@transia/ripple-keypairs 1.1.6-alpha.3 → 2.0.0

package/README.md

@@ -1,7 +1,7 @@
 # ripple-keypairs [![NPM](https://img.shields.io/npm/v/ripple-keypairs.svg)](https://npmjs.org/package/ripple-keypairs) [![Build Status](https://img.shields.io/travis/ripple/ripple-keypairs/master.svg)](https://travis-ci.org/ripple/ripple-keypairs) ![Codecov](https://img.shields.io/codecov/c/github/ripple/ripple-keypairs)
 
 An implementation of XRP Ledger keypairs & wallet generation using
-[elliptic](https://github.com/indutny/elliptic) which supports rfc6979 and
+[noble](https://paulmillr.com/noble) which supports rfc6979 and
 eddsa deterministic signatures.
 
 [![NPM](https://nodei.co/npm/ripple-keypairs.png)](https://www.npmjs.org/package/ripple-keypairs)

package/dist/index.d.ts

@@ -1,16 +1,17 @@
-import * as addressCodec from '@transia/ripple-address-codec';
+import { decodeSeed } from '@transia/ripple-address-codec';
+import type { Algorithm, HexString, KeyPair } from './types';
 declare function generateSeed(options?: {
     entropy?: Uint8Array;
-    algorithm?: 'ed25519' | 'ecdsa-secp256k1';
+    algorithm?: Algorithm;
 }): string;
-declare function deriveKeypair(seed: string, options?: object): {
-    publicKey: string;
-    privateKey: string;
-};
-declare function sign(messageHex: any, privateKey: any): string;
-declare function verify(messageHex: any, signature: any, publicKey: any): boolean;
-declare function deriveAddress(publicKey: any): string;
-declare function deriveNodeAddress(publicKey: any): string;
-declare const decodeSeed: typeof addressCodec.decodeSeed;
+declare function deriveKeypair(seed: string, options?: {
+    algorithm?: Algorithm;
+    validator?: boolean;
+    accountIndex?: number;
+}): KeyPair;
+declare function sign(messageHex: HexString, privateKey: HexString): HexString;
+declare function verify(messageHex: HexString, signature: HexString, publicKey: HexString): boolean;
+declare function deriveAddress(publicKey: string): string;
+declare function deriveNodeAddress(publicKey: string): string;
 export { generateSeed, deriveKeypair, sign, verify, deriveAddress, deriveNodeAddress, decodeSeed, };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,YAAY,MAAM,+BAA+B,CAAA;AAU7D,iBAAS,YAAY,CACnB,OAAO,GAAE;IACP,OAAO,CAAC,EAAE,UAAU,CAAA;IACpB,SAAS,CAAC,EAAE,SAAS,GAAG,iBAAiB,CAAA;CACrC,GACL,MAAM,CAQR;AA4ED,iBAAS,aAAa,CACpB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,GACf;IACD,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB,CAYA;AASD,iBAAS,IAAI,CAAC,UAAU,KAAA,EAAE,UAAU,KAAA,GAAG,MAAM,CAG5C;AAED,iBAAS,MAAM,CAAC,UAAU,KAAA,EAAE,SAAS,KAAA,EAAE,SAAS,KAAA,GAAG,OAAO,CAGzD;AAQD,iBAAS,aAAa,CAAC,SAAS,KAAA,GAAG,MAAM,CAExC;AAED,iBAAS,iBAAiB,CAAC,SAAS,KAAA,GAAG,MAAM,CAI5C;AAED,QAAA,MAAQ,UAAU,gCAAiB,CAAA;AAEnC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,MAAM,EACN,aAAa,EACb,iBAAiB,EACjB,UAAU,GACX,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,UAAU,EAGX,MAAM,+BAA+B,CAAA;AAQtC,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAiB,MAAM,SAAS,CAAA;AAc3E,iBAAS,YAAY,CACnB,OAAO,GAAE;IACP,OAAO,CAAC,EAAE,UAAU,CAAA;IACpB,SAAS,CAAC,EAAE,SAAS,CAAA;CACjB,GACL,MAAM,CAUR;AAED,iBAAS,aAAa,CACpB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GACA,OAAO,CAcT;AAED,iBAAS,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,GAAG,SAAS,CAGrE;AAED,iBAAS,MAAM,CACb,UAAU,EAAE,SAAS,EACrB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,SAAS,GACnB,OAAO,CAOT;AAUD,iBAAS,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,iBAAS,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAIpD;AAED,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,MAAM,EACN,aAAa,EACb,iBAAiB,EACjB,UAAU,GACX,CAAA"}

