@signalapp/libsignal-client 0.41.1 → 0.42.0

package/Native.d.ts

@@ -135,10 +135,8 @@ export function AuthCredentialPresentation_CheckValidContents(presentationBytes:
 export function AuthCredentialPresentation_GetPniCiphertext(presentationBytes: Buffer): Buffer | null;
 export function AuthCredentialPresentation_GetRedemptionTime(presentationBytes: Buffer): Timestamp;
 export function AuthCredentialPresentation_GetUuidCiphertext(presentationBytes: Buffer): Serialized<UuidCiphertext>;
-export function AuthCredentialResponse_CheckValidContents(buffer: Buffer): void;
-export function AuthCredentialWithPniResponse_CheckValidContents(buffer: Buffer): void;
-export function AuthCredentialWithPni_CheckValidContents(buffer: Buffer): void;
-export function AuthCredential_CheckValidContents(buffer: Buffer): void;
+export function AuthCredentialWithPniResponse_CheckValidContents(bytes: Buffer): void;
+export function AuthCredentialWithPni_CheckValidContents(bytes: Buffer): void;
 export function BackupAuthCredentialPresentation_CheckValidContents(presentationBytes: Buffer): void;
 export function BackupAuthCredentialPresentation_Verify(presentationBytes: Buffer, now: Timestamp, serverParamsBytes: Buffer): void;
 export function BackupAuthCredentialRequestContext_CheckValidContents(contextBytes: Buffer): void;
@@ -222,15 +220,22 @@ export function GroupSecretParams_EncryptServiceId(params: Serialized<GroupSecre
 export function GroupSecretParams_GenerateDeterministic(randomness: Buffer): Serialized<GroupSecretParams>;
 export function GroupSecretParams_GetMasterKey(params: Serialized<GroupSecretParams>): Serialized<GroupMasterKey>;
 export function GroupSecretParams_GetPublicParams(params: Serialized<GroupSecretParams>): Serialized<GroupPublicParams>;
-export function GroupSendCredentialPresentation_CheckValidContents(presentationBytes: Buffer): void;
-export function GroupSendCredentialPresentation_Verify(presentationBytes: Buffer, groupMembers: Buffer, now: Timestamp, serverParams: Serialized<ServerSecretParams>): void;
-export function GroupSendCredentialResponse_CheckValidContents(responseBytes: Buffer): void;
-export function GroupSendCredentialResponse_DefaultExpirationBasedOnCurrentTime(): Timestamp;
-export function GroupSendCredentialResponse_IssueDeterministic(concatenatedGroupMemberCiphertexts: Buffer, requester: Serialized<UuidCiphertext>, expiration: Timestamp, serverParams: Serialized<ServerSecretParams>, randomness: Buffer): Buffer;
-export function GroupSendCredentialResponse_Receive(responseBytes: Buffer, groupMembers: Buffer, localAci: Buffer, now: Timestamp, serverParams: Serialized<ServerPublicParams>, groupParams: Serialized<GroupSecretParams>): Buffer;
-export function GroupSendCredentialResponse_ReceiveWithCiphertexts(responseBytes: Buffer, concatenatedGroupMemberCiphertexts: Buffer, requester: Serialized<UuidCiphertext>, now: Timestamp, serverParams: Serialized<ServerPublicParams>, groupParams: Serialized<GroupSecretParams>): Buffer;
-export function GroupSendCredential_CheckValidContents(paramsBytes: Buffer): void;
-export function GroupSendCredential_PresentDeterministic(credentialBytes: Buffer, serverParams: Serialized<ServerPublicParams>, randomness: Buffer): Buffer;
+export function GroupSendDerivedKeyPair_CheckValidContents(bytes: Buffer): void;
+export function GroupSendDerivedKeyPair_ForExpiration(expiration: Timestamp, serverParams: Serialized<ServerSecretParams>): Buffer;
+export function GroupSendEndorsement_CheckValidContents(bytes: Buffer): void;
+export function GroupSendEndorsement_Combine(endorsements: Buffer[]): Buffer;
+export function GroupSendEndorsement_Remove(endorsement: Buffer, toRemove: Buffer): Buffer;
+export function GroupSendEndorsement_ToToken(endorsement: Buffer, groupParams: Serialized<GroupSecretParams>): Buffer;
+export function GroupSendEndorsementsResponse_CheckValidContents(bytes: Buffer): void;
+export function GroupSendEndorsementsResponse_GetExpiration(responseBytes: Buffer): Timestamp;
+export function GroupSendEndorsementsResponse_IssueDeterministic(concatenatedGroupMemberCiphertexts: Buffer, keyPair: Buffer, randomness: Buffer): Buffer;
+export function GroupSendEndorsementsResponse_ReceiveAndCombineWithCiphertexts(responseBytes: Buffer, concatenatedGroupMemberCiphertexts: Buffer, localUserCiphertext: Buffer, now: Timestamp, serverParams: Serialized<ServerPublicParams>): Buffer[];
+export function GroupSendEndorsementsResponse_ReceiveAndCombineWithServiceIds(responseBytes: Buffer, groupMembers: Buffer, localUser: Buffer, now: Timestamp, groupParams: Serialized<GroupSecretParams>, serverParams: Serialized<ServerPublicParams>): Buffer[];
+export function GroupSendFullToken_CheckValidContents(bytes: Buffer): void;
+export function GroupSendFullToken_GetExpiration(token: Buffer): Timestamp;
+export function GroupSendFullToken_Verify(token: Buffer, userIds: Buffer, now: Timestamp, keyPair: Buffer): void;
+export function GroupSendToken_CheckValidContents(bytes: Buffer): void;
+export function GroupSendToken_ToFullToken(token: Buffer, expiration: Timestamp): Buffer;
 export function HKDF_DeriveSecrets(outputLength: number, ikm: Buffer, label: Buffer | null, salt: Buffer | null): Buffer;
 export function HsmEnclaveClient_CompleteHandshake(cli: Wrapper<HsmEnclaveClient>, handshakeReceived: Buffer): void;
 export function HsmEnclaveClient_EstablishedRecv(cli: Wrapper<HsmEnclaveClient>, receivedCiphertext: Buffer): Buffer;
@@ -394,24 +399,22 @@ export function ServerCertificate_GetSerialized(obj: Wrapper<ServerCertificate>)
 export function ServerCertificate_GetSignature(obj: Wrapper<ServerCertificate>): Buffer;
 export function ServerCertificate_New(keyId: number, serverKey: Wrapper<PublicKey>, trustRoot: Wrapper<PrivateKey>): ServerCertificate;
 export function ServerPublicParams_CheckValidContents(buffer: Buffer): void;
-export function ServerPublicParams_CreateAuthCredentialPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, groupSecretParams: Serialized<GroupSecretParams>, authCredential: Serialized<AuthCredential>): Buffer;
-export function ServerPublicParams_CreateAuthCredentialWithPniPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, groupSecretParams: Serialized<GroupSecretParams>, authCredential: Serialized<AuthCredentialWithPni>): Buffer;
+export function ServerPublicParams_CreateAuthCredentialWithPniPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, groupSecretParams: Serialized<GroupSecretParams>, authCredentialWithPniBytes: Buffer): Buffer;
