-20);const r=await oa.hash.sha1(n);if(!T.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=oa.parsePrivateKeyParams(this.algorithm,n,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await oa.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===R.publicKey.ecdh&&t===R.curve.curve25519Legacy||this.algorithm===R.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:n,publicParams:i}=await oa.generateParams(this.algorithm,e,t,r);this.privateParams=n,this.publicParams=i,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function ac(e,t,r,n,i,s,a){if("argon2"===t.type&&!i)throw Error("Using Argon2 S2K without AEAD is not allowed");if("simple"===t.type&&6===e)throw Error("Using Simple S2K with version 6 keys is not allowed");const{keySize:o}=oa.getCipherParams(n),c=await t.produceKey(r,o);if(!i||5===e||a)return c;const h=T.concatUint8Array([s,new Uint8Array([e,n,i])]);return $i(R.hash.sha256,c,new Uint8Array,h,o)}class oc{static get tag(){return R.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(T.isString(e)||e.name&&!T.isString(e.name)||e.email&&!T.isEmailAddress(e.email)||e.comment&&!T.isString(e.comment))throw Error("Invalid user ID format");const t=new oc;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=M){const r=T.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const n=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==n){const{name:e,comment:t,email:r}=n.groups;this.comment=t?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=e?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return T.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class cc extends sc{static get tag(){return R.packet.secretSubkey}constructor(e=new Date,t=M){super(e,t)}}const hc=/*#__PURE__*/T.constructAllowedPackets([Qo]);class uc{constructor(e){this.packets=e||new Fo}write(){return this.packets.write()}armor(e=M){const t=this.packets.some((e=>e.constructor.tag===Qo.tag&&6!==e.version));return X(R.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function lc(e,t){const r=new cc(e.date,t);return r.packets=null,r.algorithm=R.write(R.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function yc(e,t){const r=new sc(e.date,t);return r.packets=null,r.algorithm=R.write(R.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function fc(e,t,r,n,i=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,n,i,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw T.wrapError(`Could not find valid ${R.read(R.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function gc(e,t,r=new Date){const n=T.normalizeDate(r);if(null!==n){const r=mc(e,t);return!(e.created<=n&&n<r)}return!1}async function pc(e,t,r,n){const i={};i.key=t,i.bind=e;const s={signatureType:R.signature.subkeyBinding};r.sign?(s.keyFlags=[R.keyFlags.signData],s.embeddedSignature=await dc(i,null,e,{signatureType:R.signature.keyBinding},r.date,void 0,void 0,void 0,n)):s.keyFlags=r.forwarding?[R.keyFlags.forwardedCommunication]:[R.keyFlags.encryptCommunication|R.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await dc(i,null,t,s,r.date,void 0,void 0,void 0,n)}async function dc(e,t,r,n,i,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Qo;return Object.assign(h,n),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(e,t,r=new Date,n={},i){let s=i.preferredHashAlgorithm,a=s;if(e){const t=await e.getPrimarySelfSignature(r,n,i);t.preferredHashAlgorithms&&([a]=t.preferredHashAlgorithms,s=oa.hash.getHashByteLength(s)<=oa.hash.getHashByteLength(a)?a:s)}switch(t.algorithm){case R.publicKey.ecdsa:case R.publicKey.eddsaLegacy:case R.publicKey.ed25519:case R.publicKey.ed448:a=oa.getPreferredCurveHashAlgo(t.algorithm,t.publicParams.oid)}return oa.hash.getHashByteLength(s)<=oa.hash.getHashByteLength(a)?a:s}(t,r,i,s,c),h.rawNotations=[...a],await h.sign(r,e,i,o,c),h}async function Ac(e,t,r,n=new Date,i){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(n)||i&&!await i(e)||t[r].some((function(t){return T.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function wc(e,t,r,n,i,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(n.map((async function(e){try{if(!i||e.issuerKeyID.equals(i.issuerKeyID)){const n=![R.reasonForRevocation.keyRetired,R.reasonForRevocation.keySuperseded,R.reasonForRevocation.userIDInvalid].includes(e.reasonForRevocationFlag);await e.verify(s,t,r,n?null:a,!1,o),c.push(e.issuerKeyID)}}catch(e){}}))),i?(i.revoked=!!c.some((e=>e.equals(i.issuerKeyID)))||(i.revoked||!1),i.revoked):c.length>0}function mc(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function bc(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=T.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"ecc":try{e.curve=R.write(R.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==R.curve.ed25519Legacy&&e.curve!==R.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?R.curve.ed25519Legacy:R.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===R.curve.ed25519Legacy?R.publicKey.eddsaLegacy:R.publicKey.ecdsa:e.algorithm=R.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?R.publicKey.ed25519:R.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?R.publicKey.ed448:R.publicKey.x448;break;case"rsa":e.algorithm=R.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=R.publicKey.hmac;try{e.symmetric=R.write(R.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=R.publicKey.aead;try{e.symmetric=R.write(R.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function Ec(e,t,r){switch(e.algorithm){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:case R.publicKey.dsa:case R.publicKey.ecdsa:case R.publicKey.eddsaLegacy:case R.publicKey.ed25519:case R.publicKey.ed448:case R.publicKey.hmac:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&R.keyFlags.signData);default:return!1}}function kc(e,t,r){switch(e.algorithm){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:case R.publicKey.elgamal:case R.publicKey.ecdh:case R.publicKey.x25519:case R.publicKey.x448:case R.publicKey.aead:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&R.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&R.keyFlags.encryptStorage);default:return!1}}function vc(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:case R.publicKey.elgamal:case R.publicKey.ecdh:case R.publicKey.x25519:case R.publicKey.x448:return!(!(!t.keyFlags||!!(t.keyFlags[0]&R.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&R.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&R.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&R.keyFlags.forwardedCommunication));default:return!1}}function Bc(e,t){const r=R.write(R.publicKey,e.algorithm),n=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(n.algorithm+" keys are considered too weak.");switch(r){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:case R.publicKey.rsaEncrypt:if(n.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case R.publicKey.ecdsa:case R.publicKey.eddsaLegacy:case R.publicKey.ecdh:if(t.rejectCurves.has(n.curve))throw Error(`Support for ${n.algorithm} keys using curve ${n.curve} is disabled.`)}}class Ic{constructor(e,t){this.userID=e.constructor.tag===R.packet.userID?e:null,this.userAttribute=e.constructor.tag===R.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Fo;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new Ic(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n},s=new Ic(i.userID||i.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(n))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return dc(i,e,s.keyPacket,{signatureType:R.signature.certGeneric,keyFlags:[R.keyFlags.certifyKeys|R.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,n=M){const i=this.mainKey.keyPacket;return wc(i,R.signature.certRevocation,{key:i,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,n)}async verifyCertificate(e,t,r=new Date,n){const i=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,n);if(e.revoked||await i.isRevoked(e,s.keyPacket,r,n))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,R.signature.certGeneric,a,r,void 0,n)}catch(e){throw T.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const n=this,i=this.selfCertifications.concat(this.otherCertifications);return Promise.all(i.map((async i=>({keyID:i.issuerKeyID,valid:await n.verifyCertificate(i,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(n,R.signature.certGeneric,i,e,void 0,t)}catch(e){throw T.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};await Ac(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(n,R.signature.certGeneric,i,t,!1,r),!0}catch(e){return!1}})),await Ac(e,this,"otherCertifications",t),await Ac(e,this,"revocationSignatures",t,(function(e){return wc(n,R.signature.certRevocation,i,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=R.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=M){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new Ic(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await dc(s,null,e,{signatureType:R.signature.certRevocation,reasonForRevocationFlag:R.write(R.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}}class Sc{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Fo;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Sc(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,n=M){const i=this.mainKey.keyPacket;return wc(i,R.signature.subkeyRevocation,{key:i,bind:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verify(e=new Date,t=M){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket},i=await fc(this.bindingSignatures,r,R.signature.subkeyBinding,n,e,t);if(i.revoked||await this.isRevoked(i,null,e,t))throw Error("Subkey is revoked");if(gc(this.keyPacket,i,e))throw Error("Subkey is expired");return i}async getExpirationTime(e=new Date,t=M){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket};let i;try{i=await fc(this.bindingSignatures,r,R.signature.subkeyBinding,n,e,t)}catch(e){return null}const s=mc(this.keyPacket,i),a=i.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=M){const n=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===R.packet.publicSubkey&&e.keyPacket.constructor.tag===R.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const i=this,s={key:n,bind:i.keyPacket};await Ac(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<i.bindingSignatures.length;t++)if(i.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>i.bindingSignatures[t].created&&(i.bindingSignatures[t]=e),!1;try{return await e.verify(n,R.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await Ac(e,this,"revocationSignatures",t,(function(e){return wc(n,R.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=R.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=M){const s={key:e,bind:this.keyPacket},a=new Sc(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await dc(s,null,e,{signatureType:R.signature.subkeyRevocation,reasonForRevocationFlag:R.write(R.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{Sc.prototype[e]=function(){return this.keyPacket[e]()}}));const Kc=/*#__PURE__*/T.constructAllowedPackets([Qo]),Cc=new Set([R.packet.publicKey,R.packet.privateKey]),Pc=new Set([R.packet.publicKey,R.packet.privateKey,R.packet.publicSubkey,R.packet.privateSubkey]);class Uc{packetListToStructure(e,t=new Set){let r,n,i,s;for(const a of e){if(a instanceof Wn){Pc.has(a.tag)&&!s&&(s=Cc.has(a.tag)?Cc:Pc);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case R.packet.publicKey:case R.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,n=this.getKeyID(),!n)throw Error("Missing Key ID");break;case R.packet.userID:case R.packet.userAttribute:r=new Ic(a,this),this.users.push(r);break;case R.packet.publicSubkey:case R.packet.secretSubkey:r=null,i=new Sc(a,this),this.subkeys.push(i);break;case R.packet.signature:switch(a.signatureType){case R.signature.certGeneric:case R.signature.certPersona:case R.signature.certCasual:case R.signature.certPositive:if(!r){T.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(n)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case R.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case R.signature.key:this.directSignatures.push(a);break;case R.signature.subkeyBinding:if(!i){T.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}i.bindingSignatures.push(a);break;case R.signature.keyRevocation:this.revocationSignatures.push(a);break;case R.signature.subkeyRevocation:if(!i){T.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}i.revocationSignatures.push(a)}}}}toPacketList(){const e=new Fo;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},n=M){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{Bc(i,n)}catch(e){throw T.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await fc(r.bindingSignatures,i,R.signature.subkeyBinding,e,t,n);if(!Ec(r.keyPacket,s,n))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await fc([s.embeddedSignature],r.keyPacket,R.signature.keyBinding,e,t,n),Bc(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&Ec(i,s,n))return Bc(i,n),this}catch(e){a=e}throw T.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},n=M){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{Bc(i,n)}catch(e){throw T.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await fc(r.bindingSignatures,i,R.signature.subkeyBinding,e,t,n);if(kc(r.keyPacket,s,n))return Bc(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&kc(i,s,n))return Bc(i,n),this}catch(e){a=e}throw T.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,n=M){return wc(this.keyPacket,R.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verifyPrimaryKey(e=new Date,t={},r=M){const n=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(gc(n,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==n.version){const t=await fc(this.directSignatures,n,R.signature.key,{key:n},e,r).catch((()=>{}));if(t&&gc(n,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=M){let r;try{const n=await this.getPrimarySelfSignature(null,e,t),i=mc(this.keyPacket,n),s=n.getExpirationTime(),a=6!==this.keyPacket.version&&await fc(this.directSignatures,this.keyPacket,R.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=mc(this.keyPacket,a);r=Math.min(i,s,e)}else r=i<s?i:s}catch(e){r=null}return T.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=M){const n=this.keyPacket;if(6===n.version)return fc(this.directSignatures,n,R.signature.key,{key:n},e,r);const{selfCertification:i}=await this.getPrimaryUser(e,t,r);return i}async getPrimaryUser(e=new Date,t={},r=M){const n=this.keyPacket,i=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:n},c=await fc(s.selfCertifications,n,R.signature.certGeneric,o,e,r);i.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!i.length)throw s||Error("Could not find primary user");await Promise.all(i.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=i.sort((function(e,t){const r=e.selfCertification,n=t.selfCertification;return n.revoked-r.revoked||r.isPrimaryUserID-n.isPrimaryUserID||r.created-n.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=M){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const n=this.clone();return await Ac(e,n,"revocationSignatures",t,(i=>wc(n.keyPacket,R.signature.keyRevocation,n,[i],null,e.keyPacket,t,r))),await Ac(e,n,"directSignatures",t),await Promise.all(e.users.map((async e=>{const i=n.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(i.length>0)await Promise.all(i.map((n=>n.update(e,t,r))));else{const t=e.clone();t.mainKey=n,n.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const i=n.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(i.length>0)await Promise.all(i.map((n=>n.update(e,t,r))));else{const t=e.clone();t.mainKey=n,n.subkeys.push(t)}}))),n}async getRevocationCertificate(e=new Date,t=M){const r={key:this.keyPacket},n=await fc(this.revocationSignatures,this.keyPacket,R.signature.keyRevocation,r,e,t),i=new Fo;i.push(n);const s=6!==this.keyPacket.version;return X(R.armor.publicKey,i.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=M){const n=await $(e),i=(await Fo.fromBinary(n.data,Kc,r)).findPacket(R.packet.signature);if(!i||i.signatureType!==R.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!i.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await i.verify(this.keyPacket,R.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw T.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(i),s}async signPrimaryUser(e,t,r,n=M){const{index:i,user:s}=await this.getPrimaryUser(t,r,n),a=await s.certify(e,t,n),o=this.clone();return o.users[i]=a,o}async signAllUsers(e,t=new Date,r=M){const n=this.clone();return n.users=await Promise.all(this.users.map((function(n){return n.certify(e,t,r)}))),n}async verifyPrimaryUser(e,t=new Date,r,n=M){const i=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,n);return e?await s.verifyAllCertifications(e,t,n):[{keyID:i.getKeyID(),valid:await s.verify(t,n).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=M){const n=this.keyPacket,i=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:n.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];i.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),i}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{Uc.prototype[e]=Sc.prototype[e]}));class Dc extends Uc{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([R.packet.secretKey,R.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=M){const t=6!==this.keyPacket.version;return X(R.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class xc extends Dc{constructor(e){if(super(),this.packetListToStructure(e,new Set([R.packet.publicKey,R.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new Fo,t=this.toPacketList();let r=!1;for(const n of t)if(!r||n.constructor.tag!==R.packet.Signature)switch(r&&(r=!1),n.constructor.tag){case R.packet.secretKey:{if(n.algorithm===R.publicKey.aead||n.algorithm===R.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=ec.fromSecretKeyPacket(n);e.push(t);break}case R.packet.secretSubkey:{if(n.algorithm===R.publicKey.aead||n.algorithm===R.publicKey.hmac){r=!0;break}const t=nc.fromSecretSubkeyPacket(n);e.push(t);break}default:e.push(n)}return new Dc(e)}armor(e=M){const t=6!==this.keyPacket.version;return X(R.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},n=M){const i=this.keyPacket,s=[];let a=null;for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0)){if(this.subkeys[r].keyPacket.isDummy()){a=a||Error("Gnu-dummy key packets cannot be used for decryption");continue}try{const e={key:i,bind:this.subkeys[r].keyPacket},a=await fc(this.subkeys[r].bindingSignatures,i,R.signature.subkeyBinding,e,t,n);vc(this.subkeys[r].keyPacket,a,n)&&s.push(this.subkeys[r])}catch(e){a=e}}const o=await this.getPrimarySelfSignature(t,r,n);if(e&&!i.getKeyID().equals(e,!0)||!vc(i,o,n)||(i.isDummy()?a=a||Error("Gnu-dummy key packets cannot be used for decryption"):s.push(this)),0===s.length)throw a||Error("No decryption key packets found");return s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=M){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=R.reasonForRevocation.noReason,string:t=""}={},r=new Date,n=M){if(!this.isPrivate())throw Error("Need private key for revoking");const i={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await dc(i,null,this.keyPacket,{signatureType:R.signature.keyRevocation,reasonForRevocationFlag:R.write(R.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,n)),s}async addSubkey(e={}){const t={...M,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const n=r.getAlgorithmInfo();n.type=function(e){switch(R.write(R.publicKey,e)){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:case R.publicKey.dsa:return"rsa";case R.publicKey.ecdsa:case R.publicKey.eddsaLegacy:return"ecc";case R.publicKey.ed25519:return"curve25519";case R.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(n.algorithm),n.rsaBits=n.bits||4096,n.curve=n.curve||"curve25519Legacy",e=bc(e,n);const i=await lc(e,{...t,v6Keys:6===this.keyPacket.version});Bc(i,t);const s=await pc(i,r,e,t),a=this.toPacketList();return a.push(i,s),new xc(a)}}const Qc=/*#__PURE__*/T.constructAllowedPackets([ec,nc,sc,cc,oc,ic,Qo]);function Rc(e){for(const t of e)switch(t.constructor.tag){case R.packet.secretKey:return new xc(e);case R.packet.publicKey:return new Dc(e)}throw Error("No key packet found")}async function Mc(e,t,r,n){r.passphrase&&await e.encrypt(r.passphrase,n),await Promise.all(t.map((async function(e,t){const i=r.subkeys[t].passphrase;i&&await e.encrypt(i,n)})));const i=new Fo;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[R.keyFlags.certifyKeys|R.keyFlags.signData];const i=s([R.symmetric.aes256,R.symmetric.aes128],n.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=i,n.aeadProtect){const e=s([R.aead.gcm,R.aead.eax,R.aead.ocb],n.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>i.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([R.hash.sha256,R.hash.sha512,...6===e.version?[R.hash.sha3_256,R.hash.sha3_512]:[]],n.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([R.compression.uncompressed,R.compression.zlib,R.compression.zip],n.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=R.features.modificationDetection,n.aeadProtect&&(t.features[0]|=R.