package/dist/index.js

@@ -1,133 +1,73 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.decodeSeed = exports.deriveNodeAddress = exports.deriveAddress = exports.verify = exports.sign = exports.deriveKeypair = exports.generateSeed = void 0;
-const assert = __importStar(require("assert"));
-const brorand = require("brorand");
-const hashjs = __importStar(require("hash.js"));
-const elliptic = __importStar(require("elliptic"));
-const addressCodec = __importStar(require("@transia/ripple-address-codec"));
-const secp256k1_1 = require("./secp256k1");
-const utils = __importStar(require("./utils"));
-const Ed25519 = elliptic.eddsa('ed25519');
-const Secp256k1 = elliptic.ec('secp256k1');
-const { hexToBytes } = utils;
-const { bytesToHex } = utils;
+const ripple_address_codec_1 = require("@transia/ripple-address-codec");
+Object.defineProperty(exports, "decodeSeed", { enumerable: true, get: function () { return ripple_address_codec_1.decodeSeed; } });
+const ripemd160_1 = require("@transia/isomorphic/ripemd160");
+const sha256_1 = require("@transia/isomorphic/sha256");
+const utils_1 = require("@transia/isomorphic/utils");
+const utils_2 = require("./signing-schemes/secp256k1/utils");
+const Sha512_1 = __importDefault(require("./utils/Sha512"));
+const assert_1 = __importDefault(require("./utils/assert"));
+const getAlgorithmFromKey_1 = require("./utils/getAlgorithmFromKey");
+const secp256k1_1 = __importDefault(require("./signing-schemes/secp256k1"));
+const ed25519_1 = __importDefault(require("./signing-schemes/ed25519"));
+function getSigningScheme(algorithm) {
+    const schemes = { 'ecdsa-secp256k1': secp256k1_1.default, ed25519: ed25519_1.default };
+    return schemes[algorithm];
+}
 function generateSeed(options = {}) {
-    assert.ok(!options.entropy || options.entropy.length >= 16, 'entropy too short');
-    const entropy = options.entropy ? options.entropy.slice(0, 16) : brorand(16);
+    assert_1.default.ok(!options.entropy || options.entropy.length >= 16, 'entropy too short');
+    const entropy = options.entropy
+        ? options.entropy.slice(0, 16)
+        : (0, utils_1.randomBytes)(16);
     const type = options.algorithm === 'ed25519' ? 'ed25519' : 'secp256k1';
-    return addressCodec.encodeSeed(Buffer.from(entropy), type);
+    return (0, ripple_address_codec_1.encodeSeed)(entropy, type);
 }
 exports.generateSeed = generateSeed;
-function hash(message) {
-    return hashjs.sha512().update(message).digest().slice(0, 32);
-}
-const secp256k1 = {
-    deriveKeypair(entropy, options) {
-        const prefix = '00';
-        const privateKey = prefix + (0, secp256k1_1.derivePrivateKey)(entropy, options).toString(16, 64).toUpperCase();
-        const publicKey = bytesToHex(Secp256k1.keyFromPrivate(privateKey.slice(2))
-            .getPublic()
-            .encodeCompressed());
-        return { privateKey, publicKey };
-    },
-    sign(message, privateKey) {
-        return bytesToHex(Secp256k1.sign(hash(message), hexToBytes(privateKey), {
-            canonical: true,
-        }).toDER());
-    },
-    verify(message, signature, publicKey) {
-        return Secp256k1.verify(hash(message), signature, hexToBytes(publicKey));
-    },
-};
-const ed25519 = {
-    deriveKeypair(entropy) {
-        const prefix = 'ED';
-        const rawPrivateKey = hash(entropy);
-        const privateKey = prefix + bytesToHex(rawPrivateKey);
-        const publicKey = prefix + bytesToHex(Ed25519.keyFromSecret(rawPrivateKey).pubBytes());
-        return { privateKey, publicKey };
-    },
-    sign(message, privateKey) {
-        // caution: Ed25519.sign interprets all strings as hex, stripping
-        // any non-hex characters without warning
-        assert.ok(Array.isArray(message), 'message must be array of octets');
-        return bytesToHex(Ed25519.sign(message, hexToBytes(privateKey).slice(1)).toBytes());
-    },
-    verify(message, signature, publicKey) {
-        return Ed25519.verify(message, hexToBytes(signature), hexToBytes(publicKey).slice(1));
-    },
-};
-function select(algorithm) {
-    const methods = { 'ecdsa-secp256k1': secp256k1, ed25519 };
-    return methods[algorithm];
-}
 function deriveKeypair(seed, options) {
-    const decoded = addressCodec.decodeSeed(seed);
-    const algorithm = decoded.type === 'ed25519' ? 'ed25519' : 'ecdsa-secp256k1';
-    const method = select(algorithm);
-    const keypair = method.deriveKeypair(decoded.bytes, options);
-    const messageToVerify = hash('This test message should verify.');
-    const signature = method.sign(messageToVerify, keypair.privateKey);
+    var _a;
+    const decoded = (0, ripple_address_codec_1.decodeSeed)(seed);
+    const proposedAlgorithm = (_a = options === null || options === void 0 ? void 0 : options.algorithm) !== null && _a !== void 0 ? _a : decoded.type;
+    const algorithm = proposedAlgorithm === 'ed25519' ? 'ed25519' : 'ecdsa-secp256k1';
+    const scheme = getSigningScheme(algorithm);
+    const keypair = scheme.deriveKeypair(decoded.bytes, options);
+    const messageToVerify = Sha512_1.default.half('This test message should verify.');
+    const signature = scheme.sign(messageToVerify, keypair.privateKey);
     /* istanbul ignore if */
-    if (method.verify(messageToVerify, signature, keypair.publicKey) !== true) {
+    if (!scheme.verify(messageToVerify, signature, keypair.publicKey)) {
         throw new Error('derived keypair did not generate verifiable signature');
     }
     return keypair;
 }
 exports.deriveKeypair = deriveKeypair;
-function getAlgorithmFromKey(key) {
-    const bytes = hexToBytes(key);
-    return bytes.length === 33 && bytes[0] === 0xed
-        ? 'ed25519'
-        : 'ecdsa-secp256k1';
-}
 function sign(messageHex, privateKey) {
-    const algorithm = getAlgorithmFromKey(privateKey);
-    return select(algorithm).sign(hexToBytes(messageHex), privateKey);
+    const algorithm = (0, getAlgorithmFromKey_1.getAlgorithmFromPrivateKey)(privateKey);
+    return getSigningScheme(algorithm).sign((0, utils_1.hexToBytes)(messageHex), privateKey);
 }
 exports.sign = sign;
 function verify(messageHex, signature, publicKey) {
-    const algorithm = getAlgorithmFromKey(publicKey);
-    return select(algorithm).verify(hexToBytes(messageHex), signature, publicKey);
+    const algorithm = (0, getAlgorithmFromKey_1.getAlgorithmFromPublicKey)(publicKey);
+    return getSigningScheme(algorithm).verify((0, utils_1.hexToBytes)(messageHex), signature, publicKey);
 }
 exports.verify = verify;
+function computePublicKeyHash(publicKeyBytes) {
+    return (0, ripemd160_1.ripemd160)((0, sha256_1.sha256)(publicKeyBytes));
+}
 function deriveAddressFromBytes(publicKeyBytes) {
-    return addressCodec.encodeAccountID(utils.computePublicKeyHash(publicKeyBytes));
+    return (0, ripple_address_codec_1.encodeAccountID)(computePublicKeyHash(publicKeyBytes));
 }
 function deriveAddress(publicKey) {
-    return deriveAddressFromBytes(Buffer.from(hexToBytes(publicKey)));
+    return deriveAddressFromBytes((0, utils_1.hexToBytes)(publicKey));
 }
 exports.deriveAddress = deriveAddress;