 export function ServerPublicParams_CreateExpiringProfileKeyCredentialPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, groupSecretParams: Serialized<GroupSecretParams>, profileKeyCredential: Serialized<ExpiringProfileKeyCredential>): Buffer;
 export function ServerPublicParams_CreateProfileKeyCredentialRequestContextDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, userId: Buffer, profileKey: Serialized<ProfileKey>): Serialized<ProfileKeyCredentialRequestContext>;
 export function ServerPublicParams_CreateReceiptCredentialPresentationDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, receiptCredential: Serialized<ReceiptCredential>): Serialized<ReceiptCredentialPresentation>;
 export function ServerPublicParams_CreateReceiptCredentialRequestContextDeterministic(serverPublicParams: Serialized<ServerPublicParams>, randomness: Buffer, receiptSerial: Buffer): Serialized<ReceiptCredentialRequestContext>;
-export function ServerPublicParams_ReceiveAuthCredential(params: Serialized<ServerPublicParams>, aci: Buffer, redemptionTime: number, response: Serialized<AuthCredentialResponse>): Serialized<AuthCredential>;
-export function ServerPublicParams_ReceiveAuthCredentialWithPniAsAci(params: Serialized<ServerPublicParams>, aci: Buffer, pni: Buffer, redemptionTime: Timestamp, response: Serialized<AuthCredentialWithPniResponse>): Serialized<AuthCredentialWithPni>;
-export function ServerPublicParams_ReceiveAuthCredentialWithPniAsServiceId(params: Serialized<ServerPublicParams>, aci: Buffer, pni: Buffer, redemptionTime: Timestamp, response: Serialized<AuthCredentialWithPniResponse>): Serialized<AuthCredentialWithPni>;
+export function ServerPublicParams_ReceiveAuthCredentialWithPniAsAci(params: Serialized<ServerPublicParams>, aci: Buffer, pni: Buffer, redemptionTime: Timestamp, authCredentialWithPniResponseBytes: Buffer): Buffer;
+export function ServerPublicParams_ReceiveAuthCredentialWithPniAsServiceId(params: Serialized<ServerPublicParams>, aci: Buffer, pni: Buffer, redemptionTime: Timestamp, authCredentialWithPniResponseBytes: Buffer): Buffer;
 export function ServerPublicParams_ReceiveExpiringProfileKeyCredential(serverPublicParams: Serialized<ServerPublicParams>, requestContext: Serialized<ProfileKeyCredentialRequestContext>, response: Serialized<ExpiringProfileKeyCredentialResponse>, currentTimeInSeconds: Timestamp): Serialized<ExpiringProfileKeyCredential>;
 export function ServerPublicParams_ReceiveReceiptCredential(serverPublicParams: Serialized<ServerPublicParams>, requestContext: Serialized<ReceiptCredentialRequestContext>, response: Serialized<ReceiptCredentialResponse>): Serialized<ReceiptCredential>;
 export function ServerPublicParams_VerifySignature(serverPublicParams: Serialized<ServerPublicParams>, message: Buffer, notarySignature: Buffer): void;
 export function ServerSecretParams_CheckValidContents(buffer: Buffer): void;
 export function ServerSecretParams_GenerateDeterministic(randomness: Buffer): Serialized<ServerSecretParams>;
 export function ServerSecretParams_GetPublicParams(params: Serialized<ServerSecretParams>): Serialized<ServerPublicParams>;
-export function ServerSecretParams_IssueAuthCredentialDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, aci: Buffer, redemptionTime: number): Serialized<AuthCredentialResponse>;
-export function ServerSecretParams_IssueAuthCredentialWithPniAsAciDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, aci: Buffer, pni: Buffer, redemptionTime: Timestamp): Serialized<AuthCredentialWithPniResponse>;
-export function ServerSecretParams_IssueAuthCredentialWithPniAsServiceIdDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, aci: Buffer, pni: Buffer, redemptionTime: Timestamp): Serialized<AuthCredentialWithPniResponse>;
+export function ServerSecretParams_IssueAuthCredentialWithPniAsAciDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, aci: Buffer, pni: Buffer, redemptionTime: Timestamp): Buffer;
+export function ServerSecretParams_IssueAuthCredentialWithPniAsServiceIdDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, aci: Buffer, pni: Buffer, redemptionTime: Timestamp): Buffer;
+export function ServerSecretParams_IssueAuthCredentialWithPniZkcDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, aci: Buffer, pni: Buffer, redemptionTime: Timestamp): Buffer;
 export function ServerSecretParams_IssueExpiringProfileKeyCredentialDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, request: Serialized<ProfileKeyCredentialRequest>, userId: Buffer, commitment: Serialized<ProfileKeyCommitment>, expirationInSeconds: Timestamp): Serialized<ExpiringProfileKeyCredentialResponse>;
 export function ServerSecretParams_IssueReceiptCredentialDeterministic(serverSecretParams: Serialized<ServerSecretParams>, randomness: Buffer, request: Serialized<ReceiptCredentialRequest>, receiptExpirationTime: Timestamp, receiptLevel: bigint): Serialized<ReceiptCredentialResponse>;
 export function ServerSecretParams_SignDeterministic(params: Serialized<ServerSecretParams>, randomness: Buffer, message: Buffer): Buffer;
@@ -489,6 +492,7 @@ export function TESTING_PanicOnLoadSync(_needsCleanup: null, _input: null): void
 export function TESTING_PanicOnReturnAsync(_needsCleanup: null): Promise<null>;
 export function TESTING_PanicOnReturnIo(asyncRuntime: Wrapper<NonSuspendingBackgroundThreadRuntime>, _needsCleanup: null): Promise<null>;
 export function TESTING_PanicOnReturnSync(_needsCleanup: null): null;
+export function TESTING_ProcessBytestringArray(input: Buffer[]): Buffer[];
 export function TESTING_ReturnStringArray(): string[];
 export function TESTING_TestingHandleType_getValue(handle: Wrapper<TestingHandleType>): number;
 export function TokioAsyncContext_new(): TokioAsyncContext;
@@ -514,10 +518,6 @@ export function ValidatingMac_Update(mac: Wrapper<ValidatingMac>, bytes: Buffer,
 export function WebpSanitizer_Sanitize(input: SyncInputStream): void;
 export function initLogger(maxLevel: LogLevel, callback: (level: LogLevel, target: string, file: string | null, line: number | null, message: string) => void): void
 interface Aes256GcmSiv { readonly __type: unique symbol; }
-interface AuthCredential { readonly __type: unique symbol; }
-interface AuthCredentialResponse { readonly __type: unique symbol; }
-interface AuthCredentialWithPni { readonly __type: unique symbol; }
-interface AuthCredentialWithPniResponse { readonly __type: unique symbol; }
 interface CdsiLookup { readonly __type: unique symbol; }
 interface Chat { readonly __type: unique symbol; }
 interface CiphertextMessage { readonly __type: unique symbol; }

