@protontech/openpgp 6.2.2 → 6.3.0

package/dist/node/openpgp.min.mjs

@@ -1,16 +1,16 @@
-/*! OpenPGP.js v6.2.2 - 2025-09-02 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
-const e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};import{createRequire as t}from"module";import*as r from"node:crypto";function n(e,t){return t.forEach((function(t){t&&"string"!=typeof t&&!Array.isArray(t)&&Object.keys(t).forEach((function(r){if("default"!==r&&!(r in e)){var n=Object.getOwnPropertyDescriptor(t,r);Object.defineProperty(e,r,n.get?n:{enumerable:!0,get:function(){return t[r]}})}}))})),Object.freeze(e)}const i=Symbol("doneWritingPromise"),s=Symbol("doneWritingResolve"),a=Symbol("doneWritingReject"),o=Symbol("readingIndex");class ArrayStream extends Array{constructor(){super(),Object.setPrototypeOf(this,ArrayStream.prototype),this[i]=new Promise(((e,t)=>{this[s]=e,this[a]=t})),this[i].catch((()=>{}))}}function c(e){return e&&e.getReader&&Array.isArray(e)}function u(e){if(!c(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function h(t){if(c(t))return"array";if(e.ReadableStream&&e.ReadableStream.prototype.isPrototypeOf(t))return"web";if(t&&!(e.ReadableStream&&t instanceof e.ReadableStream)&&"function"==typeof t._read&&"object"==typeof t._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!t||!t.getReader)&&"web-like"}function l(e){return Uint8Array.prototype.isPrototypeOf(e)}function f(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!l(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach((function(e){r.set(e,n),n+=e.length})),r}ArrayStream.prototype.getReader=function(){return void 0===this[o]&&(this[o]=0),{read:async()=>(await this[i],this[o]===this.length?{value:void 0,done:!0}:{value:this[this[o]++],done:!1})}},ArrayStream.prototype.readToEnd=async function(e){await this[i];const t=e(this.slice(this[o]));return this.length=0,t},ArrayStream.prototype.clone=function(){const e=new ArrayStream;return e[i]=this[i].then((()=>{e.push(...this)})),e},u.prototype.write=async function(e){this.stream.push(e)},u.prototype.close=async function(){this.stream[s]()},u.prototype.abort=async function(e){return this.stream[a](e),e},u.prototype.releaseLock=function(){},"object"==typeof e.process&&e.process.versions;const y=new WeakSet,p=Symbol("externalBuffer");function d(e){if(this.stream=e,e[p]&&(this[p]=e[p].slice()),c(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(h(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||y.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{y.add(e)}catch(e){}}}function g(e){return h(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function w(e){if(h(e))return e;const t=new ArrayStream;return(async()=>{const r=Q(t);await r.write(e),await r.close()})(),t}function A(e){return e.some((e=>h(e)&&!c(e)))?function(e){e=e.map(g);const t=k((async function(e){await Promise.all(n.map((t=>P(t,e))))}));let r=Promise.resolve();const n=e.map(((n,i)=>v(n,((n,s)=>(r=r.then((()=>m(n,t.writable,{preventClose:i!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>c(e)))?function(e){const t=new ArrayStream;let r=Promise.resolve();return e.forEach(((n,i)=>(r=r.then((()=>m(n,t,{preventClose:i!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):f(e)}async function m(e,t,{preventClose:r=!1,preventAbort:n=!1,preventCancel:i=!1}={}){if(h(e)&&!c(e)){e=g(e);try{if(e[p]){const r=Q(t);for(let t=0;t<e[p].length;t++)await r.ready,await r.write(e[p][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:n,preventCancel:i})}catch(e){}return}const s=x(e=w(e)),a=Q(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){n||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function b(e,t){const r=new TransformStream(t);return m(e,r.writable),r.readable}function k(e){let t,r,n,i=!1,s=!1;return{readable:new ReadableStream({start(e){n=e},pull(){t?t():i=!0},async cancel(t){s=!0,e&&await e(t),r&&r(t)}},{highWaterMark:0}),writable:new WritableStream({write:async function(e){if(s)throw Error("Stream is cancelled");n.enqueue(e),i?i=!1:(await new Promise(((e,n)=>{t=e,r=n})),t=null,r=null)},close:n.close.bind(n),abort:n.error.bind(n)})}}function E(e,t=()=>{},r=()=>{}){if(c(e)){const n=new ArrayStream;return(async()=>{const i=Q(n);try{const n=await U(e),s=t(n),a=r();let o;o=void 0!==s&&void 0!==a?A([s,a]):void 0!==s?s:a,await i.write(o),await i.close()}catch(e){await i.abort(e)}})(),n}if(h(e))return b(e,{async transform(e,r){try{const n=await t(e);void 0!==n&&r.enqueue(n)}catch(e){r.error(e)}},async flush(e){try{const t=await r();void 0!==t&&e.enqueue(t)}catch(t){e.error(t)}}});const n=t(e),i=r();return void 0!==n&&void 0!==i?A([n,i]):void 0!==n?n:i}function v(e,t){if(h(e)&&!c(e)){let r;const n=new TransformStream({start(e){r=e}}),i=m(e,n.writable),s=k((async function(e){r.error(e),await i,await new Promise(setTimeout)}));return t(n.readable,s.writable),s.readable}e=w(e);const r=new ArrayStream;return t(e,r),r}function K(e,t){let r;const n=v(e,((e,i)=>{const s=x(e);s.remainder=()=>(s.releaseLock(),m(e,i),n),r=t(s)}));return r}function S(e){if(c(e))return e.clone();if(h(e)){const t=function(e){if(c(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(h(e)){const t=g(e).tee();return t[0][p]=t[1][p]=e[p],t}return[C(e),C(e)]}(e);return I(e,t[0]),t[1]}return C(e)}function B(e){return c(e)?S(e):h(e)?new ReadableStream({start(t){const r=v(e,(async(e,r)=>{const n=x(e),i=Q(r);try{for(;;){await i.ready;const{done:e,value:r}=await n.read();if(e){try{t.close()}catch(e){}return void await i.close()}try{t.enqueue(r)}catch(e){}await i.write(r)}}catch(e){t.error(e),await i.abort(e)}}));I(e,r)}}):C(e)}function I(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,n])=>{"constructor"!==r&&(n.value?n.value=n.value.bind(t):n.get=n.get.bind(t),Object.defineProperty(e,r,n))}))}function C(e,t=0,r=1/0){if(c(e))throw Error("Not implemented");if(h(e)){if(t>=0&&r>=0){let n=0;return b(e,{transform(e,i){n<r?(n+e.length>=t&&i.enqueue(C(e,Math.max(t-n,0),r-n)),n+=e.length):i.terminate()}})}if(t<0&&(r<0||r===1/0)){let n=[];return E(e,(e=>{e.length>=-t?n=[e]:n.push(e)}),(()=>C(A(n),t,r)))}if(0===t&&r<0){let n;return E(e,(e=>{const i=n?A([n,e]):e;if(i.length>=-r)return n=C(i,r),C(i,t,r);n=i}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),D((async()=>C(await U(e),t,r)))}return e[p]&&(e=A(e[p].concat([e]))),l(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function U(e,t=A){return c(e)?e.readToEnd(t):h(e)?x(e).readToEnd(t):e}async function P(e,t){if(h(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise(setTimeout),r}if(e.destroy)return e.destroy(t),await new Promise(setTimeout),t}}function D(e){const t=new ArrayStream;return(async()=>{const r=Q(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function x(e){return new d(e)}function Q(e){return new u(e)}d.prototype.read=async function(){if(this[p]&&this[p].length){return{done:!1,value:this[p].shift()}}return this._read()},d.prototype.releaseLock=function(){this[p]&&(this.stream[p]=this[p]),this._releaseLock()},d.prototype.cancel=function(e){return this._cancel(e)},d.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:n}=await this.read();if(n+="",r)return t.length?A(t):void 0;const i=n.indexOf("\n")+1;i&&(e=A(t.concat(n.substr(0,i))),t=[]),i!==n.length&&t.push(n.substr(i))}return this.unshift(...t),e},d.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(C(t,1)),r},d.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:n,value:i}=await this.read();if(n)return t.length?A(t):void 0;if(t.push(i),r+=i.length,r>=e){const r=A(t);return this.unshift(C(r,e)),C(r,0,e)}}},d.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},d.prototype.unshift=function(...e){this[p]||(this[p]=[]),1===e.length&&l(e[0])&&this[p].length&&e[0].length&&this[p][0].byteOffset>=e[0].length?this[p][0]=new Uint8Array(this[p][0].buffer,this[p][0].byteOffset-e[0].length,this[p][0].byteLength+e[0].length):this[p].unshift(...e.filter((e=>e&&e.length)))},d.prototype.readToEnd=async function(e=A){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const R=Symbol("byValue");var T={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,pqc_mldsa_ed25519:30,pqc_mlkem_x25519:35,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[R]||(e[R]=[],Object.entries(e).forEach((([t,r])=>{e[R][r]=t}))),void 0!==e[R][t])return e[R][t];throw Error("Invalid enum value.")}},M={preferredHashAlgorithm:T.hash.sha512,preferredSymmetricAlgorithm:T.symmetric.aes256,preferredCompressionAlgorithm:T.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:T.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,enableParsingV5Entities:!1,s2kType:T.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([T.symmetric.aes128,T.symmetric.aes192,T.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,enforceGrammar:!0,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.2.2",commentString:"https://openpgpjs.org",maxUserIDLength:5120,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([T.hash.md5,T.hash.ripemd]),rejectMessageHashAlgorithms:new Set([T.hash.md5,T.hash.ripemd,T.hash.sha1]),rejectPublicKeyAlgorithms:new Set([T.publicKey.elgamal,T.publicKey.dsa]),rejectCurves:new Set([T.curve.secp256k1])};const L=(()=>{try{return"development"===process.env.NODE_ENV}catch(e){}return!1})(),F={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:t(import.meta.url),isArray:function(e){return e instanceof Array},isUint8Array:l,isStream:h,getNobleCurve:async(e,t)=>{if(!M.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return cf}));switch(e){case T.publicKey.ecdh:case T.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case T.publicKey.x448:return r.get("x448");case T.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let n=0;n<t;n++)r[n]=e>>8*(t-n-1)&255;return r},readDate:function(e){const t=F.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return F.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return F.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){if(e.length>t)throw Error("Input array too long");const r=new Uint8Array(t),n=t-e.length;return r.set(e,n),r},uint8ArrayToMPI:function(e){const t=F.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),n=new Uint8Array([(65280&t)>>8,255&t]);return F.concatUint8Array([n,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+F.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return E(e,(e=>{if(!F.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,n=(e=new Uint8Array(e)).length;for(let i=0;i<n;i+=r)t.push(String.fromCharCode.apply(String,e.subarray(i,i+r<n?i+r:n)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return E(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return E(e,r,(()=>r(new Uint8Array,!0)))},concat:A,concatUint8Array:f,equalsUint8Array:function(e,t){if(!F.isUint8Array(e)||!F.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},findLastIndex:function(e,t){for(let r=e.length;r>=0;r--)if(t(e[r],r,e))return r;return-1},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return F.writeNumber(t,2)},printDebug:function(e){L&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){L&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let n=0;n<r;n++)t[n]=e[n]<<1^e[n+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const t=void 0!==e&&e.crypto&&e.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!t)throw Error("The WebCrypto API is not available");return t},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!F.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return E(e,(e=>{let r;t&&(e=F.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const n=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&n.push(r);if(!n.length)return e;const i=new Uint8Array(e.length+n.length);let s=0;for(let t=0;t<n.length;t++){const r=e.subarray(n[t-1]||0,n[t]);i.set(r,s),s+=r.length,i[s-1]=13,i[s]=10,s++}return i.set(e.subarray(n[n.length-1]||0),s),i}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return E(e,(e=>{let r;13===(e=t&&10!==e[0]?F.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let n=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const i=r-(10===e[r]?1:0);t&&e.copyWithin(n,t,i),n+=i-t}return e.subarray(0,n)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return e instanceof Error?e:Error(e);if(e instanceof Error){try{e.message+=": "+t.message,e.cause=t}catch(e){}return e}return Error(e+": "+t.message,{cause:t})},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise((async(t,r)=>{let n;await Promise.all(e.map((async e=>{try{t(await e)}catch(e){n=e}}))),r(n)}))},selectUint8Array:function(e,t,r){const n=Math.max(t.length,r.length),i=new Uint8Array(n);let s=0;for(let n=0;n<i.length;n++)i[n]=t[n]&256-e|r[n]&255+e,s+=e&n<t.length|1-e&n<r.length;return i.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===T.symmetric.aes128||e===T.symmetric.aes192||e===T.symmetric.aes256}},O=F.getNodeBuffer();let N,_;function H(e){let t=new Uint8Array;return E(e,(e=>{t=F.concatUint8Array([t,e]);const r=[],n=Math.floor(t.length/45),i=45*n,s=N(t.subarray(0,i));for(let e=0;e<n;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(i),r.join("")}),(()=>t.length?N(t)+"\n":""))}function z(e){let t="";return E(e,(e=>{t+=e;let r=0;const n=[" ","\t","\r","\n"];for(let e=0;e<n.length;e++){const i=n[e];for(let e=t.indexOf(i);-1!==e;e=t.indexOf(i,e+1))r++}let i=t.length;for(;i>0&&(i-r)%4!=0;i--)n.includes(t[i])&&r--;const s=_(t.substr(0,i));return t=t.substr(i),s}),(()=>_(t)))}function G(e){return z(e.replace(/-/g,"+").replace(/_/g,"/"))}function q(e,t){let r=H(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function j(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?T.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?T.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?T.armor.signed:/MESSAGE/.test(t[1])?T.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?T.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?T.armor.privateKey:/SIGNATURE/.test(t[1])?T.armor.signature:void 0}function V(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function Y(e){const t=function(e){let t=13501623;return E(e,(e=>{const r=J?Math.floor(e.length/4):0,n=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=n[e],t=Z[0][t>>24&255]^Z[1][t>>16&255]^Z[2][t>>8&255]^Z[3][255&t];for(let n=4*r;n<e.length;n++)t=t>>8^Z[0][255&t^e[n]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return H(t)}O?(N=e=>O.from(e).toString("base64"),_=e=>{const t=O.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(N=e=>btoa(F.uint8ArrayToString(e)),_=e=>F.stringToUint8Array(atob(e)));const Z=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);Z[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)Z[1][e]=Z[0][e]>>8^Z[0][255&Z[0][e]];for(let e=0;e<=255;e++)Z[2][e]=Z[1][e]>>8^Z[0][255&Z[1][e]];for(let e=0;e<=255;e++)Z[3][e]=Z[2][e]>>8^Z[0][255&Z[2][e]];const J=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function X(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||F.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||F.printDebugError(Error("Unknown header: "+e[t]))}function W(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function $(e){return new Promise((async(t,r)=>{try{const n=/^-----[^-]+-----$/m,i=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,u=a,h=[];const l=z(v(e,(async(e,f)=>{const y=x(e);try{for(;;){let e=await y.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=F.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==T.armor.signed||(n.test(e)?(h=h.join("\r\n"),c=!0,X(u),u=[],o=!1):h.push(e.replace(/^- /,"")));else if(n.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),i.test(e)){if(X(u),o=!0,c||s!==T.armor.signed){t({text:h,data:l,headers:a,type:s});break}}else u.push(e);else n.test(e)&&(s=j(e))}}catch(e){return void r(e)}const p=Q(f);try{for(;;){await p.ready;const{done:e,value:t}=await y.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await y.readToEnd();e.length||(e=""),e=r+e,e=F.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(n);if(1===t.length)throw Error("Misformed armored text");const i=W(t[0].slice(0,-1));await p.write(i);break}await p.write(r)}await p.ready,await p.close()}catch(e){await p.abort(e)}})))}catch(e){r(e)}})).then((async e=>(c(e.data)&&(e.data=await U(e.data)),e)))}function ee(e,t,r,n,i,s=!1,a=M){let o,c;e===T.armor.signed&&(o=t.text,c=t.hash,t=t.data);const u=s&&B(t),h=[];switch(e){case T.armor.multipartSection:h.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+n+"-----\n"),h.push(V(i,a)),h.push(H(t)),u&&h.push("=",Y(u)),h.push("-----END PGP MESSAGE, PART "+r+"/"+n+"-----\n");break;case T.armor.multipartLast:h.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),h.push(V(i,a)),h.push(H(t)),u&&h.push("=",Y(u)),h.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case T.armor.signed:h.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),h.push(c?`Hash: ${c}\n\n`:"\n"),h.push(o.replace(/^-/gm,"- -")),h.push("\n-----BEGIN PGP SIGNATURE-----\n"),h.push(V(i,a)),h.push(H(t)),u&&h.push("=",Y(u)),h.push("-----END PGP SIGNATURE-----\n");break;case T.armor.message:h.push("-----BEGIN PGP MESSAGE-----\n"),h.push(V(i,a)),h.push(H(t)),u&&h.push("=",Y(u)),h.push("-----END PGP MESSAGE-----\n");break;case T.armor.publicKey:h.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),h.push(V(i,a)),h.push(H(t)),u&&h.push("=",Y(u)),h.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case T.armor.privateKey:h.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),h.push(V(i,a)),h.push(H(t)),u&&h.push("=",Y(u)),h.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case T.armor.signature:h.push("-----BEGIN PGP SIGNATURE-----\n"),h.push(V(i,a)),h.push(H(t)),u&&h.push("=",Y(u)),h.push("-----END PGP SIGNATURE-----\n")}return F.concat(h)}const te=BigInt(0),re=BigInt(1);function ne(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function ie(e,t){const r=e%t;return r<te?r+t:r}function se(e,t,r){if(r===te)throw Error("Modulo cannot be zero");if(r===re)return BigInt(0);if(t<te)throw Error("Unsopported negative exponent");let n=t,i=e;i%=r;let s=BigInt(1);for(;n>te;){const e=n&re;n>>=re;s=e?s*i%r:s,i=i*i%r}return s}function ae(e){return e>=te?e:-e}function oe(e,t){const{gcd:r,x:n}=function(e,t){let r=BigInt(0),n=BigInt(1),i=BigInt(1),s=BigInt(0),a=ae(e),o=ae(t);const c=e<te,u=t<te;for(;o!==te;){const e=a/o;let t=r;r=i-e*r,i=t,t=n,n=s-e*n,s=t,t=o,o=a%o,a=t}return{x:c?-i:i,y:u?-s:s,gcd:a}}(e,t);if(r!==re)throw Error("Inverse does not exist");return ie(n+t,t)}function ce(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function ue(e,t){return(e>>BigInt(t)&re)===te?0:1}function he(e){const t=e<te?BigInt(-1):te;let r=1,n=e;for(;(n>>=re)!==t;)r++;return r}function le(e){const t=e<te?BigInt(-1):te,r=BigInt(8);let n=1,i=e;for(;(i>>=r)!==t;)n++;return n}function fe(e,t="be",r){let n=e.toString(16);n.length%2==1&&(n="0"+n);const i=n.length/2,s=new Uint8Array(r||i),a=r?r-i:0;let o=0;for(;o<i;)s[o+a]=parseInt(n.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const ye=F.getNodeCrypto();function pe(e){const t="undefined"!=typeof crypto?crypto:ye?.webcrypto;if(t?.getRandomValues){const r=new Uint8Array(e);return t.getRandomValues(r)}throw Error("No secure random number generator available.")}function de(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return ie(ne(pe(le(r)+8)),r)+e}const ge=BigInt(1);function we(e,t,r){const n=BigInt(30),i=ge<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=de(i,i<<ge),o=ce(ie(a,n));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,he(a)>e&&(a=ie(a,i<<ge),a+=i,o=ce(ie(a,n)))}while(!Ae(a,t,r));return a}function Ae(e,t,r){return(!t||function(e,t){let r=e,n=t;for(;n!==te;){const e=n;n=r%n,r=e}return r}(e-ge,t)===ge)&&(!!function(e){const t=BigInt(0);return me.every((r=>ie(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return se(t,e-ge,e)===ge}(e)&&!!function(e,t){const r=he(e);t||(t=Math.max(1,r/48|0));const n=e-ge;let i=0;for(;!ue(n,i);)i++;const s=e>>BigInt(i);for(;t>0;t--){let t,r=se(de(BigInt(2),n),s,e);if(r!==ge&&r!==n){for(t=1;t<i;t++){if(r=ie(r*r,e),r===ge)return!1;if(r===n)break}if(t===i)return!1}}return!0}(e,r)))}const me=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const be=F.getWebCrypto(),ke=F.getNodeCrypto(),Ee=ke&&ke.getHashes();function ve(e){if(ke&&Ee.includes(e))return async function(t){const r=ke.createHash(e);return E(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function Ke(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return Tf})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(c(e)&&(e=await U(e)),F.isStream(e)){const t=(await r()).create();return E(e,(e=>{t.update(e)}),(()=>t.digest()))}if(be&&t)return new Uint8Array(await be.digest(t,e));return(await r())(e)}}const Se=ve("md5")||Ke("md5"),Be=ve("sha1")||Ke("sha1","SHA-1"),Ie=ve("sha224")||Ke("sha224"),Ce=ve("sha256")||Ke("sha256","SHA-256"),Ue=ve("sha384")||Ke("sha384","SHA-384"),Pe=ve("sha512")||Ke("sha512","SHA-512"),De=ve("ripemd160")||Ke("ripemd160"),xe=ve("sha3-256")||Ke("sha3_256"),Qe=ve("sha3-512")||Ke("sha3_512");function Re(e,t){switch(e){case T.hash.md5:return Se(t);case T.hash.sha1:return Be(t);case T.hash.ripemd:return De(t);case T.hash.sha256:return Ce(t);case T.hash.sha384:return Ue(t);case T.hash.sha512:return Pe(t);case T.hash.sha224:return Ie(t);case T.hash.sha3_256:return xe(t);case T.hash.sha3_512:return Qe(t);default:throw Error("Unsupported hash function")}}function Te(e){switch(e){case T.hash.md5:return 16;case T.hash.sha1:case T.hash.ripemd:return 20;case T.hash.sha256:return 32;case T.hash.sha384:return 48;case T.hash.sha512:return 64;case T.hash.sha224:return 28;case T.hash.sha3_256:return 32;case T.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}}const Me=[];function Le(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const n=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const n=pe(e-r);for(let e=0;e<n.length;e++)0!==n[e]&&(t[r++]=n[e])}return t}(t-r-3),i=new Uint8Array(t);return i[1]=2,i.set(n,2),i.set(e,t-r),i}function Fe(e,t){let r=2,n=1;for(let t=r;t<e.length;t++)n&=0!==e[t],r+=n;const i=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&i>=8&!n;if(t)return F.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Oe(e,t,r){let n;if(t.length!==Te(e))throw Error("Invalid hash length");const i=new Uint8Array(Me[e].length);for(n=0;n<Me[e].length;n++)i[n]=Me[e][n];const s=i.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(i,r-s),o.set(t,r-t.length),o}Me[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Me[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Me[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Me[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Me[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Me[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Me[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];const Ne=F.getWebCrypto(),_e=F.getNodeCrypto(),He=BigInt(1);async function ze(e,t,r,n,i,s,a,o,c){if(Te(e)>=r.length)throw Error("Digest size cannot exceed key modulus size");if(t&&!F.isStream(t))if(F.getWebCrypto())try{return await async function(e,t,r,n,i,s,a,o){const c=await Ve(r,n,i,s,a,o),u={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},h=await Ne.importKey("jwk",c,u,!1,["sign"]);return new Uint8Array(await Ne.sign("RSASSA-PKCS1-v1_5",h,t))}(T.read(T.webHash,e),t,r,n,i,s,a,o)}catch(e){F.printDebugError(e)}else if(F.getNodeCrypto())return async function(e,t,r,n,i,s,a,o){const c=_e.createSign(T.read(T.hash,e));c.write(t),c.end();const u=await Ve(r,n,i,s,a,o);return new Uint8Array(c.sign({key:u,format:"jwk",type:"pkcs1"}))}(e,t,r,n,i,s,a,o);return async function(e,t,r,n){t=ne(t);const i=ne(Oe(e,n,le(t)));return r=ne(r),fe(se(i,r,t),"be",le(t))}(e,r,i,c)}async function Ge(e,t,r,n,i,s){if(t&&!F.isStream(t))if(F.getWebCrypto())try{return await async function(e,t,r,n,i){const s=Ye(n,i),a=await Ne.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return Ne.verify("RSASSA-PKCS1-v1_5",a,r,t)}(T.read(T.webHash,e),t,r,n,i)}catch(e){F.printDebugError(e)}else if(F.getNodeCrypto())return async function(e,t,r,n,i){const s=Ye(n,i),a={key:s,format:"jwk",type:"pkcs1"},o=_e.createVerify(T.read(T.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch(e){return!1}}(e,t,r,n,i);return async function(e,t,r,n,i){if(r=ne(r),t=ne(t),n=ne(n),t>=r)throw Error("Signature size cannot exceed modulus size");const s=fe(se(t,n,r),"be",le(r)),a=Oe(e,i,le(r));return F.equalsUint8Array(s,a)}(e,r,n,i,s)}async function qe(e,t,r){return F.getNodeCrypto()?async function(e,t,r){const n=Ye(t,r),i={key:n,format:"jwk",type:"pkcs1",padding:_e.constants.RSA_PKCS1_PADDING};return new Uint8Array(_e.publicEncrypt(i,e))}(e,t,r):async function(e,t,r){if(t=ne(t),e=ne(Le(e,le(t))),r=ne(r),e>=t)throw Error("Message size cannot exceed modulus size");return fe(se(e,r,t),"be",le(t))}(e,t,r)}async function je(e,t,r,n,i,s,a,o){if(F.getNodeCrypto()&&!o)try{return await async function(e,t,r,n,i,s,a){const o=await Ve(t,r,n,i,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:_e.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(_e.privateDecrypt(c,e))}catch(e){throw Error("Decryption error")}}(e,t,r,n,i,s,a)}catch(e){F.printDebugError(e)}return async function(e,t,r,n,i,s,a,o){if(e=ne(e),t=ne(t),r=ne(r),n=ne(n),i=ne(i),s=ne(s),a=ne(a),e>=t)throw Error("Data too large.");const c=ie(n,s-He),u=ie(n,i-He),h=de(BigInt(2),t),l=se(oe(h,t),r,t);e=ie(e*l,t);const f=se(e,u,i),y=se(e,c,s),p=ie(a*(y-f),s);let d=p*i+f;return d=ie(d*h,t),Fe(fe(d,"be",le(t)),o)}(e,t,r,n,i,s,a,o)}async function Ve(e,t,r,n,i,s){const a=ne(n),o=ne(i),c=ne(r);let u=ie(c,o-He),h=ie(c,a-He);return h=fe(h),u=fe(u),{kty:"RSA",n:q(e),e:q(t),d:q(r),p:q(i),q:q(n),dp:q(u),dq:q(h),qi:q(s),ext:!0}}function Ye(e,t){return{kty:"RSA",n:q(e),e:q(t),ext:!0}}function Ze(e,t){return{n:G(e.n),e:fe(t),d:G(e.d),p:G(e.q),q:G(e.p),u:G(e.qi)}}const Je=BigInt(1);const Xe={"2a8648ce3d030107":T.curve.nistP256,"2b81040022":T.curve.nistP384,"2b81040023":T.curve.nistP521,"2b8104000a":T.curve.secp256k1,"2b06010401da470f01":T.curve.ed25519Legacy,"2b060104019755010501":T.curve.curve25519Legacy,"2b2403030208010107":T.curve.brainpoolP256r1,"2b240303020801010b":T.curve.brainpoolP384r1,"2b240303020801010d":T.curve.brainpoolP512r1};class We{constructor(e){if(e instanceof We)this.oid=e.oid;else if(F.isArray(e)||F.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return F.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return F.uint8ArrayToHex(this.oid)}getName(){const e=Xe[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function $e(e){let t,r=0;const n=e[0];return n<192?([r]=e,t=1):n<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===n&&(r=F.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function et(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):F.concatUint8Array([new Uint8Array([255]),F.writeNumber(e,4)])}function tt(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function rt(e){return new Uint8Array([192|e])}function nt(e,t){return F.concatUint8Array([rt(e),et(t)])}function it(e){return[T.packet.literalData,T.packet.compressedData,T.packet.symmetricallyEncryptedData,T.packet.symEncryptedIntegrityProtectedData,T.packet.aeadEncryptedData].includes(e)}async function st(e,t,r){let n,i;try{const s=await e.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await e.readByte();let o,c,u=-1,h=-1;h=0,64&a&&(h=1),h?u=63&a:(u=(63&a)>>2,c=3&a);const l=it(u);let f,y=null;if(t&&l){if("array"===t){const e=new ArrayStream;n=Q(e),y=e}else{const e=new TransformStream;n=Q(e.writable),y=e.readable}i=r({tag:u,packet:y})}else y=[];do{if(h){const t=await e.readByte();if(f=!1,t<192)o=t;else if(t>=192&&t<224)o=(t-192<<8)+await e.readByte()+192;else if(t>223&&t<255){if(o=1<<(31&t),f=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await e.readByte()<<24|await e.readByte()<<16|await e.readByte()<<8|await e.readByte()}else switch(c){case 0:o=await e.readByte();break;case 1:o=await e.readByte()<<8|await e.readByte();break;case 2:o=await e.readByte()<<24|await e.readByte()<<16|await e.readByte()<<8|await e.readByte();break;default:o=1/0}if(o>0){let t=0;for(;;){n&&await n.ready;const{done:r,value:i}=await e.read();if(r){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?i:i.subarray(0,o-t);if(n?await n.write(s):y.push(s),t+=i.length,t>=o){e.unshift(i.subarray(o-t+i.length));break}}}}while(f);n?(await n.ready,await n.close()):(y=F.concatUint8Array(y),await r({tag:u,packet:y}))}catch(e){if(n)return await n.abort(e),!0;throw e}finally{n&&await i}}class at extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="UnsupportedError"}}class ot extends at{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="UnknownPacketError"}}class ct extends at{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="MalformedPacketError"}}class ut{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}async function ht(e){switch(e){case T.publicKey.ed25519:try{const e=F.getWebCrypto(),t=await e.generateKey("Ed25519",!0,["sign","verify"]).catch((e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e})),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);return{A:new Uint8Array(G(n.x)),seed:G(r.d)}}catch(t){if("NotSupportedError"!==t.name)throw t;const{default:r}=await Promise.resolve().then((function(){return By})),n=pe(pt(e)),{publicKey:i}=r.sign.keyPair.fromSeed(n);return{A:i,seed:n}}case T.publicKey.ed448:{const e=await F.getNobleCurve(T.publicKey.ed448),{secretKey:t,publicKey:r}=e.keygen();return{A:r,seed:t}}default:throw Error("Unsupported EdDSA algorithm")}}async function lt(e,t,r,n,i,s){switch(e){case T.publicKey.ed25519:try{const t=F.getWebCrypto(),r=wt(e,n,i),a=await t.importKey("jwk",r,"Ed25519",!1,["sign"]);return{RS:new Uint8Array(await t.sign("Ed25519",a,s))}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then((function(){return By})),r=F.concatUint8Array([i,n]);return{RS:t.sign.detached(s,r)}}case T.publicKey.ed448:return{RS:(await F.getNobleCurve(T.publicKey.ed448)).sign(s,i)};default:throw Error("Unsupported EdDSA algorithm")}}async function ft(e,t,{RS:r},n,i,s){switch(e){case T.publicKey.ed25519:try{const t=F.getWebCrypto(),n=gt(e,i),a=await t.importKey("jwk",n,"Ed25519",!1,["verify"]);return await t.verify("Ed25519",a,r,s)}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then((function(){return By}));return t.sign.detached.verify(s,r,i)}case T.publicKey.ed448:return(await F.getNobleCurve(T.publicKey.ed448)).verify(r,s,i);default:throw Error("Unsupported EdDSA algorithm")}}async function yt(e,t,r){switch(e){case T.publicKey.ed25519:try{const n=F.getWebCrypto(),i=wt(e,t,r),s=gt(e,t),a=await n.importKey("jwk",i,"Ed25519",!1,["sign"]),o=await n.importKey("jwk",s,"Ed25519",!1,["verify"]),c=pe(8),u=new Uint8Array(await n.sign("Ed25519",a,c));return await n.verify("Ed25519",o,u,c)}catch(e){if("NotSupportedError"!==e.name)return!1;const{default:n}=await Promise.resolve().then((function(){return By})),{publicKey:i}=n.sign.keyPair.fromSeed(r);return F.equalsUint8Array(t,i)}case T.publicKey.ed448:{const e=(await F.getNobleCurve(T.publicKey.ed448)).getPublicKey(r);return F.equalsUint8Array(t,e)}default:return!1}}function pt(e){switch(e){case T.publicKey.ed25519:return 32;case T.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function dt(e){switch(e){case T.publicKey.ed25519:return T.hash.sha256;case T.publicKey.ed448:return T.hash.sha512;default:throw Error("Unknown EdDSA algo")}}const gt=(e,t)=>{if(e===T.publicKey.ed25519){return{kty:"OKP",crv:"Ed25519",x:q(t),ext:!0}}throw Error("Unsupported EdDSA algorithm")},wt=(e,t,r)=>{if(e===T.publicKey.ed25519){const n=gt(e,t);return n.d=q(r),n}throw Error("Unsupported EdDSA algorithm")};var At=/*#__PURE__*/Object.freeze({__proto__:null,generate:ht,getPayloadSize:pt,getPreferredHashAlgo:dt,sign:lt,validateParams:yt,verify:ft});
-/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function mt(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&"Uint8Array"===e.constructor.name}function bt(e,...t){if(!mt(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error("Uint8Array expected of length "+t+", got length="+e.length)}function kt(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Et(e,t){bt(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}function vt(e){return new Uint8Array(e.buffer,e.byteOffset,e.byteLength)}function Kt(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function St(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function Bt(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}const It=/* @__PURE__ */(()=>68===new Uint8Array(new Uint32Array([287454020]).buffer)[0])();function Ct(e){if("string"==typeof e)e=function(e){if("string"!=typeof e)throw Error("string expected");return new Uint8Array((new TextEncoder).encode(e))}(e);else{if(!mt(e))throw Error("Uint8Array expected, got "+typeof e);e=Mt(e)}return e}function Ut(e,t){return e.buffer===t.buffer&&e.byteOffset<t.byteOffset+t.byteLength&&t.byteOffset<e.byteOffset+e.byteLength}function Pt(e,t){if(Ut(e,t)&&e.byteOffset<t.byteOffset)throw Error("complex overlap of input and output is not supported")}function Dt(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r}const xt=(e,t)=>{function r(r,...n){if(bt(r),!It)throw Error("Non little-endian hardware is not yet supported");if(void 0!==e.nonceLength){const t=n[0];if(!t)throw Error("nonce / iv required");e.varSizeNonce?bt(t):bt(t,e.nonceLength)}const i=e.tagLength;i&&void 0!==n[1]&&bt(n[1]);const s=t(r,...n),a=(e,t)=>{if(void 0!==t){if(2!==e)throw Error("cipher output not supported");bt(t)}};let o=!1;return{encrypt(e,t){if(o)throw Error("cannot encrypt() twice with same key + nonce");return o=!0,bt(e),a(s.encrypt.length,t),s.encrypt(e,t)},decrypt(e,t){if(bt(e),i&&e.length<i)throw Error("invalid ciphertext length: smaller than tagLength="+i);return a(s.decrypt.length,t),s.decrypt(e,t)}}}return Object.assign(r,e),r};function Qt(e,t,r=!0){if(void 0===t)return new Uint8Array(e);if(t.length!==e)throw Error("invalid output length, expected "+e+", got: "+t.length);if(r&&!Tt(t))throw Error("invalid output, must be aligned");return t}function Rt(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s);e.setUint32(t+0,a,n),e.setUint32(t+4,o,n)}function Tt(e){return e.byteOffset%4==0}function Mt(e){return Uint8Array.from(e)}const Lt=16,Ft=/* @__PURE__ */new Uint8Array(16),Ot=Kt(Ft),Nt=e=>(e>>>0&255)<<24|(e>>>8&255)<<16|(e>>>16&255)<<8|e>>>24&255;class _t{constructor(e,t){this.blockLen=Lt,this.outputLen=Lt,this.s0=0,this.s1=0,this.s2=0,this.s3=0,this.finished=!1,bt(e=Ct(e),16);const r=Bt(e);let n=r.getUint32(0,!1),i=r.getUint32(4,!1),s=r.getUint32(8,!1),a=r.getUint32(12,!1);const o=[];for(let e=0;e<128;e++)o.push({s0:Nt(n),s1:Nt(i),s2:Nt(s),s3:Nt(a)}),({s0:n,s1:i,s2:s,s3:a}={s3:(h=s)<<31|(l=a)>>>1,s2:(u=i)<<31|h>>>1,s1:(c=n)<<31|u>>>1,s0:c>>>1^225<<24&-(1&l)});var c,u,h,l;const f=(y=t||1024)>65536?8:y>1024?4:2;var y;if(![1,2,4,8].includes(f))throw Error("ghash: invalid window size, expected 2, 4 or 8");this.W=f;const p=128/f,d=this.windowSize=2**f,g=[];for(let e=0;e<p;e++)for(let t=0;t<d;t++){let r=0,n=0,i=0,s=0;for(let a=0;a<f;a++){if(!(t>>>f-a-1&1))continue;const{s0:c,s1:u,s2:h,s3:l}=o[f*e+a];r^=c,n^=u,i^=h,s^=l}g.push({s0:r,s1:n,s2:i,s3:s})}this.t=g}_updateBlock(e,t,r,n){e^=this.s0,t^=this.s1,r^=this.s2,n^=this.s3;const{W:i,t:s,windowSize:a}=this;let o=0,c=0,u=0,h=0;const l=(1<<i)-1;let f=0;for(const y of[e,t,r,n])for(let e=0;e<4;e++){const t=y>>>8*e&255;for(let e=8/i-1;e>=0;e--){const r=t>>>i*e&l,{s0:n,s1:y,s2:p,s3:d}=s[f*a+r];o^=n,c^=y,u^=p,h^=d,f+=1}}this.s0=o,this.s1=c,this.s2=u,this.s3=h}update(e){kt(this),bt(e=Ct(e));const t=Kt(e),r=Math.floor(e.length/Lt),n=e.length%Lt;for(let e=0;e<r;e++)this._updateBlock(t[4*e+0],t[4*e+1],t[4*e+2],t[4*e+3]);return n&&(Ft.set(e.subarray(r*Lt)),this._updateBlock(Ot[0],Ot[1],Ot[2],Ot[3]),St(Ot)),this}destroy(){const{t:e}=this;for(const t of e)t.s0=0,t.s1=0,t.s2=0,t.s3=0}digestInto(e){kt(this),Et(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Kt(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e}digest(){const e=new Uint8Array(Lt);return this.digestInto(e),this.destroy(),e}}class Ht extends _t{constructor(e,t){bt(e=Ct(e));const r=function(e){e.reverse();const t=1&e[15];let r=0;for(let t=0;t<e.length;t++){const n=e[t];e[t]=n>>>1|r,r=(1&n)<<7}return e[0]^=225&-t,e}(Mt(e));super(r,t),St(r)}update(e){e=Ct(e),kt(this);const t=Kt(e),r=e.length%Lt,n=Math.floor(e.length/Lt);for(let e=0;e<n;e++)this._updateBlock(Nt(t[4*e+3]),Nt(t[4*e+2]),Nt(t[4*e+1]),Nt(t[4*e+0]));return r&&(Ft.set(e.subarray(n*Lt)),this._updateBlock(Nt(Ot[3]),Nt(Ot[2]),Nt(Ot[1]),Nt(Ot[0])),St(Ot)),this}digestInto(e){kt(this),Et(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Kt(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e.reverse()}}function zt(e){const t=(t,r)=>e(r,t.length).update(Ct(t)).digest(),r=e(new Uint8Array(16),0);return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=(t,r)=>e(t,r),t}const Gt=zt(((e,t)=>new _t(e,t)));zt(((e,t)=>new Ht(e,t)));const qt=16,jt=/* @__PURE__ */new Uint8Array(qt);function Vt(e){return e<<1^283&-(e>>7)}function Yt(e,t){let r=0;for(;t>0;t>>=1)r^=e&-(1&t),e=Vt(e);return r}const Zt=/* @__PURE__ */(()=>{const e=new Uint8Array(256);for(let t=0,r=1;t<256;t++,r^=Vt(r))e[t]=r;const t=new Uint8Array(256);t[0]=99;for(let r=0;r<255;r++){let n=e[255-r];n|=n<<8,t[e[r]]=255&(n^n>>4^n>>5^n>>6^n>>7^99)}return St(e),t})(),Jt=/* @__PURE__ */Zt.map(((e,t)=>Zt.indexOf(t))),Xt=e=>e<<8|e>>>24,Wt=e=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;function $t(e,t){if(256!==e.length)throw Error("Wrong sbox length");const r=new Uint32Array(256).map(((r,n)=>t(e[n]))),n=r.map(Xt),i=n.map(Xt),s=i.map(Xt),a=new Uint32Array(65536),o=new Uint32Array(65536),c=new Uint16Array(65536);for(let t=0;t<256;t++)for(let u=0;u<256;u++){const h=256*t+u;a[h]=r[t]^n[u],o[h]=i[t]^s[u],c[h]=e[t]<<8|e[u]}return{sbox:e,sbox2:c,T0:r,T1:n,T2:i,T3:s,T01:a,T23:o}}const er=/* @__PURE__ */$t(Zt,(e=>Yt(e,3)<<24|e<<16|e<<8|Yt(e,2))),tr=/* @__PURE__ */$t(Jt,(e=>Yt(e,11)<<24|Yt(e,13)<<16|Yt(e,9)<<8|Yt(e,14))),rr=/* @__PURE__ */(()=>{const e=new Uint8Array(16);for(let t=0,r=1;t<16;t++,r=Vt(r))e[t]=r;return e})();function nr(e){bt(e);const t=e.length;if(![16,24,32].includes(t))throw Error("aes: invalid key size, should be 16, 24 or 32, got "+t);const{sbox2:r}=er,n=[];Tt(e)||n.push(e=Mt(e));const i=Kt(e),s=i.length,a=e=>ar(r,e,e,e,e),o=new Uint32Array(t+28);o.set(i);for(let e=s;e<o.length;e++){let t=o[e-1];e%s==0?t=a((c=t)<<24|c>>>8)^rr[e/s-1]:s>6&&e%s==4&&(t=a(t)),o[e]=o[e-s]^t}var c;return St(...n),o}function ir(e){const t=nr(e),r=t.slice(),n=t.length,{sbox2:i}=er,{T0:s,T1:a,T2:o,T3:c}=tr;for(let e=0;e<n;e+=4)for(let i=0;i<4;i++)r[e+i]=t[n-e-4+i];St(t);for(let e=4;e<n-4;e++){const t=r[e],n=ar(i,t,t,t,t);r[e]=s[255&n]^a[n>>>8&255]^o[n>>>16&255]^c[n>>>24]}return r}function sr(e,t,r,n,i,s){return e[r<<8&65280|n>>>8&255]^t[i>>>8&65280|s>>>24&255]}function ar(e,t,r,n,i){return e[255&t|65280&r]|e[n>>>16&255|i>>>16&65280]<<16}function or(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=er;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const u=e.length/4-2;for(let s=0;s<u;s++){const s=e[c++]^sr(a,o,t,r,n,i),u=e[c++]^sr(a,o,r,n,i,t),h=e[c++]^sr(a,o,n,i,t,r),l=e[c++]^sr(a,o,i,t,r,n);t=s,r=u,n=h,i=l}return{s0:e[c++]^ar(s,t,r,n,i),s1:e[c++]^ar(s,r,n,i,t),s2:e[c++]^ar(s,n,i,t,r),s3:e[c++]^ar(s,i,t,r,n)}}function cr(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=tr;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const u=e.length/4-2;for(let s=0;s<u;s++){const s=e[c++]^sr(a,o,t,i,n,r),u=e[c++]^sr(a,o,r,t,i,n),h=e[c++]^sr(a,o,n,r,t,i),l=e[c++]^sr(a,o,i,n,r,t);t=s,r=u,n=h,i=l}return{s0:e[c++]^ar(s,t,i,n,r),s1:e[c++]^ar(s,r,t,i,n),s2:e[c++]^ar(s,n,r,t,i),s3:e[c++]^ar(s,i,n,r,t)}}function ur(e,t,r,n){bt(t,qt),bt(r);const i=r.length;Pt(r,n=Qt(i,n));const s=t,a=Kt(s);let{s0:o,s1:c,s2:u,s3:h}=or(e,a[0],a[1],a[2],a[3]);const l=Kt(r),f=Kt(n);for(let t=0;t+4<=l.length;t+=4){f[t+0]=l[t+0]^o,f[t+1]=l[t+1]^c,f[t+2]=l[t+2]^u,f[t+3]=l[t+3]^h;let r=1;for(let e=s.length-1;e>=0;e--)r=r+(255&s[e])|0,s[e]=255&r,r>>>=8;({s0:o,s1:c,s2:u,s3:h}=or(e,a[0],a[1],a[2],a[3]))}const y=qt*Math.floor(l.length/4);if(y<i){const e=new Uint32Array([o,c,u,h]),t=vt(e);for(let e=y,s=0;e<i;e++,s++)n[e]=r[e]^t[s];St(e)}return n}function hr(e,t,r,n,i){bt(r,qt),bt(n),i=Qt(n.length,i);const s=r,a=Kt(s),o=Bt(s),c=Kt(n),u=Kt(i),h=t?0:12,l=n.length;let f=o.getUint32(h,t),{s0:y,s1:p,s2:d,s3:g}=or(e,a[0],a[1],a[2],a[3]);for(let r=0;r+4<=c.length;r+=4)u[r+0]=c[r+0]^y,u[r+1]=c[r+1]^p,u[r+2]=c[r+2]^d,u[r+3]=c[r+3]^g,f=f+1>>>0,o.setUint32(h,f,t),({s0:y,s1:p,s2:d,s3:g}=or(e,a[0],a[1],a[2],a[3]));const w=qt*Math.floor(c.length/4);if(w<l){const e=new Uint32Array([y,p,d,g]),t=vt(e);for(let e=w,r=0;e<l;e++,r++)i[e]=n[e]^t[r];St(e)}return i}const lr=/* @__PURE__ */xt({blockSize:16,nonceLength:16},(function(e,t){function r(r,n){if(bt(r),void 0!==n&&(bt(n),!Tt(n)))throw Error("unaligned destination");const i=nr(e),s=Mt(t),a=[i,s];Tt(r)||a.push(r=Mt(r));const o=ur(i,s,r,n);return St(...a),o}return{encrypt:(e,t)=>r(e,t),decrypt:(e,t)=>r(e,t)}}));const fr=/* @__PURE__ */xt({blockSize:16,nonceLength:16},(function(e,t,r={}){const n=!r.disablePadding;return{encrypt(r,i){const s=nr(e),{b:a,o,out:c}=function(e,t,r){bt(e);let n=e.length;const i=n%qt;if(!t&&0!==i)throw Error("aec/(cbc-ecb): unpadded plaintext with disabled padding");Tt(e)||(e=Mt(e));const s=Kt(e);if(t){let e=qt-i;e||(e=qt),n+=e}return Pt(e,r=Qt(n,r)),{b:s,o:Kt(r),out:r}}(r,n,i);let u=t;const h=[s];Tt(u)||h.push(u=Mt(u));const l=Kt(u);let f=l[0],y=l[1],p=l[2],d=l[3],g=0;for(;g+4<=a.length;)f^=a[g+0],y^=a[g+1],p^=a[g+2],d^=a[g+3],({s0:f,s1:y,s2:p,s3:d}=or(s,f,y,p,d)),o[g++]=f,o[g++]=y,o[g++]=p,o[g++]=d;if(n){const e=function(e){const t=new Uint8Array(16),r=Kt(t);t.set(e);const n=qt-e.length;for(let e=qt-n;e<qt;e++)t[e]=n;return r}(r.subarray(4*g));f^=e[0],y^=e[1],p^=e[2],d^=e[3],({s0:f,s1:y,s2:p,s3:d}=or(s,f,y,p,d)),o[g++]=f,o[g++]=y,o[g++]=p,o[g++]=d}return St(...h),c},decrypt(r,i){!function(e){if(bt(e),e.length%qt!=0)throw Error("aes-(cbc/ecb).decrypt ciphertext should consist of blocks with size 16")}(r);const s=ir(e);let a=t;const o=[s];Tt(a)||o.push(a=Mt(a));const c=Kt(a);i=Qt(r.length,i),Tt(r)||o.push(r=Mt(r)),Pt(r,i);const u=Kt(r),h=Kt(i);let l=c[0],f=c[1],y=c[2],p=c[3];for(let e=0;e+4<=u.length;){const t=l,r=f,n=y,i=p;l=u[e+0],f=u[e+1],y=u[e+2],p=u[e+3];const{s0:a,s1:o,s2:c,s3:d}=cr(s,l,f,y,p);h[e++]=a^t,h[e++]=o^r,h[e++]=c^n,h[e++]=d^i}return St(...o),function(e,t){if(!t)return e;const r=e.length;if(!r)throw Error("aes/pcks5: empty ciphertext not allowed");const n=e[r-1];if(n<=0||n>16)throw Error("aes/pcks5: wrong padding");const i=e.subarray(0,-n);for(let t=0;t<n;t++)if(e[r-t-1]!==n)throw Error("aes/pcks5: wrong padding");return i}(i,n)}}})),yr=/* @__PURE__ */xt({blockSize:16,nonceLength:16},(function(e,t){function r(r,n,i){bt(r);const s=r.length;if(Ut(r,i=Qt(s,i)))throw Error("overlapping src and dst not supported.");const a=nr(e);let o=t;const c=[a];Tt(o)||c.push(o=Mt(o)),Tt(r)||c.push(r=Mt(r));const u=Kt(r),h=Kt(i),l=n?h:u,f=Kt(o);let y=f[0],p=f[1],d=f[2],g=f[3];for(let e=0;e+4<=u.length;){const{s0:t,s1:r,s2:n,s3:i}=or(a,y,p,d,g);h[e+0]=u[e+0]^t,h[e+1]=u[e+1]^r,h[e+2]=u[e+2]^n,h[e+3]=u[e+3]^i,y=l[e++],p=l[e++],d=l[e++],g=l[e++]}const w=qt*Math.floor(u.length/4);if(w<s){({s0:y,s1:p,s2:d,s3:g}=or(a,y,p,d,g));const e=vt(new Uint32Array([y,p,d,g]));for(let t=w,n=0;t<s;t++,n++)i[t]=r[t]^e[n];St(e)}return St(...c),i}return{encrypt:(e,t)=>r(e,!0,t),decrypt:(e,t)=>r(e,!1,t)}}));function pr(e,t,r,n,i){const s=i?i.length:0,a=e.create(r,n.length+s);i&&a.update(i);const o=function(e,t,r){const n=new Uint8Array(16),i=Bt(n);return Rt(i,0,BigInt(t),r),Rt(i,8,BigInt(e),r),n}(8*n.length,8*s,t);a.update(n),a.update(o);const c=a.digest();return St(o),c}const dr=/* @__PURE__ */xt({blockSize:16,nonceLength:12,tagLength:16,varSizeNonce:!0},(function(e,t,r){if(t.length<8)throw Error("aes/gcm: invalid nonce length");function n(e,t,n){const i=pr(Gt,!1,e,n,r);for(let e=0;e<t.length;e++)i[e]^=t[e];return i}function i(){const r=nr(e),n=jt.slice(),i=jt.slice();if(hr(r,!1,i,i,n),12===t.length)i.set(t);else{const e=jt.slice();Rt(Bt(e),8,BigInt(8*t.length),!1);const r=Gt.create(n).update(t).update(e);r.digestInto(i),r.destroy()}return{xk:r,authKey:n,counter:i,tagMask:hr(r,!1,i,jt)}}return{encrypt(e){const{xk:t,authKey:r,counter:s,tagMask:a}=i(),o=new Uint8Array(e.length+16),c=[t,r,s,a];Tt(e)||c.push(e=Mt(e)),hr(t,!1,s,e,o.subarray(0,e.length));const u=n(r,a,o.subarray(0,o.length-16));return c.push(u),o.set(u,e.length),St(...c),o},decrypt(e){const{xk:t,authKey:r,counter:s,tagMask:a}=i(),o=[t,r,a,s];Tt(e)||o.push(e=Mt(e));const c=e.subarray(0,-16),u=e.subarray(-16),h=n(r,a,c);if(o.push(h),!Dt(h,u))throw Error("aes/gcm: invalid ghash tag");const l=hr(t,!1,s,c);return St(...o),l}}}));function gr(e){return e instanceof Uint32Array||ArrayBuffer.isView(e)&&"Uint32Array"===e.constructor.name}function wr(e,t){if(bt(t,16),!gr(e))throw Error("_encryptBlock accepts result of expandKeyLE");const r=Kt(t);let{s0:n,s1:i,s2:s,s3:a}=or(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}function Ar(e,t){if(bt(t,16),!gr(e))throw Error("_decryptBlock accepts result of expandKeyLE");const r=Kt(t);let{s0:n,s1:i,s2:s,s3:a}=cr(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}const mr={encrypt(e,t){if(t.length>=2**32)throw Error("plaintext should be less than 4gb");const r=nr(e);if(16===t.length)wr(r,t);else{const e=Kt(t);let n=e[0],i=e[1];for(let t=0,s=1;t<6;t++)for(let t=2;t<e.length;t+=2,s++){const{s0:a,s1:o,s2:c,s3:u}=or(r,n,i,e[t],e[t+1]);n=a,i=o^Wt(s),e[t]=c,e[t+1]=u}e[0]=n,e[1]=i}r.fill(0)},decrypt(e,t){if(t.length-8>=2**32)throw Error("ciphertext should be less than 4gb");const r=ir(e),n=t.length/8-1;if(1===n)Ar(r,t);else{const e=Kt(t);let i=e[0],s=e[1];for(let t=0,a=6*n;t<6;t++)for(let t=2*n;t>=1;t-=2,a--){s^=Wt(a);const{s0:n,s1:o,s2:c,s3:u}=cr(r,i,s,e[t],e[t+1]);i=n,s=o,e[t]=c,e[t+1]=u}e[0]=i,e[1]=s}r.fill(0)}},br=/* @__PURE__ */new Uint8Array(8).fill(166),kr=/* @__PURE__ */xt({blockSize:8},(e=>({encrypt(t){if(!t.length||t.length%8!=0)throw Error("invalid plaintext length");if(8===t.length)throw Error("8-byte keys not allowed in AESKW, use AESKWP instead");const r=function(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];bt(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}(br,t);return mr.encrypt(e,r),r},decrypt(t){if(t.length%8!=0||t.length<24)throw Error("invalid ciphertext length");const r=Mt(t);if(mr.decrypt(e,r),!Dt(r.subarray(0,8),br))throw Error("integrity check failed");return r.subarray(0,8).fill(0),r.subarray(8)}}))),Er={expandKeyLE:nr,expandKeyDecLE:ir,encrypt:or,decrypt:cr,encryptBlock:wr,decryptBlock:Ar,ctrCounter:ur,ctr32:hr};async function vr(e){switch(e){case T.symmetric.aes128:case T.symmetric.aes192:case T.symmetric.aes256:throw Error("Not a legacy cipher");case T.symmetric.cast5:case T.symmetric.blowfish:case T.symmetric.twofish:case T.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return _y})),r=T.read(T.symmetric,e),n=t.get(r);if(!n)throw Error("Unsupported cipher algorithm");return n}default:throw Error("Unsupported cipher algorithm")}}function Kr(e){switch(e){case T.symmetric.aes128:case T.symmetric.aes192:case T.symmetric.aes256:case T.symmetric.twofish:return 16;case T.symmetric.blowfish:case T.symmetric.cast5:case T.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function Sr(e){switch(e){case T.symmetric.aes128:case T.symmetric.blowfish:case T.symmetric.cast5:return 16;case T.symmetric.aes192:case T.symmetric.tripledes:return 24;case T.symmetric.aes256:case T.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function Br(e){return{keySize:Sr(e),blockSize:Kr(e)}}const Ir=F.getWebCrypto();async function Cr(e,t,r){const{keySize:n}=Br(e);if(!F.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");try{const e=await Ir.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),n=await Ir.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),i=await Ir.wrapKey("raw",n,e,{name:"AES-KW"});return new Uint8Array(i)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return kr(t).encrypt(r)}async function Ur(e,t,r){const{keySize:n}=Br(e);if(!F.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");let i;try{i=await Ir.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return F.printDebugError("Browser did not support operation: "+e.message),kr(t).decrypt(r)}try{const e=await Ir.unwrapKey("raw",r,i,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await Ir.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}async function Pr(e,t,r,n,i){const s=F.getWebCrypto(),a=T.read(T.webHash,e);if(!a)throw Error("Hash algo not supported with HKDF");const o=await s.importKey("raw",t,"HKDF",!1,["deriveBits"]),c=await s.deriveBits({name:"HKDF",hash:a,salt:r,info:n},o,8*i);return new Uint8Array(c)}const Dr={x25519:F.encodeUTF8("OpenPGP X25519"),x448:F.encodeUTF8("OpenPGP X448")};async function xr(e){switch(e){case T.publicKey.x25519:try{const e=F.getWebCrypto(),t=await e.generateKey("X25519",!0,["deriveKey","deriveBits"]).catch((e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e})),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);if(r.x!==n.x){const e=Error("Unexpected mismatching public point");throw e.name="NotSupportedError",e}return{A:new Uint8Array(G(n.x)),k:G(r.d)}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then((function(){return By})),{secretKey:r,publicKey:n}=t.box.keyPair();return{A:n,k:r}}case T.publicKey.x448:{const e=await F.getNobleCurve(T.publicKey.x448),{secretKey:t,publicKey:r}=e.keygen();return{A:r,k:t}}default:throw Error("Unsupported ECDH algorithm")}}async function Qr(e,t,r){switch(e){case T.publicKey.x25519:try{const{ephemeralPublicKey:n,sharedSecret:i}=await Lr(e,t),s=await Fr(e,n,t,r);return F.equalsUint8Array(i,s)}catch(e){return!1}case T.publicKey.x448:{const e=(await F.getNobleCurve(T.publicKey.x448)).getPublicKey(r);return F.equalsUint8Array(t,e)}default:return!1}}async function Rr(e,t,r){const{ephemeralPublicKey:n,sharedSecret:i}=await Lr(e,r),s=F.concatUint8Array([n,r,i]);switch(e){case T.publicKey.x25519:{const e=T.symmetric.aes128,{keySize:r}=Br(e),i=await Pr(T.hash.sha256,s,new Uint8Array,Dr.x25519,r);return{ephemeralPublicKey:n,wrappedKey:await Cr(e,i,t)}}case T.publicKey.x448:{const e=T.symmetric.aes256,{keySize:r}=Br(T.symmetric.aes256),i=await Pr(T.hash.sha512,s,new Uint8Array,Dr.x448,r);return{ephemeralPublicKey:n,wrappedKey:await Cr(e,i,t)}}default:throw Error("Unsupported ECDH algorithm")}}async function Tr(e,t,r,n,i){const s=await Fr(e,t,n,i),a=F.concatUint8Array([t,n,s]);switch(e){case T.publicKey.x25519:{const e=T.symmetric.aes128,{keySize:t}=Br(e);return Ur(e,await Pr(T.hash.sha256,a,new Uint8Array,Dr.x25519,t),r)}case T.publicKey.x448:{const e=T.symmetric.aes256,{keySize:t}=Br(T.symmetric.aes256);return Ur(e,await Pr(T.hash.sha512,a,new Uint8Array,Dr.x448,t),r)}default:throw Error("Unsupported ECDH algorithm")}}function Mr(e){switch(e){case T.publicKey.x25519:return 32;case T.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}}async function Lr(e,t){switch(e){case T.publicKey.x25519:try{const r=F.getWebCrypto(),n=await r.generateKey("X25519",!0,["deriveKey","deriveBits"]).catch((e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e})),i=await r.exportKey("jwk",n.publicKey);if((await r.exportKey("jwk",n.privateKey)).x!==i.x){const e=Error("Unexpected mismatching public point");throw e.name="NotSupportedError",e}const s=Nr(e,t),a=await r.importKey("jwk",s,"X25519",!1,[]),o=await r.deriveBits({name:"X25519",public:a},n.privateKey,8*Mr(e));return{sharedSecret:new Uint8Array(o),ephemeralPublicKey:new Uint8Array(G(i.x))}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:r}=await Promise.resolve().then((function(){return By})),{secretKey:n,publicKey:i}=r.box.keyPair(),s=r.scalarMult(n,t);return Or(s),{ephemeralPublicKey:i,sharedSecret:s}}case T.publicKey.x448:{const e=await F.getNobleCurve(T.publicKey.x448),{secretKey:r,publicKey:n}=e.keygen(),i=e.getSharedSecret(r,t);return Or(i),{ephemeralPublicKey:n,sharedSecret:i}}default:throw Error("Unsupported ECDH algorithm")}}async function Fr(e,t,r,n){switch(e){case T.publicKey.x25519:try{const i=F.getWebCrypto(),s=function(e,t,r){if(e===T.publicKey.x25519){const n=Nr(e,t);return n.d=q(r),n}throw Error("Unsupported ECDH algorithm")}(e,r,n),a=Nr(e,t),o=await i.importKey("jwk",s,"X25519",!1,["deriveKey","deriveBits"]),c=await i.importKey("jwk",a,"X25519",!1,[]),u=await i.deriveBits({name:"X25519",public:c},o,8*Mr(e));return new Uint8Array(u)}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:r}=await Promise.resolve().then((function(){return By})),i=r.scalarMult(n,t);return Or(i),i}case T.publicKey.x448:{const e=(await F.getNobleCurve(T.publicKey.x448)).getSharedSecret(n,t);return Or(e),e}default:throw Error("Unsupported ECDH algorithm")}}function Or(e){let t=0;for(let r=0;r<e.length;r++)t|=e[r];if(0===t)throw Error("Unexpected low order point")}function Nr(e,t){if(e===T.publicKey.x25519){return{kty:"OKP",crv:"X25519",x:q(t),ext:!0}}throw Error("Unsupported ECDH algorithm")}var _r=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:Tr,encrypt:Rr,generate:xr,generateEphemeralEncryptionMaterial:Lr,getPayloadSize:Mr,recomputeSharedSecret:Fr,validateParams:Qr});const Hr=F.getWebCrypto(),zr=F.getNodeCrypto(),Gr={[T.curve.nistP256]:"P-256",[T.curve.nistP384]:"P-384",[T.curve.nistP521]:"P-521"},qr=zr?zr.getCurves():[],jr=zr?{[T.curve.secp256k1]:qr.includes("secp256k1")?"secp256k1":void 0,[T.curve.nistP256]:qr.includes("prime256v1")?"prime256v1":void 0,[T.curve.nistP384]:qr.includes("secp384r1")?"secp384r1":void 0,[T.curve.nistP521]:qr.includes("secp521r1")?"secp521r1":void 0,[T.curve.ed25519Legacy]:qr.includes("ED25519")?"ED25519":void 0,[T.curve.curve25519Legacy]:qr.includes("X25519")?"X25519":void 0,[T.curve.brainpoolP256r1]:qr.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[T.curve.brainpoolP384r1]:qr.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[T.curve.brainpoolP512r1]:qr.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},Vr={[T.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:T.publicKey.ecdsa,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:jr[T.curve.nistP256],web:Gr[T.curve.nistP256],payloadSize:32,sharedSize:256,wireFormatLeadingByte:4},[T.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:T.publicKey.ecdsa,hash:T.hash.sha384,cipher:T.symmetric.aes192,node:jr[T.curve.nistP384],web:Gr[T.curve.nistP384],payloadSize:48,sharedSize:384,wireFormatLeadingByte:4},[T.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:T.publicKey.ecdsa,hash:T.hash.sha512,cipher:T.symmetric.aes256,node:jr[T.curve.nistP521],web:Gr[T.curve.nistP521],payloadSize:66,sharedSize:528,wireFormatLeadingByte:4},[T.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:T.publicKey.ecdsa,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:jr[T.curve.secp256k1],payloadSize:32,wireFormatLeadingByte:4},[T.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:T.publicKey.eddsaLegacy,hash:T.hash.sha512,node:!1,payloadSize:32,wireFormatLeadingByte:64},[T.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:T.publicKey.ecdh,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:!1,payloadSize:32,wireFormatLeadingByte:64},[T.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:T.publicKey.ecdsa,hash:T.hash.sha256,cipher:T.symmetric.aes128,node:jr[T.curve.brainpoolP256r1],payloadSize:32,wireFormatLeadingByte:4},[T.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:T.publicKey.ecdsa,hash:T.hash.sha384,cipher:T.symmetric.aes192,node:jr[T.curve.brainpoolP384r1],payloadSize:48,wireFormatLeadingByte:4},[T.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:T.publicKey.ecdsa,hash:T.hash.sha512,cipher:T.symmetric.aes256,node:jr[T.curve.brainpoolP512r1],payloadSize:64,wireFormatLeadingByte:4}};class Yr{constructor(e){try{this.name=e instanceof We?e.getName():T.write(T.curve,e)}catch(e){throw new at("Unknown curve")}const t=Vr[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.wireFormatLeadingByte=t.wireFormatLeadingByte,this.web&&F.getWebCrypto()?this.type="web":this.node&&F.getNodeCrypto()?this.type="node":this.name===T.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===T.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e,t){const r=await Hr.generateKey({name:"ECDSA",namedCurve:Gr[e]},!0,["sign","verify"]),n=await Hr.exportKey("jwk",r.privateKey);return{publicKey:en(await Hr.exportKey("jwk",r.publicKey),t),privateKey:G(n.d)}}(this.name,this.wireFormatLeadingByte)}catch(e){return F.printDebugError("Browser did not support generating ec key "+e.message),$r(this.name)}case"node":return async function(e){const t=zr.createECDH(jr[e]);return await t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const{k:e,A:t}=await xr(T.publicKey.x25519),r=e.slice().reverse();r[0]=127&r[0]|64,r[31]&=248;return{publicKey:F.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:r}}case"ed25519Legacy":{const{seed:e,A:t}=await ht(T.publicKey.ed25519);return{publicKey:F.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:e}}default:return $r(this.name)}}}async function Zr(e){const t=new Yr(e),{oid:r,hash:n,cipher:i}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:F.leftPad(s.privateKey,t.payloadSize),hash:n,cipher:i}}function Jr(e){return Vr[e.getName()].hash}async function Xr(e,t,r,n){const i={[T.curve.nistP256]:!0,[T.curve.nistP384]:!0,[T.curve.nistP521]:!0,[T.curve.secp256k1]:!0,[T.curve.curve25519Legacy]:e===T.publicKey.ecdh,[T.curve.brainpoolP256r1]:!0,[T.curve.brainpoolP384r1]:!0,[T.curve.brainpoolP512r1]:!0},s=t.getName();if(!i[s])return!1;if(s===T.curve.curve25519Legacy){const e=n.slice().reverse();return!(r.length<1||64!==r[0])&&Qr(T.publicKey.x25519,r.subarray(1),e)}const a=(await F.getNobleCurve(T.publicKey.ecdsa,s)).getPublicKey(n,!1);return!!F.equalsUint8Array(a,r)}function Wr(e,t){const{payloadSize:r,wireFormatLeadingByte:n,name:i}=e,s=i===T.curve.curve25519Legacy||i===T.curve.ed25519Legacy?r:2*r;if(t[0]!==n||t.length!==s+1)throw Error("Invalid point encoding")}async function $r(e){const t=await F.getNobleCurve(T.publicKey.ecdsa,e),{secretKey:r}=t.keygen();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function en(e,t){const r=G(e.x),n=G(e.y),i=new Uint8Array(r.length+n.length+1);return i[0]=t,i.set(r,1),i.set(n,r.length+1),i}function tn(e,t,r){const n=e,i=r.slice(1,n+1),s=r.slice(n+1,2*n+1);return{kty:"EC",crv:t,x:q(i),y:q(s),ext:!0}}function rn(e,t,r,n){const i=tn(e,t,r);return i.d=q(n),i}const nn=F.getWebCrypto(),sn=F.getNodeCrypto();async function an(e,t,r,n,i,s){const a=new Yr(e);if(Wr(a,n),r&&!F.isStream(r)){const e={publicKey:n,privateKey:i};switch(a.type){case"web":try{return await async function(e,t,r,n){const i=e.payloadSize,s=rn(e.payloadSize,Gr[e.name],n.publicKey,n.privateKey),a=await nn.importKey("jwk",s,{name:"ECDSA",namedCurve:Gr[e.name],hash:{name:T.read(T.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await nn.sign({name:"ECDSA",namedCurve:Gr[e.name],hash:{name:T.read(T.webHash,t)}},a,r));return{r:o.slice(0,i),s:o.slice(i,i<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;F.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return async function(e,t,r,n){const i=F.nodeRequire("eckey-utils"),s=F.getNodeBuffer(),{privateKey:a}=i.generateDer({curveName:jr[e.name],privateKey:s.from(n)}),o=sn.createSign(T.read(T.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),u=e.payloadSize;return{r:c.subarray(0,u),s:c.subarray(u,u<<1)}}(a,t,r,i)}}const o=(await F.getNobleCurve(T.publicKey.ecdsa,a.name)).sign(s,i,{lowS:!1});return{r:fe(o.r,"be",a.payloadSize),s:fe(o.s,"be",a.payloadSize)}}async function on(e,t,r,n,i,s){const a=new Yr(e);Wr(a,i);const o=async()=>0===s[0]&&cn(a,r,s.subarray(1),i);if(n&&!F.isStream(n))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:n},i,s){const a=tn(e.payloadSize,Gr[e.name],s),o=await nn.importKey("jwk",a,{name:"ECDSA",namedCurve:Gr[e.name],hash:{name:T.read(T.webHash,e.hash)}},!1,["verify"]),c=F.concatUint8Array([r,n]).buffer;return nn.verify({name:"ECDSA",namedCurve:Gr[e.name],hash:{name:T.read(T.webHash,t)}},o,c,i)}(a,t,r,n,i);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;F.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=await async function(e,t,{r,s:n},i,s){const a=F.nodeRequire("eckey-utils"),o=F.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:jr[e.name],publicKey:o.from(s)}),u=sn.createVerify(T.read(T.hash,t));u.write(i),u.end();const h=F.concatUint8Array([r,n]);try{return u.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},h)}catch(e){return!1}}(a,t,r,n,i);return e||o()}}return await cn(a,r,s,i)||o()}async function cn(e,t,r,n){return(await F.getNobleCurve(T.publicKey.ecdsa,e.name)).verify(F.concatUint8Array([t.r,t.s]),r,n,{lowS:!1})}var un=/*#__PURE__*/Object.freeze({__proto__:null,sign:an,validateParams:async function(e,t,r){const n=new Yr(e);if(n.keyType!==T.publicKey.ecdsa)return!1;switch(n.type){case"web":case"node":{const n=pe(8),i=T.hash.sha256,s=await Re(i,n);try{const a=await an(e,i,n,t,r,s);return await on(e,i,a,n,t,s)}catch(e){return!1}}default:return Xr(T.publicKey.ecdsa,e,t,r)}},verify:on});async function hn(e,t,r,n,i,s){Wr(new Yr(e),n);const{RS:a}=await lt(T.publicKey.ed25519,0,0,n.subarray(1),i,s);return{r:a.subarray(0,32),s:a.subarray(32)}}async function ln(e,t,{r,s:n},i,s,a){Wr(new Yr(e),s);const o=F.concatUint8Array([r,n]);return ft(T.publicKey.ed25519,0,{RS:o},0,s.subarray(1),a)}async function fn(e,t,r){return e.getName()===T.curve.ed25519Legacy&&(!(t.length<1||64!==t[0])&&yt(T.publicKey.ed25519,t.subarray(1),r))}var yn=/*#__PURE__*/Object.freeze({__proto__:null,sign:hn,validateParams:fn,verify:ln});function pn(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const n=e.subarray(t-r),i=new Uint8Array(r).fill(r);if(F.equalsUint8Array(n,i))return e.subarray(0,t-r)}}throw Error("Invalid padding")}function dn(e,t,r,n){return F.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),F.stringToUint8Array("Anonymous Sender    "),r.replacementFingerprint||n])}async function gn(e,t,r,n,i=!1,s=!1){let a;if(i){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await Re(e,F.concatUint8Array([new Uint8Array([0,0,0,1]),t,n]))).subarray(0,r)}async function wn(e,t){switch(e.type){case"curve25519Legacy":{const{sharedSecret:r,ephemeralPublicKey:n}=await Lr(T.publicKey.x25519,t.subarray(1));return{publicKey:F.concatUint8Array([new Uint8Array([e.wireFormatLeadingByte]),n]),sharedKey:r}}case"web":if(e.web&&F.getWebCrypto())try{return await async function(e,t){const r=F.getWebCrypto(),n=tn(e.payloadSize,e.web,t);let i=r.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),s=r.importKey("jwk",n,{name:"ECDH",namedCurve:e.web},!1,[]);[i,s]=await Promise.all([i,s]);let a=r.deriveBits({name:"ECDH",namedCurve:e.web,public:s},i.privateKey,e.sharedSize),o=r.exportKey("jwk",i.publicKey);[a,o]=await Promise.all([a,o]);const c=new Uint8Array(a),u=new Uint8Array(en(o,e.wireFormatLeadingByte));return{publicKey:u,sharedKey:c}}(e,t)}catch(r){return F.printDebugError(r),En(e,t)}break;case"node":return async function(e,t){const r=F.getNodeCrypto(),n=r.createECDH(e.node);n.generateKeys();const i=new Uint8Array(n.computeSecret(t));return{publicKey:new Uint8Array(n.getPublicKey()),sharedKey:i}}(e,t);default:return En(e,t)}}async function An(e,t,r,n,i){const s=function(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}(r),a=new Yr(e);Wr(a,n);const{publicKey:o,sharedKey:c}=await wn(a,n),u=dn(T.publicKey.ecdh,e,t,i),{keySize:h}=Br(t.cipher),l=await gn(t.hash,c,h,u);return{publicKey:o,wrappedKey:await Cr(t.cipher,l,s)}}async function mn(e,t,r,n){if(n.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(n,e.payloadSize-n.length),n=t}switch(e.type){case"curve25519Legacy":{const e=n.slice().reverse();return{secretKey:e,sharedKey:await Fr(T.publicKey.x25519,t.subarray(1),r.subarray(1),e)}}case"web":if(e.web&&F.getWebCrypto())try{return await async function(e,t,r,n){const i=F.getWebCrypto(),s=rn(e.payloadSize,e.web,r,n);let a=i.importKey("jwk",s,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const o=tn(e.payloadSize,e.web,t);let c=i.importKey("jwk",o,{name:"ECDH",namedCurve:e.web},!0,[]);[a,c]=await Promise.all([a,c]);let u=i.deriveBits({name:"ECDH",namedCurve:e.web,public:c},a,e.sharedSize),h=i.exportKey("jwk",a);[u,h]=await Promise.all([u,h]);const l=new Uint8Array(u);return{secretKey:G(h.d),sharedKey:l}}(e,t,r,n)}catch(r){return F.printDebugError(r),kn(e,t,n)}break;case"node":return async function(e,t,r){const n=F.getNodeCrypto(),i=n.createECDH(e.node);i.setPrivateKey(r);const s=new Uint8Array(i.computeSecret(t));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:s}}(e,t,n);default:return kn(e,t,n)}}async function bn(e,t,r,n,i,s,a){const o=new Yr(e);Wr(o,i),Wr(o,r);const{sharedKey:c}=await mn(o,r,i,s),u=dn(T.publicKey.ecdh,e,t,a),{keySize:h}=Br(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await gn(t.hash,c,h,u,1===e,2===e);return pn(await Ur(t.cipher,r,n))}catch(e){l=e}throw l}async function kn(e,t,r){return{secretKey:r,sharedKey:(await F.getNobleCurve(T.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function En(e,t){const r=await F.getNobleCurve(T.publicKey.ecdh,e.name),{publicKey:n,privateKey:i}=await e.genKeyPair();return{publicKey:n,sharedKey:r.getSharedSecret(i,t).subarray(1)}}var vn=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:bn,encrypt:An,validateParams:async function(e,t,r){return Xr(T.publicKey.ecdh,e,t,r)}}),Kn=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:Yr,ecdh:vn,ecdhX:_r,ecdsa:un,eddsa:At,eddsaLegacy:yn,generate:Zr,getPreferredHashAlgo:Jr});const Sn=BigInt(0),Bn=BigInt(1);const In=new Set([T.hash.sha1,T.hash.sha256,T.hash.sha512]),Cn=F.getWebCrypto(),Un=F.getNodeCrypto();async function Pn(e,t){if(e===T.publicKey.pqc_mlkem_x25519){const{ml_kem768:e}=await Promise.resolve().then((function(){return pd})),{publicKey:r,secretKey:n}=e.keygen(t);return{mlkemPublicKey:r,mlkemSecretKey:n}}throw Error("Unsupported KEM algorithm")}async function Dn(e){const{eccPublicKey:t,eccSecretKey:r}=await async function(e){if(e===T.publicKey.pqc_mlkem_x25519){const{A:e,k:t}=await xr(T.publicKey.x25519);return{eccPublicKey:e,eccSecretKey:t}}throw Error("Unsupported KEM algorithm")}(e),{mlkemPublicKey:n,mlkemSeed:i,mlkemSecretKey:s}=await async function(e){if(e===T.publicKey.pqc_mlkem_x25519){const t=pe(64),{mlkemSecretKey:r,mlkemPublicKey:n}=await Pn(e,t);return{mlkemSeed:t,mlkemSecretKey:r,mlkemPublicKey:n}}throw Error("Unsupported KEM algorithm")}(e);return{eccPublicKey:t,eccSecretKey:r,mlkemPublicKey:n,mlkemSeed:i,mlkemSecretKey:s}}async function xn(e,t,r,n){const{eccKeyShare:i,eccCipherText:s}=await async function(e,t){if(e===T.publicKey.pqc_mlkem_x25519){const{ephemeralPublicKey:e,sharedSecret:r}=await Lr(T.publicKey.x25519,t);return{eccCipherText:e,eccKeyShare:r}}throw Error("Unsupported KEM algorithm")}(e,t),{mlkemKeyShare:a,mlkemCipherText:o}=await async function(e,t){if(e===T.publicKey.pqc_mlkem_x25519){const{ml_kem768:e}=await Promise.resolve().then((function(){return pd})),{cipherText:r,sharedSecret:n}=e.encapsulate(t);return{mlkemCipherText:r,mlkemKeyShare:n}}throw Error("Unsupported KEM algorithm")}(e,r),c=await Rn(e,a,i,s,t);return{eccCipherText:s,mlkemCipherText:o,wrappedKey:await Cr(T.symmetric.aes256,c,n)}}async function Qn(e,t,r,n,i,s,a,o){const c=await async function(e,t,r,n){if(e===T.publicKey.pqc_mlkem_x25519)return await Fr(T.publicKey.x25519,t,n,r);throw Error("Unsupported KEM algorithm")}(e,t,n,i),u=await async function(e,t,r){if(e===T.publicKey.pqc_mlkem_x25519){const{ml_kem768:e}=await Promise.resolve().then((function(){return pd}));return e.decapsulate(t,r)}throw Error("Unsupported KEM algorithm")}(e,r,s),h=await Rn(e,u,c,t,i);return await Ur(T.symmetric.aes256,h,o)}async function Rn(e,t,r,n,i){const s=F.encodeUTF8("OpenPGPCompositeKDFv1"),a=F.concatUint8Array([t,r,n,i,new Uint8Array([e]),s,new Uint8Array([s.length])]);return await Re(T.hash.sha3_256,a)}async function Tn(e,t,r,n,i){const s=async function(e,t,r){if(e===T.publicKey.pqc_mlkem_x25519)return Qr(T.publicKey.x25519,t,r);throw Error("Unsupported KEM algorithm")}(e,t,r),a=async function(e,t,r){if(e===T.publicKey.pqc_mlkem_x25519){const{mlkemPublicKey:n}=await Pn(e,r);return F.equalsUint8Array(t,n)}throw Error("Unsupported KEM algorithm")}(e,n,i);return await s&&await a}async function Mn(e,t){if(e===T.publicKey.pqc_mldsa_ed25519){const{ml_dsa65:e}=await Promise.resolve().then((function(){return pd})),{secretKey:r,publicKey:n}=e.keygen(t);return{mldsaSecretKey:r,mldsaPublicKey:n}}throw Error("Unsupported signature algorithm")}async function Ln(e){if(e===T.publicKey.pqc_mldsa_ed25519){const{eccSecretKey:t,eccPublicKey:r}=await async function(e){if(e===T.publicKey.pqc_mldsa_ed25519){const{A:e,seed:t}=await ht(T.publicKey.ed25519);return{eccPublicKey:e,eccSecretKey:t}}throw Error("Unsupported signature algorithm")}(e),{mldsaSeed:n,mldsaSecretKey:i,mldsaPublicKey:s}=await async function(e){if(e===T.publicKey.pqc_mldsa_ed25519){const t=pe(32),{mldsaSecretKey:r,mldsaPublicKey:n}=await Mn(e,t);return{mldsaSeed:t,mldsaSecretKey:r,mldsaPublicKey:n}}throw Error("Unsupported signature algorithm")}(e);return{eccSecretKey:t,eccPublicKey:r,mldsaSeed:n,mldsaSecretKey:i,mldsaPublicKey:s}}throw Error("Unsupported signature algorithm")}async function Fn(e,t,r,n,i,s){if(e===T.publicKey.pqc_mldsa_ed25519){const{eccSignature:t}=await async function(e,t,r,n,i){if(e===T.publicKey.pqc_mldsa_ed25519){const{RS:e}=await lt(T.publicKey.ed25519,0,0,n,r,i);return{eccSignature:e}}throw Error("Unsupported signature algorithm")}(e,0,r,n,s),{mldsaSignature:a}=await async function(e,t,r){if(e===T.publicKey.pqc_mldsa_ed25519){const{ml_dsa65:e}=await Promise.resolve().then((function(){return pd}));return{mldsaSignature:e.sign(t,r)}}throw Error("Unsupported signature algorithm")}(e,i,s);return{eccSignature:t,mldsaSignature:a}}throw Error("Unsupported signature algorithm")}async function On(e,t,r,n,i,{eccSignature:s,mldsaSignature:a}){if(e===T.publicKey.pqc_mldsa_ed25519){const t=async function(e,t,r,n,i){if(e===T.publicKey.pqc_mldsa_ed25519)return ft(T.publicKey.ed25519,0,{RS:i},0,r,n);throw Error("Unsupported signature algorithm")}(e,0,r,i,s),o=async function(e,t,r,n){if(e===T.publicKey.pqc_mldsa_ed25519){const{ml_dsa65:e}=await Promise.resolve().then((function(){return pd}));return e.verify(t,r,n)}throw Error("Unsupported signature algorithm")}(e,n,i,a);return await t&&await o}throw Error("Unsupported signature algorithm")}function Nn(e,t){if(e===T.publicKey.pqc_mldsa_ed25519)return Te(t)>=32;throw Error("Unsupported signature algorithm")}async function _n(e,t,r,n,i){const s=async function(e,t,r){if(e===T.publicKey.pqc_mldsa_ed25519)return yt(T.publicKey.ed25519,t,r);throw Error("Unsupported signature algorithm")}(e,t,r),a=async function(e,t,r){if(e===T.publicKey.pqc_mldsa_ed25519){const{mldsaPublicKey:n}=await Mn(e,r);return F.equalsUint8Array(t,n)}throw Error("Unsupported signature algorithm")}(e,n,i);return await s&&await a}class Hn{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return F.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class zn{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!F.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return F.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}class Gn{constructor(e){if(e){const{version:t,hash:r,cipher:n,replacementFingerprint:i}=e;this.version=t||1,this.hash=r,this.cipher=n,this.replacementFingerprint=i}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new at("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const n=t-r+1;this.replacementFingerprint=e.slice(r,r+n),r+=n}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return F.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const qn=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=T.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return T.read(e,this.data)}getValue(){return this.data}},jn=qn(T.aead),Vn=qn(T.symmetric),Yn=qn(T.hash);class Zn{static fromObject({wrappedKey:e,algorithm:t}){const r=new Zn;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=F.readExactSubarray(e,t,t+r),t+=r}write(){return F.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}const Jn=F.getWebCrypto(),Xn=F.getNodeCrypto(),Wn=Xn?Xn.getCiphers():[],$n={idea:Wn.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Wn.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Wn.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Wn.includes("bf-cfb")?"bf-cfb":void 0,aes128:Wn.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Wn.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Wn.includes("aes-256-cfb")?"aes-256-cfb":void 0};async function ei(e){const{blockSize:t}=Br(e),r=await pe(t),n=new Uint8Array([r[r.length-2],r[r.length-1]]);return F.concat([r,n])}async function ti(e,t,r,n,i){const s=T.read(T.symmetric,e);if(F.getNodeCrypto()&&$n[s])return function(e,t,r,n){const i=T.read(T.symmetric,e),s=new Xn.createCipheriv($n[i],t,n);return E(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,n);if(F.isAES(e))return async function(e,t,r,n){if(Jn&&await ni.isSupported(e)){const i=new ni(e,t,n);return F.isStream(r)?E(r,(e=>i.encryptChunk(e)),(()=>i.finish())):i.encrypt(r)}if(F.isStream(r)){const i=new ii(!0,e,t,n);return E(r,(e=>i.processChunk(e)),(()=>i.finish()))}return yr(t,n).encrypt(r)}(e,t,r,n);const a=new(await vr(e))(t),o=a.blockSize,c=n.slice();let u=new Uint8Array;const h=e=>{e&&(u=F.concatUint8Array([u,e]));const t=new Uint8Array(u.length);let r,n=0;for(;e?u.length>=o:u.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=u[r]^e[r],t[n++]=c[r];u=u.subarray(o)}return t.subarray(0,n)};return E(r,h,h)}async function ri(e,t,r,n){const i=T.read(T.symmetric,e);if(Xn&&$n[i])return function(e,t,r,n){const i=T.read(T.symmetric,e),s=new Xn.createDecipheriv($n[i],t,n);return E(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,n);if(F.isAES(e))return async function(e,t,r,n){if(F.isStream(r)){const i=new ii(!1,e,t,n);return E(r,(e=>i.processChunk(e)),(()=>i.finish()))}return yr(t,n).decrypt(r)}(e,t,r,n);const s=new(await vr(e))(t),a=s.blockSize;let o=n,c=new Uint8Array;const u=e=>{e&&(c=F.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,n=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[n++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,n)};return E(r,u,u)}class ni{constructor(e,t,r){const{blockSize:n}=Br(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(n),this.i=0,this.blockSize=n,this.zeroBlock=new Uint8Array(this.blockSize)}static async isSupported(e){const{keySize:t}=Br(e);return Jn.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Jn.importKey("raw",this.key,r,!1,["encrypt"]);const n=await Jn.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(n).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=F.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=F.concatUint8Array([this.prevBlock,n.subarray(0,n.length-this.blockSize)]),s=await this._runCBC(i);return si(s,n),this.prevBlock=s.slice(-this.blockSize),r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,s}let n;if(this.i+=r.length,this.i===this.nextBlock.length){const t=this.nextBlock;n=await this._runCBC(this.prevBlock),si(n,t),this.prevBlock=n.slice(),this.i=0;const i=e.subarray(r.length);this.nextBlock.set(i,this.i),this.i+=i.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);si(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(F.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return si(t,e),this.clearSensitiveData(),t}}class ii{constructor(e,t,r,n){this.forEncryption=e;const{blockSize:i}=Br(t);this.key=Er.expandKeyLE(r),n.byteOffset%4!=0&&(n=n.slice()),this.prevBlock=ai(n),this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i}_runCFB(e){const t=ai(e),r=new Uint8Array(e.length),n=ai(r);for(let e=0;e+4<=n.length;e+=4){const{s0:r,s1:i,s2:s,s3:a}=Er.encrypt(this.key,this.prevBlock[0],this.prevBlock[1],this.prevBlock[2],this.prevBlock[3]);n[e+0]=t[e+0]^r,n[e+1]=t[e+1]^i,n[e+2]=t[e+2]^s,n[e+3]=t[e+3]^a,this.prevBlock=(this.forEncryption?n:t).slice(e,e+4)}return r}async processChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=F.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=this._runCFB(n);return r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,i}let n;if(this.i+=r.length,this.i===this.nextBlock.length){n=this._runCFB(this.nextBlock),this.i=0;const t=e.subarray(r.length);this.nextBlock.set(t,this.i),this.i+=t.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{e=this._runCFB(this.nextBlock).subarray(0,this.i)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.key.fill(0)}}function si(e,t){const r=Math.min(e.length,t.length);for(let n=0;n<r;n++)e[n]=e[n]^t[n]}const ai=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4));const oi=F.getWebCrypto(),ci=F.getNodeCrypto(),ui=16;function hi(e,t){const r=e.length-ui;for(let n=0;n<ui;n++)e[n+r]^=t[n];return e}const li=new Uint8Array(ui);async function fi(e){const t=await yi(e),r=F.double(await t(li)),n=F.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%ui==0)return hi(e,t);const n=new Uint8Array(e.length+(ui-e.length%ui));return n.set(e),n[e.length]=128,hi(n,r)}(e,r,n))).subarray(-16)}}async function yi(e){if(F.getNodeCrypto())return async function(t){const r=new ci.createCipheriv("aes-"+8*e.length+"-cbc",e,li).update(t);return new Uint8Array(r)};if(F.getWebCrypto())try{return e=await oi.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await oi.encrypt({name:"AES-CBC",iv:li,length:128},e,t);return new Uint8Array(r).subarray(0,r.byteLength-ui)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return fr(e,li,{disablePadding:!0}).encrypt(t)}}const pi=F.getWebCrypto(),di=F.getNodeCrypto(),gi=F.getNodeBuffer(),wi=16,Ai=wi,mi=new Uint8Array(wi),bi=new Uint8Array(wi);bi[15]=1;const ki=new Uint8Array(wi);async function Ei(e){const t=await fi(e);return function(e,r){return t(F.concatUint8Array([e,r]))}}async function vi(e){if(F.getNodeCrypto())return async function(t,r){const n=new di.createCipheriv("aes-"+8*e.length+"-ctr",e,r),i=gi.concat([n.update(t),n.final()]);return new Uint8Array(i)};if(F.getWebCrypto())try{const t=await pi.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const n=await pi.encrypt({name:"AES-CTR",counter:r,length:128},t,e);return new Uint8Array(n)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return lr(e,r).encrypt(t)}}async function Ki(e,t){if(e!==T.symmetric.aes128&&e!==T.symmetric.aes192&&e!==T.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,n]=await Promise.all([Ei(t),vi(t)]);return{encrypt:async function(e,t,i){const[s,a]=await Promise.all([r(mi,t),r(bi,i)]),o=await n(e,s),c=await r(ki,o);for(let e=0;e<Ai;e++)c[e]^=a[e]^s[e];return F.concatUint8Array([o,c])},decrypt:async function(e,t,i){if(e.length<Ai)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-16),a=e.subarray(-16),[o,c,u]=await Promise.all([r(mi,t),r(bi,i),r(ki,s)]),h=u;for(let e=0;e<Ai;e++)h[e]^=c[e]^o[e];if(!F.equalsUint8Array(a,h))throw Error("Authentication tag mismatch");return await n(s,o)}}}ki[15]=2,Ki.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},Ki.blockLength=wi,Ki.ivLength=16,Ki.tagLength=Ai;const Si=16,Bi=16;function Ii(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function Ci(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function Ui(e,t){return Ci(e.slice(),t)}const Pi=new Uint8Array(Si),Di=new Uint8Array([1]);async function xi(e,t){const{keySize:r}=Br(e);if(!F.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let n=0;const i=e=>fr(t,Pi,{disablePadding:!0}).encrypt(e),s=e=>fr(t,Pi,{disablePadding:!0}).decrypt(e);let a;function o(e,t,r,s){const o=t.length/Si|0;!function(e,t){const r=F.nbits(Math.max(e.length,t.length)/Si|0)-1;for(let e=n+1;e<=r;e++)a[e]=F.double(a[e-1]);n=r}(t,s);const c=F.concatUint8Array([Pi.subarray(0,15-r.length),Di,r]),u=63&c[15];c[15]&=192;const h=i(c),l=F.concatUint8Array([h,Ui(h.subarray(0,8),h.subarray(1,9))]),f=F.shiftRight(l.subarray(0+(u>>3),17+(u>>3)),8-(7&u)).subarray(1),y=new Uint8Array(Si),p=new Uint8Array(t.length+Bi);let d,g=0;for(d=0;d<o;d++)Ci(f,a[Ii(d+1)]),p.set(Ci(e(Ui(f,t)),f),g),Ci(y,e===i?t:p.subarray(g)),t=t.subarray(Si),g+=Si;if(t.length){Ci(f,a.x);const r=i(f);p.set(Ui(t,r),g);const n=new Uint8Array(Si);n.set(e===i?t:p.subarray(g,-16),0),n[t.length]=128,Ci(y,n),g+=t.length}const w=Ci(i(Ci(Ci(y,f),a.$)),function(e){if(!e.length)return Pi;const t=e.length/Si|0,r=new Uint8Array(Si),n=new Uint8Array(Si);for(let s=0;s<t;s++)Ci(r,a[Ii(s+1)]),Ci(n,i(Ui(r,e))),e=e.subarray(Si);if(e.length){Ci(r,a.x);const t=new Uint8Array(Si);t.set(e,0),t[e.length]=128,Ci(t,r),Ci(n,i(t))}return n}(s));return p.set(w,g),p}return function(){const e=i(Pi),t=F.double(e);a=[],a[0]=F.double(t),a.x=e,a.$=t}(),{encrypt:async function(e,t,r){return o(i,e,t,r)},decrypt:async function(e,t,r){if(e.length<Bi)throw Error("Invalid OCB ciphertext");const n=e.subarray(-16);e=e.subarray(0,-16);const i=o(s,e,t,r);if(F.equalsUint8Array(n,i.subarray(-16)))return i.subarray(0,-16);throw Error("Authentication tag mismatch")}}}xi.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},xi.blockLength=Si,xi.ivLength=15,xi.tagLength=Bi;const Qi=F.getWebCrypto(),Ri=F.getNodeCrypto(),Ti=F.getNodeBuffer(),Mi=16,Li="AES-GCM";async function Fi(e,t){if(e!==T.symmetric.aes128&&e!==T.symmetric.aes192&&e!==T.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(F.getNodeCrypto())return{encrypt:async function(e,r,n=new Uint8Array){const i=new Ri.createCipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n);const s=Ti.concat([i.update(e),i.final(),i.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,n=new Uint8Array){const i=new Ri.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n),i.setAuthTag(e.slice(e.length-Mi,e.length));const s=Ti.concat([i.update(e.slice(0,e.length-Mi)),i.final()]);return new Uint8Array(s)}};if(F.getWebCrypto())try{const e=await Qi.importKey("raw",t,{name:Li},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(n,i,s=new Uint8Array){if(r&&!n.length)return dr(t,i,s).encrypt(n);const a=await Qi.encrypt({name:Li,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(a)},decrypt:async function(n,i,s=new Uint8Array){if(r&&n.length===Mi)return dr(t,i,s).decrypt(n);try{const t=await Qi.decrypt({name:Li,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,n){return dr(t,r,n).encrypt(e)},decrypt:async function(e,r,n){return dr(t,r,n).decrypt(e)}}}function Oi(e,t=!1){switch(e){case T.aead.eax:return Ki;case T.aead.ocb:return xi;case T.aead.gcm:return Fi;case T.aead.experimentalGCM:if(!t)throw Error("Unexpected non-standard `experimentalGCM` AEAD algorithm provided in `config.preferredAEADAlgorithm`: use `gcm` instead");return Fi;default:throw Error("Unsupported AEAD mode")}}async function Ni(e,t,r,n,i,s){switch(e){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await qe(i,e,t)}}case T.publicKey.elgamal:{const{p:e,g:t,y:n}=r;return async function(e,t,r,n){t=ne(t),r=ne(r),n=ne(n);const i=ne(Le(e,le(t))),s=de(Je,t-Je);return{c1:fe(se(r,s,t)),c2:fe(ie(se(n,s,t)*i,t))}}(i,e,t,n)}case T.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:n}=r,{publicKey:a,wrappedKey:o}=await An(e,n,i,t,s);return{V:a,C:new Hn(o)}}case T.publicKey.x25519:case T.publicKey.x448:{if(t&&!F.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:n}=r,{ephemeralPublicKey:s,wrappedKey:a}=await Rr(e,i,n);return{ephemeralPublicKey:s,C:Zn.fromObject({algorithm:t,wrappedKey:a})}}case T.publicKey.aead:{if(!n)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=n,a=M.preferredAEADAlgorithm,o=Oi(M.preferredAEADAlgorithm),{ivLength:c}=o,u=pe(c),h=await o(t,s),l=await h.encrypt(i,u,new Uint8Array);return{aeadMode:new jn(a),iv:u,c:new zn(l)}}case T.publicKey.pqc_mlkem_x25519:{const{eccPublicKey:n,mlkemPublicKey:s}=r,{eccCipherText:a,mlkemCipherText:o,wrappedKey:c}=await xn(e,n,s,i);return{eccCipherText:a,mlkemCipherText:o,C:Zn.fromObject({algorithm:t,wrappedKey:c})}}default:return[]}}async function _i(e,t,r,n,i,s){switch(e){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:{const{c:e}=n,{n:i,e:a}=t,{d:o,p:c,q:u,u:h}=r;return je(e,i,a,o,c,u,h,s)}case T.publicKey.elgamal:{const{c1:e,c2:i}=n;return async function(e,t,r,n,i){return e=ne(e),t=ne(t),r=ne(r),Fe(fe(ie(oe(se(e,n=ne(n),r),r)*t,r),"be",le(r)),i)}(e,i,t.p,r.x,s)}case T.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:u}=n;return bn(e,a,c,u.data,s,o,i)}case T.publicKey.x25519:case T.publicKey.x448:{const{A:i}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=n;if(null!==o.algorithm&&!F.isAES(o.algorithm))throw Error("AES session key expected");return Tr(e,a,o.wrappedKey,i,s)}case T.publicKey.aead:{const{cipher:e}=t,i=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=n,u=Oi(a.getValue());return(await u(i,s)).decrypt(c.data,o,new Uint8Array)}case T.publicKey.pqc_mlkem_x25519:{const{eccSecretKey:i,mlkemSecretKey:s}=r,{eccPublicKey:a,mlkemPublicKey:o}=t,{eccCipherText:c,mlkemCipherText:u,C:h}=n;return Qn(e,c,u,i,a,s,0,h.wrappedKey)}default:throw Error("Unknown public key encryption algorithm.")}}async function Hi(e,t,r){let n=0;switch(e){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:{const e=F.readMPI(t.subarray(n));n+=e.length+2;const r=F.readMPI(t.subarray(n));n+=r.length+2;const i=F.readMPI(t.subarray(n));n+=i.length+2;const s=F.readMPI(t.subarray(n));return n+=s.length+2,{read:n,privateParams:{d:e,p:r,q:i,u:s}}}case T.publicKey.dsa:case T.publicKey.elgamal:{const e=F.readMPI(t.subarray(n));return n+=e.length+2,{read:n,privateParams:{x:e}}}case T.publicKey.ecdsa:case T.publicKey.ecdh:{const i=Zi(e,r.oid);let s=F.readMPI(t.subarray(n));return n+=s.length+2,s=F.leftPad(s,i),{read:n,privateParams:{d:s}}}case T.publicKey.eddsaLegacy:{const i=Zi(e,r.oid);if(r.oid.getName()!==T.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let s=F.readMPI(t.subarray(n));return n+=s.length+2,s=F.leftPad(s,i),{read:n,privateParams:{seed:s}}}case T.publicKey.ed25519:case T.publicKey.ed448:{const r=Zi(e),i=F.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{seed:i}}}case T.publicKey.x25519:case T.publicKey.x448:{const r=Zi(e),i=F.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{k:i}}}case T.publicKey.hmac:{const{cipher:e}=r,i=Te(e.getValue()),s=t.subarray(n,n+32);n+=32;const a=t.subarray(n,n+i);return n+=i,{read:n,privateParams:{hashSeed:s,keyMaterial:a}}}case T.publicKey.aead:{const{cipher:e}=r,i=t.subarray(n,n+32);n+=32;const{keySize:s}=Br(e.getValue()),a=t.subarray(n,n+s);return n+=s,{read:n,privateParams:{hashSeed:i,keyMaterial:a}}}case T.publicKey.pqc_mlkem_x25519:{const r=F.readExactSubarray(t,n,n+Zi(T.publicKey.x25519));n+=r.length;const i=F.readExactSubarray(t,n,n+64);n+=i.length;const{mlkemSecretKey:s}=await Pn(e,i);return{read:n,privateParams:{eccSecretKey:r,mlkemSecretKey:s,mlkemSeed:i}}}case T.publicKey.pqc_mldsa_ed25519:{const r=F.readExactSubarray(t,n,n+Zi(T.publicKey.ed25519));n+=r.length;const i=F.readExactSubarray(t,n,n+32);n+=i.length;const{mldsaSecretKey:s}=await Mn(e,i);return{read:n,privateParams:{eccSecretKey:r,mldsaSecretKey:s,mldsaSeed:i}}}default:throw new at("Unknown public key encryption algorithm.")}}function zi(e,t){const r=new Set([T.publicKey.ed25519,T.publicKey.x25519,T.publicKey.ed448,T.publicKey.x448,T.publicKey.aead,T.publicKey.hmac,T.publicKey.pqc_mlkem_x25519,T.publicKey.pqc_mldsa_ed25519]),n={[T.publicKey.pqc_mlkem_x25519]:new Set(["mlkemSecretKey"]),[T.publicKey.pqc_mldsa_ed25519]:new Set(["mldsaSecretKey"])},i=Object.keys(t).map((i=>{if(n[e]?.has(i))return new Uint8Array;const s=t[i];return F.isUint8Array(s)?r.has(e)?s:F.uint8ArrayToMPI(s):s.write()}));return F.concatUint8Array(i)}async function Gi(e,t,r,n){switch(e){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:return async function(e,t){if(t=BigInt(t),F.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:fe(t),hash:{name:"SHA-1"}},n=await Ne.generateKey(r,!0,["sign","verify"]);return Ze(await Ne.exportKey("jwk",n.privateKey),t)}if(F.getNodeCrypto()){const r={modulusLength:e,publicExponent:ce(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},n=await new Promise(((e,t)=>{_e.generateKeyPair("rsa",r,((r,n,i)=>{r?t(r):e(i)}))}));return Ze(n,t)}let r,n,i;do{n=we(e-(e>>1),t,40),r=we(e>>1,t,40),i=r*n}while(he(i)!==e);const s=(r-He)*(n-He);return n<r&&([r,n]=[n,r]),{n:fe(i),e:fe(t),d:fe(oe(t,s)),p:fe(r),q:fe(n),u:fe(oe(r,n))}}(t,65537).then((({n:e,e:t,d:r,p:n,q:i,u:s})=>({privateParams:{d:r,p:n,q:i,u:s},publicParams:{n:e,e:t}})));case T.publicKey.ecdsa:return Zr(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new We(e),Q:t}})));case T.publicKey.eddsaLegacy:return Zr(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new We(e),Q:t}})));case T.publicKey.ecdh:return Zr(r).then((({oid:e,Q:t,secret:r,hash:n,cipher:i})=>({privateParams:{d:r},publicParams:{oid:new We(e),Q:t,kdfParams:new Gn({hash:n,cipher:i})}})));case T.publicKey.ed25519:case T.publicKey.ed448:return ht(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case T.publicKey.x25519:case T.publicKey.x448:return xr(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case T.publicKey.hmac:return qi(await async function(e){if(!In.has(e))throw Error("Unsupported hash algorithm.");const t=T.read(T.webHash,e),r=Cn||Un.webcrypto.subtle,n=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),i=await r.exportKey("raw",n);return new Uint8Array(i)}(n),new Yn(n));case T.publicKey.aead:return qi(Vi(n),new Vn(n));case T.publicKey.pqc_mlkem_x25519:return Dn(e).then((({eccSecretKey:e,eccPublicKey:t,mlkemSeed:r,mlkemSecretKey:n,mlkemPublicKey:i})=>({privateParams:{eccSecretKey:e,mlkemSeed:r,mlkemSecretKey:n},publicParams:{eccPublicKey:t,mlkemPublicKey:i}})));case T.publicKey.pqc_mldsa_ed25519:return Ln(e).then((({eccSecretKey:e,eccPublicKey:t,mldsaSeed:r,mldsaSecretKey:n,mldsaPublicKey:i})=>({privateParams:{eccSecretKey:e,mldsaSeed:r,mldsaSecretKey:n},publicParams:{eccPublicKey:t,mldsaPublicKey:i}})));case T.publicKey.dsa:case T.