 function deriveNodeAddress(publicKey) {
-    const generatorBytes = addressCodec.decodeNodePublic(publicKey);
-    const accountPublicBytes = (0, secp256k1_1.accountPublicFromPublicGenerator)(generatorBytes);
+    const generatorBytes = (0, ripple_address_codec_1.decodeNodePublic)(publicKey);
+    const accountPublicBytes = (0, utils_2.accountPublicFromPublicGenerator)(generatorBytes);
     return deriveAddressFromBytes(accountPublicBytes);
 }
 exports.deriveNodeAddress = deriveNodeAddress;
-const { decodeSeed } = addressCodec;
-exports.decodeSeed = decodeSeed;
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAgC;AAChC,mCAAmC;AACnC,gDAAiC;AACjC,mDAAoC;AAEpC,4EAA6D;AAC7D,2CAAgF;AAChF,+CAAgC;AAEhC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;AACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAA;AAE1C,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;AAC5B,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;AAE5B,SAAS,YAAY,CACnB,UAGI,EAAE;IAEN,MAAM,CAAC,EAAE,CACP,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,EAChD,mBAAmB,CACpB,CAAA;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAA;IACtE,OAAO,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAA;AAC5D,CAAC;AAoIC,oCAAY;AAlId,SAAS,IAAI,CAAC,OAAO;IACnB,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED,MAAM,SAAS,GAAG;IAChB,aAAa,CACX,OAAmB,EACnB,OAAgB;QAKhB,MAAM,MAAM,GAAG,IAAI,CAAA;QAEnB,MAAM,UAAU,GACd,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;QAE5E,MAAM,SAAS,GAAG,UAAU,CAC1B,SAAS,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aAC1C,SAAS,EAAE;aACX,gBAAgB,EAAE,CACtB,CAAA;QACD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;IAClC,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,UAAU;QACtB,OAAO,UAAU,CACf,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE;YACpD,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC,KAAK,EAAE,CACX,CAAA;IACH,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS;QAClC,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAA;IAC1E,CAAC;CACF,CAAA;AAED,MAAM,OAAO,GAAG;IACd,aAAa,CAAC,OAAmB;QAI/B,MAAM,MAAM,GAAG,IAAI,CAAA;QACnB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;QACnC,MAAM,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC,aAAa,CAAC,CAAA;QACrD,MAAM,SAAS,GACb,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;QACtE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;IAClC,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,UAAU;QACtB,iEAAiE;QACjE,yCAAyC;QACzC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,iCAAiC,CAAC,CAAA;QACpE,OAAO,UAAU,CACf,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CACjE,CAAA;IACH,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS;QAClC,OAAO,OAAO,CAAC,MAAM,CACnB,OAAO,EACP,UAAU,CAAC,SAAS,CAAC,EACrB,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC/B,CAAA;IACH,CAAC;CACF,CAAA;AAED,SAAS,MAAM,CAAC,SAAS;IACvB,MAAM,OAAO,GAAG,EAAE,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;IACzD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,aAAa,CACpB,IAAY,EACZ,OAAgB;IAKhB,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAA;IAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,kCAAkC,CAAC,CAAA;IAChE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IAClE,wBAAwB;IACxB,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;QACzE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;KACzE;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAuCC,sCAAa;AArCf,SAAS,mBAAmB,CAAC,GAAG;IAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAC7B,OAAO,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAC7C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,CAAA;AACvB,CAAC;AAED,SAAS,IAAI,CAAC,UAAU,EAAE,UAAU;IAClC,MAAM,SAAS,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAA;IACjD,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;AACnE,CAAC;AA4BC,oBAAI;AA1BN,SAAS,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS;IAC9C,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAChD,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;AAC/E,CAAC;AAwBC,wBAAM;AAtBR,SAAS,sBAAsB,CAAC,cAAsB;IACpD,OAAO,YAAY,CAAC,eAAe,CACjC,KAAK,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAC3C,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,SAAS;IAC9B,OAAO,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AACnE,CAAC;AAeC,sCAAa;AAbf,SAAS,iBAAiB,CAAC,SAAS;IAClC,MAAM,cAAc,GAAG,YAAY,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAA;IAC/D,MAAM,kBAAkB,GAAG,IAAA,4CAAgC,EAAC,cAAc,CAAC,CAAA;IAC3E,OAAO,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;AACnD,CAAC;AAUC,8CAAiB;AARnB,MAAM,EAAE,UAAU,EAAE,GAAG,YAAY,CAAA;AASjC,gCAAU"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;AAAA,wEAKsC;AAyGpC,2FA5GA,iCAAU,OA4GA;AAxGZ,6DAAyD;AACzD,uDAAmD;AACnD,qDAAmE;AAEnE,6DAAoF;AACpF,4DAAmC;AACnC,4DAAmC;AAEnC,qEAGoC;AAEpC,4EAAmD;AACnD,wEAA+C;AAE/C,SAAS,gBAAgB,CAAC,SAAoB;IAC5C,MAAM,OAAO,GAAG,EAAE,iBAAiB,EAAE,mBAAS,EAAE,OAAO,EAAP,iBAAO,EAAE,CAAA;IACzD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,YAAY,CACnB,UAGI,EAAE;IAEN,gBAAM,CAAC,EAAE,CACP,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,EAChD,mBAAmB,CACpB,CAAA;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;QAC7B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9B,CAAC,CAAC,IAAA,mBAAW,EAAC,EAAE,CAAC,CAAA;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAA;IACtE,OAAO,IAAA,iCAAU,EAAC,OAAO,EAAE,IAAI,CAAC,CAAA;AAClC,CAAC;AA8DC,oCAAY;AA5Dd,SAAS,aAAa,CACpB,IAAY,EACZ,OAIC;;IAED,MAAM,OAAO,GAAG,IAAA,iCAAU,EAAC,IAAI,CAAC,CAAA;IAChC,MAAM,iBAAiB,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,mCAAI,OAAO,CAAC,IAAI,CAAA;IAC5D,MAAM,SAAS,GACb,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAA;IACjE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC5D,MAAM,eAAe,GAAG,gBAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACvE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IAClE,wBAAwB;IACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE;QACjE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;KACzE;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAwCC,sCAAa;AAtCf,SAAS,IAAI,CAAC,UAAqB,EAAE,UAAqB;IACxD,MAAM,SAAS,GAAG,IAAA,gDAA0B,EAAC,UAAU,CAAC,CAAA;IACxD,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAA,kBAAU,EAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;AAC7E,CAAC;AAoCC,oBAAI;AAlCN,SAAS,MAAM,CACb,UAAqB,EACrB,SAAoB,EACpB,SAAoB;IAEpB,MAAM,SAAS,GAAG,IAAA,+CAAyB,EAAC,SAAS,CAAC,CAAA;IACtD,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC,MAAM,CACvC,IAAA,kBAAU,EAAC,UAAU,CAAC,EACtB,SAAS,EACT,SAAS,CACV,CAAA;AACH,CAAC;AAwBC,wBAAM;AAtBR,SAAS,oBAAoB,CAAC,cAA0B;IACtD,OAAO,IAAA,qBAAS,EAAC,IAAA,eAAM,EAAC,cAAc,CAAC,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAAC,cAA0B;IACxD,OAAO,IAAA,sCAAe,EAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,sBAAsB,CAAC,IAAA,kBAAU,EAAC,SAAS,CAAC,CAAC,CAAA;AACtD,CAAC;AAaC,sCAAa;AAXf,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,cAAc,GAAG,IAAA,uCAAgB,EAAC,SAAS,CAAC,CAAA;IAClD,MAAM,kBAAkB,GAAG,IAAA,wCAAgC,EAAC,cAAc,CAAC,CAAA;IAC3E,OAAO,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;AACnD,CAAC;AAQC,8CAAiB"}

