@waku/rln 0.1.5-9901863.0 → 0.1.5-a8ff776.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (62) hide show
  1. package/bundle/index.js +0 -2
  2. package/bundle/packages/rln/dist/contract/constants.js +1 -1
  3. package/bundle/packages/rln/dist/contract/rln_contract.js +419 -9
  4. package/bundle/packages/rln/dist/create.js +1 -1
  5. package/bundle/packages/rln/dist/identity.js +0 -8
  6. package/bundle/packages/rln/dist/keystore/keystore.js +28 -19
  7. package/bundle/packages/rln/dist/rln.js +166 -56
  8. package/dist/.tsbuildinfo +1 -1
  9. package/dist/contract/constants.d.ts +1 -1
  10. package/dist/contract/constants.js +1 -1
  11. package/dist/contract/constants.js.map +1 -1
  12. package/dist/contract/rln_contract.d.ts +122 -5
  13. package/dist/contract/rln_contract.js +417 -8
  14. package/dist/contract/rln_contract.js.map +1 -1
  15. package/dist/create.js +1 -1
  16. package/dist/create.js.map +1 -1
  17. package/dist/identity.d.ts +0 -1
  18. package/dist/identity.js +0 -8
  19. package/dist/identity.js.map +1 -1
  20. package/dist/index.d.ts +1 -3
  21. package/dist/index.js +1 -3
  22. package/dist/index.js.map +1 -1
  23. package/dist/keystore/keystore.d.ts +1 -0
  24. package/dist/keystore/keystore.js +28 -19
  25. package/dist/keystore/keystore.js.map +1 -1
  26. package/dist/keystore/types.d.ts +1 -1
  27. package/dist/rln.d.ts +52 -9
  28. package/dist/rln.js +163 -54
  29. package/dist/rln.js.map +1 -1
  30. package/package.json +1 -1
  31. package/src/contract/constants.ts +1 -1
  32. package/src/contract/rln_contract.ts +663 -9
  33. package/src/create.ts +1 -1
  34. package/src/identity.ts +0 -9
  35. package/src/index.ts +0 -4
  36. package/src/keystore/keystore.ts +46 -31
  37. package/src/keystore/types.ts +1 -1
  38. package/src/rln.ts +259 -67
  39. package/bundle/packages/rln/dist/contract/rln_base_contract.js +0 -477
  40. package/bundle/packages/rln/dist/contract/types.js +0 -9
  41. package/bundle/packages/rln/dist/credentials_manager.js +0 -233
  42. package/bundle/packages/rln/node_modules/@noble/hashes/esm/_assert.js +0 -43
  43. package/bundle/packages/rln/node_modules/@noble/hashes/esm/_sha2.js +0 -116
  44. package/bundle/packages/rln/node_modules/@noble/hashes/esm/hmac.js +0 -79
  45. package/bundle/packages/rln/node_modules/@noble/hashes/esm/sha256.js +0 -126
  46. package/bundle/packages/rln/node_modules/@noble/hashes/esm/utils.js +0 -43
  47. package/dist/contract/rln_base_contract.d.ts +0 -96
  48. package/dist/contract/rln_base_contract.js +0 -460
  49. package/dist/contract/rln_base_contract.js.map +0 -1
  50. package/dist/contract/types.d.ts +0 -40
  51. package/dist/contract/types.js +0 -8
  52. package/dist/contract/types.js.map +0 -1
  53. package/dist/credentials_manager.d.ts +0 -50
  54. package/dist/credentials_manager.js +0 -215
  55. package/dist/credentials_manager.js.map +0 -1
  56. package/dist/types.d.ts +0 -27
  57. package/dist/types.js +0 -2
  58. package/dist/types.js.map +0 -1
  59. package/src/contract/rln_base_contract.ts +0 -707
  60. package/src/contract/types.ts +0 -48
  61. package/src/credentials_manager.ts +0 -306
  62. package/src/types.ts +0 -31
@@ -1,233 +0,0 @@
1
- import { hmac } from '../node_modules/@noble/hashes/esm/hmac.js';
2
- import { sha256 } from '../node_modules/@noble/hashes/esm/sha256.js';
3
- import '../../interfaces/dist/protocols.js';
4
- import '../../interfaces/dist/connection_manager.js';