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}}async function qi(e,t){const r=pe(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await Re(T.hash.sha256,r)}}}async function ji(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:{const{n:e,e:n}=t,{d:i,p:s,q:a,u:o}=r;return async function(e,t,r,n,i,s){if(e=ne(e),(n=ne(n))*(i=ne(i))!==e)return!1;const a=BigInt(2);if(ie(n*(s=ne(s)),i)!==BigInt(1))return!1;t=ne(t),r=ne(r);const o=de(a,a<<BigInt(Math.floor(he(e)/3))),c=o*r*t;return!(ie(c,n-He)!==o||ie(c,i-He)!==o)}(e,n,i,s,a,o)}case T.publicKey.dsa:{const{p:e,q:n,g:i,y:s}=t,{x:a}=r;return async function(e,t,r,n,i){if(e=ne(e),t=ne(t),r=ne(r),n=ne(n),r<=Bn||r>=e)return!1;if(ie(e-Bn,t)!==Sn)return!1;if(se(r,t,e)!==Bn)return!1;const s=BigInt(he(t));if(s<BigInt(150)||!Ae(t,null,32))return!1;i=ne(i);const a=BigInt(2);return n===se(r,t*de(a<<s-Bn,a<<s)+i,e)}(e,n,i,s,a)}case T.publicKey.elgamal:{const{p:e,g:n,y:i}=t,{x:s}=r;return async function(e,t,r,n){if(e=ne(e),t=ne(t),r=ne(r),t<=Je||t>=e)return!1;const i=BigInt(he(e));if(i<BigInt(1023))return!1;if(se(t,e-Je,e)!==Je)return!1;let s=t,a=BigInt(1);const o=BigInt(2),c=o<<BigInt(17);for(;a<c;){if(s=ie(s*t,e),s===Je)return!1;a++}n=ne(n);const u=de(o<<i-Je,o<<i);return r===se(t,(e-Je)*u+n,e)}(e,n,i,s)}case T.publicKey.ecdsa:case T.publicKey.ecdh:{const n=Kn[T.read(T.publicKey,e)],{oid:i,Q:s}=t,{d:a}=r;return n.validateParams(i,s,a)}case T.publicKey.eddsaLegacy:{const{Q:e,oid:n}=t,{seed:i}=r;return fn(n,e,i)}case T.publicKey.ed25519:case T.publicKey.ed448:{const{A:n}=t,{seed:i}=r;return yt(e,n,i)}case T.publicKey.x25519:case T.publicKey.x448:{const{A:n}=t,{k:i}=r;return Qr(e,n,i)}case T.publicKey.hmac:{const{cipher:e,digest:n}=t,{hashSeed:i,keyMaterial:s}=r;return Te(e.getValue())===s.length&&F.equalsUint8Array(n,await Re(T.hash.sha256,i))}case T.publicKey.aead:{const{cipher:e,digest:n}=t,{hashSeed:i,keyMaterial:s}=r,{keySize:a}=Br(e.getValue());return a===s.length&&F.equalsUint8Array(n,await Re(T.hash.sha256,i))}case T.publicKey.pqc_mlkem_x25519:{const{eccSecretKey:n,mlkemSeed:i}=r,{eccPublicKey:s,mlkemPublicKey:a}=t;return Tn(e,s,n,a,i)}case T.publicKey.pqc_mldsa_ed25519:{const{eccSecretKey:n,mldsaSeed:i}=r,{eccPublicKey:s,mldsaPublicKey:a}=t;return _n(e,s,n,a,i)}default:throw Error("Unknown public key algorithm.")}}function Vi(e){const{keySize:t}=Br(e);return pe(t)}function Yi(e){try{e.getName()}catch(e){throw new at("Unknown curve OID")}}function Zi(e,t){switch(e){case T.publicKey.ecdsa:case T.publicKey.ecdh:case T.publicKey.eddsaLegacy:return new Yr(t).payloadSize;case T.publicKey.ed25519:case T.publicKey.ed448:return pt(e);case T.publicKey.x25519:case T.publicKey.x448:return Mr(e);default:throw Error("Unknown elliptic algo")}}async function Ji(e,t,r,n,i,s,a){switch(e){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.rsaSign:{const{n:e,e:i}=n;return Ge(t,s,F.leftPad(r.s,e.length),e,i,a)}case T.publicKey.dsa:{const{g:e,p:t,q:i,y:s}=n,{r:o,s:c}=r;return async function(e,t,r,n,i,s,a,o){if(t=ne(t),r=ne(r),s=ne(s),a=ne(a),i=ne(i),o=ne(o),t<=Sn||t>=a||r<=Sn||r>=a)return F.printDebug("invalid DSA Signature"),!1;const c=ie(ne(n.subarray(0,le(a))),a),u=oe(r,a);if(u===Sn)return F.printDebug("invalid DSA Signature"),!1;i=ie(i,s),o=ie(o,s);const h=ie(c*u,a),l=ie(t*u,a);return ie(ie(se(i,h,s)*se(o,l,s),s),a)===t}(0,o,c,a,e,t,i,s)}case T.publicKey.ecdsa:{const{oid:e,Q:i}=n,o=new Yr(e).payloadSize;return on(e,t,{r:F.leftPad(r.r,o),s:F.leftPad(r.s,o)},s,i,a)}case T.publicKey.eddsaLegacy:{if(Te(t)<Te(T.hash.sha256))throw Error("Hash algorithm too weak for EdDSALegacy.");const{oid:e,Q:i}=n,s=new Yr(e).payloadSize;return ln(e,0,{r:F.leftPad(r.r,s),s:F.leftPad(r.s,s)},0,i,a)}case T.publicKey.ed25519:case T.publicKey.ed448:{if(Te(t)<Te(dt(e)))throw Error("Hash algorithm too weak for EdDSA.");const{A:i}=n;return ft(e,0,r,0,i,a)}case T.publicKey.hmac:{if(!i)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=n,{keyMaterial:t}=i;return async function(e,t,r,n){if(!In.has(e))throw Error("Unsupported hash algorithm.");const i=T.read(T.webHash,e),s=Cn||Un.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["verify"]);return s.verify("HMAC",a,r,n)}(e.getValue(),t,r.mac.data,a)}case T.publicKey.pqc_mldsa_ed25519:{if(!Nn(e,t))throw Error("Unexpected hash algorithm for PQC signature: digest size too short");const{eccPublicKey:i,mldsaPublicKey:s}=n;return On(e,0,i,s,a,r)}default:throw Error("Unknown signature algorithm.")}}async function Xi(e,t,r,n,i,s){if(!r||!n)throw Error("Missing key parameters");switch(e){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:u,u:h}=n;return{s:await ze(t,i,e,a,o,c,u,h,s)}}case T.publicKey.dsa:{const{g:e,p:t,q:i}=r,{x:a}=n;return async function(e,t,r,n,i,s){const a=BigInt(0);let o,c,u,h;n=ne(n),i=ne(i),r=ne(r),s=ne(s),r=ie(r,n),s=ie(s,i);const l=ie(ne(t.subarray(0,le(i))),i);for(;;){if(o=de(Bn,i),c=ie(se(r,o,n),i),c===a)continue;const e=ie(s*c,i);if(h=ie(l+e,i),u=ie(oe(o,i)*h,i),u!==a)break}return{r:fe(c,"be",le(n)),s:fe(u,"be",le(n))}}(0,s,e,t,i,a)}case T.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case T.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=n;return an(e,t,i,a,o,s)}case T.publicKey.eddsaLegacy:{if(Te(t)<Te(T.hash.sha256))throw Error("Hash algorithm too weak for EdDSALegacy.");const{oid:e,Q:i}=r,{seed:a}=n;return hn(e,0,0,i,a,s)}case T.publicKey.ed25519:case T.publicKey.ed448:{if(Te(t)<Te(dt(e)))throw Error("Hash algorithm too weak for EdDSA.");const{A:i}=r,{seed:a}=n;return lt(e,0,0,i,a,s)}case T.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=n,i=await async function(e,t,r){if(!In.has(e))throw Error("Unsupported hash algorithm.");const n=T.read(T.webHash,e),i=Cn||Un.webcrypto.subtle,s=await i.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["sign"]),a=await i.sign("HMAC",s,r);return new Uint8Array(a)}(e.getValue(),t,s);return{mac:new zn(i)}}case T.publicKey.pqc_mldsa_ed25519:{if(!Nn(e,t))throw Error("Unexpected hash algorithm for PQC signature: digest size too short");const{eccPublicKey:i}=r,{eccSecretKey:a,mldsaSecretKey:o}=n;return Fn(e,0,a,i,o,s)}default:throw Error("Unknown signature algorithm.")}}Fi.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},Fi.blockLength=16,Fi.ivLength=12,Fi.tagLength=Mi;class Wi extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,Wi),this.name="Argon2OutOfMemoryError"}}let $i,es,ts=2<<19;class rs{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return ts}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){ts=e}static reloadWasmModule(){$i&&(es=$i(),es.catch((()=>{})))}constructor(e=M){const{passes:t,parallelism:r,memoryExponent:n}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=n}generateSalt(){this.salt=pe(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([T.write(T.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return F.concatUint8Array(e)}async produceKey(e,t){const r=2<<this.encodedM-1;try{$i=$i||(await Promise.resolve().then((function(){return jd}))).default,es=es||$i();const n=await es,i=n({version:19,type:2,password:F.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:r,parallelism:this.p,passes:this.t});return r>rs.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&rs.reloadWasmModule(),i}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new Wi("Could not allocate required memory for Argon2"):e}}}class ns{constructor(e,t=M){this.algorithm=T.hash.sha256,this.type=T.read(T.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=pe(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==F.uint8ArrayToString(e.subarray(t,t+3)))throw new at("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new at("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new at("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...F.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([T.write(T.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return F.concatUint8Array(e)}async produceKey(e,t){e=F.encodeUTF8(e);const r=[];let n=0,i=0;for(;n<t;){let t;switch(this.type){case"simple":t=F.concatUint8Array([new Uint8Array(i),e]);break;case"salted":t=F.concatUint8Array([new Uint8Array(i),this.salt,e]);break;case"iterated":{const r=F.concatUint8Array([this.salt,e]);let n=r.length;const s=Math.max(this.getCount(),n);t=new Uint8Array(i+s),t.set(r,i);for(let e=i+n;e<s;e+=n,n*=2)t.copyWithin(e,i,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const s=await Re(this.algorithm,t);r.push(s),n+=s.length,i++}return F.concatUint8Array(r).subarray(0,t)}}const is=new Set([T.s2k.argon2,T.s2k.iterated]);function ss(e,t=M){switch(e){case T.s2k.argon2:return new rs(t);case T.s2k.iterated:case T.s2k.gnu:case T.s2k.salted:case T.s2k.simple:return new ns(e,t);default:throw new at("Unsupported S2K type")}}function as(e){const{s2kType:t}=e;if(!is.has(t))throw Error("The provided `config.s2kType` value is not allowed");return ss(t,e)}var os=t("/");try{os("worker_threads").Worker}catch(e){}var cs=Uint8Array,us=Uint16Array,hs=Int32Array,ls=new cs([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),fs=new cs([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),ys=new cs([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),ps=function(e,t){for(var r=new us(31),n=0;n<31;++n)r[n]=t+=1<<e[n-1];var i=new hs(r[30]);for(n=1;n<30;++n)for(var s=r[n];s<r[n+1];++s)i[s]=s-r[n]<<5|n;return{b:r,r:i}},ds=ps(ls,2),gs=ds.b,ws=ds.r;gs[28]=258,ws[258]=28;for(var As=ps(fs,0),ms=As.b,bs=As.r,ks=new us(32768),Es=0;Es<32768;++Es){var vs=(43690&Es)>>1|(21845&Es)<<1;vs=(61680&(vs=(52428&vs)>>2|(13107&vs)<<2))>>4|(3855&vs)<<4,ks[Es]=((65280&vs)>>8|(255&vs)<<8)>>1}var Ks=function(e,t,r){for(var n=e.length,i=0,s=new us(t);i<n;++i)e[i]&&++s[e[i]-1];var a,o=new us(t);for(i=1;i<t;++i)o[i]=o[i-1]+s[i-1]<<1;if(r){a=new us(1<<t);var c=15-t;for(i=0;i<n;++i)if(e[i])for(var u=i<<4|e[i],h=t-e[i],l=o[e[i]-1]++<<h,f=l|(1<<h)-1;l<=f;++l)a[ks[l]>>c]=u}else for(a=new us(n),i=0;i<n;++i)e[i]&&(a[i]=ks[o[e[i]-1]++]>>15-e[i]);return a},Ss=new cs(288);for(Es=0;Es<144;++Es)Ss[Es]=8;for(Es=144;Es<256;++Es)Ss[Es]=9;for(Es=256;Es<280;++Es)Ss[Es]=7;for(Es=280;Es<288;++Es)Ss[Es]=8;var Bs=new cs(32);for(Es=0;Es<32;++Es)Bs[Es]=5;var Is=/*#__PURE__*/Ks(Ss,9,0),Cs=/*#__PURE__*/Ks(Ss,9,1),Us=/*#__PURE__*/Ks(Bs,5,0),Ps=/*#__PURE__*/Ks(Bs,5,1),Ds=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},xs=function(e,t,r){var n=t/8|0;return(e[n]|e[n+1]<<8)>>(7&t)&r},Qs=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},Rs=function(e){return(e+7)/8|0},Ts=function(e,t,r){return(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length),new cs(e.subarray(t,r))},Ms=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],Ls=function(e,t,r){var n=Error(t||Ms[e]);if(n.code=e,Error.captureStackTrace&&Error.captureStackTrace(n,Ls),!r)throw n;return n},Fs=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>8},Os=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>8,e[n+2]|=r>>16},Ns=function(e,t){for(var r=[],n=0;n<e.length;++n)e[n]&&r.push({s:n,f:e[n]});var i=r.length,s=r.slice();if(!i)return{t:Vs,l:0};if(1==i){var a=new cs(r[0].s+1);return a[r[0].s]=1,{t:a,l:1}}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],u=0,h=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};h!=i-1;)o=r[r[u].f<r[l].f?u++:l++],c=r[u!=h&&r[u].f<r[l].f?u++:l++],r[h++]={s:-1,f:o.f+c.f,l:o,r:c};var f=s[0].s;for(n=1;n<i;++n)s[n].s>f&&(f=s[n].s);var y=new us(f+1),p=_s(r[h-1],y,0);if(p>t){n=0;var d=0,g=p-t,w=1<<g;for(s.sort((function(e,t){return y[t.s]-y[e.s]||e.f-t.f}));n<i;++n){var A=s[n].s;if(!(y[A]>t))break;d+=w-(1<<p-y[A]),y[A]=t}for(d>>=g;d>0;){var m=s[n].s;y[m]<t?d-=1<<t-y[m]++-1:++n}for(;n>=0&&d;--n){var b=s[n].s;y[b]==t&&(--y[b],++d)}p=t}return{t:new cs(y),l:p}},_s=function(e,t,r){return-1==e.s?Math.max(_s(e.l,t,r+1),_s(e.r,t,r+1)):t[e.s]=r},Hs=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new us(++t),n=0,i=e[0],s=1,a=function(e){r[n++]=e},o=1;o<=t;++o)if(e[o]==i&&o!=t)++s;else{if(!i&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(i),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(i);s=1,i=e[o]}return{c:r.subarray(0,n),n:t}},zs=function(e,t){for(var r=0,n=0;n<t.length;++n)r+=e[n]*t[n];return r},Gs=function(e,t,r){var n=r.length,i=Rs(t+2);e[i]=255&n,e[i+1]=n>>8,e[i+2]=255^e[i],e[i+3]=255^e[i+1];for(var s=0;s<n;++s)e[i+s+4]=r[s];return 8*(i+4+n)},qs=function(e,t,r,n,i,s,a,o,c,u,h){Fs(t,h++,r),++i[256];for(var l=Ns(i,15),f=l.t,y=l.l,p=Ns(s,15),d=p.t,g=p.l,w=Hs(f),A=w.c,m=w.n,b=Hs(d),k=b.c,E=b.n,v=new us(19),K=0;K<A.length;++K)++v[31&A[K]];for(K=0;K<k.length;++K)++v[31&k[K]];for(var S=Ns(v,7),B=S.t,I=S.l,C=19;C>4&&!B[ys[C-1]];--C);var U,P,D,x,Q=u+5<<3,R=zs(i,Ss)+zs(s,Bs)+a,T=zs(i,f)+zs(s,d)+a+14+3*C+zs(v,B)+2*v[16]+3*v[17]+7*v[18];if(c>=0&&Q<=R&&Q<=T)return Gs(t,h,e.subarray(c,c+u));if(Fs(t,h,1+(T<R)),h+=2,T<R){U=Ks(f,y,0),P=f,D=Ks(d,g,0),x=d;var M=Ks(B,I,0);Fs(t,h,m-257),Fs(t,h+5,E-1),Fs(t,h+10,C-4),h+=14;for(K=0;K<C;++K)Fs(t,h+3*K,B[ys[K]]);h+=3*C;for(var L=[A,k],F=0;F<2;++F){var O=L[F];for(K=0;K<O.length;++K){var N=31&O[K];Fs(t,h,M[N]),h+=B[N],N>15&&(Fs(t,h,O[K]>>5&127),h+=O[K]>>12)}}}else U=Is,P=Ss,D=Us,x=Bs;for(K=0;K<o;++K){var _=n[K];if(_>255){Os(t,h,U[(N=_>>18&31)+257]),h+=P[N+257],N>7&&(Fs(t,h,_>>23&31),h+=ls[N]);var H=31&_;Os(t,h,D[H]),h+=x[H],H>3&&(Os(t,h,_>>5&8191),h+=fs[H])}else Os(t,h,U[_]),h+=P[_]}return Os(t,h,U[256]),h+P[256]},js=/*#__PURE__*/new hs([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),Vs=/*#__PURE__*/new cs(0),Ys=function(){var e=1,t=0;return{p:function(r){for(var n=e,i=t,s=0|r.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)i+=n+=r[a];n=(65535&n)+15*(n>>16),i=(65535&i)+15*(i>>16)}e=n,t=i},d:function(){return(255&(e%=65521))<<24|(65280&e)<<8|(255&(t%=65521))<<8|t>>8}}},Zs=function(e,t,r,n,i){if(!i&&(i={l:1},t.dictionary)){var s=t.dictionary.subarray(-32768),a=new cs(s.length+e.length);a.set(s),a.set(e,s.length),e=a,i.w=s.length}return function(e,t,r,n,i,s){var a=s.z||e.length,o=new cs(n+a+5*(1+Math.ceil(a/7e3))+i),c=o.subarray(n,o.length-i),u=s.l,h=7&(s.r||0);if(t){h&&(c[0]=s.r>>3);for(var l=js[t-1],f=l>>13,y=8191&l,p=(1<<r)-1,d=s.p||new us(32768),g=s.h||new us(p+1),w=Math.ceil(r/3),A=2*w,m=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<A)&p},b=new hs(25e3),k=new us(288),E=new us(32),v=0,K=0,S=s.i||0,B=0,I=s.w||0,C=0;S+2<a;++S){var U=m(S),P=32767&S,D=g[U];if(d[P]=D,g[U]=P,I<=S){var x=a-S;if((v>7e3||B>24576)&&(x>423||!u)){h=qs(e,c,0,b,k,E,K,B,C,S-C,h),B=v=K=0,C=S;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)E[Q]=0}var R=2,T=0,M=y,L=P-D&32767;if(x>2&&U==m(S-L))for(var F=Math.min(f,x)-1,O=Math.min(32767,S),N=Math.min(258,x);L<=O&&--M&&P!=D;){if(e[S+R]==e[S+R-L]){for(var _=0;_<N&&e[S+_]==e[S+_-L];++_);if(_>R){if(R=_,T=L,_>F)break;var H=Math.min(L,_-2),z=0;for(Q=0;Q<H;++Q){var G=S-L+Q&32767,q=G-d[G]&32767;q>z&&(z=q,D=G)}}}L+=(P=D)-(D=d[P])&32767}if(T){b[B++]=268435456|ws[R]<<18|bs[T];var j=31&ws[R],V=31&bs[T];K+=ls[j]+fs[V],++k[257+j],++E[V],I=S+R,++v}else b[B++]=e[S],++k[e[S]]}}for(S=Math.max(S,I);S<a;++S)b[B++]=e[S],++k[e[S]];h=qs(e,c,u,b,k,E,K,B,C,S-C,h),u||(s.r=7&h|c[h/8|0]<<3,h-=7,s.h=g,s.p=d,s.i=S,s.w=I)}else{for(S=s.w||0;S<a+u;S+=65535){var Y=S+65535;Y>=a&&(c[h/8|0]=u,Y=a),h=Gs(c,h+1,e.subarray(S,Y))}s.i=a}return Ts(o,0,n+Rs(h)+i)}(e,null==t.level?6:t.level,null==t.mem?i.l?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):20:12+t.mem,r,n,i)},Js=function(e,t,r){for(;r;++t)e[t]=r,r>>>=8},Xs=/*#__PURE__*/function(){function e(e,t){if("function"==typeof e&&(t=e,e={}),this.ondata=t,this.o=e||{},this.s={l:0,i:32768,w:32768,z:32768},this.b=new cs(98304),this.o.dictionary){var r=this.o.dictionary.subarray(-32768);this.b.set(r,32768-r.length),this.s.i=32768-r.length}}return e.prototype.p=function(e,t){this.ondata(Zs(e,this.o,0,0,this.s),t)},e.prototype.push=function(e,t){this.ondata||Ls(5),this.s.l&&Ls(4);var r=e.length+this.s.z;if(r>this.b.length){if(r>2*this.b.length-32768){var n=new cs(-32768&r);n.set(this.b.subarray(0,this.s.z)),this.b=n}var i=this.b.length-this.s.z;this.b.set(e.subarray(0,i),this.s.z),this.s.z=this.b.length,this.p(this.b,!1),this.b.set(this.b.subarray(-32768)),this.b.set(e.subarray(i),32768),this.s.z=e.length-i+32768,this.s.i=32766,this.s.w=32768}else this.b.set(e,this.s.z),this.s.z+=e.length;this.s.l=1&t,(this.s.z>this.s.w+8191||t)&&(this.p(this.b,t||!1),this.s.w=this.s.i,this.s.i-=2)},e.prototype.flush=function(){this.ondata||Ls(5),this.s.l&&Ls(4),this.p(this.b,!1),this.s.w=this.s.i,this.s.i-=2},e}(),Ws=/*#__PURE__*/function(){function e(e,t){"function"==typeof e&&(t=e,e={}),this.ondata=t;var r=e&&e.dictionary&&e.dictionary.subarray(-32768);this.s={i:0,b:r?r.length:0},this.o=new cs(32768),this.p=new cs(0),r&&this.o.set(r)}return e.prototype.e=function(e){if(this.ondata||Ls(5),this.d&&Ls(4),this.p.length){if(e.length){var t=new cs(this.p.length+e.length);t.set(this.p),t.set(e,this.p.length),this.p=t}}else this.p=e},e.prototype.c=function(e){this.s.i=+(this.d=e||!1);var t=this.s.b,r=function(e,t,r,n){var i=e.length;if(!i||t.f&&!t.l)return r||new cs(0);var s=!r,a=s||2!=t.i,o=t.i;s&&(r=new cs(3*i));var c=function(e){var t=r.length;if(e>t){var n=new cs(Math.max(2*t,e));n.set(r),r=n}},u=t.f||0,h=t.p||0,l=t.b||0,f=t.l,y=t.d,p=t.m,d=t.n,g=8*i;do{if(!f){u=xs(e,h,1);var w=xs(e,h+1,3);if(h+=3,!w){var A=e[(U=Rs(h)+4)-4]|e[U-3]<<8,m=U+A;if(m>i){o&&Ls(0);break}a&&c(l+A),r.set(e.subarray(U,m),l),t.b=l+=A,t.p=h=8*m,t.f=u;continue}if(1==w)f=Cs,y=Ps,p=9,d=5;else if(2==w){var b=xs(e,h,31)+257,k=xs(e,h+10,15)+4,E=b+xs(e,h+5,31)+1;h+=14;for(var v=new cs(E),K=new cs(19),S=0;S<k;++S)K[ys[S]]=xs(e,h+3*S,7);h+=3*k;var B=Ds(K),I=(1<<B)-1,C=Ks(K,B,1);for(S=0;S<E;){var U,P=C[xs(e,h,I)];if(h+=15&P,(U=P>>4)<16)v[S++]=U;else{var D=0,x=0;for(16==U?(x=3+xs(e,h,3),h+=2,D=v[S-1]):17==U?(x=3+xs(e,h,7),h+=3):18==U&&(x=11+xs(e,h,127),h+=7);x--;)v[S++]=D}}var Q=v.subarray(0,b),R=v.subarray(b);p=Ds(Q),d=Ds(R),f=Ks(Q,p,1),y=Ks(R,d,1)}else Ls(1);if(h>g){o&&Ls(0);break}}a&&c(l+131072);for(var T=(1<<p)-1,M=(1<<d)-1,L=h;;L=h){var F=(D=f[Qs(e,h)&T])>>4;if((h+=15&D)>g){o&&Ls(0);break}if(D||Ls(2),F<256)r[l++]=F;else{if(256==F){L=h,f=null;break}var O=F-254;if(F>264){var N=ls[S=F-257];O=xs(e,h,(1<<N)-1)+gs[S],h+=N}var _=y[Qs(e,h)&M],H=_>>4;if(_||Ls(3),h+=15&_,R=ms[H],H>3&&(N=fs[H],R+=Qs(e,h)&(1<<N)-1,h+=N),h>g){o&&Ls(0);break}a&&c(l+131072);var z=l+O;if(l<R){var G=0-R,q=Math.min(R,z);for(G+l<0&&Ls(3);l<q;++l)r[l]=n[G+l]}for(;l<z;++l)r[l]=r[l-R]}}t.l=f,t.p=L,t.b=l,t.f=u,f&&(u=1,t.m=p,t.d=y,t.n=d)}while(!u);return l!=r.length&&s?Ts(r,0,l):r.subarray(0,l)}(this.p,this.s,this.o);this.ondata(Ts(r,t,this.s.b),this.d),this.o=Ts(r,this.s.b-32768),this.s.b=this.o.length,this.p=Ts(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),$s=/*#__PURE__*/function(){function e(e,t){this.c=Ys(),this.v=1,Xs.call(this,e,t)}return e.prototype.push=function(e,t){this.c.p(e),Xs.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){var r=Zs(e,this.o,this.v&&(this.o.dictionary?6:2),t&&4,this.s);this.v&&(function(e,t){var r=t.level,n=0==r?0:r<6?1:9==r?3:2;if(e[0]=120,e[1]=n<<6|(t.dictionary&&32),e[1]|=31-(e[0]<<8|e[1])%31,t.dictionary){var i=Ys();i.p(t.dictionary),Js(e,2,i.d())}}(r,this.o),this.v=0),t&&Js(r,r.length-4,this.c.d()),this.ondata(r,t)},e.prototype.flush=function(){Xs.prototype.flush.call(this)},e}(),ea=/*#__PURE__*/function(){function e(e,t){Ws.call(this,e,t),this.v=e&&e.dictionary?2:1}return e.prototype.push=function(e,t){if(Ws.prototype.e.call(this,e),this.v){if(this.p.length<6&&!t)return;this.p=this.p.subarray((r=this.p,n=this.v-1,(8!=(15&r[0])||r[0]>>4>7||(r[0]<<8|r[1])%31)&&Ls(6,"invalid zlib data"),(r[1]>>5&1)==+!n&&Ls(6,"invalid zlib data: "+(32&r[1]?"need":"unexpected")+" dictionary"),2+(r[1]>>3&4))),this.v=0}var r,n;t&&(this.p.length<4&&Ls(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),Ws.prototype.c.call(this,t)},e}(),ta="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{ta.decode(Vs,{stream:!0})}catch(e){}class ra{static get tag(){return T.packet.literalData}constructor(e=new Date){this.format=T.literal.utf8,this.date=F.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=T.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||F.isStream(this.text))&&(this.text=F.decodeUTF8(F.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=F.canonicalizeEOL(F.encodeUTF8(this.text))),e?B(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await K(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=F.decodeUTF8(await e.readBytes(r)),this.date=F.readDate(await e.readBytes(4));let n=e.remainder();c(n)&&(n=await U(n)),this.setBytes(n,t)}))}writeHeader(){const e=F.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),n=F.writeDate(this.date);return F.concatUint8Array([r,t,e,n])}write(){const e=this.writeHeader(),t=this.getBytes();return F.concat([e,t])}}class na{constructor(){this.bytes=""}read(e){return this.bytes=F.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return F.stringToUint8Array(this.bytes)}toHex(){return F.uint8ArrayToHex(F.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new na;return t.read(F.hexToUint8Array(e)),t}static wildcard(){const e=new na;return e.read(new Uint8Array(8)),e}}const ia=Symbol("verified"),sa="salt@notations.openpgpjs.org",aa=new Set([T.signatureSubpacket.issuerKeyID,T.signatureSubpacket.issuerFingerprint,T.signatureSubpacket.embeddedSignature]);class oa{static get tag(){return T.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.unknownSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new na,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[ia]=null}read(e,t=M){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new at("Support for v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4!==this.version&&5!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[r++],this.publicKeyAlgorithm=e[r++],this.hashAlgorithm=e[r++],r+=this.readSubPackets(e.subarray(r,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,r),r+=this.readSubPackets(e.subarray(r,e.length),!1),this.signedHashValue=e.subarray(r,r+2),r+=2,6===this.version){const t=e[r++];this.salt=e.subarray(r,r+t),r+=t}const n=e.subarray(r,e.length),{read:i,signatureParams:s}=function(e,t){let r=0;switch(e){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.rsaSign:{const e=F.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case T.publicKey.dsa:case T.publicKey.ecdsa:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=F.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case T.publicKey.eddsaLegacy:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=F.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case T.publicKey.ed25519:case T.publicKey.ed448:{const n=2*pt(e),i=F.readExactSubarray(t,r,r+n);return r+=i.length,{read:r,signatureParams:{RS:i}}}case T.publicKey.hmac:{const e=new zn;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}case T.publicKey.pqc_mldsa_ed25519:{const e=2*pt(T.publicKey.ed25519),n=F.readExactSubarray(t,r,r+e);r+=n.length;const i=F.readExactSubarray(t,r,r+3309);return r+=i.length,{read:r,signatureParams:{eccSignature:n,mldsaSignature:i}}}default:throw new at("Unknown signature algorithm.")}}(this.publicKeyAlgorithm,n);if(i<n.length)throw Error("Error reading MPIs");this.params=s}writeParams(){return this.params instanceof Promise?D((async()=>zi(this.publicKeyAlgorithm,await this.params))):zi(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),F.concat(e)}async sign(e,t,r=new Date,n=!1,i){this.version=e.version,this.created=F.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=ua(this.hashAlgorithm);if(null===this.salt)this.salt=pe(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(i.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===sa)).length)throw Error("Unexpected existing salt notation");{const e=pe(ua(this.hashAlgorithm));this.rawNotations.push({name:sa,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=F.concat(s);const a=this.toHash(this.signatureType,t,n),o=await this.hash(this.signatureType,t,a,n);this.signedHashValue=C(S(o),0,2);const c=async()=>Xi(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await U(o));F.isStream(o)?this.params=c():(this.params=await c(),this[ia]=!0)}writeHashedSubPackets(){const e=T.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(ca(e.signatureCreationTime,!0,F.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(ca(e.signatureExpirationTime,!0,F.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(ca(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(ca(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(ca(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(ca(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(ca(e.keyExpirationTime,!0,F.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(ca(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=F.concat([r,this.revocationKeyFingerprint]),t.push(ca(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(ca(e.issuerKeyID,!1,this.issuerKeyID.write())),this.rawNotations.forEach((({name:n,value:i,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=F.encodeUTF8(n);r.push(F.writeNumber(o.length,2)),r.push(F.writeNumber(i.length,2)),r.push(o),r.push(i),r=F.concat(r),t.push(ca(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(ca(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(ca(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyServerPreferences)),t.push(ca(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(ca(e.preferredKeyServer,!1,F.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(ca(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(ca(e.policyURI,!1,F.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyFlags)),t.push(ca(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(ca(e.signersUserID,!1,F.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=F.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(ca(e.reasonForRevocation,!0,r))),null!==this.features&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.features)),t.push(ca(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(F.stringToUint8Array(this.signatureTargetHash)),r=F.concat(r),t.push(ca(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(ca(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=F.concat(r),t.push(ca(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(ca(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(ca(e.preferredCipherSuites,!1,r)));const n=F.concat(t),i=F.writeNumber(n.length,6===this.version?4:2);return F.concat([i,n])}writeUnhashedSubPackets(){const e=this.unhashedSubpackets.map((({type:e,critical:t,body:r})=>ca(e,t,r))),t=F.concat(e),r=F.writeNumber(t.length,6===this.version?4:2);return F.concat([r,t])}readSubPacket(e,t=!0){let r=0;const n=!!(128&e[r]),i=127&e[r];if(r++,t||(this.unhashedSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)}),aa.has(i)))switch(i){case T.signatureSubpacket.signatureCreationTime:this.created=F.readDate(e.subarray(r,e.length));break;case T.signatureSubpacket.signatureExpirationTime:{const t=F.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case T.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case T.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case T.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case T.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case T.signatureSubpacket.keyExpirationTime:{const t=F.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case T.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case T.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case T.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case T.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const i=F.readNumber(e.subarray(r,r+2));r+=2;const s=F.readNumber(e.subarray(r,r+2));r+=2;const a=F.decodeUTF8(e.subarray(r,r+i)),o=e.subarray(r+i,r+i+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:n}),t&&(this.notations[a]=F.decodeUTF8(o));break}case T.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case T.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case T.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case T.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=F.decodeUTF8(e.subarray(r,e.length));break;case T.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case T.signatureSubpacket.policyURI:this.policyURI=F.decodeUTF8(e.subarray(r,e.length));break;case T.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case T.signatureSubpacket.signersUserID:this.signersUserID=F.decodeUTF8(e.subarray(r,e.length));break;case T.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=F.decodeUTF8(e.subarray(r,e.length));break;case T.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case T.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=Te(this.signatureTargetHashAlgorithm);this.signatureTargetHash=F.uint8ArrayToString(e.subarray(r,r+t));break}case T.signatureSubpacket.embeddedSignature:this.embeddedSignature=new oa,this.embeddedSignature.read(e.subarray(r,e.length));break;case T.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case T.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case T.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:this.unknownSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)})}}readSubPackets(e,t=!0,r){const n=6===this.version?4:2,i=F.readNumber(e.subarray(0,n));let s=n;for(;s<2+i;){const n=$e(e.subarray(s,e.length));s+=n.offset,this.readSubPacket(e.subarray(s,s+n.len),t,r),s+=n.len}return s}toSign(e,t){const r=T.signature;switch(e){case r.binary:return null!==t.text?F.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return F.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,n;if(t.userID)n=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");n=209,e=t.userAttribute}const i=e.write();return F.concat([this.toSign(r.key,t),new Uint8Array([n]),F.writeNumber(i.length,4),i])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return F.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return E(S(this.signatureData),(e=>{r+=e.length}),(()=>{const n=[];return 5!==this.version||this.signatureType!==T.signature.binary&&this.signatureType!==T.signature.text||(t?n.push(new Uint8Array(6)):n.push(e.writeHeader())),n.push(new Uint8Array([this.version,255])),5===this.version&&n.push(new Uint8Array(4)),n.push(F.writeNumber(r,4)),F.concat(n)}))}toHash(e,t,r=!1){const n=this.toSign(e,t);return F.concat([this.salt||new Uint8Array,n,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,n=!1){if(6===this.version&&this.salt.length!==ua(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,n)),Re(this.hashAlgorithm,r)}async verify(e,t,r,n=new Date,i=!1,s=M){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===T.signature.binary||t===T.signature.text;if(!(this[ia]&&!a)){let n,s;if(this.hashed?s=await this.hashed:(n=this.toHash(t,r,i),s=await this.hash(t,r,n)),s=await U(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===T.publicKey.hmac?e.privateParams:null;if(this[ia]=await Ji(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,n,s),!this[ia])throw Error("Signature verification failed")}const o=F.normalizeDate(n);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+T.read(T.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[T.signature.binary,T.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+T.read(T.hash,this.hashAlgorithm).toUpperCase());if(this.unknownSubpackets.forEach((({type:e,critical:t})=>{if(t)throw Error("Unknown critical signature subpacket type "+e)})),this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=F.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function ca(e,t,r){const n=[];return n.push(et(r.length+1)),n.push(new Uint8Array([(t?128:0)|e])),n.push(r),F.concat(n)}function ua(e){switch(e){case T.hash.sha256:return 16;case T.hash.sha384:return 24;case T.hash.sha512:return 32;case T.hash.sha224:case T.hash.sha3_256:return 16;case T.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class ha{static get tag(){return T.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new ha;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new na,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new na,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),F.concatUint8Array(e)}calculateTrailer(...e){return D((async()=>oa.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==T.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!F.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!F.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function la(e,t){if(!t[e]){let t;try{t=T.read(T.packet,e)}catch(t){throw new ot("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}ha.prototype.hash=oa.prototype.hash,ha.prototype.toHash=oa.prototype.toHash,ha.prototype.toSign=oa.prototype.toSign;class fa extends Array{static async fromBinary(e,t,r=M,n=null,i=!1){const s=new fa;return await s.read(e,t,r,n,i),s}async read(e,t,r=M,n=null,i=!1){let s;r.additionalAllowedPackets.length&&(s=F.constructAllowedPackets(r.additionalAllowedPackets),t={...t,...s}),this.stream=v(e,(async(e,a)=>{const o=x(e),c=Q(a);try{let a=F.isStream(e);for(;;){let e,u;if(await c.ready,await st(o,a,(async a=>{try{if(a.tag===T.packet.marker||a.tag===T.packet.trust||a.tag===T.packet.padding)return;const e=la(a.tag,t);try{n?.recordPacket(a.tag,s)}catch(e){if(r.enforceGrammar)throw e;F.printDebugError(e)}e.packets=new fa,e.fromStream=F.isStream(a.packet),u=e.fromStream;try{await e.read(a.packet,r)}catch(t){if(!(t instanceof at))throw F.wrapError(new ct(`Parsing ${e.constructor.name} failed`),t);throw t}await c.write(e)}catch(t){const n=t instanceof ot&&a.tag<=39,s=t instanceof at&&!(t instanceof ot)&&!r.ignoreUnsupportedPackets,o=t instanceof ct&&!r.ignoreMalformedPackets,u=it(a.tag);if(n||s||o||u||!(t instanceof ot||t instanceof at||t instanceof ct))i?e=t:await c.abort(t);else{const e=new ut(a.tag,a.packet);await c.write(e)}F.printDebugError(t)}})),u&&(a=null),e)throw await o.readToEnd(),e;const h=await o.peekBytes(2);if(!h||!h.length){try{n?.recordEnd()}catch(e){if(r.enforceGrammar)throw e;F.printDebugError(e)}return await c.ready,void await c.close()}}}catch(e){await c.abort(e)}}));const a=x(this.stream);for(;;){const{done:e,value:t}=await a.read();if(e?this.stream=null:this.push(t),e||it(t.constructor.tag))break}a.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ut?this[t].tag:this[t].constructor.tag,n=this[t].write();if(F.isStream(n)&&it(this[t].constructor.tag)){let t=[],i=0;const s=512;e.push(rt(r)),e.push(E(n,(e=>{if(t.push(e),i+=e.length,i>=s){const e=Math.min(Math.log(i)/Math.LN2|0,30),r=2**e,n=F.concat([tt(e)].concat(t));return t=[n.subarray(1+r)],i=t[0].length,n.subarray(0,1+r)}}),(()=>F.concat([et(i)].concat(t)))))}else{if(F.isStream(n)){let t=0;e.push(E(S(n),(e=>{t+=e.length}),(()=>nt(r,t))))}else e.push(nt(r,n.length));e.push(n)}}return F.concat(e)}filterByTag(...e){const t=new fa,r=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(r(this[n].constructor.tag))&&t.push(this[n]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,n=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(n(r[i].constructor.tag))&&t.push(i);return t}}class ya extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ya),this.name="GrammarError"}}var pa;!function(e){e[e.EmptyMessage=0]="EmptyMessage",e[e.PlaintextOrEncryptedData=1]="PlaintextOrEncryptedData",e[e.EncryptedSessionKeys=2]="EncryptedSessionKeys",e[e.StandaloneAdditionalAllowedData=3]="StandaloneAdditionalAllowedData"}(pa||(pa={}));class da{constructor(){this.state=pa.EmptyMessage,this.leadingOnePassSignatureCounter=0}recordPacket(e,t){switch(this.state){case pa.EmptyMessage:case pa.StandaloneAdditionalAllowedData:switch(e){case T.packet.literalData:case T.packet.compressedData:case T.packet.aeadEncryptedData:case T.packet.symEncryptedIntegrityProtectedData:case T.packet.symmetricallyEncryptedData:return void(this.state=pa.PlaintextOrEncryptedData);case T.packet.signature:if(this.state===pa.StandaloneAdditionalAllowedData&&--this.leadingOnePassSignatureCounter<0)throw new ya("Trailing signature packet without OPS");return;case T.packet.onePassSignature:if(this.state===pa.StandaloneAdditionalAllowedData)throw new ya("OPS following StandaloneAdditionalAllowedData");return void this.leadingOnePassSignatureCounter++;case T.packet.publicKeyEncryptedSessionKey:case T.packet.symEncryptedSessionKey:return void(this.state=pa.EncryptedSessionKeys);default:if(!t?.[e])throw new ya(`Unexpected packet ${e} in state ${this.state}`);return void(this.state=pa.StandaloneAdditionalAllowedData)}case pa.PlaintextOrEncryptedData:if(e===T.packet.signature){if(--this.leadingOnePassSignatureCounter<0)throw new ya("Trailing signature packet without OPS");return void(this.state=pa.PlaintextOrEncryptedData)}if(!t?.[e])throw new ya(`Unexpected packet ${e} in state ${this.state}`);return void(this.state=pa.PlaintextOrEncryptedData);case pa.EncryptedSessionKeys:switch(e){case T.packet.publicKeyEncryptedSessionKey:case T.packet.symEncryptedSessionKey:return void(this.state=pa.EncryptedSessionKeys);case T.packet.symEncryptedIntegrityProtectedData:case T.packet.aeadEncryptedData:case T.packet.symmetricallyEncryptedData:return void(this.state=pa.PlaintextOrEncryptedData);case T.packet.signature:if(--this.leadingOnePassSignatureCounter<0)throw new ya("Trailing signature packet without OPS");return void(this.state=pa.PlaintextOrEncryptedData);default:if(!t?.[e])throw new ya(`Unexpected packet ${e} in state ${this.state}`);this.state=pa.EncryptedSessionKeys}}}recordEnd(){switch(this.state){case pa.EmptyMessage:case pa.PlaintextOrEncryptedData:case pa.EncryptedSessionKeys:case pa.StandaloneAdditionalAllowedData:if(this.leadingOnePassSignatureCounter>0)throw new ya("Missing trailing signature packets")}}}const ga=/*#__PURE__*/F.constructAllowedPackets([ra,ha,oa]);class wa{static get tag(){return T.packet.compressedData}constructor(e=M){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=M){await K(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),F.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=M){const t=T.read(T.compression,this.algorithm),r=Ea[t];if(!r)throw Error(t+" decompression not supported");this.packets=await fa.fromBinary(await r(this.compressed),ga,e,new da)}compress(){const e=T.read(T.compression,this.algorithm),t=ka[e];if(!t)throw Error(e+" compression not supported");this.compressed=t(this.packets.write())}}function Aa(e,t){return r=>{if(!F.isStream(r)||c(r))return D((()=>U(r).then((e=>new Promise(((r,n)=>{const i=new t,s=[];i.ondata=(e,t)=>{s.push(e),t&&r(F.concatUint8Array(s))};try{i.push(e,!0)}catch(e){n(e)}}))))));if(e)try{const t=e();return r.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const n=r.getReader(),i=new t;return new ReadableStream({async start(e){for(i.ondata=async(t,r)=>{e.enqueue(t),r&&e.close()};;){const{done:e,value:t}=await n.read();if(e)return void i.push(new Uint8Array,!0);t.length&&i.push(t)}}})}}function ma(){return async function(e){const{decode:t}=await Promise.resolve().then((function(){return Zd}));return D((async()=>t(await U(e))))}}const ba=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),ka={zip:/*#__PURE__*/Aa(ba("deflate-raw").compressor,Xs),zlib:/*#__PURE__*/Aa(ba("deflate").compressor,$s)},Ea={uncompressed:e=>e,zip:/*#__PURE__*/Aa(ba("deflate-raw").decompressor,Ws),zlib:/*#__PURE__*/Aa(ba("deflate").decompressor,ea),bzip2:/*#__PURE__*/ma()},va=/*#__PURE__*/F.constructAllowedPackets([ra,wa,ha,oa]);class Ka{static get tag(){return T.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new Ka;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await K(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new at(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):F.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=M){const{blockSize:n,keySize:i}=Br(e);if(t.length!==i)throw Error("Unexpected session key size");let s=this.packets.write();if(c(s)&&(s=await U(s)),2===this.version)this.cipherAlgorithm=e,this.salt=pe(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await Sa(this,"encrypt",t,s);else{const r=await ei(e),i=new Uint8Array([211,20]),a=F.concat([r,s,i]),o=await Re(T.hash.sha1,B(a)),c=F.concat([a,o]);this.encrypted=await ti(e,t,c,new Uint8Array(n))}return!0}async decrypt(e,t,r=M){if(t.length!==Br(e).keySize)throw Error("Unexpected session key size");let n,i=S(this.encrypted);c(i)&&(i=await U(i));let s=!1;if(2===this.version){if(this.cipherAlgorithm!==e)throw Error("Unexpected session key algorithm");n=await Sa(this,"decrypt",t,i)}else{const{blockSize:a}=Br(e),o=await ri(e,t,i,new Uint8Array(a)),c=C(B(o),-20),u=C(o,0,-20),h=Promise.all([U(await Re(T.hash.sha1,B(u))),U(c)]).then((([e,t])=>{if(!F.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),l=C(u,a+2);n=C(l,0,-2),n=A([n,D((()=>h))]),F.isStream(i)&&r.allowUnauthenticatedStream?s=!0:n=await U(n)}return this.packets=await fa.fromBinary(n,va,r,new da,s),!0}}async function Sa(e,t,r,n){const i=e instanceof Ka&&2===e.version,s=!i&&e.constructor.tag===T.packet.aeadEncryptedData;if(!i&&!s)throw Error("Unexpected packet type");const a=Oi(e.aeadAlgorithm,s),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,u=2**(e.chunkSizeByte+6)+o,h=s?8:0,l=new ArrayBuffer(13+h),f=new Uint8Array(l,0,5+h),y=new Uint8Array(l),p=new DataView(l),d=new Uint8Array(l,5,8);f.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let g,w,A=0,b=Promise.resolve(),k=0,E=0;if(i){const{keySize:t}=Br(e.cipherAlgorithm),{ivLength:n}=a,i=new Uint8Array(l,0,5),s=await Pr(T.hash.sha256,r,e.salt,i,t+n);r=s.subarray(0,t),g=s.subarray(t),g.fill(0,g.length-8),w=new DataView(g.buffer,g.byteOffset,g.byteLength)}else g=e.iv;const K=await a(e.cipherAlgorithm,r);return v(n,(async(r,n)=>{if("array"!==F.isStream(r)){const t=new TransformStream({},{highWaterMark:F.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});m(t.readable,n),n=t.writable}const s=x(r),a=Q(n);try{for(;;){let e=await s.readBytes(u+o)||new Uint8Array;const r=e.subarray(e.length-o);let n,l,m;if(e=e.subarray(0,e.length-o),i)m=g;else{m=g.slice();for(let e=0;e<8;e++)m[g.length-8+e]^=d[e]}if(!A||e.length?(s.unshift(r),n=K[t](e,m,f),n.catch((()=>{})),E+=e.length-o+c):(p.setInt32(5+h+4,k),n=K[t](r,m,y),n.catch((()=>{})),E+=c,l=!0),k+=e.length-o,b=b.then((()=>n)).then((async e=>{await a.ready,await a.write(e),E-=e.length})).catch((e=>a.abort(e))),(l||E>a.desiredSize)&&await b,l){await a.close();break}i?w.setInt32(g.length-4,++A):p.setInt32(9,++A)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const Ba=/*#__PURE__*/F.constructAllowedPackets([ra,wa,ha,oa]);class Ia{static get tag(){return T.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=T.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await K(e,(async e=>{const t=await e.readByte();if(1!==t)throw new at(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=Oi(this.aeadAlgorithm,!0);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=M){this.packets=await fa.fromBinary(await Sa(this,"decrypt",t,S(this.encrypted)),Ba,r,new da)}async encrypt(e,t,r=M){this.cipherAlgorithm=e;const{ivLength:n}=Oi(this.aeadAlgorithm,!0);this.iv=pe(n),this.chunkSizeByte=r.aeadChunkSizeByte;const i=this.packets.write();this.encrypted=await Sa(this,"encrypt",t,i)}}const Ca=new Set([T.publicKey.x25519,T.publicKey.x448,T.publicKey.pqc_mlkem_x25519]);class Ua{static get tag(){return T.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new na,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:n,sessionKeyAlgorithm:i}){const s=new Ua;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?na.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=n,s.sessionKeyAlgorithm=i,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const n=r-1;this.publicKeyFingerprint=e.subarray(t,t+n),t+=n,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=na.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=function(e,t){let r=0;switch(e){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:return{c:F.readMPI(t.subarray(r))};case T.publicKey.elgamal:{const e=F.readMPI(t.subarray(r));return r+=e.length+2,{c1:e,c2:F.readMPI(t.subarray(r))}}case T.publicKey.ecdh:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=new Hn;return n.read(t.subarray(r)),{V:e,C:n}}case T.publicKey.x25519:case T.publicKey.x448:{const n=Zi(e),i=F.readExactSubarray(t,r,r+n);r+=i.length;const s=new Zn;return s.read(t.subarray(r)),{ephemeralPublicKey:i,C:s}}case T.publicKey.aead:{const e=new jn;r+=e.read(t.subarray(r));const{ivLength:n}=Oi(e.getValue()),i=t.subarray(r,r+n);r+=n;const s=new zn;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:i,c:s}}case T.publicKey.pqc_mlkem_x25519:{const e=F.readExactSubarray(t,r,r+Zi(T.publicKey.x25519));r+=e.length;const n=F.readExactSubarray(t,r,r+1088);r+=n.length;const i=new Zn;return i.read(t.subarray(r)),{eccCipherText:e,mlkemCipherText:n,C:i}}default:throw new at("Unknown public key encryption algorithm.")}}(this.publicKeyAlgorithm,e.subarray(t)),Ca.has(this.publicKeyAlgorithm))if(3===this.version)this.sessionKeyAlgorithm=T.write(T.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),zi(this.publicKeyAlgorithm,this.encrypted)),F.concatUint8Array(e)}async encrypt(e){const t=T.write(T.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=Pa(this.version,t,r,this.sessionKey),s=t===T.publicKey.aead?e.privateParams:null;this.encrypted=await Ni(t,r,e.publicParams,s,i,n)}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?Pa(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=await _i(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,n,r),{sessionKey:s,sessionKeyAlgorithm:a}=function(e,t,r,n){switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.aead:{const t=r.subarray(0,r.length-2),i=r.subarray(r.length-2),s=F.writeChecksum(t.subarray(t.length%8)),a=s[0]===i[0]&s[1]===i[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(n){const t=a&o.sessionKeyAlgorithm===n.sessionKeyAlgorithm&o.sessionKey.length===n.sessionKey.length;return{sessionKey:F.selectUint8Array(t,o.sessionKey,n.sessionKey),sessionKeyAlgorithm:6===e?null:F.selectUint8(t,o.sessionKeyAlgorithm,n.sessionKeyAlgorithm)}}if(a&&(6===e||T.read(T.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case T.publicKey.x25519:case T.publicKey.x448:case T.publicKey.pqc_mlkem_x25519:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);if(3===this.version){const e=!Ca.has(this.publicKeyAlgorithm);if(this.sessionKeyAlgorithm=e?a:this.sessionKeyAlgorithm,s.length!==Br(this.sessionKeyAlgorithm).keySize)throw Error("Unexpected session key size")}this.sessionKey=s}}function Pa(e,t,r,n){switch(t){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.aead:return F.concatUint8Array([new Uint8Array(6===e?[]:[r]),n,F.writeChecksum(n.subarray(n.length%8))]);case T.publicKey.x25519:case T.publicKey.x448:case T.publicKey.pqc_mlkem_x25519:return n;default:throw Error("Unsupported public key algorithm")}}class Da{static get tag(){return T.packet.symEncryptedSessionKey}constructor(e=M){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=null,this.aeadAlgorithm=T.write(T.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const n=e[t++];if(this.s2k=ss(n),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=Oi(this.aeadAlgorithm,!0);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const n=r.length,i=3+n+this.iv.length;t=F.concatUint8Array([new Uint8Array([this.version,i,e,this.aeadAlgorithm,n]),r,this.iv,this.encrypted])}else 5===this.version?t=F.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=F.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=F.concatUint8Array([t,this.encrypted])));return t}async decrypt(e){const t=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:r,keySize:n}=Br(t),i=await this.s2k.produceKey(e,n);if(this.version>=5){const e=Oi(this.aeadAlgorithm,!0),r=new Uint8Array([192|Da.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),s=6===this.version?await Pr(T.hash.sha256,i,new Uint8Array,r,n):i,a=await e(t,s);this.sessionKey=await a.decrypt(this.encrypted,this.iv,r)}else if(null!==this.encrypted){const e=await ri(t,i,this.encrypted,new Uint8Array(r));if(this.sessionKeyAlgorithm=T.write(T.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length),this.sessionKey.length!==Br(this.sessionKeyAlgorithm).keySize)throw Error("Unexpected session key size")}else this.sessionKey=i}async encrypt(e,t=M){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=as(t),this.s2k.generateSalt();const{blockSize:n,keySize:i}=Br(r),s=await this.s2k.produceKey(e,i);if(null===this.sessionKey&&(this.sessionKey=Vi(this.sessionKeyAlgorithm)),this.version>=5){const e=Oi(this.aeadAlgorithm);this.iv=pe(e.ivLength);const t=new Uint8Array([192|Da.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),n=6===this.version?await Pr(T.hash.sha256,s,new Uint8Array,t,i):s,a=await e(r,n);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=F.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await ti(r,s,e,new Uint8Array(n))}}}class xa{static get tag(){return T.packet.publicKey}constructor(e=new Date,t=M){this.version=t.v6Keys?6:4,this.created=F.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new xa,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e,t=M){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new at("Support for parsing v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4===this.version||5===this.version||6===this.version){this.created=F.readDate(e.subarray(r,r+4)),r+=4,this.algorithm=e[r++],this.version>=5&&(r+=4);const{read:t,publicParams:n}=function(e,t){let r=0;switch(e){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=F.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{n:e,e:n}}}case T.publicKey.dsa:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=F.readMPI(t.subarray(r));r+=n.length+2;const i=F.readMPI(t.subarray(r));r+=i.length+2;const s=F.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:n,g:i,y:s}}}case T.publicKey.elgamal:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=F.readMPI(t.subarray(r));r+=n.length+2;const i=F.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{p:e,g:n,y:i}}}case T.publicKey.ecdsa:{const e=new We;r+=e.read(t),Yi(e);const n=F.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{oid:e,Q:n}}}case T.publicKey.eddsaLegacy:{const e=new We;if(r+=e.read(t),Yi(e),e.getName()!==T.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let n=F.readMPI(t.subarray(r));return r+=n.length+2,n=F.leftPad(n,33),{read:r,publicParams:{oid:e,Q:n}}}case T.publicKey.ecdh:{const e=new We;r+=e.read(t),Yi(e);const n=F.readMPI(t.subarray(r));r+=n.length+2;const i=new Gn;return r+=i.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:n,kdfParams:i}}}case T.publicKey.ed25519:case T.publicKey.ed448:case T.publicKey.x25519:case T.publicKey.x448:{const n=F.readExactSubarray(t,r,r+Zi(e));return r+=n.length,{read:r,publicParams:{A:n}}}case T.publicKey.hmac:case T.publicKey.aead:{const e=new Vn;r+=e.read(t);const n=Te(T.hash.sha256),i=t.subarray(r,r+n);return r+=n,{read:r,publicParams:{cipher:e,digest:i}}}case T.publicKey.pqc_mlkem_x25519:{const e=F.readExactSubarray(t,r,r+Zi(T.publicKey.x25519));r+=e.length;const n=F.readExactSubarray(t,r,r+1184);return r+=n.length,{read:r,publicParams:{eccPublicKey:e,mlkemPublicKey:n}}}case T.publicKey.pqc_mldsa_ed25519:{const e=F.readExactSubarray(t,r,r+Zi(T.publicKey.ed25519));r+=e.length;const n=F.readExactSubarray(t,r,r+1952);return r+=n.length,{read:r,publicParams:{eccPublicKey:e,mldsaPublicKey:n}}}default:throw new at("Unknown public key encryption algorithm.")}}(this.algorithm,e.subarray(r));if(6===this.version&&n.oid&&(n.oid.getName()===T.curve.curve25519Legacy||n.oid.getName()===T.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");if(6!==this.version&&this.algorithm===T.publicKey.pqc_mldsa_ed25519)throw Error("Unexpected key version: ML-DSA algorithms can only be used with v6 keys");return this.publicParams=n,r+=t,await this.computeFingerprintAndKeyID(),r}throw new at(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(F.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=zi(this.algorithm,this.publicParams);return this.version>=5&&e.push(F.writeNumber(t.length,4)),e.push(t),F.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,n=e>=5?4:2;return F.concatUint8Array([new Uint8Array([r]),F.writeNumber(t.length,n),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new na,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await Re(T.hash.sha256,e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await Re(T.hash.sha1,e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return F.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&F.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=T.read(T.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=F.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}xa.prototype.readPublicKey=xa.prototype.read,xa.prototype.writePublicKey=xa.prototype.write;const Qa=/*#__PURE__*/F.constructAllowedPackets([ra,wa,ha,oa]);class Ra{static get tag(){return T.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=M){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:n}=Br(e),i=await U(S(this.encrypted)),s=await ri(e,t,i.subarray(n+2),i.subarray(2,n+2));this.packets=await fa.fromBinary(s,Qa,r)}async encrypt(e,t,r=M){const n=this.packets.write(),{blockSize:i}=Br(e),s=await ei(e),a=await ti(e,t,s,new Uint8Array(i)),o=await ti(e,t,n,a.subarray(2));this.encrypted=F.concat([a,o])}}class Ta{static get tag(){return T.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}}class Ma extends xa{static get tag(){return T.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new Ma,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class La{static get tag(){return T.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=$e(e.subarray(t,e.length));t+=r.offset,this.attributes.push(F.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(et(this.attributes[t].length)),e.push(F.stringToUint8Array(this.attributes[t]));return F.concatUint8Array(e)}equals(e){return!!(e&&e instanceof La)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class Fa extends xa{static get tag(){return T.packet.secretKey}constructor(e=new Date,t=M){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=M){let r=await this.readPublicKey(e,t);const n=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=ss(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+Br(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+Oi(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(n),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!F.equalsUint8Array(F.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=await Hi(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof at)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return F.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=zi(this.algorithm,this.privateParams)),5===this.version&&t.push(F.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(F.writeChecksum(this.keyMaterial))),F.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=M){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=ss(T.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=T.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=M){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=as(t),this.s2k.generateSalt();const r=zi(this.algorithm,this.privateParams);this.symmetric=T.symmetric.aes256;const{blockSize:n}=Br(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=t.preferredAEADAlgorithm;const i=Oi(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const s=rt(this.constructor.tag),a=await Oa(this.version,this.s2k,e,this.symmetric,this.aead,s,this.isLegacyAEAD),o=await i(this.symmetric,a);this.iv=this.isLegacyAEAD?pe(n):pe(i.ivLength);const c=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([s,this.writePublicKey()]);this.keyMaterial=await o.encrypt(r,this.iv.subarray(0,i.ivLength),c)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const t=await Oa(this.version,this.s2k,e,this.symmetric);this.iv=pe(n),this.keyMaterial=await ti(this.symmetric,t,F.concatUint8Array([r,await Re(T.hash.sha1,r)]),this.iv)}}async decrypt(e){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let t;const r=rt(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let n;if(t=await Oa(this.version,this.s2k,e,this.symmetric,this.aead,r,this.isLegacyAEAD),253===this.s2kUsage){const e=Oi(this.aead,!0),i=await e(this.symmetric,t);try{const t=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([r,this.writePublicKey()]);n=await i.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),t)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await ri(this.symmetric,t,this.keyMaterial,this.iv);n=e.subarray(0,-20);const r=await Re(T.hash.sha1,n);if(!F.equalsUint8Array(r,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=await Hi(this.algorithm,n,this.publicParams);this.privateParams=e}catch(e){throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await ji(this.algorithm,this.publicParams,this.privateParams)}catch(t){e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===T.publicKey.ecdh&&t===T.curve.curve25519Legacy||this.algorithm===T.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);if(6!==this.version&&this.algorithm===T.publicKey.pqc_mldsa_ed25519)throw Error(`Cannot generate v${this.version} signing keys of type 'pqc'. Generate a v6 key instead`);const{privateParams:n,publicParams:i}=await Gi(this.algorithm,e,t,r);this.privateParams=n,this.publicParams=i,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function Oa(e,t,r,n,i,s,a){if("argon2"===t.type&&!i)throw Error("Using Argon2 S2K without AEAD is not allowed");if("simple"===t.type&&6===e)throw Error("Using Simple S2K with version 6 keys is not allowed");const{keySize:o}=Br(n),c=await t.produceKey(r,o);if(!i||5===e||a)return c;const u=F.concatUint8Array([s,new Uint8Array([e,n,i])]);return Pr(T.hash.sha256,c,new Uint8Array,u,o)}class Na{static get tag(){return T.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(F.isString(e)||e.name&&!F.isString(e.name)||e.email&&!F.isEmailAddress(e.email)||e.comment&&!F.isString(e.comment))throw Error("Invalid user ID format");const t=new Na;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=M){const r=F.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const n=e=>/^[^\s@]+@[^\s@]+$/.test(e),i=r.indexOf("<"),s=r.lastIndexOf(">");if(-1!==i&&-1!==s&&s>i){const e=r.substring(i+1,s);if(n(e)){this.email=e;const t=r.substring(0,i).trim(),n=t.indexOf("("),s=t.lastIndexOf(")");-1!==n&&-1!==s&&s>n?(this.comment=t.substring(n+1,s).trim(),this.name=t.substring(0,n).trim()):(this.name=t,this.comment="")}}else n(r.trim())&&(this.email=r.trim(),this.name="",this.comment="");this.userID=r}write(){return F.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class _a extends Fa{static get tag(){return T.packet.secretSubkey}constructor(e=new Date,t=M){super(e,t)}}class Ha{static get tag(){return T.packet.trust}read(){throw new at("Trust packets are not supported")}write(){throw new at("Trust packets are not supported")}}class za{static get tag(){return T.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=await pe(e)}}const Ga=/*#__PURE__*/F.constructAllowedPackets([oa]);class qa{constructor(e){this.packets=e||new fa}write(){return this.packets.write()}armor(e=M){const t=this.packets.some((e=>e.constructor.tag===oa.tag&&6!==e.version));return ee(T.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function ja({armoredSignature:e,binarySignature:t,config:r,...n}){r={...M,...r};let i=e||t;if(!i)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!F.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!F.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await $(i);if(e!==T.armor.signature)throw Error("Armored text not of type signature");i=t}const a=await fa.fromBinary(i,Ga,r);return new qa(a)}async function Va(e,t){const r=new _a(e.date,t);return r.packets=null,r.algorithm=T.write(T.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Ya(e,t){const r=new Fa(e.date,t);return r.packets=null,r.algorithm=T.write(T.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Za(e,t,r,n,i=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,n,i,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw F.wrapError(`Could not find valid ${T.read(T.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function Ja(e,t,r=new Date){const n=F.normalizeDate(r);if(null!==n){const r=ro(e,t);return!(e.created<=n&&n<r)}return!1}async function Xa(e,t,r,n){const i={};i.key=t,i.bind=e;const s={signatureType:T.signature.subkeyBinding};r.sign?(s.keyFlags=[T.keyFlags.signData],s.embeddedSignature=await $a(i,[],e,{signatureType:T.signature.keyBinding},r.date,void 0,void 0,void 0,n)):s.keyFlags=r.forwarding?[T.keyFlags.forwardedCommunication]:[T.keyFlags.encryptCommunication|T.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await $a(i,[],t,s,r.date,void 0,void 0,void 0,n)}async function Wa(e,t,r=new Date,n=[],i){const s=T.hash.sha256,a=i.preferredHashAlgorithm,o=await Promise.all(e.map((async(e,t)=>(await e.getPrimarySelfSignature(r,n[t],i)).preferredHashAlgorithms||[]))),c=new Map;for(const e of o)for(const t of e)try{const e=T.write(T.hash,t);c.set(e,c.has(e)?c.get(e)+1:1)}catch{}const u=t=>0===e.length||c.get(t)===e.length||t===s,h=()=>{if(0===c.size)return s;const e=Array.from(c.keys()).filter((e=>u(e))).sort(((e,t)=>Te(e)-Te(t)))[0];return Te(e)>=Te(s)?e:s},l=new Set([T.publicKey.ecdsa,T.publicKey.eddsaLegacy,T.publicKey.ed25519,T.publicKey.ed448]),f=new Set([T.publicKey.pqc_mldsa_ed25519]);if(l.has(t.algorithm)){const e=function(e,t){switch(e){case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:return Jr(t);case T.publicKey.ed25519:case T.publicKey.ed448:return dt(e);default:throw Error("Unknown elliptic signing algo")}}(t.algorithm,t.publicParams.oid),r=u(a),n=Te(a)>=Te(e);if(r&&n)return a;{const t=h();return Te(t)>=Te(e)?t:e}}if(f.has(t.algorithm)){if(u(a)&&Nn(t.algorithm,a))return a;{const e=h();return Nn(t.algorithm,e)?e:s}}return u(a)?a:h()}async function $a(e,t,r,n,i,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const u=new oa;return Object.assign(u,n),u.publicKeyAlgorithm=r.algorithm,u.hashAlgorithm=await Wa(t,r,i,s,c),u.rawNotations=[...a],await u.sign(r,e,i,o,c),u}async function eo(e,t,r,n=new Date,i){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(n)||i&&!await i(e)||t[r].some((function(t){return F.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function to(e,t,r,n,i,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(n.map((async function(e){try{if(!i||e.issuerKeyID.equals(i.issuerKeyID)){const n=![T.reasonForRevocation.keyRetired,T.reasonForRevocation.keySuperseded,T.reasonForRevocation.userIDInvalid].includes(e.reasonForRevocationFlag);await e.verify(s,t,r,n?null:a,!1,o),c.push(e.issuerKeyID)}}catch(e){}}))),i?(i.revoked=!!c.some((e=>e.equals(i.issuerKeyID)))||(i.revoked||!1),i.revoked):c.length>0}function ro(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function no(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=F.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"pqc":e.sign?e.algorithm=T.publicKey.pqc_mldsa_ed25519:e.algorithm=T.publicKey.pqc_mlkem_x25519;break;case"ecc":try{e.curve=T.write(T.curve,e.curve)}catch(e){throw Error("Unknown curve")}e.curve!==T.curve.ed25519Legacy&&e.curve!==T.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?T.curve.ed25519Legacy:T.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===T.curve.ed25519Legacy?T.publicKey.eddsaLegacy:T.publicKey.ecdsa:e.algorithm=T.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?T.publicKey.ed25519:T.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?T.publicKey.ed448:T.publicKey.x448;break;case"rsa":e.algorithm=T.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=T.publicKey.hmac;try{e.symmetric=T.write(T.hash,e.symmetricHash)}catch(e){throw Error("Unknown hash algorithm")}}else{e.algorithm=T.publicKey.aead;try{e.symmetric=T.write(T.symmetric,e.symmetricCipher)}catch(e){throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function io(e,t,r){switch(e.algorithm){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:case T.publicKey.dsa:case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:case T.publicKey.ed25519:case T.publicKey.ed448:case T.publicKey.hmac:case T.publicKey.pqc_mldsa_ed25519:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&T.keyFlags.signData);default:return!1}}function so(e,t,r){switch(e.algorithm){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.x25519:case T.publicKey.x448:case T.publicKey.aead:case T.publicKey.pqc_mlkem_x25519:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&T.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&T.keyFlags.encryptStorage);default:return!1}}function ao(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaEncrypt:case T.publicKey.elgamal:case T.publicKey.ecdh:case T.publicKey.x25519:case T.publicKey.x448:case T.publicKey.pqc_mlkem_x25519:return!(!(!t.keyFlags||!!(t.keyFlags[0]&T.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&T.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&T.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&T.keyFlags.forwardedCommunication));default:return!1}}function oo(e,t){const r=T.write(T.publicKey,e.algorithm),n=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(n.algorithm+" keys are considered too weak.");switch(r){case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:case T.publicKey.rsaEncrypt:if(n.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:case T.publicKey.ecdh:if(t.rejectCurves.has(n.curve))throw Error(`Support for ${n.algorithm} keys using curve ${n.curve} is disabled.`)}}class co{constructor(e,t){this.userID=e.constructor.tag===T.packet.userID?e:null,this.userAttribute=e.constructor.tag===T.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new fa;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new co(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n},s=new co(i.userID||i.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(n))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return $a(i,[e],s.keyPacket,{signatureType:T.signature.certGeneric,keyFlags:[T.keyFlags.certifyKeys|T.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,n=M){const i=this.mainKey.keyPacket;return to(i,T.signature.certRevocation,{key:i,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,n)}async verifyCertificate(e,t,r=new Date,n){const i=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,n);if(e.revoked||await i.isRevoked(e,s.keyPacket,r,n))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,T.signature.certGeneric,a,r,void 0,n)}catch(e){throw F.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const n=this,i=this.selfCertifications.concat(this.otherCertifications);return Promise.all(i.map((async i=>({keyID:i.issuerKeyID,valid:await n.verifyCertificate(i,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(n,T.signature.certGeneric,i,e,void 0,t)}catch(e){throw F.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};await eo(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(n,T.signature.certGeneric,i,t,!1,r),!0}catch(e){return!1}})),await eo(e,this,"otherCertifications",t),await eo(e,this,"revocationSignatures",t,(function(e){return to(n,T.signature.certRevocation,i,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=T.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=M){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new co(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await $a(s,[],e,{signatureType:T.signature.certRevocation,reasonForRevocationFlag:T.write(T.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}}class uo{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new fa;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new uo(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,n=M){const i=this.mainKey.keyPacket;return to(i,T.signature.subkeyRevocation,{key:i,bind:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verify(e=new Date,t=M){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket},i=await Za(this.bindingSignatures,r,T.signature.subkeyBinding,n,e,t);if(i.revoked||await this.isRevoked(i,null,e,t))throw Error("Subkey is revoked");if(Ja(this.keyPacket,i,e))throw Error("Subkey is expired");return i}async getExpirationTime(e=new Date,t=M){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket};let i;try{i=await Za(this.bindingSignatures,r,T.signature.subkeyBinding,n,e,t)}catch(e){return null}const s=ro(this.keyPacket,i),a=i.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=M){const n=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===T.packet.publicSubkey&&e.keyPacket.constructor.tag===T.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const i=this,s={key:n,bind:i.keyPacket};await eo(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<i.bindingSignatures.length;t++)if(i.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>i.bindingSignatures[t].created&&(i.bindingSignatures[t]=e),!1;try{return await e.verify(n,T.signature.subkeyBinding,s,t,void 0,r),!0}catch(e){return!1}})),await eo(e,this,"revocationSignatures",t,(function(e){return to(n,T.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=T.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=M){const s={key:e,bind:this.keyPacket},a=new uo(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await $a(s,[],e,{signatureType:T.signature.subkeyRevocation,reasonForRevocationFlag:T.write(T.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{uo.prototype[e]=function(){return this.keyPacket[e]()}}));const ho=/*#__PURE__*/F.constructAllowedPackets([oa]),lo=new Set([T.packet.publicKey,T.packet.privateKey]),fo=new Set([T.packet.publicKey,T.packet.privateKey,T.packet.publicSubkey,T.packet.privateSubkey]);class yo{packetListToStructure(e,t=new Set){let r,n,i,s;for(const a of e){if(a instanceof ut){fo.has(a.tag)&&!s&&(s=lo.has(a.tag)?lo:fo);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case T.packet.publicKey:case T.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,n=this.getKeyID(),!n)throw Error("Missing Key ID");break;case T.packet.userID:case T.packet.userAttribute:r=new co(a,this),this.users.push(r);break;case T.packet.publicSubkey:case T.packet.secretSubkey:r=null,i=new uo(a,this),this.subkeys.push(i);break;case T.packet.signature:switch(a.signatureType){case T.signature.certGeneric:case T.signature.certPersona:case T.signature.certCasual:case T.signature.certPositive:if(!r){F.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(n)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case T.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case T.signature.key:this.directSignatures.push(a);break;case T.signature.subkeyBinding:if(!i){F.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}i.bindingSignatures.push(a);break;case T.signature.keyRevocation:this.revocationSignatures.push(a);break;case T.signature.subkeyRevocation:if(!i){F.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}i.revocationSignatures.push(a)}}}}toPacketList(){const e=new fa;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},n=M){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{oo(i,n)}catch(e){throw F.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created||t.keyPacket.algorithm-e.keyPacket.algorithm));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await Za(r.bindingSignatures,i,T.signature.subkeyBinding,e,t,n);if(!io(r.keyPacket,s,n))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await Za([s.embeddedSignature],r.keyPacket,T.signature.keyBinding,e,t,n),oo(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&io(i,s,n))return oo(i,n),this}catch(e){a=e}throw F.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},n=M){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{oo(i,n)}catch(e){throw F.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created||t.keyPacket.algorithm-e.keyPacket.algorithm));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await Za(r.bindingSignatures,i,T.signature.subkeyBinding,e,t,n);if(so(r.keyPacket,s,n))return oo(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&so(i,s,n))return oo(i,n),this}catch(e){a=e}throw F.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,n=M){return to(this.keyPacket,T.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verifyPrimaryKey(e=new Date,t={},r=M){const n=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(Ja(n,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==n.version){const t=await Za(this.directSignatures,n,T.signature.key,{key:n},e,r).catch((()=>{}));if(t&&Ja(n,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=M){let r;try{const n=await this.getPrimarySelfSignature(null,e,t),i=ro(this.keyPacket,n),s=n.getExpirationTime(),a=6!==this.keyPacket.version&&await Za(this.directSignatures,this.keyPacket,T.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=ro(this.keyPacket,a);r=Math.min(i,s,e)}else r=i<s?i:s}catch(e){r=null}return F.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=M){const n=this.keyPacket;if(6===n.version)return Za(this.directSignatures,n,T.signature.key,{key:n},e,r);const{selfCertification:i}=await this.getPrimaryUser(e,t,r);return i}async getPrimaryUser(e=new Date,t={},r=M){const n=this.keyPacket,i=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:n},c=await Za(s.selfCertifications,n,T.signature.certGeneric,o,e,r);i.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!i.length)throw s||Error("Could not find primary user");await Promise.all(i.map((async function(t){return t.selfCertification.revoked||t.user.isRevoked(t.selfCertification,null,e,r)})));const a=i.sort((function(e,t){const r=e.selfCertification,n=t.selfCertification;return n.revoked-r.revoked||r.isPrimaryUserID-n.isPrimaryUserID||r.created-n.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=M){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const n=this.clone();return await eo(e,n,"revocationSignatures",t,(i=>to(n.keyPacket,T.signature.keyRevocation,n,[i],null,e.keyPacket,t,r))),await eo(e,n,"directSignatures",t),await Promise.all(e.users.map((async e=>{const i=n.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(i.length>0)await Promise.all(i.map((n=>n.update(e,t,r))));else{const t=e.clone();t.mainKey=n,n.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const i=n.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(i.length>0)await Promise.all(i.map((n=>n.update(e,t,r))));else{const t=e.clone();t.mainKey=n,n.subkeys.push(t)}}))),n}async getRevocationCertificate(e=new Date,t=M){const r={key:this.keyPacket},n=await Za(this.revocationSignatures,this.keyPacket,T.signature.keyRevocation,r,e,t),i=new fa;i.push(n);const s=6!==this.keyPacket.version;return ee(T.armor.publicKey,i.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=M){const n=await $(e),i=(await fa.fromBinary(n.data,ho,r)).findPacket(T.packet.signature);if(!i||i.signatureType!==T.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!i.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await i.verify(this.keyPacket,T.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw F.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(i),s}async signPrimaryUser(e,t,r,n=M){const{index:i,user:s}=await this.getPrimaryUser(t,r,n),a=await s.certify(e,t,n),o=this.clone();return o.users[i]=a,o}async signAllUsers(e,t=new Date,r=M){const n=this.clone();return n.users=await Promise.all(this.users.map((function(n){return n.certify(e,t,r)}))),n}async verifyPrimaryUser(e,t=new Date,r,n=M){const i=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,n);return e?await s.verifyAllCertifications(e,t,n):[{keyID:i.getKeyID(),valid:await s.verify(t,n).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=M){const n=this.keyPacket,i=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:n.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];i.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),i}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{yo.prototype[e]=uo.prototype[e]}));class po extends yo{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([T.packet.secretKey,T.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=M){const t=6!==this.keyPacket.version;return ee(T.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class go extends po{constructor(e){if(super(),this.packetListToStructure(e,new Set([T.packet.publicKey,T.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new fa,t=this.toPacketList();let r=!1;for(const n of t)if(!r||n.constructor.tag!==T.packet.Signature)switch(r&&(r=!1),n.constructor.tag){case T.packet.secretKey:{if(n.algorithm===T.publicKey.aead||n.algorithm===T.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=xa.fromSecretKeyPacket(n);e.push(t);break}case T.packet.secretSubkey:{if(n.algorithm===T.publicKey.aead||n.algorithm===T.publicKey.hmac){r=!0;break}const t=Ma.fromSecretSubkeyPacket(n);e.push(t);break}default:e.push(n)}return new po(e)}armor(e=M){const t=6!==this.keyPacket.version;return ee(T.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},n=M){const i=this.keyPacket,s=[];let a=null;for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0)){if(this.subkeys[r].keyPacket.isDummy()){a=a||Error("Gnu-dummy key packets cannot be used for decryption");continue}try{const e={key:i,bind:this.subkeys[r].keyPacket},a=await Za(this.subkeys[r].bindingSignatures,i,T.signature.subkeyBinding,e,t,n);ao(this.subkeys[r].keyPacket,a,n)&&s.push(this.subkeys[r])}catch(e){a=e}}const o=await this.getPrimarySelfSignature(t,r,n);if(e&&!i.getKeyID().equals(e,!0)||!ao(i,o,n)||(i.isDummy()?a=a||Error("Gnu-dummy key packets cannot be used for decryption"):s.push(this)),0===s.length)throw a||Error("No decryption key packets found");return s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=M){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((async e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=T.reasonForRevocation.noReason,string:t=""}={},r=new Date,n=M){if(!this.isPrivate())throw Error("Need private key for revoking");const i={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await $a(i,[],this.keyPacket,{signatureType:T.signature.keyRevocation,reasonForRevocationFlag:T.write(T.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,n)),s}async addSubkey(e={}){const t={...M,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const n=r.getAlgorithmInfo();n.type=function(e){switch(T.write(T.publicKey,e)){case T.publicKey.rsaEncrypt:case T.publicKey.rsaEncryptSign:case T.publicKey.rsaSign:case T.publicKey.dsa:return"rsa";case T.publicKey.ecdsa:case T.publicKey.eddsaLegacy:return"ecc";case T.publicKey.ed25519:return"curve25519";case T.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(n.algorithm),n.rsaBits=n.bits||4096,n.curve=n.curve||"curve25519Legacy",e=no(e,n);const i=await Va(e,{...t,v6Keys:6===this.keyPacket.version});oo(i,t);const s=await Xa(i,r,e,t),a=this.toPacketList();return a.push(i,s),new go(a)}}const wo=/*#__PURE__*/F.constructAllowedPackets([xa,Ma,Fa,_a,Na,La,oa]);function Ao(e){for(const t of e)switch(t.constructor.tag){case T.packet.secretKey:return new go(e);case T.packet.publicKey:return new po(e)}throw Error("No key packet found")}async function mo(e,t,r,n){r.passphrase&&await e.encrypt(r.passphrase,n),await Promise.all(t.map((async function(e,t){const i=r.subkeys[t].passphrase;i&&await e.encrypt(i,n)})));const i=new fa;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[T.keyFlags.certifyKeys|T.keyFlags.signData];const i=s([T.symmetric.aes256,T.symmetric.aes128],n.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=i,n.aeadProtect){const e=s([T.aead.gcm,T.aead.eax,T.aead.ocb],n.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>i.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([T.hash.sha512,T.hash.sha256,...6===e.version?[T.hash.sha3_512,T.hash.sha3_256]:[]],n.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([T.compression.uncompressed,T.compression.zlib,T.compression.zip],n.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=T.features.modificationDetection,n.aeadProtect&&(t.features[0]|=T.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(i.push(e),6===e.version){const t={key:e},s=a();s.signatureType=T.signature.key;const o=await $a(t,[],e,s,r.date,void 0,void 0,void 0,n);i.push(o)}await Promise.all(r.userIDs.map((async function(t,i){const s=Na.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=T.signature.certPositive,0===i&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await $a(o,[],e,c,r.date,void 0,void 0,void 0,n)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{i.push(e),i.push(t)}))})),await Promise.all(t.map((async function(t,i){const s=r.subkeys[i];return{secretSubkeyPacket:t,subkeySignaturePacket:await Xa(t,e,s,n)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{i.push(e),i.push(t)}))}));const o={key:e};return i.push(await $a(o,[],e,{signatureType:T.signature.keyRevocation,reasonForRevocationFlag:T.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,n)),r.passphrase&&e.clearPrivateParams(),await Promise.all(t.map((async function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()}))),new go(i)}async function bo({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...M,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!F.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!F.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await $(e);if(t!==T.armor.publicKey&&t!==T.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await fa.fromBinary(s,wo,r),o=a.indexOfTag(T.packet.publicKey,T.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Ao(a.slice(o[0],o[1]))}async function ko({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...M,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!F.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!F.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await $(e);if(t!==T.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await fa.fromBinary(s,wo,r),o=a.indexOfTag(T.packet.publicKey,T.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===T.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new go(t)}throw Error("No secret key packet found")}async function Eo({armoredKeys:e,binaryKeys:t,config:r,...n}){r={...M,...r};let i=e||t;if(!i)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!F.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!F.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await $(e);if(t!==T.armor.publicKey&&t!==T.armor.privateKey)throw Error("Armored text not of type key");i=r}const a=[],o=await fa.fromBinary(i,wo,r),c=o.indexOfTag(T.packet.publicKey,T.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Ao(o.slice(c[e],c[e+1]));a.push(t)}return a}async function vo({armoredKeys:e,binaryKeys:t,config:r}){r={...M,...r};let n=e||t;if(!n)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!F.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!F.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await $(e);if(t!==T.armor.privateKey)throw Error("Armored text not of type private key");n=r}const i=[],s=await fa.fromBinary(n,wo,r),a=s.indexOfTag(T.packet.publicKey,T.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===T.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new go(t);i.push(r)}if(0===i.length)throw Error("No secret key packet found");return i}const Ko=/*#__PURE__*/F.constructAllowedPackets([ra,wa,Ia,Ka,Ra,Ua,Da,ha,oa]),So=/*#__PURE__*/F.constructAllowedPackets([Da]),Bo=/*#__PURE__*/F.constructAllowedPackets([oa]);class Io{constructor(e){this.packets=e||new fa}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(T.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(T.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(T.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,n=new Date,i=M){const s=this.packets.filterByTag(T.packet.symmetricallyEncryptedData,T.packet.symEncryptedIntegrityProtectedData,T.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,n,i);let u=null;const h=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!F.isUint8Array(t)||!a.cipherAlgorithm&&!F.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||T.write(T.symmetric,e);await a.decrypt(r,t,i)}catch(e){F.printDebugError(e),u=e}})));if(P(a.encrypted),a.encrypted=null,await h,!a.packets||!a.packets.length)throw u||Error("Decryption failed.");const l=new Io(a.packets);return a.packets=new fa,l}async decryptSessionKeys(e,t,r,n=new Date,i=M){let s,a=[];if(t){const e=this.packets.filterByTag(T.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let n;n=r?await fa.fromBinary(e.write(),So,i):e,await Promise.all(n.map((async function(e){try{await e.decrypt(t),a.push(e)}catch(e){F.printDebugError(e),e instanceof Wi&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(T.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o;try{o=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,i)).map((e=>e.keyPacket))}catch(e){return void(s=e)}let c=[T.symmetric.aes256,T.symmetric.aes128,T.symmetric.tripledes,T.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(n,void 0,i);t.preferredSymmetricAlgorithms&&(c=c.concat(t.preferredSymmetricAlgorithms))}catch(e){}await Promise.all(o.map((async function(e){if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(i.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===T.publicKey.rsaEncrypt||t.publicKeyAlgorithm===T.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===T.publicKey.rsaSign||t.publicKeyAlgorithm===T.publicKey.elgamal)){const n=t.write();await Promise.all((r?[r]:Array.from(i.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new Ua;r.read(n);const i={sessionKeyAlgorithm:t,sessionKey:Vi(t)};try{await r.decrypt(e,i),a.push(r)}catch(e){F.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const n=r||t.sessionKeyAlgorithm;if(n&&!c.includes(T.write(T.symmetric,n)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){F.printDebugError(e),s=e}})))}))),P(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+F.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&T.read(T.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(T.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(T.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(T.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],n=M){const{symmetricAlgo:i,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],n=M){const i=await Promise.all(e.map(((e,i)=>e.getPrimarySelfSignature(t,r[i],n))));if(e.length?!n.ignoreSEIPDv2FeatureFlag&&i.every((e=>e.features&&e.features[0]&T.features.seipdv2)):n.aeadProtect){const e={symmetricAlgo:T.symmetric.aes128,aeadAlgo:T.aead.ocb},t=[{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:n.preferredAEADAlgorithm},{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:T.aead.ocb},{symmetricAlgo:T.symmetric.aes128,aeadAlgo:n.preferredAEADAlgorithm}];for(const e of t)if(i.every((t=>t.preferredCipherSuites&&t.preferredCipherSuites.some((t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo)))))return e;return e}const s=T.symmetric.aes128,a=n.preferredSymmetricAlgorithm;return{symmetricAlgo:i.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,n),a=T.read(T.symmetric,i),o=s?T.read(T.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===T.publicKey.x25519||e.keyPacket.algorithm===T.publicKey.x448)&&!o&&!F.isAES(i))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:Vi(i),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,n=!1,i=[],s=new Date,a=[],o=M){if(r){if(!F.isUint8Array(r.data)||!F.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Io.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Io.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:u,aeadAlgorithm:h}=r,l=await Io.encryptSessionKey(c,u,h,e,t,n,i,s,a,o),f=Ka.fromObject({version:h?2:1,aeadAlgorithm:h?T.write(T.aead,h):null});f.packets=this.packets;const y=T.write(T.symmetric,u);return await f.encrypt(y,c,o),l.packets.push(f),f.packets=new fa,l}static async encryptSessionKey(e,t,r,n,i,s=!1,a=[],o=new Date,c=[],u=M){const h=new fa,l=T.write(T.symmetric,t),f=r&&T.write(T.aead,r);if(n){const t=await Promise.all(n.map((async function(t,r){const n=await t.getEncryptionKey(a[r],o,c,u),i=Ua.fromObject({version:f?6:3,encryptionKeyPacket:n.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await i.encrypt(n.keyPacket),delete i.sessionKey,i})));h.push(...t)}if(i){const t=async function(e,t){try{return await e.decrypt(t),1}catch(e){return 0}},r=(e,t)=>e+t,n=async function(e,s,a,o){const c=new Da(u);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,u),u.passwordCollisionCheck){if(1!==(await Promise.all(i.map((e=>t(c,e))))).reduce(r))return n(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(i.map((t=>n(e,l,f,t))));h.push(...s)}return new Io(h)}async sign(e=[],t=[],r=null,n=[],i=new Date,s=[],a=[],o=[],c=M){const u=new fa,h=this.packets.findPacket(T.packet.literalData);if(!h)throw Error("No literal data packet to sign.");const l=await Co(h,e,t,r,n,i,s,a,o,!1,c),f=l.map(((e,t)=>ha.fromSignaturePacket(e,0===t))).reverse();return u.push(...f),u.push(h),u.push(...l),new Io(u)}compress(e,t=M){if(e===T.compression.uncompressed)return this;const r=new wa(t);r.algorithm=e,r.packets=this.packets;const n=new fa;return n.push(r),new Io(n)}async signDetached(e=[],t=[],r=null,n=[],i=[],s=new Date,a=[],o=[],c=M){const u=this.packets.findPacket(T.packet.literalData);if(!u)throw Error("No literal data packet to sign.");return new qa(await Co(u,e,t,r,n,i,s,a,o,!0,c))}async verify(e,t=new Date,r=M){const n=this.unwrapCompressed(),i=n.packets.filterByTag(T.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");let s=n.packets;c(s.stream)&&(s=s.concat(await U(s.stream,(e=>e||[]))));const a=s.filterByTag(T.packet.onePassSignature).reverse(),o=s.filterByTag(T.packet.signature);return a.length&&!o.length&&F.isStream(s.stream)&&!c(s.stream)?(await Promise.all(a.