package/dist/acknowledgments.md

@@ -669,7 +669,7 @@ For more information on this, and how to apply and follow the GNU AGPL, see
 
 ```
 
-## attest 0.1.0, device-transfer 0.1.0, libsignal-bridge 0.1.0, libsignal-bridge-macros 0.1.0, libsignal-core 0.1.0, libsignal-ffi 0.41.1, libsignal-jni 0.41.1, libsignal-message-backup 0.1.0, libsignal-message-backup-macros 0.1.0, libsignal-net 0.1.0, libsignal-node 0.41.1, libsignal-protocol 0.1.0, libsignal-svr3 0.1.0, poksho 0.7.0, signal-crypto 0.1.0, signal-media 0.1.0, signal-neon-futures 0.1.0, signal-neon-futures-tests 0.1.0, signal-pin 0.1.0, usernames 0.1.0, zkcredential 0.1.0, zkgroup 0.9.0
+## attest 0.1.0, device-transfer 0.1.0, libsignal-bridge 0.1.0, libsignal-bridge-macros 0.1.0, libsignal-core 0.1.0, libsignal-ffi 0.42.0, libsignal-jni 0.42.0, libsignal-message-backup 0.1.0, libsignal-message-backup-macros 0.1.0, libsignal-net 0.1.0, libsignal-node 0.42.0, libsignal-protocol 0.1.0, libsignal-svr3 0.1.0, poksho 0.7.0, signal-crypto 0.1.0, signal-media 0.1.0, signal-neon-futures 0.1.0, signal-neon-futures-tests 0.1.0, signal-pin 0.1.0, usernames 0.1.0, zkcredential 0.1.0, zkgroup 0.9.0
 