package/dist/signing-schemes/ed25519/index.d.ts

@@ -0,0 +1,4 @@
+import type { SigningScheme } from '../../types';
+declare const ed25519: SigningScheme;
+export default ed25519;
+//# sourceMappingURL=index.d.ts.map

package/dist/signing-schemes/ed25519/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/signing-schemes/ed25519/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAa,aAAa,EAAE,MAAM,aAAa,CAAA;AAM3D,QAAA,MAAM,OAAO,EAAE,aA4Cd,CAAA;AAED,eAAe,OAAO,CAAA"}

package/dist/signing-schemes/ed25519/index.js

@@ -0,0 +1,38 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const ed25519_1 = require("@noble/curves/ed25519");
+const utils_1 = require("@transia/isomorphic/utils");
+const assert_1 = __importDefault(require("../../utils/assert"));
+const Sha512_1 = __importDefault(require("../../utils/Sha512"));
+const ED_PREFIX = 'ED';
+const ed25519 = {
+    deriveKeypair(entropy) {
+        const rawPrivateKey = Sha512_1.default.half(entropy);
+        const privateKey = ED_PREFIX + (0, utils_1.bytesToHex)(rawPrivateKey);
+        const publicKey = ED_PREFIX + (0, utils_1.bytesToHex)(ed25519_1.ed25519.getPublicKey(rawPrivateKey));
+        return { privateKey, publicKey };
+    },
+    sign(message, privateKey) {
+        assert_1.default.ok(message instanceof Uint8Array, 'message must be array of octets');
+        assert_1.default.ok(privateKey.length === 66, 'private key must be 33 bytes including prefix');
+        return (0, utils_1.bytesToHex)(ed25519_1.ed25519.sign(message, privateKey.slice(2)));
+    },
+    verify(message, signature, publicKey) {
+        // Unlikely to be triggered as these are internal and guarded by getAlgorithmFromKey
+        assert_1.default.ok(publicKey.length === 66, 'public key must be 33 bytes including prefix');
+        return ed25519_1.ed25519.verify(signature, message, 
+        // Remove the 0xED prefix
+        publicKey.slice(2), 
+        // By default, set zip215 to false for compatibility reasons.
+        // ZIP 215 is a stricter Ed25519 signature verification scheme.
+        // However, setting it to false adheres to the more commonly used
+        // RFC8032 / NIST186-5 standards, making it compatible with systems
+        // like the XRP Ledger.
+        { zip215: false });
+    },
+};
+exports.default = ed25519;
+//# sourceMappingURL=index.js.map

