@waku/rln 0.1.5-76f86de.0 → 0.1.5-cad3e7a.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bundle/index.js +2 -0
- package/bundle/packages/rln/dist/contract/constants.js +1 -1
- package/bundle/packages/rln/dist/contract/rln_contract.js +8 -8
- package/bundle/packages/rln/dist/contract/rln_light_contract.js +477 -0
- package/bundle/packages/rln/dist/identity.js +9 -0
- package/bundle/packages/rln/dist/keystore/keystore.js +15 -25
- package/bundle/packages/rln/dist/rln.js +5 -5
- package/bundle/packages/rln/dist/rln_light.js +149 -0
- package/bundle/packages/rln/node_modules/@noble/hashes/esm/_assert.js +43 -0
- package/bundle/packages/rln/node_modules/@noble/hashes/esm/_sha2.js +116 -0
- package/bundle/packages/rln/node_modules/@noble/hashes/esm/hmac.js +79 -0
- package/bundle/packages/rln/node_modules/@noble/hashes/esm/sha256.js +126 -0
- package/bundle/packages/rln/node_modules/@noble/hashes/esm/utils.js +43 -0
- package/dist/.tsbuildinfo +1 -1
- package/dist/contract/constants.d.ts +1 -1
- package/dist/contract/constants.js +1 -1
- package/dist/contract/constants.js.map +1 -1
- package/dist/contract/rln_contract.js +8 -8
- package/dist/contract/rln_contract.js.map +1 -1
- package/dist/contract/rln_light_contract.d.ts +124 -0
- package/dist/contract/rln_light_contract.js +460 -0
- package/dist/contract/rln_light_contract.js.map +1 -0
- package/dist/contract/test-utils.js +1 -1
- package/dist/contract/test-utils.js.map +1 -1
- package/dist/identity.d.ts +1 -0
- package/dist/identity.js +9 -0
- package/dist/identity.js.map +1 -1
- package/dist/index.d.ts +3 -1
- package/dist/index.js +3 -1
- package/dist/index.js.map +1 -1
- package/dist/keystore/keystore.d.ts +0 -1
- package/dist/keystore/keystore.js +15 -25
- package/dist/keystore/keystore.js.map +1 -1
- package/dist/keystore/types.d.ts +2 -2
- package/dist/rln.js +5 -5
- package/dist/rln.js.map +1 -1
- package/dist/rln_light.d.ts +64 -0
- package/dist/rln_light.js +144 -0
- package/dist/rln_light.js.map +1 -0
- package/package.json +1 -1
- package/src/contract/constants.ts +1 -1
- package/src/contract/rln_contract.ts +8 -8
- package/src/contract/rln_light_contract.ts +725 -0
- package/src/contract/test-utils.ts +1 -1
- package/src/identity.ts +10 -0
- package/src/index.ts +4 -0
- package/src/keystore/keystore.ts +27 -43
- package/src/keystore/types.ts +2 -2
- package/src/rln.ts +5 -5
- package/src/rln_light.ts +235 -0
@@ -106,7 +106,7 @@ class RLNInstance {
|
|
106
106
|
this.starting = true;
|
107
107
|
try {
|
108
108
|
const { credentials, keystore } = await RLNInstance.decryptCredentialsIfNeeded(options.credentials);
|
109
|
-
const { signer, address } = await this.determineStartOptions(options, credentials);
|
109
|
+
const { signer, address, rateLimit } = await this.determineStartOptions(options, credentials);
|
110
110
|
if (keystore) {
|
111
111
|
this.keystore = keystore;
|
112
112
|
}
|
@@ -115,7 +115,7 @@ class RLNInstance {
|
|
115
115
|
this._contract = await RLNContract.init(this, {
|
116
116
|
address: address,
|
117
117
|
signer: signer,
|
118
|
-
rateLimit:
|
118
|
+
rateLimit: rateLimit ?? this.zerokit.getRateLimit
|
119
119
|
});
|
120
120
|
this.started = true;
|
121
121
|
}
|
@@ -132,7 +132,7 @@ class RLNInstance {
|
|
132
132
|
chainId = LINEA_CONTRACT.chainId;
|
133
133
|
}
|
134
134
|
const signer = options.signer || (await extractMetaMaskSigner());
|
135
|
-
const currentChainId = await signer.getChainId();
|
135
|
+
const currentChainId = (await signer.getChainId()).toString();
|
136
136
|
if (chainId && chainId !== currentChainId) {
|
137
137
|
