@protontech/openpgp 6.0.0-beta.2 → 6.0.0-beta.3.patch.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +12 -13
- package/dist/lightweight/argon2id.min.mjs +2 -2
- package/dist/lightweight/argon2id.min.mjs.map +1 -1
- package/dist/lightweight/argon2id.mjs +1 -1
- package/dist/lightweight/legacy_ciphers.min.mjs +2 -2
- package/dist/lightweight/legacy_ciphers.min.mjs.map +1 -1
- package/dist/lightweight/legacy_ciphers.mjs +1 -1
- package/dist/lightweight/noble_curves.min.mjs +11 -11
- package/dist/lightweight/noble_curves.min.mjs.map +1 -1
- package/dist/lightweight/noble_curves.mjs +416 -206
- package/dist/lightweight/noble_hashes.min.mjs +1 -1
- package/dist/lightweight/noble_hashes.min.mjs.map +1 -1
- package/dist/lightweight/noble_hashes.mjs +7 -2
- package/dist/lightweight/openpgp.min.mjs +4 -3
- package/dist/lightweight/openpgp.min.mjs.map +1 -1
- package/dist/lightweight/openpgp.mjs +4107 -4520
- package/dist/lightweight/sha3.min.mjs +3 -3
- package/dist/lightweight/sha3.min.mjs.map +1 -1
- package/dist/lightweight/sha3.mjs +17 -4
- package/dist/node/openpgp.cjs +3601 -3782
- package/dist/node/openpgp.min.cjs +14 -12
- package/dist/node/openpgp.min.cjs.map +1 -1
- package/dist/node/openpgp.min.mjs +14 -12
- package/dist/node/openpgp.min.mjs.map +1 -1
- package/dist/node/openpgp.mjs +3601 -3782
- package/dist/openpgp.js +3624 -3809
- package/dist/openpgp.min.js +14 -12
- package/dist/openpgp.min.js.map +1 -1
- package/dist/openpgp.min.mjs +14 -12
- package/dist/openpgp.min.mjs.map +1 -1
- package/dist/openpgp.mjs +3624 -3809
- package/openpgp.d.ts +1 -0
- package/package.json +19 -19
|
@@ -1,15 +1,17 @@
|
|
|
1
|
-
/*! OpenPGP.js v6.0.0-beta.
|
|
2
|
-
"use strict";const e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var t=require("module"),r=require("node:crypto"),i=require("crypto"),n="undefined"!=typeof document?document.currentScript:null;function s(e){var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var i=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,i.get?i:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var a=/*#__PURE__*/s(r),o=/*#__PURE__*/s(i);const c=Symbol("doneWritingPromise"),h=Symbol("doneWritingResolve"),u=Symbol("doneWritingReject"),l=Symbol("readingIndex");class ArrayStream extends Array{constructor(){super(),Object.setPrototypeOf(this,ArrayStream.prototype),this[c]=new Promise(((e,t)=>{this[h]=e,this[u]=t})),this[c].catch((()=>{}))}}function y(e){return e&&e.getReader&&Array.isArray(e)}function f(e){if(!y(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function g(t){if(y(t))return"array";if(e.ReadableStream&&e.ReadableStream.prototype.isPrototypeOf(t))return"web";if(t&&!(e.ReadableStream&&t instanceof e.ReadableStream)&&"function"==typeof t._read&&"object"==typeof t._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!t||!t.getReader)&&"web-like"}function p(e){return Uint8Array.prototype.isPrototypeOf(e)}function d(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!p(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((function(e){r.set(e,i),i+=e.length})),r}ArrayStream.prototype.getReader=function(){return void 0===this[l]&&(this[l]=0),{read:async()=>(await this[c],this[l]===this.length?{value:void 0,done:!0}:{value:this[this[l]++],done:!1})}},ArrayStream.prototype.readToEnd=async function(e){await this[c];const t=e(this.slice(this[l]));return this.length=0,t},ArrayStream.prototype.clone=function(){const e=new ArrayStream;return e[c]=this[c].then((()=>{e.push(...this)})),e},f.prototype.write=async function(e){this.stream.push(e)},f.prototype.close=async function(){this.stream[h]()},f.prototype.abort=async function(e){return this.stream[u](e),e},f.prototype.releaseLock=function(){},"object"==typeof e.process&&e.process.versions;const A=new WeakSet,w=Symbol("externalBuffer");function m(e){if(this.stream=e,e[w]&&(this[w]=e[w].slice()),y(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(g(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||A.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{A.add(e)}catch(e){}}}function b(e){return g(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function E(e){if(g(e))return e;const t=new ArrayStream;return(async()=>{const r=L(t);await r.write(e),await r.close()})(),t}function k(e){return e.some((e=>g(e)&&!y(e)))?function(e){e=e.map(b);const t=I((async function(e){await Promise.all(i.map((t=>R(t,e))))}));let r=Promise.resolve();const i=e.map(((i,n)=>C(i,((i,s)=>(r=r.then((()=>v(i,t.writable,{preventClose:n!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>y(e)))?function(e){const t=new ArrayStream;let r=Promise.resolve();return e.forEach(((i,n)=>(r=r.then((()=>v(i,t,{preventClose:n!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):d(e)}async function v(e,t,{preventClose:r=!1,preventAbort:i=!1,preventCancel:n=!1}={}){if(g(e)&&!y(e)){e=b(e);try{if(e[w]){const r=L(t);for(let t=0;t<e[w].length;t++)await r.ready,await r.write(e[w][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:i,preventCancel:n})}catch(e){}return}const s=T(e=E(e)),a=L(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){i||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function B(e,t){const r=new TransformStream(t);return v(e,r.writable),r.readable}function I(e){let t,r,i,n=!1,s=!1;return{readable:new ReadableStream({start(e){i=e},pull(){t?t():n=!0},async cancel(t){s=!0,e&&await e(t),r&&r(t)}},{highWaterMark:0}),writable:new WritableStream({write:async function(e){if(s)throw Error("Stream is cancelled");i.enqueue(e),n?n=!1:(await new Promise(((e,i)=>{t=e,r=i})),t=null,r=null)},close:i.close.bind(i),abort:i.error.bind(i)})}}function S(e,t=(()=>{}),r=(()=>{})){if(y(e)){const i=new ArrayStream;return(async()=>{const n=L(i);try{const i=await Q(e),s=t(i),a=r();let o;o=void 0!==s&&void 0!==a?k([s,a]):void 0!==s?s:a,await n.write(o),await n.close()}catch(e){await n.abort(e)}})(),i}if(g(e))return B(e,{async transform(e,r){try{const i=await t(e);void 0!==i&&r.enqueue(i)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const i=t(e),n=r();return void 0!==i&&void 0!==n?k([i,n]):void 0!==i?i:n}function C(e,t){if(g(e)&&!y(e)){let r;const i=new TransformStream({start(e){r=e}}),n=v(e,i.writable),s=I((async function(e){r.error(e),await n,await new Promise(setTimeout)}));return t(i.readable,s.writable),s.readable}e=E(e);const r=new ArrayStream;return t(e,r),r}function K(e,t){let r;const i=C(e,((e,n)=>{const s=T(e);s.remainder=()=>(s.releaseLock(),v(e,n),i),r=t(s)}));return r}function P(e){if(y(e))return e.clone();if(g(e)){const t=function(e){if(y(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(g(e)){const t=b(e).tee();return t[0][w]=t[1][w]=e[w],t}return[x(e),x(e)]}(e);return U(e,t[0]),t[1]}return x(e)}function D(e){return y(e)?P(e):g(e)?new ReadableStream({start(t){const r=C(e,(async(e,r)=>{const i=T(e),n=L(r);try{for(;;){await n.ready;const{done:e,value:r}=await i.read();if(e){try{t.close()}catch(e){}return void await n.close()}try{t.enqueue(r)}catch(e){}await n.write(r)}}catch(e){t.error(e),await n.abort(e)}}));U(e,r)}}):x(e)}function U(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,i])=>{"constructor"!==r&&(i.value?i.value=i.value.bind(t):i.get=i.get.bind(t),Object.defineProperty(e,r,i))}))}function x(e,t=0,r=1/0){if(y(e))throw Error("Not implemented");if(g(e)){if(t>=0&&r>=0){let i=0;return B(e,{transform(e,n){i<r?(i+e.length>=t&&n.enqueue(x(e,Math.max(t-i,0),r-i)),i+=e.length):n.terminate()}})}if(t<0&&(r<0||r===1/0)){let i=[];return S(e,(e=>{e.length>=-t?i=[e]:i.push(e)}),(()=>x(k(i),t,r)))}if(0===t&&r<0){let i;return S(e,(e=>{const n=i?k([i,e]):e;if(n.length>=-r)return i=x(n,r),x(n,t,r);i=n}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),M((async()=>x(await Q(e),t,r)))}return e[w]&&(e=k(e[w].concat([e]))),p(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function Q(e,t=k){return y(e)?e.readToEnd(t):g(e)?T(e).readToEnd(t):e}async function R(e,t){if(g(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function M(e){const t=new ArrayStream;return(async()=>{const r=L(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function T(e){return new m(e)}function L(e){return new f(e)}m.prototype.read=async function(){if(this[w]&&this[w].length){return{done:!1,value:this[w].shift()}}return this._read()},m.prototype.releaseLock=function(){this[w]&&(this.stream[w]=this[w]),this._releaseLock()},m.prototype.cancel=function(e){return this._cancel(e)},m.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:i}=await this.read();if(i+="",r)return t.length?k(t):void 0;const n=i.indexOf("\n")+1;n&&(e=k(t.concat(i.substr(0,n))),t=[]),n!==i.length&&t.push(i.substr(n))}return this.unshift(...t),e},m.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(x(t,1)),r},m.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:i,value:n}=await this.read();if(i)return t.length?k(t):void 0;if(t.push(n),r+=n.length,r>=e){const r=k(t);return this.unshift(x(r,e)),x(r,0,e)}}},m.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},m.prototype.unshift=function(...e){this[w]||(this[w]=[]),1===e.length&&p(e[0])&&this[w].length&&e[0].length&&this[w][0].byteOffset>=e[0].length?this[w][0]=new Uint8Array(this[w][0].buffer,this[w][0].byteOffset-e[0].length,this[w][0].byteLength+e[0].length):this[w].unshift(...e.filter((e=>e&&e.length)))},m.prototype.readToEnd=async function(e=k){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const _=Symbol("byValue");var F={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[_]||(e[_]=[],Object.entries(e).forEach((([t,r])=>{e[_][r]=t}))),void 0!==e[_][t])return e[_][t];throw Error("Invalid enum value.")}},N={preferredHashAlgorithm:F.hash.sha256,preferredSymmetricAlgorithm:F.symmetric.aes256,preferredCompressionAlgorithm:F.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:F.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,enableParsingV5Entities:!1,s2kType:F.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([F.symmetric.aes128,F.symmetric.aes192,F.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.2",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([F.hash.md5,F.hash.ripemd]),rejectMessageHashAlgorithms:new Set([F.hash.md5,F.hash.ripemd,F.hash.sha1]),rejectPublicKeyAlgorithms:new Set([F.publicKey.elgamal,F.publicKey.dsa]),rejectCurves:new Set([F.curve.secp256k1])};const H=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),O={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:t.createRequire("undefined"==typeof document?require("url").pathToFileURL(__filename).href:n&&n.src||new URL("openpgp.min.cjs",document.baseURI).href),isArray:function(e){return e instanceof Array},isUint8Array:p,isStream:g,getNobleCurve:async(e,t)=>{if(!N.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return ul}));switch(e){case F.publicKey.ecdh:case F.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case F.publicKey.x448:return r.get("x448");case F.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let i=0;i<t;i++)r[i]=e>>8*(t-i-1)&255;return r},readDate:function(e){const t=O.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return O.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return O.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){const r=new Uint8Array(t),i=t-e.length;return r.set(e,i),r},uint8ArrayToMPI:function(e){const t=O.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),i=new Uint8Array([(65280&t)>>8,255&t]);return O.concatUint8Array([i,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+O.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return S(e,(e=>{if(!O.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,i=(e=new Uint8Array(e)).length;for(let n=0;n<i;n+=r)t.push(String.fromCharCode.apply(String,e.subarray(n,n+r<i?n+r:i)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return S(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return S(e,r,(()=>r(new Uint8Array,!0)))},concat:k,concatUint8Array:d,equalsUint8Array:function(e,t){if(!O.isUint8Array(e)||!O.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return O.writeNumber(t,2)},printDebug:function(e){H&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){H&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let i=0;i<r;i++)t[i]=e[i]<<1^e[i+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const t=void 0!==e&&e.crypto&&e.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!t)throw Error("The WebCrypto API is not available");return t},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!O.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return S(e,(e=>{let r;t&&(e=O.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const i=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&i.push(r);if(!i.length)return e;const n=new Uint8Array(e.length+i.length);let s=0;for(let t=0;t<i.length;t++){const r=e.subarray(i[t-1]||0,i[t]);n.set(r,s),s+=r.length,n[s-1]=13,n[s]=10,s++}return n.set(e.subarray(i[i.length-1]||0),s),n}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return S(e,(e=>{let r;13===(e=t&&10!==e[0]?O.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let i=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const n=r-(10===e[r]?1:0);t&&e.copyWithin(i,t,n),i+=n-t}return e.subarray(0,i)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return Error(e);try{t.message=e+": "+t.message}catch(e){}return t},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let i;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){i=e}}))),r(i)}))},selectUint8Array:function(e,t,r){const i=Math.max(t.length,r.length),n=new Uint8Array(i);let s=0;for(let i=0;i<n.length;i++)n[i]=t[i]&256-e|r[i]&255+e,s+=e&i<t.length|1-e&i<r.length;return n.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===F.symmetric.aes128||e===F.symmetric.aes192||e===F.symmetric.aes256}},z=O.getNodeBuffer();let G,q;function j(e){let t=new Uint8Array;return S(e,(e=>{t=O.concatUint8Array([t,e]);const r=[],i=Math.floor(t.length/45),n=45*i,s=G(t.subarray(0,n));for(let e=0;e<i;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(n),r.join("")}),(()=>t.length?G(t)+"\n":""))}function V(e){let t="";return S(e,(e=>{t+=e;let r=0;const i=[" ","\t","\r","\n"];for(let e=0;e<i.length;e++){const n=i[e];for(let e=t.indexOf(n);-1!==e;e=t.indexOf(n,e+1))r++}let n=t.length;for(;n>0&&(n-r)%4!=0;n--)i.includes(t[n])&&r--;const s=q(t.substr(0,n));return t=t.substr(n),s}),(()=>q(t)))}function Y(e){return V(e.replace(/-/g,"+").replace(/_/g,"/"))}function Z(e,t){let r=j(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function J(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?F.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?F.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?F.armor.signed:/MESSAGE/.test(t[1])?F.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?F.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?F.armor.privateKey:/SIGNATURE/.test(t[1])?F.armor.signature:void 0}function W(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function $(e){const t=function(e){let t=13501623;return S(e,(e=>{const r=ee?Math.floor(e.length/4):0,i=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=i[e],t=X[0][t>>24&255]^X[1][t>>16&255]^X[2][t>>8&255]^X[3][255&t];for(let i=4*r;i<e.length;i++)t=t>>8^X[0][255&t^e[i]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return j(t)}z?(G=e=>z.from(e).toString("base64"),q=e=>{const t=z.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(G=e=>btoa(O.uint8ArrayToString(e)),q=e=>O.stringToUint8Array(atob(e)));const X=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);X[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)X[1][e]=X[0][e]>>8^X[0][255&X[0][e]];for(let e=0;e<=255;e++)X[2][e]=X[1][e]>>8^X[0][255&X[1][e]];for(let e=0;e<=255;e++)X[3][e]=X[2][e]>>8^X[0][255&X[2][e]];const ee=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function te(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||O.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||O.printDebugError(Error("Unknown header: "+e[t]))}function re(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function ie(e){return new Promise((async(t,r)=>{try{const i=/^-----[^-]+-----$/m,n=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=V(C(e,(async(e,y)=>{const f=T(e);try{for(;;){let e=await f.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=O.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==F.armor.signed||(i.test(e)?(u=u.join("\r\n"),c=!0,te(h),h=[],o=!1):u.push(e.replace(/^- /,"")));else if(i.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),n.test(e)){if(te(h),o=!0,c||s!==F.armor.signed){t({text:u,data:l,headers:a,type:s});break}}else h.push(e);else i.test(e)&&(s=J(e))}}catch(e){return void r(e)}const g=L(y);try{for(;;){await g.ready;const{done:e,value:t}=await f.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await f.readToEnd();e.length||(e=""),e=r+e,e=O.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(i);if(1===t.length)throw Error("Misformed armored text");const n=re(t[0].slice(0,-1));await g.write(n);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}})))}catch(e){r(e)}})).then((async e=>(y(e.data)&&(e.data=await Q(e.data)),e)))}function ne(e,t,r,i,n,s=!1,a=N){let o,c;e===F.armor.signed&&(o=t.text,c=t.hash,t=t.data);const h=s&&D(t),u=[];switch(e){case F.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+i+"-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+i+"-----\n");break;case F.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case F.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP SIGNATURE-----\n");break;case F.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP MESSAGE-----\n");break;case F.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case F.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case F.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push(W(n,a)),u.push(j(t)),h&&u.push("=",$(h)),u.push("-----END PGP SIGNATURE-----\n")}return O.concat(u)}async function se(e){switch(e){case F.symmetric.aes128:case F.symmetric.aes192:case F.symmetric.aes256:throw Error("Not a legacy cipher");case F.symmetric.cast5:case F.symmetric.blowfish:case F.symmetric.twofish:case F.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return Il})),r=t.get(e);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function ae(e){switch(e){case F.symmetric.aes128:case F.symmetric.aes192:case F.symmetric.aes256:case F.symmetric.twofish:return 16;case F.symmetric.blowfish:case F.symmetric.cast5:case F.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function oe(e){switch(e){case F.symmetric.aes128:case F.symmetric.blowfish:case F.symmetric.cast5:return 16;case F.symmetric.aes192:case F.symmetric.tripledes:return 24;case F.symmetric.aes256:case F.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function ce(e){return{keySize:oe(e),blockSize:ae(e)}}var he=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:ce,getLegacyCipher:se});function ue(e,t){let r=e[0],i=e[1],n=e[2],s=e[3];r=ye(r,i,n,s,t[0],7,-680876936),s=ye(s,r,i,n,t[1],12,-389564586),n=ye(n,s,r,i,t[2],17,606105819),i=ye(i,n,s,r,t[3],22,-1044525330),r=ye(r,i,n,s,t[4],7,-176418897),s=ye(s,r,i,n,t[5],12,1200080426),n=ye(n,s,r,i,t[6],17,-1473231341),i=ye(i,n,s,r,t[7],22,-45705983),r=ye(r,i,n,s,t[8],7,1770035416),s=ye(s,r,i,n,t[9],12,-1958414417),n=ye(n,s,r,i,t[10],17,-42063),i=ye(i,n,s,r,t[11],22,-1990404162),r=ye(r,i,n,s,t[12],7,1804603682),s=ye(s,r,i,n,t[13],12,-40341101),n=ye(n,s,r,i,t[14],17,-1502002290),i=ye(i,n,s,r,t[15],22,1236535329),r=fe(r,i,n,s,t[1],5,-165796510),s=fe(s,r,i,n,t[6],9,-1069501632),n=fe(n,s,r,i,t[11],14,643717713),i=fe(i,n,s,r,t[0],20,-373897302),r=fe(r,i,n,s,t[5],5,-701558691),s=fe(s,r,i,n,t[10],9,38016083),n=fe(n,s,r,i,t[15],14,-660478335),i=fe(i,n,s,r,t[4],20,-405537848),r=fe(r,i,n,s,t[9],5,568446438),s=fe(s,r,i,n,t[14],9,-1019803690),n=fe(n,s,r,i,t[3],14,-187363961),i=fe(i,n,s,r,t[8],20,1163531501),r=fe(r,i,n,s,t[13],5,-1444681467),s=fe(s,r,i,n,t[2],9,-51403784),n=fe(n,s,r,i,t[7],14,1735328473),i=fe(i,n,s,r,t[12],20,-1926607734),r=ge(r,i,n,s,t[5],4,-378558),s=ge(s,r,i,n,t[8],11,-2022574463),n=ge(n,s,r,i,t[11],16,1839030562),i=ge(i,n,s,r,t[14],23,-35309556),r=ge(r,i,n,s,t[1],4,-1530992060),s=ge(s,r,i,n,t[4],11,1272893353),n=ge(n,s,r,i,t[7],16,-155497632),i=ge(i,n,s,r,t[10],23,-1094730640),r=ge(r,i,n,s,t[13],4,681279174),s=ge(s,r,i,n,t[0],11,-358537222),n=ge(n,s,r,i,t[3],16,-722521979),i=ge(i,n,s,r,t[6],23,76029189),r=ge(r,i,n,s,t[9],4,-640364487),s=ge(s,r,i,n,t[12],11,-421815835),n=ge(n,s,r,i,t[15],16,530742520),i=ge(i,n,s,r,t[2],23,-995338651),r=pe(r,i,n,s,t[0],6,-198630844),s=pe(s,r,i,n,t[7],10,1126891415),n=pe(n,s,r,i,t[14],15,-1416354905),i=pe(i,n,s,r,t[5],21,-57434055),r=pe(r,i,n,s,t[12],6,1700485571),s=pe(s,r,i,n,t[3],10,-1894986606),n=pe(n,s,r,i,t[10],15,-1051523),i=pe(i,n,s,r,t[1],21,-2054922799),r=pe(r,i,n,s,t[8],6,1873313359),s=pe(s,r,i,n,t[15],10,-30611744),n=pe(n,s,r,i,t[6],15,-1560198380),i=pe(i,n,s,r,t[13],21,1309151649),r=pe(r,i,n,s,t[4],6,-145523070),s=pe(s,r,i,n,t[11],10,-1120210379),n=pe(n,s,r,i,t[2],15,718787259),i=pe(i,n,s,r,t[9],21,-343485551),e[0]=me(r,e[0]),e[1]=me(i,e[1]),e[2]=me(n,e[2]),e[3]=me(s,e[3])}function le(e,t,r,i,n,s){return t=me(me(t,e),me(i,s)),me(t<<n|t>>>32-n,r)}function ye(e,t,r,i,n,s,a){return le(t&r|~t&i,e,t,n,s,a)}function fe(e,t,r,i,n,s,a){return le(t&i|r&~i,e,t,n,s,a)}function ge(e,t,r,i,n,s,a){return le(t^r^i,e,t,n,s,a)}function pe(e,t,r,i,n,s,a){return le(r^(t|~i),e,t,n,s,a)}function de(e){const t=[];let r;for(r=0;r<64;r+=4)t[r>>2]=e.charCodeAt(r)+(e.charCodeAt(r+1)<<8)+(e.charCodeAt(r+2)<<16)+(e.charCodeAt(r+3)<<24);return t}const Ae="0123456789abcdef".split("");function we(e){let t="",r=0;for(;r<4;r++)t+=Ae[e>>8*r+4&15]+Ae[e>>8*r&15];return t}function me(e,t){return e+t&4294967295}const be=O.getWebCrypto(),Ee=O.getNodeCrypto(),ke=Ee&&Ee.getHashes();function ve(e){if(Ee&&ke.includes(e))return async function(t){const r=Ee.createHash(e);return S(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function Be(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return Gl})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(y(e)&&(e=await Q(e)),O.isStream(e)){const t=(await r()).create();return S(e,(e=>{t.update(e)}),(()=>t.digest()))}if(be&&t)return new Uint8Array(await be.digest(t,e));return(await r())(e)}}var Ie={md5:ve("md5")||async function(e){const t=function(e){const t=e.length,r=[1732584193,-271733879,-1732584194,271733878];let i;for(i=64;i<=e.length;i+=64)ue(r,de(e.substring(i-64,i)));e=e.substring(i-64);const n=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(i=0;i<e.length;i++)n[i>>2]|=e.charCodeAt(i)<<(i%4<<3);if(n[i>>2]|=128<<(i%4<<3),i>55)for(ue(r,n),i=0;i<16;i++)n[i]=0;return n[14]=8*t,ue(r,n),r}(O.uint8ArrayToString(e));return O.hexToUint8Array(function(e){for(let t=0;t<e.length;t++)e[t]=we(e[t]);return e.join("")}(t))},sha1:ve("sha1")||Be("sha1","SHA-1"),sha224:ve("sha224")||Be("sha224"),sha256:ve("sha256")||Be("sha256","SHA-256"),sha384:ve("sha384")||Be("sha384","SHA-384"),sha512:ve("sha512")||Be("sha512","SHA-512"),ripemd:ve("ripemd160")||Be("ripemd160"),sha3_256:ve("sha3-256")||Be("sha3_256"),sha3_512:ve("sha3-512")||Be("sha3_512"),digest:function(e,t){switch(e){case F.hash.md5:return this.md5(t);case F.hash.sha1:return this.sha1(t);case F.hash.ripemd:return this.ripemd(t);case F.hash.sha256:return this.sha256(t);case F.hash.sha384:return this.sha384(t);case F.hash.sha512:return this.sha512(t);case F.hash.sha224:return this.sha224(t);case F.hash.sha3_256:return this.sha3_256(t);case F.hash.sha3_512:return this.sha3_512(t);default:throw Error("Unsupported hash function")}},getHashByteLength:function(e){switch(e){case F.hash.md5:return 16;case F.hash.sha1:case F.hash.ripemd:return 20;case F.hash.sha256:return 32;case F.hash.sha384:return 48;case F.hash.sha512:return 64;case F.hash.sha224:return 28;case F.hash.sha3_256:return 32;case F.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(e){switch(e){case F.hash.md5:case F.hash.sha1:case F.hash.ripemd:case F.hash.sha224:case F.hash.sha256:return 64;case F.hash.sha384:case F.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}},Se=function(){var e,t,r=!1;function i(r,i){var n=e[(t[r]+t[i])%255];return 0!==r&&0!==i||(n=0),n}var n,s,a,o,c=!1;function h(){function h(r){var i,n,s;for(n=s=function(r){var i=e[255-t[r]];return 0===r&&(i=0),i}(r),i=0;i<4;i++)s^=n=255&(n<<1|n>>>7);return s^=99}r||function(){e=[],t=[];var i,n,s=1;for(i=0;i<255;i++)e[i]=s,n=128&s,s<<=1,s&=255,128===n&&(s^=27),s^=e[i],t[e[i]]=i;e[255]=e[0],t[0]=0,r=!0}(),n=[],s=[],a=[[],[],[],[]],o=[[],[],[],[]];for(var u=0;u<256;u++){var l=h(u);n[u]=l,s[l]=u,a[0][u]=i(2,l)<<24|l<<16|l<<8|i(3,l),o[0][l]=i(14,u)<<24|i(9,u)<<16|i(13,u)<<8|i(11,u);for(var y=1;y<4;y++)a[y][u]=a[y-1][u]>>>8|a[y-1][u]<<24,o[y][l]=o[y-1][l]>>>8|o[y-1][l]<<24}c=!0}var u=function(e,t){c||h();var r=new Uint32Array(t);r.set(n,512),r.set(s,768);for(var i=0;i<4;i++)r.set(a[i],4096+1024*i>>2),r.set(o[i],8192+1024*i>>2);var u=function(e,t,r){"use asm";var i=0,n=0,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0;var B=new e.Uint32Array(r),I=new e.Uint8Array(r);function S(e,t,r,o,c,h,u,l){e=e|0;t=t|0;r=r|0;o=o|0;c=c|0;h=h|0;u=u|0;l=l|0;var y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0;y=r|0x400,f=r|0x800,g=r|0xc00;c=c^B[(e|0)>>2],h=h^B[(e|4)>>2],u=u^B[(e|8)>>2],l=l^B[(e|12)>>2];for(m=16;(m|0)<=o<<4;m=m+16|0){p=B[(r|c>>22&1020)>>2]^B[(y|h>>14&1020)>>2]^B[(f|u>>6&1020)>>2]^B[(g|l<<2&1020)>>2]^B[(e|m|0)>>2],d=B[(r|h>>22&1020)>>2]^B[(y|u>>14&1020)>>2]^B[(f|l>>6&1020)>>2]^B[(g|c<<2&1020)>>2]^B[(e|m|4)>>2],A=B[(r|u>>22&1020)>>2]^B[(y|l>>14&1020)>>2]^B[(f|c>>6&1020)>>2]^B[(g|h<<2&1020)>>2]^B[(e|m|8)>>2],w=B[(r|l>>22&1020)>>2]^B[(y|c>>14&1020)>>2]^B[(f|h>>6&1020)>>2]^B[(g|u<<2&1020)>>2]^B[(e|m|12)>>2];c=p,h=d,u=A,l=w}i=B[(t|c>>22&1020)>>2]<<24^B[(t|h>>14&1020)>>2]<<16^B[(t|u>>6&1020)>>2]<<8^B[(t|l<<2&1020)>>2]^B[(e|m|0)>>2],n=B[(t|h>>22&1020)>>2]<<24^B[(t|u>>14&1020)>>2]<<16^B[(t|l>>6&1020)>>2]<<8^B[(t|c<<2&1020)>>2]^B[(e|m|4)>>2],s=B[(t|u>>22&1020)>>2]<<24^B[(t|l>>14&1020)>>2]<<16^B[(t|c>>6&1020)>>2]<<8^B[(t|h<<2&1020)>>2]^B[(e|m|8)>>2],a=B[(t|l>>22&1020)>>2]<<24^B[(t|c>>14&1020)>>2]<<16^B[(t|h>>6&1020)>>2]<<8^B[(t|u<<2&1020)>>2]^B[(e|m|12)>>2]}function C(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;S(0x0000,0x0800,0x1000,v,e,t,r,i)}function K(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var s=0;S(0x0400,0x0c00,0x2000,v,e,i,r,t);s=n,n=a,a=s}function P(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o^e,c^t,h^r,u^l);o=i,c=n,h=s,u=a}function D(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;var y=0;S(0x0400,0x0c00,0x2000,v,e,l,r,t);y=n,n=a,a=y;i=i^o,n=n^c,s=s^h,a=a^u;o=e,c=t,h=r,u=l}function U(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i=i^e,c=n=n^t,h=s=s^r,u=a=a^l}function x(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);i=i^e,n=n^t,s=s^r,a=a^l;o=e,c=t,h=r,u=l}function Q(e,t,r,l){e=e|0;t=t|0;r=r|0;l=l|0;S(0x0000,0x0800,0x1000,v,o,c,h,u);o=i,c=n,h=s,u=a;i=i^e,n=n^t,s=s^r,a=a^l}function R(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;S(0x0000,0x0800,0x1000,v,l,y,f,g);g=~w&g|w&g+1;f=~A&f|A&f+((g|0)==0);y=~d&y|d&y+((f|0)==0);l=~p&l|p&l+((y|0)==0);i=i^e;n=n^t;s=s^r;a=a^o}function M(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;var n=0,s=0,a=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0;e=e^o,t=t^c,r=r^h,i=i^u;n=m|0,s=b|0,a=E|0,l=k|0;for(;(d|0)<128;d=d+1|0){if(n>>>31){y=y^e,f=f^t,g=g^r,p=p^i}n=n<<1|s>>>31,s=s<<1|a>>>31,a=a<<1|l>>>31,l=l<<1;A=i&1;i=i>>>1|r<<31,r=r>>>1|t<<31,t=t>>>1|e<<31,e=e>>>1;if(A)e=e^0xe1000000}o=y,c=f,h=g,u=p}function T(e){e=e|0;v=e}function L(e,t,r,o){e=e|0;t=t|0;r=r|0;o=o|0;i=e,n=t,s=r,a=o}function _(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;o=e,c=t,h=r,u=i}function F(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;l=e,y=t,f=r,g=i}function N(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;p=e,d=t,A=r,w=i}function H(e,t,r,i){e=e|0;t=t|0;r=r|0;i=i|0;g=~w&g|w&i,f=~A&f|A&r,y=~d&y|d&t,l=~p&l|p&e}function O(e){e=e|0;if(e&15)return-1;I[e|0]=i>>>24,I[e|1]=i>>>16&255,I[e|2]=i>>>8&255,I[e|3]=i&255,I[e|4]=n>>>24,I[e|5]=n>>>16&255,I[e|6]=n>>>8&255,I[e|7]=n&255,I[e|8]=s>>>24,I[e|9]=s>>>16&255,I[e|10]=s>>>8&255,I[e|11]=s&255,I[e|12]=a>>>24,I[e|13]=a>>>16&255,I[e|14]=a>>>8&255,I[e|15]=a&255;return 16}function z(e){e=e|0;if(e&15)return-1;I[e|0]=o>>>24,I[e|1]=o>>>16&255,I[e|2]=o>>>8&255,I[e|3]=o&255,I[e|4]=c>>>24,I[e|5]=c>>>16&255,I[e|6]=c>>>8&255,I[e|7]=c&255,I[e|8]=h>>>24,I[e|9]=h>>>16&255,I[e|10]=h>>>8&255,I[e|11]=h&255,I[e|12]=u>>>24,I[e|13]=u>>>16&255,I[e|14]=u>>>8&255,I[e|15]=u&255;return 16}function G(){C(0,0,0,0);m=i,b=n,E=s,k=a}function q(e,t,r){e=e|0;t=t|0;r=r|0;var o=0;if(t&15)return-1;while((r|0)>=16){V[e&7](I[t|0]<<24|I[t|1]<<16|I[t|2]<<8|I[t|3],I[t|4]<<24|I[t|5]<<16|I[t|6]<<8|I[t|7],I[t|8]<<24|I[t|9]<<16|I[t|10]<<8|I[t|11],I[t|12]<<24|I[t|13]<<16|I[t|14]<<8|I[t|15]);I[t|0]=i>>>24,I[t|1]=i>>>16&255,I[t|2]=i>>>8&255,I[t|3]=i&255,I[t|4]=n>>>24,I[t|5]=n>>>16&255,I[t|6]=n>>>8&255,I[t|7]=n&255,I[t|8]=s>>>24,I[t|9]=s>>>16&255,I[t|10]=s>>>8&255,I[t|11]=s&255,I[t|12]=a>>>24,I[t|13]=a>>>16&255,I[t|14]=a>>>8&255,I[t|15]=a&255;o=o+16|0,t=t+16|0,r=r-16|0}return o|0}function j(e,t,r){e=e|0;t=t|0;r=r|0;var i=0;if(t&15)return-1;while((r|0)>=16){Y[e&1](I[t|0]<<24|I[t|1]<<16|I[t|2]<<8|I[t|3],I[t|4]<<24|I[t|5]<<16|I[t|6]<<8|I[t|7],I[t|8]<<24|I[t|9]<<16|I[t|10]<<8|I[t|11],I[t|12]<<24|I[t|13]<<16|I[t|14]<<8|I[t|15]);i=i+16|0,t=t+16|0,r=r-16|0}return i|0}var V=[C,K,P,D,U,x,Q,R];var Y=[P,M];return{set_rounds:T,set_state:L,set_iv:_,set_nonce:F,set_mask:N,set_counter:H,get_state:O,get_iv:z,gcm_init:G,cipher:q,mac:j}}({Uint8Array,Uint32Array},e,t);return u.set_key=function(e,t,i,s,a,c,h,l,y){var f=r.subarray(0,60),g=r.subarray(256,316);f.set([t,i,s,a,c,h,l,y]);for(var p=e,d=1;p<4*e+28;p++){var A=f[p-1];(p%e==0||8===e&&p%e==4)&&(A=n[A>>>24]<<24^n[A>>>16&255]<<16^n[A>>>8&255]<<8^n[255&A]),p%e==0&&(A=A<<8^A>>>24^d<<24,d=d<<1^(128&d?27:0)),f[p]=f[p-e]^A}for(var w=0;w<p;w+=4)for(var m=0;m<4;m++){A=f[p-(4+w)+(4-m)%4];g[w+m]=w<4||w>=p-4?A:o[0][n[A>>>24]]^o[1][n[A>>>16&255]]^o[2][n[A>>>8&255]]^o[3][n[255&A]]}u.set_rounds(e+5)},u};return u.ENC={ECB:0,CBC:2,CFB:4,OFB:6,CTR:7},u.DEC={ECB:1,CBC:3,CFB:5,OFB:6,CTR:7},u.MAC={CBC:0,GCM:1},u.HEAP_DATA=16384,u}();function Ce(e){return e instanceof Uint8Array}function Ke(e,t,r,i,n){const s=e.length-t,a=s<n?s:n;return e.set(r.subarray(i,i+a),t),a}function Pe(...e){const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);let i=0;for(let t=0;t<e.length;t++)r.set(e[t],i),i+=e[t].length;return r}class De extends Error{constructor(...e){super(...e)}}class Ue extends Error{constructor(...e){super(...e)}}class xe extends Error{constructor(...e){super(...e)}}const Qe=[],Re=[];class Me{constructor(e,t,r=!0,i,n,s){this.pos=0,this.len=0,this.mode=i,this.pos=0,this.len=0,this.key=e,this.iv=t,this.padding=r,this.acquire_asm(n,s)}acquire_asm(e,t){return void 0!==this.heap&&void 0!==this.asm||(this.heap=e||Qe.pop()||function(e,t){const r=e?e.byteLength:65536;if(4095&r||r<=0)throw Error("heap size must be a positive integer and a multiple of 4096");return e||new Uint8Array(new ArrayBuffer(r))}().subarray(Se.HEAP_DATA),this.asm=t||Re.pop()||new Se(null,this.heap.buffer),this.reset(this.key,this.iv)),{heap:this.heap,asm:this.asm}}release_asm(){void 0!==this.heap&&void 0!==this.asm&&(Qe.push(this.heap),Re.push(this.asm)),this.heap=void 0,this.asm=void 0}reset(e,t){const{asm:r}=this.acquire_asm(),i=e.length;if(16!==i&&24!==i&&32!==i)throw new Ue("illegal key size");const n=new DataView(e.buffer,e.byteOffset,e.byteLength);if(r.set_key(i>>2,n.getUint32(0),n.getUint32(4),n.getUint32(8),n.getUint32(12),i>16?n.getUint32(16):0,i>16?n.getUint32(20):0,i>24?n.getUint32(24):0,i>24?n.getUint32(28):0),void 0!==t){if(16!==t.length)throw new Ue("illegal iv size");let e=new DataView(t.buffer,t.byteOffset,t.byteLength);r.set_iv(e.getUint32(0),e.getUint32(4),e.getUint32(8),e.getUint32(12))}else r.set_iv(0,0,0,0)}AES_Encrypt_process(e){if(!Ce(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=Se.ENC[this.mode],n=Se.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=0,l=new Uint8Array(a+c&-16);for(;c>0;)u=Ke(t,s+a,e,o,c),a+=u,o+=u,c-=u,u=r.cipher(i,n+s,a),u&&l.set(t.subarray(s,s+u),h),h+=u,u<a?(s+=u,a-=u):(s=0,a=0);return this.pos=s,this.len=a,l}AES_Encrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=Se.ENC[this.mode],i=Se.HEAP_DATA,n=this.pos,s=this.len,a=16-s%16,o=s;if(this.hasOwnProperty("padding")){if(this.padding){for(let t=0;t<a;++t)e[n+s+t]=a;s+=a,o=s}else if(s%16)throw new Ue("data length must be a multiple of the block size")}else s+=a;const c=new Uint8Array(o);return s&&t.cipher(r,i+n,s),o&&c.set(e.subarray(n,n+o)),this.pos=0,this.len=0,this.release_asm(),c}AES_Decrypt_process(e){if(!Ce(e))throw new TypeError("data isn't of expected type");let{heap:t,asm:r}=this.acquire_asm(),i=Se.DEC[this.mode],n=Se.HEAP_DATA,s=this.pos,a=this.len,o=0,c=e.length||0,h=0,u=a+c&-16,l=0,y=0;this.padding&&(l=a+c-u||16,u-=l);const f=new Uint8Array(u);for(;c>0;)y=Ke(t,s+a,e,o,c),a+=y,o+=y,c-=y,y=r.cipher(i,n+s,a-(c?0:l)),y&&f.set(t.subarray(s,s+y),h),h+=y,y<a?(s+=y,a-=y):(s=0,a=0);return this.pos=s,this.len=a,f}AES_Decrypt_finish(){let{heap:e,asm:t}=this.acquire_asm(),r=Se.DEC[this.mode],i=Se.HEAP_DATA,n=this.pos,s=this.len,a=s;if(s>0){if(s%16){if(this.hasOwnProperty("padding"))throw new Ue("data length must be a multiple of the block size");s+=16-s%16}if(t.cipher(r,i+n,s),this.hasOwnProperty("padding")&&this.padding){let t=e[n+a-1];if(t<1||t>16||t>a)throw new xe("bad padding");let r=0;for(let i=t;i>1;i--)r|=t^e[n+a-i];if(r)throw new xe("bad padding");a-=t}}const o=new Uint8Array(a);return a>0&&o.set(e.subarray(n,n+a)),this.pos=0,this.len=0,this.release_asm(),o}}class Te{static encrypt(e,t,r){return new Te(t,r).encrypt(e)}static decrypt(e,t,r){return new Te(t,r).decrypt(e)}constructor(e,t,r){this.aes=r||new Me(e,t,!0,"CFB"),delete this.aes.padding}encrypt(e){return Pe(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Pe(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const Le=O.getWebCrypto(),_e=O.getNodeCrypto(),Fe=_e?_e.getCiphers():[],Ne={idea:Fe.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Fe.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Fe.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Fe.includes("bf-cfb")?"bf-cfb":void 0,aes128:Fe.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Fe.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Fe.includes("aes-256-cfb")?"aes-256-cfb":void 0};class He{constructor(e,t,r){const{blockSize:i}=ce(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=ce(e);return Le.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Le.importKey("raw",this.key,r,!1,["encrypt"]);const i=await Le.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(i).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,i=O.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),n=O.concatUint8Array([this.prevBlock,i.subarray(0,i.length-this.blockSize)]),s=await this._runCBC(n);return Oe(s,i),this.prevBlock=s.subarray(-this.blockSize).slice(),r>0&&this.nextBlock.set(e.subarray(-r).slice()),this.i=r,s}this.i+=r.length;let i=new Uint8Array;if(this.i===this.nextBlock.length){const t=this.nextBlock;i=await this._runCBC(this.prevBlock),Oe(i,t),this.prevBlock=i.slice(),this.i=0;const n=e.subarray(r.length);this.nextBlock.set(n,this.i),this.i+=n.length}return i}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);Oe(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(O.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return Oe(t,e),this.clearSensitiveData(),t}}function Oe(e,t){const r=Math.min(e.length,t.length);for(let i=0;i<r;i++)e[i]=e[i]^t[i]}var ze=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i){const n=F.read(F.symmetric,e);if(_e&&Ne[n])return function(e,t,r,i){const n=F.read(F.symmetric,e),s=new _e.createDecipheriv(Ne[n],t,i);return S(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(O.isAES(e))return function(e,t,r,i){if(O.isStream(r)){const e=new Te(t,i);return S(r,(t=>e.aes.AES_Decrypt_process(t)),(()=>e.aes.AES_Decrypt_finish()))}return Te.decrypt(r,t,i)}(0,t,r,i);const s=new(await se(e))(t),a=s.blockSize;let o=i,c=new Uint8Array;const h=e=>{e&&(c=O.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,i=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[i++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,i)};return S(r,h,h)},encrypt:async function(e,t,r,i,n){const s=F.read(F.symmetric,e);if(O.getNodeCrypto()&&Ne[s])return function(e,t,r,i){const n=F.read(F.symmetric,e),s=new _e.createCipheriv(Ne[n],t,i);return S(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,i);if(O.isAES(e))return async function(e,t,r,i){if(Le&&await He.isSupported(e)){const n=new He(e,t,i);return O.isStream(r)?S(r,(e=>n.encryptChunk(e)),(()=>n.finish())):n.encrypt(r)}{const e=new Te(t,i);return S(r,(t=>e.aes.AES_Encrypt_process(t)),(()=>e.aes.AES_Encrypt_finish()))}}(e,t,r,i);const a=new(await se(e))(t),o=a.blockSize,c=i.slice();let h=new Uint8Array;const u=e=>{e&&(h=O.concatUint8Array([h,e]));const t=new Uint8Array(h.length);let r,i=0;for(;e?h.length>=o:h.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^e[r],t[i++]=c[r];h=h.subarray(o)}return t.subarray(0,i)};return S(r,u,u)}});class Ge{static encrypt(e,t,r){return new Ge(t,r).encrypt(e)}static decrypt(e,t,r){return new Ge(t,r).encrypt(e)}constructor(e,t,r){this.aes=r||new Me(e,void 0,!1,"CTR"),delete this.aes.padding,this.AES_CTR_set_options(t)}encrypt(e){return Pe(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Pe(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}AES_CTR_set_options(e,t,r){let{asm:i}=this.aes.acquire_asm();if(void 0!==r){if(r<8||r>48)throw new Ue("illegal counter size");let e=Math.pow(2,r)-1;i.set_mask(0,0,e/4294967296|0,0|e)}else r=48,i.set_mask(0,0,65535,4294967295);if(void 0===e)throw Error("nonce is required");{let t=e.length;if(!t||t>16)throw new Ue("illegal nonce size");let r=new DataView(new ArrayBuffer(16));new Uint8Array(r.buffer).set(e),i.set_nonce(r.getUint32(0),r.getUint32(4),r.getUint32(8),r.getUint32(12))}if(void 0!==t){if(t<0||t>=Math.pow(2,r))throw new Ue("illegal counter value");i.set_counter(0,0,t/4294967296|0,0|t)}}}class qe{static encrypt(e,t,r=!0,i){return new qe(t,i,r).encrypt(e)}static decrypt(e,t,r=!0,i){return new qe(t,i,r).decrypt(e)}constructor(e,t,r=!0,i){this.aes=i||new Me(e,t,r,"CBC")}encrypt(e){return Pe(this.aes.AES_Encrypt_process(e),this.aes.AES_Encrypt_finish())}decrypt(e){return Pe(this.aes.AES_Decrypt_process(e),this.aes.AES_Decrypt_finish())}}const je=O.getWebCrypto(),Ve=O.getNodeCrypto(),Ye=16;function Ze(e,t){const r=e.length-Ye;for(let i=0;i<Ye;i++)e[i+r]^=t[i];return e}const Je=new Uint8Array(Ye);async function We(e){const t=await async function(e){if(O.getNodeCrypto())return async function(t){const r=new Ve.createCipheriv("aes-"+8*e.length+"-cbc",e,Je).update(t);return new Uint8Array(r)};if(O.getWebCrypto())try{return e=await je.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await je.encrypt({name:"AES-CBC",iv:Je,length:8*Ye},e,t);return new Uint8Array(r).subarray(0,r.byteLength-Ye)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return qe.encrypt(t,e,!1,Je)}}(e),r=O.double(await t(Je)),i=O.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%Ye==0)return Ze(e,t);const i=new Uint8Array(e.length+(Ye-e.length%Ye));return i.set(e),i[e.length]=128,Ze(i,r)}(e,r,i))).subarray(-Ye)}}const $e=O.getWebCrypto(),Xe=O.getNodeCrypto(),et=O.getNodeBuffer(),tt=16,rt=tt,it=tt,nt=new Uint8Array(tt),st=new Uint8Array(tt);st[tt-1]=1;const at=new Uint8Array(tt);async function ot(e){const t=await We(e);return function(e,r){return t(O.concatUint8Array([e,r]))}}async function ct(e){if(O.getNodeCrypto())return async function(t,r){const i=new Xe.createCipheriv("aes-"+8*e.length+"-ctr",e,r),n=et.concat([i.update(t),i.final()]);return new Uint8Array(n)};if(O.getWebCrypto())try{const t=await $e.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const i=await $e.encrypt({name:"AES-CTR",counter:r,length:8*tt},t,e);return new Uint8Array(i)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;O.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return Ge.encrypt(t,e,r)}}async function ht(e,t){if(e!==F.symmetric.aes128&&e!==F.symmetric.aes192&&e!==F.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,i]=await Promise.all([ot(t),ct(t)]);return{encrypt:async function(e,t,n){const[s,a]=await Promise.all([r(nt,t),r(st,n)]),o=await i(e,s),c=await r(at,o);for(let e=0;e<it;e++)c[e]^=a[e]^s[e];return O.concatUint8Array([o,c])},decrypt:async function(e,t,n){if(e.length<it)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-it),a=e.subarray(-it),[o,c,h]=await Promise.all([r(nt,t),r(st,n),r(at,s)]),u=h;for(let e=0;e<it;e++)u[e]^=c[e]^o[e];if(!O.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await i(s,o)}}}at[tt-1]=2,ht.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},ht.blockLength=tt,ht.ivLength=rt,ht.tagLength=it;const ut=16,lt=16;function yt(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function ft(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function gt(e,t){return ft(e.slice(),t)}const pt=new Uint8Array(ut),dt=new Uint8Array([1]);async function At(e,t){const{keySize:r}=ce(e);if(!O.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let i=0;const n=e=>qe.encrypt(e,t,!1),s=e=>qe.decrypt(e,t,!1);let a;function o(e,t,r,s){const o=t.length/ut|0;!function(e,t){const r=O.nbits(Math.max(e.length,t.length)/ut|0)-1;for(let e=i+1;e<=r;e++)a[e]=O.double(a[e-1]);i=r}(t,s);const c=O.concatUint8Array([pt.subarray(0,15-r.length),dt,r]),h=63&c[15];c[15]&=192;const u=n(c),l=O.concatUint8Array([u,gt(u.subarray(0,8),u.subarray(1,9))]),y=O.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),f=new Uint8Array(ut),g=new Uint8Array(t.length+lt);let p,d=0;for(p=0;p<o;p++)ft(y,a[yt(p+1)]),g.set(ft(e(gt(y,t)),y),d),ft(f,e===n?t:g.subarray(d)),t=t.subarray(ut),d+=ut;if(t.length){ft(y,a.x);const r=n(y);g.set(gt(t,r),d);const i=new Uint8Array(ut);i.set(e===n?t:g.subarray(d,-16),0),i[t.length]=128,ft(f,i),d+=t.length}const A=ft(n(ft(ft(f,y),a.$)),function(e){if(!e.length)return pt;const t=e.length/ut|0,r=new Uint8Array(ut),i=new Uint8Array(ut);for(let s=0;s<t;s++)ft(r,a[yt(s+1)]),ft(i,n(gt(r,e))),e=e.subarray(ut);if(e.length){ft(r,a.x);const t=new Uint8Array(ut);t.set(e,0),t[e.length]=128,ft(t,r),ft(i,n(t))}return i}(s));return g.set(A,d),g}return function(){const e=n(pt),t=O.double(e);a=[],a[0]=O.double(t),a.x=e,a.$=t}(),{encrypt:async function(e,t,r){return o(n,e,t,r)},decrypt:async function(e,t,r){if(e.length<lt)throw Error("Invalid OCB ciphertext");const i=e.subarray(-16);e=e.subarray(0,-16);const n=o(s,e,t,r);if(O.equalsUint8Array(i,n.subarray(-16)))return n.subarray(0,-16);throw Error("Authentication tag mismatch")}}}At.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},At.blockLength=ut,At.ivLength=15,At.tagLength=lt;const wt=68719476704;class mt{static encrypt(e,t,r,i,n){return new mt(t,r,i,n).encrypt(e)}static decrypt(e,t,r,i,n){return new mt(t,r,i,n).decrypt(e)}constructor(e,t,r,i=16,n){this.tagSize=i,this.gamma0=0,this.counter=1,this.aes=n||new Me(e,void 0,!1,"CTR");let{asm:s,heap:a}=this.aes.acquire_asm();if(s.gcm_init(),this.tagSize<4||this.tagSize>16)throw new Ue("illegal tagSize value");const o=t.length||0,c=new Uint8Array(16);12!==o?(this._gcm_mac_process(t),a[0]=0,a[1]=0,a[2]=0,a[3]=0,a[4]=0,a[5]=0,a[6]=0,a[7]=0,a[8]=0,a[9]=0,a[10]=0,a[11]=o>>>29,a[12]=o>>>21&255,a[13]=o>>>13&255,a[14]=o>>>5&255,a[15]=o<<3&255,s.mac(Se.MAC.GCM,Se.HEAP_DATA,16),s.get_iv(Se.HEAP_DATA),s.set_iv(0,0,0,0),c.set(a.subarray(0,16))):(c.set(t),c[15]=1);const h=new DataView(c.buffer);if(this.gamma0=h.getUint32(12),s.set_nonce(h.getUint32(0),h.getUint32(4),h.getUint32(8),0),s.set_mask(0,0,0,4294967295),void 0!==r){if(r.length>wt)throw new Ue("illegal adata length");r.length?(this.adata=r,this._gcm_mac_process(r)):this.adata=void 0}else this.adata=void 0;if(this.counter<1||this.counter>4294967295)throw new RangeError("counter must be a positive 32-bit integer");s.set_counter(0,0,0,this.gamma0+this.counter|0)}encrypt(e){return this.AES_GCM_encrypt(e)}decrypt(e){return this.AES_GCM_decrypt(e)}AES_GCM_Encrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.aes.pos,o=this.aes.len,c=0,h=o+r&-16,u=0;if((s-1<<4)+o+r>wt)throw new RangeError("counter overflow");const l=new Uint8Array(h);for(;r>0;)u=Ke(n,a+o,e,t,r),o+=u,t+=u,r-=u,u=i.cipher(Se.ENC.CTR,Se.HEAP_DATA+a,o),u=i.mac(Se.MAC.GCM,Se.HEAP_DATA+a,u),u&&l.set(n.subarray(a,a+u),c),s+=u>>>4,c+=u,u<o?(a+=u,o-=u):(a=0,o=0);return this.counter=s,this.aes.pos=a,this.aes.len=o,l}AES_GCM_Encrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.counter,i=this.tagSize,n=this.adata,s=this.aes.pos,a=this.aes.len;const o=new Uint8Array(a+i);e.cipher(Se.ENC.CTR,Se.HEAP_DATA+s,a+15&-16),a&&o.set(t.subarray(s,s+a));let c=a;for(;15&c;c++)t[s+c]=0;e.mac(Se.MAC.GCM,Se.HEAP_DATA+s,c);const h=void 0!==n?n.length:0,u=(r-1<<4)+a;return t[0]=0,t[1]=0,t[2]=0,t[3]=h>>>29,t[4]=h>>>21,t[5]=h>>>13&255,t[6]=h>>>5&255,t[7]=h<<3&255,t[8]=t[9]=t[10]=0,t[11]=u>>>29,t[12]=u>>>21&255,t[13]=u>>>13&255,t[14]=u>>>5&255,t[15]=u<<3&255,e.mac(Se.MAC.GCM,Se.HEAP_DATA,16),e.get_iv(Se.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(Se.ENC.CTR,Se.HEAP_DATA,16),o.set(t.subarray(0,i),a),this.counter=1,this.aes.pos=0,this.aes.len=0,o}AES_GCM_Decrypt_process(e){let t=0,r=e.length||0,{asm:i,heap:n}=this.aes.acquire_asm(),s=this.counter,a=this.tagSize,o=this.aes.pos,c=this.aes.len,h=0,u=c+r>a?c+r-a&-16:0,l=c+r-u,y=0;if((s-1<<4)+c+r>wt)throw new RangeError("counter overflow");const f=new Uint8Array(u);for(;r>l;)y=Ke(n,o+c,e,t,r-l),c+=y,t+=y,r-=y,y=i.mac(Se.MAC.GCM,Se.HEAP_DATA+o,y),y=i.cipher(Se.DEC.CTR,Se.HEAP_DATA+o,y),y&&f.set(n.subarray(o,o+y),h),s+=y>>>4,h+=y,o=0,c=0;return r>0&&(c+=Ke(n,0,e,t,r)),this.counter=s,this.aes.pos=o,this.aes.len=c,f}AES_GCM_Decrypt_finish(){let{asm:e,heap:t}=this.aes.acquire_asm(),r=this.tagSize,i=this.adata,n=this.counter,s=this.aes.pos,a=this.aes.len,o=a-r;if(a<r)throw new De("authentication tag not found");const c=new Uint8Array(o),h=new Uint8Array(t.subarray(s+o,s+a));let u=o;for(;15&u;u++)t[s+u]=0;e.mac(Se.MAC.GCM,Se.HEAP_DATA+s,u),e.cipher(Se.DEC.CTR,Se.HEAP_DATA+s,u),o&&c.set(t.subarray(s,s+o));const l=void 0!==i?i.length:0,y=(n-1<<4)+a-r;t[0]=0,t[1]=0,t[2]=0,t[3]=l>>>29,t[4]=l>>>21,t[5]=l>>>13&255,t[6]=l>>>5&255,t[7]=l<<3&255,t[8]=t[9]=t[10]=0,t[11]=y>>>29,t[12]=y>>>21&255,t[13]=y>>>13&255,t[14]=y>>>5&255,t[15]=y<<3&255,e.mac(Se.MAC.GCM,Se.HEAP_DATA,16),e.get_iv(Se.HEAP_DATA),e.set_counter(0,0,0,this.gamma0),e.cipher(Se.ENC.CTR,Se.HEAP_DATA,16);let f=0;for(let e=0;e<r;++e)f|=h[e]^t[e];if(f)throw new xe("data integrity check failed");return this.counter=1,this.aes.pos=0,this.aes.len=0,c}AES_GCM_decrypt(e){const t=this.AES_GCM_Decrypt_process(e),r=this.AES_GCM_Decrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}AES_GCM_encrypt(e){const t=this.AES_GCM_Encrypt_process(e),r=this.AES_GCM_Encrypt_finish(),i=new Uint8Array(t.length+r.length);return t.length&&i.set(t),r.length&&i.set(r,t.length),i}_gcm_mac_process(e){let{asm:t,heap:r}=this.aes.acquire_asm(),i=0,n=e.length||0,s=0;for(;n>0;){for(s=Ke(r,0,e,i,n),i+=s,n-=s;15&s;)r[s++]=0;t.mac(Se.MAC.GCM,Se.HEAP_DATA,s)}}}const bt=O.getWebCrypto(),Et=O.getNodeCrypto(),kt=O.getNodeBuffer(),vt=16,Bt="AES-GCM";async function It(e,t){if(e!==F.symmetric.aes128&&e!==F.symmetric.aes192&&e!==F.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(O.getNodeCrypto())return{encrypt:async function(e,r,i=new Uint8Array){const n=new Et.createCipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i);const s=kt.concat([n.update(e),n.final(),n.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,i=new Uint8Array){const n=new Et.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);n.setAAD(i),n.setAuthTag(e.slice(e.length-vt,e.length));const s=kt.concat([n.update(e.slice(0,e.length-vt)),n.final()]);return new Uint8Array(s)}};if(O.getWebCrypto())try{const e=await bt.importKey("raw",t,{name:Bt},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(i,n,s=new Uint8Array){if(r&&!i.length)return mt.encrypt(i,t,n,s);const a=await bt.encrypt({name:Bt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(a)},decrypt:async function(i,n,s=new Uint8Array){if(r&&i.length===vt)return mt.decrypt(i,t,n,s);try{const t=await bt.decrypt({name:Bt,iv:n,additionalData:s,tagLength:128},e,i);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,i){return mt.encrypt(e,t,r,i)},decrypt:async function(e,r,i){return mt.decrypt(e,t,r,i)}}}It.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},It.blockLength=16,It.ivLength=12,It.tagLength=vt;var St={cfb:ze,gcm:It,experimentalGCM:It,eax:ht,ocb:At};const Ct=BigInt(0),Kt=BigInt(1);function Pt(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function Dt(e,t){const r=e%t;return r<Ct?r+t:r}function Ut(e,t,r){if(r===Ct)throw Error("Modulo cannot be zero");if(r===Kt)return BigInt(0);if(t<Ct)throw Error("Unsopported negative exponent");let i=t,n=e;n%=r;let s=BigInt(1);for(;i>Ct;){const e=i&Kt;i>>=Kt;s=e?s*n%r:s,n=n*n%r}return s}function xt(e){return e>=Ct?e:-e}function Qt(e,t){const{gcd:r,x:i}=function(e,t){let r=BigInt(0),i=BigInt(1),n=BigInt(1),s=BigInt(0),a=xt(e),o=xt(t);const c=e<Ct,h=t<Ct;for(;o!==Ct;){const e=a/o;let t=r;r=n-e*r,n=t,t=i,i=s-e*i,s=t,t=o,o=a%o,a=t}return{x:c?-n:n,y:h?-s:s,gcd:a}}(e,t);if(r!==Kt)throw Error("Inverse does not exist");return Dt(i+t,t)}function Rt(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function Mt(e,t){return(e>>BigInt(t)&Kt)===Ct?0:1}function Tt(e){const t=e<Ct?BigInt(-1):Ct;let r=1,i=e;for(;(i>>=Kt)!==t;)r++;return r}function Lt(e){const t=e<Ct?BigInt(-1):Ct,r=BigInt(8);let i=1,n=e;for(;(n>>=r)!==t;)i++;return i}function _t(e,t="be",r){let i=e.toString(16);i.length%2==1&&(i="0"+i);const n=i.length/2,s=new Uint8Array(r||n),a=r?r-n:0;let o=0;for(;o<n;)s[o+a]=parseInt(i.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const Ft=O.getNodeCrypto();function Nt(e){const t=new Uint8Array(e);if(Ft){const e=Ft.randomBytes(t.length);t.set(e)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(t)}return t}function Ht(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return Dt(Pt(Nt(Lt(r)+8)),r)+e}var Ot=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:Ht,getRandomBytes:Nt});const zt=BigInt(1);function Gt(e,t,r){const i=BigInt(30),n=zt<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=Ht(n,n<<zt),o=Rt(Dt(a,i));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,Tt(a)>e&&(a=Dt(a,n<<zt),a+=n,o=Rt(Dt(a,i)))}while(!qt(a,t,r));return a}function qt(e,t,r){return(!t||function(e,t){let r=e,i=t;for(;i!==Ct;){const e=i;i=r%i,r=e}return r}(e-zt,t)===zt)&&(!!function(e){const t=BigInt(0);return jt.every((r=>Dt(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return Ut(t,e-zt,e)===zt}(e)&&!!function(e,t,r){const i=Tt(e);t||(t=Math.max(1,i/48|0));const n=e-zt;let s=0;for(;!Mt(n,s);)s++;const a=e>>BigInt(s);for(;t>0;t--){let t,r=Ut(Ht(BigInt(2),n),a,e);if(r!==zt&&r!==n){for(t=1;t<s;t++){if(r=Dt(r*r,e),r===zt)return!1;if(r===n)break}if(t===s)return!1}}return!0}(e,r)))}const jt=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const Vt=[];function Yt(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const i=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const i=Nt(e-r);for(let e=0;e<i.length;e++)0!==i[e]&&(t[r++]=i[e])}return t}(t-r-3),n=new Uint8Array(t);return n[1]=2,n.set(i,2),n.set(e,t-r),n}function Zt(e,t){let r=2,i=1;for(let t=r;t<e.length;t++)i&=0!==e[t],r+=i;const n=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&n>=8&!i;if(t)return O.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Jt(e,t,r){let i;if(t.length!==Ie.getHashByteLength(e))throw Error("Invalid hash length");const n=new Uint8Array(Vt[e].length);for(i=0;i<Vt[e].length;i++)n[i]=Vt[e][i];const s=n.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(n,r-s),o.set(t,r-t.length),o}Vt[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Vt[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Vt[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Vt[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Vt[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Vt[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Vt[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var Wt=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Zt,emeEncode:Yt,emsaEncode:Jt});const $t=O.getWebCrypto(),Xt=O.getNodeCrypto(),er=BigInt(1);async function tr(e,t,r,i,n,s){const a=Pt(i),o=Pt(n),c=Pt(r);let h=Dt(c,o-er),u=Dt(c,a-er);return u=_t(u),h=_t(h),{kty:"RSA",n:Z(e),e:Z(t),d:Z(r),p:Z(n),q:Z(i),dp:Z(h),dq:Z(u),qi:Z(s),ext:!0}}function rr(e,t){return{kty:"RSA",n:Z(e),e:Z(t),ext:!0}}function ir(e,t){return{n:Y(e.n),e:_t(t),d:Y(e.d),p:Y(e.q),q:Y(e.p),u:Y(e.qi)}}var nr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a,o){if(O.getNodeCrypto()&&!o)try{return await async function(e,t,r,i,n,s,a){const o=await tr(t,r,i,n,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Xt.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Xt.privateDecrypt(c,e))}catch(e){throw Error("Decryption error")}}(e,t,r,i,n,s,a)}catch(e){O.printDebugError(e)}return async function(e,t,r,i,n,s,a,o){if(e=Pt(e),t=Pt(t),r=Pt(r),i=Pt(i),n=Pt(n),s=Pt(s),a=Pt(a),e>=t)throw Error("Data too large.");const c=Dt(i,s-er),h=Dt(i,n-er),u=Ht(BigInt(2),t),l=Ut(Qt(u,t),r,t);e=Dt(e*l,t);const y=Ut(e,h,n),f=Ut(e,c,s),g=Dt(a*(f-y),s);let p=g*n+y;return p=Dt(p*u,t),Zt(_t(p,"be",Lt(t)),o)}(e,t,r,i,n,s,a,o)},encrypt:async function(e,t,r){return O.getNodeCrypto()?async function(e,t,r){const i=rr(t,r),n={key:i,format:"jwk",type:"pkcs1",padding:Xt.constants.RSA_PKCS1_PADDING};return new Uint8Array(Xt.publicEncrypt(n,e))}(e,t,r):async function(e,t,r){if(t=Pt(t),e=Pt(Yt(e,Lt(t))),r=Pt(r),e>=t)throw Error("Message size cannot exceed modulus size");return _t(Ut(e,r,t),"be",Lt(t))}(e,t,r)},generate:async function(e,t){if(t=BigInt(t),O.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:_t(t),hash:{name:"SHA-1"}},i=await $t.generateKey(r,!0,["sign","verify"]);return ir(await $t.exportKey("jwk",i.privateKey),t)}if(O.getNodeCrypto()){const r={modulusLength:e,publicExponent:Rt(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},i=await new Promise(((e,t)=>{Xt.generateKeyPair("rsa",r,((r,i,n)=>{r?t(r):e(n)}))}));return ir(i,t)}let r,i,n;do{i=Gt(e-(e>>1),t,40),r=Gt(e>>1,t,40),n=r*i}while(Tt(n)!==e);const s=(r-er)*(i-er);return i<r&&([r,i]=[i,r]),{n:_t(n),e:_t(t),d:_t(Qt(t,s)),p:_t(r),q:_t(i),u:_t(Qt(r,i))}},sign:async function(e,t,r,i,n,s,a,o,c){if(t&&!O.isStream(t))if(O.getWebCrypto())try{return await async function(e,t,r,i,n,s,a,o){const c=await tr(r,i,n,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},u=await $t.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await $t.sign("RSASSA-PKCS1-v1_5",u,t))}(F.read(F.webHash,e),t,r,i,n,s,a,o)}catch(e){O.printDebugError(e)}else if(O.getNodeCrypto())return async function(e,t,r,i,n,s,a,o){const c=Xt.createSign(F.read(F.hash,e));c.write(t),c.end();const h=await tr(r,i,n,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(e,t,r,i,n,s,a,o);return async function(e,t,r,i){t=Pt(t);const n=Pt(Jt(e,i,Lt(t)));if(r=Pt(r),n>=t)throw Error("Message size cannot exceed modulus size");return _t(Ut(n,r,t),"be",Lt(t))}(e,r,n,c)},validateParams:async function(e,t,r,i,n,s){if(e=Pt(e),(i=Pt(i))*(n=Pt(n))!==e)return!1;const a=BigInt(2);if(Dt(i*(s=Pt(s)),n)!==BigInt(1))return!1;t=Pt(t),r=Pt(r);const o=Ht(a,a<<BigInt(Math.floor(Tt(e)/3))),c=o*r*t;return!(Dt(c,i-er)!==o||Dt(c,n-er)!==o)},verify:async function(e,t,r,i,n,s){if(t&&!O.isStream(t))if(O.getWebCrypto())try{return await async function(e,t,r,i,n){const s=rr(i,n),a=await $t.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return $t.verify("RSASSA-PKCS1-v1_5",a,r,t)}(F.read(F.webHash,e),t,r,i,n)}catch(e){O.printDebugError(e)}else if(O.getNodeCrypto())return async function(e,t,r,i,n){const s=rr(i,n),a={key:s,format:"jwk",type:"pkcs1"},o=Xt.createVerify(F.read(F.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch(e){return!1}}(e,t,r,i,n);return async function(e,t,r,i,n){if(r=Pt(r),t=Pt(t),i=Pt(i),t>=r)throw Error("Signature size cannot exceed modulus size");const s=_t(Ut(t,i,r),"be",Lt(r)),a=Jt(e,n,Lt(r));return O.equalsUint8Array(s,a)}(e,r,i,n,s)}});const sr=BigInt(1);var ar=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){return e=Pt(e),t=Pt(t),r=Pt(r),Zt(_t(Dt(Qt(Ut(e,i=Pt(i),r),r)*t,r),"be",Lt(r)),n)},encrypt:async function(e,t,r,i){t=Pt(t),r=Pt(r),i=Pt(i);const n=Pt(Yt(e,Lt(t))),s=Ht(sr,t-sr);return{c1:_t(Ut(r,s,t)),c2:_t(Dt(Ut(i,s,t)*n,t))}},validateParams:async function(e,t,r,i){if(e=Pt(e),t=Pt(t),r=Pt(r),t<=sr||t>=e)return!1;const n=BigInt(Tt(e));if(n<BigInt(1023))return!1;if(Ut(t,e-sr,e)!==sr)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=Dt(s*t,e),s===sr)return!1;a++}i=Pt(i);const h=Ht(o<<n-sr,o<<n);return r===Ut(t,(e-sr)*h+i,e)}});const or=a&&"object"==typeof a&&"webcrypto"in a?a.webcrypto:void 0,cr={};var hr=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},ur=function(){throw Error("no PRNG")},lr=new Uint8Array(32);lr[0]=9;var yr=hr(),fr=hr([1]),gr=hr([56129,1]),pr=hr([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),dr=hr([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),Ar=hr([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),wr=hr([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),mr=hr([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function br(e,t,r,i){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=i>>24&255,e[t+5]=i>>16&255,e[t+6]=i>>8&255,e[t+7]=255&i}function Er(e,t,r,i){return function(e,t,r,i,n){var s,a=0;for(s=0;s<n;s++)a|=e[t+s]^r[i+s];return(1&a-1>>>8)-1}(e,t,r,i,32)}function kr(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function vr(e){var t,r,i=1;for(t=0;t<16;t++)r=e[t]+i+65535,i=Math.floor(r/65536),e[t]=r-65536*i;e[0]+=i-1+37*(i-1)}function Br(e,t,r){for(var i,n=~(r-1),s=0;s<16;s++)i=n&(e[s]^t[s]),e[s]^=i,t[s]^=i}function Ir(e,t){var r,i,n,s=hr(),a=hr();for(r=0;r<16;r++)a[r]=t[r];for(vr(a),vr(a),vr(a),i=0;i<2;i++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),n=s[15]>>16&1,s[14]&=65535,Br(a,s,1-n)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function Sr(e,t){var r=new Uint8Array(32),i=new Uint8Array(32);return Ir(r,e),Ir(i,t),Er(r,0,i,0)}function Cr(e){var t=new Uint8Array(32);return Ir(t,e),1&t[0]}function Kr(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function Pr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]+r[i]}function Dr(e,t,r){for(var i=0;i<16;i++)e[i]=t[i]-r[i]}function Ur(e,t,r){var i,n,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0,B=0,I=0,S=0,C=0,K=0,P=0,D=0,U=0,x=0,Q=0,R=0,M=0,T=r[0],L=r[1],_=r[2],F=r[3],N=r[4],H=r[5],O=r[6],z=r[7],G=r[8],q=r[9],j=r[10],V=r[11],Y=r[12],Z=r[13],J=r[14],W=r[15];s+=(i=t[0])*T,a+=i*L,o+=i*_,c+=i*F,h+=i*N,u+=i*H,l+=i*O,y+=i*z,f+=i*G,g+=i*q,p+=i*j,d+=i*V,A+=i*Y,w+=i*Z,m+=i*J,b+=i*W,a+=(i=t[1])*T,o+=i*L,c+=i*_,h+=i*F,u+=i*N,l+=i*H,y+=i*O,f+=i*z,g+=i*G,p+=i*q,d+=i*j,A+=i*V,w+=i*Y,m+=i*Z,b+=i*J,E+=i*W,o+=(i=t[2])*T,c+=i*L,h+=i*_,u+=i*F,l+=i*N,y+=i*H,f+=i*O,g+=i*z,p+=i*G,d+=i*q,A+=i*j,w+=i*V,m+=i*Y,b+=i*Z,E+=i*J,k+=i*W,c+=(i=t[3])*T,h+=i*L,u+=i*_,l+=i*F,y+=i*N,f+=i*H,g+=i*O,p+=i*z,d+=i*G,A+=i*q,w+=i*j,m+=i*V,b+=i*Y,E+=i*Z,k+=i*J,v+=i*W,h+=(i=t[4])*T,u+=i*L,l+=i*_,y+=i*F,f+=i*N,g+=i*H,p+=i*O,d+=i*z,A+=i*G,w+=i*q,m+=i*j,b+=i*V,E+=i*Y,k+=i*Z,v+=i*J,B+=i*W,u+=(i=t[5])*T,l+=i*L,y+=i*_,f+=i*F,g+=i*N,p+=i*H,d+=i*O,A+=i*z,w+=i*G,m+=i*q,b+=i*j,E+=i*V,k+=i*Y,v+=i*Z,B+=i*J,I+=i*W,l+=(i=t[6])*T,y+=i*L,f+=i*_,g+=i*F,p+=i*N,d+=i*H,A+=i*O,w+=i*z,m+=i*G,b+=i*q,E+=i*j,k+=i*V,v+=i*Y,B+=i*Z,I+=i*J,S+=i*W,y+=(i=t[7])*T,f+=i*L,g+=i*_,p+=i*F,d+=i*N,A+=i*H,w+=i*O,m+=i*z,b+=i*G,E+=i*q,k+=i*j,v+=i*V,B+=i*Y,I+=i*Z,S+=i*J,C+=i*W,f+=(i=t[8])*T,g+=i*L,p+=i*_,d+=i*F,A+=i*N,w+=i*H,m+=i*O,b+=i*z,E+=i*G,k+=i*q,v+=i*j,B+=i*V,I+=i*Y,S+=i*Z,C+=i*J,K+=i*W,g+=(i=t[9])*T,p+=i*L,d+=i*_,A+=i*F,w+=i*N,m+=i*H,b+=i*O,E+=i*z,k+=i*G,v+=i*q,B+=i*j,I+=i*V,S+=i*Y,C+=i*Z,K+=i*J,P+=i*W,p+=(i=t[10])*T,d+=i*L,A+=i*_,w+=i*F,m+=i*N,b+=i*H,E+=i*O,k+=i*z,v+=i*G,B+=i*q,I+=i*j,S+=i*V,C+=i*Y,K+=i*Z,P+=i*J,D+=i*W,d+=(i=t[11])*T,A+=i*L,w+=i*_,m+=i*F,b+=i*N,E+=i*H,k+=i*O,v+=i*z,B+=i*G,I+=i*q,S+=i*j,C+=i*V,K+=i*Y,P+=i*Z,D+=i*J,U+=i*W,A+=(i=t[12])*T,w+=i*L,m+=i*_,b+=i*F,E+=i*N,k+=i*H,v+=i*O,B+=i*z,I+=i*G,S+=i*q,C+=i*j,K+=i*V,P+=i*Y,D+=i*Z,U+=i*J,x+=i*W,w+=(i=t[13])*T,m+=i*L,b+=i*_,E+=i*F,k+=i*N,v+=i*H,B+=i*O,I+=i*z,S+=i*G,C+=i*q,K+=i*j,P+=i*V,D+=i*Y,U+=i*Z,x+=i*J,Q+=i*W,m+=(i=t[14])*T,b+=i*L,E+=i*_,k+=i*F,v+=i*N,B+=i*H,I+=i*O,S+=i*z,C+=i*G,K+=i*q,P+=i*j,D+=i*V,U+=i*Y,x+=i*Z,Q+=i*J,R+=i*W,b+=(i=t[15])*T,a+=38*(k+=i*_),o+=38*(v+=i*F),c+=38*(B+=i*N),h+=38*(I+=i*H),u+=38*(S+=i*O),l+=38*(C+=i*z),y+=38*(K+=i*G),f+=38*(P+=i*q),g+=38*(D+=i*j),p+=38*(U+=i*V),d+=38*(x+=i*Y),A+=38*(Q+=i*Z),w+=38*(R+=i*J),m+=38*(M+=i*W),s=(i=(s+=38*(E+=i*L))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s=(i=(s+=n-1+37*(n-1))+(n=1)+65535)-65536*(n=Math.floor(i/65536)),a=(i=a+n+65535)-65536*(n=Math.floor(i/65536)),o=(i=o+n+65535)-65536*(n=Math.floor(i/65536)),c=(i=c+n+65535)-65536*(n=Math.floor(i/65536)),h=(i=h+n+65535)-65536*(n=Math.floor(i/65536)),u=(i=u+n+65535)-65536*(n=Math.floor(i/65536)),l=(i=l+n+65535)-65536*(n=Math.floor(i/65536)),y=(i=y+n+65535)-65536*(n=Math.floor(i/65536)),f=(i=f+n+65535)-65536*(n=Math.floor(i/65536)),g=(i=g+n+65535)-65536*(n=Math.floor(i/65536)),p=(i=p+n+65535)-65536*(n=Math.floor(i/65536)),d=(i=d+n+65535)-65536*(n=Math.floor(i/65536)),A=(i=A+n+65535)-65536*(n=Math.floor(i/65536)),w=(i=w+n+65535)-65536*(n=Math.floor(i/65536)),m=(i=m+n+65535)-65536*(n=Math.floor(i/65536)),b=(i=b+n+65535)-65536*(n=Math.floor(i/65536)),s+=n-1+37*(n-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=h,e[5]=u,e[6]=l,e[7]=y,e[8]=f,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function xr(e,t){Ur(e,t,t)}function Qr(e,t){var r,i=hr();for(r=0;r<16;r++)i[r]=t[r];for(r=253;r>=0;r--)xr(i,i),2!==r&&4!==r&&Ur(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}function Rr(e,t,r){var i,n,s=new Uint8Array(32),a=new Float64Array(80),o=hr(),c=hr(),h=hr(),u=hr(),l=hr(),y=hr();for(n=0;n<31;n++)s[n]=t[n];for(s[31]=127&t[31]|64,s[0]&=248,Kr(a,r),n=0;n<16;n++)c[n]=a[n],u[n]=o[n]=h[n]=0;for(o[0]=u[0]=1,n=254;n>=0;--n)Br(o,c,i=s[n>>>3]>>>(7&n)&1),Br(h,u,i),Pr(l,o,h),Dr(o,o,h),Pr(h,c,u),Dr(c,c,u),xr(u,l),xr(y,o),Ur(o,h,o),Ur(h,c,l),Pr(l,o,h),Dr(o,o,h),xr(c,o),Dr(h,u,y),Ur(o,h,gr),Pr(o,o,u),Ur(h,h,o),Ur(o,u,y),Ur(u,c,a),xr(c,l),Br(o,c,i),Br(h,u,i);for(n=0;n<16;n++)a[n+16]=o[n],a[n+32]=h[n],a[n+48]=c[n],a[n+64]=u[n];var f=a.subarray(32),g=a.subarray(16);return Qr(f,f),Ur(g,g,f),Ir(e,g),0}function Mr(e,t){return Rr(e,t,lr)}var Tr=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function Lr(e,t,r,i){for(var n,s,a,o,c,h,u,l,y,f,g,p,d,A,w,m,b,E,k,v,B,I,S,C,K,P,D=new Int32Array(16),U=new Int32Array(16),x=e[0],Q=e[1],R=e[2],M=e[3],T=e[4],L=e[5],_=e[6],F=e[7],N=t[0],H=t[1],O=t[2],z=t[3],G=t[4],q=t[5],j=t[6],V=t[7],Y=0;i>=128;){for(k=0;k<16;k++)v=8*k+Y,D[k]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],U[k]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(k=0;k<80;k++)if(n=x,s=Q,a=R,o=M,c=T,h=L,u=_,F,y=N,f=H,g=O,p=z,d=G,A=q,w=j,V,S=65535&(I=V),C=I>>>16,K=65535&(B=F),P=B>>>16,S+=65535&(I=(G>>>14|T<<18)^(G>>>18|T<<14)^(T>>>9|G<<23)),C+=I>>>16,K+=65535&(B=(T>>>14|G<<18)^(T>>>18|G<<14)^(G>>>9|T<<23)),P+=B>>>16,S+=65535&(I=G&q^~G&j),C+=I>>>16,K+=65535&(B=T&L^~T&_),P+=B>>>16,B=Tr[2*k],S+=65535&(I=Tr[2*k+1]),C+=I>>>16,K+=65535&B,P+=B>>>16,B=D[k%16],C+=(I=U[k%16])>>>16,K+=65535&B,P+=B>>>16,K+=(C+=(S+=65535&I)>>>16)>>>16,S=65535&(I=E=65535&S|C<<16),C=I>>>16,K=65535&(B=b=65535&K|(P+=K>>>16)<<16),P=B>>>16,S+=65535&(I=(N>>>28|x<<4)^(x>>>2|N<<30)^(x>>>7|N<<25)),C+=I>>>16,K+=65535&(B=(x>>>28|N<<4)^(N>>>2|x<<30)^(N>>>7|x<<25)),P+=B>>>16,C+=(I=N&H^N&O^H&O)>>>16,K+=65535&(B=x&Q^x&R^Q&R),P+=B>>>16,l=65535&(K+=(C+=(S+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,m=65535&S|C<<16,S=65535&(I=p),C=I>>>16,K=65535&(B=o),P=B>>>16,C+=(I=E)>>>16,K+=65535&(B=b),P+=B>>>16,Q=n,R=s,M=a,T=o=65535&(K+=(C+=(S+=65535&I)>>>16)>>>16)|(P+=K>>>16)<<16,L=c,_=h,F=u,x=l,H=y,O=f,z=g,G=p=65535&S|C<<16,q=d,j=A,V=w,N=m,k%16==15)for(v=0;v<16;v++)B=D[v],S=65535&(I=U[v]),C=I>>>16,K=65535&B,P=B>>>16,B=D[(v+9)%16],S+=65535&(I=U[(v+9)%16]),C+=I>>>16,K+=65535&B,P+=B>>>16,b=D[(v+1)%16],S+=65535&(I=((E=U[(v+1)%16])>>>1|b<<31)^(E>>>8|b<<24)^(E>>>7|b<<25)),C+=I>>>16,K+=65535&(B=(b>>>1|E<<31)^(b>>>8|E<<24)^b>>>7),P+=B>>>16,b=D[(v+14)%16],C+=(I=((E=U[(v+14)%16])>>>19|b<<13)^(b>>>29|E<<3)^(E>>>6|b<<26))>>>16,K+=65535&(B=(b>>>19|E<<13)^(E>>>29|b<<3)^b>>>6),P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,D[v]=65535&K|P<<16,U[v]=65535&S|C<<16;S=65535&(I=N),C=I>>>16,K=65535&(B=x),P=B>>>16,B=e[0],C+=(I=t[0])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[0]=x=65535&K|P<<16,t[0]=N=65535&S|C<<16,S=65535&(I=H),C=I>>>16,K=65535&(B=Q),P=B>>>16,B=e[1],C+=(I=t[1])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[1]=Q=65535&K|P<<16,t[1]=H=65535&S|C<<16,S=65535&(I=O),C=I>>>16,K=65535&(B=R),P=B>>>16,B=e[2],C+=(I=t[2])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[2]=R=65535&K|P<<16,t[2]=O=65535&S|C<<16,S=65535&(I=z),C=I>>>16,K=65535&(B=M),P=B>>>16,B=e[3],C+=(I=t[3])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[3]=M=65535&K|P<<16,t[3]=z=65535&S|C<<16,S=65535&(I=G),C=I>>>16,K=65535&(B=T),P=B>>>16,B=e[4],C+=(I=t[4])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[4]=T=65535&K|P<<16,t[4]=G=65535&S|C<<16,S=65535&(I=q),C=I>>>16,K=65535&(B=L),P=B>>>16,B=e[5],C+=(I=t[5])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[5]=L=65535&K|P<<16,t[5]=q=65535&S|C<<16,S=65535&(I=j),C=I>>>16,K=65535&(B=_),P=B>>>16,B=e[6],C+=(I=t[6])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[6]=_=65535&K|P<<16,t[6]=j=65535&S|C<<16,S=65535&(I=V),C=I>>>16,K=65535&(B=F),P=B>>>16,B=e[7],C+=(I=t[7])>>>16,K+=65535&B,P+=B>>>16,P+=(K+=(C+=(S+=65535&I)>>>16)>>>16)>>>16,e[7]=F=65535&K|P<<16,t[7]=V=65535&S|C<<16,Y+=128,i-=128}return i}function _r(e,t,r){var i,n=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(n[0]=1779033703,n[1]=3144134277,n[2]=1013904242,n[3]=2773480762,n[4]=1359893119,n[5]=2600822924,n[6]=528734635,n[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,Lr(n,s,t,r),r%=128,i=0;i<r;i++)a[i]=t[o-r+i];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,br(a,r-8,o/536870912|0,o<<3),Lr(n,s,a,r),i=0;i<8;i++)br(e,8*i,n[i],s[i]);return 0}function Fr(e,t){var r=hr(),i=hr(),n=hr(),s=hr(),a=hr(),o=hr(),c=hr(),h=hr(),u=hr();Dr(r,e[1],e[0]),Dr(u,t[1],t[0]),Ur(r,r,u),Pr(i,e[0],e[1]),Pr(u,t[0],t[1]),Ur(i,i,u),Ur(n,e[3],t[3]),Ur(n,n,dr),Ur(s,e[2],t[2]),Pr(s,s,s),Dr(a,i,r),Dr(o,s,n),Pr(c,s,n),Pr(h,i,r),Ur(e[0],a,o),Ur(e[1],h,c),Ur(e[2],c,o),Ur(e[3],a,h)}function Nr(e,t,r){var i;for(i=0;i<4;i++)Br(e[i],t[i],r)}function Hr(e,t){var r=hr(),i=hr(),n=hr();Qr(n,t[2]),Ur(r,t[0],n),Ur(i,t[1],n),Ir(e,i),e[31]^=Cr(r)<<7}function Or(e,t,r){var i,n;for(kr(e[0],yr),kr(e[1],fr),kr(e[2],fr),kr(e[3],yr),n=255;n>=0;--n)Nr(e,t,i=r[n/8|0]>>(7&n)&1),Fr(t,e),Fr(e,e),Nr(e,t,i)}function zr(e,t){var r=[hr(),hr(),hr(),hr()];kr(r[0],Ar),kr(r[1],wr),kr(r[2],fr),Ur(r[3],Ar,wr),Or(e,r,t)}function Gr(e,t,r){var i,n=new Uint8Array(64),s=[hr(),hr(),hr(),hr()];for(r||ur(t,32),_r(n,t,32),n[0]&=248,n[31]&=127,n[31]|=64,zr(s,n),Hr(e,s),i=0;i<32;i++)t[i+32]=e[i];return 0}var qr=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function jr(e,t){var r,i,n,s;for(i=63;i>=32;--i){for(r=0,n=i-32,s=i-12;n<s;++n)t[n]+=r-16*t[i]*qr[n-(i-32)],r=Math.floor((t[n]+128)/256),t[n]-=256*r;t[n]+=r,t[i]=0}for(r=0,n=0;n<32;n++)t[n]+=r-(t[31]>>4)*qr[n],r=t[n]>>8,t[n]&=255;for(n=0;n<32;n++)t[n]-=r*qr[n];for(i=0;i<32;i++)t[i+1]+=t[i]>>8,e[i]=255&t[i]}function Vr(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;jr(e,r)}function Yr(e,t){var r=hr(),i=hr(),n=hr(),s=hr(),a=hr(),o=hr(),c=hr();return kr(e[2],fr),Kr(e[1],t),xr(n,e[1]),Ur(s,n,pr),Dr(n,n,e[2]),Pr(s,e[2],s),xr(a,s),xr(o,a),Ur(c,o,a),Ur(r,c,n),Ur(r,r,s),function(e,t){var r,i=hr();for(r=0;r<16;r++)i[r]=t[r];for(r=250;r>=0;r--)xr(i,i),1!==r&&Ur(i,i,t);for(r=0;r<16;r++)e[r]=i[r]}(r,r),Ur(r,r,n),Ur(r,r,s),Ur(r,r,s),Ur(e[0],r,s),xr(i,e[0]),Ur(i,i,s),Sr(i,n)&&Ur(e[0],e[0],mr),xr(i,e[0]),Ur(i,i,s),Sr(i,n)?-1:(Cr(e[0])===t[31]>>7&&Dr(e[0],yr,e[0]),Ur(e[3],e[0],e[1]),0)}var Zr=64;function Jr(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}cr.scalarMult=function(e,t){if(Jr(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return Rr(r,e,t),r},cr.box={},cr.