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=D((async()=>(await e.correspondingSig).signatureData)),e.hashed=U(await e.hash(e.signatureType,i[0],void 0,!1)),e.hashed.catch((()=>{}))}))),s.stream=v(s.stream,(async(e,t)=>{const r=x(e),n=Q(t);try{for(let e=0;e<a.length;e++){const{value:t}=await r.read();a[e].correspondingSigResolve(t)}await r.readToEnd(),await n.ready,await n.close()}catch(e){a.forEach((t=>{t.correspondingSigReject(e)})),await n.abort(e)}})),Uo(a,i,e,t,!1,r)):Uo(o,i,e,t,!1,r)}verifyDetached(e,t,r=new Date,n=M){const i=this.unwrapCompressed().packets.filterByTag(T.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");return Uo(e.packets.filterByTag(T.packet.signature),i,t,r,!0,n)}unwrapCompressed(){const e=this.packets.filterByTag(T.packet.compressedData);return e.length?new Io(e[0].packets):this}async appendSignature(e,t=M){await this.packets.read(F.isUint8Array(e)?e:(await $(e)).data,Bo,t)}write(){return this.packets.write()}armor(e=M){const t=this.packets[this.packets.length-1],r=t.constructor.tag===Ka.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===oa.tag&&6!==e.version));return ee(T.armor.message,this.write(),null,null,null,r,e)}}async function Co(e,t,r=[],n=null,i=[],s=new Date,a=[],o=[],c=[],u=!1,h=M){const l=new fa,f=null===e.text?T.signature.binary:T.signature.text;if(await Promise.all(t.map((async(t,n)=>{const l=a[n];if(!t.isPrivate())throw Error("Need private key for signing");const y=await t.getSigningKey(i[n],s,l,h);return $a(e,r.length?r:[t],y.keyPacket,{signatureType:f},s,o,c,u,h)}))).then((e=>{l.push(...e)})),n){const e=n.packets.filterByTag(T.packet.signature);l.push(...e)}return l}async function Uo(e,t,r,n=new Date,i=!1,s=M){return Promise.all(e.filter((function(e){return["text","binary"].includes(T.read(T.signature,e.signatureType))})).map((async function(e){return async function(e,t,r,n=new Date,i=!1,s=M){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof ha?e.correspondingSig:e,u={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],n,i,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),n,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new fa;return e&&t.push(e),new qa(t)})()};return u.signature.catch((()=>{})),u.verified.catch((()=>{})),u}(e,t,r,n,i,s)})))}async function Po({armoredMessage:e,binaryMessage:t,config:r,...n}){r={...M,...r};let i=e||t;if(!i)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!F.isString(e)&&!F.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!F.isUint8Array(t)&&!F.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=F.isStream(i);if(e){const{type:e,data:t}=await $(i);if(e!==T.armor.message)throw Error("Armored text not of type message");i=t}const o=await fa.fromBinary(i,Ko,r,new da),c=new Io(o);return c.fromStream=a,c}async function Do({text:e,binary:t,filename:r,date:n=new Date,format:i=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!F.isString(e)&&!F.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!F.isUint8Array(t)&&!F.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=F.isStream(a),u=new ra(n);void 0!==e?u.setText(a,T.write(T.literal,i)):u.setBytes(a,T.write(T.literal,i)),void 0!==r&&u.setFilename(r);const h=new fa;h.push(u);const l=new Io(h);return l.fromStream=c,l}const xo=/*#__PURE__*/F.constructAllowedPackets([oa]);class Qo{constructor(e,t){if(this.text=F.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof qa))throw Error("Invalid signature input");this.signature=t||new qa(new fa)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=[],r=null,n=[],i=new Date,s=[],a=[],o=[],c=M){const u=new ra;u.setText(this.text);const h=new qa(await Co(u,e,t,r,n,i,s,a,o,!0,c));return new Qo(this.text,h)}verify(e,t=new Date,r=M){const n=this.signature.packets.filterByTag(T.packet.signature),i=new ra;return i.setText(this.text),Uo(n,[i],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=M){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>T.read(T.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return ee(T.armor.signed,r,void 0,void 0,void 0,t,e)}}async function Ro({cleartextMessage:e,config:t,...r}){if(t={...M,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!F.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const n=Object.keys(r);if(n.length>0)throw Error("Unknown option: "+n.join(", "));const i=await $(e);if(i.type!==T.armor.signed)throw Error("No cleartext signed message.");const s=await fa.fromBinary(i.data,xo,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let n=0;n<t.length;n++)if(t[n].constructor.tag===T.packet.signature&&!e.some(r(t[n])))return!1;return!0},n=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return T.write(T.hash,e.toLowerCase())}catch(t){throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));n.push(...e)}})),n.length&&!r(n))throw Error("Hash algorithm mismatch in armor header and signature")}(i.headers,s);const a=new qa(s);return new Qo(i.text,a)}async function To({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!F.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new Qo(e)}async function Mo({userIDs:e=[],passphrase:t,type:r,curve:n,rsaBits:i=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:u=[{}],format:h="armored",config:l,...f}){Wo(l={...M,...l}),r||n?(r=r||"ecc",n=n||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",n="curve25519Legacy"),e=$o(e);const y=Object.keys(f);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&i<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${i}`);const p={userIDs:e,passphrase:t,type:r,rsaBits:i,curve:n,keyExpirationTime:o,date:c,subkeys:u,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=no(e)).subkeys=e.subkeys.map(((t,r)=>no(e.subkeys[r],e)));let r=[Ya(e,t)];r=r.concat(e.subkeys.map((e=>Va(e,t))));const n=await Promise.all(r),i=await mo(n[0],n.slice(1),e,t),s=await i.getRevocationCertificate(e.date,t);return i.revocationSignatures=[],{key:i,revocationCertificate:s}}(p,l);return e.getKeys().forEach((({keyPacket:e})=>oo(e,l))),{privateKey:rc(e,h,l),publicKey:"symmetric"!==r?rc(e.toPublic(),h,l):null,revocationCertificate:t}}catch(e){throw F.wrapError("Error generating keypair",e)}}async function Lo({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:n=0,date:i,format:s="armored",config:a,...o}){Wo(a={...M,...a}),t=$o(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const u={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:n,date:i};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const n=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,i={key:n,bind:r},s=await Za(e.bindingSignatures,n,T.signature.subkeyBinding,i,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&T.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&T.keyFlags.forwardedCommunication}}))));const i=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==i.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await mo(n,i,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=F.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(u,a);return{privateKey:rc(e,s,a),publicKey:rc(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw F.wrapError("Error reformatting keypair",e)}}async function Fo({key:e,revocationCertificate:t,reasonForRevocation:r,date:n=new Date,format:i="armored",config:s,...a}){Wo(s={...M,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,n,s):await e.revoke(r,n,s);return a.isPrivate()?{privateKey:rc(a,i,s),publicKey:rc(a.toPublic(),i,s)}:{privateKey:null,publicKey:rc(a,i,s)}}catch(e){throw F.wrapError("Error revoking key",e)}}async function Oo({privateKey:e,passphrase:t,config:r,...n}){Wo(r={...M,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=F.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>F.anyPromise(a.map((t=>e.keyPacket.decrypt(t))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),F.wrapError("Error decrypting private key",e)}}async function No({privateKey:e,passphrase:t,config:r,...n}){Wo(r={...M,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=F.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:n}=e;await n.encrypt(o[t],r),n.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),F.wrapError("Error encrypting private key",e)}}async function _o({message:e,encryptionKeys:t,signingKeys:r,passwords:n,sessionKey:i,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:u=[],date:h=new Date,signingUserIDs:l=[],encryptionUserIDs:f=[],signatureNotations:y=[],config:p,...d}){if(Wo(p={...M,...p}),Yo(e),Jo(s),t=$o(t),r=$o(r),n=$o(n),c=$o(c),u=$o(u),l=$o(l),f=$o(f),y=$o(y),d.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(d.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(d.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==d.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const g=Object.keys(d);if(g.length>0)throw Error("Unknown option: "+g.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,t,a,c,h,l,u,y,p)),e=e.compress(await async function(e=[],t=new Date,r=[],n=M){const i=T.compression.uncompressed,s=n.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,i){const a=(await e.getPrimarySelfSignature(t,r[i],n)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:i}(t,h,f,p),p),e=await e.encrypt(t,n,i,o,u,h,f,p),"object"===s)return e;const d="armored"===s?e.armor(p):e.write();return await ec(d)}catch(e){throw F.wrapError("Error encrypting message",e)}}async function Ho({message:e,decryptionKeys:t,passwords:r,sessionKeys:n,verificationKeys:i,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:u,...h}){if(Wo(u={...M,...u}),Yo(e),i=$o(i),t=$o(t),r=$o(r),n=$o(n),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(h.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(h);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const h=await e.decrypt(t,r,n,c,u);i||(i=[]);const l={};if(l.signatures=o?await h.verifyDetached(o,i,c,u):await h.verify(i,c,u),l.data="binary"===a?h.getLiteralData():h.getText(),l.filename=h.getFilename(),tc(l,e,...new Set([h,h.unwrapCompressed()])),s){if(0===i.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=A([l.data,D((async()=>(await F.anyPromise(l.signatures.map((e=>e.verified))),"binary"===a?new Uint8Array:"")))])}return l.data=await ec(l.data),l}catch(e){throw F.wrapError("Error decrypting message",e)}}async function zo({message:e,signingKeys:t,recipientKeys:r=[],format:n="armored",detached:i=!1,signingKeyIDs:s=[],date:a=new Date,signingUserIDs:o=[],recipientUserIDs:c=[],signatureNotations:u=[],config:h,...l}){if(Wo(h={...M,...h}),Zo(e),Jo(n),t=$o(t),s=$o(s),o=$o(o),r=$o(r),c=$o(c),u=$o(u),l.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==l.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const f=Object.keys(l);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(e instanceof Qo&&"binary"===n)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof Qo&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let l;if(l=i?await e.signDetached(t,r,void 0,s,a,o,c,u,h):await e.sign(t,r,void 0,s,a,o,c,u,h),"object"===n)return l;return l="armored"===n?l.armor(h):l.write(),i&&(l=v(e.packets.write(),(async(e,t)=>{await Promise.all([m(l,t),U(e).catch((()=>{}))])}))),await ec(l)}catch(e){throw F.wrapError("Error signing message",e)}}async function Go({message:e,verificationKeys:t,expectSigned:r=!1,format:n="utf8",signature:i=null,date:s=new Date,config:a,...o}){if(Wo(a={...M,...a}),Zo(e),t=$o(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof Qo&&"binary"===n)throw Error("Can't return cleartext message data as binary");if(e instanceof Qo&&i)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=i?await e.verifyDetached(i,t,s,a):await e.verify(t,s,a),o.data="binary"===n?e.getLiteralData():e.getText(),e.fromStream&&!i&&tc(o,...new Set([e,e.unwrapCompressed()])),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=A([o.data,D((async()=>(await F.anyPromise(o.signatures.map((e=>e.verified))),"binary"===n?new Uint8Array:"")))])}return o.data=await ec(o.data),o}catch(e){throw F.wrapError("Error verifying signed message",e)}}async function qo({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:n,...i}){if(Wo(n={...M,...n}),e=$o(e),r=$o(r),i.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Io.generateSessionKey(e,t,r,n)}catch(e){throw F.wrapError("Error generating session key",e)}}async function jo({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:n,passwords:i,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:u=[],config:h,...l}){if(Wo(h={...M,...h}),function(e){if(!F.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!F.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),Jo(s),n=$o(n),i=$o(i),o=$o(o),u=$o(u),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const f=Object.keys(l);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(!(n&&0!==n.length||i&&0!==i.length))throw Error("No encryption keys or passwords provided.");try{return rc(await Io.encryptSessionKey(e,t,r,n,i,a,o,c,u,h),s,h)}catch(e){throw F.wrapError("Error encrypting session key",e)}}async function Vo({message:e,decryptionKeys:t,passwords:r,date:n=new Date,config:i,...s}){if(Wo(i={...M,...i}),Yo(e),t=$o(t),r=$o(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,n,i)}catch(e){throw F.wrapError("Error decrypting session keys",e)}}function Yo(e){if(!(e instanceof Io))throw Error("Parameter [message] needs to be of type Message")}function Zo(e){if(!(e instanceof Qo||e instanceof Io))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function Jo(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const Xo=Object.keys(M).length;function Wo(e){const t=Object.keys(e);if(t.length!==Xo)for(const e of t)if(void 0===M[e])throw Error("Unknown config property: "+e)}function $o(e){return e&&!F.isArray(e)&&(e=[e]),e}async function ec(e){return"array"===F.isStream(e)?U(e):e}function tc(e,t,...r){e.data=v(t.packets.stream,(async(t,n)=>{await m(e.data,n,{preventClose:!0});const i=Q(n);try{await U(t,(e=>e)),await Promise.all(r.map((e=>U(e.packets.stream,(e=>e))))),await i.close()}catch(e){await i.abort(e)}}))}function rc(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}const nc=r&&"object"==typeof r&&"webcrypto"in r?r.webcrypto:r&&"object"==typeof r&&"randomBytes"in r?r:void 0;
-/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ic(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&"Uint8Array"===e.constructor.name}function sc(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, got "+e)}function ac(e,...t){if(!ic(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error("Uint8Array expected of length "+t+", got length="+e.length)}function oc(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.createHasher");sc(e.outputLen),sc(e.blockLen)}function cc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function uc(e,t){ac(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}function hc(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function lc(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function fc(e,t){return e<<32-t|e>>>t}function yc(e,t){return e<<t|e>>>32-t>>>0}const pc=/* @__PURE__ */(()=>68===new Uint8Array(new Uint32Array([287454020]).buffer)[0])()?e=>e:function(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t;return e},dc=/* @__PURE__ */(()=>"function"==typeof Uint8Array.from([]).toHex&&"function"==typeof Uint8Array.fromHex)(),gc=/* @__PURE__ */Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function wc(e){if(ac(e),dc)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=gc[e[r]];return t}const Ac=48,mc=57,bc=65,kc=70,Ec=97,vc=102;function Kc(e){return e>=Ac&&e<=mc?e-Ac:e>=bc&&e<=kc?e-(bc-10):e>=Ec&&e<=vc?e-(Ec-10):void 0}function Sc(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);if(dc)return Uint8Array.fromHex(e);const t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);const n=new Uint8Array(r);for(let t=0,i=0;t<r;t++,i+=2){const r=Kc(e.charCodeAt(i)),s=Kc(e.charCodeAt(i+1));if(void 0===r||void 0===s){const t=e[i]+e[i+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+i)}n[t]=16*r+s}return n}function Bc(e){return"string"==typeof e&&(e=function(e){if("string"!=typeof e)throw Error("string expected");return new Uint8Array((new TextEncoder).encode(e))}(e)),ac(e),e}function Ic(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];ac(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}let Cc=class{};function Uc(e){const t=t=>e().update(Bc(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}const Pc=Uc;function Dc(e=32){if(nc&&"function"==typeof nc.getRandomValues)return nc.getRandomValues(new Uint8Array(e));if(nc&&"function"==typeof nc.randomBytes)return Uint8Array.from(nc.randomBytes(e));throw Error("crypto.getRandomValues must be defined")}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const xc=/* @__PURE__ */BigInt(0),Qc=/* @__PURE__ */BigInt(1);function Rc(e,t=""){if("boolean"!=typeof e){throw Error((t&&`"${t}"`)+"expected boolean, got type="+typeof e)}return e}function Tc(e,t,r=""){const n=ic(e),i=e?.length,s=void 0!==t;if(!n||s&&i!==t){throw Error((r&&`"${r}" `)+"expected Uint8Array"+(s?" of length "+t:"")+", got "+(n?"length="+i:"type="+typeof e))}return e}function Mc(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function Lc(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return""===e?xc:BigInt("0x"+e)}function Fc(e){return Lc(wc(e))}function Oc(e){return ac(e),Lc(wc(Uint8Array.from(e).reverse()))}function Nc(e,t){return Sc(e.toString(16).padStart(2*t,"0"))}function _c(e,t){return Nc(e,t).reverse()}function Hc(e,t,r){let n;if("string"==typeof t)try{n=Sc(t)}catch(t){throw Error(e+" must be hex string or Uint8Array, cause: "+t)}else{if(!ic(t))throw Error(e+" must be hex string or Uint8Array");n=Uint8Array.from(t)}const i=n.length;if("number"==typeof r&&i!==r)throw Error(e+" of length "+r+" expected, got "+i);return n}function zc(e){return Uint8Array.from(e)}const Gc=e=>"bigint"==typeof e&&xc<=e;function qc(e,t,r,n){if(!function(e,t,r){return Gc(e)&&Gc(t)&&Gc(r)&&t<=e&&e<r}(t,r,n))throw Error("expected valid "+e+": "+r+" <= n < "+n+", got "+t)}function jc(e){let t;for(t=0;e>xc;e>>=Qc,t+=1);return t}const Vc=e=>(Qc<<BigInt(e))-Qc;function Yc(e,t,r={}){if(!e||"object"!=typeof e)throw Error("expected valid options object");function n(t,r,n){const i=e[t];if(n&&void 0===i)return;const s=typeof i;if(s!==r||null===i)throw Error(`param "${t}" is invalid: expected ${r}, got ${s}`)}Object.entries(t).forEach((([e,t])=>n(e,t,!1))),Object.entries(r).forEach((([e,t])=>n(e,t,!0)))}function Zc(e){const t=new WeakMap;return(r,...n)=>{const i=t.get(r);if(void 0!==i)return i;const s=e(r,...n);return t.set(r,s),s}}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Jc=BigInt(0),Xc=BigInt(1),Wc=/* @__PURE__ */BigInt(2),$c=/* @__PURE__ */BigInt(3),eu=/* @__PURE__ */BigInt(4),tu=/* @__PURE__ */BigInt(5),ru=/* @__PURE__ */BigInt(7),nu=/* @__PURE__ */BigInt(8),iu=/* @__PURE__ */BigInt(9),su=/* @__PURE__ */BigInt(16);function au(e,t){const r=e%t;return r>=Jc?r:t+r}function ou(e,t,r){let n=e;for(;t-- >Jc;)n*=n,n%=r;return n}function cu(e,t){if(e===Jc)throw Error("invert: expected non-zero number");if(t<=Jc)throw Error("invert: expected positive modulus, got "+t);let r=au(e,t),n=t,i=Jc,s=Xc;for(;r!==Jc;){const e=n%r,t=i-s*(n/r);n=r,r=e,i=s,s=t}if(n!==Xc)throw Error("invert: does not exist");return au(i,t)}function uu(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function hu(e,t){const r=(e.ORDER+Xc)/eu,n=e.pow(t,r);return uu(e,n,t),n}function lu(e,t){const r=(e.ORDER-tu)/nu,n=e.mul(t,Wc),i=e.pow(n,r),s=e.mul(t,i),a=e.mul(e.mul(s,Wc),i),o=e.mul(s,e.sub(a,e.ONE));return uu(e,o,t),o}function fu(e){if(e<$c)throw Error("sqrt is not defined for small field");let t=e-Xc,r=0;for(;t%Wc===Jc;)t/=Wc,r++;let n=Wc;const i=Au(e);for(;1===gu(i,n);)if(n++>1e3)throw Error("Cannot find square root: probably non-prime P");if(1===r)return hu;let s=i.pow(n,t);const a=(t+Xc)/Wc;return function(e,n){if(e.is0(n))return n;if(1!==gu(e,n))throw Error("Cannot find square root");let i=r,o=e.mul(e.ONE,s),c=e.pow(n,t),u=e.pow(n,a);for(;!e.eql(c,e.ONE);){if(e.is0(c))return e.ZERO;let t=1,r=e.sqr(c);for(;!e.eql(r,e.ONE);)if(t++,r=e.sqr(r),t===i)throw Error("Cannot find square root");const n=Xc<<BigInt(i-t-1),s=e.pow(o,n);i=t,o=e.sqr(s),c=e.mul(c,o),u=e.mul(u,s)}return u}}function yu(e){return e%eu===$c?hu:e%nu===tu?lu:e%su===iu?function(e){const t=Au(e),r=fu(e),n=r(t,t.neg(t.ONE)),i=r(t,n),s=r(t,t.neg(n)),a=(e+ru)/su;return(e,t)=>{let r=e.pow(t,a),o=e.mul(r,n);const c=e.mul(r,i),u=e.mul(r,s),h=e.eql(e.sqr(o),t),l=e.eql(e.sqr(c),t);r=e.cmov(r,o,h),o=e.cmov(u,c,l);const f=e.eql(e.sqr(o),t),y=e.cmov(r,o,f);return uu(e,y,t),y}}(e):fu(e)}const pu=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function du(e,t,r=!1){const n=Array(t.length).fill(r?e.ZERO:void 0),i=t.reduce(((t,r,i)=>e.is0(r)?t:(n[i]=t,e.mul(t,r))),e.ONE),s=e.inv(i);return t.reduceRight(((t,r,i)=>e.is0(r)?t:(n[i]=e.mul(t,n[i]),e.mul(t,r))),s),n}function gu(e,t){const r=(e.ORDER-Xc)/Wc,n=e.pow(t,r),i=e.eql(n,e.ONE),s=e.eql(n,e.ZERO),a=e.eql(n,e.neg(e.ONE));if(!i&&!s&&!a)throw Error("invalid Legendre symbol result");return i?1:s?0:-1}function wu(e,t){void 0!==t&&sc(t);const r=void 0!==t?t:e.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function Au(e,t,r=!1,n={}){if(e<=Jc)throw Error("invalid field: expected ORDER > 0, got "+e);let i,s,a,o=!1;if("object"==typeof t&&null!=t){if(n.sqrt||r)throw Error("cannot specify opts in two arguments");const e=t;e.BITS&&(i=e.BITS),e.sqrt&&(s=e.sqrt),"boolean"==typeof e.isLE&&(r=e.isLE),"boolean"==typeof e.modFromBytes&&(o=e.modFromBytes),a=e.allowedLengths}else"number"==typeof t&&(i=t),n.sqrt&&(s=n.sqrt);const{nBitLength:c,nByteLength:u}=wu(e,i);if(u>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");let h;const l=Object.freeze({ORDER:e,isLE:r,BITS:c,BYTES:u,MASK:Vc(c),ZERO:Jc,ONE:Xc,allowedLengths:a,create:t=>au(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("invalid field element: expected bigint, got "+typeof t);return Jc<=t&&t<e},is0:e=>e===Jc,isValidNot0:e=>!l.is0(e)&&l.isValid(e),isOdd:e=>(e&Xc)===Xc,neg:t=>au(-t,e),eql:(e,t)=>e===t,sqr:t=>au(t*t,e),add:(t,r)=>au(t+r,e),sub:(t,r)=>au(t-r,e),mul:(t,r)=>au(t*r,e),pow:(e,t)=>function(e,t,r){if(r<Jc)throw Error("invalid exponent, negatives unsupported");if(r===Jc)return e.ONE;if(r===Xc)return t;let n=e.ONE,i=t;for(;r>Jc;)r&Xc&&(n=e.mul(n,i)),i=e.sqr(i),r>>=Xc;return n}(l,e,t),div:(t,r)=>au(t*cu(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>cu(t,e),sqrt:s||(t=>(h||(h=yu(e)),h(l,t))),toBytes:e=>r?_c(e,u):Nc(e,u),fromBytes:(t,n=!0)=>{if(a){if(!a.includes(t.length)||t.length>u)throw Error("Field.fromBytes: expected "+a+" bytes, got "+t.length);const e=new Uint8Array(u);e.set(t,r?0:e.length-t.length),t=e}if(t.length!==u)throw Error("Field.fromBytes: expected "+u+" bytes, got "+t.length);let i=r?Oc(t):Fc(t);if(o&&(i=au(i,e)),!n&&!l.isValid(i))throw Error("invalid field element: outside of range 0..ORDER");return i},invertBatch:e=>du(l,e),cmov:(e,t,r)=>r?t:e});return Object.freeze(l)}function mu(e){if("bigint"!=typeof e)throw Error("field order must be bigint");const t=e.toString(2).length;return Math.ceil(t/8)}function bu(e){const t=mu(e);return t+Math.ceil(t/2)}function ku(e,t,r){return e&t^~e&r}function Eu(e,t,r){return e&t^e&r^t&r}class vu extends Cc{constructor(e,t,r,n){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=n,this.buffer=new Uint8Array(e),this.view=lc(this.buffer)}update(e){cc(this),ac(e=Bc(e));const{view:t,buffer:r,blockLen:n}=this,i=e.length;for(let s=0;s<i;){const a=Math.min(n-this.pos,i-s);if(a!==n)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===n&&(this.process(t,0),this.pos=0);else{const t=lc(e);for(;n<=i-s;s+=n)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){cc(this),uc(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:n,isLE:i}=this;let{pos:s}=this;t[s++]=128,hc(this.buffer.subarray(s)),this.padOffset>n-s&&(this.process(r,0),s=0);for(let e=s;e<n;e++)t[e]=0;!function(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s),c=n?4:0,u=n?0:4;e.setUint32(t+c,a,n),e.setUint32(t+u,o,n)}(r,n-8,BigInt(8*this.length),i),this.process(r,0);const a=lc(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,u=this.get();if(c>u.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,u[e],i)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:n,finished:i,destroyed:s,pos:a}=this;return e.destroyed=s,e.finished=i,e.length=n,e.pos=a,n%t&&e.buffer.set(r),e}clone(){return this._cloneInto()}}const Ku=/* @__PURE__ */Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Su=/* @__PURE__ */Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),Bu=/* @__PURE__ */Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),Iu=/* @__PURE__ */Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]),Cu=/* @__PURE__ */BigInt(2**32-1),Uu=/* @__PURE__ */BigInt(32);function Pu(e,t=!1){return t?{h:Number(e&Cu),l:Number(e>>Uu&Cu)}:{h:0|Number(e>>Uu&Cu),l:0|Number(e&Cu)}}function Du(e,t=!1){const r=e.length;let n=new Uint32Array(r),i=new Uint32Array(r);for(let s=0;s<r;s++){const{h:r,l:a}=Pu(e[s],t);[n[s],i[s]]=[r,a]}return[n,i]}const xu=(e,t,r)=>e>>>r,Qu=(e,t,r)=>e<<32-r|t>>>r,Ru=(e,t,r)=>e>>>r|t<<32-r,Tu=(e,t,r)=>e<<32-r|t>>>r,Mu=(e,t,r)=>e<<64-r|t>>>r-32,Lu=(e,t,r)=>e>>>r-32|t<<64-r;function Fu(e,t,r,n){const i=(t>>>0)+(n>>>0);return{h:e+r+(i/2**32|0)|0,l:0|i}}const Ou=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),Nu=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,_u=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),Hu=(e,t,r,n,i)=>t+r+n+i+(e/2**32|0)|0,zu=(e,t,r,n,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(i>>>0),Gu=(e,t,r,n,i,s)=>t+r+n+i+s+(e/2**32|0)|0,qu=/* @__PURE__ */Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ju=/* @__PURE__ */new Uint32Array(64);class Vu extends vu{constructor(e=32){super(64,e,8,!1),this.A=0|Ku[0],this.B=0|Ku[1],this.C=0|Ku[2],this.D=0|Ku[3],this.E=0|Ku[4],this.F=0|Ku[5],this.G=0|Ku[6],this.H=0|Ku[7]}get(){const{A:e,B:t,C:r,D:n,E:i,F:s,G:a,H:o}=this;return[e,t,r,n,i,s,a,o]}set(e,t,r,n,i,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)ju[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=ju[e-15],r=ju[e-2],n=fc(t,7)^fc(t,18)^t>>>3,i=fc(r,17)^fc(r,19)^r>>>10;ju[e]=i+ju[e-7]+n+ju[e-16]|0}let{A:r,B:n,C:i,D:s,E:a,F:o,G:c,H:u}=this;for(let e=0;e<64;e++){const t=u+(fc(a,6)^fc(a,11)^fc(a,25))+ku(a,o,c)+qu[e]+ju[e]|0,h=(fc(r,2)^fc(r,13)^fc(r,22))+Eu(r,n,i)|0;u=c,c=o,o=a,a=s+t|0,s=i,i=n,n=r,r=t+h|0}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,u=u+this.H|0,this.set(r,n,i,s,a,o,c,u)}roundClean(){hc(ju)}destroy(){this.set(0,0,0,0,0,0,0,0),hc(this.buffer)}}class Yu extends Vu{constructor(){super(28),this.A=0|Su[0],this.B=0|Su[1],this.C=0|Su[2],this.D=0|Su[3],this.E=0|Su[4],this.F=0|Su[5],this.G=0|Su[6],this.H=0|Su[7]}}const Zu=/* @__PURE__ */(()=>Du(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),Ju=/* @__PURE__ */(()=>Zu[0])(),Xu=/* @__PURE__ */(()=>Zu[1])(),Wu=/* @__PURE__ */new Uint32Array(80),$u=/* @__PURE__ */new Uint32Array(80);class eh extends vu{constructor(e=64){super(128,e,16,!1),this.Ah=0|Iu[0],this.Al=0|Iu[1],this.Bh=0|Iu[2],this.Bl=0|Iu[3],this.Ch=0|Iu[4],this.Cl=0|Iu[5],this.Dh=0|Iu[6],this.Dl=0|Iu[7],this.Eh=0|Iu[8],this.El=0|Iu[9],this.Fh=0|Iu[10],this.Fl=0|Iu[11],this.Gh=0|Iu[12],this.Gl=0|Iu[13],this.Hh=0|Iu[14],this.Hl=0|Iu[15]}get(){const{Ah:e,Al:t,Bh:r,Bl:n,Ch:i,Cl:s,Dh:a,Dl:o,Eh:c,El:u,Fh:h,Fl:l,Gh:f,Gl:y,Hh:p,Hl:d}=this;return[e,t,r,n,i,s,a,o,c,u,h,l,f,y,p,d]}set(e,t,r,n,i,s,a,o,c,u,h,l,f,y,p,d){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|n,this.Ch=0|i,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|u,this.Fh=0|h,this.Fl=0|l,this.Gh=0|f,this.Gl=0|y,this.Hh=0|p,this.Hl=0|d}process(e,t){for(let r=0;r<16;r++,t+=4)Wu[r]=e.getUint32(t),$u[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|Wu[e-15],r=0|$u[e-15],n=Ru(t,r,1)^Ru(t,r,8)^xu(t,0,7),i=Tu(t,r,1)^Tu(t,r,8)^Qu(t,r,7),s=0|Wu[e-2],a=0|$u[e-2],o=Ru(s,a,19)^Mu(s,a,61)^xu(s,0,6),c=Tu(s,a,19)^Lu(s,a,61)^Qu(s,a,6),u=_u(i,c,$u[e-7],$u[e-16]),h=Hu(u,n,o,Wu[e-7],Wu[e-16]);Wu[e]=0|h,$u[e]=0|u}let{Ah:r,Al:n,Bh:i,Bl:s,Ch:a,Cl:o,Dh:c,Dl:u,Eh:h,El:l,Fh:f,Fl:y,Gh:p,Gl:d,Hh:g,Hl:w}=this;for(let e=0;e<80;e++){const t=Ru(h,l,14)^Ru(h,l,18)^Mu(h,l,41),A=Tu(h,l,14)^Tu(h,l,18)^Lu(h,l,41),m=h&f^~h&p,b=zu(w,A,l&y^~l&d,Xu[e],$u[e]),k=Gu(b,g,t,m,Ju[e],Wu[e]),E=0|b,v=Ru(r,n,28)^Mu(r,n,34)^Mu(r,n,39),K=Tu(r,n,28)^Lu(r,n,34)^Lu(r,n,39),S=r&i^r&a^i&a,B=n&s^n&o^s&o;g=0|p,w=0|d,p=0|f,d=0|y,f=0|h,y=0|l,({h,l}=Fu(0|c,0|u,0|k,0|E)),c=0|a,u=0|o,a=0|i,o=0|s,i=0|r,s=0|n;const I=Ou(E,K,B);r=Nu(I,k,v,S),n=0|I}({h:r,l:n}=Fu(0|this.Ah,0|this.Al,0|r,0|n)),({h:i,l:s}=Fu(0|this.Bh,0|this.Bl,0|i,0|s)),({h:a,l:o}=Fu(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:u}=Fu(0|this.Dh,0|this.Dl,0|c,0|u)),({h,l}=Fu(0|this.Eh,0|this.El,0|h,0|l)),({h:f,l:y}=Fu(0|this.Fh,0|this.Fl,0|f,0|y)),({h:p,l:d}=Fu(0|this.Gh,0|this.Gl,0|p,0|d)),({h:g,l:w}=Fu(0|this.Hh,0|this.Hl,0|g,0|w)),this.set(r,n,i,s,a,o,c,u,h,l,f,y,p,d,g,w)}roundClean(){hc(Wu,$u)}destroy(){hc(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class th extends eh{constructor(){super(48),this.Ah=0|Bu[0],this.Al=0|Bu[1],this.Bh=0|Bu[2],this.Bl=0|Bu[3],this.Ch=0|Bu[4],this.Cl=0|Bu[5],this.Dh=0|Bu[6],this.Dl=0|Bu[7],this.Eh=0|Bu[8],this.El=0|Bu[9],this.Fh=0|Bu[10],this.Fl=0|Bu[11],this.Gh=0|Bu[12],this.Gl=0|Bu[13],this.Hh=0|Bu[14],this.Hl=0|Bu[15]}}const rh=/* @__PURE__ */Uc((()=>new Vu)),nh=/* @__PURE__ */Uc((()=>new Yu)),ih=/* @__PURE__ */Uc((()=>new eh)),sh=/* @__PURE__ */Uc((()=>new th));class ah extends Cc{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,oc(e);const r=Bc(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const n=this.blockLen,i=new Uint8Array(n);i.set(r.length>n?e.create().update(r).digest():r);for(let e=0;e<i.length;e++)i[e]^=54;this.iHash.update(i),this.oHash=e.create();for(let e=0;e<i.length;e++)i[e]^=106;this.oHash.update(i),hc(i)}update(e){return cc(this),this.iHash.update(e),this}digestInto(e){cc(this),ac(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:n,destroyed:i,blockLen:s,outputLen:a}=this;return e.finished=n,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const oh=(e,t,r)=>new ah(e,t).update(r).digest();oh.create=(e,t)=>new ah(e,t)
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */;const ch=BigInt(0),uh=BigInt(1);function hh(e,t){const r=t.negate();return e?r:t}function lh(e,t){const r=du(e.Fp,t.map((e=>e.Z)));return t.map(((t,n)=>e.fromAffine(t.toAffine(r[n]))))}function fh(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function yh(e,t){fh(e,t);const r=2**e;return{windows:Math.ceil(t/e)+1,windowSize:2**(e-1),mask:Vc(e),maxNumber:r,shiftBy:BigInt(e)}}function ph(e,t,r){const{windowSize:n,mask:i,maxNumber:s,shiftBy:a}=r;let o=Number(e&i),c=e>>a;o>n&&(o-=s,c+=uh);const u=t*n;return{nextN:c,offset:u+Math.abs(o)-1,isZero:0===o,isNeg:o<0,isNegF:t%2!=0,offsetF:u}}const dh=new WeakMap,gh=new WeakMap;function wh(e){return gh.get(e)||1}function Ah(e){if(e!==ch)throw Error("invalid wNAF")}class mh{constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let n=e;for(;t>ch;)t&uh&&(r=r.add(n)),n=n.double(),t>>=uh;return r}precomputeWindow(e,t){const{windows:r,windowSize:n}=yh(t,this.bits),i=[];let s=e,a=s;for(let e=0;e<r;e++){a=s,i.push(a);for(let e=1;e<n;e++)a=a.add(s),i.push(a);s=a.double()}return i}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let n=this.ZERO,i=this.BASE;const s=yh(e,this.bits);for(let e=0;e<s.windows;e++){const{nextN:a,offset:o,isZero:c,isNeg:u,isNegF:h,offsetF:l}=ph(r,e,s);r=a,c?i=i.add(hh(h,t[l])):n=n.add(hh(u,t[o]))}return Ah(r),{p:n,f:i}}wNAFUnsafe(e,t,r,n=this.ZERO){const i=yh(e,this.bits);for(let e=0;e<i.windows&&r!==ch;e++){const{nextN:s,offset:a,isZero:o,isNeg:c}=ph(r,e,i);if(r=s,!o){const e=t[a];n=n.add(c?e.negate():e)}}return Ah(r),n}getPrecomputes(e,t,r){let n=dh.get(t);return n||(n=this.precomputeWindow(t,e),1!==e&&("function"==typeof r&&(n=r(n)),dh.set(t,n))),n}cached(e,t,r){const n=wh(e);return this.wNAF(n,this.getPrecomputes(n,e,r),t)}unsafe(e,t,r,n){const i=wh(e);return 1===i?this._unsafeLadder(e,t,n):this.wNAFUnsafe(i,this.getPrecomputes(i,e,r),t,n)}createCache(e,t){fh(t,this.bits),gh.set(e,t),dh.delete(e)}hasCache(e){return 1!==wh(e)}}function bh(e,t,r,n){!function(e,t){if(!Array.isArray(e))throw Error("array expected");e.forEach(((e,r)=>{if(!(e instanceof t))throw Error("invalid point at index "+r)}))}(r,e),function(e,t){if(!Array.isArray(e))throw Error("array of scalars expected");e.forEach(((e,r)=>{if(!t.isValid(e))throw Error("invalid scalar at index "+r)}))}(n,t);const i=r.length,s=n.length;if(i!==s)throw Error("arrays of points and scalars must have equal length");const a=e.ZERO,o=jc(BigInt(i));let c=1;o>12?c=o-3:o>4?c=o-2:o>0&&(c=2);const u=Vc(c),h=Array(Number(u)+1).fill(a);let l=a;for(let e=Math.floor((t.BITS-1)/c)*c;e>=0;e-=c){h.fill(a);for(let t=0;t<s;t++){const i=n[t],s=Number(i>>BigInt(e)&u);h[s]=h[s].add(r[t])}let t=a;for(let e=h.length-1,r=a;e>0;e--)r=r.add(h[e]),t=t.add(r);if(l=l.add(t),0!==e)for(let e=0;e<c;e++)l=l.double()}return l}function kh(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return function(e){Yc(e,pu.reduce(((e,t)=>(e[t]="function",e)),{ORDER:"bigint",MASK:"bigint",BYTES:"number",BITS:"number"}))}(t),t}return Au(e,{isLE:r})}function Eh(e,t,r={},n){if(void 0===n&&(n="edwards"===e),!t||"object"!=typeof t)throw Error(`expected valid ${e} CURVE object`);for(const e of["p","n","h"]){const r=t[e];if(!("bigint"==typeof r&&r>ch))throw Error(`CURVE.${e} must be positive bigint`)}const i=kh(t.p,r.Fp,n),s=kh(t.n,r.Fn,n),a=["Gx","Gy","a","weierstrass"===e?"b":"d"];for(const e of a)if(!i.isValid(t[e]))throw Error(`CURVE.${e} must be valid field element of CURVE.Fp`);return{CURVE:t=Object.freeze(Object.assign({},t)),Fp:i,Fn:s}}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const vh=(e,t)=>(e+(e>=0?t:-t)/Uh)/t;function Kh(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Sh(e,t){const r={};for(let n of Object.keys(t))r[n]=void 0===e[n]?t[n]:e[n];return Rc(r.lowS,"lowS"),Rc(r.prehash,"prehash"),void 0!==r.format&&Kh(r.format),r}const Bh={Err:class extends Error{constructor(e=""){super(e)}},_tlv:{encode:(e,t)=>{const{Err:r}=Bh;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(1&t.length)throw new r("tlv.encode: unpadded data");const n=t.length/2,i=Mc(n);if(i.length/2&128)throw new r("tlv.encode: long form length too big");const s=n>127?Mc(i.length/2|128):"";return Mc(e)+s+i+t},decode(e,t){const{Err:r}=Bh;let n=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");const i=t[n++];let s=0;if(!!(128&i)){const e=127&i;if(!e)throw new r("tlv.decode(long): indefinite length not supported");if(e>4)throw new r("tlv.decode(long): byte length is too big");const a=t.subarray(n,n+e);if(a.length!==e)throw new r("tlv.decode: length bytes not complete");if(0===a[0])throw new r("tlv.decode(long): zero leftmost byte");for(const e of a)s=s<<8|e;if(n+=e,s<128)throw new r("tlv.decode(long): not minimal encoding")}else s=i;const a=t.subarray(n,n+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(n+s)}}},_int:{encode(e){const{Err:t}=Bh;if(e<Ih)throw new t("integer: negative integers are not allowed");let r=Mc(e);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){const{Err:t}=Bh;if(128&e[0])throw new t("invalid signature integer: negative");if(0===e[0]&&!(128&e[1]))throw new t("invalid signature integer: unnecessary leading zero");return Fc(e)}},toSig(e){const{Err:t,_int:r,_tlv:n}=Bh,i=Hc("signature",e),{v:s,l:a}=n.decode(48,i);if(a.length)throw new t("invalid signature: left bytes after parsing");const{v:o,l:c}=n.decode(2,s),{v:u,l:h}=n.decode(2,c);if(h.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(o),s:r.decode(u)}},hexFromSig(e){const{_tlv:t,_int:r}=Bh,n=t.encode(2,r.encode(e.r))+t.encode(2,r.encode(e.s));return t.encode(48,n)}},Ih=BigInt(0),Ch=BigInt(1),Uh=BigInt(2),Ph=BigInt(3),Dh=BigInt(4);function xh(e,t){const{BYTES:r}=e;let n;if("bigint"==typeof t)n=t;else{let i=Hc("private key",t);try{n=e.fromBytes(i)}catch(e){throw Error(`invalid private key: expected ui8a of size ${r}, got ${typeof t}`)}}if(!e.isValidNot0(n))throw Error("invalid private key: out of range [1..N-1]");return n}function Qh(e,t={}){const r=Eh("weierstrass",e,t),{Fp:n,Fn:i}=r;let s=r.CURVE;const{h:a,n:o}=s;Yc(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object",wrapPrivateKey:"boolean"});const{endo:c}=t;if(c&&(!n.is0(s.a)||"bigint"!=typeof c.beta||!Array.isArray(c.basises)))throw Error('invalid endo: expected "beta": bigint and "basises": array');const u=Th(n,i);function h(){if(!n.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}const l=t.toBytes||function(e,t,r){const{x:i,y:s}=t.toAffine(),a=n.toBytes(i);if(Rc(r,"isCompressed"),r){h();return Ic(Rh(!n.isOdd(s)),a)}return Ic(Uint8Array.of(4),a,n.toBytes(s))},f=t.fromBytes||function(e){Tc(e,void 0,"Point");const{publicKey:t,publicKeyUncompressed:r}=u,i=e.length,s=e[0],a=e.subarray(1);if(i!==t||2!==s&&3!==s){if(i===r&&4===s){const e=n.BYTES,t=n.fromBytes(a.subarray(0,e)),r=n.fromBytes(a.subarray(e,2*e));if(!p(t,r))throw Error("bad point: is not on curve");return{x:t,y:r}}throw Error(`bad point: got length ${i}, expected compressed=${t} or uncompressed=${r}`)}{const e=n.fromBytes(a);if(!n.isValid(e))throw Error("bad point: is not on curve, wrong x");const t=y(e);let r;try{r=n.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+t)}h();return!(1&~s)!==n.isOdd(r)&&(r=n.neg(r)),{x:e,y:r}}};function y(e){const t=n.sqr(e),r=n.mul(t,e);return n.add(n.add(r,n.mul(e,s.a)),s.b)}function p(e,t){const r=n.sqr(t),i=y(e);return n.eql(r,i)}if(!p(s.Gx,s.Gy))throw Error("bad curve params: generator point");const d=n.mul(n.pow(s.a,Ph),Dh),g=n.mul(n.sqr(s.b),BigInt(27));if(n.is0(n.add(d,g)))throw Error("bad curve params: a or b");function w(e,t,r=!1){if(!n.isValid(t)||r&&n.is0(t))throw Error("bad point coordinate "+e);return t}function A(e){if(!(e instanceof v))throw Error("ProjectivePoint expected")}function m(e){if(!c||!c.basises)throw Error("no endo");return function(e,t,r){const[[n,i],[s,a]]=t,o=vh(a*e,r),c=vh(-i*e,r);let u=e-o*n-c*s,h=-o*i-c*a;const l=u<Ih,f=h<Ih;l&&(u=-u),f&&(h=-h);const y=Vc(Math.ceil(jc(r)/2))+Ch;if(u<Ih||u>=y||h<Ih||h>=y)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:l,k1:u,k2neg:f,k2:h}}(e,c.basises,i.ORDER)}const b=Zc(((e,t)=>{const{X:r,Y:i,Z:s}=e;if(n.eql(s,n.ONE))return{x:r,y:i};const a=e.is0();null==t&&(t=a?n.ONE:n.inv(s));const o=n.mul(r,t),c=n.mul(i,t),u=n.mul(s,t);if(a)return{x:n.ZERO,y:n.ZERO};if(!n.eql(u,n.ONE))throw Error("invZ was invalid");return{x:o,y:c}})),k=Zc((e=>{if(e.is0()){if(t.allowInfinityPoint&&!n.is0(e.Y))return;throw Error("bad point: ZERO")}const{x:r,y:i}=e.toAffine();if(!n.isValid(r)||!n.isValid(i))throw Error("bad point: x or y not field elements");if(!p(r,i))throw Error("bad point: equation left != right");if(!e.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0}));function E(e,t,r,i,s){return r=new v(n.mul(r.X,e),r.Y,r.Z),t=hh(i,t),r=hh(s,r),t.add(r)}class v{constructor(e,t,r){this.X=w("x",e),this.Y=w("y",t,!0),this.Z=w("z",r),Object.freeze(this)}static CURVE(){return s}static fromAffine(e){const{x:t,y:r}=e||{};if(!e||!n.isValid(t)||!n.isValid(r))throw Error("invalid affine point");if(e instanceof v)throw Error("projective point not allowed");return n.is0(t)&&n.is0(r)?v.ZERO:new v(t,r,n.ONE)}static fromBytes(e){const t=v.fromAffine(f(Tc(e,void 0,"point")));return t.assertValidity(),t}static fromHex(e){return v.fromBytes(Hc("pointHex",e))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(e=8,t=!0){return S.createCache(this,e),t||this.multiply(Ph),this}assertValidity(){k(this)}hasEvenY(){const{y:e}=this.toAffine();if(!n.isOdd)throw Error("Field doesn't support isOdd");return!n.isOdd(e)}equals(e){A(e);const{X:t,Y:r,Z:i}=this,{X:s,Y:a,Z:o}=e,c=n.eql(n.mul(t,o),n.mul(s,i)),u=n.eql(n.mul(r,o),n.mul(a,i));return c&&u}negate(){return new v(this.X,n.neg(this.Y),this.Z)}double(){const{a:e,b:t}=s,r=n.mul(t,Ph),{X:i,Y:a,Z:o}=this;let c=n.ZERO,u=n.ZERO,h=n.ZERO,l=n.mul(i,i),f=n.mul(a,a),y=n.mul(o,o),p=n.mul(i,a);return p=n.add(p,p),h=n.mul(i,o),h=n.add(h,h),c=n.mul(e,h),u=n.mul(r,y),u=n.add(c,u),c=n.sub(f,u),u=n.add(f,u),u=n.mul(c,u),c=n.mul(p,c),h=n.mul(r,h),y=n.mul(e,y),p=n.sub(l,y),p=n.mul(e,p),p=n.add(p,h),h=n.add(l,l),l=n.add(h,l),l=n.add(l,y),l=n.mul(l,p),u=n.add(u,l),y=n.mul(a,o),y=n.add(y,y),l=n.mul(y,p),c=n.sub(c,l),h=n.mul(y,f),h=n.add(h,h),h=n.add(h,h),new v(c,u,h)}add(e){A(e);const{X:t,Y:r,Z:i}=this,{X:a,Y:o,Z:c}=e;let u=n.ZERO,h=n.ZERO,l=n.ZERO;const f=s.a,y=n.mul(s.b,Ph);let p=n.mul(t,a),d=n.mul(r,o),g=n.mul(i,c),w=n.add(t,r),m=n.add(a,o);w=n.mul(w,m),m=n.add(p,d),w=n.sub(w,m),m=n.add(t,i);let b=n.add(a,c);return m=n.mul(m,b),b=n.add(p,g),m=n.sub(m,b),b=n.add(r,i),u=n.add(o,c),b=n.mul(b,u),u=n.add(d,g),b=n.sub(b,u),l=n.mul(f,m),u=n.mul(y,g),l=n.add(u,l),u=n.sub(d,l),l=n.add(d,l),h=n.mul(u,l),d=n.add(p,p),d=n.add(d,p),g=n.mul(f,g),m=n.mul(y,m),d=n.add(d,g),g=n.sub(p,g),g=n.mul(f,g),m=n.add(m,g),p=n.mul(d,m),h=n.add(h,p),p=n.mul(b,m),u=n.mul(w,u),u=n.sub(u,p),p=n.mul(w,d),l=n.mul(b,l),l=n.add(l,p),new v(u,h,l)}subtract(e){return this.add(e.negate())}is0(){return this.equals(v.ZERO)}multiply(e){const{endo:r}=t;if(!i.isValidNot0(e))throw Error("invalid scalar: out of range");let n,s;const a=e=>S.cached(this,e,(e=>lh(v,e)));if(r){const{k1neg:t,k1:i,k2neg:o,k2:c}=m(e),{p:u,f:h}=a(i),{p:l,f}=a(c);s=h.add(f),n=E(r.beta,u,l,t,o)}else{const{p:t,f:r}=a(e);n=t,s=r}return lh(v,[n,s])[0]}multiplyUnsafe(e){const{endo:r}=t,n=this;if(!i.isValid(e))throw Error("invalid scalar: out of range");if(e===Ih||n.is0())return v.ZERO;if(e===Ch)return n;if(S.hasCache(this))return this.multiply(e);if(r){const{k1neg:t,k1:i,k2neg:s,k2:a}=m(e),{p1:o,p2:c}=function(e,t,r,n){let i=t,s=e.ZERO,a=e.ZERO;for(;r>ch||n>ch;)r&uh&&(s=s.add(i)),n&uh&&(a=a.add(i)),i=i.double(),r>>=uh,n>>=uh;return{p1:s,p2:a}}(v,n,i,a);return E(r.beta,o,c,t,s)}return S.unsafe(n,e)}multiplyAndAddUnsafe(e,t,r){const n=this.multiplyUnsafe(t).add(e.multiplyUnsafe(r));return n.is0()?void 0:n}toAffine(e){return b(this,e)}isTorsionFree(){const{isTorsionFree:e}=t;return a===Ch||(e?e(v,this):S.unsafe(this,o).is0())}clearCofactor(){const{clearCofactor:e}=t;return a===Ch?this:e?e(v,this):this.multiplyUnsafe(a)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}toBytes(e=!0){return Rc(e,"isCompressed"),this.assertValidity(),l(v,this,e)}toHex(e=!0){return wc(this.toBytes(e))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get px(){return this.X}get py(){return this.X}get pz(){return this.Z}toRawBytes(e=!0){return this.toBytes(e)}_setWindowSize(e){this.precompute(e)}static normalizeZ(e){return lh(v,e)}static msm(e,t){return bh(v,i,e,t)}static fromPrivateKey(e){return v.BASE.multiply(xh(i,e))}}v.BASE=new v(s.Gx,s.Gy,n.ONE),v.ZERO=new v(n.ZERO,n.ONE,n.ZERO),v.Fp=n,v.Fn=i;const K=i.BITS,S=new mh(v,t.endo?Math.ceil(K/2):K);return v.BASE.precompute(8),v}function Rh(e){return Uint8Array.of(e?2:3)}function Th(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function Mh(e,t={}){const{Fn:r}=e,n=t.randomBytes||Dc,i=Object.assign(Th(e.Fp,r),{seed:bu(r.ORDER)});function s(e){try{return!!xh(r,e)}catch(e){return!1}}function a(e=n(i.seed)){return function(e,t,r=!1){const n=e.length,i=mu(t),s=bu(t);if(n<16||n<s||n>1024)throw Error("expected "+s+"-1024 bytes of input, got "+n);const a=au(r?Oc(e):Fc(e),t-Xc)+Xc;return r?_c(a,i):Nc(a,i)}(Tc(e,i.seed,"seed"),r.ORDER)}function o(t,n=!0){return e.BASE.multiply(xh(r,t)).toBytes(n)}function c(t){if("bigint"==typeof t)return!1;if(t instanceof e)return!0;const{secretKey:n,publicKey:s,publicKeyUncompressed:a}=i;if(r.allowedLengths||n===s)return;const o=Hc("key",t).length;return o===s||o===a}const u={isValidSecretKey:s,isValidPublicKey:function(t,r){const{publicKey:n,publicKeyUncompressed:s}=i;try{const i=t.length;return(!0!==r||i===n)&&((!1!==r||i===s)&&!!e.fromBytes(t))}catch(e){return!1}},randomSecretKey:a,isValidPrivateKey:s,randomPrivateKey:a,normPrivateKeyToScalar:e=>xh(r,e),precompute:(t=8,r=e.BASE)=>r.precompute(t,!1)};return Object.freeze({getPublicKey:o,getSharedSecret:function(t,n,i=!0){if(!0===c(t))throw Error("first arg must be private key");if(!1===c(n))throw Error("second arg must be public key");const s=xh(r,t);return e.fromHex(n).multiply(s).toBytes(i)},keygen:function(e){const t=a(e);return{secretKey:t,publicKey:o(t)}},Point:e,utils:u,lengths:i})}function Lh(e,t,r={}){oc(t),Yc(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"});const n=r.randomBytes||Dc,i=r.hmac||((e,...r)=>oh(t,e,Ic(...r))),{Fp:s,Fn:a}=e,{ORDER:o,BITS:c}=a,{keygen:u,getPublicKey:h,getSharedSecret:l,utils:f,lengths:y}=Mh(e,r),p={prehash:!1,lowS:"boolean"==typeof r.lowS&&r.lowS,format:void 0,extraEntropy:!1},d="compact";function g(e){return e>o>>Ch}function w(e,t){if(!a.isValidNot0(t))throw Error(`invalid signature ${e}: out of range 1..Point.Fn.ORDER`);return t}class A{constructor(e,t,r){this.r=w("r",e),this.s=w("s",t),null!=r&&(this.recovery=r),Object.freeze(this)}static fromBytes(e,t=d){let r;if(function(e,t){Kh(t);const r=y.signature;Tc(e,"compact"===t?r:"recovered"===t?r+1:void 0,t+" signature")}(e,t),"der"===t){const{r:t,s:r}=Bh.toSig(Tc(e));return new A(t,r)}"recovered"===t&&(r=e[0],t="compact",e=e.subarray(1));const n=a.BYTES,i=e.subarray(0,n),s=e.subarray(n,2*n);return new A(a.fromBytes(i),a.fromBytes(s),r)}static fromHex(e,t){return this.fromBytes(Sc(e),t)}addRecoveryBit(e){return new A(this.r,this.s,e)}recoverPublicKey(t){const r=s.ORDER,{r:n,s:i,recovery:c}=this;if(null==c||![0,1,2,3].includes(c))throw Error("recovery id invalid");if(o*Uh<r&&c>1)throw Error("recovery id is ambiguous for h>1 curve");const u=2===c||3===c?n+o:n;if(!s.isValid(u))throw Error("recovery id 2 or 3 invalid");const h=s.toBytes(u),l=e.fromBytes(Ic(Rh(!(1&c)),h)),f=a.inv(u),y=b(Hc("msgHash",t)),p=a.create(-y*f),d=a.create(i*f),g=e.BASE.multiplyUnsafe(p).add(l.multiplyUnsafe(d));if(g.is0())throw Error("point at infinify");return g.assertValidity(),g}hasHighS(){return g(this.s)}toBytes(e=d){if(Kh(e),"der"===e)return Sc(Bh.hexFromSig(this));const t=a.toBytes(this.r),r=a.toBytes(this.s);if("recovered"===e){if(null==this.recovery)throw Error("recovery bit must be present");return Ic(Uint8Array.of(this.recovery),t,r)}return Ic(t,r)}toHex(e){return wc(this.toBytes(e))}assertValidity(){}static fromCompact(e){return A.fromBytes(Hc("sig",e),"compact")}static fromDER(e){return A.fromBytes(Hc("sig",e),"der")}normalizeS(){return this.hasHighS()?new A(this.r,a.neg(this.s),this.recovery):this}toDERRawBytes(){return this.toBytes("der")}toDERHex(){return wc(this.toBytes("der"))}toCompactRawBytes(){return this.toBytes("compact")}toCompactHex(){return wc(this.toBytes("compact"))}}const m=r.bits2int||function(e){if(e.length>8192)throw Error("input is too large");const t=Fc(e),r=8*e.length-c;return r>0?t>>BigInt(r):t},b=r.bits2int_modN||function(e){return a.create(m(e))},k=Vc(c);function E(e){return qc("num < 2^"+c,e,Ih,k),a.toBytes(e)}function v(e,r){return Tc(e,void 0,"message"),r?Tc(t(e),void 0,"prehashed message"):e}return Object.freeze({keygen:u,getPublicKey:h,getSharedSecret:l,utils:f,lengths:y,Point:e,sign:function(r,s,o={}){r=Hc("message",r);const{seed:c,k2sig:u}=function(t,r,i){if(["recovered","canonical"].some((e=>e in i)))throw Error("sign() legacy options not supported");const{lowS:s,prehash:o,extraEntropy:c}=Sh(i,p);t=v(t,o);const u=b(t),h=xh(a,r),l=[E(h),E(u)];if(null!=c&&!1!==c){const e=!0===c?n(y.secretKey):c;l.push(Hc("extraEntropy",e))}const f=Ic(...l),d=u;return{seed:f,k2sig:function(t){const r=m(t);if(!a.isValidNot0(r))return;const n=a.inv(r),i=e.BASE.multiply(r).toAffine(),o=a.create(i.x);if(o===Ih)return;const c=a.create(n*a.create(d+o*h));if(c===Ih)return;let u=(i.x===o?0:2)|Number(i.y&Ch),l=c;return s&&g(c)&&(l=a.neg(c),u^=1),new A(o,l,u)}}}(r,s,o),h=function(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");const n=e=>new Uint8Array(e),i=e=>Uint8Array.of(e);let s=n(e),a=n(e),o=0;const c=()=>{s.fill(1),a.fill(0),o=0},u=(...e)=>r(a,s,...e),h=(e=n(0))=>{a=u(i(0),e),s=u(),0!==e.length&&(a=u(i(1),e),s=u())},l=()=>{if(o++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){s=u();const t=s.slice();r.push(t),e+=s.length}return Ic(...r)};return(e,t)=>{let r;for(c(),h(e);!(r=t(l()));)h();return c(),r}}(t.outputLen,a.BYTES,i);return h(c,u)},verify:function(t,r,n,i={}){const{lowS:s,prehash:o,format:c}=Sh(i,p);if(n=Hc("publicKey",n),r=v(Hc("message",r),o),"strict"in i)throw Error("options.strict was renamed to lowS");const u=void 0===c?function(e){let t;const r="string"==typeof e||ic(e),n=!r&&null!==e&&"object"==typeof e&&"bigint"==typeof e.r&&"bigint"==typeof e.s;if(!r&&!n)throw Error("invalid signature, expected Uint8Array, hex string or Signature instance");if(n)t=new A(e.r,e.s);else if(r){try{t=A.fromBytes(Hc("sig",e),"der")}catch(e){if(!(e instanceof Bh.Err))throw e}if(!t)try{t=A.fromBytes(Hc("sig",e),"compact")}catch(e){return!1}}return t||!1}(t):A.fromBytes(Hc("sig",t),c);if(!1===u)return!1;try{const t=e.fromBytes(n);if(s&&u.hasHighS())return!1;const{r:i,s:o}=u,c=b(r),h=a.inv(o),l=a.create(c*h),f=a.create(i*h),y=e.BASE.multiplyUnsafe(l).add(t.multiplyUnsafe(f));if(y.is0())return!1;return a.create(y.x)===i}catch(e){return!1}},recoverPublicKey:function(e,t,r={}){const{prehash:n}=Sh(r,p);return t=v(t,n),A.fromBytes(e,"recovered").recoverPublicKey(t).toBytes()},Signature:A,hash:t})}function Fh(e){const{CURVE:t,curveOpts:r}=function(e){const t={a:e.a,b:e.b,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r=e.Fp;let n=e.allowedPrivateKeyLengths?Array.from(new Set(e.allowedPrivateKeyLengths.map((e=>Math.ceil(e/2))))):void 0;return{CURVE:t,curveOpts:{Fp:r,Fn:Au(t.n,{BITS:e.nBitLength,allowedLengths:n,modFromBytes:e.wrapPrivateKey}),allowInfinityPoint:e.allowInfinityPoint,endo:e.endo,isTorsionFree:e.isTorsionFree,clearCofactor:e.clearCofactor,fromBytes:e.fromBytes,toBytes:e.toBytes}}}(e),n={hmac:e.hmac,randomBytes:e.randomBytes,lowS:e.lowS,bits2int:e.bits2int,bits2int_modN:e.bits2int_modN};return{CURVE:t,curveOpts:r,hash:e.hash,ecdsaOpts:n}}function Oh(e){const{CURVE:t,curveOpts:r,hash:n,ecdsaOpts:i}=Fh(e);return function(e,t){const r=t.Point;return Object.assign({},t,{ProjectivePoint:r,CURVE:Object.assign({},e,wu(r.Fn.ORDER,r.Fn.BITS))})}(e,Lh(Qh(t,r),n,i))}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Nh(e,t){const r=t=>Oh({...e,hash:t});return{...r(t),create:r}}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const _h={p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")},Hh={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")},zh={p:BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),h:BigInt(1),a:BigInt("0x1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffc"),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650")},Gh=Au(_h.p),qh=Au(Hh.p),jh=Au(zh.p),Vh=Nh({..._h,Fp:Gh,lowS:!1},rh),Yh=Nh({...Hh,Fp:qh,lowS:!1},sh),Zh=Nh({...zh,Fp:jh,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},ih),Jh=BigInt(0),Xh=BigInt(1),Wh=BigInt(2),$h=BigInt(7),el=BigInt(256),tl=BigInt(113),rl=[],nl=[],il=[];for(let e=0,t=Xh,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],rl.push(2*(5*n+r)),nl.push((e+1)*(e+2)/2%64);let i=Jh;for(let e=0;e<7;e++)t=(t<<Xh^(t>>$h)*tl)%el,t&Wh&&(i^=Xh<<(Xh<</* @__PURE__ */BigInt(e))-Xh);il.push(i)}const sl=Du(il,!0),al=sl[0],ol=sl[1],cl=(e,t,r)=>r>32?((e,t,r)=>t<<r-32|e>>>64-r)(e,t,r):((e,t,r)=>e<<r|t>>>32-r)(e,t,r),ul=(e,t,r)=>r>32?((e,t,r)=>e<<r-32|t>>>64-r)(e,t,r):((e,t,r)=>t<<r|e>>>32-r)(e,t,r);let hl=class e extends Cc{constructor(e,t,r,n=!1,i=24){if(super(),this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,this.enableXOF=!1,this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=n,this.rounds=i,sc(r),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}clone(){return this._cloneInto()}keccak(){pc(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const n=(t+8)%10,i=(t+2)%10,s=r[i],a=r[i+1],o=cl(s,a,1)^r[n],c=ul(s,a,1)^r[n+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],i=e[3];for(let r=0;r<24;r++){const n=nl[r],s=cl(t,i,n),a=ul(t,i,n),o=rl[r];t=e[o],i=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let n=0;n<10;n++)r[n]=e[t+n];for(let n=0;n<10;n++)e[t+n]^=~r[(n+2)%10]&r[(n+4)%10]}e[0]^=al[n],e[1]^=ol[n]}hc(r)}(this.state32,this.rounds),pc(this.state32),this.posOut=0,this.pos=0}update(e){cc(this),ac(e=Bc(e));const{blockLen:t,state:r}=this,n=e.length;for(let i=0;i<n;){const s=Math.min(t-this.pos,n-i);for(let t=0;t<s;t++)r[this.pos++]^=e[i++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:n}=this;e[r]^=t,128&t&&r===n-1&&this.keccak(),e[n-1]^=128,this.keccak()}writeInto(e){cc(this,!1),ac(e),this.finish();const t=this.state,{blockLen:r}=this;for(let n=0,i=e.length;n<i;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,i-n);e.set(t.subarray(this.posOut,this.posOut+s),n),this.posOut+=s,n+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return sc(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(uc(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,hc(this.state)}_cloneInto(t){const{blockLen:r,suffix:n,outputLen:i,rounds:s,enableXOF:a}=this;return t||(t=new e(r,n,i,a,s)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=s,t.suffix=n,t.outputLen=i,t.enableXOF=a,t.destroyed=this.destroyed,t}};const ll=(e,t,r)=>Uc((()=>new hl(t,e,r))),fl=/* @__PURE__ */(()=>ll(6,136,32))(),yl=/* @__PURE__ */(()=>ll(6,72,64))(),pl=(e,t,r)=>function(e){const t=(t,r)=>e(r).update(Bc(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((n={})=>new hl(t,e,void 0===n.dkLen?r:n.dkLen,!0))),dl=/* @__PURE__ */(()=>pl(31,136,32))(),gl=BigInt(0),wl=BigInt(1),Al=BigInt(2),ml=BigInt(8);function bl(e,t={}){const r=Eh("edwards",e,t,t.FpFnLE),{Fp:n,Fn:i}=r;let s=r.CURVE;const{h:a}=s;Yc(t,{},{uvRatio:"function"});const o=Al<<BigInt(8*i.BYTES)-wl,c=e=>n.create(e),u=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:n.sqrt(n.div(e,t))}}catch(e){return{isValid:!1,value:gl}}});if(!function(e,t,r,n){const i=e.sqr(r),s=e.sqr(n),a=e.add(e.mul(t.a,i),s),o=e.add(e.ONE,e.mul(t.d,e.mul(i,s)));return e.eql(a,o)}(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function h(e,t,r=!1){return qc("coordinate "+e,t,r?wl:gl,o),t}function l(e){if(!(e instanceof p))throw Error("ExtendedPoint expected")}const f=Zc(((e,t)=>{const{X:r,Y:i,Z:s}=e,a=e.is0();null==t&&(t=a?ml:n.inv(s));const o=c(r*t),u=c(i*t),h=n.mul(s,t);if(a)return{x:gl,y:wl};if(h!==wl)throw Error("invZ was invalid");return{x:o,y:u}})),y=Zc((e=>{const{a:t,d:r}=s;if(e.is0())throw Error("bad point: ZERO");const{X:n,Y:i,Z:a,T:o}=e,u=c(n*n),h=c(i*i),l=c(a*a),f=c(l*l),y=c(u*t);if(c(l*c(y+h))!==c(f+c(r*c(u*h))))throw Error("bad point: equation left != right (1)");if(c(n*i)!==c(a*o))throw Error("bad point: equation left != right (2)");return!0}));class p{constructor(e,t,r,n){this.X=h("x",e),this.Y=h("y",t),this.Z=h("z",r,!0),this.T=h("t",n),Object.freeze(this)}static CURVE(){return s}static fromAffine(e){if(e instanceof p)throw Error("extended point not allowed");const{x:t,y:r}=e||{};return h("x",t),h("y",r),new p(t,r,wl,c(t*r))}static fromBytes(e,t=!1){const r=n.BYTES,{a:i,d:a}=s;e=zc(Tc(e,r,"point")),Rc(t,"zip215");const h=zc(e),l=e[r-1];h[r-1]=-129&l;const f=Oc(h),y=t?o:n.ORDER;qc("point.y",f,gl,y);const d=c(f*f),g=c(d-wl),w=c(a*d-i);let{isValid:A,value:m}=u(g,w);if(!A)throw Error("bad point: invalid y coordinate");const b=(m&wl)===wl,k=!!(128&l);if(!t&&m===gl&&k)throw Error("bad point: x=0 and x_0=1");return k!==b&&(m=c(-m)),p.fromAffine({x:m,y:f})}static fromHex(e,t=!1){return p.fromBytes(Hc("point",e),t)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(e=8,t=!0){return d.createCache(this,e),t||this.multiply(Al),this}assertValidity(){y(this)}equals(e){l(e);const{X:t,Y:r,Z:n}=this,{X:i,Y:s,Z:a}=e,o=c(t*a),u=c(i*n),h=c(r*a),f=c(s*n);return o===u&&h===f}is0(){return this.equals(p.ZERO)}negate(){return new p(c(-this.X),this.Y,this.Z,c(-this.T))}double(){const{a:e}=s,{X:t,Y:r,Z:n}=this,i=c(t*t),a=c(r*r),o=c(Al*c(n*n)),u=c(e*i),h=t+r,l=c(c(h*h)-i-a),f=u+a,y=f-o,d=u-a,g=c(l*y),w=c(f*d),A=c(l*d),m=c(y*f);return new p(g,w,m,A)}add(e){l(e);const{a:t,d:r}=s,{X:n,Y:i,Z:a,T:o}=this,{X:u,Y:h,Z:f,T:y}=e,d=c(n*u),g=c(i*h),w=c(o*r*y),A=c(a*f),m=c((n+i)*(u+h)-d-g),b=A-w,k=A+w,E=c(g-t*d),v=c(m*b),K=c(k*E),S=c(m*E),B=c(b*k);return new p(v,K,B,S)}subtract(e){return this.add(e.negate())}multiply(e){if(!i.isValidNot0(e))throw Error("invalid scalar: expected 1 <= sc < curve.n");const{p:t,f:r}=d.cached(this,e,(e=>lh(p,e)));return lh(p,[t,r])[0]}multiplyUnsafe(e,t=p.ZERO){if(!i.isValid(e))throw Error("invalid scalar: expected 0 <= sc < curve.n");return e===gl?p.ZERO:this.is0()||e===wl?this:d.unsafe(this,e,(e=>lh(p,e)),t)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}isTorsionFree(){return d.unsafe(this,s.n).is0()}toAffine(e){return f(this,e)}clearCofactor(){return a===wl?this:this.multiplyUnsafe(a)}toBytes(){const{x:e,y:t}=this.toAffine(),r=n.toBytes(t);return r[r.length-1]|=e&wl?128:0,r}toHex(){return wc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get ex(){return this.X}get ey(){return this.Y}get ez(){return this.Z}get et(){return this.T}static normalizeZ(e){return lh(p,e)}static msm(e,t){return bh(p,i,e,t)}_setWindowSize(e){this.precompute(e)}toRawBytes(){return this.toBytes()}}p.BASE=new p(s.Gx,s.Gy,wl,c(s.Gx*s.Gy)),p.ZERO=new p(gl,wl,wl,gl),p.Fp=n,p.Fn=i;const d=new mh(p,i.BITS);return p.BASE.precompute(8),p}function kl(e,t,r={}){if("function"!=typeof t)throw Error('"hash" function param is required');Yc(r,{},{adjustScalarBytes:"function",randomBytes:"function",domain:"function",prehash:"function",mapToCurve:"function"});const{prehash:n}=r,{BASE:i,Fp:s,Fn:a}=e,o=r.randomBytes||Dc,c=r.adjustScalarBytes||(e=>e),u=r.domain||((e,t,r)=>{if(Rc(r,"phflag"),t.length||r)throw Error("Contexts/pre-hash are not supported");return e});function h(e){return a.create(Oc(e))}function l(e){const{head:r,prefix:n,scalar:s}=function(e){const r=g.secretKey;e=Hc("private key",e,r);const n=Hc("hashed private key",t(e),2*r),i=c(n.slice(0,r));return{head:i,prefix:n.slice(r,2*r),scalar:h(i)}}(e),a=i.multiply(s),o=a.toBytes();return{head:r,prefix:n,scalar:s,point:a,pointBytes:o}}function f(e){return l(e).pointBytes}function y(e=Uint8Array.of(),...r){const i=Ic(...r);return h(t(u(i,Hc("context",e),!!n)))}const p={zip215:!0};const d=s.BYTES,g={secretKey:d,publicKey:d,signature:2*d,seed:d};function w(e=o(g.seed)){return Tc(e,g.seed,"seed")}const A={getExtendedPublicKey:l,randomSecretKey:w,isValidSecretKey:function(e){return ic(e)&&e.length===a.BYTES},isValidPublicKey:function(t,r){try{return!!e.fromBytes(t,r)}catch(e){return!1}},toMontgomery(t){const{y:r}=e.fromBytes(t),n=g.publicKey,i=32===n;if(!i&&57!==n)throw Error("only defined for 25519 and 448");const a=i?s.div(wl+r,wl-r):s.div(r-wl,r+wl);return s.toBytes(a)},toMontgomeryPriv(e){const r=g.secretKey;Tc(e,r);const n=t(e.subarray(0,r));return c(n).subarray(0,r)},randomPrivateKey:w,precompute:(t=8,r=e.BASE)=>r.precompute(t,!1)};return Object.freeze({keygen:function(e){const t=A.randomSecretKey(e);return{secretKey:t,publicKey:f(t)}},getPublicKey:f,sign:function(e,t,r={}){e=Hc("message",e),n&&(e=n(e));const{prefix:s,scalar:o,pointBytes:c}=l(t),u=y(r.context,s,e),h=i.multiply(u).toBytes(),f=y(r.context,h,c,e),p=a.create(u+f*o);if(!a.isValid(p))throw Error("sign failed: invalid s");return Tc(Ic(h,a.toBytes(p)),g.signature,"result")},verify:function(t,r,s,a=p){const{context:o,zip215:c}=a,u=g.signature;t=Hc("signature",t,u),r=Hc("message",r),s=Hc("publicKey",s,g.publicKey),void 0!==c&&Rc(c,"zip215"),n&&(r=n(r));const h=u/2,l=t.subarray(0,h),f=Oc(t.subarray(h,u));let d,w,A;try{d=e.fromBytes(s,c),w=e.fromBytes(l,c),A=i.multiplyUnsafe(f)}catch(e){return!1}if(!c&&d.isSmallOrder())return!1;const m=y(o,w.toBytes(),d.toBytes(),r);return w.add(d.multiplyUnsafe(m)).subtract(A).clearCofactor().is0()},utils:A,Point:e,lengths:g})}
+/*! OpenPGP.js v6.3.0 - 2026-03-13 - this is LGPL licensed code, see LICENSE/our website https://openpgpjs.org/ for more information. */
+const e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};import{createRequire as t}from"module";import*as r from"node:crypto";const n=Symbol("doneWritingPromise"),i=Symbol("doneWritingResolve"),s=Symbol("doneWritingReject"),a=Symbol("readingIndex");class ArrayStream extends Array{constructor(){super(),Object.setPrototypeOf(this,ArrayStream.prototype),this[n]=new Promise(((e,t)=>{this[i]=e,this[s]=t})),this[n].catch((()=>{}))}}function o(e){return e&&e.getReader&&Array.isArray(e)}function c(e){if(!o(e)){const t=e.getWriter(),r=t.releaseLock;return t.releaseLock=()=>{t.closed.catch((function(){})),r.call(t)},t}this.stream=e}function u(t){if(o(t))return"array";if(e.ReadableStream&&e.ReadableStream.prototype.isPrototypeOf(t))return"web";if(t&&!(e.ReadableStream&&t instanceof e.ReadableStream)&&"function"==typeof t._read&&"object"==typeof t._readableState)throw Error("Native Node streams are no longer supported: please manually convert the stream to a WebStream, using e.g. `stream.Readable.toWeb`");return!(!t||!t.getReader)&&"web-like"}function h(e){return Uint8Array.prototype.isPrototypeOf(e)}function l(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!h(e[r]))throw Error("concatUint8Array: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach((function(e){r.set(e,n),n+=e.length})),r}ArrayStream.prototype.getReader=function(){return void 0===this[a]&&(this[a]=0),{read:async()=>(await this[n],this[a]===this.length?{value:void 0,done:!0}:{value:this[this[a]++],done:!1})}},ArrayStream.prototype.readToEnd=async function(e){await this[n];const t=e(this.slice(this[a]));return this.length=0,t},ArrayStream.prototype.clone=function(){const e=new ArrayStream;return e[n]=this[n].then((()=>{e.push(...this)})),e},c.prototype.write=async function(e){this.stream.push(e)},c.prototype.close=async function(){this.stream[i]()},c.prototype.abort=async function(e){return this.stream[s](e),e},c.prototype.releaseLock=function(){},"object"==typeof e.process&&e.process.versions;const f=new WeakSet,y=Symbol("externalBuffer");function d(e){if(this.stream=e,e[y]&&(this[y]=e[y].slice()),o(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{},void(this._cancel=()=>{})}if(u(e)){const t=e.getReader();return this._read=t.read.bind(t),this._releaseLock=()=>{t.closed.catch((function(){})),t.releaseLock()},void(this._cancel=t.cancel.bind(t))}let t=!1;this._read=async()=>t||f.has(e)?{value:void 0,done:!0}:(t=!0,{value:e,done:!1}),this._releaseLock=()=>{if(t)try{f.add(e)}catch(e){}}}function p(e){return u(e)?e:new ReadableStream({start(t){t.enqueue(e),t.close()}})}function g(e){const t=u(e);if(t){if("array"!==t)throw Error("Can't convert Stream to ArrayStream here, call `readToEnd` first");return e}const r=new ArrayStream;return(async()=>{const t=Q(r);await t.write(e),await t.close()})(),r}function w(e){return e.some((e=>u(e)&&!o(e)))?function(e){e=e.map(p);const t=m((async function(e){await Promise.all(n.map((t=>P(t,e))))}));let r=Promise.resolve();const n=e.map(((n,i)=>v(n,((n,s)=>(r=r.then((()=>A(n,t.writable,{preventClose:i!==e.length-1}))),r)))));return t.readable}(e):e.some((e=>o(e)))?function(e){const t=new ArrayStream;let r=Promise.resolve();return e.forEach(((n,i)=>(r=r.then((()=>A(n,t,{preventClose:i!==e.length-1}))),r))),t}(e):"string"==typeof e[0]?e.join(""):l(e)}async function A(e,t,{preventClose:r=!1,preventAbort:n=!1,preventCancel:i=!1}={}){if(u(e)&&!o(e)&&!o(t)){e=p(e);try{if(e[y]){const r=Q(t);for(let t=0;t<e[y].length;t++)await r.ready,await r.write(e[y][t]);r.releaseLock()}await e.pipeTo(t,{preventClose:r,preventAbort:n,preventCancel:i})}catch(e){}return}u(e)||(e=g(e));const s=x(e),a=Q(t);try{for(;;){await a.ready;const{done:e,value:t}=await s.read();if(e){r||await a.close();break}await a.write(t)}}catch(e){n||await a.abort(e)}finally{s.releaseLock(),a.releaseLock()}}function m(e){let t,r,n,i=!1,s=!1;return{readable:new ReadableStream({start(e){n=e},pull(){t?t():i=!0},async cancel(t){s=!0,e&&await e(t),r&&r(t)}},{highWaterMark:0}),writable:new WritableStream({write:async function(e){if(s)throw Error("Stream is cancelled");n.enqueue(e),i?i=!1:(await new Promise(((e,n)=>{t=e,r=n})),t=null,r=null)},close:n.close.bind(n),abort:n.error.bind(n)})}}function b(e,t=()=>{},r=()=>{},n={highWaterMark:0}){if(u(e))return E(e,t,r,n);const i=t(e),s=r();return void 0!==i&&void 0!==s?w([i,s]):void 0!==i?i:s}async function k(e,t=async()=>{},r=async()=>{},n={highWaterMark:1}){if(u(e))return E(e,t,r,n);const i=await t(e),s=await r();return void 0!==i&&void 0!==s?w([i,s]):void 0!==i?i:s}function E(e,t,r,n){if(o(e)){const n=new ArrayStream;return(async()=>{const i=Q(n);try{const n=await U(e),s=await t(n),a=await r();let o;o=void 0!==s&&void 0!==a?w([s,a]):void 0!==s?s:a,await i.write(o),await i.close()}catch(e){await i.abort(e)}})(),n}if(u(e)){let i,s=!1;return new ReadableStream({start(){i=e.getReader()},async pull(n){if(s)return n.close(),void e.releaseLock();try{for(;;){const{value:a,done:o}=await i.read();s=o;const c=await(o?r:t)(a);if(void 0!==c)return void n.enqueue(c);if(o)return n.close(),void e.releaseLock()}}catch(e){n.error(e)}},async cancel(e){await i.cancel(e)}},n)}throw Error("Unreachable")}function v(e,t){if(u(e)&&!o(e)){let r;const n=new TransformStream({start(e){r=e}}),i=A(e,n.writable),s=m((async function(e){r.error(e),await i,await new Promise((e=>setTimeout(e)))}));return t(n.readable,s.writable),s.readable}e=g(e);const r=new ArrayStream;return t(e,r),r}function K(e,t){let r;const n=v(e,((e,i)=>{const s=x(e);s.remainder=()=>(s.releaseLock(),A(e,i),n),r=t(s)}));return r}function S(e){if(o(e))return e.clone();if(u(e)){const t=function(e){if(o(e))throw Error("ArrayStream cannot be tee()d, use clone() instead");if(u(e)){const t=p(e).tee();return t[0][y]=t[1][y]=e[y],t}return[C(e),C(e)]}(e);return B(e,t[0]),t[1]}return C(e)}function I(e){return o(e)?S(e):u(e)?new ReadableStream({start(t){const r=v(e,(async(e,r)=>{const n=x(e),i=Q(r);try{for(;;){await i.ready;const{done:e,value:r}=await n.read();if(e){try{t.close()}catch(e){}return void await i.close()}try{t.enqueue(r)}catch(e){}await i.write(r)}}catch(e){t.error(e),await i.abort(e)}}));B(e,r)}}):C(e)}function B(e,t){Object.entries(Object.getOwnPropertyDescriptors(e.constructor.prototype)).forEach((([r,n])=>{"constructor"!==r&&(n.value?n.value=n.value.bind(t):n.get=n.get.bind(t),Object.defineProperty(e,r,n))}))}function C(e,t=0,r=1/0){if(o(e))throw Error("Not implemented");if(u(e)){if(t>=0&&r>=0){let n,i=0;return new ReadableStream({start(){n=e.getReader()},async pull(s){try{for(;;){if(!(i<r))return s.close(),void e.releaseLock();{const{value:a,done:o}=await n.read();if(o)return s.close(),void e.releaseLock();let c;if(i+a.length>=t&&(c=C(a,Math.max(t-i,0),r-i)),i+=a.length,c)return void s.enqueue(c)}}}catch(e){s.error(e)}},async cancel(e){await n.cancel(e)}},{highWaterMark:0})}if(t<0&&(r<0||r===1/0)){let n=[];return b(e,(e=>{e.length>=-t?n=[e]:n.push(e)}),(()=>C(w(n),t,r)))}if(0===t&&r<0){let n;return b(e,(e=>{const i=n?w([n,e]):e;if(i.length>=-r)return n=C(i,r),C(i,t,r);n=i}))}return console.warn(`stream.slice(input, ${t}, ${r}) not implemented efficiently.`),D((async()=>C(await U(e),t,r)))}return e[y]&&(e=w(e[y].concat([e]))),h(e)?e.subarray(t,r===1/0?e.length:r):e.slice(t,r)}async function U(e,t=w){return o(e)?e.readToEnd(t):u(e)?x(e).readToEnd(t):e}async function P(e,t){if(u(e)){if(e.cancel){const r=await e.cancel(t);return await new Promise((e=>setTimeout(e))),r}if(e.destroy)return e.destroy(t),await new Promise((e=>setTimeout(e))),t}}function D(e){const t=new ArrayStream;return(async()=>{const r=Q(t);try{await r.write(await e()),await r.close()}catch(e){await r.abort(e)}})(),t}function x(e){return new d(e)}function Q(e){return new c(e)}d.prototype.read=async function(){if(this[y]&&this[y].length){return{done:!1,value:this[y].shift()}}return this._read()},d.prototype.releaseLock=function(){this[y]&&(this.stream[y]=this[y]),this._releaseLock()},d.prototype.cancel=function(e){return this._cancel(e)},d.prototype.readLine=async function(){let e,t=[];for(;!e;){let{done:r,value:n}=await this.read();if(n+="",r)return t.length?w(t):void 0;const i=n.indexOf("\n")+1;i&&(e=w(t.concat(n.substr(0,i))),t=[]),i!==n.length&&t.push(n.substr(i))}return this.unshift(...t),e},d.prototype.readByte=async function(){const{done:e,value:t}=await this.read();if(e)return;const r=t[0];return this.unshift(C(t,1)),r},d.prototype.readBytes=async function(e){const t=[];let r=0;for(;;){const{done:n,value:i}=await this.read();if(n)return t.length?w(t):void 0;if(t.push(i),r+=i.length,r>=e){const r=w(t);return this.unshift(C(r,e)),C(r,0,e)}}},d.prototype.peekBytes=async function(e){const t=await this.readBytes(e);return this.unshift(t),t},d.prototype.unshift=function(...e){this[y]||(this[y]=[]),1===e.length&&h(e[0])&&this[y].length&&e[0].length&&this[y][0].byteOffset>=e[0].length?this[y][0]=new Uint8Array(this[y][0].buffer,this[y][0].byteOffset-e[0].length,this[y][0].byteLength+e[0].length):this[y].unshift(...e.filter((e=>e&&e.length)))},d.prototype.readToEnd=async function(e=w){const t=[];for(;;){const{done:e,value:r}=await this.read();if(e)break;t.push(r)}return e(t)};const M=Symbol("byValue");var L={curve:{nistP256:"nistP256",p256:"nistP256",nistP384:"nistP384",p384:"nistP384",nistP521:"nistP521",p521:"nistP521",secp256k1:"secp256k1",ed25519Legacy:"ed25519Legacy",ed25519:"ed25519Legacy",curve25519Legacy:"curve25519Legacy",curve25519:"curve25519Legacy",brainpoolP256r1:"brainpoolP256r1",brainpoolP384r1:"brainpoolP384r1",brainpoolP512r1:"brainpoolP512r1"},kdfFlags:{replace_fingerprint:1,replace_kdf_params:2},s2k:{simple:0,salted:1,iterated:3,argon2:4,gnu:101},publicKey:{rsaEncryptSign:1,rsaEncrypt:2,rsaSign:3,elgamal:16,dsa:17,ecdh:18,ecdsa:19,eddsaLegacy:22,aedh:23,aedsa:24,x25519:25,x448:26,ed25519:27,ed448:28,pqc_mldsa_ed25519:30,pqc_mlkem_x25519:35,aead:100,hmac:101},symmetric:{idea:1,tripledes:2,cast5:3,blowfish:4,aes128:7,aes192:8,aes256:9,twofish:10},compression:{uncompressed:0,zip:1,zlib:2,bzip2:3},hash:{md5:1,sha1:2,ripemd:3,sha256:8,sha384:9,sha512:10,sha224:11,sha3_256:12,sha3_512:14},webHash:{"SHA-1":2,"SHA-256":8,"SHA-384":9,"SHA-512":10},aead:{eax:1,ocb:2,gcm:3,experimentalGCM:100},packet:{publicKeyEncryptedSessionKey:1,signature:2,symEncryptedSessionKey:3,onePassSignature:4,secretKey:5,publicKey:6,secretSubkey:7,compressedData:8,symmetricallyEncryptedData:9,marker:10,literalData:11,trust:12,userID:13,publicSubkey:14,userAttribute:17,symEncryptedIntegrityProtectedData:18,modificationDetectionCode:19,aeadEncryptedData:20,padding:21},literal:{binary:98,text:116,utf8:117,mime:109},signature:{binary:0,text:1,standalone:2,certGeneric:16,certPersona:17,certCasual:18,certPositive:19,certRevocation:48,subkeyBinding:24,keyBinding:25,key:31,keyRevocation:32,subkeyRevocation:40,timestamp:64,thirdParty:80},signatureSubpacket:{signatureCreationTime:2,signatureExpirationTime:3,exportableCertification:4,trustSignature:5,regularExpression:6,revocable:7,keyExpirationTime:9,placeholderBackwardsCompatibility:10,preferredSymmetricAlgorithms:11,revocationKey:12,issuerKeyID:16,notationData:20,preferredHashAlgorithms:21,preferredCompressionAlgorithms:22,keyServerPreferences:23,preferredKeyServer:24,primaryUserID:25,policyURI:26,keyFlags:27,signersUserID:28,reasonForRevocation:29,features:30,signatureTarget:31,embeddedSignature:32,issuerFingerprint:33,preferredAEADAlgorithms:34,preferredCipherSuites:39},keyFlags:{certifyKeys:1,signData:2,encryptCommunication:4,encryptStorage:8,splitPrivateKey:16,authentication:32,forwardedCommunication:64,sharedPrivateKey:128},armor:{multipartSection:0,multipartLast:1,signed:2,message:3,publicKey:4,privateKey:5,signature:6},reasonForRevocation:{noReason:0,keySuperseded:1,keyCompromised:2,keyRetired:3,userIDInvalid:32},features:{modificationDetection:1,aead:2,v5Keys:4,seipdv2:8},write:function(e,t){if("number"==typeof t&&(t=this.read(e,t)),void 0!==e[t])return e[t];throw Error("Invalid enum value.")},read:function(e,t){if(e[M]||(e[M]=[],Object.entries(e).forEach((([t,r])=>{e[M][r]=t}))),void 0!==e[M][t])return e[M][t];throw Error("Invalid enum value.")}},T={preferredHashAlgorithm:L.hash.sha512,preferredSymmetricAlgorithm:L.symmetric.aes256,preferredCompressionAlgorithm:L.compression.uncompressed,aeadProtect:!1,ignoreSEIPDv2FeatureFlag:!1,parseAEADEncryptedV4KeysAsLegacy:!1,preferredAEADAlgorithm:L.aead.gcm,aeadChunkSizeByte:12,v6Keys:!1,enableParsingV5Entities:!1,s2kType:L.s2k.iterated,s2kIterationCountByte:224,s2kArgon2Params:{passes:3,parallelism:4,memoryExponent:16},maxArgon2MemoryExponent:1/0,allowUnauthenticatedMessages:!1,allowUnauthenticatedStream:!1,allowForwardedMessages:!1,minRSABits:2047,passwordCollisionCheck:!1,allowInsecureDecryptionWithSigningKeys:!1,allowInsecureVerificationWithReformattedKeys:!1,allowMissingKeyFlags:!1,constantTimePKCS1Decryption:!1,constantTimePKCS1DecryptionSupportedSymmetricAlgorithms:new Set([L.symmetric.aes128,L.symmetric.aes192,L.symmetric.aes256]),ignoreUnsupportedPackets:!0,ignoreMalformedPackets:!1,enforceGrammar:!0,additionalAllowedPackets:[],showVersion:!1,showComment:!1,versionString:"OpenPGP.js 6.3.0",commentString:"https://openpgpjs.org",maxUserIDLength:5120,maxDecompressedMessageSize:1/0,knownNotations:[],nonDeterministicSignaturesViaNotation:!0,useEllipticFallback:!0,rejectHashAlgorithms:new Set([L.hash.md5,L.hash.ripemd]),rejectMessageHashAlgorithms:new Set([L.hash.md5,L.hash.ripemd,L.hash.sha1]),rejectPublicKeyAlgorithms:new Set([L.publicKey.elgamal,L.publicKey.dsa]),rejectCurves:new Set([L.curve.secp256k1])};const R=(()=>{try{return"development"===process.env.NODE_ENV}catch{}return!1})(),F={isString:function(e){return"string"==typeof e||e instanceof String},nodeRequire:t(import.meta.url),isArray:function(e){return e instanceof Array},isUint8Array:h,isStream:u,getNobleCurve:async(e,t)=>{if(!T.useEllipticFallback)throw Error("This curve is only supported in the full build of OpenPGP.js");const{nobleCurves:r}=await Promise.resolve().then((function(){return cf}));switch(e){case L.publicKey.ecdh:case L.publicKey.ecdsa:{const e=r.get(t);if(!e)throw Error("Unsupported curve");return e}case L.publicKey.x448:return r.get("x448");case L.publicKey.ed448:return r.get("ed448");default:throw Error("Unsupported curve")}},readNumber:function(e){let t=0;for(let r=0;r<e.length;r++)t+=256**r*e[e.length-1-r];return t},writeNumber:function(e,t){const r=new Uint8Array(t);for(let n=0;n<t;n++)r[n]=e>>8*(t-n-1)&255;return r},readDate:function(e){const t=F.readNumber(e);return new Date(1e3*t)},writeDate:function(e){const t=Math.floor(e.getTime()/1e3);return F.writeNumber(t,4)},normalizeDate:function(e=Date.now()){return null===e||e===1/0?e:new Date(1e3*Math.floor(+e/1e3))},readMPI:function(e){const t=(e[0]<<8|e[1])+7>>>3;return F.readExactSubarray(e,2,2+t)},readExactSubarray:function(e,t,r){if(e.length<r-t)throw Error("Input array too short");return e.subarray(t,r)},leftPad(e,t){if(e.length>t)throw Error("Input array too long");const r=new Uint8Array(t),n=t-e.length;return r.set(e,n),r},uint8ArrayToMPI:function(e){const t=F.uint8ArrayBitLength(e);if(0===t)throw Error("Zero MPI");const r=e.subarray(e.length-Math.ceil(t/8)),n=new Uint8Array([(65280&t)>>8,255&t]);return F.concatUint8Array([n,r])},uint8ArrayBitLength:function(e){let t;for(t=0;t<e.length&&0===e[t];t++);if(t===e.length)return 0;const r=e.subarray(t);return 8*(r.length-1)+F.nbits(r[0])},hexToUint8Array:function(e){const t=new Uint8Array(e.length>>1);for(let r=0;r<e.length>>1;r++)t[r]=parseInt(e.substr(r<<1,2),16);return t},uint8ArrayToHex:function(e){const t="0123456789abcdef";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),r},stringToUint8Array:function(e){return b(e,(e=>{if(!F.isString(e))throw Error("stringToUint8Array: Data must be in the form of a string");const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}))},uint8ArrayToString:function(e){const t=[],r=16384,n=(e=new Uint8Array(e)).length;for(let i=0;i<n;i+=r)t.push(String.fromCharCode.apply(String,e.subarray(i,i+r<n?i+r:n)));return t.join("")},encodeUTF8:function(e){const t=new TextEncoder("utf-8");function r(e,r=!1){return t.encode(e,{stream:!r})}return b(e,r,(()=>r("",!0)))},decodeUTF8:function(e){const t=new TextDecoder("utf-8");function r(e,r=!1){return t.decode(e,{stream:!r})}return b(e,r,(()=>r(new Uint8Array,!0)))},concat:w,concatUint8Array:l,equalsUint8Array:function(e,t){if(!F.isUint8Array(e)||!F.isUint8Array(t))throw Error("Data must be in the form of a Uint8Array");if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r])return!1;return!0},findLastIndex:function(e,t){for(let r=e.length;r>=0;r--)if(t(e[r],r,e))return r;return-1},writeChecksum:function(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&65535;return F.writeNumber(t,2)},printDebug:function(e){R&&console.log("[OpenPGP.js debug]",e)},printDebugError:function(e){R&&console.error("[OpenPGP.js debug]",e)},nbits:function(e){let t=1,r=e>>>16;return 0!==r&&(e=r,t+=16),r=e>>8,0!==r&&(e=r,t+=8),r=e>>4,0!==r&&(e=r,t+=4),r=e>>2,0!==r&&(e=r,t+=2),r=e>>1,0!==r&&(e=r,t+=1),t},double:function(e){const t=new Uint8Array(e.length),r=e.length-1;for(let n=0;n<r;n++)t[n]=e[n]<<1^e[n+1]>>7;return t[r]=e[r]<<1^135*(e[0]>>7),t},shiftRight:function(e,t){if(t)for(let r=e.length-1;r>=0;r--)e[r]>>=t,r>0&&(e[r]|=e[r-1]<<8-t);return e},getWebCrypto:function(){const t=void 0!==e&&e.crypto&&e.crypto.subtle||this.getNodeCrypto()?.webcrypto.subtle;if(!t)throw Error("The WebCrypto API is not available");return t},getNodeCrypto:function(){return this.nodeRequire("crypto")},getNodeZlib:function(){return this.nodeRequire("zlib")},getNodeBuffer:function(){return(this.nodeRequire("buffer")||{}).Buffer},getHardwareConcurrency:function(){if("undefined"!=typeof navigator)return navigator.hardwareConcurrency||1;return this.nodeRequire("os").cpus().length},isEmailAddress:function(e){if(!F.isString(e))return!1;return/^[^\p{C}\p{Z}@<>\\]+@[^\p{C}\p{Z}@<>\\]+[^\p{C}\p{Z}\p{P}]$/u.test(e)},canonicalizeEOL:function(e){let t=!1;return b(e,(e=>{let r;t&&(e=F.concatUint8Array([new Uint8Array([13]),e])),13===e[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;const n=[];for(let t=0;r=e.indexOf(10,t)+1,r;t=r)13!==e[r-2]&&n.push(r);if(!n.length)return e;const i=new Uint8Array(e.length+n.length);let s=0;for(let t=0;t<n.length;t++){const r=e.subarray(n[t-1]||0,n[t]);i.set(r,s),s+=r.length,i[s-1]=13,i[s]=10,s++}return i.set(e.subarray(n[n.length-1]||0),s),i}),(()=>t?new Uint8Array([13]):void 0))},nativeEOL:function(e){let t=!1;return b(e,(e=>{let r;13===(e=t&&10!==e[0]?F.concatUint8Array([new Uint8Array([13]),e]):new Uint8Array(e))[e.length-1]?(t=!0,e=e.subarray(0,-1)):t=!1;let n=0;for(let t=0;t!==e.length;t=r){r=e.indexOf(13,t)+1,r||(r=e.length);const i=r-(10===e[r]?1:0);t&&e.copyWithin(n,t,i),n+=i-t}return e.subarray(0,n)}),(()=>t?new Uint8Array([13]):void 0))},removeTrailingSpaces:function(e){return e.split("\n").map((e=>{let t=e.length-1;for(;t>=0&&(" "===e[t]||"\t"===e[t]||"\r"===e[t]);t--);return e.substr(0,t+1)})).join("\n")},wrapError:function(e,t){if(!t)return e instanceof Error?e:Error(e);if(e instanceof Error){try{e.message+=": "+t.message,e.cause=t}catch{}return e}return Error(e+": "+t.message,{cause:t})},constructAllowedPackets:function(e){const t={};return e.forEach((e=>{if(!e.tag)throw Error("Invalid input: expected a packet class");t[e.tag]=e})),t},anyPromise:function(e){return new Promise(((t,r)=>{let n;Promise.all(e.map((async e=>{try{t(await e)}catch(e){n=e}}))).then((()=>{r(n)}))}))},selectUint8Array:function(e,t,r){const n=Math.max(t.length,r.length),i=new Uint8Array(n);let s=0;for(let n=0;n<i.length;n++)i[n]=t[n]&256-e|r[n]&255+e,s+=e&n<t.length|1-e&n<r.length;return i.subarray(0,s)},selectUint8:function(e,t,r){return t&256-e|r&255+e},isAES:function(e){return e===L.symmetric.aes128||e===L.symmetric.aes192||e===L.symmetric.aes256}},N=F.getNodeBuffer();let O,H;function _(e){let t=new Uint8Array;return b(e,(e=>{t=F.concatUint8Array([t,e]);const r=[],n=Math.floor(t.length/45),i=45*n,s=O(t.subarray(0,i));for(let e=0;e<n;e++)r.push(s.substr(60*e,60)),r.push("\n");return t=t.subarray(i),r.join("")}),(()=>t.length?O(t)+"\n":""))}function z(e){let t="";return b(e,(e=>{t+=e;let r=0;const n=[" ","\t","\r","\n"];for(let e=0;e<n.length;e++){const i=n[e];for(let e=t.indexOf(i);-1!==e;e=t.indexOf(i,e+1))r++}let i=t.length;for(;i>0&&(i-r)%4!=0;i--)n.includes(t[i])&&r--;const s=H(t.substr(0,i));return t=t.substr(i),s}),(()=>H(t)))}function G(e){return z(e.replace(/-/g,"+").replace(/_/g,"/"))}function q(e,t){let r=_(e).replace(/[\r\n]/g,"");return r=r.replace(/[+]/g,"-").replace(/[/]/g,"_").replace(/[=]/g,""),r}function j(e){const t=e.match(/^-----BEGIN PGP (MESSAGE, PART \d+\/\d+|MESSAGE, PART \d+|SIGNED MESSAGE|MESSAGE|PUBLIC KEY BLOCK|PRIVATE KEY BLOCK|SIGNATURE)-----$/m);if(!t)throw Error("Unknown ASCII armor type");return/MESSAGE, PART \d+\/\d+/.test(t[1])?L.armor.multipartSection:/MESSAGE, PART \d+/.test(t[1])?L.armor.multipartLast:/SIGNED MESSAGE/.test(t[1])?L.armor.signed:/MESSAGE/.test(t[1])?L.armor.message:/PUBLIC KEY BLOCK/.test(t[1])?L.armor.publicKey:/PRIVATE KEY BLOCK/.test(t[1])?L.armor.privateKey:/SIGNATURE/.test(t[1])?L.armor.signature:void 0}function V(e,t){let r="";return t.showVersion&&(r+="Version: "+t.versionString+"\n"),t.showComment&&(r+="Comment: "+t.commentString+"\n"),e&&(r+="Comment: "+e+"\n"),r+="\n",r}function Y(e){const t=function(e){let t=13501623;return b(e,(e=>{const r=J?Math.floor(e.length/4):0,n=new Uint32Array(e.buffer,e.byteOffset,r);for(let e=0;e<r;e++)t^=n[e],t=Z[0][t>>24&255]^Z[1][t>>16&255]^Z[2][t>>8&255]^Z[3][255&t];for(let n=4*r;n<e.length;n++)t=t>>8^Z[0][255&t^e[n]]}),(()=>new Uint8Array([t,t>>8,t>>16])))}(e);return _(t)}N?(O=e=>N.from(e).toString("base64"),H=e=>{const t=N.from(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)}):(O=e=>btoa(F.uint8ArrayToString(e)),H=e=>F.stringToUint8Array(atob(e)));const Z=[Array(255),Array(255),Array(255),Array(255)];for(let e=0;e<=255;e++){let t=e<<16;for(let e=0;e<8;e++)t=t<<1^(8388608&t?8801531:0);Z[0][e]=(16711680&t)>>16|65280&t|(255&t)<<16}for(let e=0;e<=255;e++)Z[1][e]=Z[0][e]>>8^Z[0][255&Z[0][e]];for(let e=0;e<=255;e++)Z[2][e]=Z[1][e]>>8^Z[0][255&Z[1][e]];for(let e=0;e<=255;e++)Z[3][e]=Z[2][e]>>8^Z[0][255&Z[2][e]];const J=function(){const e=new ArrayBuffer(2);return new DataView(e).setInt16(0,255,!0),255===new Int16Array(e)[0]}();function W(e){for(let t=0;t<e.length;t++)/^([^\s:]|[^\s:][^:]*[^\s:]): .+$/.test(e[t])||F.printDebugError(Error("Improperly formatted armor header: "+e[t])),/^(Version|Comment|MessageID|Hash|Charset): .+$/.test(e[t])||F.printDebugError(Error("Unknown header: "+e[t]))}function X(e){let t=e;const r=e.lastIndexOf("=");return r>=0&&r!==e.length-1&&(t=e.slice(0,r)),t}function $(e){return new Promise(((t,r)=>{try{const n=/^-----[^-]+-----$/m,i=/^[ \f\r\t\u00a0\u2000-\u200a\u202f\u205f\u3000]*$/;let s;const a=[];let o,c,u=a,h=[];const l=z(v(e,(async(e,f)=>{const y=x(e);try{for(;;){let e=await y.readLine();if(void 0===e)throw Error("Misformed armored text");if(e=F.removeTrailingSpaces(e.replace(/[\r\n]/g,"")),s)if(o)c||s!==L.armor.signed||(n.test(e)?(h=h.join("\r\n"),c=!0,W(u),u=[],o=!1):h.push(e.replace(/^- /,"")));else if(n.test(e)&&r(Error("Mandatory blank line missing between armor headers and armor data")),i.test(e)){if(W(u),o=!0,c||s!==L.armor.signed){t({text:h,data:l,headers:a,type:s});break}}else u.push(e);else n.test(e)&&(s=j(e))}}catch(e){return void r(e)}const d=Q(f);try{for(;;){await d.ready;const{done:e,value:t}=await y.read();if(e)throw Error("Misformed armored text");const r=t+"";if(-1!==r.indexOf("=")||-1!==r.indexOf("-")){let e=await y.readToEnd();e.length||(e=""),e=r+e,e=F.removeTrailingSpaces(e.replace(/\r/g,""));const t=e.split(n);if(1===t.length)throw Error("Misformed armored text");const i=X(t[0].slice(0,-1));await d.write(i);break}await d.write(r)}await d.ready,await d.close()}catch(e){await d.abort(e)}})))}catch(e){r(e)}})).then((async e=>(o(e.data)&&(e.data=await U(e.data)),e)))}function ee(e,t,r,n,i,s=!1,a=T){let o,c;e===L.armor.signed&&(o=t.text,c=t.hash,t=t.data);const u=s&&I(t),h=[];switch(e){case L.armor.multipartSection:h.push("-----BEGIN PGP MESSAGE, PART "+r+"/"+n+"-----\n"),h.push(V(i,a)),h.push(_(t)),u&&h.push("=",Y(u)),h.push("-----END PGP MESSAGE, PART "+r+"/"+n+"-----\n");break;case L.armor.multipartLast:h.push("-----BEGIN PGP MESSAGE, PART "+r+"-----\n"),h.push(V(i,a)),h.push(_(t)),u&&h.push("=",Y(u)),h.push("-----END PGP MESSAGE, PART "+r+"-----\n");break;case L.armor.signed:h.push("-----BEGIN PGP SIGNED MESSAGE-----\n"),h.push(c?`Hash: ${c}\n\n`:"\n"),h.push(o.replace(/^-/gm,"- -")),h.push("\n-----BEGIN PGP SIGNATURE-----\n"),h.push(V(i,a)),h.push(_(t)),u&&h.push("=",Y(u)),h.push("-----END PGP SIGNATURE-----\n");break;case L.armor.message:h.push("-----BEGIN PGP MESSAGE-----\n"),h.push(V(i,a)),h.push(_(t)),u&&h.push("=",Y(u)),h.push("-----END PGP MESSAGE-----\n");break;case L.armor.publicKey:h.push("-----BEGIN PGP PUBLIC KEY BLOCK-----\n"),h.push(V(i,a)),h.push(_(t)),u&&h.push("=",Y(u)),h.push("-----END PGP PUBLIC KEY BLOCK-----\n");break;case L.armor.privateKey:h.push("-----BEGIN PGP PRIVATE KEY BLOCK-----\n"),h.push(V(i,a)),h.push(_(t)),u&&h.push("=",Y(u)),h.push("-----END PGP PRIVATE KEY BLOCK-----\n");break;case L.armor.signature:h.push("-----BEGIN PGP SIGNATURE-----\n"),h.push(V(i,a)),h.push(_(t)),u&&h.push("=",Y(u)),h.push("-----END PGP SIGNATURE-----\n")}return F.concat(h)}const te=BigInt(0),re=BigInt(1);function ne(e){const t="0123456789ABCDEF";let r="";return e.forEach((e=>{r+=t[e>>4]+t[15&e]})),BigInt("0x0"+r)}function ie(e,t){const r=e%t;return r<te?r+t:r}function se(e,t,r){if(r===te)throw Error("Modulo cannot be zero");if(r===re)return BigInt(0);if(t<te)throw Error("Unsopported negative exponent");let n=t,i=e;i%=r;let s=BigInt(1);for(;n>te;){const e=n&re;n>>=re;s=e?s*i%r:s,i=i*i%r}return s}function ae(e){return e>=te?e:-e}function oe(e,t){const{gcd:r,x:n}=function(e,t){let r=BigInt(0),n=BigInt(1),i=BigInt(1),s=BigInt(0),a=ae(e),o=ae(t);const c=e<te,u=t<te;for(;o!==te;){const e=a/o;let t=r;r=i-e*r,i=t,t=n,n=s-e*n,s=t,t=o,o=a%o,a=t}return{x:c?-i:i,y:u?-s:s,gcd:a}}(e,t);if(r!==re)throw Error("Inverse does not exist");return ie(n+t,t)}function ce(e){const t=Number(e);if(t>Number.MAX_SAFE_INTEGER)throw Error("Number can only safely store up to 53 bits");return t}function ue(e,t){return(e>>BigInt(t)&re)===te?0:1}function he(e){const t=e<te?BigInt(-1):te;let r=1,n=e;for(;(n>>=re)!==t;)r++;return r}function le(e){const t=e<te?BigInt(-1):te,r=BigInt(8);let n=1,i=e;for(;(i>>=r)!==t;)n++;return n}function fe(e,t="be",r){let n=e.toString(16);n.length%2==1&&(n="0"+n);const i=n.length/2,s=new Uint8Array(r||i),a=r?r-i:0;let o=0;for(;o<i;)s[o+a]=parseInt(n.slice(2*o,2*o+2),16),o++;return"be"!==t&&s.reverse(),s}const ye=F.getNodeCrypto();function de(e){const t="undefined"!=typeof crypto?crypto:ye?.webcrypto;if(t?.getRandomValues){const r=new Uint8Array(e);return t.getRandomValues(r)}throw Error("No secure random number generator available.")}function pe(e,t){if(t<e)throw Error("Illegal parameter value: max <= min");const r=t-e;return ie(ne(de(le(r)+8)),r)+e}const ge=BigInt(1);function we(e,t,r){const n=BigInt(30),i=ge<<BigInt(e-1),s=[1,6,5,4,3,2,1,4,3,2,1,2,1,4,3,2,1,2,1,4,3,2,1,6,5,4,3,2,1,2];let a=pe(i,i<<ge),o=ce(ie(a,n));do{a+=BigInt(s[o]),o=(o+s[o])%s.length,he(a)>e&&(a=ie(a,i<<ge),a+=i,o=ce(ie(a,n)))}while(!Ae(a,t,r));return a}function Ae(e,t,r){return(!t||function(e,t){let r=e,n=t;for(;n!==te;){const e=n;n=r%n,r=e}return r}(e-ge,t)===ge)&&(!!function(e){const t=BigInt(0);return me.every((r=>ie(e,r)!==t))}(e)&&(!!function(e,t=BigInt(2)){return se(t,e-ge,e)===ge}(e)&&!!function(e,t){const r=he(e);t||(t=Math.max(1,r/48|0));const n=e-ge;let i=0;for(;!ue(n,i);)i++;const s=e>>BigInt(i);for(;t>0;t--){let t,r=se(pe(BigInt(2),n),s,e);if(r!==ge&&r!==n){for(t=1;t<i;t++){if(r=ie(r*r,e),r===ge)return!1;if(r===n)break}if(t===i)return!1}}return!0}(e,r)))}const me=[7,11,13,17,19,23,29,31,37,41,43,47,53,59,61,67,71,73,79,83,89,97,101,103,107,109,113,127,131,137,139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509,521,523,541,547,557,563,569,571,577,587,593,599,601,607,613,617,619,631,641,643,647,653,659,661,673,677,683,691,701,709,719,727,733,739,743,751,757,761,769,773,787,797,809,811,821,823,827,829,839,853,857,859,863,877,881,883,887,907,911,919,929,937,941,947,953,967,971,977,983,991,997,1009,1013,1019,1021,1031,1033,1039,1049,1051,1061,1063,1069,1087,1091,1093,1097,1103,1109,1117,1123,1129,1151,1153,1163,1171,1181,1187,1193,1201,1213,1217,1223,1229,1231,1237,1249,1259,1277,1279,1283,1289,1291,1297,1301,1303,1307,1319,1321,1327,1361,1367,1373,1381,1399,1409,1423,1427,1429,1433,1439,1447,1451,1453,1459,1471,1481,1483,1487,1489,1493,1499,1511,1523,1531,1543,1549,1553,1559,1567,1571,1579,1583,1597,1601,1607,1609,1613,1619,1621,1627,1637,1657,1663,1667,1669,1693,1697,1699,1709,1721,1723,1733,1741,1747,1753,1759,1777,1783,1787,1789,1801,1811,1823,1831,1847,1861,1867,1871,1873,1877,1879,1889,1901,1907,1913,1931,1933,1949,1951,1973,1979,1987,1993,1997,1999,2003,2011,2017,2027,2029,2039,2053,2063,2069,2081,2083,2087,2089,2099,2111,2113,2129,2131,2137,2141,2143,2153,2161,2179,2203,2207,2213,2221,2237,2239,2243,2251,2267,2269,2273,2281,2287,2293,2297,2309,2311,2333,2339,2341,2347,2351,2357,2371,2377,2381,2383,2389,2393,2399,2411,2417,2423,2437,2441,2447,2459,2467,2473,2477,2503,2521,2531,2539,2543,2549,2551,2557,2579,2591,2593,2609,2617,2621,2633,2647,2657,2659,2663,2671,2677,2683,2687,2689,2693,2699,2707,2711,2713,2719,2729,2731,2741,2749,2753,2767,2777,2789,2791,2797,2801,2803,2819,2833,2837,2843,2851,2857,2861,2879,2887,2897,2903,2909,2917,2927,2939,2953,2957,2963,2969,2971,2999,3001,3011,3019,3023,3037,3041,3049,3061,3067,3079,3083,3089,3109,3119,3121,3137,3163,3167,3169,3181,3187,3191,3203,3209,3217,3221,3229,3251,3253,3257,3259,3271,3299,3301,3307,3313,3319,3323,3329,3331,3343,3347,3359,3361,3371,3373,3389,3391,3407,3413,3433,3449,3457,3461,3463,3467,3469,3491,3499,3511,3517,3527,3529,3533,3539,3541,3547,3557,3559,3571,3581,3583,3593,3607,3613,3617,3623,3631,3637,3643,3659,3671,3673,3677,3691,3697,3701,3709,3719,3727,3733,3739,3761,3767,3769,3779,3793,3797,3803,3821,3823,3833,3847,3851,3853,3863,3877,3881,3889,3907,3911,3917,3919,3923,3929,3931,3943,3947,3967,3989,4001,4003,4007,4013,4019,4021,4027,4049,4051,4057,4073,4079,4091,4093,4099,4111,4127,4129,4133,4139,4153,4157,4159,4177,4201,4211,4217,4219,4229,4231,4241,4243,4253,4259,4261,4271,4273,4283,4289,4297,4327,4337,4339,4349,4357,4363,4373,4391,4397,4409,4421,4423,4441,4447,4451,4457,4463,4481,4483,4493,4507,4513,4517,4519,4523,4547,4549,4561,4567,4583,4591,4597,4603,4621,4637,4639,4643,4649,4651,4657,4663,4673,4679,4691,4703,4721,4723,4729,4733,4751,4759,4783,4787,4789,4793,4799,4801,4813,4817,4831,4861,4871,4877,4889,4903,4909,4919,4931,4933,4937,4943,4951,4957,4967,4969,4973,4987,4993,4999].map((e=>BigInt(e)));const be=F.getWebCrypto(),ke=F.getNodeCrypto(),Ee=ke&&ke.getHashes();function ve(e){if(ke&&Ee.includes(e))return async function(t){const r=ke.createHash(e);return b(t,(e=>{r.update(e)}),(()=>new Uint8Array(r.digest())))}}function Ke(e,t){const r=async()=>{const{nobleHashes:t}=await Promise.resolve().then((function(){return Lf})),r=t.get(e);if(!r)throw Error("Unsupported hash");return r};return async function(e){if(o(e)&&(e=await U(e)),F.isStream(e)){const t=(await r()).create();return b(e,(e=>{t.update(e)}),(()=>t.digest()))}if(be&&t)return new Uint8Array(await be.digest(t,e));return(await r())(e)}}const Se=ve("md5")||Ke("md5"),Ie=ve("sha1")||Ke("sha1","SHA-1"),Be=ve("sha224")||Ke("sha224"),Ce=ve("sha256")||Ke("sha256","SHA-256"),Ue=ve("sha384")||Ke("sha384","SHA-384"),Pe=ve("sha512")||Ke("sha512","SHA-512"),De=ve("ripemd160")||Ke("ripemd160"),xe=ve("sha3-256")||Ke("sha3_256"),Qe=ve("sha3-512")||Ke("sha3_512");function Me(e,t){switch(e){case L.hash.md5:return Se(t);case L.hash.sha1:return Ie(t);case L.hash.ripemd:return De(t);case L.hash.sha256:return Ce(t);case L.hash.sha384:return Ue(t);case L.hash.sha512:return Pe(t);case L.hash.sha224:return Be(t);case L.hash.sha3_256:return xe(t);case L.hash.sha3_512:return Qe(t);default:throw Error("Unsupported hash function")}}function Le(e){switch(e){case L.hash.md5:return 16;case L.hash.sha1:case L.hash.ripemd:return 20;case L.hash.sha256:return 32;case L.hash.sha384:return 48;case L.hash.sha512:return 64;case L.hash.sha224:return 28;case L.hash.sha3_256:return 32;case L.hash.sha3_512:return 64;default:throw Error("Invalid hash algorithm.")}}const Te=[];function Re(e,t){const r=e.length;if(r>t-11)throw Error("Message too long");const n=function(e){const t=new Uint8Array(e);let r=0;for(;r<e;){const n=de(e-r);for(let e=0;e<n.length;e++)0!==n[e]&&(t[r++]=n[e])}return t}(t-r-3),i=new Uint8Array(t);return i[1]=2,i.set(n,2),i.set(e,t-r),i}function Fe(e,t){let r=2,n=1;for(let t=r;t<e.length;t++)n&=0!==e[t],r+=n;const i=r-2,s=e.subarray(r+1),a=0===e[0]&2===e[1]&i>=8&!n;if(t)return F.selectUint8Array(a,s,t);if(a)return s;throw Error("Decryption error")}function Ne(e,t,r){let n;if(t.length!==Le(e))throw Error("Invalid hash length");const i=new Uint8Array(Te[e].length);for(n=0;n<Te[e].length;n++)i[n]=Te[e][n];const s=i.length+t.length;if(r<s+11)throw Error("Intended encoded message length too short");const a=new Uint8Array(r-s-3).fill(255),o=new Uint8Array(r);return o[1]=1,o.set(a,2),o.set(i,r-s),o.set(t,r-t.length),o}Te[1]=[48,32,48,12,6,8,42,134,72,134,247,13,2,5,5,0,4,16],Te[2]=[48,33,48,9,6,5,43,14,3,2,26,5,0,4,20],Te[3]=[48,33,48,9,6,5,43,36,3,2,1,5,0,4,20],Te[8]=[48,49,48,13,6,9,96,134,72,1,101,3,4,2,1,5,0,4,32],Te[9]=[48,65,48,13,6,9,96,134,72,1,101,3,4,2,2,5,0,4,48],Te[10]=[48,81,48,13,6,9,96,134,72,1,101,3,4,2,3,5,0,4,64],Te[11]=[48,45,48,13,6,9,96,134,72,1,101,3,4,2,4,5,0,4,28];const Oe=F.getWebCrypto(),He=F.getNodeCrypto(),_e=BigInt(1);async function ze(e,t,r,n,i,s,a,o,c){if(Le(e)>=r.length)throw Error("Digest size cannot exceed key modulus size");if(t&&!F.isStream(t))if(F.getWebCrypto())try{return await async function(e,t,r,n,i,s,a,o){const c=Ve(r,n,i,s,a,o),u={name:"RSASSA-PKCS1-v1_5",hash:{name:e}},h=await Oe.importKey("jwk",c,u,!1,["sign"]);return new Uint8Array(await Oe.sign("RSASSA-PKCS1-v1_5",h,t))}(L.read(L.webHash,e),t,r,n,i,s,a,o)}catch(e){F.printDebugError(e)}else if(F.getNodeCrypto())return function(e,t,r,n,i,s,a,o){const c=He.createSign(L.read(L.hash,e));c.write(t),c.end();const u=Ve(r,n,i,s,a,o);return new Uint8Array(c.sign({key:u,format:"jwk",type:"pkcs1"}))}(e,t,r,n,i,s,a,o);return function(e,t,r,n){t=ne(t);const i=ne(Ne(e,n,le(t)));return r=ne(r),fe(se(i,r,t),"be",le(t))}(e,r,i,c)}async function Ge(e,t,r,n,i,s){if(t&&!F.isStream(t))if(F.getWebCrypto())try{return await async function(e,t,r,n,i){const s=Ye(n,i),a=await Oe.importKey("jwk",s,{name:"RSASSA-PKCS1-v1_5",hash:{name:e}},!1,["verify"]);return Oe.verify("RSASSA-PKCS1-v1_5",a,r,t)}(L.read(L.webHash,e),t,r,n,i)}catch(e){F.printDebugError(e)}else if(F.getNodeCrypto())return function(e,t,r,n,i){const s=Ye(n,i),a={key:s,format:"jwk",type:"pkcs1"},o=He.createVerify(L.read(L.hash,e));o.write(t),o.end();try{return o.verify(a,r)}catch{return!1}}(e,t,r,n,i);return function(e,t,r,n,i){if(r=ne(r),t=ne(t),n=ne(n),t>=r)throw Error("Signature size cannot exceed modulus size");const s=fe(se(t,n,r),"be",le(r)),a=Ne(e,i,le(r));return F.equalsUint8Array(s,a)}(e,r,n,i,s)}async function qe(e,t,r){return F.getNodeCrypto()?function(e,t,r){const n=Ye(t,r),i={key:n,format:"jwk",type:"pkcs1",padding:He.constants.RSA_PKCS1_PADDING};return new Uint8Array(He.publicEncrypt(i,e))}(e,t,r):function(e,t,r){if(t=ne(t),e=ne(Re(e,le(t))),r=ne(r),e>=t)throw Error("Message size cannot exceed modulus size");return fe(se(e,r,t),"be",le(t))}(e,t,r)}async function je(e,t,r,n,i,s,a,o){if(F.getNodeCrypto()&&!o)try{return function(e,t,r,n,i,s,a){const o=Ve(t,r,n,i,s,a),c={key:o,format:"jwk",type:"pkcs1",padding:He.constants.RSA_PKCS1_PADDING};try{return new Uint8Array(He.privateDecrypt(c,e))}catch{throw Error("Decryption error")}}(e,t,r,n,i,s,a)}catch(e){F.printDebugError(e)}return function(e,t,r,n,i,s,a,o){if(e=ne(e),t=ne(t),r=ne(r),n=ne(n),i=ne(i),s=ne(s),a=ne(a),e>=t)throw Error("Data too large.");const c=ie(n,s-_e),u=ie(n,i-_e),h=pe(BigInt(2),t),l=se(oe(h,t),r,t);e=ie(e*l,t);const f=se(e,u,i),y=se(e,c,s),d=ie(a*(y-f),s);let p=d*i+f;return p=ie(p*h,t),Fe(fe(p,"be",le(t)),o)}(e,t,r,n,i,s,a,o)}function Ve(e,t,r,n,i,s){const a=ne(n),o=ne(i),c=ne(r);let u=ie(c,o-_e),h=ie(c,a-_e);return h=fe(h),u=fe(u),{kty:"RSA",n:q(e),e:q(t),d:q(r),p:q(i),q:q(n),dp:q(u),dq:q(h),qi:q(s),ext:!0}}function Ye(e,t){return{kty:"RSA",n:q(e),e:q(t),ext:!0}}function Ze(e,t){return{n:G(e.n),e:fe(t),d:G(e.d),p:G(e.q),q:G(e.p),u:G(e.qi)}}const Je=BigInt(1);const We={"2a8648ce3d030107":L.curve.nistP256,"2b81040022":L.curve.nistP384,"2b81040023":L.curve.nistP521,"2b8104000a":L.curve.secp256k1,"2b06010401da470f01":L.curve.ed25519Legacy,"2b060104019755010501":L.curve.curve25519Legacy,"2b2403030208010107":L.curve.brainpoolP256r1,"2b240303020801010b":L.curve.brainpoolP384r1,"2b240303020801010d":L.curve.brainpoolP512r1};class Xe{constructor(e){if(e instanceof Xe)this.oid=e.oid;else if(F.isArray(e)||F.isUint8Array(e)){if(6===(e=new Uint8Array(e))[0]){if(e[1]!==e.length-2)throw Error("Length mismatch in DER encoded oid");e=e.subarray(2)}this.oid=e}else this.oid=""}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.oid=e.subarray(1,1+t),1+this.oid.length}throw Error("Invalid oid")}write(){return F.concatUint8Array([new Uint8Array([this.oid.length]),this.oid])}toHex(){return F.uint8ArrayToHex(this.oid)}getName(){const e=We[this.toHex()];if(!e)throw Error("Unknown curve object identifier.");return e}}function $e(e){let t,r=0;const n=e[0];return n<192?([r]=e,t=1):n<255?(r=(e[0]-192<<8)+e[1]+192,t=2):255===n&&(r=F.readNumber(e.subarray(1,5)),t=5),{len:r,offset:t}}function et(e){return e<192?new Uint8Array([e]):e>191&&e<8384?new Uint8Array([192+(e-192>>8),e-192&255]):F.concatUint8Array([new Uint8Array([255]),F.writeNumber(e,4)])}function tt(e){if(e<0||e>30)throw Error("Partial Length power must be between 1 and 30");return new Uint8Array([224+e])}function rt(e){return new Uint8Array([192|e])}function nt(e,t){return F.concatUint8Array([rt(e),et(t)])}function it(e){return[L.packet.literalData,L.packet.compressedData,L.packet.symmetricallyEncryptedData,L.packet.symEncryptedIntegrityProtectedData,L.packet.aeadEncryptedData].includes(e)}async function st(e,t,r){let n,i;try{const s=await e.peekBytes(2);if(!s||s.length<2||!(128&s[0]))throw Error("Error during parsing. This message / key probably does not conform to a valid OpenPGP format.");const a=await e.readByte();let o,c,u=-1,h=-1;h=0,64&a&&(h=1),h?u=63&a:(u=(63&a)>>2,c=3&a);const l=it(u);let f,y=null;if(t&&l){if("array"===t){const e=new ArrayStream;n=Q(e),y=e}else{const e=new TransformStream;n=Q(e.writable),y=e.readable}i=r({tag:u,packet:y})}else y=[];do{if(h){const t=await e.readByte();if(f=!1,t<192)o=t;else if(t>=192&&t<224)o=(t-192<<8)+await e.readByte()+192;else if(t>223&&t<255){if(o=1<<(31&t),f=!0,!l)throw new TypeError("This packet type does not support partial lengths.")}else o=await e.readByte()<<24|await e.readByte()<<16|await e.readByte()<<8|await e.readByte()}else switch(c){case 0:o=await e.readByte();break;case 1:o=await e.readByte()<<8|await e.readByte();break;case 2:o=await e.readByte()<<24|await e.readByte()<<16|await e.readByte()<<8|await e.readByte();break;default:o=1/0}if(o>0){let t=0;for(;;){n&&await n.ready;const{done:r,value:i}=await e.read();if(r){if(o===1/0)break;throw Error("Unexpected end of packet")}const s=o===1/0?i:i.subarray(0,o-t);if(n?await n.write(s):y.push(s),t+=i.length,t>=o){e.unshift(i.subarray(o-t+i.length));break}}}}while(f);n?(await n.ready,await n.close()):(y=F.concatUint8Array(y),await r({tag:u,packet:y}))}catch(e){if(n)return await n.abort(e),!0;throw e}finally{n&&await i}}class at extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="UnsupportedError"}}class ot extends at{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="UnknownPacketError"}}class ct extends at{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,at),this.name="MalformedPacketError"}}class ut{constructor(e,t){this.tag=e,this.rawContent=t}write(){return this.rawContent}}async function ht(e){switch(e){case L.publicKey.ed25519:try{const e=F.getWebCrypto(),t=await e.generateKey("Ed25519",!0,["sign","verify"]).catch((e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e})),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);return{A:new Uint8Array(G(n.x)),seed:G(r.d)}}catch(t){if("NotSupportedError"!==t.name)throw t;const{default:r}=await Promise.resolve().then((function(){return Iy})),n=de(dt(e)),{publicKey:i}=r.sign.keyPair.fromSeed(n);return{A:i,seed:n}}case L.publicKey.ed448:{const e=await F.getNobleCurve(L.publicKey.ed448),{secretKey:t,publicKey:r}=e.keygen();return{A:r,seed:t}}default:throw Error("Unsupported EdDSA algorithm")}}async function lt(e,t,r,n,i,s){switch(e){case L.publicKey.ed25519:try{const t=F.getWebCrypto(),r=wt(e,n,i),a=await t.importKey("jwk",r,"Ed25519",!1,["sign"]);return{RS:new Uint8Array(await t.sign("Ed25519",a,s))}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then((function(){return Iy})),r=F.concatUint8Array([i,n]);return{RS:t.sign.detached(s,r)}}case L.publicKey.ed448:return{RS:(await F.getNobleCurve(L.publicKey.ed448)).sign(s,i)};default:throw Error("Unsupported EdDSA algorithm")}}async function ft(e,t,{RS:r},n,i,s){switch(e){case L.publicKey.ed25519:try{const t=F.getWebCrypto(),n=gt(e,i),a=await t.importKey("jwk",n,"Ed25519",!1,["verify"]);return await t.verify("Ed25519",a,r,s)}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then((function(){return Iy}));return t.sign.detached.verify(s,r,i)}case L.publicKey.ed448:return(await F.getNobleCurve(L.publicKey.ed448)).verify(r,s,i);default:throw Error("Unsupported EdDSA algorithm")}}async function yt(e,t,r){switch(e){case L.publicKey.ed25519:try{const n=F.getWebCrypto(),i=wt(e,t,r),s=gt(e,t),a=await n.importKey("jwk",i,"Ed25519",!1,["sign"]),o=await n.importKey("jwk",s,"Ed25519",!1,["verify"]),c=de(8),u=new Uint8Array(await n.sign("Ed25519",a,c));return await n.verify("Ed25519",o,u,c)}catch(e){if("NotSupportedError"!==e.name)return!1;const{default:n}=await Promise.resolve().then((function(){return Iy})),{publicKey:i}=n.sign.keyPair.fromSeed(r);return F.equalsUint8Array(t,i)}case L.publicKey.ed448:{const e=(await F.getNobleCurve(L.publicKey.ed448)).getPublicKey(r);return F.equalsUint8Array(t,e)}default:return!1}}function dt(e){switch(e){case L.publicKey.ed25519:return 32;case L.publicKey.ed448:return 57;default:throw Error("Unsupported EdDSA algorithm")}}function pt(e){switch(e){case L.publicKey.ed25519:return L.hash.sha256;case L.publicKey.ed448:return L.hash.sha512;default:throw Error("Unknown EdDSA algo")}}const gt=(e,t)=>{if(e===L.publicKey.ed25519){return{kty:"OKP",crv:"Ed25519",x:q(t),ext:!0}}throw Error("Unsupported EdDSA algorithm")},wt=(e,t,r)=>{if(e===L.publicKey.ed25519){const n=gt(e,t);return n.d=q(r),n}throw Error("Unsupported EdDSA algorithm")};var At=/*#__PURE__*/Object.freeze({__proto__:null,generate:ht,getPayloadSize:dt,getPreferredHashAlgo:pt,sign:lt,validateParams:yt,verify:ft});
