@protontech/openpgp 6.0.0-beta.2 → 6.0.0-beta.3.patch.0

package/dist/openpgp.min.js

@@ -1,15 +1,17 @@
-/*! OpenPGP.js v6.0.0-beta.2 - 2024-07-05 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
-var openpgp=function(e){"use strict";const t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},r=Symbol("doneWritingPromise"),i=Symbol("doneWritingResolve"),n=Symbol("doneWritingReject"),s=Symbol("readingIndex");class ArrayStream extends Array{constructor(){super(),Object.setPrototypeOf(this,ArrayStream.prototype),this[r]=new Promise(((e,t)=>{this[i]=e,this[n]=t})),this[r].catch((()=>{}))}}function a(e){return e&&e.getReader&&Array.isArray(e)}function o(e){if(!a(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function c(e){if(a(e))return"array";if(t.ReadableStream&&t.ReadableStream.prototype.isPrototypeOf(e))return"web";if(e&&!(t.ReadableStream&&e instanceof t.ReadableStream)&&"function"==typeof e._read&&"object"==typeof e._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!e||!e.getReader)&&"web-like"}function h(e){return Uint8Array.prototype.isPrototypeOf(e)}function u(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!h(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((function(e){r.set(e,i),i+=e.length})),r}ArrayStream.prototype.getReader=function(){return void 0===this[s]&&(this[s]=0),{read:async()=>(await this[r],this[s]===this.length?{value:void 0,done:!0}:{value:this[this[s]++],done:!1})}},ArrayStream.prototype.readToEnd=async function(e){await this[r];const t=e(this.slice(this[s]));return this.length=0,t},ArrayStream.prototype.clone=function(){const e=new ArrayStream;return e[r]=this[r].then((()=>{e.push(...this)})),e},o.prototype.write=async function(e){this.stream.push(e)},o.prototype.close=async function(){this.stream[i]()},o.prototype.abort=async function(e){return this.stream[n](e),e},o.prototype.releaseLock=function(){},"object"==typeof t.process&&t.process.versions;const l=new WeakSet,y=Symbol("externalBuffer");function f(e){if(this.stream=e,e[y]&&(this[y]=e[y].slice()),a(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(c(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||l.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{l.add(e)}catch(e){}}}function g(e){return c(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function p(e){if(c(e))return e;const t=new ArrayStream;return(async()=>{const r=U(t);await r.write(e),await r.close()})(),t}function d(e){return e.some((e=>c(e)&&!a(e)))?function(e){e=e.map(g);const t=m((async function(e){await Promise.all(i.map((t=>K(t,e))))}));let r=Promise.resolve();const i=e.map(((i,n)=>E(i,((i,s)=>(r=r.then((()=>A(i,t.writable,{preventClose:n!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>a(e)))?function(e){const t=new ArrayStream;let r=Promise.resolve();return e.forEach(((i,n)=>(r=r.then((()=>A(i,t,{preventClose:n!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):u(e)}async function A(e,t,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(c(e)&&!a(e)){e=g(e);try{if(e[y]){const r=U(t);for(let t=0;t<e[y].length;t++)await r.ready,await r.write(e[y][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:i,preventCancel:n})}catch(e){}return}const s=D(e=p(e)),o=U(t);try{for(;;){await o.ready;const{done:e,value:t}=await s.read();if(e){r||await o.close();break}await o.write(t)}}catch(e){i||await o.abort(e)}finally{s.releaseLock(),o.releaseLock()}}function w(e,t){const r=new TransformStream(t);return A(e,r.writable),r.readable}function m(e){let t,r,i,n=!1,s=!1;return{readable:new ReadableStream({start(e){i=e},pull(){t?t():n=!0},async cancel(t){s=!0,e&&await e(t),r&&r(t)}},{highWaterMark:0}),writable:new WritableStream({write:async function(e){if(s)throw Error("Stream is cancelled");i.enqueue(e),n?n=!1:(await new Promise(((e,i)=>{t=e,r=i})),t=null,r=null)},close:i.close.bind(i),abort:i.error.bind(i)})}}function b(e,t=(()=>{}),r=(()=>{})){if(a(e)){const i=new ArrayStream;return(async()=>{const n=U(i);try{const i=await C(e),s=t(i),a=r();let o;o=void 0!==s&&void 0!==a?d([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(e){await n.abort(e)}})(),i}if(c(e))return w(e,{async transform(e,r){try{const i=await t(e);void 0!==i&&r.enqueue(i)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const i=t(e),n=r();return void 0!==i&&void 0!==n?d([i,n]):void 0!==i?i:n}function E(e,t){if(c(e)&&!a(e)){let r;const i=new TransformStream({start(e){r=e}}),n=A(e,i.writable),s=m((async function(e){r.error(e),await n,await new Promise(setTimeout)}));return t(i.readable,s.writable),s.readable}e=p(e);const r=new ArrayStream;return t(e,r),r}function k(e,t){let r;const i=E(e,((e,n)=>{const s=D(e);s.remainder=()=>(s.releaseLock(),A(e,n),i),r=t(s)}));return r}function v(e){if(a(e))return e.clone();if(c(e)){const t=function(e){if(a(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(c(e)){const t=g(e).tee();return t[0][y]=t[1][y]=e[y],t}return[S(e),S(e)]}(e);return I(e,t[0]),t[1]}return S(e)}function B(e){return a(e)?v(e):c(e)?new ReadableStream({start(t){const r=E(e,(async(e,r)=>{const i=D(e),n=U(r);try{for(;;){await n.ready;const{done:e,value:r}=await i.read();if(e){try{t.close()}catch(e){}return void await n.close()}try{t.enqueue(r)}catch(e){}await n.write(r)}}catch(e){t.error(e),await n.abort(e)}}));I(e,r)}}):S(e)}function I(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(t):i.get=i.get.bind(t),Object.defineProperty(e,r,i))}))}function S(e,t=0,r=1/0){if(a(e))throw Error("Not implemented");if(c(e)){if(t>=0&&r>=0){let i=0;return w(e,{transform(e,n){i<r?(i+e.length>=t&&n.enqueue(S(e,Math.max(t-i,0),r-i)),i+=e.length):n.terminate()}})}if(t<0&&(r<0||r===1/0)){let i=[];return b(e,(e=>{e.length>=-t?i=[e]:i.push(e)}),(()=>S(d(i),t,r)))}if(0===t&&r<0){let i;return b(e,(e=>{const n=i?d([i,e]):e;if(n.length>=-r)return i=S(n,r),S(n,t,r);i=n}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),P((async()=>S(await C(e),t,r)))}return e[y]&&(e=d(e[y].concat([e]))),h(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function C(e,t=d){return a(e)?e.readToEnd(t):c(e)?D(e).readToEnd(t):e}async function K(e,t){if(c(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function P(e){const t=new ArrayStream;return(async()=>{const r=U(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function D(e){return new f(e)}function U(e){return new o(e)}f.prototype.read=async function(){if(this[y]&&this[y].length){return{done:!1,value:this[y].shift()}}return this._read()},f.prototype.releaseLock=function(){this[y]&&(this.stream[y]=this[y]),this._releaseLock()},f.prototype.cancel=function(e){return this._cancel(e)},f.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:i}=await this.read();if(i+="",r)return t.length?d(t):void 0;const n=i.indexOf("\n")+1;n&&(e=d(t.concat(i.substr(0,n))),t=[]),n!==i.length&&t.push(i.substr(n))}return this.unshift(...t),e},f.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(S(t,1)),r},f.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return t.length?d(t):void 0;if(t.push(n),r+=n.length,r>=e){const r=d(t);return this.unshift(S(r,e)),S(r,0,e)}}},f.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},f.prototype.unshift=function(...e){this[y]||(this[y]=[]),1===e.length&&h(e[0])&&this[y].length&&e[0].length&&this[y][0].byteOffset>=e[0].length?this[y][0]=new Uint8Array(this[y][0].buffer,this[y][0].byteOffset-e[0].length,this[y][0].byteLength+e[0].length):this[y].unshift(...e.filter((e=>e&&e.length)))},f.prototype.readToEnd=async function(e=d){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const x=Symbol("byValue");var Q={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[x]||(e[x]=[],Object.entries(e).forEach((([t,r])=>{e[x][r]=t}))),void 0!==e[x][t])return e[x][t];throw Error("Invalid enum value.")}},R={preferredHashAlgorithm:Q.hash.sha256,preferredSymmetricAlgorithm:Q.symmetric.aes256,preferredCompressionAlgorithm:Q.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:Q.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,enableParsingV5Entities:!1,s2kType:Q.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([Q.symmetric.aes128,Q.symmetric.aes192,Q.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.2",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([Q.hash.md5,Q.hash.ripemd]),rejectMessageHashAlgorithms:new Set([Q.hash.md5,Q.hash.ripemd,Q.hash.sha1]),rejectPublicKeyAlgorithms:new Set([Q.publicKey.elgamal,Q.publicKey.dsa]),rejectCurves:new Set([Q.curve.secp256k1])};const M=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),T={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:()=>{},isArray:function(e){return e instanceof Array},isUint8Array:h,isStream:c,getNobleCurve:async(e,t)=>{if(!R.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return il}));switch(e){case Q.publicKey.ecdh:case Q.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case Q.publicKey.x448:return r.get("x448");case Q.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let i=0;i<t;i++)r[i]=e>>8*(t-i-1)&255;return r},readDate:function(e){const t=T.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return T.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return T.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){const r=new Uint8Array(t),i=t-e.length;return r.set(e,i),r},uint8ArrayToMPI:function(e){const t=T.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),i=new Uint8Array([(65280&t)>>8,255&t]);return T.concatUint8Array([i,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+T.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return b(e,(e=>{if(!T.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,i=(e=new Uint8Array(e)).length;for(let n=0;n<i;n+=r)t.push(String.fromCharCode.apply(String,e.subarray(n,n+r<i?n+r:i)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return b(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return b(e,r,(()=>r(new Uint8Array,!0)))},concat:d,concatUint8Array:u,equalsUint8Array:function(e,t){if(!T.isUint8Array(e)||!T.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return T.writeNumber(t,2)},printDebug:function(e){M&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){M&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let i=0;i<r;i++)t[i]=e[i]<<1^e[i+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const e=void 0!==t&&t.crypto&&t.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!e)throw Error("The WebCrypto API is not available");return e},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!T.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return b(e,(e=>{let r;t&&(e=T.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const i=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&i.push(r);if(!i.length)return e;const n=new Uint8Array(e.length+i.length);let s=0;for(let t=0;t<i.length;t++){const r=e.subarray(i[t-1]||0,i[t]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(e.subarray(i[i.length-1]||0),s),n}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return b(e,(e=>{let r;13===(e=t&&10!==e[0]?T.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let i=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const n=r-(10===e[r]?1:0);t&&e.copyWithin(i,t,n),i+=n-t}return e.subarray(0,i)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return Error(e);try{t.message=e+": "+t.message}catch(e){}return t},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let i;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){i=e}}))),r(i)}))},selectUint8Array:function(e,t,r){const i=Math.max(t.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=t[i]&256-e|r[i]&255+e,s+=e&i<t.length|1-e&i<r.length;return n.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===Q.symmetric.aes128||e===Q.symmetric.aes192||e===Q.symmetric.aes256}},L=T.getNodeBuffer();let _,F;function N(e){let t=new Uint8Array;return b(e,(e=>{t=T.concatUint8Array([t,e]);const r=[],i=Math.floor(t.length/45),n=45*i,s=_(t.subarray(0,n));for(let e=0;e<i;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(n),r.join("")}),(()=>t.length?_(t)+"\n":""))}function H(e){let t="";return b(e,(e=>{t+=e;let r=0;const i=[" ","\t","\r","\n"];for(let e=0;e<i.length;e++){const n=i[e];for(let e=t.indexOf(n);-1!==e;e=t.indexOf(n,e+1))r++}let n=t.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(t[n])&&r--;const s=F(t.substr(0,n));return t=t.substr(n),s}),(()=>F(t)))}function O(e){return H(e.replace(/-/g,"+").replace(/_/g,"/"))}function z(e,t){let r=N(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function G(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?Q.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?Q.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?Q.armor.signed:/MESSAGE/.test(t[1])?Q.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?Q.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?Q.armor.privateKey:/SIGNATURE/.test(t[1])?Q.armor.signature:void 0}function q(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function j(e){const t=function(e){let t=13501623;return b(e,(e=>{const r=Y?Math.floor(e.length/4):0,i=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=i[e],t=V[0][t>>24&255]^V[1][t>>16&255]^V[2][t>>8&255]^V[3][255&t];for(let i=4*r;i<e.length;i++)t=t>>8^V[0][255&t^e[i]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return N(t)}L?(_=e=>L.from(e).toString("base64"),F=e=>{const t=L.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(_=e=>btoa(T.uint8ArrayToString(e)),F=e=>T.stringToUint8Array(atob(e)));const V=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);V[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)V[1][e]=V[0][e]>>8^V[0][255&V[0][e]];for(let e=0;e<=255;e++)V[2][e]=V[1][e]>>8^V[0][255&V[1][e]];for(let e=0;e<=255;e++)V[3][e]=V[2][e]>>8^V[0][255&V[2][e]];const Y=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function Z(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||T.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||T.printDebugError(Error("Unknown header: "+e[t]))}function J(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function W(e){return new Promise((async(t,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=H(E(e,(async(e,y)=>{const f=D(e);try{for(;;){let e=await f.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=T.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==Q.armor.signed||(i.test(e)?(u=u.join("\r\n"),c=!0,Z(h),h=[],o=!1):u.push(e.replace(/^- /,"")));else if(i.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(e)){if(Z(h),o=!0,c||s!==Q.armor.signed){t({text:u,data:l,headers:a,type:s});break}}else h.push(e);else i.test(e)&&(s=G(e))}}catch(e){return void r(e)}const g=U(y);try{for(;;){await g.ready;const{done:e,value:t}=await f.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await f.readToEnd();e.length||(e=""),e=r+e,e=T.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(i);if(1===t.length)throw Error("Misformed armored text");const n=J(t[0].slice(0,-1));await g.write(n);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}})))}catch(e){r(e)}})).then((async e=>(a(e.data)&&(e.data=await C(e.data)),e)))}function $(e,t,r,i,n,s=!1,a=R){let o,c;e===Q.armor.signed&&(o=t.text,c=t.hash,t=t.data);const h=s&&B(t),u=[];switch(e){case Q.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),u.push(q(n,a)),u.push(N(t)),h&&u.push("=",j(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case Q.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push(q(n,a)),u.push(N(t)),h&&u.push("=",j(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case Q.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push(q(n,a)),u.push(N(t)),h&&u.push("=",j(h)),u.push("-----END PGP SIGNATURE-----\n");break;case Q.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push(q(n,a)),u.push(N(t)),h&&u.push("=",j(h)),u.push("-----END PGP MESSAGE-----\n");break;case Q.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push(q(n,a)),u.push(N(t)),h&&u.push("=",j(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case Q.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push(q(n,a)),u.push(N(t)),h&&u.push("=",j(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case Q.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push(q(n,a)),u.push(N(t)),h&&u.push("=",j(h)),u.push("-----END PGP SIGNATURE-----\n")}return T.concat(u)}async function X(e){switch(e){case Q.symmetric.aes128:case Q.symmetric.aes192:case Q.symmetric.aes256:throw Error("Not a legacy cipher");case Q.symmetric.cast5:case Q.symmetric.blowfish:case Q.symmetric.twofish:case Q.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return wl})),r=t.get(e);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function ee(e){switch(e){case Q.symmetric.aes128:case Q.symmetric.aes192:case Q.symmetric.aes256:case Q.symmetric.twofish:return 16;case Q.symmetric.blowfish:case Q.symmetric.cast5:case Q.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function te(e){switch(e){case Q.symmetric.aes128:case Q.symmetric.blowfish:case Q.symmetric.cast5:return 16;case Q.symmetric.aes192:case Q.symmetric.tripledes:return 24;case Q.symmetric.aes256:case Q.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function re(e){return{keySize:te(e),blockSize:ee(e)}}var ie=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:re,getLegacyCipher:X});function ne(e,t){let r=e[0],i=e[1],n=e[2],s=e[3];r=ae(r,i,n,s,t[0],7,-680876936),s=ae(s,r,i,n,t[1],12,-389564586),n=ae(n,s,r,i,t[2],17,606105819),i=ae(i,n,s,r,t[3],22,-1044525330),r=ae(r,i,n,s,t[4],7,-176418897),s=ae(s,r,i,n,t[5],12,1200080426),n=ae(n,s,r,i,t[6],17,-1473231341),i=ae(i,n,s,r,t[7],22,-45705983),r=ae(r,i,n,s,t[8],7,1770035416),s=ae(s,r,i,n,t[9],12,-1958414417),n=ae(n,s,r,i,t[10],17,-42063),i=ae(i,n,s,r,t[11],22,-1990404162),r=ae(r,i,n,s,t[12],7,1804603682),s=ae(s,r,i,n,t[13],12,-40341101),n=ae(n,s,r,i,t[14],17,-1502002290),i=ae(i,n,s,r,t[15],22,1236535329),r=oe(r,i,n,s,t[1],5,-165796510),s=oe(s,r,i,n,t[6],9,-1069501632),n=oe(n,s,r,i,t[11],14,643717713),i=oe(i,n,s,r,t[0],20,-373897302),r=oe(r,i,n,s,t[5],5,-701558691),s=oe(s,r,i,n,t[10],9,38016083),n=oe(n,s,r,i,t[15],14,-660478335),i=oe(i,n,s,r,t[4],20,-405537848),r=oe(r,i,n,s,t[9],5,568446438),s=oe(s,r,i,n,t[14],9,-1019803690),n=oe(n,s,r,i,t[3],14,-187363961),i=oe(i,n,s,r,t[8],20,1163531501),r=oe(r,i,n,s,t[13],5,-1444681467),s=oe(s,r,i,n,t[2],9,-51403784),n=oe(n,s,r,i,t[7],14,1735328473),i=oe(i,n,s,r,t[12],20,-1926607734),r=ce(r,i,n,s,t[5],4,-378558),s=ce(s,r,i,n,t[8],11,-2022574463),n=ce(n,s,r,i,t[11],16,1839030562),i=ce(i,n,s,r,t[14],23,-35309556),r=ce(r,i,n,s,t[1],4,-1530992060),s=ce(s,r,i,n,t[4],11,1272893353),n=ce(n,s,r,i,t[7],16,-155497632),i=ce(i,n,s,r,t[10],23,-1094730640),r=ce(r,i,n,s,t[13],4,681279174),s=ce(s,r,i,n,t[0],11,-358537222),n=ce(n,s,r,i,t[3],16,-722521979),i=ce(i,n,s,r,t[6],23,76029189),r=ce(r,i,n,s,t[9],4,-640364487),s=ce(s,r,i,n,t[12],11,-421815835),n=ce(n,s,r,i,t[15],16,530742520),i=ce(i,n,s,r,t[2],23,-995338651),r=he(r,i,n,s,t[0],6,-198630844),s=he(s,r,i,n,t[7],10,1126891415),n=he(n,s,r,i,t[14],15,-1416354905),i=he(i,n,s,r,t[5],21,-57434055),r=he(r,i,n,s,t[12],6,1700485571),s=he(s,r,i,n,t[3],10,-1894986606),n=he(n,s,r,i,t[10],15,-1051523),i=he(i,n,s,r,t[1],21,-2054922799),r=he(r,i,n,s,t[8],6,1873313359),s=he(s,r,i,n,t[15],10,-30611744),n=he(n,s,r,i,t[6],15,-1560198380),i=he(i,n,s,r,t[13],21,1309151649),r=he(r,i,n,s,t[4],6,-145523070),s=he(s,r,i,n,t[11],10,-1120210379),n=he(n,s,r,i,t[2],15,718787259),i=he(i,n,s,r,t[9],21,-343485551),e[0]=fe(r,e[0]),e[1]=fe(i,e[1]),e[2]=fe(n,e[2]),e[3]=fe(s,e[3])}function se(e,t,r,i,n,s){return t=fe(fe(t,e),fe(i,s)),fe(t<<n|t>>>32-n,r)}function ae(e,t,r,i,n,s,a){return se(t&r|~t&i,e,t,n,s,a)}function oe(e,t,r,i,n,s,a){return se(t&i|r&~i,e,t,n,s,a)}function ce(e,t,r,i,n,s,a){return se(t^r^i,e,t,n,s,a)}function he(e,t,r,i,n,s,a){return se(r^(t|~i),e,t,n,s,a)}function ue(e){const t=[];let r;for(r=0;r<64;r+=4)t[r>>2]=e.charCodeAt(r)+(e.charCodeAt(r+1)<<8)+(e.charCodeAt(r+2)<<16)+(e.charCodeAt(r+3)<<24);return t}const le="0123456789abcdef".split("");function ye(e){let t="",r=0;for(;r<4;r++)t+=le[e>>8*r+4&15]+le[e>>8*r&15];return t}function fe(e,t){return e+t&4294967295}const ge=T.getWebCrypto(),pe=T.getNodeCrypto(),de=pe&&pe.getHashes();function Ae(e){if(pe&&de.includes(e))return async function(t){const r=pe.createHash(e);return b(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function we(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return Ll})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(a(e)&&(e=await C(e)),T.isStream(e)){const t=(await r()).create();return b(e,(e=>{t.update(e)}),(()=>t.digest()))}if(ge&&t)return new Uint8Array(await ge.digest(t,e));return(await r())(e)}}var me={md5:Ae("md5")||async function(e){const t=function(e){const t=e.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=e.length;i+=64)ne(r,ue(e.substring(i-64,i)));e=e.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<e.length;i++)n[i>>2]|=e.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(ne(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*t,ne(r,n),r}(T.uint8ArrayToString(e));return T.hexToUint8Array(function(e){for(let t=0;t<e.length;t++)e[t]=ye(e[t]);return e.join("")}(t))},sha1:Ae("sha1")||we("sha1","SHA-1"),sha224:Ae("sha224")||we("sha224"),sha256:Ae("sha256")||we("sha256","SHA-256"),sha384:Ae("sha384")||we("sha384","SHA-384"),sha512:Ae("sha512")||we("sha512","SHA-512"),ripemd:Ae("ripemd160")||we("ripemd160"),sha3_256:Ae("sha3-256")||we("sha3_256"),sha3_512:Ae("sha3-512")||we("sha3_512"),digest:function(e,t){switch(e){case Q.hash.md5:return this.md5(t);case Q.hash.sha1:return this.sha1(t);case Q.hash.ripemd:return this.ripemd(t);case Q.hash.sha256:return this.sha256(t);case Q.hash.sha384:return this.sha384(t);case Q.hash.sha512:return this.sha512(t);case Q.hash.sha224:return this.sha224(t);case Q.hash.sha3_256:return this.sha3_256(t);case Q.hash.sha3_512:return this.sha3_512(t);default:throw Error("Unsupported hash function")}},getHashByteLength:function(e){switch(e){case Q.hash.md5:return 16;case Q.hash.sha1:case Q.hash.ripemd:return 20;case Q.hash.sha256:return 32;case Q.hash.sha384:return 48;case Q.hash.sha512:return 64;case Q.hash.sha224:return 28;case Q.hash.sha3_256:return 32;case Q.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(e){switch(e){case Q.hash.md5:case Q.hash.sha1:case Q.hash.ripemd:case Q.hash.sha224:case Q.hash.sha256:return 64;case Q.hash.sha384:case Q.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}},be=function(){var e,t,r=!1;function i(r,i){var n=e[(t[r]+t[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=e[255-t[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){e=[],t=[];var i,n,s=1;for(i=0;i<255;i++)e[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=e[i],t[e[i]]=i;e[255]=e[0],t[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var y=1;y<4;y++)a[y][u]=a[y-1][u]>>>8|a[y-1][u]<<24,o[y][l]=o[y-1][l]>>>8|o[y-1][l]<<24}c=!0}var u=function(e,t){c||h();var r=new Uint32Array(t);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(e,t,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0;var B=new e.Uint32Array(r),I=new e.Uint8Array(r);function S(e,t,r,o,c,h,u,l){e=e|0;t=t|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0;y=r|0x400,f=r|0x800,g=r|0xc00;c=c^B[(e|0)>>2],h=h^B[(e|4)>>2],u=u^B[(e|8)>>2],l=l^B[(e|12)>>2];for(m=16;(m|0)<=o<<4;m=m+16|0){p=B[(r|c>>22&1020)>>2]^B[(y|h>>14&1020)>>2]^B[(f|u>>6&1020)>>2]^B[(g|l<<2&1020)>>2]^B[(e|m|0)>>2],d=B[(r|h>>22&1020)>>2]^B[(y|u>>14&1020)>>2]^B[(f|l>>6&1020)>>2]^B[(g|c<<2&1020)>>2]^B[(e|m|4)>>2],A=B[(r|u>>22&1020)>>2]^B[(y|l>>14&1020)>>2]^B[(f|c>>6&1020)>>2]^B[(g|h<<2&1020)>>2]^B[(e|m|8)>>2],w=B[(r|l>>22&1020)>>2]^B[(y|c>>14&1020)>>2]^B[(f|h>>6&1020)>>2]^B[(g|u<<2&1020)>>2]^B[(e|m|12)>>2];c=p,h=d,u=A,l=w}i=B[(t|c>>22&1020)>>2]<<24^B[(t|h>>14&1020)>>2]<<16^B[(t|u>>6&1020)>>2]<<8^B[(t|l<<2&1020)>>2]^B[(e|m|0)>>2],n=B[(t|h>>22&1020)>>2]<<24^B[(t|u>>14&1020)>>2]<<16^B[(t|l>>6&1020)>>2]<<8^B[(t|c<<2&1020)>>2]^B[(e|m|4)>>2],s=B[(t|u>>22&1020)>>2]<<24^B[(t|l>>14&1020)>>2]<<16^B[(t|c>>6&1020)>>2]<<8^B[(t|h<<2&1020)>>2]^B[(e|m|8)>>2],a=B[(t|l>>22&1020)>>2]<<24^B[(t|c>>14&1020)>>2]<<16^B[(t|h>>6&1020)>>2]<<8^B[(t|u<<2&1020)>>2]^B[(e|m|12)>>2]}function C(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;S(0x0000,0x0800,0x1000,v,e,t,r,i)}function K(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var s=0;S(0x0400,0x0c00,0x2000,v,e,i,r,t);s=n,n=a,a=s}function P(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o^e,c^t,h^r,u^l);o=i,c=n,h=s,u=a}function D(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;var y=0;S(0x0400,0x0c00,0x2000,v,e,l,r,t);y=n,n=a,a=y;i=i^o,n=n^c,s=s^h,a=a^u;o=e,c=t,h=r,u=l}function U(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i=i^e,c=n=n^t,h=s=s^r,u=a=a^l}function x(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);i=i^e,n=n^t,s=s^r,a=a^l;o=e,c=t,h=r,u=l}function Q(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i,c=n,h=s,u=a;i=i^e,n=n^t,s=s^r,a=a^l}function R(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;S(0x0000,0x0800,0x1000,v,l,y,f,g);g=~w&g|w&g+1;f=~A&f|A&f+((g|0)==0);y=~d&y|d&y+((f|0)==0);l=~p&l|p&l+((y|0)==0);i=i^e;n=n^t;s=s^r;a=a^o}function M(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0;e=e^o,t=t^c,r=r^h,i=i^u;n=m|0,s=b|0,a=E|0,l=k|0;for(;(d|0)<128;d=d+1|0){if(n>>>31){y=y^e,f=f^t,g=g^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;A=i&1;i=i>>>1|r<<31,r=r>>>1|t<<31,t=t>>>1|e<<31,e=e>>>1;if(A)e=e^0xe1000000}o=y,c=f,h=g,u=p}function T(e){e=e|0;v=e}function L(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;i=e,n=t,s=r,a=o}function _(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;o=e,c=t,h=r,u=i}function F(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;l=e,y=t,f=r,g=i}function N(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;p=e,d=t,A=r,w=i}function H(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;g=~w&g|w&i,f=~A&f|A&r,y=~d&y|d&t,l=~p&l|p&e}function O(e){e=e|0;if(e&15)return-1;I[e|0]=i>>>24,I[e|1]=i>>>16&255,I[e|2]=i>>>8&255,I[e|3]=i&255,I[e|4]=n>>>24,I[e|5]=n>>>16&255,I[e|6]=n>>>8&255,I[e|7]=n&255,I[e|8]=s>>>24,I[e|9]=s>>>16&255,I[e|10]=s>>>8&255,I[e|11]=s&255,I[e|12]=a>>>24,I[e|13]=a>>>16&255,I[e|14]=a>>>8&255,I[e|15]=a&255;return 16}function z(e){e=e|0;if(e&15)return-1;I[e|0]=o>>>24,I[e|1]=o>>>16&255,I[e|2]=o>>>8&255,I[e|3]=o&255,I[e|4]=c>>>24,I[e|5]=c>>>16&255,I[e|6]=c>>>8&255,I[e|7]=c&255,I[e|8]=h>>>24,I[e|9]=h>>>16&255,I[e|10]=h>>>8&255,I[e|11]=h&255,I[e|12]=u>>>24,I[e|13]=u>>>16&255,I[e|14]=u>>>8&255,I[e|15]=u&255;return 16}function G(){C(0,0,0,0);m=i,b=n,E=s,k=a}function q(e,t,r){e=e|0;t=t|0;r=r|0;var o=0;if(t&15)return-1;while((r|0)>=16){V[e&7](I[t|0]<<24|I[t|1]<<16|I[t|2]<<8|I[t|3],I[t|4]<<24|I[t|5]<<16|I[t|6]<<8|I[t|7],I[t|8]<<24|I[t|9]<<16|I[t|10]<<8|I[t|11],I[t|12]<<24|I[t|13]<<16|I[t|14]<<8|I[t|15]);I[t|0]=i>>>24,I[t|1]=i>>>16&255,I[t|2]=i>>>8&255,I[t|3]=i&255,I[t|4]=n>>>24,I[t|5]=n>>>16&255,I[t|6]=n>>>8&255,I[t|7]=n&255,I[t|8]=s>>>24,I[t|9]=s>>>16&255,I[t|10]=s>>>8&255,I[t|11]=s&255,I[t|12]=a>>>24,I[t|13]=a>>>16&255,I[t|14]=a>>>8&255,I[t|15]=a&255;o=o+16|0,t=t+16|0,r=r-16|0}return o|0}function j(e,t,r){e=e|0;t=t|0;r=r|0;var i=0;if(t&15)return-1;while((r|0)>=16){Y[e&1](I[t|0]<<24|I[t|1]<<16|I[t|2]<<8|I[t|3],I[t|4]<<24|I[t|5]<<16|I[t|6]<<8|I[t|7],I[t|8]<<24|I[t|9]<<16|I[t|10]<<8|I[t|11],I[t|12]<<24|I[t|13]<<16|I[t|14]<<8|I[t|15]);i=i+16|0,t=t+16|0,r=r-16|0}return i|0}var V=[C,K,P,D,U,x,Q,R];var Y=[P,M];return{set_rounds:T,set_state:L,set_iv:_,set_nonce:F,set_mask:N,set_counter:H,get_state:O,get_iv:z,gcm_init:G,cipher:q,mac:j}}({Uint8Array,Uint32Array},e,t);return u.set_key=function(e,t,i,s,a,c,h,l,y){var f=r.subarray(0,60),g=r.subarray(256,316);f.set([t,i,s,a,c,h,l,y]);for(var p=e,d=1;p<4*e+28;p++){var A=f[p-1];(p%e==0||8===e&&p%e==4)&&(A=n[A>>>24]<<24^n[A>>>16&255]<<16^n[A>>>8&255]<<8^n[255&A]),p%e==0&&(A=A<<8^A>>>24^d<<24,d=d<<1^(128&d?27:0)),f[p]=f[p-e]^A}for(var w=0;w<p;w+=4)for(var m=0;m<4;m++){A=f[p-(4+w)+(4-m)%4];g[w+m]=w<4||w>=p-4?A:o[0][n[A>>>24]]^o[1][n[A>>>16&255]]^o[2][n[A>>>8&255]]^o[3][n[255&A]]}u.set_rounds(e+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function Ee(e){return e instanceof Uint8Array}function ke(e,t,r,i,n){const s=e.length-t,a=s<n?s:n;return e.set(r.subarray(i,i+a),t),a}function ve(...e){const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);let i=0;for(let t=0;t<e.length;t++)r.set(e[t],i),i+=e[t].length;return r}class Be extends Error{constructor(...e){super(...e)}}class Ie extends Error{constructor(...e){super(...e)}}class Se extends Error{constructor(...e){super(...e)}}const Ce=[],Ke=[];class Pe{constructor(e,t,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=e,this.iv=t,this.padding=r,this.acquire_asm(n,s)}acquire_asm(e,t){return void 0!==this.heap&&void 0!==this.asm||(this.heap=e||Ce.pop()||function(e,t){const r=e?e.byteLength:65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return e||new Uint8Array(new ArrayBuffer(r))}().subarray(be.HEAP_DATA),this.asm=t||Ke.pop()||new be(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(Ce.push(this.heap),Ke.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(e,t){const{asm:r}=this.acquire_asm(),i=e.length;if(16!==i&&24!==i&&32!==i)throw new Ie("illegal key size");const n=new DataView(e.buffer,e.byteOffset,e.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==t){if(16!==t.length)throw new Ie("illegal iv size");let e=new DataView(t.buffer,t.byteOffset,t.byteLength);r.set_iv(e.getUint32(0),e.getUint32(4),e.getUint32(8),e.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(e){if(!Ee(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=be.ENC[this.mode],n=be.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=ke(t,s+a,e,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(t.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=be.ENC[this.mode],i=be.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let t=0;t<a;++t)e[n+s+t]=a;s+=a,o=s}else if(s%16)throw new Ie("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&t.cipher(r,i+n,s),o&&c.set(e.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(e){if(!Ee(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=be.DEC[this.mode],n=be.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=a+c&-16,l=0,y=0;this.padding&&(l=a+c-u||16,u-=l);const f=new Uint8Array(u);for(;c>0;)y=ke(t,s+a,e,o,c),a+=y,o+=y,c-=y,y=r.cipher(i,n+s,a-(c?0:l)),y&&f.set(t.subarray(s,s+y),h),h+=y,y<a?(s+=y,a-=y):(s=0,a=0);return this.pos=s,this.len=a,f}AES_Decrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=be.DEC[this.mode],i=be.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new Ie("data length must be a multiple of the block size");s+=16-s%16}if(t.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let t=e[n+a-1];if(t<1||t>16||t>a)throw new Se("bad padding");let r=0;for(let i=t;i>1;i--)r|=t^e[n+a-i];if(r)throw new Se("bad padding");a-=t}}const o=new Uint8Array(a);return a>0&&o.set(e.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class De{static encrypt(e,t,r){return new De(t,r).encrypt(e)}static decrypt(e,t,r){return new De(t,r).decrypt(e)}constructor(e,t,r){this.aes=r||new Pe(e,t,!0,"CFB"),delete this.aes.padding}encrypt(e){return ve(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return ve(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const Ue=T.getWebCrypto(),xe=T.getNodeCrypto(),Qe=xe?xe.getCiphers():[],Re={idea:Qe.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Qe.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Qe.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Qe.includes("bf-cfb")?"bf-cfb":void 0,aes128:Qe.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Qe.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Qe.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Me{constructor(e,t,r){const{blockSize:i}=re(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=re(e);return Ue.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Ue.importKey("raw",this.key,r,!1,["encrypt"]);const i=await Ue.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(i).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,i=T.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),n=T.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return Te(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(e.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const t=this.nextBlock;i=await this._runCBC(this.prevBlock),Te(i,t),this.prevBlock=i.slice(),this.i=0;const n=e.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);Te(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(T.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return Te(t,e),this.clearSensitiveData(),t}}function Te(e,t){const r=Math.min(e.length,t.length);for(let i=0;i<r;i++)e[i]=e[i]^t[i]}var Le=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i){const n=Q.read(Q.symmetric,e);if(xe&&Re[n])return function(e,t,r,i){const n=Q.read(Q.symmetric,e),s=new xe.createDecipheriv(Re[n],t,i);return b(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(T.isAES(e))return function(e,t,r,i){if(T.isStream(r)){const e=new De(t,i);return b(r,(t=>e.aes.AES_Decrypt_process(t)),(()=>e.aes.AES_Decrypt_finish()))}return De.decrypt(r,t,i)}(0,t,r,i);const s=new(await X(e))(t),a=s.blockSize;let o=i,c=new Uint8Array;const h=e=>{e&&(c=T.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,i=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[i++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,i)};return b(r,h,h)},encrypt:async function(e,t,r,i,n){const s=Q.read(Q.symmetric,e);if(T.getNodeCrypto()&&Re[s])return function(e,t,r,i){const n=Q.read(Q.symmetric,e),s=new xe.createCipheriv(Re[n],t,i);return b(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(T.isAES(e))return async function(e,t,r,i){if(Ue&&await Me.isSupported(e)){const n=new Me(e,t,i);return T.isStream(r)?b(r,(e=>n.encryptChunk(e)),(()=>n.finish())):n.encrypt(r)}{const e=new De(t,i);return b(r,(t=>e.aes.AES_Encrypt_process(t)),(()=>e.aes.AES_Encrypt_finish()))}}(e,t,r,i);const a=new(await X(e))(t),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=e=>{e&&(h=T.concatUint8Array([h,e]));const t=new Uint8Array(h.length);let r,i=0;for(;e?h.length>=o:h.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^e[r],t[i++]=c[r];h=h.subarray(o)}return t.subarray(0,i)};return b(r,u,u)}});class _e{static encrypt(e,t,r){return new _e(t,r).encrypt(e)}static decrypt(e,t,r){return new _e(t,r).encrypt(e)}constructor(e,t,r){this.aes=r||new Pe(e,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(t)}encrypt(e){return ve(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return ve(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(e,t,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new Ie("illegal counter size");let e=Math.pow(2,r)-1;i.set_mask(0,0,e/4294967296|0,0|e)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===e)throw Error("nonce is required");{let t=e.length;if(!t||t>16)throw new Ie("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(e),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==t){if(t<0||t>=Math.pow(2,r))throw new Ie("illegal counter value");i.set_counter(0,0,t/4294967296|0,0|t)}}}class Fe{static encrypt(e,t,r=!0,i){return new Fe(t,i,r).encrypt(e)}static decrypt(e,t,r=!0,i){return new Fe(t,i,r).decrypt(e)}constructor(e,t,r=!0,i){this.aes=i||new Pe(e,t,r,"CBC")}encrypt(e){return ve(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return ve(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const Ne=T.getWebCrypto(),He=T.getNodeCrypto(),Oe=16;function ze(e,t){const r=e.length-Oe;for(let i=0;i<Oe;i++)e[i+r]^=t[i];return e}const Ge=new Uint8Array(Oe);async function qe(e){const t=await async function(e){if(T.getNodeCrypto())return async function(t){const r=new He.createCipheriv("aes-"+8*e.length+"-cbc",e,Ge).update(t);return new Uint8Array(r)};if(T.getWebCrypto())try{return e=await Ne.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await Ne.encrypt({name:"AES-CBC",iv:Ge,length:8*Oe},e,t);return new Uint8Array(r).subarray(0,r.byteLength-Oe)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;T.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return Fe.encrypt(t,e,!1,Ge)}}(e),r=T.double(await t(Ge)),i=T.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%Oe==0)return ze(e,t);const i=new Uint8Array(e.length+(Oe-e.length%Oe));return i.set(e),i[e.length]=128,ze(i,r)}(e,r,i))).subarray(-Oe)}}const je=T.getWebCrypto(),Ve=T.getNodeCrypto(),Ye=T.getNodeBuffer(),Ze=16,Je=Ze,We=Ze,$e=new Uint8Array(Ze),Xe=new Uint8Array(Ze);Xe[Ze-1]=1;const et=new Uint8Array(Ze);async function tt(e){const t=await qe(e);return function(e,r){return t(T.concatUint8Array([e,r]))}}async function rt(e){if(T.getNodeCrypto())return async function(t,r){const i=new Ve.createCipheriv("aes-"+8*e.length+"-ctr",e,r),n=Ye.concat([i.update(t),i.final()]);return new Uint8Array(n)};if(T.getWebCrypto())try{const t=await je.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const i=await je.encrypt({name:"AES-CTR",counter:r,length:8*Ze},t,e);return new Uint8Array(i)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;T.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return _e.encrypt(t,e,r)}}async function it(e,t){if(e!==Q.symmetric.aes128&&e!==Q.symmetric.aes192&&e!==Q.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([tt(t),rt(t)]);return{encrypt:async function(e,t,n){const[s,a]=await Promise.all([r($e,t),r(Xe,n)]),o=await i(e,s),c=await r(et,o);for(let e=0;e<We;e++)c[e]^=a[e]^s[e];return T.concatUint8Array([o,c])},decrypt:async function(e,t,n){if(e.length<We)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-We),a=e.subarray(-We),[o,c,h]=await Promise.all([r($e,t),r(Xe,n),r(et,s)]),u=h;for(let e=0;e<We;e++)u[e]^=c[e]^o[e];if(!T.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}et[Ze-1]=2,it.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},it.blockLength=Ze,it.ivLength=Je,it.tagLength=We;const nt=16,st=16;function at(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function ot(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function ct(e,t){return ot(e.slice(),t)}const ht=new Uint8Array(nt),ut=new Uint8Array([1]);async function lt(e,t){const{keySize:r}=re(e);if(!T.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let i=0;const n=e=>Fe.encrypt(e,t,!1),s=e=>Fe.decrypt(e,t,!1);let a;function o(e,t,r,s){const o=t.length/nt|0;!function(e,t){const r=T.nbits(Math.max(e.length,t.length)/nt|0)-1;for(let e=i+1;e<=r;e++)a[e]=T.double(a[e-1]);i=r}(t,s);const c=T.concatUint8Array([ht.subarray(0,15-r.length),ut,r]),h=63&c[15];c[15]&=192;const u=n(c),l=T.concatUint8Array([u,ct(u.subarray(0,8),u.subarray(1,9))]),y=T.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),f=new Uint8Array(nt),g=new Uint8Array(t.length+st);let p,d=0;for(p=0;p<o;p++)ot(y,a[at(p+1)]),g.set(ot(e(ct(y,t)),y),d),ot(f,e===n?t:g.subarray(d)),t=t.subarray(nt),d+=nt;if(t.length){ot(y,a.x);const r=n(y);g.set(ct(t,r),d);const i=new Uint8Array(nt);i.set(e===n?t:g.subarray(d,-16),0),i[t.length]=128,ot(f,i),d+=t.length}const A=ot(n(ot(ot(f,y),a.$)),function(e){if(!e.length)return ht;const t=e.length/nt|0,r=new Uint8Array(nt),i=new Uint8Array(nt);for(let s=0;s<t;s++)ot(r,a[at(s+1)]),ot(i,n(ct(r,e))),e=e.subarray(nt);if(e.length){ot(r,a.x);const t=new Uint8Array(nt);t.set(e,0),t[e.length]=128,ot(t,r),ot(i,n(t))}return i}(s));return g.set(A,d),g}return function(){const e=n(ht),t=T.double(e);a=[],a[0]=T.double(t),a.x=e,a.$=t}(),{encrypt:async function(e,t,r){return o(n,e,t,r)},decrypt:async function(e,t,r){if(e.length<st)throw Error("Invalid OCB ciphertext");const i=e.subarray(-16);e=e.subarray(0,-16);const n=o(s,e,t,r);if(T.equalsUint8Array(i,n.subarray(-16)))return n.subarray(0,-16);throw Error("Authentication tag mismatch")}}}lt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},lt.blockLength=nt,lt.ivLength=15,lt.tagLength=st;const yt=68719476704;class ft{static encrypt(e,t,r,i,n){return new ft(t,r,i,n).encrypt(e)}static decrypt(e,t,r,i,n){return new ft(t,r,i,n).decrypt(e)}constructor(e,t,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new Pe(e,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new Ie("illegal tagSize value");const o=t.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(t),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(be.MAC.GCM,be.HEAP_DATA,16),s.get_iv(be.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(t),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>yt)throw new Ie("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(e){return this.AES_GCM_encrypt(e)}decrypt(e){return this.AES_GCM_decrypt(e)}AES_GCM_Encrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>yt)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=ke(n,a+o,e,t,r),o+=u,t+=u,r-=u,u=i.cipher(be.ENC.CTR,be.HEAP_DATA+a,o),u=i.mac(be.MAC.GCM,be.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);e.cipher(be.ENC.CTR,be.HEAP_DATA+s,a+15&-16),a&&o.set(t.subarray(s,s+a));let c=a;for(;15&c;c++)t[s+c]=0;e.mac(be.MAC.GCM,be.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return t[0]=0,t[1]=0,t[2]=0,t[3]=h>>>29,t[4]=h>>>21,t[5]=h>>>13&255,t[6]=h>>>5&255,t[7]=h<<3&255,t[8]=t[9]=t[10]=0,t[11]=u>>>29,t[12]=u>>>21&255,t[13]=u>>>13&255,t[14]=u>>>5&255,t[15]=u<<3&255,e.mac(be.MAC.GCM,be.HEAP_DATA,16),e.get_iv(be.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(be.ENC.CTR,be.HEAP_DATA,16),o.set(t.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,y=0;if((s-1<<4)+c+r>yt)throw new RangeError("counter overflow");const f=new Uint8Array(u);for(;r>l;)y=ke(n,o+c,e,t,r-l),c+=y,t+=y,r-=y,y=i.mac(be.MAC.GCM,be.HEAP_DATA+o,y),y=i.cipher(be.DEC.CTR,be.HEAP_DATA+o,y),y&&f.set(n.subarray(o,o+y),h),s+=y>>>4,h+=y,o=0,c=0;return r>0&&(c+=ke(n,0,e,t,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,f}AES_GCM_Decrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new Be("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(t.subarray(s+o,s+a));let u=o;for(;15&u;u++)t[s+u]=0;e.mac(be.MAC.GCM,be.HEAP_DATA+s,u),e.cipher(be.DEC.CTR,be.HEAP_DATA+s,u),o&&c.set(t.subarray(s,s+o));const l=void 0!==i?i.length:0,y=(n-1<<4)+a-r;t[0]=0,t[1]=0,t[2]=0,t[3]=l>>>29,t[4]=l>>>21,t[5]=l>>>13&255,t[6]=l>>>5&255,t[7]=l<<3&255,t[8]=t[9]=t[10]=0,t[11]=y>>>29,t[12]=y>>>21&255,t[13]=y>>>13&255,t[14]=y>>>5&255,t[15]=y<<3&255,e.mac(be.MAC.GCM,be.HEAP_DATA,16),e.get_iv(be.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(be.ENC.CTR,be.HEAP_DATA,16);let f=0;for(let e=0;e<r;++e)f|=h[e]^t[e];if(f)throw new Se("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(e){const t=this.AES_GCM_Decrypt_process(e),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}AES_GCM_encrypt(e){const t=this.AES_GCM_Encrypt_process(e),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}_gcm_mac_process(e){let{asm:t,heap:r}=this.aes.acquire_asm(),i=0,n=e.length||0,s=0;for(;n>0;){for(s=ke(r,0,e,i,n),i+=s,n-=s;15&s;)r[s++]=0;t.mac(be.MAC.GCM,be.HEAP_DATA,s)}}}const gt=T.getWebCrypto(),pt=T.getNodeCrypto(),dt=T.getNodeBuffer(),At=16,wt="AES-GCM";async function mt(e,t){if(e!==Q.symmetric.aes128&&e!==Q.symmetric.aes192&&e!==Q.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(T.getNodeCrypto())return{encrypt:async function(e,r,i=new Uint8Array){const n=new pt.createCipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i);const s=dt.concat([n.update(e),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,i=new Uint8Array){const n=new pt.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i),n.setAuthTag(e.slice(e.length-At,e.length));const s=dt.concat([n.update(e.slice(0,e.length-At)),n.final()]);return new Uint8Array(s)}};if(T.getWebCrypto())try{const e=await gt.importKey("raw",t,{name:wt},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return ft.encrypt(i,t,n,s);const a=await gt.encrypt({name:wt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===At)return ft.decrypt(i,t,n,s);try{const t=await gt.decrypt({name:wt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;T.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,i){return ft.encrypt(e,t,r,i)},decrypt:async function(e,r,i){return ft.decrypt(e,t,r,i)}}}mt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},mt.blockLength=16,mt.ivLength=12,mt.tagLength=At;var bt={cfb:Le,gcm:mt,experimentalGCM:mt,eax:it,ocb:lt};const Et=BigInt(0),kt=BigInt(1);function vt(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function Bt(e,t){const r=e%t;return r<Et?r+t:r}function It(e,t,r){if(r===Et)throw Error("Modulo cannot be zero");if(r===kt)return BigInt(0);if(t<Et)throw Error("Unsopported negative exponent");let i=t,n=e;n%=r;let s=BigInt(1);for(;i>Et;){const e=i&kt;i>>=kt;s=e?s*n%r:s,n=n*n%r}return s}function St(e){return e>=Et?e:-e}function Ct(e,t){const{gcd:r,x:i}=function(e,t){let r=BigInt(0),i=BigInt(1),n=BigInt(1),s=BigInt(0),a=St(e),o=St(t);const c=e<Et,h=t<Et;for(;o!==Et;){const e=a/o;let t=r;r=n-e*r,n=t,t=i,i=s-e*i,s=t,t=o,o=a%o,a=t}return{x:c?-n:n,y:h?-s:s,gcd:a}}(e,t);if(r!==kt)throw Error("Inverse does not exist");return Bt(i+t,t)}function Kt(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function Pt(e,t){return(e>>BigInt(t)&kt)===Et?0:1}function Dt(e){const t=e<Et?BigInt(-1):Et;let r=1,i=e;for(;(i>>=kt)!==t;)r++;return r}function Ut(e){const t=e<Et?BigInt(-1):Et,r=BigInt(8);let i=1,n=e;for(;(n>>=r)!==t;)i++;return i}function xt(e,t="be",r){let i=e.toString(16);i.length%2==1&&(i="0"+i);const n=i.length/2,s=new Uint8Array(r||n),a=r?r-n:0;let o=0;for(;o<n;)s[o+a]=parseInt(i.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const Qt=T.getNodeCrypto();function Rt(e){const t=new Uint8Array(e);if(Qt){const e=Qt.randomBytes(t.length);t.set(e)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(t)}return t}function Mt(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return Bt(vt(Rt(Ut(r)+8)),r)+e}var Tt=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Mt,getRandomBytes:Rt});const Lt=BigInt(1);function _t(e,t,r){const i=BigInt(30),n=Lt<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=Mt(n,n<<Lt),o=Kt(Bt(a,i));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,Dt(a)>e&&(a=Bt(a,n<<Lt),a+=n,o=Kt(Bt(a,i)))}while(!Ft(a,t,r));return a}function Ft(e,t,r){return(!t||function(e,t){let r=e,i=t;for(;i!==Et;){const e=i;i=r%i,r=e}return r}(e-Lt,t)===Lt)&&(!!function(e){const t=BigInt(0);return Nt.every((r=>Bt(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return It(t,e-Lt,e)===Lt}(e)&&!!function(e,t,r){const i=Dt(e);t||(t=Math.max(1,i/48|0));const n=e-Lt;let s=0;for(;!Pt(n,s);)s++;const a=e>>BigInt(s);for(;t>0;t--){let t,r=It(Mt(BigInt(2),n),a,e);if(r!==Lt&&r!==n){for(t=1;t<s;t++){if(r=Bt(r*r,e),r===Lt)return!1;if(r===n)break}if(t===s)return!1}}return!0}(e,r)))}const Nt=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const Ht=[];function Ot(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const i=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const i=Rt(e-r);for(let e=0;e<i.length;e++)0!==i[e]&&(t[r++]=i[e])}return t}(t-r-3),n=new Uint8Array(t);return n[1]=2,n.set(i,2),n.set(e,t-r),n}function zt(e,t){let r=2,i=1;for(let t=r;t<e.length;t++)i&=0!==e[t],r+=i;const n=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&n>=8&!i;if(t)return T.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Gt(e,t,r){let i;if(t.length!==me.getHashByteLength(e))throw Error("Invalid hash length");const n=new Uint8Array(Ht[e].length);for(i=0;i<Ht[e].length;i++)n[i]=Ht[e][i];const s=n.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(t,r-t.length),o}Ht[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Ht[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Ht[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Ht[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Ht[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Ht[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Ht[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var qt=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:zt,emeEncode:Ot,emsaEncode:Gt});const jt=T.getWebCrypto(),Vt=T.getNodeCrypto(),Yt=BigInt(1);async function Zt(e,t,r,i,n,s){const a=vt(i),o=vt(n),c=vt(r);let h=Bt(c,o-Yt),u=Bt(c,a-Yt);return u=xt(u),h=xt(h),{kty:"RSA",n:z(e),e:z(t),d:z(r),p:z(n),q:z(i),dp:z(h),dq:z(u),qi:z(s),ext:!0}}function Jt(e,t){return{kty:"RSA",n:z(e),e:z(t),ext:!0}}function Wt(e,t){return{n:O(e.n),e:xt(t),d:O(e.d),p:O(e.q),q:O(e.p),u:O(e.qi)}}var $t=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a,o){if(T.getNodeCrypto()&&!o)try{return await async function(e,t,r,i,n,s,a){const o=await Zt(t,r,i,n,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Vt.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Vt.privateDecrypt(c,e))}catch(e){throw Error("Decryption error")}}(e,t,r,i,n,s,a)}catch(e){T.printDebugError(e)}return async function(e,t,r,i,n,s,a,o){if(e=vt(e),t=vt(t),r=vt(r),i=vt(i),n=vt(n),s=vt(s),a=vt(a),e>=t)throw Error("Data too large.");const c=Bt(i,s-Yt),h=Bt(i,n-Yt),u=Mt(BigInt(2),t),l=It(Ct(u,t),r,t);e=Bt(e*l,t);const y=It(e,h,n),f=It(e,c,s),g=Bt(a*(f-y),s);let p=g*n+y;return p=Bt(p*u,t),zt(xt(p,"be",Ut(t)),o)}(e,t,r,i,n,s,a,o)},encrypt:async function(e,t,r){return T.getNodeCrypto()?async function(e,t,r){const i=Jt(t,r),n={key:i,format:"jwk",type:"pkcs1",padding:Vt.constants.RSA_PKCS1_PADDING};return new Uint8Array(Vt.publicEncrypt(n,e))}(e,t,r):async function(e,t,r){if(t=vt(t),e=vt(Ot(e,Ut(t))),r=vt(r),e>=t)throw Error("Message size cannot exceed modulus size");return xt(It(e,r,t),"be",Ut(t))}(e,t,r)},generate:async function(e,t){if(t=BigInt(t),T.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:xt(t),hash:{name:"SHA-1"}},i=await jt.generateKey(r,!0,["sign","verify"]);return Wt(await jt.exportKey("jwk",i.privateKey),t)}if(T.getNodeCrypto()){const r={modulusLength:e,publicExponent:Kt(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},i=await new Promise(((e,t)=>{Vt.generateKeyPair("rsa",r,((r,i,n)=>{r?t(r):e(n)}))}));return Wt(i,t)}let r,i,n;do{i=_t(e-(e>>1),t,40),r=_t(e>>1,t,40),n=r*i}while(Dt(n)!==e);const s=(r-Yt)*(i-Yt);return i<r&&([r,i]=[i,r]),{n:xt(n),e:xt(t),d:xt(Ct(t,s)),p:xt(r),q:xt(i),u:xt(Ct(r,i))}},sign:async function(e,t,r,i,n,s,a,o,c){if(t&&!T.isStream(t))if(T.getWebCrypto())try{return await async function(e,t,r,i,n,s,a,o){const c=await Zt(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},u=await jt.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await jt.sign("RSASSA-PKCS1-v1_5",u,t))}(Q.read(Q.webHash,e),t,r,i,n,s,a,o)}catch(e){T.printDebugError(e)}else if(T.getNodeCrypto())return async function(e,t,r,i,n,s,a,o){const c=Vt.createSign(Q.read(Q.hash,e));c.write(t),c.end();const h=await Zt(r,i,n,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(e,t,r,i,n,s,a,o);return async function(e,t,r,i){t=vt(t);const n=vt(Gt(e,i,Ut(t)));if(r=vt(r),n>=t)throw Error("Message size cannot exceed modulus size");return xt(It(n,r,t),"be",Ut(t))}(e,r,n,c)},validateParams:async function(e,t,r,i,n,s){if(e=vt(e),(i=vt(i))*(n=vt(n))!==e)return!1;const a=BigInt(2);if(Bt(i*(s=vt(s)),n)!==BigInt(1))return!1;t=vt(t),r=vt(r);const o=Mt(a,a<<BigInt(Math.floor(Dt(e)/3))),c=o*r*t;return!(Bt(c,i-Yt)!==o||Bt(c,n-Yt)!==o)},verify:async function(e,t,r,i,n,s){if(t&&!T.isStream(t))if(T.getWebCrypto())try{return await async function(e,t,r,i,n){const s=Jt(i,n),a=await jt.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return jt.verify("RSASSA-PKCS1-v1_5",a,r,t)}(Q.read(Q.webHash,e),t,r,i,n)}catch(e){T.printDebugError(e)}else if(T.getNodeCrypto())return async function(e,t,r,i,n){const s=Jt(i,n),a={key:s,format:"jwk",type:"pkcs1"},o=Vt.createVerify(Q.read(Q.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch(e){return!1}}(e,t,r,i,n);return async function(e,t,r,i,n){if(r=vt(r),t=vt(t),i=vt(i),t>=r)throw Error("Signature size cannot exceed modulus size");const s=xt(It(t,i,r),"be",Ut(r)),a=Gt(e,n,Ut(r));return T.equalsUint8Array(s,a)}(e,r,i,n,s)}});const Xt=BigInt(1);var er=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){return e=vt(e),t=vt(t),r=vt(r),zt(xt(Bt(Ct(It(e,i=vt(i),r),r)*t,r),"be",Ut(r)),n)},encrypt:async function(e,t,r,i){t=vt(t),r=vt(r),i=vt(i);const n=vt(Ot(e,Ut(t))),s=Mt(Xt,t-Xt);return{c1:xt(It(r,s,t)),c2:xt(Bt(It(i,s,t)*n,t))}},validateParams:async function(e,t,r,i){if(e=vt(e),t=vt(t),r=vt(r),t<=Xt||t>=e)return!1;const n=BigInt(Dt(e));if(n<BigInt(1023))return!1;if(It(t,e-Xt,e)!==Xt)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=Bt(s*t,e),s===Xt)return!1;a++}i=vt(i);const h=Mt(o<<n-Xt,o<<n);return r===It(t,(e-Xt)*h+i,e)}});const tr="object"==typeof t&&"crypto"in t?t.crypto:void 0,rr={};var ir=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},nr=function(){throw Error("no PRNG")},sr=new Uint8Array(32);sr[0]=9;var ar=ir(),or=ir([1]),cr=ir([56129,1]),hr=ir([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),ur=ir([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),lr=ir([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),yr=ir([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),fr=ir([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function gr(e,t,r,i){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=i>>24&255,e[t+5]=i>>16&255,e[t+6]=i>>8&255,e[t+7]=255&i}function pr(e,t,r,i){return function(e,t,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=e[t+s]^r[i+s];return(1&a-1>>>8)-1}(e,t,r,i,32)}function dr(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function Ar(e){var t,r,i=1;for(t=0;t<16;t++)r=e[t]+i+65535,i=Math.floor(r/65536),e[t]=r-65536*i;e[0]+=i-1+37*(i-1)}function wr(e,t,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(e[s]^t[s]),e[s]^=i,t[s]^=i}function mr(e,t){var r,i,n,s=ir(),a=ir();for(r=0;r<16;r++)a[r]=t[r];for(Ar(a),Ar(a),Ar(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,wr(a,s,1-n)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function br(e,t){var r=new Uint8Array(32),i=new Uint8Array(32);return mr(r,e),mr(i,t),pr(r,0,i,0)}function Er(e){var t=new Uint8Array(32);return mr(t,e),1&t[0]}function kr(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function vr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]+r[i]}function Br(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]-r[i]}function Ir(e,t,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0,B=0,I=0,S=0,C=0,K=0,P=0,D=0,U=0,x=0,Q=0,R=0,M=0,T=r[0],L=r[1],_=r[2],F=r[3],N=r[4],H=r[5],O=r[6],z=r[7],G=r[8],q=r[9],j=r[10],V=r[11],Y=r[12],Z=r[13],J=r[14],W=r[15];s+=(i=t[0])*T,a+=i*L,o+=i*_,c+=i*F,h+=i*N,u+=i*H,l+=i*O,y+=i*z,f+=i*G,g+=i*q,p+=i*j,d+=i*V,A+=i*Y,w+=i*Z,m+=i*J,b+=i*W,a+=(i=t[1])*T,o+=i*L,c+=i*_,h+=i*F,u+=i*N,l+=i*H,y+=i*O,f+=i*z,g+=i*G,p+=i*q,d+=i*j,A+=i*V,w+=i*Y,m+=i*Z,b+=i*J,E+=i*W,o+=(i=t[2])*T,c+=i*L,h+=i*_,u+=i*F,l+=i*N,y+=i*H,f+=i*O,g+=i*z,p+=i*G,d+=i*q,A+=i*j,w+=i*V,m+=i*Y,b+=i*Z,E+=i*J,k+=i*W,c+=(i=t[3])*T,h+=i*L,u+=i*_,l+=i*F,y+=i*N,f+=i*H,g+=i*O,p+=i*z,d+=i*G,A+=i*q,w+=i*j,m+=i*V,b+=i*Y,E+=i*Z,k+=i*J,v+=i*W,h+=(i=t[4])*T,u+=i*L,l+=i*_,y+=i*F,f+=i*N,g+=i*H,p+=i*O,d+=i*z,A+=i*G,w+=i*q,m+=i*j,b+=i*V,E+=i*Y,k+=i*Z,v+=i*J,B+=i*W,u+=(i=t[5])*T,l+=i*L,y+=i*_,f+=i*F,g+=i*N,p+=i*H,d+=i*O,A+=i*z,w+=i*G,m+=i*q,b+=i*j,E+=i*V,k+=i*Y,v+=i*Z,B+=i*J,I+=i*W,l+=(i=t[6])*T,y+=i*L,f+=i*_,g+=i*F,p+=i*N,d+=i*H,A+=i*O,w+=i*z,m+=i*G,b+=i*q,E+=i*j,k+=i*V,v+=i*Y,B+=i*Z,I+=i*J,S+=i*W,y+=(i=t[7])*T,f+=i*L,g+=i*_,p+=i*F,d+=i*N,A+=i*H,w+=i*O,m+=i*z,b+=i*G,E+=i*q,k+=i*j,v+=i*V,B+=i*Y,I+=i*Z,S+=i*J,C+=i*W,f+=(i=t[8])*T,g+=i*L,p+=i*_,d+=i*F,A+=i*N,w+=i*H,m+=i*O,b+=i*z,E+=i*G,k+=i*q,v+=i*j,B+=i*V,I+=i*Y,S+=i*Z,C+=i*J,K+=i*W,g+=(i=t[9])*T,p+=i*L,d+=i*_,A+=i*F,w+=i*N,m+=i*H,b+=i*O,E+=i*z,k+=i*G,v+=i*q,B+=i*j,I+=i*V,S+=i*Y,C+=i*Z,K+=i*J,P+=i*W,p+=(i=t[10])*T,d+=i*L,A+=i*_,w+=i*F,m+=i*N,b+=i*H,E+=i*O,k+=i*z,v+=i*G,B+=i*q,I+=i*j,S+=i*V,C+=i*Y,K+=i*Z,P+=i*J,D+=i*W,d+=(i=t[11])*T,A+=i*L,w+=i*_,m+=i*F,b+=i*N,E+=i*H,k+=i*O,v+=i*z,B+=i*G,I+=i*q,S+=i*j,C+=i*V,K+=i*Y,P+=i*Z,D+=i*J,U+=i*W,A+=(i=t[12])*T,w+=i*L,m+=i*_,b+=i*F,E+=i*N,k+=i*H,v+=i*O,B+=i*z,I+=i*G,S+=i*q,C+=i*j,K+=i*V,P+=i*Y,D+=i*Z,U+=i*J,x+=i*W,w+=(i=t[13])*T,m+=i*L,b+=i*_,E+=i*F,k+=i*N,v+=i*H,B+=i*O,I+=i*z,S+=i*G,C+=i*q,K+=i*j,P+=i*V,D+=i*Y,U+=i*Z,x+=i*J,Q+=i*W,m+=(i=t[14])*T,b+=i*L,E+=i*_,k+=i*F,v+=i*N,B+=i*H,I+=i*O,S+=i*z,C+=i*G,K+=i*q,P+=i*j,D+=i*V,U+=i*Y,x+=i*Z,Q+=i*J,R+=i*W,b+=(i=t[15])*T,a+=38*(k+=i*_),o+=38*(v+=i*F),c+=38*(B+=i*N),h+=38*(I+=i*H),u+=38*(S+=i*O),l+=38*(C+=i*z),y+=38*(K+=i*G),f+=38*(P+=i*q),g+=38*(D+=i*j),p+=38*(U+=i*V),d+=38*(x+=i*Y),A+=38*(Q+=i*Z),w+=38*(R+=i*J),m+=38*(M+=i*W),s=(i=(s+=38*(E+=i*L))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=h,e[5]=u,e[6]=l,e[7]=y,e[8]=f,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function Sr(e,t){Ir(e,t,t)}function Cr(e,t){var r,i=ir();for(r=0;r<16;r++)i[r]=t[r];for(r=253;r>=0;r--)Sr(i,i),2!==r&&4!==r&&Ir(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}function Kr(e,t,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=ir(),c=ir(),h=ir(),u=ir(),l=ir(),y=ir();for(n=0;n<31;n++)s[n]=t[n];for(s[31]=127&t[31]|64,s[0]&=248,kr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)wr(o,c,i=s[n>>>3]>>>(7&n)&1),wr(h,u,i),vr(l,o,h),Br(o,o,h),vr(h,c,u),Br(c,c,u),Sr(u,l),Sr(y,o),Ir(o,h,o),Ir(h,c,l),vr(l,o,h),Br(o,o,h),Sr(c,o),Br(h,u,y),Ir(o,h,cr),vr(o,o,u),Ir(h,h,o),Ir(o,u,y),Ir(u,c,a),Sr(c,l),wr(o,c,i),wr(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var f=a.subarray(32),g=a.subarray(16);return Cr(f,f),Ir(g,g,f),mr(e,g),0}function Pr(e,t){return Kr(e,t,sr)}var Dr=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function Ur(e,t,r,i){for(var n,s,a,o,c,h,u,l,y,f,g,p,d,A,w,m,b,E,k,v,B,I,S,C,K,P,D=new Int32Array(16),U=new Int32Array(16),x=e[0],Q=e[1],R=e[2],M=e[3],T=e[4],L=e[5],_=e[6],F=e[7],N=t[0],H=t[1],O=t[2],z=t[3],G=t[4],q=t[5],j=t[6],V=t[7],Y=0;i>=128;){for(k=0;k<16;k++)v=8*k+Y,D[k]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],U[k]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(k=0;k<80;k++)if(n=x,s=Q,a=R,o=M,c=T,h=L,u=_,F,y=N,f=H,g=O,p=z,d=G,A=q,w=j,V,S=65535&(I=V),C=I>>>16,K=65535&(B=F),P=B>>>16,S+=65535&(I=(G>>>14|T<<18)^(G>>>18|T<<14)^(T>>>9|G<<23)),C+=I>>>16,K+=65535&(B=(T>>>14|G<<18)^(T>>>18|G<<14)^(G>>>9|T<<23)),P+=B>>>16,S+=65535&(I=G&q^~G&j),C+=I>>>16,K+=65535&(B=T&L^~T&_),P+=B>>>16,B=Dr[2*k],S+=65535&(I=Dr[2*k+1]),C+=I>>>16,K+=65535&B,P+=B>>>16,B=D[k%16],C+=(I=U[k%16])>>>16,K+=65535&B,P+=B>>>16,K+=(C+=(S+=65535&I)>>>16)>>>16,S=65535&(I=E=65535&S|C<<16),C=I>>>16,K=65535&(B=b=65535&K|(P+=K>>>16)<<16),P=B>>>16,S+=65535&(I=(N>>>28|x<<4)^(x>>>2|N<<30)^(x>>>7|N<<25)),C+=I>>>16,K+=65535&(B=(x>>>28|N<<4)^(N>>>2|x<<30)^(N>>>7|x<<25)),P+=B>>>16,C+=(I=N&H^N&O^H&O)>>>16,K+=65535&(B=x&Q^x&R^Q&R),P+=B>>>16,l=65535&(K+=(C+=(S+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,m=65535&S|C<<16,S=65535&(I=p),C=I>>>16,K=65535&(B=o),P=B>>>16,C+=(I=E)>>>16,K+=65535&(B=b),P+=B>>>16,Q=n,R=s,M=a,T=o=65535&(K+=(C+=(S+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,L=c,_=h,F=u,x=l,H=y,O=f,z=g,G=p=65535&S|C<<16,q=d,j=A,V=w,N=m,k%16==15)for(v=0;v<16;v++)B=D[v],S=65535&(I=U[v]),C=I>>>16,K=65535&B,P=B>>>16,B=D[(v+9)%16],S+=65535&(I=U[(v+9)%16]),C+=I>>>16,K+=65535&B,P+=B>>>16,b=D[(v+1)%16],S+=65535&(I=((E=U[(v+1)%16])>>>1|b<<31)^(E>>>8|b<<24)^(E>>>7|b<<25)),C+=I>>>16,K+=65535&(B=(b>>>1|E<<31)^(b>>>8|E<<24)^b>>>7),P+=B>>>16,b=D[(v+14)%16],C+=(I=((E=U[(v+14)%16])>>>19|b<<13)^(b>>>29|E<<3)^(E>>>6|b<<26))>>>16,K+=65535&(B=(b>>>19|E<<13)^(E>>>29|b<<3)^b>>>6),P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,D[v]=65535&K|P<<16,U[v]=65535&S|C<<16;S=65535&(I=N),C=I>>>16,K=65535&(B=x),P=B>>>16,B=e[0],C+=(I=t[0])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[0]=x=65535&K|P<<16,t[0]=N=65535&S|C<<16,S=65535&(I=H),C=I>>>16,K=65535&(B=Q),P=B>>>16,B=e[1],C+=(I=t[1])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[1]=Q=65535&K|P<<16,t[1]=H=65535&S|C<<16,S=65535&(I=O),C=I>>>16,K=65535&(B=R),P=B>>>16,B=e[2],C+=(I=t[2])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[2]=R=65535&K|P<<16,t[2]=O=65535&S|C<<16,S=65535&(I=z),C=I>>>16,K=65535&(B=M),P=B>>>16,B=e[3],C+=(I=t[3])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[3]=M=65535&K|P<<16,t[3]=z=65535&S|C<<16,S=65535&(I=G),C=I>>>16,K=65535&(B=T),P=B>>>16,B=e[4],C+=(I=t[4])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[4]=T=65535&K|P<<16,t[4]=G=65535&S|C<<16,S=65535&(I=q),C=I>>>16,K=65535&(B=L),P=B>>>16,B=e[5],C+=(I=t[5])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[5]=L=65535&K|P<<16,t[5]=q=65535&S|C<<16,S=65535&(I=j),C=I>>>16,K=65535&(B=_),P=B>>>16,B=e[6],C+=(I=t[6])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[6]=_=65535&K|P<<16,t[6]=j=65535&S|C<<16,S=65535&(I=V),C=I>>>16,K=65535&(B=F),P=B>>>16,B=e[7],C+=(I=t[7])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[7]=F=65535&K|P<<16,t[7]=V=65535&S|C<<16,Y+=128,i-=128}return i}function xr(e,t,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,Ur(n,s,t,r),r%=128,i=0;i<r;i++)a[i]=t[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,gr(a,r-8,o/536870912|0,o<<3),Ur(n,s,a,r),i=0;i<8;i++)gr(e,8*i,n[i],s[i]);return 0}function Qr(e,t){var r=ir(),i=ir(),n=ir(),s=ir(),a=ir(),o=ir(),c=ir(),h=ir(),u=ir();Br(r,e[1],e[0]),Br(u,t[1],t[0]),Ir(r,r,u),vr(i,e[0],e[1]),vr(u,t[0],t[1]),Ir(i,i,u),Ir(n,e[3],t[3]),Ir(n,n,ur),Ir(s,e[2],t[2]),vr(s,s,s),Br(a,i,r),Br(o,s,n),vr(c,s,n),vr(h,i,r),Ir(e[0],a,o),Ir(e[1],h,c),Ir(e[2],c,o),Ir(e[3],a,h)}function Rr(e,t,r){var i;for(i=0;i<4;i++)wr(e[i],t[i],r)}function Mr(e,t){var r=ir(),i=ir(),n=ir();Cr(n,t[2]),Ir(r,t[0],n),Ir(i,t[1],n),mr(e,i),e[31]^=Er(r)<<7}function Tr(e,t,r){var i,n;for(dr(e[0],ar),dr(e[1],or),dr(e[2],or),dr(e[3],ar),n=255;n>=0;--n)Rr(e,t,i=r[n/8|0]>>(7&n)&1),Qr(t,e),Qr(e,e),Rr(e,t,i)}function Lr(e,t){var r=[ir(),ir(),ir(),ir()];dr(r[0],lr),dr(r[1],yr),dr(r[2],or),Ir(r[3],lr,yr),Tr(e,r,t)}function _r(e,t,r){var i,n=new Uint8Array(64),s=[ir(),ir(),ir(),ir()];for(r||nr(t,32),xr(n,t,32),n[0]&=248,n[31]&=127,n[31]|=64,Lr(s,n),Mr(e,s),i=0;i<32;i++)t[i+32]=e[i];return 0}var Fr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function Nr(e,t){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)t[n]+=r-16*t[i]*Fr[n-(i-32)],r=Math.floor((t[n]+128)/256),t[n]-=256*r;t[n]+=r,t[i]=0}for(r=0,n=0;n<32;n++)t[n]+=r-(t[31]>>4)*Fr[n],r=t[n]>>8,t[n]&=255;for(n=0;n<32;n++)t[n]-=r*Fr[n];for(i=0;i<32;i++)t[i+1]+=t[i]>>8,e[i]=255&t[i]}function Hr(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;Nr(e,r)}function Or(e,t){var r=ir(),i=ir(),n=ir(),s=ir(),a=ir(),o=ir(),c=ir();return dr(e[2],or),kr(e[1],t),Sr(n,e[1]),Ir(s,n,hr),Br(n,n,e[2]),vr(s,e[2],s),Sr(a,s),Sr(o,a),Ir(c,o,a),Ir(r,c,n),Ir(r,r,s),function(e,t){var r,i=ir();for(r=0;r<16;r++)i[r]=t[r];for(r=250;r>=0;r--)Sr(i,i),1!==r&&Ir(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}(r,r),Ir(r,r,n),Ir(r,r,s),Ir(r,r,s),Ir(e[0],r,s),Sr(i,e[0]),Ir(i,i,s),br(i,n)&&Ir(e[0],e[0],fr),Sr(i,e[0]),Ir(i,i,s),br(i,n)?-1:(Er(e[0])===t[31]>>7&&Br(e[0],ar,e[0]),Ir(e[3],e[0],e[1]),0)}var zr=64;function Gr(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}rr.scalarMult=function(e,t){if(Gr(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return Kr(r,e,t),r},rr.box={},rr.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){nr(t,32),Pr(e,t)}(e,t),{publicKey:e,secretKey:t}},rr.box.keyPair.fromSecretKey=function(e){if(Gr(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return Pr(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},rr.sign=function(e,t){if(Gr(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(zr+e.length);return function(e,t,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[ir(),ir(),ir(),ir()];xr(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)e[64+n]=t[n];for(n=0;n<32;n++)e[32+n]=a[32+n];for(xr(c,e.subarray(32),r+32),Hr(c),Lr(u,c),Mr(e,u),n=32;n<64;n++)e[n]=i[n];for(xr(o,e,r+64),Hr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];Nr(e.subarray(32),h)}(r,e,e.length,t),r},rr.sign.detached=function(e,t){for(var r=rr.sign(e,t),i=new Uint8Array(zr),n=0;n<i.length;n++)i[n]=r[n];return i},rr.sign.detached.verify=function(e,t,r){if(Gr(e,t,r),t.length!==zr)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array(zr+e.length),s=new Uint8Array(zr+e.length);for(i=0;i<zr;i++)n[i]=t[i];for(i=0;i<e.length;i++)n[i+zr]=e[i];return function(e,t,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[ir(),ir(),ir(),ir()],c=[ir(),ir(),ir(),ir()];if(r<64)return-1;if(Or(c,i))return-1;for(n=0;n<r;n++)e[n]=t[n];for(n=0;n<32;n++)e[n+32]=i[n];if(xr(a,e,r),Hr(a),Tr(o,c,a),Lr(c,t.subarray(32)),Qr(o,c),Mr(s,o),r-=64,pr(t,0,s,0)){for(n=0;n<r;n++)e[n]=0;return-1}for(n=0;n<r;n++)e[n]=t[n+64];return r}(s,n,n.length,r)>=0},rr.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return _r(e,t),{publicKey:e,secretKey:t}},rr.sign.keyPair.fromSecretKey=function(e){if(Gr(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},rr.sign.keyPair.fromSeed=function(e){if(Gr(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=e[i];return _r(t,r,!0),{publicKey:t,secretKey:r}},rr.setPRNG=function(e){nr=e},function(){if(tr&&tr.getRandomValues){rr.setPRNG((function(e,t){var r,i=new Uint8Array(t);for(r=0;r<t;r+=65536)tr.getRandomValues(i.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=i[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(i)}))}}();const qr={"2a8648ce3d030107":Q.curve.nistP256,"2b81040022":Q.curve.nistP384,"2b81040023":Q.curve.nistP521,"2b8104000a":Q.curve.secp256k1,"2b06010401da470f01":Q.curve.ed25519Legacy,"2b060104019755010501":Q.curve.curve25519Legacy,"2b2403030208010107":Q.curve.brainpoolP256r1,"2b240303020801010b":Q.curve.brainpoolP384r1,"2b240303020801010d":Q.curve.brainpoolP512r1};class jr{constructor(e){if(e instanceof jr)this.oid=e.oid;else if(T.isArray(e)||T.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return T.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return T.uint8ArrayToHex(this.oid)}getName(){const e=qr[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function Vr(e){let t,r=0;const i=e[0];return i<192?([r]=e,t=1):i<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===i&&(r=T.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function Yr(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):T.concatUint8Array([new Uint8Array([255]),T.writeNumber(e,4)])}function Zr(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function Jr(e){return new Uint8Array([192|e])}function Wr(e,t){return T.concatUint8Array([Jr(e),Yr(t)])}function $r(e){return[Q.packet.literalData,Q.packet.compressedData,Q.packet.symmetricallyEncryptedData,Q.packet.symEncryptedIntegrityProtectedData,Q.packet.aeadEncryptedData].includes(e)}async function Xr(e,t){const r=D(e);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,u=-1;u=0,64&a&&(u=1),u?h=63&a:(h=(63&a)>>2,c=3&a);const l=$r(h);let y,f=null;if(l){if("array"===T.isStream(e)){const e=new ArrayStream;i=U(e),f=e}else{const e=new TransformStream;i=U(e.writable),f=e.readable}n=t({tag:h,packet:f})}else f=[];do{if(u){const e=await r.readByte();if(y=!1,e<192)o=e;else if(e>=192&&e<224)o=(e-192<<8)+await r.readByte()+192;else if(e>223&&e<255){if(o=1<<(31&e),y=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let e=0;for(;;){i&&await i.ready;const{done:t,value:n}=await r.read();if(t){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-e);if(i?await i.write(s):f.push(s),e+=n.length,e>=o){r.unshift(n.subarray(o-e+n.length));break}}}}while(y);const g=await r.peekBytes(l?1/0:2);return i?(await i.ready,await i.close()):(f=T.concatUint8Array(f),await t({tag:h,packet:f})),!g||!g.length}catch(e){if(i)return await i.abort(e),!0;throw e}finally{i&&await n,r.releaseLock()}}class ei extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ei),this.name="UnsupportedError"}}class ti extends ei{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ei),this.name="UnknownPacketError"}}class ri{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}const ii=T.getWebCrypto(),ni=T.getNodeCrypto(),si={[Q.curve.nistP256]:"P-256",[Q.curve.nistP384]:"P-384",[Q.curve.nistP521]:"P-521"},ai=ni?ni.getCurves():[],oi=ni?{[Q.curve.secp256k1]:ai.includes("secp256k1")?"secp256k1":void 0,[Q.curve.nistP256]:ai.includes("prime256v1")?"prime256v1":void 0,[Q.curve.nistP384]:ai.includes("secp384r1")?"secp384r1":void 0,[Q.curve.nistP521]:ai.includes("secp521r1")?"secp521r1":void 0,[Q.curve.ed25519Legacy]:ai.includes("ED25519")?"ED25519":void 0,[Q.curve.curve25519Legacy]:ai.includes("X25519")?"X25519":void 0,[Q.curve.brainpoolP256r1]:ai.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[Q.curve.brainpoolP384r1]:ai.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[Q.curve.brainpoolP512r1]:ai.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},ci={[Q.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha256,cipher:Q.symmetric.aes128,node:oi[Q.curve.nistP256],web:si[Q.curve.nistP256],payloadSize:32,sharedSize:256,wireFormatLeadingByte:4},[Q.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha384,cipher:Q.symmetric.aes192,node:oi[Q.curve.nistP384],web:si[Q.curve.nistP384],payloadSize:48,sharedSize:384,wireFormatLeadingByte:4},[Q.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha512,cipher:Q.symmetric.aes256,node:oi[Q.curve.nistP521],web:si[Q.curve.nistP521],payloadSize:66,sharedSize:528,wireFormatLeadingByte:4},[Q.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha256,cipher:Q.symmetric.aes128,node:oi[Q.curve.secp256k1],payloadSize:32,wireFormatLeadingByte:4},[Q.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:Q.publicKey.eddsaLegacy,hash:Q.hash.sha512,node:!1,payloadSize:32,wireFormatLeadingByte:64},[Q.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:Q.publicKey.ecdh,hash:Q.hash.sha256,cipher:Q.symmetric.aes128,node:!1,payloadSize:32,wireFormatLeadingByte:64},[Q.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha256,cipher:Q.symmetric.aes128,node:oi[Q.curve.brainpoolP256r1],payloadSize:32,wireFormatLeadingByte:4},[Q.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha384,cipher:Q.symmetric.aes192,node:oi[Q.curve.brainpoolP384r1],payloadSize:48,wireFormatLeadingByte:4},[Q.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:Q.publicKey.ecdsa,hash:Q.hash.sha512,cipher:Q.symmetric.aes256,node:oi[Q.curve.brainpoolP512r1],payloadSize:64,wireFormatLeadingByte:4}};class hi{constructor(e){try{this.name=e instanceof jr?e.getName():Q.write(Q.curve,e)}catch(e){throw new ei("Unknown curve")}const t=ci[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.wireFormatLeadingByte=t.wireFormatLeadingByte,this.web&&T.getWebCrypto()?this.type="web":this.node&&T.getNodeCrypto()?this.type="node":this.name===Q.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===Q.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e,t){const r=await ii.generateKey({name:"ECDSA",namedCurve:si[e]},!0,["sign","verify"]),i=await ii.exportKey("jwk",r.privateKey),n=await ii.exportKey("jwk",r.publicKey);return{publicKey:fi(n,t),privateKey:O(i.d)}}(this.name,this.wireFormatLeadingByte)}catch(e){return T.printDebugError("Browser did not support generating ec key "+e.message),yi(this.name)}case"node":return async function(e){const t=ni.createECDH(oi[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const e=Rt(32);e[0]=127&e[0]|64,e[31]&=248;const t=e.slice().reverse(),{publicKey:r}=rr.box.keyPair.fromSecretKey(t);return{publicKey:T.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),r]),privateKey:e}}case"ed25519Legacy":{const e=Rt(32),t=rr.sign.keyPair.fromSeed(e);return{publicKey:T.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t.publicKey]),privateKey:e}}default:return yi(this.name)}}}async function ui(e,t,r,i){const n={[Q.curve.nistP256]:!0,[Q.curve.nistP384]:!0,[Q.curve.nistP521]:!0,[Q.curve.secp256k1]:!0,[Q.curve.curve25519Legacy]:e===Q.publicKey.ecdh,[Q.curve.brainpoolP256r1]:!0,[Q.curve.brainpoolP384r1]:!0,[Q.curve.brainpoolP512r1]:!0},s=t.getName();if(!n[s])return!1;if(s===Q.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:e}=rr.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const t=new Uint8Array([64,...e]);return!!T.equalsUint8Array(t,r)}const a=(await T.getNobleCurve(Q.publicKey.ecdsa,s)).getPublicKey(i,!1);return!!T.equalsUint8Array(a,r)}function li(e,t){const{payloadSize:r,wireFormatLeadingByte:i,name:n}=e,s=n===Q.curve.curve25519Legacy||n===Q.curve.ed25519Legacy?r:2*r;if(t[0]!==i||t.length!==s+1)throw Error("Invalid point encoding")}async function yi(e){const t=await T.getNobleCurve(Q.publicKey.ecdsa,e),r=t.utils.randomPrivateKey();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function fi(e,t){const r=O(e.x),i=O(e.y),n=new Uint8Array(r.length+i.length+1);return n[0]=t,n.set(r,1),n.set(i,r.length+1),n}function gi(e,t,r){const i=e,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:t,x:z(n),y:z(s),ext:!0}}function pi(e,t,r,i){const n=gi(e,t,r);return n.d=z(i),n}const di=T.getWebCrypto(),Ai=T.getNodeCrypto();async function wi(e,t,r,i,n,s){const a=new hi(e);if(li(a,i),r&&!T.isStream(r)){const e={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(e,t,r,i){const n=e.payloadSize,s=pi(e.payloadSize,si[e.name],i.publicKey,i.privateKey),a=await di.importKey("jwk",s,{name:"ECDSA",namedCurve:si[e.name],hash:{name:Q.read(Q.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await di.sign({name:"ECDSA",namedCurve:si[e.name],hash:{name:Q.read(Q.webHash,t)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;T.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,i){const n=T.nodeRequire("eckey-utils"),s=T.getNodeBuffer(),{privateKey:a}=n.generateDer({curveName:oi[e.name],privateKey:s.from(i)}),o=Ai.createSign(Q.read(Q.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=e.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,t,r,n)}}const o=(await T.getNobleCurve(Q.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:xt(o.r,"be",a.payloadSize),s:xt(o.s,"be",a.payloadSize)}}async function mi(e,t,r,i,n,s){const a=new hi(e);li(a,n);const o=async()=>0===s[0]&&bi(a,r,s.subarray(1),n);if(i&&!T.isStream(i))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:i},n,s){const a=gi(e.payloadSize,si[e.name],s),o=await di.importKey("jwk",a,{name:"ECDSA",namedCurve:si[e.name],hash:{name:Q.read(Q.webHash,e.hash)}},!1,["verify"]),c=T.concatUint8Array([r,i]).buffer;return di.verify({name:"ECDSA",namedCurve:si[e.name],hash:{name:Q.read(Q.webHash,t)}},o,c,n)}(a,t,r,i,n);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;T.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:i},n,s){const a=T.nodeRequire("eckey-utils"),o=T.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:oi[e.name],publicKey:o.from(s)}),h=Ai.createVerify(Q.read(Q.hash,t));h.write(n),h.end();const u=T.concatUint8Array([r,i]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(e){return!1}}(a,t,r,i,n);return e||o()}}return await bi(a,r,s,n)||o()}async function bi(e,t,r,i){return(await T.getNobleCurve(Q.publicKey.ecdsa,e.name)).verify(T.concatUint8Array([t.r,t.s]),r,i,{lowS:!1})}var Ei=/*#__PURE__*/Object.freeze({__proto__:null,sign:wi,validateParams:async function(e,t,r){const i=new hi(e);if(i.keyType!==Q.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=Rt(8),n=Q.hash.sha256,s=await me.digest(n,i);try{const a=await wi(e,n,i,t,r,s);return await mi(e,n,a,i,t,s)}catch(e){return!1}}default:return ui(Q.publicKey.ecdsa,e,t,r)}},verify:mi});