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){ur(t,32),Mr(e,t)}(e,t),{publicKey:e,secretKey:t}},cr.box.keyPair.fromSecretKey=function(e){if(Jr(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return Mr(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},cr.sign=function(e,t){if(Jr(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(Zr+e.length);return function(e,t,r,i){var n,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[hr(),hr(),hr(),hr()];_r(a,i,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(n=0;n<r;n++)e[64+n]=t[n];for(n=0;n<32;n++)e[32+n]=a[32+n];for(_r(c,e.subarray(32),r+32),Vr(c),zr(u,c),Hr(e,u),n=32;n<64;n++)e[n]=i[n];for(_r(o,e,r+64),Vr(o),n=0;n<64;n++)h[n]=0;for(n=0;n<32;n++)h[n]=c[n];for(n=0;n<32;n++)for(s=0;s<32;s++)h[n+s]+=o[n]*a[s];jr(e.subarray(32),h)}(r,e,e.length,t),r},cr.sign.detached=function(e,t){for(var r=cr.sign(e,t),i=new Uint8Array(Zr),n=0;n<i.length;n++)i[n]=r[n];return i},cr.sign.detached.verify=function(e,t,r){if(Jr(e,t,r),t.length!==Zr)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var i,n=new Uint8Array(Zr+e.length),s=new Uint8Array(Zr+e.length);for(i=0;i<Zr;i++)n[i]=t[i];for(i=0;i<e.length;i++)n[i+Zr]=e[i];return function(e,t,r,i){var n,s=new Uint8Array(32),a=new Uint8Array(64),o=[hr(),hr(),hr(),hr()],c=[hr(),hr(),hr(),hr()];if(r<64)return-1;if(Yr(c,i))return-1;for(n=0;n<r;n++)e[n]=t[n];for(n=0;n<32;n++)e[n+32]=i[n];if(_r(a,e,r),Vr(a),Or(o,c,a),zr(c,t.subarray(32)),Fr(o,c),Hr(s,o),r-=64,Er(t,0,s,0)){for(n=0;n<r;n++)e[n]=0;return-1}for(n=0;n<r;n++)e[n]=t[n+64];return r}(s,n,n.length,r)>=0},cr.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return Gr(e,t),{publicKey:e,secretKey:t}},cr.sign.keyPair.fromSecretKey=function(e){if(Jr(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},cr.sign.keyPair.fromSeed=function(e){if(Jr(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),i=0;i<32;i++)r[i]=e[i];return Gr(t,r,!0),{publicKey:t,secretKey:r}},cr.setPRNG=function(e){ur=e},function(){if(or&&or.getRandomValues){cr.setPRNG((function(e,t){var r,i=new Uint8Array(t);for(r=0;r<t;r+=65536)or.getRandomValues(i.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=i[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(i)}))}}();const Wr={"2a8648ce3d030107":F.curve.nistP256,"2b81040022":F.curve.nistP384,"2b81040023":F.curve.nistP521,"2b8104000a":F.curve.secp256k1,"2b06010401da470f01":F.curve.ed25519Legacy,"2b060104019755010501":F.curve.curve25519Legacy,"2b2403030208010107":F.curve.brainpoolP256r1,"2b240303020801010b":F.curve.brainpoolP384r1,"2b240303020801010d":F.curve.brainpoolP512r1};class $r{constructor(e){if(e instanceof $r)this.oid=e.oid;else if(O.isArray(e)||O.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return O.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return O.uint8ArrayToHex(this.oid)}getName(){const e=Wr[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function Xr(e){let t,r=0;const i=e[0];return i<192?([r]=e,t=1):i<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===i&&(r=O.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function ei(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):O.concatUint8Array([new Uint8Array([255]),O.writeNumber(e,4)])}function ti(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function ri(e){return new Uint8Array([192|e])}function ii(e,t){return O.concatUint8Array([ri(e),ei(t)])}function ni(e){return[F.packet.literalData,F.packet.compressedData,F.packet.symmetricallyEncryptedData,F.packet.symEncryptedIntegrityProtectedData,F.packet.aeadEncryptedData].includes(e)}async function si(e,t){const r=T(e);let i,n;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,u=-1;u=0,64&a&&(u=1),u?h=63&a:(h=(63&a)>>2,c=3&a);const l=ni(h);let y,f=null;if(l){if("array"===O.isStream(e)){const e=new ArrayStream;i=L(e),f=e}else{const e=new TransformStream;i=L(e.writable),f=e.readable}n=t({tag:h,packet:f})}else f=[];do{if(u){const e=await r.readByte();if(y=!1,e<192)o=e;else if(e>=192&&e<224)o=(e-192<<8)+await r.readByte()+192;else if(e>223&&e<255){if(o=1<<(31&e),y=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let e=0;for(;;){i&&await i.ready;const{done:t,value:n}=await r.read();if(t){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?n:n.subarray(0,o-e);if(i?await i.write(s):f.push(s),e+=n.length,e>=o){r.unshift(n.subarray(o-e+n.length));break}}}}while(y);const g=await r.peekBytes(l?1/0:2);return i?(await i.ready,await i.close()):(f=O.concatUint8Array(f),await t({tag:h,packet:f})),!g||!g.length}catch(e){if(i)return await i.abort(e),!0;throw e}finally{i&&await n,r.releaseLock()}}class ai extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ai),this.name="UnsupportedError"}}class oi extends ai{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ai),this.name="UnknownPacketError"}}class ci{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}const hi=O.getWebCrypto(),ui=O.getNodeCrypto(),li={[F.curve.nistP256]:"P-256",[F.curve.nistP384]:"P-384",[F.curve.nistP521]:"P-521"},yi=ui?ui.getCurves():[],fi=ui?{[F.curve.secp256k1]:yi.includes("secp256k1")?"secp256k1":void 0,[F.curve.nistP256]:yi.includes("prime256v1")?"prime256v1":void 0,[F.curve.nistP384]:yi.includes("secp384r1")?"secp384r1":void 0,[F.curve.nistP521]:yi.includes("secp521r1")?"secp521r1":void 0,[F.curve.ed25519Legacy]:yi.includes("ED25519")?"ED25519":void 0,[F.curve.curve25519Legacy]:yi.includes("X25519")?"X25519":void 0,[F.curve.brainpoolP256r1]:yi.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[F.curve.brainpoolP384r1]:yi.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[F.curve.brainpoolP512r1]:yi.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},gi={[F.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:fi[F.curve.nistP256],web:li[F.curve.nistP256],payloadSize:32,sharedSize:256,wireFormatLeadingByte:4},[F.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:F.publicKey.ecdsa,hash:F.hash.sha384,cipher:F.symmetric.aes192,node:fi[F.curve.nistP384],web:li[F.curve.nistP384],payloadSize:48,sharedSize:384,wireFormatLeadingByte:4},[F.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:F.publicKey.ecdsa,hash:F.hash.sha512,cipher:F.symmetric.aes256,node:fi[F.curve.nistP521],web:li[F.curve.nistP521],payloadSize:66,sharedSize:528,wireFormatLeadingByte:4},[F.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:fi[F.curve.secp256k1],payloadSize:32,wireFormatLeadingByte:4},[F.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:F.publicKey.eddsaLegacy,hash:F.hash.sha512,node:!1,payloadSize:32,wireFormatLeadingByte:64},[F.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:F.publicKey.ecdh,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:!1,payloadSize:32,wireFormatLeadingByte:64},[F.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:F.publicKey.ecdsa,hash:F.hash.sha256,cipher:F.symmetric.aes128,node:fi[F.curve.brainpoolP256r1],payloadSize:32,wireFormatLeadingByte:4},[F.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:F.publicKey.ecdsa,hash:F.hash.sha384,cipher:F.symmetric.aes192,node:fi[F.curve.brainpoolP384r1],payloadSize:48,wireFormatLeadingByte:4},[F.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:F.publicKey.ecdsa,hash:F.hash.sha512,cipher:F.symmetric.aes256,node:fi[F.curve.brainpoolP512r1],payloadSize:64,wireFormatLeadingByte:4}};class pi{constructor(e){try{this.name=e instanceof $r?e.getName():F.write(F.curve,e)}catch(e){throw new ai("Unknown curve")}const t=gi[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.wireFormatLeadingByte=t.wireFormatLeadingByte,this.web&&O.getWebCrypto()?this.type="web":this.node&&O.getNodeCrypto()?this.type="node":this.name===F.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===F.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e,t){const r=await hi.generateKey({name:"ECDSA",namedCurve:li[e]},!0,["sign","verify"]),i=await hi.exportKey("jwk",r.privateKey),n=await hi.exportKey("jwk",r.publicKey);return{publicKey:mi(n,t),privateKey:Y(i.d)}}(this.name,this.wireFormatLeadingByte)}catch(e){return O.printDebugError("Browser did not support generating ec key "+e.message),wi(this.name)}case"node":return async function(e){const t=ui.createECDH(fi[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const e=Nt(32);e[0]=127&e[0]|64,e[31]&=248;const t=e.slice().reverse(),{publicKey:r}=cr.box.keyPair.fromSecretKey(t);return{publicKey:O.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),r]),privateKey:e}}case"ed25519Legacy":{const e=Nt(32),t=cr.sign.keyPair.fromSeed(e);return{publicKey:O.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t.publicKey]),privateKey:e}}default:return wi(this.name)}}}async function di(e,t,r,i){const n={[F.curve.nistP256]:!0,[F.curve.nistP384]:!0,[F.curve.nistP521]:!0,[F.curve.secp256k1]:!0,[F.curve.curve25519Legacy]:e===F.publicKey.ecdh,[F.curve.brainpoolP256r1]:!0,[F.curve.brainpoolP384r1]:!0,[F.curve.brainpoolP512r1]:!0},s=t.getName();if(!n[s])return!1;if(s===F.curve.curve25519Legacy){i=i.slice().reverse();const{publicKey:e}=cr.box.keyPair.fromSecretKey(i);r=new Uint8Array(r);const t=new Uint8Array([64,...e]);return!!O.equalsUint8Array(t,r)}const a=(await O.getNobleCurve(F.publicKey.ecdsa,s)).getPublicKey(i,!1);return!!O.equalsUint8Array(a,r)}function Ai(e,t){const{payloadSize:r,wireFormatLeadingByte:i,name:n}=e,s=n===F.curve.curve25519Legacy||n===F.curve.ed25519Legacy?r:2*r;if(t[0]!==i||t.length!==s+1)throw Error("Invalid point encoding")}async function wi(e){const t=await O.getNobleCurve(F.publicKey.ecdsa,e),r=t.utils.randomPrivateKey();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function mi(e,t){const r=Y(e.x),i=Y(e.y),n=new Uint8Array(r.length+i.length+1);return n[0]=t,n.set(r,1),n.set(i,r.length+1),n}function bi(e,t,r){const i=e,n=r.slice(1,i+1),s=r.slice(i+1,2*i+1);return{kty:"EC",crv:t,x:Z(n),y:Z(s),ext:!0}}function Ei(e,t,r,i){const n=bi(e,t,r);return n.d=Z(i),n}const ki=O.getWebCrypto(),vi=O.getNodeCrypto();async function Bi(e,t,r,i,n,s){const a=new pi(e);if(Ai(a,i),r&&!O.isStream(r)){const e={publicKey:i,privateKey:n};switch(a.type){case"web":try{return await async function(e,t,r,i){const n=e.payloadSize,s=Ei(e.payloadSize,li[e.name],i.publicKey,i.privateKey),a=await ki.importKey("jwk",s,{name:"ECDSA",namedCurve:li[e.name],hash:{name:F.read(F.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await ki.sign({name:"ECDSA",namedCurve:li[e.name],hash:{name:F.read(F.webHash,t)}},a,r));return{r:o.slice(0,n),s:o.slice(n,n<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;O.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,i){const n=O.nodeRequire("eckey-utils"),s=O.getNodeBuffer(),{privateKey:a}=n.generateDer({curveName:fi[e.name],privateKey:s.from(i)}),o=vi.createSign(F.read(F.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=e.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,t,r,n)}}const o=(await O.getNobleCurve(F.publicKey.ecdsa,a.name)).sign(s,n,{lowS:!1});return{r:_t(o.r,"be",a.payloadSize),s:_t(o.s,"be",a.payloadSize)}}async function Ii(e,t,r,i,n,s){const a=new pi(e);Ai(a,n);const o=async()=>0===s[0]&&Si(a,r,s.subarray(1),n);if(i&&!O.isStream(i))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:i},n,s){const a=bi(e.payloadSize,li[e.name],s),o=await ki.importKey("jwk",a,{name:"ECDSA",namedCurve:li[e.name],hash:{name:F.read(F.webHash,e.hash)}},!1,["verify"]),c=O.concatUint8Array([r,i]).buffer;return ki.verify({name:"ECDSA",namedCurve:li[e.name],hash:{name:F.read(F.webHash,t)}},o,c,n)}(a,t,r,i,n);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;O.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:i},n,s){const a=O.nodeRequire("eckey-utils"),o=O.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:fi[e.name],publicKey:o.from(s)}),h=vi.createVerify(F.read(F.hash,t));h.write(n),h.end();const u=O.concatUint8Array([r,i]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(e){return!1}}(a,t,r,i,n);return e||o()}}return await Si(a,r,s,n)||o()}async function Si(e,t,r,i){return(await O.getNobleCurve(F.publicKey.ecdsa,e.name)).verify(O.concatUint8Array([t.r,t.s]),r,i,{lowS:!1})}var Ci=/*#__PURE__*/Object.freeze({__proto__:null,sign:Bi,validateParams:async function(e,t,r){const i=new pi(e);if(i.keyType!==F.publicKey.ecdsa)return!1;switch(i.type){case"web":case"node":{const i=Nt(8),n=F.hash.sha256,s=await Ie.digest(n,i);try{const a=await Bi(e,n,i,t,r,s);return await Ii(e,n,a,i,t,s)}catch(e){return!1}}default:return di(F.publicKey.ecdsa,e,t,r)}},verify:Ii});
|
|
3
|
-
/*! noble-ed25519 - MIT License (c) 2019 Paul Miller (paulmillr.com) */const Ki=BigInt(0),Pi=BigInt(1),Di=BigInt(2),Ui=BigInt(8),xi=BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),Qi=Object.freeze({a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),P:BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),l:xi,n:xi,h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960")}),Ri=BigInt("0x10000000000000000000000000000000000000000000000000000000000000000"),Mi=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");BigInt("6853475219497561581579357271197624642482790079785650197046958215289687604742");const Ti=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),Li=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),_i=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),Fi=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");class Ni{constructor(e,t,r,i){this.x=e,this.y=t,this.z=r,this.t=i}static fromAffine(e){if(!(e instanceof Vi))throw new TypeError("ExtendedPoint#fromAffine: expected Point");return e.equals(Vi.ZERO)?Ni.ZERO:new Ni(e.x,e.y,Pi,an(e.x*e.y))}static toAffineBatch(e){const t=function(e,t=Qi.P){const r=Array(e.length),i=e.reduce(((e,i,n)=>i===Ki?e:(r[n]=e,an(e*i,t))),Pi),n=on(i,t);return e.reduceRight(((e,i,n)=>i===Ki?e:(r[n]=an(e*r[n],t),an(e*i,t))),n),r}(e.map((e=>e.z)));return e.map(((e,r)=>e.toAffine(t[r])))}static normalizeZ(e){return this.toAffineBatch(e).map(this.fromAffine)}equals(e){Oi(e);const{x:t,y:r,z:i}=this,{x:n,y:s,z:a}=e,o=an(t*a),c=an(n*i),h=an(r*a),u=an(s*i);return o===c&&h===u}negate(){return new Ni(an(-this.x),this.y,this.z,an(-this.t))}double(){const{x:e,y:t,z:r}=this,{a:i}=Qi,n=an(e*e),s=an(t*t),a=an(Di*an(r*r)),o=an(i*n),c=e+t,h=an(an(c*c)-n-s),u=o+s,l=u-a,y=o-s,f=an(h*l),g=an(u*y),p=an(h*y),d=an(l*u);return new Ni(f,g,d,p)}add(e){Oi(e);const{x:t,y:r,z:i,t:n}=this,{x:s,y:a,z:o,t:c}=e,h=an((r-t)*(a+s)),u=an((r+t)*(a-s)),l=an(u-h);if(l===Ki)return this.double();const y=an(i*Di*c),f=an(n*Di*o),g=f+y,p=u+h,d=f-y,A=an(g*l),w=an(p*d),m=an(g*d),b=an(l*p);return new Ni(A,w,b,m)}subtract(e){return this.add(e.negate())}precomputeWindow(e){const t=1+256/e,r=[];let i=this,n=i;for(let s=0;s<t;s++){n=i,r.push(n);for(let t=1;t<2**(e-1);t++)n=n.add(i),r.push(n);i=n.double()}return r}wNAF(e,t){!t&&this.equals(Ni.BASE)&&(t=Vi.BASE);const r=t&&t._WINDOW_SIZE||1;if(256%r)throw Error("Point#wNAF: Invalid precomputation window, must be power of 2");let i=t&&ji.get(t);i||(i=this.precomputeWindow(r),t&&1!==r&&(i=Ni.normalizeZ(i),ji.set(t,i)));let n=Ni.ZERO,s=Ni.BASE;const a=1+256/r,o=2**(r-1),c=BigInt(2**r-1),h=2**r,u=BigInt(r);for(let t=0;t<a;t++){const r=t*o;let a=Number(e&c);e>>=u,a>o&&(a-=h,e+=Pi);const l=r,y=r+Math.abs(a)-1,f=t%2!=0,g=a<0;0===a?s=s.add(Hi(f,i[l])):n=n.add(Hi(g,i[y]))}return Ni.normalizeZ([n,s])[0]}multiply(e,t){return this.wNAF(fn(e,Qi.l),t)}multiplyUnsafe(e){let t=fn(e,Qi.l,!1);const r=Ni.BASE,i=Ni.ZERO;if(t===Ki)return i;if(this.equals(i)||t===Pi)return this;if(this.equals(r))return this.wNAF(t);let n=i,s=this;for(;t>Ki;)t&Pi&&(n=n.add(s)),s=s.double(),t>>=Pi;return n}isSmallOrder(){return this.multiplyUnsafe(Qi.h).equals(Ni.ZERO)}isTorsionFree(){let e=this.multiplyUnsafe(Qi.l/Di).double();return Qi.l%Di&&(e=e.add(this)),e.equals(Ni.ZERO)}toAffine(e){const{x:t,y:r,z:i}=this,n=this.equals(Ni.ZERO);null==e&&(e=n?Ui:on(i));const s=an(t*e),a=an(r*e),o=an(i*e);if(n)return Vi.ZERO;if(o!==Pi)throw Error("invZ was invalid");return new Vi(s,a)}fromRistrettoBytes(){Gi()}toRistrettoBytes(){Gi()}fromRistrettoHash(){Gi()}}function Hi(e,t){const r=t.negate();return e?r:t}function Oi(e){if(!(e instanceof Ni))throw new TypeError("ExtendedPoint expected")}function zi(e){if(!(e instanceof qi))throw new TypeError("RistrettoPoint expected")}function Gi(){throw Error("Legacy method: switch to RistrettoPoint")}Ni.BASE=new Ni(Qi.Gx,Qi.Gy,Pi,an(Qi.Gx*Qi.Gy)),Ni.ZERO=new Ni(Ki,Pi,Pi,Ki);class qi{constructor(e){this.ep=e}static calcElligatorRistrettoMap(e){const{d:t}=Qi,r=an(Mi*e*e),i=an((r+Pi)*_i);let n=BigInt(-1);const s=an((n-t*r)*an(r+t));let{isValid:a,value:o}=hn(i,s),c=an(o*e);tn(c)||(c=an(-c)),a||(o=c),a||(n=r);const h=an(n*(r-Pi)*Fi-s),u=o*o,l=an((o+o)*s),y=an(h*Ti),f=an(Pi-u),g=an(Pi+u);return new Ni(an(l*g),an(f*y),an(y*g),an(l*f))}static hashToCurve(e){const t=sn((e=yn(e,64)).slice(0,32)),r=this.calcElligatorRistrettoMap(t),i=sn(e.slice(32,64)),n=this.calcElligatorRistrettoMap(i);return new qi(r.add(n))}static fromHex(e){e=yn(e,32);const{a:t,d:r}=Qi,i="RistrettoPoint.fromHex: the hex is not valid encoding of RistrettoPoint",n=sn(e);if(!function(e,t){if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0}(en(n),e)||tn(n))throw Error(i);const s=an(n*n),a=an(Pi+t*s),o=an(Pi-t*s),c=an(a*a),h=an(o*o),u=an(t*r*c-h),{isValid:l,value:y}=un(an(u*h)),f=an(y*o),g=an(y*f*u);let p=an((n+n)*f);tn(p)&&(p=an(-p));const d=an(a*g),A=an(p*d);if(!l||tn(A)||d===Ki)throw Error(i);return new qi(new Ni(p,d,Pi,A))}toRawBytes(){let{x:e,y:t,z:r,t:i}=this.ep;const n=an(an(r+t)*an(r-t)),s=an(e*t),a=an(s*s),{value:o}=un(an(n*a)),c=an(o*n),h=an(o*s),u=an(c*h*i);let l;if(tn(i*u)){let r=an(t*Mi),i=an(e*Mi);e=r,t=i,l=an(c*Li)}else l=h;tn(e*u)&&(t=an(-t));let y=an((r-t)*l);return tn(y)&&(y=an(-y)),en(y)}toHex(){return Wi(this.toRawBytes())}toString(){return this.toHex()}equals(e){zi(e);const t=this.ep,r=e.ep,i=an(t.x*r.y)===an(t.y*r.x),n=an(t.y*r.y)===an(t.x*r.x);return i||n}add(e){return zi(e),new qi(this.ep.add(e.ep))}subtract(e){return zi(e),new qi(this.ep.subtract(e.ep))}multiply(e){return new qi(this.ep.multiply(e))}multiplyUnsafe(e){return new qi(this.ep.multiplyUnsafe(e))}}qi.BASE=new qi(Ni.BASE),qi.ZERO=new qi(Ni.ZERO);const ji=new WeakMap;class Vi{constructor(e,t){this.x=e,this.y=t}_setWindowSize(e){this._WINDOW_SIZE=e,ji.delete(this)}static fromHex(e,t=!0){const{d:r,P:i}=Qi,n=(e=yn(e,32)).slice();n[31]=-129&e[31];const s=rn(n);if(t&&s>=i)throw Error("Expected 0 < hex < P");if(!t&&s>=Ri)throw Error("Expected 0 < hex < 2**256");const a=an(s*s),o=an(a-Pi),c=an(r*a+Pi);let{isValid:h,value:u}=hn(o,c);if(!h)throw Error("Point.fromHex: invalid y coordinate");const l=(u&Pi)===Pi;return!!(128&e[31])!==l&&(u=an(-u)),new Vi(u,s)}static async fromPrivateKey(e){return(await pn(e)).point}toRawBytes(){const e=en(this.y);return e[31]|=this.x&Pi?128:0,e}toHex(){return Wi(this.toRawBytes())}toX25519(){const{y:e}=this;return en(an((Pi+e)*on(Pi-e)))}isTorsionFree(){return Ni.fromAffine(this).isTorsionFree()}equals(e){return this.x===e.x&&this.y===e.y}negate(){return new Vi(an(-this.x),this.y)}add(e){return Ni.fromAffine(this).add(Ni.fromAffine(e)).toAffine()}subtract(e){return this.add(e.negate())}multiply(e){return Ni.fromAffine(this).multiply(e,this).toAffine()}}Vi.BASE=new Vi(Qi.Gx,Qi.Gy),Vi.ZERO=new Vi(Ki,Pi);let Yi=class e{constructor(e,t){this.r=e,this.s=t,this.assertValidity()}static fromHex(t){const r=yn(t,64),i=Vi.fromHex(r.slice(0,32),!1),n=rn(r.slice(32,64));return new e(i,n)}assertValidity(){const{r:e,s:t}=this;if(!(e instanceof Vi))throw Error("Expected Point instance");return fn(t,Qi.l,!1),this}toRawBytes(){const e=new Uint8Array(64);return e.set(this.r.toRawBytes()),e.set(en(this.s),32),e}toHex(){return Wi(this.toRawBytes())}};function Zi(...e){if(!e.every((e=>e instanceof Uint8Array)))throw Error("Expected Uint8Array list");if(1===e.length)return e[0];const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}const Ji=Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function Wi(e){if(!(e instanceof Uint8Array))throw Error("Uint8Array expected");let t="";for(let r=0;r<e.length;r++)t+=Ji[e[r]];return t}function $i(e){if("string"!=typeof e)throw new TypeError("hexToBytes: expected string, got "+typeof e);if(e.length%2)throw Error("hexToBytes: received invalid unpadded hex");const t=new Uint8Array(e.length/2);for(let r=0;r<t.length;r++){const i=2*r,n=e.slice(i,i+2),s=Number.parseInt(n,16);if(Number.isNaN(s)||s<0)throw Error("Invalid byte sequence");t[r]=s}return t}function Xi(e){return $i(e.toString(16).padStart(64,"0"))}function en(e){return Xi(e).reverse()}function tn(e){return(an(e)&Pi)===Pi}function rn(e){if(!(e instanceof Uint8Array))throw Error("Expected Uint8Array");return BigInt("0x"+Wi(Uint8Array.from(e).reverse()))}const nn=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function sn(e){return an(rn(e)&nn)}function an(e,t=Qi.P){const r=e%t;return r>=Ki?r:t+r}function on(e,t=Qi.P){if(e===Ki||t<=Ki)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=an(e,t),i=t,n=Ki,s=Pi;for(;r!==Ki;){const e=i%r,t=n-s*(i/r);i=r,r=e,n=s,s=t}if(i!==Pi)throw Error("invert: does not exist");return an(n,t)}function cn(e,t){const{P:r}=Qi;let i=e;for(;t-- >Ki;)i*=i,i%=r;return i}function hn(e,t){const r=an(t*t*t),i=function(e){const{P:t}=Qi,r=BigInt(5),i=BigInt(10),n=BigInt(20),s=BigInt(40),a=BigInt(80),o=e*e%t*e%t,c=cn(o,Di)*o%t,h=cn(c,Pi)*e%t,u=cn(h,r)*h%t,l=cn(u,i)*u%t,y=cn(l,n)*l%t,f=cn(y,s)*y%t,g=cn(f,a)*f%t,p=cn(g,a)*f%t,d=cn(p,i)*u%t;return{pow_p_5_8:cn(d,Di)*e%t,b2:o}}(e*an(r*r*t)).pow_p_5_8;let n=an(e*r*i);const s=an(t*n*n),a=n,o=an(n*Mi),c=s===e,h=s===an(-e),u=s===an(-e*Mi);return c&&(n=a),(h||u)&&(n=o),tn(n)&&(n=an(-n)),{isValid:c||h,value:n}}function un(e){return hn(Pi,e)}function ln(e){return an(rn(e),Qi.l)}function yn(e,t){const r=e instanceof Uint8Array?Uint8Array.from(e):$i(e);if("number"==typeof t&&r.length!==t)throw Error(`Expected ${t} bytes`);return r}function fn(e,t,r=!0){if(!t)throw new TypeError("Specify max value");if("number"==typeof e&&Number.isSafeInteger(e)&&(e=BigInt(e)),"bigint"==typeof e&&e<t)if(r){if(Ki<e)return e}else if(Ki<=e)return e;throw new TypeError("Expected valid scalar: 0 < scalar < max")}let gn;async function pn(e){return function(e){const t=function(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}(e.slice(0,32)),r=e.slice(32,64),i=ln(t),n=Vi.BASE.multiply(i),s=n.toRawBytes();return{head:t,prefix:r,scalar:i,point:n,pointBytes:s}}(await wn.sha512(function(e){if(32!==(e="bigint"==typeof e||"number"==typeof e?Xi(fn(e,Ri)):yn(e)).length)throw Error("Expected 32 bytes");return e}(e)))}async function dn(e,t,r){const{r:i,SB:n,msg:s,pub:a}=function(e,t,r){t=yn(t),r instanceof Vi||(r=Vi.fromHex(r,!1));const{r:i,s:n}=e instanceof Yi?e.assertValidity():Yi.fromHex(e);return{r:i,s:n,SB:Ni.BASE.multiplyUnsafe(n),pub:r,msg:t}}(e,t,r),o=await wn.sha512(i.toRawBytes(),a.toRawBytes(),s);return function(e,t,r,i){const n=ln(i),s=Ni.fromAffine(e).multiplyUnsafe(n);return Ni.fromAffine(t).add(s).subtract(r).multiplyUnsafe(Qi.h).equals(Ni.ZERO)}(a,i,n,o)}Vi.BASE._setWindowSize(8);const An={node:o,web:"object"==typeof self&&"crypto"in self?self.crypto:void 0},wn={bytesToHex:Wi,hexToBytes:$i,concatBytes:Zi,getExtendedPublicKey:pn,mod:an,invert:on,TORSION_SUBGROUP:["0100000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a","0000000000000000000000000000000000000000000000000000000000000080","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05","ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc85","0000000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa"],hashToPrivateScalar:e=>{if((e=yn(e)).length<40||e.length>1024)throw Error("Expected 40-1024 bytes of private key as per FIPS 186");return an(rn(e),Qi.l-Pi)+Pi},randomBytes:(e=32)=>{if(An.web)return An.web.getRandomValues(new Uint8Array(e));if(An.node){const{randomBytes:t}=An.node;return new Uint8Array(t(e).buffer)}throw Error("The environment doesn't have randomBytes function")},randomPrivateKey:()=>wn.randomBytes(32),sha512:async(...e)=>{const t=Zi(...e);if(An.web){const e=await An.web.subtle.digest("SHA-512",t.buffer);return new Uint8Array(e)}if(An.node)return Uint8Array.from(An.node.createHash("sha512").update(t).digest());throw Error("The environment doesn't have sha512 function")},precompute(e=8,t=Vi.BASE){const r=t.equals(Vi.BASE)?t:new Vi(t.x,t.y);return r._setWindowSize(e),r.multiply(Di),r},sha512Sync:void 0};Object.defineProperties(wn,{sha512Sync:{configurable:!1,get:()=>gn,set(e){gn||(gn=e)}}});var mn=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){if(Ai(new pi(e),i),Ie.getHashByteLength(t)<Ie.getHashByteLength(F.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const a=O.concatUint8Array([n,i.subarray(1)]),o=cr.sign.detached(s,a);return{r:o.subarray(0,32),s:o.subarray(32)}},validateParams:async function(e,t,r){if(e.getName()!==F.curve.ed25519Legacy)return!1;const{publicKey:i}=cr.sign.keyPair.fromSeed(r),n=new Uint8Array([64,...i]);return O.equalsUint8Array(t,n)},verify:async function(e,t,{r,s:i},n,s,a){if(Ai(new pi(e),s),Ie.getHashByteLength(t)<Ie.getHashByteLength(F.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");return dn(O.concatUint8Array([r,i]),a,s.subarray(1))}});function bn(e){switch(e){case F.publicKey.ed25519:return 32;case F.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function En(e){switch(e){case F.publicKey.ed25519:return F.hash.sha256;case F.publicKey.ed448:return F.hash.sha512;default:throw Error("Unknown EdDSA algo")}}var kn=/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){switch(e){case F.publicKey.ed25519:{const t=Nt(bn(e)),{publicKey:r}=cr.sign.keyPair.fromSeed(t);return{A:r,seed:t}}case F.publicKey.ed448:{const e=await O.getNobleCurve(F.publicKey.ed448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),seed:t}}default:throw Error("Unsupported EdDSA algorithm")}},getPayloadSize:bn,getPreferredHashAlgo:En,sign:async function(e,t,r,i,n,s){if(Ie.getHashByteLength(t)<Ie.getHashByteLength(En(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case F.publicKey.ed25519:{const e=O.concatUint8Array([n,i]);return{RS:cr.sign.detached(s,e)}}case F.publicKey.ed448:return{RS:(await O.getNobleCurve(F.publicKey.ed448)).sign(s,n)};default:throw Error("Unsupported EdDSA algorithm")}},validateParams:async function(e,t,r){switch(e){case F.publicKey.ed25519:{const{publicKey:e}=cr.sign.keyPair.fromSeed(r);return O.equalsUint8Array(t,e)}case F.publicKey.ed448:{const e=(await O.getNobleCurve(F.publicKey.ed448)).getPublicKey(r);return O.equalsUint8Array(t,e)}default:return!1}},verify:async function(e,t,{RS:r},i,n,s){if(Ie.getHashByteLength(t)<Ie.getHashByteLength(En(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case F.publicKey.ed25519:return dn(r,s,n);case F.publicKey.ed448:return(await O.getNobleCurve(F.publicKey.ed448)).verify(r,s,n);default:throw Error("Unsupported EdDSA algorithm")}}});const vn=O.getWebCrypto();async function Bn(e,t,r){const{keySize:i}=ce(e);if(!O.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");try{const e=await vn.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),i=await vn.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),n=await vn.wrapKey("raw",i,e,{name:"AES-KW"});return new Uint8Array(n)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;O.printDebugError("Browser did not support operation: "+e.message)}return function(e,t,r){const i=new qe(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=Sn(r);let a=n;const o=s,c=s.length/2,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=0;e<=5;++e)for(let t=0;t<c;++t)h[1]=c*e+(1+t),u[0]=a[0],u[1]=a[1],u[2]=o[2*t],u[3]=o[2*t+1],u=Sn(i.encrypt(Cn(u))),a=u.subarray(0,2),a[0]^=h[0],a[1]^=h[1],o[2*t]=u[2],o[2*t+1]=u[3];return Cn(a,o)}(0,t,r)}async function In(e,t,r){const{keySize:i}=ce(e);if(!O.isAES(e)||t.length!==i)throw Error("Unexpected algorithm or key size");let n;try{n=await vn.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return O.printDebugError("Browser did not support operation: "+e.message),function(e,t,r){const i=new qe(t,new Uint8Array(16),!1),n=new Uint32Array([2795939494,2795939494]),s=Sn(r);let a=s.subarray(0,2);const o=s.subarray(2),c=s.length/2-1,h=new Uint32Array([0,0]);let u=new Uint32Array(4);for(let e=5;e>=0;--e)for(let t=c-1;t>=0;--t)h[1]=c*e+(t+1),u[0]=a[0]^h[0],u[1]=a[1]^h[1],u[2]=o[2*t],u[3]=o[2*t+1],u=Sn(i.decrypt(Cn(u))),a=u.subarray(0,2),o[2*t]=u[2],o[2*t+1]=u[3];if(a[0]===n[0]&&a[1]===n[1])return Cn(o);throw Error("Key Data Integrity failed")}(0,t,r)}try{const e=await vn.unwrapKey("raw",r,n,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await vn.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}function Sn(e){const t=e.buffer,r=new DataView(t),i=new Uint32Array(e.length/4);for(let t=0;t<e.length/4;++t)i[t]=r.getUint32(4*t);return i}function Cn(){let e=0;for(let t=0;t<arguments.length;++t)e+=4*arguments[t].length;const t=new ArrayBuffer(e),r=new DataView(t);let i=0;for(let e=0;e<arguments.length;++e){for(let t=0;t<arguments[e].length;++t)r.setUint32(i+4*t,arguments[e][t]);i+=4*arguments[e].length}return new Uint8Array(t)}var Kn=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:In,wrap:Bn});function Pn(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}function Dn(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const i=e.subarray(t-r),n=new Uint8Array(r).fill(r);if(O.equalsUint8Array(i,n))return e.subarray(0,t-r)}}throw Error("Invalid padding")}var Un=/*#__PURE__*/Object.freeze({__proto__:null,decode:Dn,encode:Pn});const xn=O.getWebCrypto(),Qn=O.getNodeCrypto();function Rn(e,t,r,i){return O.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),O.stringToUint8Array("Anonymous Sender "),r.replacementFingerprint||i])}async function Mn(e,t,r,i,n=!1,s=!1){let a;if(n){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await Ie.digest(e,O.concatUint8Array([new Uint8Array([0,0,0,1]),t,i]))).subarray(0,r)}async function Tn(e,t){switch(e.type){case"curve25519Legacy":{const r=Nt(32),{secretKey:i,sharedKey:n}=await Ln(e,t,null,r);let{publicKey:s}=cr.box.keyPair.fromSecretKey(i);return s=O.concatUint8Array([new Uint8Array([e.wireFormatLeadingByte]),s]),{publicKey:s,sharedKey:n}}case"web":if(e.web&&O.getWebCrypto())try{return await async function(e,t){const r=bi(e.payloadSize,e.web,t);let i=xn.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),n=xn.importKey("jwk",r,{name:"ECDH",namedCurve:e.web},!1,[]);[i,n]=await Promise.all([i,n]);let s=xn.deriveBits({name:"ECDH",namedCurve:e.web,public:n},i.privateKey,e.sharedSize),a=xn.exportKey("jwk",i.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(mi(a,e.wireFormatLeadingByte));return{publicKey:c,sharedKey:o}}(e,t)}catch(r){return O.printDebugError(r),Fn(e,t)}break;case"node":return async function(e,t){const r=Qn.createECDH(e.node);r.generateKeys();const i=new Uint8Array(r.computeSecret(t)),n=new Uint8Array(r.getPublicKey());return{publicKey:n,sharedKey:i}}(e,t);default:return Fn(e,t)}}async function Ln(e,t,r,i){if(i.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(i,e.payloadSize-i.length),i=t}switch(e.type){case"curve25519Legacy":{const e=i.slice().reverse();return{secretKey:e,sharedKey:cr.scalarMult(e,t.subarray(1))}}case"web":if(e.web&&O.getWebCrypto())try{return await async function(e,t,r,i){const n=Ei(e.payloadSize,e.web,r,i);let s=xn.importKey("jwk",n,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const a=bi(e.payloadSize,e.web,t);let o=xn.importKey("jwk",a,{name:"ECDH",namedCurve:e.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=xn.deriveBits({name:"ECDH",namedCurve:e.web,public:o},s,e.sharedSize),h=xn.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:Y(h.d),sharedKey:u}}(e,t,r,i)}catch(r){return O.printDebugError(r),_n(e,t,i)}break;case"node":return async function(e,t,r){const i=Qn.createECDH(e.node);i.setPrivateKey(r);const n=new Uint8Array(i.computeSecret(t));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:n}}(e,t,i);default:return _n(e,t,i)}}async function _n(e,t,r){return{secretKey:r,sharedKey:(await O.getNobleCurve(F.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function Fn(e,t){const r=await O.getNobleCurve(F.publicKey.ecdh,e.name),{publicKey:i,privateKey:n}=await e.genKeyPair();return{publicKey:i,sharedKey:r.getSharedSecret(n,t).subarray(1)}}var Nn=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n,s,a){const o=new pi(e);Ai(o,n),Ai(o,r);const{sharedKey:c}=await Ln(o,r,n,s),h=Rn(F.publicKey.ecdh,e,t,a),{keySize:u}=ce(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await Mn(t.hash,c,u,h,1===e,2===e);return Dn(await In(t.cipher,r,i))}catch(e){l=e}throw l},encrypt:async function(e,t,r,i,n){const s=Pn(r),a=new pi(e);Ai(a,i);const{publicKey:o,sharedKey:c}=await Tn(a,i),h=Rn(F.publicKey.ecdh,e,t,n),{keySize:u}=ce(t.cipher),l=await Mn(t.hash,c,u,h);return{publicKey:o,wrappedKey:await Bn(t.cipher,l,s)}},validateParams:async function(e,t,r){return di(F.publicKey.ecdh,e,t,r)}});const Hn=O.getWebCrypto();async function On(e,t,r,i,n){const s=F.read(F.webHash,e);if(!s)throw Error("Hash algo not supported with HKDF");const a=await Hn.importKey("raw",t,"HKDF",!1,["deriveBits"]),o=await Hn.deriveBits({name:"HKDF",hash:s,salt:r,info:i},a,8*n);return new Uint8Array(o)}const zn={x25519:O.encodeUTF8("OpenPGP X25519"),x448:O.encodeUTF8("OpenPGP X448")};var Gn=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,i,n){switch(e){case F.publicKey.x25519:{const e=cr.scalarMult(n,t),s=O.concatUint8Array([t,i,e]),a=F.symmetric.aes128,{keySize:o}=ce(a);return In(a,await On(F.hash.sha256,s,new Uint8Array,zn.x25519,o),r)}case F.publicKey.x448:{const e=(await O.getNobleCurve(F.publicKey.x448)).getSharedSecret(n,t),s=O.concatUint8Array([t,i,e]),a=F.symmetric.aes256,{keySize:o}=ce(F.symmetric.aes256);return In(a,await On(F.hash.sha512,s,new Uint8Array,zn.x448,o),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(e,t,r){switch(e){case F.publicKey.x25519:{const e=Nt(32),i=cr.scalarMult(e,r),{publicKey:n}=cr.box.keyPair.fromSecretKey(e),s=O.concatUint8Array([n,r,i]),a=F.symmetric.aes128,{keySize:o}=ce(a),c=await On(F.hash.sha256,s,new Uint8Array,zn.x25519,o);return{ephemeralPublicKey:n,wrappedKey:await Bn(a,c,t)}}case F.publicKey.x448:{const e=await O.getNobleCurve(F.publicKey.x448),i=e.utils.randomPrivateKey(),n=e.getSharedSecret(i,r),s=e.getPublicKey(i),a=O.concatUint8Array([s,r,n]),o=F.symmetric.aes256,{keySize:c}=ce(F.symmetric.aes256),h=await On(F.hash.sha512,a,new Uint8Array,zn.x448,c);return{ephemeralPublicKey:s,wrappedKey:await Bn(o,h,t)}}default:throw Error("Unsupported ECDH algorithm")}},generate:async function(e){switch(e){case F.publicKey.x25519:{const e=Nt(32),{publicKey:t}=cr.box.keyPair.fromSecretKey(e);return{A:t,k:e}}case F.publicKey.x448:{const e=await O.getNobleCurve(F.publicKey.x448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),k:t}}default:throw Error("Unsupported ECDH algorithm")}},getPayloadSize:function(e){switch(e){case F.publicKey.x25519:return 32;case F.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}},validateParams:async function(e,t,r){switch(e){case F.publicKey.x25519:{const{publicKey:e}=cr.box.keyPair.fromSecretKey(r);return O.equalsUint8Array(t,e)}case F.publicKey.x448:{const e=(await O.getNobleCurve(F.publicKey.x448)).getPublicKey(r);return O.equalsUint8Array(t,e)}default:return!1}}}),qn=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:pi,ecdh:Nn,ecdhX:Gn,ecdsa:Ci,eddsa:kn,eddsaLegacy:mn,generate:async function(e){const t=new pi(e),{oid:r,hash:i,cipher:n}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:O.leftPad(s.privateKey,t.payloadSize),hash:i,cipher:n}},getPreferredHashAlgo:function(e){return gi[e.getName()].hash}});const jn=BigInt(0),Vn=BigInt(1);var Yn=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,i,n,s){const a=BigInt(0);let o,c,h,u;i=Pt(i),n=Pt(n),r=Pt(r),s=Pt(s),r=Dt(r,i),s=Dt(s,n);const l=Dt(Pt(t.subarray(0,Lt(n))),n);for(;;){if(o=Ht(Vn,n),c=Dt(Ut(r,o,i),n),c===a)continue;const e=Dt(s*c,n);if(u=Dt(l+e,n),h=Dt(Qt(o,n)*u,n),h!==a)break}return{r:_t(c,"be",Lt(i)),s:_t(h,"be",Lt(i))}},validateParams:async function(e,t,r,i,n){if(e=Pt(e),t=Pt(t),r=Pt(r),i=Pt(i),r<=Vn||r>=e)return!1;if(Dt(e-Vn,t)!==jn)return!1;if(Ut(r,t,e)!==Vn)return!1;const s=BigInt(Tt(t));if(s<BigInt(150)||!qt(t,null,32))return!1;n=Pt(n);const a=BigInt(2);return i===Ut(r,t*Ht(a<<s-Vn,a<<s)+n,e)},verify:async function(e,t,r,i,n,s,a,o){if(t=Pt(t),r=Pt(r),s=Pt(s),a=Pt(a),n=Pt(n),o=Pt(o),t<=jn||t>=a||r<=jn||r>=a)return O.printDebug("invalid DSA Signature"),!1;const c=Dt(Pt(i.subarray(0,Lt(a))),a),h=Qt(r,a);if(h===jn)return O.printDebug("invalid DSA Signature"),!1;n=Dt(n,s),o=Dt(o,s);const u=Dt(c*h,a),l=Dt(t*h,a);return Dt(Dt(Ut(n,u,s)*Ut(o,l,s),s),a)===t}});const Zn=new Set([F.hash.sha1,F.hash.sha256,F.hash.sha512]),Jn=O.getWebCrypto(),Wn=O.getNodeCrypto();var $n={rsa:nr,elgamal:ar,elliptic:qn,dsa:Yn,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){if(!Zn.has(e))throw Error("Unsupported hash algorithm.");const t=F.read(F.webHash,e),r=Jn||Wn.webcrypto.subtle,i=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),n=await r.exportKey("raw",i);return new Uint8Array(n)},sign:async function(e,t,r){if(!Zn.has(e))throw Error("Unsupported hash algorithm.");const i=F.read(F.webHash,e),n=Jn||Wn.webcrypto.subtle,s=await n.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["sign"]),a=await n.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(e,t,r,i){if(!Zn.has(e))throw Error("Unsupported hash algorithm.");const n=F.read(F.webHash,e),s=Jn||Wn.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["verify"]);return s.verify("HMAC",a,r,i)}})};class Xn{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!O.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return O.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}var es=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(e,t){let r=0;switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case F.publicKey.dsa:case F.publicKey.ecdsa:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const i=O.readMPI(t.subarray(r));return r+=i.length+2,{read:r,signatureParams:{r:e,s:i}}}case F.publicKey.eddsaLegacy:{let e=O.readMPI(t.subarray(r));r+=e.length+2,e=O.leftPad(e,32);let i=O.readMPI(t.subarray(r));return r+=i.length+2,i=O.leftPad(i,32),{read:r,signatureParams:{r:e,s:i}}}case F.publicKey.ed25519:case F.publicKey.ed448:{const i=2*$n.elliptic.eddsa.getPayloadSize(e),n=O.readExactSubarray(t,r,r+i);return r+=n.length,{read:r,signatureParams:{RS:n}}}case F.publicKey.hmac:{const e=new Xn;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}default:throw new ai("Unknown signature algorithm.")}},sign:async function(e,t,r,i,n,s){if(!r||!i)throw Error("Missing key parameters");switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:h,u}=i;return{s:await $n.rsa.sign(t,n,e,a,o,c,h,u,s)}}case F.publicKey.dsa:{const{g:e,p:n,q:a}=r,{x:o}=i;return $n.dsa.sign(t,s,e,n,a,o)}case F.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case F.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=i;return $n.elliptic.ecdsa.sign(e,t,n,a,o,s)}case F.publicKey.eddsaLegacy:{const{oid:e,Q:a}=r,{seed:o}=i;return $n.elliptic.eddsaLegacy.sign(e,t,n,a,o,s)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:a}=r,{seed:o}=i;return $n.elliptic.eddsa.sign(e,t,n,a,o,s)}case F.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=i,n=await $n.hmac.sign(e.getValue(),t,s);return{mac:new Xn(n)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(e,t,r,i,n,s,a){switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.rsaSign:{const{n:e,e:n}=i,o=O.leftPad(r.s,e.length);return $n.rsa.verify(t,s,o,e,n,a)}case F.publicKey.dsa:{const{g:e,p:n,q:s,y:o}=i,{r:c,s:h}=r;return $n.dsa.verify(t,c,h,a,e,n,s,o)}case F.publicKey.ecdsa:{const{oid:e,Q:n}=i,o=new $n.elliptic.CurveWithOID(e).payloadSize,c=O.leftPad(r.r,o),h=O.leftPad(r.s,o);return $n.elliptic.ecdsa.verify(e,t,{r:c,s:h},s,n,a)}case F.publicKey.eddsaLegacy:{const{oid:e,Q:n}=i;return $n.elliptic.eddsaLegacy.verify(e,t,r,s,n,a)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:n}=i;return $n.elliptic.eddsa.verify(e,t,r,s,n,a)}case F.publicKey.hmac:{if(!n)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=i,{keyMaterial:t}=n;return $n.hmac.verify(e.getValue(),t,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class ts{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return O.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class rs{constructor(e){if(e){const{version:t,hash:r,cipher:i,replacementFingerprint:n}=e;this.version=t||1,this.hash=r,this.cipher=i,this.replacementFingerprint=n}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new ai("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const i=t-r+1;this.replacementFingerprint=e.slice(r,r+i),r+=i}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return O.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const is=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=F.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return F.read(e,this.data)}getValue(){return this.data}},ns=is(F.aead),ss=is(F.symmetric),as=is(F.hash);class os{static fromObject({wrappedKey:e,algorithm:t}){const r=new os;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=O.readExactSubarray(e,t,t+r),t+=r}write(){return O.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function cs(e,t){const r=Nt(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await Ie.sha256(r)}}}function hs(e){const{keySize:t}=ce(e);return Nt(t)}function us(e){const t=F.read(F.aead,e);return St[t]}function ls(e){try{e.getName()}catch(e){throw new ai("Unknown curve OID")}}function ys(e,t){switch(e){case F.publicKey.ecdsa:case F.publicKey.ecdh:case F.publicKey.eddsaLegacy:return new $n.elliptic.CurveWithOID(t).payloadSize;case F.publicKey.ed25519:case F.publicKey.ed448:return $n.elliptic.eddsa.getPayloadSize(e);case F.publicKey.x25519:case F.publicKey.x448:return $n.elliptic.ecdhX.getPayloadSize(e);default:throw Error("Unknown elliptic algo")}}var fs=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(e,t,r,i){switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:return $n.rsa.generate(t,65537).then((({n:e,e:t,d:r,p:i,q:n,u:s})=>({privateParams:{d:r,p:i,q:n,u:s},publicParams:{n:e,e:t}})));case F.publicKey.ecdsa:return $n.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new $r(e),Q:t}})));case F.publicKey.eddsaLegacy:return $n.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new $r(e),Q:t}})));case F.publicKey.ecdh:return $n.elliptic.generate(r).then((({oid:e,Q:t,secret:r,hash:i,cipher:n})=>({privateParams:{d:r},publicParams:{oid:new $r(e),Q:t,kdfParams:new rs({hash:i,cipher:n})}})));case F.publicKey.ed25519:case F.publicKey.ed448:return $n.elliptic.eddsa.generate(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case F.publicKey.x25519:case F.publicKey.x448:return $n.elliptic.ecdhX.generate(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case F.publicKey.hmac:return cs(await $n.hmac.generate(i),new as(i));case F.publicKey.aead:return cs(hs(i),new ss(i));case F.publicKey.dsa:case F.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:hs,getAEADMode:us,getCipherParams:ce,getCurvePayloadSize:ys,getPreferredCurveHashAlgo:function(e,t){switch(e){case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:return $n.elliptic.getPreferredHashAlgo(t);case F.publicKey.ed25519:case F.publicKey.ed448:return $n.elliptic.eddsa.getPreferredHashAlgo(e);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(e){const{blockSize:t}=ce(e),r=await Nt(t),i=new Uint8Array([r[r.length-2],r[r.length-1]]);return O.concat([r,i])},parseEncSessionKeyParams:function(e,t){let r=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:return{c:O.readMPI(t.subarray(r))};case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(r));r+=e.length+2;return{c1:e,c2:O.readMPI(t.subarray(r))}}case F.publicKey.ecdh:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const i=new ts;return i.read(t.subarray(r)),{V:e,C:i}}case F.publicKey.x25519:case F.publicKey.x448:{const i=ys(e),n=O.readExactSubarray(t,r,r+i);r+=n.length;const s=new os;return s.read(t.subarray(r)),{ephemeralPublicKey:n,C:s}}case F.publicKey.aead:{const e=new ns;r+=e.read(t.subarray(r));const{ivLength:i}=us(e.getValue()),n=t.subarray(r,r+i);r+=i;const s=new Xn;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:n,c:s}}default:throw new ai("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(e,t,r){let i=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(i));i+=e.length+2;const r=O.readMPI(t.subarray(i));i+=r.length+2;const n=O.readMPI(t.subarray(i));i+=n.length+2;const s=O.readMPI(t.subarray(i));return i+=s.length+2,{read:i,privateParams:{d:e,p:r,q:n,u:s}}}case F.publicKey.dsa:case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(i));return i+=e.length+2,{read:i,privateParams:{x:e}}}case F.publicKey.ecdsa:case F.publicKey.ecdh:{const n=ys(e,r.oid);let s=O.readMPI(t.subarray(i));return i+=s.length+2,s=O.leftPad(s,n),{read:i,privateParams:{d:s}}}case F.publicKey.eddsaLegacy:{const n=ys(e,r.oid);if(r.oid.getName()!==F.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let s=O.readMPI(t.subarray(i));return i+=s.length+2,s=O.leftPad(s,n),{read:i,privateParams:{seed:s}}}case F.publicKey.ed25519:case F.publicKey.ed448:{const r=ys(e),n=O.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{seed:n}}}case F.publicKey.x25519:case F.publicKey.x448:{const r=ys(e),n=O.readExactSubarray(t,i,i+r);return i+=n.length,{read:i,privateParams:{k:n}}}case F.publicKey.hmac:{const{cipher:e}=r,n=Ie.getHashByteLength(e.getValue()),s=t.subarray(i,i+32);i+=32;const a=t.subarray(i,i+n);return i+=n,{read:i,privateParams:{hashSeed:s,keyMaterial:a}}}case F.publicKey.aead:{const{cipher:e}=r,n=t.subarray(i,i+32);i+=32;const{keySize:s}=ce(e.getValue()),a=t.subarray(i,i+s);return i+=s,{read:i,privateParams:{hashSeed:n,keyMaterial:a}}}default:throw new ai("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(e,t){let r=0;switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const i=O.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{n:e,e:i}}}case F.publicKey.dsa:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const i=O.readMPI(t.subarray(r));r+=i.length+2;const n=O.readMPI(t.subarray(r));r+=n.length+2;const s=O.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:i,g:n,y:s}}}case F.publicKey.elgamal:{const e=O.readMPI(t.subarray(r));r+=e.length+2;const i=O.readMPI(t.subarray(r));r+=i.length+2;const n=O.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{p:e,g:i,y:n}}}case F.publicKey.ecdsa:{const e=new $r;r+=e.read(t),ls(e);const i=O.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{oid:e,Q:i}}}case F.publicKey.eddsaLegacy:{const e=new $r;if(r+=e.read(t),ls(e),e.getName()!==F.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let i=O.readMPI(t.subarray(r));return r+=i.length+2,i=O.leftPad(i,33),{read:r,publicParams:{oid:e,Q:i}}}case F.publicKey.ecdh:{const e=new $r;r+=e.read(t),ls(e);const i=O.readMPI(t.subarray(r));r+=i.length+2;const n=new rs;return r+=n.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:i,kdfParams:n}}}case F.publicKey.ed25519:case F.publicKey.ed448:case F.publicKey.x25519:case F.publicKey.x448:{const i=O.readExactSubarray(t,r,r+ys(e));return r+=i.length,{read:r,publicParams:{A:i}}}case F.publicKey.hmac:case F.publicKey.aead:{const e=new ss;r+=e.read(t);const i=Ie.getHashByteLength(F.hash.sha256),n=t.subarray(r,r+i);return r+=i,{read:r,publicParams:{cipher:e,digest:n}}}default:throw new ai("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(e,t,r,i,n,s){switch(e){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:{const{c:e}=i,{n,e:a}=t,{d:o,p:c,q:h,u}=r;return $n.rsa.decrypt(e,n,a,o,c,h,u,s)}case F.publicKey.elgamal:{const{c1:e,c2:n}=i,a=t.p,o=r.x;return $n.elgamal.decrypt(e,n,a,o,s)}case F.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:h}=i;return $n.elliptic.ecdh.decrypt(e,a,c,h.data,s,o,n)}case F.publicKey.x25519:case F.publicKey.x448:{const{A:n}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=i;if(null!==o.algorithm&&!O.isAES(o.algorithm))throw Error("AES session key expected");return $n.elliptic.ecdhX.decrypt(e,a,o.wrappedKey,n,s)}case F.publicKey.aead:{const{cipher:e}=t,n=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=i,h=us(a.getValue());return(await h(n,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(e,t,r,i,n,s){switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await $n.rsa.encrypt(n,e,t)}}case F.publicKey.elgamal:{const{p:e,g:t,y:i}=r;return $n.elgamal.encrypt(n,e,t,i)}case F.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:i}=r,{publicKey:a,wrappedKey:o}=await $n.elliptic.ecdh.encrypt(e,i,n,t,s);return{V:a,C:new ts(o)}}case F.publicKey.x25519:case F.publicKey.x448:{if(t&&!O.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:i}=r,{ephemeralPublicKey:s,wrappedKey:a}=await $n.elliptic.ecdhX.encrypt(e,n,i);return{ephemeralPublicKey:s,C:os.fromObject({algorithm:t,wrappedKey:a})}}case F.publicKey.aead:{if(!i)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=i,a=N.preferredAEADAlgorithm,o=us(N.preferredAEADAlgorithm),{ivLength:c}=o,h=Nt(c),u=await o(t,s),l=await u.encrypt(n,h,new Uint8Array);return{aeadMode:new ns(a),iv:h,c:new Xn(l)}}default:return[]}},serializeParams:function(e,t){const r=new Set([F.publicKey.ed25519,F.publicKey.x25519,F.publicKey.ed448,F.publicKey.x448,F.publicKey.aead,F.publicKey.hmac]),i=Object.keys(t).map((i=>{const n=t[i];return O.isUint8Array(n)?r.has(e)?n:O.uint8ArrayToMPI(n):n.write()}));return O.concatUint8Array(i)},validateParams:async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:{const{n:e,e:i}=t,{d:n,p:s,q:a,u:o}=r;return $n.rsa.validateParams(e,i,n,s,a,o)}case F.publicKey.dsa:{const{p:e,q:i,g:n,y:s}=t,{x:a}=r;return $n.dsa.validateParams(e,i,n,s,a)}case F.publicKey.elgamal:{const{p:e,g:i,y:n}=t,{x:s}=r;return $n.elgamal.validateParams(e,i,n,s)}case F.publicKey.ecdsa:case F.publicKey.ecdh:{const i=$n.elliptic[F.read(F.publicKey,e)],{oid:n,Q:s}=t,{d:a}=r;return i.validateParams(n,s,a)}case F.publicKey.eddsaLegacy:{const{Q:e,oid:i}=t,{seed:n}=r;return $n.elliptic.eddsaLegacy.validateParams(i,e,n)}case F.publicKey.ed25519:case F.publicKey.ed448:{const{A:i}=t,{seed:n}=r;return $n.elliptic.eddsa.validateParams(e,i,n)}case F.publicKey.x25519:case F.publicKey.x448:{const{A:i}=t,{k:n}=r;return $n.elliptic.ecdhX.validateParams(e,i,n)}case F.publicKey.hmac:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r;return Ie.getHashByteLength(e.getValue())===s.length&&O.equalsUint8Array(i,await Ie.sha256(n))}case F.publicKey.aead:{const{cipher:e,digest:i}=t,{hashSeed:n,keyMaterial:s}=r,{keySize:a}=ce(e.getValue());return a===s.length&&O.equalsUint8Array(i,await Ie.sha256(n))}default:throw Error("Unknown public key algorithm.")}}});const gs={cipher:he,hash:Ie,mode:St,publicKey:$n,signature:es,random:Ot,pkcs1:Wt,pkcs5:Un,aesKW:Kn};Object.assign(gs,fs);class ps extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ps),this.name="Argon2OutOfMemoryError"}}let ds,As,ws=2<<19;class ms{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return ws}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){ws=e}static reloadWasmModule(){ds&&(As=ds(),As.catch((()=>{})))}constructor(e=N){const{passes:t,parallelism:r,memoryExponent:i}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=i}generateSalt(){this.salt=gs.random.getRandomBytes(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([F.write(F.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return O.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{ds=ds||(await Promise.resolve().then((function(){return Ky}))).default,As=As||ds();const i=await As,n=i({version:19,type:2,password:O.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>ms.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&ms.reloadWasmModule(),n}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new ps("Could not allocate required memory for Argon2"):e}}}class bs{constructor(e,t=N){this.algorithm=F.hash.sha256,this.type=F.read(F.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=gs.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==O.uint8ArrayToString(e.subarray(t,t+3)))throw new ai("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new ai("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new ai("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...O.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([F.write(F.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return O.concatUint8Array(e)}async produceKey(e,t){e=O.encodeUTF8(e);const r=[];let i=0,n=0;for(;i<t;){let t;switch(this.type){case"simple":t=O.concatUint8Array([new Uint8Array(n),e]);break;case"salted":t=O.concatUint8Array([new Uint8Array(n),this.salt,e]);break;case"iterated":{const r=O.concatUint8Array([this.salt,e]);let i=r.length;const s=Math.max(this.getCount(),i);t=new Uint8Array(n+s),t.set(r,n);for(let e=n+i;e<s;e+=i,i*=2)t.copyWithin(e,n,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await gs.hash.digest(this.algorithm,t);r.push(s),i+=s.length,n++}return O.concatUint8Array(r).subarray(0,t)}}const Es=new Set([F.s2k.argon2,F.s2k.iterated]);function ks(e,t=N){switch(e){case F.s2k.argon2:return new ms(t);case F.s2k.iterated:case F.s2k.gnu:case F.s2k.salted:case F.s2k.simple:return new bs(e,t);default:throw new ai("Unsupported S2K type")}}function vs(e){const{s2kType:t}=e;if(!Es.has(t))throw Error("The provided `config.s2kType` value is not allowed");return ks(t,e)}var Bs=t.createRequire("/");try{Bs("worker_threads").Worker}catch(e){}var Is=Uint8Array,Ss=Uint16Array,Cs=Uint32Array,Ks=new Is([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Ps=new Is([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),Ds=new Is([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),Us=function(e,t){for(var r=new Ss(31),i=0;i<31;++i)r[i]=t+=1<<e[i-1];var n=new Cs(r[30]);for(i=1;i<30;++i)for(var s=r[i];s<r[i+1];++s)n[s]=s-r[i]<<5|i;return[r,n]},xs=Us(Ks,2),Qs=xs[0],Rs=xs[1];Qs[28]=258,Rs[258]=28;for(var Ms=Us(Ps,0),Ts=Ms[0],Ls=Ms[1],_s=new Ss(32768),Fs=0;Fs<32768;++Fs){var Ns=(43690&Fs)>>>1|(21845&Fs)<<1;Ns=(61680&(Ns=(52428&Ns)>>>2|(13107&Ns)<<2))>>>4|(3855&Ns)<<4,_s[Fs]=((65280&Ns)>>>8|(255&Ns)<<8)>>>1}var Hs=function(e,t,r){for(var i=e.length,n=0,s=new Ss(t);n<i;++n)e[n]&&++s[e[n]-1];var a,o=new Ss(t);for(n=0;n<t;++n)o[n]=o[n-1]+s[n-1]<<1;if(r){a=new Ss(1<<t);var c=15-t;for(n=0;n<i;++n)if(e[n])for(var h=n<<4|e[n],u=t-e[n],l=o[e[n]-1]++<<u,y=l|(1<<u)-1;l<=y;++l)a[_s[l]>>>c]=h}else for(a=new Ss(i),n=0;n<i;++n)e[n]&&(a[n]=_s[o[e[n]-1]++]>>>15-e[n]);return a},Os=new Is(288);for(Fs=0;Fs<144;++Fs)Os[Fs]=8;for(Fs=144;Fs<256;++Fs)Os[Fs]=9;for(Fs=256;Fs<280;++Fs)Os[Fs]=7;for(Fs=280;Fs<288;++Fs)Os[Fs]=8;var zs=new Is(32);for(Fs=0;Fs<32;++Fs)zs[Fs]=5;var Gs=/*#__PURE__*/Hs(Os,9,0),qs=/*#__PURE__*/Hs(Os,9,1),js=/*#__PURE__*/Hs(zs,5,0),Vs=/*#__PURE__*/Hs(zs,5,1),Ys=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},Zs=function(e,t,r){var i=t/8|0;return(e[i]|e[i+1]<<8)>>(7&t)&r},Js=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},Ws=function(e){return(e+7)/8|0},$s=function(e,t,r){(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length);var i=new(2==e.BYTES_PER_ELEMENT?Ss:4==e.BYTES_PER_ELEMENT?Cs:Is)(r-t);return i.set(e.subarray(t,r)),i},Xs=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],ea=function(e,t,r){var i=Error(t||Xs[e]);if(i.code=e,Error.captureStackTrace&&Error.captureStackTrace(i,ea),!r)throw i;return i},ta=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8},ra=function(e,t,r){r<<=7&t;var i=t/8|0;e[i]|=r,e[i+1]|=r>>>8,e[i+2]|=r>>>16},ia=function(e,t){for(var r=[],i=0;i<e.length;++i)e[i]&&r.push({s:i,f:e[i]});var n=r.length,s=r.slice();if(!n)return[ua,0];if(1==n){var a=new Is(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=n-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var y=s[0].s;for(i=1;i<n;++i)s[i].s>y&&(y=s[i].s);var f=new Ss(y+1),g=na(r[u-1],f,0);if(g>t){i=0;var p=0,d=g-t,A=1<<d;for(s.sort((function(e,t){return f[t.s]-f[e.s]||e.f-t.f}));i<n;++i){var w=s[i].s;if(!(f[w]>t))break;p+=A-(1<<g-f[w]),f[w]=t}for(p>>>=d;p>0;){var m=s[i].s;f[m]<t?p-=1<<t-f[m]++-1:++i}for(;i>=0&&p;--i){var b=s[i].s;f[b]==t&&(--f[b],++p)}g=t}return[new Is(f),g]},na=function(e,t,r){return-1==e.s?Math.max(na(e.l,t,r+1),na(e.r,t,r+1)):t[e.s]=r},sa=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new Ss(++t),i=0,n=e[0],s=1,a=function(e){r[i++]=e},o=1;o<=t;++o)if(e[o]==n&&o!=t)++s;else{if(!n&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(n),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(n);s=1,n=e[o]}return[r.subarray(0,i),t]},aa=function(e,t){for(var r=0,i=0;i<t.length;++i)r+=e[i]*t[i];return r},oa=function(e,t,r){var i=r.length,n=Ws(t+2);e[n]=255&i,e[n+1]=i>>>8,e[n+2]=255^e[n],e[n+3]=255^e[n+1];for(var s=0;s<i;++s)e[n+s+4]=r[s];return 8*(n+4+i)},ca=function(e,t,r,i,n,s,a,o,c,h,u){ta(t,u++,r),++n[256];for(var l=ia(n,15),y=l[0],f=l[1],g=ia(s,15),p=g[0],d=g[1],A=sa(y),w=A[0],m=A[1],b=sa(p),E=b[0],k=b[1],v=new Ss(19),B=0;B<w.length;++B)v[31&w[B]]++;for(B=0;B<E.length;++B)v[31&E[B]]++;for(var I=ia(v,7),S=I[0],C=I[1],K=19;K>4&&!S[Ds[K-1]];--K);var P,D,U,x,Q=h+5<<3,R=aa(n,Os)+aa(s,zs)+a,M=aa(n,y)+aa(s,p)+a+14+3*K+aa(v,S)+(2*v[16]+3*v[17]+7*v[18]);if(Q<=R&&Q<=M)return oa(t,u,e.subarray(c,c+h));if(ta(t,u,1+(M<R)),u+=2,M<R){P=Hs(y,f,0),D=y,U=Hs(p,d,0),x=p;var T=Hs(S,C,0);ta(t,u,m-257),ta(t,u+5,k-1),ta(t,u+10,K-4),u+=14;for(B=0;B<K;++B)ta(t,u+3*B,S[Ds[B]]);u+=3*K;for(var L=[w,E],_=0;_<2;++_){var F=L[_];for(B=0;B<F.length;++B){var N=31&F[B];ta(t,u,T[N]),u+=S[N],N>15&&(ta(t,u,F[B]>>>5&127),u+=F[B]>>>12)}}}else P=Gs,D=Os,U=js,x=zs;for(B=0;B<o;++B)if(i[B]>255){N=i[B]>>>18&31;ra(t,u,P[N+257]),u+=D[N+257],N>7&&(ta(t,u,i[B]>>>23&31),u+=Ks[N]);var H=31&i[B];ra(t,u,U[H]),u+=x[H],H>3&&(ra(t,u,i[B]>>>5&8191),u+=Ps[H])}else ra(t,u,P[i[B]]),u+=D[i[B]];return ra(t,u,P[256]),u+D[256]},ha=/*#__PURE__*/new Cs([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),ua=/*#__PURE__*/new Is(0),la=function(e,t,r,i,n){return function(e,t,r,i,n,s){var a=e.length,o=new Is(i+a+5*(1+Math.ceil(a/7e3))+n),c=o.subarray(i,o.length-n),h=0;if(!t||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=oa(c,h+1,e.subarray(u,l))}else{for(var y=ha[t-1],f=y>>>13,g=8191&y,p=(1<<r)-1,d=new Ss(32768),A=new Ss(p+1),w=Math.ceil(r/3),m=2*w,b=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<m)&p},E=new Cs(25e3),k=new Ss(288),v=new Ss(32),B=0,I=0,S=(u=0,0),C=0,K=0;u<a;++u){var P=b(u),D=32767&u,U=A[P];if(d[D]=U,A[P]=D,C<=u){var x=a-u;if((B>7e3||S>24576)&&x>423){h=ca(e,c,0,E,k,v,I,S,K,u-K,h),S=B=I=0,K=u;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)v[Q]=0}var R=2,M=0,T=g,L=D-U&32767;if(x>2&&P==b(u-L))for(var _=Math.min(f,x)-1,F=Math.min(32767,u),N=Math.min(258,x);L<=F&&--T&&D!=U;){if(e[u+R]==e[u+R-L]){for(var H=0;H<N&&e[u+H]==e[u+H-L];++H);if(H>R){if(R=H,M=L,H>_)break;var O=Math.min(L,H-2),z=0;for(Q=0;Q<O;++Q){var G=u-L+Q+32768&32767,q=G-d[G]+32768&32767;q>z&&(z=q,U=G)}}}L+=(D=U)-(U=d[D])+32768&32767}if(M){E[S++]=268435456|Rs[R]<<18|Ls[M];var j=31&Rs[R],V=31&Ls[M];I+=Ks[j]+Ps[V],++k[257+j],++v[V],C=u+R,++B}else E[S++]=e[u],++k[e[u]]}}h=ca(e,c,s,E,k,v,I,S,K,u-K,h),!s&&7&h&&(h=oa(c,h+1,ua))}return $s(o,0,i+Ws(h)+n)}(e,null==t.level?6:t.level,null==t.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):12+t.mem,r,i,!n)},ya=/*#__PURE__*/function(){function e(e,t){t||"function"!=typeof e||(t=e,e={}),this.ondata=t,this.o=e||{}}return e.prototype.p=function(e,t){this.ondata(la(e,this.o,0,0,!t),t)},e.prototype.push=function(e,t){this.ondata||ea(5),this.d&&ea(4),this.d=t,this.p(e,t||!1)},e}(),fa=/*#__PURE__*/function(){function e(e){this.s={},this.p=new Is(0),this.ondata=e}return e.prototype.e=function(e){this.ondata||ea(5),this.d&&ea(4);var t=this.p.length,r=new Is(t+e.length);r.set(this.p),r.set(e,t),this.p=r},e.prototype.c=function(e){this.d=this.s.i=e||!1;var t=this.s.b,r=function(e,t,r){var i=e.length;if(!i||r&&r.f&&!r.l)return t||new Is(0);var n=!t||r,s=!r||r.i;r||(r={}),t||(t=new Is(3*i));var a=function(e){var r=t.length;if(e>r){var i=new Is(Math.max(2*r,e));i.set(t),t=i}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,y=r.m,f=r.n,g=8*i;do{if(!u){o=Zs(e,c,1);var p=Zs(e,c+1,3);if(c+=3,!p){var d=e[(C=Ws(c)+4)-4]|e[C-3]<<8,A=C+d;if(A>i){s&&ea(0);break}n&&a(h+d),t.set(e.subarray(C,A),h),r.b=h+=d,r.p=c=8*A,r.f=o;continue}if(1==p)u=qs,l=Vs,y=9,f=5;else if(2==p){var w=Zs(e,c,31)+257,m=Zs(e,c+10,15)+4,b=w+Zs(e,c+5,31)+1;c+=14;for(var E=new Is(b),k=new Is(19),v=0;v<m;++v)k[Ds[v]]=Zs(e,c+3*v,7);c+=3*m;var B=Ys(k),I=(1<<B)-1,S=Hs(k,B,1);for(v=0;v<b;){var C,K=S[Zs(e,c,I)];if(c+=15&K,(C=K>>>4)<16)E[v++]=C;else{var P=0,D=0;for(16==C?(D=3+Zs(e,c,3),c+=2,P=E[v-1]):17==C?(D=3+Zs(e,c,7),c+=3):18==C&&(D=11+Zs(e,c,127),c+=7);D--;)E[v++]=P}}var U=E.subarray(0,w),x=E.subarray(w);y=Ys(U),f=Ys(x),u=Hs(U,y,1),l=Hs(x,f,1)}else ea(1);if(c>g){s&&ea(0);break}}n&&a(h+131072);for(var Q=(1<<y)-1,R=(1<<f)-1,M=c;;M=c){var T=(P=u[Js(e,c)&Q])>>>4;if((c+=15&P)>g){s&&ea(0);break}if(P||ea(2),T<256)t[h++]=T;else{if(256==T){M=c,u=null;break}var L=T-254;if(T>264){var _=Ks[v=T-257];L=Zs(e,c,(1<<_)-1)+Qs[v],c+=_}var F=l[Js(e,c)&R],N=F>>>4;if(F||ea(3),c+=15&F,x=Ts[N],N>3&&(_=Ps[N],x+=Js(e,c)&(1<<_)-1,c+=_),c>g){s&&ea(0);break}n&&a(h+131072);for(var H=h+L;h<H;h+=4)t[h]=t[h-x],t[h+1]=t[h+1-x],t[h+2]=t[h+2-x],t[h+3]=t[h+3-x];h=H}}r.l=u,r.p=M,r.b=h,r.f=o,u&&(o=1,r.m=y,r.d=l,r.n=f)}while(!o);return h==t.length?t:$s(t,0,h)}(this.p,this.o,this.s);this.ondata($s(r,t,this.s.b),this.d),this.o=$s(r,this.s.b-32768),this.s.b=this.o.length,this.p=$s(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),ga=/*#__PURE__*/function(){function e(e,t){var r,i;this.c=(r=1,i=0,{p:function(e){for(var t=r,n=i,s=0|e.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)n+=t+=e[a];t=(65535&t)+15*(t>>16),n=(65535&n)+15*(n>>16)}r=t,i=n},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(i%=65521))<<8|i>>>8}}),this.v=1,ya.call(this,e,t)}return e.prototype.push=function(e,t){ya.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){this.c.p(e);var r=la(e,this.o,this.v&&2,t&&4,!t);this.v&&(function(e,t){var r=t.level,i=0==r?0:r<6?1:9==r?3:2;e[0]=120,e[1]=i<<6|(i?32-2*i:1)}(r,this.o),this.v=0),t&&function(e,t,r){for(;r;++t)e[t]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,t)},e}(),pa=/*#__PURE__*/function(){function e(e){this.v=1,fa.call(this,e)}return e.prototype.push=function(e,t){if(fa.prototype.e.call(this,e),this.v){if(this.p.length<2&&!t)return;this.p=this.p.subarray(2),this.v=0}t&&(this.p.length<4&&ea(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),fa.prototype.c.call(this,t)},e}(),da="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{da.decode(ua,{stream:!0}),1}catch(e){}var Aa=[0,1,3,7,15,31,63,127,255],wa=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};wa.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},wa.prototype.read=function(e){for(var t=0;e>0;){this._ensureByte();var r=8-this.bitOffset;if(e>=r)t<<=r,t|=Aa[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,e-=r;else{t<<=e;var i=r-e;t|=(this.curByte&Aa[e]<<i)>>i,this.bitOffset+=e,e=0}}return t},wa.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},wa.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)};var ma=wa,ba=function(){};ba.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},ba.prototype.read=function(e,t,r){for(var i=0;i<r;){var n=this.readByte();if(n<0)return 0===i?-1:i;e[t++]=n,i++}return i},ba.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},ba.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},ba.prototype.write=function(e,t,r){var i;for(i=0;i<r;i++)this.writeByte(e[t++]);return r},ba.prototype.flush=function(){};var Ea,ka=ba,va=(Ea=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var e=4294967295;this.getCRC=function(){return~e>>>0},this.updateCRC=function(t){e=e<<8^Ea[255&(e>>>24^t)]},this.updateCRCRun=function(t,r){for(;r-- >0;)e=e<<8^Ea[255&(e>>>24^t)]}}),Ba=ma,Ia=ka,Sa=va,Ca=function(e,t){var r,i=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=i,i},Ka={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},Pa={};Pa[Ka.LAST_BLOCK]="Bad file checksum",Pa[Ka.NOT_BZIP_DATA]="Not bzip data",Pa[Ka.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",Pa[Ka.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",Pa[Ka.DATA_ERROR]="Data error",Pa[Ka.OUT_OF_MEMORY]="Out of memory",Pa[Ka.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var Da=function(e,t){var r=Pa[e]||"unknown error";t&&(r+=": "+t);var i=new TypeError(r);throw i.errorCode=e,i},Ua=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};Ua.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new Sa,!0):(this.writeCount=-1,!1)},Ua.prototype._start_bunzip=function(e,t){var r=new Uint8Array(4);4===e.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||Da(Ka.NOT_BZIP_DATA,"bad magic");var i=r[3]-48;(i<1||i>9)&&Da(Ka.NOT_BZIP_DATA,"level out of range"),this.reader=new Ba(e),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=t,this.streamCRC=0},Ua.prototype._get_next_block=function(){var e,t,r,i=this.reader,n=i.pi();if("177245385090"===n)return!1;"314159265359"!==n&&Da(Ka.NOT_BZIP_DATA),this.targetBlockCRC=i.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,i.read(1)&&Da(Ka.OBSOLETE_INPUT);var s=i.read(24);s>this.dbufSize&&Da(Ka.DATA_ERROR,"initial position out of bounds");var a=i.read(16),o=new Uint8Array(256),c=0;for(e=0;e<16;e++)if(a&1<<15-e){var h=16*e;for(r=i.read(16),t=0;t<16;t++)r&1<<15-t&&(o[c++]=h+t)}var u=i.read(3);(u<2||u>6)&&Da(Ka.DATA_ERROR);var l=i.read(15);0===l&&Da(Ka.DATA_ERROR);var y=new Uint8Array(256);for(e=0;e<u;e++)y[e]=e;var f=new Uint8Array(l);for(e=0;e<l;e++){for(t=0;i.read(1);t++)t>=u&&Da(Ka.DATA_ERROR);f[e]=Ca(y,t)}var g,p=c+2,d=[];for(t=0;t<u;t++){var A,w,m=new Uint8Array(p),b=new Uint16Array(21);for(a=i.read(5),e=0;e<p;e++){for(;(a<1||a>20)&&Da(Ka.DATA_ERROR),i.read(1);)i.read(1)?a--:a++;m[e]=a}for(A=w=m[0],e=1;e<p;e++)m[e]>w?w=m[e]:m[e]<A&&(A=m[e]);g={},d.push(g),g.permute=new Uint16Array(258),g.limit=new Uint32Array(22),g.base=new Uint32Array(21),g.minLen=A,g.maxLen=w;var E=0;for(e=A;e<=w;e++)for(b[e]=g.limit[e]=0,a=0;a<p;a++)m[a]===e&&(g.permute[E++]=a);for(e=0;e<p;e++)b[m[e]]++;for(E=a=0,e=A;e<w;e++)E+=b[e],g.limit[e]=E-1,E<<=1,a+=b[e],g.base[e+1]=E-a;g.limit[w+1]=Number.MAX_VALUE,g.limit[w]=E+b[w]-1,g.base[A]=0}var k=new Uint32Array(256);for(e=0;e<256;e++)y[e]=e;var v,B=0,I=0,S=0,C=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,S>=l&&Da(Ka.DATA_ERROR),g=d[f[S++]]),e=g.minLen,t=i.read(e);e>g.maxLen&&Da(Ka.DATA_ERROR),!(t<=g.limit[e]);e++)t=t<<1|i.read(1);((t-=g.base[e])<0||t>=258)&&Da(Ka.DATA_ERROR);var K=g.permute[t];if(0!==K&&1!==K){if(B)for(B=0,I+a>this.dbufSize&&Da(Ka.DATA_ERROR),k[v=o[y[0]]]+=a;a--;)C[I++]=v;if(K>c)break;I>=this.dbufSize&&Da(Ka.DATA_ERROR),k[v=o[v=Ca(y,e=K-1)]]++,C[I++]=v}else B||(B=1,a=0),a+=0===K?B:2*B,B<<=1}for((s<0||s>=I)&&Da(Ka.DATA_ERROR),t=0,e=0;e<256;e++)r=t+k[e],k[e]=t,t=r;for(e=0;e<I;e++)C[k[v=255&C[e]]]|=e<<8,k[v]++;var P=0,D=0,U=0;return I&&(D=255&(P=C[s]),P>>=8,U=-1),this.writePos=P,this.writeCurrent=D,this.writeCount=I,this.writeRun=U,!0},Ua.prototype._read_bunzip=function(e,t){var r,i,n;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,i=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,n=i,o=-1):(r=1,n=o),this.blockCRC.updateCRCRun(n,r);r--;)this.outputStream.writeByte(n),this.nextoutput++;o!=i&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&Da(Ka.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var xa=function(e){if("readByte"in e)return e;var t=new Ia;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},Qa=function(e){var t=new Ia,r=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),r=!1;else{if("writeByte"in e)return e;t.buffer=e,r=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(r&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};var Ra=function(e,t,r){for(var i=xa(e),n=Qa(t),s=new Ua(i,n);!("eof"in i)||!i.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&Da(Ka.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in i)||i.eof())break;s._start_bunzip(i,n)}if("getBuffer"in n)return n.getBuffer()};class Ma{static get tag(){return F.packet.literalData}constructor(e=new Date){this.format=F.literal.utf8,this.date=O.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=F.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||O.isStream(this.text))&&(this.text=O.decodeUTF8(O.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=O.canonicalizeEOL(O.encodeUTF8(this.text))),e?D(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await K(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=O.decodeUTF8(await e.readBytes(r)),this.date=O.readDate(await e.readBytes(4));let i=e.remainder();y(i)&&(i=await Q(i)),this.setBytes(i,t)}))}writeHeader(){const e=O.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),i=O.writeDate(this.date);return O.concatUint8Array([r,t,e,i])}write(){const e=this.writeHeader(),t=this.getBytes();return O.concat([e,t])}}class Ta{constructor(){this.bytes=""}read(e){return this.bytes=O.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return O.stringToUint8Array(this.bytes)}toHex(){return O.uint8ArrayToHex(O.