5
- import '../../interfaces/dist/health_indicator.js';
6
- import '../../../node_modules/multiformats/dist/src/bases/base10.js';
7
- import '../../../node_modules/multiformats/dist/src/bases/base16.js';
8
- import '../../../node_modules/multiformats/dist/src/bases/base2.js';
9
- import '../../../node_modules/multiformats/dist/src/bases/base256emoji.js';
10
- import '../../../node_modules/multiformats/dist/src/bases/base32.js';
11
- import '../../../node_modules/multiformats/dist/src/bases/base36.js';
12
- import '../../../node_modules/multiformats/dist/src/bases/base58.js';
13
- import '../../../node_modules/multiformats/dist/src/bases/base64.js';
14
- import '../../../node_modules/multiformats/dist/src/bases/base8.js';
15
- import '../../../node_modules/multiformats/dist/src/bases/identity.js';
16
- import '../../../node_modules/multiformats/dist/src/codecs/json.js';
17
- import { Logger } from '../../utils/dist/logger/index.js';
18
- import { LINEA_CONTRACT } from './contract/constants.js';
19
- import { RLNBaseContract } from './contract/rln_base_contract.js';
20
- import { IdentityCredential } from './identity.js';
21
- import { Keystore } from './keystore/keystore.js';
22
- import { extractMetaMaskSigner } from './utils/metamask.js';
23
- import { buildBigIntFromUint8Array } from './utils/bytes.js';
24
- import './utils/epoch.js';
25
-
26
- const log = new Logger("waku:credentials");
27
- /**
28
- * Manages credentials for RLN
29
- * This is a lightweight implementation of the RLN contract that doesn't require Zerokit
30
- * It is used to register membership and generate identity credentials
31
- */
32
- class RLNCredentialsManager {
33
- started = false;
34
- starting = false;
35
- _contract;
36
- _signer;
37
- keystore = Keystore.create();
38
- _credentials;
39
- zerokit;
40
- constructor(zerokit) {
41
- log.info("RLNCredentialsManager initialized");
42
- this.zerokit = zerokit;
43
- }
44
- get contract() {
45
- return this._contract;
46
- }
47
- set contract(contract) {
48
- this._contract = contract;
49
- }
50
- get signer() {
51
- return this._signer;
52
- }
53
- set signer(signer) {
54
- this._signer = signer;
55
- }
56
- get credentials() {
57
- return this._credentials;
58
- }
59
- set credentials(credentials) {
60
- this._credentials = credentials;
61
- }
62
- get provider() {
63
- return this.contract?.provider;
64
- }
65
- async start(options = {}) {
66
- if (this.started || this.starting) {
67
- log.info("RLNCredentialsManager already started or starting");
68
- return;
69
- }
70
- log.info("Starting RLNCredentialsManager");
71
- this.starting = true;
72
- try {
73
- const { credentials, keystore } = await RLNCredentialsManager.decryptCredentialsIfNeeded(options.credentials);
74
- if (credentials) {
75
- log.info("Credentials successfully decrypted");
76
- }
77
- const { signer, address, rateLimit } = await this.determineStartOptions(options, credentials);
78
- log.info(`Using contract address: ${address}`);
79
- if (keystore) {
80
- this.keystore = keystore;
81
- log.info("Using provided keystore");
82
- }
83
- this._credentials = credentials;
84
- this._signer = signer;
85
- this._contract = new RLNBaseContract({
86
- address: address,
87
- signer: signer,
88
- rateLimit: rateLimit ?? this.zerokit?.getRateLimit
89
- });
90
- log.info("RLNCredentialsManager successfully started");
91
- this.started = true;
92
- }
93
- catch (error) {
94