-/*! noble-ed25519 - MIT License (c) 2019 Paul Miller (paulmillr.com) */const ki=BigInt(0),vi=BigInt(1),Bi=BigInt(2),Ii=BigInt(8),Si=BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),Ci=Object.freeze({a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),P:BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),l:Si,n:Si,h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960")}),Ki=BigInt("0x10000000000000000000000000000000000000000000000000000000000000000"),Pi=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");BigInt("6853475219497561581579357271197624642482790079785650197046958215289687604742");const Di=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),Ui=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),xi=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),Qi=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");class Ri{constructor(e,t,r,i){this.x=e,this.y=t,this.z=r,this.t=i}static fromAffine(e){if(!(e instanceof Hi))throw new TypeError("ExtendedPoint#fromAffine: expected Point");return e.equals(Hi.ZERO)?Ri.ZERO:new Ri(e.x,e.y,vi,Xi(e.x*e.y))}static toAffineBatch(e){const t=function(e,t=Ci.P){const r=Array(e.length),i=e.reduce(((e,i,n)=>i===ki?e:(r[n]=e,Xi(e*i,t))),vi),n=en(i,t);return e.reduceRight(((e,i,n)=>i===ki?e:(r[n]=Xi(e*r[n],t),Xi(e*i,t))),n),r}(e.map((e=>e.z)));return e.map(((e,r)=>e.toAffine(t[r])))}static normalizeZ(e){return this.toAffineBatch(e).map(this.fromAffine)}equals(e){Ti(e);const{x:t,y:r,z:i}=this,{x:n,y:s,z:a}=e,o=Xi(t*a),c=Xi(n*i),h=Xi(r*a),u=Xi(s*i);return o===c&&h===u}negate(){return new Ri(Xi(-this.x),this.y,this.z,Xi(-this.t))}double(){const{x:e,y:t,z:r}=this,{a:i}=Ci,n=Xi(e*e),s=Xi(t*t),a=Xi(Bi*Xi(r*r)),o=Xi(i*n),c=e+t,h=Xi(Xi(c*c)-n-s),u=o+s,l=u-a,y=o-s,f=Xi(h*l),g=Xi(u*y),p=Xi(h*y),d=Xi(l*u);return new Ri(f,g,d,p)}add(e){Ti(e);const{x:t,y:r,z:i,t:n}=this,{x:s,y:a,z:o,t:c}=e,h=Xi((r-t)*(a+s)),u=Xi((r+t)*(a-s)),l=Xi(u-h);if(l===ki)return this.double();const y=Xi(i*Bi*c),f=Xi(n*Bi*o),g=f+y,p=u+h,d=f-y,A=Xi(g*l),w=Xi(p*d),m=Xi(g*d),b=Xi(l*p);return new Ri(A,w,b,m)}subtract(e){return this.add(e.negate())}precomputeWindow(e){const t=1+256/e,r=[];let i=this,n=i;for(let s=0;s<t;s++){n=i,r.push(n);for(let t=1;t<2**(e-1);t++)n=n.add(i),r.push(n);i=n.double()}return r}wNAF(e,t){!t&&this.equals(Ri.BASE)&&(t=Hi.BASE);const r=t&&t._WINDOW_SIZE||1;if(256%r)throw Error("Point#wNAF: Invalid precomputation window, must be power of 2");let i=t&&Ni.get(t);i||(i=this.precomputeWindow(r),t&&1!==r&&(i=Ri.normalizeZ(i),Ni.set(t,i)));let n=Ri.ZERO,s=Ri.BASE;const a=1+256/r,o=2**(r-1),c=BigInt(2**r-1),h=2**r,u=BigInt(r);for(let t=0;t<a;t++){const r=t*o;let a=Number(e&c);e>>=u,a>o&&(a-=h,e+=vi);const l=r,y=r+Math.abs(a)-1,f=t%2!=0,g=a<0;0===a?s=s.add(Mi(f,i[l])):n=n.add(Mi(g,i[y]))}return Ri.normalizeZ([n,s])[0]}multiply(e,t){return this.wNAF(on(e,Ci.l),t)}multiplyUnsafe(e){let t=on(e,Ci.l,!1);const r=Ri.BASE,i=Ri.ZERO;if(t===ki)return i;if(this.equals(i)||t===vi)return this;if(this.equals(r))return this.wNAF(t);let n=i,s=this;for(;t>ki;)t&vi&&(n=n.add(s)),s=s.double(),t>>=vi;return n}isSmallOrder(){return this.multiplyUnsafe(Ci.h).equals(Ri.ZERO)}isTorsionFree(){let e=this.multiplyUnsafe(Ci.l/Bi).double();return Ci.l%Bi&&(e=e.add(this)),e.equals(Ri.ZERO)}toAffine(e){const{x:t,y:r,z:i}=this,n=this.equals(Ri.ZERO);null==e&&(e=n?Ii:en(i));const s=Xi(t*e),a=Xi(r*e),o=Xi(i*e);if(n)return Hi.ZERO;if(o!==vi)throw Error("invZ was invalid");return new Hi(s,a)}fromRistrettoBytes(){_i()}toRistrettoBytes(){_i()}fromRistrettoHash(){_i()}}function Mi(e,t){const r=t.negate();return e?r:t}function Ti(e){if(!(e instanceof Ri))throw new TypeError("ExtendedPoint expected")}function Li(e){if(!(e instanceof Fi))throw new TypeError("RistrettoPoint expected")}function _i(){throw Error("Legacy method: switch to RistrettoPoint")}Ri.BASE=new Ri(Ci.Gx,Ci.Gy,vi,Xi(Ci.Gx*Ci.Gy)),Ri.ZERO=new Ri(ki,vi,vi,ki);class Fi{constructor(e){this.ep=e}static calcElligatorRistrettoMap(e){const{d:t}=Ci,r=Xi(Pi*e*e),i=Xi((r+vi)*xi);let n=BigInt(-1);const s=Xi((n-t*r)*Xi(r+t));let{isValid:a,value:o}=rn(i,s),c=Xi(o*e);Zi(c)||(c=Xi(-c)),a||(o=c),a||(n=r);const h=Xi(n*(r-vi)*Qi-s),u=o*o,l=Xi((o+o)*s),y=Xi(h*Di),f=Xi(vi-u),g=Xi(vi+u);return new Ri(Xi(l*g),Xi(f*y),Xi(y*g),Xi(l*f))}static hashToCurve(e){const t=$i((e=an(e,64)).slice(0,32)),r=this.calcElligatorRistrettoMap(t),i=$i(e.slice(32,64)),n=this.calcElligatorRistrettoMap(i);return new Fi(r.add(n))}static fromHex(e){e=an(e,32);const{a:t,d:r}=Ci,i="RistrettoPoint.fromHex: the hex is not valid encoding of RistrettoPoint",n=$i(e);if(!function(e,t){if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0}(Yi(n),e)||Zi(n))throw Error(i);const s=Xi(n*n),a=Xi(vi+t*s),o=Xi(vi-t*s),c=Xi(a*a),h=Xi(o*o),u=Xi(t*r*c-h),{isValid:l,value:y}=nn(Xi(u*h)),f=Xi(y*o),g=Xi(y*f*u);let p=Xi((n+n)*f);Zi(p)&&(p=Xi(-p));const d=Xi(a*g),A=Xi(p*d);if(!l||Zi(A)||d===ki)throw Error(i);return new Fi(new Ri(p,d,vi,A))}toRawBytes(){let{x:e,y:t,z:r,t:i}=this.ep;const n=Xi(Xi(r+t)*Xi(r-t)),s=Xi(e*t),a=Xi(s*s),{value:o}=nn(Xi(n*a)),c=Xi(o*n),h=Xi(o*s),u=Xi(c*h*i);let l;if(Zi(i*u)){let r=Xi(t*Pi),i=Xi(e*Pi);e=r,t=i,l=Xi(c*Ui)}else l=h;Zi(e*u)&&(t=Xi(-t));let y=Xi((r-t)*l);return Zi(y)&&(y=Xi(-y)),Yi(y)}toHex(){return qi(this.toRawBytes())}toString(){return this.toHex()}equals(e){Li(e);const t=this.ep,r=e.ep,i=Xi(t.x*r.y)===Xi(t.y*r.x),n=Xi(t.y*r.y)===Xi(t.x*r.x);return i||n}add(e){return Li(e),new Fi(this.ep.add(e.ep))}subtract(e){return Li(e),new Fi(this.ep.subtract(e.ep))}multiply(e){return new Fi(this.ep.multiply(e))}multiplyUnsafe(e){return new Fi(this.ep.multiplyUnsafe(e))}}Fi.BASE=new Fi(Ri.BASE),Fi.ZERO=new Fi(Ri.ZERO);const Ni=new WeakMap;class Hi{constructor(e,t){this.x=e,this.y=t}_setWindowSize(e){this._WINDOW_SIZE=e,Ni.delete(this)}static fromHex(e,t=!0){const{d:r,P:i}=Ci,n=(e=an(e,32)).slice();n[31]=-129&e[31];const s=Ji(n);if(t&&s>=i)throw Error("Expected 0 < hex < P");if(!t&&s>=Ki)throw Error("Expected 0 < hex < 2**256");const a=Xi(s*s),o=Xi(a-vi),c=Xi(r*a+vi);let{isValid:h,value:u}=rn(o,c);if(!h)throw Error("Point.fromHex: invalid y coordinate");const l=(u&vi)===vi;return!!(128&e[31])!==l&&(u=Xi(-u)),new Hi(u,s)}static async fromPrivateKey(e){return(await hn(e)).point}toRawBytes(){const e=Yi(this.y);return e[31]|=this.x&vi?128:0,e}toHex(){return qi(this.toRawBytes())}toX25519(){const{y:e}=this;return Yi(Xi((vi+e)*en(vi-e)))}isTorsionFree(){return Ri.fromAffine(this).isTorsionFree()}equals(e){return this.x===e.x&&this.y===e.y}negate(){return new Hi(Xi(-this.x),this.y)}add(e){return Ri.fromAffine(this).add(Ri.fromAffine(e)).toAffine()}subtract(e){return this.add(e.negate())}multiply(e){return Ri.fromAffine(this).multiply(e,this).toAffine()}}Hi.BASE=new Hi(Ci.Gx,Ci.Gy),Hi.ZERO=new Hi(ki,vi);let Oi=class e{constructor(e,t){this.r=e,this.s=t,this.assertValidity()}static fromHex(t){const r=an(t,64),i=Hi.fromHex(r.slice(0,32),!1),n=Ji(r.slice(32,64));return new e(i,n)}assertValidity(){const{r:e,s:t}=this;if(!(e instanceof Hi))throw Error("Expected Point instance");return on(t,Ci.l,!1),this}toRawBytes(){const e=new Uint8Array(64);return e.set(this.r.toRawBytes()),e.set(Yi(this.s),32),e}toHex(){return qi(this.toRawBytes())}};function zi(...e){if(!e.every((e=>e instanceof Uint8Array)))throw Error("Expected Uint8Array list");if(1===e.length)return e[0];const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}const Gi=Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function qi(e){if(!(e instanceof Uint8Array))throw Error("Uint8Array expected");let t="";for(let r=0;r<e.length;r++)t+=Gi[e[r]];return t}function ji(e){if("string"!=typeof e)throw new TypeError("hexToBytes: expected string, got "+typeof e);if(e.length%2)throw Error("hexToBytes: received invalid unpadded hex");const t=new Uint8Array(e.length/2);for(let r=0;r<t.length;r++){const i=2*r,n=e.slice(i,i+2),s=Number.parseInt(n,16);if(Number.isNaN(s)||s<0)throw Error("Invalid byte sequence");t[r]=s}return t}function Vi(e){return ji(e.toString(16).padStart(64,"0"))}function Yi(e){return Vi(e).reverse()}function Zi(e){return(Xi(e)&vi)===vi}function Ji(e){if(!(e instanceof Uint8Array))throw Error("Expected Uint8Array");return BigInt("0x"+qi(Uint8Array.from(e).reverse()))}const Wi=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function $i(e){return Xi(Ji(e)&Wi)}function Xi(e,t=Ci.P){const r=e%t;return r>=ki?r:t+r}function en(e,t=Ci.P){if(e===ki||t<=ki)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=Xi(e,t),i=t,n=ki,s=vi;for(;r!==ki;){const e=i%r,t=n-s*(i/r);i=r,r=e,n=s,s=t}if(i!==vi)throw Error("invert: does not exist");return Xi(n,t)}function tn(e,t){const{P:r}=Ci;let i=e;for(;t-- >ki;)i*=i,i%=r;return i}function rn(e,t){const r=Xi(t*t*t),i=function(e){const{P:t}=Ci,r=BigInt(5),i=BigInt(10),n=BigInt(20),s=BigInt(40),a=BigInt(80),o=e*e%t*e%t,c=tn(o,Bi)*o%t,h=tn(c,vi)*e%t,u=tn(h,r)*h%t,l=tn(u,i)*u%t,y=tn(l,n)*l%t,f=tn(y,s)*y%t,g=tn(f,a)*f%t,p=tn(g,a)*f%t,d=tn(p,i)*u%t;return{pow_p_5_8:tn(d,Bi)*e%t,b2:o}}(e*Xi(r*r*t)).pow_p_5_8;let n=Xi(e*r*i);const s=Xi(t*n*n),a=n,o=Xi(n*Pi),c=s===e,h=s===Xi(-e),u=s===Xi(-e*Pi);return c&&(n=a),(h||u)&&(n=o),Zi(n)&&(n=Xi(-n)),{isValid:c||h,value:n}}function nn(e){return rn(vi,e)}function sn(e){return Xi(Ji(e),Ci.l)}function an(e,t){const r=e instanceof Uint8Array?Uint8Array.from(e):ji(e);if("number"==typeof t&&r.length!==t)throw Error(`Expected ${t} bytes`);return r}function on(e,t,r=!0){if(!t)throw new TypeError("Specify max value");if("number"==typeof e&&Number.isSafeInteger(e)&&(e=BigInt(e)),"bigint"==typeof e&&e<t)if(r){if(ki<e)return e}else if(ki<=e)return e;throw new TypeError("Expected valid scalar: 0 < scalar < max")}let cn;async function hn(e){return function(e){const t=function(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}(e.slice(0,32)),r=e.slice(32,64),i=sn(t),n=Hi.BASE.multiply(i),s=n.toRawBytes();return{head:t,prefix:r,scalar:i,point:n,pointBytes:s}}(await yn.sha512(function(e){if(32!==(e="bigint"==typeof e||"number"==typeof e?Vi(on(e,Ki)):an(e)).length)throw Error("Expected 32 bytes");return e}(e)))}async function un(e,t,r){const{r:i,SB:n,msg:s,pub:a}=function(e,t,r){t=an(t),r instanceof Hi||(r=Hi.fromHex(r,!1));const{r:i,s:n}=e instanceof Oi?e.assertValidity():Oi.fromHex(e);return{r:i,s:n,SB:Ri.BASE.multiplyUnsafe(n),pub:r,msg:t}}(e,t,r),o=await yn.sha512(i.toRawBytes(),a.toRawBytes(),s);return function(e,t,r,i){const n=sn(i),s=Ri.fromAffine(e).multiplyUnsafe(n);return Ri.fromAffine(t).add(s).subtract(r).multiplyUnsafe(Ci.h).equals(Ri.ZERO)}(a,i,n,o)}Hi.BASE._setWindowSize(8);const ln={node:null,web:"object"==typeof self&&"crypto"in self?self.crypto:void 0},yn={bytesToHex:qi,hexToBytes:ji,concatBytes:zi,getExtendedPublicKey:hn,mod:Xi,invert:en,TORSION_SUBGROUP:["0100000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a","0000000000000000000000000000000000000000000000000000000000000080","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05","ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc85","0000000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa"],hashToPrivateScalar:e=>{if((e=an(e)).length<40||e.length>1024)throw Error("Expected 40-1024 bytes of private key as per FIPS 186");return Xi(Ji(e),Ci.l-vi)+vi},randomBytes:(e=32)=>{if(ln.web)return ln.web.getRandomValues(new Uint8Array(e));throw Error("The environment doesn't have randomBytes function")},randomPrivateKey:()=>yn.randomBytes(32),sha512:async(...e)=>{const t=zi(...e);if(ln.web){const e=await ln.web.subtle.digest("SHA-512",t.buffer);return new Uint8Array(e)}throw Error("The environment doesn't have sha512 function")},precompute(e=8,t=Hi.BASE){const r=t.equals(Hi.BASE)?t:new Hi(t.x,t.y);return r._setWindowSize(e),r.multiply(Bi),r},sha512Sync:void 0};Object.defineProperties(yn,{sha512Sync:{configurable:!1,get:()=>cn,set(e){cn||(cn=e)}}});var fn=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){if(li(new hi(e),i),me.getHashByteLength(t)<me.getHashByteLength(Q.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=T.concatUint8Array([n,i.subarray(1)]),o=rr.sign.detached(s,a);return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(e,t,r){if(e.getName()!==Q.curve.ed25519Legacy)return!1;const{publicKey:i}=rr.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return T.equalsUint8Array(t,n)},verify:async function(e,t,{r,s:i},n,s,a){if(li(new hi(e),s),me.getHashByteLength(t)<me.getHashByteLength(Q.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");return un(T.concatUint8Array([r,i]),a,s.subarray(1))}});function gn(e){switch(e){case Q.publicKey.ed25519:return 32;case Q.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function pn(e){switch(e){case Q.publicKey.ed25519:return Q.hash.sha256;case Q.publicKey.ed448:return Q.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var dn=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){switch(e){case Q.publicKey.ed25519:{const t=Rt(gn(e)),{publicKey:r}=rr.sign.keyPair.fromSeed(t);return{A:r,seed:t}}case Q.publicKey.ed448:{const e=await T.getNobleCurve(Q.publicKey.ed448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),seed:t}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:gn,getPreferredHashAlgo:pn,sign:async function(e,t,r,i,n,s){if(me.getHashByteLength(t)<me.getHashByteLength(pn(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case Q.publicKey.ed25519:{const e=T.concatUint8Array([n,i]);return{RS:rr.sign.detached(s,e)}}case Q.publicKey.ed448:return{RS:(await T.getNobleCurve(Q.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(e,t,r){switch(e){case Q.publicKey.ed25519:{const{publicKey:e}=rr.sign.keyPair.fromSeed(r);return T.equalsUint8Array(t,e)}case Q.publicKey.ed448:{const e=(await T.getNobleCurve(Q.publicKey.ed448)).getPublicKey(r);return T.equalsUint8Array(t,e)}default:return!1}},verify:async function(e,t,{RS:r},i,n,s){if(me.getHashByteLength(t)<me.getHashByteLength(pn(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case Q.publicKey.ed25519:return un(r,s,n);case Q.publicKey.ed448:return(await T.getNobleCurve(Q.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});const An=T.getWebCrypto();async function wn(e,t,r){const{keySize:i}=re(e);if(!T.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");try{const e=await An.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),i=await An.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),n=await An.wrapKey("raw",i,e,{name:"AES-KW"});return new Uint8Array(n)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;T.printDebugError("Browser did not support operation: "+e.message)}return function(e,t,r){const i=new Fe(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=bn(r);let a=n;const o=s,c=s.length/2,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=0;e<=5;++e)for(let t=0;t<c;++t)h[1]=c*e+(1+t),u[0]=a[0],u[1]=a[1],u[2]=o[2*t],u[3]=o[2*t+1],u=bn(i.encrypt(En(u))),a=u.subarray(0,2),a[0]^=h[0],a[1]^=h[1],o[2*t]=u[2],o[2*t+1]=u[3];return En(a,o)}(0,t,r)}async function mn(e,t,r){const{keySize:i}=re(e);if(!T.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");let n;try{n=await An.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return T.printDebugError("Browser did not support operation: "+e.message),function(e,t,r){const i=new Fe(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=bn(r);let a=s.subarray(0,2);const o=s.subarray(2),c=s.length/2-1,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=5;e>=0;--e)for(let t=c-1;t>=0;--t)h[1]=c*e+(t+1),u[0]=a[0]^h[0],u[1]=a[1]^h[1],u[2]=o[2*t],u[3]=o[2*t+1],u=bn(i.decrypt(En(u))),a=u.subarray(0,2),o[2*t]=u[2],o[2*t+1]=u[3];if(a[0]===n[0]&&a[1]===n[1])return En(o);throw Error("Key Data Integrity failed")}(0,t,r)}try{const e=await An.unwrapKey("raw",r,n,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await An.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}function bn(e){const t=e.buffer,r=new DataView(t),i=new Uint32Array(e.length/4);for(let t=0;t<e.length/4;++t)i[t]=r.getUint32(4*t);return i}function En(){let e=0;for(let t=0;t<arguments.length;++t)e+=4*arguments[t].length;const t=new ArrayBuffer(e),r=new DataView(t);let i=0;for(let e=0;e<arguments.length;++e){for(let t=0;t<arguments[e].length;++t)r.setUint32(i+4*t,arguments[e][t]);i+=4*arguments[e].length}return new Uint8Array(t)}var kn=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:mn,wrap:wn});function vn(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}function Bn(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const i=e.subarray(t-r),n=new Uint8Array(r).fill(r);if(T.equalsUint8Array(i,n))return e.subarray(0,t-r)}}throw Error("Invalid padding")}var In=/*#__PURE__*/Object.freeze({__proto__:null,decode:Bn,encode:vn});const Sn=T.getWebCrypto(),Cn=T.getNodeCrypto();function Kn(e,t,r,i){return T.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),T.stringToUint8Array("Anonymous Sender    "),r.replacementFingerprint||i])}async function Pn(e,t,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await me.digest(e,T.concatUint8Array([new Uint8Array([0,0,0,1]),t,i]))).subarray(0,r)}async function Dn(e,t){switch(e.type){case"curve25519Legacy":{const r=Rt(32),{secretKey:i,sharedKey:n}=await Un(e,t,null,r);let{publicKey:s}=rr.box.keyPair.fromSecretKey(i);return s=T.concatUint8Array([new Uint8Array([e.wireFormatLeadingByte]),s]),{publicKey:s,sharedKey:n}}case"web":if(e.web&&T.getWebCrypto())try{return await async function(e,t){const r=gi(e.payloadSize,e.web,t);let i=Sn.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),n=Sn.importKey("jwk",r,{name:"ECDH",namedCurve:e.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=Sn.deriveBits({name:"ECDH",namedCurve:e.web,public:n},i.privateKey,e.sharedSize),a=Sn.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(fi(a,e.wireFormatLeadingByte));return{publicKey:c,sharedKey:o}}(e,t)}catch(r){return T.printDebugError(r),Qn(e,t)}break;case"node":return async function(e,t){const r=Cn.createECDH(e.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(t)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(e,t);default:return Qn(e,t)}}async function Un(e,t,r,i){if(i.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(i,e.payloadSize-i.length),i=t}switch(e.type){case"curve25519Legacy":{const e=i.slice().reverse();return{secretKey:e,sharedKey:rr.scalarMult(e,t.subarray(1))}}case"web":if(e.web&&T.getWebCrypto())try{return await async function(e,t,r,i){const n=pi(e.payloadSize,e.web,r,i);let s=Sn.importKey("jwk",n,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const a=gi(e.payloadSize,e.web,t);let o=Sn.importKey("jwk",a,{name:"ECDH",namedCurve:e.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=Sn.deriveBits({name:"ECDH",namedCurve:e.web,public:o},s,e.sharedSize),h=Sn.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:O(h.d),sharedKey:u}}(e,t,r,i)}catch(r){return T.printDebugError(r),xn(e,t,i)}break;case"node":return async function(e,t,r){const i=Cn.createECDH(e.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(t));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(e,t,i);default:return xn(e,t,i)}}async function xn(e,t,r){return{secretKey:r,sharedKey:(await T.getNobleCurve(Q.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function Qn(e,t){const r=await T.getNobleCurve(Q.publicKey.ecdh,e.name),{publicKey:i,privateKey:n}=await e.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,t).subarray(1)}}var Rn=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a){const o=new hi(e);li(o,n),li(o,r);const{sharedKey:c}=await Un(o,r,n,s),h=Kn(Q.publicKey.ecdh,e,t,a),{keySize:u}=re(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await Pn(t.hash,c,u,h,1===e,2===e);return Bn(await mn(t.cipher,r,i))}catch(e){l=e}throw l},encrypt:async function(e,t,r,i,n){const s=vn(r),a=new hi(e);li(a,i);const{publicKey:o,sharedKey:c}=await Dn(a,i),h=Kn(Q.publicKey.ecdh,e,t,n),{keySize:u}=re(t.cipher),l=await Pn(t.hash,c,u,h);return{publicKey:o,wrappedKey:await wn(t.cipher,l,s)}},validateParams:async function(e,t,r){return ui(Q.publicKey.ecdh,e,t,r)}});const Mn=T.getWebCrypto();async function Tn(e,t,r,i,n){const s=Q.read(Q.webHash,e);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Mn.importKey("raw",t,"HKDF",!1,["deriveBits"]),o=await Mn.deriveBits({name:"HKDF",hash:s,salt:r,info:i},a,8*n);return new Uint8Array(o)}const Ln={x25519:T.encodeUTF8("OpenPGP X25519"),x448:T.encodeUTF8("OpenPGP X448")};var _n=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){switch(e){case Q.publicKey.x25519:{const e=rr.scalarMult(n,t),s=T.concatUint8Array([t,i,e]),a=Q.symmetric.aes128,{keySize:o}=re(a);return mn(a,await Tn(Q.hash.sha256,s,new Uint8Array,Ln.x25519,o),r)}case Q.publicKey.x448:{const e=(await T.getNobleCurve(Q.publicKey.x448)).getSharedSecret(n,t),s=T.concatUint8Array([t,i,e]),a=Q.symmetric.aes256,{keySize:o}=re(Q.symmetric.aes256);return mn(a,await Tn(Q.hash.sha512,s,new Uint8Array,Ln.x448,o),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(e,t,r){switch(e){case Q.publicKey.x25519:{const e=Rt(32),i=rr.scalarMult(e,r),{publicKey:n}=rr.box.keyPair.fromSecretKey(e),s=T.concatUint8Array([n,r,i]),a=Q.symmetric.aes128,{keySize:o}=re(a),c=await Tn(Q.hash.sha256,s,new Uint8Array,Ln.x25519,o);return{ephemeralPublicKey:n,wrappedKey:await wn(a,c,t)}}case Q.publicKey.x448:{const e=await T.getNobleCurve(Q.publicKey.x448),i=e.utils.randomPrivateKey(),n=e.getSharedSecret(i,r),s=e.getPublicKey(i),a=T.concatUint8Array([s,r,n]),o=Q.symmetric.aes256,{keySize:c}=re(Q.symmetric.aes256),h=await Tn(Q.hash.sha512,a,new Uint8Array,Ln.x448,c);return{ephemeralPublicKey:s,wrappedKey:await wn(o,h,t)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(e){switch(e){case Q.publicKey.x25519:{const e=Rt(32),{publicKey:t}=rr.box.keyPair.fromSecretKey(e);return{A:t,k:e}}case Q.publicKey.x448:{const e=await T.getNobleCurve(Q.publicKey.x448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),k:t}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(e){switch(e){case Q.publicKey.x25519:return 32;case Q.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(e,t,r){switch(e){case Q.publicKey.x25519:{const{publicKey:e}=rr.box.keyPair.fromSecretKey(r);return T.equalsUint8Array(t,e)}case Q.publicKey.x448:{const e=(await T.getNobleCurve(Q.publicKey.x448)).getPublicKey(r);return T.equalsUint8Array(t,e)}default:return!1}}}),Fn=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:hi,ecdh:Rn,ecdhX:_n,ecdsa:Ei,eddsa:dn,eddsaLegacy:fn,generate:async function(e){const t=new hi(e),{oid:r,hash:i,cipher:n}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:T.leftPad(s.privateKey,t.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(e){return ci[e.getName()].hash}});const Nn=BigInt(0),Hn=BigInt(1);var On=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){const a=BigInt(0);let o,c,h,u;i=vt(i),n=vt(n),r=vt(r),s=vt(s),r=Bt(r,i),s=Bt(s,n);const l=Bt(vt(t.subarray(0,Ut(n))),n);for(;;){if(o=Mt(Hn,n),c=Bt(It(r,o,i),n),c===a)continue;const e=Bt(s*c,n);if(u=Bt(l+e,n),h=Bt(Ct(o,n)*u,n),h!==a)break}return{r:xt(c,"be",Ut(i)),s:xt(h,"be",Ut(i))}},validateParams:async function(e,t,r,i,n){if(e=vt(e),t=vt(t),r=vt(r),i=vt(i),r<=Hn||r>=e)return!1;if(Bt(e-Hn,t)!==Nn)return!1;if(It(r,t,e)!==Hn)return!1;const s=BigInt(Dt(t));if(s<BigInt(150)||!Ft(t,null,32))return!1;n=vt(n);const a=BigInt(2);return i===It(r,t*Mt(a<<s-Hn,a<<s)+n,e)},verify:async function(e,t,r,i,n,s,a,o){if(t=vt(t),r=vt(r),s=vt(s),a=vt(a),n=vt(n),o=vt(o),t<=Nn||t>=a||r<=Nn||r>=a)return T.printDebug("invalid DSA Signature"),!1;const c=Bt(vt(i.subarray(0,Ut(a))),a),h=Ct(r,a);if(h===Nn)return T.printDebug("invalid DSA Signature"),!1;n=Bt(n,s),o=Bt(o,s);const u=Bt(c*h,a),l=Bt(t*h,a);return Bt(Bt(It(n,u,s)*It(o,l,s),s),a)===t}});const zn=new Set([Q.hash.sha1,Q.hash.sha256,Q.hash.sha512]),Gn=T.getWebCrypto(),qn=T.getNodeCrypto();var jn={rsa:$t,elgamal:er,elliptic:Fn,dsa:On,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){if(!zn.has(e))throw Error("Unsupported hash algorithm.");const t=Q.read(Q.webHash,e),r=Gn||qn.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(e,t,r){if(!zn.has(e))throw Error("Unsupported hash algorithm.");const i=Q.read(Q.webHash,e),n=Gn||qn.webcrypto.subtle,s=await n.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(e,t,r,i){if(!zn.has(e))throw Error("Unsupported hash algorithm.");const n=Q.read(Q.webHash,e),s=Gn||qn.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class Vn{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!T.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return T.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}var Yn=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(e,t){let r=0;switch(e){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaSign:{const e=T.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case Q.publicKey.dsa:case Q.publicKey.ecdsa:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const i=T.readMPI(t.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:e,s:i}}}case Q.publicKey.eddsaLegacy:{let e=T.readMPI(t.subarray(r));r+=e.length+2,e=T.leftPad(e,32);let i=T.readMPI(t.subarray(r));return r+=i.length+2,i=T.leftPad(i,32),{read:r,signatureParams:{r:e,s:i}}}case Q.publicKey.ed25519:case Q.publicKey.ed448:{const i=2*jn.elliptic.eddsa.getPayloadSize(e),n=T.readExactSubarray(t,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case Q.publicKey.hmac:{const e=new Vn;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}default:throw new ei("Unknown signature algorithm.")}},sign:async function(e,t,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(e){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await jn.rsa.sign(t,n,e,a,o,c,h,u,s)}}case Q.publicKey.dsa:{const{g:e,p:n,q:a}=r,{x:o}=i;return jn.dsa.sign(t,s,e,n,a,o)}case Q.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case Q.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=i;return jn.elliptic.ecdsa.sign(e,t,n,a,o,s)}case Q.publicKey.eddsaLegacy:{const{oid:e,Q:a}=r,{seed:o}=i;return jn.elliptic.eddsaLegacy.sign(e,t,n,a,o,s)}case Q.publicKey.ed25519:case Q.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return jn.elliptic.eddsa.sign(e,t,n,a,o,s)}case Q.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=i,n=await jn.hmac.sign(e.getValue(),t,s);return{mac:new Vn(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(e,t,r,i,n,s,a){switch(e){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaSign:{const{n:e,e:n}=i,o=T.leftPad(r.s,e.length);return jn.rsa.verify(t,s,o,e,n,a)}case Q.publicKey.dsa:{const{g:e,p:n,q:s,y:o}=i,{r:c,s:h}=r;return jn.dsa.verify(t,c,h,a,e,n,s,o)}case Q.publicKey.ecdsa:{const{oid:e,Q:n}=i,o=new jn.elliptic.CurveWithOID(e).payloadSize,c=T.leftPad(r.r,o),h=T.leftPad(r.s,o);return jn.elliptic.ecdsa.verify(e,t,{r:c,s:h},s,n,a)}case Q.publicKey.eddsaLegacy:{const{oid:e,Q:n}=i;return jn.elliptic.eddsaLegacy.verify(e,t,r,s,n,a)}case Q.publicKey.ed25519:case Q.publicKey.ed448:{const{A:n}=i;return jn.elliptic.eddsa.verify(e,t,r,s,n,a)}case Q.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=i,{keyMaterial:t}=n;return jn.hmac.verify(e.getValue(),t,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class Zn{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return T.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class Jn{constructor(e){if(e){const{version:t,hash:r,cipher:i,replacementFingerprint:n}=e;this.version=t||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new ei("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const i=t-r+1;this.replacementFingerprint=e.slice(r,r+i),r+=i}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return T.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const Wn=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=Q.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return Q.read(e,this.data)}getValue(){return this.data}},$n=Wn(Q.aead),Xn=Wn(Q.symmetric),es=Wn(Q.hash);class ts{static fromObject({wrappedKey:e,algorithm:t}){const r=new ts;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=T.readExactSubarray(e,t,t+r),t+=r}write(){return T.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function rs(e,t){const r=Rt(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await me.sha256(r)}}}function is(e){const{keySize:t}=re(e);return Rt(t)}function ns(e){const t=Q.read(Q.aead,e);return bt[t]}function ss(e){try{e.getName()}catch(e){throw new ei("Unknown curve OID")}}function as(e,t){switch(e){case Q.publicKey.ecdsa:case Q.publicKey.ecdh:case Q.publicKey.eddsaLegacy:return new jn.elliptic.CurveWithOID(t).payloadSize;case Q.publicKey.ed25519:case Q.publicKey.ed448:return jn.elliptic.eddsa.getPayloadSize(e);case Q.publicKey.x25519:case Q.publicKey.x448:return jn.elliptic.ecdhX.getPayloadSize(e);default:throw Error("Unknown elliptic algo")}}var os=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(e,t,r,i){switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:return jn.rsa.generate(t,65537).then((({n:e,e:t,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:e,e:t}})));case Q.publicKey.ecdsa:return jn.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new jr(e),Q:t}})));case Q.publicKey.eddsaLegacy:return jn.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new jr(e),Q:t}})));case Q.publicKey.ecdh:return jn.elliptic.generate(r).then((({oid:e,Q:t,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new jr(e),Q:t,kdfParams:new Jn({hash:i,cipher:n})}})));case Q.publicKey.ed25519:case Q.publicKey.ed448:return jn.elliptic.eddsa.generate(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case Q.publicKey.x25519:case Q.publicKey.x448:return jn.elliptic.ecdhX.generate(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case Q.publicKey.hmac:return rs(await jn.hmac.generate(i),new es(i));case Q.publicKey.aead:return rs(is(i),new Xn(i));case Q.publicKey.dsa:case Q.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:is,getAEADMode:ns,getCipherParams:re,getCurvePayloadSize:as,getPreferredCurveHashAlgo:function(e,t){switch(e){case Q.publicKey.ecdsa:case Q.publicKey.eddsaLegacy:return jn.elliptic.getPreferredHashAlgo(t);case Q.publicKey.ed25519:case Q.publicKey.ed448:return jn.elliptic.eddsa.getPreferredHashAlgo(e);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(e){const{blockSize:t}=re(e),r=await Rt(t),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return T.concat([r,i])},parseEncSessionKeyParams:function(e,t){let r=0;switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:return{c:T.readMPI(t.subarray(r))};case Q.publicKey.elgamal:{const e=T.readMPI(t.subarray(r));r+=e.length+2;return{c1:e,c2:T.readMPI(t.subarray(r))}}case Q.publicKey.ecdh:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const i=new Zn;return i.read(t.subarray(r)),{V:e,C:i}}case Q.publicKey.x25519:case Q.publicKey.x448:{const i=as(e),n=T.readExactSubarray(t,r,r+i);r+=n.length;const s=new ts;return s.read(t.subarray(r)),{ephemeralPublicKey:n,C:s}}case Q.publicKey.aead:{const e=new $n;r+=e.read(t.subarray(r));const{ivLength:i}=ns(e.getValue()),n=t.subarray(r,r+i);r+=i;const s=new Vn;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:n,c:s}}default:throw new ei("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(e,t,r){let i=0;switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:{const e=T.readMPI(t.subarray(i));i+=e.length+2;const r=T.readMPI(t.subarray(i));i+=r.length+2;const n=T.readMPI(t.subarray(i));i+=n.length+2;const s=T.readMPI(t.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:e,p:r,q:n,u:s}}}case Q.publicKey.dsa:case Q.publicKey.elgamal:{const e=T.readMPI(t.subarray(i));return i+=e.length+2,{read:i,privateParams:{x:e}}}case Q.publicKey.ecdsa:case Q.publicKey.ecdh:{const n=as(e,r.oid);let s=T.readMPI(t.subarray(i));return i+=s.length+2,s=T.leftPad(s,n),{read:i,privateParams:{d:s}}}case Q.publicKey.eddsaLegacy:{const n=as(e,r.oid);if(r.oid.getName()!==Q.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let s=T.readMPI(t.subarray(i));return i+=s.length+2,s=T.leftPad(s,n),{read:i,privateParams:{seed:s}}}case Q.publicKey.ed25519:case Q.publicKey.ed448:{const r=as(e),n=T.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case Q.publicKey.x25519:case Q.publicKey.x448:{const r=as(e),n=T.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case Q.publicKey.hmac:{const{cipher:e}=r,n=me.getHashByteLength(e.getValue()),s=t.subarray(i,i+32);i+=32;const a=t.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case Q.publicKey.aead:{const{cipher:e}=r,n=t.subarray(i,i+32);i+=32;const{keySize:s}=re(e.getValue()),a=t.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new ei("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(e,t){let r=0;switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const i=T.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:e,e:i}}}case Q.publicKey.dsa:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const i=T.readMPI(t.subarray(r));r+=i.length+2;const n=T.readMPI(t.subarray(r));r+=n.length+2;const s=T.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:i,g:n,y:s}}}case Q.publicKey.elgamal:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const i=T.readMPI(t.subarray(r));r+=i.length+2;const n=T.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:e,g:i,y:n}}}case Q.publicKey.ecdsa:{const e=new jr;r+=e.read(t),ss(e);const i=T.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:e,Q:i}}}case Q.publicKey.eddsaLegacy:{const e=new jr;if(r+=e.read(t),ss(e),e.getName()!==Q.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let i=T.readMPI(t.subarray(r));return r+=i.length+2,i=T.leftPad(i,33),{read:r,publicParams:{oid:e,Q:i}}}case Q.publicKey.ecdh:{const e=new jr;r+=e.read(t),ss(e);const i=T.readMPI(t.subarray(r));r+=i.length+2;const n=new Jn;return r+=n.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:i,kdfParams:n}}}case Q.publicKey.ed25519:case Q.publicKey.ed448:case Q.publicKey.x25519:case Q.publicKey.x448:{const i=T.readExactSubarray(t,r,r+as(e));return r+=i.length,{read:r,publicParams:{A:i}}}case Q.publicKey.hmac:case Q.publicKey.aead:{const e=new Xn;r+=e.read(t);const i=me.getHashByteLength(Q.hash.sha256),n=t.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:e,digest:n}}}default:throw new ei("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(e,t,r,i,n,s){switch(e){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:{const{c:e}=i,{n,e:a}=t,{d:o,p:c,q:h,u}=r;return jn.rsa.decrypt(e,n,a,o,c,h,u,s)}case Q.publicKey.elgamal:{const{c1:e,c2:n}=i,a=t.p,o=r.x;return jn.elgamal.decrypt(e,n,a,o,s)}case Q.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:h}=i;return jn.elliptic.ecdh.decrypt(e,a,c,h.data,s,o,n)}case Q.publicKey.x25519:case Q.publicKey.x448:{const{A:n}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!T.isAES(o.algorithm))throw Error("AES session key expected");return jn.elliptic.ecdhX.decrypt(e,a,o.wrappedKey,n,s)}case Q.publicKey.aead:{const{cipher:e}=t,n=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=ns(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(e,t,r,i,n,s){switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await jn.rsa.encrypt(n,e,t)}}case Q.publicKey.elgamal:{const{p:e,g:t,y:i}=r;return jn.elgamal.encrypt(n,e,t,i)}case Q.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await jn.elliptic.ecdh.encrypt(e,i,n,t,s);return{V:a,C:new Zn(o)}}case Q.publicKey.x25519:case Q.publicKey.x448:{if(t&&!T.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await jn.elliptic.ecdhX.encrypt(e,n,i);return{ephemeralPublicKey:s,C:ts.fromObject({algorithm:t,wrappedKey:a})}}case Q.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=i,a=R.preferredAEADAlgorithm,o=ns(R.preferredAEADAlgorithm),{ivLength:c}=o,h=Rt(c),u=await o(t,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new $n(a),iv:h,c:new Vn(l)}}default:return[]}},serializeParams:function(e,t){const r=new Set([Q.publicKey.ed25519,Q.publicKey.x25519,Q.publicKey.ed448,Q.publicKey.x448,Q.publicKey.aead,Q.publicKey.hmac]),i=Object.keys(t).map((i=>{const n=t[i];return T.isUint8Array(n)?r.has(e)?n:T.uint8ArrayToMPI(n):n.write()}));return T.concatUint8Array(i)},validateParams:async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:{const{n:e,e:i}=t,{d:n,p:s,q:a,u:o}=r;return jn.rsa.validateParams(e,i,n,s,a,o)}case Q.publicKey.dsa:{const{p:e,q:i,g:n,y:s}=t,{x:a}=r;return jn.dsa.validateParams(e,i,n,s,a)}case Q.publicKey.elgamal:{const{p:e,g:i,y:n}=t,{x:s}=r;return jn.elgamal.validateParams(e,i,n,s)}case Q.publicKey.ecdsa:case Q.publicKey.ecdh:{const i=jn.elliptic[Q.read(Q.publicKey,e)],{oid:n,Q:s}=t,{d:a}=r;return i.validateParams(n,s,a)}case Q.publicKey.eddsaLegacy:{const{Q:e,oid:i}=t,{seed:n}=r;return jn.elliptic.eddsaLegacy.validateParams(i,e,n)}case Q.publicKey.ed25519:case Q.publicKey.ed448:{const{A:i}=t,{seed:n}=r;return jn.elliptic.eddsa.validateParams(e,i,n)}case Q.publicKey.x25519:case Q.publicKey.x448:{const{A:i}=t,{k:n}=r;return jn.elliptic.ecdhX.validateParams(e,i,n)}case Q.publicKey.hmac:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r;return me.getHashByteLength(e.getValue())===s.length&&T.equalsUint8Array(i,await me.sha256(n))}case Q.publicKey.aead:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=re(e.getValue());return a===s.length&&T.equalsUint8Array(i,await me.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const cs={cipher:ie,hash:me,mode:bt,publicKey:jn,signature:Yn,random:Tt,pkcs1:qt,pkcs5:In,aesKW:kn};Object.assign(cs,os);class hs extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,hs),this.name="Argon2OutOfMemoryError"}}let us,ls,ys=2<<19;class fs{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return ys}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){ys=e}static reloadWasmModule(){us&&(ls=us(),ls.catch((()=>{})))}constructor(e=R){const{passes:t,parallelism:r,memoryExponent:i}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=i}generateSalt(){this.salt=cs.random.getRandomBytes(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([Q.write(Q.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return T.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{us=us||(await Promise.resolve().then((function(){return Ey}))).default,ls=ls||us();const i=await ls,n=i({version:19,type:2,password:T.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>fs.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&fs.reloadWasmModule(),n}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new hs("Could not allocate required memory for Argon2"):e}}}class gs{constructor(e,t=R){this.algorithm=Q.hash.sha256,this.type=Q.read(Q.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=cs.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==T.uint8ArrayToString(e.subarray(t,t+3)))throw new ei("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new ei("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new ei("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...T.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([Q.write(Q.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return T.concatUint8Array(e)}async produceKey(e,t){e=T.encodeUTF8(e);const r=[];let i=0,n=0;for(;i<t;){let t;switch(this.type){case"simple":t=T.concatUint8Array([new Uint8Array(n),e]);break;case"salted":t=T.concatUint8Array([new Uint8Array(n),this.salt,e]);break;case"iterated":{const r=T.concatUint8Array([this.salt,e]);let i=r.length;const s=Math.max(this.getCount(),i);t=new Uint8Array(n+s),t.set(r,n);for(let e=n+i;e<s;e+=i,i*=2)t.copyWithin(e,n,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await cs.hash.digest(this.algorithm,t);r.push(s),i+=s.length,n++}return T.concatUint8Array(r).subarray(0,t)}}const ps=new Set([Q.s2k.argon2,Q.s2k.iterated]);function ds(e,t=R){switch(e){case Q.s2k.argon2:return new fs(t);case Q.s2k.iterated:case Q.s2k.gnu:case Q.s2k.salted:case Q.s2k.simple:return new gs(e,t);default:throw new ei("Unsupported S2K type")}}function As(e){const{s2kType:t}=e;if(!ps.has(t))throw Error("The provided `config.s2kType` value is not allowed");return ds(t,e)}var ws=Uint8Array,ms=Uint16Array,bs=Uint32Array,Es=new ws([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),ks=new ws([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),vs=new ws([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),Bs=function(e,t){for(var r=new ms(31),i=0;i<31;++i)r[i]=t+=1<<e[i-1];var n=new bs(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},Is=Bs(Es,2),Ss=Is[0],Cs=Is[1];Ss[28]=258,Cs[258]=28;for(var Ks=Bs(ks,0),Ps=Ks[0],Ds=Ks[1],Us=new ms(32768),xs=0;xs<32768;++xs){var Qs=(43690&xs)>>>1|(21845&xs)<<1;Qs=(61680&(Qs=(52428&Qs)>>>2|(13107&Qs)<<2))>>>4|(3855&Qs)<<4,Us[xs]=((65280&Qs)>>>8|(255&Qs)<<8)>>>1}var Rs=function(e,t,r){for(var i=e.length,n=0,s=new ms(t);n<i;++n)e[n]&&++s[e[n]-1];var a,o=new ms(t);for(n=0;n<t;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new ms(1<<t);var c=15-t;for(n=0;n<i;++n)if(e[n])for(var h=n<<4|e[n],u=t-e[n],l=o[e[n]-1]++<<u,y=l|(1<<u)-1;l<=y;++l)a[Us[l]>>>c]=h}else for(a=new ms(i),n=0;n<i;++n)e[n]&&(a[n]=Us[o[e[n]-1]++]>>>15-e[n]);return a},Ms=new ws(288);for(xs=0;xs<144;++xs)Ms[xs]=8;for(xs=144;xs<256;++xs)Ms[xs]=9;for(xs=256;xs<280;++xs)Ms[xs]=7;for(xs=280;xs<288;++xs)Ms[xs]=8;var Ts=new ws(32);for(xs=0;xs<32;++xs)Ts[xs]=5;var Ls=/*#__PURE__*/Rs(Ms,9,0),_s=/*#__PURE__*/Rs(Ms,9,1),Fs=/*#__PURE__*/Rs(Ts,5,0),Ns=/*#__PURE__*/Rs(Ts,5,1),Hs=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},Os=function(e,t,r){var i=t/8|0;return(e[i]|e[i+1]<<8)>>(7&t)&r},zs=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},Gs=function(e){return(e+7)/8|0},qs=function(e,t,r){(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length);var i=new(2==e.BYTES_PER_ELEMENT?ms:4==e.BYTES_PER_ELEMENT?bs:ws)(r-t);return i.set(e.subarray(t,r)),i},js=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],Vs=function(e,t,r){var i=Error(t||js[e]);if(i.code=e,Error.captureStackTrace&&Error.captureStackTrace(i,Vs),!r)throw i;return i},Ys=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8},Zs=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8,e[i+2]|=r>>>16},Js=function(e,t){for(var r=[],i=0;i<e.length;++i)e[i]&&r.push({s:i,f:e[i]});var n=r.length,s=r.slice();if(!n)return[ia,0];if(1==n){var a=new ws(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var y=s[0].s;for(i=1;i<n;++i)s[i].s>y&&(y=s[i].s);var f=new ms(y+1),g=Ws(r[u-1],f,0);if(g>t){i=0;var p=0,d=g-t,A=1<<d;for(s.sort((function(e,t){return f[t.s]-f[e.s]||e.f-t.f}));i<n;++i){var w=s[i].s;if(!(f[w]>t))break;p+=A-(1<<g-f[w]),f[w]=t}for(p>>>=d;p>0;){var m=s[i].s;f[m]<t?p-=1<<t-f[m]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;f[b]==t&&(--f[b],++p)}g=t}return[new ws(f),g]},Ws=function(e,t,r){return-1==e.s?Math.max(Ws(e.l,t,r+1),Ws(e.r,t,r+1)):t[e.s]=r},$s=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new ms(++t),i=0,n=e[0],s=1,a=function(e){r[i++]=e},o=1;o<=t;++o)if(e[o]==n&&o!=t)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=e[o]}return[r.subarray(0,i),t]},Xs=function(e,t){for(var r=0,i=0;i<t.length;++i)r+=e[i]*t[i];return r},ea=function(e,t,r){var i=r.length,n=Gs(t+2);e[n]=255&i,e[n+1]=i>>>8,e[n+2]=255^e[n],e[n+3]=255^e[n+1];for(var s=0;s<i;++s)e[n+s+4]=r[s];return 8*(n+4+i)},ta=function(e,t,r,i,n,s,a,o,c,h,u){Ys(t,u++,r),++n[256];for(var l=Js(n,15),y=l[0],f=l[1],g=Js(s,15),p=g[0],d=g[1],A=$s(y),w=A[0],m=A[1],b=$s(p),E=b[0],k=b[1],v=new ms(19),B=0;B<w.length;++B)v[31&w[B]]++;for(B=0;B<E.length;++B)v[31&E[B]]++;for(var I=Js(v,7),S=I[0],C=I[1],K=19;K>4&&!S[vs[K-1]];--K);var P,D,U,x,Q=h+5<<3,R=Xs(n,Ms)+Xs(s,Ts)+a,M=Xs(n,y)+Xs(s,p)+a+14+3*K+Xs(v,S)+(2*v[16]+3*v[17]+7*v[18]);if(Q<=R&&Q<=M)return ea(t,u,e.subarray(c,c+h));if(Ys(t,u,1+(M<R)),u+=2,M<R){P=Rs(y,f,0),D=y,U=Rs(p,d,0),x=p;var T=Rs(S,C,0);Ys(t,u,m-257),Ys(t,u+5,k-1),Ys(t,u+10,K-4),u+=14;for(B=0;B<K;++B)Ys(t,u+3*B,S[vs[B]]);u+=3*K;for(var L=[w,E],_=0;_<2;++_){var F=L[_];for(B=0;B<F.length;++B){var N=31&F[B];Ys(t,u,T[N]),u+=S[N],N>15&&(Ys(t,u,F[B]>>>5&127),u+=F[B]>>>12)}}}else P=Ls,D=Ms,U=Fs,x=Ts;for(B=0;B<o;++B)if(i[B]>255){N=i[B]>>>18&31;Zs(t,u,P[N+257]),u+=D[N+257],N>7&&(Ys(t,u,i[B]>>>23&31),u+=Es[N]);var H=31&i[B];Zs(t,u,U[H]),u+=x[H],H>3&&(Zs(t,u,i[B]>>>5&8191),u+=ks[H])}else Zs(t,u,P[i[B]]),u+=D[i[B]];return Zs(t,u,P[256]),u+D[256]},ra=/*#__PURE__*/new bs([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),ia=/*#__PURE__*/new ws(0),na=function(e,t,r,i,n){return function(e,t,r,i,n,s){var a=e.length,o=new ws(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!t||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=ea(c,h+1,e.subarray(u,l))}else{for(var y=ra[t-1],f=y>>>13,g=8191&y,p=(1<<r)-1,d=new ms(32768),A=new ms(p+1),w=Math.ceil(r/3),m=2*w,b=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<m)&p},E=new bs(25e3),k=new ms(288),v=new ms(32),B=0,I=0,S=(u=0,0),C=0,K=0;u<a;++u){var P=b(u),D=32767&u,U=A[P];if(d[D]=U,A[P]=D,C<=u){var x=a-u;if((B>7e3||S>24576)&&x>423){h=ta(e,c,0,E,k,v,I,S,K,u-K,h),S=B=I=0,K=u;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)v[Q]=0}var R=2,M=0,T=g,L=D-U&32767;if(x>2&&P==b(u-L))for(var _=Math.min(f,x)-1,F=Math.min(32767,u),N=Math.min(258,x);L<=F&&--T&&D!=U;){if(e[u+R]==e[u+R-L]){for(var H=0;H<N&&e[u+H]==e[u+H-L];++H);if(H>R){if(R=H,M=L,H>_)break;var O=Math.min(L,H-2),z=0;for(Q=0;Q<O;++Q){var G=u-L+Q+32768&32767,q=G-d[G]+32768&32767;q>z&&(z=q,U=G)}}}L+=(D=U)-(U=d[D])+32768&32767}if(M){E[S++]=268435456|Cs[R]<<18|Ds[M];var j=31&Cs[R],V=31&Ds[M];I+=Es[j]+ks[V],++k[257+j],++v[V],C=u+R,++B}else E[S++]=e[u],++k[e[u]]}}h=ta(e,c,s,E,k,v,I,S,K,u-K,h),!s&&7&h&&(h=ea(c,h+1,ia))}return qs(o,0,i+Gs(h)+n)}(e,null==t.level?6:t.level,null==t.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):12+t.mem,r,i,!n)},sa=/*#__PURE__*/function(){function e(e,t){t||"function"!=typeof e||(t=e,e={}),this.ondata=t,this.o=e||{}}return e.prototype.p=function(e,t){this.ondata(na(e,this.o,0,0,!t),t)},e.prototype.push=function(e,t){this.ondata||Vs(5),this.d&&Vs(4),this.d=t,this.p(e,t||!1)},e}(),aa=/*#__PURE__*/function(){function e(e){this.s={},this.p=new ws(0),this.ondata=e}return e.prototype.e=function(e){this.ondata||Vs(5),this.d&&Vs(4);var t=this.p.length,r=new ws(t+e.length);r.set(this.p),r.set(e,t),this.p=r},e.prototype.c=function(e){this.d=this.s.i=e||!1;var t=this.s.b,r=function(e,t,r){var i=e.length;if(!i||r&&r.f&&!r.l)return t||new ws(0);var n=!t||r,s=!r||r.i;r||(r={}),t||(t=new ws(3*i));var a=function(e){var r=t.length;if(e>r){var i=new ws(Math.max(2*r,e));i.set(t),t=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,y=r.m,f=r.n,g=8*i;do{if(!u){o=Os(e,c,1);var p=Os(e,c+1,3);if(c+=3,!p){var d=e[(C=Gs(c)+4)-4]|e[C-3]<<8,A=C+d;if(A>i){s&&Vs(0);break}n&&a(h+d),t.set(e.subarray(C,A),h),r.b=h+=d,r.p=c=8*A,r.f=o;continue}if(1==p)u=_s,l=Ns,y=9,f=5;else if(2==p){var w=Os(e,c,31)+257,m=Os(e,c+10,15)+4,b=w+Os(e,c+5,31)+1;c+=14;for(var E=new ws(b),k=new ws(19),v=0;v<m;++v)k[vs[v]]=Os(e,c+3*v,7);c+=3*m;var B=Hs(k),I=(1<<B)-1,S=Rs(k,B,1);for(v=0;v<b;){var C,K=S[Os(e,c,I)];if(c+=15&K,(C=K>>>4)<16)E[v++]=C;else{var P=0,D=0;for(16==C?(D=3+Os(e,c,3),c+=2,P=E[v-1]):17==C?(D=3+Os(e,c,7),c+=3):18==C&&(D=11+Os(e,c,127),c+=7);D--;)E[v++]=P}}var U=E.subarray(0,w),x=E.subarray(w);y=Hs(U),f=Hs(x),u=Rs(U,y,1),l=Rs(x,f,1)}else Vs(1);if(c>g){s&&Vs(0);break}}n&&a(h+131072);for(var Q=(1<<y)-1,R=(1<<f)-1,M=c;;M=c){var T=(P=u[zs(e,c)&Q])>>>4;if((c+=15&P)>g){s&&Vs(0);break}if(P||Vs(2),T<256)t[h++]=T;else{if(256==T){M=c,u=null;break}var L=T-254;if(T>264){var _=Es[v=T-257];L=Os(e,c,(1<<_)-1)+Ss[v],c+=_}var F=l[zs(e,c)&R],N=F>>>4;if(F||Vs(3),c+=15&F,x=Ps[N],N>3&&(_=ks[N],x+=zs(e,c)&(1<<_)-1,c+=_),c>g){s&&Vs(0);break}n&&a(h+131072);for(var H=h+L;h<H;h+=4)t[h]=t[h-x],t[h+1]=t[h+1-x],t[h+2]=t[h+2-x],t[h+3]=t[h+3-x];h=H}}r.l=u,r.p=M,r.b=h,r.f=o,u&&(o=1,r.m=y,r.d=l,r.n=f)}while(!o);return h==t.length?t:qs(t,0,h)}(this.p,this.o,this.s);this.ondata(qs(r,t,this.s.b),this.d),this.o=qs(r,this.s.b-32768),this.s.b=this.o.length,this.p=qs(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),oa=/*#__PURE__*/function(){function e(e,t){var r,i;this.c=(r=1,i=0,{p:function(e){for(var t=r,n=i,s=0|e.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=t+=e[a];t=(65535&t)+15*(t>>16),n=(65535&n)+15*(n>>16)}r=t,i=n},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(i%=65521))<<8|i>>>8}}),this.v=1,sa.call(this,e,t)}return e.prototype.push=function(e,t){sa.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){this.c.p(e);var r=na(e,this.o,this.v&&2,t&&4,!t);this.v&&(function(e,t){var r=t.level,i=0==r?0:r<6?1:9==r?3:2;e[0]=120,e[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),t&&function(e,t,r){for(;r;++t)e[t]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,t)},e}(),ca=/*#__PURE__*/function(){function e(e){this.v=1,aa.call(this,e)}return e.prototype.push=function(e,t){if(aa.prototype.e.call(this,e),this.v){if(this.p.length<2&&!t)return;this.p=this.p.subarray(2),this.v=0}t&&(this.p.length<4&&Vs(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),aa.prototype.c.call(this,t)},e}(),ha="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{ha.decode(ia,{stream:!0}),1}catch(e){}var ua=[0,1,3,7,15,31,63,127,255],la=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};la.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},la.prototype.read=function(e){for(var t=0;e>0;){this._ensureByte();var r=8-this.bitOffset;if(e>=r)t<<=r,t|=ua[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,e-=r;else{t<<=e;var i=r-e;t|=(this.curByte&ua[e]<<i)>>i,this.bitOffset+=e,e=0}}return t},la.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},la.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)};var ya=la,fa=function(){};fa.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},fa.prototype.read=function(e,t,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;e[t++]=n,i++}return i},fa.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},fa.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},fa.prototype.write=function(e,t,r){var i;for(i=0;i<r;i++)this.writeByte(e[t++]);return r},fa.prototype.flush=function(){};var ga,pa=fa,da=(ga=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var e=4294967295;this.getCRC=function(){return~e>>>0},this.updateCRC=function(t){e=e<<8^ga[255&(e>>>24^t)]},this.updateCRCRun=function(t,r){for(;r-- >0;)e=e<<8^ga[255&(e>>>24^t)]}}),Aa=ya,wa=pa,ma=da,ba=function(e,t){var r,i=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=i,i},Ea={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},ka={};ka[Ea.LAST_BLOCK]="Bad file checksum",ka[Ea.NOT_BZIP_DATA]="Not bzip data",ka[Ea.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",ka[Ea.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",ka[Ea.DATA_ERROR]="Data error",ka[Ea.OUT_OF_MEMORY]="Out of memory",ka[Ea.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var va=function(e,t){var r=ka[e]||"unknown error";t&&(r+=": "+t);var i=new TypeError(r);throw i.errorCode=e,i},Ba=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};Ba.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new ma,!0):(this.writeCount=-1,!1)},Ba.prototype._start_bunzip=function(e,t){var r=new Uint8Array(4);4===e.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||va(Ea.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&va(Ea.NOT_BZIP_DATA,"level out of range"),this.reader=new Aa(e),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=t,this.streamCRC=0},Ba.prototype._get_next_block=function(){var e,t,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&va(Ea.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&va(Ea.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&va(Ea.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(e=0;e<16;e++)if(a&1<<15-e){var h=16*e;for(r=i.read(16),t=0;t<16;t++)r&1<<15-t&&(o[c++]=h+t)}var u=i.read(3);(u<2||u>6)&&va(Ea.DATA_ERROR);var l=i.read(15);0===l&&va(Ea.DATA_ERROR);var y=new Uint8Array(256);for(e=0;e<u;e++)y[e]=e;var f=new Uint8Array(l);for(e=0;e<l;e++){for(t=0;i.read(1);t++)t>=u&&va(Ea.DATA_ERROR);f[e]=ba(y,t)}var g,p=c+2,d=[];for(t=0;t<u;t++){var A,w,m=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),e=0;e<p;e++){for(;(a<1||a>20)&&va(Ea.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;m[e]=a}for(A=w=m[0],e=1;e<p;e++)m[e]>w?w=m[e]:m[e]<A&&(A=m[e]);g={},d.push(g),g.permute=new Uint16Array(258),g.limit=new Uint32Array(22),g.base=new Uint32Array(21),g.minLen=A,g.maxLen=w;var E=0;for(e=A;e<=w;e++)for(b[e]=g.limit[e]=0,a=0;a<p;a++)m[a]===e&&(g.permute[E++]=a);for(e=0;e<p;e++)b[m[e]]++;for(E=a=0,e=A;e<w;e++)E+=b[e],g.limit[e]=E-1,E<<=1,a+=b[e],g.base[e+1]=E-a;g.limit[w+1]=Number.MAX_VALUE,g.limit[w]=E+b[w]-1,g.base[A]=0}var k=new Uint32Array(256);for(e=0;e<256;e++)y[e]=e;var v,B=0,I=0,S=0,C=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,S>=l&&va(Ea.DATA_ERROR),g=d[f[S++]]),e=g.minLen,t=i.read(e);e>g.maxLen&&va(Ea.DATA_ERROR),!(t<=g.limit[e]);e++)t=t<<1|i.read(1);((t-=g.base[e])<0||t>=258)&&va(Ea.DATA_ERROR);var K=g.permute[t];if(0!==K&&1!==K){if(B)for(B=0,I+a>this.dbufSize&&va(Ea.DATA_ERROR),k[v=o[y[0]]]+=a;a--;)C[I++]=v;if(K>c)break;I>=this.dbufSize&&va(Ea.DATA_ERROR),k[v=o[v=ba(y,e=K-1)]]++,C[I++]=v}else B||(B=1,a=0),a+=0===K?B:2*B,B<<=1}for((s<0||s>=I)&&va(Ea.DATA_ERROR),t=0,e=0;e<256;e++)r=t+k[e],k[e]=t,t=r;for(e=0;e<I;e++)C[k[v=255&C[e]]]|=e<<8,k[v]++;var P=0,D=0,U=0;return I&&(D=255&(P=C[s]),P>>=8,U=-1),this.writePos=P,this.writeCurrent=D,this.writeCount=I,this.writeRun=U,!0},Ba.prototype._read_bunzip=function(e,t){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&va(Ea.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var Ia=function(e){if("readByte"in e)return e;var t=new wa;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},Sa=function(e){var t=new wa,r=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),r=!1;else{if("writeByte"in e)return e;t.buffer=e,r=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(r&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};var Ca=function(e,t,r){for(var i=Ia(e),n=Sa(t),s=new Ba(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&va(Ea.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class Ka{static get tag(){return Q.packet.literalData}constructor(e=new Date){this.format=Q.literal.utf8,this.date=T.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=Q.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||T.isStream(this.text))&&(this.text=T.decodeUTF8(T.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=T.canonicalizeEOL(T.encodeUTF8(this.text))),e?B(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await k(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=T.decodeUTF8(await e.readBytes(r)),this.date=T.readDate(await e.readBytes(4));let i=e.remainder();a(i)&&(i=await C(i)),this.setBytes(i,t)}))}writeHeader(){const e=T.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),i=T.writeDate(this.date);return T.concatUint8Array([r,t,e,i])}write(){const e=this.writeHeader(),t=this.getBytes();return T.concat([e,t])}}class Pa{constructor(){this.bytes=""}read(e){return this.bytes=T.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return T.stringToUint8Array(this.bytes)}toHex(){return T.uint8ArrayToHex(T.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new Pa;return t.read(T.hexToUint8Array(e)),t}static wildcard(){const e=new Pa;return e.read(new Uint8Array(8)),e}}const Da=Symbol("verified"),Ua="salt@notations.openpgpjs.org",xa=new Set([Q.signatureSubpacket.issuerKeyID,Q.signatureSubpacket.issuerFingerprint,Q.signatureSubpacket.embeddedSignature]);class Qa{static get tag(){return Q.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.unknownSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Pa,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Da]=null}read(e,t=R){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new ei("Support for v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4!==this.version&&5!==this.version&&6!==this.version)throw new ei(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[r++],this.publicKeyAlgorithm=e[r++],this.hashAlgorithm=e[r++],r+=this.readSubPackets(e.subarray(r,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,r),r+=this.readSubPackets(e.subarray(r,e.length),!1),this.signedHashValue=e.subarray(r,r+2),r+=2,6===this.version){const t=e[r++];this.salt=e.subarray(r,r+t),r+=t}const i=e.subarray(r,e.length),{read:n,signatureParams:s}=cs.signature.parseSignatureParams(this.publicKeyAlgorithm,i);if(n<i.length)throw Error("Error reading MPIs");this.params=s}writeParams(){return this.params instanceof Promise?P((async()=>cs.serializeParams(this.publicKeyAlgorithm,await this.params))):cs.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),T.concat(e)}async sign(e,t,r=new Date,i=!1,n){this.version=e.version,this.created=T.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Ma(this.hashAlgorithm);if(null===this.salt)this.salt=cs.random.getRandomBytes(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(n.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===Ua)).length)throw Error("Unexpected existing salt notation");{const e=cs.random.getRandomBytes(Ma(this.hashAlgorithm));this.rawNotations.push({name:Ua,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=T.concat(s);const a=this.toHash(this.signatureType,t,i),o=await this.hash(this.signatureType,t,a,i);this.signedHashValue=S(v(o),0,2);const c=async()=>cs.