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(i.push(e),6===e.version){const t={key:e},s=a();s.signatureType=R.signature.key;const o=await dc(t,null,e,s,r.date,void 0,void 0,void 0,n);i.push(o)}await Promise.all(r.userIDs.map((async function(t,i){const s=oc.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=R.signature.certPositive,0===i&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await dc(o,null,e,c,r.date,void 0,void 0,void 0,n)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{i.push(e),i.push(t)}))})),await Promise.all(t.map((async function(t,i){const s=r.subkeys[i];return{secretSubkeyPacket:t,subkeySignaturePacket:await pc(t,e,s,n)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{i.push(e),i.push(t)}))}));const o={key:e};return i.push(await dc(o,null,e,{signatureType:R.signature.keyRevocation,reasonForRevocationFlag:R.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,n)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new xc(i)}const Lc=/*#__PURE__*/T.constructAllowedPackets([Co,Ho,Yo,Vo,rc,Jo,Xo,Lo,Qo]),Tc=/*#__PURE__*/T.constructAllowedPackets([Xo]),Fc=/*#__PURE__*/T.constructAllowedPackets([Qo]);class Nc{constructor(e){this.packets=e||new Fo}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(R.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(R.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(R.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,n=new Date,i=M){const s=this.packets.filterByTag(R.packet.symmetricallyEncryptedData,R.packet.symEncryptedIntegrityProtectedData,R.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,n,i);let h=null;const u=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!T.isUint8Array(t)||!a.cipherAlgorithm&&!T.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||R.write(R.symmetric,e);await a.decrypt(r,t,i)}catch(e){T.printDebugError(e),h=e}})));if(P(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new Nc(a.packets);return a.packets=new Fo,l}async decryptSessionKeys(e,t,r,n=new Date,i=M){let s,a=[];if(t){const e=this.packets.filterByTag(R.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let n;n=r?await Fo.fromBinary(e.write(),Tc,i):e,await Promise.all(n.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){T.printDebugError(e),e instanceof ca&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(R.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o;try{o=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,i)).map((e=>e.keyPacket))}catch(e){return void(s=e)}let c=[R.symmetric.aes256,R.symmetric.aes128,R.symmetric.tripledes,R.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(n,void 0,i);t.preferredSymmetricAlgorithms&&(c=c.concat(t.preferredSymmetricAlgorithms))}catch(e){}await Promise.all(o.map((async function(e){if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(i.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===R.publicKey.rsaEncrypt||t.publicKeyAlgorithm===R.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===R.publicKey.rsaSign||t.publicKeyAlgorithm===R.publicKey.elgamal)){const n=t.write();await Promise.all((r?[r]:Array.from(i.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new Jo;r.read(n);const i={sessionKeyAlgorithm:t,sessionKey:oa.generateSessionKey(t)};try{await r.decrypt(e,i),a.push(r)}catch(e){T.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const n=r||t.sessionKeyAlgorithm;if(n&&!c.includes(R.write(R.symmetric,n)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){T.printDebugError(e),s=e}})))}))),P(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+T.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&R.read(R.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(R.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(R.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(R.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],n=M){const{symmetricAlgo:i,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],n=M){const i=await Promise.all(e.map(((e,i)=>e.getPrimarySelfSignature(t,r[i],n))));if(e.length?!n.ignoreSEIPDv2FeatureFlag&&i.every((e=>e.features&&e.features[0]&R.features.seipdv2)):n.aeadProtect){const e={symmetricAlgo:R.symmetric.aes128,aeadAlgo:R.aead.ocb},t=[{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:n.preferredAEADAlgorithm},{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:R.aead.ocb},{symmetricAlgo:R.symmetric.aes128,aeadAlgo:n.preferredAEADAlgorithm}];for(const e of t)if(i.every((t=>t.preferredCipherSuites&&t.preferredCipherSuites.some((t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo)))))return e;return e}const s=R.symmetric.aes128,a=n.preferredSymmetricAlgorithm;return{symmetricAlgo:i.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,n),a=R.read(R.symmetric,i),o=s?R.read(R.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===R.publicKey.x25519||e.keyPacket.algorithm===R.publicKey.x448)&&!o&&!T.isAES(i))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:oa.generateSessionKey(i),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,n=!1,i=[],s=new Date,a=[],o=M){if(r){if(!T.isUint8Array(r.data)||!T.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Nc.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Nc.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await Nc.encryptSessionKey(c,h,u,e,t,n,i,s,a,o),y=Vo.fromObject({version:u?2:1,aeadAlgorithm:u?R.write(R.aead,u):null});y.packets=this.packets;const f=R.write(R.symmetric,h);return await y.encrypt(f,c,o),l.packets.push(y),y.packets=new Fo,l}static async encryptSessionKey(e,t,r,n,i,s=!1,a=[],o=new Date,c=[],h=M){const u=new Fo,l=R.write(R.symmetric,t),y=r&&R.write(R.aead,r);if(n){const t=await Promise.all(n.map((async function(t,r){const n=await t.getEncryptionKey(a[r],o,c,h),i=Jo.fromObject({version:y?6:3,encryptionKeyPacket:n.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await i.encrypt(n.keyPacket),delete i.sessionKey,i})));u.push(...t)}if(i){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,n=async function(e,s,a,o){const c=new Xo(h);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(i.map((e=>t(c,e))))).reduce(r))return n(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(i.map((t=>n(e,l,y,t))));u.push(...s)}return new Nc(u)}async sign(e=[],t=null,r=[],n=new Date,i=[],s=[],a=M){const o=new Fo,c=this.packets.findPacket(R.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await Hc(c,e,t,r,n,i,s,!1,a),u=h.map(((e,t)=>Lo.fromSignaturePacket(e,0===t))).reverse();return o.push(...u),o.push(c),o.push(...h),new Nc(o)}compress(e,t=M){if(e===R.compression.uncompressed)return this;const r=new Ho(t);r.algorithm=e,r.packets=this.packets;const n=new Fo;return n.push(r),new Nc(n)}async signDetached(e=[],t=null,r=[],n=new Date,i=[],s=[],a=M){const o=this.packets.findPacket(R.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new uc(await Hc(o,e,t,r,n,i,s,!0,a))}async verify(e,t=new Date,r=M){const n=this.unwrapCompressed(),i=n.packets.filterByTag(R.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");o(n.packets.stream)&&n.packets.push(...await C(n.packets.stream,(e=>e||[])));const s=n.packets.filterByTag(R.packet.onePassSignature).reverse(),a=n.packets.filterByTag(R.packet.signature);return s.length&&!a.length&&T.isStream(n.packets.stream)&&!o(n.packets.stream)?(await Promise.all(s.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=U((async()=>(await e.correspondingSig).signatureData)),e.hashed=C(await e.hash(e.signatureType,i[0],void 0,!1)),e.hashed.catch((()=>{}))}))),n.packets.stream=k(n.packets.stream,(async(e,t)=>{const r=D(e),n=x(t);try{for(let e=0;e<s.length;e++){const{value:t}=await r.read();s[e].correspondingSigResolve(t)}await r.readToEnd(),await n.ready,await n.close()}catch(e){s.forEach((t=>{t.correspondingSigReject(e)})),await n.abort(e)}})),Oc(s,i,e,t,!1,r)):Oc(a,i,e,t,!1,r)}verifyDetached(e,t,r=new Date,n=M){const i=this.unwrapCompressed().packets.filterByTag(R.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");return Oc(e.packets.filterByTag(R.packet.signature),i,t,r,!0,n)}unwrapCompressed(){const e=this.packets.filterByTag(R.packet.compressedData);return e.length?new Nc(e[0].packets):this}async appendSignature(e,t=M){await this.packets.read(T.isUint8Array(e)?e:(await $(e)).data,Fc,t)}write(){return this.packets.write()}armor(e=M){const t=this.packets[this.packets.length-1],r=t.constructor.tag===Vo.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===Qo.tag&&6!==e.version));return X(R.armor.message,this.write(),null,null,null,r,e)}}async function Hc(e,t,r=null,n=[],i=new Date,s=[],a=[],o=!1,c=M){const h=new Fo,u=null===e.text?R.signature.binary:R.signature.text;if(await Promise.all(t.map((async(t,r)=>{const h=s[r];if(!t.isPrivate())throw Error("Need private key for signing");const l=await t.getSigningKey(n[r],i,h,c);return dc(e,t,l.keyPacket,{signatureType:u},i,h,a,o,c)}))).then((e=>{h.push(...e)})),r){const e=r.packets.filterByTag(R.packet.signature);h.push(...e)}return h}async function Oc(e,t,r,n=new Date,i=!1,s=M){return Promise.all(e.filter((function(e){return["text","binary"].includes(R.read(R.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,n=new Date,i=!1,s=M){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof Lo?e.correspondingSig:e,h={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],n,i,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),n,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new Fo;return e&&t.push(e),new uc(t)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(e,t,r,n,i,s)})))}const zc=/*#__PURE__*/T.constructAllowedPackets([Qo]);class _c{constructor(e,t){if(this.text=T.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof uc))throw Error("Invalid signature input");this.signature=t||new uc(new Fo)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=null,r=[],n=new Date,i=[],s=[],a=M){const o=new Co;o.setText(this.text);const c=new uc(await Hc(o,e,t,r,n,i,s,!0,a));return new _c(this.text,c)}verify(e,t=new Date,r=M){const n=this.signature.packets.filterByTag(R.packet.signature),i=new Co;return i.setText(this.text),Oc(n,[i],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=M){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>R.read(R.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return X(R.armor.signed,r,void 0,void 0,void 0,t,e)}}function Gc(e){if(!(e instanceof Nc))throw Error("Parameter [message] needs to be of type Message")}function jc(e){if(!(e instanceof _c||e instanceof Nc))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function qc(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const Vc=Object.keys(M).length;function Wc(e){const t=Object.keys(e);if(t.length!==Vc)for(const e of t)if(void 0===M[e])throw Error("Unknown config property: "+e)}function Zc(e){return e&&!T.isArray(e)&&(e=[e]),e}async function Yc(e){return"array"===T.isStream(e)?C(e):e}function Jc(e,t){e.data=k(t.packets.stream,(async(t,r)=>{await w(e.data,r,{preventClose:!0});const n=x(r);try{await C(t,(e=>e)),await n.close()}catch(e){await n.abort(e)}}))}function $c(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}function Xc(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, not "+e)}function eh(e,...t){if(!((r=e)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function th(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function rh(e,t){eh(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const nh="object"==typeof t&&"crypto"in t?t.crypto:void 0,ih=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),sh=(e,t)=>e<<32-t|e>>>t,ah=(e,t)=>e<<t|e>>>32-t>>>0,oh=68===new Uint8Array(new Uint32Array([287454020]).buffer)[0];
|
|
5
|
+
/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ch(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function hh(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}function uh(e){return"string"==typeof e&&(e=hh(e)),eh(e),e}function lh(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];eh(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}class yh{clone(){return this._cloneInto()}}function fh(e){const t=t=>e().update(uh(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function gh(e=32){if(nh&&"function"==typeof nh.getRandomValues)return nh.getRandomValues(new Uint8Array(e));if(nh&&"function"==typeof nh.randomBytes)return nh.randomBytes(e);throw Error("crypto.getRandomValues must be defined")}const ph=(e,t,r)=>e&t^~e&r,dh=(e,t,r)=>e&t^e&r^t&r;class Ah extends yh{constructor(e,t,r,n){super(),this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=n,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=ih(this.buffer)}update(e){th(this);const{view:t,buffer:r,blockLen:n}=this,i=(e=uh(e)).length;for(let s=0;s<i;){const a=Math.min(n-this.pos,i-s);if(a!==n)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===n&&(this.process(t,0),this.pos=0);else{const t=ih(e);for(;n<=i-s;s+=n)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){th(this),rh(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:n,isLE:i}=this;let{pos:s}=this;t[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>n-s&&(this.process(r,0),s=0);for(let e=s;e<n;e++)t[e]=0;!function(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s),c=n?4:0,h=n?0:4;e.setUint32(t+c,a,n),e.setUint32(t+h,o,n)}(r,n-8,BigInt(8*this.length),i),this.process(r,0);const a=ih(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,h[e],i)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:n,finished:i,destroyed:s,pos:a}=this;return e.length=n,e.pos=a,e.finished=i,e.destroyed=s,n%t&&e.buffer.set(r),e}}const wh=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),mh=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),bh=/* @__PURE__ */new Uint32Array(64);class Eh extends Ah{constructor(){super(64,32,8,!1),this.A=0|mh[0],this.B=0|mh[1],this.C=0|mh[2],this.D=0|mh[3],this.E=0|mh[4],this.F=0|mh[5],this.G=0|mh[6],this.H=0|mh[7]}get(){const{A:e,B:t,C:r,D:n,E:i,F:s,G:a,H:o}=this;return[e,t,r,n,i,s,a,o]}set(e,t,r,n,i,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)bh[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=bh[e-15],r=bh[e-2],n=sh(t,7)^sh(t,18)^t>>>3,i=sh(r,17)^sh(r,19)^r>>>10;bh[e]=i+bh[e-7]+n+bh[e-16]|0}let{A:r,B:n,C:i,D:s,E:a,F:o,G:c,H:h}=this;for(let e=0;e<64;e++){const t=h+(sh(a,6)^sh(a,11)^sh(a,25))+ph(a,o,c)+wh[e]+bh[e]|0,u=(sh(r,2)^sh(r,13)^sh(r,22))+dh(r,n,i)|0;h=c,c=o,o=a,a=s+t|0,s=i,i=n,n=r,r=t+u|0}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,n,i,s,a,o,c,h)}roundClean(){bh.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class kh extends Eh{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const vh=/* @__PURE__ */fh((()=>new Eh)),Bh=/* @__PURE__ */fh((()=>new kh));class Ih extends yh{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,function(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.wrapConstructor");Xc(e.outputLen),Xc(e.blockLen)}(e);const r=uh(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const n=this.blockLen,i=new Uint8Array(n);i.set(r.length>n?e.create().update(r).digest():r);for(let e=0;e<i.length;e++)i[e]^=54;this.iHash.update(i),this.oHash=e.create();for(let e=0;e<i.length;e++)i[e]^=106;this.oHash.update(i),i.fill(0)}update(e){return th(this),this.iHash.update(e),this}digestInto(e){th(this),eh(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:n,destroyed:i,blockLen:s,outputLen:a}=this;return e.finished=n,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const Sh=(e,t,r)=>new Ih(e,t).update(r).digest();Sh.create=(e,t)=>new Ih(e,t)
|
|
6
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */;const Kh=/* @__PURE__ */BigInt(0),Ch=/* @__PURE__ */BigInt(1),Ph=/* @__PURE__ */BigInt(2);function Uh(e){return e instanceof Uint8Array||null!=e&&"object"==typeof e&&"Uint8Array"===e.constructor.name}function Dh(e){if(!Uh(e))throw Error("Uint8Array expected")}function xh(e,t){if("boolean"!=typeof t)throw Error(`${e} must be valid boolean, got "${t}".`)}const Qh=/* @__PURE__ */Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function Rh(e){Dh(e);let t="";for(let r=0;r<e.length;r++)t+=Qh[e[r]];return t}function Mh(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function Lh(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return BigInt(""===e?"0":"0x"+e)}const Th={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function Fh(e){return e>=Th._0&&e<=Th._9?e-Th._0:e>=Th._A&&e<=Th._F?e-(Th._A-10):e>=Th._a&&e<=Th._f?e-(Th._a-10):void 0}function Nh(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);const t=e.length,r=t/2;if(t%2)throw Error("padded hex string expected, got unpadded hex of length "+t);const n=new Uint8Array(r);for(let t=0,i=0;t<r;t++,i+=2){const r=Fh(e.charCodeAt(i)),s=Fh(e.charCodeAt(i+1));if(void 0===r||void 0===s){const t=e[i]+e[i+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+i)}n[t]=16*r+s}return n}function Hh(e){return Lh(Rh(e))}function Oh(e){return Dh(e),Lh(Rh(Uint8Array.from(e).reverse()))}function zh(e,t){return Nh(e.toString(16).padStart(2*t,"0"))}function _h(e,t){return zh(e,t).reverse()}function Gh(e,t,r){let n;if("string"==typeof t)try{n=Nh(t)}catch(r){throw Error(`${e} must be valid hex string, got "${t}". Cause: ${r}`)}else{if(!Uh(t))throw Error(e+" must be hex string or Uint8Array");n=Uint8Array.from(t)}const i=n.length;if("number"==typeof r&&i!==r)throw Error(`${e} expected ${r} bytes, got ${i}`);return n}function jh(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];Dh(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}const qh=e=>"bigint"==typeof e&&Kh<=e;function Vh(e,t,r){return qh(e)&&qh(t)&&qh(r)&&t<=e&&e<r}function Wh(e,t,r,n){if(!Vh(t,r,n))throw Error(`expected valid ${e}: ${r} <= n < ${n}, got ${typeof t} ${t}`)}function Zh(e){let t;for(t=0;e>Kh;e>>=Ch,t+=1);return t}const Yh=e=>(Ph<<BigInt(e-1))-Ch,Jh=e=>new Uint8Array(e),$h=e=>Uint8Array.from(e);function Xh(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let n=Jh(e),i=Jh(e),s=0;const a=()=>{n.fill(1),i.fill(0),s=0},o=(...e)=>r(i,n,...e),c=(e=Jh())=>{i=o($h([0]),e),n=o(),0!==e.length&&(i=o($h([1]),e),n=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){n=o();const t=n.slice();r.push(t),e+=n.length}return jh(...r)};return(e,t)=>{let r;for(a(),c(e);!(r=t(h()));)c();return a(),r}}const eu={bigint:e=>"bigint"==typeof e,function:e=>"function"==typeof e,boolean:e=>"boolean"==typeof e,string:e=>"string"==typeof e,stringOrUint8Array:e=>"string"==typeof e||Uh(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>"function"==typeof e&&Number.isSafeInteger(e.outputLen)};function tu(e,t,r={}){const n=(t,r,n)=>{const i=eu[r];if("function"!=typeof i)throw Error(`Invalid validator "${r}", expected function`);const s=e[t];if(!(n&&void 0===s||i(s,e)))throw Error(`Invalid param ${t+""}=${s} (${typeof s}), expected ${r}`)};for(const[e,r]of Object.entries(t))n(e,r,!1);for(const[e,t]of Object.entries(r))n(e,t,!0);return e}function ru(e){const t=new WeakMap;return(r,...n)=>{const i=t.get(r);if(void 0!==i)return i;const s=e(r,...n);return t.set(r,s),s}}var nu=/*#__PURE__*/Object.freeze({__proto__:null,aInRange:Wh,abool:xh,abytes:Dh,bitGet:function(e,t){return e>>BigInt(t)&Ch},bitLen:Zh,bitMask:Yh,bitSet:function(e,t,r){return e|(r?Ch:Kh)<<BigInt(t)},bytesToHex:Rh,bytesToNumberBE:Hh,bytesToNumberLE:Oh,concatBytes:jh,createHmacDrbg:Xh,ensureBytes:Gh,equalBytes:function(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r},hexToBytes:Nh,hexToNumber:Lh,inRange:Vh,isBytes:Uh,memoized:ru,notImplemented:()=>{throw Error("not implemented")},numberToBytesBE:zh,numberToBytesLE:_h,numberToHexUnpadded:Mh,numberToVarBytesBE:function(e){return Nh(Mh(e))},utf8ToBytes:function(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))},validateObject:tu});
|
|
7