 ```
 GNU AFFERO GENERAL PUBLIC LICENSE
@@ -1326,7 +1326,7 @@ You should also get your employer (if you work as a programmer) or school, if an
 
 ```
 
-## ciborium 0.2.1, ciborium-io 0.2.1, ciborium-ll 0.2.1
+## ciborium 0.2.2, ciborium-io 0.2.2, ciborium-ll 0.2.2
 
 ```
                                  Apache License
@@ -1533,7 +1533,7 @@ You should also get your employer (if you work as a programmer) or school, if an
 
 ```
 
-## ryu 1.0.16
+## ryu 1.0.17
 
 ```
                               Apache License
@@ -2150,7 +2150,7 @@ NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 ```
 
-## x25519-dalek 2.0.0
+## x25519-dalek 2.0.1
 
 ```
 Copyright (c) 2017-2021 isis agora lovecruft. All rights reserved.
@@ -2185,7 +2185,7 @@ SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 ```
 
-## asn1 0.15.5, asn1_derive 0.15.5
+## asn1 0.16.1, asn1_derive 0.16.1
 
 ```
 Copyright (c) Alex Gaynor and individual contributors.
@@ -2395,7 +2395,7 @@ express Statement of Purpose.
  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
 ```
 
-## libloading 0.8.1
+## libloading 0.8.3
 
 ```
 Copyright © 2015, Simonas Kazlauskas
@@ -2413,7 +2413,7 @@ THIS SOFTWARE.
 
 ```
 
-## windows-core 0.52.0, windows-sys 0.45.0, windows-sys 0.48.0, windows-sys 0.52.0, windows-targets 0.42.2, windows-targets 0.48.5, windows-targets 0.52.0, windows_aarch64_msvc 0.42.2, windows_aarch64_msvc 0.48.5, windows_aarch64_msvc 0.52.0, windows_x86_64_gnu 0.48.5, windows_x86_64_gnu 0.52.0, windows_x86_64_msvc 0.42.2, windows_x86_64_msvc 0.48.5, windows_x86_64_msvc 0.52.0
+## windows-core 0.52.0, windows-sys 0.45.0, windows-sys 0.48.0, windows-sys 0.52.0, windows-targets 0.42.2, windows-targets 0.48.5, windows-targets 0.52.4, windows_aarch64_msvc 0.42.2, windows_aarch64_msvc 0.48.5, windows_aarch64_msvc 0.52.4, windows_x86_64_gnu 0.48.5, windows_x86_64_gnu 0.52.4, windows_x86_64_msvc 0.42.2, windows_x86_64_msvc 0.48.5, windows_x86_64_msvc 0.52.4
 
 ```
     MIT License
@@ -2504,7 +2504,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## lazy_static 1.4.0, rayon 1.8.1, rayon-core 1.12.1
+## lazy_static 1.4.0, rayon 1.9.0, rayon-core 1.12.1
 
 ```
 Copyright (c) 2010 The Rust Project Developers
@@ -2654,7 +2654,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## backtrace 0.3.69, cc 1.0.83, cfg-if 1.0.0, cmake 0.1.48, flate2 1.0.28, openssl-probe 0.1.5, rustc-demangle 0.1.23, socket2 0.5.5
+## backtrace 0.3.69, cc 1.0.90, cfg-if 1.0.0, cmake 0.1.48, flate2 1.0.28, openssl-probe 0.1.5, rustc-demangle 0.1.23, socket2 0.5.6
 
 ```
 Copyright (c) 2014 Alex Crichton
@@ -2717,7 +2717,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## jobserver 0.1.27
+## jobserver 0.1.28
 
 ```
 Copyright (c) 2014 Alex Crichton
@@ -2748,7 +2748,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## mio 0.8.10
+## mio 0.8.11
 
 ```
 Copyright (c) 2014 Carl Lerche and other MIO contributors
@@ -2805,7 +2805,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## bitflags 1.3.2, bitflags 2.4.2, glob 0.3.1, log 0.4.20, num-derive 0.4.2, num-integer 0.1.45, num-traits 0.2.17, range-map 0.2.0, regex 1.10.3, regex-automata 0.4.4, regex-syntax 0.8.2
+## bitflags 1.3.2, bitflags 2.4.2, glob 0.3.1, log 0.4.21, num-derive 0.4.2, num-integer 0.1.46, num-traits 0.2.18, range-map 0.2.0, regex 1.10.3, regex-automata 0.4.6, regex-syntax 0.8.2
 
 ```
 Copyright (c) 2014 The Rust Project Developers
@@ -2894,7 +2894,7 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 ```
 
-## libc 0.2.152
+## libc 0.2.153
 
 ```
 Copyright (c) 2014-2020 The Rust Project Developers
@@ -2925,7 +2925,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## hyper 1.1.0
+## hyper 1.2.0
 
 ```
 Copyright (c) 2014-2021 Sean McArthur
@@ -2950,7 +2950,7 @@ THE SOFTWARE.
 