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new Ta;return t.read(O.hexToUint8Array(e)),t}static wildcard(){const e=new Ta;return e.read(new Uint8Array(8)),e}}const La=Symbol("verified"),_a="salt@notations.openpgpjs.org",Fa=new Set([F.signatureSubpacket.issuerKeyID,F.signatureSubpacket.issuerFingerprint,F.signatureSubpacket.embeddedSignature]);class Na{static get tag(){return F.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.unknownSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Ta,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[La]=null}read(e,t=N){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new ai("Support for v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4!==this.version&&5!==this.version&&6!==this.version)throw new ai(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[r++],this.publicKeyAlgorithm=e[r++],this.hashAlgorithm=e[r++],r+=this.readSubPackets(e.subarray(r,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,r),r+=this.readSubPackets(e.subarray(r,e.length),!1),this.signedHashValue=e.subarray(r,r+2),r+=2,6===this.version){const t=e[r++];this.salt=e.subarray(r,r+t),r+=t}const i=e.subarray(r,e.length),{read:n,signatureParams:s}=gs.signature.parseSignatureParams(this.publicKeyAlgorithm,i);if(n<i.length)throw Error("Error reading MPIs");this.params=s}writeParams(){return this.params instanceof Promise?M((async()=>gs.serializeParams(this.publicKeyAlgorithm,await this.params))):gs.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),O.concat(e)}async sign(e,t,r=new Date,i=!1,n){this.version=e.version,this.created=O.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Oa(this.hashAlgorithm);if(null===this.salt)this.salt=gs.random.getRandomBytes(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(n.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===_a)).length)throw Error("Unexpected existing salt notation");{const e=gs.random.getRandomBytes(Oa(this.hashAlgorithm));this.rawNotations.push({name:_a,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=O.concat(s);const a=this.toHash(this.signatureType,t,i),o=await this.hash(this.signatureType,t,a,i);this.signedHashValue=x(P(o),0,2);const c=async()=>gs.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await Q(o));O.isStream(o)?this.params=c():(this.params=await c(),this[La]=!0)}writeHashedSubPackets(){const e=F.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(Ha(e.signatureCreationTime,!0,O.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(Ha(e.signatureExpirationTime,!0,O.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(Ha(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(Ha(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(Ha(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(Ha(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(Ha(e.keyExpirationTime,!0,O.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(Ha(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=O.concat([r,this.revocationKeyFingerprint]),t.push(Ha(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(Ha(e.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:i,value:n,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=O.encodeUTF8(i);r.push(O.writeNumber(o.length,2)),r.push(O.writeNumber(n.length,2)),r.push(o),r.push(n),r=O.concat(r),t.push(Ha(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(Ha(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(Ha(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyServerPreferences)),t.push(Ha(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(Ha(e.preferredKeyServer,!1,O.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(Ha(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(Ha(e.policyURI,!1,O.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.keyFlags)),t.push(Ha(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(Ha(e.signersUserID,!1,O.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=O.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(Ha(e.reasonForRevocation,!0,r))),null!==this.features&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.features)),t.push(Ha(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(O.stringToUint8Array(this.signatureTargetHash)),r=O.concat(r),t.push(Ha(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(Ha(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=O.concat(r),t.push(Ha(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=O.stringToUint8Array(O.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(Ha(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(Ha(e.preferredCipherSuites,!1,r)));const i=O.concat(t),n=O.writeNumber(i.length,6===this.version?4:2);return O.concat([n,i])}writeUnhashedSubPackets(){const e=this.unhashedSubpackets.map((({type:e,critical:t,body:r})=>Ha(e,t,r))),t=O.concat(e),r=O.writeNumber(t.length,6===this.version?4:2);return O.concat([r,t])}readSubPacket(e,t=!0){let r=0;const i=!!(128&e[r]),n=127&e[r];if(r++,t||(this.unhashedSubpackets.push({type:n,critical:i,body:e.subarray(r,e.length)}),Fa.has(n)))switch(n){case F.signatureSubpacket.signatureCreationTime:this.created=O.readDate(e.subarray(r,e.length));break;case F.signatureSubpacket.signatureExpirationTime:{const t=O.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case F.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case F.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case F.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case F.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case F.signatureSubpacket.keyExpirationTime:{const t=O.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case F.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case F.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case F.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const n=O.readNumber(e.subarray(r,r+2));r+=2;const s=O.readNumber(e.subarray(r,r+2));r+=2;const a=O.decodeUTF8(e.subarray(r,r+n)),o=e.subarray(r+n,r+n+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:i}),t&&(this.notations[a]=O.decodeUTF8(o));break}case F.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case F.signatureSubpacket.policyURI:this.policyURI=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.signersUserID:this.signersUserID=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=O.decodeUTF8(e.subarray(r,e.length));break;case F.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=gs.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=O.uint8ArrayToString(e.subarray(r,r+t));break}case F.signatureSubpacket.embeddedSignature:this.embeddedSignature=new Na,this.embeddedSignature.read(e.subarray(r,e.length));break;case F.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case F.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case F.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:this.unknownSubpackets.push({type:n,critical:i,body:e.subarray(r,e.length)})}}readSubPackets(e,t=!0,r){const i=6===this.version?4:2,n=O.readNumber(e.subarray(0,i));let s=i;for(;s<2+n;){const i=Xr(e.subarray(s,e.length));s+=i.offset,this.readSubPacket(e.subarray(s,s+i.len),t,r),s+=i.len}return s}toSign(e,t){const r=F.signature;switch(e){case r.binary:return null!==t.text?O.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return O.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,i;if(t.userID)i=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");i=209,e=t.userAttribute}const n=e.write();return O.concat([this.toSign(r.key,t),new Uint8Array([i]),O.writeNumber(n.length,4),n])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return O.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return S(P(this.signatureData),(e=>{r+=e.length}),(()=>{const i=[];return 5!==this.version||this.signatureType!==F.signature.binary&&this.signatureType!==F.signature.text||(t?i.push(new Uint8Array(6)):i.push(e.writeHeader())),i.push(new Uint8Array([this.version,255])),5===this.version&&i.push(new Uint8Array(4)),i.push(O.writeNumber(r,4)),O.concat(i)}))}toHash(e,t,r=!1){const i=this.toSign(e,t);return O.concat([this.salt||new Uint8Array,i,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,i=!1){if(6===this.version&&this.salt.length!==Oa(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,i)),gs.hash.digest(this.hashAlgorithm,r)}async verify(e,t,r,i=new Date,n=!1,s=N){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===F.signature.binary||t===F.signature.text;if(!(this[La]&&!a)){let i,s;if(this.hashed?s=await this.hashed:(i=this.toHash(t,r,n),s=await this.hash(t,r,i)),s=await Q(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===F.publicKey.hmac?e.privateParams:null;if(this[La]=await gs.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,i,s),!this[La])throw Error("Signature verification failed")}const o=O.normalizeDate(i);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+F.read(F.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[F.signature.binary,F.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+F.read(F.hash,this.hashAlgorithm).toUpperCase());if(this.unknownSubpackets.forEach((({type:e,critical:t})=>{if(t)throw Error("Unknown critical signature subpacket type "+e)})),this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=O.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ha(e,t,r){const i=[];return i.push(ei(r.length+1)),i.push(new Uint8Array([(t?128:0)|e])),i.push(r),O.concat(i)}function Oa(e){switch(e){case F.hash.sha256:return 16;case F.hash.sha384:return 24;case F.hash.sha512:return 32;case F.hash.sha224:case F.hash.sha3_256:return 16;case F.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class za{static get tag(){return F.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new za;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ai(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new Ta,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Ta,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),O.concatUint8Array(e)}calculateTrailer(...e){return M((async()=>Na.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==F.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!O.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!O.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function Ga(e,t){if(!t[e]){let t;try{t=F.read(F.packet,e)}catch(t){throw new oi("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}za.prototype.hash=Na.prototype.hash,za.prototype.toHash=Na.prototype.toHash,za.prototype.toSign=Na.prototype.toSign;class qa extends Array{static async fromBinary(e,t,r=N){const i=new qa;return await i.read(e,t,r),i}async read(e,t,r=N){r.additionalAllowedPackets.length&&(t={...t,...O.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=C(e,(async(e,i)=>{const n=L(i);try{for(;;){await n.ready;if(await si(e,(async e=>{try{if(e.tag===F.packet.marker||e.tag===F.packet.trust||e.tag===F.packet.padding)return;const i=Ga(e.tag,t);i.packets=new qa,i.fromStream=O.isStream(e.packet),await i.read(e.packet,r),await n.write(i)}catch(t){if(t instanceof oi){if(!(e.tag<=39))return;await n.abort(t)}const i=!r.ignoreUnsupportedPackets&&t instanceof ai,s=!(r.ignoreMalformedPackets||t instanceof ai);if(i||s||ni(e.tag))await n.abort(t);else{const t=new ci(e.tag,e.packet);await n.write(t)}O.printDebugError(t)}})))return await n.ready,void await n.close()}}catch(e){await n.abort(e)}}));const i=T(this.stream);for(;;){const{done:e,value:t}=await i.read();if(e?this.stream=null:this.push(t),e||ni(t.constructor.tag))break}i.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ci?this[t].tag:this[t].constructor.tag,i=this[t].write();if(O.isStream(i)&&ni(this[t].constructor.tag)){let t=[],n=0;const s=512;e.push(ri(r)),e.push(S(i,(e=>{if(t.push(e),n+=e.length,n>=s){const e=Math.min(Math.log(n)/Math.LN2|0,30),r=2**e,i=O.concat([ti(e)].concat(t));return t=[i.subarray(1+r)],n=t[0].length,i.subarray(0,1+r)}}),(()=>O.concat([ei(n)].concat(t)))))}else{if(O.isStream(i)){let t=0;e.push(S(P(i),(e=>{t+=e.length}),(()=>ii(r,t))))}else e.push(ii(r,i.length));e.push(i)}}return O.concat(e)}filterByTag(...e){const t=new qa,r=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(r(this[i].constructor.tag))&&t.push(this[i]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,i=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(i(r[n].constructor.tag))&&t.push(n);return t}}const ja=/*#__PURE__*/O.constructAllowedPackets([Ma,za,Na]);class Va{static get tag(){return F.packet.compressedData}constructor(e=N){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=N){await K(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),O.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=N){const t=F.read(F.compression,this.algorithm),r=$a[t];if(!r)throw Error(t+" decompression not supported");this.packets=await qa.fromBinary(r(this.compressed),ja,e)}compress(){const e=F.read(F.compression,this.algorithm),t=Wa[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function Ya(e,t){return r=>{if(!O.isStream(r)||y(r))return M((()=>Q(r).then((e=>new Promise(((r,i)=>{const n=new t;n.ondata=e=>{r(e)};try{n.push(e,!0)}catch(e){i(e)}}))))));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const i=r.getReader(),n=new t;return new ReadableStream({async start(e){for(n.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await i.read();if(e)return void n.push(new Uint8Array,!0);t.length&&n.push(t)}}})}}function Za(e){return function(t){return M((async()=>e(await Q(t))))}}const Ja=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),Wa={zip:/*#__PURE__*/Ya(Ja("deflate-raw").compressor,ya),zlib:/*#__PURE__*/Ya(Ja("deflate").compressor,ga)},$a={uncompressed:e=>e,zip:/*#__PURE__*/Ya(Ja("deflate-raw").decompressor,fa),zlib:/*#__PURE__*/Ya(Ja("deflate").decompressor,pa),bzip2:/*#__PURE__*/Za(Ra)},Xa=/*#__PURE__*/O.constructAllowedPackets([Ma,Va,za,Na]);class eo{static get tag(){return F.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new eo;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await K(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new ai(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):O.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=N){let i=this.packets.write();if(y(i)&&(i=await Q(i)),2===this.version)this.cipherAlgorithm=e,this.salt=gs.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await to(this,"encrypt",t,i);else{const{blockSize:n}=gs.getCipherParams(e),s=await gs.getPrefixRandom(e),a=new Uint8Array([211,20]),o=O.concat([s,i,a]),c=await gs.hash.sha1(D(o)),h=O.concat([o,c]);this.encrypted=await gs.mode.cfb.encrypt(e,t,h,new Uint8Array(n),r)}return!0}async decrypt(e,t,r=N){let i,n=P(this.encrypted);if(y(n)&&(n=await Q(n)),2===this.version)i=await to(this,"decrypt",t,n);else{const{blockSize:s}=gs.getCipherParams(e),a=await gs.mode.cfb.decrypt(e,t,n,new Uint8Array(s)),o=x(D(a),-20),c=x(a,0,-20),h=Promise.all([Q(await gs.hash.sha1(D(c))),Q(o)]).then((([e,t])=>{if(!O.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),u=x(c,s+2);i=x(u,0,-2),i=k([i,M((()=>h))]),O.isStream(n)&&r.allowUnauthenticatedStream||(i=await Q(i))}return this.packets=await qa.fromBinary(i,Xa,r),!0}}async function to(e,t,r,i){const n=e instanceof eo&&2===e.version,s=!n&&e.constructor.tag===F.packet.aeadEncryptedData;if(!n&&!s)throw Error("Unexpected packet type");const a=gs.getAEADMode(e.aeadAlgorithm),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,h=2**(e.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),y=new Uint8Array(l,0,5+u),f=new Uint8Array(l),g=new DataView(l),p=new Uint8Array(l,5,8);y.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,A,w=0,m=Promise.resolve(),b=0,E=0;if(n){const{keySize:t}=gs.getCipherParams(e.cipherAlgorithm),{ivLength:i}=a,n=new Uint8Array(l,0,5),s=await On(F.hash.sha256,r,e.salt,n,t+i);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),A=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const k=await a(e.cipherAlgorithm,r);return C(i,(async(r,i)=>{if("array"!==O.isStream(r)){const t=new TransformStream({},{highWaterMark:O.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});v(t.readable,i),i=t.writable}const s=T(r),a=L(i);try{for(;;){let e=await s.readBytes(h+o)||new Uint8Array;const r=e.subarray(e.length-o);let i,l,v;if(e=e.subarray(0,e.length-o),n)v=d;else{v=d.slice();for(let e=0;e<8;e++)v[d.length-8+e]^=p[e]}if(!w||e.length?(s.unshift(r),i=k[t](e,v,y),i.catch((()=>{})),E+=e.length-o+c):(g.setInt32(5+u+4,b),i=k[t](r,v,f),i.catch((()=>{})),E+=c,l=!0),b+=e.length-o,m=m.then((()=>i)).then((async e=>{await a.ready,await a.write(e),E-=e.length})).catch((e=>a.abort(e))),(l||E>a.desiredSize)&&await m,l){await a.close();break}n?A.setInt32(d.length-4,++w):g.setInt32(9,++w)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const ro=/*#__PURE__*/O.constructAllowedPackets([Ma,Va,za,Na]);class io{static get tag(){return F.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=F.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await K(e,(async e=>{const t=await e.readByte();if(1!==t)throw new ai(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=gs.getAEADMode(this.aeadAlgorithm);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return O.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=N){this.packets=await qa.fromBinary(await to(this,"decrypt",t,P(this.encrypted)),ro,r)}async encrypt(e,t,r=N){this.cipherAlgorithm=e;const{ivLength:i}=gs.getAEADMode(this.aeadAlgorithm);this.iv=gs.random.getRandomBytes(i),this.chunkSizeByte=r.aeadChunkSizeByte;const n=this.packets.write();this.encrypted=await to(this,"encrypt",t,n)}}class no{static get tag(){return F.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Ta,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:i,sessionKeyAlgorithm:n}){const s=new no;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?Ta.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=i,s.sessionKeyAlgorithm=n,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new ai(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const i=r-1;this.publicKeyFingerprint=e.subarray(t,t+i),t+=i,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Ta.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=gs.parseEncSessionKeyParams(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===F.publicKey.x25519||this.publicKeyAlgorithm===F.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=F.write(F.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),gs.serializeParams(this.publicKeyAlgorithm,this.encrypted)),O.concatUint8Array(e)}async encrypt(e){const t=F.write(F.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,i=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),n=so(this.version,t,r,this.sessionKey),s=t===F.publicKey.aead?e.privateParams:null;this.encrypted=await gs.publicKeyEncrypt(t,r,e.publicParams,s,n,i)}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?so(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,i=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),n=await gs.publicKeyDecrypt(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,i,r),{sessionKey:s,sessionKeyAlgorithm:a}=function(e,t,r,i){switch(t){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.aead:{const t=r.subarray(0,r.length-2),n=r.subarray(r.length-2),s=O.writeChecksum(t.subarray(t.length%8)),a=s[0]===n[0]&s[1]===n[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(i){const t=a&o.sessionKeyAlgorithm===i.sessionKeyAlgorithm&o.sessionKey.length===i.sessionKey.length;return{sessionKey:O.selectUint8Array(t,o.sessionKey,i.sessionKey),sessionKeyAlgorithm:6===e?null:O.selectUint8(t,o.sessionKeyAlgorithm,i.sessionKeyAlgorithm)}}if(a&&(6===e||F.read(F.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case F.publicKey.x25519:case F.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,n,t);3===this.version&&this.publicKeyAlgorithm!==F.publicKey.x25519&&this.publicKeyAlgorithm!==F.publicKey.x448&&(this.sessionKeyAlgorithm=a),this.sessionKey=s}}function so(e,t,r,i){switch(t){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.aead:return O.concatUint8Array([new Uint8Array(6===e?[]:[r]),i,O.writeChecksum(i.subarray(i.length%8))]);case F.publicKey.x25519:case F.publicKey.x448:return i;default:throw Error("Unsupported public key algorithm")}}class ao{static get tag(){return F.packet.symEncryptedSessionKey}constructor(e=N){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=F.symmetric.aes256,this.aeadAlgorithm=F.write(F.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new ai(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const i=e[t++];if(this.s2k=ks(i),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=gs.getAEADMode(this.aeadAlgorithm);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const i=r.length,n=3+i+this.iv.length;t=O.concatUint8Array([new Uint8Array([this.version,n,e,this.aeadAlgorithm,i]),r,this.iv,this.encrypted])}else 5===this.version?t=O.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=O.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=O.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:i}=gs.getCipherParams(t),n=await this.s2k.produceKey(e,i);if(this.version>=5){const e=gs.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|ao.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await On(F.hash.sha256,n,new Uint8Array,r,i):n,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await gs.mode.cfb.decrypt(t,n,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=F.write(F.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length)}else this.sessionKey=n}async encrypt(e,t=N){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=vs(t),this.s2k.generateSalt();const{blockSize:i,keySize:n}=gs.getCipherParams(r),s=await this.s2k.produceKey(e,n);if(null===this.sessionKey&&(this.sessionKey=gs.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const e=gs.getAEADMode(this.aeadAlgorithm);this.iv=gs.random.getRandomBytes(e.ivLength);const t=new Uint8Array([192|ao.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),i=6===this.version?await On(F.hash.sha256,s,new Uint8Array,t,n):s,a=await e(r,i);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=O.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await gs.mode.cfb.encrypt(r,s,e,new Uint8Array(i),t)}}}class oo{static get tag(){return F.packet.publicKey}constructor(e=new Date,t=N){this.version=t.v6Keys?6:4,this.created=O.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new oo,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e,t=N){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new ai("Support for parsing v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4===this.version||5===this.version||6===this.version){this.created=O.readDate(e.subarray(r,r+4)),r+=4,this.algorithm=e[r++],this.version>=5&&(r+=4);const{read:t,publicParams:i}=gs.parsePublicKeyParams(this.algorithm,e.subarray(r));if(6===this.version&&i.oid&&(i.oid.getName()===F.curve.curve25519Legacy||i.oid.getName()===F.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=i,r+=t,await this.computeFingerprintAndKeyID(),r}throw new ai(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(O.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=gs.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&e.push(O.writeNumber(t.length,4)),e.push(t),O.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,i=e>=5?4:2;return O.concatUint8Array([new Uint8Array([r]),O.writeNumber(t.length,i),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Ta,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await gs.hash.sha256(e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await gs.hash.sha1(e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return O.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&O.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=F.read(F.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=O.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}oo.prototype.readPublicKey=oo.prototype.read,oo.prototype.writePublicKey=oo.prototype.write;const co=/*#__PURE__*/O.constructAllowedPackets([Ma,Va,za,Na]);class ho{static get tag(){return F.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=N){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:i}=gs.getCipherParams(e),n=await Q(P(this.encrypted)),s=await gs.mode.cfb.decrypt(e,t,n.subarray(i+2),n.subarray(2,i+2));this.packets=await qa.fromBinary(s,co,r)}async encrypt(e,t,r=N){const i=this.packets.write(),{blockSize:n}=gs.getCipherParams(e),s=await gs.getPrefixRandom(e),a=await gs.mode.cfb.encrypt(e,t,s,new Uint8Array(n),r),o=await gs.mode.cfb.encrypt(e,t,i,a.subarray(2),r);this.encrypted=O.concat([a,o])}}class uo extends oo{static get tag(){return F.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new uo,{version:r,created:i,algorithm:n,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=i,t.algorithm=n,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class lo{static get tag(){return F.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=Xr(e.subarray(t,e.length));t+=r.offset,this.attributes.push(O.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(ei(this.attributes[t].length)),e.push(O.stringToUint8Array(this.attributes[t]));return O.concatUint8Array(e)}equals(e){return!!(e&&e instanceof lo)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class yo extends oo{static get tag(){return F.packet.secretKey}constructor(e=new Date,t=N){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=N){let r=await this.readPublicKey(e,t);const i=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=ks(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+gs.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+gs.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(i),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!O.equalsUint8Array(O.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=gs.parsePrivateKeyParams(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof ai)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return O.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=gs.serializeParams(this.algorithm,this.privateParams)),5===this.version&&t.push(O.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(O.writeChecksum(this.keyMaterial))),O.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=N){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=ks(F.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=F.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=N){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=vs(t),this.s2k.generateSalt();const r=gs.serializeParams(this.algorithm,this.privateParams);this.symmetric=F.symmetric.aes256;const{blockSize:i}=gs.getCipherParams(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=t.preferredAEADAlgorithm;const n=gs.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const s=ri(this.constructor.tag),a=await fo(this.version,this.s2k,e,this.symmetric,this.aead,s,this.isLegacyAEAD),o=await n(this.symmetric,a);this.iv=this.isLegacyAEAD?gs.random.getRandomBytes(i):gs.random.getRandomBytes(n.ivLength);const c=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([s,this.writePublicKey()]);this.keyMaterial=await o.encrypt(r,this.iv.subarray(0,n.ivLength),c)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const n=await fo(this.version,this.s2k,e,this.symmetric);this.iv=gs.random.getRandomBytes(i),this.keyMaterial=await gs.mode.cfb.encrypt(this.symmetric,n,O.concatUint8Array([r,await gs.hash.sha1(r,t)]),this.iv,t)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=ri(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(t=await fo(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const e=gs.getAEADMode(this.aead),n=await e(this.symmetric,t);try{const t=this.isLegacyAEAD?new Uint8Array:O.concatUint8Array([r,this.writePublicKey()]);i=await n.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await gs.mode.cfb.decrypt(this.symmetric,t,this.keyMaterial,this.iv);i=e.subarray(0,-20);const r=await gs.hash.sha1(i);if(!O.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=gs.parsePrivateKeyParams(this.algorithm,i,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await gs.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===F.publicKey.ecdh&&t===F.curve.curve25519Legacy||this.algorithm===F.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:i,publicParams:n}=await gs.generateParams(this.algorithm,e,t,r);this.privateParams=i,this.publicParams=n,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function fo(e,t,r,i,n,s,a){if("argon2"===t.type&&!n)throw Error("Using Argon2 S2K without AEAD is not allowed");if("simple"===t.type&&6===e)throw Error("Using Simple S2K with version 6 keys is not allowed");const{keySize:o}=gs.getCipherParams(i),c=await t.produceKey(r,o);if(!n||5===e||a)return c;const h=O.concatUint8Array([s,new Uint8Array([e,i,n])]);return On(F.hash.sha256,c,new Uint8Array,h,o)}class go{static get tag(){return F.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(O.isString(e)||e.name&&!O.isString(e.name)||e.email&&!O.isEmailAddress(e.email)||e.comment&&!O.isString(e.comment))throw Error("Invalid user ID format");const t=new go;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=N){const r=O.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const i=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==i){const{name:e,comment:t,email:r}=i.groups;this.comment=t?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=e?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return O.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class po extends yo{static get tag(){return F.packet.secretSubkey}constructor(e=new Date,t=N){super(e,t)}}const Ao=/*#__PURE__*/O.constructAllowedPackets([Na]);class wo{constructor(e){this.packets=e||new qa}write(){return this.packets.write()}armor(e=N){const t=this.packets.some((e=>e.constructor.tag===Na.tag&&6!==e.version));return ne(F.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function mo(e,t){const r=new po(e.date,t);return r.packets=null,r.algorithm=F.write(F.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function bo(e,t){const r=new yo(e.date,t);return r.packets=null,r.algorithm=F.write(F.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Eo(e,t,r,i,n=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,i,n,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw O.wrapError(`Could not find valid ${F.read(F.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function ko(e,t,r=new Date){const i=O.normalizeDate(r);if(null!==i){const r=Co(e,t);return!(e.created<=i&&i<r)}return!1}async function vo(e,t,r,i){const n={};n.key=t,n.bind=e;const s={signatureType:F.signature.subkeyBinding};r.sign?(s.keyFlags=[F.keyFlags.signData],s.embeddedSignature=await Bo(n,null,e,{signatureType:F.signature.keyBinding},r.date,void 0,void 0,void 0,i)):s.keyFlags=r.forwarding?[F.keyFlags.forwardedCommunication]:[F.keyFlags.encryptCommunication|F.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await Bo(n,null,t,s,r.date,void 0,void 0,void 0,i)}async function Bo(e,t,r,i,n,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new Na;return Object.assign(h,i),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(e,t,r=new Date,i={},n){let s=n.preferredHashAlgorithm,a=s;if(e){const t=await e.getPrimarySelfSignature(r,i,n);t.preferredHashAlgorithms&&([a]=t.preferredHashAlgorithms,s=gs.hash.getHashByteLength(s)<=gs.hash.getHashByteLength(a)?a:s)}switch(t.algorithm){case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:case F.publicKey.ed25519:case F.publicKey.ed448:a=gs.getPreferredCurveHashAlgo(t.algorithm,t.publicParams.oid)}return gs.hash.getHashByteLength(s)<=gs.hash.getHashByteLength(a)?a:s}(t,r,n,s,c),h.rawNotations=[...a],await h.sign(r,e,n,o,c),h}async function Io(e,t,r,i=new Date,n){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(i)||n&&!await n(e)||t[r].some((function(t){return O.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function So(e,t,r,i,n,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(i.map((async function(e){try{if(!n||e.issuerKeyID.equals(n.issuerKeyID)){const i=![F.reasonForRevocation.keyRetired,F.reasonForRevocation.keySuperseded,F.reasonForRevocation.userIDInvalid].includes(e.reasonForRevocationFlag);await e.verify(s,t,r,i?null:a,!1,o),c.push(e.issuerKeyID)}}catch(e){}}))),n?(n.revoked=!!c.some((e=>e.equals(n.issuerKeyID)))||(n.revoked||!1),n.revoked):c.length>0}function Co(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function Ko(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=O.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"ecc":try{e.curve=F.write(F.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==F.curve.ed25519Legacy&&e.curve!==F.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?F.curve.ed25519Legacy:F.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===F.curve.ed25519Legacy?F.publicKey.eddsaLegacy:F.publicKey.ecdsa:e.algorithm=F.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?F.publicKey.ed25519:F.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?F.publicKey.ed448:F.publicKey.x448;break;case"rsa":e.algorithm=F.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=F.publicKey.hmac;try{e.symmetric=F.write(F.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=F.publicKey.aead;try{e.symmetric=F.write(F.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function Po(e,t,r){switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.dsa:case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:case F.publicKey.ed25519:case F.publicKey.ed448:case F.publicKey.hmac:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.signData);default:return!1}}function Do(e,t,r){switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.x25519:case F.publicKey.x448:case F.publicKey.aead:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&F.keyFlags.encryptStorage);default:return!1}}function Uo(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaEncrypt:case F.publicKey.elgamal:case F.publicKey.ecdh:case F.publicKey.x25519:case F.publicKey.x448:return!(!(!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&F.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&F.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&F.keyFlags.forwardedCommunication));default:return!1}}function xo(e,t){const r=F.write(F.publicKey,e.algorithm),i=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(i.algorithm+" keys are considered too weak.");switch(r){case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.rsaEncrypt:if(i.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:case F.publicKey.ecdh:if(t.rejectCurves.has(i.curve))throw Error(`Support for ${i.algorithm} keys using curve ${i.curve} is disabled.`)}}class Qo{constructor(e,t){this.userID=e.constructor.tag===F.packet.userID?e:null,this.userAttribute=e.constructor.tag===F.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new qa;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new Qo(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i},s=new Qo(n.userID||n.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(i))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return Bo(n,e,s.keyPacket,{signatureType:F.signature.certGeneric,keyFlags:[F.keyFlags.certifyKeys|F.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,i=N){const n=this.mainKey.keyPacket;return So(n,F.signature.certRevocation,{key:n,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,i)}async verifyCertificate(e,t,r=new Date,i){const n=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,i);if(e.revoked||await n.isRevoked(e,s.keyPacket,r,i))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,F.signature.certGeneric,a,r,void 0,i)}catch(e){throw O.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const i=this,n=this.selfCertifications.concat(this.otherCertifications);return Promise.all(n.map((async n=>({keyID:n.issuerKeyID,valid:await i.verifyCertificate(n,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(i,F.signature.certGeneric,n,e,void 0,t)}catch(e){throw O.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const i=this.mainKey.keyPacket,n={userID:this.userID,userAttribute:this.userAttribute,key:i};await Io(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(i,F.signature.certGeneric,n,t,!1,r),!0}catch(e){return!1}})),await Io(e,this,"otherCertifications",t),await Io(e,this,"revocationSignatures",t,(function(e){return So(i,F.signature.certRevocation,n,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=F.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=N){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new Qo(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await Bo(s,null,e,{signatureType:F.signature.certRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}}class Ro{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new qa;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new Ro(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,i=N){const n=this.mainKey.keyPacket;return So(n,F.signature.subkeyRevocation,{key:n,bind:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verify(e=new Date,t=N){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket},n=await Eo(this.bindingSignatures,r,F.signature.subkeyBinding,i,e,t);if(n.revoked||await this.isRevoked(n,null,e,t))throw Error("Subkey is revoked");if(ko(this.keyPacket,n,e))throw Error("Subkey is expired");return n}async getExpirationTime(e=new Date,t=N){const r=this.mainKey.keyPacket,i={key:r,bind:this.keyPacket};let n;try{n=await Eo(this.bindingSignatures,r,F.signature.subkeyBinding,i,e,t)}catch(e){return null}const s=Co(this.keyPacket,n),a=n.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=N){const i=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===F.packet.publicSubkey&&e.keyPacket.constructor.tag===F.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const n=this,s={key:i,bind:n.keyPacket};await Io(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<n.bindingSignatures.length;t++)if(n.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>n.bindingSignatures[t].created&&(n.bindingSignatures[t]=e),!1;try{return await e.verify(i,F.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await Io(e,this,"revocationSignatures",t,(function(e){return So(i,F.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=F.reasonForRevocation.noReason,string:r=""}={},i=new Date,n=N){const s={key:e,bind:this.keyPacket},a=new Ro(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await Bo(s,null,e,{signatureType:F.signature.subkeyRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,t),reasonForRevocationString:r},i,void 0,void 0,!1,n)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{Ro.prototype[e]=function(){return this.keyPacket[e]()}}));const Mo=/*#__PURE__*/O.constructAllowedPackets([Na]),To=new Set([F.packet.publicKey,F.packet.privateKey]),Lo=new Set([F.packet.publicKey,F.packet.privateKey,F.packet.publicSubkey,F.packet.privateSubkey]);class _o{packetListToStructure(e,t=new Set){let r,i,n,s;for(const a of e){if(a instanceof ci){Lo.has(a.tag)&&!s&&(s=To.has(a.tag)?To:Lo);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case F.packet.publicKey:case F.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,i=this.getKeyID(),!i)throw Error("Missing Key ID");break;case F.packet.userID:case F.packet.userAttribute:r=new Qo(a,this),this.users.push(r);break;case F.packet.publicSubkey:case F.packet.secretSubkey:r=null,n=new Ro(a,this),this.subkeys.push(n);break;case F.packet.signature:switch(a.signatureType){case F.signature.certGeneric:case F.signature.certPersona:case F.signature.certCasual:case F.signature.certPositive:if(!r){O.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(i)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case F.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case F.signature.key:this.directSignatures.push(a);break;case F.signature.subkeyBinding:if(!n){O.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}n.bindingSignatures.push(a);break;case F.signature.keyRevocation:this.revocationSignatures.push(a);break;case F.signature.subkeyRevocation:if(!n){O.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}n.revocationSignatures.push(a)}}}}toPacketList(){const e=new qa;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},i=N){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{xo(n,i)}catch(e){throw O.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await Eo(r.bindingSignatures,n,F.signature.subkeyBinding,e,t,i);if(!Po(r.keyPacket,s,i))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await Eo([s.embeddedSignature],r.keyPacket,F.signature.keyBinding,e,t,i),xo(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Po(n,s,i))return xo(n,i),this}catch(e){a=e}throw O.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},i=N){await this.verifyPrimaryKey(t,r,i);const n=this.keyPacket;try{xo(n,i)}catch(e){throw O.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,i);const e={key:n,bind:r.keyPacket},s=await Eo(r.bindingSignatures,n,F.signature.subkeyBinding,e,t,i);if(Do(r.keyPacket,s,i))return xo(r.keyPacket,i),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,i);if((!e||n.getKeyID().equals(e))&&Do(n,s,i))return xo(n,i),this}catch(e){a=e}throw O.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,i=N){return So(this.keyPacket,F.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,i)}async verifyPrimaryKey(e=new Date,t={},r=N){const i=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(ko(i,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==i.version){const t=await Eo(this.directSignatures,i,F.signature.key,{key:i},e,r).catch((()=>{}));if(t&&ko(i,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=N){let r;try{const i=await this.getPrimarySelfSignature(null,e,t),n=Co(this.keyPacket,i),s=i.getExpirationTime(),a=6!==this.keyPacket.version&&await Eo(this.directSignatures,this.keyPacket,F.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=Co(this.keyPacket,a);r=Math.min(n,s,e)}else r=n<s?n:s}catch(e){r=null}return O.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=N){const i=this.keyPacket;if(6===i.version)return Eo(this.directSignatures,i,F.signature.key,{key:i},e,r);const{selfCertification:n}=await this.getPrimaryUser(e,t,r);return n}async getPrimaryUser(e=new Date,t={},r=N){const i=this.keyPacket,n=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:i},c=await Eo(s.selfCertifications,i,F.signature.certGeneric,o,e,r);n.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!n.length)throw s||Error("Could not find primary user");await Promise.all(n.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=n.sort((function(e,t){const r=e.selfCertification,i=t.selfCertification;return i.revoked-r.revoked||r.isPrimaryUserID-i.isPrimaryUserID||r.created-i.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=N){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const i=this.clone();return await Io(e,i,"revocationSignatures",t,(n=>So(i.keyPacket,F.signature.keyRevocation,i,[n],null,e.keyPacket,t,r))),await Io(e,i,"directSignatures",t),await Promise.all(e.users.map((async e=>{const n=i.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const n=i.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(n.length>0)await Promise.all(n.map((i=>i.update(e,t,r))));else{const t=e.clone();t.mainKey=i,i.subkeys.push(t)}}))),i}async getRevocationCertificate(e=new Date,t=N){const r={key:this.keyPacket},i=await Eo(this.revocationSignatures,this.keyPacket,F.signature.keyRevocation,r,e,t),n=new qa;n.push(i);const s=6!==this.keyPacket.version;return ne(F.armor.publicKey,n.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=N){const i=await ie(e),n=(await qa.fromBinary(i.data,Mo,r)).findPacket(F.packet.signature);if(!n||n.signatureType!==F.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!n.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await n.verify(this.keyPacket,F.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw O.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(n),s}async signPrimaryUser(e,t,r,i=N){const{index:n,user:s}=await this.getPrimaryUser(t,r,i),a=await s.certify(e,t,i),o=this.clone();return o.users[n]=a,o}async signAllUsers(e,t=new Date,r=N){const i=this.clone();return i.users=await Promise.all(this.users.map((function(i){return i.certify(e,t,r)}))),i}async verifyPrimaryUser(e,t=new Date,r,i=N){const n=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,i);return e?await s.verifyAllCertifications(e,t,i):[{keyID:n.getKeyID(),valid:await s.verify(t,i).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=N){const i=this.keyPacket,n=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:i.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];n.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),n}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{_o.prototype[e]=Ro.prototype[e]}));class Fo extends _o{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([F.packet.secretKey,F.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=N){const t=6!==this.keyPacket.version;return ne(F.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class No extends Fo{constructor(e){if(super(),this.packetListToStructure(e,new Set([F.packet.publicKey,F.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new qa,t=this.toPacketList();let r=!1;for(const i of t)if(!r||i.constructor.tag!==F.packet.Signature)switch(r&&(r=!1),i.constructor.tag){case F.packet.secretKey:{if(i.algorithm===F.publicKey.aead||i.algorithm===F.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=oo.fromSecretKeyPacket(i);e.push(t);break}case F.packet.secretSubkey:{if(i.algorithm===F.publicKey.aead||i.algorithm===F.publicKey.hmac){r=!0;break}const t=uo.fromSecretSubkeyPacket(i);e.push(t);break}default:e.push(i)}return new Fo(e)}armor(e=N){const t=6!==this.keyPacket.version;return ne(F.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},i=N){const n=this.keyPacket,s=[];for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0))try{const e={key:n,bind:this.subkeys[r].keyPacket},a=await Eo(this.subkeys[r].bindingSignatures,n,F.signature.subkeyBinding,e,t,i);Uo(this.subkeys[r].keyPacket,a,i)&&s.push(this.subkeys[r])}catch(e){}const a=await this.getPrimarySelfSignature(t,r,i);return e&&!n.getKeyID().equals(e,!0)||!Uo(n,a,i)||s.push(this),s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=N){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=F.reasonForRevocation.noReason,string:t=""}={},r=new Date,i=N){if(!this.isPrivate())throw Error("Need private key for revoking");const n={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await Bo(n,null,this.keyPacket,{signatureType:F.signature.keyRevocation,reasonForRevocationFlag:F.write(F.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,i)),s}async addSubkey(e={}){const t={...N,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const i=r.getAlgorithmInfo();i.type=function(e){switch(F.write(F.publicKey,e)){case F.publicKey.rsaEncrypt:case F.publicKey.rsaEncryptSign:case F.publicKey.rsaSign:case F.publicKey.dsa:return"rsa";case F.publicKey.ecdsa:case F.publicKey.eddsaLegacy:return"ecc";case F.publicKey.ed25519:return"curve25519";case F.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(i.algorithm),i.rsaBits=i.bits||4096,i.curve=i.curve||"curve25519Legacy",e=Ko(e,i);const n=await mo(e,{...t,v6Keys:6===this.keyPacket.version});xo(n,t);const s=await vo(n,r,e,t),a=this.toPacketList();return a.push(n,s),new No(a)}}const Ho=/*#__PURE__*/O.constructAllowedPackets([oo,uo,yo,po,go,lo,Na]);function Oo(e){for(const t of e)switch(t.constructor.tag){case F.packet.secretKey:return new No(e);case F.packet.publicKey:return new Fo(e)}throw Error("No key packet found")}async function zo(e,t,r,i){r.passphrase&&await e.encrypt(r.passphrase,i),await Promise.all(t.map((async function(e,t){const n=r.subkeys[t].passphrase;n&&await e.encrypt(n,i)})));const n=new qa;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[F.keyFlags.certifyKeys|F.keyFlags.signData];const n=s([F.symmetric.aes256,F.symmetric.aes128],i.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=n,i.aeadProtect){const e=s([F.aead.gcm,F.aead.eax,F.aead.ocb],i.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>n.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([F.hash.sha256,F.hash.sha512,...6===e.version?[F.hash.sha3_256,F.hash.sha3_512]:[]],i.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([F.compression.uncompressed,F.compression.zlib,F.compression.zip],i.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=F.features.modificationDetection,i.aeadProtect&&(t.features[0]|=F.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(n.push(e),6===e.version){const t={key:e},s=a();s.signatureType=F.signature.key;const o=await Bo(t,null,e,s,r.date,void 0,void 0,void 0,i);n.push(o)}await Promise.all(r.userIDs.map((async function(t,n){const s=go.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=F.signature.certPositive,0===n&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await Bo(o,null,e,c,r.date,void 0,void 0,void 0,i)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{n.push(e),n.push(t)}))})),await Promise.all(t.map((async function(t,n){const s=r.subkeys[n];return{secretSubkeyPacket:t,subkeySignaturePacket:await vo(t,e,s,i)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{n.push(e),n.push(t)}))}));const o={key:e};return n.push(await Bo(o,null,e,{signatureType:F.signature.keyRevocation,reasonForRevocationFlag:F.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,i)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new No(n)}const Go=/*#__PURE__*/O.constructAllowedPackets([Ma,Va,io,eo,ho,no,ao,za,Na]),qo=/*#__PURE__*/O.constructAllowedPackets([ao]),jo=/*#__PURE__*/O.constructAllowedPackets([Na]);class Vo{constructor(e){this.packets=e||new qa}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(F.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(F.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(F.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,i=new Date,n=N){const s=this.packets.filterByTag(F.packet.symmetricallyEncryptedData,F.packet.symEncryptedIntegrityProtectedData,F.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,i,n);let h=null;const u=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!O.isUint8Array(t)||!a.cipherAlgorithm&&!O.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||F.write(F.symmetric,e);await a.decrypt(r,t,n)}catch(e){O.printDebugError(e),h=e}})));if(R(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new Vo(a.packets);return a.packets=new qa,l}async decryptSessionKeys(e,t,r,i=new Date,n=N){let s,a=[];if(t){const e=this.packets.filterByTag(F.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let i;i=r?await qa.fromBinary(e.write(),qo,n):e,await Promise.all(i.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){O.printDebugError(e),e instanceof ps&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(F.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o=[F.symmetric.aes256,F.symmetric.aes128,F.symmetric.tripledes,F.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(i,void 0,n);t.preferredSymmetricAlgorithms&&(o=o.concat(t.preferredSymmetricAlgorithms))}catch(e){}const c=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,n)).map((e=>e.keyPacket));await Promise.all(c.map((async function(e){if(!e||e.isDummy())return;if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(n.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===F.publicKey.rsaEncrypt||t.publicKeyAlgorithm===F.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===F.publicKey.rsaSign||t.publicKeyAlgorithm===F.publicKey.elgamal)){const i=t.write();await Promise.all((r?[r]:Array.from(n.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new no;r.read(i);const n={sessionKeyAlgorithm:t,sessionKey:gs.generateSessionKey(t)};try{await r.decrypt(e,n),a.push(r)}catch(e){O.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const i=r||t.sessionKeyAlgorithm;if(i&&!o.includes(F.write(F.symmetric,i)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){O.printDebugError(e),s=e}})))}))),R(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+O.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&F.read(F.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(F.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],i=N){const{symmetricAlgo:n,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],i=N){const n=await Promise.all(e.map(((e,n)=>e.getPrimarySelfSignature(t,r[n],i))));if(e.length?!i.ignoreSEIPDv2FeatureFlag&&n.every((e=>e.features&&e.features[0]&F.features.seipdv2)):i.aeadProtect){const e={symmetricAlgo:F.symmetric.aes128,aeadAlgo:F.aead.ocb},t={symmetricAlgo:i.preferredSymmetricAlgorithm,aeadAlgo:i.preferredAEADAlgorithm};return n.every((e=>e.preferredCipherSuites&&e.preferredCipherSuites.some((e=>e[0]===t.symmetricAlgo&&e[1]===t.aeadAlgo))))?t:e}const s=F.symmetric.aes128,a=i.preferredSymmetricAlgorithm;return{symmetricAlgo:n.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,i),a=F.read(F.symmetric,n),o=s?F.read(F.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===F.publicKey.x25519||e.keyPacket.algorithm===F.publicKey.x448)&&!o&&!O.isAES(n))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:gs.generateSessionKey(n),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,i=!1,n=[],s=new Date,a=[],o=N){if(r){if(!O.isUint8Array(r.data)||!O.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Vo.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Vo.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await Vo.encryptSessionKey(c,h,u,e,t,i,n,s,a,o),y=eo.fromObject({version:u?2:1,aeadAlgorithm:u?F.write(F.aead,u):null});y.packets=this.packets;const f=F.write(F.symmetric,h);return await y.encrypt(f,c,o),l.packets.push(y),y.packets=new qa,l}static async encryptSessionKey(e,t,r,i,n,s=!1,a=[],o=new Date,c=[],h=N){const u=new qa,l=F.write(F.symmetric,t),y=r&&F.write(F.aead,r);if(i){const t=await Promise.all(i.map((async function(t,r){const i=await t.getEncryptionKey(a[r],o,c,h),n=no.fromObject({version:y?6:3,encryptionKeyPacket:i.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await n.encrypt(i.keyPacket),delete n.sessionKey,n})));u.push(...t)}if(n){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,i=async function(e,s,a,o){const c=new ao(h);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(n.map((e=>t(c,e))))).reduce(r))return i(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(n.map((t=>i(e,l,y,t))));u.push(...s)}return new Vo(u)}async sign(e=[],t=null,r=[],i=new Date,n=[],s=[],a=N){const o=new qa,c=this.packets.findPacket(F.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await Yo(c,e,t,r,i,n,s,!1,a),u=h.map(((e,t)=>za.fromSignaturePacket(e,0===t))).reverse();return o.push(...u),o.push(c),o.push(...h),new Vo(o)}compress(e,t=N){if(e===F.compression.uncompressed)return this;const r=new Va(t);r.algorithm=e,r.packets=this.packets;const i=new qa;return i.push(r),new Vo(i)}async signDetached(e=[],t=null,r=[],i=new Date,n=[],s=[],a=N){const o=this.packets.findPacket(F.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new wo(await Yo(o,e,t,r,i,n,s,!0,a))}async verify(e,t=new Date,r=N){const i=this.unwrapCompressed(),n=i.packets.filterByTag(F.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");y(i.packets.stream)&&i.packets.push(...await Q(i.packets.stream,(e=>e||[])));const s=i.packets.filterByTag(F.packet.onePassSignature).reverse(),a=i.packets.filterByTag(F.packet.signature);return s.length&&!a.length&&O.isStream(i.packets.stream)&&!y(i.packets.stream)?(await Promise.all(s.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=M((async()=>(await e.correspondingSig).signatureData)),e.hashed=Q(await e.hash(e.signatureType,n[0],void 0,!1)),e.hashed.catch((()=>{}))}))),i.packets.stream=C(i.packets.stream,(async(e,t)=>{const r=T(e),i=L(t);try{for(let e=0;e<s.length;e++){const{value:t}=await r.read();s[e].correspondingSigResolve(t)}await r.readToEnd(),await i.ready,await i.close()}catch(e){s.forEach((t=>{t.correspondingSigReject(e)})),await i.abort(e)}})),Zo(s,n,e,t,!1,r)):Zo(a,n,e,t,!1,r)}verifyDetached(e,t,r=new Date,i=N){const n=this.unwrapCompressed().packets.filterByTag(F.packet.literalData);if(1!==n.length)throw Error("Can only verify message with one literal data packet.");return Zo(e.packets.filterByTag(F.packet.signature),n,t,r,!0,i)}unwrapCompressed(){const e=this.packets.filterByTag(F.packet.compressedData);return e.length?new Vo(e[0].packets):this}async appendSignature(e,t=N){await this.packets.read(O.isUint8Array(e)?e:(await ie(e)).data,jo,t)}write(){return this.packets.write()}armor(e=N){const t=this.packets[this.packets.length-1],r=t.constructor.tag===eo.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===Na.tag&&6!==e.version));return ne(F.armor.message,this.write(),null,null,null,r,e)}}async function Yo(e,t,r=null,i=[],n=new Date,s=[],a=[],o=!1,c=N){const h=new qa,u=null===e.text?F.signature.binary:F.signature.text;if(await Promise.all(t.map((async(t,r)=>{const h=s[r];if(!t.isPrivate())throw Error("Need private key for signing");const l=await t.getSigningKey(i[r],n,h,c);return Bo(e,t,l.keyPacket,{signatureType:u},n,h,a,o,c)}))).then((e=>{h.push(...e)})),r){const e=r.packets.filterByTag(F.packet.signature);h.push(...e)}return h}async function Zo(e,t,r,i=new Date,n=!1,s=N){return Promise.all(e.filter((function(e){return["text","binary"].includes(F.read(F.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,i=new Date,n=!1,s=N){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof za?e.correspondingSig:e,h={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],i,n,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),i,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new qa;return e&&t.push(e),new wo(t)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(e,t,r,i,n,s)})))}const Jo=/*#__PURE__*/O.constructAllowedPackets([Na]);class Wo{constructor(e,t){if(this.text=O.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof wo))throw Error("Invalid signature input");this.signature=t||new wo(new qa)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=null,r=[],i=new Date,n=[],s=[],a=N){const o=new Ma;o.setText(this.text);const c=new wo(await Yo(o,e,t,r,i,n,s,!0,a));return new Wo(this.text,c)}verify(e,t=new Date,r=N){const i=this.signature.packets.filterByTag(F.packet.signature),n=new Ma;return n.setText(this.text),Zo(i,[n],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=N){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>F.read(F.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return ne(F.armor.signed,r,void 0,void 0,void 0,t,e)}}function $o(e){if(!(e instanceof Vo))throw Error("Parameter [message] needs to be of type Message")}function Xo(e){if(!(e instanceof Wo||e instanceof Vo))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function ec(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const tc=Object.keys(N).length;function rc(e){const t=Object.keys(e);if(t.length!==tc)for(const e of t)if(void 0===N[e])throw Error("Unknown config property: "+e)}function ic(e){return e&&!O.isArray(e)&&(e=[e]),e}async function nc(e){return"array"===O.isStream(e)?Q(e):e}function sc(e,t){e.data=C(t.packets.stream,(async(t,r)=>{await v(e.data,r,{preventClose:!0});const i=L(r);try{await Q(t,(e=>e)),await i.close()}catch(e){await i.abort(e)}}))}function ac(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}function oc(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, not "+e)}function cc(e,...t){if(!((r=e)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function hc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function uc(e,t){cc(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const lc=a&&"object"==typeof a&&"webcrypto"in a?a.webcrypto:void 0,yc=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),fc=(e,t)=>e<<32-t|e>>>t,gc=(e,t)=>e<<t|e>>>32-t>>>0,pc=68===new Uint8Array(new Uint32Array([287454020]).buffer)[0];
|
|
4
|
-
/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function dc(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function Ac(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}function wc(e){return"string"==typeof e&&(e=Ac(e)),cc(e),e}function mc(...e){let t=0;for(let r=0;r<e.length;r++){const i=e[r];cc(i),t+=i.length}const r=new Uint8Array(t);for(let t=0,i=0;t<e.length;t++){const n=e[t];r.set(n,i),i+=n.length}return r}class bc{clone(){return this._cloneInto()}}function Ec(e){const t=t=>e().update(wc(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function kc(e=32){if(lc&&"function"==typeof lc.getRandomValues)return lc.getRandomValues(new Uint8Array(e));throw Error("crypto.getRandomValues must be defined")}class vc extends bc{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,function(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.wrapConstructor");oc(e.outputLen),oc(e.blockLen)}(e);const r=wc(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const i=this.blockLen,n=new Uint8Array(i);n.set(r.length>i?e.create().update(r).digest():r);for(let e=0;e<n.length;e++)n[e]^=54;this.iHash.update(n),this.oHash=e.create();for(let e=0;e<n.length;e++)n[e]^=106;this.oHash.update(n),n.fill(0)}update(e){return hc(this),this.iHash.update(e),this}digestInto(e){hc(this),cc(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:i,destroyed:n,blockLen:s,outputLen:a}=this;return e.finished=i,e.destroyed=n,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const Bc=(e,t,r)=>new vc(e,t).update(r).digest();Bc.create=(e,t)=>new vc(e,t)
|
|
5
|
-
/*! noble-
|
|
6
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com)
|
|
1
|
+
/*! OpenPGP.js v6.0.0-beta.3.patch.1 - 2024-09-11 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
|
|
2
|
+