+/*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */function mt(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&"Uint8Array"===e.constructor.name}function bt(e,...t){if(!mt(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error("Uint8Array expected of length "+t+", got length="+e.length)}function kt(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function Et(e,t){bt(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}function vt(e){return new Uint8Array(e.buffer,e.byteOffset,e.byteLength)}function Kt(e){return new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4))}function St(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function It(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}const Bt=/* @__PURE__ */(()=>68===new Uint8Array(new Uint32Array([287454020]).buffer)[0])();function Ct(e){if("string"==typeof e)e=function(e){if("string"!=typeof e)throw Error("string expected");return new Uint8Array((new TextEncoder).encode(e))}(e);else{if(!mt(e))throw Error("Uint8Array expected, got "+typeof e);e=Tt(e)}return e}function Ut(e,t){return e.buffer===t.buffer&&e.byteOffset<t.byteOffset+t.byteLength&&t.byteOffset<e.byteOffset+e.byteLength}function Pt(e,t){if(Ut(e,t)&&e.byteOffset<t.byteOffset)throw Error("complex overlap of input and output is not supported")}function Dt(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r}const xt=(e,t)=>{function r(r,...n){if(bt(r),!Bt)throw Error("Non little-endian hardware is not yet supported");if(void 0!==e.nonceLength){const t=n[0];if(!t)throw Error("nonce / iv required");e.varSizeNonce?bt(t):bt(t,e.nonceLength)}const i=e.tagLength;i&&void 0!==n[1]&&bt(n[1]);const s=t(r,...n),a=(e,t)=>{if(void 0!==t){if(2!==e)throw Error("cipher output not supported");bt(t)}};let o=!1;return{encrypt(e,t){if(o)throw Error("cannot encrypt() twice with same key + nonce");return o=!0,bt(e),a(s.encrypt.length,t),s.encrypt(e,t)},decrypt(e,t){if(bt(e),i&&e.length<i)throw Error("invalid ciphertext length: smaller than tagLength="+i);return a(s.decrypt.length,t),s.decrypt(e,t)}}}return Object.assign(r,e),r};function Qt(e,t,r=!0){if(void 0===t)return new Uint8Array(e);if(t.length!==e)throw Error("invalid output length, expected "+e+", got: "+t.length);if(r&&!Lt(t))throw Error("invalid output, must be aligned");return t}function Mt(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s);e.setUint32(t+0,a,n),e.setUint32(t+4,o,n)}function Lt(e){return e.byteOffset%4==0}function Tt(e){return Uint8Array.from(e)}const Rt=16,Ft=/* @__PURE__ */new Uint8Array(16),Nt=Kt(Ft),Ot=e=>(e>>>0&255)<<24|(e>>>8&255)<<16|(e>>>16&255)<<8|e>>>24&255;class Ht{constructor(e,t){this.blockLen=Rt,this.outputLen=Rt,this.s0=0,this.s1=0,this.s2=0,this.s3=0,this.finished=!1,bt(e=Ct(e),16);const r=It(e);let n=r.getUint32(0,!1),i=r.getUint32(4,!1),s=r.getUint32(8,!1),a=r.getUint32(12,!1);const o=[];for(let e=0;e<128;e++)o.push({s0:Ot(n),s1:Ot(i),s2:Ot(s),s3:Ot(a)}),({s0:n,s1:i,s2:s,s3:a}={s3:(h=s)<<31|(l=a)>>>1,s2:(u=i)<<31|h>>>1,s1:(c=n)<<31|u>>>1,s0:c>>>1^225<<24&-(1&l)});var c,u,h,l;const f=(y=t||1024)>65536?8:y>1024?4:2;var y;if(![1,2,4,8].includes(f))throw Error("ghash: invalid window size, expected 2, 4 or 8");this.W=f;const d=128/f,p=this.windowSize=2**f,g=[];for(let e=0;e<d;e++)for(let t=0;t<p;t++){let r=0,n=0,i=0,s=0;for(let a=0;a<f;a++){if(!(t>>>f-a-1&1))continue;const{s0:c,s1:u,s2:h,s3:l}=o[f*e+a];r^=c,n^=u,i^=h,s^=l}g.push({s0:r,s1:n,s2:i,s3:s})}this.t=g}_updateBlock(e,t,r,n){e^=this.s0,t^=this.s1,r^=this.s2,n^=this.s3;const{W:i,t:s,windowSize:a}=this;let o=0,c=0,u=0,h=0;const l=(1<<i)-1;let f=0;for(const y of[e,t,r,n])for(let e=0;e<4;e++){const t=y>>>8*e&255;for(let e=8/i-1;e>=0;e--){const r=t>>>i*e&l,{s0:n,s1:y,s2:d,s3:p}=s[f*a+r];o^=n,c^=y,u^=d,h^=p,f+=1}}this.s0=o,this.s1=c,this.s2=u,this.s3=h}update(e){kt(this),bt(e=Ct(e));const t=Kt(e),r=Math.floor(e.length/Rt),n=e.length%Rt;for(let e=0;e<r;e++)this._updateBlock(t[4*e+0],t[4*e+1],t[4*e+2],t[4*e+3]);return n&&(Ft.set(e.subarray(r*Rt)),this._updateBlock(Nt[0],Nt[1],Nt[2],Nt[3]),St(Nt)),this}destroy(){const{t:e}=this;for(const t of e)t.s0=0,t.s1=0,t.s2=0,t.s3=0}digestInto(e){kt(this),Et(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Kt(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e}digest(){const e=new Uint8Array(Rt);return this.digestInto(e),this.destroy(),e}}class _t extends Ht{constructor(e,t){bt(e=Ct(e));const r=function(e){e.reverse();const t=1&e[15];let r=0;for(let t=0;t<e.length;t++){const n=e[t];e[t]=n>>>1|r,r=(1&n)<<7}return e[0]^=225&-t,e}(Tt(e));super(r,t),St(r)}update(e){e=Ct(e),kt(this);const t=Kt(e),r=e.length%Rt,n=Math.floor(e.length/Rt);for(let e=0;e<n;e++)this._updateBlock(Ot(t[4*e+3]),Ot(t[4*e+2]),Ot(t[4*e+1]),Ot(t[4*e+0]));return r&&(Ft.set(e.subarray(n*Rt)),this._updateBlock(Ot(Nt[3]),Ot(Nt[2]),Ot(Nt[1]),Ot(Nt[0])),St(Nt)),this}digestInto(e){kt(this),Et(e,this),this.finished=!0;const{s0:t,s1:r,s2:n,s3:i}=this,s=Kt(e);return s[0]=t,s[1]=r,s[2]=n,s[3]=i,e.reverse()}}function zt(e){const t=(t,r)=>e(r,t.length).update(Ct(t)).digest(),r=e(new Uint8Array(16),0);return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=(t,r)=>e(t,r),t}const Gt=zt(((e,t)=>new Ht(e,t)));zt(((e,t)=>new _t(e,t)));const qt=16,jt=/* @__PURE__ */new Uint8Array(qt);function Vt(e){return e<<1^283&-(e>>7)}function Yt(e,t){let r=0;for(;t>0;t>>=1)r^=e&-(1&t),e=Vt(e);return r}const Zt=/* @__PURE__ */(()=>{const e=new Uint8Array(256);for(let t=0,r=1;t<256;t++,r^=Vt(r))e[t]=r;const t=new Uint8Array(256);t[0]=99;for(let r=0;r<255;r++){let n=e[255-r];n|=n<<8,t[e[r]]=255&(n^n>>4^n>>5^n>>6^n>>7^99)}return St(e),t})(),Jt=/* @__PURE__ */Zt.map(((e,t)=>Zt.indexOf(t))),Wt=e=>e<<8|e>>>24,Xt=e=>e<<24&4278190080|e<<8&16711680|e>>>8&65280|e>>>24&255;function $t(e,t){if(256!==e.length)throw Error("Wrong sbox length");const r=new Uint32Array(256).map(((r,n)=>t(e[n]))),n=r.map(Wt),i=n.map(Wt),s=i.map(Wt),a=new Uint32Array(65536),o=new Uint32Array(65536),c=new Uint16Array(65536);for(let t=0;t<256;t++)for(let u=0;u<256;u++){const h=256*t+u;a[h]=r[t]^n[u],o[h]=i[t]^s[u],c[h]=e[t]<<8|e[u]}return{sbox:e,sbox2:c,T0:r,T1:n,T2:i,T3:s,T01:a,T23:o}}const er=/* @__PURE__ */$t(Zt,(e=>Yt(e,3)<<24|e<<16|e<<8|Yt(e,2))),tr=/* @__PURE__ */$t(Jt,(e=>Yt(e,11)<<24|Yt(e,13)<<16|Yt(e,9)<<8|Yt(e,14))),rr=/* @__PURE__ */(()=>{const e=new Uint8Array(16);for(let t=0,r=1;t<16;t++,r=Vt(r))e[t]=r;return e})();function nr(e){bt(e);const t=e.length;if(![16,24,32].includes(t))throw Error("aes: invalid key size, should be 16, 24 or 32, got "+t);const{sbox2:r}=er,n=[];Lt(e)||n.push(e=Tt(e));const i=Kt(e),s=i.length,a=e=>ar(r,e,e,e,e),o=new Uint32Array(t+28);o.set(i);for(let e=s;e<o.length;e++){let t=o[e-1];e%s==0?t=a((c=t)<<24|c>>>8)^rr[e/s-1]:s>6&&e%s==4&&(t=a(t)),o[e]=o[e-s]^t}var c;return St(...n),o}function ir(e){const t=nr(e),r=t.slice(),n=t.length,{sbox2:i}=er,{T0:s,T1:a,T2:o,T3:c}=tr;for(let e=0;e<n;e+=4)for(let i=0;i<4;i++)r[e+i]=t[n-e-4+i];St(t);for(let e=4;e<n-4;e++){const t=r[e],n=ar(i,t,t,t,t);r[e]=s[255&n]^a[n>>>8&255]^o[n>>>16&255]^c[n>>>24]}return r}function sr(e,t,r,n,i,s){return e[r<<8&65280|n>>>8&255]^t[i>>>8&65280|s>>>24&255]}function ar(e,t,r,n,i){return e[255&t|65280&r]|e[n>>>16&255|i>>>16&65280]<<16}function or(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=er;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const u=e.length/4-2;for(let s=0;s<u;s++){const s=e[c++]^sr(a,o,t,r,n,i),u=e[c++]^sr(a,o,r,n,i,t),h=e[c++]^sr(a,o,n,i,t,r),l=e[c++]^sr(a,o,i,t,r,n);t=s,r=u,n=h,i=l}return{s0:e[c++]^ar(s,t,r,n,i),s1:e[c++]^ar(s,r,n,i,t),s2:e[c++]^ar(s,n,i,t,r),s3:e[c++]^ar(s,i,t,r,n)}}function cr(e,t,r,n,i){const{sbox2:s,T01:a,T23:o}=tr;let c=0;t^=e[c++],r^=e[c++],n^=e[c++],i^=e[c++];const u=e.length/4-2;for(let s=0;s<u;s++){const s=e[c++]^sr(a,o,t,i,n,r),u=e[c++]^sr(a,o,r,t,i,n),h=e[c++]^sr(a,o,n,r,t,i),l=e[c++]^sr(a,o,i,n,r,t);t=s,r=u,n=h,i=l}return{s0:e[c++]^ar(s,t,i,n,r),s1:e[c++]^ar(s,r,t,i,n),s2:e[c++]^ar(s,n,r,t,i),s3:e[c++]^ar(s,i,n,r,t)}}function ur(e,t,r,n){bt(t,qt),bt(r);const i=r.length;Pt(r,n=Qt(i,n));const s=t,a=Kt(s);let{s0:o,s1:c,s2:u,s3:h}=or(e,a[0],a[1],a[2],a[3]);const l=Kt(r),f=Kt(n);for(let t=0;t+4<=l.length;t+=4){f[t+0]=l[t+0]^o,f[t+1]=l[t+1]^c,f[t+2]=l[t+2]^u,f[t+3]=l[t+3]^h;let r=1;for(let e=s.length-1;e>=0;e--)r=r+(255&s[e])|0,s[e]=255&r,r>>>=8;({s0:o,s1:c,s2:u,s3:h}=or(e,a[0],a[1],a[2],a[3]))}const y=qt*Math.floor(l.length/4);if(y<i){const e=new Uint32Array([o,c,u,h]),t=vt(e);for(let e=y,s=0;e<i;e++,s++)n[e]=r[e]^t[s];St(e)}return n}function hr(e,t,r,n,i){bt(r,qt),bt(n),i=Qt(n.length,i);const s=r,a=Kt(s),o=It(s),c=Kt(n),u=Kt(i),h=t?0:12,l=n.length;let f=o.getUint32(h,t),{s0:y,s1:d,s2:p,s3:g}=or(e,a[0],a[1],a[2],a[3]);for(let r=0;r+4<=c.length;r+=4)u[r+0]=c[r+0]^y,u[r+1]=c[r+1]^d,u[r+2]=c[r+2]^p,u[r+3]=c[r+3]^g,f=f+1>>>0,o.setUint32(h,f,t),({s0:y,s1:d,s2:p,s3:g}=or(e,a[0],a[1],a[2],a[3]));const w=qt*Math.floor(c.length/4);if(w<l){const e=new Uint32Array([y,d,p,g]),t=vt(e);for(let e=w,r=0;e<l;e++,r++)i[e]=n[e]^t[r];St(e)}return i}const lr=/* @__PURE__ */xt({blockSize:16,nonceLength:16},(function(e,t){function r(r,n){if(bt(r),void 0!==n&&(bt(n),!Lt(n)))throw Error("unaligned destination");const i=nr(e),s=Tt(t),a=[i,s];Lt(r)||a.push(r=Tt(r));const o=ur(i,s,r,n);return St(...a),o}return{encrypt:(e,t)=>r(e,t),decrypt:(e,t)=>r(e,t)}}));const fr=/* @__PURE__ */xt({blockSize:16,nonceLength:16},(function(e,t,r={}){const n=!r.disablePadding;return{encrypt(r,i){const s=nr(e),{b:a,o,out:c}=function(e,t,r){bt(e);let n=e.length;const i=n%qt;if(!t&&0!==i)throw Error("aec/(cbc-ecb): unpadded plaintext with disabled padding");Lt(e)||(e=Tt(e));const s=Kt(e);if(t){let e=qt-i;e||(e=qt),n+=e}return Pt(e,r=Qt(n,r)),{b:s,o:Kt(r),out:r}}(r,n,i);let u=t;const h=[s];Lt(u)||h.push(u=Tt(u));const l=Kt(u);let f=l[0],y=l[1],d=l[2],p=l[3],g=0;for(;g+4<=a.length;)f^=a[g+0],y^=a[g+1],d^=a[g+2],p^=a[g+3],({s0:f,s1:y,s2:d,s3:p}=or(s,f,y,d,p)),o[g++]=f,o[g++]=y,o[g++]=d,o[g++]=p;if(n){const e=function(e){const t=new Uint8Array(16),r=Kt(t);t.set(e);const n=qt-e.length;for(let e=qt-n;e<qt;e++)t[e]=n;return r}(r.subarray(4*g));f^=e[0],y^=e[1],d^=e[2],p^=e[3],({s0:f,s1:y,s2:d,s3:p}=or(s,f,y,d,p)),o[g++]=f,o[g++]=y,o[g++]=d,o[g++]=p}return St(...h),c},decrypt(r,i){!function(e){if(bt(e),e.length%qt!=0)throw Error("aes-(cbc/ecb).decrypt ciphertext should consist of blocks with size 16")}(r);const s=ir(e);let a=t;const o=[s];Lt(a)||o.push(a=Tt(a));const c=Kt(a);i=Qt(r.length,i),Lt(r)||o.push(r=Tt(r)),Pt(r,i);const u=Kt(r),h=Kt(i);let l=c[0],f=c[1],y=c[2],d=c[3];for(let e=0;e+4<=u.length;){const t=l,r=f,n=y,i=d;l=u[e+0],f=u[e+1],y=u[e+2],d=u[e+3];const{s0:a,s1:o,s2:c,s3:p}=cr(s,l,f,y,d);h[e++]=a^t,h[e++]=o^r,h[e++]=c^n,h[e++]=p^i}return St(...o),function(e,t){if(!t)return e;const r=e.length;if(!r)throw Error("aes/pcks5: empty ciphertext not allowed");const n=e[r-1];if(n<=0||n>16)throw Error("aes/pcks5: wrong padding");const i=e.subarray(0,-n);for(let t=0;t<n;t++)if(e[r-t-1]!==n)throw Error("aes/pcks5: wrong padding");return i}(i,n)}}})),yr=/* @__PURE__ */xt({blockSize:16,nonceLength:16},(function(e,t){function r(r,n,i){bt(r);const s=r.length;if(Ut(r,i=Qt(s,i)))throw Error("overlapping src and dst not supported.");const a=nr(e);let o=t;const c=[a];Lt(o)||c.push(o=Tt(o)),Lt(r)||c.push(r=Tt(r));const u=Kt(r),h=Kt(i),l=n?h:u,f=Kt(o);let y=f[0],d=f[1],p=f[2],g=f[3];for(let e=0;e+4<=u.length;){const{s0:t,s1:r,s2:n,s3:i}=or(a,y,d,p,g);h[e+0]=u[e+0]^t,h[e+1]=u[e+1]^r,h[e+2]=u[e+2]^n,h[e+3]=u[e+3]^i,y=l[e++],d=l[e++],p=l[e++],g=l[e++]}const w=qt*Math.floor(u.length/4);if(w<s){({s0:y,s1:d,s2:p,s3:g}=or(a,y,d,p,g));const e=vt(new Uint32Array([y,d,p,g]));for(let t=w,n=0;t<s;t++,n++)i[t]=r[t]^e[n];St(e)}return St(...c),i}return{encrypt:(e,t)=>r(e,!0,t),decrypt:(e,t)=>r(e,!1,t)}}));function dr(e,t,r,n,i){const s=i?i.length:0,a=e.create(r,n.length+s);i&&a.update(i);const o=function(e,t,r){const n=new Uint8Array(16),i=It(n);return Mt(i,0,BigInt(t),r),Mt(i,8,BigInt(e),r),n}(8*n.length,8*s,t);a.update(n),a.update(o);const c=a.digest();return St(o),c}const pr=/* @__PURE__ */xt({blockSize:16,nonceLength:12,tagLength:16,varSizeNonce:!0},(function(e,t,r){if(t.length<8)throw Error("aes/gcm: invalid nonce length");function n(e,t,n){const i=dr(Gt,!1,e,n,r);for(let e=0;e<t.length;e++)i[e]^=t[e];return i}function i(){const r=nr(e),n=jt.slice(),i=jt.slice();if(hr(r,!1,i,i,n),12===t.length)i.set(t);else{const e=jt.slice();Mt(It(e),8,BigInt(8*t.length),!1);const r=Gt.create(n).update(t).update(e);r.digestInto(i),r.destroy()}return{xk:r,authKey:n,counter:i,tagMask:hr(r,!1,i,jt)}}return{encrypt(e){const{xk:t,authKey:r,counter:s,tagMask:a}=i(),o=new Uint8Array(e.length+16),c=[t,r,s,a];Lt(e)||c.push(e=Tt(e)),hr(t,!1,s,e,o.subarray(0,e.length));const u=n(r,a,o.subarray(0,o.length-16));return c.push(u),o.set(u,e.length),St(...c),o},decrypt(e){const{xk:t,authKey:r,counter:s,tagMask:a}=i(),o=[t,r,a,s];Lt(e)||o.push(e=Tt(e));const c=e.subarray(0,-16),u=e.subarray(-16),h=n(r,a,c);if(o.push(h),!Dt(h,u))throw Error("aes/gcm: invalid ghash tag");const l=hr(t,!1,s,c);return St(...o),l}}}));function gr(e){return e instanceof Uint32Array||ArrayBuffer.isView(e)&&"Uint32Array"===e.constructor.name}function wr(e,t){if(bt(t,16),!gr(e))throw Error("_encryptBlock accepts result of expandKeyLE");const r=Kt(t);let{s0:n,s1:i,s2:s,s3:a}=or(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}function Ar(e,t){if(bt(t,16),!gr(e))throw Error("_decryptBlock accepts result of expandKeyLE");const r=Kt(t);let{s0:n,s1:i,s2:s,s3:a}=cr(e,r[0],r[1],r[2],r[3]);return r[0]=n,r[1]=i,r[2]=s,r[3]=a,t}const mr={encrypt(e,t){if(t.length>=2**32)throw Error("plaintext should be less than 4gb");const r=nr(e);if(16===t.length)wr(r,t);else{const e=Kt(t);let n=e[0],i=e[1];for(let t=0,s=1;t<6;t++)for(let t=2;t<e.length;t+=2,s++){const{s0:a,s1:o,s2:c,s3:u}=or(r,n,i,e[t],e[t+1]);n=a,i=o^Xt(s),e[t]=c,e[t+1]=u}e[0]=n,e[1]=i}r.fill(0)},decrypt(e,t){if(t.length-8>=2**32)throw Error("ciphertext should be less than 4gb");const r=ir(e),n=t.length/8-1;if(1===n)Ar(r,t);else{const e=Kt(t);let i=e[0],s=e[1];for(let t=0,a=6*n;t<6;t++)for(let t=2*n;t>=1;t-=2,a--){s^=Xt(a);const{s0:n,s1:o,s2:c,s3:u}=cr(r,i,s,e[t],e[t+1]);i=n,s=o,e[t]=c,e[t+1]=u}e[0]=i,e[1]=s}r.fill(0)}},br=/* @__PURE__ */new Uint8Array(8).fill(166),kr=/* @__PURE__ */xt({blockSize:8},(e=>({encrypt(t){if(!t.length||t.length%8!=0)throw Error("invalid plaintext length");if(8===t.length)throw Error("8-byte keys not allowed in AESKW, use AESKWP instead");const r=function(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];bt(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}(br,t);return mr.encrypt(e,r),r},decrypt(t){if(t.length%8!=0||t.length<24)throw Error("invalid ciphertext length");const r=Tt(t);if(mr.decrypt(e,r),!Dt(r.subarray(0,8),br))throw Error("integrity check failed");return r.subarray(0,8).fill(0),r.subarray(8)}}))),Er={expandKeyLE:nr,expandKeyDecLE:ir,encrypt:or,decrypt:cr,encryptBlock:wr,decryptBlock:Ar,ctrCounter:ur,ctr32:hr};async function vr(e){switch(e){case L.symmetric.aes128:case L.symmetric.aes192:case L.symmetric.aes256:throw Error("Not a legacy cipher");case L.symmetric.cast5:case L.symmetric.blowfish:case L.symmetric.twofish:case L.symmetric.tripledes:{const{legacyCiphers:t}=await Promise.resolve().then((function(){return Hy})),r=L.read(L.symmetric,e),n=t.get(r);if(!n)throw Error("Unsupported cipher algorithm");return n}default:throw Error("Unsupported cipher algorithm")}}function Kr(e){switch(e){case L.symmetric.aes128:case L.symmetric.aes192:case L.symmetric.aes256:case L.symmetric.twofish:return 16;case L.symmetric.blowfish:case L.symmetric.cast5:case L.symmetric.tripledes:return 8;default:throw Error("Unsupported cipher")}}function Sr(e){switch(e){case L.symmetric.aes128:case L.symmetric.blowfish:case L.symmetric.cast5:return 16;case L.symmetric.aes192:case L.symmetric.tripledes:return 24;case L.symmetric.aes256:case L.symmetric.twofish:return 32;default:throw Error("Unsupported cipher")}}function Ir(e){return{keySize:Sr(e),blockSize:Kr(e)}}const Br=F.getWebCrypto();async function Cr(e,t,r){const{keySize:n}=Ir(e);if(!F.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");try{const e=await Br.importKey("raw",t,{name:"AES-KW"},!1,["wrapKey"]),n=await Br.importKey("raw",r,{name:"HMAC",hash:"SHA-256"},!0,["sign"]),i=await Br.wrapKey("raw",n,e,{name:"AES-KW"});return new Uint8Array(i)}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return kr(t).encrypt(r)}async function Ur(e,t,r){const{keySize:n}=Ir(e);if(!F.isAES(e)||t.length!==n)throw Error("Unexpected algorithm or key size");let i;try{i=await Br.importKey("raw",t,{name:"AES-KW"},!1,["unwrapKey"])}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;return F.printDebugError("Browser did not support operation: "+e.message),kr(t).decrypt(r)}try{const e=await Br.unwrapKey("raw",r,i,{name:"AES-KW"},{name:"HMAC",hash:"SHA-256"},!0,["sign"]);return new Uint8Array(await Br.exportKey("raw",e))}catch(e){if("OperationError"===e.name)throw Error("Key Data Integrity failed");throw e}}async function Pr(e,t,r,n,i){const s=F.getWebCrypto(),a=L.read(L.webHash,e);if(!a)throw Error("Hash algo not supported with HKDF");const o=await s.importKey("raw",t,"HKDF",!1,["deriveBits"]),c=await s.deriveBits({name:"HKDF",hash:a,salt:r,info:n},o,8*i);return new Uint8Array(c)}const Dr={x25519:F.encodeUTF8("OpenPGP X25519"),x448:F.encodeUTF8("OpenPGP X448")};async function xr(e){switch(e){case L.publicKey.x25519:try{const e=F.getWebCrypto(),t=await e.generateKey("X25519",!0,["deriveKey","deriveBits"]).catch((e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e})),r=await e.exportKey("jwk",t.privateKey),n=await e.exportKey("jwk",t.publicKey);if(r.x!==n.x){const e=Error("Unexpected mismatching public point");throw e.name="NotSupportedError",e}return{A:new Uint8Array(G(n.x)),k:G(r.d)}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:t}=await Promise.resolve().then((function(){return Iy})),{secretKey:r,publicKey:n}=t.box.keyPair();return{A:n,k:r}}case L.publicKey.x448:{const e=await F.getNobleCurve(L.publicKey.x448),{secretKey:t,publicKey:r}=e.keygen();return{A:r,k:t}}default:throw Error("Unsupported ECDH algorithm")}}async function Qr(e,t,r){switch(e){case L.publicKey.x25519:try{const{ephemeralPublicKey:n,sharedSecret:i}=await Rr(e,t),s=await Fr(e,n,t,r);return F.equalsUint8Array(i,s)}catch{return!1}case L.publicKey.x448:{const e=(await F.getNobleCurve(L.publicKey.x448)).getPublicKey(r);return F.equalsUint8Array(t,e)}default:return!1}}async function Mr(e,t,r){const{ephemeralPublicKey:n,sharedSecret:i}=await Rr(e,r),s=F.concatUint8Array([n,r,i]);switch(e){case L.publicKey.x25519:{const e=L.symmetric.aes128,{keySize:r}=Ir(e),i=await Pr(L.hash.sha256,s,new Uint8Array,Dr.x25519,r);return{ephemeralPublicKey:n,wrappedKey:await Cr(e,i,t)}}case L.publicKey.x448:{const e=L.symmetric.aes256,{keySize:r}=Ir(L.symmetric.aes256),i=await Pr(L.hash.sha512,s,new Uint8Array,Dr.x448,r);return{ephemeralPublicKey:n,wrappedKey:await Cr(e,i,t)}}default:throw Error("Unsupported ECDH algorithm")}}async function Lr(e,t,r,n,i){const s=await Fr(e,t,n,i),a=F.concatUint8Array([t,n,s]);switch(e){case L.publicKey.x25519:{const e=L.symmetric.aes128,{keySize:t}=Ir(e);return Ur(e,await Pr(L.hash.sha256,a,new Uint8Array,Dr.x25519,t),r)}case L.publicKey.x448:{const e=L.symmetric.aes256,{keySize:t}=Ir(L.symmetric.aes256);return Ur(e,await Pr(L.hash.sha512,a,new Uint8Array,Dr.x448,t),r)}default:throw Error("Unsupported ECDH algorithm")}}function Tr(e){switch(e){case L.publicKey.x25519:return 32;case L.publicKey.x448:return 56;default:throw Error("Unsupported ECDH algorithm")}}async function Rr(e,t){switch(e){case L.publicKey.x25519:try{const r=F.getWebCrypto(),n=await r.generateKey("X25519",!0,["deriveKey","deriveBits"]).catch((e=>{if("OperationError"===e.name){const e=Error("Unexpected key generation issue");throw e.name="NotSupportedError",e}throw e})),i=await r.exportKey("jwk",n.publicKey);if((await r.exportKey("jwk",n.privateKey)).x!==i.x){const e=Error("Unexpected mismatching public point");throw e.name="NotSupportedError",e}const s=Or(e,t),a=await r.importKey("jwk",s,"X25519",!1,[]),o=await r.deriveBits({name:"X25519",public:a},n.privateKey,8*Tr(e));return{sharedSecret:new Uint8Array(o),ephemeralPublicKey:new Uint8Array(G(i.x))}}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:r}=await Promise.resolve().then((function(){return Iy})),{secretKey:n,publicKey:i}=r.box.keyPair(),s=r.scalarMult(n,t);return Nr(s),{ephemeralPublicKey:i,sharedSecret:s}}case L.publicKey.x448:{const e=await F.getNobleCurve(L.publicKey.x448),{secretKey:r,publicKey:n}=e.keygen(),i=e.getSharedSecret(r,t);return Nr(i),{ephemeralPublicKey:n,sharedSecret:i}}default:throw Error("Unsupported ECDH algorithm")}}async function Fr(e,t,r,n){switch(e){case L.publicKey.x25519:try{const i=F.getWebCrypto(),s=function(e,t,r){if(e===L.publicKey.x25519){const n=Or(e,t);return n.d=q(r),n}throw Error("Unsupported ECDH algorithm")}(e,r,n),a=Or(e,t),o=await i.importKey("jwk",s,"X25519",!1,["deriveKey","deriveBits"]),c=await i.importKey("jwk",a,"X25519",!1,[]),u=await i.deriveBits({name:"X25519",public:c},o,8*Tr(e));return new Uint8Array(u)}catch(e){if("NotSupportedError"!==e.name)throw e;const{default:r}=await Promise.resolve().then((function(){return Iy})),i=r.scalarMult(n,t);return Nr(i),i}case L.publicKey.x448:{const e=(await F.getNobleCurve(L.publicKey.x448)).getSharedSecret(n,t);return Nr(e),e}default:throw Error("Unsupported ECDH algorithm")}}function Nr(e){let t=0;for(let r=0;r<e.length;r++)t|=e[r];if(0===t)throw Error("Unexpected low order point")}function Or(e,t){if(e===L.publicKey.x25519){return{kty:"OKP",crv:"X25519",x:q(t),ext:!0}}throw Error("Unsupported ECDH algorithm")}var Hr=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:Lr,encrypt:Mr,generate:xr,generateEphemeralEncryptionMaterial:Rr,getPayloadSize:Tr,recomputeSharedSecret:Fr,validateParams:Qr});const _r=F.getWebCrypto(),zr=F.getNodeCrypto(),Gr={[L.curve.nistP256]:"P-256",[L.curve.nistP384]:"P-384",[L.curve.nistP521]:"P-521"},qr=zr?zr.getCurves():[],jr=zr?{[L.curve.secp256k1]:qr.includes("secp256k1")?"secp256k1":void 0,[L.curve.nistP256]:qr.includes("prime256v1")?"prime256v1":void 0,[L.curve.nistP384]:qr.includes("secp384r1")?"secp384r1":void 0,[L.curve.nistP521]:qr.includes("secp521r1")?"secp521r1":void 0,[L.curve.ed25519Legacy]:qr.includes("ED25519")?"ED25519":void 0,[L.curve.curve25519Legacy]:qr.includes("X25519")?"X25519":void 0,[L.curve.brainpoolP256r1]:qr.includes("brainpoolP256r1")?"brainpoolP256r1":void 0,[L.curve.brainpoolP384r1]:qr.includes("brainpoolP384r1")?"brainpoolP384r1":void 0,[L.curve.brainpoolP512r1]:qr.includes("brainpoolP512r1")?"brainpoolP512r1":void 0}:{},Vr={[L.curve.nistP256]:{oid:[6,8,42,134,72,206,61,3,1,7],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:jr[L.curve.nistP256],web:Gr[L.curve.nistP256],payloadSize:32,sharedSize:256,wireFormatLeadingByte:4},[L.curve.nistP384]:{oid:[6,5,43,129,4,0,34],keyType:L.publicKey.ecdsa,hash:L.hash.sha384,cipher:L.symmetric.aes192,node:jr[L.curve.nistP384],web:Gr[L.curve.nistP384],payloadSize:48,sharedSize:384,wireFormatLeadingByte:4},[L.curve.nistP521]:{oid:[6,5,43,129,4,0,35],keyType:L.publicKey.ecdsa,hash:L.hash.sha512,cipher:L.symmetric.aes256,node:jr[L.curve.nistP521],web:Gr[L.curve.nistP521],payloadSize:66,sharedSize:528,wireFormatLeadingByte:4},[L.curve.secp256k1]:{oid:[6,5,43,129,4,0,10],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:jr[L.curve.secp256k1],payloadSize:32,wireFormatLeadingByte:4},[L.curve.ed25519Legacy]:{oid:[6,9,43,6,1,4,1,218,71,15,1],keyType:L.publicKey.eddsaLegacy,hash:L.hash.sha512,node:!1,payloadSize:32,wireFormatLeadingByte:64},[L.curve.curve25519Legacy]:{oid:[6,10,43,6,1,4,1,151,85,1,5,1],keyType:L.publicKey.ecdh,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:!1,payloadSize:32,wireFormatLeadingByte:64},[L.curve.brainpoolP256r1]:{oid:[6,9,43,36,3,3,2,8,1,1,7],keyType:L.publicKey.ecdsa,hash:L.hash.sha256,cipher:L.symmetric.aes128,node:jr[L.curve.brainpoolP256r1],payloadSize:32,wireFormatLeadingByte:4},[L.curve.brainpoolP384r1]:{oid:[6,9,43,36,3,3,2,8,1,1,11],keyType:L.publicKey.ecdsa,hash:L.hash.sha384,cipher:L.symmetric.aes192,node:jr[L.curve.brainpoolP384r1],payloadSize:48,wireFormatLeadingByte:4},[L.curve.brainpoolP512r1]:{oid:[6,9,43,36,3,3,2,8,1,1,13],keyType:L.publicKey.ecdsa,hash:L.hash.sha512,cipher:L.symmetric.aes256,node:jr[L.curve.brainpoolP512r1],payloadSize:64,wireFormatLeadingByte:4}};class Yr{constructor(e){try{this.name=e instanceof Xe?e.getName():L.write(L.curve,e)}catch{throw new at("Unknown curve")}const t=Vr[this.name];this.keyType=t.keyType,this.oid=t.oid,this.hash=t.hash,this.cipher=t.cipher,this.node=t.node,this.web=t.web,this.payloadSize=t.payloadSize,this.sharedSize=t.sharedSize,this.wireFormatLeadingByte=t.wireFormatLeadingByte,this.web&&F.getWebCrypto()?this.type="web":this.node&&F.getNodeCrypto()?this.type="node":this.name===L.curve.curve25519Legacy?this.type="curve25519Legacy":this.name===L.curve.ed25519Legacy&&(this.type="ed25519Legacy")}async genKeyPair(){switch(this.type){case"web":try{return await async function(e,t){const r=await _r.generateKey({name:"ECDSA",namedCurve:Gr[e]},!0,["sign","verify"]),n=await _r.exportKey("jwk",r.privateKey);return{publicKey:en(await _r.exportKey("jwk",r.publicKey),t),privateKey:G(n.d)}}(this.name,this.wireFormatLeadingByte)}catch(e){return F.printDebugError("Browser did not support generating ec key "+e.message),$r(this.name)}case"node":return function(e){const t=zr.createECDH(jr[e]);return t.generateKeys(),{publicKey:new Uint8Array(t.getPublicKey()),privateKey:new Uint8Array(t.getPrivateKey())}}(this.name);case"curve25519Legacy":{const{k:e,A:t}=await xr(L.publicKey.x25519),r=e.slice().reverse();r[0]=127&r[0]|64,r[31]&=248;return{publicKey:F.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:r}}case"ed25519Legacy":{const{seed:e,A:t}=await ht(L.publicKey.ed25519);return{publicKey:F.concatUint8Array([new Uint8Array([this.wireFormatLeadingByte]),t]),privateKey:e}}default:return $r(this.name)}}}async function Zr(e){const t=new Yr(e),{oid:r,hash:n,cipher:i}=t,s=await t.genKeyPair();return{oid:r,Q:s.publicKey,secret:F.leftPad(s.privateKey,t.payloadSize),hash:n,cipher:i}}function Jr(e){return Vr[e.getName()].hash}async function Wr(e,t,r,n){const i={[L.curve.nistP256]:!0,[L.curve.nistP384]:!0,[L.curve.nistP521]:!0,[L.curve.secp256k1]:!0,[L.curve.curve25519Legacy]:e===L.publicKey.ecdh,[L.curve.brainpoolP256r1]:!0,[L.curve.brainpoolP384r1]:!0,[L.curve.brainpoolP512r1]:!0},s=t.getName();if(!i[s])return!1;if(s===L.curve.curve25519Legacy){const e=n.slice().reverse();return!(r.length<1||64!==r[0])&&Qr(L.publicKey.x25519,r.subarray(1),e)}const a=(await F.getNobleCurve(L.publicKey.ecdsa,s)).getPublicKey(n,!1);return!!F.equalsUint8Array(a,r)}function Xr(e,t){const{payloadSize:r,wireFormatLeadingByte:n,name:i}=e,s=i===L.curve.curve25519Legacy||i===L.curve.ed25519Legacy?r:2*r;if(t[0]!==n||t.length!==s+1)throw Error("Invalid point encoding")}async function $r(e){const t=await F.getNobleCurve(L.publicKey.ecdsa,e),{secretKey:r}=t.keygen();return{publicKey:t.getPublicKey(r,!1),privateKey:r}}function en(e,t){const r=G(e.x),n=G(e.y),i=new Uint8Array(r.length+n.length+1);return i[0]=t,i.set(r,1),i.set(n,r.length+1),i}function tn(e,t,r){const n=e,i=r.slice(1,n+1),s=r.slice(n+1,2*n+1);return{kty:"EC",crv:t,x:q(i),y:q(s),ext:!0}}function rn(e,t,r,n){const i=tn(e,t,r);return i.d=q(n),i}const nn=F.getWebCrypto(),sn=F.getNodeCrypto();async function an(e,t,r,n,i,s){const a=new Yr(e);if(Xr(a,n),r&&!F.isStream(r)){const e={publicKey:n,privateKey:i};switch(a.type){case"web":try{return await async function(e,t,r,n){const i=e.payloadSize,s=rn(e.payloadSize,Gr[e.name],n.publicKey,n.privateKey),a=await nn.importKey("jwk",s,{name:"ECDSA",namedCurve:Gr[e.name],hash:{name:L.read(L.webHash,e.hash)}},!1,["sign"]),o=new Uint8Array(await nn.sign({name:"ECDSA",namedCurve:Gr[e.name],hash:{name:L.read(L.webHash,t)}},a,r));return{r:o.slice(0,i),s:o.slice(i,i<<1)}}(a,t,r,e)}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;F.printDebugError("Browser did not support signing: "+e.message)}break;case"node":return function(e,t,r,n){const i=F.nodeRequire("eckey-utils"),s=F.getNodeBuffer(),{privateKey:a}=i.generateDer({curveName:jr[e.name],privateKey:s.from(n)}),o=sn.createSign(L.read(L.hash,t));o.write(r),o.end();const c=new Uint8Array(o.sign({key:a,format:"der",type:"sec1",dsaEncoding:"ieee-p1363"})),u=e.payloadSize;return{r:c.subarray(0,u),s:c.subarray(u,u<<1)}}(a,t,r,i)}}const o=(await F.getNobleCurve(L.publicKey.ecdsa,a.name)).sign(s,i,{lowS:!1});return{r:fe(o.r,"be",a.payloadSize),s:fe(o.s,"be",a.payloadSize)}}async function on(e,t,r,n,i,s){const a=new Yr(e);Xr(a,i);const o=async()=>0===s[0]&&cn(a,r,s.subarray(1),i);if(n&&!F.isStream(n))switch(a.type){case"web":try{const e=await async function(e,t,{r,s:n},i,s){const a=tn(e.payloadSize,Gr[e.name],s),o=await nn.importKey("jwk",a,{name:"ECDSA",namedCurve:Gr[e.name],hash:{name:L.read(L.webHash,e.hash)}},!1,["verify"]),c=F.concatUint8Array([r,n]).buffer;return nn.verify({name:"ECDSA",namedCurve:Gr[e.name],hash:{name:L.read(L.webHash,t)}},o,c,i)}(a,t,r,n,i);return e||o()}catch(e){if("nistP521"!==a.name&&("DataError"===e.name||"OperationError"===e.name))throw e;F.printDebugError("Browser did not support verifying: "+e.message)}break;case"node":{const e=function(e,t,{r,s:n},i,s){const a=F.nodeRequire("eckey-utils"),o=F.getNodeBuffer(),{publicKey:c}=a.generateDer({curveName:jr[e.name],publicKey:o.from(s)}),u=sn.createVerify(L.read(L.hash,t));u.write(i),u.end();const h=F.concatUint8Array([r,n]);try{return u.verify({key:c,format:"der",type:"spki",dsaEncoding:"ieee-p1363"},h)}catch{return!1}}(a,t,r,n,i);return e||o()}}return await cn(a,r,s,i)||o()}async function cn(e,t,r,n){return(await F.getNobleCurve(L.publicKey.ecdsa,e.name)).verify(F.concatUint8Array([t.r,t.s]),r,n,{lowS:!1})}var un=/*#__PURE__*/Object.freeze({__proto__:null,sign:an,validateParams:async function(e,t,r){const n=new Yr(e);if(n.keyType!==L.publicKey.ecdsa)return!1;switch(n.type){case"web":case"node":{const n=de(8),i=L.hash.sha256,s=await Me(i,n);try{const a=await an(e,i,n,t,r,s);return await on(e,i,a,n,t,s)}catch{return!1}}default:return Wr(L.publicKey.ecdsa,e,t,r)}},verify:on});async function hn(e,t,r,n,i,s){Xr(new Yr(e),n);const{RS:a}=await lt(L.publicKey.ed25519,0,0,n.subarray(1),i,s);return{r:a.subarray(0,32),s:a.subarray(32)}}async function ln(e,t,{r,s:n},i,s,a){Xr(new Yr(e),s);const o=F.concatUint8Array([r,n]);return ft(L.publicKey.ed25519,0,{RS:o},0,s.subarray(1),a)}async function fn(e,t,r){return e.getName()===L.curve.ed25519Legacy&&(!(t.length<1||64!==t[0])&&yt(L.publicKey.ed25519,t.subarray(1),r))}var yn=/*#__PURE__*/Object.freeze({__proto__:null,sign:hn,validateParams:fn,verify:ln});function dn(e){const t=e.length;if(t>0){const r=e[t-1];if(r>=1){const n=e.subarray(t-r),i=new Uint8Array(r).fill(r);if(F.equalsUint8Array(n,i))return e.subarray(0,t-r)}}throw Error("Invalid padding")}function pn(e,t,r,n){return F.concatUint8Array([t.write(),new Uint8Array([e]),r.write(!0),F.stringToUint8Array("Anonymous Sender    "),r.replacementFingerprint||n])}async function gn(e,t,r,n,i=!1,s=!1){let a;if(i){for(a=0;a<t.length&&0===t[a];a++);t=t.subarray(a)}if(s){for(a=t.length-1;a>=0&&0===t[a];a--);t=t.subarray(0,a+1)}return(await Me(e,F.concatUint8Array([new Uint8Array([0,0,0,1]),t,n]))).subarray(0,r)}async function wn(e,t){switch(e.type){case"curve25519Legacy":{const{sharedSecret:r,ephemeralPublicKey:n}=await Rr(L.publicKey.x25519,t.subarray(1));return{publicKey:F.concatUint8Array([new Uint8Array([e.wireFormatLeadingByte]),n]),sharedKey:r}}case"web":if(e.web&&F.getWebCrypto())try{return await async function(e,t){const r=F.getWebCrypto(),n=tn(e.payloadSize,e.web,t);let i=r.generateKey({name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]),s=r.importKey("jwk",n,{name:"ECDH",namedCurve:e.web},!1,[]);[i,s]=await Promise.all([i,s]);let a=r.deriveBits({name:"ECDH",namedCurve:e.web,public:s},i.privateKey,e.sharedSize),o=r.exportKey("jwk",i.publicKey);[a,o]=await Promise.all([a,o]);const c=new Uint8Array(a),u=new Uint8Array(en(o,e.wireFormatLeadingByte));return{publicKey:u,sharedKey:c}}(e,t)}catch(r){return F.printDebugError(r),En(e,t)}break;case"node":return function(e,t){const r=F.getNodeCrypto(),n=r.createECDH(e.node);n.generateKeys();const i=new Uint8Array(n.computeSecret(t));return{publicKey:new Uint8Array(n.getPublicKey()),sharedKey:i}}(e,t);default:return En(e,t)}}async function An(e,t,r,n,i){const s=function(e){const t=8-e.length%8,r=new Uint8Array(e.length+t).fill(t);return r.set(e),r}(r),a=new Yr(e);Xr(a,n);const{publicKey:o,sharedKey:c}=await wn(a,n),u=pn(L.publicKey.ecdh,e,t,i),{keySize:h}=Ir(t.cipher),l=await gn(t.hash,c,h,u);return{publicKey:o,wrappedKey:await Cr(t.cipher,l,s)}}async function mn(e,t,r,n){if(n.length!==e.payloadSize){const t=new Uint8Array(e.payloadSize);t.set(n,e.payloadSize-n.length),n=t}switch(e.type){case"curve25519Legacy":{const e=n.slice().reverse();return{secretKey:e,sharedKey:await Fr(L.publicKey.x25519,t.subarray(1),r.subarray(1),e)}}case"web":if(e.web&&F.getWebCrypto())try{return await async function(e,t,r,n){const i=F.getWebCrypto(),s=rn(e.payloadSize,e.web,r,n);let a=i.importKey("jwk",s,{name:"ECDH",namedCurve:e.web},!0,["deriveKey","deriveBits"]);const o=tn(e.payloadSize,e.web,t);let c=i.importKey("jwk",o,{name:"ECDH",namedCurve:e.web},!0,[]);[a,c]=await Promise.all([a,c]);let u=i.deriveBits({name:"ECDH",namedCurve:e.web,public:c},a,e.sharedSize),h=i.exportKey("jwk",a);[u,h]=await Promise.all([u,h]);const l=new Uint8Array(u);return{secretKey:G(h.d),sharedKey:l}}(e,t,r,n)}catch(r){return F.printDebugError(r),kn(e,t,n)}break;case"node":return function(e,t,r){const n=F.getNodeCrypto(),i=n.createECDH(e.node);i.setPrivateKey(r);const s=new Uint8Array(i.computeSecret(t));return{secretKey:new Uint8Array(i.getPrivateKey()),sharedKey:s}}(e,t,n);default:return kn(e,t,n)}}async function bn(e,t,r,n,i,s,a){const o=new Yr(e);Xr(o,i),Xr(o,r);const{sharedKey:c}=await mn(o,r,i,s),u=pn(L.publicKey.ecdh,e,t,a),{keySize:h}=Ir(t.cipher);let l;for(let e=0;e<3;e++)try{const r=await gn(t.hash,c,h,u,1===e,2===e);return dn(await Ur(t.cipher,r,n))}catch(e){l=e}throw l}async function kn(e,t,r){return{secretKey:r,sharedKey:(await F.getNobleCurve(L.publicKey.ecdh,e.name)).getSharedSecret(r,t).subarray(1)}}async function En(e,t){const r=await F.getNobleCurve(L.publicKey.ecdh,e.name),{publicKey:n,privateKey:i}=await e.genKeyPair();return{publicKey:n,sharedKey:r.getSharedSecret(i,t).subarray(1)}}var vn=/*#__PURE__*/Object.freeze({__proto__:null,decrypt:bn,encrypt:An,validateParams:async function(e,t,r){return Wr(L.publicKey.ecdh,e,t,r)}}),Kn=/*#__PURE__*/Object.freeze({__proto__:null,CurveWithOID:Yr,ecdh:vn,ecdhX:Hr,ecdsa:un,eddsa:At,eddsaLegacy:yn,generate:Zr,getPreferredHashAlgo:Jr});const Sn=BigInt(0),In=BigInt(1);const Bn=new Set([L.hash.sha1,L.hash.sha256,L.hash.sha512]),Cn=F.getWebCrypto(),Un=F.getNodeCrypto();async function Pn(e,t){if(e===L.publicKey.pqc_mlkem_x25519){const{ml_kem768:e}=await Promise.resolve().then((function(){return dp})),{publicKey:r,secretKey:n}=e.keygen(t);return{mlkemPublicKey:r,mlkemSecretKey:n}}throw Error("Unsupported KEM algorithm")}async function Dn(e){const{eccPublicKey:t,eccSecretKey:r}=await async function(e){if(e===L.publicKey.pqc_mlkem_x25519){const{A:e,k:t}=await xr(L.publicKey.x25519);return{eccPublicKey:e,eccSecretKey:t}}throw Error("Unsupported KEM algorithm")}(e),{mlkemPublicKey:n,mlkemSeed:i,mlkemSecretKey:s}=await async function(e){if(e===L.publicKey.pqc_mlkem_x25519){const t=de(64),{mlkemSecretKey:r,mlkemPublicKey:n}=await Pn(e,t);return{mlkemSeed:t,mlkemSecretKey:r,mlkemPublicKey:n}}throw Error("Unsupported KEM algorithm")}(e);return{eccPublicKey:t,eccSecretKey:r,mlkemPublicKey:n,mlkemSeed:i,mlkemSecretKey:s}}async function xn(e,t,r,n){const{eccKeyShare:i,eccCipherText:s}=await async function(e,t){if(e===L.publicKey.pqc_mlkem_x25519){const{ephemeralPublicKey:e,sharedSecret:r}=await Rr(L.publicKey.x25519,t);return{eccCipherText:e,eccKeyShare:r}}throw Error("Unsupported KEM algorithm")}(e,t),{mlkemKeyShare:a,mlkemCipherText:o}=await async function(e,t){if(e===L.publicKey.pqc_mlkem_x25519){const{ml_kem768:e}=await Promise.resolve().then((function(){return dp})),{cipherText:r,sharedSecret:n}=e.encapsulate(t);return{mlkemCipherText:r,mlkemKeyShare:n}}throw Error("Unsupported KEM algorithm")}(e,r),c=await Mn(e,a,i,s,t);return{eccCipherText:s,mlkemCipherText:o,wrappedKey:await Cr(L.symmetric.aes256,c,n)}}async function Qn(e,t,r,n,i,s,a,o){const c=await async function(e,t,r,n){if(e===L.publicKey.pqc_mlkem_x25519)return await Fr(L.publicKey.x25519,t,n,r);throw Error("Unsupported KEM algorithm")}(e,t,n,i),u=await async function(e,t,r){if(e===L.publicKey.pqc_mlkem_x25519){const{ml_kem768:e}=await Promise.resolve().then((function(){return dp}));return e.decapsulate(t,r)}throw Error("Unsupported KEM algorithm")}(e,r,s),h=await Mn(e,u,c,t,i);return await Ur(L.symmetric.aes256,h,o)}async function Mn(e,t,r,n,i){const s=F.encodeUTF8("OpenPGPCompositeKDFv1"),a=F.concatUint8Array([t,r,n,i,new Uint8Array([e]),s,new Uint8Array([s.length])]);return await Me(L.hash.sha3_256,a)}async function Ln(e,t,r,n,i){const s=async function(e,t,r){if(e===L.publicKey.pqc_mlkem_x25519)return Qr(L.publicKey.x25519,t,r);throw Error("Unsupported KEM algorithm")}(e,t,r),a=async function(e,t,r){if(e===L.publicKey.pqc_mlkem_x25519){const{mlkemPublicKey:n}=await Pn(e,r);return F.equalsUint8Array(t,n)}throw Error("Unsupported KEM algorithm")}(e,n,i);return await s&&await a}async function Tn(e,t){if(e===L.publicKey.pqc_mldsa_ed25519){const{ml_dsa65:e}=await Promise.resolve().then((function(){return dp})),{secretKey:r,publicKey:n}=e.keygen(t);return{mldsaSecretKey:r,mldsaPublicKey:n}}throw Error("Unsupported signature algorithm")}async function Rn(e){if(e===L.publicKey.pqc_mldsa_ed25519){const{eccSecretKey:t,eccPublicKey:r}=await async function(e){if(e===L.publicKey.pqc_mldsa_ed25519){const{A:e,seed:t}=await ht(L.publicKey.ed25519);return{eccPublicKey:e,eccSecretKey:t}}throw Error("Unsupported signature algorithm")}(e),{mldsaSeed:n,mldsaSecretKey:i,mldsaPublicKey:s}=await async function(e){if(e===L.publicKey.pqc_mldsa_ed25519){const t=de(32),{mldsaSecretKey:r,mldsaPublicKey:n}=await Tn(e,t);return{mldsaSeed:t,mldsaSecretKey:r,mldsaPublicKey:n}}throw Error("Unsupported signature algorithm")}(e);return{eccSecretKey:t,eccPublicKey:r,mldsaSeed:n,mldsaSecretKey:i,mldsaPublicKey:s}}throw Error("Unsupported signature algorithm")}async function Fn(e,t,r,n,i,s){if(e===L.publicKey.pqc_mldsa_ed25519){const{eccSignature:t}=await async function(e,t,r,n,i){if(e===L.publicKey.pqc_mldsa_ed25519){const{RS:e}=await lt(L.publicKey.ed25519,0,0,n,r,i);return{eccSignature:e}}throw Error("Unsupported signature algorithm")}(e,0,r,n,s),{mldsaSignature:a}=await async function(e,t,r){if(e===L.publicKey.pqc_mldsa_ed25519){const{ml_dsa65:e}=await Promise.resolve().then((function(){return dp}));return{mldsaSignature:e.sign(t,r)}}throw Error("Unsupported signature algorithm")}(e,i,s);return{eccSignature:t,mldsaSignature:a}}throw Error("Unsupported signature algorithm")}async function Nn(e,t,r,n,i,{eccSignature:s,mldsaSignature:a}){if(e===L.publicKey.pqc_mldsa_ed25519){const t=async function(e,t,r,n,i){if(e===L.publicKey.pqc_mldsa_ed25519)return ft(L.publicKey.ed25519,0,{RS:i},0,r,n);throw Error("Unsupported signature algorithm")}(e,0,r,i,s),o=async function(e,t,r,n){if(e===L.publicKey.pqc_mldsa_ed25519){const{ml_dsa65:e}=await Promise.resolve().then((function(){return dp}));return e.verify(t,r,n)}throw Error("Unsupported signature algorithm")}(e,n,i,a);return await t&&await o}throw Error("Unsupported signature algorithm")}function On(e,t){if(e===L.publicKey.pqc_mldsa_ed25519)return Le(t)>=32;throw Error("Unsupported signature algorithm")}async function Hn(e,t,r,n,i){const s=async function(e,t,r){if(e===L.publicKey.pqc_mldsa_ed25519)return yt(L.publicKey.ed25519,t,r);throw Error("Unsupported signature algorithm")}(e,t,r),a=async function(e,t,r){if(e===L.publicKey.pqc_mldsa_ed25519){const{mldsaPublicKey:n}=await Tn(e,r);return F.equalsUint8Array(t,n)}throw Error("Unsupported signature algorithm")}(e,n,i);return await s&&await a}class _n{constructor(e){e&&(this.data=e)}read(e){if(e.length>=1){const t=e[0];if(e.length>=1+t)return this.data=e.subarray(1,1+t),1+this.data.length}throw Error("Invalid symmetric key")}write(){return F.concatUint8Array([new Uint8Array([this.data.length]),this.data])}}class zn{constructor(e){if(void 0===e&&(e=new Uint8Array([])),!F.isUint8Array(e))throw Error("data must be in the form of a Uint8Array");this.data=e,this.length=this.data.byteLength}write(){return F.concatUint8Array([new Uint8Array([this.length]),this.data])}read(e){if(e.length>=1){const t=e[0];if(e.length>=t+1)return this.data=e.subarray(1,1+t),this.length=t,1+t}throw Error("Invalid octet string")}}class Gn{constructor(e){if(e){const{version:t,hash:r,cipher:n,replacementFingerprint:i}=e;this.version=t||1,this.hash=r,this.cipher=n,this.replacementFingerprint=i}else this.version=null,this.hash=null,this.cipher=null,this.replacementFingerprint=null}read(e){if(e.length<4||1!==e[1]&&255!==e[1])throw new at("Cannot read KDFParams");const t=e[0];this.version=e[1],this.hash=e[2],this.cipher=e[3];let r=4;if(255===this.version){const n=t-r+1;this.replacementFingerprint=e.slice(r,r+n),r+=n}return r}write(e){if(!this.version||1===this.version||e)return new Uint8Array([3,1,this.hash,this.cipher]);return F.concatUint8Array([new Uint8Array([3+this.replacementFingerprint.length,this.version,this.hash,this.cipher]),this.replacementFingerprint])}}const qn=e=>class{constructor(e){this.data=void 0===e?null:e}read(t){const r=t[0];return this.data=L.write(e,r),1}write(){return new Uint8Array([this.data])}getName(){return L.read(e,this.data)}getValue(){return this.data}},jn=qn(L.aead),Vn=qn(L.symmetric),Yn=qn(L.hash);class Zn{static fromObject({wrappedKey:e,algorithm:t}){const r=new Zn;return r.wrappedKey=e,r.algorithm=t,r}read(e){let t=0,r=e[t++];this.algorithm=r%2?e[t++]:null,r-=r%2,this.wrappedKey=F.readExactSubarray(e,t,t+r),t+=r}write(){return F.concatUint8Array([this.algorithm?new Uint8Array([this.wrappedKey.length+1,this.algorithm]):new Uint8Array([this.wrappedKey.length]),this.wrappedKey])}}const Jn=F.getWebCrypto(),Wn=F.getNodeCrypto(),Xn=Wn?Wn.getCiphers():[],$n={idea:Xn.includes("idea-cfb")?"idea-cfb":void 0,tripledes:Xn.includes("des-ede3-cfb")?"des-ede3-cfb":void 0,cast5:Xn.includes("cast5-cfb")?"cast5-cfb":void 0,blowfish:Xn.includes("bf-cfb")?"bf-cfb":void 0,aes128:Xn.includes("aes-128-cfb")?"aes-128-cfb":void 0,aes192:Xn.includes("aes-192-cfb")?"aes-192-cfb":void 0,aes256:Xn.includes("aes-256-cfb")?"aes-256-cfb":void 0};function ei(e){const{blockSize:t}=Ir(e),r=de(t),n=new Uint8Array([r[r.length-2],r[r.length-1]]);return F.concat([r,n])}async function ti(e,t,r,n,i){const s=L.read(L.symmetric,e);if(F.getNodeCrypto()&&$n[s])return function(e,t,r,n){const i=L.read(L.symmetric,e),s=new Wn.createCipheriv($n[i],t,n);return b(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,n);if(F.isAES(e))return async function(e,t,r,n){if(Jn&&await ni.isSupported(e)){const i=new ni(e,t,n);return F.isStream(r)?k(r,(e=>i.encryptChunk(e)),(()=>i.finish())):i.encrypt(r)}if(F.isStream(r)){const i=new ii(!0,e,t,n);return k(r,(e=>i.processChunk(e)),(()=>i.finish()))}return yr(t,n).encrypt(r)}(e,t,r,n);const a=new(await vr(e))(t),o=a.blockSize,c=n.slice();let u=new Uint8Array;const h=e=>{e&&(u=F.concatUint8Array([u,e]));const t=new Uint8Array(u.length);let r,n=0;for(;e?u.length>=o:u.length;){const e=a.encrypt(c);for(r=0;r<o;r++)c[r]=u[r]^e[r],t[n++]=c[r];u=u.subarray(o)}return t.subarray(0,n)};return b(r,h,h)}async function ri(e,t,r,n){const i=L.read(L.symmetric,e);if(Wn&&$n[i])return function(e,t,r,n){const i=L.read(L.symmetric,e),s=new Wn.createDecipheriv($n[i],t,n);return b(r,(e=>new Uint8Array(s.update(e))))}(e,t,r,n);if(F.isAES(e))return function(e,t,r,n){if(F.isStream(r)){const i=new ii(!1,e,t,n);return k(r,(e=>i.processChunk(e)),(()=>i.finish()))}return yr(t,n).decrypt(r)}(e,t,r,n);const s=new(await vr(e))(t),a=s.blockSize;let o=n,c=new Uint8Array;const u=e=>{e&&(c=F.concatUint8Array([c,e]));const t=new Uint8Array(c.length);let r,n=0;for(;e?c.length>=a:c.length;){const e=s.encrypt(o);for(o=c.subarray(0,a),r=0;r<a;r++)t[n++]=o[r]^e[r];c=c.subarray(a)}return t.subarray(0,n)};return b(r,u,u)}class ni{constructor(e,t,r){const{blockSize:n}=Ir(e);this.key=t,this.prevBlock=r,this.nextBlock=new Uint8Array(n),this.i=0,this.blockSize=n,this.zeroBlock=new Uint8Array(this.blockSize)}static isSupported(e){const{keySize:t}=Ir(e);return Jn.importKey("raw",new Uint8Array(t),"aes-cbc",!1,["encrypt"]).then((()=>!0),(()=>!1))}async _runCBC(e,t){const r="AES-CBC";this.keyRef=this.keyRef||await Jn.importKey("raw",this.key,r,!1,["encrypt"]);const n=await Jn.encrypt({name:r,iv:t||this.zeroBlock},this.keyRef,e);return new Uint8Array(n).subarray(0,e.length)}async encryptChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=F.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=F.concatUint8Array([this.prevBlock,n.subarray(0,n.length-this.blockSize)]),s=await this._runCBC(i);return si(s,n),this.prevBlock=s.slice(-this.blockSize),r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,s}let n;if(this.i+=r.length,this.i===this.nextBlock.length){const t=this.nextBlock;n=await this._runCBC(this.prevBlock),si(n,t),this.prevBlock=n.slice(),this.i=0;const i=e.subarray(r.length);this.nextBlock.set(i,this.i),this.i+=i.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{this.nextBlock=this.nextBlock.subarray(0,this.i);const t=this.nextBlock,r=await this._runCBC(this.prevBlock);si(r,t),e=r.subarray(0,t.length)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.keyRef=null,this.key=null}async encrypt(e){const t=(await this._runCBC(F.concatUint8Array([new Uint8Array(this.blockSize),e]),this.iv)).subarray(0,e.length);return si(t,e),this.clearSensitiveData(),t}}class ii{constructor(e,t,r,n){this.forEncryption=e;const{blockSize:i}=Ir(t);this.key=Er.expandKeyLE(r),n.byteOffset%4!=0&&(n=n.slice()),this.prevBlock=ai(n),this.nextBlock=new Uint8Array(i),this.i=0,this.blockSize=i}_runCFB(e){const t=ai(e),r=new Uint8Array(e.length),n=ai(r);for(let e=0;e+4<=n.length;e+=4){const{s0:r,s1:i,s2:s,s3:a}=Er.encrypt(this.key,this.prevBlock[0],this.prevBlock[1],this.prevBlock[2],this.prevBlock[3]);n[e+0]=t[e+0]^r,n[e+1]=t[e+1]^i,n[e+2]=t[e+2]^s,n[e+3]=t[e+3]^a,this.prevBlock=(this.forEncryption?n:t).slice(e,e+4)}return r}async processChunk(e){const t=this.nextBlock.length-this.i,r=e.subarray(0,t);if(this.nextBlock.set(r,this.i),this.i+e.length>=2*this.blockSize){const r=(e.length-t)%this.blockSize,n=F.concatUint8Array([this.nextBlock,e.subarray(t,e.length-r)]),i=this._runCFB(n);return r>0&&this.nextBlock.set(e.subarray(-r)),this.i=r,i}let n;if(this.i+=r.length,this.i===this.nextBlock.length){n=this._runCFB(this.nextBlock),this.i=0;const t=e.subarray(r.length);this.nextBlock.set(t,this.i),this.i+=t.length}else n=new Uint8Array;return n}async finish(){let e;if(0===this.i)e=new Uint8Array;else{e=this._runCFB(this.nextBlock).subarray(0,this.i)}return this.clearSensitiveData(),e}clearSensitiveData(){this.nextBlock.fill(0),this.prevBlock.fill(0),this.key.fill(0)}}function si(e,t){const r=Math.min(e.length,t.length);for(let n=0;n<r;n++)e[n]=e[n]^t[n]}const ai=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4));const oi=F.getWebCrypto(),ci=F.getNodeCrypto(),ui=16;function hi(e,t){const r=e.length-ui;for(let n=0;n<ui;n++)e[n+r]^=t[n];return e}const li=new Uint8Array(ui);async function fi(e){const t=await yi(e),r=F.double(await t(li)),n=F.double(r);return async function(e){return(await t(function(e,t,r){if(e.length&&e.length%ui==0)return hi(e,t);const n=new Uint8Array(e.length+(ui-e.length%ui));return n.set(e),n[e.length]=128,hi(n,r)}(e,r,n))).subarray(-16)}}async function yi(e){if(F.getNodeCrypto())return async function(t){const r=new ci.createCipheriv("aes-"+8*e.length+"-cbc",e,li).update(t);return new Uint8Array(r)};if(F.getWebCrypto())try{return e=await oi.importKey("raw",e,{name:"AES-CBC",length:8*e.length},!1,["encrypt"]),async function(t){const r=await oi.encrypt({name:"AES-CBC",iv:li,length:128},e,t);return new Uint8Array(r).subarray(0,r.byteLength-ui)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return async function(t){return fr(e,li,{disablePadding:!0}).encrypt(t)}}const di=F.getWebCrypto(),pi=F.getNodeCrypto(),gi=F.getNodeBuffer(),wi=16,Ai=wi,mi=new Uint8Array(wi),bi=new Uint8Array(wi);bi[15]=1;const ki=new Uint8Array(wi);async function Ei(e){const t=await fi(e);return function(e,r){return t(F.concatUint8Array([e,r]))}}async function vi(e){if(F.getNodeCrypto())return async function(t,r){const n=new pi.createCipheriv("aes-"+8*e.length+"-ctr",e,r),i=gi.concat([n.update(t),n.final()]);return new Uint8Array(i)};if(F.getWebCrypto())try{const t=await di.importKey("raw",e,{name:"AES-CTR",length:8*e.length},!1,["encrypt"]);return async function(e,r){const n=await di.encrypt({name:"AES-CTR",counter:r,length:128},t,e);return new Uint8Array(n)}}catch(t){if("NotSupportedError"!==t.name&&(24!==e.length||"OperationError"!==t.name))throw t;F.printDebugError("Browser did not support operation: "+t.message)}return async function(t,r){return lr(e,r).encrypt(t)}}async function Ki(e,t){if(e!==L.symmetric.aes128&&e!==L.symmetric.aes192&&e!==L.symmetric.aes256)throw Error("EAX mode supports only AES cipher");const[r,n]=await Promise.all([Ei(t),vi(t)]);return{encrypt:async function(e,t,i){const[s,a]=await Promise.all([r(mi,t),r(bi,i)]),o=await n(e,s),c=await r(ki,o);for(let e=0;e<Ai;e++)c[e]^=a[e]^s[e];return F.concatUint8Array([o,c])},decrypt:async function(e,t,i){if(e.length<Ai)throw Error("Invalid EAX ciphertext");const s=e.subarray(0,-16),a=e.subarray(-16),[o,c,u]=await Promise.all([r(mi,t),r(bi,i),r(ki,s)]),h=u;for(let e=0;e<Ai;e++)h[e]^=c[e]^o[e];if(!F.equalsUint8Array(a,h))throw Error("Authentication tag mismatch");return await n(s,o)}}}ki[15]=2,Ki.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[8+e]^=t[e];return r},Ki.blockLength=wi,Ki.ivLength=16,Ki.tagLength=Ai;const Si=16,Ii=16;function Bi(e){let t=0;for(let r=1;!(e&r);r<<=1)t++;return t}function Ci(e,t){for(let r=0;r<e.length;r++)e[r]^=t[r];return e}function Ui(e,t){return Ci(e.slice(),t)}const Pi=new Uint8Array(Si),Di=new Uint8Array([1]);async function xi(e,t){const{keySize:r}=Ir(e);if(!F.isAES(e)||t.length!==r)throw Error("Unexpected algorithm or key size");let n=0;const i=e=>fr(t,Pi,{disablePadding:!0}).encrypt(e),s=e=>fr(t,Pi,{disablePadding:!0}).decrypt(e);let a;function o(e,t,r,s){const o=t.length/Si|0;!function(e,t){const r=F.nbits(Math.max(e.length,t.length)/Si|0)-1;for(let e=n+1;e<=r;e++)a[e]=F.double(a[e-1]);n=r}(t,s);const c=F.concatUint8Array([Pi.subarray(0,15-r.length),Di,r]),u=63&c[15];c[15]&=192;const h=i(c),l=F.concatUint8Array([h,Ui(h.subarray(0,8),h.subarray(1,9))]),f=F.shiftRight(l.subarray(0+(u>>3),17+(u>>3)),8-(7&u)).subarray(1),y=new Uint8Array(Si),d=new Uint8Array(t.length+Ii);let p,g=0;for(p=0;p<o;p++)Ci(f,a[Bi(p+1)]),d.set(Ci(e(Ui(f,t)),f),g),Ci(y,e===i?t:d.subarray(g)),t=t.subarray(Si),g+=Si;if(t.length){Ci(f,a.x);const r=i(f);d.set(Ui(t,r),g);const n=new Uint8Array(Si);n.set(e===i?t:d.subarray(g,-16),0),n[t.length]=128,Ci(y,n),g+=t.length}const w=Ci(i(Ci(Ci(y,f),a.$)),function(e){if(!e.length)return Pi;const t=e.length/Si|0,r=new Uint8Array(Si),n=new Uint8Array(Si);for(let s=0;s<t;s++)Ci(r,a[Bi(s+1)]),Ci(n,i(Ui(r,e))),e=e.subarray(Si);if(e.length){Ci(r,a.x);const t=new Uint8Array(Si);t.set(e,0),t[e.length]=128,Ci(t,r),Ci(n,i(t))}return n}(s));return d.set(w,g),d}return function(){const e=i(Pi),t=F.double(e);a=[],a[0]=F.double(t),a.x=e,a.$=t}(),{encrypt:async function(e,t,r){return o(i,e,t,r)},decrypt:async function(e,t,r){if(e.length<Ii)throw Error("Invalid OCB ciphertext");const n=e.subarray(-16);e=e.subarray(0,-16);const i=o(s,e,t,r);if(F.equalsUint8Array(n,i.subarray(-16)))return i.subarray(0,-16);throw Error("Authentication tag mismatch")}}}xi.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[7+e]^=t[e];return r},xi.blockLength=Si,xi.ivLength=15,xi.tagLength=Ii;const Qi=F.getWebCrypto(),Mi=F.getNodeCrypto(),Li=F.getNodeBuffer(),Ti=16,Ri="AES-GCM";async function Fi(e,t){if(e!==L.symmetric.aes128&&e!==L.symmetric.aes192&&e!==L.symmetric.aes256)throw Error("GCM mode supports only AES cipher");if(F.getNodeCrypto())return{encrypt:async function(e,r,n=new Uint8Array){const i=new Mi.createCipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n);const s=Li.concat([i.update(e),i.final(),i.getAuthTag()]);return new Uint8Array(s)},decrypt:async function(e,r,n=new Uint8Array){const i=new Mi.createDecipheriv("aes-"+8*t.length+"-gcm",t,r);i.setAAD(n),i.setAuthTag(e.slice(e.length-Ti,e.length));const s=Li.concat([i.update(e.slice(0,e.length-Ti)),i.final()]);return new Uint8Array(s)}};if(F.getWebCrypto())try{const e=await Qi.importKey("raw",t,{name:Ri},!1,["encrypt","decrypt"]),r=navigator.userAgent.match(/Version\/13\.\d(\.\d)* Safari/)||navigator.userAgent.match(/Version\/(13|14)\.\d(\.\d)* Mobile\/\S* Safari/);return{encrypt:async function(n,i,s=new Uint8Array){if(r&&!n.length)return pr(t,i,s).encrypt(n);const a=await Qi.encrypt({name:Ri,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(a)},decrypt:async function(n,i,s=new Uint8Array){if(r&&n.length===Ti)return pr(t,i,s).decrypt(n);try{const t=await Qi.decrypt({name:Ri,iv:i,additionalData:s,tagLength:128},e,n);return new Uint8Array(t)}catch(e){if("OperationError"===e.name)throw Error("Authentication tag mismatch")}}}}catch(e){if("NotSupportedError"!==e.name&&(24!==t.length||"OperationError"!==e.name))throw e;F.printDebugError("Browser did not support operation: "+e.message)}return{encrypt:async function(e,r,n){return pr(t,r,n).encrypt(e)},decrypt:async function(e,r,n){return pr(t,r,n).decrypt(e)}}}function Ni(e,t=!1){switch(e){case L.aead.eax:return Ki;case L.aead.ocb:return xi;case L.aead.gcm:return Fi;case L.aead.experimentalGCM:if(!t)throw Error("Unexpected non-standard `experimentalGCM` AEAD algorithm provided in `config.preferredAEADAlgorithm`: use `gcm` instead");return Fi;default:throw Error("Unsupported AEAD mode")}}async function Oi(e,t,r,n,i,s){switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:{const{n:e,e:t}=r;return{c:await qe(i,e,t)}}case L.publicKey.elgamal:{const{p:e,g:t,y:n}=r;return async function(e,t,r,n){t=ne(t),r=ne(r),n=ne(n);const i=ne(Re(e,le(t))),s=pe(Je,t-Je);return{c1:fe(se(r,s,t)),c2:fe(ie(se(n,s,t)*i,t))}}(i,e,t,n)}case L.publicKey.ecdh:{const{oid:e,Q:t,kdfParams:n}=r,{publicKey:a,wrappedKey:o}=await An(e,n,i,t,s);return{V:a,C:new _n(o)}}case L.publicKey.x25519:case L.publicKey.x448:{if(t&&!F.isAES(t))throw Error("X25519 and X448 keys can only encrypt AES session keys");const{A:n}=r,{ephemeralPublicKey:s,wrappedKey:a}=await Mr(e,i,n);return{ephemeralPublicKey:s,C:Zn.fromObject({algorithm:t,wrappedKey:a})}}case L.publicKey.aead:{if(!n)throw Error("Cannot encrypt with symmetric key missing private parameters");const{cipher:e}=r,t=e.getValue(),{keyMaterial:s}=n,a=T.preferredAEADAlgorithm,o=Ni(T.preferredAEADAlgorithm),{ivLength:c}=o,u=de(c),h=await o(t,s),l=await h.encrypt(i,u,new Uint8Array);return{aeadMode:new jn(a),iv:u,c:new zn(l)}}case L.publicKey.pqc_mlkem_x25519:{const{eccPublicKey:n,mlkemPublicKey:s}=r,{eccCipherText:a,mlkemCipherText:o,wrappedKey:c}=await xn(e,n,s,i);return{eccCipherText:a,mlkemCipherText:o,C:Zn.fromObject({algorithm:t,wrappedKey:c})}}default:return[]}}async function Hi(e,t,r,n,i,s){switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:{const{c:e}=n,{n:i,e:a}=t,{d:o,p:c,q:u,u:h}=r;return je(e,i,a,o,c,u,h,s)}case L.publicKey.elgamal:{const{c1:e,c2:i}=n;return async function(e,t,r,n,i){return e=ne(e),t=ne(t),r=ne(r),Fe(fe(ie(oe(se(e,n=ne(n),r),r)*t,r),"be",le(r)),i)}(e,i,t.p,r.x,s)}case L.publicKey.ecdh:{const{oid:e,Q:s,kdfParams:a}=t,{d:o}=r,{V:c,C:u}=n;return bn(e,a,c,u.data,s,o,i)}case L.publicKey.x25519:case L.publicKey.x448:{const{A:i}=t,{k:s}=r,{ephemeralPublicKey:a,C:o}=n;if(null!==o.algorithm&&!F.isAES(o.algorithm))throw Error("AES session key expected");return Lr(e,a,o.wrappedKey,i,s)}case L.publicKey.aead:{const{cipher:e}=t,i=e.getValue(),{keyMaterial:s}=r,{aeadMode:a,iv:o,c}=n,u=Ni(a.getValue());return(await u(i,s)).decrypt(c.data,o,new Uint8Array)}case L.publicKey.pqc_mlkem_x25519:{const{eccSecretKey:i,mlkemSecretKey:s}=r,{eccPublicKey:a,mlkemPublicKey:o}=t,{eccCipherText:c,mlkemCipherText:u,C:h}=n;return Qn(e,c,u,i,a,s,0,h.wrappedKey)}default:throw Error("Unknown public key encryption algorithm.")}}async function _i(e,t,r){let n=0;switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const e=F.readMPI(t.subarray(n));n+=e.length+2;const r=F.readMPI(t.subarray(n));n+=r.length+2;const i=F.readMPI(t.subarray(n));n+=i.length+2;const s=F.readMPI(t.subarray(n));return n+=s.length+2,{read:n,privateParams:{d:e,p:r,q:i,u:s}}}case L.publicKey.dsa:case L.publicKey.elgamal:{const e=F.readMPI(t.subarray(n));return n+=e.length+2,{read:n,privateParams:{x:e}}}case L.publicKey.ecdsa:case L.publicKey.ecdh:{const i=Zi(e,r.oid);let s=F.readMPI(t.subarray(n));return n+=s.length+2,s=F.leftPad(s,i),{read:n,privateParams:{d:s}}}case L.publicKey.eddsaLegacy:{const i=Zi(e,r.oid);if(r.oid.getName()!==L.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let s=F.readMPI(t.subarray(n));return n+=s.length+2,s=F.leftPad(s,i),{read:n,privateParams:{seed:s}}}case L.publicKey.ed25519:case L.publicKey.ed448:{const r=Zi(e),i=F.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{seed:i}}}case L.publicKey.x25519:case L.publicKey.x448:{const r=Zi(e),i=F.readExactSubarray(t,n,n+r);return n+=i.length,{read:n,privateParams:{k:i}}}case L.publicKey.hmac:{const{cipher:e}=r,i=Le(e.getValue()),s=t.subarray(n,n+32);n+=32;const a=t.subarray(n,n+i);return n+=i,{read:n,privateParams:{hashSeed:s,keyMaterial:a}}}case L.publicKey.aead:{const{cipher:e}=r,i=t.subarray(n,n+32);n+=32;const{keySize:s}=Ir(e.getValue()),a=t.subarray(n,n+s);return n+=s,{read:n,privateParams:{hashSeed:i,keyMaterial:a}}}case L.publicKey.pqc_mlkem_x25519:{const r=F.readExactSubarray(t,n,n+Zi(L.publicKey.x25519));n+=r.length;const i=F.readExactSubarray(t,n,n+64);n+=i.length;const{mlkemSecretKey:s}=await Pn(e,i);return{read:n,privateParams:{eccSecretKey:r,mlkemSecretKey:s,mlkemSeed:i}}}case L.publicKey.pqc_mldsa_ed25519:{const r=F.readExactSubarray(t,n,n+Zi(L.publicKey.ed25519));n+=r.length;const i=F.readExactSubarray(t,n,n+32);n+=i.length;const{mldsaSecretKey:s}=await Tn(e,i);return{read:n,privateParams:{eccSecretKey:r,mldsaSecretKey:s,mldsaSeed:i}}}default:throw new at("Unknown public key encryption algorithm.")}}function zi(e,t){const r=new Set([L.publicKey.ed25519,L.publicKey.x25519,L.publicKey.ed448,L.publicKey.x448,L.publicKey.aead,L.publicKey.hmac,L.publicKey.pqc_mlkem_x25519,L.publicKey.pqc_mldsa_ed25519]),n={[L.publicKey.pqc_mlkem_x25519]:new Set(["mlkemSecretKey"]),[L.publicKey.pqc_mldsa_ed25519]:new Set(["mldsaSecretKey"])},i=Object.keys(t).map((i=>{if(n[e]?.has(i))return new Uint8Array;const s=t[i];return F.isUint8Array(s)?r.has(e)?s:F.uint8ArrayToMPI(s):s.write()}));return F.concatUint8Array(i)}async function Gi(e,t,r,n){switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:return async function(e,t){if(t=BigInt(t),F.getWebCrypto()){const r={name:"RSASSA-PKCS1-v1_5",modulusLength:e,publicExponent:fe(t),hash:{name:"SHA-1"}},n=await Oe.generateKey(r,!0,["sign","verify"]);return Ze(await Oe.exportKey("jwk",n.privateKey),t)}if(F.getNodeCrypto()){const r={modulusLength:e,publicExponent:ce(t),publicKeyEncoding:{type:"pkcs1",format:"jwk"},privateKeyEncoding:{type:"pkcs1",format:"jwk"}},n=await new Promise(((e,t)=>{He.generateKeyPair("rsa",r,((r,n,i)=>{r?t(r):e(i)}))}));return Ze(n,t)}let r,n,i;do{n=we(e-(e>>1),t,40),r=we(e>>1,t,40),i=r*n}while(he(i)!==e);const s=(r-_e)*(n-_e);return n<r&&([r,n]=[n,r]),{n:fe(i),e:fe(t),d:fe(oe(t,s)),p:fe(r),q:fe(n),u:fe(oe(r,n))}}(t,65537).then((({n:e,e:t,d:r,p:n,q:i,u:s})=>({privateParams:{d:r,p:n,q:i,u:s},publicParams:{n:e,e:t}})));case L.publicKey.ecdsa:return Zr(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{d:r},publicParams:{oid:new Xe(e),Q:t}})));case L.publicKey.eddsaLegacy:return Zr(r).then((({oid:e,Q:t,secret:r})=>({privateParams:{seed:r},publicParams:{oid:new Xe(e),Q:t}})));case L.publicKey.ecdh:return Zr(r).then((({oid:e,Q:t,secret:r,hash:n,cipher:i})=>({privateParams:{d:r},publicParams:{oid:new Xe(e),Q:t,kdfParams:new Gn({hash:n,cipher:i})}})));case L.publicKey.ed25519:case L.publicKey.ed448:return ht(e).then((({A:e,seed:t})=>({privateParams:{seed:t},publicParams:{A:e}})));case L.publicKey.x25519:case L.publicKey.x448:return xr(e).then((({A:e,k:t})=>({privateParams:{k:t},publicParams:{A:e}})));case L.publicKey.hmac:return qi(await async function(e){if(!Bn.has(e))throw Error("Unsupported hash algorithm.");const t=L.read(L.webHash,e),r=Cn||Un.webcrypto.subtle,n=await r.generateKey({name:"HMAC",hash:{name:t}},!0,["sign","verify"]),i=await r.exportKey("raw",n);return new Uint8Array(i)}(n),new Yn(n));case L.publicKey.aead:return qi(Vi(n),new Vn(n));case L.publicKey.pqc_mlkem_x25519:return Dn(e).then((({eccSecretKey:e,eccPublicKey:t,mlkemSeed:r,mlkemSecretKey:n,mlkemPublicKey:i})=>({privateParams:{eccSecretKey:e,mlkemSeed:r,mlkemSecretKey:n},publicParams:{eccPublicKey:t,mlkemPublicKey:i}})));case L.publicKey.pqc_mldsa_ed25519:return Rn(e).then((({eccSecretKey:e,eccPublicKey:t,mldsaSeed:r,mldsaSecretKey:n,mldsaPublicKey:i})=>({privateParams:{eccSecretKey:e,mldsaSeed:r,mldsaSecretKey:n},publicParams:{eccPublicKey:t,mldsaPublicKey:i}})));case L.publicKey.dsa:case L.publicKey.elgamal:throw Error("Unsupported algorithm for key generation.");default:throw Error("Unknown public key algorithm.")}}async function qi(e,t){const r=de(32);return{privateParams:{hashSeed:r,keyMaterial:e},publicParams:{cipher:t,digest:await Me(L.hash.sha256,r)}}}async function ji(e,t,r){if(!t||!r)throw Error("Missing key parameters");switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const{n:e,e:n}=t,{d:i,p:s,q:a,u:o}=r;return async function(e,t,r,n,i,s){if(e=ne(e),(n=ne(n))*(i=ne(i))!==e)return!1;const a=BigInt(2);if(ie(n*(s=ne(s)),i)!==BigInt(1))return!1;t=ne(t),r=ne(r);const o=pe(a,a<<BigInt(Math.floor(he(e)/3))),c=o*r*t;return!(ie(c,n-_e)!==o||ie(c,i-_e)!==o)}(e,n,i,s,a,o)}case L.publicKey.dsa:{const{p:e,q:n,g:i,y:s}=t,{x:a}=r;return async function(e,t,r,n,i){const s=ne(e),a=ne(t),o=ne(r),c=ne(n);if(o<=In||o>=s)return!1;if(ie(s-In,a)!==Sn)return!1;if(se(o,a,s)!==In)return!1;const u=BigInt(he(a));if(u<BigInt(150)||!Ae(a,null,32))return!1;const h=ne(i),l=BigInt(2);return c===se(o,a*pe(l<<u-In,l<<u)+h,s)}(e,n,i,s,a)}case L.publicKey.elgamal:{const{p:e,g:n,y:i}=t,{x:s}=r;return async function(e,t,r,n){const i=ne(e),s=ne(t),a=ne(r);if(s<=Je||s>=i)return!1;const o=BigInt(he(i));if(o<BigInt(1023))return!1;if(se(s,i-Je,i)!==Je)return!1;let c=s,u=BigInt(1);const h=BigInt(2),l=h<<BigInt(17);for(;u<l;){if(c=ie(c*s,i),c===Je)return!1;u++}const f=ne(n),y=pe(h<<o-Je,h<<o);return a===se(s,(i-Je)*y+f,i)}(e,n,i,s)}case L.publicKey.ecdsa:case L.publicKey.ecdh:{const n=Kn[L.read(L.publicKey,e)],{oid:i,Q:s}=t,{d:a}=r;return n.validateParams(i,s,a)}case L.publicKey.eddsaLegacy:{const{Q:e,oid:n}=t,{seed:i}=r;return fn(n,e,i)}case L.publicKey.ed25519:case L.publicKey.ed448:{const{A:n}=t,{seed:i}=r;return yt(e,n,i)}case L.publicKey.x25519:case L.publicKey.x448:{const{A:n}=t,{k:i}=r;return Qr(e,n,i)}case L.publicKey.hmac:{const{cipher:e,digest:n}=t,{hashSeed:i,keyMaterial:s}=r;return Le(e.getValue())===s.length&&F.equalsUint8Array(n,await Me(L.hash.sha256,i))}case L.publicKey.aead:{const{cipher:e,digest:n}=t,{hashSeed:i,keyMaterial:s}=r,{keySize:a}=Ir(e.getValue());return a===s.length&&F.equalsUint8Array(n,await Me(L.hash.sha256,i))}case L.publicKey.pqc_mlkem_x25519:{const{eccSecretKey:n,mlkemSeed:i}=r,{eccPublicKey:s,mlkemPublicKey:a}=t;return Ln(e,s,n,a,i)}case L.publicKey.pqc_mldsa_ed25519:{const{eccSecretKey:n,mldsaSeed:i}=r,{eccPublicKey:s,mldsaPublicKey:a}=t;return Hn(e,s,n,a,i)}default:throw Error("Unknown public key algorithm.")}}function Vi(e){const{keySize:t}=Ir(e);return de(t)}function Yi(e){try{e.getName()}catch{throw new at("Unknown curve OID")}}function Zi(e,t){switch(e){case L.publicKey.ecdsa:case L.publicKey.ecdh:case L.publicKey.eddsaLegacy:return new Yr(t).payloadSize;case L.publicKey.ed25519:case L.publicKey.ed448:return dt(e);case L.publicKey.x25519:case L.publicKey.x448:return Tr(e);default:throw Error("Unknown elliptic algo")}}async function Ji(e,t,r,n,i,s,a){switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const{n:e,e:i}=n;return Ge(t,s,F.leftPad(r.s,e.length),e,i,a)}case L.publicKey.dsa:{const{g:e,p:t,q:i,y:s}=n,{r:o,s:c}=r;return async function(e,t,r,n,i,s,a,o){if(t=ne(t),r=ne(r),s=ne(s),a=ne(a),i=ne(i),o=ne(o),t<=Sn||t>=a||r<=Sn||r>=a)return F.printDebug("invalid DSA Signature"),!1;const c=ie(ne(n.subarray(0,le(a))),a),u=oe(r,a);if(u===Sn)return F.printDebug("invalid DSA Signature"),!1;i=ie(i,s),o=ie(o,s);const h=ie(c*u,a),l=ie(t*u,a);return ie(ie(se(i,h,s)*se(o,l,s),s),a)===t}(0,o,c,a,e,t,i,s)}case L.publicKey.ecdsa:{const{oid:e,Q:i}=n,o=new Yr(e).payloadSize;return on(e,t,{r:F.leftPad(r.r,o),s:F.leftPad(r.s,o)},s,i,a)}case L.publicKey.eddsaLegacy:{if(Le(t)<Le(L.hash.sha256))throw Error("Hash algorithm too weak for EdDSALegacy.");const{oid:e,Q:i}=n,s=new Yr(e).payloadSize;return ln(e,0,{r:F.leftPad(r.r,s),s:F.leftPad(r.s,s)},0,i,a)}case L.publicKey.ed25519:case L.publicKey.ed448:{if(Le(t)<Le(pt(e)))throw Error("Hash algorithm too weak for EdDSA.");const{A:i}=n;return ft(e,0,r,0,i,a)}case L.publicKey.hmac:{if(!i)throw Error("Cannot verify HMAC signature with symmetric key missing private parameters");const{cipher:e}=n,{keyMaterial:t}=i;return async function(e,t,r,n){if(!Bn.has(e))throw Error("Unsupported hash algorithm.");const i=L.read(L.webHash,e),s=Cn||Un.webcrypto.subtle,a=await s.importKey("raw",t,{name:"HMAC",hash:{name:i}},!1,["verify"]);return s.verify("HMAC",a,r,n)}(e.getValue(),t,r.mac.data,a)}case L.publicKey.pqc_mldsa_ed25519:{if(!On(e,t))throw Error("Unexpected hash algorithm for PQC signature: digest size too short");const{eccPublicKey:i,mldsaPublicKey:s}=n;return Nn(e,0,i,s,a,r)}default:throw Error("Unknown signature algorithm.")}}async function Wi(e,t,r,n,i,s){if(!r||!n)throw Error("Missing key parameters");switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const{n:e,e:a}=r,{d:o,p:c,q:u,u:h}=n;return{s:await ze(t,i,e,a,o,c,u,h,s)}}case L.publicKey.dsa:{const{g:e,p:t,q:i}=r,{x:a}=n;return async function(e,t,r,n,i,s){const a=BigInt(0);let o,c,u,h;n=ne(n),i=ne(i),r=ne(r),s=ne(s),r=ie(r,n),s=ie(s,i);const l=ie(ne(t.subarray(0,le(i))),i);for(;;){if(o=pe(In,i),c=ie(se(r,o,n),i),c===a)continue;const e=ie(s*c,i);if(h=ie(l+e,i),u=ie(oe(o,i)*h,i),u!==a)break}return{r:fe(c,"be",le(n)),s:fe(u,"be",le(n))}}(0,s,e,t,i,a)}case L.publicKey.elgamal:throw Error("Signing with Elgamal is not defined in the OpenPGP standard.");case L.publicKey.ecdsa:{const{oid:e,Q:a}=r,{d:o}=n;return an(e,t,i,a,o,s)}case L.publicKey.eddsaLegacy:{if(Le(t)<Le(L.hash.sha256))throw Error("Hash algorithm too weak for EdDSALegacy.");const{oid:e,Q:i}=r,{seed:a}=n;return hn(e,0,0,i,a,s)}case L.publicKey.ed25519:case L.publicKey.ed448:{if(Le(t)<Le(pt(e)))throw Error("Hash algorithm too weak for EdDSA.");const{A:i}=r,{seed:a}=n;return lt(e,0,0,i,a,s)}case L.publicKey.hmac:{const{cipher:e}=r,{keyMaterial:t}=n,i=await async function(e,t,r){if(!Bn.has(e))throw Error("Unsupported hash algorithm.");const n=L.read(L.webHash,e),i=Cn||Un.webcrypto.subtle,s=await i.importKey("raw",t,{name:"HMAC",hash:{name:n}},!1,["sign"]),a=await i.sign("HMAC",s,r);return new Uint8Array(a)}(e.getValue(),t,s);return{mac:new zn(i)}}case L.publicKey.pqc_mldsa_ed25519:{if(!On(e,t))throw Error("Unexpected hash algorithm for PQC signature: digest size too short");const{eccPublicKey:i}=r,{eccSecretKey:a,mldsaSecretKey:o}=n;return Fn(e,0,a,i,o,s)}default:throw Error("Unknown signature algorithm.")}}Fi.getNonce=function(e,t){const r=e.slice();for(let e=0;e<t.length;e++)r[4+e]^=t[e];return r},Fi.blockLength=16,Fi.ivLength=12,Fi.tagLength=Ti;class Xi extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,Xi),this.name="Argon2OutOfMemoryError"}}let $i,es,ts=2<<19;class rs{static get ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(){return ts}static set ARGON2_WASM_MEMORY_THRESHOLD_RELOAD(e){ts=e}static reloadWasmModule(){$i&&(es=$i(),es.catch((()=>{})))}constructor(e=T){const{passes:t,parallelism:r,memoryExponent:n}=e.s2kArgon2Params;this.type="argon2",this.salt=null,this.t=t,this.p=r,this.encodedM=n}generateSalt(){this.salt=de(16)}read(e){let t=0;return this.salt=e.subarray(t,t+16),t+=16,this.t=e[t++],this.p=e[t++],this.encodedM=e[t++],t}write(){const e=[new Uint8Array([L.write(L.s2k,this.type)]),this.salt,new Uint8Array([this.t,this.p,this.encodedM])];return F.concatUint8Array(e)}async produceKey(e,t,r){if(this.encodedM>r.maxArgon2MemoryExponent)throw new Xi("Argon2 required memory exceeds `config.maxArgon2MemoryExponent`");const n=2<<this.encodedM-1;try{$i=$i||(await Promise.resolve().then((function(){return Gp}))).default,es=es||$i();const r=await es,i=r({version:19,type:2,password:F.encodeUTF8(e),salt:this.salt,tagLength:t,memorySize:n,parallelism:this.p,passes:this.t});return n>rs.ARGON2_WASM_MEMORY_THRESHOLD_RELOAD&&rs.reloadWasmModule(),i}catch(e){throw e.message&&(e.message.includes("Unable to grow instance memory")||e.message.includes("failed to grow memory")||e.message.includes("WebAssembly.Memory.grow")||e.message.includes("Out of memory"))?new Xi("Could not allocate required memory for Argon2"):e}}}class ns{constructor(e,t=T){this.algorithm=L.hash.sha256,this.type=L.read(L.s2k,e),this.c=t.s2kIterationCountByte,this.salt=null}generateSalt(){switch(this.type){case"salted":case"iterated":this.salt=de(8)}}getCount(){return 16+(15&this.c)<<6+(this.c>>4)}read(e){let t=0;switch(this.algorithm=e[t++],this.type){case"simple":break;case"salted":this.salt=e.subarray(t,t+8),t+=8;break;case"iterated":this.salt=e.subarray(t,t+8),t+=8,this.c=e[t++];break;case"gnu":if("GNU"!==F.uint8ArrayToString(e.subarray(t,t+3)))throw new at("Unknown s2k type.");t+=3;if(1001!==1e3+e[t++])throw new at("Unknown s2k gnu protection mode.");this.type="gnu-dummy";break;default:throw new at("Unknown s2k type.")}return t}write(){if("gnu-dummy"===this.type)return new Uint8Array([101,0,...F.stringToUint8Array("GNU"),1]);const e=[new Uint8Array([L.write(L.s2k,this.type),this.algorithm])];switch(this.type){case"simple":break;case"salted":e.push(this.salt);break;case"iterated":e.push(this.salt),e.push(new Uint8Array([this.c]));break;case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}return F.concatUint8Array(e)}async produceKey(e,t,r){e=F.encodeUTF8(e);const n=[];let i=0,s=0;for(;i<t;){let t;switch(this.type){case"simple":t=F.concatUint8Array([new Uint8Array(s),e]);break;case"salted":t=F.concatUint8Array([new Uint8Array(s),this.salt,e]);break;case"iterated":{const r=F.concatUint8Array([this.salt,e]);let n=r.length;const i=Math.max(this.getCount(),n);t=new Uint8Array(s+i),t.set(r,s);for(let e=s+n;e<i;e+=n,n*=2)t.copyWithin(e,s,e);break}case"gnu":throw Error("GNU s2k type not supported.");default:throw Error("Unknown s2k type.")}const r=await Me(this.algorithm,t);n.push(r),i+=r.length,s++}return F.concatUint8Array(n).subarray(0,t)}}const is=new Set([L.s2k.argon2,L.s2k.iterated]);function ss(e,t=T){switch(e){case L.s2k.argon2:return new rs(t);case L.s2k.iterated:case L.s2k.gnu:case L.s2k.salted:case L.s2k.simple:return new ns(e,t);default:throw new at("Unsupported S2K type")}}function as(e){const{s2kType:t}=e;if(!is.has(t))throw Error("The provided `config.s2kType` value is not allowed");return ss(t,e)}var os=t("/");try{os("worker_threads").Worker}catch(e){}var cs=Uint8Array,us=Uint16Array,hs=Int32Array,ls=new cs([0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0,0,0,0]),fs=new cs([0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13,0,0]),ys=new cs([16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15]),ds=function(e,t){for(var r=new us(31),n=0;n<31;++n)r[n]=t+=1<<e[n-1];var i=new hs(r[30]);for(n=1;n<30;++n)for(var s=r[n];s<r[n+1];++s)i[s]=s-r[n]<<5|n;return{b:r,r:i}},ps=ds(ls,2),gs=ps.b,ws=ps.r;gs[28]=258,ws[258]=28;for(var As=ds(fs,0),ms=As.b,bs=As.r,ks=new us(32768),Es=0;Es<32768;++Es){var vs=(43690&Es)>>1|(21845&Es)<<1;vs=(61680&(vs=(52428&vs)>>2|(13107&vs)<<2))>>4|(3855&vs)<<4,ks[Es]=((65280&vs)>>8|(255&vs)<<8)>>1}var Ks=function(e,t,r){for(var n=e.length,i=0,s=new us(t);i<n;++i)e[i]&&++s[e[i]-1];var a,o=new us(t);for(i=1;i<t;++i)o[i]=o[i-1]+s[i-1]<<1;if(r){a=new us(1<<t);var c=15-t;for(i=0;i<n;++i)if(e[i])for(var u=i<<4|e[i],h=t-e[i],l=o[e[i]-1]++<<h,f=l|(1<<h)-1;l<=f;++l)a[ks[l]>>c]=u}else for(a=new us(n),i=0;i<n;++i)e[i]&&(a[i]=ks[o[e[i]-1]++]>>15-e[i]);return a},Ss=new cs(288);for(Es=0;Es<144;++Es)Ss[Es]=8;for(Es=144;Es<256;++Es)Ss[Es]=9;for(Es=256;Es<280;++Es)Ss[Es]=7;for(Es=280;Es<288;++Es)Ss[Es]=8;var Is=new cs(32);for(Es=0;Es<32;++Es)Is[Es]=5;var Bs=/*#__PURE__*/Ks(Ss,9,0),Cs=/*#__PURE__*/Ks(Ss,9,1),Us=/*#__PURE__*/Ks(Is,5,0),Ps=/*#__PURE__*/Ks(Is,5,1),Ds=function(e){for(var t=e[0],r=1;r<e.length;++r)e[r]>t&&(t=e[r]);return t},xs=function(e,t,r){var n=t/8|0;return(e[n]|e[n+1]<<8)>>(7&t)&r},Qs=function(e,t){var r=t/8|0;return(e[r]|e[r+1]<<8|e[r+2]<<16)>>(7&t)},Ms=function(e){return(e+7)/8|0},Ls=function(e,t,r){return(null==t||t<0)&&(t=0),(null==r||r>e.length)&&(r=e.length),new cs(e.subarray(t,r))},Ts=["unexpected EOF","invalid block type","invalid length/literal","invalid distance","stream finished","no stream handler",,"no callback","invalid UTF-8 data","extra field too long","date not in range 1980-2099","filename too long","stream finishing","invalid zip data"],Rs=function(e,t,r){var n=Error(t||Ts[e]);if(n.code=e,Error.captureStackTrace&&Error.captureStackTrace(n,Rs),!r)throw n;return n},Fs=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>8},Ns=function(e,t,r){r<<=7&t;var n=t/8|0;e[n]|=r,e[n+1]|=r>>8,e[n+2]|=r>>16},Os=function(e,t){for(var r=[],n=0;n<e.length;++n)e[n]&&r.push({s:n,f:e[n]});var i=r.length,s=r.slice();if(!i)return{t:Vs,l:0};if(1==i){var a=new cs(r[0].s+1);return a[r[0].s]=1,{t:a,l:1}}r.sort((function(e,t){return e.f-t.f})),r.push({s:-1,f:25001});var o=r[0],c=r[1],u=0,h=1,l=2;for(r[0]={s:-1,f:o.f+c.f,l:o,r:c};h!=i-1;)o=r[r[u].f<r[l].f?u++:l++],c=r[u!=h&&r[u].f<r[l].f?u++:l++],r[h++]={s:-1,f:o.f+c.f,l:o,r:c};var f=s[0].s;for(n=1;n<i;++n)s[n].s>f&&(f=s[n].s);var y=new us(f+1),d=Hs(r[h-1],y,0);if(d>t){n=0;var p=0,g=d-t,w=1<<g;for(s.sort((function(e,t){return y[t.s]-y[e.s]||e.f-t.f}));n<i;++n){var A=s[n].s;if(!(y[A]>t))break;p+=w-(1<<d-y[A]),y[A]=t}for(p>>=g;p>0;){var m=s[n].s;y[m]<t?p-=1<<t-y[m]++-1:++n}for(;n>=0&&p;--n){var b=s[n].s;y[b]==t&&(--y[b],++p)}d=t}return{t:new cs(y),l:d}},Hs=function(e,t,r){return-1==e.s?Math.max(Hs(e.l,t,r+1),Hs(e.r,t,r+1)):t[e.s]=r},_s=function(e){for(var t=e.length;t&&!e[--t];);for(var r=new us(++t),n=0,i=e[0],s=1,a=function(e){r[n++]=e},o=1;o<=t;++o)if(e[o]==i&&o!=t)++s;else{if(!i&&s>2){for(;s>138;s-=138)a(32754);s>2&&(a(s>10?s-11<<5|28690:s-3<<5|12305),s=0)}else if(s>3){for(a(i),--s;s>6;s-=6)a(8304);s>2&&(a(s-3<<5|8208),s=0)}for(;s--;)a(i);s=1,i=e[o]}return{c:r.subarray(0,n),n:t}},zs=function(e,t){for(var r=0,n=0;n<t.length;++n)r+=e[n]*t[n];return r},Gs=function(e,t,r){var n=r.length,i=Ms(t+2);e[i]=255&n,e[i+1]=n>>8,e[i+2]=255^e[i],e[i+3]=255^e[i+1];for(var s=0;s<n;++s)e[i+s+4]=r[s];return 8*(i+4+n)},qs=function(e,t,r,n,i,s,a,o,c,u,h){Fs(t,h++,r),++i[256];for(var l=Os(i,15),f=l.t,y=l.l,d=Os(s,15),p=d.t,g=d.l,w=_s(f),A=w.c,m=w.n,b=_s(p),k=b.c,E=b.n,v=new us(19),K=0;K<A.length;++K)++v[31&A[K]];for(K=0;K<k.length;++K)++v[31&k[K]];for(var S=Os(v,7),I=S.t,B=S.l,C=19;C>4&&!I[ys[C-1]];--C);var U,P,D,x,Q=u+5<<3,M=zs(i,Ss)+zs(s,Is)+a,L=zs(i,f)+zs(s,p)+a+14+3*C+zs(v,I)+2*v[16]+3*v[17]+7*v[18];if(c>=0&&Q<=M&&Q<=L)return Gs(t,h,e.subarray(c,c+u));if(Fs(t,h,1+(L<M)),h+=2,L<M){U=Ks(f,y,0),P=f,D=Ks(p,g,0),x=p;var T=Ks(I,B,0);Fs(t,h,m-257),Fs(t,h+5,E-1),Fs(t,h+10,C-4),h+=14;for(K=0;K<C;++K)Fs(t,h+3*K,I[ys[K]]);h+=3*C;for(var R=[A,k],F=0;F<2;++F){var N=R[F];for(K=0;K<N.length;++K){var O=31&N[K];Fs(t,h,T[O]),h+=I[O],O>15&&(Fs(t,h,N[K]>>5&127),h+=N[K]>>12)}}}else U=Bs,P=Ss,D=Us,x=Is;for(K=0;K<o;++K){var H=n[K];if(H>255){Ns(t,h,U[(O=H>>18&31)+257]),h+=P[O+257],O>7&&(Fs(t,h,H>>23&31),h+=ls[O]);var _=31&H;Ns(t,h,D[_]),h+=x[_],_>3&&(Ns(t,h,H>>5&8191),h+=fs[_])}else Ns(t,h,U[H]),h+=P[H]}return Ns(t,h,U[256]),h+P[256]},js=/*#__PURE__*/new hs([65540,131080,131088,131104,262176,1048704,1048832,2114560,2117632]),Vs=/*#__PURE__*/new cs(0),Ys=function(){var e=1,t=0;return{p:function(r){for(var n=e,i=t,s=0|r.length,a=0;a!