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const iu=BigInt(0),su=BigInt(1),au=BigInt(2),ou=BigInt(3),cu=BigInt(4),hu=BigInt(5),uu=BigInt(8);function lu(e,t){const r=e%t;return r>=iu?r:t+r}function yu(e,t,r){if(r<=iu||t<iu)throw Error("Expected power/modulo > 0");if(r===su)return iu;let n=su;for(;t>iu;)t&su&&(n=n*e%r),e=e*e%r,t>>=su;return n}function fu(e,t,r){let n=e;for(;t-- >iu;)n*=n,n%=r;return n}function gu(e,t){if(e===iu||t<=iu)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=lu(e,t),n=t,i=iu,s=su;for(;r!==iu;){const e=n%r,t=i-s*(n/r);n=r,r=e,i=s,s=t}if(n!==su)throw Error("invert: does not exist");return lu(i,t)}function pu(e){if(e%cu===ou){const t=(e+su)/cu;return function(e,r){const n=e.pow(r,t);if(!e.eql(e.sqr(n),r))throw Error("Cannot find square root");return n}}if(e%uu===hu){const t=(e-hu)/uu;return function(e,r){const n=e.mul(r,au),i=e.pow(n,t),s=e.mul(r,i),a=e.mul(e.mul(s,au),i),o=e.mul(s,e.sub(a,e.ONE));if(!e.eql(e.sqr(o),r))throw Error("Cannot find square root");return o}}return function(e){const t=(e-su)/au;let r,n,i;for(r=e-su,n=0;r%au===iu;r/=au,n++);for(i=au;i<e&&yu(i,t,e)!==e-su;i++);if(1===n){const t=(e+su)/cu;return function(e,r){const n=e.pow(r,t);if(!e.eql(e.sqr(n),r))throw Error("Cannot find square root");return n}}const s=(r+su)/au;return function(e,a){if(e.pow(a,t)===e.neg(e.ONE))throw Error("Cannot find square root");let o=n,c=e.pow(e.mul(e.ONE,i),r),h=e.pow(a,s),u=e.pow(a,r);for(;!e.eql(u,e.ONE);){if(e.eql(u,e.ZERO))return e.ZERO;let t=1;for(let r=e.sqr(u);t<o&&!e.eql(r,e.ONE);t++)r=e.sqr(r);const r=e.pow(c,su<<BigInt(o-t-1));c=e.sqr(r),h=e.mul(h,r),u=e.mul(u,c),o=t}return h}}(e)}BigInt(9),BigInt(16);const du=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Au(e,t){const r=void 0!==t?t:e.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function wu(e,t,r=!1,n={}){if(e<=iu)throw Error("Expected Field ORDER > 0, got "+e);const{nBitLength:i,nByteLength:s}=Au(e,t);if(s>2048)throw Error("Field lengths over 2048 bytes are not supported");const a=pu(e),o=Object.freeze({ORDER:e,BITS:i,BYTES:s,MASK:Yh(i),ZERO:iu,ONE:su,create:t=>lu(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("Invalid field element: expected bigint, got "+typeof t);return iu<=t&&t<e},is0:e=>e===iu,isOdd:e=>(e&su)===su,neg:t=>lu(-t,e),eql:(e,t)=>e===t,sqr:t=>lu(t*t,e),add:(t,r)=>lu(t+r,e),sub:(t,r)=>lu(t-r,e),mul:(t,r)=>lu(t*r,e),pow:(e,t)=>function(e,t,r){if(r<iu)throw Error("Expected power > 0");if(r===iu)return e.ONE;if(r===su)return t;let n=e.ONE,i=t;for(;r>iu;)r&su&&(n=e.mul(n,i)),i=e.sqr(i),r>>=su;return n}(o,e,t),div:(t,r)=>lu(t*gu(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>gu(t,e),sqrt:n.sqrt||(e=>a(o,e)),invertBatch:e=>function(e,t){const r=Array(t.length),n=t.reduce(((t,n,i)=>e.is0(n)?t:(r[i]=t,e.mul(t,n))),e.ONE),i=e.inv(n);return t.reduceRight(((t,n,i)=>e.is0(n)?t:(r[i]=e.mul(t,r[i]),e.mul(t,n))),i),r}(o,e),cmov:(e,t,r)=>r?t:e,toBytes:e=>r?_h(e,s):zh(e,s),fromBytes:e=>{if(e.length!==s)throw Error(`Fp.fromBytes: expected ${s}, got ${e.length}`);return r?Oh(e):Hh(e)}});return Object.freeze(o)}function mu(e){if("bigint"!=typeof e)throw Error("field order must be bigint");const t=e.toString(2).length;return Math.ceil(t/8)}function bu(e){const t=mu(e);return t+Math.ceil(t/2)}
|
|
6
8
|
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
|
|
7
|
-
const
|
|
8
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:mc,hexToBytes:bc}=Zo,Ec={Err:class extends Error{constructor(e=""){super(e)}},_parseInt(e){const{Err:t}=Ec;if(e.length<2||2!==e[0])throw new t("Invalid signature integer tag");const r=e[1],i=e.subarray(2,r+2);if(!r||i.length!==r)throw new t("Invalid signature integer: wrong length");if(128&i[0])throw new t("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new t("Invalid signature integer: unnecessary leading zero");return{d:mc(i),l:e.subarray(r+2)}},toSig(e){const{Err:t}=Ec,r="string"==typeof e?bc(e):e;Uo(r);let i=r.length;if(i<2||48!=r[0])throw new t("Invalid signature tag");if(r[1]!==i-2)throw new t("Invalid signature: incorrect length");const{d:n,l:s}=Ec._parseInt(r.subarray(2)),{d:a,l:o}=Ec._parseInt(s);if(o.length)throw new t("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(e){const t=e=>8&Number.parseInt(e[0],16)?"00"+e:e,r=e=>{const t=e.toString(16);return 1&t.length?"0"+t:t},i=t(r(e.s)),n=t(r(e.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},kc=BigInt(0),vc=BigInt(1);BigInt(2);const Ic=BigInt(3);function Bc(e){const t=function(e){const t=wc(e);Wo(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=t;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}(e),{Fp:r}=t,i=t.toBytes||((e,t,i)=>{const n=t.toAffine();return Go(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=t.fromBytes||(e=>{const t=e.subarray(1);return{x:r.fromBytes(t.subarray(0,r.BYTES)),y:r.fromBytes(t.subarray(r.BYTES,2*r.BYTES))}});function s(e){const{a:i,b:n}=t,s=r.sqr(e),a=r.mul(s,e);return r.add(r.add(a,r.mul(e,i)),n)}if(!r.eql(r.sqr(t.Gy),s(t.Gx)))throw Error("bad generator point: equation left != right");function a(e){return"bigint"==typeof e&&kc<e&&e<t.n}function o(e){if(!a(e))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(e){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=t;if(r&&"bigint"!=typeof e){if(Po(e)&&(e=Qo(e)),"string"!=typeof e||!r.includes(e.length))throw Error("Invalid key");e=e.padStart(2*i,"0")}let a;try{a="bigint"==typeof e?e:No(zo("private key",e,i))}catch(t){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof e}`)}return n&&(a=sc(a,s)),o(a),a}const h=new Map;function u(e){if(!(e instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(e,t,i){if(this.px=e,this.py=t,this.pz=i,null==e||!r.isValid(e))throw Error("x required");if(null==t||!r.isValid(t))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(e){const{x:t,y:i}=e||{};if(!e||!r.isValid(t)||!r.isValid(i))throw Error("invalid affine point");if(e instanceof l)throw Error("projective point not allowed");const n=e=>r.eql(e,r.ZERO);return n(t)&&n(i)?l.ZERO:new l(t,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}static fromHex(e){const t=l.fromAffine(n(zo("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return l.BASE.multiply(c(e))}_setWindowSize(e){this._WINDOW_SIZE=e,h.delete(this)}assertValidity(){if(this.is0()){if(t.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:e,y:i}=this.toAffine();if(!r.isValid(e)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(e);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:e}=this.toAffine();if(r.isOdd)return!r.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){u(e);const{px:t,py:i,pz:n}=this,{px:s,py:a,pz:o}=e,c=r.eql(r.mul(t,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:e,b:i}=t,n=r.mul(i,Ic),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,y=r.mul(s,s),f=r.mul(a,a),g=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(e,u),h=r.mul(n,g),h=r.add(c,h),c=r.sub(f,h),h=r.add(f,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),g=r.mul(e,g),p=r.sub(y,g),p=r.mul(e,p),p=r.add(p,u),u=r.add(y,y),y=r.add(u,y),y=r.add(y,g),y=r.mul(y,p),h=r.add(h,y),g=r.mul(a,o),g=r.add(g,g),y=r.mul(g,p),c=r.sub(c,y),u=r.mul(g,f),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(e){u(e);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=e;let h=r.ZERO,y=r.ZERO,f=r.ZERO;const g=t.a,p=r.mul(t.b,Ic);let d=r.mul(i,a),A=r.mul(n,o),w=r.mul(s,c),m=r.add(i,n),b=r.add(a,o);m=r.mul(m,b),b=r.add(d,A),m=r.sub(m,b),b=r.add(i,s);let E=r.add(a,c);return b=r.mul(b,E),E=r.add(d,w),b=r.sub(b,E),E=r.add(n,s),h=r.add(o,c),E=r.mul(E,h),h=r.add(A,w),E=r.sub(E,h),f=r.mul(g,b),h=r.mul(p,w),f=r.add(h,f),h=r.sub(A,f),f=r.add(A,f),y=r.mul(h,f),A=r.add(d,d),A=r.add(A,d),w=r.mul(g,w),b=r.mul(p,b),A=r.add(A,w),w=r.sub(d,w),w=r.mul(g,w),b=r.add(b,w),d=r.mul(A,b),y=r.add(y,d),d=r.mul(E,b),h=r.mul(m,h),h=r.sub(h,d),d=r.mul(m,A),f=r.mul(E,f),f=r.add(f,d),new l(h,y,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(l.ZERO)}wNAF(e){return f.wNAFCached(this,h,e,(e=>{const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}))}multiplyUnsafe(e){const i=l.ZERO;if(e===kc)return i;if(o(e),e===vc)return this;const{endo:n}=t;if(!n)return f.unsafeLadder(this,e);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(e),u=i,y=i,g=this;for(;a>kc||h>kc;)a&vc&&(u=u.add(g)),h&vc&&(y=y.add(g)),g=g.double(),a>>=vc,h>>=vc;return s&&(u=u.negate()),c&&(y=y.negate()),y=new l(r.mul(y.px,n.beta),y.py,y.pz),u.add(y)}multiply(e){o(e);let i,n,s=e;const{endo:a}=t;if(a){const{k1neg:e,k1:t,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(t),{p:y,f:g}=this.wNAF(c);h=f.constTimeNegate(e,h),y=f.constTimeNegate(o,y),y=new l(r.mul(y.px,a.beta),y.py,y.pz),i=h.add(y),n=u.add(g)}else{const{p:e,f:t}=this.wNAF(s);i=e,n=t}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(e,t,r){const i=l.BASE,n=(e,t)=>t!==kc&&t!==vc&&e.equals(i)?e.multiply(t):e.multiplyUnsafe(t),s=n(this,t).add(n(e,r));return s.is0()?void 0:s}toAffine(e){const{px:t,py:i,pz:n}=this,s=this.is0();null==e&&(e=s?r.ONE:r.inv(n));const a=r.mul(t,e),o=r.mul(i,e),c=r.mul(n,e);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:e,isTorsionFree:r}=t;if(e===vc)return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:e,clearCofactor:r}=t;return e===vc?this:r?r(l,this):this.multiplyUnsafe(t.h)}toRawBytes(e=!0){return this.assertValidity(),i(l,this,e)}toHex(e=!0){return Qo(this.toRawBytes(e))}}l.BASE=new l(t.Gx,t.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const y=t.nBitLength,f=Ac(l,t.endo?Math.ceil(y/2):y);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function Sc(e){const t=function(e){const t=wc(e);return Wo(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}(e),{Fp:r,n:i}=t,n=r.BYTES+1,s=2*r.BYTES+1;function a(e){return sc(e,i)}function o(e){return cc(e,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=Bc({...t,toBytes(e,t,i){const n=t.toAffine(),s=r.toBytes(n.x),a=Go;return i?a(Uint8Array.from([t.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(e){const t=e.length,i=e[0],a=e.subarray(1);if(t!==n||2!==i&&3!==i){if(t===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${t} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const e=No(a);if(!(kc<(o=e)&&o<r.ORDER))throw Error("Point is not on curve");const t=u(e);let n;try{n=r.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("Point is not on curve"+t)}return!(1&~i)!==((n&vc)===vc)&&(n=r.neg(n)),{x:e,y:n}}var o}}),y=e=>Qo(Ho(e,t.nByteLength));function f(e){return e>i>>vc}const g=(e,t,r)=>No(e.slice(t,r));class p{constructor(e,t,r){this.r=e,this.s=t,this.recovery=r,this.assertValidity()}static fromCompact(e){const r=t.nByteLength;return e=zo("compactSignature",e,2*r),new p(g(e,0,r),g(e,r,2*r))}static fromDER(e){const{r:t,s:r}=Ec.toSig(zo("DER",e));return new p(t,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(e){return new p(this.r,this.s,e)}recoverPublicKey(e){const{r:i,s:n,recovery:s}=this,h=m(zo("msgHash",e));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i+t.n:i;if(u>=r.ORDER)throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",f=c.fromHex(l+y(u)),g=o(u),p=a(-h*g),d=a(n*g),A=c.BASE.multiplyAndAddUnsafe(f,p,d);if(!A)throw Error("point at infinify");return A.assertValidity(),A}hasHighS(){return f(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(-this.s),this.recovery):this}toDERRawBytes(){return _o(this.toDERHex())}toDERHex(){return Ec.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return _o(this.toCompactHex())}toCompactHex(){return y(this.r)+y(this.s)}}const d={isValidPrivateKey(e){try{return h(e),!0}catch(e){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const e=gc(t.n);return function(e,t,r=!1){const i=e.length,n=fc(t),s=gc(t);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=sc(r?No(e):Fo(e),t-Xo)+Xo;return r?Oo(a,n):Ho(a,n)}(t.randomBytes(e),t.n)},precompute:(e=8,t=c.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)};function A(e){const t=Po(e),r="string"==typeof e,i=(t||r)&&e.length;return t?i===n||i===s:r?i===2*n||i===2*s:e instanceof c}const w=t.bits2int||function(e){const r=No(e),i=8*e.length-t.nBitLength;return i>0?r>>BigInt(i):r},m=t.bits2int_modN||function(e){return a(w(e))},b=jo(t.nBitLength);function E(e){if("bigint"!=typeof e)throw Error("bigint expected");if(!(kc<=e&&e<b))throw Error("bigint expected < 2^"+t.nBitLength);return Ho(e,t.nByteLength)}function k(e,i,n=v){if(["recovered","canonical"].some((e=>e in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=t;let{lowS:y,prehash:g,extraEntropy:d}=n;null==y&&(y=!0),e=zo("msgHash",e),g&&(e=zo("prehashed msgHash",s(e)));const A=m(e),b=h(i),k=[E(b),E(A)];if(null!=d&&!1!==d){const e=!0===d?u(r.BYTES):d;k.push(zo("extraEntropy",e))}const I=Go(...k),B=A;return{seed:I,k2sig:function(e){const t=w(e);if(!l(t))return;const r=o(t),i=c.BASE.multiply(t).toAffine(),n=a(i.x);if(n===kc)return;const s=a(r*a(B+n*b));if(s===kc)return;let h=(i.x===n?0:2)|Number(i.y&vc),u=s;return y&&f(s)&&(u=function(e){return f(e)?a(-e):e}(s),h^=1),new p(n,u,h)}}}const v={lowS:t.lowS,prehash:!1},I={lowS:t.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:t,getPublicKey:function(e,t=!0){return c.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(A(e))throw Error("first arg must be private key");if(!A(t))throw Error("second arg must be public key");return c.fromHex(t).multiply(h(e)).toRawBytes(r)},sign:function(e,r,i=v){const{seed:n,k2sig:s}=k(e,r,i),a=t;return Yo(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(e,r,i,n=I){const s=e;if(r=zo("msgHash",r),i=zo("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,y;try{if("string"==typeof s||Po(s))try{l=p.fromDER(s)}catch(e){if(!(e instanceof Ec.Err))throw e;l=p.fromCompact(s)}else{if("object"!=typeof s||"bigint"!=typeof s.r||"bigint"!=typeof s.s)throw Error("PARSE");{const{r:e,s:t}=s;l=new p(e,t)}}y=c.fromHex(i)}catch(e){if("PARSE"===e.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=t.hash(r));const{r:f,s:g}=l,d=m(r),A=o(g),w=a(d*A),b=a(f*A),E=c.BASE.multiplyAndAddUnsafe(y,w,b)?.toAffine();return!!E&&a(E.x)===f},ProjectivePoint:c,Signature:p,utils:d}}
|
|
9
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Cc(e){return{hash:e,hmac:(t,...r)=>So(e,t,Eo(...r)),randomBytes:Io}}function Kc(e,t){const r=t=>Sc({...e,...Cc(t)});return Object.freeze({...r(t),create:r})}BigInt(4);const Dc=(e,t,r)=>e&t^~e&r,Pc=(e,t,r)=>e&t^e&r^t&r;class Uc extends ko{constructor(e,t,r,i){super(),this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=fo(this.buffer)}update(e){uo(this);const{view:t,buffer:r,blockLen:i}=this,n=(e=bo(e)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(t,0),this.pos=0);else{const t=fo(e);for(;i<=n-s;s+=i)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){uo(this),lo(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;t[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let e=s;e<i;e++)t[e]=0;!function(e,t,r,i){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,i);const n=BigInt(32),s=BigInt(4294967295),a=Number(r>>n&s),o=Number(r&s),c=i?4:0,h=i?0:4;e.setUint32(t+c,a,i),e.setUint32(t+h,o,i)}(r,i-8,BigInt(8*this.length),n),this.process(r,0);const a=fo(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,h[e],n)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return e.length=i,e.pos=a,e.finished=n,e.destroyed=s,i%t&&e.buffer.set(r),e}}const xc=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Qc=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Rc=/* @__PURE__ */new Uint32Array(64);class Mc extends Uc{constructor(){super(64,32,8,!1),this.A=0|Qc[0],this.B=0|Qc[1],this.C=0|Qc[2],this.D=0|Qc[3],this.E=0|Qc[4],this.F=0|Qc[5],this.G=0|Qc[6],this.H=0|Qc[7]}get(){const{A:e,B:t,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[e,t,r,i,n,s,a,o]}set(e,t,r,i,n,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)Rc[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=Rc[e-15],r=Rc[e-2],i=go(t,7)^go(t,18)^t>>>3,n=go(r,17)^go(r,19)^r>>>10;Rc[e]=n+Rc[e-7]+i+Rc[e-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let e=0;e<64;e++){const t=h+(go(a,6)^go(a,11)^go(a,25))+Dc(a,o,c)+xc[e]+Rc[e]|0,u=(go(r,2)^go(r,13)^go(r,22))+Pc(r,i,n)|0;h=c,c=o,o=a,a=s+t|0,s=n,n=i,i=r,r=t+u|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){Rc.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class Tc extends Mc{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Lc=/* @__PURE__ */vo((()=>new Mc)),_c=/* @__PURE__ */vo((()=>new Tc)),Nc=yc(BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),Fc=Kc({a:Nc.create(BigInt("-3")),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Nc,n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:BigInt(1),lowS:!1},Lc),Hc=/* @__PURE__ */BigInt(2**32-1),Oc=/* @__PURE__ */BigInt(32);function zc(e,t=!1){return t?{h:Number(e&Hc),l:Number(e>>Oc&Hc)}:{h:0|Number(e>>Oc&Hc),l:0|Number(e&Hc)}}function Gc(e,t=!1){let r=new Uint32Array(e.length),i=new Uint32Array(e.length);for(let n=0;n<e.length;n++){const{h:s,l:a}=zc(e[n],t);[r[n],i[n]]=[s,a]}return[r,i]}const jc=(e,t,r)=>e<<r|t>>>32-r,qc=(e,t,r)=>t<<r|e>>>32-r,Vc=(e,t,r)=>t<<r-32|e>>>64-r,Yc=(e,t,r)=>e<<r-32|t>>>64-r;const Jc={fromBig:zc,split:Gc,toBig:(e,t)=>BigInt(e>>>0)<<Oc|BigInt(t>>>0),shrSH:(e,t,r)=>e>>>r,shrSL:(e,t,r)=>e<<32-r|t>>>r,rotrSH:(e,t,r)=>e>>>r|t<<32-r,rotrSL:(e,t,r)=>e<<32-r|t>>>r,rotrBH:(e,t,r)=>e<<64-r|t>>>r-32,rotrBL:(e,t,r)=>e>>>r-32|t<<64-r,rotr32H:(e,t)=>t,rotr32L:(e,t)=>e,rotlSH:jc,rotlSL:qc,rotlBH:Vc,rotlBL:Yc,add:function(e,t,r,i){const n=(t>>>0)+(i>>>0);return{h:e+r+(n/2**32|0)|0,l:0|n}},add3L:(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),add3H:(e,t,r,i)=>t+r+i+(e/2**32|0)|0,add4L:(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),add4H:(e,t,r,i,n)=>t+r+i+n+(e/2**32|0)|0,add5H:(e,t,r,i,n,s)=>t+r+i+n+s+(e/2**32|0)|0,add5L:(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0)},[Wc,Zc]=/* @__PURE__ */(()=>Jc.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),$c=/* @__PURE__ */new Uint32Array(80),Xc=/* @__PURE__ */new Uint32Array(80);class eh extends Uc{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:y,Gl:f,Hh:g,Hl:p}=this;return[e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p]}set(e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|y,this.Gl=0|f,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)$c[r]=e.getUint32(t),Xc[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|$c[e-15],r=0|Xc[e-15],i=Jc.rotrSH(t,r,1)^Jc.rotrSH(t,r,8)^Jc.shrSH(t,r,7),n=Jc.rotrSL(t,r,1)^Jc.rotrSL(t,r,8)^Jc.shrSL(t,r,7),s=0|$c[e-2],a=0|Xc[e-2],o=Jc.rotrSH(s,a,19)^Jc.rotrBH(s,a,61)^Jc.shrSH(s,a,6),c=Jc.rotrSL(s,a,19)^Jc.rotrBL(s,a,61)^Jc.shrSL(s,a,6),h=Jc.add4L(n,c,Xc[e-7],Xc[e-16]),u=Jc.add4H(h,i,o,$c[e-7],$c[e-16]);$c[e]=0|u,Xc[e]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:y,Fl:f,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=Jc.rotrSH(u,l,14)^Jc.rotrSH(u,l,18)^Jc.rotrBH(u,l,41),w=Jc.rotrSL(u,l,14)^Jc.rotrSL(u,l,18)^Jc.rotrBL(u,l,41),m=u&y^~u&g,b=l&f^~l&p,E=Jc.add5L(A,w,b,Zc[e],Xc[e]),k=Jc.add5H(E,d,t,m,Wc[e],$c[e]),v=0|E,I=Jc.rotrSH(r,i,28)^Jc.rotrBH(r,i,34)^Jc.rotrBH(r,i,39),B=Jc.rotrSL(r,i,28)^Jc.rotrBL(r,i,34)^Jc.rotrBL(r,i,39),S=r&n^r&a^n&a,C=i&s^i&o^s&o;d=0|g,A=0|p,g=0|y,p=0|f,y=0|u,f=0|l,({h:u,l}=Jc.add(0|c,0|h,0|k,0|v)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=Jc.add3L(v,B,C);r=Jc.add3H(K,k,I,S),i=0|K}({h:r,l:i}=Jc.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=Jc.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=Jc.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=Jc.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=Jc.add(0|this.Eh,0|this.El,0|u,0|l)),({h:y,l:f}=Jc.add(0|this.Fh,0|this.Fl,0|y,0|f)),({h:g,l:p}=Jc.add(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=Jc.add(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,i,n,s,a,o,c,h,u,l,y,f,g,p,d,A)}roundClean(){$c.fill(0),Xc.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class th extends eh{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const rh=/* @__PURE__ */vo((()=>new eh)),ih=/* @__PURE__ */vo((()=>new th)),nh=yc(BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),sh=Kc({a:nh.create(BigInt("-3")),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:nh,n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:BigInt(1),lowS:!1},ih),ah=yc(BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),oh={a:ah.create(BigInt("-3")),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:ah,n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:BigInt(1)},ch=Kc({a:oh.a,b:oh.b,Fp:ah,n:oh.n,Gx:oh.Gx,Gy:oh.Gy,h:oh.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},rh),hh=[],uh=[],lh=[],yh=/* @__PURE__ */BigInt(0),fh=/* @__PURE__ */BigInt(1),gh=/* @__PURE__ */BigInt(2),ph=/* @__PURE__ */BigInt(7),dh=/* @__PURE__ */BigInt(256),Ah=/* @__PURE__ */BigInt(113);for(let e=0,t=fh,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],hh.push(2*(5*i+r)),uh.push((e+1)*(e+2)/2%64);let n=yh;for(let e=0;e<7;e++)t=(t<<fh^(t>>ph)*Ah)%dh,t&gh&&(n^=fh<<(fh<</* @__PURE__ */BigInt(e))-fh);lh.push(n)}const[wh,mh]=/* @__PURE__ */Gc(lh,!0),bh=(e,t,r)=>r>32?Vc(e,t,r):jc(e,t,r),Eh=(e,t,r)=>r>32?Yc(e,t,r):qc(e,t,r);class kh extends ko{constructor(e,t,r,i=!1,n=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,co(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){Ao||wo(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const i=(t+8)%10,n=(t+2)%10,s=r[n],a=r[n+1],o=bh(s,a,1)^r[i],c=Eh(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],n=e[3];for(let r=0;r<24;r++){const i=uh[r],s=bh(t,n,i),a=Eh(t,n,i),o=hh[r];t=e[o],n=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let i=0;i<10;i++)r[i]=e[t+i];for(let i=0;i<10;i++)e[t+i]^=~r[(i+2)%10]&r[(i+4)%10]}e[0]^=wh[i],e[1]^=mh[i]}r.fill(0)}(this.state32,this.rounds),Ao||wo(this.state32),this.posOut=0,this.pos=0}update(e){uo(this);const{blockLen:t,state:r}=this,i=(e=bo(e)).length;for(let n=0;n<i;){const s=Math.min(t-this.pos,i-n);for(let t=0;t<s;t++)r[this.pos++]^=e[n++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:i}=this;e[r]^=t,128&t&&r===i-1&&this.keccak(),e[i-1]^=128,this.keccak()}writeInto(e){uo(this,!1),ho(e),this.finish();const t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return co(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(lo(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return e||(e=new kh(t,r,i,s,n)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=s,e.destroyed=this.destroyed,e}}const vh=(e,t,r)=>vo((()=>new kh(t,e,r))),Ih=/* @__PURE__ */vh(6,136,32),Bh=/* @__PURE__ */vh(6,72,64),Sh=/* @__PURE__ */((e,t,r)=>function(e){const t=(t,r)=>e(r).update(bo(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((i={})=>new kh(t,e,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),Ch=BigInt(0),Kh=BigInt(1),Dh=BigInt(2),Ph=BigInt(8),Uh={zip215:!0};function xh(e){const t=function(e){const t=wc(e);return Wo(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}(e),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=t,h=Dh<<BigInt(8*o)-Kh,u=r.create,l=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:r.sqrt(e*r.inv(t))}}catch(e){return{isValid:!1,value:Ch}}}),y=t.adjustScalarBytes||(e=>e),f=t.domain||((e,t,r)=>{if(t.length||r)throw Error("Contexts/pre-hash are not supported");return e}),g=e=>"bigint"==typeof e&&Ch<e,p=(e,t)=>g(e)&&g(t)&&e<t,d=e=>e===Ch||p(e,h);function A(e,t){if(p(e,t))return e;throw Error(`Expected valid scalar < ${t}, got ${typeof e} ${e}`)}function w(e){return e===Ch?e:A(e,i)}const m=new Map;function b(e){if(!