throw Error(`Failed to start RLN contract, chain ID of contract is different from current one: contract-${chainId}, current network-${currentChainId}`);
|
138
138
|
}
|
@@ -189,7 +189,7 @@ class RLNInstance {
|
|
189
189
|
return createRLNEncoder({
|
190
190
|
encoder: createEncoder(options),
|
191
191
|
rlnInstance: this,
|
192
|
-
index: credentials.membership.treeIndex,
|
192
|
+
index: parseInt(credentials.membership.treeIndex),
|
193
193
|
credential: credentials.identity
|
194
194
|
});
|
195
195
|
}
|
@@ -204,7 +204,7 @@ class RLNInstance {
|
|
204
204
|
}
|
205
205
|
const chainId = credentials.membership.chainId;
|
206
206
|
const network = await this._contract.provider.getNetwork();
|
207
|
-
const currentChainId = network.chainId;
|
207
|
+
const currentChainId = network.chainId.toString();
|
208
208
|
if (chainId !== currentChainId) {
|
209
209
|
throw Error(`Failed to verify chain coordinates: credentials chainID=${chainId} is not equal to registryContract chainID=${currentChainId}`);
|
210
210
|
}
|
@@ -0,0 +1,149 @@
|
|
1
|
+
import { hmac } from '../node_modules/@noble/hashes/esm/hmac.js';
|
2
|
+
import { sha256 } from '../node_modules/@noble/hashes/esm/sha256.js';
|
3
|
+
import '../../interfaces/dist/protocols.js';
|
4
|
+
import '../../interfaces/dist/connection_manager.js';
|
5
|
+
import '../../interfaces/dist/health_indicator.js';
|
6
|
+
import '../../../node_modules/multiformats/dist/src/bases/base10.js';
|
7
|
+
import '../../../node_modules/multiformats/dist/src/bases/base16.js';
|
8
|
+
import '../../../node_modules/multiformats/dist/src/bases/base2.js';
|
9
|
+
import '../../../node_modules/multiformats/dist/src/bases/base256emoji.js';
|
10
|
+
import '../../../node_modules/multiformats/dist/src/bases/base32.js';
|
11
|
+
import '../../../node_modules/multiformats/dist/src/bases/base36.js';
|
12
|
+
import '../../../node_modules/multiformats/dist/src/bases/base58.js';
|
13
|
+
import '../../../node_modules/multiformats/dist/src/bases/base64.js';
|
14
|
+
import '../../../node_modules/multiformats/dist/src/bases/base8.js';
|
15
|
+
import '../../../node_modules/multiformats/dist/src/bases/identity.js';
|
16
|
+
import '../../../node_modules/multiformats/dist/src/codecs/json.js';
|
17
|
+
import { Logger } from '../../utils/dist/logger/index.js';
|
18
|
+
import { LINEA_CONTRACT } from './contract/constants.js';
|
19
|
+
import { RLNLightContract } from './contract/rln_light_contract.js';
|
20
|
+
import { IdentityCredential } from './identity.js';
|
21
|
+
import { Keystore } from './keystore/keystore.js';
|
22
|
+
import { extractMetaMaskSigner } from './utils/metamask.js';
|
23
|
+
import { buildBigIntFromUint8Array } from './utils/bytes.js';
|
24
|
+
import './utils/epoch.js';
|
25
|
+
|
26
|
+
new Logger("waku:rln");
|
27
|
+
class RLNLightInstance {
|
28
|
+
started = false;
|
29
|
+
starting = false;
|
30
|
+
_contract;
|
31
|
+
_signer;
|
32
|
+
keystore = Keystore.create();
|
33
|
+
_credentials;
|
34
|
+
constructor() { }
|
35
|
+
get contract() {
|
36
|
+
return this._contract;
|
37
|
+
}
|
38
|
+
get signer() {
|
39
|
+
return this._signer;
|
40
|
+
}
|
41
|
+
async start(options = {}) {
|
42
|
+
if (this.started || this.starting) {
|
43
|
+
return;
|
44
|
+
}
|
45
|
+
this.starting = true;
|
46
|
+
try {
|
47
|
+
const { credentials, keystore } = await RLNLightInstance.decryptCredentialsIfNeeded(options.credentials);
|
48
|
+
const { signer, address, rateLimit } = await this.determineStartOptions(options, credentials);
|
49
|
+
if (keystore) {
|
50
|
+
this.keystore = keystore;
|
51
|
+
}
|
52
|
+
this._credentials = credentials;
|
53
|
+
this._signer = signer;
|
54
|
+
this._contract = await RLNLightContract.init({