 ```
 
-## either 1.9.0, itertools 0.11.0, itertools 0.12.0, petgraph 0.6.4
+## either 1.10.0, itertools 0.11.0, itertools 0.12.1, petgraph 0.6.4
 
 ```
 Copyright (c) 2015
@@ -3007,7 +3007,7 @@ THE SOFTWARE.
 
 ```
 
-## neon-macros 1.0.0
+## neon 1.0.0, neon-macros 1.0.0
 
 ```
 Copyright (c) 2015 David Herman
@@ -3057,7 +3057,7 @@ SOFTWARE.
 
 ```
 
-## tempfile 3.9.0
+## tempfile 3.10.1
 
 ```
 Copyright (c) 2015 Steven Allen
@@ -3119,7 +3119,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## gimli 0.28.1, heck 0.3.3, heck 0.4.1, peeking_take_while 0.1.2, unicode-bidi 0.3.15, unicode-normalization 0.1.22, unicode-segmentation 1.10.1
+## gimli 0.28.1, heck 0.3.3, heck 0.4.1, peeking_take_while 0.1.2, unicode-bidi 0.3.15, unicode-normalization 0.1.23, unicode-segmentation 1.11.0
 
 ```
 Copyright (c) 2015 The Rust Project Developers
@@ -3746,7 +3746,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## indexmap 1.9.3, indexmap 2.1.0
+## indexmap 1.9.3, indexmap 2.2.5
 
 ```
 Copyright (c) 2016--2017
@@ -4128,7 +4128,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## http 1.0.0
+## http 1.1.0
 
 ```
 Copyright (c) 2017 http-rs authors
@@ -4190,7 +4190,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## aes 0.8.3
+## aes 0.8.4
 
 ```
 Copyright (c) 2018 Artyom Pavlov
@@ -4434,7 +4434,7 @@ THE SOFTWARE.
 
 ```
 
-## block-buffer 0.10.4, block-padding 0.3.3, opaque-debug 0.3.0
+## block-buffer 0.10.4, block-padding 0.3.3
 
 ```
 Copyright (c) 2018-2019 The RustCrypto Project Developers
@@ -4553,6 +4553,37 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
 
 
+```
+
+## opaque-debug 0.3.1
+
+```
+Copyright (c) 2018-2024 The RustCrypto Project Developers
+
+Permission is hereby granted, free of charge, to any
+person obtaining a copy of this software and associated
+documentation files (the "Software"), to deal in the
+Software without restriction, including without
+limitation the rights to use, copy, modify, merge,
+publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software
+is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice
+shall be included in all copies or substantial portions
+of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF
+ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED
+TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
+PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT
+SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR
+IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.
+
 ```
 
 ## getrandom 0.2.12
@@ -4618,7 +4649,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## http-body 1.0.0, http-body-util 0.1.0
+## http-body 1.0.0, http-body-util 0.1.1
 
 ```
 Copyright (c) 2019 Hyper Contributors
@@ -4649,7 +4680,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## ghash 0.5.0
+## ghash 0.5.1
 
 ```
 Copyright (c) 2019 RustCrypto Developers
@@ -4680,7 +4711,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## protobuf 3.3.0, protobuf-codegen 3.3.0, protobuf-json-mapping 3.3.0, protobuf-parse 3.3.0, protobuf-support 3.3.0
+## protobuf 3.4.0, protobuf-codegen 3.4.0, protobuf-json-mapping 3.4.0, protobuf-parse 3.4.0, protobuf-support 3.4.0
 
 ```
 Copyright (c) 2019 Stepan Koltsov
@@ -4860,7 +4891,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## polyval 0.6.1
+## polyval 0.6.2
 
 ```
 Copyright (c) 2019-2023 RustCrypto Developers
@@ -4922,7 +4953,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## iana-time-zone 0.1.59
+## iana-time-zone 0.1.60
 
 ```
 Copyright (c) 2020 Andrew D. Straw
@@ -5197,7 +5228,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## anstyle 1.0.4
+## anstyle 1.0.6
 
 ```
 Copyright (c) 2022 The rust-cli Developers
@@ -5297,7 +5328,7 @@ SOFTWARE.
 
 ```
 
-## tokio 1.35.1, tokio-macros 2.2.0, tokio-util 0.7.10
+## tokio 1.36.0, tokio-macros 2.2.0, tokio-util 0.7.10
 
 ```
 Copyright (c) 2023 Tokio Contributors
@@ -5353,7 +5384,7 @@ SOFTWARE.
 
 ```
 
-## anstream 0.6.11, anstyle-query 1.0.2, clap 4.4.18, colorchoice 1.0.0, toml_datetime 0.6.5, toml_edit 0.19.15
+## anstream 0.6.13, anstyle-query 1.0.2, clap 4.4.18, colorchoice 1.0.0, toml_datetime 0.6.5, toml_edit 0.19.15
 