"use strict";const e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var t=require("module"),r=require("node:crypto"),n=require("crypto"),i="undefined"!=typeof document?document.currentScript:null;function s(e){var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)}var a=/*#__PURE__*/s(r),o=/*#__PURE__*/s(n);const c=Symbol("doneWritingPromise"),h=Symbol("doneWritingResolve"),u=Symbol("doneWritingReject"),l=Symbol("readingIndex");class y extends Array{constructor(){super(),Object.setPrototypeOf(this,y.prototype),this[c]=new Promise(((e,t)=>{this[h]=e,this[u]=t})),this[c].catch((()=>{}))}}function f(e){return e&&e.getReader&&Array.isArray(e)}function g(e){if(!f(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function p(t){if(f(t))return"array";if(e.ReadableStream&&e.ReadableStream.prototype.isPrototypeOf(t))return"web";if(t&&!(e.ReadableStream&&t instanceof e.ReadableStream)&&"function"==typeof t._read&&"object"==typeof t._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!t||!t.getReader)&&"web-like"}function d(e){return Uint8Array.prototype.isPrototypeOf(e)}function A(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!d(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach((function(e){r.set(e,n),n+=e.length})),r}y.prototype.getReader=function(){return void 0===this[l]&&(this[l]=0),{read:async()=>(await this[c],this[l]===this.length?{value:void 0,done:!0}:{value:this[this[l]++],done:!1})}},y.prototype.readToEnd=async function(e){await this[c];const t=e(this.slice(this[l]));return this.length=0,t},y.prototype.clone=function(){const e=new y;return e[c]=this[c].then((()=>{e.push(...this)})),e},g.prototype.write=async function(e){this.stream.push(e)},g.prototype.close=async function(){this.stream[h]()},g.prototype.abort=async function(e){return this.stream[u](e),e},g.prototype.releaseLock=function(){},"object"==typeof e.process&&e.process.versions;const w=new WeakSet,m=Symbol("externalBuffer");function b(e){if(this.stream=e,e[m]&&(this[m]=e[m].slice()),f(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(p(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||w.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{w.add(e)}catch(e){}}}function E(e){return p(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function k(e){if(p(e))return e;const t=new y;return(async()=>{const r=F(t);await r.write(e),await r.close()})(),t}function v(e){return e.some((e=>p(e)&&!f(e)))?function(e){e=e.map(E);const t=S((async function(e){await Promise.all(n.map((t=>M(t,e))))}));let r=Promise.resolve();const n=e.map(((n,i)=>C(n,((n,s)=>(r=r.then((()=>B(n,t.writable,{preventClose:i!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>f(e)))?function(e){const t=new y;let r=Promise.resolve();return e.forEach(((n,i)=>(r=r.then((()=>B(n,t,{preventClose:i!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):A(e)}async function B(e,t,{preventClose:r=!1,preventAbort:n=!1,preventCancel:i=!1}={}){if(p(e)&&!f(e)){e=E(e);try{if(e[m]){const r=F(t);for(let t=0;t<e[m].length;t++)await r.ready,await r.write(e[m][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:n,preventCancel:i})}catch(e){}return}const s=T(e=k(e)),a=F(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){n||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function I(e,t){const r=new TransformStream(t);return B(e,r.writable),r.readable}function S(e){let t,r,n,i=!1,s=!1;return{readable:new ReadableStream({start(e){n=e},pull(){t?t():i=!0},async cancel(t){s=!0,e&&await e(t),r&&r(t)}},{highWaterMark:0}),writable:new WritableStream({write:async function(e){if(s)throw Error("Stream is cancelled");n.enqueue(e),i?i=!1:(await new Promise(((e,n)=>{t=e,r=n})),t=null,r=null)},close:n.close.bind(n),abort:n.error.bind(n)})}}function K(e,t=()=>{},r=()=>{}){if(f(e)){const n=new y;return(async()=>{const i=F(n);try{const n=await R(e),s=t(n),a=r();let o;o=void 0!==s&&void 0!==a?v([s,a]):void 0!==s?s:a,await i.write(o),await i.close()}catch(e){await i.abort(e)}})(),n}if(p(e))return I(e,{async transform(e,r){try{const n=await t(e);void 0!==n&&r.enqueue(n)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const n=t(e),i=r();return void 0!==n&&void 0!==i?v([n,i]):void 0!==n?n:i}function C(e,t){if(p(e)&&!f(e)){let r;const n=new TransformStream({start(e){r=e}}),i=B(e,n.writable),s=S((async function(e){r.error(e),await i,await new Promise(setTimeout)}));return t(n.readable,s.writable),s.readable}e=k(e);const r=new y;return t(e,r),r}function P(e,t){let r;const n=C(e,((e,i)=>{const s=T(e);s.remainder=()=>(s.releaseLock(),B(e,i),n),r=t(s)}));return r}function U(e){if(f(e))return e.clone();if(p(e)){const t=function(e){if(f(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(p(e)){const t=E(e).tee();return t[0][m]=t[1][m]=e[m],t}return[Q(e),Q(e)]}(e);return x(e,t[0]),t[1]}return Q(e)}function D(e){return f(e)?U(e):p(e)?new ReadableStream({start(t){const r=C(e,(async(e,r)=>{const n=T(e),i=F(r);try{for(;;){await i.ready;const{done:e,value:r}=await n.read();if(e){try{t.close()}catch(e){}return void await i.close()}try{t.enqueue(r)}catch(e){}await i.write(r)}}catch(e){t.error(e),await i.abort(e)}}));x(e,r)}}):Q(e)}function x(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,n])=>{"constructor"!==r&&(n.value?n.value=n.value.bind(t):n.get=n.get.bind(t),Object.defineProperty(e,r,n))}))}function Q(e,t=0,r=1/0){if(f(e))throw Error("Not implemented");if(p(e)){if(t>=0&&r>=0){let n=0;return I(e,{transform(e,i){n<r?(n+e.length>=t&&i.enqueue(Q(e,Math.max(t-n,0),r-n)),n+=e.length):i.terminate()}})}if(t<0&&(r<0||r===1/0)){let n=[];return K(e,(e=>{e.length>=-t?n=[e]:n.push(e)}),(()=>Q(v(n),t,r)))}if(0===t&&r<0){let n;return K(e,(e=>{const i=n?v([n,e]):e;if(i.length>=-r)return n=Q(i,r),Q(i,t,r);n=i}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),L((async()=>Q(await R(e),t,r)))}return e[m]&&(e=v(e[m].concat([e]))),d(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function R(e,t=v){return f(e)?e.readToEnd(t):p(e)?T(e).readToEnd(t):e}async function M(e,t){if(p(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function L(e){const t=new y;return(async()=>{const r=F(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function T(e){return new b(e)}function F(e){return new g(e)}b.prototype.read=async function(){if(this[m]&&this[m].length){return{done:!1,value:this[m].shift()}}return this._read()},b.prototype.releaseLock=function(){this[m]&&(this.stream[m]=this[m]),this._releaseLock()},b.prototype.cancel=function(e){return this._cancel(e)},b.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:n}=await this.read();if(n+="",r)return t.length?v(t):void 0;const i=n.indexOf("\n")+1;i&&(e=v(t.concat(n.substr(0,i))),t=[]),i!==n.length&&t.push(n.substr(i))}return this.unshift(...t),e},b.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(Q(t,1)),r},b.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:n,value:i}=await this.read();if(n)return t.length?v(t):void 0;if(t.push(i),r+=i.length,r>=e){const r=v(t);return this.unshift(Q(r,e)),Q(r,0,e)}}},b.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},b.prototype.unshift=function(...e){this[m]||(this[m]=[]),1===e.length&&d(e[0])&&this[m].length&&e[0].length&&this[m][0].byteOffset>=e[0].length?this[m][0]=new Uint8Array(this[m][0].buffer,this[m][0].byteOffset-e[0].length,this[m][0].byteLength+e[0].length):this[m].unshift(...e.filter((e=>e&&e.length)))},b.prototype.readToEnd=async function(e=v){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const N=Symbol("byValue");var H={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[N]||(e[N]=[],Object.entries(e).forEach((([t,r])=>{e[N][r]=t}))),void 0!==e[N][t])return e[N][t];throw Error("Invalid enum value.")}},O={preferredHashAlgorithm:H.hash.sha256,preferredSymmetricAlgorithm:H.symmetric.aes256,preferredCompressionAlgorithm:H.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:H.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,enableParsingV5Entities:!1,s2kType:H.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([H.symmetric.aes128,H.symmetric.aes192,H.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.0.0-beta.3.patch.1",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([H.hash.md5,H.hash.ripemd]),rejectMessageHashAlgorithms:new Set([H.hash.md5,H.hash.ripemd,H.hash.sha1]),rejectPublicKeyAlgorithms:new Set([H.publicKey.elgamal,H.publicKey.dsa]),rejectCurves:new Set([H.curve.secp256k1])};const z=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),_={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:t.createRequire("undefined"==typeof document?require("url").pathToFileURL(__filename).href:i&&i.src||new URL("openpgp.min.cjs",document.baseURI).href),isArray:function(e){return e instanceof Array},isUint8Array:d,isStream:p,getNobleCurve:async(e,t)=>{if(!O.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return wy}));switch(e){case H.publicKey.ecdh:case H.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case H.publicKey.x448:return r.get("x448");case H.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let n=0;n<t;n++)r[n]=e>>8*(t-n-1)&255;return r},readDate:function(e){const t=_.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return _.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return _.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){const r=new Uint8Array(t),n=t-e.length;return r.set(e,n),r},uint8ArrayToMPI:function(e){const t=_.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),n=new Uint8Array([(65280&t)>>8,255&t]);return _.concatUint8Array([n,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+_.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return K(e,(e=>{if(!_.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,n=(e=new Uint8Array(e)).length;for(let i=0;i<n;i+=r)t.push(String.fromCharCode.apply(String,e.subarray(i,i+r<n?i+r:n)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return K(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return K(e,r,(()=>r(new Uint8Array,!0)))},concat:v,concatUint8Array:A,equalsUint8Array:function(e,t){if(!_.isUint8Array(e)||!_.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return _.writeNumber(t,2)},printDebug:function(e){z&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){z&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let n=0;n<r;n++)t[n]=e[n]<<1^e[n+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const t=void 0!==e&&e.crypto&&e.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!t)throw Error("The WebCrypto API is not available");return t},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!_.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return K(e,(e=>{let r;t&&(e=_.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const n=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&n.push(r);if(!n.length)return e;const i=new Uint8Array(e.length+n.length);let s=0;for(let t=0;t<n.length;t++){const r=e.subarray(n[t-1]||0,n[t]);i.set(r,s),s+=r.length,i[s-1]=13,i[s]=10,s++}return i.set(e.subarray(n[n.length-1]||0),s),i}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return K(e,(e=>{let r;13===(e=t&&10!==e[0]?_.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let n=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const i=r-(10===e[r]?1:0);t&&e.copyWithin(n,t,i),n+=i-t}return e.subarray(0,n)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return Error(e);try{t.message=e+": "+t.message}catch(e){}return t},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let n;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){n=e}}))),r(n)}))},selectUint8Array:function(e,t,r){const n=Math.max(t.length,r.length),i=new Uint8Array(n);let s=0;for(let n=0;n<i.length;n++)i[n]=t[n]&256-e|r[n]&255+e,s+=e&n<t.length|1-e&n<r.length;return i.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===H.symmetric.aes128||e===H.symmetric.aes192||e===H.symmetric.aes256}},G=_.getNodeBuffer();let j,q;function V(e){let t=new Uint8Array;return K(e,(e=>{t=_.concatUint8Array([t,e]);const r=[],n=Math.floor(t.length/45),i=45*n,s=j(t.subarray(0,i));for(let e=0;e<n;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(i),r.join("")}),(()=>t.length?j(t)+"\n":""))}function Z(e){let t="";return K(e,(e=>{t+=e;let r=0;const n=[" ","\t","\r","\n"];for(let e=0;e<n.length;e++){const i=n[e];for(let e=t.indexOf(i);-1!==e;e=t.indexOf(i,e+1))r++}let i=t.length;for(;i>0&&(i-r)%4!=0;i--)n.includes(t[i])&&r--;const s=q(t.substr(0,i));return t=t.substr(i),s}),(()=>q(t)))}function W(e){return Z(e.replace(/-/g,"+").replace(/_/g,"/"))}function Y(e,t){let r=V(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function J(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?H.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?H.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?H.armor.signed:/MESSAGE/.test(t[1])?H.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?H.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?H.armor.privateKey:/SIGNATURE/.test(t[1])?H.armor.signature:void 0}function $(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function X(e){const t=function(e){let t=13501623;return K(e,(e=>{const r=te?Math.floor(e.length/4):0,n=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=n[e],t=ee[0][t>>24&255]^ee[1][t>>16&255]^ee[2][t>>8&255]^ee[3][255&t];for(let n=4*r;n<e.length;n++)t=t>>8^ee[0][255&t^e[n]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return V(t)}G?(j=e=>G.from(e).toString("base64"),q=e=>{const t=G.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(j=e=>btoa(_.uint8ArrayToString(e)),q=e=>_.stringToUint8Array(atob(e)));const ee=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);ee[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)ee[1][e]=ee[0][e]>>8^ee[0][255&ee[0][e]];for(let e=0;e<=255;e++)ee[2][e]=ee[1][e]>>8^ee[0][255&ee[1][e]];for(let e=0;e<=255;e++)ee[3][e]=ee[2][e]>>8^ee[0][255&ee[2][e]];const te=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function re(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||_.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||_.printDebugError(Error("Unknown header: "+e[t]))}function ne(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function ie(e){return new Promise((async(t,r)=>{try{const n=/^-----[^-]+-----$/m,i=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,h=a,u=[];const l=Z(C(e,(async(e,y)=>{const f=T(e);try{for(;;){let e=await f.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=_.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==H.armor.signed||(n.test(e)?(u=u.join("\r\n"),c=!0,re(h),h=[],o=!1):u.push(e.replace(/^- /,"")));else if(n.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),i.test(e)){if(re(h),o=!0,c||s!==H.armor.signed){t({text:u,data:l,headers:a,type:s});break}}else h.push(e);else n.test(e)&&(s=J(e))}}catch(e){return void r(e)}const g=F(y);try{for(;;){await g.ready;const{done:e,value:t}=await f.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await f.readToEnd();e.length||(e=""),e=r+e,e=_.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(n);if(1===t.length)throw Error("Misformed armored text");const i=ne(t[0].slice(0,-1));await g.write(i);break}await g.write(r)}await g.ready,await g.close()}catch(e){await g.abort(e)}})))}catch(e){r(e)}})).then((async e=>(f(e.data)&&(e.data=await R(e.data)),e)))}function se(e,t,r,n,i,s=!1,a=O){let o,c;e===H.armor.signed&&(o=t.text,c=t.hash,t=t.data);const h=s&&D(t),u=[];switch(e){case H.armor.multipartSection:u.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+n+"-----\n"),u.push($(i,a)),u.push(V(t)),h&&u.push("=",X(h)),u.push("-----END PGP MESSAGE, PART "+r+"/"+n+"-----\n");break;case H.armor.multipartLast:u.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),u.push($(i,a)),u.push(V(t)),h&&u.push("=",X(h)),u.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case H.armor.signed:u.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),u.push(c?`Hash: ${c}\n\n`:"\n"),u.push(o.replace(/^-/gm,"- -")),u.push("\n-----BEGIN PGP SIGNATURE-----\n"),u.push($(i,a)),u.push(V(t)),h&&u.push("=",X(h)),u.push("-----END PGP SIGNATURE-----\n");break;case H.armor.message:u.push("-----BEGIN PGP MESSAGE-----\n"),u.push($(i,a)),u.push(V(t)),h&&u.push("=",X(h)),u.push("-----END PGP MESSAGE-----\n");break;case H.armor.publicKey:u.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),u.push($(i,a)),u.push(V(t)),h&&u.push("=",X(h)),u.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case H.armor.privateKey:u.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),u.push($(i,a)),u.push(V(t)),h&&u.push("=",X(h)),u.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case H.armor.signature:u.push("-----BEGIN PGP SIGNATURE-----\n"),u.push($(i,a)),u.push(V(t)),h&&u.push("=",X(h)),u.push("-----END PGP SIGNATURE-----\n")}return _.concat(u)}async function ae(e){switch(e){case H.symmetric.aes128:case H.symmetric.aes192:case H.symmetric.aes256:throw Error("Not a legacy cipher");case H.symmetric.cast5:case H.symmetric.blowfish:case H.symmetric.twofish:case H.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return Qy})),r=t.get(e);if(!r)throw Error("Unsupported cipher algorithm");return r}default:throw Error("Unsupported cipher algorithm")}}function oe(e){switch(e){case H.symmetric.aes128:case H.symmetric.aes192:case H.symmetric.aes256:case H.symmetric.twofish:return 16;case H.symmetric.blowfish:case H.symmetric.cast5:case H.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function ce(e){switch(e){case H.symmetric.aes128:case H.symmetric.blowfish:case H.symmetric.cast5:return 16;case H.symmetric.aes192:case H.symmetric.tripledes:return 24;case H.symmetric.aes256:case H.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function he(e){return{keySize:ce(e),blockSize:oe(e)}}var ue=/*#__PURE__*/Object.freeze({__proto__:null,getCipherParams:he,getLegacyCipher:ae});function le(e,t){let r=e[0],n=e[1],i=e[2],s=e[3];r=fe(r,n,i,s,t[0],7,-680876936),s=fe(s,r,n,i,t[1],12,-389564586),i=fe(i,s,r,n,t[2],17,606105819),n=fe(n,i,s,r,t[3],22,-1044525330),r=fe(r,n,i,s,t[4],7,-176418897),s=fe(s,r,n,i,t[5],12,1200080426),i=fe(i,s,r,n,t[6],17,-1473231341),n=fe(n,i,s,r,t[7],22,-45705983),r=fe(r,n,i,s,t[8],7,1770035416),s=fe(s,r,n,i,t[9],12,-1958414417),i=fe(i,s,r,n,t[10],17,-42063),n=fe(n,i,s,r,t[11],22,-1990404162),r=fe(r,n,i,s,t[12],7,1804603682),s=fe(s,r,n,i,t[13],12,-40341101),i=fe(i,s,r,n,t[14],17,-1502002290),n=fe(n,i,s,r,t[15],22,1236535329),r=ge(r,n,i,s,t[1],5,-165796510),s=ge(s,r,n,i,t[6],9,-1069501632),i=ge(i,s,r,n,t[11],14,643717713),n=ge(n,i,s,r,t[0],20,-373897302),r=ge(r,n,i,s,t[5],5,-701558691),s=ge(s,r,n,i,t[10],9,38016083),i=ge(i,s,r,n,t[15],14,-660478335),n=ge(n,i,s,r,t[4],20,-405537848),r=ge(r,n,i,s,t[9],5,568446438),s=ge(s,r,n,i,t[14],9,-1019803690),i=ge(i,s,r,n,t[3],14,-187363961),n=ge(n,i,s,r,t[8],20,1163531501),r=ge(r,n,i,s,t[13],5,-1444681467),s=ge(s,r,n,i,t[2],9,-51403784),i=ge(i,s,r,n,t[7],14,1735328473),n=ge(n,i,s,r,t[12],20,-1926607734),r=pe(r,n,i,s,t[5],4,-378558),s=pe(s,r,n,i,t[8],11,-2022574463),i=pe(i,s,r,n,t[11],16,1839030562),n=pe(n,i,s,r,t[14],23,-35309556),r=pe(r,n,i,s,t[1],4,-1530992060),s=pe(s,r,n,i,t[4],11,1272893353),i=pe(i,s,r,n,t[7],16,-155497632),n=pe(n,i,s,r,t[10],23,-1094730640),r=pe(r,n,i,s,t[13],4,681279174),s=pe(s,r,n,i,t[0],11,-358537222),i=pe(i,s,r,n,t[3],16,-722521979),n=pe(n,i,s,r,t[6],23,76029189),r=pe(r,n,i,s,t[9],4,-640364487),s=pe(s,r,n,i,t[12],11,-421815835),i=pe(i,s,r,n,t[15],16,530742520),n=pe(n,i,s,r,t[2],23,-995338651),r=de(r,n,i,s,t[0],6,-198630844),s=de(s,r,n,i,t[7],10,1126891415),i=de(i,s,r,n,t[14],15,-1416354905),n=de(n,i,s,r,t[5],21,-57434055),r=de(r,n,i,s,t[12],6,1700485571),s=de(s,r,n,i,t[3],10,-1894986606),i=de(i,s,r,n,t[10],15,-1051523),n=de(n,i,s,r,t[1],21,-2054922799),r=de(r,n,i,s,t[8],6,1873313359),s=de(s,r,n,i,t[15],10,-30611744),i=de(i,s,r,n,t[6],15,-1560198380),n=de(n,i,s,r,t[13],21,1309151649),r=de(r,n,i,s,t[4],6,-145523070),s=de(s,r,n,i,t[11],10,-1120210379),i=de(i,s,r,n,t[2],15,718787259),n=de(n,i,s,r,t[9],21,-343485551),e[0]=be(r,e[0]),e[1]=be(n,e[1]),e[2]=be(i,e[2]),e[3]=be(s,e[3])}function ye(e,t,r,n,i,s){return t=be(be(t,e),be(n,s)),be(t<<i|t>>>32-i,r)}function fe(e,t,r,n,i,s,a){return ye(t&r|~t&n,e,t,i,s,a)}function ge(e,t,r,n,i,s,a){return ye(t&n|r&~n,e,t,i,s,a)}function pe(e,t,r,n,i,s,a){return ye(t^r^n,e,t,i,s,a)}function de(e,t,r,n,i,s,a){return ye(r^(t|~n),e,t,i,s,a)}function Ae(e){const t=[];let r;for(r=0;r<64;r+=4)t[r>>2]=e.charCodeAt(r)+(e.charCodeAt(r+1)<<8)+(e.charCodeAt(r+2)<<16)+(e.charCodeAt(r+3)<<24);return t}const we="0123456789abcdef".split("");function me(e){let t="",r=0;for(;r<4;r++)t+=we[e>>8*r+4&15]+we[e>>8*r&15];return t}function be(e,t){return e+t&4294967295}const Ee=_.getWebCrypto(),ke=_.getNodeCrypto(),ve=ke&&ke.getHashes();function Be(e){if(ke&&ve.includes(e))return async function(t){const r=ke.createHash(e);return K(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function Ie(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return $y})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(f(e)&&(e=await R(e)),_.isStream(e)){const t=(await r()).create();return K(e,(e=>{t.update(e)}),(()=>t.digest()))}if(Ee&&t)return new Uint8Array(await Ee.digest(t,e));return(await r())(e)}}var Se={md5:Be("md5")||async function(e){const t=function(e){const t=e.length,r=[1732584193,-271733879,-1732584194,271733878];let n;for(n=64;n<=e.length;n+=64)le(r,Ae(e.substring(n-64,n)));e=e.substring(n-64);const i=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];for(n=0;n<e.length;n++)i[n>>2]|=e.charCodeAt(n)<<(n%4<<3);if(i[n>>2]|=128<<(n%4<<3),n>55)for(le(r,i),n=0;n<16;n++)i[n]=0;return i[14]=8*t,le(r,i),r}(_.uint8ArrayToString(e));return _.hexToUint8Array(function(e){for(let t=0;t<e.length;t++)e[t]=me(e[t]);return e.join("")}(t))},sha1:Be("sha1")||Ie("sha1","SHA-1"),sha224:Be("sha224")||Ie("sha224"),sha256:Be("sha256")||Ie("sha256","SHA-256"),sha384:Be("sha384")||Ie("sha384","SHA-384"),sha512:Be("sha512")||Ie("sha512","SHA-512"),ripemd:Be("ripemd160")||Ie("ripemd160"),sha3_256:Be("sha3-256")||Ie("sha3_256"),sha3_512:Be("sha3-512")||Ie("sha3_512"),digest:function(e,t){switch(e){case H.hash.md5:return this.md5(t);case H.hash.sha1:return this.sha1(t);case H.hash.ripemd:return this.ripemd(t);case H.hash.sha256:return this.sha256(t);case H.hash.sha384:return this.sha384(t);case H.hash.sha512:return this.sha512(t);case H.hash.sha224:return this.sha224(t);case H.hash.sha3_256:return this.sha3_256(t);case H.hash.sha3_512:return this.sha3_512(t);default:throw Error("Unsupported hash function")}},getHashByteLength:function(e){switch(e){case H.hash.md5:return 16;case H.hash.sha1:case H.hash.ripemd:return 20;case H.hash.sha256:return 32;case H.hash.sha384:return 48;case H.hash.sha512:return 64;case H.hash.sha224:return 28;case H.hash.sha3_256:return 32;case H.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}},getBlockSize:function(e){switch(e){case H.hash.md5:case H.hash.sha1:case H.hash.ripemd:case H.hash.sha224:case H.hash.sha256:return 64;case H.hash.sha384:case H.hash.sha512:return 128;default:throw Error("Invalid hash algorithm.")}}};function Ke(e){return e instanceof Uint8Array||null!=e&&"object"==typeof e&&"Uint8Array"===e.constructor.name}function Ce(e,...t){if(!Ke(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function Pe(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Ue(e,t){Ce(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}
|
|
3
|
+
/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */const De=e=>new Uint8Array(e.buffer,e.byteOffset,e.byteLength),xe=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),Qe=e=>new DataView(e.buffer,e.byteOffset,e.byteLength);if(!(68===new Uint8Array(new Uint32Array([287454020]).buffer)[0]))throw Error("Non little-endian hardware is not supported");function Re(e){if("string"==typeof e)e=function(e){if("string"!=typeof e)throw Error("string expected, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}(e);else{if(!Ke(e))throw Error("Uint8Array expected, got "+typeof e);e=Ne(e)}return e}function Me(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r}const Le=(e,t)=>(Object.assign(t,e),t);function Te(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s);e.setUint32(t+0,a,n),e.setUint32(t+4,o,n)}function Fe(e){return e.byteOffset%4==0}function Ne(e){return Uint8Array.from(e)}function He(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}const Oe=16,ze=/* @__PURE__ */new Uint8Array(16),_e=xe(ze),Ge=e=>(e>>>0&255)<<24|(e>>>8&255)<<16|(e>>>16&255)<<8|e>>>24&255;class je{constructor(e,t){this.blockLen=Oe,this.outputLen=Oe,this.s0=0,this.s1=0,this.s2=0,this.s3=0,this.finished=!1,Ce(e=Re(e),16);const r=Qe(e);let n=r.getUint32(0,!1),i=r.getUint32(4,!1),s=r.getUint32(8,!1),a=r.getUint32(12,!1);const o=[];for(let e=0;e<128;e++)o.push({s0:Ge(n),s1:Ge(i),s2:Ge(s),s3:Ge(a)}),({s0:n,s1:i,s2:s,s3:a}={s3:(u=s)<<31|(l=a)>>>1,s2:(h=i)<<31|u>>>1,s1:(c=n)<<31|h>>>1,s0:c>>>1^225<<24&-(1&l)});var c,h,u,l;const y=(e=>e>65536?8:e>1024?4:2)(t||1024);if(![1,2,4,8].includes(y))throw Error(`ghash: wrong window size=${y}, should be 2, 4 or 8`);this.W=y;const f=128/y,g=this.windowSize=2**y,p=[];for(let e=0;e<f;e++)for(let t=0;t<g;t++){let r=0,n=0,i=0,s=0;for(let a=0;a<y;a++){if(!(t>>>y-a-1&1))continue;const{s0:c,s1:h,s2:u,s3:l}=o[y*e+a];r^=c,n^=h,i^=u,s^=l}p.push({s0:r,s1:n,s2:i,s3:s})}this.t=p}_updateBlock(e,t,r,n){e^=this.s0,t^=this.s1,r^=this.s2,n^=this.s3;const{W:i,t:s,windowSize:a}=this;let o=0,c=0,h=0,u=0;const l=(1<<i)-1;let y=0;for(const f of[e,t,r,n])for(let e=0;e<4;e++){const t=f>>>8*e&255;for(let e=8/i-1;e>=0;e--){const r=t>>>i*e&l,{s0:n,s1:f,s2:g,s3:p}=s[y*a+r];o^=n,c^=f,h^=g,u^=p,y+=1}}this.s0=o,this.s1=c,this.s2=h,this.s3=u}update(e){e=Re(e),Pe(this);const t=xe(e),r=Math.floor(e.length/Oe),n=e.length%Oe;for(let e=0;e<r;e++)this._updateBlock(t[4*e+0],t[4*e+1],t[4*e+2],t[4*e+3]);return n&&(ze.set(e.subarray(r*Oe)),this._updateBlock(_e[0],_e[1],_e[2],_e[3]),He(_e)),this}destroy(){const{t:e}=this;for(const t of e)t.s0=0,t.s1=0,t.s2=0,t.s3=0}digestInto(e){Pe(this),Ue(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=xe(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e}digest(){const e=new Uint8Array(Oe);return this.digestInto(e),this.destroy(),e}}class qe extends je{constructor(e,t){const r=function(e){e.reverse();const t=1&e[15];let r=0;for(let t=0;t<e.length;t++){const n=e[t];e[t]=n>>>1|r,r=(1&n)<<7}return e[0]^=225&-t,e}(Ne(e=Re(e)));super(r,t),He(r)}update(e){e=Re(e),Pe(this);const t=xe(e),r=e.length%Oe,n=Math.floor(e.length/Oe);for(let e=0;e<n;e++)this._updateBlock(Ge(t[4*e+3]),Ge(t[4*e+2]),Ge(t[4*e+1]),Ge(t[4*e+0]));return r&&(ze.set(e.subarray(n*Oe)),this._updateBlock(Ge(_e[3]),Ge(_e[2]),Ge(_e[1]),Ge(_e[0])),He(_e)),this}digestInto(e){Pe(this),Ue(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=xe(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e.reverse()}}function Ve(e){const t=(t,r)=>e(r,t.length).update(Re(t)).digest(),r=e(new Uint8Array(16),0);return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=(t,r)=>e(t,r),t}const Ze=Ve(((e,t)=>new je(e,t)));Ve(((e,t)=>new qe(e,t)));const We=16,Ye=new Uint8Array(We),Je=283;function $e(e){return e<<1^Je&-(e>>7)}function Xe(e,t){let r=0;for(;t>0;t>>=1)r^=e&-(1&t),e=$e(e);return r}const et=/* @__PURE__ */(()=>{const e=new Uint8Array(256);for(let t=0,r=1;t<256;t++,r^=$e(r))e[t]=r;const t=new Uint8Array(256);t[0]=99;for(let r=0;r<255;r++){let n=e[255-r];n|=n<<8,t[e[r]]=255&(n^n>>4^n>>5^n>>6^n>>7^99)}return He(e),t})(),tt=/* @__PURE__ */et.map(((e,t)=>et.indexOf(t))),rt=e=>e<<24|e>>>8,nt=e=>e<<8|e>>>24,it=e=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;function st(e,t){if(256!==e.length)throw Error("Wrong sbox length");const r=new Uint32Array(256).map(((r,n)=>t(e[n]))),n=r.map(nt),i=n.map(nt),s=i.map(nt),a=new Uint32Array(65536),o=new Uint32Array(65536),c=new Uint16Array(65536);for(let t=0;t<256;t++)for(let h=0;h<256;h++){const u=256*t+h;a[u]=r[t]^n[h],o[u]=i[t]^s[h],c[u]=e[t]<<8|e[h]}return{sbox:e,sbox2:c,T0:r,T1:n,T2:i,T3:s,T01:a,T23:o}}const at=/* @__PURE__ */st(et,(e=>Xe(e,3)<<24|e<<16|e<<8|Xe(e,2))),ot=/* @__PURE__ */st(tt,(e=>Xe(e,11)<<24|Xe(e,13)<<16|Xe(e,9)<<8|Xe(e,14))),ct=/* @__PURE__ */(()=>{const e=new Uint8Array(16);for(let t=0,r=1;t<16;t++,r=$e(r))e[t]=r;return e})();function ht(e){Ce(e);const t=e.length;if(![16,24,32].includes(t))throw Error("aes: wrong key size: should be 16, 24 or 32, got: "+t);const{sbox2:r}=at,n=[];Fe(e)||n.push(e=Ne(e));const i=xe(e),s=i.length,a=e=>yt(r,e,e,e,e),o=new Uint32Array(t+28);o.set(i);for(let e=s;e<o.length;e++){let t=o[e-1];e%s==0?t=a(rt(t))^ct[e/s-1]:s>6&&e%s==4&&(t=a(t)),o[e]=o[e-s]^t}return He(...n),o}function ut(e){const t=ht(e),r=t.slice(),n=t.length,{sbox2:i}=at,{T0:s,T1:a,T2:o,T3:c}=ot;for(let e=0;e<n;e+=4)for(let i=0;i<4;i++)r[e+i]=t[n-e-4+i];He(t);for(let e=4;e<n-4;e++){const t=r[e],n=yt(i,t,t,t,t);r[e]=s[255&n]^a[n>>>8&255]^o[n>>>16&255]^c[n>>>24]}return r}function lt(e,t,r,n,i,s){return e[r<<8&65280|n>>>8&255]^t[i>>>8&65280|s>>>24&255]}function yt(e,t,r,n,i){return e[255&t|65280&r]|e[n>>>16&255|i>>>16&65280]<<16}function ft(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=at;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const h=e.length/4-2;for(let s=0;s<h;s++){const s=e[c++]^lt(a,o,t,r,n,i),h=e[c++]^lt(a,o,r,n,i,t),u=e[c++]^lt(a,o,n,i,t,r),l=e[c++]^lt(a,o,i,t,r,n);t=s,r=h,n=u,i=l}return{s0:e[c++]^yt(s,t,r,n,i),s1:e[c++]^yt(s,r,n,i,t),s2:e[c++]^yt(s,n,i,t,r),s3:e[c++]^yt(s,i,t,r,n)}}function gt(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=ot;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const h=e.length/4-2;for(let s=0;s<h;s++){const s=e[c++]^lt(a,o,t,i,n,r),h=e[c++]^lt(a,o,r,t,i,n),u=e[c++]^lt(a,o,n,r,t,i),l=e[c++]^lt(a,o,i,n,r,t);t=s,r=h,n=u,i=l}return{s0:e[c++]^yt(s,t,i,n,r),s1:e[c++]^yt(s,r,t,i,n),s2:e[c++]^yt(s,n,r,t,i),s3:e[c++]^yt(s,i,n,r,t)}}function pt(e,t){if(void 0===t)return new Uint8Array(e);if(Ce(t),t.length<e)throw Error(`aes: wrong destination length, expected at least ${e}, got: ${t.length}`);if(!Fe(t))throw Error("unaligned dst");return t}function dt(e,t,r,n){Ce(t,We),Ce(r);const i=r.length;n=pt(i,n);const s=t,a=xe(s);let{s0:o,s1:c,s2:h,s3:u}=ft(e,a[0],a[1],a[2],a[3]);const l=xe(r),y=xe(n);for(let t=0;t+4<=l.length;t+=4){y[t+0]=l[t+0]^o,y[t+1]=l[t+1]^c,y[t+2]=l[t+2]^h,y[t+3]=l[t+3]^u;let r=1;for(let e=s.length-1;e>=0;e--)r=r+(255&s[e])|0,s[e]=255&r,r>>>=8;({s0:o,s1:c,s2:h,s3:u}=ft(e,a[0],a[1],a[2],a[3]))}const f=We*Math.floor(l.length/4);if(f<i){const e=new Uint32Array([o,c,h,u]),t=De(e);for(let e=f,s=0;e<i;e++,s++)n[e]=r[e]^t[s];He(e)}return n}function At(e,t,r,n,i){Ce(r,We),Ce(n),i=pt(n.length,i);const s=r,a=xe(s),o=Qe(s),c=xe(n),h=xe(i),u=t?0:12,l=n.length;let y=o.getUint32(u,t),{s0:f,s1:g,s2:p,s3:d}=ft(e,a[0],a[1],a[2],a[3]);for(let r=0;r+4<=c.length;r+=4)h[r+0]=c[r+0]^f,h[r+1]=c[r+1]^g,h[r+2]=c[r+2]^p,h[r+3]=c[r+3]^d,y=y+1>>>0,o.setUint32(u,y,t),({s0:f,s1:g,s2:p,s3:d}=ft(e,a[0],a[1],a[2],a[3]));const A=We*Math.floor(c.length/4);if(A<l){const e=new Uint32Array([f,g,p,d]),t=De(e);for(let e=A,r=0;e<l;e++,r++)i[e]=n[e]^t[r];He(e)}return i}const wt=Le({blockSize:16,nonceLength:16},(function(e,t){function r(r,n){if(Ce(r),void 0!==n&&(Ce(n),!Fe(n)))throw Error("unaligned destination");const i=ht(e),s=Ne(t),a=[i,s];Fe(r)||a.push(r=Ne(r));const o=dt(i,s,r,n);return He(...a),o}return Ce(e),Ce(t,We),{encrypt:(e,t)=>r(e,t),decrypt:(e,t)=>r(e,t)}}));const mt=Le({blockSize:16,nonceLength:16},(function(e,t,r={}){Ce(e),Ce(t,16);const n=!r.disablePadding;return{encrypt(r,i){const s=ht(e),{b:a,o,out:c}=function(e,t,r){Ce(e);let n=e.length;const i=n%We;if(!t&&0!==i)throw Error("aec/(cbc-ecb): unpadded plaintext with disabled padding");Fe(e)||(e=Ne(e));const s=xe(e);if(t){let e=We-i;e||(e=We),n+=e}const a=pt(n,r);return{b:s,o:xe(a),out:a}}(r,n,i);let h=t;const u=[s];Fe(h)||u.push(h=Ne(h));const l=xe(h);let y=l[0],f=l[1],g=l[2],p=l[3],d=0;for(;d+4<=a.length;)y^=a[d+0],f^=a[d+1],g^=a[d+2],p^=a[d+3],({s0:y,s1:f,s2:g,s3:p}=ft(s,y,f,g,p)),o[d++]=y,o[d++]=f,o[d++]=g,o[d++]=p;if(n){const e=function(e){const t=new Uint8Array(16),r=xe(t);t.set(e);const n=We-e.length;for(let e=We-n;e<We;e++)t[e]=n;return r}(r.subarray(4*d));y^=e[0],f^=e[1],g^=e[2],p^=e[3],({s0:y,s1:f,s2:g,s3:p}=ft(s,y,f,g,p)),o[d++]=y,o[d++]=f,o[d++]=g,o[d++]=p}return He(...u),c},decrypt(r,i){!function(e){if(Ce(e),e.length%We!=0)throw Error("aes/(cbc-ecb).decrypt ciphertext should consist of blocks with size 16")}(r);const s=ut(e);let a=t;const o=[s];Fe(a)||o.push(a=Ne(a));const c=xe(a),h=pt(r.length,i);Fe(r)||o.push(r=Ne(r));const u=xe(r),l=xe(h);let y=c[0],f=c[1],g=c[2],p=c[3];for(let e=0;e+4<=u.length;){const t=y,r=f,n=g,i=p;y=u[e+0],f=u[e+1],g=u[e+2],p=u[e+3];const{s0:a,s1:o,s2:c,s3:h}=gt(s,y,f,g,p);l[e++]=a^t,l[e++]=o^r,l[e++]=c^n,l[e++]=h^i}return He(...o),function(e,t){if(!t)return e;const r=e.length;if(!r)throw Error("aes/pcks5: empty ciphertext not allowed");const n=e[r-1];if(n<=0||n>16)throw Error("aes/pcks5: wrong padding byte: "+n);const i=e.subarray(0,-n);for(let t=0;t<n;t++)if(e[r-t-1]!==n)throw Error("aes/pcks5: wrong padding");return i}(h,n)}}})),bt=Le({blockSize:16,nonceLength:16},(function(e,t){function r(r,n,i){Ce(r);const s=r.length;i=pt(s,i);const a=ht(e);let o=t;const c=[a];Fe(o)||c.push(o=Ne(o)),Fe(r)||c.push(r=Ne(r));const h=xe(r),u=xe(i),l=n?u:h,y=xe(o);let f=y[0],g=y[1],p=y[2],d=y[3];for(let e=0;e+4<=h.length;){const{s0:t,s1:r,s2:n,s3:i}=ft(a,f,g,p,d);u[e+0]=h[e+0]^t,u[e+1]=h[e+1]^r,u[e+2]=h[e+2]^n,u[e+3]=h[e+3]^i,f=l[e++],g=l[e++],p=l[e++],d=l[e++]}const A=We*Math.floor(h.length/4);if(A<s){({s0:f,s1:g,s2:p,s3:d}=ft(a,f,g,p,d));const e=De(new Uint32Array([f,g,p,d]));for(let t=A,n=0;t<s;t++,n++)i[t]=r[t]^e[n];He(e)}return He(...c),i}return Ce(e),Ce(t,16),{encrypt:(e,t)=>r(e,!0,t),decrypt:(e,t)=>r(e,!1,t)}}));const Et=Le({blockSize:16,nonceLength:12,tagLength:16},(function(e,t,r){if(Ce(e),Ce(t),void 0!==r&&Ce(r),0===t.length)throw Error("aes/gcm: empty nonce");const n=16;function i(e,t,n){const i=function(e,t,r,n,i){const s=null==i?0:i.length,a=e.create(r,n.length+s);i&&a.update(i),a.update(n);const o=new Uint8Array(16),c=Qe(o);i&&Te(c,0,BigInt(8*s),t),Te(c,8,BigInt(8*n.length),t),a.update(o);const h=a.digest();return He(o),h}(Ze,!1,e,n,r);for(let e=0;e<t.length;e++)i[e]^=t[e];return i}function s(){const r=ht(e),n=Ye.slice(),i=Ye.slice();if(At(r,!1,i,i,n),12===t.length)i.set(t);else{const e=Ye.slice();Te(Qe(e),8,BigInt(8*t.length),!1);const r=Ze.create(n).update(t).update(e);r.digestInto(i),r.destroy()}return{xk:r,authKey:n,counter:i,tagMask:At(r,!1,i,Ye)}}return{encrypt(e){Ce(e);const{xk:t,authKey:r,counter:a,tagMask:o}=s(),c=new Uint8Array(e.length+n),h=[t,r,a,o];Fe(e)||h.push(e=Ne(e)),At(t,!1,a,e,c);const u=i(r,o,c.subarray(0,c.length-n));return h.push(u),c.set(u,e.length),He(...h),c},decrypt(e){if(Ce(e),e.length<n)throw Error("aes/gcm: ciphertext less than tagLen (16)");const{xk:t,authKey:r,counter:a,tagMask:o}=s(),c=[t,r,o,a];Fe(e)||c.push(e=Ne(e));const h=e.subarray(0,-16),u=e.subarray(-16),l=i(r,o,h);if(c.push(l),!Me(l,u))throw Error("aes/gcm: invalid ghash tag");const y=At(t,!1,a,h);return He(...c),y}}}));function kt(e){return null!=e&&"object"==typeof e&&(e instanceof Uint32Array||"Uint32Array"===e.constructor.name)}function vt(e,t){if(Ce(t,16),!kt(e))throw Error("_encryptBlock accepts result of expandKeyLE");const r=xe(t);let{s0:n,s1:i,s2:s,s3:a}=ft(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}function Bt(e,t){if(Ce(t,16),!kt(e))throw Error("_decryptBlock accepts result of expandKeyLE");const r=xe(t);let{s0:n,s1:i,s2:s,s3:a}=gt(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}const It={encrypt(e,t){if(t.length>=2**32)throw Error("plaintext should be less than 4gb");const r=ht(e);if(16===t.length)vt(r,t);else{const e=xe(t);let n=e[0],i=e[1];for(let t=0,s=1;t<6;t++)for(let t=2;t<e.length;t+=2,s++){const{s0:a,s1:o,s2:c,s3:h}=ft(r,n,i,e[t],e[t+1]);n=a,i=o^it(s),e[t]=c,e[t+1]=h}e[0]=n,e[1]=i}r.fill(0)},decrypt(e,t){if(t.length-8>=2**32)throw Error("ciphertext should be less than 4gb");const r=ut(e),n=t.length/8-1;if(1===n)Bt(r,t);else{const e=xe(t);let i=e[0],s=e[1];for(let t=0,a=6*n;t<6;t++)for(let t=2*n;t>=1;t-=2,a--){s^=it(a);const{s0:n,s1:o,s2:c,s3:h}=gt(r,i,s,e[t],e[t+1]);i=n,s=o,e[t]=c,e[t+1]=h}e[0]=i,e[1]=s}r.fill(0)}},St=new Uint8Array(8).fill(166),Kt=Le({blockSize:8},(e=>({encrypt(t){if(Ce(t),!t.length||t.length%8!=0)throw Error("plaintext length must be non-empty and a multiple of 8 bytes");if(8===t.length)throw Error("8-byte keys not allowed in AESKW, use AESKWP instead");const r=function(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];Ce(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}(St,t);return It.encrypt(e,r),r},decrypt(t){if(Ce(t),t.length%8!=0||t.length<24)throw Error("ciphertext must be at least 24 bytes and a multiple of 8 bytes");const r=Ne(t);if(It.decrypt(e,r),!Me(r.subarray(0,8),St))throw Error("integrity check failed");return r.subarray(0,8).fill(0),r.subarray(8)}}))),Ct={expandKeyLE:ht,expandKeyDecLE:ut,encrypt:ft,decrypt:gt,encryptBlock:vt,decryptBlock:Bt,ctrCounter:dt,ctr32:At},Pt=_.getWebCrypto(),Ut=_.getNodeCrypto(),Dt=Ut?Ut.getCiphers():[],xt={idea:Dt.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Dt.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Dt.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Dt.includes("bf-cfb")?"bf-cfb":void 0,aes128:Dt.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Dt.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Dt.includes("aes-256-cfb")?"aes-256-cfb":void 0};class Qt{constructor(e,t,r){const{blockSize:n}=he(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(n),this.i=0,this.blockSize=n,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=he(e);return Pt.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Pt.importKey("raw",this.key,r,!1,["encrypt"]);const n=await Pt.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(n).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=_.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=_.concatUint8Array([this.prevBlock,n.subarray(0,n.length-this.blockSize)]),s=await this._runCBC(i);return Mt(s,n),this.prevBlock=s.slice(-this.blockSize),r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,s}let n;if(this.i+=r.length,this.i===this.nextBlock.length){const t=this.nextBlock;n=await this._runCBC(this.prevBlock),Mt(n,t),this.prevBlock=n.slice(),this.i=0;const i=e.subarray(r.length);this.nextBlock.set(i,this.i),this.i+=i.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);Mt(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(_.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return Mt(t,e),this.clearSensitiveData(),t}}class Rt{constructor(e,t,r,n){this.forEncryption=e;const{blockSize:i}=he(t);this.key=Ct.expandKeyLE(r),n.byteOffset%4!=0&&(n=n.slice()),this.prevBlock=Lt(n),this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i}_runCFB(e){const t=Lt(e),r=new Uint8Array(e.length),n=Lt(r);for(let e=0;e+4<=n.length;e+=4){const{s0:r,s1:i,s2:s,s3:a}=Ct.encrypt(this.key,this.prevBlock[0],this.prevBlock[1],this.prevBlock[2],this.prevBlock[3]);n[e+0]=t[e+0]^r,n[e+1]=t[e+1]^i,n[e+2]=t[e+2]^s,n[e+3]=t[e+3]^a,this.prevBlock=(this.forEncryption?n:t).slice(e,e+4)}return r}async processChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=_.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=this._runCFB(n);return r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,i}let n;if(this.i+=r.length,this.i===this.nextBlock.length){n=this._runCFB(this.nextBlock),this.i=0;const t=e.subarray(r.length);this.nextBlock.set(t,this.i),this.i+=t.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{e=this._runCFB(this.nextBlock).subarray(0,this.i)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.key.fill(0)}}function Mt(e,t){const r=Math.min(e.length,t.length);for(let n=0;n<r;n++)e[n]=e[n]^t[n]}const Lt=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4));var Tt=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n){const i=H.read(H.symmetric,e);if(Ut&&xt[i])return function(e,t,r,n){const i=H.read(H.symmetric,e),s=new Ut.createDecipheriv(xt[i],t,n);return K(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,n);if(_.isAES(e))return async function(e,t,r,n){if(_.isStream(r)){const i=new Rt(!1,e,t,n);return K(r,(e=>i.processChunk(e)),(()=>i.finish()))}return bt(t,n).decrypt(r)}(e,t,r,n);const s=new(await ae(e))(t),a=s.blockSize;let o=n,c=new Uint8Array;const h=e=>{e&&(c=_.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,n=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[n++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,n)};return K(r,h,h)},encrypt:async function(e,t,r,n,i){const s=H.read(H.symmetric,e);if(_.getNodeCrypto()&&xt[s])return function(e,t,r,n){const i=H.read(H.symmetric,e),s=new Ut.createCipheriv(xt[i],t,n);return K(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,n);if(_.isAES(e))return async function(e,t,r,n){if(Pt&&await Qt.isSupported(e)){const i=new Qt(e,t,n);return _.isStream(r)?K(r,(e=>i.encryptChunk(e)),(()=>i.finish())):i.encrypt(r)}if(_.isStream(r)){const i=new Rt(!0,e,t,n);return K(r,(e=>i.processChunk(e)),(()=>i.finish()))}return bt(t,n).encrypt(r)}(e,t,r,n);const a=new(await ae(e))(t),o=a.blockSize,c=n.slice();let h=new Uint8Array;const u=e=>{e&&(h=_.concatUint8Array([h,e]));const t=new Uint8Array(h.length);let r,n=0;for(;e?h.length>=o:h.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=h[r]^e[r],t[n++]=c[r];h=h.subarray(o)}return t.subarray(0,n)};return K(r,u,u)}});const Ft=_.getWebCrypto(),Nt=_.getNodeCrypto(),Ht=16;function Ot(e,t){const r=e.length-Ht;for(let n=0;n<Ht;n++)e[n+r]^=t[n];return e}const zt=new Uint8Array(Ht);async function _t(e){const t=await Gt(e),r=_.double(await t(zt)),n=_.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%Ht==0)return Ot(e,t);const n=new Uint8Array(e.length+(Ht-e.length%Ht));return n.set(e),n[e.length]=128,Ot(n,r)}(e,r,n))).subarray(-Ht)}}async function Gt(e){if(_.getNodeCrypto())return async function(t){const r=new Nt.createCipheriv("aes-"+8*e.length+"-cbc",e,zt).update(t);return new Uint8Array(r)};if(_.getWebCrypto())try{return e=await Ft.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await Ft.encrypt({name:"AES-CBC",iv:zt,length:8*Ht},e,t);return new Uint8Array(r).subarray(0,r.byteLength-Ht)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;_.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return mt(e,zt,{disablePadding:!0}).encrypt(t)}}const jt=_.getWebCrypto(),qt=_.getNodeCrypto(),Vt=_.getNodeBuffer(),Zt=16,Wt=Zt,Yt=Zt,Jt=new Uint8Array(Zt),$t=new Uint8Array(Zt);$t[Zt-1]=1;const Xt=new Uint8Array(Zt);async function er(e){const t=await _t(e);return function(e,r){return t(_.concatUint8Array([e,r]))}}async function tr(e){if(_.getNodeCrypto())return async function(t,r){const n=new qt.createCipheriv("aes-"+8*e.length+"-ctr",e,r),i=Vt.concat([n.update(t),n.final()]);return new Uint8Array(i)};if(_.getWebCrypto())try{const t=await jt.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const n=await jt.encrypt({name:"AES-CTR",counter:r,length:8*Zt},t,e);return new Uint8Array(n)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;_.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return wt(e,r).encrypt(t)}}async function rr(e,t){if(e!==H.symmetric.aes128&&e!==H.symmetric.aes192&&e!==H.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,n]=await Promise.all([er(t),tr(t)]);return{encrypt:async function(e,t,i){const[s,a]=await Promise.all([r(Jt,t),r($t,i)]),o=await n(e,s),c=await r(Xt,o);for(let e=0;e<Yt;e++)c[e]^=a[e]^s[e];return _.concatUint8Array([o,c])},decrypt:async function(e,t,i){if(e.length<Yt)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-Yt),a=e.subarray(-Yt),[o,c,h]=await Promise.all([r(Jt,t),r($t,i),r(Xt,s)]),u=h;for(let e=0;e<Yt;e++)u[e]^=c[e]^o[e];if(!_.equalsUint8Array(a,u))throw Error("Authentication tag mismatch");return await n(s,o)}}}Xt[Zt-1]=2,rr.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},rr.blockLength=Zt,rr.ivLength=Wt,rr.tagLength=Yt;const nr=16,ir=16;function sr(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function ar(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function or(e,t){return ar(e.slice(),t)}const cr=new Uint8Array(nr),hr=new Uint8Array([1]);async function ur(e,t){const{keySize:r}=he(e);if(!_.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let n=0;const i=mt(t,cr,{disablePadding:!0}),s=e=>i.encrypt(e),a=e=>i.decrypt(e);let o;function c(e,t,r,i){const a=t.length/nr|0;!function(e,t){const r=_.nbits(Math.max(e.length,t.length)/nr|0)-1;for(let e=n+1;e<=r;e++)o[e]=_.double(o[e-1]);n=r}(t,i);const c=_.concatUint8Array([cr.subarray(0,15-r.length),hr,r]),h=63&c[15];c[15]&=192;const u=s(c),l=_.concatUint8Array([u,or(u.subarray(0,8),u.subarray(1,9))]),y=_.shiftRight(l.subarray(0+(h>>3),17+(h>>3)),8-(7&h)).subarray(1),f=new Uint8Array(nr),g=new Uint8Array(t.length+ir);let p,d=0;for(p=0;p<a;p++)ar(y,o[sr(p+1)]),g.set(ar(e(or(y,t)),y),d),ar(f,e===s?t:g.subarray(d)),t=t.subarray(nr),d+=nr;if(t.length){ar(y,o.x);const r=s(y);g.set(or(t,r),d);const n=new Uint8Array(nr);n.set(e===s?t:g.subarray(d,-16),0),n[t.length]=128,ar(f,n),d+=t.length}const A=ar(s(ar(ar(f,y),o.$)),function(e){if(!e.length)return cr;const t=e.length/nr|0,r=new Uint8Array(nr),n=new Uint8Array(nr);for(let i=0;i<t;i++)ar(r,o[sr(i+1)]),ar(n,s(or(r,e))),e=e.subarray(nr);if(e.length){ar(r,o.x);const t=new Uint8Array(nr);t.set(e,0),t[e.length]=128,ar(t,r),ar(n,s(t))}return n}(i));return g.set(A,d),g}return function(){const e=s(cr),t=_.double(e);o=[],o[0]=_.double(t),o.x=e,o.$=t}(),{encrypt:async function(e,t,r){return c(s,e,t,r)},decrypt:async function(e,t,r){if(e.length<ir)throw Error("Invalid OCB ciphertext");const n=e.subarray(-16);e=e.subarray(0,-16);const i=c(a,e,t,r);if(_.equalsUint8Array(n,i.subarray(-16)))return i.subarray(0,-16);throw Error("Authentication tag mismatch")}}}ur.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},ur.blockLength=nr,ur.ivLength=15,ur.tagLength=ir;const lr=_.getWebCrypto(),yr=_.getNodeCrypto(),fr=_.getNodeBuffer(),gr=16,pr="AES-GCM";async function dr(e,t){if(e!==H.symmetric.aes128&&e!==H.symmetric.aes192&&e!==H.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(_.getNodeCrypto())return{encrypt:async function(e,r,n=new Uint8Array){const i=new yr.createCipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n);const s=fr.concat([i.update(e),i.final(),i.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,n=new Uint8Array){const i=new yr.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n),i.setAuthTag(e.slice(e.length-gr,e.length));const s=fr.concat([i.update(e.slice(0,e.length-gr)),i.final()]);return new Uint8Array(s)}};if(_.getWebCrypto())try{const e=await lr.importKey("raw",t,{name:pr},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(n,i,s=new Uint8Array){if(r&&!n.length)return Et(t,i,s).encrypt(n);const a=await lr.encrypt({name:pr,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(a)},decrypt:async function(n,i,s=new Uint8Array){if(r&&n.length===gr)return Et(t,i,s).decrypt(n);try{const t=await lr.decrypt({name:pr,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;_.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,n){return Et(t,r,n).encrypt(e)},decrypt:async function(e,r,n){return Et(t,r,n).decrypt(e)}}}dr.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},dr.blockLength=16,dr.ivLength=12,dr.tagLength=gr;var Ar={cfb:Tt,gcm:dr,experimentalGCM:dr,eax:rr,ocb:ur};const wr=BigInt(0),mr=BigInt(1);function br(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function Er(e,t){const r=e%t;return r<wr?r+t:r}function kr(e,t,r){if(r===wr)throw Error("Modulo cannot be zero");if(r===mr)return BigInt(0);if(t<wr)throw Error("Unsopported negative exponent");let n=t,i=e;i%=r;let s=BigInt(1);for(;n>wr;){const e=n&mr;n>>=mr;s=e?s*i%r:s,i=i*i%r}return s}function vr(e){return e>=wr?e:-e}function Br(e,t){const{gcd:r,x:n}=function(e,t){let r=BigInt(0),n=BigInt(1),i=BigInt(1),s=BigInt(0),a=vr(e),o=vr(t);const c=e<wr,h=t<wr;for(;o!==wr;){const e=a/o;let t=r;r=i-e*r,i=t,t=n,n=s-e*n,s=t,t=o,o=a%o,a=t}return{x:c?-i:i,y:h?-s:s,gcd:a}}(e,t);if(r!==mr)throw Error("Inverse does not exist");return Er(n+t,t)}function Ir(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function Sr(e,t){return(e>>BigInt(t)&mr)===wr?0:1}function Kr(e){const t=e<wr?BigInt(-1):wr;let r=1,n=e;for(;(n>>=mr)!==t;)r++;return r}function Cr(e){const t=e<wr?BigInt(-1):wr,r=BigInt(8);let n=1,i=e;for(;(i>>=r)!==t;)n++;return n}function Pr(e,t="be",r){let n=e.toString(16);n.length%2==1&&(n="0"+n);const i=n.length/2,s=new Uint8Array(r||i),a=r?r-i:0;let o=0;for(;o<i;)s[o+a]=parseInt(n.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const Ur=_.getNodeCrypto();function Dr(e){const t=new Uint8Array(e);if(Ur){const e=Ur.randomBytes(t.length);t.set(e)}else{if("undefined"==typeof crypto||!crypto.getRandomValues)throw Error("No secure random number generator available.");crypto.getRandomValues(t)}return t}function xr(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return Er(br(Dr(Cr(r)+8)),r)+e}var Qr=/*#__PURE__*/Object.freeze({__proto__:null,getRandomBigInteger:xr,getRandomBytes:Dr});const Rr=BigInt(1);function Mr(e,t,r){const n=BigInt(30),i=Rr<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=xr(i,i<<Rr),o=Ir(Er(a,n));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,Kr(a)>e&&(a=Er(a,i<<Rr),a+=i,o=Ir(Er(a,n)))}while(!Lr(a,t,r));return a}function Lr(e,t,r){return(!t||function(e,t){let r=e,n=t;for(;n!==wr;){const e=n;n=r%n,r=e}return r}(e-Rr,t)===Rr)&&(!!function(e){const t=BigInt(0);return Tr.every((r=>Er(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return kr(t,e-Rr,e)===Rr}(e)&&!!function(e,t){const r=Kr(e);t||(t=Math.max(1,r/48|0));const n=e-Rr;let i=0;for(;!Sr(n,i);)i++;const s=e>>BigInt(i);for(;t>0;t--){let t,r=kr(xr(BigInt(2),n),s,e);if(r!==Rr&&r!==n){for(t=1;t<i;t++){if(r=Er(r*r,e),r===Rr)return!1;if(r===n)break}if(t===i)return!1}}return!0}(e,r)))}const Tr=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const Fr=[];function Nr(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const n=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const n=Dr(e-r);for(let e=0;e<n.length;e++)0!==n[e]&&(t[r++]=n[e])}return t}(t-r-3),i=new Uint8Array(t);return i[1]=2,i.set(n,2),i.set(e,t-r),i}function Hr(e,t){let r=2,n=1;for(let t=r;t<e.length;t++)n&=0!==e[t],r+=n;const i=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&i>=8&!n;if(t)return _.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Or(e,t,r){let n;if(t.length!==Se.getHashByteLength(e))throw Error("Invalid hash length");const i=new Uint8Array(Fr[e].length);for(n=0;n<Fr[e].length;n++)i[n]=Fr[e][n];const s=i.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(i,r-s),o.set(t,r-t.length),o}Fr[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Fr[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Fr[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Fr[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Fr[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Fr[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Fr[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];var zr=/*#__PURE__*/Object.freeze({__proto__:null,emeDecode:Hr,emeEncode:Nr,emsaEncode:Or});const _r=_.getWebCrypto(),Gr=_.getNodeCrypto(),jr=BigInt(1);async function qr(e,t,r,n,i,s){const a=br(n),o=br(i),c=br(r);let h=Er(c,o-jr),u=Er(c,a-jr);return u=Pr(u),h=Pr(h),{kty:"RSA",n:Y(e),e:Y(t),d:Y(r),p:Y(i),q:Y(n),dp:Y(h),dq:Y(u),qi:Y(s),ext:!0}}function Vr(e,t){return{kty:"RSA",n:Y(e),e:Y(t),ext:!0}}function Zr(e,t){return{n:W(e.n),e:Pr(t),d:W(e.d),p:W(e.q),q:W(e.p),u:W(e.qi)}}var Wr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i,s,a,o){if(_.getNodeCrypto()&&!o)try{return await async function(e,t,r,n,i,s,a){const o=await qr(t,r,n,i,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:Gr.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(Gr.privateDecrypt(c,e))}catch(e){throw Error("Decryption error")}}(e,t,r,n,i,s,a)}catch(e){_.printDebugError(e)}return async function(e,t,r,n,i,s,a,o){if(e=br(e),t=br(t),r=br(r),n=br(n),i=br(i),s=br(s),a=br(a),e>=t)throw Error("Data too large.");const c=Er(n,s-jr),h=Er(n,i-jr),u=xr(BigInt(2),t),l=kr(Br(u,t),r,t);e=Er(e*l,t);const y=kr(e,h,i),f=kr(e,c,s),g=Er(a*(f-y),s);let p=g*i+y;return p=Er(p*u,t),Hr(Pr(p,"be",Cr(t)),o)}(e,t,r,n,i,s,a,o)},encrypt:async function(e,t,r){return _.getNodeCrypto()?async function(e,t,r){const n=Vr(t,r),i={key:n,format:"jwk",type:"pkcs1",padding:Gr.constants.RSA_PKCS1_PADDING};return new Uint8Array(Gr.publicEncrypt(i,e))}(e,t,r):async function(e,t,r){if(t=br(t),e=br(Nr(e,Cr(t))),r=br(r),e>=t)throw Error("Message size cannot exceed modulus size");return Pr(kr(e,r,t),"be",Cr(t))}(e,t,r)},generate:async function(e,t){if(t=BigInt(t),_.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:Pr(t),hash:{name:"SHA-1"}},n=await _r.generateKey(r,!0,["sign","verify"]);return Zr(await _r.exportKey("jwk",n.privateKey),t)}if(_.getNodeCrypto()){const r={modulusLength:e,publicExponent:Ir(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},n=await new Promise(((e,t)=>{Gr.generateKeyPair("rsa",r,((r,n,i)=>{r?t(r):e(i)}))}));return Zr(n,t)}let r,n,i;do{n=Mr(e-(e>>1),t,40),r=Mr(e>>1,t,40),i=r*n}while(Kr(i)!==e);const s=(r-jr)*(n-jr);return n<r&&([r,n]=[n,r]),{n:Pr(i),e:Pr(t),d:Pr(Br(t,s)),p:Pr(r),q:Pr(n),u:Pr(Br(r,n))}},sign:async function(e,t,r,n,i,s,a,o,c){if(t&&!_.isStream(t))if(_.getWebCrypto())try{return await async function(e,t,r,n,i,s,a,o){const c=await qr(r,n,i,s,a,o),h={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},u=await _r.importKey("jwk",c,h,!1,["sign"]);return new Uint8Array(await _r.sign("RSASSA-PKCS1-v1_5",u,t))}(H.read(H.webHash,e),t,r,n,i,s,a,o)}catch(e){_.printDebugError(e)}else if(_.getNodeCrypto())return async function(e,t,r,n,i,s,a,o){const c=Gr.createSign(H.read(H.hash,e));c.write(t),c.end();const h=await qr(r,n,i,s,a,o);return new Uint8Array(c.sign({key:h,format:"jwk",type:"pkcs1"}))}(e,t,r,n,i,s,a,o);return async function(e,t,r,n){t=br(t);const i=br(Or(e,n,Cr(t)));if(r=br(r),i>=t)throw Error("Message size cannot exceed modulus size");return Pr(kr(i,r,t),"be",Cr(t))}(e,r,i,c)},validateParams:async function(e,t,r,n,i,s){if(e=br(e),(n=br(n))*(i=br(i))!==e)return!1;const a=BigInt(2);if(Er(n*(s=br(s)),i)!==BigInt(1))return!1;t=br(t),r=br(r);const o=xr(a,a<<BigInt(Math.floor(Kr(e)/3))),c=o*r*t;return!(Er(c,n-jr)!==o||Er(c,i-jr)!==o)},verify:async function(e,t,r,n,i,s){if(t&&!_.isStream(t))if(_.getWebCrypto())try{return await async function(e,t,r,n,i){const s=Vr(n,i),a=await _r.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return _r.verify("RSASSA-PKCS1-v1_5",a,r,t)}(H.read(H.webHash,e),t,r,n,i)}catch(e){_.printDebugError(e)}else if(_.getNodeCrypto())return async function(e,t,r,n,i){const s=Vr(n,i),a={key:s,format:"jwk",type:"pkcs1"},o=Gr.createVerify(H.read(H.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch(e){return!1}}(e,t,r,n,i);return async function(e,t,r,n,i){if(r=br(r),t=br(t),n=br(n),t>=r)throw Error("Signature size cannot exceed modulus size");const s=Pr(kr(t,n,r),"be",Cr(r)),a=Or(e,i,Cr(r));return _.equalsUint8Array(s,a)}(e,r,n,i,s)}});const Yr=BigInt(1);var Jr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i){return e=br(e),t=br(t),r=br(r),Hr(Pr(Er(Br(kr(e,n=br(n),r),r)*t,r),"be",Cr(r)),i)},encrypt:async function(e,t,r,n){t=br(t),r=br(r),n=br(n);const i=br(Nr(e,Cr(t))),s=xr(Yr,t-Yr);return{c1:Pr(kr(r,s,t)),c2:Pr(Er(kr(n,s,t)*i,t))}},validateParams:async function(e,t,r,n){if(e=br(e),t=br(t),r=br(r),t<=Yr||t>=e)return!1;const i=BigInt(Kr(e));if(i<BigInt(1023))return!1;if(kr(t,e-Yr,e)!==Yr)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=Er(s*t,e),s===Yr)return!1;a++}n=br(n);const h=xr(o<<i-Yr,o<<i);return r===kr(t,(e-Yr)*h+n,e)}});const $r=a&&"object"==typeof a&&"webcrypto"in a?a.webcrypto:void 0,Xr={};var en=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},tn=function(){throw Error("no PRNG")},rn=new Uint8Array(32);rn[0]=9;var nn=en(),sn=en([1]),an=en([56129,1]),on=en([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),cn=en([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),hn=en([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),un=en([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),ln=en([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function yn(e,t,r,n){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=n>>24&255,e[t+5]=n>>16&255,e[t+6]=n>>8&255,e[t+7]=255&n}function fn(e,t,r,n){return function(e,t,r,n,i){var s,a=0;for(s=0;s<i;s++)a|=e[t+s]^r[n+s];return(1&a-1>>>8)-1}(e,t,r,n,32)}function gn(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function pn(e){var t,r,n=1;for(t=0;t<16;t++)r=e[t]+n+65535,n=Math.floor(r/65536),e[t]=r-65536*n;e[0]+=n-1+37*(n-1)}function dn(e,t,r){for(var n,i=~(r-1),s=0;s<16;s++)n=i&(e[s]^t[s]),e[s]^=n,t[s]^=n}function An(e,t){var r,n,i,s=en(),a=en();for(r=0;r<16;r++)a[r]=t[r];for(pn(a),pn(a),pn(a),n=0;n<2;n++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),i=s[15]>>16&1,s[14]&=65535,dn(a,s,1-i)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function wn(e,t){var r=new Uint8Array(32),n=new Uint8Array(32);return An(r,e),An(n,t),fn(r,0,n,0)}function mn(e){var t=new Uint8Array(32);return An(t,e),1&t[0]}function bn(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function En(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]+r[n]}function kn(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]-r[n]}function vn(e,t,r){var n,i,s=0,a=0,o=0,c=0,h=0,u=0,l=0,y=0,f=0,g=0,p=0,d=0,A=0,w=0,m=0,b=0,E=0,k=0,v=0,B=0,I=0,S=0,K=0,C=0,P=0,U=0,D=0,x=0,Q=0,R=0,M=0,L=r[0],T=r[1],F=r[2],N=r[3],H=r[4],O=r[5],z=r[6],_=r[7],G=r[8],j=r[9],q=r[10],V=r[11],Z=r[12],W=r[13],Y=r[14],J=r[15];s+=(n=t[0])*L,a+=n*T,o+=n*F,c+=n*N,h+=n*H,u+=n*O,l+=n*z,y+=n*_,f+=n*G,g+=n*j,p+=n*q,d+=n*V,A+=n*Z,w+=n*W,m+=n*Y,b+=n*J,a+=(n=t[1])*L,o+=n*T,c+=n*F,h+=n*N,u+=n*H,l+=n*O,y+=n*z,f+=n*_,g+=n*G,p+=n*j,d+=n*q,A+=n*V,w+=n*Z,m+=n*W,b+=n*Y,E+=n*J,o+=(n=t[2])*L,c+=n*T,h+=n*F,u+=n*N,l+=n*H,y+=n*O,f+=n*z,g+=n*_,p+=n*G,d+=n*j,A+=n*q,w+=n*V,m+=n*Z,b+=n*W,E+=n*Y,k+=n*J,c+=(n=t[3])*L,h+=n*T,u+=n*F,l+=n*N,y+=n*H,f+=n*O,g+=n*z,p+=n*_,d+=n*G,A+=n*j,w+=n*q,m+=n*V,b+=n*Z,E+=n*W,k+=n*Y,v+=n*J,h+=(n=t[4])*L,u+=n*T,l+=n*F,y+=n*N,f+=n*H,g+=n*O,p+=n*z,d+=n*_,A+=n*G,w+=n*j,m+=n*q,b+=n*V,E+=n*Z,k+=n*W,v+=n*Y,B+=n*J,u+=(n=t[5])*L,l+=n*T,y+=n*F,f+=n*N,g+=n*H,p+=n*O,d+=n*z,A+=n*_,w+=n*G,m+=n*j,b+=n*q,E+=n*V,k+=n*Z,v+=n*W,B+=n*Y,I+=n*J,l+=(n=t[6])*L,y+=n*T,f+=n*F,g+=n*N,p+=n*H,d+=n*O,A+=n*z,w+=n*_,m+=n*G,b+=n*j,E+=n*q,k+=n*V,v+=n*Z,B+=n*W,I+=n*Y,S+=n*J,y+=(n=t[7])*L,f+=n*T,g+=n*F,p+=n*N,d+=n*H,A+=n*O,w+=n*z,m+=n*_,b+=n*G,E+=n*j,k+=n*q,v+=n*V,B+=n*Z,I+=n*W,S+=n*Y,K+=n*J,f+=(n=t[8])*L,g+=n*T,p+=n*F,d+=n*N,A+=n*H,w+=n*O,m+=n*z,b+=n*_,E+=n*G,k+=n*j,v+=n*q,B+=n*V,I+=n*Z,S+=n*W,K+=n*Y,C+=n*J,g+=(n=t[9])*L,p+=n*T,d+=n*F,A+=n*N,w+=n*H,m+=n*O,b+=n*z,E+=n*_,k+=n*G,v+=n*j,B+=n*q,I+=n*V,S+=n*Z,K+=n*W,C+=n*Y,P+=n*J,p+=(n=t[10])*L,d+=n*T,A+=n*F,w+=n*N,m+=n*H,b+=n*O,E+=n*z,k+=n*_,v+=n*G,B+=n*j,I+=n*q,S+=n*V,K+=n*Z,C+=n*W,P+=n*Y,U+=n*J,d+=(n=t[11])*L,A+=n*T,w+=n*F,m+=n*N,b+=n*H,E+=n*O,k+=n*z,v+=n*_,B+=n*G,I+=n*j,S+=n*q,K+=n*V,C+=n*Z,P+=n*W,U+=n*Y,D+=n*J,A+=(n=t[12])*L,w+=n*T,m+=n*F,b+=n*N,E+=n*H,k+=n*O,v+=n*z,B+=n*_,I+=n*G,S+=n*j,K+=n*q,C+=n*V,P+=n*Z,U+=n*W,D+=n*Y,x+=n*J,w+=(n=t[13])*L,m+=n*T,b+=n*F,E+=n*N,k+=n*H,v+=n*O,B+=n*z,I+=n*_,S+=n*G,K+=n*j,C+=n*q,P+=n*V,U+=n*Z,D+=n*W,x+=n*Y,Q+=n*J,m+=(n=t[14])*L,b+=n*T,E+=n*F,k+=n*N,v+=n*H,B+=n*O,I+=n*z,S+=n*_,K+=n*G,C+=n*j,P+=n*q,U+=n*V,D+=n*Z,x+=n*W,Q+=n*Y,R+=n*J,b+=(n=t[15])*L,a+=38*(k+=n*F),o+=38*(v+=n*N),c+=38*(B+=n*H),h+=38*(I+=n*O),u+=38*(S+=n*z),l+=38*(K+=n*_),y+=38*(C+=n*G),f+=38*(P+=n*j),g+=38*(U+=n*q),p+=38*(D+=n*V),d+=38*(x+=n*Z),A+=38*(Q+=n*W),w+=38*(R+=n*Y),m+=38*(M+=n*J),s=(n=(s+=38*(E+=n*T))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s=(n=(s+=i-1+37*(i-1))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s+=i-1+37*(i-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=h,e[5]=u,e[6]=l,e[7]=y,e[8]=f,e[9]=g,e[10]=p,e[11]=d,e[12]=A,e[13]=w,e[14]=m,e[15]=b}function Bn(e,t){vn(e,t,t)}function In(e,t){var r,n=en();for(r=0;r<16;r++)n[r]=t[r];for(r=253;r>=0;r--)Bn(n,n),2!==r&&4!==r&&vn(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}function Sn(e,t,r){var n,i,s=new Uint8Array(32),a=new Float64Array(80),o=en(),c=en(),h=en(),u=en(),l=en(),y=en();for(i=0;i<31;i++)s[i]=t[i];for(s[31]=127&t[31]|64,s[0]&=248,bn(a,r),i=0;i<16;i++)c[i]=a[i],u[i]=o[i]=h[i]=0;for(o[0]=u[0]=1,i=254;i>=0;--i)dn(o,c,n=s[i>>>3]>>>(7&i)&1),dn(h,u,n),En(l,o,h),kn(o,o,h),En(h,c,u),kn(c,c,u),Bn(u,l),Bn(y,o),vn(o,h,o),vn(h,c,l),En(l,o,h),kn(o,o,h),Bn(c,o),kn(h,u,y),vn(o,h,an),En(o,o,u),vn(h,h,o),vn(o,u,y),vn(u,c,a),Bn(c,l),dn(o,c,n),dn(h,u,n);for(i=0;i<16;i++)a[i+16]=o[i],a[i+32]=h[i],a[i+48]=c[i],a[i+64]=u[i];var f=a.subarray(32),g=a.subarray(16);return In(f,f),vn(g,g,f),An(e,g),0}function Kn(e,t){return Sn(e,t,rn)}var Cn=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function Pn(e,t,r,n){for(var i,s,a,o,c,h,u,l,y,f,g,p,d,A,w,m,b,E,k,v,B,I,S,K,C,P,U=new Int32Array(16),D=new Int32Array(16),x=e[0],Q=e[1],R=e[2],M=e[3],L=e[4],T=e[5],F=e[6],N=e[7],H=t[0],O=t[1],z=t[2],_=t[3],G=t[4],j=t[5],q=t[6],V=t[7],Z=0;n>=128;){for(k=0;k<16;k++)v=8*k+Z,U[k]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],D[k]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(k=0;k<80;k++)if(i=x,s=Q,a=R,o=M,c=L,h=T,u=F,N,y=H,f=O,g=z,p=_,d=G,A=j,w=q,V,S=65535&(I=V),K=I>>>16,C=65535&(B=N),P=B>>>16,S+=65535&(I=(G>>>14|L<<18)^(G>>>18|L<<14)^(L>>>9|G<<23)),K+=I>>>16,C+=65535&(B=(L>>>14|G<<18)^(L>>>18|G<<14)^(G>>>9|L<<23)),P+=B>>>16,S+=65535&(I=G&j^~G&q),K+=I>>>16,C+=65535&(B=L&T^~L&F),P+=B>>>16,B=Cn[2*k],S+=65535&(I=Cn[2*k+1]),K+=I>>>16,C+=65535&B,P+=B>>>16,B=U[k%16],K+=(I=D[k%16])>>>16,C+=65535&B,P+=B>>>16,C+=(K+=(S+=65535&I)>>>16)>>>16,S=65535&(I=E=65535&S|K<<16),K=I>>>16,C=65535&(B=b=65535&C|(P+=C>>>16)<<16),P=B>>>16,S+=65535&(I=(H>>>28|x<<4)^(x>>>2|H<<30)^(x>>>7|H<<25)),K+=I>>>16,C+=65535&(B=(x>>>28|H<<4)^(H>>>2|x<<30)^(H>>>7|x<<25)),P+=B>>>16,K+=(I=H&O^H&z^O&z)>>>16,C+=65535&(B=x&Q^x&R^Q&R),P+=B>>>16,l=65535&(C+=(K+=(S+=65535&I)>>>16)>>>16)|(P+=C>>>16)<<16,m=65535&S|K<<16,S=65535&(I=p),K=I>>>16,C=65535&(B=o),P=B>>>16,K+=(I=E)>>>16,C+=65535&(B=b),P+=B>>>16,Q=i,R=s,M=a,L=o=65535&(C+=(K+=(S+=65535&I)>>>16)>>>16)|(P+=C>>>16)<<16,T=c,F=h,N=u,x=l,O=y,z=f,_=g,G=p=65535&S|K<<16,j=d,q=A,V=w,H=m,k%16==15)for(v=0;v<16;v++)B=U[v],S=65535&(I=D[v]),K=I>>>16,C=65535&B,P=B>>>16,B=U[(v+9)%16],S+=65535&(I=D[(v+9)%16]),K+=I>>>16,C+=65535&B,P+=B>>>16,b=U[(v+1)%16],S+=65535&(I=((E=D[(v+1)%16])>>>1|b<<31)^(E>>>8|b<<24)^(E>>>7|b<<25)),K+=I>>>16,C+=65535&(B=(b>>>1|E<<31)^(b>>>8|E<<24)^b>>>7),P+=B>>>16,b=U[(v+14)%16],K+=(I=((E=D[(v+14)%16])>>>19|b<<13)^(b>>>29|E<<3)^(E>>>6|b<<26))>>>16,C+=65535&(B=(b>>>19|E<<13)^(E>>>29|b<<3)^b>>>6),P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,U[v]=65535&C|P<<16,D[v]=65535&S|K<<16;S=65535&(I=H),K=I>>>16,C=65535&(B=x),P=B>>>16,B=e[0],K+=(I=t[0])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[0]=x=65535&C|P<<16,t[0]=H=65535&S|K<<16,S=65535&(I=O),K=I>>>16,C=65535&(B=Q),P=B>>>16,B=e[1],K+=(I=t[1])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[1]=Q=65535&C|P<<16,t[1]=O=65535&S|K<<16,S=65535&(I=z),K=I>>>16,C=65535&(B=R),P=B>>>16,B=e[2],K+=(I=t[2])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[2]=R=65535&C|P<<16,t[2]=z=65535&S|K<<16,S=65535&(I=_),K=I>>>16,C=65535&(B=M),P=B>>>16,B=e[3],K+=(I=t[3])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[3]=M=65535&C|P<<16,t[3]=_=65535&S|K<<16,S=65535&(I=G),K=I>>>16,C=65535&(B=L),P=B>>>16,B=e[4],K+=(I=t[4])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[4]=L=65535&C|P<<16,t[4]=G=65535&S|K<<16,S=65535&(I=j),K=I>>>16,C=65535&(B=T),P=B>>>16,B=e[5],K+=(I=t[5])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[5]=T=65535&C|P<<16,t[5]=j=65535&S|K<<16,S=65535&(I=q),K=I>>>16,C=65535&(B=F),P=B>>>16,B=e[6],K+=(I=t[6])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[6]=F=65535&C|P<<16,t[6]=q=65535&S|K<<16,S=65535&(I=V),K=I>>>16,C=65535&(B=N),P=B>>>16,B=e[7],K+=(I=t[7])>>>16,C+=65535&B,P+=B>>>16,P+=(C+=(K+=(S+=65535&I)>>>16)>>>16)>>>16,e[7]=N=65535&C|P<<16,t[7]=V=65535&S|K<<16,Z+=128,n-=128}return n}function Un(e,t,r){var n,i=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(i[0]=1779033703,i[1]=3144134277,i[2]=1013904242,i[3]=2773480762,i[4]=1359893119,i[5]=2600822924,i[6]=528734635,i[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,Pn(i,s,t,r),r%=128,n=0;n<r;n++)a[n]=t[o-r+n];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,yn(a,r-8,o/536870912|0,o<<3),Pn(i,s,a,r),n=0;n<8;n++)yn(e,8*n,i[n],s[n]);return 0}function Dn(e,t){var r=en(),n=en(),i=en(),s=en(),a=en(),o=en(),c=en(),h=en(),u=en();kn(r,e[1],e[0]),kn(u,t[1],t[0]),vn(r,r,u),En(n,e[0],e[1]),En(u,t[0],t[1]),vn(n,n,u),vn(i,e[3],t[3]),vn(i,i,cn),vn(s,e[2],t[2]),En(s,s,s),kn(a,n,r),kn(o,s,i),En(c,s,i),En(h,n,r),vn(e[0],a,o),vn(e[1],h,c),vn(e[2],c,o),vn(e[3],a,h)}function xn(e,t,r){var n;for(n=0;n<4;n++)dn(e[n],t[n],r)}function Qn(e,t){var r=en(),n=en(),i=en();In(i,t[2]),vn(r,t[0],i),vn(n,t[1],i),An(e,n),e[31]^=mn(r)<<7}function Rn(e,t,r){var n,i;for(gn(e[0],nn),gn(e[1],sn),gn(e[2],sn),gn(e[3],nn),i=255;i>=0;--i)xn(e,t,n=r[i/8|0]>>(7&i)&1),Dn(t,e),Dn(e,e),xn(e,t,n)}function Mn(e,t){var r=[en(),en(),en(),en()];gn(r[0],hn),gn(r[1],un),gn(r[2],sn),vn(r[3],hn,un),Rn(e,r,t)}function Ln(e,t,r){var n,i=new Uint8Array(64),s=[en(),en(),en(),en()];for(r||tn(t,32),Un(i,t,32),i[0]&=248,i[31]&=127,i[31]|=64,Mn(s,i),Qn(e,s),n=0;n<32;n++)t[n+32]=e[n];return 0}var Tn=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function Fn(e,t){var r,n,i,s;for(n=63;n>=32;--n){for(r=0,i=n-32,s=n-12;i<s;++i)t[i]+=r-16*t[n]*Tn[i-(n-32)],r=Math.floor((t[i]+128)/256),t[i]-=256*r;t[i]+=r,t[n]=0}for(r=0,i=0;i<32;i++)t[i]+=r-(t[31]>>4)*Tn[i],r=t[i]>>8,t[i]&=255;for(i=0;i<32;i++)t[i]-=r*Tn[i];for(n=0;n<32;n++)t[n+1]+=t[n]>>8,e[n]=255&t[n]}function Nn(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;Fn(e,r)}function Hn(e,t){var r=en(),n=en(),i=en(),s=en(),a=en(),o=en(),c=en();return gn(e[2],sn),bn(e[1],t),Bn(i,e[1]),vn(s,i,on),kn(i,i,e[2]),En(s,e[2],s),Bn(a,s),Bn(o,a),vn(c,o,a),vn(r,c,i),vn(r,r,s),function(e,t){var r,n=en();for(r=0;r<16;r++)n[r]=t[r];for(r=250;r>=0;r--)Bn(n,n),1!==r&&vn(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}(r,r),vn(r,r,i),vn(r,r,s),vn(r,r,s),vn(e[0],r,s),Bn(n,e[0]),vn(n,n,s),wn(n,i)&&vn(e[0],e[0],ln),Bn(n,e[0]),vn(n,n,s),wn(n,i)?-1:(mn(e[0])===t[31]>>7&&kn(e[0],nn,e[0]),vn(e[3],e[0],e[1]),0)}var On=64;function zn(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}Xr.scalarMult=function(e,t){if(zn(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return Sn(r,e,t),r},Xr.box={},Xr.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){tn(t,32),Kn(e,t)}(e,t),{publicKey:e,secretKey:t}},Xr.box.keyPair.fromSecretKey=function(e){if(zn(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return Kn(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},Xr.sign=function(e,t){if(zn(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(On+e.length);return function(e,t,r,n){var i,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),h=new Float64Array(64),u=[en(),en(),en(),en()];Un(a,n,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(i=0;i<r;i++)e[64+i]=t[i];for(i=0;i<32;i++)e[32+i]=a[32+i];for(Un(c,e.subarray(32),r+32),Nn(c),Mn(u,c),Qn(e,u),i=32;i<64;i++)e[i]=n[i];for(Un(o,e,r+64),Nn(o),i=0;i<64;i++)h[i]=0;for(i=0;i<32;i++)h[i]=c[i];for(i=0;i<32;i++)for(s=0;s<32;s++)h[i+s]+=o[i]*a[s];Fn(e.subarray(32),h)}(r,e,e.length,t),r},Xr.sign.detached=function(e,t){for(var r=Xr.sign(e,t),n=new Uint8Array(On),i=0;i<n.length;i++)n[i]=r[i];return n},Xr.sign.detached.verify=function(e,t,r){if(zn(e,t,r),t.length!==On)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var n,i=new Uint8Array(On+e.length),s=new Uint8Array(On+e.length);for(n=0;n<On;n++)i[n]=t[n];for(n=0;n<e.length;n++)i[n+On]=e[n];return function(e,t,r,n){var i,s=new Uint8Array(32),a=new Uint8Array(64),o=[en(),en(),en(),en()],c=[en(),en(),en(),en()];if(r<64)return-1;if(Hn(c,n))return-1;for(i=0;i<r;i++)e[i]=t[i];for(i=0;i<32;i++)e[i+32]=n[i];if(Un(a,e,r),Nn(a),Rn(o,c,a),Mn(c,t.subarray(32)),Dn(o,c),Qn(s,o),r-=64,fn(t,0,s,0)){for(i=0;i<r;i++)e[i]=0;return-1}for(i=0;i<r;i++)e[i]=t[i+64];return r}(s,i,i.length,r)>=0},Xr.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return Ln(e,t),{publicKey:e,secretKey:t}},Xr.sign.keyPair.fromSecretKey=function(e){if(zn(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},Xr.sign.keyPair.fromSeed=function(e){if(zn(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),n=0;n<32;n++)r[n]=e[n];return Ln(t,r,!0),{publicKey:t,secretKey:r}},Xr.setPRNG=function(e){tn=e},function(){if($r&&$r.getRandomValues){Xr.setPRNG((function(e,t){var r,n=new Uint8Array(t);for(r=0;r<t;r+=65536)$r.getRandomValues(n.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=n[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(n)}))}}();const _n={"2a8648ce3d030107":H.curve.nistP256,"2b81040022":H.curve.nistP384,"2b81040023":H.curve.nistP521,"2b8104000a":H.curve.secp256k1,"2b06010401da470f01":H.curve.ed25519Legacy,"2b060104019755010501":H.curve.curve25519Legacy,"2b2403030208010107":H.curve.brainpoolP256r1,"2b240303020801010b":H.curve.brainpoolP384r1,"2b240303020801010d":H.curve.brainpoolP512r1};class Gn{constructor(e){if(e instanceof Gn)this.oid=e.oid;else if(_.isArray(e)||_.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return _.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return _.uint8ArrayToHex(this.oid)}getName(){const e=_n[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function jn(e){let t,r=0;const n=e[0];return n<192?([r]=e,t=1):n<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===n&&(r=_.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function qn(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):_.concatUint8Array([new Uint8Array([255]),_.writeNumber(e,4)])}function Vn(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function Zn(e){return new Uint8Array([192|e])}function Wn(e,t){return _.concatUint8Array([Zn(e),qn(t)])}function Yn(e){return[H.packet.literalData,H.packet.compressedData,H.packet.symmetricallyEncryptedData,H.packet.symEncryptedIntegrityProtectedData,H.packet.aeadEncryptedData].includes(e)}async function Jn(e,t){const r=T(e);let n,i;try{const s=await r.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await r.readByte();let o,c,h=-1,u=-1;u=0,64&a&&(u=1),u?h=63&a:(h=(63&a)>>2,c=3&a);const l=Yn(h);let f,g=null;if(l){if("array"===_.isStream(e)){const e=new y;n=F(e),g=e}else{const e=new TransformStream;n=F(e.writable),g=e.readable}i=t({tag:h,packet:g})}else g=[];do{if(u){const e=await r.readByte();if(f=!1,e<192)o=e;else if(e>=192&&e<224)o=(e-192<<8)+await r.readByte()+192;else if(e>223&&e<255){if(o=1<<(31&e),f=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte()}else switch(c){case 0:o=await r.readByte();break;case 1:o=await r.readByte()<<8|await r.readByte();break;case 2:o=await r.readByte()<<24|await r.readByte()<<16|await r.readByte()<<8|await r.readByte();break;default:o=1/0}if(o>0){let e=0;for(;;){n&&await n.ready;const{done:t,value:i}=await r.read();if(t){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?i:i.subarray(0,o-e);if(n?await n.write(s):g.push(s),e+=i.length,e>=o){r.unshift(i.subarray(o-e+i.length));break}}}}while(f);const p=await r.peekBytes(l?1/0:2);return n?(await n.ready,await n.close()):(g=_.concatUint8Array(g),await t({tag:h,packet:g})),!p||!p.length}catch(e){if(n)return await n.abort(e),!0;throw e}finally{n&&await i,r.releaseLock()}}class $n extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,$n),this.name="UnsupportedError"}}class Xn extends $n{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,$n),this.name="UnknownPacketError"}}class ei{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}
|
|
4
|
+