(e instanceof E))throw Error("ExtendedPoint expected")}class E{constructor(e,t,r,i){if(this.ex=e,this.ey=t,this.ez=r,this.et=i,!d(e))throw Error("x required");if(!d(t))throw Error("y required");if(!d(r))throw Error("z required");if(!d(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(e){if(e instanceof E)throw Error("extended point not allowed");const{x:t,y:r}=e||{};if(!d(t)||!d(r))throw Error("invalid affine point");return new E(t,r,Kh,u(t*r))}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.ez)));return e.map(((e,r)=>e.toAffine(t[r]))).map(E.fromAffine)}_setWindowSize(e){this._WINDOW_SIZE=e,m.delete(this)}assertValidity(){const{a:e,d:r}=t;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i*i),c=u(n*n),h=u(s*s),l=u(h*h),y=u(o*e);if(u(h*u(y+c))!==u(l+u(r*u(o*c))))throw Error("bad point: equation left != right (1)");if(u(i*n)!==u(s*a))throw Error("bad point: equation left != right (2)")}equals(e){b(e);const{ex:t,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=e,o=u(t*a),c=u(n*i),h=u(r*a),l=u(s*i);return o===c&&h===l}is0(){return this.equals(E.ZERO)}negate(){return new E(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){const{a:e}=t,{ex:r,ey:i,ez:n}=this,s=u(r*r),a=u(i*i),o=u(Dh*u(n*n)),c=u(e*s),h=r+i,l=u(u(h*h)-s-a),y=c+a,f=y-o,g=c-a,p=u(l*f),d=u(y*g),A=u(l*g),w=u(f*y);return new E(p,d,w,A)}add(e){b(e);const{a:r,d:i}=t,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:y}=e;if(r===BigInt(-1)){const e=u((s-n)*(h+c)),t=u((s+n)*(h-c)),r=u(t-e);if(r===Ch)return this.double();const i=u(a*Dh*y),f=u(o*Dh*l),g=f+i,p=t+e,d=f-i,A=u(g*r),w=u(p*d),m=u(g*d),b=u(r*p);return new E(A,w,b,m)}const f=u(n*c),g=u(s*h),p=u(o*i*y),d=u(a*l),A=u((n+s)*(c+h)-f-g),w=d-p,m=d+p,k=u(g-r*f),v=u(A*w),I=u(m*k),B=u(A*k),S=u(w*m);return new E(v,I,S,B)}subtract(e){return this.add(e.negate())}wNAF(e){return I.wNAFCached(this,m,e,E.normalizeZ)}multiply(e){const{p:t,f:r}=this.wNAF(A(e,i));return E.normalizeZ([t,r])[0]}multiplyUnsafe(e){let t=w(e);return t===Ch?v:this.equals(v)||t===Kh?this:this.equals(k)?this.wNAF(t).p:I.unsafeLadder(this,t)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return I.unsafeLadder(this,i).is0()}toAffine(e){const{ex:t,ey:i,ez:n}=this,s=this.is0();null==e&&(e=s?Ph:r.inv(n));const a=u(t*e),o=u(i*e),c=u(n*e);if(s)return{x:Ch,y:Kh};if(c!==Kh)throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:e}=t;return e===Kh?this:this.multiplyUnsafe(e)}static fromHex(e,i=!1){const{d:n,a:s}=t,a=r.BYTES,o=(e=zo("pointHex",e,a)).slice(),c=e[a-1];o[a-1]=-129&c;const y=Fo(o);y===Ch||A(y,i?h:r.ORDER);const f=u(y*y),g=u(f-Kh),p=u(n*f-s);let{isValid:d,value:w}=l(g,p);if(!d)throw Error("Point.fromHex: invalid y coordinate");const m=(w&Kh)===Kh,b=!!(128&c);if(!i&&w===Ch&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==m&&(w=u(-w)),E.fromAffine({x:w,y})}static fromPrivateKey(e){return C(e).point}toRawBytes(){const{x:e,y:t}=this.toAffine(),i=Oo(t,r.BYTES);return i[i.length-1]|=e&Kh?128:0,i}toHex(){return Qo(this.toRawBytes())}}E.BASE=new E(t.Gx,t.Gy,Kh,u(t.Gx*t.Gy)),E.ZERO=new E(Ch,Kh,Kh,Ch);const{BASE:k,ZERO:v}=E,I=Ac(E,8*o);function B(e){return sc(e,i)}function S(e){return B(Fo(e))}function C(e){const t=o;e=zo("private key",e,t);const r=zo("hashed private key",s(e),2*t),i=y(r.slice(0,t)),n=r.slice(t,2*t),a=S(i),c=k.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(e=new Uint8Array,...t){const r=Go(...t);return S(s(f(r,zo("context",e),!!n)))}const D=Uh;k._setWindowSize(8);return{CURVE:t,getPublicKey:function(e){return C(e).pointBytes},sign:function(e,t,i={}){e=zo("message",e),n&&(e=n(e));const{prefix:s,scalar:a,pointBytes:c}=C(t),h=K(i.context,s,e),u=k.multiply(h).toRawBytes(),l=B(h+K(i.context,u,c,e)*a);return w(l),zo("result",Go(u,Oo(l,r.BYTES)),2*o)},verify:function(e,t,i,s=D){const{context:a,zip215:o}=s,c=r.BYTES;e=zo("signature",e,2*c),t=zo("message",t),n&&(t=n(t));const h=Fo(e.slice(c,2*c));let u,l,y;try{u=E.fromHex(i,o),l=E.fromHex(e.slice(0,c),o),y=k.multiplyUnsafe(h)}catch(e){return!1}if(!o&&u.isSmallOrder())return!1;const f=K(a,l.toRawBytes(),u.toRawBytes(),t);return l.add(u.multiplyUnsafe(f)).subtract(y).clearCofactor().equals(E.ZERO)},ExtendedPoint:E,utils:{getExtendedPublicKey:C,randomPrivateKey:()=>a(r.BYTES),precompute:(e=8,t=E.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)}}}
|
|
10
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Qh=BigInt(0),Rh=BigInt(1);function Mh(e){const t=(Wo(r=e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...r}));var r;const{P:i}=t,n=e=>sc(e,i),s=t.montgomeryBits,a=Math.ceil(s/8),o=t.nByteLength,c=t.adjustScalarBytes||(e=>e),h=t.powPminus2||(e=>ac(e,i-BigInt(2),i));function u(e,t,r){const i=n(e*(t-r));return[t=n(t-i),r=n(r+i)]}function l(e){if("bigint"==typeof e&&Qh<=e&&e<i)return e;throw Error("Expected valid scalar 0 < scalar < CURVE.P")}const y=(t.a-BigInt(2))/BigInt(4);function f(e){return Oo(n(e),a)}function g(e,t){const r=function(e){const t=zo("u coordinate",e,a);return 32===o&&(t[31]&=127),Fo(t)}(t),i=function(e){const t=zo("scalar",e),r=t.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return Fo(c(t))}(e),g=function(e,t){const r=l(e),i=l(t),a=r;let o,c=Rh,f=Qh,g=r,p=Rh,d=Qh;for(let e=BigInt(s-1);e>=Qh;e--){const t=i>>e&Rh;d^=t,o=u(d,c,g),c=o[0],g=o[1],o=u(d,f,p),f=o[0],p=o[1],d=t;const r=c+f,s=n(r*r),h=c-f,l=n(h*h),A=s-l,w=g+p,m=n((g-p)*r),b=n(w*h),E=m+b,k=m-b;g=n(E*E),p=n(a*n(k*k)),c=n(s*l),f=n(A*(s+n(y*A)))}o=u(d,c,g),c=o[0],g=o[1],o=u(d,f,p),f=o[0],p=o[1];const A=h(f);return n(c*A)}(r,i);if(g===Qh)throw Error("Invalid private or public key received");return f(g)}const p=f(t.Gu);function d(e){return g(e,p)}return{scalarMult:g,scalarMultBase:d,getSharedSecret:(e,t)=>g(e,t),getPublicKey:e=>d(e),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:p}}
|
|
11
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const
|
|
9
|
+
const Eu=BigInt(0),ku=BigInt(1),vu=new WeakMap,Bu=new WeakMap;function Iu(e,t){const r=(e,t)=>{const r=t.negate();return e?r:t},n=e=>{if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error(`Wrong window size=${e}, should be [1..${t}]`)},i=e=>{n(e);return{windows:Math.ceil(t/e)+1,windowSize:2**(e-1)}};return{constTimeNegate:r,unsafeLadder(t,r){let n=e.ZERO,i=t;for(;r>Eu;)r&ku&&(n=n.add(i)),i=i.double(),r>>=ku;return n},precomputeWindow(e,t){const{windows:r,windowSize:n}=i(t),s=[];let a=e,o=a;for(let e=0;e<r;e++){o=a,s.push(o);for(let e=1;e<n;e++)o=o.add(a),s.push(o);a=o.double()}return s},wNAF(t,n,s){const{windows:a,windowSize:o}=i(t);let c=e.ZERO,h=e.BASE;const u=BigInt(2**t-1),l=2**t,y=BigInt(t);for(let e=0;e<a;e++){const t=e*o;let i=Number(s&u);s>>=y,i>o&&(i-=l,s+=ku);const a=t,f=t+Math.abs(i)-1,g=e%2!=0,p=i<0;0===i?h=h.add(r(g,n[a])):c=c.add(r(p,n[f]))}return{p:c,f:h}},wNAFCached(e,t,r){const n=Bu.get(e)||1;let i=vu.get(e);return i||(i=this.precomputeWindow(e,n),1!==n&&vu.set(e,r(i))),this.wNAF(n,i,t)},setWindowSize(e,t){n(t),Bu.set(e,t),vu.delete(e)}}}function Su(e,t,r,n){if(!Array.isArray(r)||!Array.isArray(n)||n.length!==r.length)throw Error("arrays of points and scalars must have equal length");n.forEach(((e,r)=>{if(!t.isValid(e))throw Error("wrong scalar at index "+r)})),r.forEach(((t,r)=>{if(!(t instanceof e))throw Error("wrong point at index "+r)}));const i=Zh(BigInt(r.length)),s=i>12?i-3:i>4?i-2:i?2:1,a=(1<<s)-1,o=Array(a+1).fill(e.ZERO),c=Math.floor((t.BITS-1)/s)*s;let h=e.ZERO;for(let t=c;t>=0;t-=s){o.fill(e.ZERO);for(let e=0;e<n.length;e++){const i=n[e],s=Number(i>>BigInt(t)&BigInt(a));o[s]=o[s].add(r[e])}let i=e.ZERO;for(let t=o.length-1,r=e.ZERO;t>0;t--)r=r.add(o[t]),i=i.add(r);if(h=h.add(i),0!==t)for(let e=0;e<s;e++)h=h.double()}return h}function Ku(e){return tu(e.Fp,du.reduce(((e,t)=>(e[t]="function",e)),{ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),tu(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Au(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}
|
|
10
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Cu(e){void 0!==e.lowS&&xh("lowS",e.lowS),void 0!==e.prehash&&xh("prehash",e.prehash)}const{bytesToNumberBE:Pu,hexToBytes:Uu}=nu,Du={Err:class extends Error{constructor(e=""){super(e)}},_tlv:{encode:(e,t)=>{const{Err:r}=Du;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(1&t.length)throw new r("tlv.encode: unpadded data");const n=t.length/2,i=Mh(n);if(i.length/2&128)throw new r("tlv.encode: long form length too big");const s=n>127?Mh(i.length/2|128):"";return`${Mh(e)}${s}${i}${t}`},decode(e,t){const{Err:r}=Du;let n=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");const i=t[n++];let s=0;if(!!(128&i)){const e=127&i;if(!e)throw new r("tlv.decode(long): indefinite length not supported");if(e>4)throw new r("tlv.decode(long): byte length is too big");const a=t.subarray(n,n+e);if(a.length!==e)throw new r("tlv.decode: length bytes not complete");if(0===a[0])throw new r("tlv.decode(long): zero leftmost byte");for(const e of a)s=s<<8|e;if(n+=e,s<128)throw new r("tlv.decode(long): not minimal encoding")}else s=i;const a=t.subarray(n,n+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(n+s)}}},_int:{encode(e){const{Err:t}=Du;if(e<xu)throw new t("integer: negative integers are not allowed");let r=Mh(e);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new t("unexpected assertion");return r},decode(e){const{Err:t}=Du;if(128&e[0])throw new t("Invalid signature integer: negative");if(0===e[0]&&!(128&e[1]))throw new t("Invalid signature integer: unnecessary leading zero");return Pu(e)}},toSig(e){const{Err:t,_int:r,_tlv:n}=Du,i="string"==typeof e?Uu(e):e;Dh(i);const{v:s,l:a}=n.decode(48,i);if(a.length)throw new t("Invalid signature: left bytes after parsing");const{v:o,l:c}=n.decode(2,s),{v:h,l:u}=n.decode(2,c);if(u.length)throw new t("Invalid signature: left bytes after parsing");return{r:r.decode(o),s:r.decode(h)}},hexFromSig(e){const{_tlv:t,_int:r}=Du,n=`${t.encode(2,r.encode(e.r))}${t.encode(2,r.encode(e.s))}`;return t.encode(48,n)}},xu=BigInt(0),Qu=BigInt(1);BigInt(2);const Ru=BigInt(3);function Mu(e){const t=function(e){const t=Ku(e);tu(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:n,a:i}=t;if(r){if(!n.eql(i,n.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}(e),{Fp:r}=t,n=wu(t.n,t.nBitLength),i=t.toBytes||((e,t,n)=>{const i=t.toAffine();return jh(Uint8Array.from([4]),r.toBytes(i.x),r.toBytes(i.y))}),s=t.fromBytes||(e=>{const t=e.subarray(1);return{x:r.fromBytes(t.subarray(0,r.BYTES)),y:r.fromBytes(t.subarray(r.BYTES,2*r.BYTES))}});function a(e){const{a:n,b:i}=t,s=r.sqr(e),a=r.mul(s,e);return r.add(r.add(a,r.mul(e,n)),i)}if(!r.eql(r.sqr(t.Gy),a(t.Gx)))throw Error("bad generator point: equation left != right");function o(e){const{allowedPrivateKeyLengths:r,nByteLength:n,wrapPrivateKey:i,n:s}=t;if(r&&"bigint"!=typeof e){if(Uh(e)&&(e=Rh(e)),"string"!=typeof e||!r.includes(e.length))throw Error("Invalid key");e=e.padStart(2*n,"0")}let a;try{a="bigint"==typeof e?e:Hh(Gh("private key",e,n))}catch(t){throw Error(`private key must be ${n} bytes, hex or bigint, not ${typeof e}`)}return i&&(a=lu(a,s)),Wh("private key",a,Qu,s),a}function c(e){if(!(e instanceof l))throw Error("ProjectivePoint expected")}const h=ru(((e,t)=>{const{px:n,py:i,pz:s}=e;if(r.eql(s,r.ONE))return{x:n,y:i};const a=e.is0();null==t&&(t=a?r.ONE:r.inv(s));const o=r.mul(n,t),c=r.mul(i,t),h=r.mul(s,t);if(a)return{x:r.ZERO,y:r.ZERO};if(!r.eql(h,r.ONE))throw Error("invZ was invalid");return{x:o,y:c}})),u=ru((e=>{if(e.is0()){if(t.allowInfinityPoint&&!r.is0(e.py))return;throw Error("bad point: ZERO")}const{x:n,y:i}=e.toAffine();if(!r.isValid(n)||!r.isValid(i))throw Error("bad point: x or y not FE");const s=r.sqr(i),o=a(n);if(!r.eql(s,o))throw Error("bad point: equation left != right");if(!e.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0}));class l{constructor(e,t,n){if(this.px=e,this.py=t,this.pz=n,null==e||!r.isValid(e))throw Error("x required");if(null==t||!r.isValid(t))throw Error("y required");if(null==n||!r.isValid(n))throw Error("z required");Object.freeze(this)}static fromAffine(e){const{x:t,y:n}=e||{};if(!e||!r.isValid(t)||!r.isValid(n))throw Error("invalid affine point");if(e instanceof l)throw Error("projective point not allowed");const i=e=>r.eql(e,r.ZERO);return i(t)&&i(n)?l.ZERO:new l(t,n,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}static fromHex(e){const t=l.fromAffine(s(Gh("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return l.BASE.multiply(o(e))}static msm(e,t){return Su(l,n,e,t)}_setWindowSize(e){f.setWindowSize(this,e)}assertValidity(){u(this)}hasEvenY(){const{y:e}=this.toAffine();if(r.isOdd)return!r.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){c(e);const{px:t,py:n,pz:i}=this,{px:s,py:a,pz:o}=e,h=r.eql(r.mul(t,o),r.mul(s,i)),u=r.eql(r.mul(n,o),r.mul(a,i));return h&&u}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:e,b:n}=t,i=r.mul(n,Ru),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,y=r.mul(s,s),f=r.mul(a,a),g=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(e,u),h=r.mul(i,g),h=r.add(c,h),c=r.sub(f,h),h=r.add(f,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(i,u),g=r.mul(e,g),p=r.sub(y,g),p=r.mul(e,p),p=r.add(p,u),u=r.add(y,y),y=r.add(u,y),y=r.add(y,g),y=r.mul(y,p),h=r.add(h,y),g=r.mul(a,o),g=r.add(g,g),y=r.mul(g,p),c=r.sub(c,y),u=r.mul(g,f),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(e){c(e);const{px:n,py:i,pz:s}=this,{px:a,py:o,pz:h}=e;let u=r.ZERO,y=r.ZERO,f=r.ZERO;const g=t.a,p=r.mul(t.b,Ru);let d=r.mul(n,a),A=r.mul(i,o),w=r.mul(s,h),m=r.add(n,i),b=r.add(a,o);m=r.mul(m,b),b=r.add(d,A),m=r.sub(m,b),b=r.add(n,s);let E=r.add(a,h);return b=r.mul(b,E),E=r.add(d,w),b=r.sub(b,E),E=r.add(i,s),u=r.add(o,h),E=r.mul(E,u),u=r.add(A,w),E=r.sub(E,u),f=r.mul(g,b),u=r.mul(p,w),f=r.add(u,f),u=r.sub(A,f),f=r.add(A,f),y=r.mul(u,f),A=r.add(d,d),A=r.add(A,d),w=r.mul(g,w),b=r.mul(p,b),A=r.add(A,w),w=r.sub(d,w),w=r.mul(g,w),b=r.add(b,w),d=r.mul(A,b),y=r.add(y,d),d=r.mul(E,b),u=r.mul(m,u),u=r.sub(u,d),d=r.mul(m,A),f=r.mul(E,f),f=r.add(f,d),new l(u,y,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(l.ZERO)}wNAF(e){return f.wNAFCached(this,e,l.normalizeZ)}multiplyUnsafe(e){Wh("scalar",e,xu,t.n);const n=l.ZERO;if(e===xu)return n;if(e===Qu)return this;const{endo:i}=t;if(!i)return f.unsafeLadder(this,e);let{k1neg:s,k1:a,k2neg:o,k2:c}=i.splitScalar(e),h=n,u=n,y=this;for(;a>xu||c>xu;)a&Qu&&(h=h.add(y)),c&Qu&&(u=u.add(y)),y=y.double(),a>>=Qu,c>>=Qu;return s&&(h=h.negate()),o&&(u=u.negate()),u=new l(r.mul(u.px,i.beta),u.py,u.pz),h.add(u)}multiply(e){const{endo:n,n:i}=t;let s,a;if(Wh("scalar",e,Qu,i),n){const{k1neg:t,k1:i,k2neg:o,k2:c}=n.splitScalar(e);let{p:h,f:u}=this.wNAF(i),{p:y,f:g}=this.wNAF(c);h=f.constTimeNegate(t,h),y=f.constTimeNegate(o,y),y=new l(r.mul(y.px,n.beta),y.py,y.pz),s=h.add(y),a=u.add(g)}else{const{p:t,f:r}=this.wNAF(e);s=t,a=r}return l.normalizeZ([s,a])[0]}multiplyAndAddUnsafe(e,t,r){const n=l.BASE,i=(e,t)=>t!==xu&&t!==Qu&&e.equals(n)?e.multiply(t):e.multiplyUnsafe(t),s=i(this,t).add(i(e,r));return s.is0()?void 0:s}toAffine(e){return h(this,e)}isTorsionFree(){const{h:e,isTorsionFree:r}=t;if(e===Qu)return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:e,clearCofactor:r}=t;return e===Qu?this:r?r(l,this):this.multiplyUnsafe(t.h)}toRawBytes(e=!0){return xh("isCompressed",e),this.assertValidity(),i(l,this,e)}toHex(e=!0){return xh("isCompressed",e),Rh(this.toRawBytes(e))}}l.BASE=new l(t.Gx,t.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const y=t.nBitLength,f=Iu(l,t.endo?Math.ceil(y/2):y);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:o,weierstrassEquation:a,isWithinCurveOrder:function(e){return Vh(e,Qu,t.n)}}}function Lu(e){const t=function(e){const t=Ku(e);return tu(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}(e),{Fp:r,n}=t,i=r.BYTES+1,s=2*r.BYTES+1;function a(e){return lu(e,n)}function o(e){return gu(e,n)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=Mu({...t,toBytes(e,t,n){const i=t.toAffine(),s=r.toBytes(i.x),a=jh;return xh("isCompressed",n),n?a(Uint8Array.from([t.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(i.y))},fromBytes(e){const t=e.length,n=e[0],a=e.subarray(1);if(t!==i||2!==n&&3!==n){if(t===s&&4===n){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${t} was invalid. Expected ${i} compressed bytes or ${s} uncompressed bytes`)}{const e=Hh(a);if(!Vh(e,Qu,r.ORDER))throw Error("Point is not on curve");const t=u(e);let i;try{i=r.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("Point is not on curve"+t)}return!(1&~n)!==((i&Qu)===Qu)&&(i=r.neg(i)),{x:e,y:i}}}}),y=e=>Rh(zh(e,t.nByteLength));function f(e){return e>n>>Qu}const g=(e,t,r)=>Hh(e.slice(t,r));class p{constructor(e,t,r){this.r=e,this.s=t,this.recovery=r,this.assertValidity()}static fromCompact(e){const r=t.nByteLength;return e=Gh("compactSignature",e,2*r),new p(g(e,0,r),g(e,r,2*r))}static fromDER(e){const{r:t,s:r}=Du.toSig(Gh("DER",e));return new p(t,r)}assertValidity(){Wh("r",this.r,Qu,n),Wh("s",this.s,Qu,n)}addRecoveryBit(e){return new p(this.r,this.s,e)}recoverPublicKey(e){const{r:n,s:i,recovery:s}=this,h=m(Gh("msgHash",e));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?n+t.n:n;if(u>=r.ORDER)throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",f=c.fromHex(l+y(u)),g=o(u),p=a(-h*g),d=a(i*g),A=c.BASE.multiplyAndAddUnsafe(f,p,d);if(!A)throw Error("point at infinify");return A.assertValidity(),A}hasHighS(){return f(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(-this.s),this.recovery):this}toDERRawBytes(){return Nh(this.toDERHex())}toDERHex(){return Du.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return Nh(this.toCompactHex())}toCompactHex(){return y(this.r)+y(this.s)}}const d={isValidPrivateKey(e){try{return h(e),!0}catch(e){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const e=bu(t.n);return function(e,t,r=!1){const n=e.length,i=mu(t),s=bu(t);if(n<16||n<s||n>1024)throw Error(`expected ${s}-1024 bytes of input, got ${n}`);const a=lu(r?Hh(e):Oh(e),t-su)+su;return r?_h(a,i):zh(a,i)}(t.randomBytes(e),t.n)},precompute:(e=8,t=c.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)};function A(e){const t=Uh(e),r="string"==typeof e,n=(t||r)&&e.length;return t?n===i||n===s:r?n===2*i||n===2*s:e instanceof c}const w=t.bits2int||function(e){const r=Hh(e),n=8*e.length-t.nBitLength;return n>0?r>>BigInt(n):r},m=t.bits2int_modN||function(e){return a(w(e))},b=Yh(t.nBitLength);function E(e){return Wh("num < 2^"+t.nBitLength,e,xu,b),zh(e,t.nByteLength)}function k(e,n,i=v){if(["recovered","canonical"].some((e=>e in i)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=t;let{lowS:y,prehash:g,extraEntropy:d}=i;null==y&&(y=!0),e=Gh("msgHash",e),Cu(i),g&&(e=Gh("prehashed msgHash",s(e)));const A=m(e),b=h(n),k=[E(b),E(A)];if(null!=d&&!1!==d){const e=!0===d?u(r.BYTES):d;k.push(Gh("extraEntropy",e))}const B=jh(...k),I=A;return{seed:B,k2sig:function(e){const t=w(e);if(!l(t))return;const r=o(t),n=c.BASE.multiply(t).toAffine(),i=a(n.x);if(i===xu)return;const s=a(r*a(I+i*b));if(s===xu)return;let h=(n.x===i?0:2)|Number(n.y&Qu),u=s;return y&&f(s)&&(u=function(e){return f(e)?a(-e):e}(s),h^=1),new p(i,u,h)}}}const v={lowS:t.lowS,prehash:!1},B={lowS:t.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:t,getPublicKey:function(e,t=!0){return c.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(A(e))throw Error("first arg must be private key");if(!A(t))throw Error("second arg must be public key");return c.fromHex(t).multiply(h(e)).toRawBytes(r)},sign:function(e,r,n=v){const{seed:i,k2sig:s}=k(e,r,n),a=t;return Xh(a.hash.outputLen,a.nByteLength,a.hmac)(i,s)},verify:function(e,r,n,i=B){const s=e;if(r=Gh("msgHash",r),n=Gh("publicKey",n),"strict"in i)throw Error("options.strict was renamed to lowS");Cu(i);const{lowS:h,prehash:u}=i;let l,y;try{if("string"==typeof s||Uh(s))try{l=p.fromDER(s)}catch(e){if(!(e instanceof Du.Err))throw e;l=p.fromCompact(s)}else{if("object"!=typeof s||"bigint"!=typeof s.r||"bigint"!=typeof s.s)throw Error("PARSE");{const{r:e,s:t}=s;l=new p(e,t)}}y=c.fromHex(n)}catch(e){if("PARSE"===e.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=t.hash(r));const{r:f,s:g}=l,d=m(r),A=o(g),w=a(d*A),b=a(f*A),E=c.BASE.multiplyAndAddUnsafe(y,w,b)?.toAffine();return!!E&&a(E.x)===f},ProjectivePoint:c,Signature:p,utils:d}}