- log.error("Failed to start RLNCredentialsManager", error);
95
- throw error;
96
- }
97
- finally {
98
- this.starting = false;
99
- }
100
- }
101
- async registerMembership(options) {
102
- if (!this.contract) {
103
- log.error("RLN Contract is not initialized");
104
- throw Error("RLN Contract is not initialized.");
105
- }
106
- log.info("Registering membership");
107
- let identity = "identity" in options && options.identity;
108
- if ("signature" in options) {
109
- log.info("Generating identity from signature");
110
- if (this.zerokit) {
111
- log.info("Using Zerokit to generate identity");
112
- identity = this.zerokit.generateSeededIdentityCredential(options.signature);
113
- }
114
- else {
115
- log.info("Using local implementation to generate identity");
116
- identity = this.generateSeededIdentityCredential(options.signature);
117
- }
118
- }
119
- if (!identity) {
120
- log.error("Missing signature or identity to register membership");
121
- throw Error("Missing signature or identity to register membership.");
122
- }
123
- log.info("Registering identity with contract");
124
- return this.contract.registerWithIdentity(identity);
125
- }
126
- /**
127
- * Changes credentials in use by relying on provided Keystore earlier in rln.start
128
- * @param id: string, hash of credentials to select from Keystore
129
- * @param password: string or bytes to use to decrypt credentials from Keystore
130
- */
131
- async useCredentials(id, password) {
132
- log.info(`Attempting to use credentials with ID: ${id}`);
133
- this._credentials = await this.keystore?.readCredential(id, password);
134
- if (this._credentials) {
135
- log.info("Successfully loaded credentials");
136
- }
137
- else {
138
- log.warn("Failed to load credentials");
139
- }
140
- }
141
- async determineStartOptions(options, credentials) {
142
- let chainId = credentials?.membership.chainId;
143
- const address = credentials?.membership.address ||
144
- options.address ||
145
- LINEA_CONTRACT.address;
146
- if (address === LINEA_CONTRACT.address) {
147
- chainId = LINEA_CONTRACT.chainId;
148
- log.info(`Using Linea contract with chainId: ${chainId}`);
149
- }
150
- const signer = options.signer || (await extractMetaMaskSigner());
151
- const currentChainId = await signer.getChainId();
152
- log.info(`Current chain ID: ${currentChainId}`);
153
- if (chainId && chainId !== currentChainId.toString()) {
154
- log.error(`Chain ID mismatch: contract=${chainId}, current=${currentChainId}`);
155
- throw Error(`Failed to start RLN contract, chain ID of contract is different from current one: contract-${chainId}, current network-${currentChainId}`);
156
- }
157
- return {
158
- signer,
159
- address
160
- };
161
- }
162
- static async decryptCredentialsIfNeeded(credentials) {
163
- if (!credentials) {
164
- log.info("No credentials provided");
165
- return {};
166
- }
167
- if ("identity" in credentials) {
168
- log.info("Using already decrypted credentials");
169
- return { credentials };
170
- }
171
- log.info("Attempting to decrypt credentials");
172
- const keystore = Keystore.fromString(credentials.keystore);
173
- if (!keystore) {
174
- log.warn("Failed to create keystore from string");
175
- return {};
176
- }
177
- try {
178
- const decryptedCredentials = await keystore.readCredential(credentials.id, credentials.password);
179
- log.info(`Successfully decrypted credentials with ID: ${credentials.id}`);
180
- return {
181