|
55
|
+
address: address,
|
56
|
+
signer: signer,
|
57
|
+
rateLimit: rateLimit
|
58
|
+
});
|
59
|
+
this.started = true;
|
60
|
+
}
|
61
|
+
finally {
|
62
|
+
this.starting = false;
|
63
|
+
}
|
64
|
+
}
|
65
|
+
get credentials() {
|
66
|
+
return this._credentials;
|
67
|
+
}
|
68
|
+
async determineStartOptions(options, credentials) {
|
69
|
+
let chainId = credentials?.membership.chainId;
|
70
|
+
const address = credentials?.membership.address ||
|
71
|
+
options.address ||
|
72
|
+
LINEA_CONTRACT.address;
|
73
|
+
if (address === LINEA_CONTRACT.address) {
|
74
|
+
chainId = LINEA_CONTRACT.chainId;
|
75
|
+
}
|
76
|
+
const signer = options.signer || (await extractMetaMaskSigner());
|
77
|
+
const currentChainId = (await signer.getChainId()).toString();
|
78
|
+
if (chainId && chainId !== currentChainId) {
|
79
|
+
throw Error(`Failed to start RLN contract, chain ID of contract is different from current one: contract-${chainId}, current network-${currentChainId}`);
|
80
|
+
}
|
81
|
+
return {
|
82
|
+
signer,
|
83
|
+
address
|
84
|
+
};
|
85
|
+
}
|
86
|
+
static async decryptCredentialsIfNeeded(credentials) {
|
87
|
+
if (!credentials) {
|
88
|
+
return {};
|
89
|
+
}
|
90
|
+
if ("identity" in credentials) {
|
91
|
+
return { credentials };
|
92
|
+
}
|
93
|
+
const keystore = Keystore.fromString(credentials.keystore);
|
94
|
+
if (!keystore) {
|
95
|
+
return {};
|
96
|
+
}
|
97
|
+
const decryptedCredentials = await keystore.readCredential(credentials.id, credentials.password);
|
98
|
+
return {
|
99
|
+
keystore,
|
100
|
+
credentials: decryptedCredentials
|
101
|
+
};
|
102
|
+
}
|
103
|
+
/**
|
104
|
+
* Generates an identity credential from a seed string
|
105
|
+
* This is a pure implementation that doesn't rely on Zerokit
|
106
|
+
* @param seed A string seed to generate the identity from
|
107
|
+
* @returns IdentityCredential
|
108
|
+
*/
|
109
|
+
generateSeededIdentityCredential(seed) {
|
110
|
+
// Convert the seed to bytes
|
111
|
+
const encoder = new TextEncoder();
|
112
|
+
const seedBytes = encoder.encode(seed);
|
113
|
+
// Generate deterministic values using HMAC-SHA256
|
114
|
+
// We use different context strings for each component to ensure they're different
|
115
|
+
const idTrapdoor = hmac(sha256, seedBytes, encoder.encode("IDTrapdoor"));
|
116
|
+
const idNullifier = hmac(sha256, seedBytes, encoder.encode("IDNullifier"));
|
117
|
+
// Generate IDSecretHash as a hash of IDTrapdoor and IDNullifier
|
118
|
+
const combinedBytes = new Uint8Array([...idTrapdoor, ...idNullifier]);
|
119
|
+
const idSecretHash = sha256(combinedBytes);
|
120
|
+
// Generate IDCommitment as a hash of IDSecretHash
|
121
|
+
const idCommitment = sha256(idSecretHash);
|
122
|
+
// Convert IDCommitment to BigInt
|
123
|
+
const idCommitmentBigInt = buildBigIntFromUint8Array(idCommitment);
|
124
|
+
return new IdentityCredential(idTrapdoor, idNullifier, idSecretHash, idCommitment, idCommitmentBigInt);
|
125
|
+
}
|
126
|
+
async registerMembership(options) {
|
127
|
+
if (!this.contract) {
|
128
|
+
throw Error("RLN Contract is not initialized.");
|
129
|
+
}
|
130
|
+
let identity = "identity" in options && options.identity;
|
131
|
+
if ("signature" in options) {
|
132
|
+
identity = this.generateSeededIdentityCredential(options.signature);
|
133
|
+
}
|
134
|
+
if (!identity) {
|
135
|
+
throw Error("Missing signature or identity to register membership.");
|
136
|
+
}
|
137
|
+
return this.contract.registerWithIdentity(identity);
|
138
|
+
}
|
139
|
+
/**
|
140
|
+
* Changes credentials in use by relying on provided Keystore earlier in rln.start
|
141