 ```
 Copyright (c) Individual contributors
@@ -5565,7 +5596,7 @@ SOFTWARE.
 
 ```
 
-## miniz_oxide 0.7.1
+## miniz_oxide 0.7.2
 
 ```
 MIT License
@@ -5673,34 +5704,7 @@ SOFTWARE.
 
 ```
 
-## variant_count 1.1.0
-
-```
-MIT License
-
-Copyright (c) 2018 Alexander Mescheryakov
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-```
-
-## crc32fast 1.3.2
+## crc32fast 1.4.0
 
 ```
 MIT License
@@ -5754,7 +5758,7 @@ SOFTWARE.
 
 ```
 
-## strum 0.26.1, strum_macros 0.26.1
+## strum 0.26.2, strum_macros 0.26.2
 
 ```
 MIT License
@@ -5862,7 +5866,7 @@ SOFTWARE.
 
 ```
 
-## const-str 0.5.6
+## const-str 0.5.7
 
 ```
 MIT License
@@ -5915,7 +5919,7 @@ SOFTWARE.
 
 ```
 
-## snow 0.9.5
+## snow 0.9.6
 
 ```
 MIT License
@@ -5996,7 +6000,7 @@ SOFTWARE.
 
 ```
 
-## cesu8 1.1.0, curve25519-dalek-derive 0.1.0, half 1.8.2, neon 1.0.0, pqcrypto-internals 0.2.5, pqcrypto-kyber 0.7.9, pqcrypto-kyber 0.8.0, pqcrypto-traits 0.3.5
+## cesu8 1.1.0, curve25519-dalek-derive 0.1.0, half 2.4.0, pqcrypto-internals 0.2.5, pqcrypto-kyber 0.7.9, pqcrypto-kyber 0.8.1, pqcrypto-traits 0.3.5
 
 ```
 MIT License
@@ -6063,7 +6067,7 @@ SOFTWARE.
 
 ```
 
-## bytemuck 1.14.0
+## bytemuck 1.14.3
 
 ```
 MIT License
@@ -6110,7 +6114,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## adler 1.0.2, anyhow 1.0.79, async-trait 0.1.77, dyn-clone 1.0.16, fastrand 2.0.1, home 0.5.9, itoa 1.0.10, linkme 0.3.22, linkme-impl 0.3.22, linux-raw-sys 0.4.13, minimal-lexical 0.2.1, num_enum 0.6.1, num_enum_derive 0.6.1, once_cell 1.19.0, paste 1.0.14, pin-project-lite 0.2.13, prettyplease 0.2.16, proc-macro-crate 1.3.1, proc-macro2 1.0.78, quote 1.0.35, rustc-hash 1.1.0, rustix 0.38.30, rustversion 1.0.14, semver 1.0.21, send_wrapper 0.6.0, serde 1.0.195, serde_derive 1.0.195, serde_json 1.0.111, syn 1.0.109, syn 2.0.48, syn-mid 0.6.0, thiserror 1.0.56, thiserror-impl 1.0.56, unicode-ident 1.0.12, utf-8 0.7.6
+## adler 1.0.2, anyhow 1.0.80, async-trait 0.1.77, dyn-clone 1.0.17, fastrand 2.0.1, home 0.5.9, itoa 1.0.10, linkme 0.3.25, linkme-impl 0.3.25, linux-raw-sys 0.4.13, minimal-lexical 0.2.1, num_enum 0.6.1, num_enum_derive 0.6.1, once_cell 1.19.0, paste 1.0.14, pin-project-lite 0.2.13, prettyplease 0.2.16, proc-macro-crate 1.3.1, proc-macro2 1.0.78, quote 1.0.35, rustc-hash 1.1.0, rustix 0.38.31, rustversion 1.0.14, semver 1.0.22, send_wrapper 0.6.0, serde 1.0.197, serde_derive 1.0.197, serde_json 1.0.114, syn 1.0.109, syn 2.0.52, syn-mid 0.6.0, thiserror 1.0.57, thiserror-impl 1.0.57, unicode-ident 1.0.12, utf-8 0.7.6
 
 ```
 Permission is hereby granted, free of charge, to any
@@ -6168,7 +6172,7 @@ DEALINGS IN THE SOFTWARE.
 
 ```
 
-## winnow 0.5.34
+## winnow 0.5.40
 
 ```
 Permission is hereby granted, free of charge, to any person obtaining
@@ -6256,7 +6260,7 @@ SOFTWARE.
 
 ```
 
-## chrono 0.4.32
+## chrono 0.4.35
 
 ```
 The MIT License (MIT)
@@ -6309,7 +6313,7 @@ THE SOFTWARE.
 