- keystore,
182
- credentials: decryptedCredentials
183
- };
184
- }
185
- catch (error) {
186
- log.error("Failed to decrypt credentials", error);
187
- throw error;
188
- }
189
- }
190
- async verifyCredentialsAgainstContract(credentials) {
191
- if (!this.contract) {
192
- throw Error("Failed to verify chain coordinates: no contract initialized.");
193
- }
194
- const registryAddress = credentials.membership.address;
195
- const currentRegistryAddress = this.contract.address;
196
- if (registryAddress !== currentRegistryAddress) {
197
- throw Error(`Failed to verify chain coordinates: credentials contract address=${registryAddress} is not equal to registryContract address=${currentRegistryAddress}`);
198
- }
199
- const chainId = credentials.membership.chainId;
200
- const network = await this.contract.provider.getNetwork();
201
- const currentChainId = network.chainId;
202
- if (chainId !== currentChainId.toString()) {
203
- throw Error(`Failed to verify chain coordinates: credentials chainID=${chainId} is not equal to registryContract chainID=${currentChainId}`);
204
- }
205
- }
206
- /**
207
- * Generates an identity credential from a seed string
208
- * This is a pure implementation that doesn't rely on Zerokit
209
- * @param seed A string seed to generate the identity from
210
- * @returns IdentityCredential
211
- */
212
- generateSeededIdentityCredential(seed) {
213
- log.info("Generating seeded identity credential");
214
- // Convert the seed to bytes
215
- const encoder = new TextEncoder();
216
- const seedBytes = encoder.encode(seed);
217
- // Generate deterministic values using HMAC-SHA256
218
- // We use different context strings for each component to ensure they're different
219
- const idTrapdoor = hmac(sha256, seedBytes, encoder.encode("IDTrapdoor"));
220
- const idNullifier = hmac(sha256, seedBytes, encoder.encode("IDNullifier"));
221
- // Generate IDSecretHash as a hash of IDTrapdoor and IDNullifier
222
- const combinedBytes = new Uint8Array([...idTrapdoor, ...idNullifier]);
223
- const idSecretHash = sha256(combinedBytes);
224
- // Generate IDCommitment as a hash of IDSecretHash
225
- const idCommitment = sha256(idSecretHash);
226
- // Convert IDCommitment to BigInt
227
- const idCommitmentBigInt = buildBigIntFromUint8Array(idCommitment);
228
- log.info("Successfully generated identity credential");
229
- return new IdentityCredential(idTrapdoor, idNullifier, idSecretHash, idCommitment, idCommitmentBigInt);
230
- }
231
- }
232
-
233
- export { RLNCredentialsManager };
@@ -1,43 +0,0 @@
1
- function number(n) {
2
- if (!Number.isSafeInteger(n) || n < 0)
3
- throw new Error(`Wrong positive integer: ${n}`);
4
- }
5
- function bool(b) {
6
- if (typeof b !== 'boolean')
7
- throw new Error(`Expected boolean, not ${b}`);
8
- }
9
- function bytes(b, ...lengths) {
10
- if (!(b instanceof Uint8Array))
11
- throw new TypeError('Expected Uint8Array');
12
- if (lengths.length > 0 && !lengths.includes(b.length))
13
- throw new TypeError(`Expected Uint8Array of length ${lengths}, not of length=${b.length}`);
14
- }
15
- function hash(hash) {
16
- if (typeof hash !== 'function' || typeof hash.create !== 'function')
17
- throw new Error('Hash should be wrapped by utils.wrapConstructor');
18
- number(hash.outputLen);
19
- number(hash.blockLen);
20
- }
21
- function exists(instance, checkFinished = true) {
22
- if (instance.destroyed)
23
- throw new Error('Hash instance has been destroyed');