|
+
* @param id: string, hash of credentials to select from Keystore
|
142
|
+
* @param password: string or bytes to use to decrypt credentials from Keystore
|
143
|
+
*/
|
144
|
+
async useCredentials(id, password) {
|
145
|
+
this._credentials = await this.keystore?.readCredential(id, password);
|
146
|
+
}
|
147
|
+
}
|
148
|
+
|
149
|
+
export { RLNLightInstance };
|
@@ -0,0 +1,43 @@
|
|
1
|
+
function number(n) {
|
2
|
+
if (!Number.isSafeInteger(n) || n < 0)
|
3
|
+
throw new Error(`Wrong positive integer: ${n}`);
|
4
|
+
}
|
5
|
+
function bool(b) {
|
6
|
+
if (typeof b !== 'boolean')
|
7
|
+
throw new Error(`Expected boolean, not ${b}`);
|
8
|
+
}
|
9
|
+
function bytes(b, ...lengths) {
|
10
|
+
if (!(b instanceof Uint8Array))
|
11
|
+
throw new TypeError('Expected Uint8Array');
|
12
|
+
if (lengths.length > 0 && !lengths.includes(b.length))
|
13
|
+
throw new TypeError(`Expected Uint8Array of length ${lengths}, not of length=${b.length}`);
|
14
|
+
}
|
15
|
+
function hash(hash) {
|
16
|
+
if (typeof hash !== 'function' || typeof hash.create !== 'function')
|
17
|
+
throw new Error('Hash should be wrapped by utils.wrapConstructor');
|
18
|
+
number(hash.outputLen);
|
19
|
+
number(hash.blockLen);
|
20
|
+
}
|
21
|
+
function exists(instance, checkFinished = true) {
|
22
|
+
if (instance.destroyed)
|
23
|
+
throw new Error('Hash instance has been destroyed');
|
24
|
+
if (checkFinished && instance.finished)
|
25
|
+
throw new Error('Hash#digest() has already been called');
|
26
|
+
}
|
27
|
+
function output(out, instance) {
|
28
|
+
bytes(out);
|
29
|
+
const min = instance.outputLen;
|
30
|
+
if (out.length < min) {
|
31
|
+
throw new Error(`digestInto() expects output buffer of length at least ${min}`);
|
32
|
+
}
|
33
|
+
}
|
34
|
+
const assert = {
|
35
|
+
number,
|
36
|
+
bool,
|
37
|
+
bytes,
|
38
|
+
hash,
|
39
|
+
exists,
|
40
|
+
output,
|
41
|
+
};
|
42
|
+
|
43
|
+
export { bool, bytes, assert as default, exists, hash, number, output };
|
@@ -0,0 +1,116 @@
|
|
1
|
+
import assert from './_assert.js';
|
2
|
+
import { Hash, createView, toBytes } from './utils.js';
|
3
|
+
|
4
|
+
// Polyfill for Safari 14
|
5
|
+
function setBigUint64(view, byteOffset, value, isLE) {
|
6
|
+
if (typeof view.setBigUint64 === 'function')
|
7
|
+
return view.setBigUint64(byteOffset, value, isLE);
|
8
|
+
const _32n = BigInt(32);
|
9
|
+
const _u32_max = BigInt(0xffffffff);
|
10
|
+
const wh = Number((value >> _32n) & _u32_max);
|
11
|
+
const wl = Number(value & _u32_max);
|
12
|
+
const h = isLE ? 4 : 0;
|
13
|
+
const l = isLE ? 0 : 4;
|
14
|
+
view.setUint32(byteOffset + h, wh, isLE);
|
15
|
+
view.setUint32(byteOffset + l, wl, isLE);
|
16
|
+
}
|
17
|
+
// Base SHA2 class (RFC 6234)
|
18
|
+
class SHA2 extends Hash {
|
19
|
+
constructor(blockLen, outputLen, padOffset, isLE) {
|
20
|
+
super();
|
21
|
+
this.blockLen = blockLen;
|
22
|
+
this.outputLen = outputLen;
|
23
|
+
this.padOffset = padOffset;
|
24
|
+
this.isLE = isLE;
|
25
|
+
this.finished = false;
|
26
|
+
this.length = 0;
|
27
|
+
this.pos = 0;
|
28
|
+
this.destroyed = false;
|
29
|
+
this.buffer = new Uint8Array(blockLen);
|
30
|
+
this.view = createView(this.buffer);
|
31
|
+
}
|
32
|
+
update(data) {
|
33
|
+
assert.exists(this);
|
34
|
+
const { view, buffer, blockLen } = this;
|
35
|
+
data = toBytes(data);
|
36
|
+
const len = data.length;
|
37
|
+
for (let pos = 0; pos < len;) {
|
38
|
+
const take = Math.min(blockLen - this.pos, len - pos);
|
39
|
+
// Fast path: we have at least one block in input, cast it to view and process
|
40
|
+
if (take === blockLen) {
|
41
|
+
const dataView = createView(data);
|