 ```
 
-## aho-corasick 1.1.2, byteorder 1.5.0, memchr 2.7.1, walkdir 2.4.0
+## aho-corasick 1.1.2, byteorder 1.5.0, memchr 2.7.1, walkdir 2.5.0
 
 ```
 The MIT License (MIT)

package/dist/zkgroup/auth/ClientZkAuthOperations.d.ts

@@ -1,8 +1,6 @@
 /// <reference types="node" />
 import ServerPublicParams from '../ServerPublicParams';
-import AuthCredential from './AuthCredential';
 import AuthCredentialPresentation from './AuthCredentialPresentation';
-import AuthCredentialResponse from './AuthCredentialResponse';
 import AuthCredentialWithPni from './AuthCredentialWithPni';
 import AuthCredentialWithPniResponse from './AuthCredentialWithPniResponse';
 import GroupSecretParams from '../groups/GroupSecretParams';
@@ -10,7 +8,6 @@ import { Aci, Pni } from '../../Address';
 export default class ClientZkAuthOperations {
     serverPublicParams: ServerPublicParams;
     constructor(serverPublicParams: ServerPublicParams);
-    receiveAuthCredential(aci: Aci, redemptionTime: number, authCredentialResponse: AuthCredentialResponse): AuthCredential;
     /**
      * Produces the AuthCredentialWithPni from a server-generated AuthCredentialWithPniResponse.
      *
@@ -26,8 +23,6 @@ export default class ClientZkAuthOperations {
      * @param redemptionTime - This is provided by the server as an integer, and should be passed through directly.
      */
     receiveAuthCredentialWithPniAsAci(aci: Aci, pni: Pni, redemptionTime: number, authCredentialResponse: AuthCredentialWithPniResponse): AuthCredentialWithPni;
-    createAuthCredentialPresentation(groupSecretParams: GroupSecretParams, authCredential: AuthCredential): AuthCredentialPresentation;
-    createAuthCredentialPresentationWithRandom(random: Buffer, groupSecretParams: GroupSecretParams, authCredential: AuthCredential): AuthCredentialPresentation;
     createAuthCredentialWithPniPresentation(groupSecretParams: GroupSecretParams, authCredential: AuthCredentialWithPni): AuthCredentialPresentation;
     createAuthCredentialWithPniPresentationWithRandom(random: Buffer, groupSecretParams: GroupSecretParams, authCredential: AuthCredentialWithPni): AuthCredentialPresentation;
 }

package/dist/zkgroup/auth/ClientZkAuthOperations.js

@@ -7,16 +7,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const crypto_1 = require("crypto");
 const Native = require("../../../Native");
 const Constants_1 = require("../internal/Constants");
-const AuthCredential_1 = require("./AuthCredential");
 const AuthCredentialPresentation_1 = require("./AuthCredentialPresentation");
 const AuthCredentialWithPni_1 = require("./AuthCredentialWithPni");
 class ClientZkAuthOperations {
     constructor(serverPublicParams) {
         this.serverPublicParams = serverPublicParams;
     }
-    receiveAuthCredential(aci, redemptionTime, authCredentialResponse) {
-        return new AuthCredential_1.default(Native.ServerPublicParams_ReceiveAuthCredential(this.serverPublicParams.getContents(), aci.getServiceIdFixedWidthBinary(), redemptionTime, authCredentialResponse.getContents()));
-    }
     /**
      * Produces the AuthCredentialWithPni from a server-generated AuthCredentialWithPniResponse.
      *
@@ -36,13 +32,6 @@ class ClientZkAuthOperations {
     receiveAuthCredentialWithPniAsAci(aci, pni, redemptionTime, authCredentialResponse) {
         return new AuthCredentialWithPni_1.default(Native.ServerPublicParams_ReceiveAuthCredentialWithPniAsAci(this.serverPublicParams.getContents(), aci.getServiceIdFixedWidthBinary(), pni.getServiceIdFixedWidthBinary(), redemptionTime, authCredentialResponse.getContents()));
     }
-    createAuthCredentialPresentation(groupSecretParams, authCredential) {
-        const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
-        return this.createAuthCredentialPresentationWithRandom(random, groupSecretParams, authCredential);
-    }
-    createAuthCredentialPresentationWithRandom(random, groupSecretParams, authCredential) {
-        return new AuthCredentialPresentation_1.default(Native.ServerPublicParams_CreateAuthCredentialPresentationDeterministic(this.serverPublicParams.getContents(), random, groupSecretParams.getContents(), authCredential.getContents()));
-    }
     createAuthCredentialWithPniPresentation(groupSecretParams, authCredential) {
         const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
         return this.createAuthCredentialWithPniPresentationWithRandom(random, groupSecretParams, authCredential);

package/dist/zkgroup/auth/ServerZkAuthOperations.d.ts

@@ -1,6 +1,5 @@
 /// <reference types="node" />
 import ServerSecretParams from '../ServerSecretParams';
-import AuthCredentialResponse from './AuthCredentialResponse';
 import AuthCredentialPresentation from './AuthCredentialPresentation';
 import AuthCredentialWithPniResponse from './AuthCredentialWithPniResponse';
 import GroupPublicParams from '../groups/GroupPublicParams';
@@ -8,11 +7,11 @@ import { Aci, Pni } from '../../Address';
 export default class ServerZkAuthOperations {