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await C(o));T.isStream(o)?this.params=c():(this.params=await c(),this[Da]=!0)}writeHashedSubPackets(){const e=Q.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(Ra(e.signatureCreationTime,!0,T.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(Ra(e.signatureExpirationTime,!0,T.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(Ra(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(Ra(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(Ra(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(Ra(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(Ra(e.keyExpirationTime,!0,T.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(Ra(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=T.concat([r,this.revocationKeyFingerprint]),t.push(Ra(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(Ra(e.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=T.encodeUTF8(i);r.push(T.writeNumber(o.length,2)),r.push(T.writeNumber(n.length,2)),r.push(o),r.push(n),r=T.concat(r),t.push(Ra(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(Ra(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(Ra(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.keyServerPreferences)),t.push(Ra(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(Ra(e.preferredKeyServer,!1,T.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(Ra(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(Ra(e.policyURI,!1,T.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.keyFlags)),t.push(Ra(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(Ra(e.signersUserID,!1,T.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=T.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(Ra(e.reasonForRevocation,!0,r))),null!==this.features&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.features)),t.push(Ra(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(T.stringToUint8Array(this.signatureTargetHash)),r=T.concat(r),t.push(Ra(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(Ra(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=T.concat(r),t.push(Ra(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(Ra(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(Ra(e.preferredCipherSuites,!1,r)));const i=T.concat(t),n=T.writeNumber(i.length,6===this.version?4:2);return T.concat([n,i])}writeUnhashedSubPackets(){const e=this.unhashedSubpackets.map((({type:e,critical:t,body:r})=>Ra(e,t,r))),t=T.concat(e),r=T.writeNumber(t.length,6===this.version?4:2);return T.concat([r,t])}readSubPacket(e,t=!0){let r=0;const i=!!(128&e[r]),n=127&e[r];if(r++,t||(this.unhashedSubpackets.push({type:n,critical:i,body:e.subarray(r,e.length)}),xa.has(n)))switch(n){case Q.signatureSubpacket.signatureCreationTime:this.created=T.readDate(e.subarray(r,e.length));break;case Q.signatureSubpacket.signatureExpirationTime:{const t=T.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case Q.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case Q.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case Q.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case Q.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case Q.signatureSubpacket.keyExpirationTime:{const t=T.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case Q.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case Q.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case Q.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const n=T.readNumber(e.subarray(r,r+2));r+=2;const s=T.readNumber(e.subarray(r,r+2));r+=2;const a=T.decodeUTF8(e.subarray(r,r+n)),o=e.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:i}),t&&(this.notations[a]=T.decodeUTF8(o));break}case Q.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=T.decodeUTF8(e.subarray(r,e.length));break;case Q.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case Q.signatureSubpacket.policyURI:this.policyURI=T.decodeUTF8(e.subarray(r,e.length));break;case Q.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.signersUserID:this.signersUserID=T.decodeUTF8(e.subarray(r,e.length));break;case Q.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=T.decodeUTF8(e.subarray(r,e.length));break;case Q.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=cs.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=T.uint8ArrayToString(e.subarray(r,r+t));break}case Q.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Qa,this.embeddedSignature.read(e.subarray(r,e.length));break;case Q.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case Q.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case Q.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:this.unknownSubpackets.push({type:n,critical:i,body:e.subarray(r,e.length)})}}readSubPackets(e,t=!0,r){const i=6===this.version?4:2,n=T.readNumber(e.subarray(0,i));let s=i;for(;s<2+n;){const i=Vr(e.subarray(s,e.length));s+=i.offset,this.readSubPacket(e.subarray(s,s+i.len),t,r),s+=i.len}return s}toSign(e,t){const r=Q.signature;switch(e){case r.binary:return null!==t.text?T.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return T.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,i;if(t.userID)i=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,e=t.userAttribute}const n=e.write();return T.concat([this.toSign(r.key,t),new Uint8Array([i]),T.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return T.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return b(v(this.signatureData),(e=>{r+=e.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==Q.signature.binary&&this.signatureType!==Q.signature.text||(t?i.push(new Uint8Array(6)):i.push(e.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(T.writeNumber(r,4)),T.concat(i)}))}toHash(e,t,r=!1){const i=this.toSign(e,t);return T.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,i=!1){if(6===this.version&&this.salt.length!==Ma(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,i)),cs.hash.digest(this.hashAlgorithm,r)}async verify(e,t,r,i=new Date,n=!1,s=R){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===Q.signature.binary||t===Q.signature.text;if(!(this[Da]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(t,r,n),s=await this.hash(t,r,i)),s=await C(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===Q.publicKey.hmac?e.privateParams:null;if(this[Da]=await cs.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,i,s),!this[Da])throw Error("Signature verification failed")}const o=T.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+Q.read(Q.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[Q.signature.binary,Q.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+Q.read(Q.hash,this.hashAlgorithm).toUpperCase());if(this.unknownSubpackets.forEach((({type:e,critical:t})=>{if(t)throw Error("Unknown critical signature subpacket type "+e)})),this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=T.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ra(e,t,r){const i=[];return i.push(Yr(r.length+1)),i.push(new Uint8Array([(t?128:0)|e])),i.push(r),T.concat(i)}function Ma(e){switch(e){case Q.hash.sha256:return 16;case Q.hash.sha384:return 24;case Q.hash.sha512:return 32;case Q.hash.sha224:case Q.hash.sha3_256:return 16;case Q.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Ta{static get tag(){return Q.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new Ta;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ei(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new Pa,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Pa,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),T.concatUint8Array(e)}calculateTrailer(...e){return P((async()=>Qa.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==Q.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!T.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!T.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function La(e,t){if(!t[e]){let t;try{t=Q.read(Q.packet,e)}catch(t){throw new ti("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}Ta.prototype.hash=Qa.prototype.hash,Ta.prototype.toHash=Qa.prototype.toHash,Ta.prototype.toSign=Qa.prototype.toSign;class _a extends Array{static async fromBinary(e,t,r=R){const i=new _a;return await i.read(e,t,r),i}async read(e,t,r=R){r.additionalAllowedPackets.length&&(t={...t,...T.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=E(e,(async(e,i)=>{const n=U(i);try{for(;;){await n.ready;if(await Xr(e,(async e=>{try{if(e.tag===Q.packet.marker||e.tag===Q.packet.trust||e.tag===Q.packet.padding)return;const i=La(e.tag,t);i.packets=new _a,i.fromStream=T.isStream(e.packet),await i.read(e.packet,r),await n.write(i)}catch(t){if(t instanceof ti){if(!(e.tag<=39))return;await n.abort(t)}const i=!r.ignoreUnsupportedPackets&&t instanceof ei,s=!(r.ignoreMalformedPackets||t instanceof ei);if(i||s||$r(e.tag))await n.abort(t);else{const t=new ri(e.tag,e.packet);await n.write(t)}T.printDebugError(t)}})))return await n.ready,void await n.close()}}catch(e){await n.abort(e)}}));const i=D(this.stream);for(;;){const{done:e,value:t}=await i.read();if(e?this.stream=null:this.push(t),e||$r(t.constructor.tag))break}i.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ri?this[t].tag:this[t].constructor.tag,i=this[t].write();if(T.isStream(i)&&$r(this[t].constructor.tag)){let t=[],n=0;const s=512;e.push(Jr(r)),e.push(b(i,(e=>{if(t.push(e),n+=e.length,n>=s){const e=Math.min(Math.log(n)/Math.LN2|0,30),r=2**e,i=T.concat([Zr(e)].concat(t));return t=[i.subarray(1+r)],n=t[0].length,i.subarray(0,1+r)}}),(()=>T.concat([Yr(n)].concat(t)))))}else{if(T.isStream(i)){let t=0;e.push(b(v(i),(e=>{t+=e.length}),(()=>Wr(r,t))))}else e.push(Wr(r,i.length));e.push(i)}}return T.concat(e)}filterByTag(...e){const t=new _a,r=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(r(this[i].constructor.tag))&&t.push(this[i]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,i=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(i(r[n].constructor.tag))&&t.push(n);return t}}const Fa=/*#__PURE__*/T.constructAllowedPackets([Ka,Ta,Qa]);class Na{static get tag(){return Q.packet.compressedData}constructor(e=R){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=R){await k(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),T.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=R){const t=Q.read(Q.compression,this.algorithm),r=qa[t];if(!r)throw Error(t+" decompression not supported");this.packets=await _a.fromBinary(r(this.compressed),Fa,e)}compress(){const e=Q.read(Q.compression,this.algorithm),t=Ga[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function Ha(e,t){return r=>{if(!T.isStream(r)||a(r))return P((()=>C(r).then((e=>new Promise(((r,i)=>{const n=new t;n.ondata=e=>{r(e)};try{n.push(e,!0)}catch(e){i(e)}}))))));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const i=r.getReader(),n=new t;return new ReadableStream({async start(e){for(n.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await i.read();if(e)return void n.push(new Uint8Array,!0);t.length&&n.push(t)}}})}}function Oa(e){return function(t){return P((async()=>e(await C(t))))}}const za=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),Ga={zip:/*#__PURE__*/Ha(za("deflate-raw").compressor,sa),zlib:/*#__PURE__*/Ha(za("deflate").compressor,oa)},qa={uncompressed:e=>e,zip:/*#__PURE__*/Ha(za("deflate-raw").decompressor,aa),zlib:/*#__PURE__*/Ha(za("deflate").decompressor,ca),bzip2:/*#__PURE__*/Oa(Ca)},ja=/*#__PURE__*/T.constructAllowedPackets([Ka,Na,Ta,Qa]);class Va{static get tag(){return Q.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new Va;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await k(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new ei(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?T.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):T.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=R){let i=this.packets.write();if(a(i)&&(i=await C(i)),2===this.version)this.cipherAlgorithm=e,this.salt=cs.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await Ya(this,"encrypt",t,i);else{const{blockSize:n}=cs.getCipherParams(e),s=await cs.getPrefixRandom(e),a=new Uint8Array([211,20]),o=T.concat([s,i,a]),c=await cs.hash.sha1(B(o)),h=T.concat([o,c]);this.encrypted=await cs.mode.cfb.encrypt(e,t,h,new Uint8Array(n),r)}return!0}async decrypt(e,t,r=R){let i,n=v(this.encrypted);if(a(n)&&(n=await C(n)),2===this.version)i=await Ya(this,"decrypt",t,n);else{const{blockSize:s}=cs.getCipherParams(e),a=await cs.mode.cfb.decrypt(e,t,n,new Uint8Array(s)),o=S(B(a),-20),c=S(a,0,-20),h=Promise.all([C(await cs.hash.sha1(B(c))),C(o)]).then((([e,t])=>{if(!T.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),u=S(c,s+2);i=S(u,0,-2),i=d([i,P((()=>h))]),T.isStream(n)&&r.allowUnauthenticatedStream||(i=await C(i))}return this.packets=await _a.fromBinary(i,ja,r),!0}}async function Ya(e,t,r,i){const n=e instanceof Va&&2===e.version,s=!n&&e.constructor.tag===Q.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=cs.getAEADMode(e.aeadAlgorithm),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,h=2**(e.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),y=new Uint8Array(l,0,5+u),f=new Uint8Array(l),g=new DataView(l),p=new Uint8Array(l,5,8);y.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,w,m=0,b=Promise.resolve(),k=0,v=0;if(n){const{keySize:t}=cs.getCipherParams(e.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await Tn(Q.hash.sha256,r,e.salt,n,t+i);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),w=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const B=await a(e.cipherAlgorithm,r);return E(i,(async(r,i)=>{if("array"!==T.isStream(r)){const t=new TransformStream({},{highWaterMark:T.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});A(t.readable,i),i=t.writable}const s=D(r),a=U(i);try{for(;;){let e=await s.readBytes(h+o)||new Uint8Array;const r=e.subarray(e.length-o);let i,l,A;if(e=e.subarray(0,e.length-o),n)A=d;else{A=d.slice();for(let e=0;e<8;e++)A[d.length-8+e]^=p[e]}if(!m||e.length?(s.unshift(r),i=B[t](e,A,y),i.catch((()=>{})),v+=e.length-o+c):(g.setInt32(5+u+4,k),i=B[t](r,A,f),i.catch((()=>{})),v+=c,l=!0),k+=e.length-o,b=b.then((()=>i)).then((async e=>{await a.ready,await a.write(e),v-=e.length})).catch((e=>a.abort(e))),(l||v>a.desiredSize)&&await b,l){await a.close();break}n?w.setInt32(d.length-4,++m):g.setInt32(9,++m)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const Za=/*#__PURE__*/T.constructAllowedPackets([Ka,Na,Ta,Qa]);class Ja{static get tag(){return Q.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=Q.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await k(e,(async e=>{const t=await e.readByte();if(1!==t)throw new ei(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=cs.getAEADMode(this.aeadAlgorithm);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return T.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=R){this.packets=await _a.fromBinary(await Ya(this,"decrypt",t,v(this.encrypted)),Za,r)}async encrypt(e,t,r=R){this.cipherAlgorithm=e;const{ivLength:i}=cs.getAEADMode(this.aeadAlgorithm);this.iv=cs.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await Ya(this,"encrypt",t,n)}}class Wa{static get tag(){return Q.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Pa,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new Wa;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?Pa.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ei(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const i=r-1;this.publicKeyFingerprint=e.subarray(t,t+i),t+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Pa.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=cs.parseEncSessionKeyParams(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===Q.publicKey.x25519||this.publicKeyAlgorithm===Q.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=Q.write(Q.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),cs.serializeParams(this.publicKeyAlgorithm,this.encrypted)),T.concatUint8Array(e)}async encrypt(e){const t=Q.write(Q.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,i=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),n=$a(this.version,t,r,this.sessionKey),s=t===Q.publicKey.aead?e.privateParams:null;this.encrypted=await cs.publicKeyEncrypt(t,r,e.publicParams,s,n,i)}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?$a(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,i=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),n=await cs.publicKeyDecrypt(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,i,r),{sessionKey:s,sessionKeyAlgorithm:a}=function(e,t,r,i){switch(t){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.elgamal:case Q.publicKey.ecdh:case Q.publicKey.aead:{const t=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=T.writeChecksum(t.subarray(t.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(i){const t=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:T.selectUint8Array(t,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===e?null:T.selectUint8(t,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===e||Q.read(Q.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case Q.publicKey.x25519:case Q.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,n,t);3===this.version&&this.publicKeyAlgorithm!==Q.publicKey.x25519&&this.publicKeyAlgorithm!==Q.publicKey.x448&&(this.sessionKeyAlgorithm=a),this.sessionKey=s}}function $a(e,t,r,i){switch(t){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.elgamal:case Q.publicKey.ecdh:case Q.publicKey.aead:return T.concatUint8Array([new Uint8Array(6===e?[]:[r]),i,T.writeChecksum(i.subarray(i.length%8))]);case Q.publicKey.x25519:case Q.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class Xa{static get tag(){return Q.packet.symEncryptedSessionKey}constructor(e=R){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=Q.symmetric.aes256,this.aeadAlgorithm=Q.write(Q.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ei(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const i=e[t++];if(this.s2k=ds(i),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=cs.getAEADMode(this.aeadAlgorithm);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;t=T.concatUint8Array([new Uint8Array([this.version,n,e,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?t=T.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=T.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=T.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=cs.getCipherParams(t),n=await this.s2k.produceKey(e,i);if(this.version>=5){const e=cs.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|Xa.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await Tn(Q.hash.sha256,n,new Uint8Array,r,i):n,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await cs.mode.cfb.decrypt(t,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=Q.write(Q.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length)}else this.sessionKey=n}async encrypt(e,t=R){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=As(t),this.s2k.generateSalt();const{blockSize:i,keySize:n}=cs.getCipherParams(r),s=await this.s2k.produceKey(e,n);if(null===this.sessionKey&&(this.sessionKey=cs.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const e=cs.getAEADMode(this.aeadAlgorithm);this.iv=cs.random.getRandomBytes(e.ivLength);const t=new Uint8Array([192|Xa.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await Tn(Q.hash.sha256,s,new Uint8Array,t,n):s,a=await e(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=T.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await cs.mode.cfb.encrypt(r,s,e,new Uint8Array(i),t)}}}class eo{static get tag(){return Q.packet.publicKey}constructor(e=new Date,t=R){this.version=t.v6Keys?6:4,this.created=T.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new eo,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e,t=R){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new ei("Support for parsing v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4===this.version||5===this.version||6===this.version){this.created=T.readDate(e.subarray(r,r+4)),r+=4,this.algorithm=e[r++],this.version>=5&&(r+=4);const{read:t,publicParams:i}=cs.parsePublicKeyParams(this.algorithm,e.subarray(r));if(6===this.version&&i.oid&&(i.oid.getName()===Q.curve.curve25519Legacy||i.oid.getName()===Q.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,r+=t,await this.computeFingerprintAndKeyID(),r}throw new ei(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(T.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=cs.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&e.push(T.writeNumber(t.length,4)),e.push(t),T.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,i=e>=5?4:2;return T.concatUint8Array([new Uint8Array([r]),T.writeNumber(t.length,i),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Pa,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await cs.hash.sha256(e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await cs.hash.sha1(e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return T.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&T.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=Q.read(Q.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=T.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}eo.prototype.readPublicKey=eo.prototype.read,eo.prototype.writePublicKey=eo.prototype.write;const to=/*#__PURE__*/T.constructAllowedPackets([Ka,Na,Ta,Qa]);class ro{static get tag(){return Q.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=R){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=cs.getCipherParams(e),n=await C(v(this.encrypted)),s=await cs.mode.cfb.decrypt(e,t,n.subarray(i+2),n.subarray(2,i+2));this.packets=await _a.fromBinary(s,to,r)}async encrypt(e,t,r=R){const i=this.packets.write(),{blockSize:n}=cs.getCipherParams(e),s=await cs.getPrefixRandom(e),a=await cs.mode.cfb.encrypt(e,t,s,new Uint8Array(n),r),o=await cs.mode.cfb.encrypt(e,t,i,a.subarray(2),r);this.encrypted=T.concat([a,o])}}class io extends eo{static get tag(){return Q.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new io,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class no{static get tag(){return Q.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=Vr(e.subarray(t,e.length));t+=r.offset,this.attributes.push(T.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(Yr(this.attributes[t].length)),e.push(T.stringToUint8Array(this.attributes[t]));return T.concatUint8Array(e)}equals(e){return!!(e&&e instanceof no)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class so extends eo{static get tag(){return Q.packet.secretKey}constructor(e=new Date,t=R){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=R){let r=await this.readPublicKey(e,t);const i=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=ds(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+cs.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+cs.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(i),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!T.equalsUint8Array(T.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=cs.parsePrivateKeyParams(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof ei)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return T.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=cs.serializeParams(this.algorithm,this.privateParams)),5===this.version&&t.push(T.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(T.writeChecksum(this.keyMaterial))),T.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=R){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=ds(Q.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=Q.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=R){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=As(t),this.s2k.generateSalt();const r=cs.serializeParams(this.algorithm,this.privateParams);this.symmetric=Q.symmetric.aes256;const{blockSize:i}=cs.getCipherParams(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=t.preferredAEADAlgorithm;const n=cs.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const s=Jr(this.constructor.tag),a=await ao(this.version,this.s2k,e,this.symmetric,this.aead,s,this.isLegacyAEAD),o=await n(this.symmetric,a);this.iv=this.isLegacyAEAD?cs.random.getRandomBytes(i):cs.random.getRandomBytes(n.ivLength);const c=this.isLegacyAEAD?new Uint8Array:T.concatUint8Array([s,this.writePublicKey()]);this.keyMaterial=await o.encrypt(r,this.iv.subarray(0,n.ivLength),c)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const n=await ao(this.version,this.s2k,e,this.symmetric);this.iv=cs.random.getRandomBytes(i),this.keyMaterial=await cs.mode.cfb.encrypt(this.symmetric,n,T.concatUint8Array([r,await cs.hash.sha1(r,t)]),this.iv,t)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=Jr(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(t=await ao(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const e=cs.getAEADMode(this.aead),n=await e(this.symmetric,t);try{const t=this.isLegacyAEAD?new Uint8Array:T.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await cs.mode.cfb.decrypt(this.symmetric,t,this.keyMaterial,this.iv);i=e.subarray(0,-20);const r=await cs.hash.sha1(i);if(!T.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=cs.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await cs.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===Q.publicKey.ecdh&&t===Q.curve.curve25519Legacy||this.algorithm===Q.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await cs.generateParams(this.algorithm,e,t,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function ao(e,t,r,i,n,s,a){if("argon2"===t.type&&!n)throw Error("Using Argon2 S2K without AEAD is not allowed");if("simple"===t.type&&6===e)throw Error("Using Simple S2K with version 6 keys is not allowed");const{keySize:o}=cs.getCipherParams(i),c=await t.produceKey(r,o);if(!n||5===e||a)return c;const h=T.concatUint8Array([s,new Uint8Array([e,i,n])]);return Tn(Q.hash.sha256,c,new Uint8Array,h,o)}class oo{static get tag(){return Q.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(T.isString(e)||e.name&&!T.isString(e.name)||e.email&&!T.isEmailAddress(e.email)||e.comment&&!T.isString(e.comment))throw Error("Invalid user ID format");const t=new oo;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=R){const r=T.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:e,comment:t,email:r}=i.groups;this.comment=t?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=e?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return T.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class co extends so{static get tag(){return Q.packet.secretSubkey}constructor(e=new Date,t=R){super(e,t)}}const ho=/*#__PURE__*/T.constructAllowedPackets([Qa]);class uo{constructor(e){this.packets=e||new _a}write(){return this.packets.write()}armor(e=R){const t=this.packets.some((e=>e.constructor.tag===Qa.tag&&6!==e.version));return $(Q.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function lo(e,t){const r=new co(e.date,t);return r.packets=null,r.algorithm=Q.write(Q.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function yo(e,t){const r=new so(e.date,t);return r.packets=null,r.algorithm=Q.write(Q.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function fo(e,t,r,i,n=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,i,n,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw T.wrapError(`Could not find valid ${Q.read(Q.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function go(e,t,r=new Date){const i=T.normalizeDate(r);if(null!==i){const r=bo(e,t);return!(e.created<=i&&i<r)}return!1}async function po(e,t,r,i){const n={};n.key=t,n.bind=e;const s={signatureType:Q.signature.subkeyBinding};r.sign?(s.keyFlags=[Q.keyFlags.signData],s.embeddedSignature=await Ao(n,null,e,{signatureType:Q.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[Q.keyFlags.forwardedCommunication]:[Q.keyFlags.encryptCommunication|Q.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await Ao(n,null,t,s,r.date,void 0,void 0,void 0,i)}async function Ao(e,t,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Qa;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(e,t,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(e){const t=await e.getPrimarySelfSignature(r,i,n);t.preferredHashAlgorithms&&([a]=t.preferredHashAlgorithms,s=cs.hash.getHashByteLength(s)<=cs.hash.getHashByteLength(a)?a:s)}switch(t.algorithm){case Q.publicKey.ecdsa:case Q.publicKey.eddsaLegacy:case Q.publicKey.ed25519:case Q.publicKey.ed448:a=cs.getPreferredCurveHashAlgo(t.algorithm,t.publicParams.oid)}return cs.hash.getHashByteLength(s)<=cs.hash.getHashByteLength(a)?a:s}(t,r,n,s,c),h.rawNotations=[...a],await h.sign(r,e,n,o,c),h}async function wo(e,t,r,i=new Date,n){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(i)||n&&!await n(e)||t[r].some((function(t){return T.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function mo(e,t,r,i,n,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(i.map((async function(e){try{if(!n||e.issuerKeyID.equals(n.issuerKeyID)){const i=![Q.reasonForRevocation.keyRetired,Q.reasonForRevocation.keySuperseded,Q.reasonForRevocation.userIDInvalid].includes(e.reasonForRevocationFlag);await e.verify(s,t,r,i?null:a,!1,o),c.push(e.issuerKeyID)}}catch(e){}}))),n?(n.revoked=!!c.some((e=>e.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function bo(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function Eo(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=T.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"ecc":try{e.curve=Q.write(Q.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==Q.curve.ed25519Legacy&&e.curve!==Q.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?Q.curve.ed25519Legacy:Q.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===Q.curve.ed25519Legacy?Q.publicKey.eddsaLegacy:Q.publicKey.ecdsa:e.algorithm=Q.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?Q.publicKey.ed25519:Q.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?Q.publicKey.ed448:Q.publicKey.x448;break;case"rsa":e.algorithm=Q.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=Q.publicKey.hmac;try{e.symmetric=Q.write(Q.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=Q.publicKey.aead;try{e.symmetric=Q.write(Q.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function ko(e,t,r){switch(e.algorithm){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:case Q.publicKey.dsa:case Q.publicKey.ecdsa:case Q.publicKey.eddsaLegacy:case Q.publicKey.ed25519:case Q.publicKey.ed448:case Q.publicKey.hmac:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&Q.keyFlags.signData);default:return!1}}function vo(e,t,r){switch(e.algorithm){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:case Q.publicKey.elgamal:case Q.publicKey.ecdh:case Q.publicKey.x25519:case Q.publicKey.x448:case Q.publicKey.aead:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&Q.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&Q.keyFlags.encryptStorage);default:return!1}}function Bo(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaEncrypt:case Q.publicKey.elgamal:case Q.publicKey.ecdh:case Q.publicKey.x25519:case Q.publicKey.x448:return!(!(!t.keyFlags||!!(t.keyFlags[0]&Q.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&Q.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&Q.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&Q.keyFlags.forwardedCommunication));default:return!1}}function Io(e,t){const r=Q.write(Q.publicKey,e.algorithm),i=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:case Q.publicKey.rsaEncrypt:if(i.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case Q.publicKey.ecdsa:case Q.publicKey.eddsaLegacy:case Q.publicKey.ecdh:if(t.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class So{constructor(e,t){this.userID=e.constructor.tag===Q.packet.userID?e:null,this.userAttribute=e.constructor.tag===Q.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new _a;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new So(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new So(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return Ao(n,e,s.keyPacket,{signatureType:Q.signature.certGeneric,keyFlags:[Q.keyFlags.certifyKeys|Q.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,i=R){const n=this.mainKey.keyPacket;return mo(n,Q.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,i)}async verifyCertificate(e,t,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,i);if(e.revoked||await n.isRevoked(e,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,Q.signature.certGeneric,a,r,void 0,i)}catch(e){throw T.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(i,Q.signature.certGeneric,n,e,void 0,t)}catch(e){throw T.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await wo(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(i,Q.signature.certGeneric,n,t,!1,r),!0}catch(e){return!1}})),await wo(e,this,"otherCertifications",t),await wo(e,this,"revocationSignatures",t,(function(e){return mo(i,Q.signature.certRevocation,n,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=Q.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=R){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new So(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await Ao(s,null,e,{signatureType:Q.signature.certRevocation,reasonForRevocationFlag:Q.write(Q.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class Co{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new _a;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Co(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,i=R){const n=this.mainKey.keyPacket;return mo(n,Q.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verify(e=new Date,t=R){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await fo(this.bindingSignatures,r,Q.signature.subkeyBinding,i,e,t);if(n.revoked||await this.isRevoked(n,null,e,t))throw Error("Subkey is revoked");if(go(this.keyPacket,n,e))throw Error("Subkey is expired");return n}async getExpirationTime(e=new Date,t=R){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await fo(this.bindingSignatures,r,Q.signature.subkeyBinding,i,e,t)}catch(e){return null}const s=bo(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=R){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===Q.packet.publicSubkey&&e.keyPacket.constructor.tag===Q.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await wo(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<n.bindingSignatures.length;t++)if(n.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>n.bindingSignatures[t].created&&(n.bindingSignatures[t]=e),!1;try{return await e.verify(i,Q.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await wo(e,this,"revocationSignatures",t,(function(e){return mo(i,Q.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=Q.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=R){const s={key:e,bind:this.keyPacket},a=new Co(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await Ao(s,null,e,{signatureType:Q.signature.subkeyRevocation,reasonForRevocationFlag:Q.write(Q.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{Co.prototype[e]=function(){return this.keyPacket[e]()}}));const Ko=/*#__PURE__*/T.constructAllowedPackets([Qa]),Po=new Set([Q.packet.publicKey,Q.packet.privateKey]),Do=new Set([Q.packet.publicKey,Q.packet.privateKey,Q.packet.publicSubkey,Q.packet.privateSubkey]);class Uo{packetListToStructure(e,t=new Set){let r,i,n,s;for(const a of e){if(a instanceof ri){Do.has(a.tag)&&!s&&(s=Po.has(a.tag)?Po:Do);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case Q.packet.publicKey:case Q.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case Q.packet.userID:case Q.packet.userAttribute:r=new So(a,this),this.users.push(r);break;case Q.packet.publicSubkey:case Q.packet.secretSubkey:r=null,n=new Co(a,this),this.subkeys.push(n);break;case Q.packet.signature:switch(a.signatureType){case Q.signature.certGeneric:case Q.signature.certPersona:case Q.signature.certCasual:case Q.signature.certPositive:if(!r){T.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case Q.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case Q.signature.key:this.directSignatures.push(a);break;case Q.signature.subkeyBinding:if(!n){T.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case Q.signature.keyRevocation:this.revocationSignatures.push(a);break;case Q.signature.subkeyRevocation:if(!n){T.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const e=new _a;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},i=R){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{Io(n,i)}catch(e){throw T.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await fo(r.bindingSignatures,n,Q.signature.subkeyBinding,e,t,i);if(!ko(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await fo([s.embeddedSignature],r.keyPacket,Q.signature.keyBinding,e,t,i),Io(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&ko(n,s,i))return Io(n,i),this}catch(e){a=e}throw T.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},i=R){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{Io(n,i)}catch(e){throw T.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await fo(r.bindingSignatures,n,Q.signature.subkeyBinding,e,t,i);if(vo(r.keyPacket,s,i))return Io(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&vo(n,s,i))return Io(n,i),this}catch(e){a=e}throw T.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,i=R){return mo(this.keyPacket,Q.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verifyPrimaryKey(e=new Date,t={},r=R){const i=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(go(i,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==i.version){const t=await fo(this.directSignatures,i,Q.signature.key,{key:i},e,r).catch((()=>{}));if(t&&go(i,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=R){let r;try{const i=await this.getPrimarySelfSignature(null,e,t),n=bo(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await fo(this.directSignatures,this.keyPacket,Q.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=bo(this.keyPacket,a);r=Math.min(n,s,e)}else r=n<s?n:s}catch(e){r=null}return T.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=R){const i=this.keyPacket;if(6===i.version)return fo(this.directSignatures,i,Q.signature.key,{key:i},e,r);const{selfCertification:n}=await this.getPrimaryUser(e,t,r);return n}async getPrimaryUser(e=new Date,t={},r=R){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await fo(s.selfCertifications,i,Q.signature.certGeneric,o,e,r);n.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=n.sort((function(e,t){const r=e.selfCertification,i=t.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=R){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const i=this.clone();return await wo(e,i,"revocationSignatures",t,(n=>mo(i.keyPacket,Q.signature.keyRevocation,i,[n],null,e.keyPacket,t,r))),await wo(e,i,"directSignatures",t),await Promise.all(e.users.map((async e=>{const n=i.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const n=i.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.subkeys.push(t)}}))),i}async getRevocationCertificate(e=new Date,t=R){const r={key:this.keyPacket},i=await fo(this.revocationSignatures,this.keyPacket,Q.signature.keyRevocation,r,e,t),n=new _a;n.push(i);const s=6!==this.keyPacket.version;return $(Q.armor.publicKey,n.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=R){const i=await W(e),n=(await _a.fromBinary(i.data,Ko,r)).findPacket(Q.packet.signature);if(!n||n.signatureType!==Q.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,Q.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw T.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(e,t,r,i=R){const{index:n,user:s}=await this.getPrimaryUser(t,r,i),a=await s.certify(e,t,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(e,t=new Date,r=R){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(e,t,r)}))),i}async verifyPrimaryUser(e,t=new Date,r,i=R){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,i);return e?await s.verifyAllCertifications(e,t,i):[{keyID:n.getKeyID(),valid:await s.verify(t,i).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=R){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:i.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];n.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{Uo.prototype[e]=Co.prototype[e]}));class xo extends Uo{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([Q.packet.secretKey,Q.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=R){const t=6!==this.keyPacket.version;return $(Q.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class Qo extends xo{constructor(e){if(super(),this.packetListToStructure(e,new Set([Q.packet.publicKey,Q.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new _a,t=this.toPacketList();let r=!1;for(const i of t)if(!r||i.constructor.tag!==Q.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case Q.packet.secretKey:{if(i.algorithm===Q.publicKey.aead||i.algorithm===Q.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=eo.fromSecretKeyPacket(i);e.push(t);break}case Q.packet.secretSubkey:{if(i.algorithm===Q.publicKey.aead||i.algorithm===Q.publicKey.hmac){r=!0;break}const t=io.fromSecretSubkeyPacket(i);e.push(t);break}default:e.push(i)}return new xo(e)}armor(e=R){const t=6!==this.keyPacket.version;return $(Q.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},i=R){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0))try{const e={key:n,bind:this.subkeys[r].keyPacket},a=await fo(this.subkeys[r].bindingSignatures,n,Q.signature.subkeyBinding,e,t,i);Bo(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(e){}const a=await this.getPrimarySelfSignature(t,r,i);return e&&!n.getKeyID().equals(e,!0)||!Bo(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=R){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=Q.reasonForRevocation.noReason,string:t=""}={},r=new Date,i=R){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await Ao(n,null,this.keyPacket,{signatureType:Q.signature.keyRevocation,reasonForRevocationFlag:Q.write(Q.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,i)),s}async addSubkey(e={}){const t={...R,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(e){switch(Q.write(Q.publicKey,e)){case Q.publicKey.rsaEncrypt:case Q.publicKey.rsaEncryptSign:case Q.publicKey.rsaSign:case Q.publicKey.dsa:return"rsa";case Q.publicKey.ecdsa:case Q.publicKey.eddsaLegacy:return"ecc";case Q.publicKey.ed25519:return"curve25519";case Q.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",e=Eo(e,i);const n=await lo(e,{...t,v6Keys:6===this.keyPacket.version});Io(n,t);const s=await po(n,r,e,t),a=this.toPacketList();return a.push(n,s),new Qo(a)}}const Ro=/*#__PURE__*/T.constructAllowedPackets([eo,io,so,co,oo,no,Qa]);function Mo(e){for(const t of e)switch(t.constructor.tag){case Q.packet.secretKey:return new Qo(e);case Q.packet.publicKey:return new xo(e)}throw Error("No key packet found")}async function To(e,t,r,i){r.passphrase&&await e.encrypt(r.passphrase,i),await Promise.all(t.map((async function(e,t){const n=r.subkeys[t].passphrase;n&&await e.encrypt(n,i)})));const n=new _a;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[Q.keyFlags.certifyKeys|Q.keyFlags.signData];const n=s([Q.symmetric.aes256,Q.symmetric.aes128],i.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=n,i.aeadProtect){const e=s([Q.aead.gcm,Q.aead.eax,Q.aead.ocb],i.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>n.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([Q.hash.sha256,Q.hash.sha512,...6===e.version?[Q.hash.sha3_256,Q.hash.sha3_512]:[]],i.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([Q.compression.uncompressed,Q.compression.zlib,Q.compression.zip],i.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=Q.features.modificationDetection,i.aeadProtect&&(t.features[0]|=Q.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(n.push(e),6===e.version){const t={key:e},s=a();s.signatureType=Q.signature.key;const o=await Ao(t,null,e,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(t,n){const s=oo.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=Q.signature.certPositive,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await Ao(o,null,e,c,r.date,void 0,void 0,void 0,i)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{n.push(e),n.push(t)}))})),await Promise.all(t.map((async function(t,n){const s=r.subkeys[n];return{secretSubkeyPacket:t,subkeySignaturePacket:await po(t,e,s,i)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{n.push(e),n.push(t)}))}));const o={key:e};return n.push(await Ao(o,null,e,{signatureType:Q.signature.keyRevocation,reasonForRevocationFlag:Q.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new Qo(n)}const Lo=/*#__PURE__*/T.constructAllowedPackets([Ka,Na,Ja,Va,ro,Wa,Xa,Ta,Qa]),_o=/*#__PURE__*/T.constructAllowedPackets([Xa]),Fo=/*#__PURE__*/T.constructAllowedPackets([Qa]);class No{constructor(e){this.packets=e||new _a}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(Q.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(Q.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(Q.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,i=new Date,n=R){const s=this.packets.filterByTag(Q.packet.symmetricallyEncryptedData,Q.packet.symEncryptedIntegrityProtectedData,Q.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!T.isUint8Array(t)||!a.cipherAlgorithm&&!T.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||Q.write(Q.symmetric,e);await a.decrypt(r,t,n)}catch(e){T.printDebugError(e),h=e}})));if(K(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new No(a.packets);return a.packets=new _a,l}async decryptSessionKeys(e,t,r,i=new Date,n=R){let s,a=[];if(t){const e=this.packets.filterByTag(Q.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let i;i=r?await _a.fromBinary(e.write(),_o,n):e,await Promise.all(i.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){T.printDebugError(e),e instanceof hs&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(Q.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o=[Q.symmetric.aes256,Q.symmetric.aes128,Q.symmetric.tripledes,Q.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(i,void 0,n);t.preferredSymmetricAlgorithms&&(o=o.concat(t.preferredSymmetricAlgorithms))}catch(e){}const c=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,n)).map((e=>e.keyPacket));await Promise.all(c.map((async function(e){if(!e||e.isDummy())return;if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===Q.publicKey.rsaEncrypt||t.publicKeyAlgorithm===Q.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===Q.publicKey.rsaSign||t.publicKeyAlgorithm===Q.publicKey.elgamal)){const i=t.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new Wa;r.read(i);const n={sessionKeyAlgorithm:t,sessionKey:cs.generateSessionKey(t)};try{await r.decrypt(e,n),a.push(r)}catch(e){T.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const i=r||t.sessionKeyAlgorithm;if(i&&!o.includes(Q.write(Q.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){T.printDebugError(e),s=e}})))}))),K(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+T.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&Q.read(Q.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(Q.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(Q.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(Q.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],i=R){const{symmetricAlgo:n,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],i=R){const n=await Promise.all(e.map(((e,n)=>e.getPrimarySelfSignature(t,r[n],i))));if(e.length?!i.ignoreSEIPDv2FeatureFlag&&n.every((e=>e.features&&e.features[0]&Q.features.seipdv2)):i.aeadProtect){const e={symmetricAlgo:Q.symmetric.aes128,aeadAlgo:Q.aead.ocb},t={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((e=>e.preferredCipherSuites&&e.preferredCipherSuites.some((e=>e[0]===t.symmetricAlgo&&e[1]===t.aeadAlgo))))?t:e}const s=Q.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,i),a=Q.read(Q.symmetric,n),o=s?Q.read(Q.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===Q.publicKey.x25519||e.keyPacket.algorithm===Q.publicKey.x448)&&!o&&!T.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:cs.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,i=!1,n=[],s=new Date,a=[],o=R){if(r){if(!T.isUint8Array(r.data)||!T.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await No.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await No.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await No.encryptSessionKey(c,h,u,e,t,i,n,s,a,o),y=Va.fromObject({version:u?2:1,aeadAlgorithm:u?Q.write(Q.aead,u):null});y.packets=this.packets;const f=Q.write(Q.symmetric,h);return await y.encrypt(f,c,o),l.packets.push(y),y.packets=new _a,l}static async encryptSessionKey(e,t,r,i,n,s=!1,a=[],o=new Date,c=[],h=R){const u=new _a,l=Q.write(Q.symmetric,t),y=r&&Q.write(Q.aead,r);if(i){const t=await Promise.all(i.map((async function(t,r){const i=await t.getEncryptionKey(a[r],o,c,h),n=Wa.fromObject({version:y?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...t)}if(n){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,i=async function(e,s,a,o){const c=new Xa(h);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((e=>t(c,e))))).reduce(r))return i(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((t=>i(e,l,y,t))));u.push(...s)}return new No(u)}async sign(e=[],t=null,r=[],i=new Date,n=[],s=[],a=R){const o=new _a,c=this.packets.findPacket(Q.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await Ho(c,e,t,r,i,n,s,!1,a),u=h.map(((e,t)=>Ta.fromSignaturePacket(e,0===t))).reverse();return o.push(...u),o.push(c),o.push(...h),new No(o)}compress(e,t=R){if(e===Q.compression.uncompressed)return this;const r=new Na(t);r.algorithm=e,r.packets=this.packets;const i=new _a;return i.push(r),new No(i)}async signDetached(e=[],t=null,r=[],i=new Date,n=[],s=[],a=R){const o=this.packets.findPacket(Q.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new uo(await Ho(o,e,t,r,i,n,s,!0,a))}async verify(e,t=new Date,r=R){const i=this.unwrapCompressed(),n=i.packets.filterByTag(Q.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");a(i.packets.stream)&&i.packets.push(...await C(i.packets.stream,(e=>e||[])));const s=i.packets.filterByTag(Q.packet.onePassSignature).reverse(),o=i.packets.filterByTag(Q.packet.signature);return s.length&&!o.length&&T.isStream(i.packets.stream)&&!a(i.packets.stream)?(await Promise.all(s.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=P((async()=>(await e.correspondingSig).signatureData)),e.hashed=C(await e.hash(e.signatureType,n[0],void 0,!1)),e.hashed.catch((()=>{}))}))),i.packets.stream=E(i.packets.stream,(async(e,t)=>{const r=D(e),i=U(t);try{for(let e=0;e<s.length;e++){const{value:t}=await r.read();s[e].correspondingSigResolve(t)}await r.readToEnd(),await i.ready,await i.close()}catch(e){s.forEach((t=>{t.correspondingSigReject(e)})),await i.abort(e)}})),Oo(s,n,e,t,!1,r)):Oo(o,n,e,t,!1,r)}verifyDetached(e,t,r=new Date,i=R){const n=this.unwrapCompressed().packets.filterByTag(Q.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return Oo(e.packets.filterByTag(Q.packet.signature),n,t,r,!0,i)}unwrapCompressed(){const e=this.packets.filterByTag(Q.packet.compressedData);return e.length?new No(e[0].packets):this}async appendSignature(e,t=R){await this.packets.read(T.isUint8Array(e)?e:(await W(e)).data,Fo,t)}write(){return this.packets.write()}armor(e=R){const t=this.packets[this.packets.length-1],r=t.constructor.tag===Va.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===Qa.tag&&6!==e.version));return $(Q.armor.message,this.write(),null,null,null,r,e)}}async function Ho(e,t,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=R){const h=new _a,u=null===e.text?Q.signature.binary:Q.signature.text;if(await Promise.all(t.map((async(t,r)=>{const h=s[r];if(!t.isPrivate())throw Error("Need private key for signing");const l=await t.getSigningKey(i[r],n,h,c);return Ao(e,t,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((e=>{h.push(...e)})),r){const e=r.packets.filterByTag(Q.packet.signature);h.push(...e)}return h}async function Oo(e,t,r,i=new Date,n=!1,s=R){return Promise.all(e.filter((function(e){return["text","binary"].includes(Q.read(Q.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,i=new Date,n=!1,s=R){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof Ta?e.correspondingSig:e,h={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new _a;return e&&t.push(e),new uo(t)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(e,t,r,i,n,s)})))}const zo=/*#__PURE__*/T.constructAllowedPackets([Qa]);class Go{constructor(e,t){if(this.text=T.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof uo))throw Error("Invalid signature input");this.signature=t||new uo(new _a)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=null,r=[],i=new Date,n=[],s=[],a=R){const o=new Ka;o.setText(this.text);const c=new uo(await Ho(o,e,t,r,i,n,s,!0,a));return new Go(this.text,c)}verify(e,t=new Date,r=R){const i=this.signature.packets.filterByTag(Q.packet.signature),n=new Ka;return n.setText(this.text),Oo(i,[n],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=R){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>Q.read(Q.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return $(Q.armor.signed,r,void 0,void 0,void 0,t,e)}}function qo(e){if(!(e instanceof No))throw Error("Parameter [message] needs to be of type Message")}function jo(e){if(!(e instanceof Go||e instanceof No))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function Vo(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const Yo=Object.keys(R).length;function Zo(e){const t=Object.keys(e);if(t.length!==Yo)for(const e of t)if(void 0===R[e])throw Error("Unknown config property: "+e)}function Jo(e){return e&&!T.isArray(e)&&(e=[e]),e}async function Wo(e){return"array"===T.isStream(e)?C(e):e}function $o(e,t){e.data=E(t.packets.stream,(async(t,r)=>{await A(e.data,r,{preventClose:!0});const i=U(r);try{await C(t,(e=>e)),await i.close()}catch(e){await i.abort(e)}}))}function Xo(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}function ec(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, not "+e)}function tc(e,...t){if(!((r=e)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function rc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function ic(e,t){tc(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const nc="object"==typeof t&&"crypto"in t?t.crypto:void 0,sc=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),ac=(e,t)=>e<<32-t|e>>>t,oc=(e,t)=>e<<t|e>>>32-t>>>0,cc=68===new Uint8Array(new Uint32Array([287454020]).buffer)[0];
-/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function hc(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function uc(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}function lc(e){return"string"==typeof e&&(e=uc(e)),tc(e),e}function yc(...e){let t=0;for(let r=0;r<e.length;r++){const i=e[r];tc(i),t+=i.length}const r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}class fc{clone(){return this._cloneInto()}}function gc(e){const t=t=>e().update(lc(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function pc(e=32){if(nc&&"function"==typeof nc.getRandomValues)return nc.getRandomValues(new Uint8Array(e));throw Error("crypto.getRandomValues must be defined")}class dc extends fc{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,function(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.wrapConstructor");ec(e.outputLen),ec(e.blockLen)}(e);const r=lc(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const i=this.blockLen,n=new Uint8Array(i);n.set(r.length>i?e.create().update(r).digest():r);for(let e=0;e<n.length;e++)n[e]^=54;this.iHash.update(n),this.oHash=e.create();for(let e=0;e<n.length;e++)n[e]^=106;this.oHash.update(n),n.fill(0)}update(e){return rc(this),this.iHash.update(e),this}digestInto(e){rc(this),tc(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:s,outputLen:a}=this;return e.finished=i,e.destroyed=n,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const Ac=(e,t,r)=>new dc(e,t).update(r).digest();Ac.create=(e,t)=>new dc(e,t)
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */;const wc=BigInt(0),mc=BigInt(1),bc=BigInt(2);function Ec(e){return e instanceof Uint8Array||null!=e&&"object"==typeof e&&"Uint8Array"===e.constructor.name}function kc(e){if(!Ec(e))throw Error("Uint8Array expected")}const vc=/* @__PURE__ */Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function Bc(e){kc(e);let t="";for(let r=0;r<e.length;r++)t+=vc[e[r]];return t}function Ic(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function Sc(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return BigInt(""===e?"0":"0x"+e)}const Cc={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function Kc(e){return e>=Cc._0&&e<=Cc._9?e-Cc._0:e>=Cc._A&&e<=Cc._F?e-(Cc._A-10):e>=Cc._a&&e<=Cc._f?e-(Cc._a-10):void 0}function Pc(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);const t=e.length,r=t/2;if(t%2)throw Error("padded hex string expected, got unpadded hex of length "+t);const i=new Uint8Array(r);for(let t=0,n=0;t<r;t++,n+=2){const r=Kc(e.charCodeAt(n)),s=Kc(e.charCodeAt(n+1));if(void 0===r||void 0===s){const t=e[n]+e[n+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+n)}i[t]=16*r+s}return i}function Dc(e){return Sc(Bc(e))}function Uc(e){return kc(e),Sc(Bc(Uint8Array.from(e).reverse()))}function xc(e,t){return Pc(e.toString(16).padStart(2*t,"0"))}function Qc(e,t){return xc(e,t).reverse()}function Rc(e,t,r){let i;if("string"==typeof t)try{i=Pc(t)}catch(r){throw Error(`${e} must be valid hex string, got "${t}". Cause: ${r}`)}else{if(!Ec(t))throw Error(e+" must be hex string or Uint8Array");i=Uint8Array.from(t)}const n=i.length;if("number"==typeof r&&n!==r)throw Error(`${e} expected ${r} bytes, got ${n}`);return i}function Mc(...e){let t=0;for(let r=0;r<e.length;r++){const i=e[r];kc(i),t+=i.length}const r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}const Tc=e=>(bc<<BigInt(e-1))-mc,Lc=e=>new Uint8Array(e),_c=e=>Uint8Array.from(e);function Fc(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let i=Lc(e),n=Lc(e),s=0;const a=()=>{i.fill(1),n.fill(0),s=0},o=(...e)=>r(n,i,...e),c=(e=Lc())=>{n=o(_c([0]),e),i=o(),0!==e.length&&(n=o(_c([1]),e),i=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){i=o();const t=i.slice();r.push(t),e+=i.length}return Mc(...r)};return(e,t)=>{let r;for(a(),c(e);!(r=t(h()));)c();return a(),r}}const Nc={bigint:e=>"bigint"==typeof e,function:e=>"function"==typeof e,boolean:e=>"boolean"==typeof e,string:e=>"string"==typeof e,stringOrUint8Array:e=>"string"==typeof e||Ec(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>"function"==typeof e&&Number.isSafeInteger(e.outputLen)};function Hc(e,t,r={}){const i=(t,r,i)=>{const n=Nc[r];if("function"!=typeof n)throw Error(`Invalid validator "${r}", expected function`);const s=e[t];if(!(i&&void 0===s||n(s,e)))throw Error(`Invalid param ${t+""}=${s} (${typeof s}), expected ${r}`)};for(const[e,r]of Object.entries(t))i(e,r,!1);for(const[e,t]of Object.entries(r))i(e,t,!0);return e}var Oc=/*#__PURE__*/Object.freeze({__proto__:null,abytes:kc,bitGet:function(e,t){return e>>BigInt(t)&mc},bitLen:function(e){let t;for(t=0;e>wc;e>>=mc,t+=1);return t},bitMask:Tc,bitSet:function(e,t,r){return e|(r?mc:wc)<<BigInt(t)},bytesToHex:Bc,bytesToNumberBE:Dc,bytesToNumberLE:Uc,concatBytes:Mc,createHmacDrbg:Fc,ensureBytes:Rc,equalBytes:function(e,t){if(e.length!==t.length)return!1;let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return 0===r},hexToBytes:Pc,hexToNumber:Sc,isBytes:Ec,numberToBytesBE:xc,numberToBytesLE:Qc,numberToHexUnpadded:Ic,numberToVarBytesBE:function(e){return Pc(Ic(e))},utf8ToBytes:function(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))},validateObject:Hc});
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const zc=BigInt(0),Gc=BigInt(1),qc=BigInt(2),jc=BigInt(3),Vc=BigInt(4),Yc=BigInt(5),Zc=BigInt(8);function Jc(e,t){const r=e%t;return r>=zc?r:t+r}function Wc(e,t,r){if(r<=zc||t<zc)throw Error("Expected power/modulo > 0");if(r===Gc)return zc;let i=Gc;for(;t>zc;)t&Gc&&(i=i*e%r),e=e*e%r,t>>=Gc;return i}function $c(e,t,r){let i=e;for(;t-- >zc;)i*=i,i%=r;return i}function Xc(e,t){if(e===zc||t<=zc)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=Jc(e,t),i=t,n=zc,s=Gc;for(;r!==zc;){const e=i%r,t=n-s*(i/r);i=r,r=e,n=s,s=t}if(i!==Gc)throw Error("invert: does not exist");return Jc(n,t)}function eh(e){if(e%Vc===jc){const t=(e+Gc)/Vc;return function(e,r){const i=e.pow(r,t);if(!e.eql(e.sqr(i),r))throw Error("Cannot find square root");return i}}if(e%Zc===Yc){const t=(e-Yc)/Zc;return function(e,r){const i=e.mul(r,qc),n=e.pow(i,t),s=e.mul(r,n),a=e.mul(e.mul(s,qc),n),o=e.mul(s,e.sub(a,e.ONE));if(!e.eql(e.sqr(o),r))throw Error("Cannot find square root");return o}}return function(e){const t=(e-Gc)/qc;let r,i,n;for(r=e-Gc,i=0;r%qc===zc;r/=qc,i++);for(n=qc;n<e&&Wc(n,t,e)!==e-Gc;n++);if(1===i){const t=(e+Gc)/Vc;return function(e,r){const i=e.pow(r,t);if(!e.eql(e.sqr(i),r))throw Error("Cannot find square root");return i}}const s=(r+Gc)/qc;return function(e,a){if(e.pow(a,t)===e.neg(e.ONE))throw Error("Cannot find square root");let o=i,c=e.pow(e.mul(e.ONE,n),r),h=e.pow(a,s),u=e.pow(a,r);for(;!e.eql(u,e.ONE);){if(e.eql(u,e.ZERO))return e.ZERO;let t=1;for(let r=e.sqr(u);t<o&&!e.eql(r,e.ONE);t++)r=e.sqr(r);const r=e.pow(c,Gc<<BigInt(o-t-1));c=e.sqr(r),h=e.mul(h,r),u=e.mul(u,c),o=t}return h}}(e)}BigInt(9),BigInt(16);const th=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function rh(e,t){const r=void 0!==t?t:e.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function ih(e,t,r=!1,i={}){if(e<=zc)throw Error("Expected Field ORDER > 0, got "+e);const{nBitLength:n,nByteLength:s}=rh(e,t);if(s>2048)throw Error("Field lengths over 2048 bytes are not supported");const a=eh(e),o=Object.freeze({ORDER:e,BITS:n,BYTES:s,MASK:Tc(n),ZERO:zc,ONE:Gc,create:t=>Jc(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("Invalid field element: expected bigint, got "+typeof t);return zc<=t&&t<e},is0:e=>e===zc,isOdd:e=>(e&Gc)===Gc,neg:t=>Jc(-t,e),eql:(e,t)=>e===t,sqr:t=>Jc(t*t,e),add:(t,r)=>Jc(t+r,e),sub:(t,r)=>Jc(t-r,e),mul:(t,r)=>Jc(t*r,e),pow:(e,t)=>function(e,t,r){if(r<zc)throw Error("Expected power > 0");if(r===zc)return e.ONE;if(r===Gc)return t;let i=e.ONE,n=t;for(;r>zc;)r&Gc&&(i=e.mul(i,n)),n=e.sqr(n),r>>=Gc;return i}(o,e,t),div:(t,r)=>Jc(t*Xc(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>Xc(t,e),sqrt:i.sqrt||(e=>a(o,e)),invertBatch:e=>function(e,t){const r=Array(t.length),i=t.reduce(((t,i,n)=>e.is0(i)?t:(r[n]=t,e.mul(t,i))),e.ONE),n=e.inv(i);return t.reduceRight(((t,i,n)=>e.is0(i)?t:(r[n]=e.mul(t,r[n]),e.mul(t,i))),n),r}(o,e),cmov:(e,t,r)=>r?t:e,toBytes:e=>r?Qc(e,s):xc(e,s),fromBytes:e=>{if(e.length!==s)throw Error(`Fp.fromBytes: expected ${s}, got ${e.length}`);return r?Uc(e):Dc(e)}});return Object.freeze(o)}function nh(e){if("bigint"!=typeof e)throw Error("field order must be bigint");const t=e.toString(2).length;return Math.ceil(t/8)}function sh(e){const t=nh(e);return t+Math.ceil(t/2)}
+/*! OpenPGP.js v6.0.0-beta.3.patch.0 - 2024-09-09 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