42
|
+
for (; blockLen <= len - pos; pos += blockLen)
|
43
|
+
this.process(dataView, pos);
|
44
|
+
continue;
|
45
|
+
}
|
46
|
+
buffer.set(data.subarray(pos, pos + take), this.pos);
|
47
|
+
this.pos += take;
|
48
|
+
pos += take;
|
49
|
+
if (this.pos === blockLen) {
|
50
|
+
this.process(view, 0);
|
51
|
+
this.pos = 0;
|
52
|
+
}
|
53
|
+
}
|
54
|
+
this.length += data.length;
|
55
|
+
this.roundClean();
|
56
|
+
return this;
|
57
|
+
}
|
58
|
+
digestInto(out) {
|
59
|
+
assert.exists(this);
|
60
|
+
assert.output(out, this);
|
61
|
+
this.finished = true;
|
62
|
+
// Padding
|
63
|
+
// We can avoid allocation of buffer for padding completely if it
|
64
|
+
// was previously not allocated here. But it won't change performance.
|
65
|
+
const { buffer, view, blockLen, isLE } = this;
|
66
|
+
let { pos } = this;
|
67
|
+
// append the bit '1' to the message
|
68
|
+
buffer[pos++] = 0b10000000;
|
69
|
+
this.buffer.subarray(pos).fill(0);
|
70
|
+
// we have less than padOffset left in buffer, so we cannot put length in current block, need process it and pad again
|
71
|
+
if (this.padOffset > blockLen - pos) {
|
72
|
+
this.process(view, 0);
|
73
|
+
pos = 0;
|
74
|
+
}
|
75
|
+
// Pad until full block byte with zeros
|
76
|
+
for (let i = pos; i < blockLen; i++)
|
77
|
+
buffer[i] = 0;
|
78
|
+
// Note: sha512 requires length to be 128bit integer, but length in JS will overflow before that
|
79
|
+
// You need to write around 2 exabytes (u64_max / 8 / (1024**6)) for this to happen.
|
80
|
+
// So we just write lowest 64 bits of that value.
|
81
|
+
setBigUint64(view, blockLen - 8, BigInt(this.length * 8), isLE);
|
82
|
+
this.process(view, 0);
|
83
|
+
const oview = createView(out);
|
84
|
+
const len = this.outputLen;
|
85
|
+
// NOTE: we do division by 4 later, which should be fused in single op with modulo by JIT
|
86
|
+
if (len % 4)
|
87
|
+
throw new Error('_sha2: outputLen should be aligned to 32bit');
|
88
|
+
const outLen = len / 4;
|
89
|
+
const state = this.get();
|
90
|
+
if (outLen > state.length)
|
91
|
+
throw new Error('_sha2: outputLen bigger than state');
|
92
|
+
for (let i = 0; i < outLen; i++)
|
93
|
+
oview.setUint32(4 * i, state[i], isLE);
|
94
|
+
}
|
95
|
+
digest() {
|
96
|
+
const { buffer, outputLen } = this;
|
97
|
+
this.digestInto(buffer);
|
98
|
+
const res = buffer.slice(0, outputLen);
|
99
|
+
this.destroy();
|
100
|
+
return res;
|
101
|
+
}
|
102
|
+
_cloneInto(to) {
|
103
|
+
to || (to = new this.constructor());
|
104
|
+
to.set(...this.get());
|
105
|
+
const { blockLen, buffer, length, finished, destroyed, pos } = this;
|
106
|
+
to.length = length;
|
107
|
+
to.pos = pos;
|
108
|
+
to.finished = finished;
|
109
|
+
to.destroyed = destroyed;
|
110
|
+
if (length % blockLen)
|
111
|
+
to.buffer.set(buffer);
|
112
|
+
return to;
|
113
|
+
}
|
114
|
+
}
|
115
|
+
|
116
|
+
export { SHA2 };
|
@@ -0,0 +1,79 @@
|
|
1
|
+
import assert from './_assert.js';
|
2
|
+
import { Hash, toBytes } from './utils.js';
|
3
|
+
|
4
|
+
// HMAC (RFC 2104)
|
5
|
+
class HMAC extends Hash {
|
6
|
+
constructor(hash, _key) {
|
7
|
+
super();
|
8
|
+
this.finished = false;
|
9
|
+
this.destroyed = false;
|
10
|
+
assert.hash(hash);
|
11
|
+
const key = toBytes(_key);
|
12
|
+
this.iHash = hash.create();
|
13
|
+
if (typeof this.iHash.update !== 'function')
|
14
|
+
throw new TypeError('Expected instance of class which extends utils.Hash');
|
15
|
+
this.blockLen = this.iHash.blockLen;
|
16
|
+
this.outputLen = this.iHash.outputLen;
|
17
|
+
const blockLen = this.blockLen;
|
18
|
+
const pad = new Uint8Array(blockLen);
|
19
|
+
// blockLen can be bigger than outputLen