24
- if (checkFinished && instance.finished)
25
- throw new Error('Hash#digest() has already been called');
26
- }
27
- function output(out, instance) {
28
- bytes(out);
29
- const min = instance.outputLen;
30
- if (out.length < min) {
31
- throw new Error(`digestInto() expects output buffer of length at least ${min}`);
32
- }
33
- }
34
- const assert = {
35
- number,
36
- bool,
37
- bytes,
38
- hash,
39
- exists,
40
- output,
41
- };
42
-
43
- export { bool, bytes, assert as default, exists, hash, number, output };
@@ -1,116 +0,0 @@
1
- import assert from './_assert.js';
2
- import { Hash, createView, toBytes } from './utils.js';
3
-
4
- // Polyfill for Safari 14
5
- function setBigUint64(view, byteOffset, value, isLE) {
6
- if (typeof view.setBigUint64 === 'function')
7
- return view.setBigUint64(byteOffset, value, isLE);
8
- const _32n = BigInt(32);
9
- const _u32_max = BigInt(0xffffffff);
10
- const wh = Number((value >> _32n) & _u32_max);
11
- const wl = Number(value & _u32_max);
12
- const h = isLE ? 4 : 0;
13
- const l = isLE ? 0 : 4;
14
- view.setUint32(byteOffset + h, wh, isLE);
15
- view.setUint32(byteOffset + l, wl, isLE);
16
- }
17
- // Base SHA2 class (RFC 6234)
18
- class SHA2 extends Hash {
19
- constructor(blockLen, outputLen, padOffset, isLE) {
20
- super();
21
- this.blockLen = blockLen;
22
- this.outputLen = outputLen;
23
- this.padOffset = padOffset;
24
- this.isLE = isLE;
25
- this.finished = false;
26
- this.length = 0;
27
- this.pos = 0;
28
- this.destroyed = false;
29
- this.buffer = new Uint8Array(blockLen);
30
- this.view = createView(this.buffer);
31
- }
32
- update(data) {
33
- assert.exists(this);
34
- const { view, buffer, blockLen } = this;
35
- data = toBytes(data);
36
- const len = data.length;
37
- for (let pos = 0; pos < len;) {
38
- const take = Math.min(blockLen - this.pos, len - pos);
39
- // Fast path: we have at least one block in input, cast it to view and process
40
- if (take === blockLen) {
41
- const dataView = createView(data);
42
- for (; blockLen <= len - pos; pos += blockLen)
43
- this.process(dataView, pos);
44
- continue;
45
- }
46
- buffer.set(data.subarray(pos, pos + take), this.pos);
47
- this.pos += take;
48
- pos += take;
49
- if (this.pos === blockLen) {
50
- this.process(view, 0);
51
- this.pos = 0;
52
- }
53
- }
54
- this.length += data.length;
55
- this.roundClean();
56
- return this;
57
- }
58
- digestInto(out) {
59
- assert.exists(this);
60
- assert.output(out, this);
61
- this.finished = true;
62
- // Padding
63
- // We can avoid allocation of buffer for padding completely if it
64
- // was previously not allocated here. But it won't change performance.
65
- const { buffer, view, blockLen, isLE } = this;
66
- let { pos } = this;
67
- // append the bit '1' to the message
68
- buffer[pos++] = 0b10000000;
69
- this.buffer.subarray(pos).fill(0);
70
- // we have less than padOffset left in buffer, so we cannot put length in current block, need process it and pad again
71
- if (this.padOffset > blockLen - pos) {
72
- this.process(view, 0);
73
- pos = 0;
74
- }
75
- // Pad until full block byte with zeros
76
- for (let i = pos; i < blockLen; i++)
77
- buffer[i] = 0;
78
- // Note: sha512 requires length to be 128bit integer, but length in JS will overflow before that
79
- // You need to write around 2 exabytes (u64_max / 8 / (1024**6)) for this to happen.
80
- // So we just write lowest 64 bits of that value.