=s;){for(var o=Math.min(a+2655,s);a<o;++a)i+=n+=r[a];n=(65535&n)+15*(n>>16),i=(65535&i)+15*(i>>16)}e=n,t=i},d:function(){return(255&(e%=65521))<<24|(65280&e)<<8|(255&(t%=65521))<<8|t>>8}}},Zs=function(e,t,r,n,i){if(!i&&(i={l:1},t.dictionary)){var s=t.dictionary.subarray(-32768),a=new cs(s.length+e.length);a.set(s),a.set(e,s.length),e=a,i.w=s.length}return function(e,t,r,n,i,s){var a=s.z||e.length,o=new cs(n+a+5*(1+Math.ceil(a/7e3))+i),c=o.subarray(n,o.length-i),u=s.l,h=7&(s.r||0);if(t){h&&(c[0]=s.r>>3);for(var l=js[t-1],f=l>>13,y=8191&l,d=(1<<r)-1,p=s.p||new us(32768),g=s.h||new us(d+1),w=Math.ceil(r/3),A=2*w,m=function(t){return(e[t]^e[t+1]<<w^e[t+2]<<A)&d},b=new hs(25e3),k=new us(288),E=new us(32),v=0,K=0,S=s.i||0,I=0,B=s.w||0,C=0;S+2<a;++S){var U=m(S),P=32767&S,D=g[U];if(p[P]=D,g[U]=P,B<=S){var x=a-S;if((v>7e3||I>24576)&&(x>423||!u)){h=qs(e,c,0,b,k,E,K,I,C,S-C,h),I=v=K=0,C=S;for(var Q=0;Q<286;++Q)k[Q]=0;for(Q=0;Q<30;++Q)E[Q]=0}var M=2,L=0,T=y,R=P-D&32767;if(x>2&&U==m(S-R))for(var F=Math.min(f,x)-1,N=Math.min(32767,S),O=Math.min(258,x);R<=N&&--T&&P!=D;){if(e[S+M]==e[S+M-R]){for(var H=0;H<O&&e[S+H]==e[S+H-R];++H);if(H>M){if(M=H,L=R,H>F)break;var _=Math.min(R,H-2),z=0;for(Q=0;Q<_;++Q){var G=S-R+Q&32767,q=G-p[G]&32767;q>z&&(z=q,D=G)}}}R+=(P=D)-(D=p[P])&32767}if(L){b[I++]=268435456|ws[M]<<18|bs[L];var j=31&ws[M],V=31&bs[L];K+=ls[j]+fs[V],++k[257+j],++E[V],B=S+M,++v}else b[I++]=e[S],++k[e[S]]}}for(S=Math.max(S,B);S<a;++S)b[I++]=e[S],++k[e[S]];h=qs(e,c,u,b,k,E,K,I,C,S-C,h),u||(s.r=7&h|c[h/8|0]<<3,h-=7,s.h=g,s.p=p,s.i=S,s.w=B)}else{for(S=s.w||0;S<a+u;S+=65535){var Y=S+65535;Y>=a&&(c[h/8|0]=u,Y=a),h=Gs(c,h+1,e.subarray(S,Y))}s.i=a}return Ls(o,0,n+Ms(h)+i)}(e,null==t.level?6:t.level,null==t.mem?i.l?Math.ceil(1.5*Math.max(8,Math.min(13,Math.log(e.length)))):20:12+t.mem,r,n,i)},Js=function(e,t,r){for(;r;++t)e[t]=r,r>>>=8},Ws=/*#__PURE__*/function(){function e(e,t){if("function"==typeof e&&(t=e,e={}),this.ondata=t,this.o=e||{},this.s={l:0,i:32768,w:32768,z:32768},this.b=new cs(98304),this.o.dictionary){var r=this.o.dictionary.subarray(-32768);this.b.set(r,32768-r.length),this.s.i=32768-r.length}}return e.prototype.p=function(e,t){this.ondata(Zs(e,this.o,0,0,this.s),t)},e.prototype.push=function(e,t){this.ondata||Rs(5),this.s.l&&Rs(4);var r=e.length+this.s.z;if(r>this.b.length){if(r>2*this.b.length-32768){var n=new cs(-32768&r);n.set(this.b.subarray(0,this.s.z)),this.b=n}var i=this.b.length-this.s.z;this.b.set(e.subarray(0,i),this.s.z),this.s.z=this.b.length,this.p(this.b,!1),this.b.set(this.b.subarray(-32768)),this.b.set(e.subarray(i),32768),this.s.z=e.length-i+32768,this.s.i=32766,this.s.w=32768}else this.b.set(e,this.s.z),this.s.z+=e.length;this.s.l=1&t,(this.s.z>this.s.w+8191||t)&&(this.p(this.b,t||!1),this.s.w=this.s.i,this.s.i-=2)},e.prototype.flush=function(){this.ondata||Rs(5),this.s.l&&Rs(4),this.p(this.b,!1),this.s.w=this.s.i,this.s.i-=2},e}(),Xs=/*#__PURE__*/function(){function e(e,t){"function"==typeof e&&(t=e,e={}),this.ondata=t;var r=e&&e.dictionary&&e.dictionary.subarray(-32768);this.s={i:0,b:r?r.length:0},this.o=new cs(32768),this.p=new cs(0),r&&this.o.set(r)}return e.prototype.e=function(e){if(this.ondata||Rs(5),this.d&&Rs(4),this.p.length){if(e.length){var t=new cs(this.p.length+e.length);t.set(this.p),t.set(e,this.p.length),this.p=t}}else this.p=e},e.prototype.c=function(e){this.s.i=+(this.d=e||!1);var t=this.s.b,r=function(e,t,r,n){var i=e.length;if(!i||t.f&&!t.l)return r||new cs(0);var s=!r,a=s||2!=t.i,o=t.i;s&&(r=new cs(3*i));var c=function(e){var t=r.length;if(e>t){var n=new cs(Math.max(2*t,e));n.set(r),r=n}},u=t.f||0,h=t.p||0,l=t.b||0,f=t.l,y=t.d,d=t.m,p=t.n,g=8*i;do{if(!f){u=xs(e,h,1);var w=xs(e,h+1,3);if(h+=3,!w){var A=e[(U=Ms(h)+4)-4]|e[U-3]<<8,m=U+A;if(m>i){o&&Rs(0);break}a&&c(l+A),r.set(e.subarray(U,m),l),t.b=l+=A,t.p=h=8*m,t.f=u;continue}if(1==w)f=Cs,y=Ps,d=9,p=5;else if(2==w){var b=xs(e,h,31)+257,k=xs(e,h+10,15)+4,E=b+xs(e,h+5,31)+1;h+=14;for(var v=new cs(E),K=new cs(19),S=0;S<k;++S)K[ys[S]]=xs(e,h+3*S,7);h+=3*k;var I=Ds(K),B=(1<<I)-1,C=Ks(K,I,1);for(S=0;S<E;){var U,P=C[xs(e,h,B)];if(h+=15&P,(U=P>>4)<16)v[S++]=U;else{var D=0,x=0;for(16==U?(x=3+xs(e,h,3),h+=2,D=v[S-1]):17==U?(x=3+xs(e,h,7),h+=3):18==U&&(x=11+xs(e,h,127),h+=7);x--;)v[S++]=D}}var Q=v.subarray(0,b),M=v.subarray(b);d=Ds(Q),p=Ds(M),f=Ks(Q,d,1),y=Ks(M,p,1)}else Rs(1);if(h>g){o&&Rs(0);break}}a&&c(l+131072);for(var L=(1<<d)-1,T=(1<<p)-1,R=h;;R=h){var F=(D=f[Qs(e,h)&L])>>4;if((h+=15&D)>g){o&&Rs(0);break}if(D||Rs(2),F<256)r[l++]=F;else{if(256==F){R=h,f=null;break}var N=F-254;if(F>264){var O=ls[S=F-257];N=xs(e,h,(1<<O)-1)+gs[S],h+=O}var H=y[Qs(e,h)&T],_=H>>4;if(H||Rs(3),h+=15&H,M=ms[_],_>3&&(O=fs[_],M+=Qs(e,h)&(1<<O)-1,h+=O),h>g){o&&Rs(0);break}a&&c(l+131072);var z=l+N;if(l<M){var G=0-M,q=Math.min(M,z);for(G+l<0&&Rs(3);l<q;++l)r[l]=n[G+l]}for(;l<z;++l)r[l]=r[l-M]}}t.l=f,t.p=R,t.b=l,t.f=u,f&&(u=1,t.m=d,t.d=y,t.n=p)}while(!u);return l!=r.length&&s?Ls(r,0,l):r.subarray(0,l)}(this.p,this.s,this.o);this.ondata(Ls(r,t,this.s.b),this.d),this.o=Ls(r,this.s.b-32768),this.s.b=this.o.length,this.p=Ls(this.p,this.s.p/8|0),this.s.p&=7},e.prototype.push=function(e,t){this.e(e),this.c(t)},e}(),$s=/*#__PURE__*/function(){function e(e,t){this.c=Ys(),this.v=1,Ws.call(this,e,t)}return e.prototype.push=function(e,t){this.c.p(e),Ws.prototype.push.call(this,e,t)},e.prototype.p=function(e,t){var r=Zs(e,this.o,this.v&&(this.o.dictionary?6:2),t&&4,this.s);this.v&&(function(e,t){var r=t.level,n=0==r?0:r<6?1:9==r?3:2;if(e[0]=120,e[1]=n<<6|(t.dictionary&&32),e[1]|=31-(e[0]<<8|e[1])%31,t.dictionary){var i=Ys();i.p(t.dictionary),Js(e,2,i.d())}}(r,this.o),this.v=0),t&&Js(r,r.length-4,this.c.d()),this.ondata(r,t)},e.prototype.flush=function(){Ws.prototype.flush.call(this)},e}(),ea=/*#__PURE__*/function(){function e(e,t){Xs.call(this,e,t),this.v=e&&e.dictionary?2:1}return e.prototype.push=function(e,t){if(Xs.prototype.e.call(this,e),this.v){if(this.p.length<6&&!t)return;this.p=this.p.subarray((r=this.p,n=this.v-1,(8!=(15&r[0])||r[0]>>4>7||(r[0]<<8|r[1])%31)&&Rs(6,"invalid zlib data"),(r[1]>>5&1)==+!n&&Rs(6,"invalid zlib data: "+(32&r[1]?"need":"unexpected")+" dictionary"),2+(r[1]>>3&4))),this.v=0}var r,n;t&&(this.p.length<4&&Rs(6,"invalid zlib data"),this.p=this.p.subarray(0,-4)),Xs.prototype.c.call(this,t)},e}(),ta="undefined"!=typeof TextDecoder&&/*#__PURE__*/new TextDecoder;try{ta.decode(Vs,{stream:!0})}catch(e){}class ra{static get tag(){return L.packet.literalData}constructor(e=new Date){this.format=L.literal.utf8,this.date=F.normalizeDate(e),this.text=null,this.data=null,this.filename=""}setText(e,t=L.literal.utf8){this.format=t,this.text=e,this.data=null}getText(e=!1){return(null===this.text||F.isStream(this.text))&&(this.text=F.decodeUTF8(F.nativeEOL(this.getBytes(e)))),this.text}setBytes(e,t){this.format=t,this.data=e,this.text=null}getBytes(e=!1){return null===this.data&&(this.data=F.canonicalizeEOL(F.encodeUTF8(this.text))),e?I(this.data):this.data}setFilename(e){this.filename=e}getFilename(){return this.filename}async read(e){await K(e,(async e=>{const t=await e.readByte(),r=await e.readByte();this.filename=F.decodeUTF8(await e.readBytes(r)),this.date=F.readDate(await e.readBytes(4));let n=e.remainder();o(n)&&(n=await U(n)),this.setBytes(n,t)}))}writeHeader(){const e=F.encodeUTF8(this.filename),t=new Uint8Array([e.length]),r=new Uint8Array([this.format]),n=F.writeDate(this.date);return F.concatUint8Array([r,t,e,n])}write(){const e=this.writeHeader(),t=this.getBytes();return F.concat([e,t])}}class na{constructor(){this.bytes=""}read(e){return this.bytes=F.uint8ArrayToString(e.subarray(0,8)),this.bytes.length}write(){return F.stringToUint8Array(this.bytes)}toHex(){return F.uint8ArrayToHex(F.stringToUint8Array(this.bytes))}equals(e,t=!1){return t&&(e.isWildcard()||this.isWildcard())||this.bytes===e.bytes}isNull(){return""===this.bytes}isWildcard(){return/^0+$/.test(this.toHex())}static mapToHex(e){return e.toHex()}static fromID(e){const t=new na;return t.read(F.hexToUint8Array(e)),t}static wildcard(){const e=new na;return e.read(new Uint8Array(8)),e}}const ia=Symbol("verified"),sa="salt@notations.openpgpjs.org",aa=new Set([L.signatureSubpacket.issuerKeyID,L.signatureSubpacket.issuerFingerprint,L.signatureSubpacket.embeddedSignature]);class oa{static get tag(){return L.packet.signature}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.signatureData=null,this.unhashedSubpackets=[],this.unknownSubpackets=[],this.signedHashValue=null,this.salt=null,this.created=null,this.signatureExpirationTime=null,this.signatureNeverExpires=!0,this.exportable=null,this.trustLevel=null,this.trustAmount=null,this.regularExpression=null,this.revocable=null,this.keyExpirationTime=null,this.keyNeverExpires=null,this.preferredSymmetricAlgorithms=null,this.revocationKeyClass=null,this.revocationKeyAlgorithm=null,this.revocationKeyFingerprint=null,this.issuerKeyID=new na,this.rawNotations=[],this.notations={},this.preferredHashAlgorithms=null,this.preferredCompressionAlgorithms=null,this.keyServerPreferences=null,this.preferredKeyServer=null,this.isPrimaryUserID=null,this.policyURI=null,this.keyFlags=null,this.signersUserID=null,this.reasonForRevocationFlag=null,this.reasonForRevocationString=null,this.features=null,this.signatureTargetPublicKeyAlgorithm=null,this.signatureTargetHashAlgorithm=null,this.signatureTargetHash=null,this.embeddedSignature=null,this.issuerKeyVersion=null,this.issuerFingerprint=null,this.preferredAEADAlgorithms=null,this.preferredCipherSuites=null,this.revoked=null,this[ia]=null}read(e,t=T){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new at("Support for v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4!==this.version&&5!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the signature packet is unsupported.`);if(this.signatureType=e[r++],this.publicKeyAlgorithm=e[r++],this.hashAlgorithm=e[r++],r+=this.readSubPackets(e.subarray(r,e.length),!0),!this.created)throw Error("Missing signature creation time subpacket.");if(this.signatureData=e.subarray(0,r),r+=this.readSubPackets(e.subarray(r,e.length),!1),this.signedHashValue=e.subarray(r,r+2),r+=2,6===this.version){const t=e[r++];this.salt=e.subarray(r,r+t),r+=t}const n=e.subarray(r,e.length),{read:i,signatureParams:s}=function(e,t){let r=0;switch(e){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.rsaSign:{const e=F.readMPI(t.subarray(r));return r+=e.length+2,{read:r,signatureParams:{s:e}}}case L.publicKey.dsa:case L.publicKey.ecdsa:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=F.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case L.publicKey.eddsaLegacy:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=F.readMPI(t.subarray(r));return r+=n.length+2,{read:r,signatureParams:{r:e,s:n}}}case L.publicKey.ed25519:case L.publicKey.ed448:{const n=2*dt(e),i=F.readExactSubarray(t,r,r+n);return r+=i.length,{read:r,signatureParams:{RS:i}}}case L.publicKey.hmac:{const e=new zn;return r+=e.read(t.subarray(r)),{read:r,signatureParams:{mac:e}}}case L.publicKey.pqc_mldsa_ed25519:{const e=2*dt(L.publicKey.ed25519),n=F.readExactSubarray(t,r,r+e);r+=n.length;const i=F.readExactSubarray(t,r,r+3309);return r+=i.length,{read:r,signatureParams:{eccSignature:n,mldsaSignature:i}}}default:throw new at("Unknown signature algorithm.")}}(this.publicKeyAlgorithm,n);if(i<n.length)throw Error("Error reading MPIs");this.params=s}writeParams(){return this.params instanceof Promise?D((async()=>zi(this.publicKeyAlgorithm,await this.params))):zi(this.publicKeyAlgorithm,this.params)}write(){const e=[];return e.push(this.signatureData),e.push(this.writeUnhashedSubPackets()),e.push(this.signedHashValue),6===this.version&&(e.push(new Uint8Array([this.salt.length])),e.push(this.salt)),e.push(this.writeParams()),F.concat(e)}async sign(e,t,r=new Date,n=!1,i){this.version=e.version,this.created=F.normalizeDate(r),this.issuerKeyVersion=e.version,this.issuerFingerprint=e.getFingerprintBytes(),this.issuerKeyID=e.getKeyID();const s=[new Uint8Array([this.version,this.signatureType,this.publicKeyAlgorithm,this.hashAlgorithm])];if(6===this.version){const e=ua(this.hashAlgorithm);if(null===this.salt)this.salt=de(e);else if(e!==this.salt.length)throw Error("Provided salt does not have the required length")}else if(i.nonDeterministicSignaturesViaNotation){if(0!==this.rawNotations.filter((({name:e})=>e===sa)).length)throw Error("Unexpected existing salt notation");{const e=de(ua(this.hashAlgorithm));this.rawNotations.push({name:sa,value:e,humanReadable:!1,critical:!1})}}s.push(this.writeHashedSubPackets()),this.unhashedSubpackets=[],this.signatureData=F.concat(s);const a=this.toHash(this.signatureType,t,n),o=await this.hash(this.signatureType,t,a,n);this.signedHashValue=C(S(o),0,2);const c=async()=>Wi(this.publicKeyAlgorithm,this.hashAlgorithm,e.publicParams,e.privateParams,a,await U(o));F.isStream(o)?this.params=c():(this.params=await c(),this[ia]=!0)}writeHashedSubPackets(){const e=L.signatureSubpacket,t=[];let r;if(null===this.created)throw Error("Missing signature creation time");t.push(ca(e.signatureCreationTime,!0,F.writeDate(this.created))),null!==this.signatureExpirationTime&&t.push(ca(e.signatureExpirationTime,!0,F.writeNumber(this.signatureExpirationTime,4))),null!==this.exportable&&t.push(ca(e.exportableCertification,!0,new Uint8Array([this.exportable?1:0]))),null!==this.trustLevel&&(r=new Uint8Array([this.trustLevel,this.trustAmount]),t.push(ca(e.trustSignature,!0,r))),null!==this.regularExpression&&t.push(ca(e.regularExpression,!0,this.regularExpression)),null!==this.revocable&&t.push(ca(e.revocable,!0,new Uint8Array([this.revocable?1:0]))),null!==this.keyExpirationTime&&t.push(ca(e.keyExpirationTime,!0,F.writeNumber(this.keyExpirationTime,4))),null!==this.preferredSymmetricAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredSymmetricAlgorithms)),t.push(ca(e.preferredSymmetricAlgorithms,!1,r))),null!==this.revocationKeyClass&&(r=new Uint8Array([this.revocationKeyClass,this.revocationKeyAlgorithm]),r=F.concat([r,this.revocationKeyFingerprint]),t.push(ca(e.revocationKey,!1,r))),!this.issuerKeyID.isNull()&&this.issuerKeyVersion<5&&t.push(ca(e.issuerKeyID,!1,this.issuerKeyID.write())),this.rawNotations.forEach((({name:n,value:i,humanReadable:s,critical:a})=>{r=[new Uint8Array([s?128:0,0,0,0])];const o=F.encodeUTF8(n);r.push(F.writeNumber(o.length,2)),r.push(F.writeNumber(i.length,2)),r.push(o),r.push(i),r=F.concat(r),t.push(ca(e.notationData,a,r))})),null!==this.preferredHashAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredHashAlgorithms)),t.push(ca(e.preferredHashAlgorithms,!1,r))),null!==this.preferredCompressionAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredCompressionAlgorithms)),t.push(ca(e.preferredCompressionAlgorithms,!1,r))),null!==this.keyServerPreferences&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyServerPreferences)),t.push(ca(e.keyServerPreferences,!1,r))),null!==this.preferredKeyServer&&t.push(ca(e.preferredKeyServer,!1,F.encodeUTF8(this.preferredKeyServer))),null!==this.isPrimaryUserID&&t.push(ca(e.primaryUserID,!1,new Uint8Array([this.isPrimaryUserID?1:0]))),null!==this.policyURI&&t.push(ca(e.policyURI,!1,F.encodeUTF8(this.policyURI))),null!==this.keyFlags&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.keyFlags)),t.push(ca(e.keyFlags,!0,r))),null!==this.signersUserID&&t.push(ca(e.signersUserID,!1,F.encodeUTF8(this.signersUserID))),null!==this.reasonForRevocationFlag&&(r=F.stringToUint8Array(String.fromCharCode(this.reasonForRevocationFlag)+this.reasonForRevocationString),t.push(ca(e.reasonForRevocation,!0,r))),null!==this.features&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.features)),t.push(ca(e.features,!1,r))),null!==this.signatureTargetPublicKeyAlgorithm&&(r=[new Uint8Array([this.signatureTargetPublicKeyAlgorithm,this.signatureTargetHashAlgorithm])],r.push(F.stringToUint8Array(this.signatureTargetHash)),r=F.concat(r),t.push(ca(e.signatureTarget,!0,r))),null!==this.embeddedSignature&&t.push(ca(e.embeddedSignature,!0,this.embeddedSignature.write())),null!==this.issuerFingerprint&&(r=[new Uint8Array([this.issuerKeyVersion]),this.issuerFingerprint],r=F.concat(r),t.push(ca(e.issuerFingerprint,this.version>=5,r))),null!==this.preferredAEADAlgorithms&&(r=F.stringToUint8Array(F.uint8ArrayToString(this.preferredAEADAlgorithms)),t.push(ca(e.preferredAEADAlgorithms,!1,r))),null!==this.preferredCipherSuites&&(r=new Uint8Array([].concat(...this.preferredCipherSuites)),t.push(ca(e.preferredCipherSuites,!1,r)));const n=F.concat(t),i=F.writeNumber(n.length,6===this.version?4:2);return F.concat([i,n])}writeUnhashedSubPackets(){const e=this.unhashedSubpackets.map((({type:e,critical:t,body:r})=>ca(e,t,r))),t=F.concat(e),r=F.writeNumber(t.length,6===this.version?4:2);return F.concat([r,t])}readSubPacket(e,t=!0){let r=0;const n=!!(128&e[r]),i=127&e[r];if(r++,t||(this.unhashedSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)}),aa.has(i)))switch(i){case L.signatureSubpacket.signatureCreationTime:this.created=F.readDate(e.subarray(r,e.length));break;case L.signatureSubpacket.signatureExpirationTime:{const t=F.readNumber(e.subarray(r,e.length));this.signatureNeverExpires=0===t,this.signatureExpirationTime=t;break}case L.signatureSubpacket.exportableCertification:this.exportable=1===e[r++];break;case L.signatureSubpacket.trustSignature:this.trustLevel=e[r++],this.trustAmount=e[r++];break;case L.signatureSubpacket.regularExpression:this.regularExpression=e[r];break;case L.signatureSubpacket.revocable:this.revocable=1===e[r++];break;case L.signatureSubpacket.keyExpirationTime:{const t=F.readNumber(e.subarray(r,e.length));this.keyExpirationTime=t,this.keyNeverExpires=0===t;break}case L.signatureSubpacket.preferredSymmetricAlgorithms:this.preferredSymmetricAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.revocationKey:this.revocationKeyClass=e[r++],this.revocationKeyAlgorithm=e[r++],this.revocationKeyFingerprint=e.subarray(r,r+20);break;case L.signatureSubpacket.issuerKeyID:if(4===this.version)this.issuerKeyID.read(e.subarray(r,e.length));else if(t)throw Error("Unexpected Issuer Key ID subpacket");break;case L.signatureSubpacket.notationData:{const t=!!(128&e[r]);r+=4;const i=F.readNumber(e.subarray(r,r+2));r+=2;const s=F.readNumber(e.subarray(r,r+2));r+=2;const a=F.decodeUTF8(e.subarray(r,r+i)),o=e.subarray(r+i,r+i+s);this.rawNotations.push({name:a,humanReadable:t,value:o,critical:n}),t&&(this.notations[a]=F.decodeUTF8(o));break}case L.signatureSubpacket.preferredHashAlgorithms:this.preferredHashAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.preferredCompressionAlgorithms:this.preferredCompressionAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.keyServerPreferences:this.keyServerPreferences=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.preferredKeyServer:this.preferredKeyServer=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.primaryUserID:this.isPrimaryUserID=0!==e[r++];break;case L.signatureSubpacket.policyURI:this.policyURI=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.keyFlags:this.keyFlags=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.signersUserID:this.signersUserID=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.reasonForRevocation:this.reasonForRevocationFlag=e[r++],this.reasonForRevocationString=F.decodeUTF8(e.subarray(r,e.length));break;case L.signatureSubpacket.features:this.features=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.signatureTarget:{this.signatureTargetPublicKeyAlgorithm=e[r++],this.signatureTargetHashAlgorithm=e[r++];const t=Le(this.signatureTargetHashAlgorithm);this.signatureTargetHash=F.uint8ArrayToString(e.subarray(r,r+t));break}case L.signatureSubpacket.embeddedSignature:this.embeddedSignature=new oa,this.embeddedSignature.read(e.subarray(r,e.length));break;case L.signatureSubpacket.issuerFingerprint:this.issuerKeyVersion=e[r++],this.issuerFingerprint=e.subarray(r,e.length),this.issuerKeyVersion>=5?this.issuerKeyID.read(this.issuerFingerprint):this.issuerKeyID.read(this.issuerFingerprint.subarray(-8));break;case L.signatureSubpacket.preferredAEADAlgorithms:this.preferredAEADAlgorithms=[...e.subarray(r,e.length)];break;case L.signatureSubpacket.preferredCipherSuites:this.preferredCipherSuites=[];for(let t=r;t<e.length;t+=2)this.preferredCipherSuites.push([e[t],e[t+1]]);break;default:this.unknownSubpackets.push({type:i,critical:n,body:e.subarray(r,e.length)})}}readSubPackets(e,t=!0,r){const n=6===this.version?4:2,i=F.readNumber(e.subarray(0,n));let s=n;for(;s<2+i;){const n=$e(e.subarray(s,e.length));s+=n.offset,this.readSubPacket(e.subarray(s,s+n.len),t,r),s+=n.len}return s}toSign(e,t){const r=L.signature;switch(e){case r.binary:return null!==t.text?F.encodeUTF8(t.getText(!0)):t.getBytes(!0);case r.text:{const e=t.getBytes(!0);return F.canonicalizeEOL(e)}case r.standalone:return new Uint8Array(0);case r.certGeneric:case r.certPersona:case r.certCasual:case r.certPositive:case r.certRevocation:{let e,n;if(t.userID)n=180,e=t.userID;else{if(!t.userAttribute)throw Error("Either a userID or userAttribute packet needs to be supplied for certification.");n=209,e=t.userAttribute}const i=e.write();return F.concat([this.toSign(r.key,t),new Uint8Array([n]),F.writeNumber(i.length,4),i])}case r.subkeyBinding:case r.subkeyRevocation:case r.keyBinding:return F.concat([this.toSign(r.key,t),this.toSign(r.key,{key:t.bind})]);case r.key:if(void 0===t.key)throw Error("Key packet is required for this signature.");return t.key.writeForHash(this.version);case r.keyRevocation:return this.toSign(r.key,t);case r.timestamp:return new Uint8Array(0);case r.thirdParty:throw Error("Not implemented");default:throw Error("Unknown signature type.")}}calculateTrailer(e,t){let r=0;return b(S(this.signatureData),(e=>{r+=e.length}),(()=>{const n=[];return 5!==this.version||this.signatureType!==L.signature.binary&&this.signatureType!==L.signature.text||(t?n.push(new Uint8Array(6)):n.push(e.writeHeader())),n.push(new Uint8Array([this.version,255])),5===this.version&&n.push(new Uint8Array(4)),n.push(F.writeNumber(r,4)),F.concat(n)}))}toHash(e,t,r=!1){const n=this.toSign(e,t);return F.concat([this.salt||new Uint8Array,n,this.signatureData,this.calculateTrailer(t,r)])}async hash(e,t,r,n=!1){if(6===this.version&&this.salt.length!==ua(this.hashAlgorithm))throw Error("Signature salt does not have the expected length");return r||(r=this.toHash(e,t,n)),Me(this.hashAlgorithm,r)}async verify(e,t,r,n=new Date,i=!1,s=T){if(!this.issuerKeyID.equals(e.getKeyID()))throw Error("Signature was not issued by the given public key");if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Public key algorithm used to sign signature does not match issuer key algorithm.");const a=t===L.signature.binary||t===L.signature.text;if(!(this[ia]&&!a)){let n,s;if(this.hashed?s=await this.hashed:(n=this.toHash(t,r,i),s=await this.hash(t,r,n)),s=await U(s),this.signedHashValue[0]!==s[0]||this.signedHashValue[1]!==s[1])throw Error("Signed digest did not match");this.params=await this.params;const a=this.publicKeyAlgorithm===L.publicKey.hmac?e.privateParams:null;if(this[ia]=await Ji(this.publicKeyAlgorithm,this.hashAlgorithm,this.params,e.publicParams,a,n,s),!this[ia])throw Error("Signature verification failed")}const o=F.normalizeDate(n);if(o&&this.created>o)throw Error("Signature creation time is in the future");if(o&&o>=this.getExpirationTime())throw Error("Signature is expired");if(s.rejectHashAlgorithms.has(this.hashAlgorithm))throw Error("Insecure hash algorithm: "+L.read(L.hash,this.hashAlgorithm).toUpperCase());if(s.rejectMessageHashAlgorithms.has(this.hashAlgorithm)&&[L.signature.binary,L.signature.text].includes(this.signatureType))throw Error("Insecure message hash algorithm: "+L.read(L.hash,this.hashAlgorithm).toUpperCase());if(this.unknownSubpackets.forEach((({type:e,critical:t})=>{if(t)throw Error("Unknown critical signature subpacket type "+e)})),this.rawNotations.forEach((({name:e,critical:t})=>{if(t&&s.knownNotations.indexOf(e)<0)throw Error("Unknown critical notation: "+e)})),null!==this.revocationKeyClass)throw Error("This key is intended to be revoked with an authorized key, which OpenPGP.js does not support.")}isExpired(e=new Date){const t=F.normalizeDate(e);return null!==t&&!(this.created<=t&&t<this.getExpirationTime())}getExpirationTime(){return this.signatureNeverExpires?1/0:new Date(this.created.getTime()+1e3*this.signatureExpirationTime)}}function ca(e,t,r){const n=[];return n.push(et(r.length+1)),n.push(new Uint8Array([(t?128:0)|e])),n.push(r),F.concat(n)}function ua(e){switch(e){case L.hash.sha256:return 16;case L.hash.sha384:return 24;case L.hash.sha512:return 32;case L.hash.sha224:case L.hash.sha3_256:return 16;case L.hash.sha3_512:return 32;default:throw Error("Unsupported hash function")}}class ha{static get tag(){return L.packet.onePassSignature}static fromSignaturePacket(e,t){const r=new ha;return r.version=6===e.version?6:3,r.signatureType=e.signatureType,r.hashAlgorithm=e.hashAlgorithm,r.publicKeyAlgorithm=e.publicKeyAlgorithm,r.issuerKeyID=e.issuerKeyID,r.salt=e.salt,r.issuerFingerprint=e.issuerFingerprint,r.flags=t?1:0,r}constructor(){this.version=null,this.signatureType=null,this.hashAlgorithm=null,this.publicKeyAlgorithm=null,this.salt=null,this.issuerKeyID=null,this.issuerFingerprint=null,this.flags=null}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the one-pass signature packet is unsupported.`);if(this.signatureType=e[t++],this.hashAlgorithm=e[t++],this.publicKeyAlgorithm=e[t++],6===this.version){const r=e[t++];this.salt=e.subarray(t,t+r),t+=r,this.issuerFingerprint=e.subarray(t,t+32),t+=32,this.issuerKeyID=new na,this.issuerKeyID.read(this.issuerFingerprint)}else this.issuerKeyID=new na,this.issuerKeyID.read(e.subarray(t,t+8)),t+=8;return this.flags=e[t++],this}write(){const e=[new Uint8Array([this.version,this.signatureType,this.hashAlgorithm,this.publicKeyAlgorithm])];return 6===this.version?e.push(new Uint8Array([this.salt.length]),this.salt,this.issuerFingerprint):e.push(this.issuerKeyID.write()),e.push(new Uint8Array([this.flags])),F.concatUint8Array(e)}calculateTrailer(...e){return D((async()=>oa.prototype.calculateTrailer.apply(await this.correspondingSig,e)))}async verify(){const e=await this.correspondingSig;if(!e||e.constructor.tag!==L.packet.signature)throw Error("Corresponding signature packet missing");if(e.signatureType!==this.signatureType||e.hashAlgorithm!==this.hashAlgorithm||e.publicKeyAlgorithm!==this.publicKeyAlgorithm||!e.issuerKeyID.equals(this.issuerKeyID)||3===this.version&&6===e.version||6===this.version&&6!==e.version||6===this.version&&!F.equalsUint8Array(e.issuerFingerprint,this.issuerFingerprint)||6===this.version&&!F.equalsUint8Array(e.salt,this.salt))throw Error("Corresponding signature packet does not match one-pass signature packet");return e.hashed=this.hashed,e.verify.apply(e,arguments)}}function la(e,t){if(!t[e]){let t;try{t=L.read(L.packet,e)}catch{throw new ot("Unknown packet type with tag: "+e)}throw Error("Packet not allowed in this context: "+t)}return new t[e]}ha.prototype.hash=oa.prototype.hash,ha.prototype.toHash=oa.prototype.toHash,ha.prototype.toSign=oa.prototype.toSign;class fa extends Array{static async fromBinary(e,t,r=T,n=null,i=!1){const s=new fa;return await s.read(e,t,r,n,i),s}async read(e,t,r=T,n=null,i=!1){let s;r.additionalAllowedPackets.length&&(s=F.constructAllowedPackets(r.additionalAllowedPackets),t={...t,...s}),this.stream=v(e,(async(e,a)=>{const o=x(e),c=Q(a);try{let a=F.isStream(e);for(;;){let e,u;if(await c.ready,await st(o,a,(async a=>{try{if(a.tag===L.packet.marker||a.tag===L.packet.trust||a.tag===L.packet.padding)return;const e=la(a.tag,t);try{n?.recordPacket(a.tag,s)}catch(e){if(r.enforceGrammar)throw e;F.printDebugError(e)}e.packets=new fa,e.fromStream=F.isStream(a.packet),u=e.fromStream;try{await e.read(a.packet,r)}catch(t){if(!(t instanceof at))throw F.wrapError(new ct(`Parsing ${e.constructor.name} failed`),t);throw t}await c.write(e)}catch(t){const n=t instanceof ot&&a.tag<=39,s=t instanceof at&&!(t instanceof ot)&&!r.ignoreUnsupportedPackets,o=t instanceof ct&&!r.ignoreMalformedPackets,u=it(a.tag);if(n||s||o||u||!(t instanceof ot||t instanceof at||t instanceof ct))i?e=t:await c.abort(t);else{const e=new ut(a.tag,a.packet);await c.write(e)}F.printDebugError(t)}})),u&&(a=null),e)throw await o.readToEnd(),e;const h=await o.peekBytes(2);if(!h||!h.length){try{n?.recordEnd()}catch(e){if(r.enforceGrammar)throw e;F.printDebugError(e)}return await c.ready,void await c.close()}}}catch(e){await c.abort(e)}}));const a=x(this.stream);for(;;){const{done:e,value:t}=await a.read();if(e?this.stream=null:this.push(t),e||it(t.constructor.tag))break}a.releaseLock()}write(){const e=[];for(let t=0;t<this.length;t++){const r=this[t]instanceof ut?this[t].tag:this[t].constructor.tag,n=this[t].write();if(F.isStream(n)&&it(this[t].constructor.tag)){let t=[],i=0;const s=512;e.push(rt(r)),e.push(b(n,(e=>{if(t.push(e),i+=e.length,i>=s){const e=Math.min(Math.log(i)/Math.LN2|0,30),r=2**e,n=F.concat([tt(e)].concat(t));return t=[n.subarray(1+r)],i=t[0].length,n.subarray(0,1+r)}}),(()=>F.concat([et(i)].concat(t)))))}else{if(F.isStream(n)){let t=0;e.push(b(S(n),(e=>{t+=e.length}),(()=>nt(r,t))))}else e.push(nt(r,n.length));e.push(n)}}return F.concat(e)}filterByTag(...e){const t=new fa,r=e=>t=>e===t;for(let n=0;n<this.length;n++)e.some(r(this[n].constructor.tag))&&t.push(this[n]);return t}findPacket(e){return this.find((t=>t.constructor.tag===e))}indexOfTag(...e){const t=[],r=this,n=e=>t=>e===t;for(let i=0;i<this.length;i++)e.some(n(r[i].constructor.tag))&&t.push(i);return t}}class ya extends Error{constructor(...e){super(...e),Error.captureStackTrace&&Error.captureStackTrace(this,ya),this.name="GrammarError"}}var da;!function(e){e[e.EmptyMessage=0]="EmptyMessage",e[e.PlaintextOrEncryptedData=1]="PlaintextOrEncryptedData",e[e.EncryptedSessionKeys=2]="EncryptedSessionKeys",e[e.StandaloneAdditionalAllowedData=3]="StandaloneAdditionalAllowedData"}(da||(da={}));class pa{constructor(){this.state=da.EmptyMessage,this.leadingOnePassSignatureCounter=0}recordPacket(e,t){switch(this.state){case da.EmptyMessage:case da.StandaloneAdditionalAllowedData:switch(e){case L.packet.literalData:case L.packet.compressedData:case L.packet.aeadEncryptedData:case L.packet.symEncryptedIntegrityProtectedData:case L.packet.symmetricallyEncryptedData:return void(this.state=da.PlaintextOrEncryptedData);case L.packet.signature:if(this.state===da.StandaloneAdditionalAllowedData&&--this.leadingOnePassSignatureCounter<0)throw new ya("Trailing signature packet without OPS");return;case L.packet.onePassSignature:if(this.state===da.StandaloneAdditionalAllowedData)throw new ya("OPS following StandaloneAdditionalAllowedData");return void this.leadingOnePassSignatureCounter++;case L.packet.publicKeyEncryptedSessionKey:case L.packet.symEncryptedSessionKey:return void(this.state=da.EncryptedSessionKeys);default:if(!t?.[e])throw new ya(`Unexpected packet ${e} in state ${this.state}`);return void(this.state=da.StandaloneAdditionalAllowedData)}case da.PlaintextOrEncryptedData:if(e===L.packet.signature){if(--this.leadingOnePassSignatureCounter<0)throw new ya("Trailing signature packet without OPS");return void(this.state=da.PlaintextOrEncryptedData)}if(!t?.[e])throw new ya(`Unexpected packet ${e} in state ${this.state}`);return void(this.state=da.PlaintextOrEncryptedData);case da.EncryptedSessionKeys:switch(e){case L.packet.publicKeyEncryptedSessionKey:case L.packet.symEncryptedSessionKey:return void(this.state=da.EncryptedSessionKeys);case L.packet.symEncryptedIntegrityProtectedData:case L.packet.aeadEncryptedData:case L.packet.symmetricallyEncryptedData:return void(this.state=da.PlaintextOrEncryptedData);case L.packet.signature:if(--this.leadingOnePassSignatureCounter<0)throw new ya("Trailing signature packet without OPS");return void(this.state=da.PlaintextOrEncryptedData);default:if(!t?.[e])throw new ya(`Unexpected packet ${e} in state ${this.state}`);this.state=da.EncryptedSessionKeys}}}recordEnd(){switch(this.state){case da.EmptyMessage:case da.PlaintextOrEncryptedData:case da.EncryptedSessionKeys:case da.StandaloneAdditionalAllowedData:if(this.leadingOnePassSignatureCounter>0)throw new ya("Missing trailing signature packets")}}}const ga=/*#__PURE__*/F.constructAllowedPackets([ra,ha,oa]);class wa{static get tag(){return L.packet.compressedData}constructor(e=T){this.packets=null,this.algorithm=e.preferredCompressionAlgorithm,this.compressed=null}async read(e,t=T){await K(e,(async e=>{this.algorithm=await e.readByte(),this.compressed=e.remainder(),await this.decompress(t)}))}write(){return null===this.compressed&&this.compress(),F.concat([new Uint8Array([this.algorithm]),this.compressed])}async decompress(e=T){const t=L.read(L.compression,this.algorithm),r=Ea[t];if(!r)throw Error(t+" decompression not supported");let n=await r(this.compressed);if(e.maxDecompressedMessageSize!==1/0){let t=0;n=b(n,(r=>{if(t+=r.length,t>e.maxDecompressedMessageSize)throw Error("Maximum decompressed message size exceeded");return r}))}u(this.compressed)&&!o(this.compressed)||(n=await U(n)),this.packets=await fa.fromBinary(n,ga,e,new pa)}compress(){const e=L.read(L.compression,this.algorithm),t=ka[e];if(!t)throw Error(e+" compression not supported");const r=this.packets.write();let n=t(r);u(r)&&!o(r)||(n=D((()=>U(n)))),this.compressed=n}}function Aa(e,t){return r=>{let n;if(n=o(r)?new ReadableStream({async start(e){try{e.enqueue(await U(r)),e.close()}catch(t){e.error(t)}}}):u(r)?r:p(r),n=function(e){const t=x(e);return new ReadableStream({async pull(e){try{const{value:r,done:n}=await t.read();if(n)return void e.close();for(let t=0;t<=r.length;t+=65536)(!t||t<r.length)&&e.enqueue(r.subarray(t,t+65536))}catch(t){e.error(t)}}},{highWaterMark:0})}(n),e)try{const t=e();return n.pipeThrough(t)}catch(e){if("TypeError"!==e.name)throw e}const i=x(n),s=new t;let a=!1,c=!1;return new ReadableStream({start(e){s.ondata=(t,r)=>{e.enqueue(t),a=!0,r&&(e.close(),c=!0)}},async pull(){for(a=!1;!a&&!c;){const{done:e,value:t}=await i.read();if(e)return void s.push(new Uint8Array,!0);t.length&&s.push(t)}}},{highWaterMark:0})}}function ma(){return async function(e){const{default:t}=await Promise.resolve().then((function(){return Vp}));return t(p(e))}}const ba=e=>({compressor:"undefined"!=typeof CompressionStream&&(()=>new CompressionStream(e)),decompressor:"undefined"!=typeof DecompressionStream&&(()=>new DecompressionStream(e))}),ka={zip:/*#__PURE__*/Aa(ba("deflate-raw").compressor,Ws),zlib:/*#__PURE__*/Aa(ba("deflate").compressor,$s)},Ea={uncompressed:e=>e,zip:/*#__PURE__*/Aa(ba("deflate-raw").decompressor,Xs),zlib:/*#__PURE__*/Aa(ba("deflate").decompressor,ea),bzip2:/*#__PURE__*/ma()},va=/*#__PURE__*/F.constructAllowedPackets([ra,wa,ha,oa]);class Ka{static get tag(){return L.packet.symEncryptedIntegrityProtectedData}static fromObject({version:e,aeadAlgorithm:t}){if(1!==e&&2!==e)throw Error("Unsupported SEIPD version");const r=new Ka;return r.version=e,2===e&&(r.aeadAlgorithm=t),r}constructor(){this.version=null,this.cipherAlgorithm=null,this.aeadAlgorithm=null,this.chunkSizeByte=null,this.salt=null,this.encrypted=null,this.packets=null}async read(e){await K(e,(async e=>{if(this.version=await e.readByte(),1!==this.version&&2!==this.version)throw new at(`Version ${this.version} of the SEIP packet is unsupported.`);2===this.version&&(this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte(),this.salt=await e.readBytes(32)),this.encrypted=e.remainder()}))}write(){return 2===this.version?F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.salt,this.encrypted]):F.concat([new Uint8Array([this.version]),this.encrypted])}async encrypt(e,t,r=T){const{blockSize:n,keySize:i}=Ir(e);if(t.length!==i)throw Error("Unexpected session key size");let s=this.packets.write();if(o(s)&&(s=await U(s)),2===this.version)this.cipherAlgorithm=e,this.salt=de(32),this.chunkSizeByte=r.aeadChunkSizeByte,this.encrypted=await Sa(this,"encrypt",t,s);else{const r=await ei(e),i=new Uint8Array([211,20]),a=F.concat([r,s,i]),o=await Me(L.hash.sha1,I(a)),c=F.concat([a,o]);this.encrypted=await ti(e,t,c,new Uint8Array(n))}return!0}async decrypt(e,t,r=T){if(t.length!==Ir(e).keySize)throw Error("Unexpected session key size");let n,i=S(this.encrypted);o(i)&&(i=await U(i));let s=!1;if(2===this.version){if(this.cipherAlgorithm!==e)throw Error("Unexpected session key algorithm");n=await Sa(this,"decrypt",t,i)}else{const{blockSize:a}=Ir(e),o=await ri(e,t,i,new Uint8Array(a)),c=C(I(o),-20),u=C(o,0,-20),h=Promise.all([U(await Me(L.hash.sha1,I(u))),U(c)]).then((([e,t])=>{if(!F.equalsUint8Array(e,t))throw Error("Modification detected.");return new Uint8Array})),l=C(u,a+2);n=C(l,0,-2),n=w([n,D((()=>h))]),F.isStream(i)&&r.allowUnauthenticatedStream?s=!0:n=await U(n)}return this.packets=await fa.fromBinary(n,va,r,new pa,s),!0}}async function Sa(e,t,r,n){const i=e instanceof Ka&&2===e.version,s=!i&&e.constructor.tag===L.packet.aeadEncryptedData;if(!i&&!s)throw Error("Unexpected packet type");const a=Ni(e.aeadAlgorithm,s),o="decrypt"===t?a.tagLength:0,c="encrypt"===t?a.tagLength:0,u=2**(e.chunkSizeByte+6)+o,h=s?8:0,l=new ArrayBuffer(13+h),f=new Uint8Array(l,0,5+h),y=new Uint8Array(l),d=new DataView(l),p=new Uint8Array(l,5,8);f.set([192|e.constructor.tag,e.version,e.cipherAlgorithm,e.aeadAlgorithm,e.chunkSizeByte],0);let g,w,m=0,b=Promise.resolve(),k=0,E=0;if(i){const{keySize:t}=Ir(e.cipherAlgorithm),{ivLength:n}=a,i=new Uint8Array(l,0,5),s=await Pr(L.hash.sha256,r,e.salt,i,t+n);r=s.subarray(0,t),g=s.subarray(t),g.fill(0,g.length-8),w=new DataView(g.buffer,g.byteOffset,g.byteLength)}else g=e.iv;const K=await a(e.cipherAlgorithm,r);return v(n,(async(r,n)=>{if("array"!==F.isStream(r)){const t=new TransformStream({},{highWaterMark:F.getHardwareConcurrency()*2**(e.chunkSizeByte+6),size:e=>e.length});A(t.readable,n),n=t.writable}const s=x(r),a=Q(n);try{for(;;){let e=await s.readBytes(u+o)||new Uint8Array;const r=e.subarray(e.length-o);let n,l,A;if(e=e.subarray(0,e.length-o),i)A=g;else{A=g.slice();for(let e=0;e<8;e++)A[g.length-8+e]^=p[e]}if(!m||e.length?(s.unshift(r),n=K[t](e,A,f),n.catch((()=>{})),E+=e.length-o+c):(d.setInt32(5+h+4,k),n=K[t](r,A,y),n.catch((()=>{})),E+=c,l=!0),k+=e.length-o,b=b.then((()=>n)).then((async e=>{await a.ready,await a.write(e),E-=e.length})).catch((e=>a.abort(e))),(l||E>a.desiredSize)&&await b,l){await a.close();break}i?w.setInt32(g.length-4,++m):d.setInt32(9,++m)}}catch(e){await a.ready.catch((()=>{})),await a.abort(e)}}))}const Ia=/*#__PURE__*/F.constructAllowedPackets([ra,wa,ha,oa]);class Ba{static get tag(){return L.packet.aeadEncryptedData}constructor(){this.version=1,this.cipherAlgorithm=null,this.aeadAlgorithm=L.aead.eax,this.chunkSizeByte=null,this.iv=null,this.encrypted=null,this.packets=null}async read(e){await K(e,(async e=>{const t=await e.readByte();if(1!==t)throw new at(`Version ${t} of the AEAD-encrypted data packet is not supported.`);this.cipherAlgorithm=await e.readByte(),this.aeadAlgorithm=await e.readByte(),this.chunkSizeByte=await e.readByte();const r=Ni(this.aeadAlgorithm,!0);this.iv=await e.readBytes(r.ivLength),this.encrypted=e.remainder()}))}write(){return F.concat([new Uint8Array([this.version,this.cipherAlgorithm,this.aeadAlgorithm,this.chunkSizeByte]),this.iv,this.encrypted])}async decrypt(e,t,r=T){this.packets=await fa.fromBinary(await Sa(this,"decrypt",t,S(this.encrypted)),Ia,r,new pa)}async encrypt(e,t,r=T){this.cipherAlgorithm=e;const{ivLength:n}=Ni(this.aeadAlgorithm,!0);this.iv=de(n),this.chunkSizeByte=r.aeadChunkSizeByte;const i=this.packets.write();this.encrypted=await Sa(this,"encrypt",t,i)}}const Ca=new Set([L.publicKey.x25519,L.publicKey.x448,L.publicKey.pqc_mlkem_x25519]);class Ua{static get tag(){return L.packet.publicKeyEncryptedSessionKey}constructor(){this.version=null,this.publicKeyID=new na,this.publicKeyVersion=null,this.publicKeyFingerprint=null,this.publicKeyAlgorithm=null,this.sessionKey=null,this.sessionKeyAlgorithm=null,this.encrypted={}}static fromObject({version:e,encryptionKeyPacket:t,anonymousRecipient:r,sessionKey:n,sessionKeyAlgorithm:i}){const s=new Ua;if(3!==e&&6!==e)throw Error("Unsupported PKESK version");return s.version=e,6===e&&(s.publicKeyVersion=r?null:t.version,s.publicKeyFingerprint=r?null:t.getFingerprintBytes()),s.publicKeyID=r?na.wildcard():t.getKeyID(),s.publicKeyAlgorithm=t.algorithm,s.sessionKey=n,s.sessionKeyAlgorithm=i,s}read(e){let t=0;if(this.version=e[t++],3!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the PKESK packet is unsupported.`);if(6===this.version){const r=e[t++];if(r){this.publicKeyVersion=e[t++];const n=r-1;this.publicKeyFingerprint=e.subarray(t,t+n),t+=n,this.publicKeyVersion>=5?this.publicKeyID.read(this.publicKeyFingerprint):this.publicKeyID.read(this.publicKeyFingerprint.subarray(-8))}else this.publicKeyID=na.wildcard()}else t+=this.publicKeyID.read(e.subarray(t,t+8));if(this.publicKeyAlgorithm=e[t++],this.encrypted=function(e,t){let r=0;switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:return{c:F.readMPI(t.subarray(r))};case L.publicKey.elgamal:{const e=F.readMPI(t.subarray(r));return r+=e.length+2,{c1:e,c2:F.readMPI(t.subarray(r))}}case L.publicKey.ecdh:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=new _n;return n.read(t.subarray(r)),{V:e,C:n}}case L.publicKey.x25519:case L.publicKey.x448:{const n=Zi(e),i=F.readExactSubarray(t,r,r+n);r+=i.length;const s=new Zn;return s.read(t.subarray(r)),{ephemeralPublicKey:i,C:s}}case L.publicKey.aead:{const e=new jn;r+=e.read(t.subarray(r));const{ivLength:n}=Ni(e.getValue()),i=t.subarray(r,r+n);r+=n;const s=new zn;return r+=s.read(t.subarray(r)),{aeadMode:e,iv:i,c:s}}case L.publicKey.pqc_mlkem_x25519:{const e=F.readExactSubarray(t,r,r+Zi(L.publicKey.x25519));r+=e.length;const n=F.readExactSubarray(t,r,r+1088);r+=n.length;const i=new Zn;return i.read(t.subarray(r)),{eccCipherText:e,mlkemCipherText:n,C:i}}default:throw new at("Unknown public key encryption algorithm.")}}(this.publicKeyAlgorithm,e.subarray(t)),Ca.has(this.publicKeyAlgorithm))if(3===this.version)this.sessionKeyAlgorithm=L.write(L.symmetric,this.encrypted.C.algorithm);else if(null!==this.encrypted.C.algorithm)throw Error("Unexpected cleartext symmetric algorithm")}write(){const e=[new Uint8Array([this.version])];return 6===this.version?null!==this.publicKeyFingerprint?(e.push(new Uint8Array([this.publicKeyFingerprint.length+1,this.publicKeyVersion])),e.push(this.publicKeyFingerprint)):e.push(new Uint8Array([0])):e.push(this.publicKeyID.write()),e.push(new Uint8Array([this.publicKeyAlgorithm]),zi(this.publicKeyAlgorithm,this.encrypted)),F.concatUint8Array(e)}async encrypt(e){const t=L.write(L.publicKey,this.publicKeyAlgorithm),r=3===this.version?this.sessionKeyAlgorithm:null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=Pa(this.version,t,r,this.sessionKey),s=t===L.publicKey.aead?e.privateParams:null;this.encrypted=await Oi(t,r,e.publicParams,s,i,n)}async decrypt(e,t){if(this.publicKeyAlgorithm!==e.algorithm)throw Error("Decryption error");const r=t?Pa(this.version,this.publicKeyAlgorithm,t.sessionKeyAlgorithm,t.sessionKey):null,n=5===e.version?e.getFingerprintBytes().subarray(0,20):e.getFingerprintBytes(),i=await Hi(this.publicKeyAlgorithm,e.publicParams,e.privateParams,this.encrypted,n,r),{sessionKey:s,sessionKeyAlgorithm:a}=function(e,t,r,n){switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.aead:{const t=r.subarray(0,r.length-2),i=r.subarray(r.length-2),s=F.writeChecksum(t.subarray(t.length%8)),a=s[0]===i[0]&s[1]===i[1],o=6===e?{sessionKeyAlgorithm:null,sessionKey:t}:{sessionKeyAlgorithm:t[0],sessionKey:t.subarray(1)};if(n){const t=a&o.sessionKeyAlgorithm===n.sessionKeyAlgorithm&o.sessionKey.length===n.sessionKey.length;return{sessionKey:F.selectUint8Array(t,o.sessionKey,n.sessionKey),sessionKeyAlgorithm:6===e?null:F.selectUint8(t,o.sessionKeyAlgorithm,n.sessionKeyAlgorithm)}}if(a&&(6===e||L.read(L.symmetric,o.sessionKeyAlgorithm)))return o;throw Error("Decryption error")}case L.publicKey.x25519:case L.publicKey.x448:case L.publicKey.pqc_mlkem_x25519:return{sessionKeyAlgorithm:null,sessionKey:r};default:throw Error("Unsupported public key algorithm")}}(this.version,this.publicKeyAlgorithm,i,t);if(3===this.version){const e=!Ca.has(this.publicKeyAlgorithm);if(this.sessionKeyAlgorithm=e?a:this.sessionKeyAlgorithm,s.length!==Ir(this.sessionKeyAlgorithm).keySize)throw Error("Unexpected session key size")}this.sessionKey=s}}function Pa(e,t,r,n){switch(t){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.aead:return F.concatUint8Array([new Uint8Array(6===e?[]:[r]),n,F.writeChecksum(n.subarray(n.length%8))]);case L.publicKey.x25519:case L.publicKey.x448:case L.publicKey.pqc_mlkem_x25519:return n;default:throw Error("Unsupported public key algorithm")}}class Da{static get tag(){return L.packet.symEncryptedSessionKey}constructor(e=T){this.version=e.aeadProtect?6:4,this.sessionKey=null,this.sessionKeyEncryptionAlgorithm=null,this.sessionKeyAlgorithm=null,this.aeadAlgorithm=L.write(L.aead,e.preferredAEADAlgorithm),this.encrypted=null,this.s2k=null,this.iv=null}read(e){let t=0;if(this.version=e[t++],4!==this.version&&5!==this.version&&6!==this.version)throw new at(`Version ${this.version} of the SKESK packet is unsupported.`);6===this.version&&t++;const r=e[t++];this.version>=5&&(this.aeadAlgorithm=e[t++],6===this.version&&t++);const n=e[t++];if(this.s2k=ss(n),t+=this.s2k.read(e.subarray(t,e.length)),this.version>=5){const r=Ni(this.aeadAlgorithm,!0);this.iv=e.subarray(t,t+=r.ivLength)}this.version>=5||t<e.length?(this.encrypted=e.subarray(t,e.length),this.sessionKeyEncryptionAlgorithm=r):this.sessionKeyAlgorithm=r}write(){const e=null===this.encrypted?this.sessionKeyAlgorithm:this.sessionKeyEncryptionAlgorithm;let t;const r=this.s2k.write();if(6===this.version){const n=r.length,i=3+n+this.iv.length;t=F.concatUint8Array([new Uint8Array([this.version,i,e,this.aeadAlgorithm,n]),r,this.iv,this.encrypted])}else 5===this.version?t=F.concatUint8Array([new Uint8Array([this.version,e,this.aeadAlgorithm]),r,this.iv,this.encrypted]):(t=F.concatUint8Array([new Uint8Array([this.version,e]),r]),null!==this.encrypted&&(t=F.concatUint8Array([t,this.encrypted])));return t}async decrypt(e,t=T){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm,{blockSize:n,keySize:i}=Ir(r),s=await this.s2k.produceKey(e,i,t);if(this.version>=5){const e=Ni(this.aeadAlgorithm,!0),t=new Uint8Array([192|Da.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),n=6===this.version?await Pr(L.hash.sha256,s,new Uint8Array,t,i):s,a=await e(r,n);this.sessionKey=await a.decrypt(this.encrypted,this.iv,t)}else if(null!==this.encrypted){const e=await ri(r,s,this.encrypted,new Uint8Array(n));if(this.sessionKeyAlgorithm=L.write(L.symmetric,e[0]),this.sessionKey=e.subarray(1,e.length),this.sessionKey.length!==Ir(this.sessionKeyAlgorithm).keySize)throw Error("Unexpected session key size")}else this.sessionKey=s}async encrypt(e,t=T){const r=null!==this.sessionKeyEncryptionAlgorithm?this.sessionKeyEncryptionAlgorithm:this.sessionKeyAlgorithm;this.sessionKeyEncryptionAlgorithm=r,this.s2k=as(t),this.s2k.generateSalt();const{blockSize:n,keySize:i}=Ir(r),s=await this.s2k.produceKey(e,i,t);if(null===this.sessionKey&&(this.sessionKey=Vi(this.sessionKeyAlgorithm)),this.version>=5){const e=Ni(this.aeadAlgorithm);this.iv=de(e.ivLength);const t=new Uint8Array([192|Da.tag,this.version,this.sessionKeyEncryptionAlgorithm,this.aeadAlgorithm]),n=6===this.version?await Pr(L.hash.sha256,s,new Uint8Array,t,i):s,a=await e(r,n);this.encrypted=await a.encrypt(this.sessionKey,this.iv,t)}else{const e=F.concatUint8Array([new Uint8Array([this.sessionKeyAlgorithm]),this.sessionKey]);this.encrypted=await ti(r,s,e,new Uint8Array(n))}}}class xa{static get tag(){return L.packet.publicKey}constructor(e=new Date,t=T){this.version=t.v6Keys?6:4,this.created=F.normalizeDate(e),this.algorithm=null,this.publicParams=null,this.expirationTimeV3=0,this.fingerprint=null,this.keyID=null}static fromSecretKeyPacket(e){const t=new xa,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}async read(e,t=T){let r=0;if(this.version=e[r++],5===this.version&&!t.enableParsingV5Entities)throw new at("Support for parsing v5 entities is disabled; turn on `config.enableParsingV5Entities` if needed");if(4===this.version||5===this.version||6===this.version){this.created=F.readDate(e.subarray(r,r+4)),r+=4,this.algorithm=e[r++],this.version>=5&&(r+=4);const{read:t,publicParams:n}=function(e,t){let r=0;switch(e){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=F.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{n:e,e:n}}}case L.publicKey.dsa:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=F.readMPI(t.subarray(r));r+=n.length+2;const i=F.readMPI(t.subarray(r));r+=i.length+2;const s=F.readMPI(t.subarray(r));return r+=s.length+2,{read:r,publicParams:{p:e,q:n,g:i,y:s}}}case L.publicKey.elgamal:{const e=F.readMPI(t.subarray(r));r+=e.length+2;const n=F.readMPI(t.subarray(r));r+=n.length+2;const i=F.readMPI(t.subarray(r));return r+=i.length+2,{read:r,publicParams:{p:e,g:n,y:i}}}case L.publicKey.ecdsa:{const e=new Xe;r+=e.read(t),Yi(e);const n=F.readMPI(t.subarray(r));return r+=n.length+2,{read:r,publicParams:{oid:e,Q:n}}}case L.publicKey.eddsaLegacy:{const e=new Xe;if(r+=e.read(t),Yi(e),e.getName()!==L.curve.ed25519Legacy)throw Error("Unexpected OID for eddsaLegacy");let n=F.readMPI(t.subarray(r));return r+=n.length+2,n=F.leftPad(n,33),{read:r,publicParams:{oid:e,Q:n}}}case L.publicKey.ecdh:{const e=new Xe;r+=e.read(t),Yi(e);const n=F.readMPI(t.subarray(r));r+=n.length+2;const i=new Gn;return r+=i.read(t.subarray(r)),{read:r,publicParams:{oid:e,Q:n,kdfParams:i}}}case L.publicKey.ed25519:case L.publicKey.ed448:case L.publicKey.x25519:case L.publicKey.x448:{const n=F.readExactSubarray(t,r,r+Zi(e));return r+=n.length,{read:r,publicParams:{A:n}}}case L.publicKey.hmac:case L.publicKey.aead:{const e=new Vn;r+=e.read(t);const n=Le(L.hash.sha256),i=t.subarray(r,r+n);return r+=n,{read:r,publicParams:{cipher:e,digest:i}}}case L.publicKey.pqc_mlkem_x25519:{const e=F.readExactSubarray(t,r,r+Zi(L.publicKey.x25519));r+=e.length;const n=F.readExactSubarray(t,r,r+1184);return r+=n.length,{read:r,publicParams:{eccPublicKey:e,mlkemPublicKey:n}}}case L.publicKey.pqc_mldsa_ed25519:{const e=F.readExactSubarray(t,r,r+Zi(L.publicKey.ed25519));r+=e.length;const n=F.readExactSubarray(t,r,r+1952);return r+=n.length,{read:r,publicParams:{eccPublicKey:e,mldsaPublicKey:n}}}default:throw new at("Unknown public key encryption algorithm.")}}(this.algorithm,e.subarray(r));if(6===this.version&&n.oid&&(n.oid.getName()===L.curve.curve25519Legacy||n.oid.getName()===L.curve.ed25519Legacy))throw Error("Legacy curve25519 cannot be used with v6 keys");if(6!==this.version&&this.algorithm===L.publicKey.pqc_mldsa_ed25519)throw Error("Unexpected key version: ML-DSA algorithms can only be used with v6 keys");return this.publicParams=n,r+=t,await this.computeFingerprintAndKeyID(),r}throw new at(`Version ${this.version} of the key packet is unsupported.`)}write(){const e=[];e.push(new Uint8Array([this.version])),e.push(F.writeDate(this.created)),e.push(new Uint8Array([this.algorithm]));const t=zi(this.algorithm,this.publicParams);return this.version>=5&&e.push(F.writeNumber(t.length,4)),e.push(t),F.concatUint8Array(e)}writeForHash(e){const t=this.writePublicKey(),r=149+e,n=e>=5?4:2;return F.concatUint8Array([new Uint8Array([r]),F.writeNumber(t.length,n),t])}isDecrypted(){return null}getCreationTime(){return this.created}getKeyID(){return this.keyID}async computeFingerprintAndKeyID(){if(await this.computeFingerprint(),this.keyID=new na,this.version>=5)this.keyID.read(this.fingerprint.subarray(0,8));else{if(4!==this.version)throw Error("Unsupported key version");this.keyID.read(this.fingerprint.subarray(12,20))}}async computeFingerprint(){const e=this.writeForHash(this.version);if(this.version>=5)this.fingerprint=await Me(L.hash.sha256,e);else{if(4!==this.version)throw Error("Unsupported key version");this.fingerprint=await Me(L.hash.sha1,e)}}getFingerprintBytes(){return this.fingerprint}getFingerprint(){return F.uint8ArrayToHex(this.getFingerprintBytes())}hasSameFingerprintAs(e){return this.version===e.version&&F.equalsUint8Array(this.writePublicKey(),e.writePublicKey())}getAlgorithmInfo(){const e={};e.algorithm=L.read(L.publicKey,this.algorithm);const t=this.publicParams.n||this.publicParams.p;return t?e.bits=F.uint8ArrayBitLength(t):this.publicParams.oid?e.curve=this.publicParams.oid.getName():this.publicParams.cipher&&(e.symmetric=this.publicParams.cipher.getName()),e}}xa.prototype.readPublicKey=xa.prototype.read,xa.prototype.writePublicKey=xa.prototype.write;const Qa=/*#__PURE__*/F.constructAllowedPackets([ra,wa,ha,oa]);class Ma{static get tag(){return L.packet.symmetricallyEncryptedData}constructor(){this.encrypted=null,this.packets=null}read(e){this.encrypted=e}write(){return this.encrypted}async decrypt(e,t,r=T){if(!r.allowUnauthenticatedMessages)throw Error("Message is not authenticated.");const{blockSize:n}=Ir(e),i=await U(S(this.encrypted)),s=await ri(e,t,i.subarray(n+2),i.subarray(2,n+2));this.packets=await fa.fromBinary(s,Qa,r)}async encrypt(e,t,r=T){const n=this.packets.write(),{blockSize:i}=Ir(e),s=await ei(e),a=await ti(e,t,s,new Uint8Array(i)),o=await ti(e,t,n,a.subarray(2));this.encrypted=F.concat([a,o])}}class La{static get tag(){return L.packet.marker}read(e){return 80===e[0]&&71===e[1]&&80===e[2]}write(){return new Uint8Array([80,71,80])}}class Ta extends xa{static get tag(){return L.packet.publicSubkey}constructor(e,t){super(e,t)}static fromSecretSubkeyPacket(e){const t=new Ta,{version:r,created:n,algorithm:i,publicParams:s,keyID:a,fingerprint:o}=e;return t.version=r,t.created=n,t.algorithm=i,t.publicParams=s,t.keyID=a,t.fingerprint=o,t}}class Ra{static get tag(){return L.packet.userAttribute}constructor(){this.attributes=[]}read(e){let t=0;for(;t<e.length;){const r=$e(e.subarray(t,e.length));t+=r.offset,this.attributes.push(F.uint8ArrayToString(e.subarray(t,t+r.len))),t+=r.len}}write(){const e=[];for(let t=0;t<this.attributes.length;t++)e.push(et(this.attributes[t].length)),e.push(F.stringToUint8Array(this.attributes[t]));return F.concatUint8Array(e)}equals(e){return!!(e&&e instanceof Ra)&&this.attributes.every((function(t,r){return t===e.attributes[r]}))}}class Fa extends xa{static get tag(){return L.packet.secretKey}constructor(e=new Date,t=T){super(e,t),this.keyMaterial=null,this.isEncrypted=null,this.s2kUsage=0,this.s2k=null,this.symmetric=null,this.aead=null,this.isLegacyAEAD=null,this.privateParams=null,this.usedModernAEAD=null}async read(e,t=T){let r=await this.readPublicKey(e,t);const n=r;this.s2kUsage=e[r++],5===this.version&&r++,6===this.version&&this.s2kUsage&&r++;try{if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){this.symmetric=e[r++],253===this.s2kUsage&&(this.aead=e[r++]),6===this.version&&r++;const t=e[r++];if(this.s2k=ss(t),r+=this.s2k.read(e.subarray(r,e.length)),"gnu-dummy"===this.s2k.type)return}else this.s2kUsage&&(this.symmetric=this.s2kUsage);this.s2kUsage&&(this.isLegacyAEAD=253===this.s2kUsage&&(5===this.version||4===this.version&&t.parseAEADEncryptedV4KeysAsLegacy),253!==this.s2kUsage||this.isLegacyAEAD?(this.iv=e.subarray(r,r+Ir(this.symmetric).blockSize),this.usedModernAEAD=!1):(this.iv=e.subarray(r,r+Ni(this.aead).ivLength),this.usedModernAEAD=!0),r+=this.iv.length)}catch(t){if(!this.s2kUsage)throw t;this.unparseableKeyMaterial=e.subarray(n),this.isEncrypted=!0}if(5===this.version&&(r+=4),this.keyMaterial=e.subarray(r),this.isEncrypted=!!this.s2kUsage,!this.isEncrypted){let e;if(6===this.version)e=this.keyMaterial;else if(e=this.keyMaterial.subarray(0,-2),!F.equalsUint8Array(F.writeChecksum(e),this.keyMaterial.subarray(-2)))throw Error("Key checksum mismatch");try{const{read:t,privateParams:r}=await _i(this.algorithm,e,this.publicParams);if(t<e.length)throw Error("Error reading MPIs");this.privateParams=r}catch(e){if(e instanceof at)throw e;throw Error("Error reading MPIs")}}}write(){const e=this.writePublicKey();if(this.unparseableKeyMaterial)return F.concatUint8Array([e,this.unparseableKeyMaterial]);const t=[e];t.push(new Uint8Array([this.s2kUsage]));const r=[];if(255===this.s2kUsage||254===this.s2kUsage||253===this.s2kUsage){r.push(this.symmetric),253===this.s2kUsage&&r.push(this.aead);const e=this.s2k.write();6===this.version&&r.push(e.length),r.push(...e)}return this.s2kUsage&&"gnu-dummy"!==this.s2k.type&&r.push(...this.iv),(5===this.version||6===this.version&&this.s2kUsage)&&t.push(new Uint8Array([r.length])),t.push(new Uint8Array(r)),this.isDummy()||(this.s2kUsage||(this.keyMaterial=zi(this.algorithm,this.privateParams)),5===this.version&&t.push(F.writeNumber(this.keyMaterial.length,4)),t.push(this.keyMaterial),this.s2kUsage||6===this.version||t.push(F.writeChecksum(this.keyMaterial))),F.concatUint8Array(t)}isDecrypted(){return!1===this.isEncrypted}isMissingSecretKeyMaterial(){return void 0!==this.unparseableKeyMaterial||this.isDummy()}isDummy(){return!(!this.s2k||"gnu-dummy"!==this.s2k.type)}makeDummy(e=T){this.isDummy()||(this.isDecrypted()&&this.clearPrivateParams(),delete this.unparseableKeyMaterial,this.isEncrypted=null,this.keyMaterial=null,this.s2k=ss(L.s2k.gnu,e),this.s2k.algorithm=0,this.s2k.c=0,this.s2k.type="gnu-dummy",this.s2kUsage=254,this.symmetric=L.symmetric.aes256,this.isLegacyAEAD=null,this.usedModernAEAD=null)}async encrypt(e,t=T){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key packet is already encrypted");if(!e)throw Error("A non-empty passphrase is required for key encryption.");this.s2k=as(t),this.s2k.generateSalt();const r=zi(this.algorithm,this.privateParams);this.symmetric=L.symmetric.aes256;const{blockSize:n}=Ir(this.symmetric);if(t.aeadProtect){this.s2kUsage=253,this.aead=t.preferredAEADAlgorithm;const i=Ni(this.aead);this.isLegacyAEAD=5===this.version,this.usedModernAEAD=!this.isLegacyAEAD;const s=rt(this.constructor.tag),a=await Na(this.version,this.s2k,e,this.symmetric,this.aead,s,this.isLegacyAEAD,t),o=await i(this.symmetric,a);this.iv=this.isLegacyAEAD?de(n):de(i.ivLength);const c=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([s,this.writePublicKey()]);this.keyMaterial=await o.encrypt(r,this.iv.subarray(0,i.ivLength),c)}else{this.s2kUsage=254,this.usedModernAEAD=!1;const i=await Na(this.version,this.s2k,e,this.symmetric,void 0,void 0,void 0,t);this.iv=de(n),this.keyMaterial=await ti(this.symmetric,i,F.concatUint8Array([r,await Me(L.hash.sha1,r)]),this.iv)}}async decrypt(e,t=T){if(this.isDummy())return!1;if(this.unparseableKeyMaterial)throw Error("Key packet cannot be decrypted: unsupported S2K or cipher algo");if(this.isDecrypted())throw Error("Key packet is already decrypted.");let r;const n=rt(this.constructor.tag);if(254!==this.s2kUsage&&253!==this.s2kUsage)throw 255===this.s2kUsage?Error("Encrypted private key is authenticated using an insecure two-byte hash"):Error("Private key is encrypted using an insecure S2K function: unsalted MD5");let i;if(r=await Na(this.version,this.s2k,e,this.symmetric,this.aead,n,this.isLegacyAEAD,t),253===this.s2kUsage){const e=Ni(this.aead,!0),t=await e(this.symmetric,r);try{const r=this.isLegacyAEAD?new Uint8Array:F.concatUint8Array([n,this.writePublicKey()]);i=await t.decrypt(this.keyMaterial,this.iv.subarray(0,e.ivLength),r)}catch(e){if("Authentication tag mismatch"===e.message)throw Error("Incorrect key passphrase: "+e.message);throw e}}else{const e=await ri(this.symmetric,r,this.keyMaterial,this.iv);i=e.subarray(0,-20);const t=await Me(L.hash.sha1,i);if(!F.equalsUint8Array(t,e.subarray(-20)))throw Error("Incorrect key passphrase")}try{const{privateParams:e}=await _i(this.algorithm,i,this.publicParams);this.privateParams=e}catch{throw Error("Error reading MPIs")}this.isEncrypted=!1,this.keyMaterial=null,this.s2kUsage=0,this.aead=null,this.symmetric=null,this.isLegacyAEAD=null}async validate(){if(this.isDummy())return;if(!this.isDecrypted())throw Error("Key is not decrypted");if(this.usedModernAEAD)return;let e;try{e=await ji(this.algorithm,this.publicParams,this.privateParams)}catch{e=!1}if(!e)throw Error("Key is invalid")}async generate(e,t,r){if(6===this.version&&(this.algorithm===L.publicKey.ecdh&&t===L.curve.curve25519Legacy||this.algorithm===L.publicKey.eddsaLegacy))throw Error(`Cannot generate v6 keys of type 'ecc' with curve ${t}. Generate a key of type 'curve25519' instead`);if(6!==this.version&&this.algorithm===L.publicKey.pqc_mldsa_ed25519)throw Error(`Cannot generate v${this.version} signing keys of type 'pqc'. Generate a v6 key instead`);const{privateParams:n,publicParams:i}=await Gi(this.algorithm,e,t,r);this.privateParams=n,this.publicParams=i,this.isEncrypted=!1}clearPrivateParams(){this.isMissingSecretKeyMaterial()||(Object.keys(this.privateParams).forEach((e=>{this.privateParams[e].fill(0),delete this.privateParams[e]})),this.privateParams=null,this.isEncrypted=!0)}}async function Na(e,t,r,n,i,s,a,o){if("argon2"===t.type&&!i)throw Error("Using Argon2 S2K without AEAD is not allowed");if("simple"===t.type&&6===e)throw Error("Using Simple S2K with version 6 keys is not allowed");const{keySize:c}=Ir(n),u=await t.produceKey(r,c,o);if(!i||5===e||a)return u;const h=F.concatUint8Array([s,new Uint8Array([e,n,i])]);return Pr(L.hash.sha256,u,new Uint8Array,h,c)}class Oa{static get tag(){return L.packet.userID}constructor(){this.userID="",this.name="",this.email="",this.comment=""}static fromObject(e){if(F.isString(e)||e.name&&!F.isString(e.name)||e.email&&!F.isEmailAddress(e.email)||e.comment&&!F.isString(e.comment))throw Error("Invalid user ID format");const t=new Oa;Object.assign(t,e);const r=[];return t.name&&r.push(t.name),t.comment&&r.push(`(${t.comment})`),t.email&&r.push(`<${t.email}>`),t.userID=r.join(" "),t}read(e,t=T){const r=F.decodeUTF8(e);if(r.length>t.maxUserIDLength)throw Error("User ID string is too long");const n=e=>/^[^\s@]+@[^\s@]+$/.test(e),i=r.indexOf("<"),s=r.lastIndexOf(">");if(-1!==i&&-1!==s&&s>i){const e=r.substring(i+1,s);if(n(e)){this.email=e;const t=r.substring(0,i).trim(),n=t.indexOf("("),s=t.lastIndexOf(")");-1!==n&&-1!==s&&s>n?(this.comment=t.substring(n+1,s).trim(),this.name=t.substring(0,n).trim()):(this.name=t,this.comment="")}}else n(r.trim())&&(this.email=r.trim(),this.name="",this.comment="");this.userID=r}write(){return F.encodeUTF8(this.userID)}equals(e){return e&&e.userID===this.userID}}class Ha extends Fa{static get tag(){return L.packet.secretSubkey}constructor(e=new Date,t=T){super(e,t)}}class _a{static get tag(){return L.packet.trust}read(){throw new at("Trust packets are not supported")}write(){throw new at("Trust packets are not supported")}}class za{static get tag(){return L.packet.padding}constructor(){this.padding=null}read(e){}write(){return this.padding}async createPadding(e){this.padding=de(e)}}const Ga=/*#__PURE__*/F.constructAllowedPackets([oa]);class qa{constructor(e){this.packets=e||new fa}write(){return this.packets.write()}armor(e=T){const t=this.packets.some((e=>e.constructor.tag===oa.tag&&6!==e.version));return ee(L.armor.signature,this.write(),void 0,void 0,void 0,t,e)}getSigningKeyIDs(){return this.packets.map((e=>e.issuerKeyID))}}async function ja({armoredSignature:e,binarySignature:t,config:r,...n}){r={...T,...r};let i=e||t;if(!i)throw Error("readSignature: must pass options object containing `armoredSignature` or `binarySignature`");if(e&&!F.isString(e))throw Error("readSignature: options.armoredSignature must be a string");if(t&&!F.isUint8Array(t))throw Error("readSignature: options.binarySignature must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:e,data:t}=await $(i);if(e!==L.armor.signature)throw Error("Armored text not of type signature");i=t}const a=await fa.fromBinary(i,Ga,r);return new qa(a)}async function Va(e,t){const r=new Ha(e.date,t);return r.packets=null,r.algorithm=L.write(L.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Ya(e,t){const r=new Fa(e.date,t);return r.packets=null,r.algorithm=L.write(L.publicKey,e.algorithm),await r.generate(e.rsaBits,e.curve,e.symmetric),await r.computeFingerprintAndKeyID(),r}async function Za(e,t,r,n,i=new Date,s){let a,o;for(let c=e.length-1;c>=0;c--)try{(!a||e[c].created>=a.created)&&(await e[c].verify(t,r,n,i,void 0,s),a=e[c])}catch(e){o=e}if(!a)throw F.wrapError(`Could not find valid ${L.read(L.signature,r)} signature in key ${t.getKeyID().toHex()}`.replace("certGeneric ","self-").replace(/([a-z])([A-Z])/g,((e,t,r)=>t+" "+r.toLowerCase())),o);return a}function Ja(e,t,r=new Date){const n=F.normalizeDate(r);if(null!==n){const r=ro(e,t);return!(e.created<=n&&n<r)}return!1}async function Wa(e,t,r,n){const i={};i.key=t,i.bind=e;const s={signatureType:L.signature.subkeyBinding};r.sign?(s.keyFlags=[L.keyFlags.signData],s.embeddedSignature=await $a(i,[],e,{signatureType:L.signature.keyBinding},r.date,void 0,void 0,void 0,n)):s.keyFlags=r.forwarding?[L.keyFlags.forwardedCommunication]:[L.keyFlags.encryptCommunication|L.keyFlags.encryptStorage],r.keyExpirationTime>0&&(s.keyExpirationTime=r.keyExpirationTime,s.keyNeverExpires=!1);return await $a(i,[],t,s,r.date,void 0,void 0,void 0,n)}async function Xa(e,t,r=new Date,n=[],i){const s=L.hash.sha256,a=i.preferredHashAlgorithm,o=await Promise.all(e.map((async(e,t)=>(await e.getPrimarySelfSignature(r,n[t],i)).preferredHashAlgorithms||[]))),c=new Map;for(const e of o)for(const t of e)try{const e=L.write(L.hash,t);c.set(e,c.has(e)?c.get(e)+1:1)}catch{}const u=t=>0===e.length||c.get(t)===e.length||t===s,h=()=>{if(0===c.size)return s;const e=Array.from(c.keys()).filter((e=>u(e))).sort(((e,t)=>Le(e)-Le(t)))[0];return Le(e)>=Le(s)?e:s},l=new Set([L.publicKey.ecdsa,L.publicKey.eddsaLegacy,L.publicKey.ed25519,L.publicKey.ed448]),f=new Set([L.publicKey.pqc_mldsa_ed25519]);if(l.has(t.algorithm)){const e=function(e,t){switch(e){case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:return Jr(t);case L.publicKey.ed25519:case L.publicKey.ed448:return pt(e);default:throw Error("Unknown elliptic signing algo")}}(t.algorithm,t.publicParams.oid),r=u(a),n=Le(a)>=Le(e);if(r&&n)return a;{const t=h();return Le(t)>=Le(e)?t:e}}if(f.has(t.algorithm)){if(u(a)&&On(t.algorithm,a))return a;{const e=h();return On(t.algorithm,e)?e:s}}return u(a)?a:h()}async function $a(e,t,r,n,i,s,a=[],o=!1,c){if(r.isDummy())throw Error("Cannot sign with a gnu-dummy key.");if(!r.isDecrypted())throw Error("Signing key is not decrypted.");const u=new oa;return Object.assign(u,n),u.publicKeyAlgorithm=r.algorithm,u.hashAlgorithm=await Xa(t,r,i,s,c),u.rawNotations=[...a],await u.sign(r,e,i,o,c),u}async function eo(e,t,r,n=new Date,i){(e=e[r])&&(t[r].length?await Promise.all(e.map((async function(e){e.isExpired(n)||i&&!await i(e)||t[r].some((function(t){return F.equalsUint8Array(t.writeParams(),e.writeParams())}))||t[r].push(e)}))):t[r]=e)}async function to(e,t,r,n,i,s,a=new Date,o){s=s||e;const c=[];return await Promise.all(n.map((async function(e){try{if(!i||e.issuerKeyID.equals(i.issuerKeyID)){const n=![L.reasonForRevocation.keyRetired,L.reasonForRevocation.keySuperseded,L.reasonForRevocation.userIDInvalid].includes(e.reasonForRevocationFlag);await e.verify(s,t,r,n?null:a,!1,o),c.push(e.issuerKeyID)}}catch{}}))),i?(i.revoked=!!c.some((e=>e.equals(i.issuerKeyID)))||(i.revoked||!1),i.revoked):c.length>0}function ro(e,t){let r;return!1===t.keyNeverExpires&&(r=e.created.getTime()+1e3*t.keyExpirationTime),r?new Date(r):1/0}function no(e,t={}){if(e.type=e.type||t.type,e.curve=e.curve||t.curve,e.rsaBits=e.rsaBits||t.rsaBits,e.symmetricHash=e.symmetricHash||t.symmetricHash,e.symmetricCipher=e.symmetricCipher||t.symmetricCipher,e.keyExpirationTime=void 0!==e.keyExpirationTime?e.keyExpirationTime:t.keyExpirationTime,e.passphrase=F.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e.sign=e.sign||!1,e.forwarding=e.forwarding||!1,e.sign&&e.forwarding)throw Error('Incompatible options: "sign" and "forwarding" cannot be set together');switch(e.type){case"pqc":e.sign?e.algorithm=L.publicKey.pqc_mldsa_ed25519:e.algorithm=L.publicKey.pqc_mlkem_x25519;break;case"ecc":try{e.curve=L.write(L.curve,e.curve)}catch{throw Error("Unknown curve")}e.curve!==L.curve.ed25519Legacy&&e.curve!==L.curve.curve25519Legacy&&"ed25519"!==e.curve&&"curve25519"!==e.curve||(e.curve=e.sign?L.curve.ed25519Legacy:L.curve.curve25519Legacy),e.sign?e.algorithm=e.curve===L.curve.ed25519Legacy?L.publicKey.eddsaLegacy:L.publicKey.ecdsa:e.algorithm=L.publicKey.ecdh;break;case"curve25519":e.algorithm=e.sign?L.publicKey.ed25519:L.publicKey.x25519;break;case"curve448":e.algorithm=e.sign?L.publicKey.ed448:L.publicKey.x448;break;case"rsa":e.algorithm=L.publicKey.rsaEncryptSign;break;case"symmetric":if(e.sign){e.algorithm=L.publicKey.hmac;try{e.symmetric=L.write(L.hash,e.symmetricHash)}catch{throw Error("Unknown hash algorithm")}}else{e.algorithm=L.publicKey.aead;try{e.symmetric=L.write(L.symmetric,e.symmetricCipher)}catch{throw Error("Unknown symmetric algorithm")}}break;default:throw Error("Unsupported key type "+e.type)}return e}function io(e,t,r){switch(e.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.dsa:case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ed25519:case L.publicKey.ed448:case L.publicKey.hmac:case L.publicKey.pqc_mldsa_ed25519:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.signData);default:return!1}}function so(e,t,r){switch(e.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.x25519:case L.publicKey.x448:case L.publicKey.aead:case L.publicKey.pqc_mlkem_x25519:if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");return!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&L.keyFlags.encryptStorage);default:return!1}}function ao(e,t,r){if(!t.keyFlags&&!r.allowMissingKeyFlags)throw Error("None of the key flags is set: consider passing `config.allowMissingKeyFlags`");switch(e.algorithm){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaEncrypt:case L.publicKey.elgamal:case L.publicKey.ecdh:case L.publicKey.x25519:case L.publicKey.x448:case L.publicKey.pqc_mlkem_x25519:return!(!(!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.signData))||!r.allowInsecureDecryptionWithSigningKeys)||(!t.keyFlags||!!(t.keyFlags[0]&L.keyFlags.encryptCommunication)||!!(t.keyFlags[0]&L.keyFlags.encryptStorage)||r.allowForwardedMessages&&!!(t.keyFlags[0]&L.keyFlags.forwardedCommunication));default:return!1}}function oo(e,t){const r=L.write(L.publicKey,e.algorithm),n=e.getAlgorithmInfo();if(t.rejectPublicKeyAlgorithms.has(r))throw Error(n.algorithm+" keys are considered too weak.");switch(r){case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.rsaEncrypt:if(n.bits<t.minRSABits)throw Error(`RSA keys shorter than ${t.minRSABits} bits are considered too weak.`);break;case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:case L.publicKey.ecdh:if(t.rejectCurves.has(n.curve))throw Error(`Support for ${n.algorithm} keys using curve ${n.curve} is disabled.`)}}class co{constructor(e,t){this.userID=e.constructor.tag===L.packet.userID?e:null,this.userAttribute=e.constructor.tag===L.packet.userAttribute?e:null,this.selfCertifications=[],this.otherCertifications=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new fa;return e.push(this.userID||this.userAttribute),e.push(...this.revocationSignatures),e.push(...this.selfCertifications),e.push(...this.otherCertifications),e}clone(){const e=new co(this.userID||this.userAttribute,this.mainKey);return e.selfCertifications=[...this.selfCertifications],e.otherCertifications=[...this.otherCertifications],e.revocationSignatures=[...this.revocationSignatures],e}async certify(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n},s=new co(i.userID||i.userAttribute,this.mainKey);return s.otherCertifications=await Promise.all(e.map((async function(e){if(!e.isPrivate())throw Error("Need private key for signing");if(e.hasSameFingerprintAs(n))throw Error("The user's own key can only be used for self-certifications");const s=await e.getSigningKey(void 0,t,void 0,r);return $a(i,[e],s.keyPacket,{signatureType:L.signature.certGeneric,keyFlags:[L.keyFlags.certifyKeys|L.keyFlags.signData]},t,void 0,void 0,void 0,r)}))),await s.update(this,t,r),s}async isRevoked(e,t,r=new Date,n=T){const i=this.mainKey.keyPacket;return to(i,L.signature.certRevocation,{key:i,userID:this.userID,userAttribute:this.userAttribute},this.revocationSignatures,e,t,r,n)}async verifyCertificate(e,t,r=new Date,n){const i=this,s=this.mainKey.keyPacket,a={userID:this.userID,userAttribute:this.userAttribute,key:s},{issuerKeyID:o}=e,c=t.filter((e=>e.getKeys(o).length>0));return 0===c.length?null:(await Promise.all(c.map((async t=>{const s=await t.getSigningKey(o,e.created,void 0,n);if(e.revoked||await i.isRevoked(e,s.keyPacket,r,n))throw Error("User certificate is revoked");try{await e.verify(s.keyPacket,L.signature.certGeneric,a,r,void 0,n)}catch(e){throw F.wrapError("User certificate is invalid",e)}}))),!0)}async verifyAllCertifications(e,t=new Date,r){const n=this,i=this.selfCertifications.concat(this.otherCertifications);return Promise.all(i.map((async i=>({keyID:i.issuerKeyID,valid:await n.verifyCertificate(i,e,t,r).catch((()=>!1))}))))}async verify(e=new Date,t){if(!this.selfCertifications.length)throw Error("No self-certifications found");const r=this,n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};let s;for(let a=this.selfCertifications.length-1;a>=0;a--)try{const s=this.selfCertifications[a];if(s.revoked||await r.isRevoked(s,void 0,e,t))throw Error("Self-certification is revoked");try{await s.verify(n,L.signature.certGeneric,i,e,void 0,t)}catch(e){throw F.wrapError("Self-certification is invalid",e)}return!0}catch(e){s=e}throw s}async update(e,t,r){const n=this.mainKey.keyPacket,i={userID:this.userID,userAttribute:this.userAttribute,key:n};await eo(e,this,"selfCertifications",t,(async function(e){try{return await e.verify(n,L.signature.certGeneric,i,t,!1,r),!0}catch{return!1}})),await eo(e,this,"otherCertifications",t),await eo(e,this,"revocationSignatures",t,(function(e){return to(n,L.signature.certRevocation,i,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=L.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=T){const s={userID:this.userID,userAttribute:this.userAttribute,key:e},a=new co(s.userID||s.userAttribute,this.mainKey);return a.revocationSignatures.push(await $a(s,[],e,{signatureType:L.signature.certRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}}class uo{constructor(e,t){this.keyPacket=e,this.bindingSignatures=[],this.revocationSignatures=[],this.mainKey=t}toPacketList(){const e=new fa;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.bindingSignatures),e}clone(){const e=new uo(this.keyPacket,this.mainKey);return e.bindingSignatures=[...this.bindingSignatures],e.revocationSignatures=[...this.revocationSignatures],e}async isRevoked(e,t,r=new Date,n=T){const i=this.mainKey.keyPacket;return to(i,L.signature.subkeyRevocation,{key:i,bind:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verify(e=new Date,t=T){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket},i=await Za(this.bindingSignatures,r,L.signature.subkeyBinding,n,e,t);if(i.revoked||await this.isRevoked(i,null,e,t))throw Error("Subkey is revoked");if(Ja(this.keyPacket,i,e))throw Error("Subkey is expired");return i}async getExpirationTime(e=new Date,t=T){const r=this.mainKey.keyPacket,n={key:r,bind:this.keyPacket};let i;try{i=await Za(this.bindingSignatures,r,L.signature.subkeyBinding,n,e,t)}catch{return null}const s=ro(this.keyPacket,i),a=i.getExpirationTime();return s<a?s:a}async update(e,t=new Date,r=T){const n=this.mainKey.keyPacket;if(!this.hasSameFingerprintAs(e))throw Error("Subkey update method: fingerprints of subkeys not equal");this.keyPacket.constructor.tag===L.packet.publicSubkey&&e.keyPacket.constructor.tag===L.packet.secretSubkey&&(this.keyPacket=e.keyPacket);const i=this,s={key:n,bind:i.keyPacket};await eo(e,this,"bindingSignatures",t,(async function(e){for(let t=0;t<i.bindingSignatures.length;t++)if(i.bindingSignatures[t].issuerKeyID.equals(e.issuerKeyID))return e.created>i.bindingSignatures[t].created&&(i.bindingSignatures[t]=e),!1;try{return await e.verify(n,L.signature.subkeyBinding,s,t,void 0,r),!0}catch{return!1}})),await eo(e,this,"revocationSignatures",t,(function(e){return to(n,L.signature.subkeyRevocation,s,[e],void 0,void 0,t,r)}))}async revoke(e,{flag:t=L.reasonForRevocation.noReason,string:r=""}={},n=new Date,i=T){const s={key:e,bind:this.keyPacket},a=new uo(this.keyPacket,this.mainKey);return a.revocationSignatures.push(await $a(s,[],e,{signatureType:L.signature.subkeyRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,t),reasonForRevocationString:r},n,void 0,void 0,!1,i)),await a.update(this),a}hasSameFingerprintAs(e){return this.keyPacket.hasSameFingerprintAs(e.keyPacket||e)}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","isDecrypted"].forEach((e=>{uo.prototype[e]=function(){return this.keyPacket[e]()}}));const ho=/*#__PURE__*/F.constructAllowedPackets([oa]),lo=new Set([L.packet.publicKey,L.packet.privateKey]),fo=new Set([L.packet.publicKey,L.packet.privateKey,L.packet.publicSubkey,L.packet.privateSubkey]);class yo{packetListToStructure(e,t=new Set){let r,n,i,s;for(const a of e){if(a instanceof ut){fo.has(a.tag)&&!s&&(s=lo.has(a.tag)?lo:fo);continue}const e=a.constructor.tag;if(s){if(!s.has(e))continue;s=null}if(t.has(e))throw Error("Unexpected packet type: "+e);switch(e){case L.packet.publicKey:case L.packet.secretKey:if(this.keyPacket)throw Error("Key block contains multiple keys");if(this.keyPacket=a,n=this.getKeyID(),!n)throw Error("Missing Key ID");break;case L.packet.userID:case L.packet.userAttribute:r=new co(a,this),this.users.push(r);break;case L.packet.publicSubkey:case L.packet.secretSubkey:r=null,i=new uo(a,this),this.subkeys.push(i);break;case L.packet.signature:switch(a.signatureType){case L.signature.certGeneric:case L.signature.certPersona:case L.signature.certCasual:case L.signature.certPositive:if(!r){F.printDebug("Dropping certification signatures without preceding user packet");continue}a.issuerKeyID.equals(n)?r.selfCertifications.push(a):r.otherCertifications.push(a);break;case L.signature.certRevocation:r?r.revocationSignatures.push(a):this.directSignatures.push(a);break;case L.signature.key:this.directSignatures.push(a);break;case L.signature.subkeyBinding:if(!i){F.printDebug("Dropping subkey binding signature without preceding subkey packet");continue}i.bindingSignatures.push(a);break;case L.signature.keyRevocation:this.revocationSignatures.push(a);break;case L.signature.subkeyRevocation:if(!i){F.printDebug("Dropping subkey revocation signature without preceding subkey packet");continue}i.revocationSignatures.push(a)}}}}toPacketList(){const e=new fa;return e.push(this.keyPacket),e.push(...this.revocationSignatures),e.push(...this.directSignatures),this.users.map((t=>e.push(...t.toPacketList()))),this.subkeys.map((t=>e.push(...t.toPacketList()))),e}clone(e=!1){const t=new this.constructor(this.toPacketList());return e&&t.getKeys().forEach((e=>{if(e.keyPacket=Object.create(Object.getPrototypeOf(e.keyPacket),Object.getOwnPropertyDescriptors(e.keyPacket)),!e.keyPacket.isDecrypted())return;const t={};Object.keys(e.keyPacket.privateParams).forEach((r=>{t[r]=new Uint8Array(e.keyPacket.privateParams[r])})),e.keyPacket.privateParams=t})),t}getSubkeys(e=null){return this.subkeys.filter((t=>!e||t.getKeyID().equals(e,!0)))}getKeys(e=null){const t=[];return e&&!this.getKeyID().equals(e,!0)||t.push(this),t.concat(this.getSubkeys(e))}getKeyIDs(){return this.getKeys().map((e=>e.getKeyID()))}getUserIDs(){return this.users.map((e=>e.userID?e.userID.userID:null)).filter((e=>null!==e))}write(){return this.toPacketList().write()}async getSigningKey(e=null,t=new Date,r={},n=T){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{oo(i,n)}catch(e){throw F.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created||t.keyPacket.algorithm-e.keyPacket.algorithm));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await Za(r.bindingSignatures,i,L.signature.subkeyBinding,e,t,n);if(!io(r.keyPacket,s,n))continue;if(!s.embeddedSignature)throw Error("Missing embedded signature");return await Za([s.embeddedSignature],r.keyPacket,L.signature.keyBinding,e,t,n),oo(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&io(i,s,n))return oo(i,n),this}catch(e){a=e}throw F.wrapError("Could not find valid signing key packet in key "+this.getKeyID().toHex(),a)}async getEncryptionKey(e,t=new Date,r={},n=T){await this.verifyPrimaryKey(t,r,n);const i=this.keyPacket;try{oo(i,n)}catch(e){throw F.wrapError("Could not verify primary key",e)}const s=this.subkeys.slice().sort(((e,t)=>t.keyPacket.created-e.keyPacket.created||t.keyPacket.algorithm-e.keyPacket.algorithm));let a;for(const r of s)if(!e||r.getKeyID().equals(e))try{await r.verify(t,n);const e={key:i,bind:r.keyPacket},s=await Za(r.bindingSignatures,i,L.signature.subkeyBinding,e,t,n);if(so(r.keyPacket,s,n))return oo(r.keyPacket,n),r}catch(e){a=e}try{const s=await this.getPrimarySelfSignature(t,r,n);if((!e||i.getKeyID().equals(e))&&so(i,s,n))return oo(i,n),this}catch(e){a=e}throw F.wrapError("Could not find valid encryption key packet in key "+this.getKeyID().toHex(),a)}async isRevoked(e,t,r=new Date,n=T){return to(this.keyPacket,L.signature.keyRevocation,{key:this.keyPacket},this.revocationSignatures,e,t,r,n)}async verifyPrimaryKey(e=new Date,t={},r=T){const n=this.keyPacket;if(await this.isRevoked(null,null,e,r))throw Error("Primary key is revoked");if(Ja(n,await this.getPrimarySelfSignature(e,t,r),e))throw Error("Primary key is expired");if(6!==n.version){const t=await Za(this.directSignatures,n,L.signature.key,{key:n},e,r).catch((()=>{}));if(t&&Ja(n,t,e))throw Error("Primary key is expired")}}async getExpirationTime(e,t=T){let r;try{const n=await this.getPrimarySelfSignature(null,e,t),i=ro(this.keyPacket,n),s=n.getExpirationTime(),a=6!==this.keyPacket.version&&await Za(this.directSignatures,this.keyPacket,L.signature.key,{key:this.keyPacket},null,t).catch((()=>{}));if(a){const e=ro(this.keyPacket,a);r=Math.min(i,s,e)}else r=i<s?i:s}catch{r=null}return F.normalizeDate(r)}async getPrimarySelfSignature(e=new Date,t={},r=T){const n=this.keyPacket;if(6===n.version)return Za(this.directSignatures,n,L.signature.key,{key:n},e,r);const{selfCertification:i}=await this.getPrimaryUser(e,t,r);return i}async getPrimaryUser(e=new Date,t={},r=T){const n=this.keyPacket,i=[];let s;for(let a=0;a<this.users.length;a++)try{const s=this.users[a];if(!s.userID)continue;if(void 0!==t.name&&s.userID.name!==t.name||void 0!==t.email&&s.userID.email!==t.email||void 0!==t.comment&&s.userID.comment!==t.comment)throw Error("Could not find user that matches that user ID");const o={userID:s.userID,key:n},c=await Za(s.selfCertifications,n,L.signature.certGeneric,o,e,r);i.push({index:a,user:s,selfCertification:c})}catch(e){s=e}if(!i.length)throw s||Error("Could not find primary user");await Promise.all(i.map((async t=>{t.selfCertification.revoked||await t.user.isRevoked(t.selfCertification,null,e,r)})));const a=i.sort((function(e,t){const r=e.selfCertification,n=t.selfCertification;return n.revoked-r.revoked||r.isPrimaryUserID-n.isPrimaryUserID||r.created-n.created})).pop(),{user:o,selfCertification:c}=a;if(c.revoked||await o.isRevoked(c,null,e,r))throw Error("Primary user is revoked");return a}async update(e,t=new Date,r=T){if(!this.hasSameFingerprintAs(e))throw Error("Primary key fingerprints must be equal to update the key");if(!this.isPrivate()&&e.isPrivate()){if(!(this.subkeys.length===e.subkeys.length&&this.subkeys.every((t=>e.subkeys.some((e=>t.hasSameFingerprintAs(e)))))))throw Error("Cannot update public key with private key if subkeys mismatch");return e.update(this,r)}const n=this.clone();return await eo(e,n,"revocationSignatures",t,(i=>to(n.keyPacket,L.signature.keyRevocation,n,[i],null,e.keyPacket,t,r))),await eo(e,n,"directSignatures",t),await Promise.all(e.users.map((async e=>{const i=n.users.filter((t=>e.userID&&e.userID.equals(t.userID)||e.userAttribute&&e.userAttribute.equals(t.userAttribute)));if(i.length>0)await Promise.all(i.map((n=>n.update(e,t,r))));else{const t=e.clone();t.mainKey=n,n.users.push(t)}}))),await Promise.all(e.subkeys.map((async e=>{const i=n.subkeys.filter((t=>t.hasSameFingerprintAs(e)));if(i.length>0)await Promise.all(i.map((n=>n.update(e,t,r))));else{const t=e.clone();t.mainKey=n,n.subkeys.push(t)}}))),n}async getRevocationCertificate(e=new Date,t=T){const r={key:this.keyPacket},n=await Za(this.revocationSignatures,this.keyPacket,L.signature.keyRevocation,r,e,t),i=new fa;i.push(n);const s=6!==this.keyPacket.version;return ee(L.armor.publicKey,i.write(),null,null,"This is a revocation certificate",s,t)}async applyRevocationCertificate(e,t=new Date,r=T){const n=await $(e),i=(await fa.fromBinary(n.data,ho,r)).findPacket(L.packet.signature);if(!i||i.signatureType!==L.signature.keyRevocation)throw Error("Could not find revocation signature packet");if(!i.issuerKeyID.equals(this.getKeyID()))throw Error("Revocation signature does not match key");try{await i.verify(this.keyPacket,L.signature.keyRevocation,{key:this.keyPacket},t,void 0,r)}catch(e){throw F.wrapError("Could not verify revocation signature",e)}const s=this.clone();return s.revocationSignatures.push(i),s}async signPrimaryUser(e,t,r,n=T){const{index:i,user:s}=await this.getPrimaryUser(t,r,n),a=await s.certify(e,t,n),o=this.clone();return o.users[i]=a,o}async signAllUsers(e,t=new Date,r=T){const n=this.clone();return n.users=await Promise.all(this.users.map((function(n){return n.certify(e,t,r)}))),n}async verifyPrimaryUser(e,t=new Date,r,n=T){const i=this.keyPacket,{user:s}=await this.getPrimaryUser(t,r,n);return e?await s.verifyAllCertifications(e,t,n):[{keyID:i.getKeyID(),valid:await s.verify(t,n).catch((()=>!1))}]}async verifyAllUsers(e,t=new Date,r=T){const n=this.keyPacket,i=[];return await Promise.all(this.users.map((async s=>{const a=e?await s.verifyAllCertifications(e,t,r):[{keyID:n.getKeyID(),valid:await s.verify(t,r).catch((()=>!1))}];i.push(...a.map((e=>({userID:s.userID?s.userID.userID:null,userAttribute:s.userAttribute,keyID:e.keyID,valid:e.valid}))))}))),i}}["getKeyID","getFingerprint","getAlgorithmInfo","getCreationTime","hasSameFingerprintAs"].forEach((e=>{yo.prototype[e]=uo.prototype[e]}));class po extends yo{constructor(e){if(super(),this.keyPacket=null,this.revocationSignatures=[],this.directSignatures=[],this.users=[],this.subkeys=[],e&&(this.packetListToStructure(e,new Set([L.packet.secretKey,L.packet.secretSubkey])),!this.keyPacket))throw Error("Invalid key: missing public-key packet")}isPrivate(){return!1}toPublic(){return this}armor(e=T){const t=6!==this.keyPacket.version;return ee(L.armor.publicKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}}class go extends po{constructor(e){if(super(),this.packetListToStructure(e,new Set([L.packet.publicKey,L.packet.publicSubkey])),!this.keyPacket)throw Error("Invalid key: missing private-key packet")}isPrivate(){return!0}toPublic(){const e=new fa,t=this.toPacketList();let r=!1;for(const n of t)if(!r||n.constructor.tag!==L.packet.Signature)switch(r&&(r=!1),n.constructor.tag){case L.packet.secretKey:{if(n.algorithm===L.publicKey.aead||n.algorithm===L.publicKey.hmac)throw Error("Cannot create public key from symmetric private");const t=xa.fromSecretKeyPacket(n);e.push(t);break}case L.packet.secretSubkey:{if(n.algorithm===L.publicKey.aead||n.algorithm===L.publicKey.hmac){r=!0;break}const t=Ta.fromSecretSubkeyPacket(n);e.push(t);break}default:e.push(n)}return new po(e)}armor(e=T){const t=6!==this.keyPacket.version;return ee(L.armor.privateKey,this.toPacketList().write(),void 0,void 0,void 0,t,e)}async getDecryptionKeys(e,t=new Date,r={},n=T){const i=this.keyPacket,s=[];let a=null;for(let r=0;r<this.subkeys.length;r++)if(!e||this.subkeys[r].getKeyID().equals(e,!0)){if(this.subkeys[r].keyPacket.isDummy()){a=a||Error("Gnu-dummy key packets cannot be used for decryption");continue}try{const e={key:i,bind:this.subkeys[r].keyPacket},a=await Za(this.subkeys[r].bindingSignatures,i,L.signature.subkeyBinding,e,t,n);ao(this.subkeys[r].keyPacket,a,n)&&s.push(this.subkeys[r])}catch(e){a=e}}const o=await this.getPrimarySelfSignature(t,r,n);if(e&&!i.getKeyID().equals(e,!0)||!ao(i,o,n)||(i.isDummy()?a=a||Error("Gnu-dummy key packets cannot be used for decryption"):s.push(this)),0===s.length)throw a||Error("No decryption key packets found");return s}isDecrypted(){return this.getKeys().some((({keyPacket:e})=>e.isDecrypted()))}async validate(e=T){if(!this.isPrivate())throw Error("Cannot validate a public key");let t;if(this.keyPacket.isDummy()){const r=await this.getSigningKey(null,null,void 0,{...e,rejectPublicKeyAlgorithms:new Set,minRSABits:0});r&&!r.keyPacket.isDummy()&&(t=r.keyPacket)}else t=this.keyPacket;if(t)return t.validate();{const e=this.getKeys();if(e.map((e=>e.keyPacket.isDummy())).every(Boolean))throw Error("Cannot validate an all-gnu-dummy key");return Promise.all(e.map((e=>e.keyPacket.validate())))}}clearPrivateParams(){this.getKeys().forEach((({keyPacket:e})=>{e.isDecrypted()&&e.clearPrivateParams()}))}async revoke({flag:e=L.reasonForRevocation.noReason,string:t=""}={},r=new Date,n=T){if(!this.isPrivate())throw Error("Need private key for revoking");const i={key:this.keyPacket},s=this.clone();return s.revocationSignatures.push(await $a(i,[],this.keyPacket,{signatureType:L.signature.keyRevocation,reasonForRevocationFlag:L.write(L.reasonForRevocation,e),reasonForRevocationString:t},r,void 0,void 0,void 0,n)),s}async addSubkey(e={}){const t={...T,...e.config};if(e.passphrase)throw Error("Subkey could not be encrypted here, please encrypt whole key");if(e.rsaBits<t.minRSABits)throw Error(`rsaBits should be at least ${t.minRSABits}, got: ${e.rsaBits}`);const r=this.keyPacket;if(r.isDummy())throw Error("Cannot add subkey to gnu-dummy primary key");if(!r.isDecrypted())throw Error("Key is not decrypted");const n=r.getAlgorithmInfo();n.type=function(e){switch(L.write(L.publicKey,e)){case L.publicKey.rsaEncrypt:case L.publicKey.rsaEncryptSign:case L.publicKey.rsaSign:case L.publicKey.dsa:return"rsa";case L.publicKey.ecdsa:case L.publicKey.eddsaLegacy:return"ecc";case L.publicKey.ed25519:return"curve25519";case L.publicKey.ed448:return"curve448";default:throw Error("Unsupported algorithm")}}(n.algorithm),n.rsaBits=n.bits||4096,n.curve=n.curve||"curve25519Legacy",e=no(e,n);const i=await Va(e,{...t,v6Keys:6===this.keyPacket.version});oo(i,t);const s=await Wa(i,r,e,t),a=this.toPacketList();return a.push(i,s),new go(a)}}const wo=/*#__PURE__*/F.constructAllowedPackets([xa,Ta,Fa,Ha,Oa,Ra,oa]);function Ao(e){for(const t of e)switch(t.constructor.tag){case L.packet.secretKey:return new go(e);case L.packet.publicKey:return new po(e)}throw Error("No key packet found")}async function mo(e,t,r,n){r.passphrase&&await e.encrypt(r.passphrase,n),await Promise.all(t.map((async function(e,t){const i=r.subkeys[t].passphrase;i&&await e.encrypt(i,n)})));const i=new fa;function s(e,t){return[t,...e.filter((e=>e!