package/dist/signing-schemes/ed25519/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/signing-schemes/ed25519/index.ts"],"names":[],"mappings":";;;;;AAAA,mDAA+D;AAC/D,qDAAsD;AAGtD,gEAAuC;AACvC,gEAAuC;AAEvC,MAAM,SAAS,GAAG,IAAI,CAAA;AAEtB,MAAM,OAAO,GAAkB;IAC7B,aAAa,CAAC,OAAmB;QAI/B,MAAM,aAAa,GAAG,gBAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,UAAU,GAAG,SAAS,GAAG,IAAA,kBAAU,EAAC,aAAa,CAAC,CAAA;QACxD,MAAM,SAAS,GACb,SAAS,GAAG,IAAA,kBAAU,EAAC,iBAAY,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAA;QAClE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;IAClC,CAAC;IAED,IAAI,CAAC,OAAmB,EAAE,UAAqB;QAC7C,gBAAM,CAAC,EAAE,CAAC,OAAO,YAAY,UAAU,EAAE,iCAAiC,CAAC,CAAA;QAC3E,gBAAM,CAAC,EAAE,CACP,UAAU,CAAC,MAAM,KAAK,EAAE,EACxB,+CAA+C,CAChD,CAAA;QACD,OAAO,IAAA,kBAAU,EAAC,iBAAY,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,CACJ,OAAmB,EACnB,SAAoB,EACpB,SAAiB;QAEjB,oFAAoF;QACpF,gBAAM,CAAC,EAAE,CACP,SAAS,CAAC,MAAM,KAAK,EAAE,EACvB,8CAA8C,CAC/C,CAAA;QACD,OAAO,iBAAY,CAAC,MAAM,CACxB,SAAS,EACT,OAAO;QACP,yBAAyB;QACzB,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAClB,6DAA6D;QAC7D,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,uBAAuB;QACvB,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAA;IACH,CAAC;CACF,CAAA;AAED,kBAAe,OAAO,CAAA"}

package/dist/signing-schemes/secp256k1/index.d.ts

@@ -0,0 +1,4 @@
+import type { SigningScheme } from '../../types';
+declare const secp256k1: SigningScheme;
+export default secp256k1;
+//# sourceMappingURL=index.d.ts.map

package/dist/signing-schemes/secp256k1/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/signing-schemes/secp256k1/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAGV,aAAa,EACd,MAAM,aAAa,CAAA;AAQpB,QAAA,MAAM,SAAS,EAAE,aA6ChB,CAAA;AAED,eAAe,SAAS,CAAA"}

package/dist/signing-schemes/secp256k1/index.js

@@ -0,0 +1,43 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@noble/curves/abstract/utils");
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const utils_2 = require("@transia/isomorphic/utils");
+const utils_3 = require("./utils");
+const assert_1 = __importDefault(require("../../utils/assert"));
+const Sha512_1 = __importDefault(require("../../utils/Sha512"));
+const SECP256K1_PREFIX = '00';
+const secp256k1 = {
+    deriveKeypair(entropy, options) {
+        const derived = (0, utils_3.derivePrivateKey)(entropy, options);
+        const privateKey = SECP256K1_PREFIX + (0, utils_2.bytesToHex)((0, utils_1.numberToBytesBE)(derived, 32));
+        const publicKey = (0, utils_2.bytesToHex)(secp256k1_1.secp256k1.getPublicKey(derived, true));
+        return { privateKey, publicKey };
+    },
+    sign(message, privateKey) {
+        // Some callers pass the privateKey with the prefix, others without.
+        // @noble/curves will throw if the key is not exactly 32 bytes, so we
+        // normalize it before passing to the sign method.
+        assert_1.default.ok((privateKey.length === 66 && privateKey.startsWith(SECP256K1_PREFIX)) ||
+            privateKey.length === 64);
+        const normedPrivateKey = privateKey.length === 66 ? privateKey.slice(2) : privateKey;
+        return secp256k1_1.secp256k1
+            .sign(Sha512_1.default.half(message), normedPrivateKey, {
+            // "Canonical" signatures
+            lowS: true,
+            // Would fail tests if signatures aren't deterministic
+            extraEntropy: undefined,
+        })
+            .toDERHex(true)
+            .toUpperCase();
+    },
+    verify(message, signature, publicKey) {
+        const decoded = secp256k1_1.secp256k1.Signature.fromDER(signature);
+        return secp256k1_1.secp256k1.verify(decoded, Sha512_1.default.half(message), publicKey);
+    },
+};
+exports.default = secp256k1;
+//# sourceMappingURL=index.js.map

package/dist/signing-schemes/secp256k1/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/signing-schemes/secp256k1/index.ts"],"names":[],"mappings":";;;;;AAAA,wDAA8D;AAC9D,uDAAqE;AACrE,qDAAsD;AAQtD,mCAA0C;AAC1C,gEAAuC;AACvC,gEAAuC;AAEvC,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAE7B,MAAM,SAAS,GAAkB;IAC/B,aAAa,CACX,OAAmB,EACnB,OAA8B;QAK9B,MAAM,OAAO,GAAG,IAAA,wBAAgB,EAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAClD,MAAM,UAAU,GACd,gBAAgB,GAAG,IAAA,kBAAU,EAAC,IAAA,uBAAe,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;QAE7D,MAAM,SAAS,GAAG,IAAA,kBAAU,EAAC,qBAAc,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;QACxE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;IAClC,CAAC;IAED,IAAI,CAAC,OAAmB,EAAE,UAAqB;QAC7C,oEAAoE;QACpE,qEAAqE;QACrE,kDAAkD;QAClD,gBAAM,CAAC,EAAE,CACP,CAAC,UAAU,CAAC,MAAM,KAAK,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;YACnE,UAAU,CAAC,MAAM,KAAK,EAAE,CAC3B,CAAA;QACD,MAAM,gBAAgB,GACpB,UAAU,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;QAC7D,OAAO,qBAAc;aAClB,IAAI,CAAC,gBAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE;YAC5C,yBAAyB;YACzB,IAAI,EAAE,IAAI;YACV,sDAAsD;YACtD,YAAY,EAAE,SAAS;SACxB,CAAC;aACD,QAAQ,CAAC,IAAI,CAAC;aACd,WAAW,EAAE,CAAA;IAClB,CAAC;IAED,MAAM,CACJ,OAAmB,EACnB,SAAoB,EACpB,SAAoB;QAEpB,MAAM,OAAO,GAAG,qBAAc,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC3D,OAAO,qBAAc,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAA;IACxE,CAAC;CACF,CAAA;AAED,kBAAe,SAAS,CAAA"}