81
- setBigUint64(view, blockLen - 8, BigInt(this.length * 8), isLE);
82
- this.process(view, 0);
83
- const oview = createView(out);
84
- const len = this.outputLen;
85
- // NOTE: we do division by 4 later, which should be fused in single op with modulo by JIT
86
- if (len % 4)
87
- throw new Error('_sha2: outputLen should be aligned to 32bit');
88
- const outLen = len / 4;
89
- const state = this.get();
90
- if (outLen > state.length)
91
- throw new Error('_sha2: outputLen bigger than state');
92
- for (let i = 0; i < outLen; i++)
93
- oview.setUint32(4 * i, state[i], isLE);
94
- }
95
- digest() {
96
- const { buffer, outputLen } = this;
97
- this.digestInto(buffer);
98
- const res = buffer.slice(0, outputLen);
99
- this.destroy();
100
- return res;
101
- }
102
- _cloneInto(to) {
103
- to || (to = new this.constructor());
104
- to.set(...this.get());
105
- const { blockLen, buffer, length, finished, destroyed, pos } = this;
106
- to.length = length;
107
- to.pos = pos;
108
- to.finished = finished;
109
- to.destroyed = destroyed;
110
- if (length % blockLen)
111
- to.buffer.set(buffer);
112
- return to;
113
- }
114
- }
115
-
116
- export { SHA2 };
@@ -1,79 +0,0 @@
1
- import assert from './_assert.js';
2
- import { Hash, toBytes } from './utils.js';
3
-
4
- // HMAC (RFC 2104)
5
- class HMAC extends Hash {
6
- constructor(hash, _key) {
7
- super();
8
- this.finished = false;
9
- this.destroyed = false;
10
- assert.hash(hash);
11
- const key = toBytes(_key);
12
- this.iHash = hash.create();
13
- if (typeof this.iHash.update !== 'function')
14
- throw new TypeError('Expected instance of class which extends utils.Hash');
15
- this.blockLen = this.iHash.blockLen;
16
- this.outputLen = this.iHash.outputLen;
17
- const blockLen = this.blockLen;
18
- const pad = new Uint8Array(blockLen);
19
- // blockLen can be bigger than outputLen
20
- pad.set(key.length > blockLen ? hash.create().update(key).digest() : key);
21
- for (let i = 0; i < pad.length; i++)
22
- pad[i] ^= 0x36;
23
- this.iHash.update(pad);
24
- // By doing update (processing of first block) of outer hash here we can re-use it between multiple calls via clone
25
- this.oHash = hash.create();
26
- // Undo internal XOR && apply outer XOR
27
- for (let i = 0; i < pad.length; i++)
28
- pad[i] ^= 0x36 ^ 0x5c;
29
- this.oHash.update(pad);
30
- pad.fill(0);
31
- }
32
- update(buf) {
33
- assert.exists(this);
34
- this.iHash.update(buf);
35
- return this;
36
- }
37
- digestInto(out) {
38
- assert.exists(this);
39
- assert.bytes(out, this.outputLen);
40
- this.finished = true;
41
- this.iHash.digestInto(out);
42
- this.oHash.update(out);
43
- this.oHash.digestInto(out);
44
- this.destroy();
45
- }
46
- digest() {
47
- const out = new Uint8Array(this.oHash.outputLen);
48
- this.digestInto(out);
49
- return out;
50
- }
51
- _cloneInto(to) {
52
- // Create new instance without calling constructor since key already in state and we don't know it.
53
- to || (to = Object.create(Object.getPrototypeOf(this), {}));
54
- const { oHash, iHash, finished, destroyed, blockLen, outputLen } = this;
55
- to = to;
56
- to.finished = finished;
57
- to.destroyed = destroyed;
58
- to.blockLen = blockLen;
59
- to.outputLen = outputLen;
60
- to.oHash = oHash._cloneInto(to.oHash);
61
- to.iHash = iHash._cloneInto(to.iHash);
62
- return to;
63
- }
64
- destroy() {
65
- this.destroyed = true;
66
- this.oHash.destroy();
67
- this.iHash.destroy();
68
- }
69
- }
70
- /**
71
- * HMAC: RFC2104 message authentication code.