|
20
|
+
pad.set(key.length > blockLen ? hash.create().update(key).digest() : key);
|
21
|
+
for (let i = 0; i < pad.length; i++)
|
22
|
+
pad[i] ^= 0x36;
|
23
|
+
this.iHash.update(pad);
|
24
|
+
// By doing update (processing of first block) of outer hash here we can re-use it between multiple calls via clone
|
25
|
+
this.oHash = hash.create();
|
26
|
+
// Undo internal XOR && apply outer XOR
|
27
|
+
for (let i = 0; i < pad.length; i++)
|
28
|
+
pad[i] ^= 0x36 ^ 0x5c;
|
29
|
+
this.oHash.update(pad);
|
30
|
+
pad.fill(0);
|
31
|
+
}
|
32
|
+
update(buf) {
|
33
|
+
assert.exists(this);
|
34
|
+
this.iHash.update(buf);
|
35
|
+
return this;
|
36
|
+
}
|
37
|
+
digestInto(out) {
|
38
|
+
assert.exists(this);
|
39
|
+
assert.bytes(out, this.outputLen);
|
40
|
+
this.finished = true;
|
41
|
+
this.iHash.digestInto(out);
|
42
|
+
this.oHash.update(out);
|
43
|
+
this.oHash.digestInto(out);
|
44
|
+
this.destroy();
|
45
|
+
}
|
46
|
+
digest() {
|
47
|
+
const out = new Uint8Array(this.oHash.outputLen);
|
48
|
+
this.digestInto(out);
|
49
|
+
return out;
|
50
|
+
}
|
51
|
+
_cloneInto(to) {
|
52
|
+
// Create new instance without calling constructor since key already in state and we don't know it.
|
53
|
+
to || (to = Object.create(Object.getPrototypeOf(this), {}));
|
54
|
+
const { oHash, iHash, finished, destroyed, blockLen, outputLen } = this;
|
55
|
+
to = to;
|
56
|
+
to.finished = finished;
|
57
|
+
to.destroyed = destroyed;
|
58
|
+
to.blockLen = blockLen;
|
59
|
+
to.outputLen = outputLen;
|
60
|
+
to.oHash = oHash._cloneInto(to.oHash);
|
61
|
+
to.iHash = iHash._cloneInto(to.iHash);
|
62
|
+
return to;
|
63
|
+
}
|
64
|
+
destroy() {
|
65
|
+
this.destroyed = true;
|
66
|
+
this.oHash.destroy();
|
67
|
+
this.iHash.destroy();
|
68
|
+
}
|
69
|
+
}
|
70
|
+
/**
|
71
|
+
* HMAC: RFC2104 message authentication code.
|
72
|
+
* @param hash - function that would be used e.g. sha256
|
73
|
+
* @param key - message key
|
74
|
+
* @param message - message data
|
75
|
+
*/
|
76
|
+
const hmac = (hash, key, message) => new HMAC(hash, key).update(message).digest();
|
77
|
+
hmac.create = (hash, key) => new HMAC(hash, key);
|
78
|
+
|
79
|
+
export { hmac };
|
@@ -0,0 +1,126 @@
|
|
1
|
+
import { SHA2 } from './_sha2.js';
|
2
|
+
import { wrapConstructor, rotr } from './utils.js';
|
3
|
+
|
4
|
+
// Choice: a ? b : c
|
5
|
+
const Chi = (a, b, c) => (a & b) ^ (~a & c);
|
6
|
+
// Majority function, true if any two inpust is true
|
7
|
+
const Maj = (a, b, c) => (a & b) ^ (a & c) ^ (b & c);
|
8
|
+
// Round constants:
|
9
|
+
// first 32 bits of the fractional parts of the cube roots of the first 64 primes 2..311)
|
10
|
+
// prettier-ignore
|
11
|
+
const SHA256_K = new Uint32Array([
|
12
|
+
0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
|
13
|
+
0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
|
14
|
+
0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
|
15
|
+
0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
|
16
|
+
0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
|
17
|
+
0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
|
18
|
+
0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
|
19
|
+
0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
|
20
|
+
]);
|
21
|
+
// Initial state (first 32 bits of the fractional parts of the square roots of the first 8 primes 2..19):
|
22
|
+
// prettier-ignore
|
23
|
+
const IV = new Uint32Array([
|
24
|
+
0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19
|
25
|
+
]);
|
26
|
+
// Temporary buffer, not used to store anything between runs
|
27
|
+
// Named this way because it matches specification.