|
|
11
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Tu(e){return{hash:e,hmac:(t,...r)=>Sh(e,t,lh(...r)),randomBytes:gh}}function Fu(e,t){const r=t=>Lu({...e,...Tu(t)});return Object.freeze({...r(t),create:r})}
|
|
12
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */BigInt(4);const Nu=wu(BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),Hu=Fu({a:Nu.create(BigInt("-3")),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Nu,n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:BigInt(1),lowS:!1},vh),Ou=/* @__PURE__ */BigInt(2**32-1),zu=/* @__PURE__ */BigInt(32);function _u(e,t=!1){return t?{h:Number(e&Ou),l:Number(e>>zu&Ou)}:{h:0|Number(e>>zu&Ou),l:0|Number(e&Ou)}}function Gu(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let i=0;i<e.length;i++){const{h:s,l:a}=_u(e[i],t);[r[i],n[i]]=[s,a]}return[r,n]}const ju=(e,t,r)=>e<<r|t>>>32-r,qu=(e,t,r)=>t<<r|e>>>32-r,Vu=(e,t,r)=>t<<r-32|e>>>64-r,Wu=(e,t,r)=>e<<r-32|t>>>64-r;const Zu={fromBig:_u,split:Gu,toBig:(e,t)=>BigInt(e>>>0)<<zu|BigInt(t>>>0),shrSH:(e,t,r)=>e>>>r,shrSL:(e,t,r)=>e<<32-r|t>>>r,rotrSH:(e,t,r)=>e>>>r|t<<32-r,rotrSL:(e,t,r)=>e<<32-r|t>>>r,rotrBH:(e,t,r)=>e<<64-r|t>>>r-32,rotrBL:(e,t,r)=>e>>>r-32|t<<64-r,rotr32H:(e,t)=>t,rotr32L:(e,t)=>e,rotlSH:ju,rotlSL:qu,rotlBH:Vu,rotlBL:Wu,add:function(e,t,r,n){const i=(t>>>0)+(n>>>0);return{h:e+r+(i/2**32|0)|0,l:0|i}},add3L:(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),add3H:(e,t,r,n)=>t+r+n+(e/2**32|0)|0,add4L:(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),add4H:(e,t,r,n,i)=>t+r+n+i+(e/2**32|0)|0,add5H:(e,t,r,n,i,s)=>t+r+n+i+s+(e/2**32|0)|0,add5L:(e,t,r,n,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(i>>>0)},[Yu,Ju]=/* @__PURE__ */(()=>Zu.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),$u=/* @__PURE__ */new Uint32Array(80),Xu=/* @__PURE__ */new Uint32Array(80);class el extends Ah{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:e,Al:t,Bh:r,Bl:n,Ch:i,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:y,Gl:f,Hh:g,Hl:p}=this;return[e,t,r,n,i,s,a,o,c,h,u,l,y,f,g,p]}set(e,t,r,n,i,s,a,o,c,h,u,l,y,f,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|n,this.Ch=0|i,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|y,this.Gl=0|f,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)$u[r]=e.getUint32(t),Xu[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|$u[e-15],r=0|Xu[e-15],n=Zu.rotrSH(t,r,1)^Zu.rotrSH(t,r,8)^Zu.shrSH(t,r,7),i=Zu.rotrSL(t,r,1)^Zu.rotrSL(t,r,8)^Zu.shrSL(t,r,7),s=0|$u[e-2],a=0|Xu[e-2],o=Zu.rotrSH(s,a,19)^Zu.rotrBH(s,a,61)^Zu.shrSH(s,a,6),c=Zu.rotrSL(s,a,19)^Zu.rotrBL(s,a,61)^Zu.shrSL(s,a,6),h=Zu.add4L(i,c,Xu[e-7],Xu[e-16]),u=Zu.add4H(h,n,o,$u[e-7],$u[e-16]);$u[e]=0|u,Xu[e]=0|h}let{Ah:r,Al:n,Bh:i,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:y,Fl:f,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=Zu.rotrSH(u,l,14)^Zu.rotrSH(u,l,18)^Zu.rotrBH(u,l,41),w=Zu.rotrSL(u,l,14)^Zu.rotrSL(u,l,18)^Zu.rotrBL(u,l,41),m=u&y^~u&g,b=l&f^~l&p,E=Zu.add5L(A,w,b,Ju[e],Xu[e]),k=Zu.add5H(E,d,t,m,Yu[e],$u[e]),v=0|E,B=Zu.rotrSH(r,n,28)^Zu.rotrBH(r,n,34)^Zu.rotrBH(r,n,39),I=Zu.rotrSL(r,n,28)^Zu.rotrBL(r,n,34)^Zu.rotrBL(r,n,39),S=r&i^r&a^i&a,K=n&s^n&o^s&o;d=0|g,A=0|p,g=0|y,p=0|f,y=0|u,f=0|l,({h:u,l}=Zu.add(0|c,0|h,0|k,0|v)),c=0|a,h=0|o,a=0|i,o=0|s,i=0|r,s=0|n;const C=Zu.add3L(v,I,K);r=Zu.add3H(C,k,B,S),n=0|C}({h:r,l:n}=Zu.add(0|this.Ah,0|this.Al,0|r,0|n)),({h:i,l:s}=Zu.add(0|this.Bh,0|this.Bl,0|i,0|s)),({h:a,l:o}=Zu.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=Zu.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=Zu.add(0|this.Eh,0|this.El,0|u,0|l)),({h:y,l:f}=Zu.add(0|this.Fh,0|this.Fl,0|y,0|f)),({h:g,l:p}=Zu.add(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=Zu.add(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,n,i,s,a,o,c,h,u,l,y,f,g,p,d,A)}roundClean(){$u.fill(0),Xu.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class tl extends el{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const rl=/* @__PURE__ */fh((()=>new el)),nl=/* @__PURE__ */fh((()=>new tl)),il=wu(BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),sl=Fu({a:il.create(BigInt("-3")),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:il,n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:BigInt(1),lowS:!1},nl),al=wu(BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),ol={a:al.create(BigInt("-3")),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:al,n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:BigInt(1)},cl=Fu({a:ol.a,b:ol.b,Fp:al,n:ol.n,Gx:ol.Gx,Gy:ol.Gy,h:ol.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},rl),hl=[],ul=[],ll=[],yl=/* @__PURE__ */BigInt(0),fl=/* @__PURE__ */BigInt(1),gl=/* @__PURE__ */BigInt(2),pl=/* @__PURE__ */BigInt(7),dl=/* @__PURE__ */BigInt(256),Al=/* @__PURE__ */BigInt(113);for(let e=0,t=fl,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],hl.push(2*(5*n+r)),ul.push((e+1)*(e+2)/2%64);let i=yl;for(let e=0;e<7;e++)t=(t<<fl^(t>>pl)*Al)%dl,t&gl&&(i^=fl<<(fl<</* @__PURE__ */BigInt(e))-fl);ll.push(i)}const[wl,ml]=/* @__PURE__ */Gu(ll,!0),bl=(e,t,r)=>r>32?Vu(e,t,r):ju(e,t,r),El=(e,t,r)=>r>32?Wu(e,t,r):qu(e,t,r);class kl extends yh{constructor(e,t,r,n=!1,i=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=n,this.rounds=i,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,Xc(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){oh||ch(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const n=(t+8)%10,i=(t+2)%10,s=r[i],a=r[i+1],o=bl(s,a,1)^r[n],c=El(s,a,1)^r[n+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],i=e[3];for(let r=0;r<24;r++){const n=ul[r],s=bl(t,i,n),a=El(t,i,n),o=hl[r];t=e[o],i=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let n=0;n<10;n++)r[n]=e[t+n];for(let n=0;n<10;n++)e[t+n]^=~r[(n+2)%10]&r[(n+4)%10]}e[0]^=wl[n],e[1]^=ml[n]}r.fill(0)}(this.state32,this.rounds),oh||ch(this.state32),this.posOut=0,this.pos=0}update(e){th(this);const{blockLen:t,state:r}=this,n=(e=uh(e)).length;for(let i=0;i<n;){const s=Math.min(t-this.pos,n-i);for(let t=0;t<s;t++)r[this.pos++]^=e[i++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:n}=this;e[r]^=t,128&t&&r===n-1&&this.keccak(),e[n-1]^=128,this.keccak()}writeInto(e){th(this,!1),eh(e),this.finish();const t=this.state,{blockLen:r}=this;for(let n=0,i=e.length;n<i;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,i-n);e.set(t.subarray(this.posOut,this.posOut+s),n),this.posOut+=s,n+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Xc(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(rh(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:n,rounds:i,enableXOF:s}=this;return e||(e=new kl(t,r,n,s,i)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=i,e.suffix=r,e.outputLen=n,e.enableXOF=s,e.destroyed=this.destroyed,e}}const vl=(e,t,r)=>fh((()=>new kl(t,e,r))),Bl=/* @__PURE__ */vl(6,136,32),Il=/* @__PURE__ */vl(6,72,64),Sl=/* @__PURE__ */((e,t,r)=>function(e){const t=(t,r)=>e(r).update(uh(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((n={})=>new kl(t,e,void 0===n.dkLen?r:n.dkLen,!0))))(31,136,32),Kl=BigInt(0),Cl=BigInt(1),Pl=BigInt(2),Ul=BigInt(8),Dl={zip215:!0};function xl(e){const t=function(e){const t=Ku(e);return tu(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}(e),{Fp:r,n,prehash:i,hash:s,randomBytes:a,nByteLength:o,h:c}=t,h=Pl<<BigInt(8*o)-Cl,u=r.create,l=wu(t.n,t.nBitLength),y=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:r.sqrt(e*r.inv(t))}}catch(e){return{isValid:!1,value:Kl}}}),f=t.adjustScalarBytes||(e=>e),g=t.domain||((e,t,r)=>{if(xh("phflag",r),t.length||r)throw Error("Contexts/pre-hash are not supported");return e});function p(e,t){Wh("coordinate "+e,t,Kl,h)}function d(e){if(!(e instanceof m))throw Error("ExtendedPoint expected")}const A=ru(((e,t)=>{const{ex:n,ey:i,ez:s}=e,a=e.is0();null==t&&(t=a?Ul:r.inv(s));const o=u(n*t),c=u(i*t),h=u(s*t);if(a)return{x:Kl,y:Cl};if(h!==Cl)throw Error("invZ was invalid");return{x:o,y:c}})),w=ru((e=>{const{a:r,d:n}=t;if(e.is0())throw Error("bad point: ZERO");const{ex:i,ey:s,ez:a,et:o}=e,c=u(i*i),h=u(s*s),l=u(a*a),y=u(l*l),f=u(c*r);if(u(l*u(f+h))!==u(y+u(n*u(c*h))))throw Error("bad point: equation left != right (1)");if(u(i*s)!==u(a*o))throw Error("bad point: equation left != right (2)");return!0}));class m{constructor(e,t,r,n){this.ex=e,this.ey=t,this.ez=r,this.et=n,p("x",e),p("y",t),p("z",r),p("t",n),Object.freeze(this)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(e){if(e instanceof m)throw Error("extended point not allowed");const{x:t,y:r}=e||{};return p("x",t),p("y",r),new m(t,r,Cl,u(t*r))}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.ez)));return e.map(((e,r)=>e.toAffine(t[r]))).map(m.fromAffine)}static msm(e,t){return Su(m,l,e,t)}_setWindowSize(e){k.setWindowSize(this,e)}assertValidity(){w(this)}equals(e){d(e);const{ex:t,ey:r,ez:n}=this,{ex:i,ey:s,ez:a}=e,o=u(t*a),c=u(i*n),h=u(r*a),l=u(s*n);return o===c&&h===l}is0(){return this.equals(m.ZERO)}negate(){return new m(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){const{a:e}=t,{ex:r,ey:n,ez:i}=this,s=u(r*r),a=u(n*n),o=u(Pl*u(i*i)),c=u(e*s),h=r+n,l=u(u(h*h)-s-a),y=c+a,f=y-o,g=c-a,p=u(l*f),d=u(y*g),A=u(l*g),w=u(f*y);return new m(p,d,w,A)}add(e){d(e);const{a:r,d:n}=t,{ex:i,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:y}=e;if(r===BigInt(-1)){const e=u((s-i)*(h+c)),t=u((s+i)*(h-c)),r=u(t-e);if(r===Kl)return this.double();const n=u(a*Pl*y),f=u(o*Pl*l),g=f+n,p=t+e,d=f-n,A=u(g*r),w=u(p*d),b=u(g*d),E=u(r*p);return new m(A,w,E,b)}const f=u(i*c),g=u(s*h),p=u(o*n*y),A=u(a*l),w=u((i+s)*(c+h)-f-g),b=A-p,E=A+p,k=u(g-r*f),v=u(w*b),B=u(E*k),I=u(w*k),S=u(b*E);return new m(v,B,S,I)}subtract(e){return this.add(e.negate())}wNAF(e){return k.wNAFCached(this,e,m.normalizeZ)}multiply(e){const t=e;Wh("scalar",t,Cl,n);const{p:r,f:i}=this.wNAF(t);return m.normalizeZ([r,i])[0]}multiplyUnsafe(e){const t=e;return Wh("scalar",t,Kl,n),t===Kl?E:this.equals(E)||t===Cl?this:this.equals(b)?this.wNAF(t).p:k.unsafeLadder(this,t)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return k.unsafeLadder(this,n).is0()}toAffine(e){return A(this,e)}clearCofactor(){const{h:e}=t;return e===Cl?this:this.multiplyUnsafe(e)}static fromHex(e,n=!1){const{d:i,a:s}=t,a=r.BYTES;e=Gh("pointHex",e,a),xh("zip215",n);const o=e.slice(),c=e[a-1];o[a-1]=-129&c;const l=Oh(o),f=n?h:r.ORDER;Wh("pointHex.y",l,Kl,f);const g=u(l*l),p=u(g-Cl),d=u(i*g-s);let{isValid:A,value:w}=y(p,d);if(!A)throw Error("Point.fromHex: invalid y coordinate");const b=(w&Cl)===Cl,E=!!(128&c);if(!n&&w===Kl&&E)throw Error("Point.fromHex: x=0 and x_0=1");return E!==b&&(w=u(-w)),m.fromAffine({x:w,y:l})}static fromPrivateKey(e){return I(e).point}toRawBytes(){const{x:e,y:t}=this.toAffine(),n=_h(t,r.BYTES);return n[n.length-1]|=e&Cl?128:0,n}toHex(){return Rh(this.toRawBytes())}}m.BASE=new m(t.Gx,t.Gy,Cl,u(t.Gx*t.Gy)),m.ZERO=new m(Kl,Cl,Cl,Kl);const{BASE:b,ZERO:E}=m,k=Iu(m,8*o);function v(e){return lu(e,n)}function B(e){return v(Oh(e))}function I(e){const t=o;e=Gh("private key",e,t);const r=Gh("hashed private key",s(e),2*t),n=f(r.slice(0,t)),i=r.slice(t,2*t),a=B(n),c=b.multiply(a),h=c.toRawBytes();return{head:n,prefix:i,scalar:a,point:c,pointBytes:h}}function S(e=new Uint8Array,...t){const r=jh(...t);return B(s(g(r,Gh("context",e),!!i)))}const K=Dl;b._setWindowSize(8);return{CURVE:t,getPublicKey:function(e){return I(e).pointBytes},sign:function(e,t,s={}){e=Gh("message",e),i&&(e=i(e));const{prefix:a,scalar:c,pointBytes:h}=I(t),u=S(s.context,a,e),l=b.multiply(u).toRawBytes(),y=v(u+S(s.context,l,h,e)*c);return Wh("signature.s",y,Kl,n),Gh("result",jh(l,_h(y,r.BYTES)),2*o)},verify:function(e,t,n,s=K){const{context:a,zip215:o}=s,c=r.BYTES;e=Gh("signature",e,2*c),t=Gh("message",t),void 0!==o&&xh("zip215",o),i&&(t=i(t));const h=Oh(e.slice(c,2*c));let u,l,y;try{u=m.fromHex(n,o),l=m.fromHex(e.slice(0,c),o),y=b.multiplyUnsafe(h)}catch(e){return!1}if(!o&&u.isSmallOrder())return!1;const f=S(a,l.toRawBytes(),u.toRawBytes(),t);return l.add(u.multiplyUnsafe(f)).subtract(y).clearCofactor().equals(m.ZERO)},ExtendedPoint:m,utils:{getExtendedPublicKey:I,randomPrivateKey:()=>a(r.BYTES),precompute:(e=8,t=m.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)}}}
|
|
13
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Ql=BigInt(0),Rl=BigInt(1);function Ml(e){const t=(tu(r=e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...r}));var r;const{P:n}=t,i=e=>lu(e,n),s=t.montgomeryBits,a=Math.ceil(s/8),o=t.nByteLength,c=t.adjustScalarBytes||(e=>e),h=t.powPminus2||(e=>yu(e,n-BigInt(2),n));function u(e,t,r){const n=i(e*(t-r));return[t=i(t-n),r=i(r+n)]}const l=(t.a-BigInt(2))/BigInt(4);function y(e){return _h(i(e),a)}function f(e,t){const r=function(e){const t=Gh("u coordinate",e,a);return 32===o&&(t[31]&=127),Oh(t)}(t),f=function(e){const t=Gh("scalar",e),r=t.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return Oh(c(t))}(e),g=function(e,t){Wh("u",e,Ql,n),Wh("scalar",t,Ql,n);const r=t,a=e;let o,c=Rl,y=Ql,f=e,g=Rl,p=Ql;for(let e=BigInt(s-1);e>=Ql;e--){const t=r>>e&Rl;p^=t,o=u(p,c,f),c=o[0],f=o[1],o=u(p,y,g),y=o[0],g=o[1],p=t;const n=c+y,s=i(n*n),h=c-y,d=i(h*h),A=s-d,w=f+g,m=i((f-g)*n),b=i(w*h),E=m+b,k=m-b;f=i(E*E),g=i(a*i(k*k)),c=i(s*d),y=i(A*(s+i(l*A)))}o=u(p,c,f),c=o[0],f=o[1],o=u(p,y,g),y=o[0],g=o[1];const d=h(y);return i(c*d)}(r,f);if(g===Ql)throw Error("Invalid private or public key received");return y(g)}const g=y(t.Gu);function p(e){return f(e,g)}return{scalarMult:f,scalarMultBase:p,getSharedSecret:(e,t)=>f(e,t),getPublicKey:e=>p(e),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:g}}
|
|
14
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Ll=fh((()=>Sl.create({dkLen:114}))),Tl=(fh((()=>Sl.create({dkLen:64}))),BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439")),Fl=BigInt(1),Nl=BigInt(2),Hl=BigInt(3);BigInt(4);const Ol=BigInt(11),zl=BigInt(22),_l=BigInt(44),Gl=BigInt(88),jl=BigInt(223);function ql(e){const t=Tl,r=e*e*e%t,n=r*r*e%t,i=fu(n,Hl,t)*n%t,s=fu(i,Hl,t)*n%t,a=fu(s,Nl,t)*r%t,o=fu(a,Ol,t)*a%t,c=fu(o,zl,t)*o%t,h=fu(c,_l,t)*c%t,u=fu(h,Gl,t)*h%t,l=fu(u,_l,t)*c%t,y=fu(l,Nl,t)*r%t,f=fu(y,Fl,t)*e%t;return fu(f,jl,t)*y%t}function Vl(e){return e[0]&=252,e[55]|=128,e[56]=0,e}const Wl=wu(Tl,456,!0),Zl={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:Wl,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Ll,randomBytes:gh,adjustScalarBytes:Vl,domain:(e,t,r)=>{if(t.length>255)throw Error("Context is too big: "+t.length);return lh(hh("SigEd448"),new Uint8Array([r?1:0,t.length]),t,e)},uvRatio:function(e,t){const r=Tl,n=lu(e*e*t,r),i=lu(n*e,r),s=lu(i*n*t,r),a=lu(i*ql(s),r),o=lu(a*a,r);return{isValid:lu(o*t,r)===e,value:a}}},Yl=/* @__PURE__ */xl(Zl),Jl=/* @__PURE__ */(()=>Ml({a:BigInt(156326),montgomeryBits:448,nByteLength:56,P:Tl,Gu:BigInt(5),powPminus2:e=>{const t=Tl;return lu(fu(ql(e),BigInt(2),t)*e,t)},adjustScalarBytes:Vl,randomBytes:gh}))();Wl.ORDER,BigInt(3),BigInt(4),BigInt(156326),BigInt("39082"),BigInt("78163"),BigInt("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),BigInt("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716"),BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
|
|
12
15
|
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
|
|
13
|
-
const $h=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),Xh=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),eu=BigInt(1),tu=BigInt(2),ru=(e,t)=>(e+t/tu)/t;const iu=yc($h,void 0,void 0,{sqrt:function(e){const t=$h,r=BigInt(3),i=BigInt(6),n=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),h=e*e*e%t,u=h*h*e%t,l=oc(u,r,t)*u%t,y=oc(l,r,t)*u%t,f=oc(y,tu,t)*h%t,g=oc(f,n,t)*f%t,p=oc(g,s,t)*g%t,d=oc(p,o,t)*p%t,A=oc(d,c,t)*d%t,w=oc(A,o,t)*p%t,m=oc(w,r,t)*u%t,b=oc(m,a,t)*g%t,E=oc(b,i,t)*h%t,k=oc(E,tu,t);if(!iu.eql(iu.sqr(k),e))throw Error("Cannot find square root");return k}}),nu=Kc({a:BigInt(0),b:BigInt(7),Fp:iu,n:Xh,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{const t=Xh,r=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),i=-eu*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),n=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=BigInt("0x100000000000000000000000000000000"),o=ru(s*e,t),c=ru(-i*e,t);let h=sc(e-o*r-c*n,t),u=sc(-o*i-c*s,t);const l=h>a,y=u>a;if(l&&(h=t-h),y&&(u=t-u),h>a||u>a)throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:l,k1:h,k2neg:y,k2:u}}}},Lc);BigInt(0),nu.ProjectivePoint;const su=yc(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),au=Kc({a:su.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:su,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Lc),ou=yc(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),cu=Kc({a:ou.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:ou,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},ih),hu=yc(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),uu=Kc({a:hu.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:hu,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},rh),lu=new Map(Object.entries({nistP256:Fc,nistP384:sh,nistP521:ch,brainpoolP256r1:au,brainpoolP384r1:cu,brainpoolP512r1:uu,secp256k1:nu,x448:Zh,ed448:Wh}));var yu=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:lu});function fu(e,t,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],y=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],f=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,E,k,v,I=0,B=t.length;const S=32===e.length?3:9;E=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e,t){const r=8-e.length%8;let i;if(!(r<8)){if(8===r)return e;throw Error("des: invalid padding")}i=0;const n=new Uint8Array(e.length+r);for(let t=0;t<e.length;t++)n[t]=e[t];for(let t=0;t<r;t++)n[e.length+t]=i;return n}(t),B=t.length);let C=new Uint8Array(B),K=0;for(;I<B;){for(m=t[I++]<<24|t[I++]<<16|t[I++]<<8|t[I++],b=t[I++]<<24|t[I++]<<16|t[I++]<<8|t[I++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(k=E[p+1],v=E[p+2],g=E[p];g!==k;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|h[A>>>16&63]|l[A>>>8&63]|f[63&A]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|y[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,C[K++]=m>>>24,C[K++]=m>>>16&255,C[K++]=m>>>8&255,C[K++]=255&m,C[K++]=b>>>24,C[K++]=b>>>16&255,C[K++]=b>>>8&255,C[K++]=255&b}return r||(C=function(e,t){let r,i=null;if(r=0,!i){for(i=1;e[e.length-i]===r;)i++;i--}return e.subarray(0,e.length-i)}(C)),C}function gu(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],y=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],f=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,E=0,k=0;for(let v=0;v<p;v++){let p=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++],v=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|h[v>>>24&15]|u[v>>>20&15]|l[v>>>16&15]|y[v>>>12&15]|f[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[k++]=w^b,d[k++]=m^b<<16}return d}function pu(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return fu(gu(this.key[2]),fu(gu(this.key[1]),fu(gu(this.key[0]),e,!0),!1),!0)}}function du(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const i=t+e,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(e,t,r){const i=t^e,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(e,t,r){const i=t-e,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let e=0;e<4;e++)a=4*e,i[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=i[t[1]],c^=s[4][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][i[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][i[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][i[t[6]>>>2]>>>24-8*(3&t[6])&255],i[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][i[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][i[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][i[e[4]>>>2]>>>24-8*(3&e[4])&255],n[h]=c,h++}}for(let e=0;e<16;e++)this.masking[e]=n[e],this.rotate[e]=31&n[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function Au(e){this.cast5=new du,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}pu.keySize=pu.prototype.keySize=24,pu.blockSize=pu.prototype.blockSize=8,Au.blockSize=Au.prototype.blockSize=8,Au.keySize=Au.prototype.keySize=16;const wu=4294967295;function mu(e,t){return(e<<t|e>>>32-t)&wu}function bu(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Eu(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function ku(e,t){return e>>>8*t&255}function vu(e){this.tf=function(){let e=null,t=null,r=-1,i=[],n=[[],[],[],[]];function s(e){return n[0][ku(e,0)]^n[1][ku(e,1)]^n[2][ku(e,2)]^n[3][ku(e,3)]}function a(e){return n[0][ku(e,3)]^n[1][ku(e,0)]^n[2][ku(e,1)]^n[3][ku(e,2)]}function o(e,t){let r=s(t[0]),n=a(t[1]);t[2]=mu(t[2]^r+n+i[4*e+8]&wu,31),t[3]=mu(t[3],1)^r+2*n+i[4*e+9]&wu,r=s(t[2]),n=a(t[3]),t[0]=mu(t[0]^r+n+i[4*e+10]&wu,31),t[1]=mu(t[1],1)^r+2*n+i[4*e+11]&wu}function c(e,t){let r=s(t[0]),n=a(t[1]);t[2]=mu(t[2],1)^r+n+i[4*e+10]&wu,t[3]=mu(t[3]^r+2*n+i[4*e+11]&wu,31),r=s(t[2]),n=a(t[3]),t[0]=mu(t[0],1)^r+n+i[4*e+8]&wu,t[1]=mu(t[1]^r+2*n+i[4*e+9]&wu,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const h=[],u=[],l=[];let y;const f=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],E=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],k=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],I=[[],[],[],[]];function B(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function C(e,t){let r,i,n;for(r=0;r<8;r++)i=t>>>24,t=t<<8&wu|e>>>24,e=e<<8&wu,n=i<<1,128&i&&(n^=333),t^=i^n<<16,n^=i>>>1,1&i&&(n^=166),t^=n<<24|n<<8;return t}function K(e,t){const r=t>>4,i=15&t,n=A[e][r^i],s=w[e][E[i]^k[r]];return b[e][E[s]^k[n]]<<4|m[e][n^s]}function D(e,t){let r=ku(e,0),i=ku(e,1),n=ku(e,2),s=ku(e,3);switch(y){case 4:r=v[1][r]^ku(t[3],0),i=v[0][i]^ku(t[3],1),n=v[0][n]^ku(t[3],2),s=v[1][s]^ku(t[3],3);case 3:r=v[1][r]^ku(t[2],0),i=v[1][i]^ku(t[2],1),n=v[0][n]^ku(t[2],2),s=v[0][s]^ku(t[2],3);case 2:r=v[0][v[0][r]^ku(t[1],0)]^ku(t[0],0),i=v[0][v[1][i]^ku(t[1],1)]^ku(t[0],1),n=v[1][v[0][n]^ku(t[1],2)]^ku(t[0],2),s=v[1][v[1][s]^ku(t[1],3)]^ku(t[0],3)}return I[0][r]^I[1][i]^I[2][n]^I[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=bu(e,r);for(r=0;r<256;r++)v[0][r]=K(0,r),v[1][r]=K(1,r);for(r=0;r<256;r++)g=v[1][r],p=B(g),d=S(g),I[0][r]=g+(p<<8)+(d<<16)+(d<<24),I[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=B(g),d=S(g),I[1][r]=d+(d<<8)+(p<<16)+(g<<24),I[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(y=l.length/2,r=0;r<y;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,f[y-r-1]=C(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=D(s,h),a=mu(D(a,u),8),i[r]=s+a&wu,i[r+1]=mu(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,y){case 4:s=v[1][s]^ku(f[3],0),a=v[0][a]^ku(f[3],1),o=v[0][o]^ku(f[3],2),c=v[1][c]^ku(f[3],3);case 3:s=v[1][s]^ku(f[2],0),a=v[1][a]^ku(f[2],1),o=v[0][o]^ku(f[2],2),c=v[0][c]^ku(f[2],3);case 2:n[0][r]=I[0][v[0][v[0][s]^ku(f[1],0)]^ku(f[0],0)],n[1][r]=I[1][v[0][v[1][a]^ku(f[1],1)]^ku(f[0],1)],n[2][r]=I[2][v[1][v[0][o]^ku(f[1],2)]^ku(f[0],2)],n[3][r]=I[3][v[1][v[1][c]^ku(f[1],3)]^ku(f[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(e,n){t=e,r=n;const s=[bu(t,r)^i[0],bu(t,r+4)^i[1],bu(t,r+8)^i[2],bu(t,r+12)^i[3]];for(let e=0;e<8;e++)o(e,s);return Eu(t,r,s[2]^i[4]),Eu(t,r+4,s[3]^i[5]),Eu(t,r+8,s[0]^i[6]),Eu(t,r+12,s[1]^i[7]),r+=16,t},decrypt:function(e,n){t=e,r=n;const s=[bu(t,r)^i[4],bu(t,r+4)^i[5],bu(t,r+8)^i[6],bu(t,r+12)^i[7]];for(let e=7;e>=0;e--)c(e,s);Eu(t,r,s[2]^i[0]),Eu(t,r+4,s[3]^i[1]),Eu(t,r+8,s[0]^i[2]),Eu(t,r+12,s[1]^i[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function Iu(){}function Bu(e){this.bf=new Iu,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}vu.keySize=vu.prototype.keySize=32,vu.blockSize=vu.prototype.blockSize=16,Iu.prototype.BLOCKSIZE=8,Iu.