72
- * @param hash - function that would be used e.g. sha256
73
- * @param key - message key
74
- * @param message - message data
75
- */
76
- const hmac = (hash, key, message) => new HMAC(hash, key).update(message).digest();
77
- hmac.create = (hash, key) => new HMAC(hash, key);
78
-
79
- export { hmac };
@@ -1,126 +0,0 @@
1
- import { SHA2 } from './_sha2.js';
2
- import { wrapConstructor, rotr } from './utils.js';
3
-
4
- // Choice: a ? b : c
5
- const Chi = (a, b, c) => (a & b) ^ (~a & c);
6
- // Majority function, true if any two inpust is true
7
- const Maj = (a, b, c) => (a & b) ^ (a & c) ^ (b & c);
8
- // Round constants:
9
- // first 32 bits of the fractional parts of the cube roots of the first 64 primes 2..311)
10
- // prettier-ignore
11
- const SHA256_K = new Uint32Array([
12
- 0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
13
- 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
14
- 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
15
- 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
16
- 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
17
- 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
18
- 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
19
- 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
20
- ]);
21
- // Initial state (first 32 bits of the fractional parts of the square roots of the first 8 primes 2..19):
22
- // prettier-ignore
23
- const IV = new Uint32Array([
24
- 0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19
25
- ]);
26
- // Temporary buffer, not used to store anything between runs
27
- // Named this way because it matches specification.
28
- const SHA256_W = new Uint32Array(64);
29
- class SHA256 extends SHA2 {
30
- constructor() {
31
- super(64, 32, 8, false);
32
- // We cannot use array here since array allows indexing by variable
33
- // which means optimizer/compiler cannot use registers.
34
- this.A = IV[0] | 0;
35
- this.B = IV[1] | 0;
36
- this.C = IV[2] | 0;
37
- this.D = IV[3] | 0;
38
- this.E = IV[4] | 0;
39
- this.F = IV[5] | 0;
40
- this.G = IV[6] | 0;
41
- this.H = IV[7] | 0;
42
- }
43
- get() {
44
- const { A, B, C, D, E, F, G, H } = this;
45
- return [A, B, C, D, E, F, G, H];
46
- }
47
- // prettier-ignore
48
- set(A, B, C, D, E, F, G, H) {
49
- this.A = A | 0;
50
- this.B = B | 0;
51
- this.C = C | 0;
52
- this.D = D | 0;
53
- this.E = E | 0;
54
- this.F = F | 0;
55
- this.G = G | 0;
56
- this.H = H | 0;
57
- }
58
- process(view, offset) {
59
- // Extend the first 16 words into the remaining 48 words w[16..63] of the message schedule array
60
- for (let i = 0; i < 16; i++, offset += 4)
61
- SHA256_W[i] = view.getUint32(offset, false);
62
- for (let i = 16; i < 64; i++) {
63
- const W15 = SHA256_W[i - 15];
64
- const W2 = SHA256_W[i - 2];
65
- const s0 = rotr(W15, 7) ^ rotr(W15, 18) ^ (W15 >>> 3);
66
- const s1 = rotr(W2, 17) ^ rotr(W2, 19) ^ (W2 >>> 10);
67
- SHA256_W[i] = (s1 + SHA256_W[i - 7] + s0 + SHA256_W[i - 16]) | 0;
68
- }
69
- // Compression function main loop, 64 rounds
70
- let { A, B, C, D, E, F, G, H } = this;
71
- for (let i = 0; i < 64; i++) {
72
- const sigma1 = rotr(E, 6) ^ rotr(E, 11) ^ rotr(E, 25);
73
- const T1 = (H + sigma1 + Chi(E, F, G) + SHA256_K[i] + SHA256_W[i]) | 0;
74