|
28
|
+
const SHA256_W = new Uint32Array(64);
|
29
|
+
class SHA256 extends SHA2 {
|
30
|
+
constructor() {
|
31
|
+
super(64, 32, 8, false);
|
32
|
+
// We cannot use array here since array allows indexing by variable
|
33
|
+
// which means optimizer/compiler cannot use registers.
|
34
|
+
this.A = IV[0] | 0;
|
35
|
+
this.B = IV[1] | 0;
|
36
|
+
this.C = IV[2] | 0;
|
37
|
+
this.D = IV[3] | 0;
|
38
|
+
this.E = IV[4] | 0;
|
39
|
+
this.F = IV[5] | 0;
|
40
|
+
this.G = IV[6] | 0;
|
41
|
+
this.H = IV[7] | 0;
|
42
|
+
}
|
43
|
+
get() {
|
44
|
+
const { A, B, C, D, E, F, G, H } = this;
|
45
|
+
return [A, B, C, D, E, F, G, H];
|
46
|
+
}
|
47
|
+
// prettier-ignore
|
48
|
+
set(A, B, C, D, E, F, G, H) {
|
49
|
+
this.A = A | 0;
|
50
|
+
this.B = B | 0;
|
51
|
+
this.C = C | 0;
|
52
|
+
this.D = D | 0;
|
53
|
+
this.E = E | 0;
|
54
|
+
this.F = F | 0;
|
55
|
+
this.G = G | 0;
|
56
|
+
this.H = H | 0;
|
57
|
+
}
|
58
|
+
process(view, offset) {
|
59
|
+
// Extend the first 16 words into the remaining 48 words w[16..63] of the message schedule array
|
60
|
+
for (let i = 0; i < 16; i++, offset += 4)
|
61
|
+
SHA256_W[i] = view.getUint32(offset, false);
|
62
|
+
for (let i = 16; i < 64; i++) {
|
63
|
+
const W15 = SHA256_W[i - 15];
|
64
|
+
const W2 = SHA256_W[i - 2];
|
65
|
+
const s0 = rotr(W15, 7) ^ rotr(W15, 18) ^ (W15 >>> 3);
|
66
|
+
const s1 = rotr(W2, 17) ^ rotr(W2, 19) ^ (W2 >>> 10);
|
67
|
+
SHA256_W[i] = (s1 + SHA256_W[i - 7] + s0 + SHA256_W[i - 16]) | 0;
|
68
|
+
}
|
69
|
+
// Compression function main loop, 64 rounds
|
70
|
+
let { A, B, C, D, E, F, G, H } = this;
|
71
|
+
for (let i = 0; i < 64; i++) {
|
72
|
+
const sigma1 = rotr(E, 6) ^ rotr(E, 11) ^ rotr(E, 25);
|
73
|
+
const T1 = (H + sigma1 + Chi(E, F, G) + SHA256_K[i] + SHA256_W[i]) | 0;
|
74
|
+
const sigma0 = rotr(A, 2) ^ rotr(A, 13) ^ rotr(A, 22);
|
75
|
+
const T2 = (sigma0 + Maj(A, B, C)) | 0;
|
76
|
+
H = G;
|
77
|
+
G = F;
|
78
|
+
F = E;
|
79
|
+
E = (D + T1) | 0;
|
80
|
+
D = C;
|
81
|
+
C = B;
|
82
|
+
B = A;
|
83
|
+
A = (T1 + T2) | 0;
|
84
|
+
}
|
85
|
+
// Add the compressed chunk to the current hash value
|
86
|
+
A = (A + this.A) | 0;
|
87
|
+
B = (B + this.B) | 0;
|
88
|
+
C = (C + this.C) | 0;
|
89
|
+
D = (D + this.D) | 0;
|
90
|
+
E = (E + this.E) | 0;
|
91
|
+
F = (F + this.F) | 0;
|
92
|
+
G = (G + this.G) | 0;
|
93
|
+
H = (H + this.H) | 0;
|
94
|
+
this.set(A, B, C, D, E, F, G, H);
|
95
|
+
}
|
96
|
+
roundClean() {
|
97
|
+
SHA256_W.fill(0);
|
98
|
+
}
|
99
|
+
destroy() {
|
100
|
+
this.set(0, 0, 0, 0, 0, 0, 0, 0);
|
101
|
+
this.buffer.fill(0);
|
102
|
+
}
|
103
|
+
}
|
104
|
+
// Constants from https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf
|
105
|
+
class SHA224 extends SHA256 {