package/dist/{secp256k1.d.ts → signing-schemes/secp256k1/utils.d.ts}

@@ -4,12 +4,11 @@
  * @param [opts.accountIndex=0] - The account number to generate.
  * @param [opts.validator=false] - Generate root key-pair,
  *                                              as used by validators.
- * @returns {bn.js} 256 bit scalar value.
- *
+ * @returns {bigint} 256 bit scalar value.
  */
-export declare function derivePrivateKey(seed: any, opts?: {
+export declare function derivePrivateKey(seed: Uint8Array, opts?: {
     validator?: boolean;
     accountIndex?: number;
-}): any;
-export declare function accountPublicFromPublicGenerator(publicGenBytes: any): any;
-//# sourceMappingURL=secp256k1.d.ts.map
+}): bigint;
+export declare function accountPublicFromPublicGenerator(publicGenBytes: Uint8Array): Uint8Array;
+//# sourceMappingURL=utils.d.ts.map

package/dist/signing-schemes/secp256k1/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/signing-schemes/secp256k1/utils.ts"],"names":[],"mappings":"AAmCA;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE;IACJ,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;CACjB,GACL,MAAM,CAiBR;AAED,wBAAgB,gCAAgC,CAAC,cAAc,EAAE,UAAU,cAM1E"}

package/dist/{secp256k1.js → signing-schemes/secp256k1/utils.js}

@@ -1,39 +1,16 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.accountPublicFromPublicGenerator = exports.derivePrivateKey = void 0;
-const elliptic = __importStar(require("elliptic"));
-const Sha512_1 = __importDefault(require("./Sha512"));
-const secp256k1 = elliptic.ec('secp256k1');
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const Sha512_1 = __importDefault(require("../../utils/Sha512"));
+const ZERO = BigInt(0);
 function deriveScalar(bytes, discrim) {
-    const order = secp256k1.curve.n;
-    for (let i = 0; i <= 0xffffffff; i++) {
-        // We hash the bytes to find a 256 bit number, looping until we are sure it
+    const order = secp256k1_1.secp256k1.CURVE.n;
+    for (let i = 0; i <= 4294967295; i++) {
+        // We hash the bytes to find a 256-bit number, looping until we are sure it
         // is less than the order of the curve.
         const hasher = new Sha512_1.default().add(bytes);
         // If the optional discriminator index was passed in, update the hash.
@@ -41,9 +18,9 @@ function deriveScalar(bytes, discrim) {
             hasher.addU32(discrim);
         }
         hasher.addU32(i);
-        const key = hasher.first256BN();
+        const key = hasher.first256BigInt();
         /* istanbul ignore else */
-        if (key.cmpn(0) > 0 && key.cmp(order) < 0) {
+        if (key > ZERO && key < order) {
             return key;
         }
     }
@@ -53,7 +30,7 @@ function deriveScalar(bytes, discrim) {
     // How often will an (essentially) random number generated by Sha512 be larger than that?
     // There's 2^32 chances (the for loop) to get a number smaller than the order,
     // and it's rare that you'll even get past the first loop iteration.
-    // Note that in TypeScript we actually need the throw, otherwise the function signature would be BN | undefined
+    // Note that in TypeScript we actually need the throw, otherwise the function signature would be bigint | undefined
     //
     /* istanbul ignore next */
     throw new Error('impossible unicorn ;)');
@@ -64,12 +41,11 @@ function deriveScalar(bytes, discrim) {
  * @param [opts.accountIndex=0] - The account number to generate.
  * @param [opts.validator=false] - Generate root key-pair,
  *                                              as used by validators.
- * @returns {bn.js} 256 bit scalar value.
- *
+ * @returns {bigint} 256 bit scalar value.
  */
 function derivePrivateKey(seed, opts = {}) {
     const root = opts.validator;
-    const order = secp256k1.curve.n;
+    const order = secp256k1_1.secp256k1.CURVE.n;
     // This private generator represents the `root` private key, and is what's
     // used by validators for signing when a keypair is generated from a seed.
     const privateGen = deriveScalar(seed);
@@ -77,21 +53,19 @@ function derivePrivateKey(seed, opts = {}) {
         // As returned by validation_create for a given seed
         return privateGen;
     }
-    const publicGen = secp256k1.g.mul(privateGen);
+    const publicGen = secp256k1_1.secp256k1.ProjectivePoint.BASE.multiply(privateGen).toRawBytes(true);
     // A seed can generate many keypairs as a function of the seed and a uint32.
     // Almost everyone just uses the first account, `0`.
     const accountIndex = opts.accountIndex || 0;
-    return deriveScalar(publicGen.encodeCompressed(), accountIndex)
-        .add(privateGen)
-        .mod(order);
+    return (deriveScalar(publicGen, accountIndex) + privateGen) % order;
 }
 exports.derivePrivateKey = derivePrivateKey;
 function accountPublicFromPublicGenerator(publicGenBytes) {
-    const rootPubPoint = secp256k1.curve.decodePoint(publicGenBytes);
+    const rootPubPoint = secp256k1_1.secp256k1.ProjectivePoint.fromHex(publicGenBytes);
     const scalar = deriveScalar(publicGenBytes, 0);
-    const point = secp256k1.g.mul(scalar);
+    const point = secp256k1_1.secp256k1.ProjectivePoint.BASE.multiply(scalar);
     const offset = rootPubPoint.add(point);
-    return offset.encodeCompressed();
+    return offset.toRawBytes(true);
 }
 exports.accountPublicFromPublicGenerator = accountPublicFromPublicGenerator;
-//# sourceMappingURL=secp256k1.js.map
+//# sourceMappingURL=utils.js.map