==t))]}function a(){const t={};t.keyFlags=[L.keyFlags.certifyKeys|L.keyFlags.signData];const i=s([L.symmetric.aes256,L.symmetric.aes128],n.preferredSymmetricAlgorithm);if(t.preferredSymmetricAlgorithms=i,n.aeadProtect){const e=s([L.aead.gcm,L.aead.eax,L.aead.ocb],n.preferredAEADAlgorithm);t.preferredCipherSuites=e.flatMap((e=>i.map((t=>[t,e]))))}return t.preferredHashAlgorithms=s([L.hash.sha512,L.hash.sha256,...6===e.version?[L.hash.sha3_512,L.hash.sha3_256]:[]],n.preferredHashAlgorithm),t.preferredCompressionAlgorithms=s([L.compression.uncompressed,L.compression.zlib,L.compression.zip],n.preferredCompressionAlgorithm),t.features=[0],t.features[0]|=L.features.modificationDetection,n.aeadProtect&&(t.features[0]|=L.features.seipdv2),r.keyExpirationTime>0&&(t.keyExpirationTime=r.keyExpirationTime,t.keyNeverExpires=!1),t}if(i.push(e),6===e.version){const t={key:e},s=a();s.signatureType=L.signature.key;const o=await $a(t,[],e,s,r.date,void 0,void 0,void 0,n);i.push(o)}await Promise.all(r.userIDs.map((async function(t,i){const s=Oa.fromObject(t),o={userID:s,key:e},c=6!==e.version?a():{};c.signatureType=L.signature.certPositive,0===i&&(c.isPrimaryUserID=!0);return{userIDPacket:s,signaturePacket:await $a(o,[],e,c,r.date,void 0,void 0,void 0,n)}}))).then((e=>{e.forEach((({userIDPacket:e,signaturePacket:t})=>{i.push(e),i.push(t)}))})),await Promise.all(t.map((async function(t,i){const s=r.subkeys[i];return{secretSubkeyPacket:t,subkeySignaturePacket:await Wa(t,e,s,n)}}))).then((e=>{e.forEach((({secretSubkeyPacket:e,subkeySignaturePacket:t})=>{i.push(e),i.push(t)}))}));const o={key:e};return i.push(await $a(o,[],e,{signatureType:L.signature.keyRevocation,reasonForRevocationFlag:L.reasonForRevocation.noReason,reasonForRevocationString:""},r.date,void 0,void 0,void 0,n)),r.passphrase&&e.clearPrivateParams(),t.map((function(e,t){r.subkeys[t].passphrase&&e.clearPrivateParams()})),new go(i)}async function bo({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...T,...r},!e&&!t)throw Error("readKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!F.isString(e))throw Error("readKey: options.armoredKey must be a string");if(t&&!F.isUint8Array(t))throw Error("readKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await $(e);if(t!==L.armor.publicKey&&t!==L.armor.privateKey)throw Error("Armored text not of type key");s=r}else s=t;const a=await fa.fromBinary(s,wo,r),o=a.indexOfTag(L.packet.publicKey,L.packet.secretKey);if(0===o.length)throw Error("No key packet found");return Ao(a.slice(o[0],o[1]))}async function ko({armoredKey:e,binaryKey:t,config:r,...n}){if(r={...T,...r},!e&&!t)throw Error("readPrivateKey: must pass options object containing `armoredKey` or `binaryKey`");if(e&&!F.isString(e))throw Error("readPrivateKey: options.armoredKey must be a string");if(t&&!F.isUint8Array(t))throw Error("readPrivateKey: options.binaryKey must be a Uint8Array");const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));let s;if(e){const{type:t,data:r}=await $(e);if(t!==L.armor.privateKey)throw Error("Armored text not of type private key");s=r}else s=t;const a=await fa.fromBinary(s,wo,r),o=a.indexOfTag(L.packet.publicKey,L.packet.secretKey);for(let e=0;e<o.length;e++){if(a[o[e]].constructor.tag===L.packet.publicKey)continue;const t=a.slice(o[e],o[e+1]);return new go(t)}throw Error("No secret key packet found")}async function Eo({armoredKeys:e,binaryKeys:t,config:r,...n}){r={...T,...r};let i=e||t;if(!i)throw Error("readKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!F.isString(e))throw Error("readKeys: options.armoredKeys must be a string");if(t&&!F.isUint8Array(t))throw Error("readKeys: options.binaryKeys must be a Uint8Array");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));if(e){const{type:t,data:r}=await $(e);if(t!==L.armor.publicKey&&t!==L.armor.privateKey)throw Error("Armored text not of type key");i=r}const a=[],o=await fa.fromBinary(i,wo,r),c=o.indexOfTag(L.packet.publicKey,L.packet.secretKey);if(0===c.length)throw Error("No key packet found");for(let e=0;e<c.length;e++){const t=Ao(o.slice(c[e],c[e+1]));a.push(t)}return a}async function vo({armoredKeys:e,binaryKeys:t,config:r}){r={...T,...r};let n=e||t;if(!n)throw Error("readPrivateKeys: must pass options object containing `armoredKeys` or `binaryKeys`");if(e&&!F.isString(e))throw Error("readPrivateKeys: options.armoredKeys must be a string");if(t&&!F.isUint8Array(t))throw Error("readPrivateKeys: options.binaryKeys must be a Uint8Array");if(e){const{type:t,data:r}=await $(e);if(t!==L.armor.privateKey)throw Error("Armored text not of type private key");n=r}const i=[],s=await fa.fromBinary(n,wo,r),a=s.indexOfTag(L.packet.publicKey,L.packet.secretKey);for(let e=0;e<a.length;e++){if(s[a[e]].constructor.tag===L.packet.publicKey)continue;const t=s.slice(a[e],a[e+1]),r=new go(t);i.push(r)}if(0===i.length)throw Error("No secret key packet found");return i}const Ko=/*#__PURE__*/F.constructAllowedPackets([ra,wa,Ba,Ka,Ma,Ua,Da,ha,oa]),So=/*#__PURE__*/F.constructAllowedPackets([Da]),Io=/*#__PURE__*/F.constructAllowedPackets([oa]);class Bo{constructor(e){this.packets=e||new fa}getEncryptionKeyIDs(){const e=[];return this.packets.filterByTag(L.packet.publicKeyEncryptedSessionKey).forEach((function(t){e.push(t.publicKeyID)})),e}getSigningKeyIDs(){const e=this.unwrapCompressed(),t=e.packets.filterByTag(L.packet.onePassSignature);if(t.length>0)return t.map((e=>e.issuerKeyID));return e.packets.filterByTag(L.packet.signature).map((e=>e.issuerKeyID))}async decrypt(e,t,r,n=new Date,i=T){const s=this.packets.filterByTag(L.packet.symmetricallyEncryptedData,L.packet.symEncryptedIntegrityProtectedData,L.packet.aeadEncryptedData);if(0===s.length)throw Error("No encrypted data found");const a=s[0],o=a.cipherAlgorithm,c=r||await this.decryptSessionKeys(e,t,o,n,i);let u=null;const h=Promise.all(c.map((async({algorithm:e,data:t})=>{if(!F.isUint8Array(t)||!a.cipherAlgorithm&&!F.isString(e))throw Error("Invalid session key for decryption.");try{const r=a.cipherAlgorithm||L.write(L.symmetric,e);await a.decrypt(r,t,i)}catch(e){F.printDebugError(e),u=e}})));if(P(a.encrypted),a.encrypted=null,await h,!a.packets||!a.packets.length)throw u||Error("Decryption failed.");const l=new Bo(a.packets);return a.packets=new fa,l}async decryptSessionKeys(e,t,r,n=new Date,i=T){let s,a=[];if(t){const e=this.packets.filterByTag(L.packet.symEncryptedSessionKey);if(0===e.length)throw Error("No symmetrically encrypted session key packet found.");await Promise.all(t.map((async function(t,r){let n;n=r?await fa.fromBinary(e.write(),So,i):e,await Promise.all(n.map((async function(e){try{await e.decrypt(t,i),a.push(e)}catch(e){F.printDebugError(e),e instanceof Xi&&(s=e)}})))})))}else{if(!e)throw Error("No key or password specified.");{const t=this.packets.filterByTag(L.packet.publicKeyEncryptedSessionKey);if(0===t.length)throw Error("No public key encrypted session key packet found.");await Promise.all(t.map((async function(t){await Promise.all(e.map((async function(e){let o;try{o=(await e.getDecryptionKeys(t.publicKeyID,null,void 0,i)).map((e=>e.keyPacket))}catch(e){return void(s=e)}let c=[L.symmetric.aes256,L.symmetric.aes128,L.symmetric.tripledes,L.symmetric.cast5];try{const t=await e.getPrimarySelfSignature(n,void 0,i);t.preferredSymmetricAlgorithms&&(c=c.concat(t.preferredSymmetricAlgorithms))}catch{}await Promise.all(o.map((async function(e){if(!e.isDecrypted())throw Error("Decryption key is not decrypted.");if(i.constantTimePKCS1Decryption&&(t.publicKeyAlgorithm===L.publicKey.rsaEncrypt||t.publicKeyAlgorithm===L.publicKey.rsaEncryptSign||t.publicKeyAlgorithm===L.publicKey.rsaSign||t.publicKeyAlgorithm===L.publicKey.elgamal)){const n=t.write();await Promise.all((r?[r]:Array.from(i.constantTimePKCS1DecryptionSupportedSymmetricAlgorithms)).map((async t=>{const r=new Ua;r.read(n);const i={sessionKeyAlgorithm:t,sessionKey:Vi(t)};try{await r.decrypt(e,i),a.push(r)}catch(e){F.printDebugError(e),s=e}})))}else try{await t.decrypt(e);const n=r||t.sessionKeyAlgorithm;if(n&&!c.includes(L.write(L.symmetric,n)))throw Error("A non-preferred symmetric algorithm was used.");a.push(t)}catch(e){F.printDebugError(e),s=e}})))}))),P(t.encrypted),t.encrypted=null})))}}if(a.length>0){if(a.length>1){const e=new Set;a=a.filter((t=>{const r=t.sessionKeyAlgorithm+F.uint8ArrayToString(t.sessionKey);return!e.has(r)&&(e.add(r),!0)}))}return a.map((e=>({data:e.sessionKey,algorithm:e.sessionKeyAlgorithm&&L.read(L.symmetric,e.sessionKeyAlgorithm)})))}throw s||Error("Session key decryption failed.")}getLiteralData(){const e=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return e&&e.getBytes()||null}getFilename(){const e=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return e&&e.getFilename()||null}getText(){const e=this.unwrapCompressed().packets.findPacket(L.packet.literalData);return e?e.getText():null}static async generateSessionKey(e=[],t=new Date,r=[],n=T){const{symmetricAlgo:i,aeadAlgo:s}=await async function(e=[],t=new Date,r=[],n=T){const i=await Promise.all(e.map(((e,i)=>e.getPrimarySelfSignature(t,r[i],n))));if(e.length?!n.ignoreSEIPDv2FeatureFlag&&i.every((e=>e.features&&e.features[0]&L.features.seipdv2)):n.aeadProtect){const e={symmetricAlgo:L.symmetric.aes128,aeadAlgo:L.aead.ocb},t=[{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:n.preferredAEADAlgorithm},{symmetricAlgo:n.preferredSymmetricAlgorithm,aeadAlgo:L.aead.ocb},{symmetricAlgo:L.symmetric.aes128,aeadAlgo:n.preferredAEADAlgorithm}];for(const e of t)if(i.every((t=>t.preferredCipherSuites&&t.preferredCipherSuites.some((t=>t[0]===e.symmetricAlgo&&t[1]===e.aeadAlgo)))))return e;return e}const s=L.symmetric.aes128,a=n.preferredSymmetricAlgorithm;return{symmetricAlgo:i.every((e=>e.preferredSymmetricAlgorithms&&e.preferredSymmetricAlgorithms.includes(a)))?a:s,aeadAlgo:void 0}}(e,t,r,n),a=L.read(L.symmetric,i),o=s?L.read(L.aead,s):void 0;await Promise.all(e.map((e=>e.getEncryptionKey().catch((()=>null)).then((e=>{if(e&&(e.keyPacket.algorithm===L.publicKey.x25519||e.keyPacket.algorithm===L.publicKey.x448)&&!o&&!F.isAES(i))throw Error("Could not generate a session key compatible with the given `encryptionKeys`: X22519 and X448 keys can only be used to encrypt AES session keys; change `config.preferredSymmetricAlgorithm` accordingly.")})))));return{data:Vi(i),algorithm:a,aeadAlgorithm:o}}async encrypt(e,t,r,n=!1,i=[],s=new Date,a=[],o=T){if(r){if(!F.isUint8Array(r.data)||!F.isString(r.algorithm))throw Error("Invalid session key for encryption.")}else if(e&&e.length)r=await Bo.generateSessionKey(e,s,a,o);else{if(!t||!t.length)throw Error("No keys, passwords, or session key provided.");r=await Bo.generateSessionKey(void 0,void 0,void 0,o)}const{data:c,algorithm:u,aeadAlgorithm:h}=r,l=await Bo.encryptSessionKey(c,u,h,e,t,n,i,s,a,o),f=Ka.fromObject({version:h?2:1,aeadAlgorithm:h?L.write(L.aead,h):null});f.packets=this.packets;const y=L.write(L.symmetric,u);return await f.encrypt(y,c,o),l.packets.push(f),f.packets=new fa,l}static async encryptSessionKey(e,t,r,n,i,s=!1,a=[],o=new Date,c=[],u=T){const h=new fa,l=L.write(L.symmetric,t),f=r&&L.write(L.aead,r);if(n){const t=await Promise.all(n.map((async function(t,r){const n=await t.getEncryptionKey(a[r],o,c,u),i=Ua.fromObject({version:f?6:3,encryptionKeyPacket:n.keyPacket,anonymousRecipient:s,sessionKey:e,sessionKeyAlgorithm:l});return await i.encrypt(n.keyPacket),delete i.sessionKey,i})));h.push(...t)}if(i){const t=async function(e,t){try{return await e.decrypt(t,u),1}catch{return 0}},r=(e,t)=>e+t,n=async function(e,s,a,o){const c=new Da(u);if(c.sessionKey=e,c.sessionKeyAlgorithm=s,a&&(c.aeadAlgorithm=a),await c.encrypt(o,u),u.passwordCollisionCheck){if(1!==(await Promise.all(i.map((e=>t(c,e))))).reduce(r))return n(e,s,o)}return delete c.sessionKey,c},s=await Promise.all(i.map((t=>n(e,l,f,t))));h.push(...s)}return new Bo(h)}async sign(e=[],t=[],r=null,n=[],i=new Date,s=[],a=[],o=[],c=T){const u=new fa,h=this.packets.findPacket(L.packet.literalData);if(!h)throw Error("No literal data packet to sign.");const l=await Co(h,e,t,r,n,i,s,a,o,!1,c),f=l.map(((e,t)=>ha.fromSignaturePacket(e,0===t))).reverse();return u.push(...f),u.push(h),u.push(...l),new Bo(u)}compress(e,t=T){if(e===L.compression.uncompressed)return this;const r=new wa(t);r.algorithm=e,r.packets=this.packets;const n=new fa;return n.push(r),new Bo(n)}async signDetached(e=[],t=[],r=null,n=[],i=[],s=new Date,a=[],o=[],c=T){const u=this.packets.findPacket(L.packet.literalData);if(!u)throw Error("No literal data packet to sign.");return new qa(await Co(u,e,t,r,n,i,s,a,o,!0,c))}async verify(e,t=new Date,r=T){const n=this.unwrapCompressed(),i=n.packets.filterByTag(L.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");let s=n.packets;o(s.stream)&&(s=s.concat(await U(s.stream,(e=>e||[]))));const a=s.filterByTag(L.packet.onePassSignature).reverse(),c=s.filterByTag(L.packet.signature);return a.length&&!c.length&&F.isStream(s.stream)&&!o(s.stream)?(await Promise.all(a.map((async e=>{e.correspondingSig=new Promise(((t,r)=>{e.correspondingSigResolve=t,e.correspondingSigReject=r})),e.signatureData=D((async()=>(await e.correspondingSig).signatureData)),e.hashed=U(await e.hash(e.signatureType,i[0],void 0,!1)),e.hashed.catch((()=>{}))}))),s.stream=v(s.stream,(async(e,t)=>{const r=x(e),n=Q(t);try{for(let e=0;e<a.length;e++){const{value:t}=await r.read();a[e].correspondingSigResolve(t)}await r.readToEnd(),await n.ready,await n.close()}catch(e){a.forEach((t=>{t.correspondingSigReject(e)})),await n.abort(e)}})),Uo(a,i,e,t,!1,r)):Uo(c,i,e,t,!1,r)}async verifyDetached(e,t,r=new Date,n=T){const i=this.unwrapCompressed().packets.filterByTag(L.packet.literalData);if(1!==i.length)throw Error("Can only verify message with one literal data packet.");return Uo(e.packets.filterByTag(L.packet.signature),i,t,r,!0,n)}unwrapCompressed(){const e=this.packets.filterByTag(L.packet.compressedData);return e.length?new Bo(e[0].packets):this}async appendSignature(e,t=T){await this.packets.read(F.isUint8Array(e)?e:(await $(e)).data,Io,t)}write(){return this.packets.write()}armor(e=T){const t=this.packets[this.packets.length-1],r=t.constructor.tag===Ka.tag?2!==t.version:this.packets.some((e=>e.constructor.tag===oa.tag&&6!==e.version));return ee(L.armor.message,this.write(),null,null,null,r,e)}}async function Co(e,t,r=[],n=null,i=[],s=new Date,a=[],o=[],c=[],u=!1,h=T){const l=new fa,f=null===e.text?L.signature.binary:L.signature.text;if(await Promise.all(t.map((async(t,n)=>{const l=a[n];if(!t.isPrivate())throw Error("Need private key for signing");const y=await t.getSigningKey(i[n],s,l,h);return $a(e,r.length?r:[t],y.keyPacket,{signatureType:f},s,o,c,u,h)}))).then((e=>{l.push(...e)})),n){const e=n.packets.filterByTag(L.packet.signature);l.push(...e)}return l}function Uo(e,t,r,n=new Date,i=!1,s=T){return e.filter((e=>["text","binary"].includes(L.read(L.signature,e.signatureType)))).map((e=>function(e,t,r,n=new Date,i=!1,s=T){let a,o;for(const t of r){const r=t.getKeys(e.issuerKeyID);if(r.length>0){a=t,o=r[0];break}}const c=e instanceof ha?e.correspondingSig:e,u={keyID:e.issuerKeyID,verified:(async()=>{if(!o)throw Error("Could not find signing key with key ID "+e.issuerKeyID.toHex());await e.verify(o.keyPacket,e.signatureType,t[0],n,i,s);const r=await c;if(o.getCreationTime()>r.created)throw Error("Key is newer than the signature");try{await a.getSigningKey(o.getKeyID(),r.created,void 0,s)}catch(e){if(!s.allowInsecureVerificationWithReformattedKeys||!e.message.match(/Signature creation time is in the future/))throw e;await a.getSigningKey(o.getKeyID(),n,void 0,s)}return!0})(),signature:(async()=>{const e=await c,t=new fa;return e&&t.push(e),new qa(t)})()};return u.signature.catch((()=>{})),u.verified.catch((()=>{})),u}(e,t,r,n,i,s)))}async function Po({armoredMessage:e,binaryMessage:t,config:r,...n}){r={...T,...r};let i=e||t;if(!i)throw Error("readMessage: must pass options object containing `armoredMessage` or `binaryMessage`");if(e&&!F.isString(e)&&!F.isStream(e))throw Error("readMessage: options.armoredMessage must be a string or stream");if(t&&!F.isUint8Array(t)&&!F.isStream(t))throw Error("readMessage: options.binaryMessage must be a Uint8Array or stream");const s=Object.keys(n);if(s.length>0)throw Error("Unknown option: "+s.join(", "));const a=F.isStream(i);if(e){const{type:e,data:t}=await $(i);if(e!==L.armor.message)throw Error("Armored text not of type message");i=t}const o=await fa.fromBinary(i,Ko,r,new pa),c=new Bo(o);return c.fromStream=a,c}async function Do({text:e,binary:t,filename:r,date:n=new Date,format:i=(void 0!==e?"utf8":"binary"),...s}){const a=void 0!==e?e:t;if(void 0===a)throw Error("createMessage: must pass options object containing `text` or `binary`");if(e&&!F.isString(e)&&!F.isStream(e))throw Error("createMessage: options.text must be a string or stream");if(t&&!F.isUint8Array(t)&&!F.isStream(t))throw Error("createMessage: options.binary must be a Uint8Array or stream");const o=Object.keys(s);if(o.length>0)throw Error("Unknown option: "+o.join(", "));const c=F.isStream(a),u=new ra(n);void 0!==e?u.setText(a,L.write(L.literal,i)):u.setBytes(a,L.write(L.literal,i)),void 0!==r&&u.setFilename(r);const h=new fa;h.push(u);const l=new Bo(h);return l.fromStream=c,l}const xo=/*#__PURE__*/F.constructAllowedPackets([oa]);class Qo{constructor(e,t){if(this.text=F.removeTrailingSpaces(e).replace(/\r?\n/g,"\r\n"),t&&!(t instanceof qa))throw Error("Invalid signature input");this.signature=t||new qa(new fa)}getSigningKeyIDs(){const e=[];return this.signature.packets.forEach((function(t){e.push(t.issuerKeyID)})),e}async sign(e,t=[],r=null,n=[],i=new Date,s=[],a=[],o=[],c=T){const u=new ra;u.setText(this.text);const h=new qa(await Co(u,e,t,r,n,i,s,a,o,!0,c));return new Qo(this.text,h)}verify(e,t=new Date,r=T){const n=this.signature.packets.filterByTag(L.packet.signature),i=new ra;return i.setText(this.text),Uo(n,[i],e,t,!0,r)}getText(){return this.text.replace(/\r\n/g,"\n")}armor(e=T){const t=this.signature.packets.some((e=>6!==e.version)),r={hash:t?Array.from(new Set(this.signature.packets.map((e=>L.read(L.hash,e.hashAlgorithm).toUpperCase())))).join():null,text:this.text,data:this.signature.packets.write()};return ee(L.armor.signed,r,void 0,void 0,void 0,t,e)}}async function Mo({cleartextMessage:e,config:t,...r}){if(t={...T,...t},!e)throw Error("readCleartextMessage: must pass options object containing `cleartextMessage`");if(!F.isString(e))throw Error("readCleartextMessage: options.cleartextMessage must be a string");const n=Object.keys(r);if(n.length>0)throw Error("Unknown option: "+n.join(", "));const i=await $(e);if(i.type!==L.armor.signed)throw Error("No cleartext signed message.");const s=await fa.fromBinary(i.data,xo,t);!function(e,t){const r=function(e){const r=e=>t=>e.hashAlgorithm===t;for(let n=0;n<t.length;n++)if(t[n].constructor.tag===L.packet.signature&&!e.some(r(t[n])))return!1;return!0},n=[];if(e.forEach((e=>{const t=e.match(/^Hash: (.+)$/);if(!t)throw Error('Only "Hash" header allowed in cleartext signed message');{const e=t[1].replace(/\s/g,"").split(",").map((e=>{try{return L.write(L.hash,e.toLowerCase())}catch{throw Error("Unknown hash algorithm in armor header: "+e.toLowerCase())}}));n.push(...e)}})),n.length&&!r(n))throw Error("Hash algorithm mismatch in armor header and signature")}(i.headers,s);const a=new qa(s);return new Qo(i.text,a)}async function Lo({text:e,...t}){if(!e)throw Error("createCleartextMessage: must pass options object containing `text`");if(!F.isString(e))throw Error("createCleartextMessage: options.text must be a string");const r=Object.keys(t);if(r.length>0)throw Error("Unknown option: "+r.join(", "));return new Qo(e)}async function To({userIDs:e=[],passphrase:t,type:r,curve:n,rsaBits:i=4096,symmetricHash:s="sha256",symmetricCipher:a="aes256",keyExpirationTime:o=0,date:c=new Date,subkeys:u=[{}],format:h="armored",config:l,...f}){Xo(l={...T,...l}),r||n?(r=r||"ecc",n=n||"curve25519Legacy"):(r=l.v6Keys?"curve25519":"ecc",n="curve25519Legacy"),e=$o(e);const y=Object.keys(f);if(y.length>0)throw Error("Unknown option: "+y.join(", "));if(0===e.length&&!l.v6Keys)throw Error("UserIDs are required for V4 keys");if("rsa"===r&&i<l.minRSABits)throw Error(`rsaBits should be at least ${l.minRSABits}, got: ${i}`);const d={userIDs:e,passphrase:t,type:r,rsaBits:i,curve:n,keyExpirationTime:o,date:c,subkeys:u,symmetricHash:s,symmetricCipher:a};try{const{key:e,revocationCertificate:t}=await async function(e,t){e.sign=!0,(e=no(e)).subkeys=e.subkeys.map(((t,r)=>no(e.subkeys[r],e)));let r=[Ya(e,t)];r=r.concat(e.subkeys.map((e=>Va(e,t))));const n=await Promise.all(r),i=await mo(n[0],n.slice(1),e,t),s=await i.getRevocationCertificate(e.date,t);return i.revocationSignatures=[],{key:i,revocationCertificate:s}}(d,l);return e.getKeys().forEach((({keyPacket:e})=>oo(e,l))),{privateKey:rc(e,h,l),publicKey:"symmetric"!==r?rc(e.toPublic(),h,l):null,revocationCertificate:t}}catch(e){throw F.wrapError("Error generating keypair",e)}}async function Ro({privateKey:e,userIDs:t=[],passphrase:r,keyExpirationTime:n=0,date:i,format:s="armored",config:a,...o}){Xo(a={...T,...a}),t=$o(t);const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(0===t.length&&6!==e.keyPacket.version)throw Error("UserIDs are required for V4 keys");const u={privateKey:e,userIDs:t,passphrase:r,keyExpirationTime:n,date:i};try{const{key:e,revocationCertificate:t}=await async function(e,t){e=o(e);const{privateKey:r}=e;if(!r.isPrivate())throw Error("Cannot reformat a public key");if(r.keyPacket.isDummy())throw Error("Cannot reformat a gnu-dummy primary key");if(!r.getKeys().every((({keyPacket:e})=>e.isDecrypted())))throw Error("Key is not decrypted");const n=r.keyPacket;e.subkeys||(e.subkeys=await Promise.all(r.subkeys.map((async e=>{const r=e.keyPacket,i={key:n,bind:r},s=await Za(e.bindingSignatures,n,L.signature.subkeyBinding,i,null,t).catch((()=>({})));return{sign:s.keyFlags&&s.keyFlags[0]&L.keyFlags.signData,forwarding:s.keyFlags&&s.keyFlags[0]&L.keyFlags.forwardedCommunication}}))));const i=r.subkeys.map((e=>e.keyPacket));if(e.subkeys.length!==i.length)throw Error("Number of subkey options does not match number of subkeys");e.subkeys=e.subkeys.map((t=>o(t,e)));const s=await mo(n,i,e,t),a=await s.getRevocationCertificate(e.date,t);return s.revocationSignatures=[],{key:s,revocationCertificate:a};function o(e,t={}){return e.keyExpirationTime=e.keyExpirationTime||t.keyExpirationTime,e.passphrase=F.isString(e.passphrase)?e.passphrase:t.passphrase,e.date=e.date||t.date,e}}(u,a);return{privateKey:rc(e,s,a),publicKey:rc(e.toPublic(),s,a),revocationCertificate:t}}catch(e){throw F.wrapError("Error reformatting keypair",e)}}async function Fo({key:e,revocationCertificate:t,reasonForRevocation:r,date:n=new Date,format:i="armored",config:s,...a}){Xo(s={...T,...s});const o=Object.keys(a);if(o.length>0)throw Error("Unknown option: "+o.join(", "));try{const a=t?await e.applyRevocationCertificate(t,n,s):await e.revoke(r,n,s);return a.isPrivate()?{privateKey:rc(a,i,s),publicKey:rc(a.toPublic(),i,s)}:{privateKey:null,publicKey:rc(a,i,s)}}catch(e){throw F.wrapError("Error revoking key",e)}}async function No({privateKey:e,passphrase:t,config:r,...n}){Xo(r={...T,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot decrypt a public key");const s=e.clone(!0),a=F.isArray(t)?t:[t];try{return await Promise.all(s.getKeys().map((e=>F.anyPromise(a.map((t=>e.keyPacket.decrypt(t,r))))))),await s.validate(r),s}catch(e){throw s.clearPrivateParams(),F.wrapError("Error decrypting private key",e)}}async function Oo({privateKey:e,passphrase:t,config:r,...n}){Xo(r={...T,...r});const i=Object.keys(n);if(i.length>0)throw Error("Unknown option: "+i.join(", "));if(!e.isPrivate())throw Error("Cannot encrypt a public key");const s=e.clone(!0),a=s.getKeys(),o=F.isArray(t)?t:Array(a.length).fill(t);if(o.length!==a.length)throw Error("Invalid number of passphrases given for key encryption");try{return await Promise.all(a.map((async(e,t)=>{const{keyPacket:n}=e;await n.encrypt(o[t],r),n.clearPrivateParams()}))),s}catch(e){throw s.clearPrivateParams(),F.wrapError("Error encrypting private key",e)}}async function Ho({message:e,encryptionKeys:t,signingKeys:r,passwords:n,sessionKey:i,format:s="armored",signature:a=null,wildcard:o=!1,signingKeyIDs:c=[],encryptionKeyIDs:u=[],date:h=new Date,signingUserIDs:l=[],encryptionUserIDs:f=[],signatureNotations:y=[],config:d,...p}){if(Xo(d={...T,...d}),Yo(e),Jo(s),t=$o(t),r=$o(r),n=$o(n),c=$o(c),u=$o(u),l=$o(l),f=$o(f),y=$o(y),p.detached)throw Error("The `detached` option has been removed from openpgp.encrypt, separately call openpgp.sign instead. Don't forget to remove the `privateKeys` option as well.");if(p.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encrypt, pass `encryptionKeys` instead");if(p.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.encrypt, pass `signingKeys` instead");if(void 0!==p.armor)throw Error("The `armor` option has been removed from openpgp.encrypt, pass `format` instead.");const g=Object.keys(p);if(g.length>0)throw Error("Unknown option: "+g.join(", "));r||(r=[]);try{if((r.length||a)&&(e=await e.sign(r,t,a,c,h,l,u,y,d)),e=e.compress(await async function(e=[],t=new Date,r=[],n=T){const i=L.compression.uncompressed,s=n.preferredCompressionAlgorithm,a=await Promise.all(e.map((async function(e,i){const a=(await e.getPrimarySelfSignature(t,r[i],n)).preferredCompressionAlgorithms;return!!a&&a.indexOf(s)>=0})));return a.every(Boolean)?s:i}(t,h,f,d),d),e=await e.encrypt(t,n,i,o,u,h,f,d),"object"===s)return e;const p="armored"===s?e.armor(d):e.write();return await ec(p)}catch(e){throw F.wrapError("Error encrypting message",e)}}async function _o({message:e,decryptionKeys:t,passwords:r,sessionKeys:n,verificationKeys:i,expectSigned:s=!1,format:a="utf8",signature:o=null,date:c=new Date,config:u,...h}){if(Xo(u={...T,...u}),Yo(e),i=$o(i),t=$o(t),r=$o(r),n=$o(n),h.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decrypt, pass `decryptionKeys` instead");if(h.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.decrypt, pass `verificationKeys` instead");const l=Object.keys(h);if(l.length>0)throw Error("Unknown option: "+l.join(", "));try{const h=await e.decrypt(t,r,n,c,u);i||(i=[]);const l={};if(l.signatures=o?await h.verifyDetached(o,i,c,u):await h.verify(i,c,u),l.data="binary"===a?h.getLiteralData():h.getText(),l.filename=h.getFilename(),tc(l,e,...new Set([h,h.unwrapCompressed()])),s){if(0===i.length)throw Error("Verification keys are required to verify message signatures");if(0===l.signatures.length)throw Error("Message is not signed");l.data=w([l.data,D((async()=>(await F.anyPromise(l.signatures.map((e=>e.verified))),"binary"===a?new Uint8Array:"")))])}return l.data=await ec(l.data),l}catch(e){throw F.wrapError("Error decrypting message",e)}}async function zo({message:e,signingKeys:t,recipientKeys:r=[],format:n="armored",detached:i=!1,signingKeyIDs:s=[],date:a=new Date,signingUserIDs:o=[],recipientUserIDs:c=[],signatureNotations:u=[],config:h,...l}){if(Xo(h={...T,...h}),Zo(e),Jo(n),t=$o(t),s=$o(s),o=$o(o),r=$o(r),c=$o(c),u=$o(u),l.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.sign, pass `signingKeys` instead");if(void 0!==l.armor)throw Error("The `armor` option has been removed from openpgp.sign, pass `format` instead.");const f=Object.keys(l);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(e instanceof Qo&&"binary"===n)throw Error("Cannot return signed cleartext message in binary format");if(e instanceof Qo&&i)throw Error("Cannot detach-sign a cleartext message");if(!t||0===t.length)throw Error("No signing keys provided");try{let l;if(l=i?await e.signDetached(t,r,void 0,s,a,o,c,u,h):await e.sign(t,r,void 0,s,a,o,c,u,h),"object"===n)return l;return l="armored"===n?l.armor(h):l.write(),i&&(l=v(e.packets.write(),(async(e,t)=>{await Promise.all([A(l,t),U(e).catch((()=>{}))])}))),await ec(l)}catch(e){throw F.wrapError("Error signing message",e)}}async function Go({message:e,verificationKeys:t,expectSigned:r=!1,format:n="utf8",signature:i=null,date:s=new Date,config:a,...o}){if(Xo(a={...T,...a}),Zo(e),t=$o(t),o.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.verify, pass `verificationKeys` instead");const c=Object.keys(o);if(c.length>0)throw Error("Unknown option: "+c.join(", "));if(e instanceof Qo&&"binary"===n)throw Error("Can't return cleartext message data as binary");if(e instanceof Qo&&i)throw Error("Can't verify detached cleartext signature");try{const o={};if(o.signatures=i?await e.verifyDetached(i,t,s,a):await e.verify(t,s,a),o.data="binary"===n?e.getLiteralData():e.getText(),e.fromStream&&!i&&tc(o,...new Set([e,e.unwrapCompressed()])),r){if(0===o.signatures.length)throw Error("Message is not signed");o.data=w([o.data,D((async()=>(await F.anyPromise(o.signatures.map((e=>e.verified))),"binary"===n?new Uint8Array:"")))])}return o.data=await ec(o.data),o}catch(e){throw F.wrapError("Error verifying signed message",e)}}async function qo({encryptionKeys:e,date:t=new Date,encryptionUserIDs:r=[],config:n,...i}){if(Xo(n={...T,...n}),e=$o(e),r=$o(r),i.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.generateSessionKey, pass `encryptionKeys` instead");const s=Object.keys(i);if(s.length>0)throw Error("Unknown option: "+s.join(", "));try{return await Bo.generateSessionKey(e,t,r,n)}catch(e){throw F.wrapError("Error generating session key",e)}}async function jo({data:e,algorithm:t,aeadAlgorithm:r,encryptionKeys:n,passwords:i,format:s="armored",wildcard:a=!1,encryptionKeyIDs:o=[],date:c=new Date,encryptionUserIDs:u=[],config:h,...l}){if(Xo(h={...T,...h}),function(e){if(!F.isUint8Array(e))throw Error("Parameter [data] must be of type Uint8Array")}(e),function(e,t){if(!F.isString(e))throw Error("Parameter ["+t+"] must be of type String")}(t,"algorithm"),Jo(s),n=$o(n),i=$o(i),o=$o(o),u=$o(u),l.publicKeys)throw Error("The `publicKeys` option has been removed from openpgp.encryptSessionKey, pass `encryptionKeys` instead");const f=Object.keys(l);if(f.length>0)throw Error("Unknown option: "+f.join(", "));if(!(n&&0!==n.length||i&&0!==i.length))throw Error("No encryption keys or passwords provided.");try{return rc(await Bo.encryptSessionKey(e,t,r,n,i,a,o,c,u,h),s,h)}catch(e){throw F.wrapError("Error encrypting session key",e)}}async function Vo({message:e,decryptionKeys:t,passwords:r,date:n=new Date,config:i,...s}){if(Xo(i={...T,...i}),Yo(e),t=$o(t),r=$o(r),s.privateKeys)throw Error("The `privateKeys` option has been removed from openpgp.decryptSessionKeys, pass `decryptionKeys` instead");const a=Object.keys(s);if(a.length>0)throw Error("Unknown option: "+a.join(", "));try{return await e.decryptSessionKeys(t,r,void 0,n,i)}catch(e){throw F.wrapError("Error decrypting session keys",e)}}function Yo(e){if(!(e instanceof Bo))throw Error("Parameter [message] needs to be of type Message")}function Zo(e){if(!(e instanceof Qo||e instanceof Bo))throw Error("Parameter [message] needs to be of type Message or CleartextMessage")}function Jo(e){if("armored"!==e&&"binary"!==e&&"object"!==e)throw Error("Unsupported format "+e)}const Wo=Object.keys(T).length;function Xo(e){const t=Object.keys(e);if(t.length!==Wo)for(const e of t)if(void 0===T[e])throw Error("Unknown config property: "+e)}function $o(e){return e&&!F.isArray(e)&&(e=[e]),e}async function ec(e){return"array"===F.isStream(e)?U(e):e}function tc(e,t,...r){e.data=v(t.packets.stream,(async(t,n)=>{await A(e.data,n,{preventClose:!0});const i=Q(n);try{await U(t,(e=>e)),await Promise.all(r.map((e=>U(e.packets.stream,(e=>e))))),await i.close()}catch(e){await i.abort(e)}}))}function rc(e,t,r){switch(t){case"object":return e;case"armored":return e.armor(r);case"binary":return e.write();default:throw Error("Unsupported format "+t)}}const nc=r&&"object"==typeof r&&"webcrypto"in r?r.webcrypto:r&&"object"==typeof r&&"randomBytes"in r?r:void 0;
+/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */function ic(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&"Uint8Array"===e.constructor.name}function sc(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, got "+e)}function ac(e,...t){if(!ic(e))throw Error("Uint8Array expected");if(t.length>0&&!t.includes(e.length))throw Error("Uint8Array expected of length "+t+", got length="+e.length)}function oc(e){if("function"!=typeof e||"function"!=typeof e.create)throw Error("Hash should be wrapped by utils.createHasher");sc(e.outputLen),sc(e.blockLen)}function cc(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}function uc(e,t){ac(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}function hc(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function lc(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function fc(e,t){return e<<32-t|e>>>t}function yc(e,t){return e<<t|e>>>32-t>>>0}const dc=/* @__PURE__ */(()=>68===new Uint8Array(new Uint32Array([287454020]).buffer)[0])()?e=>e:function(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t;return e},pc=/* @__PURE__ */(()=>"function"==typeof Uint8Array.from([]).toHex&&"function"==typeof Uint8Array.fromHex)(),gc=/* @__PURE__ */Array.from({length:256},((e,t)=>t.toString(16).padStart(2,"0")));function wc(e){if(ac(e),pc)return e.toHex();let t="";for(let r=0;r<e.length;r++)t+=gc[e[r]];return t}const Ac=48,mc=57,bc=65,kc=70,Ec=97,vc=102;function Kc(e){return e>=Ac&&e<=mc?e-Ac:e>=bc&&e<=kc?e-(bc-10):e>=Ec&&e<=vc?e-(Ec-10):void 0}function Sc(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);if(pc)return Uint8Array.fromHex(e);const t=e.length,r=t/2;if(t%2)throw Error("hex string expected, got unpadded hex of length "+t);const n=new Uint8Array(r);for(let t=0,i=0;t<r;t++,i+=2){const r=Kc(e.charCodeAt(i)),s=Kc(e.charCodeAt(i+1));if(void 0===r||void 0===s){const t=e[i]+e[i+1];throw Error('hex string expected, got non-hex character "'+t+'" at index '+i)}n[t]=16*r+s}return n}function Ic(e){return"string"==typeof e&&(e=function(e){if("string"!=typeof e)throw Error("string expected");return new Uint8Array((new TextEncoder).encode(e))}(e)),ac(e),e}function Bc(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];ac(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}let Cc=class{};function Uc(e){const t=t=>e().update(Ic(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}const Pc=Uc;function Dc(e=32){if(nc&&"function"==typeof nc.getRandomValues)return nc.getRandomValues(new Uint8Array(e));if(nc&&"function"==typeof nc.randomBytes)return Uint8Array.from(nc.randomBytes(e));throw Error("crypto.getRandomValues must be defined")}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const xc=/* @__PURE__ */BigInt(0),Qc=/* @__PURE__ */BigInt(1);function Mc(e,t=""){if("boolean"!=typeof e){throw Error((t&&`"${t}"`)+"expected boolean, got type="+typeof e)}return e}function Lc(e,t,r=""){const n=ic(e),i=e?.length,s=void 0!==t;if(!n||s&&i!==t){throw Error((r&&`"${r}" `)+"expected Uint8Array"+(s?" of length "+t:"")+", got "+(n?"length="+i:"type="+typeof e))}return e}function Tc(e){const t=e.toString(16);return 1&t.length?"0"+t:t}function Rc(e){if("string"!=typeof e)throw Error("hex string expected, got "+typeof e);return""===e?xc:BigInt("0x"+e)}function Fc(e){return Rc(wc(e))}function Nc(e){return ac(e),Rc(wc(Uint8Array.from(e).reverse()))}function Oc(e,t){return Sc(e.toString(16).padStart(2*t,"0"))}function Hc(e,t){return Oc(e,t).reverse()}function _c(e,t,r){let n;if("string"==typeof t)try{n=Sc(t)}catch(t){throw Error(e+" must be hex string or Uint8Array, cause: "+t)}else{if(!ic(t))throw Error(e+" must be hex string or Uint8Array");n=Uint8Array.from(t)}const i=n.length;if("number"==typeof r&&i!==r)throw Error(e+" of length "+r+" expected, got "+i);return n}function zc(e){return Uint8Array.from(e)}const Gc=e=>"bigint"==typeof e&&xc<=e;function qc(e,t,r,n){if(!function(e,t,r){return Gc(e)&&Gc(t)&&Gc(r)&&t<=e&&e<r}(t,r,n))throw Error("expected valid "+e+": "+r+" <= n < "+n+", got "+t)}function jc(e){let t;for(t=0;e>xc;e>>=Qc,t+=1);return t}const Vc=e=>(Qc<<BigInt(e))-Qc;function Yc(e,t,r={}){if(!e||"object"!=typeof e)throw Error("expected valid options object");function n(t,r,n){const i=e[t];if(n&&void 0===i)return;const s=typeof i;if(s!==r||null===i)throw Error(`param "${t}" is invalid: expected ${r}, got ${s}`)}Object.entries(t).forEach((([e,t])=>n(e,t,!1))),Object.entries(r).forEach((([e,t])=>n(e,t,!0)))}function Zc(e){const t=new WeakMap;return(r,...n)=>{const i=t.get(r);if(void 0!==i)return i;const s=e(r,...n);return t.set(r,s),s}}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Jc=BigInt(0),Wc=BigInt(1),Xc=/* @__PURE__ */BigInt(2),$c=/* @__PURE__ */BigInt(3),eu=/* @__PURE__ */BigInt(4),tu=/* @__PURE__ */BigInt(5),ru=/* @__PURE__ */BigInt(7),nu=/* @__PURE__ */BigInt(8),iu=/* @__PURE__ */BigInt(9),su=/* @__PURE__ */BigInt(16);function au(e,t){const r=e%t;return r>=Jc?r:t+r}function ou(e,t,r){let n=e;for(;t-- >Jc;)n*=n,n%=r;return n}function cu(e,t){if(e===Jc)throw Error("invert: expected non-zero number");if(t<=Jc)throw Error("invert: expected positive modulus, got "+t);let r=au(e,t),n=t,i=Jc,s=Wc;for(;r!==Jc;){const e=n%r,t=i-s*(n/r);n=r,r=e,i=s,s=t}if(n!==Wc)throw Error("invert: does not exist");return au(i,t)}function uu(e,t,r){if(!e.eql(e.sqr(t),r))throw Error("Cannot find square root")}function hu(e,t){const r=(e.ORDER+Wc)/eu,n=e.pow(t,r);return uu(e,n,t),n}function lu(e,t){const r=(e.ORDER-tu)/nu,n=e.mul(t,Xc),i=e.pow(n,r),s=e.mul(t,i),a=e.mul(e.mul(s,Xc),i),o=e.mul(s,e.sub(a,e.ONE));return uu(e,o,t),o}function fu(e){if(e<$c)throw Error("sqrt is not defined for small field");let t=e-Wc,r=0;for(;t%Xc===Jc;)t/=Xc,r++;let n=Xc;const i=Au(e);for(;1===gu(i,n);)if(n++>1e3)throw Error("Cannot find square root: probably non-prime P");if(1===r)return hu;let s=i.pow(n,t);const a=(t+Wc)/Xc;return function(e,n){if(e.is0(n))return n;if(1!==gu(e,n))throw Error("Cannot find square root");let i=r,o=e.mul(e.ONE,s),c=e.pow(n,t),u=e.pow(n,a);for(;!e.eql(c,e.ONE);){if(e.is0(c))return e.ZERO;let t=1,r=e.sqr(c);for(;!e.eql(r,e.ONE);)if(t++,r=e.sqr(r),t===i)throw Error("Cannot find square root");const n=Wc<<BigInt(i-t-1),s=e.pow(o,n);i=t,o=e.sqr(s),c=e.mul(c,o),u=e.mul(u,s)}return u}}function yu(e){return e%eu===$c?hu:e%nu===tu?lu:e%su===iu?function(e){const t=Au(e),r=fu(e),n=r(t,t.neg(t.ONE)),i=r(t,n),s=r(t,t.neg(n)),a=(e+ru)/su;return(e,t)=>{let r=e.pow(t,a),o=e.mul(r,n);const c=e.mul(r,i),u=e.mul(r,s),h=e.eql(e.sqr(o),t),l=e.eql(e.sqr(c),t);r=e.cmov(r,o,h),o=e.cmov(u,c,l);const f=e.eql(e.sqr(o),t),y=e.cmov(r,o,f);return uu(e,y,t),y}}(e):fu(e)}const du=["create","isValid","is0","neg","inv","sqrt","sqr","eql","add","sub","mul","pow","div","addN","subN","mulN","sqrN"];function pu(e,t,r=!1){const n=Array(t.length).fill(r?e.ZERO:void 0),i=t.reduce(((t,r,i)=>e.is0(r)?t:(n[i]=t,e.mul(t,r))),e.ONE),s=e.inv(i);return t.reduceRight(((t,r,i)=>e.is0(r)?t:(n[i]=e.mul(t,n[i]),e.mul(t,r))),s),n}function gu(e,t){const r=(e.ORDER-Wc)/Xc,n=e.pow(t,r),i=e.eql(n,e.ONE),s=e.eql(n,e.ZERO),a=e.eql(n,e.neg(e.ONE));if(!i&&!s&&!a)throw Error("invalid Legendre symbol result");return i?1:s?0:-1}function wu(e,t){void 0!==t&&sc(t);const r=void 0!==t?t:e.toString(2).length;return{nBitLength:r,nByteLength:Math.ceil(r/8)}}function Au(e,t,r=!1,n={}){if(e<=Jc)throw Error("invalid field: expected ORDER > 0, got "+e);let i,s,a,o=!1;if("object"==typeof t&&null!=t){if(n.sqrt||r)throw Error("cannot specify opts in two arguments");const e=t;e.BITS&&(i=e.BITS),e.sqrt&&(s=e.sqrt),"boolean"==typeof e.isLE&&(r=e.isLE),"boolean"==typeof e.modFromBytes&&(o=e.modFromBytes),a=e.allowedLengths}else"number"==typeof t&&(i=t),n.sqrt&&(s=n.sqrt);const{nBitLength:c,nByteLength:u}=wu(e,i);if(u>2048)throw Error("invalid field: expected ORDER of <= 2048 bytes");let h;const l=Object.freeze({ORDER:e,isLE:r,BITS:c,BYTES:u,MASK:Vc(c),ZERO:Jc,ONE:Wc,allowedLengths:a,create:t=>au(t,e),isValid:t=>{if("bigint"!=typeof t)throw Error("invalid field element: expected bigint, got "+typeof t);return Jc<=t&&t<e},is0:e=>e===Jc,isValidNot0:e=>!l.is0(e)&&l.isValid(e),isOdd:e=>(e&Wc)===Wc,neg:t=>au(-t,e),eql:(e,t)=>e===t,sqr:t=>au(t*t,e),add:(t,r)=>au(t+r,e),sub:(t,r)=>au(t-r,e),mul:(t,r)=>au(t*r,e),pow:(e,t)=>function(e,t,r){if(r<Jc)throw Error("invalid exponent, negatives unsupported");if(r===Jc)return e.ONE;if(r===Wc)return t;let n=e.ONE,i=t;for(;r>Jc;)r&Wc&&(n=e.mul(n,i)),i=e.sqr(i),r>>=Wc;return n}(l,e,t),div:(t,r)=>au(t*cu(r,e),e),sqrN:e=>e*e,addN:(e,t)=>e+t,subN:(e,t)=>e-t,mulN:(e,t)=>e*t,inv:t=>cu(t,e),sqrt:s||(t=>(h||(h=yu(e)),h(l,t))),toBytes:e=>r?Hc(e,u):Oc(e,u),fromBytes:(t,n=!0)=>{if(a){if(!a.includes(t.length)||t.length>u)throw Error("Field.fromBytes: expected "+a+" bytes, got "+t.length);const e=new Uint8Array(u);e.set(t,r?0:e.length-t.length),t=e}if(t.length!==u)throw Error("Field.fromBytes: expected "+u+" bytes, got "+t.length);let i=r?Nc(t):Fc(t);if(o&&(i=au(i,e)),!n&&!l.isValid(i))throw Error("invalid field element: outside of range 0..ORDER");return i},invertBatch:e=>pu(l,e),cmov:(e,t,r)=>r?t:e});return Object.freeze(l)}function mu(e){if("bigint"!=typeof e)throw Error("field order must be bigint");const t=e.toString(2).length;return Math.ceil(t/8)}function bu(e){const t=mu(e);return t+Math.ceil(t/2)}function ku(e,t,r){return e&t^~e&r}function Eu(e,t,r){return e&t^e&r^t&r}class vu extends Cc{constructor(e,t,r,n){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=e,this.outputLen=t,this.padOffset=r,this.isLE=n,this.buffer=new Uint8Array(e),this.view=lc(this.buffer)}update(e){cc(this),ac(e=Ic(e));const{view:t,buffer:r,blockLen:n}=this,i=e.length;for(let s=0;s<i;){const a=Math.min(n-this.pos,i-s);if(a!==n)r.set(e.subarray(s,s+a),this.pos),this.pos+=a,s+=a,this.pos===n&&(this.process(t,0),this.pos=0);else{const t=lc(e);for(;n<=i-s;s+=n)this.process(t,s)}}return this.length+=e.length,this.roundClean(),this}digestInto(e){cc(this),uc(e,this),this.finished=!0;const{buffer:t,view:r,blockLen:n,isLE:i}=this;let{pos:s}=this;t[s++]=128,hc(this.buffer.subarray(s)),this.padOffset>n-s&&(this.process(r,0),s=0);for(let e=s;e<n;e++)t[e]=0;!function(e,t,r,n){if("function"==typeof e.setBigUint64)return e.setBigUint64(t,r,n);const i=BigInt(32),s=BigInt(4294967295),a=Number(r>>i&s),o=Number(r&s),c=n?4:0,u=n?0:4;e.setUint32(t+c,a,n),e.setUint32(t+u,o,n)}(r,n-8,BigInt(8*this.length),i),this.process(r,0);const a=lc(e),o=this.outputLen;if(o%4)throw Error("_sha2: outputLen should be aligned to 32bit");const c=o/4,u=this.get();if(c>u.length)throw Error("_sha2: outputLen bigger than state");for(let e=0;e<c;e++)a.setUint32(4*e,u[e],i)}digest(){const{buffer:e,outputLen:t}=this;this.digestInto(e);const r=e.slice(0,t);return this.destroy(),r}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());const{blockLen:t,buffer:r,length:n,finished:i,destroyed:s,pos:a}=this;return e.destroyed=s,e.finished=i,e.length=n,e.pos=a,n%t&&e.buffer.set(r),e}clone(){return this._cloneInto()}}const Ku=/* @__PURE__ */Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),Su=/* @__PURE__ */Uint32Array.from([3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]),Iu=/* @__PURE__ */Uint32Array.from([3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]),Bu=/* @__PURE__ */Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]),Cu=/* @__PURE__ */BigInt(2**32-1),Uu=/* @__PURE__ */BigInt(32);function Pu(e,t=!1){return t?{h:Number(e&Cu),l:Number(e>>Uu&Cu)}:{h:0|Number(e>>Uu&Cu),l:0|Number(e&Cu)}}function Du(e,t=!1){const r=e.length;let n=new Uint32Array(r),i=new Uint32Array(r);for(let s=0;s<r;s++){const{h:r,l:a}=Pu(e[s],t);[n[s],i[s]]=[r,a]}return[n,i]}const xu=(e,t,r)=>e>>>r,Qu=(e,t,r)=>e<<32-r|t>>>r,Mu=(e,t,r)=>e>>>r|t<<32-r,Lu=(e,t,r)=>e<<32-r|t>>>r,Tu=(e,t,r)=>e<<64-r|t>>>r-32,Ru=(e,t,r)=>e>>>r-32|t<<64-r;function Fu(e,t,r,n){const i=(t>>>0)+(n>>>0);return{h:e+r+(i/2**32|0)|0,l:0|i}}const Nu=(e,t,r)=>(e>>>0)+(t>>>0)+(r>>>0),Ou=(e,t,r,n)=>t+r+n+(e/2**32|0)|0,Hu=(e,t,r,n)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0),_u=(e,t,r,n,i)=>t+r+n+i+(e/2**32|0)|0,zu=(e,t,r,n,i)=>(e>>>0)+(t>>>0)+(r>>>0)+(n>>>0)+(i>>>0),Gu=(e,t,r,n,i,s)=>t+r+n+i+s+(e/2**32|0)|0,qu=/* @__PURE__ */Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),ju=/* @__PURE__ */new Uint32Array(64);class Vu extends vu{constructor(e=32){super(64,e,8,!1),this.A=0|Ku[0],this.B=0|Ku[1],this.C=0|Ku[2],this.D=0|Ku[3],this.E=0|Ku[4],this.F=0|Ku[5],this.G=0|Ku[6],this.H=0|Ku[7]}get(){const{A:e,B:t,C:r,D:n,E:i,F:s,G:a,H:o}=this;return[e,t,r,n,i,s,a,o]}set(e,t,r,n,i,s,a,o){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i,this.F=0|s,this.G=0|a,this.H=0|o}process(e,t){for(let r=0;r<16;r++,t+=4)ju[r]=e.getUint32(t,!1);for(let e=16;e<64;e++){const t=ju[e-15],r=ju[e-2],n=fc(t,7)^fc(t,18)^t>>>3,i=fc(r,17)^fc(r,19)^r>>>10;ju[e]=i+ju[e-7]+n+ju[e-16]|0}let{A:r,B:n,C:i,D:s,E:a,F:o,G:c,H:u}=this;for(let e=0;e<64;e++){const t=u+(fc(a,6)^fc(a,11)^fc(a,25))+ku(a,o,c)+qu[e]+ju[e]|0,h=(fc(r,2)^fc(r,13)^fc(r,22))+Eu(r,n,i)|0;u=c,c=o,o=a,a=s+t|0,s=i,i=n,n=r,r=t+h|0}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,o=o+this.F|0,c=c+this.G|0,u=u+this.H|0,this.set(r,n,i,s,a,o,c,u)}roundClean(){hc(ju)}destroy(){this.set(0,0,0,0,0,0,0,0),hc(this.buffer)}}class Yu extends Vu{constructor(){super(28),this.A=0|Su[0],this.B=0|Su[1],this.C=0|Su[2],this.D=0|Su[3],this.E=0|Su[4],this.F=0|Su[5],this.G=0|Su[6],this.H=0|Su[7]}}const Zu=/* @__PURE__ */(()=>Du(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((e=>BigInt(e)))))(),Ju=/* @__PURE__ */(()=>Zu[0])(),Wu=/* @__PURE__ */(()=>Zu[1])(),Xu=/* @__PURE__ */new Uint32Array(80),$u=/* @__PURE__ */new Uint32Array(80);class eh extends vu{constructor(e=64){super(128,e,16,!1),this.Ah=0|Bu[0],this.Al=0|Bu[1],this.Bh=0|Bu[2],this.Bl=0|Bu[3],this.Ch=0|Bu[4],this.Cl=0|Bu[5],this.Dh=0|Bu[6],this.Dl=0|Bu[7],this.Eh=0|Bu[8],this.El=0|Bu[9],this.Fh=0|Bu[10],this.Fl=0|Bu[11],this.Gh=0|Bu[12],this.Gl=0|Bu[13],this.Hh=0|Bu[14],this.Hl=0|Bu[15]}get(){const{Ah:e,Al:t,Bh:r,Bl:n,Ch:i,Cl:s,Dh:a,Dl:o,Eh:c,El:u,Fh:h,Fl:l,Gh:f,Gl:y,Hh:d,Hl:p}=this;return[e,t,r,n,i,s,a,o,c,u,h,l,f,y,d,p]}set(e,t,r,n,i,s,a,o,c,u,h,l,f,y,d,p){this.Ah=0|e,this.Al=0|t,this.Bh=0|r,this.Bl=0|n,this.Ch=0|i,this.Cl=0|s,this.Dh=0|a,this.Dl=0|o,this.Eh=0|c,this.El=0|u,this.Fh=0|h,this.Fl=0|l,this.Gh=0|f,this.Gl=0|y,this.Hh=0|d,this.Hl=0|p}process(e,t){for(let r=0;r<16;r++,t+=4)Xu[r]=e.getUint32(t),$u[r]=e.getUint32(t+=4);for(let e=16;e<80;e++){const t=0|Xu[e-15],r=0|$u[e-15],n=Mu(t,r,1)^Mu(t,r,8)^xu(t,0,7),i=Lu(t,r,1)^Lu(t,r,8)^Qu(t,r,7),s=0|Xu[e-2],a=0|$u[e-2],o=Mu(s,a,19)^Tu(s,a,61)^xu(s,0,6),c=Lu(s,a,19)^Ru(s,a,61)^Qu(s,a,6),u=Hu(i,c,$u[e-7],$u[e-16]),h=_u(u,n,o,Xu[e-7],Xu[e-16]);Xu[e]=0|h,$u[e]=0|u}let{Ah:r,Al:n,Bh:i,Bl:s,Ch:a,Cl:o,Dh:c,Dl:u,Eh:h,El:l,Fh:f,Fl:y,Gh:d,Gl:p,Hh:g,Hl:w}=this;for(let e=0;e<80;e++){const t=Mu(h,l,14)^Mu(h,l,18)^Tu(h,l,41),A=Lu(h,l,14)^Lu(h,l,18)^Ru(h,l,41),m=h&f^~h&d,b=zu(w,A,l&y^~l&p,Wu[e],$u[e]),k=Gu(b,g,t,m,Ju[e],Xu[e]),E=0|b,v=Mu(r,n,28)^Tu(r,n,34)^Tu(r,n,39),K=Lu(r,n,28)^Ru(r,n,34)^Ru(r,n,39),S=r&i^r&a^i&a,I=n&s^n&o^s&o;g=0|d,w=0|p,d=0|f,p=0|y,f=0|h,y=0|l,({h,l}=Fu(0|c,0|u,0|k,0|E)),c=0|a,u=0|o,a=0|i,o=0|s,i=0|r,s=0|n;const B=Nu(E,K,I);r=Ou(B,k,v,S),n=0|B}({h:r,l:n}=Fu(0|this.Ah,0|this.Al,0|r,0|n)),({h:i,l:s}=Fu(0|this.Bh,0|this.Bl,0|i,0|s)),({h:a,l:o}=Fu(0|this.Ch,0|this.Cl,0|a,0|o)),({h:c,l:u}=Fu(0|this.Dh,0|this.Dl,0|c,0|u)),({h,l}=Fu(0|this.Eh,0|this.El,0|h,0|l)),({h:f,l:y}=Fu(0|this.Fh,0|this.Fl,0|f,0|y)),({h:d,l:p}=Fu(0|this.Gh,0|this.Gl,0|d,0|p)),({h:g,l:w}=Fu(0|this.Hh,0|this.Hl,0|g,0|w)),this.set(r,n,i,s,a,o,c,u,h,l,f,y,d,p,g,w)}roundClean(){hc(Xu,$u)}destroy(){hc(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}class th extends eh{constructor(){super(48),this.Ah=0|Iu[0],this.Al=0|Iu[1],this.Bh=0|Iu[2],this.Bl=0|Iu[3],this.Ch=0|Iu[4],this.Cl=0|Iu[5],this.Dh=0|Iu[6],this.Dl=0|Iu[7],this.Eh=0|Iu[8],this.El=0|Iu[9],this.Fh=0|Iu[10],this.Fl=0|Iu[11],this.Gh=0|Iu[12],this.Gl=0|Iu[13],this.Hh=0|Iu[14],this.Hl=0|Iu[15]}}const rh=/* @__PURE__ */Uc((()=>new Vu)),nh=/* @__PURE__ */Uc((()=>new Yu)),ih=/* @__PURE__ */Uc((()=>new eh)),sh=/* @__PURE__ */Uc((()=>new th));class ah extends Cc{constructor(e,t){super(),this.finished=!1,this.destroyed=!1,oc(e);const r=Ic(t);if(this.iHash=e.create(),"function"!=typeof this.iHash.update)throw Error("Expected instance of class which extends utils.Hash");this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;const n=this.blockLen,i=new Uint8Array(n);i.set(r.length>n?e.create().update(r).digest():r);for(let e=0;e<i.length;e++)i[e]^=54;this.iHash.update(i),this.oHash=e.create();for(let e=0;e<i.length;e++)i[e]^=106;this.oHash.update(i),hc(i)}update(e){return cc(this),this.iHash.update(e),this}digestInto(e){cc(this),ac(e,this.outputLen),this.finished=!0,this.iHash.digestInto(e),this.oHash.update(e),this.oHash.digestInto(e),this.destroy()}digest(){const e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||(e=Object.create(Object.getPrototypeOf(this),{}));const{oHash:t,iHash:r,finished:n,destroyed:i,blockLen:s,outputLen:a}=this;return e.finished=n,e.destroyed=i,e.blockLen=s,e.outputLen=a,e.oHash=t._cloneInto(e.oHash),e.iHash=r._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}}const oh=(e,t,r)=>new ah(e,t).update(r).digest();oh.create=(e,t)=>new ah(e,t)
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */;const ch=BigInt(0),uh=BigInt(1);function hh(e,t){const r=t.negate();return e?r:t}function lh(e,t){const r=pu(e.Fp,t.map((e=>e.Z)));return t.map(((t,n)=>e.fromAffine(t.toAffine(r[n]))))}function fh(e,t){if(!Number.isSafeInteger(e)||e<=0||e>t)throw Error("invalid window size, expected [1.."+t+"], got W="+e)}function yh(e,t){fh(e,t);const r=2**e;return{windows:Math.ceil(t/e)+1,windowSize:2**(e-1),mask:Vc(e),maxNumber:r,shiftBy:BigInt(e)}}function dh(e,t,r){const{windowSize:n,mask:i,maxNumber:s,shiftBy:a}=r;let o=Number(e&i),c=e>>a;o>n&&(o-=s,c+=uh);const u=t*n;return{nextN:c,offset:u+Math.abs(o)-1,isZero:0===o,isNeg:o<0,isNegF:t%2!=0,offsetF:u}}const ph=new WeakMap,gh=new WeakMap;function wh(e){return gh.get(e)||1}function Ah(e){if(e!==ch)throw Error("invalid wNAF")}class mh{constructor(e,t){this.BASE=e.BASE,this.ZERO=e.ZERO,this.Fn=e.Fn,this.bits=t}_unsafeLadder(e,t,r=this.ZERO){let n=e;for(;t>ch;)t&uh&&(r=r.add(n)),n=n.double(),t>>=uh;return r}precomputeWindow(e,t){const{windows:r,windowSize:n}=yh(t,this.bits),i=[];let s=e,a=s;for(let e=0;e<r;e++){a=s,i.push(a);for(let e=1;e<n;e++)a=a.add(s),i.push(a);s=a.double()}return i}wNAF(e,t,r){if(!this.Fn.isValid(r))throw Error("invalid scalar");let n=this.ZERO,i=this.BASE;const s=yh(e,this.bits);for(let e=0;e<s.windows;e++){const{nextN:a,offset:o,isZero:c,isNeg:u,isNegF:h,offsetF:l}=dh(r,e,s);r=a,c?i=i.add(hh(h,t[l])):n=n.add(hh(u,t[o]))}return Ah(r),{p:n,f:i}}wNAFUnsafe(e,t,r,n=this.ZERO){const i=yh(e,this.bits);for(let e=0;e<i.windows&&r!==ch;e++){const{nextN:s,offset:a,isZero:o,isNeg:c}=dh(r,e,i);if(r=s,!o){const e=t[a];n=n.add(c?e.negate():e)}}return Ah(r),n}getPrecomputes(e,t,r){let n=ph.get(t);return n||(n=this.precomputeWindow(t,e),1!==e&&("function"==typeof r&&(n=r(n)),ph.set(t,n))),n}cached(e,t,r){const n=wh(e);return this.wNAF(n,this.getPrecomputes(n,e,r),t)}unsafe(e,t,r,n){const i=wh(e);return 1===i?this._unsafeLadder(e,t,n):this.wNAFUnsafe(i,this.getPrecomputes(i,e,r),t,n)}createCache(e,t){fh(t,this.bits),gh.set(e,t),ph.delete(e)}hasCache(e){return 1!==wh(e)}}function bh(e,t,r,n){!function(e,t){if(!Array.isArray(e))throw Error("array expected");e.forEach(((e,r)=>{if(!(e instanceof t))throw Error("invalid point at index "+r)}))}(r,e),function(e,t){if(!Array.isArray(e))throw Error("array of scalars expected");e.forEach(((e,r)=>{if(!t.isValid(e))throw Error("invalid scalar at index "+r)}))}(n,t);const i=r.length,s=n.length;if(i!==s)throw Error("arrays of points and scalars must have equal length");const a=e.ZERO,o=jc(BigInt(i));let c=1;o>12?c=o-3:o>4?c=o-2:o>0&&(c=2);const u=Vc(c),h=Array(Number(u)+1).fill(a);let l=a;for(let e=Math.floor((t.BITS-1)/c)*c;e>=0;e-=c){h.fill(a);for(let t=0;t<s;t++){const i=n[t],s=Number(i>>BigInt(e)&u);h[s]=h[s].add(r[t])}let t=a;for(let e=h.length-1,r=a;e>0;e--)r=r.add(h[e]),t=t.add(r);if(l=l.add(t),0!==e)for(let e=0;e<c;e++)l=l.double()}return l}function kh(e,t,r){if(t){if(t.ORDER!==e)throw Error("Field.ORDER must match order: Fp == p, Fn == n");return function(e){Yc(e,du.reduce(((e,t)=>(e[t]="function",e)),{ORDER:"bigint",MASK:"bigint",BYTES:"number",BITS:"number"}))}(t),t}return Au(e,{isLE:r})}function Eh(e,t,r={},n){if(void 0===n&&(n="edwards"===e),!t||"object"!=typeof t)throw Error(`expected valid ${e} CURVE object`);for(const e of["p","n","h"]){const r=t[e];if(!("bigint"==typeof r&&r>ch))throw Error(`CURVE.${e} must be positive bigint`)}const i=kh(t.p,r.Fp,n),s=kh(t.n,r.Fn,n),a=["Gx","Gy","a","weierstrass"===e?"b":"d"];for(const e of a)if(!i.isValid(t[e]))throw Error(`CURVE.${e} must be valid field element of CURVE.Fp`);return{CURVE:t=Object.freeze(Object.assign({},t)),Fp:i,Fn:s}}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const vh=(e,t)=>(e+(e>=0?t:-t)/Uh)/t;function Kh(e){if(!["compact","recovered","der"].includes(e))throw Error('Signature format must be "compact", "recovered", or "der"');return e}function Sh(e,t){const r={};for(let n of Object.keys(t))r[n]=void 0===e[n]?t[n]:e[n];return Mc(r.lowS,"lowS"),Mc(r.prehash,"prehash"),void 0!==r.format&&Kh(r.format),r}const Ih={Err:class extends Error{constructor(e=""){super(e)}},_tlv:{encode:(e,t)=>{const{Err:r}=Ih;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(1&t.length)throw new r("tlv.encode: unpadded data");const n=t.length/2,i=Tc(n);if(i.length/2&128)throw new r("tlv.encode: long form length too big");const s=n>127?Tc(i.length/2|128):"";return Tc(e)+s+i+t},decode(e,t){const{Err:r}=Ih;let n=0;if(e<0||e>256)throw new r("tlv.encode: wrong tag");if(t.length<2||t[n++]!==e)throw new r("tlv.decode: wrong tlv");const i=t[n++];let s=0;if(!!(128&i)){const e=127&i;if(!e)throw new r("tlv.decode(long): indefinite length not supported");if(e>4)throw new r("tlv.decode(long): byte length is too big");const a=t.subarray(n,n+e);if(a.length!==e)throw new r("tlv.decode: length bytes not complete");if(0===a[0])throw new r("tlv.decode(long): zero leftmost byte");for(const e of a)s=s<<8|e;if(n+=e,s<128)throw new r("tlv.decode(long): not minimal encoding")}else s=i;const a=t.subarray(n,n+s);if(a.length!==s)throw new r("tlv.decode: wrong value length");return{v:a,l:t.subarray(n+s)}}},_int:{encode(e){const{Err:t}=Ih;if(e<Bh)throw new t("integer: negative integers are not allowed");let r=Tc(e);if(8&Number.parseInt(r[0],16)&&(r="00"+r),1&r.length)throw new t("unexpected DER parsing assertion: unpadded hex");return r},decode(e){const{Err:t}=Ih;if(128&e[0])throw new t("invalid signature integer: negative");if(0===e[0]&&!(128&e[1]))throw new t("invalid signature integer: unnecessary leading zero");return Fc(e)}},toSig(e){const{Err:t,_int:r,_tlv:n}=Ih,i=_c("signature",e),{v:s,l:a}=n.decode(48,i);if(a.length)throw new t("invalid signature: left bytes after parsing");const{v:o,l:c}=n.decode(2,s),{v:u,l:h}=n.decode(2,c);if(h.length)throw new t("invalid signature: left bytes after parsing");return{r:r.decode(o),s:r.decode(u)}},hexFromSig(e){const{_tlv:t,_int:r}=Ih,n=t.encode(2,r.encode(e.r))+t.encode(2,r.encode(e.s));return t.encode(48,n)}},Bh=BigInt(0),Ch=BigInt(1),Uh=BigInt(2),Ph=BigInt(3),Dh=BigInt(4);function xh(e,t){const{BYTES:r}=e;let n;if("bigint"==typeof t)n=t;else{let i=_c("private key",t);try{n=e.fromBytes(i)}catch(e){throw Error(`invalid private key: expected ui8a of size ${r}, got ${typeof t}`)}}if(!e.isValidNot0(n))throw Error("invalid private key: out of range [1..N-1]");return n}function Qh(e,t={}){const r=Eh("weierstrass",e,t),{Fp:n,Fn:i}=r;let s=r.CURVE;const{h:a,n:o}=s;Yc(t,{},{allowInfinityPoint:"boolean",clearCofactor:"function",isTorsionFree:"function",fromBytes:"function",toBytes:"function",endo:"object",wrapPrivateKey:"boolean"});const{endo:c}=t;if(c&&(!n.is0(s.a)||"bigint"!=typeof c.beta||!Array.isArray(c.basises)))throw Error('invalid endo: expected "beta": bigint and "basises": array');const u=Lh(n,i);function h(){if(!n.isOdd)throw Error("compression is not supported: Field does not have .isOdd()")}const l=t.toBytes||function(e,t,r){const{x:i,y:s}=t.toAffine(),a=n.toBytes(i);if(Mc(r,"isCompressed"),r){h();return Bc(Mh(!n.isOdd(s)),a)}return Bc(Uint8Array.of(4),a,n.toBytes(s))},f=t.fromBytes||function(e){Lc(e,void 0,"Point");const{publicKey:t,publicKeyUncompressed:r}=u,i=e.length,s=e[0],a=e.subarray(1);if(i!==t||2!==s&&3!==s){if(i===r&&4===s){const e=n.BYTES,t=n.fromBytes(a.subarray(0,e)),r=n.fromBytes(a.subarray(e,2*e));if(!d(t,r))throw Error("bad point: is not on curve");return{x:t,y:r}}throw Error(`bad point: got length ${i}, expected compressed=${t} or uncompressed=${r}`)}{const e=n.fromBytes(a);if(!n.isValid(e))throw Error("bad point: is not on curve, wrong x");const t=y(e);let r;try{r=n.sqrt(t)}catch(e){const t=e instanceof Error?": "+e.message:"";throw Error("bad point: is not on curve, sqrt error"+t)}h();return!(1&~s)!==n.isOdd(r)&&(r=n.neg(r)),{x:e,y:r}}};function y(e){const t=n.sqr(e),r=n.mul(t,e);return n.add(n.add(r,n.mul(e,s.a)),s.b)}function d(e,t){const r=n.sqr(t),i=y(e);return n.eql(r,i)}if(!d(s.Gx,s.Gy))throw Error("bad curve params: generator point");const p=n.mul(n.pow(s.a,Ph),Dh),g=n.mul(n.sqr(s.b),BigInt(27));if(n.is0(n.add(p,g)))throw Error("bad curve params: a or b");function w(e,t,r=!1){if(!n.isValid(t)||r&&n.is0(t))throw Error("bad point coordinate "+e);return t}function A(e){if(!(e instanceof v))throw Error("ProjectivePoint expected")}function m(e){if(!c||!c.basises)throw Error("no endo");return function(e,t,r){const[[n,i],[s,a]]=t,o=vh(a*e,r),c=vh(-i*e,r);let u=e-o*n-c*s,h=-o*i-c*a;const l=u<Bh,f=h<Bh;l&&(u=-u),f&&(h=-h);const y=Vc(Math.ceil(jc(r)/2))+Ch;if(u<Bh||u>=y||h<Bh||h>=y)throw Error("splitScalar (endomorphism): failed, k="+e);return{k1neg:l,k1:u,k2neg:f,k2:h}}(e,c.basises,i.ORDER)}const b=Zc(((e,t)=>{const{X:r,Y:i,Z:s}=e;if(n.eql(s,n.ONE))return{x:r,y:i};const a=e.is0();null==t&&(t=a?n.ONE:n.inv(s));const o=n.mul(r,t),c=n.mul(i,t),u=n.mul(s,t);if(a)return{x:n.ZERO,y:n.ZERO};if(!n.eql(u,n.ONE))throw Error("invZ was invalid");return{x:o,y:c}})),k=Zc((e=>{if(e.is0()){if(t.allowInfinityPoint&&!n.is0(e.Y))return;throw Error("bad point: ZERO")}const{x:r,y:i}=e.toAffine();if(!n.isValid(r)||!n.isValid(i))throw Error("bad point: x or y not field elements");if(!d(r,i))throw Error("bad point: equation left != right");if(!e.isTorsionFree())throw Error("bad point: not in prime-order subgroup");return!0}));function E(e,t,r,i,s){return r=new v(n.mul(r.X,e),r.Y,r.Z),t=hh(i,t),r=hh(s,r),t.add(r)}class v{constructor(e,t,r){this.X=w("x",e),this.Y=w("y",t,!0),this.Z=w("z",r),Object.freeze(this)}static CURVE(){return s}static fromAffine(e){const{x:t,y:r}=e||{};if(!e||!n.isValid(t)||!n.isValid(r))throw Error("invalid affine point");if(e instanceof v)throw Error("projective point not allowed");return n.is0(t)&&n.is0(r)?v.ZERO:new v(t,r,n.ONE)}static fromBytes(e){const t=v.fromAffine(f(Lc(e,void 0,"point")));return t.assertValidity(),t}static fromHex(e){return v.fromBytes(_c("pointHex",e))}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(e=8,t=!0){return S.createCache(this,e),t||this.multiply(Ph),this}assertValidity(){k(this)}hasEvenY(){const{y:e}=this.toAffine();if(!n.isOdd)throw Error("Field doesn't support isOdd");return!n.isOdd(e)}equals(e){A(e);const{X:t,Y:r,Z:i}=this,{X:s,Y:a,Z:o}=e,c=n.eql(n.mul(t,o),n.mul(s,i)),u=n.eql(n.mul(r,o),n.mul(a,i));return c&&u}negate(){return new v(this.X,n.neg(this.Y),this.Z)}double(){const{a:e,b:t}=s,r=n.mul(t,Ph),{X:i,Y:a,Z:o}=this;let c=n.ZERO,u=n.ZERO,h=n.ZERO,l=n.mul(i,i),f=n.mul(a,a),y=n.mul(o,o),d=n.mul(i,a);return d=n.add(d,d),h=n.mul(i,o),h=n.add(h,h),c=n.mul(e,h),u=n.mul(r,y),u=n.add(c,u),c=n.sub(f,u),u=n.add(f,u),u=n.mul(c,u),c=n.mul(d,c),h=n.mul(r,h),y=n.mul(e,y),d=n.sub(l,y),d=n.mul(e,d),d=n.add(d,h),h=n.add(l,l),l=n.add(h,l),l=n.add(l,y),l=n.mul(l,d),u=n.add(u,l),y=n.mul(a,o),y=n.add(y,y),l=n.mul(y,d),c=n.sub(c,l),h=n.mul(y,f),h=n.add(h,h),h=n.add(h,h),new v(c,u,h)}add(e){A(e);const{X:t,Y:r,Z:i}=this,{X:a,Y:o,Z:c}=e;let u=n.ZERO,h=n.ZERO,l=n.ZERO;const f=s.a,y=n.mul(s.b,Ph);let d=n.mul(t,a),p=n.mul(r,o),g=n.mul(i,c),w=n.add(t,r),m=n.add(a,o);w=n.mul(w,m),m=n.add(d,p),w=n.sub(w,m),m=n.add(t,i);let b=n.add(a,c);return m=n.mul(m,b),b=n.add(d,g),m=n.sub(m,b),b=n.add(r,i),u=n.add(o,c),b=n.mul(b,u),u=n.add(p,g),b=n.sub(b,u),l=n.mul(f,m),u=n.mul(y,g),l=n.add(u,l),u=n.sub(p,l),l=n.add(p,l),h=n.mul(u,l),p=n.add(d,d),p=n.add(p,d),g=n.mul(f,g),m=n.mul(y,m),p=n.add(p,g),g=n.sub(d,g),g=n.mul(f,g),m=n.add(m,g),d=n.mul(p,m),h=n.add(h,d),d=n.mul(b,m),u=n.mul(w,u),u=n.sub(u,d),d=n.mul(w,p),l=n.mul(b,l),l=n.add(l,d),new v(u,h,l)}subtract(e){return this.add(e.negate())}is0(){return this.equals(v.ZERO)}multiply(e){const{endo:r}=t;if(!i.isValidNot0(e))throw Error("invalid scalar: out of range");let n,s;const a=e=>S.cached(this,e,(e=>lh(v,e)));if(r){const{k1neg:t,k1:i,k2neg:o,k2:c}=m(e),{p:u,f:h}=a(i),{p:l,f}=a(c);s=h.add(f),n=E(r.beta,u,l,t,o)}else{const{p:t,f:r}=a(e);n=t,s=r}return lh(v,[n,s])[0]}multiplyUnsafe(e){const{endo:r}=t,n=this;if(!i.isValid(e))throw Error("invalid scalar: out of range");if(e===Bh||n.is0())return v.ZERO;if(e===Ch)return n;if(S.hasCache(this))return this.multiply(e);if(r){const{k1neg:t,k1:i,k2neg:s,k2:a}=m(e),{p1:o,p2:c}=function(e,t,r,n){let i=t,s=e.ZERO,a=e.ZERO;for(;r>ch||n>ch;)r&uh&&(s=s.add(i)),n&uh&&(a=a.add(i)),i=i.double(),r>>=uh,n>>=uh;return{p1:s,p2:a}}(v,n,i,a);return E(r.beta,o,c,t,s)}return S.unsafe(n,e)}multiplyAndAddUnsafe(e,t,r){const n=this.multiplyUnsafe(t).add(e.multiplyUnsafe(r));return n.is0()?void 0:n}toAffine(e){return b(this,e)}isTorsionFree(){const{isTorsionFree:e}=t;return a===Ch||(e?e(v,this):S.unsafe(this,o).is0())}clearCofactor(){const{clearCofactor:e}=t;return a===Ch?this:e?e(v,this):this.multiplyUnsafe(a)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}toBytes(e=!0){return Mc(e,"isCompressed"),this.assertValidity(),l(v,this,e)}toHex(e=!0){return wc(this.toBytes(e))}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get px(){return this.X}get py(){return this.X}get pz(){return this.Z}toRawBytes(e=!0){return this.toBytes(e)}_setWindowSize(e){this.precompute(e)}static normalizeZ(e){return lh(v,e)}static msm(e,t){return bh(v,i,e,t)}static fromPrivateKey(e){return v.BASE.multiply(xh(i,e))}}v.BASE=new v(s.Gx,s.Gy,n.ONE),v.ZERO=new v(n.ZERO,n.ONE,n.ZERO),v.Fp=n,v.Fn=i;const K=i.BITS,S=new mh(v,t.endo?Math.ceil(K/2):K);return v.BASE.precompute(8),v}function Mh(e){return Uint8Array.of(e?2:3)}function Lh(e,t){return{secretKey:t.BYTES,publicKey:1+e.BYTES,publicKeyUncompressed:1+2*e.BYTES,publicKeyHasPrefix:!0,signature:2*t.BYTES}}function Th(e,t={}){const{Fn:r}=e,n=t.randomBytes||Dc,i=Object.assign(Lh(e.Fp,r),{seed:bu(r.ORDER)});function s(e){try{return!!xh(r,e)}catch(e){return!1}}function a(e=n(i.seed)){return function(e,t,r=!1){const n=e.length,i=mu(t),s=bu(t);if(n<16||n<s||n>1024)throw Error("expected "+s+"-1024 bytes of input, got "+n);const a=au(r?Nc(e):Fc(e),t-Wc)+Wc;return r?Hc(a,i):Oc(a,i)}(Lc(e,i.seed,"seed"),r.ORDER)}function o(t,n=!0){return e.BASE.multiply(xh(r,t)).toBytes(n)}function c(t){if("bigint"==typeof t)return!1;if(t instanceof e)return!0;const{secretKey:n,publicKey:s,publicKeyUncompressed:a}=i;if(r.allowedLengths||n===s)return;const o=_c("key",t).length;return o===s||o===a}const u={isValidSecretKey:s,isValidPublicKey:function(t,r){const{publicKey:n,publicKeyUncompressed:s}=i;try{const i=t.length;return(!0!==r||i===n)&&((!1!==r||i===s)&&!!e.fromBytes(t))}catch(e){return!1}},randomSecretKey:a,isValidPrivateKey:s,randomPrivateKey:a,normPrivateKeyToScalar:e=>xh(r,e),precompute:(t=8,r=e.BASE)=>r.precompute(t,!1)};return Object.freeze({getPublicKey:o,getSharedSecret:function(t,n,i=!0){if(!0===c(t))throw Error("first arg must be private key");if(!1===c(n))throw Error("second arg must be public key");const s=xh(r,t);return e.fromHex(n).multiply(s).toBytes(i)},keygen:function(e){const t=a(e);return{secretKey:t,publicKey:o(t)}},Point:e,utils:u,lengths:i})}function Rh(e,t,r={}){oc(t),Yc(r,{},{hmac:"function",lowS:"boolean",randomBytes:"function",bits2int:"function",bits2int_modN:"function"});const n=r.randomBytes||Dc,i=r.hmac||((e,...r)=>oh(t,e,Bc(...r))),{Fp:s,Fn:a}=e,{ORDER:o,BITS:c}=a,{keygen:u,getPublicKey:h,getSharedSecret:l,utils:f,lengths:y}=Th(e,r),d={prehash:!1,lowS:"boolean"==typeof r.lowS&&r.lowS,format:void 0,extraEntropy:!1},p="compact";function g(e){return e>o>>Ch}function w(e,t){if(!a.isValidNot0(t))throw Error(`invalid signature ${e}: out of range 1..Point.Fn.ORDER`);return t}class A{constructor(e,t,r){this.r=w("r",e),this.s=w("s",t),null!=r&&(this.recovery=r),Object.freeze(this)}static fromBytes(e,t=p){let r;if(function(e,t){Kh(t);const r=y.signature;Lc(e,"compact"===t?r:"recovered"===t?r+1:void 0,t+" signature")}(e,t),"der"===t){const{r:t,s:r}=Ih.toSig(Lc(e));return new A(t,r)}"recovered"===t&&(r=e[0],t="compact",e=e.subarray(1));const n=a.BYTES,i=e.subarray(0,n),s=e.subarray(n,2*n);return new A(a.fromBytes(i),a.fromBytes(s),r)}static fromHex(e,t){return this.fromBytes(Sc(e),t)}addRecoveryBit(e){return new A(this.r,this.s,e)}recoverPublicKey(t){const r=s.ORDER,{r:n,s:i,recovery:c}=this;if(null==c||![0,1,2,3].includes(c))throw Error("recovery id invalid");if(o*Uh<r&&c>1)throw Error("recovery id is ambiguous for h>1 curve");const u=2===c||3===c?n+o:n;if(!s.isValid(u))throw Error("recovery id 2 or 3 invalid");const h=s.toBytes(u),l=e.fromBytes(Bc(Mh(!(1&c)),h)),f=a.inv(u),y=b(_c("msgHash",t)),d=a.create(-y*f),p=a.create(i*f),g=e.BASE.multiplyUnsafe(d).add(l.multiplyUnsafe(p));if(g.is0())throw Error("point at infinify");return g.assertValidity(),g}hasHighS(){return g(this.s)}toBytes(e=p){if(Kh(e),"der"===e)return Sc(Ih.hexFromSig(this));const t=a.toBytes(this.r),r=a.toBytes(this.s);if("recovered"===e){if(null==this.recovery)throw Error("recovery bit must be present");return Bc(Uint8Array.of(this.recovery),t,r)}return Bc(t,r)}toHex(e){return wc(this.toBytes(e))}assertValidity(){}static fromCompact(e){return A.fromBytes(_c("sig",e),"compact")}static fromDER(e){return A.fromBytes(_c("sig",e),"der")}normalizeS(){return this.hasHighS()?new A(this.r,a.neg(this.s),this.recovery):this}toDERRawBytes(){return this.toBytes("der")}toDERHex(){return wc(this.toBytes("der"))}toCompactRawBytes(){return this.toBytes("compact")}toCompactHex(){return wc(this.toBytes("compact"))}}const m=r.bits2int||function(e){if(e.length>8192)throw Error("input is too large");const t=Fc(e),r=8*e.length-c;return r>0?t>>BigInt(r):t},b=r.bits2int_modN||function(e){return a.create(m(e))},k=Vc(c);function E(e){return qc("num < 2^"+c,e,Bh,k),a.toBytes(e)}function v(e,r){return Lc(e,void 0,"message"),r?Lc(t(e),void 0,"prehashed message"):e}return Object.freeze({keygen:u,getPublicKey:h,getSharedSecret:l,utils:f,lengths:y,Point:e,sign:function(r,s,o={}){r=_c("message",r);const{seed:c,k2sig:u}=function(t,r,i){if(["recovered","canonical"].some((e=>e in i)))throw Error("sign() legacy options not supported");const{lowS:s,prehash:o,extraEntropy:c}=Sh(i,d);t=v(t,o);const u=b(t),h=xh(a,r),l=[E(h),E(u)];if(null!=c&&!1!==c){const e=!0===c?n(y.secretKey):c;l.push(_c("extraEntropy",e))}const f=Bc(...l),p=u;return{seed:f,k2sig:function(t){const r=m(t);if(!a.isValidNot0(r))return;const n=a.inv(r),i=e.BASE.multiply(r).toAffine(),o=a.create(i.x);if(o===Bh)return;const c=a.create(n*a.create(p+o*h));if(c===Bh)return;let u=(i.x===o?0:2)|Number(i.y&Ch),l=c;return s&&g(c)&&(l=a.neg(c),u^=1),new A(o,l,u)}}}(r,s,o),h=function(e,t,r){if("number"!=typeof e||e<2)throw Error("hashLen must be a number");if("number"!=typeof t||t<2)throw Error("qByteLen must be a number");if("function"!=typeof r)throw Error("hmacFn must be a function");const n=e=>new Uint8Array(e),i=e=>Uint8Array.of(e);let s=n(e),a=n(e),o=0;const c=()=>{s.fill(1),a.fill(0),o=0},u=(...e)=>r(a,s,...e),h=(e=n(0))=>{a=u(i(0),e),s=u(),0!==e.length&&(a=u(i(1),e),s=u())},l=()=>{if(o++>=1e3)throw Error("drbg: tried 1000 values");let e=0;const r=[];for(;e<t;){s=u();const t=s.slice();r.push(t),e+=s.length}return Bc(...r)};return(e,t)=>{let r;for(c(),h(e);!(r=t(l()));)h();return c(),r}}(t.outputLen,a.BYTES,i);return h(c,u)},verify:function(t,r,n,i={}){const{lowS:s,prehash:o,format:c}=Sh(i,d);if(n=_c("publicKey",n),r=v(_c("message",r),o),"strict"in i)throw Error("options.strict was renamed to lowS");const u=void 0===c?function(e){let t;const r="string"==typeof e||ic(e),n=!r&&null!==e&&"object"==typeof e&&"bigint"==typeof e.r&&"bigint"==typeof e.s;if(!r&&!n)throw Error("invalid signature, expected Uint8Array, hex string or Signature instance");if(n)t=new A(e.r,e.s);else if(r){try{t=A.fromBytes(_c("sig",e),"der")}catch(e){if(!(e instanceof Ih.Err))throw e}if(!t)try{t=A.fromBytes(_c("sig",e),"compact")}catch(e){return!1}}return t||!1}(t):A.fromBytes(_c("sig",t),c);if(!1===u)return!1;try{const t=e.fromBytes(n);if(s&&u.hasHighS())return!1;const{r:i,s:o}=u,c=b(r),h=a.inv(o),l=a.create(c*h),f=a.create(i*h),y=e.BASE.multiplyUnsafe(l).add(t.multiplyUnsafe(f));if(y.is0())return!1;return a.create(y.x)===i}catch(e){return!1}},recoverPublicKey:function(e,t,r={}){const{prehash:n}=Sh(r,d);return t=v(t,n),A.fromBytes(e,"recovered").recoverPublicKey(t).toBytes()},Signature:A,hash:t})}function Fh(e){const{CURVE:t,curveOpts:r}=function(e){const t={a:e.a,b:e.b,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r=e.Fp;let n=e.allowedPrivateKeyLengths?Array.from(new Set(e.allowedPrivateKeyLengths.map((e=>Math.ceil(e/2))))):void 0;return{CURVE:t,curveOpts:{Fp:r,Fn:Au(t.n,{BITS:e.nBitLength,allowedLengths:n,modFromBytes:e.wrapPrivateKey}),allowInfinityPoint:e.allowInfinityPoint,endo:e.endo,isTorsionFree:e.isTorsionFree,clearCofactor:e.clearCofactor,fromBytes:e.fromBytes,toBytes:e.toBytes}}}(e),n={hmac:e.hmac,randomBytes:e.randomBytes,lowS:e.lowS,bits2int:e.bits2int,bits2int_modN:e.bits2int_modN};return{CURVE:t,curveOpts:r,hash:e.hash,ecdsaOpts:n}}function Nh(e){const{CURVE:t,curveOpts:r,hash:n,ecdsaOpts:i}=Fh(e);return function(e,t){const r=t.Point;return Object.assign({},t,{ProjectivePoint:r,CURVE:Object.assign({},e,wu(r.Fn.ORDER,r.Fn.BITS))})}(e,Rh(Qh(t,r),n,i))}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */function Oh(e,t){const r=t=>Nh({...e,hash:t});return{...r(t),create:r}}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Hh={p:BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff"),n:BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),h:BigInt(1),a:BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc"),b:BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b"),Gx:BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),Gy:BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5")},_h={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000ffffffff"),n:BigInt("0xffffffffffffffffffffffffffffffffffffffffffffffffc7634d81f4372ddf581a0db248b0a77aecec196accc52973"),h:BigInt(1),a:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffff0000000000000000fffffffc"),b:BigInt("0xb3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aef"),Gx:BigInt("0xaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab7"),Gy:BigInt("0x3617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5f")},zh={p:BigInt("0x1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),n:BigInt("0x01fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa51868783bf2f966b7fcc0148f709a5d03bb5c9b8899c47aebb6fb71e91386409"),h:BigInt(1),a:BigInt("0x1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffc"),b:BigInt("0x0051953eb9618e1c9a1f929a21a0b68540eea2da725b99b315f3b8b489918ef109e156193951ec7e937b1652c0bd3bb1bf073573df883d2c34f1ef451fd46b503f00"),Gx:BigInt("0x00c6858e06b70404e9cd9e3ecb662395b4429c648139053fb521f828af606b4d3dbaa14b5e77efe75928fe1dc127a2ffa8de3348b3c1856a429bf97e7e31c2e5bd66"),Gy:BigInt("0x011839296a789a3bc0045c8a5fb42c7d1bd998f54449579b446817afbd17273e662c97ee72995ef42640c550b9013fad0761353c7086a272c24088be94769fd16650")},Gh=Au(Hh.p),qh=Au(_h.p),jh=Au(zh.p),Vh=Oh({...Hh,Fp:Gh,lowS:!1},rh),Yh=Oh({..._h,Fp:qh,lowS:!1},sh),Zh=Oh({...zh,Fp:jh,lowS:!1,allowedPrivateKeyLengths:[130,131,132]},ih),Jh=BigInt(0),Wh=BigInt(1),Xh=BigInt(2),$h=BigInt(7),el=BigInt(256),tl=BigInt(113),rl=[],nl=[],il=[];for(let e=0,t=Wh,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],rl.push(2*(5*n+r)),nl.push((e+1)*(e+2)/2%64);let i=Jh;for(let e=0;e<7;e++)t=(t<<Wh^(t>>$h)*tl)%el,t&Xh&&(i^=Wh<<(Wh<</* @__PURE__ */BigInt(e))-Wh);il.push(i)}const sl=Du(il,!0),al=sl[0],ol=sl[1],cl=(e,t,r)=>r>32?((e,t,r)=>t<<r-32|e>>>64-r)(e,t,r):((e,t,r)=>e<<r|t>>>32-r)(e,t,r),ul=(e,t,r)=>r>32?((e,t,r)=>e<<r-32|t>>>64-r)(e,t,r):((e,t,r)=>t<<r|e>>>32-r)(e,t,r);let hl=class e extends Cc{constructor(e,t,r,n=!1,i=24){if(super(),this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,this.enableXOF=!1,this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=n,this.rounds=i,sc(r),!(0<e&&e<200))throw Error("only keccak-f1600 function is supported");var s;this.state=new Uint8Array(200),this.state32=(s=this.state,new Uint32Array(s.buffer,s.byteOffset,Math.floor(s.byteLength/4)))}clone(){return this._cloneInto()}keccak(){dc(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const n=(t+8)%10,i=(t+2)%10,s=r[i],a=r[i+1],o=cl(s,a,1)^r[n],c=ul(s,a,1)^r[n+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],i=e[3];for(let r=0;r<24;r++){const n=nl[r],s=cl(t,i,n),a=ul(t,i,n),o=rl[r];t=e[o],i=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let n=0;n<10;n++)r[n]=e[t+n];for(let n=0;n<10;n++)e[t+n]^=~r[(n+2)%10]&r[(n+4)%10]}e[0]^=al[n],e[1]^=ol[n]}hc(r)}(this.state32,this.rounds),dc(this.state32),this.posOut=0,this.pos=0}update(e){cc(this),ac(e=Ic(e));const{blockLen:t,state:r}=this,n=e.length;for(let i=0;i<n;){const s=Math.min(t-this.pos,n-i);for(let t=0;t<s;t++)r[this.pos++]^=e[i++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:n}=this;e[r]^=t,128&t&&r===n-1&&this.keccak(),e[n-1]^=128,this.keccak()}writeInto(e){cc(this,!1),ac(e),this.finish();const t=this.state,{blockLen:r}=this;for(let n=0,i=e.length;n<i;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,i-n);e.set(t.subarray(this.posOut,this.posOut+s),n),this.posOut+=s,n+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return sc(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(uc(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,hc(this.state)}_cloneInto(t){const{blockLen:r,suffix:n,outputLen:i,rounds:s,enableXOF:a}=this;return t||(t=new e(r,n,i,a,s)),t.state32.set(this.state32),t.pos=this.pos,t.posOut=this.posOut,t.finished=this.finished,t.rounds=s,t.suffix=n,t.outputLen=i,t.enableXOF=a,t.destroyed=this.destroyed,t}};const ll=(e,t,r)=>Uc((()=>new hl(t,e,r))),fl=/* @__PURE__ */(()=>ll(6,136,32))(),yl=/* @__PURE__ */(()=>ll(6,72,64))(),dl=(e,t,r)=>function(e){const t=(t,r)=>e(r).update(Ic(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((n={})=>new hl(t,e,void 0===n.dkLen?r:n.dkLen,!0))),pl=/* @__PURE__ */(()=>dl(31,136,32))(),gl=BigInt(0),wl=BigInt(1),Al=BigInt(2),ml=BigInt(8);function bl(e,t={}){const r=Eh("edwards",e,t,t.FpFnLE),{Fp:n,Fn:i}=r;let s=r.CURVE;const{h:a}=s;Yc(t,{},{uvRatio:"function"});const o=Al<<BigInt(8*i.BYTES)-wl,c=e=>n.create(e),u=t.uvRatio||((e,t)=>{try{return{isValid:!0,value:n.sqrt(n.div(e,t))}}catch(e){return{isValid:!1,value:gl}}});if(!function(e,t,r,n){const i=e.sqr(r),s=e.sqr(n),a=e.add(e.mul(t.a,i),s),o=e.add(e.ONE,e.mul(t.d,e.mul(i,s)));return e.eql(a,o)}(n,s,s.Gx,s.Gy))throw Error("bad curve params: generator point");function h(e,t,r=!1){return qc("coordinate "+e,t,r?wl:gl,o),t}function l(e){if(!(e instanceof d))throw Error("ExtendedPoint expected")}const f=Zc(((e,t)=>{const{X:r,Y:i,Z:s}=e,a=e.is0();null==t&&(t=a?ml:n.inv(s));const o=c(r*t),u=c(i*t),h=n.mul(s,t);if(a)return{x:gl,y:wl};if(h!==wl)throw Error("invZ was invalid");return{x:o,y:u}})),y=Zc((e=>{const{a:t,d:r}=s;if(e.is0())throw Error("bad point: ZERO");const{X:n,Y:i,Z:a,T:o}=e,u=c(n*n),h=c(i*i),l=c(a*a),f=c(l*l),y=c(u*t);if(c(l*c(y+h))!==c(f+c(r*c(u*h))))throw Error("bad point: equation left != right (1)");if(c(n*i)!==c(a*o))throw Error("bad point: equation left != right (2)");return!0}));class d{constructor(e,t,r,n){this.X=h("x",e),this.Y=h("y",t),this.Z=h("z",r,!0),this.T=h("t",n),Object.freeze(this)}static CURVE(){return s}static fromAffine(e){if(e instanceof d)throw Error("extended point not allowed");const{x:t,y:r}=e||{};return h("x",t),h("y",r),new d(t,r,wl,c(t*r))}static fromBytes(e,t=!1){const r=n.BYTES,{a:i,d:a}=s;e=zc(Lc(e,r,"point")),Mc(t,"zip215");const h=zc(e),l=e[r-1];h[r-1]=-129&l;const f=Nc(h),y=t?o:n.ORDER;qc("point.y",f,gl,y);const p=c(f*f),g=c(p-wl),w=c(a*p-i);let{isValid:A,value:m}=u(g,w);if(!A)throw Error("bad point: invalid y coordinate");const b=(m&wl)===wl,k=!!(128&l);if(!t&&m===gl&&k)throw Error("bad point: x=0 and x_0=1");return k!==b&&(m=c(-m)),d.fromAffine({x:m,y:f})}static fromHex(e,t=!1){return d.fromBytes(_c("point",e),t)}get x(){return this.toAffine().x}get y(){return this.toAffine().y}precompute(e=8,t=!0){return p.createCache(this,e),t||this.multiply(Al),this}assertValidity(){y(this)}equals(e){l(e);const{X:t,Y:r,Z:n}=this,{X:i,Y:s,Z:a}=e,o=c(t*a),u=c(i*n),h=c(r*a),f=c(s*n);return o===u&&h===f}is0(){return this.equals(d.ZERO)}negate(){return new d(c(-this.X),this.Y,this.Z,c(-this.T))}double(){const{a:e}=s,{X:t,Y:r,Z:n}=this,i=c(t*t),a=c(r*r),o=c(Al*c(n*n)),u=c(e*i),h=t+r,l=c(c(h*h)-i-a),f=u+a,y=f-o,p=u-a,g=c(l*y),w=c(f*p),A=c(l*p),m=c(y*f);return new d(g,w,m,A)}add(e){l(e);const{a:t,d:r}=s,{X:n,Y:i,Z:a,T:o}=this,{X:u,Y:h,Z:f,T:y}=e,p=c(n*u),g=c(i*h),w=c(o*r*y),A=c(a*f),m=c((n+i)*(u+h)-p-g),b=A-w,k=A+w,E=c(g-t*p),v=c(m*b),K=c(k*E),S=c(m*E),I=c(b*k);return new d(v,K,I,S)}subtract(e){return this.add(e.negate())}multiply(e){if(!i.isValidNot0(e))throw Error("invalid scalar: expected 1 <= sc < curve.n");const{p:t,f:r}=p.cached(this,e,(e=>lh(d,e)));return lh(d,[t,r])[0]}multiplyUnsafe(e,t=d.ZERO){if(!i.isValid(e))throw Error("invalid scalar: expected 0 <= sc < curve.n");return e===gl?d.ZERO:this.is0()||e===wl?this:p.unsafe(this,e,(e=>lh(d,e)),t)}isSmallOrder(){return this.multiplyUnsafe(a).is0()}isTorsionFree(){return p.unsafe(this,s.n).is0()}toAffine(e){return f(this,e)}clearCofactor(){return a===wl?this:this.multiplyUnsafe(a)}toBytes(){const{x:e,y:t}=this.toAffine(),r=n.toBytes(t);return r[r.length-1]|=e&wl?128:0,r}toHex(){return wc(this.toBytes())}toString(){return`<Point ${this.is0()?"ZERO":this.toHex()}>`}get ex(){return this.X}get ey(){return this.Y}get ez(){return this.Z}get et(){return this.T}static normalizeZ(e){return lh(d,e)}static msm(e,t){return bh(d,i,e,t)}_setWindowSize(e){this.precompute(e)}toRawBytes(){return this.toBytes()}}d.BASE=new d(s.Gx,s.Gy,wl,c(s.Gx*s.Gy)),d.ZERO=new d(gl,wl,wl,gl),d.Fp=n,d.Fn=i;const p=new mh(d,i.BITS);return d.BASE.precompute(8),d}function kl(e,t,r={}){if("function"!=typeof t)throw Error('"hash" function param is required');Yc(r,{},{adjustScalarBytes:"function",randomBytes:"function",domain:"function",prehash:"function",mapToCurve:"function"});const{prehash:n}=r,{BASE:i,Fp:s,Fn:a}=e,o=r.randomBytes||Dc,c=r.adjustScalarBytes||(e=>e),u=r.domain||((e,t,r)=>{if(Mc(r,"phflag"),t.length||r)throw Error("Contexts/pre-hash are not supported");return e});function h(e){return a.create(Nc(e))}function l(e){const{head:r,prefix:n,scalar:s}=function(e){const r=g.secretKey;e=_c("private key",e,r);const n=_c("hashed private key",t(e),2*r),i=c(n.slice(0,r));return{head:i,prefix:n.slice(r,2*r),scalar:h(i)}}(e),a=i.multiply(s),o=a.toBytes();return{head:r,prefix:n,scalar:s,point:a,pointBytes:o}}function f(e){return l(e).pointBytes}function y(e=Uint8Array.of(),...r){const i=Bc(...r);return h(t(u(i,_c("context",e),!!n)))}const d={zip215:!0};const p=s.BYTES,g={secretKey:p,publicKey:p,signature:2*p,seed:p};function w(e=o(g.seed)){return Lc(e,g.seed,"seed")}const A={getExtendedPublicKey:l,randomSecretKey:w,isValidSecretKey:function(e){return ic(e)&&e.length===a.BYTES},isValidPublicKey:function(t,r){try{return!!e.fromBytes(t,r)}catch(e){return!1}},toMontgomery(t){const{y:r}=e.fromBytes(t),n=g.publicKey,i=32===n;if(!i&&57!==n)throw Error("only defined for 25519 and 448");const a=i?s.div(wl+r,wl-r):s.div(r-wl,r+wl);return s.toBytes(a)},toMontgomerySecret(e){const r=g.secretKey;Lc(e,r);const n=t(e.subarray(0,r));return c(n).subarray(0,r)},randomPrivateKey:w,precompute:(t=8,r=e.BASE)=>r.precompute(t,!1)};return Object.freeze({keygen:function(e){const t=A.randomSecretKey(e);return{secretKey:t,publicKey:f(t)}},getPublicKey:f,sign:function(e,t,r={}){e=_c("message",e),n&&(e=n(e));const{prefix:s,scalar:o,pointBytes:c}=l(t),u=y(r.context,s,e),h=i.multiply(u).toBytes(),f=y(r.context,h,c,e),d=a.create(u+f*o);if(!a.isValid(d))throw Error("sign failed: invalid s");return Lc(Bc(h,a.toBytes(d)),g.signature,"result")},verify:function(t,r,s,a=d){const{context:o,zip215:c}=a,u=g.signature;t=_c("signature",t,u),r=_c("message",r),s=_c("publicKey",s,g.publicKey),void 0!==c&&Mc(c,"zip215"),n&&(r=n(r));const h=u/2,l=t.subarray(0,h),f=Nc(t.subarray(h,u));let p,w,A;try{p=e.fromBytes(s,c),w=e.fromBytes(l,c),A=i.multiplyUnsafe(f)}catch(e){return!1}if(!c&&p.isSmallOrder())return!1;const m=y(o,w.toBytes(),p.toBytes(),r);return w.add(p.multiplyUnsafe(m)).subtract(A).clearCofactor().is0()},utils:A,Point:e,lengths:g})}
 /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
-const El=BigInt(0),vl=BigInt(1),Kl=BigInt(2);function Sl(e){const t=(Yc(r=e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...r}));var r;const{P:n,type:i,adjustScalarBytes:s,powPminus2:a,randomBytes:o}=t,c="x25519"===i;if(!c&&"x448"!==i)throw Error("invalid type");const u=o||Dc,h=c?255:448,l=c?32:56,f=c?BigInt(9):BigInt(5),y=c?BigInt(121665):BigInt(39081),p=c?Kl**BigInt(254):Kl**BigInt(447),d=c?BigInt(8)*Kl**BigInt(251)-vl:BigInt(4)*Kl**BigInt(445)-vl,g=p+d+vl,w=e=>au(e,n),A=m(f);function m(e){return _c(w(e),l)}function b(e,t){const r=function(e,t){qc("u",e,El,n),qc("scalar",t,p,g);const r=t,i=e;let s=vl,o=El,c=e,u=vl,l=El;for(let e=BigInt(h-1);e>=El;e--){const t=r>>e&vl;l^=t,({x_2:s,x_3:c}=E(l,s,c)),({x_2:o,x_3:u}=E(l,o,u)),l=t;const n=s+o,a=w(n*n),h=s-o,f=w(h*h),p=a-f,d=c+u,g=w((c-u)*n),A=w(d*h),m=g+A,b=g-A;c=w(m*m),u=w(i*w(b*b)),s=w(a*f),o=w(p*(a+w(y*p)))}({x_2:s,x_3:c}=E(l,s,c)),({x_2:o,x_3:u}=E(l,o,u));const f=a(o);return w(s*f)}(function(e){const t=Hc("u coordinate",e,l);return c&&(t[31]&=127),w(Oc(t))}(t),function(e){return Oc(s(Hc("scalar",e,l)))}(e));if(r===El)throw Error("invalid private or public key received");return m(r)}function k(e){return b(e,A)}function E(e,t,r){const n=w(e*(t-r));return{x_2:t=w(t-n),x_3:r=w(r+n)}}const v={secretKey:l,publicKey:l,seed:l},K=(e=u(l))=>(ac(e,v.seed),e);return{keygen:function(e){const t=K(e);return{secretKey:t,publicKey:k(t)}},getSharedSecret:(e,t)=>b(e,t),getPublicKey:e=>k(e),scalarMult:b,scalarMultBase:k,utils:{randomSecretKey:K,randomPrivateKey:K},GuBytes:A.slice(),lengths:v}}
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Bl={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),n:BigInt("0x3fffffffffffffffffffffffffffffffffffffffffffffffffffffff7cca23e9c44edb49aed63690216cc2728dc58f552378c292ab5844f3"),h:BigInt(4),a:BigInt(1),d:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffff6756"),Gx:BigInt("0x4f1970c66bed0ded221d15a622bf36da9e146570470f1767ea6de324a3d3a46412ae1af72ab66511433b80e18b00938e2626a82bc70cc05e"),Gy:BigInt("0x693f46716eb6bc248876203756c9c7624bea73736ca3984087789c1e05a0c2d73ad3ff1ce67c39c4fdbd132c4ed7c8ad9808795bf230fa14")},Il=Object.assign({},Bl,{d:BigInt("0xd78b4bdc7f0daf19f24f38c29373a2ccad46157242a50f37809b1da3412a12e79ccc9c81264cfe9ad080997058fb61c4243cc32dbaa156b9"),Gx:BigInt("0x79a70b2b70400553ae7c9df416c792c61128751ac92969240c25a07d728bdc93e21f7787ed6972249de732f38496cd11698713093e9c04fc"),Gy:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffff80000000000000000000000000000000000000000000000000000001")}),Cl=/* @__PURE__ */Uc((()=>dl.create({dkLen:114}))),Ul=BigInt(1),Pl=BigInt(2),Dl=BigInt(3);BigInt(4);const xl=BigInt(11),Ql=BigInt(22),Rl=BigInt(44),Tl=BigInt(88),Ml=BigInt(223);function Ll(e){const t=Bl.p,r=e*e*e%t,n=r*r*e%t,i=ou(n,Dl,t)*n%t,s=ou(i,Dl,t)*n%t,a=ou(s,Pl,t)*r%t,o=ou(a,xl,t)*a%t,c=ou(o,Ql,t)*o%t,u=ou(c,Rl,t)*c%t,h=ou(u,Tl,t)*u%t,l=ou(h,Rl,t)*c%t,f=ou(l,Pl,t)*r%t,y=ou(f,Ul,t)*e%t;return ou(y,Ml,t)*f%t}function Fl(e){return e[0]&=252,e[55]|=128,e[56]=0,e}function Ol(e,t){const r=Bl.p,n=au(e*e*t,r),i=au(n*e,r),s=au(i*n*t,r),a=au(i*Ll(s),r),o=au(a*a,r);return{isValid:au(o*t,r)===e,value:a}}const Nl=/* @__PURE__ */(()=>Au(Bl.p,{BITS:456,isLE:!0}))(),_l=/* @__PURE__ */(()=>Au(Bl.n,{BITS:456,isLE:!0}))();function Hl(e,t,r){if(t.length>255)throw Error("context must be smaller than 255, got: "+t.length);return Ic((n="SigEd448",Uint8Array.from(n,((e,t)=>{const r=e.charCodeAt(0);if(1!==e.length||r>127)throw Error(`string contains non-ASCII character "${n[t]}" with code ${r} at position ${t}`);return r}))),new Uint8Array([r?1:0,t.length]),t,e);var n}const zl=function(e){const{CURVE:t,curveOpts:r,hash:n,eddsaOpts:i}=function(e){const t={a:e.a,d:e.d,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r={Fp:e.Fp,Fn:Au(t.n,e.nBitLength,!0),uvRatio:e.uvRatio},n={randomBytes:e.randomBytes,adjustScalarBytes:e.adjustScalarBytes,domain:e.domain,prehash:e.prehash,mapToCurve:e.mapToCurve};return{CURVE:t,curveOpts:r,hash:e.hash,eddsaOpts:n}}(e);return function(e,t){const r=t.Point;return Object.assign({},t,{ExtendedPoint:r,CURVE:e,nBitLength:r.Fn.BITS,nByteLength:r.Fn.BYTES})}(e,kl(bl(t,r),n,i))}(/* @__PURE__ */(()=>({...Bl,Fp:Nl,Fn:_l,nBitLength:_l.BITS,hash:Cl,adjustScalarBytes:Fl,domain:Hl,uvRatio:Ol}))());bl(Il);const Gl=/* @__PURE__ */(()=>{const e=Bl.p;return Sl({P:e,type:"x448",powPminus2:t=>au(ou(Ll(t),Pl,e)*t,e),adjustScalarBytes:Fl})})(),ql={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},jl={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]},Vl=/* @__PURE__ */BigInt(2);