- const sigma0 = rotr(A, 2) ^ rotr(A, 13) ^ rotr(A, 22);
75
- const T2 = (sigma0 + Maj(A, B, C)) | 0;
76
- H = G;
77
- G = F;
78
- F = E;
79
- E = (D + T1) | 0;
80
- D = C;
81
- C = B;
82
- B = A;
83
- A = (T1 + T2) | 0;
84
- }
85
- // Add the compressed chunk to the current hash value
86
- A = (A + this.A) | 0;
87
- B = (B + this.B) | 0;
88
- C = (C + this.C) | 0;
89
- D = (D + this.D) | 0;
90
- E = (E + this.E) | 0;
91
- F = (F + this.F) | 0;
92
- G = (G + this.G) | 0;
93
- H = (H + this.H) | 0;
94
- this.set(A, B, C, D, E, F, G, H);
95
- }
96
- roundClean() {
97
- SHA256_W.fill(0);
98
- }
99
- destroy() {
100
- this.set(0, 0, 0, 0, 0, 0, 0, 0);
101
- this.buffer.fill(0);
102
- }
103
- }
104
- // Constants from https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf
105
- class SHA224 extends SHA256 {
106
- constructor() {
107
- super();
108
- this.A = 0xc1059ed8 | 0;
109
- this.B = 0x367cd507 | 0;
110
- this.C = 0x3070dd17 | 0;
111
- this.D = 0xf70e5939 | 0;
112
- this.E = 0xffc00b31 | 0;
113
- this.F = 0x68581511 | 0;
114
- this.G = 0x64f98fa7 | 0;
115
- this.H = 0xbefa4fa4 | 0;
116
- this.outputLen = 28;
117
- }
118
- }
119
- /**
120
- * SHA2-256 hash function
121
- * @param message - data that would be hashed
122
- */
123
- const sha256 = wrapConstructor(() => new SHA256());
124
- wrapConstructor(() => new SHA224());
125
-
126
- export { sha256 };
@@ -1,43 +0,0 @@
1
- /*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */
2
- // The import here is via the package name. This is to ensure
3
- // that exports mapping/resolution does fall into place.
4
- // Cast array to view
5
- const createView = (arr) => new DataView(arr.buffer, arr.byteOffset, arr.byteLength);
6
- // The rotate right (circular right shift) operation for uint32
7
- const rotr = (word, shift) => (word << (32 - shift)) | (word >>> shift);
8
- const isLE = new Uint8Array(new Uint32Array([0x11223344]).buffer)[0] === 0x44;
9
- // There is almost no big endian hardware, but js typed arrays uses platform specific endianness.
10
- // So, just to be sure not to corrupt anything.
11
- if (!isLE)
12
- throw new Error('Non little-endian hardware is not supported');
13
- Array.from({ length: 256 }, (v, i) => i.toString(16).padStart(2, '0'));
14
- function utf8ToBytes(str) {
15
- if (typeof str !== 'string') {
16
- throw new TypeError(`utf8ToBytes expected string, got ${typeof str}`);
17
- }
18
- return new TextEncoder().encode(str);
19
- }
20
- function toBytes(data) {
21
- if (typeof data === 'string')
22
- data = utf8ToBytes(data);
23
- if (!(data instanceof Uint8Array))
24
- throw new TypeError(`Expected input type is Uint8Array (got ${typeof data})`);
25
- return data;
26
- }
27
- // For runtime check if class implements interface
28
- class Hash {
29
- // Safe version that clones internal state
30
- clone() {
31
- return this._cloneInto();
32
- }
33
- }
34
- function wrapConstructor(hashConstructor) {
35
- const hashC = (message) => hashConstructor().update(toBytes(message)).digest();
36
- const tmp = hashConstructor();
37
- hashC.outputLen = tmp.outputLen;
38
- hashC.blockLen = tmp.blockLen;
39
- hashC.create = () => hashConstructor();
40
- return hashC;
41
- }
42
-
43
- export { Hash, createView, isLE, rotr, toBytes, utf8ToBytes, wrapConstructor };