+var openpgp=function(e){"use strict";const t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},r=Symbol("doneWritingPromise"),n=Symbol("doneWritingResolve"),i=Symbol("doneWritingReject"),s=Symbol("readingIndex");class a extends Array{constructor(){super(),Object.setPrototypeOf(this,a.prototype),this[r]=new Promise(((e,t)=>{this[n]=e,this[i]=t})),this[r].catch((()=>{}))}}function o(e){return e&&e.getReader&&Array.isArray(e)}function c(e){if(!o(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function h(e){if(o(e))return"array";if(t.ReadableStream&&t.ReadableStream.prototype.isPrototypeOf(e))return"web";if(e&&!(t.ReadableStream&&e instanceof t.ReadableStream)&&"function"==typeof e._read&&"object"==typeof e._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!e||!e.getReader)&&"web-like"}function u(e){return Uint8Array.prototype.isPrototypeOf(e)}function l(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!u(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach((function(e){r.set(e,n),n+=e.length})),r}a.prototype.getReader=function(){return void 0===this[s]&&(this[s]=0),{read:async()=>(await this[r],this[s]===this.length?{value:void 0,done:!0}:{value:this[this[s]++],done:!1})}},a.prototype.readToEnd=async function(e){await this[r];const t=e(this.slice(this[s]));return this.length=0,t},a.prototype.clone=function(){const e=new a;return e[r]=this[r].then((()=>{e.push(...this)})),e},c.prototype.write=async function(e){this.stream.push(e)},c.prototype.close=async function(){this.stream[n]()},c.prototype.abort=async function(e){return this.stream[i](e),e},c.prototype.releaseLock=function(){},"object"==typeof t.process&&t.process.versions;const y=new WeakSet,f=Symbol("externalBuffer");function g(e){if(this.stream=e,e[f]&&(this[f]=e[f].slice()),o(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(h(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||y.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{y.add(e)}catch(e){}}}function p(e){return h(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function d(e){if(h(e))return e;const t=new a;return(async()=>{const r=x(t);await r.write(e),await r.close()})(),t}function A(e){return e.some((e=>h(e)&&!o(e)))?function(e){e=e.map(p);const t=b((async function(e){await Promise.all(n.map((t=>P(t,e))))}));let r=Promise.resolve();const n=e.map(((n,i)=>k(n,((n,s)=>(r=r.then((()=>w(n,t.writable,{preventClose:i!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>o(e)))?function(e){const t=new a;let r=Promise.resolve();return e.forEach(((n,i)=>(r=r.then((()=>w(n,t,{preventClose:i!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):l(e)}async function w(e,t,{preventClose:r=!1,preventAbort:n=!1,preventCancel:i=!1}={}){if(h(e)&&!o(e)){e=p(e);try{if(e[f]){const r=x(t);for(let t=0;t<e[f].length;t++)await r.ready,await r.write(e[f][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:n,preventCancel:i})}catch(e){}return}const s=D(e=d(e)),a=x(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){n||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function m(e,t){const r=new TransformStream(t);return w(e,r.writable),r.readable}function b(e){let t,r,n,i=!1,s=!1;return{readable:new ReadableStream({start(e){n=e},pull(){t?t():i=!0},async cancel(t){s=!0,e&&await e(t),r&&r(t)}},{highWaterMark:0}),writable:new WritableStream({write:async function(e){if(s)throw Error("Stream is cancelled");n.enqueue(e),i?i=!1:(await new Promise(((e,n)=>{t=e,r=n})),t=null,r=null)},close:n.close.bind(n),abort:n.error.bind(n)})}}function E(e,t=()=>{},r=()=>{}){if(o(e)){const n=new a;return(async()=>{const i=x(n);try{const n=await C(e),s=t(n),a=r();let o;o=void 0!==s&&void 0!==a?A([s,a]):void 0!==s?s:a,await i.write(o),await i.close()}catch(e){await i.abort(e)}})(),n}if(h(e))return m(e,{async transform(e,r){try{const n=await t(e);void 0!==n&&r.enqueue(n)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const n=t(e),i=r();return void 0!==n&&void 0!==i?A([n,i]):void 0!==n?n:i}function k(e,t){if(h(e)&&!o(e)){let r;const n=new TransformStream({start(e){r=e}}),i=w(e,n.writable),s=b((async function(e){r.error(e),await i,await new Promise(setTimeout)}));return t(n.readable,s.writable),s.readable}e=d(e);const r=new a;return t(e,r),r}function v(e,t){let r;const n=k(e,((e,i)=>{const s=D(e);s.remainder=()=>(s.releaseLock(),w(e,i),n),r=t(s)}));return r}function B(e){if(o(e))return e.clone();if(h(e)){const t=function(e){if(o(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(h(e)){const t=p(e).tee();return t[0][f]=t[1][f]=e[f],t}return[K(e),K(e)]}(e);return S(e,t[0]),t[1]}return K(e)}function I(e){return o(e)?B(e):h(e)?new ReadableStream({start(t){const r=k(e,(async(e,r)=>{const n=D(e),i=x(r);try{for(;;){await i.ready;const{done:e,value:r}=await n.read();if(e){try{t.close()}catch(e){}return void await i.close()}try{t.enqueue(r)}catch(e){}await i.write(r)}}catch(e){t.error(e),await i.abort(e)}}));S(e,r)}}):K(e)}function S(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,n])=>{"constructor"!==r&&(n.value?n.value=n.value.bind(t):n.get=n.get.bind(t),Object.defineProperty(e,r,n))}))}function K(e,t=0,r=1/0){if(o(e))throw Error("Not implemented");if(h(e)){if(t>=0&&r>=0){let n=0;return m(e,{transform(e,i){n<r?(n+e.length>=t&&i.enqueue(K(e,Math.max(t-n,0),r-n)),n+=e.length):i.terminate()}})}if(t<0&&(r<0||r===1/0)){let n=[];return E(e,(e=>{e.length>=-t?n=[e]:n.push(e)}),(()=>K(A(n),t,r)))}if(0===t&&r<0){let n;return E(e,(e=>{const i=n?A([n,e]):e;if(i.length>=-r)return n=K(i,r),K(i,t,r);n=i}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),U((async()=>K(await C(e),t,r)))}return e[f]&&(e=A(e[f].concat([e]))),u(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function C(e,t=A){return o(e)?e.readToEnd(t):h(e)?D(e).readToEnd(t):e}async function P(e,t){if(h(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function U(e){const t=new a;return(async()=>{const r=x(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function D(e){return new g(e)}function x(e){return new c(e)}g.prototype.read=async function(){if(this[f]&&this[f].length){return{done:!1,value:this[f].shift()}}return this._read()},g.prototype.releaseLock=function(){this[f]&&(this.stream[f]=this[f]),this._releaseLock()},g.prototype.cancel=function(e){return this._cancel(e)},g.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:n}=await this.read();if(n+="",r)return t.length?A(t):void 0;const i=n.indexOf("\n")+1;i&&(e=A(t.concat(n.substr(0,i))),t=[]),i!==n.length&&t.push(n.substr(i))}return this.unshift(...t),e},g.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(K(t,1)),r},g.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:n,value:i}=await this.read();if(n)return t.length?A(t):void 0;if(t.push(i),r+=i.length,r>=e){const r=A(t);return this.unshift(K(r,e)),K(r,0,e)}}},g.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},g.prototype.unshift=function(...e){this[f]||(this[f]=[]),1===e.length&&u(e[0])&&this[f].length&&e[0].length&&this[f][0].byteOffset>=e[0].length?this[f][0]=new Uint8Array(this[f][0].buffer,this[f][0].byteOffset-e[0].length,this[f][0].byteLength+e[0].length):this[f].unshift(...e.filter((e=>e&&e.length)))},g.prototype.readToEnd=async function(e=A){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const Q=Symbol("byValue");var R={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[Q]||(e[Q]=[],Object.entries(e).forEach((([t,r])=>{e[Q][r]=t}))),void 0!==e[Q][t])return e[Q][t];throw Error("Invalid enum value.")}},M={preferredHashAlgorithm:R.hash.sha256,preferredSymmetricAlgorithm:R.symmetric.aes256,preferredCompressionAlgorithm:R.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:R.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,enableParsingV5Entities:!1,s2kType:R.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([R.symmetric.aes128,R.symmetric.aes192,R.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.3.patch.0",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([R.hash.md5,R.hash.ripemd]),rejectMessageHashAlgorithms:new Set([R.hash.md5,R.hash.ripemd,R.hash.sha1]),rejectPublicKeyAlgorithms:new Set([R.publicKey.elgamal,R.publicKey.dsa]),rejectCurves:new Set([R.curve.secp256k1])};const L=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),T={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:()=>{},isArray:function(e){return e instanceof Array},isUint8Array:u,isStream:h,getNobleCurve:async(e,t)=>{if(!M.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return yy}));switch(e){case R.publicKey.ecdh:case R.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case R.publicKey.x448:return r.get("x448");case R.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let n=0;n<t;n++)r[n]=e>>8*(t-n-1)&255;return r},readDate:function(e){const t=T.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return T.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return T.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){const r=new Uint8Array(t),n=t-e.length;return r.set(e,n),r},uint8ArrayToMPI:function(e){const t=T.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),n=new Uint8Array([(65280&t)>>8,255&t]);return T.concatUint8Array([n,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+T.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return E(e,(e=>{if(!T.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,n=(e=new Uint8Array(e)).length;for(let i=0;i<n;i+=r)t.push(String.fromCharCode.apply(String,e.subarray(i,i+r<n?i+r:n)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return E(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return E(e,r,(()=>r(new Uint8Array,!0)))},concat:A,concatUint8Array:l,equalsUint8Array:function(e,t){if(!T.isUint8Array(e)||!T.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return T.writeNumber(t,2)},printDebug:function(e){L&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){L&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let n=0;n<r;n++)t[n]=e[n]<<1^e[n+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const e=void 0!==t&&t.crypto&&t.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!e)throw Error("The WebCrypto API is not available");return e},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!T.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return E(e,(e=>{let r;t&&(e=T.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const n=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&n.push(r);if(!n.length)return e;const i=new Uint8Array(e.length+n.length);let s=0;for(let t=0;t<n.length;t++){const r=e.subarray(n[t-1]||0,n[t]);i.set(r,s),s+=r.length,i[s-1]=13,i[s]=10,s++}return i.set(e.subarray(n[n.length-1]||0),s),i}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return E(e,(e=>{let r;13===(e=t&&10!==e[0]?T.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let n=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const i=r-(10===e[r]?1:0);t&&e.copyWithin(n,t,i),n+=i-t}return e.subarray(0,n)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return Error(e);try{t.message=e+": "+t.message}catch(e){}return t},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let n;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){n=e}}))),r(n)}))},selectUint8Array:function(e,t,r){const n=Math.max(t.length,r.length),i=new Uint8Array(n);let s=0;for(let n=0;n<i.length;n++)i[n]=t[n]&256-e|r[n]&255+e,s+=e&n<t.length|1-e&n<r.length;return i.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===R.symmetric.aes128||e===R.symmetric.aes192||e===R.symmetric.aes256}},F=T.getNodeBuffer();let N,H;function O(e){let t=new Uint8Array;return E(e,(e=>{t=T.concatUint8Array([t,e]);const r=[],n=Math.floor(t.length/45),i=45*n,s=N(t.subarray(0,i));for(let e=0;e<n;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(i),r.join("")}),(()=>t.length?N(t)+"\n":""))}function z(e){let t="";return E(e,(e=>{t+=e;let r=0;const n=[" ","\t","\r","\n"];for(let e=0;e<n.length;e++){const i=n[e];for(let e=t.indexOf(i);-1!==e;e=t.indexOf(i,e+1))r++}let i=t.length;for(;i>0&&(i-r)%4!=0;i--)n.includes(t[i])&&r--;const s=H(t.substr(0,i));return t=t.substr(i),s}),(()=>H(t)))}function _(e){return z(e.replace(/-/g,"+").replace(/_/g,"/"))}function G(e,t){let r=O(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function j(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?R.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?R.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?R.armor.signed:/MESSAGE/.test(t[1])?R.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?R.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?R.armor.privateKey:/SIGNATURE/.test(t[1])?R.armor.signature:void 0}function q(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function V(e){const t=function(e){let t=13501623;return E(e,(e=>{const r=Z?Math.floor(e.length/4):0,n=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=n[e],t=W[0][t>>24&255]^W[1][t>>16&255]^W[2][t>>8&255]^W[3][255&t];for(let n=4*r;n<e.length;n++)t=t>>8^W[0][255&t^e[n]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return O(t)}F?(N=e=>F.from(e).toString("base64"),H=e=>{const t=F.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(N=e=>btoa(T.uint8ArrayToString(e)),H=e=>T.stringToUint8Array(atob(e)));const W=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);W[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)W[1][e]=W[0][e]>>8^W[0][255&W[0][e]];for(let e=0;e<=255;e++)W[2][e]=W[1][e]>>8^W[0][255&W[1][e]];for(let e=0;e<=255;e++)W[3][e]=W[2][e]>>8^W[0][255&W[2][e]];const Z=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function Y(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||T.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||T.printDebugError(Error("Unknown header: "+e[t]))}function J(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function $(e){return new Promise((async(t,r)=>{try{const n=/^-----[^-]+-----$/m,i=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=z(k(e,(async(e,y)=>{const f=D(e);try{for(;;){let e=await f.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=T.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==R.armor.signed||(n.test(e)?(u=u.join("\r\n"),c=!0,Y(h),h=[],o=!1):u.push(e.replace(/^- /,"")));else if(n.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),i.test(e)){if(Y(h),o=!0,c||s!==R.armor.signed){t({text:u,data:l,headers:a,type:s});break}}else h.push(e);else n.test(e)&&(s=j(e))}}catch(e){return void r(e)}const g=x(y);try{for(;;){await g.ready;const{done:e,value:t}=await f.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await f.readToEnd();e.length||(e=""),e=r+e,e=T.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(n);if(1===t.length)throw Error("Misformed armored text");const i=J(t[0].slice(0,-1));await g.write(i);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}})))}catch(e){r(e)}})).then((async e=>(o(e.data)&&(e.data=await C(e.data)),e)))}function X(e,t,r,n,i,s=!1,a=M){let o,c;e===R.armor.signed&&(o=t.text,c=t.hash,t=t.data);const h=s&&I(t),u=[];switch(e){case R.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+n+"-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+n+"-----\n");break;case R.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case R.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP SIGNATURE-----\n");break;case R.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP MESSAGE-----\n");break;case R.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case R.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case R.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push(q(i,a)),u.push(O(t)),h&&u.push("=",V(h)),u.push("-----END PGP SIGNATURE-----\n")}return T.concat(u)}async function ee(e){switch(e){case R.symmetric.aes128:case R.symmetric.aes192:case R.symmetric.aes256:throw Error("Not a legacy cipher");case R.symmetric.cast5:case R.symmetric.blowfish:case R.symmetric.twofish:case R.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return Ky})),r=t.get(e);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function te(e){switch(e){case R.symmetric.aes128:case R.symmetric.aes192:case R.symmetric.aes256:case R.symmetric.twofish:return 16;case R.symmetric.blowfish:case R.symmetric.cast5:case R.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function re(e){switch(e){case R.symmetric.aes128:case R.symmetric.blowfish:case R.symmetric.cast5:return 16;case R.symmetric.aes192:case R.symmetric.tripledes:return 24;case R.symmetric.aes256:case R.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function ne(e){return{keySize:re(e),blockSize:te(e)}}var ie=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:ne,getLegacyCipher:ee});function se(e,t){let r=e[0],n=e[1],i=e[2],s=e[3];r=oe(r,n,i,s,t[0],7,-680876936),s=oe(s,r,n,i,t[1],12,-389564586),i=oe(i,s,r,n,t[2],17,606105819),n=oe(n,i,s,r,t[3],22,-1044525330),r=oe(r,n,i,s,t[4],7,-176418897),s=oe(s,r,n,i,t[5],12,1200080426),i=oe(i,s,r,n,t[6],17,-1473231341),n=oe(n,i,s,r,t[7],22,-45705983),r=oe(r,n,i,s,t[8],7,1770035416),s=oe(s,r,n,i,t[9],12,-1958414417),i=oe(i,s,r,n,t[10],17,-42063),n=oe(n,i,s,r,t[11],22,-1990404162),r=oe(r,n,i,s,t[12],7,1804603682),s=oe(s,r,n,i,t[13],12,-40341101),i=oe(i,s,r,n,t[14],17,-1502002290),n=oe(n,i,s,r,t[15],22,1236535329),r=ce(r,n,i,s,t[1],5,-165796510),s=ce(s,r,n,i,t[6],9,-1069501632),i=ce(i,s,r,n,t[11],14,643717713),n=ce(n,i,s,r,t[0],20,-373897302),r=ce(r,n,i,s,t[5],5,-701558691),s=ce(s,r,n,i,t[10],9,38016083),i=ce(i,s,r,n,t[15],14,-660478335),n=ce(n,i,s,r,t[4],20,-405537848),r=ce(r,n,i,s,t[9],5,568446438),s=ce(s,r,n,i,t[14],9,-1019803690),i=ce(i,s,r,n,t[3],14,-187363961),n=ce(n,i,s,r,t[8],20,1163531501),r=ce(r,n,i,s,t[13],5,-1444681467),s=ce(s,r,n,i,t[2],9,-51403784),i=ce(i,s,r,n,t[7],14,1735328473),n=ce(n,i,s,r,t[12],20,-1926607734),r=he(r,n,i,s,t[5],4,-378558),s=he(s,r,n,i,t[8],11,-2022574463),i=he(i,s,r,n,t[11],16,1839030562),n=he(n,i,s,r,t[14],23,-35309556),r=he(r,n,i,s,t[1],4,-1530992060),s=he(s,r,n,i,t[4],11,1272893353),i=he(i,s,r,n,t[7],16,-155497632),n=he(n,i,s,r,t[10],23,-1094730640),r=he(r,n,i,s,t[13],4,681279174),s=he(s,r,n,i,t[0],11,-358537222),i=he(i,s,r,n,t[3],16,-722521979),n=he(n,i,s,r,t[6],23,76029189),r=he(r,n,i,s,t[9],4,-640364487),s=he(s,r,n,i,t[12],11,-421815835),i=he(i,s,r,n,t[15],16,530742520),n=he(n,i,s,r,t[2],23,-995338651),r=ue(r,n,i,s,t[0],6,-198630844),s=ue(s,r,n,i,t[7],10,1126891415),i=ue(i,s,r,n,t[14],15,-1416354905),n=ue(n,i,s,r,t[5],21,-57434055),r=ue(r,n,i,s,t[12],6,1700485571),s=ue(s,r,n,i,t[3],10,-1894986606),i=ue(i,s,r,n,t[10],15,-1051523),n=ue(n,i,s,r,t[1],21,-2054922799),r=ue(r,n,i,s,t[8],6,1873313359),s=ue(s,r,n,i,t[15],10,-30611744),i=ue(i,s,r,n,t[6],15,-1560198380),n=ue(n,i,s,r,t[13],21,1309151649),r=ue(r,n,i,s,t[4],6,-145523070),s=ue(s,r,n,i,t[11],10,-1120210379),i=ue(i,s,r,n,t[2],15,718787259),n=ue(n,i,s,r,t[9],21,-343485551),e[0]=ge(r,e[0]),e[1]=ge(n,e[1]),e[2]=ge(i,e[2]),e[3]=ge(s,e[3])}function ae(e,t,r,n,i,s){return t=ge(ge(t,e),ge(n,s)),ge(t<<i|t>>>32-i,r)}function oe(e,t,r,n,i,s,a){return ae(t&r|~t&n,e,t,i,s,a)}function ce(e,t,r,n,i,s,a){return ae(t&n|r&~n,e,t,i,s,a)}function he(e,t,r,n,i,s,a){return ae(t^r^n,e,t,i,s,a)}function ue(e,t,r,n,i,s,a){return ae(r^(t|~n),e,t,i,s,a)}function le(e){const t=[];let r;for(r=0;r<64;r+=4)t[r>>2]=e.charCodeAt(r)+(e.charCodeAt(r+1)<<8)+(e.charCodeAt(r+2)<<16)+(e.charCodeAt(r+3)<<24);return t}const ye="0123456789abcdef".split("");function fe(e){let t="",r=0;for(;r<4;r++)t+=ye[e>>8*r+4&15]+ye[e>>8*r&15];return t}function ge(e,t){return e+t&4294967295}const pe=T.getWebCrypto(),de=T.getNodeCrypto(),Ae=de&&de.getHashes();function we(e){if(de&&Ae.includes(e))return async function(t){const r=de.createHash(e);return E(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function me(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return qy})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(o(e)&&(e=await C(e)),T.isStream(e)){const t=(await r()).create();return E(e,(e=>{t.update(e)}),(()=>t.digest()))}if(pe&&t)return new Uint8Array(await pe.digest(t,e));return(await r())(e)}}var be={md5:we("md5")||async function(e){const t=function(e){const t=e.length,r=[1732584193,-271733879,-1732584194,271733878];let n;for(n=64;n<=e.length;n+=64)se(r,le(e.substring(n-64,n)));e=e.substring(n-64);const i=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(n=0;n<e.length;n++)i[n>>2]|=e.charCodeAt(n)<<(n%4<<3);if(i[n>>2]|=128<<(n%4<<3),n>55)for(se(r,i),n=0;n<16;n++)i[n]=0;return i[14]=8*t,se(r,i),r}(T.uint8ArrayToString(e));return T.hexToUint8Array(function(e){for(let t=0;t<e.length;t++)e[t]=fe(e[t]);return e.join("")}(t))},sha1:we("sha1")||me("sha1","SHA-1"),sha224:we("sha224")||me("sha224"),sha256:we("sha256")||me("sha256","SHA-256"),sha384:we("sha384")||me("sha384","SHA-384"),sha512:we("sha512")||me("sha512","SHA-512"),ripemd:we("ripemd160")||me("ripemd160"),sha3_256:we("sha3-256")||me("sha3_256"),sha3_512:we("sha3-512")||me("sha3_512"),digest:function(e,t){switch(e){case R.hash.md5:return this.md5(t);case R.hash.sha1:return this.sha1(t);case R.hash.ripemd:return this.ripemd(t);case R.hash.sha256:return this.sha256(t);case R.hash.sha384:return this.sha384(t);case R.hash.sha512:return this.sha512(t);case R.hash.sha224:return this.sha224(t);case R.hash.sha3_256:return this.sha3_256(t);case R.hash.sha3_512:return this.sha3_512(t);default:throw Error("Unsupported hash function")}},getHashByteLength:function(e){switch(e){case R.hash.md5:return 16;case R.hash.sha1:case R.hash.ripemd:return 20;case R.hash.sha256:return 32;case R.hash.sha384:return 48;case R.hash.sha512:return 64;case R.hash.sha224:return 28;case R.hash.sha3_256:return 32;case R.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(e){switch(e){case R.hash.md5:case R.hash.sha1:case R.hash.ripemd:case R.hash.sha224:case R.hash.sha256:return 64;case R.hash.sha384:case R.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}};function Ee(e){return e instanceof Uint8Array||null!=e&&"object"==typeof e&&"Uint8Array"===e.constructor.name}function ke(e,...t){if(!Ee(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function ve(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Be(e,t){ke(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}
+/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */const Ie=e=>new Uint8Array(e.buffer,e.byteOffset,e.byteLength),Se=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),Ke=e=>new DataView(e.buffer,e.byteOffset,e.byteLength);if(!(68===new Uint8Array(new Uint32Array([287454020]).buffer)[0]))throw Error("Non little-endian hardware is not supported");function Ce(e){if("string"==typeof e)e=function(e){if("string"!=typeof e)throw Error("string expected, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}(e);else{if(!Ee(e))throw Error("Uint8Array expected, got "+typeof e);e=Qe(e)}return e}function Pe(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r}const Ue=(e,t)=>(Object.assign(t,e),t);function De(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s);e.setUint32(t+0,a,n),e.setUint32(t+4,o,n)}function xe(e){return e.byteOffset%4==0}function Qe(e){return Uint8Array.from(e)}function Re(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}const Me=16,Le=/* @__PURE__ */new Uint8Array(16),Te=Se(Le),Fe=e=>(e>>>0&255)<<24|(e>>>8&255)<<16|(e>>>16&255)<<8|e>>>24&255;class Ne{constructor(e,t){this.blockLen=Me,this.outputLen=Me,this.s0=0,this.s1=0,this.s2=0,this.s3=0,this.finished=!1,ke(e=Ce(e),16);const r=Ke(e);let n=r.getUint32(0,!1),i=r.getUint32(4,!1),s=r.getUint32(8,!1),a=r.getUint32(12,!1);const o=[];for(let e=0;e<128;e++)o.push({s0:Fe(n),s1:Fe(i),s2:Fe(s),s3:Fe(a)}),({s0:n,s1:i,s2:s,s3:a}={s3:(u=s)<<31|(l=a)>>>1,s2:(h=i)<<31|u>>>1,s1:(c=n)<<31|h>>>1,s0:c>>>1^225<<24&-(1&l)});var c,h,u,l;const y=(e=>e>65536?8:e>1024?4:2)(t||1024);if(![1,2,4,8].includes(y))throw Error(`ghash: wrong window size=${y}, should be 2, 4 or 8`);this.W=y;const f=128/y,g=this.windowSize=2**y,p=[];for(let e=0;e<f;e++)for(let t=0;t<g;t++){let r=0,n=0,i=0,s=0;for(let a=0;a<y;a++){if(!(t>>>y-a-1&1))continue;const{s0:c,s1:h,s2:u,s3:l}=o[y*e+a];r^=c,n^=h,i^=u,s^=l}p.push({s0:r,s1:n,s2:i,s3:s})}this.t=p}_updateBlock(e,t,r,n){e^=this.s0,t^=this.s1,r^=this.s2,n^=this.s3;const{W:i,t:s,windowSize:a}=this;let o=0,c=0,h=0,u=0;const l=(1<<i)-1;let y=0;for(const f of[e,t,r,n])for(let e=0;e<4;e++){const t=f>>>8*e&255;for(let e=8/i-1;e>=0;e--){const r=t>>>i*e&l,{s0:n,s1:f,s2:g,s3:p}=s[y*a+r];o^=n,c^=f,h^=g,u^=p,y+=1}}this.s0=o,this.s1=c,this.s2=h,this.s3=u}update(e){e=Ce(e),ve(this);const t=Se(e),r=Math.floor(e.length/Me),n=e.length%Me;for(let e=0;e<r;e++)this._updateBlock(t[4*e+0],t[4*e+1],t[4*e+2],t[4*e+3]);return n&&(Le.set(e.subarray(r*Me)),this._updateBlock(Te[0],Te[1],Te[2],Te[3]),Re(Te)),this}destroy(){const{t:e}=this;for(const t of e)t.s0=0,t.s1=0,t.s2=0,t.s3=0}digestInto(e){ve(this),Be(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Se(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e}digest(){const e=new Uint8Array(Me);return this.digestInto(e),this.destroy(),e}}class He extends Ne{constructor(e,t){const r=function(e){e.reverse();const t=1&e[15];let r=0;for(let t=0;t<e.length;t++){const n=e[t];e[t]=n>>>1|r,r=(1&n)<<7}return e[0]^=225&-t,e}(Qe(e=Ce(e)));super(r,t),Re(r)}update(e){e=Ce(e),ve(this);const t=Se(e),r=e.length%Me,n=Math.floor(e.length/Me);for(let e=0;e<n;e++)this._updateBlock(Fe(t[4*e+3]),Fe(t[4*e+2]),Fe(t[4*e+1]),Fe(t[4*e+0]));return r&&(Le.set(e.subarray(n*Me)),this._updateBlock(Fe(Te[3]),Fe(Te[2]),Fe(Te[1]),Fe(Te[0])),Re(Te)),this}digestInto(e){ve(this),Be(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Se(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e.reverse()}}function Oe(e){const t=(t,r)=>e(r,t.length).update(Ce(t)).digest(),r=e(new Uint8Array(16),0);return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=(t,r)=>e(t,r),t}const ze=Oe(((e,t)=>new Ne(e,t)));Oe(((e,t)=>new He(e,t)));const _e=16,Ge=new Uint8Array(_e),je=283;function qe(e){return e<<1^je&-(e>>7)}function Ve(e,t){let r=0;for(;t>0;t>>=1)r^=e&-(1&t),e=qe(e);return r}const We=/* @__PURE__ */(()=>{const e=new Uint8Array(256);for(let t=0,r=1;t<256;t++,r^=qe(r))e[t]=r;const t=new Uint8Array(256);t[0]=99;for(let r=0;r<255;r++){let n=e[255-r];n|=n<<8,t[e[r]]=255&(n^n>>4^n>>5^n>>6^n>>7^99)}return Re(e),t})(),Ze=/* @__PURE__ */We.map(((e,t)=>We.indexOf(t))),Ye=e=>e<<24|e>>>8,Je=e=>e<<8|e>>>24,$e=e=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;function Xe(e,t){if(256!==e.length)throw Error("Wrong sbox length");const r=new Uint32Array(256).map(((r,n)=>t(e[n]))),n=r.map(Je),i=n.map(Je),s=i.map(Je),a=new Uint32Array(65536),o=new Uint32Array(65536),c=new Uint16Array(65536);for(let t=0;t<256;t++)for(let h=0;h<256;h++){const u=256*t+h;a[u]=r[t]^n[h],o[u]=i[t]^s[h],c[u]=e[t]<<8|e[h]}return{sbox:e,sbox2:c,T0:r,T1:n,T2:i,T3:s,T01:a,T23:o}}const et=/* @__PURE__ */Xe(We,(e=>Ve(e,3)<<24|e<<16|e<<8|Ve(e,2))),tt=/* @__PURE__ */Xe(Ze,(e=>Ve(e,11)<<24|Ve(e,13)<<16|Ve(e,9)<<8|Ve(e,14))),rt=/* @__PURE__ */(()=>{const e=new Uint8Array(16);for(let t=0,r=1;t<16;t++,r=qe(r))e[t]=r;return e})();function nt(e){ke(e);const t=e.length;if(![16,24,32].includes(t))throw Error("aes: wrong key size: should be 16, 24 or 32, got: "+t);const{sbox2:r}=et,n=[];xe(e)||n.push(e=Qe(e));const i=Se(e),s=i.length,a=e=>at(r,e,e,e,e),o=new Uint32Array(t+28);o.set(i);for(let e=s;e<o.length;e++){let t=o[e-1];e%s==0?t=a(Ye(t))^rt[e/s-1]:s>6&&e%s==4&&(t=a(t)),o[e]=o[e-s]^t}return Re(...n),o}function it(e){const t=nt(e),r=t.slice(),n=t.length,{sbox2:i}=et,{T0:s,T1:a,T2:o,T3:c}=tt;for(let e=0;e<n;e+=4)for(let i=0;i<4;i++)r[e+i]=t[n-e-4+i];Re(t);for(let e=4;e<n-4;e++){const t=r[e],n=at(i,t,t,t,t);r[e]=s[255&n]^a[n>>>8&255]^o[n>>>16&255]^c[n>>>24]}return r}function st(e,t,r,n,i,s){return e[r<<8&65280|n>>>8&255]^t[i>>>8&65280|s>>>24&255]}function at(e,t,r,n,i){return e[255&t|65280&r]|e[n>>>16&255|i>>>16&65280]<<16}function ot(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=et;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const h=e.length/4-2;for(let s=0;s<h;s++){const s=e[c++]^st(a,o,t,r,n,i),h=e[c++]^st(a,o,r,n,i,t),u=e[c++]^st(a,o,n,i,t,r),l=e[c++]^st(a,o,i,t,r,n);t=s,r=h,n=u,i=l}return{s0:e[c++]^at(s,t,r,n,i),s1:e[c++]^at(s,r,n,i,t),s2:e[c++]^at(s,n,i,t,r),s3:e[c++]^at(s,i,t,r,n)}}function ct(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=tt;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const h=e.length/4-2;for(let s=0;s<h;s++){const s=e[c++]^st(a,o,t,i,n,r),h=e[c++]^st(a,o,r,t,i,n),u=e[c++]^st(a,o,n,r,t,i),l=e[c++]^st(a,o,i,n,r,t);t=s,r=h,n=u,i=l}return{s0:e[c++]^at(s,t,i,n,r),s1:e[c++]^at(s,r,t,i,n),s2:e[c++]^at(s,n,r,t,i),s3:e[c++]^at(s,i,n,r,t)}}function ht(e,t){if(void 0===t)return new Uint8Array(e);if(ke(t),t.length<e)throw Error(`aes: wrong destination length, expected at least ${e}, got: ${t.length}`);if(!xe(t))throw Error("unaligned dst");return t}function ut(e,t,r,n){ke(t,_e),ke(r);const i=r.length;n=ht(i,n);const s=t,a=Se(s);let{s0:o,s1:c,s2:h,s3:u}=ot(e,a[0],a[1],a[2],a[3]);const l=Se(r),y=Se(n);for(let t=0;t+4<=l.length;t+=4){y[t+0]=l[t+0]^o,y[t+1]=l[t+1]^c,y[t+2]=l[t+2]^h,y[t+3]=l[t+3]^u;let r=1;for(let e=s.length-1;e>=0;e--)r=r+(255&s[e])|0,s[e]=255&r,r>>>=8;({s0:o,s1:c,s2:h,s3:u}=ot(e,a[0],a[1],a[2],a[3]))}const f=_e*Math.floor(l.length/4);if(f<i){const e=new Uint32Array([o,c,h,u]),t=Ie(e);for(let e=f,s=0;e<i;e++,s++)n[e]=r[e]^t[s];Re(e)}return n}function lt(e,t,r,n,i){ke(r,_e),ke(n),i=ht(n.length,i);const s=r,a=Se(s),o=Ke(s),c=Se(n),h=Se(i),u=t?0:12,l=n.length;let y=o.getUint32(u,t),{s0:f,s1:g,s2:p,s3:d}=ot(e,a[0],a[1],a[2],a[3]);for(let r=0;r+4<=c.length;r+=4)h[r+0]=c[r+0]^f,h[r+1]=c[r+1]^g,h[r+2]=c[r+2]^p,h[r+3]=c[r+3]^d,y=y+1>>>0,o.setUint32(u,y,t),({s0:f,s1:g,s2:p,s3:d}=ot(e,a[0],a[1],a[2],a[3]));const A=_e*Math.floor(c.length/4);if(A<l){const e=new Uint32Array([f,g,p,d]),t=Ie(e);for(let e=A,r=0;e<l;e++,r++)i[e]=n[e]^t[r];Re(e)}return i}const yt=Ue({blockSize:16,nonceLength:16},(function(e,t){function r(r,n){if(ke(r),void 0!==n&&(ke(n),!xe(n)))throw Error("unaligned destination");const i=nt(e),s=Qe(t),a=[i,s];xe(r)||a.push(r=Qe(r));const o=ut(i,s,r,n);return Re(...a),o}return ke(e),ke(t,_e),{encrypt:(e,t)=>r(e,t),decrypt:(e,t)=>r(e,t)}}));const ft=Ue({blockSize:16,nonceLength:16},(function(e,t,r={}){ke(e),ke(t,16);const n=!r.disablePadding;return{encrypt(r,i){const s=nt(e),{b:a,o,out:c}=function(e,t,r){ke(e);let n=e.length;const i=n%_e;if(!t&&0!==i)throw Error("aec/(cbc-ecb): unpadded plaintext with disabled padding");xe(e)||(e=Qe(e));const s=Se(e);if(t){let e=_e-i;e||(e=_e),n+=e}const a=ht(n,r);return{b:s,o:Se(a),out:a}}(r,n,i);let h=t;const u=[s];xe(h)||u.push(h=Qe(h));const l=Se(h);let y=l[0],f=l[1],g=l[2],p=l[3],d=0;for(;d+4<=a.length;)y^=a[d+0],f^=a[d+1],g^=a[d+2],p^=a[d+3],({s0:y,s1:f,s2:g,s3:p}=ot(s,y,f,g,p)),o[d++]=y,o[d++]=f,o[d++]=g,o[d++]=p;if(n){const e=function(e){const t=new Uint8Array(16),r=Se(t);t.set(e);const n=_e-e.length;for(let e=_e-n;e<_e;e++)t[e]=n;return r}(r.subarray(4*d));y^=e[0],f^=e[1],g^=e[2],p^=e[3],({s0:y,s1:f,s2:g,s3:p}=ot(s,y,f,g,p)),o[d++]=y,o[d++]=f,o[d++]=g,o[d++]=p}return Re(...u),c},decrypt(r,i){!function(e){if(ke(e),e.length%_e!=0)throw Error("aes/(cbc-ecb).decrypt ciphertext should consist of blocks with size 16")}(r);const s=it(e);let a=t;const o=[s];xe(a)||o.push(a=Qe(a));const c=Se(a),h=ht(r.length,i);xe(r)||o.push(r=Qe(r));const u=Se(r),l=Se(h);let y=c[0],f=c[1],g=c[2],p=c[3];for(let e=0;e+4<=u.length;){const t=y,r=f,n=g,i=p;y=u[e+0],f=u[e+1],g=u[e+2],p=u[e+3];const{s0:a,s1:o,s2:c,s3:h}=ct(s,y,f,g,p);l[e++]=a^t,l[e++]=o^r,l[e++]=c^n,l[e++]=h^i}return Re(...o),function(e,t){if(!t)return e;const r=e.length;if(!r)throw Error("aes/pcks5: empty ciphertext not allowed");const n=e[r-1];if(n<=0||n>16)throw Error("aes/pcks5: wrong padding byte: "+n);const i=e.subarray(0,-n);for(let t=0;t<n;t++)if(e[r-t-1]!==n)throw Error("aes/pcks5: wrong padding");return i}(h,n)}}})),gt=Ue({blockSize:16,nonceLength:16},(function(e,t){function r(r,n,i){ke(r);const s=r.length;i=ht(s,i);const a=nt(e);let o=t;const c=[a];xe(o)||c.push(o=Qe(o)),xe(r)||c.push(r=Qe(r));const h=Se(r),u=Se(i),l=n?u:h,y=Se(o);let f=y[0],g=y[1],p=y[2],d=y[3];for(let e=0;e+4<=h.length;){const{s0:t,s1:r,s2:n,s3:i}=ot(a,f,g,p,d);u[e+0]=h[e+0]^t,u[e+1]=h[e+1]^r,u[e+2]=h[e+2]^n,u[e+3]=h[e+3]^i,f=l[e++],g=l[e++],p=l[e++],d=l[e++]}const A=_e*Math.floor(h.length/4);if(A<s){({s0:f,s1:g,s2:p,s3:d}=ot(a,f,g,p,d));const e=Ie(new Uint32Array([f,g,p,d]));for(let t=A,n=0;t<s;t++,n++)i[t]=r[t]^e[n];Re(e)}return Re(...c),i}return ke(e),ke(t,16),{encrypt:(e,t)=>r(e,!0,t),decrypt:(e,t)=>r(e,!1,t)}}));const pt=Ue({blockSize:16,nonceLength:12,tagLength:16},(function(e,t,r){if(ke(e),ke(t),void 0!==r&&ke(r),0===t.length)throw Error("aes/gcm: empty nonce");const n=16;function i(e,t,n){const i=function(e,t,r,n,i){const s=null==i?0:i.length,a=e.create(r,n.length+s);i&&a.update(i),a.update(n);const o=new Uint8Array(16),c=Ke(o);i&&De(c,0,BigInt(8*s),t),De(c,8,BigInt(8*n.length),t),a.update(o);const h=a.digest();return Re(o),h}(ze,!1,e,n,r);for(let e=0;e<t.length;e++)i[e]^=t[e];return i}function s(){const r=nt(e),n=Ge.slice(),i=Ge.slice();if(lt(r,!1,i,i,n),12===t.length)i.set(t);else{const e=Ge.slice();De(Ke(e),8,BigInt(8*t.length),!1);const r=ze.create(n).update(t).update(e);r.digestInto(i),r.destroy()}return{xk:r,authKey:n,counter:i,tagMask:lt(r,!1,i,Ge)}}return{encrypt(e){ke(e);const{xk:t,authKey:r,counter:a,tagMask:o}=s(),c=new Uint8Array(e.length+n),h=[t,r,a,o];xe(e)||h.push(e=Qe(e)),lt(t,!1,a,e,c);const u=i(r,o,c.subarray(0,c.length-n));return h.push(u),c.set(u,e.length),Re(...h),c},decrypt(e){if(ke(e),e.length<n)throw Error("aes/gcm: ciphertext less than tagLen (16)");const{xk:t,authKey:r,counter:a,tagMask:o}=s(),c=[t,r,o,a];xe(e)||c.push(e=Qe(e));const h=e.subarray(0,-16),u=e.subarray(-16),l=i(r,o,h);if(c.push(l),!Pe(l,u))throw Error("aes/gcm: invalid ghash tag");const y=lt(t,!1,a,h);return Re(...c),y}}}));function dt(e){return null!=e&&"object"==typeof e&&(e instanceof Uint32Array||"Uint32Array"===e.constructor.name)}function At(e,t){if(ke(t,16),!dt(e))throw Error("_encryptBlock accepts result of expandKeyLE");const r=Se(t);let{s0:n,s1:i,s2:s,s3:a}=ot(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}function wt(e,t){if(ke(t,16),!dt(e))throw Error("_decryptBlock accepts result of expandKeyLE");const r=Se(t);let{s0:n,s1:i,s2:s,s3:a}=ct(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}const mt={encrypt(e,t){if(t.length>=2**32)throw Error("plaintext should be less than 4gb");const r=nt(e);if(16===t.length)At(r,t);else{const e=Se(t);let n=e[0],i=e[1];for(let t=0,s=1;t<6;t++)for(let t=2;t<e.length;t+=2,s++){const{s0:a,s1:o,s2:c,s3:h}=ot(r,n,i,e[t],e[t+1]);n=a,i=o^$e(s),e[t]=c,e[t+1]=h}e[0]=n,e[1]=i}r.fill(0)},decrypt(e,t){if(t.length-8>=2**32)throw Error("ciphertext should be less than 4gb");const r=it(e),n=t.length/8-1;if(1===n)wt(r,t);else{const e=Se(t);let i=e[0],s=e[1];for(let t=0,a=6*n;t<6;t++)for(let t=2*n;t>=1;t-=2,a--){s^=$e(a);const{s0:n,s1:o,s2:c,s3:h}=ct(r,i,s,e[t],e[t+1]);i=n,s=o,e[t]=c,e[t+1]=h}e[0]=i,e[1]=s}r.fill(0)}},bt=new Uint8Array(8).fill(166),Et=Ue({blockSize:8},(e=>({encrypt(t){if(ke(t),!t.length||t.length%8!=0)throw Error("plaintext length must be non-empty and a multiple of 8 bytes");if(8===t.length)throw Error("8-byte keys not allowed in AESKW, use AESKWP instead");const r=function(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];ke(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}(bt,t);return mt.encrypt(e,r),r},decrypt(t){if(ke(t),t.length%8!=0||t.length<24)throw Error("ciphertext must be at least 24 bytes and a multiple of 8 bytes");const r=Qe(t);if(mt.decrypt(e,r),!Pe(r.subarray(0,8),bt))throw Error("integrity check failed");return r.subarray(0,8).fill(0),r.subarray(8)}}))),kt={expandKeyLE:nt,expandKeyDecLE:it,encrypt:ot,decrypt:ct,encryptBlock:At,decryptBlock:wt,ctrCounter:ut,ctr32:lt},vt=T.getWebCrypto(),Bt=T.getNodeCrypto(),It=Bt?Bt.getCiphers():[],St={idea:It.includes("idea-cfb")?"idea-cfb":void 0,tripledes:It.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:It.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:It.includes("bf-cfb")?"bf-cfb":void 0,aes128:It.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:It.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:It.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Kt{constructor(e,t,r){const{blockSize:n}=ne(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(n),this.i=0,this.blockSize=n,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=ne(e);return vt.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await vt.importKey("raw",this.key,r,!1,["encrypt"]);const n=await vt.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(n).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=T.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=T.concatUint8Array([this.prevBlock,n.subarray(0,n.length-this.blockSize)]),s=await this._runCBC(i);return Pt(s,n),this.prevBlock=s.slice(-this.blockSize),r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,s}let n;if(this.i+=r.length,this.i===this.nextBlock.length){const t=this.nextBlock;n=await this._runCBC(this.prevBlock),Pt(n,t),this.prevBlock=n.slice(),this.i=0;const i=e.subarray(r.length);this.nextBlock.set(i,this.i),this.i+=i.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);Pt(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(T.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return Pt(t,e),this.clearSensitiveData(),t}}class Ct{constructor(e,t,r,n){this.forEncryption=e;const{blockSize:i}=ne(t);this.key=kt.expandKeyLE(r),n.byteOffset%4!=0&&(n=n.slice()),this.prevBlock=Ut(n),this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i}_runCFB(e){const t=Ut(e),r=new Uint8Array(e.length),n=Ut(r);for(let e=0;e+4<=n.length;e+=4){const{s0:r,s1:i,s2:s,s3:a}=kt.encrypt(this.key,this.prevBlock[0],this.prevBlock[1],this.prevBlock[2],this.prevBlock[3]);n[e+0]=t[e+0]^r,n[e+1]=t[e+1]^i,n[e+2]=t[e+2]^s,n[e+3]=t[e+3]^a,this.prevBlock=(this.forEncryption?n:t).slice(e,e+4)}return r}async processChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=T.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=this._runCFB(n);return r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,i}let n;if(this.i+=r.length,this.i===this.nextBlock.length){n=this._runCFB(this.nextBlock),this.i=0;const t=e.subarray(r.length);this.nextBlock.set(t,this.i),this.i+=t.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{e=this._runCFB(this.nextBlock).subarray(0,this.i)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.key.fill(0)}}function Pt(e,t){const r=Math.min(e.length,t.length);for(let n=0;n<r;n++)e[n]=e[n]^t[n]}const Ut=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4));var Dt=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n){const i=R.read(R.symmetric,e);if(Bt&&St[i])return function(e,t,r,n){const i=R.read(R.symmetric,e),s=new Bt.createDecipheriv(St[i],t,n);return E(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,n);if(T.isAES(e))return async function(e,t,r,n){if(T.isStream(r)){const i=new Ct(!1,e,t,n);return E(r,(e=>i.processChunk(e)),(()=>i.finish()))}return gt(t,n).decrypt(r)}(e,t,r,n);const s=new(await ee(e))(t),a=s.blockSize;let o=n,c=new Uint8Array;const h=e=>{e&&(c=T.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,n=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[n++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,n)};return E(r,h,h)},encrypt:async function(e,t,r,n,i){const s=R.read(R.symmetric,e);if(T.getNodeCrypto()&&St[s])return function(e,t,r,n){const i=R.read(R.symmetric,e),s=new Bt.createCipheriv(St[i],t,n);return E(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,n);if(T.isAES(e))return async function(e,t,r,n){if(vt&&await Kt.isSupported(e)){const i=new Kt(e,t,n);return T.isStream(r)?E(r,(e=>i.encryptChunk(e)),(()=>i.finish())):i.encrypt(r)}if(T.isStream(r)){const i=new Ct(!0,e,t,n);return E(r,(e=>i.processChunk(e)),(()=>i.finish()))}return gt(t,n).encrypt(r)}(e,t,r,n);const a=new(await ee(e))(t),o=a.blockSize,c=n.slice();let h=new Uint8Array;const u=e=>{e&&(h=T.concatUint8Array([h,e]));const t=new Uint8Array(h.length);let r,n=0;for(;e?h.length>=o:h.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^e[r],t[n++]=c[r];h=h.subarray(o)}return t.subarray(0,n)};return E(r,u,u)}});const xt=T.getWebCrypto(),Qt=T.getNodeCrypto(),Rt=16;function Mt(e,t){const r=e.length-Rt;for(let n=0;n<Rt;n++)e[n+r]^=t[n];return e}const Lt=new Uint8Array(Rt);async function Tt(e){const t=await Ft(e),r=T.double(await t(Lt)),n=T.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%Rt==0)return Mt(e,t);const n=new Uint8Array(e.length+(Rt-e.length%Rt));return n.set(e),n[e.length]=128,Mt(n,r)}(e,r,n))).subarray(-Rt)}}async function Ft(e){if(T.getNodeCrypto())return async function(t){const r=new Qt.createCipheriv("aes-"+8*e.length+"-cbc",e,Lt).update(t);return new Uint8Array(r)};if(T.getWebCrypto())try{return e=await xt.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await xt.encrypt({name:"AES-CBC",iv:Lt,length:8*Rt},e,t);return new Uint8Array(r).subarray(0,r.byteLength-Rt)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;T.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return ft(e,Lt,{disablePadding:!0}).encrypt(t)}}const Nt=T.getWebCrypto(),Ht=T.getNodeCrypto(),Ot=T.getNodeBuffer(),zt=16,_t=zt,Gt=zt,jt=new Uint8Array(zt),qt=new Uint8Array(zt);qt[zt-1]=1;const Vt=new Uint8Array(zt);async function Wt(e){const t=await Tt(e);return function(e,r){return t(T.concatUint8Array([e,r]))}}async function Zt(e){if(T.getNodeCrypto())return async function(t,r){const n=new Ht.createCipheriv("aes-"+8*e.length+"-ctr",e,r),i=Ot.concat([n.update(t),n.final()]);return new Uint8Array(i)};if(T.getWebCrypto())try{const t=await Nt.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const n=await Nt.encrypt({name:"AES-CTR",counter:r,length:8*zt},t,e);return new Uint8Array(n)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;T.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return yt(e,r).encrypt(t)}}async function Yt(e,t){if(e!==R.symmetric.aes128&&e!==R.symmetric.aes192&&e!==R.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,n]=await Promise.all([Wt(t),Zt(t)]);return{encrypt:async function(e,t,i){const[s,a]=await Promise.all([r(jt,t),r(qt,i)]),o=await n(e,s),c=await r(Vt,o);for(let e=0;e<Gt;e++)c[e]^=a[e]^s[e];return T.concatUint8Array([o,c])},decrypt:async function(e,t,i){if(e.length<Gt)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-Gt),a=e.subarray(-Gt),[o,c,h]=await Promise.all([r(jt,t),r(qt,i),r(Vt,s)]),u=h;for(let e=0;e<Gt;e++)u[e]^=c[e]^o[e];if(!T.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await n(s,o)}}}Vt[zt-1]=2,Yt.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},Yt.blockLength=zt,Yt.ivLength=_t,Yt.tagLength=Gt;const Jt=16,$t=16;function Xt(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function er(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function tr(e,t){return er(e.slice(),t)}const rr=new Uint8Array(Jt),nr=new Uint8Array([1]);async function ir(e,t){const{keySize:r}=ne(e);if(!T.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let n=0;const i=ft(t,rr,{disablePadding:!0}),s=e=>i.encrypt(e),a=e=>i.decrypt(e);let o;function c(e,t,r,i){const a=t.length/Jt|0;!function(e,t){const r=T.nbits(Math.max(e.length,t.length)/Jt|0)-1;for(let e=n+1;e<=r;e++)o[e]=T.double(o[e-1]);n=r}(t,i);const c=T.concatUint8Array([rr.subarray(0,15-r.length),nr,r]),h=63&c[15];c[15]&=192;const u=s(c),l=T.concatUint8Array([u,tr(u.subarray(0,8),u.subarray(1,9))]),y=T.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),f=new Uint8Array(Jt),g=new Uint8Array(t.length+$t);let p,d=0;for(p=0;p<a;p++)er(y,o[Xt(p+1)]),g.set(er(e(tr(y,t)),y),d),er(f,e===s?t:g.subarray(d)),t=t.subarray(Jt),d+=Jt;if(t.length){er(y,o.x);const r=s(y);g.set(tr(t,r),d);const n=new Uint8Array(Jt);n.set(e===s?t:g.subarray(d,-16),0),n[t.length]=128,er(f,n),d+=t.length}const A=er(s(er(er(f,y),o.$)),function(e){if(!e.length)return rr;const t=e.length/Jt|0,r=new Uint8Array(Jt),n=new Uint8Array(Jt);for(let i=0;i<t;i++)er(r,o[Xt(i+1)]),er(n,s(tr(r,e))),e=e.subarray(Jt);if(e.length){er(r,o.x);const t=new Uint8Array(Jt);t.set(e,0),t[e.length]=128,er(t,r),er(n,s(t))}return n}(i));return g.set(A,d),g}return function(){const e=s(rr),t=T.double(e);o=[],o[0]=T.double(t),o.x=e,o.$=t}(),{encrypt:async function(e,t,r){return c(s,e,t,r)},decrypt:async function(e,t,r){if(e.length<$t)throw Error("Invalid OCB ciphertext");const n=e.subarray(-16);e=e.subarray(0,-16);const i=c(a,e,t,r);if(T.equalsUint8Array(n,i.subarray(-16)))return i.subarray(0,-16);throw Error("Authentication tag mismatch")}}}ir.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},ir.blockLength=Jt,ir.ivLength=15,ir.tagLength=$t;const sr=T.getWebCrypto(),ar=T.getNodeCrypto(),or=T.getNodeBuffer(),cr=16,hr="AES-GCM";async function ur(e,t){if(e!==R.symmetric.aes128&&e!==R.symmetric.aes192&&e!==R.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(T.getNodeCrypto())return{encrypt:async function(e,r,n=new Uint8Array){const i=new ar.createCipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n);const s=or.concat([i.update(e),i.final(),i.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,n=new Uint8Array){const i=new ar.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n),i.setAuthTag(e.slice(e.length-cr,e.length));const s=or.concat([i.update(e.slice(0,e.length-cr)),i.final()]);return new Uint8Array(s)}};if(T.getWebCrypto())try{const e=await sr.importKey("raw",t,{name:hr},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(n,i,s=new Uint8Array){if(r&&!n.length)return pt(t,i,s).encrypt(n);const a=await sr.encrypt({name:hr,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(a)},decrypt:async function(n,i,s=new Uint8Array){if(r&&n.length===cr)return pt(t,i,s).decrypt(n);try{const t=await sr.decrypt({name:hr,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;T.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,n){return pt(t,r,n).encrypt(e)},decrypt:async function(e,r,n){return pt(t,r,n).decrypt(e)}}}ur.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},ur.blockLength=16,ur.ivLength=12,ur.tagLength=cr;var lr={cfb:Dt,gcm:ur,experimentalGCM:ur,eax:Yt,ocb:ir};const yr=BigInt(0),fr=BigInt(1);function gr(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function pr(e,t){const r=e%t;return r<yr?r+t:r}function dr(e,t,r){if(r===yr)throw Error("Modulo cannot be zero");if(r===fr)return BigInt(0);if(t<yr)throw Error("Unsopported negative exponent");let n=t,i=e;i%=r;let s=BigInt(1);for(;n>yr;){const e=n&fr;n>>=fr;s=e?s*i%r:s,i=i*i%r}return s}function Ar(e){return e>=yr?e:-e}function wr(e,t){const{gcd:r,x:n}=function(e,t){let r=BigInt(0),n=BigInt(1),i=BigInt(1),s=BigInt(0),a=Ar(e),o=Ar(t);const c=e<yr,h=t<yr;for(;o!==yr;){const e=a/o;let t=r;r=i-e*r,i=t,t=n,n=s-e*n,s=t,t=o,o=a%o,a=t}return{x:c?-i:i,y:h?-s:s,gcd:a}}(e,t);if(r!==fr)throw Error("Inverse does not exist");return pr(n+t,t)}function mr(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function br(e,t){return(e>>BigInt(t)&fr)===yr?0:1}function Er(e){const t=e<yr?BigInt(-1):yr;let r=1,n=e;for(;(n>>=fr)!==t;)r++;return r}function kr(e){const t=e<yr?BigInt(-1):yr,r=BigInt(8);let n=1,i=e;for(;(i>>=r)!==t;)n++;return n}function vr(e,t="be",r){let n=e.toString(16);n.length%2==1&&(n="0"+n);const i=n.length/2,s=new Uint8Array(r||i),a=r?r-i:0;let o=0;for(;o<i;)s[o+a]=parseInt(n.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const Br=T.getNodeCrypto();function Ir(e){const t=new Uint8Array(e);if(Br){const e=Br.randomBytes(t.length);t.set(e)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(t)}return t}function Sr(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return pr(gr(Ir(kr(r)+8)),r)+e}var Kr=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Sr,getRandomBytes:Ir});const Cr=BigInt(1);function Pr(e,t,r){const n=BigInt(30),i=Cr<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=Sr(i,i<<Cr),o=mr(pr(a,n));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,Er(a)>e&&(a=pr(a,i<<Cr),a+=i,o=mr(pr(a,n)))}while(!Ur(a,t,r));return a}function Ur(e,t,r){return(!t||function(e,t){let r=e,n=t;for(;n!==yr;){const e=n;n=r%n,r=e}return r}(e-Cr,t)===Cr)&&(!!function(e){const t=BigInt(0);return Dr.every((r=>pr(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return dr(t,e-Cr,e)===Cr}(e)&&!!function(e,t){const r=Er(e);t||(t=Math.max(1,r/48|0));const n=e-Cr;let i=0;for(;!br(n,i);)i++;const s=e>>BigInt(i);for(;t>0;t--){let t,r=dr(Sr(BigInt(2),n),s,e);if(r!==Cr&&r!==n){for(t=1;t<i;t++){if(r=pr(r*r,e),r===Cr)return!1;if(r===n)break}if(t===i)return!1}}return!0}(e,r)))}const Dr=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const xr=[];function Qr(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const n=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const n=Ir(e-r);for(let e=0;e<n.length;e++)0!==n[e]&&(t[r++]=n[e])}return t}(t-r-3),i=new Uint8Array(t);return i[1]=2,i.set(n,2),i.set(e,t-r),i}function Rr(e,t){let r=2,n=1;for(let t=r;t<e.length;t++)n&=0!==e[t],r+=n;const i=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&i>=8&!n;if(t)return T.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Mr(e,t,r){let n;if(t.length!==be.getHashByteLength(e))throw Error("Invalid hash length");const i=new Uint8Array(xr[e].length);for(n=0;n<xr[e].length;n++)i[n]=xr[e][n];const s=i.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(i,r-s),o.set(t,r-t.length),o}xr[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],xr[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],xr[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],xr[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],xr[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],xr[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],xr[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var Lr=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Rr,emeEncode:Qr,emsaEncode:Mr});const Tr=T.getWebCrypto(),Fr=T.getNodeCrypto(),Nr=BigInt(1);async function Hr(e,t,r,n,i,s){const a=gr(n),o=gr(i),c=gr(r);let h=pr(c,o-Nr),u=pr(c,a-Nr);return u=vr(u),h=vr(h),{kty:"RSA",n:G(e),e:G(t),d:G(r),p:G(i),q:G(n),dp:G(h),dq:G(u),qi:G(s),ext:!0}}function Or(e,t){return{kty:"RSA",n:G(e),e:G(t),ext:!0}}function zr(e,t){return{n:_(e.n),e:vr(t),d:_(e.d),p:_(e.q),q:_(e.p),u:_(e.qi)}}var _r=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i,s,a,o){if(T.getNodeCrypto()&&!o)try{return await async function(e,t,r,n,i,s,a){const o=await Hr(t,r,n,i,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Fr.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Fr.privateDecrypt(c,e))}catch(e){throw Error("Decryption error")}}(e,t,r,n,i,s,a)}catch(e){T.printDebugError(e)}return async function(e,t,r,n,i,s,a,o){if(e=gr(e),t=gr(t),r=gr(r),n=gr(n),i=gr(i),s=gr(s),a=gr(a),e>=t)throw Error("Data too large.");const c=pr(n,s-Nr),h=pr(n,i-Nr),u=Sr(BigInt(2),t),l=dr(wr(u,t),r,t);e=pr(e*l,t);const y=dr(e,h,i),f=dr(e,c,s),g=pr(a*(f-y),s);let p=g*i+y;return p=pr(p*u,t),Rr(vr(p,"be",kr(t)),o)}(e,t,r,n,i,s,a,o)},encrypt:async function(e,t,r){return T.getNodeCrypto()?async function(e,t,r){const n=Or(t,r),i={key:n,format:"jwk",type:"pkcs1",padding:Fr.constants.RSA_PKCS1_PADDING};return new Uint8Array(Fr.publicEncrypt(i,e))}(e,t,r):async function(e,t,r){if(t=gr(t),e=gr(Qr(e,kr(t))),r=gr(r),e>=t)throw Error("Message size cannot exceed modulus size");return vr(dr(e,r,t),"be",kr(t))}(e,t,r)},generate:async function(e,t){if(t=BigInt(t),T.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:vr(t),hash:{name:"SHA-1"}},n=await Tr.generateKey(r,!0,["sign","verify"]);return zr(await Tr.exportKey("jwk",n.privateKey),t)}if(T.getNodeCrypto()){const r={modulusLength:e,publicExponent:mr(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},n=await new Promise(((e,t)=>{Fr.generateKeyPair("rsa",r,((r,n,i)=>{r?t(r):e(i)}))}));return zr(n,t)}let r,n,i;do{n=Pr(e-(e>>1),t,40),r=Pr(e>>1,t,40),i=r*n}while(Er(i)!==e);const s=(r-Nr)*(n-Nr);return n<r&&([r,n]=[n,r]),{n:vr(i),e:vr(t),d:vr(wr(t,s)),p:vr(r),q:vr(n),u:vr(wr(r,n))}},sign:async function(e,t,r,n,i,s,a,o,c){if(t&&!T.isStream(t))if(T.getWebCrypto())try{return await async function(e,t,r,n,i,s,a,o){const c=await Hr(r,n,i,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},u=await Tr.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await Tr.sign("RSASSA-PKCS1-v1_5",u,t))}(R.read(R.webHash,e),t,r,n,i,s,a,o)}catch(e){T.printDebugError(e)}else if(T.getNodeCrypto())return async function(e,t,r,n,i,s,a,o){const c=Fr.createSign(R.read(R.hash,e));c.write(t),c.end();const h=await Hr(r,n,i,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(e,t,r,n,i,s,a,o);return async function(e,t,r,n){t=gr(t);const i=gr(Mr(e,n,kr(t)));if(r=gr(r),i>=t)throw Error("Message size cannot exceed modulus size");return vr(dr(i,r,t),"be",kr(t))}(e,r,i,c)},validateParams:async function(e,t,r,n,i,s){if(e=gr(e),(n=gr(n))*(i=gr(i))!==e)return!1;const a=BigInt(2);if(pr(n*(s=gr(s)),i)!==BigInt(1))return!1;t=gr(t),r=gr(r);const o=Sr(a,a<<BigInt(Math.floor(Er(e)/3))),c=o*r*t;return!(pr(c,n-Nr)!==o||pr(c,i-Nr)!==o)},verify:async function(e,t,r,n,i,s){if(t&&!T.isStream(t))if(T.getWebCrypto())try{return await async function(e,t,r,n,i){const s=Or(n,i),a=await Tr.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return Tr.verify("RSASSA-PKCS1-v1_5",a,r,t)}(R.read(R.webHash,e),t,r,n,i)}catch(e){T.printDebugError(e)}else if(T.getNodeCrypto())return async function(e,t,r,n,i){const s=Or(n,i),a={key:s,format:"jwk",type:"pkcs1"},o=Fr.createVerify(R.read(R.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch(e){return!1}}(e,t,r,n,i);return async function(e,t,r,n,i){if(r=gr(r),t=gr(t),n=gr(n),t>=r)throw Error("Signature size cannot exceed modulus size");const s=vr(dr(t,n,r),"be",kr(r)),a=Mr(e,i,kr(r));return T.equalsUint8Array(s,a)}(e,r,n,i,s)}});const Gr=BigInt(1);var jr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i){return e=gr(e),t=gr(t),r=gr(r),Rr(vr(pr(wr(dr(e,n=gr(n),r),r)*t,r),"be",kr(r)),i)},encrypt:async function(e,t,r,n){t=gr(t),r=gr(r),n=gr(n);const i=gr(Qr(e,kr(t))),s=Sr(Gr,t-Gr);return{c1:vr(dr(r,s,t)),c2:vr(pr(dr(n,s,t)*i,t))}},validateParams:async function(e,t,r,n){if(e=gr(e),t=gr(t),r=gr(r),t<=Gr||t>=e)return!1;const i=BigInt(Er(e));if(i<BigInt(1023))return!1;if(dr(t,e-Gr,e)!==Gr)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=pr(s*t,e),s===Gr)return!1;a++}n=gr(n);const h=Sr(o<<i-Gr,o<<i);return r===dr(t,(e-Gr)*h+n,e)}});const qr="object"==typeof t&&"crypto"in t?t.crypto:void 0,Vr={};var Wr=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},Zr=function(){throw Error("no PRNG")},Yr=new Uint8Array(32);Yr[0]=9;var Jr=Wr(),$r=Wr([1]),Xr=Wr([56129,1]),en=Wr([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),tn=Wr([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),rn=Wr([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),nn=Wr([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),sn=Wr([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function an(e,t,r,n){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=n>>24&255,e[t+5]=n>>16&255,e[t+6]=n>>8&255,e[t+7]=255&n}function on(e,t,r,n){return function(e,t,r,n,i){var s,a=0;for(s=0;s<i;s++)a|=e[t+s]^r[n+s];return(1&a-1>>>8)-1}(e,t,r,n,32)}function cn(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function hn(e){var t,r,n=1;for(t=0;t<16;t++)r=e[t]+n+65535,n=Math.floor(r/65536),e[t]=r-65536*n;e[0]+=n-1+37*(n-1)}function un(e,t,r){for(var n,i=~(r-1),s=0;s<16;s++)n=i&(e[s]^t[s]),e[s]^=n,t[s]^=n}function ln(e,t){var r,n,i,s=Wr(),a=Wr();for(r=0;r<16;r++)a[r]=t[r];for(hn(a),hn(a),hn(a),n=0;n<2;n++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),i=s[15]>>16&1,s[14]&=65535,un(a,s,1-i)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function yn(e,t){var r=new Uint8Array(32),n=new Uint8Array(32);return ln(r,e),ln(n,t),on(r,0,n,0)}function fn(e){var t=new Uint8Array(32);return ln(t,e),1&t[0]}function gn(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function pn(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]+r[n]}function dn(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]-r[n]}function An(e,t,r){var n,i,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0,B=0,I=0,S=0,K=0,C=0,P=0,U=0,D=0,x=0,Q=0,R=0,M=0,L=r[0],T=r[1],F=r[2],N=r[3],H=r[4],O=r[5],z=r[6],_=r[7],G=r[8],j=r[9],q=r[10],V=r[11],W=r[12],Z=r[13],Y=r[14],J=r[15];s+=(n=t[0])*L,a+=n*T,o+=n*F,c+=n*N,h+=n*H,u+=n*O,l+=n*z,y+=n*_,f+=n*G,g+=n*j,p+=n*q,d+=n*V,A+=n*W,w+=n*Z,m+=n*Y,b+=n*J,a+=(n=t[1])*L,o+=n*T,c+=n*F,h+=n*N,u+=n*H,l+=n*O,y+=n*z,f+=n*_,g+=n*G,p+=n*j,d+=n*q,A+=n*V,w+=n*W,m+=n*Z,b+=n*Y,E+=n*J,o+=(n=t[2])*L,c+=n*T,h+=n*F,u+=n*N,l+=n*H,y+=n*O,f+=n*z,g+=n*_,p+=n*G,d+=n*j,A+=n*q,w+=n*V,m+=n*W,b+=n*Z,E+=n*Y,k+=n*J,c+=(n=t[3])*L,h+=n*T,u+=n*F,l+=n*N,y+=n*H,f+=n*O,g+=n*z,p+=n*_,d+=n*G,A+=n*j,w+=n*q,m+=n*V,b+=n*W,E+=n*Z,k+=n*Y,v+=n*J,h+=(n=t[4])*L,u+=n*T,l+=n*F,y+=n*N,f+=n*H,g+=n*O,p+=n*z,d+=n*_,A+=n*G,w+=n*j,m+=n*q,b+=n*V,E+=n*W,k+=n*Z,v+=n*Y,B+=n*J,u+=(n=t[5])*L,l+=n*T,y+=n*F,f+=n*N,g+=n*H,p+=n*O,d+=n*z,A+=n*_,w+=n*G,m+=n*j,b+=n*q,E+=n*V,k+=n*W,v+=n*Z,B+=n*Y,I+=n*J,l+=(n=t[6])*L,y+=n*T,f+=n*F,g+=n*N,p+=n*H,d+=n*O,A+=n*z,w+=n*_,m+=n*G,b+=n*j,E+=n*q,k+=n*V,v+=n*W,B+=n*Z,I+=n*Y,S+=n*J,y+=(n=t[7])*L,f+=n*T,g+=n*F,p+=n*N,d+=n*H,A+=n*O,w+=n*z,m+=n*_,b+=n*G,E+=n*j,k+=n*q,v+=n*V,B+=n*W,I+=n*Z,S+=n*Y,K+=n*J,f+=(n=t[8])*L,g+=n*T,p+=n*F,d+=n*N,A+=n*H,w+=n*O,m+=n*z,b+=n*_,E+=n*G,k+=n*j,v+=n*q,B+=n*V,I+=n*W,S+=n*Z,K+=n*Y,C+=n*J,g+=(n=t[9])*L,p+=n*T,d+=n*F,A+=n*N,w+=n*H,m+=n*O,b+=n*z,E+=n*_,k+=n*G,v+=n*j,B+=n*q,I+=n*V,S+=n*W,K+=n*Z,C+=n*Y,P+=n*J,p+=(n=t[10])*L,d+=n*T,A+=n*F,w+=n*N,m+=n*H,b+=n*O,E+=n*z,k+=n*_,v+=n*G,B+=n*j,I+=n*q,S+=n*V,K+=n*W,C+=n*Z,P+=n*Y,U+=n*J,d+=(n=t[11])*L,A+=n*T,w+=n*F,m+=n*N,b+=n*H,E+=n*O,k+=n*z,v+=n*_,B+=n*G,I+=n*j,S+=n*q,K+=n*V,C+=n*W,P+=n*Z,U+=n*Y,D+=n*J,A+=(n=t[12])*L,w+=n*T,m+=n*F,b+=n*N,E+=n*H,k+=n*O,v+=n*z,B+=n*_,I+=n*G,S+=n*j,K+=n*q,C+=n*V,P+=n*W,U+=n*Z,D+=n*Y,x+=n*J,w+=(n=t[13])*L,m+=n*T,b+=n*F,E+=n*N,k+=n*H,v+=n*O,B+=n*z,I+=n*_,S+=n*G,K+=n*j,C+=n*q,P+=n*V,U+=n*W,D+=n*Z,x+=n*Y,Q+=n*J,m+=(n=t[14])*L,b+=n*T,E+=n*F,k+=n*N,v+=n*H,B+=n*O,I+=n*z,S+=n*_,K+=n*G,C+=n*j,P+=n*q,U+=n*V,D+=n*W,x+=n*Z,Q+=n*Y,R+=n*J,b+=(n=t[15])*L,a+=38*(k+=n*F),o+=38*(v+=n*N),c+=38*(B+=n*H),h+=38*(I+=n*O),u+=38*(S+=n*z),l+=38*(K+=n*_),y+=38*(C+=n*G),f+=38*(P+=n*j),g+=38*(U+=n*q),p+=38*(D+=n*V),d+=38*(x+=n*W),A+=38*(Q+=n*Z),w+=38*(R+=n*Y),m+=38*(M+=n*J),s=(n=(s+=38*(E+=n*T))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s=(n=(s+=i-1+37*(i-1))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s+=i-1+37*(i-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=h,e[5]=u,e[6]=l,e[7]=y,e[8]=f,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function wn(e,t){An(e,t,t)}function mn(e,t){var r,n=Wr();for(r=0;r<16;r++)n[r]=t[r];for(r=253;r>=0;r--)wn(n,n),2!==r&&4!==r&&An(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}function bn(e,t,r){var n,i,s=new Uint8Array(32),a=new Float64Array(80),o=Wr(),c=Wr(),h=Wr(),u=Wr(),l=Wr(),y=Wr();for(i=0;i<31;i++)s[i]=t[i];for(s[31]=127&t[31]|64,s[0]&=248,gn(a,r),i=0;i<16;i++)c[i]=a[i],u[i]=o[i]=h[i]=0;for(o[0]=u[0]=1,i=254;i>=0;--i)un(o,c,n=s[i>>>3]>>>(7&i)&1),un(h,u,n),pn(l,o,h),dn(o,o,h),pn(h,c,u),dn(c,c,u),wn(u,l),wn(y,o),An(o,h,o),An(h,c,l),pn(l,o,h),dn(o,o,h),wn(c,o),dn(h,u,y),An(o,h,Xr),pn(o,o,u),An(h,h,o),An(o,u,y),An(u,c,a),wn(c,l),un(o,c,n),un(h,u,n);for(i=0;i<16;i++)a[i+16]=o[i],a[i+32]=h[i],a[i+48]=c[i],a[i+64]=u[i];var f=a.subarray(32),g=a.subarray(16);return mn(f,f),An(g,g,f),ln(e,g),0}function En(e,t){return bn(e,t,Yr)}var kn=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function vn(e,t,r,n){for(var i,s,a,o,c,h,u,l,y,f,g,p,d,A,w,m,b,E,k,v,B,I,S,K,C,P,U=new Int32Array(16),D=new Int32Array(16),x=e[0],Q=e[1],R=e[2],M=e[3],L=e[4],T=e[5],F=e[6],N=e[7],H=t[0],O=t[1],z=t[2],_=t[3],G=t[4],j=t[5],q=t[6],V=t[7],W=0;n>=128;){for(k=0;k<16;k++)v=8*k+W,U[k]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],D[k]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(k=0;k<80;k++)if(i=x,s=Q,a=R,o=M,c=L,h=T,u=F,N,y=H,f=O,g=z,p=_,d=G,A=j,w=q,V,S=65535&(I=V),K=I>>>16,C=65535&(B=N),P=B>>>16,S+=65535&(I=(G>>>14|L<<18)^(G>>>18|L<<14)^(L>>>9|G<<23)),K+=I>>>16,C+=65535&(B=(L>>>14|G<<18)^(L>>>18|G<<14)^(G>>>9|L<<23)),P+=B>>>16,S+=65535&(I=G&j^~G&q),K+=I>>>16,C+=65535&(B=L&T^~L&F),P+=B>>>16,B=kn[2*k],S+=65535&(I=kn[2*k+1]),K+=I>>>16,C+=65535&B,P+=B>>>16,B=U[k%16],K+=(I=D[k%16])>>>16,C+=65535&B,P+=B>>>16,C+=(K+=(S+=65535&I)>>>16)>>>16,S=65535&(I=E=65535&S|K<<16),K=I>>>16,C=65535&(B=b=65535&C|(P+=C>>>16)<<16),P=B>>>16,S+=65535&(I=(H>>>28|x<<4)^(x>>>2|H<<30)^(x>>>7|H<<25)),K+=I>>>16,C+=65535&(B=(x>>>28|H<<4)^(H>>>2|x<<30)^(H>>>7|x<<25)),P+=B>>>16,K+=(I=H&O^H&z^O&z)>>>16,C+=65535&(B=x&Q^x&R^Q&R),P+=B>>>16,l=65535&(C+=(K+=(S+=65535&I)>>>16)>>>16)|(P+=C>>>16)<<16,m=65535&S|K<<16,S=65535&(I=p),K=I>>>16,C=65535&(B=o),P=B>>>16,K+=(I=E)>>>16,C+=65535&(B=b),P+=B>>>16,Q=i,R=s,M=a,L=o=65535&(C+=(K+=(S+=65535&I)>>>16)>>>16)|(P+=C>>>16)<<16,T=c,F=h,N=u,x=l,O=y,z=f,_=g,G=p=65535&S|K<<16,j=d,q=A,V=w,H=m,k%16==15)for(v=0;v<16;v++)B=U[v],S=65535&(I=D[v]),K=I>>>16,C=65535&B,P=B>>>16,B=U[(v+9)%16],S+=65535&(I=D[(v+9)%16]),K+=I>>>16,C+=65535&B,P+=B>>>16,b=U[(v+1)%16],S+=65535&(I=((E=D[(v+1)%16])>>>1|b<<31)^(E>>>8|b<<24)^(E>>>7|b<<25)),K+=I>>>16,C+=65535&(B=(b>>>1|E<<31)^(b>>>8|E<<24)^b>>>7),P+=B>>>16,b=U[(v+14)%16],K+=(I=((E=D[(v+14)%16])>>>19|b<<13)^(b>>>29|E<<3)^(E>>>6|b<<26))>>>16,C+=65535&(B=(b>>>19|E<<13)^(E>>>29|b<<3)^b>>>6),P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,U[v]=65535&C|P<<16,D[v]=65535&S|K<<16;S=65535&(I=H),K=I>>>16,C=65535&(B=x),P=B>>>16,B=e[0],K+=(I=t[0])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[0]=x=65535&C|P<<16,t[0]=H=65535&S|K<<16,S=65535&(I=O),K=I>>>16,C=65535&(B=Q),P=B>>>16,B=e[1],K+=(I=t[1])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[1]=Q=65535&C|P<<16,t[1]=O=65535&S|K<<16,S=65535&(I=z),K=I>>>16,C=65535&(B=R),P=B>>>16,B=e[2],K+=(I=t[2])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[2]=R=65535&C|P<<16,t[2]=z=65535&S|K<<16,S=65535&(I=_),K=I>>>16,C=65535&(B=M),P=B>>>16,B=e[3],K+=(I=t[3])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[3]=M=65535&C|P<<16,t[3]=_=65535&S|K<<16,S=65535&(I=G),K=I>>>16,C=65535&(B=L),P=B>>>16,B=e[4],K+=(I=t[4])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[4]=L=65535&C|P<<16,t[4]=G=65535&S|K<<16,S=65535&(I=j),K=I>>>16,C=65535&(B=T),P=B>>>16,B=e[5],K+=(I=t[5])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[5]=T=65535&C|P<<16,t[5]=j=65535&S|K<<16,S=65535&(I=q),K=I>>>16,C=65535&(B=F),P=B>>>16,B=e[6],K+=(I=t[6])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[6]=F=65535&C|P<<16,t[6]=q=65535&S|K<<16,S=65535&(I=V),K=I>>>16,C=65535&(B=N),P=B>>>16,B=e[7],K+=(I=t[7])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[7]=N=65535&C|P<<16,t[7]=V=65535&S|K<<16,W+=128,n-=128}return n}function Bn(e,t,r){var n,i=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(i[0]=1779033703,i[1]=3144134277,i[2]=1013904242,i[3]=2773480762,i[4]=1359893119,i[5]=2600822924,i[6]=528734635,i[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,vn(i,s,t,r),r%=128,n=0;n<r;n++)a[n]=t[o-r+n];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,an(a,r-8,o/536870912|0,o<<3),vn(i,s,a,r),n=0;n<8;n++)an(e,8*n,i[n],s[n]);return 0}function In(e,t){var r=Wr(),n=Wr(),i=Wr(),s=Wr(),a=Wr(),o=Wr(),c=Wr(),h=Wr(),u=Wr();dn(r,e[1],e[0]),dn(u,t[1],t[0]),An(r,r,u),pn(n,e[0],e[1]),pn(u,t[0],t[1]),An(n,n,u),An(i,e[3],t[3]),An(i,i,tn),An(s,e[2],t[2]),pn(s,s,s),dn(a,n,r),dn(o,s,i),pn(c,s,i),pn(h,n,r),An(e[0],a,o),An(e[1],h,c),An(e[2],c,o),An(e[3],a,h)}function Sn(e,t,r){var n;for(n=0;n<4;n++)un(e[n],t[n],r)}function Kn(e,t){var r=Wr(),n=Wr(),i=Wr();mn(i,t[2]),An(r,t[0],i),An(n,t[1],i),ln(e,n),e[31]^=fn(r)<<7}function Cn(e,t,r){var n,i;for(cn(e[0],Jr),cn(e[1],$r),cn(e[2],$r),cn(e[3],Jr),i=255;i>=0;--i)Sn(e,t,n=r[i/8|0]>>(7&i)&1),In(t,e),In(e,e),Sn(e,t,n)}function Pn(e,t){var r=[Wr(),Wr(),Wr(),Wr()];cn(r[0],rn),cn(r[1],nn),cn(r[2],$r),An(r[3],rn,nn),Cn(e,r,t)}function Un(e,t,r){var n,i=new Uint8Array(64),s=[Wr(),Wr(),Wr(),Wr()];for(r||Zr(t,32),Bn(i,t,32),i[0]&=248,i[31]&=127,i[31]|=64,Pn(s,i),Kn(e,s),n=0;n<32;n++)t[n+32]=e[n];return 0}var Dn=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function xn(e,t){var r,n,i,s;for(n=63;n>=32;--n){for(r=0,i=n-32,s=n-12;i<s;++i)t[i]+=r-16*t[n]*Dn[i-(n-32)],r=Math.floor((t[i]+128)/256),t[i]-=256*r;t[i]+=r,t[n]=0}for(r=0,i=0;i<32;i++)t[i]+=r-(t[31]>>4)*Dn[i],r=t[i]>>8,t[i]&=255;for(i=0;i<32;i++)t[i]-=r*Dn[i];for(n=0;n<32;n++)t[n+1]+=t[n]>>8,e[n]=255&t[n]}function Qn(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;xn(e,r)}function Rn(e,t){var r=Wr(),n=Wr(),i=Wr(),s=Wr(),a=Wr(),o=Wr(),c=Wr();return cn(e[2],$r),gn(e[1],t),wn(i,e[1]),An(s,i,en),dn(i,i,e[2]),pn(s,e[2],s),wn(a,s),wn(o,a),An(c,o,a),An(r,c,i),An(r,r,s),function(e,t){var r,n=Wr();for(r=0;r<16;r++)n[r]=t[r];for(r=250;r>=0;r--)wn(n,n),1!==r&&An(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}(r,r),An(r,r,i),An(r,r,s),An(r,r,s),An(e[0],r,s),wn(n,e[0]),An(n,n,s),yn(n,i)&&An(e[0],e[0],sn),wn(n,e[0]),An(n,n,s),yn(n,i)?-1:(fn(e[0])===t[31]>>7&&dn(e[0],Jr,e[0]),An(e[3],e[0],e[1]),0)}var Mn=64;function Ln(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}Vr.scalarMult=function(e,t){if(Ln(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return bn(r,e,t),r},Vr.box={},Vr.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){Zr(t,32),En(e,t)}(e,t),{publicKey:e,secretKey:t}},Vr.box.keyPair.fromSecretKey=function(e){if(Ln(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return En(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},Vr.sign=function(e,t){if(Ln(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(Mn+e.length);return function(e,t,r,n){var i,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[Wr(),Wr(),Wr(),Wr()];Bn(a,n,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(i=0;i<r;i++)e[64+i]=t[i];for(i=0;i<32;i++)e[32+i]=a[32+i];for(Bn(c,e.subarray(32),r+32),Qn(c),Pn(u,c),Kn(e,u),i=32;i<64;i++)e[i]=n[i];for(Bn(o,e,r+64),Qn(o),i=0;i<64;i++)h[i]=0;for(i=0;i<32;i++)h[i]=c[i];for(i=0;i<32;i++)for(s=0;s<32;s++)h[i+s]+=o[i]*a[s];xn(e.subarray(32),h)}(r,e,e.length,t),r},Vr.sign.detached=function(e,t){for(var r=Vr.sign(e,t),n=new Uint8Array(Mn),i=0;i<n.length;i++)n[i]=r[i];return n},Vr.sign.detached.verify=function(e,t,r){if(Ln(e,t,r),t.length!==Mn)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var n,i=new Uint8Array(Mn+e.length),s=new Uint8Array(Mn+e.length);for(n=0;n<Mn;n++)i[n]=t[n];for(n=0;n<e.length;n++)i[n+Mn]=e[n];return function(e,t,r,n){var i,s=new Uint8Array(32),a=new Uint8Array(64),o=[Wr(),Wr(),Wr(),Wr()],c=[Wr(),Wr(),Wr(),Wr()];if(r<64)return-1;if(Rn(c,n))return-1;for(i=0;i<r;i++)e[i]=t[i];for(i=0;i<32;i++)e[i+32]=n[i];if(Bn(a,e,r),Qn(a),Cn(o,c,a),Pn(c,t.subarray(32)),In(o,c),Kn(s,o),r-=64,on(t,0,s,0)){for(i=0;i<r;i++)e[i]=0;return-1}for(i=0;i<r;i++)e[i]=t[i+64];return r}(s,i,i.length,r)>=0},Vr.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return Un(e,t),{publicKey:e,secretKey:t}},Vr.sign.keyPair.fromSecretKey=function(e){if(Ln(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},Vr.sign.keyPair.fromSeed=function(e){if(Ln(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),n=0;n<32;n++)r[n]=e[n];return Un(t,r,!0),{publicKey:t,secretKey:r}},Vr.setPRNG=function(e){Zr=e},function(){if(qr&&qr.getRandomValues){Vr.setPRNG((function(e,t){var r,n=new Uint8Array(t);for(r=0;r<t;r+=65536)qr.getRandomValues(n.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=n[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(n)}))}}();const Tn={"2a8648ce3d030107":R.curve.nistP256,"2b81040022":R.curve.nistP384,"2b81040023":R.curve.nistP521,"2b8104000a":R.curve.secp256k1,"2b06010401da470f01":R.curve.ed25519Legacy,"2b060104019755010501":R.curve.curve25519Legacy,"2b2403030208010107":R.curve.brainpoolP256r1,"2b240303020801010b":R.curve.brainpoolP384r1,"2b240303020801010d":R.curve.brainpoolP512r1};class Fn{constructor(e){if(e instanceof Fn)this.oid=e.oid;else if(T.isArray(e)||T.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return T.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return T.uint8ArrayToHex(this.oid)}getName(){const e=Tn[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function Nn(e){let t,r=0;const n=e[0];return n<192?([r]=e,t=1):n<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===n&&(r=T.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function Hn(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):T.concatUint8Array([new Uint8Array([255]),T.writeNumber(e,4)])}function On(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function zn(e){return new Uint8Array([192|e])}function _n(e,t){return T.concatUint8Array([zn(e),Hn(t)])}function Gn(e){return[R.packet.literalData,R.packet.compressedData,R.packet.symmetricallyEncryptedData,R.packet.symEncryptedIntegrityProtectedData,R.packet.aeadEncryptedData].includes(e)}async function jn(e,t){const r=D(e);let n,i;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const o=await r.readByte();let c,h,u=-1,l=-1;l=0,64&o&&(l=1),l?u=63&o:(u=(63&o)>>2,h=3&o);const y=Gn(u);let f,g=null;if(y){if("array"===T.isStream(e)){const e=new a;n=x(e),g=e}else{const e=new TransformStream;n=x(e.writable),g=e.readable}i=t({tag:u,packet:g})}else g=[];do{if(l){const e=await r.readByte();if(f=!1,e<192)c=e;else if(e>=192&&e<224)c=(e-192<<8)+await r.readByte()+192;else if(e>223&&e<255){if(c=1<<(31&e),f=!0,!y)throw new TypeError("This packet type does not support partial lengths.")}else c=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(h){case 0:c=await r.readByte();break;case 1:c=await r.readByte()<<8|await r.readByte();break;case 2:c=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:c=1/0}if(c>0){let e=0;for(;;){n&&await n.ready;const{done:t,value:i}=await r.read();if(t){if(c===1/0)break;throw Error("Unexpected end of packet")}const s=c===1/0?i:i.subarray(0,c-e);if(n?await n.write(s):g.push(s),e+=i.length,e>=c){r.unshift(i.subarray(c-e+i.length));break}}}}while(f);const p=await r.peekBytes(y?1/0:2);return n?(await n.ready,await n.close()):(g=T.concatUint8Array(g),await t({tag:u,packet:g})),!p||!p.length}catch(e){if(n)return await n.abort(e),!0;throw e}finally{n&&await i,r.releaseLock()}}class qn extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,qn),this.name="UnsupportedError"}}class Vn extends qn{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,qn),this.name="UnknownPacketError"}}class Wn{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}