|
106
|
+
constructor() {
|
107
|
+
super();
|
108
|
+
this.A = 0xc1059ed8 | 0;
|
109
|
+
this.B = 0x367cd507 | 0;
|
110
|
+
this.C = 0x3070dd17 | 0;
|
111
|
+
this.D = 0xf70e5939 | 0;
|
112
|
+
this.E = 0xffc00b31 | 0;
|
113
|
+
this.F = 0x68581511 | 0;
|
114
|
+
this.G = 0x64f98fa7 | 0;
|
115
|
+
this.H = 0xbefa4fa4 | 0;
|
116
|
+
this.outputLen = 28;
|
117
|
+
}
|
118
|
+
}
|
119
|
+
/**
|
120
|
+
* SHA2-256 hash function
|
121
|
+
* @param message - data that would be hashed
|
122
|
+
*/
|
123
|
+
const sha256 = wrapConstructor(() => new SHA256());
|
124
|
+
wrapConstructor(() => new SHA224());
|
125
|
+
|
126
|
+
export { sha256 };
|
@@ -0,0 +1,43 @@
|
|
1
|
+
/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */
|
2
|
+
// The import here is via the package name. This is to ensure
|
3
|
+
// that exports mapping/resolution does fall into place.
|
4
|
+
// Cast array to view
|
5
|
+
const createView = (arr) => new DataView(arr.buffer, arr.byteOffset, arr.byteLength);
|
6
|
+
// The rotate right (circular right shift) operation for uint32
|
7
|
+
const rotr = (word, shift) => (word << (32 - shift)) | (word >>> shift);
|
8
|
+
const isLE = new Uint8Array(new Uint32Array([0x11223344]).buffer)[0] === 0x44;
|
9
|
+
// There is almost no big endian hardware, but js typed arrays uses platform specific endianness.
|
10
|
+
// So, just to be sure not to corrupt anything.
|
11
|
+
if (!isLE)
|
12
|
+
throw new Error('Non little-endian hardware is not supported');
|
13
|
+
Array.from({ length: 256 }, (v, i) => i.toString(16).padStart(2, '0'));
|
14
|
+
function utf8ToBytes(str) {
|
15
|
+
if (typeof str !== 'string') {
|
16
|
+
throw new TypeError(`utf8ToBytes expected string, got ${typeof str}`);
|
17
|
+
}
|
18
|
+
return new TextEncoder().encode(str);
|
19
|
+
}
|
20
|
+
function toBytes(data) {
|
21
|
+
if (typeof data === 'string')
|
22
|
+
data = utf8ToBytes(data);
|
23
|
+
if (!(data instanceof Uint8Array))
|
24
|
+
throw new TypeError(`Expected input type is Uint8Array (got ${typeof data})`);
|
25
|
+
return data;
|
26
|
+
}
|
27
|
+
// For runtime check if class implements interface
|
28
|
+
class Hash {
|
29
|
+
// Safe version that clones internal state
|
30
|
+
clone() {
|
31
|
+
return this._cloneInto();
|
32
|
+
}
|
33
|
+
}
|
34
|
+
function wrapConstructor(hashConstructor) {
|
35
|
+
const hashC = (message) => hashConstructor().update(toBytes(message)).digest();
|
36
|
+
const tmp = hashConstructor();
|
37
|
+
hashC.outputLen = tmp.outputLen;
|
38
|
+
hashC.blockLen = tmp.blockLen;
|
39
|
+
hashC.create = () => hashConstructor();
|
40
|
+
return hashC;
|
41
|
+
}
|
42
|
+
|
43
|
+
export { Hash, createView, isLE, rotr, toBytes, utf8ToBytes, wrapConstructor };
|