     serverSecretParams: ServerSecretParams;
     constructor(serverSecretParams: ServerSecretParams);
-    issueAuthCredential(aci: Aci, redemptionTime: number): AuthCredentialResponse;
-    issueAuthCredentialWithRandom(random: Buffer, aci: Aci, redemptionTime: number): AuthCredentialResponse;
     issueAuthCredentialWithPniAsServiceId(aci: Aci, pni: Pni, redemptionTime: number): AuthCredentialWithPniResponse;
     issueAuthCredentialWithPniAsServiceIdWithRandom(random: Buffer, aci: Aci, pni: Pni, redemptionTime: number): AuthCredentialWithPniResponse;
     issueAuthCredentialWithPniAsAci(aci: Aci, pni: Pni, redemptionTime: number): AuthCredentialWithPniResponse;
     issueAuthCredentialWithPniAsAciWithRandom(random: Buffer, aci: Aci, pni: Pni, redemptionTime: number): AuthCredentialWithPniResponse;
+    issueAuthCredentialWithPniZkc(aci: Aci, pni: Pni, redemptionTime: number): AuthCredentialWithPniResponse;
+    issueAuthCredentialWithPniZkcWithRandom(random: Buffer, aci: Aci, pni: Pni, redemptionTime: number): AuthCredentialWithPniResponse;
     verifyAuthCredentialPresentation(groupPublicParams: GroupPublicParams, authCredentialPresentation: AuthCredentialPresentation, now?: Date): void;
 }

package/dist/zkgroup/auth/ServerZkAuthOperations.js

@@ -7,19 +7,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const crypto_1 = require("crypto");
 const Constants_1 = require("../internal/Constants");
 const Native = require("../../../Native");
-const AuthCredentialResponse_1 = require("./AuthCredentialResponse");
 const AuthCredentialWithPniResponse_1 = require("./AuthCredentialWithPniResponse");
 class ServerZkAuthOperations {
     constructor(serverSecretParams) {
         this.serverSecretParams = serverSecretParams;
     }
-    issueAuthCredential(aci, redemptionTime) {
-        const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
-        return this.issueAuthCredentialWithRandom(random, aci, redemptionTime);
-    }
-    issueAuthCredentialWithRandom(random, aci, redemptionTime) {
-        return new AuthCredentialResponse_1.default(Native.ServerSecretParams_IssueAuthCredentialDeterministic(this.serverSecretParams.getContents(), random, aci.getServiceIdFixedWidthBinary(), redemptionTime));
-    }
     issueAuthCredentialWithPniAsServiceId(aci, pni, redemptionTime) {
         const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
         return this.issueAuthCredentialWithPniAsServiceIdWithRandom(random, aci, pni, redemptionTime);
@@ -34,6 +26,13 @@ class ServerZkAuthOperations {
     issueAuthCredentialWithPniAsAciWithRandom(random, aci, pni, redemptionTime) {
         return new AuthCredentialWithPniResponse_1.default(Native.ServerSecretParams_IssueAuthCredentialWithPniAsAciDeterministic(this.serverSecretParams.getContents(), random, aci.getServiceIdFixedWidthBinary(), pni.getServiceIdFixedWidthBinary(), redemptionTime));
     }
+    issueAuthCredentialWithPniZkc(aci, pni, redemptionTime) {
+        const random = (0, crypto_1.randomBytes)(Constants_1.RANDOM_LENGTH);
+        return this.issueAuthCredentialWithPniZkcWithRandom(random, aci, pni, redemptionTime);
+    }
+    issueAuthCredentialWithPniZkcWithRandom(random, aci, pni, redemptionTime) {
+        return new AuthCredentialWithPniResponse_1.default(Native.ServerSecretParams_IssueAuthCredentialWithPniZkcDeterministic(this.serverSecretParams.getContents(), random, aci.getServiceIdFixedWidthBinary(), pni.getServiceIdFixedWidthBinary(), redemptionTime));
+    }
     verifyAuthCredentialPresentation(groupPublicParams, authCredentialPresentation, now = new Date()) {
         Native.ServerSecretParams_VerifyAuthCredentialPresentation(this.serverSecretParams.getContents(), groupPublicParams.getContents(), authCredentialPresentation.getContents(), Math.floor(now.getTime() / 1000));
     }

package/dist/zkgroup/groupsend/GroupSendDerivedKeyPair.d.ts

@@ -0,0 +1,23 @@
+/// <reference types="node" />
+import ByteArray from '../internal/ByteArray';
+import ServerSecretParams from '../ServerSecretParams';
+/**
+ * The key pair used to issue and verify group send endorsements.
+ *
+ * Group send endorsements use a different key pair depending on the endorsement's expiration (but
+ * not the user ID being endorsed). The server may cache these keys to avoid the (small) cost of
+ * deriving them from the root key in {@link ServerSecretParams}. The key object stores the
+ * expiration so that it doesn't need to be provided again when issuing endorsements.
+ *
+ * @see {@link GroupSendEndorsementsResponse.issue}
+ * @see {@link GroupSendFullToken#verify}
+ */
+export default class GroupSendDerivedKeyPair extends ByteArray {
+    constructor(contents: Buffer);
+    /**
+     * Derives a new key for group send endorsements that expire at `expiration`.
+     *
+     * `expiration` must be day-aligned as a protection against fingerprinting by the issuing server.
+     */
+    static forExpiration(expiration: Date, params: ServerSecretParams): GroupSendDerivedKeyPair;
+}