+/*! noble-ed25519 - MIT License (c) 2019 Paul Miller (paulmillr.com) */const Zn=BigInt(0),Yn=BigInt(1),Jn=BigInt(2),$n=BigInt(8),Xn=BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),ei=Object.freeze({a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),P:BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),l:Xn,n:Xn,h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960")}),ti=BigInt("0x10000000000000000000000000000000000000000000000000000000000000000"),ri=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");BigInt("6853475219497561581579357271197624642482790079785650197046958215289687604742");const ni=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),ii=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),si=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),ai=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");class oi{constructor(e,t,r,n){this.x=e,this.y=t,this.z=r,this.t=n}static fromAffine(e){if(!(e instanceof gi))throw new TypeError("ExtendedPoint#fromAffine: expected Point");return e.equals(gi.ZERO)?oi.ZERO:new oi(e.x,e.y,Yn,Si(e.x*e.y))}static toAffineBatch(e){const t=function(e,t=ei.P){const r=Array(e.length),n=e.reduce(((e,n,i)=>n===Zn?e:(r[i]=e,Si(e*n,t))),Yn),i=Ki(n,t);return e.reduceRight(((e,n,i)=>n===Zn?e:(r[i]=Si(e*r[i],t),Si(e*n,t))),i),r}(e.map((e=>e.z)));return e.map(((e,r)=>e.toAffine(t[r])))}static normalizeZ(e){return this.toAffineBatch(e).map(this.fromAffine)}equals(e){hi(e);const{x:t,y:r,z:n}=this,{x:i,y:s,z:a}=e,o=Si(t*a),c=Si(i*n),h=Si(r*a),u=Si(s*n);return o===c&&h===u}negate(){return new oi(Si(-this.x),this.y,this.z,Si(-this.t))}double(){const{x:e,y:t,z:r}=this,{a:n}=ei,i=Si(e*e),s=Si(t*t),a=Si(Jn*Si(r*r)),o=Si(n*i),c=e+t,h=Si(Si(c*c)-i-s),u=o+s,l=u-a,y=o-s,f=Si(h*l),g=Si(u*y),p=Si(h*y),d=Si(l*u);return new oi(f,g,d,p)}add(e){hi(e);const{x:t,y:r,z:n,t:i}=this,{x:s,y:a,z:o,t:c}=e,h=Si((r-t)*(a+s)),u=Si((r+t)*(a-s)),l=Si(u-h);if(l===Zn)return this.double();const y=Si(n*Jn*c),f=Si(i*Jn*o),g=f+y,p=u+h,d=f-y,A=Si(g*l),w=Si(p*d),m=Si(g*d),b=Si(l*p);return new oi(A,w,b,m)}subtract(e){return this.add(e.negate())}precomputeWindow(e){const t=1+256/e,r=[];let n=this,i=n;for(let s=0;s<t;s++){i=n,r.push(i);for(let t=1;t<2**(e-1);t++)i=i.add(n),r.push(i);n=i.double()}return r}wNAF(e,t){!t&&this.equals(oi.BASE)&&(t=gi.BASE);const r=t&&t._WINDOW_SIZE||1;if(256%r)throw Error("Point#wNAF: Invalid precomputation window, must be power of 2");let n=t&&fi.get(t);n||(n=this.precomputeWindow(r),t&&1!==r&&(n=oi.normalizeZ(n),fi.set(t,n)));let i=oi.ZERO,s=oi.BASE;const a=1+256/r,o=2**(r-1),c=BigInt(2**r-1),h=2**r,u=BigInt(r);for(let t=0;t<a;t++){const r=t*o;let a=Number(e&c);e>>=u,a>o&&(a-=h,e+=Yn);const l=r,y=r+Math.abs(a)-1,f=t%2!=0,g=a<0;0===a?s=s.add(ci(f,n[l])):i=i.add(ci(g,n[y]))}return oi.normalizeZ([i,s])[0]}multiply(e,t){return this.wNAF(Qi(e,ei.l),t)}multiplyUnsafe(e){let t=Qi(e,ei.l,!1);const r=oi.BASE,n=oi.ZERO;if(t===Zn)return n;if(this.equals(n)||t===Yn)return this;if(this.equals(r))return this.wNAF(t);let i=n,s=this;for(;t>Zn;)t&Yn&&(i=i.add(s)),s=s.double(),t>>=Yn;return i}isSmallOrder(){return this.multiplyUnsafe(ei.h).equals(oi.ZERO)}isTorsionFree(){let e=this.multiplyUnsafe(ei.l/Jn).double();return ei.l%Jn&&(e=e.add(this)),e.equals(oi.ZERO)}toAffine(e){const{x:t,y:r,z:n}=this,i=this.equals(oi.ZERO);null==e&&(e=i?$n:Ki(n));const s=Si(t*e),a=Si(r*e),o=Si(n*e);if(i)return gi.ZERO;if(o!==Yn)throw Error("invZ was invalid");return new gi(s,a)}fromRistrettoBytes(){li()}toRistrettoBytes(){li()}fromRistrettoHash(){li()}}function ci(e,t){const r=t.negate();return e?r:t}function hi(e){if(!(e instanceof oi))throw new TypeError("ExtendedPoint expected")}function ui(e){if(!(e instanceof yi))throw new TypeError("RistrettoPoint expected")}function li(){throw Error("Legacy method: switch to RistrettoPoint")}oi.BASE=new oi(ei.Gx,ei.Gy,Yn,Si(ei.Gx*ei.Gy)),oi.ZERO=new oi(Zn,Yn,Yn,Zn);class yi{constructor(e){this.ep=e}static calcElligatorRistrettoMap(e){const{d:t}=ei,r=Si(ri*e*e),n=Si((r+Yn)*si);let i=BigInt(-1);const s=Si((i-t*r)*Si(r+t));let{isValid:a,value:o}=Pi(n,s),c=Si(o*e);ki(c)||(c=Si(-c)),a||(o=c),a||(i=r);const h=Si(i*(r-Yn)*ai-s),u=o*o,l=Si((o+o)*s),y=Si(h*ni),f=Si(Yn-u),g=Si(Yn+u);return new oi(Si(l*g),Si(f*y),Si(y*g),Si(l*f))}static hashToCurve(e){const t=Ii((e=xi(e,64)).slice(0,32)),r=this.calcElligatorRistrettoMap(t),n=Ii(e.slice(32,64)),i=this.calcElligatorRistrettoMap(n);return new yi(r.add(i))}static fromHex(e){e=xi(e,32);const{a:t,d:r}=ei,n="RistrettoPoint.fromHex: the hex is not valid encoding of RistrettoPoint",i=Ii(e);if(!function(e,t){if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0}(Ei(i),e)||ki(i))throw Error(n);const s=Si(i*i),a=Si(Yn+t*s),o=Si(Yn-t*s),c=Si(a*a),h=Si(o*o),u=Si(t*r*c-h),{isValid:l,value:y}=Ui(Si(u*h)),f=Si(y*o),g=Si(y*f*u);let p=Si((i+i)*f);ki(p)&&(p=Si(-p));const d=Si(a*g),A=Si(p*d);if(!l||ki(A)||d===Zn)throw Error(n);return new yi(new oi(p,d,Yn,A))}toRawBytes(){let{x:e,y:t,z:r,t:n}=this.ep;const i=Si(Si(r+t)*Si(r-t)),s=Si(e*t),a=Si(s*s),{value:o}=Ui(Si(i*a)),c=Si(o*i),h=Si(o*s),u=Si(c*h*n);let l;if(ki(n*u)){let r=Si(t*ri),n=Si(e*ri);e=r,t=n,l=Si(c*ii)}else l=h;ki(e*u)&&(t=Si(-t));let y=Si((r-t)*l);return ki(y)&&(y=Si(-y)),Ei(y)}toHex(){return wi(this.toRawBytes())}toString(){return this.toHex()}equals(e){ui(e);const t=this.ep,r=e.ep,n=Si(t.x*r.y)===Si(t.y*r.x),i=Si(t.y*r.y)===Si(t.x*r.x);return n||i}add(e){return ui(e),new yi(this.ep.add(e.ep))}subtract(e){return ui(e),new yi(this.ep.subtract(e.ep))}multiply(e){return new yi(this.ep.multiply(e))}multiplyUnsafe(e){return new yi(this.ep.multiplyUnsafe(e))}}yi.BASE=new yi(oi.BASE),yi.ZERO=new yi(oi.ZERO);const fi=new WeakMap;class gi{constructor(e,t){this.x=e,this.y=t}_setWindowSize(e){this._WINDOW_SIZE=e,fi.delete(this)}static fromHex(e,t=!0){const{d:r,P:n}=ei,i=(e=xi(e,32)).slice();i[31]=-129&e[31];const s=vi(i);if(t&&s>=n)throw Error("Expected 0 < hex < P");if(!t&&s>=ti)throw Error("Expected 0 < hex < 2**256");const a=Si(s*s),o=Si(a-Yn),c=Si(r*a+Yn);let{isValid:h,value:u}=Pi(o,c);if(!h)throw Error("Point.fromHex: invalid y coordinate");const l=(u&Yn)===Yn;return!!(128&e[31])!==l&&(u=Si(-u)),new gi(u,s)}static async fromPrivateKey(e){return(await Mi(e)).point}toRawBytes(){const e=Ei(this.y);return e[31]|=this.x&Yn?128:0,e}toHex(){return wi(this.toRawBytes())}toX25519(){const{y:e}=this;return Ei(Si((Yn+e)*Ki(Yn-e)))}isTorsionFree(){return oi.fromAffine(this).isTorsionFree()}equals(e){return this.x===e.x&&this.y===e.y}negate(){return new gi(Si(-this.x),this.y)}add(e){return oi.fromAffine(this).add(oi.fromAffine(e)).toAffine()}subtract(e){return this.add(e.negate())}multiply(e){return oi.fromAffine(this).multiply(e,this).toAffine()}}gi.BASE=new gi(ei.Gx,ei.Gy),gi.ZERO=new gi(Zn,Yn);let pi=class e{constructor(e,t){this.r=e,this.s=t,this.assertValidity()}static fromHex(t){const r=xi(t,64),n=gi.fromHex(r.slice(0,32),!1),i=vi(r.slice(32,64));return new e(n,i)}assertValidity(){const{r:e,s:t}=this;if(!(e instanceof gi))throw Error("Expected Point instance");return Qi(t,ei.l,!1),this}toRawBytes(){const e=new Uint8Array(64);return e.set(this.r.toRawBytes()),e.set(Ei(this.s),32),e}toHex(){return wi(this.toRawBytes())}};function di(...e){if(!e.every((e=>e instanceof Uint8Array)))throw Error("Expected Uint8Array list");if(1===e.length)return e[0];const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}const Ai=Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function wi(e){if(!(e instanceof Uint8Array))throw Error("Uint8Array expected");let t="";for(let r=0;r<e.length;r++)t+=Ai[e[r]];return t}function mi(e){if("string"!=typeof e)throw new TypeError("hexToBytes: expected string, got "+typeof e);if(e.length%2)throw Error("hexToBytes: received invalid unpadded hex");const t=new Uint8Array(e.length/2);for(let r=0;r<t.length;r++){const n=2*r,i=e.slice(n,n+2),s=Number.parseInt(i,16);if(Number.isNaN(s)||s<0)throw Error("Invalid byte sequence");t[r]=s}return t}function bi(e){return mi(e.toString(16).padStart(64,"0"))}function Ei(e){return bi(e).reverse()}function ki(e){return(Si(e)&Yn)===Yn}function vi(e){if(!(e instanceof Uint8Array))throw Error("Expected Uint8Array");return BigInt("0x"+wi(Uint8Array.from(e).reverse()))}const Bi=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function Ii(e){return Si(vi(e)&Bi)}function Si(e,t=ei.P){const r=e%t;return r>=Zn?r:t+r}function Ki(e,t=ei.P){if(e===Zn||t<=Zn)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=Si(e,t),n=t,i=Zn,s=Yn;for(;r!==Zn;){const e=n%r,t=i-s*(n/r);n=r,r=e,i=s,s=t}if(n!==Yn)throw Error("invert: does not exist");return Si(i,t)}function Ci(e,t){const{P:r}=ei;let n=e;for(;t-- >Zn;)n*=n,n%=r;return n}function Pi(e,t){const r=Si(t*t*t),n=function(e){const{P:t}=ei,r=BigInt(5),n=BigInt(10),i=BigInt(20),s=BigInt(40),a=BigInt(80),o=e*e%t*e%t,c=Ci(o,Jn)*o%t,h=Ci(c,Yn)*e%t,u=Ci(h,r)*h%t,l=Ci(u,n)*u%t,y=Ci(l,i)*l%t,f=Ci(y,s)*y%t,g=Ci(f,a)*f%t,p=Ci(g,a)*f%t,d=Ci(p,n)*u%t;return{pow_p_5_8:Ci(d,Jn)*e%t,b2:o}}(e*Si(r*r*t)).pow_p_5_8;let i=Si(e*r*n);const s=Si(t*i*i),a=i,o=Si(i*ri),c=s===e,h=s===Si(-e),u=s===Si(-e*ri);return c&&(i=a),(h||u)&&(i=o),ki(i)&&(i=Si(-i)),{isValid:c||h,value:i}}function Ui(e){return Pi(Yn,e)}function Di(e){return Si(vi(e),ei.l)}function xi(e,t){const r=e instanceof Uint8Array?Uint8Array.from(e):mi(e);if("number"==typeof t&&r.length!==t)throw Error(`Expected ${t} bytes`);return r}function Qi(e,t,r=!0){if(!t)throw new TypeError("Specify max value");if("number"==typeof e&&Number.isSafeInteger(e)&&(e=BigInt(e)),"bigint"==typeof e&&e<t)if(r){if(Zn<e)return e}else if(Zn<=e)return e;throw new TypeError("Expected valid scalar: 0 < scalar < max")}let Ri;async function Mi(e){return function(e){const t=function(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}(e.slice(0,32)),r=e.slice(32,64),n=Di(t),i=gi.BASE.multiply(n),s=i.toRawBytes();return{head:t,prefix:r,scalar:n,point:i,pointBytes:s}}(await Fi.sha512(function(e){if(32!==(e="bigint"==typeof e||"number"==typeof e?bi(Qi(e,ti)):xi(e)).length)throw Error("Expected 32 bytes");return e}(e)))}async function Li(e,t,r){const{r:n,SB:i,msg:s,pub:a}=function(e,t,r){t=xi(t),r instanceof gi||(r=gi.fromHex(r,!1));const{r:n,s:i}=e instanceof pi?e.assertValidity():pi.fromHex(e);return{r:n,s:i,SB:oi.BASE.multiplyUnsafe(i),pub:r,msg:t}}(e,t,r),o=await Fi.sha512(n.toRawBytes(),a.toRawBytes(),s);return function(e,t,r,n){const i=Di(n),s=oi.fromAffine(e).multiplyUnsafe(i);return oi.fromAffine(t).add(s).subtract(r).multiplyUnsafe(ei.h).equals(oi.ZERO)}(a,n,i,o)}gi.BASE._setWindowSize(8);const Ti={node:null,web:"object"==typeof self&&"crypto"in self?self.crypto:void 0},Fi={bytesToHex:wi,hexToBytes:mi,concatBytes:di,getExtendedPublicKey:Mi,mod:Si,invert:Ki,TORSION_SUBGROUP:["0100000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a","0000000000000000000000000000000000000000000000000000000000000080","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05","ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc85","0000000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa"],hashToPrivateScalar:e=>{if((e=xi(e)).length<40||e.length>1024)throw Error("Expected 40-1024 bytes of private key as per FIPS 186");return Si(vi(e),ei.l-Yn)+Yn},randomBytes:(e=32)=>{if(Ti.web)return Ti.web.getRandomValues(new Uint8Array(e));throw Error("The environment doesn't have randomBytes function")},randomPrivateKey:()=>Fi.randomBytes(32),sha512:async(...e)=>{const t=di(...e);if(Ti.web){const e=await Ti.web.subtle.digest("SHA-512",t.buffer);return new Uint8Array(e)}throw Error("The environment doesn't have sha512 function")},precompute(e=8,t=gi.BASE){const r=t.equals(gi.BASE)?t:new gi(t.x,t.y);return r._setWindowSize(e),r.multiply(Jn),r},sha512Sync:void 0};async function Ni(e){switch(e){case R.publicKey.ed25519:try{const e=T.getWebCrypto(),t=await e.generateKey("Ed25519",!0,["sign","verify"]),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);return{A:new Uint8Array(_(n.x)),seed:_(r.d)}}catch(t){if("NotSupportedError"!==t.name&&"OperationError"!==t.name)throw t;const r=Ir(zi(e)),{publicKey:n}=Vr.sign.keyPair.fromSeed(r);return{A:n,seed:r}}case R.publicKey.ed448:{const e=await T.getNobleCurve(R.publicKey.ed448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),seed:t}}default:throw Error("Unsupported EdDSA algorithm")}}async function Hi(e,t,r,n,i,s){if(be.getHashByteLength(t)<be.getHashByteLength(_i(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case R.publicKey.ed25519:try{const t=T.getWebCrypto(),r=ji(e,n,i),a=await t.importKey("jwk",r,"Ed25519",!1,["sign"]);return{RS:new Uint8Array(await t.sign("Ed25519",a,s))}}catch(e){if("NotSupportedError"!==e.name)throw e;const t=T.concatUint8Array([i,n]);return{RS:Vr.sign.detached(s,t)}}case R.publicKey.ed448:return{RS:(await T.getNobleCurve(R.publicKey.ed448)).sign(s,i)};default:throw Error("Unsupported EdDSA algorithm")}}async function Oi(e,t,{RS:r},n,i,s){if(be.getHashByteLength(t)<be.getHashByteLength(_i(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case R.publicKey.ed25519:try{const t=T.getWebCrypto(),n=Gi(e,i),a=await t.importKey("jwk",n,"Ed25519",!1,["verify"]);return await t.verify("Ed25519",a,r,s)}catch(e){if("NotSupportedError"!==e.name)throw e;return Li(r,s,i)}case R.publicKey.ed448:return(await T.getNobleCurve(R.publicKey.ed448)).verify(r,s,i);default:throw Error("Unsupported EdDSA algorithm")}}function zi(e){switch(e){case R.publicKey.ed25519:return 32;case R.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function _i(e){switch(e){case R.publicKey.ed25519:return R.hash.sha256;case R.publicKey.ed448:return R.hash.sha512;default:throw Error("Unknown EdDSA algo")}}Object.defineProperties(Fi,{sha512Sync:{configurable:!1,get:()=>Ri,set(e){Ri||(Ri=e)}}});const Gi=(e,t)=>{if(e===R.publicKey.ed25519){return{kty:"OKP",crv:"Ed25519",x:G(t),ext:!0}}throw Error("Unsupported EdDSA algorithm")},ji=(e,t,r)=>{if(e===R.publicKey.ed25519){const n=Gi(e,t);return n.d=G(r),n}throw Error("Unsupported EdDSA algorithm")};var qi=/*#__PURE__*/Object.freeze({__proto__:null,generate:Ni,getPayloadSize:zi,getPreferredHashAlgo:_i,sign:Hi,validateParams:async function(e,t,r){switch(e){case R.publicKey.ed25519:{const{publicKey:e}=Vr.sign.keyPair.fromSeed(r);return T.equalsUint8Array(t,e)}case R.publicKey.ed448:{const e=(await T.getNobleCurve(R.publicKey.ed448)).getPublicKey(r);return T.equalsUint8Array(t,e)}default:return!1}},verify:Oi});const Vi=T.getWebCrypto();async function Wi(e,t,r){const{keySize:n}=ne(e);if(!T.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");try{const e=await Vi.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),n=await Vi.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),i=await Vi.wrapKey("raw",n,e,{name:"AES-KW"});return new Uint8Array(i)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;T.printDebugError("Browser did not support operation: "+e.message)}return Et(t).encrypt(r)}async function Zi(e,t,r){const{keySize:n}=ne(e);if(!T.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");let i;try{i=await Vi.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return T.printDebugError("Browser did not support operation: "+e.message),Et(t).decrypt(r)}try{const e=await Vi.unwrapKey("raw",r,i,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await Vi.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}var Yi=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:Zi,wrap:Wi});const Ji=T.getWebCrypto();async function $i(e,t,r,n,i){const s=R.read(R.webHash,e);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Ji.importKey("raw",t,"HKDF",!1,["deriveBits"]),o=await Ji.deriveBits({name:"HKDF",hash:s,salt:r,info:n},a,8*i);return new Uint8Array(o)}const Xi={x25519:T.encodeUTF8("OpenPGP X25519"),x448:T.encodeUTF8("OpenPGP X448")};async function es(e){switch(e){case R.publicKey.x25519:try{const e=T.getWebCrypto(),t=await e.generateKey("X25519",!0,["deriveKey","deriveBits"]),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);return{A:new Uint8Array(_(n.x)),k:_(r.d)}}catch(e){if("NotSupportedError"!==e.name)throw e;const t=Ir(32),{publicKey:r}=Vr.box.keyPair.fromSecretKey(t);return{A:r,k:t}}case R.publicKey.x448:{const e=await T.getNobleCurve(R.publicKey.x448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),k:t}}default:throw Error("Unsupported ECDH algorithm")}}function ts(e){switch(e){case R.publicKey.x25519:return 32;case R.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}}async function rs(e,t){switch(e){case R.publicKey.x25519:try{const r=T.getWebCrypto(),n=is(e,t),i=await r.generateKey("X25519",!0,["deriveKey","deriveBits"]),s=await r.importKey("jwk",n,"X25519",!1,[]),a=await r.deriveBits({name:"X25519",public:s},i.privateKey,8*ts(e)),o=await r.exportKey("jwk",i.publicKey);return{sharedSecret:new Uint8Array(a),ephemeralPublicKey:new Uint8Array(_(o.x))}}catch(r){if("NotSupportedError"!==r.name)throw r;const n=Ir(ts(e)),i=Vr.scalarMult(n,t),{publicKey:s}=Vr.box.keyPair.fromSecretKey(n);return{ephemeralPublicKey:s,sharedSecret:i}}case R.publicKey.x448:{const e=await T.getNobleCurve(R.publicKey.x448),r=e.utils.randomPrivateKey(),n=e.getSharedSecret(r,t);return{ephemeralPublicKey:e.getPublicKey(r),sharedSecret:n}}default:throw Error("Unsupported ECDH algorithm")}}async function ns(e,t,r,n){switch(e){case R.publicKey.x25519:try{const i=T.getWebCrypto(),s=function(e,t,r){if(e===R.publicKey.x25519){const n=is(e,t);return n.d=G(r),n}throw Error("Unsupported ECDH algorithm")}(e,r,n),a=is(e,t),o=await i.importKey("jwk",s,"X25519",!1,["deriveKey","deriveBits"]),c=await i.importKey("jwk",a,"X25519",!1,[]),h=await i.deriveBits({name:"X25519",public:c},o,8*ts(e));return new Uint8Array(h)}catch(e){if("NotSupportedError"!==e.name)throw e;return Vr.scalarMult(n,t)}case R.publicKey.x448:return(await T.getNobleCurve(R.publicKey.x448)).getSharedSecret(n,t);default:throw Error("Unsupported ECDH algorithm")}}function is(e,t){if(e===R.publicKey.x25519){return{kty:"OKP",crv:"X25519",x:G(t),ext:!0}}throw Error("Unsupported ECDH algorithm")}var ss=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i){const s=await ns(e,t,n,i),a=T.concatUint8Array([t,n,s]);switch(e){case R.publicKey.x25519:{const e=R.symmetric.aes128,{keySize:t}=ne(e);return Zi(e,await $i(R.hash.sha256,a,new Uint8Array,Xi.x25519,t),r)}case R.publicKey.x448:{const e=R.symmetric.aes256,{keySize:t}=ne(R.symmetric.aes256);return Zi(e,await $i(R.hash.sha512,a,new Uint8Array,Xi.x448,t),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(e,t,r){const{ephemeralPublicKey:n,sharedSecret:i}=await rs(e,r),s=T.concatUint8Array([n,r,i]);switch(e){case R.publicKey.x25519:{const e=R.symmetric.aes128,{keySize:r}=ne(e),i=await $i(R.hash.sha256,s,new Uint8Array,Xi.x25519,r);return{ephemeralPublicKey:n,wrappedKey:await Wi(e,i,t)}}case R.publicKey.x448:{const e=R.symmetric.aes256,{keySize:r}=ne(R.symmetric.aes256),i=await $i(R.hash.sha512,s,new Uint8Array,Xi.x448,r);return{ephemeralPublicKey:n,wrappedKey:await Wi(e,i,t)}}default:throw Error("Unsupported ECDH algorithm")}},generate:es,generateEphemeralEncryptionMaterial:rs,getPayloadSize:ts,recomputeSharedSecret:ns,validateParams:async function(e,t,r){switch(e){case R.publicKey.x25519:{const{publicKey:e}=Vr.box.keyPair.fromSecretKey(r);return T.equalsUint8Array(t,e)}case R.publicKey.x448:{const e=(await T.getNobleCurve(R.publicKey.x448)).getPublicKey(r);return T.equalsUint8Array(t,e)}default:return!1}}});const as=T.getWebCrypto(),os=T.getNodeCrypto(),cs={[R.curve.nistP256]:"P-256",[R.curve.nistP384]:"P-384",[R.curve.nistP521]:"P-521"},hs=os?os.getCurves():[],us=os?{[R.curve.secp256k1]:hs.includes("secp256k1")?"secp256k1":void 0,[R.curve.nistP256]:hs.includes("prime256v1")?"prime256v1":void 0,[R.curve.nistP384]:hs.includes("secp384r1")?"secp384r1":void 0,[R.curve.nistP521]:hs.includes("secp521r1")?"secp521r1":void 0,[R.curve.ed25519Legacy]:hs.includes("ED25519")?"ED25519":void 0,[R.curve.curve25519Legacy]:hs.includes("X25519")?"X25519":void 0,[R.curve.brainpoolP256r1]:hs.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[R.curve.brainpoolP384r1]:hs.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[R.curve.brainpoolP512r1]:hs.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},ls={[R.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:R.publicKey.ecdsa,hash:R.hash.sha256,cipher:R.symmetric.aes128,node:us[R.curve.nistP256],web:cs[R.curve.nistP256],payloadSize:32,sharedSize:256,wireFormatLeadingByte:4},[R.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:R.publicKey.ecdsa,hash:R.hash.sha384,cipher:R.symmetric.aes192,node:us[R.curve.nistP384],web:cs[R.curve.nistP384],payloadSize:48,sharedSize:384,wireFormatLeadingByte:4},[R.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:R.publicKey.ecdsa,hash:R.hash.sha512,cipher:R.symmetric.aes256,node:us[R.curve.nistP521],web:cs[R.curve.nistP521],payloadSize:66,sharedSize:528,wireFormatLeadingByte:4},[R.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:R.publicKey.ecdsa,hash:R.hash.sha256,cipher:R.symmetric.aes128,node:us[R.curve.secp256k1],payloadSize:32,wireFormatLeadingByte:4},[R.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:R.publicKey.eddsaLegacy,hash:R.hash.sha512,node:!1,payloadSize:32,wireFormatLeadingByte:64},[R.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:R.publicKey.ecdh,hash:R.hash.sha256,cipher:R.symmetric.aes128,node:!1,payloadSize:32,wireFormatLeadingByte:64},[R.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:R.publicKey.ecdsa,hash:R.hash.sha256,cipher:R.symmetric.aes128,node:us[R.curve.brainpoolP256r1],payloadSize:32,wireFormatLeadingByte:4},[R.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:R.publicKey.ecdsa,hash:R.hash.sha384,cipher:R.symmetric.aes192,node:us[R.curve.brainpoolP384r1],payloadSize:48,wireFormatLeadingByte:4},[R.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:R.publicKey.ecdsa,hash:R.hash.sha512,cipher:R.symmetric.aes256,node:us[R.curve.brainpoolP512r1],payloadSize:64,wireFormatLeadingByte:4}};class ys{constructor(e){try{this.name=e instanceof Fn?e.getName():R.write(R.curve,e)}catch(e){throw new qn("Unknown curve")}const t=ls[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.wireFormatLeadingByte=t.wireFormatLeadingByte,this.web&&T.getWebCrypto()?this.type="web":this.node&&T.getNodeCrypto()?this.type="node":this.name===R.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===R.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e,t){const r=await as.generateKey({name:"ECDSA",namedCurve:cs[e]},!0,["sign","verify"]),n=await as.exportKey("jwk",r.privateKey),i=await as.exportKey("jwk",r.publicKey);return{publicKey:ds(i,t),privateKey:_(n.d)}}(this.name,this.wireFormatLeadingByte)}catch(e){return T.printDebugError("Browser did not support generating ec key "+e.message),ps(this.name)}case"node":return async function(e){const t=os.createECDH(us[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const{k:e,A:t}=await es(R.publicKey.x25519),r=e.slice().reverse();r[0]=127&r[0]|64,r[31]&=248;return{publicKey:T.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:r}}case"ed25519Legacy":{const{seed:e,A:t}=await Ni(R.publicKey.ed25519);return{publicKey:T.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:e}}default:return ps(this.name)}}}async function fs(e,t,r,n){const i={[R.curve.nistP256]:!0,[R.curve.nistP384]:!0,[R.curve.nistP521]:!0,[R.curve.secp256k1]:!0,[R.curve.curve25519Legacy]:e===R.publicKey.ecdh,[R.curve.brainpoolP256r1]:!0,[R.curve.brainpoolP384r1]:!0,[R.curve.brainpoolP512r1]:!0},s=t.getName();if(!i[s])return!1;if(s===R.curve.curve25519Legacy){n=n.slice().reverse();const{publicKey:e}=Vr.box.keyPair.fromSecretKey(n);r=new Uint8Array(r);const t=new Uint8Array([64,...e]);return!!T.equalsUint8Array(t,r)}const a=(await T.getNobleCurve(R.publicKey.ecdsa,s)).getPublicKey(n,!1);return!!T.equalsUint8Array(a,r)}function gs(e,t){const{payloadSize:r,wireFormatLeadingByte:n,name:i}=e,s=i===R.curve.curve25519Legacy||i===R.curve.ed25519Legacy?r:2*r;if(t[0]!==n||t.length!==s+1)throw Error("Invalid point encoding")}async function ps(e){const t=await T.getNobleCurve(R.publicKey.ecdsa,e),r=t.utils.randomPrivateKey();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function ds(e,t){const r=_(e.x),n=_(e.y),i=new Uint8Array(r.length+n.length+1);return i[0]=t,i.set(r,1),i.set(n,r.length+1),i}function As(e,t,r){const n=e,i=r.slice(1,n+1),s=r.slice(n+1,2*n+1);return{kty:"EC",crv:t,x:G(i),y:G(s),ext:!0}}function ws(e,t,r,n){const i=As(e,t,r);return i.d=G(n),i}const ms=T.getWebCrypto(),bs=T.getNodeCrypto();async function Es(e,t,r,n,i,s){const a=new ys(e);if(gs(a,n),r&&!T.isStream(r)){const e={publicKey:n,privateKey:i};switch(a.type){case"web":try{return await async function(e,t,r,n){const i=e.payloadSize,s=ws(e.payloadSize,cs[e.name],n.publicKey,n.privateKey),a=await ms.importKey("jwk",s,{name:"ECDSA",namedCurve:cs[e.name],hash:{name:R.read(R.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await ms.sign({name:"ECDSA",namedCurve:cs[e.name],hash:{name:R.read(R.webHash,t)}},a,r));return{r:o.slice(0,i),s:o.slice(i,i<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;T.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,n){const i=T.nodeRequire("eckey-utils"),s=T.getNodeBuffer(),{privateKey:a}=i.generateDer({curveName:us[e.name],privateKey:s.from(n)}),o=bs.createSign(R.read(R.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=e.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,t,r,i)}}const o=(await T.getNobleCurve(R.publicKey.ecdsa,a.name)).sign(s,i,{lowS:!1});return{r:vr(o.r,"be",a.payloadSize),s:vr(o.s,"be",a.payloadSize)}}async function ks(e,t,r,n,i,s){const a=new ys(e);gs(a,i);const o=async()=>0===s[0]&&vs(a,r,s.subarray(1),i);if(n&&!T.isStream(n))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:n},i,s){const a=As(e.payloadSize,cs[e.name],s),o=await ms.importKey("jwk",a,{name:"ECDSA",namedCurve:cs[e.name],hash:{name:R.read(R.webHash,e.hash)}},!1,["verify"]),c=T.concatUint8Array([r,n]).buffer;return ms.verify({name:"ECDSA",namedCurve:cs[e.name],hash:{name:R.read(R.webHash,t)}},o,c,i)}(a,t,r,n,i);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;T.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:n},i,s){const a=T.nodeRequire("eckey-utils"),o=T.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:us[e.name],publicKey:o.from(s)}),h=bs.createVerify(R.read(R.hash,t));h.write(i),h.end();const u=T.concatUint8Array([r,n]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(e){return!1}}(a,t,r,n,i);return e||o()}}return await vs(a,r,s,i)||o()}async function vs(e,t,r,n){return(await T.getNobleCurve(R.publicKey.ecdsa,e.name)).verify(T.concatUint8Array([t.r,t.s]),r,n,{lowS:!1})}var Bs=/*#__PURE__*/Object.freeze({__proto__:null,sign:Es,validateParams:async function(e,t,r){const n=new ys(e);if(n.keyType!==R.publicKey.ecdsa)return!1;switch(n.type){case"web":case"node":{const n=Ir(8),i=R.hash.sha256,s=await be.digest(i,n);try{const a=await Es(e,i,n,t,r,s);return await ks(e,i,a,n,t,s)}catch(e){return!1}}default:return fs(R.publicKey.ecdsa,e,t,r)}},verify:ks});var Is=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,n,i,s){if(gs(new ys(e),n),be.getHashByteLength(t)<be.getHashByteLength(R.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const{RS:a}=await Hi(R.publicKey.ed25519,t,0,n.subarray(1),i,s);return{r:a.subarray(0,32),s:a.subarray(32)}},validateParams:async function(e,t,r){if(e.getName()!==R.curve.ed25519Legacy)return!1;const{publicKey:n}=Vr.sign.keyPair.fromSeed(r),i=new Uint8Array([64,...n]);return T.equalsUint8Array(t,i)},verify:async function(e,t,{r,s:n},i,s,a){if(gs(new ys(e),s),be.getHashByteLength(t)<be.getHashByteLength(R.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=T.concatUint8Array([r,n]);return Oi(R.publicKey.ed25519,t,{RS:o},0,s.subarray(1),a)}});function Ss(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}function Ks(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const n=e.subarray(t-r),i=new Uint8Array(r).fill(r);if(T.equalsUint8Array(n,i))return e.subarray(0,t-r)}}throw Error("Invalid padding")}var Cs=/*#__PURE__*/Object.freeze({__proto__:null,decode:Ks,encode:Ss});const Ps=T.getWebCrypto(),Us=T.getNodeCrypto();function Ds(e,t,r,n){return T.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),T.stringToUint8Array("Anonymous Sender    "),r.replacementFingerprint||n])}async function xs(e,t,r,n,i=!1,s=!1){let a;if(i){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await be.digest(e,T.concatUint8Array([new Uint8Array([0,0,0,1]),t,n]))).subarray(0,r)}async function Qs(e,t){switch(e.type){case"curve25519Legacy":{const{sharedSecret:r,ephemeralPublicKey:n}=await rs(R.publicKey.x25519,t.subarray(1));return{publicKey:T.concatUint8Array([new Uint8Array([e.wireFormatLeadingByte]),n]),sharedKey:r}}case"web":if(e.web&&T.getWebCrypto())try{return await async function(e,t){const r=As(e.payloadSize,e.web,t);let n=Ps.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),i=Ps.importKey("jwk",r,{name:"ECDH",namedCurve:e.web},!1,[]);[n,i]=await Promise.all([n,i]);let s=Ps.deriveBits({name:"ECDH",namedCurve:e.web,public:i},n.privateKey,e.sharedSize),a=Ps.exportKey("jwk",n.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(ds(a,e.wireFormatLeadingByte));return{publicKey:c,sharedKey:o}}(e,t)}catch(r){return T.printDebugError(r),Ls(e,t)}break;case"node":return async function(e,t){const r=Us.createECDH(e.node);r.generateKeys();const n=new Uint8Array(r.computeSecret(t)),i=new Uint8Array(r.getPublicKey());return{publicKey:i,sharedKey:n}}(e,t);default:return Ls(e,t)}}async function Rs(e,t,r,n){if(n.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(n,e.payloadSize-n.length),n=t}switch(e.type){case"curve25519Legacy":{const e=n.slice().reverse();return{secretKey:e,sharedKey:await ns(R.publicKey.x25519,t.subarray(1),r.subarray(1),e)}}case"web":if(e.web&&T.getWebCrypto())try{return await async function(e,t,r,n){const i=ws(e.payloadSize,e.web,r,n);let s=Ps.importKey("jwk",i,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const a=As(e.payloadSize,e.web,t);let o=Ps.importKey("jwk",a,{name:"ECDH",namedCurve:e.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=Ps.deriveBits({name:"ECDH",namedCurve:e.web,public:o},s,e.sharedSize),h=Ps.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:_(h.d),sharedKey:u}}(e,t,r,n)}catch(r){return T.printDebugError(r),Ms(e,t,n)}break;case"node":return async function(e,t,r){const n=Us.createECDH(e.node);n.setPrivateKey(r);const i=new Uint8Array(n.computeSecret(t));return{secretKey:new Uint8Array(n.getPrivateKey()),sharedKey:i}}(e,t,n);default:return Ms(e,t,n)}}async function Ms(e,t,r){return{secretKey:r,sharedKey:(await T.getNobleCurve(R.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function Ls(e,t){const r=await T.getNobleCurve(R.publicKey.ecdh,e.name),{publicKey:n,privateKey:i}=await e.genKeyPair();return{publicKey:n,sharedKey:r.getSharedSecret(i,t).subarray(1)}}var Ts=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i,s,a){const o=new ys(e);gs(o,i),gs(o,r);const{sharedKey:c}=await Rs(o,r,i,s),h=Ds(R.publicKey.ecdh,e,t,a),{keySize:u}=ne(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await xs(t.hash,c,u,h,1===e,2===e);return Ks(await Zi(t.cipher,r,n))}catch(e){l=e}throw l},encrypt:async function(e,t,r,n,i){const s=Ss(r),a=new ys(e);gs(a,n);const{publicKey:o,sharedKey:c}=await Qs(a,n),h=Ds(R.publicKey.ecdh,e,t,i),{keySize:u}=ne(t.cipher),l=await xs(t.hash,c,u,h);return{publicKey:o,wrappedKey:await Wi(t.cipher,l,s)}},validateParams:async function(e,t,r){return fs(R.publicKey.ecdh,e,t,r)}}),Fs=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:ys,ecdh:Ts,ecdhX:ss,ecdsa:Bs,eddsa:qi,eddsaLegacy:Is,generate:async function(e){const t=new ys(e),{oid:r,hash:n,cipher:i}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:T.leftPad(s.privateKey,t.payloadSize),hash:n,cipher:i}},getPreferredHashAlgo:function(e){return ls[e.getName()].hash}});const Ns=BigInt(0),Hs=BigInt(1);var Os=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,n,i,s){const a=BigInt(0);let o,c,h,u;n=gr(n),i=gr(i),r=gr(r),s=gr(s),r=pr(r,n),s=pr(s,i);const l=pr(gr(t.subarray(0,kr(i))),i);for(;;){if(o=Sr(Hs,i),c=pr(dr(r,o,n),i),c===a)continue;const e=pr(s*c,i);if(u=pr(l+e,i),h=pr(wr(o,i)*u,i),h!==a)break}return{r:vr(c,"be",kr(n)),s:vr(h,"be",kr(n))}},validateParams:async function(e,t,r,n,i){if(e=gr(e),t=gr(t),r=gr(r),n=gr(n),r<=Hs||r>=e)return!1;if(pr(e-Hs,t)!==Ns)return!1;if(dr(r,t,e)!==Hs)return!1;const s=BigInt(Er(t));if(s<BigInt(150)||!Ur(t,null,32))return!1;i=gr(i);const a=BigInt(2);return n===dr(r,t*Sr(a<<s-Hs,a<<s)+i,e)},verify:async function(e,t,r,n,i,s,a,o){if(t=gr(t),r=gr(r),s=gr(s),a=gr(a),i=gr(i),o=gr(o),t<=Ns||t>=a||r<=Ns||r>=a)return T.printDebug("invalid DSA Signature"),!1;const c=pr(gr(n.subarray(0,kr(a))),a),h=wr(r,a);if(h===Ns)return T.printDebug("invalid DSA Signature"),!1;i=pr(i,s),o=pr(o,s);const u=pr(c*h,a),l=pr(t*h,a);return pr(pr(dr(i,u,s)*dr(o,l,s),s),a)===t}});const zs=new Set([R.hash.sha1,R.hash.sha256,R.hash.sha512]),_s=T.getWebCrypto(),Gs=T.getNodeCrypto();var js={rsa:_r,elgamal:jr,elliptic:Fs,dsa:Os,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){if(!zs.has(e))throw Error("Unsupported hash algorithm.");const t=R.read(R.webHash,e),r=_s||Gs.webcrypto.subtle,n=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),i=await r.exportKey("raw",n);return new Uint8Array(i)},sign:async function(e,t,r){if(!zs.has(e))throw Error("Unsupported hash algorithm.");const n=R.read(R.webHash,e),i=_s||Gs.webcrypto.subtle,s=await i.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["sign"]),a=await i.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(e,t,r,n){if(!zs.has(e))throw Error("Unsupported hash algorithm.");const i=R.read(R.webHash,e),s=_s||Gs.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["verify"]);return s.verify("HMAC",a,r,n)}})};class qs{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!T.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return T.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}var Vs=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(e,t){let r=0;switch(e){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:case R.publicKey.rsaSign:{const e=T.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case R.publicKey.dsa:case R.publicKey.ecdsa:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const n=T.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case R.publicKey.eddsaLegacy:{let e=T.readMPI(t.subarray(r));r+=e.length+2,e=T.leftPad(e,32);let n=T.readMPI(t.subarray(r));return r+=n.length+2,n=T.leftPad(n,32),{read:r,signatureParams:{r:e,s:n}}}case R.publicKey.ed25519:case R.publicKey.ed448:{const n=2*js.elliptic.eddsa.getPayloadSize(e),i=T.readExactSubarray(t,r,r+n);return r+=i.length,{read:r,signatureParams:{RS:i}}}case R.publicKey.hmac:{const e=new qs;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}default:throw new qn("Unknown signature algorithm.")}},sign:async function(e,t,r,n,i,s){if(!r||!n)throw Error("Missing key parameters");switch(e){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:case R.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:h,u}=n;return{s:await js.rsa.sign(t,i,e,a,o,c,h,u,s)}}case R.publicKey.dsa:{const{g:e,p:i,q:a}=r,{x:o}=n;return js.dsa.sign(t,s,e,i,a,o)}case R.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case R.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=n;return js.elliptic.ecdsa.sign(e,t,i,a,o,s)}case R.publicKey.eddsaLegacy:{const{oid:e,Q:a}=r,{seed:o}=n;return js.elliptic.eddsaLegacy.sign(e,t,i,a,o,s)}case R.publicKey.ed25519:case R.publicKey.ed448:{const{A:a}=r,{seed:o}=n;return js.elliptic.eddsa.sign(e,t,i,a,o,s)}case R.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=n,i=await js.hmac.sign(e.getValue(),t,s);return{mac:new qs(i)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(e,t,r,n,i,s,a){switch(e){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:case R.publicKey.rsaSign:{const{n:e,e:i}=n,o=T.leftPad(r.s,e.length);return js.rsa.verify(t,s,o,e,i,a)}case R.publicKey.dsa:{const{g:e,p:i,q:s,y:o}=n,{r:c,s:h}=r;return js.dsa.verify(t,c,h,a,e,i,s,o)}case R.publicKey.ecdsa:{const{oid:e,Q:i}=n,o=new js.elliptic.CurveWithOID(e).payloadSize,c=T.leftPad(r.r,o),h=T.leftPad(r.s,o);return js.elliptic.ecdsa.verify(e,t,{r:c,s:h},s,i,a)}case R.publicKey.eddsaLegacy:{const{oid:e,Q:i}=n;return js.elliptic.eddsaLegacy.verify(e,t,r,s,i,a)}case R.publicKey.ed25519:case R.publicKey.ed448:{const{A:i}=n;return js.elliptic.eddsa.verify(e,t,r,s,i,a)}case R.publicKey.hmac:{if(!i)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=n,{keyMaterial:t}=i;return js.hmac.verify(e.getValue(),t,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class Ws{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return T.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class Zs{constructor(e){if(e){const{version:t,hash:r,cipher:n,replacementFingerprint:i}=e;this.version=t||1,this.hash=r,this.cipher=n,this.replacementFingerprint=i}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new qn("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const n=t-r+1;this.replacementFingerprint=e.slice(r,r+n),r+=n}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return T.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const Ys=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=R.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return R.read(e,this.data)}getValue(){return this.data}},Js=Ys(R.aead),$s=Ys(R.symmetric),Xs=Ys(R.hash);class ea{static fromObject({wrappedKey:e,algorithm:t}){const r=new ea;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=T.readExactSubarray(e,t,t+r),t+=r}write(){return T.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function ta(e,t){const r=Ir(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await be.sha256(r)}}}function ra(e){const{keySize:t}=ne(e);return Ir(t)}function na(e){const t=R.read(R.aead,e);return lr[t]}function ia(e){try{e.getName()}catch(e){throw new qn("Unknown curve OID")}}function sa(e,t){switch(e){case R.publicKey.ecdsa:case R.publicKey.ecdh:case R.publicKey.eddsaLegacy:return new js.elliptic.CurveWithOID(t).payloadSize;case R.publicKey.ed25519:case R.publicKey.ed448:return js.elliptic.eddsa.getPayloadSize(e);case R.publicKey.x25519:case R.publicKey.x448:return js.elliptic.ecdhX.getPayloadSize(e);default:throw Error("Unknown elliptic algo")}}var aa=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(e,t,r,n){switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:return js.rsa.generate(t,65537).then((({n:e,e:t,d:r,p:n,q:i,u:s})=>({privateParams:{d:r,p:n,q:i,u:s},publicParams:{n:e,e:t}})));case R.publicKey.ecdsa:return js.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new Fn(e),Q:t}})));case R.publicKey.eddsaLegacy:return js.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new Fn(e),Q:t}})));case R.publicKey.ecdh:return js.elliptic.generate(r).then((({oid:e,Q:t,secret:r,hash:n,cipher:i})=>({privateParams:{d:r},publicParams:{oid:new Fn(e),Q:t,kdfParams:new Zs({hash:n,cipher:i})}})));case R.publicKey.ed25519:case R.publicKey.ed448:return js.elliptic.eddsa.generate(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case R.publicKey.x25519:case R.publicKey.x448:return js.elliptic.ecdhX.generate(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case R.publicKey.hmac:return ta(await js.hmac.generate(n),new Xs(n));case R.publicKey.aead:return ta(ra(n),new $s(n));case R.publicKey.dsa:case R.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:ra,getAEADMode:na,getCipherParams:ne,getCurvePayloadSize:sa,getPreferredCurveHashAlgo:function(e,t){switch(e){case R.publicKey.ecdsa:case R.publicKey.eddsaLegacy:return js.elliptic.getPreferredHashAlgo(t);case R.publicKey.ed25519:case R.publicKey.ed448:return js.elliptic.eddsa.getPreferredHashAlgo(e);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(e){const{blockSize:t}=ne(e),r=await Ir(t),n=new Uint8Array([r[r.length-2],r[r.length-1]]);return T.concat([r,n])},parseEncSessionKeyParams:function(e,t){let r=0;switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:return{c:T.readMPI(t.subarray(r))};case R.publicKey.elgamal:{const e=T.readMPI(t.subarray(r));r+=e.length+2;return{c1:e,c2:T.readMPI(t.subarray(r))}}case R.publicKey.ecdh:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const n=new Ws;return n.read(t.subarray(r)),{V:e,C:n}}case R.publicKey.x25519:case R.publicKey.x448:{const n=sa(e),i=T.readExactSubarray(t,r,r+n);r+=i.length;const s=new ea;return s.read(t.subarray(r)),{ephemeralPublicKey:i,C:s}}case R.publicKey.aead:{const e=new Js;r+=e.read(t.subarray(r));const{ivLength:n}=na(e.getValue()),i=t.subarray(r,r+n);r+=n;const s=new qs;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:i,c:s}}default:throw new qn("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(e,t,r){let n=0;switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:{const e=T.readMPI(t.subarray(n));n+=e.length+2;const r=T.readMPI(t.subarray(n));n+=r.length+2;const i=T.readMPI(t.subarray(n));n+=i.length+2;const s=T.readMPI(t.subarray(n));return n+=s.length+2,{read:n,privateParams:{d:e,p:r,q:i,u:s}}}case R.publicKey.dsa:case R.publicKey.elgamal:{const e=T.readMPI(t.subarray(n));return n+=e.length+2,{read:n,privateParams:{x:e}}}case R.publicKey.ecdsa:case R.publicKey.ecdh:{const i=sa(e,r.oid);let s=T.readMPI(t.subarray(n));return n+=s.length+2,s=T.leftPad(s,i),{read:n,privateParams:{d:s}}}case R.publicKey.eddsaLegacy:{const i=sa(e,r.oid);if(r.oid.getName()!==R.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let s=T.readMPI(t.subarray(n));return n+=s.length+2,s=T.leftPad(s,i),{read:n,privateParams:{seed:s}}}case R.publicKey.ed25519:case R.publicKey.ed448:{const r=sa(e),i=T.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{seed:i}}}case R.publicKey.x25519:case R.publicKey.x448:{const r=sa(e),i=T.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{k:i}}}case R.publicKey.hmac:{const{cipher:e}=r,i=be.getHashByteLength(e.getValue()),s=t.subarray(n,n+32);n+=32;const a=t.subarray(n,n+i);return n+=i,{read:n,privateParams:{hashSeed:s,keyMaterial:a}}}case R.publicKey.aead:{const{cipher:e}=r,i=t.subarray(n,n+32);n+=32;const{keySize:s}=ne(e.getValue()),a=t.subarray(n,n+s);return n+=s,{read:n,privateParams:{hashSeed:i,keyMaterial:a}}}default:throw new qn("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(e,t){let r=0;switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const n=T.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{n:e,e:n}}}case R.publicKey.dsa:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const n=T.readMPI(t.subarray(r));r+=n.length+2;const i=T.readMPI(t.subarray(r));r+=i.length+2;const s=T.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:n,g:i,y:s}}}case R.publicKey.elgamal:{const e=T.readMPI(t.subarray(r));r+=e.length+2;const n=T.readMPI(t.subarray(r));r+=n.length+2;const i=T.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{p:e,g:n,y:i}}}case R.publicKey.ecdsa:{const e=new Fn;r+=e.read(t),ia(e);const n=T.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{oid:e,Q:n}}}case R.publicKey.eddsaLegacy:{const e=new Fn;if(r+=e.read(t),ia(e),e.getName()!==R.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let n=T.readMPI(t.subarray(r));return r+=n.length+2,n=T.leftPad(n,33),{read:r,publicParams:{oid:e,Q:n}}}case R.publicKey.ecdh:{const e=new Fn;r+=e.read(t),ia(e);const n=T.readMPI(t.subarray(r));r+=n.length+2;const i=new Zs;return r+=i.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:n,kdfParams:i}}}case R.publicKey.ed25519:case R.publicKey.ed448:case R.publicKey.x25519:case R.publicKey.x448:{const n=T.readExactSubarray(t,r,r+sa(e));return r+=n.length,{read:r,publicParams:{A:n}}}case R.publicKey.hmac:case R.publicKey.aead:{const e=new $s;r+=e.read(t);const n=be.getHashByteLength(R.hash.sha256),i=t.subarray(r,r+n);return r+=n,{read:r,publicParams:{cipher:e,digest:i}}}default:throw new qn("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(e,t,r,n,i,s){switch(e){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:{const{c:e}=n,{n:i,e:a}=t,{d:o,p:c,q:h,u}=r;return js.rsa.decrypt(e,i,a,o,c,h,u,s)}case R.publicKey.elgamal:{const{c1:e,c2:i}=n,a=t.p,o=r.x;return js.elgamal.decrypt(e,i,a,o,s)}case R.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:h}=n;return js.elliptic.ecdh.decrypt(e,a,c,h.data,s,o,i)}case R.publicKey.x25519:case R.publicKey.x448:{const{A:i}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=n;if(null!==o.algorithm&&!T.isAES(o.algorithm))throw Error("AES session key expected");return js.elliptic.ecdhX.decrypt(e,a,o.wrappedKey,i,s)}case R.publicKey.aead:{const{cipher:e}=t,i=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=n,h=na(a.getValue());return(await h(i,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(e,t,r,n,i,s){switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await js.rsa.encrypt(i,e,t)}}case R.publicKey.elgamal:{const{p:e,g:t,y:n}=r;return js.elgamal.encrypt(i,e,t,n)}case R.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:n}=r,{publicKey:a,wrappedKey:o}=await js.elliptic.ecdh.encrypt(e,n,i,t,s);return{V:a,C:new Ws(o)}}case R.publicKey.x25519:case R.publicKey.x448:{if(t&&!T.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:n}=r,{ephemeralPublicKey:s,wrappedKey:a}=await js.elliptic.ecdhX.encrypt(e,i,n);return{ephemeralPublicKey:s,C:ea.fromObject({algorithm:t,wrappedKey:a})}}case R.publicKey.aead:{if(!n)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=n,a=M.preferredAEADAlgorithm,o=na(M.preferredAEADAlgorithm),{ivLength:c}=o,h=Ir(c),u=await o(t,s),l=await u.encrypt(i,h,new Uint8Array);return{aeadMode:new Js(a),iv:h,c:new qs(l)}}default:return[]}},serializeParams:function(e,t){const r=new Set([R.publicKey.ed25519,R.publicKey.x25519,R.publicKey.ed448,R.publicKey.x448,R.publicKey.aead,R.publicKey.hmac]),n=Object.keys(t).map((n=>{const i=t[n];return T.isUint8Array(i)?r.has(e)?i:T.uint8ArrayToMPI(i):i.write()}));return T.concatUint8Array(n)},validateParams:async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:{const{n:e,e:n}=t,{d:i,p:s,q:a,u:o}=r;return js.rsa.validateParams(e,n,i,s,a,o)}case R.publicKey.dsa:{const{p:e,q:n,g:i,y:s}=t,{x:a}=r;return js.dsa.validateParams(e,n,i,s,a)}case R.publicKey.elgamal:{const{p:e,g:n,y:i}=t,{x:s}=r;return js.elgamal.validateParams(e,n,i,s)}case R.publicKey.ecdsa:case R.publicKey.ecdh:{const n=js.elliptic[R.read(R.publicKey,e)],{oid:i,Q:s}=t,{d:a}=r;return n.validateParams(i,s,a)}case R.publicKey.eddsaLegacy:{const{Q:e,oid:n}=t,{seed:i}=r;return js.elliptic.eddsaLegacy.validateParams(n,e,i)}case R.publicKey.ed25519:case R.publicKey.ed448:{const{A:n}=t,{seed:i}=r;return js.elliptic.eddsa.validateParams(e,n,i)}case R.publicKey.x25519:case R.publicKey.x448:{const{A:n}=t,{k:i}=r;return js.elliptic.ecdhX.validateParams(e,n,i)}case R.publicKey.hmac:{const{cipher:e,digest:n}=t,{hashSeed:i,keyMaterial:s}=r;return be.getHashByteLength(e.getValue())===s.length&&T.equalsUint8Array(n,await be.sha256(i))}case R.publicKey.aead:{const{cipher:e,digest:n}=t,{hashSeed:i,keyMaterial:s}=r,{keySize:a}=ne(e.getValue());return a===s.length&&T.equalsUint8Array(n,await be.sha256(i))}default:throw Error("Unknown public key algorithm.")}}});const oa={cipher:ie,hash:be,mode:lr,publicKey:js,signature:Vs,random:Kr,pkcs1:Lr,pkcs5:Cs,aesKW:Yi};Object.assign(oa,aa);class ca extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ca),this.name="Argon2OutOfMemoryError"}}let ha,ua,la=2<<19;class ya{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return la}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){la=e}static reloadWasmModule(){ha&&(ua=ha(),ua.catch((()=>{})))}constructor(e=M){const{passes:t,parallelism:r,memoryExponent:n}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=n}generateSalt(){this.salt=oa.random.getRandomBytes(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([R.write(R.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return T.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{ha=ha||(await Promise.resolve().then((function(){return Df}))).default,ua=ua||ha();const n=await ua,i=n({version:19,type:2,password:T.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>ya.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&ya.reloadWasmModule(),i}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new ca("Could not allocate required memory for Argon2"):e}}}class fa{constructor(e,t=M){this.algorithm=R.hash.sha256,this.type=R.read(R.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=oa.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==T.uint8ArrayToString(e.subarray(t,t+3)))throw new qn("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new qn("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new qn("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...T.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([R.write(R.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return T.concatUint8Array(e)}async produceKey(e,t){e=T.encodeUTF8(e);const r=[];let n=0,i=0;for(;n<t;){let t;switch(this.type){case"simple":t=T.concatUint8Array([new Uint8Array(i),e]);break;case"salted":t=T.concatUint8Array([new Uint8Array(i),this.salt,e]);break;case"iterated":{const r=T.concatUint8Array([this.salt,e]);let n=r.length;const s=Math.max(this.getCount(),n);t=new Uint8Array(i+s),t.set(r,i);for(let e=i+n;e<s;e+=n,n*=2)t.copyWithin(e,i,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await oa.hash.digest(this.algorithm,t);r.push(s),n+=s.length,i++}return T.concatUint8Array(r).subarray(0,t)}}const ga=new Set([R.s2k.argon2,R.s2k.iterated]);function pa(e,t=M){switch(e){case R.s2k.argon2:return new ya(t);case R.s2k.iterated:case R.s2k.gnu:case R.s2k.salted:case R.s2k.simple:return new fa(e,t);default:throw new qn("Unsupported S2K type")}}function da(e){const{s2kType:t}=e;if(!ga.has(t))throw Error("The provided `config.s2kType` value is not allowed");return pa(t,e)}var Aa=Uint8Array,wa=Uint16Array,ma=Uint32Array,ba=new Aa([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Ea=new Aa([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),ka=new Aa([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),va=function(e,t){for(var r=new wa(31),n=0;n<31;++n)r[n]=t+=1<<e[n-1];var i=new ma(r[30]);for(n=1;n<30;++n)for(var s=r[n];s<r[n+1];++s)i[s]=s-r[n]<<5|n;return[r,i]},Ba=va(ba,2),Ia=Ba[0],Sa=Ba[1];Ia[28]=258,Sa[258]=28;for(var Ka=va(Ea,0),Ca=Ka[0],Pa=Ka[1],Ua=new wa(32768),Da=0;Da<32768;++Da){var xa=(43690&Da)>>>1|(21845&Da)<<1;xa=(61680&(xa=(52428&xa)>>>2|(13107&xa)<<2))>>>4|(3855&xa)<<4,Ua[Da]=((65280&xa)>>>8|(255&xa)<<8)>>>1}var Qa=function(e,t,r){for(var n=e.length,i=0,s=new wa(t);i<n;++i)e[i]&&++s[e[i]-1];var a,o=new wa(t);for(i=0;i<t;++i)o[i]=o[i-1]+s[i-1]<<1;if(r){a=new wa(1<<t);var c=15-t;for(i=0;i<n;++i)if(e[i])for(var h=i<<4|e[i],u=t-e[i],l=o[e[i]-1]++<<u,y=l|(1<<u)-1;l<=y;++l)a[Ua[l]>>>c]=h}else for(a=new wa(n),i=0;i<n;++i)e[i]&&(a[i]=Ua[o[e[i]-1]++]>>>15-e[i]);return a},Ra=new Aa(288);for(Da=0;Da<144;++Da)Ra[Da]=8;for(Da=144;Da<256;++Da)Ra[Da]=9;for(Da=256;Da<280;++Da)Ra[Da]=7;for(Da=280;Da<288;++Da)Ra[Da]=8;var Ma=new Aa(32);for(Da=0;Da<32;++Da)Ma[Da]=5;var La=/*#__PURE__*/Qa(Ra,9,0),Ta=/*#__PURE__*/Qa(Ra,9,1),Fa=/*#__PURE__*/Qa(Ma,5,0),Na=/*#__PURE__*/Qa(Ma,5,1),Ha=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},Oa=function(e,t,r){var n=t/8|0;return(e[n]|e[n+1]<<8)>>(7&t)&r},za=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},_a=function(e){return(e+7)/8|0},Ga=function(e,t,r){(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length);var n=new(2==e.BYTES_PER_ELEMENT?wa:4==e.BYTES_PER_ELEMENT?ma:Aa)(r-t);return n.set(e.subarray(t,r)),n},ja=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],qa=function(e,t,r){var n=Error(t||ja[e]);if(n.code=e,Error.captureStackTrace&&Error.captureStackTrace(n,qa),!r)throw n;return n},Va=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>>8},Wa=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>>8,e[n+2]|=r>>>16},Za=function(e,t){for(var r=[],n=0;n<e.length;++n)e[n]&&r.push({s:n,f:e[n]});var i=r.length,s=r.slice();if(!i)return[ro,0];if(1==i){var a=new Aa(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=i-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var y=s[0].s;for(n=1;n<i;++n)s[n].s>y&&(y=s[n].s);var f=new wa(y+1),g=Ya(r[u-1],f,0);if(g>t){n=0;var p=0,d=g-t,A=1<<d;for(s.sort((function(e,t){return f[t.s]-f[e.s]||e.f-t.f}));n<i;++n){var w=s[n].s;if(!(f[w]>t))break;p+=A-(1<<g-f[w]),f[w]=t}for(p>>>=d;p>0;){var m=s[n].s;f[m]<t?p-=1<<t-f[m]++-1:++n}for(;n>=0&&p;--n){var b=s[n].s;f[b]==t&&(--f[b],++p)}g=t}return[new Aa(f),g]},Ya=function(e,t,r){return-1==e.s?Math.max(Ya(e.l,t,r+1),Ya(e.r,t,r+1)):t[e.s]=r},Ja=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new wa(++t),n=0,i=e[0],s=1,a=function(e){r[n++]=e},o=1;o<=t;++o)if(e[o]==i&&o!=t)++s;else{if(!i&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(i),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(i);s=1,i=e[o]}return[r.subarray(0,n),t]},$a=function(e,t){for(var r=0,n=0;n<t.length;++n)r+=e[n]*t[n];return r},Xa=function(e,t,r){var n=r.length,i=_a(t+2);e[i]=255&n,e[i+1]=n>>>8,e[i+2]=255^e[i],e[i+3]=255^e[i+1];for(var s=0;s<n;++s)e[i+s+4]=r[s];return 8*(i+4+n)},eo=function(e,t,r,n,i,s,a,o,c,h,u){Va(t,u++,r),++i[256];for(var l=Za(i,15),y=l[0],f=l[1],g=Za(s,15),p=g[0],d=g[1],A=Ja(y),w=A[0],m=A[1],b=Ja(p),E=b[0],k=b[1],v=new wa(19),B=0;B<w.length;++B)v[31&w[B]]++;for(B=0;B<E.length;++B)v[31&E[B]]++;for(var I=Za(v,7),S=I[0],K=I[1],C=19;C>4&&!S[ka[C-1]];--C);var P,U,D,x,Q=h+5<<3,R=$a(i,Ra)+$a(s,Ma)+a,M=$a(i,y)+$a(s,p)+a+14+3*C+$a(v,S)+(2*v[16]+3*v[17]+7*v[18]);if(Q<=R&&Q<=M)return Xa(t,u,e.subarray(c,c+h));if(Va(t,u,1+(M<R)),u+=2,M<R){P=Qa(y,f,0),U=y,D=Qa(p,d,0),x=p;var L=Qa(S,K,0);Va(t,u,m-257),Va(t,u+5,k-1),Va(t,u+10,C-4),u+=14;for(B=0;B<C;++B)Va(t,u+3*B,S[ka[B]]);u+=3*C;for(var T=[w,E],F=0;F<2;++F){var N=T[F];for(B=0;B<N.length;++B){var H=31&N[B];Va(t,u,L[H]),u+=S[H],H>15&&(Va(t,u,N[B]>>>5&127),u+=N[B]>>>12)}}}else P=La,U=Ra,D=Fa,x=Ma;for(B=0;B<o;++B)if(n[B]>255){H=n[B]>>>18&31;Wa(t,u,P[H+257]),u+=U[H+257],H>7&&(Va(t,u,n[B]>>>23&31),u+=ba[H]);var O=31&n[B];Wa(t,u,D[O]),u+=x[O],O>3&&(Wa(t,u,n[B]>>>5&8191),u+=Ea[O])}else Wa(t,u,P[n[B]]),u+=U[n[B]];return Wa(t,u,P[256]),u+U[256]},to=/*#__PURE__*/new ma([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),ro=/*#__PURE__*/new Aa(0),no=function(e,t,r,n,i){return function(e,t,r,n,i,s){var a=e.length,o=new Aa(n+a+5*(1+Math.ceil(a/7e3))+i),c=o.subarray(n,o.length-i),h=0;if(!t||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=Xa(c,h+1,e.subarray(u,l))}else{for(var y=to[t-1],f=y>>>13,g=8191&y,p=(1<<r)-1,d=new wa(32768),A=new wa(p+1),w=Math.ceil(r/3),m=2*w,b=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<m)&p},E=new ma(25e3),k=new wa(288),v=new wa(32),B=0,I=0,S=(u=0,0),K=0,C=0;u<a;++u){var P=b(u),U=32767&u,D=A[P];if(d[U]=D,A[P]=U,K<=u){var x=a-u;if((B>7e3||S>24576)&&x>423){h=eo(e,c,0,E,k,v,I,S,C,u-C,h),S=B=I=0,C=u;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)v[Q]=0}var R=2,M=0,L=g,T=U-D&32767;if(x>2&&P==b(u-T))for(var F=Math.min(f,x)-1,N=Math.min(32767,u),H=Math.min(258,x);T<=N&&--L&&U!=D;){if(e[u+R]==e[u+R-T]){for(var O=0;O<H&&e[u+O]==e[u+O-T];++O);if(O>R){if(R=O,M=T,O>F)break;var z=Math.min(T,O-2),_=0;for(Q=0;Q<z;++Q){var G=u-T+Q+32768&32767,j=G-d[G]+32768&32767;j>_&&(_=j,D=G)}}}T+=(U=D)-(D=d[U])+32768&32767}if(M){E[S++]=268435456|Sa[R]<<18|Pa[M];var q=31&Sa[R],V=31&Pa[M];I+=ba[q]+Ea[V],++k[257+q],++v[V],K=u+R,++B}else E[S++]=e[u],++k[e[u]]}}h=eo(e,c,s,E,k,v,I,S,C,u-C,h),!s&&7&h&&(h=Xa(c,h+1,ro))}return Ga(o,0,n+_a(h)+i)}(e,null==t.level?6:t.level,null==t.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):12+t.mem,r,n,!i)},io=/*#__PURE__*/function(){function e(e,t){t||"function"!=typeof e||(t=e,e={}),this.ondata=t,this.o=e||{}}return e.prototype.p=function(e,t){this.ondata(no(e,this.o,0,0,!t),t)},e.prototype.push=function(e,t){this.ondata||qa(5),this.d&&qa(4),this.d=t,this.p(e,t||!1)},e}(),so=/*#__PURE__*/function(){function e(e){this.s={},this.p=new Aa(0),this.ondata=e}return e.prototype.e=function(e){this.ondata||qa(5),this.d&&qa(4);var t=this.p.length,r=new Aa(t+e.length);r.set(this.p),r.set(e,t),this.p=r},e.prototype.c=function(e){this.d=this.s.i=e||!1;var t=this.s.b,r=function(e,t,r){var n=e.length;if(!n||r&&r.f&&!r.l)return t||new Aa(0);var i=!t||r,s=!r||r.i;r||(r={}),t||(t=new Aa(3*n));var a=function(e){var r=t.length;if(e>r){var n=new Aa(Math.max(2*r,e));n.set(t),t=n}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,y=r.m,f=r.n,g=8*n;do{if(!u){o=Oa(e,c,1);var p=Oa(e,c+1,3);if(c+=3,!p){var d=e[(K=_a(c)+4)-4]|e[K-3]<<8,A=K+d;if(A>n){s&&qa(0);break}i&&a(h+d),t.set(e.subarray(K,A),h),r.b=h+=d,r.p=c=8*A,r.f=o;continue}if(1==p)u=Ta,l=Na,y=9,f=5;else if(2==p){var w=Oa(e,c,31)+257,m=Oa(e,c+10,15)+4,b=w+Oa(e,c+5,31)+1;c+=14;for(var E=new Aa(b),k=new Aa(19),v=0;v<m;++v)k[ka[v]]=Oa(e,c+3*v,7);c+=3*m;var B=Ha(k),I=(1<<B)-1,S=Qa(k,B,1);for(v=0;v<b;){var K,C=S[Oa(e,c,I)];if(c+=15&C,(K=C>>>4)<16)E[v++]=K;else{var P=0,U=0;for(16==K?(U=3+Oa(e,c,3),c+=2,P=E[v-1]):17==K?(U=3+Oa(e,c,7),c+=3):18==K&&(U=11+Oa(e,c,127),c+=7);U--;)E[v++]=P}}var D=E.subarray(0,w),x=E.subarray(w);y=Ha(D),f=Ha(x),u=Qa(D,y,1),l=Qa(x,f,1)}else qa(1);if(c>g){s&&qa(0);break}}i&&a(h+131072);for(var Q=(1<<y)-1,R=(1<<f)-1,M=c;;M=c){var L=(P=u[za(e,c)&Q])>>>4;if((c+=15&P)>g){s&&qa(0);break}if(P||qa(2),L<256)t[h++]=L;else{if(256==L){M=c,u=null;break}var T=L-254;if(L>264){var F=ba[v=L-257];T=Oa(e,c,(1<<F)-1)+Ia[v],c+=F}var N=l[za(e,c)&R],H=N>>>4;if(N||qa(3),c+=15&N,x=Ca[H],H>3&&(F=Ea[H],x+=za(e,c)&(1<<F)-1,c+=F),c>g){s&&qa(0);break}i&&a(h+131072);for(var O=h+T;h<O;h+=4)t[h]=t[h-x],t[h+1]=t[h+1-x],t[h+2]=t[h+2-x],t[h+3]=t[h+3-x];h=O}}r.l=u,r.p=M,r.b=h,r.f=o,u&&(o=1,r.m=y,r.d=l,r.n=f)}while(!o);return h==t.length?t:Ga(t,0,h)}(this.p,this.o,this.s);this.ondata(Ga(r,t,this.s.b),this.d),this.o=Ga(r,this.s.b-32768),this.s.b=this.o.length,this.p=Ga(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),ao=/*#__PURE__*/function(){function e(e,t){var r,n;this.c=(r=1,n=0,{p:function(e){for(var t=r,i=n,s=0|e.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)i+=t+=e[a];t=(65535&t)+15*(t>>16),i=(65535&i)+15*(i>>16)}r=t,n=i},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(n%=65521))<<8|n>>>8}}),this.v=1,io.call(this,e,t)}return e.prototype.push=function(e,t){io.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){this.c.p(e);var r=no(e,this.o,this.v&&2,t&&4,!t);this.v&&(function(e,t){var r=t.level,n=0==r?0:r<6?1:9==r?3:2;e[0]=120,e[1]=n<<6|(n?32-2*n:1)}(r,this.o),this.v=0),t&&function(e,t,r){for(;r;++t)e[t]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,t)},e}(),oo=/*#__PURE__*/function(){function e(e){this.v=1,so.call(this,e)}return e.prototype.push=function(e,t){if(so.prototype.e.call(this,e),this.v){if(this.p.length<2&&!t)return;this.p=this.p.subarray(2),this.v=0}t&&(this.p.length<4&&qa(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),so.prototype.c.call(this,t)},e}(),co="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{co.decode(ro,{stream:!0}),1}catch(e){}var ho=[0,1,3,7,15,31,63,127,255],uo=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};uo.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},uo.prototype.read=function(e){for(var t=0;e>0;){this._ensureByte();var r=8-this.bitOffset;if(e>=r)t<<=r,t|=ho[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,e-=r;else{t<<=e;var n=r-e;t|=(this.curByte&ho[e]<<n)>>n,this.bitOffset+=e,e=0}}return t},uo.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},uo.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)};var lo=uo,yo=function(){};yo.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},yo.prototype.read=function(e,t,r){for(var n=0;n<r;){var i=this.readByte();if(i<0)return 0===n?-1:n;e[t++]=i,n++}return n},yo.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},yo.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},yo.prototype.write=function(e,t,r){var n;for(n=0;n<r;n++)this.writeByte(e[t++]);return r},yo.prototype.flush=function(){};var fo,go=yo,po=(fo=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var e=4294967295;this.getCRC=function(){return~e>>>0},this.updateCRC=function(t){e=e<<8^fo[255&(e>>>24^t)]},this.updateCRCRun=function(t,r){for(;r-- >0;)e=e<<8^fo[255&(e>>>24^t)]}}),Ao=lo,wo=go,mo=po,bo=function(e,t){var r,n=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=n,n},Eo={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},ko={};ko[Eo.LAST_BLOCK]="Bad file checksum",ko[Eo.NOT_BZIP_DATA]="Not bzip data",ko[Eo.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",ko[Eo.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",ko[Eo.DATA_ERROR]="Data error",ko[Eo.OUT_OF_MEMORY]="Out of memory",ko[Eo.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var vo=function(e,t){var r=ko[e]||"unknown error";t&&(r+=": "+t);var n=new TypeError(r);throw n.errorCode=e,n},Bo=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};Bo.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new mo,!0):(this.writeCount=-1,!1)},Bo.prototype._start_bunzip=function(e,t){var r=new Uint8Array(4);4===e.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||vo(Eo.NOT_BZIP_DATA,"bad magic");var n=r[3]-48;(n<1||n>9)&&vo(Eo.NOT_BZIP_DATA,"level out of range"),this.reader=new Ao(e),this.dbufSize=1e5*n,this.nextoutput=0,this.outputStream=t,this.streamCRC=0},Bo.prototype._get_next_block=function(){var e,t,r,n=this.reader,i=n.pi();if("177245385090"===i)return!1;"314159265359"!==i&&vo(Eo.NOT_BZIP_DATA),this.targetBlockCRC=n.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,n.read(1)&&vo(Eo.OBSOLETE_INPUT);var s=n.read(24);s>this.dbufSize&&vo(Eo.DATA_ERROR,"initial position out of bounds");var a=n.read(16),o=new Uint8Array(256),c=0;for(e=0;e<16;e++)if(a&1<<15-e){var h=16*e;for(r=n.read(16),t=0;t<16;t++)r&1<<15-t&&(o[c++]=h+t)}var u=n.read(3);(u<2||u>6)&&vo(Eo.DATA_ERROR);var l=n.read(15);0===l&&vo(Eo.DATA_ERROR);var y=new Uint8Array(256);for(e=0;e<u;e++)y[e]=e;var f=new Uint8Array(l);for(e=0;e<l;e++){for(t=0;n.read(1);t++)t>=u&&vo(Eo.DATA_ERROR);f[e]=bo(y,t)}var g,p=c+2,d=[];for(t=0;t<u;t++){var A,w,m=new Uint8Array(p),b=new Uint16Array(21);for(a=n.read(5),e=0;e<p;e++){for(;(a<1||a>20)&&vo(Eo.DATA_ERROR),n.read(1);)n.read(1)?a--:a++;m[e]=a}for(A=w=m[0],e=1;e<p;e++)m[e]>w?w=m[e]:m[e]<A&&(A=m[e]);g={},d.push(g),g.permute=new Uint16Array(258),g.limit=new Uint32Array(22),g.base=new Uint32Array(21),g.minLen=A,g.maxLen=w;var E=0;for(e=A;e<=w;e++)for(b[e]=g.limit[e]=0,a=0;a<p;a++)m[a]===e&&(g.permute[E++]=a);for(e=0;e<p;e++)b[m[e]]++;for(E=a=0,e=A;e<w;e++)E+=b[e],g.limit[e]=E-1,E<<=1,a+=b[e],g.base[e+1]=E-a;g.limit[w+1]=Number.MAX_VALUE,g.limit[w]=E+b[w]-1,g.base[A]=0}var k=new Uint32Array(256);for(e=0;e<256;e++)y[e]=e;var v,B=0,I=0,S=0,K=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,S>=l&&vo(Eo.DATA_ERROR),g=d[f[S++]]),e=g.minLen,t=n.read(e);e>g.maxLen&&vo(Eo.DATA_ERROR),!(t<=g.limit[e]);e++)t=t<<1|n.read(1);((t-=g.base[e])<0||t>=258)&&vo(Eo.DATA_ERROR);var C=g.permute[t];if(0!==C&&1!==C){if(B)for(B=0,I+a>this.dbufSize&&vo(Eo.DATA_ERROR),k[v=o[y[0]]]+=a;a--;)K[I++]=v;if(C>c)break;I>=this.dbufSize&&vo(Eo.DATA_ERROR),k[v=o[v=bo(y,e=C-1)]]++,K[I++]=v}else B||(B=1,a=0),a+=0===C?B:2*B,B<<=1}for((s<0||s>=I)&&vo(Eo.DATA_ERROR),t=0,e=0;e<256;e++)r=t+k[e],k[e]=t,t=r;for(e=0;e<I;e++)K[k[v=255&K[e]]]|=e<<8,k[v]++;var P=0,U=0,D=0;return I&&(U=255&(P=K[s]),P>>=8,D=-1),this.writePos=P,this.writeCurrent=U,this.writeCount=I,this.writeRun=D,!0},Bo.prototype._read_bunzip=function(e,t){var r,n,i;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,n=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,i=n,o=-1):(r=1,i=o),this.blockCRC.updateCRCRun(i,r);r--;)this.outputStream.writeByte(i),this.nextoutput++;o!=n&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&vo(Eo.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var Io=function(e){if("readByte"in e)return e;var t=new wo;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},So=function(e){var t=new wo,r=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),r=!1;else{if("writeByte"in e)return e;t.buffer=e,r=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(r&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};var Ko=function(e,t,r){for(var n=Io(e),i=So(t),s=new Bo(n,i);!("eof"in n)||!n.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&vo(Eo.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in n)||n.eof())break;s._start_bunzip(n,i)}if("getBuffer"in i)return i.getBuffer()};class Co{static get tag(){return R.packet.literalData}constructor(e=new Date){this.format=R.literal.utf8,this.date=T.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=R.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||T.isStream(this.text))&&(this.text=T.decodeUTF8(T.