package/dist/signing-schemes/secp256k1/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/signing-schemes/secp256k1/utils.ts"],"names":[],"mappings":";;;;;;AAAA,uDAAmD;AAEnD,gEAAuC;AAEvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;AAEtB,SAAS,YAAY,CAAC,KAAiB,EAAE,OAAgB;IACvD,MAAM,KAAK,GAAG,qBAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,UAAW,EAAE,CAAC,EAAE,EAAE;QACrC,2EAA2E;QAC3E,uCAAuC;QACvC,MAAM,MAAM,GAAG,IAAI,gBAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACtC,sEAAsE;QACtE,IAAI,OAAO,KAAK,SAAS,EAAE;YACzB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;SACvB;QACD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAChB,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,EAAE,CAAA;QACnC,0BAA0B;QAC1B,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,KAAK,EAAE;YAC7B,OAAO,GAAG,CAAA;SACX;KACF;IACD,iDAAiD;IACjD,8EAA8E;IAC9E,8EAA8E;IAC9E,yFAAyF;IACzF,8EAA8E;IAC9E,oEAAoE;IACpE,mHAAmH;IACnH,EAAE;IACF,0BAA0B;IAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAC9B,IAAgB,EAChB,OAGI,EAAE;IAEN,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAA;IAC3B,MAAM,KAAK,GAAG,qBAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IAE/B,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,IAAI,EAAE;QACR,oDAAoD;QACpD,OAAO,UAAU,CAAA;KAClB;IACD,MAAM,SAAS,GACb,qBAAS,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IACtE,4EAA4E;IAC5E,oDAAoD;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAA;IAC3C,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,UAAU,CAAC,GAAG,KAAK,CAAA;AACrE,CAAC;AAvBD,4CAuBC;AAED,SAAgB,gCAAgC,CAAC,cAA0B;IACzE,MAAM,YAAY,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,qBAAS,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACtC,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;AAChC,CAAC;AAND,4EAMC"}

package/dist/src/index.d.ts

@@ -0,0 +1,17 @@
+import { decodeSeed } from '@transia/ripple-address-codec';
+import type { Algorithm, HexString, KeyPair } from './types';
+declare function generateSeed(options?: {
+    entropy?: Uint8Array;
+    algorithm?: Algorithm;
+}): string;
+declare function deriveKeypair(seed: string, options?: {
+    algorithm?: Algorithm;
+    validator?: boolean;
+    accountIndex?: number;
+}): KeyPair;
+declare function sign(messageHex: HexString, privateKey: HexString): HexString;
+declare function verify(messageHex: HexString, signature: HexString, publicKey: HexString): boolean;
+declare function deriveAddress(publicKey: string): string;
+declare function deriveNodeAddress(publicKey: string): string;
+export { generateSeed, deriveKeypair, sign, verify, deriveAddress, deriveNodeAddress, decodeSeed, };
+//# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,UAAU,EAGX,MAAM,+BAA+B,CAAA;AAQtC,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAiB,MAAM,SAAS,CAAA;AAc3E,iBAAS,YAAY,CACnB,OAAO,GAAE;IACP,OAAO,CAAC,EAAE,UAAU,CAAA;IACpB,SAAS,CAAC,EAAE,SAAS,CAAA;CACjB,GACL,MAAM,CAUR;AAED,iBAAS,aAAa,CACpB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GACA,OAAO,CAcT;AAED,iBAAS,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,GAAG,SAAS,CAGrE;AAED,iBAAS,MAAM,CACb,UAAU,EAAE,SAAS,EACrB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,SAAS,GACnB,OAAO,CAOT;AAUD,iBAAS,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,iBAAS,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAIpD;AAED,OAAO,EACL,YAAY,EACZ,aAAa,EACb,IAAI,EACJ,MAAM,EACN,aAAa,EACb,iBAAiB,EACjB,UAAU,GACX,CAAA"}