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],Iu.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],Iu.prototype.NN=16,Iu.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},Iu.prototype._F=function(e){let t;const r=255&e,i=255&(e>>>=8),n=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][n],t^=this.sboxes[2][i],t+=this.sboxes[3][r],t},Iu.prototype._encryptBlock=function(e){let t,r=e[0],i=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],e[0]=this._clean(i),e[1]=this._clean(r)},Iu.prototype.encryptBlock=function(e){let t;const r=[0,0],i=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+i];this._encryptBlock(r);const n=[];for(t=0;t<this.BLOCKSIZE/2;++t)n[t+0]=r[0]>>>24-8*t&255,n[t+i]=r[1]>>>24-8*t&255;return n},Iu.prototype._decryptBlock=function(e){let t,r=e[0],i=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[1],i^=this.parray[0],e[0]=this._clean(i),e[1]=this._clean(r)},Iu.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let i=0;for(let t=0;t<4;++t)i=i<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^i}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const i=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(i),this.parray[t+0]=i[0],this.parray[t+1]=i[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[t][r+0]=i[0],this.sboxes[t][r+1]=i[1]},Bu.keySize=Bu.prototype.keySize=16,Bu.blockSize=Bu.prototype.blockSize=8;const Su=new Map([[Q.symmetric.tripledes,pu],[Q.symmetric.cast5,Au],[Q.symmetric.blowfish,Bu],[Q.symmetric.twofish,vu]]);var Cu=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Su});const Ku=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),Du=/* @__PURE__ */new Uint32Array(80);class Pu extends Uc{constructor(){super(64,20,8,!1),this.A=0|Ku[0],this.B=0|Ku[1],this.C=0|Ku[2],this.D=0|Ku[3],this.E=0|Ku[4]}get(){const{A:e,B:t,C:r,D:i,E:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Du[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)Du[e]=po(Du[e-3]^Du[e-8]^Du[e-14]^Du[e-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=Dc(i,n,s),o=1518500249):e<40?(t=i^n^s,o=1859775393):e<60?(t=Pc(i,n,s),o=2400959708):(t=i^n^s,o=3395469782);const c=po(r,5)+t+a+o+Du[e]|0;a=s,s=n,n=po(i,30),i=r,r=c}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){Du.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Uu=/* @__PURE__ */vo((()=>new Pu)),xu=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Qu=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((e,t)=>t))),Ru=/* @__PURE__ */Qu.map((e=>(9*e+5)%16));let Mu=[Qu],Tu=[Ru];for(let e=0;e<4;e++)for(let t of[Mu,Tu])t.push(t[e].map((e=>xu[e])));const Lu=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>new Uint8Array(e))),_u=/* @__PURE__ */Mu.map(((e,t)=>e.map((e=>Lu[t][e])))),Nu=/* @__PURE__ */Tu.map(((e,t)=>e.map((e=>Lu[t][e])))),Fu=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),Hu=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]);function Ou(e,t,r,i){return 0===e?t^r^i:1===e?t&r|~t&i:2===e?(t|~r)^i:3===e?t&i|r&~i:t^(r|~i)}const zu=/* @__PURE__ */new Uint32Array(16);class Gu extends Uc{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:i,h4:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)zu[r]=e.getUint32(t,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let e=0;e<5;e++){const t=4-e,y=Fu[e],f=Hu[e],g=Mu[e],p=Tu[e],d=_u[e],A=Nu[e];for(let t=0;t<16;t++){const i=po(r+Ou(e,n,a,c)+zu[g[t]]+y,d[t])+u|0;r=u,u=c,c=0|po(a,10),a=n,n=i}for(let e=0;e<16;e++){const r=po(i+Ou(t,s,o,h)+zu[p[e]]+f,A[e])+l|0;i=l,l=h,h=0|po(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){zu.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const ju=new Map(Object.entries({sha1:Uu,sha224:_c,sha256:Lc,sha384:ih,sha512:rh,sha3_256:Ih,sha3_512:Bh,ripemd160:/* @__PURE__ */vo((()=>new Gu))}));var qu=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:ju});function Vu(e,t,r,i){e[t]+=r[i],e[t+1]+=r[i+1]+(e[t]<r[i])}function Yu(e,t){e[0]+=t,e[1]+=e[0]<t}function Ju(e,t,r,i,n,s,a,o){Vu(e,r,e,i),Vu(e,r,t,a);let c=e[s]^e[r],h=e[s+1]^e[r+1];e[s]=h,e[s+1]=c,Vu(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=c>>>24^h<<8,e[i+1]=h>>>24^c<<8,Vu(e,r,e,i),Vu(e,r,t,o),c=e[s]^e[r],h=e[s+1]^e[r+1],e[s]=c>>>16^h<<16,e[s+1]=h>>>16^c<<16,Vu(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=h>>>31^c<<1,e[i+1]=c>>>31^h<<1}const Wu=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),Zu=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function $u(e,t){const r=new Uint32Array(32),i=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=Wu[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const n=t?4294967295:0;r[28]^=n,r[29]^=n;for(let e=0;e<12;e++){const t=e<<4;Ju(r,i,0,8,16,24,Zu[t+0],Zu[t+1]),Ju(r,i,2,10,18,26,Zu[t+2],Zu[t+3]),Ju(r,i,4,12,20,28,Zu[t+4],Zu[t+5]),Ju(r,i,6,14,22,30,Zu[t+6],Zu[t+7]),Ju(r,i,0,10,20,30,Zu[t+8],Zu[t+9]),Ju(r,i,2,12,22,24,Zu[t+10],Zu[t+11]),Ju(r,i,4,14,16,26,Zu[t+12],Zu[t+13]),Ju(r,i,6,8,18,28,Zu[t+14],Zu[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class Xu{constructor(e,t,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(rl),h:new Uint32Array(tl/4),t0:new Uint32Array(2),c:0,outlen:e},n[0]=e,t&&(n[1]=t.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=Wu[e]^s[e];if(t){const e=new Uint8Array(rl);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===rl&&(Yu(this.S.t0,this.S.c),$u(this.S,!1),this.S.c=0);let r=rl-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const i=Math.min(r,e.length-t);this.S.c+=i,t+=i}return this}digest(e){Yu(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=rl,$u(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function el(e,t,r,i){if(e>tl)throw Error(`outlen must be at most ${tl} (given: ${e})`);return new Xu(e,t,r,i)}const tl=64,rl=128,il=2,nl=19,sl=4294967295,al=4,ol=4294967295,cl=8,hl=4294967295,ul=8,ll=4294967295,yl=4294967295,fl=32,gl=1024,pl=64,dl=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function Al(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function wl(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=t;for(let t=r;t<r+7;t++)e[t]=i,i=(i-e[t])/256;return e}function ml(e,t,r){const i=new Uint8Array(64),n=new Uint8Array(4+t.length);if(Al(n,e,0),n.set(t,4),e<=64)return el(e).update(n).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)el(64).update(0===e?n:i).digest(i),r.set(i.subarray(0,32),32*e);const a=new Uint8Array(el(e-32*s).update(i).digest());return r.set(a,32*s),r}function bl(e,t,r,i){return e.fn.XOR(t.byteOffset,r.byteOffset,i.byteOffset),t}function El(e,t,r,i){return e.fn.G(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function kl(e,t,r,i){return e.fn.G2(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function*vl(e,t,r,i,n,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);wl(c,t,0),wl(c,r,8),wl(c,i,16),wl(c,n,24),wl(c,s,32),wl(c,il,40);for(let t=1;t<=a;t++){wl(e.refs.prngTmp,t,c.length);const r=kl(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}const Il=1024,Bl=64*Il;function Sl(e,{memory:t,instance:r}){if(!dl)throw Error("BigEndian system not supported");const i=function({type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(e,t,r,i)=>{if(t<r||t>i)throw Error(`${e} size should be between ${r} and ${i} bytes`)};if(e!==il||t!==nl)throw Error("Unsupported type or version");return u("password",i,ul,hl),u("salt",n,cl,ol),u("tag",r,al,sl),u("memory",c,8*o,ll),s&&u("associated data",s,0,yl),a&&u("secret",a,0,fl),{type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:il,version:nl,...e}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*gl+10*Il;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/Bl);t.grow(e)}let y=0;c.gZ=new Uint8Array(t.buffer,y,gl),y+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,y,gl),y+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,y,gl),y+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,y,1024),y+=c.ZERO1024.length;const f=new Uint32Array(t.buffer,y,2);y+=f.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:h,refs:c},p=new Uint8Array(t.buffer,y,gl);y+=p.length;const d=new Uint8Array(t.buffer,y,i.memorySize*gl),A=new Uint8Array(t.buffer,0,y),w=function(e){const t=el(pl),r=new Uint8Array(4),i=new Uint8Array(24);Al(i,e.lanes,0),Al(i,e.tagLength,4),Al(i,e.memorySize,8),Al(i,e.passes,12),Al(i,e.version,16),Al(i,e.type,20);const n=[i];e.password?(n.push(Al(new Uint8Array(4),e.password.length,0)),n.push(e.password)):n.push(r);e.salt?(n.push(Al(new Uint8Array(4),e.salt.length,0)),n.push(e.salt)):n.push(r);e.secret?(n.push(Al(new Uint8Array(4),e.secret.length,0)),n.push(e.secret)):n.push(r);e.ad?(n.push(Al(new Uint8Array(4),e.ad.length,0)),n.push(e.ad)):n.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((e=>{r.set(e,i),i+=e.length})),r}(n));const s=t.digest();return new Uint8Array(s)}(i),m=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(m))),E=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+gl),b[e][t]);for(let e=0;e<i.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),Al(t,0,w.length),Al(t,e,w.length+4),ml(gl,t,E(e,0)),Al(t,1,w.length),ml(gl,t,E(e,1))}const k=m/4;for(let e=0;e<i.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let n=0;n<i.lanes;n++){let s=0===t&&0===e?2:0;const a=r?vl(g,e,n,t,u,i.passes,k,s):null;for(;s<k;s++){const c=t*k+s,h=c>0?b[n][c-1]:b[n][m-1],u=r?a.next().value:h;o(f.byteOffset,u.byteOffset,n,i.lanes,e,t,s,4,k);const l=f[0],y=f[1];0===e&&E(n,c),El(g,h,b[l][y],e>0?p:b[n][c]),e>0&&bl(g,b[n][c],p,b[n][c])}}}const v=b[0][m-1];for(let e=1;e<i.lanes;e++)bl(g,v,v,b[e][m-1]);const I=ml(i.tagLength,v,new Uint8Array(i.tagLength));return A.fill(0),t.grow(0),I}let Cl;async function Kl(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(e,t,r){const i={env:{memory:e}};if(void 0===Cl)try{const e=await t(i);return Cl=!0,e}catch(e){Cl=!1}return(Cl?t:r)(i)}(r,e,t);return e=>Sl(e,{instance:i.instance,memory:r})}function Dl(e,r,i,n){var s=null,a=t.atob(i),o=a.length;s=new Uint8Array(new ArrayBuffer(o));for(var c=0;c<o;c++)s[c]=a.charCodeAt(c);return function(e,t,r){var i=WebAssembly.instantiate,n=WebAssembly.compile;return t?i(e,t):n(e)}(s,n)}var Pl=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Kl((e=>Dl(0,0,"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",e)),(e=>Dl(0,0,"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",e)))});return e.AEADEncryptedDataPacket=sa,e.Argon2OutOfMemoryError=wn,e.Argon2S2K=kn,e.CleartextMessage=$a,e.CompressedDataPacket=Js,e.KDFParams=sn,e.LiteralDataPacket=Ls,e.MarkerPacket=class{static get tag(){return Q.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}},e.Message=Ya,e.OnePassSignaturePacket=js,e.PacketList=Vs,e.PaddingPacket=class{static get tag(){return Q.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await An.random.getRandomBytes(e)}},e.PrivateKey=Ha,e.PublicKey=Fa,e.PublicKeyEncryptedSessionKeyPacket=aa,e.PublicKeyPacket=ha,e.PublicSubkeyPacket=ya,e.SecretKeyPacket=ga,e.SecretSubkeyPacket=Aa,e.Signature=ma,e.SignaturePacket=Os,e.Subkey=Ma,e.SymEncryptedIntegrityProtectedDataPacket=ra,e.SymEncryptedSessionKeyPacket=ca,e.SymmetricallyEncryptedDataPacket=la,e.TrustPacket=class{static get tag(){return Q.packet.trust}read(){throw new ei("Trust packets are not supported")}write(){throw new ei("Trust packets are not supported")}},e.UnparseablePacket=ri,e.UserAttributePacket=fa,e.UserIDPacket=da,e.armor=$,e.config=R,e.createCleartextMessage=async function({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!T.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new $a(e)},e.createMessage=async function({text:e,binary:t,filename:r,date:i=new Date,format:n=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!T.isString(e)&&!T.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!T.isUint8Array(t)&&!T.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=T.isStream(a),h=new Ls(i);void 0!==e?h.setText(a,Q.write(Q.literal,n)):h.setBytes(a,Q.write(Q.literal,n)),void 0!==r&&h.setFilename(r);const u=new Vs;u.push(h);const l=new Ya(u);return l.fromStream=c,l},e.decrypt=async function({message:e,decryptionKeys:t,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(io(h={...R,...h}),Xa(e),n=no(n),t=no(t),r=no(r),i=no(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await e.decrypt(t,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),ao(l,e),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=d([l.data,D((async()=>{await T.anyPromise(l.signatures.map((e=>e.verified)))}))])}return l.data=await so(l.data),l}catch(e){throw T.wrapError("Error decrypting message",e)}},e.decryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){io(r={...R,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=T.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>T.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),T.wrapError("Error decrypting private key",e)}},e.decryptSessionKeys=async function({message:e,decryptionKeys:t,passwords:r,date:i=new Date,config:n,...s}){if(io(n={...R,...n}),Xa(e),t=no(t),r=no(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,i,n)}catch(e){throw T.wrapError("Error decrypting session keys",e)}},e.encrypt=async function({message:e,encryptionKeys:t,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:y=[],signatureNotations:f=[],config:g,...p}){if(io(g={...R,...g}),Xa(e),to(s),t=no(t),r=no(r),i=no(i),c=no(c),h=no(h),l=no(l),y=no(y),f=no(f),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,a,c,u,l,f,g)),e=e.compress(await async function(e=[],t=new Date,r=[],i=R){const n=Q.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,n){const a=(await e.getPrimarySelfSignature(t,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(t,u,y,g),g),e=await e.encrypt(t,i,n,o,h,u,y,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await so(p)}catch(e){throw T.wrapError("Error encrypting message",e)}},e.encryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){io(r={...R,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=T.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:i}=e;await i.encrypt(o[t],r),i.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),T.wrapError("Error encrypting private key",e)}},e.encryptSessionKey=async function({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(io(u={...R,...u}),function(e,t){if(!T.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!T.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),to(s),i=no(i),n=no(n),o=no(o),h=no(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const y=Object.keys(l);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return oo(await Ya.encryptSessionKey(e,t,r,i,n,a,o,c,h,u),s,u)}catch(e){throw T.wrapError("Error encrypting session key",e)}},e.enums=Q,e.generateKey=async function({userIDs:e=[],passphrase:t,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...y}){io(l={...R,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),e=no(e);const f=Object.keys(y);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const g={userIDs:e,passphrase:t,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=Da(e)).subkeys=e.subkeys.map(((t,r)=>Da(e.subkeys[r],e)));let r=[Ea(e,t)];r=r.concat(e.subkeys.map((e=>ba(e,t))));const i=await Promise.all(r),n=await Ga(i[0],i.slice(1),e,t),s=await n.getRevocationCertificate(e.date,t);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(g,l);return e.getKeys().forEach((({keyPacket:e})=>Qa(e,l))),{privateKey:oo(e,u,l),publicKey:"symmetric"!==r?oo(e.toPublic(),u,l):null,revocationCertificate:t}}catch(e){throw T.wrapError("Error generating keypair",e)}},e.generateSessionKey=async function({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:i,...n}){if(io(i={...R,...i}),e=no(e),r=no(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Ya.generateSessionKey(e,t,r,i)}catch(e){throw T.wrapError("Error generating session key",e)}},e.readCleartextMessage=async function({cleartextMessage:e,config:t,...r}){if(t={...R,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!T.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await Z(e);if(n.type!==Q.armor.signed)throw Error("No cleartext signed message.");const s=await Vs.fromBinary(n.data,Za,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let i=0;i<t.length;i++)if(t[i].constructor.tag===Q.packet.signature&&!e.some(r(t[i])))return!1;return!0},i=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return Q.write(Q.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));i.push(...e)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new ma(s);return new $a(n.text,a)},e.readKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={...R,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!T.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!T.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await Z(e);if(t!==Q.armor.publicKey&&t!==Q.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await Vs.fromBinary(s,Oa,r),o=a.indexOfTag(Q.packet.publicKey,Q.packet.secretKey);if(0===o.length)throw Error("No key packet found");return za(a.slice(o[0],o[1]))},e.readKeys=async function({armoredKeys:e,binaryKeys:t,config:r,...i}){r={...R,...r};let n=e||t;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!T.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!T.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await Z(e);if(t!==Q.armor.publicKey&&t!==Q.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await Vs.fromBinary(n,Oa,r),c=o.indexOfTag(Q.packet.publicKey,Q.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=za(o.slice(c[e],c[e+1]));a.push(t)}return a},e.readMessage=async function({armoredMessage:e,binaryMessage:t,config:r,...i}){r={...R,...r};let n=e||t;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!T.isString(e)&&!T.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!T.isUint8Array(t)&&!T.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=T.isStream(n);if(e){const{type:e,data:t}=await Z(n);if(e!==Q.armor.message)throw Error("Armored text not of type message");n=t}const o=await Vs.fromBinary(n,ja,r),c=new Ya(o);return c.fromStream=a,c},e.readPrivateKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={...R,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!T.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!T.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await Z(e);if(t!==Q.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await Vs.fromBinary(s,Oa,r),o=a.indexOfTag(Q.packet.publicKey,Q.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===Q.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new Ha(t)}throw Error("No secret key packet found")},e.readPrivateKeys=async function({armoredKeys:e,binaryKeys:t,config:r}){r={...R,...r};let i=e||t;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!T.