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=T.canonicalizeEOL(T.encodeUTF8(this.text))),e?I(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await v(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=T.decodeUTF8(await e.readBytes(r)),this.date=T.readDate(await e.readBytes(4));let n=e.remainder();o(n)&&(n=await C(n)),this.setBytes(n,t)}))}writeHeader(){const e=T.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),n=T.writeDate(this.date);return T.concatUint8Array([r,t,e,n])}write(){const e=this.writeHeader(),t=this.getBytes();return T.concat([e,t])}}class Po{constructor(){this.bytes=""}read(e){return this.bytes=T.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return T.stringToUint8Array(this.bytes)}toHex(){return T.uint8ArrayToHex(T.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new Po;return t.read(T.hexToUint8Array(e)),t}static wildcard(){const e=new Po;return e.read(new Uint8Array(8)),e}}const Uo=Symbol("verified"),Do="salt@notations.openpgpjs.org",xo=new Set([R.signatureSubpacket.issuerKeyID,R.signatureSubpacket.issuerFingerprint,R.signatureSubpacket.embeddedSignature]);class Qo{static get tag(){return R.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.unknownSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Po,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Uo]=null}read(e,t=M){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new qn("Support for v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4!==this.version&&5!==this.version&&6!==this.version)throw new qn(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[r++],this.publicKeyAlgorithm=e[r++],this.hashAlgorithm=e[r++],r+=this.readSubPackets(e.subarray(r,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,r),r+=this.readSubPackets(e.subarray(r,e.length),!1),this.signedHashValue=e.subarray(r,r+2),r+=2,6===this.version){const t=e[r++];this.salt=e.subarray(r,r+t),r+=t}const n=e.subarray(r,e.length),{read:i,signatureParams:s}=oa.signature.parseSignatureParams(this.publicKeyAlgorithm,n);if(i<n.length)throw Error("Error reading MPIs");this.params=s}writeParams(){return this.params instanceof Promise?U((async()=>oa.serializeParams(this.publicKeyAlgorithm,await this.params))):oa.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),T.concat(e)}async sign(e,t,r=new Date,n=!1,i){this.version=e.version,this.created=T.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Mo(this.hashAlgorithm);if(null===this.salt)this.salt=oa.random.getRandomBytes(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(i.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===Do)).length)throw Error("Unexpected existing salt notation");{const e=oa.random.getRandomBytes(Mo(this.hashAlgorithm));this.rawNotations.push({name:Do,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=T.concat(s);const a=this.toHash(this.signatureType,t,n),o=await this.hash(this.signatureType,t,a,n);this.signedHashValue=K(B(o),0,2);const c=async()=>oa.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await C(o));T.isStream(o)?this.params=c():(this.params=await c(),this[Uo]=!0)}writeHashedSubPackets(){const e=R.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(Ro(e.signatureCreationTime,!0,T.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(Ro(e.signatureExpirationTime,!0,T.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(Ro(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(Ro(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(Ro(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(Ro(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(Ro(e.keyExpirationTime,!0,T.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(Ro(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=T.concat([r,this.revocationKeyFingerprint]),t.push(Ro(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(Ro(e.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:n,value:i,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=T.encodeUTF8(n);r.push(T.writeNumber(o.length,2)),r.push(T.writeNumber(i.length,2)),r.push(o),r.push(i),r=T.concat(r),t.push(Ro(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(Ro(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(Ro(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.keyServerPreferences)),t.push(Ro(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(Ro(e.preferredKeyServer,!1,T.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(Ro(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(Ro(e.policyURI,!1,T.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.keyFlags)),t.push(Ro(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(Ro(e.signersUserID,!1,T.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=T.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(Ro(e.reasonForRevocation,!0,r))),null!==this.features&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.features)),t.push(Ro(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(T.stringToUint8Array(this.signatureTargetHash)),r=T.concat(r),t.push(Ro(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(Ro(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=T.concat(r),t.push(Ro(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=T.stringToUint8Array(T.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(Ro(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(Ro(e.preferredCipherSuites,!1,r)));const n=T.concat(t),i=T.writeNumber(n.length,6===this.version?4:2);return T.concat([i,n])}writeUnhashedSubPackets(){const e=this.unhashedSubpackets.map((({type:e,critical:t,body:r})=>Ro(e,t,r))),t=T.concat(e),r=T.writeNumber(t.length,6===this.version?4:2);return T.concat([r,t])}readSubPacket(e,t=!0){let r=0;const n=!!(128&e[r]),i=127&e[r];if(r++,t||(this.unhashedSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)}),xo.has(i)))switch(i){case R.signatureSubpacket.signatureCreationTime:this.created=T.readDate(e.subarray(r,e.length));break;case R.signatureSubpacket.signatureExpirationTime:{const t=T.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case R.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case R.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case R.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case R.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case R.signatureSubpacket.keyExpirationTime:{const t=T.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case R.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case R.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case R.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const i=T.readNumber(e.subarray(r,r+2));r+=2;const s=T.readNumber(e.subarray(r,r+2));r+=2;const a=T.decodeUTF8(e.subarray(r,r+i)),o=e.subarray(r+i,r+i+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:n}),t&&(this.notations[a]=T.decodeUTF8(o));break}case R.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=T.decodeUTF8(e.subarray(r,e.length));break;case R.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case R.signatureSubpacket.policyURI:this.policyURI=T.decodeUTF8(e.subarray(r,e.length));break;case R.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.signersUserID:this.signersUserID=T.decodeUTF8(e.subarray(r,e.length));break;case R.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=T.decodeUTF8(e.subarray(r,e.length));break;case R.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=oa.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=T.uint8ArrayToString(e.subarray(r,r+t));break}case R.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Qo,this.embeddedSignature.read(e.subarray(r,e.length));break;case R.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case R.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case R.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:this.unknownSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)})}}readSubPackets(e,t=!0,r){const n=6===this.version?4:2,i=T.readNumber(e.subarray(0,n));let s=n;for(;s<2+i;){const n=Nn(e.subarray(s,e.length));s+=n.offset,this.readSubPacket(e.subarray(s,s+n.len),t,r),s+=n.len}return s}toSign(e,t){const r=R.signature;switch(e){case r.binary:return null!==t.text?T.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return T.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,n;if(t.userID)n=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");n=209,e=t.userAttribute}const i=e.write();return T.concat([this.toSign(r.key,t),new Uint8Array([n]),T.writeNumber(i.length,4),i])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return T.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return E(B(this.signatureData),(e=>{r+=e.length}),(()=>{const n=[];return 5!==this.version||this.signatureType!==R.signature.binary&&this.signatureType!==R.signature.text||(t?n.push(new Uint8Array(6)):n.push(e.writeHeader())),n.push(new Uint8Array([this.version,255])),5===this.version&&n.push(new Uint8Array(4)),n.push(T.writeNumber(r,4)),T.concat(n)}))}toHash(e,t,r=!1){const n=this.toSign(e,t);return T.concat([this.salt||new Uint8Array,n,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,n=!1){if(6===this.version&&this.salt.length!==Mo(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,n)),oa.hash.digest(this.hashAlgorithm,r)}async verify(e,t,r,n=new Date,i=!1,s=M){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===R.signature.binary||t===R.signature.text;if(!(this[Uo]&&!a)){let n,s;if(this.hashed?s=await this.hashed:(n=this.toHash(t,r,i),s=await this.hash(t,r,n)),s=await C(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===R.publicKey.hmac?e.privateParams:null;if(this[Uo]=await oa.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,n,s),!this[Uo])throw Error("Signature verification failed")}const o=T.normalizeDate(n);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+R.read(R.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[R.signature.binary,R.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+R.read(R.hash,this.hashAlgorithm).toUpperCase());if(this.unknownSubpackets.forEach((({type:e,critical:t})=>{if(t)throw Error("Unknown critical signature subpacket type "+e)})),this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=T.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ro(e,t,r){const n=[];return n.push(Hn(r.length+1)),n.push(new Uint8Array([(t?128:0)|e])),n.push(r),T.concat(n)}function Mo(e){switch(e){case R.hash.sha256:return 16;case R.hash.sha384:return 24;case R.hash.sha512:return 32;case R.hash.sha224:case R.hash.sha3_256:return 16;case R.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class Lo{static get tag(){return R.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new Lo;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new qn(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new Po,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Po,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),T.concatUint8Array(e)}calculateTrailer(...e){return U((async()=>Qo.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==R.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!T.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!T.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function To(e,t){if(!t[e]){let t;try{t=R.read(R.packet,e)}catch(t){throw new Vn("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}Lo.prototype.hash=Qo.prototype.hash,Lo.prototype.toHash=Qo.prototype.toHash,Lo.prototype.toSign=Qo.prototype.toSign;class Fo extends Array{static async fromBinary(e,t,r=M){const n=new Fo;return await n.read(e,t,r),n}async read(e,t,r=M){r.additionalAllowedPackets.length&&(t={...t,...T.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=k(e,(async(e,n)=>{const i=x(n);try{for(;;){await i.ready;if(await jn(e,(async e=>{try{if(e.tag===R.packet.marker||e.tag===R.packet.trust||e.tag===R.packet.padding)return;const n=To(e.tag,t);n.packets=new Fo,n.fromStream=T.isStream(e.packet),await n.read(e.packet,r),await i.write(n)}catch(t){if(t instanceof Vn){if(!(e.tag<=39))return;await i.abort(t)}const n=!r.ignoreUnsupportedPackets&&t instanceof qn,s=!(r.ignoreMalformedPackets||t instanceof qn);if(n||s||Gn(e.tag))await i.abort(t);else{const t=new Wn(e.tag,e.packet);await i.write(t)}T.printDebugError(t)}})))return await i.ready,void await i.close()}}catch(e){await i.abort(e)}}));const n=D(this.stream);for(;;){const{done:e,value:t}=await n.read();if(e?this.stream=null:this.push(t),e||Gn(t.constructor.tag))break}n.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof Wn?this[t].tag:this[t].constructor.tag,n=this[t].write();if(T.isStream(n)&&Gn(this[t].constructor.tag)){let t=[],i=0;const s=512;e.push(zn(r)),e.push(E(n,(e=>{if(t.push(e),i+=e.length,i>=s){const e=Math.min(Math.log(i)/Math.LN2|0,30),r=2**e,n=T.concat([On(e)].concat(t));return t=[n.subarray(1+r)],i=t[0].length,n.subarray(0,1+r)}}),(()=>T.concat([Hn(i)].concat(t)))))}else{if(T.isStream(n)){let t=0;e.push(E(B(n),(e=>{t+=e.length}),(()=>_n(r,t))))}else e.push(_n(r,n.length));e.push(n)}}return T.concat(e)}filterByTag(...e){const t=new Fo,r=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(r(this[n].constructor.tag))&&t.push(this[n]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,n=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(n(r[i].constructor.tag))&&t.push(i);return t}}const No=/*#__PURE__*/T.constructAllowedPackets([Co,Lo,Qo]);class Ho{static get tag(){return R.packet.compressedData}constructor(e=M){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=M){await v(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),T.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=M){const t=R.read(R.compression,this.algorithm),r=jo[t];if(!r)throw Error(t+" decompression not supported");this.packets=await Fo.fromBinary(r(this.compressed),No,e)}compress(){const e=R.read(R.compression,this.algorithm),t=Go[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function Oo(e,t){return r=>{if(!T.isStream(r)||o(r))return U((()=>C(r).then((e=>new Promise(((r,n)=>{const i=new t;i.ondata=e=>{r(e)};try{i.push(e,!0)}catch(e){n(e)}}))))));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const n=r.getReader(),i=new t;return new ReadableStream({async start(e){for(i.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await n.read();if(e)return void i.push(new Uint8Array,!0);t.length&&i.push(t)}}})}}function zo(e){return function(t){return U((async()=>e(await C(t))))}}const _o=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),Go={zip:/*#__PURE__*/Oo(_o("deflate-raw").compressor,io),zlib:/*#__PURE__*/Oo(_o("deflate").compressor,ao)},jo={uncompressed:e=>e,zip:/*#__PURE__*/Oo(_o("deflate-raw").decompressor,so),zlib:/*#__PURE__*/Oo(_o("deflate").decompressor,oo),bzip2:/*#__PURE__*/zo(Ko)},qo=/*#__PURE__*/T.constructAllowedPackets([Co,Ho,Lo,Qo]);class Vo{static get tag(){return R.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new Vo;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await v(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new qn(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?T.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):T.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=M){let n=this.packets.write();if(o(n)&&(n=await C(n)),2===this.version)this.cipherAlgorithm=e,this.salt=oa.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await Wo(this,"encrypt",t,n);else{const{blockSize:i}=oa.getCipherParams(e),s=await oa.getPrefixRandom(e),a=new Uint8Array([211,20]),o=T.concat([s,n,a]),c=await oa.hash.sha1(I(o)),h=T.concat([o,c]);this.encrypted=await oa.mode.cfb.encrypt(e,t,h,new Uint8Array(i),r)}return!0}async decrypt(e,t,r=M){let n,i=B(this.encrypted);if(o(i)&&(i=await C(i)),2===this.version)n=await Wo(this,"decrypt",t,i);else{const{blockSize:s}=oa.getCipherParams(e),a=await oa.mode.cfb.decrypt(e,t,i,new Uint8Array(s)),o=K(I(a),-20),c=K(a,0,-20),h=Promise.all([C(await oa.hash.sha1(I(c))),C(o)]).then((([e,t])=>{if(!T.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),u=K(c,s+2);n=K(u,0,-2),n=A([n,U((()=>h))]),T.isStream(i)&&r.allowUnauthenticatedStream||(n=await C(n))}return this.packets=await Fo.fromBinary(n,qo,r),!0}}async function Wo(e,t,r,n){const i=e instanceof Vo&&2===e.version,s=!i&&e.constructor.tag===R.packet.aeadEncryptedData;if(!i&&!s)throw Error("Unexpected packet type");const a=oa.getAEADMode(e.aeadAlgorithm),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,h=2**(e.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),y=new Uint8Array(l,0,5+u),f=new Uint8Array(l),g=new DataView(l),p=new Uint8Array(l,5,8);y.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,A,m=0,b=Promise.resolve(),E=0,v=0;if(i){const{keySize:t}=oa.getCipherParams(e.cipherAlgorithm),{ivLength:n}=a,i=new Uint8Array(l,0,5),s=await $i(R.hash.sha256,r,e.salt,i,t+n);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),A=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const B=await a(e.cipherAlgorithm,r);return k(n,(async(r,n)=>{if("array"!==T.isStream(r)){const t=new TransformStream({},{highWaterMark:T.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});w(t.readable,n),n=t.writable}const s=D(r),a=x(n);try{for(;;){let e=await s.readBytes(h+o)||new Uint8Array;const r=e.subarray(e.length-o);let n,l,w;if(e=e.subarray(0,e.length-o),i)w=d;else{w=d.slice();for(let e=0;e<8;e++)w[d.length-8+e]^=p[e]}if(!m||e.length?(s.unshift(r),n=B[t](e,w,y),n.catch((()=>{})),v+=e.length-o+c):(g.setInt32(5+u+4,E),n=B[t](r,w,f),n.catch((()=>{})),v+=c,l=!0),E+=e.length-o,b=b.then((()=>n)).then((async e=>{await a.ready,await a.write(e),v-=e.length})).catch((e=>a.abort(e))),(l||v>a.desiredSize)&&await b,l){await a.close();break}i?A.setInt32(d.length-4,++m):g.setInt32(9,++m)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const Zo=/*#__PURE__*/T.constructAllowedPackets([Co,Ho,Lo,Qo]);class Yo{static get tag(){return R.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=R.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await v(e,(async e=>{const t=await e.readByte();if(1!==t)throw new qn(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=oa.getAEADMode(this.aeadAlgorithm);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return T.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=M){this.packets=await Fo.fromBinary(await Wo(this,"decrypt",t,B(this.encrypted)),Zo,r)}async encrypt(e,t,r=M){this.cipherAlgorithm=e;const{ivLength:n}=oa.getAEADMode(this.aeadAlgorithm);this.iv=oa.random.getRandomBytes(n),this.chunkSizeByte=r.aeadChunkSizeByte;const i=this.packets.write();this.encrypted=await Wo(this,"encrypt",t,i)}}class Jo{static get tag(){return R.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Po,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:n,sessionKeyAlgorithm:i}){const s=new Jo;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?Po.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=n,s.sessionKeyAlgorithm=i,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new qn(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const n=r-1;this.publicKeyFingerprint=e.subarray(t,t+n),t+=n,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Po.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=oa.parseEncSessionKeyParams(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===R.publicKey.x25519||this.publicKeyAlgorithm===R.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=R.write(R.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),oa.serializeParams(this.publicKeyAlgorithm,this.encrypted)),T.concatUint8Array(e)}async encrypt(e){const t=R.write(R.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=$o(this.version,t,r,this.sessionKey),s=t===R.publicKey.aead?e.privateParams:null;this.encrypted=await oa.publicKeyEncrypt(t,r,e.publicParams,s,i,n)}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?$o(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=await oa.publicKeyDecrypt(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,n,r),{sessionKey:s,sessionKeyAlgorithm:a}=function(e,t,r,n){switch(t){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.elgamal:case R.publicKey.ecdh:case R.publicKey.aead:{const t=r.subarray(0,r.length-2),i=r.subarray(r.length-2),s=T.writeChecksum(t.subarray(t.length%8)),a=s[0]===i[0]&s[1]===i[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(n){const t=a&o.sessionKeyAlgorithm===n.sessionKeyAlgorithm&o.sessionKey.length===n.sessionKey.length;return{sessionKey:T.selectUint8Array(t,o.sessionKey,n.sessionKey),sessionKeyAlgorithm:6===e?null:T.selectUint8(t,o.sessionKeyAlgorithm,n.sessionKeyAlgorithm)}}if(a&&(6===e||R.read(R.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case R.publicKey.x25519:case R.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);3===this.version&&this.publicKeyAlgorithm!==R.publicKey.x25519&&this.publicKeyAlgorithm!==R.publicKey.x448&&(this.sessionKeyAlgorithm=a),this.sessionKey=s}}function $o(e,t,r,n){switch(t){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.elgamal:case R.publicKey.ecdh:case R.publicKey.aead:return T.concatUint8Array([new Uint8Array(6===e?[]:[r]),n,T.writeChecksum(n.subarray(n.length%8))]);case R.publicKey.x25519:case R.publicKey.x448:return n;default:throw Error("Unsupported public key algorithm")}}class Xo{static get tag(){return R.packet.symEncryptedSessionKey}constructor(e=M){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=R.symmetric.aes256,this.aeadAlgorithm=R.write(R.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new qn(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const n=e[t++];if(this.s2k=pa(n),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=oa.getAEADMode(this.aeadAlgorithm);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const n=r.length,i=3+n+this.iv.length;t=T.concatUint8Array([new Uint8Array([this.version,i,e,this.aeadAlgorithm,n]),r,this.iv,this.encrypted])}else 5===this.version?t=T.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=T.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=T.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:n}=oa.getCipherParams(t),i=await this.s2k.produceKey(e,n);if(this.version>=5){const e=oa.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|Xo.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await $i(R.hash.sha256,i,new Uint8Array,r,n):i,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await oa.mode.cfb.decrypt(t,i,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=R.write(R.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length)}else this.sessionKey=i}async encrypt(e,t=M){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=da(t),this.s2k.generateSalt();const{blockSize:n,keySize:i}=oa.getCipherParams(r),s=await this.s2k.produceKey(e,i);if(null===this.sessionKey&&(this.sessionKey=oa.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const e=oa.getAEADMode(this.aeadAlgorithm);this.iv=oa.random.getRandomBytes(e.ivLength);const t=new Uint8Array([192|Xo.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),n=6===this.version?await $i(R.hash.sha256,s,new Uint8Array,t,i):s,a=await e(r,n);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=T.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await oa.mode.cfb.encrypt(r,s,e,new Uint8Array(n),t)}}}class ec{static get tag(){return R.packet.publicKey}constructor(e=new Date,t=M){this.version=t.v6Keys?6:4,this.created=T.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new ec,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e,t=M){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new qn("Support for parsing v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4===this.version||5===this.version||6===this.version){this.created=T.readDate(e.subarray(r,r+4)),r+=4,this.algorithm=e[r++],this.version>=5&&(r+=4);const{read:t,publicParams:n}=oa.parsePublicKeyParams(this.algorithm,e.subarray(r));if(6===this.version&&n.oid&&(n.oid.getName()===R.curve.curve25519Legacy||n.oid.getName()===R.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=n,r+=t,await this.computeFingerprintAndKeyID(),r}throw new qn(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(T.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=oa.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&e.push(T.writeNumber(t.length,4)),e.push(t),T.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,n=e>=5?4:2;return T.concatUint8Array([new Uint8Array([r]),T.writeNumber(t.length,n),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Po,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await oa.hash.sha256(e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await oa.hash.sha1(e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return T.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&T.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=R.read(R.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=T.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}ec.prototype.readPublicKey=ec.prototype.read,ec.prototype.writePublicKey=ec.prototype.write;const tc=/*#__PURE__*/T.constructAllowedPackets([Co,Ho,Lo,Qo]);class rc{static get tag(){return R.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=M){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:n}=oa.getCipherParams(e),i=await C(B(this.encrypted)),s=await oa.mode.cfb.decrypt(e,t,i.subarray(n+2),i.subarray(2,n+2));this.packets=await Fo.fromBinary(s,tc,r)}async encrypt(e,t,r=M){const n=this.packets.write(),{blockSize:i}=oa.getCipherParams(e),s=await oa.getPrefixRandom(e),a=await oa.mode.cfb.encrypt(e,t,s,new Uint8Array(i),r),o=await oa.mode.cfb.encrypt(e,t,n,a.subarray(2),r);this.encrypted=T.concat([a,o])}}class nc extends ec{static get tag(){return R.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new nc,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class ic{static get tag(){return R.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=Nn(e.subarray(t,e.length));t+=r.offset,this.attributes.push(T.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(Hn(this.attributes[t].length)),e.push(T.stringToUint8Array(this.attributes[t]));return T.concatUint8Array(e)}equals(e){return!!(e&&e instanceof ic)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class sc extends ec{static get tag(){return R.packet.secretKey}constructor(e=new Date,t=M){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=M){let r=await this.readPublicKey(e,t);const n=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=pa(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+oa.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+oa.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(n),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!T.equalsUint8Array(T.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=oa.parsePrivateKeyParams(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof qn)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return T.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=oa.serializeParams(this.algorithm,this.privateParams)),5===this.version&&t.push(T.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(T.writeChecksum(this.keyMaterial))),T.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=M){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=pa(R.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=R.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=M){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=da(t),this.s2k.generateSalt();const r=oa.serializeParams(this.algorithm,this.privateParams);this.symmetric=R.symmetric.aes256;const{blockSize:n}=oa.getCipherParams(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=t.preferredAEADAlgorithm;const i=oa.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const s=zn(this.constructor.tag),a=await ac(this.version,this.s2k,e,this.symmetric,this.aead,s,this.isLegacyAEAD),o=await i(this.symmetric,a);this.iv=this.isLegacyAEAD?oa.random.getRandomBytes(n):oa.random.getRandomBytes(i.ivLength);const c=this.isLegacyAEAD?new Uint8Array:T.concatUint8Array([s,this.writePublicKey()]);this.keyMaterial=await o.encrypt(r,this.iv.subarray(0,i.ivLength),c)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const i=await ac(this.version,this.s2k,e,this.symmetric);this.iv=oa.random.getRandomBytes(n),this.keyMaterial=await oa.mode.cfb.encrypt(this.symmetric,i,T.concatUint8Array([r,await oa.hash.sha1(r,t)]),this.iv,t)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=zn(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let n;if(t=await ac(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const e=oa.getAEADMode(this.aead),i=await e(this.symmetric,t);try{const t=this.isLegacyAEAD?new Uint8Array:T.concatUint8Array([r,this.writePublicKey()]);n=await i.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await oa.mode.cfb.decrypt(this.symmetric,t,this.keyMaterial,this.iv);n=e.subarray(0,-20);const r=await oa.hash.sha1(n);if(!T.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=oa.parsePrivateKeyParams(this.algorithm,n,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await oa.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===R.publicKey.ecdh&&t===R.curve.curve25519Legacy||this.algorithm===R.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:n,publicParams:i}=await oa.generateParams(this.algorithm,e,t,r);this.privateParams=n,this.publicParams=i,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function ac(e,t,r,n,i,s,a){if("argon2"===t.type&&!i)throw Error("Using Argon2 S2K without AEAD is not allowed");if("simple"===t.type&&6===e)throw Error("Using Simple S2K with version 6 keys is not allowed");const{keySize:o}=oa.getCipherParams(n),c=await t.produceKey(r,o);if(!i||5===e||a)return c;const h=T.concatUint8Array([s,new Uint8Array([e,n,i])]);return $i(R.hash.sha256,c,new Uint8Array,h,o)}class oc{static get tag(){return R.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(T.isString(e)||e.name&&!T.isString(e.name)||e.email&&!T.isEmailAddress(e.email)||e.comment&&!T.isString(e.comment))throw Error("Invalid user ID format");const t=new oc;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=M){const r=T.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const n=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==n){const{name:e,comment:t,email:r}=n.groups;this.comment=t?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=e?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return T.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class cc extends sc{static get tag(){return R.packet.secretSubkey}constructor(e=new Date,t=M){super(e,t)}}const hc=/*#__PURE__*/T.constructAllowedPackets([Qo]);class uc{constructor(e){this.packets=e||new Fo}write(){return this.packets.write()}armor(e=M){const t=this.packets.some((e=>e.constructor.tag===Qo.tag&&6!==e.version));return X(R.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function lc(e,t){const r=new cc(e.date,t);return r.packets=null,r.algorithm=R.write(R.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function yc(e,t){const r=new sc(e.date,t);return r.packets=null,r.algorithm=R.write(R.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function fc(e,t,r,n,i=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,n,i,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw T.wrapError(`Could not find valid ${R.read(R.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function gc(e,t,r=new Date){const n=T.normalizeDate(r);if(null!==n){const r=mc(e,t);return!(e.created<=n&&n<r)}return!1}async function pc(e,t,r,n){const i={};i.key=t,i.bind=e;const s={signatureType:R.signature.subkeyBinding};r.sign?(s.keyFlags=[R.keyFlags.signData],s.embeddedSignature=await dc(i,null,e,{signatureType:R.signature.keyBinding},r.date,void 0,void 0,void 0,n)):s.keyFlags=r.forwarding?[R.keyFlags.forwardedCommunication]:[R.keyFlags.encryptCommunication|R.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await dc(i,null,t,s,r.date,void 0,void 0,void 0,n)}async function dc(e,t,r,n,i,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Qo;return Object.assign(h,n),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(e,t,r=new Date,n={},i){let s=i.preferredHashAlgorithm,a=s;if(e){const t=await e.getPrimarySelfSignature(r,n,i);t.preferredHashAlgorithms&&([a]=t.preferredHashAlgorithms,s=oa.hash.getHashByteLength(s)<=oa.hash.getHashByteLength(a)?a:s)}switch(t.algorithm){case R.publicKey.ecdsa:case R.publicKey.eddsaLegacy:case R.publicKey.ed25519:case R.publicKey.ed448:a=oa.getPreferredCurveHashAlgo(t.algorithm,t.publicParams.oid)}return oa.hash.getHashByteLength(s)<=oa.hash.getHashByteLength(a)?a:s}(t,r,i,s,c),h.rawNotations=[...a],await h.sign(r,e,i,o,c),h}async function Ac(e,t,r,n=new Date,i){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(n)||i&&!await i(e)||t[r].some((function(t){return T.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function wc(e,t,r,n,i,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(n.map((async function(e){try{if(!i||e.issuerKeyID.equals(i.issuerKeyID)){const n=![R.reasonForRevocation.keyRetired,R.reasonForRevocation.keySuperseded,R.reasonForRevocation.userIDInvalid].includes(e.reasonForRevocationFlag);await e.verify(s,t,r,n?null:a,!1,o),c.push(e.issuerKeyID)}}catch(e){}}))),i?(i.revoked=!!c.some((e=>e.equals(i.issuerKeyID)))||(i.revoked||!1),i.revoked):c.length>0}function mc(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function bc(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=T.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"ecc":try{e.curve=R.write(R.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==R.curve.ed25519Legacy&&e.curve!==R.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?R.curve.ed25519Legacy:R.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===R.curve.ed25519Legacy?R.publicKey.eddsaLegacy:R.publicKey.ecdsa:e.algorithm=R.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?R.publicKey.ed25519:R.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?R.publicKey.ed448:R.publicKey.x448;break;case"rsa":e.algorithm=R.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=R.publicKey.hmac;try{e.symmetric=R.write(R.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=R.publicKey.aead;try{e.symmetric=R.write(R.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function Ec(e,t,r){switch(e.algorithm){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:case R.publicKey.dsa:case R.publicKey.ecdsa:case R.publicKey.eddsaLegacy:case R.publicKey.ed25519:case R.publicKey.ed448:case R.publicKey.hmac:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&R.keyFlags.signData);default:return!1}}function kc(e,t,r){switch(e.algorithm){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:case R.publicKey.elgamal:case R.publicKey.ecdh:case R.publicKey.x25519:case R.publicKey.x448:case R.publicKey.aead:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&R.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&R.keyFlags.encryptStorage);default:return!1}}function vc(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaEncrypt:case R.publicKey.elgamal:case R.publicKey.ecdh:case R.publicKey.x25519:case R.publicKey.x448:return!(!(!t.keyFlags||!!(t.keyFlags[0]&R.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&R.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&R.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&R.keyFlags.forwardedCommunication));default:return!1}}function Bc(e,t){const r=R.write(R.publicKey,e.algorithm),n=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(n.algorithm+" keys are considered too weak.");switch(r){case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:case R.publicKey.rsaEncrypt:if(n.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case R.publicKey.ecdsa:case R.publicKey.eddsaLegacy:case R.publicKey.ecdh:if(t.rejectCurves.has(n.curve))throw Error(`Support for ${n.algorithm} keys using curve ${n.curve} is disabled.`)}}class Ic{constructor(e,t){this.userID=e.constructor.tag===R.packet.userID?e:null,this.userAttribute=e.constructor.tag===R.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Fo;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new Ic(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n},s=new Ic(i.userID||i.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(n))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return dc(i,e,s.keyPacket,{signatureType:R.signature.certGeneric,keyFlags:[R.keyFlags.certifyKeys|R.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,n=M){const i=this.mainKey.keyPacket;return wc(i,R.signature.certRevocation,{key:i,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,n)}async verifyCertificate(e,t,r=new Date,n){const i=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,n);if(e.revoked||await i.isRevoked(e,s.keyPacket,r,n))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,R.signature.certGeneric,a,r,void 0,n)}catch(e){throw T.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const n=this,i=this.selfCertifications.concat(this.otherCertifications);return Promise.all(i.map((async i=>({keyID:i.issuerKeyID,valid:await n.verifyCertificate(i,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(n,R.signature.certGeneric,i,e,void 0,t)}catch(e){throw T.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};await Ac(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(n,R.signature.certGeneric,i,t,!1,r),!0}catch(e){return!1}})),await Ac(e,this,"otherCertifications",t),await Ac(e,this,"revocationSignatures",t,(function(e){return wc(n,R.signature.certRevocation,i,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=R.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=M){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new Ic(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await dc(s,null,e,{signatureType:R.signature.certRevocation,reasonForRevocationFlag:R.write(R.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}}class Sc{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Fo;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Sc(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,n=M){const i=this.mainKey.keyPacket;return wc(i,R.signature.subkeyRevocation,{key:i,bind:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verify(e=new Date,t=M){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket},i=await fc(this.bindingSignatures,r,R.signature.subkeyBinding,n,e,t);if(i.revoked||await this.isRevoked(i,null,e,t))throw Error("Subkey is revoked");if(gc(this.keyPacket,i,e))throw Error("Subkey is expired");return i}async getExpirationTime(e=new Date,t=M){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket};let i;try{i=await fc(this.bindingSignatures,r,R.signature.subkeyBinding,n,e,t)}catch(e){return null}const s=mc(this.keyPacket,i),a=i.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=M){const n=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===R.packet.publicSubkey&&e.keyPacket.constructor.tag===R.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const i=this,s={key:n,bind:i.keyPacket};await Ac(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<i.bindingSignatures.length;t++)if(i.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>i.bindingSignatures[t].created&&(i.bindingSignatures[t]=e),!1;try{return await e.verify(n,R.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await Ac(e,this,"revocationSignatures",t,(function(e){return wc(n,R.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=R.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=M){const s={key:e,bind:this.keyPacket},a=new Sc(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await dc(s,null,e,{signatureType:R.signature.subkeyRevocation,reasonForRevocationFlag:R.write(R.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{Sc.prototype[e]=function(){return this.keyPacket[e]()}}));const Kc=/*#__PURE__*/T.constructAllowedPackets([Qo]),Cc=new Set([R.packet.publicKey,R.packet.privateKey]),Pc=new Set([R.packet.publicKey,R.packet.privateKey,R.packet.publicSubkey,R.packet.privateSubkey]);class Uc{packetListToStructure(e,t=new Set){let r,n,i,s;for(const a of e){if(a instanceof Wn){Pc.has(a.tag)&&!s&&(s=Cc.has(a.tag)?Cc:Pc);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case R.packet.publicKey:case R.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,n=this.getKeyID(),!n)throw Error("Missing Key ID");break;case R.packet.userID:case R.packet.userAttribute:r=new Ic(a,this),this.users.push(r);break;case R.packet.publicSubkey:case R.packet.secretSubkey:r=null,i=new Sc(a,this),this.subkeys.push(i);break;case R.packet.signature:switch(a.signatureType){case R.signature.certGeneric:case R.signature.certPersona:case R.signature.certCasual:case R.signature.certPositive:if(!r){T.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(n)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case R.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case R.signature.key:this.directSignatures.push(a);break;case R.signature.subkeyBinding:if(!i){T.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}i.bindingSignatures.push(a);break;case R.signature.keyRevocation:this.revocationSignatures.push(a);break;case R.signature.subkeyRevocation:if(!i){T.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}i.revocationSignatures.push(a)}}}}toPacketList(){const e=new Fo;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},n=M){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{Bc(i,n)}catch(e){throw T.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await fc(r.bindingSignatures,i,R.signature.subkeyBinding,e,t,n);if(!Ec(r.keyPacket,s,n))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await fc([s.embeddedSignature],r.keyPacket,R.signature.keyBinding,e,t,n),Bc(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&Ec(i,s,n))return Bc(i,n),this}catch(e){a=e}throw T.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},n=M){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{Bc(i,n)}catch(e){throw T.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await fc(r.bindingSignatures,i,R.signature.subkeyBinding,e,t,n);if(kc(r.keyPacket,s,n))return Bc(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&kc(i,s,n))return Bc(i,n),this}catch(e){a=e}throw T.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,n=M){return wc(this.keyPacket,R.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verifyPrimaryKey(e=new Date,t={},r=M){const n=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(gc(n,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==n.version){const t=await fc(this.directSignatures,n,R.signature.key,{key:n},e,r).catch((()=>{}));if(t&&gc(n,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=M){let r;try{const n=await this.getPrimarySelfSignature(null,e,t),i=mc(this.keyPacket,n),s=n.getExpirationTime(),a=6!==this.keyPacket.version&&await fc(this.directSignatures,this.keyPacket,R.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=mc(this.keyPacket,a);r=Math.min(i,s,e)}else r=i<s?i:s}catch(e){r=null}return T.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=M){const n=this.keyPacket;if(6===n.version)return fc(this.directSignatures,n,R.signature.key,{key:n},e,r);const{selfCertification:i}=await this.getPrimaryUser(e,t,r);return i}async getPrimaryUser(e=new Date,t={},r=M){const n=this.keyPacket,i=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:n},c=await fc(s.selfCertifications,n,R.signature.certGeneric,o,e,r);i.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!i.length)throw s||Error("Could not find primary user");await Promise.all(i.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=i.sort((function(e,t){const r=e.selfCertification,n=t.selfCertification;return n.revoked-r.revoked||r.isPrimaryUserID-n.isPrimaryUserID||r.created-n.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=M){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const n=this.clone();return await Ac(e,n,"revocationSignatures",t,(i=>wc(n.keyPacket,R.signature.keyRevocation,n,[i],null,e.keyPacket,t,r))),await Ac(e,n,"directSignatures",t),await Promise.all(e.users.map((async e=>{const i=n.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(i.length>0)await Promise.all(i.map((n=>n.update(e,t,r))));else{const t=e.clone();t.mainKey=n,n.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const i=n.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(i.length>0)await Promise.all(i.map((n=>n.update(e,t,r))));else{const t=e.clone();t.mainKey=n,n.subkeys.push(t)}}))),n}async getRevocationCertificate(e=new Date,t=M){const r={key:this.keyPacket},n=await fc(this.revocationSignatures,this.keyPacket,R.signature.keyRevocation,r,e,t),i=new Fo;i.push(n);const s=6!==this.keyPacket.version;return X(R.armor.publicKey,i.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=M){const n=await $(e),i=(await Fo.fromBinary(n.data,Kc,r)).findPacket(R.packet.signature);if(!i||i.signatureType!==R.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!i.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await i.verify(this.keyPacket,R.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw T.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(i),s}async signPrimaryUser(e,t,r,n=M){const{index:i,user:s}=await this.getPrimaryUser(t,r,n),a=await s.certify(e,t,n),o=this.clone();return o.users[i]=a,o}async signAllUsers(e,t=new Date,r=M){const n=this.clone();return n.users=await Promise.all(this.users.map((function(n){return n.certify(e,t,r)}))),n}async verifyPrimaryUser(e,t=new Date,r,n=M){const i=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,n);return e?await s.verifyAllCertifications(e,t,n):[{keyID:i.getKeyID(),valid:await s.verify(t,n).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=M){const n=this.keyPacket,i=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:n.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];i.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),i}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{Uc.prototype[e]=Sc.prototype[e]}));class Dc extends Uc{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([R.packet.secretKey,R.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=M){const t=6!==this.keyPacket.version;return X(R.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class xc extends Dc{constructor(e){if(super(),this.packetListToStructure(e,new Set([R.packet.publicKey,R.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new Fo,t=this.toPacketList();let r=!1;for(const n of t)if(!r||n.constructor.tag!==R.packet.Signature)switch(r&&(r=!1),n.constructor.tag){case R.packet.secretKey:{if(n.algorithm===R.publicKey.aead||n.algorithm===R.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=ec.fromSecretKeyPacket(n);e.push(t);break}case R.packet.secretSubkey:{if(n.algorithm===R.publicKey.aead||n.algorithm===R.publicKey.hmac){r=!0;break}const t=nc.fromSecretSubkeyPacket(n);e.push(t);break}default:e.push(n)}return new Dc(e)}armor(e=M){const t=6!==this.keyPacket.version;return X(R.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},n=M){const i=this.keyPacket,s=[];let a=null;for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0)){if(this.subkeys[r].keyPacket.isDummy()){a=a||Error("Gnu-dummy key packets cannot be used for decryption");continue}try{const e={key:i,bind:this.subkeys[r].keyPacket},a=await fc(this.subkeys[r].bindingSignatures,i,R.signature.subkeyBinding,e,t,n);vc(this.subkeys[r].keyPacket,a,n)&&s.push(this.subkeys[r])}catch(e){a=e}}const o=await this.getPrimarySelfSignature(t,r,n);if(e&&!i.getKeyID().equals(e,!0)||!vc(i,o,n)||(i.isDummy()?a=a||Error("Gnu-dummy key packets cannot be used for decryption"):s.push(this)),0===s.length)throw a||Error("No decryption key packets found");return s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=M){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=R.reasonForRevocation.noReason,string:t=""}={},r=new Date,n=M){if(!this.isPrivate())throw Error("Need private key for revoking");const i={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await dc(i,null,this.keyPacket,{signatureType:R.signature.keyRevocation,reasonForRevocationFlag:R.write(R.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,n)),s}async addSubkey(e={}){const t={...M,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const n=r.getAlgorithmInfo();n.type=function(e){switch(R.write(R.publicKey,e)){case R.publicKey.rsaEncrypt:case R.publicKey.rsaEncryptSign:case R.publicKey.rsaSign:case R.publicKey.dsa:return"rsa";case R.publicKey.ecdsa:case R.publicKey.eddsaLegacy:return"ecc";case R.publicKey.ed25519:return"curve25519";case R.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(n.algorithm),n.rsaBits=n.bits||4096,n.curve=n.curve||"curve25519Legacy",e=bc(e,n);const i=await lc(e,{...t,v6Keys:6===this.keyPacket.version});Bc(i,t);const s=await pc(i,r,e,t),a=this.toPacketList();return a.push(i,s),new xc(a)}}const Qc=/*#__PURE__*/T.constructAllowedPackets([ec,nc,sc,cc,oc,ic,Qo]);function Rc(e){for(const t of e)switch(t.constructor.tag){case R.packet.secretKey:return new xc(e);case R.packet.publicKey:return new Dc(e)}throw Error("No key packet found")}async function Mc(e,t,r,n){r.passphrase&&await e.encrypt(r.passphrase,n),await Promise.all(t.map((async function(e,t){const i=r.subkeys[t].passphrase;i&&await e.encrypt(i,n)})));const i=new Fo;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[R.keyFlags.certifyKeys|R.keyFlags.signData];const i=s([R.symmetric.aes256,R.symmetric.aes128],n.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=i,n.aeadProtect){const e=s([R.aead.gcm,R.aead.eax,R.aead.ocb],n.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>i.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([R.hash.sha256,R.hash.sha512,...6===e.version?[R.hash.sha3_256,R.hash.sha3_512]:[]],n.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([R.compression.uncompressed,R.compression.zlib,R.compression.zip],n.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=R.features.modificationDetection,n.aeadProtect&&(t.features[0]|=R.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(i.push(e),6===e.version){const t={key:e},s=a();s.signatureType=R.signature.key;const o=await dc(t,null,e,s,r.date,void 0,void 0,void 0,n);i.push(o)}await Promise.all(r.userIDs.map((async function(t,i){const s=oc.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=R.signature.certPositive,0===i&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await dc(o,null,e,c,r.date,void 0,void 0,void 0,n)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{i.push(e),i.push(t)}))})),await Promise.all(t.map((async function(t,i){const s=r.subkeys[i];return{secretSubkeyPacket:t,subkeySignaturePacket:await pc(t,e,s,n)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{i.push(e),i.push(t)}))}));const o={key:e};return i.push(await dc(o,null,e,{signatureType:R.signature.keyRevocation,reasonForRevocationFlag:R.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,n)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new xc(i)}const Lc=/*#__PURE__*/T.constructAllowedPackets([Co,Ho,Yo,Vo,rc,Jo,Xo,Lo,Qo]),Tc=/*#__PURE__*/T.constructAllowedPackets([Xo]),Fc=/*#__PURE__*/T.constructAllowedPackets([Qo]);class Nc{constructor(e){this.packets=e||new Fo}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(R.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(R.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(R.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,n=new Date,i=M){const s=this.packets.filterByTag(R.packet.symmetricallyEncryptedData,R.packet.symEncryptedIntegrityProtectedData,R.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,n,i);let h=null;const u=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!T.isUint8Array(t)||!a.cipherAlgorithm&&!T.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||R.write(R.symmetric,e);await a.decrypt(r,t,i)}catch(e){T.printDebugError(e),h=e}})));if(P(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new Nc(a.packets);return a.packets=new Fo,l}async decryptSessionKeys(e,t,r,n=new Date,i=M){let s,a=[];if(t){const e=this.packets.filterByTag(R.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let n;n=r?await Fo.fromBinary(e.write(),Tc,i):e,await Promise.all(n.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){T.printDebugError(e),e instanceof ca&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(R.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o;try{o=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,i)).map((e=>e.keyPacket))}catch(e){return void(s=e)}let c=[R.symmetric.aes256,R.symmetric.aes128,R.symmetric.tripledes,R.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(n,void 0,i);t.preferredSymmetricAlgorithms&&(c=c.concat(t.preferredSymmetricAlgorithms))}catch(e){}await Promise.all(o.map((async function(e){if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(i.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===R.publicKey.rsaEncrypt||t.publicKeyAlgorithm===R.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===R.publicKey.rsaSign||t.publicKeyAlgorithm===R.publicKey.elgamal)){const n=t.write();await Promise.all((r?[r]:Array.from(i.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new Jo;r.read(n);const i={sessionKeyAlgorithm:t,sessionKey:oa.generateSessionKey(t)};try{await r.decrypt(e,i),a.push(r)}catch(e){T.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const n=r||t.sessionKeyAlgorithm;if(n&&!c.includes(R.write(R.symmetric,n)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){T.printDebugError(e),s=e}})))}))),P(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+T.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&R.read(R.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(R.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(R.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(R.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],n=M){const{symmetricAlgo:i,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],n=M){const i=await Promise.all(e.map(((e,i)=>e.getPrimarySelfSignature(t,r[i],n))));if(e.length?!n.ignoreSEIPDv2FeatureFlag&&i.every((e=>e.features&&e.features[0]&R.features.seipdv2)):n.aeadProtect){const e={symmetricAlgo:R.symmetric.aes128,aeadAlgo:R.aead.ocb},t=[{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:n.preferredAEADAlgorithm},{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:R.aead.ocb},{symmetricAlgo:R.symmetric.aes128,aeadAlgo:n.preferredAEADAlgorithm}];for(const e of t)if(i.every((t=>t.preferredCipherSuites&&t.preferredCipherSuites.some((t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo)))))return e;return e}const s=R.symmetric.aes128,a=n.preferredSymmetricAlgorithm;return{symmetricAlgo:i.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,n),a=R.read(R.symmetric,i),o=s?R.read(R.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===R.publicKey.x25519||e.keyPacket.algorithm===R.publicKey.x448)&&!o&&!T.isAES(i))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:oa.generateSessionKey(i),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,n=!1,i=[],s=new Date,a=[],o=M){if(r){if(!T.isUint8Array(r.data)||!T.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Nc.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Nc.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await Nc.encryptSessionKey(c,h,u,e,t,n,i,s,a,o),y=Vo.fromObject({version:u?2:1,aeadAlgorithm:u?R.write(R.aead,u):null});y.packets=this.packets;const f=R.write(R.symmetric,h);return await y.encrypt(f,c,o),l.packets.push(y),y.packets=new Fo,l}static async encryptSessionKey(e,t,r,n,i,s=!1,a=[],o=new Date,c=[],h=M){const u=new Fo,l=R.write(R.symmetric,t),y=r&&R.write(R.aead,r);if(n){const t=await Promise.all(n.map((async function(t,r){const n=await t.getEncryptionKey(a[r],o,c,h),i=Jo.fromObject({version:y?6:3,encryptionKeyPacket:n.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await i.encrypt(n.keyPacket),delete i.sessionKey,i})));u.push(...t)}if(i){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,n=async function(e,s,a,o){const c=new Xo(h);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(i.map((e=>t(c,e))))).reduce(r))return n(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(i.map((t=>n(e,l,y,t))));u.push(...s)}return new Nc(u)}async sign(e=[],t=null,r=[],n=new Date,i=[],s=[],a=M){const o=new Fo,c=this.packets.findPacket(R.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await Hc(c,e,t,r,n,i,s,!1,a),u=h.map(((e,t)=>Lo.fromSignaturePacket(e,0===t))).reverse();return o.push(...u),o.push(c),o.push(...h),new Nc(o)}compress(e,t=M){if(e===R.compression.uncompressed)return this;const r=new Ho(t);r.algorithm=e,r.packets=this.packets;const n=new Fo;return n.push(r),new Nc(n)}async signDetached(e=[],t=null,r=[],n=new Date,i=[],s=[],a=M){const o=this.packets.findPacket(R.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new uc(await Hc(o,e,t,r,n,i,s,!0,a))}async verify(e,t=new Date,r=M){const n=this.unwrapCompressed(),i=n.packets.filterByTag(R.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");o(n.packets.stream)&&n.packets.push(...await C(n.packets.stream,(e=>e||[])));const s=n.packets.filterByTag(R.packet.onePassSignature).reverse(),a=n.packets.filterByTag(R.packet.signature);return s.length&&!a.length&&T.isStream(n.packets.stream)&&!o(n.packets.stream)?(await Promise.all(s.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=U((async()=>(await e.correspondingSig).signatureData)),e.hashed=C(await e.hash(e.signatureType,i[0],void 0,!1)),e.hashed.catch((()=>{}))}))),n.packets.stream=k(n.packets.stream,(async(e,t)=>{const r=D(e),n=x(t);try{for(let e=0;e<s.length;e++){const{value:t}=await r.read();s[e].correspondingSigResolve(t)}await r.readToEnd(),await n.ready,await n.close()}catch(e){s.forEach((t=>{t.correspondingSigReject(e)})),await n.abort(e)}})),Oc(s,i,e,t,!1,r)):Oc(a,i,e,t,!1,r)}verifyDetached(e,t,r=new Date,n=M){const i=this.unwrapCompressed().packets.filterByTag(R.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");return Oc(e.packets.filterByTag(R.packet.signature),i,t,r,!0,n)}unwrapCompressed(){const e=this.packets.filterByTag(R.packet.compressedData);return e.length?new Nc(e[0].packets):this}async appendSignature(e,t=M){await this.packets.read(T.isUint8Array(e)?e:(await $(e)).data,Fc,t)}write(){return this.packets.write()}armor(e=M){const t=this.packets[this.packets.length-1],r=t.constructor.tag===Vo.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===Qo.tag&&6!==e.version));return X(R.armor.message,this.write(),null,null,null,r,e)}}async function Hc(e,t,r=null,n=[],i=new Date,s=[],a=[],o=!1,c=M){const h=new Fo,u=null===e.text?R.signature.binary:R.signature.text;if(await Promise.all(t.map((async(t,r)=>{const h=s[r];if(!t.isPrivate())throw Error("Need private key for signing");const l=await t.getSigningKey(n[r],i,h,c);return dc(e,t,l.keyPacket,{signatureType:u},i,h,a,o,c)}))).then((e=>{h.push(...e)})),r){const e=r.packets.filterByTag(R.packet.signature);h.push(...e)}return h}async function Oc(e,t,r,n=new Date,i=!1,s=M){return Promise.all(e.filter((function(e){return["text","binary"].includes(R.read(R.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,n=new Date,i=!1,s=M){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof Lo?e.correspondingSig:e,h={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],n,i,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),n,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new Fo;return e&&t.push(e),new uc(t)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(e,t,r,n,i,s)})))}const zc=/*#__PURE__*/T.constructAllowedPackets([Qo]);class _c{constructor(e,t){if(this.text=T.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof uc))throw Error("Invalid signature input");this.signature=t||new uc(new Fo)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=null,r=[],n=new Date,i=[],s=[],a=M){const o=new Co;o.setText(this.text);const c=new uc(await Hc(o,e,t,r,n,i,s,!0,a));return new _c(this.text,c)}verify(e,t=new Date,r=M){const n=this.signature.packets.filterByTag(R.packet.signature),i=new Co;return i.setText(this.text),Oc(n,[i],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=M){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>R.read(R.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return X(R.armor.signed,r,void 0,void 0,void 0,t,e)}}function Gc(e){if(!(e instanceof Nc))throw Error("Parameter [message] needs to be of type Message")}function jc(e){if(!(e instanceof _c||e instanceof Nc))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function qc(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const Vc=Object.keys(M).length;function Wc(e){const t=Object.keys(e);if(t.length!==Vc)for(const e of t)if(void 0===M[e])throw Error("Unknown config property: "+e)}function Zc(e){return e&&!T.isArray(e)&&(e=[e]),e}async function Yc(e){return"array"===T.isStream(e)?C(e):e}function Jc(e,t){e.data=k(t.packets.stream,(async(t,r)=>{await w(e.data,r,{preventClose:!0});const n=x(r);try{await C(t,(e=>e)),await n.close()}catch(e){await n.abort(e)}}))}function $c(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}function Xc(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, not "+e)}function eh(e,...t){if(!((r=e)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function th(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function rh(e,t){eh(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const nh="object"==typeof t&&"crypto"in t?t.crypto:void 0,ih=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),sh=(e,t)=>e<<32-t|e>>>t,ah=(e,t)=>e<<t|e>>>32-t>>>0,oh=68===new Uint8Array(new Uint32Array([287454020]).buffer)[0];
+/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ch(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function hh(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}function uh(e){return"string"==typeof e&&(e=hh(e)),eh(e),e}function lh(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];eh(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}class yh{clone(){return this._cloneInto()}}function fh(e){const t=t=>e().update(uh(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function gh(e=32){if(nh&&"function"==typeof nh.getRandomValues)return nh.getRandomValues(new Uint8Array(e));if(nh&&"function"==typeof nh.randomBytes)return nh.randomBytes(e);throw Error("crypto.getRandomValues must be defined")}const ph=(e,t,r)=>e&t^~e&r,dh=(e,t,r)=>e&t^e&r^t&r;class Ah extends yh{constructor(e,t,r,n){super(),this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=n,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=ih(this.buffer)}update(e){th(this);const{view:t,buffer:r,blockLen:n}=this,i=(e=uh(e)).length;for(let s=0;s<i;){const a=Math.min(n-this.pos,i-s);if(a!==n)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===n&&(this.process(t,0),this.pos=0);else{const t=ih(e);for(;n<=i-s;s+=n)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){th(this),rh(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:n,isLE:i}=this;let{pos:s}=this;t[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>n-s&&(this.process(r,0),s=0);for(let e=s;e<n;e++)t[e]=0;!function(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s),c=n?4:0,h=n?0:4;e.setUint32(t+c,a,n),e.setUint32(t+h,o,n)}(r,n-8,BigInt(8*this.length),i),this.process(r,0);const a=ih(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,h[e],i)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:n,finished:i,destroyed:s,pos:a}=this;return e.length=n,e.pos=a,e.finished=i,e.destroyed=s,n%t&&e.buffer.set(r),e}}const wh=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),mh=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),bh=/* @__PURE__ */new Uint32Array(64);class Eh extends Ah{constructor(){super(64,32,8,!1),this.A=0|mh[0],this.B=0|mh[1],this.C=0|mh[2],this.D=0|mh[3],this.E=0|mh[4],this.F=0|mh[5],this.G=0|mh[6],this.H=0|mh[7]}get(){const{A:e,B:t,C:r,D:n,E:i,F:s,G:a,H:o}=this;return[e,t,r,n,i,s,a,o]}set(e,t,r,n,i,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)bh[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=bh[e-15],r=bh[e-2],n=sh(t,7)^sh(t,18)^t>>>3,i=sh(r,17)^sh(r,19)^r>>>10;bh[e]=i+bh[e-7]+n+bh[e-16]|0}let{A:r,B:n,C:i,D:s,E:a,F:o,G:c,H:h}=this;for(let e=0;e<64;e++){const t=h+(sh(a,6)^sh(a,11)^sh(a,25))+ph(a,o,c)+wh[e]+bh[e]|0,u=(sh(r,2)^sh(r,13)^sh(r,22))+dh(r,n,i)|0;h=c,c=o,o=a,a=s+t|0,s=i,i=n,n=r,r=t+u|0}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,n,i,s,a,o,c,h)}roundClean(){bh.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class kh extends Eh{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const vh=/* @__PURE__ */fh((()=>new Eh)),Bh=/* @__PURE__ */fh((()=>new kh));class Ih extends yh{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,function(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.wrapConstructor");Xc(e.outputLen),Xc(e.blockLen)}(e);const r=uh(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const n=this.blockLen,i=new Uint8Array(n);i.set(r.length>n?e.create().update(r).digest():r);for(let e=0;e<i.length;e++)i[e]^=54;this.iHash.update(i),this.oHash=e.create();for(let e=0;e<i.length;e++)i[e]^=106;this.oHash.update(i),i.fill(0)}update(e){return th(this),this.iHash.update(e),this}digestInto(e){th(this),eh(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:n,destroyed:i,blockLen:s,outputLen:a}=this;return e.finished=n,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const Sh=(e,t,r)=>new Ih(e,t).update(r).digest();Sh.create=(e,t)=>new Ih(e,t)