/*! noble-ed25519 - MIT License (c) 2019 Paul Miller (paulmillr.com) */const ti=BigInt(0),ri=BigInt(1),ni=BigInt(2),ii=BigInt(8),si=BigInt("7237005577332262213973186563042994240857116359379907606001950938285454250989"),ai=Object.freeze({a:BigInt(-1),d:BigInt("37095705934669439343138083508754565189542113879843219016388785533085940283555"),P:BigInt("57896044618658097711785492504343953926634992332820282019728792003956564819949"),l:si,n:si,h:BigInt(8),Gx:BigInt("15112221349535400772501151409588531511454012693041857206046113283949847762202"),Gy:BigInt("46316835694926478169428394003475163141307993866256225615783033603165251855960")}),oi=BigInt("0x10000000000000000000000000000000000000000000000000000000000000000"),ci=BigInt("19681161376707505956807079304988542015446066515923890162744021073123829784752");BigInt("6853475219497561581579357271197624642482790079785650197046958215289687604742");const hi=BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235"),ui=BigInt("54469307008909316920995813868745141605393597292927456921205312896311721017578"),li=BigInt("1159843021668779879193775521855586647937357759715417654439879720876111806838"),yi=BigInt("40440834346308536858101042469323190826248399146238708352240133220865137265952");class fi{constructor(e,t,r,n){this.x=e,this.y=t,this.z=r,this.t=n}static fromAffine(e){if(!(e instanceof bi))throw new TypeError("ExtendedPoint#fromAffine: expected Point");return e.equals(bi.ZERO)?fi.ZERO:new fi(e.x,e.y,ri,xi(e.x*e.y))}static toAffineBatch(e){const t=function(e,t=ai.P){const r=Array(e.length),n=e.reduce(((e,n,i)=>n===ti?e:(r[i]=e,xi(e*n,t))),ri),i=Qi(n,t);return e.reduceRight(((e,n,i)=>n===ti?e:(r[i]=xi(e*r[i],t),xi(e*n,t))),i),r}(e.map((e=>e.z)));return e.map(((e,r)=>e.toAffine(t[r])))}static normalizeZ(e){return this.toAffineBatch(e).map(this.fromAffine)}equals(e){pi(e);const{x:t,y:r,z:n}=this,{x:i,y:s,z:a}=e,o=xi(t*a),c=xi(i*n),h=xi(r*a),u=xi(s*n);return o===c&&h===u}negate(){return new fi(xi(-this.x),this.y,this.z,xi(-this.t))}double(){const{x:e,y:t,z:r}=this,{a:n}=ai,i=xi(e*e),s=xi(t*t),a=xi(ni*xi(r*r)),o=xi(n*i),c=e+t,h=xi(xi(c*c)-i-s),u=o+s,l=u-a,y=o-s,f=xi(h*l),g=xi(u*y),p=xi(h*y),d=xi(l*u);return new fi(f,g,d,p)}add(e){pi(e);const{x:t,y:r,z:n,t:i}=this,{x:s,y:a,z:o,t:c}=e,h=xi((r-t)*(a+s)),u=xi((r+t)*(a-s)),l=xi(u-h);if(l===ti)return this.double();const y=xi(n*ni*c),f=xi(i*ni*o),g=f+y,p=u+h,d=f-y,A=xi(g*l),w=xi(p*d),m=xi(g*d),b=xi(l*p);return new fi(A,w,b,m)}subtract(e){return this.add(e.negate())}precomputeWindow(e){const t=1+256/e,r=[];let n=this,i=n;for(let s=0;s<t;s++){i=n,r.push(i);for(let t=1;t<2**(e-1);t++)i=i.add(n),r.push(i);n=i.double()}return r}wNAF(e,t){!t&&this.equals(fi.BASE)&&(t=bi.BASE);const r=t&&t._WINDOW_SIZE||1;if(256%r)throw Error("Point#wNAF: Invalid precomputation window, must be power of 2");let n=t&&mi.get(t);n||(n=this.precomputeWindow(r),t&&1!==r&&(n=fi.normalizeZ(n),mi.set(t,n)));let i=fi.ZERO,s=fi.BASE;const a=1+256/r,o=2**(r-1),c=BigInt(2**r-1),h=2**r,u=BigInt(r);for(let t=0;t<a;t++){const r=t*o;let a=Number(e&c);e>>=u,a>o&&(a-=h,e+=ri);const l=r,y=r+Math.abs(a)-1,f=t%2!=0,g=a<0;0===a?s=s.add(gi(f,n[l])):i=i.add(gi(g,n[y]))}return fi.normalizeZ([i,s])[0]}multiply(e,t){return this.wNAF(Ni(e,ai.l),t)}multiplyUnsafe(e){let t=Ni(e,ai.l,!1);const r=fi.BASE,n=fi.ZERO;if(t===ti)return n;if(this.equals(n)||t===ri)return this;if(this.equals(r))return this.wNAF(t);let i=n,s=this;for(;t>ti;)t&ri&&(i=i.add(s)),s=s.double(),t>>=ri;return i}isSmallOrder(){return this.multiplyUnsafe(ai.h).equals(fi.ZERO)}isTorsionFree(){let e=this.multiplyUnsafe(ai.l/ni).double();return ai.l%ni&&(e=e.add(this)),e.equals(fi.ZERO)}toAffine(e){const{x:t,y:r,z:n}=this,i=this.equals(fi.ZERO);null==e&&(e=i?ii:Qi(n));const s=xi(t*e),a=xi(r*e),o=xi(n*e);if(i)return bi.ZERO;if(o!==ri)throw Error("invZ was invalid");return new bi(s,a)}fromRistrettoBytes(){Ai()}toRistrettoBytes(){Ai()}fromRistrettoHash(){Ai()}}function gi(e,t){const r=t.negate();return e?r:t}function pi(e){if(!(e instanceof fi))throw new TypeError("ExtendedPoint expected")}function di(e){if(!(e instanceof wi))throw new TypeError("RistrettoPoint expected")}function Ai(){throw Error("Legacy method: switch to RistrettoPoint")}fi.BASE=new fi(ai.Gx,ai.Gy,ri,xi(ai.Gx*ai.Gy)),fi.ZERO=new fi(ti,ri,ri,ti);class wi{constructor(e){this.ep=e}static calcElligatorRistrettoMap(e){const{d:t}=ai,r=xi(ci*e*e),n=xi((r+ri)*li);let i=BigInt(-1);const s=xi((i-t*r)*xi(r+t));let{isValid:a,value:o}=Mi(n,s),c=xi(o*e);Ci(c)||(c=xi(-c)),a||(o=c),a||(i=r);const h=xi(i*(r-ri)*yi-s),u=o*o,l=xi((o+o)*s),y=xi(h*hi),f=xi(ri-u),g=xi(ri+u);return new fi(xi(l*g),xi(f*y),xi(y*g),xi(l*f))}static hashToCurve(e){const t=Di((e=Fi(e,64)).slice(0,32)),r=this.calcElligatorRistrettoMap(t),n=Di(e.slice(32,64)),i=this.calcElligatorRistrettoMap(n);return new wi(r.add(i))}static fromHex(e){e=Fi(e,32);const{a:t,d:r}=ai,n="RistrettoPoint.fromHex: the hex is not valid encoding of RistrettoPoint",i=Di(e);if(!function(e,t){if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0}(Ki(i),e)||Ci(i))throw Error(n);const s=xi(i*i),a=xi(ri+t*s),o=xi(ri-t*s),c=xi(a*a),h=xi(o*o),u=xi(t*r*c-h),{isValid:l,value:y}=Li(xi(u*h)),f=xi(y*o),g=xi(y*f*u);let p=xi((i+i)*f);Ci(p)&&(p=xi(-p));const d=xi(a*g),A=xi(p*d);if(!l||Ci(A)||d===ti)throw Error(n);return new wi(new fi(p,d,ri,A))}toRawBytes(){let{x:e,y:t,z:r,t:n}=this.ep;const i=xi(xi(r+t)*xi(r-t)),s=xi(e*t),a=xi(s*s),{value:o}=Li(xi(i*a)),c=xi(o*i),h=xi(o*s),u=xi(c*h*n);let l;if(Ci(n*u)){let r=xi(t*ci),n=xi(e*ci);e=r,t=n,l=xi(c*ui)}else l=h;Ci(e*u)&&(t=xi(-t));let y=xi((r-t)*l);return Ci(y)&&(y=xi(-y)),Ki(y)}toHex(){return Bi(this.toRawBytes())}toString(){return this.toHex()}equals(e){di(e);const t=this.ep,r=e.ep,n=xi(t.x*r.y)===xi(t.y*r.x),i=xi(t.y*r.y)===xi(t.x*r.x);return n||i}add(e){return di(e),new wi(this.ep.add(e.ep))}subtract(e){return di(e),new wi(this.ep.subtract(e.ep))}multiply(e){return new wi(this.ep.multiply(e))}multiplyUnsafe(e){return new wi(this.ep.multiplyUnsafe(e))}}wi.BASE=new wi(fi.BASE),wi.ZERO=new wi(fi.ZERO);const mi=new WeakMap;class bi{constructor(e,t){this.x=e,this.y=t}_setWindowSize(e){this._WINDOW_SIZE=e,mi.delete(this)}static fromHex(e,t=!0){const{d:r,P:n}=ai,i=(e=Fi(e,32)).slice();i[31]=-129&e[31];const s=Pi(i);if(t&&s>=n)throw Error("Expected 0 < hex < P");if(!t&&s>=oi)throw Error("Expected 0 < hex < 2**256");const a=xi(s*s),o=xi(a-ri),c=xi(r*a+ri);let{isValid:h,value:u}=Mi(o,c);if(!h)throw Error("Point.fromHex: invalid y coordinate");const l=(u&ri)===ri;return!!(128&e[31])!==l&&(u=xi(-u)),new bi(u,s)}static async fromPrivateKey(e){return(await Oi(e)).point}toRawBytes(){const e=Ki(this.y);return e[31]|=this.x&ri?128:0,e}toHex(){return Bi(this.toRawBytes())}toX25519(){const{y:e}=this;return Ki(xi((ri+e)*Qi(ri-e)))}isTorsionFree(){return fi.fromAffine(this).isTorsionFree()}equals(e){return this.x===e.x&&this.y===e.y}negate(){return new bi(xi(-this.x),this.y)}add(e){return fi.fromAffine(this).add(fi.fromAffine(e)).toAffine()}subtract(e){return this.add(e.negate())}multiply(e){return fi.fromAffine(this).multiply(e,this).toAffine()}}bi.BASE=new bi(ai.Gx,ai.Gy),bi.ZERO=new bi(ti,ri);let Ei=class e{constructor(e,t){this.r=e,this.s=t,this.assertValidity()}static fromHex(t){const r=Fi(t,64),n=bi.fromHex(r.slice(0,32),!1),i=Pi(r.slice(32,64));return new e(n,i)}assertValidity(){const{r:e,s:t}=this;if(!(e instanceof bi))throw Error("Expected Point instance");return Ni(t,ai.l,!1),this}toRawBytes(){const e=new Uint8Array(64);return e.set(this.r.toRawBytes()),e.set(Ki(this.s),32),e}toHex(){return Bi(this.toRawBytes())}};function ki(...e){if(!e.every((e=>e instanceof Uint8Array)))throw Error("Expected Uint8Array list");if(1===e.length)return e[0];const t=e.reduce(((e,t)=>e+t.length),0),r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}const vi=Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function Bi(e){if(!(e instanceof Uint8Array))throw Error("Uint8Array expected");let t="";for(let r=0;r<e.length;r++)t+=vi[e[r]];return t}function Ii(e){if("string"!=typeof e)throw new TypeError("hexToBytes: expected string, got "+typeof e);if(e.length%2)throw Error("hexToBytes: received invalid unpadded hex");const t=new Uint8Array(e.length/2);for(let r=0;r<t.length;r++){const n=2*r,i=e.slice(n,n+2),s=Number.parseInt(i,16);if(Number.isNaN(s)||s<0)throw Error("Invalid byte sequence");t[r]=s}return t}function Si(e){return Ii(e.toString(16).padStart(64,"0"))}function Ki(e){return Si(e).reverse()}function Ci(e){return(xi(e)&ri)===ri}function Pi(e){if(!(e instanceof Uint8Array))throw Error("Expected Uint8Array");return BigInt("0x"+Bi(Uint8Array.from(e).reverse()))}const Ui=BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");function Di(e){return xi(Pi(e)&Ui)}function xi(e,t=ai.P){const r=e%t;return r>=ti?r:t+r}function Qi(e,t=ai.P){if(e===ti||t<=ti)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=xi(e,t),n=t,i=ti,s=ri;for(;r!==ti;){const e=n%r,t=i-s*(n/r);n=r,r=e,i=s,s=t}if(n!==ri)throw Error("invert: does not exist");return xi(i,t)}function Ri(e,t){const{P:r}=ai;let n=e;for(;t-- >ti;)n*=n,n%=r;return n}function Mi(e,t){const r=xi(t*t*t),n=function(e){const{P:t}=ai,r=BigInt(5),n=BigInt(10),i=BigInt(20),s=BigInt(40),a=BigInt(80),o=e*e%t*e%t,c=Ri(o,ni)*o%t,h=Ri(c,ri)*e%t,u=Ri(h,r)*h%t,l=Ri(u,n)*u%t,y=Ri(l,i)*l%t,f=Ri(y,s)*y%t,g=Ri(f,a)*f%t,p=Ri(g,a)*f%t,d=Ri(p,n)*u%t;return{pow_p_5_8:Ri(d,ni)*e%t,b2:o}}(e*xi(r*r*t)).pow_p_5_8;let i=xi(e*r*n);const s=xi(t*i*i),a=i,o=xi(i*ci),c=s===e,h=s===xi(-e),u=s===xi(-e*ci);return c&&(i=a),(h||u)&&(i=o),Ci(i)&&(i=xi(-i)),{isValid:c||h,value:i}}function Li(e){return Mi(ri,e)}function Ti(e){return xi(Pi(e),ai.l)}function Fi(e,t){const r=e instanceof Uint8Array?Uint8Array.from(e):Ii(e);if("number"==typeof t&&r.length!==t)throw Error(`Expected ${t} bytes`);return r}function Ni(e,t,r=!0){if(!t)throw new TypeError("Specify max value");if("number"==typeof e&&Number.isSafeInteger(e)&&(e=BigInt(e)),"bigint"==typeof e&&e<t)if(r){if(ti<e)return e}else if(ti<=e)return e;throw new TypeError("Expected valid scalar: 0 < scalar < max")}let Hi;async function Oi(e){return function(e){const t=function(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}(e.slice(0,32)),r=e.slice(32,64),n=Ti(t),i=bi.BASE.multiply(n),s=i.toRawBytes();return{head:t,prefix:r,scalar:n,point:i,pointBytes:s}}(await Gi.sha512(function(e){if(32!==(e="bigint"==typeof e||"number"==typeof e?Si(Ni(e,oi)):Fi(e)).length)throw Error("Expected 32 bytes");return e}(e)))}async function zi(e,t,r){const{r:n,SB:i,msg:s,pub:a}=function(e,t,r){t=Fi(t),r instanceof bi||(r=bi.fromHex(r,!1));const{r:n,s:i}=e instanceof Ei?e.assertValidity():Ei.fromHex(e);return{r:n,s:i,SB:fi.BASE.multiplyUnsafe(i),pub:r,msg:t}}(e,t,r),o=await Gi.sha512(n.toRawBytes(),a.toRawBytes(),s);return function(e,t,r,n){const i=Ti(n),s=fi.fromAffine(e).multiplyUnsafe(i);return fi.fromAffine(t).add(s).subtract(r).multiplyUnsafe(ai.h).equals(fi.ZERO)}(a,n,i,o)}bi.BASE._setWindowSize(8);const _i={node:o,web:"object"==typeof self&&"crypto"in self?self.crypto:void 0},Gi={bytesToHex:Bi,hexToBytes:Ii,concatBytes:ki,getExtendedPublicKey:Oi,mod:xi,invert:Qi,TORSION_SUBGROUP:["0100000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a","0000000000000000000000000000000000000000000000000000000000000080","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05","ecffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7f","26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc85","0000000000000000000000000000000000000000000000000000000000000000","c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa"],hashToPrivateScalar:e=>{if((e=Fi(e)).length<40||e.length>1024)throw Error("Expected 40-1024 bytes of private key as per FIPS 186");return xi(Pi(e),ai.l-ri)+ri},randomBytes:(e=32)=>{if(_i.web)return _i.web.getRandomValues(new Uint8Array(e));if(_i.node){const{randomBytes:t}=_i.node;return new Uint8Array(t(e).buffer)}throw Error("The environment doesn't have randomBytes function")},randomPrivateKey:()=>Gi.randomBytes(32),sha512:async(...e)=>{const t=ki(...e);if(_i.web){const e=await _i.web.subtle.digest("SHA-512",t.buffer);return new Uint8Array(e)}if(_i.node)return Uint8Array.from(_i.node.createHash("sha512").update(t).digest());throw Error("The environment doesn't have sha512 function")},precompute(e=8,t=bi.BASE){const r=t.equals(bi.BASE)?t:new bi(t.x,t.y);return r._setWindowSize(e),r.multiply(ni),r},sha512Sync:void 0};async function ji(e){switch(e){case H.publicKey.ed25519:try{const e=_.getWebCrypto(),t=await e.generateKey("Ed25519",!0,["sign","verify"]),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);return{A:new Uint8Array(W(n.x)),seed:W(r.d)}}catch(t){if("NotSupportedError"!==t.name&&"OperationError"!==t.name)throw t;const r=Dr(Zi(e)),{publicKey:n}=Xr.sign.keyPair.fromSeed(r);return{A:n,seed:r}}case H.publicKey.ed448:{const e=await _.getNobleCurve(H.publicKey.ed448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),seed:t}}default:throw Error("Unsupported EdDSA algorithm")}}async function qi(e,t,r,n,i,s){if(Se.getHashByteLength(t)<Se.getHashByteLength(Wi(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case H.publicKey.ed25519:try{const t=_.getWebCrypto(),r=Ji(e,n,i),a=await t.importKey("jwk",r,"Ed25519",!1,["sign"]);return{RS:new Uint8Array(await t.sign("Ed25519",a,s))}}catch(e){if("NotSupportedError"!==e.name)throw e;const t=_.concatUint8Array([i,n]);return{RS:Xr.sign.detached(s,t)}}case H.publicKey.ed448:return{RS:(await _.getNobleCurve(H.publicKey.ed448)).sign(s,i)};default:throw Error("Unsupported EdDSA algorithm")}}async function Vi(e,t,{RS:r},n,i,s){if(Se.getHashByteLength(t)<Se.getHashByteLength(Wi(e)))throw Error("Hash algorithm too weak for EdDSA.");switch(e){case H.publicKey.ed25519:try{const t=_.getWebCrypto(),n=Yi(e,i),a=await t.importKey("jwk",n,"Ed25519",!1,["verify"]);return await t.verify("Ed25519",a,r,s)}catch(e){if("NotSupportedError"!==e.name)throw e;return zi(r,s,i)}case H.publicKey.ed448:return(await _.getNobleCurve(H.publicKey.ed448)).verify(r,s,i);default:throw Error("Unsupported EdDSA algorithm")}}function Zi(e){switch(e){case H.publicKey.ed25519:return 32;case H.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function Wi(e){switch(e){case H.publicKey.ed25519:return H.hash.sha256;case H.publicKey.ed448:return H.hash.sha512;default:throw Error("Unknown EdDSA algo")}}Object.defineProperties(Gi,{sha512Sync:{configurable:!1,get:()=>Hi,set(e){Hi||(Hi=e)}}});const Yi=(e,t)=>{if(e===H.publicKey.ed25519){return{kty:"OKP",crv:"Ed25519",x:Y(t),ext:!0}}throw Error("Unsupported EdDSA algorithm")},Ji=(e,t,r)=>{if(e===H.publicKey.ed25519){const n=Yi(e,t);return n.d=Y(r),n}throw Error("Unsupported EdDSA algorithm")};var $i=/*#__PURE__*/Object.freeze({__proto__:null,generate:ji,getPayloadSize:Zi,getPreferredHashAlgo:Wi,sign:qi,validateParams:async function(e,t,r){switch(e){case H.publicKey.ed25519:{const{publicKey:e}=Xr.sign.keyPair.fromSeed(r);return _.equalsUint8Array(t,e)}case H.publicKey.ed448:{const e=(await _.getNobleCurve(H.publicKey.ed448)).getPublicKey(r);return _.equalsUint8Array(t,e)}default:return!1}},verify:Vi});const Xi=_.getWebCrypto();async function es(e,t,r){const{keySize:n}=he(e);if(!_.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");try{const e=await Xi.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),n=await Xi.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),i=await Xi.wrapKey("raw",n,e,{name:"AES-KW"});return new Uint8Array(i)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;_.printDebugError("Browser did not support operation: "+e.message)}return Kt(t).encrypt(r)}async function ts(e,t,r){const{keySize:n}=he(e);if(!_.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");let i;try{i=await Xi.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return _.printDebugError("Browser did not support operation: "+e.message),Kt(t).decrypt(r)}try{const e=await Xi.unwrapKey("raw",r,i,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await Xi.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}var rs=/*#__PURE__*/Object.freeze({__proto__:null,unwrap:ts,wrap:es});const ns=_.getWebCrypto();async function is(e,t,r,n,i){const s=H.read(H.webHash,e);if(!s)throw Error("Hash algo not supported with HKDF");const a=await ns.importKey("raw",t,"HKDF",!1,["deriveBits"]),o=await ns.deriveBits({name:"HKDF",hash:s,salt:r,info:n},a,8*i);return new Uint8Array(o)}const ss={x25519:_.encodeUTF8("OpenPGP X25519"),x448:_.encodeUTF8("OpenPGP X448")};async function as(e){switch(e){case H.publicKey.x25519:{const e=Dr(32),{publicKey:t}=Xr.box.keyPair.fromSecretKey(e);return{A:t,k:e}}case H.publicKey.x448:{const e=await _.getNobleCurve(H.publicKey.x448),t=e.utils.randomPrivateKey();return{A:e.getPublicKey(t),k:t}}default:throw Error("Unsupported ECDH algorithm")}}function os(e){switch(e){case H.publicKey.x25519:return 32;case H.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}}async function cs(e,t){switch(e){case H.publicKey.x25519:{const r=Dr(os(e)),n=Xr.scalarMult(r,t),{publicKey:i}=Xr.box.keyPair.fromSecretKey(r);return{ephemeralPublicKey:i,sharedSecret:n}}case H.publicKey.x448:{const e=await _.getNobleCurve(H.publicKey.x448),r=e.utils.randomPrivateKey(),n=e.getSharedSecret(r,t);return{ephemeralPublicKey:e.getPublicKey(r),sharedSecret:n}}default:throw Error("Unsupported ECDH algorithm")}}async function hs(e,t,r,n){switch(e){case H.publicKey.x25519:return Xr.scalarMult(n,t);case H.publicKey.x448:return(await _.getNobleCurve(H.publicKey.x448)).getSharedSecret(n,t);default:throw Error("Unsupported ECDH algorithm")}}var us=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i){const s=await hs(e,t,n,i),a=_.concatUint8Array([t,n,s]);switch(e){case H.publicKey.x25519:{const e=H.symmetric.aes128,{keySize:t}=he(e);return ts(e,await is(H.hash.sha256,a,new Uint8Array,ss.x25519,t),r)}case H.publicKey.x448:{const e=H.symmetric.aes256,{keySize:t}=he(H.symmetric.aes256);return ts(e,await is(H.hash.sha512,a,new Uint8Array,ss.x448,t),r)}default:throw Error("Unsupported ECDH algorithm")}},encrypt:async function(e,t,r){const{ephemeralPublicKey:n,sharedSecret:i}=await cs(e,r),s=_.concatUint8Array([n,r,i]);switch(e){case H.publicKey.x25519:{const e=H.symmetric.aes128,{keySize:r}=he(e),i=await is(H.hash.sha256,s,new Uint8Array,ss.x25519,r);return{ephemeralPublicKey:n,wrappedKey:await es(e,i,t)}}case H.publicKey.x448:{const e=H.symmetric.aes256,{keySize:r}=he(H.symmetric.aes256),i=await is(H.hash.sha512,s,new Uint8Array,ss.x448,r);return{ephemeralPublicKey:n,wrappedKey:await es(e,i,t)}}default:throw Error("Unsupported ECDH algorithm")}},generate:as,generateEphemeralEncryptionMaterial:cs,getPayloadSize:os,recomputeSharedSecret:hs,validateParams:async function(e,t,r){switch(e){case H.publicKey.x25519:{const{publicKey:e}=Xr.box.keyPair.fromSecretKey(r);return _.equalsUint8Array(t,e)}case H.publicKey.x448:{const e=(await _.getNobleCurve(H.publicKey.x448)).getPublicKey(r);return _.equalsUint8Array(t,e)}default:return!1}}});const ls=_.getWebCrypto(),ys=_.getNodeCrypto(),fs={[H.curve.nistP256]:"P-256",[H.curve.nistP384]:"P-384",[H.curve.nistP521]:"P-521"},gs=ys?ys.getCurves():[],ps=ys?{[H.curve.secp256k1]:gs.includes("secp256k1")?"secp256k1":void 0,[H.curve.nistP256]:gs.includes("prime256v1")?"prime256v1":void 0,[H.curve.nistP384]:gs.includes("secp384r1")?"secp384r1":void 0,[H.curve.nistP521]:gs.includes("secp521r1")?"secp521r1":void 0,[H.curve.ed25519Legacy]:gs.includes("ED25519")?"ED25519":void 0,[H.curve.curve25519Legacy]:gs.includes("X25519")?"X25519":void 0,[H.curve.brainpoolP256r1]:gs.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[H.curve.brainpoolP384r1]:gs.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[H.curve.brainpoolP512r1]:gs.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},ds={[H.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:H.publicKey.ecdsa,hash:H.hash.sha256,cipher:H.symmetric.aes128,node:ps[H.curve.nistP256],web:fs[H.curve.nistP256],payloadSize:32,sharedSize:256,wireFormatLeadingByte:4},[H.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:H.publicKey.ecdsa,hash:H.hash.sha384,cipher:H.symmetric.aes192,node:ps[H.curve.nistP384],web:fs[H.curve.nistP384],payloadSize:48,sharedSize:384,wireFormatLeadingByte:4},[H.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:H.publicKey.ecdsa,hash:H.hash.sha512,cipher:H.symmetric.aes256,node:ps[H.curve.nistP521],web:fs[H.curve.nistP521],payloadSize:66,sharedSize:528,wireFormatLeadingByte:4},[H.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:H.publicKey.ecdsa,hash:H.hash.sha256,cipher:H.symmetric.aes128,node:ps[H.curve.secp256k1],payloadSize:32,wireFormatLeadingByte:4},[H.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:H.publicKey.eddsaLegacy,hash:H.hash.sha512,node:!1,payloadSize:32,wireFormatLeadingByte:64},[H.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:H.publicKey.ecdh,hash:H.hash.sha256,cipher:H.symmetric.aes128,node:!1,payloadSize:32,wireFormatLeadingByte:64},[H.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:H.publicKey.ecdsa,hash:H.hash.sha256,cipher:H.symmetric.aes128,node:ps[H.curve.brainpoolP256r1],payloadSize:32,wireFormatLeadingByte:4},[H.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:H.publicKey.ecdsa,hash:H.hash.sha384,cipher:H.symmetric.aes192,node:ps[H.curve.brainpoolP384r1],payloadSize:48,wireFormatLeadingByte:4},[H.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:H.publicKey.ecdsa,hash:H.hash.sha512,cipher:H.symmetric.aes256,node:ps[H.curve.brainpoolP512r1],payloadSize:64,wireFormatLeadingByte:4}};class As{constructor(e){try{this.name=e instanceof Gn?e.getName():H.write(H.curve,e)}catch(e){throw new $n("Unknown curve")}const t=ds[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.wireFormatLeadingByte=t.wireFormatLeadingByte,this.web&&_.getWebCrypto()?this.type="web":this.node&&_.getNodeCrypto()?this.type="node":this.name===H.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===H.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e,t){const r=await ls.generateKey({name:"ECDSA",namedCurve:fs[e]},!0,["sign","verify"]),n=await ls.exportKey("jwk",r.privateKey),i=await ls.exportKey("jwk",r.publicKey);return{publicKey:Es(i,t),privateKey:W(n.d)}}(this.name,this.wireFormatLeadingByte)}catch(e){return _.printDebugError("Browser did not support generating ec key "+e.message),bs(this.name)}case"node":return async function(e){const t=ys.createECDH(ps[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const{k:e,A:t}=await as(H.publicKey.x25519),r=e.slice().reverse();r[0]=127&r[0]|64,r[31]&=248;return{publicKey:_.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:r}}case"ed25519Legacy":{const{seed:e,A:t}=await ji(H.publicKey.ed25519);return{publicKey:_.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:e}}default:return bs(this.name)}}}async function ws(e,t,r,n){const i={[H.curve.nistP256]:!0,[H.curve.nistP384]:!0,[H.curve.nistP521]:!0,[H.curve.secp256k1]:!0,[H.curve.curve25519Legacy]:e===H.publicKey.ecdh,[H.curve.brainpoolP256r1]:!0,[H.curve.brainpoolP384r1]:!0,[H.curve.brainpoolP512r1]:!0},s=t.getName();if(!i[s])return!1;if(s===H.curve.curve25519Legacy){n=n.slice().reverse();const{publicKey:e}=Xr.box.keyPair.fromSecretKey(n);r=new Uint8Array(r);const t=new Uint8Array([64,...e]);return!!_.equalsUint8Array(t,r)}const a=(await _.getNobleCurve(H.publicKey.ecdsa,s)).getPublicKey(n,!1);return!!_.equalsUint8Array(a,r)}function ms(e,t){const{payloadSize:r,wireFormatLeadingByte:n,name:i}=e,s=i===H.curve.curve25519Legacy||i===H.curve.ed25519Legacy?r:2*r;if(t[0]!==n||t.length!==s+1)throw Error("Invalid point encoding")}async function bs(e){const t=await _.getNobleCurve(H.publicKey.ecdsa,e),r=t.utils.randomPrivateKey();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function Es(e,t){const r=W(e.x),n=W(e.y),i=new Uint8Array(r.length+n.length+1);return i[0]=t,i.set(r,1),i.set(n,r.length+1),i}function ks(e,t,r){const n=e,i=r.slice(1,n+1),s=r.slice(n+1,2*n+1);return{kty:"EC",crv:t,x:Y(i),y:Y(s),ext:!0}}function vs(e,t,r,n){const i=ks(e,t,r);return i.d=Y(n),i}const Bs=_.getWebCrypto(),Is=_.getNodeCrypto();async function Ss(e,t,r,n,i,s){const a=new As(e);if(ms(a,n),r&&!_.isStream(r)){const e={publicKey:n,privateKey:i};switch(a.type){case"web":try{return await async function(e,t,r,n){const i=e.payloadSize,s=vs(e.payloadSize,fs[e.name],n.publicKey,n.privateKey),a=await Bs.importKey("jwk",s,{name:"ECDSA",namedCurve:fs[e.name],hash:{name:H.read(H.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await Bs.sign({name:"ECDSA",namedCurve:fs[e.name],hash:{name:H.read(H.webHash,t)}},a,r));return{r:o.slice(0,i),s:o.slice(i,i<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;_.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,n){const i=_.nodeRequire("eckey-utils"),s=_.getNodeBuffer(),{privateKey:a}=i.generateDer({curveName:ps[e.name],privateKey:s.from(n)}),o=Is.createSign(H.read(H.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),h=e.payloadSize;return{r:c.subarray(0,h),s:c.subarray(h,h<<1)}}(a,t,r,i)}}const o=(await _.getNobleCurve(H.publicKey.ecdsa,a.name)).sign(s,i,{lowS:!1});return{r:Pr(o.r,"be",a.payloadSize),s:Pr(o.s,"be",a.payloadSize)}}async function Ks(e,t,r,n,i,s){const a=new As(e);ms(a,i);const o=async()=>0===s[0]&&Cs(a,r,s.subarray(1),i);if(n&&!_.isStream(n))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:n},i,s){const a=ks(e.payloadSize,fs[e.name],s),o=await Bs.importKey("jwk",a,{name:"ECDSA",namedCurve:fs[e.name],hash:{name:H.read(H.webHash,e.hash)}},!1,["verify"]),c=_.concatUint8Array([r,n]).buffer;return Bs.verify({name:"ECDSA",namedCurve:fs[e.name],hash:{name:H.read(H.webHash,t)}},o,c,i)}(a,t,r,n,i);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;_.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:n},i,s){const a=_.nodeRequire("eckey-utils"),o=_.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:ps[e.name],publicKey:o.from(s)}),h=Is.createVerify(H.read(H.hash,t));h.write(i),h.end();const u=_.concatUint8Array([r,n]);try{return h.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},u)}catch(e){return!1}}(a,t,r,n,i);return e||o()}}return await Cs(a,r,s,i)||o()}async function Cs(e,t,r,n){return(await _.getNobleCurve(H.publicKey.ecdsa,e.name)).verify(_.concatUint8Array([t.r,t.s]),r,n,{lowS:!1})}var Ps=/*#__PURE__*/Object.freeze({__proto__:null,sign:Ss,validateParams:async function(e,t,r){const n=new As(e);if(n.keyType!==H.publicKey.ecdsa)return!1;switch(n.type){case"web":case"node":{const n=Dr(8),i=H.hash.sha256,s=await Se.digest(i,n);try{const a=await Ss(e,i,n,t,r,s);return await Ks(e,i,a,n,t,s)}catch(e){return!1}}default:return ws(H.publicKey.ecdsa,e,t,r)}},verify:Ks});var Us=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,n,i,s){if(ms(new As(e),n),Se.getHashByteLength(t)<Se.getHashByteLength(H.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const{RS:a}=await qi(H.publicKey.ed25519,t,0,n.subarray(1),i,s);return{r:a.subarray(0,32),s:a.subarray(32)}},validateParams:async function(e,t,r){if(e.getName()!==H.curve.ed25519Legacy)return!1;const{publicKey:n}=Xr.sign.keyPair.fromSeed(r),i=new Uint8Array([64,...n]);return _.equalsUint8Array(t,i)},verify:async function(e,t,{r,s:n},i,s,a){if(ms(new As(e),s),Se.getHashByteLength(t)<Se.getHashByteLength(H.hash.sha256))throw Error("Hash algorithm too weak for EdDSA.");const o=_.concatUint8Array([r,n]);return Vi(H.publicKey.ed25519,t,{RS:o},0,s.subarray(1),a)}});function Ds(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}function xs(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const n=e.subarray(t-r),i=new Uint8Array(r).fill(r);if(_.equalsUint8Array(n,i))return e.subarray(0,t-r)}}throw Error("Invalid padding")}var Qs=/*#__PURE__*/Object.freeze({__proto__:null,decode:xs,encode:Ds});const Rs=_.getWebCrypto(),Ms=_.getNodeCrypto();function Ls(e,t,r,n){return _.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),_.stringToUint8Array("Anonymous Sender "),r.replacementFingerprint||n])}async function Ts(e,t,r,n,i=!1,s=!1){let a;if(i){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await Se.digest(e,_.concatUint8Array([new Uint8Array([0,0,0,1]),t,n]))).subarray(0,r)}async function Fs(e,t){switch(e.type){case"curve25519Legacy":{const{sharedSecret:r,ephemeralPublicKey:n}=await cs(H.publicKey.x25519,t.subarray(1));return{publicKey:_.concatUint8Array([new Uint8Array([e.wireFormatLeadingByte]),n]),sharedKey:r}}case"web":if(e.web&&_.getWebCrypto())try{return await async function(e,t){const r=ks(e.payloadSize,e.web,t);let n=Rs.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),i=Rs.importKey("jwk",r,{name:"ECDH",namedCurve:e.web},!1,[]);[n,i]=await Promise.all([n,i]);let s=Rs.deriveBits({name:"ECDH",namedCurve:e.web,public:i},n.privateKey,e.sharedSize),a=Rs.exportKey("jwk",n.publicKey);[s,a]=await Promise.all([s,a]);const o=new Uint8Array(s),c=new Uint8Array(Es(a,e.wireFormatLeadingByte));return{publicKey:c,sharedKey:o}}(e,t)}catch(r){return _.printDebugError(r),Os(e,t)}break;case"node":return async function(e,t){const r=Ms.createECDH(e.node);r.generateKeys();const n=new Uint8Array(r.computeSecret(t)),i=new Uint8Array(r.getPublicKey());return{publicKey:i,sharedKey:n}}(e,t);default:return Os(e,t)}}async function Ns(e,t,r,n){if(n.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(n,e.payloadSize-n.length),n=t}switch(e.type){case"curve25519Legacy":{const e=n.slice().reverse();return{secretKey:e,sharedKey:await hs(H.publicKey.x25519,t.subarray(1),r.subarray(1),e)}}case"web":if(e.web&&_.getWebCrypto())try{return await async function(e,t,r,n){const i=vs(e.payloadSize,e.web,r,n);let s=Rs.importKey("jwk",i,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const a=ks(e.payloadSize,e.web,t);let o=Rs.importKey("jwk",a,{name:"ECDH",namedCurve:e.web},!0,[]);[s,o]=await Promise.all([s,o]);let c=Rs.deriveBits({name:"ECDH",namedCurve:e.web,public:o},s,e.sharedSize),h=Rs.exportKey("jwk",s);[c,h]=await Promise.all([c,h]);const u=new Uint8Array(c);return{secretKey:W(h.d),sharedKey:u}}(e,t,r,n)}catch(r){return _.printDebugError(r),Hs(e,t,n)}break;case"node":return async function(e,t,r){const n=Ms.createECDH(e.node);n.setPrivateKey(r);const i=new Uint8Array(n.computeSecret(t));return{secretKey:new Uint8Array(n.getPrivateKey()),sharedKey:i}}(e,t,n);default:return Hs(e,t,n)}}async function Hs(e,t,r){return{secretKey:r,sharedKey:(await _.getNobleCurve(H.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function Os(e,t){const r=await _.getNobleCurve(H.publicKey.ecdh,e.name),{publicKey:n,privateKey:i}=await e.genKeyPair();return{publicKey:n,sharedKey:r.getSharedSecret(i,t).subarray(1)}}var zs=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:async function(e,t,r,n,i,s,a){const o=new As(e);ms(o,i),ms(o,r);const{sharedKey:c}=await Ns(o,r,i,s),h=Ls(H.publicKey.ecdh,e,t,a),{keySize:u}=he(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await Ts(t.hash,c,u,h,1===e,2===e);return xs(await ts(t.cipher,r,n))}catch(e){l=e}throw l},encrypt:async function(e,t,r,n,i){const s=Ds(r),a=new As(e);ms(a,n);const{publicKey:o,sharedKey:c}=await Fs(a,n),h=Ls(H.publicKey.ecdh,e,t,i),{keySize:u}=he(t.cipher),l=await Ts(t.hash,c,u,h);return{publicKey:o,wrappedKey:await es(t.cipher,l,s)}},validateParams:async function(e,t,r){return ws(H.publicKey.ecdh,e,t,r)}}),_s=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:As,ecdh:zs,ecdhX:us,ecdsa:Ps,eddsa:$i,eddsaLegacy:Us,generate:async function(e){const t=new As(e),{oid:r,hash:n,cipher:i}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:_.leftPad(s.privateKey,t.payloadSize),hash:n,cipher:i}},getPreferredHashAlgo:function(e){return ds[e.getName()].hash}});const Gs=BigInt(0),js=BigInt(1);var qs=/*#__PURE__*/Object.freeze({__proto__:null,sign:async function(e,t,r,n,i,s){const a=BigInt(0);let o,c,h,u;n=br(n),i=br(i),r=br(r),s=br(s),r=Er(r,n),s=Er(s,i);const l=Er(br(t.subarray(0,Cr(i))),i);for(;;){if(o=xr(js,i),c=Er(kr(r,o,n),i),c===a)continue;const e=Er(s*c,i);if(u=Er(l+e,i),h=Er(Br(o,i)*u,i),h!==a)break}return{r:Pr(c,"be",Cr(n)),s:Pr(h,"be",Cr(n))}},validateParams:async function(e,t,r,n,i){if(e=br(e),t=br(t),r=br(r),n=br(n),r<=js||r>=e)return!1;if(Er(e-js,t)!==Gs)return!1;if(kr(r,t,e)!==js)return!1;const s=BigInt(Kr(t));if(s<BigInt(150)||!Lr(t,null,32))return!1;i=br(i);const a=BigInt(2);return n===kr(r,t*xr(a<<s-js,a<<s)+i,e)},verify:async function(e,t,r,n,i,s,a,o){if(t=br(t),r=br(r),s=br(s),a=br(a),i=br(i),o=br(o),t<=Gs||t>=a||r<=Gs||r>=a)return _.printDebug("invalid DSA Signature"),!1;const c=Er(br(n.subarray(0,Cr(a))),a),h=Br(r,a);if(h===Gs)return _.printDebug("invalid DSA Signature"),!1;i=Er(i,s),o=Er(o,s);const u=Er(c*h,a),l=Er(t*h,a);return Er(Er(kr(i,u,s)*kr(o,l,s),s),a)===t}});const Vs=new Set([H.hash.sha1,H.hash.sha256,H.hash.sha512]),Zs=_.getWebCrypto(),Ws=_.getNodeCrypto();var Ys={rsa:Wr,elgamal:Jr,elliptic:_s,dsa:qs,hmac:/*#__PURE__*/Object.freeze({__proto__:null,generate:async function(e){if(!Vs.has(e))throw Error("Unsupported hash algorithm.");const t=H.read(H.webHash,e),r=Zs||Ws.webcrypto.subtle,n=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),i=await r.exportKey("raw",n);return new Uint8Array(i)},sign:async function(e,t,r){if(!Vs.has(e))throw Error("Unsupported hash algorithm.");const n=H.read(H.webHash,e),i=Zs||Ws.webcrypto.subtle,s=await i.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["sign"]),a=await i.sign("HMAC",s,r);return new Uint8Array(a)},verify:async function(e,t,r,n){if(!Vs.has(e))throw Error("Unsupported hash algorithm.");const i=H.read(H.webHash,e),s=Zs||Ws.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["verify"]);return s.verify("HMAC",a,r,n)}})};class Js{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!_.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return _.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}var $s=/*#__PURE__*/Object.freeze({__proto__:null,parseSignatureParams:function(e,t){let r=0;switch(e){case H.publicKey.rsaEncryptSign:case H.publicKey.rsaEncrypt:case H.publicKey.rsaSign:{const e=_.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case H.publicKey.dsa:case H.publicKey.ecdsa:{const e=_.readMPI(t.subarray(r));r+=e.length+2;const n=_.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case H.publicKey.eddsaLegacy:{let e=_.readMPI(t.subarray(r));r+=e.length+2,e=_.leftPad(e,32);let n=_.readMPI(t.subarray(r));return r+=n.length+2,n=_.leftPad(n,32),{read:r,signatureParams:{r:e,s:n}}}case H.publicKey.ed25519:case H.publicKey.ed448:{const n=2*Ys.elliptic.eddsa.getPayloadSize(e),i=_.readExactSubarray(t,r,r+n);return r+=i.length,{read:r,signatureParams:{RS:i}}}case H.publicKey.hmac:{const e=new Js;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}default:throw new $n("Unknown signature algorithm.")}},sign:async function(e,t,r,n,i,s){if(!r||!n)throw Error("Missing key parameters");switch(e){case H.publicKey.rsaEncryptSign:case H.publicKey.rsaEncrypt:case H.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:h,u}=n;return{s:await Ys.rsa.sign(t,i,e,a,o,c,h,u,s)}}case H.publicKey.dsa:{const{g:e,p:i,q:a}=r,{x:o}=n;return Ys.dsa.sign(t,s,e,i,a,o)}case H.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case H.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=n;return Ys.elliptic.ecdsa.sign(e,t,i,a,o,s)}case H.publicKey.eddsaLegacy:{const{oid:e,Q:a}=r,{seed:o}=n;return Ys.elliptic.eddsaLegacy.sign(e,t,i,a,o,s)}case H.publicKey.ed25519:case H.publicKey.ed448:{const{A:a}=r,{seed:o}=n;return Ys.elliptic.eddsa.sign(e,t,i,a,o,s)}case H.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=n,i=await Ys.hmac.sign(e.getValue(),t,s);return{mac:new Js(i)}}default:throw Error("Unknown signature algorithm.")}},verify:async function(e,t,r,n,i,s,a){switch(e){case H.publicKey.rsaEncryptSign:case H.publicKey.rsaEncrypt:case H.publicKey.rsaSign:{const{n:e,e:i}=n,o=_.leftPad(r.s,e.length);return Ys.rsa.verify(t,s,o,e,i,a)}case H.publicKey.dsa:{const{g:e,p:i,q:s,y:o}=n,{r:c,s:h}=r;return Ys.dsa.verify(t,c,h,a,e,i,s,o)}case H.publicKey.ecdsa:{const{oid:e,Q:i}=n,o=new Ys.elliptic.CurveWithOID(e).payloadSize,c=_.leftPad(r.r,o),h=_.leftPad(r.s,o);return Ys.elliptic.ecdsa.verify(e,t,{r:c,s:h},s,i,a)}case H.publicKey.eddsaLegacy:{const{oid:e,Q:i}=n;return Ys.elliptic.eddsaLegacy.verify(e,t,r,s,i,a)}case H.publicKey.ed25519:case H.publicKey.ed448:{const{A:i}=n;return Ys.elliptic.eddsa.verify(e,t,r,s,i,a)}case H.publicKey.hmac:{if(!i)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=n,{keyMaterial:t}=i;return Ys.hmac.verify(e.getValue(),t,r.mac.data,a)}default:throw Error("Unknown signature algorithm.")}}});class Xs{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return _.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class ea{constructor(e){if(e){const{version:t,hash:r,cipher:n,replacementFingerprint:i}=e;this.version=t||1,this.hash=r,this.cipher=n,this.replacementFingerprint=i}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new $n("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const n=t-r+1;this.replacementFingerprint=e.slice(r,r+n),r+=n}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return _.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const ta=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=H.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return H.read(e,this.data)}getValue(){return this.data}},ra=ta(H.aead),na=ta(H.symmetric),ia=ta(H.hash);class sa{static fromObject({wrappedKey:e,algorithm:t}){const r=new sa;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=_.readExactSubarray(e,t,t+r),t+=r}write(){return _.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}async function aa(e,t){const r=Dr(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await Se.sha256(r)}}}function oa(e){const{keySize:t}=he(e);return Dr(t)}function ca(e){const t=H.read(H.aead,e);return Ar[t]}function ha(e){try{e.getName()}catch(e){throw new $n("Unknown curve OID")}}function ua(e,t){switch(e){case H.publicKey.ecdsa:case H.publicKey.ecdh:case H.publicKey.eddsaLegacy:return new Ys.elliptic.CurveWithOID(t).payloadSize;case H.publicKey.ed25519:case H.publicKey.ed448:return Ys.elliptic.eddsa.getPayloadSize(e);case H.publicKey.x25519:case H.publicKey.x448:return Ys.elliptic.ecdhX.getPayloadSize(e);default:throw Error("Unknown elliptic algo")}}var la=/*#__PURE__*/Object.freeze({__proto__:null,generateParams:async function(e,t,r,n){switch(e){case H.publicKey.rsaEncrypt:case H.publicKey.rsaEncryptSign:case H.publicKey.rsaSign:return Ys.rsa.generate(t,65537).then((({n:e,e:t,d:r,p:n,q:i,u:s})=>({privateParams:{d:r,p:n,q:i,u:s},publicParams:{n:e,e:t}})));case H.publicKey.ecdsa:return Ys.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new Gn(e),Q:t}})));case H.publicKey.eddsaLegacy:return Ys.elliptic.generate(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new Gn(e),Q:t}})));case H.publicKey.ecdh:return Ys.elliptic.generate(r).then((({oid:e,Q:t,secret:r,hash:n,cipher:i})=>({privateParams:{d:r},publicParams:{oid:new Gn(e),Q:t,kdfParams:new ea({hash:n,cipher:i})}})));case H.publicKey.ed25519:case H.publicKey.ed448:return Ys.elliptic.eddsa.generate(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case H.publicKey.x25519:case H.publicKey.x448:return Ys.elliptic.ecdhX.generate(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case H.publicKey.hmac:return aa(await Ys.hmac.generate(n),new ia(n));case H.publicKey.aead:return aa(oa(n),new na(n));case H.publicKey.dsa:case H.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}},generateSessionKey:oa,getAEADMode:ca,getCipherParams:he,getCurvePayloadSize:ua,getPreferredCurveHashAlgo:function(e,t){switch(e){case H.publicKey.ecdsa:case H.publicKey.eddsaLegacy:return Ys.elliptic.getPreferredHashAlgo(t);case H.publicKey.ed25519:case H.publicKey.ed448:return Ys.elliptic.eddsa.getPreferredHashAlgo(e);default:throw Error("Unknown elliptic signing algo")}},getPrefixRandom:async function(e){const{blockSize:t}=he(e),r=await Dr(t),n=new Uint8Array([r[r.length-2],r[r.length-1]]);return _.concat([r,n])},parseEncSessionKeyParams:function(e,t){let r=0;switch(e){case H.publicKey.rsaEncrypt:case H.publicKey.rsaEncryptSign:return{c:_.readMPI(t.subarray(r))};case H.publicKey.elgamal:{const e=_.readMPI(t.subarray(r));r+=e.length+2;return{c1:e,c2:_.readMPI(t.subarray(r))}}case H.publicKey.ecdh:{const e=_.readMPI(t.subarray(r));r+=e.length+2;const n=new Xs;return n.read(t.subarray(r)),{V:e,C:n}}case H.publicKey.x25519:case H.publicKey.x448:{const n=ua(e),i=_.readExactSubarray(t,r,r+n);r+=i.length;const s=new sa;return s.read(t.subarray(r)),{ephemeralPublicKey:i,C:s}}case H.publicKey.aead:{const e=new ra;r+=e.read(t.subarray(r));const{ivLength:n}=ca(e.getValue()),i=t.subarray(r,r+n);r+=n;const s=new Js;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:i,c:s}}default:throw new $n("Unknown public key encryption algorithm.")}},parsePrivateKeyParams:function(e,t,r){let n=0;switch(e){case H.publicKey.rsaEncrypt:case H.publicKey.rsaEncryptSign:case H.publicKey.rsaSign:{const e=_.readMPI(t.subarray(n));n+=e.length+2;const r=_.readMPI(t.subarray(n));n+=r.length+2;const i=_.readMPI(t.subarray(n));n+=i.length+2;const s=_.readMPI(t.subarray(n));return n+=s.length+2,{read:n,privateParams:{d:e,p:r,q:i,u:s}}}case H.publicKey.dsa:case H.publicKey.elgamal:{const e=_.readMPI(t.subarray(n));return n+=e.length+2,{read:n,privateParams:{x:e}}}case H.publicKey.ecdsa:case H.publicKey.ecdh:{const i=ua(e,r.oid);let s=_.readMPI(t.subarray(n));return n+=s.length+2,s=_.leftPad(s,i),{read:n,privateParams:{d:s}}}case H.publicKey.eddsaLegacy:{const i=ua(e,r.oid);if(r.oid.getName()!==H.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let s=_.readMPI(t.subarray(n));return n+=s.length+2,s=_.leftPad(s,i),{read:n,privateParams:{seed:s}}}case H.publicKey.ed25519:case H.publicKey.ed448:{const r=ua(e),i=_.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{seed:i}}}case H.publicKey.x25519:case H.publicKey.x448:{const r=ua(e),i=_.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{k:i}}}case H.publicKey.hmac:{const{cipher:e}=r,i=Se.getHashByteLength(e.getValue()),s=t.subarray(n,n+32);n+=32;const a=t.subarray(n,n+i);return n+=i,{read:n,privateParams:{hashSeed:s,keyMaterial:a}}}case H.publicKey.aead:{const{cipher:e}=r,i=t.subarray(n,n+32);n+=32;const{keySize:s}=he(e.getValue()),a=t.subarray(n,n+s);return n+=s,{read:n,privateParams:{hashSeed:i,keyMaterial:a}}}default:throw new $n("Unknown public key encryption algorithm.")}},parsePublicKeyParams:function(e,t){let r=0;switch(e){case H.publicKey.rsaEncrypt:case H.publicKey.rsaEncryptSign:case H.publicKey.rsaSign:{const e=_.readMPI(t.subarray(r));r+=e.length+2;const n=_.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{n:e,e:n}}}case H.publicKey.dsa:{const e=_.readMPI(t.subarray(r));r+=e.length+2;const n=_.readMPI(t.subarray(r));r+=n.length+2;const i=_.readMPI(t.subarray(r));r+=i.length+2;const s=_.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:n,g:i,y:s}}}case H.publicKey.elgamal:{const e=_.readMPI(t.subarray(r));r+=e.length+2;const n=_.readMPI(t.subarray(r));r+=n.length+2;const i=_.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{p:e,g:n,y:i}}}case H.publicKey.ecdsa:{const e=new Gn;r+=e.read(t),ha(e);const n=_.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{oid:e,Q:n}}}case H.publicKey.eddsaLegacy:{const e=new Gn;if(r+=e.read(t),ha(e),e.getName()!==H.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let n=_.readMPI(t.subarray(r));return r+=n.length+2,n=_.leftPad(n,33),{read:r,publicParams:{oid:e,Q:n}}}case H.publicKey.ecdh:{const e=new Gn;r+=e.read(t),ha(e);const n=_.readMPI(t.subarray(r));r+=n.length+2;const i=new ea;return r+=i.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:n,kdfParams:i}}}case H.publicKey.ed25519:case H.publicKey.ed448:case H.publicKey.x25519:case H.publicKey.x448:{const n=_.readExactSubarray(t,r,r+ua(e));return r+=n.length,{read:r,publicParams:{A:n}}}case H.publicKey.hmac:case H.publicKey.aead:{const e=new na;r+=e.read(t);const n=Se.getHashByteLength(H.hash.sha256),i=t.subarray(r,r+n);return r+=n,{read:r,publicParams:{cipher:e,digest:i}}}default:throw new $n("Unknown public key encryption algorithm.")}},publicKeyDecrypt:async function(e,t,r,n,i,s){switch(e){case H.publicKey.rsaEncryptSign:case H.publicKey.rsaEncrypt:{const{c:e}=n,{n:i,e:a}=t,{d:o,p:c,q:h,u}=r;return Ys.rsa.decrypt(e,i,a,o,c,h,u,s)}case H.publicKey.elgamal:{const{c1:e,c2:i}=n,a=t.p,o=r.x;return Ys.elgamal.decrypt(e,i,a,o,s)}case H.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:h}=n;return Ys.elliptic.ecdh.decrypt(e,a,c,h.data,s,o,i)}case H.publicKey.x25519:case H.publicKey.x448:{const{A:i}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=n;if(null!==o.algorithm&&!_.isAES(o.algorithm))throw Error("AES session key expected");return Ys.elliptic.ecdhX.decrypt(e,a,o.wrappedKey,i,s)}case H.publicKey.aead:{const{cipher:e}=t,i=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=n,h=ca(a.getValue());return(await h(i,s)).decrypt(c.data,o,new Uint8Array)}default:throw Error("Unknown public key encryption algorithm.")}},publicKeyEncrypt:async function(e,t,r,n,i,s){switch(e){case H.publicKey.rsaEncrypt:case H.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await Ys.rsa.encrypt(i,e,t)}}case H.publicKey.elgamal:{const{p:e,g:t,y:n}=r;return Ys.elgamal.encrypt(i,e,t,n)}case H.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:n}=r,{publicKey:a,wrappedKey:o}=await Ys.elliptic.ecdh.encrypt(e,n,i,t,s);return{V:a,C:new Xs(o)}}case H.publicKey.x25519:case H.publicKey.x448:{if(t&&!_.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:n}=r,{ephemeralPublicKey:s,wrappedKey:a}=await Ys.elliptic.ecdhX.encrypt(e,i,n);return{ephemeralPublicKey:s,C:sa.fromObject({algorithm:t,wrappedKey:a})}}case H.publicKey.aead:{if(!n)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=n,a=O.preferredAEADAlgorithm,o=ca(O.preferredAEADAlgorithm),{ivLength:c}=o,h=Dr(c),u=await o(t,s),l=await u.encrypt(i,h,new Uint8Array);return{aeadMode:new ra(a),iv:h,c:new Js(l)}}default:return[]}},serializeParams:function(e,t){const r=new Set([H.publicKey.ed25519,H.publicKey.x25519,H.publicKey.ed448,H.publicKey.x448,H.publicKey.aead,H.publicKey.hmac]),n=Object.keys(t).map((n=>{const i=t[n];return _.isUint8Array(i)?r.has(e)?i:_.uint8ArrayToMPI(i):i.write()}));return _.concatUint8Array(n)},validateParams:async function(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case H.publicKey.rsaEncrypt:case H.publicKey.rsaEncryptSign:case H.publicKey.rsaSign:{const{n:e,e:n}=t,{d:i,p:s,q:a,u:o}=r;return Ys.rsa.validateParams(e,n,i,s,a,o)}case H.publicKey.dsa:{const{p:e,q:n,g:i,y:s}=t,{x:a}=r;return Ys.dsa.validateParams(e,n,i,s,a)}case H.publicKey.elgamal:{const{p:e,g:n,y:i}=t,{x:s}=r;return Ys.elgamal.validateParams(e,n,i,s)}case H.publicKey.ecdsa:case H.publicKey.ecdh:{const n=Ys.elliptic[H.read(H.publicKey,e)],{oid:i,Q:s}=t,{d:a}=r;return n.validateParams(i,s,a)}case H.publicKey.eddsaLegacy:{const{Q:e,oid:n}=t,{seed:i}=r;return Ys.elliptic.eddsaLegacy.validateParams(n,e,i)}case H.publicKey.ed25519:case H.publicKey.ed448:{const{A:n}=t,{seed:i}=r;return Ys.elliptic.eddsa.validateParams(e,n,i)}case H.publicKey.x25519:case H.publicKey.x448:{const{A:n}=t,{k:i}=r;return Ys.elliptic.ecdhX.validateParams(e,n,i)}case H.publicKey.hmac:{const{cipher:e,digest:n}=t,{hashSeed:i,keyMaterial:s}=r;return Se.getHashByteLength(e.getValue())===s.length&&_.equalsUint8Array(n,await Se.sha256(i))}case H.publicKey.aead:{const{cipher:e,digest:n}=t,{hashSeed:i,keyMaterial:s}=r,{keySize:a}=he(e.getValue());return a===s.length&&_.equalsUint8Array(n,await Se.sha256(i))}default:throw Error("Unknown public key algorithm.")}}});const ya={cipher:ue,hash:Se,mode:Ar,publicKey:Ys,signature:$s,random:Qr,pkcs1:zr,pkcs5:Qs,aesKW:rs};Object.assign(ya,la);class fa extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,fa),this.name="Argon2OutOfMemoryError"}}let ga,pa,da=2<<19;class Aa{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return da}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){da=e}static reloadWasmModule(){ga&&(pa=ga(),pa.catch((()=>{})))}constructor(e=O){const{passes:t,parallelism:r,memoryExponent:n}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=n}generateSalt(){this.salt=ya.random.getRandomBytes(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([H.write(H.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return _.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{ga=ga||(await Promise.resolve().then((function(){return Tf}))).default,pa=pa||ga();const n=await pa,i=n({version:19,type:2,password:_.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>Aa.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&Aa.reloadWasmModule(),i}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new fa("Could not allocate required memory for Argon2"):e}}}class wa{constructor(e,t=O){this.algorithm=H.hash.sha256,this.type=H.read(H.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=ya.random.getRandomBytes(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==_.uint8ArrayToString(e.subarray(t,t+3)))throw new $n("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new $n("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new $n("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,..._.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([H.write(H.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return _.concatUint8Array(e)}async produceKey(e,t){e=_.encodeUTF8(e);const r=[];let n=0,i=0;for(;n<t;){let t;switch(this.type){case"simple":t=_.concatUint8Array([new Uint8Array(i),e]);break;case"salted":t=_.concatUint8Array([new Uint8Array(i),this.salt,e]);break;case"iterated":{const r=_.concatUint8Array([this.salt,e]);let n=r.length;const s=Math.max(this.getCount(),n);t=new Uint8Array(i+s),t.set(r,i);for(let e=i+n;e<s;e+=n,n*=2)t.copyWithin(e,i,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await ya.hash.digest(this.algorithm,t);r.push(s),n+=s.length,i++}return _.concatUint8Array(r).subarray(0,t)}}const ma=new Set([H.s2k.argon2,H.s2k.iterated]);function ba(e,t=O){switch(e){case H.s2k.argon2:return new Aa(t);case H.s2k.iterated:case H.s2k.gnu:case H.s2k.salted:case H.s2k.simple:return new wa(e,t);default:throw new $n("Unsupported S2K type")}}function Ea(e){const{s2kType:t}=e;if(!ma.has(t))throw Error("The provided `config.s2kType` value is not allowed");return ba(t,e)}var ka=t.createRequire("/");try{ka("worker_threads").Worker}catch(e){}var va=Uint8Array,Ba=Uint16Array,Ia=Uint32Array,Sa=new va([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),Ka=new va([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),Ca=new va([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),Pa=function(e,t){for(var r=new Ba(31),n=0;n<31;++n)r[n]=t+=1<<e[n-1];var i=new Ia(r[30]);for(n=1;n<30;++n)for(var s=r[n];s<r[n+1];++s)i[s]=s-r[n]<<5|n;return[r,i]},Ua=Pa(Sa,2),Da=Ua[0],xa=Ua[1];Da[28]=258,xa[258]=28;for(var Qa=Pa(Ka,0),Ra=Qa[0],Ma=Qa[1],La=new Ba(32768),Ta=0;Ta<32768;++Ta){var Fa=(43690&Ta)>>>1|(21845&Ta)<<1;Fa=(61680&(Fa=(52428&Fa)>>>2|(13107&Fa)<<2))>>>4|(3855&Fa)<<4,La[Ta]=((65280&Fa)>>>8|(255&Fa)<<8)>>>1}var Na=function(e,t,r){for(var n=e.length,i=0,s=new Ba(t);i<n;++i)e[i]&&++s[e[i]-1];var a,o=new Ba(t);for(i=0;i<t;++i)o[i]=o[i-1]+s[i-1]<<1;if(r){a=new Ba(1<<t);var c=15-t;for(i=0;i<n;++i)if(e[i])for(var h=i<<4|e[i],u=t-e[i],l=o[e[i]-1]++<<u,y=l|(1<<u)-1;l<=y;++l)a[La[l]>>>c]=h}else for(a=new Ba(n),i=0;i<n;++i)e[i]&&(a[i]=La[o[e[i]-1]++]>>>15-e[i]);return a},Ha=new va(288);for(Ta=0;Ta<144;++Ta)Ha[Ta]=8;for(Ta=144;Ta<256;++Ta)Ha[Ta]=9;for(Ta=256;Ta<280;++Ta)Ha[Ta]=7;for(Ta=280;Ta<288;++Ta)Ha[Ta]=8;var Oa=new va(32);for(Ta=0;Ta<32;++Ta)Oa[Ta]=5;var za=/*#__PURE__*/Na(Ha,9,0),_a=/*#__PURE__*/Na(Ha,9,1),Ga=/*#__PURE__*/Na(Oa,5,0),ja=/*#__PURE__*/Na(Oa,5,1),qa=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},Va=function(e,t,r){var n=t/8|0;return(e[n]|e[n+1]<<8)>>(7&t)&r},Za=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},Wa=function(e){return(e+7)/8|0},Ya=function(e,t,r){(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length);var n=new(2==e.BYTES_PER_ELEMENT?Ba:4==e.BYTES_PER_ELEMENT?Ia:va)(r-t);return n.set(e.subarray(t,r)),n},Ja=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],$a=function(e,t,r){var n=Error(t||Ja[e]);if(n.code=e,Error.captureStackTrace&&Error.captureStackTrace(n,$a),!r)throw n;return n},Xa=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>>8},eo=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>>8,e[n+2]|=r>>>16},to=function(e,t){for(var r=[],n=0;n<e.length;++n)e[n]&&r.push({s:n,f:e[n]});var i=r.length,s=r.slice();if(!i)return[co,0];if(1==i){var a=new va(r[0].s+1);return a[r[0].s]=1,[a,1]}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],h=0,u=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};u!=i-1;)o=r[r[h].f<r[l].f?h++:l++],c=r[h!=u&&r[h].f<r[l].f?h++:l++],r[u++]={s:-1,f:o.f+c.f,l:o,r:c};var y=s[0].s;for(n=1;n<i;++n)s[n].s>y&&(y=s[n].s);var f=new Ba(y+1),g=ro(r[u-1],f,0);if(g>t){n=0;var p=0,d=g-t,A=1<<d;for(s.sort((function(e,t){return f[t.s]-f[e.s]||e.f-t.f}));n<i;++n){var w=s[n].s;if(!(f[w]>t))break;p+=A-(1<<g-f[w]),f[w]=t}for(p>>>=d;p>0;){var m=s[n].s;f[m]<t?p-=1<<t-f[m]++-1:++n}for(;n>=0&&p;--n){var b=s[n].s;f[b]==t&&(--f[b],++p)}g=t}return[new va(f),g]},ro=function(e,t,r){return-1==e.s?Math.max(ro(e.l,t,r+1),ro(e.r,t,r+1)):t[e.s]=r},no=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new Ba(++t),n=0,i=e[0],s=1,a=function(e){r[n++]=e},o=1;o<=t;++o)if(e[o]==i&&o!=t)++s;else{if(!i&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(i),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(i);s=1,i=e[o]}return[r.subarray(0,n),t]},io=function(e,t){for(var r=0,n=0;n<t.length;++n)r+=e[n]*t[n];return r},so=function(e,t,r){var n=r.length,i=Wa(t+2);e[i]=255&n,e[i+1]=n>>>8,e[i+2]=255^e[i],e[i+3]=255^e[i+1];for(var s=0;s<n;++s)e[i+s+4]=r[s];return 8*(i+4+n)},ao=function(e,t,r,n,i,s,a,o,c,h,u){Xa(t,u++,r),++i[256];for(var l=to(i,15),y=l[0],f=l[1],g=to(s,15),p=g[0],d=g[1],A=no(y),w=A[0],m=A[1],b=no(p),E=b[0],k=b[1],v=new Ba(19),B=0;B<w.length;++B)v[31&w[B]]++;for(B=0;B<E.length;++B)v[31&E[B]]++;for(var I=to(v,7),S=I[0],K=I[1],C=19;C>4&&!S[Ca[C-1]];--C);var P,U,D,x,Q=h+5<<3,R=io(i,Ha)+io(s,Oa)+a,M=io(i,y)+io(s,p)+a+14+3*C+io(v,S)+(2*v[16]+3*v[17]+7*v[18]);if(Q<=R&&Q<=M)return so(t,u,e.subarray(c,c+h));if(Xa(t,u,1+(M<R)),u+=2,M<R){P=Na(y,f,0),U=y,D=Na(p,d,0),x=p;var L=Na(S,K,0);Xa(t,u,m-257),Xa(t,u+5,k-1),Xa(t,u+10,C-4),u+=14;for(B=0;B<C;++B)Xa(t,u+3*B,S[Ca[B]]);u+=3*C;for(var T=[w,E],F=0;F<2;++F){var N=T[F];for(B=0;B<N.length;++B){var H=31&N[B];Xa(t,u,L[H]),u+=S[H],H>15&&(Xa(t,u,N[B]>>>5&127),u+=N[B]>>>12)}}}else P=za,U=Ha,D=Ga,x=Oa;for(B=0;B<o;++B)if(n[B]>255){H=n[B]>>>18&31;eo(t,u,P[H+257]),u+=U[H+257],H>7&&(Xa(t,u,n[B]>>>23&31),u+=Sa[H]);var O=31&n[B];eo(t,u,D[O]),u+=x[O],O>3&&(eo(t,u,n[B]>>>5&8191),u+=Ka[O])}else eo(t,u,P[n[B]]),u+=U[n[B]];return eo(t,u,P[256]),u+U[256]},oo=/*#__PURE__*/new Ia([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),co=/*#__PURE__*/new va(0),ho=function(e,t,r,n,i){return function(e,t,r,n,i,s){var a=e.length,o=new va(n+a+5*(1+Math.ceil(a/7e3))+i),c=o.subarray(n,o.length-i),h=0;if(!t||a<8)for(var u=0;u<=a;u+=65535){var l=u+65535;l>=a&&(c[h>>3]=s),h=so(c,h+1,e.subarray(u,l))}else{for(var y=oo[t-1],f=y>>>13,g=8191&y,p=(1<<r)-1,d=new Ba(32768),A=new Ba(p+1),w=Math.ceil(r/3),m=2*w,b=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<m)&p},E=new Ia(25e3),k=new Ba(288),v=new Ba(32),B=0,I=0,S=(u=0,0),K=0,C=0;u<a;++u){var P=b(u),U=32767&u,D=A[P];if(d[U]=D,A[P]=U,K<=u){var x=a-u;if((B>7e3||S>24576)&&x>423){h=ao(e,c,0,E,k,v,I,S,C,u-C,h),S=B=I=0,C=u;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)v[Q]=0}var R=2,M=0,L=g,T=U-D&32767;if(x>2&&P==b(u-T))for(var F=Math.min(f,x)-1,N=Math.min(32767,u),H=Math.min(258,x);T<=N&&--L&&U!=D;){if(e[u+R]==e[u+R-T]){for(var O=0;O<H&&e[u+O]==e[u+O-T];++O);if(O>R){if(R=O,M=T,O>F)break;var z=Math.min(T,O-2),_=0;for(Q=0;Q<z;++Q){var G=u-T+Q+32768&32767,j=G-d[G]+32768&32767;j>_&&(_=j,D=G)}}}T+=(U=D)-(D=d[U])+32768&32767}if(M){E[S++]=268435456|xa[R]<<18|Ma[M];var q=31&xa[R],V=31&Ma[M];I+=Sa[q]+Ka[V],++k[257+q],++v[V],K=u+R,++B}else E[S++]=e[u],++k[e[u]]}}h=ao(e,c,s,E,k,v,I,S,C,u-C,h),!s&&7&h&&(h=so(c,h+1,co))}return Ya(o,0,n+Wa(h)+i)}(e,null==t.level?6:t.level,null==t.mem?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):12+t.mem,r,n,!i)},uo=/*#__PURE__*/function(){function e(e,t){t||"function"!=typeof e||(t=e,e={}),this.ondata=t,this.o=e||{}}return e.prototype.p=function(e,t){this.ondata(ho(e,this.o,0,0,!t),t)},e.prototype.push=function(e,t){this.ondata||$a(5),this.d&&$a(4),this.d=t,this.p(e,t||!1)},e}(),lo=/*#__PURE__*/function(){function e(e){this.s={},this.p=new va(0),this.ondata=e}return e.prototype.e=function(e){this.ondata||$a(5),this.d&&$a(4);var t=this.p.length,r=new va(t+e.length);r.set(this.p),r.set(e,t),this.p=r},e.prototype.c=function(e){this.d=this.s.i=e||!1;var t=this.s.b,r=function(e,t,r){var n=e.length;if(!n||r&&r.f&&!r.l)return t||new va(0);var i=!t||r,s=!r||r.i;r||(r={}),t||(t=new va(3*n));var a=function(e){var r=t.length;if(e>r){var n=new va(Math.max(2*r,e));n.set(t),t=n}},o=r.f||0,c=r.p||0,h=r.b||0,u=r.l,l=r.d,y=r.m,f=r.n,g=8*n;do{if(!u){o=Va(e,c,1);var p=Va(e,c+1,3);if(c+=3,!p){var d=e[(K=Wa(c)+4)-4]|e[K-3]<<8,A=K+d;if(A>n){s&&$a(0);break}i&&a(h+d),t.set(e.subarray(K,A),h),r.b=h+=d,r.p=c=8*A,r.f=o;continue}if(1==p)u=_a,l=ja,y=9,f=5;else if(2==p){var w=Va(e,c,31)+257,m=Va(e,c+10,15)+4,b=w+Va(e,c+5,31)+1;c+=14;for(var E=new va(b),k=new va(19),v=0;v<m;++v)k[Ca[v]]=Va(e,c+3*v,7);c+=3*m;var B=qa(k),I=(1<<B)-1,S=Na(k,B,1);for(v=0;v<b;){var K,C=S[Va(e,c,I)];if(c+=15&C,(K=C>>>4)<16)E[v++]=K;else{var P=0,U=0;for(16==K?(U=3+Va(e,c,3),c+=2,P=E[v-1]):17==K?(U=3+Va(e,c,7),c+=3):18==K&&(U=11+Va(e,c,127),c+=7);U--;)E[v++]=P}}var D=E.subarray(0,w),x=E.subarray(w);y=qa(D),f=qa(x),u=Na(D,y,1),l=Na(x,f,1)}else $a(1);if(c>g){s&&$a(0);break}}i&&a(h+131072);for(var Q=(1<<y)-1,R=(1<<f)-1,M=c;;M=c){var L=(P=u[Za(e,c)&Q])>>>4;if((c+=15&P)>g){s&&$a(0);break}if(P||$a(2),L<256)t[h++]=L;else{if(256==L){M=c,u=null;break}var T=L-254;if(L>264){var F=Sa[v=L-257];T=Va(e,c,(1<<F)-1)+Da[v],c+=F}var N=l[Za(e,c)&R],H=N>>>4;if(N||$a(3),c+=15&N,x=Ra[H],H>3&&(F=Ka[H],x+=Za(e,c)&(1<<F)-1,c+=F),c>g){s&&$a(0);break}i&&a(h+131072);for(var O=h+T;h<O;h+=4)t[h]=t[h-x],t[h+1]=t[h+1-x],t[h+2]=t[h+2-x],t[h+3]=t[h+3-x];h=O}}r.l=u,r.p=M,r.b=h,r.f=o,u&&(o=1,r.m=y,r.d=l,r.n=f)}while(!o);return h==t.length?t:Ya(t,0,h)}(this.p,this.o,this.s);this.ondata(Ya(r,t,this.s.b),this.d),this.o=Ya(r,this.s.b-32768),this.s.b=this.o.length,this.p=Ya(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),yo=/*#__PURE__*/function(){function e(e,t){var r,n;this.c=(r=1,n=0,{p:function(e){for(var t=r,i=n,s=0|e.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)i+=t+=e[a];t=(65535&t)+15*(t>>16),i=(65535&i)+15*(i>>16)}r=t,n=i},d:function(){return(255&(r%=65521))<<24|r>>>8<<16|(255&(n%=65521))<<8|n>>>8}}),this.v=1,uo.call(this,e,t)}return e.prototype.push=function(e,t){uo.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){this.c.p(e);var r=ho(e,this.o,this.v&&2,t&&4,!t);this.v&&(function(e,t){var r=t.level,n=0==r?0:r<6?1:9==r?3:2;e[0]=120,e[1]=n<<6|(n?32-2*n:1)}(r,this.o),this.v=0),t&&function(e,t,r){for(;r;++t)e[t]=r,r>>>=8}(r,r.length-4,this.c.d()),this.ondata(r,t)},e}(),fo=/*#__PURE__*/function(){function e(e){this.v=1,lo.call(this,e)}return e.prototype.push=function(e,t){if(lo.prototype.e.call(this,e),this.v){if(this.p.length<2&&!t)return;this.p=this.p.subarray(2),this.v=0}t&&(this.p.length<4&&$a(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),lo.prototype.c.call(this,t)},e}(),go="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{go.decode(co,{stream:!0}),1}catch(e){}var po=[0,1,3,7,15,31,63,127,255],Ao=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};Ao.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},Ao.prototype.read=function(e){for(var t=0;e>0;){this._ensureByte();var r=8-this.bitOffset;if(e>=r)t<<=r,t|=po[r]&this.curByte,this.hasByte=!1,this.bitOffset=0,e-=r;else{t<<=e;var n=r-e;t|=(this.curByte&po[e]<<n)>>n,this.bitOffset+=e,e=0}}return t},Ao.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},Ao.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)};var wo=Ao,mo=function(){};mo.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},mo.prototype.read=function(e,t,r){for(var n=0;n<r;){var i=this.readByte();if(i<0)return 0===n?-1:n;e[t++]=i,n++}return n},mo.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},mo.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},mo.prototype.write=function(e,t,r){var n;for(n=0;n<r;n++)this.writeByte(e[t++]);return r},mo.prototype.flush=function(){};var bo,Eo=mo,ko=(bo=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),function(){var e=4294967295;this.getCRC=function(){return~e>>>0},this.updateCRC=function(t){e=e<<8^bo[255&(e>>>24^t)]},this.updateCRCRun=function(t,r){for(;r-- >0;)e=e<<8^bo[255&(e>>>24^t)]}}),vo=wo,Bo=Eo,Io=ko,So=function(e,t){var r,n=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=n,n},Ko={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},Co={};Co[Ko.LAST_BLOCK]="Bad file checksum",Co[Ko.NOT_BZIP_DATA]="Not bzip data",Co[Ko.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",Co[Ko.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",Co[Ko.DATA_ERROR]="Data error",Co[Ko.OUT_OF_MEMORY]="Out of memory",Co[Ko.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var Po=function(e,t){var r=Co[e]||"unknown error";t&&(r+=": "+t);var n=new TypeError(r);throw n.errorCode=e,n},Uo=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};Uo.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new Io,!0):(this.writeCount=-1,!1)},Uo.prototype._start_bunzip=function(e,t){var r=new Uint8Array(4);4===e.read(r,0,4)&&"BZh"===String.fromCharCode(r[0],r[1],r[2])||Po(Ko.NOT_BZIP_DATA,"bad magic");var n=r[3]-48;(n<1||n>9)&&Po(Ko.NOT_BZIP_DATA,"level out of range"),this.reader=new vo(e),this.dbufSize=1e5*n,this.nextoutput=0,this.outputStream=t,this.streamCRC=0},Uo.prototype._get_next_block=function(){var e,t,r,n=this.reader,i=n.pi();if("177245385090"===i)return!1;"314159265359"!==i&&Po(Ko.NOT_BZIP_DATA),this.targetBlockCRC=n.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,n.read(1)&&Po(Ko.OBSOLETE_INPUT);var s=n.read(24);s>this.dbufSize&&Po(Ko.DATA_ERROR,"initial position out of bounds");var a=n.read(16),o=new Uint8Array(256),c=0;for(e=0;e<16;e++)if(a&1<<15-e){var h=16*e;for(r=n.read(16),t=0;t<16;t++)r&1<<15-t&&(o[c++]=h+t)}var u=n.read(3);(u<2||u>6)&&Po(Ko.DATA_ERROR);var l=n.read(15);0===l&&Po(Ko.DATA_ERROR);var y=new Uint8Array(256);for(e=0;e<u;e++)y[e]=e;var f=new Uint8Array(l);for(e=0;e<l;e++){for(t=0;n.read(1);t++)t>=u&&Po(Ko.DATA_ERROR);f[e]=So(y,t)}var g,p=c+2,d=[];for(t=0;t<u;t++){var A,w,m=new Uint8Array(p),b=new Uint16Array(21);for(a=n.read(5),e=0;e<p;e++){for(;(a<1||a>20)&&Po(Ko.DATA_ERROR),n.read(1);)n.read(1)?a--:a++;m[e]=a}for(A=w=m[0],e=1;e<p;e++)m[e]>w?w=m[e]:m[e]<A&&(A=m[e]);g={},d.push(g),g.permute=new Uint16Array(258),g.limit=new Uint32Array(22),g.base=new Uint32Array(21),g.minLen=A,g.maxLen=w;var E=0;for(e=A;e<=w;e++)for(b[e]=g.limit[e]=0,a=0;a<p;a++)m[a]===e&&(g.permute[E++]=a);for(e=0;e<p;e++)b[m[e]]++;for(E=a=0,e=A;e<w;e++)E+=b[e],g.limit[e]=E-1,E<<=1,a+=b[e],g.base[e+1]=E-a;g.limit[w+1]=Number.MAX_VALUE,g.limit[w]=E+b[w]-1,g.base[A]=0}var k=new Uint32Array(256);for(e=0;e<256;e++)y[e]=e;var v,B=0,I=0,S=0,K=this.dbuf=new Uint32Array(this.dbufSize);for(p=0;;){for(p--||(p=49,S>=l&&Po(Ko.DATA_ERROR),g=d[f[S++]]),e=g.minLen,t=n.read(e);e>g.maxLen&&Po(Ko.DATA_ERROR),!(t<=g.limit[e]);e++)t=t<<1|n.read(1);((t-=g.base[e])<0||t>=258)&&Po(Ko.DATA_ERROR);var C=g.permute[t];if(0!==C&&1!==C){if(B)for(B=0,I+a>this.dbufSize&&Po(Ko.DATA_ERROR),k[v=o[y[0]]]+=a;a--;)K[I++]=v;if(C>c)break;I>=this.dbufSize&&Po(Ko.DATA_ERROR),k[v=o[v=So(y,e=C-1)]]++,K[I++]=v}else B||(B=1,a=0),a+=0===C?B:2*B,B<<=1}for((s<0||s>=I)&&Po(Ko.DATA_ERROR),t=0,e=0;e<256;e++)r=t+k[e],k[e]=t,t=r;for(e=0;e<I;e++)K[k[v=255&K[e]]]|=e<<8,k[v]++;var P=0,U=0,D=0;return I&&(U=255&(P=K[s]),P>>=8,D=-1),this.writePos=P,this.writeCurrent=U,this.writeCount=I,this.writeRun=D,!0},Uo.prototype._read_bunzip=function(e,t){var r,n,i;if(this.writeCount<0)return 0;var s=this.dbuf,a=this.writePos,o=this.writeCurrent,c=this.writeCount;this.outputsize;for(var h=this.writeRun;c;){for(c--,n=o,o=255&(a=s[a]),a>>=8,3==h++?(r=o,i=n,o=-1):(r=1,i=o),this.blockCRC.updateCRCRun(i,r);r--;)this.outputStream.writeByte(i),this.nextoutput++;o!=n&&(h=0)}return this.writeCount=c,this.blockCRC.getCRC()!==this.targetBlockCRC&&Po(Ko.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var Do=function(e){if("readByte"in e)return e;var t=new Bo;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},xo=function(e){var t=new Bo,r=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),r=!1;else{if("writeByte"in e)return e;t.buffer=e,r=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(r&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!r)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};var Qo=function(e,t,r){for(var n=Do(e),i=xo(t),s=new Uo(n,i);!("eof"in n)||!n.eof();)if(s._init_block())s._read_bunzip();else{var a=s.reader.read(32)>>>0;if(a!==s.streamCRC&&Po(Ko.DATA_ERROR,"Bad stream CRC (got "+s.streamCRC.toString(16)+" expected "+a.toString(16)+")"),!r||!("eof"in n)||n.eof())break;s._start_bunzip(n,i)}if("getBuffer"in i)return i.getBuffer()};class Ro{static get tag(){return H.packet.literalData}constructor(e=new Date){this.format=H.literal.utf8,this.date=_.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=H.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||_.isStream(this.text))&&(this.text=_.decodeUTF8(_.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=_.canonicalizeEOL(_.encodeUTF8(this.text))),e?D(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await P(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=_.decodeUTF8(await e.readBytes(r)),this.date=_.readDate(await e.readBytes(4));let n=e.remainder();f(n)&&(n=await R(n)),this.setBytes(n,t)}))}writeHeader(){const e=_.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),n=_.writeDate(this.date);return _.concatUint8Array([r,t,e,n])}write(){const e=this.writeHeader(),t=this.getBytes();return _.concat([e,t])}}class Mo{constructor(){this.bytes=""}read(e){return this.bytes=_.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return _.stringToUint8Array(this.bytes)}toHex(){return _.uint8ArrayToHex(_.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new Mo;return t.read(_.hexToUint8Array(e)),t}static wildcard(){const e=new Mo;return e.read(new Uint8Array(8)),e}}const Lo=Symbol("verified"),To="salt@notations.openpgpjs.org",Fo=new Set([H.signatureSubpacket.issuerKeyID,H.signatureSubpacket.issuerFingerprint,H.signatureSubpacket.embeddedSignature]);class No{static get tag(){return H.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.unknownSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new Mo,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[Lo]=null}read(e,t=O){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new $n("Support for v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4!==this.version&&5!==this.version&&6!==this.version)throw new $n(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[r++],this.publicKeyAlgorithm=e[r++],this.hashAlgorithm=e[r++],r+=this.readSubPackets(e.subarray(r,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,r),r+=this.readSubPackets(e.subarray(r,e.length),!1),this.signedHashValue=e.subarray(r,r+2),r+=2,6===this.version){const t=e[r++];this.salt=e.subarray(r,r+t),r+=t}const n=e.subarray(r,e.length),{read:i,signatureParams:s}=ya.signature.parseSignatureParams(this.publicKeyAlgorithm,n);if(i<n.length)throw Error("Error reading MPIs");this.params=s}writeParams(){return this.params instanceof Promise?L((async()=>ya.serializeParams(this.publicKeyAlgorithm,await this.params))):ya.serializeParams(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),_.concat(e)}async sign(e,t,r=new Date,n=!1,i){this.version=e.version,this.created=_.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=Oo(this.hashAlgorithm);if(null===this.salt)this.salt=ya.random.getRandomBytes(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(i.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===To)).length)throw Error("Unexpected existing salt notation");{const e=ya.random.getRandomBytes(Oo(this.hashAlgorithm));this.rawNotations.push({name:To,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=_.concat(s);const a=this.toHash(this.signatureType,t,n),o=await this.hash(this.signatureType,t,a,n);this.signedHashValue=Q(U(o),0,2);const c=async()=>ya.signature.sign(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await R(o));_.isStream(o)?this.params=c():(this.params=await c(),this[Lo]=!0)}writeHashedSubPackets(){const e=H.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(Ho(e.signatureCreationTime,!0,_.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(Ho(e.signatureExpirationTime,!0,_.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(Ho(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(Ho(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(Ho(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(Ho(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(Ho(e.keyExpirationTime,!0,_.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=_.stringToUint8Array(_.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(Ho(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=_.concat([r,this.revocationKeyFingerprint]),t.push(Ho(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(Ho(e.issuerKeyID,!0,this.issuerKeyID.write())),this.rawNotations.forEach((({name:n,value:i,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=_.encodeUTF8(n);r.push(_.writeNumber(o.length,2)),r.push(_.writeNumber(i.length,2)),r.push(o),r.push(i),r=_.concat(r),t.push(Ho(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=_.stringToUint8Array(_.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(Ho(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=_.stringToUint8Array(_.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(Ho(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=_.stringToUint8Array(_.uint8ArrayToString(this.keyServerPreferences)),t.push(Ho(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(Ho(e.preferredKeyServer,!1,_.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(Ho(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(Ho(e.policyURI,!1,_.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=_.stringToUint8Array(_.uint8ArrayToString(this.keyFlags)),t.push(Ho(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(Ho(e.signersUserID,!1,_.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=_.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(Ho(e.reasonForRevocation,!0,r))),null!==this.features&&(r=_.stringToUint8Array(_.uint8ArrayToString(this.features)),t.push(Ho(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(_.stringToUint8Array(this.signatureTargetHash)),r=_.concat(r),t.push(Ho(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(Ho(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=_.concat(r),t.push(Ho(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=_.stringToUint8Array(_.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(Ho(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(Ho(e.preferredCipherSuites,!1,r)));const n=_.concat(t),i=_.writeNumber(n.length,6===this.version?4:2);return _.concat([i,n])}writeUnhashedSubPackets(){const e=this.unhashedSubpackets.map((({type:e,critical:t,body:r})=>Ho(e,t,r))),t=_.concat(e),r=_.writeNumber(t.length,6===this.version?4:2);return _.concat([r,t])}readSubPacket(e,t=!0){let r=0;const n=!!(128&e[r]),i=127&e[r];if(r++,t||(this.unhashedSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)}),Fo.has(i)))switch(i){case H.signatureSubpacket.signatureCreationTime:this.created=_.readDate(e.subarray(r,e.length));break;case H.signatureSubpacket.signatureExpirationTime:{const t=_.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case H.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case H.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case H.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case H.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case H.signatureSubpacket.keyExpirationTime:{const t=_.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case H.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case H.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case H.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case H.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const i=_.readNumber(e.subarray(r,r+2));r+=2;const s=_.readNumber(e.subarray(r,r+2));r+=2;const a=_.decodeUTF8(e.subarray(r,r+i)),o=e.subarray(r+i,r+i+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:n}),t&&(this.notations[a]=_.decodeUTF8(o));break}case H.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case H.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case H.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case H.