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!T.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await Z(e);if(t!==Q.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await Vs.fromBinary(i,Oa,r),a=s.indexOfTag(Q.packet.publicKey,Q.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===Q.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new Ha(t);n.push(r)}if(0===n.length)throw Error("No secret key packet found");return n},e.readSignature=async function({armoredSignature:e,binarySignature:t,config:r,...i}){r={...R,...r};let n=e||t;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!T.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!T.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await Z(n);if(e!==Q.armor.signature)throw Error("Armored text not of type signature");n=t}const a=await Vs.fromBinary(n,wa,r);return new ma(a)},e.reformatKey=async function({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){io(a={...R,...a}),t=no(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:i,date:n};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,n={key:i,bind:r},s=await ka(e.bindingSignatures,i,Q.signature.subkeyBinding,n,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&Q.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&Q.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await Ga(i,n,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=T.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(h,a);return{privateKey:oo(e,s,a),publicKey:oo(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw T.wrapError("Error reformatting keypair",e)}},e.revokeKey=async function({key:e,revocationCertificate:t,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){io(s={...R,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,i,s):await e.revoke(r,i,s);return a.isPrivate()?{privateKey:oo(a,n,s),publicKey:oo(a.toPublic(),n,s)}:{privateKey:null,publicKey:oo(a,n,s)}}catch(e){throw T.wrapError("Error revoking key",e)}},e.sign=async function({message:e,signingKeys:t,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(io(c={...R,...c}),eo(e),to(r),t=no(t),n=no(n),a=no(a),o=no(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(e instanceof $a&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof $a&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let h;if(h=i?await e.signDetached(t,void 0,n,s,a,o,c):await e.sign(t,void 0,n,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),i&&(h=E(e.packets.write(),(async(e,t)=>{await Promise.all([A(h,t),C(e).catch((()=>{}))])}))),await so(h)}catch(e){throw T.wrapError("Error signing message",e)}},e.unarmor=Z,e.verify=async function({message:e,verificationKeys:t,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(io(a={...R,...a}),eo(e),t=no(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof $a&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(e instanceof $a&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await e.verifyDetached(n,t,s,a):await e.verify(t,s,a),o.data="binary"===i?e.getLiteralData():e.getText(),e.fromStream&&ao(o,e),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=d([o.data,D((async()=>{await T.anyPromise(o.signatures.map((e=>e.verified)))}))])}return o.data=await so(o.data),o}catch(e){throw T.wrapError("Error verifying signed message",e)}},e}({});
|
|
16
|
+
const $l=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),Xl=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),ey=BigInt(1),ty=BigInt(2),ry=(e,t)=>(e+t/ty)/t;const ny=wu($l,void 0,void 0,{sqrt:function(e){const t=$l,r=BigInt(3),n=BigInt(6),i=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),h=e*e*e%t,u=h*h*e%t,l=fu(u,r,t)*u%t,y=fu(l,r,t)*u%t,f=fu(y,ty,t)*h%t,g=fu(f,i,t)*f%t,p=fu(g,s,t)*g%t,d=fu(p,o,t)*p%t,A=fu(d,c,t)*d%t,w=fu(A,o,t)*p%t,m=fu(w,r,t)*u%t,b=fu(m,a,t)*g%t,E=fu(b,n,t)*h%t,k=fu(E,ty,t);if(!ny.eql(ny.sqr(k),e))throw Error("Cannot find square root");return k}}),iy=Fu({a:BigInt(0),b:BigInt(7),Fp:ny,n:Xl,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{const t=Xl,r=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),n=-ey*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),i=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=BigInt("0x100000000000000000000000000000000"),o=ry(s*e,t),c=ry(-n*e,t);let h=lu(e-o*r-c*i,t),u=lu(-o*n-c*s,t);const l=h>a,y=u>a;if(l&&(h=t-h),y&&(u=t-u),h>a||u>a)throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:l,k1:h,k2neg:y,k2:u}}}},vh);BigInt(0),iy.ProjectivePoint;const sy=wu(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),ay=Fu({a:sy.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:sy,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},vh),oy=wu(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),cy=Fu({a:oy.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:oy,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},nl),hy=wu(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),uy=Fu({a:hy.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:hy,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},rl),ly=new Map(Object.entries({nistP256:Hu,nistP384:sl,nistP521:cl,brainpoolP256r1:ay,brainpoolP384r1:cy,brainpoolP512r1:uy,secp256k1:iy,x448:Jl,ed448:Yl}));var yy=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:ly});function fy(e,t,r,n,i,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],y=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],f=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,E,k,v,B=0,I=t.length;const S=32===e.length?3:9;E=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e){const t=8-e.length%8;let r;if(!(t<8)){if(8===t)return e;throw Error("des: invalid padding")}r=0;const n=new Uint8Array(e.length+t);for(let t=0;t<e.length;t++)n[t]=e[t];for(let i=0;i<t;i++)n[e.length+i]=r;return n}(t),I=t.length);let K=new Uint8Array(I),C=0;for(;B<I;){for(m=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],b=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(k=E[p+1],v=E[p+2],g=E[p];g!==k;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|h[A>>>16&63]|l[A>>>8&63]|f[63&A]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|y[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,K[C++]=m>>>24,K[C++]=m>>>16&255,K[C++]=m>>>8&255,K[C++]=255&m,K[C++]=b>>>24,K[C++]=b>>>16&255,K[C++]=b>>>8&255,K[C++]=255&b}return r||(K=function(e){let t,r=null;if(t=0,!r){for(r=1;e[e.length-r]===t;)r++;r--}return e.subarray(0,e.length-r)}(K)),K}function gy(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],n=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],i=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],y=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],f=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,E=0,k=0;for(let v=0;v<p;v++){let p=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++],v=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|n[p>>>20&15]|i[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|h[v>>>24&15]|u[v>>>20&15]|l[v>>>16&15]|y[v>>>12&15]|f[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[k++]=w^b,d[k++]=m^b<<16}return d}function py(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return fy(gy(this.key[2]),fy(gy(this.key[1]),fy(gy(this.key[0]),e,!0),!1),!0)}}function dy(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const n=t+e,i=n<<r|n>>>32-r;return(s[0][i>>>24]^s[1][i>>>16&255])-s[2][i>>>8&255]+s[3][255&i]}function n(e,t,r){const n=t^e,i=n<<r|n>>>32-r;return s[0][i>>>24]-s[1][i>>>16&255]+s[2][i>>>8&255]^s[3][255&i]}function i(e,t,r){const n=t-e,i=n<<r|n>>>32-r;return(s[0][i>>>24]+s[1][i>>>16&255]^s[2][i>>>8&255])-s[3][255&i]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const n=[,,,,,,,,],i=Array(32);let a;for(let e=0;e<4;e++)a=4*e,n[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=n[t[1]],c^=s[4][n[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][n[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][n[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][n[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][n[t[6]>>>2]>>>24-8*(3&t[6])&255],n[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][n[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][n[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][n[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][n[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][n[e[4]>>>2]>>>24-8*(3&e[4])&255],i[h]=c,h++}}for(let e=0;e<16;e++)this.masking[e]=i[e],this.rotate[e]=31&i[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function Ay(e){this.cast5=new dy,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}py.keySize=py.prototype.keySize=24,py.blockSize=py.prototype.blockSize=8,Ay.blockSize=Ay.prototype.blockSize=8,Ay.keySize=Ay.prototype.keySize=16;const wy=4294967295;function my(e,t){return(e<<t|e>>>32-t)&wy}function by(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Ey(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function ky(e,t){return e>>>8*t&255}function vy(e){this.tf=function(){let e=null,t=null,r=-1,n=[],i=[[],[],[],[]];function s(e){return i[0][ky(e,0)]^i[1][ky(e,1)]^i[2][ky(e,2)]^i[3][ky(e,3)]}function a(e){return i[0][ky(e,3)]^i[1][ky(e,0)]^i[2][ky(e,1)]^i[3][ky(e,2)]}function o(e,t){let r=s(t[0]),i=a(t[1]);t[2]=my(t[2]^r+i+n[4*e+8]&wy,31),t[3]=my(t[3],1)^r+2*i+n[4*e+9]&wy,r=s(t[2]),i=a(t[3]),t[0]=my(t[0]^r+i+n[4*e+10]&wy,31),t[1]=my(t[1],1)^r+2*i+n[4*e+11]&wy}function c(e,t){let r=s(t[0]),i=a(t[1]);t[2]=my(t[2],1)^r+i+n[4*e+10]&wy,t[3]=my(t[3]^r+2*i+n[4*e+11]&wy,31),r=s(t[2]),i=a(t[3]),t[0]=my(t[0],1)^r+i+n[4*e+8]&wy,t[1]=my(t[1]^r+2*i+n[4*e+9]&wy,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const h=[],u=[],l=[];let y;const f=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],E=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],k=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],B=[[],[],[],[]];function I(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function K(e,t){let r,n,i;for(r=0;r<8;r++)n=t>>>24,t=t<<8&wy|e>>>24,e=e<<8&wy,i=n<<1,128&n&&(i^=333),t^=n^i<<16,i^=n>>>1,1&n&&(i^=166),t^=i<<24|i<<8;return t}function C(e,t){const r=t>>4,n=15&t,i=A[e][r^n],s=w[e][E[n]^k[r]];return b[e][E[s]^k[i]]<<4|m[e][i^s]}function P(e,t){let r=ky(e,0),n=ky(e,1),i=ky(e,2),s=ky(e,3);switch(y){case 4:r=v[1][r]^ky(t[3],0),n=v[0][n]^ky(t[3],1),i=v[0][i]^ky(t[3],2),s=v[1][s]^ky(t[3],3);case 3:r=v[1][r]^ky(t[2],0),n=v[1][n]^ky(t[2],1),i=v[0][i]^ky(t[2],2),s=v[0][s]^ky(t[2],3);case 2:r=v[0][v[0][r]^ky(t[1],0)]^ky(t[0],0),n=v[0][v[1][n]^ky(t[1],1)]^ky(t[0],1),i=v[1][v[0][i]^ky(t[1],2)]^ky(t[0],2),s=v[1][v[1][s]^ky(t[1],3)]^ky(t[0],3)}return B[0][r]^B[1][n]^B[2][i]^B[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=by(e,r);for(r=0;r<256;r++)v[0][r]=C(0,r),v[1][r]=C(1,r);for(r=0;r<256;r++)g=v[1][r],p=I(g),d=S(g),B[0][r]=g+(p<<8)+(d<<16)+(d<<24),B[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=I(g),d=S(g),B[1][r]=d+(d<<8)+(p<<16)+(g<<24),B[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(y=l.length/2,r=0;r<y;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,f[y-r-1]=K(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=P(s,h),a=my(P(a,u),8),n[r]=s+a&wy,n[r+1]=my(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,y){case 4:s=v[1][s]^ky(f[3],0),a=v[0][a]^ky(f[3],1),o=v[0][o]^ky(f[3],2),c=v[1][c]^ky(f[3],3);case 3:s=v[1][s]^ky(f[2],0),a=v[1][a]^ky(f[2],1),o=v[0][o]^ky(f[2],2),c=v[0][c]^ky(f[2],3);case 2:i[0][r]=B[0][v[0][v[0][s]^ky(f[1],0)]^ky(f[0],0)],i[1][r]=B[1][v[0][v[1][a]^ky(f[1],1)]^ky(f[0],1)],i[2][r]=B[2][v[1][v[0][o]^ky(f[1],2)]^ky(f[0],2)],i[3][r]=B[3][v[1][v[1][c]^ky(f[1],3)]^ky(f[0],3)]}},close:function(){n=[],i=[[],[],[],[]]},encrypt:function(e,i){t=e,r=i;const s=[by(t,r)^n[0],by(t,r+4)^n[1],by(t,r+8)^n[2],by(t,r+12)^n[3]];for(let e=0;e<8;e++)o(e,s);return Ey(t,r,s[2]^n[4]),Ey(t,r+4,s[3]^n[5]),Ey(t,r+8,s[0]^n[6]),Ey(t,r+12,s[1]^n[7]),r+=16,t},decrypt:function(e,i){t=e,r=i;const s=[by(t,r)^n[4],by(t,r+4)^n[5],by(t,r+8)^n[6],by(t,r+12)^n[7]];for(let e=7;e>=0;e--)c(e,s);Ey(t,r,s[2]^n[0]),Ey(t,r+4,s[3]^n[1]),Ey(t,r+8,s[0]^n[2]),Ey(t,r+12,s[1]^n[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function By(){}function Iy(e){this.bf=new By,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}vy.keySize=vy.prototype.keySize=32,vy.blockSize=vy.prototype.blockSize=16,By.prototype.BLOCKSIZE=8,By.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],By.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],By.prototype.NN=16,By.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},By.prototype._F=function(e){let t;const r=255&e,n=255&(e>>>=8),i=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][i],t^=this.sboxes[2][n],t+=this.sboxes[3][r],t},By.prototype._encryptBlock=function(e){let t,r=e[0],n=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[this.NN+0],n^=this.parray[this.NN+1],e[0]=this._clean(n),e[1]=this._clean(r)},By.prototype.encryptBlock=function(e){let t;const r=[0,0],n=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+n];this._encryptBlock(r);const i=[];for(t=0;t<this.BLOCKSIZE/2;++t)i[t+0]=r[0]>>>24-8*t&255,i[t+n]=r[1]>>>24-8*t&255;return i},By.prototype._decryptBlock=function(e){let t,r=e[0],n=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[1],n^=this.parray[0],e[0]=this._clean(n),e[1]=this._clean(r)},By.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let n=0;for(let t=0;t<4;++t)n=n<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^n}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const n=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(n),this.parray[t+0]=n[0],this.parray[t+1]=n[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(n),this.sboxes[t][r+0]=n[0],this.sboxes[t][r+1]=n[1]},Iy.keySize=Iy.prototype.keySize=16,Iy.blockSize=Iy.prototype.blockSize=8;const Sy=new Map([[R.symmetric.tripledes,py],[R.symmetric.cast5,Ay],[R.symmetric.blowfish,Iy],[R.symmetric.twofish,vy]]);var Ky=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Sy});const Cy=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),Py=/* @__PURE__ */new Uint32Array(80);class Uy extends Ah{constructor(){super(64,20,8,!1),this.A=0|Cy[0],this.B=0|Cy[1],this.C=0|Cy[2],this.D=0|Cy[3],this.E=0|Cy[4]}get(){const{A:e,B:t,C:r,D:n,E:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)Py[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)Py[e]=ah(Py[e-3]^Py[e-8]^Py[e-14]^Py[e-16],1);let{A:r,B:n,C:i,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=ph(n,i,s),o=1518500249):e<40?(t=n^i^s,o=1859775393):e<60?(t=dh(n,i,s),o=2400959708):(t=n^i^s,o=3395469782);const c=ah(r,5)+t+a+o+Py[e]|0;a=s,s=i,i=ah(n,30),n=r,r=c}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,n,i,s,a)}roundClean(){Py.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Dy=/* @__PURE__ */fh((()=>new Uy)),xy=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Qy=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((e,t)=>t))),Ry=/* @__PURE__ */Qy.map((e=>(9*e+5)%16));let My=[Qy],Ly=[Ry];for(let e=0;e<4;e++)for(let t of[My,Ly])t.push(t[e].map((e=>xy[e])));const Ty=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>new Uint8Array(e))),Fy=/* @__PURE__ */My.map(((e,t)=>e.map((e=>Ty[t][e])))),Ny=/* @__PURE__ */Ly.map(((e,t)=>e.map((e=>Ty[t][e])))),Hy=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),Oy=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]);function zy(e,t,r,n){return 0===e?t^r^n:1===e?t&r|~t&n:2===e?(t|~r)^n:3===e?t&n|r&~n:t^(r|~n)}const _y=/* @__PURE__ */new Uint32Array(16);class Gy extends Ah{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:n,h4:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|n,this.h4=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)_y[r]=e.getUint32(t,!0);let r=0|this.h0,n=r,i=0|this.h1,s=i,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let e=0;e<5;e++){const t=4-e,y=Hy[e],f=Oy[e],g=My[e],p=Ly[e],d=Fy[e],A=Ny[e];for(let t=0;t<16;t++){const n=ah(r+zy(e,i,a,c)+_y[g[t]]+y,d[t])+u|0;r=u,u=c,c=0|ah(a,10),a=i,i=n}for(let e=0;e<16;e++){const r=ah(n+zy(t,s,o,h)+_y[p[e]]+f,A[e])+l|0;n=l,l=h,h=0|ah(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+n|0,this.h4+r+s|0,this.h0+i+o|0)}roundClean(){_y.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const jy=new Map(Object.entries({sha1:Dy,sha224:Bh,sha256:vh,sha384:nl,sha512:rl,sha3_256:Bl,sha3_512:Il,ripemd160:/* @__PURE__ */fh((()=>new Gy))}));var qy=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:jy});function Vy(e,t,r,n){e[t]+=r[n],e[t+1]+=r[n+1]+(e[t]<r[n])}function Wy(e,t){e[0]+=t,e[1]+=e[0]<t}function Zy(e,t,r,n,i,s,a,o){Vy(e,r,e,n),Vy(e,r,t,a);let c=e[s]^e[r],h=e[s+1]^e[r+1];e[s]=h,e[s+1]=c,Vy(e,i,e,s),c=e[n]^e[i],h=e[n+1]^e[i+1],e[n]=c>>>24^h<<8,e[n+1]=h>>>24^c<<8,Vy(e,r,e,n),Vy(e,r,t,o),c=e[s]^e[r],h=e[s+1]^e[r+1],e[s]=c>>>16^h<<16,e[s+1]=h>>>16^c<<16,Vy(e,i,e,s),c=e[n]^e[i],h=e[n+1]^e[i+1],e[n]=h>>>31^c<<1,e[n+1]=c>>>31^h<<1}const Yy=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),Jy=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function $y(e,t){const r=new Uint32Array(32),n=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=Yy[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const i=t?4294967295:0;r[28]^=i,r[29]^=i;for(let e=0;e<12;e++){const t=e<<4;Zy(r,n,0,8,16,24,Jy[t+0],Jy[t+1]),Zy(r,n,2,10,18,26,Jy[t+2],Jy[t+3]),Zy(r,n,4,12,20,28,Jy[t+4],Jy[t+5]),Zy(r,n,6,14,22,30,Jy[t+6],Jy[t+7]),Zy(r,n,0,10,20,30,Jy[t+8],Jy[t+9]),Zy(r,n,2,12,22,24,Jy[t+10],Jy[t+11]),Zy(r,n,4,14,16,26,Jy[t+12],Jy[t+13]),Zy(r,n,6,8,18,28,Jy[t+14],Jy[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class Xy{constructor(e,t,r,n){const i=new Uint8Array(64);this.S={b:new Uint8Array(rf),h:new Uint32Array(tf/4),t0:new Uint32Array(2),c:0,outlen:e},i[0]=e,t&&(i[1]=t.length),i[2]=1,i[3]=1,r&&i.set(r,32),n&&i.set(n,48);const s=new Uint32Array(i.buffer,i.byteOffset,i.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=Yy[e]^s[e];if(t){const e=new Uint8Array(rf);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===rf&&(Wy(this.S.t0,this.S.c),$y(this.S,!1),this.S.c=0);let r=rf-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const n=Math.min(r,e.length-t);this.S.c+=n,t+=n}return this}digest(e){Wy(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=rf,$y(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function ef(e,t,r,n){if(e>tf)throw Error(`outlen must be at most ${tf} (given: ${e})`);return new Xy(e,t,r,n)}const tf=64,rf=128,nf=2,sf=19,af=4294967295,of=4,cf=4294967295,hf=8,uf=4294967295,lf=8,yf=4294967295,ff=4294967295,gf=32,pf=1024,df=64,Af=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function wf(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function mf(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let n=t;for(let t=r;t<r+7;t++)e[t]=n,n=(n-e[t])/256;return e}function bf(e,t,r){const n=new Uint8Array(64),i=new Uint8Array(4+t.length);if(wf(i,e,0),i.set(t,4),e<=64)return ef(e).update(i).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)ef(64).update(0===e?i:n).digest(n),r.set(n.subarray(0,32),32*e);const a=new Uint8Array(ef(e-32*s).update(n).digest());return r.set(a,32*s),r}function Ef(e,t,r,n){return e.fn.XOR(t.byteOffset,r.byteOffset,n.byteOffset),t}function kf(e,t,r,n){return e.fn.G(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function vf(e,t,r,n){return e.fn.G2(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function*Bf(e,t,r,n,i,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);mf(c,t,0),mf(c,r,8),mf(c,n,16),mf(c,i,24),mf(c,s,32),mf(c,nf,40);for(let t=1;t<=a;t++){mf(e.refs.prngTmp,t,c.length);const r=vf(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}const If=1024,Sf=64*If;function Kf(e,{memory:t,instance:r}){if(!Af)throw Error("BigEndian system not supported");const n=function({type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(e,t,r,n)=>{if(t<r||t>n)throw Error(`${e} size should be between ${r} and ${n} bytes`)};if(e!==nf||t!==sf)throw Error("Unsupported type or version");return u("password",n,lf,uf),u("salt",i,hf,cf),u("tag",r,of,af),u("memory",c,8*o,yf),s&&u("associated data",s,0,ff),a&&u("secret",a,0,gf),{type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:nf,version:sf,...e}),{G:i,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=i,h.G2=s,h.XOR=a;const u=4*n.lanes*Math.floor(n.memorySize/(4*n.lanes)),l=u*pf+10*If;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/Sf);t.grow(e)}let y=0;c.gZ=new Uint8Array(t.buffer,y,pf),y+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,y,pf),y+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,y,pf),y+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,y,1024),y+=c.ZERO1024.length;const f=new Uint32Array(t.buffer,y,2);y+=f.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:h,refs:c},p=new Uint8Array(t.buffer,y,pf);y+=p.length;const d=new Uint8Array(t.buffer,y,n.memorySize*pf),A=new Uint8Array(t.buffer,0,y),w=function(e){const t=ef(df),r=new Uint8Array(4),n=new Uint8Array(24);wf(n,e.lanes,0),wf(n,e.tagLength,4),wf(n,e.memorySize,8),wf(n,e.passes,12),wf(n,e.version,16),wf(n,e.type,20);const i=[n];e.password?