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */;const Kh=/* @__PURE__ */BigInt(0),Ch=/* @__PURE__ */BigInt(1),Ph=/* @__PURE__ */BigInt(2);function Uh(e){return e instanceof Uint8Array||null!=e&&"object"==typeof e&&"Uint8Array"===e.constructor.name}function Dh(e){if(!Uh(e))throw Error("Uint8Array expected")}function xh(e,t){if("boolean"!=typeof t)throw Error(`${e} must be valid boolean, got "${t}".`)}const Qh=/* @__PURE__ */Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function Rh(e){Dh(e);let t="";for(let r=0;r<e.length;r++)t+=Qh[e[r]];return t}function Mh(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function Lh(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return BigInt(""===e?"0":"0x"+e)}const Th={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function Fh(e){return e>=Th._0&&e<=Th._9?e-Th._0:e>=Th._A&&e<=Th._F?e-(Th._A-10):e>=Th._a&&e<=Th._f?e-(Th._a-10):void 0}function Nh(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);const t=e.length,r=t/2;if(t%2)throw Error("padded hex string expected, got unpadded hex of length "+t);const n=new Uint8Array(r);for(let t=0,i=0;t<r;t++,i+=2){const r=Fh(e.charCodeAt(i)),s=Fh(e.charCodeAt(i+1));if(void 0===r||void 0===s){const t=e[i]+e[i+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+i)}n[t]=16*r+s}return n}function Hh(e){return Lh(Rh(e))}function Oh(e){return Dh(e),Lh(Rh(Uint8Array.from(e).reverse()))}function zh(e,t){return Nh(e.toString(16).padStart(2*t,"0"))}function _h(e,t){return zh(e,t).reverse()}function Gh(e,t,r){let n;if("string"==typeof t)try{n=Nh(t)}catch(r){throw Error(`${e} must be valid hex string, got "${t}". Cause: ${r}`)}else{if(!Uh(t))throw Error(e+" must be hex string or Uint8Array");n=Uint8Array.from(t)}const i=n.length;if("number"==typeof r&&i!==r)throw Error(`${e} expected ${r} bytes, got ${i}`);return n}function jh(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];Dh(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}const qh=e=>"bigint"==typeof e&&Kh<=e;function Vh(e,t,r){return qh(e)&&qh(t)&&qh(r)&&t<=e&&e<r}function Wh(e,t,r,n){if(!Vh(t,r,n))throw Error(`expected valid ${e}: ${r} <= n < ${n}, got ${typeof t} ${t}`)}function Zh(e){let t;for(t=0;e>Kh;e>>=Ch,t+=1);return t}const Yh=e=>(Ph<<BigInt(e-1))-Ch,Jh=e=>new Uint8Array(e),$h=e=>Uint8Array.from(e);function Xh(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let n=Jh(e),i=Jh(e),s=0;const a=()=>{n.fill(1),i.fill(0),s=0},o=(...e)=>r(i,n,...e),c=(e=Jh())=>{i=o($h([0]),e),n=o(),0!==e.length&&(i=o($h([1]),e),n=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){n=o();const t=n.slice();r.push(t),e+=n.length}return jh(...r)};return(e,t)=>{let r;for(a(),c(e);!(r=t(h()));)c();return a(),r}}const eu={bigint:e=>"bigint"==typeof e,function:e=>"function"==typeof e,boolean:e=>"boolean"==typeof e,string:e=>"string"==typeof e,stringOrUint8Array:e=>"string"==typeof e||Uh(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>"function"==typeof e&&Number.isSafeInteger(e.outputLen)};function tu(e,t,r={}){const n=(t,r,n)=>{const i=eu[r];if("function"!=typeof i)throw Error(`Invalid validator "${r}", expected function`);const s=e[t];if(!(n&&void 0===s||i(s,e)))throw Error(`Invalid param ${t+""}=${s} (${typeof s}), expected ${r}`)};for(const[e,r]of Object.entries(t))n(e,r,!1);for(const[e,t]of Object.entries(r))n(e,t,!0);return e}function ru(e){const t=new WeakMap;return(r,...n)=>{const i=t.get(r);if(void 0!==i)return i;const s=e(r,...n);return t.set(r,s),s}}var nu=/*#__PURE__*/Object.freeze({__proto__:null,aInRange:Wh,abool:xh,abytes:Dh,bitGet:function(e,t){return e>>BigInt(t)&Ch},bitLen:Zh,bitMask:Yh,bitSet:function(e,t,r){return e|(r?Ch:Kh)<<BigInt(t)},bytesToHex:Rh,bytesToNumberBE:Hh,bytesToNumberLE:Oh,concatBytes:jh,createHmacDrbg:Xh,ensureBytes:Gh,equalBytes:function(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r},hexToBytes:Nh,hexToNumber:Lh,inRange:Vh,isBytes:Uh,memoized:ru,notImplemented:()=>{throw Error("not implemented")},numberToBytesBE:zh,numberToBytesLE:_h,numberToHexUnpadded:Mh,numberToVarBytesBE:function(e){return Nh(Mh(e))},utf8ToBytes:function(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))},validateObject:tu});
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const iu=BigInt(0),su=BigInt(1),au=BigInt(2),ou=BigInt(3),cu=BigInt(4),hu=BigInt(5),uu=BigInt(8);function lu(e,t){const r=e%t;return r>=iu?r:t+r}function yu(e,t,r){if(r<=iu||t<iu)throw Error("Expected power/modulo > 0");if(r===su)return iu;let n=su;for(;t>iu;)t&su&&(n=n*e%r),e=e*e%r,t>>=su;return n}function fu(e,t,r){let n=e;for(;t-- >iu;)n*=n,n%=r;return n}function gu(e,t){if(e===iu||t<=iu)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=lu(e,t),n=t,i=iu,s=su;for(;r!==iu;){const e=n%r,t=i-s*(n/r);n=r,r=e,i=s,s=t}if(n!==su)throw Error("invert: does not exist");return lu(i,t)}function pu(e){if(e%cu===ou){const t=(e+su)/cu;return function(e,r){const n=e.pow(r,t);if(!e.eql(e.sqr(n),r))throw Error("Cannot find square root");return n}}if(e%uu===hu){const t=(e-hu)/uu;return function(e,r){const n=e.mul(r,au),i=e.pow(n,t),s=e.mul(r,i),a=e.mul(e.mul(s,au),i),o=e.mul(s,e.sub(a,e.ONE));if(!e.eql(e.sqr(o),r))throw Error("Cannot find square root");return o}}return function(e){const t=(e-su)/au;let r,n,i;for(r=e-su,n=0;r%au===iu;r/=au,n++);for(i=au;i<e&&yu(i,t,e)!==e-su;i++);if(1===n){const t=(e+su)/cu;return function(e,r){const n=e.pow(r,t);if(!e.eql(e.sqr(n),r))throw Error("Cannot find square root");return n}}const s=(r+su)/au;return function(e,a){if(e.pow(a,t)===e.neg(e.ONE))throw Error("Cannot find square root");let o=n,c=e.pow(e.mul(e.ONE,i),r),h=e.pow(a,s),u=e.pow(a,r);for(;!e.eql(u,e.ONE);){if(e.eql(u,e.ZERO))return e.ZERO;let t=1;for(let r=e.sqr(u);t<o&&!e.eql(r,e.ONE);t++)r=e.sqr(r);const r=e.pow(c,su<<BigInt(o-t-1));c=e.sqr(r),h=e.mul(h,r),u=e.mul(u,c),o=t}return h}}(e)}BigInt(9),BigInt(16);const du=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function Au(e,t){const r=void 0!==t?t:e.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function wu(e,t,r=!1,n={}){if(e<=iu)throw Error("Expected Field ORDER > 0, got "+e);const{nBitLength:i,nByteLength:s}=Au(e,t);if(s>2048)throw Error("Field lengths over 2048 bytes are not supported");const a=pu(e),o=Object.freeze({ORDER:e,BITS:i,BYTES:s,MASK:Yh(i),ZERO:iu,ONE:su,create:t=>lu(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("Invalid field element: expected bigint, got "+typeof t);return iu<=t&&t<e},is0:e=>e===iu,isOdd:e=>(e&su)===su,neg:t=>lu(-t,e),eql:(e,t)=>e===t,sqr:t=>lu(t*t,e),add:(t,r)=>lu(t+r,e),sub:(t,r)=>lu(t-r,e),mul:(t,r)=>lu(t*r,e),pow:(e,t)=>function(e,t,r){if(r<iu)throw Error("Expected power > 0");if(r===iu)return e.ONE;if(r===su)return t;let n=e.ONE,i=t;for(;r>iu;)r&su&&(n=e.mul(n,i)),i=e.sqr(i),r>>=su;return n}(o,e,t),div:(t,r)=>lu(t*gu(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>gu(t,e),sqrt:n.sqrt||(e=>a(o,e)),invertBatch:e=>function(e,t){const r=Array(t.length),n=t.reduce(((t,n,i)=>e.is0(n)?t:(r[i]=t,e.mul(t,n))),e.ONE),i=e.inv(n);return t.reduceRight(((t,n,i)=>e.is0(n)?t:(r[i]=e.mul(t,r[i]),e.mul(t,n))),i),r}(o,e),cmov:(e,t,r)=>r?t:e,toBytes:e=>r?_h(e,s):zh(e,s),fromBytes:e=>{if(e.length!==s)throw Error(`Fp.fromBytes: expected ${s}, got ${e.length}`);return r?Oh(e):Hh(e)}});return Object.freeze(o)}function mu(e){if("bigint"!=typeof e)throw Error("field order must be bigint");const t=e.toString(2).length;return Math.ceil(t/8)}function bu(e){const t=mu(e);return t+Math.ceil(t/2)}
 /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
-const ah=BigInt(0),oh=BigInt(1);function ch(e,t){const r=(e,t)=>{const r=t.negate();return e?r:t},i=e=>({windows:Math.ceil(t/e)+1,windowSize:2**(e-1)});return{constTimeNegate:r,unsafeLadder(t,r){let i=e.ZERO,n=t;for(;r>ah;)r&oh&&(i=i.add(n)),n=n.double(),r>>=oh;return i},precomputeWindow(e,t){const{windows:r,windowSize:n}=i(t),s=[];let a=e,o=a;for(let e=0;e<r;e++){o=a,s.push(o);for(let e=1;e<n;e++)o=o.add(a),s.push(o);a=o.double()}return s},wNAF(t,n,s){const{windows:a,windowSize:o}=i(t);let c=e.ZERO,h=e.BASE;const u=BigInt(2**t-1),l=2**t,y=BigInt(t);for(let e=0;e<a;e++){const t=e*o;let i=Number(s&u);s>>=y,i>o&&(i-=l,s+=oh);const a=t,f=t+Math.abs(i)-1,g=e%2!=0,p=i<0;0===i?h=h.add(r(g,n[a])):c=c.add(r(p,n[f]))}return{p:c,f:h}},wNAFCached(e,t,r,i){const n=e._WINDOW_SIZE||1;let s=t.get(e);return s||(s=this.precomputeWindow(e,n),1!==n&&t.set(e,i(s))),this.wNAF(n,s,r)}}}function hh(e){return Hc(e.Fp,th.reduce(((e,t)=>(e[t]="function",e)),{ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),Hc(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...rh(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:uh,hexToBytes:lh}=Oc,yh={Err:class extends Error{constructor(e=""){super(e)}},_parseInt(e){const{Err:t}=yh;if(e.length<2||2!==e[0])throw new t("Invalid signature integer tag");const r=e[1],i=e.subarray(2,r+2);if(!r||i.length!==r)throw new t("Invalid signature integer: wrong length");if(128&i[0])throw new t("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new t("Invalid signature integer: unnecessary leading zero");return{d:uh(i),l:e.subarray(r+2)}},toSig(e){const{Err:t}=yh,r="string"==typeof e?lh(e):e;kc(r);let i=r.length;if(i<2||48!=r[0])throw new t("Invalid signature tag");if(r[1]!==i-2)throw new t("Invalid signature: incorrect length");const{d:n,l:s}=yh._parseInt(r.subarray(2)),{d:a,l:o}=yh._parseInt(s);if(o.length)throw new t("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(e){const t=e=>8&Number.parseInt(e[0],16)?"00"+e:e,r=e=>{const t=e.toString(16);return 1&t.length?"0"+t:t},i=t(r(e.s)),n=t(r(e.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},fh=BigInt(0),gh=BigInt(1);BigInt(2);const ph=BigInt(3);function dh(e){const t=function(e){const t=hh(e);Hc(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=t;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}(e),{Fp:r}=t,i=t.toBytes||((e,t,i)=>{const n=t.toAffine();return Mc(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=t.fromBytes||(e=>{const t=e.subarray(1);return{x:r.fromBytes(t.subarray(0,r.BYTES)),y:r.fromBytes(t.subarray(r.BYTES,2*r.BYTES))}});function s(e){const{a:i,b:n}=t,s=r.sqr(e),a=r.mul(s,e);return r.add(r.add(a,r.mul(e,i)),n)}if(!r.eql(r.sqr(t.Gy),s(t.Gx)))throw Error("bad generator point: equation left != right");function a(e){return"bigint"==typeof e&&fh<e&&e<t.n}function o(e){if(!a(e))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(e){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=t;if(r&&"bigint"!=typeof e){if(Ec(e)&&(e=Bc(e)),"string"!=typeof e||!r.includes(e.length))throw Error("Invalid key");e=e.padStart(2*i,"0")}let a;try{a="bigint"==typeof e?e:Dc(Rc("private key",e,i))}catch(t){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof e}`)}return n&&(a=Jc(a,s)),o(a),a}const h=new Map;function u(e){if(!(e instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(e,t,i){if(this.px=e,this.py=t,this.pz=i,null==e||!r.isValid(e))throw Error("x required");if(null==t||!r.isValid(t))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(e){const{x:t,y:i}=e||{};if(!e||!r.isValid(t)||!r.isValid(i))throw Error("invalid affine point");if(e instanceof l)throw Error("projective point not allowed");const n=e=>r.eql(e,r.ZERO);return n(t)&&n(i)?l.ZERO:new l(t,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}static fromHex(e){const t=l.fromAffine(n(Rc("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return l.BASE.multiply(c(e))}_setWindowSize(e){this._WINDOW_SIZE=e,h.delete(this)}assertValidity(){if(this.is0()){if(t.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:e,y:i}=this.toAffine();if(!r.isValid(e)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(e);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:e}=this.toAffine();if(r.isOdd)return!r.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){u(e);const{px:t,py:i,pz:n}=this,{px:s,py:a,pz:o}=e,c=r.eql(r.mul(t,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:e,b:i}=t,n=r.mul(i,ph),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,y=r.mul(s,s),f=r.mul(a,a),g=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(e,u),h=r.mul(n,g),h=r.add(c,h),c=r.sub(f,h),h=r.add(f,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),g=r.mul(e,g),p=r.sub(y,g),p=r.mul(e,p),p=r.add(p,u),u=r.add(y,y),y=r.add(u,y),y=r.add(y,g),y=r.mul(y,p),h=r.add(h,y),g=r.mul(a,o),g=r.add(g,g),y=r.mul(g,p),c=r.sub(c,y),u=r.mul(g,f),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(e){u(e);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=e;let h=r.ZERO,y=r.ZERO,f=r.ZERO;const g=t.a,p=r.mul(t.b,ph);let d=r.mul(i,a),A=r.mul(n,o),w=r.mul(s,c),m=r.add(i,n),b=r.add(a,o);m=r.mul(m,b),b=r.add(d,A),m=r.sub(m,b),b=r.add(i,s);let E=r.add(a,c);return b=r.mul(b,E),E=r.add(d,w),b=r.sub(b,E),E=r.add(n,s),h=r.add(o,c),E=r.mul(E,h),h=r.add(A,w),E=r.sub(E,h),f=r.mul(g,b),h=r.mul(p,w),f=r.add(h,f),h=r.sub(A,f),f=r.add(A,f),y=r.mul(h,f),A=r.add(d,d),A=r.add(A,d),w=r.mul(g,w),b=r.mul(p,b),A=r.add(A,w),w=r.sub(d,w),w=r.mul(g,w),b=r.add(b,w),d=r.mul(A,b),y=r.add(y,d),d=r.mul(E,b),h=r.mul(m,h),h=r.sub(h,d),d=r.mul(m,A),f=r.mul(E,f),f=r.add(f,d),new l(h,y,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(l.ZERO)}wNAF(e){return f.wNAFCached(this,h,e,(e=>{const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}))}multiplyUnsafe(e){const i=l.ZERO;if(e===fh)return i;if(o(e),e===gh)return this;const{endo:n}=t;if(!n)return f.unsafeLadder(this,e);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(e),u=i,y=i,g=this;for(;a>fh||h>fh;)a&gh&&(u=u.add(g)),h&gh&&(y=y.add(g)),g=g.double(),a>>=gh,h>>=gh;return s&&(u=u.negate()),c&&(y=y.negate()),y=new l(r.mul(y.px,n.beta),y.py,y.pz),u.add(y)}multiply(e){o(e);let i,n,s=e;const{endo:a}=t;if(a){const{k1neg:e,k1:t,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(t),{p:y,f:g}=this.wNAF(c);h=f.constTimeNegate(e,h),y=f.constTimeNegate(o,y),y=new l(r.mul(y.px,a.beta),y.py,y.pz),i=h.add(y),n=u.add(g)}else{const{p:e,f:t}=this.wNAF(s);i=e,n=t}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(e,t,r){const i=l.BASE,n=(e,t)=>t!==fh&&t!==gh&&e.equals(i)?e.multiply(t):e.multiplyUnsafe(t),s=n(this,t).add(n(e,r));return s.is0()?void 0:s}toAffine(e){const{px:t,py:i,pz:n}=this,s=this.is0();null==e&&(e=s?r.ONE:r.inv(n));const a=r.mul(t,e),o=r.mul(i,e),c=r.mul(n,e);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:e,isTorsionFree:r}=t;if(e===gh)return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:e,clearCofactor:r}=t;return e===gh?this:r?r(l,this):this.multiplyUnsafe(t.h)}toRawBytes(e=!0){return this.assertValidity(),i(l,this,e)}toHex(e=!0){return Bc(this.toRawBytes(e))}}l.BASE=new l(t.Gx,t.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const y=t.nBitLength,f=ch(l,t.endo?Math.ceil(y/2):y);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function Ah(e){const t=function(e){const t=hh(e);return Hc(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}(e),{Fp:r,n:i}=t,n=r.BYTES+1,s=2*r.BYTES+1;function a(e){return Jc(e,i)}function o(e){return Xc(e,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=dh({...t,toBytes(e,t,i){const n=t.toAffine(),s=r.toBytes(n.x),a=Mc;return i?a(Uint8Array.from([t.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(e){const t=e.length,i=e[0],a=e.subarray(1);if(t!==n||2!==i&&3!==i){if(t===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${t} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const e=Dc(a);if(!(fh<(o=e)&&o<r.ORDER))throw Error("Point is not on curve");const t=u(e);let n;try{n=r.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("Point is not on curve"+t)}return!(1&~i)!==((n&gh)===gh)&&(n=r.neg(n)),{x:e,y:n}}var o}}),y=e=>Bc(xc(e,t.nByteLength));function f(e){return e>i>>gh}const g=(e,t,r)=>Dc(e.slice(t,r));class p{constructor(e,t,r){this.r=e,this.s=t,this.recovery=r,this.assertValidity()}static fromCompact(e){const r=t.nByteLength;return e=Rc("compactSignature",e,2*r),new p(g(e,0,r),g(e,r,2*r))}static fromDER(e){const{r:t,s:r}=yh.toSig(Rc("DER",e));return new p(t,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(e){return new p(this.r,this.s,e)}recoverPublicKey(e){const{r:i,s:n,recovery:s}=this,h=m(Rc("msgHash",e));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i+t.n:i;if(u>=r.ORDER)throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",f=c.fromHex(l+y(u)),g=o(u),p=a(-h*g),d=a(n*g),A=c.BASE.multiplyAndAddUnsafe(f,p,d);if(!A)throw Error("point at infinify");return A.assertValidity(),A}hasHighS(){return f(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(-this.s),this.recovery):this}toDERRawBytes(){return Pc(this.toDERHex())}toDERHex(){return yh.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return Pc(this.toCompactHex())}toCompactHex(){return y(this.r)+y(this.s)}}const d={isValidPrivateKey(e){try{return h(e),!0}catch(e){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const e=sh(t.n);return function(e,t,r=!1){const i=e.length,n=nh(t),s=sh(t);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=Jc(r?Dc(e):Uc(e),t-Gc)+Gc;return r?Qc(a,n):xc(a,n)}(t.randomBytes(e),t.n)},precompute:(e=8,t=c.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)};function A(e){const t=Ec(e),r="string"==typeof e,i=(t||r)&&e.length;return t?i===n||i===s:r?i===2*n||i===2*s:e instanceof c}const w=t.bits2int||function(e){const r=Dc(e),i=8*e.length-t.nBitLength;return i>0?r>>BigInt(i):r},m=t.bits2int_modN||function(e){return a(w(e))},b=Tc(t.nBitLength);function E(e){if("bigint"!=typeof e)throw Error("bigint expected");if(!(fh<=e&&e<b))throw Error("bigint expected < 2^"+t.nBitLength);return xc(e,t.nByteLength)}function k(e,i,n=v){if(["recovered","canonical"].some((e=>e in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=t;let{lowS:y,prehash:g,extraEntropy:d}=n;null==y&&(y=!0),e=Rc("msgHash",e),g&&(e=Rc("prehashed msgHash",s(e)));const A=m(e),b=h(i),k=[E(b),E(A)];if(null!=d&&!1!==d){const e=!0===d?u(r.BYTES):d;k.push(Rc("extraEntropy",e))}const B=Mc(...k),I=A;return{seed:B,k2sig:function(e){const t=w(e);if(!l(t))return;const r=o(t),i=c.BASE.multiply(t).toAffine(),n=a(i.x);if(n===fh)return;const s=a(r*a(I+n*b));if(s===fh)return;let h=(i.x===n?0:2)|Number(i.y&gh),u=s;return y&&f(s)&&(u=function(e){return f(e)?a(-e):e}(s),h^=1),new p(n,u,h)}}}const v={lowS:t.lowS,prehash:!1},B={lowS:t.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:t,getPublicKey:function(e,t=!0){return c.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(A(e))throw Error("first arg must be private key");if(!A(t))throw Error("second arg must be public key");return c.fromHex(t).multiply(h(e)).toRawBytes(r)},sign:function(e,r,i=v){const{seed:n,k2sig:s}=k(e,r,i),a=t;return Fc(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(e,r,i,n=B){const s=e;if(r=Rc("msgHash",r),i=Rc("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,y;try{if("string"==typeof s||Ec(s))try{l=p.fromDER(s)}catch(e){if(!(e instanceof yh.Err))throw e;l=p.fromCompact(s)}else{if("object"!=typeof s||"bigint"!=typeof s.r||"bigint"!=typeof s.s)throw Error("PARSE");{const{r:e,s:t}=s;l=new p(e,t)}}y=c.fromHex(i)}catch(e){if("PARSE"===e.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=t.hash(r));const{r:f,s:g}=l,d=m(r),A=o(g),w=a(d*A),b=a(f*A),E=c.BASE.multiplyAndAddUnsafe(y,w,b)?.toAffine();return!!E&&a(E.x)===f},ProjectivePoint:c,Signature:p,utils:d}}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function wh(e){return{hash:e,hmac:(t,...r)=>Ac(e,t,yc(...r)),randomBytes:pc}}function mh(e,t){const r=t=>Ah({...e,...wh(t)});return Object.freeze({...r(t),create:r})}BigInt(4);const bh=(e,t,r)=>e&t^~e&r,Eh=(e,t,r)=>e&t^e&r^t&r;class kh extends fc{constructor(e,t,r,i){super(),this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=sc(this.buffer)}update(e){rc(this);const{view:t,buffer:r,blockLen:i}=this,n=(e=lc(e)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(t,0),this.pos=0);else{const t=sc(e);for(;i<=n-s;s+=i)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){rc(this),ic(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;t[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let e=s;e<i;e++)t[e]=0;!function(e,t,r,i){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,i);const n=BigInt(32),s=BigInt(4294967295),a=Number(r>>n&s),o=Number(r&s),c=i?4:0,h=i?0:4;e.setUint32(t+c,a,i),e.setUint32(t+h,o,i)}(r,i-8,BigInt(8*this.length),n),this.process(r,0);const a=sc(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,h[e],n)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return e.length=i,e.pos=a,e.finished=n,e.destroyed=s,i%t&&e.buffer.set(r),e}}const vh=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Bh=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Ih=/* @__PURE__ */new Uint32Array(64);class Sh extends kh{constructor(){super(64,32,8,!1),this.A=0|Bh[0],this.B=0|Bh[1],this.C=0|Bh[2],this.D=0|Bh[3],this.E=0|Bh[4],this.F=0|Bh[5],this.G=0|Bh[6],this.H=0|Bh[7]}get(){const{A:e,B:t,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[e,t,r,i,n,s,a,o]}set(e,t,r,i,n,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)Ih[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=Ih[e-15],r=Ih[e-2],i=ac(t,7)^ac(t,18)^t>>>3,n=ac(r,17)^ac(r,19)^r>>>10;Ih[e]=n+Ih[e-7]+i+Ih[e-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let e=0;e<64;e++){const t=h+(ac(a,6)^ac(a,11)^ac(a,25))+bh(a,o,c)+vh[e]+Ih[e]|0,u=(ac(r,2)^ac(r,13)^ac(r,22))+Eh(r,i,n)|0;h=c,c=o,o=a,a=s+t|0,s=n,n=i,i=r,r=t+u|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){Ih.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class Ch extends Sh{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Kh=/* @__PURE__ */gc((()=>new Sh)),Ph=/* @__PURE__ */gc((()=>new Ch)),Dh=ih(BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),Uh=mh({a:Dh.create(BigInt("-3")),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Dh,n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:BigInt(1),lowS:!1},Kh),xh=/* @__PURE__ */BigInt(2**32-1),Qh=/* @__PURE__ */BigInt(32);function Rh(e,t=!1){return t?{h:Number(e&xh),l:Number(e>>Qh&xh)}:{h:0|Number(e>>Qh&xh),l:0|Number(e&xh)}}function Mh(e,t=!1){let r=new Uint32Array(e.length),i=new Uint32Array(e.length);for(let n=0;n<e.length;n++){const{h:s,l:a}=Rh(e[n],t);[r[n],i[n]]=[s,a]}return[r,i]}const Th=(e,t,r)=>e<<r|t>>>32-r,Lh=(e,t,r)=>t<<r|e>>>32-r,_h=(e,t,r)=>t<<r-32|e>>>64-r,Fh=(e,t,r)=>e<<r-32|t>>>64-r;const Nh={fromBig:Rh,split:Mh,toBig:(e,t)=>BigInt(e>>>0)<<Qh|BigInt(t>>>0),shrSH:(e,t,r)=>e>>>r,shrSL:(e,t,r)=>e<<32-r|t>>>r,rotrSH:(e,t,r)=>e>>>r|t<<32-r,rotrSL:(e,t,r)=>e<<32-r|t>>>r,rotrBH:(e,t,r)=>e<<64-r|t>>>r-32,rotrBL:(e,t,r)=>e>>>r-32|t<<64-r,rotr32H:(e,t)=>t,rotr32L:(e,t)=>e,rotlSH:Th,rotlSL:Lh,rotlBH:_h,rotlBL:Fh,add:function(e,t,r,i){const n=(t>>>0)+(i>>>0);return{h:e+r+(n/2**32|0)|0,l:0|n}},add3L:(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),add3H:(e,t,r,i)=>t+r+i+(e/2**32|0)|0,add4L:(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),add4H:(e,t,r,i,n)=>t+r+i+n+(e/2**32|0)|0,add5H:(e,t,r,i,n,s)=>t+r+i+n+s+(e/2**32|0)|0,add5L:(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0)},[Hh,Oh]=/* @__PURE__ */(()=>Nh.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),zh=/* @__PURE__ */new Uint32Array(80),Gh=/* @__PURE__ */new Uint32Array(80);class qh extends kh{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:y,Gl:f,Hh:g,Hl:p}=this;return[e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p]}set(e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|y,this.Gl=0|f,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)zh[r]=e.getUint32(t),Gh[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|zh[e-15],r=0|Gh[e-15],i=Nh.rotrSH(t,r,1)^Nh.rotrSH(t,r,8)^Nh.shrSH(t,r,7),n=Nh.rotrSL(t,r,1)^Nh.rotrSL(t,r,8)^Nh.shrSL(t,r,7),s=0|zh[e-2],a=0|Gh[e-2],o=Nh.rotrSH(s,a,19)^Nh.rotrBH(s,a,61)^Nh.shrSH(s,a,6),c=Nh.rotrSL(s,a,19)^Nh.rotrBL(s,a,61)^Nh.shrSL(s,a,6),h=Nh.add4L(n,c,Gh[e-7],Gh[e-16]),u=Nh.add4H(h,i,o,zh[e-7],zh[e-16]);zh[e]=0|u,Gh[e]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:y,Fl:f,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=Nh.rotrSH(u,l,14)^Nh.rotrSH(u,l,18)^Nh.rotrBH(u,l,41),w=Nh.rotrSL(u,l,14)^Nh.rotrSL(u,l,18)^Nh.rotrBL(u,l,41),m=u&y^~u&g,b=l&f^~l&p,E=Nh.add5L(A,w,b,Oh[e],Gh[e]),k=Nh.add5H(E,d,t,m,Hh[e],zh[e]),v=0|E,B=Nh.rotrSH(r,i,28)^Nh.rotrBH(r,i,34)^Nh.rotrBH(r,i,39),I=Nh.rotrSL(r,i,28)^Nh.rotrBL(r,i,34)^Nh.rotrBL(r,i,39),S=r&n^r&a^n&a,C=i&s^i&o^s&o;d=0|g,A=0|p,g=0|y,p=0|f,y=0|u,f=0|l,({h:u,l}=Nh.add(0|c,0|h,0|k,0|v)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=Nh.add3L(v,I,C);r=Nh.add3H(K,k,B,S),i=0|K}({h:r,l:i}=Nh.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=Nh.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=Nh.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=Nh.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=Nh.add(0|this.Eh,0|this.El,0|u,0|l)),({h:y,l:f}=Nh.add(0|this.Fh,0|this.Fl,0|y,0|f)),({h:g,l:p}=Nh.add(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=Nh.add(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,i,n,s,a,o,c,h,u,l,y,f,g,p,d,A)}roundClean(){zh.fill(0),Gh.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class jh extends qh{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const Vh=/* @__PURE__ */gc((()=>new qh)),Yh=/* @__PURE__ */gc((()=>new jh)),Zh=ih(BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),Jh=mh({a:Zh.create(BigInt("-3")),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:Zh,n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:BigInt(1),lowS:!1},Yh),Wh=ih(BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),$h={a:Wh.create(BigInt("-3")),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:Wh,n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:BigInt(1)},Xh=mh({a:$h.a,b:$h.b,Fp:Wh,n:$h.n,Gx:$h.Gx,Gy:$h.Gy,h:$h.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},Vh),eu=[],tu=[],ru=[],iu=/* @__PURE__ */BigInt(0),nu=/* @__PURE__ */BigInt(1),su=/* @__PURE__ */BigInt(2),au=/* @__PURE__ */BigInt(7),ou=/* @__PURE__ */BigInt(256),cu=/* @__PURE__ */BigInt(113);for(let e=0,t=nu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],eu.push(2*(5*i+r)),tu.push((e+1)*(e+2)/2%64);let n=iu;for(let e=0;e<7;e++)t=(t<<nu^(t>>au)*cu)%ou,t&su&&(n^=nu<<(nu<</* @__PURE__ */BigInt(e))-nu);ru.push(n)}const[hu,uu]=/* @__PURE__ */Mh(ru,!0),lu=(e,t,r)=>r>32?_h(e,t,r):Th(e,t,r),yu=(e,t,r)=>r>32?Fh(e,t,r):Lh(e,t,r);class fu extends fc{constructor(e,t,r,i=!1,n=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,ec(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){cc||hc(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const i=(t+8)%10,n=(t+2)%10,s=r[n],a=r[n+1],o=lu(s,a,1)^r[i],c=yu(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],n=e[3];for(let r=0;r<24;r++){const i=tu[r],s=lu(t,n,i),a=yu(t,n,i),o=eu[r];t=e[o],n=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let i=0;i<10;i++)r[i]=e[t+i];for(let i=0;i<10;i++)e[t+i]^=~r[(i+2)%10]&r[(i+4)%10]}e[0]^=hu[i],e[1]^=uu[i]}r.fill(0)}(this.state32,this.rounds),cc||hc(this.state32),this.posOut=0,this.pos=0}update(e){rc(this);const{blockLen:t,state:r}=this,i=(e=lc(e)).length;for(let n=0;n<i;){const s=Math.min(t-this.pos,i-n);for(let t=0;t<s;t++)r[this.pos++]^=e[n++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:i}=this;e[r]^=t,128&t&&r===i-1&&this.keccak(),e[i-1]^=128,this.keccak()}writeInto(e){rc(this,!1),tc(e),this.finish();const t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return ec(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(ic(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return e||(e=new fu(t,r,i,s,n)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=s,e.destroyed=this.destroyed,e}}const gu=(e,t,r)=>gc((()=>new fu(t,e,r))),pu=/* @__PURE__ */gu(6,136,32),du=/* @__PURE__ */gu(6,72,64),Au=/* @__PURE__ */((e,t,r)=>function(e){const t=(t,r)=>e(r).update(lc(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((i={})=>new fu(t,e,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),wu=BigInt(0),mu=BigInt(1),bu=BigInt(2),Eu=BigInt(8),ku={zip215:!0};function vu(e){const t=function(e){const t=hh(e);return Hc(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}(e),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=t,h=bu<<BigInt(8*o)-mu,u=r.create,l=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:r.sqrt(e*r.inv(t))}}catch(e){return{isValid:!1,value:wu}}}),y=t.adjustScalarBytes||(e=>e),f=t.domain||((e,t,r)=>{if(t.length||r)throw Error("Contexts/pre-hash are not supported");return e}),g=e=>"bigint"==typeof e&&wu<e,p=(e,t)=>g(e)&&g(t)&&e<t,d=e=>e===wu||p(e,h);function A(e,t){if(p(e,t))return e;throw Error(`Expected valid scalar < ${t}, got ${typeof e} ${e}`)}function w(e){return e===wu?e:A(e,i)}const m=new Map;function b(e){if(!(e instanceof E))throw Error("ExtendedPoint expected")}class E{constructor(e,t,r,i){if(this.ex=e,this.ey=t,this.ez=r,this.et=i,!d(e))throw Error("x required");if(!d(t))throw Error("y required");if(!d(r))throw Error("z required");if(!d(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(e){if(e instanceof E)throw Error("extended point not allowed");const{x:t,y:r}=e||{};if(!d(t)||!d(r))throw Error("invalid affine point");return new E(t,r,mu,u(t*r))}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.ez)));return e.map(((e,r)=>e.toAffine(t[r]))).map(E.fromAffine)}_setWindowSize(e){this._WINDOW_SIZE=e,m.delete(this)}assertValidity(){const{a:e,d:r}=t;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i*i),c=u(n*n),h=u(s*s),l=u(h*h),y=u(o*e);if(u(h*u(y+c))!==u(l+u(r*u(o*c))))throw Error("bad point: equation left != right (1)");if(u(i*n)!==u(s*a))throw Error("bad point: equation left != right (2)")}equals(e){b(e);const{ex:t,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=e,o=u(t*a),c=u(n*i),h=u(r*a),l=u(s*i);return o===c&&h===l}is0(){return this.equals(E.ZERO)}negate(){return new E(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){const{a:e}=t,{ex:r,ey:i,ez:n}=this,s=u(r*r),a=u(i*i),o=u(bu*u(n*n)),c=u(e*s),h=r+i,l=u(u(h*h)-s-a),y=c+a,f=y-o,g=c-a,p=u(l*f),d=u(y*g),A=u(l*g),w=u(f*y);return new E(p,d,w,A)}add(e){b(e);const{a:r,d:i}=t,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:y}=e;if(r===BigInt(-1)){const e=u((s-n)*(h+c)),t=u((s+n)*(h-c)),r=u(t-e);if(r===wu)return this.double();const i=u(a*bu*y),f=u(o*bu*l),g=f+i,p=t+e,d=f-i,A=u(g*r),w=u(p*d),m=u(g*d),b=u(r*p);return new E(A,w,b,m)}const f=u(n*c),g=u(s*h),p=u(o*i*y),d=u(a*l),A=u((n+s)*(c+h)-f-g),w=d-p,m=d+p,k=u(g-r*f),v=u(A*w),B=u(m*k),I=u(A*k),S=u(w*m);return new E(v,B,S,I)}subtract(e){return this.add(e.negate())}wNAF(e){return B.wNAFCached(this,m,e,E.normalizeZ)}multiply(e){const{p:t,f:r}=this.wNAF(A(e,i));return E.normalizeZ([t,r])[0]}multiplyUnsafe(e){let t=w(e);return t===wu?v:this.equals(v)||t===mu?this:this.equals(k)?this.wNAF(t).p:B.unsafeLadder(this,t)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return B.unsafeLadder(this,i).is0()}toAffine(e){const{ex:t,ey:i,ez:n}=this,s=this.is0();null==e&&(e=s?Eu:r.inv(n));const a=u(t*e),o=u(i*e),c=u(n*e);if(s)return{x:wu,y:mu};if(c!==mu)throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:e}=t;return e===mu?this:this.multiplyUnsafe(e)}static fromHex(e,i=!1){const{d:n,a:s}=t,a=r.BYTES,o=(e=Rc("pointHex",e,a)).slice(),c=e[a-1];o[a-1]=-129&c;const y=Uc(o);y===wu||A(y,i?h:r.ORDER);const f=u(y*y),g=u(f-mu),p=u(n*f-s);let{isValid:d,value:w}=l(g,p);if(!d)throw Error("Point.fromHex: invalid y coordinate");const m=(w&mu)===mu,b=!!(128&c);if(!i&&w===wu&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==m&&(w=u(-w)),E.fromAffine({x:w,y})}static fromPrivateKey(e){return C(e).point}toRawBytes(){const{x:e,y:t}=this.toAffine(),i=Qc(t,r.BYTES);return i[i.length-1]|=e&mu?128:0,i}toHex(){return Bc(this.toRawBytes())}}E.BASE=new E(t.Gx,t.Gy,mu,u(t.Gx*t.Gy)),E.ZERO=new E(wu,mu,mu,wu);const{BASE:k,ZERO:v}=E,B=ch(E,8*o);function I(e){return Jc(e,i)}function S(e){return I(Uc(e))}function C(e){const t=o;e=Rc("private key",e,t);const r=Rc("hashed private key",s(e),2*t),i=y(r.slice(0,t)),n=r.slice(t,2*t),a=S(i),c=k.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(e=new Uint8Array,...t){const r=Mc(...t);return S(s(f(r,Rc("context",e),!!n)))}const P=ku;k._setWindowSize(8);return{CURVE:t,getPublicKey:function(e){return C(e).pointBytes},sign:function(e,t,i={}){e=Rc("message",e),n&&(e=n(e));const{prefix:s,scalar:a,pointBytes:c}=C(t),h=K(i.context,s,e),u=k.multiply(h).toRawBytes(),l=I(h+K(i.context,u,c,e)*a);return w(l),Rc("result",Mc(u,Qc(l,r.BYTES)),2*o)},verify:function(e,t,i,s=P){const{context:a,zip215:o}=s,c=r.BYTES;e=Rc("signature",e,2*c),t=Rc("message",t),n&&(t=n(t));const h=Uc(e.slice(c,2*c));let u,l,y;try{u=E.fromHex(i,o),l=E.fromHex(e.slice(0,c),o),y=k.multiplyUnsafe(h)}catch(e){return!1}if(!o&&u.isSmallOrder())return!1;const f=K(a,l.toRawBytes(),u.toRawBytes(),t);return l.add(u.multiplyUnsafe(f)).subtract(y).clearCofactor().equals(E.ZERO)},ExtendedPoint:E,utils:{getExtendedPublicKey:C,randomPrivateKey:()=>a(r.BYTES),precompute:(e=8,t=E.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)}}}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Bu=BigInt(0),Iu=BigInt(1);function Su(e){const t=(Hc(r=e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...r}));var r;const{P:i}=t,n=e=>Jc(e,i),s=t.montgomeryBits,a=Math.ceil(s/8),o=t.nByteLength,c=t.adjustScalarBytes||(e=>e),h=t.powPminus2||(e=>Wc(e,i-BigInt(2),i));function u(e,t,r){const i=n(e*(t-r));return[t=n(t-i),r=n(r+i)]}function l(e){if("bigint"==typeof e&&Bu<=e&&e<i)return e;throw Error("Expected valid scalar 0 < scalar < CURVE.P")}const y=(t.a-BigInt(2))/BigInt(4);function f(e){return Qc(n(e),a)}function g(e,t){const r=function(e){const t=Rc("u coordinate",e,a);return 32===o&&(t[31]&=127),Uc(t)}(t),i=function(e){const t=Rc("scalar",e),r=t.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return Uc(c(t))}(e),g=function(e,t){const r=l(e),i=l(t),a=r;let o,c=Iu,f=Bu,g=r,p=Iu,d=Bu;for(let e=BigInt(s-1);e>=Bu;e--){const t=i>>e&Iu;d^=t,o=u(d,c,g),c=o[0],g=o[1],o=u(d,f,p),f=o[0],p=o[1],d=t;const r=c+f,s=n(r*r),h=c-f,l=n(h*h),A=s-l,w=g+p,m=n((g-p)*r),b=n(w*h),E=m+b,k=m-b;g=n(E*E),p=n(a*n(k*k)),c=n(s*l),f=n(A*(s+n(y*A)))}o=u(d,c,g),c=o[0],g=o[1],o=u(d,f,p),f=o[0],p=o[1];const A=h(f);return n(c*A)}(r,i);if(g===Bu)throw Error("Invalid private or public key received");return f(g)}const p=f(t.Gu);function d(e){return g(e,p)}return{scalarMult:g,scalarMultBase:d,getSharedSecret:(e,t)=>g(e,t),getPublicKey:e=>d(e),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:p}}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Cu=gc((()=>Au.create({dkLen:114}))),Ku=(gc((()=>Au.create({dkLen:64}))),BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439")),Pu=BigInt(1),Du=BigInt(2),Uu=BigInt(3);BigInt(4);const xu=BigInt(11),Qu=BigInt(22),Ru=BigInt(44),Mu=BigInt(88),Tu=BigInt(223);function Lu(e){const t=Ku,r=e*e*e%t,i=r*r*e%t,n=$c(i,Uu,t)*i%t,s=$c(n,Uu,t)*i%t,a=$c(s,Du,t)*r%t,o=$c(a,xu,t)*a%t,c=$c(o,Qu,t)*o%t,h=$c(c,Ru,t)*c%t,u=$c(h,Mu,t)*h%t,l=$c(u,Ru,t)*c%t,y=$c(l,Du,t)*r%t,f=$c(y,Pu,t)*e%t;return $c(f,Tu,t)*y%t}function _u(e){return e[0]&=252,e[55]|=128,e[56]=0,e}const Fu=ih(Ku,456,!0),Nu={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:Fu,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Cu,randomBytes:pc,adjustScalarBytes:_u,domain:(e,t,r)=>{if(t.length>255)throw Error("Context is too big: "+t.length);return yc(uc("SigEd448"),new Uint8Array([r?1:0,t.length]),t,e)},uvRatio:function(e,t){const r=Ku,i=Jc(e*e*t,r),n=Jc(i*e,r),s=Jc(n*i*t,r),a=Jc(n*Lu(s),r),o=Jc(a*a,r);return{isValid:Jc(o*t,r)===e,value:a}}},Hu=/* @__PURE__ */vu(Nu),Ou=/* @__PURE__ */(()=>Su({a:BigInt(156326),montgomeryBits:448,nByteLength:56,P:Ku,Gu:BigInt(5),powPminus2:e=>{const t=Ku;return Jc($c(Lu(e),BigInt(2),t)*e,t)},adjustScalarBytes:_u,randomBytes:pc}))();Fu.ORDER,BigInt(3),BigInt(4),BigInt(156326),BigInt("39082"),BigInt("78163"),BigInt("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),BigInt("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716"),BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
+const Eu=BigInt(0),ku=BigInt(1),vu=new WeakMap,Bu=new WeakMap;function Iu(e,t){const r=(e,t)=>{const r=t.negate();return e?r:t},n=e=>{if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error(`Wrong window size=${e}, should be [1..${t}]`)},i=e=>{n(e);return{windows:Math.ceil(t/e)+1,windowSize:2**(e-1)}};return{constTimeNegate:r,unsafeLadder(t,r){let n=e.ZERO,i=t;for(;r>Eu;)r&ku&&(n=n.add(i)),i=i.double(),r>>=ku;return n},precomputeWindow(e,t){const{windows:r,windowSize:n}=i(t),s=[];let a=e,o=a;for(let e=0;e<r;e++){o=a,s.push(o);for(let e=1;e<n;e++)o=o.add(a),s.push(o);a=o.double()}return s},wNAF(t,n,s){const{windows:a,windowSize:o}=i(t);let c=e.ZERO,h=e.BASE;const u=BigInt(2**t-1),l=2**t,y=BigInt(t);for(let e=0;e<a;e++){const t=e*o;let i=Number(s&u);s>>=y,i>o&&(i-=l,s+=ku);const a=t,f=t+Math.abs(i)-1,g=e%2!=0,p=i<0;0===i?h=h.add(r(g,n[a])):c=c.add(r(p,n[f]))}return{p:c,f:h}},wNAFCached(e,t,r){const n=Bu.get(e)||1;let i=vu.get(e);return i||(i=this.precomputeWindow(e,n),1!==n&&vu.set(e,r(i))),this.wNAF(n,i,t)},setWindowSize(e,t){n(t),Bu.set(e,t),vu.delete(e)}}}function Su(e,t,r,n){if(!Array.isArray(r)||!Array.isArray(n)||n.length!==r.length)throw Error("arrays of points and scalars must have equal length");n.forEach(((e,r)=>{if(!t.isValid(e))throw Error("wrong scalar at index "+r)})),r.forEach(((t,r)=>{if(!(t instanceof e))throw Error("wrong point at index "+r)}));const i=Zh(BigInt(r.length)),s=i>12?i-3:i>4?i-2:i?2:1,a=(1<<s)-1,o=Array(a+1).fill(e.ZERO),c=Math.floor((t.BITS-1)/s)*s;let h=e.ZERO;for(let t=c;t>=0;t-=s){o.fill(e.ZERO);for(let e=0;e<n.length;e++){const i=n[e],s=Number(i>>BigInt(t)&BigInt(a));o[s]=o[s].add(r[e])}let i=e.ZERO;for(let t=o.length-1,r=e.ZERO;t>0;t--)r=r.add(o[t]),i=i.add(r);if(h=h.add(i),0!==t)for(let e=0;e<s;e++)h=h.double()}return h}function Ku(e){return tu(e.Fp,du.reduce(((e,t)=>(e[t]="function",e)),{ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),tu(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...Au(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Cu(e){void 0!==e.lowS&&xh("lowS",e.lowS),void 0!==e.prehash&&xh("prehash",e.prehash)}const{bytesToNumberBE:Pu,hexToBytes:Uu}=nu,Du={Err:class extends Error{constructor(e=""){super(e)}},_tlv:{encode:(e,t)=>{const{Err:r}=Du;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(1&t.length)throw new r("tlv.encode: unpadded data");const n=t.length/2,i=Mh(n);if(i.length/2&128)throw new r("tlv.encode: long form length too big");const s=n>127?Mh(i.length/2|128):"";return`${Mh(e)}${s}${i}${t}`},decode(e,t){const{Err:r}=Du;let n=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");const i=t[n++];let s=0;if(!!(128&i)){const e=127&i;if(!e)throw new r("tlv.decode(long): indefinite length not supported");if(e>4)throw new r("tlv.decode(long): byte length is too big");const a=t.subarray(n,n+e);if(a.length!==e)throw new r("tlv.decode: length bytes not complete");if(0===a[0])throw new r("tlv.decode(long): zero leftmost byte");for(const e of a)s=s<<8|e;if(n+=e,s<128)throw new r("tlv.decode(long): not minimal encoding")}else s=i;const a=t.subarray(n,n+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(n+s)}}},_int:{encode(e){const{Err:t}=Du;if(e<xu)throw new t("integer: negative integers are not allowed");let r=Mh(e);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new t("unexpected assertion");return r},decode(e){const{Err:t}=Du;if(128&e[0])throw new t("Invalid signature integer: negative");if(0===e[0]&&!(128&e[1]))throw new t("Invalid signature integer: unnecessary leading zero");return Pu(e)}},toSig(e){const{Err:t,_int:r,_tlv:n}=Du,i="string"==typeof e?Uu(e):e;Dh(i);const{v:s,l:a}=n.decode(48,i);if(a.length)throw new t("Invalid signature: left bytes after parsing");const{v:o,l:c}=n.decode(2,s),{v:h,l:u}=n.decode(2,c);if(u.length)throw new t("Invalid signature: left bytes after parsing");return{r:r.decode(o),s:r.decode(h)}},hexFromSig(e){const{_tlv:t,_int:r}=Du,n=`${t.encode(2,r.encode(e.r))}${t.encode(2,r.encode(e.s))}`;return t.encode(48,n)}},xu=BigInt(0),Qu=BigInt(1);BigInt(2);const Ru=BigInt(3);function Mu(e){const t=function(e){const t=Ku(e);tu(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:n,a:i}=t;if(r){if(!n.eql(i,n.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}(e),{Fp:r}=t,n=wu(t.n,t.nBitLength),i=t.toBytes||((e,t,n)=>{const i=t.toAffine();return jh(Uint8Array.from([4]),r.toBytes(i.x),r.toBytes(i.y))}),s=t.fromBytes||(e=>{const t=e.subarray(1);return{x:r.fromBytes(t.subarray(0,r.BYTES)),y:r.fromBytes(t.subarray(r.BYTES,2*r.BYTES))}});function a(e){const{a:n,b:i}=t,s=r.sqr(e),a=r.mul(s,e);return r.add(r.add(a,r.mul(e,n)),i)}if(!r.eql(r.sqr(t.Gy),a(t.Gx)))throw Error("bad generator point: equation left != right");function o(e){const{allowedPrivateKeyLengths:r,nByteLength:n,wrapPrivateKey:i,n:s}=t;if(r&&"bigint"!=typeof e){if(Uh(e)&&(e=Rh(e)),"string"!=typeof e||!r.includes(e.length))throw Error("Invalid key");e=e.padStart(2*n,"0")}let a;try{a="bigint"==typeof e?e:Hh(Gh("private key",e,n))}catch(t){throw Error(`private key must be ${n} bytes, hex or bigint, not ${typeof e}`)}return i&&(a=lu(a,s)),Wh("private key",a,Qu,s),a}function c(e){if(!(e instanceof l))throw Error("ProjectivePoint expected")}const h=ru(((e,t)=>{const{px:n,py:i,pz:s}=e;if(r.eql(s,r.ONE))return{x:n,y:i};const a=e.is0();null==t&&(t=a?r.ONE:r.inv(s));const o=r.mul(n,t),c=r.mul(i,t),h=r.mul(s,t);if(a)return{x:r.ZERO,y:r.ZERO};if(!r.eql(h,r.ONE))throw Error("invZ was invalid");return{x:o,y:c}})),u=ru((e=>{if(e.is0()){if(t.allowInfinityPoint&&!r.is0(e.py))return;throw Error("bad point: ZERO")}const{x:n,y:i}=e.toAffine();if(!r.isValid(n)||!r.isValid(i))throw Error("bad point: x or y not FE");const s=r.sqr(i),o=a(n);if(!r.eql(s,o))throw Error("bad point: equation left != right");if(!e.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0}));class l{constructor(e,t,n){if(this.px=e,this.py=t,this.pz=n,null==e||!r.isValid(e))throw Error("x required");if(null==t||!r.isValid(t))throw Error("y required");if(null==n||!r.isValid(n))throw Error("z required");Object.freeze(this)}static fromAffine(e){const{x:t,y:n}=e||{};if(!e||!r.isValid(t)||!r.isValid(n))throw Error("invalid affine point");if(e instanceof l)throw Error("projective point not allowed");const i=e=>r.eql(e,r.ZERO);return i(t)&&i(n)?l.ZERO:new l(t,n,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}static fromHex(e){const t=l.fromAffine(s(Gh("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return l.BASE.multiply(o(e))}static msm(e,t){return Su(l,n,e,t)}_setWindowSize(e){f.setWindowSize(this,e)}assertValidity(){u(this)}hasEvenY(){const{y:e}=this.toAffine();if(r.isOdd)return!r.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){c(e);const{px:t,py:n,pz:i}=this,{px:s,py:a,pz:o}=e,h=r.eql(r.mul(t,o),r.mul(s,i)),u=r.eql(r.mul(n,o),r.mul(a,i));return h&&u}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:e,b:n}=t,i=r.mul(n,Ru),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,y=r.mul(s,s),f=r.mul(a,a),g=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(e,u),h=r.mul(i,g),h=r.add(c,h),c=r.sub(f,h),h=r.add(f,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(i,u),g=r.mul(e,g),p=r.sub(y,g),p=r.mul(e,p),p=r.add(p,u),u=r.add(y,y),y=r.add(u,y),y=r.add(y,g),y=r.mul(y,p),h=r.add(h,y),g=r.mul(a,o),g=r.add(g,g),y=r.mul(g,p),c=r.sub(c,y),u=r.mul(g,f),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(e){c(e);const{px:n,py:i,pz:s}=this,{px:a,py:o,pz:h}=e;let u=r.ZERO,y=r.ZERO,f=r.ZERO;const g=t.a,p=r.mul(t.b,Ru);let d=r.mul(n,a),A=r.mul(i,o),w=r.mul(s,h),m=r.add(n,i),b=r.add(a,o);m=r.mul(m,b),b=r.add(d,A),m=r.sub(m,b),b=r.add(n,s);let E=r.add(a,h);return b=r.mul(b,E),E=r.add(d,w),b=r.sub(b,E),E=r.add(i,s),u=r.add(o,h),E=r.mul(E,u),u=r.add(A,w),E=r.sub(E,u),f=r.mul(g,b),u=r.mul(p,w),f=r.add(u,f),u=r.sub(A,f),f=r.add(A,f),y=r.mul(u,f),A=r.add(d,d),A=r.add(A,d),w=r.mul(g,w),b=r.mul(p,b),A=r.add(A,w),w=r.sub(d,w),w=r.mul(g,w),b=r.add(b,w),d=r.mul(A,b),y=r.add(y,d),d=r.mul(E,b),u=r.mul(m,u),u=r.sub(u,d),d=r.mul(m,A),f=r.mul(E,f),f=r.add(f,d),new l(u,y,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(l.ZERO)}wNAF(e){return f.wNAFCached(this,e,l.normalizeZ)}multiplyUnsafe(e){Wh("scalar",e,xu,t.n);const n=l.ZERO;if(e===xu)return n;if(e===Qu)return this;const{endo:i}=t;if(!i)return f.unsafeLadder(this,e);let{k1neg:s,k1:a,k2neg:o,k2:c}=i.splitScalar(e),h=n,u=n,y=this;for(;a>xu||c>xu;)a&Qu&&(h=h.add(y)),c&Qu&&(u=u.add(y)),y=y.double(),a>>=Qu,c>>=Qu;return s&&(h=h.negate()),o&&(u=u.negate()),u=new l(r.mul(u.px,i.beta),u.py,u.pz),h.add(u)}multiply(e){const{endo:n,n:i}=t;let s,a;if(Wh("scalar",e,Qu,i),n){const{k1neg:t,k1:i,k2neg:o,k2:c}=n.splitScalar(e);let{p:h,f:u}=this.wNAF(i),{p:y,f:g}=this.wNAF(c);h=f.constTimeNegate(t,h),y=f.constTimeNegate(o,y),y=new l(r.mul(y.px,n.beta),y.py,y.pz),s=h.add(y),a=u.add(g)}else{const{p:t,f:r}=this.wNAF(e);s=t,a=r}return l.normalizeZ([s,a])[0]}multiplyAndAddUnsafe(e,t,r){const n=l.BASE,i=(e,t)=>t!==xu&&t!==Qu&&e.equals(n)?e.multiply(t):e.multiplyUnsafe(t),s=i(this,t).add(i(e,r));return s.is0()?void 0:s}toAffine(e){return h(this,e)}isTorsionFree(){const{h:e,isTorsionFree:r}=t;if(e===Qu)return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:e,clearCofactor:r}=t;return e===Qu?this:r?r(l,this):this.multiplyUnsafe(t.h)}toRawBytes(e=!0){return xh("isCompressed",e),this.assertValidity(),i(l,this,e)}toHex(e=!0){return xh("isCompressed",e),Rh(this.toRawBytes(e))}}l.BASE=new l(t.Gx,t.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const y=t.nBitLength,f=Iu(l,t.endo?Math.ceil(y/2):y);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:o,weierstrassEquation:a,isWithinCurveOrder:function(e){return Vh(e,Qu,t.n)}}}function Lu(e){const t=function(e){const t=Ku(e);return tu(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}(e),{Fp:r,n}=t,i=r.BYTES+1,s=2*r.BYTES+1;function a(e){return lu(e,n)}function o(e){return gu(e,n)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=Mu({...t,toBytes(e,t,n){const i=t.toAffine(),s=r.toBytes(i.x),a=jh;return xh("isCompressed",n),n?a(Uint8Array.from([t.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(i.y))},fromBytes(e){const t=e.length,n=e[0],a=e.subarray(1);if(t!==i||2!==n&&3!==n){if(t===s&&4===n){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${t} was invalid. Expected ${i} compressed bytes or ${s} uncompressed bytes`)}{const e=Hh(a);if(!Vh(e,Qu,r.ORDER))throw Error("Point is not on curve");const t=u(e);let i;try{i=r.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("Point is not on curve"+t)}return!(1&~n)!==((i&Qu)===Qu)&&(i=r.neg(i)),{x:e,y:i}}}}),y=e=>Rh(zh(e,t.nByteLength));function f(e){return e>n>>Qu}const g=(e,t,r)=>Hh(e.slice(t,r));class p{constructor(e,t,r){this.r=e,this.s=t,this.recovery=r,this.assertValidity()}static fromCompact(e){const r=t.nByteLength;return e=Gh("compactSignature",e,2*r),new p(g(e,0,r),g(e,r,2*r))}static fromDER(e){const{r:t,s:r}=Du.toSig(Gh("DER",e));return new p(t,r)}assertValidity(){Wh("r",this.r,Qu,n),Wh("s",this.s,Qu,n)}addRecoveryBit(e){return new p(this.r,this.s,e)}recoverPublicKey(e){const{r:n,s:i,recovery:s}=this,h=m(Gh("msgHash",e));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?n+t.n:n;if(u>=r.ORDER)throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",f=c.fromHex(l+y(u)),g=o(u),p=a(-h*g),d=a(i*g),A=c.BASE.multiplyAndAddUnsafe(f,p,d);if(!A)throw Error("point at infinify");return A.assertValidity(),A}hasHighS(){return f(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(-this.s),this.recovery):this}toDERRawBytes(){return Nh(this.toDERHex())}toDERHex(){return Du.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return Nh(this.toCompactHex())}toCompactHex(){return y(this.r)+y(this.s)}}const d={isValidPrivateKey(e){try{return h(e),!0}catch(e){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const e=bu(t.n);return function(e,t,r=!1){const n=e.length,i=mu(t),s=bu(t);if(n<16||n<s||n>1024)throw Error(`expected ${s}-1024 bytes of input, got ${n}`);const a=lu(r?Hh(e):Oh(e),t-su)+su;return r?_h(a,i):zh(a,i)}(t.randomBytes(e),t.n)},precompute:(e=8,t=c.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)};function A(e){const t=Uh(e),r="string"==typeof e,n=(t||r)&&e.length;return t?n===i||n===s:r?n===2*i||n===2*s:e instanceof c}const w=t.bits2int||function(e){const r=Hh(e),n=8*e.length-t.nBitLength;return n>0?r>>BigInt(n):r},m=t.bits2int_modN||function(e){return a(w(e))},b=Yh(t.nBitLength);function E(e){return Wh("num < 2^"+t.nBitLength,e,xu,b),zh(e,t.nByteLength)}function k(e,n,i=v){if(["recovered","canonical"].some((e=>e in i)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=t;let{lowS:y,prehash:g,extraEntropy:d}=i;null==y&&(y=!0),e=Gh("msgHash",e),Cu(i),g&&(e=Gh("prehashed msgHash",s(e)));const A=m(e),b=h(n),k=[E(b),E(A)];if(null!=d&&!1!==d){const e=!0===d?u(r.BYTES):d;k.push(Gh("extraEntropy",e))}const B=jh(...k),I=A;return{seed:B,k2sig:function(e){const t=w(e);if(!l(t))return;const r=o(t),n=c.BASE.multiply(t).toAffine(),i=a(n.x);if(i===xu)return;const s=a(r*a(I+i*b));if(s===xu)return;let h=(n.x===i?0:2)|Number(n.y&Qu),u=s;return y&&f(s)&&(u=function(e){return f(e)?a(-e):e}(s),h^=1),new p(i,u,h)}}}const v={lowS:t.lowS,prehash:!1},B={lowS:t.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:t,getPublicKey:function(e,t=!0){return c.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(A(e))throw Error("first arg must be private key");if(!A(t))throw Error("second arg must be public key");return c.fromHex(t).multiply(h(e)).toRawBytes(r)},sign:function(e,r,n=v){const{seed:i,k2sig:s}=k(e,r,n),a=t;return Xh(a.hash.outputLen,a.nByteLength,a.hmac)(i,s)},verify:function(e,r,n,i=B){const s=e;if(r=Gh("msgHash",r),n=Gh("publicKey",n),"strict"in i)throw Error("options.strict was renamed to lowS");Cu(i);const{lowS:h,prehash:u}=i;let l,y;try{if("string"==typeof s||Uh(s))try{l=p.fromDER(s)}catch(e){if(!(e instanceof Du.Err))throw e;l=p.fromCompact(s)}else{if("object"!=typeof s||"bigint"!=typeof s.r||"bigint"!=typeof s.s)throw Error("PARSE");{const{r:e,s:t}=s;l=new p(e,t)}}y=c.fromHex(n)}catch(e){if("PARSE"===e.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=t.hash(r));const{r:f,s:g}=l,d=m(r),A=o(g),w=a(d*A),b=a(f*A),E=c.BASE.multiplyAndAddUnsafe(y,w,b)?.toAffine();return!!E&&a(E.x)===f},ProjectivePoint:c,Signature:p,utils:d}}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Tu(e){return{hash:e,hmac:(t,...r)=>Sh(e,t,lh(...r)),randomBytes:gh}}function Fu(e,t){const r=t=>Lu({...e,...Tu(t)});return Object.freeze({...r(t),create:r})}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */BigInt(4);const Nu=wu(BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),Hu=Fu({a:Nu.create(BigInt("-3")),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Nu,n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:BigInt(1),lowS:!1},vh),Ou=/* @__PURE__ */BigInt(2**32-1),zu=/* @__PURE__ */BigInt(32);function _u(e,t=!1){return t?{h:Number(e&Ou),l:Number(e>>zu&Ou)}:{h:0|Number(e>>zu&Ou),l:0|Number(e&Ou)}}function Gu(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let i=0;i<e.length;i++){const{h:s,l:a}=_u(e[i],t);[r[i],n[i]]=[s,a]}return[r,n]}const ju=(e,t,r)=>e<<r|t>>>32-r,qu=(e,t,r)=>t<<r|e>>>32-r,Vu=(e,t,r)=>t<<r-32|e>>>64-r,Wu=(e,t,r)=>e<<r-32|t>>>64-r;const Zu={fromBig:_u,split:Gu,toBig:(e,t)=>BigInt(e>>>0)<<zu|BigInt(t>>>0),shrSH:(e,t,r)=>e>>>r,shrSL:(e,t,r)=>e<<32-r|t>>>r,rotrSH:(e,t,r)=>e>>>r|t<<32-r,rotrSL:(e,t,r)=>e<<32-r|t>>>r,rotrBH:(e,t,r)=>e<<64-r|t>>>r-32,rotrBL:(e,t,r)=>e>>>r-32|t<<64-r,rotr32H:(e,t)=>t,rotr32L:(e,t)=>e,rotlSH:ju,rotlSL:qu,rotlBH:Vu,rotlBL:Wu,add:function(e,t,r,n){const i=(t>>>0)+(n>>>0);return{h:e+r+(i/2**32|0)|0,l:0|i}},add3L:(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),add3H:(e,t,r,n)=>t+r+n+(e/2**32|0)|0,add4L:(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),add4H:(e,t,r,n,i)=>t+r+n+i+(e/2**32|0)|0,add5H:(e,t,r,n,i,s)=>t+r+n+i+s+(e/2**32|0)|0,add5L:(e,t,r,n,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(i>>>0)},[Yu,Ju]=/* @__PURE__ */(()=>Zu.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),$u=/* @__PURE__ */new Uint32Array(80),Xu=/* @__PURE__ */new Uint32Array(80);class el extends Ah{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:e,Al:t,Bh:r,Bl:n,Ch:i,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:y,Gl:f,Hh:g,Hl:p}=this;return[e,t,r,n,i,s,a,o,c,h,u,l,y,f,g,p]}set(e,t,r,n,i,s,a,o,c,h,u,l,y,f,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|n,this.Ch=0|i,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|y,this.Gl=0|f,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)$u[r]=e.getUint32(t),Xu[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|$u[e-15],r=0|Xu[e-15],n=Zu.rotrSH(t,r,1)^Zu.rotrSH(t,r,8)^Zu.shrSH(t,r,7),i=Zu.rotrSL(t,r,1)^Zu.rotrSL(t,r,8)^Zu.shrSL(t,r,7),s=0|$u[e-2],a=0|Xu[e-2],o=Zu.rotrSH(s,a,19)^Zu.rotrBH(s,a,61)^Zu.shrSH(s,a,6),c=Zu.rotrSL(s,a,19)^Zu.rotrBL(s,a,61)^Zu.shrSL(s,a,6),h=Zu.add4L(i,c,Xu[e-7],Xu[e-16]),u=Zu.add4H(h,n,o,$u[e-7],$u[e-16]);$u[e]=0|u,Xu[e]=0|h}let{Ah:r,Al:n,Bh:i,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:y,Fl:f,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=Zu.rotrSH(u,l,14)^Zu.rotrSH(u,l,18)^Zu.rotrBH(u,l,41),w=Zu.rotrSL(u,l,14)^Zu.rotrSL(u,l,18)^Zu.rotrBL(u,l,41),m=u&y^~u&g,b=l&f^~l&p,E=Zu.add5L(A,w,b,Ju[e],Xu[e]),k=Zu.add5H(E,d,t,m,Yu[e],$u[e]),v=0|E,B=Zu.rotrSH(r,n,28)^Zu.rotrBH(r,n,34)^Zu.rotrBH(r,n,39),I=Zu.rotrSL(r,n,28)^Zu.rotrBL(r,n,34)^Zu.rotrBL(r,n,39),S=r&i^r&a^i&a,K=n&s^n&o^s&o;d=0|g,A=0|p,g=0|y,p=0|f,y=0|u,f=0|l,({h:u,l}=Zu.add(0|c,0|h,0|k,0|v)),c=0|a,h=0|o,a=0|i,o=0|s,i=0|r,s=0|n;const C=Zu.add3L(v,I,K);r=Zu.add3H(C,k,B,S),n=0|C}({h:r,l:n}=Zu.add(0|this.Ah,0|this.Al,0|r,0|n)),({h:i,l:s}=Zu.add(0|this.Bh,0|this.Bl,0|i,0|s)),({h:a,l:o}=Zu.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=Zu.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=Zu.add(0|this.Eh,0|this.El,0|u,0|l)),({h:y,l:f}=Zu.add(0|this.Fh,0|this.Fl,0|y,0|f)),({h:g,l:p}=Zu.add(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=Zu.add(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,n,i,s,a,o,c,h,u,l,y,f,g,p,d,A)}roundClean(){$u.fill(0),Xu.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class tl extends el{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const rl=/* @__PURE__ */fh((()=>new el)),nl=/* @__PURE__ */fh((()=>new tl)),il=wu(BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),sl=Fu({a:il.create(BigInt("-3")),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:il,n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:BigInt(1),lowS:!1},nl),al=wu(BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),ol={a:al.create(BigInt("-3")),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:al,n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:BigInt(1)},cl=Fu({a:ol.a,b:ol.b,Fp:al,n:ol.n,Gx:ol.Gx,Gy:ol.Gy,h:ol.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},rl),hl=[],ul=[],ll=[],yl=/* @__PURE__ */BigInt(0),fl=/* @__PURE__ */BigInt(1),gl=/* @__PURE__ */BigInt(2),pl=/* @__PURE__ */BigInt(7),dl=/* @__PURE__ */BigInt(256),Al=/* @__PURE__ */BigInt(113);for(let e=0,t=fl,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],hl.push(2*(5*n+r)),ul.push((e+1)*(e+2)/2%64);let i=yl;for(let e=0;e<7;e++)t=(t<<fl^(t>>pl)*Al)%dl,t&gl&&(i^=fl<<(fl<</* @__PURE__ */BigInt(e))-fl);ll.push(i)}const[wl,ml]=/* @__PURE__ */Gu(ll,!0),bl=(e,t,r)=>r>32?Vu(e,t,r):ju(e,t,r),El=(e,t,r)=>r>32?Wu(e,t,r):qu(e,t,r);class kl extends yh{constructor(e,t,r,n=!1,i=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=n,this.rounds=i,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,Xc(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){oh||ch(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const n=(t+8)%10,i=(t+2)%10,s=r[i],a=r[i+1],o=bl(s,a,1)^r[n],c=El(s,a,1)^r[n+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],i=e[3];for(let r=0;r<24;r++){const n=ul[r],s=bl(t,i,n),a=El(t,i,n),o=hl[r];t=e[o],i=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let n=0;n<10;n++)r[n]=e[t+n];for(let n=0;n<10;n++)e[t+n]^=~r[(n+2)%10]&r[(n+4)%10]}e[0]^=wl[n],e[1]^=ml[n]}r.fill(0)}(this.state32,this.rounds),oh||ch(this.state32),this.posOut=0,this.pos=0}update(e){th(this);const{blockLen:t,state:r}=this,n=(e=uh(e)).length;for(let i=0;i<n;){const s=Math.min(t-this.pos,n-i);for(let t=0;t<s;t++)r[this.pos++]^=e[i++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:n}=this;e[r]^=t,128&t&&r===n-1&&this.keccak(),e[n-1]^=128,this.keccak()}writeInto(e){th(this,!1),eh(e),this.finish();const t=this.state,{blockLen:r}=this;for(let n=0,i=e.length;n<i;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,i-n);e.set(t.subarray(this.posOut,this.posOut+s),n),this.posOut+=s,n+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Xc(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(rh(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:n,rounds:i,enableXOF:s}=this;return e||(e=new kl(t,r,n,s,i)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=i,e.suffix=r,e.outputLen=n,e.enableXOF=s,e.destroyed=this.destroyed,e}}const vl=(e,t,r)=>fh((()=>new kl(t,e,r))),Bl=/* @__PURE__ */vl(6,136,32),Il=/* @__PURE__ */vl(6,72,64),Sl=/* @__PURE__ */((e,t,r)=>function(e){const t=(t,r)=>e(r).update(uh(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((n={})=>new kl(t,e,void 0===n.dkLen?r:n.dkLen,!0))))(31,136,32),Kl=BigInt(0),Cl=BigInt(1),Pl=BigInt(2),Ul=BigInt(8),Dl={zip215:!0};function xl(e){const t=function(e){const t=Ku(e);return tu(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}(e),{Fp:r,n,prehash:i,hash:s,randomBytes:a,nByteLength:o,h:c}=t,h=Pl<<BigInt(8*o)-Cl,u=r.create,l=wu(t.n,t.nBitLength),y=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:r.sqrt(e*r.inv(t))}}catch(e){return{isValid:!1,value:Kl}}}),f=t.adjustScalarBytes||(e=>e),g=t.domain||((e,t,r)=>{if(xh("phflag",r),t.length||r)throw Error("Contexts/pre-hash are not supported");return e});function p(e,t){Wh("coordinate "+e,t,Kl,h)}function d(e){if(!(e instanceof m))throw Error("ExtendedPoint expected")}const A=ru(((e,t)=>{const{ex:n,ey:i,ez:s}=e,a=e.is0();null==t&&(t=a?Ul:r.inv(s));const o=u(n*t),c=u(i*t),h=u(s*t);if(a)return{x:Kl,y:Cl};if(h!==Cl)throw Error("invZ was invalid");return{x:o,y:c}})),w=ru((e=>{const{a:r,d:n}=t;if(e.is0())throw Error("bad point: ZERO");const{ex:i,ey:s,ez:a,et:o}=e,c=u(i*i),h=u(s*s),l=u(a*a),y=u(l*l),f=u(c*r);if(u(l*u(f+h))!==u(y+u(n*u(c*h))))throw Error("bad point: equation left != right (1)");if(u(i*s)!==u(a*o))throw Error("bad point: equation left != right (2)");return!0}));class m{constructor(e,t,r,n){this.ex=e,this.ey=t,this.ez=r,this.et=n,p("x",e),p("y",t),p("z",r),p("t",n),Object.freeze(this)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(e){if(e instanceof m)throw Error("extended point not allowed");const{x:t,y:r}=e||{};return p("x",t),p("y",r),new m(t,r,Cl,u(t*r))}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.ez)));return e.map(((e,r)=>e.toAffine(t[r]))).map(m.fromAffine)}static msm(e,t){return Su(m,l,e,t)}_setWindowSize(e){k.setWindowSize(this,e)}assertValidity(){w(this)}equals(e){d(e);const{ex:t,ey:r,ez:n}=this,{ex:i,ey:s,ez:a}=e,o=u(t*a),c=u(i*n),h=u(r*a),l=u(s*n);return o===c&&h===l}is0(){return this.equals(m.ZERO)}negate(){return new m(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){const{a:e}=t,{ex:r,ey:n,ez:i}=this,s=u(r*r),a=u(n*n),o=u(Pl*u(i*i)),c=u(e*s),h=r+n,l=u(u(h*h)-s-a),y=c+a,f=y-o,g=c-a,p=u(l*f),d=u(y*g),A=u(l*g),w=u(f*y);return new m(p,d,w,A)}add(e){d(e);const{a:r,d:n}=t,{ex:i,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:y}=e;if(r===BigInt(-1)){const e=u((s-i)*(h+c)),t=u((s+i)*(h-c)),r=u(t-e);if(r===Kl)return this.double();const n=u(a*Pl*y),f=u(o*Pl*l),g=f+n,p=t+e,d=f-n,A=u(g*r),w=u(p*d),b=u(g*d),E=u(r*p);return new m(A,w,E,b)}const f=u(i*c),g=u(s*h),p=u(o*n*y),A=u(a*l),w=u((i+s)*(c+h)-f-g),b=A-p,E=A+p,k=u(g-r*f),v=u(w*b),B=u(E*k),I=u(w*k),S=u(b*E);return new m(v,B,S,I)}subtract(e){return this.add(e.negate())}wNAF(e){return k.wNAFCached(this,e,m.normalizeZ)}multiply(e){const t=e;Wh("scalar",t,Cl,n);const{p:r,f:i}=this.wNAF(t);return m.normalizeZ([r,i])[0]}multiplyUnsafe(e){const t=e;return Wh("scalar",t,Kl,n),t===Kl?E:this.equals(E)||t===Cl?this:this.equals(b)?this.wNAF(t).p:k.unsafeLadder(this,t)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return k.unsafeLadder(this,n).is0()}toAffine(e){return A(this,e)}clearCofactor(){const{h:e}=t;return e===Cl?this:this.multiplyUnsafe(e)}static fromHex(e,n=!1){const{d:i,a:s}=t,a=r.BYTES;e=Gh("pointHex",e,a),xh("zip215",n);const o=e.slice(),c=e[a-1];o[a-1]=-129&c;const l=Oh(o),f=n?h:r.ORDER;Wh("pointHex.y",l,Kl,f);const g=u(l*l),p=u(g-Cl),d=u(i*g-s);let{isValid:A,value:w}=y(p,d);if(!A)throw Error("Point.fromHex: invalid y coordinate");const b=(w&Cl)===Cl,E=!!(128&c);if(!n&&w===Kl&&E)throw Error("Point.fromHex: x=0 and x_0=1");return E!==b&&(w=u(-w)),m.fromAffine({x:w,y:l})}static fromPrivateKey(e){return I(e).point}toRawBytes(){const{x:e,y:t}=this.toAffine(),n=_h(t,r.BYTES);return n[n.length-1]|=e&Cl?128:0,n}toHex(){return Rh(this.toRawBytes())}}m.BASE=new m(t.Gx,t.Gy,Cl,u(t.Gx*t.Gy)),m.ZERO=new m(Kl,Cl,Cl,Kl);const{BASE:b,ZERO:E}=m,k=Iu(m,8*o);function v(e){return lu(e,n)}function B(e){return v(Oh(e))}function I(e){const t=o;e=Gh("private key",e,t);const r=Gh("hashed private key",s(e),2*t),n=f(r.slice(0,t)),i=r.slice(t,2*t),a=B(n),c=b.multiply(a),h=c.toRawBytes();return{head:n,prefix:i,scalar:a,point:c,pointBytes:h}}function S(e=new Uint8Array,...t){const r=jh(...t);return B(s(g(r,Gh("context",e),!!i)))}const K=Dl;b._setWindowSize(8);return{CURVE:t,getPublicKey:function(e){return I(e).pointBytes},sign:function(e,t,s={}){e=Gh("message",e),i&&(e=i(e));const{prefix:a,scalar:c,pointBytes:h}=I(t),u=S(s.context,a,e),l=b.multiply(u).toRawBytes(),y=v(u+S(s.context,l,h,e)*c);return Wh("signature.s",y,Kl,n),Gh("result",jh(l,_h(y,r.BYTES)),2*o)},verify:function(e,t,n,s=K){const{context:a,zip215:o}=s,c=r.BYTES;e=Gh("signature",e,2*c),t=Gh("message",t),void 0!==o&&xh("zip215",o),i&&(t=i(t));const h=Oh(e.slice(c,2*c));let u,l,y;try{u=m.fromHex(n,o),l=m.fromHex(e.slice(0,c),o),y=b.multiplyUnsafe(h)}catch(e){return!1}if(!o&&u.isSmallOrder())return!1;const f=S(a,l.toRawBytes(),u.toRawBytes(),t);return l.add(u.multiplyUnsafe(f)).subtract(y).clearCofactor().equals(m.ZERO)},ExtendedPoint:m,utils:{getExtendedPublicKey:I,randomPrivateKey:()=>a(r.BYTES),precompute:(e=8,t=m.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)}}}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Ql=BigInt(0),Rl=BigInt(1);function Ml(e){const t=(tu(r=e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...r}));var r;const{P:n}=t,i=e=>lu(e,n),s=t.montgomeryBits,a=Math.ceil(s/8),o=t.nByteLength,c=t.adjustScalarBytes||(e=>e),h=t.powPminus2||(e=>yu(e,n-BigInt(2),n));function u(e,t,r){const n=i(e*(t-r));return[t=i(t-n),r=i(r+n)]}const l=(t.a-BigInt(2))/BigInt(4);function y(e){return _h(i(e),a)}function f(e,t){const r=function(e){const t=Gh("u coordinate",e,a);return 32===o&&(t[31]&=127),Oh(t)}(t),f=function(e){const t=Gh("scalar",e),r=t.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return Oh(c(t))}(e),g=function(e,t){Wh("u",e,Ql,n),Wh("scalar",t,Ql,n);const r=t,a=e;let o,c=Rl,y=Ql,f=e,g=Rl,p=Ql;for(let e=BigInt(s-1);e>=Ql;e--){const t=r>>e&Rl;p^=t,o=u(p,c,f),c=o[0],f=o[1],o=u(p,y,g),y=o[0],g=o[1],p=t;const n=c+y,s=i(n*n),h=c-y,d=i(h*h),A=s-d,w=f+g,m=i((f-g)*n),b=i(w*h),E=m+b,k=m-b;f=i(E*E),g=i(a*i(k*k)),c=i(s*d),y=i(A*(s+i(l*A)))}o=u(p,c,f),c=o[0],f=o[1],o=u(p,y,g),y=o[0],g=o[1];const d=h(y);return i(c*d)}(r,f);if(g===Ql)throw Error("Invalid private or public key received");return y(g)}const g=y(t.Gu);function p(e){return f(e,g)}return{scalarMult:f,scalarMultBase:p,getSharedSecret:(e,t)=>f(e,t),getPublicKey:e=>p(e),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:g}}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Ll=fh((()=>Sl.create({dkLen:114}))),Tl=(fh((()=>Sl.create({dkLen:64}))),BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439")),Fl=BigInt(1),Nl=BigInt(2),Hl=BigInt(3);BigInt(4);const Ol=BigInt(11),zl=BigInt(22),_l=BigInt(44),Gl=BigInt(88),jl=BigInt(223);function ql(e){const t=Tl,r=e*e*e%t,n=r*r*e%t,i=fu(n,Hl,t)*n%t,s=fu(i,Hl,t)*n%t,a=fu(s,Nl,t)*r%t,o=fu(a,Ol,t)*a%t,c=fu(o,zl,t)*o%t,h=fu(c,_l,t)*c%t,u=fu(h,Gl,t)*h%t,l=fu(u,_l,t)*c%t,y=fu(l,Nl,t)*r%t,f=fu(y,Fl,t)*e%t;return fu(f,jl,t)*y%t}function Vl(e){return e[0]&=252,e[55]|=128,e[56]=0,e}const Wl=wu(Tl,456,!0),Zl={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:Wl,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:Ll,randomBytes:gh,adjustScalarBytes:Vl,domain:(e,t,r)=>{if(t.length>255)throw Error("Context is too big: "+t.length);return lh(hh("SigEd448"),new Uint8Array([r?1:0,t.length]),t,e)},uvRatio:function(e,t){const r=Tl,n=lu(e*e*t,r),i=lu(n*e,r),s=lu(i*n*t,r),a=lu(i*ql(s),r),o=lu(a*a,r);return{isValid:lu(o*t,r)===e,value:a}}},Yl=/* @__PURE__ */xl(Zl),Jl=/* @__PURE__ */(()=>Ml({a:BigInt(156326),montgomeryBits:448,nByteLength:56,P:Tl,Gu:BigInt(5),powPminus2:e=>{const t=Tl;return lu(fu(ql(e),BigInt(2),t)*e,t)},adjustScalarBytes:Vl,randomBytes:gh}))();Wl.ORDER,BigInt(3),BigInt(4),BigInt(156326),BigInt("39082"),BigInt("78163"),BigInt("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),BigInt("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716"),BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
 /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