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=_.decodeUTF8(e.subarray(r,e.length));break;case H.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case H.signatureSubpacket.policyURI:this.policyURI=_.decodeUTF8(e.subarray(r,e.length));break;case H.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case H.signatureSubpacket.signersUserID:this.signersUserID=_.decodeUTF8(e.subarray(r,e.length));break;case H.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=_.decodeUTF8(e.subarray(r,e.length));break;case H.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case H.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=ya.getHashByteLength(this.signatureTargetHashAlgorithm);this.signatureTargetHash=_.uint8ArrayToString(e.subarray(r,r+t));break}case H.signatureSubpacket.embeddedSignature:this.embeddedSignature=new No,this.embeddedSignature.read(e.subarray(r,e.length));break;case H.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case H.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case H.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:this.unknownSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)})}}readSubPackets(e,t=!0,r){const n=6===this.version?4:2,i=_.readNumber(e.subarray(0,n));let s=n;for(;s<2+i;){const n=jn(e.subarray(s,e.length));s+=n.offset,this.readSubPacket(e.subarray(s,s+n.len),t,r),s+=n.len}return s}toSign(e,t){const r=H.signature;switch(e){case r.binary:return null!==t.text?_.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return _.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,n;if(t.userID)n=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");n=209,e=t.userAttribute}const i=e.write();return _.concat([this.toSign(r.key,t),new Uint8Array([n]),_.writeNumber(i.length,4),i])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return _.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return K(U(this.signatureData),(e=>{r+=e.length}),(()=>{const n=[];return 5!==this.version||this.signatureType!==H.signature.binary&&this.signatureType!==H.signature.text||(t?n.push(new Uint8Array(6)):n.push(e.writeHeader())),n.push(new Uint8Array([this.version,255])),5===this.version&&n.push(new Uint8Array(4)),n.push(_.writeNumber(r,4)),_.concat(n)}))}toHash(e,t,r=!1){const n=this.toSign(e,t);return _.concat([this.salt||new Uint8Array,n,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,n=!1){if(6===this.version&&this.salt.length!==Oo(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,n)),ya.hash.digest(this.hashAlgorithm,r)}async verify(e,t,r,n=new Date,i=!1,s=O){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===H.signature.binary||t===H.signature.text;if(!(this[Lo]&&!a)){let n,s;if(this.hashed?s=await this.hashed:(n=this.toHash(t,r,i),s=await this.hash(t,r,n)),s=await R(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===H.publicKey.hmac?e.privateParams:null;if(this[Lo]=await ya.signature.verify(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,n,s),!this[Lo])throw Error("Signature verification failed")}const o=_.normalizeDate(n);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+H.read(H.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[H.signature.binary,H.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+H.read(H.hash,this.hashAlgorithm).toUpperCase());if(this.unknownSubpackets.forEach((({type:e,critical:t})=>{if(t)throw Error("Unknown critical signature subpacket type "+e)})),this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=_.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function Ho(e,t,r){const n=[];return n.push(qn(r.length+1)),n.push(new Uint8Array([(t?128:0)|e])),n.push(r),_.concat(n)}function Oo(e){switch(e){case H.hash.sha256:return 16;case H.hash.sha384:return 24;case H.hash.sha512:return 32;case H.hash.sha224:case H.hash.sha3_256:return 16;case H.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class zo{static get tag(){return H.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new zo;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new $n(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new Mo,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new Mo,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),_.concatUint8Array(e)}calculateTrailer(...e){return L((async()=>No.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==H.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!_.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!_.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function _o(e,t){if(!t[e]){let t;try{t=H.read(H.packet,e)}catch(t){throw new Xn("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}zo.prototype.hash=No.prototype.hash,zo.prototype.toHash=No.prototype.toHash,zo.prototype.toSign=No.prototype.toSign;class Go extends Array{static async fromBinary(e,t,r=O){const n=new Go;return await n.read(e,t,r),n}async read(e,t,r=O){r.additionalAllowedPackets.length&&(t={...t,..._.constructAllowedPackets(r.additionalAllowedPackets)}),this.stream=C(e,(async(e,n)=>{const i=F(n);try{for(;;){await i.ready;if(await Jn(e,(async e=>{try{if(e.tag===H.packet.marker||e.tag===H.packet.trust||e.tag===H.packet.padding)return;const n=_o(e.tag,t);n.packets=new Go,n.fromStream=_.isStream(e.packet),await n.read(e.packet,r),await i.write(n)}catch(t){if(t instanceof Xn){if(!(e.tag<=39))return;await i.abort(t)}const n=!r.ignoreUnsupportedPackets&&t instanceof $n,s=!(r.ignoreMalformedPackets||t instanceof $n);if(n||s||Yn(e.tag))await i.abort(t);else{const t=new ei(e.tag,e.packet);await i.write(t)}_.printDebugError(t)}})))return await i.ready,void await i.close()}}catch(e){await i.abort(e)}}));const n=T(this.stream);for(;;){const{done:e,value:t}=await n.read();if(e?this.stream=null:this.push(t),e||Yn(t.constructor.tag))break}n.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ei?this[t].tag:this[t].constructor.tag,n=this[t].write();if(_.isStream(n)&&Yn(this[t].constructor.tag)){let t=[],i=0;const s=512;e.push(Zn(r)),e.push(K(n,(e=>{if(t.push(e),i+=e.length,i>=s){const e=Math.min(Math.log(i)/Math.LN2|0,30),r=2**e,n=_.concat([Vn(e)].concat(t));return t=[n.subarray(1+r)],i=t[0].length,n.subarray(0,1+r)}}),(()=>_.concat([qn(i)].concat(t)))))}else{if(_.isStream(n)){let t=0;e.push(K(U(n),(e=>{t+=e.length}),(()=>Wn(r,t))))}else e.push(Wn(r,n.length));e.push(n)}}return _.concat(e)}filterByTag(...e){const t=new Go,r=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(r(this[n].constructor.tag))&&t.push(this[n]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,n=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(n(r[i].constructor.tag))&&t.push(i);return t}}const jo=/*#__PURE__*/_.constructAllowedPackets([Ro,zo,No]);class qo{static get tag(){return H.packet.compressedData}constructor(e=O){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=O){await P(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),_.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=O){const t=H.read(H.compression,this.algorithm),r=Jo[t];if(!r)throw Error(t+" decompression not supported");this.packets=await Go.fromBinary(r(this.compressed),jo,e)}compress(){const e=H.read(H.compression,this.algorithm),t=Yo[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function Vo(e,t){return r=>{if(!_.isStream(r)||f(r))return L((()=>R(r).then((e=>new Promise(((r,n)=>{const i=new t;i.ondata=e=>{r(e)};try{i.push(e,!0)}catch(e){n(e)}}))))));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const n=r.getReader(),i=new t;return new ReadableStream({async start(e){for(i.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await n.read();if(e)return void i.push(new Uint8Array,!0);t.length&&i.push(t)}}})}}function Zo(e){return function(t){return L((async()=>e(await R(t))))}}const Wo=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),Yo={zip:/*#__PURE__*/Vo(Wo("deflate-raw").compressor,uo),zlib:/*#__PURE__*/Vo(Wo("deflate").compressor,yo)},Jo={uncompressed:e=>e,zip:/*#__PURE__*/Vo(Wo("deflate-raw").decompressor,lo),zlib:/*#__PURE__*/Vo(Wo("deflate").decompressor,fo),bzip2:/*#__PURE__*/Zo(Qo)},$o=/*#__PURE__*/_.constructAllowedPackets([Ro,qo,zo,No]);class Xo{static get tag(){return H.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new Xo;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await P(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new $n(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?_.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):_.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=O){let n=this.packets.write();if(f(n)&&(n=await R(n)),2===this.version)this.cipherAlgorithm=e,this.salt=ya.random.getRandomBytes(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await ec(this,"encrypt",t,n);else{const{blockSize:i}=ya.getCipherParams(e),s=await ya.getPrefixRandom(e),a=new Uint8Array([211,20]),o=_.concat([s,n,a]),c=await ya.hash.sha1(D(o)),h=_.concat([o,c]);this.encrypted=await ya.mode.cfb.encrypt(e,t,h,new Uint8Array(i),r)}return!0}async decrypt(e,t,r=O){let n,i=U(this.encrypted);if(f(i)&&(i=await R(i)),2===this.version)n=await ec(this,"decrypt",t,i);else{const{blockSize:s}=ya.getCipherParams(e),a=await ya.mode.cfb.decrypt(e,t,i,new Uint8Array(s)),o=Q(D(a),-20),c=Q(a,0,-20),h=Promise.all([R(await ya.hash.sha1(D(c))),R(o)]).then((([e,t])=>{if(!_.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),u=Q(c,s+2);n=Q(u,0,-2),n=v([n,L((()=>h))]),_.isStream(i)&&r.allowUnauthenticatedStream||(n=await R(n))}return this.packets=await Go.fromBinary(n,$o,r),!0}}async function ec(e,t,r,n){const i=e instanceof Xo&&2===e.version,s=!i&&e.constructor.tag===H.packet.aeadEncryptedData;if(!i&&!s)throw Error("Unexpected packet type");const a=ya.getAEADMode(e.aeadAlgorithm),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,h=2**(e.chunkSizeByte+6)+o,u=s?8:0,l=new ArrayBuffer(13+u),y=new Uint8Array(l,0,5+u),f=new Uint8Array(l),g=new DataView(l),p=new Uint8Array(l,5,8);y.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let d,A,w=0,m=Promise.resolve(),b=0,E=0;if(i){const{keySize:t}=ya.getCipherParams(e.cipherAlgorithm),{ivLength:n}=a,i=new Uint8Array(l,0,5),s=await is(H.hash.sha256,r,e.salt,i,t+n);r=s.subarray(0,t),d=s.subarray(t),d.fill(0,d.length-8),A=new DataView(d.buffer,d.byteOffset,d.byteLength)}else d=e.iv;const k=await a(e.cipherAlgorithm,r);return C(n,(async(r,n)=>{if("array"!==_.isStream(r)){const t=new TransformStream({},{highWaterMark:_.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});B(t.readable,n),n=t.writable}const s=T(r),a=F(n);try{for(;;){let e=await s.readBytes(h+o)||new Uint8Array;const r=e.subarray(e.length-o);let n,l,v;if(e=e.subarray(0,e.length-o),i)v=d;else{v=d.slice();for(let e=0;e<8;e++)v[d.length-8+e]^=p[e]}if(!w||e.length?(s.unshift(r),n=k[t](e,v,y),n.catch((()=>{})),E+=e.length-o+c):(g.setInt32(5+u+4,b),n=k[t](r,v,f),n.catch((()=>{})),E+=c,l=!0),b+=e.length-o,m=m.then((()=>n)).then((async e=>{await a.ready,await a.write(e),E-=e.length})).catch((e=>a.abort(e))),(l||E>a.desiredSize)&&await m,l){await a.close();break}i?A.setInt32(d.length-4,++w):g.setInt32(9,++w)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const tc=/*#__PURE__*/_.constructAllowedPackets([Ro,qo,zo,No]);class rc{static get tag(){return H.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=H.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await P(e,(async e=>{const t=await e.readByte();if(1!==t)throw new $n(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=ya.getAEADMode(this.aeadAlgorithm);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return _.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=O){this.packets=await Go.fromBinary(await ec(this,"decrypt",t,U(this.encrypted)),tc,r)}async encrypt(e,t,r=O){this.cipherAlgorithm=e;const{ivLength:n}=ya.getAEADMode(this.aeadAlgorithm);this.iv=ya.random.getRandomBytes(n),this.chunkSizeByte=r.aeadChunkSizeByte;const i=this.packets.write();this.encrypted=await ec(this,"encrypt",t,i)}}class nc{static get tag(){return H.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new Mo,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:n,sessionKeyAlgorithm:i}){const s=new nc;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?Mo.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=n,s.sessionKeyAlgorithm=i,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new $n(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const n=r-1;this.publicKeyFingerprint=e.subarray(t,t+n),t+=n,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=Mo.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=ya.parseEncSessionKeyParams(this.publicKeyAlgorithm,e.subarray(t)),this.publicKeyAlgorithm===H.publicKey.x25519||this.publicKeyAlgorithm===H.publicKey.x448)if(3===this.version)this.sessionKeyAlgorithm=H.write(H.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),ya.serializeParams(this.publicKeyAlgorithm,this.encrypted)),_.concatUint8Array(e)}async encrypt(e){const t=H.write(H.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=ic(this.version,t,r,this.sessionKey),s=t===H.publicKey.aead?e.privateParams:null;this.encrypted=await ya.publicKeyEncrypt(t,r,e.publicParams,s,i,n)}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?ic(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=await ya.publicKeyDecrypt(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,n,r),{sessionKey:s,sessionKeyAlgorithm:a}=function(e,t,r,n){switch(t){case H.publicKey.rsaEncrypt:case H.publicKey.rsaEncryptSign:case H.publicKey.elgamal:case H.publicKey.ecdh:case H.publicKey.aead:{const t=r.subarray(0,r.length-2),i=r.subarray(r.length-2),s=_.writeChecksum(t.subarray(t.length%8)),a=s[0]===i[0]&s[1]===i[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(n){const t=a&o.sessionKeyAlgorithm===n.sessionKeyAlgorithm&o.sessionKey.length===n.sessionKey.length;return{sessionKey:_.selectUint8Array(t,o.sessionKey,n.sessionKey),sessionKeyAlgorithm:6===e?null:_.selectUint8(t,o.sessionKeyAlgorithm,n.sessionKeyAlgorithm)}}if(a&&(6===e||H.read(H.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case H.publicKey.x25519:case H.publicKey.x448:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);3===this.version&&this.publicKeyAlgorithm!==H.publicKey.x25519&&this.publicKeyAlgorithm!==H.publicKey.x448&&(this.sessionKeyAlgorithm=a),this.sessionKey=s}}function ic(e,t,r,n){switch(t){case H.publicKey.rsaEncrypt:case H.publicKey.rsaEncryptSign:case H.publicKey.elgamal:case H.publicKey.ecdh:case H.publicKey.aead:return _.concatUint8Array([new Uint8Array(6===e?[]:[r]),n,_.writeChecksum(n.subarray(n.length%8))]);case H.publicKey.x25519:case H.publicKey.x448:return n;default:throw Error("Unsupported public key algorithm")}}class sc{static get tag(){return H.packet.symEncryptedSessionKey}constructor(e=O){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=H.symmetric.aes256,this.aeadAlgorithm=H.write(H.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new $n(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const n=e[t++];if(this.s2k=ba(n),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=ya.getAEADMode(this.aeadAlgorithm);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const n=r.length,i=3+n+this.iv.length;t=_.concatUint8Array([new Uint8Array([this.version,i,e,this.aeadAlgorithm,n]),r,this.iv,this.encrypted])}else 5===this.version?t=_.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=_.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=_.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:n}=ya.getCipherParams(t),i=await this.s2k.produceKey(e,n);if(this.version>=5){const e=ya.getAEADMode(this.aeadAlgorithm),r=new Uint8Array([192|sc.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await is(H.hash.sha256,i,new Uint8Array,r,n):i,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await ya.mode.cfb.decrypt(t,i,this.encrypted,new Uint8Array(r));this.sessionKeyAlgorithm=H.write(H.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length)}else this.sessionKey=i}async encrypt(e,t=O){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=Ea(t),this.s2k.generateSalt();const{blockSize:n,keySize:i}=ya.getCipherParams(r),s=await this.s2k.produceKey(e,i);if(null===this.sessionKey&&(this.sessionKey=ya.generateSessionKey(this.sessionKeyAlgorithm)),this.version>=5){const e=ya.getAEADMode(this.aeadAlgorithm);this.iv=ya.random.getRandomBytes(e.ivLength);const t=new Uint8Array([192|sc.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),n=6===this.version?await is(H.hash.sha256,s,new Uint8Array,t,i):s,a=await e(r,n);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=_.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await ya.mode.cfb.encrypt(r,s,e,new Uint8Array(n),t)}}}class ac{static get tag(){return H.packet.publicKey}constructor(e=new Date,t=O){this.version=t.v6Keys?6:4,this.created=_.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new ac,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e,t=O){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new $n("Support for parsing v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4===this.version||5===this.version||6===this.version){this.created=_.readDate(e.subarray(r,r+4)),r+=4,this.algorithm=e[r++],this.version>=5&&(r+=4);const{read:t,publicParams:n}=ya.parsePublicKeyParams(this.algorithm,e.subarray(r));if(6===this.version&&n.oid&&(n.oid.getName()===H.curve.curve25519Legacy||n.oid.getName()===H.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");return this.publicParams=n,r+=t,await this.computeFingerprintAndKeyID(),r}throw new $n(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(_.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=ya.serializeParams(this.algorithm,this.publicParams);return this.version>=5&&e.push(_.writeNumber(t.length,4)),e.push(t),_.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,n=e>=5?4:2;return _.concatUint8Array([new Uint8Array([r]),_.writeNumber(t.length,n),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new Mo,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await ya.hash.sha256(e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await ya.hash.sha1(e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return _.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&_.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=H.read(H.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=_.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}ac.prototype.readPublicKey=ac.prototype.read,ac.prototype.writePublicKey=ac.prototype.write;const oc=/*#__PURE__*/_.constructAllowedPackets([Ro,qo,zo,No]);class cc{static get tag(){return H.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=O){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:n}=ya.getCipherParams(e),i=await R(U(this.encrypted)),s=await ya.mode.cfb.decrypt(e,t,i.subarray(n+2),i.subarray(2,n+2));this.packets=await Go.fromBinary(s,oc,r)}async encrypt(e,t,r=O){const n=this.packets.write(),{blockSize:i}=ya.getCipherParams(e),s=await ya.getPrefixRandom(e),a=await ya.mode.cfb.encrypt(e,t,s,new Uint8Array(i),r),o=await ya.mode.cfb.encrypt(e,t,n,a.subarray(2),r);this.encrypted=_.concat([a,o])}}class hc extends ac{static get tag(){return H.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new hc,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class uc{static get tag(){return H.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=jn(e.subarray(t,e.length));t+=r.offset,this.attributes.push(_.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(qn(this.attributes[t].length)),e.push(_.stringToUint8Array(this.attributes[t]));return _.concatUint8Array(e)}equals(e){return!!(e&&e instanceof uc)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class lc extends ac{static get tag(){return H.packet.secretKey}constructor(e=new Date,t=O){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=O){let r=await this.readPublicKey(e,t);const n=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=ba(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+ya.getCipherParams(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+ya.getAEADMode(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(n),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!_.equalsUint8Array(_.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=ya.parsePrivateKeyParams(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof $n)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return _.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=ya.serializeParams(this.algorithm,this.privateParams)),5===this.version&&t.push(_.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(_.writeChecksum(this.keyMaterial))),_.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=O){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=ba(H.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=H.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=O){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=Ea(t),this.s2k.generateSalt();const r=ya.serializeParams(this.algorithm,this.privateParams);this.symmetric=H.symmetric.aes256;const{blockSize:n}=ya.getCipherParams(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=t.preferredAEADAlgorithm;const i=ya.getAEADMode(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const s=Zn(this.constructor.tag),a=await yc(this.version,this.s2k,e,this.symmetric,this.aead,s,this.isLegacyAEAD),o=await i(this.symmetric,a);this.iv=this.isLegacyAEAD?ya.random.getRandomBytes(n):ya.random.getRandomBytes(i.ivLength);const c=this.isLegacyAEAD?new Uint8Array:_.concatUint8Array([s,this.writePublicKey()]);this.keyMaterial=await o.encrypt(r,this.iv.subarray(0,i.ivLength),c)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const i=await yc(this.version,this.s2k,e,this.symmetric);this.iv=ya.random.getRandomBytes(n),this.keyMaterial=await ya.mode.cfb.encrypt(this.symmetric,i,_.concatUint8Array([r,await ya.hash.sha1(r,t)]),this.iv,t)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=Zn(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let n;if(t=await yc(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const e=ya.getAEADMode(this.aead),i=await e(this.symmetric,t);try{const t=this.isLegacyAEAD?new Uint8Array:_.concatUint8Array([r,this.writePublicKey()]);n=await i.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await ya.mode.cfb.decrypt(this.symmetric,t,this.keyMaterial,this.iv);n=e.subarray(0,-20);const r=await ya.hash.sha1(n);if(!_.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=ya.parsePrivateKeyParams(this.algorithm,n,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await ya.validateParams(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===H.publicKey.ecdh&&t===H.curve.curve25519Legacy||this.algorithm===H.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);const{privateParams:n,publicParams:i}=await ya.generateParams(this.algorithm,e,t,r);this.privateParams=n,this.publicParams=i,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function yc(e,t,r,n,i,s,a){if("argon2"===t.type&&!i)throw Error("Using Argon2 S2K without AEAD is not allowed");if("simple"===t.type&&6===e)throw Error("Using Simple S2K with version 6 keys is not allowed");const{keySize:o}=ya.getCipherParams(n),c=await t.produceKey(r,o);if(!i||5===e||a)return c;const h=_.concatUint8Array([s,new Uint8Array([e,n,i])]);return is(H.hash.sha256,c,new Uint8Array,h,o)}class fc{static get tag(){return H.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(_.isString(e)||e.name&&!_.isString(e.name)||e.email&&!_.isEmailAddress(e.email)||e.comment&&!_.isString(e.comment))throw Error("Invalid user ID format");const t=new fc;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=O){const r=_.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const n=/^(?<name>[^()]+\s+)?(?<comment>\([^()]+\)\s+)?(?<email><\S+@\S+>)$/.exec(r);if(null!==n){const{name:e,comment:t,email:r}=n.groups;this.comment=t?.replace(/^\(|\)|\s$/g,"").trim()||"",this.name=e?.trim()||"",this.email=r.substring(1,r.length-1)}else/^[^\s@]+@[^\s@]+$/.test(r)&&(this.email=r);this.userID=r}write(){return _.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class gc extends lc{static get tag(){return H.packet.secretSubkey}constructor(e=new Date,t=O){super(e,t)}}const pc=/*#__PURE__*/_.constructAllowedPackets([No]);class dc{constructor(e){this.packets=e||new Go}write(){return this.packets.write()}armor(e=O){const t=this.packets.some((e=>e.constructor.tag===No.tag&&6!==e.version));return se(H.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function Ac(e,t){const r=new gc(e.date,t);return r.packets=null,r.algorithm=H.write(H.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function wc(e,t){const r=new lc(e.date,t);return r.packets=null,r.algorithm=H.write(H.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function mc(e,t,r,n,i=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,n,i,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw _.wrapError(`Could not find valid ${H.read(H.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function bc(e,t,r=new Date){const n=_.normalizeDate(r);if(null!==n){const r=Ic(e,t);return!(e.created<=n&&n<r)}return!1}async function Ec(e,t,r,n){const i={};i.key=t,i.bind=e;const s={signatureType:H.signature.subkeyBinding};r.sign?(s.keyFlags=[H.keyFlags.signData],s.embeddedSignature=await kc(i,null,e,{signatureType:H.signature.keyBinding},r.date,void 0,void 0,void 0,n)):s.keyFlags=r.forwarding?[H.keyFlags.forwardedCommunication]:[H.keyFlags.encryptCommunication|H.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await kc(i,null,t,s,r.date,void 0,void 0,void 0,n)}async function kc(e,t,r,n,i,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const h=new No;return Object.assign(h,n),h.publicKeyAlgorithm=r.algorithm,h.hashAlgorithm=await async function(e,t,r=new Date,n={},i){let s=i.preferredHashAlgorithm,a=s;if(e){const t=await e.getPrimarySelfSignature(r,n,i);t.preferredHashAlgorithms&&([a]=t.preferredHashAlgorithms,s=ya.hash.getHashByteLength(s)<=ya.hash.getHashByteLength(a)?a:s)}switch(t.algorithm){case H.publicKey.ecdsa:case H.publicKey.eddsaLegacy:case H.publicKey.ed25519:case H.publicKey.ed448:a=ya.getPreferredCurveHashAlgo(t.algorithm,t.publicParams.oid)}return ya.hash.getHashByteLength(s)<=ya.hash.getHashByteLength(a)?a:s}(t,r,i,s,c),h.rawNotations=[...a],await h.sign(r,e,i,o,c),h}async function vc(e,t,r,n=new Date,i){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(n)||i&&!await i(e)||t[r].some((function(t){return _.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function Bc(e,t,r,n,i,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(n.map((async function(e){try{if(!i||e.issuerKeyID.equals(i.issuerKeyID)){const n=![H.reasonForRevocation.keyRetired,H.reasonForRevocation.keySuperseded,H.reasonForRevocation.userIDInvalid].includes(e.reasonForRevocationFlag);await e.verify(s,t,r,n?null:a,!1,o),c.push(e.issuerKeyID)}}catch(e){}}))),i?(i.revoked=!!c.some((e=>e.equals(i.issuerKeyID)))||(i.revoked||!1),i.revoked):c.length>0}function Ic(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function Sc(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=_.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"ecc":try{e.curve=H.write(H.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==H.curve.ed25519Legacy&&e.curve!==H.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?H.curve.ed25519Legacy:H.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===H.curve.ed25519Legacy?H.publicKey.eddsaLegacy:H.publicKey.ecdsa:e.algorithm=H.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?H.publicKey.ed25519:H.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?H.publicKey.ed448:H.publicKey.x448;break;case"rsa":e.algorithm=H.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=H.publicKey.hmac;try{e.symmetric=H.write(H.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=H.publicKey.aead;try{e.symmetric=H.write(H.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function Kc(e,t,r){switch(e.algorithm){case H.publicKey.rsaEncryptSign:case H.publicKey.rsaSign:case H.publicKey.dsa:case H.publicKey.ecdsa:case H.publicKey.eddsaLegacy:case H.publicKey.ed25519:case H.publicKey.ed448:case H.publicKey.hmac:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&H.keyFlags.signData);default:return!1}}function Cc(e,t,r){switch(e.algorithm){case H.publicKey.rsaEncryptSign:case H.publicKey.rsaEncrypt:case H.publicKey.elgamal:case H.publicKey.ecdh:case H.publicKey.x25519:case H.publicKey.x448:case H.publicKey.aead:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&H.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&H.keyFlags.encryptStorage);default:return!1}}function Pc(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case H.publicKey.rsaEncryptSign:case H.publicKey.rsaEncrypt:case H.publicKey.elgamal:case H.publicKey.ecdh:case H.publicKey.x25519:case H.publicKey.x448:return!(!(!t.keyFlags||!!(t.keyFlags[0]&H.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&H.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&H.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&H.keyFlags.forwardedCommunication));default:return!1}}function Uc(e,t){const r=H.write(H.publicKey,e.algorithm),n=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(n.algorithm+" keys are considered too weak.");switch(r){case H.publicKey.rsaEncryptSign:case H.publicKey.rsaSign:case H.publicKey.rsaEncrypt:if(n.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case H.publicKey.ecdsa:case H.publicKey.eddsaLegacy:case H.publicKey.ecdh:if(t.rejectCurves.has(n.curve))throw Error(`Support for ${n.algorithm} keys using curve ${n.curve} is disabled.`)}}class Dc{constructor(e,t){this.userID=e.constructor.tag===H.packet.userID?e:null,this.userAttribute=e.constructor.tag===H.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Go;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new Dc(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n},s=new Dc(i.userID||i.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(n))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return kc(i,e,s.keyPacket,{signatureType:H.signature.certGeneric,keyFlags:[H.keyFlags.certifyKeys|H.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,n=O){const i=this.mainKey.keyPacket;return Bc(i,H.signature.certRevocation,{key:i,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,n)}async verifyCertificate(e,t,r=new Date,n){const i=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,n);if(e.revoked||await i.isRevoked(e,s.keyPacket,r,n))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,H.signature.certGeneric,a,r,void 0,n)}catch(e){throw _.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const n=this,i=this.selfCertifications.concat(this.otherCertifications);return Promise.all(i.map((async i=>({keyID:i.issuerKeyID,valid:await n.verifyCertificate(i,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(n,H.signature.certGeneric,i,e,void 0,t)}catch(e){throw _.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};await vc(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(n,H.signature.certGeneric,i,t,!1,r),!0}catch(e){return!1}})),await vc(e,this,"otherCertifications",t),await vc(e,this,"revocationSignatures",t,(function(e){return Bc(n,H.signature.certRevocation,i,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=H.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=O){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new Dc(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await kc(s,null,e,{signatureType:H.signature.certRevocation,reasonForRevocationFlag:H.write(H.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}}class xc{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new Go;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new xc(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,n=O){const i=this.mainKey.keyPacket;return Bc(i,H.signature.subkeyRevocation,{key:i,bind:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verify(e=new Date,t=O){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket},i=await mc(this.bindingSignatures,r,H.signature.subkeyBinding,n,e,t);if(i.revoked||await this.isRevoked(i,null,e,t))throw Error("Subkey is revoked");if(bc(this.keyPacket,i,e))throw Error("Subkey is expired");return i}async getExpirationTime(e=new Date,t=O){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket};let i;try{i=await mc(this.bindingSignatures,r,H.signature.subkeyBinding,n,e,t)}catch(e){return null}const s=Ic(this.keyPacket,i),a=i.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=O){const n=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===H.packet.publicSubkey&&e.keyPacket.constructor.tag===H.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const i=this,s={key:n,bind:i.keyPacket};await vc(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<i.bindingSignatures.length;t++)if(i.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>i.bindingSignatures[t].created&&(i.bindingSignatures[t]=e),!1;try{return await e.verify(n,H.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await vc(e,this,"revocationSignatures",t,(function(e){return Bc(n,H.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=H.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=O){const s={key:e,bind:this.keyPacket},a=new xc(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await kc(s,null,e,{signatureType:H.signature.subkeyRevocation,reasonForRevocationFlag:H.write(H.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{xc.prototype[e]=function(){return this.keyPacket[e]()}}));const Qc=/*#__PURE__*/_.constructAllowedPackets([No]),Rc=new Set([H.packet.publicKey,H.packet.privateKey]),Mc=new Set([H.packet.publicKey,H.packet.privateKey,H.packet.publicSubkey,H.packet.privateSubkey]);class Lc{packetListToStructure(e,t=new Set){let r,n,i,s;for(const a of e){if(a instanceof ei){Mc.has(a.tag)&&!s&&(s=Rc.has(a.tag)?Rc:Mc);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case H.packet.publicKey:case H.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,n=this.getKeyID(),!n)throw Error("Missing Key ID");break;case H.packet.userID:case H.packet.userAttribute:r=new Dc(a,this),this.users.push(r);break;case H.packet.publicSubkey:case H.packet.secretSubkey:r=null,i=new xc(a,this),this.subkeys.push(i);break;case H.packet.signature:switch(a.signatureType){case H.signature.certGeneric:case H.signature.certPersona:case H.signature.certCasual:case H.signature.certPositive:if(!r){_.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(n)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case H.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case H.signature.key:this.directSignatures.push(a);break;case H.signature.subkeyBinding:if(!i){_.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}i.bindingSignatures.push(a);break;case H.signature.keyRevocation:this.revocationSignatures.push(a);break;case H.signature.subkeyRevocation:if(!i){_.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}i.revocationSignatures.push(a)}}}}toPacketList(){const e=new Go;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},n=O){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{Uc(i,n)}catch(e){throw _.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await mc(r.bindingSignatures,i,H.signature.subkeyBinding,e,t,n);if(!Kc(r.keyPacket,s,n))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await mc([s.embeddedSignature],r.keyPacket,H.signature.keyBinding,e,t,n),Uc(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&Kc(i,s,n))return Uc(i,n),this}catch(e){a=e}throw _.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},n=O){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{Uc(i,n)}catch(e){throw _.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await mc(r.bindingSignatures,i,H.signature.subkeyBinding,e,t,n);if(Cc(r.keyPacket,s,n))return Uc(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&Cc(i,s,n))return Uc(i,n),this}catch(e){a=e}throw _.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,n=O){return Bc(this.keyPacket,H.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verifyPrimaryKey(e=new Date,t={},r=O){const n=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(bc(n,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==n.version){const t=await mc(this.directSignatures,n,H.signature.key,{key:n},e,r).catch((()=>{}));if(t&&bc(n,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=O){let r;try{const n=await this.getPrimarySelfSignature(null,e,t),i=Ic(this.keyPacket,n),s=n.getExpirationTime(),a=6!==this.keyPacket.version&&await mc(this.directSignatures,this.keyPacket,H.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=Ic(this.keyPacket,a);r=Math.min(i,s,e)}else r=i<s?i:s}catch(e){r=null}return _.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=O){const n=this.keyPacket;if(6===n.version)return mc(this.directSignatures,n,H.signature.key,{key:n},e,r);const{selfCertification:i}=await this.getPrimaryUser(e,t,r);return i}async getPrimaryUser(e=new Date,t={},r=O){const n=this.keyPacket,i=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:n},c=await mc(s.selfCertifications,n,H.signature.certGeneric,o,e,r);i.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!i.length)throw s||Error("Could not find primary user");await Promise.all(i.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=i.sort((function(e,t){const r=e.selfCertification,n=t.selfCertification;return n.revoked-r.revoked||r.isPrimaryUserID-n.isPrimaryUserID||r.created-n.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=O){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const n=this.clone();return await vc(e,n,"revocationSignatures",t,(i=>Bc(n.keyPacket,H.signature.keyRevocation,n,[i],null,e.keyPacket,t,r))),await vc(e,n,"directSignatures",t),await Promise.all(e.users.map((async e=>{const i=n.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(i.length>0)await Promise.all(i.map((n=>n.update(e,t,r))));else{const t=e.clone();t.mainKey=n,n.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const i=n.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(i.length>0)await Promise.all(i.map((n=>n.update(e,t,r))));else{const t=e.clone();t.mainKey=n,n.subkeys.push(t)}}))),n}async getRevocationCertificate(e=new Date,t=O){const r={key:this.keyPacket},n=await mc(this.revocationSignatures,this.keyPacket,H.signature.keyRevocation,r,e,t),i=new Go;i.push(n);const s=6!==this.keyPacket.version;return se(H.armor.publicKey,i.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=O){const n=await ie(e),i=(await Go.fromBinary(n.data,Qc,r)).findPacket(H.packet.signature);if(!i||i.signatureType!==H.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!i.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await i.verify(this.keyPacket,H.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw _.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(i),s}async signPrimaryUser(e,t,r,n=O){const{index:i,user:s}=await this.getPrimaryUser(t,r,n),a=await s.certify(e,t,n),o=this.clone();return o.users[i]=a,o}async signAllUsers(e,t=new Date,r=O){const n=this.clone();return n.users=await Promise.all(this.users.map((function(n){return n.certify(e,t,r)}))),n}async verifyPrimaryUser(e,t=new Date,r,n=O){const i=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,n);return e?await s.verifyAllCertifications(e,t,n):[{keyID:i.getKeyID(),valid:await s.verify(t,n).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=O){const n=this.keyPacket,i=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:n.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];i.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),i}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{Lc.prototype[e]=xc.prototype[e]}));class Tc extends Lc{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([H.packet.secretKey,H.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=O){const t=6!==this.keyPacket.version;return se(H.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class Fc extends Tc{constructor(e){if(super(),this.packetListToStructure(e,new Set([H.packet.publicKey,H.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new Go,t=this.toPacketList();let r=!1;for(const n of t)if(!r||n.constructor.tag!==H.packet.Signature)switch(r&&(r=!1),n.constructor.tag){case H.packet.secretKey:{if(n.algorithm===H.publicKey.aead||n.algorithm===H.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=ac.fromSecretKeyPacket(n);e.push(t);break}case H.packet.secretSubkey:{if(n.algorithm===H.publicKey.aead||n.algorithm===H.publicKey.hmac){r=!0;break}const t=hc.fromSecretSubkeyPacket(n);e.push(t);break}default:e.push(n)}return new Tc(e)}armor(e=O){const t=6!==this.keyPacket.version;return se(H.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},n=O){const i=this.keyPacket,s=[];let a=null;for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0)){if(this.subkeys[r].keyPacket.isDummy()){a=a||Error("Gnu-dummy key packets cannot be used for decryption");continue}try{const e={key:i,bind:this.subkeys[r].keyPacket},a=await mc(this.subkeys[r].bindingSignatures,i,H.signature.subkeyBinding,e,t,n);Pc(this.subkeys[r].keyPacket,a,n)&&s.push(this.subkeys[r])}catch(e){a=e}}const o=await this.getPrimarySelfSignature(t,r,n);if(e&&!i.getKeyID().equals(e,!0)||!Pc(i,o,n)||(i.isDummy()?a=a||Error("Gnu-dummy key packets cannot be used for decryption"):s.push(this)),0===s.length)throw a||Error("No decryption key packets found");return s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=O){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=H.reasonForRevocation.noReason,string:t=""}={},r=new Date,n=O){if(!this.isPrivate())throw Error("Need private key for revoking");const i={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await kc(i,null,this.keyPacket,{signatureType:H.signature.keyRevocation,reasonForRevocationFlag:H.write(H.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,n)),s}async addSubkey(e={}){const t={...O,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const n=r.getAlgorithmInfo();n.type=function(e){switch(H.write(H.publicKey,e)){case H.publicKey.rsaEncrypt:case H.publicKey.rsaEncryptSign:case H.publicKey.rsaSign:case H.publicKey.dsa:return"rsa";case H.publicKey.ecdsa:case H.publicKey.eddsaLegacy:return"ecc";case H.publicKey.ed25519:return"curve25519";case H.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(n.algorithm),n.rsaBits=n.bits||4096,n.curve=n.curve||"curve25519Legacy",e=Sc(e,n);const i=await Ac(e,{...t,v6Keys:6===this.keyPacket.version});Uc(i,t);const s=await Ec(i,r,e,t),a=this.toPacketList();return a.push(i,s),new Fc(a)}}const Nc=/*#__PURE__*/_.constructAllowedPackets([ac,hc,lc,gc,fc,uc,No]);function Hc(e){for(const t of e)switch(t.constructor.tag){case H.packet.secretKey:return new Fc(e);case H.packet.publicKey:return new Tc(e)}throw Error("No key packet found")}async function Oc(e,t,r,n){r.passphrase&&await e.encrypt(r.passphrase,n),await Promise.all(t.map((async function(e,t){const i=r.subkeys[t].passphrase;i&&await e.encrypt(i,n)})));const i=new Go;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[H.keyFlags.certifyKeys|H.keyFlags.signData];const i=s([H.symmetric.aes256,H.symmetric.aes128],n.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=i,n.aeadProtect){const e=s([H.aead.gcm,H.aead.eax,H.aead.ocb],n.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>i.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([H.hash.sha256,H.hash.sha512,...6===e.version?[H.hash.sha3_256,H.hash.sha3_512]:[]],n.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([H.compression.uncompressed,H.compression.zlib,H.compression.zip],n.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=H.features.modificationDetection,n.aeadProtect&&(t.features[0]|=H.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(i.push(e),6===e.version){const t={key:e},s=a();s.signatureType=H.signature.key;const o=await kc(t,null,e,s,r.date,void 0,void 0,void 0,n);i.push(o)}await Promise.all(r.userIDs.map((async function(t,i){const s=fc.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=H.signature.certPositive,0===i&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await kc(o,null,e,c,r.date,void 0,void 0,void 0,n)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{i.push(e),i.push(t)}))})),await Promise.all(t.map((async function(t,i){const s=r.subkeys[i];return{secretSubkeyPacket:t,subkeySignaturePacket:await Ec(t,e,s,n)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{i.push(e),i.push(t)}))}));const o={key:e};return i.push(await kc(o,null,e,{signatureType:H.signature.keyRevocation,reasonForRevocationFlag:H.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,n)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new Fc(i)}const zc=/*#__PURE__*/_.constructAllowedPackets([Ro,qo,rc,Xo,cc,nc,sc,zo,No]),_c=/*#__PURE__*/_.constructAllowedPackets([sc]),Gc=/*#__PURE__*/_.constructAllowedPackets([No]);class jc{constructor(e){this.packets=e||new Go}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(H.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(H.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(H.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,n=new Date,i=O){const s=this.packets.filterByTag(H.packet.symmetricallyEncryptedData,H.packet.symEncryptedIntegrityProtectedData,H.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,n,i);let h=null;const u=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!_.isUint8Array(t)||!a.cipherAlgorithm&&!_.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||H.write(H.symmetric,e);await a.decrypt(r,t,i)}catch(e){_.printDebugError(e),h=e}})));if(M(a.encrypted),a.encrypted=null,await u,!a.packets||!a.packets.length)throw h||Error("Decryption failed.");const l=new jc(a.packets);return a.packets=new Go,l}async decryptSessionKeys(e,t,r,n=new Date,i=O){let s,a=[];if(t){const e=this.packets.filterByTag(H.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let n;n=r?await Go.fromBinary(e.write(),_c,i):e,await Promise.all(n.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){_.printDebugError(e),e instanceof fa&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(H.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o;try{o=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,i)).map((e=>e.keyPacket))}catch(e){return void(s=e)}let c=[H.symmetric.aes256,H.symmetric.aes128,H.symmetric.tripledes,H.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(n,void 0,i);t.preferredSymmetricAlgorithms&&(c=c.concat(t.preferredSymmetricAlgorithms))}catch(e){}await Promise.all(o.map((async function(e){if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(i.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===H.publicKey.rsaEncrypt||t.publicKeyAlgorithm===H.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===H.publicKey.rsaSign||t.publicKeyAlgorithm===H.publicKey.elgamal)){const n=t.write();await Promise.all((r?[r]:Array.from(i.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new nc;r.read(n);const i={sessionKeyAlgorithm:t,sessionKey:ya.generateSessionKey(t)};try{await r.decrypt(e,i),a.push(r)}catch(e){_.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const n=r||t.sessionKeyAlgorithm;if(n&&!c.includes(H.write(H.symmetric,n)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){_.printDebugError(e),s=e}})))}))),M(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+_.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&H.read(H.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(H.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(H.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(H.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],n=O){const{symmetricAlgo:i,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],n=O){const i=await Promise.all(e.map(((e,i)=>e.getPrimarySelfSignature(t,r[i],n))));if(e.length?!n.ignoreSEIPDv2FeatureFlag&&i.every((e=>e.features&&e.features[0]&H.features.seipdv2)):n.aeadProtect){const e={symmetricAlgo:H.symmetric.aes128,aeadAlgo:H.aead.ocb},t=[{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:n.preferredAEADAlgorithm},{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:H.aead.ocb},{symmetricAlgo:H.symmetric.aes128,aeadAlgo:n.preferredAEADAlgorithm}];for(const e of t)if(i.every((t=>t.preferredCipherSuites&&t.preferredCipherSuites.some((t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo)))))return e;return e}const s=H.symmetric.aes128,a=n.preferredSymmetricAlgorithm;return{symmetricAlgo:i.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,n),a=H.read(H.symmetric,i),o=s?H.read(H.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===H.publicKey.x25519||e.keyPacket.algorithm===H.publicKey.x448)&&!o&&!_.isAES(i))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:ya.generateSessionKey(i),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,n=!1,i=[],s=new Date,a=[],o=O){if(r){if(!_.isUint8Array(r.data)||!_.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await jc.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await jc.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:h,aeadAlgorithm:u}=r,l=await jc.encryptSessionKey(c,h,u,e,t,n,i,s,a,o),y=Xo.fromObject({version:u?2:1,aeadAlgorithm:u?H.write(H.aead,u):null});y.packets=this.packets;const f=H.write(H.symmetric,h);return await y.encrypt(f,c,o),l.packets.push(y),y.packets=new Go,l}static async encryptSessionKey(e,t,r,n,i,s=!1,a=[],o=new Date,c=[],h=O){const u=new Go,l=H.write(H.symmetric,t),y=r&&H.write(H.aead,r);if(n){const t=await Promise.all(n.map((async function(t,r){const n=await t.getEncryptionKey(a[r],o,c,h),i=nc.fromObject({version:y?6:3,encryptionKeyPacket:n.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await i.encrypt(n.keyPacket),delete i.sessionKey,i})));u.push(...t)}if(i){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,n=async function(e,s,a,o){const c=new sc(h);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,h),h.passwordCollisionCheck){if(1!==(await Promise.all(i.map((e=>t(c,e))))).reduce(r))return n(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(i.map((t=>n(e,l,y,t))));u.push(...s)}return new jc(u)}async sign(e=[],t=null,r=[],n=new Date,i=[],s=[],a=O){const o=new Go,c=this.packets.findPacket(H.packet.literalData);if(!c)throw Error("No literal data packet to sign.");const h=await qc(c,e,t,r,n,i,s,!1,a),u=h.map(((e,t)=>zo.fromSignaturePacket(e,0===t))).reverse();return o.push(...u),o.push(c),o.push(...h),new jc(o)}compress(e,t=O){if(e===H.compression.uncompressed)return this;const r=new qo(t);r.algorithm=e,r.packets=this.packets;const n=new Go;return n.push(r),new jc(n)}async signDetached(e=[],t=null,r=[],n=new Date,i=[],s=[],a=O){const o=this.packets.findPacket(H.packet.literalData);if(!o)throw Error("No literal data packet to sign.");return new dc(await qc(o,e,t,r,n,i,s,!0,a))}async verify(e,t=new Date,r=O){const n=this.unwrapCompressed(),i=n.packets.filterByTag(H.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");f(n.packets.stream)&&n.packets.push(...await R(n.packets.stream,(e=>e||[])));const s=n.packets.filterByTag(H.packet.onePassSignature).reverse(),a=n.packets.filterByTag(H.packet.signature);return s.length&&!a.length&&_.isStream(n.packets.stream)&&!f(n.packets.stream)?(await Promise.all(s.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=L((async()=>(await e.correspondingSig).signatureData)),e.hashed=R(await e.hash(e.signatureType,i[0],void 0,!1)),e.hashed.catch((()=>{}))}))),n.packets.stream=C(n.packets.stream,(async(e,t)=>{const r=T(e),n=F(t);try{for(let e=0;e<s.length;e++){const{value:t}=await r.read();s[e].correspondingSigResolve(t)}await r.readToEnd(),await n.ready,await n.close()}catch(e){s.forEach((t=>{t.correspondingSigReject(e)})),await n.abort(e)}})),Vc(s,i,e,t,!1,r)):Vc(a,i,e,t,!1,r)}verifyDetached(e,t,r=new Date,n=O){const i=this.unwrapCompressed().packets.filterByTag(H.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");return Vc(e.packets.filterByTag(H.packet.signature),i,t,r,!0,n)}unwrapCompressed(){const e=this.packets.filterByTag(H.packet.compressedData);return e.length?new jc(e[0].packets):this}async appendSignature(e,t=O){await this.packets.read(_.isUint8Array(e)?e:(await ie(e)).data,Gc,t)}write(){return this.packets.write()}armor(e=O){const t=this.packets[this.packets.length-1],r=t.constructor.tag===Xo.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===No.tag&&6!==e.version));return se(H.armor.message,this.write(),null,null,null,r,e)}}async function qc(e,t,r=null,n=[],i=new Date,s=[],a=[],o=!1,c=O){const h=new Go,u=null===e.text?H.signature.binary:H.signature.text;if(await Promise.all(t.map((async(t,r)=>{const h=s[r];if(!t.isPrivate())throw Error("Need private key for signing");const l=await t.getSigningKey(n[r],i,h,c);return kc(e,t,l.keyPacket,{signatureType:u},i,h,a,o,c)}))).then((e=>{h.push(...e)})),r){const e=r.packets.filterByTag(H.packet.signature);h.push(...e)}return h}async function Vc(e,t,r,n=new Date,i=!1,s=O){return Promise.all(e.filter((function(e){return["text","binary"].includes(H.read(H.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,n=new Date,i=!1,s=O){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof zo?e.correspondingSig:e,h={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],n,i,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),n,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new Go;return e&&t.push(e),new dc(t)})()};return h.signature.catch((()=>{})),h.verified.catch((()=>{})),h}(e,t,r,n,i,s)})))}const Zc=/*#__PURE__*/_.constructAllowedPackets([No]);class Wc{constructor(e,t){if(this.text=_.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof dc))throw Error("Invalid signature input");this.signature=t||new dc(new Go)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=null,r=[],n=new Date,i=[],s=[],a=O){const o=new Ro;o.setText(this.text);const c=new dc(await qc(o,e,t,r,n,i,s,!0,a));return new Wc(this.text,c)}verify(e,t=new Date,r=O){const n=this.signature.packets.filterByTag(H.packet.signature),i=new Ro;return i.setText(this.text),Vc(n,[i],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=O){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>H.read(H.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return se(H.armor.signed,r,void 0,void 0,void 0,t,e)}}function Yc(e){if(!(e instanceof jc))throw Error("Parameter [message] needs to be of type Message")}function Jc(e){if(!(e instanceof Wc||e instanceof jc))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function $c(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const Xc=Object.keys(O).length;function eh(e){const t=Object.keys(e);if(t.length!==Xc)for(const e of t)if(void 0===O[e])throw Error("Unknown config property: "+e)}function th(e){return e&&!_.isArray(e)&&(e=[e]),e}async function rh(e){return"array"===_.isStream(e)?R(e):e}function nh(e,t){e.data=C(t.packets.stream,(async(t,r)=>{await B(e.data,r,{preventClose:!0});const n=F(r);try{await R(t,(e=>e)),await n.close()}catch(e){await n.abort(e)}}))}function ih(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}function sh(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, not "+e)}function ah(e,...t){if(!((r=e)instanceof Uint8Array||null!=r&&"object"==typeof r&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error(`Uint8Array expected of length ${t}, not of length=${e.length}`)}function oh(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function ch(e,t){ah(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}const hh=a&&"object"==typeof a&&"webcrypto"in a?a.webcrypto:a&&"object"==typeof a&&"randomBytes"in a?a:void 0,uh=e=>new DataView(e.buffer,e.byteOffset,e.byteLength),lh=(e,t)=>e<<32-t|e>>>t,yh=(e,t)=>e<<t|e>>>32-t>>>0,fh=68===new Uint8Array(new Uint32Array([287454020]).buffer)[0];
|
|
5
|
+
/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function gh(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function ph(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}function dh(e){return"string"==typeof e&&(e=ph(e)),ah(e),e}function Ah(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];ah(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}class wh{clone(){return this._cloneInto()}}function mh(e){const t=t=>e().update(dh(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}function bh(e=32){if(hh&&"function"==typeof hh.getRandomValues)return hh.getRandomValues(new Uint8Array(e));if(hh&&"function"==typeof hh.randomBytes)return hh.randomBytes(e);throw Error("crypto.getRandomValues must be defined")}const Eh=(e,t,r)=>e&t^~e&r,kh=(e,t,r)=>e&t^e&r^t&r;class vh extends wh{constructor(e,t,r,n){super(),this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=n,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=uh(this.buffer)}update(e){oh(this);const{view:t,buffer:r,blockLen:n}=this,i=(e=dh(e)).length;for(let s=0;s<i;){const a=Math.min(n-this.pos,i-s);if(a!==n)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===n&&(this.process(t,0),this.pos=0);else{const t=uh(e);for(;n<=i-s;s+=n)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){oh(this),ch(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:n,isLE:i}=this;let{pos:s}=this;t[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>n-s&&(this.process(r,0),s=0);for(let e=s;e<n;e++)t[e]=0;!function(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s),c=n?4:0,h=n?0:4;e.setUint32(t+c,a,n),e.setUint32(t+h,o,n)}(r,n-8,BigInt(8*this.length),i),this.process(r,0);const a=uh(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,h[e],i)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:n,finished:i,destroyed:s,pos:a}=this;return e.length=n,e.pos=a,e.finished=i,e.destroyed=s,n%t&&e.buffer.set(r),e}}const Bh=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Ih=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Sh=/* @__PURE__ */new Uint32Array(64);class Kh extends vh{constructor(){super(64,32,8,!1),this.A=0|Ih[0],this.B=0|Ih[1],this.C=0|Ih[2],this.D=0|Ih[3],this.E=0|Ih[4],this.F=0|Ih[5],this.G=0|Ih[6],this.H=0|Ih[7]}get(){const{A:e,B:t,C:r,D:n,E:i,F:s,G:a,H:o}=this;return[e,t,r,n,i,s,a,o]}set(e,t,r,n,i,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)Sh[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=Sh[e-15],r=Sh[e-2],n=lh(t,7)^lh(t,18)^t>>>3,i=lh(r,17)^lh(r,19)^r>>>10;Sh[e]=i+Sh[e-7]+n+Sh[e-16]|0}let{A:r,B:n,C:i,D:s,E:a,F:o,G:c,H:h}=this;for(let e=0;e<64;e++){const t=h+(lh(a,6)^lh(a,11)^lh(a,25))+Eh(a,o,c)+Bh[e]+Sh[e]|0,u=(lh(r,2)^lh(r,13)^lh(r,22))+kh(r,n,i)|0;h=c,c=o,o=a,a=s+t|0,s=i,i=n,n=r,r=t+u|0}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,n,i,s,a,o,c,h)}roundClean(){Sh.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class Ch extends Kh{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Ph=/* @__PURE__ */mh((()=>new Kh)),Uh=/* @__PURE__ */mh((()=>new Ch));class Dh extends wh{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,function(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.wrapConstructor");sh(e.outputLen),sh(e.blockLen)}(e);const r=dh(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const n=this.blockLen,i=new Uint8Array(n);i.set(r.length>n?e.create().update(r).digest():r);for(let e=0;e<i.length;e++)i[e]^=54;this.iHash.update(i),this.oHash=e.create();for(let e=0;e<i.length;e++)i[e]^=106;this.oHash.update(i),i.fill(0)}update(e){return oh(this),this.iHash.update(e),this}digestInto(e){oh(this),ah(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:n,destroyed:i,blockLen:s,outputLen:a}=this;return e.finished=n,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const xh=(e,t,r)=>new Dh(e,t).update(r).digest();xh.create=(e,t)=>new Dh(e,t)
|
|
6
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */;const Qh=/* @__PURE__ */BigInt(0),Rh=/* @__PURE__ */BigInt(1),Mh=/* @__PURE__ */BigInt(2);function Lh(e){return e instanceof Uint8Array||null!=e&&"object"==typeof e&&"Uint8Array"===e.constructor.name}function Th(e){if(!Lh(e))throw Error("Uint8Array expected")}function Fh(e,t){if("boolean"!=typeof t)throw Error(`${e} must be valid boolean, got "${t}".`)}const Nh=/* @__PURE__ */Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function Hh(e){Th(e);let t="";for(let r=0;r<e.length;r++)t+=Nh[e[r]];return t}function Oh(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function zh(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return BigInt(""===e?"0":"0x"+e)}const _h={_0:48,_9:57,_A:65,_F:70,_a:97,_f:102};function Gh(e){return e>=_h._0&&e<=_h._9?e-_h._0:e>=_h._A&&e<=_h._F?e-(_h._A-10):e>=_h._a&&e<=_h._f?e-(_h._a-10):void 0}function jh(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);const t=e.length,r=t/2;if(t%2)throw Error("padded hex string expected, got unpadded hex of length "+t);const n=new Uint8Array(r);for(let t=0,i=0;t<r;t++,i+=2){const r=Gh(e.charCodeAt(i)),s=Gh(e.charCodeAt(i+1));if(void 0===r||void 0===s){const t=e[i]+e[i+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+i)}n[t]=16*r+s}return n}function qh(e){return zh(Hh(e))}function Vh(e){return Th(e),zh(Hh(Uint8Array.from(e).reverse()))}function Zh(e,t){return jh(e.toString(16).padStart(2*t,"0"))}function Wh(e,t){return Zh(e,t).reverse()}function Yh(e,t,r){let n;if("string"==typeof t)try{n=jh(t)}catch(r){throw Error(`${e} must be valid hex string, got "${t}". Cause: ${r}`)}else{if(!Lh(t))throw Error(e+" must be hex string or Uint8Array");n=Uint8Array.from(t)}const i=n.length;if("number"==typeof r&&i!==r)throw Error(`${e} expected ${r} bytes, got ${i}`);return n}function Jh(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];Th(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}const $h=e=>"bigint"==typeof e&&Qh<=e;function Xh(e,t,r){return $h(e)&&$h(t)&&$h(r)&&t<=e&&e<r}function eu(e,t,r,n){if(!Xh(t,r,n))throw Error(`expected valid ${e}: ${r} <= n < ${n}, got ${typeof t} ${t}`)}function tu(e){let t;for(t=0;e>Qh;e>>=Rh,t+=1);return t}const ru=e=>(Mh<<BigInt(e-1))-Rh,nu=e=>new Uint8Array(e),iu=e=>Uint8Array.from(e);function su(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");let n=nu(e),i=nu(e),s=0;const a=()=>{n.fill(1),i.fill(0),s=0},o=(...e)=>r(i,n,...e),c=(e=nu())=>{i=o(iu([0]),e),n=o(),0!==e.length&&(i=o(iu([1]),e),n=o())},h=()=>{if(s++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){n=o();const t=n.slice();r.push(t),e+=n.length}return Jh(...r)};return(e,t)=>{let r;for(a(),c(e);!(r=t(h()));)c();return a(),r}}const au={bigint:e=>"bigint"==typeof e,function:e=>"function"==typeof e,boolean:e=>"boolean"==typeof e,string:e=>"string"==typeof e,stringOrUint8Array:e=>"string"==typeof e||Lh(e),isSafeInteger:e=>Number.isSafeInteger(e),array:e=>Array.isArray(e),field:(e,t)=>t.Fp.isValid(e),hash:e=>"function"==typeof e&&Number.isSafeInteger(e.outputLen)};function ou(e,t,r={}){const n=(t,r,n)=>{const i=au[r];if("function"!=typeof i)throw Error(`Invalid validator "${r}", expected function`);const s=e[t];if(!(n&&void 0===s||i(s,e)))throw Error(`Invalid param ${t+""}=${s} (${typeof s}), expected ${r}`)};for(const[e,r]of Object.entries(t))n(e,r,!1);for(const[e,t]of Object.entries(r))n(e,t,!0);return e}function cu(e){const t=new WeakMap;return(r,...n)=>{const i=t.get(r);if(void 0!==i)return i;const s=e(r,...n);return t.set(r,s),s}}var hu=/*#__PURE__*/Object.freeze({__proto__:null,aInRange:eu,abool:Fh,abytes:Th,bitGet:function(e,t){return e>>BigInt(t)&Rh},bitLen:tu,bitMask:ru,bitSet:function(e,t,r){return e|(r?Rh:Qh)<<BigInt(t)},bytesToHex:Hh,bytesToNumberBE:qh,bytesToNumberLE:Vh,concatBytes:Jh,createHmacDrbg:su,ensureBytes:Yh,equalBytes:function(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r},hexToBytes:jh,hexToNumber:zh,inRange:Xh,isBytes:Lh,memoized:cu,notImplemented:()=>{throw Error("not implemented")},numberToBytesBE:Zh,numberToBytesLE:Wh,numberToHexUnpadded:Oh,numberToVarBytesBE:function(e){return jh(Oh(e))},utf8ToBytes:function(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))},validateObject:ou});
|
|
7
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const uu=BigInt(0),lu=BigInt(1),yu=BigInt(2),fu=BigInt(3),gu=BigInt(4),pu=BigInt(5),du=BigInt(8);function Au(e,t){const r=e%t;return r>=uu?r:t+r}function wu(e,t,r){if(r<=uu||t<uu)throw Error("Expected power/modulo > 0");if(r===lu)return uu;let n=lu;for(;t>uu;)t&lu&&(n=n*e%r),e=e*e%r,t>>=lu;return n}function mu(e,t,r){let n=e;for(;t-- >uu;)n*=n,n%=r;return n}function bu(e,t){if(e===uu||t<=uu)throw Error(`invert: expected positive integers, got n=${e} mod=${t}`);let r=Au(e,t),n=t,i=uu,s=lu;for(;r!==uu;){const e=n%r,t=i-s*(n/r);n=r,r=e,i=s,s=t}if(n!==lu)throw Error("invert: does not exist");return Au(i,t)}function Eu(e){if(e%gu===fu){const t=(e+lu)/gu;return function(e,r){const n=e.pow(r,t);if(!e.eql(e.sqr(n),r))throw Error("Cannot find square root");return n}}if(e%du===pu){const t=(e-pu)/du;return function(e,r){const n=e.mul(r,yu),i=e.pow(n,t),s=e.mul(r,i),a=e.mul(e.mul(s,yu),i),o=e.mul(s,e.sub(a,e.ONE));if(!e.eql(e.sqr(o),r))throw Error("Cannot find square root");return o}}return function(e){const t=(e-lu)/yu;let r,n,i;for(r=e-lu,n=0;r%yu===uu;r/=yu,n++);for(i=yu;i<e&&wu(i,t,e)!==e-lu;i++);if(1===n){const t=(e+lu)/gu;return function(e,r){const n=e.pow(r,t);if(!e.eql(e.sqr(n),r))throw Error("Cannot find square root");return n}}const s=(r+lu)/yu;return function(e,a){if(e.pow(a,t)===e.neg(e.ONE))throw Error("Cannot find square root");let o=n,c=e.pow(e.mul(e.ONE,i),r),h=e.pow(a,s),u=e.pow(a,r);for(;!e.eql(u,e.ONE);){if(e.eql(u,e.ZERO))return e.ZERO;let t=1;for(let r=e.sqr(u);t<o&&!e.eql(r,e.ONE);t++)r=e.sqr(r);const r=e.pow(c,lu<<BigInt(o-t-1));c=e.sqr(r),h=e.mul(h,r),u=e.mul(u,c),o=t}return h}}(e)}BigInt(9),BigInt(16);const ku=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function vu(e,t){const r=void 0!==t?t:e.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function Bu(e,t,r=!1,n={}){if(e<=uu)throw Error("Expected Field ORDER > 0, got "+e);const{nBitLength:i,nByteLength:s}=vu(e,t);if(s>2048)throw Error("Field lengths over 2048 bytes are not supported");const a=Eu(e),o=Object.freeze({ORDER:e,BITS:i,BYTES:s,MASK:ru(i),ZERO:uu,ONE:lu,create:t=>Au(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("Invalid field element: expected bigint, got "+typeof t);return uu<=t&&t<e},is0:e=>e===uu,isOdd:e=>(e&lu)===lu,neg:t=>Au(-t,e),eql:(e,t)=>e===t,sqr:t=>Au(t*t,e),add:(t,r)=>Au(t+r,e),sub:(t,r)=>Au(t-r,e),mul:(t,r)=>Au(t*r,e),pow:(e,t)=>function(e,t,r){if(r<uu)throw Error("Expected power > 0");if(r===uu)return e.ONE;if(r===lu)return t;let n=e.ONE,i=t;for(;r>uu;)r&lu&&(n=e.mul(n,i)),i=e.sqr(i),r>>=lu;return n}(o,e,t),div:(t,r)=>Au(t*bu(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>bu(t,e),sqrt:n.sqrt||(e=>a(o,e)),invertBatch:e=>function(e,t){const r=Array(t.length),n=t.reduce(((t,n,i)=>e.is0(n)?t:(r[i]=t,e.mul(t,n))),e.ONE),i=e.inv(n);return t.reduceRight(((t,n,i)=>e.is0(n)?t:(r[i]=e.mul(t,r[i]),e.mul(t,n))),i),r}(o,e),cmov:(e,t,r)=>r?t:e,toBytes:e=>r?Wh(e,s):Zh(e,s),fromBytes:e=>{if(e.length!==s)throw Error(`Fp.fromBytes: expected ${s}, got ${e.length}`);return r?Vh(e):qh(e)}});return Object.freeze(o)}function Iu(e){if("bigint"!=typeof e)throw Error("field order must be bigint");const t=e.toString(2).length;return Math.ceil(t/8)}function Su(e){const t=Iu(e);return t+Math.ceil(t/2)}
|
|
7
8
|
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
|
|
8
|
-
const
|
|
9