package/dist/src/index.js

@@ -0,0 +1,73 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeSeed = exports.deriveNodeAddress = exports.deriveAddress = exports.verify = exports.sign = exports.deriveKeypair = exports.generateSeed = void 0;
+const ripple_address_codec_1 = require("@transia/ripple-address-codec");
+Object.defineProperty(exports, "decodeSeed", { enumerable: true, get: function () { return ripple_address_codec_1.decodeSeed; } });
+const ripemd160_1 = require("@transia/isomorphic/ripemd160");
+const sha256_1 = require("@transia/isomorphic/sha256");
+const utils_1 = require("@transia/isomorphic/utils");
+const utils_2 = require("./signing-schemes/secp256k1/utils");
+const Sha512_1 = __importDefault(require("./utils/Sha512"));
+const assert_1 = __importDefault(require("./utils/assert"));
+const getAlgorithmFromKey_1 = require("./utils/getAlgorithmFromKey");
+const secp256k1_1 = __importDefault(require("./signing-schemes/secp256k1"));
+const ed25519_1 = __importDefault(require("./signing-schemes/ed25519"));
+function getSigningScheme(algorithm) {
+    const schemes = { 'ecdsa-secp256k1': secp256k1_1.default, ed25519: ed25519_1.default };
+    return schemes[algorithm];
+}
+function generateSeed(options = {}) {
+    assert_1.default.ok(!options.entropy || options.entropy.length >= 16, 'entropy too short');
+    const entropy = options.entropy
+        ? options.entropy.slice(0, 16)
+        : (0, utils_1.randomBytes)(16);
+    const type = options.algorithm === 'ed25519' ? 'ed25519' : 'secp256k1';
+    return (0, ripple_address_codec_1.encodeSeed)(entropy, type);
+}
+exports.generateSeed = generateSeed;
+function deriveKeypair(seed, options) {
+    var _a;
+    const decoded = (0, ripple_address_codec_1.decodeSeed)(seed);
+    const proposedAlgorithm = (_a = options === null || options === void 0 ? void 0 : options.algorithm) !== null && _a !== void 0 ? _a : decoded.type;
+    const algorithm = proposedAlgorithm === 'ed25519' ? 'ed25519' : 'ecdsa-secp256k1';
+    const scheme = getSigningScheme(algorithm);
+    const keypair = scheme.deriveKeypair(decoded.bytes, options);
+    const messageToVerify = Sha512_1.default.half('This test message should verify.');
+    const signature = scheme.sign(messageToVerify, keypair.privateKey);
+    /* istanbul ignore if */
+    if (!scheme.verify(messageToVerify, signature, keypair.publicKey)) {
+        throw new Error('derived keypair did not generate verifiable signature');
+    }
+    return keypair;
+}
+exports.deriveKeypair = deriveKeypair;
+function sign(messageHex, privateKey) {
+    const algorithm = (0, getAlgorithmFromKey_1.getAlgorithmFromPrivateKey)(privateKey);
+    return getSigningScheme(algorithm).sign((0, utils_1.hexToBytes)(messageHex), privateKey);
+}
+exports.sign = sign;
+function verify(messageHex, signature, publicKey) {
+    const algorithm = (0, getAlgorithmFromKey_1.getAlgorithmFromPublicKey)(publicKey);
+    return getSigningScheme(algorithm).verify((0, utils_1.hexToBytes)(messageHex), signature, publicKey);
+}
+exports.verify = verify;
+function computePublicKeyHash(publicKeyBytes) {
+    return (0, ripemd160_1.ripemd160)((0, sha256_1.sha256)(publicKeyBytes));
+}
+function deriveAddressFromBytes(publicKeyBytes) {
+    return (0, ripple_address_codec_1.encodeAccountID)(computePublicKeyHash(publicKeyBytes));
+}
+function deriveAddress(publicKey) {
+    return deriveAddressFromBytes((0, utils_1.hexToBytes)(publicKey));
+}
+exports.deriveAddress = deriveAddress;
+function deriveNodeAddress(publicKey) {
+    const generatorBytes = (0, ripple_address_codec_1.decodeNodePublic)(publicKey);
+    const accountPublicBytes = (0, utils_2.accountPublicFromPublicGenerator)(generatorBytes);
+    return deriveAddressFromBytes(accountPublicBytes);
+}
+exports.deriveNodeAddress = deriveNodeAddress;
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;AAAA,wEAKsC;AAyGpC,2FA5GA,iCAAU,OA4GA;AAxGZ,6DAAyD;AACzD,uDAAmD;AACnD,qDAAmE;AAEnE,6DAAoF;AACpF,4DAAmC;AACnC,4DAAmC;AAEnC,qEAGoC;AAEpC,4EAAmD;AACnD,wEAA+C;AAE/C,SAAS,gBAAgB,CAAC,SAAoB;IAC5C,MAAM,OAAO,GAAG,EAAE,iBAAiB,EAAE,mBAAS,EAAE,OAAO,EAAP,iBAAO,EAAE,CAAA;IACzD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,YAAY,CACnB,UAGI,EAAE;IAEN,gBAAM,CAAC,EAAE,CACP,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,EAChD,mBAAmB,CACpB,CAAA;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;QAC7B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9B,CAAC,CAAC,IAAA,mBAAW,EAAC,EAAE,CAAC,CAAA;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAA;IACtE,OAAO,IAAA,iCAAU,EAAC,OAAO,EAAE,IAAI,CAAC,CAAA;AAClC,CAAC;AA8DC,oCAAY;AA5Dd,SAAS,aAAa,CACpB,IAAY,EACZ,OAIC;;IAED,MAAM,OAAO,GAAG,IAAA,iCAAU,EAAC,IAAI,CAAC,CAAA;IAChC,MAAM,iBAAiB,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,mCAAI,OAAO,CAAC,IAAI,CAAA;IAC5D,MAAM,SAAS,GACb,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAA;IACjE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC5D,MAAM,eAAe,GAAG,gBAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACvE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IAClE,wBAAwB;IACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE;QACjE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;KACzE;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAwCC,sCAAa;AAtCf,SAAS,IAAI,CAAC,UAAqB,EAAE,UAAqB;IACxD,MAAM,SAAS,GAAG,IAAA,gDAA0B,EAAC,UAAU,CAAC,CAAA;IACxD,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAA,kBAAU,EAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;AAC7E,CAAC;AAoCC,oBAAI;AAlCN,SAAS,MAAM,CACb,UAAqB,EACrB,SAAoB,EACpB,SAAoB;IAEpB,MAAM,SAAS,GAAG,IAAA,+CAAyB,EAAC,SAAS,CAAC,CAAA;IACtD,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC,MAAM,CACvC,IAAA,kBAAU,EAAC,UAAU,CAAC,EACtB,SAAS,EACT,SAAS,CACV,CAAA;AACH,CAAC;AAwBC,wBAAM;AAtBR,SAAS,oBAAoB,CAAC,cAA0B;IACtD,OAAO,IAAA,qBAAS,EAAC,IAAA,eAAM,EAAC,cAAc,CAAC,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,sBAAsB,CAAC,cAA0B;IACxD,OAAO,IAAA,sCAAe,EAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,sBAAsB,CAAC,IAAA,kBAAU,EAAC,SAAS,CAAC,CAAC,CAAA;AACtD,CAAC;AAaC,sCAAa;AAXf,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,cAAc,GAAG,IAAA,uCAAgB,EAAC,SAAS,CAAC,CAAA;IAClD,MAAM,kBAAkB,GAAG,IAAA,wCAAgC,EAAC,cAAc,CAAC,CAAA;IAC3E,OAAO,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;AACnD,CAAC;AAQC,8CAAiB"}

package/dist/src/signing-schemes/ed25519/index.d.ts

@@ -0,0 +1,4 @@
+import type { SigningScheme } from '../../types';
+declare const ed25519: SigningScheme;
+export default ed25519;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/signing-schemes/ed25519/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/signing-schemes/ed25519/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAa,aAAa,EAAE,MAAM,aAAa,CAAA;AAM3D,QAAA,MAAM,OAAO,EAAE,aA4Cd,CAAA;AAED,eAAe,OAAO,CAAA"}