-/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Yl=Au(ql.p,{sqrt:function(e){const t=ql.p,r=BigInt(3),n=BigInt(6),i=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),u=e*e*e%t,h=u*u*e%t,l=ou(h,r,t)*h%t,f=ou(l,r,t)*h%t,y=ou(f,Vl,t)*u%t,p=ou(y,i,t)*y%t,d=ou(p,s,t)*p%t,g=ou(d,o,t)*d%t,w=ou(g,c,t)*g%t,A=ou(w,o,t)*d%t,m=ou(A,r,t)*h%t,b=ou(m,a,t)*p%t,k=ou(b,n,t)*u%t,E=ou(k,Vl,t);if(!Yl.eql(Yl.sqr(E),e))throw Error("Cannot find square root");return E}}),Zl=Nh({...ql,Fp:Yl,lowS:!0,endo:jl},rh),Jl=rh,Xl=nh,Wl=Au(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),$l=Nh({a:Wl.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:Wl,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Jl),ef=ih,tf=sh,rf=Au(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),nf=Nh({a:rf.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:rf,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},tf),sf=Au(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),af=Nh({a:sf.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:sf,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},ef),of=new Map(Object.entries({nistP256:Vh,nistP384:Yh,nistP521:Zh,brainpoolP256r1:$l,brainpoolP384r1:nf,brainpoolP512r1:af,secp256k1:Zl,x448:Gl,ed448:zl}));var cf=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:of});const uf=/* @__PURE__ */Uint32Array.from([1732584193,4023233417,2562383102,271733878,3285377520]),hf=/* @__PURE__ */new Uint32Array(80);class lf extends vu{constructor(){super(64,20,8,!1),this.A=0|uf[0],this.B=0|uf[1],this.C=0|uf[2],this.D=0|uf[3],this.E=0|uf[4]}get(){const{A:e,B:t,C:r,D:n,E:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)hf[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)hf[e]=yc(hf[e-3]^hf[e-8]^hf[e-14]^hf[e-16],1);let{A:r,B:n,C:i,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=ku(n,i,s),o=1518500249):e<40?(t=n^i^s,o=1859775393):e<60?(t=Eu(n,i,s),o=2400959708):(t=n^i^s,o=3395469782);const c=yc(r,5)+t+a+o+hf[e]|0;a=s,s=i,i=yc(n,30),n=r,r=c}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,n,i,s,a)}roundClean(){hc(hf)}destroy(){this.set(0,0,0,0,0),hc(this.buffer)}}const ff=/* @__PURE__ */Uc((()=>new lf)),yf=/* @__PURE__ */Uint8Array.from([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),pf=/* @__PURE__ */(()=>Uint8Array.from(Array(16).fill(0).map(((e,t)=>t))))(),df=/* @__PURE__ */(()=>pf.map((e=>(9*e+5)%16)))(),gf=/* @__PURE__ */(()=>{const e=[[pf],[df]];for(let t=0;t<4;t++)for(let r of e)r.push(r[t].map((e=>yf[e])));return e})(),wf=/* @__PURE__ */(()=>gf[0])(),Af=/* @__PURE__ */(()=>gf[1])(),mf=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>Uint8Array.from(e))),bf=/* @__PURE__ */wf.map(((e,t)=>e.map((e=>mf[t][e])))),kf=/* @__PURE__ */Af.map(((e,t)=>e.map((e=>mf[t][e])))),Ef=/* @__PURE__ */Uint32Array.from([0,1518500249,1859775393,2400959708,2840853838]),vf=/* @__PURE__ */Uint32Array.from([1352829926,1548603684,1836072691,2053994217,0]);function Kf(e,t,r,n){return 0===e?t^r^n:1===e?t&r|~t&n:2===e?(t|~r)^n:3===e?t&n|r&~n:t^(r|~n)}const Sf=/* @__PURE__ */new Uint32Array(16);class Bf extends vu{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:n,h4:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|n,this.h4=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)Sf[r]=e.getUint32(t,!0);let r=0|this.h0,n=r,i=0|this.h1,s=i,a=0|this.h2,o=a,c=0|this.h3,u=c,h=0|this.h4,l=h;for(let e=0;e<5;e++){const t=4-e,f=Ef[e],y=vf[e],p=wf[e],d=Af[e],g=bf[e],w=kf[e];for(let t=0;t<16;t++){const n=yc(r+Kf(e,i,a,c)+Sf[p[t]]+f,g[t])+h|0;r=h,h=c,c=0|yc(a,10),a=i,i=n}for(let e=0;e<16;e++){const r=yc(n+Kf(t,s,o,u)+Sf[d[e]]+y,w[e])+l|0;n=l,l=u,u=0|yc(o,10),o=s,s=r}}this.set(this.h1+a+u|0,this.h2+c+l|0,this.h3+h+n|0,this.h4+r+s|0,this.h0+i+o|0)}roundClean(){hc(Sf)}destroy(){this.destroyed=!0,hc(this.buffer),this.set(0,0,0,0,0)}}const If=ff,Cf=/* @__PURE__ */Uc((()=>new Bf)),Uf=Array.from({length:64},((e,t)=>Math.floor(2**32*Math.abs(Math.sin(t+1))))),Pf=(e,t,r)=>e&t^~e&r,Df=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878]),xf=/* @__PURE__ */new Uint32Array(16);class Qf extends vu{constructor(){super(64,16,8,!0),this.A=0|Df[0],this.B=0|Df[1],this.C=0|Df[2],this.D=0|Df[3]}get(){const{A:e,B:t,C:r,D:n}=this;return[e,t,r,n]}set(e,t,r,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)xf[r]=e.getUint32(t,!0);let{A:r,B:n,C:i,D:s}=this;for(let e=0;e<64;e++){let t,a,o;e<16?(t=Pf(n,i,s),a=e,o=[7,12,17,22]):e<32?(t=Pf(s,n,i),a=(5*e+1)%16,o=[5,9,14,20]):e<48?(t=n^i^s,a=(3*e+5)%16,o=[4,11,16,23]):(t=i^(n|~s),a=7*e%16,o=[6,10,15,21]),t=t+r+Uf[e]+xf[a],r=s,s=i,i=n,n+=yc(t,o[e%4])}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,this.set(r,n,i,s)}roundClean(){xf.fill(0)}destroy(){this.set(0,0,0,0),this.buffer.fill(0)}}const Rf=new Map(Object.entries({md5:/* @__PURE__ */Pc((()=>new Qf)),sha1:If,sha224:Xl,sha256:Jl,sha384:tf,sha512:ef,sha3_256:fl,sha3_512:yl,ripemd160:Cf}));var Tf=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Rf});const Mf=r&&"object"==typeof r&&"webcrypto"in r?r.webcrypto:void 0,Lf={};var Ff=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},Of=function(){throw Error("no PRNG")},Nf=new Uint8Array(32);Nf[0]=9;var _f=Ff(),Hf=Ff([1]),zf=Ff([56129,1]),Gf=Ff([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),qf=Ff([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),jf=Ff([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),Vf=Ff([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),Yf=Ff([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function Zf(e,t,r,n){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=n>>24&255,e[t+5]=n>>16&255,e[t+6]=n>>8&255,e[t+7]=255&n}function Jf(e,t,r,n){return function(e,t,r,n,i){var s,a=0;for(s=0;s<i;s++)a|=e[t+s]^r[n+s];return(1&a-1>>>8)-1}(e,t,r,n,32)}function Xf(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function Wf(e){var t,r,n=1;for(t=0;t<16;t++)r=e[t]+n+65535,n=Math.floor(r/65536),e[t]=r-65536*n;e[0]+=n-1+37*(n-1)}function $f(e,t,r){for(var n,i=~(r-1),s=0;s<16;s++)n=i&(e[s]^t[s]),e[s]^=n,t[s]^=n}function ey(e,t){var r,n,i,s=Ff(),a=Ff();for(r=0;r<16;r++)a[r]=t[r];for(Wf(a),Wf(a),Wf(a),n=0;n<2;n++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),i=s[15]>>16&1,s[14]&=65535,$f(a,s,1-i)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function ty(e,t){var r=new Uint8Array(32),n=new Uint8Array(32);return ey(r,e),ey(n,t),Jf(r,0,n,0)}function ry(e){var t=new Uint8Array(32);return ey(t,e),1&t[0]}function ny(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function iy(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]+r[n]}function sy(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]-r[n]}function ay(e,t,r){var n,i,s=0,a=0,o=0,c=0,u=0,h=0,l=0,f=0,y=0,p=0,d=0,g=0,w=0,A=0,m=0,b=0,k=0,E=0,v=0,K=0,S=0,B=0,I=0,C=0,U=0,P=0,D=0,x=0,Q=0,R=0,T=0,M=r[0],L=r[1],F=r[2],O=r[3],N=r[4],_=r[5],H=r[6],z=r[7],G=r[8],q=r[9],j=r[10],V=r[11],Y=r[12],Z=r[13],J=r[14],X=r[15];s+=(n=t[0])*M,a+=n*L,o+=n*F,c+=n*O,u+=n*N,h+=n*_,l+=n*H,f+=n*z,y+=n*G,p+=n*q,d+=n*j,g+=n*V,w+=n*Y,A+=n*Z,m+=n*J,b+=n*X,a+=(n=t[1])*M,o+=n*L,c+=n*F,u+=n*O,h+=n*N,l+=n*_,f+=n*H,y+=n*z,p+=n*G,d+=n*q,g+=n*j,w+=n*V,A+=n*Y,m+=n*Z,b+=n*J,k+=n*X,o+=(n=t[2])*M,c+=n*L,u+=n*F,h+=n*O,l+=n*N,f+=n*_,y+=n*H,p+=n*z,d+=n*G,g+=n*q,w+=n*j,A+=n*V,m+=n*Y,b+=n*Z,k+=n*J,E+=n*X,c+=(n=t[3])*M,u+=n*L,h+=n*F,l+=n*O,f+=n*N,y+=n*_,p+=n*H,d+=n*z,g+=n*G,w+=n*q,A+=n*j,m+=n*V,b+=n*Y,k+=n*Z,E+=n*J,v+=n*X,u+=(n=t[4])*M,h+=n*L,l+=n*F,f+=n*O,y+=n*N,p+=n*_,d+=n*H,g+=n*z,w+=n*G,A+=n*q,m+=n*j,b+=n*V,k+=n*Y,E+=n*Z,v+=n*J,K+=n*X,h+=(n=t[5])*M,l+=n*L,f+=n*F,y+=n*O,p+=n*N,d+=n*_,g+=n*H,w+=n*z,A+=n*G,m+=n*q,b+=n*j,k+=n*V,E+=n*Y,v+=n*Z,K+=n*J,S+=n*X,l+=(n=t[6])*M,f+=n*L,y+=n*F,p+=n*O,d+=n*N,g+=n*_,w+=n*H,A+=n*z,m+=n*G,b+=n*q,k+=n*j,E+=n*V,v+=n*Y,K+=n*Z,S+=n*J,B+=n*X,f+=(n=t[7])*M,y+=n*L,p+=n*F,d+=n*O,g+=n*N,w+=n*_,A+=n*H,m+=n*z,b+=n*G,k+=n*q,E+=n*j,v+=n*V,K+=n*Y,S+=n*Z,B+=n*J,I+=n*X,y+=(n=t[8])*M,p+=n*L,d+=n*F,g+=n*O,w+=n*N,A+=n*_,m+=n*H,b+=n*z,k+=n*G,E+=n*q,v+=n*j,K+=n*V,S+=n*Y,B+=n*Z,I+=n*J,C+=n*X,p+=(n=t[9])*M,d+=n*L,g+=n*F,w+=n*O,A+=n*N,m+=n*_,b+=n*H,k+=n*z,E+=n*G,v+=n*q,K+=n*j,S+=n*V,B+=n*Y,I+=n*Z,C+=n*J,U+=n*X,d+=(n=t[10])*M,g+=n*L,w+=n*F,A+=n*O,m+=n*N,b+=n*_,k+=n*H,E+=n*z,v+=n*G,K+=n*q,S+=n*j,B+=n*V,I+=n*Y,C+=n*Z,U+=n*J,P+=n*X,g+=(n=t[11])*M,w+=n*L,A+=n*F,m+=n*O,b+=n*N,k+=n*_,E+=n*H,v+=n*z,K+=n*G,S+=n*q,B+=n*j,I+=n*V,C+=n*Y,U+=n*Z,P+=n*J,D+=n*X,w+=(n=t[12])*M,A+=n*L,m+=n*F,b+=n*O,k+=n*N,E+=n*_,v+=n*H,K+=n*z,S+=n*G,B+=n*q,I+=n*j,C+=n*V,U+=n*Y,P+=n*Z,D+=n*J,x+=n*X,A+=(n=t[13])*M,m+=n*L,b+=n*F,k+=n*O,E+=n*N,v+=n*_,K+=n*H,S+=n*z,B+=n*G,I+=n*q,C+=n*j,U+=n*V,P+=n*Y,D+=n*Z,x+=n*J,Q+=n*X,m+=(n=t[14])*M,b+=n*L,k+=n*F,E+=n*O,v+=n*N,K+=n*_,S+=n*H,B+=n*z,I+=n*G,C+=n*q,U+=n*j,P+=n*V,D+=n*Y,x+=n*Z,Q+=n*J,R+=n*X,b+=(n=t[15])*M,a+=38*(E+=n*F),o+=38*(v+=n*O),c+=38*(K+=n*N),u+=38*(S+=n*_),h+=38*(B+=n*H),l+=38*(I+=n*z),f+=38*(C+=n*G),y+=38*(U+=n*q),p+=38*(P+=n*j),d+=38*(D+=n*V),g+=38*(x+=n*Y),w+=38*(Q+=n*Z),A+=38*(R+=n*J),m+=38*(T+=n*X),s=(n=(s+=38*(k+=n*L))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s=(n=(s+=i-1+37*(i-1))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s+=i-1+37*(i-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=u,e[5]=h,e[6]=l,e[7]=f,e[8]=y,e[9]=p,e[10]=d,e[11]=g,e[12]=w,e[13]=A,e[14]=m,e[15]=b}function oy(e,t){ay(e,t,t)}function cy(e,t){var r,n=Ff();for(r=0;r<16;r++)n[r]=t[r];for(r=253;r>=0;r--)oy(n,n),2!==r&&4!==r&&ay(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}function uy(e,t,r){var n,i,s=new Uint8Array(32),a=new Float64Array(80),o=Ff(),c=Ff(),u=Ff(),h=Ff(),l=Ff(),f=Ff();for(i=0;i<31;i++)s[i]=t[i];for(s[31]=127&t[31]|64,s[0]&=248,ny(a,r),i=0;i<16;i++)c[i]=a[i],h[i]=o[i]=u[i]=0;for(o[0]=h[0]=1,i=254;i>=0;--i)$f(o,c,n=s[i>>>3]>>>(7&i)&1),$f(u,h,n),iy(l,o,u),sy(o,o,u),iy(u,c,h),sy(c,c,h),oy(h,l),oy(f,o),ay(o,u,o),ay(u,c,l),iy(l,o,u),sy(o,o,u),oy(c,o),sy(u,h,f),ay(o,u,zf),iy(o,o,h),ay(u,u,o),ay(o,h,f),ay(h,c,a),oy(c,l),$f(o,c,n),$f(u,h,n);for(i=0;i<16;i++)a[i+16]=o[i],a[i+32]=u[i],a[i+48]=c[i],a[i+64]=h[i];var y=a.subarray(32),p=a.subarray(16);return cy(y,y),ay(p,p,y),ey(e,p),0}function hy(e,t){return uy(e,t,Nf)}var ly=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function fy(e,t,r,n){for(var i,s,a,o,c,u,h,l,f,y,p,d,g,w,A,m,b,k,E,v,K,S,B,I,C,U,P=new Int32Array(16),D=new Int32Array(16),x=e[0],Q=e[1],R=e[2],T=e[3],M=e[4],L=e[5],F=e[6],O=e[7],N=t[0],_=t[1],H=t[2],z=t[3],G=t[4],q=t[5],j=t[6],V=t[7],Y=0;n>=128;){for(E=0;E<16;E++)v=8*E+Y,P[E]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],D[E]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(E=0;E<80;E++)if(i=x,s=Q,a=R,o=T,c=M,u=L,h=F,O,f=N,y=_,p=H,d=z,g=G,w=q,A=j,V,B=65535&(S=V),I=S>>>16,C=65535&(K=O),U=K>>>16,B+=65535&(S=(G>>>14|M<<18)^(G>>>18|M<<14)^(M>>>9|G<<23)),I+=S>>>16,C+=65535&(K=(M>>>14|G<<18)^(M>>>18|G<<14)^(G>>>9|M<<23)),U+=K>>>16,B+=65535&(S=G&q^~G&j),I+=S>>>16,C+=65535&(K=M&L^~M&F),U+=K>>>16,B+=65535&(S=ly[2*E+1]),I+=S>>>16,C+=65535&(K=ly[2*E]),U+=K>>>16,K=P[E%16],I+=(S=D[E%16])>>>16,C+=65535&K,U+=K>>>16,C+=(I+=(B+=65535&S)>>>16)>>>16,B=65535&(S=k=65535&B|I<<16),I=S>>>16,C=65535&(K=b=65535&C|(U+=C>>>16)<<16),U=K>>>16,B+=65535&(S=(N>>>28|x<<4)^(x>>>2|N<<30)^(x>>>7|N<<25)),I+=S>>>16,C+=65535&(K=(x>>>28|N<<4)^(N>>>2|x<<30)^(N>>>7|x<<25)),U+=K>>>16,I+=(S=N&_^N&H^_&H)>>>16,C+=65535&(K=x&Q^x&R^Q&R),U+=K>>>16,l=65535&(C+=(I+=(B+=65535&S)>>>16)>>>16)|(U+=C>>>16)<<16,m=65535&B|I<<16,B=65535&(S=d),I=S>>>16,C=65535&(K=o),U=K>>>16,I+=(S=k)>>>16,C+=65535&(K=b),U+=K>>>16,Q=i,R=s,T=a,M=o=65535&(C+=(I+=(B+=65535&S)>>>16)>>>16)|(U+=C>>>16)<<16,L=c,F=u,O=h,x=l,_=f,H=y,z=p,G=d=65535&B|I<<16,q=g,j=w,V=A,N=m,E%16==15)for(v=0;v<16;v++)K=P[v],B=65535&(S=D[v]),I=S>>>16,C=65535&K,U=K>>>16,K=P[(v+9)%16],B+=65535&(S=D[(v+9)%16]),I+=S>>>16,C+=65535&K,U+=K>>>16,b=P[(v+1)%16],B+=65535&(S=((k=D[(v+1)%16])>>>1|b<<31)^(k>>>8|b<<24)^(k>>>7|b<<25)),I+=S>>>16,C+=65535&(K=(b>>>1|k<<31)^(b>>>8|k<<24)^b>>>7),U+=K>>>16,b=P[(v+14)%16],I+=(S=((k=D[(v+14)%16])>>>19|b<<13)^(b>>>29|k<<3)^(k>>>6|b<<26))>>>16,C+=65535&(K=(b>>>19|k<<13)^(k>>>29|b<<3)^b>>>6),U+=K>>>16,U+=(C+=(I+=(B+=65535&S)>>>16)>>>16)>>>16,P[v]=65535&C|U<<16,D[v]=65535&B|I<<16;B=65535&(S=N),I=S>>>16,C=65535&(K=x),U=K>>>16,K=e[0],I+=(S=t[0])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(I+=(B+=65535&S)>>>16)>>>16)>>>16,e[0]=x=65535&C|U<<16,t[0]=N=65535&B|I<<16,B=65535&(S=_),I=S>>>16,C=65535&(K=Q),U=K>>>16,K=e[1],I+=(S=t[1])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(I+=(B+=65535&S)>>>16)>>>16)>>>16,e[1]=Q=65535&C|U<<16,t[1]=_=65535&B|I<<16,B=65535&(S=H),I=S>>>16,C=65535&(K=R),U=K>>>16,K=e[2],I+=(S=t[2])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(I+=(B+=65535&S)>>>16)>>>16)>>>16,e[2]=R=65535&C|U<<16,t[2]=H=65535&B|I<<16,B=65535&(S=z),I=S>>>16,C=65535&(K=T),U=K>>>16,K=e[3],I+=(S=t[3])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(I+=(B+=65535&S)>>>16)>>>16)>>>16,e[3]=T=65535&C|U<<16,t[3]=z=65535&B|I<<16,B=65535&(S=G),I=S>>>16,C=65535&(K=M),U=K>>>16,K=e[4],I+=(S=t[4])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(I+=(B+=65535&S)>>>16)>>>16)>>>16,e[4]=M=65535&C|U<<16,t[4]=G=65535&B|I<<16,B=65535&(S=q),I=S>>>16,C=65535&(K=L),U=K>>>16,K=e[5],I+=(S=t[5])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(I+=(B+=65535&S)>>>16)>>>16)>>>16,e[5]=L=65535&C|U<<16,t[5]=q=65535&B|I<<16,B=65535&(S=j),I=S>>>16,C=65535&(K=F),U=K>>>16,K=e[6],I+=(S=t[6])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(I+=(B+=65535&S)>>>16)>>>16)>>>16,e[6]=F=65535&C|U<<16,t[6]=j=65535&B|I<<16,B=65535&(S=V),I=S>>>16,C=65535&(K=O),U=K>>>16,K=e[7],I+=(S=t[7])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(I+=(B+=65535&S)>>>16)>>>16)>>>16,e[7]=O=65535&C|U<<16,t[7]=V=65535&B|I<<16,Y+=128,n-=128}return n}function yy(e,t,r){var n,i=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(i[0]=1779033703,i[1]=3144134277,i[2]=1013904242,i[3]=2773480762,i[4]=1359893119,i[5]=2600822924,i[6]=528734635,i[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,fy(i,s,t,r),r%=128,n=0;n<r;n++)a[n]=t[o-r+n];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,Zf(a,r-8,o/536870912|0,o<<3),fy(i,s,a,r),n=0;n<8;n++)Zf(e,8*n,i[n],s[n]);return 0}function py(e,t){var r=Ff(),n=Ff(),i=Ff(),s=Ff(),a=Ff(),o=Ff(),c=Ff(),u=Ff(),h=Ff();sy(r,e[1],e[0]),sy(h,t[1],t[0]),ay(r,r,h),iy(n,e[0],e[1]),iy(h,t[0],t[1]),ay(n,n,h),ay(i,e[3],t[3]),ay(i,i,qf),ay(s,e[2],t[2]),iy(s,s,s),sy(a,n,r),sy(o,s,i),iy(c,s,i),iy(u,n,r),ay(e[0],a,o),ay(e[1],u,c),ay(e[2],c,o),ay(e[3],a,u)}function dy(e,t,r){var n;for(n=0;n<4;n++)$f(e[n],t[n],r)}function gy(e,t){var r=Ff(),n=Ff(),i=Ff();cy(i,t[2]),ay(r,t[0],i),ay(n,t[1],i),ey(e,n),e[31]^=ry(r)<<7}function wy(e,t,r){var n,i;for(Xf(e[0],_f),Xf(e[1],Hf),Xf(e[2],Hf),Xf(e[3],_f),i=255;i>=0;--i)dy(e,t,n=r[i/8|0]>>(7&i)&1),py(t,e),py(e,e),dy(e,t,n)}function Ay(e,t){var r=[Ff(),Ff(),Ff(),Ff()];Xf(r[0],jf),Xf(r[1],Vf),Xf(r[2],Hf),ay(r[3],jf,Vf),wy(e,r,t)}function my(e,t,r){var n,i=new Uint8Array(64),s=[Ff(),Ff(),Ff(),Ff()];for(r||Of(t,32),yy(i,t,32),i[0]&=248,i[31]&=127,i[31]|=64,Ay(s,i),gy(e,s),n=0;n<32;n++)t[n+32]=e[n];return 0}var by=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function ky(e,t){var r,n,i,s;for(n=63;n>=32;--n){for(r=0,i=n-32,s=n-12;i<s;++i)t[i]+=r-16*t[n]*by[i-(n-32)],r=Math.floor((t[i]+128)/256),t[i]-=256*r;t[i]+=r,t[n]=0}for(r=0,i=0;i<32;i++)t[i]+=r-(t[31]>>4)*by[i],r=t[i]>>8,t[i]&=255;for(i=0;i<32;i++)t[i]-=r*by[i];for(n=0;n<32;n++)t[n+1]+=t[n]>>8,e[n]=255&t[n]}function Ey(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;ky(e,r)}function vy(e,t){var r=Ff(),n=Ff(),i=Ff(),s=Ff(),a=Ff(),o=Ff(),c=Ff();return Xf(e[2],Hf),ny(e[1],t),oy(i,e[1]),ay(s,i,Gf),sy(i,i,e[2]),iy(s,e[2],s),oy(a,s),oy(o,a),ay(c,o,a),ay(r,c,i),ay(r,r,s),function(e,t){var r,n=Ff();for(r=0;r<16;r++)n[r]=t[r];for(r=250;r>=0;r--)oy(n,n),1!==r&&ay(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}(r,r),ay(r,r,i),ay(r,r,s),ay(r,r,s),ay(e[0],r,s),oy(n,e[0]),ay(n,n,s),ty(n,i)&&ay(e[0],e[0],Yf),oy(n,e[0]),ay(n,n,s),ty(n,i)?-1:(ry(e[0])===t[31]>>7&&sy(e[0],_f,e[0]),ay(e[3],e[0],e[1]),0)}var Ky=64;function Sy(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}Lf.scalarMult=function(e,t){if(Sy(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return uy(r,e,t),r},Lf.box={},Lf.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){Of(t,32),hy(e,t)}(e,t),{publicKey:e,secretKey:t}},Lf.box.keyPair.fromSecretKey=function(e){if(Sy(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return hy(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},Lf.sign=function(e,t){if(Sy(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(Ky+e.length);return function(e,t,r,n){var i,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),u=new Float64Array(64),h=[Ff(),Ff(),Ff(),Ff()];yy(a,n,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(i=0;i<r;i++)e[64+i]=t[i];for(i=0;i<32;i++)e[32+i]=a[32+i];for(yy(c,e.subarray(32),r+32),Ey(c),Ay(h,c),gy(e,h),i=32;i<64;i++)e[i]=n[i];for(yy(o,e,r+64),Ey(o),i=0;i<64;i++)u[i]=0;for(i=0;i<32;i++)u[i]=c[i];for(i=0;i<32;i++)for(s=0;s<32;s++)u[i+s]+=o[i]*a[s];ky(e.subarray(32),u)}(r,e,e.length,t),r},Lf.sign.detached=function(e,t){for(var r=Lf.sign(e,t),n=new Uint8Array(Ky),i=0;i<n.length;i++)n[i]=r[i];return n},Lf.sign.detached.verify=function(e,t,r){if(Sy(e,t,r),t.length!==Ky)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var n,i=new Uint8Array(Ky+e.length),s=new Uint8Array(Ky+e.length);for(n=0;n<Ky;n++)i[n]=t[n];for(n=0;n<e.length;n++)i[n+Ky]=e[n];return function(e,t,r,n){var i,s=new Uint8Array(32),a=new Uint8Array(64),o=[Ff(),Ff(),Ff(),Ff()],c=[Ff(),Ff(),Ff(),Ff()];if(r<64)return-1;if(vy(c,n))return-1;for(i=0;i<r;i++)e[i]=t[i];for(i=0;i<32;i++)e[i+32]=n[i];if(yy(a,e,r),Ey(a),wy(o,c,a),Ay(c,t.subarray(32)),py(o,c),gy(s,o),r-=64,Jf(t,0,s,0)){for(i=0;i<r;i++)e[i]=0;return-1}for(i=0;i<r;i++)e[i]=t[i+64];return r}(s,i,i.length,r)>=0},Lf.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return my(e,t),{publicKey:e,secretKey:t}},Lf.sign.keyPair.fromSecretKey=function(e){if(Sy(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},Lf.sign.keyPair.fromSeed=function(e){if(Sy(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),n=0;n<32;n++)r[n]=e[n];return my(t,r,!0),{publicKey:t,secretKey:r}},Lf.setPRNG=function(e){Of=e},function(){if(Mf&&Mf.getRandomValues){Lf.setPRNG((function(e,t){var r,n=new Uint8Array(t);for(r=0;r<t;r+=65536)Mf.getRandomValues(n.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=n[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(n)}))}}();var By=/*#__PURE__*/Object.freeze({__proto__:null,default:Lf});function Iy(e,t,r,n,i,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],u=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],h=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],f=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],y=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let p,d,g,w,A,m,b,k,E,v,K=0,S=t.length;const B=32===e.length?3:9;k=3===B?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e){const t=8-e.length%8;let r;if(!(t<8)){if(8===t)return e;throw Error("des: invalid padding")}r=0;const n=new Uint8Array(e.length+t);for(let t=0;t<e.length;t++)n[t]=e[t];for(let i=0;i<t;i++)n[e.length+i]=r;return n}(t),S=t.length);let I=new Uint8Array(S),C=0;for(;K<S;){for(m=t[K++]<<24|t[K++]<<16|t[K++]<<8|t[K++],b=t[K++]<<24|t[K++]<<16|t[K++]<<8|t[K++],g=252645135&(m>>>4^b),b^=g,m^=g<<4,g=65535&(m>>>16^b),b^=g,m^=g<<16,g=858993459&(b>>>2^m),m^=g,b^=g<<2,g=16711935&(b>>>8^m),m^=g,b^=g<<8,g=1431655765&(m>>>1^b),b^=g,m^=g<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,d=0;d<B;d+=3){for(E=k[d+1],v=k[d+2],p=k[d];p!==E;p+=v)w=b^e[p],A=(b>>>4|b<<28)^e[p+1],g=m,m=b,b=g^(o[w>>>24&63]|u[w>>>16&63]|l[w>>>8&63]|y[63&w]|a[A>>>24&63]|c[A>>>16&63]|h[A>>>8&63]|f[63&A]);g=m,m=b,b=g}m=m>>>1|m<<31,b=b>>>1|b<<31,g=1431655765&(m>>>1^b),b^=g,m^=g<<1,g=16711935&(b>>>8^m),m^=g,b^=g<<8,g=858993459&(b>>>2^m),m^=g,b^=g<<2,g=65535&(m>>>16^b),b^=g,m^=g<<16,g=252645135&(m>>>4^b),b^=g,m^=g<<4,I[C++]=m>>>24,I[C++]=m>>>16&255,I[C++]=m>>>8&255,I[C++]=255&m,I[C++]=b>>>24,I[C++]=b>>>16&255,I[C++]=b>>>8&255,I[C++]=255&b}return r||(I=function(e){let t,r=null;if(t=0,!r){for(r=1;e[e.length-r]===t;)r++;r--}return e.subarray(0,e.length-r)}(I)),I}function Cy(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],n=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],i=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],u=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],h=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],f=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],y=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],p=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],d=e.length>8?3:1,g=Array(32*d),w=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let A,m,b,k=0,E=0;for(let v=0;v<d;v++){let d=e[k++]<<24|e[k++]<<16|e[k++]<<8|e[k++],v=e[k++]<<24|e[k++]<<16|e[k++]<<8|e[k++];b=252645135&(d>>>4^v),v^=b,d^=b<<4,b=65535&(v>>>-16^d),d^=b,v^=b<<-16,b=858993459&(d>>>2^v),v^=b,d^=b<<2,b=65535&(v>>>-16^d),d^=b,v^=b<<-16,b=1431655765&(d>>>1^v),v^=b,d^=b<<1,b=16711935&(v>>>8^d),d^=b,v^=b<<8,b=1431655765&(d>>>1^v),v^=b,d^=b<<1,b=d<<8|v>>>20&240,d=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)w[e]?(d=d<<2|d>>>26,v=v<<2|v>>>26):(d=d<<1|d>>>27,v=v<<1|v>>>27),d&=-15,v&=-15,A=t[d>>>28]|r[d>>>24&15]|n[d>>>20&15]|i[d>>>16&15]|s[d>>>12&15]|a[d>>>8&15]|o[d>>>4&15],m=c[v>>>28]|u[v>>>24&15]|h[v>>>20&15]|l[v>>>16&15]|f[v>>>12&15]|y[v>>>8&15]|p[v>>>4&15],b=65535&(m>>>16^A),g[E++]=A^b,g[E++]=m^b<<16}return g}function Uy(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return Iy(Cy(this.key[2]),Iy(Cy(this.key[1]),Iy(Cy(this.key[0]),e,!0),!1),!0)}}function Py(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const n=t+e,i=n<<r|n>>>32-r;return(s[0][i>>>24]^s[1][i>>>16&255])-s[2][i>>>8&255]+s[3][255&i]}function n(e,t,r){const n=t^e,i=n<<r|n>>>32-r;return s[0][i>>>24]-s[1][i>>>16&255]+s[2][i>>>8&255]^s[3][255&i]}function i(e,t,r){const n=t-e,i=n<<r|n>>>32-r;return(s[0][i>>>24]+s[1][i>>>16&255]^s[2][i>>>8&255])-s[3][255&i]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const n=[,,,,,,,,],i=Array(32);let a;for(let e=0;e<4;e++)a=4*e,n[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,u=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=n[t[1]],c^=s[4][n[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][n[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][n[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][n[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][n[t[6]>>>2]>>>24-8*(3&t[6])&255],n[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][n[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][n[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][n[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][n[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][n[e[4]>>>2]>>>24-8*(3&e[4])&255],i[u]=c,u++}}for(let e=0;e<16;e++)this.masking[e]=i[e],this.rotate[e]=31&i[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function Dy(e){this.cast5=new Py,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}Uy.keySize=Uy.prototype.keySize=24,Uy.blockSize=Uy.prototype.blockSize=8,Dy.blockSize=Dy.prototype.blockSize=8,Dy.keySize=Dy.prototype.keySize=16;const xy=4294967295;function Qy(e,t){return(e<<t|e>>>32-t)&xy}function Ry(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Ty(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function My(e,t){return e>>>8*t&255}function Ly(e){this.tf=function(){let e=null,t=null,r=-1,n=[],i=[[],[],[],[]];function s(e){return i[0][My(e,0)]^i[1][My(e,1)]^i[2][My(e,2)]^i[3][My(e,3)]}function a(e){return i[0][My(e,3)]^i[1][My(e,0)]^i[2][My(e,1)]^i[3][My(e,2)]}function o(e,t){let r=s(t[0]),i=a(t[1]);t[2]=Qy(t[2]^r+i+n[4*e+8]&xy,31),t[3]=Qy(t[3],1)^r+2*i+n[4*e+9]&xy,r=s(t[2]),i=a(t[3]),t[0]=Qy(t[0]^r+i+n[4*e+10]&xy,31),t[1]=Qy(t[1],1)^r+2*i+n[4*e+11]&xy}function c(e,t){let r=s(t[0]),i=a(t[1]);t[2]=Qy(t[2],1)^r+i+n[4*e+10]&xy,t[3]=Qy(t[3]^r+2*i+n[4*e+11]&xy,31),r=s(t[2]),i=a(t[3]),t[0]=Qy(t[0],1)^r+i+n[4*e+8]&xy,t[1]=Qy(t[1]^r+2*i+n[4*e+9]&xy,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const u=[],h=[],l=[];let f;const y=[];let p,d,g;const w=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],A=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],k=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],E=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],K=[[],[],[],[]];function S(e){return e^e>>2^[0,90,180,238][3&e]}function B(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function I(e,t){let r,n,i;for(r=0;r<8;r++)n=t>>>24,t=t<<8&xy|e>>>24,e=e<<8&xy,i=n<<1,128&n&&(i^=333),t^=n^i<<16,i^=n>>>1,1&n&&(i^=166),t^=i<<24|i<<8;return t}function C(e,t){const r=t>>4,n=15&t,i=w[e][r^n],s=A[e][k[n]^E[r]];return b[e][k[s]^E[i]]<<4|m[e][i^s]}function U(e,t){let r=My(e,0),n=My(e,1),i=My(e,2),s=My(e,3);switch(f){case 4:r=v[1][r]^My(t[3],0),n=v[0][n]^My(t[3],1),i=v[0][i]^My(t[3],2),s=v[1][s]^My(t[3],3);case 3:r=v[1][r]^My(t[2],0),n=v[1][n]^My(t[2],1),i=v[0][i]^My(t[2],2),s=v[0][s]^My(t[2],3);case 2:r=v[0][v[0][r]^My(t[1],0)]^My(t[0],0),n=v[0][v[1][n]^My(t[1],1)]^My(t[0],1),i=v[1][v[0][i]^My(t[1],2)]^My(t[0],2),s=v[1][v[1][s]^My(t[1],3)]^My(t[0],3)}return K[0][r]^K[1][n]^K[2][i]^K[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=Ry(e,r);for(r=0;r<256;r++)v[0][r]=C(0,r),v[1][r]=C(1,r);for(r=0;r<256;r++)p=v[1][r],d=S(p),g=B(p),K[0][r]=p+(d<<8)+(g<<16)+(g<<24),K[2][r]=d+(g<<8)+(p<<16)+(g<<24),p=v[0][r],d=S(p),g=B(p),K[1][r]=g+(g<<8)+(d<<16)+(p<<24),K[3][r]=d+(p<<8)+(g<<16)+(d<<24);for(f=l.length/2,r=0;r<f;r++)s=l[r+r],u[r]=s,a=l[r+r+1],h[r]=a,y[f-r-1]=I(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=U(s,u),a=Qy(U(a,h),8),n[r]=s+a&xy,n[r+1]=Qy(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,f){case 4:s=v[1][s]^My(y[3],0),a=v[0][a]^My(y[3],1),o=v[0][o]^My(y[3],2),c=v[1][c]^My(y[3],3);case 3:s=v[1][s]^My(y[2],0),a=v[1][a]^My(y[2],1),o=v[0][o]^My(y[2],2),c=v[0][c]^My(y[2],3);case 2:i[0][r]=K[0][v[0][v[0][s]^My(y[1],0)]^My(y[0],0)],i[1][r]=K[1][v[0][v[1][a]^My(y[1],1)]^My(y[0],1)],i[2][r]=K[2][v[1][v[0][o]^My(y[1],2)]^My(y[0],2)],i[3][r]=K[3][v[1][v[1][c]^My(y[1],3)]^My(y[0],3)]}},close:function(){n=[],i=[[],[],[],[]]},encrypt:function(e,i){t=e,r=i;const s=[Ry(t,r)^n[0],Ry(t,r+4)^n[1],Ry(t,r+8)^n[2],Ry(t,r+12)^n[3]];for(let e=0;e<8;e++)o(e,s);return Ty(t,r,s[2]^n[4]),Ty(t,r+4,s[3]^n[5]),Ty(t,r+8,s[0]^n[6]),Ty(t,r+12,s[1]^n[7]),r+=16,t},decrypt:function(e,i){t=e,r=i;const s=[Ry(t,r)^n[4],Ry(t,r+4)^n[5],Ry(t,r+8)^n[6],Ry(t,r+12)^n[7]];for(let e=7;e>=0;e--)c(e,s);Ty(t,r,s[2]^n[0]),Ty(t,r+4,s[3]^n[1]),Ty(t,r+8,s[0]^n[2]),Ty(t,r+12,s[1]^n[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function Fy(){}function Oy(e){this.bf=new Fy,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}Ly.keySize=Ly.prototype.keySize=32,Ly.blockSize=Ly.prototype.blockSize=16,Fy.prototype.BLOCKSIZE=8,Fy.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],Fy.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],Fy.prototype.NN=16,Fy.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},Fy.prototype._F=function(e){let t;const r=255&e,n=255&(e>>>=8),i=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][i],t^=this.sboxes[2][n],t+=this.sboxes[3][r],t},Fy.prototype._encryptBlock=function(e){let t,r=e[0],n=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[this.NN+0],n^=this.parray[this.NN+1],e[0]=this._clean(n),e[1]=this._clean(r)},Fy.prototype.encryptBlock=function(e){let t;const r=[0,0],n=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+n];this._encryptBlock(r);const i=[];for(t=0;t<this.BLOCKSIZE/2;++t)i[t+0]=r[0]>>>24-8*t&255,i[t+n]=r[1]>>>24-8*t&255;return i},Fy.prototype._decryptBlock=function(e){let t,r=e[0],n=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[1],n^=this.parray[0],e[0]=this._clean(n),e[1]=this._clean(r)},Fy.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let n=0;for(let t=0;t<4;++t)n=n<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^n}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const n=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(n),this.parray[t+0]=n[0],this.parray[t+1]=n[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(n),this.sboxes[t][r+0]=n[0],this.sboxes[t][r+1]=n[1]},Oy.keySize=Oy.prototype.keySize=16,Oy.blockSize=Oy.prototype.blockSize=8;const Ny=new Map(Object.entries({tripledes:Uy,cast5:Dy,twofish:Ly,blowfish:Oy}));var _y=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Ny});function Hy(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, got "+e)}function zy(e,...t){if(!((r=e)instanceof Uint8Array||ArrayBuffer.isView(r)&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error("Uint8Array expected of length "+t+", got length="+e.length)}function Gy(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}const qy=/* @__PURE__ */BigInt(2**32-1),jy=/* @__PURE__ */BigInt(32);function Vy(e,t=!1){return t?{h:Number(e&qy),l:Number(e>>jy&qy)}:{h:0|Number(e>>jy&qy),l:0|Number(e&qy)}}function Yy(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let i=0;i<e.length;i++){const{h:s,l:a}=Vy(e[i],t);[r[i],n[i]]=[s,a]}return[r,n]}const Zy=r&&"object"==typeof r&&"webcrypto"in r?r.webcrypto:r&&"object"==typeof r&&"randomBytes"in r?r:void 0,Jy=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),Xy=/* @__PURE__ */(()=>68===new Uint8Array(new Uint32Array([287454020]).buffer)[0])();function Wy(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function $y(e){return"string"==typeof e&&(e=function(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}(e)),zy(e),e}class ep{clone(){return this._cloneInto()}}const tp=[],rp=[],np=[],ip=/* @__PURE__ */BigInt(0),sp=/* @__PURE__ */BigInt(1),ap=/* @__PURE__ */BigInt(2),op=/* @__PURE__ */BigInt(7),cp=/* @__PURE__ */BigInt(256),up=/* @__PURE__ */BigInt(113);for(let e=0,t=sp,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],tp.push(2*(5*n+r)),rp.push((e+1)*(e+2)/2%64);let i=ip;for(let e=0;e<7;e++)t=(t<<sp^(t>>op)*up)%cp,t&ap&&(i^=sp<<(sp<</* @__PURE__ */BigInt(e))-sp);np.push(i)}const[hp,lp]=/* @__PURE__ */Yy(np,!0),fp=(e,t,r)=>r>32?((e,t,r)=>t<<r-32|e>>>64-r)(e,t,r):((e,t,r)=>e<<r|t>>>32-r)(e,t,r),yp=(e,t,r)=>r>32?((e,t,r)=>e<<r-32|t>>>64-r)(e,t,r):((e,t,r)=>t<<r|e>>>32-r)(e,t,r);class pp extends ep{constructor(e,t,r,n=!1,i=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=n,this.rounds=i,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,Hy(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=Jy(this.state)}keccak(){Xy||Wy(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const n=(t+8)%10,i=(t+2)%10,s=r[i],a=r[i+1],o=fp(s,a,1)^r[n],c=yp(s,a,1)^r[n+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],i=e[3];for(let r=0;r<24;r++){const n=rp[r],s=fp(t,i,n),a=yp(t,i,n),o=tp[r];t=e[o],i=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let n=0;n<10;n++)r[n]=e[t+n];for(let n=0;n<10;n++)e[t+n]^=~r[(n+2)%10]&r[(n+4)%10]}e[0]^=hp[n],e[1]^=lp[n]}r.fill(0)}(this.state32,this.rounds),Xy||Wy(this.state32),this.posOut=0,this.pos=0}update(e){Gy(this);const{blockLen:t,state:r}=this,n=(e=$y(e)).length;for(let i=0;i<n;){const s=Math.min(t-this.pos,n-i);for(let t=0;t<s;t++)r[this.pos++]^=e[i++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:n}=this;e[r]^=t,128&t&&r===n-1&&this.keccak(),e[n-1]^=128,this.keccak()}writeInto(e){Gy(this,!1),zy(e),this.finish();const t=this.state,{blockLen:r}=this;for(let n=0,i=e.length;n<i;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,i-n);e.set(t.subarray(this.posOut,this.posOut+s),n),this.posOut+=s,n+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return Hy(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(function(e,t){zy(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:n,rounds:i,enableXOF:s}=this;return e||(e=new pp(t,r,n,s,i)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=i,e.suffix=r,e.outputLen=n,e.enableXOF=s,e.destroyed=this.destroyed,e}}const dp=(e,t,r)=>function(e){const t=t=>e().update($y(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}((()=>new pp(t,e,r))),gp=/* @__PURE__ */dp(6,136,32),wp=/* @__PURE__ */dp(6,72,64),Ap=(e,t,r)=>function(e){const t=(t,r)=>e(r).update($y(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((n={})=>new pp(t,e,void 0===n.dkLen?r:n.dkLen,!0))),mp=/* @__PURE__ */Ap(31,168,16),bp=/* @__PURE__ */Ap(31,136,32),kp=zy,Ep=function(e=32){if(Zy&&"function"==typeof Zy.getRandomValues)return Zy.getRandomValues(new Uint8Array(e));if(Zy&&"function"==typeof Zy.randomBytes)return Zy.randomBytes(e);throw Error("crypto.getRandomValues must be defined")};function vp(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r}function Kp(...e){const t=e=>"number"==typeof e?e:e.bytesLen,r=e.reduce(((e,r)=>e+t(r)),0);return{bytesLen:r,encode:n=>{const i=new Uint8Array(r);for(let r=0,s=0;r<e.length;r++){const a=e[r],o=t(a),c="number"==typeof a?n[r]:a.encode(n[r]);kp(c,o),i.set(c,s),"number"!=typeof a&&c.fill(0),s+=o}return i},decode:n=>{kp(n,r);const i=[];for(const r of e){const e=t(r),s=n.subarray(0,e);i.push("number"==typeof r?s:r.decode(s)),n=n.subarray(e)}return i}}}function Sp(e,t){const r=t*e.bytesLen;return{bytesLen:r,encode:n=>{if(n.length!==t)throw Error(`vecCoder.encode: wrong length=${n.length}. Expected: ${t}`);const i=new Uint8Array(r);for(let t=0,r=0;t<n.length;t++){const s=e.encode(n[t]);i.set(s,r),s.fill(0),r+=s.length}return i},decode:t=>{kp(t,r);const n=[];for(let r=0;r<t.length;r+=e.bytesLen)n.push(e.decode(t.subarray(r,r+e.bytesLen)));return n}}}function Bp(...e){for(const t of e)if(Array.isArray(t))for(const e of t)e.fill(0);else t.fill(0)}function Ip(e){return(1<<e)-1}
-/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function Cp(e,t=8){const r=e.toString(2).padStart(8,"0").slice(-t).padStart(7,"0").split("").reverse().join("");return Number.parseInt(r,2)}const Up=e=>{const{newPoly:t,N:r,Q:n,F:i,ROOT_OF_UNITY:s,brvBits:a,isKyber:o}=e,c=(e,t=n)=>{const r=e%t|0;return 0|(r>=0?r:t+r)};const u=function(){const e=t(r);for(let t=0;t<r;t++){const r=Cp(t,a),i=BigInt(s)**BigInt(r)%BigInt(n);e[t]=0|Number(i)}return e}(),h=o?128:r,l=o?1:0,f={encode:e=>{for(let t=1,n=128;n>l;n>>=1)for(let i=0;i<r;i+=2*n){const r=u[t++];for(let t=i;t<i+n;t++){const i=c(r*e[t+n]);e[t+n]=0|c(e[t]-i),e[t]=0|c(e[t]+i)}}return e},decode:e=>{for(let t=h-1,n=1+l;n<h+l;n<<=1)for(let i=0;i<r;i+=2*n){const r=u[t--];for(let t=i;t<i+n;t++){const i=e[t];e[t]=c(i+e[t+n]),e[t+n]=c(r*(e[t+n]-i))}}for(let t=0;t<e.length;t++)e[t]=c(i*e[t]);return e}};return{mod:c,smod:(e,t=n)=>{const r=0|c(e,t);return 0|(r>t>>1?r-t:r)},nttZetas:u,NTT:f,bitsCoder:(e,n)=>{const i=Ip(e),s=e*(r/8);return{bytesLen:s,encode:t=>{const r=new Uint8Array(s);for(let s=0,a=0,o=0,c=0;s<t.length;s++)for(a|=(n.encode(t[s])&i)<<o,o+=e;o>=8;o-=8,a>>=8)r[c++]=a&Ip(o);return r},decode:s=>{const a=t(r);for(let t=0,r=0,o=0,c=0;t<s.length;t++)for(r|=s[t]<<o,o+=8;o>=e;o-=e,r>>=e)a[c++]=n.decode(r&i);return a}}}}},Pp=e=>(t,r)=>{r||(r=e.blockLen);const n=new Uint8Array(t.length+2);n.set(t);const i=t.length,s=new Uint8Array(r);let a=e.create({}),o=0,c=0;return{stats:()=>({calls:o,xofs:c}),get:(t,r)=>(n[i+0]=t,n[i+1]=r,a.destroy(),a=e.create({}).update(n),o++,()=>(c++,a.xofInto(s))),clean:()=>{a.destroy(),s.fill(0),n.fill(0)}}},Dp=/* @__PURE__ */Pp(mp),xp=/* @__PURE__ */Pp(bp),Qp=256,Rp=3329,{mod:Tp,nttZetas:Mp,NTT:Lp,bitsCoder:Fp}=Up({N:Qp,Q:Rp,F:3303,ROOT_OF_UNITY:17,newPoly:e=>new Uint16Array(e),brvBits:7,isKyber:!0}),Op=e=>Fp(e,(e=>{if(e>=12)return{encode:e=>e,decode:e=>e};const t=2**(e-1);return{encode:t=>((t<<e)+Rp/2)/Rp,decode:r=>r*Rp+t>>>e}})(e));function Np(e,t){for(let r=0;r<Qp;r++)e[r]=Tp(e[r]+t[r])}function _p(e,t){for(let a=0;a<128;a++){let o=Mp[64+(a>>1)];1&a&&(o=-o);const{c0:c,c1:u}=(r=e[2*a+0],n=e[2*a+1],i=t[2*a+0],s=t[2*a+1],{c0:Tp(n*s*o+r*i),c1:Tp(r*s+n*i)});e[2*a+0]=c,e[2*a+1]=u}var r,n,i,s;return e}function Hp(e){const t=new Uint16Array(Qp);for(let r=0;r<Qp;){const n=e();if(n.length%3)throw Error("SampleNTT: unaligned block");for(let e=0;r<Qp&&e+3<=n.length;e+=3){const i=4095&(n[e+0]|n[e+1]<<8),s=4095&(n[e+1]>>4|n[e+2]<<4);i<Rp&&(t[r++]=i),r<Qp&&s<Rp&&(t[r++]=s)}}return t}function zp(e,t,r,n){const i=e(n*Qp/4,t,r),s=new Uint16Array(Qp),a=Jy(i);let o=0;for(let e=0,t=0,r=0,i=0;e<a.length;e++){let c=a[e];for(let e=0;e<32;e++)r+=1&c,c>>=1,o+=1,o===n?(i=r,r=0):o===2*n&&(s[t++]=Tp(i-r),r=0,o=0)}if(o)throw Error("sampleCBD: leftover bits: "+o);return s}const Gp=e=>{const{K:t,PRF:r,XOF:n,HASH512:i,ETA1:s,ETA2:a,du:o,dv:c}=e,u=Op(1),h=Op(c),l=Op(o),f=Kp(Sp(Op(12),t),32),y=Sp(Op(12),t),p=Kp(Sp(l,t),h),d=Kp(32,32);return{secretCoder:y,secretKeyLen:y.bytesLen,publicKeyLen:f.bytesLen,cipherTextLen:p.bytesLen,keygen:e=>{const a=new Uint8Array(33);a.set(e),a[32]=t;const o=i(a),[c,u]=d.decode(o),h=[],l=[];for(let e=0;e<t;e++)h.push(Lp.encode(zp(r,u,e,s)));const p=n(c);for(let e=0;e<t;e++){const n=Lp.encode(zp(r,u,t+e,s));for(let r=0;r<t;r++){Np(n,_p(Hp(p.get(r,e)),h[r]))}l.push(n)}p.clean();const g={publicKey:f.encode([l,c]),secretKey:y.encode(h)};return Bp(c,u,h,l,a,o),g},encrypt:(e,i,o)=>{const[c,h]=f.decode(e),l=[];for(let e=0;e<t;e++)l.push(Lp.encode(zp(r,o,e,s)));const y=n(h),d=new Uint16Array(Qp),g=[];for(let e=0;e<t;e++){const n=zp(r,o,t+e,a),i=new Uint16Array(Qp);for(let r=0;r<t;r++){Np(i,_p(Hp(y.get(e,r)),l[r]))}Np(n,Lp.decode(i)),g.push(n),Np(d,_p(c[e],l[e])),i.fill(0)}y.clean();const w=zp(r,o,2*t,a);Np(w,Lp.decode(d));const A=u.decode(i);return Np(A,w),Bp(c,l,d,w),p.encode([g,A])},decrypt:(e,r)=>{const[n,i]=p.decode(e),s=y.decode(r),a=new Uint16Array(Qp);for(let e=0;e<t;e++)Np(a,_p(s[e],Lp.encode(n[e])));return function(e,t){for(let r=0;r<Qp;r++)e[r]=Tp(e[r]-t[r])}(i,Lp.decode(a)),Bp(a,s,n),u.encode(i)}}};function qp(e){const t=Gp(e),{HASH256:r,HASH512:n,KDF:i}=e,{secretCoder:s,cipherTextLen:a}=t,o=t.publicKeyLen,c=Kp(t.secretKeyLen,t.publicKeyLen,32,32),u=c.bytesLen;return{publicKeyLen:o,msgLen:32,keygen:(e=Ep(64))=>{kp(e,64);const{publicKey:n,secretKey:i}=t.keygen(e.subarray(0,32)),s=r(n),a=c.encode([i,n,s,e.subarray(32)]);return Bp(i,s),{publicKey:n,secretKey:a}},encapsulate:(i,a=Ep(32))=>{kp(i,o),kp(a,32);const c=i.subarray(0,384*e.K),u=s.encode(s.decode(c.slice()));if(!vp(u,c))throw Bp(u),Error("ML-KEM.encapsulate: wrong publicKey modulus");Bp(u);const h=n.create().update(a).update(r(i)).digest(),l=t.encrypt(i,a,h.subarray(32,64));return h.subarray(32).fill(0),{cipherText:l,sharedSecret:h.subarray(0,32)}},decapsulate:(e,r)=>{kp(r,u),kp(e,a);const[s,o,h,l]=c.decode(r),f=t.decrypt(e,s),y=n.create().update(f).update(h).digest(),p=y.subarray(0,32),d=t.encrypt(o,f,y.subarray(32,64)),g=vp(e,d),w=i.create({dkLen:32}).update(l).update(e).digest();return Bp(f,d,g?w:p),g?p:w}}}const jp=/* @__PURE__ */qp({...{HASH256:gp,HASH512:wp,KDF:bp,XOF:Dp,PRF:function(e,t,r){return bp.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}},...{N:Qp,Q:Rp,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192}}),Vp=256,Yp=8380417,Zp=95232,Jp=261888,Xp={K:6,L:5,D:13,GAMMA1:2**19,GAMMA2:Jp,TAU:49,ETA:4,OMEGA:55},Wp=e=>new Int32Array(e),{mod:$p,smod:ed,NTT:td,bitsCoder:rd}=Up({N:Vp,Q:Yp,F:8347681,ROOT_OF_UNITY:1753,newPoly:Wp,isKyber:!1,brvBits:8}),nd=e=>e,id=(e,t=nd,r=nd)=>rd(e,{encode:e=>t(r(e)),decode:e=>r(t(e))}),sd=(e,t)=>{for(let r=0;r<e.length;r++)e[r]=$p(e[r]+t[r]);return e},ad=(e,t)=>{for(let r=0;r<e.length;r++)e[r]=$p(e[r]-t[r]);return e},od=e=>{for(let t=0;t<Vp;t++)e[t]<<=13;return e},cd=(e,t)=>{for(let r=0;r<Vp;r++)if(Math.abs(ed(e[r]))>=t)return!0;return!1},ud=(e,t)=>{const r=Wp(Vp);for(let n=0;n<e.length;n++)r[n]=$p(e[n]*t[n]);return r};function hd(e){const t=Wp(Vp);for(let r=0;r<Vp;){const n=e();if(n.length%3)throw Error("RejNTTPoly: unaligned block");for(let e=0;r<Vp&&e<=n.length-3;e+=3){const i=8388607&(n[e+0]|n[e+1]<<8|n[e+2]<<16);i<Yp&&(t[r++]=i)}}return t}const ld=new Uint8Array(0);function fd(e){const{K:t,L:r,GAMMA1:n,GAMMA2:i,TAU:s,ETA:a,OMEGA:o}=e,{CRH_BYTES:c,TR_BYTES:u,C_TILDE_BYTES:h,XOF128:l,XOF256:f}=e;if(![2,4].includes(a))throw Error("Wrong ETA");if(![1<<17,1<<19].includes(n))throw Error("Wrong GAMMA1");if(![Zp,Jp].includes(i))throw Error("Wrong GAMMA2");const y=s*a,p=e=>{const t=$p(e),r=0|ed(t,2*i);if(t-r==Yp-1)return{r1:0,r0:r-1|0};return{r1:0|Math.floor((t-r)/(2*i)),r0:r}},d=e=>p(e).r1,g=e=>p(e).r0,w=(e,t)=>{const r=Math.floor((Yp-1)/(2*i)),{r1:n,r0:s}=p(t);return 1===e?s>0?0|$p(n+1,r):0|$p(n-1,r):0|n},A=e=>{const t=$p(e),r=0|ed(t,8192);return{r1:0|Math.floor((t-r)/8192),r0:r}},m={bytesLen:o+t,encode:e=>{if(!1===e)throw Error("hint.encode: hint is false");const r=new Uint8Array(o+t);for(let n=0,i=0;n<t;n++){for(let t=0;t<Vp;t++)0!==e[n][t]&&(r[i++]=t);r[o+n]=i}return r},decode:e=>{const r=[];let n=0;for(let i=0;i<t;i++){const t=Wp(Vp);if(e[o+i]<n||e[o+i]>o)return!1;for(let r=n;r<e[o+i];r++){if(r>n&&e[r]<=e[r-1])return!1;t[e[r]]=1}n=e[o+i],r.push(t)}for(let t=n;t<o;t++)if(0!==e[t])return!1;return r}},b=id(2===a?3:4,(e=>a-e),(e=>{if(!(-a<=e&&e<=a))throw Error(`malformed key s1/s3 ${e} outside of ETA range [${-a}, ${a}]`);return e})),k=id(13,(e=>4096-e)),E=id(10),v=id(n===1<<17?18:20,(e=>ed(n-e))),K=Sp(id(i===Zp?6:4),t),S=Kp(32,Sp(E,t)),B=Kp(32,32,u,Sp(b,r),Sp(b,t),Sp(k,t)),I=Kp(h,Sp(v,r),m),C=2===a?e=>e<15&&2-e%5:e=>e<9&&4-e;function U(e){const t=Wp(Vp);for(let r=0;r<Vp;){const n=e();for(let e=0;r<Vp&&e<n.length;e+=1){const i=C(15&n[e]),s=C(n[e]>>4&15);!1!==i&&(t[r++]=i),r<Vp&&!1!==s&&(t[r++]=s)}}return t}const P=e=>{const t=Wp(Vp),r=bp.create({}).update(e),n=new Uint8Array(bp.blockLen);r.xofInto(n);const i=n.slice(0,8);for(let e=Vp-s,a=8,o=0,c=0;e<Vp;e++){let s=e+1;for(;s>e;)s=n[a++],a<bp.blockLen||(r.xofInto(n),a=0);t[e]=t[s],t[s]=1-((i[o]>>c++&1)<<1),c>=8&&(o++,c=0)}return t},D=e=>{const t=Wp(Vp),r=Wp(Vp);for(let n=0;n<e.length;n++){const{r0:i,r1:s}=A(e[n]);t[n]=i,r[n]=s}return{r0:t,r1:r}},x=(e,t)=>{for(let r=0;r<Vp;r++)e[r]=w(t[r],e[r]);return e},Q=(e,t)=>{const r=Wp(Vp);let n=0;for(let o=0;o<Vp;o++){const c=(s=e[o],a=t[o],s<=i||s>Yp-i||s===Yp-i&&0===a?0:1);r[o]=c,n+=c}var s,a;return{v:r,cnt:n}},R=Kp(32,64,32),T={signRandBytes:32,keygen:(e=Ep(32))=>{const n=new Uint8Array(34);n.set(e),n[32]=t,n[33]=r;const[i,s,a]=R.decode(bp(n,{dkLen:R.bytesLen})),o=f(s),c=[];for(let e=0;e<r;e++)c.push(U(o.get(255&e,e>>8&255)));const h=[];for(let e=r;e<r+t;e++)h.push(U(o.get(255&e,e>>8&255)));const y=c.map((e=>td.encode(e.slice()))),p=[],d=[],g=l(i),w=Wp(Vp);for(let e=0;e<t;e++){w.fill(0);for(let t=0;t<r;t++){const r=hd(g.get(t,e));sd(w,ud(r,y[t]))}td.decode(w);const{r0:t,r1:n}=D(sd(w,h[e]));p.push(t),d.push(n)}const A=S.encode([i,d]),m=bp(A,{dkLen:u}),b=B.encode([i,a,m,c,h,p]);return g.clean(),o.clean(),Bp(i,s,a,c,h,y,w,p,d,m,n),{publicKey:A,secretKey:b}},sign:(e,s,a)=>{const[u,p,w,A,m,b]=B.decode(e),k=[],E=l(u);for(let e=0;e<t;e++){const t=[];for(let n=0;n<r;n++)t.push(hd(E.get(n,e)));k.push(t)}E.clean();for(let e=0;e<r;e++)td.encode(A[e]);for(let e=0;e<t;e++)td.encode(m[e]),td.encode(b[e]);const S=bp.create({dkLen:c}).update(w).update(s).digest(),C=a||new Uint8Array(32);kp(C);const U=bp.create({dkLen:c}).update(p).update(C).update(S).digest();kp(U,c);const D=f(U,v.bytesLen);e:for(let e=0;;){const s=[];for(let t=0;t<r;t++,e++)s.push(v.decode(D.get(255&e,e>>8)()));const a=s.map((e=>td.encode(e.slice()))),c=[];for(let e=0;e<t;e++){const t=Wp(Vp);for(let n=0;n<r;n++)sd(t,ud(k[e][n],a[n]));td.decode(t),c.push(t)}const u=c.map((e=>e.map(d))),l=bp.create({dkLen:h}).update(S).update(K.encode(u)).digest(),f=td.encode(P(l)),p=A.map((e=>ud(e,f)));for(let e=0;e<r;e++)if(sd(td.decode(p[e]),s[e]),cd(p[e],n-y))continue e;let w=0;const E=[];for(let e=0;e<t;e++){const t=td.decode(ud(m[e],f)),r=ad(c[e],t).map(g);if(cd(r,i-y))continue e;const n=td.decode(ud(b[e],f));if(cd(n,i))continue e;sd(r,n);const s=Q(r,u[e]);E.push(s.v),w+=s.cnt}if(w>o)continue;D.clean();const B=I.encode([l,p,E]);return Bp(l,p,E,f,u,c,a,s,U,S,A,m,b,...k),B}throw Error("Unreachable code path reached, report this error")},verify:(e,i,s)=>{const[a,f]=S.decode(e),p=bp(e,{dkLen:u});if(s.length!==I.bytesLen)return!1;const[d,g,w]=I.decode(s);if(!1===w)return!1;for(let e=0;e<r;e++)if(cd(g[e],n-y))return!1;const A=bp.create({dkLen:c}).update(p).update(i).digest(),m=td.encode(P(d)),b=g.map((e=>e.slice()));for(let e=0;e<r;e++)td.encode(b[e]);const k=[],E=l(a);for(let e=0;e<t;e++){const t=ud(td.encode(od(f[e])),m),n=Wp(Vp);for(let t=0;t<r;t++){const r=hd(E.get(t,e));sd(n,ud(r,b[t]))}const i=td.decode(ad(n,t));k.push(x(i,w[e]))}E.clean();const v=bp.create({dkLen:h}).update(A).update(K.encode(k)).digest();for(const e of w){const t=e.reduce(((e,t)=>e+t),0);if(!(t<=o))return!1}for(const e of g)if(cd(e,n-y))return!1;return vp(d,v)}},M=(e,t=ld)=>{if(kp(e),kp(t),t.length>255)throw Error("context should be less than 255 bytes");return function(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];zy(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}(new Uint8Array([0,t.length]),t,e)};return{internal:T,keygen:T.keygen,signRandBytes:T.signRandBytes,sign:(e,t,r=ld,n)=>{const i=M(t,r),s=T.sign(e,i,n);return i.fill(0),s},verify:(e,t,r,n=ld)=>T.verify(e,M(t,n),r)}}const yd=/* @__PURE__ */fd({...Xp,CRH_BYTES:64,TR_BYTES:64,C_TILDE_BYTES:48,XOF128:Dp,XOF256:xp});var pd=/*#__PURE__*/Object.freeze({__proto__:null,ml_dsa65:yd,ml_kem768:jp});function dd(e,t,r,n){e[t]+=r[n],e[t+1]+=r[n+1]+(e[t]<r[n])}function gd(e,t){e[0]+=t,e[1]+=e[0]<t}function wd(e,t,r,n,i,s,a,o){dd(e,r,e,n),dd(e,r,t,a);let c=e[s]^e[r],u=e[s+1]^e[r+1];e[s]=u,e[s+1]=c,dd(e,i,e,s),c=e[n]^e[i],u=e[n+1]^e[i+1],e[n]=c>>>24^u<<8,e[n+1]=u>>>24^c<<8,dd(e,r,e,n),dd(e,r,t,o),c=e[s]^e[r],u=e[s+1]^e[r+1],e[s]=c>>>16^u<<16,e[s+1]=u>>>16^c<<16,dd(e,i,e,s),c=e[n]^e[i],u=e[n+1]^e[i+1],e[n]=u>>>31^c<<1,e[n+1]=c>>>31^u<<1}const Ad=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),md=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function bd(e,t){const r=new Uint32Array(32),n=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=Ad[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const i=t?4294967295:0;r[28]^=i,r[29]^=i;for(let e=0;e<12;e++){const t=e<<4;wd(r,n,0,8,16,24,md[t+0],md[t+1]),wd(r,n,2,10,18,26,md[t+2],md[t+3]),wd(r,n,4,12,20,28,md[t+4],md[t+5]),wd(r,n,6,14,22,30,md[t+6],md[t+7]),wd(r,n,0,10,20,30,md[t+8],md[t+9]),wd(r,n,2,12,22,24,md[t+10],md[t+11]),wd(r,n,4,14,16,26,md[t+12],md[t+13]),wd(r,n,6,8,18,28,md[t+14],md[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class kd{constructor(e,t,r,n){const i=new Uint8Array(64);this.S={b:new Uint8Array(Kd),h:new Uint32Array(vd/4),t0:new Uint32Array(2),c:0,outlen:e},i[0]=e,t&&(i[1]=t.length),i[2]=1,i[3]=1,r&&i.set(r,32),n&&i.set(n,48);const s=new Uint32Array(i.buffer,i.byteOffset,i.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=Ad[e]^s[e];if(t){const e=new Uint8Array(Kd);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===Kd&&(gd(this.S.t0,this.S.c),bd(this.S,!1),this.S.c=0);let r=Kd-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const n=Math.min(r,e.length-t);this.S.c+=n,t+=n}return this}digest(e){gd(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=Kd,bd(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function Ed(e,t,r,n){if(e>vd)throw Error(`outlen must be at most ${vd} (given: ${e})`);return new kd(e,t,r,n)}const vd=64,Kd=128,Sd=1024,Bd=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function Id(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function Cd(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let n=t;for(let t=r;t<r+7;t++)e[t]=n,n=(n-e[t])/256;return e}function Ud(e,t,r){const n=new Uint8Array(64),i=new Uint8Array(4+t.length);if(Id(i,e,0),i.set(t,4),e<=64)return Ed(e).update(i).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)Ed(64).update(0===e?i:n).digest(n),r.set(n.subarray(0,32),32*e);const a=new Uint8Array(Ed(e-32*s).update(n).digest());return r.set(a,32*s),r}function Pd(e,t,r,n){return e.fn.XOR(t.byteOffset,r.byteOffset,n.byteOffset),t}function Dd(e,t,r,n){return e.fn.G(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function xd(e,t,r,n){return e.fn.G2(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function*Qd(e,t,r,n,i,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);Cd(c,t,0),Cd(c,r,8),Cd(c,n,16),Cd(c,i,24),Cd(c,s,32),Cd(c,2,40);for(let t=1;t<=a;t++){Cd(e.refs.prngTmp,t,c.length);const r=xd(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}function Rd(e,{memory:t,instance:r}){if(!Bd)throw Error("BigEndian system not supported");const n=function({type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,parallelism:o,memorySize:c,passes:u}){const h=(e,t,r,n)=>{if(t<r||t>n)throw Error(`${e} size should be between ${r} and ${n} bytes`)};if(2!==e||19!==t)throw Error("Unsupported type or version");return h("password",n,8,4294967295),h("salt",i,8,4294967295),h("tag",r,4,4294967295),h("memory",c,8*o,4294967295),s&&h("associated data",s,0,4294967295),a&&h("secret",a,0,32),{type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,lanes:o,memorySize:c,passes:u}}({type:2,version:19,...e}),{G:i,G2:s,xor:a,getLZ:o}=r.exports,c={},u={};u.G=i,u.G2=s,u.XOR=a;const h=4*n.lanes*Math.floor(n.memorySize/(4*n.lanes)),l=h*Sd+10240;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/65536);t.grow(e)}let f=0;c.gZ=new Uint8Array(t.buffer,f,Sd),f+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,f,Sd),f+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,f,Sd),f+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,f,1024),f+=c.ZERO1024.length;const y=new Uint32Array(t.buffer,f,2);f+=y.length*Uint32Array.BYTES_PER_ELEMENT;const p={fn:u,refs:c},d=new Uint8Array(t.buffer,f,Sd);f+=d.length;const g=new Uint8Array(t.buffer,f,n.memorySize*Sd),w=new Uint8Array(t.buffer,0,f),A=function(e){const t=Ed(64),r=new Uint8Array(4),n=new Uint8Array(24);Id(n,e.lanes,0),Id(n,e.tagLength,4),Id(n,e.memorySize,8),Id(n,e.passes,12),Id(n,e.version,16),Id(n,e.type,20);const i=[n];e.password?(i.push(Id(new Uint8Array(4),e.password.length,0)),i.push(e.password)):i.push(r);e.salt?(i.push(Id(new Uint8Array(4),e.salt.length,0)),i.push(e.salt)):i.push(r);e.secret?(i.push(Id(new Uint8Array(4),e.secret.length,0)),i.push(e.secret)):i.push(r);e.ad?(i.push(Id(new Uint8Array(4),e.ad.length,0)),i.push(e.ad)):i.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach((e=>{r.set(e,n),n+=e.length})),r}(i));const s=t.digest();return new Uint8Array(s)}(n),m=h/n.lanes,b=Array(n.lanes).fill(null).map((()=>Array(m))),k=(e,t)=>(b[e][t]=g.subarray(e*m*1024+1024*t,e*m*1024+1024*t+Sd),b[e][t]);for(let e=0;e<n.lanes;e++){const t=new Uint8Array(A.length+8);t.set(A),Id(t,0,A.length),Id(t,e,A.length+4),Ud(Sd,t,k(e,0)),Id(t,1,A.length),Ud(Sd,t,k(e,1))}const E=m/4;for(let e=0;e<n.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let i=0;i<n.lanes;i++){let s=0===t&&0===e?2:0;const a=r?Qd(p,e,i,t,h,n.passes,E,s):null;for(;s<E;s++){const c=t*E+s,u=c>0?b[i][c-1]:b[i][m-1],h=r?a.next().value:u;o(y.byteOffset,h.byteOffset,i,n.lanes,e,t,s,4,E);const l=y[0],f=y[1];0===e&&k(i,c),Dd(p,u,b[l][f],e>0?d:b[i][c]),e>0&&Pd(p,b[i][c],d,b[i][c])}}}const v=b[0][m-1];for(let e=1;e<n.lanes;e++)Pd(p,v,v,b[e][m-1]);const K=Ud(n.tagLength,v,new Uint8Array(n.tagLength));return w.fill(0),t.grow(0),K}let Td;async function Md(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),n=await async function(e,t,r){const n={env:{memory:e}};if(void 0===Td)try{const e=await t(n);return Td=!0,e}catch(e){Td=!1}return(Td?t:r)(n)}(r,e,t);return e=>Rd(e,{instance:n.instance,memory:r})}function Ld(e,t,r,n){return function(e,t,r){var n=r?WebAssembly.instantiateStreaming:WebAssembly.instantiate,i=r?WebAssembly.compileStreaming:WebAssembly.compile;return t?n(e,t):i(e)}(Buffer.from(r,"base64"),n,!1)}var Fd,Od,Nd,_d,Hd,zd,Gd,qd,jd=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Md((e=>Ld(0,0,"AGFzbQEAAAABKwdgBH9/f38AYAABf2AAAGADf39/AGAJf39/f39/f39/AX9gAX8AYAF/AX8CEwEDZW52Bm1lbW9yeQIBkAiAgAQDCgkCAwAABAEFBgEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwACAkcyAAMFZ2V0TFoABBlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAgJc3RhY2tTYXZlAAUMc3RhY2tSZXN0b3JlAAYKc3RhY2tBbGxvYwAHCQcBAEEBCwEACs0gCQMAAQtYAQJ/A0AgACAEQQR0IgNqIAIgA2r9AAQAIAEgA2r9AAQA/VH9CwQAIAAgA0EQciIDaiACIANq/QAEACABIANq/QAEAP1R/QsEACAEQQJqIgRBwABHDQALC7ceAgt7A38DQCADIBFBBHQiD2ogASAPav0ABAAgACAPav0ABAD9USIF/QsEACACIA9qIAX9CwQAIAMgD0EQciIPaiABIA9q/QAEACAAIA9q/QAEAP1RIgX9CwQAIAIgD2ogBf0LBAAgEUECaiIRQcAARw0ACwNAIAMgEEEHdGoiAEEQaiAA/QAEcCAA/QAEMCIFIAD9AAQQIgT9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAQgBP0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9USIJQSD9ywEgCUEg/c0B/VAiCSAA/QAEUCIG/c4BIAkgCf0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIGIAX9USIFQSj9ywEgBUEY/c0B/VAiCCAE/c4BIAggCP0NAAECAwgJCgsAAQIDCAkKCyAEIAT9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIKIAogCf1RIgVBMP3LASAFQRD9zQH9UCIFIAb9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgkgCP1RIgRBAf3LASAEQT/9zQH9UCIMIAD9AARgIAD9AAQgIgQgAP0ABAAiBv3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBv1RIghBIP3LASAIQSD9zQH9UCIIIABBQGsiAf0ABAAiB/3OASAIIAj9DQABAgMICQoLAAECAwgJCgsgByAH/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiByAE/VEiBEEo/csBIARBGP3NAf1QIgsgBv3OASALIAv9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAI/VEiBEEw/csBIARBEP3NAf1QIgQgB/3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgByAH/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCCAL/VEiB0EB/csBIAdBP/3NAf1QIg0gDf0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eHyIH/c4BIAcgB/0NAAECAwgJCgsAAQIDCAkKCyAKIAr9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIKIAQgBSAF/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/VEiC0Eg/csBIAtBIP3NAf1QIgsgCP3OASALIAv9DQABAgMICQoLAAECAwgJCgsgCCAI/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCCAH/VEiB0Eo/csBIAdBGP3NAf1QIgcgCv3OASAHIAf9DQABAgMICQoLAAECAwgJCgsgCiAK/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiDv0LBAAgACAGIA0gDCAM/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4fIgr9zgEgCiAK/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgYgBSAEIAT9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9USIFQSD9ywEgBUEg/c0B/VAiBSAJ/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAJIAn9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJIAr9USIEQSj9ywEgBEEY/c0B/VAiCiAG/c4BIAogCv0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIE/QsEACAAIAQgBf1RIgVBMP3LASAFQRD9zQH9UCIFIA4gC/1RIgRBMP3LASAEQRD9zQH9UCIEIAT9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwRgIAAgBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwRwIAEgBCAI/c4BIAQgBP0NAAECAwgJCgsAAQIDCAkKCyAIIAj9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIE/QsEACAAIAUgCf3OASAFIAX9DQABAgMICQoLAAECAwgJCgsgCSAJ/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCf0LBFAgACAEIAf9USIFQQH9ywEgBUE//c0B/VAiBSAJIAr9USIEQQH9ywEgBEE//c0B/VAiBCAE/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEICAAIAQgBSAF/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEMCAQQQFqIhBBCEcNAAtBACEQA0AgAyAQQQR0aiIAQYABaiAA/QAEgAcgAP0ABIADIgUgAP0ABIABIgT9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAQgBP0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9USIJQSD9ywEgCUEg/c0B/VAiCSAA/QAEgAUiBv3OASAJIAn9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAF/VEiBUEo/csBIAVBGP3NAf1QIgggBP3OASAIIAj9DQABAgMICQoLAAECAwgJCgsgBCAE/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiCiAKIAn9USIFQTD9ywEgBUEQ/c0B/VAiBSAG/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJIAj9USIEQQH9ywEgBEE//c0B/VAiDCAA/QAEgAYgAP0ABIACIgQgAP0ABAAiBv3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBv1RIghBIP3LASAIQSD9zQH9UCIIIAD9AASABCIH/c4BIAggCP0NAAECAwgJCgsAAQIDCAkKCyAHIAf9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIHIAT9USIEQSj9ywEgBEEY/c0B/VAiCyAG/c4BIAsgC/0NAAECAwgJCgsAAQIDCAkKCyAGIAb9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIGIAj9USIEQTD9ywEgBEEQ/c0B/VAiBCAH/c4BIAQgBP0NAAECAwgJCgsAAQIDCAkKCyAHIAf9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIIIAv9USIHQQH9ywEgB0E//c0B/VAiDSAN/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4fIgf9zgEgByAH/Q0AAQIDCAkKCwABAgMICQoLIAogCv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgogBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9USILQSD9ywEgC0Eg/c0B/VAiCyAI/c4BIAsgC/0NAAECAwgJCgsAAQIDCAkKCyAIIAj9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIIIAf9USIHQSj9ywEgB0EY/c0B/VAiByAK/c4BIAcgB/0NAAECAwgJCgsAAQIDCAkKCyAKIAr9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIO/QsEACAAIAYgDSAMIAz9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh8iCv3OASAKIAr9DQABAgMICQoLAAECAwgJCgsgBiAG/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBiAFIAQgBP0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/1RIgVBIP3LASAFQSD9zQH9UCIFIAn9zgEgBSAF/Q0AAQIDCAkKCwABAgMICQoLIAkgCf0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgkgCv1RIgRBKP3LASAEQRj9zQH9UCIKIAb9zgEgCiAK/Q0AAQIDCAkKCwABAgMICQoLIAYgBv0NAAECAwgJCgsAAQIDCAkKC/3eAUEB/csB/c4BIgT9CwQAIAAgBCAF/VEiBUEw/csBIAVBEP3NAf1QIgUgDiAL/VEiBEEw/csBIARBEP3NAf1QIgQgBP0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/0LBIAGIAAgBCAFIAX9DQABAgMEBQYHEBESExQVFhf9DQgJCgsMDQ4PGBkaGxwdHh/9CwSAByAAIAQgCP3OASAEIAT9DQABAgMICQoLAAECAwgJCgsgCCAI/Q0AAQIDCAkKCwABAgMICQoL/d4BQQH9ywH9zgEiBP0LBIAEIAAgBSAJ/c4BIAUgBf0NAAECAwgJCgsAAQIDCAkKCyAJIAn9DQABAgMICQoLAAECAwgJCgv93gFBAf3LAf3OASIJ/QsEgAUgACAEIAf9USIFQQH9ywEgBUE//c0B/VAiBSAJIAr9USIEQQH9ywEgBEE//c0B/VAiBCAE/Q0AAQIDBAUGBxAREhMUFRYX/Q0ICQoLDA0ODxgZGhscHR4f/QsEgAIgACAEIAUgBf0NAAECAwQFBgcQERITFBUWF/0NCAkKCwwNDg8YGRobHB0eH/0LBIADIBBBAWoiEEEIRw0AC0EAIRADQCACIBBBBHQiAGoiASAAIANq/QAEACAB/QAEAP1R/QsEACACIABBEHIiAWoiDyABIANq/QAEACAP/QAEAP1R/QsEACACIABBIHIiAWoiDyABIANq/QAEACAP/QAEAP1R/QsEACACIABBMHIiAGoiASAAIANq/QAEACAB/QAEAP1R/QsEACAQQQRqIhBBwABHDQALCxYAIAAgASACIAMQAiAAIAIgAiADEAILewIBfwF+IAIhCSABNQIAIQogBCAFcgRAIAEoAgQgA3AhCQsgACAJNgIAIAAgB0EBayAFIAQbIAhsIAZBAWtBAEF/IAYbIAIgCUYbaiIBIAVBAWogCGxBACAEG2ogAa0gCiAKfkIgiH5CIIinQX9zaiAHIAhscDYCBCAACwQAIwALBgAgACQACxAAIwAgAGtBcHEiACQAIAALBQBBgAgL",e)),(e=>Ld(0,0,"AGFzbQEAAAABPwhgBH9/f38AYAABf2AAAGADf39/AGARf39/f39/f39/f39/f39/f38AYAl/f39/f39/f38Bf2ABfwBgAX8BfwITAQNlbnYGbWVtb3J5AgGQCICABAMLCgIDBAAABQEGBwEEBQFwAQICBgkBfwFBkIjAAgsHfQoDeG9yAAEBRwADAkcyAAQFZ2V0TFoABRlfX2luZGlyZWN0X2Z1bmN0aW9uX3RhYmxlAQALX2luaXRpYWxpemUAABBfX2Vycm5vX2xvY2F0aW9uAAkJc3RhY2tTYXZlAAYMc3RhY2tSZXN0b3JlAAcKc3RhY2tBbGxvYwAICQcBAEEBCwEACssaCgMAAQtQAQJ/A0AgACAEQQN0IgNqIAIgA2opAwAgASADaikDAIU3AwAgACADQQhyIgNqIAIgA2opAwAgASADaikDAIU3AwAgBEECaiIEQYABRw0ACwveDwICfgF/IAAgAUEDdGoiEyATKQMAIhEgACAFQQN0aiIBKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA1BA3RqIgUgESAFKQMAhUIgiSIRNwMAIAAgCUEDdGoiCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIoiSIRNwMAIBMgESATKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAFIBEgBSkDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgASARIAEpAwCFQgGJNwMAIAAgAkEDdGoiDSANKQMAIhEgACAGQQN0aiICKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA5BA3RqIgYgESAGKQMAhUIgiSIRNwMAIAAgCkEDdGoiCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIoiSIRNwMAIA0gESANKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAKIBEgCikDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAiARIAIpAwCFQgGJNwMAIAAgA0EDdGoiDiAOKQMAIhEgACAHQQN0aiIDKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIA9BA3RqIgcgESAHKQMAhUIgiSIRNwMAIAAgC0EDdGoiCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAMgESADKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAHIBEgBykDAIVCMIkiETcDACALIBEgCykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQgGJNwMAIAAgBEEDdGoiDyAPKQMAIhEgACAIQQN0aiIEKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAAIBBBA3RqIgggESAIKQMAhUIgiSIRNwMAIAAgDEEDdGoiACARIAApAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA8gESAPKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAIIBEgCCkDAIVCMIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIBMgEykDACIRIAIpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAggESAIKQMAhUIgiSIRNwMAIAsgESALKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACACIBEgAikDAIVCKIkiETcDACATIBEgEykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgCCARIAgpAwCFQjCJIhE3AwAgCyARIAspAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAIgESACKQMAhUIBiTcDACANIA0pAwAiESADKQMAIhJ8IBFCAYZC/v///x+DIBJC/////w+DfnwiETcDACAFIBEgBSkDAIVCIIkiETcDACAAIBEgACkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgAyARIAMpAwCFQiiJIhE3AwAgDSARIA0pAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAUgESAFKQMAhUIwiSIRNwMAIAAgESAAKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACADIBEgAykDAIVCAYk3AwAgDiAOKQMAIhEgBCkDACISfCARQgGGQv7///8fgyASQv////8Pg358IhE3AwAgBiARIAYpAwCFQiCJIhE3AwAgCSARIAkpAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAQgESAEKQMAhUIoiSIRNwMAIA4gESAOKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACAGIBEgBikDAIVCMIkiETcDACAJIBEgCSkDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgBCARIAQpAwCFQgGJNwMAIA8gDykDACIRIAEpAwAiEnwgEUIBhkL+////H4MgEkL/////D4N+fCIRNwMAIAcgESAHKQMAhUIgiSIRNwMAIAogESAKKQMAIhJ8IBFC/////w+DIBJCAYZC/v///x+DfnwiETcDACABIBEgASkDAIVCKIkiETcDACAPIBEgDykDACISfCARQv////8PgyASQgGGQv7///8fg358IhE3AwAgByARIAcpAwCFQjCJIhE3AwAgCiARIAopAwAiEnwgEUL/////D4MgEkIBhkL+////H4N+fCIRNwMAIAEgESABKQMAhUIBiTcDAAvdCAEPfwNAIAIgBUEDdCIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAIgBkEIciIGaiABIAZqKQMAIAAgBmopAwCFNwMAIAVBAmoiBUGAAUcNAAsDQCADIARBA3QiAGogACACaikDADcDACADIARBAXIiAEEDdCIBaiABIAJqKQMANwMAIAMgBEECciIBQQN0IgVqIAIgBWopAwA3AwAgAyAEQQNyIgVBA3QiBmogAiAGaikDADcDACADIARBBHIiBkEDdCIHaiACIAdqKQMANwMAIAMgBEEFciIHQQN0IghqIAIgCGopAwA3AwAgAyAEQQZyIghBA3QiCWogAiAJaikDADcDACADIARBB3IiCUEDdCIKaiACIApqKQMANwMAIAMgBEEIciIKQQN0IgtqIAIgC2opAwA3AwAgAyAEQQlyIgtBA3QiDGogAiAMaikDADcDACADIARBCnIiDEEDdCINaiACIA1qKQMANwMAIAMgBEELciINQQN0Ig5qIAIgDmopAwA3AwAgAyAEQQxyIg5BA3QiD2ogAiAPaikDADcDACADIARBDXIiD0EDdCIQaiACIBBqKQMANwMAIAMgBEEOciIQQQN0IhFqIAIgEWopAwA3AwAgAyAEQQ9yIhFBA3QiEmogAiASaikDADcDACADIARB//8DcSAAQf//A3EgAUH//wNxIAVB//8DcSAGQf//A3EgB0H//wNxIAhB//8DcSAJQf//A3EgCkH//wNxIAtB//8DcSAMQf//A3EgDUH//wNxIA5B//8DcSAPQf//A3EgEEH//wNxIBFB//8DcRACIARB8ABJIQAgBEEQaiEEIAANAAtBACEBIANBAEEBQRBBEUEgQSFBMEExQcAAQcEAQdAAQdEAQeAAQeEAQfAAQfEAEAIgA0ECQQNBEkETQSJBI0EyQTNBwgBBwwBB0gBB0wBB4gBB4wBB8gBB8wAQAiADQQRBBUEUQRVBJEElQTRBNUHEAEHFAEHUAEHVAEHkAEHlAEH0AEH1ABACIANBBkEHQRZBF0EmQSdBNkE3QcYAQccAQdYAQdcAQeYAQecAQfYAQfcAEAIgA0EIQQlBGEEZQShBKUE4QTlByABByQBB2ABB2QBB6ABB6QBB+ABB+QAQAiADQQpBC0EaQRtBKkErQTpBO0HKAEHLAEHaAEHbAEHqAEHrAEH6AEH7ABACIANBDEENQRxBHUEsQS1BPEE9QcwAQc0AQdwAQd0AQewAQe0AQfwAQf0AEAIgA0EOQQ9BHkEfQS5BL0E+QT9BzgBBzwBB3gBB3wBB7gBB7wBB/gBB/wAQAgNAIAIgAUEDdCIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAiAAQQhyIgRqIgUgAyAEaikDACAFKQMAhTcDACACIABBEHIiBGoiBSADIARqKQMAIAUpAwCFNwMAIAIgAEEYciIAaiIEIAAgA2opAwAgBCkDAIU3AwAgAUEEaiIBQYABRw0ACwsWACAAIAEgAiADEAMgACACIAIgAxADC3sCAX8BfiACIQkgATUCACEKIAQgBXIEQCABKAIEIANwIQkLIAAgCTYCACAAIAdBAWsgBSAEGyAIbCAGQQFrQQBBfyAGGyACIAlGG2oiASAFQQFqIAhsQQAgBBtqIAGtIAogCn5CIIh+QiCIp0F/c2ogByAIbHA2AgQgAAsEACMACwYAIAAkAAsQACMAIABrQXBxIgAkACAACwUAQYAICw==",e)))});function Vd(){if(Od)return Fd;Od=1;var e=[0,1,3,7,15,31,63,127,255],t=function(e){this.stream=e,this.bitOffset=0,this.curByte=0,this.hasByte=!1};return t.prototype._ensureByte=function(){this.hasByte||(this.curByte=this.stream.readByte(),this.hasByte=!0)},t.prototype.read=function(t){for(var r=0;t>0;){this._ensureByte();var n=8-this.bitOffset;if(t>=n)r<<=n,r|=e[n]&this.curByte,this.hasByte=!1,this.bitOffset=0,t-=n;else{r<<=t;var i=n-t;r|=(this.curByte&e[t]<<i)>>i,this.bitOffset+=t,t=0}}return r},t.prototype.seek=function(e){var t=e%8,r=(e-t)/8;this.bitOffset=t,this.stream.seek(r),this.hasByte=!1},t.prototype.pi=function(){var e,t=new Uint8Array(6);for(e=0;e<t.length;e++)t[e]=this.read(8);return function(e){return Array.prototype.map.call(e,(e=>("00"+e.toString(16)).slice(-2))).join("")}(t)},Fd=t}var Yd=function(){if(qd)return Gd;qd=1;var e,t=Vd(),r=function(){if(_d)return Nd;_d=1;var e=function(){};return e.prototype.readByte=function(){throw Error("abstract method readByte() not implemented")},e.prototype.read=function(e,t,r){for(var n=0;n<r;){var i=this.readByte();if(i<0)return 0===n?-1:n;e[t++]=i,n++}return n},e.prototype.seek=function(e){throw Error("abstract method seek() not implemented")},e.prototype.writeByte=function(e){throw Error("abstract method readByte() not implemented")},e.prototype.write=function(e,t,r){var n;for(n=0;n<r;n++)this.writeByte(e[t++]);return r},e.prototype.flush=function(){},Nd=e}(),n=zd?Hd:(zd=1,e=new Uint32Array([0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188]),Hd=function(){var t=4294967295;this.getCRC=function(){return~t>>>0},this.updateCRC=function(r){t=t<<8^e[255&(t>>>24^r)]},this.updateCRCRun=function(r,n){for(;n-- >0;)t=t<<8^e[255&(t>>>24^r)]}}),i=function(e,t){var r,n=e[t];for(r=t;r>0;r--)e[r]=e[r-1];return e[0]=n,n},s={OK:0,LAST_BLOCK:-1,NOT_BZIP_DATA:-2,UNEXPECTED_INPUT_EOF:-3,UNEXPECTED_OUTPUT_EOF:-4,DATA_ERROR:-5,OUT_OF_MEMORY:-6,OBSOLETE_INPUT:-7,END_OF_BLOCK:-8},a={};a[s.LAST_BLOCK]="Bad file checksum",a[s.NOT_BZIP_DATA]="Not bzip data",a[s.UNEXPECTED_INPUT_EOF]="Unexpected input EOF",a[s.UNEXPECTED_OUTPUT_EOF]="Unexpected output EOF",a[s.DATA_ERROR]="Data error",a[s.OUT_OF_MEMORY]="Out of memory",a[s.OBSOLETE_INPUT]="Obsolete (pre 0.9.5) bzip format not supported.";var o=function(e,t){var r=a[e]||"unknown error";t&&(r+=": "+t);var n=new TypeError(r);throw n.errorCode=e,n},c=function(e,t){this.writePos=this.writeCurrent=this.writeCount=0,this._start_bunzip(e,t)};c.prototype._init_block=function(){return this._get_next_block()?(this.blockCRC=new n,!0):(this.writeCount=-1,!1)},c.prototype._start_bunzip=function(e,r){var n=new Uint8Array(4);4===e.read(n,0,4)&&"BZh"===String.fromCharCode(n[0],n[1],n[2])||o(s.NOT_BZIP_DATA,"bad magic");var i=n[3]-48;(i<1||i>9)&&o(s.NOT_BZIP_DATA,"level out of range"),this.reader=new t(e),this.dbufSize=1e5*i,this.nextoutput=0,this.outputStream=r,this.streamCRC=0},c.prototype._get_next_block=function(){var e,t,r,n=this.reader,a=n.pi();if("177245385090"===a)return!1;"314159265359"!==a&&o(s.NOT_BZIP_DATA),this.targetBlockCRC=n.read(32)>>>0,this.streamCRC=(this.targetBlockCRC^(this.streamCRC<<1|this.streamCRC>>>31))>>>0,n.read(1)&&o(s.OBSOLETE_INPUT);var c=n.read(24);c>this.dbufSize&&o(s.DATA_ERROR,"initial position out of bounds");var u=n.read(16),h=new Uint8Array(256),l=0;for(e=0;e<16;e++)if(u&1<<15-e){var f=16*e;for(r=n.read(16),t=0;t<16;t++)r&1<<15-t&&(h[l++]=f+t)}var y=n.read(3);(y<2||y>6)&&o(s.DATA_ERROR);var p=n.read(15);0===p&&o(s.DATA_ERROR);var d=new Uint8Array(256);for(e=0;e<y;e++)d[e]=e;var g=new Uint8Array(p);for(e=0;e<p;e++){for(t=0;n.read(1);t++)t>=y&&o(s.DATA_ERROR);g[e]=i(d,t)}var w,A=l+2,m=[];for(t=0;t<y;t++){var b,k,E=new Uint8Array(A),v=new Uint16Array(21);for(u=n.read(5),e=0;e<A;e++){for(;(u<1||u>20)&&o(s.DATA_ERROR),n.read(1);)n.read(1)?u--:u++;E[e]=u}for(b=k=E[0],e=1;e<A;e++)E[e]>k?k=E[e]:E[e]<b&&(b=E[e]);w={},m.push(w),w.permute=new Uint16Array(258),w.limit=new Uint32Array(22),w.base=new Uint32Array(21),w.minLen=b,w.maxLen=k;var K=0;for(e=b;e<=k;e++)for(v[e]=w.limit[e]=0,u=0;u<A;u++)E[u]===e&&(w.permute[K++]=u);for(e=0;e<A;e++)v[E[e]]++;for(K=u=0,e=b;e<k;e++)K+=v[e],w.limit[e]=K-1,K<<=1,u+=v[e],w.base[e+1]=K-u;w.limit[k+1]=Number.MAX_VALUE,w.limit[k]=K+v[k]-1,w.base[b]=0}var S=new Uint32Array(256);for(e=0;e<256;e++)d[e]=e;var B,I=0,C=0,U=0,P=this.dbuf=new Uint32Array(this.dbufSize);for(A=0;;){for(A--||(A=49,U>=p&&o(s.DATA_ERROR),w=m[g[U++]]),e=w.minLen,t=n.read(e);e>w.maxLen&&o(s.DATA_ERROR),!(t<=w.limit[e]);e++)t=t<<1|n.read(1);((t-=w.base[e])<0||t>=258)&&o(s.DATA_ERROR);var D=w.permute[t];if(0!==D&&1!==D){if(I)for(I=0,C+u>this.dbufSize&&o(s.DATA_ERROR),S[B=h[d[0]]]+=u;u--;)P[C++]=B;if(D>l)break;C>=this.dbufSize&&o(s.DATA_ERROR),S[B=h[B=i(d,e=D-1)]]++,P[C++]=B}else I||(I=1,u=0),u+=0===D?I:2*I,I<<=1}for((c<0||c>=C)&&o(s.DATA_ERROR),t=0,e=0;e<256;e++)r=t+S[e],S[e]=t,t=r;for(e=0;e<C;e++)P[S[B=255&P[e]]]|=e<<8,S[B]++;var x=0,Q=0,R=0;return C&&(Q=255&(x=P[c]),x>>=8,R=-1),this.writePos=x,this.writeCurrent=Q,this.writeCount=C,this.writeRun=R,!0},c.prototype._read_bunzip=function(e,t){var r,n,i;if(this.writeCount<0)return 0;var a=this.dbuf,c=this.writePos,u=this.writeCurrent,h=this.writeCount;this.outputsize;for(var l=this.writeRun;h;){for(h--,n=u,u=255&(c=a[c]),c>>=8,3==l++?(r=u,i=n,u=-1):(r=1,i=u),this.blockCRC.updateCRCRun(i,r);r--;)this.outputStream.writeByte(i),this.nextoutput++;u!=n&&(l=0)}return this.writeCount=h,this.blockCRC.getCRC()!==this.targetBlockCRC&&o(s.DATA_ERROR,"Bad block CRC (got "+this.blockCRC.getCRC().toString(16)+" expected "+this.targetBlockCRC.toString(16)+")"),this.nextoutput};var u=function(e){if("readByte"in e)return e;var t=new r;return t.pos=0,t.readByte=function(){return e[this.pos++]},t.seek=function(e){this.pos=e},t.eof=function(){return this.pos>=e.length},t},h=function(e){var t=new r,n=!0;if(e)if("number"==typeof e)t.buffer=new Uint8Array(e),n=!1;else{if("writeByte"in e)return e;t.buffer=e,n=!1}else t.buffer=new Uint8Array(16384);return t.pos=0,t.writeByte=function(e){if(n&&this.pos>=this.buffer.length){var t=new Uint8Array(2*this.buffer.length);t.set(this.buffer),this.buffer=t}this.buffer[this.pos++]=e},t.getBuffer=function(){if(this.pos!==this.buffer.length){if(!n)throw new TypeError("outputsize does not match decoded input");var e=new Uint8Array(this.pos);e.set(this.buffer.subarray(0,this.pos)),this.buffer=e}return this.buffer},t._coerced=!0,t};return Gd={Bunzip:c,Stream:r,Err:s,decode:function(e,t,r){for(var n=u(e),i=h(t),a=new c(n,i);!("eof"in n)||!n.eof();)if(a._init_block())a._read_bunzip();else{var l=a.reader.read(32)>>>0;if(l!==a.streamCRC&&o(s.DATA_ERROR,"Bad stream CRC (got "+a.streamCRC.toString(16)+" expected "+l.toString(16)+")"),!r||!("eof"in n)||n.eof())break;a._start_bunzip(n,i)}if("getBuffer"in i)return i.getBuffer()},decodeBlock:function(e,t,r){var i=u(e),s=h(r),a=new c(i,s);if(a.reader.seek(t),a._get_next_block()&&(a.blockCRC=new n,a.writeCopies=0,a._read_bunzip()),"getBuffer"in s)return s.getBuffer()},table:function(e,t,n){var i=new r;i.delegate=u(e),i.pos=0,i.readByte=function(){return this.pos++,this.delegate.readByte()},i.delegate.eof&&(i.eof=i.delegate.eof.bind(i.delegate));var s=new r;s.pos=0,s.writeByte=function(){this.pos++};for(var a=new c(i,s),o=a.dbufSize;!("eof"in i)||!i.eof();){var h=8*i.pos+a.reader.bitOffset;if(a.reader.hasByte&&(h-=8),a._init_block()){var l=s.pos;a._read_bunzip(),t(h,s.pos-l)}else{if(a.reader.read(32),!n||!("eof"in i)||i.eof())break;a._start_bunzip(i,s),console.assert(a.dbufSize===o,"shouldn't change block size within multistream file")}}}}}(),Zd=/*#__PURE__*/n({__proto__:null},[Yd]);export{Ia as AEADEncryptedDataPacket,Wi as Argon2OutOfMemoryError,rs as Argon2S2K,Qo as CleartextMessage,wa as CompressedDataPacket,ya as GrammarError,Gn as KDFParams,ra as LiteralDataPacket,Ta as MarkerPacket,Io as Message,ha as OnePassSignaturePacket,fa as PacketList,za as PaddingPacket,go as PrivateKey,po as PublicKey,Ua as PublicKeyEncryptedSessionKeyPacket,xa as PublicKeyPacket,Ma as PublicSubkeyPacket,Fa as SecretKeyPacket,_a as SecretSubkeyPacket,qa as Signature,oa as SignaturePacket,uo as Subkey,Ka as SymEncryptedIntegrityProtectedDataPacket,Da as SymEncryptedSessionKeyPacket,Ra as SymmetricallyEncryptedDataPacket,Ha as TrustPacket,ut as UnparseablePacket,La as UserAttributePacket,Na as UserIDPacket,ee as armor,M as config,To as createCleartextMessage,Do as createMessage,Ho as decrypt,Oo as decryptKey,Vo as decryptSessionKeys,_o as encrypt,No as encryptKey,jo as encryptSessionKey,T as enums,Mo as generateKey,qo as generateSessionKey,Ro as readCleartextMessage,bo as readKey,Eo as readKeys,Po as readMessage,ko as readPrivateKey,vo as readPrivateKeys,ja as readSignature,Lo as reformatKey,Fo as revokeKey,zo as sign,$ as unarmor,Go as verify};
+const El=BigInt(0),vl=BigInt(1),Kl=BigInt(2);function Sl(e){const t=(Yc(r=e,{adjustScalarBytes:"function",powPminus2:"function"}),Object.freeze({...r}));var r;const{P:n,type:i,adjustScalarBytes:s,powPminus2:a,randomBytes:o}=t,c="x25519"===i;if(!c&&"x448"!==i)throw Error("invalid type");const u=o||Dc,h=c?255:448,l=c?32:56,f=c?BigInt(9):BigInt(5),y=c?BigInt(121665):BigInt(39081),d=c?Kl**BigInt(254):Kl**BigInt(447),p=c?BigInt(8)*Kl**BigInt(251)-vl:BigInt(4)*Kl**BigInt(445)-vl,g=d+p+vl,w=e=>au(e,n),A=m(f);function m(e){return Hc(w(e),l)}function b(e,t){const r=function(e,t){qc("u",e,El,n),qc("scalar",t,d,g);const r=t,i=e;let s=vl,o=El,c=e,u=vl,l=El;for(let e=BigInt(h-1);e>=El;e--){const t=r>>e&vl;l^=t,({x_2:s,x_3:c}=E(l,s,c)),({x_2:o,x_3:u}=E(l,o,u)),l=t;const n=s+o,a=w(n*n),h=s-o,f=w(h*h),d=a-f,p=c+u,g=w((c-u)*n),A=w(p*h),m=g+A,b=g-A;c=w(m*m),u=w(i*w(b*b)),s=w(a*f),o=w(d*(a+w(y*d)))}({x_2:s,x_3:c}=E(l,s,c)),({x_2:o,x_3:u}=E(l,o,u));const f=a(o);return w(s*f)}(function(e){const t=_c("u coordinate",e,l);return c&&(t[31]&=127),w(Nc(t))}(t),function(e){return Nc(s(_c("scalar",e,l)))}(e));if(r===El)throw Error("invalid private or public key received");return m(r)}function k(e){return b(e,A)}function E(e,t,r){const n=w(e*(t-r));return{x_2:t=w(t-n),x_3:r=w(r+n)}}const v={secretKey:l,publicKey:l,seed:l},K=(e=u(l))=>(ac(e,v.seed),e);return{keygen:function(e){const t=K(e);return{secretKey:t,publicKey:k(t)}},getSharedSecret:(e,t)=>b(e,t),getPublicKey:e=>k(e),scalarMult:b,scalarMultBase:k,utils:{randomSecretKey:K,randomPrivateKey:K},GuBytes:A.slice(),lengths:v}}
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Il={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),n:BigInt("0x3fffffffffffffffffffffffffffffffffffffffffffffffffffffff7cca23e9c44edb49aed63690216cc2728dc58f552378c292ab5844f3"),h:BigInt(4),a:BigInt(1),d:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffff6756"),Gx:BigInt("0x4f1970c66bed0ded221d15a622bf36da9e146570470f1767ea6de324a3d3a46412ae1af72ab66511433b80e18b00938e2626a82bc70cc05e"),Gy:BigInt("0x693f46716eb6bc248876203756c9c7624bea73736ca3984087789c1e05a0c2d73ad3ff1ce67c39c4fdbd132c4ed7c8ad9808795bf230fa14")},Bl=Object.assign({},Il,{d:BigInt("0xd78b4bdc7f0daf19f24f38c29373a2ccad46157242a50f37809b1da3412a12e79ccc9c81264cfe9ad080997058fb61c4243cc32dbaa156b9"),Gx:BigInt("0x79a70b2b70400553ae7c9df416c792c61128751ac92969240c25a07d728bdc93e21f7787ed6972249de732f38496cd11698713093e9c04fc"),Gy:BigInt("0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffff80000000000000000000000000000000000000000000000000000001")}),Cl=/* @__PURE__ */Uc((()=>pl.create({dkLen:114}))),Ul=BigInt(1),Pl=BigInt(2),Dl=BigInt(3);BigInt(4);const xl=BigInt(11),Ql=BigInt(22),Ml=BigInt(44),Ll=BigInt(88),Tl=BigInt(223);function Rl(e){const t=Il.p,r=e*e*e%t,n=r*r*e%t,i=ou(n,Dl,t)*n%t,s=ou(i,Dl,t)*n%t,a=ou(s,Pl,t)*r%t,o=ou(a,xl,t)*a%t,c=ou(o,Ql,t)*o%t,u=ou(c,Ml,t)*c%t,h=ou(u,Ll,t)*u%t,l=ou(h,Ml,t)*c%t,f=ou(l,Pl,t)*r%t,y=ou(f,Ul,t)*e%t;return ou(y,Tl,t)*f%t}function Fl(e){return e[0]&=252,e[55]|=128,e[56]=0,e}function Nl(e,t){const r=Il.p,n=au(e*e*t,r),i=au(n*e,r),s=au(i*n*t,r),a=au(i*Rl(s),r),o=au(a*a,r);return{isValid:au(o*t,r)===e,value:a}}const Ol=/* @__PURE__ */(()=>Au(Il.p,{BITS:456,isLE:!0}))(),Hl=/* @__PURE__ */(()=>Au(Il.n,{BITS:456,isLE:!0}))();function _l(e,t,r){if(t.length>255)throw Error("context must be smaller than 255, got: "+t.length);return Bc((n="SigEd448",Uint8Array.from(n,((e,t)=>{const r=e.charCodeAt(0);if(1!==e.length||r>127)throw Error(`string contains non-ASCII character "${n[t]}" with code ${r} at position ${t}`);return r}))),new Uint8Array([r?1:0,t.length]),t,e);var n}const zl=function(e){const{CURVE:t,curveOpts:r,hash:n,eddsaOpts:i}=function(e){const t={a:e.a,d:e.d,p:e.Fp.ORDER,n:e.n,h:e.h,Gx:e.Gx,Gy:e.Gy},r={Fp:e.Fp,Fn:Au(t.n,e.nBitLength,!0),uvRatio:e.uvRatio},n={randomBytes:e.randomBytes,adjustScalarBytes:e.adjustScalarBytes,domain:e.domain,prehash:e.prehash,mapToCurve:e.mapToCurve};return{CURVE:t,curveOpts:r,hash:e.hash,eddsaOpts:n}}(e);return function(e,t){const r=t.Point;return Object.assign({},t,{ExtendedPoint:r,CURVE:e,nBitLength:r.Fn.BITS,nByteLength:r.Fn.BYTES})}(e,kl(bl(t,r),n,i))}(/* @__PURE__ */(()=>({...Il,Fp:Ol,Fn:Hl,nBitLength:Hl.BITS,hash:Cl,adjustScalarBytes:Fl,domain:_l,uvRatio:Nl}))());bl(Bl);const Gl=/* @__PURE__ */(()=>{const e=Il.p;return Sl({P:e,type:"x448",powPminus2:t=>au(ou(Rl(t),Pl,e)*t,e),adjustScalarBytes:Fl})})(),ql={p:BigInt("0xfffffffffffffffffffffffffffffffffffffffffffffffffffffffefffffc2f"),n:BigInt("0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141"),h:BigInt(1),a:BigInt(0),b:BigInt(7),Gx:BigInt("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),Gy:BigInt("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8")},jl={beta:BigInt("0x7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee"),basises:[[BigInt("0x3086d221a7d46bcde86c90e49284eb15"),-BigInt("0xe4437ed6010e88286f547fa90abfe4c3")],[BigInt("0x114ca50f7a8e2f3f657c1108d9d44cfd8"),BigInt("0x3086d221a7d46bcde86c90e49284eb15")]]},Vl=/* @__PURE__ */BigInt(2);
+/*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */const Yl=Au(ql.p,{sqrt:function(e){const t=ql.p,r=BigInt(3),n=BigInt(6),i=BigInt(11),s=BigInt(22),a=BigInt(23),o=BigInt(44),c=BigInt(88),u=e*e*e%t,h=u*u*e%t,l=ou(h,r,t)*h%t,f=ou(l,r,t)*h%t,y=ou(f,Vl,t)*u%t,d=ou(y,i,t)*y%t,p=ou(d,s,t)*d%t,g=ou(p,o,t)*p%t,w=ou(g,c,t)*g%t,A=ou(w,o,t)*p%t,m=ou(A,r,t)*h%t,b=ou(m,a,t)*d%t,k=ou(b,n,t)*u%t,E=ou(k,Vl,t);if(!Yl.eql(Yl.sqr(E),e))throw Error("Cannot find square root");return E}}),Zl=Oh({...ql,Fp:Yl,lowS:!0,endo:jl},rh),Jl=rh,Wl=nh,Xl=Au(BigInt("0xa9fb57dba1eea9bc3e660a909d838d726e3bf623d52620282013481d1f6e5377")),$l=Oh({a:Xl.create(BigInt("0x7d5a0975fc2c3057eef67530417affe7fb8055c126dc5c6ce94a4b44f330b5d9")),b:BigInt("0x26dc5c6ce94a4b44f330b5d9bbd77cbf958416295cf7e1ce6bccdc18ff8c07b6"),Fp:Xl,n:BigInt("0xa9fb57dba1eea9bc3e660a909d838d718c397aa3b561a6f7901e0e82974856a7"),Gx:BigInt("0x8bd2aeb9cb7e57cb2c4b482ffc81b7afb9de27e1e3bd23c23a4453bd9ace3262"),Gy:BigInt("0x547ef835c3dac4fd97f8461a14611dc9c27745132ded8e545c1d54c72f046997"),h:BigInt(1),lowS:!1},Jl),ef=ih,tf=sh,rf=Au(BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53")),nf=Oh({a:rf.create(BigInt("0x7bc382c63d8c150c3c72080ace05afa0c2bea28e4fb22787139165efba91f90f8aa5814a503ad4eb04a8c7dd22ce2826")),b:BigInt("0x04a8c7dd22ce28268b39b55416f0447c2fb77de107dcd2a62e880ea53eeb62d57cb4390295dbc9943ab78696fa504c11"),Fp:rf,n:BigInt("0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b31f166e6cac0425a7cf3ab6af6b7fc3103b883202e9046565"),Gx:BigInt("0x1d1c64f068cf45ffa2a63a81b7c13f6b8847a3e77ef14fe3db7fcafe0cbd10e8e826e03436d646aaef87b2e247d4af1e"),Gy:BigInt("0x8abe1d7520f9c2a45cb1eb8e95cfd55262b70b29feec5864e19c054ff99129280e4646217791811142820341263c5315"),h:BigInt(1),lowS:!1},tf),sf=Au(BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f3")),af=Oh({a:sf.create(BigInt("0x7830a3318b603b89e2327145ac234cc594cbdd8d3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94ca")),b:BigInt("0x3df91610a83441caea9863bc2ded5d5aa8253aa10a2ef1c98b9ac8b57f1117a72bf2c7b9e7c1ac4d77fc94cadc083e67984050b75ebae5dd2809bd638016f723"),Fp:sf,n:BigInt("0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca70330870553e5c414ca92619418661197fac10471db1d381085ddaddb58796829ca90069"),Gx:BigInt("0x81aee4bdd82ed9645a21322e9c4c6a9385ed9f70b5d916c1b43b62eef4d0098eff3b1f78e2d0d48d50d1687b93b97d5f7c6d5047406a5e688b352209bcb9f822"),Gy:BigInt("0x7dde385d566332ecc0eabfa9cf7822fdf209f70024a57b1aa000c55b881f8111b2dcde494a5f485e5bca4bd88a2763aed1ca2b2fa8f0540678cd1e0f3ad80892"),h:BigInt(1),lowS:!1},ef),of=new Map(Object.entries({nistP256:Vh,nistP384:Yh,nistP521:Zh,brainpoolP256r1:$l,brainpoolP384r1:nf,brainpoolP512r1:af,secp256k1:Zl,x448:Gl,ed448:zl}));var cf=/*#__PURE__*/Object.freeze({__proto__:null,nobleCurves:of});const uf=/* @__PURE__ */Uint32Array.from([1732584193,4023233417,2562383102,271733878,3285377520]),hf=/* @__PURE__ */new Uint32Array(80);class lf extends vu{constructor(){super(64,20,8,!1),this.A=0|uf[0],this.B=0|uf[1],this.C=0|uf[2],this.D=0|uf[3],this.E=0|uf[4]}get(){const{A:e,B:t,C:r,D:n,E:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n,this.E=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)hf[r]=e.getUint32(t,!1);for(let e=16;e<80;e++)hf[e]=yc(hf[e-3]^hf[e-8]^hf[e-14]^hf[e-16],1);let{A:r,B:n,C:i,D:s,E:a}=this;for(let e=0;e<80;e++){let t,o;e<20?(t=ku(n,i,s),o=1518500249):e<40?(t=n^i^s,o=1859775393):e<60?(t=Eu(n,i,s),o=2400959708):(t=n^i^s,o=3395469782);const c=yc(r,5)+t+a+o+hf[e]|0;a=s,s=i,i=yc(n,30),n=r,r=c}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,a=a+this.E|0,this.set(r,n,i,s,a)}roundClean(){hc(hf)}destroy(){this.set(0,0,0,0,0),hc(this.buffer)}}const ff=/* @__PURE__ */Uc((()=>new lf)),yf=/* @__PURE__ */Uint8Array.from([7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8]),df=/* @__PURE__ */(()=>Uint8Array.from(Array(16).fill(0).map(((e,t)=>t))))(),pf=/* @__PURE__ */(()=>df.map((e=>(9*e+5)%16)))(),gf=/* @__PURE__ */(()=>{const e=[[df],[pf]];for(let t=0;t<4;t++)for(let r of e)r.push(r[t].map((e=>yf[e])));return e})(),wf=/* @__PURE__ */(()=>gf[0])(),Af=/* @__PURE__ */(()=>gf[1])(),mf=/* @__PURE__ */[[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8],[12,13,11,15,6,9,9,7,12,15,11,13,7,8,7,7],[13,15,14,11,7,7,6,8,13,14,13,12,5,5,6,9],[14,11,12,14,8,6,5,5,15,12,15,14,9,9,8,6],[15,12,13,13,9,5,8,6,14,11,12,11,8,6,5,5]].map((e=>Uint8Array.from(e))),bf=/* @__PURE__ */wf.map(((e,t)=>e.map((e=>mf[t][e])))),kf=/* @__PURE__ */Af.map(((e,t)=>e.map((e=>mf[t][e])))),Ef=/* @__PURE__ */Uint32Array.from([0,1518500249,1859775393,2400959708,2840853838]),vf=/* @__PURE__ */Uint32Array.from([1352829926,1548603684,1836072691,2053994217,0]);function Kf(e,t,r,n){return 0===e?t^r^n:1===e?t&r|~t&n:2===e?(t|~r)^n:3===e?t&n|r&~n:t^(r|~n)}const Sf=/* @__PURE__ */new Uint32Array(16);class If extends vu{constructor(){super(64,20,8,!0),this.h0=1732584193,this.h1=-271733879,this.h2=-1732584194,this.h3=271733878,this.h4=-1009589776}get(){const{h0:e,h1:t,h2:r,h3:n,h4:i}=this;return[e,t,r,n,i]}set(e,t,r,n,i){this.h0=0|e,this.h1=0|t,this.h2=0|r,this.h3=0|n,this.h4=0|i}process(e,t){for(let r=0;r<16;r++,t+=4)Sf[r]=e.getUint32(t,!0);let r=0|this.h0,n=r,i=0|this.h1,s=i,a=0|this.h2,o=a,c=0|this.h3,u=c,h=0|this.h4,l=h;for(let e=0;e<5;e++){const t=4-e,f=Ef[e],y=vf[e],d=wf[e],p=Af[e],g=bf[e],w=kf[e];for(let t=0;t<16;t++){const n=yc(r+Kf(e,i,a,c)+Sf[d[t]]+f,g[t])+h|0;r=h,h=c,c=0|yc(a,10),a=i,i=n}for(let e=0;e<16;e++){const r=yc(n+Kf(t,s,o,u)+Sf[p[e]]+y,w[e])+l|0;n=l,l=u,u=0|yc(o,10),o=s,s=r}}this.set(this.h1+a+u|0,this.h2+c+l|0,this.h3+h+n|0,this.h4+r+s|0,this.h0+i+o|0)}roundClean(){hc(Sf)}destroy(){this.destroyed=!0,hc(this.buffer),this.set(0,0,0,0,0)}}const Bf=ff,Cf=/* @__PURE__ */Uc((()=>new If)),Uf=Array.from({length:64},((e,t)=>Math.floor(2**32*Math.abs(Math.sin(t+1))))),Pf=(e,t,r)=>e&t^~e&r,Df=/* @__PURE__ */new Uint32Array([1732584193,4023233417,2562383102,271733878]),xf=/* @__PURE__ */new Uint32Array(16);class Qf extends vu{constructor(){super(64,16,8,!0),this.A=0|Df[0],this.B=0|Df[1],this.C=0|Df[2],this.D=0|Df[3]}get(){const{A:e,B:t,C:r,D:n}=this;return[e,t,r,n]}set(e,t,r,n){this.A=0|e,this.B=0|t,this.C=0|r,this.D=0|n}process(e,t){for(let r=0;r<16;r++,t+=4)xf[r]=e.getUint32(t,!0);let{A:r,B:n,C:i,D:s}=this;for(let e=0;e<64;e++){let t,a,o;e<16?(t=Pf(n,i,s),a=e,o=[7,12,17,22]):e<32?(t=Pf(s,n,i),a=(5*e+1)%16,o=[5,9,14,20]):e<48?(t=n^i^s,a=(3*e+5)%16,o=[4,11,16,23]):(t=i^(n|~s),a=7*e%16,o=[6,10,15,21]),t=t+r+Uf[e]+xf[a],r=s,s=i,i=n,n+=yc(t,o[e%4])}r=r+this.A|0,n=n+this.B|0,i=i+this.C|0,s=s+this.D|0,this.set(r,n,i,s)}roundClean(){xf.fill(0)}destroy(){this.set(0,0,0,0),this.buffer.fill(0)}}const Mf=new Map(Object.entries({md5:/* @__PURE__ */Pc((()=>new Qf)),sha1:Bf,sha224:Wl,sha256:Jl,sha384:tf,sha512:ef,sha3_256:fl,sha3_512:yl,ripemd160:Cf}));var Lf=/*#__PURE__*/Object.freeze({__proto__:null,nobleHashes:Mf});const Tf=r&&"object"==typeof r&&"webcrypto"in r?r.webcrypto:void 0,Rf={};var Ff=function(e){var t,r=new Float64Array(16);if(e)for(t=0;t<e.length;t++)r[t]=e[t];return r},Nf=function(){throw Error("no PRNG")},Of=new Uint8Array(32);Of[0]=9;var Hf=Ff(),_f=Ff([1]),zf=Ff([56129,1]),Gf=Ff([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),qf=Ff([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),jf=Ff([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),Vf=Ff([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),Yf=Ff([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function Zf(e,t,r,n){e[t]=r>>24&255,e[t+1]=r>>16&255,e[t+2]=r>>8&255,e[t+3]=255&r,e[t+4]=n>>24&255,e[t+5]=n>>16&255,e[t+6]=n>>8&255,e[t+7]=255&n}function Jf(e,t,r,n){return function(e,t,r,n,i){var s,a=0;for(s=0;s<i;s++)a|=e[t+s]^r[n+s];return(1&a-1>>>8)-1}(e,t,r,n,32)}function Wf(e,t){var r;for(r=0;r<16;r++)e[r]=0|t[r]}function Xf(e){var t,r,n=1;for(t=0;t<16;t++)r=e[t]+n+65535,n=Math.floor(r/65536),e[t]=r-65536*n;e[0]+=n-1+37*(n-1)}function $f(e,t,r){for(var n,i=~(r-1),s=0;s<16;s++)n=i&(e[s]^t[s]),e[s]^=n,t[s]^=n}function ey(e,t){var r,n,i,s=Ff(),a=Ff();for(r=0;r<16;r++)a[r]=t[r];for(Xf(a),Xf(a),Xf(a),n=0;n<2;n++){for(s[0]=a[0]-65517,r=1;r<15;r++)s[r]=a[r]-65535-(s[r-1]>>16&1),s[r-1]&=65535;s[15]=a[15]-32767-(s[14]>>16&1),i=s[15]>>16&1,s[14]&=65535,$f(a,s,1-i)}for(r=0;r<16;r++)e[2*r]=255&a[r],e[2*r+1]=a[r]>>8}function ty(e,t){var r=new Uint8Array(32),n=new Uint8Array(32);return ey(r,e),ey(n,t),Jf(r,0,n,0)}function ry(e){var t=new Uint8Array(32);return ey(t,e),1&t[0]}function ny(e,t){var r;for(r=0;r<16;r++)e[r]=t[2*r]+(t[2*r+1]<<8);e[15]&=32767}function iy(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]+r[n]}function sy(e,t,r){for(var n=0;n<16;n++)e[n]=t[n]-r[n]}function ay(e,t,r){var n,i,s=0,a=0,o=0,c=0,u=0,h=0,l=0,f=0,y=0,d=0,p=0,g=0,w=0,A=0,m=0,b=0,k=0,E=0,v=0,K=0,S=0,I=0,B=0,C=0,U=0,P=0,D=0,x=0,Q=0,M=0,L=0,T=r[0],R=r[1],F=r[2],N=r[3],O=r[4],H=r[5],_=r[6],z=r[7],G=r[8],q=r[9],j=r[10],V=r[11],Y=r[12],Z=r[13],J=r[14],W=r[15];s+=(n=t[0])*T,a+=n*R,o+=n*F,c+=n*N,u+=n*O,h+=n*H,l+=n*_,f+=n*z,y+=n*G,d+=n*q,p+=n*j,g+=n*V,w+=n*Y,A+=n*Z,m+=n*J,b+=n*W,a+=(n=t[1])*T,o+=n*R,c+=n*F,u+=n*N,h+=n*O,l+=n*H,f+=n*_,y+=n*z,d+=n*G,p+=n*q,g+=n*j,w+=n*V,A+=n*Y,m+=n*Z,b+=n*J,k+=n*W,o+=(n=t[2])*T,c+=n*R,u+=n*F,h+=n*N,l+=n*O,f+=n*H,y+=n*_,d+=n*z,p+=n*G,g+=n*q,w+=n*j,A+=n*V,m+=n*Y,b+=n*Z,k+=n*J,E+=n*W,c+=(n=t[3])*T,u+=n*R,h+=n*F,l+=n*N,f+=n*O,y+=n*H,d+=n*_,p+=n*z,g+=n*G,w+=n*q,A+=n*j,m+=n*V,b+=n*Y,k+=n*Z,E+=n*J,v+=n*W,u+=(n=t[4])*T,h+=n*R,l+=n*F,f+=n*N,y+=n*O,d+=n*H,p+=n*_,g+=n*z,w+=n*G,A+=n*q,m+=n*j,b+=n*V,k+=n*Y,E+=n*Z,v+=n*J,K+=n*W,h+=(n=t[5])*T,l+=n*R,f+=n*F,y+=n*N,d+=n*O,p+=n*H,g+=n*_,w+=n*z,A+=n*G,m+=n*q,b+=n*j,k+=n*V,E+=n*Y,v+=n*Z,K+=n*J,S+=n*W,l+=(n=t[6])*T,f+=n*R,y+=n*F,d+=n*N,p+=n*O,g+=n*H,w+=n*_,A+=n*z,m+=n*G,b+=n*q,k+=n*j,E+=n*V,v+=n*Y,K+=n*Z,S+=n*J,I+=n*W,f+=(n=t[7])*T,y+=n*R,d+=n*F,p+=n*N,g+=n*O,w+=n*H,A+=n*_,m+=n*z,b+=n*G,k+=n*q,E+=n*j,v+=n*V,K+=n*Y,S+=n*Z,I+=n*J,B+=n*W,y+=(n=t[8])*T,d+=n*R,p+=n*F,g+=n*N,w+=n*O,A+=n*H,m+=n*_,b+=n*z,k+=n*G,E+=n*q,v+=n*j,K+=n*V,S+=n*Y,I+=n*Z,B+=n*J,C+=n*W,d+=(n=t[9])*T,p+=n*R,g+=n*F,w+=n*N,A+=n*O,m+=n*H,b+=n*_,k+=n*z,E+=n*G,v+=n*q,K+=n*j,S+=n*V,I+=n*Y,B+=n*Z,C+=n*J,U+=n*W,p+=(n=t[10])*T,g+=n*R,w+=n*F,A+=n*N,m+=n*O,b+=n*H,k+=n*_,E+=n*z,v+=n*G,K+=n*q,S+=n*j,I+=n*V,B+=n*Y,C+=n*Z,U+=n*J,P+=n*W,g+=(n=t[11])*T,w+=n*R,A+=n*F,m+=n*N,b+=n*O,k+=n*H,E+=n*_,v+=n*z,K+=n*G,S+=n*q,I+=n*j,B+=n*V,C+=n*Y,U+=n*Z,P+=n*J,D+=n*W,w+=(n=t[12])*T,A+=n*R,m+=n*F,b+=n*N,k+=n*O,E+=n*H,v+=n*_,K+=n*z,S+=n*G,I+=n*q,B+=n*j,C+=n*V,U+=n*Y,P+=n*Z,D+=n*J,x+=n*W,A+=(n=t[13])*T,m+=n*R,b+=n*F,k+=n*N,E+=n*O,v+=n*H,K+=n*_,S+=n*z,I+=n*G,B+=n*q,C+=n*j,U+=n*V,P+=n*Y,D+=n*Z,x+=n*J,Q+=n*W,m+=(n=t[14])*T,b+=n*R,k+=n*F,E+=n*N,v+=n*O,K+=n*H,S+=n*_,I+=n*z,B+=n*G,C+=n*q,U+=n*j,P+=n*V,D+=n*Y,x+=n*Z,Q+=n*J,M+=n*W,b+=(n=t[15])*T,a+=38*(E+=n*F),o+=38*(v+=n*N),c+=38*(K+=n*O),u+=38*(S+=n*H),h+=38*(I+=n*_),l+=38*(B+=n*z),f+=38*(C+=n*G),y+=38*(U+=n*q),d+=38*(P+=n*j),p+=38*(D+=n*V),g+=38*(x+=n*Y),w+=38*(Q+=n*Z),A+=38*(M+=n*J),m+=38*(L+=n*W),s=(n=(s+=38*(k+=n*R))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s=(n=(s+=i-1+37*(i-1))+(i=1)+65535)-65536*(i=Math.floor(n/65536)),a=(n=a+i+65535)-65536*(i=Math.floor(n/65536)),o=(n=o+i+65535)-65536*(i=Math.floor(n/65536)),c=(n=c+i+65535)-65536*(i=Math.floor(n/65536)),u=(n=u+i+65535)-65536*(i=Math.floor(n/65536)),h=(n=h+i+65535)-65536*(i=Math.floor(n/65536)),l=(n=l+i+65535)-65536*(i=Math.floor(n/65536)),f=(n=f+i+65535)-65536*(i=Math.floor(n/65536)),y=(n=y+i+65535)-65536*(i=Math.floor(n/65536)),d=(n=d+i+65535)-65536*(i=Math.floor(n/65536)),p=(n=p+i+65535)-65536*(i=Math.floor(n/65536)),g=(n=g+i+65535)-65536*(i=Math.floor(n/65536)),w=(n=w+i+65535)-65536*(i=Math.floor(n/65536)),A=(n=A+i+65535)-65536*(i=Math.floor(n/65536)),m=(n=m+i+65535)-65536*(i=Math.floor(n/65536)),b=(n=b+i+65535)-65536*(i=Math.floor(n/65536)),s+=i-1+37*(i-1),e[0]=s,e[1]=a,e[2]=o,e[3]=c,e[4]=u,e[5]=h,e[6]=l,e[7]=f,e[8]=y,e[9]=d,e[10]=p,e[11]=g,e[12]=w,e[13]=A,e[14]=m,e[15]=b}function oy(e,t){ay(e,t,t)}function cy(e,t){var r,n=Ff();for(r=0;r<16;r++)n[r]=t[r];for(r=253;r>=0;r--)oy(n,n),2!==r&&4!==r&&ay(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}function uy(e,t,r){var n,i,s=new Uint8Array(32),a=new Float64Array(80),o=Ff(),c=Ff(),u=Ff(),h=Ff(),l=Ff(),f=Ff();for(i=0;i<31;i++)s[i]=t[i];for(s[31]=127&t[31]|64,s[0]&=248,ny(a,r),i=0;i<16;i++)c[i]=a[i],h[i]=o[i]=u[i]=0;for(o[0]=h[0]=1,i=254;i>=0;--i)$f(o,c,n=s[i>>>3]>>>(7&i)&1),$f(u,h,n),iy(l,o,u),sy(o,o,u),iy(u,c,h),sy(c,c,h),oy(h,l),oy(f,o),ay(o,u,o),ay(u,c,l),iy(l,o,u),sy(o,o,u),oy(c,o),sy(u,h,f),ay(o,u,zf),iy(o,o,h),ay(u,u,o),ay(o,h,f),ay(h,c,a),oy(c,l),$f(o,c,n),$f(u,h,n);for(i=0;i<16;i++)a[i+16]=o[i],a[i+32]=u[i],a[i+48]=c[i],a[i+64]=h[i];var y=a.subarray(32),d=a.subarray(16);return cy(y,y),ay(d,d,y),ey(e,d),0}function hy(e,t){return uy(e,t,Of)}var ly=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function fy(e,t,r,n){for(var i,s,a,o,c,u,h,l,f,y,d,p,g,w,A,m,b,k,E,v,K,S,I,B,C,U,P=new Int32Array(16),D=new Int32Array(16),x=e[0],Q=e[1],M=e[2],L=e[3],T=e[4],R=e[5],F=e[6],N=e[7],O=t[0],H=t[1],_=t[2],z=t[3],G=t[4],q=t[5],j=t[6],V=t[7],Y=0;n>=128;){for(E=0;E<16;E++)v=8*E+Y,P[E]=r[v+0]<<24|r[v+1]<<16|r[v+2]<<8|r[v+3],D[E]=r[v+4]<<24|r[v+5]<<16|r[v+6]<<8|r[v+7];for(E=0;E<80;E++)if(i=x,s=Q,a=M,o=L,c=T,u=R,h=F,N,f=O,y=H,d=_,p=z,g=G,w=q,A=j,V,I=65535&(S=V),B=S>>>16,C=65535&(K=N),U=K>>>16,I+=65535&(S=(G>>>14|T<<18)^(G>>>18|T<<14)^(T>>>9|G<<23)),B+=S>>>16,C+=65535&(K=(T>>>14|G<<18)^(T>>>18|G<<14)^(G>>>9|T<<23)),U+=K>>>16,I+=65535&(S=G&q^~G&j),B+=S>>>16,C+=65535&(K=T&R^~T&F),U+=K>>>16,I+=65535&(S=ly[2*E+1]),B+=S>>>16,C+=65535&(K=ly[2*E]),U+=K>>>16,K=P[E%16],B+=(S=D[E%16])>>>16,C+=65535&K,U+=K>>>16,C+=(B+=(I+=65535&S)>>>16)>>>16,I=65535&(S=k=65535&I|B<<16),B=S>>>16,C=65535&(K=b=65535&C|(U+=C>>>16)<<16),U=K>>>16,I+=65535&(S=(O>>>28|x<<4)^(x>>>2|O<<30)^(x>>>7|O<<25)),B+=S>>>16,C+=65535&(K=(x>>>28|O<<4)^(O>>>2|x<<30)^(O>>>7|x<<25)),U+=K>>>16,B+=(S=O&H^O&_^H&_)>>>16,C+=65535&(K=x&Q^x&M^Q&M),U+=K>>>16,l=65535&(C+=(B+=(I+=65535&S)>>>16)>>>16)|(U+=C>>>16)<<16,m=65535&I|B<<16,I=65535&(S=p),B=S>>>16,C=65535&(K=o),U=K>>>16,B+=(S=k)>>>16,C+=65535&(K=b),U+=K>>>16,Q=i,M=s,L=a,T=o=65535&(C+=(B+=(I+=65535&S)>>>16)>>>16)|(U+=C>>>16)<<16,R=c,F=u,N=h,x=l,H=f,_=y,z=d,G=p=65535&I|B<<16,q=g,j=w,V=A,O=m,E%16==15)for(v=0;v<16;v++)K=P[v],I=65535&(S=D[v]),B=S>>>16,C=65535&K,U=K>>>16,K=P[(v+9)%16],I+=65535&(S=D[(v+9)%16]),B+=S>>>16,C+=65535&K,U+=K>>>16,b=P[(v+1)%16],I+=65535&(S=((k=D[(v+1)%16])>>>1|b<<31)^(k>>>8|b<<24)^(k>>>7|b<<25)),B+=S>>>16,C+=65535&(K=(b>>>1|k<<31)^(b>>>8|k<<24)^b>>>7),U+=K>>>16,b=P[(v+14)%16],B+=(S=((k=D[(v+14)%16])>>>19|b<<13)^(b>>>29|k<<3)^(k>>>6|b<<26))>>>16,C+=65535&(K=(b>>>19|k<<13)^(k>>>29|b<<3)^b>>>6),U+=K>>>16,U+=(C+=(B+=(I+=65535&S)>>>16)>>>16)>>>16,P[v]=65535&C|U<<16,D[v]=65535&I|B<<16;I=65535&(S=O),B=S>>>16,C=65535&(K=x),U=K>>>16,K=e[0],B+=(S=t[0])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(B+=(I+=65535&S)>>>16)>>>16)>>>16,e[0]=x=65535&C|U<<16,t[0]=O=65535&I|B<<16,I=65535&(S=H),B=S>>>16,C=65535&(K=Q),U=K>>>16,K=e[1],B+=(S=t[1])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(B+=(I+=65535&S)>>>16)>>>16)>>>16,e[1]=Q=65535&C|U<<16,t[1]=H=65535&I|B<<16,I=65535&(S=_),B=S>>>16,C=65535&(K=M),U=K>>>16,K=e[2],B+=(S=t[2])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(B+=(I+=65535&S)>>>16)>>>16)>>>16,e[2]=M=65535&C|U<<16,t[2]=_=65535&I|B<<16,I=65535&(S=z),B=S>>>16,C=65535&(K=L),U=K>>>16,K=e[3],B+=(S=t[3])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(B+=(I+=65535&S)>>>16)>>>16)>>>16,e[3]=L=65535&C|U<<16,t[3]=z=65535&I|B<<16,I=65535&(S=G),B=S>>>16,C=65535&(K=T),U=K>>>16,K=e[4],B+=(S=t[4])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(B+=(I+=65535&S)>>>16)>>>16)>>>16,e[4]=T=65535&C|U<<16,t[4]=G=65535&I|B<<16,I=65535&(S=q),B=S>>>16,C=65535&(K=R),U=K>>>16,K=e[5],B+=(S=t[5])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(B+=(I+=65535&S)>>>16)>>>16)>>>16,e[5]=R=65535&C|U<<16,t[5]=q=65535&I|B<<16,I=65535&(S=j),B=S>>>16,C=65535&(K=F),U=K>>>16,K=e[6],B+=(S=t[6])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(B+=(I+=65535&S)>>>16)>>>16)>>>16,e[6]=F=65535&C|U<<16,t[6]=j=65535&I|B<<16,I=65535&(S=V),B=S>>>16,C=65535&(K=N),U=K>>>16,K=e[7],B+=(S=t[7])>>>16,C+=65535&K,U+=K>>>16,U+=(C+=(B+=(I+=65535&S)>>>16)>>>16)>>>16,e[7]=N=65535&C|U<<16,t[7]=V=65535&I|B<<16,Y+=128,n-=128}return n}function yy(e,t,r){var n,i=new Int32Array(8),s=new Int32Array(8),a=new Uint8Array(256),o=r;for(i[0]=1779033703,i[1]=3144134277,i[2]=1013904242,i[3]=2773480762,i[4]=1359893119,i[5]=2600822924,i[6]=528734635,i[7]=1541459225,s[0]=4089235720,s[1]=2227873595,s[2]=4271175723,s[3]=1595750129,s[4]=2917565137,s[5]=725511199,s[6]=4215389547,s[7]=327033209,fy(i,s,t,r),r%=128,n=0;n<r;n++)a[n]=t[o-r+n];for(a[r]=128,a[(r=256-128*(r<112?1:0))-9]=0,Zf(a,r-8,o/536870912|0,o<<3),fy(i,s,a,r),n=0;n<8;n++)Zf(e,8*n,i[n],s[n]);return 0}function dy(e,t){var r=Ff(),n=Ff(),i=Ff(),s=Ff(),a=Ff(),o=Ff(),c=Ff(),u=Ff(),h=Ff();sy(r,e[1],e[0]),sy(h,t[1],t[0]),ay(r,r,h),iy(n,e[0],e[1]),iy(h,t[0],t[1]),ay(n,n,h),ay(i,e[3],t[3]),ay(i,i,qf),ay(s,e[2],t[2]),iy(s,s,s),sy(a,n,r),sy(o,s,i),iy(c,s,i),iy(u,n,r),ay(e[0],a,o),ay(e[1],u,c),ay(e[2],c,o),ay(e[3],a,u)}function py(e,t,r){var n;for(n=0;n<4;n++)$f(e[n],t[n],r)}function gy(e,t){var r=Ff(),n=Ff(),i=Ff();cy(i,t[2]),ay(r,t[0],i),ay(n,t[1],i),ey(e,n),e[31]^=ry(r)<<7}function wy(e,t,r){var n,i;for(Wf(e[0],Hf),Wf(e[1],_f),Wf(e[2],_f),Wf(e[3],Hf),i=255;i>=0;--i)py(e,t,n=r[i/8|0]>>(7&i)&1),dy(t,e),dy(e,e),py(e,t,n)}function Ay(e,t){var r=[Ff(),Ff(),Ff(),Ff()];Wf(r[0],jf),Wf(r[1],Vf),Wf(r[2],_f),ay(r[3],jf,Vf),wy(e,r,t)}function my(e,t,r){var n,i=new Uint8Array(64),s=[Ff(),Ff(),Ff(),Ff()];for(r||Nf(t,32),yy(i,t,32),i[0]&=248,i[31]&=127,i[31]|=64,Ay(s,i),gy(e,s),n=0;n<32;n++)t[n+32]=e[n];return 0}var by=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function ky(e,t){var r,n,i,s;for(n=63;n>=32;--n){for(r=0,i=n-32,s=n-12;i<s;++i)t[i]+=r-16*t[n]*by[i-(n-32)],r=Math.floor((t[i]+128)/256),t[i]-=256*r;t[i]+=r,t[n]=0}for(r=0,i=0;i<32;i++)t[i]+=r-(t[31]>>4)*by[i],r=t[i]>>8,t[i]&=255;for(i=0;i<32;i++)t[i]-=r*by[i];for(n=0;n<32;n++)t[n+1]+=t[n]>>8,e[n]=255&t[n]}function Ey(e){var t,r=new Float64Array(64);for(t=0;t<64;t++)r[t]=e[t];for(t=0;t<64;t++)e[t]=0;ky(e,r)}function vy(e,t){var r=Ff(),n=Ff(),i=Ff(),s=Ff(),a=Ff(),o=Ff(),c=Ff();return Wf(e[2],_f),ny(e[1],t),oy(i,e[1]),ay(s,i,Gf),sy(i,i,e[2]),iy(s,e[2],s),oy(a,s),oy(o,a),ay(c,o,a),ay(r,c,i),ay(r,r,s),function(e,t){var r,n=Ff();for(r=0;r<16;r++)n[r]=t[r];for(r=250;r>=0;r--)oy(n,n),1!