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const{bytesToNumberBE:Ah,hexToBytes:wh}=Zc,mh={Err:class extends Error{constructor(e=""){super(e)}},_parseInt(e){const{Err:t}=mh;if(e.length<2||2!==e[0])throw new t("Invalid signature integer tag");const r=e[1],i=e.subarray(2,r+2);if(!r||i.length!==r)throw new t("Invalid signature integer: wrong length");if(128&i[0])throw new t("Invalid signature integer: negative");if(0===i[0]&&!(128&i[1]))throw new t("Invalid signature integer: unnecessary leading zero");return{d:Ah(i),l:e.subarray(r+2)}},toSig(e){const{Err:t}=mh,r="string"==typeof e?wh(e):e;Pc(r);let i=r.length;if(i<2||48!=r[0])throw new t("Invalid signature tag");if(r[1]!==i-2)throw new t("Invalid signature: incorrect length");const{d:n,l:s}=mh._parseInt(r.subarray(2)),{d:a,l:o}=mh._parseInt(s);if(o.length)throw new t("Invalid signature: left bytes after parsing");return{r:n,s:a}},hexFromSig(e){const t=e=>8&Number.parseInt(e[0],16)?"00"+e:e,r=e=>{const t=e.toString(16);return 1&t.length?"0"+t:t},i=t(r(e.s)),n=t(r(e.r)),s=i.length/2,a=n.length/2,o=r(s),c=r(a);return`30${r(a+s+4)}02${c}${n}02${o}${i}`}},bh=BigInt(0),Eh=BigInt(1);BigInt(2);const kh=BigInt(3);function vh(e){const t=function(e){const t=dh(e);Yc(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:i,a:n}=t;if(r){if(!i.eql(n,i.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}(e),{Fp:r}=t,i=t.toBytes||((e,t,i)=>{const n=t.toAffine();return Oc(Uint8Array.from([4]),r.toBytes(n.x),r.toBytes(n.y))}),n=t.fromBytes||(e=>{const t=e.subarray(1);return{x:r.fromBytes(t.subarray(0,r.BYTES)),y:r.fromBytes(t.subarray(r.BYTES,2*r.BYTES))}});function s(e){const{a:i,b:n}=t,s=r.sqr(e),a=r.mul(s,e);return r.add(r.add(a,r.mul(e,i)),n)}if(!r.eql(r.sqr(t.Gy),s(t.Gx)))throw Error("bad generator point: equation left != right");function a(e){return"bigint"==typeof e&&bh<e&&e<t.n}function o(e){if(!a(e))throw Error("Expected valid bigint: 0 < bigint < curve.n")}function c(e){const{allowedPrivateKeyLengths:r,nByteLength:i,wrapPrivateKey:n,n:s}=t;if(r&&"bigint"!=typeof e){if(Kc(e)&&(e=Uc(e)),"string"!=typeof e||!r.includes(e.length))throw Error("Invalid key");e=e.padStart(2*i,"0")}let a;try{a="bigint"==typeof e?e:Lc(Hc("private key",e,i))}catch(t){throw Error(`private key must be ${i} bytes, hex or bigint, not ${typeof e}`)}return n&&(a=ih(a,s)),o(a),a}const h=new Map;function u(e){if(!(e instanceof l))throw Error("ProjectivePoint expected")}class l{constructor(e,t,i){if(this.px=e,this.py=t,this.pz=i,null==e||!r.isValid(e))throw Error("x required");if(null==t||!r.isValid(t))throw Error("y required");if(null==i||!r.isValid(i))throw Error("z required")}static fromAffine(e){const{x:t,y:i}=e||{};if(!e||!r.isValid(t)||!r.isValid(i))throw Error("invalid affine point");if(e instanceof l)throw Error("projective point not allowed");const n=e=>r.eql(e,r.ZERO);return n(t)&&n(i)?l.ZERO:new l(t,i,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}static fromHex(e){const t=l.fromAffine(n(Hc("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return l.BASE.multiply(c(e))}_setWindowSize(e){this._WINDOW_SIZE=e,h.delete(this)}assertValidity(){if(this.is0()){if(t.allowInfinityPoint&&!r.is0(this.py))return;throw Error("bad point: ZERO")}const{x:e,y:i}=this.toAffine();if(!r.isValid(e)||!r.isValid(i))throw Error("bad point: x or y not FE");const n=r.sqr(i),a=s(e);if(!r.eql(n,a))throw Error("bad point: equation left != right");if(!this.isTorsionFree())throw Error("bad point: not in prime-order subgroup")}hasEvenY(){const{y:e}=this.toAffine();if(r.isOdd)return!r.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){u(e);const{px:t,py:i,pz:n}=this,{px:s,py:a,pz:o}=e,c=r.eql(r.mul(t,o),r.mul(s,n)),h=r.eql(r.mul(i,o),r.mul(a,n));return c&&h}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:e,b:i}=t,n=r.mul(i,kh),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,y=r.mul(s,s),f=r.mul(a,a),g=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(e,u),h=r.mul(n,g),h=r.add(c,h),c=r.sub(f,h),h=r.add(f,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(n,u),g=r.mul(e,g),p=r.sub(y,g),p=r.mul(e,p),p=r.add(p,u),u=r.add(y,y),y=r.add(u,y),y=r.add(y,g),y=r.mul(y,p),h=r.add(h,y),g=r.mul(a,o),g=r.add(g,g),y=r.mul(g,p),c=r.sub(c,y),u=r.mul(g,f),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(e){u(e);const{px:i,py:n,pz:s}=this,{px:a,py:o,pz:c}=e;let h=r.ZERO,y=r.ZERO,f=r.ZERO;const g=t.a,p=r.mul(t.b,kh);let d=r.mul(i,a),A=r.mul(n,o),w=r.mul(s,c),m=r.add(i,n),b=r.add(a,o);m=r.mul(m,b),b=r.add(d,A),m=r.sub(m,b),b=r.add(i,s);let E=r.add(a,c);return b=r.mul(b,E),E=r.add(d,w),b=r.sub(b,E),E=r.add(n,s),h=r.add(o,c),E=r.mul(E,h),h=r.add(A,w),E=r.sub(E,h),f=r.mul(g,b),h=r.mul(p,w),f=r.add(h,f),h=r.sub(A,f),f=r.add(A,f),y=r.mul(h,f),A=r.add(d,d),A=r.add(A,d),w=r.mul(g,w),b=r.mul(p,b),A=r.add(A,w),w=r.sub(d,w),w=r.mul(g,w),b=r.add(b,w),d=r.mul(A,b),y=r.add(y,d),d=r.mul(E,b),h=r.mul(m,h),h=r.sub(h,d),d=r.mul(m,A),f=r.mul(E,f),f=r.add(f,d),new l(h,y,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(l.ZERO)}wNAF(e){return f.wNAFCached(this,h,e,(e=>{const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}))}multiplyUnsafe(e){const i=l.ZERO;if(e===bh)return i;if(o(e),e===Eh)return this;const{endo:n}=t;if(!n)return f.unsafeLadder(this,e);let{k1neg:s,k1:a,k2neg:c,k2:h}=n.splitScalar(e),u=i,y=i,g=this;for(;a>bh||h>bh;)a&Eh&&(u=u.add(g)),h&Eh&&(y=y.add(g)),g=g.double(),a>>=Eh,h>>=Eh;return s&&(u=u.negate()),c&&(y=y.negate()),y=new l(r.mul(y.px,n.beta),y.py,y.pz),u.add(y)}multiply(e){o(e);let i,n,s=e;const{endo:a}=t;if(a){const{k1neg:e,k1:t,k2neg:o,k2:c}=a.splitScalar(s);let{p:h,f:u}=this.wNAF(t),{p:y,f:g}=this.wNAF(c);h=f.constTimeNegate(e,h),y=f.constTimeNegate(o,y),y=new l(r.mul(y.px,a.beta),y.py,y.pz),i=h.add(y),n=u.add(g)}else{const{p:e,f:t}=this.wNAF(s);i=e,n=t}return l.normalizeZ([i,n])[0]}multiplyAndAddUnsafe(e,t,r){const i=l.BASE,n=(e,t)=>t!==bh&&t!==Eh&&e.equals(i)?e.multiply(t):e.multiplyUnsafe(t),s=n(this,t).add(n(e,r));return s.is0()?void 0:s}toAffine(e){const{px:t,py:i,pz:n}=this,s=this.is0();null==e&&(e=s?r.ONE:r.inv(n));const a=r.mul(t,e),o=r.mul(i,e),c=r.mul(n,e);if(s)return{x:r.ZERO,y:r.ZERO};if(!r.eql(c,r.ONE))throw Error("invZ was invalid");return{x:a,y:o}}isTorsionFree(){const{h:e,isTorsionFree:r}=t;if(e===Eh)return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:e,clearCofactor:r}=t;return e===Eh?this:r?r(l,this):this.multiplyUnsafe(t.h)}toRawBytes(e=!0){return this.assertValidity(),i(l,this,e)}toHex(e=!0){return Uc(this.toRawBytes(e))}}l.BASE=new l(t.Gx,t.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const y=t.nBitLength,f=ph(l,t.endo?Math.ceil(y/2):y);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:c,weierstrassEquation:s,isWithinCurveOrder:a}}function Bh(e){const t=function(e){const t=dh(e);return Yc(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}(e),{Fp:r,n:i}=t,n=r.BYTES+1,s=2*r.BYTES+1;function a(e){return ih(e,i)}function o(e){return ah(e,i)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=vh({...t,toBytes(e,t,i){const n=t.toAffine(),s=r.toBytes(n.x),a=Oc;return i?a(Uint8Array.from([t.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(n.y))},fromBytes(e){const t=e.length,i=e[0],a=e.subarray(1);if(t!==n||2!==i&&3!==i){if(t===s&&4===i){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${t} was invalid. Expected ${n} compressed bytes or ${s} uncompressed bytes`)}{const e=Lc(a);if(!(bh<(o=e)&&o<r.ORDER))throw Error("Point is not on curve");const t=u(e);let n;try{n=r.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("Point is not on curve"+t)}return!(1&~i)!==((n&Eh)===Eh)&&(n=r.neg(n)),{x:e,y:n}}var o}}),y=e=>Uc(Fc(e,t.nByteLength));function f(e){return e>i>>Eh}const g=(e,t,r)=>Lc(e.slice(t,r));class p{constructor(e,t,r){this.r=e,this.s=t,this.recovery=r,this.assertValidity()}static fromCompact(e){const r=t.nByteLength;return e=Hc("compactSignature",e,2*r),new p(g(e,0,r),g(e,r,2*r))}static fromDER(e){const{r:t,s:r}=mh.toSig(Hc("DER",e));return new p(t,r)}assertValidity(){if(!l(this.r))throw Error("r must be 0 < r < CURVE.n");if(!l(this.s))throw Error("s must be 0 < s < CURVE.n")}addRecoveryBit(e){return new p(this.r,this.s,e)}recoverPublicKey(e){const{r:i,s:n,recovery:s}=this,h=m(Hc("msgHash",e));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?i+t.n:i;if(u>=r.ORDER)throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",f=c.fromHex(l+y(u)),g=o(u),p=a(-h*g),d=a(n*g),A=c.BASE.multiplyAndAddUnsafe(f,p,d);if(!A)throw Error("point at infinify");return A.assertValidity(),A}hasHighS(){return f(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(-this.s),this.recovery):this}toDERRawBytes(){return Tc(this.toDERHex())}toDERHex(){return mh.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return Tc(this.toCompactHex())}toCompactHex(){return y(this.r)+y(this.s)}}const d={isValidPrivateKey(e){try{return h(e),!0}catch(e){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const e=yh(t.n);return function(e,t,r=!1){const i=e.length,n=lh(t),s=yh(t);if(i<16||i<s||i>1024)throw Error(`expected ${s}-1024 bytes of input, got ${i}`);const a=ih(r?Lc(e):_c(e),t-Wc)+Wc;return r?Nc(a,n):Fc(a,n)}(t.randomBytes(e),t.n)},precompute:(e=8,t=c.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)};function A(e){const t=Kc(e),r="string"==typeof e,i=(t||r)&&e.length;return t?i===n||i===s:r?i===2*n||i===2*s:e instanceof c}const w=t.bits2int||function(e){const r=Lc(e),i=8*e.length-t.nBitLength;return i>0?r>>BigInt(i):r},m=t.bits2int_modN||function(e){return a(w(e))},b=zc(t.nBitLength);function E(e){if("bigint"!=typeof e)throw Error("bigint expected");if(!(bh<=e&&e<b))throw Error("bigint expected < 2^"+t.nBitLength);return Fc(e,t.nByteLength)}function k(e,i,n=v){if(["recovered","canonical"].some((e=>e in n)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=t;let{lowS:y,prehash:g,extraEntropy:d}=n;null==y&&(y=!0),e=Hc("msgHash",e),g&&(e=Hc("prehashed msgHash",s(e)));const A=m(e),b=h(i),k=[E(b),E(A)];if(null!=d&&!1!==d){const e=!0===d?u(r.BYTES):d;k.push(Hc("extraEntropy",e))}const B=Oc(...k),I=A;return{seed:B,k2sig:function(e){const t=w(e);if(!l(t))return;const r=o(t),i=c.BASE.multiply(t).toAffine(),n=a(i.x);if(n===bh)return;const s=a(r*a(I+n*b));if(s===bh)return;let h=(i.x===n?0:2)|Number(i.y&Eh),u=s;return y&&f(s)&&(u=function(e){return f(e)?a(-e):e}(s),h^=1),new p(n,u,h)}}}const v={lowS:t.lowS,prehash:!1},B={lowS:t.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:t,getPublicKey:function(e,t=!0){return c.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(A(e))throw Error("first arg must be private key");if(!A(t))throw Error("second arg must be public key");return c.fromHex(t).multiply(h(e)).toRawBytes(r)},sign:function(e,r,i=v){const{seed:n,k2sig:s}=k(e,r,i),a=t;return jc(a.hash.outputLen,a.nByteLength,a.hmac)(n,s)},verify:function(e,r,i,n=B){const s=e;if(r=Hc("msgHash",r),i=Hc("publicKey",i),"strict"in n)throw Error("options.strict was renamed to lowS");const{lowS:h,prehash:u}=n;let l,y;try{if("string"==typeof s||Kc(s))try{l=p.fromDER(s)}catch(e){if(!(e instanceof mh.Err))throw e;l=p.fromCompact(s)}else{if("object"!=typeof s||"bigint"!=typeof s.r||"bigint"!=typeof s.s)throw Error("PARSE");{const{r:e,s:t}=s;l=new p(e,t)}}y=c.fromHex(i)}catch(e){if("PARSE"===e.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=t.hash(r));const{r:f,s:g}=l,d=m(r),A=o(g),w=a(d*A),b=a(f*A),E=c.BASE.multiplyAndAddUnsafe(y,w,b)?.toAffine();return!!E&&a(E.x)===f},ProjectivePoint:c,Signature:p,utils:d}}
|
|
10
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Ih(e){return{hash:e,hmac:(t,...r)=>Bc(e,t,mc(...r)),randomBytes:kc}}function Sh(e,t){const r=t=>Bh({...e,...Ih(t)});return Object.freeze({...r(t),create:r})}BigInt(4);const Ch=(e,t,r)=>e&t^~e&r,Kh=(e,t,r)=>e&t^e&r^t&r;class Ph extends bc{constructor(e,t,r,i){super(),this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=i,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(e),this.view=yc(this.buffer)}update(e){hc(this);const{view:t,buffer:r,blockLen:i}=this,n=(e=wc(e)).length;for(let s=0;s<n;){const a=Math.min(i-this.pos,n-s);if(a!==i)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===i&&(this.process(t,0),this.pos=0);else{const t=yc(e);for(;i<=n-s;s+=i)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){hc(this),uc(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:i,isLE:n}=this;let{pos:s}=this;t[s++]=128,this.buffer.subarray(s).fill(0),this.padOffset>i-s&&(this.process(r,0),s=0);for(let e=s;e<i;e++)t[e]=0;!function(e,t,r,i){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,i);const n=BigInt(32),s=BigInt(4294967295),a=Number(r>>n&s),o=Number(r&s),c=i?4:0,h=i?0:4;e.setUint32(t+c,a,i),e.setUint32(t+h,o,i)}(r,i-8,BigInt(8*this.length),n),this.process(r,0);const a=yc(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,h=this.get();if(c>h.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,h[e],n)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:i,finished:n,destroyed:s,pos:a}=this;return e.length=i,e.pos=a,e.finished=n,e.destroyed=s,i%t&&e.buffer.set(r),e}}const Dh=/* @__PURE__ */new Uint32Array([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),Uh=/* @__PURE__ */new Uint32Array([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),xh=/* @__PURE__ */new Uint32Array(64);class Qh extends Ph{constructor(){super(64,32,8,!1),this.A=0|Uh[0],this.B=0|Uh[1],this.C=0|Uh[2],this.D=0|Uh[3],this.E=0|Uh[4],this.F=0|Uh[5],this.G=0|Uh[6],this.H=0|Uh[7]}get(){const{A:e,B:t,C:r,D:i,E:n,F:s,G:a,H:o}=this;return[e,t,r,i,n,s,a,o]}set(e,t,r,i,n,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)xh[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=xh[e-15],r=xh[e-2],i=fc(t,7)^fc(t,18)^t>>>3,n=fc(r,17)^fc(r,19)^r>>>10;xh[e]=n+xh[e-7]+i+xh[e-16]|0}let{A:r,B:i,C:n,D:s,E:a,F:o,G:c,H:h}=this;for(let e=0;e<64;e++){const t=h+(fc(a,6)^fc(a,11)^fc(a,25))+Ch(a,o,c)+Dh[e]+xh[e]|0,u=(fc(r,2)^fc(r,13)^fc(r,22))+Kh(r,i,n)|0;h=c,c=o,o=a,a=s+t|0,s=n,n=i,i=r,r=t+u|0}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,h=h+this.H|0,this.set(r,i,n,s,a,o,c,h)}roundClean(){xh.fill(0)}destroy(){this.set(0,0,0,0,0,0,0,0),this.buffer.fill(0)}}class Rh extends Qh{constructor(){super(),this.A=-1056596264,this.B=914150663,this.C=812702999,this.D=-150054599,this.E=-4191439,this.F=1750603025,this.G=1694076839,this.H=-1090891868,this.outputLen=28}}const Mh=/* @__PURE__ */Ec((()=>new Qh)),Th=/* @__PURE__ */Ec((()=>new Rh)),Lh=uh(BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),_h=Sh({a:Lh.create(BigInt("-3")),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:Lh,n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:BigInt(1),lowS:!1},Mh),Fh=/* @__PURE__ */BigInt(2**32-1),Nh=/* @__PURE__ */BigInt(32);function Hh(e,t=!1){return t?{h:Number(e&Fh),l:Number(e>>Nh&Fh)}:{h:0|Number(e>>Nh&Fh),l:0|Number(e&Fh)}}function Oh(e,t=!1){let r=new Uint32Array(e.length),i=new Uint32Array(e.length);for(let n=0;n<e.length;n++){const{h:s,l:a}=Hh(e[n],t);[r[n],i[n]]=[s,a]}return[r,i]}const zh=(e,t,r)=>e<<r|t>>>32-r,Gh=(e,t,r)=>t<<r|e>>>32-r,qh=(e,t,r)=>t<<r-32|e>>>64-r,jh=(e,t,r)=>e<<r-32|t>>>64-r;const Vh={fromBig:Hh,split:Oh,toBig:(e,t)=>BigInt(e>>>0)<<Nh|BigInt(t>>>0),shrSH:(e,t,r)=>e>>>r,shrSL:(e,t,r)=>e<<32-r|t>>>r,rotrSH:(e,t,r)=>e>>>r|t<<32-r,rotrSL:(e,t,r)=>e<<32-r|t>>>r,rotrBH:(e,t,r)=>e<<64-r|t>>>r-32,rotrBL:(e,t,r)=>e>>>r-32|t<<64-r,rotr32H:(e,t)=>t,rotr32L:(e,t)=>e,rotlSH:zh,rotlSL:Gh,rotlBH:qh,rotlBL:jh,add:function(e,t,r,i){const n=(t>>>0)+(i>>>0);return{h:e+r+(n/2**32|0)|0,l:0|n}},add3L:(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),add3H:(e,t,r,i)=>t+r+i+(e/2**32|0)|0,add4L:(e,t,r,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0),add4H:(e,t,r,i,n)=>t+r+i+n+(e/2**32|0)|0,add5H:(e,t,r,i,n,s)=>t+r+i+n+s+(e/2**32|0)|0,add5L:(e,t,r,i,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(i>>>0)+(n>>>0)},[Yh,Zh]=/* @__PURE__ */(()=>Vh.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),Jh=/* @__PURE__ */new Uint32Array(80),Wh=/* @__PURE__ */new Uint32Array(80);class $h extends Ph{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:e,Al:t,Bh:r,Bl:i,Ch:n,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:y,Gl:f,Hh:g,Hl:p}=this;return[e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p]}set(e,t,r,i,n,s,a,o,c,h,u,l,y,f,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|i,this.Ch=0|n,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|y,this.Gl=0|f,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)Jh[r]=e.getUint32(t),Wh[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|Jh[e-15],r=0|Wh[e-15],i=Vh.rotrSH(t,r,1)^Vh.rotrSH(t,r,8)^Vh.shrSH(t,r,7),n=Vh.rotrSL(t,r,1)^Vh.rotrSL(t,r,8)^Vh.shrSL(t,r,7),s=0|Jh[e-2],a=0|Wh[e-2],o=Vh.rotrSH(s,a,19)^Vh.rotrBH(s,a,61)^Vh.shrSH(s,a,6),c=Vh.rotrSL(s,a,19)^Vh.rotrBL(s,a,61)^Vh.shrSL(s,a,6),h=Vh.add4L(n,c,Wh[e-7],Wh[e-16]),u=Vh.add4H(h,i,o,Jh[e-7],Jh[e-16]);Jh[e]=0|u,Wh[e]=0|h}let{Ah:r,Al:i,Bh:n,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:y,Fl:f,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=Vh.rotrSH(u,l,14)^Vh.rotrSH(u,l,18)^Vh.rotrBH(u,l,41),w=Vh.rotrSL(u,l,14)^Vh.rotrSL(u,l,18)^Vh.rotrBL(u,l,41),m=u&y^~u&g,b=l&f^~l&p,E=Vh.add5L(A,w,b,Zh[e],Wh[e]),k=Vh.add5H(E,d,t,m,Yh[e],Jh[e]),v=0|E,B=Vh.rotrSH(r,i,28)^Vh.rotrBH(r,i,34)^Vh.rotrBH(r,i,39),I=Vh.rotrSL(r,i,28)^Vh.rotrBL(r,i,34)^Vh.rotrBL(r,i,39),S=r&n^r&a^n&a,C=i&s^i&o^s&o;d=0|g,A=0|p,g=0|y,p=0|f,y=0|u,f=0|l,({h:u,l}=Vh.add(0|c,0|h,0|k,0|v)),c=0|a,h=0|o,a=0|n,o=0|s,n=0|r,s=0|i;const K=Vh.add3L(v,I,C);r=Vh.add3H(K,k,B,S),i=0|K}({h:r,l:i}=Vh.add(0|this.Ah,0|this.Al,0|r,0|i)),({h:n,l:s}=Vh.add(0|this.Bh,0|this.Bl,0|n,0|s)),({h:a,l:o}=Vh.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=Vh.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=Vh.add(0|this.Eh,0|this.El,0|u,0|l)),({h:y,l:f}=Vh.add(0|this.Fh,0|this.Fl,0|y,0|f)),({h:g,l:p}=Vh.add(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=Vh.add(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,i,n,s,a,o,c,h,u,l,y,f,g,p,d,A)}roundClean(){Jh.fill(0),Wh.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class Xh extends $h{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const eu=/* @__PURE__ */Ec((()=>new $h)),tu=/* @__PURE__ */Ec((()=>new Xh)),ru=uh(BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),iu=Sh({a:ru.create(BigInt("-3")),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:ru,n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:BigInt(1),lowS:!1},tu),nu=uh(BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),su={a:nu.create(BigInt("-3")),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:nu,n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:BigInt(1)},au=Sh({a:su.a,b:su.b,Fp:nu,n:su.n,Gx:su.Gx,Gy:su.Gy,h:su.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},eu),ou=[],cu=[],hu=[],uu=/* @__PURE__ */BigInt(0),lu=/* @__PURE__ */BigInt(1),yu=/* @__PURE__ */BigInt(2),fu=/* @__PURE__ */BigInt(7),gu=/* @__PURE__ */BigInt(256),pu=/* @__PURE__ */BigInt(113);for(let e=0,t=lu,r=1,i=0;e<24;e++){[r,i]=[i,(2*r+3*i)%5],ou.push(2*(5*i+r)),cu.push((e+1)*(e+2)/2%64);let n=uu;for(let e=0;e<7;e++)t=(t<<lu^(t>>fu)*pu)%gu,t&yu&&(n^=lu<<(lu<</* @__PURE__ */BigInt(e))-lu);hu.push(n)}const[du,Au]=/* @__PURE__ */Oh(hu,!0),wu=(e,t,r)=>r>32?qh(e,t,r):zh(e,t,r),mu=(e,t,r)=>r>32?jh(e,t,r):Gh(e,t,r);class bu extends bc{constructor(e,t,r,i=!1,n=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=i,this.rounds=n,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,oc(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){pc||dc(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let i=24-t;i<24;i++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const i=(t+8)%10,n=(t+2)%10,s=r[n],a=r[n+1],o=wu(s,a,1)^r[i],c=mu(s,a,1)^r[i+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],n=e[3];for(let r=0;r<24;r++){const i=cu[r],s=wu(t,n,i),a=mu(t,n,i),o=ou[r];t=e[o],n=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let i=0;i<10;i++)r[i]=e[t+i];for(let i=0;i<10;i++)e[t+i]^=~r[(i+2)%10]&r[(i+4)%10]}e[0]^=du[i],e[1]^=Au[i]}r.fill(0)}(this.state32,this.rounds),pc||dc(this.state32),this.posOut=0,this.pos=0}update(e){hc(this);const{blockLen:t,state:r}=this,i=(e=wc(e)).length;for(let n=0;n<i;){const s=Math.min(t-this.pos,i-n);for(let t=0;t<s;t++)r[this.pos++]^=e[n++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:i}=this;e[r]^=t,128&t&&r===i-1&&this.keccak(),e[i-1]^=128,this.keccak()}writeInto(e){hc(this,!1),cc(e),this.finish();const t=this.state,{blockLen:r}=this;for(let i=0,n=e.length;i<n;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,n-i);e.set(t.subarray(this.posOut,this.posOut+s),i),this.posOut+=s,i+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return oc(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(uc(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:i,rounds:n,enableXOF:s}=this;return e||(e=new bu(t,r,i,s,n)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=n,e.suffix=r,e.outputLen=i,e.enableXOF=s,e.destroyed=this.destroyed,e}}const Eu=(e,t,r)=>Ec((()=>new bu(t,e,r))),ku=/* @__PURE__ */Eu(6,136,32),vu=/* @__PURE__ */Eu(6,72,64),Bu=/* @__PURE__ */((e,t,r)=>function(e){const t=(t,r)=>e(r).update(wc(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((i={})=>new bu(t,e,void 0===i.dkLen?r:i.dkLen,!0))))(31,136,32),Iu=BigInt(0),Su=BigInt(1),Cu=BigInt(2),Ku=BigInt(8),Pu={zip215:!0};function Du(e){const t=function(e){const t=dh(e);return Yc(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}(e),{Fp:r,n:i,prehash:n,hash:s,randomBytes:a,nByteLength:o,h:c}=t,h=Cu<<BigInt(8*o)-Su,u=r.create,l=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:r.sqrt(e*r.inv(t))}}catch(e){return{isValid:!1,value:Iu}}}),y=t.adjustScalarBytes||(e=>e),f=t.domain||((e,t,r)=>{if(t.length||r)throw Error("Contexts/pre-hash are not supported");return e}),g=e=>"bigint"==typeof e&&Iu<e,p=(e,t)=>g(e)&&g(t)&&e<t,d=e=>e===Iu||p(e,h);function A(e,t){if(p(e,t))return e;throw Error(`Expected valid scalar < ${t}, got ${typeof e} ${e}`)}function w(e){return e===Iu?e:A(e,i)}const m=new Map;function b(e){if(!(e instanceof E))throw Error("ExtendedPoint expected")}class E{constructor(e,t,r,i){if(this.ex=e,this.ey=t,this.ez=r,this.et=i,!d(e))throw Error("x required");if(!d(t))throw Error("y required");if(!d(r))throw Error("z required");if(!d(i))throw Error("t required")}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(e){if(e instanceof E)throw Error("extended point not allowed");const{x:t,y:r}=e||{};if(!d(t)||!d(r))throw Error("invalid affine point");return new E(t,r,Su,u(t*r))}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.ez)));return e.map(((e,r)=>e.toAffine(t[r]))).map(E.fromAffine)}_setWindowSize(e){this._WINDOW_SIZE=e,m.delete(this)}assertValidity(){const{a:e,d:r}=t;if(this.is0())throw Error("bad point: ZERO");const{ex:i,ey:n,ez:s,et:a}=this,o=u(i*i),c=u(n*n),h=u(s*s),l=u(h*h),y=u(o*e);if(u(h*u(y+c))!==u(l+u(r*u(o*c))))throw Error("bad point: equation left != right (1)");if(u(i*n)!==u(s*a))throw Error("bad point: equation left != right (2)")}equals(e){b(e);const{ex:t,ey:r,ez:i}=this,{ex:n,ey:s,ez:a}=e,o=u(t*a),c=u(n*i),h=u(r*a),l=u(s*i);return o===c&&h===l}is0(){return this.equals(E.ZERO)}negate(){return new E(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){const{a:e}=t,{ex:r,ey:i,ez:n}=this,s=u(r*r),a=u(i*i),o=u(Cu*u(n*n)),c=u(e*s),h=r+i,l=u(u(h*h)-s-a),y=c+a,f=y-o,g=c-a,p=u(l*f),d=u(y*g),A=u(l*g),w=u(f*y);return new E(p,d,w,A)}add(e){b(e);const{a:r,d:i}=t,{ex:n,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:y}=e;if(r===BigInt(-1)){const e=u((s-n)*(h+c)),t=u((s+n)*(h-c)),r=u(t-e);if(r===Iu)return this.double();const i=u(a*Cu*y),f=u(o*Cu*l),g=f+i,p=t+e,d=f-i,A=u(g*r),w=u(p*d),m=u(g*d),b=u(r*p);return new E(A,w,b,m)}const f=u(n*c),g=u(s*h),p=u(o*i*y),d=u(a*l),A=u((n+s)*(c+h)-f-g),w=d-p,m=d+p,k=u(g-r*f),v=u(A*w),B=u(m*k),I=u(A*k),S=u(w*m);return new E(v,B,S,I)}subtract(e){return this.add(e.negate())}wNAF(e){return B.wNAFCached(this,m,e,E.normalizeZ)}multiply(e){const{p:t,f:r}=this.wNAF(A(e,i));return E.normalizeZ([t,r])[0]}multiplyUnsafe(e){let t=w(e);return t===Iu?v:this.equals(v)||t===Su?this:this.equals(k)?this.wNAF(t).p:B.unsafeLadder(this,t)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return B.unsafeLadder(this,i).is0()}toAffine(e){const{ex:t,ey:i,ez:n}=this,s=this.is0();null==e&&(e=s?Ku:r.inv(n));const a=u(t*e),o=u(i*e),c=u(n*e);if(s)return{x:Iu,y:Su};if(c!==Su)throw Error("invZ was invalid");return{x:a,y:o}}clearCofactor(){const{h:e}=t;return e===Su?this:this.multiplyUnsafe(e)}static fromHex(e,i=!1){const{d:n,a:s}=t,a=r.BYTES,o=(e=Hc("pointHex",e,a)).slice(),c=e[a-1];o[a-1]=-129&c;const y=_c(o);y===Iu||A(y,i?h:r.ORDER);const f=u(y*y),g=u(f-Su),p=u(n*f-s);let{isValid:d,value:w}=l(g,p);if(!d)throw Error("Point.fromHex: invalid y coordinate");const m=(w&Su)===Su,b=!!(128&c);if(!i&&w===Iu&&b)throw Error("Point.fromHex: x=0 and x_0=1");return b!==m&&(w=u(-w)),E.fromAffine({x:w,y})}static fromPrivateKey(e){return C(e).point}toRawBytes(){const{x:e,y:t}=this.toAffine(),i=Nc(t,r.BYTES);return i[i.length-1]|=e&Su?128:0,i}toHex(){return Uc(this.toRawBytes())}}E.BASE=new E(t.Gx,t.Gy,Su,u(t.Gx*t.Gy)),E.ZERO=new E(Iu,Su,Su,Iu);const{BASE:k,ZERO:v}=E,B=ph(E,8*o);function I(e){return ih(e,i)}function S(e){return I(_c(e))}function C(e){const t=o;e=Hc("private key",e,t);const r=Hc("hashed private key",s(e),2*t),i=y(r.slice(0,t)),n=r.slice(t,2*t),a=S(i),c=k.multiply(a),h=c.toRawBytes();return{head:i,prefix:n,scalar:a,point:c,pointBytes:h}}function K(e=new Uint8Array,...t){const r=Oc(...t);return S(s(f(r,Hc("context",e),!!n)))}const P=Pu;k._setWindowSize(8);return{CURVE:t,getPublicKey:function(e){return C(e).pointBytes},sign:function(e,t,i={}){e=Hc("message",e),n&&(e=n(e));const{prefix:s,scalar:a,pointBytes:c}=C(t),h=K(i.context,s,e),u=k.multiply(h).toRawBytes(),l=I(h+K(i.context,u,c,e)*a);return w(l),Hc("result",Oc(u,Nc(l,r.BYTES)),2*o)},verify:function(e,t,i,s=P){const{context:a,zip215:o}=s,c=r.BYTES;e=Hc("signature",e,2*c),t=Hc("message",t),n&&(t=n(t));const h=_c(e.slice(c,2*c));let u,l,y;try{u=E.fromHex(i,o),l=E.fromHex(e.slice(0,c),o),y=k.multiplyUnsafe(h)}catch(e){return!1}if(!o&&u.isSmallOrder())return!1;const f=K(a,l.toRawBytes(),u.toRawBytes(),t);return l.add(u.multiplyUnsafe(f)).subtract(y).clearCofactor().equals(E.ZERO)},ExtendedPoint:E,utils:{getExtendedPublicKey:C,randomPrivateKey:()=>a(r.BYTES),precompute:(e=8,t=E.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)}}}
|
|
11
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Uu=BigInt(0),xu=BigInt(1);function Qu(e){const t=(Yc(r=e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...r}));var r;const{P:i}=t,n=e=>ih(e,i),s=t.montgomeryBits,a=Math.ceil(s/8),o=t.nByteLength,c=t.adjustScalarBytes||(e=>e),h=t.powPminus2||(e=>nh(e,i-BigInt(2),i));function u(e,t,r){const i=n(e*(t-r));return[t=n(t-i),r=n(r+i)]}function l(e){if("bigint"==typeof e&&Uu<=e&&e<i)return e;throw Error("Expected valid scalar 0 < scalar < CURVE.P")}const y=(t.a-BigInt(2))/BigInt(4);function f(e){return Nc(n(e),a)}function g(e,t){const r=function(e){const t=Hc("u coordinate",e,a);return 32===o&&(t[31]&=127),_c(t)}(t),i=function(e){const t=Hc("scalar",e),r=t.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return _c(c(t))}(e),g=function(e,t){const r=l(e),i=l(t),a=r;let o,c=xu,f=Uu,g=r,p=xu,d=Uu;for(let e=BigInt(s-1);e>=Uu;e--){const t=i>>e&xu;d^=t,o=u(d,c,g),c=o[0],g=o[1],o=u(d,f,p),f=o[0],p=o[1],d=t;const r=c+f,s=n(r*r),h=c-f,l=n(h*h),A=s-l,w=g+p,m=n((g-p)*r),b=n(w*h),E=m+b,k=m-b;g=n(E*E),p=n(a*n(k*k)),c=n(s*l),f=n(A*(s+n(y*A)))}o=u(d,c,g),c=o[0],g=o[1],o=u(d,f,p),f=o[0],p=o[1];const A=h(f);return n(c*A)}(r,i);if(g===Uu)throw Error("Invalid private or public key received");return f(g)}const p=f(t.Gu);function d(e){return g(e,p)}return{scalarMult:g,scalarMultBase:d,getSharedSecret:(e,t)=>g(e,t),getPublicKey:e=>d(e),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:p}}
|
|
12
|
-
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const
|
|
9
|
+
const Ku=BigInt(0),Cu=BigInt(1),Pu=new WeakMap,Uu=new WeakMap;function Du(e,t){const r=(e,t)=>{const r=t.negate();return e?r:t},n=e=>{if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error(`Wrong window size=${e}, should be [1..${t}]`)},i=e=>{n(e);return{windows:Math.ceil(t/e)+1,windowSize:2**(e-1)}};return{constTimeNegate:r,unsafeLadder(t,r){let n=e.ZERO,i=t;for(;r>Ku;)r&Cu&&(n=n.add(i)),i=i.double(),r>>=Cu;return n},precomputeWindow(e,t){const{windows:r,windowSize:n}=i(t),s=[];let a=e,o=a;for(let e=0;e<r;e++){o=a,s.push(o);for(let e=1;e<n;e++)o=o.add(a),s.push(o);a=o.double()}return s},wNAF(t,n,s){const{windows:a,windowSize:o}=i(t);let c=e.ZERO,h=e.BASE;const u=BigInt(2**t-1),l=2**t,y=BigInt(t);for(let e=0;e<a;e++){const t=e*o;let i=Number(s&u);s>>=y,i>o&&(i-=l,s+=Cu);const a=t,f=t+Math.abs(i)-1,g=e%2!=0,p=i<0;0===i?h=h.add(r(g,n[a])):c=c.add(r(p,n[f]))}return{p:c,f:h}},wNAFCached(e,t,r){const n=Uu.get(e)||1;let i=Pu.get(e);return i||(i=this.precomputeWindow(e,n),1!==n&&Pu.set(e,r(i))),this.wNAF(n,i,t)},setWindowSize(e,t){n(t),Uu.set(e,t),Pu.delete(e)}}}function xu(e,t,r,n){if(!Array.isArray(r)||!Array.isArray(n)||n.length!==r.length)throw Error("arrays of points and scalars must have equal length");n.forEach(((e,r)=>{if(!t.isValid(e))throw Error("wrong scalar at index "+r)})),r.forEach(((t,r)=>{if(!(t instanceof e))throw Error("wrong point at index "+r)}));const i=tu(BigInt(r.length)),s=i>12?i-3:i>4?i-2:i?2:1,a=(1<<s)-1,o=Array(a+1).fill(e.ZERO),c=Math.floor((t.BITS-1)/s)*s;let h=e.ZERO;for(let t=c;t>=0;t-=s){o.fill(e.ZERO);for(let e=0;e<n.length;e++){const i=n[e],s=Number(i>>BigInt(t)&BigInt(a));o[s]=o[s].add(r[e])}let i=e.ZERO;for(let t=o.length-1,r=e.ZERO;t>0;t--)r=r.add(o[t]),i=i.add(r);if(h=h.add(i),0!==t)for(let e=0;e<s;e++)h=h.double()}return h}function Qu(e){return ou(e.Fp,ku.reduce(((e,t)=>(e[t]="function",e)),{ORDER:"bigint",MASK:"bigint",BYTES:"isSafeInteger",BITS:"isSafeInteger"})),ou(e,{n:"bigint",h:"bigint",Gx:"field",Gy:"field"},{nBitLength:"isSafeInteger",nByteLength:"isSafeInteger"}),Object.freeze({...vu(e.n,e.nBitLength),...e,p:e.Fp.ORDER})}
|
|
10
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Ru(e){void 0!==e.lowS&&Fh("lowS",e.lowS),void 0!==e.prehash&&Fh("prehash",e.prehash)}const{bytesToNumberBE:Mu,hexToBytes:Lu}=hu,Tu={Err:class extends Error{constructor(e=""){super(e)}},_tlv:{encode:(e,t)=>{const{Err:r}=Tu;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(1&t.length)throw new r("tlv.encode: unpadded data");const n=t.length/2,i=Oh(n);if(i.length/2&128)throw new r("tlv.encode: long form length too big");const s=n>127?Oh(i.length/2|128):"";return`${Oh(e)}${s}${i}${t}`},decode(e,t){const{Err:r}=Tu;let n=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");const i=t[n++];let s=0;if(!!(128&i)){const e=127&i;if(!e)throw new r("tlv.decode(long): indefinite length not supported");if(e>4)throw new r("tlv.decode(long): byte length is too big");const a=t.subarray(n,n+e);if(a.length!==e)throw new r("tlv.decode: length bytes not complete");if(0===a[0])throw new r("tlv.decode(long): zero leftmost byte");for(const e of a)s=s<<8|e;if(n+=e,s<128)throw new r("tlv.decode(long): not minimal encoding")}else s=i;const a=t.subarray(n,n+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(n+s)}}},_int:{encode(e){const{Err:t}=Tu;if(e<Fu)throw new t("integer: negative integers are not allowed");let r=Oh(e);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new t("unexpected assertion");return r},decode(e){const{Err:t}=Tu;if(128&e[0])throw new t("Invalid signature integer: negative");if(0===e[0]&&!(128&e[1]))throw new t("Invalid signature integer: unnecessary leading zero");return Mu(e)}},toSig(e){const{Err:t,_int:r,_tlv:n}=Tu,i="string"==typeof e?Lu(e):e;Th(i);const{v:s,l:a}=n.decode(48,i);if(a.length)throw new t("Invalid signature: left bytes after parsing");const{v:o,l:c}=n.decode(2,s),{v:h,l:u}=n.decode(2,c);if(u.length)throw new t("Invalid signature: left bytes after parsing");return{r:r.decode(o),s:r.decode(h)}},hexFromSig(e){const{_tlv:t,_int:r}=Tu,n=`${t.encode(2,r.encode(e.r))}${t.encode(2,r.encode(e.s))}`;return t.encode(48,n)}},Fu=BigInt(0),Nu=BigInt(1);BigInt(2);const Hu=BigInt(3);function Ou(e){const t=function(e){const t=Qu(e);ou(t,{a:"field",b:"field"},{allowedPrivateKeyLengths:"array",wrapPrivateKey:"boolean",isTorsionFree:"function",clearCofactor:"function",allowInfinityPoint:"boolean",fromBytes:"function",toBytes:"function"});const{endo:r,Fp:n,a:i}=t;if(r){if(!n.eql(i,n.ZERO))throw Error("Endomorphism can only be defined for Koblitz curves that have a=0");if("object"!=typeof r||"bigint"!=typeof r.beta||"function"!=typeof r.splitScalar)throw Error("Expected endomorphism with beta: bigint and splitScalar: function")}return Object.freeze({...t})}(e),{Fp:r}=t,n=Bu(t.n,t.nBitLength),i=t.toBytes||((e,t,n)=>{const i=t.toAffine();return Jh(Uint8Array.from([4]),r.toBytes(i.x),r.toBytes(i.y))}),s=t.fromBytes||(e=>{const t=e.subarray(1);return{x:r.fromBytes(t.subarray(0,r.BYTES)),y:r.fromBytes(t.subarray(r.BYTES,2*r.BYTES))}});function a(e){const{a:n,b:i}=t,s=r.sqr(e),a=r.mul(s,e);return r.add(r.add(a,r.mul(e,n)),i)}if(!r.eql(r.sqr(t.Gy),a(t.Gx)))throw Error("bad generator point: equation left != right");function o(e){const{allowedPrivateKeyLengths:r,nByteLength:n,wrapPrivateKey:i,n:s}=t;if(r&&"bigint"!=typeof e){if(Lh(e)&&(e=Hh(e)),"string"!=typeof e||!r.includes(e.length))throw Error("Invalid key");e=e.padStart(2*n,"0")}let a;try{a="bigint"==typeof e?e:qh(Yh("private key",e,n))}catch(t){throw Error(`private key must be ${n} bytes, hex or bigint, not ${typeof e}`)}return i&&(a=Au(a,s)),eu("private key",a,Nu,s),a}function c(e){if(!(e instanceof l))throw Error("ProjectivePoint expected")}const h=cu(((e,t)=>{const{px:n,py:i,pz:s}=e;if(r.eql(s,r.ONE))return{x:n,y:i};const a=e.is0();null==t&&(t=a?r.ONE:r.inv(s));const o=r.mul(n,t),c=r.mul(i,t),h=r.mul(s,t);if(a)return{x:r.ZERO,y:r.ZERO};if(!r.eql(h,r.ONE))throw Error("invZ was invalid");return{x:o,y:c}})),u=cu((e=>{if(e.is0()){if(t.allowInfinityPoint&&!r.is0(e.py))return;throw Error("bad point: ZERO")}const{x:n,y:i}=e.toAffine();if(!r.isValid(n)||!r.isValid(i))throw Error("bad point: x or y not FE");const s=r.sqr(i),o=a(n);if(!r.eql(s,o))throw Error("bad point: equation left != right");if(!e.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0}));class l{constructor(e,t,n){if(this.px=e,this.py=t,this.pz=n,null==e||!r.isValid(e))throw Error("x required");if(null==t||!r.isValid(t))throw Error("y required");if(null==n||!r.isValid(n))throw Error("z required");Object.freeze(this)}static fromAffine(e){const{x:t,y:n}=e||{};if(!e||!r.isValid(t)||!r.isValid(n))throw Error("invalid affine point");if(e instanceof l)throw Error("projective point not allowed");const i=e=>r.eql(e,r.ZERO);return i(t)&&i(n)?l.ZERO:new l(t,n,r.ONE)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.pz)));return e.map(((e,r)=>e.toAffine(t[r]))).map(l.fromAffine)}static fromHex(e){const t=l.fromAffine(s(Yh("pointHex",e)));return t.assertValidity(),t}static fromPrivateKey(e){return l.BASE.multiply(o(e))}static msm(e,t){return xu(l,n,e,t)}_setWindowSize(e){f.setWindowSize(this,e)}assertValidity(){u(this)}hasEvenY(){const{y:e}=this.toAffine();if(r.isOdd)return!r.isOdd(e);throw Error("Field doesn't support isOdd")}equals(e){c(e);const{px:t,py:n,pz:i}=this,{px:s,py:a,pz:o}=e,h=r.eql(r.mul(t,o),r.mul(s,i)),u=r.eql(r.mul(n,o),r.mul(a,i));return h&&u}negate(){return new l(this.px,r.neg(this.py),this.pz)}double(){const{a:e,b:n}=t,i=r.mul(n,Hu),{px:s,py:a,pz:o}=this;let c=r.ZERO,h=r.ZERO,u=r.ZERO,y=r.mul(s,s),f=r.mul(a,a),g=r.mul(o,o),p=r.mul(s,a);return p=r.add(p,p),u=r.mul(s,o),u=r.add(u,u),c=r.mul(e,u),h=r.mul(i,g),h=r.add(c,h),c=r.sub(f,h),h=r.add(f,h),h=r.mul(c,h),c=r.mul(p,c),u=r.mul(i,u),g=r.mul(e,g),p=r.sub(y,g),p=r.mul(e,p),p=r.add(p,u),u=r.add(y,y),y=r.add(u,y),y=r.add(y,g),y=r.mul(y,p),h=r.add(h,y),g=r.mul(a,o),g=r.add(g,g),y=r.mul(g,p),c=r.sub(c,y),u=r.mul(g,f),u=r.add(u,u),u=r.add(u,u),new l(c,h,u)}add(e){c(e);const{px:n,py:i,pz:s}=this,{px:a,py:o,pz:h}=e;let u=r.ZERO,y=r.ZERO,f=r.ZERO;const g=t.a,p=r.mul(t.b,Hu);let d=r.mul(n,a),A=r.mul(i,o),w=r.mul(s,h),m=r.add(n,i),b=r.add(a,o);m=r.mul(m,b),b=r.add(d,A),m=r.sub(m,b),b=r.add(n,s);let E=r.add(a,h);return b=r.mul(b,E),E=r.add(d,w),b=r.sub(b,E),E=r.add(i,s),u=r.add(o,h),E=r.mul(E,u),u=r.add(A,w),E=r.sub(E,u),f=r.mul(g,b),u=r.mul(p,w),f=r.add(u,f),u=r.sub(A,f),f=r.add(A,f),y=r.mul(u,f),A=r.add(d,d),A=r.add(A,d),w=r.mul(g,w),b=r.mul(p,b),A=r.add(A,w),w=r.sub(d,w),w=r.mul(g,w),b=r.add(b,w),d=r.mul(A,b),y=r.add(y,d),d=r.mul(E,b),u=r.mul(m,u),u=r.sub(u,d),d=r.mul(m,A),f=r.mul(E,f),f=r.add(f,d),new l(u,y,f)}subtract(e){return this.add(e.negate())}is0(){return this.equals(l.ZERO)}wNAF(e){return f.wNAFCached(this,e,l.normalizeZ)}multiplyUnsafe(e){eu("scalar",e,Fu,t.n);const n=l.ZERO;if(e===Fu)return n;if(e===Nu)return this;const{endo:i}=t;if(!i)return f.unsafeLadder(this,e);let{k1neg:s,k1:a,k2neg:o,k2:c}=i.splitScalar(e),h=n,u=n,y=this;for(;a>Fu||c>Fu;)a&Nu&&(h=h.add(y)),c&Nu&&(u=u.add(y)),y=y.double(),a>>=Nu,c>>=Nu;return s&&(h=h.negate()),o&&(u=u.negate()),u=new l(r.mul(u.px,i.beta),u.py,u.pz),h.add(u)}multiply(e){const{endo:n,n:i}=t;let s,a;if(eu("scalar",e,Nu,i),n){const{k1neg:t,k1:i,k2neg:o,k2:c}=n.splitScalar(e);let{p:h,f:u}=this.wNAF(i),{p:y,f:g}=this.wNAF(c);h=f.constTimeNegate(t,h),y=f.constTimeNegate(o,y),y=new l(r.mul(y.px,n.beta),y.py,y.pz),s=h.add(y),a=u.add(g)}else{const{p:t,f:r}=this.wNAF(e);s=t,a=r}return l.normalizeZ([s,a])[0]}multiplyAndAddUnsafe(e,t,r){const n=l.BASE,i=(e,t)=>t!==Fu&&t!==Nu&&e.equals(n)?e.multiply(t):e.multiplyUnsafe(t),s=i(this,t).add(i(e,r));return s.is0()?void 0:s}toAffine(e){return h(this,e)}isTorsionFree(){const{h:e,isTorsionFree:r}=t;if(e===Nu)return!0;if(r)return r(l,this);throw Error("isTorsionFree() has not been declared for the elliptic curve")}clearCofactor(){const{h:e,clearCofactor:r}=t;return e===Nu?this:r?r(l,this):this.multiplyUnsafe(t.h)}toRawBytes(e=!0){return Fh("isCompressed",e),this.assertValidity(),i(l,this,e)}toHex(e=!0){return Fh("isCompressed",e),Hh(this.toRawBytes(e))}}l.BASE=new l(t.Gx,t.Gy,r.ONE),l.ZERO=new l(r.ZERO,r.ONE,r.ZERO);const y=t.nBitLength,f=Du(l,t.endo?Math.ceil(y/2):y);return{CURVE:t,ProjectivePoint:l,normPrivateKeyToScalar:o,weierstrassEquation:a,isWithinCurveOrder:function(e){return Xh(e,Nu,t.n)}}}function zu(e){const t=function(e){const t=Qu(e);return ou(t,{hash:"hash",hmac:"function",randomBytes:"function"},{bits2int:"function",bits2int_modN:"function",lowS:"boolean"}),Object.freeze({lowS:!0,...t})}(e),{Fp:r,n}=t,i=r.BYTES+1,s=2*r.BYTES+1;function a(e){return Au(e,n)}function o(e){return bu(e,n)}const{ProjectivePoint:c,normPrivateKeyToScalar:h,weierstrassEquation:u,isWithinCurveOrder:l}=Ou({...t,toBytes(e,t,n){const i=t.toAffine(),s=r.toBytes(i.x),a=Jh;return Fh("isCompressed",n),n?a(Uint8Array.from([t.hasEvenY()?2:3]),s):a(Uint8Array.from([4]),s,r.toBytes(i.y))},fromBytes(e){const t=e.length,n=e[0],a=e.subarray(1);if(t!==i||2!==n&&3!==n){if(t===s&&4===n){return{x:r.fromBytes(a.subarray(0,r.BYTES)),y:r.fromBytes(a.subarray(r.BYTES,2*r.BYTES))}}throw Error(`Point of length ${t} was invalid. Expected ${i} compressed bytes or ${s} uncompressed bytes`)}{const e=qh(a);if(!Xh(e,Nu,r.ORDER))throw Error("Point is not on curve");const t=u(e);let i;try{i=r.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("Point is not on curve"+t)}return!(1&~n)!==((i&Nu)===Nu)&&(i=r.neg(i)),{x:e,y:i}}}}),y=e=>Hh(Zh(e,t.nByteLength));function f(e){return e>n>>Nu}const g=(e,t,r)=>qh(e.slice(t,r));class p{constructor(e,t,r){this.r=e,this.s=t,this.recovery=r,this.assertValidity()}static fromCompact(e){const r=t.nByteLength;return e=Yh("compactSignature",e,2*r),new p(g(e,0,r),g(e,r,2*r))}static fromDER(e){const{r:t,s:r}=Tu.toSig(Yh("DER",e));return new p(t,r)}assertValidity(){eu("r",this.r,Nu,n),eu("s",this.s,Nu,n)}addRecoveryBit(e){return new p(this.r,this.s,e)}recoverPublicKey(e){const{r:n,s:i,recovery:s}=this,h=m(Yh("msgHash",e));if(null==s||![0,1,2,3].includes(s))throw Error("recovery id invalid");const u=2===s||3===s?n+t.n:n;if(u>=r.ORDER)throw Error("recovery id 2 or 3 invalid");const l=1&s?"03":"02",f=c.fromHex(l+y(u)),g=o(u),p=a(-h*g),d=a(i*g),A=c.BASE.multiplyAndAddUnsafe(f,p,d);if(!A)throw Error("point at infinify");return A.assertValidity(),A}hasHighS(){return f(this.s)}normalizeS(){return this.hasHighS()?new p(this.r,a(-this.s),this.recovery):this}toDERRawBytes(){return jh(this.toDERHex())}toDERHex(){return Tu.hexFromSig({r:this.r,s:this.s})}toCompactRawBytes(){return jh(this.toCompactHex())}toCompactHex(){return y(this.r)+y(this.s)}}const d={isValidPrivateKey(e){try{return h(e),!0}catch(e){return!1}},normPrivateKeyToScalar:h,randomPrivateKey:()=>{const e=Su(t.n);return function(e,t,r=!1){const n=e.length,i=Iu(t),s=Su(t);if(n<16||n<s||n>1024)throw Error(`expected ${s}-1024 bytes of input, got ${n}`);const a=Au(r?qh(e):Vh(e),t-lu)+lu;return r?Wh(a,i):Zh(a,i)}(t.randomBytes(e),t.n)},precompute:(e=8,t=c.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)};function A(e){const t=Lh(e),r="string"==typeof e,n=(t||r)&&e.length;return t?n===i||n===s:r?n===2*i||n===2*s:e instanceof c}const w=t.bits2int||function(e){const r=qh(e),n=8*e.length-t.nBitLength;return n>0?r>>BigInt(n):r},m=t.bits2int_modN||function(e){return a(w(e))},b=ru(t.nBitLength);function E(e){return eu("num < 2^"+t.nBitLength,e,Fu,b),Zh(e,t.nByteLength)}function k(e,n,i=v){if(["recovered","canonical"].some((e=>e in i)))throw Error("sign() legacy options not supported");const{hash:s,randomBytes:u}=t;let{lowS:y,prehash:g,extraEntropy:d}=i;null==y&&(y=!0),e=Yh("msgHash",e),Ru(i),g&&(e=Yh("prehashed msgHash",s(e)));const A=m(e),b=h(n),k=[E(b),E(A)];if(null!=d&&!1!==d){const e=!0===d?u(r.BYTES):d;k.push(Yh("extraEntropy",e))}const B=Jh(...k),I=A;return{seed:B,k2sig:function(e){const t=w(e);if(!l(t))return;const r=o(t),n=c.BASE.multiply(t).toAffine(),i=a(n.x);if(i===Fu)return;const s=a(r*a(I+i*b));if(s===Fu)return;let h=(n.x===i?0:2)|Number(n.y&Nu),u=s;return y&&f(s)&&(u=function(e){return f(e)?a(-e):e}(s),h^=1),new p(i,u,h)}}}const v={lowS:t.lowS,prehash:!1},B={lowS:t.lowS,prehash:!1};return c.BASE._setWindowSize(8),{CURVE:t,getPublicKey:function(e,t=!0){return c.fromPrivateKey(e).toRawBytes(t)},getSharedSecret:function(e,t,r=!0){if(A(e))throw Error("first arg must be private key");if(!A(t))throw Error("second arg must be public key");return c.fromHex(t).multiply(h(e)).toRawBytes(r)},sign:function(e,r,n=v){const{seed:i,k2sig:s}=k(e,r,n),a=t;return su(a.hash.outputLen,a.nByteLength,a.hmac)(i,s)},verify:function(e,r,n,i=B){const s=e;if(r=Yh("msgHash",r),n=Yh("publicKey",n),"strict"in i)throw Error("options.strict was renamed to lowS");Ru(i);const{lowS:h,prehash:u}=i;let l,y;try{if("string"==typeof s||Lh(s))try{l=p.fromDER(s)}catch(e){if(!(e instanceof Tu.Err))throw e;l=p.fromCompact(s)}else{if("object"!=typeof s||"bigint"!=typeof s.r||"bigint"!=typeof s.s)throw Error("PARSE");{const{r:e,s:t}=s;l=new p(e,t)}}y=c.fromHex(n)}catch(e){if("PARSE"===e.message)throw Error("signature must be Signature instance, Uint8Array or hex string");return!1}if(h&&l.hasHighS())return!1;u&&(r=t.hash(r));const{r:f,s:g}=l,d=m(r),A=o(g),w=a(d*A),b=a(f*A),E=c.BASE.multiplyAndAddUnsafe(y,w,b)?.toAffine();return!!E&&a(E.x)===f},ProjectivePoint:c,Signature:p,utils:d}}
|
|
11
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function _u(e){return{hash:e,hmac:(t,...r)=>xh(e,t,Ah(...r)),randomBytes:bh}}function Gu(e,t){const r=t=>zu({...e,..._u(t)});return Object.freeze({...r(t),create:r})}
|
|
12
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */BigInt(4);const ju=Bu(BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff")),qu=Gu({a:ju.create(BigInt("-3")),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Fp:ju,n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),h:BigInt(1),lowS:!1},Ph),Vu=/* @__PURE__ */BigInt(2**32-1),Zu=/* @__PURE__ */BigInt(32);function Wu(e,t=!1){return t?{h:Number(e&Vu),l:Number(e>>Zu&Vu)}:{h:0|Number(e>>Zu&Vu),l:0|Number(e&Vu)}}function Yu(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let i=0;i<e.length;i++){const{h:s,l:a}=Wu(e[i],t);[r[i],n[i]]=[s,a]}return[r,n]}const Ju=(e,t,r)=>e<<r|t>>>32-r,$u=(e,t,r)=>t<<r|e>>>32-r,Xu=(e,t,r)=>t<<r-32|e>>>64-r,el=(e,t,r)=>e<<r-32|t>>>64-r;const tl={fromBig:Wu,split:Yu,toBig:(e,t)=>BigInt(e>>>0)<<Zu|BigInt(t>>>0),shrSH:(e,t,r)=>e>>>r,shrSL:(e,t,r)=>e<<32-r|t>>>r,rotrSH:(e,t,r)=>e>>>r|t<<32-r,rotrSL:(e,t,r)=>e<<32-r|t>>>r,rotrBH:(e,t,r)=>e<<64-r|t>>>r-32,rotrBL:(e,t,r)=>e>>>r-32|t<<64-r,rotr32H:(e,t)=>t,rotr32L:(e,t)=>e,rotlSH:Ju,rotlSL:$u,rotlBH:Xu,rotlBL:el,add:function(e,t,r,n){const i=(t>>>0)+(n>>>0);return{h:e+r+(i/2**32|0)|0,l:0|i}},add3L:(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),add3H:(e,t,r,n)=>t+r+n+(e/2**32|0)|0,add4L:(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),add4H:(e,t,r,n,i)=>t+r+n+i+(e/2**32|0)|0,add5H:(e,t,r,n,i,s)=>t+r+n+i+s+(e/2**32|0)|0,add5L:(e,t,r,n,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(i>>>0)},[rl,nl]=/* @__PURE__ */(()=>tl.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),il=/* @__PURE__ */new Uint32Array(80),sl=/* @__PURE__ */new Uint32Array(80);class al extends vh{constructor(){super(128,64,16,!1),this.Ah=1779033703,this.Al=-205731576,this.Bh=-1150833019,this.Bl=-2067093701,this.Ch=1013904242,this.Cl=-23791573,this.Dh=-1521486534,this.Dl=1595750129,this.Eh=1359893119,this.El=-1377402159,this.Fh=-1694144372,this.Fl=725511199,this.Gh=528734635,this.Gl=-79577749,this.Hh=1541459225,this.Hl=327033209}get(){const{Ah:e,Al:t,Bh:r,Bl:n,Ch:i,Cl:s,Dh:a,Dl:o,Eh:c,El:h,Fh:u,Fl:l,Gh:y,Gl:f,Hh:g,Hl:p}=this;return[e,t,r,n,i,s,a,o,c,h,u,l,y,f,g,p]}set(e,t,r,n,i,s,a,o,c,h,u,l,y,f,g,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|n,this.Ch=0|i,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|h,this.Fh=0|u,this.Fl=0|l,this.Gh=0|y,this.Gl=0|f,this.Hh=0|g,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)il[r]=e.getUint32(t),sl[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|il[e-15],r=0|sl[e-15],n=tl.rotrSH(t,r,1)^tl.rotrSH(t,r,8)^tl.shrSH(t,r,7),i=tl.rotrSL(t,r,1)^tl.rotrSL(t,r,8)^tl.shrSL(t,r,7),s=0|il[e-2],a=0|sl[e-2],o=tl.rotrSH(s,a,19)^tl.rotrBH(s,a,61)^tl.shrSH(s,a,6),c=tl.rotrSL(s,a,19)^tl.rotrBL(s,a,61)^tl.shrSL(s,a,6),h=tl.add4L(i,c,sl[e-7],sl[e-16]),u=tl.add4H(h,n,o,il[e-7],il[e-16]);il[e]=0|u,sl[e]=0|h}let{Ah:r,Al:n,Bh:i,Bl:s,Ch:a,Cl:o,Dh:c,Dl:h,Eh:u,El:l,Fh:y,Fl:f,Gh:g,Gl:p,Hh:d,Hl:A}=this;for(let e=0;e<80;e++){const t=tl.rotrSH(u,l,14)^tl.rotrSH(u,l,18)^tl.rotrBH(u,l,41),w=tl.rotrSL(u,l,14)^tl.rotrSL(u,l,18)^tl.rotrBL(u,l,41),m=u&y^~u&g,b=l&f^~l&p,E=tl.add5L(A,w,b,nl[e],sl[e]),k=tl.add5H(E,d,t,m,rl[e],il[e]),v=0|E,B=tl.rotrSH(r,n,28)^tl.rotrBH(r,n,34)^tl.rotrBH(r,n,39),I=tl.rotrSL(r,n,28)^tl.rotrBL(r,n,34)^tl.rotrBL(r,n,39),S=r&i^r&a^i&a,K=n&s^n&o^s&o;d=0|g,A=0|p,g=0|y,p=0|f,y=0|u,f=0|l,({h:u,l}=tl.add(0|c,0|h,0|k,0|v)),c=0|a,h=0|o,a=0|i,o=0|s,i=0|r,s=0|n;const C=tl.add3L(v,I,K);r=tl.add3H(C,k,B,S),n=0|C}({h:r,l:n}=tl.add(0|this.Ah,0|this.Al,0|r,0|n)),({h:i,l:s}=tl.add(0|this.Bh,0|this.Bl,0|i,0|s)),({h:a,l:o}=tl.add(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:h}=tl.add(0|this.Dh,0|this.Dl,0|c,0|h)),({h:u,l}=tl.add(0|this.Eh,0|this.El,0|u,0|l)),({h:y,l:f}=tl.add(0|this.Fh,0|this.Fl,0|y,0|f)),({h:g,l:p}=tl.add(0|this.Gh,0|this.Gl,0|g,0|p)),({h:d,l:A}=tl.add(0|this.Hh,0|this.Hl,0|d,0|A)),this.set(r,n,i,s,a,o,c,h,u,l,y,f,g,p,d,A)}roundClean(){il.fill(0),sl.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class ol extends al{constructor(){super(),this.Ah=-876896931,this.Al=-1056596264,this.Bh=1654270250,this.Bl=914150663,this.Ch=-1856437926,this.Cl=812702999,this.Dh=355462360,this.Dl=-150054599,this.Eh=1731405415,this.El=-4191439,this.Fh=-1900787065,this.Fl=1750603025,this.Gh=-619958771,this.Gl=1694076839,this.Hh=1203062813,this.Hl=-1090891868,this.outputLen=48}}const cl=/* @__PURE__ */mh((()=>new al)),hl=/* @__PURE__ */mh((()=>new ol)),ul=Bu(BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff")),ll=Gu({a:ul.create(BigInt("-3")),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Fp:ul,n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f"),h:BigInt(1),lowS:!1},hl),yl=Bu(BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff")),fl={a:yl.create(BigInt("-3")),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Fp:yl,n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650"),h:BigInt(1)},gl=Gu({a:fl.a,b:fl.b,Fp:yl,n:fl.n,Gx:fl.Gx,Gy:fl.Gy,h:fl.h,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},cl),pl=[],dl=[],Al=[],wl=/* @__PURE__ */BigInt(0),ml=/* @__PURE__ */BigInt(1),bl=/* @__PURE__ */BigInt(2),El=/* @__PURE__ */BigInt(7),kl=/* @__PURE__ */BigInt(256),vl=/* @__PURE__ */BigInt(113);for(let e=0,t=ml,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],pl.push(2*(5*n+r)),dl.push((e+1)*(e+2)/2%64);let i=wl;for(let e=0;e<7;e++)t=(t<<ml^(t>>El)*vl)%kl,t&bl&&(i^=ml<<(ml<</* @__PURE__ */BigInt(e))-ml);Al.push(i)}const[Bl,Il]=/* @__PURE__ */Yu(Al,!0),Sl=(e,t,r)=>r>32?Xu(e,t,r):Ju(e,t,r),Kl=(e,t,r)=>r>32?el(e,t,r):$u(e,t,r);class Cl extends wh{constructor(e,t,r,n=!1,i=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=n,this.rounds=i,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,sh(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}keccak(){fh||gh(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const n=(t+8)%10,i=(t+2)%10,s=r[i],a=r[i+1],o=Sl(s,a,1)^r[n],c=Kl(s,a,1)^r[n+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],i=e[3];for(let r=0;r<24;r++){const n=dl[r],s=Sl(t,i,n),a=Kl(t,i,n),o=pl[r];t=e[o],i=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let n=0;n<10;n++)r[n]=e[t+n];for(let n=0;n<10;n++)e[t+n]^=~r[(n+2)%10]&r[(n+4)%10]}e[0]^=Bl[n],e[1]^=Il[n]}r.fill(0)}(this.state32,this.rounds),fh||gh(this.state32),this.posOut=0,this.pos=0}update(e){oh(this);const{blockLen:t,state:r}=this,n=(e=dh(e)).length;for(let i=0;i<n;){const s=Math.min(t-this.pos,n-i);for(let t=0;t<s;t++)r[this.pos++]^=e[i++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:n}=this;e[r]^=t,128&t&&r===n-1&&this.keccak(),e[n-1]^=128,this.keccak()}writeInto(e){oh(this,!1),ah(e),this.finish();const t=this.state,{blockLen:r}=this;for(let n=0,i=e.length;n<i;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,i-n);e.set(t.subarray(this.posOut,this.posOut+s),n),this.posOut+=s,n+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return sh(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(ch(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:n,rounds:i,enableXOF:s}=this;return e||(e=new Cl(t,r,n,s,i)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=i,e.suffix=r,e.outputLen=n,e.enableXOF=s,e.destroyed=this.destroyed,e}}const Pl=(e,t,r)=>mh((()=>new Cl(t,e,r))),Ul=/* @__PURE__ */Pl(6,136,32),Dl=/* @__PURE__ */Pl(6,72,64),xl=/* @__PURE__ */((e,t,r)=>function(e){const t=(t,r)=>e(r).update(dh(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((n={})=>new Cl(t,e,void 0===n.dkLen?r:n.dkLen,!0))))(31,136,32),Ql=BigInt(0),Rl=BigInt(1),Ml=BigInt(2),Ll=BigInt(8),Tl={zip215:!0};function Fl(e){const t=function(e){const t=Qu(e);return ou(e,{hash:"function",a:"bigint",d:"bigint",randomBytes:"function"},{adjustScalarBytes:"function",domain:"function",uvRatio:"function",mapToCurve:"function"}),Object.freeze({...t})}(e),{Fp:r,n,prehash:i,hash:s,randomBytes:a,nByteLength:o,h:c}=t,h=Ml<<BigInt(8*o)-Rl,u=r.create,l=Bu(t.n,t.nBitLength),y=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:r.sqrt(e*r.inv(t))}}catch(e){return{isValid:!1,value:Ql}}}),f=t.adjustScalarBytes||(e=>e),g=t.domain||((e,t,r)=>{if(Fh("phflag",r),t.length||r)throw Error("Contexts/pre-hash are not supported");return e});function p(e,t){eu("coordinate "+e,t,Ql,h)}function d(e){if(!(e instanceof m))throw Error("ExtendedPoint expected")}const A=cu(((e,t)=>{const{ex:n,ey:i,ez:s}=e,a=e.is0();null==t&&(t=a?Ll:r.inv(s));const o=u(n*t),c=u(i*t),h=u(s*t);if(a)return{x:Ql,y:Rl};if(h!==Rl)throw Error("invZ was invalid");return{x:o,y:c}})),w=cu((e=>{const{a:r,d:n}=t;if(e.is0())throw Error("bad point: ZERO");const{ex:i,ey:s,ez:a,et:o}=e,c=u(i*i),h=u(s*s),l=u(a*a),y=u(l*l),f=u(c*r);if(u(l*u(f+h))!==u(y+u(n*u(c*h))))throw Error("bad point: equation left != right (1)");if(u(i*s)!==u(a*o))throw Error("bad point: equation left != right (2)");return!0}));class m{constructor(e,t,r,n){this.ex=e,this.ey=t,this.ez=r,this.et=n,p("x",e),p("y",t),p("z",r),p("t",n),Object.freeze(this)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}static fromAffine(e){if(e instanceof m)throw Error("extended point not allowed");const{x:t,y:r}=e||{};return p("x",t),p("y",r),new m(t,r,Rl,u(t*r))}static normalizeZ(e){const t=r.invertBatch(e.map((e=>e.ez)));return e.map(((e,r)=>e.toAffine(t[r]))).map(m.fromAffine)}static msm(e,t){return xu(m,l,e,t)}_setWindowSize(e){k.setWindowSize(this,e)}assertValidity(){w(this)}equals(e){d(e);const{ex:t,ey:r,ez:n}=this,{ex:i,ey:s,ez:a}=e,o=u(t*a),c=u(i*n),h=u(r*a),l=u(s*n);return o===c&&h===l}is0(){return this.equals(m.ZERO)}negate(){return new m(u(-this.ex),this.ey,this.ez,u(-this.et))}double(){const{a:e}=t,{ex:r,ey:n,ez:i}=this,s=u(r*r),a=u(n*n),o=u(Ml*u(i*i)),c=u(e*s),h=r+n,l=u(u(h*h)-s-a),y=c+a,f=y-o,g=c-a,p=u(l*f),d=u(y*g),A=u(l*g),w=u(f*y);return new m(p,d,w,A)}add(e){d(e);const{a:r,d:n}=t,{ex:i,ey:s,ez:a,et:o}=this,{ex:c,ey:h,ez:l,et:y}=e;if(r===BigInt(-1)){const e=u((s-i)*(h+c)),t=u((s+i)*(h-c)),r=u(t-e);if(r===Ql)return this.double();const n=u(a*Ml*y),f=u(o*Ml*l),g=f+n,p=t+e,d=f-n,A=u(g*r),w=u(p*d),b=u(g*d),E=u(r*p);return new m(A,w,E,b)}const f=u(i*c),g=u(s*h),p=u(o*n*y),A=u(a*l),w=u((i+s)*(c+h)-f-g),b=A-p,E=A+p,k=u(g-r*f),v=u(w*b),B=u(E*k),I=u(w*k),S=u(b*E);return new m(v,B,S,I)}subtract(e){return this.add(e.negate())}wNAF(e){return k.wNAFCached(this,e,m.normalizeZ)}multiply(e){const t=e;eu("scalar",t,Rl,n);const{p:r,f:i}=this.wNAF(t);return m.normalizeZ([r,i])[0]}multiplyUnsafe(e){const t=e;return eu("scalar",t,Ql,n),t===Ql?E:this.equals(E)||t===Rl?this:this.equals(b)?this.wNAF(t).p:k.unsafeLadder(this,t)}isSmallOrder(){return this.multiplyUnsafe(c).is0()}isTorsionFree(){return k.unsafeLadder(this,n).is0()}toAffine(e){return A(this,e)}clearCofactor(){const{h:e}=t;return e===Rl?this:this.multiplyUnsafe(e)}static fromHex(e,n=!1){const{d:i,a:s}=t,a=r.BYTES;e=Yh("pointHex",e,a),Fh("zip215",n);const o=e.slice(),c=e[a-1];o[a-1]=-129&c;const l=Vh(o),f=n?h:r.ORDER;eu("pointHex.y",l,Ql,f);const g=u(l*l),p=u(g-Rl),d=u(i*g-s);let{isValid:A,value:w}=y(p,d);if(!A)throw Error("Point.fromHex: invalid y coordinate");const b=(w&Rl)===Rl,E=!!(128&c);if(!n&&w===Ql&&E)throw Error("Point.fromHex: x=0 and x_0=1");return E!==b&&(w=u(-w)),m.fromAffine({x:w,y:l})}static fromPrivateKey(e){return I(e).point}toRawBytes(){const{x:e,y:t}=this.toAffine(),n=Wh(t,r.BYTES);return n[n.length-1]|=e&Rl?128:0,n}toHex(){return Hh(this.toRawBytes())}}m.BASE=new m(t.Gx,t.Gy,Rl,u(t.Gx*t.Gy)),m.ZERO=new m(Ql,Rl,Rl,Ql);const{BASE:b,ZERO:E}=m,k=Du(m,8*o);function v(e){return Au(e,n)}function B(e){return v(Vh(e))}function I(e){const t=o;e=Yh("private key",e,t);const r=Yh("hashed private key",s(e),2*t),n=f(r.slice(0,t)),i=r.slice(t,2*t),a=B(n),c=b.multiply(a),h=c.toRawBytes();return{head:n,prefix:i,scalar:a,point:c,pointBytes:h}}function S(e=new Uint8Array,...t){const r=Jh(...t);return B(s(g(r,Yh("context",e),!!i)))}const K=Tl;b._setWindowSize(8);return{CURVE:t,getPublicKey:function(e){return I(e).pointBytes},sign:function(e,t,s={}){e=Yh("message",e),i&&(e=i(e));const{prefix:a,scalar:c,pointBytes:h}=I(t),u=S(s.context,a,e),l=b.multiply(u).toRawBytes(),y=v(u+S(s.context,l,h,e)*c);return eu("signature.s",y,Ql,n),Yh("result",Jh(l,Wh(y,r.BYTES)),2*o)},verify:function(e,t,n,s=K){const{context:a,zip215:o}=s,c=r.BYTES;e=Yh("signature",e,2*c),t=Yh("message",t),void 0!==o&&Fh("zip215",o),i&&(t=i(t));const h=Vh(e.slice(c,2*c));let u,l,y;try{u=m.fromHex(n,o),l=m.fromHex(e.slice(0,c),o),y=b.multiplyUnsafe(h)}catch(e){return!1}if(!o&&u.isSmallOrder())return!1;const f=S(a,l.toRawBytes(),u.toRawBytes(),t);return l.add(u.multiplyUnsafe(f)).subtract(y).clearCofactor().equals(m.ZERO)},ExtendedPoint:m,utils:{getExtendedPublicKey:I,randomPrivateKey:()=>a(r.BYTES),precompute:(e=8,t=m.BASE)=>(t._setWindowSize(e),t.multiply(BigInt(3)),t)}}}
|
|
13
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Nl=BigInt(0),Hl=BigInt(1);function Ol(e){const t=(ou(r=e,{a:"bigint"},{montgomeryBits:"isSafeInteger",nByteLength:"isSafeInteger",adjustScalarBytes:"function",domain:"function",powPminus2:"function",Gu:"bigint"}),Object.freeze({...r}));var r;const{P:n}=t,i=e=>Au(e,n),s=t.montgomeryBits,a=Math.ceil(s/8),o=t.nByteLength,c=t.adjustScalarBytes||(e=>e),h=t.powPminus2||(e=>wu(e,n-BigInt(2),n));function u(e,t,r){const n=i(e*(t-r));return[t=i(t-n),r=i(r+n)]}const l=(t.a-BigInt(2))/BigInt(4);function y(e){return Wh(i(e),a)}function f(e,t){const r=function(e){const t=Yh("u coordinate",e,a);return 32===o&&(t[31]&=127),Vh(t)}(t),f=function(e){const t=Yh("scalar",e),r=t.length;if(r!==a&&r!==o)throw Error(`Expected ${a} or ${o} bytes, got ${r}`);return Vh(c(t))}(e),g=function(e,t){eu("u",e,Nl,n),eu("scalar",t,Nl,n);const r=t,a=e;let o,c=Hl,y=Nl,f=e,g=Hl,p=Nl;for(let e=BigInt(s-1);e>=Nl;e--){const t=r>>e&Hl;p^=t,o=u(p,c,f),c=o[0],f=o[1],o=u(p,y,g),y=o[0],g=o[1],p=t;const n=c+y,s=i(n*n),h=c-y,d=i(h*h),A=s-d,w=f+g,m=i((f-g)*n),b=i(w*h),E=m+b,k=m-b;f=i(E*E),g=i(a*i(k*k)),c=i(s*d),y=i(A*(s+i(l*A)))}o=u(p,c,f),c=o[0],f=o[1],o=u(p,y,g),y=o[0],g=o[1];const d=h(y);return i(c*d)}(r,f);if(g===Nl)throw Error("Invalid private or public key received");return y(g)}const g=y(t.Gu);function p(e){return f(e,g)}return{scalarMult:f,scalarMultBase:p,getSharedSecret:(e,t)=>f(e,t),getPublicKey:e=>p(e),utils:{randomPrivateKey:()=>t.randomBytes(t.nByteLength)},GuBytes:g}}
|
|
14
|
+
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const zl=mh((()=>xl.create({dkLen:114}))),_l=(mh((()=>xl.create({dkLen:64}))),BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018365439")),Gl=BigInt(1),jl=BigInt(2),ql=BigInt(3);BigInt(4);const Vl=BigInt(11),Zl=BigInt(22),Wl=BigInt(44),Yl=BigInt(88),Jl=BigInt(223);function $l(e){const t=_l,r=e*e*e%t,n=r*r*e%t,i=mu(n,ql,t)*n%t,s=mu(i,ql,t)*n%t,a=mu(s,jl,t)*r%t,o=mu(a,Vl,t)*a%t,c=mu(o,Zl,t)*o%t,h=mu(c,Wl,t)*c%t,u=mu(h,Yl,t)*h%t,l=mu(u,Wl,t)*c%t,y=mu(l,jl,t)*r%t,f=mu(y,Gl,t)*e%t;return mu(f,Jl,t)*y%t}function Xl(e){return e[0]&=252,e[55]|=128,e[56]=0,e}const ey=Bu(_l,456,!0),ty={a:BigInt(1),d:BigInt("726838724295606890549323807888004534353641360687318060281490199180612328166730772686396383698676545930088884461843637361053498018326358"),Fp:ey,n:BigInt("181709681073901722637330951972001133588410340171829515070372549795146003961539585716195755291692375963310293709091662304773755859649779"),nBitLength:456,h:BigInt(4),Gx:BigInt("224580040295924300187604334099896036246789641632564134246125461686950415467406032909029192869357953282578032075146446173674602635247710"),Gy:BigInt("298819210078481492676017930443930673437544040154080242095928241372331506189835876003536878655418784733982303233503462500531545062832660"),hash:zl,randomBytes:bh,adjustScalarBytes:Xl,domain:(e,t,r)=>{if(t.length>255)throw Error("Context is too big: "+t.length);return Ah(ph("SigEd448"),new Uint8Array([r?1:0,t.length]),t,e)},uvRatio:function(e,t){const r=_l,n=Au(e*e*t,r),i=Au(n*e,r),s=Au(i*n*t,r),a=Au(i*$l(s),r),o=Au(a*a,r);return{isValid:Au(o*t,r)===e,value:a}}},ry=/* @__PURE__ */Fl(ty),ny=/* @__PURE__ */(()=>Ol({a:BigInt(156326),montgomeryBits:448,nByteLength:56,P:_l,Gu:BigInt(5),powPminus2:e=>{const t=_l;return Au(mu($l(e),BigInt(2),t)*e,t)},adjustScalarBytes:Xl,randomBytes:bh}))();ey.ORDER,BigInt(3),BigInt(4),BigInt(156326),BigInt("39082"),BigInt("78163"),BigInt("98944233647732219769177004876929019128417576295529901074099889598043702116001257856802131563896515373927712232092845883226922417596214"),BigInt("315019913931389607337177038330951043522456072897266928557328499619017160722351061360252776265186336876723201881398623946864393857820716"),BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff");
|
|
13
15
|
/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
|
|
14
|
-
const Ju=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),Wu=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),$u=BigInt(1),Xu=BigInt(2),el=(e,t)=>(e+t/Xu)/t;const tl=uh(Ju,void 0,void 0,{sqrt:function(e){const t=Ju,r=BigInt(3),i=BigInt(6),n=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),h=e*e*e%t,u=h*h*e%t,l=sh(u,r,t)*u%t,y=sh(l,r,t)*u%t,f=sh(y,Xu,t)*h%t,g=sh(f,n,t)*f%t,p=sh(g,s,t)*g%t,d=sh(p,o,t)*p%t,A=sh(d,c,t)*d%t,w=sh(A,o,t)*p%t,m=sh(w,r,t)*u%t,b=sh(m,a,t)*g%t,E=sh(b,i,t)*h%t,k=sh(E,Xu,t);if(!tl.eql(tl.sqr(k),e))throw Error("Cannot find square root");return k}}),rl=Sh({a:BigInt(0),b:BigInt(7),Fp:tl,n:Wu,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{const t=Wu,r=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),i=-$u*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),n=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=BigInt("0x100000000000000000000000000000000"),o=el(s*e,t),c=el(-i*e,t);let h=ih(e-o*r-c*n,t),u=ih(-o*i-c*s,t);const l=h>a,y=u>a;if(l&&(h=t-h),y&&(u=t-u),h>a||u>a)throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:l,k1:h,k2neg:y,k2:u}}}},Mh);BigInt(0),rl.ProjectivePoint;const il=uh(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),nl=Sh({a:il.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:il,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Mh),sl=uh(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),al=Sh({a:sl.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:sl,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},tu),ol=uh(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),cl=Sh({a:ol.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:ol,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},eu),hl=new Map(Object.entries({nistP256:_h,nistP384:iu,nistP521:au,brainpoolP256r1:nl,brainpoolP384r1:al,brainpoolP512r1:cl,secp256k1:rl,x448:Zu,ed448:Yu}));var ul=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:hl});function ll(e,t,r,i,n,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],y=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],f=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,E,k,v,B=0,I=t.length;const S=32===e.length?3:9;E=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e,t){const r=8-e.length%8;let i;if(!(r<8)){if(8===r)return e;throw Error("des: invalid padding")}i=0;const n=new Uint8Array(e.length+r);for(let t=0;t<e.length;t++)n[t]=e[t];for(let t=0;t<r;t++)n[e.length+t]=i;return n}(t),I=t.length);let C=new Uint8Array(I),K=0;for(;B<I;){for(m=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],b=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(k=E[p+1],v=E[p+2],g=E[p];g!==k;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|h[A>>>16&63]|l[A>>>8&63]|f[63&A]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|y[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,C[K++]=m>>>24,C[K++]=m>>>16&255,C[K++]=m>>>8&255,C[K++]=255&m,C[K++]=b>>>24,C[K++]=b>>>16&255,C[K++]=b>>>8&255,C[K++]=255&b}return r||(C=function(e,t){let r,i=null;if(r=0,!i){for(i=1;e[e.length-i]===r;)i++;i--}return e.subarray(0,e.length-i)}(C)),C}function yl(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],i=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],n=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],y=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],f=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,E=0,k=0;for(let v=0;v<p;v++){let p=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++],v=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|i[p>>>20&15]|n[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|h[v>>>24&15]|u[v>>>20&15]|l[v>>>16&15]|y[v>>>12&15]|f[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[k++]=w^b,d[k++]=m^b<<16}return d}function fl(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return ll(yl(this.key[2]),ll(yl(this.key[1]),ll(yl(this.key[0]),e,!0),!1),!0)}}function gl(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^n(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^i(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^i(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^i(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^i(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^i(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const i=t+e,n=i<<r|i>>>32-r;return(s[0][n>>>24]^s[1][n>>>16&255])-s[2][n>>>8&255]+s[3][255&n]}function i(e,t,r){const i=t^e,n=i<<r|i>>>32-r;return s[0][n>>>24]-s[1][n>>>16&255]+s[2][n>>>8&255]^s[3][255&n]}function n(e,t,r){const i=t-e,n=i<<r|i>>>32-r;return(s[0][n>>>24]+s[1][n>>>16&255]^s[2][n>>>8&255])-s[3][255&n]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const i=[,,,,,,,,],n=Array(32);let a;for(let e=0;e<4;e++)a=4*e,i[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=i[t[1]],c^=s[4][i[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][i[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][i[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][i[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][i[t[6]>>>2]>>>24-8*(3&t[6])&255],i[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][i[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][i[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][i[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][i[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][i[e[4]>>>2]>>>24-8*(3&e[4])&255],n[h]=c,h++}}for(let e=0;e<16;e++)this.masking[e]=n[e],this.rotate[e]=31&n[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function pl(e){this.cast5=new gl,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}fl.keySize=fl.prototype.keySize=24,fl.blockSize=fl.prototype.blockSize=8,pl.blockSize=pl.prototype.blockSize=8,pl.keySize=pl.prototype.keySize=16;const dl=4294967295;function Al(e,t){return(e<<t|e>>>32-t)&dl}function wl(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function ml(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function bl(e,t){return e>>>8*t&255}function El(e){this.tf=function(){let e=null,t=null,r=-1,i=[],n=[[],[],[],[]];function s(e){return n[0][bl(e,0)]^n[1][bl(e,1)]^n[2][bl(e,2)]^n[3][bl(e,3)]}function a(e){return n[0][bl(e,3)]^n[1][bl(e,0)]^n[2][bl(e,1)]^n[3][bl(e,2)]}function o(e,t){let r=s(t[0]),n=a(t[1]);t[2]=Al(t[2]^r+n+i[4*e+8]&dl,31),t[3]=Al(t[3],1)^r+2*n+i[4*e+9]&dl,r=s(t[2]),n=a(t[3]),t[0]=Al(t[0]^r+n+i[4*e+10]&dl,31),t[1]=Al(t[1],1)^r+2*n+i[4*e+11]&dl}function c(e,t){let r=s(t[0]),n=a(t[1]);t[2]=Al(t[2],1)^r+n+i[4*e+10]&dl,t[3]=Al(t[3]^r+2*n+i[4*e+11]&dl,31),r=s(t[2]),n=a(t[3]),t[0]=Al(t[0],1)^r+n+i[4*e+8]&dl,t[1]=Al(t[1]^r+2*n+i[4*e+9]&dl,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const h=[],u=[],l=[];let y;const f=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],E=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],k=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],B=[[],[],[],[]];function I(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function C(e,t){let r,i,n;for(r=0;r<8;r++)i=t>>>24,t=t<<8&dl|e>>>24,e=e<<8&dl,n=i<<1,128&i&&(n^=333),t^=i^n<<16,n^=i>>>1,1&i&&(n^=166),t^=n<<24|n<<8;return t}function K(e,t){const r=t>>4,i=15&t,n=A[e][r^i],s=w[e][E[i]^k[r]];return b[e][E[s]^k[n]]<<4|m[e][n^s]}function P(e,t){let r=bl(e,0),i=bl(e,1),n=bl(e,2),s=bl(e,3);switch(y){case 4:r=v[1][r]^bl(t[3],0),i=v[0][i]^bl(t[3],1),n=v[0][n]^bl(t[3],2),s=v[1][s]^bl(t[3],3);case 3:r=v[1][r]^bl(t[2],0),i=v[1][i]^bl(t[2],1),n=v[0][n]^bl(t[2],2),s=v[0][s]^bl(t[2],3);case 2:r=v[0][v[0][r]^bl(t[1],0)]^bl(t[0],0),i=v[0][v[1][i]^bl(t[1],1)]^bl(t[0],1),n=v[1][v[0][n]^bl(t[1],2)]^bl(t[0],2),s=v[1][v[1][s]^bl(t[1],3)]^bl(t[0],3)}return B[0][r]^B[1][i]^B[2][n]^B[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=wl(e,r);for(r=0;r<256;r++)v[0][r]=K(0,r),v[1][r]=K(1,r);for(r=0;r<256;r++)g=v[1][r],p=I(g),d=S(g),B[0][r]=g+(p<<8)+(d<<16)+(d<<24),B[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=I(g),d=S(g),B[1][r]=d+(d<<8)+(p<<16)+(g<<24),B[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(y=l.length/2,r=0;r<y;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,f[y-r-1]=C(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=P(s,h),a=Al(P(a,u),8),i[r]=s+a&dl,i[r+1]=Al(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,y){case 4:s=v[1][s]^bl(f[3],0),a=v[0][a]^bl(f[3],1),o=v[0][o]^bl(f[3],2),c=v[1][c]^bl(f[3],3);case 3:s=v[1][s]^bl(f[2],0),a=v[1][a]^bl(f[2],1),o=v[0][o]^bl(f[2],2),c=v[0][c]^bl(f[2],3);case 2:n[0][r]=B[0][v[0][v[0][s]^bl(f[1],0)]^bl(f[0],0)],n[1][r]=B[1][v[0][v[1][a]^bl(f[1],1)]^bl(f[0],1)],n[2][r]=B[2][v[1][v[0][o]^bl(f[1],2)]^bl(f[0],2)],n[3][r]=B[3][v[1][v[1][c]^bl(f[1],3)]^bl(f[0],3)]}},close:function(){i=[],n=[[],[],[],[]]},encrypt:function(e,n){t=e,r=n;const s=[wl(t,r)^i[0],wl(t,r+4)^i[1],wl(t,r+8)^i[2],wl(t,r+12)^i[3]];for(let e=0;e<8;e++)o(e,s);return ml(t,r,s[2]^i[4]),ml(t,r+4,s[3]^i[5]),ml(t,r+8,s[0]^i[6]),ml(t,r+12,s[1]^i[7]),r+=16,t},decrypt:function(e,n){t=e,r=n;const s=[wl(t,r)^i[4],wl(t,r+4)^i[5],wl(t,r+8)^i[6],wl(t,r+12)^i[7]];for(let e=7;e>=0;e--)c(e,s);ml(t,r,s[2]^i[0]),ml(t,r+4,s[3]^i[1]),ml(t,r+8,s[0]^i[2]),ml(t,r+12,s[1]^i[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function kl(){}function vl(e){this.bf=new kl,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}El.keySize=El.prototype.keySize=32,El.blockSize=El.prototype.blockSize=16,kl.prototype.BLOCKSIZE=8,kl.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],kl.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],kl.prototype.NN=16,kl.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},kl.prototype._F=function(e){let t;const r=255&e,i=255&(e>>>=8),n=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][n],t^=this.sboxes[2][i],t+=this.sboxes[3][r],t},kl.prototype._encryptBlock=function(e){let t,r=e[0],i=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[this.NN+0],i^=this.parray[this.NN+1],e[0]=this._clean(i),e[1]=this._clean(r)},kl.prototype.encryptBlock=function(e){let t;const r=[0,0],i=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+i];this._encryptBlock(r);const n=[];for(t=0;t<this.BLOCKSIZE/2;++t)n[t+0]=r[0]>>>24-8*t&255,n[t+i]=r[1]>>>24-8*t&255;return n},kl.prototype._decryptBlock=function(e){let t,r=e[0],i=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],i=this._F(r)^i;const e=r;r=i,i=e}r^=this.parray[1],i^=this.parray[0],e[0]=this._clean(i),e[1]=this._clean(r)},kl.