-const zu=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),Gu=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),qu=BigInt(1),ju=BigInt(2),Vu=(e,t)=>(e+t/ju)/t;const Yu=ih(zu,void 0,void 0,{sqrt:function(e){const t=zu,r=BigInt(3),i=BigInt(6),n=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),h=e*e*e%t,u=h*h*e%t,l=$c(u,r,t)*u%t,y=$c(l,r,t)*u%t,f=$c(y,ju,t)*h%t,g=$c(f,n,t)*f%t,p=$c(g,s,t)*g%t,d=$c(p,o,t)*p%t,A=$c(d,c,t)*d%t,w=$c(A,o,t)*p%t,m=$c(w,r,t)*u%t,b=$c(m,a,t)*g%t,E=$c(b,i,t)*h%t,k=$c(E,ju,t);if(!Yu.eql(Yu.sqr(k),e))throw Error("Cannot find square root");return k}}),Zu=mh({a:BigInt(0),b:BigInt(7),Fp:Yu,n:Gu,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{const t=Gu,r=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),i=-qu*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),n=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=BigInt("0x100000000000000000000000000000000"),o=Vu(s*e,t),c=Vu(-i*e,t);let h=Jc(e-o*r-c*n,t),u=Jc(-o*i-c*s,t);const l=h>a,y=u>a;if(l&&(h=t-h),y&&(u=t-u),h>a||u>a)throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:l,k1:h,k2neg:y,k2:u}}}},Kh);BigInt(0),Zu.ProjectivePoint;const Ju=ih(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),Wu=mh({a:Ju.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:Ju,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Kh),$u=ih(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),Xu=mh({a:$u.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:$u,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},Yh),el=ih(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),tl=mh({a:el.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:el,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},Vh),rl=new Map(Object.entries({nistP256:Uh,nistP384:Jh,nistP521:Xh,brainpoolP256r1:Wu,brainpoolP384r1:Xu,brainpoolP512r1:tl,secp256k1:Zu,x448:Ou,ed448:Hu}));var il=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:rl});function nl(e,t,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],y=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],f=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,E,k,v,B=0,I=t.length;const S=32===e.length?3:9;E=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e,t){const r=8-e.length%8;let i;if(!(r<8)){if(8===r)return e;throw Error("des: invalid padding")}i=0;const n=new Uint8Array(e.length+r);for(let t=0;t<e.length;t++)n[t]=e[t];for(let t=0;t<r;t++)n[e.length+t]=i;return n}(t),I=t.length);let C=new Uint8Array(I),K=0;for(;B<I;){for(m=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],b=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(k=E[p+1],v=E[p+2],g=E[p];g!==k;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|h[A>>>16&63]|l[A>>>8&63]|f[63&A]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|y[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,C[K++]=m>>>24,C[K++]=m>>>16&255,C[K++]=m>>>8&255,C[K++]=255&m,C[K++]=b>>>24,C[K++]=b>>>16&255,C[K++]=b>>>8&255,C[K++]=255&b}return r||(C=function(e,t){let r,i=null;if(r=0,!i){for(i=1;e[e.length-i]===r;)i++;i--}return e.subarray(0,e.length-i)}(C)),C}function sl(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],y=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],f=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,E=0,k=0;for(let v=0;v<p;v++){let p=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++],v=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|h[v>>>24&15]|u[v>>>20&15]|l[v>>>16&15]|y[v>>>12&15]|f[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[k++]=w^b,d[k++]=m^b<<16}return d}function al(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return nl(sl(this.key[2]),nl(sl(this.key[1]),nl(sl(this.key[0]),e,!0),!1),!0)}}function ol(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const i=t+e,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(e,t,r){const i=t^e,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(e,t,r){const i=t-e,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let e=0;e<4;e++)a=4*e,i[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=i[t[1]],c^=s[4][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][i[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][i[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][i[t[6]>>>2]>>>24-8*(3&t[6])&255],i[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][i[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][i[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][i[e[4]>>>2]>>>24-8*(3&e[4])&255],n[h]=c,h++}}for(let e=0;e<16;e++)this.masking[e]=n[e],this.rotate[e]=31&n[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function cl(e){this.cast5=new ol,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}al.keySize=al.prototype.keySize=24,al.blockSize=al.prototype.blockSize=8,cl.blockSize=cl.prototype.blockSize=8,cl.keySize=cl.prototype.keySize=16;const hl=4294967295;function ul(e,t){return(e<<t|e>>>32-t)&hl}function ll(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function yl(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function fl(e,t){return e>>>8*t&255}function gl(e){this.tf=function(){let e=null,t=null,r=-1,i=[],n=[[],[],[],[]];function s(e){return n[0][fl(e,0)]^n[1][fl(e,1)]^n[2][fl(e,2)]^n[3][fl(e,3)]}function a(e){return n[0][fl(e,3)]^n[1][fl(e,0)]^n[2][fl(e,1)]^n[3][fl(e,2)]}function o(e,t){let r=s(t[0]),n=a(t[1]);t[2]=ul(t[2]^r+n+i[4*e+8]&hl,31),t[3]=ul(t[3],1)^r+2*n+i[4*e+9]&hl,r=s(t[2]),n=a(t[3]),t[0]=ul(t[0]^r+n+i[4*e+10]&hl,31),t[1]=ul(t[1],1)^r+2*n+i[4*e+11]&hl}function c(e,t){let r=s(t[0]),n=a(t[1]);t[2]=ul(t[2],1)^r+n+i[4*e+10]&hl,t[3]=ul(t[3]^r+2*n+i[4*e+11]&hl,31),r=s(t[2]),n=a(t[3]),t[0]=ul(t[0],1)^r+n+i[4*e+8]&hl,t[1]=ul(t[1]^r+2*n+i[4*e+9]&hl,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const h=[],u=[],l=[];let y;const f=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],E=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],k=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],B=[[],[],[],[]];function I(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function C(e,t){let r,i,n;for(r=0;r<8;r++)i=t>>>24,t=t<<8&hl|e>>>24,e=e<<8&hl,n=i<<1,128&i&&(n^=333),t^=i^n<<16,n^=i>>>1,1&i&&(n^=166),t^=n<<24|n<<8;return t}function K(e,t){const r=t>>4,i=15&t,n=A[e][r^i],s=w[e][E[i]^k[r]];return b[e][E[s]^k[n]]<<4|m[e][n^s]}function P(e,t){let r=fl(e,0),i=fl(e,1),n=fl(e,2),s=fl(e,3);switch(y){case 4:r=v[1][r]^fl(t[3],0),i=v[0][i]^fl(t[3],1),n=v[0][n]^fl(t[3],2),s=v[1][s]^fl(t[3],3);case 3:r=v[1][r]^fl(t[2],0),i=v[1][i]^fl(t[2],1),n=v[0][n]^fl(t[2],2),s=v[0][s]^fl(t[2],3);case 2:r=v[0][v[0][r]^fl(t[1],0)]^fl(t[0],0),i=v[0][v[1][i]^fl(t[1],1)]^fl(t[0],1),n=v[1][v[0][n]^fl(t[1],2)]^fl(t[0],2),s=v[1][v[1][s]^fl(t[1],3)]^fl(t[0],3)}return B[0][r]^B[1][i]^B[2][n]^B[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=ll(e,r);for(r=0;r<256;r++)v[0][r]=K(0,r),v[1][r]=K(1,r);for(r=0;r<256;r++)g=v[1][r],p=I(g),d=S(g),B[0][r]=g+(p<<8)+(d<<16)+(d<<24),B[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=I(g),d=S(g),B[1][r]=d+(d<<8)+(p<<16)+(g<<24),B[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(y=l.length/2,r=0;r<y;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,f[y-r-1]=C(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=P(s,h),a=ul(P(a,u),8),i[r]=s+a&hl,i[r+1]=ul(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,y){case 4:s=v[1][s]^fl(f[3],0),a=v[0][a]^fl(f[3],1),o=v[0][o]^fl(f[3],2),c=v[1][c]^fl(f[3],3);case 3:s=v[1][s]^fl(f[2],0),a=v[1][a]^fl(f[2],1),o=v[0][o]^fl(f[2],2),c=v[0][c]^fl(f[2],3);case 2:n[0][r]=B[0][v[0][v[0][s]^fl(f[1],0)]^fl(f[0],0)],n[1][r]=B[1][v[0][v[1][a]^fl(f[1],1)]^fl(f[0],1)],n[2][r]=B[2][v[1][v[0][o]^fl(f[1],2)]^fl(f[0],2)],n[3][r]=B[3][v[1][v[1][c]^fl(f[1],3)]^fl(f[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(e,n){t=e,r=n;const s=[ll(t,r)^i[0],ll(t,r+4)^i[1],ll(t,r+8)^i[2],ll(t,r+12)^i[3]];for(let e=0;e<8;e++)o(e,s);return yl(t,r,s[2]^i[4]),yl(t,r+4,s[3]^i[5]),yl(t,r+8,s[0]^i[6]),yl(t,r+12,s[1]^i[7]),r+=16,t},decrypt:function(e,n){t=e,r=n;const s=[ll(t,r)^i[4],ll(t,r+4)^i[5],ll(t,r+8)^i[6],ll(t,r+12)^i[7]];for(let e=7;e>=0;e--)c(e,s);yl(t,r,s[2]^i[0]),yl(t,r+4,s[3]^i[1]),yl(t,r+8,s[0]^i[2]),yl(t,r+12,s[1]^i[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function pl(){}function dl(e){this.bf=new pl,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}gl.keySize=gl.prototype.keySize=32,gl.blockSize=gl.prototype.blockSize=16,pl.prototype.BLOCKSIZE=8,pl.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],pl.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],pl.prototype.NN=16,pl.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},pl.prototype._F=function(e){let t;const r=255&e,i=255&(e>>>=8),n=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][n],t^=this.sboxes[2][i],t+=this.sboxes[3][r],t},pl.prototype._encryptBlock=function(e){let t,r=e[0],i=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],e[0]=this._clean(i),e[1]=this._clean(r)},pl.prototype.encryptBlock=function(e){let t;const r=[0,0],i=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+i];this._encryptBlock(r);const n=[];for(t=0;t<this.BLOCKSIZE/2;++t)n[t+0]=r[0]>>>24-8*t&255,n[t+i]=r[1]>>>24-8*t&255;return n},pl.prototype._decryptBlock=function(e){let t,r=e[0],i=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[1],i^=this.parray[0],e[0]=this._clean(i),e[1]=this._clean(r)},pl.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let i=0;for(let t=0;t<4;++t)i=i<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^i}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const i=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(i),this.parray[t+0]=i[0],this.parray[t+1]=i[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[t][r+0]=i[0],this.sboxes[t][r+1]=i[1]},dl.keySize=dl.prototype.keySize=16,dl.blockSize=dl.prototype.blockSize=8;const Al=new Map([[Q.symmetric.tripledes,al],[Q.symmetric.cast5,cl],[Q.symmetric.blowfish,dl],[Q.symmetric.twofish,gl]]);var wl=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Al});const ml=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),bl=/* @__PURE__ */new Uint32Array(80);class El extends kh{constructor(){super(64,20,8,!1),this.A=0|ml[0],this.B=0|ml[1],this.C=0|ml[2],this.D=0|ml[3],this.E=0|ml[4]}get(){const{A:e,B:t,C:r,D:i,E:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)bl[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)bl[e]=oc(bl[e-3]^bl[e-8]^bl[e-14]^bl[e-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=bh(i,n,s),o=1518500249):e<40?(t=i^n^s,o=1859775393):e<60?(t=Eh(i,n,s),o=2400959708):(t=i^n^s,o=3395469782);const c=oc(r,5)+t+a+o+bl[e]|0;a=s,s=n,n=oc(i,30),i=r,r=c}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){bl.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const kl=/* @__PURE__ */gc((()=>new El)),vl=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Bl=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((e,t)=>t))),Il=/* @__PURE__ */Bl.map((e=>(9*e+5)%16));let Sl=[Bl],Cl=[Il];for(let e=0;e<4;e++)for(let t of[Sl,Cl])t.push(t[e].map((e=>vl[e])));const Kl=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>new Uint8Array(e))),Pl=/* @__PURE__ */Sl.map(((e,t)=>e.map((e=>Kl[t][e])))),Dl=/* @__PURE__ */Cl.map(((e,t)=>e.map((e=>Kl[t][e])))),Ul=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),xl=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]);function Ql(e,t,r,i){return 0===e?t^r^i:1===e?t&r|~t&i:2===e?(t|~r)^i:3===e?t&i|r&~i:t^(r|~i)}const Rl=/* @__PURE__ */new Uint32Array(16);class Ml extends kh{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:i,h4:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Rl[r]=e.getUint32(t,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let e=0;e<5;e++){const t=4-e,y=Ul[e],f=xl[e],g=Sl[e],p=Cl[e],d=Pl[e],A=Dl[e];for(let t=0;t<16;t++){const i=oc(r+Ql(e,n,a,c)+Rl[g[t]]+y,d[t])+u|0;r=u,u=c,c=0|oc(a,10),a=n,n=i}for(let e=0;e<16;e++){const r=oc(i+Ql(t,s,o,h)+Rl[p[e]]+f,A[e])+l|0;i=l,l=h,h=0|oc(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){Rl.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const Tl=new Map(Object.entries({sha1:kl,sha224:Ph,sha256:Kh,sha384:Yh,sha512:Vh,sha3_256:pu,sha3_512:du,ripemd160:/* @__PURE__ */gc((()=>new Ml))}));var Ll=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Tl});function _l(e,t,r,i){e[t]+=r[i],e[t+1]+=r[i+1]+(e[t]<r[i])}function Fl(e,t){e[0]+=t,e[1]+=e[0]<t}function Nl(e,t,r,i,n,s,a,o){_l(e,r,e,i),_l(e,r,t,a);let c=e[s]^e[r],h=e[s+1]^e[r+1];e[s]=h,e[s+1]=c,_l(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=c>>>24^h<<8,e[i+1]=h>>>24^c<<8,_l(e,r,e,i),_l(e,r,t,o),c=e[s]^e[r],h=e[s+1]^e[r+1],e[s]=c>>>16^h<<16,e[s+1]=h>>>16^c<<16,_l(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=h>>>31^c<<1,e[i+1]=c>>>31^h<<1}const Hl=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),Ol=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function zl(e,t){const r=new Uint32Array(32),i=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=Hl[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const n=t?4294967295:0;r[28]^=n,r[29]^=n;for(let e=0;e<12;e++){const t=e<<4;Nl(r,i,0,8,16,24,Ol[t+0],Ol[t+1]),Nl(r,i,2,10,18,26,Ol[t+2],Ol[t+3]),Nl(r,i,4,12,20,28,Ol[t+4],Ol[t+5]),Nl(r,i,6,14,22,30,Ol[t+6],Ol[t+7]),Nl(r,i,0,10,20,30,Ol[t+8],Ol[t+9]),Nl(r,i,2,12,22,24,Ol[t+10],Ol[t+11]),Nl(r,i,4,14,16,26,Ol[t+12],Ol[t+13]),Nl(r,i,6,8,18,28,Ol[t+14],Ol[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class Gl{constructor(e,t,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(Vl),h:new Uint32Array(jl/4),t0:new Uint32Array(2),c:0,outlen:e},n[0]=e,t&&(n[1]=t.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=Hl[e]^s[e];if(t){const e=new Uint8Array(Vl);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===Vl&&(Fl(this.S.t0,this.S.c),zl(this.S,!1),this.S.c=0);let r=Vl-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const i=Math.min(r,e.length-t);this.S.c+=i,t+=i}return this}digest(e){Fl(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=Vl,zl(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function ql(e,t,r,i){if(e>jl)throw Error(`outlen must be at most ${jl} (given: ${e})`);return new Gl(e,t,r,i)}const jl=64,Vl=128,Yl=2,Zl=19,Jl=4294967295,Wl=4,$l=4294967295,Xl=8,ey=4294967295,ty=8,ry=4294967295,iy=4294967295,ny=32,sy=1024,ay=64,oy=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function cy(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function hy(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=t;for(let t=r;t<r+7;t++)e[t]=i,i=(i-e[t])/256;return e}function uy(e,t,r){const i=new Uint8Array(64),n=new Uint8Array(4+t.length);if(cy(n,e,0),n.set(t,4),e<=64)return ql(e).update(n).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)ql(64).update(0===e?n:i).digest(i),r.set(i.subarray(0,32),32*e);const a=new Uint8Array(ql(e-32*s).update(i).digest());return r.set(a,32*s),r}function ly(e,t,r,i){return e.fn.XOR(t.byteOffset,r.byteOffset,i.byteOffset),t}function yy(e,t,r,i){return e.fn.G(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function fy(e,t,r,i){return e.fn.G2(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function*gy(e,t,r,i,n,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);hy(c,t,0),hy(c,r,8),hy(c,i,16),hy(c,n,24),hy(c,s,32),hy(c,Yl,40);for(let t=1;t<=a;t++){hy(e.refs.prngTmp,t,c.length);const r=fy(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}const py=1024,dy=64*py;function Ay(e,{memory:t,instance:r}){if(!oy)throw Error("BigEndian system not supported");const i=function({type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(e,t,r,i)=>{if(t<r||t>i)throw Error(`${e} size should be between ${r} and ${i} bytes`)};if(e!==Yl||t!==Zl)throw Error("Unsupported type or version");return u("password",i,ty,ey),u("salt",n,Xl,$l),u("tag",r,Wl,Jl),u("memory",c,8*o,ry),s&&u("associated data",s,0,iy),a&&u("secret",a,0,ny),{type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:Yl,version:Zl,...e}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*sy+10*py;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/dy);t.grow(e)}let y=0;c.gZ=new Uint8Array(t.buffer,y,sy),y+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,y,sy),y+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,y,sy),y+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,y,1024),y+=c.ZERO1024.length;const f=new Uint32Array(t.buffer,y,2);y+=f.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:h,refs:c},p=new Uint8Array(t.buffer,y,sy);y+=p.length;const d=new Uint8Array(t.buffer,y,i.memorySize*sy),A=new Uint8Array(t.buffer,0,y),w=function(e){const t=ql(ay),r=new Uint8Array(4),i=new Uint8Array(24);cy(i,e.lanes,0),cy(i,e.tagLength,4),cy(i,e.memorySize,8),cy(i,e.passes,12),cy(i,e.version,16),cy(i,e.type,20);const n=[i];e.password?(n.push(cy(new Uint8Array(4),e.password.length,0)),n.push(e.password)):n.push(r);e.salt?(n.push(cy(new Uint8Array(4),e.salt.length,0)),n.push(e.salt)):n.push(r);e.secret?(n.push(cy(new Uint8Array(4),e.secret.length,0)),n.push(e.secret)):n.push(r);e.ad?(n.push(cy(new Uint8Array(4),e.ad.length,0)),n.push(e.ad)):n.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((e=>{r.set(e,i),i+=e.length})),r}(n));const s=t.digest();return new Uint8Array(s)}(i),m=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(m))),E=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+sy),b[e][t]);for(let e=0;e<i.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),cy(t,0,w.length),cy(t,e,w.length+4),uy(sy,t,E(e,0)),cy(t,1,w.length),uy(sy,t,E(e,1))}const k=m/4;for(let e=0;e<i.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let n=0;n<i.lanes;n++){let s=0===t&&0===e?2:0;const a=r?gy(g,e,n,t,u,i.passes,k,s):null;for(;s<k;s++){const c=t*k+s,h=c>0?b[n][c-1]:b[n][m-1],u=r?a.next().value:h;o(f.byteOffset,u.byteOffset,n,i.lanes,e,t,s,4,k);const l=f[0],y=f[1];0===e&&E(n,c),yy(g,h,b[l][y],e>0?p:b[n][c]),e>0&&ly(g,b[n][c],p,b[n][c])}}}const v=b[0][m-1];for(let e=1;e<i.lanes;e++)ly(g,v,v,b[e][m-1]);const B=uy(i.tagLength,v,new Uint8Array(i.tagLength));return A.fill(0),t.grow(0),B}let wy;async function my(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(e,t,r){const i={env:{memory:e}};if(void 0===wy)try{const e=await t(i);return wy=!0,e}catch(e){wy=!1}return(wy?t:r)(i)}(r,e,t);return e=>Ay(e,{instance:i.instance,memory:r})}function by(e,r,i,n){var s=null,a=t.atob(i),o=a.length;s=new Uint8Array(new ArrayBuffer(o));for(var c=0;c<o;c++)s[c]=a.charCodeAt(c);return function(e,t,r){var i=WebAssembly.instantiate,n=WebAssembly.compile;return t?i(e,t):n(e)}(s,n)}var Ey=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>my((e=>by(0,0,"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",e)),(e=>by(0,0,"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",e)))});return e.AEADEncryptedDataPacket=Ja,e.Argon2OutOfMemoryError=hs,e.Argon2S2K=fs,e.CleartextMessage=Go,e.CompressedDataPacket=Na,e.KDFParams=Jn,e.LiteralDataPacket=Ka,e.MarkerPacket=class{static get tag(){return Q.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}},e.Message=No,e.OnePassSignaturePacket=Ta,e.PacketList=_a,e.PaddingPacket=class{static get tag(){return Q.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await cs.random.getRandomBytes(e)}},e.PrivateKey=Qo,e.PublicKey=xo,e.PublicKeyEncryptedSessionKeyPacket=Wa,e.PublicKeyPacket=eo,e.PublicSubkeyPacket=io,e.SecretKeyPacket=so,e.SecretSubkeyPacket=co,e.Signature=uo,e.SignaturePacket=Qa,e.Subkey=Co,e.SymEncryptedIntegrityProtectedDataPacket=Va,e.SymEncryptedSessionKeyPacket=Xa,e.SymmetricallyEncryptedDataPacket=ro,e.TrustPacket=class{static get tag(){return Q.packet.trust}read(){throw new ei("Trust packets are not supported")}write(){throw new ei("Trust packets are not supported")}},e.UnparseablePacket=ri,e.UserAttributePacket=no,e.UserIDPacket=oo,e.armor=$,e.config=R,e.createCleartextMessage=async function({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!T.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new Go(e)},e.createMessage=async function({text:e,binary:t,filename:r,date:i=new Date,format:n=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!T.isString(e)&&!T.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!T.isUint8Array(t)&&!T.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=T.isStream(a),h=new Ka(i);void 0!==e?h.setText(a,Q.write(Q.literal,n)):h.setBytes(a,Q.write(Q.literal,n)),void 0!==r&&h.setFilename(r);const u=new _a;u.push(h);const l=new No(u);return l.fromStream=c,l},e.decrypt=async function({message:e,decryptionKeys:t,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(Zo(h={...R,...h}),qo(e),n=Jo(n),t=Jo(t),r=Jo(r),i=Jo(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await e.decrypt(t,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),$o(l,e),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=d([l.data,P((async()=>{await T.anyPromise(l.signatures.map((e=>e.verified)))}))])}return l.data=await Wo(l.data),l}catch(e){throw T.wrapError("Error decrypting message",e)}},e.decryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){Zo(r={...R,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=T.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>T.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),T.wrapError("Error decrypting private key",e)}},e.decryptSessionKeys=async function({message:e,decryptionKeys:t,passwords:r,date:i=new Date,config:n,...s}){if(Zo(n={...R,...n}),qo(e),t=Jo(t),r=Jo(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,i,n)}catch(e){throw T.wrapError("Error decrypting session keys",e)}},e.encrypt=async function({message:e,encryptionKeys:t,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:y=[],signatureNotations:f=[],config:g,...p}){if(Zo(g={...R,...g}),qo(e),Vo(s),t=Jo(t),r=Jo(r),i=Jo(i),c=Jo(c),h=Jo(h),l=Jo(l),y=Jo(y),f=Jo(f),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,a,c,u,l,f,g)),e=e.compress(await async function(e=[],t=new Date,r=[],i=R){const n=Q.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,n){const a=(await e.getPrimarySelfSignature(t,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(t,u,y,g),g),e=await e.encrypt(t,i,n,o,h,u,y,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await Wo(p)}catch(e){throw T.wrapError("Error encrypting message",e)}},e.encryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){Zo(r={...R,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=T.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:i}=e;await i.encrypt(o[t],r),i.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),T.wrapError("Error encrypting private key",e)}},e.encryptSessionKey=async function({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(Zo(u={...R,...u}),function(e,t){if(!T.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!T.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),Vo(s),i=Jo(i),n=Jo(n),o=Jo(o),h=Jo(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const y=Object.keys(l);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return Xo(await No.encryptSessionKey(e,t,r,i,n,a,o,c,h,u),s,u)}catch(e){throw T.wrapError("Error encrypting session key",e)}},e.enums=Q,e.generateKey=async function({userIDs:e=[],passphrase:t,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...y}){Zo(l={...R,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),e=Jo(e);const f=Object.keys(y);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const g={userIDs:e,passphrase:t,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=Eo(e)).subkeys=e.subkeys.map(((t,r)=>Eo(e.subkeys[r],e)));let r=[yo(e,t)];r=r.concat(e.subkeys.map((e=>lo(e,t))));const i=await Promise.all(r),n=await To(i[0],i.slice(1),e,t),s=await n.getRevocationCertificate(e.date,t);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(g,l);return e.getKeys().forEach((({keyPacket:e})=>Io(e,l))),{privateKey:Xo(e,u,l),publicKey:"symmetric"!==r?Xo(e.toPublic(),u,l):null,revocationCertificate:t}}catch(e){throw T.wrapError("Error generating keypair",e)}},e.generateSessionKey=async function({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:i,...n}){if(Zo(i={...R,...i}),e=Jo(e),r=Jo(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await No.generateSessionKey(e,t,r,i)}catch(e){throw T.wrapError("Error generating session key",e)}},e.readCleartextMessage=async function({cleartextMessage:e,config:t,...r}){if(t={...R,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!T.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await W(e);if(n.type!==Q.armor.signed)throw Error("No cleartext signed message.");const s=await _a.fromBinary(n.data,zo,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let i=0;i<t.length;i++)if(t[i].constructor.tag===Q.packet.signature&&!e.some(r(t[i])))return!1;return!0},i=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return Q.write(Q.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));i.push(...e)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new uo(s);return new Go(n.text,a)},e.readKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={...R,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!T.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!T.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await W(e);if(t!==Q.armor.publicKey&&t!==Q.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await _a.fromBinary(s,Ro,r),o=a.indexOfTag(Q.packet.publicKey,Q.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Mo(a.slice(o[0],o[1]))},e.readKeys=async function({armoredKeys:e,binaryKeys:t,config:r,...i}){r={...R,...r};let n=e||t;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!T.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!T.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await W(e);if(t!==Q.armor.publicKey&&t!==Q.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await _a.fromBinary(n,Ro,r),c=o.indexOfTag(Q.packet.publicKey,Q.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Mo(o.slice(c[e],c[e+1]));a.push(t)}return a},e.readMessage=async function({armoredMessage:e,binaryMessage:t,config:r,...i}){r={...R,...r};let n=e||t;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!T.isString(e)&&!T.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!T.isUint8Array(t)&&!T.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=T.isStream(n);if(e){const{type:e,data:t}=await W(n);if(e!==Q.armor.message)throw Error("Armored text not of type message");n=t}const o=await _a.fromBinary(n,Lo,r),c=new No(o);return c.fromStream=a,c},e.readPrivateKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={...R,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!T.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!T.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await W(e);if(t!==Q.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await _a.fromBinary(s,Ro,r),o=a.indexOfTag(Q.packet.publicKey,Q.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===Q.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new Qo(t)}throw Error("No secret key packet found")},e.readPrivateKeys=async function({armoredKeys:e,binaryKeys:t,config:r}){r={...R,...r};let i=e||t;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!T.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!T.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await W(e);if(t!==Q.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await _a.fromBinary(i,Ro,r),a=s.indexOfTag(Q.packet.publicKey,Q.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===Q.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new Qo(t);n.push(r)}if(0===n.length)throw Error("No secret key packet found");return n},e.readSignature=async function({armoredSignature:e,binarySignature:t,config:r,...i}){r={...R,...r};let n=e||t;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!T.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!T.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await W(n);if(e!==Q.armor.signature)throw Error("Armored text not of type signature");n=t}const a=await _a.fromBinary(n,ho,r);return new uo(a)},e.reformatKey=async function({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){Zo(a={...R,...a}),t=Jo(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:i,date:n};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,n={key:i,bind:r},s=await fo(e.bindingSignatures,i,Q.signature.subkeyBinding,n,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&Q.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&Q.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await To(i,n,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=T.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(h,a);return{privateKey:Xo(e,s,a),publicKey:Xo(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw T.wrapError("Error reformatting keypair",e)}},e.revokeKey=async function({key:e,revocationCertificate:t,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){Zo(s={...R,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,i,s):await e.revoke(r,i,s);return a.isPrivate()?{privateKey:Xo(a,n,s),publicKey:Xo(a.toPublic(),n,s)}:{privateKey:null,publicKey:Xo(a,n,s)}}catch(e){throw T.wrapError("Error revoking key",e)}},e.sign=async function({message:e,signingKeys:t,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(Zo(c={...R,...c}),jo(e),Vo(r),t=Jo(t),n=Jo(n),a=Jo(a),o=Jo(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(e instanceof Go&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof Go&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let h;if(h=i?await e.signDetached(t,void 0,n,s,a,o,c):await e.sign(t,void 0,n,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),i&&(h=E(e.packets.write(),(async(e,t)=>{await Promise.all([A(h,t),C(e).catch((()=>{}))])}))),await Wo(h)}catch(e){throw T.wrapError("Error signing message",e)}},e.unarmor=W,e.verify=async function({message:e,verificationKeys:t,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(Zo(a={...R,...a}),jo(e),t=Jo(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof Go&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(e instanceof Go&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await e.verifyDetached(n,t,s,a):await e.verify(t,s,a),o.data="binary"===i?e.getLiteralData():e.getText(),e.fromStream&&!n&&$o(o,e),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=d([o.data,P((async()=>{await T.anyPromise(o.signatures.map((e=>e.verified)))}))])}return o.data=await Wo(o.data),o}catch(e){throw T.wrapError("Error verifying signed message",e)}},e}({});
+const $l=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),Xl=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),ey=BigInt(1),ty=BigInt(2),ry=(e,t)=>(e+t/ty)/t;const ny=wu($l,void 0,void 0,{sqrt:function(e){const t=$l,r=BigInt(3),n=BigInt(6),i=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),h=e*e*e%t,u=h*h*e%t,l=fu(u,r,t)*u%t,y=fu(l,r,t)*u%t,f=fu(y,ty,t)*h%t,g=fu(f,i,t)*f%t,p=fu(g,s,t)*g%t,d=fu(p,o,t)*p%t,A=fu(d,c,t)*d%t,w=fu(A,o,t)*p%t,m=fu(w,r,t)*u%t,b=fu(m,a,t)*g%t,E=fu(b,n,t)*h%t,k=fu(E,ty,t);if(!ny.eql(ny.sqr(k),e))throw Error("Cannot find square root");return k}}),iy=Fu({a:BigInt(0),b:BigInt(7),Fp:ny,n:Xl,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{const t=Xl,r=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),n=-ey*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),i=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=BigInt("0x100000000000000000000000000000000"),o=ry(s*e,t),c=ry(-n*e,t);let h=lu(e-o*r-c*i,t),u=lu(-o*n-c*s,t);const l=h>a,y=u>a;if(l&&(h=t-h),y&&(u=t-u),h>a||u>a)throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:l,k1:h,k2neg:y,k2:u}}}},vh);BigInt(0),iy.ProjectivePoint;const sy=wu(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),ay=Fu({a:sy.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:sy,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},vh),oy=wu(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),cy=Fu({a:oy.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:oy,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},nl),hy=wu(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),uy=Fu({a:hy.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:hy,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},rl),ly=new Map(Object.entries({nistP256:Hu,nistP384:sl,nistP521:cl,brainpoolP256r1:ay,brainpoolP384r1:cy,brainpoolP512r1:uy,secp256k1:iy,x448:Jl,ed448:Yl}));var yy=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:ly});function fy(e,t,r,n,i,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],y=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],f=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,E,k,v,B=0,I=t.length;const S=32===e.length?3:9;E=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e){const t=8-e.length%8;let r;if(!(t<8)){if(8===t)return e;throw Error("des: invalid padding")}r=0;const n=new Uint8Array(e.length+t);for(let t=0;t<e.length;t++)n[t]=e[t];for(let i=0;i<t;i++)n[e.length+i]=r;return n}(t),I=t.length);let K=new Uint8Array(I),C=0;for(;B<I;){for(m=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],b=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(k=E[p+1],v=E[p+2],g=E[p];g!==k;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|h[A>>>16&63]|l[A>>>8&63]|f[63&A]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|y[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,K[C++]=m>>>24,K[C++]=m>>>16&255,K[C++]=m>>>8&255,K[C++]=255&m,K[C++]=b>>>24,K[C++]=b>>>16&255,K[C++]=b>>>8&255,K[C++]=255&b}return r||(K=function(e){let t,r=null;if(t=0,!r){for(r=1;e[e.length-r]===t;)r++;r--}return e.subarray(0,e.length-r)}(K)),K}function gy(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],n=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],i=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],y=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],f=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,E=0,k=0;for(let v=0;v<p;v++){let p=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++],v=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|n[p>>>20&15]|i[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|h[v>>>24&15]|u[v>>>20&15]|l[v>>>16&15]|y[v>>>12&15]|f[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[k++]=w^b,d[k++]=m^b<<16}return d}function py(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return fy(gy(this.key[2]),fy(gy(this.key[1]),fy(gy(this.key[0]),e,!0),!1),!0)}}function dy(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const n=t+e,i=n<<r|n>>>32-r;return(s[0][i>>>24]^s[1][i>>>16&255])-s[2][i>>>8&255]+s[3][255&i]}function n(e,t,r){const n=t^e,i=n<<r|n>>>32-r;return s[0][i>>>24]-s[1][i>>>16&255]+s[2][i>>>8&255]^s[3][255&i]}function i(e,t,r){const n=t-e,i=n<<r|n>>>32-r;return(s[0][i>>>24]+s[1][i>>>16&255]^s[2][i>>>8&255])-s[3][255&i]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const n=[,,,,,,,,],i=Array(32);let a;for(let e=0;e<4;e++)a=4*e,n[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=n[t[1]],c^=s[4][n[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][n[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][n[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][n[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][n[t[6]>>>2]>>>24-8*(3&t[6])&255],n[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][n[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][n[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][n[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][n[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][n[e[4]>>>2]>>>24-8*(3&e[4])&255],i[h]=c,h++}}for(let e=0;e<16;e++)this.masking[e]=i[e],this.rotate[e]=31&i[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function Ay(e){this.cast5=new dy,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}py.keySize=py.prototype.keySize=24,py.blockSize=py.prototype.blockSize=8,Ay.blockSize=Ay.prototype.blockSize=8,Ay.keySize=Ay.prototype.keySize=16;const wy=4294967295;function my(e,t){return(e<<t|e>>>32-t)&wy}function by(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Ey(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function ky(e,t){return e>>>8*t&255}function vy(e){this.tf=function(){let e=null,t=null,r=-1,n=[],i=[[],[],[],[]];function s(e){return i[0][ky(e,0)]^i[1][ky(e,1)]^i[2][ky(e,2)]^i[3][ky(e,3)]}function a(e){return i[0][ky(e,3)]^i[1][ky(e,0)]^i[2][ky(e,1)]^i[3][ky(e,2)]}function o(e,t){let r=s(t[0]),i=a(t[1]);t[2]=my(t[2]^r+i+n[4*e+8]&wy,31),t[3]=my(t[3],1)^r+2*i+n[4*e+9]&wy,r=s(t[2]),i=a(t[3]),t[0]=my(t[0]^r+i+n[4*e+10]&wy,31),t[1]=my(t[1],1)^r+2*i+n[4*e+11]&wy}function c(e,t){let r=s(t[0]),i=a(t[1]);t[2]=my(t[2],1)^r+i+n[4*e+10]&wy,t[3]=my(t[3]^r+2*i+n[4*e+11]&wy,31),r=s(t[2]),i=a(t[3]),t[0]=my(t[0],1)^r+i+n[4*e+8]&wy,t[1]=my(t[1]^r+2*i+n[4*e+9]&wy,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const h=[],u=[],l=[];let y;const f=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],E=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],k=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],B=[[],[],[],[]];function I(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function K(e,t){let r,n,i;for(r=0;r<8;r++)n=t>>>24,t=t<<8&wy|e>>>24,e=e<<8&wy,i=n<<1,128&n&&(i^=333),t^=n^i<<16,i^=n>>>1,1&n&&(i^=166),t^=i<<24|i<<8;return t}function C(e,t){const r=t>>4,n=15&t,i=A[e][r^n],s=w[e][E[n]^k[r]];return b[e][E[s]^k[i]]<<4|m[e][i^s]}function P(e,t){let r=ky(e,0),n=ky(e,1),i=ky(e,2),s=ky(e,3);switch(y){case 4:r=v[1][r]^ky(t[3],0),n=v[0][n]^ky(t[3],1),i=v[0][i]^ky(t[3],2),s=v[1][s]^ky(t[3],3);case 3:r=v[1][r]^ky(t[2],0),n=v[1][n]^ky(t[2],1),i=v[0][i]^ky(t[2],2),s=v[0][s]^ky(t[2],3);case 2:r=v[0][v[0][r]^ky(t[1],0)]^ky(t[0],0),n=v[0][v[1][n]^ky(t[1],1)]^ky(t[0],1),i=v[1][v[0][i]^ky(t[1],2)]^ky(t[0],2),s=v[1][v[1][s]^ky(t[1],3)]^ky(t[0],3)}return B[0][r]^B[1][n]^B[2][i]^B[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=by(e,r);for(r=0;r<256;r++)v[0][r]=C(0,r),v[1][r]=C(1,r);for(r=0;r<256;r++)g=v[1][r],p=I(g),d=S(g),B[0][r]=g+(p<<8)+(d<<16)+(d<<24),B[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=I(g),d=S(g),B[1][r]=d+(d<<8)+(p<<16)+(g<<24),B[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(y=l.length/2,r=0;r<y;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,f[y-r-1]=K(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=P(s,h),a=my(P(a,u),8),n[r]=s+a&wy,n[r+1]=my(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,y){case 4:s=v[1][s]^ky(f[3],0),a=v[0][a]^ky(f[3],1),o=v[0][o]^ky(f[3],2),c=v[1][c]^ky(f[3],3);case 3:s=v[1][s]^ky(f[2],0),a=v[1][a]^ky(f[2],1),o=v[0][o]^ky(f[2],2),c=v[0][c]^ky(f[2],3);case 2:i[0][r]=B[0][v[0][v[0][s]^ky(f[1],0)]^ky(f[0],0)],i[1][r]=B[1][v[0][v[1][a]^ky(f[1],1)]^ky(f[0],1)],i[2][r]=B[2][v[1][v[0][o]^ky(f[1],2)]^ky(f[0],2)],i[3][r]=B[3][v[1][v[1][c]^ky(f[1],3)]^ky(f[0],3)]}},close:function(){n=[],i=[[],[],[],[]]},encrypt:function(e,i){t=e,r=i;const s=[by(t,r)^n[0],by(t,r+4)^n[1],by(t,r+8)^n[2],by(t,r+12)^n[3]];for(let e=0;e<8;e++)o(e,s);return Ey(t,r,s[2]^n[4]),Ey(t,r+4,s[3]^n[5]),Ey(t,r+8,s[0]^n[6]),Ey(t,r+12,s[1]^n[7]),r+=16,t},decrypt:function(e,i){t=e,r=i;const s=[by(t,r)^n[4],by(t,r+4)^n[5],by(t,r+8)^n[6],by(t,r+12)^n[7]];for(let e=7;e>=0;e--)c(e,s);Ey(t,r,s[2]^n[0]),Ey(t,r+4,s[3]^n[1]),Ey(t,r+8,s[0]^n[2]),Ey(t,r+12,s[1]^n[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function By(){}function Iy(e){this.bf=new By,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}vy.keySize=vy.prototype.keySize=32,vy.blockSize=vy.prototype.blockSize=16,By.prototype.BLOCKSIZE=8,By.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],By.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],By.prototype.NN=16,By.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},By.prototype._F=function(e){let t;const r=255&e,n=255&(e>>>=8),i=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][i],t^=this.sboxes[2][n],t+=this.sboxes[3][r],t},By.prototype._encryptBlock=function(e){let t,r=e[0],n=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[this.NN+0],n^=this.parray[this.NN+1],e[0]=this._clean(n),e[1]=this._clean(r)},By.prototype.encryptBlock=function(e){let t;const r=[0,0],n=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+n];this._encryptBlock(r);const i=[];for(t=0;t<this.BLOCKSIZE/2;++t)i[t+0]=r[0]>>>24-8*t&255,i[t+n]=r[1]>>>24-8*t&255;return i},By.prototype._decryptBlock=function(e){let t,r=e[0],n=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[1],n^=this.parray[0],e[0]=this._clean(n),e[1]=this._clean(r)},By.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let n=0;for(let t=0;t<4;++t)n=n<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^n}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const n=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(n),this.parray[t+0]=n[0],this.parray[t+1]=n[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(n),this.sboxes[t][r+0]=n[0],this.sboxes[t][r+1]=n[1]},Iy.keySize=Iy.prototype.keySize=16,Iy.blockSize=Iy.prototype.blockSize=8;const Sy=new Map([[R.symmetric.tripledes,py],[R.symmetric.cast5,Ay],[R.symmetric.blowfish,Iy],[R.symmetric.twofish,vy]]);var Ky=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Sy});const Cy=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),Py=/* @__PURE__ */new Uint32Array(80);class Uy extends Ah{constructor(){super(64,20,8,!1),this.A=0|Cy[0],this.B=0|Cy[1],this.C=0|Cy[2],this.D=0|Cy[3],this.E=0|Cy[4]}get(){const{A:e,B:t,C:r,D:n,E:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)Py[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)Py[e]=ah(Py[e-3]^Py[e-8]^Py[e-14]^Py[e-16],1);let{A:r,B:n,C:i,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=ph(n,i,s),o=1518500249):e<40?(t=n^i^s,o=1859775393):e<60?(t=dh(n,i,s),o=2400959708):(t=n^i^s,o=3395469782);const c=ah(r,5)+t+a+o+Py[e]|0;a=s,s=i,i=ah(n,30),n=r,r=c}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,n,i,s,a)}roundClean(){Py.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Dy=/* @__PURE__ */fh((()=>new Uy)),xy=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Qy=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((e,t)=>t))),Ry=/* @__PURE__ */Qy.map((e=>(9*e+5)%16));let My=[Qy],Ly=[Ry];for(let e=0;e<4;e++)for(let t of[My,Ly])t.push(t[e].map((e=>xy[e])));const Ty=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>new Uint8Array(e))),Fy=/* @__PURE__ */My.map(((e,t)=>e.map((e=>Ty[t][e])))),Ny=/* @__PURE__ */Ly.map(((e,t)=>e.map((e=>Ty[t][e])))),Hy=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),Oy=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]);function zy(e,t,r,n){return 0===e?t^r^n:1===e?t&r|~t&n:2===e?(t|~r)^n:3===e?t&n|r&~n:t^(r|~n)}const _y=/* @__PURE__ */new Uint32Array(16);class Gy extends Ah{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:n,h4:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|n,this.h4=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)_y[r]=e.getUint32(t,!0);let r=0|this.h0,n=r,i=0|this.h1,s=i,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let e=0;e<5;e++){const t=4-e,y=Hy[e],f=Oy[e],g=My[e],p=Ly[e],d=Fy[e],A=Ny[e];for(let t=0;t<16;t++){const n=ah(r+zy(e,i,a,c)+_y[g[t]]+y,d[t])+u|0;r=u,u=c,c=0|ah(a,10),a=i,i=n}for(let e=0;e<16;e++){const r=ah(n+zy(t,s,o,h)+_y[p[e]]+f,A[e])+l|0;n=l,l=h,h=0|ah(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+n|0,this.h4+r+s|0,this.h0+i+o|0)}roundClean(){_y.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const jy=new Map(Object.entries({sha1:Dy,sha224:Bh,sha256:vh,sha384:nl,sha512:rl,sha3_256:Bl,sha3_512:Il,ripemd160:/* @__PURE__ */fh((()=>new Gy))}));var qy=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:jy});function Vy(e,t,r,n){e[t]+=r[n],e[t+1]+=r[n+1]+(e[t]<r[n])}function Wy(e,t){e[0]+=t,e[1]+=e[0]<t}function Zy(e,t,r,n,i,s,a,o){Vy(e,r,e,n),Vy(e,r,t,a);let c=e[s]^e[r],h=e[s+1]^e[r+1];e[s]=h,e[s+1]=c,Vy(e,i,e,s),c=e[n]^e[i],h=e[n+1]^e[i+1],e[n]=c>>>24^h<<8,e[n+1]=h>>>24^c<<8,Vy(e,r,e,n),Vy(e,r,t,o),c=e[s]^e[r],h=e[s+1]^e[r+1],e[s]=c>>>16^h<<16,e[s+1]=h>>>16^c<<16,Vy(e,i,e,s),c=e[n]^e[i],h=e[n+1]^e[i+1],e[n]=h>>>31^c<<1,e[n+1]=c>>>31^h<<1}const Yy=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),Jy=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function $y(e,t){const r=new Uint32Array(32),n=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=Yy[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const i=t?4294967295:0;r[28]^=i,r[29]^=i;for(let e=0;e<12;e++){const t=e<<4;Zy(r,n,0,8,16,24,Jy[t+0],Jy[t+1]),Zy(r,n,2,10,18,26,Jy[t+2],Jy[t+3]),Zy(r,n,4,12,20,28,Jy[t+4],Jy[t+5]),Zy(r,n,6,14,22,30,Jy[t+6],Jy[t+7]),Zy(r,n,0,10,20,30,Jy[t+8],Jy[t+9]),Zy(r,n,2,12,22,24,Jy[t+10],Jy[t+11]),Zy(r,n,4,14,16,26,Jy[t+12],Jy[t+13]),Zy(r,n,6,8,18,28,Jy[t+14],Jy[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class Xy{constructor(e,t,r,n){const i=new Uint8Array(64);this.S={b:new Uint8Array(rf),h:new Uint32Array(tf/4),t0:new Uint32Array(2),c:0,outlen:e},i[0]=e,t&&(i[1]=t.length),i[2]=1,i[3]=1,r&&i.set(r,32),n&&i.set(n,48);const s=new Uint32Array(i.buffer,i.byteOffset,i.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=Yy[e]^s[e];if(t){const e=new Uint8Array(rf);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===rf&&(Wy(this.S.t0,this.S.c),$y(this.S,!1),this.S.c=0);let r=rf-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const n=Math.min(r,e.length-t);this.S.c+=n,t+=n}return this}digest(e){Wy(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=rf,$y(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function ef(e,t,r,n){if(e>tf)throw Error(`outlen must be at most ${tf} (given: ${e})`);return new Xy(e,t,r,n)}const tf=64,rf=128,nf=2,sf=19,af=4294967295,of=4,cf=4294967295,hf=8,uf=4294967295,lf=8,yf=4294967295,ff=4294967295,gf=32,pf=1024,df=64,Af=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function wf(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function mf(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let n=t;for(let t=r;t<r+7;t++)e[t]=n,n=(n-e[t])/256;return e}function bf(e,t,r){const n=new Uint8Array(64),i=new Uint8Array(4+t.length);if(wf(i,e,0),i.set(t,4),e<=64)return ef(e).update(i).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)ef(64).update(0===e?i:n).digest(n),r.set(n.subarray(0,32),32*e);const a=new Uint8Array(ef(e-32*s).update(n).digest());return r.set(a,32*s),r}function Ef(e,t,r,n){return e.fn.XOR(t.byteOffset,r.byteOffset,n.byteOffset),t}function kf(e,t,r,n){return e.fn.G(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function vf(e,t,r,n){return e.fn.G2(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function*Bf(e,t,r,n,i,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);mf(c,t,0),mf(c,r,8),mf(c,n,16),mf(c,i,24),mf(c,s,32),mf(c,nf,40);for(let t=1;t<=a;t++){mf(e.refs.prngTmp,t,c.length);const r=vf(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}const If=1024,Sf=64*If;function Kf(e,{memory:t,instance:r}){if(!Af)throw Error("BigEndian system not supported");const n=function({type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(e,t,r,n)=>{if(t<r||t>n)throw Error(`${e} size should be between ${r} and ${n} bytes`)};if(e!==nf||t!==sf)throw Error("Unsupported type or version");return u("password",n,lf,uf),u("salt",i,hf,cf),u("tag",r,of,af),u("memory",c,8*o,yf),s&&u("associated data",s,0,ff),a&&u("secret",a,0,gf),{type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:nf,version:sf,...e}),{G:i,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=i,h.G2=s,h.XOR=a;const u=4*n.lanes*Math.floor(n.memorySize/(4*n.lanes)),l=u*pf+10*If;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/Sf);t.grow(e)}let y=0;c.gZ=new Uint8Array(t.buffer,y,pf),y+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,y,pf),y+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,y,pf),y+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,y,1024),y+=c.ZERO1024.length;const f=new Uint32Array(t.buffer,y,2);y+=f.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:h,refs:c},p=new Uint8Array(t.buffer,y,pf);y+=p.length;const d=new Uint8Array(t.buffer,y,n.memorySize*pf),A=new Uint8Array(t.buffer,0,y),w=function(e){const t=ef(df),r=new Uint8Array(4),n=new Uint8Array(24);wf(n,e.lanes,0),wf(n,e.tagLength,4),wf(n,e.memorySize,8),wf(n,e.passes,12),wf(n,e.version,16),wf(n,e.type,20);const i=[n];e.password?(i.push(wf(new Uint8Array(4),e.password.length,0)),i.push(e.password)):i.push(r);e.salt?(i.push(wf(new Uint8Array(4),e.salt.length,0)),i.push(e.salt)):i.push(r);e.secret?(i.push(wf(new Uint8Array(4),e.secret.length,0)),i.push(e.secret)):i.push(r);e.ad?(i.push(wf(new Uint8Array(4),e.ad.length,0)),i.push(e.ad)):i.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach((e=>{r.set(e,n),n+=e.length})),r}(i));const s=t.digest();return new Uint8Array(s)}(n),m=u/n.lanes,b=Array(n.lanes).fill(null).map((()=>Array(m))),E=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+pf),b[e][t]);for(let e=0;e<n.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),wf(t,0,w.length),wf(t,e,w.length+4),bf(pf,t,E(e,0)),wf(t,1,w.length),bf(pf,t,E(e,1))}const k=m/4;for(let e=0;e<n.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let i=0;i<n.lanes;i++){let s=0===t&&0===e?2:0;const a=r?Bf(g,e,i,t,u,n.passes,k,s):null;for(;s<k;s++){const c=t*k+s,h=c>0?b[i][c-1]:b[i][m-1],u=r?a.next().value:h;o(f.byteOffset,u.byteOffset,i,n.lanes,e,t,s,4,k);const l=f[0],y=f[1];0===e&&E(i,c),kf(g,h,b[l][y],e>0?p:b[i][c]),e>0&&Ef(g,b[i][c],p,b[i][c])}}}const v=b[0][m-1];for(let e=1;e<n.lanes;e++)Ef(g,v,v,b[e][m-1]);const B=bf(n.tagLength,v,new Uint8Array(n.tagLength));return A.fill(0),t.grow(0),B}let Cf;async function Pf(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),n=await async function(e,t,r){const n={env:{memory:e}};if(void 0===Cf)try{const e=await t(n);return Cf=!0,e}catch(e){Cf=!1}return(Cf?t:r)(n)}(r,e,t);return e=>Kf(e,{instance:n.instance,memory:r})}function Uf(e,r,n,i){var s=null,a=t.atob(n),o=a.length;s=new Uint8Array(new ArrayBuffer(o));for(var c=0;c<o;c++)s[c]=a.charCodeAt(c);return function(e,t){var r=WebAssembly.instantiate,n=WebAssembly.compile;return t?r(e,t):n(e)}(s,i)}var Df=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Pf((e=>Uf(0,0,"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",e)),(e=>Uf(0,0,"AGFzbQEAAAABPwhgBH9/f38AYAABf2AAAGADf39/AGARf39/f39/f39/f39/f39/f38AYAl/f39/f39/f38Bf2ABfwBgAX8BfwITAQNlbnYGbWVtb3J5AgGQCICABAMLCgIDBAAABQEGBwEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwADAkcyAAQFZ2V0TFoABRlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAkJc3RhY2tTYXZlAAYMc3RhY2tSZXN0b3JlAAcKc3RhY2tBbGxvYwAICQcBAEEBCwEACssaCgMAAQtQAQJ/A0AgACAEQQN0IgNqIAIgA2opAwAgASADaikDAIU3AwAgACADQQhyIgNqIAIgA2opAwAgASADaikDAIU3AwAgBEECaiIEQYABRw0ACwveDwICfgF/IAAgAUEDdGoiEyATKQMAIhEgACAFQQN0aiIBKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA1BA3RqIgUgESAFKQMAhUIgiSIRNwMAIAAgCUEDdGoiCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIoiSIRNwMAIBMgESATKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAFIBEgBSkDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgASARIAEpAwCFQgGJNwMAIAAgAkEDdGoiDSANKQMAIhEgACAGQQN0aiICKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA5BA3RqIgYgESAGKQMAhUIgiSIRNwMAIAAgCkEDdGoiCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIoiSIRNwMAIA0gESANKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAKIBEgCikDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAiARIAIpAwCFQgGJNwMAIAAgA0EDdGoiDiAOKQMAIhEgACAHQQN0aiIDKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA9BA3RqIgcgESAHKQMAhUIgiSIRNwMAIAAgC0EDdGoiCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAMgESADKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAHIBEgBykDAIVCMIkiETcDACALIBEgCykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQgGJNwMAIAAgBEEDdGoiDyAPKQMAIhEgACAIQQN0aiIEKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIBBBA3RqIgggESAIKQMAhUIgiSIRNwMAIAAgDEEDdGoiACARIAApAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA8gESAPKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAIIBEgCCkDAIVCMIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIBMgEykDACIRIAIpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAggESAIKQMAhUIgiSIRNwMAIAsgESALKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACACIBEgAikDAIVCKIkiETcDACATIBEgEykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgCCARIAgpAwCFQjCJIhE3AwAgCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIBiTcDACANIA0pAwAiESADKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAFIBEgBSkDAIVCIIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQiiJIhE3AwAgDSARIA0pAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAUgESAFKQMAhUIwiSIRNwMAIAAgESAAKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACADIBEgAykDAIVCAYk3AwAgDiAOKQMAIhEgBCkDACISfCARQgGGQv7///8fgyASQv////8Pg358IhE3AwAgBiARIAYpAwCFQiCJIhE3AwAgCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIA8gDykDACIRIAEpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAcgESAHKQMAhUIgiSIRNwMAIAogESAKKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACABIBEgASkDAIVCKIkiETcDACAPIBEgDykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgByARIAcpAwCFQjCJIhE3AwAgCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIBiTcDAAvdCAEPfwNAIAIgBUEDdCIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAIgBkEIciIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAVBAmoiBUGAAUcNAAsDQCADIARBA3QiAGogACACaikDADcDACADIARBAXIiAEEDdCIBaiABIAJqKQMANwMAIAMgBEECciIBQQN0IgVqIAIgBWopAwA3AwAgAyAEQQNyIgVBA3QiBmogAiAGaikDADcDACADIARBBHIiBkEDdCIHaiACIAdqKQMANwMAIAMgBEEFciIHQQN0IghqIAIgCGopAwA3AwAgAyAEQQZyIghBA3QiCWogAiAJaikDADcDACADIARBB3IiCUEDdCIKaiACIApqKQMANwMAIAMgBEEIciIKQQN0IgtqIAIgC2opAwA3AwAgAyAEQQlyIgtBA3QiDGogAiAMaikDADcDACADIARBCnIiDEEDdCINaiACIA1qKQMANwMAIAMgBEELciINQQN0Ig5qIAIgDmopAwA3AwAgAyAEQQxyIg5BA3QiD2ogAiAPaikDADcDACADIARBDXIiD0EDdCIQaiACIBBqKQMANwMAIAMgBEEOciIQQQN0IhFqIAIgEWopAwA3AwAgAyAEQQ9yIhFBA3QiEmogAiASaikDADcDACADIARB//8DcSAAQf//A3EgAUH//wNxIAVB//8DcSAGQf//A3EgB0H//wNxIAhB//8DcSAJQf//A3EgCkH//wNxIAtB//8DcSAMQf//A3EgDUH//wNxIA5B//8DcSAPQf//A3EgEEH//wNxIBFB//8DcRACIARB8ABJIQAgBEEQaiEEIAANAAtBACEBIANBAEEBQRBBEUEgQSFBMEExQcAAQcEAQdAAQdEAQeAAQeEAQfAAQfEAEAIgA0ECQQNBEkETQSJBI0EyQTNBwgBBwwBB0gBB0wBB4gBB4wBB8gBB8wAQAiADQQRBBUEUQRVBJEElQTRBNUHEAEHFAEHUAEHVAEHkAEHlAEH0AEH1ABACIANBBkEHQRZBF0EmQSdBNkE3QcYAQccAQdYAQdcAQeYAQecAQfYAQfcAEAIgA0EIQQlBGEEZQShBKUE4QTlByABByQBB2ABB2QBB6ABB6QBB+ABB+QAQAiADQQpBC0EaQRtBKkErQTpBO0HKAEHLAEHaAEHbAEHqAEHrAEH6AEH7ABACIANBDEENQRxBHUEsQS1BPEE9QcwAQc0AQdwAQd0AQewAQe0AQfwAQf0AEAIgA0EOQQ9BHkEfQS5BL0E+QT9BzgBBzwBB3gBB3wBB7gBB7wBB/gBB/wAQAgNAIAIgAUEDdCIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAiAAQQhyIgRqIgUgAyAEaikDACAFKQMAhTcDACACIABBEHIiBGoiBSADIARqKQMAIAUpAwCFNwMAIAIgAEEYciIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAUEEaiIBQYABRw0ACwsWACAAIAEgAiADEAMgACACIAIgAxADC3sCAX8BfiACIQkgATUCACEKIAQgBXIEQCABKAIEIANwIQkLIAAgCTYCACAAIAdBAWsgBSAEGyAIbCAGQQFrQQBBfyAGGyACIAlGG2oiASAFQQFqIAhsQQAgBBtqIAGtIAogCn5CIIh+QiCIp0F/c2ogByAIbHA2AgQgAAsEACMACwYAIAAkAAsQACMAIABrQXBxIgAkACAACwUAQYAICw==",e)))});return e.AEADEncryptedDataPacket=Yo,e.Argon2OutOfMemoryError=ca,e.Argon2S2K=ya,e.CleartextMessage=_c,e.CompressedDataPacket=Ho,e.KDFParams=Zs,e.LiteralDataPacket=Co,e.MarkerPacket=class{static get tag(){return R.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}},e.Message=Nc,e.OnePassSignaturePacket=Lo,e.PacketList=Fo,e.PaddingPacket=class{static get tag(){return R.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await oa.random.getRandomBytes(e)}},e.PrivateKey=xc,e.PublicKey=Dc,e.PublicKeyEncryptedSessionKeyPacket=Jo,e.PublicKeyPacket=ec,e.PublicSubkeyPacket=nc,e.SecretKeyPacket=sc,e.SecretSubkeyPacket=cc,e.Signature=uc,e.SignaturePacket=Qo,e.Subkey=Sc,e.SymEncryptedIntegrityProtectedDataPacket=Vo,e.SymEncryptedSessionKeyPacket=Xo,e.SymmetricallyEncryptedDataPacket=rc,e.TrustPacket=class{static get tag(){return R.packet.trust}read(){throw new qn("Trust packets are not supported")}write(){throw new qn("Trust packets are not supported")}},e.UnparseablePacket=Wn,e.UserAttributePacket=ic,e.UserIDPacket=oc,e.armor=X,e.config=M,e.createCleartextMessage=async function({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!T.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new _c(e)},e.createMessage=async function({text:e,binary:t,filename:r,date:n=new Date,format:i=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!T.isString(e)&&!T.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!T.isUint8Array(t)&&!T.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=T.isStream(a),h=new Co(n);void 0!==e?h.setText(a,R.write(R.literal,i)):h.setBytes(a,R.write(R.literal,i)),void 0!==r&&h.setFilename(r);const u=new Fo;u.push(h);const l=new Nc(u);return l.fromStream=c,l},e.decrypt=async function({message:e,decryptionKeys:t,passwords:r,sessionKeys:n,verificationKeys:i,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(Wc(h={...M,...h}),Gc(e),i=Zc(i),t=Zc(t),r=Zc(r),n=Zc(n),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await e.decrypt(t,r,n,c,h);i||(i=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,i,c,h):await u.verify(i,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),Jc(l,e),s){if(0===i.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=A([l.data,U((async()=>{await T.anyPromise(l.signatures.map((e=>e.verified)))}))])}return l.data=await Yc(l.data),l}catch(e){throw T.wrapError("Error decrypting message",e)}},e.decryptKey=async function({privateKey:e,passphrase:t,config:r,...n}){Wc(r={...M,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=T.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>T.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),T.wrapError("Error decrypting private key",e)}},e.decryptSessionKeys=async function({message:e,decryptionKeys:t,passwords:r,date:n=new Date,config:i,...s}){if(Wc(i={...M,...i}),Gc(e),t=Zc(t),r=Zc(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,n,i)}catch(e){throw T.wrapError("Error decrypting session keys",e)}},e.encrypt=async function({message:e,encryptionKeys:t,signingKeys:r,passwords:n,sessionKey:i,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:y=[],signatureNotations:f=[],config:g,...p}){if(Wc(g={...M,...g}),Gc(e),qc(s),t=Zc(t),r=Zc(r),n=Zc(n),c=Zc(c),h=Zc(h),l=Zc(l),y=Zc(y),f=Zc(f),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,a,c,u,l,f,g)),e=e.compress(await async function(e=[],t=new Date,r=[],n=M){const i=R.compression.uncompressed,s=n.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,i){const a=(await e.getPrimarySelfSignature(t,r[i],n)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:i}(t,u,y,g),g),e=await e.encrypt(t,n,i,o,h,u,y,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await Yc(p)}catch(e){throw T.wrapError("Error encrypting message",e)}},e.encryptKey=async function({privateKey:e,passphrase:t,config:r,...n}){Wc(r={...M,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=T.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:n}=e;await n.encrypt(o[t],r),n.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),T.wrapError("Error encrypting private key",e)}},e.encryptSessionKey=async function({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:n,passwords:i,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(Wc(u={...M,...u}),function(e){if(!T.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!T.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),qc(s),n=Zc(n),i=Zc(i),o=Zc(o),h=Zc(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const y=Object.keys(l);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(!(n&&0!==n.length||i&&0!==i.length))throw Error("No encryption keys or passwords provided.");try{return $c(await Nc.encryptSessionKey(e,t,r,n,i,a,o,c,h,u),s,u)}catch(e){throw T.wrapError("Error encrypting session key",e)}},e.enums=R,e.generateKey=async function({userIDs:e=[],passphrase:t,type:r,curve:n,rsaBits:i=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...y}){Wc(l={...M,...l}),r||n?(r=r||"ecc",n=n||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",n="curve25519Legacy"),e=Zc(e);const f=Object.keys(y);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&i<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${i}`);const g={userIDs:e,passphrase:t,type:r,rsaBits:i,curve:n,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=bc(e)).subkeys=e.subkeys.map(((t,r)=>bc(e.subkeys[r],e)));let r=[yc(e,t)];r=r.concat(e.subkeys.map((e=>lc(e,t))));const n=await Promise.all(r),i=await Mc(n[0],n.slice(1),e,t),s=await i.getRevocationCertificate(e.date,t);return i.revocationSignatures=[],{key:i,revocationCertificate:s}}(g,l);return e.getKeys().forEach((({keyPacket:e})=>Bc(e,l))),{privateKey:$c(e,u,l),publicKey:"symmetric"!==r?$c(e.toPublic(),u,l):null,revocationCertificate:t}}catch(e){throw T.wrapError("Error generating keypair",e)}},e.generateSessionKey=async function({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:n,...i}){if(Wc(n={...M,...n}),e=Zc(e),r=Zc(r),i.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Nc.generateSessionKey(e,t,r,n)}catch(e){throw T.wrapError("Error generating session key",e)}},e.readCleartextMessage=async function({cleartextMessage:e,config:t,...r}){if(t={...M,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!T.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const n=Object.keys(r);if(n.length>0)throw Error("Unknown option: "+n.join(", "));const i=await $(e);if(i.type!==R.armor.signed)throw Error("No cleartext signed message.");const s=await Fo.fromBinary(i.data,zc,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let n=0;n<t.length;n++)if(t[n].constructor.tag===R.packet.signature&&!e.some(r(t[n])))return!1;return!0},n=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return R.write(R.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));n.push(...e)}})),n.length&&!r(n))throw Error("Hash algorithm mismatch in armor header and signature")}(i.headers,s);const a=new uc(s);return new _c(i.text,a)},e.readKey=async function({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...M,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!T.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!T.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await $(e);if(t!==R.armor.publicKey&&t!==R.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await Fo.fromBinary(s,Qc,r),o=a.indexOfTag(R.packet.publicKey,R.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Rc(a.slice(o[0],o[1]))},e.readKeys=async function({armoredKeys:e,binaryKeys:t,config:r,...n}){r={...M,...r};let i=e||t;if(!i)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!T.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!T.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await $(e);if(t!==R.armor.publicKey&&t!==R.armor.privateKey)throw Error("Armored text not of type key");i=r}const a=[],o=await Fo.fromBinary(i,Qc,r),c=o.indexOfTag(R.packet.publicKey,R.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Rc(o.slice(c[e],c[e+1]));a.push(t)}return a},e.readMessage=async function({armoredMessage:e,binaryMessage:t,config:r,...n}){r={...M,...r};let i=e||t;if(!i)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!T.isString(e)&&!T.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!T.isUint8Array(t)&&!T.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=T.isStream(i);if(e){const{type:e,data:t}=await $(i);if(e!==R.armor.message)throw Error("Armored text not of type message");i=t}const o=await Fo.fromBinary(i,Lc,r),c=new Nc(o);return c.fromStream=a,c},e.readPrivateKey=async function({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...M,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!T.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!T.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await $(e);if(t!==R.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await Fo.fromBinary(s,Qc,r),o=a.indexOfTag(R.packet.publicKey,R.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===R.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new xc(t)}throw Error("No secret key packet found")},e.readPrivateKeys=async function({armoredKeys:e,binaryKeys:t,config:r}){r={...M,...r};let n=e||t;if(!n)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!T.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!T.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await $(e);if(t!==R.armor.privateKey)throw Error("Armored text not of type private key");n=r}const i=[],s=await Fo.fromBinary(n,Qc,r),a=s.indexOfTag(R.packet.publicKey,R.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===R.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new xc(t);i.push(r)}if(0===i.length)throw Error("No secret key packet found");return i},e.readSignature=async function({armoredSignature:e,binarySignature:t,config:r,...n}){r={...M,...r};let i=e||t;if(!i)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!T.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!T.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await $(i);if(e!==R.armor.signature)throw Error("Armored text not of type signature");i=t}const a=await Fo.fromBinary(i,hc,r);return new uc(a)},e.reformatKey=async function({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:n=0,date:i,format:s="armored",config:a,...o}){Wc(a={...M,...a}),t=Zc(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:n,date:i};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const n=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,i={key:n,bind:r},s=await fc(e.bindingSignatures,n,R.signature.subkeyBinding,i,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&R.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&R.keyFlags.forwardedCommunication}}))));const i=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==i.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await Mc(n,i,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=T.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(h,a);return{privateKey:$c(e,s,a),publicKey:$c(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw T.wrapError("Error reformatting keypair",e)}},e.revokeKey=async function({key:e,revocationCertificate:t,reasonForRevocation:r,date:n=new Date,format:i="armored",config:s,...a}){Wc(s={...M,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,n,s):await e.revoke(r,n,s);return a.isPrivate()?{privateKey:$c(a,i,s),publicKey:$c(a.toPublic(),i,s)}:{privateKey:null,publicKey:$c(a,i,s)}}catch(e){throw T.wrapError("Error revoking key",e)}},e.sign=async function({message:e,signingKeys:t,format:r="armored",detached:n=!1,signingKeyIDs:i=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(Wc(c={...M,...c}),jc(e),qc(r),t=Zc(t),i=Zc(i),a=Zc(a),o=Zc(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(e instanceof _c&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof _c&&n)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let h;if(h=n?await e.signDetached(t,void 0,i,s,a,o,c):await e.sign(t,void 0,i,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),n&&(h=k(e.packets.write(),(async(e,t)=>{await Promise.all([w(h,t),C(e).catch((()=>{}))])}))),await Yc(h)}catch(e){throw T.wrapError("Error signing message",e)}},e.unarmor=$,e.verify=async function({message:e,verificationKeys:t,expectSigned:r=!1,format:n="utf8",signature:i=null,date:s=new Date,config:a,...o}){if(Wc(a={...M,...a}),jc(e),t=Zc(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof _c&&"binary"===n)throw Error("Can't return cleartext message data as binary");if(e instanceof _c&&i)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=i?await e.verifyDetached(i,t,s,a):await e.verify(t,s,a),o.data="binary"===n?e.getLiteralData():e.getText(),e.fromStream&&!i&&Jc(o,e),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=A([o.data,U((async()=>{await T.anyPromise(o.signatures.map((e=>e.verified)))}))])}return o.data=await Yc(o.data),o}catch(e){throw T.wrapError("Error verifying signed message",e)}},e}({});
 //# sourceMappingURL=openpgp.min.js.map