==r&&ay(n,n,t);for(r=0;r<16;r++)e[r]=n[r]}(r,r),ay(r,r,i),ay(r,r,s),ay(r,r,s),ay(e[0],r,s),oy(n,e[0]),ay(n,n,s),ty(n,i)&&ay(e[0],e[0],Yf),oy(n,e[0]),ay(n,n,s),ty(n,i)?-1:(ry(e[0])===t[31]>>7&&sy(e[0],Hf,e[0]),ay(e[3],e[0],e[1]),0)}var Ky=64;function Sy(){for(var e=0;e<arguments.length;e++)if(!(arguments[e]instanceof Uint8Array))throw new TypeError("unexpected type, use Uint8Array")}Rf.scalarMult=function(e,t){if(Sy(e,t),32!==e.length)throw Error("bad n size");if(32!==t.length)throw Error("bad p size");var r=new Uint8Array(32);return uy(r,e,t),r},Rf.box={},Rf.box.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(32);return function(e,t){Nf(t,32),hy(e,t)}(e,t),{publicKey:e,secretKey:t}},Rf.box.keyPair.fromSecretKey=function(e){if(Sy(e),32!==e.length)throw Error("bad secret key size");var t=new Uint8Array(32);return hy(t,e),{publicKey:t,secretKey:new Uint8Array(e)}},Rf.sign=function(e,t){if(Sy(e,t),64!==t.length)throw Error("bad secret key size");var r=new Uint8Array(Ky+e.length);return function(e,t,r,n){var i,s,a=new Uint8Array(64),o=new Uint8Array(64),c=new Uint8Array(64),u=new Float64Array(64),h=[Ff(),Ff(),Ff(),Ff()];yy(a,n,32),a[0]&=248,a[31]&=127,a[31]|=64;var l=r+64;for(i=0;i<r;i++)e[64+i]=t[i];for(i=0;i<32;i++)e[32+i]=a[32+i];for(yy(c,e.subarray(32),r+32),Ey(c),Ay(h,c),gy(e,h),i=32;i<64;i++)e[i]=n[i];for(yy(o,e,r+64),Ey(o),i=0;i<64;i++)u[i]=0;for(i=0;i<32;i++)u[i]=c[i];for(i=0;i<32;i++)for(s=0;s<32;s++)u[i+s]+=o[i]*a[s];ky(e.subarray(32),u)}(r,e,e.length,t),r},Rf.sign.detached=function(e,t){for(var r=Rf.sign(e,t),n=new Uint8Array(Ky),i=0;i<n.length;i++)n[i]=r[i];return n},Rf.sign.detached.verify=function(e,t,r){if(Sy(e,t,r),t.length!==Ky)throw Error("bad signature size");if(32!==r.length)throw Error("bad public key size");var n,i=new Uint8Array(Ky+e.length),s=new Uint8Array(Ky+e.length);for(n=0;n<Ky;n++)i[n]=t[n];for(n=0;n<e.length;n++)i[n+Ky]=e[n];return function(e,t,r,n){var i,s=new Uint8Array(32),a=new Uint8Array(64),o=[Ff(),Ff(),Ff(),Ff()],c=[Ff(),Ff(),Ff(),Ff()];if(r<64)return-1;if(vy(c,n))return-1;for(i=0;i<r;i++)e[i]=t[i];for(i=0;i<32;i++)e[i+32]=n[i];if(yy(a,e,r),Ey(a),wy(o,c,a),Ay(c,t.subarray(32)),dy(o,c),gy(s,o),r-=64,Jf(t,0,s,0)){for(i=0;i<r;i++)e[i]=0;return-1}for(i=0;i<r;i++)e[i]=t[i+64];return r}(s,i,i.length,r)>=0},Rf.sign.keyPair=function(){var e=new Uint8Array(32),t=new Uint8Array(64);return my(e,t),{publicKey:e,secretKey:t}},Rf.sign.keyPair.fromSecretKey=function(e){if(Sy(e),64!==e.length)throw Error("bad secret key size");for(var t=new Uint8Array(32),r=0;r<t.length;r++)t[r]=e[32+r];return{publicKey:t,secretKey:new Uint8Array(e)}},Rf.sign.keyPair.fromSeed=function(e){if(Sy(e),32!==e.length)throw Error("bad seed size");for(var t=new Uint8Array(32),r=new Uint8Array(64),n=0;n<32;n++)r[n]=e[n];return my(t,r,!0),{publicKey:t,secretKey:r}},Rf.setPRNG=function(e){Nf=e},function(){if(Tf&&Tf.getRandomValues){Rf.setPRNG((function(e,t){var r,n=new Uint8Array(t);for(r=0;r<t;r+=65536)Tf.getRandomValues(n.subarray(r,r+Math.min(t-r,65536)));for(r=0;r<t;r++)e[r]=n[r];!function(e){for(var t=0;t<e.length;t++)e[t]=0}(n)}))}}();var Iy=/*#__PURE__*/Object.freeze({__proto__:null,default:Rf});function By(e,t,r,n,i,s){const a=[16843776,0,65536,16843780,16842756,66564,4,65536,1024,16843776,16843780,1024,16778244,16842756,16777216,4,1028,16778240,16778240,66560,66560,16842752,16842752,16778244,65540,16777220,16777220,65540,0,1028,66564,16777216,65536,16843780,4,16842752,16843776,16777216,16777216,1024,16842756,65536,66560,16777220,1024,4,16778244,66564,16843780,65540,16842752,16778244,16777220,1028,66564,16843776,1028,16778240,16778240,0,65540,66560,0,16842756],o=[-2146402272,-2147450880,32768,1081376,1048576,32,-2146435040,-2147450848,-2147483616,-2146402272,-2146402304,-2147483648,-2147450880,1048576,32,-2146435040,1081344,1048608,-2147450848,0,-2147483648,32768,1081376,-2146435072,1048608,-2147483616,0,1081344,32800,-2146402304,-2146435072,32800,0,1081376,-2146435040,1048576,-2147450848,-2146435072,-2146402304,32768,-2146435072,-2147450880,32,-2146402272,1081376,32,32768,-2147483648,32800,-2146402304,1048576,-2147483616,1048608,-2147450848,-2147483616,1048608,1081344,0,-2147450880,32800,-2147483648,-2146435040,-2146402272,1081344],c=[520,134349312,0,134348808,134218240,0,131592,134218240,131080,134217736,134217736,131072,134349320,131080,134348800,520,134217728,8,134349312,512,131584,134348800,134348808,131592,134218248,131584,131072,134218248,8,134349320,512,134217728,134349312,134217728,131080,520,131072,134349312,134218240,0,512,131080,134349320,134218240,134217736,512,0,134348808,134218248,131072,134217728,134349320,8,131592,131584,134217736,134348800,134218248,520,134348800,131592,8,134348808,131584],u=[8396801,8321,8321,128,8396928,8388737,8388609,8193,0,8396800,8396800,8396929,129,0,8388736,8388609,1,8192,8388608,8396801,128,8388608,8193,8320,8388737,1,8320,8388736,8192,8396928,8396929,129,8388736,8388609,8396800,8396929,129,0,0,8396800,8320,8388736,8388737,1,8396801,8321,8321,128,8396929,129,1,8192,8388609,8193,8396928,8388737,8193,8320,8388608,8396801,128,8388608,8192,8396928],h=[256,34078976,34078720,1107296512,524288,256,1073741824,34078720,1074266368,524288,33554688,1074266368,1107296512,1107820544,524544,1073741824,33554432,1074266112,1074266112,0,1073742080,1107820800,1107820800,33554688,1107820544,1073742080,0,1107296256,34078976,33554432,1107296256,524544,524288,1107296512,256,33554432,1073741824,34078720,1107296512,1074266368,33554688,1073741824,1107820544,34078976,1074266368,256,33554432,1107820544,1107820800,524544,1107296256,1107820800,34078720,0,1074266112,1107296256,524544,33554688,1073742080,524288,0,1074266112,34078976,1073742080],l=[536870928,541065216,16384,541081616,541065216,16,541081616,4194304,536887296,4210704,4194304,536870928,4194320,536887296,536870912,16400,0,4194320,536887312,16384,4210688,536887312,16,541065232,541065232,0,4210704,541081600,16400,4210688,541081600,536870912,536887296,16,541065232,4210688,541081616,4194304,16400,536870928,4194304,536887296,536870912,16400,536870928,541081616,4210688,541065216,4210704,541081600,0,541065232,16,16384,541065216,4210704,16384,4194320,536887312,0,541081600,536870912,4194320,536887312],f=[2097152,69206018,67110914,0,2048,67110914,2099202,69208064,69208066,2097152,0,67108866,2,67108864,69206018,2050,67110912,2099202,2097154,67110912,67108866,69206016,69208064,2097154,69206016,2048,2050,69208066,2099200,2,67108864,2099200,67108864,2099200,2097152,67110914,67110914,69206018,69206018,2,2097154,67108864,67110912,2097152,69208064,2050,2099202,69208064,2050,67108866,69208066,69206016,2099200,0,2,69208066,0,2099202,69206016,2048,67108866,67110912,2048,2097154],y=[268439616,4096,262144,268701760,268435456,268439616,64,268435456,262208,268697600,268701760,266240,268701696,266304,4096,64,268697600,268435520,268439552,4160,266240,262208,268697664,268701696,4160,0,0,268697664,268435520,268439552,266304,262144,266304,262144,268701696,4096,64,268697664,4096,266304,268439552,64,268435520,268697600,268697664,268435456,262144,268439616,0,268701760,262208,268435520,268697600,268439552,268439616,0,268701760,266240,266240,4160,4160,262208,268435456,268701696];let d,p,g,w,A,m,b,k,E,v,K=0,S=t.length;const I=32===e.length?3:9;k=3===I?r?[0,32,2]:[30,-2,-2]:r?[0,32,2,62,30,-2,64,96,2]:[94,62,-2,32,64,2,30,-2,-2],r&&(t=function(e){const t=8-e.length%8;let r;if(!(t<8)){if(8===t)return e;throw Error("des: invalid padding")}r=0;const n=new Uint8Array(e.length+t);for(let t=0;t<e.length;t++)n[t]=e[t];for(let i=0;i<t;i++)n[e.length+i]=r;return n}(t),S=t.length);let B=new Uint8Array(S),C=0;for(;K<S;){for(m=t[K++]<<24|t[K++]<<16|t[K++]<<8|t[K++],b=t[K++]<<24|t[K++]<<16|t[K++]<<8|t[K++],g=252645135&(m>>>4^b),b^=g,m^=g<<4,g=65535&(m>>>16^b),b^=g,m^=g<<16,g=858993459&(b>>>2^m),m^=g,b^=g<<2,g=16711935&(b>>>8^m),m^=g,b^=g<<8,g=1431655765&(m>>>1^b),b^=g,m^=g<<1,m=m<<1|m>>>31,b=b<<1|b>>>31,p=0;p<I;p+=3){for(E=k[p+1],v=k[p+2],d=k[p];d!==E;d+=v)w=b^e[d],A=(b>>>4|b<<28)^e[d+1],g=m,m=b,b=g^(o[w>>>24&63]|u[w>>>16&63]|l[w>>>8&63]|y[63&w]|a[A>>>24&63]|c[A>>>16&63]|h[A>>>8&63]|f[63&A]);g=m,m=b,b=g}m=m>>>1|m<<31,b=b>>>1|b<<31,g=1431655765&(m>>>1^b),b^=g,m^=g<<1,g=16711935&(b>>>8^m),m^=g,b^=g<<8,g=858993459&(b>>>2^m),m^=g,b^=g<<2,g=65535&(m>>>16^b),b^=g,m^=g<<16,g=252645135&(m>>>4^b),b^=g,m^=g<<4,B[C++]=m>>>24,B[C++]=m>>>16&255,B[C++]=m>>>8&255,B[C++]=255&m,B[C++]=b>>>24,B[C++]=b>>>16&255,B[C++]=b>>>8&255,B[C++]=255&b}return r||(B=function(e){let t,r=null;if(t=0,!r){for(r=1;e[e.length-r]===t;)r++;r--}return e.subarray(0,e.length-r)}(B)),B}function Cy(e){const t=[0,4,536870912,536870916,65536,65540,536936448,536936452,512,516,536871424,536871428,66048,66052,536936960,536936964],r=[0,1,1048576,1048577,67108864,67108865,68157440,68157441,256,257,1048832,1048833,67109120,67109121,68157696,68157697],n=[0,8,2048,2056,16777216,16777224,16779264,16779272,0,8,2048,2056,16777216,16777224,16779264,16779272],i=[0,2097152,134217728,136314880,8192,2105344,134225920,136323072,131072,2228224,134348800,136445952,139264,2236416,134356992,136454144],s=[0,262144,16,262160,0,262144,16,262160,4096,266240,4112,266256,4096,266240,4112,266256],a=[0,1024,32,1056,0,1024,32,1056,33554432,33555456,33554464,33555488,33554432,33555456,33554464,33555488],o=[0,268435456,524288,268959744,2,268435458,524290,268959746,0,268435456,524288,268959744,2,268435458,524290,268959746],c=[0,65536,2048,67584,536870912,536936448,536872960,536938496,131072,196608,133120,198656,537001984,537067520,537004032,537069568],u=[0,262144,0,262144,2,262146,2,262146,33554432,33816576,33554432,33816576,33554434,33816578,33554434,33816578],h=[0,268435456,8,268435464,0,268435456,8,268435464,1024,268436480,1032,268436488,1024,268436480,1032,268436488],l=[0,32,0,32,1048576,1048608,1048576,1048608,8192,8224,8192,8224,1056768,1056800,1056768,1056800],f=[0,16777216,512,16777728,2097152,18874368,2097664,18874880,67108864,83886080,67109376,83886592,69206016,85983232,69206528,85983744],y=[0,4096,134217728,134221824,524288,528384,134742016,134746112,16,4112,134217744,134221840,524304,528400,134742032,134746128],d=[0,4,256,260,0,4,256,260,1,5,257,261,1,5,257,261],p=e.length>8?3:1,g=Array(32*p),w=[0,0,1,1,1,1,1,1,0,1,1,1,1,1,1,0];let A,m,b,k=0,E=0;for(let v=0;v<p;v++){let p=e[k++]<<24|e[k++]<<16|e[k++]<<8|e[k++],v=e[k++]<<24|e[k++]<<16|e[k++]<<8|e[k++];b=252645135&(p>>>4^v),v^=b,p^=b<<4,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=858993459&(p>>>2^v),v^=b,p^=b<<2,b=65535&(v>>>-16^p),p^=b,v^=b<<-16,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=16711935&(v>>>8^p),p^=b,v^=b<<8,b=1431655765&(p>>>1^v),v^=b,p^=b<<1,b=p<<8|v>>>20&240,p=v<<24|v<<8&16711680|v>>>8&65280|v>>>24&240,v=b;for(let e=0;e<16;e++)w[e]?(p=p<<2|p>>>26,v=v<<2|v>>>26):(p=p<<1|p>>>27,v=v<<1|v>>>27),p&=-15,v&=-15,A=t[p>>>28]|r[p>>>24&15]|n[p>>>20&15]|i[p>>>16&15]|s[p>>>12&15]|a[p>>>8&15]|o[p>>>4&15],m=c[v>>>28]|u[v>>>24&15]|h[v>>>20&15]|l[v>>>16&15]|f[v>>>12&15]|y[v>>>8&15]|d[v>>>4&15],b=65535&(m>>>16^A),g[E++]=A^b,g[E++]=m^b<<16}return g}function Uy(e){this.key=[];for(let t=0;t<3;t++)this.key.push(new Uint8Array(e.subarray(8*t,8*t+8)));this.encrypt=function(e){return By(Cy(this.key[2]),By(Cy(this.key[1]),By(Cy(this.key[0]),e,!0),!1),!0)}}function Py(){this.BlockSize=8,this.KeySize=16,this.setKey=function(e){if(this.masking=Array(16),this.rotate=Array(16),this.reset(),e.length!==this.KeySize)throw Error("CAST-128: keys must be 16 bytes");return this.keySchedule(e),!0},this.reset=function(){for(let e=0;e<16;e++)this.masking[e]=0,this.rotate[e]=0},this.getBlockSize=function(){return this.BlockSize},this.encrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>>16&255,t[s+6]=o>>>8&255,t[s+7]=255&o}return t},this.decrypt=function(e){const t=Array(e.length);for(let s=0;s<e.length;s+=8){let a,o=e[s]<<24|e[s+1]<<16|e[s+2]<<8|e[s+3],c=e[s+4]<<24|e[s+5]<<16|e[s+6]<<8|e[s+7];a=c,c=o^r(c,this.masking[15],this.rotate[15]),o=a,a=c,c=o^i(c,this.masking[14],this.rotate[14]),o=a,a=c,c=o^n(c,this.masking[13],this.rotate[13]),o=a,a=c,c=o^r(c,this.masking[12],this.rotate[12]),o=a,a=c,c=o^i(c,this.masking[11],this.rotate[11]),o=a,a=c,c=o^n(c,this.masking[10],this.rotate[10]),o=a,a=c,c=o^r(c,this.masking[9],this.rotate[9]),o=a,a=c,c=o^i(c,this.masking[8],this.rotate[8]),o=a,a=c,c=o^n(c,this.masking[7],this.rotate[7]),o=a,a=c,c=o^r(c,this.masking[6],this.rotate[6]),o=a,a=c,c=o^i(c,this.masking[5],this.rotate[5]),o=a,a=c,c=o^n(c,this.masking[4],this.rotate[4]),o=a,a=c,c=o^r(c,this.masking[3],this.rotate[3]),o=a,a=c,c=o^i(c,this.masking[2],this.rotate[2]),o=a,a=c,c=o^n(c,this.masking[1],this.rotate[1]),o=a,a=c,c=o^r(c,this.masking[0],this.rotate[0]),o=a,t[s]=c>>>24&255,t[s+1]=c>>>16&255,t[s+2]=c>>>8&255,t[s+3]=255&c,t[s+4]=o>>>24&255,t[s+5]=o>>16&255,t[s+6]=o>>8&255,t[s+7]=255&o}return t};const e=[,,,,];e[0]=[,,,,],e[0][0]=[4,0,13,15,12,14,8],e[0][1]=[5,2,16,18,17,19,10],e[0][2]=[6,3,23,22,21,20,9],e[0][3]=[7,1,26,25,27,24,11],e[1]=[,,,,],e[1][0]=[0,6,21,23,20,22,16],e[1][1]=[1,4,0,2,1,3,18],e[1][2]=[2,5,7,6,5,4,17],e[1][3]=[3,7,10,9,11,8,19],e[2]=[,,,,],e[2][0]=[4,0,13,15,12,14,8],e[2][1]=[5,2,16,18,17,19,10],e[2][2]=[6,3,23,22,21,20,9],e[2][3]=[7,1,26,25,27,24,11],e[3]=[,,,,],e[3][0]=[0,6,21,23,20,22,16],e[3][1]=[1,4,0,2,1,3,18],e[3][2]=[2,5,7,6,5,4,17],e[3][3]=[3,7,10,9,11,8,19];const t=[,,,,];function r(e,t,r){const n=t+e,i=n<<r|n>>>32-r;return(s[0][i>>>24]^s[1][i>>>16&255])-s[2][i>>>8&255]+s[3][255&i]}function n(e,t,r){const n=t^e,i=n<<r|n>>>32-r;return s[0][i>>>24]-s[1][i>>>16&255]+s[2][i>>>8&255]^s[3][255&i]}function i(e,t,r){const n=t-e,i=n<<r|n>>>32-r;return(s[0][i>>>24]+s[1][i>>>16&255]^s[2][i>>>8&255])-s[3][255&i]}t[0]=[,,,,],t[0][0]=[24,25,23,22,18],t[0][1]=[26,27,21,20,22],t[0][2]=[28,29,19,18,25],t[0][3]=[30,31,17,16,28],t[1]=[,,,,],t[1][0]=[3,2,12,13,8],t[1][1]=[1,0,14,15,13],t[1][2]=[7,6,8,9,3],t[1][3]=[5,4,10,11,7],t[2]=[,,,,],t[2][0]=[19,18,28,29,25],t[2][1]=[17,16,30,31,28],t[2][2]=[23,22,24,25,18],t[2][3]=[21,20,26,27,22],t[3]=[,,,,],t[3][0]=[8,9,7,6,3],t[3][1]=[10,11,5,4,7],t[3][2]=[12,13,3,2,8],t[3][3]=[14,15,1,0,13],this.keySchedule=function(r){const n=[,,,,,,,,],i=Array(32);let a;for(let e=0;e<4;e++)a=4*e,n[e]=r[a]<<24|r[a+1]<<16|r[a+2]<<8|r[a+3];const o=[6,7,4,5];let c,u=0;for(let r=0;r<2;r++)for(let r=0;r<4;r++){for(a=0;a<4;a++){const t=e[r][a];c=n[t[1]],c^=s[4][n[t[2]>>>2]>>>24-8*(3&t[2])&255],c^=s[5][n[t[3]>>>2]>>>24-8*(3&t[3])&255],c^=s[6][n[t[4]>>>2]>>>24-8*(3&t[4])&255],c^=s[7][n[t[5]>>>2]>>>24-8*(3&t[5])&255],c^=s[o[a]][n[t[6]>>>2]>>>24-8*(3&t[6])&255],n[t[0]]=c}for(a=0;a<4;a++){const e=t[r][a];c=s[4][n[e[0]>>>2]>>>24-8*(3&e[0])&255],c^=s[5][n[e[1]>>>2]>>>24-8*(3&e[1])&255],c^=s[6][n[e[2]>>>2]>>>24-8*(3&e[2])&255],c^=s[7][n[e[3]>>>2]>>>24-8*(3&e[3])&255],c^=s[4+a][n[e[4]>>>2]>>>24-8*(3&e[4])&255],i[u]=c,u++}}for(let e=0;e<16;e++)this.masking[e]=i[e],this.rotate[e]=31&i[16+e]};const s=[,,,,,,,,];s[0]=[821772500,2678128395,1810681135,1059425402,505495343,2617265619,1610868032,3483355465,3218386727,2294005173,3791863952,2563806837,1852023008,365126098,3269944861,584384398,677919599,3229601881,4280515016,2002735330,1136869587,3744433750,2289869850,2731719981,2714362070,879511577,1639411079,575934255,717107937,2857637483,576097850,2731753936,1725645e3,2810460463,5111599,767152862,2543075244,1251459544,1383482551,3052681127,3089939183,3612463449,1878520045,1510570527,2189125840,2431448366,582008916,3163445557,1265446783,1354458274,3529918736,3202711853,3073581712,3912963487,3029263377,1275016285,4249207360,2905708351,3304509486,1442611557,3585198765,2712415662,2731849581,3248163920,2283946226,208555832,2766454743,1331405426,1447828783,3315356441,3108627284,2957404670,2981538698,3339933917,1669711173,286233437,1465092821,1782121619,3862771680,710211251,980974943,1651941557,430374111,2051154026,704238805,4128970897,3144820574,2857402727,948965521,3333752299,2227686284,718756367,2269778983,2731643755,718440111,2857816721,3616097120,1113355533,2478022182,410092745,1811985197,1944238868,2696854588,1415722873,1682284203,1060277122,1998114690,1503841958,82706478,2315155686,1068173648,845149890,2167947013,1768146376,1993038550,3566826697,3390574031,940016341,3355073782,2328040721,904371731,1205506512,4094660742,2816623006,825647681,85914773,2857843460,1249926541,1417871568,3287612,3211054559,3126306446,1975924523,1353700161,2814456437,2438597621,1800716203,722146342,2873936343,1151126914,4160483941,2877670899,458611604,2866078500,3483680063,770352098,2652916994,3367839148,3940505011,3585973912,3809620402,718646636,2504206814,2914927912,3631288169,2857486607,2860018678,575749918,2857478043,718488780,2069512688,3548183469,453416197,1106044049,3032691430,52586708,3378514636,3459808877,3211506028,1785789304,218356169,3571399134,3759170522,1194783844,1523787992,3007827094,1975193539,2555452411,1341901877,3045838698,3776907964,3217423946,2802510864,2889438986,1057244207,1636348243,3761863214,1462225785,2632663439,481089165,718503062,24497053,3332243209,3344655856,3655024856,3960371065,1195698900,2971415156,3710176158,2115785917,4027663609,3525578417,2524296189,2745972565,3564906415,1372086093,1452307862,2780501478,1476592880,3389271281,18495466,2378148571,901398090,891748256,3279637769,3157290713,2560960102,1447622437,4284372637,216884176,2086908623,1879786977,3588903153,2242455666,2938092967,3559082096,2810645491,758861177,1121993112,215018983,642190776,4169236812,1196255959,2081185372,3508738393,941322904,4124243163,2877523539,1848581667,2205260958,3180453958,2589345134,3694731276,550028657,2519456284,3789985535,2973870856,2093648313,443148163,46942275,2734146937,1117713533,1115362972,1523183689,3717140224,1551984063],s[1]=[522195092,4010518363,1776537470,960447360,4267822970,4005896314,1435016340,1929119313,2913464185,1310552629,3579470798,3724818106,2579771631,1594623892,417127293,2715217907,2696228731,1508390405,3994398868,3925858569,3695444102,4019471449,3129199795,3770928635,3520741761,990456497,4187484609,2783367035,21106139,3840405339,631373633,3783325702,532942976,396095098,3548038825,4267192484,2564721535,2011709262,2039648873,620404603,3776170075,2898526339,3612357925,4159332703,1645490516,223693667,1567101217,3362177881,1029951347,3470931136,3570957959,1550265121,119497089,972513919,907948164,3840628539,1613718692,3594177948,465323573,2659255085,654439692,2575596212,2699288441,3127702412,277098644,624404830,4100943870,2717858591,546110314,2403699828,3655377447,1321679412,4236791657,1045293279,4010672264,895050893,2319792268,494945126,1914543101,2777056443,3894764339,2219737618,311263384,4275257268,3458730721,669096869,3584475730,3835122877,3319158237,3949359204,2005142349,2713102337,2228954793,3769984788,569394103,3855636576,1425027204,108000370,2736431443,3671869269,3043122623,1750473702,2211081108,762237499,3972989403,2798899386,3061857628,2943854345,867476300,964413654,1591880597,1594774276,2179821409,552026980,3026064248,3726140315,2283577634,3110545105,2152310760,582474363,1582640421,1383256631,2043843868,3322775884,1217180674,463797851,2763038571,480777679,2718707717,2289164131,3118346187,214354409,200212307,3810608407,3025414197,2674075964,3997296425,1847405948,1342460550,510035443,4080271814,815934613,833030224,1620250387,1945732119,2703661145,3966000196,1388869545,3456054182,2687178561,2092620194,562037615,1356438536,3409922145,3261847397,1688467115,2150901366,631725691,3840332284,549916902,3455104640,394546491,837744717,2114462948,751520235,2221554606,2415360136,3999097078,2063029875,803036379,2702586305,821456707,3019566164,360699898,4018502092,3511869016,3677355358,2402471449,812317050,49299192,2570164949,3259169295,2816732080,3331213574,3101303564,2156015656,3705598920,3546263921,143268808,3200304480,1638124008,3165189453,3341807610,578956953,2193977524,3638120073,2333881532,807278310,658237817,2969561766,1641658566,11683945,3086995007,148645947,1138423386,4158756760,1981396783,2401016740,3699783584,380097457,2680394679,2803068651,3334260286,441530178,4016580796,1375954390,761952171,891809099,2183123478,157052462,3683840763,1592404427,341349109,2438483839,1417898363,644327628,2233032776,2353769706,2201510100,220455161,1815641738,182899273,2995019788,3627381533,3702638151,2890684138,1052606899,588164016,1681439879,4038439418,2405343923,4229449282,167996282,1336969661,1688053129,2739224926,1543734051,1046297529,1138201970,2121126012,115334942,1819067631,1902159161,1941945968,2206692869,1159982321],s[2]=[2381300288,637164959,3952098751,3893414151,1197506559,916448331,2350892612,2932787856,3199334847,4009478890,3905886544,1373570990,2450425862,4037870920,3778841987,2456817877,286293407,124026297,3001279700,1028597854,3115296800,4208886496,2691114635,2188540206,1430237888,1218109995,3572471700,308166588,570424558,2187009021,2455094765,307733056,1310360322,3135275007,1384269543,2388071438,863238079,2359263624,2801553128,3380786597,2831162807,1470087780,1728663345,4072488799,1090516929,532123132,2389430977,1132193179,2578464191,3051079243,1670234342,1434557849,2711078940,1241591150,3314043432,3435360113,3091448339,1812415473,2198440252,267246943,796911696,3619716990,38830015,1526438404,2806502096,374413614,2943401790,1489179520,1603809326,1920779204,168801282,260042626,2358705581,1563175598,2397674057,1356499128,2217211040,514611088,2037363785,2186468373,4022173083,2792511869,2913485016,1173701892,4200428547,3896427269,1334932762,2455136706,602925377,2835607854,1613172210,41346230,2499634548,2457437618,2188827595,41386358,4172255629,1313404830,2405527007,3801973774,2217704835,873260488,2528884354,2478092616,4012915883,2555359016,2006953883,2463913485,575479328,2218240648,2099895446,660001756,2341502190,3038761536,3888151779,3848713377,3286851934,1022894237,1620365795,3449594689,1551255054,15374395,3570825345,4249311020,4151111129,3181912732,310226346,1133119310,530038928,136043402,2476768958,3107506709,2544909567,1036173560,2367337196,1681395281,1758231547,3641649032,306774401,1575354324,3716085866,1990386196,3114533736,2455606671,1262092282,3124342505,2768229131,4210529083,1833535011,423410938,660763973,2187129978,1639812e3,3508421329,3467445492,310289298,272797111,2188552562,2456863912,310240523,677093832,1013118031,901835429,3892695601,1116285435,3036471170,1337354835,243122523,520626091,277223598,4244441197,4194248841,1766575121,594173102,316590669,742362309,3536858622,4176435350,3838792410,2501204839,1229605004,3115755532,1552908988,2312334149,979407927,3959474601,1148277331,176638793,3614686272,2083809052,40992502,1340822838,2731552767,3535757508,3560899520,1354035053,122129617,7215240,2732932949,3118912700,2718203926,2539075635,3609230695,3725561661,1928887091,2882293555,1988674909,2063640240,2491088897,1459647954,4189817080,2302804382,1113892351,2237858528,1927010603,4002880361,1856122846,1594404395,2944033133,3855189863,3474975698,1643104450,4054590833,3431086530,1730235576,2984608721,3084664418,2131803598,4178205752,267404349,1617849798,1616132681,1462223176,736725533,2327058232,551665188,2945899023,1749386277,2575514597,1611482493,674206544,2201269090,3642560800,728599968,1680547377,2620414464,1388111496,453204106,4156223445,1094905244,2754698257,2201108165,3757000246,2704524545,3922940700,3996465027],s[3]=[2645754912,532081118,2814278639,3530793624,1246723035,1689095255,2236679235,4194438865,2116582143,3859789411,157234593,2045505824,4245003587,1687664561,4083425123,605965023,672431967,1336064205,3376611392,214114848,4258466608,3232053071,489488601,605322005,3998028058,264917351,1912574028,756637694,436560991,202637054,135989450,85393697,2152923392,3896401662,2895836408,2145855233,3535335007,115294817,3147733898,1922296357,3464822751,4117858305,1037454084,2725193275,2127856640,1417604070,1148013728,1827919605,642362335,2929772533,909348033,1346338451,3547799649,297154785,1917849091,4161712827,2883604526,3968694238,1469521537,3780077382,3375584256,1763717519,136166297,4290970789,1295325189,2134727907,2798151366,1566297257,3672928234,2677174161,2672173615,965822077,2780786062,289653839,1133871874,3491843819,35685304,1068898316,418943774,672553190,642281022,2346158704,1954014401,3037126780,4079815205,2030668546,3840588673,672283427,1776201016,359975446,3750173538,555499703,2769985273,1324923,69110472,152125443,3176785106,3822147285,1340634837,798073664,1434183902,15393959,216384236,1303690150,3881221631,3711134124,3960975413,106373927,2578434224,1455997841,1801814300,1578393881,1854262133,3188178946,3258078583,2302670060,1539295533,3505142565,3078625975,2372746020,549938159,3278284284,2620926080,181285381,2865321098,3970029511,68876850,488006234,1728155692,2608167508,836007927,2435231793,919367643,3339422534,3655756360,1457871481,40520939,1380155135,797931188,234455205,2255801827,3990488299,397000196,739833055,3077865373,2871719860,4022553888,772369276,390177364,3853951029,557662966,740064294,1640166671,1699928825,3535942136,622006121,3625353122,68743880,1742502,219489963,1664179233,1577743084,1236991741,410585305,2366487942,823226535,1050371084,3426619607,3586839478,212779912,4147118561,1819446015,1911218849,530248558,3486241071,3252585495,2886188651,3410272728,2342195030,20547779,2982490058,3032363469,3631753222,312714466,1870521650,1493008054,3491686656,615382978,4103671749,2534517445,1932181,2196105170,278426614,6369430,3274544417,2913018367,697336853,2143000447,2946413531,701099306,1558357093,2805003052,3500818408,2321334417,3567135975,216290473,3591032198,23009561,1996984579,3735042806,2024298078,3739440863,569400510,2339758983,3016033873,3097871343,3639523026,3844324983,3256173865,795471839,2951117563,4101031090,4091603803,3603732598,971261452,534414648,428311343,3389027175,2844869880,694888862,1227866773,2456207019,3043454569,2614353370,3749578031,3676663836,459166190,4132644070,1794958188,51825668,2252611902,3084671440,2036672799,3436641603,1099053433,2469121526,3059204941,1323291266,2061838604,1018778475,2233344254,2553501054,334295216,3556750194,1065731521,183467730],s[4]=[2127105028,745436345,2601412319,2788391185,3093987327,500390133,1155374404,389092991,150729210,3891597772,3523549952,1935325696,716645080,946045387,2901812282,1774124410,3869435775,4039581901,3293136918,3438657920,948246080,363898952,3867875531,1286266623,1598556673,68334250,630723836,1104211938,1312863373,613332731,2377784574,1101634306,441780740,3129959883,1917973735,2510624549,3238456535,2544211978,3308894634,1299840618,4076074851,1756332096,3977027158,297047435,3790297736,2265573040,3621810518,1311375015,1667687725,47300608,3299642885,2474112369,201668394,1468347890,576830978,3594690761,3742605952,1958042578,1747032512,3558991340,1408974056,3366841779,682131401,1033214337,1545599232,4265137049,206503691,103024618,2855227313,1337551222,2428998917,2963842932,4015366655,3852247746,2796956967,3865723491,3747938335,247794022,3755824572,702416469,2434691994,397379957,851939612,2314769512,218229120,1380406772,62274761,214451378,3170103466,2276210409,3845813286,28563499,446592073,1693330814,3453727194,29968656,3093872512,220656637,2470637031,77972100,1667708854,1358280214,4064765667,2395616961,325977563,4277240721,4220025399,3605526484,3355147721,811859167,3069544926,3962126810,652502677,3075892249,4132761541,3498924215,1217549313,3250244479,3858715919,3053989961,1538642152,2279026266,2875879137,574252750,3324769229,2651358713,1758150215,141295887,2719868960,3515574750,4093007735,4194485238,1082055363,3417560400,395511885,2966884026,179534037,3646028556,3738688086,1092926436,2496269142,257381841,3772900718,1636087230,1477059743,2499234752,3811018894,2675660129,3285975680,90732309,1684827095,1150307763,1723134115,3237045386,1769919919,1240018934,815675215,750138730,2239792499,1234303040,1995484674,138143821,675421338,1145607174,1936608440,3238603024,2345230278,2105974004,323969391,779555213,3004902369,2861610098,1017501463,2098600890,2628620304,2940611490,2682542546,1171473753,3656571411,3687208071,4091869518,393037935,159126506,1662887367,1147106178,391545844,3452332695,1891500680,3016609650,1851642611,546529401,1167818917,3194020571,2848076033,3953471836,575554290,475796850,4134673196,450035699,2351251534,844027695,1080539133,86184846,1554234488,3692025454,1972511363,2018339607,1491841390,1141460869,1061690759,4244549243,2008416118,2351104703,2868147542,1598468138,722020353,1027143159,212344630,1387219594,1725294528,3745187956,2500153616,458938280,4129215917,1828119673,544571780,3503225445,2297937496,1241802790,267843827,2694610800,1397140384,1558801448,3782667683,1806446719,929573330,2234912681,400817706,616011623,4121520928,3603768725,1761550015,1968522284,4053731006,4192232858,4005120285,872482584,3140537016,3894607381,2287405443,1963876937,3663887957,1584857e3,2975024454,1833426440,4025083860],s[5]=[4143615901,749497569,1285769319,3795025788,2514159847,23610292,3974978748,844452780,3214870880,3751928557,2213566365,1676510905,448177848,3730751033,4086298418,2307502392,871450977,3222878141,4110862042,3831651966,2735270553,1310974780,2043402188,1218528103,2736035353,4274605013,2702448458,3936360550,2693061421,162023535,2827510090,687910808,23484817,3784910947,3371371616,779677500,3503626546,3473927188,4157212626,3500679282,4248902014,2466621104,3899384794,1958663117,925738300,1283408968,3669349440,1840910019,137959847,2679828185,1239142320,1315376211,1547541505,1690155329,739140458,3128809933,3933172616,3876308834,905091803,1548541325,4040461708,3095483362,144808038,451078856,676114313,2861728291,2469707347,993665471,373509091,2599041286,4025009006,4170239449,2149739950,3275793571,3749616649,2794760199,1534877388,572371878,2590613551,1753320020,3467782511,1405125690,4270405205,633333386,3026356924,3475123903,632057672,2846462855,1404951397,3882875879,3915906424,195638627,2385783745,3902872553,1233155085,3355999740,2380578713,2702246304,2144565621,3663341248,3894384975,2502479241,4248018925,3094885567,1594115437,572884632,3385116731,767645374,1331858858,1475698373,3793881790,3532746431,1321687957,619889600,1121017241,3440213920,2070816767,2833025776,1933951238,4095615791,890643334,3874130214,859025556,360630002,925594799,1764062180,3920222280,4078305929,979562269,2810700344,4087740022,1949714515,546639971,1165388173,3069891591,1495988560,922170659,1291546247,2107952832,1813327274,3406010024,3306028637,4241950635,153207855,2313154747,1608695416,1150242611,1967526857,721801357,1220138373,3691287617,3356069787,2112743302,3281662835,1111556101,1778980689,250857638,2298507990,673216130,2846488510,3207751581,3562756981,3008625920,3417367384,2198807050,529510932,3547516680,3426503187,2364944742,102533054,2294910856,1617093527,1204784762,3066581635,1019391227,1069574518,1317995090,1691889997,3661132003,510022745,3238594800,1362108837,1817929911,2184153760,805817662,1953603311,3699844737,120799444,2118332377,207536705,2282301548,4120041617,145305846,2508124933,3086745533,3261524335,1877257368,2977164480,3160454186,2503252186,4221677074,759945014,254147243,2767453419,3801518371,629083197,2471014217,907280572,3900796746,940896768,2751021123,2625262786,3161476951,3661752313,3260732218,1425318020,2977912069,1496677566,3988592072,2140652971,3126511541,3069632175,977771578,1392695845,1698528874,1411812681,1369733098,1343739227,3620887944,1142123638,67414216,3102056737,3088749194,1626167401,2546293654,3941374235,697522451,33404913,143560186,2595682037,994885535,1247667115,3859094837,2699155541,3547024625,4114935275,2968073508,3199963069,2732024527,1237921620,951448369,1898488916,1211705605,2790989240,2233243581,3598044975],s[6]=[2246066201,858518887,1714274303,3485882003,713916271,2879113490,3730835617,539548191,36158695,1298409750,419087104,1358007170,749914897,2989680476,1261868530,2995193822,2690628854,3443622377,3780124940,3796824509,2976433025,4259637129,1551479e3,512490819,1296650241,951993153,2436689437,2460458047,144139966,3136204276,310820559,3068840729,643875328,1969602020,1680088954,2185813161,3283332454,672358534,198762408,896343282,276269502,3014846926,84060815,197145886,376173866,3943890818,3813173521,3545068822,1316698879,1598252827,2633424951,1233235075,859989710,2358460855,3503838400,3409603720,1203513385,1193654839,2792018475,2060853022,207403770,1144516871,3068631394,1121114134,177607304,3785736302,326409831,1929119770,2983279095,4183308101,3474579288,3200513878,3228482096,119610148,1170376745,3378393471,3163473169,951863017,3337026068,3135789130,2907618374,1183797387,2015970143,4045674555,2182986399,2952138740,3928772205,384012900,2454997643,10178499,2879818989,2596892536,111523738,2995089006,451689641,3196290696,235406569,1441906262,3890558523,3013735005,4158569349,1644036924,376726067,1006849064,3664579700,2041234796,1021632941,1374734338,2566452058,371631263,4007144233,490221539,206551450,3140638584,1053219195,1853335209,3412429660,3562156231,735133835,1623211703,3104214392,2738312436,4096837757,3366392578,3110964274,3956598718,3196820781,2038037254,3877786376,2339753847,300912036,3766732888,2372630639,1516443558,4200396704,1574567987,4069441456,4122592016,2699739776,146372218,2748961456,2043888151,35287437,2596680554,655490400,1132482787,110692520,1031794116,2188192751,1324057718,1217253157,919197030,686247489,3261139658,1028237775,3135486431,3059715558,2460921700,986174950,2661811465,4062904701,2752986992,3709736643,367056889,1353824391,731860949,1650113154,1778481506,784341916,357075625,3608602432,1074092588,2480052770,3811426202,92751289,877911070,3600361838,1231880047,480201094,3756190983,3094495953,434011822,87971354,363687820,1717726236,1901380172,3926403882,2481662265,400339184,1490350766,2661455099,1389319756,2558787174,784598401,1983468483,30828846,3550527752,2716276238,3841122214,1765724805,1955612312,1277890269,1333098070,1564029816,2704417615,1026694237,3287671188,1260819201,3349086767,1016692350,1582273796,1073413053,1995943182,694588404,1025494639,3323872702,3551898420,4146854327,453260480,1316140391,1435673405,3038941953,3486689407,1622062951,403978347,817677117,950059133,4246079218,3278066075,1486738320,1417279718,481875527,2549965225,3933690356,760697757,1452955855,3897451437,1177426808,1702951038,4085348628,2447005172,1084371187,3516436277,3068336338,1073369276,1027665953,3284188590,1230553676,1368340146,2226246512,267243139,2274220762,4070734279,2497715176,2423353163,2504755875],s[7]=[3793104909,3151888380,2817252029,895778965,2005530807,3871412763,237245952,86829237,296341424,3851759377,3974600970,2475086196,709006108,1994621201,2972577594,937287164,3734691505,168608556,3189338153,2225080640,3139713551,3033610191,3025041904,77524477,185966941,1208824168,2344345178,1721625922,3354191921,1066374631,1927223579,1971335949,2483503697,1551748602,2881383779,2856329572,3003241482,48746954,1398218158,2050065058,313056748,4255789917,393167848,1912293076,940740642,3465845460,3091687853,2522601570,2197016661,1727764327,364383054,492521376,1291706479,3264136376,1474851438,1685747964,2575719748,1619776915,1814040067,970743798,1561002147,2925768690,2123093554,1880132620,3151188041,697884420,2550985770,2607674513,2659114323,110200136,1489731079,997519150,1378877361,3527870668,478029773,2766872923,1022481122,431258168,1112503832,897933369,2635587303,669726182,3383752315,918222264,163866573,3246985393,3776823163,114105080,1903216136,761148244,3571337562,1690750982,3166750252,1037045171,1888456500,2010454850,642736655,616092351,365016990,1185228132,4174898510,1043824992,2023083429,2241598885,3863320456,3279669087,3674716684,108438443,2132974366,830746235,606445527,4173263986,2204105912,1844756978,2532684181,4245352700,2969441100,3796921661,1335562986,4061524517,2720232303,2679424040,634407289,885462008,3294724487,3933892248,2094100220,339117932,4048830727,3202280980,1458155303,2689246273,1022871705,2464987878,3714515309,353796843,2822958815,4256850100,4052777845,551748367,618185374,3778635579,4020649912,1904685140,3069366075,2670879810,3407193292,2954511620,4058283405,2219449317,3135758300,1120655984,3447565834,1474845562,3577699062,550456716,3466908712,2043752612,881257467,869518812,2005220179,938474677,3305539448,3850417126,1315485940,3318264702,226533026,965733244,321539988,1136104718,804158748,573969341,3708209826,937399083,3290727049,2901666755,1461057207,4013193437,4066861423,3242773476,2421326174,1581322155,3028952165,786071460,3900391652,3918438532,1485433313,4023619836,3708277595,3678951060,953673138,1467089153,1930354364,1533292819,2492563023,1346121658,1685000834,1965281866,3765933717,4190206607,2052792609,3515332758,690371149,3125873887,2180283551,2903598061,3933952357,436236910,289419410,14314871,1242357089,2904507907,1616633776,2666382180,585885352,3471299210,2699507360,1432659641,277164553,3354103607,770115018,2303809295,3741942315,3177781868,2853364978,2269453327,3774259834,987383833,1290892879,225909803,1741533526,890078084,1496906255,1111072499,916028167,243534141,1252605537,2204162171,531204876,290011180,3916834213,102027703,237315147,209093447,1486785922,220223953,2758195998,4175039106,82940208,3127791296,2569425252,518464269,1353887104,3941492737,2377294467,3935040926]}function Dy(e){this.cast5=new Py,this.cast5.setKey(e),this.encrypt=function(e){return this.cast5.encrypt(e)}}Uy.keySize=Uy.prototype.keySize=24,Uy.blockSize=Uy.prototype.blockSize=8,Dy.blockSize=Dy.prototype.blockSize=8,Dy.keySize=Dy.prototype.keySize=16;const xy=4294967295;function Qy(e,t){return(e<<t|e>>>32-t)&xy}function My(e,t){return e[t]|e[t+1]<<8|e[t+2]<<16|e[t+3]<<24}function Ly(e,t,r){e.splice(t,4,255&r,r>>>8&255,r>>>16&255,r>>>24&255)}function Ty(e,t){return e>>>8*t&255}function Ry(e){this.tf=function(){let e=null,t=null,r=-1,n=[],i=[[],[],[],[]];function s(e){return i[0][Ty(e,0)]^i[1][Ty(e,1)]^i[2][Ty(e,2)]^i[3][Ty(e,3)]}function a(e){return i[0][Ty(e,3)]^i[1][Ty(e,0)]^i[2][Ty(e,1)]^i[3][Ty(e,2)]}function o(e,t){let r=s(t[0]),i=a(t[1]);t[2]=Qy(t[2]^r+i+n[4*e+8]&xy,31),t[3]=Qy(t[3],1)^r+2*i+n[4*e+9]&xy,r=s(t[2]),i=a(t[3]),t[0]=Qy(t[0]^r+i+n[4*e+10]&xy,31),t[1]=Qy(t[1],1)^r+2*i+n[4*e+11]&xy}function c(e,t){let r=s(t[0]),i=a(t[1]);t[2]=Qy(t[2],1)^r+i+n[4*e+10]&xy,t[3]=Qy(t[3]^r+2*i+n[4*e+11]&xy,31),r=s(t[2]),i=a(t[3]),t[0]=Qy(t[0],1)^r+i+n[4*e+8]&xy,t[1]=Qy(t[1]^r+2*i+n[4*e+9]&xy,31)}return{name:"twofish",blocksize:16,open:function(t){let r,s,a,o,c;e=t;const u=[],h=[],l=[];let f;const y=[];let d,p,g;const w=[[8,1,7,13,6,15,3,2,0,11,5,9,14,12,10,4],[2,8,11,13,15,7,6,14,3,1,9,4,0,10,12,5]],A=[[14,12,11,8,1,2,3,5,15,4,10,6,7,0,9,13],[1,14,2,11,4,12,3,7,6,13,10,5,15,9,0,8]],m=[[11,10,5,14,6,13,9,0,12,8,15,3,2,4,7,1],[4,12,7,5,1,6,9,10,0,14,13,8,2,11,3,15]],b=[[13,7,15,4,1,2,6,14,9,11,3,0,8,5,12,10],[11,9,5,1,12,3,13,14,6,4,7,15,2,0,8,10]],k=[0,8,1,9,2,10,3,11,4,12,5,13,6,14,7,15],E=[0,9,2,11,4,13,6,15,8,1,10,3,12,5,14,7],v=[[],[]],K=[[],[],[],[]];function S(e){return e^e>>2^[0,90,180,238][3&e]}function I(e){return e^e>>1^e>>2^[0,238,180,90][3&e]}function B(e,t){let r,n,i;for(r=0;r<8;r++)n=t>>>24,t=t<<8&xy|e>>>24,e=e<<8&xy,i=n<<1,128&n&&(i^=333),t^=n^i<<16,i^=n>>>1,1&n&&(i^=166),t^=i<<24|i<<8;return t}function C(e,t){const r=t>>4,n=15&t,i=w[e][r^n],s=A[e][k[n]^E[r]];return b[e][k[s]^E[i]]<<4|m[e][i^s]}function U(e,t){let r=Ty(e,0),n=Ty(e,1),i=Ty(e,2),s=Ty(e,3);switch(f){case 4:r=v[1][r]^Ty(t[3],0),n=v[0][n]^Ty(t[3],1),i=v[0][i]^Ty(t[3],2),s=v[1][s]^Ty(t[3],3);case 3:r=v[1][r]^Ty(t[2],0),n=v[1][n]^Ty(t[2],1),i=v[0][i]^Ty(t[2],2),s=v[0][s]^Ty(t[2],3);case 2:r=v[0][v[0][r]^Ty(t[1],0)]^Ty(t[0],0),n=v[0][v[1][n]^Ty(t[1],1)]^Ty(t[0],1),i=v[1][v[0][i]^Ty(t[1],2)]^Ty(t[0],2),s=v[1][v[1][s]^Ty(t[1],3)]^Ty(t[0],3)}return K[0][r]^K[1][n]^K[2][i]^K[3][s]}for(e=e.slice(0,32),r=e.length;16!==r&&24!==r&&32!==r;)e[r++]=0;for(r=0;r<e.length;r+=4)l[r>>2]=My(e,r);for(r=0;r<256;r++)v[0][r]=C(0,r),v[1][r]=C(1,r);for(r=0;r<256;r++)d=v[1][r],p=S(d),g=I(d),K[0][r]=d+(p<<8)+(g<<16)+(g<<24),K[2][r]=p+(g<<8)+(d<<16)+(g<<24),d=v[0][r],p=S(d),g=I(d),K[1][r]=g+(g<<8)+(p<<16)+(d<<24),K[3][r]=p+(d<<8)+(g<<16)+(p<<24);for(f=l.length/2,r=0;r<f;r++)s=l[r+r],u[r]=s,a=l[r+r+1],h[r]=a,y[f-r-1]=B(s,a);for(r=0;r<40;r+=2)s=16843009*r,a=s+16843009,s=U(s,u),a=Qy(U(a,h),8),n[r]=s+a&xy,n[r+1]=Qy(s+2*a,9);for(r=0;r<256;r++)switch(s=a=o=c=r,f){case 4:s=v[1][s]^Ty(y[3],0),a=v[0][a]^Ty(y[3],1),o=v[0][o]^Ty(y[3],2),c=v[1][c]^Ty(y[3],3);case 3:s=v[1][s]^Ty(y[2],0),a=v[1][a]^Ty(y[2],1),o=v[0][o]^Ty(y[2],2),c=v[0][c]^Ty(y[2],3);case 2:i[0][r]=K[0][v[0][v[0][s]^Ty(y[1],0)]^Ty(y[0],0)],i[1][r]=K[1][v[0][v[1][a]^Ty(y[1],1)]^Ty(y[0],1)],i[2][r]=K[2][v[1][v[0][o]^Ty(y[1],2)]^Ty(y[0],2)],i[3][r]=K[3][v[1][v[1][c]^Ty(y[1],3)]^Ty(y[0],3)]}},close:function(){n=[],i=[[],[],[],[]]},encrypt:function(e,i){t=e,r=i;const s=[My(t,r)^n[0],My(t,r+4)^n[1],My(t,r+8)^n[2],My(t,r+12)^n[3]];for(let e=0;e<8;e++)o(e,s);return Ly(t,r,s[2]^n[4]),Ly(t,r+4,s[3]^n[5]),Ly(t,r+8,s[0]^n[6]),Ly(t,r+12,s[1]^n[7]),r+=16,t},decrypt:function(e,i){t=e,r=i;const s=[My(t,r)^n[4],My(t,r+4)^n[5],My(t,r+8)^n[6],My(t,r+12)^n[7]];for(let e=7;e>=0;e--)c(e,s);Ly(t,r,s[2]^n[0]),Ly(t,r+4,s[3]^n[1]),Ly(t,r+8,s[0]^n[2]),Ly(t,r+12,s[1]^n[3]),r+=16},finalize:function(){return t}}}(),this.tf.open(Array.from(e),0),this.encrypt=function(e){return this.tf.encrypt(Array.from(e),0)}}function Fy(){}function Ny(e){this.bf=new Fy,this.bf.init(e),this.encrypt=function(e){return this.bf.encryptBlock(e)}}Ry.keySize=Ry.prototype.keySize=32,Ry.blockSize=Ry.prototype.blockSize=16,Fy.prototype.BLOCKSIZE=8,Fy.prototype.SBOXES=[[3509652390,2564797868,805139163,3491422135,3101798381,1780907670,3128725573,4046225305,614570311,3012652279,134345442,2240740374,1667834072,1901547113,2757295779,4103290238,227898511,1921955416,1904987480,2182433518,2069144605,3260701109,2620446009,720527379,3318853667,677414384,3393288472,3101374703,2390351024,1614419982,1822297739,2954791486,3608508353,3174124327,2024746970,1432378464,3864339955,2857741204,1464375394,1676153920,1439316330,715854006,3033291828,289532110,2706671279,2087905683,3018724369,1668267050,732546397,1947742710,3462151702,2609353502,2950085171,1814351708,2050118529,680887927,999245976,1800124847,3300911131,1713906067,1641548236,4213287313,1216130144,1575780402,4018429277,3917837745,3693486850,3949271944,596196993,3549867205,258830323,2213823033,772490370,2760122372,1774776394,2652871518,566650946,4142492826,1728879713,2882767088,1783734482,3629395816,2517608232,2874225571,1861159788,326777828,3124490320,2130389656,2716951837,967770486,1724537150,2185432712,2364442137,1164943284,2105845187,998989502,3765401048,2244026483,1075463327,1455516326,1322494562,910128902,469688178,1117454909,936433444,3490320968,3675253459,1240580251,122909385,2157517691,634681816,4142456567,3825094682,3061402683,2540495037,79693498,3249098678,1084186820,1583128258,426386531,1761308591,1047286709,322548459,995290223,1845252383,2603652396,3431023940,2942221577,3202600964,3727903485,1712269319,422464435,3234572375,1170764815,3523960633,3117677531,1434042557,442511882,3600875718,1076654713,1738483198,4213154764,2393238008,3677496056,1014306527,4251020053,793779912,2902807211,842905082,4246964064,1395751752,1040244610,2656851899,3396308128,445077038,3742853595,3577915638,679411651,2892444358,2354009459,1767581616,3150600392,3791627101,3102740896,284835224,4246832056,1258075500,768725851,2589189241,3069724005,3532540348,1274779536,3789419226,2764799539,1660621633,3471099624,4011903706,913787905,3497959166,737222580,2514213453,2928710040,3937242737,1804850592,3499020752,2949064160,2386320175,2390070455,2415321851,4061277028,2290661394,2416832540,1336762016,1754252060,3520065937,3014181293,791618072,3188594551,3933548030,2332172193,3852520463,3043980520,413987798,3465142937,3030929376,4245938359,2093235073,3534596313,375366246,2157278981,2479649556,555357303,3870105701,2008414854,3344188149,4221384143,3956125452,2067696032,3594591187,2921233993,2428461,544322398,577241275,1471733935,610547355,4027169054,1432588573,1507829418,2025931657,3646575487,545086370,48609733,2200306550,1653985193,298326376,1316178497,3007786442,2064951626,458293330,2589141269,3591329599,3164325604,727753846,2179363840,146436021,1461446943,4069977195,705550613,3059967265,3887724982,4281599278,3313849956,1404054877,2845806497,146425753,1854211946],[1266315497,3048417604,3681880366,3289982499,290971e4,1235738493,2632868024,2414719590,3970600049,1771706367,1449415276,3266420449,422970021,1963543593,2690192192,3826793022,1062508698,1531092325,1804592342,2583117782,2714934279,4024971509,1294809318,4028980673,1289560198,2221992742,1669523910,35572830,157838143,1052438473,1016535060,1802137761,1753167236,1386275462,3080475397,2857371447,1040679964,2145300060,2390574316,1461121720,2956646967,4031777805,4028374788,33600511,2920084762,1018524850,629373528,3691585981,3515945977,2091462646,2486323059,586499841,988145025,935516892,3367335476,2599673255,2839830854,265290510,3972581182,2759138881,3795373465,1005194799,847297441,406762289,1314163512,1332590856,1866599683,4127851711,750260880,613907577,1450815602,3165620655,3734664991,3650291728,3012275730,3704569646,1427272223,778793252,1343938022,2676280711,2052605720,1946737175,3164576444,3914038668,3967478842,3682934266,1661551462,3294938066,4011595847,840292616,3712170807,616741398,312560963,711312465,1351876610,322626781,1910503582,271666773,2175563734,1594956187,70604529,3617834859,1007753275,1495573769,4069517037,2549218298,2663038764,504708206,2263041392,3941167025,2249088522,1514023603,1998579484,1312622330,694541497,2582060303,2151582166,1382467621,776784248,2618340202,3323268794,2497899128,2784771155,503983604,4076293799,907881277,423175695,432175456,1378068232,4145222326,3954048622,3938656102,3820766613,2793130115,2977904593,26017576,3274890735,3194772133,1700274565,1756076034,4006520079,3677328699,720338349,1533947780,354530856,688349552,3973924725,1637815568,332179504,3949051286,53804574,2852348879,3044236432,1282449977,3583942155,3416972820,4006381244,1617046695,2628476075,3002303598,1686838959,431878346,2686675385,1700445008,1080580658,1009431731,832498133,3223435511,2605976345,2271191193,2516031870,1648197032,4164389018,2548247927,300782431,375919233,238389289,3353747414,2531188641,2019080857,1475708069,455242339,2609103871,448939670,3451063019,1395535956,2413381860,1841049896,1491858159,885456874,4264095073,4001119347,1565136089,3898914787,1108368660,540939232,1173283510,2745871338,3681308437,4207628240,3343053890,4016749493,1699691293,1103962373,3625875870,2256883143,3830138730,1031889488,3479347698,1535977030,4236805024,3251091107,2132092099,1774941330,1199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,1510255612,2148256476,2655287854,3276092548,4258621189,236887753,3681803219,274041037,1734335097,3815195456,3317970021,1899903192,1026095262,4050517792,356393447,2410691914,3873677099,3682840055],[3913112168,2491498743,4132185628,2489919796,1091903735,1979897079,3170134830,3567386728,3557303409,857797738,1136121015,1342202287,507115054,2535736646,337727348,3213592640,1301675037,2528481711,1895095763,1721773893,3216771564,62756741,2142006736,835421444,2531993523,1442658625,3659876326,2882144922,676362277,1392781812,170690266,3921047035,1759253602,3611846912,1745797284,664899054,1329594018,3901205900,3045908486,2062866102,2865634940,3543621612,3464012697,1080764994,553557557,3656615353,3996768171,991055499,499776247,1265440854,648242737,3940784050,980351604,3713745714,1749149687,3396870395,4211799374,3640570775,1161844396,3125318951,1431517754,545492359,4268468663,3499529547,1437099964,2702547544,3433638243,2581715763,2787789398,1060185593,1593081372,2418618748,4260947970,69676912,2159744348,86519011,2512459080,3838209314,1220612927,3339683548,133810670,1090789135,1078426020,1569222167,845107691,3583754449,4072456591,1091646820,628848692,1613405280,3757631651,526609435,236106946,48312990,2942717905,3402727701,1797494240,859738849,992217954,4005476642,2243076622,3870952857,3732016268,765654824,3490871365,2511836413,1685915746,3888969200,1414112111,2273134842,3281911079,4080962846,172450625,2569994100,980381355,4109958455,2819808352,2716589560,2568741196,3681446669,3329971472,1835478071,660984891,3704678404,4045999559,3422617507,3040415634,1762651403,1719377915,3470491036,2693910283,3642056355,3138596744,1364962596,2073328063,1983633131,926494387,3423689081,2150032023,4096667949,1749200295,3328846651,309677260,2016342300,1779581495,3079819751,111262694,1274766160,443224088,298511866,1025883608,3806446537,1145181785,168956806,3641502830,3584813610,1689216846,3666258015,3200248200,1692713982,2646376535,4042768518,1618508792,1610833997,3523052358,4130873264,2001055236,3610705100,2202168115,4028541809,2961195399,1006657119,2006996926,3186142756,1430667929,3210227297,1314452623,4074634658,4101304120,2273951170,1399257539,3367210612,3027628629,1190975929,2062231137,2333990788,2221543033,2438960610,1181637006,548689776,2362791313,3372408396,3104550113,3145860560,296247880,1970579870,3078560182,3769228297,1714227617,3291629107,3898220290,166772364,1251581989,493813264,448347421,195405023,2709975567,677966185,3703036547,1463355134,2715995803,1338867538,1343315457,2802222074,2684532164,233230375,2599980071,2000651841,3277868038,1638401717,4028070440,3237316320,6314154,819756386,300326615,590932579,1405279636,3267499572,3150704214,2428286686,3959192993,3461946742,1862657033,1266418056,963775037,2089974820,2263052895,1917689273,448879540,3550394620,3981727096,150775221,3627908307,1303187396,508620638,2975983352,2726630617,1817252668,1876281319,1457606340,908771278,3720792119,3617206836,2455994898,1729034894,1080033504],[976866871,3556439503,2881648439,1522871579,1555064734,1336096578,3548522304,2579274686,3574697629,3205460757,3593280638,3338716283,3079412587,564236357,2993598910,1781952180,1464380207,3163844217,3332601554,1699332808,1393555694,1183702653,3581086237,1288719814,691649499,2847557200,2895455976,3193889540,2717570544,1781354906,1676643554,2592534050,3230253752,1126444790,2770207658,2633158820,2210423226,2615765581,2414155088,3127139286,673620729,2805611233,1269405062,4015350505,3341807571,4149409754,1057255273,2012875353,2162469141,2276492801,2601117357,993977747,3918593370,2654263191,753973209,36408145,2530585658,25011837,3520020182,2088578344,530523599,2918365339,1524020338,1518925132,3760827505,3759777254,1202760957,3985898139,3906192525,674977740,4174734889,2031300136,2019492241,3983892565,4153806404,3822280332,352677332,2297720250,60907813,90501309,3286998549,1016092578,2535922412,2839152426,457141659,509813237,4120667899,652014361,1966332200,2975202805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,1682292957,1483529935,471910574,1539241949,458788160,3436315007,1807016891,3718408830,978976581,1043663428,3165965781,1927990952,4200891579,2372276910,3208408903,3533431907,1412390302,2931980059,4132332400,1947078029,3881505623,4168226417,2941484381,1077988104,1320477388,886195818,18198404,3786409e3,2509781533,112762804,3463356488,1866414978,891333506,18488651,661792760,1628790961,3885187036,3141171499,876946877,2693282273,1372485963,791857591,2686433993,3759982718,3167212022,3472953795,2716379847,445679433,3561995674,3504004811,3574258232,54117162,3331405415,2381918588,3769707343,4154350007,1140177722,4074052095,668550556,3214352940,367459370,261225585,2610173221,4209349473,3468074219,3265815641,314222801,3066103646,3808782860,282218597,3406013506,3773591054,379116347,1285071038,846784868,2669647154,3771962079,3550491691,2305946142,453669953,1268987020,3317592352,3279303384,3744833421,2610507566,3859509063,266596637,3847019092,517658769,3462560207,3443424879,370717030,4247526661,2224018117,4143653529,4112773975,2788324899,2477274417,1456262402,2901442914,1517677493,1846949527,2295493580,3734397586,2176403920,1280348187,1908823572,3871786941,846861322,1172426758,3287448474,3383383037,1655181056,3139813346,901632758,1897031941,2986607138,3066810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469046755,985887462]],Fy.prototype.PARRAY=[608135816,2242054355,320440878,57701188,2752067618,698298832,137296536,3964562569,1160258022,953160567,3193202383,887688300,3232508343,3380367581,1065670069,3041331479,2450970073,2306472731],Fy.prototype.NN=16,Fy.prototype._clean=function(e){if(e<0){e=(2147483647&e)+2147483648}return e},Fy.prototype._F=function(e){let t;const r=255&e,n=255&(e>>>=8),i=255&(e>>>=8),s=255&(e>>>=8);return t=this.sboxes[0][s]+this.sboxes[1][i],t^=this.sboxes[2][n],t+=this.sboxes[3][r],t},Fy.prototype._encryptBlock=function(e){let t,r=e[0],n=e[1];for(t=0;t<this.NN;++t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[this.NN+0],n^=this.parray[this.NN+1],e[0]=this._clean(n),e[1]=this._clean(r)},Fy.prototype.encryptBlock=function(e){let t;const r=[0,0],n=this.BLOCKSIZE/2;for(t=0;t<this.BLOCKSIZE/2;++t)r[0]=r[0]<<8|255&e[t+0],r[1]=r[1]<<8|255&e[t+n];this._encryptBlock(r);const i=[];for(t=0;t<this.BLOCKSIZE/2;++t)i[t+0]=r[0]>>>24-8*t&255,i[t+n]=r[1]>>>24-8*t&255;return i},Fy.prototype._decryptBlock=function(e){let t,r=e[0],n=e[1];for(t=this.NN+1;t>1;--t){r^=this.parray[t],n=this._F(r)^n;const e=r;r=n,n=e}r^=this.parray[1],n^=this.parray[0],e[0]=this._clean(n),e[1]=this._clean(r)},Fy.prototype.init=function(e){let t,r=0;for(this.parray=[],t=0;t<this.NN+2;++t){let n=0;for(let t=0;t<4;++t)n=n<<8|255&e[r],++r>=e.length&&(r=0);this.parray[t]=this.PARRAY[t]^n}for(this.sboxes=[],t=0;t<4;++t)for(this.sboxes[t]=[],r=0;r<256;++r)this.sboxes[t][r]=this.SBOXES[t][r];const n=[0,0];for(t=0;t<this.NN+2;t+=2)this._encryptBlock(n),this.parray[t+0]=n[0],this.parray[t+1]=n[1];for(t=0;t<4;++t)for(r=0;r<256;r+=2)this._encryptBlock(n),this.sboxes[t][r+0]=n[0],this.sboxes[t][r+1]=n[1]},Ny.keySize=Ny.prototype.keySize=16,Ny.blockSize=Ny.prototype.blockSize=8;const Oy=new Map(Object.entries({tripledes:Uy,cast5:Dy,twofish:Ry,blowfish:Ny}));var Hy=/*#__PURE__*/Object.freeze({__proto__:null,legacyCiphers:Oy});function _y(e){if(!Number.isSafeInteger(e)||e<0)throw Error("positive integer expected, got "+e)}function zy(e,...t){if(!((r=e)instanceof Uint8Array||ArrayBuffer.isView(r)&&"Uint8Array"===r.constructor.name))throw Error("Uint8Array expected");var r;if(t.length>0&&!t.includes(e.length))throw Error("Uint8Array expected of length "+t+", got length="+e.length)}function Gy(e,t=!0){if(e.destroyed)throw Error("Hash instance has been destroyed");if(t&&e.finished)throw Error("Hash#digest() has already been called")}const qy=/* @__PURE__ */BigInt(2**32-1),jy=/* @__PURE__ */BigInt(32);function Vy(e,t=!1){return t?{h:Number(e&qy),l:Number(e>>jy&qy)}:{h:0|Number(e>>jy&qy),l:0|Number(e&qy)}}function Yy(e,t=!1){let r=new Uint32Array(e.length),n=new Uint32Array(e.length);for(let i=0;i<e.length;i++){const{h:s,l:a}=Vy(e[i],t);[r[i],n[i]]=[s,a]}return[r,n]}const Zy=r&&"object"==typeof r&&"webcrypto"in r?r.webcrypto:r&&"object"==typeof r&&"randomBytes"in r?r:void 0,Jy=e=>new Uint32Array(e.buffer,e.byteOffset,Math.floor(e.byteLength/4)),Wy=/* @__PURE__ */(()=>68===new Uint8Array(new Uint32Array([287454020]).buffer)[0])();function Xy(e){for(let r=0;r<e.length;r++)e[r]=(t=e[r])<<24&4278190080|t<<8&16711680|t>>>8&65280|t>>>24&255;var t}function $y(e){return"string"==typeof e&&(e=function(e){if("string"!=typeof e)throw Error("utf8ToBytes expected string, got "+typeof e);return new Uint8Array((new TextEncoder).encode(e))}(e)),zy(e),e}class ed{clone(){return this._cloneInto()}}const td=[],rd=[],nd=[],id=/* @__PURE__ */BigInt(0),sd=/* @__PURE__ */BigInt(1),ad=/* @__PURE__ */BigInt(2),od=/* @__PURE__ */BigInt(7),cd=/* @__PURE__ */BigInt(256),ud=/* @__PURE__ */BigInt(113);for(let e=0,t=sd,r=1,n=0;e<24;e++){[r,n]=[n,(2*r+3*n)%5],td.push(2*(5*n+r)),rd.push((e+1)*(e+2)/2%64);let i=id;for(let e=0;e<7;e++)t=(t<<sd^(t>>od)*ud)%cd,t&ad&&(i^=sd<<(sd<</* @__PURE__ */BigInt(e))-sd);nd.push(i)}const[hd,ld]=/* @__PURE__ */Yy(nd,!0),fd=(e,t,r)=>r>32?((e,t,r)=>t<<r-32|e>>>64-r)(e,t,r):((e,t,r)=>e<<r|t>>>32-r)(e,t,r),yd=(e,t,r)=>r>32?((e,t,r)=>e<<r-32|t>>>64-r)(e,t,r):((e,t,r)=>t<<r|e>>>32-r)(e,t,r);class dd extends ed{constructor(e,t,r,n=!1,i=24){if(super(),this.blockLen=e,this.suffix=t,this.outputLen=r,this.enableXOF=n,this.rounds=i,this.pos=0,this.posOut=0,this.finished=!1,this.destroyed=!1,_y(r),0>=this.blockLen||this.blockLen>=200)throw Error("Sha3 supports only keccak-f1600 function");this.state=new Uint8Array(200),this.state32=Jy(this.state)}keccak(){Wy||Xy(this.state32),function(e,t=24){const r=new Uint32Array(10);for(let n=24-t;n<24;n++){for(let t=0;t<10;t++)r[t]=e[t]^e[t+10]^e[t+20]^e[t+30]^e[t+40];for(let t=0;t<10;t+=2){const n=(t+8)%10,i=(t+2)%10,s=r[i],a=r[i+1],o=fd(s,a,1)^r[n],c=yd(s,a,1)^r[n+1];for(let r=0;r<50;r+=10)e[t+r]^=o,e[t+r+1]^=c}let t=e[2],i=e[3];for(let r=0;r<24;r++){const n=rd[r],s=fd(t,i,n),a=yd(t,i,n),o=td[r];t=e[o],i=e[o+1],e[o]=s,e[o+1]=a}for(let t=0;t<50;t+=10){for(let n=0;n<10;n++)r[n]=e[t+n];for(let n=0;n<10;n++)e[t+n]^=~r[(n+2)%10]&r[(n+4)%10]}e[0]^=hd[n],e[1]^=ld[n]}r.fill(0)}(this.state32,this.rounds),Wy||Xy(this.state32),this.posOut=0,this.pos=0}update(e){Gy(this);const{blockLen:t,state:r}=this,n=(e=$y(e)).length;for(let i=0;i<n;){const s=Math.min(t-this.pos,n-i);for(let t=0;t<s;t++)r[this.pos++]^=e[i++];this.pos===t&&this.keccak()}return this}finish(){if(this.finished)return;this.finished=!0;const{state:e,suffix:t,pos:r,blockLen:n}=this;e[r]^=t,128&t&&r===n-1&&this.keccak(),e[n-1]^=128,this.keccak()}writeInto(e){Gy(this,!1),zy(e),this.finish();const t=this.state,{blockLen:r}=this;for(let n=0,i=e.length;n<i;){this.posOut>=r&&this.keccak();const s=Math.min(r-this.posOut,i-n);e.set(t.subarray(this.posOut,this.posOut+s),n),this.posOut+=s,n+=s}return e}xofInto(e){if(!this.enableXOF)throw Error("XOF is not possible for this instance");return this.writeInto(e)}xof(e){return _y(e),this.xofInto(new Uint8Array(e))}digestInto(e){if(function(e,t){zy(e);const r=t.outputLen;if(e.length<r)throw Error("digestInto() expects output buffer of length at least "+r)}(e,this),this.finished)throw Error("digest() was already called");return this.writeInto(e),this.destroy(),e}digest(){return this.digestInto(new Uint8Array(this.outputLen))}destroy(){this.destroyed=!0,this.state.fill(0)}_cloneInto(e){const{blockLen:t,suffix:r,outputLen:n,rounds:i,enableXOF:s}=this;return e||(e=new dd(t,r,n,s,i)),e.state32.set(this.state32),e.pos=this.pos,e.posOut=this.posOut,e.finished=this.finished,e.rounds=i,e.suffix=r,e.outputLen=n,e.enableXOF=s,e.destroyed=this.destroyed,e}}const pd=(e,t,r)=>function(e){const t=t=>e().update($y(t)).digest(),r=e();return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=()=>e(),t}((()=>new dd(t,e,r))),gd=/* @__PURE__ */pd(6,136,32),wd=/* @__PURE__ */pd(6,72,64),Ad=(e,t,r)=>function(e){const t=(t,r)=>e(r).update($y(t)).digest(),r=e({});return t.outputLen=r.outputLen,t.blockLen=r.blockLen,t.create=t=>e(t),t}(((n={})=>new dd(t,e,void 0===n.dkLen?r:n.dkLen,!0))),md=/* @__PURE__ */Ad(31,168,16),bd=/* @__PURE__ */Ad(31,136,32),kd=zy,Ed=function(e=32){if(Zy&&"function"==typeof Zy.getRandomValues)return Zy.getRandomValues(new Uint8Array(e));if(Zy&&"function"==typeof Zy.randomBytes)return Zy.randomBytes(e);throw Error("crypto.getRandomValues must be defined")};function vd(e,t){if(e.length!==t.length)return!1;let r=0;for(let n=0;n<e.length;n++)r|=e[n]^t[n];return 0===r}function Kd(...e){const t=e=>"number"==typeof e?e:e.bytesLen,r=e.reduce(((e,r)=>e+t(r)),0);return{bytesLen:r,encode:n=>{const i=new Uint8Array(r);for(let r=0,s=0;r<e.length;r++){const a=e[r],o=t(a),c="number"==typeof a?n[r]:a.encode(n[r]);kd(c,o),i.set(c,s),"number"!=typeof a&&c.fill(0),s+=o}return i},decode:n=>{kd(n,r);const i=[];for(const r of e){const e=t(r),s=n.subarray(0,e);i.push("number"==typeof r?s:r.decode(s)),n=n.subarray(e)}return i}}}function Sd(e,t){const r=t*e.bytesLen;return{bytesLen:r,encode:n=>{if(n.length!==t)throw Error(`vecCoder.encode: wrong length=${n.length}. Expected: ${t}`);const i=new Uint8Array(r);for(let t=0,r=0;t<n.length;t++){const s=e.encode(n[t]);i.set(s,r),s.fill(0),r+=s.length}return i},decode:t=>{kd(t,r);const n=[];for(let r=0;r<t.length;r+=e.bytesLen)n.push(e.decode(t.subarray(r,r+e.bytesLen)));return n}}}function Id(...e){for(const t of e)if(Array.isArray(t))for(const e of t)e.fill(0);else t.fill(0)}function Bd(e){return(1<<e)-1}
+/*! noble-post-quantum - MIT License (c) 2024 Paul Miller (paulmillr.com) */function Cd(e,t=8){const r=e.toString(2).padStart(8,"0").slice(-t).padStart(7,"0").split("").reverse().join("");return Number.parseInt(r,2)}const Ud=e=>{const{newPoly:t,N:r,Q:n,F:i,ROOT_OF_UNITY:s,brvBits:a,isKyber:o}=e,c=(e,t=n)=>{const r=e%t|0;return 0|(r>=0?r:t+r)};const u=function(){const e=t(r);for(let t=0;t<r;t++){const r=Cd(t,a),i=BigInt(s)**BigInt(r)%BigInt(n);e[t]=0|Number(i)}return e}(),h=o?128:r,l=o?1:0,f={encode:e=>{for(let t=1,n=128;n>l;n>>=1)for(let i=0;i<r;i+=2*n){const r=u[t++];for(let t=i;t<i+n;t++){const i=c(r*e[t+n]);e[t+n]=0|c(e[t]-i),e[t]=0|c(e[t]+i)}}return e},decode:e=>{for(let t=h-1,n=1+l;n<h+l;n<<=1)for(let i=0;i<r;i+=2*n){const r=u[t--];for(let t=i;t<i+n;t++){const i=e[t];e[t]=c(i+e[t+n]),e[t+n]=c(r*(e[t+n]-i))}}for(let t=0;t<e.length;t++)e[t]=c(i*e[t]);return e}};return{mod:c,smod:(e,t=n)=>{const r=0|c(e,t);return 0|(r>t>>1?r-t:r)},nttZetas:u,NTT:f,bitsCoder:(e,n)=>{const i=Bd(e),s=e*(r/8);return{bytesLen:s,encode:t=>{const r=new Uint8Array(s);for(let s=0,a=0,o=0,c=0;s<t.length;s++)for(a|=(n.encode(t[s])&i)<<o,o+=e;o>=8;o-=8,a>>=8)r[c++]=a&Bd(o);return r},decode:s=>{const a=t(r);for(let t=0,r=0,o=0,c=0;t<s.length;t++)for(r|=s[t]<<o,o+=8;o>=e;o-=e,r>>=e)a[c++]=n.decode(r&i);return a}}}}},Pd=e=>(t,r)=>{r||(r=e.blockLen);const n=new Uint8Array(t.length+2);n.set(t);const i=t.length,s=new Uint8Array(r);let a=e.create({}),o=0,c=0;return{stats:()=>({calls:o,xofs:c}),get:(t,r)=>(n[i+0]=t,n[i+1]=r,a.destroy(),a=e.create({}).update(n),o++,()=>(c++,a.xofInto(s))),clean:()=>{a.destroy(),s.fill(0),n.fill(0)}}},Dd=/* @__PURE__ */Pd(md),xd=/* @__PURE__ */Pd(bd),Qd=256,Md=3329,{mod:Ld,nttZetas:Td,NTT:Rd,bitsCoder:Fd}=Ud({N:Qd,Q:Md,F:3303,ROOT_OF_UNITY:17,newPoly:e=>new Uint16Array(e),brvBits:7,isKyber:!0}),Nd=e=>Fd(e,(e=>{if(e>=12)return{encode:e=>e,decode:e=>e};const t=2**(e-1);return{encode:t=>((t<<e)+Md/2)/Md,decode:r=>r*Md+t>>>e}})(e));function Od(e,t){for(let r=0;r<Qd;r++)e[r]=Ld(e[r]+t[r])}function Hd(e,t){for(let a=0;a<128;a++){let o=Td[64+(a>>1)];1&a&&(o=-o);const{c0:c,c1:u}=(r=e[2*a+0],n=e[2*a+1],i=t[2*a+0],s=t[2*a+1],{c0:Ld(n*s*o+r*i),c1:Ld(r*s+n*i)});e[2*a+0]=c,e[2*a+1]=u}var r,n,i,s;return e}function _d(e){const t=new Uint16Array(Qd);for(let r=0;r<Qd;){const n=e();if(n.length%3)throw Error("SampleNTT: unaligned block");for(let e=0;r<Qd&&e+3<=n.length;e+=3){const i=4095&(n[e+0]|n[e+1]<<8),s=4095&(n[e+1]>>4|n[e+2]<<4);i<Md&&(t[r++]=i),r<Qd&&s<Md&&(t[r++]=s)}}return t}function zd(e,t,r,n){const i=e(n*Qd/4,t,r),s=new Uint16Array(Qd),a=Jy(i);let o=0;for(let e=0,t=0,r=0,i=0;e<a.length;e++){let c=a[e];for(let e=0;e<32;e++)r+=1&c,c>>=1,o+=1,o===n?(i=r,r=0):o===2*n&&(s[t++]=Ld(i-r),r=0,o=0)}if(o)throw Error("sampleCBD: leftover bits: "+o);return s}const Gd=e=>{const{K:t,PRF:r,XOF:n,HASH512:i,ETA1:s,ETA2:a,du:o,dv:c}=e,u=Nd(1),h=Nd(c),l=Nd(o),f=Kd(Sd(Nd(12),t),32),y=Sd(Nd(12),t),d=Kd(Sd(l,t),h),p=Kd(32,32);return{secretCoder:y,secretKeyLen:y.bytesLen,publicKeyLen:f.bytesLen,cipherTextLen:d.bytesLen,keygen:e=>{const a=new Uint8Array(33);a.set(e),a[32]=t;const o=i(a),[c,u]=p.decode(o),h=[],l=[];for(let e=0;e<t;e++)h.push(Rd.encode(zd(r,u,e,s)));const d=n(c);for(let e=0;e<t;e++){const n=Rd.encode(zd(r,u,t+e,s));for(let r=0;r<t;r++){Od(n,Hd(_d(d.get(r,e)),h[r]))}l.push(n)}d.clean();const g={publicKey:f.encode([l,c]),secretKey:y.encode(h)};return Id(c,u,h,l,a,o),g},encrypt:(e,i,o)=>{const[c,h]=f.decode(e),l=[];for(let e=0;e<t;e++)l.push(Rd.encode(zd(r,o,e,s)));const y=n(h),p=new Uint16Array(Qd),g=[];for(let e=0;e<t;e++){const n=zd(r,o,t+e,a),i=new Uint16Array(Qd);for(let r=0;r<t;r++){Od(i,Hd(_d(y.get(e,r)),l[r]))}Od(n,Rd.decode(i)),g.push(n),Od(p,Hd(c[e],l[e])),i.fill(0)}y.clean();const w=zd(r,o,2*t,a);Od(w,Rd.decode(p));const A=u.decode(i);return Od(A,w),Id(c,l,p,w),d.encode([g,A])},decrypt:(e,r)=>{const[n,i]=d.decode(e),s=y.decode(r),a=new Uint16Array(Qd);for(let e=0;e<t;e++)Od(a,Hd(s[e],Rd.encode(n[e])));return function(e,t){for(let r=0;r<Qd;r++)e[r]=Ld(e[r]-t[r])}(i,Rd.decode(a)),Id(a,s,n),u.encode(i)}}};function qd(e){const t=Gd(e),{HASH256:r,HASH512:n,KDF:i}=e,{secretCoder:s,cipherTextLen:a}=t,o=t.publicKeyLen,c=Kd(t.secretKeyLen,t.publicKeyLen,32,32),u=c.bytesLen;return{publicKeyLen:o,msgLen:32,keygen:(e=Ed(64))=>{kd(e,64);const{publicKey:n,secretKey:i}=t.keygen(e.subarray(0,32)),s=r(n),a=c.encode([i,n,s,e.subarray(32)]);return Id(i,s),{publicKey:n,secretKey:a}},encapsulate:(i,a=Ed(32))=>{kd(i,o),kd(a,32);const c=i.subarray(0,384*e.K),u=s.encode(s.decode(c.slice()));if(!vd(u,c))throw Id(u),Error("ML-KEM.encapsulate: wrong publicKey modulus");Id(u);const h=n.create().update(a).update(r(i)).digest(),l=t.encrypt(i,a,h.subarray(32,64));return h.subarray(32).fill(0),{cipherText:l,sharedSecret:h.subarray(0,32)}},decapsulate:(e,r)=>{kd(r,u),kd(e,a);const[s,o,h,l]=c.decode(r),f=t.decrypt(e,s),y=n.create().update(f).update(h).digest(),d=y.subarray(0,32),p=t.encrypt(o,f,y.subarray(32,64)),g=vd(e,p),w=i.create({dkLen:32}).update(l).update(e).digest();return Id(f,p,g?w:d),g?d:w}}}const jd=/* @__PURE__ */qd({...{HASH256:gd,HASH512:wd,KDF:bd,XOF:Dd,PRF:function(e,t,r){return bd.create({dkLen:e}).update(t).update(new Uint8Array([r])).digest()}},...{N:Qd,Q:Md,K:3,ETA1:2,ETA2:2,du:10,dv:4,RBGstrength:192}}),Vd=256,Yd=8380417,Zd=95232,Jd=261888,Wd={K:6,L:5,D:13,GAMMA1:2**19,GAMMA2:Jd,TAU:49,ETA:4,OMEGA:55},Xd=e=>new Int32Array(e),{mod:$d,smod:ep,NTT:tp,bitsCoder:rp}=Ud({N:Vd,Q:Yd,F:8347681,ROOT_OF_UNITY:1753,newPoly:Xd,isKyber:!1,brvBits:8}),np=e=>e,ip=(e,t=np,r=np)=>rp(e,{encode:e=>t(r(e)),decode:e=>r(t(e))}),sp=(e,t)=>{for(let r=0;r<e.length;r++)e[r]=$d(e[r]+t[r]);return e},ap=(e,t)=>{for(let r=0;r<e.length;r++)e[r]=$d(e[r]-t[r]);return e},op=e=>{for(let t=0;t<Vd;t++)e[t]<<=13;return e},cp=(e,t)=>{for(let r=0;r<Vd;r++)if(Math.abs(ep(e[r]))>=t)return!0;return!1},up=(e,t)=>{const r=Xd(Vd);for(let n=0;n<e.length;n++)r[n]=$d(e[n]*t[n]);return r};function hp(e){const t=Xd(Vd);for(let r=0;r<Vd;){const n=e();if(n.length%3)throw Error("RejNTTPoly: unaligned block");for(let e=0;r<Vd&&e<=n.length-3;e+=3){const i=8388607&(n[e+0]|n[e+1]<<8|n[e+2]<<16);i<Yd&&(t[r++]=i)}}return t}const lp=new Uint8Array(0);function fp(e){const{K:t,L:r,GAMMA1:n,GAMMA2:i,TAU:s,ETA:a,OMEGA:o}=e,{CRH_BYTES:c,TR_BYTES:u,C_TILDE_BYTES:h,XOF128:l,XOF256:f}=e;if(![2,4].includes(a))throw Error("Wrong ETA");if(![1<<17,1<<19].includes(n))throw Error("Wrong GAMMA1");if(![Zd,Jd].includes(i))throw Error("Wrong GAMMA2");const y=s*a,d=e=>{const t=$d(e),r=0|ep(t,2*i);if(t-r==Yd-1)return{r1:0,r0:r-1|0};return{r1:0|Math.floor((t-r)/(2*i)),r0:r}},p=e=>d(e).r1,g=e=>d(e).r0,w=(e,t)=>{const r=Math.floor((Yd-1)/(2*i)),{r1:n,r0:s}=d(t);return 1===e?s>0?0|$d(n+1,r):0|$d(n-1,r):0|n},A=e=>{const t=$d(e),r=0|ep(t,8192);return{r1:0|Math.floor((t-r)/8192),r0:r}},m={bytesLen:o+t,encode:e=>{if(!1===e)throw Error("hint.encode: hint is false");const r=new Uint8Array(o+t);for(let n=0,i=0;n<t;n++){for(let t=0;t<Vd;t++)0!==e[n][t]&&(r[i++]=t);r[o+n]=i}return r},decode:e=>{const r=[];let n=0;for(let i=0;i<t;i++){const t=Xd(Vd);if(e[o+i]<n||e[o+i]>o)return!1;for(let r=n;r<e[o+i];r++){if(r>n&&e[r]<=e[r-1])return!1;t[e[r]]=1}n=e[o+i],r.push(t)}for(let t=n;t<o;t++)if(0!==e[t])return!1;return r}},b=ip(2===a?3:4,(e=>a-e),(e=>{if(!(-a<=e&&e<=a))throw Error(`malformed key s1/s3 ${e} outside of ETA range [${-a}, ${a}]`);return e})),k=ip(13,(e=>4096-e)),E=ip(10),v=ip(n===1<<17?18:20,(e=>ep(n-e))),K=Sd(ip(i===Zd?6:4),t),S=Kd(32,Sd(E,t)),I=Kd(32,32,u,Sd(b,r),Sd(b,t),Sd(k,t)),B=Kd(h,Sd(v,r),m),C=2===a?e=>e<15&&2-e%5:e=>e<9&&4-e;function U(e){const t=Xd(Vd);for(let r=0;r<Vd;){const n=e();for(let e=0;r<Vd&&e<n.length;e+=1){const i=C(15&n[e]),s=C(n[e]>>4&15);!1!==i&&(t[r++]=i),r<Vd&&!1!==s&&(t[r++]=s)}}return t}const P=e=>{const t=Xd(Vd),r=bd.create({}).update(e),n=new Uint8Array(bd.blockLen);r.xofInto(n);const i=n.slice(0,8);for(let e=Vd-s,a=8,o=0,c=0;e<Vd;e++){let s=e+1;for(;s>e;)s=n[a++],a<bd.blockLen||(r.xofInto(n),a=0);t[e]=t[s],t[s]=1-((i[o]>>c++&1)<<1),c>=8&&(o++,c=0)}return t},D=e=>{const t=Xd(Vd),r=Xd(Vd);for(let n=0;n<e.length;n++){const{r0:i,r1:s}=A(e[n]);t[n]=i,r[n]=s}return{r0:t,r1:r}},x=(e,t)=>{for(let r=0;r<Vd;r++)e[r]=w(t[r],e[r]);return e},Q=(e,t)=>{const r=Xd(Vd);let n=0;for(let o=0;o<Vd;o++){const c=(s=e[o],a=t[o],s<=i||s>Yd-i||s===Yd-i&&0===a?0:1);r[o]=c,n+=c}var s,a;return{v:r,cnt:n}},M=Kd(32,64,32),L={signRandBytes:32,keygen:(e=Ed(32))=>{const n=new Uint8Array(34);n.set(e),n[32]=t,n[33]=r;const[i,s,a]=M.decode(bd(n,{dkLen:M.bytesLen})),o=f(s),c=[];for(let e=0;e<r;e++)c.push(U(o.get(255&e,e>>8&255)));const h=[];for(let e=r;e<r+t;e++)h.push(U(o.get(255&e,e>>8&255)));const y=c.map((e=>tp.encode(e.slice()))),d=[],p=[],g=l(i),w=Xd(Vd);for(let e=0;e<t;e++){w.fill(0);for(let t=0;t<r;t++){const r=hp(g.get(t,e));sp(w,up(r,y[t]))}tp.decode(w);const{r0:t,r1:n}=D(sp(w,h[e]));d.push(t),p.push(n)}const A=S.encode([i,p]),m=bd(A,{dkLen:u}),b=I.encode([i,a,m,c,h,d]);return g.clean(),o.clean(),Id(i,s,a,c,h,y,w,d,p,m,n),{publicKey:A,secretKey:b}},sign:(e,s,a)=>{const[u,d,w,A,m,b]=I.decode(e),k=[],E=l(u);for(let e=0;e<t;e++){const t=[];for(let n=0;n<r;n++)t.push(hp(E.get(n,e)));k.push(t)}E.clean();for(let e=0;e<r;e++)tp.encode(A[e]);for(let e=0;e<t;e++)tp.encode(m[e]),tp.encode(b[e]);const S=bd.create({dkLen:c}).update(w).update(s).digest(),C=a||new Uint8Array(32);kd(C);const U=bd.create({dkLen:c}).update(d).update(C).update(S).digest();kd(U,c);const D=f(U,v.bytesLen);e:for(let e=0;;){const s=[];for(let t=0;t<r;t++,e++)s.push(v.decode(D.get(255&e,e>>8)()));const a=s.map((e=>tp.encode(e.slice()))),c=[];for(let e=0;e<t;e++){const t=Xd(Vd);for(let n=0;n<r;n++)sp(t,up(k[e][n],a[n]));tp.decode(t),c.push(t)}const u=c.map((e=>e.map(p))),l=bd.create({dkLen:h}).update(S).update(K.encode(u)).digest(),f=tp.encode(P(l)),d=A.map((e=>up(e,f)));for(let e=0;e<r;e++)if(sp(tp.decode(d[e]),s[e]),cp(d[e],n-y))continue e;let w=0;const E=[];for(let e=0;e<t;e++){const t=tp.decode(up(m[e],f)),r=ap(c[e],t).map(g);if(cp(r,i-y))continue e;const n=tp.decode(up(b[e],f));if(cp(n,i))continue e;sp(r,n);const s=Q(r,u[e]);E.push(s.v),w+=s.cnt}if(w>o)continue;D.clean();const I=B.encode([l,d,E]);return Id(l,d,E,f,u,c,a,s,U,S,A,m,b,...k),I}throw Error("Unreachable code path reached, report this error")},verify:(e,i,s)=>{const[a,f]=S.decode(e),d=bd(e,{dkLen:u});if(s.length!==B.bytesLen)return!1;const[p,g,w]=B.decode(s);if(!1===w)return!1;for(let e=0;e<r;e++)if(cp(g[e],n-y))return!1;const A=bd.create({dkLen:c}).update(d).update(i).digest(),m=tp.encode(P(p)),b=g.map((e=>e.slice()));for(let e=0;e<r;e++)tp.encode(b[e]);const k=[],E=l(a);for(let e=0;e<t;e++){const t=up(tp.encode(op(f[e])),m),n=Xd(Vd);for(let t=0;t<r;t++){const r=hp(E.get(t,e));sp(n,up(r,b[t]))}const i=tp.decode(ap(n,t));k.push(x(i,w[e]))}E.clean();const v=bd.create({dkLen:h}).update(A).update(K.encode(k)).digest();for(const e of w){const t=e.reduce(((e,t)=>e+t),0);if(!(t<=o))return!1}for(const e of g)if(cp(e,n-y))return!1;return vd(p,v)}},T=(e,t=lp)=>{if(kd(e),kd(t),t.length>255)throw Error("context should be less than 255 bytes");return function(...e){let t=0;for(let r=0;r<e.length;r++){const n=e[r];zy(n),t+=n.length}const r=new Uint8Array(t);for(let t=0,n=0;t<e.length;t++){const i=e[t];r.set(i,n),n+=i.length}return r}(new Uint8Array([0,t.length]),t,e)};return{internal:L,keygen:L.keygen,signRandBytes:L.signRandBytes,sign:(e,t,r=lp,n)=>{const i=T(t,r),s=L.sign(e,i,n);return i.fill(0),s},verify:(e,t,r,n=lp)=>L.verify(e,T(t,n),r)}}const yp=/* @__PURE__ */fp({...Wd,CRH_BYTES:64,TR_BYTES:64,C_TILDE_BYTES:48,XOF128:Dd,XOF256:xd});var dp=/*#__PURE__*/Object.freeze({__proto__:null,ml_dsa65:yp,ml_kem768:jd});function pp(e,t,r,n){e[t]+=r[n],e[t+1]+=r[n+1]+(e[t]<r[n])}function gp(e,t){e[0]+=t,e[1]+=e[0]<t}function wp(e,t,r,n,i,s,a,o){pp(e,r,e,n),pp(e,r,t,a);let c=e[s]^e[r],u=e[s+1]^e[r+1];e[s]=u,e[s+1]=c,pp(e,i,e,s),c=e[n]^e[i],u=e[n+1]^e[i+1],e[n]=c>>>24^u<<8,e[n+1]=u>>>24^c<<8,pp(e,r,e,n),pp(e,r,t,o),c=e[s]^e[r],u=e[s+1]^e[r+1],e[s]=c>>>16^u<<16,e[s+1]=u>>>16^c<<16,pp(e,i,e,s),c=e[n]^e[i],u=e[n+1]^e[i+1],e[n]=u>>>31^c<<1,e[n+1]=c>>>31^u<<1}const Ap=new Uint32Array([4089235720,1779033703,2227873595,3144134277,4271175723,1013904242,1595750129,2773480762,2917565137,1359893119,725511199,2600822924,4215389547,528734635,327033209,1541459225]),mp=new Uint8Array([0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3,11,8,12,0,5,2,15,13,10,14,3,6,7,1,9,4,7,9,3,1,13,12,11,14,2,6,5,10,4,0,15,8,9,0,5,7,2,4,10,15,14,1,11,12,6,8,3,13,2,12,6,10,0,11,8,3,4,13,7,5,15,14,1,9,12,5,1,15,14,13,4,10,0,7,6,3,9,2,8,11,13,11,7,14,12,1,3,9,5,0,15,4,8,6,2,10,6,15,14,9,11,3,0,8,12,2,13,7,1,4,10,5,10,2,8,4,7,6,1,5,15,11,9,14,3,12,13,0,0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,14,10,4,8,9,15,13,6,1,12,0,2,11,7,5,3].map((e=>2*e)));function bp(e,t){const r=new Uint32Array(32),n=new Uint32Array(e.b.buffer,e.b.byteOffset,32);for(let t=0;t<16;t++)r[t]=e.h[t],r[t+16]=Ap[t];r[24]^=e.t0[0],r[25]^=e.t0[1];const i=t?4294967295:0;r[28]^=i,r[29]^=i;for(let e=0;e<12;e++){const t=e<<4;wp(r,n,0,8,16,24,mp[t+0],mp[t+1]),wp(r,n,2,10,18,26,mp[t+2],mp[t+3]),wp(r,n,4,12,20,28,mp[t+4],mp[t+5]),wp(r,n,6,14,22,30,mp[t+6],mp[t+7]),wp(r,n,0,10,20,30,mp[t+8],mp[t+9]),wp(r,n,2,12,22,24,mp[t+10],mp[t+11]),wp(r,n,4,14,16,26,mp[t+12],mp[t+13]),wp(r,n,6,8,18,28,mp[t+14],mp[t+15])}for(let t=0;t<16;t++)e.h[t]^=r[t]^r[t+16]}class kp{constructor(e,t,r,n){const i=new Uint8Array(64);this.S={b:new Uint8Array(Kp),h:new Uint32Array(vp/4),t0:new Uint32Array(2),c:0,outlen:e},i[0]=e,t&&(i[1]=t.length),i[2]=1,i[3]=1,r&&i.set(r,32),n&&i.set(n,48);const s=new Uint32Array(i.buffer,i.byteOffset,i.length/Uint32Array.BYTES_PER_ELEMENT);for(let e=0;e<16;e++)this.S.h[e]=Ap[e]^s[e];if(t){const e=new Uint8Array(Kp);e.set(t),this.update(e)}}update(e){if(!(e instanceof Uint8Array))throw Error("Input must be Uint8Array or Buffer");let t=0;for(;t<e.length;){this.S.c===Kp&&(gp(this.S.t0,this.S.c),bp(this.S,!1),this.S.c=0);let r=Kp-this.S.c;this.S.b.set(e.subarray(t,t+r),this.S.c);const n=Math.min(r,e.length-t);this.S.c+=n,t+=n}return this}digest(e){gp(this.S.t0,this.S.c),this.S.b.fill(0,this.S.c),this.S.c=Kp,bp(this.S,!0);const t=e||new Uint8Array(this.S.outlen);for(let e=0;e<this.S.outlen;e++)t[e]=this.S.h[e>>2]>>8*(3&e);return this.S.h=null,t.buffer}}function Ep(e,t,r,n){if(e>vp)throw Error(`outlen must be at most ${vp} (given: ${e})`);return new kp(e,t,r,n)}const vp=64,Kp=128,Sp=1024,Ip=205===new Uint8Array(new Uint16Array([43981]).buffer)[0];function Bp(e,t,r){return e[r+0]=t,e[r+1]=t>>8,e[r+2]=t>>16,e[r+3]=t>>24,e}function Cp(e,t,r){if(t>Number.MAX_SAFE_INTEGER)throw Error("LE64: large numbers unsupported");let n=t;for(let t=r;t<r+7;t++)e[t]=n,n=(n-e[t])/256;return e}function Up(e,t,r){const n=new Uint8Array(64),i=new Uint8Array(4+t.length);if(Bp(i,e,0),i.set(t,4),e<=64)return Ep(e).update(i).digest(r),r;const s=Math.ceil(e/32)-2;for(let e=0;e<s;e++)Ep(64).update(0===e?i:n).digest(n),r.set(n.subarray(0,32),32*e);const a=new Uint8Array(Ep(e-32*s).update(n).digest());return r.set(a,32*s),r}function Pp(e,t,r,n){return e.fn.XOR(t.byteOffset,r.byteOffset,n.byteOffset),t}function Dp(e,t,r,n){return e.fn.G(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function xp(e,t,r,n){return e.fn.G2(t.byteOffset,r.byteOffset,n.byteOffset,e.refs.gZ.byteOffset),n}function*Qp(e,t,r,n,i,s,a,o){e.refs.prngTmp.fill(0);const c=e.refs.prngTmp.subarray(0,48);Cp(c,t,0),Cp(c,r,8),Cp(c,n,16),Cp(c,i,24),Cp(c,s,32),Cp(c,2,40);for(let t=1;t<=a;t++){Cp(e.refs.prngTmp,t,c.length);const r=xp(e,e.refs.ZERO1024,e.refs.prngTmp,e.refs.prngR);for(let e=1===t?8*o:0;e<r.length;e+=8)yield r.subarray(e,e+8)}return[]}function Mp(e,{memory:t,instance:r}){if(!Ip)throw Error("BigEndian system not supported");const n=function({type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,parallelism:o,memorySize:c,passes:u}){const h=(e,t,r,n)=>{if(t<r||t>n)throw Error(`${e} size should be between ${r} and ${n} bytes`)};if(2!==e||19!==t)throw Error("Unsupported type or version");return h("password",n,8,4294967295),h("salt",i,8,4294967295),h("tag",r,4,4294967295),h("memory",c,8*o,4294967295),s&&h("associated data",s,0,4294967295),a&&h("secret",a,0,32),{type:e,version:t,tagLength:r,password:n,salt:i,ad:s,secret:a,lanes:o,memorySize:c,passes:u}}({type:2,version:19,...e}),{G:i,G2:s,xor:a,getLZ:o}=r.exports,c={},u={};u.G=i,u.G2=s,u.XOR=a;const h=4*n.lanes*Math.floor(n.memorySize/(4*n.lanes)),l=h*Sp+10240;if(t.buffer.byteLength<l){const e=Math.ceil((l-t.buffer.byteLength)/65536);t.grow(e)}let f=0;c.gZ=new Uint8Array(t.buffer,f,Sp),f+=c.gZ.length,c.prngR=new Uint8Array(t.buffer,f,Sp),f+=c.prngR.length,c.prngTmp=new Uint8Array(t.buffer,f,Sp),f+=c.prngTmp.length,c.ZERO1024=new Uint8Array(t.buffer,f,1024),f+=c.ZERO1024.length;const y=new Uint32Array(t.buffer,f,2);f+=y.length*Uint32Array.BYTES_PER_ELEMENT;const d={fn:u,refs:c},p=new Uint8Array(t.buffer,f,Sp);f+=p.length;const g=new Uint8Array(t.buffer,f,n.memorySize*Sp),w=new Uint8Array(t.buffer,0,f),A=function(e){const t=Ep(64),r=new Uint8Array(4),n=new Uint8Array(24);Bp(n,e.lanes,0),Bp(n,e.tagLength,4),Bp(n,e.memorySize,8),Bp(n,e.passes,12),Bp(n,e.version,16),Bp(n,e.type,20);const i=[n];e.password?(i.push(Bp(new Uint8Array(4),e.password.length,0)),i.push(e.password)):i.push(r);e.salt?(i.push(Bp(new Uint8Array(4),e.salt.length,0)),i.push(e.salt)):i.push(r);e.secret?(i.push(Bp(new Uint8Array(4),e.secret.length,0)),i.push(e.secret)):i.push(r);e.ad?(i.push(Bp(new Uint8Array(4),e.ad.length,0)),i.push(e.ad)):i.push(r);t.update(function(e){if(1===e.length)return e[0];let t=0;for(let r=0;r<e.length;r++){if(!(e[r]instanceof Uint8Array))throw Error("concatArrays: Data must be in the form of a Uint8Array");t+=e[r].length}const r=new Uint8Array(t);let n=0;return e.forEach((e=>{r.set(e,n),n+=e.length})),r}(i));const s=t.digest();return new Uint8Array(s)}(n),m=h/n.lanes,b=Array(n.lanes).fill(null).map((()=>Array(m))),k=(e,t)=>(b[e][t]=g.subarray(e*m*1024+1024*t,e*m*1024+1024*t+Sp),b[e][t]);for(let e=0;e<n.lanes;e++){const t=new Uint8Array(A.length+8);t.set(A),Bp(t,0,A.length),Bp(t,e,A.length+4),Up(Sp,t,k(e,0)),Bp(t,1,A.length),Up(Sp,t,k(e,1))}const E=m/4;for(let e=0;e<n.passes;e++)for(let t=0;t<4;t++){const r=0===e&&t<=1;for(let i=0;i<n.lanes;i++){let s=0===t&&0===e?2:0;const a=r?Qp(d,e,i,t,h,n.passes,E,s):null;for(;s<E;s++){const c=t*E+s,u=c>0?b[i][c-1]:b[i][m-1],h=r?a.next().value:u;o(y.byteOffset,h.byteOffset,i,n.lanes,e,t,s,4,E);const l=y[0],f=y[1];0===e&&k(i,c),Dp(d,u,b[l][f],e>0?p:b[i][c]),e>0&&Pp(d,b[i][c],p,b[i][c])}}}const v=b[0][m-1];for(let e=1;e<n.lanes;e++)Pp(d,v,v,b[e][m-1]);const K=Up(n.tagLength,v,new Uint8Array(n.tagLength));return w.fill(0),t.grow(0),K}let Lp;async function Tp(e,t){const r=new WebAssembly.Memory({initial:1040,maximum:65536}),n=await async function(e,t,r){const n={env:{memory:e}};if(void 0===Lp)try{const e=await t(n);return Lp=!0,e}catch(e){Lp=!1}return(Lp?t:r)(n)}(r,e,t);return e=>Mp(e,{instance:n.instance,memory:r})}function Rp(e,t,r,n){return function(e,t,r){var n=r?WebAssembly.instantiateStreaming:WebAssembly.instantiate,i=r?WebAssembly.compileStreaming:WebAssembly.compile;return t?n(e,t):i(e)}(Buffer.from(r,"base64"),n,!1)}var Fp,Np,Op,Hp,_p,zp,Gp=/*#__PURE__*/Object.freeze({__proto__:null,default:async()=>Tp((e=>Rp(0,0,"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",e)),(e=>Rp(0,0,"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",e)))});function qp(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var jp=function(){if(zp)return _p;zp=1;const e=function(){if(Np)return Fp;function e(e){this.name="Bzip2Error",this.message=e,this.stack=Error().stack}Np=1,e.prototype=Error();var t=function(t){throw new e(t)},r={};return r.Bzip2Error=e,r.crcTable=[0,79764919,159529838,222504665,319059676,398814059,445009330,507990021,638119352,583659535,797628118,726387553,890018660,835552979,1015980042,944750013,1276238704,1221641927,1167319070,1095957929,1595256236,1540665371,1452775106,1381403509,1780037320,1859660671,1671105958,1733955601,2031960084,2111593891,1889500026,1952343757,2552477408,2632100695,2443283854,2506133561,2334638140,2414271883,2191915858,2254759653,3190512472,3135915759,3081330742,3009969537,2905550212,2850959411,2762807018,2691435357,3560074640,3505614887,3719321342,3648080713,3342211916,3287746299,3467911202,3396681109,4063920168,4143685023,4223187782,4286162673,3779000052,3858754371,3904687514,3967668269,881225847,809987520,1023691545,969234094,662832811,591600412,771767749,717299826,311336399,374308984,453813921,533576470,25881363,88864420,134795389,214552010,2023205639,2086057648,1897238633,1976864222,1804852699,1867694188,1645340341,1724971778,1587496639,1516133128,1461550545,1406951526,1302016099,1230646740,1142491917,1087903418,2896545431,2825181984,2770861561,2716262478,3215044683,3143675388,3055782693,3001194130,2326604591,2389456536,2200899649,2280525302,2578013683,2640855108,2418763421,2498394922,3769900519,3832873040,3912640137,3992402750,4088425275,4151408268,4197601365,4277358050,3334271071,3263032808,3476998961,3422541446,3585640067,3514407732,3694837229,3640369242,1762451694,1842216281,1619975040,1682949687,2047383090,2127137669,1938468188,2001449195,1325665622,1271206113,1183200824,1111960463,1543535498,1489069629,1434599652,1363369299,622672798,568075817,748617968,677256519,907627842,853037301,1067152940,995781531,51762726,131386257,177728840,240578815,269590778,349224269,429104020,491947555,4046411278,4126034873,4172115296,4234965207,3794477266,3874110821,3953728444,4016571915,3609705398,3555108353,3735388376,3664026991,3290680682,3236090077,3449943556,3378572211,3174993278,3120533705,3032266256,2961025959,2923101090,2868635157,2813903052,2742672763,2604032198,2683796849,2461293480,2524268063,2284983834,2364738477,2175806836,2238787779,1569362073,1498123566,1409854455,1355396672,1317987909,1246755826,1192025387,1137557660,2072149281,2135122070,1912620623,1992383480,1753615357,1816598090,1627664531,1707420964,295390185,358241886,404320391,483945776,43990325,106832002,186451547,266083308,932423249,861060070,1041341759,986742920,613929101,542559546,756411363,701822548,3316196985,3244833742,3425377559,3370778784,3601682597,3530312978,3744426955,3689838204,3819031489,3881883254,3928223919,4007849240,4037393693,4100235434,4180117107,4259748804,2310601993,2373574846,2151335527,2231098320,2596047829,2659030626,2470359227,2550115596,2947551409,2876312838,2788305887,2733848168,3165939309,3094707162,3040238851,2985771188],r.array=function(e){var t=0,r=0,n=[0,1,3,7,15,31,63,127,255];return function(i){for(var s=0;i>0;){var a=8-t;i>=a?(s<<=a,s|=n[a]&e[r++],t=0,i-=a):(s<<=i,s|=(e[r]&n[i]<<8-i-t)>>8-i-t,t+=i,i=0)}return s}},r.simple=function(e,t){var n=r.array(e),i=!1,s=1e5*r.header(n),a=new Int32Array(s);do{i=r.decompress(n,t,a,s)}while(!i)},r.header=function(e){this.byteCount=new Int32Array(256),this.symToByte=new Uint8Array(256),this.mtfSymbol=new Int32Array(256),this.selectors=new Uint8Array(32768),4348520!=e(24)&&t("No magic number found");var r=e(8)-48;return(r<1||r>9)&&t("Not a BZIP archive"),r},r.decompress=function(e,r,n,i,s){for(var a=-1,o="",c=0;c<6;c++)o+=e(8).toString(16);if("177245385090"==o)return(0|e(32))!==s&&t("Error in bzip2: crc32 do not match"),e(null),null;"314159265359"!=o&&t("Invalid bzip data");var u=0|e(32);e(1)&&t("unsupported obsolete version");var h=e(24);h>i&&t("Initial position larger than buffer size");var l=e(16),f=0;for(c=0;c<16;c++)if(l&1<<15-c){var y=e(16);for(g=0;g<16;g++)y&1<<15-g&&(this.symToByte[f++]=16*c+g)}var d=e(3);(d<2||d>6)&&t("Invalid bzip data");var p=e(15);for(0==p&&t("Invalid bzip data"),c=0;c<d;c++)this.mtfSymbol[c]=c;for(c=0;c<p;c++){for(var g=0;e(1);g++)g>=d&&t("Invalid bzip data");var w=this.mtfSymbol[g];for(y=g-1;y>=0;y--)this.mtfSymbol[y+1]=this.mtfSymbol[y];this.mtfSymbol[0]=w,this.selectors[c]=w}var A,m,b,k,E=f+2,v=[],K=new Uint8Array(258),S=new Uint16Array(21);for(g=0;g<d;g++){for(l=e(5),c=0;c<E;c++){for(;(l<1||l>20)&&t("Invalid bzip data"),e(1);)e(1)?l--:l++;K[c]=l}var I,B;for(I=B=K[0],c=1;c<E;c++)K[c]>B?B=K[c]:K[c]<I&&(I=K[c]);(A=v[g]={}).permute=new Int32Array(258),A.limit=new Int32Array(21),A.base=new Int32Array(21),A.minLen=I,A.maxLen=B;var C=A.base,U=A.limit,P=0;for(c=I;c<=B;c++)for(l=0;l<E;l++)K[l]==c&&(A.permute[P++]=l);for(c=I;c<=B;c++)S[c]=U[c]=0;for(c=0;c<E;c++)S[K[c]]++;for(P=l=0,c=I;c<B;c++)P+=S[c],U[c]=P-1,P<<=1,C[c+1]=P-(l+=S[c]);U[B]=P+S[B]-1,C[I]=0}for(c=0;c<256;c++)this.mtfSymbol[c]=c,this.byteCount[c]=0;for(m=b=E=k=0;;){for(E--||(E=49,k>=p&&t("Invalid bzip data"),C=(A=v[this.selectors[k++]]).base,U=A.limit),g=e(c=A.minLen);c>A.maxLen&&t("Invalid bzip data"),!(g<=U[c]);)c++,g=g<<1|e(1);((g-=C[c])<0||g>=258)&&t("Invalid bzip data");var D=A.permute[g];if(0!=D&&1!=D){if(m)for(m=0,b+l>i&&t("Invalid bzip data"),w=this.symToByte[this.mtfSymbol[0]],this.byteCount[w]+=l;l--;)n[b++]=w;if(D>f)break;for(b>=i&&t("Invalid bzip data"),c=D-1,w=this.mtfSymbol[c],y=c-1;y>=0;y--)this.mtfSymbol[y+1]=this.mtfSymbol[y];this.mtfSymbol[0]=w,w=this.symToByte[w],this.byteCount[w]++,n[b++]=w}else m||(m=1,l=0),l+=0==D?m:2*m,m<<=1}for((h<0||h>=b)&&t("Invalid bzip data"),g=0,c=0;c<256;c++)y=g+this.byteCount[c],this.byteCount[c]=g,g=y;for(c=0;c<b;c++)w=255&n[c],n[this.byteCount[w]]|=c<<8,this.byteCount[w]++;var x,Q,M,L=0,T=0,R=0;for(b&&(T=255&(L=n[h]),L>>=8,R=-1);b;){for(b--,Q=T,T=255&(L=n[L]),L>>=8,3==R++?(x=T,M=Q,T=-1):(x=1,M=T);x--;)a=4294967295&(a<<8^this.crcTable[255&(a>>24^M)]),r(M);T!=Q&&(R=0)}return(0|(a=~a>>>0))!=(0|u)&&t("Error in bzip2: crc32 do not match"),4294967295&(a^(s<<1|s>>>31))},Fp=r}(),t=function(){if(Hp)return Op;Hp=1;var e=[0,1,3,7,15,31,63,127,255];return Op=function(t){var r=0,n=0,i=t(),s=function(a){if(null===a&&0!=r)return r=0,void n++;for(var o=0;a>0;){n>=i.length&&(n=0,i=t());var c=8-r;0===r&&a>0&&s.bytesRead++,a>=c?(o<<=c,o|=e[c]&i[n++],r=0,a-=c):(o<<=a,o|=(i[n]&e[a]<<8-a-r)>>8-a-r,r+=a,a=0)}return o};return s.bytesRead=0,s}}();return _p=function(r){const n=[];let i=0,s=0,a=!1,o=!1,c=null,u=null;let h,l=0;function f(t){if(!a)try{return function(t){if(s){const r=1e5*s,n=new Int32Array(r),i=[],a=function(e){i.push(e)};return u=e.decompress(c,a,n,r,u),null===u?(s=0,!1):(t(new Uint8Array(i)),!0)}return s=e.header(c),u=0,!1}((function(e){t.enqueue(e),null!==e&&(l+=e.length)}))}catch(e){return t.error(e),a=!0,!0}}return new ReadableStream({start(){h=r.getReader()},async pull(e){try{for(;;){for(;!(o||c&&i-c.bytesRead+1>=25e3+1e5*(s||4));){const{value:e,done:r}=await h.read();r?o=!0:(n.push(e),i+=e.length,null===c&&(c=t((function(){return n.shift()}))))}for(;o?c&&i>c.bytesRead:c&&i-c.bytesRead+1>=25e3+1e5*(s||4);)if(f(e))return;if(o&&!a&&(!c||i<=c.bytesRead))return void(null===u?e.close():e.error(Error("input stream ended prematurely")))}}catch(t){e.error(t)}},async cancel(e){await h.abort(e)}},{highWaterMark:0})}}(),Vp=/*#__PURE__*/Object.freeze({__proto__:null,default:/*@__PURE__*/qp(jp)});export{Ba as AEADEncryptedDataPacket,Xi as Argon2OutOfMemoryError,rs as Argon2S2K,Qo as CleartextMessage,wa as CompressedDataPacket,ya as GrammarError,Gn as KDFParams,ra as LiteralDataPacket,La as MarkerPacket,Bo as Message,ha as OnePassSignaturePacket,fa as PacketList,za as PaddingPacket,go as PrivateKey,po as PublicKey,Ua as PublicKeyEncryptedSessionKeyPacket,xa as PublicKeyPacket,Ta as PublicSubkeyPacket,Fa as SecretKeyPacket,Ha as SecretSubkeyPacket,qa as Signature,oa as SignaturePacket,uo as Subkey,Ka as SymEncryptedIntegrityProtectedDataPacket,Da as SymEncryptedSessionKeyPacket,Ma as SymmetricallyEncryptedDataPacket,_a as TrustPacket,ut as UnparseablePacket,Ra as UserAttributePacket,Oa as UserIDPacket,ee as armor,T as config,Lo as createCleartextMessage,Do as createMessage,_o as decrypt,No as decryptKey,Vo as decryptSessionKeys,Ho as encrypt,Oo as encryptKey,jo as encryptSessionKey,L as enums,To as generateKey,qo as generateSessionKey,Mo as readCleartextMessage,bo as readKey,Eo as readKeys,Po as readMessage,ko as readPrivateKey,vo as readPrivateKeys,ja as readSignature,Ro as reformatKey,Fo as revokeKey,zo as sign,$ as unarmor,Go as verify};
 //# sourceMappingURL=openpgp.min.mjs.map