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let i=0;for(let t=0;t<4;++t)i=i<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^i}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const i=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(i),this.parray[t+0]=i[0],this.parray[t+1]=i[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(i),this.sboxes[t][r+0]=i[0],this.sboxes[t][r+1]=i[1]},vl.keySize=vl.prototype.keySize=16,vl.blockSize=vl.prototype.blockSize=8;const Bl=new Map([[F.symmetric.tripledes,fl],[F.symmetric.cast5,pl],[F.symmetric.blowfish,vl],[F.symmetric.twofish,El]]);var Il=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Bl});const Sl=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),Cl=/* @__PURE__ */new Uint32Array(80);class Kl extends Ph{constructor(){super(64,20,8,!1),this.A=0|Sl[0],this.B=0|Sl[1],this.C=0|Sl[2],this.D=0|Sl[3],this.E=0|Sl[4]}get(){const{A:e,B:t,C:r,D:i,E:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|i,this.E=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Cl[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)Cl[e]=gc(Cl[e-3]^Cl[e-8]^Cl[e-14]^Cl[e-16],1);let{A:r,B:i,C:n,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=Ch(i,n,s),o=1518500249):e<40?(t=i^n^s,o=1859775393):e<60?(t=Kh(i,n,s),o=2400959708):(t=i^n^s,o=3395469782);const c=gc(r,5)+t+a+o+Cl[e]|0;a=s,s=n,n=gc(i,30),i=r,r=c}r=r+this.A|0,i=i+this.B|0,n=n+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,i,n,s,a)}roundClean(){Cl.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Pl=/* @__PURE__ */Ec((()=>new Kl)),Dl=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Ul=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((e,t)=>t))),xl=/* @__PURE__ */Ul.map((e=>(9*e+5)%16));let Ql=[Ul],Rl=[xl];for(let e=0;e<4;e++)for(let t of[Ql,Rl])t.push(t[e].map((e=>Dl[e])));const Ml=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>new Uint8Array(e))),Tl=/* @__PURE__ */Ql.map(((e,t)=>e.map((e=>Ml[t][e])))),Ll=/* @__PURE__ */Rl.map(((e,t)=>e.map((e=>Ml[t][e])))),_l=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),Fl=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]);function Nl(e,t,r,i){return 0===e?t^r^i:1===e?t&r|~t&i:2===e?(t|~r)^i:3===e?t&i|r&~i:t^(r|~i)}const Hl=/* @__PURE__ */new Uint32Array(16);class Ol extends Ph{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:i,h4:n}=this;return[e,t,r,i,n]}set(e,t,r,i,n){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|i,this.h4=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)Hl[r]=e.getUint32(t,!0);let r=0|this.h0,i=r,n=0|this.h1,s=n,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let e=0;e<5;e++){const t=4-e,y=_l[e],f=Fl[e],g=Ql[e],p=Rl[e],d=Tl[e],A=Ll[e];for(let t=0;t<16;t++){const i=gc(r+Nl(e,n,a,c)+Hl[g[t]]+y,d[t])+u|0;r=u,u=c,c=0|gc(a,10),a=n,n=i}for(let e=0;e<16;e++){const r=gc(i+Nl(t,s,o,h)+Hl[p[e]]+f,A[e])+l|0;i=l,l=h,h=0|gc(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+i|0,this.h4+r+s|0,this.h0+n+o|0)}roundClean(){Hl.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const zl=new Map(Object.entries({sha1:Pl,sha224:Th,sha256:Mh,sha384:tu,sha512:eu,sha3_256:ku,sha3_512:vu,ripemd160:/* @__PURE__ */Ec((()=>new Ol))}));var Gl=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:zl});function ql(e,t,r,i){e[t]+=r[i],e[t+1]+=r[i+1]+(e[t]<r[i])}function jl(e,t){e[0]+=t,e[1]+=e[0]<t}function Vl(e,t,r,i,n,s,a,o){ql(e,r,e,i),ql(e,r,t,a);let c=e[s]^e[r],h=e[s+1]^e[r+1];e[s]=h,e[s+1]=c,ql(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=c>>>24^h<<8,e[i+1]=h>>>24^c<<8,ql(e,r,e,i),ql(e,r,t,o),c=e[s]^e[r],h=e[s+1]^e[r+1],e[s]=c>>>16^h<<16,e[s+1]=h>>>16^c<<16,ql(e,n,e,s),c=e[i]^e[n],h=e[i+1]^e[n+1],e[i]=h>>>31^c<<1,e[i+1]=c>>>31^h<<1}const Yl=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),Zl=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function Jl(e,t){const r=new Uint32Array(32),i=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=Yl[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const n=t?4294967295:0;r[28]^=n,r[29]^=n;for(let e=0;e<12;e++){const t=e<<4;Vl(r,i,0,8,16,24,Zl[t+0],Zl[t+1]),Vl(r,i,2,10,18,26,Zl[t+2],Zl[t+3]),Vl(r,i,4,12,20,28,Zl[t+4],Zl[t+5]),Vl(r,i,6,14,22,30,Zl[t+6],Zl[t+7]),Vl(r,i,0,10,20,30,Zl[t+8],Zl[t+9]),Vl(r,i,2,12,22,24,Zl[t+10],Zl[t+11]),Vl(r,i,4,14,16,26,Zl[t+12],Zl[t+13]),Vl(r,i,6,8,18,28,Zl[t+14],Zl[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class Wl{constructor(e,t,r,i){const n=new Uint8Array(64);this.S={b:new Uint8Array(ey),h:new Uint32Array(Xl/4),t0:new Uint32Array(2),c:0,outlen:e},n[0]=e,t&&(n[1]=t.length),n[2]=1,n[3]=1,r&&n.set(r,32),i&&n.set(i,48);const s=new Uint32Array(n.buffer,n.byteOffset,n.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=Yl[e]^s[e];if(t){const e=new Uint8Array(ey);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===ey&&(jl(this.S.t0,this.S.c),Jl(this.S,!1),this.S.c=0);let r=ey-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const i=Math.min(r,e.length-t);this.S.c+=i,t+=i}return this}digest(e){jl(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=ey,Jl(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function $l(e,t,r,i){if(e>Xl)throw Error(`outlen must be at most ${Xl} (given: ${e})`);return new Wl(e,t,r,i)}const Xl=64,ey=128,ty=2,ry=19,iy=4294967295,ny=4,sy=4294967295,ay=8,oy=4294967295,cy=8,hy=4294967295,uy=4294967295,ly=32,yy=1024,fy=64,gy=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function py(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function dy(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let i=t;for(let t=r;t<r+7;t++)e[t]=i,i=(i-e[t])/256;return e}function Ay(e,t,r){const i=new Uint8Array(64),n=new Uint8Array(4+t.length);if(py(n,e,0),n.set(t,4),e<=64)return $l(e).update(n).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)$l(64).update(0===e?n:i).digest(i),r.set(i.subarray(0,32),32*e);const a=new Uint8Array($l(e-32*s).update(i).digest());return r.set(a,32*s),r}function wy(e,t,r,i){return e.fn.XOR(t.byteOffset,r.byteOffset,i.byteOffset),t}function my(e,t,r,i){return e.fn.G(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function by(e,t,r,i){return e.fn.G2(t.byteOffset,r.byteOffset,i.byteOffset,e.refs.gZ.byteOffset),i}function*Ey(e,t,r,i,n,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);dy(c,t,0),dy(c,r,8),dy(c,i,16),dy(c,n,24),dy(c,s,32),dy(c,ty,40);for(let t=1;t<=a;t++){dy(e.refs.prngTmp,t,c.length);const r=by(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}const ky=1024,vy=64*ky;function By(e,{memory:t,instance:r}){if(!gy)throw Error("BigEndian system not supported");const i=function({type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(e,t,r,i)=>{if(t<r||t>i)throw Error(`${e} size should be between ${r} and ${i} bytes`)};if(e!==ty||t!==ry)throw Error("Unsupported type or version");return u("password",i,cy,oy),u("salt",n,ay,sy),u("tag",r,ny,iy),u("memory",c,8*o,hy),s&&u("associated data",s,0,uy),a&&u("secret",a,0,ly),{type:e,version:t,tagLength:r,password:i,salt:n,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:ty,version:ry,...e}),{G:n,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=n,h.G2=s,h.XOR=a;const u=4*i.lanes*Math.floor(i.memorySize/(4*i.lanes)),l=u*yy+10*ky;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/vy);t.grow(e)}let y=0;c.gZ=new Uint8Array(t.buffer,y,yy),y+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,y,yy),y+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,y,yy),y+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,y,1024),y+=c.ZERO1024.length;const f=new Uint32Array(t.buffer,y,2);y+=f.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:h,refs:c},p=new Uint8Array(t.buffer,y,yy);y+=p.length;const d=new Uint8Array(t.buffer,y,i.memorySize*yy),A=new Uint8Array(t.buffer,0,y),w=function(e){const t=$l(fy),r=new Uint8Array(4),i=new Uint8Array(24);py(i,e.lanes,0),py(i,e.tagLength,4),py(i,e.memorySize,8),py(i,e.passes,12),py(i,e.version,16),py(i,e.type,20);const n=[i];e.password?(n.push(py(new Uint8Array(4),e.password.length,0)),n.push(e.password)):n.push(r);e.salt?(n.push(py(new Uint8Array(4),e.salt.length,0)),n.push(e.salt)):n.push(r);e.secret?(n.push(py(new Uint8Array(4),e.secret.length,0)),n.push(e.secret)):n.push(r);e.ad?(n.push(py(new Uint8Array(4),e.ad.length,0)),n.push(e.ad)):n.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let i=0;return e.forEach((e=>{r.set(e,i),i+=e.length})),r}(n));const s=t.digest();return new Uint8Array(s)}(i),m=u/i.lanes,b=Array(i.lanes).fill(null).map((()=>Array(m))),E=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+yy),b[e][t]);for(let e=0;e<i.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),py(t,0,w.length),py(t,e,w.length+4),Ay(yy,t,E(e,0)),py(t,1,w.length),Ay(yy,t,E(e,1))}const k=m/4;for(let e=0;e<i.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let n=0;n<i.lanes;n++){let s=0===t&&0===e?2:0;const a=r?Ey(g,e,n,t,u,i.passes,k,s):null;for(;s<k;s++){const c=t*k+s,h=c>0?b[n][c-1]:b[n][m-1],u=r?a.next().value:h;o(f.byteOffset,u.byteOffset,n,i.lanes,e,t,s,4,k);const l=f[0],y=f[1];0===e&&E(n,c),my(g,h,b[l][y],e>0?p:b[n][c]),e>0&&wy(g,b[n][c],p,b[n][c])}}}const v=b[0][m-1];for(let e=1;e<i.lanes;e++)wy(g,v,v,b[e][m-1]);const B=Ay(i.tagLength,v,new Uint8Array(i.tagLength));return A.fill(0),t.grow(0),B}let Iy;async function Sy(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),i=await async function(e,t,r){const i={env:{memory:e}};if(void 0===Iy)try{const e=await t(i);return Iy=!0,e}catch(e){Iy=!1}return(Iy?t:r)(i)}(r,e,t);return e=>By(e,{instance:i.instance,memory:r})}function Cy(e,t,r,i){return function(e,t,r){var i=WebAssembly.instantiate,n=WebAssembly.compile;return t?i(e,t):n(e)}(Buffer.from(r,"base64"),i)}var Ky=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Sy((e=>Cy(0,0,"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",e)),(e=>Cy(0,0,"AGFzbQEAAAABPwhgBH9/f38AYAABf2AAAGADf39/AGARf39/f39/f39/f39/f39/f38AYAl/f39/f39/f38Bf2ABfwBgAX8BfwITAQNlbnYGbWVtb3J5AgGQCICABAMLCgIDBAAABQEGBwEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwADAkcyAAQFZ2V0TFoABRlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAkJc3RhY2tTYXZlAAYMc3RhY2tSZXN0b3JlAAcKc3RhY2tBbGxvYwAICQcBAEEBCwEACssaCgMAAQtQAQJ/A0AgACAEQQN0IgNqIAIgA2opAwAgASADaikDAIU3AwAgACADQQhyIgNqIAIgA2opAwAgASADaikDAIU3AwAgBEECaiIEQYABRw0ACwveDwICfgF/IAAgAUEDdGoiEyATKQMAIhEgACAFQQN0aiIBKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA1BA3RqIgUgESAFKQMAhUIgiSIRNwMAIAAgCUEDdGoiCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIoiSIRNwMAIBMgESATKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAFIBEgBSkDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgASARIAEpAwCFQgGJNwMAIAAgAkEDdGoiDSANKQMAIhEgACAGQQN0aiICKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA5BA3RqIgYgESAGKQMAhUIgiSIRNwMAIAAgCkEDdGoiCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIoiSIRNwMAIA0gESANKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAKIBEgCikDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAiARIAIpAwCFQgGJNwMAIAAgA0EDdGoiDiAOKQMAIhEgACAHQQN0aiIDKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA9BA3RqIgcgESAHKQMAhUIgiSIRNwMAIAAgC0EDdGoiCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAMgESADKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAHIBEgBykDAIVCMIkiETcDACALIBEgCykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQgGJNwMAIAAgBEEDdGoiDyAPKQMAIhEgACAIQQN0aiIEKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIBBBA3RqIgggESAIKQMAhUIgiSIRNwMAIAAgDEEDdGoiACARIAApAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA8gESAPKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAIIBEgCCkDAIVCMIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIBMgEykDACIRIAIpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAggESAIKQMAhUIgiSIRNwMAIAsgESALKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACACIBEgAikDAIVCKIkiETcDACATIBEgEykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgCCARIAgpAwCFQjCJIhE3AwAgCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIBiTcDACANIA0pAwAiESADKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAFIBEgBSkDAIVCIIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQiiJIhE3AwAgDSARIA0pAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAUgESAFKQMAhUIwiSIRNwMAIAAgESAAKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACADIBEgAykDAIVCAYk3AwAgDiAOKQMAIhEgBCkDACISfCARQgGGQv7///8fgyASQv////8Pg358IhE3AwAgBiARIAYpAwCFQiCJIhE3AwAgCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIA8gDykDACIRIAEpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAcgESAHKQMAhUIgiSIRNwMAIAogESAKKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACABIBEgASkDAIVCKIkiETcDACAPIBEgDykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgByARIAcpAwCFQjCJIhE3AwAgCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIBiTcDAAvdCAEPfwNAIAIgBUEDdCIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAIgBkEIciIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAVBAmoiBUGAAUcNAAsDQCADIARBA3QiAGogACACaikDADcDACADIARBAXIiAEEDdCIBaiABIAJqKQMANwMAIAMgBEECciIBQQN0IgVqIAIgBWopAwA3AwAgAyAEQQNyIgVBA3QiBmogAiAGaikDADcDACADIARBBHIiBkEDdCIHaiACIAdqKQMANwMAIAMgBEEFciIHQQN0IghqIAIgCGopAwA3AwAgAyAEQQZyIghBA3QiCWogAiAJaikDADcDACADIARBB3IiCUEDdCIKaiACIApqKQMANwMAIAMgBEEIciIKQQN0IgtqIAIgC2opAwA3AwAgAyAEQQlyIgtBA3QiDGogAiAMaikDADcDACADIARBCnIiDEEDdCINaiACIA1qKQMANwMAIAMgBEELciINQQN0Ig5qIAIgDmopAwA3AwAgAyAEQQxyIg5BA3QiD2ogAiAPaikDADcDACADIARBDXIiD0EDdCIQaiACIBBqKQMANwMAIAMgBEEOciIQQQN0IhFqIAIgEWopAwA3AwAgAyAEQQ9yIhFBA3QiEmogAiASaikDADcDACADIARB//8DcSAAQf//A3EgAUH//wNxIAVB//8DcSAGQf//A3EgB0H//wNxIAhB//8DcSAJQf//A3EgCkH//wNxIAtB//8DcSAMQf//A3EgDUH//wNxIA5B//8DcSAPQf//A3EgEEH//wNxIBFB//8DcRACIARB8ABJIQAgBEEQaiEEIAANAAtBACEBIANBAEEBQRBBEUEgQSFBMEExQcAAQcEAQdAAQdEAQeAAQeEAQfAAQfEAEAIgA0ECQQNBEkETQSJBI0EyQTNBwgBBwwBB0gBB0wBB4gBB4wBB8gBB8wAQAiADQQRBBUEUQRVBJEElQTRBNUHEAEHFAEHUAEHVAEHkAEHlAEH0AEH1ABACIANBBkEHQRZBF0EmQSdBNkE3QcYAQccAQdYAQdcAQeYAQecAQfYAQfcAEAIgA0EIQQlBGEEZQShBKUE4QTlByABByQBB2ABB2QBB6ABB6QBB+ABB+QAQAiADQQpBC0EaQRtBKkErQTpBO0HKAEHLAEHaAEHbAEHqAEHrAEH6AEH7ABACIANBDEENQRxBHUEsQS1BPEE9QcwAQc0AQdwAQd0AQewAQe0AQfwAQf0AEAIgA0EOQQ9BHkEfQS5BL0E+QT9BzgBBzwBB3gBB3wBB7gBB7wBB/gBB/wAQAgNAIAIgAUEDdCIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAiAAQQhyIgRqIgUgAyAEaikDACAFKQMAhTcDACACIABBEHIiBGoiBSADIARqKQMAIAUpAwCFNwMAIAIgAEEYciIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAUEEaiIBQYABRw0ACwsWACAAIAEgAiADEAMgACACIAIgAxADC3sCAX8BfiACIQkgATUCACEKIAQgBXIEQCABKAIEIANwIQkLIAAgCTYCACAAIAdBAWsgBSAEGyAIbCAGQQFrQQBBfyAGGyACIAlGG2oiASAFQQFqIAhsQQAgBBtqIAGtIAogCn5CIIh+QiCIp0F/c2ogByAIbHA2AgQgAAsEACMACwYAIAAkAAsQACMAIABrQXBxIgAkACAACwUAQYAICw==",e)))});exports.AEADEncryptedDataPacket=io,exports.Argon2OutOfMemoryError=ps,exports.Argon2S2K=ms,exports.CleartextMessage=Wo,exports.CompressedDataPacket=Va,exports.KDFParams=rs,exports.LiteralDataPacket=Ma,exports.MarkerPacket=class{static get tag(){return F.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}},exports.Message=Vo,exports.OnePassSignaturePacket=za,exports.PacketList=qa,exports.PaddingPacket=class{static get tag(){return F.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await gs.random.getRandomBytes(e)}},exports.PrivateKey=No,exports.PublicKey=Fo,exports.PublicKeyEncryptedSessionKeyPacket=no,exports.PublicKeyPacket=oo,exports.PublicSubkeyPacket=uo,exports.SecretKeyPacket=yo,exports.SecretSubkeyPacket=po,exports.Signature=wo,exports.SignaturePacket=Na,exports.Subkey=Ro,exports.SymEncryptedIntegrityProtectedDataPacket=eo,exports.SymEncryptedSessionKeyPacket=ao,exports.SymmetricallyEncryptedDataPacket=ho,exports.TrustPacket=class{static get tag(){return F.packet.trust}read(){throw new ai("Trust packets are not supported")}write(){throw new ai("Trust packets are not supported")}},exports.UnparseablePacket=ci,exports.UserAttributePacket=lo,exports.UserIDPacket=go,exports.armor=ne,exports.config=N,exports.createCleartextMessage=async function({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!O.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new Wo(e)},exports.createMessage=async function({text:e,binary:t,filename:r,date:i=new Date,format:n=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!O.isString(e)&&!O.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!O.isUint8Array(t)&&!O.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=O.isStream(a),h=new Ma(i);void 0!==e?h.setText(a,F.write(F.literal,n)):h.setBytes(a,F.write(F.literal,n)),void 0!==r&&h.setFilename(r);const u=new qa;u.push(h);const l=new Vo(u);return l.fromStream=c,l},exports.decrypt=async function({message:e,decryptionKeys:t,passwords:r,sessionKeys:i,verificationKeys:n,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(rc(h={...N,...h}),$o(e),n=ic(n),t=ic(t),r=ic(r),i=ic(i),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await e.decrypt(t,r,i,c,h);n||(n=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,n,c,h):await u.verify(n,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),sc(l,e),s){if(0===n.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=k([l.data,M((async()=>{await O.anyPromise(l.signatures.map((e=>e.verified)))}))])}return l.data=await nc(l.data),l}catch(e){throw O.wrapError("Error decrypting message",e)}},exports.decryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){rc(r={...N,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=O.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>O.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),O.wrapError("Error decrypting private key",e)}},exports.decryptSessionKeys=async function({message:e,decryptionKeys:t,passwords:r,date:i=new Date,config:n,...s}){if(rc(n={...N,...n}),$o(e),t=ic(t),r=ic(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,i,n)}catch(e){throw O.wrapError("Error decrypting session keys",e)}},exports.encrypt=async function({message:e,encryptionKeys:t,signingKeys:r,passwords:i,sessionKey:n,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:y=[],signatureNotations:f=[],config:g,...p}){if(rc(g={...N,...g}),$o(e),ec(s),t=ic(t),r=ic(r),i=ic(i),c=ic(c),h=ic(h),l=ic(l),y=ic(y),f=ic(f),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,a,c,u,l,f,g)),e=e.compress(await async function(e=[],t=new Date,r=[],i=N){const n=F.compression.uncompressed,s=i.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,n){const a=(await e.getPrimarySelfSignature(t,r[n],i)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:n}(t,u,y,g),g),e=await e.encrypt(t,i,n,o,h,u,y,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await nc(p)}catch(e){throw O.wrapError("Error encrypting message",e)}},exports.encryptKey=async function({privateKey:e,passphrase:t,config:r,...i}){rc(r={...N,...r});const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=O.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:i}=e;await i.encrypt(o[t],r),i.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),O.wrapError("Error encrypting private key",e)}},exports.encryptSessionKey=async function({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:i,passwords:n,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(rc(u={...N,...u}),function(e,t){if(!O.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!O.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),ec(s),i=ic(i),n=ic(n),o=ic(o),h=ic(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const y=Object.keys(l);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(!(i&&0!==i.length||n&&0!==n.length))throw Error("No encryption keys or passwords provided.");try{return ac(await Vo.encryptSessionKey(e,t,r,i,n,a,o,c,h,u),s,u)}catch(e){throw O.wrapError("Error encrypting session key",e)}},exports.enums=F,exports.generateKey=async function({userIDs:e=[],passphrase:t,type:r,curve:i,rsaBits:n=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...y}){rc(l={...N,...l}),r||i?(r=r||"ecc",i=i||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",i="curve25519Legacy"),e=ic(e);const f=Object.keys(y);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&n<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${n}`);const g={userIDs:e,passphrase:t,type:r,rsaBits:n,curve:i,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=Ko(e)).subkeys=e.subkeys.map(((t,r)=>Ko(e.subkeys[r],e)));let r=[bo(e,t)];r=r.concat(e.subkeys.map((e=>mo(e,t))));const i=await Promise.all(r),n=await zo(i[0],i.slice(1),e,t),s=await n.getRevocationCertificate(e.date,t);return n.revocationSignatures=[],{key:n,revocationCertificate:s}}(g,l);return e.getKeys().forEach((({keyPacket:e})=>xo(e,l))),{privateKey:ac(e,u,l),publicKey:"symmetric"!==r?ac(e.toPublic(),u,l):null,revocationCertificate:t}}catch(e){throw O.wrapError("Error generating keypair",e)}},exports.generateSessionKey=async function({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:i,...n}){if(rc(i={...N,...i}),e=ic(e),r=ic(r),n.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Vo.generateSessionKey(e,t,r,i)}catch(e){throw O.wrapError("Error generating session key",e)}},exports.readCleartextMessage=async function({cleartextMessage:e,config:t,...r}){if(t={...N,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!O.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const i=Object.keys(r);if(i.length>0)throw Error("Unknown option: "+i.join(", "));const n=await ie(e);if(n.type!==F.armor.signed)throw Error("No cleartext signed message.");const s=await qa.fromBinary(n.data,Jo,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let i=0;i<t.length;i++)if(t[i].constructor.tag===F.packet.signature&&!e.some(r(t[i])))return!1;return!0},i=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return F.write(F.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));i.push(...e)}})),i.length&&!r(i))throw Error("Hash algorithm mismatch in armor header and signature")}(n.headers,s);const a=new wo(s);return new Wo(n.text,a)},exports.readKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={...N,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!O.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!O.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await ie(e);if(t!==F.armor.publicKey&&t!==F.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await qa.fromBinary(s,Ho,r),o=a.indexOfTag(F.packet.publicKey,F.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Oo(a.slice(o[0],o[1]))},exports.readKeys=async function({armoredKeys:e,binaryKeys:t,config:r,...i}){r={...N,...r};let n=e||t;if(!n)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!O.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!O.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await ie(e);if(t!==F.armor.publicKey&&t!==F.armor.privateKey)throw Error("Armored text not of type key");n=r}const a=[],o=await qa.fromBinary(n,Ho,r),c=o.indexOfTag(F.packet.publicKey,F.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Oo(o.slice(c[e],c[e+1]));a.push(t)}return a},exports.readMessage=async function({armoredMessage:e,binaryMessage:t,config:r,...i}){r={...N,...r};let n=e||t;if(!n)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!O.isString(e)&&!O.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!O.isUint8Array(t)&&!O.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=O.isStream(n);if(e){const{type:e,data:t}=await ie(n);if(e!==F.armor.message)throw Error("Armored text not of type message");n=t}const o=await qa.fromBinary(n,Go,r),c=new Vo(o);return c.fromStream=a,c},exports.readPrivateKey=async function({armoredKey:e,binaryKey:t,config:r,...i}){if(r={...N,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!O.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!O.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const n=Object.keys(i);if(n.length>0)throw Error("Unknown option: "+n.join(", "));let s;if(e){const{type:t,data:r}=await ie(e);if(t!==F.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await qa.fromBinary(s,Ho,r),o=a.indexOfTag(F.packet.publicKey,F.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===F.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new No(t)}throw Error("No secret key packet found")},exports.readPrivateKeys=async function({armoredKeys:e,binaryKeys:t,config:r}){r={...N,...r};let i=e||t;if(!i)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!O.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!O.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await ie(e);if(t!==F.armor.privateKey)throw Error("Armored text not of type private key");i=r}const n=[],s=await qa.fromBinary(i,Ho,r),a=s.indexOfTag(F.packet.publicKey,F.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===F.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new No(t);n.push(r)}if(0===n.length)throw Error("No secret key packet found");return n},exports.readSignature=async function({armoredSignature:e,binarySignature:t,config:r,...i}){r={...N,...r};let n=e||t;if(!n)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!O.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!O.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await ie(n);if(e!==F.armor.signature)throw Error("Armored text not of type signature");n=t}const a=await qa.fromBinary(n,Ao,r);return new wo(a)},exports.reformatKey=async function({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:i=0,date:n,format:s="armored",config:a,...o}){rc(a={...N,...a}),t=ic(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:i,date:n};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const i=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,n={key:i,bind:r},s=await Eo(e.bindingSignatures,i,F.signature.subkeyBinding,n,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&F.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&F.keyFlags.forwardedCommunication}}))));const n=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==n.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await zo(i,n,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=O.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(h,a);return{privateKey:ac(e,s,a),publicKey:ac(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw O.wrapError("Error reformatting keypair",e)}},exports.revokeKey=async function({key:e,revocationCertificate:t,reasonForRevocation:r,date:i=new Date,format:n="armored",config:s,...a}){rc(s={...N,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,i,s):await e.revoke(r,i,s);return a.isPrivate()?{privateKey:ac(a,n,s),publicKey:ac(a.toPublic(),n,s)}:{privateKey:null,publicKey:ac(a,n,s)}}catch(e){throw O.wrapError("Error revoking key",e)}},exports.sign=async function({message:e,signingKeys:t,format:r="armored",detached:i=!1,signingKeyIDs:n=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(rc(c={...N,...c}),Xo(e),ec(r),t=ic(t),n=ic(n),a=ic(a),o=ic(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(e instanceof Wo&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof Wo&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let h;if(h=i?await e.signDetached(t,void 0,n,s,a,o,c):await e.sign(t,void 0,n,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),i&&(h=C(e.packets.write(),(async(e,t)=>{await Promise.all([v(h,t),Q(e).catch((()=>{}))])}))),await nc(h)}catch(e){throw O.wrapError("Error signing message",e)}},exports.unarmor=ie,exports.verify=async function({message:e,verificationKeys:t,expectSigned:r=!1,format:i="utf8",signature:n=null,date:s=new Date,config:a,...o}){if(rc(a={...N,...a}),Xo(e),t=ic(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof Wo&&"binary"===i)throw Error("Can't return cleartext message data as binary");if(e instanceof Wo&&n)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=n?await e.verifyDetached(n,t,s,a):await e.verify(t,s,a),o.data="binary"===i?e.getLiteralData():e.getText(),e.fromStream&&!n&&sc(o,e),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=k([o.data,M((async()=>{await O.anyPromise(o.signatures.map((e=>e.verified)))}))])}return o.data=await nc(o.data),o}catch(e){throw O.wrapError("Error verifying signed message",e)}};
|
|
16
|
+
const iy=BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),sy=BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),ay=BigInt(1),oy=BigInt(2),cy=(e,t)=>(e+t/oy)/t;const hy=Bu(iy,void 0,void 0,{sqrt:function(e){const t=iy,r=BigInt(3),n=BigInt(6),i=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),h=e*e*e%t,u=h*h*e%t,l=mu(u,r,t)*u%t,y=mu(l,r,t)*u%t,f=mu(y,oy,t)*h%t,g=mu(f,i,t)*f%t,p=mu(g,s,t)*g%t,d=mu(p,o,t)*p%t,A=mu(d,c,t)*d%t,w=mu(A,o,t)*p%t,m=mu(w,r,t)*u%t,b=mu(m,a,t)*g%t,E=mu(b,n,t)*h%t,k=mu(E,oy,t);if(!hy.eql(hy.sqr(k),e))throw Error("Cannot find square root");return k}}),uy=Gu({a:BigInt(0),b:BigInt(7),Fp:hy,n:sy,Gx:BigInt("55066263022277343669578718895168534326250603453777594175500187360389116729240"),Gy:BigInt("32670510020758816978083085130507043184471273380659243275938904335757337482424"),h:BigInt(1),lowS:!0,endo:{beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),splitScalar:e=>{const t=sy,r=BigInt("0x3086d221a7d46bcde86c90e49284eb15"),n=-ay*BigInt("0xe4437ed6010e88286f547fa90abfe4c3"),i=BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),s=r,a=BigInt("0x100000000000000000000000000000000"),o=cy(s*e,t),c=cy(-n*e,t);let h=Au(e-o*r-c*i,t),u=Au(-o*n-c*s,t);const l=h>a,y=u>a;if(l&&(h=t-h),y&&(u=t-u),h>a||u>a)throw Error("splitScalar: Endomorphism failed, k="+e);return{k1neg:l,k1:h,k2neg:y,k2:u}}}},Ph);BigInt(0),uy.ProjectivePoint;const ly=Bu(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),yy=Gu({a:ly.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:ly,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Ph),fy=Bu(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),gy=Gu({a:fy.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:fy,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},hl),py=Bu(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),dy=Gu({a:py.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:py,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},cl),Ay=new Map(Object.entries({nistP256:qu,nistP384:ll,nistP521:gl,brainpoolP256r1:yy,brainpoolP384r1:gy,brainpoolP512r1:dy,secp256k1:uy,x448:ny,ed448:ry}));var wy=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:Ay});function my(e,t,r,n,i,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],h=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],u=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],y=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],f=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let g,p,d,A,w,m,b,E,k,v,B=0,I=t.length;const S=32===e.length?3:9;E=3===S?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e){const t=8-e.length%8;let r;if(!(t<8)){if(8===t)return e;throw Error("des: invalid padding")}r=0;const n=new Uint8Array(e.length+t);for(let t=0;t<e.length;t++)n[t]=e[t];for(let i=0;i<t;i++)n[e.length+i]=r;return n}(t),I=t.length);let K=new Uint8Array(I),C=0;for(;B<I;){for(m=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],b=t[B++]<<24|t[B++]<<16|t[B++]<<8|t[B++],d=252645135&(m>>>4^b),b^=d,m^=d<<4,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<S;p+=3){for(k=E[p+1],v=E[p+2],g=E[p];g!==k;g+=v)A=b^e[g],w=(b>>>4|b<<28)^e[g+1],d=m,m=b,b=d^(o[A>>>24&63]|h[A>>>16&63]|l[A>>>8&63]|f[63&A]|a[w>>>24&63]|c[w>>>16&63]|u[w>>>8&63]|y[63&w]);d=m,m=b,b=d}m=m>>>1|m<<31,b=b>>>1|b<<31,d=1431655765&(m>>>1^b),b^=d,m^=d<<1,d=16711935&(b>>>8^m),m^=d,b^=d<<8,d=858993459&(b>>>2^m),m^=d,b^=d<<2,d=65535&(m>>>16^b),b^=d,m^=d<<16,d=252645135&(m>>>4^b),b^=d,m^=d<<4,K[C++]=m>>>24,K[C++]=m>>>16&255,K[C++]=m>>>8&255,K[C++]=255&m,K[C++]=b>>>24,K[C++]=b>>>16&255,K[C++]=b>>>8&255,K[C++]=255&b}return r||(K=function(e){let t,r=null;if(t=0,!r){for(r=1;e[e.length-r]===t;)r++;r--}return e.subarray(0,e.length-r)}(K)),K}function by(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],n=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],i=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],h=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],u=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],y=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],f=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],g=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,d=Array(32*p),A=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let w,m,b,E=0,k=0;for(let v=0;v<p;v++){let p=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++],v=e[E++]<<24|e[E++]<<16|e[E++]<<8|e[E++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)A[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,w=t[p>>>28]|r[p>>>24&15]|n[p>>>20&15]|i[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|h[v>>>24&15]|u[v>>>20&15]|l[v>>>16&15]|y[v>>>12&15]|f[v>>>8&15]|g[v>>>4&15],b=65535&(m>>>16^w),d[k++]=w^b,d[k++]=m^b<<16}return d}function Ey(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return my(by(this.key[2]),my(by(this.key[1]),my(by(this.key[0]),e,!0),!1),!0)}}function ky(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const n=t+e,i=n<<r|n>>>32-r;return(s[0][i>>>24]^s[1][i>>>16&255])-s[2][i>>>8&255]+s[3][255&i]}function n(e,t,r){const n=t^e,i=n<<r|n>>>32-r;return s[0][i>>>24]-s[1][i>>>16&255]+s[2][i>>>8&255]^s[3][255&i]}function i(e,t,r){const n=t-e,i=n<<r|n>>>32-r;return(s[0][i>>>24]+s[1][i>>>16&255]^s[2][i>>>8&255])-s[3][255&i]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const n=[,,,,,,,,],i=Array(32);let a;for(let e=0;e<4;e++)a=4*e,n[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,h=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=n[t[1]],c^=s[4][n[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][n[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][n[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][n[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][n[t[6]>>>2]>>>24-8*(3&t[6])&255],n[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][n[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][n[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][n[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][n[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][n[e[4]>>>2]>>>24-8*(3&e[4])&255],i[h]=c,h++}}for(let e=0;e<16;e++)this.masking[e]=i[e],this.rotate[e]=31&i[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function vy(e){this.cast5=new ky,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}Ey.keySize=Ey.prototype.keySize=24,Ey.blockSize=Ey.prototype.blockSize=8,vy.blockSize=vy.prototype.blockSize=8,vy.keySize=vy.prototype.keySize=16;const By=4294967295;function Iy(e,t){return(e<<t|e>>>32-t)&By}function Sy(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Ky(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function Cy(e,t){return e>>>8*t&255}function Py(e){this.tf=function(){let e=null,t=null,r=-1,n=[],i=[[],[],[],[]];function s(e){return i[0][Cy(e,0)]^i[1][Cy(e,1)]^i[2][Cy(e,2)]^i[3][Cy(e,3)]}function a(e){return i[0][Cy(e,3)]^i[1][Cy(e,0)]^i[2][Cy(e,1)]^i[3][Cy(e,2)]}function o(e,t){let r=s(t[0]),i=a(t[1]);t[2]=Iy(t[2]^r+i+n[4*e+8]&By,31),t[3]=Iy(t[3],1)^r+2*i+n[4*e+9]&By,r=s(t[2]),i=a(t[3]),t[0]=Iy(t[0]^r+i+n[4*e+10]&By,31),t[1]=Iy(t[1],1)^r+2*i+n[4*e+11]&By}function c(e,t){let r=s(t[0]),i=a(t[1]);t[2]=Iy(t[2],1)^r+i+n[4*e+10]&By,t[3]=Iy(t[3]^r+2*i+n[4*e+11]&By,31),r=s(t[2]),i=a(t[3]),t[0]=Iy(t[0],1)^r+i+n[4*e+8]&By,t[1]=Iy(t[1]^r+2*i+n[4*e+9]&By,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const h=[],u=[],l=[];let y;const f=[];let g,p,d;const A=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],w=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],E=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],k=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],B=[[],[],[],[]];function I(e){return e^e>>2^[0,90,180,238][3&e]}function S(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function K(e,t){let r,n,i;for(r=0;r<8;r++)n=t>>>24,t=t<<8&By|e>>>24,e=e<<8&By,i=n<<1,128&n&&(i^=333),t^=n^i<<16,i^=n>>>1,1&n&&(i^=166),t^=i<<24|i<<8;return t}function C(e,t){const r=t>>4,n=15&t,i=A[e][r^n],s=w[e][E[n]^k[r]];return b[e][E[s]^k[i]]<<4|m[e][i^s]}function P(e,t){let r=Cy(e,0),n=Cy(e,1),i=Cy(e,2),s=Cy(e,3);switch(y){case 4:r=v[1][r]^Cy(t[3],0),n=v[0][n]^Cy(t[3],1),i=v[0][i]^Cy(t[3],2),s=v[1][s]^Cy(t[3],3);case 3:r=v[1][r]^Cy(t[2],0),n=v[1][n]^Cy(t[2],1),i=v[0][i]^Cy(t[2],2),s=v[0][s]^Cy(t[2],3);case 2:r=v[0][v[0][r]^Cy(t[1],0)]^Cy(t[0],0),n=v[0][v[1][n]^Cy(t[1],1)]^Cy(t[0],1),i=v[1][v[0][i]^Cy(t[1],2)]^Cy(t[0],2),s=v[1][v[1][s]^Cy(t[1],3)]^Cy(t[0],3)}return B[0][r]^B[1][n]^B[2][i]^B[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=Sy(e,r);for(r=0;r<256;r++)v[0][r]=C(0,r),v[1][r]=C(1,r);for(r=0;r<256;r++)g=v[1][r],p=I(g),d=S(g),B[0][r]=g+(p<<8)+(d<<16)+(d<<24),B[2][r]=p+(d<<8)+(g<<16)+(d<<24),g=v[0][r],p=I(g),d=S(g),B[1][r]=d+(d<<8)+(p<<16)+(g<<24),B[3][r]=p+(g<<8)+(d<<16)+(p<<24);for(y=l.length/2,r=0;r<y;r++)s=l[r+r],h[r]=s,a=l[r+r+1],u[r]=a,f[y-r-1]=K(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=P(s,h),a=Iy(P(a,u),8),n[r]=s+a&By,n[r+1]=Iy(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,y){case 4:s=v[1][s]^Cy(f[3],0),a=v[0][a]^Cy(f[3],1),o=v[0][o]^Cy(f[3],2),c=v[1][c]^Cy(f[3],3);case 3:s=v[1][s]^Cy(f[2],0),a=v[1][a]^Cy(f[2],1),o=v[0][o]^Cy(f[2],2),c=v[0][c]^Cy(f[2],3);case 2:i[0][r]=B[0][v[0][v[0][s]^Cy(f[1],0)]^Cy(f[0],0)],i[1][r]=B[1][v[0][v[1][a]^Cy(f[1],1)]^Cy(f[0],1)],i[2][r]=B[2][v[1][v[0][o]^Cy(f[1],2)]^Cy(f[0],2)],i[3][r]=B[3][v[1][v[1][c]^Cy(f[1],3)]^Cy(f[0],3)]}},close:function(){n=[],i=[[],[],[],[]]},encrypt:function(e,i){t=e,r=i;const s=[Sy(t,r)^n[0],Sy(t,r+4)^n[1],Sy(t,r+8)^n[2],Sy(t,r+12)^n[3]];for(let e=0;e<8;e++)o(e,s);return Ky(t,r,s[2]^n[4]),Ky(t,r+4,s[3]^n[5]),Ky(t,r+8,s[0]^n[6]),Ky(t,r+12,s[1]^n[7]),r+=16,t},decrypt:function(e,i){t=e,r=i;const s=[Sy(t,r)^n[4],Sy(t,r+4)^n[5],Sy(t,r+8)^n[6],Sy(t,r+12)^n[7]];for(let e=7;e>=0;e--)c(e,s);Ky(t,r,s[2]^n[0]),Ky(t,r+4,s[3]^n[1]),Ky(t,r+8,s[0]^n[2]),Ky(t,r+12,s[1]^n[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function Uy(){}function Dy(e){this.bf=new Uy,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}Py.keySize=Py.prototype.keySize=32,Py.blockSize=Py.prototype.blockSize=16,Uy.prototype.BLOCKSIZE=8,Uy.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],Uy.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],Uy.prototype.NN=16,Uy.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},Uy.prototype._F=function(e){let t;const r=255&e,n=255&(e>>>=8),i=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][i],t^=this.sboxes[2][n],t+=this.sboxes[3][r],t},Uy.prototype._encryptBlock=function(e){let t,r=e[0],n=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[this.NN+0],n^=this.parray[this.NN+1],e[0]=this._clean(n),e[1]=this._clean(r)},Uy.prototype.encryptBlock=function(e){let t;const r=[0,0],n=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+n];this._encryptBlock(r);const i=[];for(t=0;t<this.BLOCKSIZE/2;++t)i[t+0]=r[0]>>>24-8*t&255,i[t+n]=r[1]>>>24-8*t&255;return i},Uy.prototype._decryptBlock=function(e){let t,r=e[0],n=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[1],n^=this.parray[0],e[0]=this._clean(n),e[1]=this._clean(r)},Uy.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let n=0;for(let t=0;t<4;++t)n=n<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^n}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const n=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(n),this.parray[t+0]=n[0],this.parray[t+1]=n[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(n),this.sboxes[t][r+0]=n[0],this.sboxes[t][r+1]=n[1]},Dy.keySize=Dy.prototype.keySize=16,Dy.blockSize=Dy.prototype.blockSize=8;const xy=new Map([[H.symmetric.tripledes,Ey],[H.symmetric.cast5,vy],[H.symmetric.blowfish,Dy],[H.symmetric.twofish,Py]]);var Qy=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:xy});const Ry=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878,3285377520]),My=/* @__PURE__ */new Uint32Array(80);class Ly extends vh{constructor(){super(64,20,8,!1),this.A=0|Ry[0],this.B=0|Ry[1],this.C=0|Ry[2],this.D=0|Ry[3],this.E=0|Ry[4]}get(){const{A:e,B:t,C:r,D:n,E:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)My[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)My[e]=yh(My[e-3]^My[e-8]^My[e-14]^My[e-16],1);let{A:r,B:n,C:i,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=Eh(n,i,s),o=1518500249):e<40?(t=n^i^s,o=1859775393):e<60?(t=kh(n,i,s),o=2400959708):(t=n^i^s,o=3395469782);const c=yh(r,5)+t+a+o+My[e]|0;a=s,s=i,i=yh(n,30),n=r,r=c}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,n,i,s,a)}roundClean(){My.fill(0)}destroy(){this.set(0,0,0,0,0),this.buffer.fill(0)}}const Ty=/* @__PURE__ */mh((()=>new Ly)),Fy=/* @__PURE__ */new Uint8Array([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),Ny=/* @__PURE__ */new Uint8Array(Array(16).fill(0).map(((e,t)=>t))),Hy=/* @__PURE__ */Ny.map((e=>(9*e+5)%16));let Oy=[Ny],zy=[Hy];for(let e=0;e<4;e++)for(let t of[Oy,zy])t.push(t[e].map((e=>Fy[e])));const _y=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>new Uint8Array(e))),Gy=/* @__PURE__ */Oy.map(((e,t)=>e.map((e=>_y[t][e])))),jy=/* @__PURE__ */zy.map(((e,t)=>e.map((e=>_y[t][e])))),qy=/* @__PURE__ */new Uint32Array([0,1518500249,1859775393,2400959708,2840853838]),Vy=/* @__PURE__ */new Uint32Array([1352829926,1548603684,1836072691,2053994217,0]);function Zy(e,t,r,n){return 0===e?t^r^n:1===e?t&r|~t&n:2===e?(t|~r)^n:3===e?t&n|r&~n:t^(r|~n)}const Wy=/* @__PURE__ */new Uint32Array(16);class Yy extends vh{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:n,h4:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|n,this.h4=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)Wy[r]=e.getUint32(t,!0);let r=0|this.h0,n=r,i=0|this.h1,s=i,a=0|this.h2,o=a,c=0|this.h3,h=c,u=0|this.h4,l=u;for(let e=0;e<5;e++){const t=4-e,y=qy[e],f=Vy[e],g=Oy[e],p=zy[e],d=Gy[e],A=jy[e];for(let t=0;t<16;t++){const n=yh(r+Zy(e,i,a,c)+Wy[g[t]]+y,d[t])+u|0;r=u,u=c,c=0|yh(a,10),a=i,i=n}for(let e=0;e<16;e++){const r=yh(n+Zy(t,s,o,h)+Wy[p[e]]+f,A[e])+l|0;n=l,l=h,h=0|yh(o,10),o=s,s=r}}this.set(this.h1+a+h|0,this.h2+c+l|0,this.h3+u+n|0,this.h4+r+s|0,this.h0+i+o|0)}roundClean(){Wy.fill(0)}destroy(){this.destroyed=!0,this.buffer.fill(0),this.set(0,0,0,0,0)}}const Jy=new Map(Object.entries({sha1:Ty,sha224:Uh,sha256:Ph,sha384:hl,sha512:cl,sha3_256:Ul,sha3_512:Dl,ripemd160:/* @__PURE__ */mh((()=>new Yy))}));var $y=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Jy});function Xy(e,t,r,n){e[t]+=r[n],e[t+1]+=r[n+1]+(e[t]<r[n])}function ef(e,t){e[0]+=t,e[1]+=e[0]<t}function tf(e,t,r,n,i,s,a,o){Xy(e,r,e,n),Xy(e,r,t,a);let c=e[s]^e[r],h=e[s+1]^e[r+1];e[s]=h,e[s+1]=c,Xy(e,i,e,s),c=e[n]^e[i],h=e[n+1]^e[i+1],e[n]=c>>>24^h<<8,e[n+1]=h>>>24^c<<8,Xy(e,r,e,n),Xy(e,r,t,o),c=e[s]^e[r],h=e[s+1]^e[r+1],e[s]=c>>>16^h<<16,e[s+1]=h>>>16^c<<16,Xy(e,i,e,s),c=e[n]^e[i],h=e[n+1]^e[i+1],e[n]=h>>>31^c<<1,e[n+1]=c>>>31^h<<1}const rf=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),nf=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function sf(e,t){const r=new Uint32Array(32),n=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=rf[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const i=t?4294967295:0;r[28]^=i,r[29]^=i;for(let e=0;e<12;e++){const t=e<<4;tf(r,n,0,8,16,24,nf[t+0],nf[t+1]),tf(r,n,2,10,18,26,nf[t+2],nf[t+3]),tf(r,n,4,12,20,28,nf[t+4],nf[t+5]),tf(r,n,6,14,22,30,nf[t+6],nf[t+7]),tf(r,n,0,10,20,30,nf[t+8],nf[t+9]),tf(r,n,2,12,22,24,nf[t+10],nf[t+11]),tf(r,n,4,14,16,26,nf[t+12],nf[t+13]),tf(r,n,6,8,18,28,nf[t+14],nf[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class af{constructor(e,t,r,n){const i=new Uint8Array(64);this.S={b:new Uint8Array(hf),h:new Uint32Array(cf/4),t0:new Uint32Array(2),c:0,outlen:e},i[0]=e,t&&(i[1]=t.length),i[2]=1,i[3]=1,r&&i.set(r,32),n&&i.set(n,48);const s=new Uint32Array(i.buffer,i.byteOffset,i.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=rf[e]^s[e];if(t){const e=new Uint8Array(hf);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===hf&&(ef(this.S.t0,this.S.c),sf(this.S,!1),this.S.c=0);let r=hf-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const n=Math.min(r,e.length-t);this.S.c+=n,t+=n}return this}digest(e){ef(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=hf,sf(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function of(e,t,r,n){if(e>cf)throw Error(`outlen must be at most ${cf} (given: ${e})`);return new af(e,t,r,n)}const cf=64,hf=128,uf=2,lf=19,yf=4294967295,ff=4,gf=4294967295,pf=8,df=4294967295,Af=8,wf=4294967295,mf=4294967295,bf=32,Ef=1024,kf=64,vf=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function Bf(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function If(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let n=t;for(let t=r;t<r+7;t++)e[t]=n,n=(n-e[t])/256;return e}function Sf(e,t,r){const n=new Uint8Array(64),i=new Uint8Array(4+t.length);if(Bf(i,e,0),i.set(t,4),e<=64)return of(e).update(i).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)of(64).update(0===e?i:n).digest(n),r.set(n.subarray(0,32),32*e);const a=new Uint8Array(of(e-32*s).update(n).digest());return r.set(a,32*s),r}function Kf(e,t,r,n){return e.fn.XOR(t.byteOffset,r.byteOffset,n.byteOffset),t}function Cf(e,t,r,n){return e.fn.G(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function Pf(e,t,r,n){return e.fn.G2(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function*Uf(e,t,r,n,i,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);If(c,t,0),If(c,r,8),If(c,n,16),If(c,i,24),If(c,s,32),If(c,uf,40);for(let t=1;t<=a;t++){If(e.refs.prngTmp,t,c.length);const r=Pf(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}const Df=1024,xf=64*Df;function Qf(e,{memory:t,instance:r}){if(!vf)throw Error("BigEndian system not supported");const n=function({type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,parallelism:o,memorySize:c,passes:h}){const u=(e,t,r,n)=>{if(t<r||t>n)throw Error(`${e} size should be between ${r} and ${n} bytes`)};if(e!==uf||t!==lf)throw Error("Unsupported type or version");return u("password",n,Af,df),u("salt",i,pf,gf),u("tag",r,ff,yf),u("memory",c,8*o,wf),s&&u("associated data",s,0,mf),a&&u("secret",a,0,bf),{type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,lanes:o,memorySize:c,passes:h}}({type:uf,version:lf,...e}),{G:i,G2:s,xor:a,getLZ:o}=r.exports,c={},h={};h.G=i,h.G2=s,h.XOR=a;const u=4*n.lanes*Math.floor(n.memorySize/(4*n.lanes)),l=u*Ef+10*Df;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/xf);t.grow(e)}let y=0;c.gZ=new Uint8Array(t.buffer,y,Ef),y+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,y,Ef),y+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,y,Ef),y+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,y,1024),y+=c.ZERO1024.length;const f=new Uint32Array(t.buffer,y,2);y+=f.length*Uint32Array.BYTES_PER_ELEMENT;const g={fn:h,refs:c},p=new Uint8Array(t.buffer,y,Ef);y+=p.length;const d=new Uint8Array(t.buffer,y,n.memorySize*Ef),A=new Uint8Array(t.buffer,0,y),w=function(e){const t=of(kf),r=new Uint8Array(4),n=new Uint8Array(24);Bf(n,e.lanes,0),Bf(n,e.tagLength,4),Bf(n,e.memorySize,8),Bf(n,e.passes,12),Bf(n,e.version,16),Bf(n,e.type,20);const i=[n];e.password?(i.push(Bf(new Uint8Array(4),e.password.length,0)),i.push(e.password)):i.push(r);e.salt?(i.push(Bf(new Uint8Array(4),e.salt.length,0)),i.push(e.salt)):i.push(r);e.secret?(i.push(Bf(new Uint8Array(4),e.secret.length,0)),i.push(e.secret)):i.push(r);e.ad?(i.push(Bf(new Uint8Array(4),e.ad.length,0)),i.push(e.ad)):i.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach((e=>{r.set(e,n),n+=e.length})),r}(i));const s=t.digest();return new Uint8Array(s)}(n),m=u/n.lanes,b=Array(n.lanes).fill(null).map((()=>Array(m))),E=(e,t)=>(b[e][t]=d.subarray(e*m*1024+1024*t,e*m*1024+1024*t+Ef),b[e][t]);for(let e=0;e<n.lanes;e++){const t=new Uint8Array(w.length+8);t.set(w),Bf(t,0,w.length),Bf(t,e,w.length+4),Sf(Ef,t,E(e,0)),Bf(t,1,w.length),Sf(Ef,t,E(e,1))}const k=m/4;for(let e=0;e<n.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let i=0;i<n.lanes;i++){let s=0===t&&0===e?2:0;const a=r?Uf(g,e,i,t,u,n.passes,k,s):null;for(;s<k;s++){const c=t*k+s,h=c>0?b[i][c-1]:b[i][m-1],u=r?a.next().value:h;o(f.byteOffset,u.byteOffset,i,n.lanes,e,t,s,4,k);const l=f[0],y=f[1];0===e&&E(i,c),Cf(g,h,b[l][y],e>0?p:b[i][c]),e>0&&Kf(g,b[i][c],p,b[i][c])}}}const v=b[0][m-1];for(let e=1;e<n.lanes;e++)Kf(g,v,v,b[e][m-1]);const B=Sf(n.tagLength,v,new Uint8Array(n.tagLength));return A.fill(0),t.grow(0),B}let Rf;async function Mf(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),n=await async function(e,t,r){const n={env:{memory:e}};if(void 0===Rf)try{const e=await t(n);return Rf=!0,e}catch(e){Rf=!1}return(Rf?t:r)(n)}(r,e,t);return e=>Qf(e,{instance:n.instance,memory:r})}function Lf(e,t,r,n){return function(e,t){var r=WebAssembly.instantiate,n=WebAssembly.compile;return t?r(e,t):n(e)}(Buffer.from(r,"base64"),n)}var Tf=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Mf((e=>Lf(0,0,"AGFzbQEAAAABKwdgBH9/f38AYAABf2AAAGADf39/AGAJf39/f39/f39/AX9gAX8AYAF/AX8CEwEDZW52Bm1lbW9yeQIBkAiAgAQDCgkCAwAABAEFBgEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwACAkcyAAMFZ2V0TFoABBlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAgJc3RhY2tTYXZlAAUMc3RhY2tSZXN0b3JlAAYKc3RhY2tBbGxvYwAHCQcBAEEBCwEACs0gCQMAAQtYAQJ/A0AgACAEQQR0IgNqIAIgA2r9AAQAIAEgA2r9AAQA/VH9CwQAIAAgA0EQciIDaiACIANq/QAEACABIANq/QAEAP1R/QsEACAEQQJqIgRBwABHDQALC7ceAgt7A38DQCADIBFBBHQiD2ogASAPav0ABAAgACAPav0ABAD9USIF/QsEACACIA9qIAX9CwQAIAMgD0EQciIPaiABIA9q/QAEACAAIA9q/QAEAP1RIgX9CwQAIAIgD2ogBf0LBAAgEUECaiIRQcAARw0ACwNAIAMgEEEHdGoiAEEQaiAA/QAEcCAA/QAEMCIFIAD9AAQQIgT9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAQgBP0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9USIJQSD9ywEgCUEg/c0B/VAiCSAA/QAEUCIG/c4BIAkgCf0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIGIAX9USIFQSj9ywEgBUEY/c0B/VAiCCAE/c4BIAggCP0NAAECAwgJCgsAAQIDCAkKCyAEIAT9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIKIAogCf1RIgVBMP3LASAFQRD9zQH9UCIFIAb9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgkgCP1RIgRBAf3LASAEQT/9zQH9UCIMIAD9AARgIAD9AAQgIgQgAP0ABAAiBv3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBv1RIghBIP3LASAIQSD9zQH9UCIIIABBQGsiAf0ABAAiB/3OASAIIAj9DQABAgMICQoLAAECAwgJCgsgByAH/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiByAE/VEiBEEo/csBIARBGP3NAf1QIgsgBv3OASALIAv9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAI/VEiBEEw/csBIARBEP3NAf1QIgQgB/3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgByAH/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCCAL/VEiB0EB/csBIAdBP/3NAf1QIg0gDf0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eHyIH/c4BIAcgB/0NAAECAwgJCgsAAQIDCAkKCyAKIAr9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIKIAQgBSAF/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/VEiC0Eg/csBIAtBIP3NAf1QIgsgCP3OASALIAv9DQABAgMICQoLAAECAwgJCgsgCCAI/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCCAH/VEiB0Eo/csBIAdBGP3NAf1QIgcgCv3OASAHIAf9DQABAgMICQoLAAECAwgJCgsgCiAK/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiDv0LBAAgACAGIA0gDCAM/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4fIgr9zgEgCiAK/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgYgBSAEIAT9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9USIFQSD9ywEgBUEg/c0B/VAiBSAJ/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAJIAn9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJIAr9USIEQSj9ywEgBEEY/c0B/VAiCiAG/c4BIAogCv0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIE/QsEACAAIAQgBf1RIgVBMP3LASAFQRD9zQH9UCIFIA4gC/1RIgRBMP3LASAEQRD9zQH9UCIEIAT9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwRgIAAgBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwRwIAEgBCAI/c4BIAQgBP0NAAECAwgJCgsAAQIDCAkKCyAIIAj9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIE/QsEACAAIAUgCf3OASAFIAX9DQABAgMICQoLAAECAwgJCgsgCSAJ/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCf0LBFAgACAEIAf9USIFQQH9ywEgBUE//c0B/VAiBSAJIAr9USIEQQH9ywEgBEE//c0B/VAiBCAE/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEICAAIAQgBSAF/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEMCAQQQFqIhBBCEcNAAtBACEQA0AgAyAQQQR0aiIAQYABaiAA/QAEgAcgAP0ABIADIgUgAP0ABIABIgT9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAQgBP0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9USIJQSD9ywEgCUEg/c0B/VAiCSAA/QAEgAUiBv3OASAJIAn9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAF/VEiBUEo/csBIAVBGP3NAf1QIgggBP3OASAIIAj9DQABAgMICQoLAAECAwgJCgsgBCAE/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCiAKIAn9USIFQTD9ywEgBUEQ/c0B/VAiBSAG/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJIAj9USIEQQH9ywEgBEE//c0B/VAiDCAA/QAEgAYgAP0ABIACIgQgAP0ABAAiBv3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBv1RIghBIP3LASAIQSD9zQH9UCIIIAD9AASABCIH/c4BIAggCP0NAAECAwgJCgsAAQIDCAkKCyAHIAf9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIHIAT9USIEQSj9ywEgBEEY/c0B/VAiCyAG/c4BIAsgC/0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIGIAj9USIEQTD9ywEgBEEQ/c0B/VAiBCAH/c4BIAQgBP0NAAECAwgJCgsAAQIDCAkKCyAHIAf9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIIIAv9USIHQQH9ywEgB0E//c0B/VAiDSAN/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4fIgf9zgEgByAH/Q0AAQIDCAkKCwABAgMICQoLIAogCv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgogBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9USILQSD9ywEgC0Eg/c0B/VAiCyAI/c4BIAsgC/0NAAECAwgJCgsAAQIDCAkKCyAIIAj9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIIIAf9USIHQSj9ywEgB0EY/c0B/VAiByAK/c4BIAcgB/0NAAECAwgJCgsAAQIDCAkKCyAKIAr9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIO/QsEACAAIAYgDSAMIAz9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh8iCv3OASAKIAr9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAFIAQgBP0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/1RIgVBIP3LASAFQSD9zQH9UCIFIAn9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAkgCf0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgkgCv1RIgRBKP3LASAEQRj9zQH9UCIKIAb9zgEgCiAK/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9CwQAIAAgBCAF/VEiBUEw/csBIAVBEP3NAf1QIgUgDiAL/VEiBEEw/csBIARBEP3NAf1QIgQgBP0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/0LBIAGIAAgBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwSAByAAIAQgCP3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgCCAI/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBP0LBIAEIAAgBSAJ/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAJIAn9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJ/QsEgAUgACAEIAf9USIFQQH9ywEgBUE//c0B/VAiBSAJIAr9USIEQQH9ywEgBEE//c0B/VAiBCAE/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEgAIgACAEIAUgBf0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/0LBIADIBBBAWoiEEEIRw0AC0EAIRADQCACIBBBBHQiAGoiASAAIANq/QAEACAB/QAEAP1R/QsEACACIABBEHIiAWoiDyABIANq/QAEACAP/QAEAP1R/QsEACACIABBIHIiAWoiDyABIANq/QAEACAP/QAEAP1R/QsEACACIABBMHIiAGoiASAAIANq/QAEACAB/QAEAP1R/QsEACAQQQRqIhBBwABHDQALCxYAIAAgASACIAMQAiAAIAIgAiADEAILewIBfwF+IAIhCSABNQIAIQogBCAFcgRAIAEoAgQgA3AhCQsgACAJNgIAIAAgB0EBayAFIAQbIAhsIAZBAWtBAEF/IAYbIAIgCUYbaiIBIAVBAWogCGxBACAEG2ogAa0gCiAKfkIgiH5CIIinQX9zaiAHIAhscDYCBCAACwQAIwALBgAgACQACxAAIwAgAGtBcHEiACQAIAALBQBBgAgL",e)),(e=>Lf(0,0,"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",e)))});exports.AEADEncryptedDataPacket=rc,exports.Argon2OutOfMemoryError=fa,exports.Argon2S2K=Aa,exports.CleartextMessage=Wc,exports.CompressedDataPacket=qo,exports.KDFParams=ea,exports.LiteralDataPacket=Ro,exports.MarkerPacket=class{static get tag(){return H.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}},exports.Message=jc,exports.OnePassSignaturePacket=zo,exports.PacketList=Go,exports.PaddingPacket=class{static get tag(){return H.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await ya.random.getRandomBytes(e)}},exports.PrivateKey=Fc,exports.PublicKey=Tc,exports.PublicKeyEncryptedSessionKeyPacket=nc,exports.PublicKeyPacket=ac,exports.PublicSubkeyPacket=hc,exports.SecretKeyPacket=lc,exports.SecretSubkeyPacket=gc,exports.Signature=dc,exports.SignaturePacket=No,exports.Subkey=xc,exports.SymEncryptedIntegrityProtectedDataPacket=Xo,exports.SymEncryptedSessionKeyPacket=sc,exports.SymmetricallyEncryptedDataPacket=cc,exports.TrustPacket=class{static get tag(){return H.packet.trust}read(){throw new $n("Trust packets are not supported")}write(){throw new $n("Trust packets are not supported")}},exports.UnparseablePacket=ei,exports.UserAttributePacket=uc,exports.UserIDPacket=fc,exports.armor=se,exports.config=O,exports.createCleartextMessage=async function({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!_.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new Wc(e)},exports.createMessage=async function({text:e,binary:t,filename:r,date:n=new Date,format:i=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!_.isString(e)&&!_.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!_.isUint8Array(t)&&!_.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=_.isStream(a),h=new Ro(n);void 0!==e?h.setText(a,H.write(H.literal,i)):h.setBytes(a,H.write(H.literal,i)),void 0!==r&&h.setFilename(r);const u=new Go;u.push(h);const l=new jc(u);return l.fromStream=c,l},exports.decrypt=async function({message:e,decryptionKeys:t,passwords:r,sessionKeys:n,verificationKeys:i,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:h,...u}){if(eh(h={...O,...h}),Yc(e),i=th(i),t=th(t),r=th(r),n=th(n),u.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(u.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(u);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const u=await e.decrypt(t,r,n,c,h);i||(i=[]);const l={};if(l.signatures=o?await u.verifyDetached(o,i,c,h):await u.verify(i,c,h),l.data="binary"===a?u.getLiteralData():u.getText(),l.filename=u.getFilename(),nh(l,e),s){if(0===i.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=v([l.data,L((async()=>{await _.anyPromise(l.signatures.map((e=>e.verified)))}))])}return l.data=await rh(l.data),l}catch(e){throw _.wrapError("Error decrypting message",e)}},exports.decryptKey=async function({privateKey:e,passphrase:t,config:r,...n}){eh(r={...O,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=_.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>_.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),_.wrapError("Error decrypting private key",e)}},exports.decryptSessionKeys=async function({message:e,decryptionKeys:t,passwords:r,date:n=new Date,config:i,...s}){if(eh(i={...O,...i}),Yc(e),t=th(t),r=th(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,n,i)}catch(e){throw _.wrapError("Error decrypting session keys",e)}},exports.encrypt=async function({message:e,encryptionKeys:t,signingKeys:r,passwords:n,sessionKey:i,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:h=[],date:u=new Date,signingUserIDs:l=[],encryptionUserIDs:y=[],signatureNotations:f=[],config:g,...p}){if(eh(g={...O,...g}),Yc(e),$c(s),t=th(t),r=th(r),n=th(n),c=th(c),h=th(h),l=th(l),y=th(y),f=th(f),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const d=Object.keys(p);if(d.length>0)throw Error("Unknown option: "+d.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,a,c,u,l,f,g)),e=e.compress(await async function(e=[],t=new Date,r=[],n=O){const i=H.compression.uncompressed,s=n.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,i){const a=(await e.getPrimarySelfSignature(t,r[i],n)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:i}(t,u,y,g),g),e=await e.encrypt(t,n,i,o,h,u,y,g),"object"===s)return e;const p="armored"===s?e.armor(g):e.write();return await rh(p)}catch(e){throw _.wrapError("Error encrypting message",e)}},exports.encryptKey=async function({privateKey:e,passphrase:t,config:r,...n}){eh(r={...O,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=_.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:n}=e;await n.encrypt(o[t],r),n.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),_.wrapError("Error encrypting private key",e)}},exports.encryptSessionKey=async function({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:n,passwords:i,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:h=[],config:u,...l}){if(eh(u={...O,...u}),function(e){if(!_.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!_.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),$c(s),n=th(n),i=th(i),o=th(o),h=th(h),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const y=Object.keys(l);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(!(n&&0!==n.length||i&&0!==i.length))throw Error("No encryption keys or passwords provided.");try{return ih(await jc.encryptSessionKey(e,t,r,n,i,a,o,c,h,u),s,u)}catch(e){throw _.wrapError("Error encrypting session key",e)}},exports.enums=H,exports.generateKey=async function({userIDs:e=[],passphrase:t,type:r,curve:n,rsaBits:i=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:h=[{}],format:u="armored",config:l,...y}){eh(l={...O,...l}),r||n?(r=r||"ecc",n=n||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",n="curve25519Legacy"),e=th(e);const f=Object.keys(y);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&i<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${i}`);const g={userIDs:e,passphrase:t,type:r,rsaBits:i,curve:n,keyExpirationTime:o,date:c,subkeys:h,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=Sc(e)).subkeys=e.subkeys.map(((t,r)=>Sc(e.subkeys[r],e)));let r=[wc(e,t)];r=r.concat(e.subkeys.map((e=>Ac(e,t))));const n=await Promise.all(r),i=await Oc(n[0],n.slice(1),e,t),s=await i.getRevocationCertificate(e.date,t);return i.revocationSignatures=[],{key:i,revocationCertificate:s}}(g,l);return e.getKeys().forEach((({keyPacket:e})=>Uc(e,l))),{privateKey:ih(e,u,l),publicKey:"symmetric"!==r?ih(e.toPublic(),u,l):null,revocationCertificate:t}}catch(e){throw _.wrapError("Error generating keypair",e)}},exports.generateSessionKey=async function({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:n,...i}){if(eh(n={...O,...n}),e=th(e),r=th(r),i.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await jc.generateSessionKey(e,t,r,n)}catch(e){throw _.wrapError("Error generating session key",e)}},exports.readCleartextMessage=async function({cleartextMessage:e,config:t,...r}){if(t={...O,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!_.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const n=Object.keys(r);if(n.length>0)throw Error("Unknown option: "+n.join(", "));const i=await ie(e);if(i.type!==H.armor.signed)throw Error("No cleartext signed message.");const s=await Go.fromBinary(i.data,Zc,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let n=0;n<t.length;n++)if(t[n].constructor.tag===H.packet.signature&&!e.some(r(t[n])))return!1;return!0},n=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return H.write(H.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));n.push(...e)}})),n.length&&!r(n))throw Error("Hash algorithm mismatch in armor header and signature")}(i.headers,s);const a=new dc(s);return new Wc(i.text,a)},exports.readKey=async function({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...O,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!_.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!_.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await ie(e);if(t!==H.armor.publicKey&&t!==H.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await Go.fromBinary(s,Nc,r),o=a.indexOfTag(H.packet.publicKey,H.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Hc(a.slice(o[0],o[1]))},exports.readKeys=async function({armoredKeys:e,binaryKeys:t,config:r,...n}){r={...O,...r};let i=e||t;if(!i)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!_.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!_.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await ie(e);if(t!==H.armor.publicKey&&t!==H.armor.privateKey)throw Error("Armored text not of type key");i=r}const a=[],o=await Go.fromBinary(i,Nc,r),c=o.indexOfTag(H.packet.publicKey,H.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Hc(o.slice(c[e],c[e+1]));a.push(t)}return a},exports.readMessage=async function({armoredMessage:e,binaryMessage:t,config:r,...n}){r={...O,...r};let i=e||t;if(!i)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!_.isString(e)&&!_.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!_.isUint8Array(t)&&!_.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=_.isStream(i);if(e){const{type:e,data:t}=await ie(i);if(e!==H.armor.message)throw Error("Armored text not of type message");i=t}const o=await Go.fromBinary(i,zc,r),c=new jc(o);return c.fromStream=a,c},exports.readPrivateKey=async function({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...O,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!_.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!_.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await ie(e);if(t!==H.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await Go.fromBinary(s,Nc,r),o=a.indexOfTag(H.packet.publicKey,H.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===H.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new Fc(t)}throw Error("No secret key packet found")},exports.readPrivateKeys=async function({armoredKeys:e,binaryKeys:t,config:r}){r={...O,...r};let n=e||t;if(!n)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!_.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!_.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await ie(e);if(t!==H.armor.privateKey)throw Error("Armored text not of type private key");n=r}const i=[],s=await Go.fromBinary(n,Nc,r),a=s.indexOfTag(H.packet.publicKey,H.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===H.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new Fc(t);i.push(r)}if(0===i.length)throw Error("No secret key packet found");return i},exports.readSignature=async function({armoredSignature:e,binarySignature:t,config:r,...n}){r={...O,...r};let i=e||t;if(!i)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!_.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!_.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await ie(i);if(e!==H.armor.signature)throw Error("Armored text not of type signature");i=t}const a=await Go.fromBinary(i,pc,r);return new dc(a)},exports.reformatKey=async function({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:n=0,date:i,format:s="armored",config:a,...o}){eh(a={...O,...a}),t=th(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const h={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:n,date:i};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const n=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,i={key:n,bind:r},s=await mc(e.bindingSignatures,n,H.signature.subkeyBinding,i,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&H.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&H.keyFlags.forwardedCommunication}}))));const i=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==i.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await Oc(n,i,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=_.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(h,a);return{privateKey:ih(e,s,a),publicKey:ih(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw _.wrapError("Error reformatting keypair",e)}},exports.revokeKey=async function({key:e,revocationCertificate:t,reasonForRevocation:r,date:n=new Date,format:i="armored",config:s,...a}){eh(s={...O,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,n,s):await e.revoke(r,n,s);return a.isPrivate()?{privateKey:ih(a,i,s),publicKey:ih(a.toPublic(),i,s)}:{privateKey:null,publicKey:ih(a,i,s)}}catch(e){throw _.wrapError("Error revoking key",e)}},exports.sign=async function({message:e,signingKeys:t,format:r="armored",detached:n=!1,signingKeyIDs:i=[],date:s=new Date,signingUserIDs:a=[],signatureNotations:o=[],config:c,...h}){if(eh(c={...O,...c}),Jc(e),$c(r),t=th(t),i=th(i),a=th(a),o=th(o),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==h.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const u=Object.keys(h);if(u.length>0)throw Error("Unknown option: "+u.join(", "));if(e instanceof Wc&&"binary"===r)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof Wc&&n)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let h;if(h=n?await e.signDetached(t,void 0,i,s,a,o,c):await e.sign(t,void 0,i,s,a,o,c),"object"===r)return h;return h="armored"===r?h.armor(c):h.write(),n&&(h=C(e.packets.write(),(async(e,t)=>{await Promise.all([B(h,t),R(e).catch((()=>{}))])}))),await rh(h)}catch(e){throw _.wrapError("Error signing message",e)}},exports.unarmor=ie,exports.verify=async function({message:e,verificationKeys:t,expectSigned:r=!1,format:n="utf8",signature:i=null,date:s=new Date,config:a,...o}){if(eh(a={...O,...a}),Jc(e),t=th(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof Wc&&"binary"===n)throw Error("Can't return cleartext message data as binary");if(e instanceof Wc&&i)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=i?await e.verifyDetached(i,t,s,a):await e.verify(t,s,a),o.data="binary"===n?e.getLiteralData():e.getText(),e.fromStream&&!i&&nh(o,e),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=v([o.data,L((async()=>{await _.anyPromise(o.signatures.map((e=>e.verified)))}))])}return o.data=await rh(o.data),o}catch(e){throw _.wrapError("Error verifying signed message",e)}};
|
|
15
17
|
//# sourceMappingURL=openpgp.min.cjs.map
|