(i.push(wf(new Uint8Array(4),e.password.length,0)),i.push(e.password)):i.push(r);e.salt?(i.push(wf(new Uint8Array(4),e.salt.length,0)),i.push(e.salt)):i.push(r);e.secret?(i.push(wf(new Uint8Array(4),e.secret.length,0)),i.push(e.secret)):i.push(r);e.ad?(i.push(wf(new Uint8Array(4),e.ad.length,0)),i.push(e.ad)):i.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach((e=>{r.set(e,n),n+=e.length})),r}(i));const s=t.digest();return new Uint8Array(s)}(n),m=u/n.lanes,b=Array(n.lanes).fill(null).map((()=>Array(m))),E=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+pf),b[e][t]);for(let e=0;e<n.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),wf(t,0,w.length),wf(t,e,w.length+4),bf(pf,t,E(e,0)),wf(t,1,w.length),bf(pf,t,E(e,1))}const k=m/4;for(let e=0;e<n.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let i=0;i<n.lanes;i++){let s=0===t&&0===e?2:0;const a=r?Bf(g,e,i,t,u,n.passes,k,s):null;for(;s<k;s++){const c=t*k+s,h=c>0?b[i][c-1]:b[i][m-1],u=r?a.next().value:h;o(f.byteOffset,u.byteOffset,i,n.lanes,e,t,s,4,k);const l=f[0],y=f[1];0===e&&E(i,c),kf(g,h,b[l][y],e>0?p:b[i][c]),e>0&&Ef(g,b[i][c],p,b[i][c])}}}const v=b[0][m-1];for(let e=1;e<n.lanes;e++)Ef(g,v,v,b[e][m-1]);const B=bf(n.tagLength,v,new Uint8Array(n.tagLength));return A.fill(0),t.grow(0),B}let Cf;async function Pf(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),n=await async function(e,t,r){const n={env:{memory:e}};if(void 0===Cf)try{const e=await t(n);return Cf=!0,e}catch(e){Cf=!1}return(Cf?t:r)(n)}(r,e,t);return e=>Kf(e,{instance:n.instance,memory:r})}function Uf(e,r,n,i){var s=null,a=t.atob(n),o=a.length;s=new Uint8Array(new ArrayBuffer(o));for(var c=0;c<o;c++)s[c]=a.charCodeAt(c);return function(e,t){var r=WebAssembly.instantiate,n=WebAssembly.compile;return t?r(e,t):n(e)}(s,i)}var Df=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Pf((e=>Uf(0,0,"AGFzbQEAAAABKwdgBH9/f38AYAABf2AAAGADf39/AGAJf39/f39/f39/AX9gAX8AYAF/AX8CEwEDZW52Bm1lbW9yeQIBkAiAgAQDCgkCAwAABAEFBgEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwACAkcyAAMFZ2V0TFoABBlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAgJc3RhY2tTYXZlAAUMc3RhY2tSZXN0b3JlAAYKc3RhY2tBbGxvYwAHCQcBAEEBCwEACs0gCQMAAQtYAQJ/A0AgACAEQQR0IgNqIAIgA2r9AAQAIAEgA2r9AAQA/VH9CwQAIAAgA0EQciIDaiACIANq/QAEACABIANq/QAEAP1R/QsEACAEQQJqIgRBwABHDQALC7ceAgt7A38DQCADIBFBBHQiD2ogASAPav0ABAAgACAPav0ABAD9USIF/QsEACACIA9qIAX9CwQAIAMgD0EQciIPaiABIA9q/QAEACAAIA9q/QAEAP1RIgX9CwQAIAIgD2ogBf0LBAAgEUECaiIRQcAARw0ACwNAIAMgEEEHdGoiAEEQaiAA/QAEcCAA/QAEMCIFIAD9AAQQIgT9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAQgBP0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9USIJQSD9ywEgCUEg/c0B/VAiCSAA/QAEUCIG/c4BIAkgCf0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIGIAX9USIFQSj9ywEgBUEY/c0B/VAiCCAE/c4BIAggCP0NAAECAwgJCgsAAQIDCAkKCyAEIAT9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIKIAogCf1RIgVBMP3LASAFQRD9zQH9UCIFIAb9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgkgCP1RIgRBAf3LASAEQT/9zQH9UCIMIAD9AARgIAD9AAQgIgQgAP0ABAAiBv3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBv1RIghBIP3LASAIQSD9zQH9UCIIIABBQGsiAf0ABAAiB/3OASAIIAj9DQABAgMICQoLAAECAwgJCgsgByAH/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiByAE/VEiBEEo/csBIARBGP3NAf1QIgsgBv3OASALIAv9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAI/VEiBEEw/csBIARBEP3NAf1QIgQgB/3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgByAH/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCCAL/VEiB0EB/csBIAdBP/3NAf1QIg0gDf0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eHyIH/c4BIAcgB/0NAAECAwgJCgsAAQIDCAkKCyAKIAr9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIKIAQgBSAF/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/VEiC0Eg/csBIAtBIP3NAf1QIgsgCP3OASALIAv9DQABAgMICQoLAAECAwgJCgsgCCAI/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCCAH/VEiB0Eo/csBIAdBGP3NAf1QIgcgCv3OASAHIAf9DQABAgMICQoLAAECAwgJCgsgCiAK/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiDv0LBAAgACAGIA0gDCAM/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4fIgr9zgEgCiAK/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgYgBSAEIAT9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9USIFQSD9ywEgBUEg/c0B/VAiBSAJ/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAJIAn9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJIAr9USIEQSj9ywEgBEEY/c0B/VAiCiAG/c4BIAogCv0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIE/QsEACAAIAQgBf1RIgVBMP3LASAFQRD9zQH9UCIFIA4gC/1RIgRBMP3LASAEQRD9zQH9UCIEIAT9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwRgIAAgBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwRwIAEgBCAI/c4BIAQgBP0NAAECAwgJCgsAAQIDCAkKCyAIIAj9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIE/QsEACAAIAUgCf3OASAFIAX9DQABAgMICQoLAAECAwgJCgsgCSAJ/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCf0LBFAgACAEIAf9USIFQQH9ywEgBUE//c0B/VAiBSAJIAr9USIEQQH9ywEgBEE//c0B/VAiBCAE/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEICAAIAQgBSAF/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEMCAQQQFqIhBBCEcNAAtBACEQA0AgAyAQQQR0aiIAQYABaiAA/QAEgAcgAP0ABIADIgUgAP0ABIABIgT9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAQgBP0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9USIJQSD9ywEgCUEg/c0B/VAiCSAA/QAEgAUiBv3OASAJIAn9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAF/VEiBUEo/csBIAVBGP3NAf1QIgggBP3OASAIIAj9DQABAgMICQoLAAECAwgJCgsgBCAE/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCiAKIAn9USIFQTD9ywEgBUEQ/c0B/VAiBSAG/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJIAj9USIEQQH9ywEgBEE//c0B/VAiDCAA/QAEgAYgAP0ABIACIgQgAP0ABAAiBv3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBv1RIghBIP3LASAIQSD9zQH9UCIIIAD9AASABCIH/c4BIAggCP0NAAECAwgJCgsAAQIDCAkKCyAHIAf9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIHIAT9USIEQSj9ywEgBEEY/c0B/VAiCyAG/c4BIAsgC/0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIGIAj9USIEQTD9ywEgBEEQ/c0B/VAiBCAH/c4BIAQgBP0NAAECAwgJCgsAAQIDCAkKCyAHIAf9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIIIAv9USIHQQH9ywEgB0E//c0B/VAiDSAN/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4fIgf9zgEgByAH/Q0AAQIDCAkKCwABAgMICQoLIAogCv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgogBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9USILQSD9ywEgC0Eg/c0B/VAiCyAI/c4BIAsgC/0NAAECAwgJCgsAAQIDCAkKCyAIIAj9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIIIAf9USIHQSj9ywEgB0EY/c0B/VAiByAK/c4BIAcgB/0NAAECAwgJCgsAAQIDCAkKCyAKIAr9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIO/QsEACAAIAYgDSAMIAz9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh8iCv3OASAKIAr9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAFIAQgBP0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/1RIgVBIP3LASAFQSD9zQH9UCIFIAn9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAkgCf0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgkgCv1RIgRBKP3LASAEQRj9zQH9UCIKIAb9zgEgCiAK/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9CwQAIAAgBCAF/VEiBUEw/csBIAVBEP3NAf1QIgUgDiAL/VEiBEEw/csBIARBEP3NAf1QIgQgBP0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/0LBIAGIAAgBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwSAByAAIAQgCP3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgCCAI/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBP0LBIAEIAAgBSAJ/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAJIAn9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJ/QsEgAUgACAEIAf9USIFQQH9ywEgBUE//c0B/VAiBSAJIAr9USIEQQH9ywEgBEE//c0B/VAiBCAE/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEgAIgACAEIAUgBf0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/0LBIADIBBBAWoiEEEIRw0AC0EAIRADQCACIBBBBHQiAGoiASAAIANq/QAEACAB/QAEAP1R/QsEACACIABBEHIiAWoiDyABIANq/QAEACAP/QAEAP1R/QsEACACIABBIHIiAWoiDyABIANq/QAEACAP/QAEAP1R/QsEACACIABBMHIiAGoiASAAIANq/QAEACAB/QAEAP1R/QsEACAQQQRqIhBBwABHDQALCxYAIAAgASACIAMQAiAAIAIgAiADEAILewIBfwF+IAIhCSABNQIAIQogBCAFcgRAIAEoAgQgA3AhCQsgACAJNgIAIAAgB0EBayAFIAQbIAhsIAZBAWtBAEF/IAYbIAIgCUYbaiIBIAVBAWogCGxBACAEG2ogAa0gCiAKfkIgiH5CIIinQX9zaiAHIAhscDYCBCAACwQAIwALBgAgACQACxAAIwAgAGtBcHEiACQAIAALBQBBgAgL",e)),(e=>Uf(0,0,"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",e)))});return e.AEADEncryptedDataPacket=Yo,e.Argon2OutOfMemoryError=ca,e.Argon2S2K=ya,e.CleartextMessage=_c,e.CompressedDataPacket=Ho,e.KDFParams=Zs,e.LiteralDataPacket=Co,e.MarkerPacket=class{static get tag(){return R.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}},e.Message=Nc,e.OnePassSignaturePacket=Lo,e.PacketList=Fo,e.PaddingPacket=class{static get tag(){return R.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await oa.random.getRandomBytes(e)}},e.PrivateKey=xc,e.PublicKey=Dc,e.PublicKeyEncryptedSessionKeyPacket=Jo,e.PublicKeyPacket=ec,e.PublicSubkeyPacket=nc,e.SecretKeyPacket=sc,e.SecretSubkeyPacket=cc,e.Signature=uc,e.SignaturePacket=Qo,e.Subkey=Sc,e.SymEncryptedIntegrityProtectedDataPacket=Vo,e.SymEncryptedSessionKeyPacket=Xo,e.SymmetricallyEncryptedDataPacket=rc,e.TrustPacket=class{static get tag(){return R.packet.trust}read(){throw new qn("Trust packets are not supported")}write(){throw new qn("Trust packets are not supported")}},e.UnparseablePacket=Wn,e.UserAttributePacket=ic,e.UserIDPacket=oc,e.armor=X,e.config=M,e.createCleartextMessage=async function({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!T.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new _c(e)},e.createMessage=async function({text:e,binary:t,filename:r,date:n=new Date,format:i=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!T.isString(e)&&!T.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!T.isUint8Array(t)&&!T.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=T.isStream(a),h=new Co(n);void 0!==e?h.setText(a,R.write(R.literal,i)):h.setBytes(a,R.write(R.literal,i)),void 0!==r&&h.setFilename(r);const u=new Fo;u.push(h);const l=new Nc(u);return l.fromStream=c,l},e.decrypt=async function({message:e,decryptionKeys:t,passwords:r,sessionKeys:n,verificationKeys:i,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(Wc(h={...M,...h}),Gc(e),i=Zc(i),t=Zc(t),r=Zc(r),n=Zc(n),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await e.decrypt(t,r,n,c,h);i||(i=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,i,c,h):await u.verify(i,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),Jc(l,e),s){if(0===i.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=A([l.data,U((async()=>{await T.anyPromise(l.signatures.map((e=>e.verified)))}))])}return l.data=await Yc(l.data),l}catch(e){throw T.wrapError("Error decrypting message",e)}},e.decryptKey=async function({privateKey:e,passphrase:t,config:r,...n}){Wc(r={...M,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=T.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>T.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),T.wrapError("Error decrypting private key",e)}},e.decryptSessionKeys=async function({message:e,decryptionKeys:t,passwords:r,date:n=new Date,config:i,...s}){if(Wc(i={...M,...i}),Gc(e),t=Zc(t),r=Zc(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,n,i)}catch(e){throw T.wrapError("Error decrypting session keys",e)}},e.encrypt=async function({message:e,encryptionKeys:t,signingKeys:r,passwords:n,sessionKey:i,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:y=[],signatureNotations:f=[],config:g,...p}){if(Wc(g={...M,...g}),Gc(e),qc(s),t=Zc(t),r=Zc(r),n=Zc(n),c=Zc(c),h=Zc(h),l=Zc(l),y=Zc(y),f=Zc(f),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,a,c,u,l,f,g)),e=e.compress(await async function(e=[],t=new Date,r=[],n=M){const i=R.compression.uncompressed,s=n.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,i){const a=(await e.getPrimarySelfSignature(t,r[i],n)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:i}(t,u,y,g),g),e=await e.encrypt(t,n,i,o,h,u,y,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await Yc(p)}catch(e){throw T.wrapError("Error encrypting message",e)}},e.encryptKey=async function({privateKey:e,passphrase:t,config:r,...n}){Wc(r={...M,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=T.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:n}=e;await n.encrypt(o[t],r),n.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),T.wrapError("Error encrypting private key",e)}},e.encryptSessionKey=async function({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:n,passwords:i,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(Wc(u={...M,...u}),function(e){if(!T.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!T.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),qc(s),n=Zc(n),i=Zc(i),o=Zc(o),h=Zc(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const y=Object.keys(l);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(!(n&&0!==n.length||i&&0!==i.length))throw Error("No encryption keys or passwords provided.");try{return $c(await Nc.encryptSessionKey(e,t,r,n,i,a,o,c,h,u),s,u)}catch(e){throw T.wrapError("Error encrypting session key",e)}},e.enums=R,e.generateKey=async function({userIDs:e=[],passphrase:t,type:r,curve:n,rsaBits:i=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...y}){Wc(l={...M,...l}),r||n?(r=r||"ecc",n=n||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",n="curve25519Legacy"),e=Zc(e);const f=Object.keys(y);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&i<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${i}`);const g={userIDs:e,passphrase:t,type:r,rsaBits:i,curve:n,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=bc(e)).subkeys=e.subkeys.map(((t,r)=>bc(e.subkeys[r],e)));let r=[yc(e,t)];r=r.concat(e.subkeys.map((e=>lc(e,t))));const n=await Promise.all(r),i=await Mc(n[0],n.slice(1),e,t),s=await i.getRevocationCertificate(e.date,t);return i.revocationSignatures=[],{key:i,revocationCertificate:s}}(g,l);return e.getKeys().forEach((({keyPacket:e})=>Bc(e,l))),{privateKey:$c(e,u,l),publicKey:"symmetric"!==r?$c(e.toPublic(),u,l):null,revocationCertificate:t}}catch(e){throw T.wrapError("Error generating keypair",e)}},e.generateSessionKey=async function({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:n,...i}){if(Wc(n={...M,...n}),e=Zc(e),r=Zc(r),i.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Nc.generateSessionKey(e,t,r,n)}catch(e){throw T.wrapError("Error generating session key",e)}},e.readCleartextMessage=async function({cleartextMessage:e,config:t,...r}){if(t={...M,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!T.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const n=Object.keys(r);if(n.length>0)throw Error("Unknown option: "+n.join(", "));const i=await $(e);if(i.type!==R.armor.signed)throw Error("No cleartext signed message.");const s=await Fo.fromBinary(i.data,zc,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let n=0;n<t.length;n++)if(t[n].constructor.tag===R.packet.signature&&!e.some(r(t[n])))return!1;return!0},n=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return R.write(R.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));n.push(...e)}})),n.length&&!r(n))throw Error("Hash algorithm mismatch in armor header and signature")}(i.headers,s);const a=new uc(s);return new _c(i.text,a)},e.readKey=async function({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...M,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!T.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!T.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await $(e);if(t!==R.armor.publicKey&&t!==R.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await Fo.fromBinary(s,Qc,r),o=a.indexOfTag(R.packet.publicKey,R.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Rc(a.slice(o[0],o[1]))},e.readKeys=async function({armoredKeys:e,binaryKeys:t,config:r,...n}){r={...M,...r};let i=e||t;if(!i)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!T.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!T.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await $(e);if(t!==R.armor.publicKey&&t!==R.armor.privateKey)throw Error("Armored text not of type key");i=r}const a=[],o=await Fo.fromBinary(i,Qc,r),c=o.indexOfTag(R.packet.publicKey,R.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Rc(o.slice(c[e],c[e+1]));a.push(t)}return a},e.readMessage=async function({armoredMessage:e,binaryMessage:t,config:r,...n}){r={...M,...r};let i=e||t;if(!i)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!T.isString(e)&&!T.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!T.isUint8Array(t)&&!T.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=T.isStream(i);if(e){const{type:e,data:t}=await $(i);if(e!==R.armor.message)throw Error("Armored text not of type message");i=t}const o=await Fo.fromBinary(i,Lc,r),c=new Nc(o);return c.fromStream=a,c},e.readPrivateKey=async function({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...M,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!T.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!T.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await $(e);if(t!==R.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await Fo.fromBinary(s,Qc,r),o=a.indexOfTag(R.packet.publicKey,R.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===R.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new xc(t)}throw Error("No secret key packet found")},e.readPrivateKeys=async function({armoredKeys:e,binaryKeys:t,config:r}){r={...M,...r};let n=e||t;if(!n)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!T.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!T.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await $(e);if(t!==R.armor.privateKey)throw Error("Armored text not of type private key");n=r}const i=[],s=await Fo.fromBinary(n,Qc,r),a=s.indexOfTag(R.packet.publicKey,R.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===R.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new xc(t);i.push(r)}if(0===i.length)throw Error("No secret key packet found");return i},e.readSignature=async function({armoredSignature:e,binarySignature:t,config:r,...n}){r={...M,...r};let i=e||t;if(!i)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!T.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!T.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await $(i);if(e!==R.armor.signature)throw Error("Armored text not of type signature");i=t}const a=await Fo.fromBinary(i,hc,r);return new uc(a)},e.reformatKey=async function({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:n=0,date:i,format:s="armored",config:a,...o}){Wc(a={...M,...a}),t=Zc(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:n,date:i};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const n=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,i={key:n,bind:r},s=await fc(e.bindingSignatures,n,R.signature.subkeyBinding,i,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&R.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&R.keyFlags.forwardedCommunication}}))));const i=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==i.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await Mc(n,i,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=T.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(h,a);return{privateKey:$c(e,s,a),publicKey:$c(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw T.wrapError("Error reformatting keypair",e)}},e.revokeKey=async function({key:e,revocationCertificate:t,reasonForRevocation:r,date:n=new Date,format:i="armored",config:s,...a}){Wc(s={...M,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,n,s):await e.revoke(r,n,s);return a.isPrivate()?{privateKey:$c(a,i,s),publicKey:$c(a.toPublic(),i,s)}:{privateKey:null,publicKey:$c(a,i,s)}}catch(e){throw T.wrapError("Error revoking key",e)}},e.sign=async function({message:e,signingKeys:t,format:r="armored",detached:n=!1,signingKeyIDs:i=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(Wc(c={...M,...c}),jc(e),qc(r),t=Zc(t),i=Zc(i),a=Zc(a),o=Zc(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(e instanceof _c&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof _c&&n)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let h;if(h=n?await e.signDetached(t,void 0,i,s,a,o,c):await e.sign(t,void 0,i,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),n&&(h=k(e.packets.write(),(async(e,t)=>{await Promise.all([w(h,t),C(e).catch((()=>{}))])}))),await Yc(h)}catch(e){throw T.wrapError("Error signing message",e)}},e.unarmor=$,e.verify=async function({message:e,verificationKeys:t,expectSigned:r=!1,format:n="utf8",signature:i=null,date:s=new Date,config:a,...o}){if(Wc(a={...M,...a}),jc(e),t=Zc(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof _c&&"binary"===n)throw Error("Can't return cleartext message data as binary");if(e instanceof _c&&i)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=i?await e.verifyDetached(i,t,s,a):await e.verify(t,s,a),o.data="binary"===n?e.getLiteralData():e.getText(),e.fromStream&&!i&&Jc(o,e),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=A([o.data,U((async()=>{await T.anyPromise(o.signatures.map((e=>e.verified)))}))])}return o.data=await Yc(o.data),o}catch(e){throw T.wrapError("Error verifying signed message",e)}},e}({});
|
|
14
17
|
//# sourceMappingURL=openpgp.min.js.map
|